| author | Jacob Varughese <jacob.varughese@oracle.com> |
| Wed, 11 Nov 2015 11:24:50 -0800 | |
| changeset 5079 | 5d18f62e9f8a |
| parent 3648 | 29c40c98aad3 |
| child 5828 | 5009deba8bc0 |
| permissions | -rw-r--r-- |
|
3648
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
1 |
Patch origin: in-house |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
2 |
Patch status: Solaris-specific; not suitable for upstream |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
3 |
|
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
4 |
Will build SSL FIPS version of mod_ssl. Note that modules/ssl-fips-140 |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
5 |
need to be copied from modules/ssl before it can be applied. |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
6 |
It also makes sure that both mod_ssl versions contains right RPATH. |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
7 |
|
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
8 |
--- modules/ssl/config.m4 |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
9 |
+++ modules/ssl/config.m4 |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
10 |
@@ -44,6 +44,7 @@ |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
11 |
# structure, so ask libtool to hide everything else: |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
12 |
APR_ADDTO(MOD_SSL_LDADD, [-export-symbols-regex ssl_module]) |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
13 |
fi |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
14 |
+ APR_ADDTO(MOD_LDFLAGS, [-R/lib/openssl/default/64]) |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
15 |
else |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
16 |
enable_ssl=no |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
17 |
fi |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
18 |
--- modules/ssl-fips-140/config.m4 |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
19 |
+++ modules/ssl-fips-140/config.m4 |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
20 |
@@ -14,7 +14,7 @@ |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
21 |
dnl limitations under the License. |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
22 |
|
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
23 |
dnl # start of module specific part |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
24 |
-APACHE_MODPATH_INIT(ssl) |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
25 |
+APACHE_MODPATH_INIT(ssl-fips-140) |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
26 |
|
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
27 |
dnl # list of module object files |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
28 |
ssl_objs="dnl |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
29 |
@@ -36,7 +36,7 @@ |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
30 |
ssl_util_ocsp.lo dnl |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
31 |
" |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
32 |
dnl # hook module into the Autoconf mechanism (--enable-ssl option) |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
33 |
-APACHE_MODULE(ssl, [SSL/TLS support (mod_ssl)], $ssl_objs, , most, [ |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
34 |
+APACHE_MODULE(ssl_fips, [SSL/TLS support (mod_ssl)], $ssl_objs, , most, [ |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
35 |
APACHE_CHECK_OPENSSL |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
36 |
if test "$ac_cv_openssl" = "yes" ; then |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
37 |
if test "x$enable_ssl" = "xshared"; then |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
38 |
@@ -44,14 +44,13 @@ |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
39 |
# structure, so ask libtool to hide everything else: |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
40 |
APR_ADDTO(MOD_SSL_LDADD, [-export-symbols-regex ssl_module]) |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
41 |
fi |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
42 |
+ APR_ADDTO(MOD_CFLAGS, [-I/usr/include/openssl/fips-140]) |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
43 |
+ APR_ADDTO(MOD_LDFLAGS, [-R/lib/openssl/fips-140/64]) |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
44 |
else |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
45 |
enable_ssl=no |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
46 |
fi |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
47 |
]) |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
48 |
|
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
49 |
-# Ensure that other modules can pick up mod_ssl.h |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
50 |
-APR_ADDTO(INCLUDES, [-I\$(top_srcdir)/$modpath_current]) |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
51 |
- |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
52 |
dnl # end of module specific part |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
53 |
APACHE_MODPATH_FINISH |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
54 |
|
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
55 |
--- acinclude.m4 |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
56 |
+++ acinclude.m4 |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
57 |
@@ -591,6 +591,12 @@ |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
58 |
]) |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
59 |
if test "x$ac_cv_openssl" = "xyes"; then |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
60 |
AC_DEFINE(HAVE_OPENSSL, 1, [Define if OpenSSL is available]) |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
61 |
+ |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
62 |
+ APR_ADDTO(MOD_LDFLAGS, [$ap_openssl_libs]) |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
63 |
+ APR_ADDTO(LIBS, [$ap_openssl_libs]) |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
64 |
+ APR_SETVAR(ab_LDFLAGS, [$MOD_LDFLAGS]) |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
65 |
+ APACHE_SUBST(ab_CFLAGS) |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
66 |
+ APACHE_SUBST(ab_LDFLAGS) |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
67 |
fi |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
68 |
]) |
|
29c40c98aad3
PSARC/2015/007 Apache FIPS 140-2 mod_ssl module
Petr Sumbera <petr.sumbera@oracle.com>
parents:
diff
changeset
|
69 |