#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License (the "License").
# You may not use this file except in compliance with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
# Copyright (c) 2011, 2016, Oracle and/or its affiliates. All rights reserved.
#
# Header files.
#
# Take header files from the 32-bit build. This build has the patched
# opensslconf.h (64-bit build does not). We cannot take header files from the
# proto area since it could contain headers installed for the 64-bit build.
<transform file path=usr/include/openssl/fips-140/openssl/(.+\.h)$ -> \
set action.hash $(MACH32)/include/openssl/%<1> >
set name=pkg.fmri \
value=pkg:/library/security/openssl/openssl-fips-140@$(IPS_COMPONENT_VERSION),$(BUILD_VERSION)
set name=pkg.summary value="FIPS 140-2 Capable OpenSSL libraries"
set name=pkg.human-version value=$(COMPONENT_VERSION)
set name=com.oracle.info.description \
value="the FIPS 140-2 Capable OpenSSL libraries"
set name=com.oracle.info.tpno value=$(TPNO)
set name=info.source-url value=$(COMPONENT_ARCHIVE_URL)
set name=info.upstream-url value=$(COMPONENT_PROJECT_URL)
set name=org.opensolaris.arc-caseid value=PSARC/2009/507
set name=org.opensolaris.consolidation value=$(CONSOLIDATION)
# Basic directories and a configuration file.
file etc/openssl/openssl.cnf path=etc/openssl/fips-140/openssl.cnf group=sys \
mode=0644 preserve=true
file files/audit_tags \
path=etc/security/audit_tags.d/library:security:openssl:openssl-fips-140 \
group=sys
file files/exec_attr \
path=etc/security/exec_attr.d/library:security:openssl:openssl-fips-140 \
group=sys
link path=lib/$(MACH64)/libcrypto.so.1.0.0 \
target=../openssl/fips-140/$(MACH64)/libcrypto.so.1.0.0 mediator=openssl \
mediator-implementation=fips-140
link path=lib/$(MACH64)/libssl.so.1.0.0 \
target=../openssl/fips-140/$(MACH64)/libssl.so.1.0.0 mediator=openssl \
mediator-implementation=fips-140
link path=lib/$(MACH64)/llib-lcrypto \
target=../openssl/fips-140/$(MACH64)/llib-lcrypto mediator=openssl \
mediator-implementation=fips-140
link path=lib/$(MACH64)/llib-lcrypto.ln \
target=../openssl/fips-140/$(MACH64)/llib-lcrypto.ln mediator=openssl \
mediator-implementation=fips-140
link path=lib/$(MACH64)/llib-lssl \
target=../openssl/fips-140/$(MACH64)/llib-lssl mediator=openssl \
mediator-implementation=fips-140
link path=lib/$(MACH64)/llib-lssl.ln \
target=../openssl/fips-140/$(MACH64)/llib-lssl.ln mediator=openssl \
mediator-implementation=fips-140
# Mediator links for 32-bit libraries
link path=lib/libcrypto.so.1.0.0 target=openssl/fips-140/libcrypto.so.1.0.0 \
mediator=openssl mediator-implementation=fips-140
link path=lib/libssl.so.1.0.0 target=openssl/fips-140/libssl.so.1.0.0 \
mediator=openssl mediator-implementation=fips-140
link path=lib/llib-lcrypto target=openssl/fips-140/llib-lcrypto \
mediator=openssl mediator-implementation=fips-140
link path=lib/llib-lcrypto.ln target=openssl/fips-140/llib-lcrypto.ln \
mediator=openssl mediator-implementation=fips-140
link path=lib/llib-lssl target=openssl/fips-140/llib-lssl mediator=openssl \
mediator-implementation=fips-140
link path=lib/llib-lssl.ln target=openssl/fips-140/llib-lssl.ln \
mediator=openssl mediator-implementation=fips-140
# Mediator links for 64-bit libraries
link path=lib/openssl/engines/$(MACH64)/libpk11.so.1 \
target=../../fips-140/engines/$(MACH64)/libpk11.so.1 mediator=openssl \
mediator-implementation=fips-140
link path=lib/openssl/engines/libpk11.so.1 \
target=../fips-140/engines/libpk11.so.1 mediator=openssl \
mediator-implementation=fips-140
file $(MACH32)/apps/openssl path=lib/openssl/fips-140/$(MACH32)/openssl \
owner=root group=bin mode=0555
# 64 bit libraries, lint libraries, and engines.
file $(MACH64)/libcrypto.so.1.0.0 \
path=lib/openssl/fips-140/$(MACH64)/libcrypto.so.1.0.0
file $(MACH64)/libssl.so.1.0.0 \
path=lib/openssl/fips-140/$(MACH64)/libssl.so.1.0.0
file llib-lcrypto path=lib/openssl/fips-140/$(MACH64)/llib-lcrypto
file $(MACH64)/llib-lcrypto.ln \
path=lib/openssl/fips-140/$(MACH64)/llib-lcrypto.ln
file llib-lssl path=lib/openssl/fips-140/$(MACH64)/llib-lssl
link path=lib/openssl/fips-140/64 target=$(MACH64)
file $(MACH64)/engines/libpk11.so \
path=lib/openssl/fips-140/engines/$(MACH64)/libpk11.so.1
link path=lib/openssl/fips-140/engines/libpk11.so target=libpk11.so.1
# 32 bit libraries, lint libraries, and engines.
file $(MACH32)/engines/libpk11.so path=lib/openssl/fips-140/engines/libpk11.so.1
link path=lib/openssl/fips-140/libcrypto.so target=libcrypto.so.1.0.0
file $(MACH32)/libcrypto.so.1.0.0 path=lib/openssl/fips-140/libcrypto.so.1.0.0
link path=lib/openssl/fips-140/libssl.so target=libssl.so.1.0.0
file $(MACH32)/libssl.so.1.0.0 path=lib/openssl/fips-140/libssl.so.1.0.0
file llib-lcrypto path=lib/openssl/fips-140/llib-lcrypto
file $(MACH32)/llib-lcrypto.ln path=lib/openssl/fips-140/llib-lcrypto.ln
file llib-lssl path=lib/openssl/fips-140/llib-lssl
file $(MACH32)/llib-lssl.ln path=lib/openssl/fips-140/llib-lssl.ln
# Commands.
file $(MACH64)/apps/openssl path=lib/openssl/fips-140/openssl owner=root \
group=bin mode=0555
link path=usr/bin/$(MACH32)/openssl \
target=../../../lib/openssl/fips-140/$(MACH32)/openssl mediator=openssl \
mediator-implementation=fips-140
link path=usr/bin/CA.pl target=../../lib/openssl/fips-140/CA.pl \
mediator=openssl mediator-implementation=fips-140
# Mediator links for the commands
link path=usr/bin/openssl target=../../lib/openssl/fips-140/openssl \
mediator=openssl mediator-implementation=fips-140
license openssl-fips-140.license license="OpenSSL, SSLeay"
# OpenSSL packages are now managed by 'pkg mediator', and the installation
# of 'openssl-fips-140' package requires 'openssl' package with the mediator
# change (s12_build42 or later)
depend type=optional fmri=library/security/openssl@1.0.1.6,5.12-5.12.0.0.0.42.0