author | Mike Sullivan <Mike.Sullivan@Oracle.COM> |
Wed, 12 Nov 2014 09:56:14 -0800 | |
changeset 2204 | f83e0e3cf2d7 |
parent 2156 | 47340bc31385 |
child 2225 | f064d3d3190d |
permissions | -rw-r--r-- |
1587
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
1 |
# |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
2 |
# CDDL HEADER START |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
3 |
# |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
4 |
# The contents of this file are subject to the terms of the |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
5 |
# Common Development and Distribution License (the "License"). |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
6 |
# You may not use this file except in compliance with the License. |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
7 |
# |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
8 |
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
9 |
# or http://www.opensolaris.org/os/licensing. |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
10 |
# See the License for the specific language governing permissions |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
11 |
# and limitations under the License. |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
12 |
# |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
13 |
# When distributing Covered Code, include this CDDL HEADER in each |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
14 |
# file and include the License file at usr/src/OPENSOLARIS.LICENSE. |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
15 |
# If applicable, add the following below this CDDL HEADER, with the |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
16 |
# fields enclosed by brackets "[]" replaced with your own identifying |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
17 |
# information: Portions Copyright [yyyy] [name of copyright owner] |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
18 |
# |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
19 |
# CDDL HEADER END |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
20 |
# |
1641
2fc479afcf70
18024740 problem in UTILITY/OPENSSL
Misaki Miyashita <Misaki.Miyashita@Oracle.COM>
parents:
1604
diff
changeset
|
21 |
# Copyright (c) 2011, 2014, Oracle and/or its affiliates. All rights reserved. |
1587
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
22 |
# |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
23 |
export PARFAIT_BUILD=no |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
24 |
|
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
25 |
include ../../../make-rules/shared-macros.mk |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
26 |
|
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
27 |
PATH=$(SPRO_VROOT)/bin:/usr/bin:/usr/gnu/bin:/usr/perl5/bin |
2204
f83e0e3cf2d7
20010352 userland should move to parfait 1.5.1
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
2156
diff
changeset
|
28 |
ifeq ($(strip $(PARFAIT_BUILD)),yes) |
f83e0e3cf2d7
20010352 userland should move to parfait 1.5.1
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
2156
diff
changeset
|
29 |
PATH=$(PARFAIT_TOOLS):$(SPRO_VROOT)/bin:/usr/bin:/usr/gnu/bin:/usr/perl5/bin |
f83e0e3cf2d7
20010352 userland should move to parfait 1.5.1
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
2156
diff
changeset
|
30 |
endif |
1587
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
31 |
|
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
32 |
COMPONENT_NAME = openssl-fips-140 |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
33 |
# Note that this is the OpenSSL version that is used to build FIPS-140 certified |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
34 |
# libraries. However, we use the FIPS canister version for the IPS package. |
2156
47340bc31385
19823263 Upgrade OpenSSL to 1.0.1j
Misaki Miyashita <Misaki.Miyashita@Oracle.COM>
parents:
2041
diff
changeset
|
35 |
COMPONENT_VERSION = 1.0.1j |
1641
2fc479afcf70
18024740 problem in UTILITY/OPENSSL
Misaki Miyashita <Misaki.Miyashita@Oracle.COM>
parents:
1604
diff
changeset
|
36 |
IPS_COMPONENT_VERSION = 2.0.6 |
1587
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
37 |
COMPONENT_PROJECT_URL= http://www.openssl.org/ |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
38 |
COMPONENT_SRC_NAME = openssl |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
39 |
COMPONENT_SRC = $(COMPONENT_SRC_NAME)-$(COMPONENT_VERSION) |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
40 |
COMPONENT_ARCHIVE = $(COMPONENT_SRC).tar.gz |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
41 |
COMPONENT_ARCHIVE_HASH= \ |
2156
47340bc31385
19823263 Upgrade OpenSSL to 1.0.1j
Misaki Miyashita <Misaki.Miyashita@Oracle.COM>
parents:
2041
diff
changeset
|
42 |
sha256:1b60ca8789ba6f03e8ef20da2293b8dc131c39d83814e775069f02d26354edf3 |
1587
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
43 |
COMPONENT_ARCHIVE_URL = $(COMPONENT_PROJECT_URL)source/$(COMPONENT_ARCHIVE) |
1969
ac6c35e6af98
19005730 COMPONENT_BUGDB needs to be updated in components/openssl/*/Makefile
jenny.yung@oracle.com <jenny.yung@oracle.com>
parents:
1948
diff
changeset
|
44 |
COMPONENT_BUGDB= library/openssl |
1587
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
45 |
|
2156
47340bc31385
19823263 Upgrade OpenSSL to 1.0.1j
Misaki Miyashita <Misaki.Miyashita@Oracle.COM>
parents:
2041
diff
changeset
|
46 |
TPNO= 19492 |
1948
2d1537e7942d
18978320 Userland components should specify TPNOs in Makefiles instead of pkg manifests
John Beck <John.Beck@Oracle.COM>
parents:
1938
diff
changeset
|
47 |
|
2037
3559e1505b2b
19314980 Update the OpenSSL FIPS-140 module version to 2.0.6
Misaki Miyashita <Misaki.Miyashita@Oracle.COM>
parents:
1969
diff
changeset
|
48 |
# OpenSSL FIPS directory |
1596
59869c4257d0
PSARC/2013/383 OpenSSL FIPS 140-2 version update
Misaki Miyashita <Misaki.Miyashita@Oracle.COM>
parents:
1587
diff
changeset
|
49 |
OPENSSL_FIPS_DIR = $(COMPONENT_DIR)/../openssl-fips |
59869c4257d0
PSARC/2013/383 OpenSSL FIPS 140-2 version update
Misaki Miyashita <Misaki.Miyashita@Oracle.COM>
parents:
1587
diff
changeset
|
50 |
|
1587
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
51 |
# Note that the SPARC patch above does not fit this pattern. That is intentional |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
52 |
# and a reason why we can add it to the EXTRA_PATCHES variable so that we use it |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
53 |
# only on SPARC. |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
54 |
PATCH_PATTERN = [0-9][0-9]*.patch |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
55 |
|
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
56 |
include $(WS_TOP)/make-rules/prep.mk |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
57 |
include $(WS_TOP)/make-rules/configure.mk |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
58 |
include $(WS_TOP)/make-rules/ips.mk |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
59 |
include $(WS_TOP)/make-rules/lint-libraries.mk |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
60 |
|
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
61 |
# OpenSSL does not use autoconf but its own configure system. |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
62 |
CONFIGURE_SCRIPT = $(SOURCE_DIR)/Configure |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
63 |
|
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
64 |
# Used in the configure options below. |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
65 |
PKCS11_LIB32 = /usr/lib/libpkcs11.so.1 |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
66 |
PKCS11_LIB64 = /usr/lib/64/libpkcs11.so.1 |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
67 |
ENGINESDIR_32 = /lib/openssl/engines |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
68 |
ENGINESDIR_64 = /lib/openssl/engines/64 |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
69 |
|
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
70 |
# Built openssl/openssl-fips component is used when building FIPS-140 libraries. |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
71 |
# What we do here follows the OpenSSL FIPS-140 User Guide instructions. |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
72 |
FIPS_BUILD_DIR_32 = $(shell echo $(BUILD_DIR_32) | \ |
1596
59869c4257d0
PSARC/2013/383 OpenSSL FIPS 140-2 version update
Misaki Miyashita <Misaki.Miyashita@Oracle.COM>
parents:
1587
diff
changeset
|
73 |
sed -e 's/openssl-1.0.1-fips-140/openssl-fips/g' ) |
1587
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
74 |
FIPS_BUILD_DIR_64 = $(shell echo $(BUILD_DIR_64) | \ |
1596
59869c4257d0
PSARC/2013/383 OpenSSL FIPS 140-2 version update
Misaki Miyashita <Misaki.Miyashita@Oracle.COM>
parents:
1587
diff
changeset
|
75 |
sed -e 's/openssl-1.0.1-fips-140/openssl-fips/g' ) |
1587
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
76 |
|
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
77 |
CONFIGURE_OPTIONS = -DSOLARIS_OPENSSL -DNO_WINDOWS_BRAINDEATH |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
78 |
CONFIGURE_OPTIONS += --openssldir=/etc/openssl |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
79 |
CONFIGURE_OPTIONS += --prefix=/usr |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
80 |
# We use OpenSSL install code for installing only manual pages and we do that |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
81 |
# for 32-bit version only. |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
82 |
CONFIGURE_OPTIONS += --install_prefix=$(PROTO_DIR) |
1596
59869c4257d0
PSARC/2013/383 OpenSSL FIPS 140-2 version update
Misaki Miyashita <Misaki.Miyashita@Oracle.COM>
parents:
1587
diff
changeset
|
83 |
CONFIGURE_OPTIONS += no-ec2m |
1587
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
84 |
CONFIGURE_OPTIONS += no-rc3 |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
85 |
CONFIGURE_OPTIONS += no-rc5 |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
86 |
CONFIGURE_OPTIONS += no-mdc2 |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
87 |
CONFIGURE_OPTIONS += no-idea |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
88 |
CONFIGURE_OPTIONS += no-hw_4758_cca |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
89 |
CONFIGURE_OPTIONS += no-hw_aep |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
90 |
CONFIGURE_OPTIONS += no-hw_atalla |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
91 |
CONFIGURE_OPTIONS += no-hw_chil |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
92 |
CONFIGURE_OPTIONS += no-hw_gmp |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
93 |
CONFIGURE_OPTIONS += no-hw_ncipher |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
94 |
CONFIGURE_OPTIONS += no-hw_nuron |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
95 |
CONFIGURE_OPTIONS += no-hw_padlock |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
96 |
CONFIGURE_OPTIONS += no-hw_sureware |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
97 |
CONFIGURE_OPTIONS += no-hw_ubsec |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
98 |
CONFIGURE_OPTIONS += no-hw_cswift |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
99 |
CONFIGURE_OPTIONS += threads |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
100 |
CONFIGURE_OPTIONS += shared |
1596
59869c4257d0
PSARC/2013/383 OpenSSL FIPS 140-2 version update
Misaki Miyashita <Misaki.Miyashita@Oracle.COM>
parents:
1587
diff
changeset
|
101 |
CONFIGURE_OPTIONS += fips --with-fipslibdir="$(FIPS_BUILD_DIR_$(BITS))/fips/" |
59869c4257d0
PSARC/2013/383 OpenSSL FIPS 140-2 version update
Misaki Miyashita <Misaki.Miyashita@Oracle.COM>
parents:
1587
diff
changeset
|
102 |
CONFIGURE_OPTIONS += --with-fipsdir="$(BUILD_DIR_$(BITS))" |
59869c4257d0
PSARC/2013/383 OpenSSL FIPS 140-2 version update
Misaki Miyashita <Misaki.Miyashita@Oracle.COM>
parents:
1587
diff
changeset
|
103 |
|
59869c4257d0
PSARC/2013/383 OpenSSL FIPS 140-2 version update
Misaki Miyashita <Misaki.Miyashita@Oracle.COM>
parents:
1587
diff
changeset
|
104 |
# MD2 is not enabled by default in OpensSSL but some software we have in |
59869c4257d0
PSARC/2013/383 OpenSSL FIPS 140-2 version update
Misaki Miyashita <Misaki.Miyashita@Oracle.COM>
parents:
1587
diff
changeset
|
105 |
# Userland needs it. One example is nmap. |
59869c4257d0
PSARC/2013/383 OpenSSL FIPS 140-2 version update
Misaki Miyashita <Misaki.Miyashita@Oracle.COM>
parents:
1587
diff
changeset
|
106 |
CONFIGURE_OPTIONS += enable-md2 |
59869c4257d0
PSARC/2013/383 OpenSSL FIPS 140-2 version update
Misaki Miyashita <Misaki.Miyashita@Oracle.COM>
parents:
1587
diff
changeset
|
107 |
CONFIGURE_OPTIONS += no-seed |
1587
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
108 |
|
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
109 |
# We define our own compiler and linker option sets for Solaris. See Configure |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
110 |
# for more information. |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
111 |
CONFIGURE_OPTIONS32_i386 = solaris-x86-cc-sunw |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
112 |
CONFIGURE_OPTIONS32_sparc = solaris-sparcv8-cc-sunw |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
113 |
CONFIGURE_OPTIONS64_i386 = solaris64-x86_64-cc-sunw |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
114 |
CONFIGURE_OPTIONS64_sparc = solaris64-sparcv9-cc-sunw |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
115 |
|
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
116 |
# Some additional options needed for our engines. |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
117 |
CONFIGURE_OPTIONS += --pk11-libname=$(PKCS11_LIB$(BITS)) |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
118 |
CONFIGURE_OPTIONS += --enginesdir=$(ENGINESDIR_$(BITS)) |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
119 |
CONFIGURE_OPTIONS += $(CONFIGURE_OPTIONS$(BITS)_$(MACH)) |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
120 |
|
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
121 |
# OpenSSL has its own configure system which must be run from the fully |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
122 |
# populated source code directory. However, the Userland configuration phase is |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
123 |
# run from the build directory. The easiest way to workaround it is to copy all |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
124 |
# the source files there. |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
125 |
COMPONENT_PRE_CONFIGURE_ACTION = \ |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
126 |
( $(CLONEY) $(SOURCE_DIR) $(BUILD_DIR)/$(MACH$(BITS)); ) |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
127 |
|
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
128 |
# We deliver only one opensslconf.h file which must be suitable for both 32 and |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
129 |
# 64 bits. Depending on the configuration option, OpenSSL's Configure script |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
130 |
# creates opensslconf.h for either 32 or 64 bits. A patch makes the resulting |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
131 |
# header file usable on both architectures. The patch was generated against the |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
132 |
# opensslconf.h version from the 32 bit build. |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
133 |
COMPONENT_POST_CONFIGURE_ACTION = \ |
1596
59869c4257d0
PSARC/2013/383 OpenSSL FIPS 140-2 version update
Misaki Miyashita <Misaki.Miyashita@Oracle.COM>
parents:
1587
diff
changeset
|
134 |
( [ $(BITS) -eq 32 ] && $(GPATCH) -p1 $(@D)/crypto/opensslconf.h \ |
1587
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
135 |
patches-post-config/opensslconf.patch; cd $(@D); $(MAKE) depend; ) |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
136 |
|
1692
dce38b815f7d
PSARC/2013/383 OpenSSL FIPS 140-2 version update
Misaki Miyashita <Misaki.Miyashita@Oracle.COM>
parents:
1641
diff
changeset
|
137 |
# Enable ASLR for this component |
dce38b815f7d
PSARC/2013/383 OpenSSL FIPS 140-2 version update
Misaki Miyashita <Misaki.Miyashita@Oracle.COM>
parents:
1641
diff
changeset
|
138 |
ASLR_MODE = $(ASLR_ENABLE) |
1587
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
139 |
|
1596
59869c4257d0
PSARC/2013/383 OpenSSL FIPS 140-2 version update
Misaki Miyashita <Misaki.Miyashita@Oracle.COM>
parents:
1587
diff
changeset
|
140 |
# We must make sure that openssl-fips component is built before this 1.0.1 |
1587
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
141 |
# component since in order to build FIPS-140 certified libraries, the canister |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
142 |
# is needed. Note that we must unset BITS that would override the same variable |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
143 |
# used in openssl-fips' Makefile, and we would end up up with both canisters |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
144 |
# built in 64 (or 32) bits. |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
145 |
$(COMPONENT_DIR)/../openssl-fips/build/$(MACH32)/.installed \ |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
146 |
$(COMPONENT_DIR)/../openssl-fips/build/$(MACH64)/.installed: |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
147 |
( unset BITS; \ |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
148 |
$(MAKE) -C $(COMPONENT_DIR)/../openssl-fips install; ) |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
149 |
|
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
150 |
# download, clean, and clobber should all propogate to the fips bits |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
151 |
download clobber clean:: |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
152 |
(cd ../openssl-fips ; $(GMAKE) $@) |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
153 |
|
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
154 |
# We do not ship our engines as patches since it would be more difficult to |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
155 |
# update the files which have been under continuous development. We rather copy |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
156 |
# the files to the right directories and let OpenSSL makefiles build it. |
1596
59869c4257d0
PSARC/2013/383 OpenSSL FIPS 140-2 version update
Misaki Miyashita <Misaki.Miyashita@Oracle.COM>
parents:
1587
diff
changeset
|
157 |
# We also copy some FIPS specific header files needed to build FIPS version |
2037
3559e1505b2b
19314980 Update the OpenSSL FIPS-140 module version to 2.0.6
Misaki Miyashita <Misaki.Miyashita@Oracle.COM>
parents:
1969
diff
changeset
|
158 |
# of OpenSSL from FIPS module. |
1587
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
159 |
COMPONENT_PRE_BUILD_ACTION = \ |
1604
b6e3e1ed52a5
17777796 Change the pkcs11 engine into a dynamic engine for FIPS version
jenny.yung@oracle.com <jenny.yung@oracle.com>
parents:
1596
diff
changeset
|
160 |
( $(LN) -fs $(COMPONENT_DIR)/engines/pkcs11/* $(@D)/engines; \ |
1596
59869c4257d0
PSARC/2013/383 OpenSSL FIPS 140-2 version update
Misaki Miyashita <Misaki.Miyashita@Oracle.COM>
parents:
1587
diff
changeset
|
161 |
$(MKDIR) $(@D)/bin; \ |
2037
3559e1505b2b
19314980 Update the OpenSSL FIPS-140 module version to 2.0.6
Misaki Miyashita <Misaki.Miyashita@Oracle.COM>
parents:
1969
diff
changeset
|
162 |
$(LN) -fs $(OPENSSL_FIPS_DIR)/openssl-fips-ecp-$(IPS_COMPONENT_VERSION)/fips/fips.h $(@D)/include/openssl; \ |
3559e1505b2b
19314980 Update the OpenSSL FIPS-140 module version to 2.0.6
Misaki Miyashita <Misaki.Miyashita@Oracle.COM>
parents:
1969
diff
changeset
|
163 |
$(LN) -fs $(OPENSSL_FIPS_DIR)/openssl-fips-ecp-$(IPS_COMPONENT_VERSION)/fips/fipssyms.h $(@D)/include/openssl; \ |
3559e1505b2b
19314980 Update the OpenSSL FIPS-140 module version to 2.0.6
Misaki Miyashita <Misaki.Miyashita@Oracle.COM>
parents:
1969
diff
changeset
|
164 |
$(LN) -fs $(OPENSSL_FIPS_DIR)/openssl-fips-ecp-$(IPS_COMPONENT_VERSION)/fips/rand/fips_rand.h $(@D)/include/openssl; \ |
3559e1505b2b
19314980 Update the OpenSSL FIPS-140 module version to 2.0.6
Misaki Miyashita <Misaki.Miyashita@Oracle.COM>
parents:
1969
diff
changeset
|
165 |
$(LN) -fs $(OPENSSL_FIPS_DIR)/openssl-fips-ecp-$(IPS_COMPONENT_VERSION)/fips/fipsld $(@D)/bin/; \ |
1596
59869c4257d0
PSARC/2013/383 OpenSSL FIPS 140-2 version update
Misaki Miyashita <Misaki.Miyashita@Oracle.COM>
parents:
1587
diff
changeset
|
166 |
$(LN) -fs $(OPENSSL_FIPS_DIR)/build/$(MACH$(BITS))/fips/fips_standalone_sha1 $(@D)/bin/; \ |
59869c4257d0
PSARC/2013/383 OpenSSL FIPS 140-2 version update
Misaki Miyashita <Misaki.Miyashita@Oracle.COM>
parents:
1587
diff
changeset
|
167 |
$(LN) -fs $(COMPONENT_DIR)/build/$(MACH$(BITS))/fips_premain_dso $(@D)/bin/;) |
1587
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
168 |
|
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
169 |
# OpenSSL does not install into <dir>/$(MACH64) for 64-bit install so no such |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
170 |
# directory is created and Userland install code would fail when installing lint |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
171 |
# libraries. |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
172 |
COMPONENT_PRE_INSTALL_ACTION = ( $(MKDIR) $(PROTO_DIR)/usr/lib/$(MACH64); ) |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
173 |
|
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
174 |
$(SOURCE_DIR)/.prep: $(COMPONENT_DIR)/../openssl-fips/build/$(MACH32)/.installed \ |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
175 |
$(COMPONENT_DIR)/../openssl-fips/build/$(MACH64)/.installed |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
176 |
|
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
177 |
build: $(BUILD_32_and_64) |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
178 |
|
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
179 |
# We follow what we do for install in openssl/openssl-1.0.0 component. Please |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
180 |
# see the comment in Makefile in there for more information. |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
181 |
install: $(INSTALL_32_and_64) |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
182 |
|
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
183 |
# We need to modify the default lint flags to include patched opensslconf.h from |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
184 |
# the build directory. If we do not do that, lint will complain about md2.h |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
185 |
# which is not enabled by default but it is in our opensslconf.h. |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
186 |
LFLAGS_32 := -I$(BUILD_DIR_32)/include $(LINT_FLAGS) |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
187 |
LFLAGS_64 := -I$(BUILD_DIR_64)/include $(LINT_FLAGS) |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
188 |
|
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
189 |
# Set modified lint flags for our lint library targets. |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
190 |
$(BUILD_DIR_32)/llib-lcrypto.ln: LINT_FLAGS=$(LFLAGS_32) |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
191 |
$(BUILD_DIR_32)/llib-lssl.ln: LINT_FLAGS=$(LFLAGS_32) |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
192 |
$(BUILD_DIR_64)/llib-lcrypto.ln: LINT_FLAGS=$(LFLAGS_64) |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
193 |
$(BUILD_DIR_64)/llib-lssl.ln: LINT_FLAGS=$(LFLAGS_64) |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
194 |
|
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
195 |
test: $(NO_TESTS) |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
196 |
|
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
197 |
BUILD_PKG_DEPENDENCIES = $(BUILD_TOOLS) |
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
198 |
|
314c74b881bc
backout 15801760 - not yet time
Mike Sullivan <Mike.Sullivan@Oracle.COM>
parents:
diff
changeset
|
199 |
include $(WS_TOP)/make-rules/depend.mk |