equal
deleted
inserted
replaced
16 # fields enclosed by brackets "[]" replaced with your own identifying |
16 # fields enclosed by brackets "[]" replaced with your own identifying |
17 # information: Portions Copyright [yyyy] [name of copyright owner] |
17 # information: Portions Copyright [yyyy] [name of copyright owner] |
18 # |
18 # |
19 # CDDL HEADER END |
19 # CDDL HEADER END |
20 # |
20 # |
21 # Copyright (c) 2011, 2013, Oracle and/or its affiliates. All rights reserved. |
21 # Copyright (c) 2011, 2014, Oracle and/or its affiliates. All rights reserved. |
22 # |
22 # |
23 |
23 |
24 # |
24 # |
25 # This component is not to be installed. It is used to build FIPS-140 |
25 # This component is not to be installed. It is used to build FIPS-140 |
26 # certified OpenSSL libraries. |
26 # certified OpenSSL libraries. |
111 |
111 |
112 # This is a recommended set of commands to verify that the FIPS-140 mode can be |
112 # This is a recommended set of commands to verify that the FIPS-140 mode can be |
113 # used and that we used the correct tarball. |
113 # used and that we used the correct tarball. |
114 $(BUILD_DIR)/%/.verified: $(BUILD_DIR)/%/.installed |
114 $(BUILD_DIR)/%/.verified: $(BUILD_DIR)/%/.installed |
115 (printf x; \ |
115 (printf x; \ |
116 $(ENV) - LD_LIBRARY_PATH=$(@D) \ |
116 $(ENV) - OPENSSL_FIPS=1 LD_LIBRARY_PATH=$(@D) \ |
117 openssl sha1 -hmac $(OPENSSL_FIPS_HMAC_KEY) \ |
117 /lib/openssl/fips-140/openssl sha1 -hmac $(OPENSSL_FIPS_HMAC_KEY) \ |
118 $(COMPONENT_ARCHIVE)) | \ |
118 $(COMPONENT_ARCHIVE)) | \ |
119 $(NAWK) '{ if ($$2 != "$(OPENSSL_FIPS_HMAC)") exit 1 }' |
119 $(NAWK) '{ if ($$2 != "$(OPENSSL_FIPS_HMAC)") exit 1 }' |
120 @echo Basic FIPS-140 mode verification passed. |
120 @echo Basic FIPS-140 mode verification passed. |
121 $(TOUCH) [email protected] |
121 $(TOUCH) [email protected] |
122 |
122 |