Compare commits
3 Commits
OpenSSL_1_
...
AFTER_COMP
| Author | SHA1 | Date | |
|---|---|---|---|
|
a13ec6774d | ||
|
|
77e2de7ea7 | ||
|
|
606efc54e6 |
15
.cvsignore
Normal file
15
.cvsignore
Normal file
@@ -0,0 +1,15 @@
|
|||||||
|
Makefile.ssl
|
||||||
|
MINFO
|
||||||
|
makefile.one
|
||||||
|
tmp
|
||||||
|
out
|
||||||
|
outinc
|
||||||
|
rehash.time
|
||||||
|
testlog
|
||||||
|
make.log
|
||||||
|
maketest.log
|
||||||
|
cctest
|
||||||
|
cctest.c
|
||||||
|
cctest.a
|
||||||
|
libcrypto.so.*
|
||||||
|
libssl.so.*
|
||||||
140
.gitignore
vendored
140
.gitignore
vendored
@@ -1,140 +0,0 @@
|
|||||||
# Object files
|
|
||||||
*.o
|
|
||||||
*.obj
|
|
||||||
|
|
||||||
# editor artefacts
|
|
||||||
*.swp
|
|
||||||
.#*
|
|
||||||
\#*#
|
|
||||||
*~
|
|
||||||
/.dir-locals.el
|
|
||||||
|
|
||||||
# Top level excludes
|
|
||||||
/Makefile.orig
|
|
||||||
/MINFO
|
|
||||||
/TABLE
|
|
||||||
/*.a
|
|
||||||
/*.pc
|
|
||||||
/rehash.time
|
|
||||||
/inc.*
|
|
||||||
/makefile.*
|
|
||||||
/out.*
|
|
||||||
/tmp.*
|
|
||||||
/configdata.pm
|
|
||||||
|
|
||||||
# *all* Makefiles
|
|
||||||
Makefile
|
|
||||||
|
|
||||||
/test/*.ss
|
|
||||||
/test/*.srl
|
|
||||||
/test/.rnd
|
|
||||||
/test/test*.pem
|
|
||||||
/test/newkey.pem
|
|
||||||
/test/*.log
|
|
||||||
|
|
||||||
# Certificate symbolic links
|
|
||||||
*.0
|
|
||||||
|
|
||||||
# Links under apps
|
|
||||||
/apps/CA.pl
|
|
||||||
/apps/tsget
|
|
||||||
/apps/md4.c
|
|
||||||
|
|
||||||
|
|
||||||
# Auto generated headers
|
|
||||||
/crypto/buildinf.h
|
|
||||||
/crypto/include/internal/*_conf.h
|
|
||||||
/openssl/include/opensslconf.h
|
|
||||||
/util/domd
|
|
||||||
|
|
||||||
# Auto generated assembly language source files
|
|
||||||
*.s
|
|
||||||
!/crypto/*/asm/*.s
|
|
||||||
/crypto/arm*.S
|
|
||||||
/crypto/*/*.S
|
|
||||||
*.asm
|
|
||||||
!/crypto/*/asm/*.asm
|
|
||||||
|
|
||||||
# Executables
|
|
||||||
/apps/openssl
|
|
||||||
/test/sha256t
|
|
||||||
/test/sha512t
|
|
||||||
/test/gost2814789t
|
|
||||||
/test/ssltest_old
|
|
||||||
/test/*test
|
|
||||||
/test/fips_aesavs
|
|
||||||
/test/fips_desmovs
|
|
||||||
/test/fips_dhvs
|
|
||||||
/test/fips_drbgvs
|
|
||||||
/test/fips_dssvs
|
|
||||||
/test/fips_ecdhvs
|
|
||||||
/test/fips_ecdsavs
|
|
||||||
/test/fips_rngvs
|
|
||||||
/test/fips_test_suite
|
|
||||||
*.so*
|
|
||||||
*.dylib*
|
|
||||||
*.dll*
|
|
||||||
*.exe
|
|
||||||
# Exceptions
|
|
||||||
!/test/bctest
|
|
||||||
!/crypto/des/times/486-50.sol
|
|
||||||
|
|
||||||
# Misc auto generated files
|
|
||||||
/include/openssl/opensslconf.h
|
|
||||||
/tools/c_rehash
|
|
||||||
/crypto/**/lib
|
|
||||||
/engines/**/lib
|
|
||||||
/ssl/**/lib
|
|
||||||
Makefile.save
|
|
||||||
*.bak
|
|
||||||
/tags
|
|
||||||
/TAGS
|
|
||||||
cscope.*
|
|
||||||
*.d
|
|
||||||
/crypto.map
|
|
||||||
/ssl.map
|
|
||||||
|
|
||||||
# Windows
|
|
||||||
/tmp32
|
|
||||||
/tmp32.dbg
|
|
||||||
/tmp32dll
|
|
||||||
/tmp32dll.dbg
|
|
||||||
/out32
|
|
||||||
/out32.dbg
|
|
||||||
/out32dll
|
|
||||||
/out32dll.dbg
|
|
||||||
/inc32
|
|
||||||
/MINFO
|
|
||||||
/ms/.rnd
|
|
||||||
/ms/bcb.mak
|
|
||||||
/ms/libeay32.def
|
|
||||||
/ms/nt.mak
|
|
||||||
/ms/ntdll.mak
|
|
||||||
/ms/ssleay32.def
|
|
||||||
/ms/version32.rc
|
|
||||||
|
|
||||||
# Files created on other branches that are not held in git, and are not
|
|
||||||
# needed on this branch
|
|
||||||
/include/openssl/asn1_mac.h
|
|
||||||
/include/openssl/des_old.h
|
|
||||||
/include/openssl/fips.h
|
|
||||||
/include/openssl/fips_rand.h
|
|
||||||
/include/openssl/krb5_asn.h
|
|
||||||
/include/openssl/kssl.h
|
|
||||||
/include/openssl/pq_compat.h
|
|
||||||
/include/openssl/ssl23.h
|
|
||||||
/include/openssl/tmdiff.h
|
|
||||||
/include/openssl/ui_compat.h
|
|
||||||
/test/fips_aesavs.c
|
|
||||||
/test/fips_desmovs.c
|
|
||||||
/test/fips_dsatest.c
|
|
||||||
/test/fips_dssvs.c
|
|
||||||
/test/fips_hmactest.c
|
|
||||||
/test/fips_randtest.c
|
|
||||||
/test/fips_rngvs.c
|
|
||||||
/test/fips_rsagtest.c
|
|
||||||
/test/fips_rsastest.c
|
|
||||||
/test/fips_rsavtest.c
|
|
||||||
/test/fips_shatest.c
|
|
||||||
/test/fips_test_suite.c
|
|
||||||
/test/shatest.c
|
|
||||||
@@ -1,11 +0,0 @@
|
|||||||
#! /bin/sh
|
|
||||||
|
|
||||||
# $1 is expected to be $TRAVIS_OS_NAME
|
|
||||||
|
|
||||||
./Configure dist
|
|
||||||
if [ "$1" == osx ]; then
|
|
||||||
make NAME='_srcdist' TARFILE='_srcdist.tar' \
|
|
||||||
TAR_COMMAND='$(TAR) $(TARFLAGS) -cvf -' tar
|
|
||||||
else
|
|
||||||
make TARFILE='_srcdist.tar' NAME='_srcdist' dist
|
|
||||||
fi
|
|
||||||
105
.travis.yml
105
.travis.yml
@@ -1,105 +0,0 @@
|
|||||||
language: c
|
|
||||||
cache: ccache
|
|
||||||
|
|
||||||
addons:
|
|
||||||
apt:
|
|
||||||
packages:
|
|
||||||
- ccache
|
|
||||||
- clang-3.6
|
|
||||||
- gcc-5
|
|
||||||
- binutils-mingw-w64
|
|
||||||
- gcc-mingw-w64
|
|
||||||
- wine
|
|
||||||
sources:
|
|
||||||
- llvm-toolchain-precise-3.6
|
|
||||||
- ubuntu-toolchain-r-test
|
|
||||||
|
|
||||||
os:
|
|
||||||
- linux
|
|
||||||
- osx
|
|
||||||
|
|
||||||
compiler:
|
|
||||||
- clang
|
|
||||||
- gcc
|
|
||||||
|
|
||||||
env:
|
|
||||||
- CONFIG_OPTS=""
|
|
||||||
- CONFIG_OPTS="--debug no-shared enable-crypto-mdebug enable-rc5 enable-md2"
|
|
||||||
- CONFIG_OPTS="--strict-warnings no-shared" BUILDONLY="yes"
|
|
||||||
- CONFIG_OPTS="--classic no-shared" BUILDONLY="yes"
|
|
||||||
- CONFIG_OPTS="--classic" BUILDONLY="yes"
|
|
||||||
- CONFIG_OPTS="no-pic --strict-warnings" BUILDONLY="yes"
|
|
||||||
- CONFIG_OPTS="no-engine no-shared --strict-warnings" BUILDONLY="yes"
|
|
||||||
|
|
||||||
matrix:
|
|
||||||
include:
|
|
||||||
- os: linux
|
|
||||||
compiler: clang-3.6
|
|
||||||
env: CONFIG_OPTS="-fsanitize=address no-shared"
|
|
||||||
- os: linux
|
|
||||||
compiler: clang-3.6
|
|
||||||
env: CONFIG_OPTS="no-shared no-asm -fno-sanitize-recover -fsanitize=address -fsanitize=undefined enable-rc5 enable-md2 -fno-sanitize=alignment"
|
|
||||||
- os: linux
|
|
||||||
compiler: gcc-5
|
|
||||||
env: CONFIG_OPTS="no-shared -fsanitize=address"
|
|
||||||
- os: linux
|
|
||||||
compiler: gcc-5
|
|
||||||
env: CONFIG_OPTS="no-shared no-asm -fno-sanitize-recover -DPEDANTIC -fsanitize=address -fsanitize=undefined enable-rc5 enable-md2"
|
|
||||||
- os: linux
|
|
||||||
compiler: i686-w64-mingw32-gcc
|
|
||||||
env: CONFIG_OPTS="no-pic"
|
|
||||||
- os: linux
|
|
||||||
compiler: x86_64-w64-mingw32-gcc
|
|
||||||
env: CONFIG_OPTS="no-pic"
|
|
||||||
exclude:
|
|
||||||
- os: linux
|
|
||||||
compiler: clang
|
|
||||||
- os: osx
|
|
||||||
compiler: gcc
|
|
||||||
|
|
||||||
before_script:
|
|
||||||
- sh .travis-create-release.sh $TRAVIS_OS_NAME
|
|
||||||
- tar -xvzf _srcdist.tar.gz
|
|
||||||
- if echo "$CONFIG_OPTS" | grep -e "--classic" >/dev/null; then
|
|
||||||
srcdir=.;
|
|
||||||
cd _srcdist;
|
|
||||||
else
|
|
||||||
srcdir=../_srcdist;
|
|
||||||
mkdir _build;
|
|
||||||
cd _build;
|
|
||||||
fi
|
|
||||||
- if [ "$CC" == i686-w64-mingw32-gcc ]; then
|
|
||||||
export CROSS_COMPILE=${CC%%gcc}; unset CC;
|
|
||||||
$srcdir/Configure mingw $CONFIG_OPTS -Wno-pedantic-ms-format;
|
|
||||||
elif [ "$CC" == x86_64-w64-mingw32-gcc ]; then
|
|
||||||
export CROSS_COMPILE=${CC%%gcc}; unset CC;
|
|
||||||
$srcdir/Configure mingw64 $CONFIG_OPTS -Wno-pedantic-ms-format;
|
|
||||||
else
|
|
||||||
if which ccache >/dev/null && [ "$CC" != clang-3.6 ]; then
|
|
||||||
CC="ccache $CC";
|
|
||||||
fi;
|
|
||||||
$srcdir/config $CONFIG_OPTS;
|
|
||||||
fi
|
|
||||||
- cd ..
|
|
||||||
|
|
||||||
script:
|
|
||||||
- if echo "$CONFIG_OPTS" | grep -e "--classic" >/dev/null; then
|
|
||||||
cd _srcdist;
|
|
||||||
else
|
|
||||||
cd _build;
|
|
||||||
fi
|
|
||||||
- make
|
|
||||||
- if [ -z "$BUILDONLY" ]; then
|
|
||||||
if [ -n "$CROSS_COMPILE" ]; then
|
|
||||||
export EXE_SHELL="wine" WINEPREFIX=`pwd`;
|
|
||||||
fi;
|
|
||||||
HARNESS_VERBOSE=yes make test;
|
|
||||||
else
|
|
||||||
make build_tests;
|
|
||||||
fi
|
|
||||||
- cd ..
|
|
||||||
|
|
||||||
notifications:
|
|
||||||
email:
|
|
||||||
- openssl-commits@openssl.org
|
|
||||||
|
|
||||||
@@ -1,2 +0,0 @@
|
|||||||
Please https://www.openssl.org/community/thanks.html for the current
|
|
||||||
acknowledgements.
|
|
||||||
968
CHANGES.SSLeay
Normal file
968
CHANGES.SSLeay
Normal file
@@ -0,0 +1,968 @@
|
|||||||
|
This file contains the changes for the SSLeay library up to version
|
||||||
|
0.9.0b. For later changes, see the file "CHANGES".
|
||||||
|
|
||||||
|
SSLeay CHANGES
|
||||||
|
______________
|
||||||
|
|
||||||
|
Changes between 0.8.x and 0.9.0b
|
||||||
|
|
||||||
|
10-Apr-1998
|
||||||
|
|
||||||
|
I said the next version would go out at easter, and so it shall.
|
||||||
|
I expect a 0.9.1 will follow with portability fixes in the next few weeks.
|
||||||
|
|
||||||
|
This is a quick, meet the deadline. Look to ssl-users for comments on what
|
||||||
|
is new etc.
|
||||||
|
|
||||||
|
eric (about to go bushwalking for the 4 day easter break :-)
|
||||||
|
|
||||||
|
16-Mar-98
|
||||||
|
- Patch for Cray T90 from Wayne Schroeder <schroede@SDSC.EDU>
|
||||||
|
- Lots and lots of changes
|
||||||
|
|
||||||
|
29-Jan-98
|
||||||
|
- ASN1_BIT_STRING_set_bit()/ASN1_BIT_STRING_get_bit() from
|
||||||
|
Goetz Babin-Ebell <babinebell@trustcenter.de>.
|
||||||
|
- SSL_version() now returns SSL2_VERSION, SSL3_VERSION or
|
||||||
|
TLS1_VERSION.
|
||||||
|
|
||||||
|
7-Jan-98
|
||||||
|
- Finally reworked the cipher string to ciphers again, so it
|
||||||
|
works correctly
|
||||||
|
- All the app_data stuff is now ex_data with funcion calls to access.
|
||||||
|
The index is supplied by a function and 'methods' can be setup
|
||||||
|
for the types that are called on XXX_new/XXX_free. This lets
|
||||||
|
applications get notified on creation and destruction. Some of
|
||||||
|
the RSA methods could be implemented this way and I may do so.
|
||||||
|
- Oh yes, SSL under perl5 is working at the basic level.
|
||||||
|
|
||||||
|
15-Dec-97
|
||||||
|
- Warning - the gethostbyname cache is not fully thread safe,
|
||||||
|
but it should work well enough.
|
||||||
|
- Major internal reworking of the app_data stuff. More functions
|
||||||
|
but if you were accessing ->app_data directly, things will
|
||||||
|
stop working.
|
||||||
|
- The perlv5 stuff is working. Currently on message digests,
|
||||||
|
ciphers and the bignum library.
|
||||||
|
|
||||||
|
9-Dec-97
|
||||||
|
- Modified re-negotiation so that server initated re-neg
|
||||||
|
will cause a SSL_read() to return -1 should retry.
|
||||||
|
The danger otherwise was that the server and the
|
||||||
|
client could end up both trying to read when using non-blocking
|
||||||
|
sockets.
|
||||||
|
|
||||||
|
4-Dec-97
|
||||||
|
- Lots of small changes
|
||||||
|
- Fix for binaray mode in Windows for the FILE BIO, thanks to
|
||||||
|
Bob Denny <rdenny@dc3.com>
|
||||||
|
|
||||||
|
17-Nov-97
|
||||||
|
- Quite a few internal cleanups, (removal of errno, and using macros
|
||||||
|
defined in e_os.h).
|
||||||
|
- A bug in ca.c, pointed out by yasuyuki-ito@d-cruise.co.jp, where
|
||||||
|
the automactic naming out output files was being stuffed up.
|
||||||
|
|
||||||
|
29-Oct-97
|
||||||
|
- The Cast5 cipher has been added. MD5 and SHA-1 are now in assember
|
||||||
|
for x86.
|
||||||
|
|
||||||
|
21-Oct-97
|
||||||
|
- Fixed a bug in the BIO_gethostbyname() cache.
|
||||||
|
|
||||||
|
15-Oct-97
|
||||||
|
- cbc mode for blowfish/des/3des is now in assember. Blowfish asm
|
||||||
|
has also been improved. At this point in time, on the pentium,
|
||||||
|
md5 is %80 faster, the unoptimesed sha-1 is %79 faster,
|
||||||
|
des-cbc is %28 faster, des-ede3-cbc is %9 faster and blowfish-cbc
|
||||||
|
is %62 faster.
|
||||||
|
|
||||||
|
12-Oct-97
|
||||||
|
- MEM_BUF_grow() has been fixed so that it always sets the buf->length
|
||||||
|
to the value we are 'growing' to. Think of MEM_BUF_grow() as the
|
||||||
|
way to set the length value correctly.
|
||||||
|
|
||||||
|
10-Oct-97
|
||||||
|
- I now hash for certificate lookup on the raw DER encoded RDN (md5).
|
||||||
|
This breaks things again :-(. This is efficent since I cache
|
||||||
|
the DER encoding of the RDN.
|
||||||
|
- The text DN now puts in the numeric OID instead of UNKNOWN.
|
||||||
|
- req can now process arbitary OIDs in the config file.
|
||||||
|
- I've been implementing md5 in x86 asm, much faster :-).
|
||||||
|
- Started sha1 in x86 asm, needs more work.
|
||||||
|
- Quite a few speedups in the BN stuff. RSA public operation
|
||||||
|
has been made faster by caching the BN_MONT_CTX structure.
|
||||||
|
The calulating of the Ai where A*Ai === 1 mod m was rather
|
||||||
|
expensive. Basically a 40-50% speedup on public operations.
|
||||||
|
The RSA speedup is now 15% on pentiums and %20 on pentium
|
||||||
|
pro.
|
||||||
|
|
||||||
|
30-Sep-97
|
||||||
|
- After doing some profiling, I added x86 adm for bn_add_words(),
|
||||||
|
which just adds 2 arrays of longs together. A %10 speedup
|
||||||
|
for 512 and 1024 bit RSA on the pentium pro.
|
||||||
|
|
||||||
|
29-Sep-97
|
||||||
|
- Converted the x86 bignum assembler to us the perl scripts
|
||||||
|
for generation.
|
||||||
|
|
||||||
|
23-Sep-97
|
||||||
|
- If SSL_set_session() is passed a NULL session, it now clears the
|
||||||
|
current session-id.
|
||||||
|
|
||||||
|
22-Sep-97
|
||||||
|
- Added a '-ss_cert file' to apps/ca.c. This will sign selfsigned
|
||||||
|
certificates.
|
||||||
|
- Bug in crypto/evp/encode.c where by decoding of 65 base64
|
||||||
|
encoded lines, one line at a time (via a memory BIO) would report
|
||||||
|
EOF after the first line was decoded.
|
||||||
|
- Fix in X509_find_by_issuer_and_serial() from
|
||||||
|
Dr Stephen Henson <shenson@bigfoot.com>
|
||||||
|
|
||||||
|
19-Sep-97
|
||||||
|
- NO_FP_API and NO_STDIO added.
|
||||||
|
- Put in sh config command. It auto runs Configure with the correct
|
||||||
|
parameters.
|
||||||
|
|
||||||
|
18-Sep-97
|
||||||
|
- Fix x509.c so if a DSA cert has different parameters to its parent,
|
||||||
|
they are left in place. Not tested yet.
|
||||||
|
|
||||||
|
16-Sep-97
|
||||||
|
- ssl_create_cipher_list() had some bugs, fixes from
|
||||||
|
Patrick Eisenacher <eisenach@stud.uni-frankfurt.de>
|
||||||
|
- Fixed a bug in the Base64 BIO, where it would return 1 instead
|
||||||
|
of -1 when end of input was encountered but should retry.
|
||||||
|
Basically a Base64/Memory BIO interaction problem.
|
||||||
|
- Added a HMAC set of functions in preporarion for TLS work.
|
||||||
|
|
||||||
|
15-Sep-97
|
||||||
|
- Top level makefile tweak - Cameron Simpson <cs@zip.com.au>
|
||||||
|
- Prime generation spead up %25 (512 bit prime, pentium pro linux)
|
||||||
|
by using montgomery multiplication in the prime number test.
|
||||||
|
|
||||||
|
11-Sep-97
|
||||||
|
- Ugly bug in ssl3_write_bytes(). Basically if application land
|
||||||
|
does a SSL_write(ssl,buf,len) where len > 16k, the SSLv3 write code
|
||||||
|
did not check the size and tried to copy the entire buffer.
|
||||||
|
This would tend to cause memory overwrites since SSLv3 has
|
||||||
|
a maximum packet size of 16k. If your program uses
|
||||||
|
buffers <= 16k, you would probably never see this problem.
|
||||||
|
- Fixed a new errors that were cause by malloc() not returning
|
||||||
|
0 initialised memory..
|
||||||
|
- SSL_OP_NETSCAPE_CA_DN_BUG was being switched on when using
|
||||||
|
SSL_CTX_set_options(ssl_ctx,SSL_OP_ALL); which was a bad thing
|
||||||
|
since this flags stops SSLeay being able to handle client
|
||||||
|
cert requests correctly.
|
||||||
|
|
||||||
|
08-Sep-97
|
||||||
|
- SSL_SESS_CACHE_NO_INTERNAL_LOOKUP option added. When switched
|
||||||
|
on, the SSL server routines will not use a SSL_SESSION that is
|
||||||
|
held in it's cache. This in intended to be used with the session-id
|
||||||
|
callbacks so that while the session-ids are still stored in the
|
||||||
|
cache, the decision to use them and how to look them up can be
|
||||||
|
done by the callbacks. The are the 'new', 'get' and 'remove'
|
||||||
|
callbacks. This can be used to determine the session-id
|
||||||
|
to use depending on information like which port/host the connection
|
||||||
|
is coming from. Since the are also SSL_SESSION_set_app_data() and
|
||||||
|
SSL_SESSION_get_app_data() functions, the application can hold
|
||||||
|
information against the session-id as well.
|
||||||
|
|
||||||
|
03-Sep-97
|
||||||
|
- Added lookup of CRLs to the by_dir method,
|
||||||
|
X509_load_crl_file() also added. Basically it means you can
|
||||||
|
lookup CRLs via the same system used to lookup certificates.
|
||||||
|
- Changed things so that the X509_NAME structure can contain
|
||||||
|
ASN.1 BIT_STRINGS which is required for the unique
|
||||||
|
identifier OID.
|
||||||
|
- Fixed some problems with the auto flushing of the session-id
|
||||||
|
cache. It was not occuring on the server side.
|
||||||
|
|
||||||
|
02-Sep-97
|
||||||
|
- Added SSL_CTX_sess_cache_size(SSL_CTX *ctx,unsigned long size)
|
||||||
|
which is the maximum number of entries allowed in the
|
||||||
|
session-id cache. This is enforced with a simple FIFO list.
|
||||||
|
The default size is 20*1024 entries which is rather large :-).
|
||||||
|
The Timeout code is still always operating.
|
||||||
|
|
||||||
|
01-Sep-97
|
||||||
|
- Added an argument to all the 'generate private key/prime`
|
||||||
|
callbacks. It is the last parameter so this should not
|
||||||
|
break existing code but it is needed for C++.
|
||||||
|
- Added the BIO_FLAGS_BASE64_NO_NL flag for the BIO_f_base64()
|
||||||
|
BIO. This lets the BIO read and write base64 encoded data
|
||||||
|
without inserting or looking for '\n' characters. The '-A'
|
||||||
|
flag turns this on when using apps/enc.c.
|
||||||
|
- RSA_NO_PADDING added to help BSAFE functionality. This is a
|
||||||
|
very dangerous thing to use, since RSA private key
|
||||||
|
operations without random padding bytes (as PKCS#1 adds) can
|
||||||
|
be attacked such that the private key can be revealed.
|
||||||
|
- ASN.1 bug and rc2-40-cbc and rc4-40 added by
|
||||||
|
Dr Stephen Henson <shenson@bigfoot.com>
|
||||||
|
|
||||||
|
31-Aug-97 (stuff added while I was away)
|
||||||
|
- Linux pthreads by Tim Hudson (tjh@cryptsoft.com).
|
||||||
|
- RSA_flags() added allowing bypass of pub/priv match check
|
||||||
|
in ssl/ssl_rsa.c - Tim Hudson.
|
||||||
|
- A few minor bugs.
|
||||||
|
|
||||||
|
SSLeay 0.8.1 released.
|
||||||
|
|
||||||
|
19-Jul-97
|
||||||
|
- Server side initated dynamic renegotiation is broken. I will fix
|
||||||
|
it when I get back from holidays.
|
||||||
|
|
||||||
|
15-Jul-97
|
||||||
|
- Quite a few small changes.
|
||||||
|
- INVALID_SOCKET usage cleanups from Alex Kiernan <alex@hisoft.co.uk>
|
||||||
|
|
||||||
|
09-Jul-97
|
||||||
|
- Added 2 new values to the SSL info callback.
|
||||||
|
SSL_CB_START which is passed when the SSL protocol is started
|
||||||
|
and SSL_CB_DONE when it has finished sucsessfully.
|
||||||
|
|
||||||
|
08-Jul-97
|
||||||
|
- Fixed a few bugs problems in apps/req.c and crypto/asn1/x_pkey.c
|
||||||
|
that related to DSA public/private keys.
|
||||||
|
- Added all the relevent PEM and normal IO functions to support
|
||||||
|
reading and writing RSAPublic keys.
|
||||||
|
- Changed makefiles to use ${AR} instead of 'ar r'
|
||||||
|
|
||||||
|
07-Jul-97
|
||||||
|
- Error in ERR_remove_state() that would leave a dangling reference
|
||||||
|
to a free()ed location - thanks to Alex Kiernan <alex@hisoft.co.uk>
|
||||||
|
- s_client now prints the X509_NAMEs passed from the server
|
||||||
|
when requesting a client cert.
|
||||||
|
- Added a ssl->type, which is one of SSL_ST_CONNECT or
|
||||||
|
SSL_ST_ACCEPT. I had to add it so I could tell if I was
|
||||||
|
a connect or an accept after the handshake had finished.
|
||||||
|
- SSL_get_client_CA_list(SSL *s) now returns the CA names
|
||||||
|
passed by the server if called by a client side SSL.
|
||||||
|
|
||||||
|
05-Jul-97
|
||||||
|
- Bug in X509_NAME_get_text_by_OBJ(), looking starting at index
|
||||||
|
0, not -1 :-( Fix from Tim Hudson (tjh@cryptsoft.com).
|
||||||
|
|
||||||
|
04-Jul-97
|
||||||
|
- Fixed some things in X509_NAME_add_entry(), thanks to
|
||||||
|
Matthew Donald <matthew@world.net>.
|
||||||
|
- I had a look at the cipher section and though that it was a
|
||||||
|
bit confused, so I've changed it.
|
||||||
|
- I was not setting up the RC4-64-MD5 cipher correctly. It is
|
||||||
|
a MS special that appears in exported MS Money.
|
||||||
|
- Error in all my DH ciphers. Section 7.6.7.3 of the SSLv3
|
||||||
|
spec. I was missing the two byte length header for the
|
||||||
|
ClientDiffieHellmanPublic value. This is a packet sent from
|
||||||
|
the client to the server. The SSL_OP_SSLEAY_080_CLIENT_DH_BUG
|
||||||
|
option will enable SSLeay server side SSLv3 accept either
|
||||||
|
the correct or my 080 packet format.
|
||||||
|
- Fixed a few typos in crypto/pem.org.
|
||||||
|
|
||||||
|
02-Jul-97
|
||||||
|
- Alias mapping for EVP_get_(digest|cipher)byname is now
|
||||||
|
performed before a lookup for actual cipher. This means
|
||||||
|
that an alias can be used to 're-direct' a cipher or a
|
||||||
|
digest.
|
||||||
|
- ASN1_read_bio() had a bug that only showed up when using a
|
||||||
|
memory BIO. When EOF is reached in the memory BIO, it is
|
||||||
|
reported as a -1 with BIO_should_retry() set to true.
|
||||||
|
|
||||||
|
01-Jul-97
|
||||||
|
- Fixed an error in X509_verify_cert() caused by my
|
||||||
|
miss-understanding how 'do { contine } while(0);' works.
|
||||||
|
Thanks to Emil Sit <sit@mit.edu> for educating me :-)
|
||||||
|
|
||||||
|
30-Jun-97
|
||||||
|
- Base64 decoding error. If the last data line did not end with
|
||||||
|
a '=', sometimes extra data would be returned.
|
||||||
|
- Another 'cut and paste' bug in x509.c related to setting up the
|
||||||
|
STDout BIO.
|
||||||
|
|
||||||
|
27-Jun-97
|
||||||
|
- apps/ciphers.c was not printing due to an editing error.
|
||||||
|
- Alex Kiernan <alex@hisoft.co.uk> send in a nice fix for
|
||||||
|
a library build error in util/mk1mf.pl
|
||||||
|
|
||||||
|
26-Jun-97
|
||||||
|
- Still did not have the auto 'experimental' code removal
|
||||||
|
script correct.
|
||||||
|
- A few header tweaks for Watcom 11.0 under Win32 from
|
||||||
|
Rolf Lindemann <Lindemann@maz-hh.de>
|
||||||
|
- 0 length OCTET_STRING bug in asn1_parse
|
||||||
|
- A minor fix with an non-existent function in the MS .def files.
|
||||||
|
- A few changes to the PKCS7 stuff.
|
||||||
|
|
||||||
|
25-Jun-97
|
||||||
|
SSLeay 0.8.0 finally it gets released.
|
||||||
|
|
||||||
|
24-Jun-97
|
||||||
|
Added a SSL_OP_EPHEMERAL_RSA option which causes all SSLv3 RSA keys to
|
||||||
|
use a temporary RSA key. This is experimental and needs some more work.
|
||||||
|
Fixed a few Win16 build problems.
|
||||||
|
|
||||||
|
23-Jun-97
|
||||||
|
SSLv3 bug. I was not doing the 'lookup' of the CERT structure
|
||||||
|
correctly. I was taking the SSL->ctx->default_cert when I should
|
||||||
|
have been using SSL->cert. The bug was in ssl/s3_srvr.c
|
||||||
|
|
||||||
|
20-Jun-97
|
||||||
|
X509_ATTRIBUTES were being encoded wrongly by apps/reg.c and the
|
||||||
|
rest of the library. Even though I had the code required to do
|
||||||
|
it correctly, apps/req.c was doing the wrong thing. I have fixed
|
||||||
|
and tested everything.
|
||||||
|
|
||||||
|
Missing a few #ifdef FIONBIO sections in crypto/bio/bss_acpt.c.
|
||||||
|
|
||||||
|
19-Jun-97
|
||||||
|
Fixed a bug in the SSLv2 server side first packet handling. When
|
||||||
|
using the non-blocking test BIO, the ssl->s2->first_packet flag
|
||||||
|
was being reset when a would-block failure occurred when reading
|
||||||
|
the first 5 bytes of the first packet. This caused the checking
|
||||||
|
logic to run at the wrong time and cause an error.
|
||||||
|
|
||||||
|
Fixed a problem with specifying cipher. If RC4-MD5 were used,
|
||||||
|
only the SSLv3 version would be picked up. Now this will pick
|
||||||
|
up both SSLv2 and SSLv3 versions. This required changing the
|
||||||
|
SSL_CIPHER->mask values so that they only mask the ciphers,
|
||||||
|
digests, authentication, export type and key-exchange algorithms.
|
||||||
|
|
||||||
|
I found that when a SSLv23 session is established, a reused
|
||||||
|
session, of type SSLv3 was attempting to write the SSLv2
|
||||||
|
ciphers, which were invalid. The SSL_METHOD->put_cipher_by_char
|
||||||
|
method has been modified so it will only write out cipher which
|
||||||
|
that method knows about.
|
||||||
|
|
||||||
|
|
||||||
|
Changes between 0.8.0 and 0.8.1
|
||||||
|
|
||||||
|
*) Mostly bug fixes.
|
||||||
|
There is an Ephemeral DH cipher problem which is fixed.
|
||||||
|
|
||||||
|
SSLeay 0.8.0
|
||||||
|
|
||||||
|
This version of SSLeay has quite a lot of things different from the
|
||||||
|
previous version.
|
||||||
|
|
||||||
|
Basically check all callback parameters, I will be producing documentation
|
||||||
|
about how to use things in th future. Currently I'm just getting 080 out
|
||||||
|
the door. Please not that there are several ways to do everything, and
|
||||||
|
most of the applications in the apps directory are hybrids, some using old
|
||||||
|
methods and some using new methods.
|
||||||
|
|
||||||
|
Have a look in demos/bio for some very simple programs and
|
||||||
|
apps/s_client.c and apps/s_server.c for some more advanced versions.
|
||||||
|
Notes are definitly needed but they are a week or so away.
|
||||||
|
|
||||||
|
Anyway, some quick nots from Tim Hudson (tjh@cryptsoft.com)
|
||||||
|
---
|
||||||
|
Quick porting notes for moving from SSLeay-0.6.x to SSLeay-0.8.x to
|
||||||
|
get those people that want to move to using the new code base off to
|
||||||
|
a quick start.
|
||||||
|
|
||||||
|
Note that Eric has tidied up a lot of the areas of the API that were
|
||||||
|
less than desirable and renamed quite a few things (as he had to break
|
||||||
|
the API in lots of places anyrate). There are a whole pile of additional
|
||||||
|
functions for making dealing with (and creating) certificates a lot
|
||||||
|
cleaner.
|
||||||
|
|
||||||
|
01-Jul-97
|
||||||
|
Tim Hudson
|
||||||
|
tjh@cryptsoft.com
|
||||||
|
|
||||||
|
---8<---
|
||||||
|
|
||||||
|
To maintain code that uses both SSLeay-0.6.x and SSLeay-0.8.x you could
|
||||||
|
use something like the following (assuming you #include "crypto.h" which
|
||||||
|
is something that you really should be doing).
|
||||||
|
|
||||||
|
#if SSLEAY_VERSION_NUMBER >= 0x0800
|
||||||
|
#define SSLEAY8
|
||||||
|
#endif
|
||||||
|
|
||||||
|
buffer.h -> splits into buffer.h and bio.h so you need to include bio.h
|
||||||
|
too if you are working with BIO internal stuff (as distinct
|
||||||
|
from simply using the interface in an opaque manner)
|
||||||
|
|
||||||
|
#include "bio.h" - required along with "buffer.h" if you write
|
||||||
|
your own BIO routines as the buffer and bio
|
||||||
|
stuff that was intermixed has been separated
|
||||||
|
out
|
||||||
|
|
||||||
|
envelope.h -> evp.h (which should have been done ages ago)
|
||||||
|
|
||||||
|
Initialisation ... don't forget these or you end up with code that
|
||||||
|
is missing the bits required to do useful things (like ciphers):
|
||||||
|
|
||||||
|
SSLeay_add_ssl_algorithms()
|
||||||
|
(probably also want SSL_load_error_strings() too but you should have
|
||||||
|
already had that call in place)
|
||||||
|
|
||||||
|
SSL_CTX_new() - requires an extra method parameter
|
||||||
|
SSL_CTX_new(SSLv23_method())
|
||||||
|
SSL_CTX_new(SSLv2_method())
|
||||||
|
SSL_CTX_new(SSLv3_method())
|
||||||
|
|
||||||
|
OR to only have the server or the client code
|
||||||
|
SSL_CTX_new(SSLv23_server_method())
|
||||||
|
SSL_CTX_new(SSLv2_server_method())
|
||||||
|
SSL_CTX_new(SSLv3_server_method())
|
||||||
|
or
|
||||||
|
SSL_CTX_new(SSLv23_client_method())
|
||||||
|
SSL_CTX_new(SSLv2_client_method())
|
||||||
|
SSL_CTX_new(SSLv3_client_method())
|
||||||
|
|
||||||
|
SSL_set_default_verify_paths() ... renamed to the more appropriate
|
||||||
|
SSL_CTX_set_default_verify_paths()
|
||||||
|
|
||||||
|
If you want to use client certificates then you have to add in a bit
|
||||||
|
of extra stuff in that a SSLv3 server sends a list of those CAs that
|
||||||
|
it will accept certificates from ... so you have to provide a list to
|
||||||
|
SSLeay otherwise certain browsers will not send client certs.
|
||||||
|
|
||||||
|
SSL_CTX_set_client_CA_list(ctx,SSL_load_client_CA_file(s_cert_file));
|
||||||
|
|
||||||
|
|
||||||
|
X509_NAME_oneline(X) -> X509_NAME_oneline(X,NULL,0)
|
||||||
|
or provide a buffer and size to copy the
|
||||||
|
result into
|
||||||
|
|
||||||
|
X509_add_cert -> X509_STORE_add_cert (and you might want to read the
|
||||||
|
notes on X509_NAME structure changes too)
|
||||||
|
|
||||||
|
|
||||||
|
VERIFICATION CODE
|
||||||
|
=================
|
||||||
|
|
||||||
|
The codes have all be renamed from VERIFY_ERR_* to X509_V_ERR_* to
|
||||||
|
more accurately reflect things.
|
||||||
|
|
||||||
|
The verification callback args are now packaged differently so that
|
||||||
|
extra fields for verification can be added easily in future without
|
||||||
|
having to break things by adding extra parameters each release :-)
|
||||||
|
|
||||||
|
X509_cert_verify_error_string -> X509_verify_cert_error_string
|
||||||
|
|
||||||
|
|
||||||
|
BIO INTERNALS
|
||||||
|
=============
|
||||||
|
|
||||||
|
Eric has fixed things so that extra flags can be introduced in
|
||||||
|
the BIO layer in future without having to play with all the BIO
|
||||||
|
modules by adding in some macros.
|
||||||
|
|
||||||
|
The ugly stuff using
|
||||||
|
b->flags ~= (BIO_FLAGS_RW|BIO_FLAGS_SHOULD_RETRY)
|
||||||
|
becomes
|
||||||
|
BIO_clear_retry_flags(b)
|
||||||
|
|
||||||
|
b->flags |= (BIO_FLAGS_READ|BIO_FLAGS_SHOULD_RETRY)
|
||||||
|
becomes
|
||||||
|
BIO_set_retry_read(b)
|
||||||
|
|
||||||
|
Also ... BIO_get_retry_flags(b), BIO_set_flags(b)
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
OTHER THINGS
|
||||||
|
============
|
||||||
|
|
||||||
|
X509_NAME has been altered so that it isn't just a STACK ... the STACK
|
||||||
|
is now in the "entries" field ... and there are a pile of nice functions
|
||||||
|
for getting at the details in a much cleaner manner.
|
||||||
|
|
||||||
|
SSL_CTX has been altered ... "cert" is no longer a direct member of this
|
||||||
|
structure ... things are now down under "cert_store" (see x509_vfy.h) and
|
||||||
|
things are no longer in a CERTIFICATE_CTX but instead in a X509_STORE.
|
||||||
|
If your code "knows" about this level of detail then it will need some
|
||||||
|
surgery.
|
||||||
|
|
||||||
|
If you depending on the incorrect spelling of a number of the error codes
|
||||||
|
then you will have to change your code as these have been fixed.
|
||||||
|
|
||||||
|
ENV_CIPHER "type" got renamed to "nid" and as that is what it actually
|
||||||
|
has been all along so this makes things clearer.
|
||||||
|
ify_cert_error_string(ctx->error));
|
||||||
|
|
||||||
|
SSL_R_NO_CIPHER_WE_TRUST -> SSL_R_NO_CIPHER_LIST
|
||||||
|
and SSL_R_REUSE_CIPHER_LIST_NOT_ZERO
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
Changes between 0.7.x and 0.8.0
|
||||||
|
|
||||||
|
*) There have been lots of changes, mostly the addition of SSLv3.
|
||||||
|
There have been many additions from people and amongst
|
||||||
|
others, C2Net has assisted greatly.
|
||||||
|
|
||||||
|
Changes between 0.7.x and 0.7.x
|
||||||
|
|
||||||
|
*) Internal development version only
|
||||||
|
|
||||||
|
SSLeay 0.6.6 13-Jan-1997
|
||||||
|
|
||||||
|
The main additions are
|
||||||
|
|
||||||
|
- assember for x86 DES improvments.
|
||||||
|
From 191,000 per second on a pentium 100, I now get 281,000. The inner
|
||||||
|
loop and the IP/FP modifications are from
|
||||||
|
Svend Olaf Mikkelsen <svolaf@inet.uni-c.dk>. Many thanks for his
|
||||||
|
contribution.
|
||||||
|
- The 'DES macros' introduced in 0.6.5 now have 3 types.
|
||||||
|
DES_PTR1, DES_PTR2 and 'normal'. As per before, des_opts reports which
|
||||||
|
is best and there is a summery of mine in crypto/des/options.txt
|
||||||
|
- A few bug fixes.
|
||||||
|
- Added blowfish. It is not used by SSL but all the other stuff that
|
||||||
|
deals with ciphers can use it in either ecb, cbc, cfb64 or ofb64 modes.
|
||||||
|
There are 3 options for optimising Blowfish. BF_PTR, BF_PTR2 and 'normal'.
|
||||||
|
BF_PTR2 is pentium/x86 specific. The correct option is setup in
|
||||||
|
the 'Configure' script.
|
||||||
|
- There is now a 'get client certificate' callback which can be
|
||||||
|
'non-blocking'. If more details are required, let me know. It will
|
||||||
|
documented more in SSLv3 when I finish it.
|
||||||
|
- Bug fixes from 0.6.5 including the infamous 'ca' bug. The 'make test'
|
||||||
|
now tests the ca program.
|
||||||
|
- Lots of little things modified and tweaked.
|
||||||
|
|
||||||
|
SSLeay 0.6.5
|
||||||
|
|
||||||
|
After quite some time (3 months), the new release. I have been very busy
|
||||||
|
for the last few months and so this is mostly bug fixes and improvments.
|
||||||
|
|
||||||
|
The main additions are
|
||||||
|
|
||||||
|
- assember for x86 DES. For all those gcc based systems, this is a big
|
||||||
|
improvement. From 117,000 DES operation a second on a pentium 100,
|
||||||
|
I now get 191,000. I have also reworked the C version so it
|
||||||
|
now gives 148,000 DESs per second.
|
||||||
|
- As mentioned above, the inner DES macros now have some more variant that
|
||||||
|
sometimes help, sometimes hinder performance. There are now 3 options
|
||||||
|
DES_PTR (ptr vs array lookup), DES_UNROLL (full vs partial loop unrolling)
|
||||||
|
and DES_RISC (a more register intensive version of the inner macro).
|
||||||
|
The crypto/des/des_opts.c program, when compiled and run, will give
|
||||||
|
an indication of the correct options to use.
|
||||||
|
- The BIO stuff has been improved. Read doc/bio.doc. There are now
|
||||||
|
modules for encryption and base64 encoding and a BIO_printf() function.
|
||||||
|
- The CA program will accept simple one line X509v3 extensions in the
|
||||||
|
ssleay.cnf file. Have a look at the example. Currently this just
|
||||||
|
puts the text into the certificate as an OCTET_STRING so currently
|
||||||
|
the more advanced X509v3 data types are not handled but this is enough
|
||||||
|
for the netscape extensions.
|
||||||
|
- There is the start of a nicer higher level interface to the X509
|
||||||
|
strucutre.
|
||||||
|
- Quite a lot of bug fixes.
|
||||||
|
- CRYPTO_malloc_init() (or CRYPTO_set_mem_functions()) can be used
|
||||||
|
to define the malloc(), free() and realloc() routines to use
|
||||||
|
(look in crypto/crypto.h). This is mostly needed for Windows NT/95 when
|
||||||
|
using DLLs and mixing CRT libraries.
|
||||||
|
|
||||||
|
In general, read the 'VERSION' file for changes and be aware that some of
|
||||||
|
the new stuff may not have been tested quite enough yet, so don't just plonk
|
||||||
|
in SSLeay 0.6.5 when 0.6.4 used to work and expect nothing to break.
|
||||||
|
|
||||||
|
SSLeay 0.6.4 30/08/96 eay
|
||||||
|
|
||||||
|
I've just finished some test builds on Windows NT, Windows 3.1, Solaris 2.3,
|
||||||
|
Solaris 2.5, Linux, IRIX, HPUX 10 and everthing seems to work :-).
|
||||||
|
|
||||||
|
The main changes in this release
|
||||||
|
|
||||||
|
- Thread safe. have a read of doc/threads.doc and play in the mt directory.
|
||||||
|
For anyone using 0.6.3 with threads, I found 2 major errors so consider
|
||||||
|
moving to 0.6.4. I have a test program that builds under NT and
|
||||||
|
solaris.
|
||||||
|
- The get session-id callback has changed. Have a read of doc/callback.doc.
|
||||||
|
- The X509_cert_verify callback (the SSL_verify callback) now
|
||||||
|
has another argument. Have a read of doc/callback.doc
|
||||||
|
- 'ca -preserve', sign without re-ordering the DN. Not tested much.
|
||||||
|
- VMS support.
|
||||||
|
- Compile time memory leak detection can now be built into SSLeay.
|
||||||
|
Read doc/memory.doc
|
||||||
|
- CONF routines now understand '\', '\n', '\r' etc. What this means is that
|
||||||
|
the SPKAC object mentioned in doc/ns-ca.doc can be on multiple lines.
|
||||||
|
- 'ssleay ciphers' added, lists the default cipher list for SSLeay.
|
||||||
|
- RC2 key setup is now compatable with Netscape.
|
||||||
|
- Modifed server side of SSL implementation, big performance difference when
|
||||||
|
using session-id reuse.
|
||||||
|
|
||||||
|
0.6.3
|
||||||
|
|
||||||
|
Bug fixes and the addition of some nice stuff to the 'ca' program.
|
||||||
|
Have a read of doc/ns-ca.doc for how hit has been modified so
|
||||||
|
it can be driven from a CGI script. The CGI script is not provided,
|
||||||
|
but that is just being left as an excersize for the reader :-).
|
||||||
|
|
||||||
|
0.6.2
|
||||||
|
|
||||||
|
This is most bug fixes and functionality improvements.
|
||||||
|
|
||||||
|
Additions are
|
||||||
|
- More thread debugging patches, the thread stuff is still being
|
||||||
|
tested, but for those keep to play with stuff, have a look in
|
||||||
|
crypto/cryptlib.c. The application needs to define 1 (or optionaly
|
||||||
|
a second) callback that is used to implement locking. Compiling
|
||||||
|
with LOCK_DEBUG spits out lots of locking crud :-).
|
||||||
|
This is what I'm currently working on.
|
||||||
|
- SSL_CTX_set_default_passwd_cb() can be used to define the callback
|
||||||
|
function used in the SSL*_file() functions used to load keys. I was
|
||||||
|
always of the opinion that people should call
|
||||||
|
PEM_read_RSAPrivateKey() and pass the callback they want to use, but
|
||||||
|
it appears they just want to use the SSL_*_file() function() :-(.
|
||||||
|
- 'enc' now has a -kfile so a key can be read from a file. This is
|
||||||
|
mostly used so that the passwd does not appear when using 'ps',
|
||||||
|
which appears imposible to stop under solaris.
|
||||||
|
- X509v3 certificates now work correctly. I even have more examples
|
||||||
|
in my tests :-). There is now a X509_EXTENSION type that is used in
|
||||||
|
X509v3 certificates and CRLv2.
|
||||||
|
- Fixed that signature type error :-(
|
||||||
|
- Fixed quite a few potential memory leaks and problems when reusing
|
||||||
|
X509, CRL and REQ structures.
|
||||||
|
- EVP_set_pw_prompt() now sets the library wide default password
|
||||||
|
prompt.
|
||||||
|
- The 'pkcs7' command will now, given the -print_certs flag, output in
|
||||||
|
pem format, all certificates and CRL contained within. This is more
|
||||||
|
of a pre-emtive thing for the new verisign distribution method. I
|
||||||
|
should also note, that this also gives and example in code, of how
|
||||||
|
to do this :-), or for that matter, what is involved in going the
|
||||||
|
other way (list of certs and crl -> pkcs7).
|
||||||
|
- Added RSA's DESX to the DES library. It is also available via the
|
||||||
|
EVP_desx_cbc() method and via 'enc desx'.
|
||||||
|
|
||||||
|
SSLeay 0.6.1
|
||||||
|
|
||||||
|
The main functional changes since 0.6.0 are as follows
|
||||||
|
- Bad news, the Microsoft 060 DLL's are not compatable, but the good news is
|
||||||
|
that from now on, I'll keep the .def numbers the same so they will be.
|
||||||
|
- RSA private key operations are about 2 times faster that 0.6.0
|
||||||
|
- The SSL_CTX now has more fields so default values can be put against
|
||||||
|
it. When an SSL structure is created, these default values are used
|
||||||
|
but can be overwritten. There are defaults for cipher, certificate,
|
||||||
|
private key, verify mode and callback. This means SSL session
|
||||||
|
creation can now be
|
||||||
|
ssl=SSL_new()
|
||||||
|
SSL_set_fd(ssl,sock);
|
||||||
|
SSL_accept(ssl)
|
||||||
|
....
|
||||||
|
All the other uglyness with having to keep a global copy of the
|
||||||
|
private key and certificate/verify mode in the server is now gone.
|
||||||
|
- ssl/ssltest.c - one process talking SSL to its self for testing.
|
||||||
|
- Storage of Session-id's can be controled via a session_cache_mode
|
||||||
|
flag. There is also now an automatic default flushing of
|
||||||
|
old session-id's.
|
||||||
|
- The X509_cert_verify() function now has another parameter, this
|
||||||
|
should not effect most people but it now means that the reason for
|
||||||
|
the failure to verify is now available via SSL_get_verify_result(ssl).
|
||||||
|
You don't have to use a global variable.
|
||||||
|
- SSL_get_app_data() and SSL_set_app_data() can be used to keep some
|
||||||
|
application data against the SSL structure. It is upto the application
|
||||||
|
to free the data. I don't use it, but it is available.
|
||||||
|
- SSL_CTX_set_cert_verify_callback() can be used to specify a
|
||||||
|
verify callback function that completly replaces my certificate
|
||||||
|
verification code. Xcert should be able to use this :-).
|
||||||
|
The callback is of the form int app_verify_callback(arg,ssl,cert).
|
||||||
|
This needs to be documented more.
|
||||||
|
- I have started playing with shared library builds, have a look in
|
||||||
|
the shlib directory. It is very simple. If you need a numbered
|
||||||
|
list of functions, have a look at misc/crypto.num and misc/ssl.num.
|
||||||
|
- There is some stuff to do locking to make the library thread safe.
|
||||||
|
I have only started this stuff and have not finished. If anyone is
|
||||||
|
keen to do so, please send me the patches when finished.
|
||||||
|
|
||||||
|
So I have finally made most of the additions to the SSL interface that
|
||||||
|
I thought were needed.
|
||||||
|
|
||||||
|
There will probably be a pause before I make any non-bug/documentation
|
||||||
|
related changes to SSLeay since I'm feeling like a bit of a break.
|
||||||
|
|
||||||
|
eric - 12 Jul 1996
|
||||||
|
I saw recently a comment by some-one that we now seem to be entering
|
||||||
|
the age of perpetual Beta software.
|
||||||
|
Pioneered by packages like linux but refined to an art form by
|
||||||
|
netscape.
|
||||||
|
|
||||||
|
I too wish to join this trend with the anouncement of SSLeay 0.6.0 :-).
|
||||||
|
|
||||||
|
There are quite a large number of sections that are 'works in
|
||||||
|
progress' in this package. I will also list the major changes and
|
||||||
|
what files you should read.
|
||||||
|
|
||||||
|
BIO - this is the new IO structure being used everywhere in SSLeay. I
|
||||||
|
started out developing this because of microsoft, I wanted a mechanism
|
||||||
|
to callback to the application for all IO, so Windows 3.1 DLL
|
||||||
|
perversion could be hidden from me and the 15 different ways to write
|
||||||
|
to a file under NT would also not be dictated by me at library build
|
||||||
|
time. What the 'package' is is an API for a data structure containing
|
||||||
|
functions. IO interfaces can be written to conform to the
|
||||||
|
specification. This in not intended to hide the underlying data type
|
||||||
|
from the application, but to hide it from SSLeay :-).
|
||||||
|
I have only really finished testing the FILE * and socket/fd modules.
|
||||||
|
There are also 'filter' BIO's. Currently I have only implemented
|
||||||
|
message digests, and it is in use in the dgst application. This
|
||||||
|
functionality will allow base64/encrypto/buffering modules to be
|
||||||
|
'push' into a BIO without it affecting the semantics. I'm also
|
||||||
|
working on an SSL BIO which will hide the SSL_accept()/SLL_connet()
|
||||||
|
from an event loop which uses the interface.
|
||||||
|
It is also possible to 'attach' callbacks to a BIO so they get called
|
||||||
|
before and after each operation, alowing extensive debug output
|
||||||
|
to be generated (try running dgst with -d).
|
||||||
|
|
||||||
|
Unfortunaly in the conversion from 0.5.x to 0.6.0, quite a few
|
||||||
|
functions that used to take FILE *, now take BIO *.
|
||||||
|
The wrappers are easy to write
|
||||||
|
|
||||||
|
function_fp(fp,x)
|
||||||
|
FILE *fp;
|
||||||
|
{
|
||||||
|
BIO *b;
|
||||||
|
int ret;
|
||||||
|
|
||||||
|
if ((b=BIO_new(BIO_s_file())) == NULL) error.....
|
||||||
|
BIO_set_fp(b,fp,BIO_NOCLOSE);
|
||||||
|
ret=function_bio(b,x);
|
||||||
|
BIO_free(b);
|
||||||
|
return(ret);
|
||||||
|
}
|
||||||
|
Remember, there are no functions that take FILE * in SSLeay when
|
||||||
|
compiled for Windows 3.1 DLL's.
|
||||||
|
|
||||||
|
--
|
||||||
|
I have added a general EVP_PKEY type that can hold a public/private
|
||||||
|
key. This is now what is used by the EVP_ functions and is passed
|
||||||
|
around internally. I still have not done the PKCS#8 stuff, but
|
||||||
|
X509_PKEY is defined and waiting :-)
|
||||||
|
|
||||||
|
--
|
||||||
|
For a full function name listings, have a look at ms/crypt32.def and
|
||||||
|
ms/ssl32.def. These are auto-generated but are complete.
|
||||||
|
Things like ASN1_INTEGER_get() have been added and are in here if you
|
||||||
|
look. I have renamed a few things, again, have a look through the
|
||||||
|
function list and you will probably find what you are after. I intend
|
||||||
|
to at least put a one line descrition for each one.....
|
||||||
|
|
||||||
|
--
|
||||||
|
Microsoft - thats what this release is about, read the MICROSOFT file.
|
||||||
|
|
||||||
|
--
|
||||||
|
Multi-threading support. I have started hunting through the code and
|
||||||
|
flaging where things need to be done. In a state of work but high on
|
||||||
|
the list.
|
||||||
|
|
||||||
|
--
|
||||||
|
For random numbers, edit e_os.h and set DEVRANDOM (it's near the top)
|
||||||
|
be be you random data device, otherwise 'RFILE' in e_os.h
|
||||||
|
will be used, in your home directory. It will be updated
|
||||||
|
periodically. The environment variable RANDFILE will override this
|
||||||
|
choice and read/write to that file instead. DEVRANDOM is used in
|
||||||
|
conjunction to the RFILE/RANDFILE. If you wish to 'seed' the random
|
||||||
|
number generator, pick on one of these files.
|
||||||
|
|
||||||
|
--
|
||||||
|
|
||||||
|
The list of things to read and do
|
||||||
|
|
||||||
|
dgst -d
|
||||||
|
s_client -state (this uses a callback placed in the SSL state loop and
|
||||||
|
will be used else-where to help debug/monitor what
|
||||||
|
is happening.)
|
||||||
|
|
||||||
|
doc/why.doc
|
||||||
|
doc/bio.doc <- hmmm, needs lots of work.
|
||||||
|
doc/bss_file.doc <- one that is working :-)
|
||||||
|
doc/session.doc <- it has changed
|
||||||
|
doc/speed.doc
|
||||||
|
also play with ssleay version -a. I have now added a SSLeay()
|
||||||
|
function that returns a version number, eg 0600 for this release
|
||||||
|
which is primarily to be used to check DLL version against the
|
||||||
|
application.
|
||||||
|
util/* Quite a few will not interest people, but some may, like
|
||||||
|
mk1mf.pl, mkdef.pl,
|
||||||
|
util/do_ms.sh
|
||||||
|
|
||||||
|
try
|
||||||
|
cc -Iinclude -Icrypto -c crypto/crypto.c
|
||||||
|
cc -Iinclude -Issl -c ssl/ssl.c
|
||||||
|
You have just built the SSLeay libraries as 2 object files :-)
|
||||||
|
|
||||||
|
Have a general rummage around in the bin stall directory and look at
|
||||||
|
what is in there, like CA.sh and c_rehash
|
||||||
|
|
||||||
|
There are lots more things but it is 12:30am on a Friday night and I'm
|
||||||
|
heading home :-).
|
||||||
|
|
||||||
|
eric 22-Jun-1996
|
||||||
|
This version has quite a few major bug fixes and improvements. It DOES NOT
|
||||||
|
do SSLv3 yet.
|
||||||
|
|
||||||
|
The main things changed
|
||||||
|
- A Few days ago I added the s_mult application to ssleay which is
|
||||||
|
a demo of an SSL server running in an event loop type thing.
|
||||||
|
It supports non-blocking IO, I have finally gotten it right, SSL_accept()
|
||||||
|
can operate in non-blocking IO mode, look at the code to see how :-).
|
||||||
|
Have a read of doc/s_mult as well. This program leaks memory and
|
||||||
|
file descriptors everywhere but I have not cleaned it up yet.
|
||||||
|
This is a demo of how to do non-blocking IO.
|
||||||
|
- The SSL session management has been 'worked over' and there is now
|
||||||
|
quite an expansive set of functions to manipulate them. Have a read of
|
||||||
|
doc/session.doc for some-things I quickly whipped up about how it now works.
|
||||||
|
This assume you know the SSLv2 protocol :-)
|
||||||
|
- I can now read/write the netscape certificate format, use the
|
||||||
|
-inform/-outform 'net' options to the x509 command. I have not put support
|
||||||
|
for this type in the other demo programs, but it would be easy to add.
|
||||||
|
- asn1parse and 'enc' have been modified so that when reading base64
|
||||||
|
encoded files (pem format), they do not require '-----BEGIN' header lines.
|
||||||
|
The 'enc' program had a buffering bug fixed, it can be used as a general
|
||||||
|
base64 -> binary -> base64 filter by doing 'enc -a -e' and 'enc -a -d'
|
||||||
|
respecivly. Leaving out the '-a' flag in this case makes the 'enc' command
|
||||||
|
into a form of 'cat'.
|
||||||
|
- The 'x509' and 'req' programs have been fixed and modified a little so
|
||||||
|
that they generate self-signed certificates correctly. The test
|
||||||
|
script actually generates a 'CA' certificate and then 'signs' a
|
||||||
|
'user' certificate. Have a look at this shell script (test/sstest)
|
||||||
|
to see how things work, it tests most possible combinations of what can
|
||||||
|
be done.
|
||||||
|
- The 'SSL_set_pref_cipher()' function has been 'fixed' and the prefered name
|
||||||
|
of SSL_set_cipher_list() is now the correct API (stops confusion :-).
|
||||||
|
If this function is used in the client, only the specified ciphers can
|
||||||
|
be used, with preference given to the order the ciphers were listed.
|
||||||
|
For the server, if this is used, only the specified ciphers will be used
|
||||||
|
to accept connections. If this 'option' is not used, a default set of
|
||||||
|
ciphers will be used. The SSL_CTX_set_cipher_list(SSL_CTX *ctx) sets this
|
||||||
|
list for all ciphers started against the SSL_CTX. So the order is
|
||||||
|
SSL cipher_list, if not present, SSL_CTX cipher list, if not
|
||||||
|
present, then the library default.
|
||||||
|
What this means is that normally ciphers like
|
||||||
|
NULL-MD5 will never be used. The only way this cipher can be used
|
||||||
|
for both ends to specify to use it.
|
||||||
|
To enable or disable ciphers in the library at build time, modify the
|
||||||
|
first field for the cipher in the ssl_ciphers array in ssl/ssl_lib.c.
|
||||||
|
This file also contains the 'pref_cipher' list which is the default
|
||||||
|
cipher preference order.
|
||||||
|
- I'm not currently sure if the 'rsa -inform net' and the 'rsa -outform net'
|
||||||
|
options work. They should, and they enable loading and writing the
|
||||||
|
netscape rsa private key format. I will be re-working this section of
|
||||||
|
SSLeay for the next version. What is currently in place is a quick and
|
||||||
|
dirty hack.
|
||||||
|
- I've re-written parts of the bignum library. This gives speedups
|
||||||
|
for all platforms. I now provide assembler for use under Windows NT.
|
||||||
|
I have not tested the Windows 3.1 assembler but it is quite simple code.
|
||||||
|
This gives RSAprivate_key operation encryption times of 0.047s (512bit key)
|
||||||
|
and 0.230s (1024bit key) on a pentium 100 which I consider reasonable.
|
||||||
|
Basically the times available under linux/solaris x86 can be achieve under
|
||||||
|
Windows NT. I still don't know how these times compare to RSA's BSAFE
|
||||||
|
library but I have been emailing with people and with their help, I should
|
||||||
|
be able to get my library's quite a bit faster still (more algorithm changes).
|
||||||
|
The object file crypto/bn/asm/x86-32.obj should be used when linking
|
||||||
|
under NT.
|
||||||
|
- 'make makefile.one' in the top directory will generate a single makefile
|
||||||
|
called 'makefile.one' This makefile contains no perl references and
|
||||||
|
will build the SSLeay library into the 'tmp' and 'out' directories.
|
||||||
|
util/mk1mf.pl >makefile.one is how this makefile is
|
||||||
|
generated. The mk1mf.pl command take several option to generate the
|
||||||
|
makefile for use with cc, gcc, Visual C++ and Borland C++. This is
|
||||||
|
still under development. I have only build .lib's for NT and MSDOS
|
||||||
|
I will be working on this more. I still need to play with the
|
||||||
|
correct compiler setups for these compilers and add some more stuff but
|
||||||
|
basically if you just want to compile the library
|
||||||
|
on a 'non-unix' platform, this is a very very good file to start with :-).
|
||||||
|
Have a look in the 'microsoft' directory for my current makefiles.
|
||||||
|
I have not yet modified things to link with sockets under Windows NT.
|
||||||
|
You guys should be able to do this since this is actually outside of the
|
||||||
|
SSLeay scope :-). I will be doing it for myself soon.
|
||||||
|
util/mk1mf.pl takes quite a few options including no-rc, rsaref and no-sock
|
||||||
|
to build without RC2/RC4, to require RSAref for linking, and to
|
||||||
|
build with no socket code.
|
||||||
|
|
||||||
|
- Oh yes, the cipher that was reported to be compatible with RSA's RC2 cipher
|
||||||
|
that was posted to sci.crypt has been added to the library and SSL.
|
||||||
|
I take the view that if RC2 is going to be included in a standard,
|
||||||
|
I'll include the cipher to make my package complete.
|
||||||
|
There are NO_RC2, NO_RC4 and NO_IDEA macros to remove these ciphers
|
||||||
|
at compile time. I have not tested this recently but it should all work
|
||||||
|
and if you are in the USA and don't want RSA threatening to sue you,
|
||||||
|
you could probably remove the RC4/RC2 code inside these sections.
|
||||||
|
I may in the future include a perl script that does this code
|
||||||
|
removal automatically for those in the USA :-).
|
||||||
|
- I have removed all references to sed in the makefiles. So basically,
|
||||||
|
the development environment requires perl and sh. The build environment
|
||||||
|
does not (use the makefile.one makefile).
|
||||||
|
The Configure script still requires perl, this will probably stay that way
|
||||||
|
since I have perl for Windows NT :-).
|
||||||
|
|
||||||
|
eric (03-May-1996)
|
||||||
|
|
||||||
|
PS Have a look in the VERSION file for more details on the changes and
|
||||||
|
bug fixes.
|
||||||
|
I have fixed a few bugs, added alpha and x86 assembler and generally cleaned
|
||||||
|
things up. This version will be quite stable, mostly because I'm on
|
||||||
|
holidays until 10-March-1996. For any problems in the interum, send email
|
||||||
|
to Tim Hudson <tjh@mincom.oz.au>.
|
||||||
|
|
||||||
|
SSLeay 0.5.0
|
||||||
|
|
||||||
|
12-12-95
|
||||||
|
This is going out before it should really be released.
|
||||||
|
|
||||||
|
I leave for 11 weeks holidays on the 22-12-95 and so I either sit on
|
||||||
|
this for 11 weeks or get things out. It is still going to change a
|
||||||
|
lot in the next week so if you do grab this version, please test and
|
||||||
|
give me feed back ASAP, inculuding questions on how to do things with
|
||||||
|
the library. This will prompt me to write documentation so I don't
|
||||||
|
have to answer the same question again :-).
|
||||||
|
|
||||||
|
This 'pre' release version is for people who are interested in the
|
||||||
|
library. The applications will have to be changed to use
|
||||||
|
the new version of the SSL interface. I intend to finish more
|
||||||
|
documentation before I leave but until then, look at the programs in
|
||||||
|
the apps directory. As far as code goes, it is much much nicer than
|
||||||
|
the old version.
|
||||||
|
|
||||||
|
The current library works, has no memory leaks (as far as I can tell)
|
||||||
|
and is far more bug free that 0.4.5d. There are no global variable of
|
||||||
|
consequence (I believe) and I will produce some documentation that
|
||||||
|
tell where to look for those people that do want to do multi-threaded
|
||||||
|
stuff.
|
||||||
|
|
||||||
|
There should be more documentation. Have a look in the
|
||||||
|
doc directory. I'll be adding more before I leave, it is a start
|
||||||
|
by mostly documents the crypto library. Tim Hudson will update
|
||||||
|
the web page ASAP. The spelling and grammar are crap but
|
||||||
|
it is better than nothing :-)
|
||||||
|
|
||||||
|
Reasons to start playing with version 0.5.0
|
||||||
|
- All the programs in the apps directory build into one ssleay binary.
|
||||||
|
- There is a new version of the 'req' program that generates certificate
|
||||||
|
requests, there is even documentation for this one :-)
|
||||||
|
- There is a demo certification authorithy program. Currently it will
|
||||||
|
look at the simple database and update it. It will generate CRL from
|
||||||
|
the data base. You need to edit the database by hand to revoke a
|
||||||
|
certificate, it is my aim to use perl5/Tk but I don't have time to do
|
||||||
|
this right now. It will generate the certificates but the management
|
||||||
|
scripts still need to be written. This is not a hard task.
|
||||||
|
- Things have been cleaned up alot.
|
||||||
|
- Have a look at the enc and dgst programs in the apps directory.
|
||||||
|
- It supports v3 of x509 certiticates.
|
||||||
|
|
||||||
|
|
||||||
|
Major things missing.
|
||||||
|
- I have been working on (and thinging about) the distributed x509
|
||||||
|
hierachy problem. I have not had time to put my solution in place.
|
||||||
|
It will have to wait until I come back.
|
||||||
|
- I have not put in CRL checking in the certificate verification but
|
||||||
|
it would not be hard to do. I was waiting until I could generate my
|
||||||
|
own CRL (which has only been in the last week) and I don't have time
|
||||||
|
to put it in correctly.
|
||||||
|
- Montgomery multiplication need to be implemented. I know the
|
||||||
|
algorithm, just ran out of time.
|
||||||
|
- PKCS#7. I can load and write the DER version. I need to re-work
|
||||||
|
things to support BER (if that means nothing, read the ASN1 spec :-).
|
||||||
|
- Testing of the higher level digital envelope routines. I have not
|
||||||
|
played with the *_seal() and *_open() type functions. They are
|
||||||
|
written but need testing. The *_sign() and *_verify() functions are
|
||||||
|
rock solid.
|
||||||
|
- PEM. Doing this and PKCS#7 have been dependant on the distributed
|
||||||
|
x509 heirachy problem. I started implementing my ideas, got
|
||||||
|
distracted writing a CA program and then ran out of time. I provide
|
||||||
|
the functionality of RSAref at least.
|
||||||
|
- Re work the asm. code for the x86. I've changed by low level bignum
|
||||||
|
interface again, so I really need to tweak the x86 stuff. gcc is
|
||||||
|
good enough for the other boxes.
|
||||||
|
|
||||||
42
CONTRIBUTING
42
CONTRIBUTING
@@ -1,42 +0,0 @@
|
|||||||
HOW TO CONTRIBUTE TO OpenSSL
|
|
||||||
----------------------------
|
|
||||||
|
|
||||||
Development is coordinated on the openssl-dev mailing list (see
|
|
||||||
http://www.openssl.org for information on subscribing). If you
|
|
||||||
would like to submit a patch, send it to rt@openssl.org with
|
|
||||||
the string "[PATCH]" in the subject. Please be sure to include a
|
|
||||||
textual explanation of what your patch does.
|
|
||||||
|
|
||||||
You can also make GitHub pull requests. If you do this, please also send
|
|
||||||
mail to rt@openssl.org with a brief description and a link to the PR so
|
|
||||||
that we can more easily keep track of it.
|
|
||||||
|
|
||||||
If you are unsure as to whether a feature will be useful for the general
|
|
||||||
OpenSSL community please discuss it on the openssl-dev mailing list first.
|
|
||||||
Someone may be already working on the same thing or there may be a good
|
|
||||||
reason as to why that feature isn't implemented.
|
|
||||||
|
|
||||||
Patches should be as up to date as possible, preferably relative to the
|
|
||||||
current Git or the last snapshot. They should follow our coding style
|
|
||||||
(see https://www.openssl.org/policies/codingstyle.html) and compile without
|
|
||||||
warnings using the --strict-warnings flag. OpenSSL compiles on many varied
|
|
||||||
platforms: try to ensure you only use portable features.
|
|
||||||
|
|
||||||
When at all possible, patches should include tests. These can either be
|
|
||||||
added to an existing test, or completely new. Please see test/README for
|
|
||||||
information on the test framework.
|
|
||||||
|
|
||||||
Our preferred format for patch files is "git format-patch" output. For example
|
|
||||||
to provide a patch file containing the last commit in your local git repository
|
|
||||||
use the following command:
|
|
||||||
|
|
||||||
# git format-patch --stdout HEAD^ >mydiffs.patch
|
|
||||||
|
|
||||||
Another method of creating an acceptable patch file without using git is as
|
|
||||||
follows:
|
|
||||||
|
|
||||||
# cd openssl-work
|
|
||||||
# [your changes]
|
|
||||||
# ./Configure dist; make clean
|
|
||||||
# cd ..
|
|
||||||
# diff -ur openssl-orig openssl-work > mydiffs.patch
|
|
||||||
@@ -1,285 +0,0 @@
|
|||||||
# -*- Mode: perl -*-
|
|
||||||
%targets=(
|
|
||||||
DEFAULTS => {
|
|
||||||
template => 1,
|
|
||||||
|
|
||||||
cflags => "",
|
|
||||||
defines => [],
|
|
||||||
thread_scheme => "(unknown)", # Assume we don't know
|
|
||||||
thread_defines => [],
|
|
||||||
|
|
||||||
apps_aux_src => "",
|
|
||||||
cpuid_asm_src => "mem_clr.c",
|
|
||||||
uplink_aux_src => "",
|
|
||||||
bn_asm_src => "bn_asm.c",
|
|
||||||
ec_asm_src => "",
|
|
||||||
des_asm_src => "des_enc.c fcrypt_b.c",
|
|
||||||
aes_asm_src => "aes_core.c aes_cbc.c",
|
|
||||||
bf_asm_src => "bf_enc.c",
|
|
||||||
md5_asm_src => "",
|
|
||||||
cast_asm_src => "c_enc.c",
|
|
||||||
rc4_asm_src => "rc4_enc.c rc4_skey.c",
|
|
||||||
rmd160_asm_src => "",
|
|
||||||
rc5_asm_src => "rc5_enc.c",
|
|
||||||
wp_asm_src => "wp_block.c",
|
|
||||||
cmll_asm_src => "camellia.c cmll_misc.c cmll_cbc.c",
|
|
||||||
modes_asm_src => "",
|
|
||||||
padlock_asm_src => "",
|
|
||||||
chacha_asm_src => "chacha_enc.c",
|
|
||||||
poly1305_asm_src => "",
|
|
||||||
|
|
||||||
unistd => "<unistd.h>",
|
|
||||||
shared_target => "",
|
|
||||||
shared_cflag => "",
|
|
||||||
shared_defines => [],
|
|
||||||
shared_ldflag => "",
|
|
||||||
shared_rcflag => "",
|
|
||||||
shared_extension => "",
|
|
||||||
|
|
||||||
build_scheme => [ "unified", "unix" ],
|
|
||||||
build_file => "Makefile",
|
|
||||||
},
|
|
||||||
|
|
||||||
BASE_common => {
|
|
||||||
template => 1,
|
|
||||||
defines =>
|
|
||||||
sub {
|
|
||||||
my @defs = ();
|
|
||||||
push @defs, "ZLIB" unless $disabled{zlib};
|
|
||||||
push @defs, "ZLIB_SHARED" unless $disabled{"zlib-dynamic"};
|
|
||||||
return [ @defs ];
|
|
||||||
},
|
|
||||||
},
|
|
||||||
|
|
||||||
BASE_unix => {
|
|
||||||
inherit_from => [ "BASE_common" ],
|
|
||||||
template => 1,
|
|
||||||
|
|
||||||
ex_libs =>
|
|
||||||
sub {
|
|
||||||
unless ($disabled{zlib}) {
|
|
||||||
if (defined($disabled{"zlib-dynamic"})) {
|
|
||||||
if (defined($withargs{zlib_lib})) {
|
|
||||||
return "-L".$withargs{zlib_lib}." -lz";
|
|
||||||
} else {
|
|
||||||
return "-lz";
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
return (); },
|
|
||||||
|
|
||||||
build_scheme => [ "unified", "unix" ],
|
|
||||||
build_file => "Makefile",
|
|
||||||
},
|
|
||||||
|
|
||||||
BASE_Windows => {
|
|
||||||
inherit_from => [ "BASE_common" ],
|
|
||||||
template => 1,
|
|
||||||
|
|
||||||
ex_libs =>
|
|
||||||
sub {
|
|
||||||
unless ($disabled{zlib}) {
|
|
||||||
if (defined($disabled{"zlib-dynamic"})) {
|
|
||||||
return $withargs{zlib_lib};
|
|
||||||
}
|
|
||||||
}
|
|
||||||
return (); },
|
|
||||||
|
|
||||||
ld => "link",
|
|
||||||
lflags => "/nologo",
|
|
||||||
loutflag => "/out:",
|
|
||||||
ar => "lib",
|
|
||||||
arflags => "/nologo",
|
|
||||||
aroutflag => "/out:",
|
|
||||||
|
|
||||||
build_file => "makefile",
|
|
||||||
build_scheme => [ "unified", "windows" ],
|
|
||||||
},
|
|
||||||
|
|
||||||
BASE_VMS => {
|
|
||||||
inherit_from => [ "BASE_common" ],
|
|
||||||
template => 1,
|
|
||||||
|
|
||||||
build_file => "descrip.mms",
|
|
||||||
build_scheme => [ "unified", "VMS" ],
|
|
||||||
},
|
|
||||||
|
|
||||||
uplink_common => {
|
|
||||||
template => 1,
|
|
||||||
apps_aux_src => add("../ms/applink.c"),
|
|
||||||
uplink_aux_src => add("../ms/uplink.c"),
|
|
||||||
defines => add("OPENSSL_USE_APPLINK"),
|
|
||||||
},
|
|
||||||
x86_uplink => {
|
|
||||||
inherit_from => [ "uplink_common" ],
|
|
||||||
template => 1,
|
|
||||||
uplink_aux_src => add("uplink-x86.s"),
|
|
||||||
},
|
|
||||||
x86_64_uplink => {
|
|
||||||
inherit_from => [ "uplink_common" ],
|
|
||||||
template => 1,
|
|
||||||
uplink_aux_src => add("uplink-x86_64.s"),
|
|
||||||
},
|
|
||||||
ia64_uplink => {
|
|
||||||
inherit_from => [ "uplink_common" ],
|
|
||||||
template => 1,
|
|
||||||
uplink_aux_src => add("uplink-ia64.s"),
|
|
||||||
},
|
|
||||||
|
|
||||||
x86_asm => {
|
|
||||||
template => 1,
|
|
||||||
cpuid_asm_src => "x86cpuid.s",
|
|
||||||
bn_asm_src => "bn-586.s co-586.s x86-mont.s x86-gf2m.s",
|
|
||||||
ec_asm_src => "ecp_nistz256.c ecp_nistz256-x86.s",
|
|
||||||
des_asm_src => "des-586.s crypt586.s",
|
|
||||||
aes_asm_src => "aes-586.s vpaes-x86.s aesni-x86.s",
|
|
||||||
bf_asm_src => "bf-586.s",
|
|
||||||
md5_asm_src => "md5-586.s",
|
|
||||||
cast_asm_src => "cast-586.s",
|
|
||||||
sha1_asm_src => "sha1-586.s sha256-586.s sha512-586.s",
|
|
||||||
rc4_asm_src => "rc4-586.s",
|
|
||||||
rmd160_asm_src => "rmd-586.s",
|
|
||||||
rc5_asm_src => "rc5-586.s",
|
|
||||||
wp_asm_src => "wp_block.c wp-mmx.s",
|
|
||||||
cmll_asm_src => "cmll-x86.s",
|
|
||||||
modes_asm_src => "ghash-x86.s",
|
|
||||||
padlock_asm_src => "e_padlock-x86.s",
|
|
||||||
chacha_asm_src => "chacha-x86.s",
|
|
||||||
poly1305_asm_src=> "poly1305-x86.s",
|
|
||||||
},
|
|
||||||
x86_elf_asm => {
|
|
||||||
template => 1,
|
|
||||||
inherit_from => [ "x86_asm" ],
|
|
||||||
perlasm_scheme => "elf"
|
|
||||||
},
|
|
||||||
x86_64_asm => {
|
|
||||||
template => 1,
|
|
||||||
cpuid_asm_src => "x86_64cpuid.s",
|
|
||||||
bn_asm_src => "asm/x86_64-gcc.c x86_64-mont.s x86_64-mont5.s x86_64-gf2m.s rsaz_exp.c rsaz-x86_64.s rsaz-avx2.s",
|
|
||||||
ec_asm_src => "ecp_nistz256.c ecp_nistz256-x86_64.s",
|
|
||||||
aes_asm_src => "aes-x86_64.s vpaes-x86_64.s bsaes-x86_64.s aesni-x86_64.s aesni-sha1-x86_64.s aesni-sha256-x86_64.s aesni-mb-x86_64.s",
|
|
||||||
md5_asm_src => "md5-x86_64.s",
|
|
||||||
sha1_asm_src => "sha1-x86_64.s sha256-x86_64.s sha512-x86_64.s sha1-mb-x86_64.s sha256-mb-x86_64.s",
|
|
||||||
rc4_asm_src => "rc4-x86_64.s rc4-md5-x86_64.s",
|
|
||||||
wp_asm_src => "wp-x86_64.s",
|
|
||||||
cmll_asm_src => "cmll-x86_64.s cmll_misc.c",
|
|
||||||
modes_asm_src => "ghash-x86_64.s aesni-gcm-x86_64.s",
|
|
||||||
padlock_asm_src => "e_padlock-x86_64.s",
|
|
||||||
chacha_asm_src => "chacha-x86_64.s",
|
|
||||||
poly1305_asm_src=> "poly1305-x86_64.s",
|
|
||||||
},
|
|
||||||
ia64_asm => {
|
|
||||||
template => 1,
|
|
||||||
cpuid_asm_src => "ia64cpuid.s",
|
|
||||||
bn_asm_src => "bn-ia64.s ia64-mont.s",
|
|
||||||
aes_asm_src => "aes_core.c aes_cbc.c aes-ia64.s",
|
|
||||||
md5_asm_src => "md5-ia64.s",
|
|
||||||
sha1_asm_src => "sha1-ia64.s sha256-ia64.s sha512-ia64.s",
|
|
||||||
rc4_asm_src => "rc4-ia64.s rc4_skey.c",
|
|
||||||
modes_asm_src => "ghash-ia64.s",
|
|
||||||
perlasm_scheme => "void"
|
|
||||||
},
|
|
||||||
sparcv9_asm => {
|
|
||||||
template => 1,
|
|
||||||
cpuid_asm_src => "sparcv9cap.c sparccpuid.S",
|
|
||||||
bn_asm_src => "asm/sparcv8plus.S sparcv9-mont.S sparcv9a-mont.S vis3-mont.S sparct4-mont.S sparcv9-gf2m.S",
|
|
||||||
ec_asm_src => "ecp_nistz256.c ecp_nistz256-sparcv9.S",
|
|
||||||
des_asm_src => "des_enc-sparc.S fcrypt_b.c dest4-sparcv9.S",
|
|
||||||
aes_asm_src => "aes_core.c aes_cbc.c aes-sparcv9.S aest4-sparcv9.S",
|
|
||||||
md5_asm_src => "md5-sparcv9.S",
|
|
||||||
sha1_asm_src => "sha1-sparcv9.S sha256-sparcv9.S sha512-sparcv9.S",
|
|
||||||
cmll_asm_src => "camellia.c cmll_misc.c cmll_cbc.c cmllt4-sparcv9.S",
|
|
||||||
modes_asm_src => "ghash-sparcv9.S",
|
|
||||||
poly1305_asm_src=> "poly1305-sparcv9.S",
|
|
||||||
perlasm_scheme => "void"
|
|
||||||
},
|
|
||||||
sparcv8_asm => {
|
|
||||||
template => 1,
|
|
||||||
cpuid_asm_src => "",
|
|
||||||
bn_asm_src => "asm/sparcv8.S",
|
|
||||||
des_asm_src => "des_enc-sparc.S fcrypt_b.c",
|
|
||||||
perlasm_scheme => "void"
|
|
||||||
},
|
|
||||||
alpha_asm => {
|
|
||||||
template => 1,
|
|
||||||
cpuid_asm_src => "alphacpuid.s",
|
|
||||||
bn_asm_src => "bn_asm.c alpha-mont.s",
|
|
||||||
sha1_asm_src => "sha1-alpha.s",
|
|
||||||
modes_asm_src => "ghash-alpha.s",
|
|
||||||
perlasm_scheme => "void"
|
|
||||||
},
|
|
||||||
mips32_asm => {
|
|
||||||
template => 1,
|
|
||||||
bn_asm_src => "bn-mips.s mips-mont.s",
|
|
||||||
aes_asm_src => "aes_cbc.c aes-mips.S",
|
|
||||||
sha1_asm_src => "sha1-mips.S sha256-mips.S",
|
|
||||||
},
|
|
||||||
mips64_asm => {
|
|
||||||
inherit_from => [ "mips32_asm" ],
|
|
||||||
template => 1,
|
|
||||||
sha1_asm_src => add("sha512-mips.S")
|
|
||||||
},
|
|
||||||
s390x_asm => {
|
|
||||||
template => 1,
|
|
||||||
cpuid_asm_src => "s390xcap.c s390xcpuid.S",
|
|
||||||
bn_asm_src => "asm/s390x.S s390x-mont.S s390x-gf2m.s",
|
|
||||||
aes_asm_src => "aes-s390x.S aes-ctr.fake aes-xts.fake",
|
|
||||||
sha1_asm_src => "sha1-s390x.S sha256-s390x.S sha512-s390x.S",
|
|
||||||
rc4_asm_src => "rc4-s390x.s",
|
|
||||||
modes_asm_src => "ghash-s390x.S",
|
|
||||||
chacha_asm_src => "chacha-s390x.S",
|
|
||||||
poly1305_asm_src=> "poly1305-s390x.S",
|
|
||||||
},
|
|
||||||
armv4_asm => {
|
|
||||||
template => 1,
|
|
||||||
cpuid_asm_src => "armcap.c armv4cpuid.S",
|
|
||||||
bn_asm_src => "bn_asm.c armv4-mont.S armv4-gf2m.S",
|
|
||||||
ec_asm_src => "ecp_nistz256.c ecp_nistz256-armv4.S",
|
|
||||||
aes_asm_src => "aes_cbc.c aes-armv4.S bsaes-armv7.S aesv8-armx.S",
|
|
||||||
sha1_asm_src => "sha1-armv4-large.S sha256-armv4.S sha512-armv4.S",
|
|
||||||
modes_asm_src => "ghash-armv4.S ghashv8-armx.S",
|
|
||||||
chacha_asm_src => "chacha-armv4.S",
|
|
||||||
poly1305_asm_src=> "poly1305-armv4.S",
|
|
||||||
perlasm_scheme => "void"
|
|
||||||
},
|
|
||||||
aarch64_asm => {
|
|
||||||
template => 1,
|
|
||||||
cpuid_asm_src => "armcap.c arm64cpuid.S mem_clr.c",
|
|
||||||
ec_asm_src => "ecp_nistz256.c ecp_nistz256-armv8.S",
|
|
||||||
bn_asm_src => "bn_asm.c armv8-mont.S",
|
|
||||||
aes_asm_src => "aes_core.c aes_cbc.c aesv8-armx.S vpaes-armv8.S",
|
|
||||||
sha1_asm_src => "sha1-armv8.S sha256-armv8.S sha512-armv8.S",
|
|
||||||
modes_asm_src => "ghashv8-armx.S",
|
|
||||||
chacha_asm_src => "chacha-armv8.S",
|
|
||||||
poly1305_asm_src=> "poly1305-armv8.S",
|
|
||||||
},
|
|
||||||
parisc11_asm => {
|
|
||||||
template => 1,
|
|
||||||
cpuid_asm_src => "pariscid.s",
|
|
||||||
bn_asm_src => "bn_asm.c parisc-mont.s",
|
|
||||||
aes_asm_src => "aes_core.c aes_cbc.c aes-parisc.s",
|
|
||||||
sha1_asm_src => "sha1-parisc.s sha256-parisc.s sha512-parisc.s",
|
|
||||||
rc4_asm_src => "rc4-parisc.s",
|
|
||||||
modes_asm_src => "ghash-parisc.s",
|
|
||||||
perlasm_scheme => "32"
|
|
||||||
},
|
|
||||||
parisc20_64_asm => {
|
|
||||||
template => 1,
|
|
||||||
inherit_from => [ "parisc11_asm" ],
|
|
||||||
perlasm_scheme => "64",
|
|
||||||
},
|
|
||||||
ppc64_asm => {
|
|
||||||
template => 1,
|
|
||||||
cpuid_asm_src => "ppccpuid.s ppccap.c",
|
|
||||||
bn_asm_src => "bn-ppc.s ppc-mont.s ppc64-mont.s",
|
|
||||||
aes_asm_src => "aes_core.c aes_cbc.c aes-ppc.s vpaes-ppc.s aesp8-ppc.s",
|
|
||||||
sha1_asm_src => "sha1-ppc.s sha256-ppc.s sha512-ppc.s sha256p8-ppc.s sha512p8-ppc.s",
|
|
||||||
modes_asm_src => "ghashp8-ppc.s",
|
|
||||||
chacha_asm_src => "chacha-ppc.s",
|
|
||||||
poly1305_asm_src=> "poly1305-ppc.s poly1305-ppcfp.s",
|
|
||||||
},
|
|
||||||
ppc32_asm => {
|
|
||||||
inherit_from => [ "ppc64_asm" ],
|
|
||||||
template => 1
|
|
||||||
},
|
|
||||||
);
|
|
||||||
File diff suppressed because it is too large
Load Diff
@@ -1,126 +0,0 @@
|
|||||||
## -*- mode: perl; -*-
|
|
||||||
## Build configuration targets for openssl-team members
|
|
||||||
|
|
||||||
%targets = (
|
|
||||||
"purify" => {
|
|
||||||
cc => "purify gcc",
|
|
||||||
cflags => "-g -Wall",
|
|
||||||
thread_scheme => "(unknown)",
|
|
||||||
ex_libs => add(" ","-lsocket -lnsl"),
|
|
||||||
},
|
|
||||||
"debug" => {
|
|
||||||
cc => "gcc",
|
|
||||||
cflags => "-DBN_DEBUG -DREF_DEBUG -DCONF_DEBUG -DBN_CTX_DEBUG -DOPENSSL_NO_ASM -ggdb -g2 -Wformat -Wshadow -Wmissing-prototypes -Wmissing-declarations -Werror",
|
|
||||||
thread_scheme => "(unknown)",
|
|
||||||
ex_libs => add(" ","-lefence"),
|
|
||||||
},
|
|
||||||
"debug-erbridge" => {
|
|
||||||
inherit_from => [ "x86_64_asm" ],
|
|
||||||
cc => "gcc",
|
|
||||||
cflags => combine("$gcc_devteam_warn -DBN_DEBUG -DCONF_DEBUG -m64 -DL_ENDIAN -DTERMIO -g",
|
|
||||||
threads("-D_REENTRANT")),
|
|
||||||
ex_libs => add(" ","-ldl"),
|
|
||||||
bn_ops => "SIXTY_FOUR_BIT_LONG",
|
|
||||||
thread_scheme => "pthreads",
|
|
||||||
perlasm_scheme => "elf",
|
|
||||||
dso_scheme => "dlfcn",
|
|
||||||
shared_target => "linux-shared",
|
|
||||||
shared_cflag => "-fPIC",
|
|
||||||
shared_ldflag => "-m64",
|
|
||||||
shared_extension => ".so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
|
|
||||||
multilib => "64",
|
|
||||||
},
|
|
||||||
"debug-linux-pentium" => {
|
|
||||||
inherit_from => [ "x86_elf_asm" ],
|
|
||||||
cc => "gcc",
|
|
||||||
cflags => combine("-DBN_DEBUG -DREF_DEBUG -DCONF_DEBUG -DBN_CTX_DEBUG -DL_ENDIAN -g -mcpu=pentium -Wall",
|
|
||||||
threads("-D_REENTRANT")),
|
|
||||||
ex_libs => add(" ","-ldl"),
|
|
||||||
bn_ops => "BN_LLONG",
|
|
||||||
thread_scheme => "pthreads",
|
|
||||||
dso_scheme => "dlfcn",
|
|
||||||
},
|
|
||||||
"debug-linux-ppro" => {
|
|
||||||
inherit_from => [ "x86_elf_asm" ],
|
|
||||||
cc => "gcc",
|
|
||||||
cflags => combine("-DBN_DEBUG -DREF_DEBUG -DCONF_DEBUG -DBN_CTX_DEBUG -DL_ENDIAN -g -mcpu=pentiumpro -Wall",
|
|
||||||
threads("-D_REENTRANT")),
|
|
||||||
ex_libs => add(" ","-ldl"),
|
|
||||||
bn_ops => "BN_LLONG",
|
|
||||||
thread_scheme => "pthreads",
|
|
||||||
dso_scheme => "dlfcn",
|
|
||||||
},
|
|
||||||
"debug-linux-elf-noefence" => {
|
|
||||||
inherit_from => [ "x86_elf_asm" ],
|
|
||||||
cc => "gcc",
|
|
||||||
cflags => combine("-DBN_DEBUG -DREF_DEBUG -DCONF_DEBUG -DBN_CTX_DEBUG -DL_ENDIAN -g -Wall",
|
|
||||||
threads("-D_REENTRANT")),
|
|
||||||
ex_libs => add(" ","-ldl"),
|
|
||||||
bn_ops => "BN_LLONG",
|
|
||||||
thread_scheme => "pthreads",
|
|
||||||
dso_scheme => "dlfcn",
|
|
||||||
shared_target => "linux-shared",
|
|
||||||
shared_cflag => "-fPIC",
|
|
||||||
shared_extension => ".so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
|
|
||||||
},
|
|
||||||
"debug-linux-ia32-aes" => {
|
|
||||||
cc => "gcc",
|
|
||||||
cflags => combine("-DL_ENDIAN -O3 -fomit-frame-pointer -Wall",
|
|
||||||
threads("-D_REENTRANT")),
|
|
||||||
ex_libs => add(" ","-ldl"),
|
|
||||||
bn_ops => "BN_LLONG",
|
|
||||||
cpuid_asm_src => "x86cpuid.s",
|
|
||||||
bn_asm_src => "bn-586.s co-586.s x86-mont.s",
|
|
||||||
des_asm_src => "des-586.s crypt586.s",
|
|
||||||
aes_asm_src => "aes_x86core.s aes_cbc.s aesni-x86.s",
|
|
||||||
bf_asm_src => "bf-586.s",
|
|
||||||
md5_asm_src => "md5-586.s",
|
|
||||||
sha1_asm_src => "sha1-586.s sha256-586.s sha512-586.s",
|
|
||||||
cast_asm_src => "cast-586.s",
|
|
||||||
rc4_asm_src => "rc4-586.s",
|
|
||||||
rmd160_asm_src => "rmd-586.s",
|
|
||||||
rc5_asm_src => "rc5-586.s",
|
|
||||||
wp_asm_src => "wp_block.s wp-mmx.s",
|
|
||||||
modes_asm_src => "ghash-x86.s",
|
|
||||||
padlock_asm_src => "e_padlock-x86.s",
|
|
||||||
thread_scheme => "pthreads",
|
|
||||||
perlasm_scheme => "elf",
|
|
||||||
dso_scheme => "dlfcn",
|
|
||||||
shared_target => "linux-shared",
|
|
||||||
shared_cflag => "-fPIC",
|
|
||||||
shared_extension => ".so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
|
|
||||||
},
|
|
||||||
"dist" => {
|
|
||||||
cc => "cc",
|
|
||||||
cflags => "-O",
|
|
||||||
thread_scheme => "(unknown)",
|
|
||||||
},
|
|
||||||
"debug-test-64-clang" => {
|
|
||||||
inherit_from => [ "x86_64_asm" ],
|
|
||||||
cc => "clang",
|
|
||||||
cflags => combine("$gcc_devteam_warn -Wno-error=overlength-strings -Wno-error=extended-offsetof -Wno-error=language-extension-token -Wno-error=unused-const-variable -Wstrict-overflow -Qunused-arguments -DBN_DEBUG -DCONF_DEBUG -DDEBUG_SAFESTACK -DDEBUG_UNUSED -g3 -O3 -pipe",
|
|
||||||
threads("${BSDthreads}")),
|
|
||||||
bn_ops => "SIXTY_FOUR_BIT_LONG",
|
|
||||||
thread_scheme => "pthreads",
|
|
||||||
perlasm_scheme => "elf",
|
|
||||||
dso_scheme => "dlfcn",
|
|
||||||
shared_target => "bsd-gcc-shared",
|
|
||||||
shared_cflag => "-fPIC",
|
|
||||||
shared_extension => ".so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
|
|
||||||
},
|
|
||||||
"darwin64-debug-test-64-clang" => {
|
|
||||||
inherit_from => [ "x86_64_asm" ],
|
|
||||||
cc => "clang",
|
|
||||||
cflags => combine("-arch x86_64 -DL_ENDIAN $gcc_devteam_warn -Wno-error=overlength-strings -Wno-error=extended-offsetof -Wno-error=language-extension-token -Wno-error=unused-const-variable -Wstrict-overflow -Qunused-arguments -DBN_DEBUG -DCONF_DEBUG -DDEBUG_SAFESTACK -DDEBUG_UNUSED -g3 -O3 -pipe",
|
|
||||||
threads("${BSDthreads}")),
|
|
||||||
sys_id => "MACOSX",
|
|
||||||
bn_ops => "SIXTY_FOUR_BIT_LONG",
|
|
||||||
thread_scheme => "pthreads",
|
|
||||||
perlasm_scheme => "macosx",
|
|
||||||
dso_scheme => "dlfcn",
|
|
||||||
shared_target => "darwin-shared",
|
|
||||||
shared_cflag => "-fPIC -fno-common",
|
|
||||||
shared_ldflag => "-arch x86_64 -dynamiclib",
|
|
||||||
shared_extension => ".\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
|
|
||||||
},
|
|
||||||
);
|
|
||||||
@@ -1,95 +0,0 @@
|
|||||||
## -*- mode: perl; -*-
|
|
||||||
## Personal configuration targets
|
|
||||||
|
|
||||||
%targets = (
|
|
||||||
"debug-ben" => {
|
|
||||||
cc => "gcc",
|
|
||||||
cflags => "$gcc_devteam_warn -DBN_DEBUG -DREF_DEBUG -DCONF_DEBUG -DBN_CTX_DEBUG -DDEBUG_SAFESTACK -O2 -pipe",
|
|
||||||
thread_scheme => "(unknown)",
|
|
||||||
},
|
|
||||||
"debug-ben-openbsd" => {
|
|
||||||
cc => "gcc",
|
|
||||||
cflags => "-DBN_DEBUG -DREF_DEBUG -DCONF_DEBUG -DBN_CTX_DEBUG -DPEDANTIC -DDEBUG_SAFESTACK -DOPENSSL_OPENBSD_DEV_CRYPTO -DOPENSSL_NO_ASM -O2 -pedantic -Wall -Wshadow -Werror -pipe",
|
|
||||||
thread_scheme => "(unknown)",
|
|
||||||
},
|
|
||||||
"debug-ben-openbsd-debug" => {
|
|
||||||
cc => "gcc",
|
|
||||||
cflags => "-DBN_DEBUG -DREF_DEBUG -DCONF_DEBUG -DBN_CTX_DEBUG -DPEDANTIC -DDEBUG_SAFESTACK -DOPENSSL_OPENBSD_DEV_CRYPTO -DOPENSSL_NO_ASM -g3 -O2 -pedantic -Wall -Wshadow -Werror -pipe",
|
|
||||||
thread_scheme => "(unknown)",
|
|
||||||
},
|
|
||||||
"debug-ben-debug" => {
|
|
||||||
cc => "gcc",
|
|
||||||
cflags => "$gcc_devteam_warn -DBN_DEBUG -DCONF_DEBUG -DDEBUG_SAFESTACK -DOPENSSL_NO_HW_PADLOCK -g3 -O2 -pipe",
|
|
||||||
thread_scheme => "(unknown)",
|
|
||||||
},
|
|
||||||
"debug-ben-debug-64" => {
|
|
||||||
inherit_from => [ "x86_64_asm" ],
|
|
||||||
cc => "gcc",
|
|
||||||
cflags => combine("$gcc_devteam_warn -Wno-error=overlength-strings -DBN_DEBUG -DCONF_DEBUG -DDEBUG_SAFESTACK -DDEBUG_UNUSED -g3 -O3 -pipe",
|
|
||||||
threads("${BSDthreads}")),
|
|
||||||
bn_ops => "SIXTY_FOUR_BIT_LONG",
|
|
||||||
thread_scheme => "pthreads",
|
|
||||||
perlasm_scheme => "elf",
|
|
||||||
dso_scheme => "dlfcn",
|
|
||||||
shared_target => "bsd-gcc-shared",
|
|
||||||
shared_cflag => "-fPIC",
|
|
||||||
shared_extension => ".so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
|
|
||||||
},
|
|
||||||
"debug-ben-debug-64-clang" => {
|
|
||||||
inherit_from => [ "x86_64_asm" ],
|
|
||||||
cc => "clang",
|
|
||||||
cflags => combine("$gcc_devteam_warn -Wno-error=overlength-strings -Wno-error=extended-offsetof -Wno-error=language-extension-token -Wstrict-overflow -Qunused-arguments -DBN_DEBUG -DCONF_DEBUG -DDEBUG_SAFESTACK -DDEBUG_UNUSED -g3 -O3 -pipe",
|
|
||||||
threads("${BSDthreads}")),
|
|
||||||
bn_ops => "SIXTY_FOUR_BIT_LONG",
|
|
||||||
thread_scheme => "pthreads",
|
|
||||||
perlasm_scheme => "elf",
|
|
||||||
dso_scheme => "dlfcn",
|
|
||||||
shared_target => "bsd-gcc-shared",
|
|
||||||
shared_cflag => "-fPIC",
|
|
||||||
shared_extension => ".so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
|
|
||||||
},
|
|
||||||
"debug-ben-debug-64-noopt" => {
|
|
||||||
inherit_from => [ "x86_64_asm" ],
|
|
||||||
cc => "gcc",
|
|
||||||
cflags => combine("$gcc_devteam_warn -Wno-error=overlength-strings -DBN_DEBUG -DCONF_DEBUG -DDEBUG_SAFESTACK -DDEBUG_UNUSED -g3 -pipe",
|
|
||||||
threads("${BSDthreads}")),
|
|
||||||
bn_ops => "SIXTY_FOUR_BIT_LONG",
|
|
||||||
thread_scheme => "pthreads",
|
|
||||||
perlasm_scheme => "elf",
|
|
||||||
dso_scheme => "dlfcn",
|
|
||||||
shared_target => "bsd-gcc-shared",
|
|
||||||
shared_cflag => "-fPIC",
|
|
||||||
shared_extension => ".so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
|
|
||||||
},
|
|
||||||
"debug-ben-macos" => {
|
|
||||||
cc => "cc",
|
|
||||||
cflags => "$gcc_devteam_warn -DOPENSSL_NO_ASM -DBN_DEBUG -DCONF_DEBUG -DDEBUG_SAFESTACK -DDEBUG_UNUSED -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -arch i386 -O3 -DL_ENDIAN -g3 -pipe",
|
|
||||||
thread_scheme => "(unknown)",
|
|
||||||
},
|
|
||||||
"debug-ben-no-opt" => {
|
|
||||||
cc => "gcc",
|
|
||||||
cflags => " -Wall -Wmissing-prototypes -Wstrict-prototypes -Wmissing-declarations -DDEBUG_SAFESTACK -Werror -DL_ENDIAN -Wall -g3",
|
|
||||||
thread_scheme => "(unknown)",
|
|
||||||
},
|
|
||||||
"debug-ben-strict" => {
|
|
||||||
cc => "gcc",
|
|
||||||
cflags => "-DBN_DEBUG -DREF_DEBUG -DCONF_DEBUG -DBN_CTX_DEBUG -DCONST_STRICT -O2 -Wall -Wshadow -Werror -Wpointer-arith -Wcast-qual -Wwrite-strings -pipe",
|
|
||||||
thread_scheme => "(unknown)",
|
|
||||||
},
|
|
||||||
"debug-ben-darwin64" => {
|
|
||||||
inherit_from => [ "x86_64_asm" ],
|
|
||||||
cc => "cc",
|
|
||||||
cflags => combine("$gcc_devteam_warn -Wno-language-extension-token -Wno-extended-offsetof -arch x86_64 -O3 -DL_ENDIAN -DMD32_REG_T=int -Wall",
|
|
||||||
threads("-D_REENTRANT")),
|
|
||||||
sys_id => "MACOSX",
|
|
||||||
plib_lflags => "-Wl,-search_paths_first",
|
|
||||||
bn_ops => "SIXTY_FOUR_BIT_LONG",
|
|
||||||
thread_scheme => "pthreads",
|
|
||||||
perlasm_scheme => "macosx",
|
|
||||||
dso_scheme => "dlfcn",
|
|
||||||
shared_target => "darwin-shared",
|
|
||||||
shared_cflag => "-fPIC -fno-common",
|
|
||||||
shared_ldflag => "-arch x86_64 -dynamiclib",
|
|
||||||
shared_extension => ".\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
|
|
||||||
},
|
|
||||||
);
|
|
||||||
@@ -1,21 +0,0 @@
|
|||||||
## -*- mode: perl; -*-
|
|
||||||
## Personal configuration targets
|
|
||||||
|
|
||||||
%targets = (
|
|
||||||
"debug-bodo" => {
|
|
||||||
inherit_from => [ "x86_64_asm" ],
|
|
||||||
cc => "gcc",
|
|
||||||
cflags => combine("$gcc_devteam_warn -Wno-error=overlength-strings -DBN_DEBUG -DBN_DEBUG_RAND -DCONF_DEBUG -m64 -DL_ENDIAN -DTERMIO -g -DMD32_REG_T=int",
|
|
||||||
threads("-D_REENTRANT")),
|
|
||||||
ex_libs => add(" ","-ldl"),
|
|
||||||
bn_ops => "SIXTY_FOUR_BIT_LONG",
|
|
||||||
thread_scheme => "pthreads",
|
|
||||||
perlasm_scheme => "elf",
|
|
||||||
dso_scheme => "dlfcn",
|
|
||||||
shared_target => "linux-shared",
|
|
||||||
shared_cflag => "-fPIC",
|
|
||||||
shared_ldflag => "-m64",
|
|
||||||
shared_extension => ".so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
|
|
||||||
multilib => "64",
|
|
||||||
},
|
|
||||||
);
|
|
||||||
@@ -1,29 +0,0 @@
|
|||||||
## -*- mode: perl; -*-
|
|
||||||
## Personal configuration targets
|
|
||||||
|
|
||||||
%targets = (
|
|
||||||
"debug-geoff32" => {
|
|
||||||
cc => "gcc",
|
|
||||||
cflags => combine("-DBN_DEBUG -DBN_DEBUG_RAND -DBN_STRICT -DOPENSSL_NO_DEPRECATED -DOPENSSL_NO_ASM -DOPENSSL_NO_INLINE_ASM -DL_ENDIAN -DTERMIO -DPEDANTIC -O1 -ggdb2 -Wall -Werror -Wundef -pedantic -Wshadow -Wpointer-arith -Wbad-function-cast -Wcast-align -Wsign-compare -Wmissing-prototypes -Wmissing-declarations -Wno-long-long",
|
|
||||||
threads("-D_REENTRANT")),
|
|
||||||
ex_libs => add(" ","-ldl"),
|
|
||||||
bn_ops => "BN_LLONG",
|
|
||||||
thread_scheme => "pthreads",
|
|
||||||
dso_scheme => "dlfcn",
|
|
||||||
shared_target => "linux-shared",
|
|
||||||
shared_cflag => "-fPIC",
|
|
||||||
shared_extension => ".so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
|
|
||||||
},
|
|
||||||
"debug-geoff64" => {
|
|
||||||
cc => "gcc",
|
|
||||||
cflags => combine("-DBN_DEBUG -DBN_DEBUG_RAND -DBN_STRICT -DOPENSSL_NO_DEPRECATED -DOPENSSL_NO_ASM -DOPENSSL_NO_INLINE_ASM -DL_ENDIAN -DTERMIO -DPEDANTIC -O1 -ggdb2 -Wall -Werror -Wundef -pedantic -Wshadow -Wpointer-arith -Wbad-function-cast -Wcast-align -Wsign-compare -Wmissing-prototypes -Wmissing-declarations -Wno-long-long",
|
|
||||||
threads("-D_REENTRANT")),
|
|
||||||
ex_libs => add(" ","-ldl"),
|
|
||||||
bn_ops => "SIXTY_FOUR_BIT_LONG RC4_CHAR",
|
|
||||||
thread_scheme => "pthreads",
|
|
||||||
dso_scheme => "dlfcn",
|
|
||||||
shared_target => "linux-shared",
|
|
||||||
shared_cflag => "-fPIC",
|
|
||||||
shared_extension => ".so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
|
|
||||||
},
|
|
||||||
);
|
|
||||||
@@ -1,21 +0,0 @@
|
|||||||
## -*- mode: perl; -*-
|
|
||||||
## Personal configuration targets
|
|
||||||
|
|
||||||
%targets = (
|
|
||||||
"levitte-linux-elf" => {
|
|
||||||
inherit_from => [ "linux-elf" ],
|
|
||||||
cflags => add(picker(debug => "-ggdb -g3")),
|
|
||||||
defines => add(picker(debug => "LEVITTE_DEBUG"),
|
|
||||||
{ separator => undef }),
|
|
||||||
build_scheme => [ "unified", "unix" ],
|
|
||||||
build_file => "Makefile",
|
|
||||||
},
|
|
||||||
"levitte-linux-x86_64" => {
|
|
||||||
inherit_from => [ "linux-x86_64" ],
|
|
||||||
cflags => add(picker(debug => "-ggdb -g3")),
|
|
||||||
defines => add(picker(debug => "LEVITTE_DEBUG"),
|
|
||||||
{ separator => undef }),
|
|
||||||
build_scheme => [ "unified", "unix" ],
|
|
||||||
build_file => "Makefile",
|
|
||||||
},
|
|
||||||
);
|
|
||||||
@@ -1,12 +0,0 @@
|
|||||||
## -*- mode: perl; -*-
|
|
||||||
## Personal configuration targets
|
|
||||||
|
|
||||||
%targets = (
|
|
||||||
"debug-rse" => {
|
|
||||||
inherit_from => [ "x86_elf_asm" ],
|
|
||||||
cc => "cc",
|
|
||||||
cflags => "-DL_ENDIAN -pipe -O -g -ggdb3 -Wall",
|
|
||||||
thread_scheme => "(unknown)",
|
|
||||||
bn_ops => "BN_LLONG",
|
|
||||||
},
|
|
||||||
);
|
|
||||||
@@ -1,50 +0,0 @@
|
|||||||
## -*- mode: perl; -*-
|
|
||||||
## Personal configuration targets
|
|
||||||
|
|
||||||
%targets = (
|
|
||||||
"debug-steve64" => {
|
|
||||||
inherit_from => [ "x86_64_asm" ],
|
|
||||||
cc => "gcc",
|
|
||||||
cflags => combine("$gcc_devteam_warn -pthread -m64 -DL_ENDIAN -DTERMIO -DCONF_DEBUG -g",
|
|
||||||
threads("-D_REENTRANT")),
|
|
||||||
ex_libs => add(" ","-ldl"),
|
|
||||||
bn_ops => "SIXTY_FOUR_BIT_LONG",
|
|
||||||
thread_scheme => "pthreads",
|
|
||||||
perlasm_scheme => "elf",
|
|
||||||
dso_scheme => "dlfcn",
|
|
||||||
shared_target => "linux-shared",
|
|
||||||
shared_cflag => "-fPIC",
|
|
||||||
shared_ldflag => "-m64",
|
|
||||||
shared_extension => ".so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
|
|
||||||
},
|
|
||||||
"debug-steve32" => {
|
|
||||||
inherit_from => [ "x86_elf_asm" ],
|
|
||||||
cc => "gcc",
|
|
||||||
cflags => combine("$gcc_devteam_warn -pthread -m32 -DL_ENDIAN -DCONF_DEBUG -g",
|
|
||||||
threads("-D_REENTRANT")),
|
|
||||||
lflags => "-rdynamic",
|
|
||||||
ex_libs => add(" ","-ldl"),
|
|
||||||
bn_ops => "BN_LLONG",
|
|
||||||
thread_scheme => "pthreads",
|
|
||||||
dso_scheme => "dlfcn",
|
|
||||||
shared_target => "linux-shared",
|
|
||||||
shared_cflag => "-fPIC",
|
|
||||||
shared_ldflag => "-m32",
|
|
||||||
shared_extension => ".so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
|
|
||||||
},
|
|
||||||
"debug-steve-opt" => {
|
|
||||||
inherit_from => [ "x86_64_asm" ],
|
|
||||||
cc => "gcc",
|
|
||||||
cflags => combine("$gcc_devteam_warn -pthread -m64 -O3 -DL_ENDIAN -DTERMIO -DCONF_DEBUG -g",
|
|
||||||
threads("-D_REENTRANT")),
|
|
||||||
ex_libs => add(" ","-ldl"),
|
|
||||||
bn_ops => "SIXTY_FOUR_BIT_LONG",
|
|
||||||
thread_scheme => "pthreads",
|
|
||||||
perlasm_scheme => "elf",
|
|
||||||
dso_scheme => "dlfcn",
|
|
||||||
shared_target => "linux-shared",
|
|
||||||
shared_cflag => "-fPIC",
|
|
||||||
shared_ldflag => "-m64",
|
|
||||||
shared_extension => ".so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
|
|
||||||
},
|
|
||||||
);
|
|
||||||
@@ -1,136 +0,0 @@
|
|||||||
Configure Internals
|
|
||||||
===================
|
|
||||||
|
|
||||||
[ note: this file uses markdown for formatting ]
|
|
||||||
|
|
||||||
Intro
|
|
||||||
-----
|
|
||||||
|
|
||||||
This is a collection of notes that are hopefully of interest to those
|
|
||||||
who decide to dive into Configure and what it does. This is a living
|
|
||||||
document and anyone is encouraged to add to it and submit changes.
|
|
||||||
There's no claim for this document to be complete at any time, but it
|
|
||||||
will hopefully reach such a point in time.
|
|
||||||
|
|
||||||
|
|
||||||
----------------------------------------------------------------------
|
|
||||||
|
|
||||||
Parsing build.info files, processing conditions
|
|
||||||
-----------------------------------------------
|
|
||||||
|
|
||||||
Processing conditions in build.info files is done with the help of a
|
|
||||||
condition stack that tell if a build.info should be processed or if it
|
|
||||||
should just be skipped over. The possible states of the stack top are
|
|
||||||
expressed in the following comment from Configure:
|
|
||||||
|
|
||||||
# The top item of this stack has the following values
|
|
||||||
# -2 positive already run and we found ELSE (following ELSIF should fail)
|
|
||||||
# -1 positive already run (skip until ENDIF)
|
|
||||||
# 0 negatives so far (if we're at a condition, check it)
|
|
||||||
# 1 last was positive (don't skip lines until next ELSE, ELSIF or ENDIF)
|
|
||||||
# 2 positive ELSE (following ELSIF should fail)
|
|
||||||
|
|
||||||
Ground rule is that non-condition lines are skipped over if the
|
|
||||||
stack top is > 0. Condition lines (IF, ELSIF, ELSE and ENDIF
|
|
||||||
statements) need to be processed either way to keep track of the skip
|
|
||||||
stack states, so they are a little more intricate.
|
|
||||||
|
|
||||||
Instead of trying to describe in words, here are some example of what
|
|
||||||
the skip stack should look like after each line is processed:
|
|
||||||
|
|
||||||
Example 1:
|
|
||||||
|
|
||||||
| IF[1] | 1 | |
|
|
||||||
| ... whatever ... | | this line is processed |
|
|
||||||
| IF[1] | 1 1 | |
|
|
||||||
| ... whatever ... | | this line is processed |
|
|
||||||
| ELSIF[1] | 1 -1 | |
|
|
||||||
| ... whatever ... | | this line is skipped over |
|
|
||||||
| ELSE | 1 -2 | |
|
|
||||||
| ... whatever ... | | this line is skipped over |
|
|
||||||
| ENDIF | 1 | |
|
|
||||||
| ... whatever ... | | this line is processed |
|
|
||||||
| ELSIF[1] | -1 | |
|
|
||||||
| ... whatever ... | | this line is skipped over |
|
|
||||||
| IF[1] | -1 -1 | |
|
|
||||||
| ... whatever ... | | this line is skipped over |
|
|
||||||
| ELSIF[1] | -1 -1 | |
|
|
||||||
| ... whatever ... | | this line is skipped over |
|
|
||||||
| ELSE | -1 -2 | |
|
|
||||||
| ... whatever ... | | this line is skipped over |
|
|
||||||
| ENDIF | -1 | |
|
|
||||||
| ... whatever ... | | this line is skipped over |
|
|
||||||
| ENDIF | | |
|
|
||||||
|
|
||||||
Example 2:
|
|
||||||
|
|
||||||
| IF[0] | 0 | |
|
|
||||||
| ... whatever ... | | this line is skipped over |
|
|
||||||
| IF[1] | 0 -1 | |
|
|
||||||
| ... whatever ... | | this line is skipped over |
|
|
||||||
| ELSIF[1] | 0 -1 | |
|
|
||||||
| ... whatever ... | | this line is skipped over |
|
|
||||||
| ELSE | 0 -2 | |
|
|
||||||
| ... whatever ... | | this line is skipped over |
|
|
||||||
| ENDIF | 0 | |
|
|
||||||
| ... whatever ... | | this line is skipped over |
|
|
||||||
| ELSIF[1] | 1 | |
|
|
||||||
| ... whatever ... | | this line is processed |
|
|
||||||
| IF[1] | 1 1 | |
|
|
||||||
| ... whatever ... | | this line is processed |
|
|
||||||
| ELSIF[1] | 1 -1 | |
|
|
||||||
| ... whatever ... | | this line is skipped over |
|
|
||||||
| ELSE | 1 -2 | |
|
|
||||||
| ... whatever ... | | this line is skipped over |
|
|
||||||
| ENDIF | 1 | |
|
|
||||||
| ... whatever ... | | this line is processed |
|
|
||||||
| ENDIF | | |
|
|
||||||
|
|
||||||
Example 3:
|
|
||||||
|
|
||||||
| IF[0] | 0 | |
|
|
||||||
| ... whatever ... | | this line is skipped over |
|
|
||||||
| IF[0] | 0 -1 | |
|
|
||||||
| ... whatever ... | | this line is skipped over |
|
|
||||||
| ELSIF[1] | 0 -1 | |
|
|
||||||
| ... whatever ... | | this line is skipped over |
|
|
||||||
| ELSE | 0 -2 | |
|
|
||||||
| ... whatever ... | | this line is skipped over |
|
|
||||||
| ENDIF | 0 | |
|
|
||||||
| ... whatever ... | | this line is skipped over |
|
|
||||||
| ELSIF[1] | 1 | |
|
|
||||||
| ... whatever ... | | this line is processed |
|
|
||||||
| IF[0] | 1 0 | |
|
|
||||||
| ... whatever ... | | this line is skipped over |
|
|
||||||
| ELSIF[1] | 1 1 | |
|
|
||||||
| ... whatever ... | | this line is processed |
|
|
||||||
| ELSE | 1 -2 | |
|
|
||||||
| ... whatever ... | | this line is skipped over |
|
|
||||||
| ENDIF | 1 | |
|
|
||||||
| ... whatever ... | | this line is processed |
|
|
||||||
| ENDIF | | |
|
|
||||||
|
|
||||||
Example 4:
|
|
||||||
|
|
||||||
| IF[0] | 0 | |
|
|
||||||
| ... whatever ... | | this line is skipped over |
|
|
||||||
| IF[0] | 0 -1 | |
|
|
||||||
| ... whatever ... | | this line is skipped over |
|
|
||||||
| ELSIF[0] | 0 -1 | |
|
|
||||||
| ... whatever ... | | this line is skipped over |
|
|
||||||
| ELSE | 0 -2 | |
|
|
||||||
| ... whatever ... | | this line is skipped over |
|
|
||||||
| ENDIF | 0 | |
|
|
||||||
| ... whatever ... | | this line is skipped over |
|
|
||||||
| ELSIF[1] | 1 | |
|
|
||||||
| ... whatever ... | | this line is processed |
|
|
||||||
| IF[0] | 1 0 | |
|
|
||||||
| ... whatever ... | | this line is skipped over |
|
|
||||||
| ELSIF[0] | 1 0 | |
|
|
||||||
| ... whatever ... | | this line is skipped over |
|
|
||||||
| ELSE | 1 2 | |
|
|
||||||
| ... whatever ... | | this line is processed |
|
|
||||||
| ENDIF | 1 | |
|
|
||||||
| ... whatever ... | | this line is processed |
|
|
||||||
| ENDIF | | |
|
|
||||||
|
|
||||||
@@ -1,635 +0,0 @@
|
|||||||
Configurations of OpenSSL target platforms
|
|
||||||
==========================================
|
|
||||||
|
|
||||||
Target configurations are a collection of facts that we know about
|
|
||||||
different platforms and their capabilities. We organise them in a
|
|
||||||
hash table, where each entry represent a specific target.
|
|
||||||
|
|
||||||
In each table entry, the following keys are significant:
|
|
||||||
|
|
||||||
inherit_from => Other targets to inherit values from.
|
|
||||||
Explained further below. [1]
|
|
||||||
template => Set to 1 if this isn't really a platform
|
|
||||||
target. Instead, this target is a template
|
|
||||||
upon which other targets can be built.
|
|
||||||
Explained further below. [1]
|
|
||||||
|
|
||||||
sys_id => System identity for systems where that
|
|
||||||
is difficult to determine automatically.
|
|
||||||
|
|
||||||
cc => The compiler command, usually one of "cc",
|
|
||||||
"gcc" or "clang". This command is normally
|
|
||||||
also used to link object files and
|
|
||||||
libraries into the final program.
|
|
||||||
cflags => Flags that are used at all times when
|
|
||||||
compiling.
|
|
||||||
defines => As an alternative, macro definitions may be
|
|
||||||
present here instead of in `cflags'. If
|
|
||||||
given here, they MUST be as an array of the
|
|
||||||
string such as "MACRO=value", or just
|
|
||||||
"MACRO" for definitions without value.
|
|
||||||
shared_cflag => Extra compilation flags used when
|
|
||||||
compiling for shared libraries, typically
|
|
||||||
something like "-fPIC".
|
|
||||||
|
|
||||||
(linking is a complex thing, see [3] below)
|
|
||||||
ld => Linker command, usually not defined
|
|
||||||
(meaning the compiler command is used
|
|
||||||
instead).
|
|
||||||
(NOTE: this is here for future use, it's
|
|
||||||
not implemented yet)
|
|
||||||
lflags => Flags that are used when linking apps.
|
|
||||||
shared_ldflag => Flags that are used when linking shared
|
|
||||||
or dynamic libraries.
|
|
||||||
plib_lflags => Extra linking flags to appear just before
|
|
||||||
the libraries on the command line.
|
|
||||||
ex_libs => Extra libraries that are needed when
|
|
||||||
linking.
|
|
||||||
|
|
||||||
ar => The library archive command, the default is
|
|
||||||
"ar".
|
|
||||||
(NOTE: this is here for future use, it's
|
|
||||||
not implemented yet)
|
|
||||||
arflags => Flags to be used with the library archive
|
|
||||||
command.
|
|
||||||
|
|
||||||
ranlib => The library archive indexing command, the
|
|
||||||
default is 'ranlib' it it exists.
|
|
||||||
|
|
||||||
unistd => An alternative header to the typical
|
|
||||||
'<unistd.h>'. This is very rarely needed.
|
|
||||||
|
|
||||||
shared_extension => File name extension used for shared
|
|
||||||
libraries.
|
|
||||||
obj_extension => File name extension used for object files.
|
|
||||||
On unix, this defaults to ".o" (NOTE: this
|
|
||||||
is here for future use, it's not
|
|
||||||
implemented yet)
|
|
||||||
exe_extension => File name extension used for executable
|
|
||||||
files. On unix, this defaults to "" (NOTE:
|
|
||||||
this is here for future use, it's not
|
|
||||||
implemented yet)
|
|
||||||
|
|
||||||
thread_scheme => The type of threads is used on the
|
|
||||||
configured platform. Currently known
|
|
||||||
values are "(unknown)", "pthreads",
|
|
||||||
"uithreads" (a.k.a solaris threads) and
|
|
||||||
"winthreads". Except for "(unknown)", the
|
|
||||||
actual value is currently ignored but may
|
|
||||||
be used in the future. See further notes
|
|
||||||
below [2].
|
|
||||||
dso_scheme => The type of dynamic shared objects to build
|
|
||||||
for. This mostly comes into play with
|
|
||||||
engines, but can be used for other purposes
|
|
||||||
as well. Valid values are "DLFCN"
|
|
||||||
(dlopen() et al), "DLFCN_NO_H" (for systems
|
|
||||||
that use dlopen() et al but do not have
|
|
||||||
fcntl.h), "DL" (shl_load() et al), "WIN32"
|
|
||||||
and "VMS".
|
|
||||||
perlasm_scheme => The perlasm method used to created the
|
|
||||||
assembler files used when compiling with
|
|
||||||
assembler implementations.
|
|
||||||
shared_target => The shared library building method used.
|
|
||||||
This is a target found in Makefile.shared.
|
|
||||||
build_scheme => The scheme used to build up a Makefile.
|
|
||||||
In its simplest form, the value is a string
|
|
||||||
with the name of the build scheme.
|
|
||||||
The value may also take the form of a list
|
|
||||||
of strings, if the build_scheme is to have
|
|
||||||
some options. In this case, the first
|
|
||||||
string in the list is the name of the build
|
|
||||||
scheme.
|
|
||||||
Currently recognised build schemes are
|
|
||||||
"unixmake" and "unified".
|
|
||||||
For the "unified" build scheme, this item
|
|
||||||
*must* be an array with the first being the
|
|
||||||
word "unified" and the second being a word
|
|
||||||
to identify the platform family.
|
|
||||||
|
|
||||||
multilib => On systems that support having multiple
|
|
||||||
implementations of a library (typically a
|
|
||||||
32-bit and a 64-bit variant), this is used
|
|
||||||
to have the different variants in different
|
|
||||||
directories.
|
|
||||||
|
|
||||||
bn_ops => Building options (was just bignum options
|
|
||||||
in the earlier history of this option,
|
|
||||||
hence the name). This a string of words
|
|
||||||
that describe properties on the designated
|
|
||||||
target platform, such as the type of
|
|
||||||
integers used to build up the bitnum,
|
|
||||||
different ways to implement certain ciphers
|
|
||||||
and so on. To fully comprehend the
|
|
||||||
meaning, the best is to read the affected
|
|
||||||
source.
|
|
||||||
The valid words are:
|
|
||||||
|
|
||||||
BN_LLONG use 'unsigned long long' in
|
|
||||||
some bignum calculations.
|
|
||||||
This has no value when
|
|
||||||
SIXTY_FOUR_BIT or
|
|
||||||
SIXTY_FOUR_BIT_LONG is given.
|
|
||||||
RC4_CHAR makes the basic RC4 unit of
|
|
||||||
calculation an unsigned char.
|
|
||||||
SIXTY_FOUR_BIT processor registers
|
|
||||||
are 64 bits, long is
|
|
||||||
32 bits, long long is
|
|
||||||
64 bits.
|
|
||||||
SIXTY_FOUR_BIT_LONG processor registers
|
|
||||||
are 64 bits, long is
|
|
||||||
64 bits.
|
|
||||||
THIRTY_TWO_BIT processor registers
|
|
||||||
are 32 bits.
|
|
||||||
EXPORT_VAR_AS_FN for shared libraries,
|
|
||||||
export vars as
|
|
||||||
accessor functions.
|
|
||||||
|
|
||||||
apps_extra_src => Extra source to build apps/openssl, as
|
|
||||||
needed by the target.
|
|
||||||
cpuid_asm_src => assembler implementation of cpuid code as
|
|
||||||
well as OPENSSL_cleanse().
|
|
||||||
Default to mem_clr.c
|
|
||||||
bn_asm_src => Assembler implementation of core bignum
|
|
||||||
functions.
|
|
||||||
Defaults to bn_asm.c
|
|
||||||
ec_asm_src => Assembler implementation of core EC
|
|
||||||
functions.
|
|
||||||
des_asm_src => Assembler implementation of core DES
|
|
||||||
encryption functions.
|
|
||||||
Defaults to 'des_enc.c fcrypt_b.c'
|
|
||||||
aes_asm_src => Assembler implementation of core AES
|
|
||||||
functions.
|
|
||||||
Defaults to 'aes_core.c aes_cbc.c'
|
|
||||||
bf_asm_src => Assembler implementation of core BlowFish
|
|
||||||
functions.
|
|
||||||
Defaults to 'bf_enc.c'
|
|
||||||
md5_asm_src => Assembler implementation of core MD5
|
|
||||||
functions.
|
|
||||||
sha1_asm_src => Assembler implementation of core SHA1,
|
|
||||||
functions, and also possibly SHA256 and
|
|
||||||
SHA512 ones.
|
|
||||||
cast_asm_src => Assembler implementation of core CAST
|
|
||||||
functions.
|
|
||||||
Defaults to 'c_enc.c'
|
|
||||||
rc4_asm_src => Assembler implementation of core RC4
|
|
||||||
functions.
|
|
||||||
Defaults to 'rc4_enc.c rc4_skey.c'
|
|
||||||
rmd160_asm_src => Assembler implementation of core RMD160
|
|
||||||
functions.
|
|
||||||
rc5_asm_src => Assembler implementation of core RC5
|
|
||||||
functions.
|
|
||||||
Defaults to 'rc5_enc.c'
|
|
||||||
wp_asm_src => Assembler implementation of core WHIRLPOOL
|
|
||||||
functions.
|
|
||||||
cmll_asm_src => Assembler implementation of core CAMELLIA
|
|
||||||
functions.
|
|
||||||
Defaults to 'camellia.c cmll_misc.c cmll_cbc.c'
|
|
||||||
modes_asm_src => Assembler implementation of cipher modes,
|
|
||||||
currently the functions gcm_gmult_4bit and
|
|
||||||
gcm_ghash_4bit.
|
|
||||||
padlock_asm_src => Assembler implementation of core parts of
|
|
||||||
the padlock engine. This is mandatory on
|
|
||||||
any platform where the padlock engine might
|
|
||||||
actually be built.
|
|
||||||
|
|
||||||
|
|
||||||
[1] as part of the target configuration, one can have a key called
|
|
||||||
'inherit_from' that indicate what other configurations to inherit
|
|
||||||
data from. These are resolved recursively.
|
|
||||||
|
|
||||||
Inheritance works as a set of default values that can be overridden
|
|
||||||
by corresponding key values in the inheriting configuration.
|
|
||||||
|
|
||||||
Note 1: any configuration table can be used as a template.
|
|
||||||
Note 2: pure templates have the attribute 'template => 1' and
|
|
||||||
cannot be used as build targets.
|
|
||||||
|
|
||||||
If several configurations are given in the 'inherit_from' array,
|
|
||||||
the values of same attribute are concatenated with space
|
|
||||||
separation. With this, it's possible to have several smaller
|
|
||||||
templates for different configuration aspects that can be combined
|
|
||||||
into a complete configuration.
|
|
||||||
|
|
||||||
instead of a scalar value or an array, a value can be a code block
|
|
||||||
of the form 'sub { /* your code here */ }'. This code block will
|
|
||||||
be called with the list of inherited values for that key as
|
|
||||||
arguments. In fact, the concatenation of strings is really done
|
|
||||||
by using 'sub { join(" ",@_) }' on the list of inherited values.
|
|
||||||
|
|
||||||
An example:
|
|
||||||
|
|
||||||
"foo" => {
|
|
||||||
template => 1,
|
|
||||||
haha => "ha ha",
|
|
||||||
hoho => "ho",
|
|
||||||
ignored => "This should not appear in the end result",
|
|
||||||
},
|
|
||||||
"bar" => {
|
|
||||||
template => 1,
|
|
||||||
haha => "ah",
|
|
||||||
hoho => "haho",
|
|
||||||
hehe => "hehe"
|
|
||||||
},
|
|
||||||
"laughter" => {
|
|
||||||
inherit_from => [ "foo", "bar" ],
|
|
||||||
hehe => sub { join(" ",(@_,"!!!")) },
|
|
||||||
ignored => "",
|
|
||||||
}
|
|
||||||
|
|
||||||
The entry for "laughter" will become as follows after processing:
|
|
||||||
|
|
||||||
"laughter" => {
|
|
||||||
haha => "ha ha ah",
|
|
||||||
hoho => "ho haho",
|
|
||||||
hehe => "hehe !!!",
|
|
||||||
ignored => ""
|
|
||||||
}
|
|
||||||
|
|
||||||
[2] OpenSSL is built with threading capabilities unless the user
|
|
||||||
specifies 'no-threads'. The value of the key 'thread_scheme' may
|
|
||||||
be "(unknown)", in which case the user MUST give some compilation
|
|
||||||
flags to Configure.
|
|
||||||
|
|
||||||
[3] OpenSSL has three types of things to link from object files or
|
|
||||||
static libraries:
|
|
||||||
|
|
||||||
- shared libraries; that would be libcrypto and libssl.
|
|
||||||
- shared objects (sometimes called dynamic libraries); that would
|
|
||||||
be the engines.
|
|
||||||
- applications; those are apps/openssl and all the test apps.
|
|
||||||
|
|
||||||
Very roughly speaking, linking is done like this (words in braces
|
|
||||||
represent the configuration settings documented at the beginning
|
|
||||||
of this file):
|
|
||||||
|
|
||||||
shared libraries:
|
|
||||||
{ld} $(CFLAGS) {shared_ldflag} -shared -o libfoo.so \
|
|
||||||
-Wl,--whole-archive libfoo.a -Wl,--no-whole-archive \
|
|
||||||
{plib_lflags} -lcrypto {ex_libs}
|
|
||||||
|
|
||||||
shared objects:
|
|
||||||
{ld} $(CFLAGS) {shared_ldflag} -shared -o libeng.so \
|
|
||||||
blah1.o blah2.o {plib_lflags} -lcrypto {ex_libs}
|
|
||||||
|
|
||||||
applications:
|
|
||||||
{ld} $(CFLAGS) {lflags} -o app \
|
|
||||||
app1.o utils.o {plib_lflags} -lssl -lcrypto {ex_libs}
|
|
||||||
|
|
||||||
|
|
||||||
Historically, the target configurations came in form of a string with
|
|
||||||
values separated by colons. This use is deprecated. The string form
|
|
||||||
looked like this:
|
|
||||||
|
|
||||||
"target" => "{cc}:{cflags}:{unistd}:{thread_cflag}:{sys_id}:{lflags}:{bn_ops}:{cpuid_obj}:{bn_obj}:{ec_obj}:{des_obj}:{aes_obj}:{bf_obj}:{md5_obj}:{sha1_obj}:{cast_obj}:{rc4_obj}:{rmd160_obj}:{rc5_obj}:{wp_obj}:{cmll_obj}:{modes_obj}:{padlock_obj}:{perlasm_scheme}:{dso_scheme}:{shared_target}:{shared_cflag}:{shared_ldflag}:{shared_extension}:{ranlib}:{arflags}:{multilib}"
|
|
||||||
|
|
||||||
|
|
||||||
Build info files
|
|
||||||
================
|
|
||||||
|
|
||||||
The build.info files that are spread over the source tree contain the
|
|
||||||
minimum information needed to build and distribute OpenSSL. It uses a
|
|
||||||
simple and yet fairly powerful language to determine what needs to be
|
|
||||||
built, from what sources, and other relationships between files.
|
|
||||||
|
|
||||||
For every build.info file, all file references are relative to the
|
|
||||||
directory of the build.info file for source files, and the
|
|
||||||
corresponding build directory for built files if the build tree
|
|
||||||
differs from the source tree.
|
|
||||||
|
|
||||||
When processed, every line is processed with the perl module
|
|
||||||
Text::Template, using the delimiters "{-" and "-}". The hashes
|
|
||||||
%config and %target are passed to the perl fragments, along with
|
|
||||||
$sourcedir and $builddir, which are the locations of the source
|
|
||||||
directory for the current build.info file and the corresponding build
|
|
||||||
directory, all relative to the top of the build tree.
|
|
||||||
|
|
||||||
To begin with, things to be built are declared by setting specific
|
|
||||||
variables:
|
|
||||||
|
|
||||||
PROGRAMS=foo bar
|
|
||||||
LIBS=libsomething
|
|
||||||
ENGINES=libeng
|
|
||||||
SCRIPTS=myhack
|
|
||||||
EXTRA=file1 file2
|
|
||||||
|
|
||||||
Note that the files mentioned for PROGRAMS, LIBS and ENGINES *must* be
|
|
||||||
without extensions. The build file templates will figure them out.
|
|
||||||
|
|
||||||
For each thing to be built, it is then possible to say what sources
|
|
||||||
they are built from:
|
|
||||||
|
|
||||||
PROGRAMS=foo bar
|
|
||||||
SOURCE[foo]=foo.c common.c
|
|
||||||
SOURCE[bar]=bar.c extra.c common.c
|
|
||||||
|
|
||||||
It's also possible to tell some other dependencies:
|
|
||||||
|
|
||||||
DEPEND[foo]=libsomething
|
|
||||||
DEPEND[libbar]=libsomethingelse
|
|
||||||
|
|
||||||
(it could be argued that 'libsomething' and 'libsomethingelse' are
|
|
||||||
source as well. However, the files given through SOURCE are expected
|
|
||||||
to be located in the source tree while files given through DEPEND are
|
|
||||||
expected to be located in the build tree)
|
|
||||||
|
|
||||||
For some libraries, we maintain files with public symbols and their
|
|
||||||
slot in a transfer vector (important on some platforms). It can be
|
|
||||||
declared like this:
|
|
||||||
|
|
||||||
ORDINALS[libcrypto]=crypto
|
|
||||||
|
|
||||||
The value is not the name of the file in question, but rather the
|
|
||||||
argument to util/mkdef.pl that indicates which file to use.
|
|
||||||
|
|
||||||
One some platforms, shared libraries come with a name that's different
|
|
||||||
from their static counterpart. That's declared as follows:
|
|
||||||
|
|
||||||
SHARED_NAME[libfoo]=cygfoo-{- $config{shlibver} -}
|
|
||||||
|
|
||||||
The example is from Cygwin, which has a required naming convention.
|
|
||||||
|
|
||||||
Sometimes, it makes sense to rename an output file, for example a
|
|
||||||
library:
|
|
||||||
|
|
||||||
RENAME[libfoo]=libbar
|
|
||||||
|
|
||||||
That lines has "libfoo" get renamed to "libbar". While it makes no
|
|
||||||
sense at all to just have a rename like that (why not just use
|
|
||||||
"libbar" everywhere?), it does make sense when it can be used
|
|
||||||
conditionally. See a little further below for an example.
|
|
||||||
|
|
||||||
In some cases, it's desirable to include some source files in the
|
|
||||||
shared form of a library only:
|
|
||||||
|
|
||||||
SHARED_SOURCE[libfoo]=dllmain.c
|
|
||||||
|
|
||||||
For any file to be built, it's also possible to tell what extra
|
|
||||||
include paths the build of their source files should use:
|
|
||||||
|
|
||||||
INCLUDE[foo]=include
|
|
||||||
|
|
||||||
In some cases, one might want to generate some source files from
|
|
||||||
others, that's done as follows:
|
|
||||||
|
|
||||||
GENERATE[foo.s]=asm/something.pl $(CFLAGS)
|
|
||||||
GENERATE[bar.s]=asm/bar.S
|
|
||||||
|
|
||||||
The value of each GENERATE line is a command line or part of it.
|
|
||||||
Configure places no rules on the command line, except the the first
|
|
||||||
item muct be the generator file. It is, however, entirely up to the
|
|
||||||
build file template to define exactly how those command lines should
|
|
||||||
be handled, how the output is captured and so on.
|
|
||||||
|
|
||||||
NOTE: GENERATE lines are limited to one command only per GENERATE.
|
|
||||||
|
|
||||||
As a last resort, it's possible to have raw build file lines, between
|
|
||||||
BEGINRAW and ENDRAW lines as follows:
|
|
||||||
|
|
||||||
BEGINRAW[Makefile(unix)]
|
|
||||||
haha.h: {- $builddir -}/Makefile
|
|
||||||
echo "/* haha */" > haha.h
|
|
||||||
ENDRAW[Makefile(unix)]
|
|
||||||
|
|
||||||
The word withing square brackets is the build_file configuration item
|
|
||||||
or the build_file configuration item followed by the second word in the
|
|
||||||
build_scheme configuration item for the configured target within
|
|
||||||
parenthesis as shown above. For example, with the following relevant
|
|
||||||
configuration items:
|
|
||||||
|
|
||||||
build_file => "build.ninja"
|
|
||||||
build_scheme => [ "unified", "unix" ]
|
|
||||||
|
|
||||||
... these lines will be considered:
|
|
||||||
|
|
||||||
BEGINRAW[build.ninja]
|
|
||||||
build haha.h: echo "/* haha */" > haha.h
|
|
||||||
ENDRAW[build.ninja]
|
|
||||||
|
|
||||||
BEGINRAW[build.ninja(unix)]
|
|
||||||
build hoho.h: echo "/* hoho */" > hoho.h
|
|
||||||
ENDRAW[build.ninja(unix)]
|
|
||||||
|
|
||||||
Should it be needed because the recipes within a RAW section might
|
|
||||||
clash with those generated by Configure, it's possible to tell it
|
|
||||||
not to generate them with the use of OVERRIDES, for example:
|
|
||||||
|
|
||||||
SOURCE[libfoo]=foo.c bar.c
|
|
||||||
|
|
||||||
OVERRIDES=bar.o
|
|
||||||
BEGINRAW[Makefile(unix)]
|
|
||||||
bar.o: bar.c
|
|
||||||
$(CC) $(CFLAGS) -DSPECIAL -c -o $@ $<
|
|
||||||
ENDRAW[Makefile(unix)]
|
|
||||||
|
|
||||||
See the documentation further up for more information on configuration
|
|
||||||
items.
|
|
||||||
|
|
||||||
Finally, you can have some simple conditional use of the build.info
|
|
||||||
information, looking like this:
|
|
||||||
|
|
||||||
IF[1]
|
|
||||||
something
|
|
||||||
ELSIF[2]
|
|
||||||
something other
|
|
||||||
ELSE
|
|
||||||
something else
|
|
||||||
ENDIF
|
|
||||||
|
|
||||||
The expression in square brackets is interpreted as a string in perl,
|
|
||||||
and will be seen as true if perl thinks it is, otherwise false. For
|
|
||||||
example, the above would have "something" used, since 1 is true.
|
|
||||||
|
|
||||||
Together with the use of Text::Template, this can be used as
|
|
||||||
conditions based on something in the passed variables, for example:
|
|
||||||
|
|
||||||
IF[{- $disabled{shared} -}]
|
|
||||||
LIBS=libcrypto
|
|
||||||
SOURCE[libcrypto]=...
|
|
||||||
ELSE
|
|
||||||
LIBS=libfoo
|
|
||||||
SOURCE[libfoo]=...
|
|
||||||
ENDIF
|
|
||||||
|
|
||||||
or:
|
|
||||||
|
|
||||||
# VMS has a cultural standard where all libraries are prefixed.
|
|
||||||
# For OpenSSL, the choice is 'ossl_'
|
|
||||||
IF[{- $config{target} =~ /^vms/ -}]
|
|
||||||
RENAME[libcrypto]=ossl_libcrypto
|
|
||||||
RENAME[libssl]=ossl_libssl
|
|
||||||
ENDIF
|
|
||||||
|
|
||||||
|
|
||||||
Build-file programming with the "unified" build system
|
|
||||||
======================================================
|
|
||||||
|
|
||||||
"Build files" are called "Makefile" on Unix-like operating systems,
|
|
||||||
"descrip.mms" for MMS on VMS, "makefile" for nmake on Windows, etc.
|
|
||||||
|
|
||||||
To use the "unified" build system, the target configuration needs to
|
|
||||||
set the three items 'build_scheme', 'build_file' and 'build_command'.
|
|
||||||
In the rest of this section, we will assume that 'build_scheme' is set
|
|
||||||
to "unified" (see the configurations documentation above for the
|
|
||||||
details).
|
|
||||||
|
|
||||||
For any name given by 'build_file', the "unified" system expects a
|
|
||||||
template file in Configurations/ named like the build file, with
|
|
||||||
".tmpl" appended, or in case of possible ambiguity, a combination of
|
|
||||||
the second 'build_scheme' list item and the 'build_file' name. For
|
|
||||||
example, if 'build_file' is set to "Makefile", the template could be
|
|
||||||
Configurations/Makefile.tmpl or Configurations/unix-Makefile.tmpl.
|
|
||||||
In case both Configurations/unix-Makefile.tmpl and
|
|
||||||
Configurations/Makefile.tmpl are present, the former takes
|
|
||||||
precedence.
|
|
||||||
|
|
||||||
The build-file template is processed with the perl module
|
|
||||||
Text::Template, using "{-" and "-}" as delimiters that enclose the
|
|
||||||
perl code fragments that generate configuration-dependent content.
|
|
||||||
Those perl fragments have access to all the hash variables from
|
|
||||||
configdata.pem.
|
|
||||||
|
|
||||||
The build-file template is expected to define at least the following
|
|
||||||
perl functions in a perl code fragment enclosed with "{-" and "-}".
|
|
||||||
They are all expected to return a string with the lines they produce.
|
|
||||||
|
|
||||||
generatesrc - function that produces build file lines to generate
|
|
||||||
a source file from some input.
|
|
||||||
|
|
||||||
It's called like this:
|
|
||||||
|
|
||||||
generatesrc(src => "PATH/TO/tobegenerated",
|
|
||||||
generator => [ "generatingfile", ... ]
|
|
||||||
deps => [ "dep1", ... ],
|
|
||||||
intent => one of "libs", "dso", "bin" );
|
|
||||||
|
|
||||||
'src' has the name of the file to be generated.
|
|
||||||
'generator' is the command or part of command to
|
|
||||||
generate the file, of which the first item is
|
|
||||||
expected to be the file to generate from.
|
|
||||||
generatesrc() is expected to analyse and figure out
|
|
||||||
exactly how to apply that file and how to capture
|
|
||||||
the result. 'deps' is a list of explicit
|
|
||||||
dependencies. 'intent' indicates what the generated
|
|
||||||
file is going to be used for.
|
|
||||||
|
|
||||||
src2obj - function that produces build file lines to build an
|
|
||||||
object file from source files and associated data.
|
|
||||||
|
|
||||||
It's called like this:
|
|
||||||
|
|
||||||
src2obj(obj => "PATH/TO/objectfile",
|
|
||||||
srcs => [ "PATH/TO/sourcefile", ... ],
|
|
||||||
deps => [ "dep1", ... ],
|
|
||||||
incs => [ "INCL/PATH", ... ]
|
|
||||||
intent => one of "lib", "dso", "bin" );
|
|
||||||
|
|
||||||
'obj' has the intended object file *without*
|
|
||||||
extension, src2obj() is expected to add that.
|
|
||||||
'srcs' has the list of source files to build the
|
|
||||||
object file, with the first item being the source
|
|
||||||
file that directly corresponds to the object file.
|
|
||||||
'deps' is a list of explicit dependencies. 'incs'
|
|
||||||
is a list of include file directories. Finally,
|
|
||||||
'intent' indicates what this object file is going
|
|
||||||
to be used for.
|
|
||||||
|
|
||||||
obj2lib - function that produces build file lines to build a
|
|
||||||
static library file ("libfoo.a" in Unix terms) from
|
|
||||||
object files.
|
|
||||||
|
|
||||||
called like this:
|
|
||||||
|
|
||||||
obj2lib(lib => "PATH/TO/libfile",
|
|
||||||
objs => [ "PATH/TO/objectfile", ... ]);
|
|
||||||
|
|
||||||
'lib' has the intended library file name *without*
|
|
||||||
extension, obj2lib is expected to add that. 'objs'
|
|
||||||
has the list of object files (also *without*
|
|
||||||
extension) to build this library.
|
|
||||||
|
|
||||||
libobj2shlib - function that produces build file lines to build a
|
|
||||||
shareable object library file ("libfoo.so" in Unix
|
|
||||||
terms) from the corresponding static library file
|
|
||||||
or object files.
|
|
||||||
|
|
||||||
called like this:
|
|
||||||
|
|
||||||
libobj2shlib(shlib => "PATH/TO/shlibfile",
|
|
||||||
lib => "PATH/TO/libfile",
|
|
||||||
objs => [ "PATH/TO/objectfile", ... ],
|
|
||||||
deps => [ "PATH/TO/otherlibfile", ... ],
|
|
||||||
ordinals => [ "word", "/PATH/TO/ordfile" ]);
|
|
||||||
|
|
||||||
'lib' has the intended library file name *without*
|
|
||||||
extension, libobj2shlib is expected to add that.
|
|
||||||
'shlib' has the corresponding shared library name
|
|
||||||
*without* extension. 'deps' has the list of other
|
|
||||||
libraries (also *without* extension) this library
|
|
||||||
needs to be linked with. 'objs' has the list of
|
|
||||||
object files (also *without* extension) to build
|
|
||||||
this library. 'ordinals' MAY be present, and when
|
|
||||||
it is, its value is an array where the word is
|
|
||||||
"crypto" or "ssl" and the file is one of the ordinal
|
|
||||||
files util/libeay.num or util/ssleay.num in the
|
|
||||||
source directory.
|
|
||||||
|
|
||||||
This function has a choice; it can use the
|
|
||||||
corresponding static library as input to make the
|
|
||||||
shared library, or the list of object files.
|
|
||||||
|
|
||||||
obj2dso - function that produces build file lines to build a
|
|
||||||
dynamic shared object file from object files.
|
|
||||||
|
|
||||||
called like this:
|
|
||||||
|
|
||||||
obj2dso(lib => "PATH/TO/libfile",
|
|
||||||
objs => [ "PATH/TO/objectfile", ... ],
|
|
||||||
deps => [ "PATH/TO/otherlibfile",
|
|
||||||
... ]);
|
|
||||||
|
|
||||||
This is almost the same as libobj2shlib, but the
|
|
||||||
intent is to build a shareable library that can be
|
|
||||||
loaded in runtime (a "plugin"...). The differences
|
|
||||||
are subtle, one of the most visible ones is that the
|
|
||||||
resulting shareable library is produced from object
|
|
||||||
files only.
|
|
||||||
|
|
||||||
obj2bin - function that produces build file lines to build an
|
|
||||||
executable file from object files.
|
|
||||||
|
|
||||||
called like this:
|
|
||||||
|
|
||||||
obj2bin(bin => "PATH/TO/binfile",
|
|
||||||
objs => [ "PATH/TO/objectfile", ... ],
|
|
||||||
deps => [ "PATH/TO/libfile", ... ]);
|
|
||||||
|
|
||||||
'bin' has the intended executable file name
|
|
||||||
*without* extension, obj2bin is expected to add
|
|
||||||
that. 'objs' has the list of object files (also
|
|
||||||
*without* extension) to build this library. 'deps'
|
|
||||||
has the list of library files (also *without*
|
|
||||||
extension) that the programs needs to be linked
|
|
||||||
with.
|
|
||||||
|
|
||||||
in2script - function that produces build file lines to build a
|
|
||||||
script file from some input.
|
|
||||||
|
|
||||||
called like this:
|
|
||||||
|
|
||||||
in2script(script => "PATH/TO/scriptfile",
|
|
||||||
sources => [ "PATH/TO/infile", ... ]);
|
|
||||||
|
|
||||||
'script' has the intended script file name.
|
|
||||||
'sources' has the list of source files to build the
|
|
||||||
resulting script from.
|
|
||||||
|
|
||||||
In all cases, file file paths are relative to the build tree top, and
|
|
||||||
the build file actions run with the build tree top as current working
|
|
||||||
directory.
|
|
||||||
|
|
||||||
Make sure to end the section with these functions with a string that
|
|
||||||
you thing is appropriate for the resulting build file. If nothing
|
|
||||||
else, end it like this:
|
|
||||||
|
|
||||||
""; # Make sure no lingering values end up in the Makefile
|
|
||||||
-}
|
|
||||||
@@ -1,533 +0,0 @@
|
|||||||
Design document for the unified scheme data
|
|
||||||
===========================================
|
|
||||||
|
|
||||||
How are things connected?
|
|
||||||
-------------------------
|
|
||||||
|
|
||||||
The unified scheme takes all its data from the build.info files seen
|
|
||||||
throughout the source tree. These files hold the minimum information
|
|
||||||
needed to build end product files from diverse sources. See the
|
|
||||||
section on build.info files below.
|
|
||||||
|
|
||||||
From the information in build.info files, Configure builds up an
|
|
||||||
information database as a hash table called %unified_info, which is
|
|
||||||
stored in configdata.pm, found at the top of the build tree (which may
|
|
||||||
or may not be the same as the source tree).
|
|
||||||
|
|
||||||
Configurations/common.tmpl uses the data from %unified_info to
|
|
||||||
generate the rules for building end product files as well as
|
|
||||||
intermediary files with the help of a few functions found in the
|
|
||||||
build-file templates. See the section on build-file templates further
|
|
||||||
down for more information.
|
|
||||||
|
|
||||||
build.info files
|
|
||||||
----------------
|
|
||||||
|
|
||||||
As mentioned earlier, build.info files are meant to hold the minimum
|
|
||||||
information needed to build output files, and therefore only (with a
|
|
||||||
few possible exceptions [1]) have information about end products (such
|
|
||||||
as scripts, library files and programs) and source files (such as C
|
|
||||||
files, C header files, assembler files, etc). Intermediate files such
|
|
||||||
as object files are rarely directly referred to in build.info files (and
|
|
||||||
when they are, it's always with the file name extension .o), they are
|
|
||||||
inferred by Configure. By the same rule of minimalism, end product
|
|
||||||
file name extensions (such as .so, .a, .exe, etc) are never mentioned
|
|
||||||
in build.info. Their file name extensions will be inferred by the
|
|
||||||
build-file templates, adapted for the platform they are meant for (see
|
|
||||||
sections on %unified_info and build-file templates further down).
|
|
||||||
|
|
||||||
The variables PROGRAMS, LIBS, ENGINES and SCRIPTS are used to declare
|
|
||||||
end products.
|
|
||||||
|
|
||||||
The variables SOURCE, DEPEND, INCLUDE and ORDINALS are indexed by a
|
|
||||||
produced file, and their values are the source used to produce that
|
|
||||||
particular produced file, extra dependencies, include directories
|
|
||||||
needed, and ordinal files (explained further below.
|
|
||||||
|
|
||||||
All their values in all the build.info throughout the source tree are
|
|
||||||
collected together and form a set of programs, libraries, engines and
|
|
||||||
scripts to be produced, source files, dependencies, etc etc etc.
|
|
||||||
|
|
||||||
Let's have a pretend example, a very limited contraption of OpenSSL,
|
|
||||||
composed of the program 'apps/openssl', the libraries 'libssl' and
|
|
||||||
'libcrypto', an engine 'engines/ossltest' and their sources and
|
|
||||||
dependencies.
|
|
||||||
|
|
||||||
# build.info
|
|
||||||
LIBS=libcrypto libssl
|
|
||||||
ORDINALS[libcrypto]=crypto
|
|
||||||
ORDINALS[libssl]=ssl
|
|
||||||
INCLUDE[libcrypto]=include
|
|
||||||
INCLUDE[libssl]=include
|
|
||||||
DEPEND[libssl]=libcrypto
|
|
||||||
|
|
||||||
This is the top directory build.info file, and it tells us that two
|
|
||||||
libraries are to be built, there are some ordinals to be used to
|
|
||||||
declare what symbols in those libraries are seen as public, the
|
|
||||||
include directory 'include/' shall be used throughout when building
|
|
||||||
anything that will end up in each library, and that the library
|
|
||||||
'libssl' depend on the library 'libcrypto' to function properly.
|
|
||||||
|
|
||||||
# apps/build.info
|
|
||||||
PROGRAMS=openssl
|
|
||||||
SOURCE[openssl]=openssl.c
|
|
||||||
INCLUDE[openssl]=.. ../include
|
|
||||||
DEPEND[openssl]=../libssl
|
|
||||||
|
|
||||||
This is the build.info file in 'apps/', one may notice that all file
|
|
||||||
paths mentioned are relative to the directory the build.info file is
|
|
||||||
located in. This one tells us that there's a program to be built
|
|
||||||
called 'apps/openssl' (the file name extension will depend on the
|
|
||||||
platform and is therefore not mentioned in the build.info file). It's
|
|
||||||
built from one source file, 'apps/openssl.c', and building it requires
|
|
||||||
the use of '.' and 'include' include directories (both are declared
|
|
||||||
from the point of view of the 'apps/' directory), and that the program
|
|
||||||
depends on the library 'libssl' to function properly.
|
|
||||||
|
|
||||||
# crypto/build.info
|
|
||||||
LIBS=../libcrypto
|
|
||||||
SOURCE[../libcrypto]=aes.c evp.c cversion.c
|
|
||||||
DEPEND[cversion.o]=buildinf.h
|
|
||||||
|
|
||||||
GENERATE[buildinf.h]=../util/mkbuildinf.pl "$(CC) $(CFLAGS)" "$(PLATFORM)"
|
|
||||||
DEPEND[buildinf.h]=../Makefile
|
|
||||||
|
|
||||||
This is the build.info file in 'crypto', and it tells us a little more
|
|
||||||
about what's needed to produce 'libcrypto'. LIBS is used again to
|
|
||||||
declare that 'libcrypto' is to be produced. This declaration is
|
|
||||||
really unnecessary as it's already mentioned in the top build.info
|
|
||||||
file, but can make the info file easier to understand. This is to
|
|
||||||
show that duplicate information isn't an issue.
|
|
||||||
|
|
||||||
This build.info file informs us that 'libcrypto' is built from a few
|
|
||||||
source files, 'crypto/aes.c', 'crypto/evp.c' and 'crypto/cversion.c'.
|
|
||||||
It also shows us that building the object file inferred from
|
|
||||||
'crypto/cversion.c' depends on 'crypto/buildinf.h'. Finally, it
|
|
||||||
also shows the possibility to include raw build-file statements in a
|
|
||||||
build.info file, in this case showing how 'buildinf.h' is built on
|
|
||||||
Unix-like operating systems.
|
|
||||||
|
|
||||||
Two things are worth an extra note:
|
|
||||||
|
|
||||||
'DEPEND[cversion.o]' mentions an object file. DEPEND indexes is the
|
|
||||||
only location where it's valid to mention them
|
|
||||||
|
|
||||||
Lines in 'BEGINRAW'..'ENDRAW' sections must always mention files as
|
|
||||||
seen from the top directory, no exception.
|
|
||||||
|
|
||||||
# ssl/build.info
|
|
||||||
LIBS=../libssl
|
|
||||||
SOURCE[../libssl]=tls.c
|
|
||||||
|
|
||||||
This is the build.info file in 'ssl/', and it tells us that the
|
|
||||||
library 'libssl' is built from the source file 'ssl/tls.c'.
|
|
||||||
|
|
||||||
# engines/build.info
|
|
||||||
ENGINES=libossltest
|
|
||||||
SOURCE[libossltest]=e_ossltest.c
|
|
||||||
DEPEND[libossltest]=../libcrypto
|
|
||||||
INCLUDE[libossltest]=../include
|
|
||||||
|
|
||||||
This is the build.info file in 'engines/', telling us that an engine
|
|
||||||
called 'engines/libossltest' shall be built, that it's source is
|
|
||||||
'engines/e_ossltest.c' and that the include directory 'include/' may
|
|
||||||
be used when building anything that will be part of this engine.
|
|
||||||
Finally, the engine 'engines/libossltest' depends on the library
|
|
||||||
'libcrypto' to function properly.
|
|
||||||
|
|
||||||
When Configure digests these build.info files, the accumulated
|
|
||||||
information comes down to this:
|
|
||||||
|
|
||||||
LIBS=libcrypto libssl
|
|
||||||
ORDINALS[libcrypto]=crypto
|
|
||||||
SOURCE[libcrypto]=crypto/aes.c crypto/evp.c crypto/cversion.c
|
|
||||||
DEPEND[crypto/cversion.o]=crypto/buildinf.h
|
|
||||||
INCLUDE[libcrypto]=include
|
|
||||||
ORDINALS[libssl]=ssl
|
|
||||||
SOURCE[libssl]=ssl/tls.c
|
|
||||||
INCLUDE[libssl]=include
|
|
||||||
DEPEND[libssl]=libcrypto
|
|
||||||
|
|
||||||
PROGRAMS=apps/openssl
|
|
||||||
SOURCE[apps/openssl]=apps/openssl.c
|
|
||||||
INCLUDE[apps/openssl]=. include
|
|
||||||
DEPEND[apps/openssl]=libssl
|
|
||||||
|
|
||||||
ENGINES=engines/libossltest
|
|
||||||
SOURCE[engines/libossltest]=engines/e_ossltest.c
|
|
||||||
DEPEND[engines/libossltest]=libcrypto
|
|
||||||
INCLUDE[engines/libossltest]=include
|
|
||||||
|
|
||||||
GENERATE[crypto/buildinf.h]=util/mkbuildinf.pl "$(CC) $(CFLAGS)" "$(PLATFORM)"
|
|
||||||
DEPEND[crypto/buildinf.h]=Makefile
|
|
||||||
|
|
||||||
|
|
||||||
A few notes worth mentioning:
|
|
||||||
|
|
||||||
LIBS may be used to declare routine libraries only.
|
|
||||||
|
|
||||||
PROGRAMS may be used to declare programs only.
|
|
||||||
|
|
||||||
ENGINES may be used to declare engines only.
|
|
||||||
|
|
||||||
The indexes for SOURCE, INCLUDE and ORDINALS must only be end product
|
|
||||||
files, such as libraries, programs or engines. The values of SOURCE
|
|
||||||
variables must only be source files (possibly generated)
|
|
||||||
|
|
||||||
DEPEND shows a relationship between different produced files, such
|
|
||||||
as a program depending on a library, or between an object file and
|
|
||||||
some extra source file.
|
|
||||||
|
|
||||||
When Configure processes the build.info files, it will take it as
|
|
||||||
truth without question, and will therefore perform very few checks.
|
|
||||||
If the build tree is separate from the source tree, it will assume
|
|
||||||
that all built files and up in the build directory and that all source
|
|
||||||
files are to be found in the source tree, if they can be found there.
|
|
||||||
Configure will assume that source files that can't be found in the
|
|
||||||
source tree (such as 'crypto/bildinf.h' in the example above) are
|
|
||||||
generated and will be found in the build tree.
|
|
||||||
|
|
||||||
|
|
||||||
The %unified_info database
|
|
||||||
--------------------------
|
|
||||||
|
|
||||||
The information in all the build.info get digested by Configure and
|
|
||||||
collected into the %unified_info database, divided into the following
|
|
||||||
indexes:
|
|
||||||
|
|
||||||
depends => a hash table containing 'file' => [ 'dependency' ... ]
|
|
||||||
pairs. These are directly inferred from the DEPEND
|
|
||||||
variables in build.info files.
|
|
||||||
|
|
||||||
engines => a list of engines. These are directly inferred from
|
|
||||||
the ENGINES variable in build.info files.
|
|
||||||
|
|
||||||
includes => a hash table containing 'file' => [ 'include' ... ]
|
|
||||||
pairs. These are directly inferred from the INCLUDE
|
|
||||||
variables in build.info files.
|
|
||||||
|
|
||||||
libraries => a list of libraries. These are directly inferred from
|
|
||||||
the LIBS variable in build.info files.
|
|
||||||
|
|
||||||
ordinals => a hash table containing 'file' => [ 'word', 'ordfile' ]
|
|
||||||
pairs. 'file' and 'word' are directly inferred from
|
|
||||||
the ORDINALS variables in build.info files, while the
|
|
||||||
file 'ofile' comes from internal knowledge in
|
|
||||||
Configure.
|
|
||||||
|
|
||||||
programs => a list of programs. These are directly inferred from
|
|
||||||
the PROGRAMS variable in build.info files.
|
|
||||||
|
|
||||||
rawlines => a list of build-file lines. These are a direct copy of
|
|
||||||
the BEGINRAW..ENDRAW lines in build.info files. Note:
|
|
||||||
only the BEGINRAW..ENDRAW section for the current
|
|
||||||
platform are copied, the rest are ignored.
|
|
||||||
|
|
||||||
scripts => a list of scripts. There are directly inferred from
|
|
||||||
the SCRIPTS variable in build.info files.
|
|
||||||
|
|
||||||
sources => a hash table containing 'file' => [ 'sourcefile' ... ]
|
|
||||||
pairs. These are indirectly inferred from the SOURCE
|
|
||||||
variables in build.info files. Object files are
|
|
||||||
mentioned in this hash table, with source files from
|
|
||||||
SOURCE variables, and AS source files for programs and
|
|
||||||
libraries.
|
|
||||||
|
|
||||||
shared_sources =>
|
|
||||||
a hash table just like 'sources', but only as source
|
|
||||||
files (object files) for building shared libraries.
|
|
||||||
|
|
||||||
As an example, here is how the build.info files example from the
|
|
||||||
section above would be digested into a %unified_info table:
|
|
||||||
|
|
||||||
our %unified_info = (
|
|
||||||
"depends" =>
|
|
||||||
{
|
|
||||||
"apps/openssl" =>
|
|
||||||
[
|
|
||||||
"libssl",
|
|
||||||
],
|
|
||||||
"crypto/cversion.o" =>
|
|
||||||
[
|
|
||||||
"crypto/buildinf.h",
|
|
||||||
],
|
|
||||||
"engines/libossltest" =>
|
|
||||||
[
|
|
||||||
"libcrypto",
|
|
||||||
],
|
|
||||||
"libssl" =>
|
|
||||||
[
|
|
||||||
"libcrypto",
|
|
||||||
],
|
|
||||||
},
|
|
||||||
"engines" =>
|
|
||||||
[
|
|
||||||
"engines/libossltest",
|
|
||||||
],
|
|
||||||
"includes" =>
|
|
||||||
{
|
|
||||||
"apps/openssl" =>
|
|
||||||
[
|
|
||||||
".",
|
|
||||||
"include",
|
|
||||||
],
|
|
||||||
"engines/libossltest" =>
|
|
||||||
[
|
|
||||||
"include"
|
|
||||||
],
|
|
||||||
"libcrypto" =>
|
|
||||||
[
|
|
||||||
"include",
|
|
||||||
],
|
|
||||||
"libssl" =>
|
|
||||||
[
|
|
||||||
"include",
|
|
||||||
],
|
|
||||||
}
|
|
||||||
"libraries" =>
|
|
||||||
[
|
|
||||||
"libcrypto",
|
|
||||||
"libssl",
|
|
||||||
],
|
|
||||||
"ordinals" =>
|
|
||||||
{
|
|
||||||
"libcrypto" =>
|
|
||||||
[
|
|
||||||
"crypto",
|
|
||||||
"util/libcrypto.num",
|
|
||||||
],
|
|
||||||
"libssl" =>
|
|
||||||
[
|
|
||||||
"ssl",
|
|
||||||
"util/libssl.num",
|
|
||||||
],
|
|
||||||
},
|
|
||||||
"programs" =>
|
|
||||||
[
|
|
||||||
"apps/openssl",
|
|
||||||
],
|
|
||||||
"rawlines" =>
|
|
||||||
[
|
|
||||||
"crypto/buildinf.h : Makefile",
|
|
||||||
" perl util/mkbuildinf.h \"\$(CC) \$(CFLAGS)\" \"\$(PLATFORM)\" \\"
|
|
||||||
" > crypto/buildinf.h"
|
|
||||||
],
|
|
||||||
"sources" =>
|
|
||||||
{
|
|
||||||
"apps/openssl" =>
|
|
||||||
[
|
|
||||||
"apps/openssl.o",
|
|
||||||
],
|
|
||||||
"apps/openssl.o" =>
|
|
||||||
[
|
|
||||||
"apps/openssl.c",
|
|
||||||
],
|
|
||||||
"crypto/aes.o" =>
|
|
||||||
[
|
|
||||||
"crypto/aes.c",
|
|
||||||
],
|
|
||||||
"crypto/cversion.o" =>
|
|
||||||
[
|
|
||||||
"crypto/cversion.c",
|
|
||||||
],
|
|
||||||
"crypto/evp.o" =>
|
|
||||||
[
|
|
||||||
"crypto/evp.c",
|
|
||||||
],
|
|
||||||
"engines/e_ossltest.o" =>
|
|
||||||
[
|
|
||||||
"engines/e_ossltest.c",
|
|
||||||
],
|
|
||||||
"engines/libossltest" =>
|
|
||||||
[
|
|
||||||
"engines/e_ossltest.o",
|
|
||||||
],
|
|
||||||
"libcrypto" =>
|
|
||||||
[
|
|
||||||
"crypto/aes.c",
|
|
||||||
"crypto/cversion.c",
|
|
||||||
"crypto/evp.c",
|
|
||||||
],
|
|
||||||
"libssl" =>
|
|
||||||
[
|
|
||||||
"ssl/tls.c",
|
|
||||||
],
|
|
||||||
"ssl/tls.o" =>
|
|
||||||
[
|
|
||||||
"ssl/tls.c",
|
|
||||||
],
|
|
||||||
},
|
|
||||||
);
|
|
||||||
|
|
||||||
As can be seen, everything in %unified_info is fairly simple suggest
|
|
||||||
of information. Still, it tells us that to build all programs, we
|
|
||||||
must build 'apps/openssl', and to build the latter, we will need to
|
|
||||||
build all its sources ('apps/openssl.o' in this case) and all the
|
|
||||||
other things it depends on (such as 'libssl'). All those dependencies
|
|
||||||
need to be built as well, using the same logic, so to build 'libssl',
|
|
||||||
we need to build 'ssl/tls.o' as well as 'libcrypto', and to build the
|
|
||||||
latter...
|
|
||||||
|
|
||||||
|
|
||||||
Build-file templates
|
|
||||||
--------------------
|
|
||||||
|
|
||||||
Build-file templates are essentially build-files (such as Makefile on
|
|
||||||
Unix) with perl code fragments mixed in. Those perl code fragment
|
|
||||||
will generate all the configuration dependent data, including all the
|
|
||||||
rules needed to build end product files and intermediary files alike.
|
|
||||||
At a minimum, there must be a perl code fragment that defines a set of
|
|
||||||
functions that are used to generates specific build-file rules, to
|
|
||||||
build static libraries from object files, to build shared libraries
|
|
||||||
from static libraries, to programs from object files and libraries,
|
|
||||||
etc.
|
|
||||||
|
|
||||||
src2obj - function that produces build file lines to build an
|
|
||||||
object file from source files and associated data.
|
|
||||||
|
|
||||||
It's called like this:
|
|
||||||
|
|
||||||
src2obj(obj => "PATH/TO/objectfile",
|
|
||||||
srcs => [ "PATH/TO/sourcefile", ... ],
|
|
||||||
deps => [ "dep1", ... ],
|
|
||||||
incs => [ "INCL/PATH", ... ]
|
|
||||||
intent => one of "lib", "dso", "bin" );
|
|
||||||
|
|
||||||
'obj' has the intended object file *without*
|
|
||||||
extension, src2obj() is expected to add that.
|
|
||||||
'srcs' has the list of source files to build the
|
|
||||||
object file, with the first item being the source
|
|
||||||
file that directly corresponds to the object file.
|
|
||||||
'deps' is a list of explicit dependencies. 'incs'
|
|
||||||
is a list of include file directories. Finally,
|
|
||||||
'intent' indicates what this object file is going
|
|
||||||
to be used for.
|
|
||||||
|
|
||||||
obj2lib - function that produces build file lines to build a
|
|
||||||
static library file ("libfoo.a" in Unix terms) from
|
|
||||||
object files.
|
|
||||||
|
|
||||||
called like this:
|
|
||||||
|
|
||||||
obj2lib(lib => "PATH/TO/libfile",
|
|
||||||
objs => [ "PATH/TO/objectfile", ... ]);
|
|
||||||
|
|
||||||
'lib' has the intended library file name *without*
|
|
||||||
extension, obj2lib is expected to add that. 'objs'
|
|
||||||
has the list of object files (also *without*
|
|
||||||
extension) to build this library.
|
|
||||||
|
|
||||||
libobj2shlib - function that produces build file lines to build a
|
|
||||||
shareable object library file ("libfoo.so" in Unix
|
|
||||||
terms) from the corresponding static library file
|
|
||||||
or object files.
|
|
||||||
|
|
||||||
called like this:
|
|
||||||
|
|
||||||
libobj2shlib(shlib => "PATH/TO/shlibfile",
|
|
||||||
lib => "PATH/TO/libfile",
|
|
||||||
objs => [ "PATH/TO/objectfile", ... ],
|
|
||||||
deps => [ "PATH/TO/otherlibfile", ... ],
|
|
||||||
ordinals => [ "word", "/PATH/TO/ordfile" ]);
|
|
||||||
|
|
||||||
'lib' has the intended library file name *without*
|
|
||||||
extension, libobj2shlib is expected to add that.
|
|
||||||
'shlib' has the corresponding shared library name
|
|
||||||
*without* extension. 'deps' has the list of other
|
|
||||||
libraries (also *without* extension) this library
|
|
||||||
needs to be linked with. 'objs' has the list of
|
|
||||||
object files (also *without* extension) to build
|
|
||||||
this library. 'ordinals' MAY be present, and when
|
|
||||||
it is, its value is an array where the word is
|
|
||||||
"crypto" or "ssl" and the file is one of the ordinal
|
|
||||||
files util/libcrypto.num or util/libssl.num in the
|
|
||||||
source directory.
|
|
||||||
|
|
||||||
This function has a choice; it can use the
|
|
||||||
corresponding static library as input to make the
|
|
||||||
shared library, or the list of object files.
|
|
||||||
|
|
||||||
obj2dynlib - function that produces build file lines to build a
|
|
||||||
dynamically loadable library file ("libfoo.so" on
|
|
||||||
Unix) from object files.
|
|
||||||
|
|
||||||
called like this:
|
|
||||||
|
|
||||||
obj2dynlib(lib => "PATH/TO/libfile",
|
|
||||||
objs => [ "PATH/TO/objectfile", ... ],
|
|
||||||
deps => [ "PATH/TO/otherlibfile",
|
|
||||||
... ]);
|
|
||||||
|
|
||||||
This is almost the same as libobj2shlib, but the
|
|
||||||
intent is to build a shareable library that can be
|
|
||||||
loaded in runtime (a "plugin"...). The differences
|
|
||||||
are subtle, one of the most visible ones is that the
|
|
||||||
resulting shareable library is produced from object
|
|
||||||
files only.
|
|
||||||
|
|
||||||
obj2bin - function that produces build file lines to build an
|
|
||||||
executable file from object files.
|
|
||||||
|
|
||||||
called like this:
|
|
||||||
|
|
||||||
obj2bin(bin => "PATH/TO/binfile",
|
|
||||||
objs => [ "PATH/TO/objectfile", ... ],
|
|
||||||
deps => [ "PATH/TO/libfile", ... ]);
|
|
||||||
|
|
||||||
'bin' has the intended executable file name
|
|
||||||
*without* extension, obj2bin is expected to add
|
|
||||||
that. 'objs' has the list of object files (also
|
|
||||||
*without* extension) to build this library. 'deps'
|
|
||||||
has the list of library files (also *without*
|
|
||||||
extension) that the programs needs to be linked
|
|
||||||
with.
|
|
||||||
|
|
||||||
in2script - function that produces build file lines to build a
|
|
||||||
script file from some input.
|
|
||||||
|
|
||||||
called like this:
|
|
||||||
|
|
||||||
in2script(script => "PATH/TO/scriptfile",
|
|
||||||
sources => [ "PATH/TO/infile", ... ]);
|
|
||||||
|
|
||||||
'script' has the intended script file name.
|
|
||||||
'sources' has the list of source files to build the
|
|
||||||
resulting script from.
|
|
||||||
|
|
||||||
Along with the build-file templates is the driving engine
|
|
||||||
Configurations/common.tmpl, which looks through all the information in
|
|
||||||
%unified_info and generates all the rulesets to build libraries,
|
|
||||||
programs and all intermediate files, using the rule generating
|
|
||||||
functions defined in the build-file template.
|
|
||||||
|
|
||||||
As an example with the smaller build.info set we've seen as an
|
|
||||||
example, producing the rules to build 'libssl' would result in the
|
|
||||||
following calls:
|
|
||||||
|
|
||||||
# Note: libobj2shlib will only be called if shared libraries are
|
|
||||||
# to be produced.
|
|
||||||
# Note 2: libobj2shlib gets both the name of the static library
|
|
||||||
# and the names of all the object files that go into it. It's up
|
|
||||||
# to the implementation to decide which to use as input.
|
|
||||||
libobj2shlib(shlib => "libssl",
|
|
||||||
lib => "libssl",
|
|
||||||
objs => [ "ssl/tls.o" ],
|
|
||||||
deps => [ "libcrypto" ]
|
|
||||||
ordinals => [ "ssl", "util/libssl.num" ]);
|
|
||||||
|
|
||||||
obj2lib(lib => "libssl"
|
|
||||||
objs => [ "ssl/tls.o" ]);
|
|
||||||
|
|
||||||
# Note 3: common.tmpl peals off the ".o" extension, as the
|
|
||||||
# platform at hand may have a different one.
|
|
||||||
src2obj(obj => "ssl/tls"
|
|
||||||
srcs => [ "ssl/tls.c" ],
|
|
||||||
deps => [ ],
|
|
||||||
incs => [ "include" ]);
|
|
||||||
|
|
||||||
src2dep(obj => "ssl/tls"
|
|
||||||
srcs => [ "ssl/tls.c" ],
|
|
||||||
incs => [ "include" ]);
|
|
||||||
|
|
||||||
The returned strings from all those calls are then concatenated
|
|
||||||
together and written to the resulting build-file.
|
|
||||||
@@ -1,169 +0,0 @@
|
|||||||
{- # -*- Mode: perl -*-
|
|
||||||
|
|
||||||
# A cache of objects for which a recipe has already been generated
|
|
||||||
my %cache;
|
|
||||||
|
|
||||||
# resolvedepends and reducedepends work in tandem to make sure
|
|
||||||
# there are no duplicate dependencies and that they are in the
|
|
||||||
# right order. This is especially used to sort the list of
|
|
||||||
# libraries that a build depends on.
|
|
||||||
sub resolvedepends {
|
|
||||||
my $thing = shift;
|
|
||||||
my @listsofar = @_; # to check if we're looping
|
|
||||||
my @list = @{$unified_info{depends}->{$thing}};
|
|
||||||
my @newlist = ();
|
|
||||||
if (scalar @list) {
|
|
||||||
foreach my $item (@list) {
|
|
||||||
# It's time to break off when the dependency list starts looping
|
|
||||||
next if grep { $_ eq $item } @listsofar;
|
|
||||||
push @newlist, $item, resolvedepends($item, @listsofar, $item);
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@newlist;
|
|
||||||
}
|
|
||||||
sub reducedepends {
|
|
||||||
my @list = @_;
|
|
||||||
my @newlist = ();
|
|
||||||
while (@list) {
|
|
||||||
my $item = shift @list;
|
|
||||||
push @newlist, $item
|
|
||||||
unless grep { $item eq $_ } @list;
|
|
||||||
}
|
|
||||||
@newlist;
|
|
||||||
}
|
|
||||||
|
|
||||||
# dogenerate is responsible for producing all the recipes that build
|
|
||||||
# generated source files. It recurses in case a dependency is also a
|
|
||||||
# generated source file.
|
|
||||||
sub dogenerate {
|
|
||||||
my $src = shift;
|
|
||||||
return "" if $cache{$src};
|
|
||||||
my $obj = shift;
|
|
||||||
my $bin = shift;
|
|
||||||
my %opts = @_;
|
|
||||||
if ($unified_info{generate}->{$src}) {
|
|
||||||
$OUT .= generatesrc(src => $src,
|
|
||||||
generator => $unified_info{generate}->{$src},
|
|
||||||
deps => $unified_info{depends}->{$src},
|
|
||||||
incs => [ @{$unified_info{includes}->{$bin}},
|
|
||||||
@{$unified_info{includes}->{$obj}} ],
|
|
||||||
%opts);
|
|
||||||
foreach (@{$unified_info{depends}->{$src}}) {
|
|
||||||
dogenerate($_, $obj, $bin, %opts);
|
|
||||||
}
|
|
||||||
}
|
|
||||||
$cache{$src} = 1;
|
|
||||||
}
|
|
||||||
|
|
||||||
# doobj is responsible for producing all the recipes that build
|
|
||||||
# object files as well as dependency files.
|
|
||||||
sub doobj {
|
|
||||||
my $obj = shift;
|
|
||||||
return "" if $cache{$obj};
|
|
||||||
(my $obj_no_o = $obj) =~ s|\.o$||;
|
|
||||||
my $bin = shift;
|
|
||||||
my %opts = @_;
|
|
||||||
if (@{$unified_info{sources}->{$obj}}) {
|
|
||||||
$OUT .= src2obj(obj => $obj_no_o,
|
|
||||||
srcs => $unified_info{sources}->{$obj},
|
|
||||||
deps => $unified_info{depends}->{$obj},
|
|
||||||
incs => [ @{$unified_info{includes}->{$bin}},
|
|
||||||
@{$unified_info{includes}->{$obj}} ],
|
|
||||||
%opts);
|
|
||||||
foreach ((@{$unified_info{sources}->{$obj}},
|
|
||||||
@{$unified_info{depends}->{$obj}})) {
|
|
||||||
dogenerate($_, $obj, $bin, %opts);
|
|
||||||
}
|
|
||||||
}
|
|
||||||
$cache{$obj} = 1;
|
|
||||||
}
|
|
||||||
|
|
||||||
# dolib is responsible for building libraries. It will call
|
|
||||||
# libobj2shlib is shared libraries are produced, and obj2lib in all
|
|
||||||
# cases. It also makes sure all object files for the library are
|
|
||||||
# built.
|
|
||||||
sub dolib {
|
|
||||||
my $lib = shift;
|
|
||||||
return "" if $cache{$lib};
|
|
||||||
unless ($disabled{shared}) {
|
|
||||||
my %ordinals =
|
|
||||||
$unified_info{ordinals}->{$lib}
|
|
||||||
? (ordinals => $unified_info{ordinals}->{$lib}) : ();
|
|
||||||
$OUT .= libobj2shlib(shlib => $unified_info{sharednames}->{$lib},
|
|
||||||
lib => $lib,
|
|
||||||
objs => [ map { (my $x = $_) =~ s|\.o$||; $x }
|
|
||||||
(@{$unified_info{sources}->{$lib}},
|
|
||||||
@{$unified_info{shared_sources}->{$lib}}) ],
|
|
||||||
deps => [ reducedepends(resolvedepends($lib)) ],
|
|
||||||
%ordinals);
|
|
||||||
foreach (@{$unified_info{shared_sources}->{$lib}}) {
|
|
||||||
doobj($_, $lib, intent => "lib");
|
|
||||||
}
|
|
||||||
}
|
|
||||||
$OUT .= obj2lib(lib => $lib,
|
|
||||||
objs => [ map { (my $x = $_) =~ s|\.o$||; $x }
|
|
||||||
@{$unified_info{sources}->{$lib}} ]);
|
|
||||||
foreach (@{$unified_info{sources}->{$lib}}) {
|
|
||||||
doobj($_, $lib, intent => "lib");
|
|
||||||
}
|
|
||||||
$cache{$lib} = 1;
|
|
||||||
}
|
|
||||||
|
|
||||||
# doengine is responsible for building engines. It will call
|
|
||||||
# obj2dso, and also makes sure all object files for the library
|
|
||||||
# are built.
|
|
||||||
sub doengine {
|
|
||||||
my $lib = shift;
|
|
||||||
return "" if $cache{$lib};
|
|
||||||
$OUT .= obj2dso(lib => $lib,
|
|
||||||
objs => [ map { (my $x = $_) =~ s|\.o$||; $x }
|
|
||||||
(@{$unified_info{sources}->{$lib}},
|
|
||||||
@{$unified_info{shared_sources}->{$lib}}) ],
|
|
||||||
deps => [ resolvedepends($lib) ]);
|
|
||||||
foreach ((@{$unified_info{sources}->{$lib}},
|
|
||||||
@{$unified_info{shared_sources}->{$lib}})) {
|
|
||||||
doobj($_, $lib, intent => "dso");
|
|
||||||
}
|
|
||||||
$cache{$lib} = 1;
|
|
||||||
}
|
|
||||||
|
|
||||||
# dobin is responsible for building programs. It will call obj2bin,
|
|
||||||
# and also makes sure all object files for the library are built.
|
|
||||||
sub dobin {
|
|
||||||
my $bin = shift;
|
|
||||||
return "" if $cache{$bin};
|
|
||||||
my $deps = [ reducedepends(resolvedepends($bin)) ];
|
|
||||||
$OUT .= obj2bin(bin => $bin,
|
|
||||||
objs => [ map { (my $x = $_) =~ s|\.o$||; $x }
|
|
||||||
@{$unified_info{sources}->{$bin}} ],
|
|
||||||
deps => $deps);
|
|
||||||
foreach (@{$unified_info{sources}->{$bin}}) {
|
|
||||||
doobj($_, $bin, intent => "bin");
|
|
||||||
}
|
|
||||||
$cache{$bin} = 1;
|
|
||||||
}
|
|
||||||
|
|
||||||
# dobin is responsible for building scripts from templates. It will
|
|
||||||
# call in2script.
|
|
||||||
sub doscript {
|
|
||||||
my $script = shift;
|
|
||||||
return "" if $cache{$script};
|
|
||||||
$OUT .= in2script(script => $script,
|
|
||||||
sources => $unified_info{sources}->{$script});
|
|
||||||
$cache{$script} = 1;
|
|
||||||
}
|
|
||||||
|
|
||||||
# Start with populating the cache with all the overrides
|
|
||||||
%cache = map { $_ => 1 } @{$unified_info{overrides}};
|
|
||||||
|
|
||||||
# Build all known libraries, engines, programs and scripts.
|
|
||||||
# Everything else will be handled as a consequence.
|
|
||||||
foreach (@{$unified_info{libraries}}) { dolib($_); }
|
|
||||||
foreach (@{$unified_info{engines}}) { doengine($_); }
|
|
||||||
foreach (@{$unified_info{programs}}) { dobin($_); }
|
|
||||||
foreach (@{$unified_info{scripts}}) { doscript($_); }
|
|
||||||
|
|
||||||
# Finally, should there be any applicable BEGINRAW/ENDRAW sections,
|
|
||||||
# they are added here.
|
|
||||||
$OUT .= $_."\n" foreach @{$unified_info{rawlines}};
|
|
||||||
-}
|
|
||||||
@@ -1,666 +0,0 @@
|
|||||||
## descrip.mms to build OpenSSL on OpenVMS
|
|
||||||
##
|
|
||||||
## {- join("\n## ", @autowarntext) -}
|
|
||||||
{-
|
|
||||||
use File::Spec::Functions qw/:DEFAULT abs2rel rel2abs/;
|
|
||||||
|
|
||||||
# Our prefix, claimed when speaking with the VSI folks Tuesday
|
|
||||||
# January 26th 2016
|
|
||||||
our $osslprefix = 'OSSL$';
|
|
||||||
(our $osslprefix_q = $osslprefix) =~ s/\$/\\\$/;
|
|
||||||
|
|
||||||
our $sourcedir = $config{sourcedir};
|
|
||||||
our $builddir = $config{builddir};
|
|
||||||
sub sourcefile {
|
|
||||||
catfile($sourcedir, @_);
|
|
||||||
}
|
|
||||||
sub buildfile {
|
|
||||||
catfile($builddir, @_);
|
|
||||||
}
|
|
||||||
sub sourcedir {
|
|
||||||
catdir($sourcedir, @_);
|
|
||||||
}
|
|
||||||
sub builddir {
|
|
||||||
catdir($builddir, @_);
|
|
||||||
}
|
|
||||||
sub tree {
|
|
||||||
(my $x = shift) =~ s|\]$|...]|;
|
|
||||||
$x
|
|
||||||
}
|
|
||||||
sub move {
|
|
||||||
my $f = catdir(@_);
|
|
||||||
my $b = abs2rel(rel2abs("."),rel2abs($f));
|
|
||||||
$sourcedir = catdir($b,$sourcedir)
|
|
||||||
if !file_name_is_absolute($sourcedir);
|
|
||||||
$builddir = catdir($b,$builddir)
|
|
||||||
if !file_name_is_absolute($builddir);
|
|
||||||
"";
|
|
||||||
}
|
|
||||||
|
|
||||||
# This is a horrible hack, but is needed because recursive inclusion of files
|
|
||||||
# in different directories does not work well with HP C.
|
|
||||||
my $sd = sourcedir("crypto", "async", "arch");
|
|
||||||
foreach (grep /\[\.crypto\.async\.arch\].*\.o$/, keys %{$unified_info{sources}}) {
|
|
||||||
(my $x = $_) =~ s|\.o$|.OBJ|;
|
|
||||||
$unified_info{before}->{$x}
|
|
||||||
= qq(arch = F\$PARSE("$sd","A.;",,,"SYNTAX_ONLY") - "A.;"
|
|
||||||
define arch 'arch');
|
|
||||||
$unified_info{after}->{$x}
|
|
||||||
= qq(deassign arch);
|
|
||||||
}
|
|
||||||
my $sd1 = sourcedir("ssl","record");
|
|
||||||
my $sd2 = sourcedir("ssl","statem");
|
|
||||||
$unified_info{before}->{"[.test]heartbeat_test.OBJ"}
|
|
||||||
= $unified_info{before}->{"[.test]ssltest_old.OBJ"}
|
|
||||||
= qq(record = F\$PARSE("$sd1","A.;",,,"SYNTAX_ONLY") - "A.;"
|
|
||||||
define record 'record'
|
|
||||||
statem = F\$PARSE("$sd2","A.;",,,"SYNTAX_ONLY") - "A.;"
|
|
||||||
define statem 'statem');
|
|
||||||
$unified_info{after}->{"[.test]heartbeat_test.OBJ"}
|
|
||||||
= $unified_info{after}->{"[.test]ssltest.OBJ"}
|
|
||||||
= qq(deassign statem
|
|
||||||
deassign record);
|
|
||||||
foreach (grep /^\[\.ssl\.(?:record|statem)\].*\.o$/, keys %{$unified_info{sources}}) {
|
|
||||||
(my $x = $_) =~ s|\.o$|.OBJ|;
|
|
||||||
$unified_info{before}->{$x}
|
|
||||||
= qq(record = F\$PARSE("$sd1","A.;",,,"SYNTAX_ONLY") - "A.;"
|
|
||||||
define record 'record'
|
|
||||||
statem = F\$PARSE("$sd2","A.;",,,"SYNTAX_ONLY") - "A.;"
|
|
||||||
define statem 'statem');
|
|
||||||
$unified_info{after}->{$x}
|
|
||||||
= qq(deassign statem
|
|
||||||
deassign record);
|
|
||||||
}
|
|
||||||
#use Data::Dumper;
|
|
||||||
#print STDERR "DEBUG: before:\n", Dumper($unified_info{before});
|
|
||||||
#print STDERR "DEBUG: after:\n", Dumper($unified_info{after});
|
|
||||||
"";
|
|
||||||
-}
|
|
||||||
PLATFORM={- $config{target} -}
|
|
||||||
OPTIONS={- $config{options} -}
|
|
||||||
CONFIGURE_ARGS=({- join(", ",quotify_l(@{$config{perlargv}})) -})
|
|
||||||
SRCDIR={- $config{sourcedir} -}
|
|
||||||
BUILDDIR={- $config{builddir} -}
|
|
||||||
|
|
||||||
VERSION={- $config{version} -}
|
|
||||||
MAJOR={- $config{major} -}
|
|
||||||
MINOR={- $config{minor} -}
|
|
||||||
SHLIB_VERSION_NUMBER={- $config{shlib_version_number} -}
|
|
||||||
SHLIB_VERSION_HISTORY={- $config{shlib_version_history} -}
|
|
||||||
SHLIB_MAJOR={- $config{shlib_major} -}
|
|
||||||
SHLIB_MINOR={- $config{shlib_minor} -}
|
|
||||||
SHLIB_TARGET={- $target{shared_target} -}
|
|
||||||
|
|
||||||
EXE_EXT=.EXE
|
|
||||||
LIB_EXT=.OLB
|
|
||||||
SHLIB_EXT=.EXE
|
|
||||||
OBJ_EXT=.OBJ
|
|
||||||
DEP_EXT=.MMS
|
|
||||||
|
|
||||||
LIBS={- join(", ", map { "-\n\t".$_.".OLB" } @{$unified_info{libraries}}) -}
|
|
||||||
SHLIBS={- join(" ", map { $_."\$(SHLIB_EXT)" } map { $unified_info{sharednames}->{$_} || () } @{$unified_info{libraries}}) -}
|
|
||||||
ENGINES={- join(", ", map { "-\n\t".$_.".EXE" } @{$unified_info{engines}}) -}
|
|
||||||
PROGRAMS={- join(", ", map { "-\n\t".$_.".EXE" } grep { !m|^\[\.test\]| } @{$unified_info{programs}}) -}
|
|
||||||
TESTPROGS={- join(", ", map { "-\n\t".$_.".EXE" } grep { m|^\[\.test\]| } @{$unified_info{programs}}) -}
|
|
||||||
SCRIPTS={- join(", ", map { "-\n\t".$_ } @{$unified_info{scripts}}) -}
|
|
||||||
{- output_off() if $disabled{makedepend}; "" -}
|
|
||||||
DEPS={- our @deps = map { (my $x = $_) =~ s|\.o$|\$(DEP_EXT)|; $x; }
|
|
||||||
grep { $unified_info{sources}->{$_}->[0] =~ /\.c$/ }
|
|
||||||
keys %{$unified_info{sources}};
|
|
||||||
join(", ", map { "-\n\t".$_ } @deps); -}
|
|
||||||
{- output_on() if $disabled{makedepend}; "" -}
|
|
||||||
|
|
||||||
# DESTDIR is for package builders so that they can configure for, say,
|
|
||||||
# SYS$COMMON:[OPENSSL] and yet have everything installed in STAGING:[USER].
|
|
||||||
# In that case, configure with --prefix=SYS$COMMON:[OPENSSL] and then run
|
|
||||||
# MMS with /MACROS=(DESTDIR=STAGING:[USER]). The result will end up in
|
|
||||||
# STAGING:[USER.OPENSSL].
|
|
||||||
# Normally it is left empty.
|
|
||||||
DESTDIR=
|
|
||||||
|
|
||||||
# Do not edit this manually. Use Configure --prefix=DIR to change this!
|
|
||||||
INSTALLTOP={- (my $x = $config{version}) =~ s|\.|_|g;
|
|
||||||
our $installtop =
|
|
||||||
catdir($config{prefix}) || "SYS\$COMMON:[OPENSSL-$x]";
|
|
||||||
$installtop -}
|
|
||||||
SYSTARTUP={- catdir($installtop, '[.SYS$STARTUP]'); -}
|
|
||||||
# This is the standard central area to store certificates, private keys...
|
|
||||||
OPENSSLDIR={- catdir($config{openssldir}) ||
|
|
||||||
$config{prefix} ? catdir($config{prefix},"COMMON")
|
|
||||||
: "SYS\$COMMON:[OPENSSL-COMMON]" -}
|
|
||||||
# Where installed engines reside
|
|
||||||
ENGINESDIR={- $osslprefix -}ENGINES:
|
|
||||||
|
|
||||||
CC= {- $target{cc} -}
|
|
||||||
CFLAGS= /DEFINE=({- join(",", @{$target{defines}}, @{$config{defines}},"OPENSSLDIR=\"\"\"\$(OPENSSLDIR)\"\"\"","ENGINESDIR=\"\"\"\$(ENGINESDIR)\"\"\"") -}) {- $target{cflags} -} {- $config{cflags} -}
|
|
||||||
CFLAGS_Q=$(CFLAGS)
|
|
||||||
DEPFLAG= /DEFINE=({- join(",", @{$config{depdefines}}) -})
|
|
||||||
LDFLAGS= {- $target{lflags} -}
|
|
||||||
EX_LIBS= {- $target{ex_libs} ? ",".$target{ex_libs} : "" -}{- $config{ex_libs} ? ",".$config{ex_libs} : "" -}
|
|
||||||
|
|
||||||
PERL={- $config{perl} -}
|
|
||||||
|
|
||||||
# We let the C compiler driver to take care of .s files. This is done in
|
|
||||||
# order to be excused from maintaining a separate set of architecture
|
|
||||||
# dependent assembler flags. E.g. if you throw -mcpu=ultrasparc at SPARC
|
|
||||||
# gcc, then the driver will automatically translate it to -xarch=v8plus
|
|
||||||
# and pass it down to assembler.
|
|
||||||
AS={- $target{as} -}
|
|
||||||
ASFLAG={- $target{asflags} -}
|
|
||||||
|
|
||||||
# .FIRST and .LAST are special targets with MMS and MMK.
|
|
||||||
# The defines in there are for C. includes that look like
|
|
||||||
# this:
|
|
||||||
#
|
|
||||||
# #include <openssl/foo.h>
|
|
||||||
# #include "internal/bar.h"
|
|
||||||
#
|
|
||||||
# will use the logical names to find the files. Expecting
|
|
||||||
# DECompHP C to find files in subdirectories of whatever was
|
|
||||||
# given with /INCLUDE is a fantasy, unfortunately.
|
|
||||||
NODEBUG=@
|
|
||||||
.FIRST :
|
|
||||||
$(NODEBUG) openssl_inc1 = F$PARSE("[.include.openssl]","A.;",,,"syntax_only") - "A.;"
|
|
||||||
$(NODEBUG) openssl_inc2 = F$PARSE("{- catdir($config{sourcedir},"[.include.openssl]") -}","A.;",,,"SYNTAX_ONLY") - "A.;"
|
|
||||||
$(NODEBUG) internal_inc1 = F$PARSE("[.crypto.include.internal]","A.;",,,"SYNTAX_ONLY") - "A.;"
|
|
||||||
$(NODEBUG) internal_inc2 = F$PARSE("{- catdir($config{sourcedir},"[.include.internal]") -}","A.;",,,"SYNTAX_ONLY") - "A.;"
|
|
||||||
$(NODEBUG) internal_inc3 = F$PARSE("{- catdir($config{sourcedir},"[.crypto.include.internal]") -}","A.;",,,"SYNTAX_ONLY") - "A.;"
|
|
||||||
$(NODEBUG) DEFINE openssl 'openssl_inc1','openssl_inc2'
|
|
||||||
$(NODEBUG) DEFINE internal 'internal_inc1','internal_inc2','internal_inc3'
|
|
||||||
$(NODEBUG) staging_dir = "$(DESTDIR)"
|
|
||||||
$(NODEBUG) staging_instdir = ""
|
|
||||||
$(NODEBUG) staging_datadir = ""
|
|
||||||
$(NODEBUG) IF staging_dir .NES. "" THEN -
|
|
||||||
staging_instdir = F$PARSE("A.;",staging_dir,"[]",,"SYNTAX_ONLY")
|
|
||||||
$(NODEBUG) IF staging_instdir - "]A.;" .NES. staging_instdir THEN -
|
|
||||||
staging_instdir = staging_instdir - "]A.;" + ".OPENSSL-INSTALL]"
|
|
||||||
$(NODEBUG) IF staging_instdir - "A.;" .NES. staging_instdir THEN -
|
|
||||||
staging_instdir = staging_instdir - "A.;" + "[OPENSSL-INSTALL]"
|
|
||||||
$(NODEBUG) IF staging_dir .NES. "" THEN -
|
|
||||||
staging_datadir = F$PARSE("A.;",staging_dir,"[]",,"SYNTAX_ONLY")
|
|
||||||
$(NODEBUG) IF staging_datadir - "]A.;" .NES. staging_datadir THEN -
|
|
||||||
staging_datadir = staging_datadir - "]A.;" + ".OPENSSL-COMMON]"
|
|
||||||
$(NODEBUG) IF staging_datadir - "A.;" .NES. staging_datadir THEN -
|
|
||||||
staging_datadir = staging_datadir - "A.;" + "[OPENSSL-COMMON]"
|
|
||||||
$(NODEBUG) !
|
|
||||||
$(NODEBUG) ! Installation logical names
|
|
||||||
$(NODEBUG) !
|
|
||||||
$(NODEBUG) installtop = F$PARSE(staging_instdir,"$(INSTALLTOP)","[]A.;",,"SYNTAX_ONLY,NO_CONCEAL") - ".][000000" - "[000000." - "][" - "]A.;" + ".]"
|
|
||||||
$(NODEBUG) datatop = F$PARSE(staging_datadir,"$(OPENSSLDIR)","[]A.;",,"SYNTAX_ONLY,NO_CONCEAL") - ".][000000" - "[000000." - "][" - "]A.;" + ".]"
|
|
||||||
$(NODEBUG) DEFINE ossl_installroot 'installtop'
|
|
||||||
$(NODEBUG) DEFINE ossl_dataroot 'datatop'
|
|
||||||
$(NODEBUG) !
|
|
||||||
$(NODEBUG) ! Figure out the architecture
|
|
||||||
$(NODEBUG) !
|
|
||||||
$(NODEBUG) arch == f$edit( f$getsyi( "arch_name"), "upcase")
|
|
||||||
$(NODEBUG) !
|
|
||||||
$(NODEBUG) ! Set up logical names for the libraries, so LINK and
|
|
||||||
$(NODEBUG) ! running programs can use them.
|
|
||||||
$(NODEBUG) !
|
|
||||||
$(NODEBUG) {- join("\n\t\$(NODEBUG) ", map { "DEFINE ".uc($_)." 'F\$ENV(\"DEFAULT\")'".uc($_)."\$(SHLIB_EXT)" } map { $unified_info{sharednames}->{$_} || () } @{$unified_info{libraries}}) || "!" -}
|
|
||||||
|
|
||||||
.LAST :
|
|
||||||
$(NODEBUG) {- join("\n\t\$(NODEBUG) ", map { "DEASSIGN ".uc($_) } map { $unified_info{sharednames}->{$_} || () } @{$unified_info{libraries}}) || "!" -}
|
|
||||||
$(NODEBUG) DEASSIGN ossl_dataroot
|
|
||||||
$(NODEBUG) DEASSIGN ossl_installroot
|
|
||||||
$(NODEBUG) DEASSIGN internal
|
|
||||||
$(NODEBUG) DEASSIGN openssl
|
|
||||||
.DEFAULT :
|
|
||||||
@ ! MMS cannot handle no actions...
|
|
||||||
|
|
||||||
# The main targets ###################################################
|
|
||||||
|
|
||||||
all : configdata.pm, -
|
|
||||||
build_libs_nodep, build_engines_nodep, build_apps_nodep, -
|
|
||||||
depend
|
|
||||||
|
|
||||||
build_libs : configdata.pm, build_libs_nodep, depend
|
|
||||||
build_libs_nodep : $(LIBS)
|
|
||||||
build_engines : configdata.pm, build_engines_nodep, depend
|
|
||||||
build_engines_nodep : $(ENGINES)
|
|
||||||
build_apps : configdata.pm, build_apps_nodep, depend
|
|
||||||
build_apps_nodep : $(PROGRAMS), $(SCRIPTS)
|
|
||||||
build_tests : configdata.pm, build_tests_nodep, depend
|
|
||||||
build_tests_nodep : $(TESTPROGS)
|
|
||||||
|
|
||||||
test tests : configdata.pm, -
|
|
||||||
build_apps_nodep, build_engines_nodep, build_tests_nodep, -
|
|
||||||
depend
|
|
||||||
@ ! {- output_off() if $disabled{tests}; "" -}
|
|
||||||
SET DEFAULT [.test]{- move("test") -}
|
|
||||||
DEFINE SRCTOP {- sourcedir() -}
|
|
||||||
DEFINE BLDTOP {- builddir() -}
|
|
||||||
DEFINE OPENSSL_ENGINES {- builddir("engines") -}
|
|
||||||
$(PERL) {- sourcefile("test", "run_tests.pl") -} $(TESTS)
|
|
||||||
DEASSIGN OPENSSL_ENGINES
|
|
||||||
DEASSIGN BLDTOP
|
|
||||||
DEASSIGN SRCTOP
|
|
||||||
SET DEFAULT [-]{- move("..") -}
|
|
||||||
@ ! {- if ($disabled{tests}) { output_on(); } else { output_off(); } "" -}
|
|
||||||
@ WRITE SYS$OUTPUT "Tests are not supported with your chosen Configure options"
|
|
||||||
@ ! {- output_on() if !$disabled{tests}; "" -}
|
|
||||||
|
|
||||||
list-tests :
|
|
||||||
@ TOP=$(SRCDIR) PERL=$(PERL) $(PERL) {- catfile($config{sourcedir},"test", "run_tests.pl") -} list
|
|
||||||
|
|
||||||
# Because VMS wants the generation number (or *) to delete files, we can't
|
|
||||||
# use $(LIBS), $(PROGRAMS) and $(TESTPROGS) directly.
|
|
||||||
libclean :
|
|
||||||
- DELETE []OSSL$LIB*.OLB;*,OSSL$LIB*.LIS;*
|
|
||||||
- DELETE [.crypto...]*.OBJ;*,*.LIS;*
|
|
||||||
- DELETE [.ssl...]*.OBJ;*,*.LIS;*
|
|
||||||
- DELETE [.engines...]*.OBJ;*,*.LIS;*
|
|
||||||
- DELETE []CXX$DEMANGLER_DB.;*
|
|
||||||
|
|
||||||
install : install_sw install_docs
|
|
||||||
@ WRITE SYS$OUTPUT ""
|
|
||||||
@ WRITE SYS$OUTPUT "######################################################################"
|
|
||||||
@ WRITE SYS$OUTPUT ""
|
|
||||||
@ IF "$(DESTDIR)" .EQS. "" THEN -
|
|
||||||
PIPE ( WRITE SYS$OUTPUT "Installation complete" ; -
|
|
||||||
WRITE SYS$OUTPUT "" ; -
|
|
||||||
WRITE SYS$OUTPUT "Run @$(INSTALLTOP)openssl_startup to set up logical names" ; -
|
|
||||||
WRITE SYS$OUTPUT "then run @$(INSTALLTOP)openssl_setup to define commands" ; -
|
|
||||||
WRITE SYS$OUTPUT "" )
|
|
||||||
@ IF "$(DESTDIR)" .NES. "" THEN -
|
|
||||||
PIPE ( WRITE SYS$OUTPUT "Staging installation complete" ; -
|
|
||||||
WRITE SYS$OUTPUT "" ; -
|
|
||||||
WRITE SYS$OUTPUT "Finish or package in such a way that the contents of the directory tree" ; -
|
|
||||||
WRITE SYS$OUTPUT staging_instdir ; -
|
|
||||||
WRITE SYS$OUTPUT "ends up in $(INSTALLTOP)," ; -
|
|
||||||
WRITE SYS$OUTPUT "and that the contents of the contents of the directory tree" ; -
|
|
||||||
WRITE SYS$OUTPUT staging_datadir ; -
|
|
||||||
WRITE SYS$OUTPUT "ends up in $(OPENSSLDIR)" ; -
|
|
||||||
WRITE SYS$OUTPUT "" ; -
|
|
||||||
WRITE SYS$OUTPUT "When in its final destination," ; -
|
|
||||||
WRITE SYS$OUTPUT "Run @$(SYSTARTUP)openssl_startup to set up logical names" ; -
|
|
||||||
WRITE SYS$OUTPUT "then run @$(SYSTARTUP)openssl_utils to define commands" ; -
|
|
||||||
WRITE SYS$OUTPUT "" )
|
|
||||||
|
|
||||||
uninstall : uninstall_docs uninstall_sw
|
|
||||||
|
|
||||||
clean : libclean
|
|
||||||
- DELETE []OSSL$LIB*.EXE;*,OSSL$LIB*.MAP;*,OSSL$LIB*.OPT;*
|
|
||||||
- DELETE [.engines...]LIB*.EXE;*,LIB*.MAP;*,LIB*.OPT;*
|
|
||||||
- DELETE [.apps]*.EXE;*,*.MAP;*,*.OPT;*
|
|
||||||
- DELETE [.apps]*.OBJ;*,*.LIS;*
|
|
||||||
- DELETE [.test]*.EXE;*,*.MAP;*,*.OPT;*
|
|
||||||
- DELETE [.test]*.OBJ;*,*.LIS;*
|
|
||||||
- DELETE [.test]*.LOG;*
|
|
||||||
- DELETE []*.MAP;*
|
|
||||||
|
|
||||||
depend : descrip.mms
|
|
||||||
descrip.mms : FORCE
|
|
||||||
@ ! {- output_off() if $disabled{makedepend}; "" -}
|
|
||||||
@ $(PERL) -pe "if (/^# DO NOT DELETE.*/) { exit(0); }" -
|
|
||||||
< descrip.mms > descrip.mms-new
|
|
||||||
@ OPEN/APPEND DESCRIP descrip.mms-new
|
|
||||||
@ WRITE DESCRIP "# DO NOT DELETE THIS LINE -- make depend depends on it."
|
|
||||||
{- join("\n\t", map { "\@ IF F\$SEARCH(\"$_\") .NES. \"\" THEN TYPE $_ /OUTPUT=DESCRIP:" } @deps); -}
|
|
||||||
@ CLOSE DESCRIP
|
|
||||||
@ PIPE ( $(PERL) -e "use File::Compare qw/compare_text/; my $x = compare_text(""descrip.mms"",""descrip.mms-new""); exit(0x10000000 + ($x == 0));" || -
|
|
||||||
RENAME descrip.mms-new descrip.mms )
|
|
||||||
@ IF F$SEARCH("descrip.mms-new") .NES. "" THEN DELETE descrip.mms-new;*
|
|
||||||
-@ SPAWN/OUTPUT=NLA0: PURGE/NOLOG descrip.mms
|
|
||||||
@ ! {- output_on() if $disabled{makedepend}; "" -}
|
|
||||||
|
|
||||||
# Install helper targets #############################################
|
|
||||||
|
|
||||||
install_sw : all install_dev install_engines install_runtime install_config
|
|
||||||
|
|
||||||
uninstall_sw : uninstall_dev uninstall_engines uninstall_runtime uninstall_config
|
|
||||||
|
|
||||||
install_docs : install_man_docs install_html_docs
|
|
||||||
|
|
||||||
uninstall_docs : uninstall_man_docs uninstall_html_docs
|
|
||||||
|
|
||||||
install_dev : check_INSTALLTOP
|
|
||||||
@ WRITE SYS$OUTPUT "*** Installing development files"
|
|
||||||
@ ! Install header files
|
|
||||||
- CREATE/DIR ossl_installroot:[include.openssl]
|
|
||||||
COPY/PROT=W:R openssl:*.h ossl_installroot:[include.openssl]
|
|
||||||
@ ! Install libraries
|
|
||||||
- CREATE/DIR ossl_installroot:[LIB.'arch']
|
|
||||||
{- join("\n ",
|
|
||||||
map { "COPY/PROT=W:R $_.OLB ossl_installroot:[LIB.'arch']" }
|
|
||||||
@{$unified_info{libraries}}) -}
|
|
||||||
@ {- output_off() if $disabled{shared}; "" -} !
|
|
||||||
{- join("\n ",
|
|
||||||
map { "COPY/PROT=W:RE $_.EXE ossl_installroot:[LIB.'arch']" }
|
|
||||||
map { $unified_info{sharednames}->{$_} || () }
|
|
||||||
@{$unified_info{libraries}}) -}
|
|
||||||
@ {- output_on() if $disabled{shared}; "" -} !
|
|
||||||
|
|
||||||
install_runtime : check_INSTALLTOP
|
|
||||||
@ ! {- output_off() if $disabled{apps}; "" -}
|
|
||||||
@ WRITE SYS$OUTPUT "*** Installing runtime files"
|
|
||||||
@ ! Install the main program
|
|
||||||
- CREATE/DIR ossl_installroot:[EXE.'arch']
|
|
||||||
COPY/PROT=W:RE [.APPS]openssl.EXE ossl_installroot:[EXE.'arch']
|
|
||||||
@ ! Install scripts
|
|
||||||
- CREATE/DIR ossl_installroot:[EXE]
|
|
||||||
COPY/PROT=W:RE [.APPS]CA.pl ossl_installroot:[EXE]
|
|
||||||
COPY/PROT=W:RE [.TOOLS]c_rehash. ossl_installroot:[EXE]c_rehash.pl
|
|
||||||
@ ! {- output_on() if $disabled{apps}; "" -}
|
|
||||||
@ ! Install configuration file
|
|
||||||
- CREATE/DIR ossl_dataroot:[000000]
|
|
||||||
COPY/PROT=W:RE {- sourcefile("apps", "openssl-vms.cnf") -} -
|
|
||||||
ossl_dataroot:[000000]openssl.cnf
|
|
||||||
|
|
||||||
install_engines : check_INSTALLTOP
|
|
||||||
@ {- output_off() unless scalar @{$unified_info{engines}}; "" -} !
|
|
||||||
@ WRITE SYS$OUTPUT "*** Installing engines"
|
|
||||||
- CREATE/DIR ossl_installroot:[ENGINES.'arch']
|
|
||||||
{- join("\n ",
|
|
||||||
map { "COPY/PROT=W:RE $_.EXE ossl_installroot:[ENGINES.'arch']" }
|
|
||||||
grep(!m|ossltest$|i, @{$unified_info{engines}})) -}
|
|
||||||
@ {- output_on() unless scalar @{$unified_info{engines}}; "" -} !
|
|
||||||
|
|
||||||
install_config : [.VMS]openssl_startup.com [.VMS]openssl_shutdown.com -
|
|
||||||
check_INSTALLTOP
|
|
||||||
IF F$SEARCH("OSSL_DATAROOT:[000000]CERTS.DIR;1") .EQS. "" THEN -
|
|
||||||
CREATE/DIR/PROT=(S:RWED,O:RWE,G:RE,W:RE) OSSL_DATAROOT:[CERTS]
|
|
||||||
IF F$SEARCH("OSSL_DATAROOT:[000000]PRIVATE.DIR;1") .EQS. "" THEN -
|
|
||||||
CREATE/DIR/PROT=(S:RWED,O:RWE,G,W) OSSL_DATAROOT:[PRIVATE]
|
|
||||||
- CREATE/DIR ossl_installroot:[SYS$STARTUP]
|
|
||||||
COPY/PROT=W:RE -
|
|
||||||
[.VMS]openssl_startup.com,openssl_shutdown.com -
|
|
||||||
ossl_installroot:[SYS$STARTUP]
|
|
||||||
COPY/PROT=W:RE -
|
|
||||||
{- sourcefile("VMS", "openssl_utils.com") -} -
|
|
||||||
ossl_installroot:[SYS$STARTUP]
|
|
||||||
|
|
||||||
[.VMS]openssl_startup.com : vmsconfig.pm
|
|
||||||
- CREATE/DIR [.VMS]
|
|
||||||
$(PERL) "-I." "-Mvmsconfig" {- sourcefile("util", "dofile.pl") -} -
|
|
||||||
{- sourcefile("VMS", "openssl_startup.com.in") -} -
|
|
||||||
> [.VMS]openssl_startup.com
|
|
||||||
|
|
||||||
[.VMS]openssl_shutdown.com : vmsconfig.pm
|
|
||||||
- CREATE/DIR [.VMS]
|
|
||||||
$(PERL) "-I." "-Mvmsconfig" {- sourcefile("util", "dofile.pl") -} -
|
|
||||||
{- sourcefile("VMS", "openssl_shutdown.com.in") -} -
|
|
||||||
> [.VMS]openssl_shutdown.com
|
|
||||||
|
|
||||||
vmsconfig.pm : configdata.pm
|
|
||||||
OPEN/WRITE/SHARE=READ CONFIG []vmsconfig.pm
|
|
||||||
WRITE CONFIG "package vmsconfig;"
|
|
||||||
WRITE CONFIG "use strict; use warnings;"
|
|
||||||
WRITE CONFIG "use Exporter;"
|
|
||||||
WRITE CONFIG "our @ISA = qw(Exporter);"
|
|
||||||
WRITE CONFIG "our @EXPORT = qw(%config %target %withargs %unified_info %disabled);"
|
|
||||||
WRITE CONFIG "our %config = ("
|
|
||||||
WRITE CONFIG " target => '{- $config{target} -}',"
|
|
||||||
WRITE CONFIG " version => '$(MAJOR).$(MINOR)',"
|
|
||||||
WRITE CONFIG " no_shared => '","{- $disabled{shared} -}","',"
|
|
||||||
WRITE CONFIG " INSTALLTOP => '$(INSTALLTOP)',"
|
|
||||||
WRITE CONFIG " OPENSSLDIR => '$(OPENSSLDIR)',"
|
|
||||||
WRITE CONFIG " pointersize => '","{- $target{pointersize} -}","',"
|
|
||||||
WRITE CONFIG " shared_libs => ["
|
|
||||||
{- join("\n ", map { "WRITE CONFIG \" '$_'," } map { $unified_info{sharednames}->{$_} || () } @{$unified_info{libraries}}) || "\@ !" -}
|
|
||||||
WRITE CONFIG " ],"
|
|
||||||
WRITE CONFIG ");"
|
|
||||||
WRITE CONFIG "our %target = ();"
|
|
||||||
WRITE CONFIG "our %disabled = ();"
|
|
||||||
WRITE CONFIG "our %withargs = ();"
|
|
||||||
WRITE CONFIG "our %unified_info = ();"
|
|
||||||
WRITE CONFIG "1;"
|
|
||||||
CLOSE CONFIG
|
|
||||||
|
|
||||||
check_INSTALLTOP :
|
|
||||||
@ IF "$(INSTALLTOP)" .EQS. "" THEN -
|
|
||||||
WRITE SYS$ERROR "INSTALLTOP should not be empty"
|
|
||||||
@ IF "$(INSTALLTOP)" .EQS. "" THEN -
|
|
||||||
EXIT %x10000002
|
|
||||||
|
|
||||||
# Helper targets #####################################################
|
|
||||||
|
|
||||||
# Developer targets ##################################################
|
|
||||||
|
|
||||||
debug_logicals :
|
|
||||||
SH LOGICAL/PROC openssl,internal,ossl_installroot
|
|
||||||
IF "$(DESTDIR)" .EQS. "" THEN -
|
|
||||||
SH LOGICAL/PROC ossl_dataroot
|
|
||||||
|
|
||||||
# Building targets ###################################################
|
|
||||||
|
|
||||||
configdata.pm : {- join(" ", sourcefile("Configurations", "descrip.mms.tmpl"), sourcefile("Configurations", "common.tmpl")) -} $(SRCDIR)Configure $(SRCDIR)config.com {- join(" ", @{$config{build_infos}}) -}
|
|
||||||
@ WRITE SYS$OUTPUT "Reconfiguring..."
|
|
||||||
perl $(SRCDIR)Configure reconf
|
|
||||||
@ WRITE SYS$OUTPUT "*************************************************"
|
|
||||||
@ WRITE SYS$OUTPUT "*** ***"
|
|
||||||
@ WRITE SYS$OUTPUT "*** Please run the same mms command again ***"
|
|
||||||
@ WRITE SYS$OUTPUT "*** ***"
|
|
||||||
@ WRITE SYS$OUTPUT "*************************************************"
|
|
||||||
@ PIPE ( EXIT %X10000000 )
|
|
||||||
|
|
||||||
{-
|
|
||||||
use File::Basename;
|
|
||||||
use File::Spec::Functions qw/abs2rel rel2abs catfile catdir/;
|
|
||||||
|
|
||||||
sub generatesrc {
|
|
||||||
my %args = @_;
|
|
||||||
my $generator = join(" ", @{$args{generator}});
|
|
||||||
my $deps = join(", -\n\t\t", @{$args{deps}});
|
|
||||||
|
|
||||||
if ($args{src} !~ /\.[sS]$/) {
|
|
||||||
return <<"EOF";
|
|
||||||
$args{src} : $args{generator}->[0] $deps
|
|
||||||
\$(PERL) $generator > \$@
|
|
||||||
EOF
|
|
||||||
} else {
|
|
||||||
die "No method to generate assembler source present.\n";
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
sub src2obj {
|
|
||||||
my %args = @_;
|
|
||||||
my $obj = $args{obj};
|
|
||||||
my $deps = join(", -\n\t\t", @{$args{srcs}}, @{$args{deps}});
|
|
||||||
|
|
||||||
# Because VMS C isn't very good at combining a /INCLUDE path with
|
|
||||||
# #includes having a relative directory (like '#include "../foo.h"),
|
|
||||||
# the best choice is to move to the first source file's intended
|
|
||||||
# directory before compiling, and make sure to write the object file
|
|
||||||
# in the correct position (important when the object tree is other
|
|
||||||
# than the source tree).
|
|
||||||
my $forward = dirname($args{srcs}->[0]);
|
|
||||||
my $backward = abs2rel(rel2abs("."), rel2abs($forward));
|
|
||||||
my $objd = abs2rel(rel2abs(dirname($obj)), rel2abs($forward));
|
|
||||||
my $objn = basename($obj);
|
|
||||||
my $srcs =
|
|
||||||
join(", ",
|
|
||||||
map { abs2rel(rel2abs($_), rel2abs($forward)) } @{$args{srcs}});
|
|
||||||
my $incs_on = "\@ !";
|
|
||||||
my $incs_off = "\@ !";
|
|
||||||
my $incs = "";
|
|
||||||
my @incs = ();
|
|
||||||
push @incs, @{$args{incs}} if @{$args{incs}};
|
|
||||||
unless ($disabled{zlib}) {
|
|
||||||
# GNV$ZLIB_INCLUDE is the standard logical name for later zlib
|
|
||||||
# incarnations.
|
|
||||||
push @incs, ($withargs{zlib_include} || 'GNV$ZLIB_INCLUDE:');
|
|
||||||
}
|
|
||||||
if (@incs) {
|
|
||||||
$incs_on =
|
|
||||||
"DEFINE tmp_includes "
|
|
||||||
.join(",-\n\t\t\t", map {
|
|
||||||
file_name_is_absolute($_)
|
|
||||||
? $_ : catdir($backward,$_)
|
|
||||||
} @incs);
|
|
||||||
$incs_off = "DEASSIGN tmp_includes";
|
|
||||||
$incs = " /INCLUDE=(tmp_includes:)";
|
|
||||||
}
|
|
||||||
my $before = $unified_info{before}->{$obj.".OBJ"} || "\@ !";
|
|
||||||
my $after = $unified_info{after}->{$obj.".OBJ"} || "\@ !";
|
|
||||||
my $depbuild = $disabled{makedepend} ? ""
|
|
||||||
: " /MMS=(FILE=${objd}${objn}.tmp-MMS,TARGET=$obj.OBJ)";
|
|
||||||
|
|
||||||
return <<"EOF";
|
|
||||||
$obj.OBJ : $deps
|
|
||||||
${before}
|
|
||||||
SET DEFAULT $forward
|
|
||||||
$incs_on
|
|
||||||
\$(CC) \$(CFLAGS)${incs}${depbuild} /OBJECT=${objd}${objn}.OBJ /REPOSITORY=$backward $srcs
|
|
||||||
$incs_off
|
|
||||||
SET DEFAULT $backward
|
|
||||||
${after}
|
|
||||||
\@ PIPE ( \$(PERL) -e "use File::Compare qw/compare_text/; my \$x = compare_text(""$obj.MMS"",""$obj.tmp-MMS""); exit(0x10000000 + (\$x == 0));" || -
|
|
||||||
RENAME $obj.tmp-MMS $obj.mms )
|
|
||||||
\@ IF F\$SEARCH("$obj.tmp-MMS") .NES. "" THEN DELETE $obj.tmp-MMS;*
|
|
||||||
- PURGE $obj.OBJ
|
|
||||||
EOF
|
|
||||||
}
|
|
||||||
sub libobj2shlib {
|
|
||||||
my %args = @_;
|
|
||||||
my $lib = $args{lib};
|
|
||||||
my $shlib = $args{shlib};
|
|
||||||
my $libd = dirname($lib);
|
|
||||||
my $libn = basename($lib);
|
|
||||||
(my $mkdef_key = $libn) =~ s/^${osslprefix_q}lib//i;
|
|
||||||
my @deps = map {
|
|
||||||
$disabled{shared} ? $_.".OLB"
|
|
||||||
: $unified_info{sharednames}->{$_}.".EXE"; } @{$args{deps}};
|
|
||||||
my $deps = join(", -\n\t\t", @deps);
|
|
||||||
my $shlib_target = $disabled{shared} ? "" : $target{shared_target};
|
|
||||||
my $ordinalsfile = defined($args{ordinals}) ? $args{ordinals}->[1] : "";
|
|
||||||
my $engine_opt = abs2rel(rel2abs(catfile($config{sourcedir},
|
|
||||||
"VMS", "engine.opt")),
|
|
||||||
rel2abs($config{builddir}));
|
|
||||||
my $mkdef_pl = abs2rel(rel2abs(catfile($config{sourcedir},
|
|
||||||
"util", "mkdef.pl")),
|
|
||||||
rel2abs($config{builddir}));
|
|
||||||
my $translatesyms_pl = abs2rel(rel2abs(catfile($config{sourcedir},
|
|
||||||
"VMS", "translatesyms.pl")),
|
|
||||||
rel2abs($config{builddir}));
|
|
||||||
# The "[]" hack is because in .OPT files, each line inherits the
|
|
||||||
# previous line's file spec as default, so if no directory spec
|
|
||||||
# is present in the current line and the previous line has one that
|
|
||||||
# doesn't apply, you're in for a surprise.
|
|
||||||
my $write_opt =
|
|
||||||
join("\n\t", map { my $x = $_ =~ /\[/ ? $_ : "[]".$_;
|
|
||||||
$x =~ s|(\.EXE)|$1/SHARE|;
|
|
||||||
$x =~ s|(\.OLB)|$1/LIB|;
|
|
||||||
"WRITE OPT_FILE \"$x\"" } @deps)
|
|
||||||
|| "\@ !";
|
|
||||||
return <<"EOF";
|
|
||||||
$shlib.EXE : $lib.OLB $deps $ordinalsfile
|
|
||||||
IF "$mkdef_key" .EQS. "ssl" .OR. "$mkdef_key" .EQS. "crypto" THEN -
|
|
||||||
\$(PERL) $mkdef_pl "$mkdef_key" "VMS" > $shlib.SYMVEC-tmp
|
|
||||||
IF "$mkdef_key" .EQS. "ssl" .OR. "$mkdef_key" .EQS. "crypto" THEN -
|
|
||||||
\$(PERL) $translatesyms_pl \$(BUILDDIR)CXX\$DEMANGLER_DB. < $shlib.SYMVEC-tmp > $shlib.SYMVEC
|
|
||||||
OPEN/WRITE/SHARE=READ OPT_FILE $shlib.OPT
|
|
||||||
WRITE OPT_FILE "IDENTIFICATION=""V$config{version}"""
|
|
||||||
IF "$mkdef_key" .NES. "ssl" .AND. "$mkdef_key" .NES. "crypto" THEN -
|
|
||||||
TYPE $engine_opt /OUTPUT=OPT_FILE:
|
|
||||||
IF "$mkdef_key" .EQS. "ssl" .OR. "$mkdef_key" .EQS. "crypto" THEN -
|
|
||||||
TYPE $shlib.SYMVEC /OUTPUT=OPT_FILE:
|
|
||||||
WRITE OPT_FILE "$lib.OLB/LIBRARY"
|
|
||||||
$write_opt ! Comment to protect from empty line
|
|
||||||
CLOSE OPT_FILE
|
|
||||||
LINK /MAP=$shlib.MAP /FULL/SHARE=$shlib.EXE $shlib.OPT/OPT \$(EX_LIBS)
|
|
||||||
- DELETE $shlib.SYMVEC;*
|
|
||||||
- PURGE $shlib.EXE,$shlib.OPT,$shlib.MAP
|
|
||||||
EOF
|
|
||||||
}
|
|
||||||
sub obj2dso {
|
|
||||||
my %args = @_;
|
|
||||||
my $lib = $args{lib};
|
|
||||||
my $libd = dirname($lib);
|
|
||||||
my $libn = basename($lib);
|
|
||||||
(my $libn_nolib = $libn) =~ s/^lib//;
|
|
||||||
my @objs = map { "$_.OBJ" } @{$args{objs}};
|
|
||||||
my @deps = map {
|
|
||||||
$disabled{shared} ? $_.".OLB"
|
|
||||||
: $unified_info{sharednames}->{$_}.".EXE"; } @{$args{deps}};
|
|
||||||
my $deps = join(", -\n\t\t", @objs, @deps);
|
|
||||||
my $shlib_target = $disabled{shared} ? "" : $target{shared_target};
|
|
||||||
my $engine_opt = abs2rel(rel2abs(catfile($config{sourcedir},
|
|
||||||
"VMS", "engine.opt")),
|
|
||||||
rel2abs($config{builddir}));
|
|
||||||
# The "[]" hack is because in .OPT files, each line inherits the
|
|
||||||
# previous line's file spec as default, so if no directory spec
|
|
||||||
# is present in the current line and the previous line has one that
|
|
||||||
# doesn't apply, you're in for a surprise.
|
|
||||||
my $write_opt =
|
|
||||||
join(",-\"\n\t", map { my $x = $_ =~ /\[/ ? $_ : "[]".$_;
|
|
||||||
"WRITE OPT_FILE \"$x" } @objs).
|
|
||||||
"\"\n\t".
|
|
||||||
join("\n\t", map { my $x = $_ =~ /\[/ ? $_ : "[]".$_;
|
|
||||||
$x =~ s|(\.EXE)|$1/SHARE|;
|
|
||||||
$x =~ s|(\.OLB)|$1/LIB|;
|
|
||||||
"WRITE OPT_FILE \"$x\"" } @deps)
|
|
||||||
|| "\@ !";
|
|
||||||
return <<"EOF";
|
|
||||||
$lib.EXE : $deps
|
|
||||||
OPEN/WRITE/SHARE=READ OPT_FILE $lib.OPT
|
|
||||||
TYPE $engine_opt /OUTPUT=OPT_FILE:
|
|
||||||
$write_opt
|
|
||||||
CLOSE OPT_FILE
|
|
||||||
LINK /MAP=$lib.MAP /FULL/SHARE=$lib.EXE $lib.OPT/OPT \$(EX_LIBS)
|
|
||||||
- PURGE $lib.EXE,$lib.OPT,$lib.MAP
|
|
||||||
EOF
|
|
||||||
}
|
|
||||||
sub obj2lib {
|
|
||||||
my %args = @_;
|
|
||||||
my $lib = $args{lib};
|
|
||||||
my $objs = join(", -\n\t\t", map { $_.".OBJ" } (@{$args{objs}}));
|
|
||||||
my $fill_lib = join("\n\t", (map { "LIBRARY/REPLACE $lib.OLB $_.OBJ" }
|
|
||||||
@{$args{objs}}));
|
|
||||||
return <<"EOF";
|
|
||||||
$lib.OLB : $objs
|
|
||||||
LIBRARY/CREATE/OBJECT $lib
|
|
||||||
$fill_lib
|
|
||||||
- PURGE $lib.OLB
|
|
||||||
EOF
|
|
||||||
}
|
|
||||||
sub obj2bin {
|
|
||||||
my %args = @_;
|
|
||||||
my $bin = $args{bin};
|
|
||||||
my $bind = dirname($bin);
|
|
||||||
my $binn = basename($bin);
|
|
||||||
my @objs = map { "$_.OBJ" } @{$args{objs}};
|
|
||||||
my @deps = map {
|
|
||||||
$disabled{shared} ? $_.".OLB"
|
|
||||||
: $unified_info{sharednames}->{$_}.".EXE"; } @{$args{deps}};
|
|
||||||
my $deps = join(", -\n\t\t", @objs, @deps);
|
|
||||||
# The "[]" hack is because in .OPT files, each line inherits the
|
|
||||||
# previous line's file spec as default, so if no directory spec
|
|
||||||
# is present in the current line and the previous line has one that
|
|
||||||
# doesn't apply, you're in for a surprise.
|
|
||||||
my $write_opt =
|
|
||||||
join(",-\"\n\t", map { my $x = $_ =~ /\[/ ? $_ : "[]".$_;
|
|
||||||
"WRITE OPT_FILE \"$x" } @objs).
|
|
||||||
"\"\n\t".
|
|
||||||
join("\n\t", map { my $x = $_ =~ /\[/ ? $_ : "[]".$_;
|
|
||||||
$x =~ s|(\.EXE)|$1/SHARE|;
|
|
||||||
$x =~ s|(\.OLB)|$1/LIB|;
|
|
||||||
"WRITE OPT_FILE \"$x\"" } @deps)
|
|
||||||
|| "\@ !";
|
|
||||||
return <<"EOF";
|
|
||||||
$bin.EXE : $deps
|
|
||||||
OPEN/WRITE/SHARE=READ OPT_FILE $bin.OPT
|
|
||||||
$write_opt
|
|
||||||
CLOSE OPT_FILE
|
|
||||||
LINK/EXEC=$bin.EXE \$(LDFLAGS) $bin.OPT/OPT \$(EX_LIBS)
|
|
||||||
- PURGE $bin.EXE,$bin.OPT
|
|
||||||
EOF
|
|
||||||
}
|
|
||||||
sub in2script {
|
|
||||||
my %args = @_;
|
|
||||||
my $script = $args{script};
|
|
||||||
return "" if grep { $_ eq $script } @{$args{sources}}; # No overwrite!
|
|
||||||
my $sources = join(" ", @{$args{sources}});
|
|
||||||
my $dofile = abs2rel(rel2abs(catfile($config{sourcedir},
|
|
||||||
"util", "dofile.pl")),
|
|
||||||
rel2abs($config{builddir}));
|
|
||||||
return <<"EOF";
|
|
||||||
$script : $sources
|
|
||||||
\$(PERL) "-I\$(BUILDDIR)" "-Mconfigdata" $dofile -
|
|
||||||
"-o$target{build_file}" $sources > $script
|
|
||||||
SET FILE/PROT=(S:RWED,O:RWED,G:RE,W:RE) $script
|
|
||||||
PURGE $script
|
|
||||||
EOF
|
|
||||||
}
|
|
||||||
"" # Important! This becomes part of the template result.
|
|
||||||
-}
|
|
||||||
File diff suppressed because it is too large
Load Diff
@@ -1,450 +0,0 @@
|
|||||||
##
|
|
||||||
## Makefile for OpenSSL
|
|
||||||
##
|
|
||||||
## {- join("\n## ", @autowarntext) -}
|
|
||||||
{-
|
|
||||||
our $objext = $target{obj_extension} || ".obj";
|
|
||||||
our $depext = $target{dep_extension} || ".d";
|
|
||||||
our $exeext = $target{exe_extension} || ".exe";
|
|
||||||
our $libext = $target{lib_extension} || ".lib";
|
|
||||||
our $shlibext = $target{shared_extension} || ".dll";
|
|
||||||
our $shlibextimport = $target{shared_import_extension} || ".lib";
|
|
||||||
our $dsoext = $target{dso_extension} || ".dll";
|
|
||||||
|
|
||||||
my $win_installenv =
|
|
||||||
$target{build_scheme}->[2] eq "VC-W32" ?
|
|
||||||
"ProgramFiles(x86)" : "ProgramW6432";
|
|
||||||
my $win_commonenv =
|
|
||||||
$target{build_scheme}->[2] eq "VC-W32"
|
|
||||||
? "CommonProgramFiles(x86)" : "CommonProgramW6432";
|
|
||||||
our $win_installroot =
|
|
||||||
defined($ENV{$win_installenv})
|
|
||||||
? '%'.$win_installenv.'%' : '%ProgramFiles%';
|
|
||||||
our $win_commonroot =
|
|
||||||
defined($ENV{$win_commonenv})
|
|
||||||
? '%'.$win_commonenv.'%' : '%CommonProgramFiles%';
|
|
||||||
|
|
||||||
sub shlib {
|
|
||||||
return () if $disabled{shared};
|
|
||||||
my $lib = shift;
|
|
||||||
return $unified_info{sharednames}->{$lib} . $shlibext;
|
|
||||||
}
|
|
||||||
|
|
||||||
sub shlib_import {
|
|
||||||
return () if $disabled{shared};
|
|
||||||
my $lib = shift;
|
|
||||||
return $lib . $shlibextimport;
|
|
||||||
}
|
|
||||||
|
|
||||||
sub dso {
|
|
||||||
my $dso = shift;
|
|
||||||
|
|
||||||
return $dso . $dsoext;
|
|
||||||
}
|
|
||||||
'';
|
|
||||||
-}
|
|
||||||
|
|
||||||
PLATFORM={- $config{target} -}
|
|
||||||
SRCDIR={- $config{sourcedir} -}
|
|
||||||
BLDDIR={- $config{builddir} -}
|
|
||||||
|
|
||||||
VERSION={- $config{version} -}
|
|
||||||
MAJOR={- $config{major} -}
|
|
||||||
MINOR={- $config{minor} -}
|
|
||||||
|
|
||||||
SHLIB_VERSION_NUMBER={- $config{shlib_version_number} -}
|
|
||||||
|
|
||||||
LIBS={- join(" ", map { $_.$libext } @{$unified_info{libraries}}) -}
|
|
||||||
SHLIBS={- join(" ", map { shlib($_) } @{$unified_info{libraries}}) -}
|
|
||||||
ENGINES={- join(" ", map { dso($_) } @{$unified_info{engines}}) -}
|
|
||||||
PROGRAMS={- join(" ", map { $_.$exeext } grep { !m|^test\\| } @{$unified_info{programs}}) -}
|
|
||||||
TESTPROGS={- join(" ", map { $_.$exeext } grep { m|^test\\| } @{$unified_info{programs}}) -}
|
|
||||||
SCRIPTS={- join(" ", @{$unified_info{scripts}}) -}
|
|
||||||
|
|
||||||
{- output_off() if $disabled{makedepend}; "" -}
|
|
||||||
DEPS={- join(" ", map { (my $x = $_) =~ s|\.o$|$depext|; $x; }
|
|
||||||
grep { $unified_info{sources}->{$_}->[0] =~ /\.c$/ }
|
|
||||||
keys %{$unified_info{sources}}); -}
|
|
||||||
{- output_on() if $disabled{makedepend}; "" -}
|
|
||||||
|
|
||||||
# Do not edit these manually. Use Configure with --prefix or --openssldir
|
|
||||||
# to change this! Short explanation in the top comment in Configure
|
|
||||||
INSTALLTOP={- # $prefix is used in the OPENSSLDIR perl snippet
|
|
||||||
#
|
|
||||||
our $prefix = $config{prefix} || "$win_installroot\\OpenSSL";
|
|
||||||
$prefix -}
|
|
||||||
OPENSSLDIR={- #
|
|
||||||
# The logic here is that if no --openssldir was given,
|
|
||||||
# OPENSSLDIR will get the value from $prefix plus "/ssl".
|
|
||||||
# If --openssldir was given and the value is an absolute
|
|
||||||
# path, OPENSSLDIR will get its value without change.
|
|
||||||
# If the value from --openssldir is a relative path,
|
|
||||||
# OPENSSLDIR will get $prefix with the --openssldir
|
|
||||||
# value appended as a subdirectory.
|
|
||||||
#
|
|
||||||
use File::Spec::Functions;
|
|
||||||
our $openssldir =
|
|
||||||
$config{openssldir} ?
|
|
||||||
(file_name_is_absolute($config{openssldir}) ?
|
|
||||||
$config{openssldir}
|
|
||||||
: catdir($prefix, $config{openssldir}))
|
|
||||||
: "$win_commonroot\\SSL";
|
|
||||||
$openssldir -}
|
|
||||||
LIBDIR={- our $libdir = $config{libdir} || "lib";
|
|
||||||
$libdir -}
|
|
||||||
ENGINESDIR={- use File::Spec::Functions;
|
|
||||||
our $enginesdir = catdir($prefix,$libdir,"engines");
|
|
||||||
$enginesdir -}
|
|
||||||
|
|
||||||
CC={- $target{cc} -}
|
|
||||||
CFLAGS={- join(" ",(map { "-D".$_} @{$target{defines}}, @{$config{defines}})) -} {- join(" ", quotify_l("-DENGINESDIR=\"$enginesdir\"", "-DOPENSSLDIR=\"$openssldir\"")) -} {- $target{cflags} -} {- $config{cflags} -}
|
|
||||||
COUTFLAG={- $target{coutflag} || "/Fo" -}
|
|
||||||
RC={- $target{rc} || "rc" -}
|
|
||||||
RCOUTFLAG={- $target{rcoutflag} || "/fo" -}
|
|
||||||
LD={- $target{ld} || "link" -}
|
|
||||||
LDFLAGS={- $target{lflags} -}
|
|
||||||
LDOUTFLAG={- $target{loutflag} || "/out:" -}
|
|
||||||
EX_LIBS={- $target{ex_libs} -}
|
|
||||||
LIB_CFLAGS={- join(" ", $target{lib_cflags}, $target{shared_cflag}) || "" -}
|
|
||||||
LIB_LDFLAGS={- $target{shared_ldflag} || "" -}
|
|
||||||
DSO_CFLAGS={- join(" ", $target{dso_cflags}, $target{shared_cflag}) || "" -}
|
|
||||||
DSO_LDFLAGS={- join(" ", $target{dso_lflags}, $target{shared_ldflag}) || "" -}
|
|
||||||
BIN_CFLAGS={- $target{bin_cflags} -}
|
|
||||||
BIN_LDFLAGS={- $target{bin_lflags} -}
|
|
||||||
|
|
||||||
PERL={- $config{perl} -}
|
|
||||||
|
|
||||||
AR={- $target{ar} -}
|
|
||||||
ARFLAGS= {- $target{arflags} -}
|
|
||||||
AROUTFLAG={- $target{aroutflag} || "/out:" -}
|
|
||||||
|
|
||||||
AS={- $target{as} -}
|
|
||||||
ASFLAGS={- $target{asflags} -}
|
|
||||||
ASOUTFLAG={- $target{asoutflag} -}
|
|
||||||
PERLASM_SCHEME= {- $target{perlasm_scheme} -}
|
|
||||||
|
|
||||||
PROCESSOR= {- $config{processor} -}
|
|
||||||
|
|
||||||
# The main targets ###################################################
|
|
||||||
|
|
||||||
all: configdata.pm build_libs_nodep build_engines_nodep build_apps_nodep depend
|
|
||||||
|
|
||||||
build_libs: configdata.pm build_libs_nodep depend
|
|
||||||
build_libs_nodep: $(LIBS)
|
|
||||||
build_engines: configdata.pm build_engines_nodep depend
|
|
||||||
build_engines_nodep: $(ENGINES)
|
|
||||||
build_apps: configdata.pm build_apps_nodep depend
|
|
||||||
build_apps_nodep: $(PROGRAMS) $(SCRIPTS)
|
|
||||||
build_tests: configdata.pm build_tests_nodep depend
|
|
||||||
build_tests_nodep: $(TESTPROGS)
|
|
||||||
|
|
||||||
test tests: build_tests_nodep build_apps_nodep build_engines_nodep depend
|
|
||||||
@rem {- output_off() if $disabled{tests}; "" -}
|
|
||||||
set SRCTOP=$(SRCDIR)
|
|
||||||
set BLDTOP=$(BLDDIR)
|
|
||||||
set PERL=$(PERL)
|
|
||||||
$(PERL) $(SRCDIR)\test\run_tests.pl $(TESTS)
|
|
||||||
@rem {- if ($disabled{tests}) { output_on(); } else { output_off(); } "" -}
|
|
||||||
@echo "Tests are not supported with your chosen Configure options"
|
|
||||||
@rem {- output_on() if !$disabled{tests}; "" -}
|
|
||||||
|
|
||||||
list-tests:
|
|
||||||
@set TOP=$(SRCDIR)
|
|
||||||
@set PERL=$(PERL)
|
|
||||||
@$(PERL) $(SRCDIR)\test\run_tests.pl list
|
|
||||||
|
|
||||||
install: install_sw install_ssldirs install_docs
|
|
||||||
|
|
||||||
uninstall: uninstall_docs uninstall_sw
|
|
||||||
|
|
||||||
libclean:
|
|
||||||
$(PERL) -e "map { m/(.*)\.dll$$/; unlink glob """$$1.*""" } @ARGV" $(SHLIBS)
|
|
||||||
del /Q /F $(LIBS)
|
|
||||||
del lib.pdb
|
|
||||||
|
|
||||||
clean: libclean
|
|
||||||
del /Q /F $(PROGRAMS) $(TESTPROGS) $(ENGINES) $(SCRIPTS)
|
|
||||||
del /Q /S /F *.asm
|
|
||||||
del /Q /S /F *.d
|
|
||||||
del /Q /S /F *.obj
|
|
||||||
del /Q /S /F *.pdb
|
|
||||||
del /Q /S /F *.exp
|
|
||||||
del /Q /S /F engines\*.ilk
|
|
||||||
del /Q /S /F engines\*.lib
|
|
||||||
|
|
||||||
depend:
|
|
||||||
|
|
||||||
# Install helper targets #############################################
|
|
||||||
|
|
||||||
install_sw: all install_dev install_engines install_runtime
|
|
||||||
|
|
||||||
uninstall_sw: uninstall_runtime uninstall_engines uninstall_dev
|
|
||||||
|
|
||||||
install_docs:
|
|
||||||
|
|
||||||
uninstall_docs:
|
|
||||||
|
|
||||||
install_ssldirs:
|
|
||||||
@$(PERL) $(SRCDIR)\util\mkdir-p.pl "$(DESTDIR)$(OPENSSLDIR)\certs"
|
|
||||||
@$(PERL) $(SRCDIR)\util\mkdir-p.pl "$(DESTDIR)$(OPENSSLDIR)\private"
|
|
||||||
|
|
||||||
install_dev:
|
|
||||||
@if "$(INSTALLTOP)"=="" ( echo INSTALLTOP should not be empty & exit 1 )
|
|
||||||
@echo *** Installing development files
|
|
||||||
@$(PERL) $(SRCDIR)\util\mkdir-p.pl "$(DESTDIR)$(INSTALLTOP)\include\openssl"
|
|
||||||
@$(PERL) $(SRCDIR)\util\copy.pl $(SRCDIR)\include\openssl\*.h \
|
|
||||||
"$(DESTDIR)$(INSTALLTOP)\include\openssl"
|
|
||||||
@$(PERL) $(SRCDIR)\util\copy.pl $(BLDDIR)\include\openssl\*.h \
|
|
||||||
"$(DESTDIR)$(INSTALLTOP)\include\openssl"
|
|
||||||
@$(PERL) $(SRCDIR)\util\mkdir-p.pl "$(DESTDIR)$(INSTALLTOP)\$(LIBDIR)"
|
|
||||||
@$(PERL) $(SRCDIR)\util\copy.pl $(LIBS) \
|
|
||||||
"$(DESTDIR)$(INSTALLTOP)\$(LIBDIR)"
|
|
||||||
|
|
||||||
uninstall_dev:
|
|
||||||
|
|
||||||
install_engines:
|
|
||||||
@if "$(INSTALLTOP)"=="" ( echo INSTALLTOP should not be empty & exit 1 )
|
|
||||||
@echo *** Installing engines
|
|
||||||
@$(PERL) $(SRCDIR)\util\mkdir-p.pl "$(DESTDIR)$(ENGINESDIR)"
|
|
||||||
@if not "$(ENGINES)"=="" \
|
|
||||||
$(PERL) $(SRCDIR)\util\copy.pl $(ENGINES) "$(DESTDIR)$(ENGINESDIR)"
|
|
||||||
|
|
||||||
uninstall_engines:
|
|
||||||
|
|
||||||
install_runtime:
|
|
||||||
@if "$(INSTALLTOP)"=="" ( echo INSTALLTOP should not be empty & exit 1 )
|
|
||||||
@echo *** Installing runtime files
|
|
||||||
@$(PERL) $(SRCDIR)\util\mkdir-p.pl "$(DESTDIR)$(INSTALLTOP)\bin"
|
|
||||||
@if not "$(SHLIBS)"=="" \
|
|
||||||
$(PERL) $(SRCDIR)\util\copy.pl $(SHLIBS) "$(DESTDIR)$(INSTALLTOP)\bin"
|
|
||||||
@$(PERL) $(SRCDIR)\util\copy.pl $(PROGRAMS) "$(DESTDIR)$(INSTALLTOP)\bin"
|
|
||||||
|
|
||||||
uninstall_runtime:
|
|
||||||
|
|
||||||
# Building targets ###################################################
|
|
||||||
|
|
||||||
configdata.pm: {- $config{build_file_template} -} $(SRCDIR)\Configure
|
|
||||||
@echo "Detected changed: $?"
|
|
||||||
@echo "Reconfiguring..."
|
|
||||||
$(PERL) $(SRCDIR)\Configure reconf
|
|
||||||
@echo "**************************************************"
|
|
||||||
@echo "*** ***"
|
|
||||||
@echo "*** Please run the same make command again ***"
|
|
||||||
@echo "*** ***"
|
|
||||||
@echo "**************************************************"
|
|
||||||
@exit 1
|
|
||||||
|
|
||||||
{-
|
|
||||||
use File::Basename;
|
|
||||||
use File::Spec::Functions qw/:DEFAULT abs2rel rel2abs/;
|
|
||||||
|
|
||||||
# Helper function to figure out dependencies on libraries
|
|
||||||
# It takes a list of library names and outputs a list of dependencies
|
|
||||||
sub compute_lib_depends {
|
|
||||||
if ($disabled{shared}) {
|
|
||||||
return map { $_.$libext } @_;
|
|
||||||
}
|
|
||||||
return map { shlib_import($_) } @_;
|
|
||||||
}
|
|
||||||
|
|
||||||
sub generatesrc {
|
|
||||||
my %args = @_;
|
|
||||||
(my $target = $args{src}) =~ s/\.[sS]$/.asm/;
|
|
||||||
my $generator = join(" ", @{$args{generator}});
|
|
||||||
my $incs = join("", map { " /I ".$_ } @{$args{incs}});
|
|
||||||
my $deps = join(" ", @{$args{deps}});
|
|
||||||
|
|
||||||
if ($target !~ /\.asm$/) {
|
|
||||||
return <<"EOF";
|
|
||||||
$target: $args{generator}->[0] $deps
|
|
||||||
\$(PERL) $generator > \$@
|
|
||||||
EOF
|
|
||||||
} else {
|
|
||||||
if ($args{generator}->[0] =~ /\.pl$/) {
|
|
||||||
$generator = '$(PERL) '.$generator;
|
|
||||||
} elsif ($args{generator}->[0] =~ /\.S$/) {
|
|
||||||
$generator = undef;
|
|
||||||
} else {
|
|
||||||
die "Generator type for $src unknown: $generator\n";
|
|
||||||
}
|
|
||||||
|
|
||||||
if (defined($generator)) {
|
|
||||||
# If the target is named foo.S in build.info, we want to
|
|
||||||
# end up generating foo.s in two steps.
|
|
||||||
if ($args{src} =~ /\.S$/) {
|
|
||||||
return <<"EOF";
|
|
||||||
$target: $args{generator}->[0] $deps
|
|
||||||
set ASM=\$(AS)
|
|
||||||
set CC=\$(CC)
|
|
||||||
$generator \$@.S
|
|
||||||
\$(CC) \$(CFLAGS) $incs /EP /C \$@.S > \$@.i && move /Y \$@.i \$@
|
|
||||||
del /Q \$@.S
|
|
||||||
EOF
|
|
||||||
}
|
|
||||||
# Otherwise....
|
|
||||||
return <<"EOF";
|
|
||||||
$target: $args{generator}->[0] $deps
|
|
||||||
set ASM=\$(AS)
|
|
||||||
set CC=\$(CC)
|
|
||||||
$generator \$@
|
|
||||||
EOF
|
|
||||||
}
|
|
||||||
return <<"EOF";
|
|
||||||
$target: $args{generator}->[0] $deps
|
|
||||||
\$(CC) \$(CFLAGS) $incs /EP /C $args{generator}->[0] > \$@.i && move /Y \$@.i \$@
|
|
||||||
EOF
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
sub src2obj {
|
|
||||||
my %args = @_;
|
|
||||||
my $obj = $args{obj};
|
|
||||||
my @srcs = map { (my $x = $_) =~ s/\.s$/.asm/; $x
|
|
||||||
} ( @{$args{srcs}} );
|
|
||||||
my $srcs = join(" ", @srcs);
|
|
||||||
my $deps = join(" ", @srcs, @{$args{deps}});
|
|
||||||
my $incs = join("", map { " /I ".$_ } @{$args{incs}});
|
|
||||||
unless ($disabled{zlib}) {
|
|
||||||
if ($withargs{zlib_include}) {
|
|
||||||
$incs .= " /I ".$withargs{zlib_include};
|
|
||||||
}
|
|
||||||
}
|
|
||||||
my $ecflags = { lib => '$(LIB_CFLAGS)',
|
|
||||||
dso => '$(DSO_CFLAGS)',
|
|
||||||
bin => '$(BIN_CFLAGS)' } -> {$args{intent}};
|
|
||||||
my $makedepprog = $config{makedepprog};
|
|
||||||
if ($srcs[0] =~ /\.asm$/) {
|
|
||||||
return <<"EOF";
|
|
||||||
$obj$objext: $deps
|
|
||||||
\$(AS) \$(ASFLAGS) \$(ASOUTFLAG)\$\@ $srcs
|
|
||||||
EOF
|
|
||||||
}
|
|
||||||
return <<"EOF" if (!$disabled{makedepend});
|
|
||||||
$obj$depext: $deps
|
|
||||||
\$(CC) \$(CFLAGS) $ecflags$inc /Zs /showIncludes $srcs 2>&1 | \\
|
|
||||||
\$(PERL) -n << > $obj$depext
|
|
||||||
chomp;
|
|
||||||
s/^Note: including file: *//;
|
|
||||||
\$\$collect{\$\$_} = 1;
|
|
||||||
END { print '$obj$objext: ',join(" ", sort keys \%collect),"\\n" }
|
|
||||||
<<
|
|
||||||
$obj$objext: $obj$depext
|
|
||||||
\$(CC) \$(CFLAGS) $ecflags$incs -c \$(COUTFLAG)\$\@ @<<
|
|
||||||
$srcs
|
|
||||||
<<
|
|
||||||
EOF
|
|
||||||
return <<"EOF" if ($disabled{makedepend});
|
|
||||||
$obj$objext: $deps
|
|
||||||
\$(CC) \$(CFLAGS) $ecflags$incs -c \$(COUTFLAG)\$\@ $srcs
|
|
||||||
EOF
|
|
||||||
}
|
|
||||||
|
|
||||||
# On Unix, we build shlibs from static libs, so we're ignoring the
|
|
||||||
# object file array. We *know* this routine is only called when we've
|
|
||||||
# configure 'shared'.
|
|
||||||
sub libobj2shlib {
|
|
||||||
my %args = @_;
|
|
||||||
my $lib = $args{lib};
|
|
||||||
my $shlib = $args{shlib};
|
|
||||||
(my $mkdef_key = $lib) =~ s/^lib//i;
|
|
||||||
my $objs = join("\n", map { $_.$objext } @{$args{objs}});
|
|
||||||
my $linklibs = join("",
|
|
||||||
map { "\n$_" } compute_lib_depends(@{$args{deps}}));
|
|
||||||
my $deps = join(" ",
|
|
||||||
(map { $_.$objext } @{$args{objs}}),
|
|
||||||
compute_lib_depends(@{$args{deps}}));
|
|
||||||
my $ordinalsfile = defined($args{ordinals}) ? $args{ordinals}->[1] : "";
|
|
||||||
my $mkdef_pl = abs2rel(rel2abs(catfile($config{sourcedir},
|
|
||||||
"util", "mkdef.pl")),
|
|
||||||
rel2abs($config{builddir}));
|
|
||||||
my $mkrc_pl = abs2rel(rel2abs(catfile($config{sourcedir},
|
|
||||||
"util", "mkrc.pl")),
|
|
||||||
rel2abs($config{builddir}));
|
|
||||||
my $target = shlib_import($lib);
|
|
||||||
return <<"EOF"
|
|
||||||
$target: $deps $ordinalsfile $mkdef_pl
|
|
||||||
\$(PERL) $mkdef_pl "$mkdef_key" 32 > $shlib.def
|
|
||||||
\$(PERL) -i.tmp -pe "s|^LIBRARY\\s+${mkdef_key}32|LIBRARY $shlib|;" $shlib.def
|
|
||||||
DEL $shlib.def.tmp
|
|
||||||
\$(PERL) $mkrc_pl $shlib$shlibext > $shlib.rc
|
|
||||||
\$(RC) \$(RCOUTFLAG)$shlib.res $shlib.rc
|
|
||||||
\$(LD) \$(LDFLAGS) \$(LIB_LDFLAGS) \\
|
|
||||||
/implib:\$@ \$(LDOUTFLAG)$shlib$shlibext /def:$shlib.def @<< || (DEL /Q \$(\@B).* $shlib.* && EXIT 1)
|
|
||||||
$objs $shlib.res$linklibs \$(EX_LIBS)
|
|
||||||
<<
|
|
||||||
DEL /F apps\\$shlib$shlibext
|
|
||||||
DEL /F test\\$shlib$shlibext
|
|
||||||
COPY $shlib$shlibext apps
|
|
||||||
COPY $shlib$shlibext test
|
|
||||||
EOF
|
|
||||||
}
|
|
||||||
sub obj2dso {
|
|
||||||
my %args = @_;
|
|
||||||
my $dso = $args{lib};
|
|
||||||
my $dso_n = basename($dso);
|
|
||||||
my $objs = join("\n", map { $_.$objext } @{$args{objs}});
|
|
||||||
my $linklibs = join("",
|
|
||||||
map { "\n$_" } compute_lib_depends(@{$args{deps}}));
|
|
||||||
my $deps = join(" ",
|
|
||||||
(map { $_.$objext } @{$args{objs}}),
|
|
||||||
compute_lib_depends(@{$args{deps}}));
|
|
||||||
return <<"EOF";
|
|
||||||
$dso$dsoext: $deps
|
|
||||||
\$(LD) \$(LDFLAGS) \$(DSO_LDFLAGS) \$(LDOUTFLAG)$dso$dsoext /def:<< @<<
|
|
||||||
LIBRARY $dso_n
|
|
||||||
EXPORTS
|
|
||||||
bind_engine @1
|
|
||||||
v_check @2
|
|
||||||
<<
|
|
||||||
$objs$linklibs \$(EX_LIBS)
|
|
||||||
<<
|
|
||||||
EOF
|
|
||||||
}
|
|
||||||
sub obj2lib {
|
|
||||||
# Because static libs and import libs are both named the same in native
|
|
||||||
# Windows, we can't have both. We skip the static lib in that case,
|
|
||||||
# as the shared libs are what we use anyway.
|
|
||||||
return "" unless $disabled{"shared"};
|
|
||||||
|
|
||||||
my %args = @_;
|
|
||||||
my $lib = $args{lib};
|
|
||||||
my $objs = join("\n", map { $_.$objext } @{$args{objs}});
|
|
||||||
my $deps = join(" ", map { $_.$objext } @{$args{objs}});
|
|
||||||
return <<"EOF";
|
|
||||||
$lib$libext: $deps
|
|
||||||
\$(AR) \$(ARFLAGS) \$(AROUTFLAG)$lib$libext @<<
|
|
||||||
\$\?
|
|
||||||
<<
|
|
||||||
EOF
|
|
||||||
}
|
|
||||||
sub obj2bin {
|
|
||||||
my %args = @_;
|
|
||||||
my $bin = $args{bin};
|
|
||||||
my $objs = join("\n", map { $_.$objext } @{$args{objs}});
|
|
||||||
my $linklibs = join("",
|
|
||||||
map { "\n$_" } compute_lib_depends(@{$args{deps}}));
|
|
||||||
my $deps = join(" ",
|
|
||||||
(map { $_.$objext } @{$args{objs}}),
|
|
||||||
compute_lib_depends(@{$args{deps}}));
|
|
||||||
return <<"EOF";
|
|
||||||
$bin$exeext: $deps
|
|
||||||
\$(LD) \$(LDFLAGS) \$(BIN_LDFLAGS) \$(LDOUTFLAG)$bin$exeext @<<
|
|
||||||
$objs setargv.obj$linklibs \$(EX_LIBS)
|
|
||||||
<<
|
|
||||||
EOF
|
|
||||||
}
|
|
||||||
sub in2script {
|
|
||||||
my %args = @_;
|
|
||||||
my $script = $args{script};
|
|
||||||
my $sources = join(" ", @{$args{sources}});
|
|
||||||
my $dofile = abs2rel(rel2abs(catfile($config{sourcedir},
|
|
||||||
"util", "dofile.pl")),
|
|
||||||
rel2abs($config{builddir}));
|
|
||||||
return <<"EOF";
|
|
||||||
$script: $sources
|
|
||||||
\$(PERL) "-I\$(BLDDIR)" -Mconfigdata "$dofile" \\
|
|
||||||
"-o$target{build_file}" $sources > "$script"
|
|
||||||
EOF
|
|
||||||
}
|
|
||||||
"" # Important! This becomes part of the template result.
|
|
||||||
-}
|
|
||||||
630
FAQ
630
FAQ
@@ -1,2 +1,628 @@
|
|||||||
The FAQ is now maintained on the web:
|
OpenSSL - Frequently Asked Questions
|
||||||
https://www.openssl.org/docs/faq.html
|
--------------------------------------
|
||||||
|
|
||||||
|
[MISC] Miscellaneous questions
|
||||||
|
|
||||||
|
* Which is the current version of OpenSSL?
|
||||||
|
* Where is the documentation?
|
||||||
|
* How can I contact the OpenSSL developers?
|
||||||
|
* Where can I get a compiled version of OpenSSL?
|
||||||
|
* Why aren't tools like 'autoconf' and 'libtool' used?
|
||||||
|
* What is an 'engine' version?
|
||||||
|
|
||||||
|
[LEGAL] Legal questions
|
||||||
|
|
||||||
|
* Do I need patent licenses to use OpenSSL?
|
||||||
|
* Can I use OpenSSL with GPL software?
|
||||||
|
|
||||||
|
[USER] Questions on using the OpenSSL applications
|
||||||
|
|
||||||
|
* Why do I get a "PRNG not seeded" error message?
|
||||||
|
* Why do I get an "unable to write 'random state'" error message?
|
||||||
|
* How do I create certificates or certificate requests?
|
||||||
|
* Why can't I create certificate requests?
|
||||||
|
* Why does <SSL program> fail with a certificate verify error?
|
||||||
|
* Why can I only use weak ciphers when I connect to a server using OpenSSL?
|
||||||
|
* How can I create DSA certificates?
|
||||||
|
* Why can't I make an SSL connection using a DSA certificate?
|
||||||
|
* How can I remove the passphrase on a private key?
|
||||||
|
* Why can't I use OpenSSL certificates with SSL client authentication?
|
||||||
|
* Why does my browser give a warning about a mismatched hostname?
|
||||||
|
* How do I install a CA certificate into a browser?
|
||||||
|
* Why is OpenSSL x509 DN output not conformant to RFC2253?
|
||||||
|
|
||||||
|
[BUILD] Questions about building and testing OpenSSL
|
||||||
|
|
||||||
|
* Why does the linker complain about undefined symbols?
|
||||||
|
* Why does the OpenSSL test fail with "bc: command not found"?
|
||||||
|
* Why does the OpenSSL test fail with "bc: 1 no implemented"?
|
||||||
|
* Why does the OpenSSL compilation fail on Alpha Tru64 Unix?
|
||||||
|
* Why does the OpenSSL compilation fail with "ar: command not found"?
|
||||||
|
* Why does the OpenSSL compilation fail on Win32 with VC++?
|
||||||
|
|
||||||
|
[PROG] Questions about programming with OpenSSL
|
||||||
|
|
||||||
|
* Is OpenSSL thread-safe?
|
||||||
|
* I've compiled a program under Windows and it crashes: why?
|
||||||
|
* How do I read or write a DER encoded buffer using the ASN1 functions?
|
||||||
|
* I've tried using <M_some_evil_pkcs12_macro> and I get errors why?
|
||||||
|
* I've called <some function> and it fails, why?
|
||||||
|
* I just get a load of numbers for the error output, what do they mean?
|
||||||
|
* Why do I get errors about unknown algorithms?
|
||||||
|
* Why can't the OpenSSH configure script detect OpenSSL?
|
||||||
|
* Can I use OpenSSL's SSL library with non-blocking I/O?
|
||||||
|
* Why doesn't my server application receive a client certificate?
|
||||||
|
|
||||||
|
===============================================================================
|
||||||
|
|
||||||
|
[MISC] ========================================================================
|
||||||
|
|
||||||
|
* Which is the current version of OpenSSL?
|
||||||
|
|
||||||
|
The current version is available from <URL: http://www.openssl.org>.
|
||||||
|
OpenSSL 0.9.6d was released on May 9, 2002.
|
||||||
|
|
||||||
|
In addition to the current stable release, you can also access daily
|
||||||
|
snapshots of the OpenSSL development version at <URL:
|
||||||
|
ftp://ftp.openssl.org/snapshot/>, or get it by anonymous CVS access.
|
||||||
|
|
||||||
|
|
||||||
|
* Where is the documentation?
|
||||||
|
|
||||||
|
OpenSSL is a library that provides cryptographic functionality to
|
||||||
|
applications such as secure web servers. Be sure to read the
|
||||||
|
documentation of the application you want to use. The INSTALL file
|
||||||
|
explains how to install this library.
|
||||||
|
|
||||||
|
OpenSSL includes a command line utility that can be used to perform a
|
||||||
|
variety of cryptographic functions. It is described in the openssl(1)
|
||||||
|
manpage. Documentation for developers is currently being written. A
|
||||||
|
few manual pages already are available; overviews over libcrypto and
|
||||||
|
libssl are given in the crypto(3) and ssl(3) manpages.
|
||||||
|
|
||||||
|
The OpenSSL manpages are installed in /usr/local/ssl/man/ (or a
|
||||||
|
different directory if you specified one as described in INSTALL).
|
||||||
|
In addition, you can read the most current versions at
|
||||||
|
<URL: http://www.openssl.org/docs/>.
|
||||||
|
|
||||||
|
For information on parts of libcrypto that are not yet documented, you
|
||||||
|
might want to read Ariel Glenn's documentation on SSLeay 0.9, OpenSSL's
|
||||||
|
predecessor, at <URL: http://www.columbia.edu/~ariel/ssleay/>. Much
|
||||||
|
of this still applies to OpenSSL.
|
||||||
|
|
||||||
|
There is some documentation about certificate extensions and PKCS#12
|
||||||
|
in doc/openssl.txt
|
||||||
|
|
||||||
|
The original SSLeay documentation is included in OpenSSL as
|
||||||
|
doc/ssleay.txt. It may be useful when none of the other resources
|
||||||
|
help, but please note that it reflects the obsolete version SSLeay
|
||||||
|
0.6.6.
|
||||||
|
|
||||||
|
|
||||||
|
* How can I contact the OpenSSL developers?
|
||||||
|
|
||||||
|
The README file describes how to submit bug reports and patches to
|
||||||
|
OpenSSL. Information on the OpenSSL mailing lists is available from
|
||||||
|
<URL: http://www.openssl.org>.
|
||||||
|
|
||||||
|
|
||||||
|
* Where can I get a compiled version of OpenSSL?
|
||||||
|
|
||||||
|
Some applications that use OpenSSL are distributed in binary form.
|
||||||
|
When using such an application, you don't need to install OpenSSL
|
||||||
|
yourself; the application will include the required parts (e.g. DLLs).
|
||||||
|
|
||||||
|
If you want to install OpenSSL on a Windows system and you don't have
|
||||||
|
a C compiler, read the "Mingw32" section of INSTALL.W32 for information
|
||||||
|
on how to obtain and install the free GNU C compiler.
|
||||||
|
|
||||||
|
A number of Linux and *BSD distributions include OpenSSL.
|
||||||
|
|
||||||
|
|
||||||
|
* Why aren't tools like 'autoconf' and 'libtool' used?
|
||||||
|
|
||||||
|
autoconf will probably be used in future OpenSSL versions. If it was
|
||||||
|
less Unix-centric, it might have been used much earlier.
|
||||||
|
|
||||||
|
* What is an 'engine' version?
|
||||||
|
|
||||||
|
With version 0.9.6 OpenSSL was extended to interface to external crypto
|
||||||
|
hardware. This was realized in a special release '0.9.6-engine'. With
|
||||||
|
version 0.9.7 (not yet released) the changes were merged into the main
|
||||||
|
development line, so that the special release is no longer necessary.
|
||||||
|
|
||||||
|
[LEGAL] =======================================================================
|
||||||
|
|
||||||
|
* Do I need patent licenses to use OpenSSL?
|
||||||
|
|
||||||
|
The patents section of the README file lists patents that may apply to
|
||||||
|
you if you want to use OpenSSL. For information on intellectual
|
||||||
|
property rights, please consult a lawyer. The OpenSSL team does not
|
||||||
|
offer legal advice.
|
||||||
|
|
||||||
|
You can configure OpenSSL so as not to use RC5 and IDEA by using
|
||||||
|
./config no-rc5 no-idea
|
||||||
|
|
||||||
|
|
||||||
|
* Can I use OpenSSL with GPL software?
|
||||||
|
|
||||||
|
On many systems including the major Linux and BSD distributions, yes (the
|
||||||
|
GPL does not place restrictions on using libraries that are part of the
|
||||||
|
normal operating system distribution).
|
||||||
|
|
||||||
|
On other systems, the situation is less clear. Some GPL software copyright
|
||||||
|
holders claim that you infringe on their rights if you use OpenSSL with
|
||||||
|
their software on operating systems that don't normally include OpenSSL.
|
||||||
|
|
||||||
|
If you develop open source software that uses OpenSSL, you may find it
|
||||||
|
useful to choose an other license than the GPL, or state explicitly that
|
||||||
|
"This program is released under the GPL with the additional exemption that
|
||||||
|
compiling, linking, and/or using OpenSSL is allowed." If you are using
|
||||||
|
GPL software developed by others, you may want to ask the copyright holder
|
||||||
|
for permission to use their software with OpenSSL.
|
||||||
|
|
||||||
|
|
||||||
|
[USER] ========================================================================
|
||||||
|
|
||||||
|
* Why do I get a "PRNG not seeded" error message?
|
||||||
|
|
||||||
|
Cryptographic software needs a source of unpredictable data to work
|
||||||
|
correctly. Many open source operating systems provide a "randomness
|
||||||
|
device" that serves this purpose. On other systems, applications have
|
||||||
|
to call the RAND_add() or RAND_seed() function with appropriate data
|
||||||
|
before generating keys or performing public key encryption.
|
||||||
|
(These functions initialize the pseudo-random number generator, PRNG.)
|
||||||
|
|
||||||
|
Some broken applications do not do this. As of version 0.9.5, the
|
||||||
|
OpenSSL functions that need randomness report an error if the random
|
||||||
|
number generator has not been seeded with at least 128 bits of
|
||||||
|
randomness. If this error occurs, please contact the author of the
|
||||||
|
application you are using. It is likely that it never worked
|
||||||
|
correctly. OpenSSL 0.9.5 and later make the error visible by refusing
|
||||||
|
to perform potentially insecure encryption.
|
||||||
|
|
||||||
|
On systems without /dev/urandom and /dev/random, it is a good idea to
|
||||||
|
use the Entropy Gathering Demon (EGD); see the RAND_egd() manpage for
|
||||||
|
details. Starting with version 0.9.7, OpenSSL will automatically look
|
||||||
|
for an EGD socket at /var/run/egd-pool, /dev/egd-pool, /etc/egd-pool and
|
||||||
|
/etc/entropy.
|
||||||
|
|
||||||
|
Most components of the openssl command line utility automatically try
|
||||||
|
to seed the random number generator from a file. The name of the
|
||||||
|
default seeding file is determined as follows: If environment variable
|
||||||
|
RANDFILE is set, then it names the seeding file. Otherwise if
|
||||||
|
environment variable HOME is set, then the seeding file is $HOME/.rnd.
|
||||||
|
If neither RANDFILE nor HOME is set, versions up to OpenSSL 0.9.6 will
|
||||||
|
use file .rnd in the current directory while OpenSSL 0.9.6a uses no
|
||||||
|
default seeding file at all. OpenSSL 0.9.6b and later will behave
|
||||||
|
similarly to 0.9.6a, but will use a default of "C:\" for HOME on
|
||||||
|
Windows systems if the environment variable has not been set.
|
||||||
|
|
||||||
|
If the default seeding file does not exist or is too short, the "PRNG
|
||||||
|
not seeded" error message may occur.
|
||||||
|
|
||||||
|
The openssl command line utility will write back a new state to the
|
||||||
|
default seeding file (and create this file if necessary) unless
|
||||||
|
there was no sufficient seeding.
|
||||||
|
|
||||||
|
Pointing $RANDFILE to an Entropy Gathering Daemon socket does not work.
|
||||||
|
Use the "-rand" option of the OpenSSL command line tools instead.
|
||||||
|
The $RANDFILE environment variable and $HOME/.rnd are only used by the
|
||||||
|
OpenSSL command line tools. Applications using the OpenSSL library
|
||||||
|
provide their own configuration options to specify the entropy source,
|
||||||
|
please check out the documentation coming the with application.
|
||||||
|
|
||||||
|
For Solaris 2.6, Tim Nibbe <tnibbe@sprint.net> and others have suggested
|
||||||
|
installing the SUNski package from Sun patch 105710-01 (Sparc) which
|
||||||
|
adds a /dev/random device and make sure it gets used, usually through
|
||||||
|
$RANDFILE. There are probably similar patches for the other Solaris
|
||||||
|
versions. However, be warned that /dev/random is usually a blocking
|
||||||
|
device, which may have some effects on OpenSSL.
|
||||||
|
|
||||||
|
|
||||||
|
* Why do I get an "unable to write 'random state'" error message?
|
||||||
|
|
||||||
|
|
||||||
|
Sometimes the openssl command line utility does not abort with
|
||||||
|
a "PRNG not seeded" error message, but complains that it is
|
||||||
|
"unable to write 'random state'". This message refers to the
|
||||||
|
default seeding file (see previous answer). A possible reason
|
||||||
|
is that no default filename is known because neither RANDFILE
|
||||||
|
nor HOME is set. (Versions up to 0.9.6 used file ".rnd" in the
|
||||||
|
current directory in this case, but this has changed with 0.9.6a.)
|
||||||
|
|
||||||
|
|
||||||
|
* How do I create certificates or certificate requests?
|
||||||
|
|
||||||
|
Check out the CA.pl(1) manual page. This provides a simple wrapper round
|
||||||
|
the 'req', 'verify', 'ca' and 'pkcs12' utilities. For finer control check
|
||||||
|
out the manual pages for the individual utilities and the certificate
|
||||||
|
extensions documentation (currently in doc/openssl.txt).
|
||||||
|
|
||||||
|
|
||||||
|
* Why can't I create certificate requests?
|
||||||
|
|
||||||
|
You typically get the error:
|
||||||
|
|
||||||
|
unable to find 'distinguished_name' in config
|
||||||
|
problems making Certificate Request
|
||||||
|
|
||||||
|
This is because it can't find the configuration file. Check out the
|
||||||
|
DIAGNOSTICS section of req(1) for more information.
|
||||||
|
|
||||||
|
|
||||||
|
* Why does <SSL program> fail with a certificate verify error?
|
||||||
|
|
||||||
|
This problem is usually indicated by log messages saying something like
|
||||||
|
"unable to get local issuer certificate" or "self signed certificate".
|
||||||
|
When a certificate is verified its root CA must be "trusted" by OpenSSL
|
||||||
|
this typically means that the CA certificate must be placed in a directory
|
||||||
|
or file and the relevant program configured to read it. The OpenSSL program
|
||||||
|
'verify' behaves in a similar way and issues similar error messages: check
|
||||||
|
the verify(1) program manual page for more information.
|
||||||
|
|
||||||
|
|
||||||
|
* Why can I only use weak ciphers when I connect to a server using OpenSSL?
|
||||||
|
|
||||||
|
This is almost certainly because you are using an old "export grade" browser
|
||||||
|
which only supports weak encryption. Upgrade your browser to support 128 bit
|
||||||
|
ciphers.
|
||||||
|
|
||||||
|
|
||||||
|
* How can I create DSA certificates?
|
||||||
|
|
||||||
|
Check the CA.pl(1) manual page for a DSA certificate example.
|
||||||
|
|
||||||
|
|
||||||
|
* Why can't I make an SSL connection to a server using a DSA certificate?
|
||||||
|
|
||||||
|
Typically you'll see a message saying there are no shared ciphers when
|
||||||
|
the same setup works fine with an RSA certificate. There are two possible
|
||||||
|
causes. The client may not support connections to DSA servers most web
|
||||||
|
browsers (including Netscape and MSIE) only support connections to servers
|
||||||
|
supporting RSA cipher suites. The other cause is that a set of DH parameters
|
||||||
|
has not been supplied to the server. DH parameters can be created with the
|
||||||
|
dhparam(1) command and loaded using the SSL_CTX_set_tmp_dh() for example:
|
||||||
|
check the source to s_server in apps/s_server.c for an example.
|
||||||
|
|
||||||
|
|
||||||
|
* How can I remove the passphrase on a private key?
|
||||||
|
|
||||||
|
Firstly you should be really *really* sure you want to do this. Leaving
|
||||||
|
a private key unencrypted is a major security risk. If you decide that
|
||||||
|
you do have to do this check the EXAMPLES sections of the rsa(1) and
|
||||||
|
dsa(1) manual pages.
|
||||||
|
|
||||||
|
|
||||||
|
* Why can't I use OpenSSL certificates with SSL client authentication?
|
||||||
|
|
||||||
|
What will typically happen is that when a server requests authentication
|
||||||
|
it will either not include your certificate or tell you that you have
|
||||||
|
no client certificates (Netscape) or present you with an empty list box
|
||||||
|
(MSIE). The reason for this is that when a server requests a client
|
||||||
|
certificate it includes a list of CAs names which it will accept. Browsers
|
||||||
|
will only let you select certificates from the list on the grounds that
|
||||||
|
there is little point presenting a certificate which the server will
|
||||||
|
reject.
|
||||||
|
|
||||||
|
The solution is to add the relevant CA certificate to your servers "trusted
|
||||||
|
CA list". How you do this depends on the server software in uses. You can
|
||||||
|
print out the servers list of acceptable CAs using the OpenSSL s_client tool:
|
||||||
|
|
||||||
|
openssl s_client -connect www.some.host:443 -prexit
|
||||||
|
|
||||||
|
If your server only requests certificates on certain URLs then you may need
|
||||||
|
to manually issue an HTTP GET command to get the list when s_client connects:
|
||||||
|
|
||||||
|
GET /some/page/needing/a/certificate.html
|
||||||
|
|
||||||
|
If your CA does not appear in the list then this confirms the problem.
|
||||||
|
|
||||||
|
|
||||||
|
* Why does my browser give a warning about a mismatched hostname?
|
||||||
|
|
||||||
|
Browsers expect the server's hostname to match the value in the commonName
|
||||||
|
(CN) field of the certificate. If it does not then you get a warning.
|
||||||
|
|
||||||
|
|
||||||
|
* How do I install a CA certificate into a browser?
|
||||||
|
|
||||||
|
The usual way is to send the DER encoded certificate to the browser as
|
||||||
|
MIME type application/x-x509-ca-cert, for example by clicking on an appropriate
|
||||||
|
link. On MSIE certain extensions such as .der or .cacert may also work, or you
|
||||||
|
can import the certificate using the certificate import wizard.
|
||||||
|
|
||||||
|
You can convert a certificate to DER form using the command:
|
||||||
|
|
||||||
|
openssl x509 -in ca.pem -outform DER -out ca.der
|
||||||
|
|
||||||
|
Occasionally someone suggests using a command such as:
|
||||||
|
|
||||||
|
openssl pkcs12 -export -out cacert.p12 -in cacert.pem -inkey cakey.pem
|
||||||
|
|
||||||
|
DO NOT DO THIS! This command will give away your CAs private key and
|
||||||
|
reduces its security to zero: allowing anyone to forge certificates in
|
||||||
|
whatever name they choose.
|
||||||
|
|
||||||
|
* Why is OpenSSL x509 DN output not conformant to RFC2253?
|
||||||
|
|
||||||
|
The ways to print out the oneline format of the DN (Distinguished Name) have
|
||||||
|
been extended in version 0.9.7 of OpenSSL. Using the new X509_NAME_print_ex()
|
||||||
|
interface, the "-nameopt" option could be introduded. See the manual
|
||||||
|
page of the "openssl x509" commandline tool for details. The old behaviour
|
||||||
|
has however been left as default for the sake of compatibility.
|
||||||
|
|
||||||
|
[BUILD] =======================================================================
|
||||||
|
|
||||||
|
* Why does the linker complain about undefined symbols?
|
||||||
|
|
||||||
|
Maybe the compilation was interrupted, and make doesn't notice that
|
||||||
|
something is missing. Run "make clean; make".
|
||||||
|
|
||||||
|
If you used ./Configure instead of ./config, make sure that you
|
||||||
|
selected the right target. File formats may differ slightly between
|
||||||
|
OS versions (for example sparcv8/sparcv9, or a.out/elf).
|
||||||
|
|
||||||
|
In case you get errors about the following symbols, use the config
|
||||||
|
option "no-asm", as described in INSTALL:
|
||||||
|
|
||||||
|
BF_cbc_encrypt, BF_decrypt, BF_encrypt, CAST_cbc_encrypt,
|
||||||
|
CAST_decrypt, CAST_encrypt, RC4, RC5_32_cbc_encrypt, RC5_32_decrypt,
|
||||||
|
RC5_32_encrypt, bn_add_words, bn_div_words, bn_mul_add_words,
|
||||||
|
bn_mul_comba4, bn_mul_comba8, bn_mul_words, bn_sqr_comba4,
|
||||||
|
bn_sqr_comba8, bn_sqr_words, bn_sub_words, des_decrypt3,
|
||||||
|
des_ede3_cbc_encrypt, des_encrypt, des_encrypt2, des_encrypt3,
|
||||||
|
des_ncbc_encrypt, md5_block_asm_host_order, sha1_block_asm_data_order
|
||||||
|
|
||||||
|
If none of these helps, you may want to try using the current snapshot.
|
||||||
|
If the problem persists, please submit a bug report.
|
||||||
|
|
||||||
|
|
||||||
|
* Why does the OpenSSL test fail with "bc: command not found"?
|
||||||
|
|
||||||
|
You didn't install "bc", the Unix calculator. If you want to run the
|
||||||
|
tests, get GNU bc from ftp://ftp.gnu.org or from your OS distributor.
|
||||||
|
|
||||||
|
|
||||||
|
* Why does the OpenSSL test fail with "bc: 1 no implemented"?
|
||||||
|
|
||||||
|
On some SCO installations or versions, bc has a bug that gets triggered
|
||||||
|
when you run the test suite (using "make test"). The message returned is
|
||||||
|
"bc: 1 not implemented".
|
||||||
|
|
||||||
|
The best way to deal with this is to find another implementation of bc
|
||||||
|
and compile/install it. GNU bc (see http://www.gnu.org/software/software.html
|
||||||
|
for download instructions) can be safely used, for example.
|
||||||
|
|
||||||
|
|
||||||
|
* Why does the OpenSSL compilation fail on Alpha Tru64 Unix?
|
||||||
|
|
||||||
|
On some Alpha installations running Tru64 Unix and Compaq C, the compilation
|
||||||
|
of crypto/sha/sha_dgst.c fails with the message 'Fatal: Insufficient virtual
|
||||||
|
memory to continue compilation.' As far as the tests have shown, this may be
|
||||||
|
a compiler bug. What happens is that it eats up a lot of resident memory
|
||||||
|
to build something, probably a table. The problem is clearly in the
|
||||||
|
optimization code, because if one eliminates optimization completely (-O0),
|
||||||
|
the compilation goes through (and the compiler consumes about 2MB of resident
|
||||||
|
memory instead of 240MB or whatever one's limit is currently).
|
||||||
|
|
||||||
|
There are three options to solve this problem:
|
||||||
|
|
||||||
|
1. set your current data segment size soft limit higher. Experience shows
|
||||||
|
that about 241000 kbytes seems to be enough on an AlphaServer DS10. You do
|
||||||
|
this with the command 'ulimit -Sd nnnnnn', where 'nnnnnn' is the number of
|
||||||
|
kbytes to set the limit to.
|
||||||
|
|
||||||
|
2. If you have a hard limit that is lower than what you need and you can't
|
||||||
|
get it changed, you can compile all of OpenSSL with -O0 as optimization
|
||||||
|
level. This is however not a very nice thing to do for those who expect to
|
||||||
|
get the best result from OpenSSL. A bit more complicated solution is the
|
||||||
|
following:
|
||||||
|
|
||||||
|
----- snip:start -----
|
||||||
|
make DIRS=crypto SDIRS=sha "`grep '^CFLAG=' Makefile.ssl | \
|
||||||
|
sed -e 's/ -O[0-9] / -O0 /'`"
|
||||||
|
rm `ls crypto/*.o crypto/sha/*.o | grep -v 'sha_dgst\.o'`
|
||||||
|
make
|
||||||
|
----- snip:end -----
|
||||||
|
|
||||||
|
This will only compile sha_dgst.c with -O0, the rest with the optimization
|
||||||
|
level chosen by the configuration process. When the above is done, do the
|
||||||
|
test and installation and you're set.
|
||||||
|
|
||||||
|
|
||||||
|
* Why does the OpenSSL compilation fail with "ar: command not found"?
|
||||||
|
|
||||||
|
Getting this message is quite usual on Solaris 2, because Sun has hidden
|
||||||
|
away 'ar' and other development commands in directories that aren't in
|
||||||
|
$PATH by default. One of those directories is '/usr/ccs/bin'. The
|
||||||
|
quickest way to fix this is to do the following (it assumes you use sh
|
||||||
|
or any sh-compatible shell):
|
||||||
|
|
||||||
|
----- snip:start -----
|
||||||
|
PATH=${PATH}:/usr/ccs/bin; export PATH
|
||||||
|
----- snip:end -----
|
||||||
|
|
||||||
|
and then redo the compilation. What you should really do is make sure
|
||||||
|
'/usr/ccs/bin' is permanently in your $PATH, for example through your
|
||||||
|
'.profile' (again, assuming you use a sh-compatible shell).
|
||||||
|
|
||||||
|
|
||||||
|
* Why does the OpenSSL compilation fail on Win32 with VC++?
|
||||||
|
|
||||||
|
Sometimes, you may get reports from VC++ command line (cl) that it
|
||||||
|
can't find standard include files like stdio.h and other weirdnesses.
|
||||||
|
One possible cause is that the environment isn't correctly set up.
|
||||||
|
To solve that problem, one should run VCVARS32.BAT which is found in
|
||||||
|
the 'bin' subdirectory of the VC++ installation directory (somewhere
|
||||||
|
under 'Program Files'). This needs to be done prior to running NMAKE,
|
||||||
|
and the changes are only valid for the current DOS session.
|
||||||
|
|
||||||
|
|
||||||
|
[PROG] ========================================================================
|
||||||
|
|
||||||
|
* Is OpenSSL thread-safe?
|
||||||
|
|
||||||
|
Yes (with limitations: an SSL connection may not concurrently be used
|
||||||
|
by multiple threads). On Windows and many Unix systems, OpenSSL
|
||||||
|
automatically uses the multi-threaded versions of the standard
|
||||||
|
libraries. If your platform is not one of these, consult the INSTALL
|
||||||
|
file.
|
||||||
|
|
||||||
|
Multi-threaded applications must provide two callback functions to
|
||||||
|
OpenSSL. This is described in the threads(3) manpage.
|
||||||
|
|
||||||
|
|
||||||
|
* I've compiled a program under Windows and it crashes: why?
|
||||||
|
|
||||||
|
This is usually because you've missed the comment in INSTALL.W32.
|
||||||
|
Your application must link against the same version of the Win32
|
||||||
|
C-Runtime against which your openssl libraries were linked. The
|
||||||
|
default version for OpenSSL is /MD - "Multithreaded DLL".
|
||||||
|
|
||||||
|
If you are using Microsoft Visual C++'s IDE (Visual Studio), in
|
||||||
|
many cases, your new project most likely defaulted to "Debug
|
||||||
|
Singlethreaded" - /ML. This is NOT interchangeable with /MD and your
|
||||||
|
program will crash, typically on the first BIO related read or write
|
||||||
|
operation.
|
||||||
|
|
||||||
|
For each of the six possible link stage configurations within Win32,
|
||||||
|
your application must link against the same by which OpenSSL was
|
||||||
|
built. If you are using MS Visual C++ (Studio) this can be changed
|
||||||
|
by:
|
||||||
|
|
||||||
|
1. Select Settings... from the Project Menu.
|
||||||
|
2. Select the C/C++ Tab.
|
||||||
|
3. Select "Code Generation from the "Category" drop down list box
|
||||||
|
4. Select the Appropriate library (see table below) from the "Use
|
||||||
|
run-time library" drop down list box. Perform this step for both
|
||||||
|
your debug and release versions of your application (look at the
|
||||||
|
top left of the settings panel to change between the two)
|
||||||
|
|
||||||
|
Single Threaded /ML - MS VC++ often defaults to
|
||||||
|
this for the release
|
||||||
|
version of a new project.
|
||||||
|
Debug Single Threaded /MLd - MS VC++ often defaults to
|
||||||
|
this for the debug version
|
||||||
|
of a new project.
|
||||||
|
Multithreaded /MT
|
||||||
|
Debug Multithreaded /MTd
|
||||||
|
Multithreaded DLL /MD - OpenSSL defaults to this.
|
||||||
|
Debug Multithreaded DLL /MDd
|
||||||
|
|
||||||
|
Note that debug and release libraries are NOT interchangeable. If you
|
||||||
|
built OpenSSL with /MD your application must use /MD and cannot use /MDd.
|
||||||
|
|
||||||
|
|
||||||
|
* How do I read or write a DER encoded buffer using the ASN1 functions?
|
||||||
|
|
||||||
|
You have two options. You can either use a memory BIO in conjunction
|
||||||
|
with the i2d_XXX_bio() or d2i_XXX_bio() functions or you can use the
|
||||||
|
i2d_XXX(), d2i_XXX() functions directly. Since these are often the
|
||||||
|
cause of grief here are some code fragments using PKCS7 as an example:
|
||||||
|
|
||||||
|
unsigned char *buf, *p;
|
||||||
|
int len;
|
||||||
|
|
||||||
|
len = i2d_PKCS7(p7, NULL);
|
||||||
|
buf = OPENSSL_malloc(len); /* or Malloc, error checking omitted */
|
||||||
|
p = buf;
|
||||||
|
i2d_PKCS7(p7, &p);
|
||||||
|
|
||||||
|
At this point buf contains the len bytes of the DER encoding of
|
||||||
|
p7.
|
||||||
|
|
||||||
|
The opposite assumes we already have len bytes in buf:
|
||||||
|
|
||||||
|
unsigned char *p;
|
||||||
|
p = buf;
|
||||||
|
p7 = d2i_PKCS7(NULL, &p, len);
|
||||||
|
|
||||||
|
At this point p7 contains a valid PKCS7 structure of NULL if an error
|
||||||
|
occurred. If an error occurred ERR_print_errors(bio) should give more
|
||||||
|
information.
|
||||||
|
|
||||||
|
The reason for the temporary variable 'p' is that the ASN1 functions
|
||||||
|
increment the passed pointer so it is ready to read or write the next
|
||||||
|
structure. This is often a cause of problems: without the temporary
|
||||||
|
variable the buffer pointer is changed to point just after the data
|
||||||
|
that has been read or written. This may well be uninitialized data
|
||||||
|
and attempts to free the buffer will have unpredictable results
|
||||||
|
because it no longer points to the same address.
|
||||||
|
|
||||||
|
|
||||||
|
* I've tried using <M_some_evil_pkcs12_macro> and I get errors why?
|
||||||
|
|
||||||
|
This usually happens when you try compiling something using the PKCS#12
|
||||||
|
macros with a C++ compiler. There is hardly ever any need to use the
|
||||||
|
PKCS#12 macros in a program, it is much easier to parse and create
|
||||||
|
PKCS#12 files using the PKCS12_parse() and PKCS12_create() functions
|
||||||
|
documented in doc/openssl.txt and with examples in demos/pkcs12. The
|
||||||
|
'pkcs12' application has to use the macros because it prints out
|
||||||
|
debugging information.
|
||||||
|
|
||||||
|
|
||||||
|
* I've called <some function> and it fails, why?
|
||||||
|
|
||||||
|
Before submitting a report or asking in one of the mailing lists, you
|
||||||
|
should try to determine the cause. In particular, you should call
|
||||||
|
ERR_print_errors() or ERR_print_errors_fp() after the failed call
|
||||||
|
and see if the message helps. Note that the problem may occur earlier
|
||||||
|
than you think -- you should check for errors after every call where
|
||||||
|
it is possible, otherwise the actual problem may be hidden because
|
||||||
|
some OpenSSL functions clear the error state.
|
||||||
|
|
||||||
|
|
||||||
|
* I just get a load of numbers for the error output, what do they mean?
|
||||||
|
|
||||||
|
The actual format is described in the ERR_print_errors() manual page.
|
||||||
|
You should call the function ERR_load_crypto_strings() before hand and
|
||||||
|
the message will be output in text form. If you can't do this (for example
|
||||||
|
it is a pre-compiled binary) you can use the errstr utility on the error
|
||||||
|
code itself (the hex digits after the second colon).
|
||||||
|
|
||||||
|
|
||||||
|
* Why do I get errors about unknown algorithms?
|
||||||
|
|
||||||
|
This can happen under several circumstances such as reading in an
|
||||||
|
encrypted private key or attempting to decrypt a PKCS#12 file. The cause
|
||||||
|
is forgetting to load OpenSSL's table of algorithms with
|
||||||
|
OpenSSL_add_all_algorithms(). See the manual page for more information.
|
||||||
|
|
||||||
|
|
||||||
|
* Why can't the OpenSSH configure script detect OpenSSL?
|
||||||
|
|
||||||
|
Several reasons for problems with the automatic detection exist.
|
||||||
|
OpenSSH requires at least version 0.9.5a of the OpenSSL libraries.
|
||||||
|
Sometimes the distribution has installed an older version in the system
|
||||||
|
locations that is detected instead of a new one installed. The OpenSSL
|
||||||
|
library might have been compiled for another CPU or another mode (32/64 bits).
|
||||||
|
Permissions might be wrong.
|
||||||
|
|
||||||
|
The general answer is to check the config.log file generated when running
|
||||||
|
the OpenSSH configure script. It should contain the detailed information
|
||||||
|
on why the OpenSSL library was not detected or considered incompatible.
|
||||||
|
|
||||||
|
* Can I use OpenSSL's SSL library with non-blocking I/O?
|
||||||
|
|
||||||
|
Yes; make sure to read the SSL_get_error(3) manual page!
|
||||||
|
|
||||||
|
A pitfall to avoid: Don't assume that SSL_read() will just read from
|
||||||
|
the underlying transport or that SSL_write() will just write to it --
|
||||||
|
it is also possible that SSL_write() cannot do any useful work until
|
||||||
|
there is data to read, or that SSL_read() cannot do anything until it
|
||||||
|
is possible to send data. One reason for this is that the peer may
|
||||||
|
request a new TLS/SSL handshake at any time during the protocol,
|
||||||
|
requiring a bi-directional message exchange; both SSL_read() and
|
||||||
|
SSL_write() will try to continue any pending handshake.
|
||||||
|
|
||||||
|
|
||||||
|
* Why doesn't my server application receive a client certificate?
|
||||||
|
|
||||||
|
Due to the TLS protocol definition, a client will only send a certificate,
|
||||||
|
if explicitly asked by the server. Use the SSL_VERIFY_PEER flag of the
|
||||||
|
SSL_CTX_set_verify() function to enable the use of client certificates.
|
||||||
|
|
||||||
|
|
||||||
|
===============================================================================
|
||||||
|
|
||||||
|
|||||||
688
INSTALL
688
INSTALL
@@ -1,361 +1,87 @@
|
|||||||
|
|
||||||
OPENSSL INSTALLATION
|
INSTALLATION ON THE UNIX PLATFORM
|
||||||
--------------------
|
---------------------------------
|
||||||
|
|
||||||
[This document describes installation on the main supported operating
|
[Installation on Windows, OpenVMS and MacOS (before MacOS X) is described
|
||||||
systems, currently the Linux/Unix family, OpenVMS and Windows.
|
in INSTALL.W32, INSTALL.VMS and INSTALL.MacOS.]
|
||||||
Installation on DOS (with djgpp), MacOS (before MacOS X)
|
|
||||||
is described in INSTALL.DJGPP or INSTALL.MacOS, respectively.]
|
|
||||||
|
|
||||||
To install OpenSSL, you will need:
|
To install OpenSSL, you will need:
|
||||||
|
|
||||||
* make
|
* make
|
||||||
* Perl 5 with core modules (please read README.PERL)
|
* Perl 5
|
||||||
* The perl module Text::Template (please read README.PERL)
|
|
||||||
* an ANSI C compiler
|
* an ANSI C compiler
|
||||||
* a development environment in the form of development libraries and C
|
* a development environment in form of development libraries and C
|
||||||
header files
|
header files
|
||||||
* a supported operating system
|
* a supported Unix operating system
|
||||||
|
|
||||||
For additional platform specific requirements and other details,
|
|
||||||
please read one of these:
|
|
||||||
|
|
||||||
* NOTES.VMS (OpenVMS)
|
|
||||||
* NOTES.WIN (any Windows except for Windows CE)
|
|
||||||
|
|
||||||
Quick Start
|
Quick Start
|
||||||
-----------
|
-----------
|
||||||
|
|
||||||
If you want to just get on with it, do:
|
If you want to just get on with it, do:
|
||||||
|
|
||||||
on Unix:
|
$ ./config
|
||||||
|
$ make
|
||||||
$ ./config
|
$ make test
|
||||||
$ make
|
$ make install
|
||||||
$ make test
|
|
||||||
$ make install
|
|
||||||
|
|
||||||
on OpenVMS:
|
|
||||||
|
|
||||||
$ @config
|
|
||||||
$ mms
|
|
||||||
$ mms test
|
|
||||||
$ mms install
|
|
||||||
|
|
||||||
on Windows (only pick one of the targets for configuration):
|
|
||||||
|
|
||||||
$ perl Configure { VC-WIN32 | VC-WIN64A | VC-WIN64I | VC-CE }
|
|
||||||
$ nmake
|
|
||||||
$ nmake test
|
|
||||||
$ nmake install
|
|
||||||
|
|
||||||
[If any of these steps fails, see section Installation in Detail below.]
|
[If any of these steps fails, see section Installation in Detail below.]
|
||||||
|
|
||||||
This will build and install OpenSSL in the default location, which is:
|
This will build and install OpenSSL in the default location, which is (for
|
||||||
|
historical reasons) /usr/local/ssl. If you want to install it anywhere else,
|
||||||
|
run config like this:
|
||||||
|
|
||||||
Unix: normal installation directories under /usr/local
|
$ ./config --prefix=/usr/local --openssldir=/usr/local/openssl
|
||||||
OpenVMS: SYS$COMMON:[OPENSSL-'version'...], where 'version' is the
|
|
||||||
OpenSSL version number with underscores instead of periods.
|
|
||||||
Windows: C:\Program Files\OpenSSL or C:\Program Files (x86)\OpenSSL
|
|
||||||
|
|
||||||
If you want to install it anywhere else, run config like this:
|
|
||||||
|
|
||||||
On Unix:
|
|
||||||
|
|
||||||
$ ./config --prefix=/opt/openssl --openssldir=/usr/local/ssl
|
|
||||||
|
|
||||||
On OpenVMS:
|
|
||||||
|
|
||||||
$ @config --prefix=PROGRAM:[INSTALLS] --openssldir=SYS$MANAGER:[OPENSSL]
|
|
||||||
|
|
||||||
|
|
||||||
Configuration Options
|
Configuration Options
|
||||||
---------------------
|
---------------------
|
||||||
|
|
||||||
There are several options to ./config (or ./Configure) to customize
|
There are several options to ./config (or ./Configure) to customize
|
||||||
the build (note that for Windows, the defaults for --prefix and
|
the build:
|
||||||
--openssldir depend in what configuration is used and what Windows
|
|
||||||
implementation OpenSSL is built on. More notes on this in NOTES.WIN):
|
|
||||||
|
|
||||||
--prefix=DIR
|
--prefix=DIR Install in DIR/bin, DIR/lib, DIR/include/openssl.
|
||||||
The top of the installation directory tree. Defaults are:
|
Configuration files used by OpenSSL will be in DIR/ssl
|
||||||
|
or the directory specified by --openssldir.
|
||||||
|
|
||||||
Unix: /usr/local
|
--openssldir=DIR Directory for OpenSSL files. If no prefix is specified,
|
||||||
Windows: C:\Program Files\OpenSSL
|
the library files and binaries are also installed there.
|
||||||
or C:\Program Files (x86)\OpenSSL
|
|
||||||
OpenVMS: SYS$COMMON:[OPENSSL-'version']
|
|
||||||
|
|
||||||
--openssldir=DIR
|
no-threads Don't try to build with support for multi-threaded
|
||||||
Directory for OpenSSL configuration files, and also the
|
applications.
|
||||||
default certificate and key store. Defaults are:
|
|
||||||
|
|
||||||
Unix: /usr/local/ssl
|
threads Build with support for multi-threaded applications.
|
||||||
Windows: C:\Program Files\Common Files\SSL
|
This will usually require additional system-dependent options!
|
||||||
or C:\Program Files (x86)\Common Files\SSL
|
See "Note on multi-threading" below.
|
||||||
OpenVMS: SYS$COMMON:[OPENSSL-COMMON]
|
|
||||||
|
|
||||||
--api=x.y.z
|
no-zlib Don't try to build with support for zlib compression and
|
||||||
Don't build with support for deprecated APIs below the
|
decompression.
|
||||||
specified version number. For example "--api=1.1.0" will
|
|
||||||
remove support for all APIS that were deprecated in OpenSSL
|
|
||||||
version 1.1.0 or below.
|
|
||||||
|
|
||||||
no-afalgeng
|
zlib Build with support for zlib compression/decompression.
|
||||||
Don't build the AFALG engine. This option will be forced if
|
|
||||||
on a platform that does not support AFALG.
|
|
||||||
|
|
||||||
no-asm
|
zlib-dynamic Like "zlib", but has OpenSSL load the zlib library dynamically
|
||||||
Do not use assembler code. On some platforms a small amount
|
when needed. This is only supported on systems where loading
|
||||||
of assembler code may still be used.
|
of shared libraries is supported. This is the default choice.
|
||||||
|
|
||||||
no-async
|
no-shared Don't try to create shared libraries.
|
||||||
Do not build support for async operations.
|
|
||||||
|
|
||||||
no-autoalginit
|
shared In addition to the usual static libraries, create shared
|
||||||
Don't automatically load all supported ciphers and digests.
|
libraries on platforms where it's supported. See "Note on
|
||||||
Typically OpenSSL will make available all of its supported
|
shared libraries" below.
|
||||||
ciphers and digests. For a statically linked application this
|
|
||||||
may be undesirable if small executable size is an objective.
|
|
||||||
This only affects libcrypto. Ciphers and digests will have to
|
|
||||||
be loaded manually using EVP_add_cipher() and
|
|
||||||
EVP_add_digest() if this option is used. This option will
|
|
||||||
force a non-shared build.
|
|
||||||
|
|
||||||
no-autoerrinit
|
no-asm Do not use assembler code.
|
||||||
Don't automatically load all libcrypto/libssl error strings.
|
|
||||||
Typically OpenSSL will automatically load human readable
|
|
||||||
error strings. For a statically linked application this may
|
|
||||||
be undesirable if small executable size is an objective.
|
|
||||||
|
|
||||||
|
386 Use the 80386 instruction set only (the default x86 code is
|
||||||
|
more efficient, but requires at least a 486).
|
||||||
|
|
||||||
no-capieng
|
no-<cipher> Build without the specified cipher (bf, cast, des, dh, dsa,
|
||||||
Don't build the CAPI engine. This option will be forced if
|
hmac, md2, md5, mdc2, rc2, rc4, rc5, rsa, sha).
|
||||||
on a platform that does not support CAPI.
|
The crypto/<cipher> directory can be removed after running
|
||||||
|
"make depend".
|
||||||
|
|
||||||
no-cms
|
-Dxxx, -lxxx, -Lxxx, -fxxx, -Kxxx These system specific options will
|
||||||
Don't build support for CMS features
|
be passed through to the compiler to allow you to
|
||||||
|
define preprocessor symbols, specify additional libraries,
|
||||||
no-comp
|
library directories or other compiler options.
|
||||||
Don't build support for SSL/TLS compression. If this option
|
|
||||||
is left enabled (the default), then compression will only
|
|
||||||
work if the zlib or zlib-dynamic options are also chosen.
|
|
||||||
|
|
||||||
enable-crypto-mdebug
|
|
||||||
Build support for debugging memory allocated via
|
|
||||||
OPENSSL_malloc() or OPENSSL_zalloc().
|
|
||||||
|
|
||||||
enable-crypto-mdebug-backtrace
|
|
||||||
As for crypto-mdebug, but additionally provide backtrace
|
|
||||||
information for allocated memory.
|
|
||||||
|
|
||||||
no-ct
|
|
||||||
Don't build support for Certificate Transparency.
|
|
||||||
|
|
||||||
no-deprecated
|
|
||||||
Don't build with support for any deprecated APIs. This is the
|
|
||||||
same as using "--api" and supplying the latest version
|
|
||||||
number.
|
|
||||||
|
|
||||||
no-dgram
|
|
||||||
Don't build support for datagram based BIOs. Selecting this
|
|
||||||
option will also force the disabling of DTLS.
|
|
||||||
|
|
||||||
no-dso
|
|
||||||
Don't build support for loading Dynamic Shared Objects.
|
|
||||||
|
|
||||||
no-dynamic-engine
|
|
||||||
Don't build the dynamically loaded engines. This only has an
|
|
||||||
effect in a "shared" build
|
|
||||||
|
|
||||||
no-ec
|
|
||||||
Don't build support for Elliptic Curves.
|
|
||||||
|
|
||||||
no-ec2m
|
|
||||||
Don't build support for binary Elliptic Curves
|
|
||||||
|
|
||||||
enable-ec_nistp_64_gcc_128
|
|
||||||
Enable support for optimised implementations of some commonly
|
|
||||||
used NIST elliptic curves. This is only supported on some
|
|
||||||
platforms.
|
|
||||||
|
|
||||||
enable-egd
|
|
||||||
Build support for gathering entropy from EGD (Entropy
|
|
||||||
Gathering Daemon).
|
|
||||||
|
|
||||||
no-engine
|
|
||||||
Don't build support for loading engines.
|
|
||||||
|
|
||||||
no-err
|
|
||||||
Don't compile in any error strings.
|
|
||||||
|
|
||||||
no-filenames
|
|
||||||
Don't compile in filename and line number information (e.g.
|
|
||||||
for errors and memory allocation).
|
|
||||||
|
|
||||||
no-gost
|
|
||||||
Don't build support for GOST based ciphersuites. Note that
|
|
||||||
if this feature is enabled then GOST ciphersuites are only
|
|
||||||
available if the GOST algorithms are also available through
|
|
||||||
loading an externally supplied engine.
|
|
||||||
|
|
||||||
enable-heartbeats
|
|
||||||
Build support for DTLS heartbeats.
|
|
||||||
|
|
||||||
no-hw-padlock
|
|
||||||
Don't build the padlock engine.
|
|
||||||
|
|
||||||
no-makedepend
|
|
||||||
Don't generate dependencies.
|
|
||||||
|
|
||||||
no-multiblock
|
|
||||||
Don't build support for writing multiple records in one
|
|
||||||
go in libssl (Note: this is a different capability to the
|
|
||||||
pipelining functionality).
|
|
||||||
|
|
||||||
no-nextprotoneg
|
|
||||||
Don't build support for the NPN TLS extension.
|
|
||||||
|
|
||||||
no-ocsp
|
|
||||||
Don't build support for OCSP.
|
|
||||||
|
|
||||||
no-pic
|
|
||||||
Don't build with support for Position Independent Code.
|
|
||||||
|
|
||||||
no-posix-io
|
|
||||||
Don't use POSIX IO capabilities.
|
|
||||||
|
|
||||||
no-psk
|
|
||||||
Don't build support for Pre-Shared Key based ciphersuites.
|
|
||||||
|
|
||||||
no-rdrand
|
|
||||||
Don't use hardware RDRAND capabilities.
|
|
||||||
|
|
||||||
no-rfc3779
|
|
||||||
Don't build support for RFC3779 ("X.509 Extensions for IP
|
|
||||||
Addresses and AS Identifiers")
|
|
||||||
|
|
||||||
no-sct
|
|
||||||
??
|
|
||||||
|
|
||||||
sctp
|
|
||||||
Build support for SCTP
|
|
||||||
|
|
||||||
no-shared
|
|
||||||
Do not create shared libraries, only static ones. See "Note
|
|
||||||
on shared libraries" below.
|
|
||||||
|
|
||||||
no-sock
|
|
||||||
Don't build support for socket BIOs
|
|
||||||
|
|
||||||
no-srp
|
|
||||||
Don't build support for SRP or SRP based ciphersuites.
|
|
||||||
|
|
||||||
no-srtp
|
|
||||||
Don't build SRTP support
|
|
||||||
|
|
||||||
no-sse2
|
|
||||||
Exclude SSE2 code paths. Normally SSE2 extension is
|
|
||||||
detected at run-time, but the decision whether or not the
|
|
||||||
machine code will be executed is taken solely on CPU
|
|
||||||
capability vector. This means that if you happen to run OS
|
|
||||||
kernel which does not support SSE2 extension on Intel P4
|
|
||||||
processor, then your application might be exposed to
|
|
||||||
"illegal instruction" exception. There might be a way
|
|
||||||
to enable support in kernel, e.g. FreeBSD kernel can be
|
|
||||||
compiled with CPU_ENABLE_SSE, and there is a way to
|
|
||||||
disengage SSE2 code pathes upon application start-up,
|
|
||||||
but if you aim for wider "audience" running such kernel,
|
|
||||||
consider no-sse2. Both the 386 and no-asm options imply
|
|
||||||
no-sse2.
|
|
||||||
|
|
||||||
enable-ssl-trace
|
|
||||||
Build with the SSL Trace capabilities (adds the "-trace"
|
|
||||||
option to s_client and s_server).
|
|
||||||
|
|
||||||
no-static-engine
|
|
||||||
Don't build the statically linked engines. This only
|
|
||||||
has an impact when not built "shared".
|
|
||||||
|
|
||||||
no-stdio
|
|
||||||
Don't use any C "stdio" features. Only libcrypto and libssl
|
|
||||||
can be built in this way. Using this option will suppress
|
|
||||||
building the command line applications. Additionally since
|
|
||||||
the OpenSSL tests also use the command line applications the
|
|
||||||
tests will also be skipped.
|
|
||||||
|
|
||||||
no-threads
|
|
||||||
Don't try to build with support for multi-threaded
|
|
||||||
applications.
|
|
||||||
|
|
||||||
threads
|
|
||||||
Build with support for multi-threaded applications. Most
|
|
||||||
platforms will enable this by default. However if on a
|
|
||||||
platform where this is not the case then this will usually
|
|
||||||
require additional system-dependent options! See "Note on
|
|
||||||
multi-threading" below.
|
|
||||||
|
|
||||||
no-ts
|
|
||||||
Don't build Time Stamping Authority support.
|
|
||||||
|
|
||||||
no-ui
|
|
||||||
Don't build with the "UI" capability (i.e. the set of
|
|
||||||
features enabling text based prompts).
|
|
||||||
|
|
||||||
enable-unit-test
|
|
||||||
Enable additional unit test APIs. This should not typically
|
|
||||||
be used in production deployments.
|
|
||||||
|
|
||||||
enable-weak-ssl-ciphers
|
|
||||||
Build support for SSL/TLS ciphers that are considered "weak"
|
|
||||||
(e.g. RC4 based ciphersuites).
|
|
||||||
|
|
||||||
zlib
|
|
||||||
Build with support for zlib compression/decompression.
|
|
||||||
|
|
||||||
zlib-dynamic
|
|
||||||
Like "zlib", but has OpenSSL load the zlib library
|
|
||||||
dynamically when needed. This is only supported on systems
|
|
||||||
where loading of shared libraries is supported.
|
|
||||||
|
|
||||||
386
|
|
||||||
On Intel hardware, use the 80386 instruction set only
|
|
||||||
(the default x86 code is more efficient, but requires at
|
|
||||||
least a 486). Note: Use compiler flags for any other CPU
|
|
||||||
specific configuration, e.g. "-m32" to build x86 code on
|
|
||||||
an x64 system.
|
|
||||||
|
|
||||||
no-<prot>
|
|
||||||
Don't build support for negotiating the specified SSL/TLS
|
|
||||||
protocol (one of ssl, ssl3, tls, tls1, tls1_1, tls1_2, dtls,
|
|
||||||
dtls1 or dtls1_2). If "no-tls" is selected then all of tls1,
|
|
||||||
tls1_1 and tls1_2 are disabled. Similarly "no-dtls" will
|
|
||||||
disable dtls1 and dtls1_2. The "no-ssl" option is synonymous
|
|
||||||
with "no-ssl3". Note this only affects version negotiation.
|
|
||||||
OpenSSL will still provide the methods for applications to
|
|
||||||
explicitly select the individual protocol versions.
|
|
||||||
|
|
||||||
no-<prot>-method
|
|
||||||
As for no-<prot> but in addition do not build the methods for
|
|
||||||
applications to explicitly select individual protocol
|
|
||||||
versions.
|
|
||||||
|
|
||||||
enable-<alg>
|
|
||||||
Build with support for the specified algorithm, where <alg>
|
|
||||||
is one of: md2 or rc5.
|
|
||||||
|
|
||||||
no-<alg>
|
|
||||||
Build without support for the specified algorithm, where
|
|
||||||
<alg> is one of: bf, blake2, camellia, cast, chacha, cmac,
|
|
||||||
des, dh, dsa, ecdh, ecdsa, idea, md4, md5, mdc2, ocb,
|
|
||||||
ploy1305, rc2, rc4, rmd160, scrypt, seed or whirlpool. The
|
|
||||||
"ripemd" algorithm is deprecated and if used is synonymous
|
|
||||||
with rmd160.
|
|
||||||
|
|
||||||
-Dxxx, -lxxx, -Lxxx, -fxxx, -mXXX, -Kxxx
|
|
||||||
These system specific options will be passed through to the
|
|
||||||
compiler to allow you to define preprocessor symbols, specify
|
|
||||||
additional libraries, library directories or other compiler
|
|
||||||
options.
|
|
||||||
|
|
||||||
|
|
||||||
Installation in Detail
|
Installation in Detail
|
||||||
@@ -363,16 +89,7 @@
|
|||||||
|
|
||||||
1a. Configure OpenSSL for your operation system automatically:
|
1a. Configure OpenSSL for your operation system automatically:
|
||||||
|
|
||||||
NOTE: This is not available on Windows.
|
$ ./config [options]
|
||||||
|
|
||||||
$ ./config [options] # Unix
|
|
||||||
|
|
||||||
or
|
|
||||||
|
|
||||||
$ @config [options] ! OpenVMS
|
|
||||||
|
|
||||||
For the remainder of this text, the Unix form will be used in all
|
|
||||||
examples, please use the appropriate form for your platform.
|
|
||||||
|
|
||||||
This guesses at your operating system (and compiler, if necessary) and
|
This guesses at your operating system (and compiler, if necessary) and
|
||||||
configures OpenSSL based on this guess. Run ./config -t to see
|
configures OpenSSL based on this guess. Run ./config -t to see
|
||||||
@@ -389,95 +106,39 @@
|
|||||||
OpenSSL knows about a range of different operating system, hardware and
|
OpenSSL knows about a range of different operating system, hardware and
|
||||||
compiler combinations. To see the ones it knows about, run
|
compiler combinations. To see the ones it knows about, run
|
||||||
|
|
||||||
$ ./Configure # Unix
|
$ ./Configure
|
||||||
|
|
||||||
or
|
|
||||||
|
|
||||||
$ perl Configure # All other platforms
|
|
||||||
|
|
||||||
For the remainder of this text, the Unix form will be used in all
|
|
||||||
examples, please use the appropriate form for your platform.
|
|
||||||
|
|
||||||
Pick a suitable name from the list that matches your system. For most
|
Pick a suitable name from the list that matches your system. For most
|
||||||
operating systems there is a choice between using "cc" or "gcc". When
|
operating systems there is a choice between using "cc" or "gcc". When
|
||||||
you have identified your system (and if necessary compiler) use this name
|
you have identified your system (and if necessary compiler) use this name
|
||||||
as the argument to Configure. For example, a "linux-elf" user would
|
as the argument to ./Configure. For example, a "linux-elf" user would
|
||||||
run:
|
run:
|
||||||
|
|
||||||
$ ./Configure linux-elf [options]
|
$ ./Configure linux-elf [options]
|
||||||
|
|
||||||
If your system isn't listed, you will have to create a configuration
|
If your system is not available, you will have to edit the Configure
|
||||||
file named Configurations/{something}.conf and add the correct
|
program and add the correct configuration for your system. The
|
||||||
configuration for your system. See the available configs as examples
|
generic configurations "cc" or "gcc" should usually work on 32 bit
|
||||||
and read Configurations/README and Configurations/README.design for
|
systems.
|
||||||
more information.
|
|
||||||
|
|
||||||
The generic configurations "cc" or "gcc" should usually work on 32 bit
|
Configure creates the file Makefile.ssl from Makefile.org and
|
||||||
Unix-like systems.
|
|
||||||
|
|
||||||
Configure creates a build file ("Makefile" on Unix and "descrip.mms"
|
|
||||||
on OpenVMS) from a suitable template in Configurations, and
|
|
||||||
defines various macros in crypto/opensslconf.h (generated from
|
defines various macros in crypto/opensslconf.h (generated from
|
||||||
crypto/opensslconf.h.in).
|
crypto/opensslconf.h.in).
|
||||||
|
|
||||||
1c. Configure OpenSSL for building outside of the source tree.
|
|
||||||
|
|
||||||
OpenSSL can be configured to build in a build directory separate from
|
|
||||||
the directory with the source code. It's done by placing yourself in
|
|
||||||
some other directory and invoking the configuration commands from
|
|
||||||
there.
|
|
||||||
|
|
||||||
Unix example:
|
|
||||||
|
|
||||||
$ mkdir /var/tmp/openssl-build
|
|
||||||
$ cd /var/tmp/openssl-build
|
|
||||||
$ /PATH/TO/OPENSSL/SOURCE/config [options]
|
|
||||||
|
|
||||||
or
|
|
||||||
|
|
||||||
$ /PATH/TO/OPENSSL/SOURCE/Configure [target] [options]
|
|
||||||
|
|
||||||
OpenVMS example:
|
|
||||||
|
|
||||||
$ set default sys$login:
|
|
||||||
$ create/dir [.tmp.openssl-build]
|
|
||||||
$ set default [.tmp.openssl-build]
|
|
||||||
$ @[PATH.TO.OPENSSL.SOURCE]config {options}
|
|
||||||
|
|
||||||
or
|
|
||||||
|
|
||||||
$ @[PATH.TO.OPENSSL.SOURCE]Configure {target} {options}
|
|
||||||
|
|
||||||
Windows example:
|
|
||||||
|
|
||||||
$ C:
|
|
||||||
$ mkdir \temp-openssl
|
|
||||||
$ cd \temp-openssl
|
|
||||||
$ perl d:\PATH\TO\OPENSSL\SOURCE\Configure {target} {options}
|
|
||||||
|
|
||||||
Paths can be relative just as well as absolute. Configure will
|
|
||||||
do its best to translate them to relative paths whenever possible.
|
|
||||||
|
|
||||||
2. Build OpenSSL by running:
|
2. Build OpenSSL by running:
|
||||||
|
|
||||||
$ make # Unix
|
$ make
|
||||||
$ mms ! (or mmk) OpenVMS
|
|
||||||
$ nmake # Windows
|
|
||||||
|
|
||||||
This will build the OpenSSL libraries (libcrypto.a and libssl.a on
|
This will build the OpenSSL libraries (libcrypto.a and libssl.a) and the
|
||||||
Unix, corresponding on other platforms) and the OpenSSL binary
|
OpenSSL binary ("openssl"). The libraries will be built in the top-level
|
||||||
("openssl"). The libraries will be built in the top-level directory,
|
directory, and the binary will be in the "apps" directory.
|
||||||
and the binary will be in the "apps" subdirectory.
|
|
||||||
|
|
||||||
If the build fails, look at the output. There may be reasons for
|
If "make" fails, look at the output. There may be reasons for
|
||||||
the failure that aren't problems in OpenSSL itself (like missing
|
the failure that aren't problems in OpenSSL itself (like missing
|
||||||
standard headers). If it is a problem with OpenSSL itself, please
|
standard headers). If it is a problem with OpenSSL itself, please
|
||||||
report the problem to <rt@openssl.org> (note that your message
|
report the problem to <openssl-bugs@openssl.org> (note that your
|
||||||
will be recorded in the request tracker publicly readable at
|
message will be forwarded to a public mailing list). Include the
|
||||||
https://www.openssl.org/community/index.html#bugs and will be
|
output of "make report" in your message.
|
||||||
forwarded to a public mailing list). Please check out the request
|
|
||||||
tracker. Maybe the bug was already reported or has already been
|
|
||||||
fixed.
|
|
||||||
|
|
||||||
[If you encounter assembler error messages, try the "no-asm"
|
[If you encounter assembler error messages, try the "no-asm"
|
||||||
configuration option as an immediate fix.]
|
configuration option as an immediate fix.]
|
||||||
@@ -487,130 +148,114 @@
|
|||||||
|
|
||||||
3. After a successful build, the libraries should be tested. Run:
|
3. After a successful build, the libraries should be tested. Run:
|
||||||
|
|
||||||
$ make test # Unix
|
$ make test
|
||||||
$ mms test ! OpenVMS
|
|
||||||
$ nmake test # Windows
|
|
||||||
|
|
||||||
If some tests fail, look at the output. There may be reasons for
|
If a test fails, look at the output. There may be reasons for
|
||||||
the failure that isn't a problem in OpenSSL itself (like a
|
the failure that isn't a problem in OpenSSL itself (like a missing
|
||||||
malfunction with Perl). You may want increased verbosity, that
|
or malfunctioning bc). If it is a problem with OpenSSL itself,
|
||||||
can be accomplished like this:
|
try removing any compiler optimization flags from the CFLAGS line
|
||||||
|
in Makefile.ssl and run "make clean; make". Please send a bug
|
||||||
$ HARNESS_VERBOSE=yes make test # Unix
|
report to <openssl-bugs@openssl.org>, including the output of
|
||||||
|
"make report".
|
||||||
$ DEFINE HARNESS_VERBOSE YES
|
|
||||||
$ mms test ! OpenVMS
|
|
||||||
|
|
||||||
$ set HARNESS_VERBOSE=yes
|
|
||||||
$ nmake test # Windows
|
|
||||||
|
|
||||||
If you want to run just one or a few specific tests, you can use
|
|
||||||
the make variable TESTS to specify them, like this:
|
|
||||||
|
|
||||||
$ make TESTS='test_rsa test_dsa' test # Unix
|
|
||||||
$ mms/macro="TESTS=test_rsa test_dsa" test ! OpenVMS
|
|
||||||
$ nmake TESTS='test_rsa test_dsa' test # Windows
|
|
||||||
|
|
||||||
And of course, you can combine (Unix example shown):
|
|
||||||
|
|
||||||
$ HARNESS_VERBOSE=yes make TESTS='test_rsa test_dsa' test
|
|
||||||
|
|
||||||
You can find the list of available tests like this:
|
|
||||||
|
|
||||||
$ make list-tests # Unix
|
|
||||||
$ mms list-tests ! OpenVMS
|
|
||||||
$ nmake list-tests # Windows
|
|
||||||
|
|
||||||
Have a look at the manual for the perl module Test::Harness to
|
|
||||||
see what other HARNESS_* variables there are.
|
|
||||||
|
|
||||||
If you find a problem with OpenSSL itself, try removing any
|
|
||||||
compiler optimization flags from the CFLAGS line in Makefile and
|
|
||||||
run "make clean; make" or corresponding.
|
|
||||||
|
|
||||||
Please send a bug reports to <rt@openssl.org>.
|
|
||||||
|
|
||||||
4. If everything tests ok, install OpenSSL with
|
4. If everything tests ok, install OpenSSL with
|
||||||
|
|
||||||
$ make install # Unix
|
$ make install
|
||||||
$ mms install ! OpenVMS
|
|
||||||
|
|
||||||
This will install all the software components in this directory
|
This will create the installation directory (if it does not exist) and
|
||||||
tree under PREFIX (the directory given with --prefix or its
|
then the following subdirectories:
|
||||||
default):
|
|
||||||
|
|
||||||
Unix:
|
certs Initially empty, this is the default location
|
||||||
|
for certificate files.
|
||||||
|
man/man1 Manual pages for the 'openssl' command line tool
|
||||||
|
man/man3 Manual pages for the libraries (very incomplete)
|
||||||
|
misc Various scripts.
|
||||||
|
private Initially empty, this is the default location
|
||||||
|
for private key files.
|
||||||
|
|
||||||
bin/ Contains the openssl binary and a few other
|
If you didn't choose a different installation prefix, the
|
||||||
utility scripts.
|
following additional subdirectories will be created:
|
||||||
include/openssl
|
|
||||||
Contains the header files needed if you want
|
|
||||||
to build your own programs that use libcrypto
|
|
||||||
or libssl.
|
|
||||||
lib Contains the OpenSSL library files.
|
|
||||||
lib/engines Contains the OpenSSL dynamically loadable engines.
|
|
||||||
share/man/{man1,man3,man5,man7}
|
|
||||||
Contains the OpenSSL man-pages.
|
|
||||||
share/doc/openssl/html/{man1,man3,man5,man7}
|
|
||||||
Contains the HTML rendition of the man-pages.
|
|
||||||
|
|
||||||
OpenVMS ('arch' is replaced with the architecture name, "Alpha"
|
bin Contains the openssl binary and a few other
|
||||||
or "ia64"):
|
utility programs.
|
||||||
|
include/openssl Contains the header files needed if you want to
|
||||||
[.EXE.'arch'] Contains the openssl binary and a few other
|
compile programs with libcrypto or libssl.
|
||||||
utility scripts.
|
lib Contains the OpenSSL library files themselves.
|
||||||
[.include.openssl]
|
|
||||||
Contains the header files needed if you want
|
|
||||||
to build your own programs that use libcrypto
|
|
||||||
or libssl.
|
|
||||||
[.LIB.'arch'] Contains the OpenSSL library files.
|
|
||||||
[.ENGINES.'arch']
|
|
||||||
Contains the OpenSSL dynamically loadable engines.
|
|
||||||
[.SYS$STARTUP] Contains startup, login and shutdown scripts.
|
|
||||||
These define appropriate logical names and
|
|
||||||
command symbols.
|
|
||||||
|
|
||||||
|
|
||||||
Additionally, install will add the following directories under
|
|
||||||
OPENSSLDIR (the directory given with --openssldir or its default)
|
|
||||||
for you convenience:
|
|
||||||
|
|
||||||
certs Initially empty, this is the default location
|
|
||||||
for certificate files.
|
|
||||||
private Initially empty, this is the default location
|
|
||||||
for private key files.
|
|
||||||
misc Various scripts.
|
|
||||||
|
|
||||||
Package builders who want to configure the library for standard
|
Package builders who want to configure the library for standard
|
||||||
locations, but have the package installed somewhere else so that
|
locations, but have the package installed somewhere else so that
|
||||||
it can easily be packaged, can use
|
it can easily be packaged, can use
|
||||||
|
|
||||||
$ make DESTDIR=/tmp/package-root install # Unix
|
$ make INSTALL_PREFIX=/tmp/package-root install
|
||||||
$ mms/macro="DESTDIR=TMP:[PACKAGE-ROOT]" install ! OpenVMS
|
|
||||||
|
|
||||||
The specified destination directory will be prepended to all
|
(or specify "--install_prefix=/tmp/package-root" as a configure
|
||||||
installation target paths.
|
option). The specified prefix will be prepended to all
|
||||||
|
installation target filenames.
|
||||||
|
|
||||||
Compatibility issues with previous OpenSSL versions:
|
|
||||||
|
NOTE: The header files used to reside directly in the include
|
||||||
|
directory, but have now been moved to include/openssl so that
|
||||||
|
OpenSSL can co-exist with other libraries which use some of the
|
||||||
|
same filenames. This means that applications that use OpenSSL
|
||||||
|
should now use C preprocessor directives of the form
|
||||||
|
|
||||||
|
#include <openssl/ssl.h>
|
||||||
|
|
||||||
|
instead of "#include <ssl.h>", which was used with library versions
|
||||||
|
up to OpenSSL 0.9.2b.
|
||||||
|
|
||||||
|
If you install a new version of OpenSSL over an old library version,
|
||||||
|
you should delete the old header files in the include directory.
|
||||||
|
|
||||||
|
Compatibility issues:
|
||||||
|
|
||||||
* COMPILING existing applications
|
* COMPILING existing applications
|
||||||
|
|
||||||
OpenSSL 1.1 hides a number of structures that were previously
|
To compile an application that uses old filenames -- e.g.
|
||||||
open. This includes all internal libssl structures and a number
|
"#include <ssl.h>" --, it will usually be enough to find
|
||||||
of EVP types. Accessor functions have been added to allow
|
the CFLAGS definition in the application's Makefile and
|
||||||
controlled access to the structures' data.
|
add a C option such as
|
||||||
|
|
||||||
This means that some software needs to be rewritten to adapt to
|
-I/usr/local/ssl/include/openssl
|
||||||
the new ways of doing things. This often amounts to allocating
|
|
||||||
an instance of a structure explicitly where you could previously
|
|
||||||
allocate them on the stack as automatic variables, and using the
|
|
||||||
provided accessor functions where you would previously access a
|
|
||||||
structure's field directly.
|
|
||||||
|
|
||||||
<TBA>
|
to it.
|
||||||
|
|
||||||
Some APIs have changed as well. However, older APIs have been
|
But don't delete the existing -I option that points to
|
||||||
preserved when possible.
|
the ..../include directory! Otherwise, OpenSSL header files
|
||||||
|
could not #include each other.
|
||||||
|
|
||||||
|
* WRITING applications
|
||||||
|
|
||||||
|
To write an application that is able to handle both the new
|
||||||
|
and the old directory layout, so that it can still be compiled
|
||||||
|
with library versions up to OpenSSL 0.9.2b without bothering
|
||||||
|
the user, you can proceed as follows:
|
||||||
|
|
||||||
|
- Always use the new filename of OpenSSL header files,
|
||||||
|
e.g. #include <openssl/ssl.h>.
|
||||||
|
|
||||||
|
- Create a directory "incl" that contains only a symbolic
|
||||||
|
link named "openssl", which points to the "include" directory
|
||||||
|
of OpenSSL.
|
||||||
|
For example, your application's Makefile might contain the
|
||||||
|
following rule, if OPENSSLDIR is a pathname (absolute or
|
||||||
|
relative) of the directory where OpenSSL resides:
|
||||||
|
|
||||||
|
incl/openssl:
|
||||||
|
-mkdir incl
|
||||||
|
cd $(OPENSSLDIR) # Check whether the directory really exists
|
||||||
|
-ln -s `cd $(OPENSSLDIR); pwd`/include incl/openssl
|
||||||
|
|
||||||
|
You will have to add "incl/openssl" to the dependencies
|
||||||
|
of those C files that include some OpenSSL header file.
|
||||||
|
|
||||||
|
- Add "-Iincl" to your CFLAGS.
|
||||||
|
|
||||||
|
With these additions, the OpenSSL header files will be available
|
||||||
|
under both name variants if an old library version is used:
|
||||||
|
Your application can reach them under names like <openssl/foo.h>,
|
||||||
|
while the header files still are able to #include each other
|
||||||
|
with names of the form <foo.h>.
|
||||||
|
|
||||||
|
|
||||||
Note on multi-threading
|
Note on multi-threading
|
||||||
@@ -629,30 +274,19 @@
|
|||||||
you can still use "no-threads" to suppress an annoying warning message
|
you can still use "no-threads" to suppress an annoying warning message
|
||||||
from the Configure script.)
|
from the Configure script.)
|
||||||
|
|
||||||
OpenSSL provides built-in support for two threading models: pthreads (found on
|
|
||||||
most UNIX/Linux systems), and Windows threads. No other threading models are
|
|
||||||
supported. If your platform does not provide pthreads or Windows threads then
|
|
||||||
you should Configure with the "no-threads" option.
|
|
||||||
|
|
||||||
Note on shared libraries
|
Note on shared libraries
|
||||||
------------------------
|
------------------------
|
||||||
|
|
||||||
For most systems the OpenSSL Configure script knows what is needed to
|
Shared library is currently an experimental feature. The only reason to
|
||||||
build shared libraries for libcrypto and libssl. On these systems
|
have them would be to conserve memory on systems where several program
|
||||||
the shared libraries will be created by default. This can be suppressed and
|
are using OpenSSL. Binary backward compatibility can't be guaranteed
|
||||||
only static libraries created by using the "no-shared" option. On systems
|
before OpenSSL version 1.0.
|
||||||
where OpenSSL does not know how to build shared libraries the "no-shared"
|
|
||||||
option will be forced and only static libraries will be created.
|
|
||||||
|
|
||||||
Note on random number generation
|
|
||||||
--------------------------------
|
|
||||||
|
|
||||||
Availability of cryptographically secure random numbers is required for
|
|
||||||
secret key generation. OpenSSL provides several options to seed the
|
|
||||||
internal PRNG. If not properly seeded, the internal PRNG will refuse
|
|
||||||
to deliver random bytes and a "PRNG not seeded error" will occur.
|
|
||||||
On systems without /dev/urandom (or similar) device, it may be necessary
|
|
||||||
to install additional support software to obtain random seed.
|
|
||||||
Please check out the manual pages for RAND_add(), RAND_bytes(), RAND_egd(),
|
|
||||||
and the FAQ for more information.
|
|
||||||
|
|
||||||
|
For some systems, the OpenSSL Configure script knows what is needed to
|
||||||
|
build shared libraries for libcrypto and libssl. On these systems,
|
||||||
|
the shared libraries are currently not created by default, but giving
|
||||||
|
the option "shared" will get them created. This method supports Makefile
|
||||||
|
targets for shared library creation, like linux-shared. Those targets
|
||||||
|
can currently be used on their own just as well, but this is expected
|
||||||
|
to change in future versions of OpenSSL.
|
||||||
|
|||||||
@@ -1,48 +0,0 @@
|
|||||||
|
|
||||||
|
|
||||||
INSTALLATION ON THE DOS PLATFORM WITH DJGPP
|
|
||||||
-------------------------------------------
|
|
||||||
|
|
||||||
OpenSSL has been ported to DJGPP, a Unix look-alike 32-bit run-time
|
|
||||||
environment for 16-bit DOS, but only with long filename support.
|
|
||||||
If you wish to compile on native DOS with 8+3 filenames, you will
|
|
||||||
have to tweak the installation yourself, including renaming files
|
|
||||||
with illegal or duplicate names.
|
|
||||||
|
|
||||||
You should have a full DJGPP environment installed, including the
|
|
||||||
latest versions of DJGPP, GCC, BINUTILS, BASH, etc. This package
|
|
||||||
requires that PERL and the PERL module Text::Template also be
|
|
||||||
installed.
|
|
||||||
|
|
||||||
All of these can be obtained from the usual DJGPP mirror sites or
|
|
||||||
directly at "http://www.delorie.com/pub/djgpp". For help on which
|
|
||||||
files to download, see the DJGPP "ZIP PICKER" page at
|
|
||||||
"http://www.delorie.com/djgpp/zip-picker.html". You also need to have
|
|
||||||
the WATT-32 networking package installed before you try to compile
|
|
||||||
OpenSSL. This can be obtained from "http://www.bgnett.no/~giva/".
|
|
||||||
The Makefile assumes that the WATT-32 code is in the directory
|
|
||||||
specified by the environment variable WATT_ROOT. If you have watt-32
|
|
||||||
in directory "watt32" under your main DJGPP directory, specify
|
|
||||||
WATT_ROOT="/dev/env/DJDIR/watt32".
|
|
||||||
|
|
||||||
To compile OpenSSL, start your BASH shell, then configure for DJGPP by
|
|
||||||
running "./Configure" with appropriate arguments:
|
|
||||||
|
|
||||||
./Configure no-threads --prefix=/dev/env/DJDIR DJGPP
|
|
||||||
|
|
||||||
And finally fire up "make". You may run out of DPMI selectors when
|
|
||||||
running in a DOS box under Windows. If so, just close the BASH
|
|
||||||
shell, go back to Windows, and restart BASH. Then run "make" again.
|
|
||||||
|
|
||||||
RUN-TIME CAVEAT LECTOR
|
|
||||||
--------------
|
|
||||||
|
|
||||||
Quoting FAQ:
|
|
||||||
|
|
||||||
"Cryptographic software needs a source of unpredictable data to work
|
|
||||||
correctly. Many open source operating systems provide a "randomness
|
|
||||||
device" (/dev/urandom or /dev/random) that serves this purpose."
|
|
||||||
|
|
||||||
As of version 0.9.7f DJGPP port checks upon /dev/urandom$ for a 3rd
|
|
||||||
party "randomness" DOS driver. One such driver, NOISE.SYS, can be
|
|
||||||
obtained from "http://www.rahul.net/dkaufman/index.html".
|
|
||||||
72
INSTALL.MacOS
Normal file
72
INSTALL.MacOS
Normal file
@@ -0,0 +1,72 @@
|
|||||||
|
OpenSSL - Port To The Macintosh OS 9 or Earlier
|
||||||
|
===============================================
|
||||||
|
|
||||||
|
Thanks to Roy Wood <roy@centricsystems.ca> initial support for Mac OS (pre
|
||||||
|
X) is now provided. "Initial" means that unlike other platforms where you
|
||||||
|
get an SDK and a "swiss army" openssl application, on Macintosh you only
|
||||||
|
get one sample application which fetches a page over HTTPS(*) and dumps it
|
||||||
|
in a window. We don't even build the test applications so that we can't
|
||||||
|
guarantee that all algorithms are operational.
|
||||||
|
|
||||||
|
Required software:
|
||||||
|
|
||||||
|
- StuffIt Expander 5.5 or later, alternatively MacGzip and SUNtar;
|
||||||
|
- Scriptable Finder;
|
||||||
|
- CodeWarrior Pro 5;
|
||||||
|
|
||||||
|
Installation procedure:
|
||||||
|
|
||||||
|
- fetch the source at ftp://ftp.openssl.org/ (well, you probably already
|
||||||
|
did, huh?)
|
||||||
|
- unpack the .tar.gz file:
|
||||||
|
- if you have StuffIt Expander then just drag it over it;
|
||||||
|
- otherwise uncompress it with MacGzip and then unpack with SUNtar;
|
||||||
|
- locate MacOS folder in OpenSSL source tree and open it;
|
||||||
|
- unbinhex mklinks.as.hqx and OpenSSL.mcp.hqx if present (**), do it
|
||||||
|
"in-place", i.e. unpacked files should end-up in the very same folder;
|
||||||
|
- execute mklinks.as;
|
||||||
|
- open OpenSSL.mcp(***) and build 'GetHTTPS PPC' target(****);
|
||||||
|
- that's it for now;
|
||||||
|
|
||||||
|
(*) URL is hardcoded into ./MacOS/GetHTTPS.src/GetHTTPS.cpp, lines 40
|
||||||
|
to 42, change appropriately.
|
||||||
|
(**) If you use SUNtar, then it might have already unbinhexed the files
|
||||||
|
in question.
|
||||||
|
(***) The project file was saved with CW Pro 5.3. If you have an earlier
|
||||||
|
version and it refuses to open it, then download
|
||||||
|
http://www.openssl.org/~appro/OpenSSL.mcp.xml and import it
|
||||||
|
overwriting the original OpenSSL.mcp.
|
||||||
|
(****) Other targets are works in progress. If you feel like giving 'em a
|
||||||
|
shot, then you should know that OpenSSL* and Lib* targets are
|
||||||
|
supposed to be built with the GUSI, MacOS library which mimics
|
||||||
|
BSD sockets and some other POSIX APIs. The GUSI distribution is
|
||||||
|
expected to be found in the same directory as the openssl source tree,
|
||||||
|
i.e., in the parent directory to the one where this very file,
|
||||||
|
namely INSTALL.MacOS, resides. For more information about GUSI, see
|
||||||
|
http://www.iis.ee.ethz.ch/~neeri/macintosh/gusi-qa.html
|
||||||
|
|
||||||
|
Finally some essential comments from our generous contributor:-)
|
||||||
|
|
||||||
|
"I've gotten OpenSSL working on the Macintosh. It's probably a bit of a
|
||||||
|
hack, but it works for what I'm doing. If you don't like the way I've done
|
||||||
|
it, then feel free to change what I've done. I freely admit that I've done
|
||||||
|
some less-than-ideal things in my port, and if you don't like the way I've
|
||||||
|
done something, then feel free to change it-- I won't be offended!
|
||||||
|
|
||||||
|
... I've tweaked "bss_sock.c" a little to call routines in a "MacSocket"
|
||||||
|
library I wrote. My MacSocket library is a wrapper around OpenTransport,
|
||||||
|
handling stuff like endpoint creation, reading, writing, etc. It is not
|
||||||
|
designed as a high-performance package such as you'd use in a webserver,
|
||||||
|
but is fine for lots of other applications. MacSocket also uses some other
|
||||||
|
code libraries I've written to deal with string manipulations and error
|
||||||
|
handling. Feel free to use these things in your own code, but give me
|
||||||
|
credit and/or send me free stuff in appreciation! :-)
|
||||||
|
|
||||||
|
...
|
||||||
|
|
||||||
|
If you have any questions, feel free to email me as the following:
|
||||||
|
|
||||||
|
roy@centricsystems.ca
|
||||||
|
|
||||||
|
-Roy Wood"
|
||||||
|
|
||||||
22
INSTALL.OS2
Normal file
22
INSTALL.OS2
Normal file
@@ -0,0 +1,22 @@
|
|||||||
|
|
||||||
|
Installation on OS/2
|
||||||
|
--------------------
|
||||||
|
|
||||||
|
You need to have the following tools installed:
|
||||||
|
|
||||||
|
* EMX GCC
|
||||||
|
* PERL
|
||||||
|
* GNU make
|
||||||
|
|
||||||
|
|
||||||
|
To build the makefile, run
|
||||||
|
|
||||||
|
> os2\os2-emx
|
||||||
|
|
||||||
|
This will configure OpenSSL and create OS2-EMX.mak which you then use to
|
||||||
|
build the OpenSSL libraries & programs by running
|
||||||
|
|
||||||
|
> make -f os2-emx.mak
|
||||||
|
|
||||||
|
If that finishes successfully you will find the libraries and programs in the
|
||||||
|
"out" directory.
|
||||||
299
INSTALL.VMS
Normal file
299
INSTALL.VMS
Normal file
@@ -0,0 +1,299 @@
|
|||||||
|
VMS Installation instructions
|
||||||
|
written by Richard Levitte
|
||||||
|
<richard@levitte.org>
|
||||||
|
|
||||||
|
|
||||||
|
Intro:
|
||||||
|
======
|
||||||
|
|
||||||
|
This file is divided in the following parts:
|
||||||
|
|
||||||
|
Requirements - Mandatory reading.
|
||||||
|
Checking the distribution - Mandatory reading.
|
||||||
|
Compilation - Mandatory reading.
|
||||||
|
Logical names - Mandatory reading.
|
||||||
|
Test - Mandatory reading.
|
||||||
|
Installation - Mandatory reading.
|
||||||
|
Backward portability - Read if it's an issue.
|
||||||
|
Possible bugs or quirks - A few warnings on things that
|
||||||
|
may go wrong or may surprise you.
|
||||||
|
TODO - Things that are to come.
|
||||||
|
|
||||||
|
|
||||||
|
Requirements:
|
||||||
|
=============
|
||||||
|
|
||||||
|
To build and install OpenSSL, you will need:
|
||||||
|
|
||||||
|
* DEC C or some other ANSI C compiler. VAX C is *not* supported.
|
||||||
|
[Note: OpenSSL has only been tested with DEC C. Compiling with
|
||||||
|
a different ANSI C compiler may require some work]
|
||||||
|
|
||||||
|
Checking the distribution:
|
||||||
|
==========================
|
||||||
|
|
||||||
|
There have been reports of places where the distribution didn't quite get
|
||||||
|
through, for example if you've copied the tree from a NFS-mounted Unix
|
||||||
|
mount point.
|
||||||
|
|
||||||
|
The easiest way to check if everything got through as it should is to check
|
||||||
|
for one of the following files:
|
||||||
|
|
||||||
|
[.CRYPTO]OPENSSLCONF.H_IN
|
||||||
|
[.CRYPTO]OPENSSLCONF_H.IN
|
||||||
|
|
||||||
|
They should never exist both at once, but one of them should (preferably
|
||||||
|
the first variant). If you can't find any of those two, something went
|
||||||
|
wrong.
|
||||||
|
|
||||||
|
The best way to get a correct distribution is to download the gzipped tar
|
||||||
|
file from ftp://ftp.openssl.org/source/, use GUNZIP to uncompress it and
|
||||||
|
use VMSTAR to unpack the resulting tar file.
|
||||||
|
|
||||||
|
GUNZIP is available in many places on the net. One of the distribution
|
||||||
|
points is the WKU software archive, ftp://ftp.wku.edu/vms/fileserv/ .
|
||||||
|
|
||||||
|
VMSTAR is also available in many places on the net. The recommended place
|
||||||
|
to find information about it is http://www.free.lp.se/vmstar/ .
|
||||||
|
|
||||||
|
|
||||||
|
Compilation:
|
||||||
|
============
|
||||||
|
|
||||||
|
I've used the very good command procedures written by Robert Byer
|
||||||
|
<byer@mail.all-net.net>, and just slightly modified them, making
|
||||||
|
them slightly more general and easier to maintain.
|
||||||
|
|
||||||
|
You can actually compile in almost any directory separately. Look
|
||||||
|
for a command procedure name xxx-LIB.COM (in the library directories)
|
||||||
|
or MAKExxx.COM (in the program directories) and read the comments at
|
||||||
|
the top to understand how to use them. However, if you want to
|
||||||
|
compile all you can get, the simplest is to use MAKEVMS.COM in the top
|
||||||
|
directory. The syntax is the following:
|
||||||
|
|
||||||
|
@MAKEVMS <option> <rsaref-p> <debug-p> [<compiler>]
|
||||||
|
|
||||||
|
<option> must be one of the following:
|
||||||
|
|
||||||
|
ALL Just build "everything".
|
||||||
|
CONFIG Just build the "[.CRYPTO]OPENSSLCONF.H" file.
|
||||||
|
BUILDINF Just build the "[.INCLUDE]BUILDINF.H" file.
|
||||||
|
SOFTLINKS Just copies some files, to simulate Unix soft links.
|
||||||
|
BUILDALL Same as ALL, except CONFIG, BUILDINF and SOFTLINKS aren't done.
|
||||||
|
RSAREF Just build the "[.xxx.EXE.RSAREF]LIBRSAGLUE.OLB" library.
|
||||||
|
CRYPTO Just build the "[.xxx.EXE.CRYPTO]LIBCRYPTO.OLB" library.
|
||||||
|
SSL Just build the "[.xxx.EXE.SSL]LIBSSL.OLB" library.
|
||||||
|
SSL_TASK Just build the "[.xxx.EXE.SSL]SSL_TASK.EXE" program.
|
||||||
|
TEST Just build the "[.xxx.EXE.TEST]" test programs for OpenSSL.
|
||||||
|
APPS Just build the "[.xxx.EXE.APPS]" application programs for OpenSSL.
|
||||||
|
|
||||||
|
<rsaref-p> must be one of the following:
|
||||||
|
|
||||||
|
RSAREF compile using the RSAREF Library
|
||||||
|
NORSAREF compile without using RSAREF
|
||||||
|
|
||||||
|
Note 0: The RSAREF library IS NO LONGER NEEDED. The RSA patent
|
||||||
|
expires September 20, 2000, and RSA Security chose to make
|
||||||
|
the algorithm public domain two weeks before that.
|
||||||
|
|
||||||
|
Note 1: If you still want to use RSAREF, the library is NOT INCLUDED
|
||||||
|
and you have to download it. RSA Security doesn't carry it
|
||||||
|
any more, but there are a number of places where you can find
|
||||||
|
it. You have to get the ".tar-Z" file as the ".zip" file
|
||||||
|
doesn't have the directory structure stored. You have to
|
||||||
|
extract the file into the [.RSAREF] directory as that is where
|
||||||
|
the scripts will look for the files.
|
||||||
|
|
||||||
|
Note 2: I have never done this, so I've no idea if it works or not.
|
||||||
|
|
||||||
|
<debug-p> must be one of the following:
|
||||||
|
|
||||||
|
DEBUG compile with debugging info (will not optimize)
|
||||||
|
NODEBUG compile without debugging info (will optimize)
|
||||||
|
|
||||||
|
<compiler> must be one of the following:
|
||||||
|
|
||||||
|
DECC For DEC C.
|
||||||
|
GNUC For GNU C.
|
||||||
|
|
||||||
|
|
||||||
|
You will find the crypto library in [.xxx.EXE.CRYPTO], called LIBCRYPTO.OLB,
|
||||||
|
where xxx is VAX or AXP. You will find the SSL library in [.xxx.EXE.SSL],
|
||||||
|
named LIBSSL.OLB, and you will find a bunch of useful programs in
|
||||||
|
[.xxx.EXE.APPS]. However, these shouldn't be used right off unless it's
|
||||||
|
just to test them. For production use, make sure you install first, see
|
||||||
|
Installation below.
|
||||||
|
|
||||||
|
Note 1: Some programs in this package require a TCP/IP library.
|
||||||
|
|
||||||
|
Note 2: if you want to compile the crypto library only, please make sure
|
||||||
|
you have at least done a @MAKEVMS CONFIG, a @MAKEVMS BUILDINF and
|
||||||
|
a @MAKEVMS SOFTLINKS. A lot of things will break if you don't.
|
||||||
|
|
||||||
|
|
||||||
|
Logical names:
|
||||||
|
==============
|
||||||
|
|
||||||
|
There are a few things that can't currently be given through the command
|
||||||
|
line. Instead, logical names are used.
|
||||||
|
|
||||||
|
Currently, the logical names supported are:
|
||||||
|
|
||||||
|
OPENSSL_NO_ASM with value YES, the assembler parts of OpenSSL will
|
||||||
|
not be used. Instead, plain C implementations are
|
||||||
|
used. This is good to try if something doesn't work.
|
||||||
|
OPENSSL_NO_'alg' with value YES, the corresponding crypto algorithm
|
||||||
|
will not be implemented. Supported algorithms to
|
||||||
|
do this with are: RSA, DSA, DH, MD2, MD4, MD5, RIPEMD,
|
||||||
|
SHA, DES, MDC2, CR2, RC4, RC5, IDEA, BF, CAST, HMAC,
|
||||||
|
SSL2. So, for example, having the logical name
|
||||||
|
OPENSSL_NO_RSA with the value YES means that the
|
||||||
|
LIBCRYPTO.OLB library will not contain an RSA
|
||||||
|
implementation.
|
||||||
|
|
||||||
|
|
||||||
|
Test:
|
||||||
|
=====
|
||||||
|
|
||||||
|
Testing is very simple, just do the following:
|
||||||
|
|
||||||
|
@[.TEST]TESTS
|
||||||
|
|
||||||
|
If a test fails, try with defining the logical name OPENSSL_NO_ASM (yes,
|
||||||
|
it's an ugly hack!) and rebuild. Please send a bug report to
|
||||||
|
<openssl-bugs@openssl.org>, including the output of "openssl version -a"
|
||||||
|
and of the failed test.
|
||||||
|
|
||||||
|
|
||||||
|
Installation:
|
||||||
|
=============
|
||||||
|
|
||||||
|
Installation is easy, just do the following:
|
||||||
|
|
||||||
|
@INSTALL <root>
|
||||||
|
|
||||||
|
<root> is the directory in which everything will be installed,
|
||||||
|
subdirectories, libraries, header files, programs and startup command
|
||||||
|
procedures.
|
||||||
|
|
||||||
|
N.B.: INSTALL.COM builds a new directory structure, different from
|
||||||
|
the directory tree where you have now build OpenSSL.
|
||||||
|
|
||||||
|
In the [.VMS] subdirectory of the installation, you will find the
|
||||||
|
following command procedures:
|
||||||
|
|
||||||
|
OPENSSL_STARTUP.COM
|
||||||
|
|
||||||
|
defines all needed logical names. Takes one argument that
|
||||||
|
tells it in what logical name table to insert the logical
|
||||||
|
names. If you insert if it SYS$MANAGER:SYSTARTUP_VMS.COM, the
|
||||||
|
call should look like this:
|
||||||
|
|
||||||
|
@openssldev:[openssldir.VMS]OPENSSL_STARTUP "/SYSTEM"
|
||||||
|
|
||||||
|
OPENSSL_UTILS.COM
|
||||||
|
|
||||||
|
sets up the symbols to the applications. Should be called
|
||||||
|
from for example SYS$MANAGER:SYLOGIN.COM
|
||||||
|
|
||||||
|
The logical names that are set up are the following:
|
||||||
|
|
||||||
|
SSLROOT a dotted concealed logical name pointing at the
|
||||||
|
root directory.
|
||||||
|
|
||||||
|
SSLCERTS Initially an empty directory, this is the default
|
||||||
|
location for certificate files.
|
||||||
|
SSLMISC Various scripts.
|
||||||
|
SSLPRIVATE Initially an empty directory, this is the default
|
||||||
|
location for private key files.
|
||||||
|
|
||||||
|
SSLEXE Contains the openssl binary and a few other utility
|
||||||
|
programs.
|
||||||
|
SSLINCLUDE Contains the header files needed if you want to
|
||||||
|
compile programs with libcrypto or libssl.
|
||||||
|
SSLLIB Contains the OpenSSL library files (LIBCRYPTO.OLB
|
||||||
|
and LIBSSL.OLB) themselves.
|
||||||
|
|
||||||
|
OPENSSL Same as SSLINCLUDE. This is because the standard
|
||||||
|
way to include OpenSSL header files from version
|
||||||
|
0.9.3 and on is:
|
||||||
|
|
||||||
|
#include <openssl/header.h>
|
||||||
|
|
||||||
|
For more info on this issue, see the INSTALL. file
|
||||||
|
(the NOTE in section 4 of "Installation in Detail").
|
||||||
|
You don't need to "deleting old header files"!!!
|
||||||
|
|
||||||
|
|
||||||
|
Backward portability:
|
||||||
|
=====================
|
||||||
|
|
||||||
|
One great problem when you build a library is making sure it will work
|
||||||
|
on as many versions of VMS as possible. Especially, code compiled on
|
||||||
|
OpenVMS version 7.x and above tend to be unusable in version 6.x or
|
||||||
|
lower, because some C library routines have changed names internally
|
||||||
|
(the C programmer won't usually see it, because the old name is
|
||||||
|
maintained through C macros). One obvious solution is to make sure
|
||||||
|
you have a development machine with an old enough version of OpenVMS.
|
||||||
|
However, if you are stuck with a bunch of Alphas running OpenVMS version
|
||||||
|
7.1, you seem to be out of luck. Fortunately, the DEC C header files
|
||||||
|
are cluttered with conditionals that make some declarations and definitions
|
||||||
|
dependent on the OpenVMS version or the C library version, *and* you
|
||||||
|
can use those macros to simulate older OpenVMS or C library versions,
|
||||||
|
by defining the macros _VMS_V6_SOURCE, __VMS_VER and __CTRL_VER with
|
||||||
|
correct values. In the compilation scripts, I've provided the possibility
|
||||||
|
for the user to influence the creation of such macros, through a bunch of
|
||||||
|
symbols, all having names starting with USER_. Here's the list of them:
|
||||||
|
|
||||||
|
USER_CCFLAGS - Used to give additional qualifiers to the
|
||||||
|
compiler. It can't be used to define macros
|
||||||
|
since the scripts will do such things as well.
|
||||||
|
To do such things, use USER_CCDEFS.
|
||||||
|
USER_CCDEFS - Used to define macros on the command line. The
|
||||||
|
value of this symbol will be inserted inside a
|
||||||
|
/DEFINE=(...).
|
||||||
|
USER_CCDISABLEWARNINGS - Used to disable some warnings. The value is
|
||||||
|
inserted inside a /DISABLE=WARNING=(...).
|
||||||
|
|
||||||
|
So, to maintain backward compatibility with older VMS versions, do the
|
||||||
|
following before you start compiling:
|
||||||
|
|
||||||
|
$ USER_CCDEFS := _VMS_V6_SOURCE=1,__VMS_VER=60000000,__CRTL_VER=60000000
|
||||||
|
$ USER_CCDISABLEWARNINGS := PREOPTW
|
||||||
|
|
||||||
|
The USER_CCDISABLEWARNINGS is there because otherwise, DEC C will complain
|
||||||
|
that those macros have been changed.
|
||||||
|
|
||||||
|
Note: Currently, this is only useful for library compilation. The
|
||||||
|
programs will still be linked with the current version of the
|
||||||
|
C library shareable image, and will thus complain if they are
|
||||||
|
faced with an older version of the same C library shareable image.
|
||||||
|
This will probably be fixed in a future revision of OpenSSL.
|
||||||
|
|
||||||
|
|
||||||
|
Possible bugs or quirks:
|
||||||
|
========================
|
||||||
|
|
||||||
|
I'm not perfectly sure all the programs will use the SSLCERTS:
|
||||||
|
directory by default, it may very well be that you have to give them
|
||||||
|
extra arguments. Please experiment.
|
||||||
|
|
||||||
|
|
||||||
|
TODO:
|
||||||
|
=====
|
||||||
|
|
||||||
|
There are a few things that need to be worked out in the VMS version of
|
||||||
|
OpenSSL, still:
|
||||||
|
|
||||||
|
- Description files. ("Makefile's" :-))
|
||||||
|
- Script code to link an already compiled build tree.
|
||||||
|
- A VMSINSTALlable version (way in the future, unless someone else hacks).
|
||||||
|
- shareable images (DLL for you Windows folks).
|
||||||
|
|
||||||
|
There may be other things that I have missed and that may be desirable.
|
||||||
|
Please send mail to <openssl-users@openssl.org> or to me directly if you
|
||||||
|
have any ideas.
|
||||||
|
|
||||||
|
--
|
||||||
|
Richard Levitte <richard@levitte.org>
|
||||||
|
2000-02-27
|
||||||
266
INSTALL.W32
Normal file
266
INSTALL.W32
Normal file
@@ -0,0 +1,266 @@
|
|||||||
|
|
||||||
|
INSTALLATION ON THE WIN32 PLATFORM
|
||||||
|
----------------------------------
|
||||||
|
|
||||||
|
Heres a few comments about building OpenSSL in Windows environments. Most
|
||||||
|
of this is tested on Win32 but it may also work in Win 3.1 with some
|
||||||
|
modification.
|
||||||
|
|
||||||
|
You need Perl for Win32. Unless you will build on Cygwin, you will need
|
||||||
|
ActiveState Perl, available from http://www.activestate.com/ActivePerl.
|
||||||
|
For Cygwin users, there's more info in the Cygwin section.
|
||||||
|
|
||||||
|
and one of the following C compilers:
|
||||||
|
|
||||||
|
* Visual C++
|
||||||
|
* Borland C
|
||||||
|
* GNU C (Mingw32 or Cygwin)
|
||||||
|
|
||||||
|
If you want to compile in the assembly language routines with Visual C++ then
|
||||||
|
you will need an assembler. This is worth doing because it will result in
|
||||||
|
faster code: for example it will typically result in a 2 times speedup in the
|
||||||
|
RSA routines. Currently the following assemblers are supported:
|
||||||
|
|
||||||
|
* Microsoft MASM (aka "ml")
|
||||||
|
* Free Netwide Assembler NASM.
|
||||||
|
|
||||||
|
MASM was at one point distributed with VC++. It is now distributed with some
|
||||||
|
Microsoft DDKs, for example the Windows NT 4.0 DDK and the Windows 98 DDK. If
|
||||||
|
you do not have either of these DDKs then you can just download the binaries
|
||||||
|
for the Windows 98 DDK and extract and rename the two files XXXXXml.exe and
|
||||||
|
XXXXXml.err, to ml.exe and ml.err and install somewhere on your PATH. Both
|
||||||
|
DDKs can be downloaded from the Microsoft developers site www.msdn.com.
|
||||||
|
|
||||||
|
NASM is freely available. Version 0.98 was used during testing: other versions
|
||||||
|
may also work. It is available from many places, see for example:
|
||||||
|
http://www.kernel.org/pub/software/devel/nasm/binaries/win32/
|
||||||
|
The NASM binary nasmw.exe needs to be installed anywhere on your PATH.
|
||||||
|
|
||||||
|
If you are compiling from a tarball or a CVS snapshot then the Win32 files
|
||||||
|
may well be not up to date. This may mean that some "tweaking" is required to
|
||||||
|
get it all to work. See the trouble shooting section later on for if (when?)
|
||||||
|
it goes wrong.
|
||||||
|
|
||||||
|
Visual C++
|
||||||
|
----------
|
||||||
|
|
||||||
|
Firstly you should run Configure:
|
||||||
|
|
||||||
|
> perl Configure VC-WIN32
|
||||||
|
|
||||||
|
Next you need to build the Makefiles and optionally the assembly language
|
||||||
|
files:
|
||||||
|
|
||||||
|
- If you are using MASM then run:
|
||||||
|
|
||||||
|
> ms\do_masm
|
||||||
|
|
||||||
|
- If you are using NASM then run:
|
||||||
|
|
||||||
|
> ms\do_nasm
|
||||||
|
|
||||||
|
- If you don't want to use the assembly language files at all then run:
|
||||||
|
|
||||||
|
> ms\do_ms
|
||||||
|
|
||||||
|
If you get errors about things not having numbers assigned then check the
|
||||||
|
troubleshooting section: you probably won't be able to compile it as it
|
||||||
|
stands.
|
||||||
|
|
||||||
|
Then from the VC++ environment at a prompt do:
|
||||||
|
|
||||||
|
> nmake -f ms\ntdll.mak
|
||||||
|
|
||||||
|
If all is well it should compile and you will have some DLLs and executables
|
||||||
|
in out32dll. If you want to try the tests then do:
|
||||||
|
|
||||||
|
> cd out32dll
|
||||||
|
> ..\ms\test
|
||||||
|
|
||||||
|
Tweaks:
|
||||||
|
|
||||||
|
There are various changes you can make to the Win32 compile environment. By
|
||||||
|
default the library is not compiled with debugging symbols. If you add 'debug'
|
||||||
|
to the mk1mf.pl lines in the do_* batch file then debugging symbols will be
|
||||||
|
compiled in.
|
||||||
|
|
||||||
|
The default Win32 environment is to leave out any Windows NT specific
|
||||||
|
features.
|
||||||
|
|
||||||
|
If you want to enable the NT specific features of OpenSSL (currently only the
|
||||||
|
logging BIO) follow the instructions above but call the batch file do_nt.bat
|
||||||
|
instead of do_ms.bat.
|
||||||
|
|
||||||
|
You can also build a static version of the library using the Makefile
|
||||||
|
ms\nt.mak
|
||||||
|
|
||||||
|
Borland C++ builder 3 and 4
|
||||||
|
---------------------------
|
||||||
|
|
||||||
|
* Setup PATH. First must be GNU make then bcb4/bin
|
||||||
|
|
||||||
|
* Run ms\bcb4.bat
|
||||||
|
|
||||||
|
* Run make:
|
||||||
|
> make -f bcb.mak
|
||||||
|
|
||||||
|
GNU C (Mingw32)
|
||||||
|
---------------
|
||||||
|
|
||||||
|
To build OpenSSL, you need the Mingw32 package and GNU make.
|
||||||
|
|
||||||
|
* Compiler installation:
|
||||||
|
|
||||||
|
Mingw32 is available from <ftp://ftp.xraylith.wisc.edu/pub/khan/
|
||||||
|
gnu-win32/mingw32/gcc-2.95.2/gcc-2.95.2-msvcrt.exe>. Extract it
|
||||||
|
to a directory such as C:\gcc-2.95.2 and add c:\gcc-2.95.2\bin to
|
||||||
|
the PATH environment variable in "System Properties"; or edit and
|
||||||
|
run C:\gcc-2.95.2\mingw32.bat to set the PATH.
|
||||||
|
|
||||||
|
* Compile OpenSSL:
|
||||||
|
|
||||||
|
> ms\mingw32
|
||||||
|
|
||||||
|
This will create the library and binaries in out. In case any problems
|
||||||
|
occur, try
|
||||||
|
> ms\mingw32 no-asm
|
||||||
|
instead.
|
||||||
|
|
||||||
|
libcrypto.a and libssl.a are the static libraries. To use the DLLs,
|
||||||
|
link with libeay32.a and libssl32.a instead.
|
||||||
|
|
||||||
|
See troubleshooting if you get error messages about functions not having
|
||||||
|
a number assigned.
|
||||||
|
|
||||||
|
* You can now try the tests:
|
||||||
|
|
||||||
|
> cd out
|
||||||
|
> ..\ms\test
|
||||||
|
|
||||||
|
GNU C (Cygwin)
|
||||||
|
--------------
|
||||||
|
|
||||||
|
Cygwin provides a bash shell and GNU tools environment running on
|
||||||
|
NT 4.0, Windows 9x and Windows 2000. Consequently, a make of OpenSSL
|
||||||
|
with Cygwin is closer to a GNU bash environment such as Linux rather
|
||||||
|
than other W32 makes that are based on a single makefile approach.
|
||||||
|
Cygwin implements Posix/Unix calls through cygwin1.dll, and is
|
||||||
|
contrasted to Mingw32 which links dynamically to msvcrt.dll or
|
||||||
|
crtdll.dll.
|
||||||
|
|
||||||
|
To build OpenSSL using Cygwin:
|
||||||
|
|
||||||
|
* Install Cygwin (see http://sourceware.cygnus.com/cygwin)
|
||||||
|
|
||||||
|
* Install Perl and ensure it is in the path (recent Cygwin perl
|
||||||
|
(version 5.6.1-2 of the latter has been reported to work) or
|
||||||
|
ActivePerl)
|
||||||
|
|
||||||
|
* Run the Cygwin bash shell
|
||||||
|
|
||||||
|
* $ tar zxvf openssl-x.x.x.tar.gz
|
||||||
|
$ cd openssl-x.x.x
|
||||||
|
$ ./config
|
||||||
|
[...]
|
||||||
|
$ make
|
||||||
|
[...]
|
||||||
|
$ make test
|
||||||
|
$ make install
|
||||||
|
|
||||||
|
This will create a default install in /usr/local/ssl.
|
||||||
|
|
||||||
|
Cygwin Notes:
|
||||||
|
|
||||||
|
"make test" and normal file operations may fail in directories
|
||||||
|
mounted as text (i.e. mount -t c:\somewhere /home) due to Cygwin
|
||||||
|
stripping of carriage returns. To avoid this ensure that a binary
|
||||||
|
mount is used, e.g. mount -b c:\somewhere /home.
|
||||||
|
|
||||||
|
As of version 1.1.1 Cygwin is relatively unstable in its handling
|
||||||
|
of cr/lf issues. These make procedures succeeded with versions 1.1 and
|
||||||
|
the snapshot 20000524 (Slow!).
|
||||||
|
|
||||||
|
"bc" is not provided in the Cygwin distribution. This causes a
|
||||||
|
non-fatal error in "make test" but is otherwise harmless. If
|
||||||
|
desired, GNU bc can be built with Cygwin without change.
|
||||||
|
|
||||||
|
|
||||||
|
Installation
|
||||||
|
------------
|
||||||
|
|
||||||
|
If you used the Cygwin procedure above, you have already installed and
|
||||||
|
can skip this section. For all other procedures, there's currently no real
|
||||||
|
installation procedure for Win32. There are, however, some suggestions:
|
||||||
|
|
||||||
|
- do nothing. The include files are found in the inc32/ subdirectory,
|
||||||
|
all binaries are found in out32dll/ or out32/ depending if you built
|
||||||
|
dynamic or static libraries.
|
||||||
|
|
||||||
|
- do as is written in INSTALL.Win32 that comes with modssl:
|
||||||
|
|
||||||
|
$ md c:\openssl
|
||||||
|
$ md c:\openssl\bin
|
||||||
|
$ md c:\openssl\lib
|
||||||
|
$ md c:\openssl\include
|
||||||
|
$ md c:\openssl\include\openssl
|
||||||
|
$ copy /b inc32\* c:\openssl\include\openssl
|
||||||
|
$ copy /b out32dll\ssleay32.lib c:\openssl\lib
|
||||||
|
$ copy /b out32dll\libeay32.lib c:\openssl\lib
|
||||||
|
$ copy /b out32dll\ssleay32.dll c:\openssl\bin
|
||||||
|
$ copy /b out32dll\libeay32.dll c:\openssl\bin
|
||||||
|
$ copy /b out32dll\openssl.exe c:\openssl\bin
|
||||||
|
|
||||||
|
Of course, you can choose another device than c:. C: is used here
|
||||||
|
because that's usually the first (and often only) harddisk device.
|
||||||
|
Note: in the modssl INSTALL.Win32, p: is used rather than c:.
|
||||||
|
|
||||||
|
|
||||||
|
Troubleshooting
|
||||||
|
---------------
|
||||||
|
|
||||||
|
Since the Win32 build is only occasionally tested it may not always compile
|
||||||
|
cleanly. If you get an error about functions not having numbers assigned
|
||||||
|
when you run ms\do_ms then this means the Win32 ordinal files are not up to
|
||||||
|
date. You can do:
|
||||||
|
|
||||||
|
> perl util\mkdef.pl crypto ssl update
|
||||||
|
|
||||||
|
then ms\do_XXX should not give a warning any more. However the numbers that
|
||||||
|
get assigned by this technique may not match those that eventually get
|
||||||
|
assigned in the CVS tree: so anything linked against this version of the
|
||||||
|
library may need to be recompiled.
|
||||||
|
|
||||||
|
If you get errors about unresolved symbols there are several possible
|
||||||
|
causes.
|
||||||
|
|
||||||
|
If this happens when the DLL is being linked and you have disabled some
|
||||||
|
ciphers then it is possible the DEF file generator hasn't removed all
|
||||||
|
the disabled symbols: the easiest solution is to edit the DEF files manually
|
||||||
|
to delete them. The DEF files are ms\libeay32.def ms\ssleay32.def.
|
||||||
|
|
||||||
|
Another cause is if you missed or ignored the errors about missing numbers
|
||||||
|
mentioned above.
|
||||||
|
|
||||||
|
If you get warnings in the code then the compilation will halt.
|
||||||
|
|
||||||
|
The default Makefile for Win32 halts whenever any warnings occur. Since VC++
|
||||||
|
has its own ideas about warnings which don't always match up to other
|
||||||
|
environments this can happen. The best fix is to edit the file with the
|
||||||
|
warning in and fix it. Alternatively you can turn off the halt on warnings by
|
||||||
|
editing the CFLAG line in the Makefile and deleting the /WX option.
|
||||||
|
|
||||||
|
You might get compilation errors. Again you will have to fix these or report
|
||||||
|
them.
|
||||||
|
|
||||||
|
One final comment about compiling applications linked to the OpenSSL library.
|
||||||
|
If you don't use the multithreaded DLL runtime library (/MD option) your
|
||||||
|
program will almost certainly crash because malloc gets confused -- the
|
||||||
|
OpenSSL DLLs are statically linked to one version, the application must
|
||||||
|
not use a different one. You might be able to work around such problems
|
||||||
|
by adding CRYPTO_malloc_init() to your program before any calls to the
|
||||||
|
OpenSSL libraries: This tells the OpenSSL libraries to use the same
|
||||||
|
malloc(), free() and realloc() as the application. However there are many
|
||||||
|
standard library functions used by OpenSSL that call malloc() internally
|
||||||
|
(e.g. fopen()), and OpenSSL cannot change these; so in general you cannot
|
||||||
|
rely on CRYPTO_malloc_init() solving your problem, and you should
|
||||||
|
consistently use the multithreaded library.
|
||||||
93
INSTALL.WCE
93
INSTALL.WCE
@@ -1,93 +0,0 @@
|
|||||||
|
|
||||||
INSTALLATION FOR THE WINDOWS CE PLATFORM
|
|
||||||
----------------------------------------
|
|
||||||
|
|
||||||
Building OpenSSL for Windows CE requires the following external tools:
|
|
||||||
|
|
||||||
* Microsoft eMbedded Visual C++ 3.0 or later
|
|
||||||
* Appropriate SDK might be required
|
|
||||||
* Perl for Win32 [commonly recommended ActiveState Perl is available
|
|
||||||
from http://www.activestate.com/Products/ActivePerl/]
|
|
||||||
You also need the perl module Text::Template.
|
|
||||||
Please read README.PERL for more information.
|
|
||||||
|
|
||||||
* wcecompat compatibility library available at
|
|
||||||
http://www.essemer.com.au/windowsce/
|
|
||||||
* Optionally ceutils for running automated tests (same location)
|
|
||||||
|
|
||||||
_or_
|
|
||||||
|
|
||||||
* PocketConsole driver and PortSDK available at
|
|
||||||
http://www.symbolictools.de/public/pocketconsole/
|
|
||||||
* CMD command interpreter (same location)
|
|
||||||
|
|
||||||
As Windows CE support in OpenSSL relies on 3rd party compatibility
|
|
||||||
library, it's appropriate to check corresponding URL for updates. For
|
|
||||||
example if you choose wcecompat, note that as for the moment of this
|
|
||||||
writing version 1.2 is available and actually required for WCE 4.2
|
|
||||||
and newer platforms. All wcecompat issues should be directed to
|
|
||||||
www.essemer.com.au.
|
|
||||||
|
|
||||||
Why compatibility library at all? The C Runtime Library implementation
|
|
||||||
for Windows CE that is included with Microsoft eMbedded Visual C++ is
|
|
||||||
incomplete and in some places incorrect. Compatibility library plugs
|
|
||||||
the holes and tries to bring the Windows CE CRT to [more] usable level.
|
|
||||||
Most gaping hole in CRT is support for stdin/stdout/stderr IO, which
|
|
||||||
proposed compatibility libraries solve in two different ways: wcecompat
|
|
||||||
redirects IO to active sync link, while PortSDK - to NT-like console
|
|
||||||
driver on the handheld itself.
|
|
||||||
|
|
||||||
Building
|
|
||||||
--------
|
|
||||||
|
|
||||||
Setup the eMbedded Visual C++ environment. There are batch files for doing
|
|
||||||
this installed with eVC++. For an ARM processor, for example, execute:
|
|
||||||
|
|
||||||
> "C:\Program Files\Microsoft eMbedded Tools\EVC\WCE300\BIN\WCEARM.BAT"
|
|
||||||
|
|
||||||
Next pick compatibility library according to your preferences.
|
|
||||||
|
|
||||||
1. To choose wcecompat set up WCECOMPAT environment variable pointing
|
|
||||||
at the location of wcecompat tree "root":
|
|
||||||
|
|
||||||
> set WCECOMPAT=C:\wcecompat
|
|
||||||
> set PORTSDK_LIBPATH=
|
|
||||||
|
|
||||||
2. To choose PortSDK set up PORTSDK_LIBPATH to point at hardware-
|
|
||||||
specific location where your portlib.lib is installed:
|
|
||||||
|
|
||||||
> set PORTSDK_LIBPATH=C:\PortSDK\lib\ARM
|
|
||||||
> set WCECOMPAT=
|
|
||||||
|
|
||||||
Note that you may not set both variables.
|
|
||||||
|
|
||||||
Next you should run Configure:
|
|
||||||
|
|
||||||
> perl Configure VC-CE
|
|
||||||
|
|
||||||
Next you need to build the Makefiles:
|
|
||||||
|
|
||||||
> ms\do_ms
|
|
||||||
|
|
||||||
Then from the VC++ environment at a prompt do:
|
|
||||||
|
|
||||||
> nmake -f ms\cedll.mak
|
|
||||||
|
|
||||||
[note that static builds are not supported under CE]
|
|
||||||
|
|
||||||
If all is well it should compile and you will have some DLLs and executables
|
|
||||||
in out32dll*.
|
|
||||||
|
|
||||||
<<< everyting below needs revision in respect to wcecompat vs. PortSDK >>>
|
|
||||||
|
|
||||||
If you want
|
|
||||||
to try the tests then make sure the ceutils are in the path and do:
|
|
||||||
|
|
||||||
> cd out32
|
|
||||||
> ..\ms\testce
|
|
||||||
|
|
||||||
This will copy each of the test programs to the Windows CE device and execute
|
|
||||||
them, displaying the output of the tests on this computer. The output should
|
|
||||||
look similar to the output produced by running the tests for a regular Windows
|
|
||||||
build.
|
|
||||||
|
|
||||||
2
LICENSE
2
LICENSE
@@ -12,7 +12,7 @@
|
|||||||
---------------
|
---------------
|
||||||
|
|
||||||
/* ====================================================================
|
/* ====================================================================
|
||||||
* Copyright (c) 1998-2016 The OpenSSL Project. All rights reserved.
|
* Copyright (c) 1998-2002 The OpenSSL Project. All rights reserved.
|
||||||
*
|
*
|
||||||
* Redistribution and use in source and binary forms, with or without
|
* Redistribution and use in source and binary forms, with or without
|
||||||
* modification, are permitted provided that the following conditions
|
* modification, are permitted provided that the following conditions
|
||||||
|
|||||||
62
MacOS/GUSI_Init.cpp
Normal file
62
MacOS/GUSI_Init.cpp
Normal file
@@ -0,0 +1,62 @@
|
|||||||
|
/**************** BEGIN GUSI CONFIGURATION ****************************
|
||||||
|
*
|
||||||
|
* GUSI Configuration section generated by GUSI Configurator
|
||||||
|
* last modified: Wed Jan 5 20:33:51 2000
|
||||||
|
*
|
||||||
|
* This section will be overwritten by the next run of Configurator.
|
||||||
|
*/
|
||||||
|
|
||||||
|
#define GUSI_SOURCE
|
||||||
|
#include <GUSIConfig.h>
|
||||||
|
#include <sys/cdefs.h>
|
||||||
|
|
||||||
|
/* Declarations of Socket Factories */
|
||||||
|
|
||||||
|
__BEGIN_DECLS
|
||||||
|
void GUSIwithInetSockets();
|
||||||
|
void GUSIwithLocalSockets();
|
||||||
|
void GUSIwithMTInetSockets();
|
||||||
|
void GUSIwithMTTcpSockets();
|
||||||
|
void GUSIwithMTUdpSockets();
|
||||||
|
void GUSIwithOTInetSockets();
|
||||||
|
void GUSIwithOTTcpSockets();
|
||||||
|
void GUSIwithOTUdpSockets();
|
||||||
|
void GUSIwithPPCSockets();
|
||||||
|
void GUSISetupFactories();
|
||||||
|
__END_DECLS
|
||||||
|
|
||||||
|
/* Configure Socket Factories */
|
||||||
|
|
||||||
|
void GUSISetupFactories()
|
||||||
|
{
|
||||||
|
#ifdef GUSISetupFactories_BeginHook
|
||||||
|
GUSISetupFactories_BeginHook
|
||||||
|
#endif
|
||||||
|
GUSIwithInetSockets();
|
||||||
|
#ifdef GUSISetupFactories_EndHook
|
||||||
|
GUSISetupFactories_EndHook
|
||||||
|
#endif
|
||||||
|
}
|
||||||
|
|
||||||
|
/* Declarations of File Devices */
|
||||||
|
|
||||||
|
__BEGIN_DECLS
|
||||||
|
void GUSIwithDConSockets();
|
||||||
|
void GUSIwithNullSockets();
|
||||||
|
void GUSISetupDevices();
|
||||||
|
__END_DECLS
|
||||||
|
|
||||||
|
/* Configure File Devices */
|
||||||
|
|
||||||
|
void GUSISetupDevices()
|
||||||
|
{
|
||||||
|
#ifdef GUSISetupDevices_BeginHook
|
||||||
|
GUSISetupDevices_BeginHook
|
||||||
|
#endif
|
||||||
|
GUSIwithNullSockets();
|
||||||
|
#ifdef GUSISetupDevices_EndHook
|
||||||
|
GUSISetupDevices_EndHook
|
||||||
|
#endif
|
||||||
|
}
|
||||||
|
|
||||||
|
/**************** END GUSI CONFIGURATION *************************/
|
||||||
2753
MacOS/GetHTTPS.src/CPStringUtils.cpp
Normal file
2753
MacOS/GetHTTPS.src/CPStringUtils.cpp
Normal file
File diff suppressed because it is too large
Load Diff
104
MacOS/GetHTTPS.src/CPStringUtils.hpp
Normal file
104
MacOS/GetHTTPS.src/CPStringUtils.hpp
Normal file
@@ -0,0 +1,104 @@
|
|||||||
|
#pragma once
|
||||||
|
|
||||||
|
#ifdef __cplusplus
|
||||||
|
extern "C" {
|
||||||
|
#endif
|
||||||
|
|
||||||
|
void CopyPStrToCStr(const unsigned char *thePStr,char *theCStr,const int maxCStrLength);
|
||||||
|
void CopyPStrToPStr(const unsigned char *theSrcPStr,unsigned char *theDstPStr,const int maxDstStrLength);
|
||||||
|
void CopyCStrToCStr(const char *theSrcCStr,char *theDstCStr,const int maxDstStrLength);
|
||||||
|
void CopyCStrToPStr(const char *theSrcCStr,unsigned char *theDstPStr,const int maxDstStrLength);
|
||||||
|
void ConcatPStrToCStr(const unsigned char *thePStr,char *theCStr,const int maxCStrLength);
|
||||||
|
void ConcatPStrToPStr(const unsigned char *theSrcPStr,unsigned char *theDstPStr,const int maxDstStrLength);
|
||||||
|
void ConcatCStrToPStr(const char *theSrcCStr,unsigned char *theDstPStr,const int maxDstStrLength);
|
||||||
|
void ConcatCStrToCStr(const char *theSrcCStr,char *theDstCStr,const int maxCStrLength);
|
||||||
|
|
||||||
|
void ConcatCharToCStr(const char theChar,char *theDstCStr,const int maxCStrLength);
|
||||||
|
void ConcatCharToPStr(const char theChar,unsigned char *theDstPStr,const int maxPStrLength);
|
||||||
|
|
||||||
|
int ComparePStrs(const unsigned char *theFirstPStr,const unsigned char *theSecondPStr,const Boolean ignoreCase = true);
|
||||||
|
int CompareCStrs(const char *theFirstCStr,const char *theSecondCStr,const Boolean ignoreCase = true);
|
||||||
|
int CompareCStrToPStr(const char *theCStr,const unsigned char *thePStr,const Boolean ignoreCase = true);
|
||||||
|
|
||||||
|
Boolean CStrsAreEqual(const char *theFirstCStr,const char *theSecondCStr,const Boolean ignoreCase = true);
|
||||||
|
Boolean PStrsAreEqual(const unsigned char *theFirstCStr,const unsigned char *theSecondCStr,const Boolean ignoreCase = true);
|
||||||
|
|
||||||
|
void CopyLongIntToCStr(const long theNum,char *theCStr,const int maxCStrLength,const int numDigits = -1);
|
||||||
|
void CopyUnsignedLongIntToCStr(const unsigned long theNum,char *theCStr,const int maxCStrLength);
|
||||||
|
void ConcatLongIntToCStr(const long theNum,char *theCStr,const int maxCStrLength,const int numDigits = -1);
|
||||||
|
void CopyCStrAndConcatLongIntToCStr(const char *theSrcCStr,const long theNum,char *theDstCStr,const int maxDstStrLength);
|
||||||
|
|
||||||
|
void CopyLongIntToPStr(const long theNum,unsigned char *thePStr,const int maxPStrLength,const int numDigits = -1);
|
||||||
|
void ConcatLongIntToPStr(const long theNum,unsigned char *thePStr,const int maxPStrLength,const int numDigits = -1);
|
||||||
|
|
||||||
|
long CStrLength(const char *theCString);
|
||||||
|
long PStrLength(const unsigned char *thePString);
|
||||||
|
|
||||||
|
OSErr CopyCStrToExistingHandle(const char *theCString,Handle theHandle);
|
||||||
|
OSErr CopyLongIntToExistingHandle(const long inTheLongInt,Handle theHandle);
|
||||||
|
|
||||||
|
OSErr CopyCStrToNewHandle(const char *theCString,Handle *theHandle);
|
||||||
|
OSErr CopyPStrToNewHandle(const unsigned char *thePString,Handle *theHandle);
|
||||||
|
OSErr CopyLongIntToNewHandle(const long inTheLongInt,Handle *theHandle);
|
||||||
|
|
||||||
|
OSErr AppendCStrToHandle(const char *theCString,Handle theHandle,long *currentLength = nil,long *maxLength = nil);
|
||||||
|
OSErr AppendCharsToHandle(const char *theChars,const int numChars,Handle theHandle,long *currentLength = nil,long *maxLength = nil);
|
||||||
|
OSErr AppendPStrToHandle(const unsigned char *thePString,Handle theHandle,long *currentLength = nil);
|
||||||
|
OSErr AppendLongIntToHandle(const long inTheLongInt,Handle theHandle,long *currentLength = nil);
|
||||||
|
|
||||||
|
void ZeroMem(void *theMemPtr,const unsigned long numBytes);
|
||||||
|
|
||||||
|
char *FindCharInCStr(const char theChar,const char *theCString);
|
||||||
|
long FindCharOffsetInCStr(const char theChar,const char *theCString,const Boolean inIgnoreCase = false);
|
||||||
|
long FindCStrOffsetInCStr(const char *theCSubstring,const char *theCString,const Boolean inIgnoreCase = false);
|
||||||
|
|
||||||
|
void CopyCSubstrToCStr(const char *theSrcCStr,const int maxCharsToCopy,char *theDstCStr,const int maxDstStrLength);
|
||||||
|
void CopyCSubstrToPStr(const char *theSrcCStr,const int maxCharsToCopy,unsigned char *theDstPStr,const int maxDstStrLength);
|
||||||
|
|
||||||
|
void InsertCStrIntoCStr(const char *theSrcCStr,const int theInsertionOffset,char *theDstCStr,const int maxDstStrLength);
|
||||||
|
void InsertPStrIntoCStr(const unsigned char *theSrcPStr,const int theInsertionOffset,char *theDstCStr,const int maxDstStrLength);
|
||||||
|
OSErr InsertCStrIntoHandle(const char *theCString,Handle theHandle,const long inInsertOffset);
|
||||||
|
|
||||||
|
void CopyCStrAndInsertCStrIntoCStr(const char *theSrcCStr,const char *theInsertCStr,char *theDstCStr,const int maxDstStrLength);
|
||||||
|
|
||||||
|
void CopyCStrAndInsertCStrsLongIntsIntoCStr(const char *theSrcCStr,const char **theInsertCStrs,const long *theLongInts,char *theDstCStr,const int maxDstStrLength);
|
||||||
|
|
||||||
|
void CopyCStrAndInsert1LongIntIntoCStr(const char *theSrcCStr,const long theNum,char *theDstCStr,const int maxDstStrLength);
|
||||||
|
void CopyCStrAndInsert2LongIntsIntoCStr(const char *theSrcCStr,const long long1,const long long2,char *theDstCStr,const int maxDstStrLength);
|
||||||
|
void CopyCStrAndInsert3LongIntsIntoCStr(const char *theSrcCStr,const long long1,const long long2,const long long3,char *theDstCStr,const int maxDstStrLength);
|
||||||
|
|
||||||
|
void CopyCStrAndInsertCStrLongIntIntoCStr(const char *theSrcCStr,const char *theInsertCStr,const long theNum,char *theDstCStr,const int maxDstStrLength);
|
||||||
|
OSErr CopyCStrAndInsertCStrLongIntIntoHandle(const char *theSrcCStr,const char *theInsertCStr,const long theNum,Handle *theHandle);
|
||||||
|
|
||||||
|
|
||||||
|
OSErr CopyIndexedWordToCStr(char *theSrcCStr,int whichWord,char *theDstCStr,int maxDstCStrLength);
|
||||||
|
OSErr CopyIndexedWordToNewHandle(char *theSrcCStr,int whichWord,Handle *outTheHandle);
|
||||||
|
|
||||||
|
OSErr CopyIndexedLineToCStr(const char *theSrcCStr,int inWhichLine,int *lineEndIndex,Boolean *gotLastLine,char *theDstCStr,const int maxDstCStrLength);
|
||||||
|
OSErr CopyIndexedLineToNewHandle(const char *theSrcCStr,int inWhichLine,Handle *outNewHandle);
|
||||||
|
|
||||||
|
OSErr ExtractIntFromCStr(const char *theSrcCStr,int *outInt,Boolean skipLeadingSpaces = true);
|
||||||
|
OSErr ExtractIntFromPStr(const unsigned char *theSrcPStr,int *outInt,Boolean skipLeadingSpaces = true);
|
||||||
|
|
||||||
|
|
||||||
|
void ConvertCStrToUpperCase(char *theSrcCStr);
|
||||||
|
|
||||||
|
|
||||||
|
int CountOccurencesOfCharInCStr(const char inChar,const char *inSrcCStr);
|
||||||
|
int CountWordsInCStr(const char *inSrcCStr);
|
||||||
|
|
||||||
|
OSErr CountDigits(const char *inCStr,int *outNumIntegerDigits,int *outNumFractDigits);
|
||||||
|
|
||||||
|
void ExtractCStrItemFromCStr(const char *inSrcCStr,const char inItemDelimiter,const int inItemNumber,Boolean *foundItem,char *outDstCharPtr,const int inDstCharPtrMaxLength,const Boolean inTreatMultipleDelimsAsSingleDelim = false);
|
||||||
|
OSErr ExtractCStrItemFromCStrIntoNewHandle(const char *inSrcCStr,const char inItemDelimiter,const int inItemNumber,Boolean *foundItem,Handle *outNewHandle,const Boolean inTreatMultipleDelimsAsSingleDelim = false);
|
||||||
|
|
||||||
|
|
||||||
|
OSErr ExtractFloatFromCStr(const char *inCString,extended80 *outFloat);
|
||||||
|
OSErr CopyFloatToCStr(const extended80 *theFloat,char *theCStr,const int maxCStrLength,const int inMaxNumIntDigits = -1,const int inMaxNumFractDigits = -1);
|
||||||
|
|
||||||
|
void SkipWhiteSpace(char **ioSrcCharPtr,const Boolean inStopAtEOL = false);
|
||||||
|
|
||||||
|
|
||||||
|
#ifdef __cplusplus
|
||||||
|
}
|
||||||
|
#endif
|
||||||
170
MacOS/GetHTTPS.src/ErrorHandling.cpp
Normal file
170
MacOS/GetHTTPS.src/ErrorHandling.cpp
Normal file
@@ -0,0 +1,170 @@
|
|||||||
|
/* ====================================================================
|
||||||
|
* Copyright (c) 1998-1999 The OpenSSL Project. All rights reserved.
|
||||||
|
*
|
||||||
|
* Redistribution and use in source and binary forms, with or without
|
||||||
|
* modification, are permitted provided that the following conditions
|
||||||
|
* are met:
|
||||||
|
*
|
||||||
|
* 1. Redistributions of source code must retain the above copyright
|
||||||
|
* notice, this list of conditions and the following disclaimer.
|
||||||
|
*
|
||||||
|
* 2. Redistributions in binary form must reproduce the above copyright
|
||||||
|
* notice, this list of conditions and the following disclaimer in
|
||||||
|
* the documentation and/or other materials provided with the
|
||||||
|
* distribution.
|
||||||
|
*
|
||||||
|
* 3. All advertising materials mentioning features or use of this
|
||||||
|
* software must display the following acknowledgment:
|
||||||
|
* "This product includes software developed by the OpenSSL Project
|
||||||
|
* for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
|
||||||
|
*
|
||||||
|
* 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
|
||||||
|
* endorse or promote products derived from this software without
|
||||||
|
* prior written permission. For written permission, please contact
|
||||||
|
* openssl-core@openssl.org.
|
||||||
|
*
|
||||||
|
* 5. Products derived from this software may not be called "OpenSSL"
|
||||||
|
* nor may "OpenSSL" appear in their names without prior written
|
||||||
|
* permission of the OpenSSL Project.
|
||||||
|
*
|
||||||
|
* 6. Redistributions of any form whatsoever must retain the following
|
||||||
|
* acknowledgment:
|
||||||
|
* "This product includes software developed by the OpenSSL Project
|
||||||
|
* for use in the OpenSSL Toolkit (http://www.openssl.org/)"
|
||||||
|
*
|
||||||
|
* THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
|
||||||
|
* EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
||||||
|
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
|
||||||
|
* PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
|
||||||
|
* ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
|
||||||
|
* SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
|
||||||
|
* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
|
||||||
|
* LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
||||||
|
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
|
||||||
|
* STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
|
||||||
|
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
|
||||||
|
* OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||||
|
* ====================================================================
|
||||||
|
*
|
||||||
|
* This product includes cryptographic software written by Eric Young
|
||||||
|
* (eay@cryptsoft.com). This product includes software written by Tim
|
||||||
|
* Hudson (tjh@cryptsoft.com).
|
||||||
|
*
|
||||||
|
*/
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
#include "ErrorHandling.hpp"
|
||||||
|
#include "CPStringUtils.hpp"
|
||||||
|
|
||||||
|
#ifdef __EXCEPTIONS_ENABLED__
|
||||||
|
#include "CMyException.hpp"
|
||||||
|
#endif
|
||||||
|
|
||||||
|
|
||||||
|
static char gErrorMessageBuffer[512];
|
||||||
|
|
||||||
|
char *gErrorMessage = gErrorMessageBuffer;
|
||||||
|
int gErrorMessageMaxLength = sizeof(gErrorMessageBuffer);
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
void SetErrorMessage(const char *theErrorMessage)
|
||||||
|
{
|
||||||
|
if (theErrorMessage != nil)
|
||||||
|
{
|
||||||
|
CopyCStrToCStr(theErrorMessage,gErrorMessage,gErrorMessageMaxLength);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
void SetErrorMessageAndAppendLongInt(const char *theErrorMessage,const long theLongInt)
|
||||||
|
{
|
||||||
|
if (theErrorMessage != nil)
|
||||||
|
{
|
||||||
|
CopyCStrAndConcatLongIntToCStr(theErrorMessage,theLongInt,gErrorMessage,gErrorMessageMaxLength);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
void SetErrorMessageAndCStrAndLongInt(const char *theErrorMessage,const char * theCStr,const long theLongInt)
|
||||||
|
{
|
||||||
|
if (theErrorMessage != nil)
|
||||||
|
{
|
||||||
|
CopyCStrAndInsertCStrLongIntIntoCStr(theErrorMessage,theCStr,theLongInt,gErrorMessage,gErrorMessageMaxLength);
|
||||||
|
}
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
void SetErrorMessageAndCStr(const char *theErrorMessage,const char * theCStr)
|
||||||
|
{
|
||||||
|
if (theErrorMessage != nil)
|
||||||
|
{
|
||||||
|
CopyCStrAndInsertCStrLongIntIntoCStr(theErrorMessage,theCStr,-1,gErrorMessage,gErrorMessageMaxLength);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
void AppendCStrToErrorMessage(const char *theErrorMessage)
|
||||||
|
{
|
||||||
|
if (theErrorMessage != nil)
|
||||||
|
{
|
||||||
|
ConcatCStrToCStr(theErrorMessage,gErrorMessage,gErrorMessageMaxLength);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
void AppendLongIntToErrorMessage(const long theLongInt)
|
||||||
|
{
|
||||||
|
ConcatLongIntToCStr(theLongInt,gErrorMessage,gErrorMessageMaxLength);
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
char *GetErrorMessage(void)
|
||||||
|
{
|
||||||
|
return gErrorMessage;
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
OSErr GetErrorMessageInNewHandle(Handle *inoutHandle)
|
||||||
|
{
|
||||||
|
OSErr errCode;
|
||||||
|
|
||||||
|
|
||||||
|
errCode = CopyCStrToNewHandle(gErrorMessage,inoutHandle);
|
||||||
|
|
||||||
|
return(errCode);
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
OSErr GetErrorMessageInExistingHandle(Handle inoutHandle)
|
||||||
|
{
|
||||||
|
OSErr errCode;
|
||||||
|
|
||||||
|
|
||||||
|
errCode = CopyCStrToExistingHandle(gErrorMessage,inoutHandle);
|
||||||
|
|
||||||
|
return(errCode);
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
OSErr AppendErrorMessageToHandle(Handle inoutHandle)
|
||||||
|
{
|
||||||
|
OSErr errCode;
|
||||||
|
|
||||||
|
|
||||||
|
errCode = AppendCStrToHandle(gErrorMessage,inoutHandle,nil);
|
||||||
|
|
||||||
|
return(errCode);
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
#ifdef __EXCEPTIONS_ENABLED__
|
||||||
|
|
||||||
|
void ThrowErrorMessageException(void)
|
||||||
|
{
|
||||||
|
ThrowDescriptiveException(gErrorMessage);
|
||||||
|
}
|
||||||
|
|
||||||
|
#endif
|
||||||
147
MacOS/GetHTTPS.src/ErrorHandling.hpp
Normal file
147
MacOS/GetHTTPS.src/ErrorHandling.hpp
Normal file
@@ -0,0 +1,147 @@
|
|||||||
|
#ifdef __cplusplus
|
||||||
|
extern "C" {
|
||||||
|
#endif
|
||||||
|
|
||||||
|
#ifndef kGenericError
|
||||||
|
#define kGenericError -1
|
||||||
|
#endif
|
||||||
|
|
||||||
|
extern char *gErrorMessage;
|
||||||
|
|
||||||
|
|
||||||
|
void SetErrorMessage(const char *theErrorMessage);
|
||||||
|
void SetErrorMessageAndAppendLongInt(const char *theErrorMessage,const long theLongInt);
|
||||||
|
void SetErrorMessageAndCStrAndLongInt(const char *theErrorMessage,const char * theCStr,const long theLongInt);
|
||||||
|
void SetErrorMessageAndCStr(const char *theErrorMessage,const char * theCStr);
|
||||||
|
void AppendCStrToErrorMessage(const char *theErrorMessage);
|
||||||
|
void AppendLongIntToErrorMessage(const long theLongInt);
|
||||||
|
|
||||||
|
|
||||||
|
char *GetErrorMessage(void);
|
||||||
|
OSErr GetErrorMessageInNewHandle(Handle *inoutHandle);
|
||||||
|
OSErr GetErrorMessageInExistingHandle(Handle inoutHandle);
|
||||||
|
OSErr AppendErrorMessageToHandle(Handle inoutHandle);
|
||||||
|
|
||||||
|
|
||||||
|
#ifdef __EXCEPTIONS_ENABLED__
|
||||||
|
void ThrowErrorMessageException(void);
|
||||||
|
#endif
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
// A bunch of evil macros that would be uneccessary if I were always using C++ !
|
||||||
|
|
||||||
|
#define SetErrorMessageAndBailIfNil(theArg,theMessage) \
|
||||||
|
{ \
|
||||||
|
if (theArg == nil) \
|
||||||
|
{ \
|
||||||
|
SetErrorMessage(theMessage); \
|
||||||
|
errCode = kGenericError; \
|
||||||
|
goto EXITPOINT; \
|
||||||
|
} \
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
#define SetErrorMessageAndBail(theMessage) \
|
||||||
|
{ \
|
||||||
|
SetErrorMessage(theMessage); \
|
||||||
|
errCode = kGenericError; \
|
||||||
|
goto EXITPOINT; \
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
#define SetErrorMessageAndLongIntAndBail(theMessage,theLongInt) \
|
||||||
|
{ \
|
||||||
|
SetErrorMessageAndAppendLongInt(theMessage,theLongInt); \
|
||||||
|
errCode = kGenericError; \
|
||||||
|
goto EXITPOINT; \
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
#define SetErrorMessageAndLongIntAndBailIfError(theErrCode,theMessage,theLongInt) \
|
||||||
|
{ \
|
||||||
|
if (theErrCode != noErr) \
|
||||||
|
{ \
|
||||||
|
SetErrorMessageAndAppendLongInt(theMessage,theLongInt); \
|
||||||
|
errCode = theErrCode; \
|
||||||
|
goto EXITPOINT; \
|
||||||
|
} \
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
#define SetErrorMessageCStrLongIntAndBailIfError(theErrCode,theMessage,theCStr,theLongInt) \
|
||||||
|
{ \
|
||||||
|
if (theErrCode != noErr) \
|
||||||
|
{ \
|
||||||
|
SetErrorMessageAndCStrAndLongInt(theMessage,theCStr,theLongInt); \
|
||||||
|
errCode = theErrCode; \
|
||||||
|
goto EXITPOINT; \
|
||||||
|
} \
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
#define SetErrorMessageAndCStrAndBail(theMessage,theCStr) \
|
||||||
|
{ \
|
||||||
|
SetErrorMessageAndCStr(theMessage,theCStr); \
|
||||||
|
errCode = kGenericError; \
|
||||||
|
goto EXITPOINT; \
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
#define SetErrorMessageAndBailIfError(theErrCode,theMessage) \
|
||||||
|
{ \
|
||||||
|
if (theErrCode != noErr) \
|
||||||
|
{ \
|
||||||
|
SetErrorMessage(theMessage); \
|
||||||
|
errCode = theErrCode; \
|
||||||
|
goto EXITPOINT; \
|
||||||
|
} \
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
#define SetErrorMessageAndLongIntAndBailIfNil(theArg,theMessage,theLongInt) \
|
||||||
|
{ \
|
||||||
|
if (theArg == nil) \
|
||||||
|
{ \
|
||||||
|
SetErrorMessageAndAppendLongInt(theMessage,theLongInt); \
|
||||||
|
errCode = kGenericError; \
|
||||||
|
goto EXITPOINT; \
|
||||||
|
} \
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
#define BailIfError(theErrCode) \
|
||||||
|
{ \
|
||||||
|
if ((theErrCode) != noErr) \
|
||||||
|
{ \
|
||||||
|
goto EXITPOINT; \
|
||||||
|
} \
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
#define SetErrCodeAndBail(theErrCode) \
|
||||||
|
{ \
|
||||||
|
errCode = theErrCode; \
|
||||||
|
\
|
||||||
|
goto EXITPOINT; \
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
#define SetErrorCodeAndMessageAndBail(theErrCode,theMessage) \
|
||||||
|
{ \
|
||||||
|
SetErrorMessage(theMessage); \
|
||||||
|
errCode = theErrCode; \
|
||||||
|
goto EXITPOINT; \
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
#define BailNow() \
|
||||||
|
{ \
|
||||||
|
errCode = kGenericError; \
|
||||||
|
goto EXITPOINT; \
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
#ifdef __cplusplus
|
||||||
|
}
|
||||||
|
#endif
|
||||||
209
MacOS/GetHTTPS.src/GetHTTPS.cpp
Normal file
209
MacOS/GetHTTPS.src/GetHTTPS.cpp
Normal file
@@ -0,0 +1,209 @@
|
|||||||
|
/*
|
||||||
|
* An demo illustrating how to retrieve a URI from a secure HTTP server.
|
||||||
|
*
|
||||||
|
* Author: Roy Wood
|
||||||
|
* Date: September 7, 1999
|
||||||
|
* Comments: This relies heavily on my MacSockets library.
|
||||||
|
* This project is also set up so that it expects the OpenSSL source folder (0.9.4 as I write this)
|
||||||
|
* to live in a folder called "OpenSSL-0.9.4" in this project's parent folder. For example:
|
||||||
|
*
|
||||||
|
* Macintosh HD:
|
||||||
|
* Development:
|
||||||
|
* OpenSSL-0.9.4:
|
||||||
|
* (OpenSSL sources here)
|
||||||
|
* OpenSSL Example:
|
||||||
|
* (OpenSSL example junk here)
|
||||||
|
*
|
||||||
|
*
|
||||||
|
* Also-- before attempting to compile this, make sure the aliases in "OpenSSL-0.9.4:include:openssl"
|
||||||
|
* are installed! Use the AppleScript applet in the "openssl-0.9.4" folder to do this!
|
||||||
|
*/
|
||||||
|
/* modified to seed the PRNG */
|
||||||
|
/* modified to use CRandomizer for seeding */
|
||||||
|
|
||||||
|
|
||||||
|
// Include some funky libs I've developed over time
|
||||||
|
|
||||||
|
#include "CPStringUtils.hpp"
|
||||||
|
#include "ErrorHandling.hpp"
|
||||||
|
#include "MacSocket.h"
|
||||||
|
#include "Randomizer.h"
|
||||||
|
|
||||||
|
// We use the OpenSSL implementation of SSL....
|
||||||
|
// This was a lot of work to finally get going, though you wouldn't know it by the results!
|
||||||
|
|
||||||
|
#include <openssl/ssl.h>
|
||||||
|
#include <openssl/err.h>
|
||||||
|
|
||||||
|
#include <timer.h>
|
||||||
|
|
||||||
|
// Let's try grabbing some data from here:
|
||||||
|
|
||||||
|
#define kHTTPS_DNS "www.apache-ssl.org"
|
||||||
|
#define kHTTPS_Port 443
|
||||||
|
#define kHTTPS_URI "/"
|
||||||
|
|
||||||
|
|
||||||
|
// Forward-declare this
|
||||||
|
|
||||||
|
OSErr MyMacSocket_IdleWaitCallback(void *inUserRefPtr);
|
||||||
|
|
||||||
|
// My idle-wait callback. Doesn't do much, does it? Silly cooperative multitasking.
|
||||||
|
|
||||||
|
OSErr MyMacSocket_IdleWaitCallback(void *inUserRefPtr)
|
||||||
|
{
|
||||||
|
#pragma unused(inUserRefPtr)
|
||||||
|
|
||||||
|
EventRecord theEvent;
|
||||||
|
::EventAvail(everyEvent,&theEvent);
|
||||||
|
|
||||||
|
CRandomizer *randomizer = (CRandomizer*)inUserRefPtr;
|
||||||
|
if (randomizer)
|
||||||
|
randomizer->PeriodicAction();
|
||||||
|
|
||||||
|
return(noErr);
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
// Finally!
|
||||||
|
|
||||||
|
void main(void)
|
||||||
|
{
|
||||||
|
OSErr errCode;
|
||||||
|
int theSocket = -1;
|
||||||
|
int theTimeout = 30;
|
||||||
|
|
||||||
|
SSL_CTX *ssl_ctx = nil;
|
||||||
|
SSL *ssl = nil;
|
||||||
|
|
||||||
|
char tempString[256];
|
||||||
|
UnsignedWide microTickCount;
|
||||||
|
|
||||||
|
|
||||||
|
CRandomizer randomizer;
|
||||||
|
|
||||||
|
printf("OpenSSL Demo by Roy Wood, roy@centricsystems.ca\n\n");
|
||||||
|
|
||||||
|
BailIfError(errCode = MacSocket_Startup());
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
// Create a socket-like object
|
||||||
|
|
||||||
|
BailIfError(errCode = MacSocket_socket(&theSocket,false,theTimeout * 60,MyMacSocket_IdleWaitCallback,&randomizer));
|
||||||
|
|
||||||
|
|
||||||
|
// Set up the connect string and try to connect
|
||||||
|
|
||||||
|
CopyCStrAndInsertCStrLongIntIntoCStr("%s:%ld",kHTTPS_DNS,kHTTPS_Port,tempString,sizeof(tempString));
|
||||||
|
|
||||||
|
printf("Connecting to %s....\n",tempString);
|
||||||
|
|
||||||
|
BailIfError(errCode = MacSocket_connect(theSocket,tempString));
|
||||||
|
|
||||||
|
|
||||||
|
// Init SSL stuff
|
||||||
|
|
||||||
|
SSL_load_error_strings();
|
||||||
|
|
||||||
|
SSLeay_add_ssl_algorithms();
|
||||||
|
|
||||||
|
|
||||||
|
// Pick the SSL method
|
||||||
|
|
||||||
|
// ssl_ctx = SSL_CTX_new(SSLv2_client_method());
|
||||||
|
ssl_ctx = SSL_CTX_new(SSLv23_client_method());
|
||||||
|
// ssl_ctx = SSL_CTX_new(SSLv3_client_method());
|
||||||
|
|
||||||
|
|
||||||
|
// Create an SSL thingey and try to negotiate the connection
|
||||||
|
|
||||||
|
ssl = SSL_new(ssl_ctx);
|
||||||
|
|
||||||
|
SSL_set_fd(ssl,theSocket);
|
||||||
|
|
||||||
|
errCode = SSL_connect(ssl);
|
||||||
|
|
||||||
|
if (errCode < 0)
|
||||||
|
{
|
||||||
|
SetErrorMessageAndLongIntAndBail("OpenSSL: Can't initiate SSL connection, SSL_connect() = ",errCode);
|
||||||
|
}
|
||||||
|
|
||||||
|
// Request the URI from the host
|
||||||
|
|
||||||
|
CopyCStrToCStr("GET ",tempString,sizeof(tempString));
|
||||||
|
ConcatCStrToCStr(kHTTPS_URI,tempString,sizeof(tempString));
|
||||||
|
ConcatCStrToCStr(" HTTP/1.0\r\n\r\n",tempString,sizeof(tempString));
|
||||||
|
|
||||||
|
|
||||||
|
errCode = SSL_write(ssl,tempString,CStrLength(tempString));
|
||||||
|
|
||||||
|
if (errCode < 0)
|
||||||
|
{
|
||||||
|
SetErrorMessageAndLongIntAndBail("OpenSSL: Error writing data via ssl, SSL_write() = ",errCode);
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
for (;;)
|
||||||
|
{
|
||||||
|
char tempString[256];
|
||||||
|
int bytesRead;
|
||||||
|
|
||||||
|
|
||||||
|
// Read some bytes and dump them to the console
|
||||||
|
|
||||||
|
bytesRead = SSL_read(ssl,tempString,sizeof(tempString) - 1);
|
||||||
|
|
||||||
|
if (bytesRead == 0 && MacSocket_RemoteEndIsClosing(theSocket))
|
||||||
|
{
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
|
||||||
|
else if (bytesRead < 0)
|
||||||
|
{
|
||||||
|
SetErrorMessageAndLongIntAndBail("OpenSSL: Error reading data via ssl, SSL_read() = ",bytesRead);
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
tempString[bytesRead] = '\0';
|
||||||
|
|
||||||
|
printf("%s", tempString);
|
||||||
|
}
|
||||||
|
|
||||||
|
printf("\n\n\n");
|
||||||
|
|
||||||
|
// All done!
|
||||||
|
|
||||||
|
errCode = noErr;
|
||||||
|
|
||||||
|
|
||||||
|
EXITPOINT:
|
||||||
|
|
||||||
|
// Clean up and go home
|
||||||
|
|
||||||
|
if (theSocket >= 0)
|
||||||
|
{
|
||||||
|
MacSocket_close(theSocket);
|
||||||
|
}
|
||||||
|
|
||||||
|
if (ssl != nil)
|
||||||
|
{
|
||||||
|
SSL_free(ssl);
|
||||||
|
}
|
||||||
|
|
||||||
|
if (ssl_ctx != nil)
|
||||||
|
{
|
||||||
|
SSL_CTX_free(ssl_ctx);
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
if (errCode != noErr)
|
||||||
|
{
|
||||||
|
printf("An error occurred:\n");
|
||||||
|
|
||||||
|
printf("%s",GetErrorMessage());
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
MacSocket_Shutdown();
|
||||||
|
}
|
||||||
1607
MacOS/GetHTTPS.src/MacSocket.cpp
Normal file
1607
MacOS/GetHTTPS.src/MacSocket.cpp
Normal file
File diff suppressed because it is too large
Load Diff
103
MacOS/GetHTTPS.src/MacSocket.h
Normal file
103
MacOS/GetHTTPS.src/MacSocket.h
Normal file
@@ -0,0 +1,103 @@
|
|||||||
|
#pragma once
|
||||||
|
|
||||||
|
|
||||||
|
#ifdef __cplusplus
|
||||||
|
extern "C" {
|
||||||
|
#endif
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
enum
|
||||||
|
{
|
||||||
|
kMacSocket_TimeoutErr = -2
|
||||||
|
};
|
||||||
|
|
||||||
|
|
||||||
|
// Since MacSocket does busy waiting, I do a callback while waiting
|
||||||
|
|
||||||
|
typedef OSErr (*MacSocket_IdleWaitCallback)(void *);
|
||||||
|
|
||||||
|
|
||||||
|
// Call this before anything else!
|
||||||
|
|
||||||
|
OSErr MacSocket_Startup(void);
|
||||||
|
|
||||||
|
|
||||||
|
// Call this to cleanup before quitting
|
||||||
|
|
||||||
|
OSErr MacSocket_Shutdown(void);
|
||||||
|
|
||||||
|
|
||||||
|
// Call this to allocate a "socket" (reference number is returned in outSocketNum)
|
||||||
|
// Note that inDoThreadSwitching is pretty much irrelevant right now, since I ignore it
|
||||||
|
// The inTimeoutTicks parameter is applied during reads/writes of data
|
||||||
|
// The inIdleWaitCallback parameter specifies a callback which is called during busy-waiting periods
|
||||||
|
// The inUserRefPtr parameter is passed back to the idle-wait callback
|
||||||
|
|
||||||
|
OSErr MacSocket_socket(int *outSocketNum,const Boolean inDoThreadSwitching,const long inTimeoutTicks,MacSocket_IdleWaitCallback inIdleWaitCallback,void *inUserRefPtr);
|
||||||
|
|
||||||
|
|
||||||
|
// Call this to connect to an IP/DNS address
|
||||||
|
// Note that inTargetAddressAndPort is in "IP:port" format-- e.g. 10.1.1.1:123
|
||||||
|
|
||||||
|
OSErr MacSocket_connect(const int inSocketNum,char *inTargetAddressAndPort);
|
||||||
|
|
||||||
|
|
||||||
|
// Call this to listen on a port
|
||||||
|
// Since this a low-performance implementation, I allow a maximum of 1 (one!) incoming request when I listen
|
||||||
|
|
||||||
|
OSErr MacSocket_listen(const int inSocketNum,const int inPortNum);
|
||||||
|
|
||||||
|
|
||||||
|
// Call this to close a socket
|
||||||
|
|
||||||
|
OSErr MacSocket_close(const int inSocketNum);
|
||||||
|
|
||||||
|
|
||||||
|
// Call this to receive data on a socket
|
||||||
|
// Most parameters' purpose are obvious-- except maybe "inBlock" which controls whether I wait for data or return immediately
|
||||||
|
|
||||||
|
int MacSocket_recv(const int inSocketNum,void *outBuff,int outBuffLength,const Boolean inBlock);
|
||||||
|
|
||||||
|
|
||||||
|
// Call this to send data on a socket
|
||||||
|
|
||||||
|
int MacSocket_send(const int inSocketNum,void *inBuff,int inBuffLength);
|
||||||
|
|
||||||
|
|
||||||
|
// If zero bytes were read in a call to MacSocket_recv(), it may be that the remote end has done a half-close
|
||||||
|
// This function will let you check whether that's true or not
|
||||||
|
|
||||||
|
Boolean MacSocket_RemoteEndIsClosing(const int inSocketNum);
|
||||||
|
|
||||||
|
|
||||||
|
// Call this to see if the listen has completed after a call to MacSocket_listen()
|
||||||
|
|
||||||
|
Boolean MacSocket_ListenCompleted(const int inSocketNum);
|
||||||
|
|
||||||
|
|
||||||
|
// These really aren't very useful anymore
|
||||||
|
|
||||||
|
Boolean MacSocket_LocalEndIsOpen(const int inSocketNum);
|
||||||
|
Boolean MacSocket_RemoteEndIsOpen(const int inSocketNum);
|
||||||
|
|
||||||
|
|
||||||
|
// You may wish to change the userRefPtr for a socket callback-- use this to do it
|
||||||
|
|
||||||
|
void MacSocket_SetUserRefPtr(const int inSocketNum,void *inNewRefPtr);
|
||||||
|
|
||||||
|
|
||||||
|
// Call these to get the socket's IP:port descriptor
|
||||||
|
|
||||||
|
void MacSocket_GetLocalIPAndPort(const int inSocketNum,char *outIPAndPort,const int inIPAndPortLength);
|
||||||
|
void MacSocket_GetRemoteIPAndPort(const int inSocketNum,char *outIPAndPort,const int inIPAndPortLength);
|
||||||
|
|
||||||
|
|
||||||
|
// Call this to get error info from a socket
|
||||||
|
|
||||||
|
void MacSocket_GetSocketErrorInfo(const int inSocketNum,int *outSocketErrCode,char *outSocketErrString,const int inSocketErrStringMaxLength);
|
||||||
|
|
||||||
|
|
||||||
|
#ifdef __cplusplus
|
||||||
|
}
|
||||||
|
#endif
|
||||||
4940
MacOS/OpenSSL.mcp.hqx
Normal file
4940
MacOS/OpenSSL.mcp.hqx
Normal file
File diff suppressed because it is too large
Load Diff
476
MacOS/Randomizer.cpp
Normal file
476
MacOS/Randomizer.cpp
Normal file
@@ -0,0 +1,476 @@
|
|||||||
|
/*
|
||||||
|
------- Strong random data generation on a Macintosh (pre - OS X) ------
|
||||||
|
|
||||||
|
-- GENERAL: We aim to generate unpredictable bits without explicit
|
||||||
|
user interaction. A general review of the problem may be found
|
||||||
|
in RFC 1750, "Randomness Recommendations for Security", and some
|
||||||
|
more discussion, of general and Mac-specific issues has appeared
|
||||||
|
in "Using and Creating Cryptographic- Quality Random Numbers" by
|
||||||
|
Jon Callas (www.merrymeet.com/jon/usingrandom.html).
|
||||||
|
|
||||||
|
The data and entropy estimates provided below are based on my
|
||||||
|
limited experimentation and estimates, rather than by any
|
||||||
|
rigorous study, and the entropy estimates tend to be optimistic.
|
||||||
|
They should not be considered absolute.
|
||||||
|
|
||||||
|
Some of the information being collected may be correlated in
|
||||||
|
subtle ways. That includes mouse positions, timings, and disk
|
||||||
|
size measurements. Some obvious correlations will be eliminated
|
||||||
|
by the programmer, but other, weaker ones may remain. The
|
||||||
|
reliability of the code depends on such correlations being
|
||||||
|
poorly understood, both by us and by potential interceptors.
|
||||||
|
|
||||||
|
This package has been planned to be used with OpenSSL, v. 0.9.5.
|
||||||
|
It requires the OpenSSL function RAND_add.
|
||||||
|
|
||||||
|
-- OTHER WORK: Some source code and other details have been
|
||||||
|
published elsewhere, but I haven't found any to be satisfactory
|
||||||
|
for the Mac per se:
|
||||||
|
|
||||||
|
* The Linux random number generator (by Theodore Ts'o, in
|
||||||
|
drivers/char/random.c), is a carefully designed open-source
|
||||||
|
crypto random number package. It collects data from a variety
|
||||||
|
of sources, including mouse, keyboard and other interrupts.
|
||||||
|
One nice feature is that it explicitly estimates the entropy
|
||||||
|
of the data it collects. Some of its features (e.g. interrupt
|
||||||
|
timing) cannot be reliably exported to the Mac without using
|
||||||
|
undocumented APIs.
|
||||||
|
|
||||||
|
* Truerand by Don P. Mitchell and Matt Blaze uses variations
|
||||||
|
between different timing mechanisms on the same system. This
|
||||||
|
has not been tested on the Mac, but requires preemptive
|
||||||
|
multitasking, and is hardware-dependent, and can't be relied
|
||||||
|
on to work well if only one oscillator is present.
|
||||||
|
|
||||||
|
* Cryptlib's RNG for the Mac (RNDMAC.C by Peter Gutmann),
|
||||||
|
gathers a lot of information about the machine and system
|
||||||
|
environment. Unfortunately, much of it is constant from one
|
||||||
|
startup to the next. In other words, the random seed could be
|
||||||
|
the same from one day to the next. Some of the APIs are
|
||||||
|
hardware-dependent, and not all are compatible with Carbon (OS
|
||||||
|
X). Incidentally, the EGD library is based on the UNIX entropy
|
||||||
|
gathering methods in cryptlib, and isn't suitable for MacOS
|
||||||
|
either.
|
||||||
|
|
||||||
|
* Mozilla (and perhaps earlier versions of Netscape) uses the
|
||||||
|
time of day (in seconds) and an uninitialized local variable
|
||||||
|
to seed the random number generator. The time of day is known
|
||||||
|
to an outside interceptor (to within the accuracy of the
|
||||||
|
system clock). The uninitialized variable could easily be
|
||||||
|
identical between subsequent launches of an application, if it
|
||||||
|
is reached through the same path.
|
||||||
|
|
||||||
|
* OpenSSL provides the function RAND_screen(), by G. van
|
||||||
|
Oosten, which hashes the contents of the screen to generate a
|
||||||
|
seed. This is not useful for an extension or for an
|
||||||
|
application which launches at startup time, since the screen
|
||||||
|
is likely to look identical from one launch to the next. This
|
||||||
|
method is also rather slow.
|
||||||
|
|
||||||
|
* Using variations in disk drive seek times has been proposed
|
||||||
|
(Davis, Ihaka and Fenstermacher, world.std.com/~dtd/;
|
||||||
|
Jakobsson, Shriver, Hillyer and Juels,
|
||||||
|
www.bell-labs.com/user/shriver/random.html). These variations
|
||||||
|
appear to be due to air turbulence inside the disk drive
|
||||||
|
mechanism, and are very strongly unpredictable. Unfortunately
|
||||||
|
this technique is slow, and some implementations of it may be
|
||||||
|
patented (see Shriver's page above.) It of course cannot be
|
||||||
|
used with a RAM disk.
|
||||||
|
|
||||||
|
-- TIMING: On the 601 PowerPC the time base register is guaranteed
|
||||||
|
to change at least once every 10 addi instructions, i.e. 10
|
||||||
|
cycles. On a 60 MHz machine (slowest PowerPC) this translates to
|
||||||
|
a resolution of 1/6 usec. Newer machines seem to be using a 10
|
||||||
|
cycle resolution as well.
|
||||||
|
|
||||||
|
For 68K Macs, the Microseconds() call may be used. See Develop
|
||||||
|
issue 29 on the Apple developer site
|
||||||
|
(developer.apple.com/dev/techsupport/develop/issue29/minow.html)
|
||||||
|
for information on its accuracy and resolution. The code below
|
||||||
|
has been tested only on PowerPC based machines.
|
||||||
|
|
||||||
|
The time from machine startup to the launch of an application in
|
||||||
|
the startup folder has a variance of about 1.6 msec on a new G4
|
||||||
|
machine with a defragmented and optimized disk, most extensions
|
||||||
|
off and no icons on the desktop. This can be reasonably taken as
|
||||||
|
a lower bound on the variance. Most of this variation is likely
|
||||||
|
due to disk seek time variability. The distribution of startup
|
||||||
|
times is probably not entirely even or uncorrelated. This needs
|
||||||
|
to be investigated, but I am guessing that it not a majpor
|
||||||
|
problem. Entropy = log2 (1600/0.166) ~= 13 bits on a 60 MHz
|
||||||
|
machine, ~16 bits for a 450 MHz machine.
|
||||||
|
|
||||||
|
User-launched application startup times will have a variance of
|
||||||
|
a second or more relative to machine startup time. Entropy >~22
|
||||||
|
bits.
|
||||||
|
|
||||||
|
Machine startup time is available with a 1-second resolution. It
|
||||||
|
is predictable to no better a minute or two, in the case of
|
||||||
|
people who show up punctually to work at the same time and
|
||||||
|
immediately start their computer. Using the scheduled startup
|
||||||
|
feature (when available) will cause the machine to start up at
|
||||||
|
the same time every day, making the value predictable. Entropy
|
||||||
|
>~7 bits, or 0 bits with scheduled startup.
|
||||||
|
|
||||||
|
The time of day is of course known to an outsider and thus has 0
|
||||||
|
entropy if the system clock is regularly calibrated.
|
||||||
|
|
||||||
|
-- KEY TIMING: A very fast typist (120 wpm) will have a typical
|
||||||
|
inter-key timing interval of 100 msec. We can assume a variance
|
||||||
|
of no less than 2 msec -- maybe. Do good typists have a constant
|
||||||
|
rhythm, like drummers? Since what we measure is not the
|
||||||
|
key-generated interrupt but the time at which the key event was
|
||||||
|
taken off the event queue, our resolution is roughly the time
|
||||||
|
between process switches, at best 1 tick (17 msec). I therefore
|
||||||
|
consider this technique questionable and not very useful for
|
||||||
|
obtaining high entropy data on the Mac.
|
||||||
|
|
||||||
|
-- MOUSE POSITION AND TIMING: The high bits of the mouse position
|
||||||
|
are far from arbitrary, since the mouse tends to stay in a few
|
||||||
|
limited areas of the screen. I am guessing that the position of
|
||||||
|
the mouse is arbitrary within a 6 pixel square. Since the mouse
|
||||||
|
stays still for long periods of time, it should be sampled only
|
||||||
|
after it was moved, to avoid correlated data. This gives an
|
||||||
|
entropy of log2(6*6) ~= 5 bits per measurement.
|
||||||
|
|
||||||
|
The time during which the mouse stays still can vary from zero
|
||||||
|
to, say, 5 seconds (occasionally longer). If the still time is
|
||||||
|
measured by sampling the mouse during null events, and null
|
||||||
|
events are received once per tick, its resolution is 1/60th of a
|
||||||
|
second, giving an entropy of log2 (60*5) ~= 8 bits per
|
||||||
|
measurement. Since the distribution of still times is uneven,
|
||||||
|
this estimate is on the high side.
|
||||||
|
|
||||||
|
For simplicity and compatibility across system versions, the
|
||||||
|
mouse is to be sampled explicitly (e.g. in the event loop),
|
||||||
|
rather than in a time manager task.
|
||||||
|
|
||||||
|
-- STARTUP DISK TOTAL FILE SIZE: Varies typically by at least 20k
|
||||||
|
from one startup to the next, with 'minimal' computer use. Won't
|
||||||
|
vary at all if machine is started again immediately after
|
||||||
|
startup (unless virtual memory is on), but any application which
|
||||||
|
uses the web and caches information to disk is likely to cause
|
||||||
|
this much variation or more. The variation is probably not
|
||||||
|
random, but I don't know in what way. File sizes tend to be
|
||||||
|
divisible by 4 bytes since file format fields are often
|
||||||
|
long-aligned. Entropy > log2 (20000/4) ~= 12 bits.
|
||||||
|
|
||||||
|
-- STARTUP DISK FIRST AVAILABLE ALLOCATION BLOCK: As the volume
|
||||||
|
gets fragmented this could be anywhere in principle. In a
|
||||||
|
perfectly unfragmented volume this will be strongly correlated
|
||||||
|
with the total file size on the disk. With more fragmentation
|
||||||
|
comes less certainty. I took the variation in this value to be
|
||||||
|
1/8 of the total file size on the volume.
|
||||||
|
|
||||||
|
-- SYSTEM REQUIREMENTS: The code here requires System 7.0 and above
|
||||||
|
(for Gestalt and Microseconds calls). All the calls used are
|
||||||
|
Carbon-compatible.
|
||||||
|
*/
|
||||||
|
|
||||||
|
/*------------------------------ Includes ----------------------------*/
|
||||||
|
|
||||||
|
#include "Randomizer.h"
|
||||||
|
|
||||||
|
// Mac OS API
|
||||||
|
#include <Files.h>
|
||||||
|
#include <Folders.h>
|
||||||
|
#include <Events.h>
|
||||||
|
#include <Processes.h>
|
||||||
|
#include <Gestalt.h>
|
||||||
|
#include <Resources.h>
|
||||||
|
#include <LowMem.h>
|
||||||
|
|
||||||
|
// Standard C library
|
||||||
|
#include <stdlib.h>
|
||||||
|
#include <math.h>
|
||||||
|
|
||||||
|
/*---------------------- Function declarations -----------------------*/
|
||||||
|
|
||||||
|
// declared in OpenSSL/crypto/rand/rand.h
|
||||||
|
extern "C" void RAND_add (const void *buf, int num, double entropy);
|
||||||
|
|
||||||
|
unsigned long GetPPCTimer (bool is601); // Make it global if needed
|
||||||
|
// elsewhere
|
||||||
|
|
||||||
|
/*---------------------------- Constants -----------------------------*/
|
||||||
|
|
||||||
|
#define kMouseResolution 6 // Mouse position has to differ
|
||||||
|
// from the last one by this
|
||||||
|
// much to be entered
|
||||||
|
#define kMousePositionEntropy 5.16 // log2 (kMouseResolution**2)
|
||||||
|
#define kTypicalMouseIdleTicks 300.0 // I am guessing that a typical
|
||||||
|
// amount of time between mouse
|
||||||
|
// moves is 5 seconds
|
||||||
|
#define kVolumeBytesEntropy 12.0 // about log2 (20000/4),
|
||||||
|
// assuming a variation of 20K
|
||||||
|
// in total file size and
|
||||||
|
// long-aligned file formats.
|
||||||
|
#define kApplicationUpTimeEntropy 6.0 // Variance > 1 second, uptime
|
||||||
|
// in ticks
|
||||||
|
#define kSysStartupEntropy 7.0 // Entropy for machine startup
|
||||||
|
// time
|
||||||
|
|
||||||
|
|
||||||
|
/*------------------------ Function definitions ----------------------*/
|
||||||
|
|
||||||
|
CRandomizer::CRandomizer (void)
|
||||||
|
{
|
||||||
|
long result;
|
||||||
|
|
||||||
|
mSupportsLargeVolumes =
|
||||||
|
(Gestalt(gestaltFSAttr, &result) == noErr) &&
|
||||||
|
((result & (1L << gestaltFSSupports2TBVols)) != 0);
|
||||||
|
|
||||||
|
if (Gestalt (gestaltNativeCPUtype, &result) != noErr)
|
||||||
|
{
|
||||||
|
mIsPowerPC = false;
|
||||||
|
mIs601 = false;
|
||||||
|
}
|
||||||
|
else
|
||||||
|
{
|
||||||
|
mIs601 = (result == gestaltCPU601);
|
||||||
|
mIsPowerPC = (result >= gestaltCPU601);
|
||||||
|
}
|
||||||
|
mLastMouse.h = mLastMouse.v = -10; // First mouse will
|
||||||
|
// always be recorded
|
||||||
|
mLastPeriodicTicks = TickCount();
|
||||||
|
GetTimeBaseResolution ();
|
||||||
|
|
||||||
|
// Add initial entropy
|
||||||
|
AddTimeSinceMachineStartup ();
|
||||||
|
AddAbsoluteSystemStartupTime ();
|
||||||
|
AddStartupVolumeInfo ();
|
||||||
|
AddFiller ();
|
||||||
|
}
|
||||||
|
|
||||||
|
void CRandomizer::PeriodicAction (void)
|
||||||
|
{
|
||||||
|
AddCurrentMouse ();
|
||||||
|
AddNow (0.0); // Should have a better entropy estimate here
|
||||||
|
mLastPeriodicTicks = TickCount();
|
||||||
|
}
|
||||||
|
|
||||||
|
/*------------------------- Private Methods --------------------------*/
|
||||||
|
|
||||||
|
void CRandomizer::AddCurrentMouse (void)
|
||||||
|
{
|
||||||
|
Point mouseLoc;
|
||||||
|
unsigned long lastCheck; // Ticks since mouse was last
|
||||||
|
// sampled
|
||||||
|
|
||||||
|
#if TARGET_API_MAC_CARBON
|
||||||
|
GetGlobalMouse (&mouseLoc);
|
||||||
|
#else
|
||||||
|
mouseLoc = LMGetMouseLocation();
|
||||||
|
#endif
|
||||||
|
|
||||||
|
if (labs (mLastMouse.h - mouseLoc.h) > kMouseResolution/2 &&
|
||||||
|
labs (mLastMouse.v - mouseLoc.v) > kMouseResolution/2)
|
||||||
|
AddBytes (&mouseLoc, sizeof (mouseLoc),
|
||||||
|
kMousePositionEntropy);
|
||||||
|
|
||||||
|
if (mLastMouse.h == mouseLoc.h && mLastMouse.v == mouseLoc.v)
|
||||||
|
mMouseStill ++;
|
||||||
|
else
|
||||||
|
{
|
||||||
|
double entropy;
|
||||||
|
|
||||||
|
// Mouse has moved. Add the number of measurements for
|
||||||
|
// which it's been still. If the resolution is too
|
||||||
|
// coarse, assume the entropy is 0.
|
||||||
|
|
||||||
|
lastCheck = TickCount() - mLastPeriodicTicks;
|
||||||
|
if (lastCheck <= 0)
|
||||||
|
lastCheck = 1;
|
||||||
|
entropy = log2l
|
||||||
|
(kTypicalMouseIdleTicks/(double)lastCheck);
|
||||||
|
if (entropy < 0.0)
|
||||||
|
entropy = 0.0;
|
||||||
|
AddBytes (&mMouseStill, sizeof (mMouseStill), entropy);
|
||||||
|
mMouseStill = 0;
|
||||||
|
}
|
||||||
|
mLastMouse = mouseLoc;
|
||||||
|
}
|
||||||
|
|
||||||
|
void CRandomizer::AddAbsoluteSystemStartupTime (void)
|
||||||
|
{
|
||||||
|
unsigned long now; // Time in seconds since
|
||||||
|
// 1/1/1904
|
||||||
|
GetDateTime (&now);
|
||||||
|
now -= TickCount() / 60; // Time in ticks since machine
|
||||||
|
// startup
|
||||||
|
AddBytes (&now, sizeof (now), kSysStartupEntropy);
|
||||||
|
}
|
||||||
|
|
||||||
|
void CRandomizer::AddTimeSinceMachineStartup (void)
|
||||||
|
{
|
||||||
|
AddNow (1.5); // Uncertainty in app startup
|
||||||
|
// time is > 1.5 msec (for
|
||||||
|
// automated app startup).
|
||||||
|
}
|
||||||
|
|
||||||
|
void CRandomizer::AddAppRunningTime (void)
|
||||||
|
{
|
||||||
|
ProcessSerialNumber PSN;
|
||||||
|
ProcessInfoRec ProcessInfo;
|
||||||
|
|
||||||
|
ProcessInfo.processInfoLength = sizeof (ProcessInfoRec);
|
||||||
|
ProcessInfo.processName = nil;
|
||||||
|
ProcessInfo.processAppSpec = nil;
|
||||||
|
|
||||||
|
GetCurrentProcess (&PSN);
|
||||||
|
GetProcessInformation (&PSN, &ProcessInfo);
|
||||||
|
|
||||||
|
// Now add the amount of time in ticks that the current process
|
||||||
|
// has been active
|
||||||
|
|
||||||
|
AddBytes (&ProcessInfo, sizeof (ProcessInfoRec),
|
||||||
|
kApplicationUpTimeEntropy);
|
||||||
|
}
|
||||||
|
|
||||||
|
void CRandomizer::AddStartupVolumeInfo (void)
|
||||||
|
{
|
||||||
|
short vRefNum;
|
||||||
|
long dirID;
|
||||||
|
XVolumeParam pb;
|
||||||
|
OSErr err;
|
||||||
|
|
||||||
|
if (!mSupportsLargeVolumes)
|
||||||
|
return;
|
||||||
|
|
||||||
|
FindFolder (kOnSystemDisk, kSystemFolderType, kDontCreateFolder,
|
||||||
|
&vRefNum, &dirID);
|
||||||
|
pb.ioVRefNum = vRefNum;
|
||||||
|
pb.ioCompletion = 0;
|
||||||
|
pb.ioNamePtr = 0;
|
||||||
|
pb.ioVolIndex = 0;
|
||||||
|
err = PBXGetVolInfoSync (&pb);
|
||||||
|
if (err != noErr)
|
||||||
|
return;
|
||||||
|
|
||||||
|
// Base the entropy on the amount of space used on the disk and
|
||||||
|
// on the next available allocation block. A lot else might be
|
||||||
|
// unpredictable, so might as well toss the whole block in. See
|
||||||
|
// comments for entropy estimate justifications.
|
||||||
|
|
||||||
|
AddBytes (&pb, sizeof (pb),
|
||||||
|
kVolumeBytesEntropy +
|
||||||
|
log2l (((pb.ioVTotalBytes.hi - pb.ioVFreeBytes.hi)
|
||||||
|
* 4294967296.0D +
|
||||||
|
(pb.ioVTotalBytes.lo - pb.ioVFreeBytes.lo))
|
||||||
|
/ pb.ioVAlBlkSiz - 3.0));
|
||||||
|
}
|
||||||
|
|
||||||
|
/*
|
||||||
|
On a typical startup CRandomizer will come up with about 60
|
||||||
|
bits of good, unpredictable data. Assuming no more input will
|
||||||
|
be available, we'll need some more lower-quality data to give
|
||||||
|
OpenSSL the 128 bits of entropy it desires. AddFiller adds some
|
||||||
|
relatively predictable data into the soup.
|
||||||
|
*/
|
||||||
|
|
||||||
|
void CRandomizer::AddFiller (void)
|
||||||
|
{
|
||||||
|
struct
|
||||||
|
{
|
||||||
|
ProcessSerialNumber psn; // Front process serial
|
||||||
|
// number
|
||||||
|
RGBColor hiliteRGBValue; // User-selected
|
||||||
|
// highlight color
|
||||||
|
long processCount; // Number of active
|
||||||
|
// processes
|
||||||
|
long cpuSpeed; // Processor speed
|
||||||
|
long totalMemory; // Total logical memory
|
||||||
|
// (incl. virtual one)
|
||||||
|
long systemVersion; // OS version
|
||||||
|
short resFile; // Current resource file
|
||||||
|
} data;
|
||||||
|
|
||||||
|
GetNextProcess ((ProcessSerialNumber*) kNoProcess);
|
||||||
|
while (GetNextProcess (&data.psn) == noErr)
|
||||||
|
data.processCount++;
|
||||||
|
GetFrontProcess (&data.psn);
|
||||||
|
LMGetHiliteRGB (&data.hiliteRGBValue);
|
||||||
|
Gestalt (gestaltProcClkSpeed, &data.cpuSpeed);
|
||||||
|
Gestalt (gestaltLogicalRAMSize, &data.totalMemory);
|
||||||
|
Gestalt (gestaltSystemVersion, &data.systemVersion);
|
||||||
|
data.resFile = CurResFile ();
|
||||||
|
|
||||||
|
// Here we pretend to feed the PRNG completely random data. This
|
||||||
|
// is of course false, as much of the above data is predictable
|
||||||
|
// by an outsider. At this point we don't have any more
|
||||||
|
// randomness to add, but with OpenSSL we must have a 128 bit
|
||||||
|
// seed before we can start. We just add what we can, without a
|
||||||
|
// real entropy estimate, and hope for the best.
|
||||||
|
|
||||||
|
AddBytes (&data, sizeof(data), 8.0 * sizeof(data));
|
||||||
|
AddCurrentMouse ();
|
||||||
|
AddNow (1.0);
|
||||||
|
}
|
||||||
|
|
||||||
|
//------------------- LOW LEVEL ---------------------
|
||||||
|
|
||||||
|
void CRandomizer::AddBytes (void *data, long size, double entropy)
|
||||||
|
{
|
||||||
|
RAND_add (data, size, entropy * 0.125); // Convert entropy bits
|
||||||
|
// to bytes
|
||||||
|
}
|
||||||
|
|
||||||
|
void CRandomizer::AddNow (double millisecondUncertainty)
|
||||||
|
{
|
||||||
|
long time = SysTimer();
|
||||||
|
AddBytes (&time, sizeof (time), log2l (millisecondUncertainty *
|
||||||
|
mTimebaseTicksPerMillisec));
|
||||||
|
}
|
||||||
|
|
||||||
|
//----------------- TIMING SUPPORT ------------------
|
||||||
|
|
||||||
|
void CRandomizer::GetTimeBaseResolution (void)
|
||||||
|
{
|
||||||
|
#ifdef __powerc
|
||||||
|
long speed;
|
||||||
|
|
||||||
|
// gestaltProcClkSpeed available on System 7.5.2 and above
|
||||||
|
if (Gestalt (gestaltProcClkSpeed, &speed) != noErr)
|
||||||
|
// Only PowerPCs running pre-7.5.2 are 60-80 MHz
|
||||||
|
// machines.
|
||||||
|
mTimebaseTicksPerMillisec = 6000.0D;
|
||||||
|
// Assume 10 cycles per clock update, as in 601 spec. Seems true
|
||||||
|
// for later chips as well.
|
||||||
|
mTimebaseTicksPerMillisec = speed / 1.0e4D;
|
||||||
|
#else
|
||||||
|
// 68K VIA-based machines (see Develop Magazine no. 29)
|
||||||
|
mTimebaseTicksPerMillisec = 783.360D;
|
||||||
|
#endif
|
||||||
|
}
|
||||||
|
|
||||||
|
unsigned long CRandomizer::SysTimer (void) // returns the lower 32
|
||||||
|
// bit of the chip timer
|
||||||
|
{
|
||||||
|
#ifdef __powerc
|
||||||
|
return GetPPCTimer (mIs601);
|
||||||
|
#else
|
||||||
|
UnsignedWide usec;
|
||||||
|
Microseconds (&usec);
|
||||||
|
return usec.lo;
|
||||||
|
#endif
|
||||||
|
}
|
||||||
|
|
||||||
|
#ifdef __powerc
|
||||||
|
// The timebase is available through mfspr on 601, mftb on later chips.
|
||||||
|
// Motorola recommends that an 601 implementation map mftb to mfspr
|
||||||
|
// through an exception, but I haven't tested to see if MacOS actually
|
||||||
|
// does this. We only sample the lower 32 bits of the timer (i.e. a
|
||||||
|
// few minutes of resolution)
|
||||||
|
|
||||||
|
asm unsigned long GetPPCTimer (register bool is601)
|
||||||
|
{
|
||||||
|
cmplwi is601, 0 // Check if 601
|
||||||
|
bne _601 // if non-zero goto _601
|
||||||
|
mftb r3 // Available on 603 and later.
|
||||||
|
blr // return with result in r3
|
||||||
|
_601:
|
||||||
|
mfspr r3, spr5 // Available on 601 only.
|
||||||
|
// blr inserted automatically
|
||||||
|
}
|
||||||
|
#endif
|
||||||
43
MacOS/Randomizer.h
Normal file
43
MacOS/Randomizer.h
Normal file
@@ -0,0 +1,43 @@
|
|||||||
|
|
||||||
|
// Gathers unpredictable system data to be used for generating
|
||||||
|
// random bits
|
||||||
|
|
||||||
|
#include <MacTypes.h>
|
||||||
|
|
||||||
|
class CRandomizer
|
||||||
|
{
|
||||||
|
public:
|
||||||
|
CRandomizer (void);
|
||||||
|
void PeriodicAction (void);
|
||||||
|
|
||||||
|
private:
|
||||||
|
|
||||||
|
// Private calls
|
||||||
|
|
||||||
|
void AddTimeSinceMachineStartup (void);
|
||||||
|
void AddAbsoluteSystemStartupTime (void);
|
||||||
|
void AddAppRunningTime (void);
|
||||||
|
void AddStartupVolumeInfo (void);
|
||||||
|
void AddFiller (void);
|
||||||
|
|
||||||
|
void AddCurrentMouse (void);
|
||||||
|
void AddNow (double millisecondUncertainty);
|
||||||
|
void AddBytes (void *data, long size, double entropy);
|
||||||
|
|
||||||
|
void GetTimeBaseResolution (void);
|
||||||
|
unsigned long SysTimer (void);
|
||||||
|
|
||||||
|
// System Info
|
||||||
|
bool mSupportsLargeVolumes;
|
||||||
|
bool mIsPowerPC;
|
||||||
|
bool mIs601;
|
||||||
|
|
||||||
|
// Time info
|
||||||
|
double mTimebaseTicksPerMillisec;
|
||||||
|
unsigned long mLastPeriodicTicks;
|
||||||
|
|
||||||
|
// Mouse info
|
||||||
|
long mSamplePeriod;
|
||||||
|
Point mLastMouse;
|
||||||
|
long mMouseStill;
|
||||||
|
};
|
||||||
18
MacOS/TODO
Normal file
18
MacOS/TODO
Normal file
@@ -0,0 +1,18 @@
|
|||||||
|
-------------------------------------------------------------------
|
||||||
|
Verify server certificate
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Currently omitted from the project:
|
||||||
|
|
||||||
|
crypto/tmdiff.c
|
||||||
|
crypto/bio/bss_conn.c
|
||||||
|
crypto/bio/b_sock.c
|
||||||
|
crypto/bio/bss_acpt.c
|
||||||
|
crypto/bio/bss_log.h
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Build libraries to link with...
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Port openssl application.
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
BN optimizations (currently PPC version is compiled with BN_LLONG)
|
||||||
|
-------------------------------------------------------------------
|
||||||
9
MacOS/_MWERKS_GUSI_prefix.h
Normal file
9
MacOS/_MWERKS_GUSI_prefix.h
Normal file
@@ -0,0 +1,9 @@
|
|||||||
|
#include <MacHeaders.h>
|
||||||
|
#define B_ENDIAN
|
||||||
|
#ifdef __POWERPC__
|
||||||
|
#pragma longlong on
|
||||||
|
#endif
|
||||||
|
#if 1
|
||||||
|
#define MAC_OS_GUSI_SOURCE
|
||||||
|
#endif
|
||||||
|
#define MONOLITH
|
||||||
9
MacOS/_MWERKS_prefix.h
Normal file
9
MacOS/_MWERKS_prefix.h
Normal file
@@ -0,0 +1,9 @@
|
|||||||
|
#include <MacHeaders.h>
|
||||||
|
#define B_ENDIAN
|
||||||
|
#ifdef __POWERPC__
|
||||||
|
#pragma longlong on
|
||||||
|
#endif
|
||||||
|
#if 0
|
||||||
|
#define MAC_OS_GUSI_SOURCE
|
||||||
|
#endif
|
||||||
|
#define MONOLITH
|
||||||
5
MacOS/buildinf.h
Normal file
5
MacOS/buildinf.h
Normal file
@@ -0,0 +1,5 @@
|
|||||||
|
#ifndef MK1MF_BUILD
|
||||||
|
# define CFLAGS "-DB_ENDIAN"
|
||||||
|
# define PLATFORM "macos"
|
||||||
|
# define DATE "Sun Feb 27 19:44:16 MET 2000"
|
||||||
|
#endif
|
||||||
820
MacOS/mklinks.as.hqx
Normal file
820
MacOS/mklinks.as.hqx
Normal file
@@ -0,0 +1,820 @@
|
|||||||
|
(This file must be converted with BinHex 4.0)
|
||||||
|
|
||||||
|
:#QeVE'PZDh-ZBA-!39"36'&`E(3J!!!!!!!!!*LiI6m!!!!!!3!!!*G#!!#@3J!
|
||||||
|
!!AChFQPd!!!!K3)"!3m(Fh9`F'pbG!!!!)B#!3%$"(0eFQ8!!!#(!J-%"!3("3C
|
||||||
|
cGfPdBfJ!!!#)!J%"#39cH@jMD!!!!)N#"J%$!`-&"3-'FhPcG'9Y!!!!LJ)&"3)
|
||||||
|
%!J8("!-#!`4dB@*X!!!!L`))!3-$!`-$!`-$"(4PE'`!!!#-!J)"#38$G'KP!!!
|
||||||
|
!M3))(J)@!Ki#!J))!K)#!`)B!Kd%G'KPE3!!!)i#!J%&#`4dD'9j!!!!M`)#!J)
|
||||||
|
#$3TdD(*[G@GSEh9d!!!!N!!#!3%&"(4TCQB!!!#4!J%"!`4dD@eP!!!!NJ)"!JS
|
||||||
|
#!h4T!!!!'N!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!H!!!!!!!#!!!!!!
|
||||||
|
!!!!!!!!!!!!!rrrrr`!!!$3!!!!N!!!!!#"[!!5JAb"[!!5K++!M6R9$9'mJFR9
|
||||||
|
Z)(4SDA-JFf0bDA"d)'&`F'aTBf&dD@pZ,#"jEh8JEA9cG#"QDA*cG#"TER0dB@a
|
||||||
|
X)%&`F'aP8f0bDA"d,J!!!)C8D'Pc)(0MFQP`G#"MFQ9KG'9c)#iZ,fPZBfaeC'8
|
||||||
|
[Eh"PER0cE#"KEQ3JCQPXE(-JDA3JGfPdD#"ZC@0PFh0KFRNJB@aTBA0PFbi0$8P
|
||||||
|
d)'eTCfKd)(4KDf8JB5"hD'PXC5"dEb"MEfe`E'9dC5"cEb"`E'9KFf8JBQ8JF'&
|
||||||
|
dD@9ZG$SY+3!!!#S!!J!!!!!!$3!+!"!!!!!-!!!!!!!!!!!!63!0!!S!%!%!!!`
|
||||||
|
!!!!!!!!!!!!B!!!!+!!!!!!!!!!)!!!!)!#N2c`!!DR`!!!!l!!!!!&19[ri,`0
|
||||||
|
f!#m$-$bKVDG'*KmY52ri,`-`2+LITdBQ(b!ZrrLa`'FJ,`-J2'0`ER4"l[rm)NL
|
||||||
|
KV5+)*Kp+3'B)5Ulrr'F#GJ%3!bBZrr41ANje6PB!!#m-@Bm[2%j29%Nr2!#!U"m
|
||||||
|
SAb!-CJK`!cm!UFKJ+#m-UC)J9#!)d+J!'#&!!"JJ9#!)d+J!(#&!!"a9Mbm8)&q
|
||||||
|
JAMk!9%mSE[rm6Pj1G8j@!!![$%kkre4+!'FU@Bm[2'&`E(3[2(0MF(4`)DJU+&m
|
||||||
|
J$'F5@Bm[$#mm!!!!!A!!U#UTp&K26VVrG#KZrra1ANje!!!!('&`E(3!!!!"4P*
|
||||||
|
&4J!!!!!!J%P$6L-!!!!!!*B!!!!"!!!!!!G"8&"-!!!!!!!"!!!"!!!!!S!!!!4
|
||||||
|
!!!"i)!!!K"!!!3))!!)#"!!%"!)!#!J"!"!8!)!J)J"!3%%!)2#!J"#*!%!)KJ!
|
||||||
|
J")3!)!*!!"!")!!3!K!!%!3)!"!)"!!J%!)!3#!"!)"!!S%!J!5#!3!)4!)!#%J
|
||||||
|
%!!KB#!!%C"!!!m)J!!!"3!!!!)!!!!%!!!!$J!!!"m!!!(rJ!!$rm!!"rrJ!!rr
|
||||||
|
m!!IrrJ!2rrm!(rrrJ$rrrm"rrrrJrrrrm2rrrrMrrrrmrrrrrRrrrrmrrrrq(rr
|
||||||
|
rr!rrrrJ(rrr`!rrri!(rrm!$rrq!"rrr!!rrrJ!2rr`!$rri!!IRm!!$`q!!!!(
|
||||||
|
!!!!!J!!!!!)!!!!!!!!!!!m!!!!!!!!!!!!!!!!!!!$`m!!!!!!!!!!!!!!!!!!
|
||||||
|
2!!m!!!!!!!!!!!!!!!rrm!!!m!!!!!!!!!!!!!$`c0m!!!m!!!!!!!!!!!!2!!c
|
||||||
|
-m!!!m!!!!!!!!!!!m!$-cI!!!!m!!!!!!!!!$`!-c0m!!!!!m!!!!!!!!2!!c-h
|
||||||
|
`!!!!!!m!!!!!!!m!$-cIh`!!!!!!m!!!!!$`!-c0rGh`!!!!!!m!!!!2!!c-hph
|
||||||
|
-h`!!!!!!m!!!rrr-cIhF`-h`!!!!!!m!!2lFr0rGc!`-h`!!!!!!m!$pc-rph-$
|
||||||
|
!`-h`!!!!!!m!r-`2cF`-$!!-r3!!!!!!m!m!`-c!`-!!$0m!!!!!$-m!m!`-$!`
|
||||||
|
!!-cI!!!!!-c`!!m!`-$!!!`-h`!!!!c2!!!!m!`-!!$!c0m!!!$-m!!!!!m!`!!
|
||||||
|
-$-hm!!!-c`!!!!!!m!!!`-cIc!!!c2!!!!!!!!m!$!c0r-`!$-m!!!!!!!$pm-$
|
||||||
|
-hmc!!-c`!!!!!!!2hI`-cIc-!!c2!!!!!!!!rGc2c0r-`!$-m!!!!!!!!2h-cmh
|
||||||
|
mc!!-c`!!!!!!!!$mc!rIr-!!c2!!!!!!!!!!$m$2m!r-$-m!!!!!!!!!!!$rr`!
|
||||||
|
!r-c`!!!!!!!!!!!!!!!!!!r2!!!!!!!!!!!!!!!!!!!!m!!!!!!!!!!!!!"!!B!
|
||||||
|
13"%J)4"##18%Q)+3!%&!)5!L%%3BL#83*L!G3!#!!B!2`"rJ2r"rq2rmrrlrrhr
|
||||||
|
r2riIr"ri2r!ri"h!!)!!!!#!!!!!$r!!!!!!!2r`$`!!!!!2$!m!m!!!!2$!c`!
|
||||||
|
2!!!2$!c`!!$`!2r`cpm!!!m!rGrpc2!!!2$p$p`-c`!!$`m!`-$0m!$2!2!-$-h
|
||||||
|
`$2!!$`$-hm$2!!!2m-hm$2!!!2h2hm$2!!!!r-rm$2!!!!!2r`r2!!!!!!!!!2!
|
||||||
|
!!!!!!!#D8f0bDA"d)%&`F'aTBf&dD@pZ$3e8D'Pc)(0MFQP`G#"MFQ9KG'9c)#i
|
||||||
|
Z,fPZBfaeC'8[Eh"PER0cE#"KEQ3JCQPXE(-JDA3JGfPdD#"ZC@0PFh0KFRNJB@a
|
||||||
|
TBA0PFbi0$8Pd)'eTCfKd)(4KDf8JB5"hD'PXC5"dEb"MEfe`E'9dC5"cEb"`E'9
|
||||||
|
KFf8JBQ8JF'&dD@9ZG$SY+3!!!")!!J!!!!!!!!!!!!%!"J!'%iN!!!!+@1!!!b!
|
||||||
|
!!!-J!!!!!"3!+`!(!Cm#@!!V!!F"f!*B!!!!!3!!M`C'BA0N98&6)$%Z-6!a,M%
|
||||||
|
`$J!!!!32rrm!!3!#!!-"rrm!!!d!!3!"D`!!!!!!!!!%!J!%!!)!"3!'$3!&!!*
|
||||||
|
X!!)!!!U`!!IrrJd!"`!#6`!!!!!+X!!)!!N0!!J!!@X!!!!%#Um!#J)!#J!#!!X
|
||||||
|
!$!d!#`!#E!!#!!3!"2rprr`"rrd!!!(rr!!!!J!-!!)!$3!1$3!0!!*X!!%!"!!
|
||||||
|
%rrX!$`(rq`!!$!!2!&N!8b"(CA3JF'&dD#"dEb"dD'Pc)%&`F'aP8f0bDA"d)'&
|
||||||
|
`F'aPG$XJGA0P)'Pd)(4[)'C[FQdJG'KP)("KG'JJG'mJG'KP)'PZBfaeC'8JCQp
|
||||||
|
XC'9b!!)!!!)!$J!#!"!!%3d!%!!#E!!"!!3!"2rk!")"rrS!!!`!%J!Q!#!JB@j
|
||||||
|
N)(4SC5"[G'KPFL"bC@aPGQ&ZG#"QEfaNCA*c,J!#!!!#!"%!!J!6!"30!"-!!R-
|
||||||
|
!!!!%!"%!&3!@$3!9!!*M!!!!"!!1!"F!'!d!&`!#E!!&!!3!$!!CrrN0!"N!!Qi
|
||||||
|
!!!!%!!`!'J!E$3!D!!)d!!!!"3!-rrJ!(!Vrq!!%#Q0[BQS0!"`!!Q`!"3!'!!X
|
||||||
|
!(Irh$3!G!!0*!!)!"J!,rrB!([re#[rf!"JZC@&bFfCQC(*KE'Pc!!!!!!!!)!"
|
||||||
|
KCQ4b$3!H!!"Q!!!!"J!(![re!!!"rrF!!!d!'`!"E3!!!!3!"3!I$`!I!6J)ER9
|
||||||
|
XE!!!!!!!!Gq!rrm!!!!A"NCTEQ4PFJ!!(`*[Me!!ASfm!Qq,i!"HA[!!I&M!!!!
|
||||||
|
!!!!!'mi!!JN#!Qq-1!!!Kb%#Ei`J!!!!!%C14&*038e"3e-!!"%!B@aTF`!!!!!
|
||||||
|
!fJ!#!!!-6@&MD@jdEh0S)%K%!!!!!!!!!!!!!!!!!!!!XSA5h%*%!!!!!!!A"NC
|
||||||
|
TEQ4PFJ!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
|
||||||
|
!!!!!!!!!!!!!!!!!!!!!3rLc#@a!4Nj%8Ne"3e2rrrrr!!!!!!!!!!!!!!!!!!!
|
||||||
|
!!!!!!!e6HA0dC@dJ4QpXC'9b!!!"!!3!!!!A!!)!)8eKBfPZG'pcD#")4$T6HA0
|
||||||
|
dC@dJ4QpXC'9b1NCTEQ4PFJ$rr`!!!Irj!!!0!"J!!@d!!!!-!!hrp!Vrp!!%#Q0
|
||||||
|
dH(30!"B!!@m!!!!!!!$rm`[rm`!5-!!(G'KPF'&dD!!(G'KP8'&dD!)!&!!#!#!
|
||||||
|
!)3d!)!!#E!!#!")!%[rbrr%"rr)!!!(rm3!!!J!K!!)!)J!M$3!L!!*b!!!!%J!
|
||||||
|
A!#3!*3d!*!!#EJ!$!")!&3!Q!#F0!#B!!6%!!!!6!"Arm!Vrm!!%#R4iC'`0!#F
|
||||||
|
!!6%!!!!5!"2rl`Vrl`!%#Q&cBh)0!#8!!@m!!!!!!!$rlJ[rlJ!F-!!-G'KPEfa
|
||||||
|
NC'9XD@ec!!adD'92E'4%C@aTEA-#!#-!!J!S!#N0!#J!!R)!!!!B!"d!+J!V$3!
|
||||||
|
U!!&Y!!!!'!!C!#`-!#`!"`!"1J!#!!!0!#X!!Qi!!`!!!!!!,3!Z$3!Y!!%a!!!
|
||||||
|
!'J!Frqd+rqd!"!TdH'4X$3!Z!!%a!!!!'3!Drq`+rq`!"!TKFf0b!J!T!!)!,`!
|
||||||
|
`$3![!!*X!!)!(J!Hrq[rkJ(rk`!!!IrU!!!#!$!!!J!a!$)0!$%!!R)!!!!H!#X
|
||||||
|
!-`!d$3!c!!*X!!8!(J!T!$Ark3d!03!#EJ!!!"i!+3!f!$F0!$B!!cF"!!!I!#R
|
||||||
|
rk!!i!$N+rqJ!"!TMDA4Y$3!i!!&Y!!!!)`!PrqF$rqF!!3d!13!"E3!!!#B!+2r
|
||||||
|
Q!rrQrrd0!$F!!@m!!!!H!"rrj3[rj3!5-!!(G'KPF'&dD!!(G'KP8'&dD!(rk3!
|
||||||
|
!$3!d!!&[!!!!!!!!rq3,rq3!)$!!$R4SCA"bEfTPBh4`BA4S!!jdD'93FQpUC@0
|
||||||
|
d8'&dD!)!-J!#!$S!1`d!1J!#FJ!!!#`!1`!m!$d0!$`!!Q-!!!!X!$N!2J!r$3!
|
||||||
|
q!!*X!!8!,!!h!%$ri`d!3!!#EJ!!!#`!0`""!%)0!%%!!cF"!!!Y!$IriJ"$!%3
|
||||||
|
+rq)!"!TMDA4Y$3"$!!&Y!!!!-3!crq%$rq%!!3d!4!!"E3!!!$3!0[rJ!rrJrri
|
||||||
|
0!%)!!@m!!!!X!#hrh`[rh`!5-!!(G'KPF'&dD!!(G'KP8'&dD!(ri`!!$3!r!!&
|
||||||
|
Y!!!!0`!irpi+rpi!"!T849K8$3!p!!&[!!!!!!!!rpd,rpd!&M!!#A4SC@ePF'&
|
||||||
|
dD!!*G'KP6@93BA4S!J!l!!)!43"'$3"&!!*X!!)!2!!mrpcrf`(rh!!!!IrE!!!
|
||||||
|
#!%B!!J"(!%J0!%F!!R)!!!!m!%8!53"+$3"*!!*M!!!!2!""!%X!6!d!5`!#BJ!
|
||||||
|
!!$`!2`"0!%i0!%d!!@m!!!!m!$hrfJ[rfJ!J-!!1G'KPF(*[DQ9MG("KG'J!$R4
|
||||||
|
SC9"bEfTPBh43BA4S$3"1!!&Y!!!!23!q!%m-!%m!$3!(D@jME(9NC3!#!!!0!%`
|
||||||
|
!!@d!!!!r!%$rf3Vrf3!%#P4&@&30!%S!!@m!!!!!!!$rf![rf!!Q-!!4D@jME(9
|
||||||
|
NC@C[E'4PFR"KG'J!%@PZBfaeC'9'EfaNCA*3BA4S!J")!!)!8!"4$3"3!!*b!!!
|
||||||
|
!4J"9!&)!8`d!8J!#B`!!!%B!83"8!&80!&3!!Q)!!!"'!%m!9J"A$3"@!!*L!!!
|
||||||
|
!4J",!&J!@3d!@!!"E`!!!%B!4rrA#rrA!#!`!!jdD'9`FQpUC@0dF'&dD!!1G'K
|
||||||
|
P8(*[DQ9MG&"KG'J0!&N!!@d!!!"(!%S!@J`!@J!0!!GTEQ0XG@4P!!)!!!d!9`!
|
||||||
|
"E3!!!%X!6J"E$!"E!!d!"fp`C@jcFf`!!J!!$3"9!!&Y!!!!6`"3rpB+rpB!"!T
|
||||||
|
849K8$3"6!!&[!!!!!!!!rp8,rp8!0$!!''p`C@jcFfaTEQ0XG@4PCQpXC'9bF'&
|
||||||
|
dD!!BEh"PEP066%PZBfaeC'9'EfaNCA*3BA4S!J"4!!)!A!"G$3"F!!*b!!!!9J"
|
||||||
|
K!&i!A`d!AJ!#B`!!!&B!A3"J!'%0!'!!!Q)!!!"@!&X!BJ"M$3"L!!&[!!!!9J"
|
||||||
|
Arp3,rp3!)$!!$R4SCA"bEfTPBh4`BA4S!!jdD'93FQpUC@0d8'&dD!d!B`!"E3!
|
||||||
|
!!&F!@J"N$!"N!!`!"Q0bHA"dE`!#!!!0!'%!!@d!!!"E!&crd`Vrd`!%#P4&@&3
|
||||||
|
0!&m!!@m!!!!!!!$rdJ[rdJ!N-!!3Bh*jF(4[CQpXC'9bF'&dD!!3Bh*jF(4[4Qp
|
||||||
|
XC'9b8'&dD!)!A3!#!'8!CJd!C3!#FJ!!!')!E3"R!'J0!'F!!Q-!!!"L!'N!D3"
|
||||||
|
U$3"T!!*L!!!!BJ"R!'X!E!d!D`!"E`!!!')!Brr4#rr4!#!`!!jdD'9`FQpUC@0
|
||||||
|
dF'&dD!!1G'KP8(*[DQ9MG&"KG'J0!'`!!@d!!!"M!'B!E3`!E3!*!!0cFf`!!J!
|
||||||
|
!$3"U!!&Y!!!!C`"Srp!+rp!!"!T849K8$3"S!!&[!!!!!!!!rmm,rmm!(M!!$A0
|
||||||
|
cE'C[E'4PFR"KG'J!$A0cE%C[E'4PFP"KG'J#!'B!!J"Z!'m0!'i!!R)!!!"Z!(8
|
||||||
|
!F!"a$3"`!!*M!!!!EJ"a!()!F`d!FJ!"E`!!!'i!Err1#rr1!#!`!!jdD'9`FQp
|
||||||
|
UC@0dF'&dD!!1G'KP8(*[DQ9MG&"KG'J0!(-!!@d!!!"[!($rc3Vrc3!%#P4&@&3
|
||||||
|
0!(%!!@m!!!!!!!$rc![rc!!Q-!!4Eh"PER0cE'C[E'4PFR"KG'J!%@p`C@jcFfa
|
||||||
|
'EfaNCA*3BA4S!J"[!!)!G!"e$3"d!!*X!!)!GJ"frm[rbJ(rb`!!!Ir+!!!#!(8
|
||||||
|
!!J"f!(F0!(B!!R)!!!"f!(X!H!"j$3"i!!&[!!!!GJ"hrmN,rmN!($!!$(4SC@p
|
||||||
|
XC'4PE'PYF`!-G'KP6faN4'9XD@ec$3"j!!*Z!!-!!!!!!(S!H`d!HJ!"-3!!!(J
|
||||||
|
!H[r)#[r)!!3+G(KNE!d!H`!"-3!!!(F!H2r(#[r(!!3+BA0MFJ)!G`!#!(`!I3d
|
||||||
|
!I!!#E!!#!(`!I2r'rm8"rmB!!!(ra3!!!J"p!!)!IJ"r$3"q!!*X!!%!I!"mrm3
|
||||||
|
!J!(ra!!!$!#!!%!!1L"NC@aPG'8JEfaN)'PZBfaeC'8kEh"PER0cE#"QEfaNCA)
|
||||||
|
JB@jN)(*PBh*PBA4P)'Pd)'0XC@&ZE(N!!J!!!J"r!!)!J3##$3#"!!*X!!)!I!"
|
||||||
|
mrm2r`J(r``!!!Ir#!!!#!))!!J#$!)30!)-!!e%!!!"m!+8!K3#'!)F0!)8!!@X
|
||||||
|
!!!"r!*`!L!)!L!!#!)N!LJd!L3!$53!#!(m!N[r"!)[r`!Vr`3!B,QeTFf0cE'0
|
||||||
|
d+LSU+J!!!!!!!*!!!#SU+LS0!)X!!Qi!!!"r!)i!M!#0$3#-!!)d!!!!K`#1rlm
|
||||||
|
!MJVr[`!%#Q0QEf`0!)i!!@d!!!#+!)d!M``!M`!0!!G[F'9ZFh0X!!)!!!d!M3!
|
||||||
|
#0!!!!(m!Krqq!*!!#[qq!!3+BfC[E!d!N!!!!@m!!!#$!)Er[3[r[3!Q-!!4D@j
|
||||||
|
ME(9NC@C[E'4PFR"KG'J!%@PZBfaeC'9'EfaNCA*3BA4S![r!!!!#!)S!!J#4rl`
|
||||||
|
0!*%!!dN!!J#6!*crZ`#5rlS+rlX!'#jMEh*PC'9XEbSU+LS!!!!!!!#3!!!U+LS
|
||||||
|
U$3#5!!%a!!!!N`#BrlN+rlN!"!TcC@aP![qk!!!#rl`!!!d!KJ!$8J!!!!!!!2q
|
||||||
|
irlIrYJVrZ!!B,Q&cBh*PFR)J+LSU+J!!!!!!!*!!!#SU+LS"rlF!!!,rYJ!!$3#
|
||||||
|
(!!*X!!%!T!#Nrl8!N`(rY3!!$!#6!"-!$5"TCfj[FQ8JCA*bEh)!!J!!!J#%!!)
|
||||||
|
!P!#9$3#8!!*X!!)!TJ#Qrl6rX`(rY!!!!Iqc!!!#!*8!!J#@!*F0!*B!!dN!!J#
|
||||||
|
Q!,lrX[qa!*J+rl)!'#jMEh*PBh*PE#SU+LS!!!!!!!#3!!"ZG@aX!Iqa!!!'!*J
|
||||||
|
!!rq`!*N!QJVrX!!%#QY[Bf`0!*N!!@d!!!#U!+hrV`VrV`!%#Q0QEf`'!*S!!rq
|
||||||
|
Z!*[rV3VrVJ!%#QPZFfJ0!*X!!M3!!!#`!,MrV!#F#[qX!!3+BfC[E!d!R!!"E`!
|
||||||
|
!!,3!YrqV#rqV!#B`!"&TEQ0XG@4PCQpXC'9bF'&dD!!4D@jME(9NC8C[E'4PFP"
|
||||||
|
KG'J'rkd!!!)!P`!#!*d!RJd!R3!#FJ!!!,m!aJ#I!+!0!*m!!Q`"!!#r!-)!SIq
|
||||||
|
U$3#K!!%a!!!![`$#rkN+rkN!"!TbFfad!IqU!!!0!+!!!@m!!!!!!!$rU![rU!!
|
||||||
|
Z-!!9G'KPEQ9hCQpXC'9bFQ9QCA*PEQ0P!"9dD'91CAG'EfaNCA*5C@CPFQ9ZBf8
|
||||||
|
#!*i!!J#L!+-0!+)!!dN!!J$(!-lrT`#NrkB+rkF!'#jYDA0MFfaMG#SU+LS!!!!
|
||||||
|
!!!#3!!!U+LSU$3#N!!&[!!!!a`$+rk8,rk8!,M!!&A4SC@jPGfC[E'4PFR*PCQ9
|
||||||
|
bC@jMC3!9G'KP6Q9h4QpXC'9b8Q9QCA*PEQ0P![qQ!!!#!+-!!J#P!+B0!+8!!R)
|
||||||
|
!!!$2!0`!T`#S$3#R!!&Y!!!!c`$5!+N-!+N!$3!(Eh"PER0cE!!#!!!0!+J!!Qi
|
||||||
|
!!!!!!!!!UJ#V$3#U!!%a!!!!e`$Erk3+rk3!"!T`EQ&Y$3#V!!%a!!!!dJ$Ark-
|
||||||
|
+rk-!"!TcC@aP!J#Q!!)!V!#Y$3#X!!*X!!)!h3$Grk,rS3(rSJ!!!IqK!!!#!+d
|
||||||
|
!!J#Z!+m0!+i!!Q`!!3$G!0hrS!#`!IqJ!!!-!,!!(`!C)&0dBA*d)'eKDfPZCb"
|
||||||
|
dD'8JB@aTBA0PF`!#!!!#!+m!!J#a!,)0!,%!!dN!!J$G!3ArRrqH!,-+rjm!'#j
|
||||||
|
MEh*PBh*PE#SU+LS!!!!!!!#3!!"ZG@aX!IqH!!!'!,-!!rqG!,3!Y3VrR3!%#QY
|
||||||
|
[Bf`0!,3!!@d!!!$K!16rR!VrR!!%#Q&XD@%'!,8!!rqE!,B!Y`VrQ`!%#QPZFfJ
|
||||||
|
0!,B!!M3!!!$R!1rrQJ#i#[qD!!3+BfC[E!d!Z!!"E`!!!1X!l[qC#rqC!$3`!"K
|
||||||
|
[F'9ZFh0XD@jME(9NC@C[E'4PFR"KG'J!''p`C@j68da*EQ0XG@4P4QpXC'9b8'&
|
||||||
|
dD!B!Y`!$rjJ!ZIqA#[qB!!3+G'mJ)!d!Z3!#EJ!!!2)!r`#k!,X0!,S!!M3!!!$
|
||||||
|
i!2rrPJ#m#[q@!!3+CQPXC3d![!!"E3!!!2X!rJ#p$!#p!"-!$@p`C@jcFfaMEfj
|
||||||
|
Q,QJ!!J!!$3#l!!)d!!!!mJ$irj8![JVrP3!%#Q0QEf`0!,i!!@m!!!$f!2IrP![
|
||||||
|
rP!!@-!!*G'KPE@9`BA4S!!PdD'90C9"KG'J'rjF!!!)!XJ!#!,m!`!d![`!#E!!
|
||||||
|
#!3B""[q6rj)"rj-!!!(rNJ!!!J$!!!)!`3$#$3$"!!*b!!!""J%4!--!a!d!``!
|
||||||
|
#BJ!!!3B"$3$&!-B0!-8!!@m!!!%'!3RrN3[rN3!N-!!3Bh*jF(4[CQpXC'9bF'&
|
||||||
|
dD!!3Bh*jF(4[4QpXC'9b8'&dD!d!aJ!"E3!!!3N"$!$($!$(!!X!"6TKFfia!!)
|
||||||
|
!!!d!a!!"E`!!!!!!!2q3!![rN!!!&$!!#(4PEA"`BA4S!!KdC@e`8'&dD!)!`J!
|
||||||
|
#!-J!b3d!b!!$53!#!4)"22q2rii!bJVrM`!B,Q0[FQ9MFQ9X+LSU+J!!!!!!!*!
|
||||||
|
!!'jeE'`"rii!!!B!bJ!$rid!b`$-#[q0!!3+DfpME!d!b`!"E3!!!4B"'Iq-#[q
|
||||||
|
-!!3+B@aTB3B!c!!$riX!c3$1#[q,!!3+D@jcD!d!c3!#0!!!!4`"*2q+!-m+riS
|
||||||
|
!"!TMCQpX$3$2!!&[!!!")!%MriN,riN!0$!!''p`C@jcFfaTEQ0XG@4PCQpXC'9
|
||||||
|
bF'&dD!!BEh"PEP066%PZBfaeC'9'EfaNCA*3BA4S"J$1!!2rL!$3riF+riJ!"!T
|
||||||
|
dEb!J$3$3!!*Z!!!"*`%f!0%!dJd!d3!#0!!!!5m"0[q'!0-+riB!"!TQD@aP$3$
|
||||||
|
6!!&Y!!!"-J%e!03-!03!$!!'BA0Z-5jS!!)!!!d!dJ!#0!!!!5F",rq&!08+ri8
|
||||||
|
!"!TMCQpX$3$9!!&[!!!"+`%Zri3,ri3!&$!!#(4PEA"`BA4S!!KdC@e`8'&dD!E
|
||||||
|
rK`!!!J$*!!)!eJ$A$3$@!!0*!!)"23&Rri2rJJ$B#[q$!"JZBfpbC@0bC@`U+LS
|
||||||
|
U!!!!!!!!N!!!ER9XE!(rJJ!!"J$B!!2rJ3$C!0S+ri%!"!TVEf0X$3$C!!&Y!!!
|
||||||
|
"33&%ri!+ri!!"!TKE'PK"J$D!!2rI`$E!0`+rhm!"!TTER0S$3$E!!)d!!!"4`&
|
||||||
|
2rhi!h3VrIJ!%#Q0QEf`0!0d!!@m!!!&,!8lrI3[rI3!d-!!BEh"PER0cE'PZBfa
|
||||||
|
eC'9QEfaNCA*`BA4S!"K[F'9Z8e0-5@jME(9NC8C[E'4PFP"KG'J'!0`!!rpm!0l
|
||||||
|
rH`VrI!!%#R4[)#!0!0i!!Qi!!!&5!@%!h`$J$3$I!!)d!!!"@J&KrhS!i3VrHJ!
|
||||||
|
%#QCTE'80!1%!!@d!!!&G!@!!iJ`!iJ!3!!TKFfiaAfeKBbjS!!)!!!d!i!!#0!!
|
||||||
|
!!9)"@[pj!1-+rhN!"!TMCQpX$3$M!!&[!!!"9J&CrhJ,rhJ!&$!!#(4PEA"`BA4
|
||||||
|
S!!KdC@e`8'&dD!ErH`!!!J$A!!)!j!$P$3$N!!*X!!)"D!&SrhIrGJ(rG`!!!Ip
|
||||||
|
f!!!#!18!!J$Q!1F0!1B!!R)!!!&S!A-!k!$T$3$S!!*L!!!"D!&[!1S!k`d!kJ!
|
||||||
|
"E`!!!@J"Drpe#rpe!#3`!""MFRP`G'pQEfaNCA*`BA4S!""MFRP`G'p'EfaNCA*
|
||||||
|
3BA4S$3$V!!&Y!!!"D`&Z!1`-!1`!#J!%1Q*TE`!#!!!0!1N!!@m!!!!!!!$rG![
|
||||||
|
rG!!8-!!)G'9YF("KG'J!#(4PEA"3BA4S!J$R!!)!l3$Z$3$Y!!0*!!)"G!'Hrh2
|
||||||
|
rFJ$[#[pc!"JZBfpbC@0bC@`U+LSU!!!!!!!!N!!!ER9XE!(rFJ!!"J$[!!2rF3$
|
||||||
|
`!2%+rh%!"!TVEf0X$3$`!!&Y!!!"H!&lrh!+rh!!"!TKE'PK"J$a!!2rE`$b!2-
|
||||||
|
+rfm!"!TTER0S$3$b!!)d!!!"IJ''rfi!p!VrEJ!%#Q0QEf`0!23!!@m!!!'#!BA
|
||||||
|
rE3[rE3!d-!!BEh"PER0cE'PZBfaeC'9QEfaNCA*`BA4S!"K[F'9Z8e0-5@jME(9
|
||||||
|
NC8C[E'4PFP"KG'J'!2-!!rpX!2ArD`VrE!!%#R4[)#!0!28!!Qi!!!'*!CJ!pJ$
|
||||||
|
h$3$f!!)d!!!"N3'BrfS!q!VrDJ!%#QCTE'80!2J!!@d!!!'8!CF!q3`!q3!,!!9
|
||||||
|
LD@mZD!!#!!!0!2F!!M3!!!'*!C(rD3$k#[pT!!3+BfC[E!d!qJ!"E`!!!Bd"N!$
|
||||||
|
rD![rD!!8-!!)G'9YF("KG'J!#(4PEA"3BA4S"[pV!!!#!1i!!J$l!2`0!2X!!Q`
|
||||||
|
!!J'I!CrrCrpQ!IpR!!!"rfB!!!)!r!!#!2d!rJd!r3!#FJ!!!Cm"UJ$r!3!0!2m
|
||||||
|
!!Q)!!!'I!DB"!3%#$3%"!!&[!!!"R`'Lrf8,rf8!*$!!%'0bHA"dEfC[E'4PFR"
|
||||||
|
KG'J!%'0bHA"dEdC[E'4PFP"KG'J0!3)!!@d!!!'L!D8"!``"!`!*!!-kBQB!!J!
|
||||||
|
!$3%!!!&[!!!!!!!!rf3,rf3!&$!!#(4PEA"`BA4S!!KdC@e`8'&dD!)!rJ!#!33
|
||||||
|
""3d""!!$53!#!DX"eIpMrf)""JVrB`!B,Q0[FQ9MFQ9X+LSU+J!!!!!!!*!!!'j
|
||||||
|
eE'`"rf)!!!B""J!$rf%""`%)#[pK!!3+DfpME!d""`!"E3!!!Dm"X[pJ#[pJ!!3
|
||||||
|
+B@aTB3B"#!!$rem"#3%+#[pI!!3+D@jcD!d"#3!#0!!!!E8"[IpH!3X+rei!"!T
|
||||||
|
MCQpX$3%,!!&[!!!"Z3'mred,red!0$!!''p`C@jcFfaTEQ0XG@4PCQpXC'9bF'&
|
||||||
|
dD!!BEh"PEP066%PZBfaeC'9'EfaNCA*3BA4S"J%+!!2rA!%-reX+re`!"!TdEb!
|
||||||
|
J$3%-!!*Z!!!"`!(2!3d"$Jd"$3!#0!!!!FJ"crpD!3m+reS!"!TQD@aP$3%2!!&
|
||||||
|
Y!!!"b`(1!4!-!4!!%!!+BQa[GfCTFfJZD!!#!!!0!3i!!M3!!!(!!FMr@3%4#[p
|
||||||
|
C!!3+BfC[E!d"%3!"E`!!!F3"arpB#rpB!"3`!!KdC@e`F'&dD!!)G'9YF&"KG'J
|
||||||
|
'reX!!!)""3!#!4)"%`d"%J!#E!!#!GB"e[pAreB"reF!!!(r9J!!!J%6!!)"&!%
|
||||||
|
9$3%8!!*b!!!"eJ(K!4B"&`d"&J!#BJ!!!GB"h3%B!4N0!4J!!@m!!!(@!GRr93[
|
||||||
|
r93!N-!!3Bh*jF(4[CQpXC'9bF'&dD!!3Bh*jF(4[4QpXC'9b8'&dD!d"'3!"E3!
|
||||||
|
!!GN"h!%D$!%D!!N!!cTLEJ!#!!!0!4F!!@m!!!!!!!$r9![r9!!8-!!)G'9YF("
|
||||||
|
KG'J!#(4PEA"3BA4S!J%9!!)"'`%F$3%E!!0*!!)"iJ)-re2r8J%G#[p6!"JZBfp
|
||||||
|
bC@0bC@`U+LSU!!!!!!!!N!!!ER9XE!(r8J!!"J%G!!2r83%H!4m+re%!"!TVEf0
|
||||||
|
X$3%H!!&Y!!!"jJ(Tre!+re!!"!TKE'PK"J%I!!2r6`%J!5%+rdm!"!TTER0S$3%
|
||||||
|
J!!)d!!!"l!(drdi")JVr6J!%#Q0QEf`0!5)!!@m!!!(`!I2r63[r63!d-!!BEh"
|
||||||
|
PER0cE'PZBfaeC'9QEfaNCA*`BA4S!"K[F'9Z8e0-5@jME(9NC8C[E'4PFP"KG'J
|
||||||
|
'!5%!!rp-!52r5`Vr6!!%#R4[)#!0!5-!!Qi!!!(h!JB"*!%P$3%N!!)d!!!"r`)
|
||||||
|
'rdS"*JVr5J!%#QCTE'80!5B!!@d!!!)#!J8"*``"*`!+!!4LELjS!!)!!!d"*3!
|
||||||
|
#0!!!!IF"rrp*!5J+rdN!"!TMCQpX$3%S!!&[!!!"q`(qrdJ,rdJ!&$!!#(4PEA"
|
||||||
|
`BA4S!!KdC@e`8'&dD!Er5`!!!J%F!!)"+3%U$3%T!!*X!!)#$3)0rdIr4J(r4`!
|
||||||
|
!!Ip'!!!#!5S!!J%V!5`0!5X!!R)!!!)0!KJ",3%Z$3%Y!!*L!!!#$3)8!5m"-!d
|
||||||
|
",`!"E`!!!Jd#%2p&#rp&!#3`!""MFRP`G'pQEfaNCA*`BA4S!""MFRP`G'p'Efa
|
||||||
|
NCA*3BA4S$3%`!!&Y!!!#%!)6!6%-!6%!$3!(1Q*eCQCPFJ!#!!!0!5i!!@m!!!!
|
||||||
|
!!!$r4![r4!!8-!!)G'9YF("KG'J!#(4PEA"3BA4S!J%X!!)"-J%c$3%b!!0*!!)
|
||||||
|
#'3*$rd2r3J%d#[p$!"JZBfpbC@0bC@`U+LSU!!!!!!!!N!!!ER9XE!(r3J!!"J%
|
||||||
|
d!!2r33%e!6B+rd%!"!TVEf0X$3%e!!&Y!!!#(3)Jrd!+rd!!"!TKE'PK"J%f!!2
|
||||||
|
r2`%h!6J+rcm!"!TTER0S$3%h!!)d!!!#)`)Vrci"13Vr2J!%#Q0QEf`0!6N!!@m
|
||||||
|
!!!)R!LVr23[r23!d-!!BEh"PER0cE'PZBfaeC'9QEfaNCA*`BA4S!"K[F'9Z8e0
|
||||||
|
-5@jME(9NC8C[E'4PFP"KG'J'!6J!!rmm!6Vr1`Vr2!!%#R4[)#!0!6S!!Qi!!!)
|
||||||
|
Z!Md"1`%m$3%l!!)d!!!#0J)prcS"23Vr1J!%#QCTE'80!6d!!@d!!!)j!M`"2J`
|
||||||
|
"2J!1!!KLG@CQCA)ZD!!#!!!0!6`!!M3!!!)Z!MEr13%r#[mj!!3+BfC[E!d"2`!
|
||||||
|
"E`!!!M)#0Imi#rmi!"3`!!KdC@e`F'&dD!!)G'9YF&"KG'J'rcX!!!)"-`!#!8!
|
||||||
|
"33d"3!!#E!!#!N3#42mhrcB"rcF!!!(r0J!!!J&"!!)"3J&$$3&#!!*b!!!#4!*
|
||||||
|
2!83"43d"4!!#BJ!!!N3#5`&'!8F0!8B!!@m!!!*%!NIr03[r03!N-!!3Bh*jF(4
|
||||||
|
[CQpXC'9bF'&dD!!3Bh*jF(4[4QpXC'9b8'&dD!d"4`!"E3!!!NF#5J&)$!&)!!X
|
||||||
|
!"6TMBA0d!!)!!!d"43!"E`!!!!!!!2md#rmd!"3`!!KdC@e`F'&dD!!)G'9YF&"
|
||||||
|
KG'J#!8-!!J&*!8S0!8N!!dN!!J*3!RVr-rmb!8X+rc-!'#jMEh*PBh*PE#SU+LS
|
||||||
|
!!!!!!!#3!!"ZG@aX!Imb!!!'!8X!!rma!8`"63Vr-3!%#QY[Bf`0!8`!!@d!!!*
|
||||||
|
8!PIr-!Vr-!!%#Q&XD@%'!8d!!rm[!8i"6`Vr,`!%#QPZFfJ0!8i!!M3!!!*D!Q,
|
||||||
|
r,J&3#[mZ!!3+BfC[E!d"8!!"E`!!!Pi#BImY#rmY!$3`!"K[F'9ZFh0XD@jME(9
|
||||||
|
NC@C[E'4PFR"KG'J!''p`C@j68da*EQ0XG@4P4QpXC'9b8'&dD!B"6`!$rb`"8Im
|
||||||
|
V#[mX!!3+G'mJ)!d"83!#EJ!!!Q8#G!&5!9-0!9)!!M3!!!*Y!R6r+J&8#[mU!!3
|
||||||
|
+CQPXC3d"9!!"E3!!!R!#F`&9$!&9!!`!"Q0KFh3ZD!!#!!!0!9-!!M3!!!*P!Qh
|
||||||
|
r+3&@#[mT!!3+BfC[E!d"9J!"E`!!!QN#E2mS#rmS!"3`!!KdC@e`F'&dD!!)G'9
|
||||||
|
YF&"KG'J'rbX!!!)"5J!#!9F"@!d"9`!#E!!#!RX#HrmRrbB"rbF!!!(r*J!!!J&
|
||||||
|
B!!)"@3&D$3&C!!*b!!!#H`+'!9X"A!d"@`!#BJ!!!RX#JJ&G!9i0!9d!!@m!!!*
|
||||||
|
l!Rlr*3[r*3!N-!!3Bh*jF(4[CQpXC'9bF'&dD!!3Bh*jF(4[4QpXC'9b8'&dD!d
|
||||||
|
"AJ!"E3!!!Ri#J3&I$!&I!!X!"6TMEfe`!!)!!!d"A!!"E`!!!!!!!2mN#rmN!"3
|
||||||
|
`!!KdC@e`F'&dD!!)G'9YF&"KG'J#!9S!!J&J!@%0!@!!!dN!!J+(!V(r)rmL!@)
|
||||||
|
+rb-!'#jMEh*PBh*PE#SU+LS!!!!!!!#3!!"ZG@aX!ImL!!!'!@)!!rmK!@-"C!V
|
||||||
|
r)3!%#QY[Bf`0!@-!!@d!!!+,!Slr)!Vr)!!%#Q&XD@%'!@3!!rmI!@8"CJVr(`!
|
||||||
|
%#QPZFfJ0!@8!!M3!!!+4!TRr(J&R#[mH!!3+BfC[E!d"C`!"E`!!!T8#Q2mG#rm
|
||||||
|
G!$3`!"K[F'9ZFh0XD@jME(9NC@C[E'4PFR"KG'J!''p`C@j68da*EQ0XG@4P4Qp
|
||||||
|
XC'9b8'&dD!B"CJ!$ra`"D2mE#[mF!!3+G'mJ)!d"D!!#EJ!!!T`#U`&T!@S0!@N
|
||||||
|
!!M3!!!+N!U[r'J&V#[mD!!3+CQPXC3d"D`!"E3!!!UF#UJ&X$!&X!!`!"Q0[EA!
|
||||||
|
ZD!!#!!!0!@S!!M3!!!+F!U6r'3&Y#[mC!!3+BfC[E!d"E3!"E`!!!U!#SrmB#rm
|
||||||
|
B!"3`!!KdC@e`F'&dD!!)G'9YF&"KG'J'raX!!!)"B3!#!@i"E`d"EJ!#E!!#!V)
|
||||||
|
#X[mAraB"raF!!!(r&J!!!J&[!!)"F!&a$3&`!!*b!!!#XJ+p!A)"F`d"FJ!#BJ!
|
||||||
|
!!V)#Z3&d!A80!A3!!@m!!!+b!VAr&3[r&3!N-!!3Bh*jF(4[CQpXC'9bF'&dD!!
|
||||||
|
3Bh*jF(4[4QpXC'9b8'&dD!d"G3!"E3!!!V8#Z!&f$!&f!!X!"6TMEfjQ!!)!!!d
|
||||||
|
"F`!"E`!!!!!!!2m8#rm8!"3`!!KdC@e`F'&dD!!)G'9YF&"KG'J#!A%!!J&h!AJ
|
||||||
|
0!AF!!dN!!J+q!ZMr%rm5!AN+ra-!'#jMEh*PBh*PE#SU+LS!!!!!!!#3!!"ZG@a
|
||||||
|
X!Im5!!!'!AN!!rm4!AS"H`Vr%3!%#QY[Bf`0!AS!!@d!!!,#!XAr%!Vr%!!%#Q&
|
||||||
|
XD@%'!AX!!rm2!A`"I3Vr$`!%#QPZFfJ0!A`!!M3!!!,)!Y$r$J&q#[m1!!3+BfC
|
||||||
|
[E!d"IJ!"E`!!!X`#crm0#rm0!$3`!"K[F'9ZFh0XD@jME(9NC@C[E'4PFR"KG'J
|
||||||
|
!''p`C@j68da*EQ0XG@4P4QpXC'9b8'&dD!B"I3!$r``"Irm,#[m-!!3+G'mJ)!d
|
||||||
|
"I`!#EJ!!!Y-#iJ'!!B%0!B!!!M3!!!,E!Z,r#J'##[m+!!3+CQPXC3d"JJ!"E3!
|
||||||
|
!!Yi#i3'$$!'$!!`!"Q0[EQBZD!!#!!!0!B%!!M3!!!,6!Y[r#3'%#[m*!!3+BfC
|
||||||
|
[E!d"K!!"E`!!!YF#f[m)#rm)!"3`!!KdC@e`F'&dD!!)G'9YF&"KG'J'r`X!!!)
|
||||||
|
"H!!#!B8"KJd"K3!#E!!#!ZN#kIm(r`B"r`F!!!(r"J!!!J''!!)"K`')$3'(!!*
|
||||||
|
b!!!#k3,d!BN"LJd"L3!#BJ!!!ZN#m!',!B`0!BX!!@m!!!,T!Zcr"3[r"3!N-!!
|
||||||
|
3Bh*jF(4[CQpXC'9bF'&dD!!3Bh*jF(4[4QpXC'9b8'&dD!d"M!!"E3!!!Z`#l`'
|
||||||
|
0$!'0!!S!"$TNCA-!!J!!$3'+!!&[!!!!!!!!r`3,r`3!&$!!#(4PEA"`BA4S!!K
|
||||||
|
dC@e`8'&dD!)"L!!#!Bi"M`d"MJ!$53!#![8$(rm$r`)"N!!+r`-!'#jMEh*PBh*
|
||||||
|
PE#SU+LS!!!!!!!#3!!"ZG@aX!Im#!!!'!C!!!!2r!3'4!C)+r`%!"!TVEf0X$3'
|
||||||
|
4!!&Y!!!#q3,mr`!+r`!!"!TKE'PK"J'5!!2qr`'6!C3+r[m!"!TTER0S$3'6!!)
|
||||||
|
d!!!#r`-(r[i"P3VqrJ!%#Q0QEf`0!C8!!@m!!!-$!`Eqr3[qr3!d-!!BEh"PER0
|
||||||
|
cE'PZBfaeC'9QEfaNCA*`BA4S!"K[F'9Z8e0-5@jME(9NC8C[E'4PFP"KG'J'!C3
|
||||||
|
!!rlm!CEqq`Vqr!!%#R4[)#!0!CB!!Qi!!!-+!aN"P`'B$3'A!!)d!!!$%J-Cr[S
|
||||||
|
"Q3VqqJ!%#QCTE'80!CN!!@d!!!-9!aJ"QJ`"QJ!,!!9NCA-ZD!!#!!!0!CJ!!M3
|
||||||
|
!!!-+!a,qq3'E#[lj!!3+BfC[E!d"Q`!"E`!!!`i$%Ili#rli!"3`!!KdC@e`F'&
|
||||||
|
dD!!)G'9YF&"KG'J'r[X!!!)"M`!#!C`"R3d"R!!#E!!#!b!$)2lhr[B"r[F!!!(
|
||||||
|
qpJ!!!J'G!!)"RJ'I$3'H!!*b!!!$)!-V!D!"S3d"S!!#BJ!!!b!$*`'L!D-0!D)
|
||||||
|
!!@m!!!-J!b2qp3[qp3!N-!!3Bh*jF(4[CQpXC'9bF'&dD!!3Bh*jF(4[4QpXC'9
|
||||||
|
b8'&dD!d"S`!"E3!!!b-$*J'N$!'N!!N!!cTND!!#!!!0!D%!!@m!!!!!!!$qp![
|
||||||
|
qp!!8-!!)G'9YF("KG'J!#(4PEA"3BA4S!J'I!!)"T3'Q$3'P!!0*!!)$,!0@r[2
|
||||||
|
qmJ'R#[lc!"JZBfpbC@0bC@`U+LSU!!!!!!!!N!!!ER9XE!(qmJ!!"J'R!!2qm3'
|
||||||
|
S!DN+r[%!"!TVEf0X$3'S!!&Y!!!$-!-cr[!+r[!!"!TKE'PK"J'T!!2ql`'U!DX
|
||||||
|
+rZm!"!TTER0S$3'U!!)d!!!$0J-qrZi"V!VqlJ!%#Q0QEf`0!D`!!@m!!!-k!ch
|
||||||
|
ql3[ql3!d-!!BEh"PER0cE'PZBfaeC'9QEfaNCA*`BA4S!"K[F'9Z8e0-5@jME(9
|
||||||
|
NC8C[E'4PFP"KG'J'!DX!!rlX!Dhqk`Vql!!%#R4[)#!0!Dd!!Qi!!!0"!e!"VJ'
|
||||||
|
[$3'Z!!)d!!!$5303rZS"X!VqkJ!%#QCTE'80!E!!!@d!!!0-!dm"X3`"X3!+!!4
|
||||||
|
ND#jS!!)!!!d"V`!#0!!!!d%$5IlT!E)+rZN!"!TMCQpX$3'b!!&[!!!$430)rZJ
|
||||||
|
,rZJ!&$!!#(4PEA"`BA4S!!KdC@e`8'&dD!Eqk`!!!J'Q!!)"X`'d$3'c!!*X!!)
|
||||||
|
$9`0ArZIqjJ(qj`!!!IlQ!!!#!E3!!J'e!EB0!E8!!R)!!!0A!f)"Y`'i$3'h!!*
|
||||||
|
L!!!$9`0H!EN"ZJd"Z3!"E`!!!eF$@[lP#rlP!#3`!""MFRP`G'pQEfaNCA*`BA4
|
||||||
|
S!""MFRP`G'p'EfaNCA*3BA4S$3'k!!&Y!!!$@J0G!EX-!EX!#J!%1Q4cB3!#!!!
|
||||||
|
0!EJ!!@m!!!!!!!$qj![qj!!8-!!)G'9YF("KG'J!#(4PEA"3BA4S!J'f!!)"[!'
|
||||||
|
p$3'm!!0*!!)$B`10rZ2qiJ'q#[lM!"JZBfpbC@0bC@`U+LSU!!!!!!!!N!!!ER9
|
||||||
|
XE!(qiJ!!"J'q!!2qi3'r!F!+rZ%!"!TVEf0X$3'r!!&Y!!!$C`0UrZ!+rZ!!"!T
|
||||||
|
KE'PK"J(!!!2qh`("!F)+rYm!"!TTER0S$3("!!)d!!!$E30erYi"``VqhJ!%#Q0
|
||||||
|
QEf`0!F-!!@m!!!0a!h6qh3[qh3!d-!!BEh"PER0cE'PZBfaeC'9QEfaNCA*`BA4
|
||||||
|
S!"K[F'9Z8e0-5@jME(9NC8C[E'4PFP"KG'J'!F)!!rlF!F6qf`Vqh!!%#R4[)#!
|
||||||
|
0!F3!!Qi!!!0i!iF"a3('$3(&!!)d!!!$J!1(rYS"a`VqfJ!%#QCTE'80!FF!!@d
|
||||||
|
!!!1$!iB"b!`"b!!,!!9NFf%ZD!!#!!!0!FB!!M3!!!0i!i$qf3(*#[lC!!3+BfC
|
||||||
|
[E!d"b3!"E`!!!h`$IrlB#rlB!"3`!!KdC@e`F'&dD!!)G'9YF&"KG'J'rYX!!!)
|
||||||
|
"[3!#!FS"b`d"bJ!#E!!#!ii$M[lArYB"rYF!!!(qeJ!!!J(,!!)"c!(0$3(-!!*
|
||||||
|
b!!!$MJ1C!Fi"c`d"cJ!#BJ!!!ii$P3(3!G%0!G!!!@m!!!11!j(qe3[qe3!N-!!
|
||||||
|
3Bh*jF(4[CQpXC'9bF'&dD!!3Bh*jF(4[4QpXC'9b8'&dD!d"d3!"E3!!!j%$P!(
|
||||||
|
5$!(5!!S!"$TPFR)!!J!!$3(2!!&[!!!!!!!!rY3,rY3!&$!!#(4PEA"`BA4S!!K
|
||||||
|
dC@e`8'&dD!)"c3!#!G-"e!d"d`!$53!#!jS$a2l6rY)"e3Vqd`!B,Q0[FQ9MFQ9
|
||||||
|
X+LSU+J!!!!!!!*!!!'jeE'`"rY)!!!B"e3!$rY%"eJ(A#[l4!!3+DfpME!d"eJ!
|
||||||
|
"E3!!!ji$SIl3#[l3!!3+B@aTB3B"e`!$rXm"f!(C#[l2!!3+D@jcD!d"f!!#0!!
|
||||||
|
!!k3$V2l1!GS+rXi!"!TMCQpX$3(D!!&[!!!$U!1VrXd,rXd!0$!!''p`C@jcFfa
|
||||||
|
TEQ0XG@4PCQpXC'9bF'&dD!!BEh"PEP066%PZBfaeC'9'EfaNCA*3BA4S"J(C!!2
|
||||||
|
qc!(ErXX+rX`!"!TdEb!J$3(E!!*Z!!!$V`1q!G`"h3d"h!!#0!!!!lF$[[l+!Gi
|
||||||
|
+rXS!"!TQD@aP$3(H!!&Y!!!$ZJ1p!Gm-!Gm!#`!&CA*b,QJ!!J!!$3(G!!)d!!!
|
||||||
|
$V`1hrXN"i!Vqb3!%#Q0QEf`0!H!!!@m!!!1c!lEqb![qb!!8-!!)G'9YF("KG'J
|
||||||
|
!#(4PEA"3BA4S"[l,!!!#!G3!!J(K!H)0!H%!!Q`!!J2&!mAqarl'!Il(!!!"rXB
|
||||||
|
!!!)"iJ!#!H-"j!d"i`!#FJ!!!m8$d!(P!HB0!H8!!Q)!!!2&!m`"j`(S$3(R!!&
|
||||||
|
[!!!$a32)rX8,rX8!*$!!%'0bHA"dEfC[E'4PFR"KG'J!%'0bHA"dEdC[E'4PFP"
|
||||||
|
KG'J0!HJ!!@d!!!2)!mX"k3`"k3!+!!3kCAC`!!)!!!d"jJ!"E`!!!!!!!2l%#rl
|
||||||
|
%!"3`!!KdC@e`F'&dD!!)G'9YF&"KG'J#!H3!!J(U!HX0!HS!!dN!!J24!r[q`rl
|
||||||
|
#!H`+rX-!'#jMEh*PBh*PE#SU+LS!!!!!!!#3!!"ZG@aX!Il#!!!'!H`!!rl"!Hd
|
||||||
|
"lJVq`3!%#QY[Bf`0!Hd!!@d!!!29!pMq`!Vq`!!%#Q&XD@%'!Hi!!rkr!Hm"m!V
|
||||||
|
q[`!%#QPZFfJ0!Hm!!M3!!!2E!q2q[J(a#[kq!!3+BfC[E!d"m3!"E`!!!pm$i[k
|
||||||
|
p#rkp!$3`!"K[F'9ZFh0XD@jME(9NC@C[E'4PFR"KG'J!''p`C@j68da*EQ0XG@4
|
||||||
|
P4QpXC'9b8'&dD!B"m!!$rV`"m[kl#[km!!3+G'mJ)!d"mJ!#EJ!!!qB$p3(c!I3
|
||||||
|
0!I-!!M3!!!2Z!rAqZJ(e#[kk!!3+CQPXC3d"p3!"E3!!!r%$p!(f$!(f!!X!"@9
|
||||||
|
fF#jS!!)!!!d"p!!#0!!!!qB$l[kj!IF+rVN!"!TMCQpX$3(h!!&[!!!$kJ2YrVJ
|
||||||
|
,rVJ!&$!!#(4PEA"`BA4S!!KdC@e`8'&dD!EqZ`!!!J(V!!)"q!(j$3(i!!*X!!)
|
||||||
|
$r!2mrVIqYJ(qY`!!!Ikf!!!#!IN!!J(k!IX0!IS!!R)!!!2m"!F"r!(p$3(m!!*
|
||||||
|
L!!!$r!3$!Ii"r`d"rJ!"E`!!!r`$rrke#rke!#3`!""MFRP`G'pQEfaNCA*`BA4
|
||||||
|
S!""MFRP`G'p'EfaNCA*3BA4S$3(r!!&Y!!!$r`3#!J!-!J!!#`!&1QKYB@-!!J!
|
||||||
|
!$3(p!!&[!!!!!!!!rV3,rV3!&$!!#(4PEA"`BA4S!!KdC@e`8'&dD!)"q`!#!J%
|
||||||
|
#!Jd#!3!$53!#"!J%-[kcrV)#!`VqX`!B,Q0[FQ9MFQ9X+LSU+J!!!!!!!*!!!'j
|
||||||
|
eE'`"rV)!!!B#!`!$rV%#"!)&#[ka!!3+DfpME!d#"!!"E3!!"!`%$rk`#[k`!!3
|
||||||
|
+B@aTB3B#"3!$rUm#"J)(#[k[!!3+D@jcD!d#"J!#0!!!"")%'[kZ!JJ+rUi!"!T
|
||||||
|
MCQpX$3))!!&[!!!%&J3CrUd,rUd!0$!!''p`C@jcFfaTEQ0XG@4PCQpXC'9bF'&
|
||||||
|
dD!!BEh"PEP066%PZBfaeC'9'EfaNCA*3BA4S"J)(!!2qV!)*rUX+rU`!"!TdEb!
|
||||||
|
J$3)*!!*Z!!!%(33X!JS##`d##J!#0!!!"#8%,2kU!J`+rUS!"!TQD@aP$3)-!!&
|
||||||
|
Y!!!%+!3V!Jd-!Jd!$!!'D'eKBbjS!!)!!!d##`!#0!!!""d%*IkT!Ji+rUN!"!T
|
||||||
|
MCQpX$3)1!!&[!!!%)33NrUJ,rUJ!&$!!#(4PEA"`BA4S!!KdC@e`8'&dD!EqU`!
|
||||||
|
!!J)#!!)#$`)3$3)2!!*X!!)%-`3crUIqTJ(qT`!!!IkQ!!!#!K!!!J)4!K)0!K%
|
||||||
|
!!R)!!!3c"$i#%`)8$3)6!!*L!!!%-`3k!K8#&Jd#&3!"E`!!"$-%0[kP#rkP!#3
|
||||||
|
`!""MFRP`G'pQEfaNCA*`BA4S!""MFRP`G'p'EfaNCA*3BA4S$3)@!!&Y!!!%0J3
|
||||||
|
j!KF-!KF!#`!&1QPNC@%!!J!!$3)8!!&[!!!!!!!!rU3,rU3!&$!!#(4PEA"`BA4
|
||||||
|
S!!KdC@e`8'&dD!)#%J!#!KJ#'3d#'!!$53!#"$m%DIkMrU)#'JVqS`!B,Q0[FQ9
|
||||||
|
MFQ9X+LSU+J!!!!!!!*!!!'jeE'`"rU)!!!B#'J!$rU%#'`)F#[kK!!3+DfpME!d
|
||||||
|
#'`!"E3!!"%-%4[kJ#[kJ!!3+B@aTB3B#(!!$rTm#(3)H#[kI!!3+D@jcD!d#(3!
|
||||||
|
#0!!!"%N%8IkH!Km+rTi!"!TMCQpX$3)I!!&[!!!%6343rTd,rTd!0$!!''p`C@j
|
||||||
|
cFfaTEQ0XG@4PCQpXC'9bF'&dD!!BEh"PEP066%PZBfaeC'9'EfaNCA*3BA4S"J)
|
||||||
|
H!!2qR!)JrTX+rT`!"!TdEb!J$3)J!!*Z!!!%9!4M!L%#)Jd#)3!#0!!!"&`%Brk
|
||||||
|
D!L-+rTS!"!TQD@aP$3)M!!&Y!!!%A`4L!L3-!L3!$!!'D@4PB5jS!!)!!!d#)J!
|
||||||
|
#0!!!"&3%A2kC!L8+rTN!"!TMCQpX$3)P!!&[!!!%@!4ErTJ,rTJ!&$!!#(4PEA"
|
||||||
|
`BA4S!!KdC@e`8'&dD!EqQ`!!!J)C!!)#*J)R$3)Q!!*X!!)%DJ4UrTIqPJ(qP`!
|
||||||
|
!!Ik@!!!#!LF!!J)S!LN0!LJ!!R)!!!4U"(8#+J)V$3)U!!*L!!!%DJ4a!L`#,3d
|
||||||
|
#,!!"E`!!"'S%EIk9#rk9!#3`!""MFRP`G'pQEfaNCA*`BA4S!""MFRP`G'p'Efa
|
||||||
|
NCA*3BA4S$3)Y!!&Y!!!%E34`!Li-!Li!$!!'1QaSBA0S!!)!!!d#+`!"E`!!!!!
|
||||||
|
!!2k8#rk8!"3`!!KdC@e`F'&dD!!)G'9YF&"KG'J#!LN!!J)[!M!0!Lm!!dN!!J4
|
||||||
|
f"+$qNrk5!M%+rT-!'#jMEh*PBh*PE#SU+LS!!!!!!!#3!!"ZG@aX!Ik5!!!'!M%
|
||||||
|
!!rk4!M)#-`VqN3!%#QY[Bf`0!M)!!@d!!!4k"(hqN!!+rT!!!!3+B@aTB3B#-`!
|
||||||
|
$rSm#0!)e#[k2!!3+D@jcD!d#0!!#0!!!")!%L2k1!MB+rSi!"!TMCQpX$3)f!!&
|
||||||
|
[!!!%K!5(rSd,rSd!0$!!''p`C@jcFfaTEQ0XG@4PCQpXC'9bF'&dD!!BEh"PEP0
|
||||||
|
66%PZBfaeC'9'EfaNCA*3BA4S"J)e!!2qM!)hrSX+rS`!"!TdEb!J$3)h!!*Z!!!
|
||||||
|
%L`5D!MJ#13d#1!!#0!!!"*-%Q[k+!MS+rSS!"!TQD@aP$3)k!!&Y!!!%PJ5C!MX
|
||||||
|
-!MX!$3!(E'KKFfJZD!!#!!!0!MN!!M3!!!5,"*2qL3)m#[k*!!3+BfC[E!d#2!!
|
||||||
|
"E`!!")m%N[k)#rk)!"3`!!KdC@e`F'&dD!!)G'9YF&"KG'J'rSX!!!)#-!!#!Md
|
||||||
|
#2Jd#23!#E!!#"+%%SIk(rSB"rSF!!!(qKJ!!!J)q!!)#2`*!$3)r!!*b!!!%S35
|
||||||
|
X!N%#3Jd#33!#BJ!!"+%%U!*$!N30!N-!!@m!!!5K"+6qK3[qK3!N-!!3Bh*jF(4
|
||||||
|
[CQpXC'9bF'&dD!!3Bh*jF(4[4QpXC'9b8'&dD!d#4!!"E3!!"+3%T`*&$!*&!!S
|
||||||
|
!"$TYC$)!!J!!$3*#!!&[!!!!!!!!rS3,rS3!&$!!#(4PEA"`BA4S!!KdC@e`8'&
|
||||||
|
dD!)#3!!#!NB#4`d#4J!$53!#"+d%erk$rS)#5!VqJ`!B,Q0[FQ9MFQ9X+LSU+J!
|
||||||
|
!!!!!!*!!!'jeE'`"rS)!!!B#5!!$rS%#53*+#[k"!!3+DfpME!d#53!"E3!!",%
|
||||||
|
%Y2k!#[k!!!3+B@aTB3B#5J!$rRm#5`*-#[jr!!3+D@jcD!d#5`!#0!!!",F%[rj
|
||||||
|
q!Nd+rRi!"!TMCQpX$3*0!!&[!!!%Z`5qrRd,rRd!0$!!''p`C@jcFfaTEQ0XG@4
|
||||||
|
PCQpXC'9bF'&dD!!BEh"PEP066%PZBfaeC'9'EfaNCA*3BA4S"J*-!!2qI!*1rRX
|
||||||
|
+rR`!"!TdEb!J$3*1!!*Z!!!%`J64!Nm#8!d#6`!#0!!!"-S%dIjk!P%+rRS!"!T
|
||||||
|
QD@aP$3*4!!&Y!!!%c363!P)-!P)!#`!&E@3b,QJ!!J!!$3*3!!)d!!!%`J6+rRN
|
||||||
|
#8`VqH3!%#Q0QEf`0!P-!!@m!!!6'"-RqH![qH!!8-!!)G'9YF("KG'J!#(4PEA"
|
||||||
|
3BA4S"[jl!!!#!NF!!J*8!P80!P3!!Q`!!J6B"0MqGrjf!Ijh!!!"rRB!!!)#93!
|
||||||
|
#!PB#9`d#9J!#FJ!!"0J%i`*B!PN0!PJ!!Q)!!!6B"0m#@J*E$3*D!!&[!!!%f!6
|
||||||
|
ErR8,rR8!*$!!%'0bHA"dEfC[E'4PFR"KG'J!%'0bHA"dEdC[E'4PFP"KG'J0!PX
|
||||||
|
!!@d!!!6E"0i#A!`#A!!+!!3kE@3e!!)!!!d#@3!"E`!!!!!!!2jd#rjd!"3`!!K
|
||||||
|
dC@e`F'&dD!!)G'9YF&"KG'J#!PF!!J*G!Pi0!Pd!!dN!!J6N"3lqFrjb!Pm+rR-
|
||||||
|
!'#jMEh*PBh*PE#SU+LS!!!!!!!#3!!"ZG@aX!Ijb!!!'!Pm!!rja!Q!#B3VqF3!
|
||||||
|
%#QY[Bf`0!Q!!!@d!!!6S"1[qF!VqF!!%#Q&XD@%'!Q%!!rj[!Q)#B`VqE`!%#QP
|
||||||
|
ZFfJ0!Q)!!M3!!!6Z"2EqEJ*N#[jZ!!3+BfC[E!d#C!!"E`!!"2)%pIjY#rjY!$3
|
||||||
|
`!"K[F'9ZFh0XD@jME(9NC@C[E'4PFR"KG'J!''p`C@j68da*EQ0XG@4P4QpXC'9
|
||||||
|
b8'&dD!B#B`!$rQ`#CIjV#[jX!!3+G'mJ)!d#C3!#EJ!!"2N&#!*Q!QF0!QB!!M3
|
||||||
|
!!!8""3MqDJ*S#[jU!!3+CQPXC3d#D!!"E3!!"33&"`*T$!*T!!X!"@eN05jS!!)
|
||||||
|
!!!d#C`!#0!!!"2N&!IjT!QS+rQN!"!TMCQpX$3*U!!&[!!!%r38!rQJ,rQJ!&$!
|
||||||
|
!#(4PEA"`BA4S!!KdC@e`8'&dD!EqD`!!!J*H!!)#D`*X$3*V!!*X!!)&$`82rQI
|
||||||
|
qCJ(qC`!!!IjQ!!!#!Q`!!J*Y!Qi0!Qd!!R)!!!82"4S#E`*`$3*[!!*L!!!&$`8
|
||||||
|
@!R%#FJd#F3!"E`!!"3m&%[jP#rjP!#3`!""MFRP`G'pQEfaNCA*`BA4S!""MFRP
|
||||||
|
`G'p'EfaNCA*3BA4S$3*b!!&Y!!!&%J89!R--!R-!#`!&1QeNBc)!!J!!$3*`!!&
|
||||||
|
[!!!!!!!!rQ3,rQ3!&$!!#(4PEA"`BA4S!!KdC@e`8'&dD!)#EJ!#!R3#G3d#G!!
|
||||||
|
$53!#"4X&4IjMrQ)#GJVqB`!B,Q0[FQ9MFQ9X+LSU+J!!!!!!!*!!!'jeE'`"rQ)
|
||||||
|
!!!B#GJ!$rQ%#G`*i#[jK!!3+DfpME!d#G`!"E3!!"4m&)[jJ#[jJ!!3+B@aTB3B
|
||||||
|
#H!!$rPm#H3*k#[jI!!3+D@jcD!d#H3!#0!!!"58&,IjH!RX+rPi!"!TMCQpX$3*
|
||||||
|
l!!&[!!!&+38XrPd,rPd!0$!!''p`C@jcFfaTEQ0XG@4PCQpXC'9bF'&dD!!BEh"
|
||||||
|
PEP066%PZBfaeC'9'EfaNCA*3BA4S"J*k!!2qA!*mrPX+rP`!"!TdEb!J$3*m!!*
|
||||||
|
Z!!!&-!8r!Rd#IJd#I3!#0!!!"6J&2rjD!Rm+rPS!"!TQD@aP$3*r!!&Y!!!&1`8
|
||||||
|
q!S!-!S!!$!!'E@4M-LjS!!)!!!d#IJ!#0!!!"6!&12jC!S%+rPN!"!TMCQpX$3+
|
||||||
|
"!!&[!!!&0!8hrPJ,rPJ!&$!!#(4PEA"`BA4S!!KdC@e`8'&dD!Eq@`!!!J*e!!)
|
||||||
|
#JJ+$$3+#!!*X!!)&4J9'rPIq9J(q9`!!!Ij@!!!#!S-!!J+%!S80!S3!!R)!!!9
|
||||||
|
'"9%#KJ+($3+'!!*L!!!&4J90!SJ#L3d#L!!"E`!!"8B&5Ij9#rj9!#3`!""MFRP
|
||||||
|
`G'pQEfaNCA*`BA4S!""MFRP`G'p'EfaNCA*3BA4S$3+*!!&Y!!!&539-!SS-!SS
|
||||||
|
!$J!)1QpLDQ9MG(-!!J!!$3+(!!&[!!!!!!!!rP3,rP3!&$!!#(4PEA"`BA4S!!K
|
||||||
|
dC@e`8'&dD!)#K3!#!SX#M!d#L`!$53!#"9)&I2j6rP)#M3Vq8`!B,Q0[FQ9MFQ9
|
||||||
|
X+LSU+J!!!!!!!*!!!'jeE'`"rP)!!!B#M3!$rP%#MJ+2#[j4!!3+DfpME!d#MJ!
|
||||||
|
"E3!!"9B&@Ij3#[j3!!3+B@aTB3B#M`!$rNm#N!!#N3Vq6`!%#QPZFfJ0!T!!!!)
|
||||||
|
d!!!&A!9NrNi#NJVq6J!%#Q0QEf`0!T)!!@m!!!9J"@2q63[q63!d-!!BEh"PER0
|
||||||
|
cE'PZBfaeC'9QEfaNCA*`BA4S!"K[F'9Z8e0-5@jME(9NC8C[E'4PFP"KG'J'!T%
|
||||||
|
!!rj-!T2q5`Vq6!!%#R4[)#!0!T-!!Qi!!!9R"AB#P!+9$3+8!!)d!!!&E`9frNS
|
||||||
|
#PJVq5J!%#QCTE'80!TB!!@d!!!9b"A8#P``#P`!2!!P[BQTPBh4c,QJ!!J!!$3+
|
||||||
|
9!!)d!!!&C`9[rNN#Q!Vq53!%#Q0QEf`0!TJ!!@m!!!9V"@lq5![q5!!8-!!)G'9
|
||||||
|
YF("KG'J!#(4PEA"3BA4S"[j,!!!#!S`!!J+C!TS0!TN!!Q`!!J9p"Ahq4rj'!Ij
|
||||||
|
(!!!"rNB!!!)#QJ!#!TX#R!d#Q`!#FJ!!"Ad&L!+G!Ti0!Td!!Q)!!!9p"B3#R`+
|
||||||
|
J$3+I!!&[!!!&I3@!rN8,rN8!*$!!%'0bHA"dEfC[E'4PFR"KG'J!%'0bHA"dEdC
|
||||||
|
[E'4PFP"KG'J0!U!!!@d!!!@!"B-#S3`#S3!+!!3kF'9Y!!)!!!d#RJ!"E`!!!!!
|
||||||
|
!!2j%#rj%!"3`!!KdC@e`F'&dD!!)G'9YF&"KG'J#!T`!!J+L!U-0!U)!!dN!!J@
|
||||||
|
*"E2q3rj#!U3+rN-!'#jMEh*PBh*PE#SU+LS!!!!!!!#3!!"ZG@aX!Ij#!!!'!U3
|
||||||
|
!!rj"!U8#TJVq33!%#QY[Bf`0!U8!!@d!!!@0"C!!rN!+rN!!"!TKE'PK"J+Q!!2
|
||||||
|
q2`+R!UJ+rMm!"!TTER0S$3+R!!)d!!!&N`@ErMi#U3Vq2J!%#Q0QEf`0!UN!!@m
|
||||||
|
!!!@A"CVq23[q23!d-!!BEh"PER0cE'PZBfaeC'9QEfaNCA*`BA4S!"K[F'9Z8e0
|
||||||
|
-5@jME(9NC8C[E'4PFP"KG'J'!UJ!!rim!UVq1`Vq2!!%#R4[)#!0!US!!Qi!!!@
|
||||||
|
H"Dd#U`+X$3+V!!)d!!!&TJ@YrMS#V3Vq1J!%#QCTE'80!Ud!!@d!!!@T"D`#VJ`
|
||||||
|
#VJ!,!!9`C@dZD!!#!!!0!U`!!M3!!!@H"DEq13+[#[ij!!3+BfC[E!d#V`!"E`!
|
||||||
|
!"D)&TIii#rii!"3`!!KdC@e`F'&dD!!)G'9YF&"KG'J'rMX!!!)#S`!#!V!#X3d
|
||||||
|
#X!!$53!#"E3&h[ihrMB#XJVq0`!B,Q0[FQ9MFQ9X+LSU+J!!!!!!!*!!!'jeE'`
|
||||||
|
"rMB!!!B#XJ!$rM8#X`+d#[ie!!3+DfpME!d#X`!"E3!!"EJ&Zrid#[id!!3+B@a
|
||||||
|
TB3B#Y!!$rM-#Y3+f#[ic!!3+D@jcD!d#Y3!#0!!!"Ei&a[ib!VF+rM)!"!TMCQp
|
||||||
|
X$3+h!!&[!!!&`JA&rM%,rM%!0$!!''p`C@jcFfaTEQ0XG@4PCQpXC'9bF'&dD!!
|
||||||
|
BEh"PEP066%PZBfaeC'9'EfaNCA*3BA4S"J+f!!2q-!+irLm+rM!!"!TdEb!J$3+
|
||||||
|
i!!*Z!!!&b3AB!VN#ZJd#Z3!#0!!!"G%&f2iZ!VX+rLi!"!TQD@aP$3+l!!&Y!!!
|
||||||
|
&e!AA!V`-!V`!$!!'F'9Y-LjS!!)!!!d#ZJ!#0!!!"FN&dIiY!Vd+rLd!"!TMCQp
|
||||||
|
X$3+p!!&[!!!&c3A3rL`,rL`!&$!!#(4PEA"`BA4S!!KdC@e`8'&dD!Eq,`!!!J+
|
||||||
|
a!!)#[J+r$3+q!!*X!!)&h`AIrL[q+J(q+`!!!IiU!!!#!Vm!!J,!!X%0!X!!!R)
|
||||||
|
!!!AI"HS#`J,$$3,#!!*L!!!&h`AQ!X3#a3d#a!!"E`!!"Gm&i[iT#riT!#3`!""
|
||||||
|
MFRP`G'pQEfaNCA*`BA4S!""MFRP`G'p'EfaNCA*3BA4S$3,&!!&Y!!!&iJAP!XB
|
||||||
|
-!XB!$3!(1R"VBh-a-J!#!!!0!X-!!@m!!!!!!!$q+![q+!!8-!!)G'9YF("KG'J
|
||||||
|
!#(4PEA"3BA4S!J,"!!)#a`,)$3,(!!0*!!)&k`B9rLIq*J,*#[iR!"JZBfpbC@0
|
||||||
|
bC@`U+LSU!!!!!!!!N!!!ER9XE!(q*J!!"J,*!!2q*3,+!XX+rL8!"!TVEf0X$3,
|
||||||
|
+!!&Y!!!&l`AbrL3+rL3!"!TKE'PK"J,,!!2q)`,-!Xd+rL-!"!TTER0S$3,-!!)
|
||||||
|
d!!!&p3AprL)#cJVq)J!%#Q0QEf`0!Xi!!@m!!!Aj"Icq)3[q)3!d-!!BEh"PER0
|
||||||
|
cE'PZBfaeC'9QEfaNCA*`BA4S!"K[F'9Z8e0-5@jME(9NC8C[E'4PFP"KG'J'!Xd
|
||||||
|
!!riJ!Xrq(`Vq)!!%#R4[)#!0!Xm!!Qi!!!B!"Jm#d!,4$3,3!!)d!!!'#!B2rKi
|
||||||
|
#dJVq(J!%#QCTE'80!Y)!!@d!!!B,"Ji#d``#d`!1!!K`Df0c-6)ZD!!#!!!0!Y%
|
||||||
|
!!M3!!!B!"JMq(3,8#[iG!!3+BfC[E!d#e!!"E`!!"J3'"riF#riF!"3`!!KdC@e
|
||||||
|
`F'&dD!!)G'9YF&"KG'J'rKm!!!)#b!!#!Y8#eJd#e3!#E!!#"KB'&[iErKS"rKX
|
||||||
|
!!!(q'J!!!J,@!!)#e`,B$3,A!!*b!!!'&JBK!YN#fJd#f3!#BJ!!"KB'(3,E!Y`
|
||||||
|
0!YX!!@m!!!B@"KRq'3[q'3!N-!!3Bh*jF(4[CQpXC'9bF'&dD!!3Bh*jF(4[4Qp
|
||||||
|
XC'9b8'&dD!d#h!!"E3!!"KN'(!,G$!,G!!`!"MT`Df0c0`!#!!!0!YS!!@m!!!!
|
||||||
|
!!!$q'![q'!!8-!!)G'9YF("KG'J!#(4PEA"3BA4S!J,B!!)#hJ,I$3,H!!0*!!)
|
||||||
|
')JC-rKIq&J,J#[iA!"JZBfpbC@0bC@`U+LSU!!!!!!!!N!!!ER9XE!(q&J!!"J,
|
||||||
|
J!!2q&3,K!Z)+rK8!"!TVEf0X$3,K!!&Y!!!'*JBTrK3+rK3!"!TKE'PK"J,L!!2
|
||||||
|
q%`,M!Z3+rK-!"!TTER0S$3,M!!)d!!!',!BdrK)#j3Vq%J!%#Q0QEf`0!Z8!!@m
|
||||||
|
!!!B`"M2q%3[q%3!d-!!BEh"PER0cE'PZBfaeC'9QEfaNCA*`BA4S!"K[F'9Z8e0
|
||||||
|
-5@jME(9NC8C[E'4PFP"KG'J'!Z3!!ri3!ZEq$`Vq%!!%#R4[)#!0!ZB!!Qi!!!B
|
||||||
|
h"NB#j`,S$3,R!!)d!!!'2`C'rJi#k3Vq$J!%#QCTE'80!ZN!!@d!!!C#"N8#kJ`
|
||||||
|
#kJ!0!!G`Df0c0bjS!!)!!!d#k!!#0!!!"MF'2ri0!ZX+rJd!"!TMCQpX$3,V!!&
|
||||||
|
[!!!'1`BqrJ`,rJ`!&$!!#(4PEA"`BA4S!!KdC@e`8'&dD!Eq$`!!!J,I!!)#l!,
|
||||||
|
Y$3,X!!*X!!)'63C0rJ[q#J(q#`!!!Ii+!!!#!Zd!!J,Z!Zm0!Zi!!R)!!!C0"PJ
|
||||||
|
#m!,a$3,`!!*L!!!'63C8![)#m`d#mJ!"E`!!"Nd'82i*#ri*!#3`!""MFRP`G'p
|
||||||
|
QEfaNCA*`BA4S!""MFRP`G'p'EfaNCA*3BA4S$3,c!!&Y!!!'8!C6![3-![3!#`!
|
||||||
|
&1R*KEQ3!!J!!$3,a!!&[!!!!!!!!rJJ,rJJ!&$!!#(4PEA"`BA4S!!KdC@e`8'&
|
||||||
|
dD!)#l`!#![8#pJd#p3!$53!#"PN'Jri(rJB#p`Vq"`!B,Q0[FQ9MFQ9X+LSU+J!
|
||||||
|
!!!!!!*!!!'jeE'`"rJB!!!B#p`!$rJ8#q!,j#[i&!!3+DfpME!d#q!!"E3!!"Pd
|
||||||
|
'B2i%#[i%!!3+B@aTB3B#q3!$rJ-#qJ,l#[i$!!3+D@jcD!d#qJ!#0!!!"Q-'Dri
|
||||||
|
#![`+rJ)!"!TMCQpX$3,m!!&[!!!'C`CUrJ%,rJ%!0$!!''p`C@jcFfaTEQ0XG@4
|
||||||
|
PCQpXC'9bF'&dD!!BEh"PEP066%PZBfaeC'9'EfaNCA*3BA4S"J,l!!2q!!,prIm
|
||||||
|
+rJ!!"!TdEb!J$3,p!!*Z!!!'EJCp![i#r`d#rJ!#0!!!"RB'IIhq!`!+rIi!"!T
|
||||||
|
QD@aP$3-!!!&Y!!!'H3Cm!`%-!`%!$!!'FQ&ZC#jS!!)!!!d#r`!#0!!!"Qi'G[h
|
||||||
|
p!`)+rId!"!TMCQpX$3-#!!&[!!!'FJCerI`,rI`!&$!!#(4PEA"`BA4S!!KdC@e
|
||||||
|
`8'&dD!Epr`!!!J,f!!)$!`-%$3-$!!*X!!)'K!D%rI[pqJ(pq`!!!Ihk!!!#!`3
|
||||||
|
!!J-&!`B0!`8!!R)!!!D%"Sm$"`-)$3-(!!*L!!!'K!D,!`N$#Jd$#3!"E`!!"S3
|
||||||
|
'Krhj#rhj!#3`!""MFRP`G'pQEfaNCA*`BA4S!""MFRP`G'p'EfaNCA*3BA4S$3-
|
||||||
|
+!!&Y!!!'K`D+!`X-!`X!#J!%1R*M-J!#!!!0!`J!!@m!!!!!!!$pq![pq!!8-!!
|
||||||
|
)G'9YF("KG'J!#(4PEA"3BA4S!J-'!!)$$!-0$3--!!0*!!)'N!!'Z[hhrIB$$JV
|
||||||
|
pp`!B,Q0[FQ9MFQ9X+LSU+J!!!!!!!*!!!'jeE'`"rIB!!!B$$J!$rI8$$`-3#[h
|
||||||
|
e!!3+DfpME!d$$`!"E3!!"T3'Prhd#[hd!!3+B@aTB3B$%!!$rI-$%3-5#[hc!!3
|
||||||
|
+D@jcD!d$%3!#0!!!"TS'S[hb!a-+rI)!"!TMCQpX$3-6!!&[!!!'RJDKrI%,rI%
|
||||||
|
!0$!!''p`C@jcFfaTEQ0XG@4PCQpXC'9bF'&dD!!BEh"PEP066%PZBfaeC'9'Efa
|
||||||
|
NCA*3BA4S"J-5!!2pm!-8rHm+rI!!"!TdEb!J$3-8!!*Z!!!'T3Dd!a8$&Jd$&3!
|
||||||
|
#0!!!"Ud'Y2hZ!aF+rHi!"!TQD@aP$3-A!!&Y!!!'X!Dc!aJ-!aJ!#`!&FQ-b,QJ
|
||||||
|
!!J!!$3-@!!)d!!!'T3DYrHd$'3Vpl3!%#Q0QEf`0!aN!!@m!!!DT"Ucpl![pl!!
|
||||||
|
8-!!)G'9YF("KG'J!#(4PEA"3BA4S"[h[!!!#!`d!!J-D!aX0!aS!!Q`!!JDl"V[
|
||||||
|
pkrhU!IhV!!!"rHS!!!)$'`!#!a`$(3d$(!!#FJ!!"VX'aJ-H!am0!ai!!Q)!!!D
|
||||||
|
l"X)$)!-K$3-J!!&[!!!'Z`DqrHN,rHN!*$!!%'0bHA"dEfC[E'4PFR"KG'J!%'0
|
||||||
|
bHA"dEdC[E'4PFP"KG'J0!b%!!@d!!!Dq"X%$)J`$)J!+!!3kFQ-d!!)!!!d$(`!
|
||||||
|
"E`!!!!!!!2hS#rhS!"3`!!KdC@e`F'&dD!!)G'9YF&"KG'J#!ad!!J-M!b30!b-
|
||||||
|
!!dN!!JE("[(pjrhQ!b8+rHF!'#jMEh*PBh*PE#SU+LS!!!!!!!#3!!"ZG@aX!Ih
|
||||||
|
Q!!!'!b8!!rhP!bB$*`Vpj3!%#QY[Bf`0!bB!!@d!!!E,"Xlpj!Vpj!!%#Q&XD@%
|
||||||
|
'!bF!!rhM!bJ$+3Vpi`!%#QPZFfJ0!bJ!!M3!!!E4"YRpiJ-U#[hL!!3+BfC[E!d
|
||||||
|
$+J!"E`!!"Y8'f2hK#rhK!$3`!"K[F'9ZFh0XD@jME(9NC@C[E'4PFR"KG'J!''p
|
||||||
|
`C@j68da*EQ0XG@4P4QpXC'9b8'&dD!B$+3!$rH!$+rhI#[hJ!!3+G'mJ)!d$+`!
|
||||||
|
#EJ!!"Y`'k`-X!bd0!b`!!M3!!!EN"Z[phJ-Z#[hH!!3+CQPXC3d$,J!"E3!!"ZF
|
||||||
|
'kJ-[$!-[!!X!"A*M0#jS!!)!!!d$,3!#0!!!"Y`'j2hG!c!+rGd!"!TMCQpX$3-
|
||||||
|
`!!&[!!!'i!EMrG`,rG`!&$!!#(4PEA"`BA4S!!KdC@e`8'&dD!Eph`!!!J-N!!)
|
||||||
|
$-3-b$3-a!!*X!!)'mJEbrG[pfJ(pf`!!!IhD!!!#!c)!!J-c!c30!c-!!R)!!!E
|
||||||
|
b"[d$03-f$3-e!!*L!!!'mJEj!cF$1!d$0`!"E`!!"[)'pIhC#rhC!#3`!""MFRP
|
||||||
|
`G'pQEfaNCA*`BA4S!""MFRP`G'p'EfaNCA*3BA4S$3-i!!&Y!!!'p3Ei!cN-!cN
|
||||||
|
!#J!%1R*M03!#!!!0!cB!!@m!!!!!!!$pf![pf!!8-!!)G'9YF("KG'J!#(4PEA"
|
||||||
|
3BA4S!J-d!!)$1J-l$3-k!!0*!!)'rJFSrGIpeJ-m#[hA!"JZBfpbC@0bC@`U+LS
|
||||||
|
U!!!!!!!!N!!!ER9XE!(peJ!!"J-m!!2pe3-p!ci+rG8!"!TVEf0X$3-p!!&Y!!!
|
||||||
|
(!JF&rG3+rG3!"!TKE'PK"J-q!!2pd`-r!d!+rG-!"!TTER0S$3-r!!)d!!!(#!F
|
||||||
|
3rG)$33VpdJ!%#Q0QEf`0!d%!!@m!!!F-"`rpd3[pd3!d-!!BEh"PER0cE'PZBfa
|
||||||
|
eC'9QEfaNCA*`BA4S!"K[F'9Z8e0-5@jME(9NC8C[E'4PFP"KG'J'!d!!!rh3!d,
|
||||||
|
pc`Vpd!!%#R4[)#!0!d)!!Qi!!!F6"b)$3`0%$30$!!)d!!!('`FLrFi$43VpcJ!
|
||||||
|
%#QCTE'80!d8!!@d!!!FH"b%$4J`$4J!,!!9bBc8ZD!!#!!!0!d3!!M3!!!F6"a[
|
||||||
|
pc30(#[h0!!3+BfC[E!d$4`!"E`!!"aF('[h-#rh-!"3`!!KdC@e`F'&dD!!)G'9
|
||||||
|
YF&"KG'J'rFm!!!)$1`!#!dJ$53d$5!!#E!!#"bN(+Ih,rFS"rFX!!!(pbJ!!!J0
|
||||||
|
*!!)$5J0,$30+!!*b!!!(+3Fd!d`$63d$6!!#BJ!!"bN(-!01!dm0!di!!@m!!!F
|
||||||
|
T"bcpb3[pb3!N-!!3Bh*jF(4[CQpXC'9bF'&dD!!3Bh*jF(4[4QpXC'9b8'&dD!d
|
||||||
|
$6`!"E3!!"b`(,`03$!03!!d!"cTbDA"PE@3!!J!!$300!!&[!!!!!!!!rFJ,rFJ
|
||||||
|
!&$!!#(4PEA"`BA4S!!KdC@e`8'&dD!)$5`!#!e%$8Jd$83!$53!#"c8(Arh(rFB
|
||||||
|
$8`Vpa`!B,Q0[FQ9MFQ9X+LSU+J!!!!!!!*!!!'jeE'`"rFB!!!B$8`!$rF8$9!0
|
||||||
|
9#[h&!!3+DfpME!d$9!!"E3!!"cN(22h%#[h%!!3+B@aTB3B$93!$rF-$9J0A#[h
|
||||||
|
$!!3+D@jcD!d$9J!#0!!!"cm(4rh#!eJ+rF)!"!TMCQpX$30B!!&[!!!(3`G'rF%
|
||||||
|
,rF%!0$!!''p`C@jcFfaTEQ0XG@4PCQpXC'9bF'&dD!!BEh"PEP066%PZBfaeC'9
|
||||||
|
'EfaNCA*3BA4S"J0A!!2p`!0CrEm+rF!!"!TdEb!J$30C!!*Z!!!(5JGC!eS$@`d
|
||||||
|
$@J!#0!!!"e)(@Ifq!e`+rEi!"!TQD@aP$30F!!&Y!!!(93GB!ed-!ed!$J!)FQP
|
||||||
|
`C@eN,QJ!!J!!$30E!!)d!!!(5JG5rEd$AJVp[3!%#Q0QEf`0!ei!!@m!!!G1"e(
|
||||||
|
p[![p[!!8-!!)G'9YF("KG'J!#(4PEA"3BA4S"[fr!!!#!e)!!J0I!f!0!em!!Q`
|
||||||
|
!!JGJ"f$pZrfk!Ifl!!!"rES!!!)$B!!#!f%$BJd$B3!#FJ!!"f!(D`0M!f30!f-
|
||||||
|
!!Q)!!!GJ"fF$C30Q$30P!!&[!!!(B!GMrEN,rEN!*$!!%'0bHA"dEfC[E'4PFR"
|
||||||
|
KG'J!%'0bHA"dEdC[E'4PFP"KG'J0!fB!!@d!!!GM"fB$C``$C`!+!!3kFR0K!!)
|
||||||
|
!!!d$C!!"E`!!!!!!!2fi#rfi!"3`!!KdC@e`F'&dD!!)G'9YF&"KG'J#!f)!!J0
|
||||||
|
S!fN0!fJ!!dN!!JGX"jEpYrff!fS+rEF!'#jMEh*PBh*PE#SU+LS!!!!!!!#3!!"
|
||||||
|
ZG@aX!Iff!!!'!fS!!rfe!fX$E!VpY3!%#QY[Bf`0!fX!!@d!!!G`"h2pY!VpY!!
|
||||||
|
%#Q&XD@%'!f`!!rfc!fd$EJVpX`!%#QPZFfJ0!fd!!M3!!!Gf"hlpXJ0[#[fb!!3
|
||||||
|
+BfC[E!d$E`!"E`!!"hS(IIfa#rfa!$3`!"K[F'9ZFh0XD@jME(9NC@C[E'4PFR"
|
||||||
|
KG'J!''p`C@j68da*EQ0XG@4P4QpXC'9b8'&dD!B$EJ!$rE!$F2f[#[f`!!3+G'm
|
||||||
|
J)!d$F!!#EJ!!"i%(N!!$F30b$30a!!)d!!!(L3H3!2fZ!h-+rDi!"!TQD@aP$30
|
||||||
|
c!!&Y!!!(M!H2!h3-!h3!#`!&FR0K,QJ!!J!!$30b!!)d!!!(J3H*rDd$G3VpV3!
|
||||||
|
%#Q0QEf`0!h8!!@m!!!H&"iMpV![pV!!8-!!)G'9YF("KG'J!#(4PEA"3BA4S"[f
|
||||||
|
[!!!#!fN!!J0f!hF0!hB!!Q`!!JHA"jIpUrfU!IfV!!!"rDS!!!)$G`!#!hJ$H3d
|
||||||
|
$H!!#FJ!!"jF(SJ0k!hX0!hS!!Q)!!!HA"ji$I!0p$30m!!&[!!!(P`HDrDN,rDN
|
||||||
|
!*$!!%'0bHA"dEfC[E'4PFR"KG'J!%'0bHA"dEdC[E'4PFP"KG'J0!hd!!@d!!!H
|
||||||
|
D"jd$IJ`$IJ!-!!BkFh4KBfX!!J!!$30l!!&[!!!!!!!!rDJ,rDJ!&$!!#(4PEA"
|
||||||
|
`BA4S!!KdC@e`8'&dD!)$H3!#!hm$J!d$I`!$53!#"k-(cIfRrDB$J3VpT`!B,Q0
|
||||||
|
[FQ9MFQ9X+LSU+J!!!!!!!*!!!'jeE'`"rDB!!!B$J3!$rD8$JJ1$#[fP!!3+Dfp
|
||||||
|
ME!d$JJ!"E3!!"kF(U[fN#[fN!!3+B@aTB3B$J`!$rD-$K!1&#[fM!!3+D@jcD!d
|
||||||
|
$K!!#0!!!"kd(YIfL!iB+rD)!"!TMCQpX$31'!!&[!!!(X3HdrD%,rD%!0$!!''p
|
||||||
|
`C@jcFfaTEQ0XG@4PCQpXC'9bF'&dD!!BEh"PEP066%PZBfaeC'9'EfaNCA*3BA4
|
||||||
|
S"J1&!!2pS!1(rCm+rD!!"!TdEb!J$31(!!*Z!!!(Z!I(!iJ$L3d$L!!#0!!!"m!
|
||||||
|
(arfH!iS+rCi!"!TQD@aP$31+!!&Y!!!(``I'!iX-!iX!$3!(Fh4KBfXZD!!#!!!
|
||||||
|
0!iN!!M3!!!Hi"m$pR31-#[fG!!3+BfC[E!d$M!!"E`!!"l`([rfF#rfF!"3`!!K
|
||||||
|
dC@e`F'&dD!!)G'9YF&"KG'J'rCm!!!)$J!!#!id$MJd$M3!$53!#"mi(q2fErCS
|
||||||
|
$M`VpQ`!B,Q0[FQ9MFQ9X+LSU+J!!!!!!!*!!!'jeE'`"rCS!!!B$M`!$rCN$N!!
|
||||||
|
$N3VpQ3!%#QY[Bf`0!j!!!!&Y!!!(dJI9rCJ+rCJ!"!TKE'PK"J14!!2pP`15!j-
|
||||||
|
+rCF!"!TTER0S$315!!)d!!!(f!IJrCB$P!VpPJ!%#Q0QEf`0!j3!!@m!!!IF"pr
|
||||||
|
pP3[pP3!d-!!BEh"PER0cE'PZBfaeC'9QEfaNCA*`BA4S!"K[F'9Z8e0-5@jME(9
|
||||||
|
NC8C[E'4PFP"KG'J'!j-!!rf8!jApN`VpP!!%#R4[)#!0!j8!!Qi!!!IM"r)$PJ1
|
||||||
|
A$31@!!)d!!!(k`IbrC)$Q!VpNJ!%#QCTE'80!jJ!!@d!!!IZ"r%$Q3`$Q3!4!!Y
|
||||||
|
cB@CPFh4KBfXZD!!#!!!0!jF!!M3!!!IM"q[pN31D#[f4!!3+BfC[E!d$QJ!"E`!
|
||||||
|
!"qF(k[f3!![pN!!!&$!!#(4PEA"`BA4S!!KdC@e`8'&dD!EpN`!!!J11!!)$Q`1
|
||||||
|
F$31E!!*X!!)(q3IjrBrpMJ(pM`!!!If1!!!#!j`!!J1G!ji0!jd!!R)!!!Ij#!3
|
||||||
|
$R`1J$31I!!*L!!!(q3J!!k%$SJd$S3!"E`!!"rN(r2f0#rf0!#3`!""MFRP`G'p
|
||||||
|
QEfaNCA*`BA4S!""MFRP`G'p'EfaNCA*3BA4S$31L!!&Y!!!(r!Ir!k--!k-!#J!
|
||||||
|
%1R0SB3!#!!!0!k!!!@m!!!!!!!$pM![pM!!8-!!)G'9YF("KG'J!#(4PEA"3BA4
|
||||||
|
S!J1H!!)$T!1P$31N!!0*!!))"3J[rB[pLJ1Q#[f,!"JZBfpbC@0bC@`U+LSU!!!
|
||||||
|
!!!!!N!!!ER9XE!(pLJ!!"J1Q!!2pL31R!kJ+rBN!"!TVEf0X$31R!!&Y!!!)#3J
|
||||||
|
-rBJ+rBJ!"!TKE'PK"J1S!!2pK`1T!kS+rBF!"!TTER0S$31T!!)d!!!)$`JArBB
|
||||||
|
$U`VpKJ!%#Q0QEf`0!kX!!@m!!!J6#"EpK3[pK3!d-!!BEh"PER0cE'PZBfaeC'9
|
||||||
|
QEfaNCA*`BA4S!"K[F'9Z8e0-5@jME(9NC8C[E'4PFP"KG'J'!kS!!rf%!kcpJ`V
|
||||||
|
pK!!%#R4[)#!0!k`!!Qi!!!JD##N$V31Z$31Y!!)d!!!))JJTrB)$V`VpJJ!%#QC
|
||||||
|
TE'80!km!!@d!!!JP##J$X!`$X!!,!!9cD'%ZD!!#!!!0!ki!!M3!!!JD##,pJ31
|
||||||
|
a#[f"!!3+BfC[E!d$X3!"E`!!#"i))If!#rf!!"3`!!KdC@e`F'&dD!!)G'9YF&"
|
||||||
|
KG'J'rB-!!!)$T3!#!l)$X`d$XJ!#E!!##$!)-2errAi"rAm!!!(pIJ!!!J1c!!)
|
||||||
|
$Y!1e$31d!!*b!!!)-!Jl!lB$Y`d$YJ!#BJ!!#$!)0`1i!lN0!lJ!!@m!!!J`#$2
|
||||||
|
pI3[pI3!N-!!3Bh*jF(4[CQpXC'9bF'&dD!!3Bh*jF(4[4QpXC'9b8'&dD!d$Z3!
|
||||||
|
"E3!!#$-)0J1k$!1k!!d!"cTdH(4IC')!!J!!$31h!!&[!!!!!!!!rA`,rA`!&$!
|
||||||
|
!#(4PEA"`BA4S!!KdC@e`8'&dD!)$Y3!#!lX$[!d$Z`!$53!##$`)C[elrAS$[3V
|
||||||
|
pH`!B,Q0[FQ9MFQ9X+LSU+J!!!!!!!*!!!'jeE'`"rAS!!!B$[3!$rAN$[J1r#[e
|
||||||
|
j!!3+DfpME!d$[J!"E3!!#%!)3rei#[ei!!3+B@aTB3B$[`!$rAF$`!2"#[eh!!3
|
||||||
|
+D@jcD!d$`!!#0!!!#%B)6[ef!m)+rAB!"!TMCQpX$32#!!&[!!!)5JK0rA8,rA8
|
||||||
|
!0$!!''p`C@jcFfaTEQ0XG@4PCQpXC'9bF'&dD!!BEh"PEP066%PZBfaeC'9'Efa
|
||||||
|
NCA*3BA4S"J2"!!2pG!2$rA-+rA3!"!TdEb!J$32$!!*Z!!!)83KJ!m3$a3d$a!!
|
||||||
|
#0!!!#&N)B2eb!mB+rA)!"!TQD@aP$32'!!&Y!!!)A!KI!mF-!mF!$J!)G(KdAf4
|
||||||
|
L,QJ!!J!!$32&!!)d!!!)83KCrA%$b!VpF3!%#Q0QEf`0!mJ!!@m!!!K9#&MpF![
|
||||||
|
pF!!8-!!)G'9YF("KG'J!#(4PEA"3BA4S"[ec!!!#!l`!!J2*!mS0!mN!!Q`!!JK
|
||||||
|
R#'IpEreZ!Ie[!!!"r@i!!!)$bJ!#!mX$c!d$b`!#FJ!!#'F)FJ20!mi0!md!!Q)
|
||||||
|
!!!KR#'i$c`23$322!!&[!!!)C`KUr@d,r@d!*$!!%'0bHA"dEfC[E'4PFR"KG'J
|
||||||
|
!%'0bHA"dEdC[E'4PFP"KG'J0!p!!!@d!!!KU#'d$d3`$d3!,!!8kH$8`13!#!!!
|
||||||
|
0!mi!!@m!!!!!!!$pE![pE!!8-!!)G'9YF("KG'J!#(4PEA"3BA4S!J2-!!)$dJ2
|
||||||
|
6$325!!0*!!))F`LGr@[pDJ28#[eV!"JZBfpbC@0bC@`U+LSU!!!!!!!!N!!!ER9
|
||||||
|
XE!(pDJ!!"J28!!2pD329!pB+r@N!"!TVEf0X$329!!&Y!!!)G`Kkr@J+r@J!"!T
|
||||||
|
KE'PK"J2@!!2pC`2A!pJ+r@F!"!TTER0S$32A!!)d!!!)I3L&r@B$f3VpCJ!%#Q0
|
||||||
|
QEf`0!pN!!@m!!!L"#)6pC3[pC3!d-!!BEh"PER0cE'PZBfaeC'9QEfaNCA*`BA4
|
||||||
|
S!"K[F'9Z8e0-5@jME(9NC8C[E'4PFP"KG'J'!pJ!!reN!pVpB`VpC!!%#R4[)#!
|
||||||
|
0!pS!!Qi!!!L)#*F$f`2F$32E!!)d!!!)N!!)PreL!pd+r@)!"!TQD@aP$32G!!&
|
||||||
|
Y!!!)N`L@!pi-!pi!$!!'H$8`15jS!!)!!!d$h!!#0!!!#)J)N!$pB32I#[eK!!3
|
||||||
|
+BfC[E!d$h`!"E`!!#)`)MreJ#reJ!"3`!!KdC@e`F'&dD!!)G'9YF&"KG'J'r@-
|
||||||
|
!!!)$d`!#!q!$i3d$i!!$53!##*i)b2eIr9i$iJVpA`!B,Q0[FQ9MFQ9X+LSU+J!
|
||||||
|
!!!!!!*!!!'jeE'`"r9i!!!B$iJ!$r9d$i`2N#[eG!!3+DfpME!d$i`!"E3!!#+)
|
||||||
|
)TIeF#[eF!!3+B@aTB3B$j!!$r9X$j32Q#[eE!!3+D@jcD!d$j3!#0!!!#+J)X2e
|
||||||
|
D!qF+r9S!"!TMCQpX$32R!!&[!!!)V!L[r9N,r9N!0$!!''p`C@jcFfaTEQ0XG@4
|
||||||
|
PCQpXC'9bF'&dD!!BEh"PEP066%PZBfaeC'9'EfaNCA*3BA4S"J2Q!!2p@!2Sr9F
|
||||||
|
+r9J!"!TdEb!J$32S!!*Z!!!)X`M#!qN$kJd$k3!#0!!!#,X)`[e@!qX+r9B!"!T
|
||||||
|
QD@aP$32V!!&Y!!!)[JM"!q`-!q`!%!!+H$8`19pfCRNZD!!#!!!0!qS!!M3!!!L
|
||||||
|
c#,[p932Y#[e9!!3+BfC[E!d$l3!"E`!!#,F)Z[e8#re8!"3`!!KdC@e`F'&dD!!
|
||||||
|
)G'9YF&"KG'J'r9F!!!)$i3!#!qi$l`d$lJ!#E!!##-N)bIe6r9)"r9-!!!(p8J!
|
||||||
|
!!J2[!!)$m!2a$32`!!*b!!!)b3M8!r)$m`d$mJ!#BJ!!#-N)d!2d!r80!r3!!@m
|
||||||
|
!!!M*#-cp83[p83!N-!!3Bh*jF(4[CQpXC'9bF'&dD!!3Bh*jF(4[4QpXC'9b8'&
|
||||||
|
dD!d$p3!"E3!!#-`)c`2f$!2f!!d!"cTi06!jGM-!!J!!$32c!!&[!!!!!!!!r9!
|
||||||
|
,r9!!&$!!#(4PEA"`BA4S!!KdC@e`8'&dD!)$m3!#!rF$q!d$p`!$53!##08)rre
|
||||||
|
2r8i$q3Vp6`!B,Q0[FQ9MFQ9X+LSU+J!!!!!!!*!!!'jeE'`"r8i!!!B$q3!$r8d
|
||||||
|
$qJ2l#[e0!!3+DfpME!d$qJ!"E3!!#0N)h2e-#[e-!!3+B@aTB3B$q`!$r8X$r!2
|
||||||
|
p#[e,!!3+D@jcD!d$r!!#0!!!#0m)jre+!ri+r8S!"!TMCQpX$32q!!&[!!!)i`M
|
||||||
|
Qr8N,r8N!0$!!''p`C@jcFfaTEQ0XG@4PCQpXC'9bF'&dD!!BEh"PEP066%PZBfa
|
||||||
|
eC'9'EfaNCA*3BA4S"J2p!!2p5!2rr8F+r8J!"!TdEb!J$32r!!*Z!!!)kJMj"!!
|
||||||
|
%!3d%!!!#0!!!#2))qIe'"!)+r8B!"!TQD@aP$33#!!&Y!!!)p3Mi"!--"!-!$J!
|
||||||
|
)H$8`1ABc,QJ!!J!!$33"!!)d!!!)kJMbr88%"!Vp43!%#Q0QEf`0"!3!!@m!!!M
|
||||||
|
Z#2(p4![p4!!8-!!)G'9YF("KG'J!#(4PEA"3BA4S"[e(!!!#!rJ!!J3&"!B0"!8
|
||||||
|
!!Q`!!JN!#3$p3re#!Ie$!!!"r8)!!!)%"J!#"!F%#!d%"`!$53!##3!*+[e"r8!
|
||||||
|
%#3Vp33!B,Q0[FQ9MFQ9X+LSU+J!!!!!!!*!!!'jeE'`"r8!!!!B%#3!$r6m%#J3
|
||||||
|
,#[dr!!3+DfpME!d%#J!"E3!!#33*"rdq#[dq!!3+B@aTB3B%#`!$r6d%$!30#[d
|
||||||
|
p!!3+D@jcD!d%$!!#0!!!#3S*%[dm"!i+r6`!"!TMCQpX$331!!&[!!!*$JN4r6X
|
||||||
|
,r6X!0$!!''p`C@jcFfaTEQ0XG@4PCQpXC'9bF'&dD!!BEh"PEP066%PZBfaeC'9
|
||||||
|
'EfaNCA*3BA4S"J30!!2p1J32r6N+r6S!"!TdEb!J$332!!*Z!!!*&3NN""!%%3d
|
||||||
|
%%!!#0!!!#4d**2di"")+r6J!"!TQD@aP$335!!&Y!!!*)!NM""--""-!#`!&Fh0
|
||||||
|
X,QJ!!J!!$334!!)d!!!*&3NGr6F%&!Vp0`!%#Q0QEf`0""3!!@m!!!NC#4cp0J[
|
||||||
|
p0J!H-!!0Fh0XCQpXC'9bF'&dD!!0Fh0X4QpXC'9b8'&dD!Ep13!!!J3)!!)%&33
|
||||||
|
@$339!!0*!!)*+`P9r6Ap0!3A#[de!"JZBfpbC@0bC@`U+LSU!!!!!!!!N!!!ER9
|
||||||
|
XE!(p0!!!"J3A!!2p-`3B""N+r6-!"!TVEf0X$33B!!&Y!!!*,`Nbr6)+r6)!"!T
|
||||||
|
KE'PK"J3C!!2p-33D""X+r6%!"!TTER0S$33D!!)d!!!*03Npr6!%(!Vp-!!%#Q0
|
||||||
|
QEf`0""`!!@m!!!Nj#6cp,`[p,`!d-!!BEh"PER0cE'PZBfaeC'9QEfaNCA*`BA4
|
||||||
|
S!"K[F'9Z8e0-5@jME(9NC8C[E'4PFP"KG'J'""X!!rdZ""hp,3Vp,J!%#R4[)#!
|
||||||
|
0""d!!Qi!!!P!#8m%(J3I$33H!!)d!!!*5!P2r5`%)!Vp,!!%#QCTE'80"#!!!@d
|
||||||
|
!!!P,#8i%)3`%)3!-!!CcFf`b,QJ!!J!!$33I!!)d!!!*3!P)r5X%)JVp+`!%#Q0
|
||||||
|
QEf`0"#)!!@m!!!P%#8Ip+J[p+J!H-!!0Fh0XCQpXC'9bF'&dD!!0Fh0X4QpXC'9
|
||||||
|
b8'&dD!Ep,3!!!J3@!!)%)`3N$33M!!0*!!)*9JQ!r5Rp+!3P#[dT!"JZBfpbC@0
|
||||||
|
bC@`U+LSU!!!!!!!!N!!!ER9XE!(p+!!!"J3P!!2p*`3Q"#F+r5F!"!TVEf0X$33
|
||||||
|
Q!!&Y!!!*@JPGr5B+r5B!"!TKE'PK"J3R!!2p*33S"#N+r58!"!TTER0S$33S!!)
|
||||||
|
d!!!*B!PSr53%+JVp*!!%#Q0QEf`0"#S!!@m!!!PN#@Ip)`[p)`!d-!!BEh"PER0
|
||||||
|
cE'PZBfaeC'9QEfaNCA*`BA4S!"K[F'9Z8e0-5@jME(9NC8C[E'4PFP"KG'J'"#N
|
||||||
|
!!rdL"#[p)3Vp)J!%#R4[)#!0"#X!!Qi!!!PV#AS%,!3Y$33X!!)d!!!*F`Pkr5!
|
||||||
|
%,JVp)!!%#QCTE'80"#i!!@d!!!Pf#AN%,``%,`!0!!GcFf`b-bjS!!)!!!d%,3!
|
||||||
|
#0!!!#@X*FrdI"$!+r4m!"!TMCQpX$33`!!&[!!!*E`Pbr4i,r4i!(M!!$A0cE'C
|
||||||
|
[E'4PFR"KG'J!$A0cE%C[E'4PFP"KG'J'r5%!!!)%*!!#"$%%-Jd%-3!$53!##B%
|
||||||
|
*UrdGr4`%-`Vp(3!B,Q0[FQ9MFQ9X+LSU+J!!!!!!!*!!!'jeE'`"r4`!!!B%-`!
|
||||||
|
$r4X%0!3e#[dE!!3+DfpME!d%0!!"E3!!#B8*L2dD#[dD!!3+B@aTB3B%03!$r4N
|
||||||
|
%0J3h#[dC!!3+D@jcD!d%0J!#0!!!#BX*NrdB"$J+r4J!"!TMCQpX$33i!!&[!!!
|
||||||
|
*M`Q5r4F,r4F!0$!!''p`C@jcFfaTEQ0XG@4PCQpXC'9bF'&dD!!BEh"PEP066%P
|
||||||
|
ZBfaeC'9'EfaNCA*3BA4S"J3h!!2p&J3jr48+r4B!"!TdEb!J$33j!!*Z!!!*PJQ
|
||||||
|
P"$S%1`d%1J!#0!!!#Ci*TId8"$`+r43!"!TQD@aP$33m!!&Y!!!*S3QN"$d-"$d
|
||||||
|
!$!!'Fh0X-bjS!!)!!!d%1`!#0!!!#CB*R[d6"$i+r4-!"!TMCQpX$33q!!&[!!!
|
||||||
|
*QJQGr4),r4)!(M!!$A0cE'C[E'4PFR"KG'J!$A0cE%C[E'4PFP"KG'J'r48!!!)
|
||||||
|
%-J!#"$m%3!d%2`!$53!##D`*e[d4r4!%33Vp%3!B,Q0[FQ9MFQ9X+LSU+J!!!!!
|
||||||
|
!!*!!!'jeE'`"r4!!!!B%33!$r3m%3J4$#[d2!!3+DfpME!d%3J!"E3!!#E!*Xrd
|
||||||
|
1#[d1!!3+B@aTB3B%3`!$r3d%4!4&#[d0!!3+D@jcD!d%4!!#0!!!#EB*[[d-"%B
|
||||||
|
+r3`!"!TMCQpX$34'!!&[!!!*ZJQpr3X,r3X!0$!!''p`C@jcFfaTEQ0XG@4PCQp
|
||||||
|
XC'9bF'&dD!!BEh"PEP066%PZBfaeC'9'EfaNCA*3BA4S"J4&!!2p#J4(r3N+r3S
|
||||||
|
!"!TdEb!J$34(!!*Z!!!*`3R3"%J%53d%5!!#0!!!#FN*d2d)"%S+r3J!"!TQD@a
|
||||||
|
P$34+!!&Y!!!*c!R2"%X-"%X!$!!'G'ac-5jS!!)!!!d%53!#0!!!#F%*bId("%`
|
||||||
|
+r3F!"!TMCQpX$34-!!&[!!!*a3R)r3B,r3B!(M!!$A0cE'C[E'4PFR"KG'J!$A0
|
||||||
|
cE%C[E'4PFP"KG'J'r3N!!!)%3!!#"%d%6Jd%63!#E!!##GF*erd&r33"r38!!!(
|
||||||
|
p"!!!!J41!!)%6`43$342!!0*!!)*e`S"r32p!J44#[d$!"JZBfpbC@0bC@`U+LS
|
||||||
|
U!!!!!!!!N!!!ER9XE!(p!J!!"J44!!2p!345"&-+r3%!"!TVEf0X$345!!&Y!!!
|
||||||
|
*f`RHr3!+r3!!"!TKE'PK"J46!!2mr`48"&8+r2m!"!TTER0S$348!!)d!!!*i3R
|
||||||
|
Tr2i%9JVmrJ!%#Q0QEf`0"&B!!@m!!!RP#HMmr3[mr3!d-!!BEh"PER0cE'PZBfa
|
||||||
|
eC'9QEfaNCA*`BA4S!"K[F'9Z8e0-5@jME(9NC8C[E'4PFP"KG'J'"&8!!rcm"&I
|
||||||
|
mq`Vmr!!%#R4[)#!0"&F!!Qi!!!RX#IX%@!4C$34B!!)d!!!*p!Rlr2S%@JVmqJ!
|
||||||
|
%#QCTE'80"&S!!@d!!!Rh#IS%@``%@`!1!!KMFRP`G'mZD!!#!!!0"&N!!M3!!!R
|
||||||
|
X#I6mq34F#[cj!!3+BfC[E!d%A!!"E`!!#I!*mrci#rci!#3`!""MFRP`G'pQEfa
|
||||||
|
NCA*`BA4S!""MFRP`G'p'EfaNCA*3BA4S"[cl!!!#"&!!!J4G"&i0"&d!!Q`!!JS
|
||||||
|
##J,mprcf!Ich!!!"r2B!!!)%AJ!#"&m%B!d%A`!$53!##J)+,2cer23%B3Vmp3!
|
||||||
|
B,Q0[FQ9MFQ9X+LSU+J!!!!!!!*!!!'jeE'`"r23!!!B%B3!$r2-%BJ4M#[cc!!3
|
||||||
|
+DfpME!d%BJ!"E3!!#JB+#Icb#[cb!!3+B@aTB3B%B`!$r2%%C!4P#[ca!!3+D@j
|
||||||
|
cD!d%C!!#0!!!#J`+&2c`"'B+r2!!"!TMCQpX$34Q!!&[!!!+%!S6r1m,r1m!0$!
|
||||||
|
!''p`C@jcFfaTEQ0XG@4PCQpXC'9bF'&dD!!BEh"PEP066%PZBfaeC'9'EfaNCA*
|
||||||
|
3BA4S"J4P!!2mlJ4Rr1d+r1i!"!TdEb!J$34R!!*Z!!!+&`SQ"'J%D3d%D!!#0!!
|
||||||
|
!#Km+*[cX"'S+r1`!"!TQD@aP$34U!!&Y!!!+)JSP"'X-"'X!%!!+Eh"PER0cE(B
|
||||||
|
ZD!!#!!!0"'N!!M3!!!SA#Krmk`4X#[cV!!3+BfC[E!d%E!!"E`!!#KX+([cU#rc
|
||||||
|
U!#3`!""MFRP`G'pQEfaNCA*`BA4S!""MFRP`G'p'EfaNCA*3BA4S"[cY!!!#"'!
|
||||||
|
!!J4Y"'i0"'d!!dN!!JSY#PImkIcS"'m+r1N!'#jMEh*PBh*PE#SU+LS!!!!!!!#
|
||||||
|
3!!"ZG@aX!IcS!!!'"'m!!rcR"(!%F3Vmj`!%#QY[Bf`0"(!!!@d!!!Sa#M6mjJV
|
||||||
|
mjJ!%#Q&XD@%'"(%!!rcP"()%F`Vmj3!%#QPZFfJ0"()!!M3!!!Sh#Mrmj!4d#[c
|
||||||
|
N!!3+BfC[E!d%G!!"E`!!#MX+2[cM#rcM!$3`!"K[F'9ZFh0XD@jME(9NC@C[E'4
|
||||||
|
PFR"KG'J!''p`C@j68da*EQ0XG@4P4QpXC'9b8'&dD!B%F`!$r1)%GIcK#[cL!!3
|
||||||
|
+G'mJ)!d%G3!#EJ!!#N)+834f"(F0"(B!!M3!!!T+#P(mi!4i#[cJ!!3+CQPXC3d
|
||||||
|
%H!!"E3!!#Nd+8!4j$!4j!!i!#(4YC'PQCLjS!!)!!!d%G`!#0!!!#N)+5[cI"(S
|
||||||
|
+r0m!"!TMCQpX$34k!!&[!!!+4JT*r0i,r0i!*$!!%'0bHA"dEfC[E'4PFR"KG'J
|
||||||
|
!%'0bHA"dEdC[E'4PFP"KG'J'r1%!!!)%EJ!#"(X%I!d%H`!#E!!##PJ+@2cGr0`
|
||||||
|
"r0d!!!(mh!!!!J4m!!)%I34q$34p!!*X!!)+@!TBr0[mfJ(mf`!!!IcD!!!#"(i
|
||||||
|
!!J4r")!0"(m!!dN!!JTB#S,mfIcB")%+r0N!'#jMEh*PBh*PE#SU+LS!!!!!!!#
|
||||||
|
3!!"ZG@aX!IcB!!!'")%!!rcA"))%J`Vme`!%#QY[Bf`0"))!!@d!!!TF#PrmeJV
|
||||||
|
meJ!%#Q&XD@%'")-!!rc9")3%K3Vme3!%#QPZFfJ0")3!!M3!!!TL#QVme!5'#[c
|
||||||
|
8!!3+BfC[E!d%KJ!"E`!!#QB+DIc6#rc6!$3`!"K[F'9ZFh0XD@jME(9NC@C[E'4
|
||||||
|
PFR"KG'J!''p`C@j68da*EQ0XG@4P4QpXC'9b8'&dD!B%K3!$r0)%Krc4#[c5!!3
|
||||||
|
+G'mJ)!d%K`!#EJ!!#Qd+I!5)")N0")J!!M3!!!Te#Rcmd!5+#[c3!!3+CQPXC3d
|
||||||
|
%LJ!"E3!!#RJ+H`5,$!5,!!`!"Q9IEh-ZD!!#!!!0")N!!M3!!!TY#RAmc`5-#[c
|
||||||
|
2!!3+BfC[E!d%M!!"E`!!#R%+G2c1#rc1!#B`!"&[F'9ZFh0XCQpXC'9bF'&dD!!
|
||||||
|
4Eh"PER0cE%C[E'4PFP"KG'J'r0%!!!)%J!!#")d%MJd%M3!$53!##S-+VIc0r-`
|
||||||
|
%M`Vmc3!B,Q0[FQ9MFQ9X+LSU+J!!!!!!!*!!!'jeE'`"r-`!!!B%M`!$r-X%N!!
|
||||||
|
%N3Vmb`!%#QY[Bf`0"*!!!!&Y!!!+K`U+r-S+r-S!"!TKE'PK"J54!!2mb355"*-
|
||||||
|
+r-N!"!TTER0S$355!!)d!!!+M3U9r-J%P!Vmb!!%#Q0QEf`0"*3!!@m!!!U4#T6
|
||||||
|
ma`[ma`!d-!!BEh"PER0cE'PZBfaeC'9QEfaNCA*`BA4S!"K[F'9Z8e0-5@jME(9
|
||||||
|
NC8C[E'4PFP"KG'J'"*-!!rc'"*Ama3VmaJ!%#R4[)#!0"*8!!Qi!!!UB#UF%PJ5
|
||||||
|
A$35@!!)d!!!+S!URr-3%Q!Vma!!%#QCTE'80"*J!!@d!!!UM#UB%Q3`%Q3!0!!G
|
||||||
|
PAfpc-LjS!!)!!!d%P`!#0!!!#TJ+S2c$"*S+r--!"!TMCQpX$35D!!&[!!!+R!U
|
||||||
|
Ir-),r-)!*M!!%@p`C@jcFfaQEfaNCA*`BA4S!"&[F'9ZFh0X4QpXC'9b8'&dD!E
|
||||||
|
ma3!!!J51!!)%Qrc"$35E!!*X!!)+VJUZr-$m[`(m`!!!!Ibr!!!#r-%!!!d!#3!
|
||||||
|
"E3!!!!!!!3!I!Irq!!!#!!B!!J5F"*d0"*`!!Q`!!J!!!!$m[[bp!Ibq!!!"r,d
|
||||||
|
!!!)%R3!#"*i%R`d%RJ!#E!!##V%+b!5Jr,`0"+!!!dN!!JUa#XMmZ`5K"+)+r,X
|
||||||
|
!'#jcHA0[C'a[Cf&cDh)!!!!!!!!!!&4&@&30"+%!!@d!!!Ua#V3%S``%S`!'!!!
|
||||||
|
!!J!!"J5L!!2mZJ5N"+8+r,S!"!TLG'jc$35N!!&+!!!+Y`Um"+B#"+B!!J5Rr,N
|
||||||
|
0"+F!!@d!!!Uh#VS%U!`%U!!+!!4%EfjP!!)!!!,mZ3!!"J5P!!2mZ!5Tr,F+r,J
|
||||||
|
!"!TRDACe$35T!!&Y!!!+[`V#r,B$r,B!"3EmY`!!!Ibm!!!#"*m!!J5Ur,80"+S
|
||||||
|
!!Q`!!J!!!!$mY2bc!Ibd!!!"r,-!!!,mY3!!$J!#!!!2%!!$!",mXJ5V"+`%V35
|
||||||
|
Z"+m%X!5a",)%X`5d",8%YJ5hr,(mX2b[r+i"r,)!!"!%U`!3r+hmV2bVr+VmUIb
|
||||||
|
Sr+ImT[bPr+6mSrbLr+(mS2bIr*i+r+d!'#jKCACdEf&`F'jeE'`!!)!!!!#3!!!
|
||||||
|
U+LSU#rbX!")`!!GdD'9`BA4S!!GdD'93BA4S#rbV!"``!!adD'9[E'4NC@aTEA-
|
||||||
|
!$(4SC8pXC%4PE'PYF`[mUJ!J-!!1G'KPF(*[DQ9MG("KG'J!$R4SC9"bEfTPBh4
|
||||||
|
3BA4S#rbT!"B`!!PdD'9YCA"KG'J!#A4SC8eP8'&dD![mU!!Q-!!4D@jME(9NC@C
|
||||||
|
[E'4PFR"KG'J!%@PZBfaeC'9'EfaNCA*3BA4S#rbR!$3`!"K[F'9ZFh0XD@jME(9
|
||||||
|
NC@C[E'4PFR"KG'J!''p`C@j68da*EQ0XG@4P4QpXC'9b8'&dD![mTJ!N-!!3Bh*
|
||||||
|
jF(4[CQpXC'9bF'&dD!!3Bh*jF(4[4QpXC'9b8'&dD![mT3!H-!!0Fh0XCQpXC'9
|
||||||
|
bF'&dD!!0Fh0X4QpXC'9b8'&dD![mT!!Q-!!4Eh"PER0cE'C[E'4PFR"KG'J!%@p
|
||||||
|
`C@jcFfa'EfaNCA*3BA4S#rbM!#i`!"9dD'9ZCAGQEfaNCA*bC@CPFQ9ZBf8!&A4
|
||||||
|
SC8jPGdC[E'4PFP*PCQ9bC@jMC3[mSJ!8-!!)G'9YF("KG'J!#(4PEA"3BA4S!Ib
|
||||||
|
K!!!"r+!!!!(mR`!!!IbH!!!1"+`!"a$mR35ir*cmQ`5j",VmQJVmR3!B,Q&PGR4
|
||||||
|
[BA"`ER9XE!!!J!!!!*!!!#SU+LS0",J!!@X!!!!!#XJ%Z`)%Z`!#!!8%[!)%[!!
|
||||||
|
#"*lmQ3,mQ3!!!IbF!!!#r*X!!"!%Z3!!%!5k!)B!(rbBr*ImP[b9r*6mNrb5!#c
|
||||||
|
mNIb3!2b2r)lmMIb-!%rmL`"D!&[mLJ"Nr)N!EIb)r)ImKJ#2r)AmK2b$r),mJIb
|
||||||
|
!r(rmI[apr(cmH`#Tr(VmHIair(F![Iaf!-ImG3$8!1)!l!$j!3-"%!%D!5F"-3%
|
||||||
|
q!8J"93&I!@`"GJ'$!Bd"QJ'N!E%"Z`()!G)"h`(T!IB#!!)0!KF#*!)Z!MX#43*
|
||||||
|
5!P`#D3*c!S!#LJ+A!U%#VJ+m!XB#d`,G!ZS#p!-"!`X$'!-L!bm$130'!e!$A30
|
||||||
|
R!h3$IJ1,!jN$S`1`!lS$a`24!pi$l!2f"!-%%`3K"#m%234,"&X%D`4j")X%Q35
|
||||||
|
Mr(3%U2acr(,mF3VmQ!!%#Q0[BQS+r*F!'#jPBA*cCQCNFQ&XDA-!!!!!!!!J!'&
|
||||||
|
QC()+r*B!"!TMG(Kd#rb9!")`!!GdD'9`BA4S!!GdD'93BA4S#[b8!!3+BA0MFJV
|
||||||
|
mN`!%#R4iC'`,r*)!($!!$(4SC@pXC'4PE'PYF`!-G'KP6faN4'9XD@ec#[b4!!3
|
||||||
|
+BfPdE32mN!$rr3[mM`!J-!!1G'KPF(*[DQ9MG("KG'J!$R4SC9"bEfTPBh43BA4
|
||||||
|
S!rb1rri+r)d!"!T849K8#rb-!"B`!!PdD'9YCA"KG'J!#A4SC8eP8'&dD![mL`!
|
||||||
|
Q-!!4D@jME(9NC@C[E'4PFR"KG'J!%@PZBfaeC'9'EfaNCA*3BA4S#rb+!$3`!"K
|
||||||
|
[F'9ZFh0XD@jME(9NC@C[E'4PFR"KG'J!''p`C@j68da*EQ0XG@4P4QpXC'9b8'&
|
||||||
|
dD![mL3!N-!!3Bh*jF(4[CQpXC'9bF'&dD!!3Bh*jF(4[4QpXC'9b8'&dD![mL!!
|
||||||
|
H-!!0Fh0XCQpXC'9bF'&dD!!0Fh0X4QpXC'9b8'&dD![mK`!Q-!!4Eh"PER0cE'C
|
||||||
|
[E'4PFR"KG'J!%@p`C@jcFfa'EfaNCA*3BA4S#[b'!!3+BfC[E!VmK3!B,QeTFf0
|
||||||
|
cE'0d+LSU+J!!!!!!!*!!!#SU+LS+r)3!"!TcC@aP#[b$!"JZBfpbC@4PE'mU+LS
|
||||||
|
U!!!!!!!!N!!!+LSU+J(mJJ!!![b"!!!+r)!!"!TVEf0X#[ar!!3+D@jcD!2mIJ!
|
||||||
|
%#[ap!"JZBfpbC@0bC@`U+LSU!!!!!!!!N!!!ER9XE!VmI!!%#R*cE(3,r(X!,M!
|
||||||
|
!&A4SC@jPGfC[E'4PFR*PCQ9bC@jMC3!9G'KP6Q9h4QpXC'9b8Q9QCA*PEQ0P#[a
|
||||||
|
k!!3+F'jKE3VmH3!%#Q&XD@%+r(J!"!TdEb!J#[ah!!3+CQPXC32mGJ!'#rae!"3
|
||||||
|
`!!KdC@e`F'&dD!!)G'9YF&"KG'J+r(3!"!TLG'jc#[ac!!3+CfPfG32mFJ!&#[a
|
||||||
|
a!"JZFhPcEf4XEfGKFfYb!!!!!!!!!!"849K8%IbD#XRJ%JUYi1%TDJ`!!LrM*N9
|
||||||
|
4e%r&jLa&edrSaHBX4Nr%@qPF@eTVA&VU-NAE6m4Ek9aE@QYF@Z`bl5C&hNr,lbA
|
||||||
|
Y*N9J!""2bf%!%59K!")Pl5C&B!!66mYK!"3Pl5C&B!!96mYK!"BPl5C&B!!A6m[
|
||||||
|
Y*N9J!"K2amAQ,%C2&!!L+Q%!'9m!%#pK!"PK!"S[DJ`!'dmUB3!F,'S-!"eA!!K
|
||||||
|
B!"i!(fK2+Q%!)'%!'@%!)5TK!"PI!"![B3!L$!!M6em!*%9J!#92A`!PDJ`!'dp
|
||||||
|
K!#BUB3!F,'%!*ba'6bTK!#"K!#KK!#%UB3!CA`!6,f%!+5TK!"R1,f%!+Q%!+bp
|
||||||
|
K!#`-!#02A`!9B3!Y*89J!#j2+Q%!)'%!+'%!)5TK!"PI!"-[B3!T+Q%!'9m!,Lp
|
||||||
|
K!#TK!#m[B3!X$!!M6bTK!#"K!#KK!#%UB3!CA`!6,f%!+5TK!"PI!#i[B3!UB3!
|
||||||
|
`,f%!,!`!)dpI!"9K!$%P4@!!,NmUB3!JB3!SB3!K+Q%!'9m!%bpK!#NUB3!CA`!
|
||||||
|
Z,f%!+Q%!-LpK!#`-!#02A`!9B3!c*89J!#j2+Q%!)'%!+'%!)5TK!"PI!"-[B3!
|
||||||
|
T+Q%!'9m!,LpK!#TK!$3[B3!X$!!M6em!&@%!059&B!!Z6bTK!#"K!#KK!#%UB3!
|
||||||
|
CA`!6,f%!+5TK!"PI!#i[B3!UB3!f,f%!,!`!)dpI!"9K!$FP4@!!,NmUB3!JB3!
|
||||||
|
SB3!K+Q%!'9m!%bpK!#NUB3!CA`!Z,f%!+Q%!1#pK!#`-!#02A`!9B3!j*89J!#j
|
||||||
|
2+Q%!)'%!+'%!)5TK!"PI!"-[B3!T+Q%!'9m!,LpK!#TK!$S[B3!X$!!M6em!&@%
|
||||||
|
!1b9&B!!Z6bTK!#"K!#KK!#%UB3!CA`!6,f%!+5TK!"PI!#i[B3!UB3!m,f%!,!`
|
||||||
|
!)dpI!"9K!$dP4@!!,NmUB3!JB3!SB3!K+Q%!'9m!%bpK!#NUB3!CA`!Z,f%!+Q%
|
||||||
|
!2LpK!#`-!#02A`!9B3!r*89J!#j2+Q%!)'%!+'%!)5TK!"PI!"-[B3!T+Q%!'9m
|
||||||
|
!,LpK!#TK!%![B3!X$!!M6em!&@%!359&B!!Z6bTK!#"K!#KK!#%UB3!CA`!6,f%
|
||||||
|
!+5TK!"PI!#i[B3!UB3"#,f%!,!`!)dpI!"9K!%-P4@!!,NmUB3!JB3!SB3!K+Q%
|
||||||
|
!'9m!%bpK!#NUB3!CA`!Z,f%!+Q%!4#pK!#`-!#02A`!9B3"&*89J!#j2+Q%!)'%
|
||||||
|
!+'%!)5TK!"PI!"-[B3!T+Q%!'9m!,LpK!#TK!%B[B3!X$!!M6em!&@%!4b9&B!!
|
||||||
|
Z6bTK!#"K!#KK!#%UB3!CA`!6,f%!+5TK!"PI!#i[B3!UB3"),f%!,!`!)dpI!"9
|
||||||
|
K!%NP4@!!,NmUB3!JB3!SB3!K+Q%!'9m!%bpK!#NUB3!CA`!Z,f%!+Q%!5LpK!#`
|
||||||
|
-!#02A`!9B3",*89J!#j2+Q%!)'%!+'%!)5TK!"PI!"-[B3!T+Q%!'9m!,LpK!#T
|
||||||
|
K!%`[B3!X$!!M6em!&@%!659&B!!Z6bTK!#"K!#KK!#%UB3!CA`!6,f%!+5TK!"P
|
||||||
|
I!#i[B3!UB3"1,f%!,!`!)dpI!"9K!%mP4@!!,NmUB3!JB3!SB3!K+Q%!'9m!%bp
|
||||||
|
K!#NUB3!CA`!Z,f%!+Q%!8#pK!#`-!#02A`!9B3"4*89J!#j2+Q%!)'%!+'%!)5T
|
||||||
|
K!"PI!"-[B3!T+Q%!'9m!,LpK!#TK!&)[B3!X$!!M6em!&@%!8b9&B!!Z6bTK!#"
|
||||||
|
K!#KK!#%UB3!CA`!6,f%!+5TK!"PI!#i[B3!UB3"8,f%!,!`!)dpI!"9K!&8P4@!
|
||||||
|
!,NmUB3!JB3!SB3!K+Q%!'9m!%bpK!#NUB3!CA`!Z,f%!+Q%!9LpK!#`-!#02A`!
|
||||||
|
9B3"A*89J!#j2+Q%!)'%!+'%!)5TK!"PI!"-[B3!T+Q%!'9m!,LpK!#TK!&J[B3!
|
||||||
|
X$!!M6bTK!#"K!#KK!#%UB3!CA`!6,f%!+5TK!"PI!#i[B3!UB3"C,f%!,!`!)dp
|
||||||
|
I!"9K!&SP4@!!,NmUB3!JB3!SB3!K+Q%!'9m!%bpK!#NUB3!CA`!Z,f%!+Q%!@bp
|
||||||
|
K!#`-!#02A`!9B3"F*89J!#j2+Q%!)'%!+'%!)5TK!"PI!"-[B3!T+Q%!'9m!,Lp
|
||||||
|
K!#TK!&d[B3!X$!!M6em!&@%!AL9&B!!Z6bTK!#"K!#KK!#%UB3!CA`!6,f%!+5T
|
||||||
|
K!"PI!#i[B3!UB3"I,f%!,!`!)dpI!"9K!'!P4@!!,NmUB3!JB3!SB3!K+Q%!'9m
|
||||||
|
!%bpK!#NUB3!CA`!Z,f%!+Q%!B5pK!#`-!#02A`!9B3"L*89J!#j2+Q%!)'%!+'%
|
||||||
|
!)5TK!"PI!"-[B3!T+Q%!'9m!,LpK!#TK!'-[B3!X$!!M6em!&@%!C#9&B!!Z6bT
|
||||||
|
K!#"K!#KK!#%UB3!CA`!6,f%!+5TK!"PI!#i[B3!UB3"P,f%!,!`!)dpI!"9K!'B
|
||||||
|
P4@!!,NmUB3!JB3!SB3!K+Q%!'9m!%bpK!#NUB3!CA`!Z,f%!+Q%!CbpK!#`-!#0
|
||||||
|
2A`!9B3"S*89J!#j2+Q%!)'%!+'%!)5TK!"PI!"-[B3!T+Q%!'9m!,LpK!#TK!'N
|
||||||
|
[B3!X$!!M6em!&@%!DL9&B!!Z6bTK!#"K!#KK!#%UB3!CA`!6,f%!+5TK!"PI!#i
|
||||||
|
[B3!UB3"V,f%!,!`!)dmUB3!JB3!SB3!K+Q%!'9m!%bpK!#NUB3!CA`!Z,f%!+Q%
|
||||||
|
!E#pK!#`-!#02A`!9B3"Y*89J!#j2+Q%!)'%!+'%!)5TK!"PI!"-[B3!T+Q%!'9m
|
||||||
|
!,LpK!#TK!'i[B3!X$!!M6em!&@%!Eb9&B!!Z6bTK!#"K!#KK!#%UB3!CA`!6,f%
|
||||||
|
!+5TK!"PI!#i[B3!UB3"`,f%!,!`!)dpI!"9K!(%P4@!!,NmUB3!JB3!SB3!K+Q%
|
||||||
|
!'9m!%bpK!#NUB3!CA`!Z,f%!+Q%!FLpK!#`-!#02+Q%!)'%!+'%!)5TK!"PI!"-
|
||||||
|
[B3!T+Q%!'9m!,LpK!#TK!(-[B3!X$!!M6em!&@%!G#9&B!!Z6bTK!#"K!#KK!#%
|
||||||
|
UB3!CA`!6,f%!+5TK!"PI!#i[B3!UB3"e,f%!,!`!)dmUB3!JB3!SB3!K+Q%!'9m
|
||||||
|
!%bpK!#NUB3!CA`!A,f%!+Q%!GLpK!#`-!#02+Q%!)'%!+'%!)5TK!"PI!"-[B3!
|
||||||
|
T+Q%!'9m!&bpK!#TK!(F[B3!X$!!M6bTK!#"K!#KK!#%UB3!CA`!6,f%!+5TK!"P
|
||||||
|
I!"F[B3!UB3"i,f%!,!`!)dmUB3!JB3!SB3!K+Q%!'9m!%bpK!#NUB3!CA`!A,f%
|
||||||
|
!+Q%!H5pK!#`-!#02+Q%!)'%!+'%!)5TK!"PI!"-[B3!T+Q%!'9m!&bpK!#TK!(S
|
||||||
|
[B3!X$!!M6bTK!#"K!#KK!#%UB3!CA`!6,f%!+5TK!"PI!"8[B3!UB3"l,f%!,!`
|
||||||
|
!)dmUB3!JB3!SB3!K+Q%!'9m!%bpK!#NUB3!CA`!9,f%!+Q%!I#pK!#`-!#02+Q%
|
||||||
|
!)'%!+'%!)5TK!"PI!"-[B3!T+Q%!'9m!&5pK!#TK!(d[B3!X$!!M6bTK!#"K!#K
|
||||||
|
K!#%UB3!CA`!6,f%!+5TK!"PI!"J[B3!UB3"q,f%!,!`!)dmUB3!JB3!SB3!K+Q%
|
||||||
|
!'9m!%bpK!#NUB3!CA`!B,f%!+Q%!IbpK!#`-!#028&92B3#!B3#"B3##DhCK!)0
|
||||||
|
K!)4K!#)-!)82$!5Y!&%!5deKBfPZG'pcD#")4$T%CA0VG'p`)%C[E'4PFMT*EQ0
|
||||||
|
[E@PZCcT[F'9ZFh0X,90139!Y-6Nj16%b-6%k6@&M6e-kE@YXD@jVFbjKF`!#!!!
|
||||||
|
1"+i!!J6mF!5p!ra`!!%1",d!!3!%[J`%[J!'!!!!!J!!$J5[!!)%r'm%[`2mE`!
|
||||||
|
%$J5r!!3!"-!%`36#"---"-!!%J!-6@&MD@jdEh0S)%K%!!)!!!`%`3!8!!j%CA0
|
||||||
|
VG'p`)%C[E'4PFJ!#!!!-"-)!$J!)5@jMEfeTEQF!!J!!$!6$!"X!&@p`C@jcFf`
|
||||||
|
Y8dj"8#da16Nj-6)a-3!#!!!-",!!4J"!6@&MD@jdEh0S)%K%1N4PFfYdEh!J4Qp
|
||||||
|
XC'9b1NPZBfpYD@jR1Qp`C@jcFf`Y8dj"8#da16Nj-6)a-6T0B@028`!#!!!-",%
|
||||||
|
!5!"#6@&MD@jdEh0S)%K%1N4PFfYdEh!J4QpXC'9b1NPZBfpYD@jR1Qp`C@jcFf`
|
||||||
|
Y8dj"8#da16Nj-6)a-6TTEQ0XG@4P!!)!!!`%XJ"3!%T0B@0TER4[FfJJ5%3k4'9
|
||||||
|
cDh4[F#"'EfaNCA)k5@jMEfeTEQFkEh"PER0cE#e66N&3,6%j16Na-M%a1QPZBfa
|
||||||
|
eC'8kEh"PER0cE!!#!!!-",-!4`""6@&MD@jdEh0S)%K%1N4PFfYdEh!J4QpXC'9
|
||||||
|
b1NPZBfpYD@jR1Qp`C@jcFf`Y8dj"8#da16Nj-6)a-6TMFRP`G'm!!J!!$!5d!%3
|
||||||
|
!2NeKBfPZG'pcD#")4$T%CA0VG'p`)%C[E'4PFMT*EQ0[E@PZCcT[F'9ZFh0X,90
|
||||||
|
139!Y-6Nj16%b-6%kFh0X!!)!!!`%Y3"!!$T0B@0TER4[FfJJ5%3k4'9cDh4[F#"
|
||||||
|
'EfaNCA)k5@jMEfeTEQFkEh"PER0cE#e66N&3,6%j16Na-M%a!!)!!!i%YJ!"&!6
|
||||||
|
%$J6%!!-B"-AmEJ6'$J6&!!-B"-ImE36)$J6(!!-B"-RmE!6+$J6*!!-B!"rmD`6
|
||||||
|
,#[aV!!3+BfC[E!`%b`!1!!K*EQ0[E@PZC`!#!!!+r'`!"!TMCQpX$!6+!"X!&@p
|
||||||
|
`C@jcFf`Y8dj"8#da16Nj-6)a-3!#!!!+r'd!"!TMCQpX$!6)!!d!"fPZBfaeC'8
|
||||||
|
!!J!!#[aZ!!3+BfC[E!`%aJ!9!!peER4TG'aPC#"QEfaNCA)!!J!!$!5h!%i!5%e
|
||||||
|
KBfPZG'pcD#")4$T%CA0VG'p`)%C[E'4PFMT*EQ0[E@PZCcT[F'9ZFh0X,90139!
|
||||||
|
Y-6Nj16%b-6%kBh*jF(4[1RJe-$Pf-`!#!!!"r,%!!!(mX!!!!Ib[!!!"r+i!!'&
|
||||||
|
cBh)!!3!-qYlHV3!!!3!!!*G#!!#@3J!!!AB!!$-8-0J!!!!F!AB!$h0MFhS!!!#
|
||||||
|
#6Np853!!!)jcBh"d!!!!QP4&@&3!!3#QFh4jE!!!!,j$6d4&!!%!bN*14%`!!!$
|
||||||
|
LBA"XG!!!!1j'8N9'!!!!qNP$6L-!!!%'D@0X0!!!!4*TBh-M!!!"(QPMFc3!!!%
|
||||||
|
UD'CNFJ!!!6C659T&!!!"3PG3Eh-!!!&1!!$rr`!!!!!!!!!!!)$rre!!!"i!!!!
|
||||||
|
!!)$rr`!!"cJ#DH#m"'Mrr`!!!*S!!!!!%iRrr`!!"Pi!!!!!"'Mrr`!!!53!!!!
|
||||||
|
!!!$rrb!!!9)!!!!!!!(rra3!!@i#DG`%!)$rr`!!!Pi#DH"X!!$rr`!!!Ri!!!!
|
||||||
|
!!)$rr`!!!S-#DH"d!*Err`!!!Si!!!!!!*Err`!!!j)!!!!!!*Err`!!"CB#DH%
|
||||||
|
i!*Err`!!"GS#DH%dkF$rr`!!"[`!!!!!rrrrr`!!"a)!!!!!!)$rr`!!"b!!!!!
|
||||||
|
!*4S:
|
||||||
116
MacOS/opensslconf.h
Normal file
116
MacOS/opensslconf.h
Normal file
@@ -0,0 +1,116 @@
|
|||||||
|
/* MacOS/opensslconf.h */
|
||||||
|
|
||||||
|
#if !(defined(VMS) || defined(__VMS)) /* VMS uses logical names instead */
|
||||||
|
#if defined(HEADER_CRYPTLIB_H) && !defined(OPENSSLDIR)
|
||||||
|
#define OPENSSLDIR "/usr/local/ssl"
|
||||||
|
#endif
|
||||||
|
#endif
|
||||||
|
|
||||||
|
#if defined(HEADER_IDEA_H) && !defined(IDEA_INT)
|
||||||
|
#define IDEA_INT unsigned int
|
||||||
|
#endif
|
||||||
|
|
||||||
|
#if defined(HEADER_MD2_H) && !defined(MD2_INT)
|
||||||
|
#define MD2_INT unsigned int
|
||||||
|
#endif
|
||||||
|
|
||||||
|
#if defined(HEADER_RC2_H) && !defined(RC2_INT)
|
||||||
|
/* I need to put in a mod for the alpha - eay */
|
||||||
|
#define RC2_INT unsigned int
|
||||||
|
#endif
|
||||||
|
|
||||||
|
#if defined(HEADER_RC4_H)
|
||||||
|
#if !defined(RC4_INT)
|
||||||
|
/* using int types make the structure larger but make the code faster
|
||||||
|
* on most boxes I have tested - up to %20 faster. */
|
||||||
|
/*
|
||||||
|
* I don't know what does "most" mean, but declaring "int" is a must on:
|
||||||
|
* - Intel P6 because partial register stalls are very expensive;
|
||||||
|
* - elder Alpha because it lacks byte load/store instructions;
|
||||||
|
*/
|
||||||
|
#define RC4_INT unsigned char
|
||||||
|
#endif
|
||||||
|
#if !defined(RC4_CHUNK)
|
||||||
|
/*
|
||||||
|
* This enables code handling data aligned at natural CPU word
|
||||||
|
* boundary. See crypto/rc4/rc4_enc.c for further details.
|
||||||
|
*/
|
||||||
|
#define RC4_CHUNK unsigned long
|
||||||
|
#endif
|
||||||
|
#endif
|
||||||
|
|
||||||
|
#if defined(HEADER_DES_H) && !defined(DES_LONG)
|
||||||
|
/* If this is set to 'unsigned int' on a DEC Alpha, this gives about a
|
||||||
|
* %20 speed up (longs are 8 bytes, int's are 4). */
|
||||||
|
#ifndef DES_LONG
|
||||||
|
#define DES_LONG unsigned long
|
||||||
|
#endif
|
||||||
|
#endif
|
||||||
|
|
||||||
|
#if defined(HEADER_BN_H) && !defined(CONFIG_HEADER_BN_H)
|
||||||
|
#define CONFIG_HEADER_BN_H
|
||||||
|
#if __option(longlong)
|
||||||
|
# define BN_LLONG
|
||||||
|
#else
|
||||||
|
# undef BN_LLONG
|
||||||
|
#endif
|
||||||
|
|
||||||
|
/* Should we define BN_DIV2W here? */
|
||||||
|
|
||||||
|
/* Only one for the following should be defined */
|
||||||
|
/* The prime number generation stuff may not work when
|
||||||
|
* EIGHT_BIT but I don't care since I've only used this mode
|
||||||
|
* for debuging the bignum libraries */
|
||||||
|
#undef SIXTY_FOUR_BIT_LONG
|
||||||
|
#undef SIXTY_FOUR_BIT
|
||||||
|
#define THIRTY_TWO_BIT
|
||||||
|
#undef SIXTEEN_BIT
|
||||||
|
#undef EIGHT_BIT
|
||||||
|
#endif
|
||||||
|
|
||||||
|
#if defined(HEADER_RC4_LOCL_H) && !defined(CONFIG_HEADER_RC4_LOCL_H)
|
||||||
|
#define CONFIG_HEADER_RC4_LOCL_H
|
||||||
|
/* if this is defined data[i] is used instead of *data, this is a %20
|
||||||
|
* speedup on x86 */
|
||||||
|
#undef RC4_INDEX
|
||||||
|
#endif
|
||||||
|
|
||||||
|
#if defined(HEADER_BF_LOCL_H) && !defined(CONFIG_HEADER_BF_LOCL_H)
|
||||||
|
#define CONFIG_HEADER_BF_LOCL_H
|
||||||
|
#define BF_PTR
|
||||||
|
#endif /* HEADER_BF_LOCL_H */
|
||||||
|
|
||||||
|
#if defined(HEADER_DES_LOCL_H) && !defined(CONFIG_HEADER_DES_LOCL_H)
|
||||||
|
#define CONFIG_HEADER_DES_LOCL_H
|
||||||
|
/* the following is tweaked from a config script, that is why it is a
|
||||||
|
* protected undef/define */
|
||||||
|
#ifndef DES_PTR
|
||||||
|
#define DES_PTR
|
||||||
|
#endif
|
||||||
|
|
||||||
|
/* This helps C compiler generate the correct code for multiple functional
|
||||||
|
* units. It reduces register dependancies at the expense of 2 more
|
||||||
|
* registers */
|
||||||
|
#ifndef DES_RISC1
|
||||||
|
#define DES_RISC1
|
||||||
|
#endif
|
||||||
|
|
||||||
|
#ifndef DES_RISC2
|
||||||
|
#undef DES_RISC2
|
||||||
|
#endif
|
||||||
|
|
||||||
|
#if defined(DES_RISC1) && defined(DES_RISC2)
|
||||||
|
YOU SHOULD NOT HAVE BOTH DES_RISC1 AND DES_RISC2 DEFINED!!!!!
|
||||||
|
#endif
|
||||||
|
|
||||||
|
/* Unroll the inner loop, this sometimes helps, sometimes hinders.
|
||||||
|
* Very mucy CPU dependant */
|
||||||
|
#ifndef DES_UNROLL
|
||||||
|
#define DES_UNROLL
|
||||||
|
#endif
|
||||||
|
|
||||||
|
#endif /* HEADER_DES_LOCL_H */
|
||||||
|
|
||||||
|
#ifndef __POWERPC__
|
||||||
|
#define MD32_XARRAY
|
||||||
|
#endif
|
||||||
798
Makefile.in
798
Makefile.in
@@ -1,798 +0,0 @@
|
|||||||
##
|
|
||||||
## Makefile for OpenSSL
|
|
||||||
##
|
|
||||||
## {- join("\n## ", @autowarntext) -}
|
|
||||||
|
|
||||||
VERSION={- $config{version} -}
|
|
||||||
MAJOR={- $config{major} -}
|
|
||||||
MINOR={- $config{minor} -}
|
|
||||||
SHLIB_VERSION_NUMBER={- $config{shlib_version_number} -}
|
|
||||||
SHLIB_VERSION_HISTORY={- $config{shlib_version_history} -}
|
|
||||||
SHLIB_MAJOR={- $config{shlib_major} -}
|
|
||||||
SHLIB_MINOR={- $config{shlib_minor} -}
|
|
||||||
SHLIB_EXT={- $target{shared_extension} || ".so" -}
|
|
||||||
SHLIB_EXT_SIMPLE={- $target{shared_extension_simple} || ".so" -}
|
|
||||||
SHLIB_EXT_IMPORT={- $target{shared_import_extension} || "" -}
|
|
||||||
DSO_EXT={- $target{dso_extension} || ".so" -}
|
|
||||||
PLATFORM={- $config{target} -}
|
|
||||||
OPTIONS={- $config{options} -}
|
|
||||||
CONFIGURE_ARGS=({- join(", ",quotify_l(@{$config{perlargv}})) -})
|
|
||||||
SHLIB_TARGET={- $target{shared_target} -}
|
|
||||||
|
|
||||||
# HERE indicates where this Makefile lives. This can be used to indicate
|
|
||||||
# where sub-Makefiles are expected to be. Currently has very limited usage,
|
|
||||||
# and should probably not be bothered with at all.
|
|
||||||
HERE=.
|
|
||||||
|
|
||||||
# DESTDIR is for package builders so that they can configure
|
|
||||||
# for, say, /usr/ and yet have everything installed to /tmp/somedir/usr/.
|
|
||||||
# Normally it is left empty.
|
|
||||||
DESTDIR=
|
|
||||||
|
|
||||||
# Do not edit these manually. Use Configure with --prefix or --openssldir
|
|
||||||
# to change this! Short explanation in the top comment in Configure
|
|
||||||
INSTALLTOP={- # $prefix is used in the OPENSSLDIR perl snippet
|
|
||||||
#
|
|
||||||
our $prefix = $config{prefix} || "/usr/local";
|
|
||||||
$prefix -}
|
|
||||||
OPENSSLDIR={- #
|
|
||||||
# The logic here is that if no --openssldir was given,
|
|
||||||
# OPENSSLDIR will get the value from $prefix plus "/ssl".
|
|
||||||
# If --openssldir was given and the value is an absolute
|
|
||||||
# path, OPENSSLDIR will get its value without change.
|
|
||||||
# If the value from --openssldir is a relative path,
|
|
||||||
# OPENSSLDIR will get $prefix with the --openssldir
|
|
||||||
# value appended as a subdirectory.
|
|
||||||
#
|
|
||||||
use File::Spec::Functions;
|
|
||||||
our $openssldir =
|
|
||||||
$config{openssldir} ?
|
|
||||||
(file_name_is_absolute($config{openssldir}) ?
|
|
||||||
$config{openssldir}
|
|
||||||
: catdir($prefix, $config{openssldir}))
|
|
||||||
: catdir($prefix, "ssl");
|
|
||||||
$openssldir -}
|
|
||||||
LIBDIR={- #
|
|
||||||
# if $prefix/lib$target{multilib} is not an existing
|
|
||||||
# directory, then assume that it's not searched by linker
|
|
||||||
# automatically, in which case adding $target{multilib} suffix
|
|
||||||
# causes more grief than we're ready to tolerate, so don't...
|
|
||||||
our $multilib =
|
|
||||||
-d "$prefix/lib$target{multilib}" ? $target{multilib} : "";
|
|
||||||
our $libdir = $config{libdir} || "lib$multilib";
|
|
||||||
$libdir -}
|
|
||||||
ENGINESDIR={- use File::Spec::Functions;
|
|
||||||
catdir($prefix,$libdir,"engines") -}
|
|
||||||
|
|
||||||
# NO_IDEA - Define to build without the IDEA algorithm
|
|
||||||
# NO_RC4 - Define to build without the RC4 algorithm
|
|
||||||
# NO_RC2 - Define to build without the RC2 algorithm
|
|
||||||
# THREADS - Define when building with threads, you will probably also need any
|
|
||||||
# system defines as well, i.e. _REENTRANT for Solaris 2.[34]
|
|
||||||
# TERMIO - Define the termio terminal subsystem, needed if sgtty is missing.
|
|
||||||
# TERMIOS - Define the termios terminal subsystem, Silicon Graphics.
|
|
||||||
# LONGCRYPT - Define to use HPUX 10.x's long password modification to crypt(3).
|
|
||||||
# DEVRANDOM - Give this the value of the 'random device' if your OS supports
|
|
||||||
# one. 32 bytes will be read from this when the random
|
|
||||||
# number generator is initalised.
|
|
||||||
# SSL_FORBID_ENULL - define if you want the server to be not able to use the
|
|
||||||
# NULL encryption ciphers.
|
|
||||||
#
|
|
||||||
# LOCK_DEBUG - turns on lots of lock debug output :-)
|
|
||||||
# REF_DEBUG - turn on some xyz_free() assertions.
|
|
||||||
# REF_PRINT - prints some stuff on structure free.
|
|
||||||
# MFUNC - Make all Malloc/Free/Realloc calls call
|
|
||||||
# CRYPTO_malloc/CRYPTO_free/CRYPTO_realloc which can be setup to
|
|
||||||
# call application defined callbacks via CRYPTO_set_mem_functions()
|
|
||||||
# MD5_ASM needs to be defined to use the x86 assembler for MD5
|
|
||||||
# SHA1_ASM needs to be defined to use the x86 assembler for SHA1
|
|
||||||
# RMD160_ASM needs to be defined to use the x86 assembler for RIPEMD160
|
|
||||||
# Do not define B_ENDIAN or L_ENDIAN if 'unsigned long' == 8. It must
|
|
||||||
# equal 4.
|
|
||||||
# PKCS1_CHECK - pkcs1 tests.
|
|
||||||
|
|
||||||
CROSS_COMPILE= {- $config{cross_compile_prefix} -}
|
|
||||||
CC= $(CROSS_COMPILE){- $target{cc} -}
|
|
||||||
CFLAG={- our $cflags2 = join(" ",(map { "-D".$_} @{$target{defines}}, @{$config{defines}}),"-DOPENSSLDIR=\"\\\"\$(OPENSSLDIR)\\\"\"","-DENGINESDIR=\"\\\"\$(ENGINESDIR)\\\"\"") -} {- $target{cflags} -} {- $config{cflags} -}
|
|
||||||
CFLAG_Q={- $cflags2 =~ s|([\\"])|\\$1|g; $cflags2 -} {- $config{cflags} -}
|
|
||||||
LDFLAG= {- $target{lflags} -} {- $config{lflags} -}
|
|
||||||
PLIB_LDFLAG= {- $target{plib_lflags} -} {- $config{plib_lflags} -}
|
|
||||||
EX_LIBS= {- $target{ex_libs} -} {- $config{ex_libs} -}
|
|
||||||
EXE_EXT= {- $target{exe_extension} -}
|
|
||||||
ARFLAGS= {- $target{arflags} -}
|
|
||||||
AR=$(CROSS_COMPILE){- $target{ar} -} $(ARFLAGS) r
|
|
||||||
RANLIB= {- $target{ranlib} -}
|
|
||||||
NM= $(CROSS_COMPILE){- $target{nm} -}
|
|
||||||
PERL= {- $config{perl} -}
|
|
||||||
#RM= echo --
|
|
||||||
RM= rm -f
|
|
||||||
TAR= tar
|
|
||||||
TARFLAGS= --no-recursion
|
|
||||||
MAKEDEPPROG=$(CROSS_COMPILE){- $config{makedepprog} -}
|
|
||||||
|
|
||||||
# We let the C compiler driver to take care of .s files. This is done in
|
|
||||||
# order to be excused from maintaining a separate set of architecture
|
|
||||||
# dependent assembler flags. E.g. if you throw -mcpu=ultrasparc at SPARC
|
|
||||||
# gcc, then the driver will automatically translate it to -xarch=v8plus
|
|
||||||
# and pass it down to assembler.
|
|
||||||
AS=$(CC) -c
|
|
||||||
ASFLAG=$(CFLAG)
|
|
||||||
|
|
||||||
# For x86 assembler: Set PROCESSOR to 386 if you want to support
|
|
||||||
# the 80386.
|
|
||||||
PROCESSOR= {- $config{processor} -}
|
|
||||||
|
|
||||||
# CPUID module collects small commonly used assembler snippets
|
|
||||||
APPS_OBJ={- $target{apps_obj} -}
|
|
||||||
CPUID_OBJ= {- $target{cpuid_obj} -}
|
|
||||||
UPLINK_OBJ= {- $target{uplink_obj} -}
|
|
||||||
BN_ASM= {- $target{bn_obj} -}
|
|
||||||
EC_ASM= {- $target{ec_obj} -}
|
|
||||||
DES_ENC= {- $target{des_obj} -}
|
|
||||||
AES_ENC= {- $target{aes_obj} -}
|
|
||||||
BF_ENC= {- $target{bf_obj} -}
|
|
||||||
CAST_ENC= {- $target{cast_obj} -}
|
|
||||||
RC4_ENC= {- $target{rc4_obj} -}
|
|
||||||
RC5_ENC= {- $target{rc5_obj} -}
|
|
||||||
MD5_ASM_OBJ= {- $target{md5_obj} -}
|
|
||||||
SHA1_ASM_OBJ= {- $target{sha1_obj} -}
|
|
||||||
RMD160_ASM_OBJ= {- $target{rmd160_obj} -}
|
|
||||||
BLAKE2_OBJ= {- $target{blake2_obj} -}
|
|
||||||
WP_ASM_OBJ= {- $target{wp_obj} -}
|
|
||||||
CMLL_ENC= {- $target{cmll_obj} -}
|
|
||||||
MODES_ASM_OBJ= {- $target{modes_obj} -}
|
|
||||||
PADLOCK_ASM_OBJ= {- $target{padlock_obj} -}
|
|
||||||
CHACHA_ENC= {- $target{chacha_obj} -}
|
|
||||||
POLY1305_ASM_OBJ= {- $target{poly1305_obj} -}
|
|
||||||
PERLASM_SCHEME= {- $target{perlasm_scheme} -}
|
|
||||||
|
|
||||||
# Zlib stuff
|
|
||||||
ZLIB_INCLUDE={- $withargs{zlib_include} -}
|
|
||||||
LIBZLIB={- $withargs{zlib_lib} -}
|
|
||||||
|
|
||||||
# This is the location of fipscanister.o and friends.
|
|
||||||
# The FIPS module build will place it $(INSTALLTOP)/lib
|
|
||||||
# but since $(INSTALLTOP) can only take the default value
|
|
||||||
# when the module is built it will be in /usr/local/ssl/lib
|
|
||||||
# $(INSTALLTOP) for this build may be different so hard
|
|
||||||
# code the path.
|
|
||||||
|
|
||||||
FIPSLIBDIR={- $config{fipslibdir} -}
|
|
||||||
|
|
||||||
# The location of the library which contains fipscanister.o
|
|
||||||
# normally it will be libcrypto. If not compiling in FIPS mode
|
|
||||||
# at all this is empty making it a useful test for a FIPS compile.
|
|
||||||
|
|
||||||
FIPSCANLIB={- $config{fips} ? "libcrypto" : "" -}
|
|
||||||
|
|
||||||
# Shared library base address. Currently only used on Windows.
|
|
||||||
#
|
|
||||||
|
|
||||||
BASEADDR={- $config{baseaddr} -}
|
|
||||||
|
|
||||||
DIRS= {- join(" ", @{$config{dirs}}) -}
|
|
||||||
SHLIBDIRS= crypto ssl
|
|
||||||
INSTALL_SUBS= engines apps tools
|
|
||||||
|
|
||||||
# dirs in crypto to build
|
|
||||||
SDIRS= {- join(" ", @{$config{sdirs}}) -}
|
|
||||||
|
|
||||||
# tests to perform. "alltests" is a special word indicating that all tests
|
|
||||||
# should be performed.
|
|
||||||
TESTS = alltests
|
|
||||||
|
|
||||||
MAKEFILE= Makefile
|
|
||||||
|
|
||||||
MANDIR=$(INSTALLTOP)/share/man
|
|
||||||
MAN1=1
|
|
||||||
MAN3=3
|
|
||||||
MANSUFFIX=
|
|
||||||
HTMLSUFFIX=html
|
|
||||||
HTMLDIR=$(INSTALLTOP)/share/doc/$(BASENAME)/html
|
|
||||||
SHELL=/bin/sh
|
|
||||||
|
|
||||||
TOP= .
|
|
||||||
LIBS= libcrypto.a libssl.a
|
|
||||||
SHARED_CRYPTO=libcrypto$(SHLIB_EXT)
|
|
||||||
SHARED_SSL=libssl$(SHLIB_EXT)
|
|
||||||
SHARED_LIBS={- $disabled{shared} ? '' : '$(SHARED_CRYPTO) $(SHARED_SSL)' -}
|
|
||||||
SHARED_CFLAG={- $target{shared_cflag} -}
|
|
||||||
SHARED_LDFLAG={- $target{shared_ldflag}." ".$config{shared_ldflag}
|
|
||||||
# Unlike other OSes (like Solaris, Linux, Tru64,
|
|
||||||
# IRIX) BSD run-time linkers (tested OpenBSD, NetBSD
|
|
||||||
# and FreeBSD) "demand" RPATH set on .so objects.
|
|
||||||
# Apparently application RPATH is not global and
|
|
||||||
# does not apply to .so linked with other .so.
|
|
||||||
# Problem manifests itself when libssl.so fails to
|
|
||||||
# load libcrypto.so. One can argue that we should
|
|
||||||
# engrave this into Makefile.shared rules or into
|
|
||||||
# BSD-* config lines above. Meanwhile let's try to
|
|
||||||
# be cautious and pass -rpath to linker only when
|
|
||||||
# $prefix is not /usr.
|
|
||||||
. ($config{target} =~ m|^BSD-| && $prefix !~ m|^/usr/.*$|
|
|
||||||
? " -Wl,-rpath,\$\$(LIBRPATH)" : "") -}
|
|
||||||
SHARED_RCFLAG={- $target{shared_rcflag} -}
|
|
||||||
DYNAMIC_ENGINES={- $config{dynamic_engines} -}
|
|
||||||
|
|
||||||
GENERAL= Makefile
|
|
||||||
BASENAME= openssl
|
|
||||||
NAME= $(BASENAME)-$(VERSION)
|
|
||||||
TARFILE= ../$(NAME).tar
|
|
||||||
HEADER= e_os.h
|
|
||||||
|
|
||||||
# Directories created on install if they don't exist.
|
|
||||||
INSTALLDIRS= \
|
|
||||||
$(DESTDIR)$(INSTALLTOP)/bin \
|
|
||||||
$(DESTDIR)$(INSTALLTOP)/$(LIBDIR) \
|
|
||||||
$(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/engines \
|
|
||||||
$(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/pkgconfig \
|
|
||||||
$(DESTDIR)$(INSTALLTOP)/include/openssl \
|
|
||||||
$(DESTDIR)$(OPENSSLDIR)/misc \
|
|
||||||
$(DESTDIR)$(OPENSSLDIR)/certs \
|
|
||||||
$(DESTDIR)$(OPENSSLDIR)/private
|
|
||||||
|
|
||||||
ENGDIRS={- join(" ", @{$config{engdirs}}) -}
|
|
||||||
|
|
||||||
all: Makefile build_all_but_tests
|
|
||||||
|
|
||||||
# as we stick to -e, CLEARENV ensures that local variables in lower
|
|
||||||
# Makefiles remain local and variable. $${VAR+VAR} is tribute to Korn
|
|
||||||
# shell, which [annoyingly enough] terminates unset with error if VAR
|
|
||||||
# is not present:-( TOP= && unset TOP is tribute to HP-UX /bin/sh,
|
|
||||||
# which terminates unset with error if no variable was present:-(
|
|
||||||
CLEARENV= TOP= && unset TOP $${LIB+LIB} $${LIBS+LIBS} \
|
|
||||||
$${INCLUDE+INCLUDE} $${INCLUDES+INCLUDES} \
|
|
||||||
$${DIR+DIR} $${DIRS+DIRS} $${SRC+SRC} \
|
|
||||||
$${LIBSRC+LIBSRC} $${LIBOBJ+LIBOBJ} $${ALL+ALL} \
|
|
||||||
$${HEADER+HEADER} \
|
|
||||||
$${GENERAL+GENERAL} $${CFLAGS+CFLAGS} \
|
|
||||||
$${ASFLAGS+ASFLAGS} $${AFLAGS+AFLAGS} \
|
|
||||||
$${LDCMD+LDCMD} $${LDFLAGS+LDFLAGS} $${SCRIPTS+SCRIPTS} \
|
|
||||||
$${SHAREDCMD+SHAREDCMD} $${SHAREDFLAGS+SHAREDFLAGS} \
|
|
||||||
$${SHARED_LIB+SHARED_LIB} $${LIBEXTRAS+LIBEXTRAS}
|
|
||||||
|
|
||||||
# LC_ALL=C ensures that error [and other] messages are delivered in
|
|
||||||
# same language for uniform treatment.
|
|
||||||
BUILDENV= LC_ALL=C PLATFORM='$(PLATFORM)' PROCESSOR='$(PROCESSOR)'\
|
|
||||||
CC='$(CC)' CFLAG='$(CFLAG)' CFLAG_Q='$(CFLAG_Q)' \
|
|
||||||
SHARED_CFLAG='$(SHARED_CFLAG)' \
|
|
||||||
AS='$(CC)' ASFLAG='$(CFLAG) -c' \
|
|
||||||
AR='$(AR)' NM='$(NM)' RANLIB='$(RANLIB)' \
|
|
||||||
CROSS_COMPILE='$(CROSS_COMPILE)' \
|
|
||||||
PERL='$(PERL)' DYNAMIC_ENGINES='$(DYNAMIC_ENGINES)' \
|
|
||||||
SDIRS='$(SDIRS)' LIBRPATH='$(INSTALLTOP)/$(LIBDIR)' \
|
|
||||||
DESTDIR='$(DESTDIR)' \
|
|
||||||
INSTALLTOP='$(INSTALLTOP)' OPENSSLDIR='$(OPENSSLDIR)' \
|
|
||||||
LIBDIR='$(LIBDIR)' \
|
|
||||||
SHARED_LDFLAG='$(SHARED_LDFLAG)' \
|
|
||||||
SHARED_RCFLAG='$(SHARED_RCFLAG)' \
|
|
||||||
ZLIB_INCLUDE='$(ZLIB_INCLUDE)' LIBZLIB='$(LIBZLIB)' \
|
|
||||||
EXE_EXT='$(EXE_EXT)' SHARED_LIBS='$(SHARED_LIBS)' \
|
|
||||||
SHLIB_EXT='$(SHLIB_EXT)' DSO_EXT='$(DSO_EXT)' \
|
|
||||||
SHLIB_TARGET='$(SHLIB_TARGET)' \
|
|
||||||
LDFLAG='$(LDFLAG)' \
|
|
||||||
PLIB_LDFLAG='$(PLIB_LDFLAG)' EX_LIBS='$(EX_LIBS)' \
|
|
||||||
APPS_OBJ='$(APPS_OBJ)' UPLINK_OBJ='$(UPLINK_OBJ)' \
|
|
||||||
CPUID_OBJ='$(CPUID_OBJ)' BN_ASM='$(BN_ASM)' \
|
|
||||||
EC_ASM='$(EC_ASM)' DES_ENC='$(DES_ENC)' \
|
|
||||||
AES_ENC='$(AES_ENC)' CMLL_ENC='$(CMLL_ENC)' \
|
|
||||||
BF_ENC='$(BF_ENC)' CAST_ENC='$(CAST_ENC)' \
|
|
||||||
RC4_ENC='$(RC4_ENC)' RC5_ENC='$(RC5_ENC)' \
|
|
||||||
ENGDIRS='$(ENGDIRS)' \
|
|
||||||
SHA1_ASM_OBJ='$(SHA1_ASM_OBJ)' \
|
|
||||||
MD5_ASM_OBJ='$(MD5_ASM_OBJ)' \
|
|
||||||
RMD160_ASM_OBJ='$(RMD160_ASM_OBJ)' \
|
|
||||||
BLAKE2_OBJ='$(BLAKE2_OBJ)' \
|
|
||||||
WP_ASM_OBJ='$(WP_ASM_OBJ)' \
|
|
||||||
MODES_ASM_OBJ='$(MODES_ASM_OBJ)' \
|
|
||||||
PADLOCK_ASM_OBJ='$(PADLOCK_ASM_OBJ)' \
|
|
||||||
CHACHA_ENC='$(CHACHA_ENC)' \
|
|
||||||
POLY1305_ASM_OBJ='$(POLY1305_ASM_OBJ)' \
|
|
||||||
PERLASM_SCHEME='$(PERLASM_SCHEME)' \
|
|
||||||
FIPSLIBDIR='${FIPSLIBDIR}' \
|
|
||||||
FIPSCANLIB="$${FIPSCANLIB:-$(FIPSCANLIB)}" \
|
|
||||||
THIS=$${THIS:-$@} MAKEFILE=Makefile MAKEOVERRIDES=
|
|
||||||
# MAKEOVERRIDES= effectively "equalizes" GNU-ish and SysV-ish make flavors,
|
|
||||||
# which in turn eliminates ambiguities in variable treatment with -e.
|
|
||||||
|
|
||||||
# BUILD_CMD is a generic macro to build a given target in a given
|
|
||||||
# subdirectory. The target must be given through the shell variable
|
|
||||||
# `target' and the subdirectory to build in must be given through `dir'.
|
|
||||||
# This macro shouldn't be used directly, use RECURSIVE_BUILD_CMD or
|
|
||||||
# BUILD_ONE_CMD instead.
|
|
||||||
#
|
|
||||||
# RECURSIVE_BUILD_CMD is a macro to build a given target in all
|
|
||||||
# subdirectories defined in $(DIRS). It requires that the target
|
|
||||||
# is given through the shell variable `target'.
|
|
||||||
#
|
|
||||||
# BUILD_ONE_CMD is a macro to build a given target in a given
|
|
||||||
# subdirectory if that subdirectory is part of $(DIRS). It requires
|
|
||||||
# exactly the same shell variables as BUILD_CMD.
|
|
||||||
BUILD_CMD= if [ -d "$$dir" ]; then \
|
|
||||||
( cd $$dir && echo "making $$target in $$dir..." && \
|
|
||||||
$(CLEARENV) && $(MAKE) -e $(BUILDENV) TOP=.. DIR=$$dir $$target \
|
|
||||||
) || exit 1; \
|
|
||||||
fi
|
|
||||||
RECURSIVE_BUILD_CMD=for dir in $(DIRS); do $(BUILD_CMD); done
|
|
||||||
BUILD_ONE_CMD=\
|
|
||||||
if expr " $(DIRS) " : ".* $$dir " >/dev/null 2>&1; then \
|
|
||||||
$(BUILD_CMD); \
|
|
||||||
fi
|
|
||||||
|
|
||||||
reflect:
|
|
||||||
@[ -n "$(THIS)" ] && $(CLEARENV) && $(MAKE) $(THIS) -e $(BUILDENV)
|
|
||||||
|
|
||||||
sub_all: build_all
|
|
||||||
|
|
||||||
build_all_but_tests: build_libs build_apps build_tools
|
|
||||||
build_all: build_all_but_tests build_tests
|
|
||||||
|
|
||||||
build_libs: build_libcrypto build_libssl openssl.pc
|
|
||||||
|
|
||||||
build_libcrypto: build_crypto build_engines libcrypto.pc
|
|
||||||
build_libssl: build_ssl libssl.pc
|
|
||||||
|
|
||||||
build_crypto:
|
|
||||||
@dir=crypto; target=all; $(BUILD_ONE_CMD)
|
|
||||||
build_ssl: build_crypto
|
|
||||||
@dir=ssl; target=all; $(BUILD_ONE_CMD)
|
|
||||||
build_engines: build_crypto
|
|
||||||
@dir=engines; target=all; AS='$(CC) -c'; export AS; $(BUILD_ONE_CMD)
|
|
||||||
|
|
||||||
build_apps: build_libs
|
|
||||||
@dir=apps; target=all; $(BUILD_ONE_CMD)
|
|
||||||
build_tests: build_libs
|
|
||||||
@dir=test; target=all; $(BUILD_ONE_CMD)
|
|
||||||
build_tools: build_libs
|
|
||||||
@dir=tools; target=all; $(BUILD_ONE_CMD)
|
|
||||||
|
|
||||||
all_testapps: build_libs build_testapps
|
|
||||||
build_testapps:
|
|
||||||
@dir=crypto; target=testapps; $(BUILD_ONE_CMD)
|
|
||||||
|
|
||||||
libcrypto$(SHLIB_EXT): libcrypto.a
|
|
||||||
@if [ "$(SHLIB_TARGET)" != "" ]; then \
|
|
||||||
if [ "$(FIPSCANLIB)" = "libcrypto" ]; then \
|
|
||||||
FIPSLD_CC="$(CC)"; CC=fips/fipsld; \
|
|
||||||
export CC FIPSLD_CC; \
|
|
||||||
fi; \
|
|
||||||
$(MAKE) -e SHLIBDIRS=crypto CC="$${CC:-$(CC)}" build-shared; \
|
|
||||||
else \
|
|
||||||
echo "There's no support for shared libraries on this platform" >&2; \
|
|
||||||
exit 1; \
|
|
||||||
fi
|
|
||||||
|
|
||||||
libssl$(SHLIB_EXT): libcrypto$(SHLIB_EXT) libssl.a
|
|
||||||
@if [ "$(SHLIB_TARGET)" != "" ]; then \
|
|
||||||
$(MAKE) SHLIBDIRS=ssl SHLIBDEPS='-lcrypto' build-shared; \
|
|
||||||
else \
|
|
||||||
echo "There's no support for shared libraries on this platform" >&2; \
|
|
||||||
exit 1; \
|
|
||||||
fi
|
|
||||||
|
|
||||||
link-shared:
|
|
||||||
@ set -e; for i in $(SHLIBDIRS); do \
|
|
||||||
$(MAKE) -f $(HERE)/Makefile.shared -e $(BUILDENV) \
|
|
||||||
LIBNAME=$$i LIBVERSION=$(SHLIB_MAJOR).$(SHLIB_MINOR) \
|
|
||||||
LIBCOMPATVERSIONS=";$(SHLIB_VERSION_HISTORY)" \
|
|
||||||
symlink.$(SHLIB_TARGET); \
|
|
||||||
libs="$$libs -l$$i"; \
|
|
||||||
done
|
|
||||||
|
|
||||||
build-shared: do_$(SHLIB_TARGET) link-shared
|
|
||||||
|
|
||||||
do_$(SHLIB_TARGET):
|
|
||||||
@ set -e; libs='-L. $(SHLIBDEPS)'; for i in $(SHLIBDIRS); do \
|
|
||||||
$(CLEARENV) && $(MAKE) -f Makefile.shared -e $(BUILDENV) \
|
|
||||||
LIBNAME=$$i LIBVERSION=$(SHLIB_MAJOR).$(SHLIB_MINOR) \
|
|
||||||
LIBCOMPATVERSIONS=";$(SHLIB_VERSION_HISTORY)" \
|
|
||||||
LIBDEPS="$$libs $(EX_LIBS)" \
|
|
||||||
link_shlib.$(SHLIB_TARGET); \
|
|
||||||
libs="-l$$i $$libs"; \
|
|
||||||
case "$(PLATFORM)" in \
|
|
||||||
Cygwin*) \
|
|
||||||
rm -f apps/cyg$$i-$(SHLIB_MAJOR).$(SHLIB_MINOR).dll; \
|
|
||||||
rm -f test/cyg$$i-$(SHLIB_MAJOR).$(SHLIB_MINOR).dll; \
|
|
||||||
cp cyg$$i-$(SHLIB_MAJOR).$(SHLIB_MINOR).dll apps/; \
|
|
||||||
cp cyg$$i-$(SHLIB_MAJOR).$(SHLIB_MINOR).dll test/; \
|
|
||||||
;; \
|
|
||||||
mingw*) \
|
|
||||||
arch=; \
|
|
||||||
if expr $(PLATFORM) : mingw64 > /dev/null; then \
|
|
||||||
arch=-x64; \
|
|
||||||
fi; \
|
|
||||||
rm -f apps/lib$$i-$(SHLIB_MAJOR)_$(SHLIB_MINOR)$$arch.dll; \
|
|
||||||
rm -f test/lib$$i-$(SHLIB_MAJOR)_$(SHLIB_MINOR)$$arch.dll; \
|
|
||||||
cp lib$$i-$(SHLIB_MAJOR)_$(SHLIB_MINOR)$$arch.dll apps/; \
|
|
||||||
cp lib$$i-$(SHLIB_MAJOR)_$(SHLIB_MINOR)$$arch.dll test/; \
|
|
||||||
;; \
|
|
||||||
esac; \
|
|
||||||
done
|
|
||||||
|
|
||||||
libcrypto.pc: Makefile
|
|
||||||
@ ( echo 'prefix=$(INSTALLTOP)'; \
|
|
||||||
echo 'exec_prefix=$${prefix}'; \
|
|
||||||
echo 'libdir=$${exec_prefix}/$(LIBDIR)'; \
|
|
||||||
echo 'includedir=$${prefix}/include'; \
|
|
||||||
echo ''; \
|
|
||||||
echo 'Name: OpenSSL-libcrypto'; \
|
|
||||||
echo 'Description: OpenSSL cryptography library'; \
|
|
||||||
echo 'Version: '$(VERSION); \
|
|
||||||
echo 'Requires: '; \
|
|
||||||
echo 'Libs: -L$${libdir} -lcrypto'; \
|
|
||||||
echo 'Libs.private: $(EX_LIBS)'; \
|
|
||||||
echo 'Cflags: -I$${includedir}' ) > libcrypto.pc
|
|
||||||
|
|
||||||
libssl.pc: Makefile
|
|
||||||
@ ( echo 'prefix=$(INSTALLTOP)'; \
|
|
||||||
echo 'exec_prefix=$${prefix}'; \
|
|
||||||
echo 'libdir=$${exec_prefix}/$(LIBDIR)'; \
|
|
||||||
echo 'includedir=$${prefix}/include'; \
|
|
||||||
echo ''; \
|
|
||||||
echo 'Name: OpenSSL-libssl'; \
|
|
||||||
echo 'Description: Secure Sockets Layer and cryptography libraries'; \
|
|
||||||
echo 'Version: '$(VERSION); \
|
|
||||||
echo 'Requires.private: libcrypto'; \
|
|
||||||
echo 'Libs: -L$${libdir} -lssl'; \
|
|
||||||
echo 'Libs.private: $(EX_LIBS)'; \
|
|
||||||
echo 'Cflags: -I$${includedir}' ) > libssl.pc
|
|
||||||
|
|
||||||
openssl.pc: Makefile
|
|
||||||
@ ( echo 'prefix=$(INSTALLTOP)'; \
|
|
||||||
echo 'exec_prefix=$${prefix}'; \
|
|
||||||
echo 'libdir=$${exec_prefix}/$(LIBDIR)'; \
|
|
||||||
echo 'includedir=$${prefix}/include'; \
|
|
||||||
echo ''; \
|
|
||||||
echo 'Name: OpenSSL'; \
|
|
||||||
echo 'Description: Secure Sockets Layer and cryptography libraries and tools'; \
|
|
||||||
echo 'Version: '$(VERSION); \
|
|
||||||
echo 'Requires: libssl libcrypto' ) > openssl.pc
|
|
||||||
|
|
||||||
Makefile: Makefile.in Configure config
|
|
||||||
@echo "Makefile is older than Makefile.in, Configure or config."
|
|
||||||
@echo "Reconfigure the source tree (via './config' or 'perl Configure'), please."
|
|
||||||
@false
|
|
||||||
|
|
||||||
libclean:
|
|
||||||
rm -f *.map *.so *.so.* *.dylib *.dll engines/*.so engines/*.dll engines/*.dylib *.a engines/*.a */lib */*/lib
|
|
||||||
|
|
||||||
clean: libclean
|
|
||||||
rm -f */*/*.o */*.o *.o core a.out fluff testlog make.log cctest cctest.c
|
|
||||||
rm -rf *.bak certs/.0
|
|
||||||
@set -e; target=clean; $(RECURSIVE_BUILD_CMD)
|
|
||||||
rm -f $(LIBS) tags TAGS
|
|
||||||
rm -f openssl.pc libssl.pc libcrypto.pc
|
|
||||||
rm -f speed.* .pure
|
|
||||||
rm -f $(TARFILE)
|
|
||||||
|
|
||||||
gentests:
|
|
||||||
@(cd test && echo "generating dummy tests (if needed)..." && \
|
|
||||||
$(CLEARENV) && $(MAKE) -e $(BUILDENV) TESTS='$(TESTS)' OPENSSL_DEBUG_MEMORY=on generate );
|
|
||||||
|
|
||||||
test: tests
|
|
||||||
|
|
||||||
tests: build_tests
|
|
||||||
@(cd test && echo "testing..." && \
|
|
||||||
$(CLEARENV) && $(MAKE) -e $(BUILDENV) TOP=.. TESTS='$(TESTS)' OPENSSL_DEBUG_MEMORY=on OPENSSL_CONF=../apps/openssl.cnf tests );
|
|
||||||
@if [ -z "$(CROSS_COMPILE)" ]; then \
|
|
||||||
OPENSSL_CONF=apps/openssl.cnf util/opensslwrap.sh version -a; \
|
|
||||||
fi
|
|
||||||
|
|
||||||
list-tests:
|
|
||||||
@(cd test && \
|
|
||||||
$(CLEARENV) && $(MAKE) -e $(BUILDENV) TOP=.. list-tests)
|
|
||||||
|
|
||||||
report:
|
|
||||||
@$(PERL) util/selftest.pl
|
|
||||||
|
|
||||||
tags TAGS: FORCE
|
|
||||||
rm -f TAGS tags
|
|
||||||
-ctags -R .
|
|
||||||
-etags `find . -name '*.[ch]' -o -name '*.pm'`
|
|
||||||
|
|
||||||
FORCE:
|
|
||||||
|
|
||||||
depend:
|
|
||||||
@set -e; target=depend; $(RECURSIVE_BUILD_CMD)
|
|
||||||
|
|
||||||
update: generate errors ordinals depend
|
|
||||||
|
|
||||||
generate:
|
|
||||||
(cd apps && PERL='${PERL}' $(MAKE) generate)
|
|
||||||
(cd crypto/bn && PERL='${PERL}' $(MAKE) generate)
|
|
||||||
(cd crypto/objects && PERL='${PERL}' $(MAKE) generate)
|
|
||||||
|
|
||||||
errors:
|
|
||||||
$(PERL) util/ck_errf.pl -strict */*.c */*/*.c
|
|
||||||
$(PERL) util/mkerr.pl -recurse -write
|
|
||||||
(cd engines; $(MAKE) PERL=$(PERL) errors)
|
|
||||||
|
|
||||||
ordinals: util/libcrypto.num util/libssl.num test_ordinals TABLE
|
|
||||||
util/libcrypto.num::
|
|
||||||
$(PERL) util/mkdef.pl crypto update
|
|
||||||
util/libssl.num::
|
|
||||||
$(PERL) util/mkdef.pl ssl update
|
|
||||||
test_ordinals:
|
|
||||||
TOP=$(TOP) PERL=$(PERL) $(PERL) test/run_tests.pl test_ordinals
|
|
||||||
|
|
||||||
TABLE: Configure Configurations/*.conf
|
|
||||||
(echo 'Output of `Configure TABLE'"':"; \
|
|
||||||
$(PERL) Configure TABLE) > TABLE
|
|
||||||
|
|
||||||
# Build distribution tar-file. As the list of files returned by "find" is
|
|
||||||
# pretty long, on several platforms a "too many arguments" error or similar
|
|
||||||
# would occur. Therefore the list of files is temporarily stored into a file
|
|
||||||
# and read directly, requiring GNU-Tar. Call "make TAR=gtar dist" if the normal
|
|
||||||
# tar does not support the --files-from option.
|
|
||||||
TAR_COMMAND=$(TAR) $(TARFLAGS) --files-from $(TARFILE).list \
|
|
||||||
--owner 0 --group 0 \
|
|
||||||
--transform 's|^|$(NAME)/|' \
|
|
||||||
-cvf -
|
|
||||||
|
|
||||||
$(TARFILE).list:
|
|
||||||
git diff --quiet HEAD
|
|
||||||
git ls-files | sort > $(TARFILE).list
|
|
||||||
|
|
||||||
tar: $(TARFILE).list
|
|
||||||
find . -type d -print | xargs chmod 755
|
|
||||||
find . -type f -print | xargs chmod a+r
|
|
||||||
find . -type f -perm -0100 -print | xargs chmod a+x
|
|
||||||
$(TAR_COMMAND) | gzip --best > $(TARFILE).gz
|
|
||||||
rm -f $(TARFILE).list
|
|
||||||
ls -l $(TARFILE).gz
|
|
||||||
|
|
||||||
tar-snap: $(TARFILE).list
|
|
||||||
$(TAR_COMMAND) > $(TARFILE)
|
|
||||||
rm -f $(TARFILE).list
|
|
||||||
ls -l $(TARFILE)
|
|
||||||
|
|
||||||
dist:
|
|
||||||
$(PERL) Configure dist
|
|
||||||
@$(MAKE) SDIRS='$(SDIRS)' clean
|
|
||||||
@$(MAKE) TAR='$(TAR)' TARFLAGS='$(TARFLAGS)' $(DISTTARVARS) tar
|
|
||||||
|
|
||||||
install: all install_docs install_sw
|
|
||||||
|
|
||||||
uninstall: uninstall_sw uninstall_docs
|
|
||||||
|
|
||||||
install_sw:
|
|
||||||
@$(PERL) $(TOP)/util/mkdir-p.pl $(INSTALLDIRS)
|
|
||||||
@set -e; for i in include/openssl/*.h; do \
|
|
||||||
(cp $$i $(DESTDIR)$(INSTALLTOP)/$$i; \
|
|
||||||
chmod 644 $(DESTDIR)$(INSTALLTOP)/$$i ); \
|
|
||||||
done;
|
|
||||||
@set -e; target=install; for dir in $(INSTALL_SUBS); do $(BUILD_CMD); done
|
|
||||||
@set -e; liblist="$(LIBS)"; for i in $$liblist ;\
|
|
||||||
do \
|
|
||||||
if [ -f "$$i" ]; then \
|
|
||||||
( echo installing $$i; \
|
|
||||||
cp $$i $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$i.new; \
|
|
||||||
$(RANLIB) $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$i.new; \
|
|
||||||
chmod 644 $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$i.new; \
|
|
||||||
mv -f $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$i.new $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$i ); \
|
|
||||||
fi; \
|
|
||||||
done;
|
|
||||||
@set -e; if [ -n "$(SHARED_LIBS)" ]; then \
|
|
||||||
tmp="$(SHARED_LIBS)"; \
|
|
||||||
for i in $${tmp:-x}; \
|
|
||||||
do \
|
|
||||||
if [ -f "$$i" -o -f "$$i.a" ]; then \
|
|
||||||
case "$(PLATFORM)" in \
|
|
||||||
Cygwin*) \
|
|
||||||
c=`echo $$i | sed 's/^lib\(.*\)\.dll/cyg\1-$(SHLIB_VERSION_NUMBER).dll/'`; \
|
|
||||||
echo installing $$c; \
|
|
||||||
cp $$c $(DESTDIR)$(INSTALLTOP)/bin/$$c.new; \
|
|
||||||
chmod 755 $(DESTDIR)$(INSTALLTOP)/bin/$$c.new; \
|
|
||||||
mv -f $(DESTDIR)$(INSTALLTOP)/bin/$$c.new $(DESTDIR)$(INSTALLTOP)/bin/$$c; \
|
|
||||||
echo installing $$i.a; \
|
|
||||||
cp $$i.a $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$i.a.new; \
|
|
||||||
chmod 644 $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$i.a.new; \
|
|
||||||
mv -f $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$i.a.new $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$i.a; \
|
|
||||||
;; \
|
|
||||||
mingw*) \
|
|
||||||
arch=; \
|
|
||||||
if expr $(PLATFORM) : mingw64 > /dev/null; then \
|
|
||||||
arch=-x64; \
|
|
||||||
fi; \
|
|
||||||
m=`echo $$i | sed -e 's/\.dll$$/-$(SHLIB_MAJOR)_$(SHLIB_MINOR)'"$$arch"'.dll/'`; \
|
|
||||||
echo installing $$m; \
|
|
||||||
cp $$m $(DESTDIR)$(INSTALLTOP)/bin/$$m.new; \
|
|
||||||
chmod 755 $(DESTDIR)$(INSTALLTOP)/bin/$$m.new; \
|
|
||||||
mv -f $(DESTDIR)$(INSTALLTOP)/bin/$$m.new $(DESTDIR)$(INSTALLTOP)/bin/$$m; \
|
|
||||||
echo installing $$i.a; \
|
|
||||||
cp $$i.a $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$i.a.new; \
|
|
||||||
chmod 555 $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$i.a.new; \
|
|
||||||
mv -f $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$i.a.new $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$i.a; \
|
|
||||||
;; \
|
|
||||||
*) \
|
|
||||||
echo installing $$i; \
|
|
||||||
cp $$i $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$i.new; \
|
|
||||||
chmod 555 $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$i.new; \
|
|
||||||
mv -f $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$i.new $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$i; \
|
|
||||||
;; \
|
|
||||||
esac; \
|
|
||||||
fi; \
|
|
||||||
done; \
|
|
||||||
( here="`pwd`"; \
|
|
||||||
cd $(DESTDIR)$(INSTALLTOP)/$(LIBDIR); \
|
|
||||||
$(MAKE) -f $$here/Makefile HERE="$$here" link-shared ); \
|
|
||||||
if [ "$(INSTALLTOP)" != "/usr" ]; then \
|
|
||||||
echo 'OpenSSL shared libraries have been installed in:'; \
|
|
||||||
echo ' $(INSTALLTOP)'; \
|
|
||||||
fi; \
|
|
||||||
fi
|
|
||||||
cp libcrypto.pc $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/pkgconfig
|
|
||||||
chmod 644 $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/pkgconfig/libcrypto.pc
|
|
||||||
cp libssl.pc $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/pkgconfig
|
|
||||||
chmod 644 $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/pkgconfig/libssl.pc
|
|
||||||
cp openssl.pc $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/pkgconfig
|
|
||||||
chmod 644 $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/pkgconfig/openssl.pc
|
|
||||||
|
|
||||||
uninstall_sw:
|
|
||||||
cd include/openssl && files=* && cd $(DESTDIR)$(INSTALLTOP)/include/openssl && $(RM) $$files
|
|
||||||
@for i in $(LIBS) ;\
|
|
||||||
do \
|
|
||||||
test -f "$$i" && \
|
|
||||||
echo $(RM) $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$i && \
|
|
||||||
$(RM) $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$i; \
|
|
||||||
done;
|
|
||||||
@if [ -n "$(SHARED_LIBS)" ]; then \
|
|
||||||
tmp="$(SHARED_LIBS)"; \
|
|
||||||
for i in $${tmp:-x}; \
|
|
||||||
do \
|
|
||||||
if [ -f "$$i" -o -f "$$i.a" ]; then \
|
|
||||||
case "$(PLATFORM)" in \
|
|
||||||
Cygwin*) \
|
|
||||||
c=`echo $$i | sed 's/^lib\(.*\)\.dll/cyg\1-$(SHLIB_VERSION_NUMBER).dll/'`; \
|
|
||||||
echo $(RM) $(DESTDIR)$(INSTALLTOP)/bin/$$c; \
|
|
||||||
$(RM) $(DESTDIR)$(INSTALLTOP)/bin/$$c; \
|
|
||||||
echo $(RM) $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$i.a; \
|
|
||||||
$(RM) $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$i.a; \
|
|
||||||
;; \
|
|
||||||
mingw*) \
|
|
||||||
arch=; \
|
|
||||||
if expr $(PLATFORM) : mingw64 > /dev/null; then \
|
|
||||||
arch=-x64; \
|
|
||||||
fi; \
|
|
||||||
m=`echo $$i | sed -e 's/\.dll$$/-$(SHLIB_MAJOR)_$(SHLIB_MINOR)'"$$arch"'.dll/'`; \
|
|
||||||
echo $(RM) $(DESTDIR)$(INSTALLTOP)/bin/$$m; \
|
|
||||||
$(RM) $(DESTDIR)$(INSTALLTOP)/bin/$$m; \
|
|
||||||
echo $(RM) $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$i.a; \
|
|
||||||
$(RM) $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$i.a; \
|
|
||||||
;; \
|
|
||||||
*) \
|
|
||||||
echo $(RM) $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$i; \
|
|
||||||
$(RM) $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/$$i; \
|
|
||||||
;; \
|
|
||||||
esac; \
|
|
||||||
fi; \
|
|
||||||
done; \
|
|
||||||
fi
|
|
||||||
$(RM) $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/pkgconfig/libcrypto.pc
|
|
||||||
$(RM) $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/pkgconfig/libssl.pc
|
|
||||||
$(RM) $(DESTDIR)$(INSTALLTOP)/$(LIBDIR)/pkgconfig/openssl.pc
|
|
||||||
@target=uninstall; for dir in $(INSTALL_SUBS); do $(BUILD_CMD); done
|
|
||||||
|
|
||||||
install_html_docs:
|
|
||||||
here="`pwd`"; \
|
|
||||||
filecase=; \
|
|
||||||
case "$(PLATFORM)" in DJGPP|Cygwin*|mingw*|darwin*-*-cc) \
|
|
||||||
filecase=-i; \
|
|
||||||
esac; \
|
|
||||||
for subdir in apps crypto ssl; do \
|
|
||||||
$(PERL) $(TOP)/util/mkdir-p $(DESTDIR)$(HTMLDIR)/$$subdir; \
|
|
||||||
for i in doc/$$subdir/*.pod; do \
|
|
||||||
fn=`basename $$i .pod`; \
|
|
||||||
echo "installing html/$$fn.$(HTMLSUFFIX)"; \
|
|
||||||
cat $$i \
|
|
||||||
| sed -r 's/L<([^)]*)(\([0-9]\))?\|([^)]*)(\([0-9]\))?>/L<\1|\3>/g' \
|
|
||||||
| pod2html --podroot=doc --htmlroot=.. --podpath=$$subdir:apps:crypto:ssl \
|
|
||||||
| sed -r 's/<!DOCTYPE.*//g' \
|
|
||||||
> $(DESTDIR)$(HTMLDIR)/$$subdir/$$fn.$(HTMLSUFFIX); \
|
|
||||||
$(PERL) util/extract-names.pl < $$i | \
|
|
||||||
grep -v $$filecase "^$$fn\$$" | \
|
|
||||||
(cd $(DESTDIR)$(HTMLDIR)/$$subdir; \
|
|
||||||
while read n; do \
|
|
||||||
PLATFORM=$(PLATFORM) $$here/util/point.sh $$fn.$(HTMLSUFFIX) "$$n".$(HTMLSUFFIX); \
|
|
||||||
done); \
|
|
||||||
done; \
|
|
||||||
done
|
|
||||||
|
|
||||||
uninstall_html_docs:
|
|
||||||
here="`pwd`"; \
|
|
||||||
filecase=; \
|
|
||||||
case "$(PLATFORM)" in DJGPP|Cygwin*|mingw*|darwin*-*-cc) \
|
|
||||||
filecase=-i; \
|
|
||||||
esac; \
|
|
||||||
for subdir in apps crypto ssl; do \
|
|
||||||
for i in doc/$$subdir/*.pod; do \
|
|
||||||
fn=`basename $$i .pod`; \
|
|
||||||
$(RM) $(DESTDIR)$(HTMLDIR)/$$subdir/$$fn.$(HTMLSUFFIX); \
|
|
||||||
$(PERL) util/extract-names.pl < $$i | \
|
|
||||||
grep -v $$filecase "^$$fn\$$" | \
|
|
||||||
while read n; do \
|
|
||||||
$(RM) $(DESTDIR)$(HTMLDIR)/$$subdir/"$$n".$(HTMLSUFFIX); \
|
|
||||||
done; \
|
|
||||||
done; \
|
|
||||||
done
|
|
||||||
|
|
||||||
install_docs:
|
|
||||||
@$(PERL) $(TOP)/util/mkdir-p.pl \
|
|
||||||
$(DESTDIR)$(MANDIR)/man1 \
|
|
||||||
$(DESTDIR)$(MANDIR)/man3 \
|
|
||||||
$(DESTDIR)$(MANDIR)/man5 \
|
|
||||||
$(DESTDIR)$(MANDIR)/man7
|
|
||||||
here="`pwd`"; \
|
|
||||||
filecase=; \
|
|
||||||
case "$(PLATFORM)" in DJGPP|Cygwin*|mingw*|darwin*-*-cc) \
|
|
||||||
filecase=-i; \
|
|
||||||
esac; \
|
|
||||||
set -e; for i in doc/apps/*.pod; do \
|
|
||||||
fn=`basename $$i .pod`; \
|
|
||||||
sec=`$(PERL) util/extract-section.pl 1 < $$i`; \
|
|
||||||
echo "installing man$$sec/$$fn.$${sec}$(MANSUFFIX)"; \
|
|
||||||
(cd `$(PERL) util/dirname.pl $$i`; \
|
|
||||||
pod2man \
|
|
||||||
--section=$$sec --center=OpenSSL \
|
|
||||||
--release=$(VERSION) `basename $$i`) \
|
|
||||||
> $(DESTDIR)$(MANDIR)/man$$sec/$$fn.$${sec}$(MANSUFFIX); \
|
|
||||||
$(PERL) util/extract-names.pl < $$i | \
|
|
||||||
(grep -v $$filecase "^$$fn\$$"; true) | \
|
|
||||||
(grep -v "[ ]"; true) | \
|
|
||||||
(cd $(DESTDIR)$(MANDIR)/man$$sec/; \
|
|
||||||
while read n; do \
|
|
||||||
PLATFORM=$(PLATFORM) $$here/util/point.sh $$fn.$${sec}$(MANSUFFIX) "$$n".$${sec}$(MANSUFFIX); \
|
|
||||||
done); \
|
|
||||||
done; \
|
|
||||||
set -e; for i in doc/crypto/*.pod doc/ssl/*.pod; do \
|
|
||||||
fn=`basename $$i .pod`; \
|
|
||||||
sec=`$(PERL) util/extract-section.pl 3 < $$i`; \
|
|
||||||
echo "installing man$$sec/$$fn.$${sec}$(MANSUFFIX)"; \
|
|
||||||
(cd `$(PERL) util/dirname.pl $$i`; \
|
|
||||||
pod2man \
|
|
||||||
--section=$$sec --center=OpenSSL \
|
|
||||||
--release=$(VERSION) `basename $$i`) \
|
|
||||||
> $(DESTDIR)$(MANDIR)/man$$sec/$$fn.$${sec}$(MANSUFFIX); \
|
|
||||||
$(PERL) util/extract-names.pl < $$i | \
|
|
||||||
(grep -v $$filecase "^$$fn\$$"; true) | \
|
|
||||||
(grep -v "[ ]"; true) | \
|
|
||||||
(cd $(DESTDIR)$(MANDIR)/man$$sec/; \
|
|
||||||
while read n; do \
|
|
||||||
PLATFORM=$(PLATFORM) $$here/util/point.sh $$fn.$${sec}$(MANSUFFIX) "$$n".$${sec}$(MANSUFFIX); \
|
|
||||||
done); \
|
|
||||||
done
|
|
||||||
|
|
||||||
uninstall_docs:
|
|
||||||
@here="`pwd`"; \
|
|
||||||
filecase=; \
|
|
||||||
case "$(PLATFORM)" in DJGPP|Cygwin*|mingw*) \
|
|
||||||
filecase=-i; \
|
|
||||||
esac; \
|
|
||||||
for i in doc/apps/*.pod; do \
|
|
||||||
fn=`basename $$i .pod`; \
|
|
||||||
sec=`$(PERL) util/extract-section.pl 1 < $$i`; \
|
|
||||||
echo $(RM) $(DESTDIR)$(MANDIR)/man$$sec/$$fn.$${sec}$(MANSUFFIX); \
|
|
||||||
$(RM) $(DESTDIR)$(MANDIR)/man$$sec/$$fn.$${sec}$(MANSUFFIX); \
|
|
||||||
$(PERL) util/extract-names.pl < $$i | \
|
|
||||||
(grep -v $$filecase "^$$fn\$$"; true) | \
|
|
||||||
(grep -v "[ ]"; true) | \
|
|
||||||
while read n; do \
|
|
||||||
echo $(RM) $(DESTDIR)$(MANDIR)/man$$sec/"$$n".$${sec}$(MANSUFFIX); \
|
|
||||||
$(RM) $(DESTDIR)$(MANDIR)/man$$sec/"$$n".$${sec}$(MANSUFFIX); \
|
|
||||||
done; \
|
|
||||||
done; \
|
|
||||||
for i in doc/crypto/*.pod doc/ssl/*.pod; do \
|
|
||||||
fn=`basename $$i .pod`; \
|
|
||||||
sec=`$(PERL) util/extract-section.pl 3 < $$i`; \
|
|
||||||
echo $(RM) $(DESTDIR)$(MANDIR)/man$$sec/$$fn.$${sec}$(MANSUFFIX); \
|
|
||||||
$(RM) $(DESTDIR)$(MANDIR)/man$$sec/$$fn.$${sec}$(MANSUFFIX); \
|
|
||||||
$(PERL) util/extract-names.pl < $$i | \
|
|
||||||
(grep -v $$filecase "^$$fn\$$"; true) | \
|
|
||||||
(grep -v "[ ]"; true) | \
|
|
||||||
while read n; do \
|
|
||||||
echo $(RM) $(DESTDIR)$(MANDIR)/man$$sec/"$$n".$${sec}$(MANSUFFIX); \
|
|
||||||
$(RM) $(DESTDIR)$(MANDIR)/man$$sec/"$$n".$${sec}$(MANSUFFIX); \
|
|
||||||
done; \
|
|
||||||
done
|
|
||||||
|
|
||||||
# DO NOT DELETE THIS LINE -- make depend depends on it.
|
|
||||||
750
Makefile.org
Normal file
750
Makefile.org
Normal file
@@ -0,0 +1,750 @@
|
|||||||
|
##
|
||||||
|
## Makefile for OpenSSL
|
||||||
|
##
|
||||||
|
|
||||||
|
VERSION=
|
||||||
|
MAJOR=
|
||||||
|
MINOR=
|
||||||
|
SHLIB_VERSION_NUMBER=
|
||||||
|
SHLIB_VERSION_HISTORY=
|
||||||
|
SHLIB_MAJOR=
|
||||||
|
SHLIB_MINOR=
|
||||||
|
SHLIB_EXT=
|
||||||
|
PLATFORM=dist
|
||||||
|
OPTIONS=
|
||||||
|
CONFIGURE_ARGS=
|
||||||
|
SHLIB_TARGET=
|
||||||
|
|
||||||
|
# INSTALL_PREFIX is for package builders so that they can configure
|
||||||
|
# for, say, /usr/ and yet have everything installed to /tmp/somedir/usr/.
|
||||||
|
# Normally it is left empty.
|
||||||
|
INSTALL_PREFIX=
|
||||||
|
INSTALLTOP=/usr/local/ssl
|
||||||
|
|
||||||
|
# Do not edit this manually. Use Configure --openssldir=DIR do change this!
|
||||||
|
OPENSSLDIR=/usr/local/ssl
|
||||||
|
|
||||||
|
# NO_IDEA - Define to build without the IDEA algorithm
|
||||||
|
# NO_RC4 - Define to build without the RC4 algorithm
|
||||||
|
# NO_RC2 - Define to build without the RC2 algorithm
|
||||||
|
# THREADS - Define when building with threads, you will probably also need any
|
||||||
|
# system defines as well, i.e. _REENTERANT for Solaris 2.[34]
|
||||||
|
# TERMIO - Define the termio terminal subsystem, needed if sgtty is missing.
|
||||||
|
# TERMIOS - Define the termios terminal subsystem, Silicon Graphics.
|
||||||
|
# LONGCRYPT - Define to use HPUX 10.x's long password modification to crypt(3).
|
||||||
|
# DEVRANDOM - Give this the value of the 'random device' if your OS supports
|
||||||
|
# one. 32 bytes will be read from this when the random
|
||||||
|
# number generator is initalised.
|
||||||
|
# SSL_FORBID_ENULL - define if you want the server to be not able to use the
|
||||||
|
# NULL encryption ciphers.
|
||||||
|
#
|
||||||
|
# LOCK_DEBUG - turns on lots of lock debug output :-)
|
||||||
|
# REF_CHECK - turn on some xyz_free() assertions.
|
||||||
|
# REF_PRINT - prints some stuff on structure free.
|
||||||
|
# CRYPTO_MDEBUG - turns on my 'memory leak' detecting stuff
|
||||||
|
# MFUNC - Make all Malloc/Free/Realloc calls call
|
||||||
|
# CRYPTO_malloc/CRYPTO_free/CRYPTO_realloc which can be setup to
|
||||||
|
# call application defined callbacks via CRYPTO_set_mem_functions()
|
||||||
|
# MD5_ASM needs to be defined to use the x86 assembler for MD5
|
||||||
|
# SHA1_ASM needs to be defined to use the x86 assembler for SHA1
|
||||||
|
# RMD160_ASM needs to be defined to use the x86 assembler for RIPEMD160
|
||||||
|
# Do not define B_ENDIAN or L_ENDIAN if 'unsigned long' == 8. It must
|
||||||
|
# equal 4.
|
||||||
|
# PKCS1_CHECK - pkcs1 tests.
|
||||||
|
|
||||||
|
CC= gcc
|
||||||
|
#CFLAG= -DL_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -m486 -Wall -Wuninitialized -DSHA1_ASM -DMD5_ASM -DRMD160_ASM
|
||||||
|
CFLAG= -DTERMIOS -DL_ENDIAN -fomit-frame-pointer -O3 -m486 -Wall -DSHA1_ASM -DMD5_ASM -DRMD160_ASM
|
||||||
|
DEPFLAG=
|
||||||
|
PEX_LIBS=
|
||||||
|
EX_LIBS=
|
||||||
|
EXE_EXT=
|
||||||
|
AR=ar r
|
||||||
|
RANLIB= ranlib
|
||||||
|
PERL= perl
|
||||||
|
TAR= tar
|
||||||
|
TARFLAGS= --no-recursion
|
||||||
|
MAKEDEPPROG=makedepend
|
||||||
|
|
||||||
|
# Set BN_ASM to bn_asm.o if you want to use the C version
|
||||||
|
BN_ASM= bn_asm.o
|
||||||
|
#BN_ASM= bn_asm.o
|
||||||
|
#BN_ASM= asm/bn86-elf.o # elf, linux-elf
|
||||||
|
#BN_ASM= asm/bn86-sol.o # solaris
|
||||||
|
#BN_ASM= asm/bn86-out.o # a.out, FreeBSD
|
||||||
|
#BN_ASM= asm/bn86bsdi.o # bsdi
|
||||||
|
#BN_ASM= asm/alpha.o # DEC Alpha
|
||||||
|
#BN_ASM= asm/pa-risc2.o # HP-UX PA-RISC
|
||||||
|
#BN_ASM= asm/r3000.o # SGI MIPS cpu
|
||||||
|
#BN_ASM= asm/sparc.o # Sun solaris/SunOS
|
||||||
|
#BN_ASM= asm/bn-win32.o # Windows 95/NT
|
||||||
|
#BN_ASM= asm/x86w16.o # 16 bit code for Windows 3.1/DOS
|
||||||
|
#BN_ASM= asm/x86w32.o # 32 bit code for Windows 3.1
|
||||||
|
|
||||||
|
# For x86 assembler: Set PROCESSOR to 386 if you want to support
|
||||||
|
# the 80386.
|
||||||
|
PROCESSOR=
|
||||||
|
|
||||||
|
# Set DES_ENC to des_enc.o if you want to use the C version
|
||||||
|
#There are 4 x86 assember options.
|
||||||
|
DES_ENC= asm/dx86-out.o asm/yx86-out.o
|
||||||
|
#DES_ENC= des_enc.o fcrypt_b.o # C
|
||||||
|
#DES_ENC= asm/dx86-elf.o asm/yx86-elf.o # elf
|
||||||
|
#DES_ENC= asm/dx86-sol.o asm/yx86-sol.o # solaris
|
||||||
|
#DES_ENC= asm/dx86-out.o asm/yx86-out.o # a.out, FreeBSD
|
||||||
|
#DES_ENC= asm/dx86bsdi.o asm/yx86bsdi.o # bsdi
|
||||||
|
|
||||||
|
# Set BF_ENC to bf_enc.o if you want to use the C version
|
||||||
|
#There are 4 x86 assember options.
|
||||||
|
BF_ENC= asm/bx86-out.o
|
||||||
|
#BF_ENC= bf_enc.o
|
||||||
|
#BF_ENC= asm/bx86-elf.o # elf
|
||||||
|
#BF_ENC= asm/bx86-sol.o # solaris
|
||||||
|
#BF_ENC= asm/bx86-out.o # a.out, FreeBSD
|
||||||
|
#BF_ENC= asm/bx86bsdi.o # bsdi
|
||||||
|
|
||||||
|
# Set CAST_ENC to c_enc.o if you want to use the C version
|
||||||
|
#There are 4 x86 assember options.
|
||||||
|
CAST_ENC= asm/cx86-out.o
|
||||||
|
#CAST_ENC= c_enc.o
|
||||||
|
#CAST_ENC= asm/cx86-elf.o # elf
|
||||||
|
#CAST_ENC= asm/cx86-sol.o # solaris
|
||||||
|
#CAST_ENC= asm/cx86-out.o # a.out, FreeBSD
|
||||||
|
#CAST_ENC= asm/cx86bsdi.o # bsdi
|
||||||
|
|
||||||
|
# Set RC4_ENC to rc4_enc.o if you want to use the C version
|
||||||
|
#There are 4 x86 assember options.
|
||||||
|
RC4_ENC= asm/rx86-out.o
|
||||||
|
#RC4_ENC= rc4_enc.o
|
||||||
|
#RC4_ENC= asm/rx86-elf.o # elf
|
||||||
|
#RC4_ENC= asm/rx86-sol.o # solaris
|
||||||
|
#RC4_ENC= asm/rx86-out.o # a.out, FreeBSD
|
||||||
|
#RC4_ENC= asm/rx86bsdi.o # bsdi
|
||||||
|
|
||||||
|
# Set RC5_ENC to rc5_enc.o if you want to use the C version
|
||||||
|
#There are 4 x86 assember options.
|
||||||
|
RC5_ENC= asm/r586-out.o
|
||||||
|
#RC5_ENC= rc5_enc.o
|
||||||
|
#RC5_ENC= asm/r586-elf.o # elf
|
||||||
|
#RC5_ENC= asm/r586-sol.o # solaris
|
||||||
|
#RC5_ENC= asm/r586-out.o # a.out, FreeBSD
|
||||||
|
#RC5_ENC= asm/r586bsdi.o # bsdi
|
||||||
|
|
||||||
|
# Also need MD5_ASM defined
|
||||||
|
MD5_ASM_OBJ= asm/mx86-out.o
|
||||||
|
#MD5_ASM_OBJ= asm/mx86-elf.o # elf
|
||||||
|
#MD5_ASM_OBJ= asm/mx86-sol.o # solaris
|
||||||
|
#MD5_ASM_OBJ= asm/mx86-out.o # a.out, FreeBSD
|
||||||
|
#MD5_ASM_OBJ= asm/mx86bsdi.o # bsdi
|
||||||
|
|
||||||
|
# Also need SHA1_ASM defined
|
||||||
|
SHA1_ASM_OBJ= asm/sx86-out.o
|
||||||
|
#SHA1_ASM_OBJ= asm/sx86-elf.o # elf
|
||||||
|
#SHA1_ASM_OBJ= asm/sx86-sol.o # solaris
|
||||||
|
#SHA1_ASM_OBJ= asm/sx86-out.o # a.out, FreeBSD
|
||||||
|
#SHA1_ASM_OBJ= asm/sx86bsdi.o # bsdi
|
||||||
|
|
||||||
|
# Also need RMD160_ASM defined
|
||||||
|
RMD160_ASM_OBJ= asm/rm86-out.o
|
||||||
|
#RMD160_ASM_OBJ= asm/rm86-elf.o # elf
|
||||||
|
#RMD160_ASM_OBJ= asm/rm86-sol.o # solaris
|
||||||
|
#RMD160_ASM_OBJ= asm/rm86-out.o # a.out, FreeBSD
|
||||||
|
#RMD160_ASM_OBJ= asm/rm86bsdi.o # bsdi
|
||||||
|
|
||||||
|
# KRB5 stuff
|
||||||
|
KRB5_INCLUDES=
|
||||||
|
LIBKRB5=
|
||||||
|
|
||||||
|
# When we're prepared to use shared libraries in the programs we link here
|
||||||
|
# we might set SHLIB_MARK to '$(SHARED_LIBS)'.
|
||||||
|
SHLIB_MARK=
|
||||||
|
|
||||||
|
DIRS= crypto ssl $(SHLIB_MARK) apps test tools
|
||||||
|
SHLIBDIRS= crypto ssl
|
||||||
|
|
||||||
|
# dirs in crypto to build
|
||||||
|
SDIRS= \
|
||||||
|
md2 md4 md5 sha mdc2 hmac ripemd \
|
||||||
|
des rc2 rc4 rc5 idea bf cast \
|
||||||
|
bn ec rsa dsa ecdsa dh dso engine aes \
|
||||||
|
buffer bio stack lhash rand err objects \
|
||||||
|
evp asn1 pem x509 x509v3 conf txt_db pkcs7 pkcs12 comp ocsp ui krb5
|
||||||
|
|
||||||
|
# tests to perform. "alltests" is a special word indicating that all tests
|
||||||
|
# should be performed.
|
||||||
|
TESTS = alltests
|
||||||
|
|
||||||
|
MAKEFILE= Makefile.ssl
|
||||||
|
MAKE= make -f Makefile.ssl
|
||||||
|
|
||||||
|
MANDIR=$(OPENSSLDIR)/man
|
||||||
|
MAN1=1
|
||||||
|
MAN3=3
|
||||||
|
SHELL=/bin/sh
|
||||||
|
|
||||||
|
TOP= .
|
||||||
|
ONEDIRS=out tmp
|
||||||
|
EDIRS= times doc bugs util include certs ms shlib mt demos perl sf dep VMS
|
||||||
|
WDIRS= windows
|
||||||
|
LIBS= libcrypto.a libssl.a
|
||||||
|
SHARED_CRYPTO=libcrypto$(SHLIB_EXT)
|
||||||
|
SHARED_SSL=libssl$(SHLIB_EXT)
|
||||||
|
SHARED_LIBS=
|
||||||
|
SHARED_LIBS_LINK_EXTS=
|
||||||
|
SHARED_LDFLAGS=
|
||||||
|
|
||||||
|
GENERAL= Makefile
|
||||||
|
BASENAME= openssl
|
||||||
|
NAME= $(BASENAME)-$(VERSION)
|
||||||
|
TARFILE= $(NAME).tar
|
||||||
|
WTARFILE= $(NAME)-win.tar
|
||||||
|
EXHEADER= e_os2.h
|
||||||
|
HEADER= e_os.h
|
||||||
|
|
||||||
|
# When we're prepared to use shared libraries in the programs we link here
|
||||||
|
# we might remove 'clean-shared' from the targets to perform at this stage
|
||||||
|
|
||||||
|
all: Makefile.ssl sub_all
|
||||||
|
|
||||||
|
sub_all:
|
||||||
|
@for i in $(DIRS); \
|
||||||
|
do \
|
||||||
|
if [ -d "$$i" ]; then \
|
||||||
|
(cd $$i && echo "making all in $$i..." && \
|
||||||
|
$(MAKE) CC='${CC}' PLATFORM='${PLATFORM}' CFLAG='${CFLAG}' SDIRS='$(SDIRS)' INSTALLTOP='${INSTALLTOP}' PEX_LIBS='${PEX_LIBS}' EX_LIBS='${EX_LIBS}' BN_ASM='${BN_ASM}' DES_ENC='${DES_ENC}' BF_ENC='${BF_ENC}' CAST_ENC='${CAST_ENC}' RC4_ENC='${RC4_ENC}' RC5_ENC='${RC5_ENC}' SHA1_ASM_OBJ='${SHA1_ASM_OBJ}' MD5_ASM_OBJ='${MD5_ASM_OBJ}' RMD160_ASM_OBJ='${RMD160_ASM_OBJ}' AR='${AR}' PROCESSOR='${PROCESSOR}' PERL='${PERL}' RANLIB='${RANLIB}' KRB5_INCLUDES='${KRB5_INCLUDES}' LIBKRB5='${LIBKRB5}' EXE_EXT='${EXE_EXT}' SHARED_LIBS='${SHARED_LIBS}' SHLIB_EXT='${SHLIB_EXT}' SHLIB_TARGET='${SHLIB_TARGET}' all ) || exit 1; \
|
||||||
|
else \
|
||||||
|
$(MAKE) $$i; \
|
||||||
|
fi; \
|
||||||
|
done;
|
||||||
|
|
||||||
|
libcrypto$(SHLIB_EXT): libcrypto.a
|
||||||
|
@if [ "$(SHLIB_TARGET)" != "" ]; then \
|
||||||
|
$(MAKE) SHLIBDIRS=crypto build-shared; \
|
||||||
|
else \
|
||||||
|
echo "There's no support for shared libraries on this platform" >&2; \
|
||||||
|
fi
|
||||||
|
|
||||||
|
libssl$(SHLIB_EXT): libcrypto$(SHLIB_EXT) libssl.a
|
||||||
|
@if [ "$(SHLIB_TARGET)" != "" ]; then \
|
||||||
|
$(MAKE) SHLIBDIRS=ssl SHLIBDEPS='-lcrypto' build-shared; \
|
||||||
|
else \
|
||||||
|
echo "There's no support for shared libraries on this platform" >&2; \
|
||||||
|
fi
|
||||||
|
|
||||||
|
clean-shared:
|
||||||
|
@for i in $(SHLIBDIRS); do \
|
||||||
|
if [ -n "$(SHARED_LIBS_LINK_EXTS)" ]; then \
|
||||||
|
tmp="$(SHARED_LIBS_LINK_EXTS)"; \
|
||||||
|
for j in $${tmp:-x}; do \
|
||||||
|
( set -x; rm -f lib$$i$$j ); \
|
||||||
|
done; \
|
||||||
|
fi; \
|
||||||
|
( set -x; rm -f lib$$i$(SHLIB_EXT) ); \
|
||||||
|
if [ "$(PLATFORM)" = "Cygwin" ]; then \
|
||||||
|
( set -x; rm -f cyg$$i$(SHLIB_EXT) lib$$i$(SHLIB_EXT).a ); \
|
||||||
|
fi; \
|
||||||
|
done
|
||||||
|
|
||||||
|
link-shared:
|
||||||
|
@if [ -n "$(SHARED_LIBS_LINK_EXTS)" ]; then \
|
||||||
|
tmp="$(SHARED_LIBS_LINK_EXTS)"; \
|
||||||
|
for i in $(SHLIBDIRS); do \
|
||||||
|
prev=lib$$i$(SHLIB_EXT); \
|
||||||
|
for j in $${tmp:-x}; do \
|
||||||
|
( set -x; ln -f -s $$prev lib$$i$$j ); \
|
||||||
|
prev=lib$$i$$j; \
|
||||||
|
done; \
|
||||||
|
done; \
|
||||||
|
fi
|
||||||
|
|
||||||
|
build-shared: clean-shared do_$(SHLIB_TARGET) link-shared
|
||||||
|
|
||||||
|
do_bsd-gcc-shared: do_gnu-shared
|
||||||
|
do_linux-shared: do_gnu-shared
|
||||||
|
do_gnu-shared:
|
||||||
|
libs='-L. ${SHLIBDEPS}'; for i in ${SHLIBDIRS}; do \
|
||||||
|
( set -x; ${CC} ${SHARED_LDFLAGS} \
|
||||||
|
-shared -o lib$$i.so.${SHLIB_MAJOR}.${SHLIB_MINOR} \
|
||||||
|
-Wl,-soname=lib$$i.so.${SHLIB_MAJOR}.${SHLIB_MINOR} \
|
||||||
|
-Wl,-Bsymbolic \
|
||||||
|
-Wl,--whole-archive lib$$i.a \
|
||||||
|
-Wl,--no-whole-archive $$libs ${EX_LIBS} -lc ) || exit 1; \
|
||||||
|
libs="$$libs -l$$i"; \
|
||||||
|
done
|
||||||
|
|
||||||
|
DETECT_GNU_LD=${CC} -v 2>&1 | grep '^gcc' >/dev/null 2>&1 && \
|
||||||
|
collect2=`gcc -print-prog-name=collect2 2>&1` && \
|
||||||
|
[ -n "$$collect2" ] && \
|
||||||
|
my_ld=`$$collect2 --help 2>&1 | grep Usage: | sed 's/^Usage: *\([^ ][^ ]*\).*/\1/'` && \
|
||||||
|
[ -n "$$my_ld" ] && \
|
||||||
|
$$my_ld -v 2>&1 | grep 'GNU ld' >/dev/null 2>&1
|
||||||
|
|
||||||
|
# For Darwin AKA Mac OS/X (dyld)
|
||||||
|
do_darwin-shared:
|
||||||
|
libs='-L. ${SHLIBDEPS}'; for i in ${SHLIBDIRS}; do \
|
||||||
|
( set -x ; ${CC} --verbose -dynamiclib -o lib$$i${SHLIB_EXT} \
|
||||||
|
lib$$i.a $$libs -all_load -current_version ${SHLIB_MAJOR}.${SHLIB_MINOR} \
|
||||||
|
-compatibility_version ${SHLIB_MAJOR}.`echo ${SHLIB_MINOR} | cut -d. -f1` \
|
||||||
|
-install_name ${INSTALLTOP}/lib/lib$$i${SHLIB_EXT} ) || exit 1; \
|
||||||
|
libs="$$libs -l`basename $$i${SHLIB_EXT} .dylib`"; \
|
||||||
|
echo "" ; \
|
||||||
|
done
|
||||||
|
|
||||||
|
do_cygwin-shared:
|
||||||
|
libs='-L. ${SHLIBDEPS}'; for i in ${SHLIBDIRS}; do \
|
||||||
|
( set -x; ${CC} -shared -o cyg$$i.dll \
|
||||||
|
-Wl,-Bsymbolic \
|
||||||
|
-Wl,--whole-archive lib$$i.a \
|
||||||
|
-Wl,--out-implib,lib$$i.dll.a \
|
||||||
|
-Wl,--no-whole-archive $$libs ) || exit 1; \
|
||||||
|
libs="$$libs -l$$i"; \
|
||||||
|
done
|
||||||
|
|
||||||
|
# This assumes that GNU utilities are *not* used
|
||||||
|
do_alpha-osf1-shared:
|
||||||
|
if ${DETECT_GNU_LD}; then \
|
||||||
|
$(MAKE) do_gnu-shared; \
|
||||||
|
else \
|
||||||
|
libs='-L. ${SHLIBDEPS}'; for i in ${SHLIBDIRS}; do \
|
||||||
|
( set -x; ${CC} ${SHARED_LDFLAGS} \
|
||||||
|
-shared -o lib$$i.so \
|
||||||
|
-set_version "${SHLIB_VERSION_HISTORY}${SHLIB_VERSION_NUMBER}" \
|
||||||
|
-all lib$$i.a -none $$libs ${EX_LIBS} -lc ) || exit 1; \
|
||||||
|
libs="$$libs -l$$i"; \
|
||||||
|
done; \
|
||||||
|
fi
|
||||||
|
|
||||||
|
# This assumes that GNU utilities are *not* used
|
||||||
|
# The difference between alpha-osf1-shared and tru64-shared is the `-msym'
|
||||||
|
# option passed to the linker.
|
||||||
|
do_tru64-shared:
|
||||||
|
if ${DETECT_GNU_LD}; then \
|
||||||
|
$(MAKE) do_gnu-shared; \
|
||||||
|
else \
|
||||||
|
libs='-L. ${SHLIBDEPS}'; for i in ${SHLIBDIRS}; do \
|
||||||
|
( set -x; ${CC} ${SHARED_LDFLAGS} \
|
||||||
|
-shared -msym -o lib$$i.so \
|
||||||
|
-set_version "${SHLIB_VERSION_HISTORY}${SHLIB_VERSION_NUMBER}" \
|
||||||
|
-all lib$$i.a -none $$libs ${EX_LIBS} -lc ) || exit 1; \
|
||||||
|
libs="$$libs -l$$i"; \
|
||||||
|
done; \
|
||||||
|
fi
|
||||||
|
|
||||||
|
# This assumes that GNU utilities are *not* used
|
||||||
|
# The difference between tru64-shared and tru64-shared-rpath is the
|
||||||
|
# -rpath ${INSTALLTOP}/lib passed to the linker.
|
||||||
|
do_tru64-shared-rpath:
|
||||||
|
if ${DETECT_GNU_LD}; then \
|
||||||
|
$(MAKE) do_gnu-shared; \
|
||||||
|
else \
|
||||||
|
libs='-L. ${SHLIBDEPS}'; for i in ${SHLIBDIRS}; do \
|
||||||
|
( set -x; ${CC} ${SHARED_LDFLAGS} \
|
||||||
|
-shared -msym -o lib$$i.so \
|
||||||
|
-rpath ${INSTALLTOP}/lib \
|
||||||
|
-set_version "${SHLIB_VERSION_HISTORY}${SHLIB_VERSION_NUMBER}" \
|
||||||
|
-all lib$$i.a -none $$libs ${EX_LIBS} -lc ) || exit 1; \
|
||||||
|
libs="$$libs -l$$i"; \
|
||||||
|
done; \
|
||||||
|
fi
|
||||||
|
|
||||||
|
|
||||||
|
# This assumes that GNU utilities are *not* used
|
||||||
|
do_solaris-shared:
|
||||||
|
if ${DETECT_GNU_LD}; then \
|
||||||
|
$(MAKE) do_gnu-shared; \
|
||||||
|
else \
|
||||||
|
libs='-L. ${SHLIBDEPS}'; for i in ${SHLIBDIRS}; do \
|
||||||
|
( PATH=/usr/ccs/bin:$$PATH ; export PATH; \
|
||||||
|
set -x; ${CC} ${SHARED_LDFLAGS} \
|
||||||
|
-G -o lib$$i.so.${SHLIB_MAJOR}.${SHLIB_MINOR} \
|
||||||
|
-h lib$$i.so.${SHLIB_MAJOR}.${SHLIB_MINOR} \
|
||||||
|
-z allextract lib$$i.a $$libs ${EX_LIBS} -lc ) || exit 1; \
|
||||||
|
libs="$$libs -l$$i"; \
|
||||||
|
done; \
|
||||||
|
fi
|
||||||
|
|
||||||
|
# OpenServer 5 native compilers used
|
||||||
|
do_svr3-shared:
|
||||||
|
if ${DETECT_GNU_LD}; then \
|
||||||
|
$(MAKE) do_gnu-shared; \
|
||||||
|
else \
|
||||||
|
libs='-L. ${SHLIBDEPS}'; for i in ${SHLIBDIRS}; do \
|
||||||
|
( PATH=/usr/ccs/bin:$$PATH ; export PATH; \
|
||||||
|
find . -name "*.o" -print > allobjs ; \
|
||||||
|
OBJS= ; export OBJS ; \
|
||||||
|
for obj in `ar t lib$$i.a` ; do \
|
||||||
|
OBJS="$${OBJS} `grep $$obj allobjs`" ; \
|
||||||
|
done ; \
|
||||||
|
set -x; ${CC} -G -o lib$$i.so.${SHLIB_MAJOR}.${SHLIB_MINOR} \
|
||||||
|
-h lib$$i.so.${SHLIB_MAJOR}.${SHLIB_MINOR} \
|
||||||
|
$${OBJS} $$libs ${EX_LIBS} ) || exit 1; \
|
||||||
|
libs="$$libs -l$$i"; \
|
||||||
|
done; \
|
||||||
|
fi
|
||||||
|
|
||||||
|
# UnixWare 7 and OpenUNIX 8 native compilers used
|
||||||
|
do_svr5-shared:
|
||||||
|
if ${DETECT_GNU_LD}; then \
|
||||||
|
$(MAKE) do_gnu-shared; \
|
||||||
|
else \
|
||||||
|
libs='-L. ${SHLIBDEPS}'; for i in ${SHLIBDIRS}; do \
|
||||||
|
( PATH=/usr/ccs/bin:$$PATH ; export PATH; \
|
||||||
|
find . -name "*.o" -print > allobjs ; \
|
||||||
|
OBJS= ; export OBJS ; \
|
||||||
|
for obj in `ar t lib$$i.a` ; do \
|
||||||
|
OBJS="$${OBJS} `grep $$obj allobjs`" ; \
|
||||||
|
done ; \
|
||||||
|
set -x; ${CC} ${SHARED_LDFLAGS} \
|
||||||
|
-G -o lib$$i.so.${SHLIB_MAJOR}.${SHLIB_MINOR} \
|
||||||
|
-h lib$$i.so.${SHLIB_MAJOR}.${SHLIB_MINOR} \
|
||||||
|
$${OBJS} $$libs ${EX_LIBS} ) || exit 1; \
|
||||||
|
libs="$$libs -l$$i"; \
|
||||||
|
done; \
|
||||||
|
fi
|
||||||
|
|
||||||
|
# This assumes that GNU utilities are *not* used
|
||||||
|
do_irix-shared:
|
||||||
|
if ${DETECT_GNU_LD}; then \
|
||||||
|
$(MAKE) do_gnu-shared; \
|
||||||
|
else \
|
||||||
|
libs='-L. ${SHLIBDEPS}'; for i in ${SHLIBDIRS}; do \
|
||||||
|
( set -x; ${CC} ${SHARED_LDFLAGS} \
|
||||||
|
-shared -o lib$$i.so.${SHLIB_MAJOR}.${SHLIB_MINOR} \
|
||||||
|
-Wl,-soname,lib$$i.so.${SHLIB_MAJOR}.${SHLIB_MINOR} \
|
||||||
|
-all lib$$i.a $$libs ${EX_LIBS} -lc) || exit 1; \
|
||||||
|
libs="$$libs -l$$i"; \
|
||||||
|
done; \
|
||||||
|
fi
|
||||||
|
|
||||||
|
# This assumes that GNU utilities are *not* used
|
||||||
|
# HP-UX includes the full pathname of libs we depend on, so we would get
|
||||||
|
# ./libcrypto (with ./ as path information) compiled into libssl, hence
|
||||||
|
# we omit the SHLIBDEPS. Applications must be linked with -lssl -lcrypto
|
||||||
|
# anyway.
|
||||||
|
# The object modules are loaded from lib$i.a using the undocumented -Fl
|
||||||
|
# option.
|
||||||
|
#
|
||||||
|
# WARNING: Until DSO is fixed to support a search path, we support SHLIB_PATH
|
||||||
|
# by temporarily specifying "+s"!
|
||||||
|
#
|
||||||
|
do_hpux-shared:
|
||||||
|
for i in ${SHLIBDIRS}; do \
|
||||||
|
( set -x; /usr/ccs/bin/ld ${SHARED_LDFLAGS} \
|
||||||
|
+vnocompatwarnings \
|
||||||
|
-b -z +s \
|
||||||
|
-o lib$$i.sl.${SHLIB_MAJOR}.${SHLIB_MINOR} \
|
||||||
|
+h lib$$i.sl.${SHLIB_MAJOR}.${SHLIB_MINOR} \
|
||||||
|
-Fl lib$$i.a -ldld -lc ) || exit 1; \
|
||||||
|
done
|
||||||
|
|
||||||
|
# This assumes that GNU utilities are *not* used
|
||||||
|
# HP-UX includes the full pathname of libs we depend on, so we would get
|
||||||
|
# ./libcrypto (with ./ as path information) compiled into libssl, hence
|
||||||
|
# we omit the SHLIBDEPS. Applications must be linked with -lssl -lcrypto
|
||||||
|
# anyway.
|
||||||
|
#
|
||||||
|
# HP-UX in 64bit mode has "+s" enabled by default; it will search for
|
||||||
|
# shared libraries along LD_LIBRARY_PATH _and_ SHLIB_PATH.
|
||||||
|
#
|
||||||
|
do_hpux64-shared:
|
||||||
|
for i in ${SHLIBDIRS}; do \
|
||||||
|
( set -x; /usr/ccs/bin/ld ${SHARED_LDFLAGS} \
|
||||||
|
-b -z \
|
||||||
|
-o lib$$i.sl.${SHLIB_MAJOR}.${SHLIB_MINOR} \
|
||||||
|
+h lib$$i.sl.${SHLIB_MAJOR}.${SHLIB_MINOR} \
|
||||||
|
+forceload lib$$i.a -ldl -lc ) || exit 1; \
|
||||||
|
done
|
||||||
|
|
||||||
|
# The following method is said to work on all platforms. Tests will
|
||||||
|
# determine if that's how it's gong to be used.
|
||||||
|
# This assumes that for all but GNU systems, GNU utilities are *not* used.
|
||||||
|
# ALLSYMSFLAGS would be:
|
||||||
|
# GNU systems: --whole-archive
|
||||||
|
# Tru64 Unix: -all
|
||||||
|
# Solaris: -z allextract
|
||||||
|
# Irix: -all
|
||||||
|
# HP/UX-32bit: -Fl
|
||||||
|
# HP/UX-64bit: +forceload
|
||||||
|
# AIX: -bnogc
|
||||||
|
# SHAREDFLAGS would be:
|
||||||
|
# GNU systems: -shared -Wl,-soname=lib$$i.so.${SHLIB_MAJOR}.${SHLIB_MINOR}
|
||||||
|
# Tru64 Unix: -shared \
|
||||||
|
# -set_version "${SHLIB_VERSION_HISTORY}${SHLIB_VERSION_NUMBER}"
|
||||||
|
# Solaris: -G -h lib$$i.so.${SHLIB_MAJOR}.${SHLIB_MINOR}
|
||||||
|
# Irix: -shared -Wl,-soname,lib$$i.so.${SHLIB_MAJOR}.${SHLIB_MINOR}
|
||||||
|
# HP/UX-32bit: +vnocompatwarnings -b -z +s \
|
||||||
|
# +h lib$$i.sl.${SHLIB_MAJOR}.${SHLIB_MINOR}
|
||||||
|
# HP/UX-64bit: -b -z +h lib$$i.sl.${SHLIB_MAJOR}.${SHLIB_MINOR}
|
||||||
|
# AIX: -G -bE:lib$$i.exp -bM:SRE
|
||||||
|
# SHAREDCMD would be:
|
||||||
|
# GNU systems: $(CC)
|
||||||
|
# Tru64 Unix: $(CC)
|
||||||
|
# Solaris: $(CC)
|
||||||
|
# Irix: $(CC)
|
||||||
|
# HP/UX-32bit: /usr/ccs/bin/ld
|
||||||
|
# HP/UX-64bit: /usr/ccs/bin/ld
|
||||||
|
# AIX: $(CC)
|
||||||
|
ALLSYMSFLAG=-bnogc
|
||||||
|
SHAREDFLAGS=${SHARED_LDFLAGS} -G -bE:lib$$i.exp -bM:SRE
|
||||||
|
SHAREDCMD=$(CC)
|
||||||
|
do_aix-shared:
|
||||||
|
libs='-L. ${SHLIBDEPS}'; for i in ${SHLIBDIRS}; do \
|
||||||
|
( set -x; \
|
||||||
|
ld -r -o $$i.o $(ALLSYMSFLAG) lib$$i.a && \
|
||||||
|
( nm -Pg lib$$i.o | grep ' [BD] ' | cut -f1 -d' ' > lib$$i.exp; \
|
||||||
|
$(SHAREDCMD) $(SHAREDFLAG) -o lib$$i.so lib$$i.o \
|
||||||
|
$$libs ${EX_LIBS} ) ) \
|
||||||
|
|| exit 1; \
|
||||||
|
libs="$$libs -l$$i"; \
|
||||||
|
done
|
||||||
|
|
||||||
|
do_reliantunix-shared:
|
||||||
|
libs='-L. ${SHLIBDEPS}'; for i in ${SHLIBDIRS}; do \
|
||||||
|
tmpdir=/tmp/openssl.$$$$ ; rm -rf $$tmpdir ; \
|
||||||
|
( set -x; \
|
||||||
|
( Opwd=`pwd` ; mkdir $$tmpdir || exit 1; \
|
||||||
|
cd $$tmpdir || exit 1 ; ar x $$Opwd/lib$$i.a ; \
|
||||||
|
${CC} -G -o lib$$i.so.${SHLIB_MAJOR}.${SHLIB_MINOR} *.o \
|
||||||
|
) || exit 1; \
|
||||||
|
cp $$tmpdir/lib$$i.so.${SHLIB_MAJOR}.${SHLIB_MINOR} . ; \
|
||||||
|
) || exit 1; \
|
||||||
|
rm -rf $$tmpdir ; \
|
||||||
|
libs="$$libs -l$$i"; \
|
||||||
|
done
|
||||||
|
|
||||||
|
Makefile.ssl: Makefile.org
|
||||||
|
@echo "Makefile.ssl is older than Makefile.org."
|
||||||
|
@echo "Reconfigure the source tree (via './config' or 'perl Configure'), please."
|
||||||
|
@false
|
||||||
|
|
||||||
|
libclean:
|
||||||
|
rm -f *.a */lib */*/lib
|
||||||
|
|
||||||
|
clean:
|
||||||
|
rm -f shlib/*.o *.o core a.out fluff *.map rehash.time testlog make.log cctest cctest.c
|
||||||
|
@for i in $(DIRS) ;\
|
||||||
|
do \
|
||||||
|
if [ -d "$$i" ]; then \
|
||||||
|
(cd $$i && echo "making clean in $$i..." && \
|
||||||
|
$(MAKE) SDIRS='${SDIRS}' clean ) || exit 1; \
|
||||||
|
rm -f $(LIBS); \
|
||||||
|
fi; \
|
||||||
|
done;
|
||||||
|
rm -f *.a *.o speed.* *.map *.so .pure core
|
||||||
|
rm -f $(TARFILE)
|
||||||
|
@for i in $(ONEDIRS) ;\
|
||||||
|
do \
|
||||||
|
rm -fr $$i/*; \
|
||||||
|
done
|
||||||
|
|
||||||
|
makefile.one: files
|
||||||
|
$(PERL) util/mk1mf.pl >makefile.one; \
|
||||||
|
sh util/do_ms.sh
|
||||||
|
|
||||||
|
files:
|
||||||
|
$(PERL) $(TOP)/util/files.pl Makefile.ssl > $(TOP)/MINFO
|
||||||
|
@for i in $(DIRS) ;\
|
||||||
|
do \
|
||||||
|
if [ -d "$$i" ]; then \
|
||||||
|
(cd $$i && echo "making 'files' in $$i..." && \
|
||||||
|
$(MAKE) SDIRS='${SDIRS}' PERL='${PERL}' files ) || exit 1; \
|
||||||
|
fi; \
|
||||||
|
done;
|
||||||
|
|
||||||
|
links:
|
||||||
|
@$(TOP)/util/point.sh Makefile.ssl Makefile
|
||||||
|
@$(PERL) $(TOP)/util/mkdir-p.pl include/openssl
|
||||||
|
@$(PERL) $(TOP)/util/mklink.pl include/openssl $(EXHEADER)
|
||||||
|
@for i in $(DIRS); do \
|
||||||
|
if [ -d "$$i" ]; then \
|
||||||
|
(cd $$i && echo "making links in $$i..." && \
|
||||||
|
$(MAKE) CC='${CC}' PLATFORM='${PLATFORM}' CFLAG='${CFLAG}' SDIRS='$(SDIRS)' INSTALLTOP='${INSTALLTOP}' PEX_LIBS='${PEX_LIBS}' EX_LIBS='${EX_LIBS}' BN_ASM='${BN_ASM}' DES_ENC='${DES_ENC}' BF_ENC='${BF_ENC}' CAST_ENC='${CAST_ENC}' RC4_ENC='${RC4_ENC}' RC5_ENC='${RC5_ENC}' SHA1_ASM_OBJ='${SHA1_ASM_OBJ}' MD5_ASM_OBJ='${MD5_ASM_OBJ}' RMD160_ASM_OBJ='${RMD160_ASM_OBJ}' AR='${AR}' PERL='${PERL}' KRB5_INCLUDES='${KRB5_INCLUDES}' LIBKRB5='${LIBKRB5}' links ) || exit 1; \
|
||||||
|
fi; \
|
||||||
|
done;
|
||||||
|
|
||||||
|
dclean:
|
||||||
|
rm -f *.bak
|
||||||
|
@for i in $(DIRS) ;\
|
||||||
|
do \
|
||||||
|
if [ -d "$$i" ]; then \
|
||||||
|
(cd $$i && echo "making dclean in $$i..." && \
|
||||||
|
$(MAKE) SDIRS='${SDIRS}' PERL='${PERL}' dclean ) || exit 1; \
|
||||||
|
fi; \
|
||||||
|
done;
|
||||||
|
|
||||||
|
rehash: rehash.time
|
||||||
|
rehash.time: certs
|
||||||
|
@(OPENSSL="`pwd`/apps/openssl"; OPENSSL_DEBUG_MEMORY=on; \
|
||||||
|
export OPENSSL OPENSSL_DEBUG_MEMORY; \
|
||||||
|
LD_LIBRARY_PATH="`pwd`"; SHLIB_PATH="`pwd`"; LIBPATH="`pwd`"; \
|
||||||
|
export LD_LIBRARY_PATH SHLIB_PATH LIBPATH; \
|
||||||
|
$(PERL) tools/c_rehash certs)
|
||||||
|
touch rehash.time
|
||||||
|
|
||||||
|
test: tests
|
||||||
|
|
||||||
|
tests: rehash
|
||||||
|
@(cd test && echo "testing..." && \
|
||||||
|
$(MAKE) CC='${CC}' CFLAG='${CFLAG}' INSTALLTOP='${INSTALLTOP}' PEX_LIBS='${PEX_LIBS}' EX_LIBS='${EX_LIBS}' BN_ASM='${BN_ASM}' DES_ENC='${DES_ENC}' BF_ENC='${BF_ENC}' CAST_ENC='${CAST_ENC}' RC4_ENC='${RC4_ENC}' RC5_ENC='${RC5_ENC}' SDIRS='${SDIRS}' SHA1_ASM_OBJ='${SHA1_ASM_OBJ}' MD5_ASM_OBJ='${MD5_ASM_OBJ}' RMD160_ASM_OBJ='${RMD160_ASM_OBJ}' AR='${AR}' PERL='${PERL}' TESTS='${TESTS}' KRB5_INCLUDES='${KRB5_INCLUDES}' LIBKRB5='${LIBKRB5}' EXE_EXT='${EXE_EXT}' OPENSSL_DEBUG_MEMORY=on tests );
|
||||||
|
@LD_LIBRARY_PATH="`pwd`"; SHLIB_PATH="`pwd`"; LIBPATH="`pwd`"; \
|
||||||
|
export LD_LIBRARY_PATH SHLIB_PATH LIBPATH; \
|
||||||
|
apps/openssl version -a
|
||||||
|
|
||||||
|
report:
|
||||||
|
@$(PERL) util/selftest.pl
|
||||||
|
|
||||||
|
depend:
|
||||||
|
@for i in $(DIRS) ;\
|
||||||
|
do \
|
||||||
|
if [ -d "$$i" ]; then \
|
||||||
|
(cd $$i && echo "making dependencies $$i..." && \
|
||||||
|
$(MAKE) SDIRS='${SDIRS}' DEPFLAG='${DEPFLAG}' MAKEDEPPROG='${MAKEDEPPROG}' KRB5_INCLUDES='${KRB5_INCLUDES}' depend ) || exit 1; \
|
||||||
|
fi; \
|
||||||
|
done;
|
||||||
|
|
||||||
|
lint:
|
||||||
|
@for i in $(DIRS) ;\
|
||||||
|
do \
|
||||||
|
if [ -d "$$i" ]; then \
|
||||||
|
(cd $$i && echo "making lint $$i..." && \
|
||||||
|
$(MAKE) SDIRS='${SDIRS}' lint ) || exit 1; \
|
||||||
|
fi; \
|
||||||
|
done;
|
||||||
|
|
||||||
|
tags:
|
||||||
|
@for i in $(DIRS) ;\
|
||||||
|
do \
|
||||||
|
if [ -d "$$i" ]; then \
|
||||||
|
(cd $$i && echo "making tags $$i..." && \
|
||||||
|
$(MAKE) SDIRS='${SDIRS}' tags ) || exit 1; \
|
||||||
|
fi; \
|
||||||
|
done;
|
||||||
|
|
||||||
|
errors:
|
||||||
|
$(PERL) util/mkerr.pl -recurse -write
|
||||||
|
(cd crypto/engine; $(MAKE) PERL=$(PERL) errors)
|
||||||
|
|
||||||
|
stacks:
|
||||||
|
$(PERL) util/mkstack.pl -write
|
||||||
|
|
||||||
|
util/libeay.num::
|
||||||
|
$(PERL) util/mkdef.pl crypto update
|
||||||
|
|
||||||
|
util/ssleay.num::
|
||||||
|
$(PERL) util/mkdef.pl ssl update
|
||||||
|
|
||||||
|
crypto/objects/obj_dat.h: crypto/objects/obj_dat.pl crypto/objects/obj_mac.h
|
||||||
|
$(PERL) crypto/objects/obj_dat.pl crypto/objects/obj_mac.h crypto/objects/obj_dat.h
|
||||||
|
crypto/objects/obj_mac.h: crypto/objects/objects.pl crypto/objects/objects.txt crypto/objects/obj_mac.num
|
||||||
|
$(PERL) crypto/objects/objects.pl crypto/objects/objects.txt crypto/objects/obj_mac.num crypto/objects/obj_mac.h
|
||||||
|
|
||||||
|
TABLE: Configure
|
||||||
|
(echo 'Output of `Configure TABLE'"':"; \
|
||||||
|
$(PERL) Configure TABLE) > TABLE
|
||||||
|
|
||||||
|
update: depend errors stacks util/libeay.num util/ssleay.num crypto/objects/obj_dat.h TABLE
|
||||||
|
|
||||||
|
tar:
|
||||||
|
@$(TAR) $(TARFLAGS) -cvf - \
|
||||||
|
`find * \! -path CVS/\* \! -path \*/CVS/\* \! -name CVS \! -name .cvsignore \! -name STATUS \! -name TABLE | sort` |\
|
||||||
|
tardy --user_number=0 --user_name=openssl \
|
||||||
|
--group_number=0 --group_name=openssl \
|
||||||
|
--prefix=openssl-$(VERSION) - |\
|
||||||
|
gzip --best >../$(TARFILE).gz; \
|
||||||
|
ls -l ../$(TARFILE).gz
|
||||||
|
|
||||||
|
tar-snap:
|
||||||
|
@$(TAR) $(TARFLAGS) -cvf - \
|
||||||
|
`find * \! -path CVS/\* \! -path \*/CVS/\* \! -name CVS \! -name .cvsignore \! -name STATUS \! -name TABLE \! -name '*.o' \! -name '*.a' \! -name '*.so' \! -name '*.so.*' \! -name 'openssl' \! -name '*test' \! -name '.#*' \! -name '*~' | sort` |\
|
||||||
|
tardy --user_number=0 --user_name=openssl \
|
||||||
|
--group_number=0 --group_name=openssl \
|
||||||
|
--prefix=openssl-$(VERSION) - > ../$(TARFILE);\
|
||||||
|
ls -l ../$(TARFILE)
|
||||||
|
|
||||||
|
dist:
|
||||||
|
$(PERL) Configure dist
|
||||||
|
@$(MAKE) dist_pem_h
|
||||||
|
@$(MAKE) SDIRS='${SDIRS}' clean
|
||||||
|
@$(MAKE) tar
|
||||||
|
|
||||||
|
dist_pem_h:
|
||||||
|
(cd crypto/pem; $(MAKE) CC='${CC}' SDIRS='${SDIRS}' CFLAG='${CFLAG}' pem.h; $(MAKE) clean)
|
||||||
|
|
||||||
|
install: all install_docs
|
||||||
|
@$(PERL) $(TOP)/util/mkdir-p.pl $(INSTALL_PREFIX)$(INSTALLTOP)/bin \
|
||||||
|
$(INSTALL_PREFIX)$(INSTALLTOP)/lib \
|
||||||
|
$(INSTALL_PREFIX)$(INSTALLTOP)/include/openssl \
|
||||||
|
$(INSTALL_PREFIX)$(OPENSSLDIR)/misc \
|
||||||
|
$(INSTALL_PREFIX)$(OPENSSLDIR)/certs \
|
||||||
|
$(INSTALL_PREFIX)$(OPENSSLDIR)/private \
|
||||||
|
$(INSTALL_PREFIX)$(OPENSSLDIR)/lib
|
||||||
|
@for i in $(EXHEADER) ;\
|
||||||
|
do \
|
||||||
|
(cp $$i $(INSTALL_PREFIX)$(INSTALLTOP)/include/openssl/$$i; \
|
||||||
|
chmod 644 $(INSTALL_PREFIX)$(INSTALLTOP)/include/openssl/$$i ); \
|
||||||
|
done;
|
||||||
|
@for i in $(DIRS) ;\
|
||||||
|
do \
|
||||||
|
if [ -d "$$i" ]; then \
|
||||||
|
(cd $$i; echo "installing $$i..."; \
|
||||||
|
$(MAKE) CC='${CC}' CFLAG='${CFLAG}' INSTALL_PREFIX='${INSTALL_PREFIX}' INSTALLTOP='${INSTALLTOP}' OPENSSLDIR='${OPENSSLDIR}' EX_LIBS='${EX_LIBS}' SDIRS='${SDIRS}' RANLIB='${RANLIB}' EXE_EXT='${EXE_EXT}' install ); \
|
||||||
|
fi; \
|
||||||
|
done
|
||||||
|
@for i in $(LIBS) ;\
|
||||||
|
do \
|
||||||
|
if [ -f "$$i" ]; then \
|
||||||
|
( echo installing $$i; \
|
||||||
|
cp $$i $(INSTALL_PREFIX)$(INSTALLTOP)/lib; \
|
||||||
|
$(RANLIB) $(INSTALL_PREFIX)$(INSTALLTOP)/lib/$$i; \
|
||||||
|
chmod 644 $(INSTALL_PREFIX)$(INSTALLTOP)/lib/$$i ); \
|
||||||
|
fi; \
|
||||||
|
done;
|
||||||
|
@if [ -n "$(SHARED_LIBS)" ]; then \
|
||||||
|
tmp="$(SHARED_LIBS)"; \
|
||||||
|
for i in $${tmp:-x}; \
|
||||||
|
do \
|
||||||
|
if [ -f "$$i" -o -f "$$i.a" ]; then \
|
||||||
|
( echo installing $$i; \
|
||||||
|
if [ "$(PLATFORM)" != "Cygwin" ]; then \
|
||||||
|
cp $$i $(INSTALL_PREFIX)$(INSTALLTOP)/lib; \
|
||||||
|
chmod 644 $(INSTALL_PREFIX)$(INSTALLTOP)/lib/$$i; \
|
||||||
|
else \
|
||||||
|
c=`echo $$i | sed 's/^lib/cyg/'`; \
|
||||||
|
cp $$c $(INSTALL_PREFIX)$(INSTALLTOP)/bin/$$c; \
|
||||||
|
chmod 755 $(INSTALL_PREFIX)$(INSTALLTOP)/bin/$$c; \
|
||||||
|
cp $$i.a $(INSTALL_PREFIX)$(INSTALLTOP)/lib/$$i.a; \
|
||||||
|
chmod 644 $(INSTALL_PREFIX)$(INSTALLTOP)/lib/$$i.a; \
|
||||||
|
fi ); \
|
||||||
|
fi; \
|
||||||
|
done; \
|
||||||
|
( here="`pwd`"; \
|
||||||
|
cd $(INSTALL_PREFIX)$(INSTALLTOP)/lib; \
|
||||||
|
make -f $$here/Makefile link-shared ); \
|
||||||
|
fi
|
||||||
|
|
||||||
|
install_docs:
|
||||||
|
@$(PERL) $(TOP)/util/mkdir-p.pl \
|
||||||
|
$(INSTALL_PREFIX)$(MANDIR)/man1 \
|
||||||
|
$(INSTALL_PREFIX)$(MANDIR)/man3 \
|
||||||
|
$(INSTALL_PREFIX)$(MANDIR)/man5 \
|
||||||
|
$(INSTALL_PREFIX)$(MANDIR)/man7
|
||||||
|
@for i in doc/apps/*.pod; do \
|
||||||
|
fn=`basename $$i .pod`; \
|
||||||
|
if [ "$$fn" = "config" ]; then sec=5; else sec=1; fi; \
|
||||||
|
echo "installing man$$sec/`basename $$i .pod`.$$sec"; \
|
||||||
|
(cd `dirname $$i`; \
|
||||||
|
$(PERL) ../../util/pod2man.pl --section=$$sec --center=OpenSSL \
|
||||||
|
--release=$(VERSION) `basename $$i`) \
|
||||||
|
> $(INSTALL_PREFIX)$(MANDIR)/man$$sec/`basename $$i .pod`.$$sec; \
|
||||||
|
done
|
||||||
|
@for i in doc/crypto/*.pod doc/ssl/*.pod; do \
|
||||||
|
fn=`basename $$i .pod`; \
|
||||||
|
if [ "$$fn" = "des_modes" ]; then sec=7; else sec=3; fi; \
|
||||||
|
echo "installing man$$sec/`basename $$i .pod`.$$sec"; \
|
||||||
|
(cd `dirname $$i`; \
|
||||||
|
$(PERL) ../../util/pod2man.pl --section=$$sec --center=OpenSSL \
|
||||||
|
--release=$(VERSION) `basename $$i`) \
|
||||||
|
> $(INSTALL_PREFIX)$(MANDIR)/man$$sec/`basename $$i .pod`.$$sec; \
|
||||||
|
done
|
||||||
|
|
||||||
|
# DO NOT DELETE THIS LINE -- make depend depends on it.
|
||||||
619
Makefile.shared
619
Makefile.shared
@@ -1,619 +0,0 @@
|
|||||||
#
|
|
||||||
# Helper makefile to link shared libraries in a portable way.
|
|
||||||
# This is much simpler than libtool, and hopefully not too error-prone.
|
|
||||||
#
|
|
||||||
# The following variables need to be set on the command line to build
|
|
||||||
# properly
|
|
||||||
|
|
||||||
# CC contains the current compiler. This one MUST be defined
|
|
||||||
CC=cc
|
|
||||||
CFLAGS=$(CFLAG)
|
|
||||||
# LDFLAGS contains flags to be used when temporary object files (when building
|
|
||||||
# shared libraries) are created, or when an application is linked.
|
|
||||||
# SHARED_LDFLAGS contains flags to be used when the shared library is created.
|
|
||||||
LDFLAGS=$(LDFLAG)
|
|
||||||
SHARED_LDFLAGS=$(SHARED_LDFLAG)
|
|
||||||
|
|
||||||
# SHARED_RCFLAGS are flags used with windres, i.e. when build for Cygwin
|
|
||||||
# or Mingw.
|
|
||||||
SHARED_RCFLAGS=$(SHARED_RCFLAG)
|
|
||||||
|
|
||||||
NM=nm
|
|
||||||
|
|
||||||
# LIBNAME contains just the name of the library, without prefix ("lib"
|
|
||||||
# on Unix, "cyg" for certain forms under Cygwin...) or suffix (.a, .so,
|
|
||||||
# .dll, ...). This one MUST have a value when using this makefile to
|
|
||||||
# build shared libraries.
|
|
||||||
# For example, to build libfoo.so, you need to do the following:
|
|
||||||
#LIBNAME=foo
|
|
||||||
LIBNAME=
|
|
||||||
|
|
||||||
# APPNAME contains just the name of the application, without suffix (""
|
|
||||||
# on Unix, ".exe" on Windows, ...). This one MUST have a value when using
|
|
||||||
# this makefile to build applications.
|
|
||||||
# For example, to build foo, you need to do the following:
|
|
||||||
#APPNAME=foo
|
|
||||||
APPNAME=
|
|
||||||
|
|
||||||
# DSTDIR is the directory where the built file should end up in.
|
|
||||||
DSTDIR=.
|
|
||||||
|
|
||||||
# SRCDIR is the top directory of the source tree.
|
|
||||||
SRCDIR=.
|
|
||||||
|
|
||||||
# OBJECTS contains all the object files to link together into the application.
|
|
||||||
# This must contain at least one object file.
|
|
||||||
#OBJECTS=foo.o
|
|
||||||
OBJECTS=
|
|
||||||
|
|
||||||
# LIBEXTRAS contains extra modules to link together with the library.
|
|
||||||
# For example, if a second library, say libbar.a needs to be linked into
|
|
||||||
# libfoo.so, you need to do the following:
|
|
||||||
#LIBEXTRAS=libbar.a
|
|
||||||
# Note that this MUST be used when using the link_dso targets, to hold the
|
|
||||||
# names of all object files that go into the target shared object.
|
|
||||||
LIBEXTRAS=
|
|
||||||
|
|
||||||
# LIBVERSION contains the current version of the library.
|
|
||||||
# For example, to build libfoo.so.1.2, you need to do the following:
|
|
||||||
#LIBVERSION=1.2
|
|
||||||
LIBVERSION=
|
|
||||||
|
|
||||||
# LIBCOMPATVERSIONS contains the compatibility versions (a list) of
|
|
||||||
# the library. They MUST be in decreasing order.
|
|
||||||
# For example, if libfoo.so.1.2.1 is backward compatible with libfoo.so.1.2
|
|
||||||
# and libfoo.so.1, you need to do the following:
|
|
||||||
#LIBCOMPATVERSIONS=1.2 1
|
|
||||||
# Note that on systems that use sonames, the last number will appear as
|
|
||||||
# part of it.
|
|
||||||
# It's also possible, for systems that support it (Tru64, for example),
|
|
||||||
# to add extra compatibility info with more precision, by adding a second
|
|
||||||
# list of versions, separated from the first with a semicolon, like this:
|
|
||||||
#LIBCOMPATVERSIONS=1.2 1;1.2.0 1.1.2 1.1.1 1.1.0 1.0.0
|
|
||||||
LIBCOMPATVERSIONS=
|
|
||||||
|
|
||||||
# LIBDEPS contains all the flags necessary to cover all necessary
|
|
||||||
# dependencies to other libraries.
|
|
||||||
LIBDEPS=
|
|
||||||
|
|
||||||
#------------------------------------------------------------------------------
|
|
||||||
# The rest is private to this makefile.
|
|
||||||
|
|
||||||
SET_X=:
|
|
||||||
#SET_X=set -x
|
|
||||||
|
|
||||||
top:
|
|
||||||
echo "Trying to use this makefile interactively? Don't."
|
|
||||||
|
|
||||||
CALC_VERSIONS= \
|
|
||||||
SHLIB_COMPAT=; SHLIB_SOVER=; \
|
|
||||||
if [ -n "$(LIBVERSION)$(LIBCOMPATVERSIONS)" ]; then \
|
|
||||||
prev=""; \
|
|
||||||
for v in `echo "$(LIBVERSION) $(LIBCOMPATVERSIONS)" | cut -d';' -f1`; do \
|
|
||||||
SHLIB_SOVER_NODOT=$$v; \
|
|
||||||
SHLIB_SOVER=.$$v; \
|
|
||||||
if [ -n "$$prev" ]; then \
|
|
||||||
SHLIB_COMPAT="$$SHLIB_COMPAT .$$prev"; \
|
|
||||||
fi; \
|
|
||||||
prev=$$v; \
|
|
||||||
done; \
|
|
||||||
fi
|
|
||||||
|
|
||||||
LINK_APP= \
|
|
||||||
( $(SET_X); \
|
|
||||||
LIBDEPS="$${LIBDEPS:-$(LIBDEPS)}"; \
|
|
||||||
LDCMD="$${LDCMD:-$(CC)}"; LDFLAGS="$${LDFLAGS:-$(CFLAGS) $(LDFLAGS)}"; \
|
|
||||||
LIBPATH=`for x in $$LIBDEPS; do echo $$x; done | sed -e 's/^ *-L//;t' -e d | uniq`; \
|
|
||||||
LIBPATH=`echo $$LIBPATH | sed -e 's/ /:/g'`; \
|
|
||||||
echo LD_LIBRARY_PATH=$$LIBPATH:$$LD_LIBRARY_PATH \
|
|
||||||
$${LDCMD} $${LDFLAGS} -o $${APPNAME:=$(APPNAME)} $(OBJECTS) $${LIBDEPS}; \
|
|
||||||
LD_LIBRARY_PATH=$$LIBPATH:$$LD_LIBRARY_PATH \
|
|
||||||
$${LDCMD} $${LDFLAGS} -o $${APPNAME:=$(APPNAME)} $(OBJECTS) $${LIBDEPS} )
|
|
||||||
|
|
||||||
LINK_SO= \
|
|
||||||
( $(SET_X); \
|
|
||||||
LIBDEPS="$${LIBDEPS:-$(LIBDEPS)}"; \
|
|
||||||
SHAREDCMD="$${SHAREDCMD:-$(CC)}"; \
|
|
||||||
SHAREDFLAGS="$${SHAREDFLAGS:-$(CFLAGS) $(SHARED_LDFLAGS)}"; \
|
|
||||||
LIBPATH=`for x in $$LIBDEPS; do echo $$x; done | sed -e 's/^ *-L//;t' -e d | uniq`; \
|
|
||||||
LIBPATH=`echo $$LIBPATH | sed -e 's/ /:/g'`; \
|
|
||||||
echo LD_LIBRARY_PATH=$$LIBPATH:$$LD_LIBRARY_PATH \
|
|
||||||
$${SHAREDCMD} $${SHAREDFLAGS} \
|
|
||||||
-o $(DSTDIR)/$$SHLIB$$SHLIB_SOVER$$SHLIB_SUFFIX \
|
|
||||||
$$ALLSYMSFLAGS $$SHOBJECTS $$NOALLSYMSFLAGS $$LIBDEPS; \
|
|
||||||
LD_LIBRARY_PATH=$$LIBPATH:$$LD_LIBRARY_PATH \
|
|
||||||
$${SHAREDCMD} $${SHAREDFLAGS} \
|
|
||||||
-o $(DSTDIR)/$$SHLIB$$SHLIB_SOVER$$SHLIB_SUFFIX \
|
|
||||||
$$ALLSYMSFLAGS $$SHOBJECTS $$NOALLSYMSFLAGS $$LIBDEPS \
|
|
||||||
) && $(SYMLINK_SO)
|
|
||||||
|
|
||||||
SYMLINK_SO= \
|
|
||||||
if [ -n "$$INHIBIT_SYMLINKS" ]; then :; else \
|
|
||||||
prev=$$SHLIB$$SHLIB_SOVER$$SHLIB_SUFFIX; \
|
|
||||||
if [ -n "$$SHLIB_COMPAT" ]; then \
|
|
||||||
for x in $$SHLIB_COMPAT; do \
|
|
||||||
( $(SET_X); rm -f $(DSTDIR)/$$SHLIB$$x$$SHLIB_SUFFIX; \
|
|
||||||
ln -s $$prev $(DSTDIR)/$$SHLIB$$x$$SHLIB_SUFFIX ); \
|
|
||||||
prev=$$SHLIB$$x$$SHLIB_SUFFIX; \
|
|
||||||
done; \
|
|
||||||
fi; \
|
|
||||||
if [ -n "$$SHLIB_SOVER" ]; then \
|
|
||||||
( $(SET_X); rm -f $(DSTDIR)/$$SHLIB$$SHLIB_SUFFIX; \
|
|
||||||
ln -s $$prev $(DSTDIR)/$$SHLIB$$SHLIB_SUFFIX ); \
|
|
||||||
fi; \
|
|
||||||
fi
|
|
||||||
|
|
||||||
LINK_SO_SHLIB= SHOBJECTS="$(DSTDIR)/lib$(LIBNAME).a $(LIBEXTRAS)"; $(LINK_SO)
|
|
||||||
LINK_SO_DSO= INHIBIT_SYMLINKS=yes; SHOBJECTS="$(LIBEXTRAS)"; $(LINK_SO)
|
|
||||||
|
|
||||||
LINK_SO_SHLIB_VIA_O= \
|
|
||||||
SHOBJECTS=$(DSTDIR)/lib$(LIBNAME).o; \
|
|
||||||
ALL=$$ALLSYMSFLAGS; ALLSYMSFLAGS=; NOALLSYMSFLAGS=; \
|
|
||||||
( echo ld $(LDFLAGS) -r -o $$SHOBJECTS.o $$ALL lib$(LIBNAME).a $(LIBEXTRAS); \
|
|
||||||
ld $(LDFLAGS) -r -o $$SHOBJECTS.o $$ALL $(DSTDIR)/lib$(LIBNAME).a $(LIBEXTRAS) ); \
|
|
||||||
$(LINK_SO) && ( echo rm -f $$SHOBJECTS; rm -f $$SHOBJECTS )
|
|
||||||
|
|
||||||
LINK_SO_SHLIB_UNPACKED= \
|
|
||||||
UNPACKDIR=link_tmp.$$$$; rm -rf $$UNPACKDIR; mkdir $$UNPACKDIR; \
|
|
||||||
(cd $$UNPACKDIR; ar x ../$(DSTDIR)/lib$(LIBNAME).a) && \
|
|
||||||
([ -z "$(LIBEXTRAS)" ] || cp $(LIBEXTRAS) $$UNPACKDIR) && \
|
|
||||||
SHOBJECTS=$$UNPACKDIR/*.o; \
|
|
||||||
$(LINK_SO) && rm -rf $$UNPACKDIR
|
|
||||||
|
|
||||||
DETECT_GNU_LD=($(CC) -Wl,-V /dev/null 2>&1 | grep '^GNU ld' )>/dev/null
|
|
||||||
|
|
||||||
DO_GNU_SO_COMMON=\
|
|
||||||
SHAREDFLAGS="$(CFLAGS) $(SHARED_LDFLAGS) -shared -Wl,-Bsymbolic -Wl,-soname=$$SHLIB$$SHLIB_SOVER$$SHLIB_SUFFIX"
|
|
||||||
DO_GNU_DSO=\
|
|
||||||
SHLIB=$(LIBNAME).so; \
|
|
||||||
SHLIB_SOVER=; \
|
|
||||||
SHLIB_SUFFIX=; \
|
|
||||||
$(DO_GNU_SO_COMMON)
|
|
||||||
DO_GNU_SO=\
|
|
||||||
$(CALC_VERSIONS); \
|
|
||||||
SHLIB=lib$(LIBNAME).so; \
|
|
||||||
ALLSYMSFLAGS='-Wl,--whole-archive'; \
|
|
||||||
NOALLSYMSFLAGS='-Wl,--no-whole-archive'; \
|
|
||||||
$(DO_GNU_SO_COMMON)
|
|
||||||
DO_GNU_APP=LDFLAGS="$(CFLAGS) $(LDFLAGS) -Wl,-rpath,$(LIBRPATH)"
|
|
||||||
|
|
||||||
#This is rather special. It's a special target with which one can link
|
|
||||||
#applications without bothering with any features that have anything to
|
|
||||||
#do with shared libraries, for example when linking against static
|
|
||||||
#libraries. It's mostly here to avoid a lot of conditionals everywhere
|
|
||||||
#else...
|
|
||||||
link_app.:
|
|
||||||
$(LINK_APP)
|
|
||||||
|
|
||||||
link_dso.gnu:
|
|
||||||
@ $(DO_GNU_DSO); $(LINK_SO_DSO)
|
|
||||||
link_shlib.gnu:
|
|
||||||
@ $(DO_GNU_SO); $(LINK_SO_SHLIB)
|
|
||||||
link_app.gnu:
|
|
||||||
@ $(DO_GNU_APP); $(LINK_APP)
|
|
||||||
|
|
||||||
link_shlib.linux-shared:
|
|
||||||
@$(PERL) $(SRCDIR)/util/mkdef.pl $(LIBNAME) linux >$(LIBNAME).map; \
|
|
||||||
$(DO_GNU_SO); \
|
|
||||||
ALLSYMSFLAGS='-Wl,--whole-archive,--version-script=$(LIBNAME).map'; \
|
|
||||||
$(LINK_SO_SHLIB)
|
|
||||||
|
|
||||||
link_dso.bsd:
|
|
||||||
@if $(DETECT_GNU_LD); then $(DO_GNU_DSO); else \
|
|
||||||
SHLIB=$(LIBNAME).so; \
|
|
||||||
SHLIB_SUFFIX=; \
|
|
||||||
LIBDEPS=" "; \
|
|
||||||
ALLSYMSFLAGS=; \
|
|
||||||
NOALLSYMSFLAGS=; \
|
|
||||||
SHAREDFLAGS="$(CFLAGS) $(SHARED_LDFLAGS) -shared -nostdlib"; \
|
|
||||||
fi; $(LINK_SO_DSO)
|
|
||||||
link_shlib.bsd:
|
|
||||||
@if $(DETECT_GNU_LD); then $(DO_GNU_SO); else \
|
|
||||||
$(CALC_VERSIONS); \
|
|
||||||
SHLIB=lib$(LIBNAME).so; \
|
|
||||||
SHLIB_SUFFIX=; \
|
|
||||||
LIBDEPS=" "; \
|
|
||||||
ALLSYMSFLAGS="-Wl,-Bforcearchive"; \
|
|
||||||
NOALLSYMSFLAGS=; \
|
|
||||||
SHAREDFLAGS="$(CFLAGS) $(SHARED_LDFLAGS) -shared -nostdlib"; \
|
|
||||||
fi; $(LINK_SO_SHLIB)
|
|
||||||
link_app.bsd:
|
|
||||||
@if $(DETECT_GNU_LD); then $(DO_GNU_APP); else \
|
|
||||||
LDFLAGS="$(CFLAGS) $(LDFLAGS) -Wl,-rpath,$(LIBPATH)"; \
|
|
||||||
fi; $(LINK_APP)
|
|
||||||
|
|
||||||
# For Darwin AKA Mac OS/X (dyld)
|
|
||||||
# Originally link_dso.darwin produced .so, because it was hard-coded
|
|
||||||
# in dso_dlfcn module. At later point dso_dlfcn switched to .dylib
|
|
||||||
# extension in order to allow for run-time linking with vendor-
|
|
||||||
# supplied shared libraries such as libz, so that link_dso.darwin had
|
|
||||||
# to be harmonized with it. This caused minor controversy, because
|
|
||||||
# it was believed that dlopen can't be used to dynamically load
|
|
||||||
# .dylib-s, only so called bundle modules (ones linked with -bundle
|
|
||||||
# flag). The belief seems to be originating from pre-10.4 release,
|
|
||||||
# where dlfcn functionality was emulated by dlcompat add-on. In
|
|
||||||
# 10.4 dlopen was rewritten as native part of dyld and is documented
|
|
||||||
# to be capable of loading both dynamic libraries and bundles. In
|
|
||||||
# order to provide compatibility with pre-10.4 dlopen, modules are
|
|
||||||
# linked with -bundle flag, which makes .dylib extension misleading.
|
|
||||||
# It works, because dlopen is [and always was] extension-agnostic.
|
|
||||||
# Alternative to this heuristic approach is to develop specific
|
|
||||||
# MacOS X dso module relying on whichever "native" dyld interface.
|
|
||||||
link_dso.darwin:
|
|
||||||
@ SHLIB=$(LIBNAME); \
|
|
||||||
SHLIB_SUFFIX=.dylib; \
|
|
||||||
ALLSYMSFLAGS=''; \
|
|
||||||
NOALLSYMSFLAGS=''; \
|
|
||||||
SHAREDFLAGS="$(CFLAGS) `echo $(SHARED_LDFLAGS) | sed s/dynamiclib/bundle/`"; \
|
|
||||||
$(LINK_SO_DSO)
|
|
||||||
link_shlib.darwin:
|
|
||||||
@ $(CALC_VERSIONS); \
|
|
||||||
SHLIB=lib$(LIBNAME); \
|
|
||||||
SHLIB_SUFFIX=.dylib; \
|
|
||||||
ALLSYMSFLAGS='-all_load'; \
|
|
||||||
NOALLSYMSFLAGS=''; \
|
|
||||||
SHAREDFLAGS="$(CFLAGS) $(SHARED_LDFLAGS)"; \
|
|
||||||
if [ -n "$(LIBVERSION)" ]; then \
|
|
||||||
SHAREDFLAGS="$$SHAREDFLAGS -current_version $(LIBVERSION)"; \
|
|
||||||
fi; \
|
|
||||||
if [ -n "$$SHLIB_SOVER_NODOT" ]; then \
|
|
||||||
SHAREDFLAGS="$$SHAREDFLAGS -compatibility_version $$SHLIB_SOVER_NODOT"; \
|
|
||||||
fi; \
|
|
||||||
SHAREDFLAGS="$$SHAREDFLAGS -install_name $(INSTALLTOP)/$(LIBDIR)/$$SHLIB$(SHLIB_EXT)"; \
|
|
||||||
$(LINK_SO_SHLIB)
|
|
||||||
link_app.darwin: # is there run-path on darwin?
|
|
||||||
$(LINK_APP)
|
|
||||||
|
|
||||||
link_dso.cygwin:
|
|
||||||
@SHLIB=$(LIBNAME); \
|
|
||||||
SHLIB_SUFFIX=.dll; \
|
|
||||||
ALLSYMSFLAGS=''; \
|
|
||||||
NOALLSYMSFLAGS=''; \
|
|
||||||
base=-Wl,--enable-auto-image-base; \
|
|
||||||
SHAREDFLAGS="$(CFLAGS) $(SHARED_LDFLAGS) -shared $$base -Wl,-Bsymbolic"; \
|
|
||||||
$(LINK_SO_DSO)
|
|
||||||
link_shlib.cygwin:
|
|
||||||
@ $(CALC_VERSIONS); \
|
|
||||||
INHIBIT_SYMLINKS=yes; \
|
|
||||||
SHLIB=cyg$(LIBNAME); SHLIB_SOVER=-$(LIBVERSION); SHLIB_SUFFIX=.dll; \
|
|
||||||
dll_name=$$SHLIB$$SHLIB_SOVER$$SHLIB_SUFFIX; \
|
|
||||||
echo "$(PERL) $(SRCDIR)/util/mkrc.pl $$dll_name |" \
|
|
||||||
"$(CROSS_COMPILE)windres $(SHARED_RCFLAGS) -o rc.o"; \
|
|
||||||
$(PERL) $(SRCDIR)/util/mkrc.pl $$dll_name | \
|
|
||||||
$(CROSS_COMPILE)windres $(SHARED_RCFLAGS) -o rc.o; \
|
|
||||||
ALLSYMSFLAGS='-Wl,--whole-archive'; \
|
|
||||||
NOALLSYMSFLAGS='-Wl,--no-whole-archive'; \
|
|
||||||
SHAREDFLAGS="$(CFLAGS) $(SHARED_LDFLAGS) -shared -Wl,--enable-auto-image-base -Wl,-Bsymbolic -Wl,--out-implib,lib$(LIBNAME).dll.a rc.o"; \
|
|
||||||
$(LINK_SO_SHLIB) || exit 1; \
|
|
||||||
rm rc.o
|
|
||||||
link_app.cygwin:
|
|
||||||
$(LINK_APP)
|
|
||||||
|
|
||||||
# link_dso.mingw-shared and link_app.mingw-shared are mapped to the
|
|
||||||
# corresponding cygwin targets, as they do the exact same thing.
|
|
||||||
link_shlib.mingw:
|
|
||||||
@ $(CALC_VERSIONS); \
|
|
||||||
INHIBIT_SYMLINKS=yes; \
|
|
||||||
arch=; \
|
|
||||||
if expr $(PLATFORM) : mingw64 > /dev/null; then arch=-x64; fi; \
|
|
||||||
sover=`echo $(LIBVERSION) | sed -e 's/\./_/g'` ; \
|
|
||||||
SHLIB=lib$(LIBNAME); \
|
|
||||||
SHLIB_SOVER=-$$sover$$arch; \
|
|
||||||
SHLIB_SUFFIX=.dll; \
|
|
||||||
dll_name=$$SHLIB$$SHLIB_SOVER$$SHLIB_SUFFIX; \
|
|
||||||
base=; [ $(LIBNAME) = "crypto" -a -n "$(FIPSCANLIB)" ] && base=-Wl,--image-base,0x63000000; \
|
|
||||||
$(PERL) $(SRCDIR)/util/mkdef.pl 32 $(LIBNAME) \
|
|
||||||
| sed -e 's|^\(LIBRARY *\)$(LIBNAME)32|\1'"$$dll_name"'|' \
|
|
||||||
> $(LIBNAME).def; \
|
|
||||||
echo "$(PERL) $(SRCDIR)/util/mkrc.pl $$dll_name |" \
|
|
||||||
"$(CROSS_COMPILE)windres $(SHARED_RCFLAGS) -o rc.o"; \
|
|
||||||
$(PERL) $(SRCDIR)/util/mkrc.pl $$dll_name | \
|
|
||||||
$(CROSS_COMPILE)windres $(SHARED_RCFLAGS) -o rc.o; \
|
|
||||||
ALLSYMSFLAGS='-Wl,--whole-archive'; \
|
|
||||||
NOALLSYMSFLAGS='-Wl,--no-whole-archive'; \
|
|
||||||
SHAREDFLAGS="$(CFLAGS) $(SHARED_LDFLAGS) -shared $$base -Wl,-Bsymbolic -Wl,--out-implib,lib$(LIBNAME).dll.a $(LIBNAME).def rc.o"; \
|
|
||||||
$(LINK_SO_SHLIB) || exit 1; \
|
|
||||||
rm $(LIBNAME).def rc.o
|
|
||||||
|
|
||||||
link_dso.alpha-osf1:
|
|
||||||
@ if $(DETECT_GNU_LD); then \
|
|
||||||
$(DO_GNU_DSO); \
|
|
||||||
else \
|
|
||||||
SHLIB=$(LIBNAME).so; \
|
|
||||||
SHLIB_SUFFIX=; \
|
|
||||||
ALLSYMSFLAGS=''; \
|
|
||||||
NOALLSYMSFLAGS=''; \
|
|
||||||
SHAREDFLAGS="$(CFLAGS) $(SHARED_LDFLAGS) -shared -Wl,-B,symbolic"; \
|
|
||||||
fi; \
|
|
||||||
$(LINK_SO_DSO)
|
|
||||||
link_shlib.alpha-osf1:
|
|
||||||
@ if $(DETECT_GNU_LD); then \
|
|
||||||
$(DO_GNU_SO); \
|
|
||||||
else \
|
|
||||||
SHLIB=lib$(LIBNAME).so; \
|
|
||||||
SHLIB_SUFFIX=; \
|
|
||||||
SHLIB_HIST=`echo "$(LIBCOMPATVERSIONS)" | cut -d';' -f2 | sed -e 's/ */:/'`; \
|
|
||||||
if [ -n "$$SHLIB_HIST" ]; then \
|
|
||||||
SHLIB_HIST="$${SHLIB_HIST}:$(LIBVERSION)"; \
|
|
||||||
else \
|
|
||||||
SHLIB_HIST="$(LIBVERSION)"; \
|
|
||||||
fi; \
|
|
||||||
SHLIB_SOVER=; \
|
|
||||||
ALLSYMSFLAGS='-all'; \
|
|
||||||
NOALLSYMSFLAGS='-none'; \
|
|
||||||
SHAREDFLAGS="$(CFLAGS) $(SHARED_LDFLAGS) -shared -Wl,-B,symbolic"; \
|
|
||||||
if [ -n "$$SHLIB_HIST" ]; then \
|
|
||||||
SHAREDFLAGS="$$SHAREDFLAGS -set_version $$SHLIB_HIST"; \
|
|
||||||
fi; \
|
|
||||||
fi; \
|
|
||||||
$(LINK_SO_SHLIB)
|
|
||||||
link_app.alpha-osf1:
|
|
||||||
@if $(DETECT_GNU_LD); then \
|
|
||||||
$(DO_GNU_APP); \
|
|
||||||
else \
|
|
||||||
LDFLAGS="$(CFLAGS) $(LDFLAGS) -rpath $(LIBRPATH)"; \
|
|
||||||
fi; \
|
|
||||||
$(LINK_APP)
|
|
||||||
|
|
||||||
link_dso.solaris:
|
|
||||||
@ if $(DETECT_GNU_LD); then \
|
|
||||||
$(DO_GNU_DSO); \
|
|
||||||
else \
|
|
||||||
$(CALC_VERSIONS); \
|
|
||||||
SHLIB=$(LIBNAME).so; \
|
|
||||||
SHLIB_SUFFIX=; \
|
|
||||||
ALLSYMSFLAGS=""; \
|
|
||||||
NOALLSYMSFLAGS=""; \
|
|
||||||
SHAREDFLAGS="$(CFLAGS) $(SHARED_LDFLAGS) -h $$SHLIB$$SHLIB_SOVER$$SHLIB_SUFFIX -Wl,-Bsymbolic"; \
|
|
||||||
fi; \
|
|
||||||
$(LINK_SO_DSO)
|
|
||||||
link_shlib.solaris:
|
|
||||||
@ if $(DETECT_GNU_LD); then \
|
|
||||||
$(DO_GNU_SO); \
|
|
||||||
else \
|
|
||||||
$(CALC_VERSIONS); \
|
|
||||||
SHLIB=lib$(LIBNAME).so; \
|
|
||||||
SHLIB_SUFFIX=;\
|
|
||||||
$(PERL) $(SRCDIR)/util/mkdef.pl $(LIBNAME) linux >$(LIBNAME).map; \
|
|
||||||
ALLSYMSFLAGS="-Wl,-z,allextract,-M,$(LIBNAME).map"; \
|
|
||||||
NOALLSYMSFLAGS="-Wl,-z,defaultextract"; \
|
|
||||||
SHAREDFLAGS="$(CFLAGS) $(SHARED_LDFLAGS) -h $$SHLIB$$SHLIB_SOVER$$SHLIB_SUFFIX -Wl,-Bsymbolic"; \
|
|
||||||
fi; \
|
|
||||||
$(LINK_SO_SHLIB)
|
|
||||||
link_app.solaris:
|
|
||||||
@ if $(DETECT_GNU_LD); then \
|
|
||||||
$(DO_GNU_APP); \
|
|
||||||
else \
|
|
||||||
LDFLAGS="$(CFLAGS) $(LDFLAGS) -R $(LIBRPATH)"; \
|
|
||||||
fi; \
|
|
||||||
$(LINK_APP)
|
|
||||||
|
|
||||||
# OpenServer 5 native compilers used
|
|
||||||
link_dso.svr3:
|
|
||||||
@ if $(DETECT_GNU_LD); then \
|
|
||||||
$(DO_GNU_DSO); \
|
|
||||||
else \
|
|
||||||
$(CALC_VERSIONS); \
|
|
||||||
SHLIB=$(LIBNAME).so; \
|
|
||||||
SHLIB_SUFFIX=; \
|
|
||||||
ALLSYMSFLAGS=''; \
|
|
||||||
NOALLSYMSFLAGS=''; \
|
|
||||||
SHAREDFLAGS="$(CFLAGS) -G -h $$SHLIB$$SHLIB_SUFFIX"; \
|
|
||||||
fi; \
|
|
||||||
$(LINK_SO_DSO)
|
|
||||||
link_shlib.svr3:
|
|
||||||
@ if $(DETECT_GNU_LD); then \
|
|
||||||
$(DO_GNU_SO); \
|
|
||||||
else \
|
|
||||||
$(CALC_VERSIONS); \
|
|
||||||
SHLIB=lib$(LIBNAME).so; \
|
|
||||||
SHLIB_SUFFIX=; \
|
|
||||||
ALLSYMSFLAGS=''; \
|
|
||||||
NOALLSYMSFLAGS=''; \
|
|
||||||
SHAREDFLAGS="$(CFLAGS) -G -h $$SHLIB$$SHLIB_SOVER$$SHLIB_SUFFIX"; \
|
|
||||||
fi; \
|
|
||||||
$(LINK_SO_SHLIB_UNPACKED)
|
|
||||||
link_app.svr3:
|
|
||||||
@$(DETECT_GNU_LD) && $(DO_GNU_APP); \
|
|
||||||
$(LINK_APP)
|
|
||||||
|
|
||||||
# UnixWare 7 and OpenUNIX 8 native compilers used
|
|
||||||
link_dso.svr5:
|
|
||||||
@ if $(DETECT_GNU_LD); then \
|
|
||||||
$(DO_GNU_DSO); \
|
|
||||||
else \
|
|
||||||
SHARE_FLAG='-G'; \
|
|
||||||
($(CC) -v 2>&1 | grep gcc) > /dev/null && SHARE_FLAG='-shared'; \
|
|
||||||
SHLIB=$(LIBNAME).so; \
|
|
||||||
SHLIB_SUFFIX=; \
|
|
||||||
ALLSYMSFLAGS=''; \
|
|
||||||
NOALLSYMSFLAGS=''; \
|
|
||||||
SHAREDFLAGS="$(CFLAGS) $${SHARE_FLAG} -h $$SHLIB$$SHLIB_SUFFIX"; \
|
|
||||||
fi; \
|
|
||||||
$(LINK_SO_DSO)
|
|
||||||
link_shlib.svr5:
|
|
||||||
@ if $(DETECT_GNU_LD); then \
|
|
||||||
$(DO_GNU_SO); \
|
|
||||||
else \
|
|
||||||
$(CALC_VERSIONS); \
|
|
||||||
SHARE_FLAG='-G'; \
|
|
||||||
($(CC) -v 2>&1 | grep gcc) > /dev/null && SHARE_FLAG='-shared'; \
|
|
||||||
SHLIB=lib$(LIBNAME).so; \
|
|
||||||
SHLIB_SUFFIX=; \
|
|
||||||
ALLSYMSFLAGS=''; \
|
|
||||||
NOALLSYMSFLAGS=''; \
|
|
||||||
SHAREDFLAGS="$(CFLAGS) $${SHARE_FLAG} -h $$SHLIB$$SHLIB_SOVER$$SHLIB_SUFFIX"; \
|
|
||||||
fi; \
|
|
||||||
$(LINK_SO_SHLIB_UNPACKED)
|
|
||||||
link_app.svr5:
|
|
||||||
@$(DETECT_GNU_LD) && $(DO_GNU_APP); \
|
|
||||||
$(LINK_APP)
|
|
||||||
|
|
||||||
link_dso.irix:
|
|
||||||
@ if $(DETECT_GNU_LD); then \
|
|
||||||
$(DO_GNU_DSO); \
|
|
||||||
else \
|
|
||||||
SHLIB=$(LIBNAME).so; \
|
|
||||||
SHLIB_SUFFIX=; \
|
|
||||||
ALLSYMSFLAGS=""; \
|
|
||||||
NOALLSYMSFLAGS=""; \
|
|
||||||
SHAREDFLAGS="$(CFLAGS) $(SHARED_LDFLAGS) -shared -Wl,-soname,$$SHLIB$$SHLIB_SUFFIX,-B,symbolic"; \
|
|
||||||
fi; \
|
|
||||||
$(LINK_SO_DSO)
|
|
||||||
link_shlib.irix:
|
|
||||||
@ if $(DETECT_GNU_LD); then \
|
|
||||||
$(DO_GNU_SO); \
|
|
||||||
else \
|
|
||||||
$(CALC_VERSIONS); \
|
|
||||||
SHLIB=lib$(LIBNAME).so; \
|
|
||||||
SHLIB_SUFFIX=; \
|
|
||||||
MINUSWL=""; \
|
|
||||||
($(CC) -v 2>&1 | grep gcc) > /dev/null && MINUSWL="-Wl,"; \
|
|
||||||
ALLSYMSFLAGS="$${MINUSWL}-all"; \
|
|
||||||
NOALLSYMSFLAGS="$${MINUSWL}-none"; \
|
|
||||||
SHAREDFLAGS="$(CFLAGS) $(SHARED_LDFLAGS) -shared -Wl,-soname,$$SHLIB$$SHLIB_SOVER$$SHLIB_SUFFIX,-B,symbolic"; \
|
|
||||||
fi; \
|
|
||||||
$(LINK_SO_SHLIB)
|
|
||||||
link_app.irix:
|
|
||||||
@LDFLAGS="$(CFLAGS) $(LDFLAGS) -Wl,-rpath,$(LIBRPATH)"; \
|
|
||||||
$(LINK_APP)
|
|
||||||
|
|
||||||
# 32-bit PA-RISC HP-UX embeds the -L pathname of libs we link with, so
|
|
||||||
# we compensate for it with +cdp ../: and +cdp ./:. Yes, these rewrite
|
|
||||||
# rules imply that we can only link one level down in catalog structure,
|
|
||||||
# but that's what takes place for the moment of this writing. +cdp option
|
|
||||||
# was introduced in HP-UX 11.x and applies in 32-bit PA-RISC link
|
|
||||||
# editor context only [it's simply ignored in other cases, which are all
|
|
||||||
# ELFs by the way].
|
|
||||||
#
|
|
||||||
link_dso.hpux:
|
|
||||||
@if $(DETECT_GNU_LD); then $(DO_GNU_DSO); else \
|
|
||||||
SHLIB=$(LIBNAME).sl; \
|
|
||||||
expr "$(CFLAGS)" : '.*DSO_DLFCN' > /dev/null && SHLIB=$(LIBNAME).so; \
|
|
||||||
SHLIB_SUFFIX=; \
|
|
||||||
ALLSYMSFLAGS=''; \
|
|
||||||
NOALLSYMSFLAGS=''; \
|
|
||||||
expr $(PLATFORM) : 'hpux64' > /dev/null && ALLSYMSFLAGS='-Wl,+forceload'; \
|
|
||||||
SHAREDFLAGS="$(CFLAGS) $(SHARED_LDFLAGS) -Wl,-B,symbolic,+vnocompatwarnings,-z,+s,+h,$$SHLIB$$SHLIB_SUFFIX,+cdp,../:,+cdp,./:"; \
|
|
||||||
fi; \
|
|
||||||
rm -f $$SHLIB$$SHLIB_SUFFIX || :; \
|
|
||||||
$(LINK_SO_DSO) && chmod a=rx $$SHLIB$$SHLIB_SUFFIX
|
|
||||||
link_shlib.hpux:
|
|
||||||
@if $(DETECT_GNU_LD); then $(DO_GNU_SO); else \
|
|
||||||
$(CALC_VERSIONS); \
|
|
||||||
SHLIB=lib$(LIBNAME).sl; \
|
|
||||||
expr $(PLATFORM) : '.*ia64' > /dev/null && SHLIB=lib$(LIBNAME).so; \
|
|
||||||
SHLIB_SUFFIX=; \
|
|
||||||
ALLSYMSFLAGS='-Wl,-Fl'; \
|
|
||||||
NOALLSYMSFLAGS=''; \
|
|
||||||
expr $(PLATFORM) : 'hpux64' > /dev/null && ALLSYMSFLAGS='-Wl,+forceload'; \
|
|
||||||
SHAREDFLAGS="$(CFLAGS) $(SHARED_LDFLAGS) -Wl,-B,symbolic,+vnocompatwarnings,-z,+s,+h,$$SHLIB$$SHLIB_SOVER$$SHLIB_SUFFIX,+cdp,../:,+cdp,./:"; \
|
|
||||||
fi; \
|
|
||||||
rm -f $$SHLIB$$SHLIB_SOVER$$SHLIB_SUFFIX || :; \
|
|
||||||
$(LINK_SO_SHLIB) && chmod a=rx $$SHLIB$$SHLIB_SOVER$$SHLIB_SUFFIX
|
|
||||||
link_app.hpux:
|
|
||||||
@if $(DETECT_GNU_LD); then $(DO_GNU_APP); else \
|
|
||||||
LDFLAGS="$(CFLAGS) $(LDFLAGS) -Wl,+s,+cdp,../:,+cdp,./:,+b,$(LIBRPATH)"; \
|
|
||||||
fi; \
|
|
||||||
$(LINK_APP)
|
|
||||||
|
|
||||||
link_dso.aix:
|
|
||||||
@OBJECT_MODE=`expr "x$(SHARED_LDFLAGS)" : 'x\-[a-z]*\(64\)'` || :; \
|
|
||||||
OBJECT_MODE=$${OBJECT_MODE:-32}; export OBJECT_MODE; \
|
|
||||||
SHLIB=$(LIBNAME).so; \
|
|
||||||
SHLIB_SUFFIX=; \
|
|
||||||
ALLSYMSFLAGS=''; \
|
|
||||||
NOALLSYMSFLAGS=''; \
|
|
||||||
SHAREDFLAGS='$(CFLAGS) $(SHARED_LDFLAGS) -Wl,-bexpall,-bnolibpath,-bM:SRE'; \
|
|
||||||
$(LINK_SO_DSO);
|
|
||||||
link_shlib.aix:
|
|
||||||
@ $(CALC_VERSIONS); \
|
|
||||||
OBJECT_MODE=`expr "x$(SHARED_LDFLAGS)" : 'x\-[a-z]*\(64\)'` || : ; \
|
|
||||||
OBJECT_MODE=$${OBJECT_MODE:-32}; export OBJECT_MODE; \
|
|
||||||
SHLIB=lib$(LIBNAME).so; \
|
|
||||||
SHLIB_SUFFIX=; \
|
|
||||||
ALLSYMSFLAGS='-bnogc'; \
|
|
||||||
NOALLSYMSFLAGS=''; \
|
|
||||||
SHAREDFLAGS='$(CFLAGS) $(SHARED_LDFLAGS) -Wl,-bexpall,-bnolibpath,-bM:SRE'; \
|
|
||||||
$(LINK_SO_SHLIB_VIA_O)
|
|
||||||
link_app.aix:
|
|
||||||
LDFLAGS="$(CFLAGS) $(LDFLAGS) -Wl,-brtl,-blibpath:$(LIBRPATH):$${LIBPATH:-/usr/lib:/lib}"; \
|
|
||||||
$(LINK_APP)
|
|
||||||
|
|
||||||
|
|
||||||
# Targets to build symbolic links when needed
|
|
||||||
symlink.gnu symlink.solaris symlink.svr3 symlink.svr5 symlink.irix \
|
|
||||||
symlink.aix:
|
|
||||||
@ $(CALC_VERSIONS); \
|
|
||||||
SHLIB=lib$(LIBNAME).so; \
|
|
||||||
$(SYMLINK_SO)
|
|
||||||
symlink.darwin:
|
|
||||||
@ $(CALC_VERSIONS); \
|
|
||||||
SHLIB=lib$(LIBNAME); \
|
|
||||||
SHLIB_SUFFIX=.dylib; \
|
|
||||||
$(SYMLINK_SO)
|
|
||||||
symlink.hpux:
|
|
||||||
@ $(CALC_VERSIONS); \
|
|
||||||
SHLIB=lib$(LIBNAME).sl; \
|
|
||||||
expr $(PLATFORM) : '.*ia64' > /dev/null && SHLIB=lib$(LIBNAME).so; \
|
|
||||||
$(SYMLINK_SO)
|
|
||||||
# The following lines means those specific architectures do no symlinks
|
|
||||||
symlink.cygwin symlink.alpha-osf1 symlink.tru64 symlink.tru64-rpath:
|
|
||||||
|
|
||||||
# Compatibility targets
|
|
||||||
link_dso.bsd-gcc-shared link_dso.linux-shared link_dso.gnu-shared link_dso.haiku-shared: link_dso.gnu
|
|
||||||
link_shlib.bsd-gcc-shared: link_shlib.linux-shared
|
|
||||||
link_shlib.gnu-shared link_shlib.haiku-shared: link_shlib.gnu
|
|
||||||
link_app.bsd-gcc-shared link_app.linux-shared link_app.gnu-shared link_app.haiku-shared: link_app.gnu
|
|
||||||
symlink.bsd-gcc-shared symlink.bsd-shared symlink.linux-shared symlink.gnu-shared symlink.haiku-shared: symlink.gnu
|
|
||||||
link_dso.bsd-shared: link_dso.bsd
|
|
||||||
link_shlib.bsd-shared: link_shlib.bsd
|
|
||||||
link_app.bsd-shared: link_app.bsd
|
|
||||||
link_dso.darwin-shared: link_dso.darwin
|
|
||||||
link_shlib.darwin-shared: link_shlib.darwin
|
|
||||||
link_app.darwin-shared: link_app.darwin
|
|
||||||
symlink.darwin-shared: symlink.darwin
|
|
||||||
link_dso.cygwin-shared: link_dso.cygwin
|
|
||||||
link_shlib.cygwin-shared: link_shlib.cygwin
|
|
||||||
link_app.cygwin-shared: link_app.cygwin
|
|
||||||
symlink.cygwin-shared: symlink.cygwin
|
|
||||||
link_dso.mingw-shared: link_dso.cygwin
|
|
||||||
link_shlib.mingw-shared: link_shlib.mingw
|
|
||||||
link_app.mingw-shared: link_app.cygwin
|
|
||||||
symlink.mingw-shared: symlink.cygwin
|
|
||||||
link_dso.alpha-osf1-shared: link_dso.alpha-osf1
|
|
||||||
link_shlib.alpha-osf1-shared: link_shlib.alpha-osf1
|
|
||||||
link_app.alpha-osf1-shared: link_app.alpha-osf1
|
|
||||||
symlink.alpha-osf1-shared: symlink.alpha-osf1
|
|
||||||
link_dso.tru64-shared: link_dso.tru64
|
|
||||||
link_shlib.tru64-shared: link_shlib.tru64
|
|
||||||
link_app.tru64-shared: link_app.tru64
|
|
||||||
symlink.tru64-shared: symlink.tru64
|
|
||||||
link_dso.tru64-shared-rpath: link_dso.tru64-rpath
|
|
||||||
link_shlib.tru64-shared-rpath: link_shlib.tru64-rpath
|
|
||||||
link_app.tru64-shared-rpath: link_app.tru64-rpath
|
|
||||||
symlink.tru64-shared-rpath: symlink.tru64-rpath
|
|
||||||
link_dso.solaris-shared: link_dso.solaris
|
|
||||||
link_shlib.solaris-shared: link_shlib.solaris
|
|
||||||
link_app.solaris-shared: link_app.solaris
|
|
||||||
symlink.solaris-shared: symlink.solaris
|
|
||||||
link_dso.svr3-shared: link_dso.svr3
|
|
||||||
link_shlib.svr3-shared: link_shlib.svr3
|
|
||||||
link_app.svr3-shared: link_app.svr3
|
|
||||||
symlink.svr3-shared: symlink.svr3
|
|
||||||
link_dso.svr5-shared: link_dso.svr5
|
|
||||||
link_shlib.svr5-shared: link_shlib.svr5
|
|
||||||
link_app.svr5-shared: link_app.svr5
|
|
||||||
symlink.svr5-shared: symlink.svr5
|
|
||||||
link_dso.irix-shared: link_dso.irix
|
|
||||||
link_shlib.irix-shared: link_shlib.irix
|
|
||||||
link_app.irix-shared: link_app.irix
|
|
||||||
symlink.irix-shared: symlink.irix
|
|
||||||
link_dso.hpux-shared: link_dso.hpux
|
|
||||||
link_shlib.hpux-shared: link_shlib.hpux
|
|
||||||
link_app.hpux-shared: link_app.hpux
|
|
||||||
symlink.hpux-shared: symlink.hpux
|
|
||||||
link_dso.aix-shared: link_dso.aix
|
|
||||||
link_shlib.aix-shared: link_shlib.aix
|
|
||||||
link_app.aix-shared: link_app.aix
|
|
||||||
symlink.aix-shared: symlink.aix
|
|
||||||
617
NEWS
617
NEWS
@@ -5,536 +5,7 @@
|
|||||||
This file gives a brief overview of the major changes between each OpenSSL
|
This file gives a brief overview of the major changes between each OpenSSL
|
||||||
release. For more details please read the CHANGES file.
|
release. For more details please read the CHANGES file.
|
||||||
|
|
||||||
Major changes between OpenSSL 1.0.2g and OpenSSL 1.1.0 [in pre-release]
|
Major changes between OpenSSL 0.9.6 and OpenSSL 0.9.7:
|
||||||
|
|
||||||
o "shared" builds are now the default when possible
|
|
||||||
o Added support for "pipelining"
|
|
||||||
o Added the AFALG engine
|
|
||||||
o New threading API implemented
|
|
||||||
o Support for ChaCha20 and Poly1305 added to libcrypto and libssl
|
|
||||||
o Support for extended master secret
|
|
||||||
o CCM ciphersuites
|
|
||||||
o Reworked test suite, now based on perl, Test::Harness and Test::More
|
|
||||||
o *Most* libcrypto and libssl structures were made opaque including:
|
|
||||||
<TBA>
|
|
||||||
o libssl internal structures made opaque
|
|
||||||
o SSLv2 support removed
|
|
||||||
o Kerberos ciphersuite support removed
|
|
||||||
o RC4 removed from DEFAULT ciphersuites in libssl
|
|
||||||
o 40 and 56 bit cipher support removed from libssl
|
|
||||||
o All public header files moved to include/openssl, no more symlinking
|
|
||||||
o SSL/TLS state machine, version negotiation and record layer rewritten
|
|
||||||
o EC revision: now operations use new EC_KEY_METHOD.
|
|
||||||
o Support for OCB mode added to libcrypto
|
|
||||||
o Support for asynchronous crypto operations added to libcrypto and libssl
|
|
||||||
o Deprecated interfaces can now be disabled at build time either
|
|
||||||
relative to the latest release via the "no-deprecated" Configure
|
|
||||||
argument, or via the "--api=1.1.0|1.0.0|0.9.8" option.
|
|
||||||
o Application software can be compiled with -DOPENSSL_API_COMPAT=version
|
|
||||||
to ensure that features deprecated in that version are not exposed.
|
|
||||||
o Support for RFC6698/RFC7671 DANE TLSA peer authentication
|
|
||||||
o Change of Configure to use --prefix as the main installation
|
|
||||||
directory location rather than --openssldir. The latter becomes
|
|
||||||
the directory for certs, private key and openssl.cnf exclusively.
|
|
||||||
o Reworked BIO networking library, with full support for IPv6.
|
|
||||||
o New "unified" build system
|
|
||||||
o New security levels
|
|
||||||
o Support for scrypt algorithm
|
|
||||||
o Support for X25519
|
|
||||||
o Extended SSL_CONF support using configuration files
|
|
||||||
o KDF algorithm support. Implement TLS PRF as a KDF.
|
|
||||||
o Support for Certificate Transparency
|
|
||||||
o HKDF support.
|
|
||||||
|
|
||||||
Major changes between OpenSSL 1.0.2f and OpenSSL 1.0.2g [1 Mar 2016]
|
|
||||||
|
|
||||||
o Disable weak ciphers in SSLv3 and up in default builds of OpenSSL.
|
|
||||||
o Disable SSLv2 default build, default negotiation and weak ciphers
|
|
||||||
(CVE-2016-0800)
|
|
||||||
o Fix a double-free in DSA code (CVE-2016-0705)
|
|
||||||
o Disable SRP fake user seed to address a server memory leak
|
|
||||||
(CVE-2016-0798)
|
|
||||||
o Fix BN_hex2bn/BN_dec2bn NULL pointer deref/heap corruption
|
|
||||||
(CVE-2016-0797)
|
|
||||||
o Fix memory issues in BIO_*printf functions (CVE-2016-0799)
|
|
||||||
o Fix side channel attack on modular exponentiation (CVE-2016-0702)
|
|
||||||
|
|
||||||
Major changes between OpenSSL 1.0.2e and OpenSSL 1.0.2f [28 Jan 2016]
|
|
||||||
|
|
||||||
o DH small subgroups (CVE-2016-0701)
|
|
||||||
o SSLv2 doesn't block disabled ciphers (CVE-2015-3197)
|
|
||||||
|
|
||||||
Major changes between OpenSSL 1.0.2d and OpenSSL 1.0.2e [3 Dec 2015]
|
|
||||||
|
|
||||||
o BN_mod_exp may produce incorrect results on x86_64 (CVE-2015-3193)
|
|
||||||
o Certificate verify crash with missing PSS parameter (CVE-2015-3194)
|
|
||||||
o X509_ATTRIBUTE memory leak (CVE-2015-3195)
|
|
||||||
o Rewrite EVP_DecodeUpdate (base64 decoding) to fix several bugs
|
|
||||||
o In DSA_generate_parameters_ex, if the provided seed is too short,
|
|
||||||
return an error
|
|
||||||
|
|
||||||
Major changes between OpenSSL 1.0.2c and OpenSSL 1.0.2d [9 Jul 2015]
|
|
||||||
|
|
||||||
o Alternate chains certificate forgery (CVE-2015-1793)
|
|
||||||
o Race condition handling PSK identify hint (CVE-2015-3196)
|
|
||||||
|
|
||||||
Major changes between OpenSSL 1.0.2b and OpenSSL 1.0.2c [12 Jun 2015]
|
|
||||||
|
|
||||||
o Fix HMAC ABI incompatibility
|
|
||||||
|
|
||||||
Major changes between OpenSSL 1.0.2a and OpenSSL 1.0.2b [11 Jun 2015]
|
|
||||||
|
|
||||||
o Malformed ECParameters causes infinite loop (CVE-2015-1788)
|
|
||||||
o Exploitable out-of-bounds read in X509_cmp_time (CVE-2015-1789)
|
|
||||||
o PKCS7 crash with missing EnvelopedContent (CVE-2015-1790)
|
|
||||||
o CMS verify infinite loop with unknown hash function (CVE-2015-1792)
|
|
||||||
o Race condition handling NewSessionTicket (CVE-2015-1791)
|
|
||||||
|
|
||||||
Major changes between OpenSSL 1.0.2 and OpenSSL 1.0.2a [19 Mar 2015]
|
|
||||||
|
|
||||||
o OpenSSL 1.0.2 ClientHello sigalgs DoS fix (CVE-2015-0291)
|
|
||||||
o Multiblock corrupted pointer fix (CVE-2015-0290)
|
|
||||||
o Segmentation fault in DTLSv1_listen fix (CVE-2015-0207)
|
|
||||||
o Segmentation fault in ASN1_TYPE_cmp fix (CVE-2015-0286)
|
|
||||||
o Segmentation fault for invalid PSS parameters fix (CVE-2015-0208)
|
|
||||||
o ASN.1 structure reuse memory corruption fix (CVE-2015-0287)
|
|
||||||
o PKCS7 NULL pointer dereferences fix (CVE-2015-0289)
|
|
||||||
o DoS via reachable assert in SSLv2 servers fix (CVE-2015-0293)
|
|
||||||
o Empty CKE with client auth and DHE fix (CVE-2015-1787)
|
|
||||||
o Handshake with unseeded PRNG fix (CVE-2015-0285)
|
|
||||||
o Use After Free following d2i_ECPrivatekey error fix (CVE-2015-0209)
|
|
||||||
o X509_to_X509_REQ NULL pointer deref fix (CVE-2015-0288)
|
|
||||||
o Removed the export ciphers from the DEFAULT ciphers
|
|
||||||
|
|
||||||
Major changes between OpenSSL 1.0.1l and OpenSSL 1.0.2 [22 Jan 2015]:
|
|
||||||
|
|
||||||
o Suite B support for TLS 1.2 and DTLS 1.2
|
|
||||||
o Support for DTLS 1.2
|
|
||||||
o TLS automatic EC curve selection.
|
|
||||||
o API to set TLS supported signature algorithms and curves
|
|
||||||
o SSL_CONF configuration API.
|
|
||||||
o TLS Brainpool support.
|
|
||||||
o ALPN support.
|
|
||||||
o CMS support for RSA-PSS, RSA-OAEP, ECDH and X9.42 DH.
|
|
||||||
|
|
||||||
Major changes between OpenSSL 1.0.1k and OpenSSL 1.0.1l [15 Jan 2015]
|
|
||||||
|
|
||||||
o Build fixes for the Windows and OpenVMS platforms
|
|
||||||
|
|
||||||
Major changes between OpenSSL 1.0.1j and OpenSSL 1.0.1k [8 Jan 2015]
|
|
||||||
|
|
||||||
o Fix for CVE-2014-3571
|
|
||||||
o Fix for CVE-2015-0206
|
|
||||||
o Fix for CVE-2014-3569
|
|
||||||
o Fix for CVE-2014-3572
|
|
||||||
o Fix for CVE-2015-0204
|
|
||||||
o Fix for CVE-2015-0205
|
|
||||||
o Fix for CVE-2014-8275
|
|
||||||
o Fix for CVE-2014-3570
|
|
||||||
|
|
||||||
Major changes between OpenSSL 1.0.1i and OpenSSL 1.0.1j [15 Oct 2014]
|
|
||||||
|
|
||||||
o Fix for CVE-2014-3513
|
|
||||||
o Fix for CVE-2014-3567
|
|
||||||
o Mitigation for CVE-2014-3566 (SSL protocol vulnerability)
|
|
||||||
o Fix for CVE-2014-3568
|
|
||||||
|
|
||||||
Major changes between OpenSSL 1.0.1h and OpenSSL 1.0.1i [6 Aug 2014]
|
|
||||||
|
|
||||||
o Fix for CVE-2014-3512
|
|
||||||
o Fix for CVE-2014-3511
|
|
||||||
o Fix for CVE-2014-3510
|
|
||||||
o Fix for CVE-2014-3507
|
|
||||||
o Fix for CVE-2014-3506
|
|
||||||
o Fix for CVE-2014-3505
|
|
||||||
o Fix for CVE-2014-3509
|
|
||||||
o Fix for CVE-2014-5139
|
|
||||||
o Fix for CVE-2014-3508
|
|
||||||
|
|
||||||
Major changes between OpenSSL 1.0.1g and OpenSSL 1.0.1h [5 Jun 2014]
|
|
||||||
|
|
||||||
o Fix for CVE-2014-0224
|
|
||||||
o Fix for CVE-2014-0221
|
|
||||||
o Fix for CVE-2014-0198
|
|
||||||
o Fix for CVE-2014-0195
|
|
||||||
o Fix for CVE-2014-3470
|
|
||||||
o Fix for CVE-2010-5298
|
|
||||||
|
|
||||||
Major changes between OpenSSL 1.0.1f and OpenSSL 1.0.1g [7 Apr 2014]
|
|
||||||
|
|
||||||
o Fix for CVE-2014-0160
|
|
||||||
o Add TLS padding extension workaround for broken servers.
|
|
||||||
o Fix for CVE-2014-0076
|
|
||||||
|
|
||||||
Major changes between OpenSSL 1.0.1e and OpenSSL 1.0.1f [6 Jan 2014]
|
|
||||||
|
|
||||||
o Don't include gmt_unix_time in TLS server and client random values
|
|
||||||
o Fix for TLS record tampering bug CVE-2013-4353
|
|
||||||
o Fix for TLS version checking bug CVE-2013-6449
|
|
||||||
o Fix for DTLS retransmission bug CVE-2013-6450
|
|
||||||
|
|
||||||
Major changes between OpenSSL 1.0.1d and OpenSSL 1.0.1e [11 Feb 2013]:
|
|
||||||
|
|
||||||
o Corrected fix for CVE-2013-0169
|
|
||||||
|
|
||||||
Major changes between OpenSSL 1.0.1c and OpenSSL 1.0.1d [4 Feb 2013]:
|
|
||||||
|
|
||||||
o Fix renegotiation in TLS 1.1, 1.2 by using the correct TLS version.
|
|
||||||
o Include the fips configuration module.
|
|
||||||
o Fix OCSP bad key DoS attack CVE-2013-0166
|
|
||||||
o Fix for SSL/TLS/DTLS CBC plaintext recovery attack CVE-2013-0169
|
|
||||||
o Fix for TLS AESNI record handling flaw CVE-2012-2686
|
|
||||||
|
|
||||||
Major changes between OpenSSL 1.0.1b and OpenSSL 1.0.1c [10 May 2012]:
|
|
||||||
|
|
||||||
o Fix TLS/DTLS record length checking bug CVE-2012-2333
|
|
||||||
o Don't attempt to use non-FIPS composite ciphers in FIPS mode.
|
|
||||||
|
|
||||||
Major changes between OpenSSL 1.0.1a and OpenSSL 1.0.1b [26 Apr 2012]:
|
|
||||||
|
|
||||||
o Fix compilation error on non-x86 platforms.
|
|
||||||
o Make FIPS capable OpenSSL ciphers work in non-FIPS mode.
|
|
||||||
o Fix SSL_OP_NO_TLSv1_1 clash with SSL_OP_ALL in OpenSSL 1.0.0
|
|
||||||
|
|
||||||
Major changes between OpenSSL 1.0.1 and OpenSSL 1.0.1a [19 Apr 2012]:
|
|
||||||
|
|
||||||
o Fix for ASN1 overflow bug CVE-2012-2110
|
|
||||||
o Workarounds for some servers that hang on long client hellos.
|
|
||||||
o Fix SEGV in AES code.
|
|
||||||
|
|
||||||
Major changes between OpenSSL 1.0.0h and OpenSSL 1.0.1 [14 Mar 2012]:
|
|
||||||
|
|
||||||
o TLS/DTLS heartbeat support.
|
|
||||||
o SCTP support.
|
|
||||||
o RFC 5705 TLS key material exporter.
|
|
||||||
o RFC 5764 DTLS-SRTP negotiation.
|
|
||||||
o Next Protocol Negotiation.
|
|
||||||
o PSS signatures in certificates, requests and CRLs.
|
|
||||||
o Support for password based recipient info for CMS.
|
|
||||||
o Support TLS v1.2 and TLS v1.1.
|
|
||||||
o Preliminary FIPS capability for unvalidated 2.0 FIPS module.
|
|
||||||
o SRP support.
|
|
||||||
|
|
||||||
Major changes between OpenSSL 1.0.0g and OpenSSL 1.0.0h [12 Mar 2012]:
|
|
||||||
|
|
||||||
o Fix for CMS/PKCS#7 MMA CVE-2012-0884
|
|
||||||
o Corrected fix for CVE-2011-4619
|
|
||||||
o Various DTLS fixes.
|
|
||||||
|
|
||||||
Major changes between OpenSSL 1.0.0f and OpenSSL 1.0.0g [18 Jan 2012]:
|
|
||||||
|
|
||||||
o Fix for DTLS DoS issue CVE-2012-0050
|
|
||||||
|
|
||||||
Major changes between OpenSSL 1.0.0e and OpenSSL 1.0.0f [4 Jan 2012]:
|
|
||||||
|
|
||||||
o Fix for DTLS plaintext recovery attack CVE-2011-4108
|
|
||||||
o Clear block padding bytes of SSL 3.0 records CVE-2011-4576
|
|
||||||
o Only allow one SGC handshake restart for SSL/TLS CVE-2011-4619
|
|
||||||
o Check parameters are not NULL in GOST ENGINE CVE-2012-0027
|
|
||||||
o Check for malformed RFC3779 data CVE-2011-4577
|
|
||||||
|
|
||||||
Major changes between OpenSSL 1.0.0d and OpenSSL 1.0.0e [6 Sep 2011]:
|
|
||||||
|
|
||||||
o Fix for CRL vulnerability issue CVE-2011-3207
|
|
||||||
o Fix for ECDH crashes CVE-2011-3210
|
|
||||||
o Protection against EC timing attacks.
|
|
||||||
o Support ECDH ciphersuites for certificates using SHA2 algorithms.
|
|
||||||
o Various DTLS fixes.
|
|
||||||
|
|
||||||
Major changes between OpenSSL 1.0.0c and OpenSSL 1.0.0d [8 Feb 2011]:
|
|
||||||
|
|
||||||
o Fix for security issue CVE-2011-0014
|
|
||||||
|
|
||||||
Major changes between OpenSSL 1.0.0b and OpenSSL 1.0.0c [2 Dec 2010]:
|
|
||||||
|
|
||||||
o Fix for security issue CVE-2010-4180
|
|
||||||
o Fix for CVE-2010-4252
|
|
||||||
o Fix mishandling of absent EC point format extension.
|
|
||||||
o Fix various platform compilation issues.
|
|
||||||
o Corrected fix for security issue CVE-2010-3864.
|
|
||||||
|
|
||||||
Major changes between OpenSSL 1.0.0a and OpenSSL 1.0.0b [16 Nov 2010]:
|
|
||||||
|
|
||||||
o Fix for security issue CVE-2010-3864.
|
|
||||||
o Fix for CVE-2010-2939
|
|
||||||
o Fix WIN32 build system for GOST ENGINE.
|
|
||||||
|
|
||||||
Major changes between OpenSSL 1.0.0 and OpenSSL 1.0.0a [1 Jun 2010]:
|
|
||||||
|
|
||||||
o Fix for security issue CVE-2010-1633.
|
|
||||||
o GOST MAC and CFB fixes.
|
|
||||||
|
|
||||||
Major changes between OpenSSL 0.9.8n and OpenSSL 1.0.0 [29 Mar 2010]:
|
|
||||||
|
|
||||||
o RFC3280 path validation: sufficient to process PKITS tests.
|
|
||||||
o Integrated support for PVK files and keyblobs.
|
|
||||||
o Change default private key format to PKCS#8.
|
|
||||||
o CMS support: able to process all examples in RFC4134
|
|
||||||
o Streaming ASN1 encode support for PKCS#7 and CMS.
|
|
||||||
o Multiple signer and signer add support for PKCS#7 and CMS.
|
|
||||||
o ASN1 printing support.
|
|
||||||
o Whirlpool hash algorithm added.
|
|
||||||
o RFC3161 time stamp support.
|
|
||||||
o New generalised public key API supporting ENGINE based algorithms.
|
|
||||||
o New generalised public key API utilities.
|
|
||||||
o New ENGINE supporting GOST algorithms.
|
|
||||||
o SSL/TLS GOST ciphersuite support.
|
|
||||||
o PKCS#7 and CMS GOST support.
|
|
||||||
o RFC4279 PSK ciphersuite support.
|
|
||||||
o Supported points format extension for ECC ciphersuites.
|
|
||||||
o ecdsa-with-SHA224/256/384/512 signature types.
|
|
||||||
o dsa-with-SHA224 and dsa-with-SHA256 signature types.
|
|
||||||
o Opaque PRF Input TLS extension support.
|
|
||||||
o Updated time routines to avoid OS limitations.
|
|
||||||
|
|
||||||
Major changes between OpenSSL 0.9.8m and OpenSSL 0.9.8n [24 Mar 2010]:
|
|
||||||
|
|
||||||
o CFB cipher definition fixes.
|
|
||||||
o Fix security issues CVE-2010-0740 and CVE-2010-0433.
|
|
||||||
|
|
||||||
Major changes between OpenSSL 0.9.8l and OpenSSL 0.9.8m [25 Feb 2010]:
|
|
||||||
|
|
||||||
o Cipher definition fixes.
|
|
||||||
o Workaround for slow RAND_poll() on some WIN32 versions.
|
|
||||||
o Remove MD2 from algorithm tables.
|
|
||||||
o SPKAC handling fixes.
|
|
||||||
o Support for RFC5746 TLS renegotiation extension.
|
|
||||||
o Compression memory leak fixed.
|
|
||||||
o Compression session resumption fixed.
|
|
||||||
o Ticket and SNI coexistence fixes.
|
|
||||||
o Many fixes to DTLS handling.
|
|
||||||
|
|
||||||
Major changes between OpenSSL 0.9.8k and OpenSSL 0.9.8l [5 Nov 2009]:
|
|
||||||
|
|
||||||
o Temporary work around for CVE-2009-3555: disable renegotiation.
|
|
||||||
|
|
||||||
Major changes between OpenSSL 0.9.8j and OpenSSL 0.9.8k [25 Mar 2009]:
|
|
||||||
|
|
||||||
o Fix various build issues.
|
|
||||||
o Fix security issues (CVE-2009-0590, CVE-2009-0591, CVE-2009-0789)
|
|
||||||
|
|
||||||
Major changes between OpenSSL 0.9.8i and OpenSSL 0.9.8j [7 Jan 2009]:
|
|
||||||
|
|
||||||
o Fix security issue (CVE-2008-5077)
|
|
||||||
o Merge FIPS 140-2 branch code.
|
|
||||||
|
|
||||||
Major changes between OpenSSL 0.9.8g and OpenSSL 0.9.8h [28 May 2008]:
|
|
||||||
|
|
||||||
o CryptoAPI ENGINE support.
|
|
||||||
o Various precautionary measures.
|
|
||||||
o Fix for bugs affecting certificate request creation.
|
|
||||||
o Support for local machine keyset attribute in PKCS#12 files.
|
|
||||||
|
|
||||||
Major changes between OpenSSL 0.9.8f and OpenSSL 0.9.8g [19 Oct 2007]:
|
|
||||||
|
|
||||||
o Backport of CMS functionality to 0.9.8.
|
|
||||||
o Fixes for bugs introduced with 0.9.8f.
|
|
||||||
|
|
||||||
Major changes between OpenSSL 0.9.8e and OpenSSL 0.9.8f [11 Oct 2007]:
|
|
||||||
|
|
||||||
o Add gcc 4.2 support.
|
|
||||||
o Add support for AES and SSE2 assembly language optimization
|
|
||||||
for VC++ build.
|
|
||||||
o Support for RFC4507bis and server name extensions if explicitly
|
|
||||||
selected at compile time.
|
|
||||||
o DTLS improvements.
|
|
||||||
o RFC4507bis support.
|
|
||||||
o TLS Extensions support.
|
|
||||||
|
|
||||||
Major changes between OpenSSL 0.9.8d and OpenSSL 0.9.8e [23 Feb 2007]:
|
|
||||||
|
|
||||||
o Various ciphersuite selection fixes.
|
|
||||||
o RFC3779 support.
|
|
||||||
|
|
||||||
Major changes between OpenSSL 0.9.8c and OpenSSL 0.9.8d [28 Sep 2006]:
|
|
||||||
|
|
||||||
o Introduce limits to prevent malicious key DoS (CVE-2006-2940)
|
|
||||||
o Fix security issues (CVE-2006-2937, CVE-2006-3737, CVE-2006-4343)
|
|
||||||
o Changes to ciphersuite selection algorithm
|
|
||||||
|
|
||||||
Major changes between OpenSSL 0.9.8b and OpenSSL 0.9.8c [5 Sep 2006]:
|
|
||||||
|
|
||||||
o Fix Daniel Bleichenbacher forged signature attack, CVE-2006-4339
|
|
||||||
o New cipher Camellia
|
|
||||||
|
|
||||||
Major changes between OpenSSL 0.9.8a and OpenSSL 0.9.8b [4 May 2006]:
|
|
||||||
|
|
||||||
o Cipher string fixes.
|
|
||||||
o Fixes for VC++ 2005.
|
|
||||||
o Updated ECC cipher suite support.
|
|
||||||
o New functions EVP_CIPHER_CTX_new() and EVP_CIPHER_CTX_free().
|
|
||||||
o Zlib compression usage fixes.
|
|
||||||
o Built in dynamic engine compilation support on Win32.
|
|
||||||
o Fixes auto dynamic engine loading in Win32.
|
|
||||||
|
|
||||||
Major changes between OpenSSL 0.9.8 and OpenSSL 0.9.8a [11 Oct 2005]:
|
|
||||||
|
|
||||||
o Fix potential SSL 2.0 rollback, CVE-2005-2969
|
|
||||||
o Extended Windows CE support
|
|
||||||
|
|
||||||
Major changes between OpenSSL 0.9.7g and OpenSSL 0.9.8 [5 Jul 2005]:
|
|
||||||
|
|
||||||
o Major work on the BIGNUM library for higher efficiency and to
|
|
||||||
make operations more streamlined and less contradictory. This
|
|
||||||
is the result of a major audit of the BIGNUM library.
|
|
||||||
o Addition of BIGNUM functions for fields GF(2^m) and NIST
|
|
||||||
curves, to support the Elliptic Crypto functions.
|
|
||||||
o Major work on Elliptic Crypto; ECDH and ECDSA added, including
|
|
||||||
the use through EVP, X509 and ENGINE.
|
|
||||||
o New ASN.1 mini-compiler that's usable through the OpenSSL
|
|
||||||
configuration file.
|
|
||||||
o Added support for ASN.1 indefinite length constructed encoding.
|
|
||||||
o New PKCS#12 'medium level' API to manipulate PKCS#12 files.
|
|
||||||
o Complete rework of shared library construction and linking
|
|
||||||
programs with shared or static libraries, through a separate
|
|
||||||
Makefile.shared.
|
|
||||||
o Rework of the passing of parameters from one Makefile to another.
|
|
||||||
o Changed ENGINE framework to load dynamic engine modules
|
|
||||||
automatically from specifically given directories.
|
|
||||||
o New structure and ASN.1 functions for CertificatePair.
|
|
||||||
o Changed the ZLIB compression method to be stateful.
|
|
||||||
o Changed the key-generation and primality testing "progress"
|
|
||||||
mechanism to take a structure that contains the ticker
|
|
||||||
function and an argument.
|
|
||||||
o New engine module: GMP (performs private key exponentiation).
|
|
||||||
o New engine module: VIA PadLOck ACE extension in VIA C3
|
|
||||||
Nehemiah processors.
|
|
||||||
o Added support for IPv6 addresses in certificate extensions.
|
|
||||||
See RFC 1884, section 2.2.
|
|
||||||
o Added support for certificate policy mappings, policy
|
|
||||||
constraints and name constraints.
|
|
||||||
o Added support for multi-valued AVAs in the OpenSSL
|
|
||||||
configuration file.
|
|
||||||
o Added support for multiple certificates with the same subject
|
|
||||||
in the 'openssl ca' index file.
|
|
||||||
o Make it possible to create self-signed certificates using
|
|
||||||
'openssl ca -selfsign'.
|
|
||||||
o Make it possible to generate a serial number file with
|
|
||||||
'openssl ca -create_serial'.
|
|
||||||
o New binary search functions with extended functionality.
|
|
||||||
o New BUF functions.
|
|
||||||
o New STORE structure and library to provide an interface to all
|
|
||||||
sorts of data repositories. Supports storage of public and
|
|
||||||
private keys, certificates, CRLs, numbers and arbitrary blobs.
|
|
||||||
This library is unfortunately unfinished and unused withing
|
|
||||||
OpenSSL.
|
|
||||||
o New control functions for the error stack.
|
|
||||||
o Changed the PKCS#7 library to support one-pass S/MIME
|
|
||||||
processing.
|
|
||||||
o Added the possibility to compile without old deprecated
|
|
||||||
functionality with the OPENSSL_NO_DEPRECATED macro or the
|
|
||||||
'no-deprecated' argument to the config and Configure scripts.
|
|
||||||
o Constification of all ASN.1 conversion functions, and other
|
|
||||||
affected functions.
|
|
||||||
o Improved platform support for PowerPC.
|
|
||||||
o New FIPS 180-2 algorithms (SHA-224, -256, -384 and -512).
|
|
||||||
o New X509_VERIFY_PARAM structure to support parametrisation
|
|
||||||
of X.509 path validation.
|
|
||||||
o Major overhaul of RC4 performance on Intel P4, IA-64 and
|
|
||||||
AMD64.
|
|
||||||
o Changed the Configure script to have some algorithms disabled
|
|
||||||
by default. Those can be explicitely enabled with the new
|
|
||||||
argument form 'enable-xxx'.
|
|
||||||
o Change the default digest in 'openssl' commands from MD5 to
|
|
||||||
SHA-1.
|
|
||||||
o Added support for DTLS.
|
|
||||||
o New BIGNUM blinding.
|
|
||||||
o Added support for the RSA-PSS encryption scheme
|
|
||||||
o Added support for the RSA X.931 padding.
|
|
||||||
o Added support for BSD sockets on NetWare.
|
|
||||||
o Added support for files larger than 2GB.
|
|
||||||
o Added initial support for Win64.
|
|
||||||
o Added alternate pkg-config files.
|
|
||||||
|
|
||||||
Major changes between OpenSSL 0.9.7l and OpenSSL 0.9.7m [23 Feb 2007]:
|
|
||||||
|
|
||||||
o FIPS 1.1.1 module linking.
|
|
||||||
o Various ciphersuite selection fixes.
|
|
||||||
|
|
||||||
Major changes between OpenSSL 0.9.7k and OpenSSL 0.9.7l [28 Sep 2006]:
|
|
||||||
|
|
||||||
o Introduce limits to prevent malicious key DoS (CVE-2006-2940)
|
|
||||||
o Fix security issues (CVE-2006-2937, CVE-2006-3737, CVE-2006-4343)
|
|
||||||
|
|
||||||
Major changes between OpenSSL 0.9.7j and OpenSSL 0.9.7k [5 Sep 2006]:
|
|
||||||
|
|
||||||
o Fix Daniel Bleichenbacher forged signature attack, CVE-2006-4339
|
|
||||||
|
|
||||||
Major changes between OpenSSL 0.9.7i and OpenSSL 0.9.7j [4 May 2006]:
|
|
||||||
|
|
||||||
o Visual C++ 2005 fixes.
|
|
||||||
o Update Windows build system for FIPS.
|
|
||||||
|
|
||||||
Major changes between OpenSSL 0.9.7h and OpenSSL 0.9.7i [14 Oct 2005]:
|
|
||||||
|
|
||||||
o Give EVP_MAX_MD_SIZE it's old value, except for a FIPS build.
|
|
||||||
|
|
||||||
Major changes between OpenSSL 0.9.7g and OpenSSL 0.9.7h [11 Oct 2005]:
|
|
||||||
|
|
||||||
o Fix SSL 2.0 Rollback, CVE-2005-2969
|
|
||||||
o Allow use of fixed-length exponent on DSA signing
|
|
||||||
o Default fixed-window RSA, DSA, DH private-key operations
|
|
||||||
|
|
||||||
Major changes between OpenSSL 0.9.7f and OpenSSL 0.9.7g [11 Apr 2005]:
|
|
||||||
|
|
||||||
o More compilation issues fixed.
|
|
||||||
o Adaptation to more modern Kerberos API.
|
|
||||||
o Enhanced or corrected configuration for Solaris64, Mingw and Cygwin.
|
|
||||||
o Enhanced x86_64 assembler BIGNUM module.
|
|
||||||
o More constification.
|
|
||||||
o Added processing of proxy certificates (RFC 3820).
|
|
||||||
|
|
||||||
Major changes between OpenSSL 0.9.7e and OpenSSL 0.9.7f [22 Mar 2005]:
|
|
||||||
|
|
||||||
o Several compilation issues fixed.
|
|
||||||
o Many memory allocation failure checks added.
|
|
||||||
o Improved comparison of X509 Name type.
|
|
||||||
o Mandatory basic checks on certificates.
|
|
||||||
o Performance improvements.
|
|
||||||
|
|
||||||
Major changes between OpenSSL 0.9.7d and OpenSSL 0.9.7e [25 Oct 2004]:
|
|
||||||
|
|
||||||
o Fix race condition in CRL checking code.
|
|
||||||
o Fixes to PKCS#7 (S/MIME) code.
|
|
||||||
|
|
||||||
Major changes between OpenSSL 0.9.7c and OpenSSL 0.9.7d [17 Mar 2004]:
|
|
||||||
|
|
||||||
o Security: Fix Kerberos ciphersuite SSL/TLS handshaking bug
|
|
||||||
o Security: Fix null-pointer assignment in do_change_cipher_spec()
|
|
||||||
o Allow multiple active certificates with same subject in CA index
|
|
||||||
o Multiple X509 verification fixes
|
|
||||||
o Speed up HMAC and other operations
|
|
||||||
|
|
||||||
Major changes between OpenSSL 0.9.7b and OpenSSL 0.9.7c [30 Sep 2003]:
|
|
||||||
|
|
||||||
o Security: fix various ASN1 parsing bugs.
|
|
||||||
o New -ignore_err option to OCSP utility.
|
|
||||||
o Various interop and bug fixes in S/MIME code.
|
|
||||||
o SSL/TLS protocol fix for unrequested client certificates.
|
|
||||||
|
|
||||||
Major changes between OpenSSL 0.9.7a and OpenSSL 0.9.7b [10 Apr 2003]:
|
|
||||||
|
|
||||||
o Security: counter the Klima-Pokorny-Rosa extension of
|
|
||||||
Bleichbacher's attack
|
|
||||||
o Security: make RSA blinding default.
|
|
||||||
o Configuration: Irix fixes, AIX fixes, better mingw support.
|
|
||||||
o Support for new platforms: linux-ia64-ecc.
|
|
||||||
o Build: shared library support fixes.
|
|
||||||
o ASN.1: treat domainComponent correctly.
|
|
||||||
o Documentation: fixes and additions.
|
|
||||||
|
|
||||||
Major changes between OpenSSL 0.9.7 and OpenSSL 0.9.7a [19 Feb 2003]:
|
|
||||||
|
|
||||||
o Security: Important security related bugfixes.
|
|
||||||
o Enhanced compatibility with MIT Kerberos.
|
|
||||||
o Can be built without the ENGINE framework.
|
|
||||||
o IA32 assembler enhancements.
|
|
||||||
o Support for new platforms: FreeBSD/IA64 and FreeBSD/Sparc64.
|
|
||||||
o Configuration: the no-err option now works properly.
|
|
||||||
o SSL/TLS: now handles manual certificate chain building.
|
|
||||||
o SSL/TLS: certain session ID malfunctions corrected.
|
|
||||||
|
|
||||||
Major changes between OpenSSL 0.9.6 and OpenSSL 0.9.7 [30 Dec 2002]:
|
|
||||||
|
|
||||||
o New library section OCSP.
|
o New library section OCSP.
|
||||||
o Complete rewrite of ASN1 code.
|
o Complete rewrite of ASN1 code.
|
||||||
@@ -546,21 +17,13 @@
|
|||||||
a separate distribution.
|
a separate distribution.
|
||||||
o New elliptic curve library section.
|
o New elliptic curve library section.
|
||||||
o New AES (Rijndael) library section.
|
o New AES (Rijndael) library section.
|
||||||
o Support for new platforms: Windows CE, Tandem OSS, A/UX, AIX 64-bit,
|
|
||||||
Linux x86_64, Linux 64-bit on Sparc v9
|
|
||||||
o Extended support for some platforms: VxWorks
|
|
||||||
o Enhanced support for shared libraries.
|
|
||||||
o Now only builds PIC code when shared library support is requested.
|
|
||||||
o Support for pkg-config.
|
|
||||||
o Lots of new manuals.
|
|
||||||
o Makes symbolic links to or copies of manuals to cover all described
|
|
||||||
functions.
|
|
||||||
o Change DES API to clean up the namespace (some applications link also
|
o Change DES API to clean up the namespace (some applications link also
|
||||||
against libdes providing similar functions having the same name).
|
against libdes providing similar functions having the same name).
|
||||||
Provide macros for backward compatibility (will be removed in the
|
Provide macros for backward compatibility (will be removed in the
|
||||||
future).
|
future).
|
||||||
o Unify handling of cryptographic algorithms (software and engine)
|
o Unifiy handling of cryptographic algorithms (software and
|
||||||
to be available via EVP routines for asymmetric and symmetric ciphers.
|
engine) to be available via EVP routines for asymmetric and
|
||||||
|
symmetric ciphers.
|
||||||
o NCONF: new configuration handling routines.
|
o NCONF: new configuration handling routines.
|
||||||
o Change API to use more 'const' modifiers to improve error checking
|
o Change API to use more 'const' modifiers to improve error checking
|
||||||
and help optimizers.
|
and help optimizers.
|
||||||
@@ -568,67 +31,21 @@
|
|||||||
o Reworked parts of the BIGNUM code.
|
o Reworked parts of the BIGNUM code.
|
||||||
o Support for new engines: Broadcom ubsec, Accelerated Encryption
|
o Support for new engines: Broadcom ubsec, Accelerated Encryption
|
||||||
Processing, IBM 4758.
|
Processing, IBM 4758.
|
||||||
o A few new engines added in the demos area.
|
|
||||||
o Extended and corrected OID (object identifier) table.
|
|
||||||
o PRNG: query at more locations for a random device, automatic query for
|
o PRNG: query at more locations for a random device, automatic query for
|
||||||
EGD style random sources at several locations.
|
EGD style random sources at several locations.
|
||||||
o SSL/TLS: allow optional cipher choice according to server's preference.
|
o SSL/TLS: allow optional cipher choice according to server's preference.
|
||||||
o SSL/TLS: allow server to explicitly set new session ids.
|
o SSL/TLS: allow server to explicitly set new session ids.
|
||||||
o SSL/TLS: support Kerberos cipher suites (RFC2712).
|
o SSL/TLS: support Kerberos cipher suites (RFC2712).
|
||||||
Only supports MIT Kerberos for now.
|
|
||||||
o SSL/TLS: allow more precise control of renegotiations and sessions.
|
o SSL/TLS: allow more precise control of renegotiations and sessions.
|
||||||
o SSL/TLS: add callback to retrieve SSL/TLS messages.
|
o SSL/TLS: add callback to retrieve SSL/TLS messages.
|
||||||
o SSL/TLS: support AES cipher suites (RFC3268).
|
o SSL/TLS: add draft AES ciphersuites (disabled unless explicitly requested).
|
||||||
|
|
||||||
Major changes between OpenSSL 0.9.6j and OpenSSL 0.9.6k [30 Sep 2003]:
|
Major changes between OpenSSL 0.9.6c and OpenSSL 0.9.6d:
|
||||||
|
|
||||||
o Security: fix various ASN1 parsing bugs.
|
|
||||||
o SSL/TLS protocol fix for unrequested client certificates.
|
|
||||||
|
|
||||||
Major changes between OpenSSL 0.9.6i and OpenSSL 0.9.6j [10 Apr 2003]:
|
|
||||||
|
|
||||||
o Security: counter the Klima-Pokorny-Rosa extension of
|
|
||||||
Bleichbacher's attack
|
|
||||||
o Security: make RSA blinding default.
|
|
||||||
o Build: shared library support fixes.
|
|
||||||
|
|
||||||
Major changes between OpenSSL 0.9.6h and OpenSSL 0.9.6i [19 Feb 2003]:
|
|
||||||
|
|
||||||
o Important security related bugfixes.
|
|
||||||
|
|
||||||
Major changes between OpenSSL 0.9.6g and OpenSSL 0.9.6h [5 Dec 2002]:
|
|
||||||
|
|
||||||
o New configuration targets for Tandem OSS and A/UX.
|
|
||||||
o New OIDs for Microsoft attributes.
|
|
||||||
o Better handling of SSL session caching.
|
|
||||||
o Better comparison of distinguished names.
|
|
||||||
o Better handling of shared libraries in a mixed GNU/non-GNU environment.
|
|
||||||
o Support assembler code with Borland C.
|
|
||||||
o Fixes for length problems.
|
|
||||||
o Fixes for uninitialised variables.
|
|
||||||
o Fixes for memory leaks, some unusual crashes and some race conditions.
|
|
||||||
o Fixes for smaller building problems.
|
|
||||||
o Updates of manuals, FAQ and other instructive documents.
|
|
||||||
|
|
||||||
Major changes between OpenSSL 0.9.6f and OpenSSL 0.9.6g [9 Aug 2002]:
|
|
||||||
|
|
||||||
o Important building fixes on Unix.
|
|
||||||
|
|
||||||
Major changes between OpenSSL 0.9.6e and OpenSSL 0.9.6f [8 Aug 2002]:
|
|
||||||
|
|
||||||
o Various important bugfixes.
|
|
||||||
|
|
||||||
Major changes between OpenSSL 0.9.6d and OpenSSL 0.9.6e [30 Jul 2002]:
|
|
||||||
|
|
||||||
o Important security related bugfixes.
|
|
||||||
o Various SSL/TLS library bugfixes.
|
|
||||||
|
|
||||||
Major changes between OpenSSL 0.9.6c and OpenSSL 0.9.6d [9 May 2002]:
|
|
||||||
|
|
||||||
o Various SSL/TLS library bugfixes.
|
o Various SSL/TLS library bugfixes.
|
||||||
o Fix DH parameter generation for 'non-standard' generators.
|
o Fix DH parameter generation for 'non-standard' generators.
|
||||||
|
|
||||||
Major changes between OpenSSL 0.9.6b and OpenSSL 0.9.6c [21 Dec 2001]:
|
Major changes between OpenSSL 0.9.6b and OpenSSL 0.9.6c:
|
||||||
|
|
||||||
o Various SSL/TLS library bugfixes.
|
o Various SSL/TLS library bugfixes.
|
||||||
o BIGNUM library fixes.
|
o BIGNUM library fixes.
|
||||||
@@ -641,7 +58,7 @@
|
|||||||
Broadcom and Cryptographic Appliance's keyserver
|
Broadcom and Cryptographic Appliance's keyserver
|
||||||
[in 0.9.6c-engine release].
|
[in 0.9.6c-engine release].
|
||||||
|
|
||||||
Major changes between OpenSSL 0.9.6a and OpenSSL 0.9.6b [9 Jul 2001]:
|
Major changes between OpenSSL 0.9.6a and OpenSSL 0.9.6b:
|
||||||
|
|
||||||
o Security fix: PRNG improvements.
|
o Security fix: PRNG improvements.
|
||||||
o Security fix: RSA OAEP check.
|
o Security fix: RSA OAEP check.
|
||||||
@@ -658,7 +75,7 @@
|
|||||||
o Increase default size for BIO buffering filter.
|
o Increase default size for BIO buffering filter.
|
||||||
o Compatibility fixes in some scripts.
|
o Compatibility fixes in some scripts.
|
||||||
|
|
||||||
Major changes between OpenSSL 0.9.6 and OpenSSL 0.9.6a [5 Apr 2001]:
|
Major changes between OpenSSL 0.9.6 and OpenSSL 0.9.6a:
|
||||||
|
|
||||||
o Security fix: change behavior of OpenSSL to avoid using
|
o Security fix: change behavior of OpenSSL to avoid using
|
||||||
environment variables when running as root.
|
environment variables when running as root.
|
||||||
@@ -674,7 +91,7 @@
|
|||||||
o Bug fixes for Win32, HP/UX and Irix.
|
o Bug fixes for Win32, HP/UX and Irix.
|
||||||
o Bug fixes in BIGNUM, SSL, PKCS#7, PKCS#12, X.509, CONF and
|
o Bug fixes in BIGNUM, SSL, PKCS#7, PKCS#12, X.509, CONF and
|
||||||
memory checking routines.
|
memory checking routines.
|
||||||
o Bug fixes for RSA operations in threaded environments.
|
o Bug fixes for RSA operations in threaded enviroments.
|
||||||
o Bug fixes in misc. openssl applications.
|
o Bug fixes in misc. openssl applications.
|
||||||
o Remove a few potential memory leaks.
|
o Remove a few potential memory leaks.
|
||||||
o Add tighter checks of BIGNUM routines.
|
o Add tighter checks of BIGNUM routines.
|
||||||
@@ -683,7 +100,7 @@
|
|||||||
o New function BN_rand_range().
|
o New function BN_rand_range().
|
||||||
o Add "-rand" option to openssl s_client and s_server.
|
o Add "-rand" option to openssl s_client and s_server.
|
||||||
|
|
||||||
Major changes between OpenSSL 0.9.5a and OpenSSL 0.9.6 [10 Oct 2000]:
|
Major changes between OpenSSL 0.9.5a and OpenSSL 0.9.6:
|
||||||
|
|
||||||
o Some documentation for BIO and SSL libraries.
|
o Some documentation for BIO and SSL libraries.
|
||||||
o Enhanced chain verification using key identifiers.
|
o Enhanced chain verification using key identifiers.
|
||||||
@@ -698,7 +115,7 @@
|
|||||||
[1] The support for external crypto devices is currently a separate
|
[1] The support for external crypto devices is currently a separate
|
||||||
distribution. See the file README.ENGINE.
|
distribution. See the file README.ENGINE.
|
||||||
|
|
||||||
Major changes between OpenSSL 0.9.5 and OpenSSL 0.9.5a [1 Apr 2000]:
|
Major changes between OpenSSL 0.9.5 and OpenSSL 0.9.5a:
|
||||||
|
|
||||||
o Bug fixes for Win32, SuSE Linux, NeXTSTEP and FreeBSD 2.2.8
|
o Bug fixes for Win32, SuSE Linux, NeXTSTEP and FreeBSD 2.2.8
|
||||||
o Shared library support for HPUX and Solaris-gcc
|
o Shared library support for HPUX and Solaris-gcc
|
||||||
@@ -707,7 +124,7 @@
|
|||||||
o New 'rand' application
|
o New 'rand' application
|
||||||
o New way to check for existence of algorithms from scripts
|
o New way to check for existence of algorithms from scripts
|
||||||
|
|
||||||
Major changes between OpenSSL 0.9.4 and OpenSSL 0.9.5 [25 May 2000]:
|
Major changes between OpenSSL 0.9.4 and OpenSSL 0.9.5:
|
||||||
|
|
||||||
o S/MIME support in new 'smime' command
|
o S/MIME support in new 'smime' command
|
||||||
o Documentation for the OpenSSL command line application
|
o Documentation for the OpenSSL command line application
|
||||||
@@ -743,7 +160,7 @@
|
|||||||
o Enhanced support for Alpha Linux
|
o Enhanced support for Alpha Linux
|
||||||
o Experimental MacOS support
|
o Experimental MacOS support
|
||||||
|
|
||||||
Major changes between OpenSSL 0.9.3 and OpenSSL 0.9.4 [9 Aug 1999]:
|
Major changes between OpenSSL 0.9.3 and OpenSSL 0.9.4:
|
||||||
|
|
||||||
o Transparent support for PKCS#8 format private keys: these are used
|
o Transparent support for PKCS#8 format private keys: these are used
|
||||||
by several software packages and are more secure than the standard
|
by several software packages and are more secure than the standard
|
||||||
@@ -754,7 +171,7 @@
|
|||||||
o New pipe-like BIO that allows using the SSL library when actual I/O
|
o New pipe-like BIO that allows using the SSL library when actual I/O
|
||||||
must be handled by the application (BIO pair)
|
must be handled by the application (BIO pair)
|
||||||
|
|
||||||
Major changes between OpenSSL 0.9.2b and OpenSSL 0.9.3 [24 May 1999]:
|
Major changes between OpenSSL 0.9.2b and OpenSSL 0.9.3:
|
||||||
o Lots of enhancements and cleanups to the Configuration mechanism
|
o Lots of enhancements and cleanups to the Configuration mechanism
|
||||||
o RSA OEAP related fixes
|
o RSA OEAP related fixes
|
||||||
o Added `openssl ca -revoke' option for revoking a certificate
|
o Added `openssl ca -revoke' option for revoking a certificate
|
||||||
@@ -768,7 +185,7 @@
|
|||||||
o Sparc assembler bignum implementation, optimized hash functions
|
o Sparc assembler bignum implementation, optimized hash functions
|
||||||
o Option to disable selected ciphers
|
o Option to disable selected ciphers
|
||||||
|
|
||||||
Major changes between OpenSSL 0.9.1c and OpenSSL 0.9.2b [22 Mar 1999]:
|
Major changes between OpenSSL 0.9.1c and OpenSSL 0.9.2b:
|
||||||
o Fixed a security hole related to session resumption
|
o Fixed a security hole related to session resumption
|
||||||
o Fixed RSA encryption routines for the p < q case
|
o Fixed RSA encryption routines for the p < q case
|
||||||
o "ALL" in cipher lists now means "everything except NULL ciphers"
|
o "ALL" in cipher lists now means "everything except NULL ciphers"
|
||||||
@@ -790,7 +207,7 @@
|
|||||||
o Lots of memory leak fixes.
|
o Lots of memory leak fixes.
|
||||||
o Lots of bug fixes.
|
o Lots of bug fixes.
|
||||||
|
|
||||||
Major changes between SSLeay 0.9.0b and OpenSSL 0.9.1c [23 Dec 1998]:
|
Major changes between SSLeay 0.9.0b and OpenSSL 0.9.1c:
|
||||||
o Integration of the popular NO_RSA/NO_DSA patches
|
o Integration of the popular NO_RSA/NO_DSA patches
|
||||||
o Initial support for compression inside the SSL record layer
|
o Initial support for compression inside the SSL record layer
|
||||||
o Added BIO proxy and filtering functionality
|
o Added BIO proxy and filtering functionality
|
||||||
|
|||||||
63
NOTES.VMS
63
NOTES.VMS
@@ -1,63 +0,0 @@
|
|||||||
|
|
||||||
NOTES FOR THE OPENVMS PLATFORM
|
|
||||||
==============================
|
|
||||||
|
|
||||||
Requirement details
|
|
||||||
-------------------
|
|
||||||
|
|
||||||
In addition to the requirements and instructions listed in INSTALL,
|
|
||||||
this are required as well:
|
|
||||||
|
|
||||||
* At least ODS-5 disk organization for source and build.
|
|
||||||
Installation can be done on any existing disk organization.
|
|
||||||
|
|
||||||
|
|
||||||
About ANSI C compiler
|
|
||||||
---------------------
|
|
||||||
|
|
||||||
An ANSI C compiled is needed among other things. This means that
|
|
||||||
VAX C is not and will not be supported.
|
|
||||||
|
|
||||||
We have only tested with DEC C (a.k.a HP VMS C / VSI C) and require
|
|
||||||
version 7.1 or later. Compiling with a different ANSI C compiler may
|
|
||||||
require some work.
|
|
||||||
|
|
||||||
Please avoid using C RTL feature logical names DECC$* when building
|
|
||||||
and testing OpenSSL. Most of all, they can be disruptive when
|
|
||||||
running the tests, as they affect the Perl interpreter.
|
|
||||||
|
|
||||||
|
|
||||||
About MMS and DCL
|
|
||||||
-----------------
|
|
||||||
|
|
||||||
MMS has certain limitations when it comes to line length, and DCL has
|
|
||||||
certain limitations when it comes to total command length. We do
|
|
||||||
what we can to mitigate, but there is the possibility that it's not
|
|
||||||
enough. Should you run into issues, a very simple solution is to set
|
|
||||||
yourself up a few logical names for the directory trees you're going
|
|
||||||
to use.
|
|
||||||
|
|
||||||
|
|
||||||
Checking the distribution
|
|
||||||
-------------------------
|
|
||||||
|
|
||||||
There have been reports of places where the distribution didn't quite
|
|
||||||
get through, for example if you've copied the tree from a NFS-mounted
|
|
||||||
Unix mount point.
|
|
||||||
|
|
||||||
The easiest way to check if everything got through as it should is to
|
|
||||||
check for one of the following files:
|
|
||||||
|
|
||||||
[.crypto]opensslconf^.h.in
|
|
||||||
|
|
||||||
The best way to get a correct distribution is to download the gzipped
|
|
||||||
tar file from ftp://ftp.openssl.org/source/, use GZIP -d to uncompress
|
|
||||||
it and VMSTAR to unpack the resulting tar file.
|
|
||||||
|
|
||||||
Gzip and VMSTAR are available here:
|
|
||||||
|
|
||||||
http://antinode.info/dec/index.html#Software
|
|
||||||
|
|
||||||
Should you need it, you can find UnZip for VMS here:
|
|
||||||
|
|
||||||
http://www.info-zip.org/UnZip.html
|
|
||||||
131
NOTES.WIN
131
NOTES.WIN
@@ -1,131 +0,0 @@
|
|||||||
|
|
||||||
NOTES FOR THE WINDOWS PLATFORMS
|
|
||||||
===============================
|
|
||||||
|
|
||||||
[Notes for Windows CE can be found in INSTALL.WCE]
|
|
||||||
|
|
||||||
Requirement details for native (Visual C++) builds
|
|
||||||
--------------------------------------------------
|
|
||||||
|
|
||||||
- You need Perl. We recommend ActiveState Perl, available from
|
|
||||||
http://www.activestate.com/ActivePerl.
|
|
||||||
You also need the perl module Text::Template, available on CPAN.
|
|
||||||
Please read README.PERL for more information.
|
|
||||||
|
|
||||||
- You need a C compiler. OpenSSL has been tested to build with these:
|
|
||||||
|
|
||||||
* Visual C++
|
|
||||||
|
|
||||||
- Netwide Assembler, a.k.a. NASM, available from http://www.nasm.us,
|
|
||||||
is required if you intend to utilize assembler modules. Note that NASM
|
|
||||||
is the only supported assembler. The Microsoft provided assembler is NOT
|
|
||||||
supported.
|
|
||||||
|
|
||||||
|
|
||||||
Visual C++ (native Windows)
|
|
||||||
---------------------------
|
|
||||||
|
|
||||||
Installation directories
|
|
||||||
|
|
||||||
The default installation directories are derived from environment
|
|
||||||
variables.
|
|
||||||
|
|
||||||
For VC-WIN32, the following defaults are use:
|
|
||||||
|
|
||||||
PREFIX: %ProgramFiles(86)%\OpenSSL
|
|
||||||
OPENSSLDIR: %CommonProgramFiles(86)%\SSL
|
|
||||||
|
|
||||||
For VC-WIN32, the following defaults are use:
|
|
||||||
|
|
||||||
PREFIX: %ProgramW6432%\OpenSSL
|
|
||||||
OPENSSLDIR: %CommonProgramW6432%\SSL
|
|
||||||
|
|
||||||
Should those environment variables not exist (on a pure Win32
|
|
||||||
installation for examples), these fallbacks are used:
|
|
||||||
|
|
||||||
PREFIX: %ProgramFiles%\OpenSSL
|
|
||||||
OPENSSLDIR: %CommonProgramFiles%\SSL
|
|
||||||
|
|
||||||
|
|
||||||
GNU C (Cygwin)
|
|
||||||
--------------
|
|
||||||
|
|
||||||
Cygwin implements a Posix/Unix runtime system (cygwin1.dll) on top of the
|
|
||||||
Windows subsystem and provides a bash shell and GNU tools environment.
|
|
||||||
Consequently, a make of OpenSSL with Cygwin is virtually identical to the
|
|
||||||
Unix procedure.
|
|
||||||
|
|
||||||
To build OpenSSL using Cygwin, you need to:
|
|
||||||
|
|
||||||
* Install Cygwin (see http://cygwin.com/)
|
|
||||||
|
|
||||||
* Install Cygwin Perl and ensure it is in the path. Recall that
|
|
||||||
as least 5.10.0 is required.
|
|
||||||
|
|
||||||
* Run the Cygwin bash shell
|
|
||||||
|
|
||||||
Apart from that, follow the Unix instructions in INSTALL.
|
|
||||||
|
|
||||||
NOTE: "make test" and normal file operations may fail in directories
|
|
||||||
mounted as text (i.e. mount -t c:\somewhere /home) due to Cygwin
|
|
||||||
stripping of carriage returns. To avoid this ensure that a binary
|
|
||||||
mount is used, e.g. mount -b c:\somewhere /home.
|
|
||||||
|
|
||||||
It is also possible to create "conventional" Windows binaries that use
|
|
||||||
the Microsoft C runtime system (msvcrt.dll or crtdll.dll) using MinGW
|
|
||||||
development add-on for Cygwin. MinGW is supported even as a standalone
|
|
||||||
setup as described in the following section. In the context you should
|
|
||||||
recognize that binaries targeting Cygwin itself are not interchangeable
|
|
||||||
with "conventional" Windows binaries you generate with/for MinGW.
|
|
||||||
|
|
||||||
|
|
||||||
GNU C (MinGW/MSYS)
|
|
||||||
------------------
|
|
||||||
|
|
||||||
* Compiler and shell environment installation:
|
|
||||||
|
|
||||||
MinGW and MSYS are available from http://www.mingw.org/, both are
|
|
||||||
required. Run the installers and do whatever magic they say it takes
|
|
||||||
to start MSYS bash shell with GNU tools and matching Perl on its PATH.
|
|
||||||
"Matching Perl" refers to chosen "shell environment", i.e. if built
|
|
||||||
under MSYS, then Perl compiled for MSYS is highly recommended.
|
|
||||||
|
|
||||||
Alternativelly, one can use MSYS2 from http://msys2.github.io/,
|
|
||||||
which includes MingW (32-bit and 64-bit).
|
|
||||||
|
|
||||||
* It is also possible to cross-compile it on Linux by configuring
|
|
||||||
with './Configure --cross-compile-prefix=i386-mingw32- mingw ...'.
|
|
||||||
Other possible cross compile prefixes include x86_64-w64-mingw32-
|
|
||||||
and i686-w64-mingw32-.
|
|
||||||
|
|
||||||
|
|
||||||
Linking your application
|
|
||||||
------------------------
|
|
||||||
|
|
||||||
This section applies to non-Cygwin builds.
|
|
||||||
|
|
||||||
If you link with static OpenSSL libraries then you're expected to
|
|
||||||
additionally link your application with WS2_32.LIB, ADVAPI32.LIB,
|
|
||||||
GDI32.LIB and USER32.LIB. Those developing non-interactive service
|
|
||||||
applications might feel concerned about linking with the latter two,
|
|
||||||
as they are justly associated with interactive desktop, which is not
|
|
||||||
available to service processes. The toolkit is designed to detect in
|
|
||||||
which context it's currently executed, GUI, console app or service,
|
|
||||||
and act accordingly, namely whether or not to actually make GUI calls.
|
|
||||||
Additionally those who wish to /DELAYLOAD:GDI32.DLL and /DELAYLOAD:USER32.DLL
|
|
||||||
and actually keep them off service process should consider
|
|
||||||
implementing and exporting from .exe image in question own
|
|
||||||
_OPENSSL_isservice not relying on USER32.DLL.
|
|
||||||
E.g., on Windows Vista and later you could:
|
|
||||||
|
|
||||||
__declspec(dllexport) __cdecl BOOL _OPENSSL_isservice(void)
|
|
||||||
{ DWORD sess;
|
|
||||||
if (ProcessIdToSessionId(GetCurrentProcessId(),&sess))
|
|
||||||
return sess==0;
|
|
||||||
return FALSE;
|
|
||||||
}
|
|
||||||
|
|
||||||
If you link with OpenSSL .DLLs, then you're expected to include into
|
|
||||||
your application code small "shim" snippet, which provides glue between
|
|
||||||
OpenSSL BIO layer and your compiler run-time. See the OPENSSL_Applink
|
|
||||||
manual page for further details.
|
|
||||||
168
README
168
README
@@ -1,7 +1,7 @@
|
|||||||
|
|
||||||
OpenSSL 1.1.0-pre5 (beta) 19 Apr 2016
|
OpenSSL 0.9.8-dev XX xxx XXXX
|
||||||
|
|
||||||
Copyright (c) 1998-2016 The OpenSSL Project
|
Copyright (c) 1998-2002 The OpenSSL Project
|
||||||
Copyright (c) 1995-1998 Eric A. Young, Tim J. Hudson
|
Copyright (c) 1995-1998 Eric A. Young, Tim J. Hudson
|
||||||
All rights reserved.
|
All rights reserved.
|
||||||
|
|
||||||
@@ -10,54 +10,121 @@
|
|||||||
|
|
||||||
The OpenSSL Project is a collaborative effort to develop a robust,
|
The OpenSSL Project is a collaborative effort to develop a robust,
|
||||||
commercial-grade, fully featured, and Open Source toolkit implementing the
|
commercial-grade, fully featured, and Open Source toolkit implementing the
|
||||||
Secure Sockets Layer (SSLv3) and Transport Layer Security (TLS) protocols as
|
Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1)
|
||||||
well as a full-strength general purpose cryptographic library. The project is
|
protocols as well as a full-strength general purpose cryptography library.
|
||||||
managed by a worldwide community of volunteers that use the Internet to
|
The project is managed by a worldwide community of volunteers that use the
|
||||||
communicate, plan, and develop the OpenSSL toolkit and its related
|
Internet to communicate, plan, and develop the OpenSSL toolkit and its
|
||||||
documentation.
|
related documentation.
|
||||||
|
|
||||||
OpenSSL is descended from the SSLeay library developed by Eric A. Young
|
OpenSSL is based on the excellent SSLeay library developed from Eric A. Young
|
||||||
and Tim J. Hudson. The OpenSSL toolkit is licensed under a dual-license (the
|
and Tim J. Hudson. The OpenSSL toolkit is licensed under a dual-license (the
|
||||||
OpenSSL license plus the SSLeay license), which means that you are free to
|
OpenSSL license plus the SSLeay license) situation, which basically means
|
||||||
get and use it for commercial and non-commercial purposes as long as you
|
that you are free to get and use it for commercial and non-commercial
|
||||||
fulfill the conditions of both licenses.
|
purposes as long as you fulfill the conditions of both licenses.
|
||||||
|
|
||||||
OVERVIEW
|
OVERVIEW
|
||||||
--------
|
--------
|
||||||
|
|
||||||
The OpenSSL toolkit includes:
|
The OpenSSL toolkit includes:
|
||||||
|
|
||||||
libssl (with platform specific naming):
|
libssl.a:
|
||||||
Provides the client and server-side implementations for SSLv3 and TLS.
|
Implementation of SSLv2, SSLv3, TLSv1 and the required code to support
|
||||||
|
both SSLv2, SSLv3 and TLSv1 in the one server and client.
|
||||||
|
|
||||||
libcrypto (with platform specific naming):
|
libcrypto.a:
|
||||||
Provides general cryptographic and X.509 support needed by SSL/TLS but
|
General encryption and X.509 v1/v3 stuff needed by SSL/TLS but not
|
||||||
not logically part of it.
|
actually logically part of it. It includes routines for the following:
|
||||||
|
|
||||||
|
Ciphers
|
||||||
|
libdes - EAY's libdes DES encryption package which has been floating
|
||||||
|
around the net for a few years. It includes 15
|
||||||
|
'modes/variations' of DES (1, 2 and 3 key versions of ecb,
|
||||||
|
cbc, cfb and ofb; pcbc and a more general form of cfb and
|
||||||
|
ofb) including desx in cbc mode, a fast crypt(3), and
|
||||||
|
routines to read passwords from the keyboard.
|
||||||
|
RC4 encryption,
|
||||||
|
RC2 encryption - 4 different modes, ecb, cbc, cfb and ofb.
|
||||||
|
Blowfish encryption - 4 different modes, ecb, cbc, cfb and ofb.
|
||||||
|
IDEA encryption - 4 different modes, ecb, cbc, cfb and ofb.
|
||||||
|
|
||||||
|
Digests
|
||||||
|
MD5 and MD2 message digest algorithms, fast implementations,
|
||||||
|
SHA (SHA-0) and SHA-1 message digest algorithms,
|
||||||
|
MDC2 message digest. A DES based hash that is popular on smart cards.
|
||||||
|
|
||||||
|
Public Key
|
||||||
|
RSA encryption/decryption/generation.
|
||||||
|
There is no limit on the number of bits.
|
||||||
|
DSA encryption/decryption/generation.
|
||||||
|
There is no limit on the number of bits.
|
||||||
|
Diffie-Hellman key-exchange/key generation.
|
||||||
|
There is no limit on the number of bits.
|
||||||
|
|
||||||
|
X.509v3 certificates
|
||||||
|
X509 encoding/decoding into/from binary ASN1 and a PEM
|
||||||
|
based ASCII-binary encoding which supports encryption with a
|
||||||
|
private key. Program to generate RSA and DSA certificate
|
||||||
|
requests and to generate RSA and DSA certificates.
|
||||||
|
|
||||||
|
Systems
|
||||||
|
The normal digital envelope routines and base64 encoding. Higher
|
||||||
|
level access to ciphers and digests by name. New ciphers can be
|
||||||
|
loaded at run time. The BIO io system which is a simple non-blocking
|
||||||
|
IO abstraction. Current methods supported are file descriptors,
|
||||||
|
sockets, socket accept, socket connect, memory buffer, buffering, SSL
|
||||||
|
client/server, file pointer, encryption, digest, non-blocking testing
|
||||||
|
and null.
|
||||||
|
|
||||||
|
Data structures
|
||||||
|
A dynamically growing hashing system
|
||||||
|
A simple stack.
|
||||||
|
A Configuration loader that uses a format similar to MS .ini files.
|
||||||
|
|
||||||
openssl:
|
openssl:
|
||||||
A command line tool that can be used for:
|
A command line tool that can be used for:
|
||||||
Creation of key parameters
|
Creation of RSA, DH and DSA key parameters
|
||||||
Creation of X.509 certificates, CSRs and CRLs
|
Creation of X.509 certificates, CSRs and CRLs
|
||||||
Calculation of message digests
|
Calculation of Message Digests
|
||||||
Encryption and decryption
|
Encryption and Decryption with Ciphers
|
||||||
SSL/TLS client and server tests
|
SSL/TLS Client and Server Tests
|
||||||
Handling of S/MIME signed or encrypted mail
|
Handling of S/MIME signed or encrypted mail
|
||||||
And more...
|
|
||||||
|
|
||||||
|
PATENTS
|
||||||
|
-------
|
||||||
|
|
||||||
|
Various companies hold various patents for various algorithms in various
|
||||||
|
locations around the world. _YOU_ are responsible for ensuring that your use
|
||||||
|
of any algorithms is legal by checking if there are any patents in your
|
||||||
|
country. The file contains some of the patents that we know about or are
|
||||||
|
rumored to exist. This is not a definitive list.
|
||||||
|
|
||||||
|
RSA Security holds software patents on the RC5 algorithm. If you
|
||||||
|
intend to use this cipher, you must contact RSA Security for
|
||||||
|
licensing conditions. Their web page is http://www.rsasecurity.com/.
|
||||||
|
|
||||||
|
RC4 is a trademark of RSA Security, so use of this label should perhaps
|
||||||
|
only be used with RSA Security's permission.
|
||||||
|
|
||||||
|
The IDEA algorithm is patented by Ascom in Austria, France, Germany, Italy,
|
||||||
|
Japan, the Netherlands, Spain, Sweden, Switzerland, UK and the USA. They
|
||||||
|
should be contacted if that algorithm is to be used; their web page is
|
||||||
|
http://www.ascom.ch/.
|
||||||
|
|
||||||
INSTALLATION
|
INSTALLATION
|
||||||
------------
|
------------
|
||||||
|
|
||||||
See the appropriate file:
|
To install this package under a Unix derivative, read the INSTALL file. For
|
||||||
INSTALL Linux, Unix, Windows, OpenVMS
|
a Win32 platform, read the INSTALL.W32 file. For OpenVMS systems, read
|
||||||
INSTALL.DJGPP DOS platform with DJGPP
|
INSTALL.VMS.
|
||||||
INSTALL.WCE Windows CE
|
|
||||||
|
Read the documentation in the doc/ directory. It is quite rough, but it
|
||||||
|
lists the functions; you will probably have to look at the code to work out
|
||||||
|
how to use them. Look at the example programs.
|
||||||
|
|
||||||
SUPPORT
|
SUPPORT
|
||||||
-------
|
-------
|
||||||
|
|
||||||
See the OpenSSL website www.openssl.org for details on how to obtain
|
|
||||||
commercial technical support.
|
|
||||||
|
|
||||||
If you have any problems with OpenSSL then please take the following steps
|
If you have any problems with OpenSSL then please take the following steps
|
||||||
first:
|
first:
|
||||||
|
|
||||||
@@ -79,36 +146,31 @@
|
|||||||
- Problem Description (steps that will reproduce the problem, if known)
|
- Problem Description (steps that will reproduce the problem, if known)
|
||||||
- Stack Traceback (if the application dumps core)
|
- Stack Traceback (if the application dumps core)
|
||||||
|
|
||||||
Email the report to:
|
Report the bug to the OpenSSL project at:
|
||||||
|
|
||||||
rt@openssl.org
|
openssl-bugs@openssl.org
|
||||||
|
|
||||||
In order to avoid spam, this is a moderated mailing list, and it might
|
Note that mail to openssl-bugs@openssl.org is forwarded to a public
|
||||||
take a day for the ticket to show up. (We also scan posts to make sure
|
mailing list. Confidential mail may be sent to openssl-security@openssl.org
|
||||||
that security disclosures aren't publically posted by mistake.) Mail
|
(PGP key available from the key servers).
|
||||||
to this address is recorded in the public RT (request tracker) database
|
|
||||||
(see https://www.openssl.org/community/index.html#bugs for details) and
|
|
||||||
also forwarded the public openssl-dev mailing list. Confidential mail
|
|
||||||
may be sent to openssl-security@openssl.org (PGP key available from the
|
|
||||||
key servers).
|
|
||||||
|
|
||||||
Please do NOT use this for general assistance or support queries.
|
|
||||||
Just because something doesn't work the way you expect does not mean it
|
|
||||||
is necessarily a bug in OpenSSL.
|
|
||||||
|
|
||||||
You can also make GitHub pull requests. If you do this, please also send
|
|
||||||
mail to rt@openssl.org with a link to the PR so that we can more easily
|
|
||||||
keep track of it.
|
|
||||||
|
|
||||||
HOW TO CONTRIBUTE TO OpenSSL
|
HOW TO CONTRIBUTE TO OpenSSL
|
||||||
----------------------------
|
----------------------------
|
||||||
|
|
||||||
See CONTRIBUTING
|
Development is coordinated on the openssl-dev mailing list (see
|
||||||
|
http://www.openssl.org for information on subscribing). If you
|
||||||
|
would like to submit a patch, send it to openssl-dev@openssl.org with
|
||||||
|
the string "[PATCH]" in the subject. Please be sure to include a
|
||||||
|
textual explanation of what your patch does.
|
||||||
|
|
||||||
LEGALITIES
|
Note: For legal reasons, contributions from the US can be accepted only
|
||||||
----------
|
if a copy of the patch is sent to crypt@bxa.doc.gov
|
||||||
|
|
||||||
A number of nations, in particular the U.S., restrict the use or export
|
The preferred format for changes is "diff -u" output. You might
|
||||||
of cryptography. If you are potentially subject to such restrictions
|
generate it like this:
|
||||||
you should seek competent professional legal advice before attempting to
|
|
||||||
develop or distribute cryptographic code.
|
# cd openssl-work
|
||||||
|
# [your changes]
|
||||||
|
# ./Configure dist; make clean
|
||||||
|
# cd ..
|
||||||
|
# diff -ur openssl-orig openssl-work > mydiffs.patch
|
||||||
|
|||||||
187
README.ASN1
Normal file
187
README.ASN1
Normal file
@@ -0,0 +1,187 @@
|
|||||||
|
|
||||||
|
OpenSSL ASN1 Revision
|
||||||
|
=====================
|
||||||
|
|
||||||
|
This document describes some of the issues relating to the new ASN1 code.
|
||||||
|
|
||||||
|
Previous OpenSSL ASN1 problems
|
||||||
|
=============================
|
||||||
|
|
||||||
|
OK why did the OpenSSL ASN1 code need revising in the first place? Well
|
||||||
|
there are lots of reasons some of which are included below...
|
||||||
|
|
||||||
|
1. The code is difficult to read and write. For every single ASN1 structure
|
||||||
|
(e.g. SEQUENCE) four functions need to be written for new, free, encode and
|
||||||
|
decode operations. This is a very painful and error prone operation. Very few
|
||||||
|
people have ever written any OpenSSL ASN1 and those that have usually wish
|
||||||
|
they hadn't.
|
||||||
|
|
||||||
|
2. Partly because of 1. the code is bloated and takes up a disproportionate
|
||||||
|
amount of space. The SEQUENCE encoder is particularly bad: it essentially
|
||||||
|
contains two copies of the same operation, one to compute the SEQUENCE length
|
||||||
|
and the other to encode it.
|
||||||
|
|
||||||
|
3. The code is memory based: that is it expects to be able to read the whole
|
||||||
|
structure from memory. This is fine for small structures but if you have a
|
||||||
|
(say) 1Gb PKCS#7 signedData structure it isn't such a good idea...
|
||||||
|
|
||||||
|
4. The code for the ASN1 IMPLICIT tag is evil. It is handled by temporarily
|
||||||
|
changing the tag to the expected one, attempting to read it, then changing it
|
||||||
|
back again. This means that decode buffers have to be writable even though they
|
||||||
|
are ultimately unchanged. This gets in the way of constification.
|
||||||
|
|
||||||
|
5. The handling of EXPLICIT isn't much better. It adds a chunk of code into
|
||||||
|
the decoder and encoder for every EXPLICIT tag.
|
||||||
|
|
||||||
|
6. APPLICATION and PRIVATE tags aren't even supported at all.
|
||||||
|
|
||||||
|
7. Even IMPLICIT isn't complete: there is no support for implicitly tagged
|
||||||
|
types that are not OPTIONAL.
|
||||||
|
|
||||||
|
8. Much of the code assumes that a tag will fit in a single octet. This is
|
||||||
|
only true if the tag is 30 or less (mercifully tags over 30 are rare).
|
||||||
|
|
||||||
|
9. The ASN1 CHOICE type has to be largely handled manually, there aren't any
|
||||||
|
macros that properly support it.
|
||||||
|
|
||||||
|
10. Encoders have no concept of OPTIONAL and have no error checking. If the
|
||||||
|
passed structure contains a NULL in a mandatory field it will not be encoded,
|
||||||
|
resulting in an invalid structure.
|
||||||
|
|
||||||
|
11. It is tricky to add ASN1 encoders and decoders to external applications.
|
||||||
|
|
||||||
|
Template model
|
||||||
|
==============
|
||||||
|
|
||||||
|
One of the major problems with revision is the sheer volume of the ASN1 code.
|
||||||
|
Attempts to change (for example) the IMPLICIT behaviour would result in a
|
||||||
|
modification of *every* single decode function.
|
||||||
|
|
||||||
|
I decided to adopt a template based approach. I'm using the term 'template'
|
||||||
|
in a manner similar to SNACC templates: it has nothing to do with C++
|
||||||
|
templates.
|
||||||
|
|
||||||
|
A template is a description of an ASN1 module as several constant C structures.
|
||||||
|
It describes in a machine readable way exactly how the ASN1 structure should
|
||||||
|
behave. If this template contains enough detail then it is possible to write
|
||||||
|
versions of new, free, encode, decode (and possibly others operations) that
|
||||||
|
operate on templates.
|
||||||
|
|
||||||
|
Instead of having to write code to handle each operation only a single
|
||||||
|
template needs to be written. If new operations are needed (such as a 'print'
|
||||||
|
operation) only a single new template based function needs to be written
|
||||||
|
which will then automatically handle all existing templates.
|
||||||
|
|
||||||
|
Plans for revision
|
||||||
|
==================
|
||||||
|
|
||||||
|
The revision will consist of the following steps. Other than the first two
|
||||||
|
these can be handled in any order.
|
||||||
|
|
||||||
|
o Design and write template new, free, encode and decode operations, initially
|
||||||
|
memory based. *DONE*
|
||||||
|
|
||||||
|
o Convert existing ASN1 code to template form. *IN PROGRESS*
|
||||||
|
|
||||||
|
o Convert an existing ASN1 compiler (probably SNACC) to output templates
|
||||||
|
in OpenSSL form.
|
||||||
|
|
||||||
|
o Add support for BIO based ASN1 encoders and decoders to handle large
|
||||||
|
structures, initially blocking I/O.
|
||||||
|
|
||||||
|
o Add support for non blocking I/O: this is quite a bit harder than blocking
|
||||||
|
I/O.
|
||||||
|
|
||||||
|
o Add new ASN1 structures, such as OCSP, CRMF, S/MIME v3 (CMS), attribute
|
||||||
|
certificates etc etc.
|
||||||
|
|
||||||
|
Description of major changes
|
||||||
|
============================
|
||||||
|
|
||||||
|
The BOOLEAN type now takes three values. 0xff is TRUE, 0 is FALSE and -1 is
|
||||||
|
absent. The meaning of absent depends on the context. If for example the
|
||||||
|
boolean type is DEFAULT FALSE (as in the case of the critical flag for
|
||||||
|
certificate extensions) then -1 is FALSE, if DEFAULT TRUE then -1 is TRUE.
|
||||||
|
Usually the value will only ever be read via an API which will hide this from
|
||||||
|
an application.
|
||||||
|
|
||||||
|
There is an evil bug in the old ASN1 code that mishandles OPTIONAL with
|
||||||
|
SEQUENCE OF or SET OF. These are both implemented as a STACK structure. The
|
||||||
|
old code would omit the structure if the STACK was NULL (which is fine) or if
|
||||||
|
it had zero elements (which is NOT OK). This causes problems because an empty
|
||||||
|
SEQUENCE OF or SET OF will result in an empty STACK when it is decoded but when
|
||||||
|
it is encoded it will be omitted resulting in different encodings. The new code
|
||||||
|
only omits the encoding if the STACK is NULL, if it contains zero elements it
|
||||||
|
is encoded and empty. There is an additional problem though: because an empty
|
||||||
|
STACK was omitted, sometimes the corresponding *_new() function would
|
||||||
|
initialize the STACK to empty so an application could immediately use it, if
|
||||||
|
this is done with the new code (i.e. a NULL) it wont work. Therefore a new
|
||||||
|
STACK should be allocated first. One instance of this is the X509_CRL list of
|
||||||
|
revoked certificates: a helper function X509_CRL_add0_revoked() has been added
|
||||||
|
for this purpose.
|
||||||
|
|
||||||
|
The X509_ATTRIBUTE structure used to have an element called 'set' which took
|
||||||
|
the value 1 if the attribute value was a SET OF or 0 if it was a single. Due
|
||||||
|
to the behaviour of CHOICE in the new code this has been changed to a field
|
||||||
|
called 'single' which is 0 for a SET OF and 1 for single. The old field has
|
||||||
|
been deleted to deliberately break source compatibility. Since this structure
|
||||||
|
is normally accessed via higher level functions this shouldn't break too much.
|
||||||
|
|
||||||
|
The X509_REQ_INFO certificate request info structure no longer has a field
|
||||||
|
called 'req_kludge'. This used to be set to 1 if the attributes field was
|
||||||
|
(incorrectly) omitted. You can check to see if the field is omitted now by
|
||||||
|
checking if the attributes field is NULL. Similarly if you need to omit
|
||||||
|
the field then free attributes and set it to NULL.
|
||||||
|
|
||||||
|
The top level 'detached' field in the PKCS7 structure is no longer set when
|
||||||
|
a PKCS#7 structure is read in. PKCS7_is_detached() should be called instead.
|
||||||
|
The behaviour of PKCS7_get_detached() is unaffected.
|
||||||
|
|
||||||
|
The values of 'type' in the GENERAL_NAME structure have changed. This is
|
||||||
|
because the old code use the ASN1 initial octet as the selector. The new
|
||||||
|
code uses the index in the ASN1_CHOICE template.
|
||||||
|
|
||||||
|
The DIST_POINT_NAME structure has changed to be a true CHOICE type.
|
||||||
|
|
||||||
|
typedef struct DIST_POINT_NAME_st {
|
||||||
|
int type;
|
||||||
|
union {
|
||||||
|
STACK_OF(GENERAL_NAME) *fullname;
|
||||||
|
STACK_OF(X509_NAME_ENTRY) *relativename;
|
||||||
|
} name;
|
||||||
|
} DIST_POINT_NAME;
|
||||||
|
|
||||||
|
This means that name.fullname or name.relativename should be set
|
||||||
|
and type reflects the option. That is if name.fullname is set then
|
||||||
|
type is 0 and if name.relativename is set type is 1.
|
||||||
|
|
||||||
|
With the old code using the i2d functions would typically involve:
|
||||||
|
|
||||||
|
unsigned char *buf, *p;
|
||||||
|
int len;
|
||||||
|
/* Find length of encoding */
|
||||||
|
len = i2d_SOMETHING(x, NULL);
|
||||||
|
/* Allocate buffer */
|
||||||
|
buf = OPENSSL_malloc(len);
|
||||||
|
if(buf == NULL) {
|
||||||
|
/* Malloc error */
|
||||||
|
}
|
||||||
|
/* Use temp variable because &p gets updated to point to end of
|
||||||
|
* encoding.
|
||||||
|
*/
|
||||||
|
p = buf;
|
||||||
|
i2d_SOMETHING(x, &p);
|
||||||
|
|
||||||
|
|
||||||
|
Using the new i2d you can also do:
|
||||||
|
|
||||||
|
unsigned char *buf = NULL;
|
||||||
|
int len;
|
||||||
|
len = i2d_SOMETHING(x, &buf);
|
||||||
|
if(len < 0) {
|
||||||
|
/* Malloc error */
|
||||||
|
}
|
||||||
|
|
||||||
|
and it will automatically allocate and populate a buffer with the
|
||||||
|
encoding. After this call 'buf' will point to the start of the
|
||||||
|
encoding which is len bytes long.
|
||||||
61
README.ECC
61
README.ECC
@@ -1,61 +0,0 @@
|
|||||||
NOTE: The OpenSSL Software Foundation has executed a sublicense agreement
|
|
||||||
entitled "Elliptic Curve Cryptography Patent License Agreement" with the
|
|
||||||
National Security Agency/ Central Security Service Commercial Solutions
|
|
||||||
Center (NCSC) dated 2010-11-04. That agreement permits implementation and
|
|
||||||
distribution of software containing features covered by any or all of the
|
|
||||||
following patents:
|
|
||||||
|
|
||||||
1.) U.S. Pat. No. 5,761,305 entitled "Key Agreement and Transport Protocol
|
|
||||||
with Implicit Signatures" issued on June 2, 1998;
|
|
||||||
2.) Can. Pat. Appl. Ser. No. 2176972 entitled "Key Agreement and Transport
|
|
||||||
Protocol with Implicit Signature and Reduced Bandwidth" filed on May
|
|
||||||
16, 1996;
|
|
||||||
3.) U.S. Pat. No. 5,889,865 entitled "Key Agreement and Transport Protocol
|
|
||||||
with Implicit Signatures" issued on March 30, 1999;
|
|
||||||
4.) U.S. Pat. No. 5,896,455 entitled "Key Agreement and Transport Protocol
|
|
||||||
with Implicit Signatures" issued on April 20, 1999;
|
|
||||||
5.) U.S. Pat. No. 5,933,504 entitled "Strengthened Public Key Protocol"
|
|
||||||
issued on August 3, 1999;
|
|
||||||
6.) Can. Pat. Appl. Ser. No. 2176866 entitled "Strengthened Public Key
|
|
||||||
Protocol" filed on May 17, 1996;
|
|
||||||
7.) E.P. Pat. Appl. Ser. No. 96201322.3 entitled "Strengthened Public Key
|
|
||||||
Protocol" filed on May 17, 1996;
|
|
||||||
8.) U.S. Pat. No. 5,999,626 entitled "Digital Signatures on a Smartcard"
|
|
||||||
issued on December 7, 1999;
|
|
||||||
9.) Can. Pat. Appl. Ser. No. 2202566 entitled "Digital Signatures on a
|
|
||||||
Smartcard" filed on April 14, 1997;
|
|
||||||
10.) E.P. Pat. Appl. No. 97106114.8 entitled "Digital Signatures on a
|
|
||||||
Smartcard" filed on April 15, 1997;
|
|
||||||
11.) U.S Pat. No. 6,122,736 entitled "Key Agreement and Transport Protocol
|
|
||||||
with Implicit Signatures" issued on September 19, 2000;
|
|
||||||
12.) Can. Pat. Appl. Ser. No. 2174261 entitled "Key Agreement and Transport
|
|
||||||
Protocol with Implicit Signatures" filed on April 16, 1996;
|
|
||||||
13.) E.P. Pat. Appl. Ser. No. 96105920.1 entitled "Key Agreement and
|
|
||||||
Transport Protocol with Implicit Signatures" filed on April 16, 1996;
|
|
||||||
14.) U.S. Pat. No. 6,141,420 entitled "Elliptic Curve Encryption Systems"
|
|
||||||
issued on October 31, 2000;
|
|
||||||
15.) Can. Pat. Appl. Ser. No. 2155038 entitled "Elliptic Curve Encryption
|
|
||||||
Systems" filed on July 31, 1995;
|
|
||||||
16.) E.P. Pat. Appl. Ser. No. 95926348.4 entitled "Elliptic Curve Encryption
|
|
||||||
Systems" filed on July 31, 1995;
|
|
||||||
17.) U.S. Pat. No. 6,336,188 entitled "Authenticated Key Agreement" issued
|
|
||||||
on January 1, 2002;
|
|
||||||
18.) U.S. Pat. No. 6,487,661 entitled "Key Agreement and Transport Protocol"
|
|
||||||
issued on November 26, 2002;
|
|
||||||
19.) Can. Pat. Appl. Ser. No. 2174260 entitled "Key Agreement and Transport
|
|
||||||
Protocol" filed on April 16, 1996;
|
|
||||||
20.) E.P. Pat. Appl. Ser. No. 96105921.9 entitled "Key Agreement and
|
|
||||||
Transport Protocol" filed on April 21, 1996;
|
|
||||||
21.) U.S. Pat. No. 6,563,928 entitled "Strengthened Public Key Protocol"
|
|
||||||
issued on May 13, 2003;
|
|
||||||
22.) U.S. Pat. No. 6,618,483 entitled "Elliptic Curve Encryption Systems"
|
|
||||||
issued September 9, 2003;
|
|
||||||
23.) U.S. Pat. Appl. Ser. No. 09/434,247 entitled "Digital Signatures on a
|
|
||||||
Smartcard" filed on November 5, 1999;
|
|
||||||
24.) U.S. Pat. Appl. Ser. No. 09/558,256 entitled "Key Agreement and
|
|
||||||
Transport Protocol with Implicit Signatures" filed on April 25, 2000;
|
|
||||||
25.) U.S. Pat. Appl. Ser. No. 09/942,492 entitled "Digital Signatures on a
|
|
||||||
Smartcard" filed on August 29, 2001 and published on July 18, 2002; and,
|
|
||||||
26.) U.S. Pat. Appl. Ser. No. 10/185,735 entitled "Strengthened Public Key
|
|
||||||
Protocol" filed on July 1, 2000.
|
|
||||||
|
|
||||||
@@ -13,10 +13,11 @@
|
|||||||
There are currently built-in ENGINE implementations for the following
|
There are currently built-in ENGINE implementations for the following
|
||||||
crypto devices:
|
crypto devices:
|
||||||
|
|
||||||
o Cryptodev
|
o CryptoSwift
|
||||||
o Microsoft CryptoAPI
|
o Compaq Atalla
|
||||||
o VIA Padlock
|
|
||||||
o nCipher CHIL
|
o nCipher CHIL
|
||||||
|
o Nuron
|
||||||
|
o Broadcom uBSec
|
||||||
|
|
||||||
In addition, dynamic binding to external ENGINE implementations is now
|
In addition, dynamic binding to external ENGINE implementations is now
|
||||||
provided by a special ENGINE called "dynamic". See the "DYNAMIC ENGINE"
|
provided by a special ENGINE called "dynamic". See the "DYNAMIC ENGINE"
|
||||||
@@ -153,7 +154,7 @@
|
|||||||
shared-library that contains the ENGINE implementation, and "NO_VCHECK"
|
shared-library that contains the ENGINE implementation, and "NO_VCHECK"
|
||||||
might possibly be useful if there is a minor version conflict and you
|
might possibly be useful if there is a minor version conflict and you
|
||||||
(or a vendor helpdesk) is convinced you can safely ignore it.
|
(or a vendor helpdesk) is convinced you can safely ignore it.
|
||||||
"ID" is probably only needed if a shared-library implements
|
"ENGINE_ID" is probably only needed if a shared-library implements
|
||||||
multiple ENGINEs, but if you know the engine id you expect to be using,
|
multiple ENGINEs, but if you know the engine id you expect to be using,
|
||||||
it doesn't hurt to specify it (and this provides a sanity check if
|
it doesn't hurt to specify it (and this provides a sanity check if
|
||||||
nothing else). "LIST_ADD" is only required if you actually wish the
|
nothing else). "LIST_ADD" is only required if you actually wish the
|
||||||
@@ -173,7 +174,7 @@
|
|||||||
|
|
||||||
ENGINE *e = ENGINE_by_id("dynamic");
|
ENGINE *e = ENGINE_by_id("dynamic");
|
||||||
ENGINE_ctrl_cmd_string(e, "SO_PATH", "/lib/libfoo.so", 0);
|
ENGINE_ctrl_cmd_string(e, "SO_PATH", "/lib/libfoo.so", 0);
|
||||||
ENGINE_ctrl_cmd_string(e, "ID", "foo", 0);
|
ENGINE_ctrl_cmd_string(e, "ENGINE_ID", "foo", 0);
|
||||||
ENGINE_ctrl_cmd_string(e, "LOAD", NULL, 0);
|
ENGINE_ctrl_cmd_string(e, "LOAD", NULL, 0);
|
||||||
ENGINE_ctrl_cmd_string(e, "CMD_FOO", "some input data", 0);
|
ENGINE_ctrl_cmd_string(e, "CMD_FOO", "some input data", 0);
|
||||||
|
|
||||||
@@ -183,7 +184,7 @@
|
|||||||
|
|
||||||
openssl engine dynamic \
|
openssl engine dynamic \
|
||||||
-pre SO_PATH:/lib/libfoo.so \
|
-pre SO_PATH:/lib/libfoo.so \
|
||||||
-pre ID:foo \
|
-pre ENGINE_ID:foo \
|
||||||
-pre LOAD \
|
-pre LOAD \
|
||||||
-pre "CMD_FOO:some input data"
|
-pre "CMD_FOO:some input data"
|
||||||
|
|
||||||
@@ -191,7 +192,7 @@
|
|||||||
|
|
||||||
openssl engine -vvvv dynamic \
|
openssl engine -vvvv dynamic \
|
||||||
-pre SO_PATH:/lib/libfoo.so \
|
-pre SO_PATH:/lib/libfoo.so \
|
||||||
-pre ID:foo \
|
-pre ENGINE_ID:foo \
|
||||||
-pre LOAD
|
-pre LOAD
|
||||||
|
|
||||||
Applications that support the ENGINE API and more specifically, the
|
Applications that support the ENGINE API and more specifically, the
|
||||||
|
|||||||
@@ -1 +0,0 @@
|
|||||||
This release does not support a FIPS 140-2 validated module.
|
|
||||||
118
README.PERL
118
README.PERL
@@ -1,118 +0,0 @@
|
|||||||
TOC
|
|
||||||
===
|
|
||||||
|
|
||||||
- Notes on Perl
|
|
||||||
- Notes on Perl on Windows
|
|
||||||
- Notes on Perl modules we use
|
|
||||||
- Notes on installing a perl module
|
|
||||||
|
|
||||||
Notes on Perl
|
|
||||||
-------------
|
|
||||||
|
|
||||||
For our scripts, we rely quite a bit on Perl, and increasingly on
|
|
||||||
some core Perl modules. These Perl modules are part of the Perl
|
|
||||||
source, so if you build Perl on your own, you should be set.
|
|
||||||
|
|
||||||
However, if you install Perl as binary packages, the outcome might
|
|
||||||
differ, and you may have to check that you do get the core modules
|
|
||||||
installed properly. We do not claim to know them all, but experience
|
|
||||||
has told us the following:
|
|
||||||
|
|
||||||
- on Linux distributions based on Debian, the package 'perl' will
|
|
||||||
install the core Perl modules as well, so you will be fine.
|
|
||||||
- on Linux distributions based on RPMs, you will need to install
|
|
||||||
'perl-core' rather than just 'perl'.
|
|
||||||
|
|
||||||
You MUST have at least Perl version 5.10.0 installed. This minimum
|
|
||||||
requirement is due to our use of regexp backslash sequence \R among
|
|
||||||
other features that didn't exist in core Perl before that version.
|
|
||||||
|
|
||||||
Notes on Perl on Windows
|
|
||||||
------------------------
|
|
||||||
|
|
||||||
If you will build on Cygwin (and possibly some other POSIX layers),
|
|
||||||
Perl is already part of your distribution. Simply use the Cygwin
|
|
||||||
package manager to make sure Perl gets installed.
|
|
||||||
|
|
||||||
Otherwise, you will need to install Perl separately. The Perl
|
|
||||||
package that we know of is ActiveState Perl, available from
|
|
||||||
http://www.activestate.com/ActivePerl.
|
|
||||||
|
|
||||||
Notes on Perl on VMS
|
|
||||||
--------------------
|
|
||||||
|
|
||||||
You will need to install Perl separately. One way to do so is to
|
|
||||||
download the source from http://perl.org/, unpacking it, reading
|
|
||||||
README.vms and follow instructions. Another way is to download a
|
|
||||||
.PCSI file from http://www.vmsperl.com/ and install it using the
|
|
||||||
POLYCENTER install tool.
|
|
||||||
|
|
||||||
Notes on Perl modules we use
|
|
||||||
----------------------------
|
|
||||||
|
|
||||||
We make increasing use of Perl modules, and do our best to limit
|
|
||||||
ourselves to core Perl modules to keep the requirements down. There
|
|
||||||
are just a few exceptions:
|
|
||||||
|
|
||||||
Test::More We require the minimum version to be 0.96, which
|
|
||||||
appeared in Perl 5.13.4, because that version was
|
|
||||||
the first to have all the features we're using.
|
|
||||||
This module is required for testing only! If you
|
|
||||||
don't plan on running the tests, you don't need to
|
|
||||||
bother with this one.
|
|
||||||
|
|
||||||
Text::Template This module is not part of the core Perl modules.
|
|
||||||
As a matter of fact, the core Perl modules do not
|
|
||||||
include any templating module to date.
|
|
||||||
This module is absolutely needed, configuration
|
|
||||||
depends on it.
|
|
||||||
|
|
||||||
To avoid unnecessary initial hurdles, we have bundled a copy of the
|
|
||||||
following modules in our source. They will work as fallbacks if
|
|
||||||
these modules aren't already installed on the system.
|
|
||||||
|
|
||||||
Text::Template
|
|
||||||
|
|
||||||
Notes on installing a perl module
|
|
||||||
---------------------------------
|
|
||||||
|
|
||||||
There are a number of ways to install a perl module. In all
|
|
||||||
descriptions below, Text::Template will server as an example.
|
|
||||||
|
|
||||||
1. for Linux users, the easiest is to install with the use of your
|
|
||||||
favorite package manager. Usually, all you need to do is search
|
|
||||||
for the module name and to install the package that comes up.
|
|
||||||
|
|
||||||
On Debian based Linux distributions, it would go like this:
|
|
||||||
|
|
||||||
$ apt-cache search Text::Template
|
|
||||||
...
|
|
||||||
libtext-template-perl - perl module to process text templates
|
|
||||||
$ sudo apt-get install libtext-template-perl
|
|
||||||
|
|
||||||
Perl modules in Debian based distributions use package names like
|
|
||||||
the name of the module in question, with "lib" prepended and
|
|
||||||
"-perl" appended.
|
|
||||||
|
|
||||||
2. Install using CPAN. This is very easy, but usually requires root
|
|
||||||
access:
|
|
||||||
|
|
||||||
$ cpan -i Text::Template
|
|
||||||
|
|
||||||
Note that this runs all the tests that the module to be install
|
|
||||||
comes with. This is usually a smooth operation, but there are
|
|
||||||
platforms where a failure is indicate even though the actual tests
|
|
||||||
were successful. Should that happen, you can force an
|
|
||||||
installation regardless (that should be safe since you've already
|
|
||||||
seen the tests succeed!):
|
|
||||||
|
|
||||||
$ cpan -f -i Text::Template
|
|
||||||
|
|
||||||
Note: on VMS, you must quote any argument that contains upper case
|
|
||||||
characters, so the lines above would be:
|
|
||||||
|
|
||||||
$ cpan -i "Text::Template"
|
|
||||||
|
|
||||||
and:
|
|
||||||
|
|
||||||
$ cpan -f -i "Text::Template"
|
|
||||||
104
STATUS
Normal file
104
STATUS
Normal file
@@ -0,0 +1,104 @@
|
|||||||
|
|
||||||
|
OpenSSL STATUS Last modified at
|
||||||
|
______________ $Date: 2002/05/16 10:01:53 $
|
||||||
|
|
||||||
|
DEVELOPMENT STATE
|
||||||
|
|
||||||
|
o OpenSSL 0.9.7: Under development...
|
||||||
|
o OpenSSL 0.9.6d: Released on May 9th, 2002
|
||||||
|
o OpenSSL 0.9.6c: Released on December 21st, 2001
|
||||||
|
o OpenSSL 0.9.6b: Released on July 9th, 2001
|
||||||
|
o OpenSSL 0.9.6a: Released on April 5th, 2001
|
||||||
|
o OpenSSL 0.9.6: Released on September 24th, 2000
|
||||||
|
o OpenSSL 0.9.5a: Released on April 1st, 2000
|
||||||
|
o OpenSSL 0.9.5: Released on February 28th, 2000
|
||||||
|
o OpenSSL 0.9.4: Released on August 09th, 1999
|
||||||
|
o OpenSSL 0.9.3a: Released on May 29th, 1999
|
||||||
|
o OpenSSL 0.9.3: Released on May 25th, 1999
|
||||||
|
o OpenSSL 0.9.2b: Released on March 22th, 1999
|
||||||
|
o OpenSSL 0.9.1c: Released on December 23th, 1998
|
||||||
|
|
||||||
|
[See also http://www.openssl.org/support/rt2.html]
|
||||||
|
|
||||||
|
RELEASE SHOWSTOPPERS
|
||||||
|
|
||||||
|
o BN_mod_mul verification fails for mips3-sgi-irix
|
||||||
|
unless configured with no-asm
|
||||||
|
|
||||||
|
AVAILABLE PATCHES
|
||||||
|
|
||||||
|
o
|
||||||
|
|
||||||
|
IN PROGRESS
|
||||||
|
|
||||||
|
o Steve is currently working on (in no particular order):
|
||||||
|
ASN1 code redesign, butchery, replacement.
|
||||||
|
OCSP
|
||||||
|
EVP cipher enhancement.
|
||||||
|
Enhanced certificate chain verification.
|
||||||
|
Private key, certificate and CRL API and implementation.
|
||||||
|
Developing and bugfixing PKCS#7 (S/MIME code).
|
||||||
|
Various X509 issues: character sets, certificate request extensions.
|
||||||
|
o Geoff and Richard are currently working on:
|
||||||
|
ENGINE (the new code that gives hardware support among others).
|
||||||
|
o Richard is currently working on:
|
||||||
|
UI (User Interface)
|
||||||
|
UTIL (a new set of library functions to support some higher level
|
||||||
|
functionality that is currently missing).
|
||||||
|
Shared library support for VMS.
|
||||||
|
Kerberos 5 authentication
|
||||||
|
Constification
|
||||||
|
OCSP
|
||||||
|
|
||||||
|
NEEDS PATCH
|
||||||
|
|
||||||
|
o apps/ca.c: "Sign the certificate?" - "n" creates empty certificate file
|
||||||
|
|
||||||
|
o "OpenSSL STATUS" is never up-to-date.
|
||||||
|
|
||||||
|
OPEN ISSUES
|
||||||
|
|
||||||
|
o Do we want the EVP API changes in 0.9.7?
|
||||||
|
Can compatibility be improved?
|
||||||
|
|
||||||
|
o The Makefile hierarchy and build mechanism is still not a round thing:
|
||||||
|
|
||||||
|
1. The config vs. Configure scripts
|
||||||
|
It's the same nasty situation as for Apache with APACI vs.
|
||||||
|
src/Configure. It confuses.
|
||||||
|
Suggestion: Merge Configure and config into a single configure
|
||||||
|
script with a Autoconf style interface ;-) and remove
|
||||||
|
Configure and config. Or even let us use GNU Autoconf
|
||||||
|
itself. Then we can avoid a lot of those platform checks
|
||||||
|
which are currently in Configure.
|
||||||
|
|
||||||
|
o Support for Shared Libraries has to be added at least
|
||||||
|
for the major Unix platforms. The details we can rip from the stuff
|
||||||
|
Ralf has done for the Apache src/Configure script. Ben wants the
|
||||||
|
solution to be really simple.
|
||||||
|
|
||||||
|
Status: Ralf will look how we can easily incorporate the
|
||||||
|
compiler PIC and linker DSO flags from Apache
|
||||||
|
into the OpenSSL Configure script.
|
||||||
|
|
||||||
|
Ulf: +1 for using GNU autoconf and libtool (but not automake,
|
||||||
|
which apparently is not flexible enough to generate
|
||||||
|
libcrypto)
|
||||||
|
|
||||||
|
WISHES
|
||||||
|
|
||||||
|
o Add variants of DH_generate_parameters() and BN_generate_prime() [etc?]
|
||||||
|
where the callback function can request that the function be aborted.
|
||||||
|
[Gregory Stark <ghstark@pobox.com>, <rayyang2000@yahoo.com>]
|
||||||
|
|
||||||
|
o SRP in TLS.
|
||||||
|
[wished by:
|
||||||
|
Dj <derek@yo.net>, Tom Wu <tom@arcot.com>,
|
||||||
|
Tom Holroyd <tomh@po.crl.go.jp>]
|
||||||
|
|
||||||
|
See http://search.ietf.org/internet-drafts/draft-ietf-tls-srp-00.txt
|
||||||
|
as well as http://www-cs-students.stanford.edu/~tjw/srp/.
|
||||||
|
|
||||||
|
Tom Holroyd tells us there is a SRP patch for OpenSSH at
|
||||||
|
http://members.tripod.com/professor_tom/archives/, that could
|
||||||
|
be useful.
|
||||||
18
VMS/TODO
Normal file
18
VMS/TODO
Normal file
@@ -0,0 +1,18 @@
|
|||||||
|
TODO:
|
||||||
|
=====
|
||||||
|
|
||||||
|
There are a few things that need to be worked out in the VMS version of
|
||||||
|
OpenSSL, still:
|
||||||
|
|
||||||
|
- Description files. ("Makefile's" :-))
|
||||||
|
- Script code to link an already compiled build tree.
|
||||||
|
- A VMSINSTALlable version (way in the future, unless someone else hacks).
|
||||||
|
- shareable images (DLL for you Windows folks).
|
||||||
|
|
||||||
|
There may be other things that I have missed and that may be desirable.
|
||||||
|
Please send mail to <openssl-users@openssl.org> or to me directly if you
|
||||||
|
have any ideas.
|
||||||
|
|
||||||
|
--
|
||||||
|
Richard Levitte <richard@levitte.org>
|
||||||
|
1999-05-24
|
||||||
@@ -1,34 +0,0 @@
|
|||||||
#! /usr/bin/perl
|
|
||||||
|
|
||||||
use strict;
|
|
||||||
use warnings;
|
|
||||||
|
|
||||||
my @directory_vars = ( "dir", "certs", "crl_dir", "new_certs_dir" );
|
|
||||||
my @file_vars = ( "database", "certificate", "serial", "crlnumber",
|
|
||||||
"crl", "private_key", "RANDFILE" );
|
|
||||||
while(<STDIN>) {
|
|
||||||
s|\R$||;
|
|
||||||
foreach my $d (@directory_vars) {
|
|
||||||
if (/^(\s*\#?\s*${d}\s*=\s*)\.\/([^\s\#]*)([\s\#].*)$/) {
|
|
||||||
$_ = "$1sys\\\$disk:\[.$2$3";
|
|
||||||
} elsif (/^(\s*\#?\s*${d}\s*=\s*)(\w[^\s\#]*)([\s\#].*)$/) {
|
|
||||||
$_ = "$1sys\\\$disk:\[.$2$3";
|
|
||||||
}
|
|
||||||
s/^(\s*\#?\s*${d}\s*=\s*\$\w+)\/([^\s\#]*)([\s\#].*)$/$1.$2\]$3/;
|
|
||||||
while(/^(\s*\#?\s*${d}\s*=\s*(\$\w+\.|sys\\\$disk:\[\.)[\w\.]+)\/([^\]]*)\](.*)$/) {
|
|
||||||
$_ = "$1.$3]$4";
|
|
||||||
}
|
|
||||||
}
|
|
||||||
foreach my $f (@file_vars) {
|
|
||||||
s/^(\s*\#?\s*${f}\s*=\s*)\.\/(.*)$/$1sys\\\$disk:\[\/$2/;
|
|
||||||
while(/^(\s*\#?\s*${f}\s*=\s*(\$\w+|sys\\\$disk:\[)[^\/]*)\/(\w+\/[^\s\#]*)([\s\#].*)$/) {
|
|
||||||
$_ = "$1.$3$4";
|
|
||||||
}
|
|
||||||
if (/^(\s*\#?\s*${f}\s*=\s*(\$\w+|sys\\\$disk:\[)[^\/]*)\/(\w+)([\s\#].*)$/) {
|
|
||||||
$_ = "$1]$3.$4";
|
|
||||||
} elsif (/^(\s*\#?\s*${f}\s*=\s*(\$\w+|sys\\\$disk:\[)[^\/]*)\/([^\s\#]*)([\s\#].*)$/) {
|
|
||||||
$_ = "$1]$3$4";
|
|
||||||
}
|
|
||||||
}
|
|
||||||
print $_,"\n";
|
|
||||||
}
|
|
||||||
4
VMS/WISHLIST.TXT
Normal file
4
VMS/WISHLIST.TXT
Normal file
@@ -0,0 +1,4 @@
|
|||||||
|
* Have the building procedure contain a LINK-only possibility.
|
||||||
|
Wished by Mark Daniel <mark.daniel@dsto.defence.gov.au>
|
||||||
|
|
||||||
|
One way to enable that is also to go over to DESCRIP.MMS files.
|
||||||
477
VMS/cert_tool/hostaddr.c
Normal file
477
VMS/cert_tool/hostaddr.c
Normal file
@@ -0,0 +1,477 @@
|
|||||||
|
|
||||||
|
#ifdef VMS
|
||||||
|
#pragma module HOSTADDR "X-1"
|
||||||
|
|
||||||
|
/*
|
||||||
|
**
|
||||||
|
** Copyright (c) 2000 Compaq Computer Corporation
|
||||||
|
** COMPAQ Registered in U.S. Patent and Trademark Office.
|
||||||
|
**
|
||||||
|
** Confidential computer software. Valid license from Compaq or
|
||||||
|
** authorized sublicensor required for possession, use or copying.
|
||||||
|
** Consistent with FAR 12.211 and 12.212, Commercial Computer Software,
|
||||||
|
** Computer Software Documentation, and Technical Data for Commercial
|
||||||
|
** Items are licensed to the U.S. Government under vendor's standard
|
||||||
|
** commercial license.
|
||||||
|
**
|
||||||
|
*/
|
||||||
|
|
||||||
|
/*
|
||||||
|
**++
|
||||||
|
**
|
||||||
|
** FACILITY: Apache Web Server
|
||||||
|
**
|
||||||
|
** ABSTRACT:
|
||||||
|
**
|
||||||
|
** This program determine the hostaddr of the default node or of
|
||||||
|
** a given hostname.
|
||||||
|
**
|
||||||
|
** The command line syntax is:
|
||||||
|
**
|
||||||
|
** HOSTADDR [-l log-name] [-s sym-name] [host-name]
|
||||||
|
**
|
||||||
|
** where:
|
||||||
|
**
|
||||||
|
** -l log-name specifies an optional logical name to receive hostname.
|
||||||
|
**
|
||||||
|
** -c sym-name specifies an optional symbol name to receive hostname.
|
||||||
|
**
|
||||||
|
** host-name specifies an optional host name to resolve.
|
||||||
|
**
|
||||||
|
** AUTHOR: Matthew Doremus CREATION DATE: 07-Jul-2000
|
||||||
|
**
|
||||||
|
** Modification History:
|
||||||
|
**
|
||||||
|
** X-1 Matthew Doremus 07-Jul-2000
|
||||||
|
** Initial development
|
||||||
|
**
|
||||||
|
**--
|
||||||
|
**
|
||||||
|
** Compile/Link instructions:
|
||||||
|
**
|
||||||
|
** OpenVMS Alpha/VAX:
|
||||||
|
** $ CC HOSTADDR+SYS$LIBRARY:SYS$LIB_C/LIBRARY
|
||||||
|
** $ LINK HOSTADDR
|
||||||
|
**
|
||||||
|
*/
|
||||||
|
|
||||||
|
/*
|
||||||
|
** Define __NEW_STARLET if it's not already defined
|
||||||
|
*/
|
||||||
|
#ifndef __NEW_STARLET
|
||||||
|
#define __NEW_STARLET
|
||||||
|
#define __NEW_STARLET_SET
|
||||||
|
#endif
|
||||||
|
|
||||||
|
/*
|
||||||
|
** Include the necessary header files
|
||||||
|
*/
|
||||||
|
#include <lib$routines>
|
||||||
|
#include <libclidef>
|
||||||
|
#include <descrip>
|
||||||
|
#include <stdlib>
|
||||||
|
#include <string>
|
||||||
|
#include <stdio>
|
||||||
|
#include <netdb>
|
||||||
|
#include <in>
|
||||||
|
|
||||||
|
/*
|
||||||
|
** Undefine __NEW_STARLET if we had defined it
|
||||||
|
*/
|
||||||
|
#ifndef __NEW_STARLET_SET
|
||||||
|
#undef __NEW_STARLET_SET
|
||||||
|
#undef __NEW_STARLET
|
||||||
|
#endif
|
||||||
|
|
||||||
|
/*
|
||||||
|
** Option Data Structure
|
||||||
|
*/
|
||||||
|
typedef struct _opt_data {
|
||||||
|
char *log_name;
|
||||||
|
char *sym_name;
|
||||||
|
char *host_name;
|
||||||
|
} OPT_DATA;
|
||||||
|
|
||||||
|
/*
|
||||||
|
** Local Routine Prototypes
|
||||||
|
*/
|
||||||
|
static void
|
||||||
|
ParseCmdLine (
|
||||||
|
int,
|
||||||
|
char *[],
|
||||||
|
OPT_DATA *);
|
||||||
|
|
||||||
|
static void
|
||||||
|
SetLogName (
|
||||||
|
char *,
|
||||||
|
char *);
|
||||||
|
|
||||||
|
static void
|
||||||
|
SetSymName (
|
||||||
|
char *,
|
||||||
|
char *);
|
||||||
|
|
||||||
|
static void
|
||||||
|
Usage ();
|
||||||
|
|
||||||
|
/*
|
||||||
|
**
|
||||||
|
** main - Main processing routine for the HOSTADDR utility
|
||||||
|
**
|
||||||
|
** Functional Description:
|
||||||
|
**
|
||||||
|
** This routine controls overall program execution.
|
||||||
|
**
|
||||||
|
** Usage:
|
||||||
|
**
|
||||||
|
** main argc, argv, envp
|
||||||
|
**
|
||||||
|
** Formal parameters:
|
||||||
|
**
|
||||||
|
** argc - (IN) argument count
|
||||||
|
** argv - (IN) address of an argument array
|
||||||
|
** envp - (IN) address of an environment string
|
||||||
|
**
|
||||||
|
** Implicit Parameters:
|
||||||
|
**
|
||||||
|
** None
|
||||||
|
**
|
||||||
|
** Routine Value:
|
||||||
|
**
|
||||||
|
** None
|
||||||
|
**
|
||||||
|
** Side Effects:
|
||||||
|
**
|
||||||
|
** None
|
||||||
|
**
|
||||||
|
*/
|
||||||
|
int
|
||||||
|
main (
|
||||||
|
int argc,
|
||||||
|
char *argv[],
|
||||||
|
char *envp[]
|
||||||
|
)
|
||||||
|
{
|
||||||
|
struct in_addr *addr_ptr;
|
||||||
|
char hostname[512+1];
|
||||||
|
struct hostent *hp;
|
||||||
|
OPT_DATA OptData;
|
||||||
|
char *hostaddr;
|
||||||
|
int addr_max,
|
||||||
|
i;
|
||||||
|
|
||||||
|
/*
|
||||||
|
** Parse the command line
|
||||||
|
*/
|
||||||
|
ParseCmdLine (argc, argv, &OptData);
|
||||||
|
|
||||||
|
/*
|
||||||
|
** If no host name was given, then use gethostname otherwise
|
||||||
|
** use the host name given.
|
||||||
|
*/
|
||||||
|
if (! OptData.host_name)
|
||||||
|
{
|
||||||
|
if (gethostname (hostname, sizeof (hostname) - 1))
|
||||||
|
{
|
||||||
|
perror ("gethostname");
|
||||||
|
exit (1);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
else
|
||||||
|
strcpy (hostname, OptData.host_name);
|
||||||
|
|
||||||
|
/*
|
||||||
|
** Get the host address using gethostbyname
|
||||||
|
*/
|
||||||
|
if (! (hp = gethostbyname (hostname)))
|
||||||
|
{
|
||||||
|
perror ("gethostbyname");
|
||||||
|
exit (1);
|
||||||
|
}
|
||||||
|
|
||||||
|
/*
|
||||||
|
** Format the host address(es) into a comma separated list
|
||||||
|
*/
|
||||||
|
addr_max = hp->h_length / sizeof (struct in_addr);
|
||||||
|
hostaddr = malloc ((addr_max * (15 + 1)) + 1);
|
||||||
|
addr_ptr = (struct in_addr *) hp->h_addr;
|
||||||
|
for (i = 0; i < addr_max; i++)
|
||||||
|
{
|
||||||
|
if (i > 0)
|
||||||
|
strcat (hostaddr, ",");
|
||||||
|
addr_ptr = addr_ptr + (i * sizeof (struct in_addr));
|
||||||
|
sprintf (hostaddr + strlen (hostaddr), "%d.%d.%d.%d",
|
||||||
|
addr_ptr->s_net, addr_ptr->s_host,
|
||||||
|
addr_ptr->s_lh, addr_ptr->s_impno);
|
||||||
|
}
|
||||||
|
|
||||||
|
/*
|
||||||
|
** Define a logical name if one was provided
|
||||||
|
*/
|
||||||
|
if (OptData.log_name)
|
||||||
|
SetLogName (OptData.log_name, hostaddr);
|
||||||
|
|
||||||
|
/*
|
||||||
|
** Define a symbol name if one was provided
|
||||||
|
*/
|
||||||
|
if (OptData.sym_name)
|
||||||
|
SetSymName (OptData.sym_name, hostaddr);
|
||||||
|
|
||||||
|
/*
|
||||||
|
** print the host address if no logical or symbol name was provided
|
||||||
|
*/
|
||||||
|
if (! OptData.log_name && ! OptData.sym_name)
|
||||||
|
printf ("%s\n", hostaddr);
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
/*
|
||||||
|
**
|
||||||
|
** ParseCmdLine - Parse the command line options
|
||||||
|
**
|
||||||
|
** Functional Description:
|
||||||
|
**
|
||||||
|
** This routine parses the command line options.
|
||||||
|
**
|
||||||
|
** Usage:
|
||||||
|
**
|
||||||
|
** ParseCmdLine argc, argv, OptData
|
||||||
|
**
|
||||||
|
** Formal parameters:
|
||||||
|
**
|
||||||
|
** argc - (IN) argument count
|
||||||
|
** argv - (IN) address of an argument array
|
||||||
|
** OptData - (OUT) address of command option data structure
|
||||||
|
** which will contain the parsed input.
|
||||||
|
**
|
||||||
|
** Implicit Parameters:
|
||||||
|
**
|
||||||
|
** None
|
||||||
|
**
|
||||||
|
** Routine Value:
|
||||||
|
**
|
||||||
|
** None
|
||||||
|
**
|
||||||
|
** Side Effects:
|
||||||
|
**
|
||||||
|
** None
|
||||||
|
**
|
||||||
|
*/
|
||||||
|
static void
|
||||||
|
ParseCmdLine (
|
||||||
|
int argc,
|
||||||
|
char *argv[],
|
||||||
|
OPT_DATA *OptData
|
||||||
|
)
|
||||||
|
{
|
||||||
|
int option,
|
||||||
|
i;
|
||||||
|
|
||||||
|
/*
|
||||||
|
** Initialize the option data
|
||||||
|
*/
|
||||||
|
OptData->log_name = NULL;
|
||||||
|
OptData->sym_name = NULL;
|
||||||
|
OptData->host_name = NULL;
|
||||||
|
|
||||||
|
/*
|
||||||
|
** Process the command line options
|
||||||
|
*/
|
||||||
|
while ((option = getopt (argc, argv, "l:s:?")) != EOF)
|
||||||
|
{
|
||||||
|
switch (option)
|
||||||
|
{
|
||||||
|
/*
|
||||||
|
** Output to logical name ?
|
||||||
|
*/
|
||||||
|
case 'l':
|
||||||
|
OptData->log_name = strdup (optarg);
|
||||||
|
break;
|
||||||
|
|
||||||
|
/*
|
||||||
|
** Output to symbol name ?
|
||||||
|
*/
|
||||||
|
case 's':
|
||||||
|
OptData->sym_name = strdup (optarg);
|
||||||
|
break;
|
||||||
|
|
||||||
|
/*
|
||||||
|
** Invalid argument ?
|
||||||
|
*/
|
||||||
|
case '?':
|
||||||
|
default:
|
||||||
|
Usage ();
|
||||||
|
exit (1);
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
/*
|
||||||
|
** Are the number of parameters correct ?
|
||||||
|
*/
|
||||||
|
if (argc - optind > 1)
|
||||||
|
{
|
||||||
|
Usage ();
|
||||||
|
exit (1);
|
||||||
|
}
|
||||||
|
|
||||||
|
/*
|
||||||
|
** Host Name provided ?
|
||||||
|
*/
|
||||||
|
if (argc - optind == 1)
|
||||||
|
OptData->host_name = strdup (argv[optind]);
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
/*
|
||||||
|
**
|
||||||
|
** SetLogName - Set a logical name & value
|
||||||
|
**
|
||||||
|
** Functional Description:
|
||||||
|
**
|
||||||
|
** This routine sets a logical name & value.
|
||||||
|
**
|
||||||
|
** Usage:
|
||||||
|
**
|
||||||
|
** SetLogName LogName, LogValue
|
||||||
|
**
|
||||||
|
** Formal parameters:
|
||||||
|
**
|
||||||
|
** LogName - (IN) address of the logical name
|
||||||
|
** LogValue - (IN) address of the logical value
|
||||||
|
**
|
||||||
|
** Implicit Parameters:
|
||||||
|
**
|
||||||
|
** None
|
||||||
|
**
|
||||||
|
** Routine Value:
|
||||||
|
**
|
||||||
|
** None
|
||||||
|
**
|
||||||
|
** Side Effects:
|
||||||
|
**
|
||||||
|
** None
|
||||||
|
**
|
||||||
|
*/
|
||||||
|
static void
|
||||||
|
SetLogName (
|
||||||
|
char *LogName,
|
||||||
|
char *LogValue
|
||||||
|
)
|
||||||
|
{
|
||||||
|
struct dsc$descriptor_s log_nam_desc = {0, DSC$K_DTYPE_T, DSC$K_CLASS_S, 0};
|
||||||
|
struct dsc$descriptor_s log_val_desc = {0, DSC$K_DTYPE_T, DSC$K_CLASS_S, 0};
|
||||||
|
int status;
|
||||||
|
|
||||||
|
/*
|
||||||
|
** Setup the logical name & value descriptors
|
||||||
|
*/
|
||||||
|
log_nam_desc.dsc$w_length = strlen (LogName);
|
||||||
|
log_nam_desc.dsc$a_pointer = LogName;
|
||||||
|
log_val_desc.dsc$w_length = strlen (LogValue);
|
||||||
|
log_val_desc.dsc$a_pointer = LogValue;
|
||||||
|
|
||||||
|
/*
|
||||||
|
** Set the logical name & value
|
||||||
|
*/
|
||||||
|
status = lib$set_logical (&log_nam_desc, &log_val_desc, 0, 0, 0);
|
||||||
|
if (! (status & 1))
|
||||||
|
exit (status);
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
/*
|
||||||
|
**
|
||||||
|
** SetSymName - Set a symbol name & value
|
||||||
|
**
|
||||||
|
** Functional Description:
|
||||||
|
**
|
||||||
|
** This routine sets a symbol name & value.
|
||||||
|
**
|
||||||
|
** Usage:
|
||||||
|
**
|
||||||
|
** SetSymName SymName, SymValue
|
||||||
|
**
|
||||||
|
** Formal parameters:
|
||||||
|
**
|
||||||
|
** SymName - (IN) address of the symbol name
|
||||||
|
** SymValue - (IN) address of the Symbol value
|
||||||
|
**
|
||||||
|
** Implicit Parameters:
|
||||||
|
**
|
||||||
|
** None
|
||||||
|
**
|
||||||
|
** Routine Value:
|
||||||
|
**
|
||||||
|
** None
|
||||||
|
**
|
||||||
|
** Side Effects:
|
||||||
|
**
|
||||||
|
** None
|
||||||
|
**
|
||||||
|
*/
|
||||||
|
static void
|
||||||
|
SetSymName (
|
||||||
|
char *SymName,
|
||||||
|
char *SymValue
|
||||||
|
)
|
||||||
|
{
|
||||||
|
struct dsc$descriptor_s sym_nam_desc = {0, DSC$K_DTYPE_T, DSC$K_CLASS_S, 0};
|
||||||
|
struct dsc$descriptor_s sym_val_desc = {0, DSC$K_DTYPE_T, DSC$K_CLASS_S, 0};
|
||||||
|
int status;
|
||||||
|
|
||||||
|
/*
|
||||||
|
** Setup the symbol name & value descriptors
|
||||||
|
*/
|
||||||
|
sym_nam_desc.dsc$w_length = strlen (SymName);
|
||||||
|
sym_nam_desc.dsc$a_pointer = SymName;
|
||||||
|
sym_val_desc.dsc$w_length = strlen (SymValue);
|
||||||
|
sym_val_desc.dsc$a_pointer = SymValue;
|
||||||
|
|
||||||
|
/*
|
||||||
|
** Set the symbol name & value
|
||||||
|
*/
|
||||||
|
status = lib$set_symbol (&sym_nam_desc, &sym_val_desc, &LIB$K_CLI_LOCAL_SYM);
|
||||||
|
if (! (status & 1))
|
||||||
|
exit (status);
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
/*
|
||||||
|
**
|
||||||
|
** Usage - Display the acceptable unix style command usage
|
||||||
|
**
|
||||||
|
** Functional Description:
|
||||||
|
**
|
||||||
|
** This routine displays to standard output the appropriate unix style
|
||||||
|
** command usage.
|
||||||
|
**
|
||||||
|
** Usage:
|
||||||
|
**
|
||||||
|
** Usage
|
||||||
|
**
|
||||||
|
** Formal parameters:
|
||||||
|
**
|
||||||
|
** None
|
||||||
|
**
|
||||||
|
** Implicit Parameters:
|
||||||
|
**
|
||||||
|
** None
|
||||||
|
**
|
||||||
|
** Routine Value:
|
||||||
|
**
|
||||||
|
** None
|
||||||
|
**
|
||||||
|
** Side Effects:
|
||||||
|
**
|
||||||
|
** None
|
||||||
|
**
|
||||||
|
*/
|
||||||
|
static void
|
||||||
|
Usage ()
|
||||||
|
{
|
||||||
|
|
||||||
|
fprintf (stdout, "Usage: HOSTADDR [-l log-name] [-s sym-name] [host-name]\n");
|
||||||
|
|
||||||
|
}
|
||||||
|
#endif /* #ifdef VMS */
|
||||||
513
VMS/cert_tool/hostname.c
Normal file
513
VMS/cert_tool/hostname.c
Normal file
@@ -0,0 +1,513 @@
|
|||||||
|
|
||||||
|
#ifdef VMS
|
||||||
|
#pragma module HOSTNAME "X-1"
|
||||||
|
|
||||||
|
/*
|
||||||
|
**
|
||||||
|
** Copyright (c) 2000 Compaq Computer Corporation
|
||||||
|
** COMPAQ Registered in U.S. Patent and Trademark Office.
|
||||||
|
**
|
||||||
|
** Confidential computer software. Valid license from Compaq or
|
||||||
|
** authorized sublicensor required for possession, use or copying.
|
||||||
|
** Consistent with FAR 12.211 and 12.212, Commercial Computer Software,
|
||||||
|
** Computer Software Documentation, and Technical Data for Commercial
|
||||||
|
** Items are licensed to the U.S. Government under vendor's standard
|
||||||
|
** commercial license.
|
||||||
|
**
|
||||||
|
*/
|
||||||
|
|
||||||
|
/*
|
||||||
|
**++
|
||||||
|
**
|
||||||
|
** FACILITY: Apache Web Server
|
||||||
|
**
|
||||||
|
** ABSTRACT:
|
||||||
|
**
|
||||||
|
** This program determine the hostname of the default node or of
|
||||||
|
** a given hostaddr.
|
||||||
|
**
|
||||||
|
** The command line syntax is:
|
||||||
|
**
|
||||||
|
** HOSTNAME [-l log-name] [-s sym-name] [host-addr]
|
||||||
|
**
|
||||||
|
** where:
|
||||||
|
**
|
||||||
|
** -l log-name specifies an optional logical name to receive hostname.
|
||||||
|
**
|
||||||
|
** -c sym-name specifies an optional symbol name to receive hostname.
|
||||||
|
**
|
||||||
|
** host-addr specifies an optional host address to resolve.
|
||||||
|
**
|
||||||
|
** AUTHOR: Matthew Doremus CREATION DATE: 07-Jul-2000
|
||||||
|
**
|
||||||
|
** Modification History:
|
||||||
|
**
|
||||||
|
** X-1 Matthew Doremus 07-Jul-2000
|
||||||
|
** Initial development
|
||||||
|
**
|
||||||
|
**--
|
||||||
|
**
|
||||||
|
** Compile/Link instructions:
|
||||||
|
**
|
||||||
|
** OpenVMS Alpha/VAX:
|
||||||
|
** $ CC HOSTNAME+SYS$LIBRARY:SYS$LIB_C/LIBRARY
|
||||||
|
** $ LINK HOSTNAME
|
||||||
|
**
|
||||||
|
*/
|
||||||
|
|
||||||
|
/*
|
||||||
|
** Define __NEW_STARLET if it's not already defined
|
||||||
|
*/
|
||||||
|
#ifndef __NEW_STARLET
|
||||||
|
#define __NEW_STARLET
|
||||||
|
#define __NEW_STARLET_SET
|
||||||
|
#endif
|
||||||
|
|
||||||
|
/*
|
||||||
|
** Include the necessary header files
|
||||||
|
*/
|
||||||
|
#include <lib$routines>
|
||||||
|
#include <libclidef>
|
||||||
|
#include <descrip>
|
||||||
|
#include <stdlib>
|
||||||
|
#include <string>
|
||||||
|
#include <stdio>
|
||||||
|
#include <netdb>
|
||||||
|
#include <in>
|
||||||
|
#include <socket>
|
||||||
|
|
||||||
|
/*
|
||||||
|
** Undefine __NEW_STARLET if we had defined it
|
||||||
|
*/
|
||||||
|
#ifndef __NEW_STARLET_SET
|
||||||
|
#undef __NEW_STARLET_SET
|
||||||
|
#undef __NEW_STARLET
|
||||||
|
#endif
|
||||||
|
|
||||||
|
/*
|
||||||
|
** Option Data Structure
|
||||||
|
*/
|
||||||
|
typedef struct _opt_data {
|
||||||
|
char *log_name;
|
||||||
|
char *sym_name;
|
||||||
|
unsigned char host_addr[4];
|
||||||
|
} OPT_DATA;
|
||||||
|
|
||||||
|
/*
|
||||||
|
** Local Routine Prototypes
|
||||||
|
*/
|
||||||
|
static void
|
||||||
|
ParseCmdLine (
|
||||||
|
int,
|
||||||
|
char *[],
|
||||||
|
OPT_DATA *);
|
||||||
|
|
||||||
|
static void
|
||||||
|
SetLogName (
|
||||||
|
char *,
|
||||||
|
char *);
|
||||||
|
|
||||||
|
static void
|
||||||
|
SetSymName (
|
||||||
|
char *,
|
||||||
|
char *);
|
||||||
|
|
||||||
|
static void
|
||||||
|
Usage ();
|
||||||
|
|
||||||
|
/*
|
||||||
|
**
|
||||||
|
** main - Main processing routine for the HOSTNAME utility
|
||||||
|
**
|
||||||
|
** Functional Description:
|
||||||
|
**
|
||||||
|
** This routine controls overall program execution.
|
||||||
|
**
|
||||||
|
** Usage:
|
||||||
|
**
|
||||||
|
** main argc, argv, envp
|
||||||
|
**
|
||||||
|
** Formal parameters:
|
||||||
|
**
|
||||||
|
** argc - (IN) argument count
|
||||||
|
** argv - (IN) address of an argument array
|
||||||
|
** envp - (IN) address of an environment string
|
||||||
|
**
|
||||||
|
** Implicit Parameters:
|
||||||
|
**
|
||||||
|
** None
|
||||||
|
**
|
||||||
|
** Routine Value:
|
||||||
|
**
|
||||||
|
** None
|
||||||
|
**
|
||||||
|
** Side Effects:
|
||||||
|
**
|
||||||
|
** None
|
||||||
|
**
|
||||||
|
*/
|
||||||
|
int
|
||||||
|
main (
|
||||||
|
int argc,
|
||||||
|
char *argv[],
|
||||||
|
char *envp[]
|
||||||
|
)
|
||||||
|
{
|
||||||
|
struct in_addr host_addr;
|
||||||
|
char hostname[512+1];
|
||||||
|
struct hostent *hp;
|
||||||
|
OPT_DATA OptData;
|
||||||
|
int i;
|
||||||
|
|
||||||
|
/*
|
||||||
|
** Parse the command line
|
||||||
|
*/
|
||||||
|
ParseCmdLine (argc, argv, &OptData);
|
||||||
|
|
||||||
|
/*
|
||||||
|
** If no host address was given, then use gethostname otherwise
|
||||||
|
** use gethostbyaddr.
|
||||||
|
*/
|
||||||
|
if (! OptData.host_addr[0] && ! OptData.host_addr[1] &&
|
||||||
|
! OptData.host_addr[2] && ! OptData.host_addr[3])
|
||||||
|
{
|
||||||
|
if (gethostname (hostname, sizeof (hostname) - 1))
|
||||||
|
{
|
||||||
|
perror ("gethostname");
|
||||||
|
exit (1);
|
||||||
|
}
|
||||||
|
|
||||||
|
if (! (hp = gethostbyname (hostname)))
|
||||||
|
{
|
||||||
|
perror ("gethostbyname");
|
||||||
|
exit (1);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
else
|
||||||
|
{
|
||||||
|
host_addr.s_net = OptData.host_addr[0];
|
||||||
|
host_addr.s_host = OptData.host_addr[1];
|
||||||
|
host_addr.s_lh = OptData.host_addr[2];
|
||||||
|
host_addr.s_impno = OptData.host_addr[3];
|
||||||
|
|
||||||
|
if (! (hp = gethostbyaddr (&host_addr, sizeof (host_addr), AF_INET)))
|
||||||
|
{
|
||||||
|
perror ("gethostbyaddr");
|
||||||
|
exit (1);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
/*
|
||||||
|
** Let's try to determine the best available fully qualified hostname.
|
||||||
|
*/
|
||||||
|
if (hp->h_name)
|
||||||
|
{
|
||||||
|
strcpy (hostname, hp->h_name);
|
||||||
|
if (! strchr (hostname, '.'))
|
||||||
|
{
|
||||||
|
for (i = 0; hp->h_aliases[i]; i++)
|
||||||
|
{
|
||||||
|
if (strchr (hp->h_aliases[i], '.') &&
|
||||||
|
! strncasecmp (hp->h_aliases[i], hostname, strlen (hostname)))
|
||||||
|
{
|
||||||
|
strcpy (hostname, hp->h_aliases[i]);
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
else
|
||||||
|
strcpy (hostname, "(unavailable)");
|
||||||
|
|
||||||
|
/*
|
||||||
|
** Define a logical name if one was provided
|
||||||
|
*/
|
||||||
|
if (OptData.log_name)
|
||||||
|
SetLogName (OptData.log_name, hostname);
|
||||||
|
|
||||||
|
/*
|
||||||
|
** Define a symbol name if one was provided
|
||||||
|
*/
|
||||||
|
if (OptData.sym_name)
|
||||||
|
SetSymName (OptData.sym_name, hostname);
|
||||||
|
|
||||||
|
/*
|
||||||
|
** print the host name if no logical or symbol name was provided
|
||||||
|
*/
|
||||||
|
if (! OptData.log_name && ! OptData.sym_name)
|
||||||
|
printf ("%s\n", hostname);
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
/*
|
||||||
|
**
|
||||||
|
** ParseCmdLine - Parse the command line options
|
||||||
|
**
|
||||||
|
** Functional Description:
|
||||||
|
**
|
||||||
|
** This routine parses the command line options.
|
||||||
|
**
|
||||||
|
** Usage:
|
||||||
|
**
|
||||||
|
** ParseCmdLine argc, argv, OptData
|
||||||
|
**
|
||||||
|
** Formal parameters:
|
||||||
|
**
|
||||||
|
** argc - (IN) argument count
|
||||||
|
** argv - (IN) address of an argument array
|
||||||
|
** OptData - (OUT) address of command option data structure
|
||||||
|
** which will contain the parsed input.
|
||||||
|
**
|
||||||
|
** Implicit Parameters:
|
||||||
|
**
|
||||||
|
** None
|
||||||
|
**
|
||||||
|
** Routine Value:
|
||||||
|
**
|
||||||
|
** None
|
||||||
|
**
|
||||||
|
** Side Effects:
|
||||||
|
**
|
||||||
|
** None
|
||||||
|
**
|
||||||
|
*/
|
||||||
|
static void
|
||||||
|
ParseCmdLine (
|
||||||
|
int argc,
|
||||||
|
char *argv[],
|
||||||
|
OPT_DATA *OptData
|
||||||
|
)
|
||||||
|
{
|
||||||
|
int option,
|
||||||
|
i;
|
||||||
|
|
||||||
|
/*
|
||||||
|
** Initialize the option data
|
||||||
|
*/
|
||||||
|
OptData->log_name = NULL;
|
||||||
|
OptData->sym_name = NULL;
|
||||||
|
OptData->host_addr[0] = 0;
|
||||||
|
OptData->host_addr[1] = 0;
|
||||||
|
OptData->host_addr[2] = 0;
|
||||||
|
OptData->host_addr[3] = 0;
|
||||||
|
|
||||||
|
/*
|
||||||
|
** Process the command line options
|
||||||
|
*/
|
||||||
|
while ((option = getopt (argc, argv, "l:s:?")) != EOF)
|
||||||
|
{
|
||||||
|
switch (option)
|
||||||
|
{
|
||||||
|
/*
|
||||||
|
** Output to logical name ?
|
||||||
|
*/
|
||||||
|
case 'l':
|
||||||
|
OptData->log_name = strdup (optarg);
|
||||||
|
break;
|
||||||
|
|
||||||
|
/*
|
||||||
|
** Output to symbol name ?
|
||||||
|
*/
|
||||||
|
case 's':
|
||||||
|
OptData->sym_name = strdup (optarg);
|
||||||
|
break;
|
||||||
|
|
||||||
|
/*
|
||||||
|
** Invalid argument ?
|
||||||
|
*/
|
||||||
|
case '?':
|
||||||
|
default:
|
||||||
|
Usage ();
|
||||||
|
exit (1);
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
/*
|
||||||
|
** Are the number of parameters correct ?
|
||||||
|
*/
|
||||||
|
if (argc - optind > 1)
|
||||||
|
{
|
||||||
|
Usage ();
|
||||||
|
exit (1);
|
||||||
|
}
|
||||||
|
|
||||||
|
/*
|
||||||
|
** Host Address provided ?
|
||||||
|
*/
|
||||||
|
if (argc - optind == 1)
|
||||||
|
{
|
||||||
|
char *addr_ptr = argv[optind],
|
||||||
|
*addr_sep;
|
||||||
|
|
||||||
|
for (i = 0; i < 4; i++)
|
||||||
|
{
|
||||||
|
if ((addr_sep = strchr (addr_ptr, '.')) && (i < 3))
|
||||||
|
*addr_sep = '\0';
|
||||||
|
|
||||||
|
if (strlen (addr_ptr) == 0 || atoi (addr_ptr) > 255 ||
|
||||||
|
strspn (addr_ptr, "0123456789") != strlen (addr_ptr))
|
||||||
|
{
|
||||||
|
printf ("Invalid TCP/IP address format.\n");
|
||||||
|
exit (1);
|
||||||
|
}
|
||||||
|
|
||||||
|
OptData->host_addr[i] = atoi (addr_ptr);
|
||||||
|
if (addr_sep)
|
||||||
|
addr_ptr = addr_sep + 1;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
/*
|
||||||
|
**
|
||||||
|
** SetLogName - Set a logical name & value
|
||||||
|
**
|
||||||
|
** Functional Description:
|
||||||
|
**
|
||||||
|
** This routine sets a logical name & value.
|
||||||
|
**
|
||||||
|
** Usage:
|
||||||
|
**
|
||||||
|
** SetLogName LogName, LogValue
|
||||||
|
**
|
||||||
|
** Formal parameters:
|
||||||
|
**
|
||||||
|
** LogName - (IN) address of the logical name
|
||||||
|
** LogValue - (IN) address of the logical value
|
||||||
|
**
|
||||||
|
** Implicit Parameters:
|
||||||
|
**
|
||||||
|
** None
|
||||||
|
**
|
||||||
|
** Routine Value:
|
||||||
|
**
|
||||||
|
** None
|
||||||
|
**
|
||||||
|
** Side Effects:
|
||||||
|
**
|
||||||
|
** None
|
||||||
|
**
|
||||||
|
*/
|
||||||
|
static void
|
||||||
|
SetLogName (
|
||||||
|
char *LogName,
|
||||||
|
char *LogValue
|
||||||
|
)
|
||||||
|
{
|
||||||
|
struct dsc$descriptor_s log_nam_desc = {0, DSC$K_DTYPE_T, DSC$K_CLASS_S, 0};
|
||||||
|
struct dsc$descriptor_s log_val_desc = {0, DSC$K_DTYPE_T, DSC$K_CLASS_S, 0};
|
||||||
|
int status;
|
||||||
|
|
||||||
|
/*
|
||||||
|
** Setup the logical name & value descriptors
|
||||||
|
*/
|
||||||
|
log_nam_desc.dsc$w_length = strlen (LogName);
|
||||||
|
log_nam_desc.dsc$a_pointer = LogName;
|
||||||
|
log_val_desc.dsc$w_length = strlen (LogValue);
|
||||||
|
log_val_desc.dsc$a_pointer = LogValue;
|
||||||
|
|
||||||
|
/*
|
||||||
|
** Set the logical name & value
|
||||||
|
*/
|
||||||
|
status = lib$set_logical (&log_nam_desc, &log_val_desc, 0, 0, 0);
|
||||||
|
if (! (status & 1))
|
||||||
|
exit (status);
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
/*
|
||||||
|
**
|
||||||
|
** SetSymName - Set a symbol name & value
|
||||||
|
**
|
||||||
|
** Functional Description:
|
||||||
|
**
|
||||||
|
** This routine sets a symbol name & value.
|
||||||
|
**
|
||||||
|
** Usage:
|
||||||
|
**
|
||||||
|
** SetSymName SymName, SymValue
|
||||||
|
**
|
||||||
|
** Formal parameters:
|
||||||
|
**
|
||||||
|
** SymName - (IN) address of the symbol name
|
||||||
|
** SymValue - (IN) address of the Symbol value
|
||||||
|
**
|
||||||
|
** Implicit Parameters:
|
||||||
|
**
|
||||||
|
** None
|
||||||
|
**
|
||||||
|
** Routine Value:
|
||||||
|
**
|
||||||
|
** None
|
||||||
|
**
|
||||||
|
** Side Effects:
|
||||||
|
**
|
||||||
|
** None
|
||||||
|
**
|
||||||
|
*/
|
||||||
|
static void
|
||||||
|
SetSymName (
|
||||||
|
char *SymName,
|
||||||
|
char *SymValue
|
||||||
|
)
|
||||||
|
{
|
||||||
|
struct dsc$descriptor_s sym_nam_desc = {0, DSC$K_DTYPE_T, DSC$K_CLASS_S, 0};
|
||||||
|
struct dsc$descriptor_s sym_val_desc = {0, DSC$K_DTYPE_T, DSC$K_CLASS_S, 0};
|
||||||
|
int status;
|
||||||
|
|
||||||
|
/*
|
||||||
|
** Setup the symbol name & value descriptors
|
||||||
|
*/
|
||||||
|
sym_nam_desc.dsc$w_length = strlen (SymName);
|
||||||
|
sym_nam_desc.dsc$a_pointer = SymName;
|
||||||
|
sym_val_desc.dsc$w_length = strlen (SymValue);
|
||||||
|
sym_val_desc.dsc$a_pointer = SymValue;
|
||||||
|
|
||||||
|
/*
|
||||||
|
** Set the symbol name & value
|
||||||
|
*/
|
||||||
|
status = lib$set_symbol (&sym_nam_desc, &sym_val_desc, &LIB$K_CLI_LOCAL_SYM);
|
||||||
|
if (! (status & 1))
|
||||||
|
exit (status);
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
/*
|
||||||
|
**
|
||||||
|
** Usage - Display the acceptable unix style command usage
|
||||||
|
**
|
||||||
|
** Functional Description:
|
||||||
|
**
|
||||||
|
** This routine displays to standard output the appropriate unix style
|
||||||
|
** command usage.
|
||||||
|
**
|
||||||
|
** Usage:
|
||||||
|
**
|
||||||
|
** Usage
|
||||||
|
**
|
||||||
|
** Formal parameters:
|
||||||
|
**
|
||||||
|
** None
|
||||||
|
**
|
||||||
|
** Implicit Parameters:
|
||||||
|
**
|
||||||
|
** None
|
||||||
|
**
|
||||||
|
** Routine Value:
|
||||||
|
**
|
||||||
|
** None
|
||||||
|
**
|
||||||
|
** Side Effects:
|
||||||
|
**
|
||||||
|
** None
|
||||||
|
**
|
||||||
|
*/
|
||||||
|
static void
|
||||||
|
Usage ()
|
||||||
|
{
|
||||||
|
|
||||||
|
fprintf (stdout, "Usage: HOSTNAME [-l log-name] [-s sym-name] [host-addr]\n");
|
||||||
|
|
||||||
|
}
|
||||||
|
#endif /* #ifdef VMS */
|
||||||
639
VMS/cert_tool/ssl$auth_cert.com
Normal file
639
VMS/cert_tool/ssl$auth_cert.com
Normal file
@@ -0,0 +1,639 @@
|
|||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! SSL$AUTH_CERT.COM - SSL Certificate Authority procedure
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ Verify = F$VERIFY (0)
|
||||||
|
$ Set NoOn
|
||||||
|
$ Set NoControl=Y
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Description
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$! This procedure prompts the user through creating a Server Certificate.
|
||||||
|
$!
|
||||||
|
$! There are no parameters used.
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Define symbols
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ DELETE := DELETE
|
||||||
|
$ SAY := WRITE SYS$OUTPUT
|
||||||
|
$ ASK := READ SYS$COMMAND /END_OF_FILE=EXIT /PROMPT=
|
||||||
|
$ PID = F$GETJPI ("","PID")
|
||||||
|
$ TT_NOECHO = F$GETDVI ("TT:","TT_NOECHO")
|
||||||
|
$ On Control_Y THEN GOTO EXIT
|
||||||
|
$ Set Control=Y
|
||||||
|
$!
|
||||||
|
$ TT_ROWS = F$GETDVI ("TT:","TT_PAGE")
|
||||||
|
$ TT_COLS = F$GETDVI ("TT:","DEVBUFSIZ")
|
||||||
|
$!
|
||||||
|
$ GET_USER_DATA := CALL GET_USER_DATA
|
||||||
|
$ SET_USER_DATA := CALL SET_USER_DATA
|
||||||
|
$ DEL_USER_DATA := CALL DEL_USER_DATA
|
||||||
|
$ INIT_TERM := @SSL$COM:SSL$INIT_TERM
|
||||||
|
$ SHOW_FILE := @SSL$COM:SSL$SHOW_FILE
|
||||||
|
$ SSL_CONF_FILE = F$TRNLMN ("SSL$CA_CONF")
|
||||||
|
$ GET_CONF_DATA := @SSL$COM:SSL$CONF_UTIL 'SSL_CONF_FILE' GET
|
||||||
|
$ SET_CONF_DATA := @SSL$COM:SSL$CONF_UTIL 'SSL_CONF_FILE' SET
|
||||||
|
$!
|
||||||
|
$ ESC[0,8] = 27 ! Set the Escape Character
|
||||||
|
$ BELL[0,8] = 7 ! Ring the terminal Bell
|
||||||
|
$ RED = 1 ! Color - Red
|
||||||
|
$ FGD = 30 ! Foreground
|
||||||
|
$ BGD = 0 ! Background
|
||||||
|
$ CSCR = ESC + "[2J" ! Clear the Screen
|
||||||
|
$ CEOS = ESC + "[0J" ! Clear to the End of the Screen
|
||||||
|
$ CEOL = ESC + "[0K" ! Clear to the End of the Line
|
||||||
|
$ NORM = ESC + "[0m" ! Turn Attributes off
|
||||||
|
$ BLNK = ESC + "[5m" ! Turn on BLINK Attribute
|
||||||
|
$ WIDE = ESC + "#6" ! Turn on WIDE Attribute
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Run the SSL setup if it hasn't been run yet
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ IF F$TRNLNM ("SSL$CA_CONF") .EQS. ""
|
||||||
|
$ THEN
|
||||||
|
$ IF F$SEARCH ("SSL$COM:SSL$INIT_ENV.COM") .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ @SSL$COM:SSL$INIT_ENV.COM
|
||||||
|
$ ELSE
|
||||||
|
$ SAY BELL, "Unable to locate SSL$COM:SSL$INIT_ENV.COM ..."
|
||||||
|
$ GOTO EXIT
|
||||||
|
$ ENDIF
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Display the Page Header
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ INIT_TERM
|
||||||
|
$ BCOLOR = BGD
|
||||||
|
$ FCOLOR = FGD + RED
|
||||||
|
$ COLOR = ESC + "[''BCOLOR';''FCOLOR'm"
|
||||||
|
$!
|
||||||
|
$ TEXT = "SSL Certificate Tool"
|
||||||
|
$ COL = (TT_COLS - (F$LENGTH (TEXT) * 2)) / 4
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[01;01H", CSCR
|
||||||
|
$ SAY ESC + "[02;''COL'H", COLOR, WIDE, TEXT, NORM
|
||||||
|
$!
|
||||||
|
$ TEXT = "Create Certification Authority"
|
||||||
|
$ COL = (TT_COLS - F$LENGTH (TEXT)) / 2
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[04;01H"
|
||||||
|
$ SAY ESC + "[04;''COL'H", COLOR, TEXT, NORM
|
||||||
|
$!
|
||||||
|
$ ROW = 6
|
||||||
|
$ COL = 2
|
||||||
|
$ TOP_ROW = ROW
|
||||||
|
$ MSG_ROW = TT_ROWS - 1
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Initialize the Request Data
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ IF F$SEARCH ("''SSL_CONF_FILE'") .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H", BLNK, " Reading Configuration ...", NORM
|
||||||
|
$ ELSE
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H", BLNK, " Initializing Configuration ...", NORM
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ _request_name = "req"
|
||||||
|
$!
|
||||||
|
$ _distinguished_name = "CA_distinguished_name"
|
||||||
|
$ _distinguished_name_upd = "Y"
|
||||||
|
$!
|
||||||
|
$ _default_bits = "1024"
|
||||||
|
$ _default_bits_upd = "Y"
|
||||||
|
$!
|
||||||
|
$ _default_days = "1825"
|
||||||
|
$ _default_days_upd = "Y"
|
||||||
|
$!
|
||||||
|
$ _default_keyfile = "SSL$KEY:SERVER_CA.KEY"
|
||||||
|
$ _default_keyfile_upd = "Y"
|
||||||
|
$!
|
||||||
|
$ _default_crtfile = "SSL$CRT:SERVER_CA.CRT"
|
||||||
|
$ _default_crtfile_upd = "Y"
|
||||||
|
$!
|
||||||
|
$ _countryName_prompt = "Country Name ?"
|
||||||
|
$ _countryName_min = "2"
|
||||||
|
$ _countryName_max = "2"
|
||||||
|
$ _countryName_default = "US"
|
||||||
|
$ _countryName_upd = "Y"
|
||||||
|
$ _countryName_cnt = 4
|
||||||
|
$!
|
||||||
|
$ _0organizationName_prompt = "Organization Name ?"
|
||||||
|
$ _0organizationName_default = ""
|
||||||
|
$ _0organizationName_upd = "Y"
|
||||||
|
$ _0organizationName_cnt = 2
|
||||||
|
$!
|
||||||
|
$ _organizationalUnitName_prompt = "Organization Unit Name ?"
|
||||||
|
$ _organizationalUnitName_default = ""
|
||||||
|
$ _organizationalUnitName_upd = "Y"
|
||||||
|
$ _organizationalUnitName_cnt = 2
|
||||||
|
$!
|
||||||
|
$ _commonName_prompt = "Common Name ?"
|
||||||
|
$ _commonName_max = "64"
|
||||||
|
$ _commonName_default = "CA Authority"
|
||||||
|
$ _commonName_upd = "Y"
|
||||||
|
$ _commonName_cnt = 3
|
||||||
|
$!
|
||||||
|
$ IF F$SEARCH ("''SSL_CONF_FILE'") .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ GET_CONF_DATA "[''_request_name']#distinguished_name"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _distinguished_name = SSL_CONF_DATA
|
||||||
|
$ _distinguished_name_upd = "N"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ GET_CONF_DATA "[''_request_name']#default_bits"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _default_bits = SSL_CONF_DATA
|
||||||
|
$ _default_bits_upd = "N"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ GET_CONF_DATA "[''_request_name']#default_days"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _default_days = SSL_CONF_DATA
|
||||||
|
$ _default_days_upd = "N"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ GET_CONF_DATA "[''_request_name']#default_keyfile"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _default_keyfile = F$PARSE (SSL_CONF_DATA,"SSL$ROOT:",,"DEVICE") + -
|
||||||
|
F$PARSE (SSL_CONF_DATA,"[KEY]",,"DIRECTORY") + -
|
||||||
|
F$PARSE (SSL_CONF_DATA,"SERVER",,"NAME") + -
|
||||||
|
F$PARSE (SSL_CONF_DATA,".KEY",,"TYPE")
|
||||||
|
$ _default_keyfile_upd = "N"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ GET_CONF_DATA "[''_request_name']#default_crtfile"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _default_crtfile = F$PARSE (SSL_CONF_DATA,"SSL$ROOT:",,"DEVICE") + -
|
||||||
|
F$PARSE (SSL_CONF_DATA,"[CRT]",,"DIRECTORY") + -
|
||||||
|
F$PARSE (SSL_CONF_DATA,"SERVER",,"NAME") + -
|
||||||
|
F$PARSE (SSL_CONF_DATA,".CRT",,"TYPE")
|
||||||
|
$ _default_crtfile_upd = "N"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ CTR = 0
|
||||||
|
$ GET_CONF_DATA "[''_distinguished_name']#countryName"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _countryName_prompt = SSL_CONF_DATA
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ ENDIF
|
||||||
|
$ GET_CONF_DATA "[''_distinguished_name']#countryName_min"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _countryName_min = SSL_CONF_DATA
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ ENDIF
|
||||||
|
$ GET_CONF_DATA "[''_distinguished_name']#countryName_max"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _countryName_max = SSL_CONF_DATA
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ ENDIF
|
||||||
|
$ GET_CONF_DATA "[''_distinguished_name']#countryName_default"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _countryName_default = SSL_CONF_DATA
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ ENDIF
|
||||||
|
$ IF _countryName_cnt .EQ. CTR THEN _countryName_upd = "N"
|
||||||
|
$!
|
||||||
|
$ CTR = 0
|
||||||
|
$ GET_CONF_DATA "[''_distinguished_name']#0.organizationName"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _0organizationName_prompt = SSL_CONF_DATA
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ ENDIF
|
||||||
|
$ GET_CONF_DATA "[''_distinguished_name']#0.organizationName_default"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _0organizationName_default = SSL_CONF_DATA
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ ENDIF
|
||||||
|
$ IF _0organizationName_cnt .EQ. CTR THEN _0organizationName_upd = "N"
|
||||||
|
$!
|
||||||
|
$ CTR = 0
|
||||||
|
$ GET_CONF_DATA "[''_distinguished_name']#organizationalUnitName"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _organizationalUnitName_prompt = SSL_CONF_DATA
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ ENDIF
|
||||||
|
$ GET_CONF_DATA "[''_distinguished_name']#organizationalUnitName_default"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _organizationalUnitName_default = SSL_CONF_DATA
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ ENDIF
|
||||||
|
$ IF _organizationalUnitName_cnt .EQ. CTR THEN _organizationalUnitName_upd = "N"
|
||||||
|
$!
|
||||||
|
$ CTR = 0
|
||||||
|
$ GET_CONF_DATA "[''_distinguished_name']#commonName"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _commonName_prompt = SSL_CONF_DATA
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ ENDIF
|
||||||
|
$ GET_CONF_DATA "[''_distinguished_name']#commonName_max"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _commonName_max = SSL_CONF_DATA
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ ENDIF
|
||||||
|
$ GET_CONF_DATA "[''_distinguished_name']#commonName_default"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _commonName_default = SSL_CONF_DATA
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ ENDIF
|
||||||
|
$ IF _commonName_cnt .EQ. CTR THEN _commonName_upd = "N"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ SET_USER_DATA "[]#pem_pass_phrase#-##PEM Pass Phrase ?#P#1###Y#Y"
|
||||||
|
$ SET_USER_DATA "[''_request_name']#default_bits#D#''_default_bits'#Encryption Bits ?#I###''_default_bits_upd'#Y#N"
|
||||||
|
$ SET_USER_DATA "[''_request_name']#default_days#D#''_default_days'#Default Days ?#I###''_default_days_upd'#Y#N"
|
||||||
|
$ SET_USER_DATA "[''_request_name']#default_keyfile#D#''_default_keyfile'#CA certificate Key File ?#F###''_default_keyfile_upd'#Y#N"
|
||||||
|
$ SET_USER_DATA "[''_request_name']#default_crtfile#D#''_default_crtfile'#CA certificate File ?#F###''_default_crtfile_upd'#Y#N"
|
||||||
|
$ SET_USER_DATA "[''_request_name']#distinguished_name#D#''_distinguished_name'##S###''_distinguished_name_upd'#N#N"
|
||||||
|
$ SET_USER_DATA "[''_distinguished_name']#countryName#P#''_countryName_default'#''_countryName_prompt'#S#''_countryName_min'#''_countryName_max'#''_countryName_upd'#Y#N"
|
||||||
|
$ SET_USER_DATA "[''_distinguished_name']#0.organizationName#P#''_0organizationName_default'#''_0organizationName_prompt'#S###''_0organizationName_upd'#Y#N"
|
||||||
|
$ SET_USER_DATA "[''_distinguished_name']#organizationalUnitName#P#''_organizationalUnitName_default'#''_organizationalUnitName_prompt'#S###''_organizationUnitName_upd'#Y#N"
|
||||||
|
$ SET_USER_DATA "[''_distinguished_name']#commonName#P#''_commonName_default'#''_commonName_prompt'#S##''_commonName_max'#''_commonName_upd'#Y#N"
|
||||||
|
$ SET_USER_DATA "[]#display_certificate#-#N#Display the CA certificate ?#S##1##Y#N"
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H", CEOS
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Confirm/Update the SSL Configuration Data
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ CTR = 1
|
||||||
|
$!
|
||||||
|
$PROMPT_LOOP:
|
||||||
|
$!
|
||||||
|
$ IF CTR .LE. SSL_USER_DATA_MAX
|
||||||
|
$ THEN
|
||||||
|
$ KEY = F$ELEMENT (0,"#",SSL_USER_DATA_'CTR') ! Key Name
|
||||||
|
$ ITM = F$ELEMENT (1,"#",SSL_USER_DATA_'CTR') ! Item Name
|
||||||
|
$ VAL = F$ELEMENT (2,"#",SSL_USER_DATA_'CTR') ! Item Value Contains Default or Prompt
|
||||||
|
$ DEF = F$ELEMENT (3,"#",SSL_USER_DATA_'CTR') ! Default Value
|
||||||
|
$ PRM = F$ELEMENT (4,"#",SSL_USER_DATA_'CTR') ! Prompt Value
|
||||||
|
$ TYP = F$ELEMENT (5,"#",SSL_USER_DATA_'CTR') ! Value Type
|
||||||
|
$ MIN = F$ELEMENT (6,"#",SSL_USER_DATA_'CTR') ! Value Minimum Length
|
||||||
|
$ MAX = F$ELEMENT (7,"#",SSL_USER_DATA_'CTR') ! Value Maximum Length
|
||||||
|
$ UPD = F$ELEMENT (8,"#",SSL_USER_DATA_'CTR') ! Entry Updated ?
|
||||||
|
$ REQ = F$ELEMENT (9,"#",SSL_USER_DATA_'CTR') ! Entry Required for Input ?
|
||||||
|
$ CFM = F$ELEMENT (10,"#",SSL_USER_DATA_'CTR')! Confirm Input ?
|
||||||
|
$ CONFIRMED = 0
|
||||||
|
$ IF REQ .EQS. "N"
|
||||||
|
$ THEN
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ GOTO PROMPT_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$ IF ROW .GT. MSG_ROW - 2
|
||||||
|
$ THEN
|
||||||
|
$ SAY ESC + "[''TOP_ROW';01H", CEOS
|
||||||
|
$ ROW = TOP_ROW
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$CONFIRM_LOOP:
|
||||||
|
$!
|
||||||
|
$ IF PRM .EQS. ""
|
||||||
|
$ THEN
|
||||||
|
$ PROMPT = ESC + "[''ROW';''COL'H''ITM' ? [''DEF'] ''CEOL'"
|
||||||
|
$ ELSE
|
||||||
|
$ PROMPT = ESC + "[''ROW';''COL'H''PRM' [''DEF'] ''CEOL'"
|
||||||
|
$ ENDIF
|
||||||
|
$ IF TYP .EQS. "P" THEN SET TERMINAL /NOECHO
|
||||||
|
$ ASK "''PROMPT'" ANS /END_OF_FILE=EXIT
|
||||||
|
$ IF TYP .EQS. "P" THEN SET TERMINAL /ECHO
|
||||||
|
$ ANS = F$EDIT (ANS,"TRIM")
|
||||||
|
$ IF ANS .EQS. "" THEN ANS = DEF
|
||||||
|
$ IF TYP .EQS. "F"
|
||||||
|
$ THEN
|
||||||
|
$ ANS = F$PARSE ("''ANS'","''DEF'",,,"SYNTAX_ONLY")
|
||||||
|
$ ENDIF
|
||||||
|
$ IF TYP .EQS. "I" .AND. F$TYPE (ANS) .NES. "INTEGER"
|
||||||
|
$ THEN
|
||||||
|
$ CALL INVALID_ENTRY
|
||||||
|
$ SAY ESC + "[''ROW';01H", CEOS
|
||||||
|
$ GOTO PROMPT_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$ IF (TYP .EQS. "S" .OR. TYP .EQS. "P") .AND. -
|
||||||
|
((MIN .NES. "" .AND. F$LENGTH (ANS) .LT. F$INTEGER(MIN)) .OR. -
|
||||||
|
(MAX .NES. "" .AND. F$LENGTH (ANS) .GT. F$INTEGER(MAX)))
|
||||||
|
$ THEN
|
||||||
|
$ CALL INVALID_ENTRY
|
||||||
|
$ SAY ESC + "[''ROW';01H", CEOS
|
||||||
|
$ IF TYP .EQS. "S" THEN GOTO PROMPT_LOOP
|
||||||
|
$ IF TYP .EQS. "P" THEN GOTO CONFIRM_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$ ROW = ROW + 1
|
||||||
|
$ IF CFM .EQS. "Y"
|
||||||
|
$ THEN
|
||||||
|
$ IF CONFIRMED .EQ. 0
|
||||||
|
$ THEN
|
||||||
|
$ CONFIRMED = 1
|
||||||
|
$ CONFIRMED_ANS = ANS
|
||||||
|
$ PRM = "Confirm ''PRM'"
|
||||||
|
$ GOTO CONFIRM_LOOP
|
||||||
|
$ ELSE
|
||||||
|
$ IF ANS .NES. CONFIRMED_ANS
|
||||||
|
$ THEN
|
||||||
|
$ CALL INVALID_ENTRY
|
||||||
|
$ ROW = ROW - 2
|
||||||
|
$ SAY ESC + "[''ROW';01H", CEOS
|
||||||
|
$ GOTO PROMPT_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$ ENDIF
|
||||||
|
$ ENDIF
|
||||||
|
$ IF ANS .NES. DEF THEN SSL_USER_DATA_'CTR' = "''KEY'#''ITM'#''VAL'#''ANS'#''PRM'#''TYP'#''MIN'#''MAX'#Y#''REQ'#''CFM'"
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ GOTO PROMPT_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Save the SSL Configuration Data
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ CTR = 1
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H", BLNK, " Saving Configuration ...", NORM
|
||||||
|
$!
|
||||||
|
$SAVE_CONF_LOOP:
|
||||||
|
$!
|
||||||
|
$ IF CTR .LE. SSL_USER_DATA_MAX
|
||||||
|
$ THEN
|
||||||
|
$ KEY = F$ELEMENT (0,"#",SSL_USER_DATA_'CTR') ! Key Name
|
||||||
|
$ ITM = F$ELEMENT (1,"#",SSL_USER_DATA_'CTR') ! Item Name
|
||||||
|
$ VAL = F$ELEMENT (2,"#",SSL_USER_DATA_'CTR') ! Item Value Contains Default or Prompt
|
||||||
|
$ DEF = F$ELEMENT (3,"#",SSL_USER_DATA_'CTR') ! Default Value
|
||||||
|
$ PRM = F$ELEMENT (4,"#",SSL_USER_DATA_'CTR') ! Prompt Value
|
||||||
|
$ TYP = F$ELEMENT (5,"#",SSL_USER_DATA_'CTR') ! Value Type
|
||||||
|
$ MIN = F$ELEMENT (6,"#",SSL_USER_DATA_'CTR') ! Value Minimum Length
|
||||||
|
$ MAX = F$ELEMENT (7,"#",SSL_USER_DATA_'CTR') ! Value Maximum Length
|
||||||
|
$ UPD = F$ELEMENT (8,"#",SSL_USER_DATA_'CTR') ! Entry Updated ?
|
||||||
|
$ REQ = F$ELEMENT (9,"#",SSL_USER_DATA_'CTR') ! Entry Required for Input ?
|
||||||
|
$ CFM = F$ELEMENT (10,"#",SSL_USER_DATA_'CTR')! Confirm Input ?
|
||||||
|
$ IF UPD .NES. "Y" .OR. VAL .EQS. "-"
|
||||||
|
$ THEN
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ GOTO SAVE_CONF_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$ IF VAL .EQS. "D"
|
||||||
|
$ THEN
|
||||||
|
$ SET_CONF_DATA "''KEY'#''ITM'" "''DEF'"
|
||||||
|
$ ELSE
|
||||||
|
$ SET_CONF_DATA "''KEY'#''ITM'" "''PRM'"
|
||||||
|
$ SET_CONF_DATA "''KEY'#''ITM'_default" "''DEF'"
|
||||||
|
$ ENDIF
|
||||||
|
$ IF MIN .NES. "" THEN SET_CONF_DATA "''KEY'#''ITM'_min" "''MIN'"
|
||||||
|
$ IF MAX .NES. "" THEN SET_CONF_DATA "''KEY'#''ITM'_max" "''MAX'"
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ GOTO SAVE_CONF_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ PURGE /NOLOG /NOCONFIRM 'SSL_CONF_FILE'
|
||||||
|
$ RENAME 'SSL_CONF_FILE'; ;1
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H", CEOS
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Create the Certificiate Authority
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H", BLNK, " Creating Certificate Authority ...", NORM
|
||||||
|
$!
|
||||||
|
$ X1 = 2
|
||||||
|
$ Y1 = TOP_ROW
|
||||||
|
$ X2 = TT_COLS - 2
|
||||||
|
$ Y2 = MSG_ROW - 1
|
||||||
|
$!
|
||||||
|
$ GET_USER_DATA "[''_request_name']#default_days"
|
||||||
|
$ _default_days = SSL_USER_DATA
|
||||||
|
$ GET_USER_DATA "[''_request_name']#default_keyfile"
|
||||||
|
$ _default_keyfile = SSL_USER_DATA
|
||||||
|
$ GET_USER_DATA "[''_request_name']#default_crtfile"
|
||||||
|
$ _default_crtfile = SSL_USER_DATA
|
||||||
|
$ GET_USER_DATA "[]#pem_pass_phrase"
|
||||||
|
$ _pem_pass_phrase = SSL_USER_DATA
|
||||||
|
$ GET_USER_DATA "[]#display_certificate"
|
||||||
|
$ _display_certificate = SSL_USER_DATA
|
||||||
|
$!
|
||||||
|
$ DEFINE /USER /NOLOG SYS$ERROR NL:
|
||||||
|
$ DEFINE /USER /NOLOG SYS$OUTPUT NL:
|
||||||
|
$ SHOW SYSTEM /FULL /OUT=SYS$LOGIN:SSL_REQ_'PID'.RND
|
||||||
|
$!
|
||||||
|
$ OPEN /WRITE OFILE SYS$LOGIN:SSL_REQ_'PID'.COM
|
||||||
|
$ WRITE OFILE "$ DEFINE /USER /NOLOG RANDFILE SYS$LOGIN:SSL_REQ_''PID'.RND"
|
||||||
|
$ WRITE OFILE "$ DEFINE /USER /NOLOG SYS$ERROR SYS$LOGIN:SSL_REQ_''PID'.LOG"
|
||||||
|
$ WRITE OFILE "$ DEFINE /USER /NOLOG SYS$OUTPUT SYS$LOGIN:SSL_REQ_''PID'.LOG"
|
||||||
|
$ WRITE OFILE "$ DEFINE /USER /NOLOG SYS$COMMAND SYS$INPUT"
|
||||||
|
$ WRITE OFILE "$ OPENSSL req -config ''SSL_CONF_FILE' -new -x509 -days ''_default_days' -keyout ''_default_keyfile' -out ''_default_crtfile'"
|
||||||
|
$ WRITE OFILE "''_pem_pass_phrase'"
|
||||||
|
$ WRITE OFILE "''_pem_pass_phrase'"
|
||||||
|
$ WRITE OFILE ""
|
||||||
|
$ WRITE OFILE ""
|
||||||
|
$ WRITE OFILE ""
|
||||||
|
$ WRITE OFILE ""
|
||||||
|
$ CLOSE OFILE
|
||||||
|
$!
|
||||||
|
$ @SYS$LOGIN:SSL_REQ_'PID'.COM
|
||||||
|
$!
|
||||||
|
$ DELETE/NOLOG/NOCONFIRM SYS$LOGIN:SSL_REQ_'PID'.RND;*
|
||||||
|
$ DELETE/NOLOG/NOCONFIRM SYS$LOGIN:SSL_REQ_'PID'.COM;*
|
||||||
|
$!
|
||||||
|
$ DEFINE /USER /NOLOG SYS$ERROR NL:
|
||||||
|
$ DEFINE /USER /NOLOG SYS$OUTPUT NL:
|
||||||
|
$ SEARCH SYS$LOGIN:SSL_REQ_'PID'.LOG /OUT=SYS$LOGIN:SSL_REQ_'PID'.ERR ":error:"
|
||||||
|
$ IF F$SEARCH ("SYS$LOGIN:SSL_REQ_''PID'.ERR") .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ IF F$FILE_ATTRIBUTE ("SYS$LOGIN:SSL_REQ_''PID'.ERR","ALQ") .NE. 0
|
||||||
|
$ THEN
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_REQ_'PID'.ERR;*
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H''BELL'''CEOS'"
|
||||||
|
$ SHOW_FILE "SYS$LOGIN:SSL_REQ_''PID'.LOG" 'X1' 'Y1' 'X2' 'Y2' "< ERROR >"
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_REQ_'PID'.LOG;*
|
||||||
|
$ GOTO EXIT
|
||||||
|
$ ENDIF
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_REQ_'PID'.ERR;*
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_REQ_'PID'.LOG;*
|
||||||
|
$!
|
||||||
|
$ IF F$EDIT (_display_certificate,"TRIM,UPCASE") .EQS. "Y"
|
||||||
|
$ THEN
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H", BLNK, " Generating Output ...", NORM, CEOL
|
||||||
|
$!
|
||||||
|
$ OPEN /WRITE OFILE SYS$LOGIN:SSL_X509_'PID'.COM
|
||||||
|
$ WRITE OFILE "$ DEFINE /USER /NOLOG SYS$ERROR SYS$LOGIN:SSL_X509_''PID'.LOG"
|
||||||
|
$ WRITE OFILE "$ DEFINE /USER /NOLOG SYS$OUTPUT SYS$LOGIN:SSL_X509_''PID'.LOG"
|
||||||
|
$ WRITE OFILE "$ DEFINE /USER /NOLOG SYS$COMMAND SYS$INPUT"
|
||||||
|
$ WRITE OFILE "$ OPENSSL x509 -noout -text -in ''_default_crtfile'"
|
||||||
|
$ CLOSE OFILE
|
||||||
|
$!
|
||||||
|
$ @SYS$LOGIN:SSL_X509_'PID'.COM
|
||||||
|
$!
|
||||||
|
$ DELETE/NOLOG/NOCONFIRM SYS$LOGIN:SSL_X509_'PID'.COM;*
|
||||||
|
$!
|
||||||
|
$ DEFINE /USER /NOLOG SYS$ERROR NL:
|
||||||
|
$ DEFINE /USER /NOLOG SYS$OUTPUT NL:
|
||||||
|
$ SEARCH SYS$LOGIN:SSL_X509_'PID'.LOG /OUT=SYS$LOGIN:SSL_X509_'PID'.ERR ":error:"
|
||||||
|
$ IF F$SEARCH ("SYS$LOGIN:SSL_X509_''PID'.ERR") .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ IF F$FILE_ATTRIBUTE ("SYS$LOGIN:SSL_X509_''PID'.ERR","ALQ") .NE. 0
|
||||||
|
$ THEN
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_X509_'PID'.ERR;*
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H''BELL'''CEOS'"
|
||||||
|
$ SHOW_FILE "SYS$LOGIN:SSL_X509_''PID'.LOG" 'X1' 'Y1' 'X2' 'Y2' "< ERROR >"
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_X509_'PID'.LOG;*
|
||||||
|
$ GOTO EXIT
|
||||||
|
$ ENDIF
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_X509_'PID'.ERR;*
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H''CEOS'"
|
||||||
|
$ SHOW_FILE "SYS$LOGIN:SSL_X509_''PID'.LOG" 'X1' 'Y1' 'X2' 'Y2' "< ''_default_crtfile' >"
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_X509_'PID'.LOG;*
|
||||||
|
$ GOTO EXIT
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ TEXT = "Press return to continue"
|
||||||
|
$ COL = (TT_COLS - F$LENGTH (TEXT)) / 2
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H", CEOS
|
||||||
|
$ PROMPT = ESC + "[''MSG_ROW';''COL'H''TEXT'"
|
||||||
|
$ ASK "''PROMPT'" OPT
|
||||||
|
$!
|
||||||
|
$GOTO EXIT
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Set the User Data
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$SET_USER_DATA: SUBROUTINE
|
||||||
|
$!
|
||||||
|
$ IF F$TYPE (SSL_USER_DATA_MAX) .EQS. ""
|
||||||
|
$ THEN
|
||||||
|
$ SSL_USER_DATA_MAX == 1
|
||||||
|
$ ELSE
|
||||||
|
$ SSL_USER_DATA_MAX == SSL_USER_DATA_MAX + 1
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ SSL_USER_DATA_'SSL_USER_DATA_MAX' == "''P1'"
|
||||||
|
$!
|
||||||
|
$ EXIT
|
||||||
|
$!
|
||||||
|
$ ENDSUBROUTINE
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Get the User Data
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$GET_USER_DATA: SUBROUTINE
|
||||||
|
$!
|
||||||
|
$ CTR = 1
|
||||||
|
$ USER_KEY = F$ELEMENT (0,"#",P1)
|
||||||
|
$ USER_ITM = F$ELEMENT (1,"#",P1)
|
||||||
|
$!
|
||||||
|
$GET_USER_DATA_LOOP:
|
||||||
|
$!
|
||||||
|
$ IF CTR .LE. SSL_USER_DATA_MAX
|
||||||
|
$ THEN
|
||||||
|
$ KEY = F$ELEMENT (0,"#",SSL_USER_DATA_'CTR') ! Key Name
|
||||||
|
$ ITM = F$ELEMENT (1,"#",SSL_USER_DATA_'CTR') ! Item Name
|
||||||
|
$ VAL = F$ELEMENT (2,"#",SSL_USER_DATA_'CTR') ! Item Value Contains Default or Prompt
|
||||||
|
$ DEF = F$ELEMENT (3,"#",SSL_USER_DATA_'CTR') ! Default Value
|
||||||
|
$ PRM = F$ELEMENT (4,"#",SSL_USER_DATA_'CTR') ! Prompt Value
|
||||||
|
$ IF USER_KEY .NES. KEY .OR. USER_ITM .NES. ITM
|
||||||
|
$ THEN
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ GOTO GET_USER_DATA_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$ IF VAL .EQS. "-" THEN SSL_USER_DATA == "''DEF'"
|
||||||
|
$ IF VAL .EQS. "D" THEN SSL_USER_DATA == "''DEF'"
|
||||||
|
$ IF VAL .EQS. "P" THEN SSL_USER_DATA == "''PRM'"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ EXIT
|
||||||
|
$!
|
||||||
|
$ ENDSUBROUTINE
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Delete the User Data
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$DEL_USER_DATA: SUBROUTINE
|
||||||
|
$!
|
||||||
|
$ IF F$TYPE (SSL_USER_DATA_MAX) .EQS. "" THEN GOTO DEL_USER_DATA_END
|
||||||
|
$!
|
||||||
|
$DEL_USER_DATA_LOOP:
|
||||||
|
$!
|
||||||
|
$ IF F$TYPE (SSL_USER_DATA_'SSL_USER_DATA_MAX') .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ DELETE /SYMBOL /GLOBAL SSL_USER_DATA_'SSL_USER_DATA_MAX'
|
||||||
|
$ SSL_USER_DATA_MAX == SSL_USER_DATA_MAX - 1
|
||||||
|
$ GOTO DEL_USER_DATA_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ DELETE /SYMBOL /GLOBAL SSL_USER_DATA_MAX
|
||||||
|
$!
|
||||||
|
$DEL_USER_DATA_END:
|
||||||
|
$!
|
||||||
|
$ IF F$TYPE (SSL_USER_DATA) .NES. "" THEN DELETE /SYMBOL /GLOBAL SSL_USER_DATA
|
||||||
|
$!
|
||||||
|
$ EXIT
|
||||||
|
$!
|
||||||
|
$ ENDSUBROUTINE
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Display the invalid entry
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$INVALID_ENTRY: SUBROUTINE
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H", BELL, " Invalid Entry, Try again ...''CEOL'"
|
||||||
|
$ Wait 00:00:01.5
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H", CEOL
|
||||||
|
$!
|
||||||
|
$ EXIT
|
||||||
|
$!
|
||||||
|
$ ENDSUBROUTINE
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Exit the procedure
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$EXIT:
|
||||||
|
$!
|
||||||
|
$ DEFINE /USER /NOLOG SYS$ERROR NL:
|
||||||
|
$ DEFINE /USER /NOLOG SYS$OUTPUT NL:
|
||||||
|
$ CLOSE OFILE
|
||||||
|
$!
|
||||||
|
$ DEL_USER_DATA
|
||||||
|
$!
|
||||||
|
$ IF F$TYPE (SSL_CONF_DATA) .NES. "" THEN DELETE /SYMBOL /GLOBAL SSL_CONF_DATA
|
||||||
|
$!
|
||||||
|
$ IF F$GETDVI ("TT:","TT_NOECHO") .AND. .NOT. TT_NOECHO THEN SET TERMINAL /ECHO
|
||||||
|
$!
|
||||||
|
$ IF F$SEARCH ("SYS$LOGIN:SSL_REQ_''PID'.%%%;*") .NES. "" THEN DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_REQ_'PID'.%%%;*
|
||||||
|
$ IF F$SEARCH ("SYS$LOGIN:SSL_X509_''PID'.%%%;*") .NES. "" THEN DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_X509_'PID'.%%%;*
|
||||||
|
$!
|
||||||
|
$ Verify = F$VERIFY (Verify)
|
||||||
|
$!
|
||||||
|
$ EXIT
|
||||||
101
VMS/cert_tool/ssl$auto_cert.com
Normal file
101
VMS/cert_tool/ssl$auto_cert.com
Normal file
@@ -0,0 +1,101 @@
|
|||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! SSL$AUTO_CERT.COM - SSL Automatic Self-Signed Certificate procedure
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ Verify = F$VERIFY (0)
|
||||||
|
$!
|
||||||
|
$ Set NoOn
|
||||||
|
$ Set NoControl=Y
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Define Symbols
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ OPENSSL :== $ SSL$EXE:OPENSSL
|
||||||
|
$ HOSTNAME :== $ SSL$EXE:SSL$HOSTNAME
|
||||||
|
$!
|
||||||
|
$ HOSTNAME -s HOST_NAME
|
||||||
|
$ PID = F$GETJPI ("","PID")
|
||||||
|
$ USER = F$EDIT (F$GETJPI ("","USERNAME"),"TRIM")
|
||||||
|
$ KEY_FILE = "SSL$KEY:SERVER.KEY"
|
||||||
|
$ CRT_FILE = "SSL$CRT:SERVER.CRT"
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Create a Temporary SSL Configuration
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ OPEN /WRITE CFILE SYS$LOGIN:SSL_'PID'.CNF
|
||||||
|
$ WRITE CFILE "[req]"
|
||||||
|
$ WRITE CFILE "default_bits = 1024"
|
||||||
|
$ WRITE CFILE "distinguished_name = REQ_distinguished_name"
|
||||||
|
$ WRITE CFILE "[REQ_distinguished_name]"
|
||||||
|
$ WRITE CFILE "countryName = Country Name ?"
|
||||||
|
$ WRITE CFILE "countryName_default = "
|
||||||
|
$ WRITE CFILE "stateOrProvinceName = State or Province Name ?"
|
||||||
|
$ WRITE CFILE "stateOrProvinceName_default = "
|
||||||
|
$ WRITE CFILE "localityName = City Name ?"
|
||||||
|
$ WRITE CFILE "localityName_default = "
|
||||||
|
$ WRITE CFILE "0.organizationName = Organization Name ?"
|
||||||
|
$ WRITE CFILE "0.organizationName_default = "
|
||||||
|
$ WRITE CFILE "organizationalUnitName = Organization Unit Name ?
|
||||||
|
$ WRITE CFILE "organizationalUnitName_default = "
|
||||||
|
$ WRITE CFILE "commonName = Common Name ?"
|
||||||
|
$ WRITE CFILE "commonName_default = ''HOST_NAME'"
|
||||||
|
$ WRITE CFILE "emailAddress = Email Address ?"
|
||||||
|
$ WRITE CFILE "emailAddress_default = ''USER'@''HOST_NAME'"
|
||||||
|
$ CLOSE CFILE
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Create the Self-Signed Server Certificiate
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ DEFINE /USER /NOLOG SYS$ERROR NL:
|
||||||
|
$ DEFINE /USER /NOLOG SYS$OUTPUT NL:
|
||||||
|
$ SHOW SYSTEM /FULL /OUT=SYS$LOGIN:SSL_'PID'.RND
|
||||||
|
$!
|
||||||
|
$ OPEN /WRITE OFILE SYS$LOGIN:SSL_'PID'.COM
|
||||||
|
$ WRITE OFILE "$ DEFINE /USER /NOLOG RANDFILE SYS$LOGIN:SSL_''PID'.RND"
|
||||||
|
$ WRITE OFILE "$ DEFINE /USER /NOLOG SYS$ERROR SYS$LOGIN:SSL_''PID'.LOG"
|
||||||
|
$ WRITE OFILE "$ DEFINE /USER /NOLOG SYS$OUTPUT SYS$LOGIN:SSL_''PID'.LOG"
|
||||||
|
$ WRITE OFILE "$ DEFINE /USER /NOLOG SYS$COMMAND SYS$INPUT"
|
||||||
|
$ WRITE OFILE "$ OPENSSL req -nodes -new -days 30 -x509 -config SYS$LOGIN:SSL_''PID'.CNF -keyout ''KEY_FILE' -out ''CRT_FILE'"
|
||||||
|
$ WRITE OFILE ""
|
||||||
|
$ WRITE OFILE ""
|
||||||
|
$ WRITE OFILE ""
|
||||||
|
$ WRITE OFILE ""
|
||||||
|
$ WRITE OFILE ""
|
||||||
|
$ WRITE OFILE ""
|
||||||
|
$ WRITE OFILE ""
|
||||||
|
$ CLOSE OFILE
|
||||||
|
$!
|
||||||
|
$ @SYS$LOGIN:SSL_'PID'.COM
|
||||||
|
$!
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_'PID'.CNF;*
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_'PID'.RND;*
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_'PID'.COM;*
|
||||||
|
$!
|
||||||
|
$ DEFINE /USER /NOLOG SYS$ERROR NL:
|
||||||
|
$ DEFINE /USER /NOLOG SYS$OUTPUT NL:
|
||||||
|
$ SEARCH SYS$LOGIN:SSL_'PID'.LOG /OUT=SYS$LOGIN:SSL_'PID'.ERR ":error:"
|
||||||
|
$!
|
||||||
|
$ IF F$SEARCH ("SYS$LOGIN:SSL_''PID'.ERR") .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ IF F$FILE_ATTRIBUTE ("SYS$LOGIN:SSL_''PID'.ERR","ALQ") .NE. 0
|
||||||
|
$ THEN
|
||||||
|
$ TYPE SYS$LOGIN:SSL_'PID'.LOG
|
||||||
|
$ ENDIF
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_'PID'.ERR;*
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_'PID'.LOG;*
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Exit
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$EXIT:
|
||||||
|
$!
|
||||||
|
$ Verify = F$VERIFY (Verify)
|
||||||
|
$!
|
||||||
|
$ EXIT
|
||||||
231
VMS/cert_tool/ssl$cert_tool.com
Normal file
231
VMS/cert_tool/ssl$cert_tool.com
Normal file
@@ -0,0 +1,231 @@
|
|||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! SSL$CERT_TOOL.COM - SSL Certificate Tool procedure
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ Verify = F$VERIFY (0)
|
||||||
|
$ Set NoOn
|
||||||
|
$ Set NoControl=Y
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Description
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$! This procedure provides the user a menu from which they can choose desired
|
||||||
|
$! SSL Certificate processing.
|
||||||
|
$!
|
||||||
|
$! There are no parameters used.
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Define symbols
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ DELETE := DELETE
|
||||||
|
$ SAY := WRITE SYS$OUTPUT
|
||||||
|
$ ASK := READ SYS$COMMAND /END_OF_FILE=EXIT /PROMPT=
|
||||||
|
$ On Control_Y THEN GOTO EXIT
|
||||||
|
$ Set Control=Y
|
||||||
|
$!
|
||||||
|
$ TT_ROWS = f$getdvi ("TT:","TT_PAGE")
|
||||||
|
$ TT_COLS = f$getdvi ("TT:","DEVBUFSIZ")
|
||||||
|
$!
|
||||||
|
$ SET_MENU_DATA := CALL SET_MENU_DATA
|
||||||
|
$ DEL_MENU_DATA := CALL DEL_MENU_DATA
|
||||||
|
$!
|
||||||
|
$ ESC[0,8] = 27 ! Set the Escape Character
|
||||||
|
$ BELL[0,8] = 7 ! Ring the terminal Bell
|
||||||
|
$ RED = 1 ! Color - Red
|
||||||
|
$ FGD = 30 ! Foreground
|
||||||
|
$ BGD = 0 ! Background
|
||||||
|
$ CSCR = ESC + "[2J" ! Clear the Screen
|
||||||
|
$ CEOS = ESC + "[0J" ! Clear to the End of the Screen
|
||||||
|
$ CEOL = ESC + "[0K" ! Clear to the End of the Line
|
||||||
|
$ NORM = ESC + "[0m" ! Turn Attributes off
|
||||||
|
$ BOLD = ESC + "[1m" ! Turn on BOLD Attribute
|
||||||
|
$ WIDE = ESC + "#6" ! Turn on WIDE Attribute
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Run the SSL setup if it hasn't been run yet
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ IF F$TRNLNM ("SSL$CA_CONF") .EQS. ""
|
||||||
|
$ THEN
|
||||||
|
$ IF F$SEARCH ("SSL$COM:SSL$INIT_ENV.COM") .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ @SSL$COM:SSL$INIT_ENV.COM
|
||||||
|
$ ELSE
|
||||||
|
$ SAY BELL, "Unable to locate SSL$COM:SSL$INIT_ENV.COM ..."
|
||||||
|
$ GOTO EXIT
|
||||||
|
$ ENDIF
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Initialize the Menu Items
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ SET_MENU_DATA "View a Certificate#@SSL$COM:SSL$VIEW_CERT.COM CRT"
|
||||||
|
$ SET_MENU_DATA "View a Certificate Signing Request#@SSL$COM:SSL$VIEW_CERT.COM CSR"
|
||||||
|
$ SET_MENU_DATA "Create a Certificate Signing Request#@SSL$COM:SSL$RQST_CERT.COM"
|
||||||
|
$ SET_MENU_DATA "Create a Self-Signed Certificate#@SSL$COM:SSL$SELF_CERT.COM"
|
||||||
|
$ SET_MENU_DATA "Create a CA (Certification Authority) Certificate#@SSL$COM:SSL$AUTH_CERT.COM"
|
||||||
|
$ SET_MENU_DATA "Sign a Certificate Signing Request#@SSL$COM:SSL$SIGN_CERT.COM"
|
||||||
|
$ SET_MENU_DATA "Hash Certificates#@SSL$COM:SSL$HASH_CERT.COM CRT"
|
||||||
|
$ SET_MENU_DATA "Hash Certificate Revocations#@SSL$COM:SSL$HASH_CERT.COM CRL"
|
||||||
|
$ SET_MENU_DATA "Exit#GOTO EXIT"
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Display the Page Header
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$PAGE_LOOP:
|
||||||
|
$!
|
||||||
|
$ BCOLOR = BGD
|
||||||
|
$ FCOLOR = FGD + RED
|
||||||
|
$ COLOR = ESC + "[''BCOLOR';''FCOLOR'm"
|
||||||
|
$!
|
||||||
|
$ TEXT = "SSL Certificate Tool"
|
||||||
|
$ COL = (TT_COLS - (F$LENGTH (TEXT) * 2)) / 4
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[01;01H", CSCR
|
||||||
|
$ SAY ESC + "[02;''COL'H", COLOR, WIDE, TEXT, NORM
|
||||||
|
$!
|
||||||
|
$ TEXT = "Main Menu"
|
||||||
|
$ COL = (TT_COLS - F$LENGTH (TEXT)) / 2
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[04;01H"
|
||||||
|
$ SAY ESC + "[04;''COL'H", COLOR, TEXT, NORM
|
||||||
|
$!
|
||||||
|
$ CTR = 1
|
||||||
|
$ ROW = 6
|
||||||
|
$ COL = (TT_COLS - (SSL_MENU_ITEM_MAX + 4)) / 2
|
||||||
|
$ TOP_ROW = ROW
|
||||||
|
$ SEP_ROWS = 2
|
||||||
|
$ MSG_ROW = TT_ROWS - 1
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Process the menu options
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$MENU_LOOP:
|
||||||
|
$!
|
||||||
|
$ IF CTR .LE. SSL_MENU_DATA_MAX
|
||||||
|
$ THEN
|
||||||
|
$ OPT = F$ELEMENT (0,"#",SSL_MENU_DATA_'CTR') ! Option String
|
||||||
|
$ CMD = F$ELEMENT (1,"#",SSL_MENU_DATA_'CTR') ! Command String
|
||||||
|
$ IF ROW .GE. (MSG_ROW - (SEP_ROWS + 2)) .AND. SEP_ROWS .GT. 1
|
||||||
|
$ THEN
|
||||||
|
$ SAY ESC + "[''TOP_ROW';01H", CEOS
|
||||||
|
$ ROW = TOP_ROW
|
||||||
|
$ SEP_ROWS = 1
|
||||||
|
$ CTR = 1
|
||||||
|
$ ELSE
|
||||||
|
$ NUM = F$FAO ("!2SL", CTR)
|
||||||
|
$ SAY ESC + "[''ROW';''COL'H", BOLD, "''NUM'. ", NORM, "''OPT'"
|
||||||
|
$ ROW = ROW + SEP_ROWS
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ ENDIF
|
||||||
|
$ GOTO MENU_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ ROW = ROW + 1
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Prompt the user for input
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$PROMPT_LOOP:
|
||||||
|
$!
|
||||||
|
$ PROMPT = ESC + "[''ROW';''COL'HEnter Option: ''CEOL'"
|
||||||
|
$ ASK "''PROMPT'" OPT /END_OF_FILE=EXIT
|
||||||
|
$ OPT = F$EDIT (OPT, "TRIM")
|
||||||
|
$ IF OPT .EQS. "" THEN GOTO PROMPT_LOOP
|
||||||
|
$!
|
||||||
|
$ IF F$TYPE (OPT) .NES. "INTEGER" .OR. -
|
||||||
|
F$INTEGER (OPT) .LE. 0 .OR. -
|
||||||
|
F$INTEGER (OPT) .GT. SSL_MENU_DATA_MAX
|
||||||
|
$ THEN
|
||||||
|
$ CALL INVALID_OPTION
|
||||||
|
$ GOTO PROMPT_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ CMD = F$ELEMENT (1,"#",SSL_MENU_DATA_'OPT')
|
||||||
|
$!
|
||||||
|
$ 'CMD'
|
||||||
|
$!
|
||||||
|
$ GOTO PAGE_LOOP
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Set the Menu Data
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$SET_MENU_DATA: SUBROUTINE
|
||||||
|
$!
|
||||||
|
$ IF F$TYPE (SSL_MENU_DATA_MAX) .EQS. ""
|
||||||
|
$ THEN
|
||||||
|
$ SSL_MENU_DATA_MAX == 1
|
||||||
|
$ SSL_MENU_ITEM_MAX == 0
|
||||||
|
$ ELSE
|
||||||
|
$ SSL_MENU_DATA_MAX == SSL_MENU_DATA_MAX + 1
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ SSL_MENU_DATA_'SSL_MENU_DATA_MAX' == "''P1'"
|
||||||
|
$!
|
||||||
|
$ MENU_ITEM = F$ELEMENT (0,"#",SSL_MENU_DATA_'SSL_MENU_DATA_MAX')
|
||||||
|
$ IF F$LENGTH (MENU_ITEM) .GT. SSL_MENU_ITEM_MAX THEN SSL_MENU_ITEM_MAX == F$LENGTH (MENU_ITEM)
|
||||||
|
$!
|
||||||
|
$ EXIT
|
||||||
|
$!
|
||||||
|
$ ENDSUBROUTINE
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Delete the Menu Data
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$DEL_MENU_DATA: SUBROUTINE
|
||||||
|
$!
|
||||||
|
$ IF F$TYPE (SSL_MENU_DATA_MAX) .EQS. "" THEN GOTO DEL_MENU_DATA_END
|
||||||
|
$!
|
||||||
|
$DEL_MENU_DATA_LOOP:
|
||||||
|
$!
|
||||||
|
$ IF F$TYPE (SSL_MENU_DATA_'SSL_MENU_DATA_MAX') .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ DELETE /SYMBOL /GLOBAL SSL_MENU_DATA_'SSL_MENU_DATA_MAX'
|
||||||
|
$ SSL_MENU_DATA_MAX == SSL_MENU_DATA_MAX - 1
|
||||||
|
$ GOTO DEL_MENU_DATA_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ DELETE /SYMBOL /GLOBAL SSL_MENU_DATA_MAX
|
||||||
|
$!
|
||||||
|
$DEL_MENU_DATA_END:
|
||||||
|
$!
|
||||||
|
$ IF F$TYPE (SSL_MENU_ITEM_MAX) .NES. "" THEN DELETE /SYMBOL /GLOBAL SSL_MENU_ITEM_MAX
|
||||||
|
$!
|
||||||
|
$ EXIT
|
||||||
|
$!
|
||||||
|
$ ENDSUBROUTINE
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Display the invalid entry
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$INVALID_OPTION: SUBROUTINE
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H", BELL, " Invalid Option, Try again ...''CEOL'"
|
||||||
|
$ Wait 00:00:01.5
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H", CEOL
|
||||||
|
$!
|
||||||
|
$ EXIT
|
||||||
|
$!
|
||||||
|
$ ENDSUBROUTINE
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Exit
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$EXIT:
|
||||||
|
$!
|
||||||
|
$ DEL_MENU_DATA
|
||||||
|
$!
|
||||||
|
$ Verify = F$VERIFY (Verify)
|
||||||
|
$!
|
||||||
|
$ EXIT
|
||||||
220
VMS/cert_tool/ssl$conf_util.com
Normal file
220
VMS/cert_tool/ssl$conf_util.com
Normal file
@@ -0,0 +1,220 @@
|
|||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! SSL$CONF_UTIL.COM - SSL Configuration Utility procedure
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ Verify = F$VERIFY (0)
|
||||||
|
$ Set NoOn
|
||||||
|
$ Set NoControl=Y
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Description
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$! This procedure gets or sets a given key item in a SSL configuration file.
|
||||||
|
$! The parameters used are:
|
||||||
|
$!
|
||||||
|
$! P1 - SSL Configuration File
|
||||||
|
$! P2 - SSL Configuration Function (i.e. GET/SET)
|
||||||
|
$! P3 - SSL Configuration Key/Item (delimited by '#')
|
||||||
|
$! P4 - SSL Configuration Key/Item Value (for SET function only)
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Define symbols
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ SSL_CONF_DATA == ""
|
||||||
|
$ SAY := WRITE SYS$OUTPUT
|
||||||
|
$ ASK := READ SYS$COMMAND /END_OF_FILE=EXIT /PROMPT=
|
||||||
|
$ On Control_Y THEN GOTO EXIT
|
||||||
|
$ Set Control=Y
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Process parameters
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ KEY_FOUND = 0
|
||||||
|
$ ITM_FOUND = 0
|
||||||
|
$ P1 = F$EDIT (P1,"TRIM")
|
||||||
|
$ P2 = F$EDIT (P2,"TRIM,UPCASE")
|
||||||
|
$ KEY = F$ELEMENT (0,"#",P3)
|
||||||
|
$ ITM = F$ELEMENT (1,"#",P3)
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Process the configuration function
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ IF P2 .EQS. "GET" THEN GOSUB GET_CONF_DATA
|
||||||
|
$ IF P2 .EQS. "SET" THEN GOSUB SET_CONF_DATA
|
||||||
|
$!
|
||||||
|
$ GOTO EXIT
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Get the configuration data
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$GET_CONF_DATA:
|
||||||
|
$!
|
||||||
|
$ OPEN /READ /ERROR=OPEN_ERROR IFILE 'P1'
|
||||||
|
$!
|
||||||
|
$GET_CONF_DATA_LOOP:
|
||||||
|
$!
|
||||||
|
$ READ /ERROR=READ_ERROR /END_OF_FILE=GET_CONF_DATA_END IFILE IREC
|
||||||
|
$!
|
||||||
|
$ SREC = IREC
|
||||||
|
$ IPOS = F$LOCATE ("#",IREC)
|
||||||
|
$ IF IPOS .NE. F$LENGTH (IREC) THEN IREC = F$EXTRACT (0,IPOS,IREC)
|
||||||
|
$ IREC = F$EDIT (IREC,"COLLAPSE")
|
||||||
|
|
||||||
|
$ IF IREC .EQS. "" THEN GOTO GET_CONF_DATA_LOOP
|
||||||
|
$!
|
||||||
|
$ IF IREC .EQS. KEY
|
||||||
|
$ THEN
|
||||||
|
$ KEY_FOUND = 1
|
||||||
|
$ GOTO GET_CONF_DATA_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ IF KEY_FOUND .EQ. 1
|
||||||
|
$ THEN
|
||||||
|
$ IF F$EXTRACT (0,1,IREC) .EQS. "[" .AND. F$EXTRACT (F$LENGTH (IREC)-1,1,IREC) .EQS. "]"
|
||||||
|
$ THEN
|
||||||
|
$ SSL_CONF_DATA == ""
|
||||||
|
$ GOTO GET_CONF_DATA_END
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ IF ITM .EQS. F$EDIT (F$ELEMENT (0,"=",IREC),"TRIM")
|
||||||
|
$ THEN
|
||||||
|
$ VAL = F$EDIT (F$ELEMENT (1,"=",SREC),"TRIM")
|
||||||
|
$ SSL_CONF_DATA == "''VAL'"
|
||||||
|
$ GOTO GET_CONF_DATA_END
|
||||||
|
$ ENDIF
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ GOTO GET_CONF_DATA_LOOP
|
||||||
|
$!
|
||||||
|
$GET_CONF_DATA_END:
|
||||||
|
$!
|
||||||
|
$ CLOSE /ERROR=CLOSE_ERROR IFILE
|
||||||
|
$!
|
||||||
|
$ RETURN
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Set the configuration data
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$SET_CONF_DATA:
|
||||||
|
$!
|
||||||
|
$ IF F$SEARCH ("''P1'") .EQS. "" THEN CREATE /NOLOG 'P1'
|
||||||
|
$!
|
||||||
|
$ OPEN /READ /ERROR=OPEN_ERROR IFILE 'P1'
|
||||||
|
$ OPEN /WRITE /ERROR=OPEN_ERROR OFILE 'P1'
|
||||||
|
$!
|
||||||
|
$SET_CONF_DATA_LOOP:
|
||||||
|
$!
|
||||||
|
$ READ /ERROR=READ_ERROR /END_OF_FILE=SET_CONF_DATA_END IFILE IREC
|
||||||
|
$!
|
||||||
|
$ IF ITM_FOUND .EQ. 1
|
||||||
|
$ THEN
|
||||||
|
$ WRITE /ERROR=WRITE_ERROR OFILE IREC
|
||||||
|
$ GOTO SET_CONF_DATA_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ SREC = IREC
|
||||||
|
$ IPOS = F$LOCATE ("#",IREC)
|
||||||
|
$ IF IPOS .NE. F$LENGTH (IREC) THEN IREC = F$EXTRACT (0,IPOS,IREC)
|
||||||
|
$ IREC = F$EDIT (IREC,"COLLAPSE")
|
||||||
|
$!
|
||||||
|
$ IF IREC .EQS. ""
|
||||||
|
$ THEN
|
||||||
|
$ WRITE /ERROR=WRITE_ERROR OFILE SREC
|
||||||
|
$ GOTO SET_CONF_DATA_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ IF IREC .EQS. KEY
|
||||||
|
$ THEN
|
||||||
|
$ KEY_FOUND = 1
|
||||||
|
$ WRITE /ERROR=WRITE_ERROR OFILE SREC
|
||||||
|
$ GOTO SET_CONF_DATA_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ IF KEY_FOUND .EQ. 1
|
||||||
|
$ THEN
|
||||||
|
$ IF F$EXTRACT (0,1,IREC) .EQS. "[" .AND. F$EXTRACT (F$LENGTH (IREC)-1,1,IREC) .EQS. "]"
|
||||||
|
$ THEN
|
||||||
|
$ WRITE /ERROR=WRITE_ERROR OFILE "''ITM' = ''P4'"
|
||||||
|
$ WRITE /ERROR=WRITE_ERROR OFILE SREC
|
||||||
|
$ ITM_FOUND = 1
|
||||||
|
$ GOTO SET_CONF_DATA_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ IF ITM .EQS. F$EDIT (F$ELEMENT (0,"=",IREC),"TRIM")
|
||||||
|
$ THEN
|
||||||
|
$ WRITE /ERROR=WRITE_ERROR OFILE "''ITM' = ''P4'"
|
||||||
|
$ ITM_FOUND = 1
|
||||||
|
$ GOTO SET_CONF_DATA_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ WRITE /ERROR=WRITE_ERROR OFILE SREC
|
||||||
|
$!
|
||||||
|
$ GOTO SET_CONF_DATA_LOOP
|
||||||
|
$!
|
||||||
|
$SET_CONF_DATA_END:
|
||||||
|
$!
|
||||||
|
$ IF KEY_FOUND .EQ. 0
|
||||||
|
$ THEN
|
||||||
|
$ WRITE /ERROR=WRITE_ERROR OFILE "''KEY'"
|
||||||
|
$ WRITE /ERROR=WRITE_ERROR OFILE "''ITM' = ''P4'"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ IF KEY_FOUND .EQ. 1 .AND. ITM_FOUND .EQ. 0
|
||||||
|
$ THEN
|
||||||
|
$ WRITE /ERROR=WRITE_ERROR OFILE "''ITM' = ''P4'"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ CLOSE IFILE
|
||||||
|
$ CLOSE OFILE
|
||||||
|
$!
|
||||||
|
$ RETURN
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! File Errors
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$OPEN_ERROR:
|
||||||
|
$!
|
||||||
|
$ SAY "Open error for file ''P1' ... aborting ''P2'"
|
||||||
|
$ GOTO EXIT
|
||||||
|
$!
|
||||||
|
$READ_ERROR:
|
||||||
|
$!
|
||||||
|
$ SAY "Read error for file ''P1' ... aborting ''P2'"
|
||||||
|
$ GOTO EXIT
|
||||||
|
$!
|
||||||
|
$WRITE_ERROR:
|
||||||
|
$!
|
||||||
|
$ SAY "Write error for file ''P1' ... aborting ''P2'"
|
||||||
|
$ GOTO EXIT
|
||||||
|
$!
|
||||||
|
$CLOSE_ERROR:
|
||||||
|
$!
|
||||||
|
$ SAY "Close error for file ''P1' ... aborting ''P2'"
|
||||||
|
$ GOTO EXIT
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Exit
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$EXIT:
|
||||||
|
$!
|
||||||
|
$ DEFINE /USER /NOLOG SYS$ERROR NL:
|
||||||
|
$ DEFINE /USER /NOLOG SYS$OUTPUT NL:
|
||||||
|
$ CLOSE IFILE
|
||||||
|
$!
|
||||||
|
$ DEFINE /USER /NOLOG SYS$ERROR NL:
|
||||||
|
$ DEFINE /USER /NOLOG SYS$OUTPUT NL:
|
||||||
|
$ CLOSE OFILE
|
||||||
|
$!
|
||||||
|
$ Verify = F$VERIFY (Verify)
|
||||||
|
$!
|
||||||
|
$ EXIT 1
|
||||||
109
VMS/cert_tool/ssl$draw_box.com
Normal file
109
VMS/cert_tool/ssl$draw_box.com
Normal file
@@ -0,0 +1,109 @@
|
|||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! SSL$DRAW_BOX.COM - SSL Draw Box procedure
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ Verify = F$VERIFY (0)
|
||||||
|
$ Set NoOn
|
||||||
|
$ Set NoControl=Y
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Description
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$! This procedure draws a box with the specified coordinates.
|
||||||
|
$!
|
||||||
|
$! The parameters used are:
|
||||||
|
$!
|
||||||
|
$! P1 - X1 coordinate
|
||||||
|
$! P2 - Y1 coordinate
|
||||||
|
$! P3 - X2 coordinate
|
||||||
|
$! P4 - Y3 coordinate
|
||||||
|
$! P5 - Box Header (Optional)
|
||||||
|
$! P6 - Box Footer (Optional)
|
||||||
|
$! P7 - Fill Box (Optional)
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Define symbols
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ SAY := WRITE SYS$OUTPUT
|
||||||
|
$ On Control_Y THEN GOTO EXIT
|
||||||
|
$ Set Control=Y
|
||||||
|
$!
|
||||||
|
$ FILL_BOX := @SSL$COM:SSL$FILL_BOX
|
||||||
|
$!
|
||||||
|
$ ESC[0,8] = 27 ! Set the Escape Character
|
||||||
|
$ GRPH_ON[0,8] = 14 ! Turn GRAPHICS mode On
|
||||||
|
$ GRPH_OFF[0,8] = 15 ! Turn GRAPHICS mode Off
|
||||||
|
$ NORM = ESC + "[0m" ! Turn Attributes off
|
||||||
|
$ BOLD = ESC + "[1m" ! Turn on BOLD Attribute
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Draw the box
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ X1 = F$INTEGER (P1)
|
||||||
|
$ Y1 = F$INTEGER (P2)
|
||||||
|
$ X2 = F$INTEGER (P3)
|
||||||
|
$ Y2 = F$INTEGER (P4)
|
||||||
|
$!
|
||||||
|
$ ROW = Y1 + 1
|
||||||
|
$ COL = X1 + 1
|
||||||
|
$ SIDE1 = X1
|
||||||
|
$ SIDE2 = X2 + 1
|
||||||
|
$ TOP = "l" + F$FAO("!#*q", x2 - x1) + "k"
|
||||||
|
$ BOT = "m" + F$FAO("!#*q", x2 - x1) + "j"
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[''Y1';''X1'H", BOLD, GRPH_ON, TOP, GRPH_OFF, NORM
|
||||||
|
$!
|
||||||
|
$SIDES:
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[''ROW';''SIDE1'H",BOLD,GRPH_ON,"x",GRPH_OFF,NORM
|
||||||
|
$ SAY ESC + "[''ROW';''SIDE2'H",BOLD,GRPH_ON,"x",GRPH_OFF,NORM
|
||||||
|
$!
|
||||||
|
$ IF ROW .LT. Y2
|
||||||
|
$ THEN
|
||||||
|
$ ROW = ROW + 1
|
||||||
|
$ GOTO SIDES
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[''Y2';''X1'H", BOLD, GRPH_ON, BOT, GRPH_OFF, NORM
|
||||||
|
$!
|
||||||
|
$ IF P5 .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ IF F$LENGTH(P5) .GT. X2 - X1
|
||||||
|
$ THEN
|
||||||
|
$ HEADER = F$EXTRACT (0, (X2 - X1 - 4), P5)
|
||||||
|
$ ELSE
|
||||||
|
$ HEADER = P5
|
||||||
|
$ ENDIF
|
||||||
|
$ COL = X1 + ((X2 - X1 - F$LENGTH(HEADER)) / 2)
|
||||||
|
$ SAY ESC + "[''Y1';''COL'H''BOLD'''HEADER'''NORM'"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ IF P6 .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ IF F$LENGTH(P6) .GT. X2 - X1
|
||||||
|
$ THEN
|
||||||
|
$ FOOTER = F$EXTRACT (0, (X2 - X1 - 4), P6)
|
||||||
|
$ ELSE
|
||||||
|
$ FOOTER = P6
|
||||||
|
$ ENDIF
|
||||||
|
$ COL = X1 + ((X2 - X1 - F$LENGTH(FOOTER)) / 2)
|
||||||
|
$ SAY ESC + "[''Y2';''COL'H''BOLD'''FOOTER'''NORM'"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ IF P7 .EQS. "" .OR. P7 .EQS. "Y" THEN FILL_BOX 'X1' 'Y1' 'X2' 'Y2'
|
||||||
|
$!
|
||||||
|
$ GOTO EXIT
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Exit
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$EXIT:
|
||||||
|
$!
|
||||||
|
$ Verify = F$VERIFY (Verify)
|
||||||
|
$!
|
||||||
|
$ EXIT
|
||||||
1
VMS/cert_tool/ssl$exit_cmd.tpu
Normal file
1
VMS/cert_tool/ssl$exit_cmd.tpu
Normal file
@@ -0,0 +1 @@
|
|||||||
|
EXIT
|
||||||
65
VMS/cert_tool/ssl$fill_box.com
Normal file
65
VMS/cert_tool/ssl$fill_box.com
Normal file
@@ -0,0 +1,65 @@
|
|||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! SSL$FILL_BOX.COM - SSL Fill Box procedure
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ Verify = F$VERIFY (0)
|
||||||
|
$ Set NoOn
|
||||||
|
$ Set NoControl=Y
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Description
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$! This procedure draws a box with the specified coordinates.
|
||||||
|
$!
|
||||||
|
$! The parameters used are:
|
||||||
|
$!
|
||||||
|
$! P1 - X1 coordinate
|
||||||
|
$! P2 - Y1 coordinate
|
||||||
|
$! P3 - X2 coordinate
|
||||||
|
$! P4 - Y2 coordinate
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Define symbols
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ SAY := WRITE SYS$OUTPUT
|
||||||
|
$ On Control_Y THEN GOTO EXIT
|
||||||
|
$ Set Control=Y
|
||||||
|
$!
|
||||||
|
$ ESC[0,8] = 27 ! Set the Escape Character
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Draw the box
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ X1 = F$INTEGER (P1)
|
||||||
|
$ Y1 = F$INTEGER (P2)
|
||||||
|
$ X2 = F$INTEGER (P3)
|
||||||
|
$ Y2 = F$INTEGER (P4)
|
||||||
|
$!
|
||||||
|
$ ROW = Y1 + 1
|
||||||
|
$ COL = X1 + 1
|
||||||
|
$ FILL = F$FAO("!#* ", X2 - X1)
|
||||||
|
$!
|
||||||
|
$FILL_LOOP:
|
||||||
|
$!
|
||||||
|
$ IF ROW .LT. Y2
|
||||||
|
$ THEN
|
||||||
|
$ SAY ESC + "[''ROW';''COL'H",FILL
|
||||||
|
$ ROW = ROW + 1
|
||||||
|
$ GOTO FILL_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ GOTO EXIT
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Exit
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$EXIT:
|
||||||
|
$!
|
||||||
|
$ Verify = F$VERIFY (Verify)
|
||||||
|
$!
|
||||||
|
$ EXIT
|
||||||
235
VMS/cert_tool/ssl$hash_cert.com
Normal file
235
VMS/cert_tool/ssl$hash_cert.com
Normal file
@@ -0,0 +1,235 @@
|
|||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! SSL$HASH_CERT.COM - SSL Hash Certificate procedure
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ Verify = F$VERIFY (0)
|
||||||
|
$ Set NoOn
|
||||||
|
$ Set NoControl=Y
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Description
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$! This procedure prompts the user through hashing Certificates.
|
||||||
|
$!
|
||||||
|
$! The parameters used are:
|
||||||
|
$!
|
||||||
|
$! P1 - Certificate or Certificate Revocation List (i.e. "CRT" or "CRL")
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Define symbols
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ DELETE := DELETE
|
||||||
|
$ SAY := WRITE SYS$OUTPUT
|
||||||
|
$ ASK := READ SYS$COMMAND /END_OF_FILE=EXIT /PROMPT=
|
||||||
|
$ On Control_Y THEN GOTO EXIT
|
||||||
|
$ Set Control=Y
|
||||||
|
$!
|
||||||
|
$ TT_ROWS = F$GETDVI ("TT:","TT_PAGE")
|
||||||
|
$ TT_COLS = F$GETDVI ("TT:","DEVBUFSIZ")
|
||||||
|
$!
|
||||||
|
$ INIT_TERM := @SSL$COM:SSL$INIT_TERM
|
||||||
|
$!
|
||||||
|
$ ESC[0,8] = 27 ! Set the Escape Character
|
||||||
|
$ BELL[0,8] = 7 ! Ring the terminal Bell
|
||||||
|
$ RED = 1 ! Color - Red
|
||||||
|
$ FGD = 30 ! Foreground
|
||||||
|
$ BGD = 0 ! Background
|
||||||
|
$ CSCR = ESC + "[2J" ! Clear the Screen
|
||||||
|
$ CEOS = ESC + "[0J" ! Clear to the End of the Screen
|
||||||
|
$ CEOL = ESC + "[0K" ! Clear to the End of the Line
|
||||||
|
$ NORM = ESC + "[0m" ! Turn Attributes off
|
||||||
|
$ BLNK = ESC + "[5m" ! Turn on BLINK Attribute
|
||||||
|
$ WIDE = ESC + "#6" ! Turn on WIDE Attribute
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Run the SSL setup if it hasn't been run yet
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ IF F$TRNLNM ("SSL$ROOT") .EQS. ""
|
||||||
|
$ THEN
|
||||||
|
$ IF F$SEARCH ("SSL$COM:SSL$INIT_ENV.COM") .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ @SSL$COM:SSL$INIT_ENV.COM
|
||||||
|
$ ELSE
|
||||||
|
$ SAY BELL, "Unable to locate SSL$COM:SSL$INIT_ENV.COM ..."
|
||||||
|
$ GOTO EXIT
|
||||||
|
$ ENDIF
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Display the Page Header
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ INIT_TERM
|
||||||
|
$ BCOLOR = BGD
|
||||||
|
$ FCOLOR = FGD + RED
|
||||||
|
$ COLOR = ESC + "[''BCOLOR';''FCOLOR'm"
|
||||||
|
$!
|
||||||
|
$ TEXT = "SSL Certificate Tool"
|
||||||
|
$ COL = (TT_COLS - (F$LENGTH (TEXT) * 2)) / 4
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[01;01H", CSCR
|
||||||
|
$ SAY ESC + "[02;''COL'H", COLOR, WIDE, TEXT, NORM
|
||||||
|
$!
|
||||||
|
$ IF P1 .EQS. "CRT"
|
||||||
|
$ THEN
|
||||||
|
$ TEXT = "Hash Certification Authorities"
|
||||||
|
$ ELSE
|
||||||
|
$ TEXT = "Hash Certificate Revocations"
|
||||||
|
$ ENDIF
|
||||||
|
$ COL = (TT_COLS - F$LENGTH (TEXT)) / 2
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[04;01H"
|
||||||
|
$ SAY ESC + "[04;''COL'H", COLOR, TEXT, NORM
|
||||||
|
$!
|
||||||
|
$ CTR = 1
|
||||||
|
$ ROW = 6
|
||||||
|
$ COL = 2
|
||||||
|
$ TOP_ROW = ROW
|
||||||
|
$ MSG_ROW = TT_ROWS - 1
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Initialize the Request Data
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ IF P1 .EQS. "CRT"
|
||||||
|
$ THEN
|
||||||
|
$ PRM = "Certificate Path:"
|
||||||
|
$ DEF = "SSL$CRT:*.CRT"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ IF P1 .EQS. "CRL"
|
||||||
|
$ THEN
|
||||||
|
$ PRM = "Certificate Revocation Path:"
|
||||||
|
$ DEF = "SSL$CRT:*.CRL"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H", CEOS
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Confirm/Update the SSL Configuration Data
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$PROMPT_LOOP:
|
||||||
|
$!
|
||||||
|
$ PROMPT = ESC + "[''ROW';''COL'H''PRM' ? [''DEF'] ''CEOL'"
|
||||||
|
$ ASK "''PROMPT'" _hash_path_name
|
||||||
|
$ _hash_path_name = F$EDIT (_hash_path_name,"TRIM")
|
||||||
|
$ IF _hash_path_name .EQS. "" THEN _hash_path_name = DEF
|
||||||
|
$!
|
||||||
|
$ HASH_DEV = F$PARSE (_hash_path_name,DEF,,"DEVICE")
|
||||||
|
$ HASH_DIR = F$PARSE (_hash_path_name,DEF,,"DIRECTORY")
|
||||||
|
$ HASH_NAM = F$PARSE (_hash_path_name,DEF,,"NAME")
|
||||||
|
$ HASH_TYP = F$PARSE (_hash_path_name,DEF,,"TYPE")
|
||||||
|
$ _hash_path_name = HASH_DEV + HASH_DIR + HASH_NAM + HASH_TYP
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Create the Certificiate Hashes
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ IF P1 .EQS. "CRT"
|
||||||
|
$ THEN
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H", BLNK, " Hashing Certificate Authorities ...", NORM, CEOL
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ IF P1 .EQS. "CRL"
|
||||||
|
$ THEN
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H", BLNK, " Hashing Certificate Revocations ...", NORM, CEOL
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ IF F$SEARCH ("''HASH_DEV'''HASH_DIR'DELETE_HASH_FILES.COM") .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ @'HASH_DEV''HASH_DIR'DELETE_HASH_FILES.COM
|
||||||
|
$ DELETE 'HASH_DEV''HASH_DIR'DELETE_HASH_FILES.COM;*
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ CTR = 0
|
||||||
|
$!
|
||||||
|
$ OPEN /WRITE OFILE 'HASH_DEV''HASH_DIR'DELETE_HASH_FILES.COM
|
||||||
|
$!
|
||||||
|
$CERT_LOOP:
|
||||||
|
$!
|
||||||
|
$ CERT_FILE = F$SEARCH ("''_hash_path_name'", 1)
|
||||||
|
$ IF CERT_FILE .EQS. "" THEN GOTO CERT_END
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$!
|
||||||
|
$ CALL HASH_CERT 'P1' 'CERT_FILE'
|
||||||
|
$!
|
||||||
|
$ GOTO CERT_LOOP
|
||||||
|
$!
|
||||||
|
$CERT_END:
|
||||||
|
$!
|
||||||
|
$ CLOSE OFILE
|
||||||
|
$!
|
||||||
|
$ IF CTR .EQ. 0
|
||||||
|
$ THEN
|
||||||
|
$ TEXT = "No files found, Press return to continue"
|
||||||
|
$ ELSE
|
||||||
|
$ TEXT = "Press return to continue"
|
||||||
|
$ ENDIF
|
||||||
|
$ COL = (TT_COLS - F$LENGTH (TEXT)) / 2
|
||||||
|
$!
|
||||||
|
$ IF CTR .EQ. 0
|
||||||
|
$ THEN
|
||||||
|
$ SAY BELL, ESC + "[''MSG_ROW';01H", CEOS
|
||||||
|
$ ELSE
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H", CEOS
|
||||||
|
$ ENDIF
|
||||||
|
$ PROMPT = ESC + "[''MSG_ROW';''COL'H''TEXT'"
|
||||||
|
$ ASK "''PROMPT'" OPT
|
||||||
|
$!
|
||||||
|
$ GOTO EXIT
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Hash Certificate Subroutine
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$HASH_CERT: SUBROUTINE
|
||||||
|
$!
|
||||||
|
$ IF P1 .EQS. "CRT"
|
||||||
|
$ THEN
|
||||||
|
$ HASH_SUFF = ""
|
||||||
|
$ HASH_FUNC = "$SSL$EXE:OPENSSL X509 -HASH -NOOUT -IN"
|
||||||
|
$ ELSE
|
||||||
|
$ HASH_SUFF = "R"
|
||||||
|
$ HASH_FUNC = "$SSL$EXE:OPENSSL CRL -HASH -NOOUT -IN"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ PIPE HASH_FUNC 'P2' | (READ SYS$INPUT VAL ; DEFINE/NOLOG/JOB HASH_VAL &VAL)
|
||||||
|
$ HASH_VAL = F$TRNLNM ("HASH_VAL")
|
||||||
|
$ DEASSIGN /JOB HASH_VAL
|
||||||
|
$!
|
||||||
|
$ IDX = 0
|
||||||
|
$!
|
||||||
|
$IDX_LOOP:
|
||||||
|
$!
|
||||||
|
$ HASH_FILE = "''HASH_DEV'''HASH_DIR'''HASH_VAL'.''HASH_SUFF'''IDX'"
|
||||||
|
$ IF F$SEARCH ("''HASH_FILE'") .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ IDX = IDX + 1
|
||||||
|
$ GOTO IDX_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ COPY 'P2' 'HASH_FILE'
|
||||||
|
$ WRITE OFILE "$ DELETE ''HASH_FILE';*"
|
||||||
|
$!
|
||||||
|
$ EXIT
|
||||||
|
$!
|
||||||
|
$ ENDSUBOUTINE
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Exit the procedure
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$EXIT:
|
||||||
|
$!
|
||||||
|
$ DEFINE /USER /NOLOG SYS$ERROR NL:
|
||||||
|
$ DEFINE /USER /NOLOG SYS$OUTPUT NL:
|
||||||
|
$ CLOSE OFILE
|
||||||
|
$!
|
||||||
|
$ Verify = F$VERIFY (Verify)
|
||||||
|
$!
|
||||||
|
$ EXIT
|
||||||
61
VMS/cert_tool/ssl$init_env.com
Normal file
61
VMS/cert_tool/ssl$init_env.com
Normal file
@@ -0,0 +1,61 @@
|
|||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! SSL$INIT_ENV.COM - SSL Initialize Environment
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ Verify = F$VERIFY (0)
|
||||||
|
$ Set NoOn
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Description
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$! This procedure sets up the SSL environment logicals & symbols.
|
||||||
|
$!
|
||||||
|
$! P1 = Mode of the logicals (ie - "/SYSTEM/EXECUTIVE_MODE").
|
||||||
|
$! Note - if P1 is not passed in, P1 will default to PROCESS.
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Initialization
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ IF F$TRNLNM("SSL$ROOT") .EQS. ""
|
||||||
|
$ THEN
|
||||||
|
$ WRITE SYS$OUTPUT " "
|
||||||
|
$ WRITE SYS$OUTPUT " SSL-E-ERROR, SSL has not been started."
|
||||||
|
$ WRITE SYS$OUTPUT " "
|
||||||
|
$ WRITE SYS$OUTPUT " Execute the command procedure, SYS$STARTUP:SSL$STARTUP.COM, and then try this procedure again."
|
||||||
|
$ WRITE SYS$OUTPUT " "
|
||||||
|
$ EXIT
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ IF P1 .EQS. ""
|
||||||
|
$ THEN
|
||||||
|
$ P1 = "/PROCESS"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Define logicals
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ DEFINE 'P1 SSL$CA_CONF SSL$ROOT:[CONF]SSL$CA.CNF
|
||||||
|
$ DEFINE 'P1 SSL$CONF SSL$ROOT:[CONF]SSL$CERT.CNF
|
||||||
|
$ DEFINE 'P1 SSL$COM SSL$ROOT:[COM]
|
||||||
|
$ DEFINE 'P1 SSL$CRT SSL$ROOT:[CERTS]
|
||||||
|
$ DEFINE 'P1 SSL$CSR SSL$ROOT:[CERTS]
|
||||||
|
$ DEFINE 'P1 SSL$KEY SSL$ROOT:[CERTS]
|
||||||
|
$ DEFINE 'P1 SSL$DB SSL$ROOT:[PRIVATE]
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Define foreign symbols
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ OPENSSL :== $ SSL$EXE:OPENSSL
|
||||||
|
$ HOSTADDR :== $ SSL$EXE:SSL$HOSTADDR
|
||||||
|
$ HOSTNAME :== $ SSL$EXE:SSL$HOSTNAME
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Exit
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ EXIT
|
||||||
55
VMS/cert_tool/ssl$init_term.com
Normal file
55
VMS/cert_tool/ssl$init_term.com
Normal file
@@ -0,0 +1,55 @@
|
|||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! SSL$INIT_TERM.COM - SSL Initialize Terminal procedure
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ Verify = F$VERIFY (0)
|
||||||
|
$ Set NoOn
|
||||||
|
$ Set NoControl=Y
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Description
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$! This procedure initializes the terminal attributes.
|
||||||
|
$!
|
||||||
|
$! The parameters used are:
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Define symbols
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ On Control_Y THEN GOTO EXIT
|
||||||
|
$ Set Control=Y
|
||||||
|
$!
|
||||||
|
$ EDIT := EDIT
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Initialize the terminal with TPU
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ IF F$SEARCH ("SSL$COM:SSL$EXIT_CMD.TPU") .EQS. ""
|
||||||
|
$ THEN
|
||||||
|
$ OPEN /WRITE OFILE SSL$COM:SSL$EXIT_CMD.TPU
|
||||||
|
$ WRITE OFILE "EXIT"
|
||||||
|
$ CLOSE OFILE
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ DEFINE /USER /NOLOG SYS$OUTPUT NL:
|
||||||
|
$ DEFINE /USER /NOLOG SYS$ERROR NL:
|
||||||
|
$ DEFINE /USER /NOLOG SYS$INPUT SYS$COMMAND
|
||||||
|
$ EDIT /TPU /COMMAND=OPENSS$COM:SSL$EXIT_CMD.TPU
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Exit
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$EXIT:
|
||||||
|
$!
|
||||||
|
$ DEFINE /USER /NOLOG SYS$ERROR NL:
|
||||||
|
$ DEFINE /USER /NOLOG SYS$OUTPUT NL:
|
||||||
|
$ CLOSE OFILE
|
||||||
|
$!
|
||||||
|
$ Verify = F$VERIFY (Verify)
|
||||||
|
$!
|
||||||
|
$ EXIT
|
||||||
230
VMS/cert_tool/ssl$pick_file.com
Normal file
230
VMS/cert_tool/ssl$pick_file.com
Normal file
@@ -0,0 +1,230 @@
|
|||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! SSL$PICK_FILE.COM - SSL Pick File procedure
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ Verify = F$VERIFY (0)
|
||||||
|
$ Set NoOn
|
||||||
|
$ Set NoControl=Y
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Description
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$! This procedure display the contents of a given file in a box size specified.
|
||||||
|
$!
|
||||||
|
$! The parameters used are:
|
||||||
|
$!
|
||||||
|
$! P1 - File Spec to Parse
|
||||||
|
$! P2 - X1 coordinate
|
||||||
|
$! P3 - Y1 coordinate
|
||||||
|
$! P4 - X2 coordinate
|
||||||
|
$! P5 - Y3 coordinate
|
||||||
|
$! P6 - File Pick Header (Optional)
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Define symbols
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ SSL_FILE_NAME == ""
|
||||||
|
$ SAY := WRITE SYS$OUTPUT
|
||||||
|
$ ASK := READ SYS$COMMAND /END_OF_FILE=EXIT /PROMPT=
|
||||||
|
$ On Control_Y THEN GOTO EXIT
|
||||||
|
$ Set Control=Y
|
||||||
|
$!
|
||||||
|
$ DRAW_BOX := @SSL$COM:SSL$DRAW_BOX
|
||||||
|
$ FILL_BOX := @SSL$COM:SSL$FILL_BOX
|
||||||
|
$!
|
||||||
|
$ ESC[0,8] = 27 ! Set the Escape Character
|
||||||
|
$ BELL[0,8] = 7 ! Ring the terminal Bell
|
||||||
|
$ CEOL = ESC + "[0K" ! Clear to the End of the Line
|
||||||
|
$ NORM = ESC + "[0m" ! Turn Attributes off
|
||||||
|
$ BOLD = ESC + "[1m" ! Turn on BOLD Attribute
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Display the Page Header
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ P1 = F$EDIT (P1, "TRIM")
|
||||||
|
$ P2 = F$INTEGER (P2)
|
||||||
|
$ P3 = F$INTEGER (P3)
|
||||||
|
$ P4 = F$INTEGER (P4)
|
||||||
|
$ P5 = F$INTEGER (P5)
|
||||||
|
$ FILE_MAX = 0
|
||||||
|
$!
|
||||||
|
$SEARCH_LOOP:
|
||||||
|
$!
|
||||||
|
$ FILE = F$SEARCH ("''P1'",1)
|
||||||
|
$ IF FILE .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ IF FILE_MAX .EQ. 1
|
||||||
|
$ THEN
|
||||||
|
$ IF FILE_1 .EQS. FILE THEN GOTO SEARCH_END
|
||||||
|
$ ENDIF
|
||||||
|
$ FILE_MAX = FILE_MAX + 1
|
||||||
|
$ FILE_'FILE_MAX' = FILE
|
||||||
|
$ GOTO SEARCH_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$SEARCH_END:
|
||||||
|
$!
|
||||||
|
$ IF FILE_MAX .EQ. 0
|
||||||
|
$ THEN
|
||||||
|
$ DRAW_BOX 'P2' 'P3' 'P4' 'P5' "''P6'" " No Files Found, Press Return to Exit "
|
||||||
|
$ INPUT_ROW = P5 + 1
|
||||||
|
$ PROMPT = ESC + "[''INPUT_ROW';01H ''CEOL'"
|
||||||
|
$ ASK "''PROMPT'" OPT
|
||||||
|
$ GOTO EXIT
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ COL = P2 + 2
|
||||||
|
$ ROW = P3 + 2
|
||||||
|
$ TOP_ROW = ROW
|
||||||
|
$ INPUT_ROW = P5 + 1
|
||||||
|
$ BOX_WIDTH = P4 - (P2 + 2)
|
||||||
|
$ BOX_HEIGHT = P5 - (P3 + 3)
|
||||||
|
$!
|
||||||
|
$ FILE_CTR = 1
|
||||||
|
$ PAGE_CTR = 1
|
||||||
|
$ PAGE_'PAGE_CTR'_FILE_CTR = FILE_CTR
|
||||||
|
$ FILES_PER_PAGE = BOX_HEIGHT
|
||||||
|
$ PAGE_MAX = FILE_MAX / FILES_PER_PAGE
|
||||||
|
$ IF PAGE_MAX * FILES_PER_PAGE .LT. FILE_MAX THEN PAGE_MAX = PAGE_MAX + 1
|
||||||
|
$!
|
||||||
|
$ DRAW_BOX 'P2' 'P3' 'P4' 'P5' "''P6'" " Enter B for Back, N for Next, Ctrl-Z to Exit or Enter a File Number "
|
||||||
|
$ PAGE_TXT = F$FAO (" Page !UL of !UL ", PAGE_CTR, PAGE_MAX)
|
||||||
|
$ _COL = P2 + (BOX_WIDTH - F$LENGTH (PAGE_TXT)) + 2
|
||||||
|
$ SAY ESC + "[''P3';''_COL'H''BOLD'''PAGE_TXT'''NORM'"
|
||||||
|
$!
|
||||||
|
$DISPLAY_LOOP:
|
||||||
|
$!
|
||||||
|
$ IF FILE_CTR .LE. FILE_MAX .AND. F$TYPE (FILE_'FILE_CTR') .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ FILE = FILE_'FILE_CTR'
|
||||||
|
$ ELSE
|
||||||
|
$ FILE = ""
|
||||||
|
$ ENDIF
|
||||||
|
$ WRAP_IN_PROGRESS = 0
|
||||||
|
$!
|
||||||
|
$WRAP_LOOP:
|
||||||
|
$!
|
||||||
|
$ IF ROW .LE. (P5 - 2) .AND. -
|
||||||
|
FILE_CTR .LE. PAGE_CTR * FILES_PER_PAGE
|
||||||
|
$ THEN
|
||||||
|
$ IF F$LENGTH (FILE) .GT. BOX_WIDTH
|
||||||
|
$ THEN
|
||||||
|
$ IF WRAP_IN_PROGRESS .EQ. 0
|
||||||
|
$ THEN
|
||||||
|
$ CTR_TXT = F$FAO ("!3UL. ",FILE_CTR)
|
||||||
|
$ WRAP_IN_PROGRESS = 1
|
||||||
|
$ ELSE
|
||||||
|
$ CTR_TXT = " "
|
||||||
|
$ ENDIF
|
||||||
|
$ FILE_SEG = F$EXTRACT (0, BOX_WIDTH - F$LENGTH (CTR_TXT), FILE)
|
||||||
|
$ SAY ESC + "[''ROW';''COL'H''BOLD'''CTR_TXT'''NORM'''FILE_SEG'"
|
||||||
|
$ FILE = F$EXTRACT (BOX_WIDTH - F$LENGTH (CTR_TXT), F$LENGTH (FILE) - (BOX_WIDTH + F$LENGTH (CTR_TXT)), FILE)
|
||||||
|
$ ROW = ROW + 1
|
||||||
|
$ GOTO WRAP_LOOP
|
||||||
|
$ ELSE
|
||||||
|
$ IF FILE .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ IF WRAP_IN_PROGRESS .EQ. 0
|
||||||
|
$ THEN
|
||||||
|
$ CTR_TXT = F$FAO ("!3UL. ",FILE_CTR)
|
||||||
|
$ ELSE
|
||||||
|
$ CTR_TXT = " "
|
||||||
|
$ ENDIF
|
||||||
|
$ SAY ESC + "[''ROW';''COL'H''BOLD'''CTR_TXT'''NORM'''FILE'"
|
||||||
|
$ ENDIF
|
||||||
|
$ ENDIF
|
||||||
|
$ ELSE
|
||||||
|
$!
|
||||||
|
$RETRY:
|
||||||
|
$!
|
||||||
|
$ PROMPT = ESC + "[''INPUT_ROW';01H ''CEOL'"
|
||||||
|
$ ASK "''PROMPT'" OPT
|
||||||
|
$ IF F$TYPE (OPT) .NES. "INTEGER" .AND. -
|
||||||
|
F$EDIT (OPT,"TRIM,UPCASE") .NES. "B" .AND. -
|
||||||
|
F$EDIT (OPT,"TRIM,UPCASE") .NES. "N"
|
||||||
|
$ THEN
|
||||||
|
$ CALL INVALID_ENTRY
|
||||||
|
$ GOTO RETRY
|
||||||
|
$ ENDIF
|
||||||
|
$ IF F$TYPE (OPT) .EQS. "INTEGER"
|
||||||
|
$ THEN
|
||||||
|
$ IF OPT .GT. 0 .AND. -
|
||||||
|
OPT .LE. FILE_MAX .AND. -
|
||||||
|
OPT .LE. (FILE_CTR - 1) .AND. -
|
||||||
|
OPT .GE. (FILE_CTR - 1 - FILES_PER_PAGE)
|
||||||
|
$ THEN
|
||||||
|
$ SSL_FILE_NAME == FILE_'OPT'
|
||||||
|
$ GOTO EXIT
|
||||||
|
$ ELSE
|
||||||
|
$ CALL INVALID_ENTRY
|
||||||
|
$ GOTO RETRY
|
||||||
|
$ ENDIF
|
||||||
|
$ ENDIF
|
||||||
|
$ IF F$EDIT (OPT,"TRIM,UPCASE") .EQS. "B"
|
||||||
|
$ THEN
|
||||||
|
$ IF PAGE_CTR .GT. 1
|
||||||
|
$ THEN
|
||||||
|
$ ROW = TOP_ROW
|
||||||
|
$ PAGE_CTR = PAGE_CTR - 1
|
||||||
|
$ FILE_CTR = PAGE_'PAGE_CTR'_FILE_CTR
|
||||||
|
$ PAGE_TXT = F$FAO (" Page !UL of !UL ", PAGE_CTR, PAGE_MAX)
|
||||||
|
$ _COL = P2 + (BOX_WIDTH - F$LENGTH (PAGE_TXT)) + 2
|
||||||
|
$ SAY ESC + "[''P3';''_COL'H''BOLD'''PAGE_TXT'''NORM'"
|
||||||
|
$ FILL_BOX 'P2' 'P3' 'P4' 'P5'
|
||||||
|
$ GOTO DISPLAY_LOOP
|
||||||
|
$ ELSE
|
||||||
|
$ CALL INVALID_ENTRY
|
||||||
|
$ GOTO RETRY
|
||||||
|
$ ENDIF
|
||||||
|
$ ENDIF
|
||||||
|
$ IF F$EDIT (OPT,"TRIM,UPCASE") .EQS. "N"
|
||||||
|
$ THEN
|
||||||
|
$ IF PAGE_CTR .LT. PAGE_MAX
|
||||||
|
$ THEN
|
||||||
|
$ PAGE_CTR = PAGE_CTR + 1
|
||||||
|
$ PAGE_'PAGE_CTR'_FILE_CTR = FILE_CTR
|
||||||
|
$ FILE_CTR = PAGE_'PAGE_CTR'_FILE_CTR
|
||||||
|
$ PAGE_TXT = F$FAO (" Page !UL of !UL ", PAGE_CTR, PAGE_MAX)
|
||||||
|
$ _COL = P2 + (BOX_WIDTH - F$LENGTH (PAGE_TXT)) + 2
|
||||||
|
$ SAY ESC + "[''P3';''_COL'H''BOLD'''PAGE_TXT'''NORM'"
|
||||||
|
$ FILL_BOX 'P2' 'P3' 'P4' 'P5'
|
||||||
|
$ ELSE
|
||||||
|
$ CALL INVALID_ENTRY
|
||||||
|
$ GOTO RETRY
|
||||||
|
$ ENDIF
|
||||||
|
$ ENDIF
|
||||||
|
$ FILL_BOX 'P2' 'P3' 'P4' 'P5'
|
||||||
|
$ ROW = TOP_ROW
|
||||||
|
$ GOTO WRAP_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$ FILE_CTR = FILE_CTR + 1
|
||||||
|
$ ROW = ROW + 1
|
||||||
|
$ GOTO DISPLAY_LOOP
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Display the invalid entry
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$INVALID_ENTRY: SUBROUTINE
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[''INPUT_ROW';01H", BELL, " Invalid Entry, Try again ...''CEOL'"
|
||||||
|
$ Wait 00:00:01.5
|
||||||
|
$ SAY ESC + "[''INPUT_ROW';01H", CEOL
|
||||||
|
$!
|
||||||
|
$ EXIT
|
||||||
|
$!
|
||||||
|
$ ENDSUBROUTINE
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Exit
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$EXIT:
|
||||||
|
$!
|
||||||
|
$ Verify = F$VERIFY (Verify)
|
||||||
|
$!
|
||||||
|
$ EXIT
|
||||||
62
VMS/cert_tool/ssl$rem_env.com
Normal file
62
VMS/cert_tool/ssl$rem_env.com
Normal file
@@ -0,0 +1,62 @@
|
|||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! SSL$REM_ENV.COM - Remove the SSL Initialize Environment
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ Verify = F$VERIFY (0)
|
||||||
|
$ Set NoOn
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Description
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$! This procedure deletes the SSL environment logicals & symbols set up by
|
||||||
|
$! SSL$INIT_ENV.COM.
|
||||||
|
$!
|
||||||
|
$! P1 = Mode of the logicals (ie - "/SYSTEM/EXECUTIVE_MODE").
|
||||||
|
$! Note - if P1 is not passed in, P1 will default to PROCESS.
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Initialization
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ IF F$TRNLNM("SSL$ROOT") .EQS. ""
|
||||||
|
$ THEN
|
||||||
|
$ WRITE SYS$OUTPUT " "
|
||||||
|
$ WRITE SYS$OUTPUT " SSL-E-ERROR, SSL has not been started."
|
||||||
|
$ WRITE SYS$OUTPUT " "
|
||||||
|
$ WRITE SYS$OUTPUT " Execute the command procedure, SYS$STARTUP:SSL$STARTUP.COM, and then try this procedure again."
|
||||||
|
$ WRITE SYS$OUTPUT " "
|
||||||
|
$ EXIT
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ IF P1 .EQS. ""
|
||||||
|
$ THEN
|
||||||
|
$ P1 = "/PROCESS"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Define logicals
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ DEASSIGN 'P1 SSL$CA_CONF
|
||||||
|
$ DEASSIGN 'P1 SSL$CONF
|
||||||
|
$ DEASSIGN 'P1 SSL$COM
|
||||||
|
$ DEASSIGN 'P1 SSL$CRT
|
||||||
|
$ DEASSIGN 'P1 SSL$CSR
|
||||||
|
$ DEASSIGN 'P1 SSL$KEY
|
||||||
|
$ DEASSIGN 'P1 SSL$DB
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Define foreign symbols
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ DELETE/SYMBOL/GLOBAL OPENSSL
|
||||||
|
$ DELETE/SYMBOL/GLOBAL HOSTADDR
|
||||||
|
$ DELETE/SYMBOL/GLOBAL HOSTNAME
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Exit
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ EXIT
|
||||||
769
VMS/cert_tool/ssl$rqst_cert.com
Normal file
769
VMS/cert_tool/ssl$rqst_cert.com
Normal file
@@ -0,0 +1,769 @@
|
|||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! SSL$RQST_CERT.COM - SSL Certificate Request procedure
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ Verify = F$VERIFY (0)
|
||||||
|
$ Set NoOn
|
||||||
|
$ Set NoControl=Y
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Description
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$! This procedure prompts the user through creating a Certificate Request.
|
||||||
|
$!
|
||||||
|
$! There are no parameters used.
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Define symbols
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ DELETE := DELETE
|
||||||
|
$ SAY := WRITE SYS$OUTPUT
|
||||||
|
$ ASK := READ SYS$COMMAND /END_OF_FILE=EXIT /PROMPT=
|
||||||
|
$ PID = F$GETJPI ("","PID")
|
||||||
|
$ TT_NOECHO = F$GETDVI ("TT:","TT_NOECHO")
|
||||||
|
$ On Control_Y THEN GOTO EXIT
|
||||||
|
$ Set Control=Y
|
||||||
|
$!
|
||||||
|
$ TT_ROWS = F$GETDVI ("TT:","TT_PAGE")
|
||||||
|
$ TT_COLS = F$GETDVI ("TT:","DEVBUFSIZ")
|
||||||
|
$!
|
||||||
|
$ GET_USER_DATA := CALL GET_USER_DATA
|
||||||
|
$ SET_USER_DATA := CALL SET_USER_DATA
|
||||||
|
$ DEL_USER_DATA := CALL DEL_USER_DATA
|
||||||
|
$ INIT_TERM := @SSL$COM:SSL$INIT_TERM
|
||||||
|
$ SHOW_FILE := @SSL$COM:SSL$SHOW_FILE
|
||||||
|
$ SSL_CONF_FILE = F$TRNLNM ("SSL$CONF")
|
||||||
|
$ GET_CONF_DATA := @SSL$COM:SSL$CONF_UTIL 'SSL_CONF_FILE' GET
|
||||||
|
$ SET_CONF_DATA := @SSL$COM:SSL$CONF_UTIL 'SSL_CONF_FILE' SET
|
||||||
|
$!
|
||||||
|
$ ESC[0,8] = 27 ! Set the Escape Character
|
||||||
|
$ BELL[0,8] = 7 ! Ring the terminal Bell
|
||||||
|
$ RED = 1 ! Color - Red
|
||||||
|
$ FGD = 30 ! Foreground
|
||||||
|
$ BGD = 0 ! Background
|
||||||
|
$ CSCR = ESC + "[2J" ! Clear the Screen
|
||||||
|
$ CEOS = ESC + "[0J" ! Clear to the End of the Screen
|
||||||
|
$ CEOL = ESC + "[0K" ! Clear to the End of the Line
|
||||||
|
$ NORM = ESC + "[0m" ! Turn Attributes off
|
||||||
|
$ BLNK = ESC + "[5m" ! Turn on BLINK Attribute
|
||||||
|
$ WIDE = ESC + "#6" ! Turn on WIDE Attribute
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Run the SSL setup if it hasn't been run yet
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ IF F$TRNLNM ("SSL$ROOT") .EQS. ""
|
||||||
|
$ THEN
|
||||||
|
$ IF F$SEARCH ("SSL$COM:SSL$INIT_ENV.COM") .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ @SSL$COM:SSL$INIT_ENV.COM
|
||||||
|
$ ELSE
|
||||||
|
$ SAY BELL, "Unable to locate SSL$COM:SSL$INIT_ENV.COM ..."
|
||||||
|
$ GOTO EXIT
|
||||||
|
$ ENDIF
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Display the Page Header
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ INIT_TERM
|
||||||
|
$ BCOLOR = BGD
|
||||||
|
$ FCOLOR = FGD + RED
|
||||||
|
$ COLOR = ESC + "[''BCOLOR';''FCOLOR'm"
|
||||||
|
$!
|
||||||
|
$ TEXT = "SSL Certificate Tool"
|
||||||
|
$ COL = (TT_COLS - (F$LENGTH (TEXT) * 2)) / 4
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[01;01H", CSCR
|
||||||
|
$ SAY ESC + "[02;''COL'H", COLOR, WIDE, TEXT, NORM
|
||||||
|
$!
|
||||||
|
$ TEXT = "Create Certificate Request"
|
||||||
|
$ COL = (TT_COLS - F$LENGTH (TEXT)) / 2
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[04;01H"
|
||||||
|
$ SAY ESC + "[04;''COL'H", COLOR, TEXT, NORM
|
||||||
|
$!
|
||||||
|
$ ROW = 6
|
||||||
|
$ COL = 2
|
||||||
|
$ TOP_ROW = ROW
|
||||||
|
$ MSG_ROW = TT_ROWS - 1
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Initialize the Request Data
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ IF F$SEARCH ("''SSL_CONF_FILE'") .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H", BLNK, " Reading Configuration ...", NORM
|
||||||
|
$ ELSE
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H", BLNK, " Initializing Configuration ...", NORM
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ _request_name = "req"
|
||||||
|
$!
|
||||||
|
$ _distinguished_name = "REQ_distinguished_name"
|
||||||
|
$ _distinguished_name_upd = "Y"
|
||||||
|
$!
|
||||||
|
$ _default_bits = "1024"
|
||||||
|
$ _default_bits_upd = "Y"
|
||||||
|
$!
|
||||||
|
$ _default_keyfile = "SSL$KEY:SERVER.KEY"
|
||||||
|
$ _default_keyfile_upd = "Y"
|
||||||
|
$!
|
||||||
|
$ _default_csrfile = "SSL$CSR:SERVER.CSR"
|
||||||
|
$ _default_csrfile_upd = "Y"
|
||||||
|
$!
|
||||||
|
$ _countryName_prompt = "Country Name ?"
|
||||||
|
$ _countryName_min = "2"
|
||||||
|
$ _countryName_max = "2"
|
||||||
|
$ _countryName_default = "US"
|
||||||
|
$ _countryName_upd = "Y"
|
||||||
|
$ _countryName_cnt = 4
|
||||||
|
$!
|
||||||
|
$ _stateOrProvinceName_prompt = "State or Province Name ?"
|
||||||
|
$ _stateOrProvinceName_default = ""
|
||||||
|
$ _stateOrProvinceName_upd = "Y"
|
||||||
|
$ _stateOrProvinceName_cnt = 2
|
||||||
|
$!
|
||||||
|
$ _localityName_prompt = "City Name ?"
|
||||||
|
$ _localityName_default = ""
|
||||||
|
$ _localityName_upd = "Y"
|
||||||
|
$ _localityName_cnt = 2
|
||||||
|
$!
|
||||||
|
$ _0organizationName_prompt = "Organization Name ?"
|
||||||
|
$ _0organizationName_default = ""
|
||||||
|
$ _0organizationName_upd = "Y"
|
||||||
|
$ _0organizationName_cnt = 2
|
||||||
|
$!
|
||||||
|
$ _organizationalUnitName_prompt = "Organization Unit Name ?"
|
||||||
|
$ _organizationalUnitName_default = ""
|
||||||
|
$ _organizationalUnitName_upd = "Y"
|
||||||
|
$ _organizationalUnitName_cnt = 2
|
||||||
|
$!
|
||||||
|
$ _commonName_prompt = "Common Name ?"
|
||||||
|
$ _commonName_max = "64"
|
||||||
|
$ HOSTNAME -s _commonName_default
|
||||||
|
$ _commonName_upd = "Y"
|
||||||
|
$ _commonName_cnt = 3
|
||||||
|
$!
|
||||||
|
$ _emailAddress_prompt = "Email Address ?"
|
||||||
|
$ _emailAddress_max = "40"
|
||||||
|
$ _emailAddress_default = "webmaster@''_commonName_default'"
|
||||||
|
$ _emailAddress_upd = "Y"
|
||||||
|
$ _emailAddress_cnt = 3
|
||||||
|
$!
|
||||||
|
$ IF F$SEARCH ("''SSL_CONF_FILE'") .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ GET_CONF_DATA "[''_request_name']#distinguished_name"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _distinguished_name = SSL_CONF_DATA
|
||||||
|
$ _distinguished_name_upd = "N"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ GET_CONF_DATA "[''_request_name']#default_bits"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _default_bits = SSL_CONF_DATA
|
||||||
|
$ _default_bits_upd = "N"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ GET_CONF_DATA "[''_request_name']#default_keyfile"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _default_keyfile = F$PARSE (SSL_CONF_DATA,"SSL$ROOT:",,"DEVICE") + -
|
||||||
|
F$PARSE (SSL_CONF_DATA,"[KEY]",,"DIRECTORY") + -
|
||||||
|
F$PARSE (SSL_CONF_DATA,"SERVER",,"NAME") + -
|
||||||
|
F$PARSE (SSL_CONF_DATA,".KEY",,"TYPE")
|
||||||
|
$ _default_keyfile_upd = "N"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ GET_CONF_DATA "[''_request_name']#default_csrfile"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _default_csrfile = F$PARSE (SSL_CONF_DATA,"SSL$ROOT:",,"DEVICE") + -
|
||||||
|
F$PARSE (SSL_CONF_DATA,"[CSR]",,"DIRECTORY") + -
|
||||||
|
F$PARSE (SSL_CONF_DATA,"SERVER",,"NAME") + -
|
||||||
|
F$PARSE (SSL_CONF_DATA,".CSR",,"TYPE")
|
||||||
|
$ _default_csrfile_upd = "N"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ CTR = 0
|
||||||
|
$ GET_CONF_DATA "[''_distinguished_name']#countryName"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _countryName_prompt = SSL_CONF_DATA
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ ENDIF
|
||||||
|
$ GET_CONF_DATA "[''_distinguished_name']#countryName_min"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _countryName_min = SSL_CONF_DATA
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ ENDIF
|
||||||
|
$ GET_CONF_DATA "[''_distinguished_name']#countryName_max"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _countryName_max = SSL_CONF_DATA
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ ENDIF
|
||||||
|
$ GET_CONF_DATA "[''_distinguished_name']#countryName_default"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _countryName_default = SSL_CONF_DATA
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ ENDIF
|
||||||
|
$ IF _countryName_cnt .EQ. CTR THEN _countryName_upd = "N"
|
||||||
|
$!
|
||||||
|
$ CTR = 0
|
||||||
|
$ GET_CONF_DATA "[''_distinguished_name']#stateOrProvinceName"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _stateOrProvinceName_prompt = SSL_CONF_DATA
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ ENDIF
|
||||||
|
$ GET_CONF_DATA "[''_distinguished_name']#stateOrProvinceName_default"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _stateOrProvinceName_default = SSL_CONF_DATA
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ ENDIF
|
||||||
|
$ IF _stateOrProvinceName_cnt .EQ. CTR THEN _stateOrProvinceName_upd = "N"
|
||||||
|
$!
|
||||||
|
$ CTR = 0
|
||||||
|
$ GET_CONF_DATA "[''_distinguished_name']#localityName"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _localityName_prompt = SSL_CONF_DATA
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ ENDIF
|
||||||
|
$ GET_CONF_DATA "[''_distinguished_name']#localityName_default"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _localityName_default = SSL_CONF_DATA
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ ENDIF
|
||||||
|
$ IF _localityName_cnt .EQ. CTR THEN _localityName_upd = "N"
|
||||||
|
$!
|
||||||
|
$ CTR = 0
|
||||||
|
$ GET_CONF_DATA "[''_distinguished_name']#0.organizationName"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _0organizationName_prompt = SSL_CONF_DATA
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ ENDIF
|
||||||
|
$ GET_CONF_DATA "[''_distinguished_name']#0.organizationName_default"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _0organizationName_default = SSL_CONF_DATA
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ ENDIF
|
||||||
|
$ IF _0organizationName_cnt .EQ. CTR THEN _0organizationName_upd = "N"
|
||||||
|
$!
|
||||||
|
$ CTR = 0
|
||||||
|
$ GET_CONF_DATA "[''_distinguished_name']#organizationalUnitName"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _organizationalUnitName_prompt = SSL_CONF_DATA
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ ENDIF
|
||||||
|
$ GET_CONF_DATA "[''_distinguished_name']#organizationalUnitName_default"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _organizationalUnitName_default = SSL_CONF_DATA
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ ENDIF
|
||||||
|
$ IF _organizationalUnitName_cnt .EQ. CTR THEN _organizationalUnitName_upd = "N"
|
||||||
|
$!
|
||||||
|
$ CTR = 0
|
||||||
|
$ GET_CONF_DATA "[''_distinguished_name']#commonName"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _commonName_prompt = SSL_CONF_DATA
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ ENDIF
|
||||||
|
$ GET_CONF_DATA "[''_distinguished_name']#commonName_max"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _commonName_max = SSL_CONF_DATA
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ ENDIF
|
||||||
|
$ GET_CONF_DATA "[''_distinguished_name']#commonName_default"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _commonName_default = SSL_CONF_DATA
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ ENDIF
|
||||||
|
$ IF _commonName_cnt .EQ. CTR THEN _commonName_upd = "N"
|
||||||
|
$!
|
||||||
|
$ CTR = 0
|
||||||
|
$ GET_CONF_DATA "[''_distinguished_name']#emailAddress"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _emailAddress_prompt = SSL_CONF_DATA
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ ENDIF
|
||||||
|
$ GET_CONF_DATA "[''_distinguished_name']#emailAddress_max"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _emailAddress_max = SSL_CONF_DATA
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ ENDIF
|
||||||
|
$ GET_CONF_DATA "[''_distinguished_name']#emailAddress_default"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _emailAddress_default = SSL_CONF_DATA
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ ENDIF
|
||||||
|
$ IF _emailAddress_cnt .EQ. CTR THEN _emailAddress_upd = "N"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ SET_USER_DATA "[]#encrypt_key#-#N#Encrypt Private Key ?#S##1##Y#N"
|
||||||
|
$ SET_USER_DATA "[]#pem_pass_phrase#-##PEM Pass Phrase ?#P#1###Y#Y"
|
||||||
|
$ SET_USER_DATA "[''_request_name']#default_bits#D#''_default_bits'#Encryption Bits ?#I###''_default_bits_upd'#Y#N"
|
||||||
|
$ SET_USER_DATA "[''_request_name']#default_keyfile#D#''_default_keyfile'#Certificate Key File ?#F###''_default_keyfile_upd'#Y#N"
|
||||||
|
$ SET_USER_DATA "[''_request_name']#default_csrfile#D#''_default_csrfile'#Certificate Request File ?#F###''_default_csrfile_upd'#Y#N"
|
||||||
|
$ SET_USER_DATA "[''_request_name']#distinguished_name#D#''_distinguished_name'##S###''_distinguished_name_upd'#N#N"
|
||||||
|
$ SET_USER_DATA "[''_distinguished_name']#countryName#P#''_countryName_default'#''_countryName_prompt'#S#''_countryName_min'#''_countryName_max'#''_countryName_upd'#Y#N"
|
||||||
|
$ SET_USER_DATA "[''_distinguished_name']#stateOrProvinceName#P#''_stateOrProvinceName_default'#''_stateOrProvinceName_prompt'#S###''_stateOrProvinceName_upd'#Y#N"
|
||||||
|
$ SET_USER_DATA "[''_distinguished_name']#localityName#P#''_localityName_default'#''_localityName_prompt'#S###''_localityName_upd'#Y#N"
|
||||||
|
$ SET_USER_DATA "[''_distinguished_name']#0.organizationName#P#''_0organizationName_default'#''_0organizationName_prompt'#S###''_0organizationName_upd'#Y#N"
|
||||||
|
$ SET_USER_DATA "[''_distinguished_name']#organizationalUnitName#P#''_organizationalUnitName_default'#''_organizationalUnitName_prompt'#S###''_organizationUnitName_upd'#Y#N"
|
||||||
|
$ SET_USER_DATA "[''_distinguished_name']#commonName#P#''_commonName_default'#''_commonName_prompt'#S##''_commonName_max'#''_commonName_upd'#Y#N"
|
||||||
|
$ SET_USER_DATA "[''_distinguished_name']#emailAddress#P#''_emailAddress_default'#''_emailAddress_prompt'#S##''_emailAddress_max'#''_emailAddress_upd'#Y#N"
|
||||||
|
$ SET_USER_DATA "[]#display_certificate#-#N#Display the Certificate ?#S##1##Y#N"
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H", CEOS
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Confirm/Update the SSL Configuration Data
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ CTR = 1
|
||||||
|
$!
|
||||||
|
$PROMPT_LOOP:
|
||||||
|
$!
|
||||||
|
$ IF CTR .LE. SSL_USER_DATA_MAX
|
||||||
|
$ THEN
|
||||||
|
$ KEY = F$ELEMENT (0,"#",SSL_USER_DATA_'CTR') ! Key Name
|
||||||
|
$ ITM = F$ELEMENT (1,"#",SSL_USER_DATA_'CTR') ! Item Name
|
||||||
|
$ VAL = F$ELEMENT (2,"#",SSL_USER_DATA_'CTR') ! Item Value Contains Default or Prompt
|
||||||
|
$ DEF = F$ELEMENT (3,"#",SSL_USER_DATA_'CTR') ! Default Value
|
||||||
|
$ PRM = F$ELEMENT (4,"#",SSL_USER_DATA_'CTR') ! Prompt Value
|
||||||
|
$ TYP = F$ELEMENT (5,"#",SSL_USER_DATA_'CTR') ! Value Type
|
||||||
|
$ MIN = F$ELEMENT (6,"#",SSL_USER_DATA_'CTR') ! Value Minimum Length
|
||||||
|
$ MAX = F$ELEMENT (7,"#",SSL_USER_DATA_'CTR') ! Value Maximum Length
|
||||||
|
$ UPD = F$ELEMENT (8,"#",SSL_USER_DATA_'CTR') ! Entry Updated ?
|
||||||
|
$ REQ = F$ELEMENT (9,"#",SSL_USER_DATA_'CTR') ! Entry Required for Input ?
|
||||||
|
$ CFM = F$ELEMENT (10,"#",SSL_USER_DATA_'CTR')! Confirm Input ?
|
||||||
|
$!
|
||||||
|
$! The PEM Pass Phrase prompt is dependant on the answer to encrypt the private key
|
||||||
|
$!
|
||||||
|
$ IF KEY .EQS. "[]" .AND. ITM .EQS. "pem_pass_phrase"
|
||||||
|
$ THEN
|
||||||
|
$ GET_USER_DATA "[]#encrypt_key"
|
||||||
|
$ _encrypt_key = SSL_USER_DATA
|
||||||
|
$ IF F$EDIT (_encrypt_key,"UPCASE") .NES. "Y"
|
||||||
|
$ THEN
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ GOTO PROMPT_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ CONFIRMED = 0
|
||||||
|
$ IF REQ .EQS. "N"
|
||||||
|
$ THEN
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ GOTO PROMPT_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$ IF ROW .GT. MSG_ROW - 2
|
||||||
|
$ THEN
|
||||||
|
$ SAY ESC + "[''TOP_ROW';01H", CEOS
|
||||||
|
$ ROW = TOP_ROW
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$CONFIRM_LOOP:
|
||||||
|
$!
|
||||||
|
$ IF PRM .EQS. ""
|
||||||
|
$ THEN
|
||||||
|
$ PROMPT = ESC + "[''ROW';''COL'H''ITM' ? [''DEF'] ''CEOL'"
|
||||||
|
$ ELSE
|
||||||
|
$ PROMPT = ESC + "[''ROW';''COL'H''PRM' [''DEF'] ''CEOL'"
|
||||||
|
$ ENDIF
|
||||||
|
$ IF TYP .EQS. "P" THEN SET TERMINAL /NOECHO
|
||||||
|
$ ASK "''PROMPT'" ANS /END_OF_FILE=EXIT
|
||||||
|
$ IF TYP .EQS. "P" THEN SET TERMINAL /ECHO
|
||||||
|
$ ANS = F$EDIT (ANS,"TRIM")
|
||||||
|
$ IF ANS .EQS. "" THEN ANS = DEF
|
||||||
|
$ IF TYP .EQS. "F"
|
||||||
|
$ THEN
|
||||||
|
$ ANS = F$PARSE ("''ANS'","''DEF'",,,"SYNTAX_ONLY")
|
||||||
|
$ ENDIF
|
||||||
|
$ IF TYP .EQS. "I" .AND. F$TYPE (ANS) .NES. "INTEGER"
|
||||||
|
$ THEN
|
||||||
|
$ CALL INVALID_ENTRY
|
||||||
|
$ SAY ESC + "[''ROW';01H", CEOS
|
||||||
|
$ GOTO PROMPT_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$ IF (TYP .EQS. "S" .OR. TYP .EQS. "P") .AND. -
|
||||||
|
((MIN .NES. "" .AND. F$LENGTH (ANS) .LT. F$INTEGER(MIN)) .OR. -
|
||||||
|
(MAX .NES. "" .AND. F$LENGTH (ANS) .GT. F$INTEGER(MAX)))
|
||||||
|
$ THEN
|
||||||
|
$ CALL INVALID_ENTRY
|
||||||
|
$ SAY ESC + "[''ROW';01H", CEOS
|
||||||
|
$ IF TYP .EQS. "S" THEN GOTO PROMPT_LOOP
|
||||||
|
$ IF TYP .EQS. "P" THEN GOTO CONFIRM_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$ ROW = ROW + 1
|
||||||
|
$ IF CFM .EQS. "Y"
|
||||||
|
$ THEN
|
||||||
|
$ IF CONFIRMED .EQ. 0
|
||||||
|
$ THEN
|
||||||
|
$ CONFIRMED = 1
|
||||||
|
$ CONFIRMED_ANS = ANS
|
||||||
|
$ PRM = "Confirm ''PRM'"
|
||||||
|
$ GOTO CONFIRM_LOOP
|
||||||
|
$ ELSE
|
||||||
|
$ IF ANS .NES. CONFIRMED_ANS
|
||||||
|
$ THEN
|
||||||
|
$ CALL INVALID_ENTRY
|
||||||
|
$ ROW = ROW - 2
|
||||||
|
$ SAY ESC + "[''ROW';01H", CEOS
|
||||||
|
$ GOTO PROMPT_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$ ENDIF
|
||||||
|
$ ENDIF
|
||||||
|
$ IF ANS .NES. DEF THEN SSL_USER_DATA_'CTR' = "''KEY'#''ITM'#''VAL'#''ANS'#''PRM'#''TYP'#''MIN'#''MAX'#Y#''REQ'#''CFM'"
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ GOTO PROMPT_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Save the SSL Configuration Data
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ CTR = 1
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H", BLNK, " Saving Configuration ...", NORM
|
||||||
|
$!
|
||||||
|
$SAVE_CONF_LOOP:
|
||||||
|
$!
|
||||||
|
$ IF CTR .LE. SSL_USER_DATA_MAX
|
||||||
|
$ THEN
|
||||||
|
$ KEY = F$ELEMENT (0,"#",SSL_USER_DATA_'CTR') ! Key Name
|
||||||
|
$ ITM = F$ELEMENT (1,"#",SSL_USER_DATA_'CTR') ! Item Name
|
||||||
|
$ VAL = F$ELEMENT (2,"#",SSL_USER_DATA_'CTR') ! Item Value Contains Default or Prompt
|
||||||
|
$ DEF = F$ELEMENT (3,"#",SSL_USER_DATA_'CTR') ! Default Value
|
||||||
|
$ PRM = F$ELEMENT (4,"#",SSL_USER_DATA_'CTR') ! Prompt Value
|
||||||
|
$ TYP = F$ELEMENT (5,"#",SSL_USER_DATA_'CTR') ! Value Type
|
||||||
|
$ MIN = F$ELEMENT (6,"#",SSL_USER_DATA_'CTR') ! Value Minimum Length
|
||||||
|
$ MAX = F$ELEMENT (7,"#",SSL_USER_DATA_'CTR') ! Value Maximum Length
|
||||||
|
$ UPD = F$ELEMENT (8,"#",SSL_USER_DATA_'CTR') ! Entry Updated ?
|
||||||
|
$ REQ = F$ELEMENT (9,"#",SSL_USER_DATA_'CTR') ! Entry Required for Input ?
|
||||||
|
$ CFM = F$ELEMENT (10,"#",SSL_USER_DATA_'CTR')! Confirm Input ?
|
||||||
|
$ IF UPD .NES. "Y" .OR. VAL .EQS. "-"
|
||||||
|
$ THEN
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ GOTO SAVE_CONF_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$ IF VAL .EQS. "D"
|
||||||
|
$ THEN
|
||||||
|
$ SET_CONF_DATA "''KEY'#''ITM'" "''DEF'"
|
||||||
|
$ ELSE
|
||||||
|
$ SET_CONF_DATA "''KEY'#''ITM'" "''PRM'"
|
||||||
|
$ SET_CONF_DATA "''KEY'#''ITM'_default" "''DEF'"
|
||||||
|
$ ENDIF
|
||||||
|
$ IF MIN .NES. "" THEN SET_CONF_DATA "''KEY'#''ITM'_min" "''MIN'"
|
||||||
|
$ IF MAX .NES. "" THEN SET_CONF_DATA "''KEY'#''ITM'_max" "''MAX'"
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ GOTO SAVE_CONF_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ PURGE /NOLOG /NOCONFIRM 'SSL_CONF_FILE'
|
||||||
|
$ RENAME 'SSL_CONF_FILE'; ;1
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H", CEOS
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Create the Server Certificiate
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H", BLNK, " Creating Certificate Request ...", NORM
|
||||||
|
$!
|
||||||
|
$ X1 = 2
|
||||||
|
$ Y1 = TOP_ROW
|
||||||
|
$ X2 = TT_COLS - 2
|
||||||
|
$ Y2 = MSG_ROW - 1
|
||||||
|
$!
|
||||||
|
$ GET_USER_DATA "[]#encrypt_key"
|
||||||
|
$ _encrypt_key = SSL_USER_DATA
|
||||||
|
$ IF F$EDIT (_encrypt_key,"UPCASE") .EQS. "Y"
|
||||||
|
$ THEN
|
||||||
|
$ GET_USER_DATA "[]#pem_pass_phrase"
|
||||||
|
$ _pem_pass_phrase = SSL_USER_DATA
|
||||||
|
$ ENDIF
|
||||||
|
$ GET_USER_DATA "[req]#default_bits"
|
||||||
|
$ _default_bits = SSL_USER_DATA
|
||||||
|
$ GET_USER_DATA "[req]#default_keyfile"
|
||||||
|
$ _default_keyfile = SSL_USER_DATA
|
||||||
|
$ GET_USER_DATA "[req]#default_csrfile"
|
||||||
|
$ _default_csrfile = SSL_USER_DATA
|
||||||
|
$ GET_USER_DATA "[]#display_certificate"
|
||||||
|
$ _display_certificate = SSL_USER_DATA
|
||||||
|
$!
|
||||||
|
$!
|
||||||
|
$ DEFINE /USER /NOLOG SYS$ERROR NL:
|
||||||
|
$ DEFINE /USER /NOLOG SYS$OUTPUT NL:
|
||||||
|
$ SHOW SYSTEM /FULL /OUT=SYS$LOGIN:SSL_GENRSA_'PID'.RND
|
||||||
|
$!
|
||||||
|
$ OPEN /WRITE OFILE SYS$LOGIN:SSL_GENRSA_'PID'.COM
|
||||||
|
$ WRITE OFILE "$ DEFINE /USER /NOLOG RANDFILE SYS$LOGIN:SSL_GENRSA_''PID'.RND"
|
||||||
|
$ WRITE OFILE "$ DEFINE /USER /NOLOG SYS$ERROR SYS$LOGIN:SSL_GENRSA_''PID'.LOG"
|
||||||
|
$ WRITE OFILE "$ DEFINE /USER /NOLOG SYS$OUTPUT SYS$LOGIN:SSL_GENRSA_''PID'.LOG"
|
||||||
|
$ WRITE OFILE "$ DEFINE /USER /NOLOG SYS$COMMAND SYS$INPUT"
|
||||||
|
$ IF _encrypt_key .EQS. "Y"
|
||||||
|
$ THEN
|
||||||
|
$ WRITE OFILE "$ OPENSSL genrsa -des3 -out ''_default_keyfile' ''_default_bits'"
|
||||||
|
$ WRITE OFILE "''_pem_pass_phrase'"
|
||||||
|
$ WRITE OFILE "''_pem_pass_phrase'"
|
||||||
|
$ ELSE
|
||||||
|
$ WRITE OFILE "$ OPENSSL genrsa -out ''_default_keyfile' ''_default_bits'"
|
||||||
|
$ ENDIF
|
||||||
|
$ CLOSE OFILE
|
||||||
|
$!
|
||||||
|
$ @SYS$LOGIN:SSL_GENRSA_'PID'.COM
|
||||||
|
$!
|
||||||
|
$ DELETE/NOLOG/NOCONFIRM SYS$LOGIN:SSL_GENRSA_'PID'.RND;*
|
||||||
|
$ DELETE/NOLOG/NOCONFIRM SYS$LOGIN:SSL_GENRSA_'PID'.COM;*
|
||||||
|
$!
|
||||||
|
$ DEFINE /USER /NOLOG SYS$ERROR NL:
|
||||||
|
$ DEFINE /USER /NOLOG SYS$OUTPUT NL:
|
||||||
|
$ SEARCH SYS$LOGIN:SSL_GENRSA_'PID'.LOG /OUT=SYS$LOGIN:SSL_GENRSA_'PID'.ERR ":error:"
|
||||||
|
$ IF F$SEARCH ("SYS$LOGIN:SSL_GENRSA_''PID'.ERR") .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ IF F$FILE_ATTRIBUTE ("SYS$LOGIN:SSL_GENRSA_''PID'.ERR","ALQ") .NE. 0
|
||||||
|
$ THEN
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_GENRSA_'PID'.ERR;*
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H''BELL'''CEOS'"
|
||||||
|
$ SHOW_FILE "SYS$LOGIN:SSL_GENRSA_''PID'.LOG" 'X1' 'Y1' 'X2' 'Y2' "< ERROR >"
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_GENRSA_'PID'.LOG;*
|
||||||
|
$ GOTO EXIT
|
||||||
|
$ ENDIF
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_GENRSA_'PID'.ERR;*
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_GENRSA_'PID'.LOG;*
|
||||||
|
$!
|
||||||
|
$!
|
||||||
|
$ DEFINE /USER /NOLOG SYS$ERROR NL:
|
||||||
|
$ DEFINE /USER /NOLOG SYS$OUTPUT NL:
|
||||||
|
$ SHOW SYSTEM /FULL /OUT=SYS$LOGIN:SSL_REQ_'PID'.RND
|
||||||
|
$!
|
||||||
|
$ OPEN /WRITE OFILE SYS$LOGIN:SSL_REQ_'PID'.COM
|
||||||
|
$ WRITE OFILE "$ DEFINE /USER /NOLOG RANDFILE SYS$LOGIN:SSL_REQ_''PID'.RND"
|
||||||
|
$ WRITE OFILE "$ DEFINE /USER /NOLOG SYS$ERROR SYS$LOGIN:SSL_REQ_''PID'.LOG"
|
||||||
|
$ WRITE OFILE "$ DEFINE /USER /NOLOG SYS$OUTPUT SYS$LOGIN:SSL_REQ_''PID'.LOG"
|
||||||
|
$ WRITE OFILE "$ DEFINE /USER /NOLOG SYS$COMMAND SYS$INPUT"
|
||||||
|
$ IF _encrypt_key .EQS. "Y"
|
||||||
|
$ THEN
|
||||||
|
$ WRITE OFILE "$ OPENSSL req -new -config ''SSL_CONF_FILE' -key ''_default_keyfile' -out ''_default_csrfile'"
|
||||||
|
$ WRITE OFILE "''_pem_pass_phrase'"
|
||||||
|
$ WRITE OFILE "''_pem_pass_phrase'"
|
||||||
|
$ ELSE
|
||||||
|
$ WRITE OFILE "$ OPENSSL req -new -nodes -config ''SSL_CONF_FILE' -keyout ''_default_keyfile' -out ''_default_csrfile'"
|
||||||
|
$ ENDIF
|
||||||
|
$ WRITE OFILE ""
|
||||||
|
$ WRITE OFILE ""
|
||||||
|
$ WRITE OFILE ""
|
||||||
|
$ WRITE OFILE ""
|
||||||
|
$ WRITE OFILE ""
|
||||||
|
$ WRITE OFILE ""
|
||||||
|
$ WRITE OFILE ""
|
||||||
|
$ CLOSE OFILE
|
||||||
|
$!
|
||||||
|
$ @SYS$LOGIN:SSL_REQ_'PID'.COM
|
||||||
|
$!
|
||||||
|
$ DELETE/NOLOG/NOCONFIRM SYS$LOGIN:SSL_REQ_'PID'.COM;*
|
||||||
|
$!
|
||||||
|
$ DEFINE /USER /NOLOG SYS$ERROR NL:
|
||||||
|
$ DEFINE /USER /NOLOG SYS$OUTPUT NL:
|
||||||
|
$ SEARCH SYS$LOGIN:SSL_REQ_'PID'.LOG /OUT=SYS$LOGIN:SSL_REQ_'PID'.ERR ":error:"
|
||||||
|
$ IF F$SEARCH ("SYS$LOGIN:SSL_REQ_''PID'.ERR") .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ IF F$FILE_ATTRIBUTE ("SYS$LOGIN:SSL_REQ_''PID'.ERR","ALQ") .NE. 0
|
||||||
|
$ THEN
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_REQ_'PID'.ERR;*
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H''BELL'''CEOS'"
|
||||||
|
$ SHOW_FILE "SYS$LOGIN:SSL_REQ_''PID'.LOG" 'X1' 'Y1' 'X2' 'Y2' "< ERROR >"
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_REQ_'PID'.LOG;*
|
||||||
|
$ GOTO EXIT
|
||||||
|
$ ENDIF
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_REQ_'PID'.ERR;*
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_REQ_'PID'.LOG;*
|
||||||
|
$!
|
||||||
|
$ IF F$EDIT (_display_certificate,"TRIM,UPCASE") .EQS. "Y"
|
||||||
|
$ THEN
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H", BLNK, " Generating Output ...", NORM, CEOL
|
||||||
|
$!
|
||||||
|
$ OPEN /WRITE OFILE SYS$LOGIN:SSL_REQ_'PID'.COM
|
||||||
|
$ WRITE OFILE "$ DEFINE /USER /NOLOG SYS$ERROR SYS$LOGIN:SSL_REQ_''PID'.LOG"
|
||||||
|
$ WRITE OFILE "$ DEFINE /USER /NOLOG SYS$OUTPUT SYS$LOGIN:SSL_REQ_''PID'.LOG"
|
||||||
|
$ WRITE OFILE "$ DEFINE /USER /NOLOG SYS$COMMAND SYS$INPUT"
|
||||||
|
$ WRITE OFILE "$ OPENSSL req -noout -text -config ''SSL_CONF_FILE' -in ''_default_csrfile'"
|
||||||
|
$ CLOSE OFILE
|
||||||
|
$!
|
||||||
|
$ @SYS$LOGIN:SSL_REQ_'PID'.COM
|
||||||
|
$!
|
||||||
|
$ DELETE/NOLOG/NOCONFIRM SYS$LOGIN:SSL_REQ_'PID'.COM;*
|
||||||
|
$!
|
||||||
|
$ DEFINE /USER /NOLOG SYS$ERROR NL:
|
||||||
|
$ DEFINE /USER /NOLOG SYS$OUTPUT NL:
|
||||||
|
$ SEARCH SYS$LOGIN:SSL_REQ_'PID'.LOG /OUT=SYS$LOGIN:SSL_REQ_'PID'.ERR ":error:"
|
||||||
|
$ IF F$SEARCH ("SYS$LOGIN:SSL_REQ_''PID'.ERR") .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ IF F$FILE_ATTRIBUTE ("SYS$LOGIN:SSL_REQ_''PID'.ERR","ALQ") .NE. 0
|
||||||
|
$ THEN
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_REQ_'PID'.ERR;*
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H''BELL'''CEOS'"
|
||||||
|
$ SHOW_FILE "SYS$LOGIN:SSL_REQ_''PID'.LOG" 'X1' 'Y1' 'X2' 'Y2' "< ERROR >"
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_REQ_'PID'.LOG;*
|
||||||
|
$ GOTO EXIT
|
||||||
|
$ ENDIF
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_REQ_'PID'.ERR;*
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H''CEOS'"
|
||||||
|
$ SHOW_FILE "SYS$LOGIN:SSL_REQ_''PID'.LOG" 'X1' 'Y1' 'X2' 'Y2' "< ''_default_csrfile' >"
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_REQ_'PID'.LOG;*
|
||||||
|
$ GOTO EXIT
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ TEXT = "Press return to continue"
|
||||||
|
$ COL = (TT_COLS - F$LENGTH (TEXT)) / 2
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H", CEOS
|
||||||
|
$ PROMPT = ESC + "[''MSG_ROW';''COL'H''TEXT'"
|
||||||
|
$ ASK "''PROMPT'" OPT
|
||||||
|
$!
|
||||||
|
$GOTO EXIT
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Set the User Data
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$SET_USER_DATA: SUBROUTINE
|
||||||
|
$!
|
||||||
|
$ IF F$TYPE (SSL_USER_DATA_MAX) .EQS. ""
|
||||||
|
$ THEN
|
||||||
|
$ SSL_USER_DATA_MAX == 1
|
||||||
|
$ ELSE
|
||||||
|
$ SSL_USER_DATA_MAX == SSL_USER_DATA_MAX + 1
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ SSL_USER_DATA_'SSL_USER_DATA_MAX' == "''P1'"
|
||||||
|
$!
|
||||||
|
$ EXIT
|
||||||
|
$!
|
||||||
|
$ ENDSUBROUTINE
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Get the User Data
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$GET_USER_DATA: SUBROUTINE
|
||||||
|
$!
|
||||||
|
$ CTR = 1
|
||||||
|
$ USER_KEY = F$ELEMENT (0,"#",P1)
|
||||||
|
$ USER_ITM = F$ELEMENT (1,"#",P1)
|
||||||
|
$!
|
||||||
|
$GET_USER_DATA_LOOP:
|
||||||
|
$!
|
||||||
|
$ IF CTR .LE. SSL_USER_DATA_MAX
|
||||||
|
$ THEN
|
||||||
|
$ KEY = F$ELEMENT (0,"#",SSL_USER_DATA_'CTR') ! Key Name
|
||||||
|
$ ITM = F$ELEMENT (1,"#",SSL_USER_DATA_'CTR') ! Item Name
|
||||||
|
$ VAL = F$ELEMENT (2,"#",SSL_USER_DATA_'CTR') ! Item Value Contains Default or Prompt
|
||||||
|
$ DEF = F$ELEMENT (3,"#",SSL_USER_DATA_'CTR') ! Default Value
|
||||||
|
$ PRM = F$ELEMENT (4,"#",SSL_USER_DATA_'CTR') ! Prompt Value
|
||||||
|
$ IF USER_KEY .NES. KEY .OR. USER_ITM .NES. ITM
|
||||||
|
$ THEN
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ GOTO GET_USER_DATA_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$ IF VAL .EQS. "-" THEN SSL_USER_DATA == "''DEF'"
|
||||||
|
$ IF VAL .EQS. "D" THEN SSL_USER_DATA == "''DEF'"
|
||||||
|
$ IF VAL .EQS. "P" THEN SSL_USER_DATA == "''PRM'"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ EXIT
|
||||||
|
$!
|
||||||
|
$ ENDSUBROUTINE
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Delete the User Data
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$DEL_USER_DATA: SUBROUTINE
|
||||||
|
$!
|
||||||
|
$ IF F$TYPE (SSL_USER_DATA_MAX) .EQS. "" THEN GOTO DEL_USER_DATA_END
|
||||||
|
$!
|
||||||
|
$DEL_USER_DATA_LOOP:
|
||||||
|
$!
|
||||||
|
$ IF F$TYPE (SSL_USER_DATA_'SSL_USER_DATA_MAX') .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ DELETE /SYMBOL /GLOBAL SSL_USER_DATA_'SSL_USER_DATA_MAX'
|
||||||
|
$ SSL_USER_DATA_MAX == SSL_USER_DATA_MAX - 1
|
||||||
|
$ GOTO DEL_USER_DATA_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ DELETE /SYMBOL /GLOBAL SSL_USER_DATA_MAX
|
||||||
|
$!
|
||||||
|
$DEL_USER_DATA_END:
|
||||||
|
$!
|
||||||
|
$ IF F$TYPE (SSL_USER_DATA) .NES. "" THEN DELETE /SYMBOL /GLOBAL SSL_USER_DATA
|
||||||
|
$!
|
||||||
|
$ EXIT
|
||||||
|
$!
|
||||||
|
$ ENDSUBROUTINE
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Display the invalid entry
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$INVALID_ENTRY: SUBROUTINE
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H", BELL, " Invalid Entry, Try again ...''CEOL'"
|
||||||
|
$ Wait 00:00:01.5
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H", CEOL
|
||||||
|
$!
|
||||||
|
$ EXIT
|
||||||
|
$!
|
||||||
|
$ ENDSUBROUTINE
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$EXIT:
|
||||||
|
$!
|
||||||
|
$ DEFINE /USER /NOLOG SYS$ERROR NL:
|
||||||
|
$ DEFINE /USER /NOLOG SYS$OUTPUT NL:
|
||||||
|
$ CLOSE OFILE
|
||||||
|
$!
|
||||||
|
$ DEL_USER_DATA
|
||||||
|
$!
|
||||||
|
$ IF F$TYPE (SSL_CONF_DATA) .NES. "" THEN DELETE /SYMBOL /GLOBAL SSL_CONF_DATA
|
||||||
|
$!
|
||||||
|
$ IF F$GETDVI ("TT:","TT_NOECHO") .AND. .NOT. TT_NOECHO THEN SET TERMINAL /ECHO
|
||||||
|
$!
|
||||||
|
$ IF F$SEARCH ("SYS$LOGIN:SSL_GENRSA_''PID'.%%%;*") .NES. "" THEN DELETE/NOLOG/NOCONFIRM SYS$LOGIN:SSL_GENRSA_'PID'.%%%;*
|
||||||
|
$ IF F$SEARCH ("SYS$LOGIN:SSL_REQ_''PID'.%%%;*") .NES. "" THEN DELETE/NOLOG/NOCONFIRM SYS$LOGIN:SSL_REQ_'PID'.%%%;*
|
||||||
|
$!
|
||||||
|
$ Verify = F$VERIFY (Verify)
|
||||||
|
$!
|
||||||
|
$ EXIT
|
||||||
725
VMS/cert_tool/ssl$self_cert.com
Normal file
725
VMS/cert_tool/ssl$self_cert.com
Normal file
@@ -0,0 +1,725 @@
|
|||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! SSL$SELF_CERT.COM - SSL Self Signed Certificate procedure
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ Verify = F$VERIFY (0)
|
||||||
|
$ Set NoOn
|
||||||
|
$ Set NoControl=Y
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Description
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$! This procedure prompts the user through creating a Server Certificate.
|
||||||
|
$!
|
||||||
|
$! There are no parameters used.
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Define symbols
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ DELETE := DELETE
|
||||||
|
$ SAY := WRITE SYS$OUTPUT
|
||||||
|
$ ASK := READ SYS$COMMAND /END_OF_FILE=EXIT /PROMPT=
|
||||||
|
$ PID = F$GETJPI ("","PID")
|
||||||
|
$ TT_NOECHO = F$GETDVI ("TT:","TT_NOECHO")
|
||||||
|
$ On Control_Y THEN GOTO EXIT
|
||||||
|
$ Set Control=Y
|
||||||
|
$!
|
||||||
|
$ TT_ROWS = F$GETDVI ("TT:","TT_PAGE")
|
||||||
|
$ TT_COLS = F$GETDVI ("TT:","DEVBUFSIZ")
|
||||||
|
$!
|
||||||
|
$ GET_USER_DATA := CALL GET_USER_DATA
|
||||||
|
$ SET_USER_DATA := CALL SET_USER_DATA
|
||||||
|
$ DEL_USER_DATA := CALL DEL_USER_DATA
|
||||||
|
$ INIT_TERM := @SSL$COM:SSL$INIT_TERM
|
||||||
|
$ SHOW_FILE := @SSL$COM:SSL$SHOW_FILE
|
||||||
|
$ SSL_CONF_FILE = F$TRNLNM ("SSL$CONF")
|
||||||
|
$ GET_CONF_DATA := @SSL$COM:SSL$CONF_UTIL 'SSL_CONF_FILE' GET
|
||||||
|
$ SET_CONF_DATA := @SSL$COM:SSL$CONF_UTIL 'SSL_CONF_FILE' SET
|
||||||
|
$!
|
||||||
|
$ ESC[0,8] = 27 ! Set the Escape Character
|
||||||
|
$ BELL[0,8] = 7 ! Ring the terminal Bell
|
||||||
|
$ RED = 1 ! Color - Red
|
||||||
|
$ FGD = 30 ! Foreground
|
||||||
|
$ BGD = 0 ! Background
|
||||||
|
$ CSCR = ESC + "[2J" ! Clear the Screen
|
||||||
|
$ CEOS = ESC + "[0J" ! Clear to the End of the Screen
|
||||||
|
$ CEOL = ESC + "[0K" ! Clear to the End of the Line
|
||||||
|
$ NORM = ESC + "[0m" ! Turn Attributes off
|
||||||
|
$ BLNK = ESC + "[5m" ! Turn on BLINK Attribute
|
||||||
|
$ WIDE = ESC + "#6" ! Turn on WIDE Attribute
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Run the SSL setup if it hasn't been run yet
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ IF F$TRNLNM ("SSL$ROOT") .EQS. ""
|
||||||
|
$ THEN
|
||||||
|
$ IF F$SEARCH ("SSL$COM:SSL$INIT_ENV.COM") .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ @SSL$COM:SSL$INIT_ENV.COM
|
||||||
|
$ ELSE
|
||||||
|
$ SAY BELL, "Unable to locate SSL$COM:SSL$INIT_ENV.COM ..."
|
||||||
|
$ GOTO EXIT
|
||||||
|
$ ENDIF
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Display the Page Header
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ INIT_TERM
|
||||||
|
$ BCOLOR = BGD
|
||||||
|
$ FCOLOR = FGD + RED
|
||||||
|
$ COLOR = ESC + "[''BCOLOR';''FCOLOR'm"
|
||||||
|
$!
|
||||||
|
$ TEXT = "SSL Certificate Tool"
|
||||||
|
$ COL = (TT_COLS - (F$LENGTH (TEXT) * 2)) / 4
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[01;01H", CSCR
|
||||||
|
$ SAY ESC + "[02;''COL'H", COLOR, WIDE, TEXT, NORM
|
||||||
|
$!
|
||||||
|
$ TEXT = "Create Self-Signed Certificate"
|
||||||
|
$ COL = (TT_COLS - F$LENGTH (TEXT)) / 2
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[04;01H"
|
||||||
|
$ SAY ESC + "[04;''COL'H", COLOR, TEXT, NORM
|
||||||
|
$!
|
||||||
|
$ ROW = 6
|
||||||
|
$ COL = 2
|
||||||
|
$ TOP_ROW = ROW
|
||||||
|
$ MSG_ROW = TT_ROWS - 1
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Initialize the Request Data
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ IF F$SEARCH ("''SSL_CONF_FILE'") .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H", BLNK, " Reading Configuration ...", NORM
|
||||||
|
$ ELSE
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H", BLNK, " Initializing Configuration ...", NORM
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ _request_name = "req"
|
||||||
|
$!
|
||||||
|
$ _distinguished_name = "REQ_distinguished_name"
|
||||||
|
$ _distinguished_name_upd = "Y"
|
||||||
|
$!
|
||||||
|
$ _default_bits = "1024"
|
||||||
|
$ _default_bits_upd = "Y"
|
||||||
|
$!
|
||||||
|
$ _default_keyfile = "SSL$KEY:SERVER.KEY"
|
||||||
|
$ _default_keyfile_upd = "Y"
|
||||||
|
$!
|
||||||
|
$ _default_crtfile = "SSL$CRT:SERVER.CRT"
|
||||||
|
$ _default_crtfile_upd = "Y"
|
||||||
|
$!
|
||||||
|
$ _countryName_prompt = "Country Name ?"
|
||||||
|
$ _countryName_min = "2"
|
||||||
|
$ _countryName_max = "2"
|
||||||
|
$ _countryName_default = "US"
|
||||||
|
$ _countryName_upd = "Y"
|
||||||
|
$ _countryName_cnt = 4
|
||||||
|
$!
|
||||||
|
$ _stateOrProvinceName_prompt = "State or Province Name ?"
|
||||||
|
$ _stateOrProvinceName_default = ""
|
||||||
|
$ _stateOrProvinceName_upd = "Y"
|
||||||
|
$ _stateOrProvinceName_cnt = 2
|
||||||
|
$!
|
||||||
|
$ _localityName_prompt = "City Name ?"
|
||||||
|
$ _localityName_default = ""
|
||||||
|
$ _localityName_upd = "Y"
|
||||||
|
$ _localityName_cnt = 2
|
||||||
|
$!
|
||||||
|
$ _0organizationName_prompt = "Organization Name ?"
|
||||||
|
$ _0organizationName_default = ""
|
||||||
|
$ _0organizationName_upd = "Y"
|
||||||
|
$ _0organizationName_cnt = 2
|
||||||
|
$!
|
||||||
|
$ _organizationalUnitName_prompt = "Organization Unit Name ?"
|
||||||
|
$ _organizationalUnitName_default = ""
|
||||||
|
$ _organizationalUnitName_upd = "Y"
|
||||||
|
$ _organizationalUnitName_cnt = 2
|
||||||
|
$!
|
||||||
|
$ _commonName_prompt = "Common Name ?"
|
||||||
|
$ _commonName_max = "64"
|
||||||
|
$ HOSTNAME -s _commonName_default
|
||||||
|
$ _commonName_upd = "Y"
|
||||||
|
$ _commonName_cnt = 3
|
||||||
|
$!
|
||||||
|
$ _emailAddress_prompt = "Email Address ?"
|
||||||
|
$ _emailAddress_max = "40"
|
||||||
|
$ _emailAddress_default = "webmaster@''_commonName_default'"
|
||||||
|
$ _emailAddress_upd = "Y"
|
||||||
|
$ _emailAddress_cnt = 3
|
||||||
|
$!
|
||||||
|
$ IF F$SEARCH ("''SSL_CONF_FILE'") .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ GET_CONF_DATA "[''_request_name']#distinguished_name"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _distinguished_name = SSL_CONF_DATA
|
||||||
|
$ _distinguished_name_upd = "N"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ GET_CONF_DATA "[''_request_name']#default_bits"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _default_bits = SSL_CONF_DATA
|
||||||
|
$ _default_bits_upd = "N"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ GET_CONF_DATA "[''_request_name']#default_keyfile"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _default_keyfile = F$PARSE (SSL_CONF_DATA,"SSL$ROOT:",,"DEVICE") + -
|
||||||
|
F$PARSE (SSL_CONF_DATA,"[KEY]",,"DIRECTORY") + -
|
||||||
|
F$PARSE (SSL_CONF_DATA,"SERVER",,"NAME") + -
|
||||||
|
F$PARSE (SSL_CONF_DATA,".KEY",,"TYPE")
|
||||||
|
$ _default_keyfile_upd = "N"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ GET_CONF_DATA "[''_request_name']#default_crtfile"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _default_crtfile = F$PARSE (SSL_CONF_DATA,"SSL$ROOT:",,"DEVICE") + -
|
||||||
|
F$PARSE (SSL_CONF_DATA,"[CRT]",,"DIRECTORY") + -
|
||||||
|
F$PARSE (SSL_CONF_DATA,"SERVER",,"NAME") + -
|
||||||
|
F$PARSE (SSL_CONF_DATA,".CRT",,"TYPE")
|
||||||
|
$ _default_crtfile_upd = "N"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ CTR = 0
|
||||||
|
$ GET_CONF_DATA "[''_distinguished_name']#countryName"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _countryName_prompt = SSL_CONF_DATA
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ ENDIF
|
||||||
|
$ GET_CONF_DATA "[''_distinguished_name']#countryName_min"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _countryName_min = SSL_CONF_DATA
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ ENDIF
|
||||||
|
$ GET_CONF_DATA "[''_distinguished_name']#countryName_max"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _countryName_max = SSL_CONF_DATA
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ ENDIF
|
||||||
|
$ GET_CONF_DATA "[''_distinguished_name']#countryName_default"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _countryName_default = SSL_CONF_DATA
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ ENDIF
|
||||||
|
$ IF _countryName_cnt .EQS. CTR THEN _countryName_upd = "N"
|
||||||
|
$!
|
||||||
|
$ CTR = 0
|
||||||
|
$ GET_CONF_DATA "[''_distinguished_name']#stateOrProvinceName"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _stateOrProvinceName_prompt = SSL_CONF_DATA
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ ENDIF
|
||||||
|
$ GET_CONF_DATA "[''_distinguished_name']#stateOrProvinceName_default"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _stateOrProvinceName_default = SSL_CONF_DATA
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ ENDIF
|
||||||
|
$ IF _stateOrProvinceName_cnt .EQ. CTR THEN _stateOrProvinceName_upd = "N"
|
||||||
|
$!
|
||||||
|
$ CTR = 0
|
||||||
|
$ GET_CONF_DATA "[''_distinguished_name']#localityName"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _localityName_prompt = SSL_CONF_DATA
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ ENDIF
|
||||||
|
$ GET_CONF_DATA "[''_distinguished_name']#localityName_default"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _localityName_default = SSL_CONF_DATA
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ ENDIF
|
||||||
|
$ IF _localityName_cnt .EQ. CTR THEN _localityName_default_upd = "N"
|
||||||
|
$!
|
||||||
|
$ CTR = 0
|
||||||
|
$ GET_CONF_DATA "[''_distinguished_name']#0.organizationName"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _0organizationName_prompt = SSL_CONF_DATA
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ ENDIF
|
||||||
|
$ GET_CONF_DATA "[''_distinguished_name']#0.organizationName_default"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _0organizationName_default = SSL_CONF_DATA
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ ENDIF
|
||||||
|
$ IF _0organizationName_cnt .EQ. CTR THEN _0organizationName_default_upd = "N"
|
||||||
|
$!
|
||||||
|
$ CTR = 0
|
||||||
|
$ GET_CONF_DATA "[''_distinguished_name']#organizationalUnitName"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _organizationalUnitName_prompt = SSL_CONF_DATA
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ ENDIF
|
||||||
|
$ GET_CONF_DATA "[''_distinguished_name']#organizationalUnitName_default"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _organizationalUnitName_default = SSL_CONF_DATA
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ ENDIF
|
||||||
|
$ IF _organizationalUnitName_cnt .EQ. CTR THEN _organizationalUnitName_upd = "N"
|
||||||
|
$!
|
||||||
|
$ CTR = 0
|
||||||
|
$ GET_CONF_DATA "[''_distinguished_name']#commonName"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _commonName_prompt = SSL_CONF_DATA
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ ENDIF
|
||||||
|
$ GET_CONF_DATA "[''_distinguished_name']#commonName_max"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _commonName_max = SSL_CONF_DATA
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ ENDIF
|
||||||
|
$ GET_CONF_DATA "[''_distinguished_name']#commonName_default"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _commonName_default = SSL_CONF_DATA
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ ENDIF
|
||||||
|
$ IF _commonName_cnt .EQ. CTR THEN _commonName_default_upd = "N"
|
||||||
|
$!
|
||||||
|
$ CTR = 0
|
||||||
|
$ GET_CONF_DATA "[''_distinguished_name']#emailAddress"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _emailAddress_prompt = SSL_CONF_DATA
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ ENDIF
|
||||||
|
$ GET_CONF_DATA "[''_distinguished_name']#emailAddress_max"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _emailAddress_max = SSL_CONF_DATA
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ ENDIF
|
||||||
|
$ GET_CONF_DATA "[''_distinguished_name']#emailAddress_default"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _emailAddress_default = SSL_CONF_DATA
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ ENDIF
|
||||||
|
$ IF _emailAddress_cnt .EQ. CTR THEN _emailAddress_default_upd = "N"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ SET_USER_DATA "[]#encrypt_key#-#N#Encrypt Private Key ?#S##1##Y#N"
|
||||||
|
$ SET_USER_DATA "[]#pem_pass_phrase#-##PEM Pass Phrase ?#P#1###Y#Y"
|
||||||
|
$ SET_USER_DATA "[''_request_name']#default_bits#D#''_default_bits'#Encryption Bits ?#I###''_default_bits_upd'#Y#N"
|
||||||
|
$ SET_USER_DATA "[''_request_name']#default_keyfile#D#''_default_keyfile'#Certificate Key File ?#F###''_default_keyfile_upd'#Y#N"
|
||||||
|
$ SET_USER_DATA "[''_request_name']#default_crtfile#D#''_default_crtfile'#Certificate File ?#F###''_default_crtfile_upd'#Y#N"
|
||||||
|
$ SET_USER_DATA "[''_request_name']#distinguished_name#D#''_distinguished_name'##S###''_distinguished_name_upd'#N#N"
|
||||||
|
$ SET_USER_DATA "[''_distinguished_name']#countryName#P#''_countryName_default'#''_countryName_prompt'#S#''_countryName_min'#''#''_countryName_upd'#Y#N"
|
||||||
|
$ SET_USER_DATA "[''_distinguished_name']#stateOrProvinceName#P#''_stateOrProvinceName_default'#''_stateOrProvinceName_prompt'####''_stateOrProvinceName_upd'#Y#N"
|
||||||
|
$ SET_USER_DATA "[''_distinguished_name']#localityName#P#''_localityName_default'#''_localityName_prompt'#S###''_localityName_upd'#Y#N"
|
||||||
|
$ SET_USER_DATA "[''_distinguished_name']#0.organizationName#P#''_0organizationName_default'#''_0organizationName_prompt'#S###''_0organizationalName_upd'#Y#N"
|
||||||
|
$ SET_USER_DATA "[''_distinguished_name']#organizationalUnitName#P#''_organizationalUnitName_default'#''_organizationalUnitName_prompt#S###''_organizationalUnitName_upd'#Y#N"
|
||||||
|
$ SET_USER_DATA "[''_distinguished_name']#commonName#P#''_commonName_default'#''_commonName_prompt'#S##''_commonName_max'#''_commonName_upd'#Y#N"
|
||||||
|
$ SET_USER_DATA "[''_distinguished_name']#emailAddress#P#''_emailAddress_default'#''_emailAddress_prompt'#S##''_emailAddress_max'#''_emailAddress_upd'#Y#N"
|
||||||
|
$ SET_USER_DATA "[]#display_certificate#-#N#Display the Certificate ?#S##1##Y#N"
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H", CEOS
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Confirm/Update the SSL Configuration Data
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ CTR = 1
|
||||||
|
$!
|
||||||
|
$PROMPT_LOOP:
|
||||||
|
$!
|
||||||
|
$ IF CTR .LE. SSL_USER_DATA_MAX
|
||||||
|
$ THEN
|
||||||
|
$ KEY = F$ELEMENT (0,"#",SSL_USER_DATA_'CTR') ! Key Name
|
||||||
|
$ ITM = F$ELEMENT (1,"#",SSL_USER_DATA_'CTR') ! Item Name
|
||||||
|
$ VAL = F$ELEMENT (2,"#",SSL_USER_DATA_'CTR') ! Item Value Contains Default or Prompt
|
||||||
|
$ DEF = F$ELEMENT (3,"#",SSL_USER_DATA_'CTR') ! Default Value
|
||||||
|
$ PRM = F$ELEMENT (4,"#",SSL_USER_DATA_'CTR') ! Prompt Value
|
||||||
|
$ TYP = F$ELEMENT (5,"#",SSL_USER_DATA_'CTR') ! Value Type
|
||||||
|
$ MIN = F$ELEMENT (6,"#",SSL_USER_DATA_'CTR') ! Value Minimum Length
|
||||||
|
$ MAX = F$ELEMENT (7,"#",SSL_USER_DATA_'CTR') ! Value Maximum Length
|
||||||
|
$ UPD = F$ELEMENT (8,"#",SSL_USER_DATA_'CTR') ! Entry Updated ?
|
||||||
|
$ REQ = F$ELEMENT (9,"#",SSL_USER_DATA_'CTR') ! Entry Required for Input ?
|
||||||
|
$ CFM = F$ELEMENT (10,"#",SSL_USER_DATA_'CTR')! Confirm Input ?
|
||||||
|
$!
|
||||||
|
$! The PEM Pass Phrase prompt is dependant on the answer to encrypt the private key
|
||||||
|
$!
|
||||||
|
$ IF KEY .EQS. "[]" .AND. ITM .EQS. "pem_pass_phrase"
|
||||||
|
$ THEN
|
||||||
|
$ GET_USER_DATA "[]#encrypt_key"
|
||||||
|
$ _encrypt_key = SSL_USER_DATA
|
||||||
|
$ IF F$EDIT (_encrypt_key,"UPCASE") .NES. "Y"
|
||||||
|
$ THEN
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ GOTO PROMPT_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ CONFIRMED = 0
|
||||||
|
$ IF REQ .EQS. "N"
|
||||||
|
$ THEN
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ GOTO PROMPT_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$ IF ROW .GT. MSG_ROW - 2
|
||||||
|
$ THEN
|
||||||
|
$ SAY ESC + "[''TOP_ROW';01H", CEOS
|
||||||
|
$ ROW = TOP_ROW
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$CONFIRM_LOOP:
|
||||||
|
$!
|
||||||
|
$ IF PRM .EQS. ""
|
||||||
|
$ THEN
|
||||||
|
$ PROMPT = ESC + "[''ROW';''COL'H''ITM' ? [''DEF'] ''CEOL'"
|
||||||
|
$ ELSE
|
||||||
|
$ PROMPT = ESC + "[''ROW';''COL'H''PRM' [''DEF'] ''CEOL'"
|
||||||
|
$ ENDIF
|
||||||
|
$ IF TYP .EQS. "P" THEN SET TERMINAL /NOECHO
|
||||||
|
$ ASK "''PROMPT'" ANS /END_OF_FILE=EXIT
|
||||||
|
$ IF TYP .EQS. "P" THEN SET TERMINAL /ECHO
|
||||||
|
$ ANS = F$EDIT (ANS,"TRIM")
|
||||||
|
$ IF ANS .EQS. "" THEN ANS = DEF
|
||||||
|
$ IF TYP .EQS. "F"
|
||||||
|
$ THEN
|
||||||
|
$ ANS = F$PARSE ("''ANS'","''DEF'",,,"SYNTAX_ONLY")
|
||||||
|
$ ENDIF
|
||||||
|
$ IF TYP .EQS. "I" .AND. F$TYPE (ANS) .NES. "INTEGER"
|
||||||
|
$ THEN
|
||||||
|
$ CALL INVALID_ENTRY
|
||||||
|
$ SAY ESC + "[''ROW';01H", CEOS
|
||||||
|
$ GOTO PROMPT_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$ IF (TYP .EQS. "S" .OR. TYP .EQS. "P") .AND. -
|
||||||
|
((MIN .NES. "" .AND. F$LENGTH (ANS) .LT. F$INTEGER(MIN)) .OR. -
|
||||||
|
(MAX .NES. "" .AND. F$LENGTH (ANS) .GT. F$INTEGER(MAX)))
|
||||||
|
$ THEN
|
||||||
|
$ CALL INVALID_ENTRY
|
||||||
|
$ SAY ESC + "[''ROW';01H", CEOS
|
||||||
|
$ IF TYP .EQS. "S" THEN GOTO PROMPT_LOOP
|
||||||
|
$ IF TYP .EQS. "P" THEN GOTO CONFIRM_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$ ROW = ROW + 1
|
||||||
|
$ IF CFM .EQS. "Y"
|
||||||
|
$ THEN
|
||||||
|
$ IF CONFIRMED .EQ. 0
|
||||||
|
$ THEN
|
||||||
|
$ CONFIRMED = 1
|
||||||
|
$ CONFIRMED_ANS = ANS
|
||||||
|
$ PRM = "Confirm ''PRM'"
|
||||||
|
$ GOTO CONFIRM_LOOP
|
||||||
|
$ ELSE
|
||||||
|
$ IF ANS .NES. CONFIRMED_ANS
|
||||||
|
$ THEN
|
||||||
|
$ CALL INVALID_ENTRY
|
||||||
|
$ ROW = ROW - 2
|
||||||
|
$ SAY ESC + "[''ROW';01H", CEOS
|
||||||
|
$ GOTO PROMPT_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$ ENDIF
|
||||||
|
$ ENDIF
|
||||||
|
$ IF ANS .NES. DEF THEN SSL_USER_DATA_'CTR' = "''KEY'#''ITM'#''VAL'#''ANS'#''PRM'#''TYP'#''MIN'#''MAX'#Y#''REQ'#''CFM'"
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ GOTO PROMPT_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Save the SSL Configuration Data
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ CTR = 1
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H", BLNK, " Saving Configuration ...", NORM
|
||||||
|
$!
|
||||||
|
$SAVE_CONF_LOOP:
|
||||||
|
$!
|
||||||
|
$ IF CTR .LE. SSL_USER_DATA_MAX
|
||||||
|
$ THEN
|
||||||
|
$ KEY = F$ELEMENT (0,"#",SSL_USER_DATA_'CTR') ! Key Name
|
||||||
|
$ ITM = F$ELEMENT (1,"#",SSL_USER_DATA_'CTR') ! Item Name
|
||||||
|
$ VAL = F$ELEMENT (2,"#",SSL_USER_DATA_'CTR') ! Item Value Contains Default or Prompt
|
||||||
|
$ DEF = F$ELEMENT (3,"#",SSL_USER_DATA_'CTR') ! Default Value
|
||||||
|
$ PRM = F$ELEMENT (4,"#",SSL_USER_DATA_'CTR') ! Prompt Value
|
||||||
|
$ TYP = F$ELEMENT (5,"#",SSL_USER_DATA_'CTR') ! Value Type
|
||||||
|
$ MIN = F$ELEMENT (6,"#",SSL_USER_DATA_'CTR') ! Value Minimum Length
|
||||||
|
$ MAX = F$ELEMENT (7,"#",SSL_USER_DATA_'CTR') ! Value Maximum Length
|
||||||
|
$ UPD = F$ELEMENT (8,"#",SSL_USER_DATA_'CTR') ! Entry Updated ?
|
||||||
|
$ REQ = F$ELEMENT (9,"#",SSL_USER_DATA_'CTR') ! Entry Required for Input ?
|
||||||
|
$ CFM = F$ELEMENT (10,"#",SSL_USER_DATA_'CTR')! Confirm Input ?
|
||||||
|
$ IF UPD .NES. "Y" .OR. VAL .EQS. "-"
|
||||||
|
$ THEN
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ GOTO SAVE_CONF_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$ IF VAL .EQS. "D"
|
||||||
|
$ THEN
|
||||||
|
$ SET_CONF_DATA "''KEY'#''ITM'" "''DEF'"
|
||||||
|
$ ELSE
|
||||||
|
$ SET_CONF_DATA "''KEY'#''ITM'" "''PRM'"
|
||||||
|
$ SET_CONF_DATA "''KEY'#''ITM'_default" "''DEF'"
|
||||||
|
$ ENDIF
|
||||||
|
$ IF MIN .NES. "" THEN SET_CONF_DATA "''KEY'#''ITM'_min" "''MIN'"
|
||||||
|
$ IF MAX .NES. "" THEN SET_CONF_DATA "''KEY'#''ITM'_max" "''MAX'"
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ GOTO SAVE_CONF_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ PURGE /NOLOG /NOCONFIRM 'SSL_CONF_FILE'
|
||||||
|
$ RENAME 'SSL_CONF_FILE'; ;1
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H", CEOS
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Create the Server Certificiate
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H", BLNK, " Creating Self-Signed Certificate ...", NORM
|
||||||
|
$!
|
||||||
|
$ X1 = 2
|
||||||
|
$ Y1 = TOP_ROW
|
||||||
|
$ X2 = TT_COLS - 2
|
||||||
|
$ Y2 = MSG_ROW - 1
|
||||||
|
$!
|
||||||
|
$ GET_USER_DATA "[]#encrypt_key"
|
||||||
|
$ _encrypt_key = SSL_USER_DATA
|
||||||
|
$ IF F$EDIT (_encrypt_key,"UPCASE") .EQS. "Y"
|
||||||
|
$ THEN
|
||||||
|
$ GET_USER_DATA "[]#pem_pass_phrase"
|
||||||
|
$ _pem_pass_phrase = SSL_USER_DATA
|
||||||
|
$ ENDIF
|
||||||
|
$ GET_USER_DATA "[''_request_name']#default_bits"
|
||||||
|
$ _default_bits = SSL_USER_DATA
|
||||||
|
$ GET_USER_DATA "[''_request_name']#default_keyfile"
|
||||||
|
$ _default_keyfile = SSL_USER_DATA
|
||||||
|
$ GET_USER_DATA "[''_request_name']#default_crtfile"
|
||||||
|
$ _default_crtfile = SSL_USER_DATA
|
||||||
|
$ GET_USER_DATA "[]#display_certificate"
|
||||||
|
$ _display_certificate = SSL_USER_DATA
|
||||||
|
$!
|
||||||
|
$ DEFINE /USER /NOLOG SYS$ERROR NL:
|
||||||
|
$ DEFINE /USER /NOLOG SYS$OUTPUT NL:
|
||||||
|
$ SHOW SYSTEM /FULL /OUT=SYS$LOGIN:SSL_REQ_'PID'.RND
|
||||||
|
$!
|
||||||
|
$ OPEN /WRITE OFILE SYS$LOGIN:SSL_REQ_'PID'.COM
|
||||||
|
$ WRITE OFILE "$ DEFINE /USER /NOLOG RANDFILE SYS$LOGIN:SSL_REQ_''PID'.RND"
|
||||||
|
$ WRITE OFILE "$ DEFINE /USER /NOLOG SYS$ERROR SYS$LOGIN:SSL_REQ_''PID'.LOG"
|
||||||
|
$ WRITE OFILE "$ DEFINE /USER /NOLOG SYS$OUTPUT SYS$LOGIN:SSL_REQ_''PID'.LOG"
|
||||||
|
$ WRITE OFILE "$ DEFINE /USER /NOLOG SYS$COMMAND SYS$INPUT"
|
||||||
|
$ IF F$EDIT (_encrypt_key,"UPCASE") .EQS. "Y"
|
||||||
|
$ THEN
|
||||||
|
$ WRITE OFILE "$ OPENSSL req -config ''SSL_CONF_FILE' -new -days 365 -x509 -keyout ''_default_keyfile' -out ''_default_crtfile'"
|
||||||
|
$ WRITE OFILE "''_pem_pass_phrase'"
|
||||||
|
$ WRITE OFILE "''_pem_pass_phrase'"
|
||||||
|
$ ELSE
|
||||||
|
$ WRITE OFILE "$ OPENSSL req -config ''SSL_CONF_FILE' -nodes -new -days 365 -x509 -keyout ''_default_keyfile' -out ''_default_crtfile'"
|
||||||
|
$ ENDIF
|
||||||
|
$ WRITE OFILE ""
|
||||||
|
$ WRITE OFILE ""
|
||||||
|
$ WRITE OFILE ""
|
||||||
|
$ WRITE OFILE ""
|
||||||
|
$ WRITE OFILE ""
|
||||||
|
$ WRITE OFILE ""
|
||||||
|
$ WRITE OFILE ""
|
||||||
|
$ CLOSE OFILE
|
||||||
|
$!
|
||||||
|
$ @SYS$LOGIN:SSL_REQ_'PID'.COM
|
||||||
|
$!
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_REQ_'PID'.COM;*
|
||||||
|
$!
|
||||||
|
$ DEFINE /USER /NOLOG SYS$ERROR NL:
|
||||||
|
$ DEFINE /USER /NOLOG SYS$OUTPUT NL:
|
||||||
|
$ SEARCH SYS$LOGIN:SSL_REQ_'PID'.LOG /OUT=SYS$LOGIN:SSL_REQ_'PID'.ERR ":error:"
|
||||||
|
$ IF F$SEARCH ("SYS$LOGIN:SSL_REQ_''PID'.ERR") .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ IF F$FILE_ATTRIBUTE ("SYS$LOGIN:SSL_REQ_''PID'.ERR","ALQ") .NE. 0
|
||||||
|
$ THEN
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_REQ_'PID'.ERR;*
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H''BELL'''CEOS'"
|
||||||
|
$ SHOW_FILE "SYS$LOGIN:SSL_REQ_''PID'.LOG" 'X1' 'Y1' 'X2' 'Y2' "< ERROR >"
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_REQ_'PID'.LOG;*
|
||||||
|
$ GOTO EXIT
|
||||||
|
$ ENDIF
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_REQ_'PID'.ERR;*
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_REQ_'PID'.LOG;*
|
||||||
|
$!
|
||||||
|
$ IF F$EDIT (_display_certificate,"TRIM,UPCASE") .EQS. "Y"
|
||||||
|
$ THEN
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H", BLNK, " Generating Output ...", NORM, CEOL
|
||||||
|
$!
|
||||||
|
$ OPEN /WRITE OFILE SYS$LOGIN:SSL_X509_'PID'.COM
|
||||||
|
$ WRITE OFILE "$ DEFINE /USER /NOLOG SYS$ERROR SYS$LOGIN:SSL_X509_''PID'.LOG"
|
||||||
|
$ WRITE OFILE "$ DEFINE /USER /NOLOG SYS$OUTPUT SYS$LOGIN:SSL_X509_''PID'.LOG"
|
||||||
|
$ WRITE OFILE "$ DEFINE /USER /NOLOG SYS$COMMAND SYS$INPUT"
|
||||||
|
$ WRITE OFILE "$ OPENSSL x509 -noout -text -in ''_default_crtfile'"
|
||||||
|
$ CLOSE OFILE
|
||||||
|
$!
|
||||||
|
$ @SYS$LOGIN:SSL_X509_'PID'.COM
|
||||||
|
$!
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_X509_'PID'.COM;*
|
||||||
|
$!
|
||||||
|
$ DEFINE /USER /NOLOG SYS$ERROR NL:
|
||||||
|
$ DEFINE /USER /NOLOG SYS$OUTPUT NL:
|
||||||
|
$ SEARCH SYS$LOGIN:SSL_X509_'PID'.LOG /OUT=SYS$LOGIN:SSL_X509_'PID'.ERR ":error:"
|
||||||
|
$ IF F$SEARCH ("SYS$LOGIN:SSL_X509_''PID'.ERR") .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ IF F$FILE_ATTRIBUTE ("SYS$LOGIN:SSL_X509_''PID'.ERR","ALQ") .NE. 0
|
||||||
|
$ THEN
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_X509_'PID'.ERR;*
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H''BELL'''CEOS'"
|
||||||
|
$ SHOW_FILE "SYS$LOGIN:SSL_X509_''PID'.LOG" 'X1' 'Y1' 'X2' 'Y2' "< ERROR >"
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_X509_'PID'.LOG;*
|
||||||
|
$ GOTO EXIT
|
||||||
|
$ ENDIF
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_X509_'PID'.ERR;*
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H''CEOS'"
|
||||||
|
$ SHOW_FILE "SYS$LOGIN:SSL_X509_''PID'.LOG" 'X1' 'Y1' 'X2' 'Y2' "< ''_default_crtfile' >"
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_X509_'PID'.LOG;*
|
||||||
|
$ GOTO EXIT
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ TEXT = "Press return to continue"
|
||||||
|
$ COL = (TT_COLS - F$LENGTH (TEXT)) / 2
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H", CEOS
|
||||||
|
$ PROMPT = ESC + "[''MSG_ROW';''COL'H''TEXT'"
|
||||||
|
$ ASK "''PROMPT'" OPT
|
||||||
|
$!
|
||||||
|
$GOTO EXIT
|
||||||
|
z$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Set the User Data
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$SET_USER_DATA: SUBROUTINE
|
||||||
|
$!
|
||||||
|
$ IF F$TYPE (SSL_USER_DATA_MAX) .EQS. ""
|
||||||
|
$ THEN
|
||||||
|
$ SSL_USER_DATA_MAX == 1
|
||||||
|
$ ELSE
|
||||||
|
$ SSL_USER_DATA_MAX == SSL_USER_DATA_MAX + 1
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ SSL_USER_DATA_'SSL_USER_DATA_MAX' == "''P1'"
|
||||||
|
$!
|
||||||
|
$ EXIT
|
||||||
|
$!
|
||||||
|
$ ENDSUBROUTINE
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Find the Request Data
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$GET_USER_DATA: SUBROUTINE
|
||||||
|
$!
|
||||||
|
$ CTR = 1
|
||||||
|
$ USER_KEY = F$ELEMENT (0,"#",P1)
|
||||||
|
$ USER_ITM = F$ELEMENT (1,"#",P1)
|
||||||
|
$!
|
||||||
|
$GET_USER_DATA_LOOP:
|
||||||
|
$!
|
||||||
|
$ IF CTR .LE. SSL_USER_DATA_MAX
|
||||||
|
$ THEN
|
||||||
|
$ KEY = F$ELEMENT (0,"#",SSL_USER_DATA_'CTR') ! Key Name
|
||||||
|
$ ITM = F$ELEMENT (1,"#",SSL_USER_DATA_'CTR') ! Item Name
|
||||||
|
$ VAL = F$ELEMENT (2,"#",SSL_USER_DATA_'CTR') ! Item Value Contains Default or Prompt
|
||||||
|
$ DEF = F$ELEMENT (3,"#",SSL_USER_DATA_'CTR') ! Default Value
|
||||||
|
$ PRM = F$ELEMENT (4,"#",SSL_USER_DATA_'CTR') ! Prompt Value
|
||||||
|
$ IF USER_KEY .NES. KEY .OR. USER_ITM .NES. ITM
|
||||||
|
$ THEN
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ GOTO GET_USER_DATA_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$ IF VAL .EQS. "-" THEN SSL_USER_DATA == "''DEF'"
|
||||||
|
$ IF VAL .EQS. "D" THEN SSL_USER_DATA == "''DEF'"
|
||||||
|
$ IF VAL .EQS. "P" THEN SSL_USER_DATA == "''PRM'"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ EXIT
|
||||||
|
$!
|
||||||
|
$ ENDSUBROUTINE
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Delete the User Data
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$DEL_USER_DATA: SUBROUTINE
|
||||||
|
$!
|
||||||
|
$ IF F$TYPE (SSL_USER_DATA_MAX) .EQS. "" THEN GOTO DEL_USER_DATA_END
|
||||||
|
$!
|
||||||
|
$DEL_USER_DATA_LOOP:
|
||||||
|
$!
|
||||||
|
$ IF F$TYPE (SSL_USER_DATA_'SSL_USER_DATA_MAX') .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ DELETE /SYMBOL /GLOBAL SSL_USER_DATA_'SSL_USER_DATA_MAX'
|
||||||
|
$ SSL_USER_DATA_MAX == SSL_USER_DATA_MAX - 1
|
||||||
|
$ GOTO DEL_USER_DATA_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ DELETE /SYMBOL /GLOBAL SSL_USER_DATA_MAX
|
||||||
|
$!
|
||||||
|
$DEL_USER_DATA_END:
|
||||||
|
$!
|
||||||
|
$ IF F$TYPE (SSL_USER_DATA) .NES. "" THEN DELETE /SYMBOL /GLOBAL SSL_USER_DATA
|
||||||
|
$!
|
||||||
|
$ EXIT
|
||||||
|
$!
|
||||||
|
$ ENDSUBROUTINE
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Display the invalid entry
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$INVALID_ENTRY: SUBROUTINE
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H", BELL, " Invalid Entry, Try again ...''CEOL'"
|
||||||
|
$ Wait 00:00:01.5
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H", CEOL
|
||||||
|
$!
|
||||||
|
$ EXIT
|
||||||
|
$!
|
||||||
|
$ ENDSUBROUTINE
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$EXIT:
|
||||||
|
$!
|
||||||
|
$ DEFINE /USER /NOLOG SYS$ERROR NL:
|
||||||
|
$ DEFINE /USER /NOLOG SYS$OUTPUT NL:
|
||||||
|
$ CLOSE OFILE
|
||||||
|
$!
|
||||||
|
$ DEL_USER_DATA
|
||||||
|
$!
|
||||||
|
$ IF F$TYPE (SSL_CONF_DATA) .NES. "" THEN DELETE /SYMBOL /GLOBAL SSL_CONF_DATA
|
||||||
|
$!
|
||||||
|
$ IF F$GETDVI ("TT:","TT_NOECHO") .AND. .NOT. TT_NOECHO THEN SET TERMINAL /ECHO
|
||||||
|
$!
|
||||||
|
$ IF F$SEARCH ("SYS$LOGIN:SSL_REQ_''PID'.%%%;*") .NES. "" THEN DELETE/NOLOG/NOCONFIRM SYS$LOGIN:SSL_REQ_'PID'.%%%;*
|
||||||
|
$ IF F$SEARCH ("SYS$LOGIN:SSL_X509_''PID'.%%%;*") .NES. "" THEN DELETE/NOLOG/NOCONFIRM SYS$LOGIN:SSL_X509_'PID'.%%%;*
|
||||||
|
$!
|
||||||
|
$ Verify = F$VERIFY (Verify)
|
||||||
|
$!
|
||||||
|
$ EXIT
|
||||||
205
VMS/cert_tool/ssl$show_file.com
Normal file
205
VMS/cert_tool/ssl$show_file.com
Normal file
@@ -0,0 +1,205 @@
|
|||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! SSL$SHOW_FILE.COM - SSL Show File procedure
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ Verify = F$VERIFY (0)
|
||||||
|
$ Set NoOn
|
||||||
|
$ Set NoControl=Y
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Description
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$! This procedure display the contents of a given file in a box size specified.
|
||||||
|
$!
|
||||||
|
$! The parameters used are:
|
||||||
|
$!
|
||||||
|
$! P1 - File to View
|
||||||
|
$! P2 - X1 coordinate
|
||||||
|
$! P3 - Y1 coordinate
|
||||||
|
$! P4 - X2 coordinate
|
||||||
|
$! P5 - Y3 coordinate
|
||||||
|
$! P6 - File Box Title (Optional)
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Define symbols
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ SAY := WRITE SYS$OUTPUT
|
||||||
|
$ ASK := READ SYS$COMMAND /END_OF_FILE=EXIT /PROMPT=
|
||||||
|
$ On Control_Y THEN GOTO EXIT
|
||||||
|
$ Set Control=Y
|
||||||
|
$!
|
||||||
|
$ DRAW_BOX := @SSL$COM:SSL$DRAW_BOX
|
||||||
|
$ FILL_BOX := @SSL$COM:SSL$FILL_BOX
|
||||||
|
$!
|
||||||
|
$ ESC[0,8] = 27 ! Set the Escape Character
|
||||||
|
$ CEOL = ESC + "[0K" ! Clear to the End of the Line
|
||||||
|
$ NORM = ESC + "[0m" ! Turn Attributes off
|
||||||
|
$ BOLD = ESC + "[1m" ! Turn on BOLD Attribute
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Display the Page Header
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ REC_MAX = 0
|
||||||
|
$ OPEN /READ IFILE 'P1'
|
||||||
|
$!
|
||||||
|
$READ_LOOP:
|
||||||
|
$!
|
||||||
|
$ READ /END_OF_FILE=READ_END IFILE IREC
|
||||||
|
$ REC_MAX = REC_MAX + 1
|
||||||
|
$ REC_'REC_MAX' = IREC
|
||||||
|
$ GOTO READ_LOOP
|
||||||
|
$!
|
||||||
|
$READ_END:
|
||||||
|
$!
|
||||||
|
$ CLOSE IFILE
|
||||||
|
$!
|
||||||
|
$ IF REC_MAX .EQ. 0
|
||||||
|
$ THEN
|
||||||
|
$ DRAW_BOX 'P2' 'P3' 'P4' 'P5' "''P6'" " ** End-of-File **, Press Return to Exit "
|
||||||
|
$ INPUT_ROW = P5 + 1
|
||||||
|
$ PROMPT = ESC + "[''INPUT_ROW';01H ''CEOL'"
|
||||||
|
$ ASK "''PROMPT'" OPT
|
||||||
|
$ GOTO EXIT
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ COL = P2 + 2
|
||||||
|
$ ROW = P3 + 2
|
||||||
|
$ TOP_ROW = ROW
|
||||||
|
$ INPUT_ROW = P5 + 1
|
||||||
|
$ BOX_WIDTH = P4 - (P2 + 2)
|
||||||
|
$ BOX_HEIGHT = P5 - (P3 + 3)
|
||||||
|
$!
|
||||||
|
$ REC_CTR = 1
|
||||||
|
$ PAGE_CTR = 1
|
||||||
|
$ PAGE_'PAGE_CTR'_REC_CTR = REC_CTR
|
||||||
|
$ RECS_PER_PAGE = BOX_HEIGHT
|
||||||
|
$ PAGE_MAX = REC_MAX / RECS_PER_PAGE
|
||||||
|
$ IF PAGE_MAX * RECS_PER_PAGE .LT. REC_MAX THEN PAGE_MAX = PAGE_MAX + 1
|
||||||
|
$!
|
||||||
|
$ DRAW_BOX 'P2' 'P3' 'P4' 'P5' "''P6'" " Enter B for Back, N for Next, Ctrl-Z to Exit "
|
||||||
|
$ PAGE_TXT = F$FAO (" Page !UL of !UL ", PAGE_CTR, PAGE_MAX)
|
||||||
|
$ _COL = P2 + (BOX_WIDTH - F$LENGTH (PAGE_TXT)) + 2
|
||||||
|
$ SAY ESC + "[''P3';''_COL'H''BOLD'''PAGE_TXT'''NORM'"
|
||||||
|
$!
|
||||||
|
$DISPLAY_LOOP:
|
||||||
|
$!
|
||||||
|
$ IF REC_CTR .LE. REC_MAX .AND. F$TYPE (REC_'REC_CTR') .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ REC = REC_'REC_CTR'
|
||||||
|
$ ENDIF
|
||||||
|
$ WRAP_IN_PROGRESS = 0
|
||||||
|
$!
|
||||||
|
$WRAP_LOOP:
|
||||||
|
$!
|
||||||
|
$ IF ROW .LE. (P5 - 2) .AND. -
|
||||||
|
REC_CTR .LE. PAGE_CTR * RECS_PER_PAGE
|
||||||
|
$ THEN
|
||||||
|
$ IF F$LENGTH (REC) .GT. BOX_WIDTH
|
||||||
|
$ THEN
|
||||||
|
$ IF WRAP_IN_PROGRESS .EQ. 0
|
||||||
|
$ THEN
|
||||||
|
$ WRAP_IN_PROGRESS = 1
|
||||||
|
$ _COL = COL
|
||||||
|
$ ELSE
|
||||||
|
$ _COL = COL - 1
|
||||||
|
$ ENDIF
|
||||||
|
$ REC_SEG = F$EXTRACT (0, BOX_WIDTH, REC)
|
||||||
|
$ SAY ESC + "[''ROW';''_COL'H", REC_SEG
|
||||||
|
$ REC = ">" + F$EXTRACT (BOX_WIDTH, F$LENGTH (REC)-BOX_WIDTH, REC)
|
||||||
|
$ ROW = ROW + 1
|
||||||
|
$ GOTO WRAP_LOOP
|
||||||
|
$ ELSE
|
||||||
|
$ IF REC_CTR .LE. REC_MAX .AND. F$TYPE (REC_'REC_CTR') .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ IF WRAP_IN_PROGRESS .EQ. 1
|
||||||
|
$ THEN
|
||||||
|
$ _COL = COL - 1
|
||||||
|
$ ELSE
|
||||||
|
$ _COL = COL
|
||||||
|
$ ENDIF
|
||||||
|
$ SAY ESC + "[''ROW';''_COL'H", REC
|
||||||
|
$ ENDIF
|
||||||
|
$ ENDIF
|
||||||
|
$ ELSE
|
||||||
|
$!
|
||||||
|
$RETRY:
|
||||||
|
$!
|
||||||
|
$ PROMPT = ESC + "[''INPUT_ROW';01H ''CEOL'"
|
||||||
|
$ ASK "''PROMPT'" OPT
|
||||||
|
$ IF F$EDIT (OPT,"TRIM,UPCASE") .NES. "B" .AND. -
|
||||||
|
F$EDIT (OPT,"TRIM,UPCASE") .NES. "N"
|
||||||
|
$ THEN
|
||||||
|
$ CALL INVALID_ENTRY
|
||||||
|
$ GOTO RETRY
|
||||||
|
$ ENDIF
|
||||||
|
$ IF F$EDIT (OPT,"TRIM,UPCASE") .EQS. "B"
|
||||||
|
$ THEN
|
||||||
|
$ IF PAGE_CTR .GT. 1
|
||||||
|
$ THEN
|
||||||
|
$ ROW = TOP_ROW
|
||||||
|
$ PAGE_CTR = PAGE_CTR - 1
|
||||||
|
$ REC_CTR = PAGE_'PAGE_CTR'_REC_CTR
|
||||||
|
$ PAGE_TXT = F$FAO (" Page !UL of !UL ", PAGE_CTR, PAGE_MAX)
|
||||||
|
$ _COL = P2 + (BOX_WIDTH - F$LENGTH (PAGE_TXT)) + 2
|
||||||
|
$ SAY ESC + "[''P3';''_COL'H''BOLD'''PAGE_TXT'''NORM'"
|
||||||
|
$ FILL_BOX 'P2' 'P3' 'P4' 'P5'
|
||||||
|
$ GOTO DISPLAY_LOOP
|
||||||
|
$ ELSE
|
||||||
|
$ CALL INVALID_ENTRY
|
||||||
|
$ GOTO RETRY
|
||||||
|
$ ENDIF
|
||||||
|
$ ENDIF
|
||||||
|
$ IF F$EDIT (OPT,"TRIM,UPCASE") .EQS. "N"
|
||||||
|
$ THEN
|
||||||
|
$ IF PAGE_CTR .LT. PAGE_MAX
|
||||||
|
$ THEN
|
||||||
|
$ PAGE_CTR = PAGE_CTR + 1
|
||||||
|
$ PAGE_'PAGE_CTR'_REC_CTR = REC_CTR
|
||||||
|
$ PAGE_TXT = F$FAO (" Page !UL of !UL ", PAGE_CTR, PAGE_MAX)
|
||||||
|
$ _COL = P2 + (BOX_WIDTH - F$LENGTH (PAGE_TXT)) + 2
|
||||||
|
$ SAY ESC + "[''P3';''_COL'H''BOLD'''PAGE_TXT'''NORM'"
|
||||||
|
$ FILL_BOX 'P2' 'P3' 'P4' 'P5'
|
||||||
|
$ ELSE
|
||||||
|
$ CALL INVALID_ENTRY
|
||||||
|
$ GOTO RETRY
|
||||||
|
$ ENDIF
|
||||||
|
$ ENDIF
|
||||||
|
$ FILL_BOX 'P2' 'P3' 'P4' 'P5'
|
||||||
|
$ ROW = TOP_ROW
|
||||||
|
$ GOTO WRAP_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$ REC_CTR = REC_CTR + 1
|
||||||
|
$ ROW = ROW + 1
|
||||||
|
$ GOTO DISPLAY_LOOP
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Display the invalid entry
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$INVALID_ENTRY: SUBROUTINE
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[''INPUT_ROW';01H", BELL, " Invalid Entry, Try again ...''CEOL'"
|
||||||
|
$ Wait 00:00:01.5
|
||||||
|
$ SAY ESC + "[''INPUT_ROW';01H", CEOL
|
||||||
|
$!
|
||||||
|
$ EXIT
|
||||||
|
$!
|
||||||
|
$ ENDSUBROUTINE
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Exit
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$EXIT:
|
||||||
|
$!
|
||||||
|
$ DEFINE /USER /NOLOG SYS$ERROR NL:
|
||||||
|
$ DEFINE /USER /NOLOG SYS$OUTPUT NL:
|
||||||
|
$ CLOSE IFILE
|
||||||
|
$!
|
||||||
|
$ Verify = F$VERIFY (Verify)
|
||||||
|
$!
|
||||||
|
$ EXIT
|
||||||
759
VMS/cert_tool/ssl$sign_cert.com
Normal file
759
VMS/cert_tool/ssl$sign_cert.com
Normal file
@@ -0,0 +1,759 @@
|
|||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! SSL$SIGN_CERT.COM - SSL Sign Certificate Request procedure
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ Verify = F$VERIFY (0)
|
||||||
|
$ Set NoOn
|
||||||
|
$ Set NoControl=Y
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Description
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$! This procedure prompts the user through creating a Server Certificate.
|
||||||
|
$!
|
||||||
|
$! There are no parameters used.
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Define symbols
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ DELETE := DELETE
|
||||||
|
$ SAY := WRITE SYS$OUTPUT
|
||||||
|
$ ASK := READ SYS$COMMAND /END_OF_FILE=EXIT /PROMPT=
|
||||||
|
$ PID = F$GETJPI ("","PID")
|
||||||
|
$ TT_NOECHO = F$GETDVI ("TT:","TT_NOECHO")
|
||||||
|
$ On Control_Y THEN GOTO EXIT
|
||||||
|
$ Set Control=Y
|
||||||
|
$!
|
||||||
|
$ TT_ROWS = F$GETDVI ("TT:","TT_PAGE")
|
||||||
|
$ TT_COLS = F$GETDVI ("TT:","DEVBUFSIZ")
|
||||||
|
$!
|
||||||
|
$ GET_USER_DATA := CALL GET_USER_DATA
|
||||||
|
$ SET_USER_DATA := CALL SET_USER_DATA
|
||||||
|
$ DEL_USER_DATA := CALL DEL_USER_DATA
|
||||||
|
$ INIT_TERM := @SSL$COM:SSL$INIT_TERM
|
||||||
|
$ SHOW_FILE := @SSL$COM:SSL$SHOW_FILE
|
||||||
|
$ SSL_CONF_FILE = F$TRNLMN ("SSL$CA_CONF")
|
||||||
|
$ GET_CONF_DATA := @SSL$COM:SSL$CONF_UTIL 'SSL_CONF_FILE' GET
|
||||||
|
$ SET_CONF_DATA := @SSL$COM:SSL$CONF_UTIL 'SSL_CONF_FILE' SET
|
||||||
|
$!
|
||||||
|
$ ESC[0,8] = 27 ! Set the Escape Character
|
||||||
|
$ BELL[0,8] = 7 ! Ring the terminal Bell
|
||||||
|
$ RED = 1 ! Color - Red
|
||||||
|
$ FGD = 30 ! Foreground
|
||||||
|
$ BGD = 0 ! Background
|
||||||
|
$ CSCR = ESC + "[2J" ! Clear the Screen
|
||||||
|
$ CEOS = ESC + "[0J" ! Clear to the End of the Screen
|
||||||
|
$ CEOL = ESC + "[0K" ! Clear to the End of the Line
|
||||||
|
$ NORM = ESC + "[0m" ! Turn Attributes off
|
||||||
|
$ BLNK = ESC + "[5m" ! Turn on BLINK Attribute
|
||||||
|
$ WIDE = ESC + "#6" ! Turn on WIDE Attribute
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Run the SSL setup if it hasn't been run yet
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ IF F$TRNLNM ("SSL$ROOT") .EQS. ""
|
||||||
|
$ THEN
|
||||||
|
$ IF F$SEARCH ("SSL$COM:SSL$INIT_ENV.COM") .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ @SSL$COM:SSL$INIT_ENV.COM
|
||||||
|
$ ELSE
|
||||||
|
$ SAY BELL, "Unable to locate SSL$COM:SSL$INIT_ENV.COM ..."
|
||||||
|
$ GOTO EXIT
|
||||||
|
$ ENDIF
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Display the Page Header
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ INIT_TERM
|
||||||
|
$ BCOLOR = BGD
|
||||||
|
$ FCOLOR = FGD + RED
|
||||||
|
$ COLOR = ESC + "[''BCOLOR';''FCOLOR'm"
|
||||||
|
$!
|
||||||
|
$ TEXT = "SSL Certificate Tool"
|
||||||
|
$ COL = (TT_COLS - (F$LENGTH (TEXT) * 2)) / 4
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[01;01H", CSCR
|
||||||
|
$ SAY ESC + "[02;''COL'H", COLOR, WIDE, TEXT, NORM
|
||||||
|
$!
|
||||||
|
$ TEXT = "Sign Certificate Request"
|
||||||
|
$ COL = (TT_COLS - F$LENGTH (TEXT)) / 2
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[04;01H"
|
||||||
|
$ SAY ESC + "[04;''COL'H", COLOR, TEXT, NORM
|
||||||
|
$!
|
||||||
|
$ CTR = 1
|
||||||
|
$ ROW = 6
|
||||||
|
$ COL = 2
|
||||||
|
$ TOP_ROW = ROW
|
||||||
|
$ MSG_ROW = TT_ROWS - 1
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Initialize the Request Data
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ IF F$SEARCH ("''SSL_CONF_FILE'") .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H", BLNK, " Reading Configuration ...", NORM
|
||||||
|
$ ELSE
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H", BLNK, " Initializing Configuration ...", NORM
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ _ca = "ca"
|
||||||
|
$!
|
||||||
|
$ _default_ca = "CA_default_ca"
|
||||||
|
$ _default_ca_upd = "Y"
|
||||||
|
$!
|
||||||
|
$ _default_serfile = "SSL$DB:SERIAL.TXT"
|
||||||
|
$ _default_serfile_upd = "Y"
|
||||||
|
$!
|
||||||
|
$ _default_idxfile = "SSL$DB:INDEX.TXT"
|
||||||
|
$ _default_idxfile_upd = "Y"
|
||||||
|
$!
|
||||||
|
$ _default_crtfile = "SSL$CRT:SERVER_CA.CRT"
|
||||||
|
$ _default_crtfile_upd = "Y"
|
||||||
|
$!
|
||||||
|
$ _default_keyfile = "SSL$KEY:SERVER_CA.KEY"
|
||||||
|
$ _default_keyfile_upd = "Y"
|
||||||
|
$!
|
||||||
|
$ _default_csrfile = "SSL$CSR:SERVER.CSR"
|
||||||
|
$ _default_csrfile_upd = "Y"
|
||||||
|
$!
|
||||||
|
$ _default_sgnfile = "SSL$CRT:SIGNED.CRT"
|
||||||
|
$ _default_sgnfile_upd = "Y"
|
||||||
|
$!
|
||||||
|
$ _default_newcert = "SSL$CRT"
|
||||||
|
$ _default_newcert_upd = "Y"
|
||||||
|
$!
|
||||||
|
$ _default_md = "md5"
|
||||||
|
$ _default_md_upd = "Y"
|
||||||
|
$!
|
||||||
|
$ _default_days = "365"
|
||||||
|
$ _default_days_upd = "Y"
|
||||||
|
$!
|
||||||
|
$ _default_policy = "policy_anything"
|
||||||
|
$ _default_policy_upd = "Y"
|
||||||
|
$!
|
||||||
|
$ _policy_countryName = "optional"
|
||||||
|
$ _policy_countryName_upd = "Y"
|
||||||
|
$!
|
||||||
|
$ _policy_stateOrProvinceName = "optional"
|
||||||
|
$ _policy_stateOrProvinceName_upd = "Y"
|
||||||
|
$!
|
||||||
|
$ _policy_localityName = "optional"
|
||||||
|
$ _policy_localityName_upd = "Y"
|
||||||
|
$!
|
||||||
|
$ _policy_organizationName = "optional"
|
||||||
|
$ _policy_organizationName_upd = "Y"
|
||||||
|
$!
|
||||||
|
$ _policy_organizationalUnitName = "optional"
|
||||||
|
$ _policy_organizationalUnitName_upd = "Y"
|
||||||
|
$!
|
||||||
|
$ _policy_commonName = "supplied"
|
||||||
|
$ _policy_commonName_upd = "Y"
|
||||||
|
$!
|
||||||
|
$ _policy_emailAddress = "optional"
|
||||||
|
$ _policy_emailAddress_upd = "Y"
|
||||||
|
$!
|
||||||
|
$ _default_x509_extensions = "CA_x509_extensions"
|
||||||
|
$ _default_x509_extensions_upd = "Y"
|
||||||
|
$!
|
||||||
|
$ _x509_basicContraints = "CA:FALSE"
|
||||||
|
$ _x509_basicContraints_upd = "Y"
|
||||||
|
$!
|
||||||
|
$ _x509_nsCertType = "client,email,objsign,server"
|
||||||
|
$ _x509_nsCertType_upd = "Y"
|
||||||
|
$!
|
||||||
|
$ _x509_nsComment = "SSL Generated Certificate"
|
||||||
|
$ _x509_nsComment_upd = "Y"
|
||||||
|
$!
|
||||||
|
$ _x509_subjectKeyIdentifier = "hash"
|
||||||
|
$ _x509_subjectKeyIdentifier_upd = "Y"
|
||||||
|
$!
|
||||||
|
$ _x509_authorityKeyIdentifier = "keyid,issuer:always"
|
||||||
|
$ _x509_authorityKeyIdentifier_upd = "Y"
|
||||||
|
$!
|
||||||
|
$ IF F$SEARCH ("''SSL_CONF_FILE'") .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ GET_CONF_DATA "[''_ca']#default_ca"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _default_ca = SSL_CONF_DATA
|
||||||
|
$ _default_ca_upd = "N"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ GET_CONF_DATA "[''_default_ca']#serial"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _default_serfile = F$PARSE (SSL_CONF_DATA,"SSL$ROOT:",,"DEVICE") + -
|
||||||
|
F$PARSE (SSL_CONF_DATA,"[DB]",,"DIRECTORY") + -
|
||||||
|
F$PARSE (SSL_CONF_DATA,"SERIAL",,"NAME") + -
|
||||||
|
F$PARSE (SSL_CONF_DATA,".TXT",,"TYPE")
|
||||||
|
$ _default_serfile_upd = "N"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ GET_CONF_DATA "[''_default_ca']#database"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _default_idxfile = F$PARSE (SSL_CONF_DATA,"SSL$ROOT:",,"DEVICE") + -
|
||||||
|
F$PARSE (SSL_CONF_DATA,"[DB]",,"DIRECTORY") + -
|
||||||
|
F$PARSE (SSL_CONF_DATA,"INDEX",,"NAME") + -
|
||||||
|
F$PARSE (SSL_CONF_DATA,".TXT",,"TYPE")
|
||||||
|
$ _default_idxfile_upd = "N"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ GET_CONF_DATA "[''_default_ca']#certificate"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _default_crtfile = F$PARSE (SSL_CONF_DATA,"SSL$ROOT:",,"DEVICE") + -
|
||||||
|
F$PARSE (SSL_CONF_DATA,"[CRT]",,"DIRECTORY") + -
|
||||||
|
F$PARSE (SSL_CONF_DATA,"SERVER_CA",,"NAME") + -
|
||||||
|
F$PARSE (SSL_CONF_DATA,".CRT",,"TYPE")
|
||||||
|
$ _default_crtfile_upd = "N"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ GET_CONF_DATA "[''_default_ca']#private_key"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _default_keyfile = F$PARSE (SSL_CONF_DATA,"SSL$ROOT:",,"DEVICE") + -
|
||||||
|
F$PARSE (SSL_CONF_DATA,"[KEY]",,"DIRECTORY") + -
|
||||||
|
F$PARSE (SSL_CONF_DATA,"SERVER_CA",,"NAME") + -
|
||||||
|
F$PARSE (SSL_CONF_DATA,".KEY",,"TYPE")
|
||||||
|
$ _default_keyfile_upd = "N"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ GET_CONF_DATA "[''_default_ca']#new_certs_dir"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _default_newcert = SSL_CONF_DATA
|
||||||
|
$ _default_newcert_upd = "N"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ GET_CONF_DATA "[''_default_ca']#default_md"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _default_md = SSL_CONF_DATA
|
||||||
|
$ _default_md_upd = "N"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ GET_CONF_DATA "[''_default_ca']#default_days"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _default_days = SSL_CONF_DATA
|
||||||
|
$ _default_days_upd = "N"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ GET_CONF_DATA "[''_default_ca']#policy"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _default_policy = SSL_CONF_DATA
|
||||||
|
$ _default_policy_upd = "N"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ GET_CONF_DATA "[''_default_policy']#countryName"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _policy_countryName = SSL_CONF_DATA
|
||||||
|
$ _policy_countryName_upd = "N"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ GET_CONF_DATA "[''_default_policy']#stateOrProvinceName"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _policy_stateOrProvinceName = SSL_CONF_DATA
|
||||||
|
$ _policy_stateOrProvinceName_upd = "N"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ GET_CONF_DATA "[''_default_policy']#localityName"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _policy_localityName = SSL_CONF_DATA
|
||||||
|
$ _policy_localityName_upd = "N"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ GET_CONF_DATA "[''_default_policy']#organizationName"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _policy_organizationName = SSL_CONF_DATA
|
||||||
|
$ _policy_organizationName_upd = "N"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ GET_CONF_DATA "[''_default_policy']#organizationalUnitName"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _policy_organizationalUnitName = SSL_CONF_DATA
|
||||||
|
$ _policy_organizationalUnitName_upd = "N"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ GET_CONF_DATA "[''_default_policy']#commonName"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _policy_commonName = SSL_CONF_DATA
|
||||||
|
$ _policy_commonName_upd = "N"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ GET_CONF_DATA "[''_default_policy']#emailAddress"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _policy_emailAddress = SSL_CONF_DATA
|
||||||
|
$ _policy_emailAddress_upd = "N"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ GET_CONF_DATA "[''_default_ca']#x509_extensions"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _default_x509_extensions = SSL_CONF_DATA
|
||||||
|
$ _default_x509_extensions_upd = "N"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ GET_CONF_DATA "[''_default_x509_extensions']#basicConstraints"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _x509_basicConstraints = SSL_CONF_DATA
|
||||||
|
$ _x509_basicConstraints_upd = "N"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ GET_CONF_DATA "[''_default_x509_extensions']#nsCertType"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _x509_nsCertType = SSL_CONF_DATA
|
||||||
|
$ _x509_nsCertType_upd = "N"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ GET_CONF_DATA "[''_default_x509_extensions']#nsComment"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _x509_nsComment = SSL_CONF_DATA
|
||||||
|
$ _x509_nsComment_upd = "N"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ GET_CONF_DATA "[''_default_x509_extensions']#subjectKeyIdentifier"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _x509_subjectKeyIdentifier = SSL_CONF_DATA
|
||||||
|
$ _x509_subjectKeyIdentifier_upd = "N"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ GET_CONF_DATA "[''_default_x509_extensions']#authorityKeyIdentifier"
|
||||||
|
$ IF SSL_CONF_DATA .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ _x509_authorityKeyIdentifier = SSL_CONF_DATA
|
||||||
|
$ _x509_authorityKeyIdentifier_upd = "N"
|
||||||
|
$ ENDIF
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ SET_USER_DATA "[''_ca']#default_ca#D#''_default_ca'##S###''_default_ca_upd'#N#N"
|
||||||
|
$ SET_USER_DATA "[''_default_ca']#serial#D#''_default_serfile'#Serial File ?#F###''_default_serfile_upd'#N#N"
|
||||||
|
$ SET_USER_DATA "[''_default_ca']#database#D#''_default_idxfile'#Database File ?#F###''_default_idxfile_upd'#N#N"
|
||||||
|
$ SET_USER_DATA "[''_default_ca']#certificate#D#''_default_crtfile'#CA Certificate File ?#F###''_default_crtfile_upd'#Y#N"
|
||||||
|
$ SET_USER_DATA "[''_default_ca']#private_key#D#''_default_keyfile'#CA Certificate Key File ?#F###''_default_keyfile_upd'#Y#N"
|
||||||
|
$ SET_USER_DATA "[]#default_csrfile#-#''_default_csrfile'#Certificate Request File ?#F###''_default_csrfile_upd'#Y#N"
|
||||||
|
$ SET_USER_DATA "[]#default_sgnfile#-#''_default_sgnfile'#Signed Certificate File ?#F###''_default_sgnfile_upd'#Y#N"
|
||||||
|
$ SET_USER_DATA "[''_default_ca']#new_certs_dir#D#''_default_newcert'#New Certificate Directory ?#S###''_default_newcert_upd'#N#N"
|
||||||
|
$ SET_USER_DATA "[''_default_ca']#default_md#D#''_default_md'#Default Digest ?#I###''_default_md_upd'#N#N"
|
||||||
|
$ SET_USER_DATA "[''_default_ca']#default_days#D#''_default_days'#Default Days ?#I###''_default_days_upd'#Y#N"
|
||||||
|
$ SET_USER_DATA "[''_default_ca']#policy#D#''_default_policy'#Default Policy ?#S###''_default_policy_upd'#N#N"
|
||||||
|
$ SET_USER_DATA "[''_default_policy']#countryName#D#''_policy_countryName'#Country Name Policy ?#S###''_policy_countryName_upd'#N#N"
|
||||||
|
$ SET_USER_DATA "[''_default_policy']#stateOrProvinceName#D#''_policy_stateOrProvinceName'#State or Province Name Policy ?#S###''_policy_stateOrProvinceName_upd'#N#N"
|
||||||
|
$ SET_USER_DATA "[''_default_policy']#localityName#D#''_policy_localityName'#Locality Name Policy ?#S###''_policy_localityName_upd'#N#N"
|
||||||
|
$ SET_USER_DATA "[''_default_policy']#organizationName#D#''_policy_organizationName'#Organization Name Policy ?#S###''_policy_organizationName_upd'#N#N"
|
||||||
|
$ SET_USER_DATA "[''_default_policy']#organizationalUnitName#D#''_policy_organizationalUnitName'#Organization Unit Name Policy ?#S###''_policy_organizationalUnitName_upd'#N#N"
|
||||||
|
$ SET_USER_DATA "[''_default_policy']#commonName#D#''_policy_commonName'#Common Name Policy ?#S###''_policy_commonName_upd'#N#N"
|
||||||
|
$ SET_USER_DATA "[''_default_policy']#emailAddress#D#''_policy_emailAddress'#Email Address Policy ?#S###''_policy_emailAddress_upd'#N#N"
|
||||||
|
$ SET_USER_DATA "[''_default_ca']#x509_extensions#D#''_default_x509_extensions'#X509 Extensions ?#S###''_default_x509_extensions_upd'#N#N"
|
||||||
|
$ SET_USER_DATA "[''_default_x509_extensions']#basicConstraints#D#''_x509_basicConstraints'#X509 Basic Constraints ?#S###''_x509_basicConstraints_upd'#N#N"
|
||||||
|
$ SET_USER_DATA "[''_default_x509_extensions']#nsCertType#D#''_x509_nsCertType'#X509 NS Cert Type ?#S###''_x509_nsCertType_upd'#N#N"
|
||||||
|
$ SET_USER_DATA "[''_default_x509_extensions']#nsComment#D#''_x509_nsComment'#X509 NS Comment ?#S###''_x509_nsComment_upd'#N#N"
|
||||||
|
$ SET_USER_DATA "[''_default_x509_extensions']#subjectKeyIdentifier#D#''_x509_subjectKeyIdentifier'#X509 Subject Key Identifier ?#S###''_x509_subjectKeyIdentifier_upd'#N#N"
|
||||||
|
$ SET_USER_DATA "[''_default_x509_extensions']#authorityKeyIdentifier#D#''_x509_authorityKeyIdentifier'#X509 Authority Key Identifier ?#S###''_x509_authorityKeyIdentifier_upd'#N#N"
|
||||||
|
$ SET_USER_DATA "[]#pem_pass_phrase#-##PEM Pass Phrase ?#P#1###Y#N"
|
||||||
|
$ SET_USER_DATA "[]#display_certificate#-#N#Display the Certificate ?#S##1##Y#N"
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H", CEOS
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Confirm/Update the SSL Configuration Data
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$PROMPT_LOOP:
|
||||||
|
$!
|
||||||
|
$ IF CTR .LE. SSL_USER_DATA_MAX
|
||||||
|
$ THEN
|
||||||
|
$ KEY = F$ELEMENT (0,"#",SSL_USER_DATA_'CTR') ! Key Name
|
||||||
|
$ ITM = F$ELEMENT (1,"#",SSL_USER_DATA_'CTR') ! Item Name
|
||||||
|
$ VAL = F$ELEMENT (2,"#",SSL_USER_DATA_'CTR') ! Item Value Contains Default or Prompt
|
||||||
|
$ DEF = F$ELEMENT (3,"#",SSL_USER_DATA_'CTR') ! Default Value
|
||||||
|
$ PRM = F$ELEMENT (4,"#",SSL_USER_DATA_'CTR') ! Prompt Value
|
||||||
|
$ TYP = F$ELEMENT (5,"#",SSL_USER_DATA_'CTR') ! Value Type
|
||||||
|
$ MIN = F$ELEMENT (6,"#",SSL_USER_DATA_'CTR') ! Value Minimum Length
|
||||||
|
$ MAX = F$ELEMENT (7,"#",SSL_USER_DATA_'CTR') ! Value Maximum Length
|
||||||
|
$ UPD = F$ELEMENT (8,"#",SSL_USER_DATA_'CTR') ! Entry Updated ?
|
||||||
|
$ REQ = F$ELEMENT (9,"#",SSL_USER_DATA_'CTR') ! Entry Required for Input ?
|
||||||
|
$ CFM = F$ELEMENT (10,"#",SSL_USER_DATA_'CTR')! Confirm Input ?
|
||||||
|
$ CONFIRMED = 0
|
||||||
|
$ IF REQ .EQS. "N"
|
||||||
|
$ THEN
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ GOTO PROMPT_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$ IF ROW .GT. MSG_ROW - 2
|
||||||
|
$ THEN
|
||||||
|
$ SAY ESC + "[''TOP_ROW';01H", CEOS
|
||||||
|
$ ROW = TOP_ROW
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$CONFIRM_LOOP:
|
||||||
|
$!
|
||||||
|
$ IF PRM .EQS. ""
|
||||||
|
$ THEN
|
||||||
|
$ PROMPT = ESC + "[''ROW';''COL'H''ITM' ? [''DEF'] ''CEOL'"
|
||||||
|
$ ELSE
|
||||||
|
$ PROMPT = ESC + "[''ROW';''COL'H''PRM' [''DEF'] ''CEOL'"
|
||||||
|
$ ENDIF
|
||||||
|
$ IF TYP .EQS. "P" THEN SET TERMINAL /NOECHO
|
||||||
|
$ ASK "''PROMPT'" ANS /END_OF_FILE=EXIT
|
||||||
|
$ IF TYP .EQS. "P" THEN SET TERMINAL /ECHO
|
||||||
|
$ ANS = F$EDIT (ANS,"TRIM")
|
||||||
|
$ IF ANS .EQS. "" THEN ANS = DEF
|
||||||
|
$ IF TYP .EQS. "F"
|
||||||
|
$ THEN
|
||||||
|
$ ANS = F$PARSE ("''ANS'","''DEF'",,,"SYNTAX_ONLY")
|
||||||
|
$ ENDIF
|
||||||
|
$ IF TYP .EQS. "I" .AND. F$TYPE (ANS) .NES. "INTEGER"
|
||||||
|
$ THEN
|
||||||
|
$ CALL INVALID_ENTRY
|
||||||
|
$ SAY ESC + "[''ROW';01H", CEOS
|
||||||
|
$ GOTO PROMPT_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$ IF (TYP .EQS. "S" .OR. TYP .EQS. "P") .AND. -
|
||||||
|
((MIN .NES. "" .AND. F$LENGTH (ANS) .LT. F$INTEGER(MIN)) .OR. -
|
||||||
|
(MAX .NES. "" .AND. F$LENGTH (ANS) .GT. F$INTEGER(MAX)))
|
||||||
|
$ THEN
|
||||||
|
$ CALL INVALID_ENTRY
|
||||||
|
$ SAY ESC + "[''ROW';01H", CEOS
|
||||||
|
$ IF TYP .EQS. "S" THEN GOTO PROMPT_LOOP
|
||||||
|
$ IF TYP .EQS. "P" THEN GOTO CONFIRM_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$ ROW = ROW + 1
|
||||||
|
$ IF CFM .EQS. "Y"
|
||||||
|
$ THEN
|
||||||
|
$ IF CONFIRMED .EQ. 0
|
||||||
|
$ THEN
|
||||||
|
$ CONFIRMED = 1
|
||||||
|
$ CONFIRMED_ANS = ANS
|
||||||
|
$ PRM = "Confirm ''PRM'"
|
||||||
|
$ GOTO CONFIRM_LOOP
|
||||||
|
$ ELSE
|
||||||
|
$ IF ANS .NES. CONFIRMED_ANS
|
||||||
|
$ THEN
|
||||||
|
$ CALL INVALID_ENTRY
|
||||||
|
$ ROW = ROW - 2
|
||||||
|
$ SAY ESC + "[''ROW';01H", CEOS
|
||||||
|
$ GOTO PROMPT_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$ ENDIF
|
||||||
|
$ ENDIF
|
||||||
|
$ IF ANS .NES. DEF THEN SSL_USER_DATA_'CTR' = "''KEY'#''ITM'#''VAL'#''ANS'#''PRM'#''TYP'#''MIN'#''MAX'#Y#''REQ'#''CFM'"
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ GOTO PROMPT_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Save the SSL Configuration Data
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ CTR = 1
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H", BLNK, " Saving Configuration ...", NORM
|
||||||
|
$!
|
||||||
|
$SAVE_CONF_LOOP:
|
||||||
|
$!
|
||||||
|
$ IF CTR .LE. SSL_USER_DATA_MAX
|
||||||
|
$ THEN
|
||||||
|
$ KEY = F$ELEMENT (0,"#",SSL_USER_DATA_'CTR') ! Key Name
|
||||||
|
$ ITM = F$ELEMENT (1,"#",SSL_USER_DATA_'CTR') ! Item Name
|
||||||
|
$ VAL = F$ELEMENT (2,"#",SSL_USER_DATA_'CTR') ! Item Value Contains Default or Prompt
|
||||||
|
$ DEF = F$ELEMENT (3,"#",SSL_USER_DATA_'CTR') ! Default Value
|
||||||
|
$ PRM = F$ELEMENT (4,"#",SSL_USER_DATA_'CTR') ! Prompt Value
|
||||||
|
$ TYP = F$ELEMENT (5,"#",SSL_USER_DATA_'CTR') ! Value Type
|
||||||
|
$ MIN = F$ELEMENT (6,"#",SSL_USER_DATA_'CTR') ! Value Minimum Length
|
||||||
|
$ MAX = F$ELEMENT (7,"#",SSL_USER_DATA_'CTR') ! Value Maximum Length
|
||||||
|
$ UPD = F$ELEMENT (8,"#",SSL_USER_DATA_'CTR') ! Entry Updated ?
|
||||||
|
$ REQ = F$ELEMENT (9,"#",SSL_USER_DATA_'CTR') ! Entry Required for Input ?
|
||||||
|
$ CFM = F$ELEMENT (10,"#",SSL_USER_DATA_'CTR')! Confirm Input ?
|
||||||
|
$ IF UPD .NES. "Y" .OR. VAL .EQS. "-"
|
||||||
|
$ THEN
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ GOTO SAVE_CONF_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$ IF VAL .EQS. "D"
|
||||||
|
$ THEN
|
||||||
|
$ SET_CONF_DATA "''KEY'#''ITM'" "''DEF'"
|
||||||
|
$ ELSE
|
||||||
|
$ SET_CONF_DATA "''KEY'#''ITM'" "''PRM'"
|
||||||
|
$ SET_CONF_DATA "''KEY'#''ITM'_default" "''DEF'"
|
||||||
|
$ ENDIF
|
||||||
|
$ IF MIN .NES. "" THEN SET_CONF_DATA "''KEY'#''ITM'_min" "''MIN'"
|
||||||
|
$ IF MAX .NES. "" THEN SET_CONF_DATA "''KEY'#''ITM'_max" "''MAX'"
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ GOTO SAVE_CONF_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ PURGE /NOLOG /NOCONFIRM 'SSL_CONF_FILE'
|
||||||
|
$ RENAME 'SSL_CONF_FILE'; ;1
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H", CEOS
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Create the Certificiate Authority
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$SKIP:
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H", BLNK, " Signing Certificate Request ...", NORM
|
||||||
|
$!
|
||||||
|
$ X1 = 2
|
||||||
|
$ Y1 = TOP_ROW
|
||||||
|
$ X2 = TT_COLS - 2
|
||||||
|
$ Y2 = MSG_ROW - 1
|
||||||
|
$!
|
||||||
|
$ GET_USER_DATA "[]#pem_pass_phrase"
|
||||||
|
$ _pem_pass_phrase = SSL_USER_DATA
|
||||||
|
$ GET_USER_DATA "[''_default_ca']#database"
|
||||||
|
$ _default_idxfile = SSL_USER_DATA
|
||||||
|
$ GET_USER_DATA "[''_default_ca']#serial"
|
||||||
|
$ _default_serfile = SSL_USER_DATA
|
||||||
|
$ GET_USER_DATA "[]#default_csrfile"
|
||||||
|
$ _default_csrfile = SSL_USER_DATA
|
||||||
|
$ GET_USER_DATA "[]#default_sgnfile"
|
||||||
|
$ _default_sgnfile = SSL_USER_DATA
|
||||||
|
$ GET_USER_DATA "[]#display_certificate"
|
||||||
|
$ _display_certificate = SSL_USER_DATA
|
||||||
|
$!
|
||||||
|
$ IF F$SEARCH ("''_default_idxfile'") .EQS. ""
|
||||||
|
$ THEN
|
||||||
|
$ OPEN /WRITE OFILE '_default_idxfile'
|
||||||
|
$ CLOSE OFILE
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ IF F$SEARCH ("''_default_serfile'") .EQS. ""
|
||||||
|
$ THEN
|
||||||
|
$ OPEN /WRITE OFILE '_default_serfile'
|
||||||
|
$ WRITE OFILE "01"
|
||||||
|
$ CLOSE OFILE
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ DEFINE /USER /NOLOG SYS$ERROR NL:
|
||||||
|
$ DEFINE /USER /NOLOG SYS$OUTPUT NL:
|
||||||
|
$ SHOW SYSTEM /FULL /OUT=SYS$LOGIN:SSL_CA_'PID'.RND
|
||||||
|
$!
|
||||||
|
$ OPEN /WRITE OFILE SYS$LOGIN:SSL_CA_'PID'.COM
|
||||||
|
$ WRITE OFILE "$ SET NOON"
|
||||||
|
$ WRITE OFILE "$ SET MESSAGE /NOFACILITY /NOIDENTIFICATION /NOSEVERITY /NOTEXT"
|
||||||
|
$ WRITE OFILE "$ DEFINE /USER /NOLOG RANDFILE SYS$LOGIN:SSL_CA_''PID'.RND"
|
||||||
|
$ WRITE OFILE "$ DEFINE /USER /NOLOG SYS$ERROR SYS$LOGIN:SSL_CA_''PID'.LOG"
|
||||||
|
$ WRITE OFILE "$ DEFINE /USER /NOLOG SYS$OUTPUT SYS$LOGIN:SSL_CA_''PID'.LOG"
|
||||||
|
$ WRITE OFILE "$ DEFINE /USER /NOLOG SYS$COMMAND SYS$INPUT"
|
||||||
|
$ WRITE OFILE "$ OPENSSL ca -config ''SSL_CONF_FILE' -out ''_default_sgnfile' -infiles ''_default_csrfile'"
|
||||||
|
$ WRITE OFILE "''_pem_pass_phrase'"
|
||||||
|
$ WRITE OFILE "y"
|
||||||
|
$ WRITE OFILE "y"
|
||||||
|
$ WRITE OFILE "$ SET MESSAGE /FACILITY /IDENTIFICATION /SEVERITY /TEXT"
|
||||||
|
$ CLOSE OFILE
|
||||||
|
$!
|
||||||
|
$ @SYS$LOGIN:SSL_CA_'PID'.COM
|
||||||
|
$!
|
||||||
|
$ DELETE/NOLOG/NOCONFIRM SYS$LOGIN:SSL_CA_'PID'.RND;*
|
||||||
|
$ DELETE/NOLOG/NOCONFIRM SYS$LOGIN:SSL_CA_'PID'.COM;*
|
||||||
|
$!
|
||||||
|
$ DEFINE /USER /NOLOG SYS$ERROR NL:
|
||||||
|
$ DEFINE /USER /NOLOG SYS$OUTPUT NL:
|
||||||
|
$ SEARCH SYS$LOGIN:SSL_CA_'PID'.LOG /OUT=SYS$LOGIN:SSL_CA_'PID'.ERR "error:"
|
||||||
|
$ IF F$SEARCH ("SYS$LOGIN:SSL_CA_''PID'.ERR") .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ IF F$FILE_ATTRIBUTE ("SYS$LOGIN:SSL_CA_''PID'.ERR","ALQ") .NE. 0
|
||||||
|
$ THEN
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_CA_'PID'.ERR;*
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H''BELL'''CEOS'"
|
||||||
|
$ SHOW_FILE "SYS$LOGIN:SSL_CA_''PID'.LOG" 'X1' 'Y1' 'X2' 'Y2' "< ERROR >"
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_CA_'PID'.LOG;*
|
||||||
|
$ GOTO EXIT
|
||||||
|
$ ENDIF
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_CA_'PID'.ERR;*
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_CA_'PID'.LOG;*
|
||||||
|
$!
|
||||||
|
$ IF F$EDIT (_display_certificate,"TRIM,UPCASE") .EQS. "Y"
|
||||||
|
$ THEN
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H", BLNK, " Generating Output ...", NORM, CEOL
|
||||||
|
$!
|
||||||
|
$ OPEN /WRITE OFILE SYS$LOGIN:SSL_X509_'PID'.COM
|
||||||
|
$ WRITE OFILE "$ DEFINE /USER /NOLOG SYS$ERROR SYS$LOGIN:SSL_X509_''PID'.LOG"
|
||||||
|
$ WRITE OFILE "$ DEFINE /USER /NOLOG SYS$OUTPUT SYS$LOGIN:SSL_X509_''PID'.LOG"
|
||||||
|
$ WRITE OFILE "$ DEFINE /USER /NOLOG SYS$COMMAND SYS$INPUT"
|
||||||
|
$ WRITE OFILE "$ OPENSSL x509 -noout -text -in ''_default_sgnfile'"
|
||||||
|
$ CLOSE OFILE
|
||||||
|
$!
|
||||||
|
$ @SYS$LOGIN:SSL_X509_'PID'.COM
|
||||||
|
$!
|
||||||
|
$ DELETE/NOLOG/NOCONFIRM SYS$LOGIN:SSL_X509_'PID'.COM;*
|
||||||
|
$!
|
||||||
|
$ DEFINE /USER /NOLOG SYS$ERROR NL:
|
||||||
|
$ DEFINE /USER /NOLOG SYS$OUTPUT NL:
|
||||||
|
$ SEARCH SYS$LOGIN:SSL_X509_'PID'.LOG /OUT=SYS$LOGIN:SSL_X509_'PID'.ERR ":error:"
|
||||||
|
$ IF F$SEARCH ("SYS$LOGIN:SSL_X509_''PID'.ERR") .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ IF F$FILE_ATTRIBUTE ("SYS$LOGIN:SSL_X509_''PID'.ERR","ALQ") .NE. 0
|
||||||
|
$ THEN
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_X509_'PID'.ERR;*
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H''BELL'''CEOS'"
|
||||||
|
$ SHOW_FILE "SYS$LOGIN:SSL_X509_''PID'.LOG" 'X1' 'Y1' 'X2' 'Y2' "< ERROR >"
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_X509_'PID'.LOG;*
|
||||||
|
$ GOTO EXIT
|
||||||
|
$ ENDIF
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_X509_'PID'.ERR;*
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H''CEOS'"
|
||||||
|
$ SHOW_FILE "SYS$LOGIN:SSL_X509_''PID'.LOG" 'X1' 'Y1' 'X2' 'Y2' "< ''_default_sgnfile' >"
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_X509_'PID'.LOG;*
|
||||||
|
$ GOTO EXIT
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ TEXT = "Press return to continue"
|
||||||
|
$ COL = (TT_COLS - F$LENGTH (TEXT)) / 2
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H", CEOS
|
||||||
|
$ PROMPT = ESC + "[''MSG_ROW';''COL'H''TEXT'"
|
||||||
|
$ ASK "''PROMPT'" OPT
|
||||||
|
$!
|
||||||
|
$GOTO EXIT
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Set the User Data
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$SET_USER_DATA: SUBROUTINE
|
||||||
|
$!
|
||||||
|
$ IF F$TYPE (SSL_USER_DATA_MAX) .EQS. ""
|
||||||
|
$ THEN
|
||||||
|
$ SSL_USER_DATA_MAX == 1
|
||||||
|
$ ELSE
|
||||||
|
$ SSL_USER_DATA_MAX == SSL_USER_DATA_MAX + 1
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ SSL_USER_DATA_'SSL_USER_DATA_MAX' == "''P1'"
|
||||||
|
$!
|
||||||
|
$ EXIT
|
||||||
|
$!
|
||||||
|
$ ENDSUBROUTINE
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Find the Request Data
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$GET_USER_DATA: SUBROUTINE
|
||||||
|
$!
|
||||||
|
$ CTR = 1
|
||||||
|
$ USER_KEY = F$ELEMENT (0,"#",P1)
|
||||||
|
$ USER_ITM = F$ELEMENT (1,"#",P1)
|
||||||
|
$!
|
||||||
|
$GET_USER_DATA_LOOP:
|
||||||
|
$!
|
||||||
|
$ IF CTR .LE. SSL_USER_DATA_MAX
|
||||||
|
$ THEN
|
||||||
|
$ KEY = F$ELEMENT (0,"#",SSL_USER_DATA_'CTR') ! Key Name
|
||||||
|
$ ITM = F$ELEMENT (1,"#",SSL_USER_DATA_'CTR') ! Item Name
|
||||||
|
$ VAL = F$ELEMENT (2,"#",SSL_USER_DATA_'CTR') ! Item Value Contains Default or Prompt
|
||||||
|
$ DEF = F$ELEMENT (3,"#",SSL_USER_DATA_'CTR') ! Default Value
|
||||||
|
$ PRM = F$ELEMENT (4,"#",SSL_USER_DATA_'CTR') ! Prompt Value
|
||||||
|
$ IF USER_KEY .NES. KEY .OR. USER_ITM .NES. ITM
|
||||||
|
$ THEN
|
||||||
|
$ CTR = CTR + 1
|
||||||
|
$ GOTO GET_USER_DATA_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$ IF VAL .EQS. "-" THEN SSL_USER_DATA == "''DEF'"
|
||||||
|
$ IF VAL .EQS. "D" THEN SSL_USER_DATA == "''DEF'"
|
||||||
|
$ IF VAL .EQS. "P" THEN SSL_USER_DATA == "''PRM'"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ EXIT
|
||||||
|
$!
|
||||||
|
$ ENDSUBROUTINE
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Delete the User Data
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$DEL_USER_DATA: SUBROUTINE
|
||||||
|
$!
|
||||||
|
$ IF F$TYPE (SSL_USER_DATA_MAX) .EQS. "" THEN GOTO DEL_USER_DATA_END
|
||||||
|
$!
|
||||||
|
$DEL_USER_DATA_LOOP:
|
||||||
|
$!
|
||||||
|
$ IF F$TYPE (SSL_USER_DATA_'SSL_USER_DATA_MAX') .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ DELETE /SYMBOL /GLOBAL SSL_USER_DATA_'SSL_USER_DATA_MAX'
|
||||||
|
$ SSL_USER_DATA_MAX == SSL_USER_DATA_MAX - 1
|
||||||
|
$ GOTO DEL_USER_DATA_LOOP
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ DELETE /SYMBOL /GLOBAL SSL_USER_DATA_MAX
|
||||||
|
$!
|
||||||
|
$DEL_USER_DATA_END:
|
||||||
|
$!
|
||||||
|
$ IF F$TYPE (SSL_USER_DATA) .NES. "" THEN DELETE /SYMBOL /GLOBAL SSL_USER_DATA
|
||||||
|
$!
|
||||||
|
$ EXIT
|
||||||
|
$!
|
||||||
|
$ ENDSUBROUTINE
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Display the invalid entry
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$INVALID_ENTRY: SUBROUTINE
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H", BELL, " Invalid Entry, Try again ...''CEOL'"
|
||||||
|
$ Wait 00:00:01.5
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H", CEOL
|
||||||
|
$!
|
||||||
|
$ EXIT
|
||||||
|
$!
|
||||||
|
$ ENDSUBROUTINE
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Exit the procedure
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$EXIT:
|
||||||
|
$!
|
||||||
|
$ DEFINE /USER /NOLOG SYS$ERROR NL:
|
||||||
|
$ DEFINE /USER /NOLOG SYS$OUTPUT NL:
|
||||||
|
$ DEASSIGN SYS$OUTPUT
|
||||||
|
$!
|
||||||
|
$ DEFINE /USER /NOLOG SYS$ERROR NL:
|
||||||
|
$ DEFINE /USER /NOLOG SYS$OUTPUT NL:
|
||||||
|
$ DEASSIGN SYS$ERROR
|
||||||
|
$!
|
||||||
|
$ DEFINE /USER /NOLOG SYS$ERROR NL:
|
||||||
|
$ DEFINE /USER /NOLOG SYS$OUTPUT NL:
|
||||||
|
$ CLOSE OFILE
|
||||||
|
$!
|
||||||
|
$ DEL_USER_DATA
|
||||||
|
$!
|
||||||
|
$ IF F$TYPE (SSL_CONF_DATA) .NES. "" THEN DELETE /SYMBOL /GLOBAL SSL_CONF_DATA
|
||||||
|
$!
|
||||||
|
$ IF F$GETDVI ("TT:","TT_NOECHO") .AND. .NOT. TT_NOECHO THEN SET TERMINAL /ECHO
|
||||||
|
$!
|
||||||
|
$ IF F$SEARCH ("SYS$LOGIN:SSL_CA_''PID'.%%%;*") .NES. "" THEN DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_CA_'PID'.%%%;*
|
||||||
|
$ IF F$SEARCH ("SYS$LOGIN:SSL_X509_''PID'.%%%;*") .NES. "" THEN DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_X509_'PID'.%%%;*
|
||||||
|
$!
|
||||||
|
$ Verify = F$VERIFY (Verify)
|
||||||
|
$!
|
||||||
|
$ EXIT
|
||||||
245
VMS/cert_tool/ssl$view_cert.com
Normal file
245
VMS/cert_tool/ssl$view_cert.com
Normal file
@@ -0,0 +1,245 @@
|
|||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! SSL$VIEW_CERT.COM - SSL View Certificate procedure
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ Verify = F$VERIFY (0)
|
||||||
|
$ Set NoOn
|
||||||
|
$ Set NoControl=Y
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Description
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$! This procedure prompts the user through creating a Server Certificate.
|
||||||
|
$!
|
||||||
|
$! The parameters used are:
|
||||||
|
$!
|
||||||
|
$! P1 - Certificate or Certificate Request (i.e. "CRT" or "CSR")
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Define symbols
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ DELETE := DELETE
|
||||||
|
$ SAY := WRITE SYS$OUTPUT
|
||||||
|
$ ASK := READ SYS$COMMAND /END_OF_FILE=EXIT /PROMPT=
|
||||||
|
$ PID = F$GETJPI ("","PID")
|
||||||
|
$ TT_NOECHO = F$GETDVI ("TT:","TT_NOECHO")
|
||||||
|
$ On Control_Y THEN GOTO EXIT
|
||||||
|
$ Set Control=Y
|
||||||
|
$!
|
||||||
|
$ TT_ROWS = F$GETDVI ("TT:","TT_PAGE")
|
||||||
|
$ TT_COLS = F$GETDVI ("TT:","DEVBUFSIZ")
|
||||||
|
$!
|
||||||
|
$ INIT_TERM := @SSL$COM:SSL$INIT_TERM
|
||||||
|
$ PICK_FILE := @SSL$COM:SSL$PICK_FILE
|
||||||
|
$ SHOW_FILE := @SSL$COM:SSL$SHOW_FILE
|
||||||
|
$!
|
||||||
|
$ ESC[0,8] = 27 ! Set the Escape Character
|
||||||
|
$ BELL[0,8] = 7 ! Ring the terminal Bell
|
||||||
|
$ RED = 1 ! Color - Red
|
||||||
|
$ FGD = 30 ! Foreground
|
||||||
|
$ BGD = 0 ! Background
|
||||||
|
$ CSCR = ESC + "[2J" ! Clear the Screen
|
||||||
|
$ CEOS = ESC + "[0J" ! Clear to the End of the Screen
|
||||||
|
$ CEOL = ESC + "[0K" ! Clear to the End of the Line
|
||||||
|
$ NORM = ESC + "[0m" ! Turn Attributes off
|
||||||
|
$ BLNK = ESC + "[5m" ! Turn on BLINK Attribute
|
||||||
|
$ WIDE = ESC + "#6" ! Turn on WIDE Attribute
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Run the SSL setup if it hasn't been run yet
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ IF F$TRNLNM ("SSL$ROOT") .EQS. ""
|
||||||
|
$ THEN
|
||||||
|
$ IF F$SEARCH ("SSL$COM:SSL$INIT_ENV.COM") .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ @SSL$COM:SSL$INIT_ENV.COM
|
||||||
|
$ ELSE
|
||||||
|
$ SAY BELL, "Unable to locate SSL$COM:SSL$INIT_ENV.COM ..."
|
||||||
|
$ GOTO EXIT
|
||||||
|
$ ENDIF
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Display the Page Header
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ INIT_TERM
|
||||||
|
$ BCOLOR = BGD
|
||||||
|
$ FCOLOR = FGD + RED
|
||||||
|
$ COLOR = ESC + "[''BCOLOR';''FCOLOR'm"
|
||||||
|
$!
|
||||||
|
$ TEXT = "SSL Certificate Tool"
|
||||||
|
$ COL = (TT_COLS - (F$LENGTH (TEXT) * 2)) / 4
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[01;01H", CSCR
|
||||||
|
$ SAY ESC + "[02;''COL'H", COLOR, WIDE, TEXT, NORM
|
||||||
|
$!
|
||||||
|
$ IF P1 .EQS. "CSR"
|
||||||
|
$ THEN
|
||||||
|
$ TEXT = "View Certificate Request"
|
||||||
|
$ ELSE
|
||||||
|
$ TEXT = "View Certificate"
|
||||||
|
$ ENDIF
|
||||||
|
$ COL = (TT_COLS - F$LENGTH (TEXT)) / 2
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[04;01H"
|
||||||
|
$ SAY ESC + "[04;''COL'H", COLOR, TEXT, NORM
|
||||||
|
$!
|
||||||
|
$ CTR = 1
|
||||||
|
$ ROW = 6
|
||||||
|
$ COL = 2
|
||||||
|
$ TOP_ROW = ROW
|
||||||
|
$ MSG_ROW = TT_ROWS - 1
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Initialize the Request Data
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ IF P1 .NES. "CRT" .AND. P1 .NES. "CSR"
|
||||||
|
$ THEN
|
||||||
|
$ PRM = "Display File:"
|
||||||
|
$ DEF = "*.*"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ IF P1 .EQS. "CRT"
|
||||||
|
$ THEN
|
||||||
|
$ PRM = "Display Certificate File:"
|
||||||
|
$ DEF = "SSL$CRT:*.CRT"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ IF P1 .EQS. "CSR"
|
||||||
|
$ THEN
|
||||||
|
$ PRM = "Display Certificate Request File:"
|
||||||
|
$ DEF = "SSL$CSR:*.CSR"
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H", CEOS
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Confirm/Update the SSL Configuration Data
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$PROMPT_LOOP:
|
||||||
|
$!
|
||||||
|
$ PROMPT = ESC + "[''ROW';''COL'H''PRM' ? [''DEF'] ''CEOL'"
|
||||||
|
$ ASK "''PROMPT'" _view_file_name
|
||||||
|
$ _view_file_name = F$EDIT (_view_file_name,"TRIM")
|
||||||
|
$ IF _view_file_name .EQS. "" THEN _view_file_name = DEF
|
||||||
|
$!
|
||||||
|
$ X1 = 2
|
||||||
|
$ Y1 = TOP_ROW
|
||||||
|
$ X2 = TT_COLS - 2
|
||||||
|
$ Y2 = MSG_ROW - 1
|
||||||
|
$!
|
||||||
|
$PICK_FILE:
|
||||||
|
$!
|
||||||
|
$ PICK_FILE "''_view_file_name'" 'X1' 'Y1' 'X2' 'Y2' "< Select a File >"
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[''TOP_ROW';01H", CEOS
|
||||||
|
$!
|
||||||
|
$ IF SSL_FILE_NAME .EQS. "" THEN GOTO EXIT
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Create the Certificiate Authority
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H", BLNK, " Generating Output ...", NORM, CEOL
|
||||||
|
$!
|
||||||
|
$ IF P1 .EQS. "CRT"
|
||||||
|
$ THEN
|
||||||
|
$ OPEN /WRITE OFILE SYS$LOGIN:SSL_X509_'PID'.COM
|
||||||
|
$ WRITE OFILE "$ DEFINE /USER /NOLOG SYS$ERROR SYS$LOGIN:SSL_X509_''PID'.LOG"
|
||||||
|
$ WRITE OFILE "$ DEFINE /USER /NOLOG SYS$OUTPUT SYS$LOGIN:SSL_X509_''PID'.LOG"
|
||||||
|
$ WRITE OFILE "$ DEFINE /USER /NOLOG SYS$COMMAND SYS$INPUT"
|
||||||
|
$ WRITE OFILE "$ OPENSSL x509 -noout -text -in ''SSL_FILE_NAME'"
|
||||||
|
$ CLOSE OFILE
|
||||||
|
$!
|
||||||
|
$ @SYS$LOGIN:SSL_X509_'PID'.COM
|
||||||
|
$!
|
||||||
|
$ DELETE/NOLOG/NOCONFIRM SYS$LOGIN:SSL_X509_'PID'.COM;*
|
||||||
|
$!
|
||||||
|
$ DEFINE /USER /NOLOG SYS$ERROR NL:
|
||||||
|
$ DEFINE /USER /NOLOG SYS$OUTPUT NL:
|
||||||
|
$ SEARCH SYS$LOGIN:SSL_X509_'PID'.LOG /OUT=SYS$LOGIN:SSL_X509_'PID'.ERR ":error:"
|
||||||
|
$ IF F$SEARCH ("SYS$LOGIN:SSL_X509_''PID'.ERR") .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ IF F$FILE_ATTRIBUTE ("SYS$LOGIN:SSL_X509_''PID'.ERR","ALQ") .NE. 0
|
||||||
|
$ THEN
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_X509_'PID'.ERR;*
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H''BELL'''CEOS'"
|
||||||
|
$ SHOW_FILE "SYS$LOGIN:SSL_X509_''PID'.LOG" 'X1' 'Y1' 'X2' 'Y2' "< ERROR >"
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_X509_'PID'.LOG;*
|
||||||
|
$ GOTO EXIT
|
||||||
|
$ ENDIF
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_X509_'PID'.ERR;*
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H''CEOS'"
|
||||||
|
$ SHOW_FILE "SYS$LOGIN:SSL_X509_''PID'.LOG" 'X1' 'Y1' 'X2' 'Y2' "< ''SSL_FILE_NAME' >"
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_X509_'PID'.LOG;*
|
||||||
|
$ GOTO PICK_FILE
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ IF P1 .EQS. "CSR"
|
||||||
|
$ THEN
|
||||||
|
$ OPEN /WRITE OFILE SYS$LOGIN:SSL_REQ_'PID'.COM
|
||||||
|
$ WRITE OFILE "$ DEFINE /USER /NOLOG SYS$ERROR SYS$LOGIN:SSL_REQ_''PID'.LOG"
|
||||||
|
$ WRITE OFILE "$ DEFINE /USER /NOLOG SYS$OUTPUT SYS$LOGIN:SSL_REQ_''PID'.LOG"
|
||||||
|
$ WRITE OFILE "$ DEFINE /USER /NOLOG SYS$COMMAND SYS$INPUT"
|
||||||
|
$ WRITE OFILE "$ OPENSSL req -noout -text -in ''SSL_FILE_NAME'"
|
||||||
|
$ CLOSE OFILE
|
||||||
|
$!
|
||||||
|
$ @SYS$LOGIN:SSL_REQ_'PID'.COM
|
||||||
|
$!
|
||||||
|
$ DELETE/NOLOG/NOCONFIRM SYS$LOGIN:SSL_REQ_'PID'.COM;*
|
||||||
|
$!
|
||||||
|
$ DEFINE /USER /NOLOG SYS$ERROR NL:
|
||||||
|
$ DEFINE /USER /NOLOG SYS$OUTPUT NL:
|
||||||
|
$ SEARCH SYS$LOGIN:SSL_REQ_'PID'.LOG /OUT=SYS$LOGIN:SSL_REQ_'PID'.ERR ":error:"
|
||||||
|
$ IF F$SEARCH ("SYS$LOGIN:SSL_REQ_''PID'.ERR") .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ IF F$FILE_ATTRIBUTE ("SYS$LOGIN:SSL_REQ_''PID'.ERR","ALQ") .NE. 0
|
||||||
|
$ THEN
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_REQ_'PID'.ERR;*
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H''BELL'''CEOS'"
|
||||||
|
$ SHOW_FILE "SYS$LOGIN:SSL_REQ_''PID'.LOG" 'X1' 'Y1' 'X2' 'Y2' "< ERROR >"
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_REQ_'PID'.LOG;*
|
||||||
|
$ GOTO EXIT
|
||||||
|
$ ENDIF
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_REQ_'PID'.ERR;*
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H''CEOS'"
|
||||||
|
$ SHOW_FILE "SYS$LOGIN:SSL_REQ_''PID'.LOG" 'X1' 'Y1' 'X2' 'Y2' "< ''SSL_FILE_NAME' >"
|
||||||
|
$ DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_REQ_'PID'.LOG;*
|
||||||
|
$ GOTO PICK_FILE
|
||||||
|
$ ENDIF
|
||||||
|
$!
|
||||||
|
$ SAY ESC + "[''MSG_ROW';01H''CEOS'"
|
||||||
|
$ SHOW_FILE "''SYS$LOGIN:SSL_FILE_NAME'" 'X1' 'Y1' 'X2' 'Y2' "< ''SSL_FILE_NAME' >"
|
||||||
|
$ GOTO PICK_FILE
|
||||||
|
$!
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$! Exit the procedure
|
||||||
|
$!------------------------------------------------------------------------------
|
||||||
|
$!
|
||||||
|
$EXIT:
|
||||||
|
$!
|
||||||
|
$ DEFINE /USER /NOLOG SYS$ERROR NL:
|
||||||
|
$ DEFINE /USER /NOLOG SYS$OUTPUT NL:
|
||||||
|
$ CLOSE OFILE
|
||||||
|
$!
|
||||||
|
$ IF F$TYPE (SSL_FILE_NAME) .NES. "" THEN DELETE /SYMBOL /GLOBAL SSL_FILE_NAME
|
||||||
|
$!
|
||||||
|
$ IF F$GETDVI ("TT:","TT_NOECHO") .AND. .NOT. TT_NOECHO THEN SET TERMINAL /ECHO
|
||||||
|
$!
|
||||||
|
$ IF F$SEARCH ("SYS$LOGIN:SSL_REQ_''PID'.%%%;*") .NES. "" THEN DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_REQ_'PID'.%%%;*
|
||||||
|
$ IF F$SEARCH ("SYS$LOGIN:SSL_X509_''PID'.%%%;*") .NES. "" THEN DELETE /NOLOG /NOCONFIRM SYS$LOGIN:SSL_X509_'PID'.%%%;*
|
||||||
|
$!
|
||||||
|
$ Verify = F$VERIFY (Verify)
|
||||||
|
$!
|
||||||
|
$ EXIT
|
||||||
@@ -1,2 +0,0 @@
|
|||||||
CASE_SENSITIVE=YES
|
|
||||||
SYMBOL_VECTOR=(bind_engine=PROCEDURE,v_check=PROCEDURE)
|
|
||||||
154
VMS/install.com
Normal file
154
VMS/install.com
Normal file
@@ -0,0 +1,154 @@
|
|||||||
|
$! INSTALL.COM -- Installs the files in a given directory tree
|
||||||
|
$!
|
||||||
|
$! Author: Richard Levitte <richard@levitte.org>
|
||||||
|
$! Time of creation: 23-MAY-1998 19:22
|
||||||
|
$!
|
||||||
|
$! P1 root of the directory tree
|
||||||
|
$!
|
||||||
|
$ IF P1 .EQS. ""
|
||||||
|
$ THEN
|
||||||
|
$ WRITE SYS$OUTPUT "First argument missing."
|
||||||
|
$ WRITE SYS$OUTPUT "Should be the directory where you want things installed."
|
||||||
|
$ EXIT
|
||||||
|
$ ENDIF
|
||||||
|
$
|
||||||
|
$ ROOT = F$PARSE(P1,"[]A.;0",,,"SYNTAX_ONLY,NO_CONCEAL") - "A.;0"
|
||||||
|
$ ROOT_DEV = F$PARSE(ROOT,,,"DEVICE","SYNTAX_ONLY")
|
||||||
|
$ ROOT_DIR = F$PARSE(ROOT,,,"DIRECTORY","SYNTAX_ONLY") -
|
||||||
|
- "[000000." - "][" - "[" - "]"
|
||||||
|
$ ROOT = ROOT_DEV + "[" + ROOT_DIR
|
||||||
|
$
|
||||||
|
$ DEFINE/NOLOG WRK_SSLROOT 'ROOT'.] /TRANS=CONC
|
||||||
|
$ DEFINE/NOLOG WRK_SSLVLIB WRK_SSLROOT:[VAX_LIB]
|
||||||
|
$ DEFINE/NOLOG WRK_SSLALIB WRK_SSLROOT:[ALPHA_LIB]
|
||||||
|
$ DEFINE/NOLOG WRK_SSLINCLUDE WRK_SSLROOT:[INCLUDE]
|
||||||
|
$ DEFINE/NOLOG WRK_SSLVEXE WRK_SSLROOT:[VAX_EXE]
|
||||||
|
$ DEFINE/NOLOG WRK_SSLAEXE WRK_SSLROOT:[ALPHA_EXE]
|
||||||
|
$ DEFINE/NOLOG WRK_SSLCERTS WRK_SSLROOT:[CERTS]
|
||||||
|
$ DEFINE/NOLOG WRK_SSLPRIVATE WRK_SSLROOT:[PRIVATE]
|
||||||
|
$ DEFINE/NOLOG WRK_SSLCOM WRK_SSLROOT:[COM]
|
||||||
|
$
|
||||||
|
$ IF F$PARSE("WRK_SSLROOT:[000000]") .EQS. "" THEN -
|
||||||
|
CREATE/DIR/LOG WRK_SSLROOT:[000000]
|
||||||
|
$ IF F$PARSE("WRK_SSLINCLUDE:") .EQS. "" THEN -
|
||||||
|
CREATE/DIR/LOG WRK_SSLINCLUDE:
|
||||||
|
$! IF F$PARSE("WRK_SSLROOT:[VMS]") .EQS. "" THEN -
|
||||||
|
$! CREATE/DIR/LOG WRK_SSLROOT:[VMS]
|
||||||
|
$ IF F$PARSE("WRK_SSLCOM:") .EQS. "" THEN -
|
||||||
|
CREATE/DIR/LOG WRK_SSLROOT:[COM]
|
||||||
|
$
|
||||||
|
$ IF F$SEARCH("WRK_SSLINCLUDE:vms_idhacks.h") .NES. "" THEN -
|
||||||
|
DELETE WRK_SSLINCLUDE:vms_idhacks.h;*
|
||||||
|
$
|
||||||
|
$ OPEN/WRITE SF WRK_SSLCOM:SSL$STARTUP.COM
|
||||||
|
$ WRITE SYS$OUTPUT "%OPEN-I-CREATED, ",F$SEARCH("WRK_SSLCOM:SSL$STARTUP.COM")," created."
|
||||||
|
$ WRITE SF "$! Startup file for SSL 0.9.2-RL 15-Mar-1999"
|
||||||
|
$ WRITE SF "$!"
|
||||||
|
$ WRITE SF "$! Do not edit this file, as it will be regenerated during next installation."
|
||||||
|
$ WRITE SF "$! Instead, add or change SSL$COM:SSL$SYSTARTUP.COM"
|
||||||
|
$ WRITE SF "$!"
|
||||||
|
$ WRITE SF "$!"
|
||||||
|
$ WRITE SF "$ ARCH = ""VAX"""
|
||||||
|
$ WRITE SF "$ IF F$GETSYI(""CPU"") .GE. 128 THEN ARCH = ""ALPHA"""
|
||||||
|
$ WRITE SF "$!"
|
||||||
|
$ WRITE SF "$ IF F$SEARCH(""SYS$STARTUP:SSL$DEFINE_ROOT.COM"") .NES."""" THEN -"
|
||||||
|
$ WRITE SF "$ @SYS$STARTUP:SSL$DEFINE_ROOT.COM"
|
||||||
|
$ WRITE SF "$!"
|
||||||
|
$ WRITE SF "$!"
|
||||||
|
$ WRITE SF "$ DEFINE/NOLOG/SYSTEM/EXEC SSL$CERTS SSL$ROOT:[CERTS]"
|
||||||
|
$ WRITE SF "$ DEFINE/NOLOG/SYSTEM/EXEC SSL$COM SSL$ROOT:[COM]"
|
||||||
|
$ WRITE SF "$ DEFINE/NOLOG/SYSTEM/EXEC SSL$EXE SSL$ROOT:['ARCH'_EXE]"
|
||||||
|
$ WRITE SF "$ DEFINE/NOLOG/SYSTEM/EXEC SSL$INCLUDE SSL$ROOT:[INCLUDE]"
|
||||||
|
$ WRITE SF "$ DEFINE/NOLOG/SYSTEM/EXEC SSL$KEY SSL$ROOT:[CERTS]"
|
||||||
|
$ WRITE SF "$ DEFINE/NOLOG/SYSTEM/EXEC SSL$PRIVATE SSL$ROOT:[PRIVATE]"
|
||||||
|
$ WRITE SF "$"
|
||||||
|
$ WRITE SF "$! This is program can include <openssl/{foo}.h>"
|
||||||
|
$ WRITE SF "$ DEFINE/NOLOG/SYSTEM/EXEC OPENSSL SSL$INCLUDE:"
|
||||||
|
$ WRITE SF "$!"
|
||||||
|
$ WRITE SF "$ IF F$SEARCH(""SSL$COM:SSL$SYSTARTUP.COM"") .NES."""" THEN -"
|
||||||
|
$ WRITE SF " @SSL$COM:SSL$SYSTARTUP.COM"
|
||||||
|
$ WRITE SF "$"
|
||||||
|
$ WRITE SF "$ EXIT"
|
||||||
|
$ CLOSE SF
|
||||||
|
$ SET FILE/PROT=WORLD:RE WRK_SSLCOM:SSL$STARTUP.COM
|
||||||
|
$!
|
||||||
|
$ OPEN/WRITE SF WRK_SSLCOM:SSL$SHUTDOWN.COM
|
||||||
|
$ WRITE SYS$OUTPUT "%OPEN-I-CREATED, ",F$SEARCH("WRK_SSLCOM:SSL$SHUTDOWN.COM")," created."
|
||||||
|
$ WRITE SF "$! Shutdown file for SSL"
|
||||||
|
$ WRITE SF "$!"
|
||||||
|
$ WRITE SF "$! Do not edit this file, as it will be regenerated during next installation."
|
||||||
|
$ WRITE SF "$!"
|
||||||
|
$ WRITE SF "$ ARCH = ""VAX"""
|
||||||
|
$ WRITE SF "$ IF F$GETSYI(""CPU"") .GE. 128 THEN ARCH = ""ALPHA"""
|
||||||
|
$ WRITE SF "$!"
|
||||||
|
$ WRITE SF "$ IF F$SEARCH(""SSL$COM:SSL$SYSHUTDOWN.COM"") .NES."""" THEN -"
|
||||||
|
$ WRITE SF " @SSL$COM:SSL$SYSHUTDOWN.COM"
|
||||||
|
$ WRITE SF "$!"
|
||||||
|
$ WRITE SF "$ IF F$TRNLNM(""SSL$CERTS"") .NES."""" THEN -"
|
||||||
|
$ WRITE SF " DEASSIGN/SYSTEM/EXEC SSL$CERTS"
|
||||||
|
$!
|
||||||
|
$ WRITE SF "$ IF F$TRNLNM(""SSL$COM"") .NES."""" THEN -"
|
||||||
|
$ WRITE SF " DEASSIGN/SYSTEM/EXEC SSL$COM"
|
||||||
|
$!
|
||||||
|
$ WRITE SF "$ IF F$TRNLNM(""SSL$EXE"") .NES."""" THEN -"
|
||||||
|
$ WRITE SF " DEASSIGN/SYSTEM/EXEC SSL$EXE"
|
||||||
|
$!
|
||||||
|
$ WRITE SF "$ IF F$TRNLNM(""SSL$INCLUDE"") .NES."""" THEN -"
|
||||||
|
$ WRITE SF " DEASSIGN/SYSTEM/EXEC SSL$INCLUDE"
|
||||||
|
$!
|
||||||
|
$ WRITE SF "$ IF F$TRNLNM(""SSL$KEY"") .NES."""" THEN -"
|
||||||
|
$ WRITE SF " DEASSIGN/SYSTEM/EXEC SSL$KEY"
|
||||||
|
$!
|
||||||
|
$ WRITE SF "$ IF F$TRNLNM(""SSL$PRIVATE"") .NES."""" THEN -"
|
||||||
|
$ WRITE SF " DEASSIGN/SYSTEM/EXEC SSL$PRIVATE"
|
||||||
|
$!
|
||||||
|
$ WRITE SF "$!"
|
||||||
|
$ WRITE SF "$ IF F$TRNLNM(""OPENSSL"") .NES."""" THEN -"
|
||||||
|
$ WRITE SF " DEASSIGN/SYSTEM/EXEC OPENSSL"
|
||||||
|
$ WRITE SF "$!"
|
||||||
|
$ WRITE SF "$ IF F$TRNLNM(""SSL$ROOT"") .NES."""" THEN -"
|
||||||
|
$ WRITE SF " DEASSIGN/SYSTEM/EXEC SSL$ROOT"
|
||||||
|
$ WRITE SF "$!"
|
||||||
|
$ WRITE SF "$ EXIT"
|
||||||
|
$ CLOSE SF
|
||||||
|
$ SET FILE/PROT=WORLD:RE WRK_SSLCOM:SSL$SHUTDOWN.COM
|
||||||
|
$!
|
||||||
|
$ COPY SSL$UTILS.COM WRK_SSLCOM:/LOG
|
||||||
|
$ SET FILE/PROT=WORLD:RE WRK_SSLCOM:SSL$UTILS.COM
|
||||||
|
$!
|
||||||
|
$ COPY SSL$SYSTARTUP.COM WRK_SSLCOM:/LOG
|
||||||
|
$ SET FILE/PROT=WORLD:RE WRK_SSLCOM:SSL$SYSTARTUP.COM
|
||||||
|
$ COPY SSL$SYSHUTDOWN.COM WRK_SSLCOM:/LOG
|
||||||
|
$ SET FILE/PROT=WORLD:RE WRK_SSLCOM:SSL$SYSHUTDOWN.COM
|
||||||
|
$!
|
||||||
|
$ CERT_DIR := [.CERT_TOOL]
|
||||||
|
$ CERT_FILES := SSL$AUTH_CERT.COM,SSL$AUTO_CERT.COM,SSL$CERT_TOOL.COM, -
|
||||||
|
SSL$CONF_UTIL.COM,SSL$DRAW_BOX.COM,SSL$EXIT_CMD.TPU, -
|
||||||
|
SSL$FILL_BOX.COM,SSL$HASH_CERT.COM,SSL$HOSTADDR.EXE, -
|
||||||
|
SSL$HOSTNAME.EXE,SSL$INIT_ENV.COM,SSL$INIT_TERM.COM, -
|
||||||
|
SSL$PICK_FILE.COM,SSL$RQST_CERT.COM,SSL$SELF_CERT.COM, -
|
||||||
|
SSL$SHOW_FILE.COM,SSL$SIGN_CERT.COM,SSL$VIEW_CERT.COM, -
|
||||||
|
SSL$REM_ENV.COM
|
||||||
|
$!
|
||||||
|
$ I = 0
|
||||||
|
$ LOOP:
|
||||||
|
$ CF = F$EDIT(F$ELEMENT(I, ",", CERT_FILES),"TRIM")
|
||||||
|
$ I = I + 1
|
||||||
|
$ IF CF .EQS. "," THEN GOTO LOOP_END
|
||||||
|
$ SET NOON
|
||||||
|
$ IF F$SEARCH(CERT_DIR+CF) .NES. ""
|
||||||
|
$ THEN
|
||||||
|
$ COPY 'CERT_DIR''CF' WRK_SSLCOM:*.*/log
|
||||||
|
$ SET FILE/PROT=W:RE WRK_SSLCOM:'CF'
|
||||||
|
$ ENDIF
|
||||||
|
$ SET ON
|
||||||
|
$ GOTO LOOP
|
||||||
|
$ LOOP_END:
|
||||||
|
$!
|
||||||
|
$ SHOW SYSTEM/FULL/OUTPUT=WRK_SSLROOT:[PRIVATE]RANDFILE.
|
||||||
|
$ SET FILE/PROT=WORLD:RE WRK_SSLROOT:[PRIVATE]RANDFILE.
|
||||||
|
$!
|
||||||
|
$ COPY SSL010.RELEASE_NOTES WRK_SSLROOT:[000000]/LOG
|
||||||
|
$ SET FILE/PROT=WORLD:RE WRK_SSLROOT:[000000]SSL010.RELEASE_NOTES
|
||||||
|
$!
|
||||||
|
$ EXIT
|
||||||
490
VMS/mkshared.com
Normal file
490
VMS/mkshared.com
Normal file
@@ -0,0 +1,490 @@
|
|||||||
|
$! MKSHARED.COM -- script to created shareable images on VMS
|
||||||
|
$!
|
||||||
|
$! No command line parameters. This should be run at the start of the source
|
||||||
|
$! tree (the same directory where one finds INSTALL.VMS).
|
||||||
|
$!
|
||||||
|
$! Input: [.UTIL]LIBEAY.NUM,[.AXP.EXE.CRYPTO]LIBCRYPTO.OLB
|
||||||
|
$! [.UTIL]SSLEAY.NUM,[.AXP.EXE.SSL]LIBSSL.OLB
|
||||||
|
$! Output: [.AXP.EXE.CRYPTO]LIBCRYPTO.OPT,.MAP,.EXE
|
||||||
|
$! [.AXP.EXE.SSL]LIBSSL.OPT,.MAP,.EXE
|
||||||
|
$!
|
||||||
|
$! So far, tests have only been made on VMS for Alpha. VAX will come in time.
|
||||||
|
$!
|
||||||
|
$!
|
||||||
|
$! >>>>>
|
||||||
|
$! Note: Since I don't know how to put a comment into one of the .NUM
|
||||||
|
$! files, I will put the comment here and hope that it is found.
|
||||||
|
$!
|
||||||
|
$! For SSLEAY.NUM, we do not expose SSL_add_dir_cert_subjs_to_stk.
|
||||||
|
$! We do not expose it because it is a truncated VMS name that
|
||||||
|
$! points to (via SYMHACKS.H) SSL_add_dir_cert_subjects_to_stack.
|
||||||
|
$! However, SSL_add_dir_cert_subjects_to_stack is #ifndef VMS
|
||||||
|
$! out of SSL_CERT.C. So, comment them all out and we won't get
|
||||||
|
$! any link errors about undefined symbols. This all works fine
|
||||||
|
$! until we need this API's functionality.
|
||||||
|
$!
|
||||||
|
$! For LIBEAY.NUM,
|
||||||
|
$! ASN1_UTCTIME_GET #if 0 [.CRYPTO.ASN1]A_UTCTM.C
|
||||||
|
$! [.CRYPTO.ASN1]ASN1.H
|
||||||
|
$!
|
||||||
|
$! DES_SET_WEAK_KEY_FLAG [.CRYPTO.DES]DES.H
|
||||||
|
$! Not used in any .C file.
|
||||||
|
$!
|
||||||
|
$! DH_GET_DEFAULT_METHOD Not found in any .C or .H file.
|
||||||
|
$! DH_SET_DEFAULT_METHOD Not found in any .C or .H file.
|
||||||
|
$! DSA_GET_DEFAULT_METHOD Not found in any .C or .H file.
|
||||||
|
$! DSA_SET_DEFAULT_METHOD Not found in any .C or .H file.
|
||||||
|
$!
|
||||||
|
$! PEM_READ_BIO_NETSCAPE_CERT_SEQUENCE [.CRYPTO.PEM]PEM.H
|
||||||
|
$! [.CRYPTO]SYMHACKS.H
|
||||||
|
$! PEM_read_bio_NS_CERT_SEQ is not in any .C or .H file.
|
||||||
|
$!
|
||||||
|
$! PEM_READ_BIO_PKCS8_PRIV_KEY_INFO [.CRYPTO]SYMHACKS.H
|
||||||
|
$! #define PEM_read_bio_PKCS8_PRIV_KEY_INFO PEM_read_bio_P8_PRIV_KEY_INFO
|
||||||
|
$! PEM_read_bio_P8_PRIV_KEY_INFO is not in any .C or .H file.
|
||||||
|
$!
|
||||||
|
$! PEM_READ_NETSCAPE_CERT_SEQUENCE [.CRYPTO.PEM]PEM.H
|
||||||
|
$! [.CRYPTO]SYMHACKS.H
|
||||||
|
$! #define PEM_read_NETSCAPE_CERT_SEQUENCE PEM_read_NS_CERT_SEQ
|
||||||
|
$! PEM_read_NS_CERT_SEQ is not in any .C or .H file.
|
||||||
|
$!
|
||||||
|
$! PEM_READ_PKCS8_PRIV_KEY_INFO [.CRYPTO]SYMHACKS.H
|
||||||
|
$! #define PEM_read_PKCS8_PRIV_KEY_INFO PEM_read_P8_PRIV_KEY_INFO
|
||||||
|
$! PEM_read_P8_PRIV_KEY_INFO is not in any .C or .H file.
|
||||||
|
$!
|
||||||
|
$! PEM_WRITE_BIO_NETSCAPE_CERT_SEQUENCE [.CRYPTO.PEM]PEM.H
|
||||||
|
$! [.CRYPTO]SYMHACKS.H
|
||||||
|
$! #define PEM_write_bio_NETSCAPE_CERT_SEQUENCE PEM_write_bio_NS_CERT_SEQ
|
||||||
|
$! PEM_write_bio_NS_CERT_SEQ is not in any .C or .H file.
|
||||||
|
$!
|
||||||
|
$! PEM_WRITE_BIO_PKCS8_PRIV_KEY_INFO [.CRYPTO]SYMHACKS.H
|
||||||
|
$! #define PEM_write_bio_PKCS8_PRIV_KEY_INFO PEM_write_bio_P8_PRIV_KEY_INFO
|
||||||
|
$! PEM_write_bio_P8_PRIV_KEY_INFO is not in any .C or .H file.
|
||||||
|
$!
|
||||||
|
$! PEM_WRITE_NETSCAPE_CERT_SEQUENCE [.CRYPTO.PEM]PEM.H
|
||||||
|
$! [.CRYPTO]SYMHACKS.H
|
||||||
|
$! #define PEM_write_NETSCAPE_CERT_SEQUENCE PEM_write_NS_CERT_SEQ
|
||||||
|
$! PEM_write_NS_CERT_SEQ is not in any .C or .H file.
|
||||||
|
$!
|
||||||
|
$! PEM_WRITE_PKCS8_PRIV_KEY_INFO [.CRYPTO]SYMHACKS.H
|
||||||
|
$! #define PEM_write_PKCS8_PRIV_KEY_INFO PEM_write_P8_PRIV_KEY_INFO
|
||||||
|
$! PEM_write_P8_PRIV_KEY_INFO is not in any .C or .H file.
|
||||||
|
$!
|
||||||
|
$! RAND_EVENT [.CRYPTO.RAND]RAND.H RAND_event is #if windows || Win32
|
||||||
|
$! [.CRYPTO.RAND]RAND_WIN.C
|
||||||
|
$! All modules in RAND_WIN are WINDOWS or WIN32 modules.
|
||||||
|
$!
|
||||||
|
$! RAND_SCREEN if Windows or Win32 - [.CRYPTO.RAND]RAND.H
|
||||||
|
$!
|
||||||
|
$! RSA_GET_DEFAULT_METHOD is not in any .C or .H file.
|
||||||
|
$!
|
||||||
|
$! RSA_SET_DEFAULT_METHOD is not in any .C or .H file.
|
||||||
|
$!
|
||||||
|
$!
|
||||||
|
$!
|
||||||
|
$! ===========================================================================
|
||||||
|
$!
|
||||||
|
$! Setup VMS specific information.
|
||||||
|
$!
|
||||||
|
$ @vms_build_info
|
||||||
|
$!
|
||||||
|
$! ----- Prepare info for processing: version number and file info
|
||||||
|
$ gosub read_version_info
|
||||||
|
$!
|
||||||
|
$ if libver .eqs. ""
|
||||||
|
$ then
|
||||||
|
$ write sys$error "ERROR: Couldn't find any library version info..."
|
||||||
|
$ exit
|
||||||
|
$ endif
|
||||||
|
$
|
||||||
|
$ if f$getsyi("CPU") .ge. 128
|
||||||
|
$ then
|
||||||
|
$ libid = "Crypto"
|
||||||
|
$ libnum = "[.UTIL]LIBEAY.NUM"
|
||||||
|
$ libdir = "[.AXP.EXE.CRYPTO]"
|
||||||
|
$ libolb = "''libdir'LIBCRYPTO''build_bits'.OLB"
|
||||||
|
$ libopt = "''libdir'LIBCRYPTO.OPT"
|
||||||
|
$ libmap = "''libdir'LIBCRYPTO.MAP"
|
||||||
|
$ if build_bits .eqs. "32"
|
||||||
|
$ then
|
||||||
|
$ libgoal= "''libdir'SSL$LIBCRYPTO_SHR''build_bits'.EXE"
|
||||||
|
$ else
|
||||||
|
$ libgoal= "''libdir'SSL$LIBCRYPTO_SHR.EXE"
|
||||||
|
$ endif
|
||||||
|
$ libref = ""
|
||||||
|
$ gosub create_axp_shr
|
||||||
|
$ libid = "SSL"
|
||||||
|
$ libnum = "[.UTIL]SSLEAY.NUM"
|
||||||
|
$ libdir = "[.AXP.EXE.SSL]"
|
||||||
|
$ libolb = "''libdir'LIBSSL''build_bits'.OLB"
|
||||||
|
$ libopt = "''libdir'LIBSSL.OPT"
|
||||||
|
$ libmap = "''libdir'LIBSSL.MAP"
|
||||||
|
$ if build_bits .eqs. "32"
|
||||||
|
$ then
|
||||||
|
$ libgoal= "''libdir'SSL$LIBSSL_SHR''build_bits'.EXE"
|
||||||
|
$ libref = "[.AXP.EXE.CRYPTO]SSL$LIBCRYPTO_SHR''build_bits'.EXE"
|
||||||
|
$ else
|
||||||
|
$ libgoal= "''libdir'SSL$LIBSSL_SHR.EXE"
|
||||||
|
$ libref = "[.AXP.EXE.CRYPTO]SSL$LIBCRYPTO_SHR.EXE"
|
||||||
|
$ endif
|
||||||
|
$ gosub create_axp_shr
|
||||||
|
$ else
|
||||||
|
$ libtit = "CRYPTO_TRANSFER_VECTOR"
|
||||||
|
$ libid = "Crypto"
|
||||||
|
$ libnum = "[.UTIL]LIBEAY.NUM"
|
||||||
|
$ libdir = "[.VAX.EXE.CRYPTO]"
|
||||||
|
$ libmar = "''libdir'LIBCRYPTO.MAR"
|
||||||
|
$ libolb = "''libdir'LIBCRYPTO''build_bits.OLB"
|
||||||
|
$ libopt = "''libdir'LIBCRYPTO.OPT"
|
||||||
|
$ libobj = "''libdir'LIBCRYPTO.OBJ"
|
||||||
|
$ libmap = "''libdir'LIBCRYPTO.MAP"
|
||||||
|
$ if build_bits .eqs. "32"
|
||||||
|
$ then
|
||||||
|
$ libgoal= "''libdir'SSL$LIBCRYPTO_SHR''build_bits'.EXE"
|
||||||
|
$ else
|
||||||
|
$ libgoal= "''libdir'SSL$LIBCRYPTO_SHR.EXE"
|
||||||
|
$ endif
|
||||||
|
$ libref = ""
|
||||||
|
$ libvec = "LIBCRYPTO"
|
||||||
|
$ gosub create_vax_shr
|
||||||
|
$ libtit = "SSL_TRANSFER_VECTOR"
|
||||||
|
$ libid = "SSL"
|
||||||
|
$ libnum = "[.UTIL]SSLEAY.NUM"
|
||||||
|
$ libdir = "[.VAX.EXE.SSL]"
|
||||||
|
$ libmar = "''libdir'LIBSSL.MAR"
|
||||||
|
$ libolb = "''libdir'LIBSSL''build_bits'.OLB"
|
||||||
|
$ libopt = "''libdir'LIBSSL.OPT"
|
||||||
|
$ libobj = "''libdir'LIBSSL.OBJ"
|
||||||
|
$ libmap = "''libdir'LIBSSL.MAP"
|
||||||
|
$ if build_bits .eqs. "32"
|
||||||
|
$ then
|
||||||
|
$ libgoal= "''libdir'SSL$LIBSSL_SHR''build_bits'.EXE"
|
||||||
|
$ libref = "[.VAX.EXE.CRYPTO]SSL$LIBCRYPTO_SHR''build_bits'.EXE"
|
||||||
|
$ else
|
||||||
|
$ libgoal= "''libdir'SSL$LIBSSL_SHR.EXE"
|
||||||
|
$ libref = "[.VAX.EXE.CRYPTO]SSL$LIBCRYPTO_SHR.EXE"
|
||||||
|
$ endif
|
||||||
|
$ libvec = "LIBSSL"
|
||||||
|
$ gosub create_vax_shr
|
||||||
|
$ endif
|
||||||
|
$ exit
|
||||||
|
$
|
||||||
|
$! ----- Soubroutines to actually build the shareable libraries
|
||||||
|
$! The way things work, there's a main shareable library creator for each
|
||||||
|
$! supported architecture, which is called from the main code above.
|
||||||
|
$! The creator will define a number of variables to tell the next levels of
|
||||||
|
$! subroutines what routines to use to write to the option files, call the
|
||||||
|
$! main processor, read_func_num, and when that is done, it will write version
|
||||||
|
$! data at the end of the .opt file, close it, and link the library.
|
||||||
|
$!
|
||||||
|
$! read_func_num reads through a .num file and calls the writer routine for
|
||||||
|
$! each line. It's also responsible for checking that order is properly kept
|
||||||
|
$! in the .num file, check that each line applies to VMS and the architecture,
|
||||||
|
$! and to fill in "holes" with dummy entries.
|
||||||
|
$!
|
||||||
|
$! The creator routines depend on the following variables:
|
||||||
|
$! libnum The name of the .num file to use as input
|
||||||
|
$! libolb The name of the object library to build from
|
||||||
|
$! libid The identification string of the shareable library
|
||||||
|
$! libopt The name of the .opt file to write
|
||||||
|
$! libtit The title of the assembler transfer vector file (VAX only)
|
||||||
|
$! libmar The name of the assembler transfer vector file (VAX only)
|
||||||
|
$! libmap The name of the map file to write
|
||||||
|
$! libgoal The name of the shareable library to write
|
||||||
|
$! libref The name of a shareable library to link in
|
||||||
|
$!
|
||||||
|
$! read_func_num depends on the following variables from the creator:
|
||||||
|
$! libwriter The name of the writer routine to call for each .num file line
|
||||||
|
$! -----
|
||||||
|
$
|
||||||
|
$! ----- Subroutines for AXP
|
||||||
|
$! -----
|
||||||
|
$! The creator routine
|
||||||
|
$ create_axp_shr:
|
||||||
|
$ open/write opt 'libopt'
|
||||||
|
$ write opt "identification=""",libid," ",libverstr,""""
|
||||||
|
$ write opt "build_ident=""",build_ident,"_",build_platform,"_",build_bits,""" "
|
||||||
|
$ write opt libolb,"/lib"
|
||||||
|
$ if libref .nes. "" then write opt libref,"/SHARE"
|
||||||
|
$ write opt "SYMBOL_VECTOR=(-"
|
||||||
|
$ libfirstentry := true
|
||||||
|
$ libwrch := opt
|
||||||
|
$ libwriter := write_axp_transfer_entry
|
||||||
|
$ textcount = 0
|
||||||
|
$ gosub read_func_num
|
||||||
|
$ write opt ")"
|
||||||
|
$ write opt "GSMATCH=",libvmatch,",",libver
|
||||||
|
$ close opt
|
||||||
|
$ link/map='libmap'/full/share='libgoal' 'libopt'/option
|
||||||
|
$ return
|
||||||
|
$
|
||||||
|
$! The record writer routine
|
||||||
|
$ write_axp_transfer_entry:
|
||||||
|
$ if libentry .eqs. ".dummy" then return
|
||||||
|
$ if info_kind .eqs. "VARIABLE"
|
||||||
|
$ then
|
||||||
|
$ pr:=DATA
|
||||||
|
$ else
|
||||||
|
$ pr:=PROCEDURE
|
||||||
|
$ endif
|
||||||
|
$ textcount_this = f$length(pr) + f$length(libentry) + 5
|
||||||
|
$ if textcount + textcount_this .gt. 1024
|
||||||
|
$ then
|
||||||
|
$ write opt ")"
|
||||||
|
$ write opt "SYMBOL_VECTOR=(-"
|
||||||
|
$ textcount = 16
|
||||||
|
$ libfirstentry := true
|
||||||
|
$ endif
|
||||||
|
$ if libfirstentry
|
||||||
|
$ then
|
||||||
|
$ write 'libwrch' " ",libentry,"=",pr," -"
|
||||||
|
$!DEBUG!$ write sys$output "''libentry' = ''pr' #1"
|
||||||
|
$ else
|
||||||
|
$ write 'libwrch' " ,",libentry,"=",pr," -"
|
||||||
|
$!DEBUG!$ write sys$output ",''libentry' = ''pr'"
|
||||||
|
$ endif
|
||||||
|
$ libfirstentry := false
|
||||||
|
$ textcount = textcount + textcount_this
|
||||||
|
$ return
|
||||||
|
$
|
||||||
|
$! ----- Subroutines for VAX
|
||||||
|
$! -----
|
||||||
|
$! The creator routine
|
||||||
|
$ create_vax_shr:
|
||||||
|
$ open/write mar 'libmar'
|
||||||
|
$ type sys$input:/out=mar:
|
||||||
|
;
|
||||||
|
; Transfer vector for VAX shareable image
|
||||||
|
;
|
||||||
|
$ write mar " .TITLE ",libtit
|
||||||
|
$ write mar " .IDENT /",libid,"/"
|
||||||
|
$ type sys$input:/out=mar:
|
||||||
|
;
|
||||||
|
; Define macro to assist in building transfer vector entries. Each entry
|
||||||
|
; should take no more than 8 bytes.
|
||||||
|
;
|
||||||
|
.MACRO FTRANSFER_ENTRY routine
|
||||||
|
.ALIGN QUAD
|
||||||
|
.TRANSFER routine
|
||||||
|
.MASK routine
|
||||||
|
JMP routine+2
|
||||||
|
.ENDM TRANSFER_ENTRY
|
||||||
|
;
|
||||||
|
; Place entries in own program section.
|
||||||
|
;
|
||||||
|
$ write mar " .PSECT $$",libvec,"QUAD,PIC,USR,CON,REL,LCL,SHR,EXE,RD,NOWRT"
|
||||||
|
$ write mar libvec,"_xfer:"
|
||||||
|
$ libwrch := mar
|
||||||
|
$ libwriter := write_vax_ftransfer_entry
|
||||||
|
$ gosub read_func_num
|
||||||
|
$ type sys$input:/out=mar:
|
||||||
|
;
|
||||||
|
; Allocate extra storage at end of vector to allow for expansion.
|
||||||
|
;
|
||||||
|
$ write mar " .BLKB 32768-<.-",libvec,"_xfer> ; 64 pages total."
|
||||||
|
$ libwriter := write_vax_vtransfer_entry
|
||||||
|
$ gosub read_func_num
|
||||||
|
$ write mar " .END"
|
||||||
|
$ close mar
|
||||||
|
$ open/write opt 'libopt'
|
||||||
|
$ write opt "identification=""",libid," ",libverstr,""""
|
||||||
|
$ write opt libobj
|
||||||
|
$ write opt libolb,"/lib"
|
||||||
|
$ if libref .nes. "" then write opt libref,"/SHARE"
|
||||||
|
$ type sys$input:/out=opt:
|
||||||
|
!
|
||||||
|
! Ensure transfer vector is at beginning of image
|
||||||
|
!
|
||||||
|
CLUSTER=FIRST
|
||||||
|
$ write opt "COLLECT=FIRST,$$",libvec
|
||||||
|
$ write opt "GSMATCH=",libvmatch,",",libver
|
||||||
|
$ type sys$input:/out=opt:
|
||||||
|
!
|
||||||
|
! make psects nonshareable so image can be installed.
|
||||||
|
!
|
||||||
|
PSECT_ATTR=$CHAR_STRING_CONSTANTS,NOWRT
|
||||||
|
$ libwrch := opt
|
||||||
|
$ libwriter := write_vax_psect_attr
|
||||||
|
$ gosub read_var_num
|
||||||
|
$ close opt
|
||||||
|
$ macro/obj='libobj' 'libmar'
|
||||||
|
$ link/map='libmap'/full/share='libgoal' 'libopt'/option
|
||||||
|
$ return
|
||||||
|
$
|
||||||
|
$! The record writer routine for VAX functions
|
||||||
|
$ write_vax_ftransfer_entry:
|
||||||
|
$ if info_kind .nes. "FUNCTION" then return
|
||||||
|
$ if libentry .eqs ".dummy"
|
||||||
|
$ then
|
||||||
|
$ write 'libwrch' " .BLKB 8" ! Dummy is zeroes...
|
||||||
|
$ else
|
||||||
|
$ write 'libwrch' " FTRANSFER_ENTRY ",libentry
|
||||||
|
$ endif
|
||||||
|
$ return
|
||||||
|
$! The record writer routine for VAX variables (should never happen!)
|
||||||
|
$ write_vax_psect_attr:
|
||||||
|
$ if info_kind .nes. "VARIABLE" then return
|
||||||
|
$ if libentry .eqs ".dummy" then return
|
||||||
|
$ write 'libwrch' "PSECT_ATTR=",libentry,",NOSHR"
|
||||||
|
$ return
|
||||||
|
$
|
||||||
|
$! ----- Common subroutines
|
||||||
|
$! -----
|
||||||
|
$! The .num file reader. This one has great responsability.
|
||||||
|
$ read_func_num:
|
||||||
|
$ open libnum 'libnum'
|
||||||
|
$ goto read_nums
|
||||||
|
$
|
||||||
|
$ read_nums:
|
||||||
|
$ libentrynum=0
|
||||||
|
$ liblastentry:=false
|
||||||
|
$ entrycount=0
|
||||||
|
$ loop:
|
||||||
|
$ read/end=loop_end/err=loop_end libnum line
|
||||||
|
$ entrynum=f$int(f$element(1," ",f$edit(line,"COMPRESS,TRIM")))
|
||||||
|
$ entryinfo=f$element(2," ",f$edit(line,"COMPRESS,TRIM"))
|
||||||
|
$ curentry=f$element(0," ",f$edit(line,"COMPRESS,TRIM"))
|
||||||
|
$ info_exist=f$element(0,":",entryinfo)
|
||||||
|
$ info_platforms=","+f$element(1,":",entryinfo)+","
|
||||||
|
$ info_kind=f$element(2,":",entryinfo)
|
||||||
|
$ info_algorithms=","+f$element(3,":",entryinfo)+","
|
||||||
|
$!
|
||||||
|
$!DEBUG!$ write sys$output " Processing ... ", line
|
||||||
|
$!DEBUG!$ write sys$output "Entry num = ",entrynum
|
||||||
|
$!DEBUG!$ write sys$output "Entry info = ",entryinfo
|
||||||
|
$!DEBUG!$ write sys$output "Cur Entry = ",curentry
|
||||||
|
$!DEBUG!$ write sys$output "info exist = ",info_exist
|
||||||
|
$!DEBUG!$ write sys$output "info platforms = ",info_platforms
|
||||||
|
$!DEBUG!$ write sys$output "info kind = ",info_kind
|
||||||
|
$!DEBUG!$ write sys$output "info algs = ",info_algorithms
|
||||||
|
$!
|
||||||
|
$ if info_exist .eqs. "NOEXIST" then goto loop
|
||||||
|
$ truesum = 0
|
||||||
|
$ falsesum = 0
|
||||||
|
$ negatives = 1
|
||||||
|
$ plat_i = 0
|
||||||
|
$ loop1:
|
||||||
|
$ plat_entry = f$element(plat_i,",",info_platforms)
|
||||||
|
$!DEBUG!$ write sys$output "plat entry = ",plat_entry
|
||||||
|
$!
|
||||||
|
$ plat_i = plat_i + 1
|
||||||
|
$!DEBUG!$ write sys$output "plat i = ", plat_i
|
||||||
|
$ if plat_entry .eqs. "" then goto loop1
|
||||||
|
$ if plat_entry .eqs. ","
|
||||||
|
$ then
|
||||||
|
$ goto endloop1
|
||||||
|
$ else
|
||||||
|
$ if f$extract(0,1,plat_entry) .nes. "!" then negatives = 0
|
||||||
|
$ if f$getsyi("CPU") .lt. 128
|
||||||
|
$ then
|
||||||
|
$ if plat_entry .eqs. "EXPORT_VAR_AS_FUNCTION" then -
|
||||||
|
$ truesum = truesum + 1
|
||||||
|
$ if plat_entry .eqs. "!EXPORT_VAR_AS_FUNCTION" then -
|
||||||
|
$ falsesum = falsesum + 1
|
||||||
|
$ endif
|
||||||
|
$ if plat_entry .eqs. "VMS"
|
||||||
|
$ then
|
||||||
|
$ truesum = truesum + 1
|
||||||
|
$!DEBUG!$ write sys$output "plat_entry = VMS"
|
||||||
|
$ endif
|
||||||
|
$!
|
||||||
|
$ if plat_entry .eqs. "!VMS"
|
||||||
|
$ then
|
||||||
|
$ falsesum = falsesum + 1
|
||||||
|
$!DEBUG!$ write sys$output "plat_entry <> VMS"
|
||||||
|
$ endif
|
||||||
|
$ endif
|
||||||
|
$ goto loop1
|
||||||
|
$!
|
||||||
|
$ endloop1:
|
||||||
|
$!DEBUG!$ if info_platforms - "EXPORT_VAR_AS_FUNCTION" .nes. info_platforms
|
||||||
|
$!DEBUG!$ then
|
||||||
|
$!DEBUG!$ write sys$output line
|
||||||
|
$!DEBUG!$ write sys$output " truesum = ",truesum,-
|
||||||
|
$!DEBUG! ", negatives = ",negatives,", falsesum = ",falsesum
|
||||||
|
$!DEBUG!$ endif
|
||||||
|
$ if falsesum .ne. 0 then goto loop
|
||||||
|
$ if truesum+negatives .eq. 0
|
||||||
|
$ then
|
||||||
|
$!DEBUG!$ write sys$output "truesum+negatives .eq. 0. Going to loop."
|
||||||
|
$ goto loop
|
||||||
|
$ endif
|
||||||
|
$ alg_i = 0
|
||||||
|
$ loop2:
|
||||||
|
$ alg_entry = f$element(alg_i,",",info_algorithms)
|
||||||
|
$!DEBUG!$ write sys$output "alg entry = ",alg_entry
|
||||||
|
$ alg_i = alg_i + 1
|
||||||
|
$ if alg_entry .eqs. "" then goto loop2
|
||||||
|
$ if alg_entry .eqs. ","
|
||||||
|
$ then
|
||||||
|
$ goto endloop2
|
||||||
|
$ else
|
||||||
|
$ if alg_entry .eqs. "KRB5" then goto loop ! Special for now
|
||||||
|
$ if f$trnlnm("OPENSSL_NO_"+alg_entry) .nes. "" then goto loop
|
||||||
|
$ endif
|
||||||
|
$ goto loop2
|
||||||
|
$!
|
||||||
|
$ endloop2:
|
||||||
|
$ if info_platforms - "EXPORT_VAR_AS_FUNCTION" .nes. info_platforms
|
||||||
|
$ then
|
||||||
|
$!DEBUG!$ write sys$output curentry," ; ",entrynum," ; ",entryinfo
|
||||||
|
$ endif
|
||||||
|
$ redo:
|
||||||
|
$ next:=loop
|
||||||
|
$ tolibentry=curentry
|
||||||
|
$ if libentrynum .ne. entrynum
|
||||||
|
$ then
|
||||||
|
$ entrycount=entrycount+1
|
||||||
|
$ if entrycount .lt. entrynum
|
||||||
|
$ then
|
||||||
|
$!DEBUG!$ write sys$output "Info: entrycount: ''entrycount', entrynum: ''entrynum' => 0"
|
||||||
|
$ tolibentry=".dummy"
|
||||||
|
$ next:=redo
|
||||||
|
$ endif
|
||||||
|
$ if entrycount .gt. entrynum
|
||||||
|
$ then
|
||||||
|
$ write sys$error "Decreasing library entry numbers! Can't continue"
|
||||||
|
$ write sys$error """",line,""""
|
||||||
|
$ close libnum
|
||||||
|
$ return
|
||||||
|
$ endif
|
||||||
|
$ libentry=tolibentry
|
||||||
|
$!DEBUG!$ write sys$output entrycount," ",libentry," ",entryinfo
|
||||||
|
$ if libentry .nes. "" .and. libwriter .nes. "" then gosub 'libwriter'
|
||||||
|
$ else
|
||||||
|
$ write sys$error "Info: ""''curentry'"" is an alias for ""''libentry'"". Overriding..."
|
||||||
|
$ endif
|
||||||
|
$ libentrynum=entrycount
|
||||||
|
$ goto 'next'
|
||||||
|
$ loop_end:
|
||||||
|
$ close libnum
|
||||||
|
$ return
|
||||||
|
$!
|
||||||
|
$! The version number reader
|
||||||
|
$!
|
||||||
|
$read_version_info:
|
||||||
|
$ libver = ""
|
||||||
|
$ open/read vf [.CRYPTO]OPENSSLV.H
|
||||||
|
$ loop_rvi:
|
||||||
|
$ read/err=endloop_rvi/end=endloop_rvi vf rvi_line
|
||||||
|
$ if rvi_line - "SHLIB_VERSION_NUMBER """ .eqs. rvi_line then -
|
||||||
|
goto loop_rvi
|
||||||
|
$ libverstr = f$element(1,"""",rvi_line)
|
||||||
|
$ libvmajor = f$element(0,".",libverstr)
|
||||||
|
$ libvminor = f$element(1,".",libverstr)
|
||||||
|
$ libvedit = f$element(2,".",libverstr)
|
||||||
|
$ libvpatch = f$cvui(0,8,f$extract(1,1,libvedit)+"@")-f$cvui(0,8,"@")
|
||||||
|
$ libvedit = f$extract(0,1,libvedit)
|
||||||
|
$ libver = f$string(f$int(libvmajor)*100)+","+-
|
||||||
|
f$string(f$int(libvminor)*100+f$int(libvedit)*10+f$int(libvpatch))
|
||||||
|
$ if libvmajor .eqs. "0"
|
||||||
|
$ then
|
||||||
|
$ libvmatch = "EQUAL"
|
||||||
|
$ else
|
||||||
|
$ ! Starting with the 1.0 release, backward compatibility should be
|
||||||
|
$ ! kept, so switch over to the following
|
||||||
|
$ libvmatch = "LEQUAL"
|
||||||
|
$ endif
|
||||||
|
$ endloop_rvi:
|
||||||
|
$ close vf
|
||||||
|
$ return
|
||||||
1
VMS/multinet_shr.opt
Normal file
1
VMS/multinet_shr.opt
Normal file
@@ -0,0 +1 @@
|
|||||||
|
multinet:multinet_socket_library.exe/share
|
||||||
@@ -1,59 +0,0 @@
|
|||||||
$ ! OpenSSL shutdown script
|
|
||||||
$ !
|
|
||||||
$ ! This script deassigns the logical names used by the installation
|
|
||||||
$ ! of OpenSSL. It can do so at any level, defined by P1.
|
|
||||||
$ !
|
|
||||||
$ ! P1 Qualifier(s) for DEASSIGN.
|
|
||||||
$ ! Default: /PROCESS
|
|
||||||
$ !
|
|
||||||
$ ! P2 If the value is "NOALIASES", no alias logical names are
|
|
||||||
$ ! deassigned.
|
|
||||||
$
|
|
||||||
$ status = %x10000001 ! Generic success
|
|
||||||
$
|
|
||||||
$ ! In case there's a problem
|
|
||||||
$ ON CONTROL_Y THEN GOTO bailout
|
|
||||||
$ ON ERROR THEN GOTO bailout
|
|
||||||
$
|
|
||||||
$ ! Find the architecture
|
|
||||||
$ IF F$GETSYI("CPU") .LT. 128
|
|
||||||
$ THEN
|
|
||||||
$ arch := VAX
|
|
||||||
$ ELSE
|
|
||||||
$ arch := F$EDIT(F$GETSYI("ARCH_NAME"),"UPCASE")
|
|
||||||
$ IF arch .EQS. "" THEN GOTO unknown_arch
|
|
||||||
$ ENDIF
|
|
||||||
$
|
|
||||||
$ ! Generated information
|
|
||||||
$ VERSION := {- $config{version} -}
|
|
||||||
$ INSTALLTOP := {- $config{INSTALLTOP} -}
|
|
||||||
$ POINTER_SIZE = {- $config{pointersize} -}
|
|
||||||
$
|
|
||||||
$ ! Abbrevs
|
|
||||||
$ DEAS := DEASSIGN /NOLOG 'P1'
|
|
||||||
$ v = VERSION - "." - "."
|
|
||||||
$
|
|
||||||
$ DEAS OSSL$ROOT'v'
|
|
||||||
$ DEAS OSSL$INCLUDE'v'
|
|
||||||
$ DEAS OSSL$LIB'v'
|
|
||||||
$ DEAS OSSL$SHARE'v'
|
|
||||||
$ DEAS OSSL$ENGINES'v'
|
|
||||||
$ DEAS OSSL$EXE'v'
|
|
||||||
$ {- output_off() if $disabled{shared} -}
|
|
||||||
$ {- join("\n\$ ", map { "DEAS $_'v'" } map { $unified_info{sharednames}->{$_} || () } @{$unified_info{libraries}}) -}
|
|
||||||
$ {- output_on() -}
|
|
||||||
$ IF P2 .NES. "NOALIASES"
|
|
||||||
$ THEN
|
|
||||||
$ DEAS OSSL$ROOT
|
|
||||||
$ DEAS OSSL$INCLUDE
|
|
||||||
$ DEAS OSSL$LIB
|
|
||||||
$ DEAS OSSL$SHARE
|
|
||||||
$ DEAS OSSL$ENGINES
|
|
||||||
$ DEAS OSSL$EXE
|
|
||||||
$ DEAS OPENSSL
|
|
||||||
$ {- output_off() if $disabled{shared} -}
|
|
||||||
$ {- join("\n\$ ", map { "DEAS $_" } map { $unified_info{sharednames}->{$_} || () } @{$unified_info{libraries}}) -}
|
|
||||||
$ {- output_on() -}
|
|
||||||
$ ENDIF
|
|
||||||
$
|
|
||||||
$ EXIT 'status'
|
|
||||||
@@ -1,117 +0,0 @@
|
|||||||
$ ! OpenSSL startup script
|
|
||||||
$ !
|
|
||||||
$ ! This script defines the logical names used by the installation
|
|
||||||
$ ! of OpenSSL. It can provide those logical names at any level,
|
|
||||||
$ ! defined by P1.
|
|
||||||
$ !
|
|
||||||
$ ! The logical names created are:
|
|
||||||
$ !
|
|
||||||
$ ! OSSL$ROOTnnn Installation root
|
|
||||||
$ ! OSSL$EXEnnn Where the executables are located
|
|
||||||
$ ! OSSL$LIBnnn Where the library files are located
|
|
||||||
$ ! OSSL$SHAREnnn Where the sahreable images are located
|
|
||||||
$ ! OSSL$INCLUDEnnn Include directory root
|
|
||||||
$ ! OSSL$ENGINESnnn Where the sahreable images are located
|
|
||||||
$ !
|
|
||||||
$ ! In all these, nnn is the OpenSSL version number. This allows
|
|
||||||
$ ! several OpenSSL versions to be installed simultaneously.
|
|
||||||
$ !
|
|
||||||
$ ! In addition, unless P2 is "NOALIASES", these logical names are
|
|
||||||
$ ! created:
|
|
||||||
$ !
|
|
||||||
$ ! OSSL$ROOT Alias for OSSL$ROOTnnn
|
|
||||||
$ ! OSSL$EXE Alias for OSSL$EXEnnn
|
|
||||||
$ ! OSSL$LIB Alias for OSSL$LIBnnn
|
|
||||||
$ ! OSSL$SHARE Alias for OSSL$SHAREnnn
|
|
||||||
$ ! OSSL$INCLUDE Alias for OSSL$INCLUDEnnn
|
|
||||||
$ ! OPENSSL is OSSL$INCLUDE:[OPENSSL]
|
|
||||||
$ ! OSSL$ENGINES Alias for OSSL$ENGINESnnn
|
|
||||||
$ !
|
|
||||||
$ ! P1 Qualifier(s) for DEFINE. "/SYSTEM" would be typical when
|
|
||||||
$ ! calling this script from SYS$STARTUP:SYSTARTUP_VMS.COM,
|
|
||||||
$ ! while "/PROCESS" would be typical for a personal install.
|
|
||||||
$ ! Default: /PROCESS
|
|
||||||
$ !
|
|
||||||
$ ! P2 If the value is "NOALIASES", no alias logical names are
|
|
||||||
$ ! created.
|
|
||||||
$
|
|
||||||
$ status = %x10000001 ! Generic success
|
|
||||||
$
|
|
||||||
$ ! In case there's a problem
|
|
||||||
$ ON CONTROL_Y THEN GOTO bailout
|
|
||||||
$ ON ERROR THEN GOTO bailout
|
|
||||||
$
|
|
||||||
$ ! Find the architecture
|
|
||||||
$ IF F$GETSYI("CPU") .LT. 128
|
|
||||||
$ THEN
|
|
||||||
$ arch := VAX
|
|
||||||
$ ELSE
|
|
||||||
$ arch = F$EDIT(F$GETSYI("ARCH_NAME"),"UPCASE")
|
|
||||||
$ IF arch .EQS. "" THEN GOTO unknown_arch
|
|
||||||
$ ENDIF
|
|
||||||
$
|
|
||||||
$ ! Generated information
|
|
||||||
$ VERSION := {- $config{version} -}
|
|
||||||
$ INSTALLTOP := {- $config{INSTALLTOP} -}
|
|
||||||
$ OPENSSLDIR := {- $config{OPENSSLDIR} -}
|
|
||||||
$ POINTER_SIZE := {- $config{pointersize} -}
|
|
||||||
$
|
|
||||||
$ ! Make sure that INSTALLTOP and OPENSSLDIR become something one
|
|
||||||
$ ! can build concealed logical names on
|
|
||||||
$ INSTALLTOP_ = F$PARSE("A.;",INSTALLTOP,,,"NO_CONCEAL") -
|
|
||||||
- ".][000000" - "[000000." - "][" - "]A.;" + ".]"
|
|
||||||
$ OPENSSLDIR_ = F$PARSE("A.;",OPENSSLDIR,,,"NO_CONCEAL") -
|
|
||||||
- ".][000000" - "[000000." - "][" - "]A.;" + ".]"
|
|
||||||
$ DEFINE /TRANSLATION=CONCEALED /NOLOG WRK_INSTALLTOP 'INSTALLTOP_'
|
|
||||||
$ DEFINE /TRANSLATION=CONCEALED /NOLOG WRK_OPENSSLDIR 'OPENSSLDIR_'
|
|
||||||
$
|
|
||||||
$ ! Check that things are in place, and specifically, the stuff
|
|
||||||
$ ! belonging to this architecture
|
|
||||||
$ IF F$SEARCH("WRK_INSTALLTOP:[000000]INCLUDE.DIR;1") .EQS. "" -
|
|
||||||
.OR. F$SEARCH("WRK_INSTALLTOP:[000000]LIB.DIR;1") .EQS. "" -
|
|
||||||
.OR. F$SEARCH("WRK_INSTALLTOP:[000000]EXE.DIR;1") .EQS. "" -
|
|
||||||
.OR. F$SEARCH("WRK_INSTALLTOP:[LIB]''arch'.DIR;1") .EQS. "" -
|
|
||||||
.OR. F$SEARCH("WRK_INSTALLTOP:[EXE]''arch'.DIR;1") .EQS. "" -
|
|
||||||
.OR. F$SEARCH("WRK_OPENSSLDIR:[000000]openssl.cnf") .EQS. ""
|
|
||||||
$ THEN
|
|
||||||
$ WRITE SYS$ERROR "''INSTALLTOP' doesn't look like an OpenSSL installation for ''arch'"
|
|
||||||
$ status = %x00018292 ! RMS$_FNF, file not found
|
|
||||||
$ GOTO bailout
|
|
||||||
$ ENDIF
|
|
||||||
$
|
|
||||||
$ ! Abbrevs
|
|
||||||
$ DEFT := DEFINE /TRANSLATION=CONCEALED /NOLOG 'P1'
|
|
||||||
$ DEF := DEFINE /NOLOG 'P1'
|
|
||||||
$ v = VERSION - "." - "."
|
|
||||||
$
|
|
||||||
$ DEFT OSSL$INSTROOT'v' 'INSTALLTOP_'
|
|
||||||
$ DEFT OSSL$INCLUDE'v' OSSL$INSTROOT:[INCLUDE.]
|
|
||||||
$ DEF OSSL$LIB'v' OSSL$INSTROOT:[LIB.'arch']
|
|
||||||
$ DEF OSSL$SHARE'v' OSSL$INSTROOT:[LIB.'arch']
|
|
||||||
$ DEF OSSL$ENGINES'v' OSSL$INSTROOT:[ENGINES.'arch']
|
|
||||||
$ DEF OSSL$EXE'v' OSSL$INSTROOT:[EXE.'arch']
|
|
||||||
$ {- output_off() if $disabled{shared} -}
|
|
||||||
$ {- join("\n\$ ", map { "DEF $_'v' OSSL\$SHARE:$_" } map { $unified_info{sharednames}->{$_} || () } @{$unified_info{libraries}}) -}
|
|
||||||
$ {- output_on() -}
|
|
||||||
$ IF P2 .NES. "NOALIASES"
|
|
||||||
$ THEN
|
|
||||||
$ DEF OSSL$INSTROOT OSSL$INSTROOT'v'
|
|
||||||
$ DEF OSSL$INCLUDE OSSL$INCLUDE'v'
|
|
||||||
$ DEF OSSL$LIB OSSL$LIB'v'
|
|
||||||
$ DEF OSSL$SHARE OSSL$SHARE'v'
|
|
||||||
$ DEF OSSL$ENGINES OSSL$ENGINES'v'
|
|
||||||
$ DEF OSSL$EXE OSSL$EXE'v'
|
|
||||||
$ DEF OPENSSL OSSL$INCLUDE:[OPENSSL]
|
|
||||||
$ {- output_off() if $disabled{shared} -}
|
|
||||||
$ {- join("\n\$ ", map { "DEF $_ $_'v'" } map { $unified_info{sharednames}->{$_} || () } @{$unified_info{libraries}}) -}
|
|
||||||
$ {- output_on() -}
|
|
||||||
$ ENDIF
|
|
||||||
$
|
|
||||||
$ DEFT OSSL$DATAROOT 'OPENSSLDIR_'
|
|
||||||
$ DEF OSSL$CERTS OSSL$DATAROOT:[CERTS]
|
|
||||||
$ DEF OSSL$PRIVATE OSSL$DATAROOT:[PRIVATE]
|
|
||||||
$
|
|
||||||
$ bailout:
|
|
||||||
$ DEASSIGN WRK_INSTALLTOP
|
|
||||||
$
|
|
||||||
$ EXIT 'status'
|
|
||||||
@@ -1,12 +1,38 @@
|
|||||||
$ ! OpenSSL utilities
|
$!
|
||||||
$ !
|
$! APPS.COM
|
||||||
$
|
$! Written By: Robert Byer
|
||||||
$ OPENSSL :== $OSSL$EXE:OPENSSL
|
$! Vice-President
|
||||||
$
|
$! A-Com Computing, Inc.
|
||||||
$ IF F$SYMBOL(PERL) .EQS. "STRING"
|
$! byer@mail.all-net.net
|
||||||
$ THEN
|
$!
|
||||||
$ OSSLCA :== 'PERL' OSSL$EXE:CA.pl
|
$!
|
||||||
$ OSSLREHASH :== 'PERL' OSSL$EXE:c_rehash.pl
|
$! Slightly modified by Richard Levitte <richard@levitte.org>
|
||||||
$ ELSE
|
$!
|
||||||
$ WRITE SYS$ERROR "NOTE: no perl => no OSSLCA or OSSLREHASH"
|
$ OPENSSL :== $SSLEXE:OPENSSL
|
||||||
$ ENDIF
|
$ VERIFY :== $SSLEXE:OPENSSL VERIFY
|
||||||
|
$ ASN1PARSE:== $SSLEXE:OPENSSL ASN1PARS
|
||||||
|
$ REQ :== $SSLEXE:OPENSSL REQ
|
||||||
|
$ DGST :== $SSLEXE:OPENSSL DGST
|
||||||
|
$ DH :== $SSLEXE:OPENSSL DH
|
||||||
|
$ ENC :== $SSLEXE:OPENSSL ENC
|
||||||
|
$ GENDH :== $SSLEXE:OPENSSL GENDH
|
||||||
|
$ ERRSTR :== $SSLEXE:OPENSSL ERRSTR
|
||||||
|
$ CA :== $SSLEXE:OPENSSL CA
|
||||||
|
$ CRL :== $SSLEXE:OPENSSL CRL
|
||||||
|
$ RSA :== $SSLEXE:OPENSSL RSA
|
||||||
|
$ DSA :== $SSLEXE:OPENSSL DSA
|
||||||
|
$ DSAPARAM :== $SSLEXE:OPENSSL DSAPARAM
|
||||||
|
$ X509 :== $SSLEXE:OPENSSL X509
|
||||||
|
$ GENRSA :== $SSLEXE:OPENSSL GENRSA
|
||||||
|
$ GENDSA :== $SSLEXE:OPENSSL GENDSA
|
||||||
|
$ S_SERVER :== $SSLEXE:OPENSSL S_SERVER
|
||||||
|
$ S_CLIENT :== $SSLEXE:OPENSSL S_CLIENT
|
||||||
|
$ SPEED :== $SSLEXE:OPENSSL SPEED
|
||||||
|
$ S_TIME :== $SSLEXE:OPENSSL S_TIME
|
||||||
|
$ VERSION :== $SSLEXE:OPENSSL VERSION
|
||||||
|
$ PKCS7 :== $SSLEXE:OPENSSL PKCS7
|
||||||
|
$ CRL2PKCS7:== $SSLEXE:OPENSSL CRL2P7
|
||||||
|
$ SESS_ID :== $SSLEXE:OPENSSL SESS_ID
|
||||||
|
$ CIPHERS :== $SSLEXE:OPENSSL CIPHERS
|
||||||
|
$ NSEQ :== $SSLEXE:OPENSSL NSEQ
|
||||||
|
$ PKCS12 :== $SSLEXE:OPENSSL PKCS12
|
||||||
|
|||||||
1
VMS/socketshr_shr.opt
Normal file
1
VMS/socketshr_shr.opt
Normal file
@@ -0,0 +1 @@
|
|||||||
|
socketshr/share
|
||||||
8
VMS/ssl$syshutdown.com
Normal file
8
VMS/ssl$syshutdown.com
Normal file
@@ -0,0 +1,8 @@
|
|||||||
|
$!
|
||||||
|
$! SSL$SYSHUTDOWN.COM - This command procedure is used for site specific SSL
|
||||||
|
$! shutdown tasks. Anything setup in SSL$SYSTARTUP.COM
|
||||||
|
$! should be cleaned up in this command procedure.
|
||||||
|
$!
|
||||||
|
$ DEASSIGN/SYSTEM/EXEC RANDFILE
|
||||||
|
$ DEASSIGN/SYSTEM/EXEC SSL$RANDFILE
|
||||||
|
$!
|
||||||
7
VMS/ssl$systartup.com
Normal file
7
VMS/ssl$systartup.com
Normal file
@@ -0,0 +1,7 @@
|
|||||||
|
$!
|
||||||
|
$!
|
||||||
|
$! Add logical to aid random number generators. -- http://www.free.lp.se/openssl/docs/openssl3.html#ss3.1
|
||||||
|
$!
|
||||||
|
$ DEFINE/SYSTEM/EXEC RANDFILE SSL$ROOT:[PRIVATE]RANDFILE.;
|
||||||
|
$ DEFINE/SYSTEM/EXEC SSL$RANDFILE SSL$ROOT:[PRIVATE]RANDFILE.;
|
||||||
|
$!
|
||||||
76
VMS/ssl$utils.com
Normal file
76
VMS/ssl$utils.com
Normal file
@@ -0,0 +1,76 @@
|
|||||||
|
$!
|
||||||
|
$! APPS.COM
|
||||||
|
$! Written By: Robert Byer
|
||||||
|
$! Vice-President
|
||||||
|
$! A-Com Computing, Inc.
|
||||||
|
$! byer@mail.all-net.net
|
||||||
|
$!
|
||||||
|
$!
|
||||||
|
$! Slightly modified by Richard Levitte <richard@levitte.org>
|
||||||
|
$!
|
||||||
|
$ IF P1 .NES. "" THEN GOTO 'P1
|
||||||
|
$!
|
||||||
|
$DEFINE:
|
||||||
|
$!
|
||||||
|
$ OPENSSL :== $SSL$EXE:OPENSSL
|
||||||
|
$ VERIFY :== $SSL$EXE:OPENSSL VERIFY
|
||||||
|
$ ASN1PARSE:== $SSL$EXE:OPENSSL ASN1PARS
|
||||||
|
$ REQ :== $SSL$EXE:OPENSSL REQ
|
||||||
|
$ DGST :== $SSL$EXE:OPENSSL DGST
|
||||||
|
$ DH :== $SSL$EXE:OPENSSL DH
|
||||||
|
$ ENC :== $SSL$EXE:OPENSSL ENC
|
||||||
|
$ GENDH :== $SSL$EXE:OPENSSL GENDH
|
||||||
|
$ ERRSTR :== $SSL$EXE:OPENSSL ERRSTR
|
||||||
|
$ CA :== $SSL$EXE:OPENSSL CA
|
||||||
|
$ CRL :== $SSL$EXE:OPENSSL CRL
|
||||||
|
$ RSA :== $SSL$EXE:OPENSSL RSA
|
||||||
|
$ DSA :== $SSL$EXE:OPENSSL DSA
|
||||||
|
$ DSAPARAM :== $SSL$EXE:OPENSSL DSAPARAM
|
||||||
|
$ X509 :== $SSL$EXE:OPENSSL X509
|
||||||
|
$ GENRSA :== $SSL$EXE:OPENSSL GENRSA
|
||||||
|
$ GENDSA :== $SSL$EXE:OPENSSL GENDSA
|
||||||
|
$ S_SERVER :== $SSL$EXE:OPENSSL S_SERVER
|
||||||
|
$ S_CLIENT :== $SSL$EXE:OPENSSL S_CLIENT
|
||||||
|
$ SPEED :== $SSL$EXE:OPENSSL SPEED
|
||||||
|
$ S_TIME :== $SSL$EXE:OPENSSL S_TIME
|
||||||
|
$ VERSION :== $SSL$EXE:OPENSSL VERSION
|
||||||
|
$ PKCS7 :== $SSL$EXE:OPENSSL PKCS7
|
||||||
|
$ CRL2PKCS7:== $SSL$EXE:OPENSSL CRL2P7
|
||||||
|
$ SESS_ID :== $SSL$EXE:OPENSSL SESS_ID
|
||||||
|
$ CIPHERS :== $SSL$EXE:OPENSSL CIPHERS
|
||||||
|
$ NSEQ :== $SSL$EXE:OPENSSL NSEQ
|
||||||
|
$ PKCS12 :== $SSL$EXE:OPENSSL PKCS12
|
||||||
|
$!
|
||||||
|
$EXIT
|
||||||
|
$!
|
||||||
|
$REMOVE:
|
||||||
|
$ DELETE/SYMBOL/GLOBAL OPENSSL
|
||||||
|
$ DELETE/SYMBOL/GLOBAL VERIFY
|
||||||
|
$ DELETE/SYMBOL/GLOBAL ASN1PARSE
|
||||||
|
$ DELETE/SYMBOL/GLOBAL REQ
|
||||||
|
$ DELETE/SYMBOL/GLOBAL DGST
|
||||||
|
$ DELETE/SYMBOL/GLOBAL DH
|
||||||
|
$ DELETE/SYMBOL/GLOBAL ENC
|
||||||
|
$ DELETE/SYMBOL/GLOBAL GENDH
|
||||||
|
$ DELETE/SYMBOL/GLOBAL ERRSTR
|
||||||
|
$ DELETE/SYMBOL/GLOBAL CA
|
||||||
|
$ DELETE/SYMBOL/GLOBAL CRL
|
||||||
|
$ DELETE/SYMBOL/GLOBAL RSA
|
||||||
|
$ DELETE/SYMBOL/GLOBAL DSA
|
||||||
|
$ DELETE/SYMBOL/GLOBAL DSAPARAM
|
||||||
|
$ DELETE/SYMBOL/GLOBAL X509
|
||||||
|
$ DELETE/SYMBOL/GLOBAL GENRSA
|
||||||
|
$ DELETE/SYMBOL/GLOBAL GENDSA
|
||||||
|
$ DELETE/SYMBOL/GLOBAL S_SERVER
|
||||||
|
$ DELETE/SYMBOL/GLOBAL S_CLIENT
|
||||||
|
$ DELETE/SYMBOL/GLOBAL SPEED
|
||||||
|
$ DELETE/SYMBOL/GLOBAL S_TIME
|
||||||
|
$ DELETE/SYMBOL/GLOBAL VERSION
|
||||||
|
$ DELETE/SYMBOL/GLOBAL PKCS7
|
||||||
|
$ DELETE/SYMBOL/GLOBAL CRL2PKCS7
|
||||||
|
$ DELETE/SYMBOL/GLOBAL SESS_ID
|
||||||
|
$ DELETE/SYMBOL/GLOBAL CIPHERS
|
||||||
|
$ DELETE/SYMBOL/GLOBAL NSEQ
|
||||||
|
$ DELETE/SYMBOL/GLOBAL PKCS12
|
||||||
|
$!
|
||||||
|
$EXIT
|
||||||
25
VMS/ssl010.release_notes
Normal file
25
VMS/ssl010.release_notes
Normal file
@@ -0,0 +1,25 @@
|
|||||||
|
|
||||||
|
Compaq SSL for OpenVMS Alpha
|
||||||
|
|
||||||
|
Field Test Release Notes
|
||||||
|
|
||||||
|
February 2002
|
||||||
|
|
||||||
|
Based on OpenSSL 0.9.6B
|
||||||
|
|
||||||
|
Compaq SSL T1.0 for OpenVMS Alpha
|
||||||
|
CPQ-AXPVMS-SSL-T0100--1.PCSI-DCX-AXPEXE
|
||||||
|
|
||||||
|
----------------------------------------------
|
||||||
|
|
||||||
|
Compaq is pleased to provide you with the first release of Compaq
|
||||||
|
SSL for OpenVMS Alpha. Compaq SSL (Secure Sockets Layer)
|
||||||
|
is based on the 0.9.6B release from the Open Group. See
|
||||||
|
http://www.openssl.org for more information about OpenSSL.
|
||||||
|
|
||||||
|
Documentation for this kit, including installation and configuration
|
||||||
|
information, release notes, a programming tutorial and API reference,
|
||||||
|
is included in "Open Source Security for OpenVMS Alpha
|
||||||
|
Volume 2: SSL" in HTML, PDF, and PostScript format. This document
|
||||||
|
is included on the OpenVMS field test documentation CD-ROM.
|
||||||
|
|
||||||
1
VMS/tcpip_shr_decc.opt
Normal file
1
VMS/tcpip_shr_decc.opt
Normal file
@@ -0,0 +1 @@
|
|||||||
|
sys$share:tcpip$ipc_shr.exe/share
|
||||||
Some files were not shown because too many files have changed in this diff Show More
Reference in New Issue
Block a user