363N/A#

363N/A# CDDL HEADER START

363N/A#

363N/A# The contents of this file are subject to the terms of the

363N/A# Common Development and Distribution License (the "License").

363N/A# You may not use this file except in compliance with the License.

363N/A#

363N/A# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE

363N/A# or http://www.opensolaris.org/os/licensing.

363N/A# See the License for the specific language governing permissions

363N/A# and limitations under the License.

363N/A#

363N/A# When distributing Covered Code, include this CDDL HEADER in each

363N/A# file and include the License file at usr/src/OPENSOLARIS.LICENSE.

363N/A# If applicable, add the following below this CDDL HEADER, with the

363N/A# fields enclosed by brackets "[]" replaced with your own identifying

363N/A# information: Portions Copyright [yyyy] [name of copyright owner]

363N/A#

363N/A# CDDL HEADER END

363N/A#

777N/A# Copyright (c) 2009, 2012, Oracle and/or its affiliates. All rights reserved.

363N/A#

363N/A

363N/ABuild Layout

363N/A---

363N/A

777N/AOpenSSL build is run four times. Once for regular dynamic 1.0.0 non-fips, once

777N/Afor static 1.0.0 bits to link with standalone wanboot binary, once for 0.9.8

363N/Afips-140, and once for 0.9.8 FIPS-140 canister (in the openssl-fips component)

777N/Aneeded to build 0.9.8 FIPS-140 certified libraries. All builds apart from

777N/Astatic libraries for wanboot are done for 32 and 64 bits. So, in total, OpenSSL

777N/Ais built seven times.

363N/A

777N/AFor more details on OpenSSL for wanboot see openssl-1.0.0-wanboot/README.

363N/ASee also comments in all three Makefiles for more information.

363N/A

363N/AThe non-fips Build.

363N/A---

363N/A

363N/AThe non-fips build is the main build of OpenSSL and includes the regular

363N/Abinaries, libraries, man pages, and header files.

363N/A

363N/APatches

363N/A---

363N/A

363N/AGive CA.pl better defaults. See 6193522 for more information.

363N/A

363N/AMake sure the HMAC_CTX_init(3) man page gets delivered. See 6546806 for

363N/Amore information.

363N/A

363N/AForce openssl to install man pages into man[1357]openssl instead of man[1357].

363N/A

363N/APatch which adds the pkcs11 engine. See also the pkcs11-engine/

363N/Asub-directory.

363N/A

363N/AAdds four Solaris specific configurations (both 32bit and 64bit for both sparc

363N/Aand x86) to Configure which are then explicitly used by the Makefiles.

363N/A

363N/ACare should be taken if modifying this patch as changes to compile-time options

363N/Acan change the ABI. One example of this is the use of RC4_INT vs RC4_CHAR.

363N/A

363N/APrevent build binaries having an unnecessary runpath (/lib).

363N/A

363N/ABuild with non-executable stacks and non-executable data (x86).

363N/A

363N/AModifies Makefile.shared so that libssl is built with -znodelete.

363N/A

363N/AAdds a new "enginesdir" option to the Configure script which allows a user to

363N/Aspecify the engines directory.

363N/A

363N/AModifies engines/Makefile so that the devcrypto engine will be built in the

363N/A"engines" directory.

363N/A

419N/AX86-only patch.

419N/AAdd a built-in engine, aesni, to support X86 AES-NI instructions, along with

419N/Afiles engines/aesni/aesni-x86[_64].pl.

419N/AThis patch is for OpenSSL 1.0.0d. For newer OpenSSL versions, a newer patch

419N/Amay be needed.

419N/A

426N/ASPARC-only patch.

426N/AAdd a built-in engine, t4, to support SPARC T4 crypto instructions.

426N/Aalong with files in directory engines/t4.

426N/A

363N/AModifies opensslconf.h so that it is suitable for both 32bit and 64bit installs.

363N/AOpenSSL either builds for 32bit or 64bit - it doesn't allow for combined 32bit

363N/Aand 64bit builds.

363N/A

363N/AThe fips Build

363N/A---

363N/A

363N/AFIPS-140 certified libraries for Solaris private use. We wait for OpenSSL 1.0.0

363N/Ato be FIPS-140 certified in which time we can ship only 1.0.0 with S11 and make

363N/Ait a public interface.

363N/A

363N/APatches

363N/A---

363N/A

363N/AAll the patches from 1.0.0 are used in 0.9.8 as well aside from

363N/A14-manpage_openssl.patch which is not needed since we do not deliver 0.9.8 man

363N/Apages. Additional patches:

363N/A

363N/AFixing a bug introduces in 0.9.8q and fixed in 0.9.8r.

363N/A

363N/AWorkaround so that fingerprinting the canister during runtime and comparing it

363N/Awith the saved fingerprint works correctly.