Auto configure for fips is from restricted tarball.

Remove more unnecessary files form fips tarball.
openssl · Apr 10, 2011 · c105c96 · c105c96
1 parent 6ceb1e8
commit c105c96
Show file tree

Hide file tree

Showing 3 changed files with 35 additions and 3 deletions.
diff --git a/Configure b/Configure
@@ -693,6 +693,16 @@ my $default_ranlib;
 my $perl;
 my $fips=0;
 
+# If ssl directory missing assume truncated FIPS tarball
+if (! -d ssl)
+	{
+	print STDERR "Auto Configuring fipsonly\n";
+	$fips = 1;
+	$nofipscanistercheck = 1;
+	$fipslibdir="";
+	$fipscanisterinternal="y";
+	$fipscanisteronly = 1;
+	}
 
 # All of the following is disabled by default (RC5 was enabled before 0.9.8):
 

diff --git a/Makefile.fips b/Makefile.fips
@@ -487,7 +487,7 @@ openssl.pc: Makefile
 	    echo 'Libs: -L$${libdir} -lssl -lcrypto $(EX_LIBS)'; \
 	    echo 'Cflags: -I$${includedir} $(KRB5_INCLUDES)' ) > openssl.pc
 
-Makefile: Makefile.org Configure config
+Makefile: Makefile.fips Configure config
 	@echo "Makefile is older than Makefile.org, Configure or config."
 	@echo "Reconfigure the source tree (via './config' or 'perl Configure'), please."
 	@false

diff --git a/util/fipsdist.pl b/util/fipsdist.pl
@@ -21,11 +21,29 @@
 
 $cdirs{perlasm} = 1;
 
+my %keep = 
+	(
+	"Makefile.fips" => 1,
+	"Makefile.shared" => 1,
+	"README.FIPS" => 1,
+	"e_os.h" => 1,
+	"e_os2.h" => 1,
+	"Configure" => 1,
+	"config" => 1,
+	);
+
 while (<STDIN>)
 	{
 	chomp;
-	# Skip directories but leave top level files.
-	next unless (/^(fips\/|crypto|util|test|include|ms)/ || (!/\// && -f $_));
+	# Keep top level files in list
+	if (!/\// && -f $_)
+		{
+		next unless exists $keep{$_};
+		}
+	else
+		{
+		next unless (/^(fips\/|crypto|util|test|include|ms)/);
+		}
 	if (/^crypto\/([^\/]+)/)
 		{
 		# Skip unused directories under crypto/
@@ -37,6 +55,10 @@
 			next if !/(\w+\.c)$/ || !exists $tarobjs{$1};
 			}
 		}
+	if (/^test\//)
+		{
+		next unless /Makefile/ || /dummytest.c/;
+		}
 	print "$_\n";
 	}
 exit 1;