363N/A# The contents of this file are subject to the terms of the 363N/A# Common Development and Distribution License (the "License"). 363N/A# You may not use this file except in compliance with the License. 363N/A# See the License for the specific language governing permissions 363N/A# and limitations under the License. 363N/A# When distributing Covered Code, include this CDDL HEADER in each 363N/A# If applicable, add the following below this CDDL HEADER, with the 363N/A# fields enclosed by brackets "[]" replaced with your own identifying 363N/A# information: Portions Copyright [yyyy] [name of copyright owner] 5376N/A# Copyright (c) 2011, 2016, Oracle and/or its affiliates. All rights reserved. 7161N/A# Note: COMPONENT_VERSION is the core OpenSSL version, and IPS_COMPONENT_VERSION 7161N/A# is the FIPS module version. The COMPONENT_VERSION changes with the core 7161N/A# OpenSSL version, but the IPS_COMPONENT_VERSION is purposely only to change if 7161N/A# the FIPS module version changes. 7161N/A# Clone the patch files to the patches-all dir. 7161N/A# COPY_COMMON_FILES is there so that rsync is called as soon as 363N/A# OpenSSL does not use autoconf but its own configure system. 363N/A# Used in the configure options below. 363N/A# What we do here follows the OpenSSL FIPS-140 User Guide instructions. 7161N/A# Ignore default CC_FOR_BUILD, CC, and CXX in CONFIGURE_ENV. 363N/A# We use OpenSSL install code for installing only manual pages and we do that 363N/A# for 32-bit version only. 2369N/A# MD2 is not enabled by default in OpensSSL but some software we have in 2369N/A# Userland needs it. One example is nmap. 363N/A# We define our own compiler and linker option sets for Solaris. See Configure 363N/A# Some additional options needed for our engines. 363N/A# OpenSSL has its own configure system which must be run from the fully 363N/A# populated source code directory. However, the Userland configuration phase is 363N/A# run from the build directory. The easiest way to workaround it is to copy all 363N/A# the source files there. 363N/A# 64 bits. Depending on the configuration option, OpenSSL's Configure script 363N/A# header file usable on both architectures. The patch was generated against the 7161N/A# We must make sure that openssl-fips component is built before this openssl-fips-140 363N/A# component since in order to build FIPS-140 certified libraries, the canister 363N/A# is needed. Note that we must unset BITS that would override the same variable 363N/A# used in openssl-fips' Makefile, and we would end up up with both canisters 363N/A# built in 64 (or 32) bits. 365N/A# download, clean, and clobber should all propogate to the fips bits 363N/A# We do not ship our engines as patches since it would be more difficult to 363N/A# update the files which have been under continuous development. We rather copy 363N/A# the files to the right directories and let OpenSSL makefiles build it. 2369N/A# We also copy some FIPS specific header files needed to build FIPS version 3091N/A# of OpenSSL from FIPS module. 363N/A# OpenSSL does not install into <dir>/$(MACH64) for 64-bit install so no such 363N/A# directory is created and Userland install code would fail when installing lint 363N/A# see the comment in Makefile in there for more information. 363N/A# the build directory. If we do not do that, lint will complain about md2.h 363N/A# Set modified lint flags for our lint library targets. 4282N/A# There are also separate STC test suites 'openssl' and 'openssl-engine' 4282N/A# for regression testing. These internal tests are unit tests only.