-#!/usr/bin/perl
+#! /usr/bin/env perl
+# Copyright 2011-2016 The OpenSSL Project Authors. All Rights Reserved.
+#
+# Licensed under the OpenSSL license (the "License"). You may not use
+# this file except in compliance with the License. You can obtain a copy
+# in the file LICENSE in the source distribution or at
+# https://www.openssl.org/source/license.html
sub check_env
{
print "Integrity check OK\n";
-print "$fips_cc $fips_cc_args $fips_libdir/fips_premain.c\n";
-system "$fips_cc $fips_cc_args $fips_libdir/fips_premain.c";
-die "First stage Compile failure" if $? != 0;
+if (is_premain_linked(@ARGV)) {
+ print "$fips_cc $fips_cc_args $fips_libdir/fips_premain.c\n";
+ system "$fips_cc $fips_cc_args $fips_libdir/fips_premain.c";
+ die "First stage Compile failure" if $? != 0;
+} elsif (!defined($ENV{FIPS_SIG})) {
+ die "no fips_premain.obj linked";
+}
print "$fips_link @ARGV\n";
system "$fips_link @ARGV";
die "First stage Link failure" if $? != 0;
+if (defined($ENV{FIPS_SIG})) {
+ print "$ENV{FIPS_SIG} $fips_target\n";
+ system "$ENV{FIPS_SIG} $fips_target";
+ die "$ENV{FIPS_SIG} $fips_target failed" if $? != 0;
+ exit;
+}
print "$fips_premain_dso $fips_target\n";
system("$fips_premain_dso $fips_target >$fips_target.sha1");
$fips_hash=<$sha1_res>;
close $sha1_res;
unlink $fips_target.".sha1";
-chomp $fips_hash;
+$fips_hash =~ s|\R$||; # Better chomp
die "Get hash failure" if $? != 0;
system "$fips_link @ARGV";
die "Second stage Link failure" if $? != 0;
+sub is_premain_linked
+ {
+ return 1 if (grep /fips_premain\.obj/,@_);
+ foreach (@_)
+ {
+ if (/^@(.*)/ && -f $1)
+ {
+ open FD,$1 or die "can't open $1";
+ my $ret = (grep /fips_premain\.obj/,<FD>)?1:0;
+ close FD;
+ return $ret;
+ }
+ }
+ return 0;
+ }
+
sub check_hash
{
my ($sha1_exe, $filename) = @_;
$hashfile = <IN>;
close IN;
$hashval = `$sha1_exe ${fips_libdir}/$filename`;
- chomp $hashfile;
- chomp $hashval;
+ $hashfile =~ s|\R$||; # Better chomp
+ $hashval =~ s|\R$||; # Better chomp
$hashfile =~ s/^.*=\s+//;
$hashval =~ s/^.*=\s+//;
die "Invalid hash syntax in file" if (length($hashfile) != 40);