| OLD | NEW |
| (Empty) |
| 1 #!/usr/bin/perl | |
| 2 | |
| 3 sub check_env | |
| 4 { | |
| 5 my @ret; | |
| 6 foreach (@_) | |
| 7 { | |
| 8 die "Environment variable $_ not defined!\n" unless exists $ENV{
$_}; | |
| 9 push @ret, $ENV{$_}; | |
| 10 } | |
| 11 return @ret; | |
| 12 } | |
| 13 | |
| 14 | |
| 15 my ($fips_cc,$fips_cc_args, $fips_link,$fips_target, $fips_libdir, $sha1_exe) | |
| 16 = check_env("FIPS_CC", "FIPS_CC_ARGS", "FIPS_LINK", "FIPS_TARGET", | |
| 17 "FIPSLIB_D", "FIPS_SHA1_EXE"); | |
| 18 | |
| 19 | |
| 20 | |
| 21 if (exists $ENV{"PREMAIN_DSO_EXE"}) | |
| 22 { | |
| 23 $fips_premain_dso = $ENV{"PREMAIN_DSO_EXE"}; | |
| 24 } | |
| 25 else | |
| 26 { | |
| 27 $fips_premain_dso = ""; | |
| 28 } | |
| 29 | |
| 30 check_hash($sha1_exe, "fips_premain.c"); | |
| 31 check_hash($sha1_exe, "fipscanister.lib"); | |
| 32 | |
| 33 | |
| 34 print "Integrity check OK\n"; | |
| 35 | |
| 36 print "$fips_cc $fips_cc_args $fips_libdir/fips_premain.c\n"; | |
| 37 system "$fips_cc $fips_cc_args $fips_libdir/fips_premain.c"; | |
| 38 die "First stage Compile failure" if $? != 0; | |
| 39 | |
| 40 print "$fips_link @ARGV\n"; | |
| 41 system "$fips_link @ARGV"; | |
| 42 die "First stage Link failure" if $? != 0; | |
| 43 | |
| 44 | |
| 45 print "$fips_premain_dso $fips_target\n"; | |
| 46 $fips_hash=`$fips_premain_dso $fips_target`; | |
| 47 chomp $fips_hash; | |
| 48 die "Get hash failure" if $? != 0; | |
| 49 | |
| 50 | |
| 51 print "$fips_cc -DHMAC_SHA1_SIG=\\\"$fips_hash\\\" $fips_cc_args $fips_libdir/fi
ps_premain.c\n"; | |
| 52 system "$fips_cc -DHMAC_SHA1_SIG=\\\"$fips_hash\\\" $fips_cc_args $fips_libdir/f
ips_premain.c"; | |
| 53 die "Second stage Compile failure" if $? != 0; | |
| 54 | |
| 55 | |
| 56 print "$fips_link @ARGV\n"; | |
| 57 system "$fips_link @ARGV"; | |
| 58 die "Second stage Link failure" if $? != 0; | |
| 59 | |
| 60 sub check_hash | |
| 61 { | |
| 62 my ($sha1_exe, $filename) = @_; | |
| 63 my ($hashfile, $hashval); | |
| 64 | |
| 65 open(IN, "${fips_libdir}/${filename}.sha1") || die "Cannot open file has
h file ${fips_libdir}/${filename}.sha1"; | |
| 66 $hashfile = <IN>; | |
| 67 close IN; | |
| 68 $hashval = `$sha1_exe ${fips_libdir}/$filename`; | |
| 69 chomp $hashfile; | |
| 70 chomp $hashval; | |
| 71 $hashfile =~ s/^.*=\s+//; | |
| 72 $hashval =~ s/^.*=\s+//; | |
| 73 die "Invalid hash syntax in file" if (length($hashfile) != 40); | |
| 74 die "Invalid hash received for file" if (length($hashval) != 40); | |
| 75 die "***HASH VALUE MISMATCH FOR FILE $filename ***" if ($hashval ne $has
hfile); | |
| 76 } | |
| 77 | |
| 78 | |
| OLD | NEW |