aboutsummaryrefslogblamecommitdiff
path: root/GNUmakefile
blob: c7e69c3247683912b7e815fe52ca945b66ea6591 (plain) (tree)





























                                                                       






                                                                       
                        
                        

                         
                                                                    
                                                                                    
 





                              
                         

      
                                                                                       













                                                                    
                                                                                                      



                                 





                                          

          
            
                

























                                                                                                                   
# (GNU) Makefile for Cryptech PKCS #11 implementation.
#
# Author: Rob Austein
# Copyright (c) 2015, SUNET
# 
# Redistribution and use in source and binary forms, with or 
# without modification, are permitted provided that the following 
# conditions are met: 
# 
# 1. Redistributions of source code must retain the above copyright 
#    notice, this list of conditions and the following disclaimer. 
# 
# 2. Redistributions in binary form must reproduce the above copyright 
#    notice, this list of conditions and the following disclaimer in 
#    the documentation and/or other materials provided with the 
#    distribution. 
# 
# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS 
# "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT 
# LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS 
# FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE 
# COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, 
# INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, 
# BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
# LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER 
# CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, 
# STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 
# ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF 
# ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

# Whether to enable threading.  Main reason for being able to turn it
# off is that gdb on the Novena goes bananas when threading is enabled.

ifndef ENABLE_THREADS
  ENABLE_THREADS := yes
endif

LIBHAL_DIR   = ../libhal
LIBTFM_DIR   = ../libtfm
SQLITE3_DIR  = ../sqlite3

CFLAGS	+= -g3 -fPIC -Wall -std=c99 -I${LIBHAL_DIR} -I${SQLITE3_DIR}
LIBS	:= ${LIBHAL_DIR}/libhal.a ${LIBTFM_DIR}/libtfm.a ${SQLITE3_DIR}/libsqlite3.a

ifeq "${ENABLE_THREADS}" "yes"
  CFLAGS += -pthread
else
  CFLAGS += -DUSE_PTHREADS=0
endif

all: libpkcs11.so p11util

clean:
	rm -rf pkcs11.o pkcs11.so libpkcs11.so* p11util p11util.o schema.h attributes.h

distclean: clean
	rm -f TAGS

schema.h: schema.sql scripts/convert-schema.sed GNUmakefile
	sed -f scripts/convert-schema.sed <schema.sql >schema.h

attributes.h: attributes.yaml scripts/build-attributes GNUmakefile
	python scripts/build-attributes attributes.yaml attributes.h

pkcs11.o: pkcs11.c schema.h attributes.h
	${CC} ${CFLAGS} -c $<

pkcs11.so: pkcs11.o ${LIBS}
	${CC} ${CFLAGS} -shared -o $@ -Wl,-Bsymbolic-functions -Wl,-Bsymbolic -Wl,-z,noexecstack -g $^

libpkcs11.so: pkcs11.so
	objcopy -w -G 'C_*' $< $@

p11util.o: p11util.c sql_common.h schema.h
	${CC} ${CFLAGS} -c $<

p11util: p11util.o ${LIBS}
	${CC} ${CFLAGS} -o $@ -g $^

tags: TAGS

TAGS: *.[ch]
	etags $^

# Kudge for testing, gussy this up if we decide to keep it

HSMBULLY := $(firstword $(wildcard $(addsuffix /hsmbully,$(subst :, ,.:${PATH}))))

ifneq "${HSMBULLY}" ""

HSMBULLY_OPTIONS := \
	--pin fnord --so-pin fnord --pkcs11lib $(abspath libpkcs11.so) \
	--verbose=9 --fast-and-frivolous --skip-fragmentation --skip-keysizing

FNORD	:= x'98034e94dd4fc527fb8a9296eab55677cd4ce40e025d42acae3cfcc7813f3b9d'
SALT	:= x'000102030405060708090a0b0c0d0e0f'
PIN_SQL := UPDATE global SET user_pin = ${FNORD}, user_pin_salt = ${SALT}, so_pin = ${FNORD}, so_pin_salt = ${SALT}

export PKCS11_DATABASE=$(abspath .pkcs11.db)

SQLITE3_CMD := $(abspath ../sqlite3/build/sqlite3)

bully: all
	rm -f ${PKCS11_DATABASE} ${PKCS11_DATABASE}-journal
	${SQLITE3_CMD} ${PKCS11_DATABASE} <schema.sql
	${SQLITE3_CMD} -echo ${PKCS11_DATABASE} "${PIN_SQL}"
	sudo -E ${HSMBULLY} ${HSMBULLY_OPTIONS}

endif