aboutsummaryrefslogtreecommitdiff
path: root/GNUmakefile
blob: a74f06a6e91dd71737ccf6a73cac26fbded5bd9e (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
# (GNU) Makefile for Cryptech PKCS #11 implementation.
#
# Author: Rob Austein
# Copyright (c) 2015, NORDUnet A/S
# All rights reserved.
#
# Redistribution and use in source and binary forms, with or without
# modification, are permitted provided that the following conditions are
# met:
# - Redistributions of source code must retain the above copyright notice,
#   this list of conditions and the following disclaimer.
#
# - Redistributions in binary form must reproduce the above copyright
#   notice, this list of conditions and the following disclaimer in the
#   documentation and/or other materials provided with the distribution.
#
# - Neither the name of the NORDUnet nor the names of its contributors may
#   be used to endorse or promote products derived from this software
#   without specific prior written permission.
#
# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
# IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
# TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A
# PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
# HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED
# TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
# PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
# LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
# NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
# SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

# Whether to enable threading.  Main reason for being able to turn it
# off is that gdb on the Novena (sometimes) goes bananas when
# threading is enabled.

ifndef ENABLE_THREADS
  ENABLE_THREADS := yes
endif

# Whether to enable debugging code that prints diagnostic information
# to stderr on various conditions (mostly failures).

ifndef ENABLE_DEBUGGING
  ENABLE_DEBUGGING := no
endif

LIBHAL_DIR   = ../libhal
LIBTFM_DIR   = ../thirdparty/libtfm
SQLITE3_DIR  = ../thirdparty/sqlite3

CFLAGS	:= -g3 -fPIC -Wall -std=c99 -I${LIBHAL_DIR} -I${SQLITE3_DIR}
SOFLAGS := -Wl,-Bsymbolic-functions -Wl,-Bsymbolic -Wl,-z,noexecstack
LIBS	:= ${LIBHAL_DIR}/libhal.a ${LIBTFM_DIR}/libtfm.a ${SQLITE3_DIR}/libsqlite3.a

ifeq "${ENABLE_THREADS}" "yes"
  CFLAGS += -pthread
else
  CFLAGS += -DUSE_PTHREADS=0
endif

ifeq "${ENABLE_DEBUGGING}" "yes"
  CFLAGS += -DDEBUG_HAL=1 -DDEBUG_PKCS11=1
endif

ifndef OBJCOPY
  OBJCOPY := objcopy
endif

all: libpkcs11.so p11util py11/attribute_map.py

clean:
	rm -rf pkcs11.o pkcs11.so libpkcs11.so* p11util p11util.o schema.h attributes.h

distclean: clean
	rm -f TAGS

schema.h: schema.sql scripts/convert-schema.sed GNUmakefile
	sed -f scripts/convert-schema.sed <schema.sql >schema.h

attributes.h: attributes.yaml scripts/build-attributes GNUmakefile
	python scripts/build-attributes attributes.yaml attributes.h

py11/attribute_map.py: attributes.yaml scripts/build-py11-attributes GNUmakefile
	python scripts/build-py11-attributes attributes.yaml py11/attribute_map.py

pkcs11.o: pkcs11.c sql_common.h schema.h attributes.h
	${CC} ${CFLAGS} -c $<

pkcs11.so: pkcs11.o ${LIBS}
	${CC} ${CFLAGS} -shared -o $@ ${SOFLAGS} $^

libpkcs11.so: pkcs11.so
	${OBJCOPY} -w -G 'C_*' $< $@

p11util.o: p11util.c sql_common.h schema.h
	${CC} ${CFLAGS} -c $<

p11util: p11util.o ${LIBS}
	${CC} ${CFLAGS} -o $@ $^

tags: TAGS

TAGS: *.[ch]
	etags $^

# Basic testing, via the Python unittest library and our py11 interface code

test: all
	sudo python unit_tests.py

# Further testing using hsmbully, if we can find a copy of it.

HSMBULLY := $(firstword $(wildcard $(addsuffix /hsmbully,$(subst :, ,.:${PATH}))))

ifneq "${HSMBULLY}" ""

  HSMBULLY_OPTIONS := \
	--pin fnord --so-pin fnord --pkcs11lib $(abspath libpkcs11.so) \
	--verbose=9 --fast-and-frivolous --skip-fragmentation --skip-keysizing

  bully: all
	export PKCS11_DATABASE=$(abspath hsmbully.pkcs11.db); \
	sudo -E rm -f ${PKCS11_DATABASE} ${PKCS11_DATABASE}-journal; \
	(echo fnord; echo fnord) | sudo -E ./p11util --set-so-pin --set-user-pin --pin-from-stdin; \
	sudo -E ${HSMBULLY} ${HSMBULLY_OPTIONS}; \
	sudo -E rm -f ${PKCS11_DATABASE} ${PKCS11_DATABASE}-journal

endif