mirror of
https://github.com/ARM-software/arm-trusted-firmware.git
synced 2025-04-18 02:24:18 +00:00
cf2dd17ddd
When updated to work with OpenSSL 3.0, the host tools lost their compatibility with previous versions (1.x) of OpenSSL. This is mainly due to the fact that 1.x APIs became deprecated in 3.0 and therefore their use cause compiling errors. In addition, updating for a newer version of OpenSSL meant improving the stability against security threats. However, although version 1.1.1 is now deprecated, it still receives security updates, so it would not imply major security issues to keep compatibility with it too. This patch adds backwards compatibility with OpenSSL 1.x versions by adding back 1.x API code. It defines a macro USING_OPENSSL3, which will select the appropriate OpenSSL API version depending on the OpenSSL library path chosen (which is determined by the already-existing OPENSSL_DIR variable). In addition, cleanup items were packed in functions and moved to the proper modules in order to make the code more maintainable and legible. Signed-off-by: Juan Pablo Conde <juanpablo.conde@arm.com> Change-Id: I8deceb5e419edc73277792861882404790ccd33c
111 lines
2.8 KiB
Makefile
111 lines
2.8 KiB
Makefile
#
|
|
# Copyright (c) 2015-2022, Arm Limited and Contributors. All rights reserved.
|
|
#
|
|
# SPDX-License-Identifier: BSD-3-Clause
|
|
#
|
|
|
|
PLAT := none
|
|
V ?= 0
|
|
DEBUG := 0
|
|
CRTTOOL ?= cert_create${BIN_EXT}
|
|
BINARY := $(notdir ${CRTTOOL})
|
|
COT := tbbr
|
|
|
|
MAKE_HELPERS_DIRECTORY := ../../make_helpers/
|
|
include ${MAKE_HELPERS_DIRECTORY}build_macros.mk
|
|
include ${MAKE_HELPERS_DIRECTORY}build_env.mk
|
|
include ${MAKE_HELPERS_DIRECTORY}defaults.mk
|
|
|
|
ifneq (${PLAT},none)
|
|
TF_PLATFORM_ROOT := ../../plat/
|
|
include ${MAKE_HELPERS_DIRECTORY}plat_helpers.mk
|
|
PLAT_CERT_CREATE_HELPER_MK := ${PLAT_DIR}/cert_create_tbbr.mk
|
|
endif
|
|
|
|
# Common source files.
|
|
OBJECTS := src/cert.o \
|
|
src/cmd_opt.o \
|
|
src/ext.o \
|
|
src/key.o \
|
|
src/main.o \
|
|
src/sha.o
|
|
|
|
# Chain of trust.
|
|
ifeq (${COT},tbbr)
|
|
include src/tbbr/tbbr.mk
|
|
else ifeq (${COT},dualroot)
|
|
include src/dualroot/cot.mk
|
|
else ifeq (${COT},cca)
|
|
include src/cca/cot.mk
|
|
else
|
|
$(error Unknown chain of trust ${COT})
|
|
endif
|
|
|
|
ifneq (,$(wildcard ${PLAT_CERT_CREATE_HELPER_MK}))
|
|
include ${PLAT_CERT_CREATE_HELPER_MK}
|
|
endif
|
|
|
|
# Select OpenSSL version flag according to the OpenSSL build selected
|
|
# from setting the OPENSSL_DIR path.
|
|
$(eval $(call SELECT_OPENSSL_API_VERSION))
|
|
|
|
HOSTCCFLAGS := -Wall -std=c99
|
|
|
|
ifeq (${DEBUG},1)
|
|
HOSTCCFLAGS += -g -O0 -DDEBUG -DLOG_LEVEL=40
|
|
else
|
|
HOSTCCFLAGS += -O2 -DLOG_LEVEL=20
|
|
endif
|
|
|
|
ifeq (${V},0)
|
|
Q := @
|
|
else
|
|
Q :=
|
|
endif
|
|
|
|
HOSTCCFLAGS += ${DEFINES}
|
|
# USING_OPENSSL3 flag will be added to the HOSTCCFLAGS variable with the proper
|
|
# computed value.
|
|
HOSTCCFLAGS += -DUSING_OPENSSL3=$(USING_OPENSSL3)
|
|
|
|
# Make soft links and include from local directory otherwise wrong headers
|
|
# could get pulled in from firmware tree.
|
|
INC_DIR += -I ./include -I ${PLAT_INCLUDE} -I ${OPENSSL_DIR}/include
|
|
|
|
# Include library directories where OpenSSL library files are located.
|
|
# For a normal installation (i.e.: when ${OPENSSL_DIR} = /usr or
|
|
# /usr/local), binaries are located under the ${OPENSSL_DIR}/lib/
|
|
# directory. However, for a local build of OpenSSL, the built binaries are
|
|
# located under the main project directory (i.e.: ${OPENSSL_DIR}, not
|
|
# ${OPENSSL_DIR}/lib/).
|
|
LIB_DIR := -L ${OPENSSL_DIR}/lib -L ${OPENSSL_DIR}
|
|
LIB := -lssl -lcrypto
|
|
|
|
HOSTCC ?= gcc
|
|
|
|
.PHONY: all clean realclean --openssl
|
|
|
|
all: ${BINARY}
|
|
|
|
${BINARY}: --openssl ${OBJECTS} Makefile
|
|
@echo " HOSTLD $@"
|
|
@echo 'const char build_msg[] = "Built : "__TIME__", "__DATE__; \
|
|
const char platform_msg[] = "${PLAT_MSG}";' | \
|
|
${HOSTCC} -c ${HOSTCCFLAGS} -xc - -o src/build_msg.o
|
|
${Q}${HOSTCC} src/build_msg.o ${OBJECTS} ${LIB_DIR} ${LIB} -o $@
|
|
|
|
%.o: %.c
|
|
@echo " HOSTCC $<"
|
|
${Q}${HOSTCC} -c ${HOSTCCFLAGS} ${INC_DIR} $< -o $@
|
|
|
|
--openssl:
|
|
ifeq ($(DEBUG),1)
|
|
@echo "Selected OpenSSL version: ${OPENSSL_CURRENT_VER}"
|
|
endif
|
|
|
|
clean:
|
|
$(call SHELL_DELETE_ALL, src/build_msg.o ${OBJECTS})
|
|
|
|
realclean: clean
|
|
$(call SHELL_DELETE,${BINARY})
|
|
|