ExternalVendorCode/genode
1
0
Fork 0
mirror of https://github.com/genodelabs/genode.git synced 2024-12-26 17:01:07 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
07aa56fffb
genode/libports/ports/openssl.mk

71 lines
2.4 KiB
Makefile
Raw Normal View History

libports: Verify signatures of 3rd-party code This patch adds integrity checks for the packages of the libports repository. Issue #748
2013-05-25 12:50:46 +00:00
OPENSSL_VERSION = 1.0.1c
OPENSSL = openssl-$(OPENSSL_VERSION)
OPENSSL_TGZ = $(OPENSSL).tar.gz
OPENSSL_SIG = $(OPENSSL_TGZ).asc
OPENSSL_BASE_URL = https://www.openssl.org/source
OPENSSL_URL = $(OPENSSL_BASE_URL)/$(OPENSSL_TGZ)
OPENSSL_URL_SIG = $(OPENSSL_BASE_URL)/$(OPENSSL_SIG)
OPENSSL_KEY = "49A563D9 26BB437D F295C759 9C58A66D 2118CF83 F709453B 5A6A9B85"
Add port of OpenSSL to libports This commit contains the initial port of OpenSSL to Genode. It certainly needs some more work to get things straight - it compiles fine but does not work because of a NULL pointer exception.
2012-05-24 13:34:22 +00:00
# local openssl src
libports: Verify signatures of 3rd-party code This patch adds integrity checks for the packages of the libports repository. Issue #748
2013-05-25 12:50:46 +00:00
OPENSSL_SRC = src/lib/openssl
Add port of OpenSSL to libports This commit contains the initial port of OpenSSL to Genode. It certainly needs some more work to get things straight - it compiles fine but does not work because of a NULL pointer exception.
2012-05-24 13:34:22 +00:00
#
# Interface to top-level prepare Makefile
#
PORTS += $(OPENSSL)
prepare-openssl: $(CONTRIB_DIR)/$(OPENSSL) include/openssl generate_asm
#$(CONTRIB_DIR)/$(OPENSSL):
#
# Port-specific local rules
#
$(DOWNLOAD_DIR)/$(OPENSSL_TGZ):
$(VERBOSE)wget -c -P $(DOWNLOAD_DIR) $(OPENSSL_URL) && touch $@
ports/libports: Avoid multi-target rules This patch splits the download of signatures from the download of the archive to improve robustness. This way, signature files will be downloaded even if the corresponding archive is already in place. Issue #748
2013-06-10 09:38:52 +00:00
$(DOWNLOAD_DIR)/$(OPENSSL_SIG):
libports: Verify signatures of 3rd-party code This patch adds integrity checks for the packages of the libports repository. Issue #748
2013-05-25 12:50:46 +00:00
$(VERBOSE)wget -c -P $(DOWNLOAD_DIR) $(OPENSSL_URL_SIG) && touch $@
ports/libports: Handle failed integrity checks This patch makes the handling of failed integrity checks of 3rd-party packages more robust. Previously, a once failed 'make prepare PKG=curl' would not leave any trace of the verification state. Hence, a successive attempt to perform the 'make prepare' step again succeeded even if the signature check failed. To solve this problem, the outcome of a successful signature check is represented by a tag file called 'download/<archive-name>.verified'. Because the rule for extracting the archive depends on the .verify tag file, the extraction step is not performed until the signature check succeeds. Issue #748
2013-06-06 14:49:56 +00:00
ports/libports: Avoid multi-target rules This patch splits the download of signatures from the download of the archive to improve robustness. This way, signature files will be downloaded even if the corresponding archive is already in place. Issue #748
2013-06-10 09:38:52 +00:00
$(DOWNLOAD_DIR)/$(OPENSSL_TGZ).verified: $(DOWNLOAD_DIR)/$(OPENSSL_TGZ) \
$(DOWNLOAD_DIR)/$(OPENSSL_SIG)
libports: Verify signatures of 3rd-party code This patch adds integrity checks for the packages of the libports repository. Issue #748
2013-05-25 12:50:46 +00:00
$(VERBOSE)$(SIGVERIFIER) $(DOWNLOAD_DIR)/$(OPENSSL_TGZ) $(DOWNLOAD_DIR)/$(OPENSSL_SIG) $(OPENSSL_KEY)
ports/libports: Handle failed integrity checks This patch makes the handling of failed integrity checks of 3rd-party packages more robust. Previously, a once failed 'make prepare PKG=curl' would not leave any trace of the verification state. Hence, a successive attempt to perform the 'make prepare' step again succeeded even if the signature check failed. To solve this problem, the outcome of a successful signature check is represented by a tag file called 'download/<archive-name>.verified'. Because the rule for extracting the archive depends on the .verify tag file, the extraction step is not performed until the signature check succeeds. Issue #748
2013-06-06 14:49:56 +00:00
$(VERBOSE)touch $@
Add port of OpenSSL to libports This commit contains the initial port of OpenSSL to Genode. It certainly needs some more work to get things straight - it compiles fine but does not work because of a NULL pointer exception.
2012-05-24 13:34:22 +00:00
$(CONTRIB_DIR)/$(OPENSSL): $(DOWNLOAD_DIR)/$(OPENSSL_TGZ)
ports/libports: Handle failed integrity checks This patch makes the handling of failed integrity checks of 3rd-party packages more robust. Previously, a once failed 'make prepare PKG=curl' would not leave any trace of the verification state. Hence, a successive attempt to perform the 'make prepare' step again succeeded even if the signature check failed. To solve this problem, the outcome of a successful signature check is represented by a tag file called 'download/<archive-name>.verified'. Because the rule for extracting the archive depends on the .verify tag file, the extraction step is not performed until the signature check succeeds. Issue #748
2013-06-06 14:49:56 +00:00
$(VERBOSE)tar xfz $(<:.verified=) -C $(CONTRIB_DIR) && touch $@
Add port of OpenSSL to libports This commit contains the initial port of OpenSSL to Genode. It certainly needs some more work to get things straight - it compiles fine but does not work because of a NULL pointer exception.
2012-05-24 13:34:22 +00:00
#
# Generate ASM codes
#
libports: fix openssl issues and update to 1.0.1c libcrypto provides certain optimized assembler functions which unfortunatly are non-pic. Therefore this asm code is removed and libcrypto is build with -DOPENSSL_NO_ASM. Because the asm code is not needed anymore, its generation is also removed from openssl.mk. import-libssl.mk was also added because it is essential for building programs which depend on libssl. Fixes #291. Fixes #294.
2012-07-12 10:06:58 +00:00
generate_asm: $(OPENSSL_SRC)/x86_64/modexp512.s $(OPENSSL_SRC)/x86_64/rc4_md5.s
Add port of OpenSSL to libports This commit contains the initial port of OpenSSL to Genode. It certainly needs some more work to get things straight - it compiles fine but does not work because of a NULL pointer exception.
2012-05-24 13:34:22 +00:00
libcrypto: Provide x86_64-specific implementations modexp512 and rc4-md5 code were missing for x86_64. The files are now generated on openssl-prepare and will be used when building for x86_64. Fixes #224.
2012-05-29 12:22:13 +00:00
$(OPENSSL_SRC)/x86_64/modexp512.s:
$(VERBOSE)perl $(CONTRIB_DIR)/$(OPENSSL)/crypto/bn/asm/modexp512-x86_64.pl \
$(CONTRIB_DIR)/$(OPENSSL_DIR)/crypto/perlasm/x86as.pl > $@
$(OPENSSL_SRC)/x86_64/rc4_md5.s:
$(VERBOSE)perl $(CONTRIB_DIR)/$(OPENSSL)/crypto/rc4/asm/rc4-md5-x86_64.pl \
$(CONTRIB_DIR)/$(OPENSSL_DIR)/crypto/perlasm/x86as.pl > $@
Add port of OpenSSL to libports This commit contains the initial port of OpenSSL to Genode. It certainly needs some more work to get things straight - it compiles fine but does not work because of a NULL pointer exception.
2012-05-24 13:34:22 +00:00
#
# Install openssl headers
#
include/openssl:
$(VERBOSE)mkdir -p $@
$(VERBOSE)for i in `find $(CONTRIB_DIR)/$(OPENSSL)/include -name *.h`; do \
ln -fs ../../$$i include/openssl/; done
$(VERBOSE)rm include/openssl/opensslconf.h
$(VERBOSE)ln -fs ../../$(CONTRIB_DIR)/$(OPENSSL)/e_os.h include/openssl/
$(VERBOSE)ln -fs ../../$(CONTRIB_DIR)/$(OPENSSL)/crypto/md2/md2.h include/openssl/
$(VERBOSE)ln -fs ../../$(CONTRIB_DIR)/$(OPENSSL)/crypto/rc5/rc5.h include/openssl/
$(VERBOSE)ln -fs ../../$(CONTRIB_DIR)/$(OPENSSL)/crypto/store/store.h include/openssl/
clean-openssl:
libports: fix openssl issues and update to 1.0.1c libcrypto provides certain optimized assembler functions which unfortunatly are non-pic. Therefore this asm code is removed and libcrypto is build with -DOPENSSL_NO_ASM. Because the asm code is not needed anymore, its generation is also removed from openssl.mk. import-libssl.mk was also added because it is essential for building programs which depend on libssl. Fixes #291. Fixes #294.
2012-07-12 10:06:58 +00:00
$(VERBOSE)rm -rf include/openssl
Add port of OpenSSL to libports This commit contains the initial port of OpenSSL to Genode. It certainly needs some more work to get things straight - it compiles fine but does not work because of a NULL pointer exception.
2012-05-24 13:34:22 +00:00
$(VERBOSE)rm -rf $(CONTRIB_DIR)/$(OPENSSL)
$(VERBOSE)rm -rf $(OPENSSL_SRC)/x86_32/*.s $(OPENSSL_SRC)/x86_64/*.s
Reference in New Issue Copy Permalink