1# 2# Copyright 2006 Sun Microsystems, Inc. All rights reserved. 3# Use is subject to license terms. 4# 5#ident "%Z%%M% %I% %E% SMI" 6 7The version of OpenSSL found in this directory was created by taking the 8stock version of OpenSSL 0.9.8a from www.openssl.org and modifying some of 9the files to conform to Sun standards. 10 11This work is based on previous work done on stock version of OpenSSL 0.9.7d 12shipped with Solaris 10. 13 14=================== 15Configure options 16=================== 17 18Below are the options and the targets given to the Configure script. 19 20To build shared objects, 21 22 ./Configure \ 23 no-ec \ 24 no-ecdh \ 25 no-ecdsa \ 26 no-rc3 \ 27 no-rc5 \ 28 no-mdc2 \ 29 no-idea \ 30 no-hw_cswift \ 31 no-hw_ncipher \ 32 no-hw_atalla \ 33 no-hw_nuron \ 34 no-hw_ubsec \ 35 no-hw_aep \ 36 no-hw_sureware \ 37 no-hw_4758-cca \ 38 no-hw_chil \ 39 no-hw_gmp \ 40 threads \ 41 shared \ 42 $TARGET 43 44, where TARGET is one of the three, depending on the target architecture: 45 46 solaris-sparcv8-cc (sparc) 47 solaris64-sparcv9-cc (sparcv9) 48 solaris-x86-cc (i386) 49 50 51For libcrypto.a and libssl.a used by wanboot, 52 53 ./Configure \ 54 no-aes \ 55 no-cast \ 56 no-dso \ 57 no-ec \ 58 no-ecdh \ 59 no-ecdsa \ 60 no-mdc2 \ 61 no-rc3 \ 62 no-rc4 \ 63 no-rc5 \ 64 no-ripemd \ 65 no-idea \ 66 no-hw \ 67 no-threads \ 68 solaris64-sparcv9-cc 69 70 71=============================================== 72The files differ from the original distribution 73=============================================== 74 75The following files are different from the OpenSSL 0.9.8a release. 76 771. This header file is generated by Configure. We combined four versions of 78 this file generated by four runs of Configure. 79 80 crypto/opensslconf.h 81 822. Due to import restrictions of several countries we limit the use of 83 symetric keys over 128 bits. The user needs to add SUNWcry to take advantage 84 of full key length. The following files are modified for this purpose. 85 Added code is surrounded by "#ifdef CRYPTO_UNLIMITED". 86 87 crypto/bf/bf_skey.c 88 crypto/evp/c_allc.c 89 crypto/evp/e_aes.c 90 crypto/evp/e_bf.c 91 crypto/evp/e_old.c 92 crypto/evp/e_rc4.c 93 crypto/rc4/rc4_skey.c 94 crypto/aes/aes_core.c 95 ssl/ssl_ciph.c 96 ssl/ssl_algs.c 97 ssl/ssl.h 98 993. Solaris OpenSSL supports PKCS#11 engine. 100 This code may go back to the open-source community in the future. 101 102 The following files were created. 103 104 crypto/engine/hw_pk11_err.h 105 crypto/engine/hw_pk11.c 106 crypto/engine/hw_pk11_err.c 107 crypto/engine/hw_pk11_pub.c 108 109 The following files were modified. 110 111 crypto/engine/engine.h 112 113 1144. The openssl command was modified to let the user know the needs of 115 a package SUNWcry when it is not installed. 116 Added code is surrounded by "#ifdef SOLARIS_OPENSSL". 117 118 apps/gendsa.c 119 apps/genrsa.c 120 apps/pkcs12.c 121 apps/smime.c 122 apps/speed.c 123 124 Also, a new file was added. 125 crypto/sunw.c 126 127 1285. These files were modified to load the PKCS#11 engine. 129 Added code is surrounded by "#ifdef SOLARIS_OPENSSL". 130 131 crypto/engine/eng_cnf.c 132 crypto/engine/hw_pk11.c 133 134 1356. We have a special case where OpenSSL is used by the "wanboot" binary 136 program, that is run to boot the wanboot client. 137 The following files are modified for this purpose. Added code is 138 surrounded by "#ifdef _BOOT". 139 140 crypto/opensslconf.h 141 crypto/err/err_all.c 142 crypto/evp/evp_key.c 143 crypto/rand/rand_unix.c 144 crypto/rand/randfile.c 145 crypto/x509v3/v3_utl.c 146 e_os.h 147 148 1497. The configuration file was modified to ship with Solaris defaults. 150 151 $SRC/cmd/openssl/openssl.cnf 152 (Note: apps/openssl.cnf is unused.) 153 154 1558. Two files were added for a clean ON build even though the OpenSSL 156 code itself is not subject to lint checks. 157 158 crypto/llib-lcrypto 159 ssl/llib-lssl 160 1619. And, finally, this file was added. 162 163 README.SUNW 164