Quote:
Originally Posted by newman
Understood. Reasonable approach.
When it comes to TLS the TLS-enabling part happened in the gnutls library. Do a diff of gnutls sources from a 3.4 to 3.4.2 FW releases of Amazon-released sources. There you'll find a one-liner change. If you're able to build the newer gnutls, it may be sufficient to replace the stock gnutls libs with the custom ones. Or you could extract patches all the way to 3.4.2 and apply them to the gnutls libs (if there are problems with linking apply patches to more components... you could even apply all the patches locally to your rootfs image, keep a backup though  , and add the results selectively...).
|
???
That says you have the binary you are starting with and the binary you want to reach -
So why not just bsdiff the two (skipping any incrementals) and apply (bspatch) that?