1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
|
# (GNU) Makefile for Cryptech PKCS #11 implementation.
#
# Author: Rob Austein
# Copyright (c) 2015, SUNET
#
# Redistribution and use in source and binary forms, with or
# without modification, are permitted provided that the following
# conditions are met:
#
# 1. Redistributions of source code must retain the above copyright
# notice, this list of conditions and the following disclaimer.
#
# 2. Redistributions in binary form must reproduce the above copyright
# notice, this list of conditions and the following disclaimer in
# the documentation and/or other materials provided with the
# distribution.
#
# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
# "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
# LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
# FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
# COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
# INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
# BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
# LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
# CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
# STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
# ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
# ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
# Whether to enable threading. Main reason for being able to turn it
# off is that gdb on the Novena goes bananas when threading is enabled.
ifndef ENABLE_THREADS
ENABLE_THREADS := yes
endif
LIBHAL_DIR = ../libhal
LIBTFM_DIR = ../libtfm
SQLITE3_DIR = ../sqlite3
CFLAGS += -g3 -fPIC -Wall -std=c99 -I${LIBHAL_DIR} -I${SQLITE3_DIR}
LIBS := ${LIBHAL_DIR}/libhal.a ${LIBTFM_DIR}/libtfm.a ${SQLITE3_DIR}/libsqlite3.a
ifeq "${ENABLE_THREADS}" "yes"
CFLAGS += -pthread
else
CFLAGS += -DUSE_PTHREADS=0
endif
all: libpkcs11.so p11util
clean:
rm -rf pkcs11.o pkcs11.so libpkcs11.so* p11util p11util.o schema.h attributes.h
distclean: clean
rm -f TAGS
schema.h: schema.sql scripts/convert-schema.sed GNUmakefile
sed -f scripts/convert-schema.sed <schema.sql >schema.h
attributes.h: attributes.yaml scripts/build-attributes GNUmakefile
python scripts/build-attributes attributes.yaml attributes.h
pkcs11.o: pkcs11.c sql_common.h schema.h attributes.h
${CC} ${CFLAGS} -c $<
pkcs11.so: pkcs11.o ${LIBS}
${CC} ${CFLAGS} -shared -o $@ -Wl,-Bsymbolic-functions -Wl,-Bsymbolic -Wl,-z,noexecstack -g $^
libpkcs11.so: pkcs11.so
objcopy -w -G 'C_*' $< $@
p11util.o: p11util.c sql_common.h schema.h
${CC} ${CFLAGS} -c $<
p11util: p11util.o ${LIBS}
${CC} ${CFLAGS} -o $@ -g $^
tags: TAGS
TAGS: *.[ch]
etags $^
# Kudge for testing, gussy this up if we decide to keep it
HSMBULLY := $(firstword $(wildcard $(addsuffix /hsmbully,$(subst :, ,.:${PATH}))))
ifneq "${HSMBULLY}" ""
HSMBULLY_OPTIONS := \
--pin fnord --so-pin fnord --pkcs11lib $(abspath libpkcs11.so) \
--verbose=9 --fast-and-frivolous --skip-fragmentation --skip-keysizing
FNORD := x'98034e94dd4fc527fb8a9296eab55677cd4ce40e025d42acae3cfcc7813f3b9d'
SALT := x'000102030405060708090a0b0c0d0e0f'
PIN_SQL := UPDATE global SET user_pin = ${FNORD}, user_pin_salt = ${SALT}, so_pin = ${FNORD}, so_pin_salt = ${SALT}
export PKCS11_DATABASE=$(abspath .pkcs11.db)
SQLITE3_CMD := $(abspath ../sqlite3/build/sqlite3)
bully: all
rm -f ${PKCS11_DATABASE} ${PKCS11_DATABASE}-journal
${SQLITE3_CMD} ${PKCS11_DATABASE} <schema.sql
${SQLITE3_CMD} -echo ${PKCS11_DATABASE} "${PIN_SQL}"
sudo -E ${HSMBULLY} ${HSMBULLY_OPTIONS}
endif
|
