Commit 6b053504 authored by Andy Polyakov's avatar Andy Polyakov
Browse files

Oops! Revert to previous version and [re-]apply diff.

parent daec9a56

Configure

+102 −3
Changes for Configure: 102 added lines, 3 removed lines.
Original line number Diff line number Diff line
@@ -6,7 +6,9 @@ eval 'exec perl -S $0 ${1+"$@"}' 
##



require 5.000;

use strict;

eval 'use strict;';



print STDERR "Warning: perl module strict not found.\n" if ($@);



# see INSTALL for instructions.
@@ -562,6 +564,11 @@ my $prefix=""; 
my $openssldir="";

my $exe_ext="";

my $install_prefix="";

my $fipslibdir="/usr/local/ssl/lib/";

my $nofipscanistercheck=0;

my $fipsdso=0;

my $fipscanisterinternal="n";

my $baseaddr="0xFB00000";

my $no_threads=0;

my $threads=0;

my $no_shared=0; # but "no-shared" is default
@@ -584,6 +591,7 @@ my $rc2 ="crypto/rc2/rc2.h"; 
my $bf	="crypto/bf/bf_locl.h";

my $bn_asm	="bn_asm.o";

my $des_enc="des_enc.o fcrypt_b.o";

my $fips_des_enc="fips_des_enc.o";

my $aes_enc="aes_core.o aes_cbc.o";

my $bf_enc	="bf_enc.o";

my $cast_enc="c_enc.o";
@@ -595,6 +603,7 @@ my $rmd160_obj=""; 
my $processor="";

my $default_ranlib;

my $perl;

my $fips=0;





# All of the following is disabled by default (RC5 was enabled before 0.9.8):
@@ -718,12 +727,36 @@ PROCESS_ARGS: 
			}

		elsif (/^386$/)

			{ $processor=386; }

		elsif (/^fips$/)

			{

			$fips=1;

		        }

		elsif (/^rsaref$/)

			{

			# No RSAref support any more since it's not needed.

			# The check for the option is there so scripts aren't

			# broken

			}

		elsif (/^nofipscanistercheck$/)

			{

			$fips = 1;

			$nofipscanistercheck = 1;

			}

		elsif (/^fipscanisterbuild$/)

			{

			$fips = 1;

			$nofipscanistercheck = 1;

			$fipslibdir="";

			$fipscanisterinternal="y";

			}

		elsif (/^fipsdso$/)

			{

			$fips = 1;

			$nofipscanistercheck = 1;

			$fipslibdir="";

			$fipscanisterinternal="y";

			$fipsdso = 1;

			}

		elsif (/^[-+]/)

			{

			if (/^-[lL](.*)$/)
@@ -922,6 +955,8 @@ my $IsMK1MF=scalar grep /^$target$/,@MK1MF_Builds; 


$IsMK1MF=1 if ($target eq "mingw" && $^O ne "cygwin" && !is_msys());



$no_shared = 0 if ($fipsdso && !$IsMK1MF);



$exe_ext=".exe" if ($target eq "Cygwin" || $target eq "DJGPP" || $target eq "mingw");

$exe_ext=".pm"  if ($target =~ /vos/);

$openssldir="/usr/local/ssl" if ($openssldir eq "" and $prefix eq "");
@@ -1187,6 +1222,27 @@ $bn_obj = $bn_asm unless $bn_obj ne ""; 
$cflags.=" -DOPENSSL_BN_ASM_PART_WORDS" if ($bn_obj =~ /bn86/);

$cflags.=" -DOPENSSL_IA32_SSE2" if (!$no_sse2 && $bn_obj =~ /bn86/);



my $fips_des_obj;

my $fips_aes_obj;

my $fips_sha1_obj;

if ($fips)

	{

	if ($des_obj =~ /\-elf\.o$/)

		{

		$fips_des_obj='asm/fips-dx86-elf.o';

		$openssl_other_defines.="#define OPENSSL_FIPS_DES_ASM\n";

		$fips_aes_obj='asm/fips-ax86-elf.o';

		$openssl_other_defines.="#define OPENSSL_FIPS_AES_ASM\n";

		}

	else	{

		$fips_des_obj=$fips_des_enc;

		$fips_aes_obj='fips_aes_core.o';

		}

	$fips_sha1_obj='asm/fips-sx86-elf.o' if ($sha1_obj =~ /\-elf\.o$/);

	$des_obj=$sha1_obj=$aes_obj="";

	$openssl_other_defines.="#define OPENSSL_FIPS\n";

	}



$des_obj=$des_enc	unless ($des_obj =~ /\.o$/);

$bf_obj=$bf_enc		unless ($bf_obj =~ /\.o$/);

$cast_obj=$cast_enc	unless ($cast_obj =~ /\.o$/);
@@ -1297,6 +1353,8 @@ while (<IN>) 
	s/^EXE_EXT=.*$/EXE_EXT= $exe_ext/;

	s/^CPUID_OBJ=.*$/CPUID_OBJ= $cpuid_obj/;

	s/^BN_ASM=.*$/BN_ASM= $bn_obj/;

	s/^FIPS_DES_ENC=.*$/FIPS_DES_ENC= $fips_des_obj/;

	s/^FIPS_AES_ENC=.*$/FIPS_AES_ENC= $fips_aes_obj/;

	s/^DES_ENC=.*$/DES_ENC= $des_obj/;

	s/^AES_ASM_OBJ=.*$/AES_ASM_OBJ= $aes_obj/;

	s/^BF_ENC=.*$/BF_ENC= $bf_obj/;
@@ -1305,6 +1363,7 @@ while (<IN>) 
	s/^RC5_ENC=.*$/RC5_ENC= $rc5_obj/;

	s/^MD5_ASM_OBJ=.*$/MD5_ASM_OBJ= $md5_obj/;

	s/^SHA1_ASM_OBJ=.*$/SHA1_ASM_OBJ= $sha1_obj/;

	s/^FIPS_SHA1_ASM_OBJ=.*$/FIPS_SHA1_ASM_OBJ= $fips_sha1_obj/;

	s/^RMD160_ASM_OBJ=.*$/RMD160_ASM_OBJ= $rmd160_obj/;

	s/^PROCESSOR=.*/PROCESSOR= $processor/;

	s/^RANLIB=.*/RANLIB= $ranlib/;
@@ -1314,9 +1373,24 @@ while (<IN>) 
	s/^LIBKRB5=.*/LIBKRB5=$withargs{"krb5-lib"}/;

	s/^LIBZLIB=.*/LIBZLIB=$withargs{"zlib-lib"}/;

	s/^ZLIB_INCLUDE=.*/ZLIB_INCLUDE=$withargs{"zlib-include"}/;

	s/^FIPSLIBDIR=.*/FIPSLIBDIR=$fipslibdir/;

	if ($fipsdso)

		{

		s/^FIPSCANLIB=.*/FIPSCANLIB=libfips/;

		s/^SHARED_FIPS=.*/SHARED_FIPS=libfips\$(SHLIB_EXT)/;

		s/^SHLIBDIRS=.*/SHLIBDIRS= crypto ssl fips/;

		}

	else

		{

		s/^FIPSCANLIB=.*/FIPSCANLIB=libcrypto/ if $fips;

		s/^SHARED_FIPS=.*/SHARED_FIPS=/;

		s/^SHLIBDIRS=.*/SHLIBDIRS= crypto ssl/;

		}

	s/^FIPSCANISTERINTERNAL=.*/FIPSCANISTERINTERNAL=$fipscanisterinternal/;

	s/^BASEADDR=.*/BASEADDR=$baseaddr/;

	s/^SHLIB_TARGET=.*/SHLIB_TARGET=$shared_target/;

	s/^SHLIB_MARK=.*/SHLIB_MARK=$shared_mark/;

	s/^SHARED_LIBS=.*/SHARED_LIBS=\$(SHARED_CRYPTO) \$(SHARED_SSL)/ if (!$no_shared);

	s/^SHARED_LIBS=.*/SHARED_LIBS=\$(SHARED_CRYPTO) \$(SHARED_SSL) \$(SHARED_FIPS)/ if (!$no_shared);

	if ($shared_extension ne "" && $shared_extension =~ /^\.s([ol])\.[^\.]*$/)

		{

		my $sotmp = $1;
@@ -1611,9 +1685,16 @@ BEGIN 
    BEGIN

	BLOCK "040904b0"

	BEGIN

#if defined(FIPS)

	    VALUE "Comments", "WARNING: TEST VERSION ONLY ***NOT*** FIPS 140-2 VALIDATED.\\0"

#endif

	    // Required:	    

	    VALUE "CompanyName", "The OpenSSL Project, http://www.openssl.org/\\0"

#if defined(FIPS)

	    VALUE "FileDescription", "TEST UNVALIDATED FIPS140-2 DLL\\0"

#else

	    VALUE "FileDescription", "OpenSSL Shared Library\\0"

#endif

	    VALUE "FileVersion", "$version\\0"

#if defined(CRYPTO)

	    VALUE "InternalName", "libeay32\\0"
@@ -1621,12 +1702,15 @@ BEGIN 
#elif defined(SSL)

	    VALUE "InternalName", "ssleay32\\0"

	    VALUE "OriginalFilename", "ssleay32.dll\\0"

#elif defined(FIPS)

	    VALUE "InternalName", "libosslfips\\0"

	    VALUE "OriginalFilename", "libosslfips.dll\\0"

#endif

	    VALUE "ProductName", "The OpenSSL Toolkit\\0"

	    VALUE "ProductVersion", "$version\\0"

	    // Optional:

	    //VALUE "Comments", "\\0"

	    VALUE "LegalCopyright", "Copyright  1998-2005 The OpenSSL Project. Copyright  1995-1998 Eric A. Young, Tim J. Hudson. All rights reserved.\\0"

	    VALUE "LegalCopyright", "Copyright  1998-2007 The OpenSSL Project. Copyright  1995-1998 Eric A. Young, Tim J. Hudson. All rights reserved.\\0"

	    //VALUE "LegalTrademarks", "\\0"

	    //VALUE "PrivateBuild", "\\0"

	    //VALUE "SpecialBuild", "\\0"
@@ -1663,6 +1747,21 @@ libraries on this platform, they will at least look at it and try their best 
(but please first make sure you have tried with a current version of OpenSSL).

EOF



print <<\EOF if ($fipscanisterinternal eq "y");



WARNING: OpenSSL has been configured using unsupported option(s) to internally

generate a fipscanister.o object module for TESTING PURPOSES ONLY; that

compiled module is NOT FIPS 140-2 validated and CANNOT be used to replace the

OpenSSL FIPS Object Module as identified by the CMVP

(http://csrc.nist.gov/cryptval/) in any application requiring the use of FIPS

140-2 validated software. 



This is an OpenSSL 0.9.8-fips test version.



See the file README.FIPS for details of how to build a test library.



EOF



exit(0);



sub usage