9ba96fbb25
Once upon a time, there was chop, which somply chopped off the last character of $_ or a given variable, and it was used to take off the EOL character (\n) of strings. ... but then, you had to check for the presence of such character. So came chomp, the better chop which checks for \n before chopping it off. And this worked well, as long as Perl made internally sure that all EOLs were converted to \n. These days, though, there seems to be a mixture of perls, so lines from files in the "wrong" environment might have \r\n as EOL, or just \r (Mac OS, unless I'm misinformed). So it's time we went for the more generic variant and use s|\R$||, the better chomp which recognises all kinds of known EOLs and chops them off. A few chops were left alone, as they are use as surgical tools to remove one last slash or one last comma. NOTE: \R came with perl 5.10.0. It means that from now on, our scripts will fail with any older version. Reviewed-by: Rich Salz <rsalz@openssl.org>
109 lines
2.7 KiB
Perl
109 lines
2.7 KiB
Perl
#!/usr/bin/perl
|
|
|
|
sub check_env
|
|
{
|
|
my @ret;
|
|
foreach (@_)
|
|
{
|
|
die "Environment variable $_ not defined!\n" unless exists $ENV{$_};
|
|
push @ret, $ENV{$_};
|
|
}
|
|
return @ret;
|
|
}
|
|
|
|
|
|
my ($fips_cc,$fips_cc_args, $fips_link,$fips_target, $fips_libdir, $sha1_exe)
|
|
= check_env("FIPS_CC", "FIPS_CC_ARGS", "FIPS_LINK", "FIPS_TARGET",
|
|
"FIPSLIB_D", "FIPS_SHA1_EXE");
|
|
|
|
|
|
|
|
if (exists $ENV{"PREMAIN_DSO_EXE"})
|
|
{
|
|
$fips_premain_dso = $ENV{"PREMAIN_DSO_EXE"};
|
|
}
|
|
else
|
|
{
|
|
$fips_premain_dso = "";
|
|
}
|
|
|
|
check_hash($sha1_exe, "fips_premain.c");
|
|
check_hash($sha1_exe, "fipscanister.lib");
|
|
|
|
|
|
print "Integrity check OK\n";
|
|
|
|
if (is_premain_linked(@ARGV)) {
|
|
print "$fips_cc $fips_cc_args $fips_libdir/fips_premain.c\n";
|
|
system "$fips_cc $fips_cc_args $fips_libdir/fips_premain.c";
|
|
die "First stage Compile failure" if $? != 0;
|
|
} elsif (!defined($ENV{FIPS_SIG})) {
|
|
die "no fips_premain.obj linked";
|
|
}
|
|
|
|
print "$fips_link @ARGV\n";
|
|
system "$fips_link @ARGV";
|
|
die "First stage Link failure" if $? != 0;
|
|
|
|
if (defined($ENV{FIPS_SIG})) {
|
|
print "$ENV{FIPS_SIG} $fips_target\n";
|
|
system "$ENV{FIPS_SIG} $fips_target";
|
|
die "$ENV{FIPS_SIG} $fips_target failed" if $? != 0;
|
|
exit;
|
|
}
|
|
|
|
print "$fips_premain_dso $fips_target\n";
|
|
system("$fips_premain_dso $fips_target >$fips_target.sha1");
|
|
die "Get hash failure" if $? != 0;
|
|
open my $sha1_res, '<', $fips_target.".sha1" or die "Get hash failure";
|
|
$fips_hash=<$sha1_res>;
|
|
close $sha1_res;
|
|
unlink $fips_target.".sha1";
|
|
$fips_hash =~ s|\R$||; # Better chomp
|
|
die "Get hash failure" if $? != 0;
|
|
|
|
|
|
print "$fips_cc -DHMAC_SHA1_SIG=\\\"$fips_hash\\\" $fips_cc_args $fips_libdir/fips_premain.c\n";
|
|
system "$fips_cc -DHMAC_SHA1_SIG=\\\"$fips_hash\\\" $fips_cc_args $fips_libdir/fips_premain.c";
|
|
die "Second stage Compile failure" if $? != 0;
|
|
|
|
|
|
print "$fips_link @ARGV\n";
|
|
system "$fips_link @ARGV";
|
|
die "Second stage Link failure" if $? != 0;
|
|
|
|
sub is_premain_linked
|
|
{
|
|
return 1 if (grep /fips_premain\.obj/,@_);
|
|
foreach (@_)
|
|
{
|
|
if (/^@(.*)/ && -f $1)
|
|
{
|
|
open FD,$1 or die "can't open $1";
|
|
my $ret = (grep /fips_premain\.obj/,<FD>)?1:0;
|
|
close FD;
|
|
return $ret;
|
|
}
|
|
}
|
|
return 0;
|
|
}
|
|
|
|
sub check_hash
|
|
{
|
|
my ($sha1_exe, $filename) = @_;
|
|
my ($hashfile, $hashval);
|
|
|
|
open(IN, "${fips_libdir}/${filename}.sha1") || die "Cannot open file hash file ${fips_libdir}/${filename}.sha1";
|
|
$hashfile = <IN>;
|
|
close IN;
|
|
$hashval = `$sha1_exe ${fips_libdir}/$filename`;
|
|
$hashfile =~ s|\R$||; # Better chomp
|
|
$hashval =~ s|\R$||; # Better chomp
|
|
$hashfile =~ s/^.*=\s+//;
|
|
$hashval =~ s/^.*=\s+//;
|
|
die "Invalid hash syntax in file" if (length($hashfile) != 40);
|
|
die "Invalid hash received for file" if (length($hashval) != 40);
|
|
die "***HASH VALUE MISMATCH FOR FILE $filename ***" if ($hashval ne $hashfile);
|
|
}
|
|
|
|
|