Synv ordinals with 1.0.1-stable.
[openssl.git] / util / fipslink.pl
1 #!/usr/bin/perl
2
3 sub check_env
4         {
5         my @ret;
6         foreach (@_)
7                 {
8                 die "Environment variable $_ not defined!\n" unless exists $ENV{$_};
9                 push @ret, $ENV{$_};
10                 }
11         return @ret;
12         }
13
14
15 my ($fips_cc,$fips_cc_args, $fips_link,$fips_target, $fips_libdir, $sha1_exe)
16          = check_env("FIPS_CC", "FIPS_CC_ARGS", "FIPS_LINK", "FIPS_TARGET",
17                 "FIPSLIB_D", "FIPS_SHA1_EXE");
18
19
20
21 if (exists $ENV{"PREMAIN_DSO_EXE"})
22         {
23         $fips_premain_dso = $ENV{"PREMAIN_DSO_EXE"};
24         }
25         else
26         {
27         $fips_premain_dso = "";
28         }
29
30 check_hash($sha1_exe, "fips_premain.c");
31 check_hash($sha1_exe, "fipscanister.lib");
32
33
34 print "Integrity check OK\n";
35
36 print "$fips_cc $fips_cc_args $fips_libdir/fips_premain.c\n";
37 system "$fips_cc $fips_cc_args $fips_libdir/fips_premain.c";
38 die "First stage Compile failure" if $? != 0;
39
40 print "$fips_link @ARGV\n";
41 system "$fips_link @ARGV";
42 die "First stage Link failure" if $? != 0;
43
44
45 print "$fips_premain_dso $fips_target\n";
46 system("$fips_premain_dso $fips_target >$fips_target.sha1");
47 die "Get hash failure" if $? != 0;
48 open my $sha1_res, '<', $fips_target.".sha1" or die "Get hash failure";
49 $fips_hash=<$sha1_res>;
50 close $sha1_res;
51 unlink $fips_target.".sha1";
52 chomp $fips_hash;
53 die "Get hash failure" if $? != 0;
54
55
56 print "$fips_cc -DHMAC_SHA1_SIG=\\\"$fips_hash\\\" $fips_cc_args $fips_libdir/fips_premain.c\n";
57 system "$fips_cc -DHMAC_SHA1_SIG=\\\"$fips_hash\\\" $fips_cc_args $fips_libdir/fips_premain.c";
58 die "Second stage Compile failure" if $? != 0;
59
60
61 print "$fips_link @ARGV\n";
62 system "$fips_link @ARGV";
63 die "Second stage Link failure" if $? != 0;
64
65 sub check_hash
66         {
67         my ($sha1_exe, $filename) = @_;
68         my ($hashfile, $hashval);
69
70         open(IN, "${fips_libdir}/${filename}.sha1") || die "Cannot open file hash file ${fips_libdir}/${filename}.sha1";
71         $hashfile = <IN>;
72         close IN;
73         $hashval = `$sha1_exe ${fips_libdir}/$filename`;
74         chomp $hashfile;
75         chomp $hashval;
76         $hashfile =~ s/^.*=\s+//;
77         $hashval =~ s/^.*=\s+//;
78         die "Invalid hash syntax in file" if (length($hashfile) != 40);
79         die "Invalid hash received for file" if (length($hashval) != 40);
80         die "***HASH VALUE MISMATCH FOR FILE $filename ***" if ($hashval ne $hashfile); 
81         }
82
83