wbrawner/openssl
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Sample FIPS object file integrity checking script.

Browse source
This commit is contained in:
Dr. Stephen Henson 2006-01-28 13:34:27 +00:00
parent fbe6969a0d
commit 4ca47e6db9
1 changed files with 38 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

38
ms/fipscheck.pl Normal file
View file

@ -0,0 +1,38 @@
#!/usr/bin/perl
# fipscheck.pl
# sample perl script to check integrity of critical FIPS files
my ($fipsdir) = @ARGV;
die "Directory $fipsdir not found or invalid" unless -d $fipsdir;
die "Standalone SHA1 check program ${fipsdir}/fips_standalone_sha1.exe not found" unless -f "${fipsdir}/fips_standalone_sha1.exe";
check_hash("fips_premain.c", $fipsdir);
check_hash("fipscanister.o", $fipsdir);
sub check_hash
{
my ($filename, $dir) = @_;
my ($hashfile, $hashval);
$filename = "$dir/$filename";
die "File $filename does not exist" unless -f $filename;
die "File ${filename}.sha1 does not exist" unless -f "${filename}.sha1";
open(IN, "${filename}.sha1") || die "Cannot open file hash file ${filename}.sha1";
$hashfile = <IN>;
close IN;
$hashval = `${dir}/fips_standalone_sha1.exe $filename`;
chomp $hashfile;
chomp $hashval;
$hashfile =~ s/^.*=\s+//;
$hashval =~ s/^.*=\s+//;
die "Invalid hash syntax in file" if (length($hashfile) != 40);
die "Invalid hash received for file" if (length($hashval) != 40);
die "*** HASH VALUE MISMATCH FOR FILE $filename ***" if ($hashval ne $hashfile);
}