Changes done for unlinking OpenSSL 0.9.8 and OpenSSL 1.0.2 from build (#57)
This PR updates the build to succeed without relying on existing OpenSSL versions. Changes include: 1. Removed OpenSSL 0.9.8 and 1.0.2 components from VSB configuration 2. Removed ipcrypto and ipssl from ipnet root Makefile (ipComps and VARLIST) 3. Updated ipcom/src/ipcom_auth.c for compatibility with OpenSSL 3.5.0 4. Added OpenSSL 3.5.0 include paths where required 5. Removed script from vxworks.krnl.mak which was renaming old OpenSSL library files 6. Removed script from ossl350_prepare/Makefile which was copying OpenSSL 3.5.0 headers to target/h 7. Adapted OpenSSL 3.5.0 headers to ipcom types during build 8. Modified ipnet CDF to switch dependency from INCLUDE_IPSSL to INCLUDE_IPCRYPTO 9. Components: WebCli and NTP are by default disabled Note : There may still be build issues, as target/h/openssl and old OpenSSL source files remain in master. Co-authored-by: subhamgdeb <subhamgdeb> Reviewed-on: http://13.234.246.121:3000/Neominds/ossl35vx69/pulls/57 Reviewed-by: Siddhant Singh <siddhant.singh@neominds.in> Co-authored-by: Subham <subham.gangdeb@neominds.in> Co-committed-by: Subham <subham.gangdeb@neominds.in>
This commit is contained in:
@@ -205,7 +205,6 @@ _VARLIST = \
|
|||||||
COMPONENT_IPWPS \
|
COMPONENT_IPWPS \
|
||||||
COMPONENT_IPAPPL \
|
COMPONENT_IPAPPL \
|
||||||
COMPONENT_IPCAVIUM \
|
COMPONENT_IPCAVIUM \
|
||||||
COMPONENT_IPCRYPTO \
|
|
||||||
COMPONENT_IPXINC \
|
COMPONENT_IPXINC \
|
||||||
COMPONENT_IPDHCPC6 \
|
COMPONENT_IPDHCPC6 \
|
||||||
COMPONENT_IPDHCPR \
|
COMPONENT_IPDHCPR \
|
||||||
@@ -241,7 +240,6 @@ _VARLIST = \
|
|||||||
COMPONENT_IPRIPNG \
|
COMPONENT_IPRIPNG \
|
||||||
COMPONENT_IPSNTP \
|
COMPONENT_IPSNTP \
|
||||||
COMPONENT_IPSSH \
|
COMPONENT_IPSSH \
|
||||||
COMPONENT_IPSSL \
|
|
||||||
COMPONENT_IPTCP \
|
COMPONENT_IPTCP \
|
||||||
COMPONENT_IPSCTP \
|
COMPONENT_IPSCTP \
|
||||||
COMPONENT_WLAN \
|
COMPONENT_WLAN \
|
||||||
@@ -362,7 +360,6 @@ IpComps := \
|
|||||||
IPAPPLDIR.ipappl \
|
IPAPPLDIR.ipappl \
|
||||||
IPCAVIUMDIR.ipcavium \
|
IPCAVIUMDIR.ipcavium \
|
||||||
IPCOMDIR.ipcom \
|
IPCOMDIR.ipcom \
|
||||||
IPCRYPTODIR.ipcrypto \
|
|
||||||
IPDHCPC6DIR.ipdhcpc6 \
|
IPDHCPC6DIR.ipdhcpc6 \
|
||||||
IPDHCPRDIR.ipdhcpr \
|
IPDHCPRDIR.ipdhcpr \
|
||||||
IPDHCPS6DIR.ipdhcps6 \
|
IPDHCPS6DIR.ipdhcps6 \
|
||||||
@@ -402,7 +399,6 @@ IpComps := \
|
|||||||
IPSCTPDIR.ipsctp \
|
IPSCTPDIR.ipsctp \
|
||||||
IPSNTPDIR.ipsntp \
|
IPSNTPDIR.ipsntp \
|
||||||
IPSSHDIR.ipssh \
|
IPSSHDIR.ipssh \
|
||||||
IPSSL2DIR.ipssl2 \
|
|
||||||
IPTCPDIR.iptcp \
|
IPTCPDIR.iptcp \
|
||||||
IPWLANDIR.ipwlan \
|
IPWLANDIR.ipwlan \
|
||||||
IPWPSDIR.ipwps \
|
IPWPSDIR.ipwps \
|
||||||
|
|||||||
@@ -743,7 +743,7 @@ config IPFTP_USE_TLS
|
|||||||
bool "Enable FTP with TLS"
|
bool "Enable FTP with TLS"
|
||||||
default n
|
default n
|
||||||
depends on COMPONENT_IPAPPL && MSP_KERNEL
|
depends on COMPONENT_IPAPPL && MSP_KERNEL
|
||||||
select COMPONENT_IPSSL
|
select COMPONENT_IPCRYPTO
|
||||||
help
|
help
|
||||||
Enable FTP with TLS
|
Enable FTP with TLS
|
||||||
|
|
||||||
@@ -876,7 +876,7 @@ menu "Diameter Components"
|
|||||||
|
|
||||||
config IPDIAMETER_SEC_KEY_DB
|
config IPDIAMETER_SEC_KEY_DB
|
||||||
bool "Enable DIAMETER Secure key DB "
|
bool "Enable DIAMETER Secure key DB "
|
||||||
depends on (COMPONENT_IPDIAMETERP || COMPONENT_IPDIAMETERC) && COMPONENT_IPSSL
|
depends on (COMPONENT_IPDIAMETERP || COMPONENT_IPDIAMETERC) && COMPONENT_IPCRYPTO
|
||||||
default n
|
default n
|
||||||
help
|
help
|
||||||
This option enables Secure Key database support for Diameter components.
|
This option enables Secure Key database support for Diameter components.
|
||||||
@@ -1159,7 +1159,7 @@ config IPSNTP_SYSLOG_PRIORITY
|
|||||||
#
|
#
|
||||||
config COMPONENT_IPNTP
|
config COMPONENT_IPNTP
|
||||||
bool "Enable NTP"
|
bool "Enable NTP"
|
||||||
default y
|
default n
|
||||||
depends on !FEATURE_IPNET_INET6_ONLY && (MSP_KERNEL || MSP_RTP) && COMPONENT_IPSNTP && SUPPORTS_NTP
|
depends on !FEATURE_IPNET_INET6_ONLY && (MSP_KERNEL || MSP_RTP) && COMPONENT_IPSNTP && SUPPORTS_NTP
|
||||||
help
|
help
|
||||||
This option enables the Network Time protocol (NTP / RFC 1305) component.
|
This option enables the Network Time protocol (NTP / RFC 1305) component.
|
||||||
@@ -1331,22 +1331,6 @@ config COMPONENT_IPCRYPTO
|
|||||||
help
|
help
|
||||||
This option enables ipcrypto, a port of the openssl encryption library, excluding the SSL part which is found in the ipssl component. If this option is deselected INCLUDE_IPCRYPTO, INCLUDE_IPCRYPTO_USE_CMDS and INCLUDE_IPCRYPTO_USE_TEST_CMDS will not be available in a VxWorks Image Project (VIP).
|
This option enables ipcrypto, a port of the openssl encryption library, excluding the SSL part which is found in the ipssl component. If this option is deselected INCLUDE_IPCRYPTO, INCLUDE_IPCRYPTO_USE_CMDS and INCLUDE_IPCRYPTO_USE_TEST_CMDS will not be available in a VxWorks Image Project (VIP).
|
||||||
|
|
||||||
choice
|
|
||||||
prompt "Select openssl version to be built"
|
|
||||||
depends on COMPONENT_IPCRYPTO
|
|
||||||
default COMPONENT_IPCRYPTO_OPENSSL_1_0_2
|
|
||||||
|
|
||||||
config COMPONENT_IPCRYPTO_OPENSSL_0_9_8
|
|
||||||
bool "Build openssl-0_9_8"
|
|
||||||
help
|
|
||||||
Select to build openssl-0_9_8
|
|
||||||
|
|
||||||
config COMPONENT_IPCRYPTO_OPENSSL_1_0_2
|
|
||||||
bool "Build openssl-1_0_2"
|
|
||||||
help
|
|
||||||
Select to build openssl-1_0_2 without fips-140-2.
|
|
||||||
endchoice
|
|
||||||
|
|
||||||
config COMPONENT_IPCRYPTO_USE_FIPS_140_2
|
config COMPONENT_IPCRYPTO_USE_FIPS_140_2
|
||||||
bool "Enable FIPS 140-2 validated crypto libraries"
|
bool "Enable FIPS 140-2 validated crypto libraries"
|
||||||
depends on MSP_KERNEL && !FEATURE_IPNET_INET6_ONLY && COMPONENT_IPCRYPTO_OPENSSL_0_9_8 && !DEFAULT_SIT_NB
|
depends on MSP_KERNEL && !FEATURE_IPNET_INET6_ONLY && COMPONENT_IPCRYPTO_OPENSSL_0_9_8 && !DEFAULT_SIT_NB
|
||||||
@@ -1472,7 +1456,7 @@ config IPEAP_USE_EAP_PEAP
|
|||||||
bool "Enable EAP PEAP"
|
bool "Enable EAP PEAP"
|
||||||
default y
|
default y
|
||||||
depends on COMPONENT_IPEAP
|
depends on COMPONENT_IPEAP
|
||||||
select COMPONENT_IPSSL
|
select COMPONENT_IPCRYPTO
|
||||||
help
|
help
|
||||||
This option enables EAP_PEAP support.
|
This option enables EAP_PEAP support.
|
||||||
|
|
||||||
@@ -1494,18 +1478,18 @@ config IPEAP_USE_EAP_TLS
|
|||||||
bool "Enable EAP TLS"
|
bool "Enable EAP TLS"
|
||||||
default y
|
default y
|
||||||
depends on COMPONENT_IPEAP
|
depends on COMPONENT_IPEAP
|
||||||
select COMPONENT_IPSSL
|
select COMPONENT_IPCRYPTO
|
||||||
help
|
help
|
||||||
This option enables EAP_TLS support.
|
This option enables EAP_TLS support.
|
||||||
|
|
||||||
|
|
||||||
comment "EAP TTLS requires COMPONENT_IPSSL to be selected"
|
comment "EAP TTLS requires COMPONENT_IPCRYPTO to be selected"
|
||||||
depends on COMPONENT_IPEAP && !IPEAP_USE_EAP_TTLS && !COMPONENT_IPSSL
|
depends on COMPONENT_IPEAP && !IPEAP_USE_EAP_TTLS && !COMPONENT_IPCRYPTO
|
||||||
|
|
||||||
config IPEAP_USE_EAP_TTLS
|
config IPEAP_USE_EAP_TTLS
|
||||||
bool "Enable EAP TTLS"
|
bool "Enable EAP TTLS"
|
||||||
default y
|
default y
|
||||||
depends on COMPONENT_IPEAP && COMPONENT_IPSSL
|
depends on COMPONENT_IPEAP && COMPONENT_IPCRYPTO
|
||||||
help
|
help
|
||||||
This option enables EAP_TTLS support.
|
This option enables EAP_TTLS support.
|
||||||
|
|
||||||
@@ -1538,7 +1522,7 @@ config IPEAP_USE_EAP_COMMON_TLS
|
|||||||
config IPEAP_USE_EAP_COMMON_SIM
|
config IPEAP_USE_EAP_COMMON_SIM
|
||||||
bool
|
bool
|
||||||
default y if IPEAP_USE_EAP_SIM || IPEAP_USE_EAP_AKA
|
default y if IPEAP_USE_EAP_SIM || IPEAP_USE_EAP_AKA
|
||||||
select COMPONENT_IPSSL
|
select COMPONENT_IPCRYPTO
|
||||||
help
|
help
|
||||||
This is a hidden component and will be selected if EAP SIM, and/or EAP AKA will be selected.
|
This is a hidden component and will be selected if EAP SIM, and/or EAP AKA will be selected.
|
||||||
#
|
#
|
||||||
|
|||||||
@@ -141,7 +141,7 @@ Component INCLUDE_IPFTPS_TLS {
|
|||||||
NAME FTP Server with TLS
|
NAME FTP Server with TLS
|
||||||
SYNOPSIS FTP Server with TLS
|
SYNOPSIS FTP Server with TLS
|
||||||
MODULES ipftps_tls.o
|
MODULES ipftps_tls.o
|
||||||
REQUIRES INCLUDE_IPFTPS INCLUDE_IPSSL
|
REQUIRES INCLUDE_IPFTPS INCLUDE_IPCRYPTO
|
||||||
CFG_PARAMS FTPS_TLS FTPS_TLS_CERT_FILE FTPS_TLS_KEY_FILE FTPS_TLS_SECRECT_KEY\
|
CFG_PARAMS FTPS_TLS FTPS_TLS_CERT_FILE FTPS_TLS_KEY_FILE FTPS_TLS_SECRECT_KEY\
|
||||||
ENABLE_ADVANCE_FTPS_KEY_PRIVACY
|
ENABLE_ADVANCE_FTPS_KEY_PRIVACY
|
||||||
_CHILDREN FOLDER_FTP
|
_CHILDREN FOLDER_FTP
|
||||||
@@ -678,7 +678,7 @@ Parameter ENABLE_ADVANCE_FTPS_KEY_PRIVACY {
|
|||||||
Parameter FTPS_TLS_KEY_FILE {
|
Parameter FTPS_TLS_KEY_FILE {
|
||||||
NAME TLS key file
|
NAME TLS key file
|
||||||
SYNOPSIS
|
SYNOPSIS
|
||||||
REQUIRES INCLUDE_IPSSL
|
REQUIRES INCLUDE_IPCRYPTO
|
||||||
TYPE char *
|
TYPE char *
|
||||||
DEFAULT ""
|
DEFAULT ""
|
||||||
}
|
}
|
||||||
@@ -686,7 +686,7 @@ Parameter FTPS_TLS_KEY_FILE {
|
|||||||
Parameter FTPS_TLS_CERT_FILE {
|
Parameter FTPS_TLS_CERT_FILE {
|
||||||
NAME TLS certificate file
|
NAME TLS certificate file
|
||||||
SYNOPSIS
|
SYNOPSIS
|
||||||
REQUIRES INCLUDE_IPSSL
|
REQUIRES INCLUDE_IPCRYPTO
|
||||||
TYPE char *
|
TYPE char *
|
||||||
DEFAULT ""
|
DEFAULT ""
|
||||||
}
|
}
|
||||||
@@ -694,7 +694,7 @@ Parameter FTPS_TLS_CERT_FILE {
|
|||||||
Parameter FTPS_TLS {
|
Parameter FTPS_TLS {
|
||||||
NAME Enable FTP server with TLS
|
NAME Enable FTP server with TLS
|
||||||
SYNOPSIS
|
SYNOPSIS
|
||||||
REQUIRES INCLUDE_IPSSL
|
REQUIRES INCLUDE_IPCRYPTO
|
||||||
TYPE char *
|
TYPE char *
|
||||||
DEFAULT "0"
|
DEFAULT "0"
|
||||||
}
|
}
|
||||||
@@ -702,7 +702,7 @@ Parameter FTPS_TLS {
|
|||||||
Parameter FTPS_TLS_SECRECT_KEY {
|
Parameter FTPS_TLS_SECRECT_KEY {
|
||||||
NAME TLS secret key
|
NAME TLS secret key
|
||||||
SYNOPSIS
|
SYNOPSIS
|
||||||
REQUIRES INCLUDE_IPSSL
|
REQUIRES INCLUDE_IPCRYPTO
|
||||||
TYPE char *
|
TYPE char *
|
||||||
DEFAULT ""
|
DEFAULT ""
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -30,6 +30,8 @@ endif
|
|||||||
# COMPILATION DEFAULTS
|
# COMPILATION DEFAULTS
|
||||||
#############################################################################
|
#############################################################################
|
||||||
|
|
||||||
|
IPIPDEFINE=-DIPCRYPTO_USE_TYPE_MAPPING
|
||||||
|
|
||||||
IPLD = $(IPCC)
|
IPLD = $(IPCC)
|
||||||
ifeq ("$(IPCOMPILER)","shc")
|
ifeq ("$(IPCOMPILER)","shc")
|
||||||
IPCCOUT = -object=$@
|
IPCCOUT = -object=$@
|
||||||
@@ -292,6 +294,7 @@ IPCFLAGS += -include=$(dir $<)$(IPLIBINC)$(IPINC)
|
|||||||
else
|
else
|
||||||
IPDEF := $(IPDEFINE)
|
IPDEF := $(IPDEFINE)
|
||||||
IPINC := $(IPINCLUDE)
|
IPINC := $(IPINCLUDE)
|
||||||
|
|
||||||
ifeq ($(IPPORT),vxworks)
|
ifeq ($(IPPORT),vxworks)
|
||||||
# Avoid including OpenSSL files from the VxWorks distribution
|
# Avoid including OpenSSL files from the VxWorks distribution
|
||||||
IPCFLAGS := $(IPINC) $(IPLIBINC) $(IPEXTRACFLAGS) $(IPCFLAGS)
|
IPCFLAGS := $(IPINC) $(IPLIBINC) $(IPEXTRACFLAGS) $(IPCFLAGS)
|
||||||
@@ -304,6 +307,7 @@ endif
|
|||||||
# generic
|
# generic
|
||||||
IPCFLAGS += $(IPDEF) $(IPLIBDEF)
|
IPCFLAGS += $(IPDEF) $(IPLIBDEF)
|
||||||
IPCFLAGS += $(IPLIBFLAG)
|
IPCFLAGS += $(IPLIBFLAG)
|
||||||
|
IPCFLAGS += -I$(VSB_DIR)/3pp/openssl-3.5.0/include
|
||||||
|
|
||||||
|
|
||||||
#############################################################################
|
#############################################################################
|
||||||
|
|||||||
@@ -222,22 +222,31 @@ IP_STATIC Ip_err ipcom_auth_userid_get(Ip_uid_t *userid)
|
|||||||
IP_STATIC Ip_err ipcom_auth_decode(const Ip_u8* in, int inl,
|
IP_STATIC Ip_err ipcom_auth_decode(const Ip_u8* in, int inl,
|
||||||
Ip_u8* out, int* outl)
|
Ip_u8* out, int* outl)
|
||||||
{
|
{
|
||||||
EVP_ENCODE_CTX ctx;
|
EVP_ENCODE_CTX *ctx = IP_NULL;
|
||||||
int i, outl_tmp = 0;
|
int i, outl_tmp = 0;
|
||||||
|
|
||||||
EVP_DecodeInit(&ctx);
|
ctx = EVP_ENCODE_CTX_new();
|
||||||
|
if (ctx == IP_NULL)
|
||||||
|
return IPCOM_ERR_FAILED;
|
||||||
|
|
||||||
i = EVP_DecodeUpdate(&ctx, out, outl, in, inl);
|
EVP_DecodeInit(ctx);
|
||||||
|
|
||||||
|
i = EVP_DecodeUpdate(ctx, out, outl, in, inl);
|
||||||
outl_tmp = *outl + outl_tmp;
|
outl_tmp = *outl + outl_tmp;
|
||||||
if (i < 0)
|
if (i < 0) {
|
||||||
|
EVP_ENCODE_CTX_free(ctx);
|
||||||
return IPCOM_ERR_FAILED;
|
return IPCOM_ERR_FAILED;
|
||||||
|
}
|
||||||
|
|
||||||
i = EVP_DecodeFinal(&ctx, out + outl_tmp, outl);
|
i = EVP_DecodeFinal(ctx, out + outl_tmp, outl);
|
||||||
if (i < 0)
|
if (i < 0) {
|
||||||
|
EVP_ENCODE_CTX_free(ctx);
|
||||||
return IPCOM_ERR_FAILED;
|
return IPCOM_ERR_FAILED;
|
||||||
|
}
|
||||||
outl_tmp = *outl + outl_tmp;
|
outl_tmp = *outl + outl_tmp;
|
||||||
*outl = outl_tmp;
|
*outl = outl_tmp;
|
||||||
|
|
||||||
|
EVP_ENCODE_CTX_free(ctx);
|
||||||
return IPCOM_SUCCESS;
|
return IPCOM_SUCCESS;
|
||||||
}
|
}
|
||||||
#endif /* IPCOM_AUTH_USE_HASH */
|
#endif /* IPCOM_AUTH_USE_HASH */
|
||||||
@@ -660,7 +669,7 @@ IP_PUBLIC Ip_err ipcom_auth_hash_rtn_install(Ipcom_auth_hash_hook hash_rtn,
|
|||||||
IP_PUBLIC Ip_err ipcom_auth_default_hash_rtn(const char *password, const char *salt, Ip_size_t salt_len, char *buf)
|
IP_PUBLIC Ip_err ipcom_auth_default_hash_rtn(const char *password, const char *salt, Ip_size_t salt_len, char *buf)
|
||||||
{
|
{
|
||||||
char buf1[IPCOM_AUTH_PASSWORD_MAX];
|
char buf1[IPCOM_AUTH_PASSWORD_MAX];
|
||||||
EVP_ENCODE_CTX ctx;
|
EVP_ENCODE_CTX* ctx = IP_NULL;
|
||||||
int outl;
|
int outl;
|
||||||
int i;
|
int i;
|
||||||
unsigned char* unsigned_buf = (unsigned char*)buf;
|
unsigned char* unsigned_buf = (unsigned char*)buf;
|
||||||
@@ -675,9 +684,15 @@ IP_PUBLIC Ip_err ipcom_auth_default_hash_rtn(const char *password, const char *s
|
|||||||
SHA256((unsigned char*)buf1, salt_len+ipcom_strlen(password), unsigned_buf);
|
SHA256((unsigned char*)buf1, salt_len+ipcom_strlen(password), unsigned_buf);
|
||||||
|
|
||||||
/* Base64 encode hash */
|
/* Base64 encode hash */
|
||||||
EVP_EncodeInit(&ctx);
|
ctx = EVP_ENCODE_CTX_new();
|
||||||
EVP_EncodeUpdate(&ctx, unsigned_buf, &outl, unsigned_buf, 32);
|
if (ctx == IP_NULL)
|
||||||
EVP_EncodeFinal(&ctx, unsigned_buf+outl, &outl);
|
return IPCOM_ERR_FAILED;
|
||||||
|
|
||||||
|
EVP_EncodeInit(ctx);
|
||||||
|
EVP_EncodeUpdate(ctx, unsigned_buf, &outl, unsigned_buf, 32);
|
||||||
|
EVP_EncodeFinal(ctx, unsigned_buf + outl, &outl);
|
||||||
|
|
||||||
|
EVP_ENCODE_CTX_free(ctx);
|
||||||
|
|
||||||
/* Remove terminating line feed */
|
/* Remove terminating line feed */
|
||||||
for (i=(int)(ipcom_strlen((char*)unsigned_buf)-1); i>0 && unsigned_buf[i]=='\n';i--)
|
for (i=(int)(ipcom_strlen((char*)unsigned_buf)-1); i>0 && unsigned_buf[i]=='\n';i--)
|
||||||
@@ -687,6 +702,7 @@ IP_PUBLIC Ip_err ipcom_auth_default_hash_rtn(const char *password, const char *s
|
|||||||
}
|
}
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
/*
|
/*
|
||||||
*===========================================================================
|
*===========================================================================
|
||||||
* ipcom_auth_hash_get
|
* ipcom_auth_hash_get
|
||||||
|
|||||||
@@ -102,7 +102,7 @@ Component INCLUDE_IPDIAMETERP_CMD {
|
|||||||
Component INCLUDE_IPDIAMETER_TLS_CFG {
|
Component INCLUDE_IPDIAMETER_TLS_CFG {
|
||||||
NAME Diameter TLS Configuration
|
NAME Diameter TLS Configuration
|
||||||
SYNOPSIS Diameter TLS configuration parameters
|
SYNOPSIS Diameter TLS configuration parameters
|
||||||
REQUIRES INCLUDE_IPSSL
|
REQUIRES INCLUDE_IPCRYPTO
|
||||||
CFG_PARAMS DIAMETER_TLS_ENABLED \
|
CFG_PARAMS DIAMETER_TLS_ENABLED \
|
||||||
DIAMETER_TLS_CERTIFICATE \
|
DIAMETER_TLS_CERTIFICATE \
|
||||||
DIAMETER_TLS_ROOT_CERTIFICATE \
|
DIAMETER_TLS_ROOT_CERTIFICATE \
|
||||||
@@ -275,7 +275,7 @@ Parameter DIAMETER_TLS_ENABLED {
|
|||||||
NAME Enable TLS
|
NAME Enable TLS
|
||||||
SYNOPSIS Control whether TLS is enabled or not on the local node. \
|
SYNOPSIS Control whether TLS is enabled or not on the local node. \
|
||||||
If set to "1", TLS is enabled on the local node; if set \
|
If set to "1", TLS is enabled on the local node; if set \
|
||||||
to "0", it is disabled. If TLS is enabled, IPSSL and its \
|
to "0", it is disabled. If TLS is enabled, IPCRYPTO and its \
|
||||||
requirements must be built, the other Diameter TLS \
|
requirements must be built, the other Diameter TLS \
|
||||||
configuration parameters must be configured properly, \
|
configuration parameters must be configured properly, \
|
||||||
and certiface files and private key file must be loaded.
|
and certiface files and private key file must be loaded.
|
||||||
|
|||||||
@@ -36,7 +36,7 @@ Component INCLUDE_IPEAP {
|
|||||||
|
|
||||||
#if defined(_WRS_CONFIG_IPEAP_USE_EAP_COMMON_TLS) || defined(_WRS_CONFIG_IPEAP_USE_EAP_SIM) || defined(_WRS_CONFIG_IPEAP_USE_EAP_AKA)
|
#if defined(_WRS_CONFIG_IPEAP_USE_EAP_COMMON_TLS) || defined(_WRS_CONFIG_IPEAP_USE_EAP_SIM) || defined(_WRS_CONFIG_IPEAP_USE_EAP_AKA)
|
||||||
Component INCLUDE_IPEAP {
|
Component INCLUDE_IPEAP {
|
||||||
REQUIRES INCLUDE_IPSSL
|
REQUIRES INCLUDE_IPCRYPTO
|
||||||
}
|
}
|
||||||
#endif
|
#endif
|
||||||
|
|
||||||
|
|||||||
@@ -1,14 +1,14 @@
|
|||||||
#
|
#
|
||||||
config COMPONENT_WM
|
config COMPONENT_WM
|
||||||
bool "Enable WM"
|
bool "Enable WM"
|
||||||
default y
|
default n
|
||||||
depends on MSP_KERNEL && !COMPONENT_IPCRYPTO_USE_FIPS_140_2
|
depends on MSP_KERNEL && !COMPONENT_IPCRYPTO_USE_FIPS_140_2
|
||||||
help
|
help
|
||||||
This option allow user use WindManage WebCLI library, i.e. http client library.
|
This option allow user use WindManage WebCLI library, i.e. http client library.
|
||||||
|
|
||||||
config WM_CLI_USE_SSH
|
config WM_CLI_USE_SSH
|
||||||
bool "Enable WM_CLI_USE_SSH"
|
bool "Enable WM_CLI_USE_SSH"
|
||||||
default y
|
default n
|
||||||
depends on COMPONENT_WM
|
depends on COMPONENT_WM
|
||||||
help
|
help
|
||||||
This option allow WindManage user enable SSH for CLI.
|
This option allow WindManage user enable SSH for CLI.
|
||||||
|
|||||||
@@ -1,6 +1,6 @@
|
|||||||
config COMPONENT_USR_WM
|
config COMPONENT_USR_WM
|
||||||
bool"Build USR libraries for WM"
|
bool"Build USR libraries for WM"
|
||||||
default y if COMPONENT_WM
|
default n if COMPONENT_WM
|
||||||
depends on MSP_KERNEL && FEATURE_USR && !COMPONENT_IPCRYPTO_USE_FIPS_140_2
|
depends on MSP_KERNEL && FEATURE_USR && !COMPONENT_IPCRYPTO_USE_FIPS_140_2
|
||||||
help
|
help
|
||||||
This component will build the user libraries for the WM component
|
This component will build the user libraries for the WM component
|
||||||
|
|||||||
@@ -74,6 +74,16 @@ extern "C" {
|
|||||||
* 5 TYPES
|
* 5 TYPES
|
||||||
****************************************************************************
|
****************************************************************************
|
||||||
*/
|
*/
|
||||||
|
#ifdef IPCRYPTO_USE_TYPE_MAPPING
|
||||||
|
typedef struct _AES_CMAC_CONTEXT
|
||||||
|
{
|
||||||
|
Ip_u8 IV[AES_BLOCKSIZE]; /* IV initialization vector */
|
||||||
|
Ip_u32 ivLength; /* IV length */
|
||||||
|
Ip_u8 k1[AES_BLOCKSIZE]; /* k1 subkey */
|
||||||
|
Ip_u8 k2[AES_BLOCKSIZE]; /* k2 subkey */
|
||||||
|
AES_KEY aesKey; /* AES_KEY used for cipher */
|
||||||
|
} AES_CMAC_CTX;
|
||||||
|
#endif
|
||||||
|
|
||||||
/* Forward declaration */
|
/* Forward declaration */
|
||||||
struct env_md_st;
|
struct env_md_st;
|
||||||
|
|||||||
@@ -48,6 +48,7 @@ ifdef _WRS_CONFIG_COMPONENT_IPSSL
|
|||||||
OBJS += wrProxySslLib.o
|
OBJS += wrProxySslLib.o
|
||||||
|
|
||||||
override ADDED_CFLAGS += -D_WRS_CONFIG_SSL
|
override ADDED_CFLAGS += -D_WRS_CONFIG_SSL
|
||||||
|
EXTRA_INCLUDE += -I$(VSB_DIR)/3pp/openssl-3.5.0/include
|
||||||
|
|
||||||
# wrProxySslLib.c needs ipnet header files, this is the way to reach them
|
# wrProxySslLib.c needs ipnet header files, this is the way to reach them
|
||||||
|
|
||||||
|
|||||||
@@ -22,10 +22,14 @@ use OpenSSL::stackhash qw(generate_stack_macros);
|
|||||||
# define HEADER_ASN1_H
|
# define HEADER_ASN1_H
|
||||||
# endif
|
# endif
|
||||||
|
|
||||||
|
# if defined(IPCRYPTO_USE_TYPE_MAPPING)
|
||||||
|
# include <ipcrypto_iptype_map.h>
|
||||||
|
# else
|
||||||
# ifndef OPENSSL_NO_STDIO
|
# ifndef OPENSSL_NO_STDIO
|
||||||
# include <stdio.h>
|
# include <stdio.h>
|
||||||
# endif
|
# endif
|
||||||
# include <time.h>
|
# include <time.h>
|
||||||
|
# endif
|
||||||
# include <openssl/e_os2.h>
|
# include <openssl/e_os2.h>
|
||||||
# include <openssl/opensslconf.h>
|
# include <openssl/opensslconf.h>
|
||||||
# include <openssl/bio.h>
|
# include <openssl/bio.h>
|
||||||
|
|||||||
@@ -23,9 +23,13 @@ use OpenSSL::stackhash qw(generate_stack_macros);
|
|||||||
|
|
||||||
# include <openssl/e_os2.h>
|
# include <openssl/e_os2.h>
|
||||||
|
|
||||||
|
# if defined(IPCRYPTO_USE_TYPE_MAPPING)
|
||||||
|
# include <ipcrypto_iptype_map.h>
|
||||||
|
# else
|
||||||
# ifndef OPENSSL_NO_STDIO
|
# ifndef OPENSSL_NO_STDIO
|
||||||
# include <stdio.h>
|
# include <stdio.h>
|
||||||
# endif
|
# endif
|
||||||
|
# endif
|
||||||
# include <stdarg.h>
|
# include <stdarg.h>
|
||||||
|
|
||||||
# include <openssl/crypto.h>
|
# include <openssl/crypto.h>
|
||||||
|
|||||||
@@ -18,9 +18,13 @@
|
|||||||
# endif
|
# endif
|
||||||
|
|
||||||
# include <openssl/e_os2.h>
|
# include <openssl/e_os2.h>
|
||||||
|
# if defined(IPCRYPTO_USE_TYPE_MAPPING)
|
||||||
|
# include <ipcrypto_iptype_map.h>
|
||||||
|
# else
|
||||||
# ifndef OPENSSL_NO_STDIO
|
# ifndef OPENSSL_NO_STDIO
|
||||||
# include <stdio.h>
|
# include <stdio.h>
|
||||||
# endif
|
# endif
|
||||||
|
# endif
|
||||||
# include <openssl/opensslconf.h>
|
# include <openssl/opensslconf.h>
|
||||||
# include <openssl/types.h>
|
# include <openssl/types.h>
|
||||||
# include <openssl/crypto.h>
|
# include <openssl/crypto.h>
|
||||||
|
|||||||
@@ -28,9 +28,13 @@ use OpenSSL::stackhash qw(generate_stack_macros generate_lhash_macros);
|
|||||||
# include <openssl/e_os2.h>
|
# include <openssl/e_os2.h>
|
||||||
# include <openssl/types.h>
|
# include <openssl/types.h>
|
||||||
# include <openssl/conferr.h>
|
# include <openssl/conferr.h>
|
||||||
|
# if defined(IPCRYPTO_USE_TYPE_MAPPING)
|
||||||
|
# include <ipcrypto_iptype_map.h>
|
||||||
|
# else
|
||||||
# ifndef OPENSSL_NO_STDIO
|
# ifndef OPENSSL_NO_STDIO
|
||||||
# include <stdio.h>
|
# include <stdio.h>
|
||||||
# endif
|
# endif
|
||||||
|
# endif
|
||||||
|
|
||||||
#ifdef __cplusplus
|
#ifdef __cplusplus
|
||||||
extern "C" {
|
extern "C" {
|
||||||
|
|||||||
@@ -24,13 +24,17 @@ use OpenSSL::stackhash qw(generate_stack_macros);
|
|||||||
# endif
|
# endif
|
||||||
|
|
||||||
# include <stdlib.h>
|
# include <stdlib.h>
|
||||||
# include <time.h>
|
|
||||||
|
|
||||||
# include <openssl/e_os2.h>
|
# include <openssl/e_os2.h>
|
||||||
|
|
||||||
|
# if defined(IPCRYPTO_USE_TYPE_MAPPING)
|
||||||
|
# include <ipcrypto_iptype_map.h>
|
||||||
|
# else
|
||||||
# ifndef OPENSSL_NO_STDIO
|
# ifndef OPENSSL_NO_STDIO
|
||||||
# include <stdio.h>
|
# include <stdio.h>
|
||||||
# endif
|
# endif
|
||||||
|
# include <time.h>
|
||||||
|
# endif
|
||||||
|
|
||||||
# include <openssl/safestack.h>
|
# include <openssl/safestack.h>
|
||||||
# include <openssl/opensslv.h>
|
# include <openssl/opensslv.h>
|
||||||
|
|||||||
@@ -13,9 +13,13 @@
|
|||||||
|
|
||||||
# include <openssl/opensslconf.h>
|
# include <openssl/opensslconf.h>
|
||||||
|
|
||||||
|
# if defined(IPCRYPTO_USE_TYPE_MAPPING)
|
||||||
|
# include <ipcrypto_iptype_map.h>
|
||||||
|
# else
|
||||||
# ifndef OPENSSL_NO_STDIO
|
# ifndef OPENSSL_NO_STDIO
|
||||||
# include <stdio.h>
|
# include <stdio.h>
|
||||||
# endif
|
# endif
|
||||||
|
# endif
|
||||||
# include <stdarg.h>
|
# include <stdarg.h>
|
||||||
# include <stddef.h>
|
# include <stddef.h>
|
||||||
# include <openssl/decodererr.h>
|
# include <openssl/decodererr.h>
|
||||||
|
|||||||
@@ -83,9 +83,13 @@ int EVP_PKEY_CTX_get0_dh_kdf_ukm(EVP_PKEY_CTX *ctx, unsigned char **ukm);
|
|||||||
# define EVP_PKEY_DH_KDF_NONE 1
|
# define EVP_PKEY_DH_KDF_NONE 1
|
||||||
# define EVP_PKEY_DH_KDF_X9_42 2
|
# define EVP_PKEY_DH_KDF_X9_42 2
|
||||||
|
|
||||||
|
# if defined(IPCRYPTO_USE_TYPE_MAPPING)
|
||||||
|
# include <ipcrypto_iptype_map.h>
|
||||||
|
# else
|
||||||
# ifndef OPENSSL_NO_STDIO
|
# ifndef OPENSSL_NO_STDIO
|
||||||
# include <stdio.h>
|
# include <stdio.h>
|
||||||
# endif
|
# endif
|
||||||
|
# endif
|
||||||
# ifndef OPENSSL_NO_DH
|
# ifndef OPENSSL_NO_DH
|
||||||
# include <openssl/e_os2.h>
|
# include <openssl/e_os2.h>
|
||||||
# include <openssl/bio.h>
|
# include <openssl/bio.h>
|
||||||
|
|||||||
@@ -31,10 +31,14 @@
|
|||||||
# include <openssl/dh.h>
|
# include <openssl/dh.h>
|
||||||
# endif
|
# endif
|
||||||
# include <openssl/dsaerr.h>
|
# include <openssl/dsaerr.h>
|
||||||
|
# if defined(IPCRYPTO_USE_TYPE_MAPPING)
|
||||||
|
# include <ipcrypto_iptype_map.h>
|
||||||
|
# else
|
||||||
# ifndef OPENSSL_NO_STDIO
|
# ifndef OPENSSL_NO_STDIO
|
||||||
# include <stdio.h>
|
# include <stdio.h>
|
||||||
# endif
|
# endif
|
||||||
# endif
|
# endif
|
||||||
|
# endif
|
||||||
|
|
||||||
# ifdef __cplusplus
|
# ifdef __cplusplus
|
||||||
extern "C" {
|
extern "C" {
|
||||||
|
|||||||
@@ -224,7 +224,6 @@ extern "C" {
|
|||||||
# endif
|
# endif
|
||||||
|
|
||||||
/* Standard integer types */
|
/* Standard integer types */
|
||||||
# define OPENSSL_NO_INTTYPES_H
|
|
||||||
# define OPENSSL_NO_STDINT_H
|
# define OPENSSL_NO_STDINT_H
|
||||||
# if defined(OPENSSL_SYS_UEFI)
|
# if defined(OPENSSL_SYS_UEFI)
|
||||||
typedef INT8 int8_t;
|
typedef INT8 int8_t;
|
||||||
@@ -239,13 +238,11 @@ typedef UINTN uintptr_t;
|
|||||||
# elif (defined(__STDC_VERSION__) && __STDC_VERSION__ >= 199901L) || \
|
# elif (defined(__STDC_VERSION__) && __STDC_VERSION__ >= 199901L) || \
|
||||||
defined(__osf__) || defined(__sgi) || defined(__hpux) || \
|
defined(__osf__) || defined(__sgi) || defined(__hpux) || \
|
||||||
defined(OPENSSL_SYS_VMS) || defined (__OpenBSD__)
|
defined(OPENSSL_SYS_VMS) || defined (__OpenBSD__)
|
||||||
# include <inttypes.h>
|
# include <stdint.h>
|
||||||
# undef OPENSSL_NO_INTTYPES_H
|
|
||||||
/* Because the specs say that inttypes.h includes stdint.h if present */
|
|
||||||
# undef OPENSSL_NO_STDINT_H
|
# undef OPENSSL_NO_STDINT_H
|
||||||
# elif defined(_MSC_VER) && _MSC_VER<1600
|
# elif defined(_MSC_VER) && _MSC_VER<1600
|
||||||
/*
|
/*
|
||||||
* minimally required typdefs for systems not supporting inttypes.h or
|
* minimally required typdefs for systems not supporting
|
||||||
* stdint.h: currently just older VC++
|
* stdint.h: currently just older VC++
|
||||||
*/
|
*/
|
||||||
typedef signed char int8_t;
|
typedef signed char int8_t;
|
||||||
|
|||||||
@@ -88,9 +88,13 @@ typedef enum {
|
|||||||
|
|
||||||
const char *OSSL_EC_curve_nid2name(int nid);
|
const char *OSSL_EC_curve_nid2name(int nid);
|
||||||
|
|
||||||
|
# if defined(IPCRYPTO_USE_TYPE_MAPPING)
|
||||||
|
# include <ipcrypto_iptype_map.h>
|
||||||
|
# else
|
||||||
# ifndef OPENSSL_NO_STDIO
|
# ifndef OPENSSL_NO_STDIO
|
||||||
# include <stdio.h>
|
# include <stdio.h>
|
||||||
# endif
|
# endif
|
||||||
|
# endif
|
||||||
# ifndef OPENSSL_NO_EC
|
# ifndef OPENSSL_NO_EC
|
||||||
# include <openssl/asn1.h>
|
# include <openssl/asn1.h>
|
||||||
# include <openssl/symhacks.h>
|
# include <openssl/symhacks.h>
|
||||||
|
|||||||
@@ -13,9 +13,13 @@
|
|||||||
|
|
||||||
# include <openssl/opensslconf.h>
|
# include <openssl/opensslconf.h>
|
||||||
|
|
||||||
|
# if defined(IPCRYPTO_USE_TYPE_MAPPING)
|
||||||
|
# include <ipcrypto_iptype_map.h>
|
||||||
|
# else
|
||||||
# ifndef OPENSSL_NO_STDIO
|
# ifndef OPENSSL_NO_STDIO
|
||||||
# include <stdio.h>
|
# include <stdio.h>
|
||||||
# endif
|
# endif
|
||||||
|
# endif
|
||||||
# include <stdarg.h>
|
# include <stdarg.h>
|
||||||
# include <stddef.h>
|
# include <stddef.h>
|
||||||
# include <openssl/encodererr.h>
|
# include <openssl/encodererr.h>
|
||||||
|
|||||||
@@ -22,10 +22,14 @@ use OpenSSL::stackhash qw(generate_lhash_macros);
|
|||||||
|
|
||||||
# include <openssl/e_os2.h>
|
# include <openssl/e_os2.h>
|
||||||
|
|
||||||
|
# if defined(IPCRYPTO_USE_TYPE_MAPPING)
|
||||||
|
# include <ipcrypto_iptype_map.h>
|
||||||
|
# else
|
||||||
# ifndef OPENSSL_NO_STDIO
|
# ifndef OPENSSL_NO_STDIO
|
||||||
# include <stdio.h>
|
# include <stdio.h>
|
||||||
# include <stdlib.h>
|
# include <stdlib.h>
|
||||||
# endif
|
# endif
|
||||||
|
# endif
|
||||||
|
|
||||||
# include <openssl/types.h>
|
# include <openssl/types.h>
|
||||||
# include <openssl/bio.h>
|
# include <openssl/bio.h>
|
||||||
|
|||||||
@@ -18,9 +18,13 @@
|
|||||||
|
|
||||||
# include <stdarg.h>
|
# include <stdarg.h>
|
||||||
|
|
||||||
|
# if defined(IPCRYPTO_USE_TYPE_MAPPING)
|
||||||
|
# include <ipcrypto_iptype_map.h>
|
||||||
|
# else
|
||||||
# ifndef OPENSSL_NO_STDIO
|
# ifndef OPENSSL_NO_STDIO
|
||||||
# include <stdio.h>
|
# include <stdio.h>
|
||||||
# endif
|
# endif
|
||||||
|
# endif
|
||||||
|
|
||||||
# include <openssl/opensslconf.h>
|
# include <openssl/opensslconf.h>
|
||||||
# include <openssl/types.h>
|
# include <openssl/types.h>
|
||||||
|
|||||||
@@ -26,9 +26,13 @@ use OpenSSL::stackhash qw(generate_lhash_macros);
|
|||||||
|
|
||||||
# include <openssl/e_os2.h>
|
# include <openssl/e_os2.h>
|
||||||
# include <openssl/bio.h>
|
# include <openssl/bio.h>
|
||||||
|
# if defined(IPCRYPTO_USE_TYPE_MAPPING)
|
||||||
|
# include <ipcrypto_iptype_map.h>
|
||||||
|
# else
|
||||||
# ifndef OPENSSL_NO_STDIO
|
# ifndef OPENSSL_NO_STDIO
|
||||||
# include <stdio.h>
|
# include <stdio.h>
|
||||||
# endif
|
# endif
|
||||||
|
# endif
|
||||||
|
|
||||||
#ifdef __cplusplus
|
#ifdef __cplusplus
|
||||||
extern "C" {
|
extern "C" {
|
||||||
|
|||||||
@@ -22,9 +22,13 @@
|
|||||||
# include <openssl/evp.h>
|
# include <openssl/evp.h>
|
||||||
# include <openssl/x509.h>
|
# include <openssl/x509.h>
|
||||||
# include <openssl/pemerr.h>
|
# include <openssl/pemerr.h>
|
||||||
|
# if defined(IPCRYPTO_USE_TYPE_MAPPING)
|
||||||
|
# include <ipcrypto_iptype_map.h>
|
||||||
|
# else
|
||||||
# ifndef OPENSSL_NO_STDIO
|
# ifndef OPENSSL_NO_STDIO
|
||||||
# include <stdio.h>
|
# include <stdio.h>
|
||||||
# endif
|
# endif
|
||||||
|
# endif
|
||||||
|
|
||||||
#ifdef __cplusplus
|
#ifdef __cplusplus
|
||||||
extern "C" {
|
extern "C" {
|
||||||
|
|||||||
@@ -26,9 +26,13 @@ use OpenSSL::stackhash qw(generate_stack_macros);
|
|||||||
# include <openssl/core.h>
|
# include <openssl/core.h>
|
||||||
# include <openssl/x509.h>
|
# include <openssl/x509.h>
|
||||||
# include <openssl/pkcs12err.h>
|
# include <openssl/pkcs12err.h>
|
||||||
|
# if defined(IPCRYPTO_USE_TYPE_MAPPING)
|
||||||
|
# include <ipcrypto_iptype_map.h>
|
||||||
|
# else
|
||||||
# ifndef OPENSSL_NO_STDIO
|
# ifndef OPENSSL_NO_STDIO
|
||||||
# include <stdio.h>
|
# include <stdio.h>
|
||||||
# endif
|
# endif
|
||||||
|
# endif
|
||||||
|
|
||||||
#ifdef __cplusplus
|
#ifdef __cplusplus
|
||||||
extern "C" {
|
extern "C" {
|
||||||
|
|||||||
@@ -29,9 +29,13 @@ use OpenSSL::stackhash qw(generate_stack_macros);
|
|||||||
# include <openssl/symhacks.h>
|
# include <openssl/symhacks.h>
|
||||||
# include <openssl/types.h>
|
# include <openssl/types.h>
|
||||||
# include <openssl/pkcs7err.h>
|
# include <openssl/pkcs7err.h>
|
||||||
|
# if defined(IPCRYPTO_USE_TYPE_MAPPING)
|
||||||
|
# include <ipcrypto_iptype_map.h>
|
||||||
|
# else
|
||||||
# ifndef OPENSSL_NO_STDIO
|
# ifndef OPENSSL_NO_STDIO
|
||||||
# include <stdio.h>
|
# include <stdio.h>
|
||||||
# endif
|
# endif
|
||||||
|
# endif
|
||||||
|
|
||||||
#ifdef __cplusplus
|
#ifdef __cplusplus
|
||||||
extern "C" {
|
extern "C" {
|
||||||
|
|||||||
@@ -27,9 +27,13 @@
|
|||||||
# endif
|
# endif
|
||||||
# include <openssl/rsaerr.h>
|
# include <openssl/rsaerr.h>
|
||||||
# include <openssl/safestack.h>
|
# include <openssl/safestack.h>
|
||||||
|
# if defined(IPCRYPTO_USE_TYPE_MAPPING)
|
||||||
|
# include <ipcrypto_iptype_map.h>
|
||||||
|
# else
|
||||||
# ifndef OPENSSL_NO_STDIO
|
# ifndef OPENSSL_NO_STDIO
|
||||||
# include <stdio.h>
|
# include <stdio.h>
|
||||||
# endif
|
# endif
|
||||||
|
# endif
|
||||||
|
|
||||||
# ifdef __cplusplus
|
# ifdef __cplusplus
|
||||||
extern "C" {
|
extern "C" {
|
||||||
|
|||||||
@@ -29,7 +29,11 @@ use OpenSSL::stackhash qw(generate_stack_macros);
|
|||||||
#include <openssl/opensslconf.h>
|
#include <openssl/opensslconf.h>
|
||||||
|
|
||||||
#ifndef OPENSSL_NO_SRP
|
#ifndef OPENSSL_NO_SRP
|
||||||
|
# if defined(IPCRYPTO_USE_TYPE_MAPPING)
|
||||||
|
# include <ipcrypto_iptype_map.h>
|
||||||
|
# else
|
||||||
# include <stdio.h>
|
# include <stdio.h>
|
||||||
|
# endif
|
||||||
# include <string.h>
|
# include <string.h>
|
||||||
# include <openssl/safestack.h>
|
# include <openssl/safestack.h>
|
||||||
# include <openssl/bn.h>
|
# include <openssl/bn.h>
|
||||||
|
|||||||
@@ -32,9 +32,13 @@
|
|||||||
# include <openssl/ess.h>
|
# include <openssl/ess.h>
|
||||||
# include <openssl/x509.h>
|
# include <openssl/x509.h>
|
||||||
# include <openssl/x509v3.h>
|
# include <openssl/x509v3.h>
|
||||||
|
# if defined(IPCRYPTO_USE_TYPE_MAPPING)
|
||||||
|
# include <ipcrypto_iptype_map.h>
|
||||||
|
# else
|
||||||
# ifndef OPENSSL_NO_STDIO
|
# ifndef OPENSSL_NO_STDIO
|
||||||
# include <stdio.h>
|
# include <stdio.h>
|
||||||
# endif
|
# endif
|
||||||
|
# endif
|
||||||
# ifdef __cplusplus
|
# ifdef __cplusplus
|
||||||
extern "C" {
|
extern "C" {
|
||||||
# endif
|
# endif
|
||||||
|
|||||||
@@ -41,9 +41,13 @@ use OpenSSL::stackhash qw(generate_stack_macros);
|
|||||||
|
|
||||||
# include <openssl/sha.h>
|
# include <openssl/sha.h>
|
||||||
# include <openssl/x509err.h>
|
# include <openssl/x509err.h>
|
||||||
|
# if defined(IPCRYPTO_USE_TYPE_MAPPING)
|
||||||
|
# include <ipcrypto_iptype_map.h>
|
||||||
|
# else
|
||||||
# ifndef OPENSSL_NO_STDIO
|
# ifndef OPENSSL_NO_STDIO
|
||||||
# include <stdio.h>
|
# include <stdio.h>
|
||||||
# endif
|
# endif
|
||||||
|
# endif
|
||||||
|
|
||||||
#ifdef __cplusplus
|
#ifdef __cplusplus
|
||||||
extern "C" {
|
extern "C" {
|
||||||
|
|||||||
@@ -26,9 +26,13 @@ use OpenSSL::stackhash qw(generate_stack_macros);
|
|||||||
# include <openssl/x509.h>
|
# include <openssl/x509.h>
|
||||||
# include <openssl/conf.h>
|
# include <openssl/conf.h>
|
||||||
# include <openssl/x509v3err.h>
|
# include <openssl/x509v3err.h>
|
||||||
|
# if defined(IPCRYPTO_USE_TYPE_MAPPING)
|
||||||
|
# include <ipcrypto_iptype_map.h>
|
||||||
|
# else
|
||||||
# ifndef OPENSSL_NO_STDIO
|
# ifndef OPENSSL_NO_STDIO
|
||||||
# include <stdio.h>
|
# include <stdio.h>
|
||||||
# endif
|
# endif
|
||||||
|
# endif
|
||||||
|
|
||||||
#ifdef __cplusplus
|
#ifdef __cplusplus
|
||||||
extern "C" {
|
extern "C" {
|
||||||
|
|||||||
@@ -30,6 +30,7 @@ EXTRA_INCLUDE += -I$(IPCOM_DIR)/config
|
|||||||
EXTRA_INCLUDE += -I$(IPCOM_DIR)/port/vxworks/config
|
EXTRA_INCLUDE += -I$(IPCOM_DIR)/port/vxworks/config
|
||||||
EXTRA_INCLUDE += -I$(IPCOM_DIR)/port/vxworks/include
|
EXTRA_INCLUDE += -I$(IPCOM_DIR)/port/vxworks/include
|
||||||
EXTRA_INCLUDE += -I$(TGT_DIR)/h/security
|
EXTRA_INCLUDE += -I$(TGT_DIR)/h/security
|
||||||
|
EXTRA_INCLUDE += -I$(VSB_DIR)/3pp/openssl-3.5.0/include
|
||||||
|
|
||||||
ifneq ($(SPACE),user)
|
ifneq ($(SPACE),user)
|
||||||
OBJS = ipcrypto_cmd_cmp.o
|
OBJS = ipcrypto_cmd_cmp.o
|
||||||
|
|||||||
@@ -16,6 +16,7 @@ LIB_FORMAT = both
|
|||||||
|
|
||||||
include $(WIND_BASE)/target/h/make/defs.library
|
include $(WIND_BASE)/target/h/make/defs.library
|
||||||
|
|
||||||
|
EXTRA_INCLUDE += -I$(VSB_DIR)/3pp/openssl-3.5.0/include
|
||||||
EXTRA_INCLUDE += -I$(TGT_DIR)/h/security
|
EXTRA_INCLUDE += -I$(TGT_DIR)/h/security
|
||||||
|
|
||||||
EXTRA_DEFINE += -D_WRS_CONFIG_OPENSSL
|
EXTRA_DEFINE += -D_WRS_CONFIG_OPENSSL
|
||||||
|
|||||||
@@ -84,7 +84,5 @@ install:
|
|||||||
mv providers/libcommon.a $(VSB_DIR)/$(VX_CPU_FAMILY)/$(CPU)/common/
|
mv providers/libcommon.a $(VSB_DIR)/$(VX_CPU_FAMILY)/$(CPU)/common/
|
||||||
mv providers/libdefault.a $(VSB_DIR)/$(VX_CPU_FAMILY)/$(CPU)/common/
|
mv providers/libdefault.a $(VSB_DIR)/$(VX_CPU_FAMILY)/$(CPU)/common/
|
||||||
mv providers/liblegacy.a $(VSB_DIR)/$(VX_CPU_FAMILY)/$(CPU)/common/
|
mv providers/liblegacy.a $(VSB_DIR)/$(VX_CPU_FAMILY)/$(CPU)/common/
|
||||||
cd $(VSB_DIR)/$(VX_CPU_FAMILY)/$(CPU)/common && mv libipcrypto.a libipcrypto._a
|
|
||||||
cd $(VSB_DIR)/$(VX_CPU_FAMILY)/$(CPU)/common && mv libipcrypto_apps.a libipcrypto_apps._a
|
|
||||||
cd $(VSB_DIR)/$(VX_CPU_FAMILY)/$(CPU)/common && mv libipssl.a libipssl._a
|
|
||||||
|
|
||||||
|
|||||||
@@ -160,6 +160,8 @@ LIB_BASE_NAME = os
|
|||||||
# It must be after LIB_BASE_NAME
|
# It must be after LIB_BASE_NAME
|
||||||
include $(TGT_DIR)/h/make/defs.library
|
include $(TGT_DIR)/h/make/defs.library
|
||||||
|
|
||||||
|
EXTRA_INCLUDE += -I$(VSB_DIR)/3pp/openssl-3.5.0/include
|
||||||
|
|
||||||
DOC_FILES= clockLib.c cpuset.c \
|
DOC_FILES= clockLib.c cpuset.c \
|
||||||
edrLib.c edrShow.c edrSysDbgLib.c edrErrLogLib.c \
|
edrLib.c edrShow.c edrSysDbgLib.c edrErrLogLib.c \
|
||||||
envLib.c errnoLib.c excLib.c ffsLib.c hashLib.c intLib.c \
|
envLib.c errnoLib.c excLib.c ffsLib.c hashLib.c intLib.c \
|
||||||
|
|||||||
@@ -27,6 +27,8 @@ EXTRA_INCLUDE += -I$(IPCOM_DIR)/include
|
|||||||
EXTRA_INCLUDE += -I$(IPCOM_DIR)/config
|
EXTRA_INCLUDE += -I$(IPCOM_DIR)/config
|
||||||
EXTRA_INCLUDE += -I$(IPCOM_DIR)/port/vxworks/config
|
EXTRA_INCLUDE += -I$(IPCOM_DIR)/port/vxworks/config
|
||||||
EXTRA_INCLUDE += -I$(IPCOM_DIR)/port/vxworks/include
|
EXTRA_INCLUDE += -I$(IPCOM_DIR)/port/vxworks/include
|
||||||
|
EXTRA_INCLUDE += -I$(VSB_DIR)/3pp/openssl-3.5.0/include
|
||||||
|
|
||||||
ifdef _WRS_CONFIG_CORE__BANNED_H
|
ifdef _WRS_CONFIG_CORE__BANNED_H
|
||||||
ADDED_CFLAGS += -include banned.h
|
ADDED_CFLAGS += -include banned.h
|
||||||
endif
|
endif
|
||||||
|
|||||||
@@ -26,11 +26,4 @@ generate-headers:
|
|||||||
@if [ -d "$(INTERNAL_DST_DIR)" ]; then \
|
@if [ -d "$(INTERNAL_DST_DIR)" ]; then \
|
||||||
rm -r $(INTERNAL_DST_DIR);\
|
rm -r $(INTERNAL_DST_DIR);\
|
||||||
fi
|
fi
|
||||||
mkdir -p $(OPENSSL_DST_DIR)
|
|
||||||
mkdir -p $(CRYPTO_DST_DIR)
|
|
||||||
mkdir -p $(INTERNAL_DST_DIR)
|
|
||||||
cp -r $(OSSL_BUILD_DIR)/include/openssl $(TGT_DIR)/h
|
|
||||||
cp -r $(OSSL_BUILD_DIR)/include/crypto $(TGT_DIR)/h
|
|
||||||
cp -r $(OSSL_BUILD_DIR)/include/internal $(TGT_DIR)/h
|
|
||||||
cp -r $(OSSL_BUILD_DIR)/crypto/evp/evp_local.h $(OPENSSL_DST_DIR)
|
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user