deleted file mode 100644
@@ -1,49 +0,0 @@
-From 82d28b1be73bbc00e73e59d0c59c51a1e76519a5 Mon Sep 17 00:00:00 2001
-From: Simo Sorce <simo@redhat.com>
-Date: Mon, 27 Apr 2026 17:49:56 -0400
-Subject: [PATCH] Add const qualifiers to OpenSSL X509 pointers
-
-Added const qualifiers to the X509_NAME and X509_NAME_ENTRY pointers when
-retrieving subject and issuer names from TLS certificates. This ensures const-
-correctness and maintains compatibility with newer OpenSSL versions, which
-return const pointers from these getter functions.
-
-Signed-off-by: Simo Sorce <simo@redhat.com>
-
-Upstream-Status: Submitted [https://gitlab.isc.org/isc-projects/kea/-/issues/4673]
-Signed-off-by: Jaipaul Cheernam <jaipaul.cheernam@est.tech>
----
- src/lib/asiolink/openssl_tls.h | 8 ++++----
- 1 file changed, 4 insertions(+), 4 deletions(-)
-
-diff --git a/src/lib/asiolink/openssl_tls.h b/src/lib/asiolink/openssl_tls.h
-index 57c3323..52a969b 100644
---- a/src/lib/asiolink/openssl_tls.h
-+++ b/src/lib/asiolink/openssl_tls.h
-@@ -175,9 +175,9 @@ public:
- if (!cert) {
- return ("");
- }
-- ::X509_NAME *name = ::X509_get_subject_name(cert);
-+ const ::X509_NAME *name = ::X509_get_subject_name(cert);
- int loc = ::X509_NAME_get_index_by_NID(name, NID_commonName, -1);
-- ::X509_NAME_ENTRY* ne = ::X509_NAME_get_entry(name, loc);
-+ const ::X509_NAME_ENTRY* ne = ::X509_NAME_get_entry(name, loc);
- if (!ne) {
- ::X509_free(cert);
- return ("");
-@@ -209,9 +209,9 @@ public:
- if (!cert) {
- return ("");
- }
-- ::X509_NAME *name = ::X509_get_issuer_name(cert);
-+ const ::X509_NAME *name = ::X509_get_issuer_name(cert);
- int loc = ::X509_NAME_get_index_by_NID(name, NID_commonName, -1);
-- ::X509_NAME_ENTRY* ne = ::X509_NAME_get_entry(name, loc);
-+ const ::X509_NAME_ENTRY* ne = ::X509_NAME_get_entry(name, loc);
- if (!ne) {
- ::X509_free(cert);
- return ("");
-2.53.0
-
@@ -1,4 +1,4 @@
-From 312f5b7e8286c306502bed348fe5da765c20f98d Mon Sep 17 00:00:00 2001
+From 8f832387e2e31683dca5df092c464ad655a417d2 Mon Sep 17 00:00:00 2001
From: Khem Raj <raj.khem@gmail.com>
Date: Thu, 28 Aug 2025 17:02:49 -0700
Subject: [PATCH] meson: use a runtime-safe interpreter string
@@ -44,10 +44,10 @@ index 5fc5ee9..6485ce2 100644
if PDFLATEX.found()
doc_conf.set('HAVE_PDFLATEX', 'yes')
diff --git a/meson.build b/meson.build
-index f3ef0ea..11a41cf 100644
+index 4e9ce4b..3cd8987 100644
--- a/meson.build
+++ b/meson.build
-@@ -648,9 +648,13 @@ link_args = []
+@@ -655,9 +655,13 @@ link_args = []
# Also, Meson might use it by default, but might not use it on all systems, so lots of variables...
# EXECUTABLE_RPATH = f'$ORIGIN/../@LIBDIR@'
# HOOK_RPATH = '$ORIGIN/../..'
@@ -62,7 +62,7 @@ index f3ef0ea..11a41cf 100644
# Add rpaths for NETCONF dependencies.
if NETCONF_DEP.found()
-@@ -769,7 +773,13 @@ report_conf_data.set('CXX_ARGS', ' '.join(compile_args))
+@@ -776,7 +780,13 @@ report_conf_data.set('CXX_ARGS', ' '.join(compile_args))
report_conf_data.set('LD_ID', cpp.get_linker_id())
link_args += get_option('cpp_link_args')
report_conf_data.set('LD_ARGS', ' '.join(link_args))
@@ -1,4 +1,4 @@
-From 97599e59234b8d79748eb7b1cdd451c91e94152f Mon Sep 17 00:00:00 2001
+From 9389b17972f09a6629d5a5fe5d869df6614c3109 Mon Sep 17 00:00:00 2001
From: Khem Raj <raj.khem@gmail.com>
Date: Thu, 28 Aug 2025 17:31:39 -0700
Subject: [PATCH] mk_cfgrpt.sh: strip prefixes
@@ -1,4 +1,4 @@
-From 39281b6199b1307b6b70f3163a70ab9ce4f445d0 Mon Sep 17 00:00:00 2001
+From 98e5871081dec4953d7f92992a8167feb4fe8fa1 Mon Sep 17 00:00:00 2001
From: Alexander Kanavin <alex.kanavin@gmail.com>
Date: Tue, 10 Nov 2020 15:57:03 +0000
Subject: [PATCH] src/lib/log/logger_unittest_support.cc: do not write build
@@ -1,4 +1,4 @@
-From 5180d1866b99125d3353f76151e84644a5791e3d Mon Sep 17 00:00:00 2001
+From 414842987006bf8f1b6e447901360c230966a908 Mon Sep 17 00:00:00 2001
From: Kai Kang <kai.kang@windriver.com>
Date: Tue, 14 Oct 2025 01:37:35 +0000
Subject: [PATCH] There are conflict of config files between kea and lib32-kea:
similarity index 96%
rename from meta/recipes-connectivity/kea/kea_3.2.0.bb
rename to meta/recipes-connectivity/kea/kea_3.2.1.bb
@@ -19,9 +19,8 @@ SRC_URI = "http://ftp.isc.org/isc/kea/${PV}/${BP}.tar.xz \
file://0001-src-lib-log-logger_unittest_support.cc-do-not-write-.patch \
file://0001-meson-use-a-runtime-safe-interpreter-string.patch \
file://0001-mk_cfgrpt.sh-strip-prefixes.patch \
- file://0001-Add-const-qualifiers-to-OpenSSL-X509-pointers.patch \
"
-SRC_URI[sha256sum] = "14bf695d37b65b9b1bf550fea5d0adaf9806c50e5419ef2a176a4b8e9aade3df"
+SRC_URI[sha256sum] = "3478220be62b3aa361a2c7f97d5d2989b934f7864e82d4bd17056e1e208b9735"
inherit meson pkgconfig systemd update-rc.d upstream-version-is-even python3-dir
ReleaseNotes: https://gitlab.isc.org/isc-projects/kea/-/wikis/Release-Notes/release-notes-3.2.1 The following summarizes the changes since the previous release: ``` 2511. [bug] tmark Related name change requests (NCRs), are now sent by kea-dhcp4 and kea-dhcp6 in a single message to kea-dhcp-ddns. This ensures that kea-dhcp-ddns processes them in the order they were received. (Gitlab #4806, #3005) 2510. [bug] tmark Modified kea-dhcp-ddns to avoid starting a transaction for a request if there is already a transaction for the request's FQDN or ip address. Prior to this it used the DHCID to guard against concurrent work. (Gitlab #4805,#4585) 2509. [func] tmark Modified kea-dhcp4 and kea-dhcp6 to avoid scheduling unnecessary DDNS entry removals when renewing leases. (Gitlab #4804, #4794) 2508. [bug] fdupont Made lexical analyzers more robust with null characters in input, e.g. in server or agent configuration files. (Gitlab #4795,#4739) 2507. [build] fdupont Added OpenSSL 4.0.x support. (Gitlab #4756, #4673) 2506. [bug] tmark Improved handling of special characters in values written to memfile lease database. (Gitlab #4787, #4393) 2505. [bug] razvan, fdupont Fixed bugs related to out of bound container access which can cause Kea to crash if -D_GLIBCXX_ASSERTIONS flag is used at compilation time. This affected perfdhcp, host_cache hook library, kea-dhcp4, kea-dhcp6, kea-dhcp-ddns and kea-netconf. Thank you to Joseph Bisch (joseph.bisch@gmail.com) for reporting this issue. (Gitlab #4783,#4741,#4708) 2504. [bug] fdupont Made parsing of DHCPv6 relayed messages stricter: now truncated RELAY-FORW and RELAY-REPLY headers cause the whole message to be dropped. Thank you to Qifan Zhang from Palo Alto Networks for reporting the issue. (Gitlab #4752,#4560,#4735) 2503. [bug] fdupont Set the broadcast flag in DHCPNAK responses to relayed DHCPREQUEST queries as required by RFC 2131 4.3.2. Thank you to Florian Krieger from Frauscher Sensor Technology Group GmbH for reporting the issue. (Gitlab #4751,#4424) 2502. [bug] razvan,tmark Corrected MLM_MYSQL_FETCH_FAILURE to 1 so MySQL selectQuery and host lookups detect mysql_stmt_fetch errors instead of silently ignoring them. (Gitlab #4754,#4658) 2501. [bug] fdupont,tmark Fixed an issue in debug-level logging of dropped packets that could cause the server to crash under heavy load. Applies to both kea-dhcp4 and kea-dhcp6. (Gitlab #4750,#4755,#4719,#4748) 2500. [bug] fdupont,tmark Removed spurious DHCP_RECEIVE4_UNKNOWN and DHCP_RECEIVE6_UNKNOWN warnings sent for instance when a command is received. This bug was introduced in 3.2.0 release. (Gitlab #4749, #4674) 2499. [build] razvan The library version numbers have been bumped up for the Kea 3.2.1 stable release. (Gitlab #4811) 2498. [bug] tmark Improved handling of special characters in values written to memfile lease database. (Gitlab #4787,#4393) - Drop 0001-Add-const-qualifiers-to-OpenSSL-X509-pointers.patch as change is part of release - Refresh the existing patches Signed-off-by: Jaipaul Cheernam <jaipaul.cheernam@est.tech> --- ...-qualifiers-to-OpenSSL-X509-pointers.patch | 49 ------------------- ...se-a-runtime-safe-interpreter-string.patch | 8 +-- .../0001-mk_cfgrpt.sh-strip-prefixes.patch | 2 +- ...er_unittest_support.cc-do-not-write-.patch | 2 +- .../kea/files/fix-multilib-conflict.patch | 2 +- .../kea/{kea_3.2.0.bb => kea_3.2.1.bb} | 3 +- 6 files changed, 8 insertions(+), 58 deletions(-) delete mode 100644 meta/recipes-connectivity/kea/files/0001-Add-const-qualifiers-to-OpenSSL-X509-pointers.patch rename meta/recipes-connectivity/kea/{kea_3.2.0.bb => kea_3.2.1.bb} (96%)