mirror of
https://github.com/openssl/openssl.git
synced 2025-03-01 19:28:10 +08:00
848af5e8fe
libimplementations.a was a nice idea, but had a few flaws:
1. The idea to have common code in libimplementations.a and FIPS
sensitive helper functions in libfips.a / libnonfips.a didn't
catch on, and we saw full implementation ending up in them instead
and not appearing in libimplementations.a at all.
2. Because more or less ALL algorithm implementations were included
in libimplementations.a (the idea being that the appropriate
objects from it would be selected automatically by the linker when
building the shared libraries), it's very hard to find only the
implementation source that should go into the FIPS module, with
the result that the FIPS checksum mechanism include source files
that it shouldn't
To mitigate, we drop libimplementations.a, but retain the idea of
collecting implementations in static libraries. With that, we not
have:
libfips.a
Includes all implementations that should become part of the FIPS
provider.
liblegacy.a
Includes all implementations that should become part of the legacy
provider.
libdefault.a
Includes all implementations that should become part of the
default and base providers.
With this, libnonfips.a becomes irrelevant and is dropped.
libcommon.a is retained to include common provider code that can be
used uniformly by all providers.
Fixes #15157
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/15171)
44 lines
1.6 KiB
Plaintext
44 lines
1.6 KiB
Plaintext
LIBS=../libssl
|
|
|
|
#Needed for the multiblock code in rec_layer_s3.c
|
|
IF[{- !$disabled{asm} -}]
|
|
$AESDEF_x86=AES_ASM
|
|
$AESDEF_x86_64=AES_ASM
|
|
|
|
IF[$AESDEF_{- $target{asm_arch} -}]
|
|
$AESDEF=$AESDEF_{- $target{asm_arch} -}
|
|
ENDIF
|
|
ENDIF
|
|
|
|
$KTLSSRC=
|
|
IF[{- !$disabled{ktls} -}]
|
|
$KTLSSRC=ktls.c
|
|
ENDIF
|
|
|
|
#TODO: For now we just include the libcrypto packet.c in libssl as well. We
|
|
# could either continue to do it like this, or export all the WPACKET
|
|
# symbols so that libssl can use them like any other. Probably would do
|
|
# this privately so it does not become part of the public API.
|
|
SOURCE[../libssl]=\
|
|
pqueue.c ../crypto/packet.c \
|
|
statem/statem_srvr.c statem/statem_clnt.c s3_lib.c s3_enc.c record/rec_layer_s3.c \
|
|
statem/statem_lib.c statem/extensions.c statem/extensions_srvr.c \
|
|
statem/extensions_clnt.c statem/extensions_cust.c s3_msg.c \
|
|
methods.c t1_lib.c t1_enc.c tls13_enc.c \
|
|
d1_lib.c record/rec_layer_d1.c d1_msg.c \
|
|
statem/statem_dtls.c d1_srtp.c \
|
|
ssl_lib.c ssl_cert.c ssl_sess.c \
|
|
ssl_ciph.c ssl_stat.c ssl_rsa.c \
|
|
ssl_asn1.c ssl_txt.c ssl_init.c ssl_conf.c ssl_mcnf.c \
|
|
bio_ssl.c ssl_err.c ssl_err_legacy.c tls_srp.c t1_trce.c ssl_utst.c \
|
|
record/ssl3_buffer.c record/ssl3_record.c record/dtls1_bitmap.c \
|
|
statem/statem.c record/ssl3_record_tls13.c record/tls_pad.c \
|
|
tls_depr.c $KTLSSRC
|
|
IF[{- !$disabled{'deprecated-3.0'} -}]
|
|
SOURCE[../libssl]=s3_cbc.c ssl_rsa_legacy.c
|
|
ENDIF
|
|
DEFINE[../libssl]=$AESDEF
|
|
|
|
SOURCE[../providers/libcommon.a]=record/tls_pad.c
|
|
SOURCE[../providers/libdefault.a ../providers/libfips.a]=s3_cbc.c
|