fips/Makefile

   1 #
   2 # OpenSSL/crypto/Makefile
   3 #
   4
   5 DIR=            fips
   6 TOP=            ..
   7 CC=             cc
   8 INCLUDE=        -I. -I$(TOP) -I../include
   9 # INCLUDES targets sudbirs!
  10 INCLUDES=       -I.. -I../.. -I../../include
  11 CFLAG=          -g
  12 MAKEDEPPROG=    makedepend
  13 MAKEDEPEND=     $(TOP)/util/domd $(TOP) -MD $(MAKEDEPPROG)
  14 MAKEFILE=       Makefile
  15 RM=             rm -f
  16 AR=             ar r
  17 ARD=            ar d
  18 TEST=           fips_test_suite.c
  19 FIPS_TVDIR=     testvectors
  20 FIPS_TVOK=      $$HOME/fips/tv.ok
  21
  22 FIPSCANLOC=     $(FIPSLIBDIR)fipscanister.o
  23
  24 RECURSIVE_MAKE= [ -n "$(FDIRS)" ] && for i in $(FDIRS) ; do \
  25                     (cd $$i && echo "making $$target in $(DIR)/$$i..." && \
  26                     $(MAKE) -e TOP=../.. DIR=$$i INCLUDES='${INCLUDES}' $$target ) || exit 1; \
  27                 done;
  28
  29 PEX_LIBS=
  30 EX_LIBS=
  31
  32 CFLAGS= $(INCLUDE) $(CFLAG) -DHMAC_EXT=\"$${HMAC_EXT:-sha1}\"
  33 ASFLAGS= $(INCLUDE) $(ASFLAG)
  34 AFLAGS=$(ASFLAGS)
  35
  36 LIBS=
  37
  38 FDIRS=sha rand des aes dsa rsa dh hmac utl
  39
  40 GENERAL=Makefile README fips-lib.com install.com
  41
  42 LIB= $(TOP)/libcrypto.a
  43 SHARED_LIB= $(FIPSCANLIB)$(SHLIB_EXT)
  44 LIBSRC=fips.c
  45 LIBOBJ=fips.o
  46
  47 FIPS_OBJ_LISTS=sha/lib hmac/lib rand/lib des/lib aes/lib dsa/lib rsa/lib \
  48                 dh/lib utl/lib
  49
  50 SRC= $(LIBSRC)
  51
  52 EXHEADER=fips.h
  53 HEADER=$(EXHEADER) fips_utl.h fips_locl.h
  54 EXE=fipsld
  55
  56 ALL=    $(GENERAL) $(SRC) $(HEADER)
  57
  58 top:
  59         @(cd ..; $(MAKE) DIRS=$(DIR) all)
  60
  61 testapps:
  62         @if [ -z "$(THIS)" ]; then $(MAKE) -f $(TOP)/Makefile reflect THIS=$@; fi
  63
  64 all:
  65         @if [ -z "$(FIPSLIBDIR)" ]; then \
  66                 $(MAKE) -e subdirs lib fips_premain_dso$(EXE_EXT); \
  67         else  \
  68                 $(MAKE) -e lib fips_premain_dso$(EXE_EXT) fips_standalone_sha1$(EXE_EXT); \
  69         fi
  70
  71 # Idea behind fipscanister.o is to "seize" the sequestered code between
  72 # known symbols for fingerprinting purposes, which would be commonly
  73 # done with ld -r start.o ... end.o. The latter however presents a minor
  74 # challenge on multi-ABI platforms. As just implied, we'd rather use ld,
  75 # but the trouble is that we don't generally know how ABI-selection
  76 # compiler flag is translated to corresponding linker flag. All compiler
  77 # drivers seem to recognize -r flag and pass it down to linker, but some
  78 # of them, including gcc, erroneously add -lc, as well as run-time
  79 # components, such as crt1.o and alike. Fortunately among those vendor
  80 # compilers which were observed to misinterpret -r flag multi-ABI ones
  81 # are equipped with smart linkers, which don't require any ABI-selection
  82 # flag and simply assume that all objects are of the same type as first
  83 # one in command line. So the idea is to identify gcc and deficient
  84 # vendor compiler drivers...
  85
  86 fipscanister.o: fips_start.o $(LIBOBJ) $(FIPS_OBJ_LISTS) fips_end.o
  87         FIPS_ASM=""; \
  88         list="$(BN_ASM)"; for i in $$list; do FIPS_ASM="$$FIPS_ASM ../crypto/bn/$$i" ; done; \
  89         list="$(AES_ENC)"; for i in $$list; do FIPS_ASM="$$FIPS_ASM ../crypto/aes/$$i" ; done; \
  90         list="$(DES_ENC)"; for i in $$list; do FIPS_ASM="$$FIPS_ASM ../crypto/des/$$i" ; done; \
  91         list="$(SHA1_ASM_OBJ)"; for i in $$list; do FIPS_ASM="$$FIPS_ASM ../crypto/sha/$$i" ; done; \
  92         list="$(MODES_ASM_OBJ)"; for i in $$list; do FIPS_ASM="$$FIPS_ASM ../crypto/modes/$$i" ; done; \
  93         if [ -n "$(CPUID_OBJ)" ]; then \
  94                 CPUID=../crypto/$(CPUID_OBJ) ; \
  95         else \
  96                 CPUID="" ; \
  97         fi ; \
  98         objs="fips_start.o $(LIBOBJ) $(FIPS_EX_OBJ) $$CPUID $$FIPS_ASM"; \
  99         for i in $(FIPS_OBJ_LISTS); do \
 100                 dir=`dirname $$i`; script="s|^|$$dir/|;s| | $$dir/|g"; \
 101                 objs="$$objs `sed "$$script" $$i`"; \
 102         done; \
 103         objs="$$objs fips_end.o" ; \
 104         os="`(uname -s) 2>/dev/null`"; cflags="$(CFLAGS)"; \
 105         [ "$$os" = "AIX" ] && cflags="$$cflags -Wl,-bnoobjreorder"; \
 106         if [ -n "${FIPS_SITE_LD}" ]; then \
 107                 set -x; ${FIPS_SITE_LD} -r -o $@ $$objs; \
 108         elif $(CC) -dumpversion >/dev/null 2>&1; then \
 109                 set -x; $(CC) $$cflags -r -nostdlib -o $@ $$objs ; \
 110                 echo OBJS $$objs >/tmp/objs.txt ; \
 111         else case "$$os" in \
 112                 HP-UX|OSF1|SunOS) set -x; /usr/ccs/bin/ld -r -o $@ $$objs ;; \
 113                 *) set -x; $(CC) $$cflags -r -o $@ $$objs ;; \
 114         esac fi
 115         ./fips_standalone_sha1$(EXE_EXT) fipscanister.o > fipscanister.o.sha1
 116
 117 # If another exception is immediately required, assign approprite
 118 # site-specific ld command to FIPS_SITE_LD environment variable.
 119
 120 fips_start.o: fips_canister.c
 121         $(CC) $(CFLAGS) -DFIPS_START -c -o $@ fips_canister.c
 122 fips_end.o: fips_canister.c
 123         $(CC) $(CFLAGS) -DFIPS_END -c -o $@ fips_canister.c
 124 fips_premain_dso$(EXE_EXT): fips_premain.c
 125         $(CC) $(CFLAGS) -DFINGERPRINT_PREMAIN_DSO_LOAD -o $@ fips_premain.c \
 126                 $(FIPSLIBDIR)fipscanister.o ../libcrypto.a $(EX_LIBS)
 127 # this is executed only when linking with external fipscanister.o
 128 fips_standalone_sha1$(EXE_EXT): sha/fips_standalone_sha1.c
 129         if [ -z "$(HOSTCC)" ] ; then \
 130                 $(CC) $(CFLAGS) -DFIPSCANISTER_O -o $@ sha/fips_standalone_sha1.c $(FIPSLIBDIR)fipscanister.o $(EX_LIBS) ; \
 131         else \
 132                 $(HOSTCC) $(HOSTCFLAGS) -o $ $@ -I../include -I../crypto sha/fips_standalone_sha1.c ../crypto/sha/sha1dgst.c ; \
 133         fi
 134
 135 subdirs:
 136         @target=all; $(RECURSIVE_MAKE)
 137
 138 files:
 139         $(PERL) $(TOP)/util/files.pl Makefile >> $(TOP)/MINFO
 140         @target=files; $(RECURSIVE_MAKE)
 141
 142 links:
 143         @$(PERL) $(TOP)/util/mklink.pl ../include/openssl $(EXHEADER)
 144         @$(PERL) $(TOP)/util/mklink.pl ../test $(TEST)
 145         @target=links; $(RECURSIVE_MAKE)
 146
 147 # lib: and $(LIB): are splitted to avoid end-less loop
 148 lib:    $(LIB)
 149         if [ "$(FIPSCANISTERINTERNAL)" = "n" -a -n "$(FIPSCANLOC)" ]; then $(AR) ../$(FIPSCANLIB).a $(FIPSCANLOC); fi
 150         @touch lib
 151
 152 $(LIB): $(FIPSLIBDIR)fipscanister.o
 153         $(AR) $(LIB) $(FIPSLIBDIR)fipscanister.o
 154         $(RANLIB) $(LIB) || echo Never mind.
 155
 156 $(FIPSCANLIB):  $(FIPSCANLOC)
 157         $(AR) ../$(FIPSCANLIB).a $(FIPSCANLOC)
 158         if [ "$(FIPSCANLIB)" = "libfips" ]; then \
 159                 $(AR) $(LIB) $(FIPSCANLOC) ; \
 160                 $(RANLIB) $(LIB) || echo Never Mind. ; \
 161         fi
 162         $(RANLIB) ../$(FIPSCANLIB).a || echo Never mind.
 163         @touch lib
 164
 165 shared: lib subdirs fips_premain_dso$(EXE_EXT)
 166
 167 libs:
 168         @target=lib; $(RECURSIVE_MAKE)
 169
 170 fips_test: top
 171         @target=fips_test; $(RECURSIVE_MAKE)
 172
 173 fips_test_diff:
 174         @if diff -b -B -I '^\#' -cr -X fips-nodiff.txt $(FIPS_TVDIR) $(FIPS_TVOK) ; then \
 175                 echo "FIPS diff OK" ; \
 176         else \
 177                 echo "***FIPS DIFF ERROR***" ; exit 1 ; \
 178         fi
 179
 180
 181 install:
 182         @[ -n "$(INSTALLTOP)" ] # should be set by top Makefile...
 183         @headerlist="$(EXHEADER)"; for i in $$headerlist ;\
 184         do \
 185         (cp $$i $(INSTALL_PREFIX)$(INSTALLTOP)/include/openssl/$$i; \
 186         chmod 644 $(INSTALL_PREFIX)$(INSTALLTOP)/include/openssl/$$i ); \
 187         done;
 188         @target=install; $(RECURSIVE_MAKE)
 189         for i in $(EXE) ; \
 190         do \
 191                 echo "installing $$i"; \
 192                 cp $$i $(INSTALL_PREFIX)$(INSTALLTOP)/bin/$$i.new; \
 193                 chmod 755 $(INSTALL_PREFIX)$(INSTALLTOP)/bin/$$i.new; \
 194                 mv -f $(INSTALL_PREFIX)$(INSTALLTOP)/bin/$$i.new $(INSTALL_PREFIX)$(INSTALLTOP)/bin/$$i; \
 195         done
 196         cp -p -f $(FIPSLIBDIR)fipscanister.o $(FIPSLIBDIR)fipscanister.o.sha1 \
 197                 $(FIPSLIBDIR)fips_premain.c $(FIPSLIBDIR)fips_premain.c.sha1 \
 198                 $(INSTALL_PREFIX)$(INSTALLTOP)/$(LIBDIR)/; \
 199         chmod 0444 $(INSTALL_PREFIX)$(INSTALLTOP)/$(LIBDIR)/fips*
 200
 201 lint:
 202         @target=lint; $(RECURSIVE_MAKE)
 203
 204 depend:
 205         @[ -z "$(THIS)" ] || $(MAKEDEPEND) -- $(CFLAG) $(INCLUDE) $(DEPFLAG) -- $(PROGS) $(LIBSRC)
 206         @[ -z "$(THIS)" ] || (set -e; target=depend; $(RECURSIVE_MAKE) )
 207         @if [ -z "$(THIS)" ]; then $(MAKE) -f $(TOP)/Makefile reflect THIS=$@; fi
 208
 209 clean:
 210         rm -f fipscanister.o.sha1 fips_premain_dso$(EXE_EXT) fips_standalone_sha1$(EXE_EXT) \
 211                 *.s *.o */*.o *.obj lib tags core .pure .nfs* *.old *.bak fluff
 212         @target=clean; $(RECURSIVE_MAKE)
 213
 214 dclean:
 215         $(PERL) -pe 'if (/^# DO NOT DELETE THIS LINE/) {print; exit(0);}' $(MAKEFILE) >Makefile.new
 216         mv -f Makefile.new $(MAKEFILE)
 217         @target=dclean; $(RECURSIVE_MAKE)
 218
 219 # DO NOT DELETE THIS LINE -- make depend depends on it.
 220
 221 fips.o: ../include/openssl/asn1.h ../include/openssl/bio.h
 222 fips.o: ../include/openssl/crypto.h ../include/openssl/des.h
 223 fips.o: ../include/openssl/des_old.h ../include/openssl/e_os2.h
 224 fips.o: ../include/openssl/err.h ../include/openssl/evp.h
 225 fips.o: ../include/openssl/fips.h ../include/openssl/fips_rand.h
 226 fips.o: ../include/openssl/hmac.h ../include/openssl/lhash.h
 227 fips.o: ../include/openssl/obj_mac.h ../include/openssl/objects.h
 228 fips.o: ../include/openssl/opensslconf.h ../include/openssl/opensslv.h
 229 fips.o: ../include/openssl/ossl_typ.h ../include/openssl/rand.h
 230 fips.o: ../include/openssl/rsa.h ../include/openssl/safestack.h
 231 fips.o: ../include/openssl/stack.h ../include/openssl/symhacks.h
 232 fips.o: ../include/openssl/ui.h ../include/openssl/ui_compat.h fips.c
 233 fips.o: fips_locl.h