380 lines
13 KiB
Makefile
380 lines
13 KiB
Makefile
#
|
|
# OpenSSL/fips-1.0/Makefile
|
|
#
|
|
|
|
DIR= fips-1.0
|
|
TOP= ..
|
|
CC= cc
|
|
INCLUDE= -I. -I$(TOP) -I../include
|
|
INCLUDES= -I.. -I../.. -I../../include
|
|
CFLAG= -g
|
|
INSTALL_PREFIX=
|
|
OPENSSLDIR= /usr/local/ssl
|
|
INSTALLTOP= /usr/local/ssl
|
|
MAKEFILE= Makefile
|
|
MAKEDEPPROG= makedepend
|
|
MAKEDEPEND= $(TOP)/util/domd $(TOP) -MD $(MAKEDEPPROG)
|
|
PERL= perl
|
|
RM= rm -f
|
|
AR= ar r
|
|
ARD= ar d
|
|
|
|
FIPSCANLOC= $(FIPSLIBDIR)fipscanister.o
|
|
|
|
PEX_LIBS=
|
|
EX_LIBS=
|
|
|
|
CFLAGS= $(INCLUDE) $(CFLAG) -DHMAC_EXT=\"$${HMAC_EXT:-sha1}\"
|
|
|
|
|
|
LIBS=
|
|
|
|
FDIRS=sha rand des aes dsa rsa dh hmac
|
|
|
|
GENERAL=Makefile README fips-lib.com install.com
|
|
|
|
LIB= $(TOP)/libcrypto.a
|
|
SHARED_LIB= libcrypto$(SHLIB_EXT)
|
|
LIBSRC=fips.c fips_err_wrapper.c
|
|
LIBOBJ=fips.o fips_err_wrapper.o
|
|
|
|
FIPS_OBJ_LISTS=sha/lib hmac/lib rand/lib des/lib aes/lib dsa/lib rsa/lib dh/lib
|
|
|
|
SRC= $(LIBSRC)
|
|
|
|
EXHEADER=fips.h
|
|
HEADER=$(EXHEADER) fips_err.h
|
|
EXE=fipsld
|
|
TEST=fips_test_suite.c
|
|
|
|
ALL= $(GENERAL) $(SRC) $(HEADER)
|
|
|
|
top:
|
|
@(cd ..; $(MAKE) DIRS=$(DIR) all)
|
|
|
|
all:
|
|
@if egrep 'define OPENSSL_FIPS' $(TOP)/include/openssl/opensslconf.h > /dev/null; then \
|
|
$(MAKE) -e subdirs lib shared; \
|
|
fi
|
|
|
|
# Idea behind fipscanister.o is to "seize" the sequestered code between
|
|
# known symbols for fingerprinting purposes, which would be commonly
|
|
# done with ld -r start.o ... end.o. The latter however presents a minor
|
|
# challenge on multi-ABI platforms. As just implied, we'd rather use ld,
|
|
# but the trouble is that we don't generally know how ABI-selection
|
|
# compiler flag is translated to corresponding linker flag. All compiler
|
|
# drivers seem to recognize -r flag and pass it down to linker, but some
|
|
# of them, including gcc, erroneously add -lc, as well as run-time
|
|
# components, such as crt1.o and alike. Fortunately among those vendor
|
|
# compilers which were observed to misinterpret -r flag multi-ABI ones
|
|
# are equipped with smart linkers, which don't require any ABI-selection
|
|
# flag and simply assume that all objects are of the same type as first
|
|
# one in command line. So the idea is to identify gcc and deficient
|
|
# vendor compiler drivers...
|
|
|
|
fipscanister.o: fips_start.o $(LIBOBJ) $(FIPS_OBJ_LISTS) fips_end.o
|
|
@FIPS_BN_ASM=`for i in $(BN_ASM) ; do echo -n "../crypto/bn/$$i " ; done`; \
|
|
objs="fips_start.o $(LIBOBJ) $(FIPS_EX_OBJ) $$FIPS_BN_ASM"; \
|
|
for i in $(FIPS_OBJ_LISTS); do \
|
|
dir=`dirname $$i`; script="s|^|$$dir/|;s| | $$dir/|g"; \
|
|
objs="$$objs `sed "$$script" $$i`"; \
|
|
done; \
|
|
objs="$$objs fips_end.o" ; \
|
|
if [ -n "${FIPS_SITE_LD}" ]; then \
|
|
set -x; ${FIPS_SITE_LD} -r -o $@ $$objs; \
|
|
elif $(CC) -dumpversion >/dev/null 2>&1; then \
|
|
set -x; $(CC) $(CFLAGS) -r -nostdlib -o $@ $$objs ; \
|
|
else case "`(uname -s) 2>/dev/null`" in \
|
|
HP-UX|OSF1|SunOS) set -x; /usr/ccs/bin/ld -r -o $@ $$objs ;; \
|
|
*) set -x; $(CC) $(CFLAGS) -r -o $@ $$objs ;; \
|
|
esac fi
|
|
sha/fips_standalone_sha1 fipscanister.o > fipscanister.o.sha1
|
|
|
|
# If another exception is immediately required, assign approprite
|
|
# site-specific ld command to FIPS_SITE_LD environment variable.
|
|
|
|
fips_start.o: fips_canister.c
|
|
$(CC) $(CFLAGS) -DFIPS_START -c -o $@ fips_canister.c
|
|
fips_end.o: fips_canister.c
|
|
$(CC) $(CFLAGS) -DFIPS_END -c -o $@ fips_canister.c
|
|
fips_premain_dso$(EXE_EXT): fips_premain.c
|
|
$(CC) $(CFLAGS) -DFINGERPRINT_PREMAIN_DSO_LOAD -o $@ fips_premain.c \
|
|
../libcrypto.a $(EX_LIBS)
|
|
|
|
subdirs:
|
|
@for i in $(FDIRS) ;\
|
|
do \
|
|
(cd $$i && echo "making all in fips/$$i..." && \
|
|
$(MAKE) CC='$(CC)' INCLUDES='${INCLUDES}' CFLAG='${CFLAG}' INSTALLTOP='${INSTALLTOP}' PEX_LIBS='${PEX_LIBS}' EX_LIBS='${EX_LIBS}' BN_ASM='${BN_ASM}' DES_ENC='${DES_ENC}' FIPS_DES_ENC='${FIPS_DES_ENC}' SHA1_ASM_OBJ='${SHA1_ASM_OBJ}' FIPS_SHA1_ASM_OBJ='${FIPS_SHA1_ASM_OBJ}' MD5_ASM_OBJ='${MD5_ASM_OBJ}' RMD160_ASM_OBJ='${RMD160_ASM_OBJ}' BF_ENC='${BF_ENC}' CAST_ENC='${CAST_ENC}' RC4_ENC='${RC4_ENC}' RC5_ENC='${RC5_ENC}' AR='${AR}' PROCESSOR='${PROCESSOR}' PERL='${PERL}' RANLIB='${RANLIB}' all ) || exit 1; \
|
|
done;
|
|
|
|
sub_target:
|
|
@for i in $(FDIRS) ;\
|
|
do \
|
|
(cd $$i && echo "making $(TARGET) in fips/$$i..." && \
|
|
$(MAKE) CC='$(CC)' INCLUDES='${INCLUDES}' CFLAG='${CFLAG}' INSTALLTOP='${INSTALLTOP}' PEX_LIBS='${PEX_LIBS}' EX_LIBS='${EX_LIBS}' BN_ASM='${BN_ASM}' DES_ENC='${DES_ENC}' FIPS_DES_ENC='${FIPS_DES_ENC}' SHA1_ASM_OBJ='${SHA1_ASM_OBJ}' FIPS_SHA1_ASM_OBJ='${FIPS_SHA1_ASM_OBJ}' MD5_ASM_OBJ='${MD5_ASM_OBJ}' RMD160_ASM_OBJ='${RMD160_ASM_OBJ}' BF_ENC='${BF_ENC}' CAST_ENC='${CAST_ENC}' RC4_ENC='${RC4_ENC}' RC5_ENC='${RC5_ENC}' AR='${AR}' PROCESSOR='${PROCESSOR}' PERL='${PERL}' RANLIB='${RANLIB}' $(TARGET) ) || exit 1; \
|
|
done;
|
|
|
|
files:
|
|
$(PERL) $(TOP)/util/files.pl Makefile >> $(TOP)/MINFO
|
|
@for i in $(FDIRS) ;\
|
|
do \
|
|
(cd $$i && echo "making 'files' in fips/$$i..." && \
|
|
$(MAKE) PERL='${PERL}' files ); \
|
|
done;
|
|
|
|
links:
|
|
@$(PERL) $(TOP)/util/mklink.pl $(TOP)/include/openssl $(EXHEADER)
|
|
@$(PERL) $(TOP)/util/mklink.pl $(TOP)/test $(TEST)
|
|
@for i in $(FDIRS); do \
|
|
(cd $$i && echo "making links in fips/$$i..." && \
|
|
$(MAKE) CC='$(CC)' INCLUDES='${INCLUDES}' CFLAG='${CFLAG}' INSTALLTOP='${INSTALLTOP}' PEX_LIBS='${PEX_LIBS}' EX_LIBS='${EX_LIBS}' BN_ASM='${BN_ASM}' DES_ENC='${DES_ENC}' FIPS_DES_ENC='${FIPS_DES_ENC}' SHA1_ASM_OBJ='${SHA1_ASM_OBJ}' FIPS_SHA1_ASM_OBJ='${FIPS_SHA1_ASM_OBJ}' MD5_ASM_OBJ='${MD5_ASM_OBJ}' RMD160_ASM_OBJ='${RMD160_ASM_OBJ}' BF_ENC='${BF_ENC}' CAST_ENC='${CAST_ENC}' RC4_ENC='${RC4_ENC}' RC5_ENC='${RC5_ENC}' AR='${AR}' PERL='${PERL}' links ); \
|
|
done;
|
|
|
|
lib: $(FIPSCANLOC) delexobj
|
|
$(AR) $(LIB) $(FIPSCANLOC)
|
|
$(RANLIB) $(LIB) || echo Never mind.
|
|
@touch lib
|
|
|
|
shared: fips_premain_dso$(EXE_EXT)
|
|
if [ -n "$(SHARED_LIBS)" ]; then \
|
|
(cd ..; $(MAKE) FIPSLD_CC=$(CC) FIPSLD=fips-1.0/fipsld $(SHARED_LIB)); \
|
|
fi
|
|
|
|
libs:
|
|
@for i in $(FDIRS) ;\
|
|
do \
|
|
(cd $$i && echo "making libs in fips/$$i..." && \
|
|
$(MAKE) CC='$(CC)' CFLAG='${CFLAG}' INSTALL_PREFIX='${INSTALL_PREFIX}' INSTALLTOP='${INSTALLTOP}' PEX_LIBS='${PEX_LIBS}' EX_LIBS='${EX_LIBS}' AR='${AR}' lib ); \
|
|
done;
|
|
|
|
tests:
|
|
(cd ..; make DIRS=test)
|
|
|
|
fips_test: top tests
|
|
@for i in dsa sha aes des hmac rand rsa; \
|
|
do \
|
|
(cd $$i && echo "making fips_test in fips/$$i..." && $(MAKE) fips_test) \
|
|
done;
|
|
|
|
install:
|
|
@headerlist="$(EXHEADER)"; for i in $$headerlist ;\
|
|
do \
|
|
(cp $$i $(INSTALL_PREFIX)$(INSTALLTOP)/include/openssl/$$i; \
|
|
chmod 644 $(INSTALL_PREFIX)$(INSTALLTOP)/include/openssl/$$i ); \
|
|
done;
|
|
@for i in $(FDIRS) ;\
|
|
do \
|
|
(cd $$i && echo "making install in fips/$$i..." && \
|
|
$(MAKE) CC='$(CC)' CFLAG='${CFLAG}' INSTALL_PREFIX='${INSTALL_PREFIX}' INSTALLTOP='${INSTALLTOP}' PEX_LIBS='${PEX_LIBS}' EX_LIBS='${EX_LIBS}' install ); \
|
|
done;
|
|
@for i in $(EXE) ; \
|
|
do \
|
|
echo "installing $$i"; \
|
|
cp $$i $(INSTALL_PREFIX)$(INSTALLTOP)/bin/$$i.new; \
|
|
chmod 755 $(INSTALL_PREFIX)$(INSTALLTOP)/bin/$$i.new; \
|
|
mv -f $(INSTALL_PREFIX)$(INSTALLTOP)/bin/$$i.new $(INSTALL_PREFIX)$(INSTALLTOP)/bin/$$i; \
|
|
done
|
|
@cp -p -f fipscanister.o fipscanister.o.sha1 fips_premain.c \
|
|
fips_premain.c.sha1 \
|
|
$(INSTALL_PREFIX)$(INSTALLTOP)/lib/; \
|
|
chmod 0444 $(INSTALL_PREFIX)$(INSTALLTOP)/lib/fips*
|
|
|
|
lint:
|
|
@for i in $(FDIRS) ;\
|
|
do \
|
|
(cd $$i && echo "making lint in fips/$$i..." && \
|
|
$(MAKE) CC='$(CC)' CFLAG='${CFLAG}' INSTALLTOP='${INSTALLTOP}' PEX_LIBS='${PEX_LIBS}' EX_LIBS='${EX_LIBS}' lint ); \
|
|
done;
|
|
|
|
depend:
|
|
if [ ! -f buildinf.h ]; then touch buildinf.h; fi # fake buildinf.h if it does not exist
|
|
$(MAKEDEPEND) -- $(CFLAG) $(INCLUDE) $(DEPFLAG) -- $(SRC)
|
|
if [ ! -s buildinf.h ]; then rm buildinf.h; fi
|
|
@for i in $(FDIRS) ;\
|
|
do \
|
|
(cd $$i && echo "making depend in fips/$$i..." && \
|
|
$(MAKE) MAKEFILE='${MAKEFILE}' INCLUDES='${INCLUDES}' CFLAG='${CFLAG}' DEPFLAG='${DEPFLAG}' MAKEDEPPROG='${MAKEDEPPROG}' KRB5_INCLUDES='${KRB5_INCLUDES}' PERL='${PERL}' depend ); \
|
|
done;
|
|
|
|
clean:
|
|
rm -f buildinf.h *.o fipscanister.o.sha1 *.obj fips_premain_dso$(EXE_EXT) lib tags core .pure .nfs* *.old *.bak fluff
|
|
@for i in $(FDIRS) ;\
|
|
do \
|
|
(cd $$i && echo "making clean in fips/$$i..." && \
|
|
$(MAKE) CC='$(CC)' CFLAG='${CFLAG}' INSTALLTOP='${INSTALLTOP}' PEX_LIBS='${PEX_LIBS}' EX_LIBS='${EX_LIBS}' clean ); \
|
|
done;
|
|
|
|
dclean:
|
|
$(PERL) -pe 'if (/^# DO NOT DELETE THIS LINE/) {print; exit(0);}' $(MAKEFILE) >Makefile.new
|
|
mv -f Makefile.new $(MAKEFILE)
|
|
@for i in $(FDIRS) ;\
|
|
do \
|
|
(cd $$i && echo "making dclean in fips/$$i..." && \
|
|
$(MAKE) PERL='${PERL}' CC='$(CC)' CFLAG='${CFLAG}' INSTALLTOP='${INSTALLTOP}' PEX_LIBS='${PEX_LIBS}' EX_LIBS='${EX_LIBS}' dclean ); \
|
|
done;
|
|
|
|
delexobj:
|
|
exdel=""; \
|
|
for i in $(FIPS_EX_OBJ) $(BN_ASM);\
|
|
do \
|
|
exdel="$$exdel "`basename $$i`""; \
|
|
done ; \
|
|
$(ARD) $(LIB) $$exdel
|
|
|
|
FIPS_EX_OBJ= ../crypto/aes/aes_cbc.o \
|
|
../crypto/aes/aes_cfb.o \
|
|
../crypto/aes/aes_ecb.o \
|
|
../crypto/aes/aes_ofb.o \
|
|
../crypto/asn1/a_bitstr.o \
|
|
../crypto/asn1/a_bytes.o \
|
|
../crypto/asn1/a_dup.o \
|
|
../crypto/asn1/a_int.o \
|
|
../crypto/asn1/a_object.o \
|
|
../crypto/asn1/asn1_err.o \
|
|
../crypto/asn1/asn1_lib.o \
|
|
../crypto/asn1/a_type.o \
|
|
../crypto/asn1/evp_asn1.o \
|
|
../crypto/asn1/tasn_dec.o \
|
|
../crypto/asn1/tasn_enc.o \
|
|
../crypto/asn1/tasn_fre.o \
|
|
../crypto/asn1/tasn_new.o \
|
|
../crypto/asn1/tasn_typ.o \
|
|
../crypto/asn1/tasn_utl.o \
|
|
../crypto/asn1/t_pkey.o \
|
|
../crypto/asn1/x_algor.o \
|
|
../crypto/asn1/x_bignum.o \
|
|
../crypto/asn1/x_long.o \
|
|
../crypto/asn1/x_sig.o \
|
|
../crypto/bio/bio_err.o \
|
|
../crypto/bio/bio_lib.o \
|
|
../crypto/bio/b_print.o \
|
|
../crypto/bio/bss_file.o \
|
|
../crypto/bn/bn_add.o \
|
|
../crypto/bn/bn_blind.o \
|
|
../crypto/bn/bn_ctx.o \
|
|
../crypto/bn/bn_div.o \
|
|
../crypto/bn/bn_err.o \
|
|
../crypto/bn/bn_exp2.o \
|
|
../crypto/bn/bn_exp.o \
|
|
../crypto/bn/bn_gcd.o \
|
|
../crypto/bn/bn_lib.o \
|
|
../crypto/bn/bn_mod.o \
|
|
../crypto/bn/bn_mont.o \
|
|
../crypto/bn/bn_mul.o \
|
|
../crypto/bn/bn_prime.o \
|
|
../crypto/bn/bn_print.o \
|
|
../crypto/bn/bn_rand.o \
|
|
../crypto/bn/bn_recp.o \
|
|
../crypto/bn/bn_shift.o \
|
|
../crypto/bn/bn_sqr.o \
|
|
../crypto/bn/bn_word.o \
|
|
../crypto/bn/bn_x931p.o \
|
|
../crypto/buffer/buf_err.o \
|
|
../crypto/buffer/buffer.o \
|
|
../crypto/conf/conf_err.o \
|
|
../crypto/cpt_err.o \
|
|
../crypto/cryptlib.o \
|
|
../crypto/des/cfb64ede.o \
|
|
../crypto/des/cfb64enc.o \
|
|
../crypto/des/cfb_enc.o \
|
|
../crypto/des/des_enc.o \
|
|
../crypto/des/ecb3_enc.o \
|
|
../crypto/des/ecb_enc.o \
|
|
../crypto/des/ofb64ede.o \
|
|
../crypto/des/ofb64enc.o \
|
|
../crypto/dh/dh_err.o \
|
|
../crypto/dh/dh_lib.o \
|
|
../crypto/dsa/dsa_asn1.o \
|
|
../crypto/dsa/dsa_err.o \
|
|
../crypto/dsa/dsa_lib.o \
|
|
../crypto/dsa/dsa_sign.o \
|
|
../crypto/dsa/dsa_vrf.o \
|
|
../crypto/dso/dso_err.o \
|
|
../crypto/ec/ec_err.o \
|
|
../crypto/engine/eng_err.o \
|
|
../crypto/engine/eng_init.o \
|
|
../crypto/engine/eng_lib.o \
|
|
../crypto/engine/eng_list.o \
|
|
../crypto/engine/eng_table.o \
|
|
../crypto/engine/tb_cipher.o \
|
|
../crypto/engine/tb_dh.o \
|
|
../crypto/engine/tb_digest.o \
|
|
../crypto/engine/tb_dsa.o \
|
|
../crypto/engine/tb_rand.o \
|
|
../crypto/engine/tb_rsa.o \
|
|
../crypto/err/err_all.o \
|
|
../crypto/err/err.o \
|
|
../crypto/err/err_prn.o \
|
|
../crypto/evp/digest.o \
|
|
../crypto/evp/e_aes.o \
|
|
../crypto/evp/e_des3.o \
|
|
../crypto/evp/e_des.o \
|
|
../crypto/evp/evp_enc.o \
|
|
../crypto/evp/evp_err.o \
|
|
../crypto/evp/evp_lib.o \
|
|
../crypto/evp/m_sha1.o \
|
|
../crypto/evp/p_lib.o \
|
|
../crypto/evp/p_sign.o \
|
|
../crypto/evp/p_verify.o \
|
|
../crypto/ex_data.o \
|
|
../crypto/lhash/lhash.o \
|
|
../crypto/mem_clr.o \
|
|
../crypto/mem_dbg.o \
|
|
../crypto/mem.o \
|
|
../crypto/objects/obj_dat.o \
|
|
../crypto/objects/obj_err.o \
|
|
../crypto/objects/obj_lib.o \
|
|
../crypto/ocsp/ocsp_err.o \
|
|
../crypto/pem/pem_err.o \
|
|
../crypto/pkcs12/pk12err.o \
|
|
../crypto/pkcs7/pkcs7err.o \
|
|
../crypto/rand/md_rand.o \
|
|
../crypto/rand/rand_egd.o \
|
|
../crypto/rand/rand_err.o \
|
|
../crypto/rand/randfile.o \
|
|
../crypto/rand/rand_lib.o \
|
|
../crypto/rand/rand_os2.o \
|
|
../crypto/rand/rand_unix.o \
|
|
../crypto/rand/rand_win.o \
|
|
../crypto/rsa/rsa_err.o \
|
|
../crypto/rsa/rsa_lib.o \
|
|
../crypto/rsa/rsa_none.o \
|
|
../crypto/rsa/rsa_oaep.o \
|
|
../crypto/rsa/rsa_pk1.o \
|
|
../crypto/rsa/rsa_pss.o \
|
|
../crypto/rsa/rsa_sign.o \
|
|
../crypto/rsa/rsa_ssl.o \
|
|
../crypto/rsa/rsa_x931.o \
|
|
../crypto/stack/stack.o \
|
|
../crypto/uid.o \
|
|
../crypto/ui/ui_err.o \
|
|
../crypto/x509v3/v3err.o \
|
|
../crypto/x509v3/v3_hex.o \
|
|
../crypto/x509/x509_err.o
|
|
|
|
# DO NOT DELETE THIS LINE -- make depend depends on it.
|
|
|
|
fips.o: ../include/openssl/aes.h ../include/openssl/asn1.h
|
|
fips.o: ../include/openssl/bio.h ../include/openssl/blowfish.h
|
|
fips.o: ../include/openssl/bn.h ../include/openssl/cast.h
|
|
fips.o: ../include/openssl/crypto.h ../include/openssl/des.h
|
|
fips.o: ../include/openssl/des_old.h ../include/openssl/dh.h
|
|
fips.o: ../include/openssl/dsa.h ../include/openssl/e_os2.h
|
|
fips.o: ../include/openssl/err.h ../include/openssl/evp.h
|
|
fips.o: ../include/openssl/fips.h ../include/openssl/fips_rand.h
|
|
fips.o: ../include/openssl/hmac.h ../include/openssl/idea.h
|
|
fips.o: ../include/openssl/lhash.h ../include/openssl/md2.h
|
|
fips.o: ../include/openssl/md4.h ../include/openssl/md5.h
|
|
fips.o: ../include/openssl/mdc2.h ../include/openssl/obj_mac.h
|
|
fips.o: ../include/openssl/objects.h ../include/openssl/opensslconf.h
|
|
fips.o: ../include/openssl/opensslv.h ../include/openssl/ossl_typ.h
|
|
fips.o: ../include/openssl/rand.h ../include/openssl/rc2.h
|
|
fips.o: ../include/openssl/rc4.h ../include/openssl/rc5.h
|
|
fips.o: ../include/openssl/ripemd.h ../include/openssl/rsa.h
|
|
fips.o: ../include/openssl/safestack.h ../include/openssl/sha.h
|
|
fips.o: ../include/openssl/stack.h ../include/openssl/symhacks.h
|
|
fips.o: ../include/openssl/ui.h ../include/openssl/ui_compat.h fips.c
|
|
fips.o: fips_locl.h
|
|
fips_err_wrapper.o: ../include/openssl/opensslconf.h fips_err_wrapper.c
|