build openssl-fips in KVM root-image

diff --git a/testing/scripts/recipes/009_tkm.mk b/testing/scripts/recipes/009_tkm.mk
deleted file mode 100644 (file)
index 971cd17..0000000
--- a/testing/scripts/recipes/009_tkm.mk
+++ /dev/null
@@ -1,21 +0,0 @@
-#!/usr/bin/make
-
-PKG = tkm
-SRC = http://git.codelabs.ch/git/$(PKG).git
-REV = v0.1
-
-export ADA_PROJECT_PATH=/usr/local/ada/lib/gnat
-
-all: install
-
-.$(PKG)-cloned:
-       git clone $(SRC) $(PKG)
-       cd $(PKG) && git checkout $(REV)
-       @touch $@
-
-.$(PKG)-built: .$(PKG)-cloned
-       cd $(PKG) && make tests && make
-       @touch $@
-
-install: .$(PKG)-built
-       cd $(PKG) && make install

diff --git a/testing/scripts/recipes/009_xfrm-proxy.mk b/testing/scripts/recipes/009_xfrm-proxy.mk
new file mode 100644 (file)
index 0000000..569fbfe
--- /dev/null
+++ b/testing/scripts/recipes/009_xfrm-proxy.mk
@@ -0,0 +1,21 @@
+#!/usr/bin/make
+
+PKG = xfrm-proxy
+SRC = http://git.codelabs.ch/git/$(PKG).git
+REV = v0.1
+
+export ADA_PROJECT_PATH=/usr/local/ada/lib/gnat
+
+all: install
+
+.$(PKG)-cloned:
+       git clone $(SRC) $(PKG)
+       cd $(PKG) && git checkout $(REV)
+       @touch $@
+
+.$(PKG)-built: .$(PKG)-cloned
+       cd $(PKG) && make
+       @touch $@
+
+install: .$(PKG)-built
+       cd $(PKG) && make install

diff --git a/testing/scripts/recipes/010_strongswan.mk b/testing/scripts/recipes/010_strongswan.mk
deleted file mode 100644 (file)
index 14fdebb..0000000
--- a/testing/scripts/recipes/010_strongswan.mk
+++ /dev/null
@@ -1,95 +0,0 @@
-#!/usr/bin/make
-
-PV  = $(SWANVERSION)
-PKG = strongswan-$(PV)
-TAR = $(PKG).tar.bz2
-SRC = http://download.strongswan.org/$(TAR)
-
-NUM_CPUS := $(shell getconf _NPROCESSORS_ONLN)
-
-CONFIG_OPTS = \
-       --sysconfdir=/etc \
-       --with-random-device=/dev/urandom \
-       --disable-load-warning \
-       --enable-curl \
-       --enable-soup \
-       --enable-ldap \
-       --enable-eap-aka \
-       --enable-eap-aka-3gpp2 \
-       --enable-eap-sim \
-       --enable-eap-sim-file \
-       --enable-eap-md5 \
-       --enable-md4 \
-       --enable-eap-mschapv2 \
-       --enable-eap-identity \
-       --enable-eap-radius \
-       --enable-eap-dynamic \
-       --enable-eap-tls \
-       --enable-eap-ttls \
-       --enable-eap-peap \
-       --enable-eap-tnc \
-       --enable-tnc-ifmap \
-       --enable-tnc-pdp \
-       --enable-tnc-imc \
-       --enable-tnc-imv \
-       --enable-tnccs-11 \
-       --enable-tnccs-20 \
-       --enable-tnccs-dynamic \
-       --enable-imc-test \
-       --enable-imv-test \
-       --enable-imc-scanner \
-       --enable-imv-scanner \
-       --enable-imc-os \
-       --enable-imv-os \
-       --enable-imc-attestation \
-       --enable-imv-attestation \
-       --enable-sql \
-       --enable-sqlite \
-       --enable-attr-sql \
-       --enable-mediation \
-       --enable-openssl \
-       --enable-blowfish \
-       --enable-kernel-pfkey \
-       --enable-integrity-test \
-       --enable-leak-detective \
-       --enable-load-tester \
-       --enable-test-vectors \
-       --enable-gcrypt \
-       --enable-socket-default \
-       --enable-socket-dynamic \
-       --enable-dhcp \
-       --enable-farp \
-       --enable-addrblock \
-       --enable-ctr \
-       --enable-ccm \
-       --enable-gcm \
-       --enable-cmac \
-       --enable-ha \
-       --enable-af-alg \
-       --enable-whitelist \
-       --enable-xauth-generic \
-       --enable-xauth-eap \
-       --enable-pkcs8 \
-       --enable-unity \
-       --enable-unbound \
-       --enable-ipseckey \
-       --enable-tkm
-
-export ADA_PROJECT_PATH=/usr/local/ada/lib/gnat
-
-all: install
-
-$(TAR):
-       wget $(SRC)
-
-$(PKG): $(TAR)
-       tar xfj $(TAR)
-
-configure: $(PKG)
-       cd $(PKG) && ./configure $(CONFIG_OPTS)
-
-build: configure
-       cd $(PKG) && make -j $(NUM_CPUS)
-
-install: build
-       cd $(PKG) && make install

diff --git a/testing/scripts/recipes/010_tkm.mk b/testing/scripts/recipes/010_tkm.mk
new file mode 100644 (file)
index 0000000..971cd17
--- /dev/null
+++ b/testing/scripts/recipes/010_tkm.mk
@@ -0,0 +1,21 @@
+#!/usr/bin/make
+
+PKG = tkm
+SRC = http://git.codelabs.ch/git/$(PKG).git
+REV = v0.1
+
+export ADA_PROJECT_PATH=/usr/local/ada/lib/gnat
+
+all: install
+
+.$(PKG)-cloned:
+       git clone $(SRC) $(PKG)
+       cd $(PKG) && git checkout $(REV)
+       @touch $@
+
+.$(PKG)-built: .$(PKG)-cloned
+       cd $(PKG) && make tests && make
+       @touch $@
+
+install: .$(PKG)-built
+       cd $(PKG) && make install

diff --git a/testing/scripts/recipes/011_openssl-fips.mk b/testing/scripts/recipes/011_openssl-fips.mk
new file mode 100644 (file)
index 0000000..5d28b18
--- /dev/null
+++ b/testing/scripts/recipes/011_openssl-fips.mk
@@ -0,0 +1,23 @@
+#!/usr/bin/make
+
+PV  = 2.0.3
+PKG = openssl-fips-$(PV)
+TAR = $(PKG).tar.gz
+SRC = http://www.openssl.org/source/$(TAR)
+
+all: install
+
+$(TAR):
+       wget $(SRC)
+
+$(PKG): $(TAR)
+       tar xfz $(TAR)
+
+configure: $(PKG)
+       cd $(PKG) && ./config
+
+build: configure
+       cd $(PKG) && make
+
+install: build
+       cd $(PKG) && make install

diff --git a/testing/scripts/recipes/011_xfrm-proxy.mk b/testing/scripts/recipes/011_xfrm-proxy.mk
deleted file mode 100644 (file)
index 569fbfe..0000000
--- a/testing/scripts/recipes/011_xfrm-proxy.mk
+++ /dev/null
@@ -1,21 +0,0 @@
-#!/usr/bin/make
-
-PKG = xfrm-proxy
-SRC = http://git.codelabs.ch/git/$(PKG).git
-REV = v0.1
-
-export ADA_PROJECT_PATH=/usr/local/ada/lib/gnat
-
-all: install
-
-.$(PKG)-cloned:
-       git clone $(SRC) $(PKG)
-       cd $(PKG) && git checkout $(REV)
-       @touch $@
-
-.$(PKG)-built: .$(PKG)-cloned
-       cd $(PKG) && make
-       @touch $@
-
-install: .$(PKG)-built
-       cd $(PKG) && make install

diff --git a/testing/scripts/recipes/012_openssl.mk b/testing/scripts/recipes/012_openssl.mk
new file mode 100644 (file)
index 0000000..5fcb148
--- /dev/null
+++ b/testing/scripts/recipes/012_openssl.mk
@@ -0,0 +1,26 @@
+#!/usr/bin/make
+
+PV  = 1.0.1e
+PKG = openssl-$(PV)
+TAR = $(PKG).tar.gz
+SRC = http://www.openssl.org/source/$(TAR)
+
+CONFIG_OPTS = \
+       --prefix=/usr
+all: install
+
+$(TAR):
+       wget $(SRC)
+
+$(PKG): $(TAR)
+       tar xfz $(TAR)
+
+configure: $(PKG)
+       cd $(PKG) && ./config fips shared $(CONFIG_OPTS)
+
+build: configure
+       cd $(PKG) && make
+
+install: build
+       cd $(PKG) && make install
+

diff --git a/testing/scripts/recipes/013_strongswan.mk b/testing/scripts/recipes/013_strongswan.mk
new file mode 100644 (file)
index 0000000..14fdebb
--- /dev/null
+++ b/testing/scripts/recipes/013_strongswan.mk
@@ -0,0 +1,95 @@
+#!/usr/bin/make
+
+PV  = $(SWANVERSION)
+PKG = strongswan-$(PV)
+TAR = $(PKG).tar.bz2
+SRC = http://download.strongswan.org/$(TAR)
+
+NUM_CPUS := $(shell getconf _NPROCESSORS_ONLN)
+
+CONFIG_OPTS = \
+       --sysconfdir=/etc \
+       --with-random-device=/dev/urandom \
+       --disable-load-warning \
+       --enable-curl \
+       --enable-soup \
+       --enable-ldap \
+       --enable-eap-aka \
+       --enable-eap-aka-3gpp2 \
+       --enable-eap-sim \
+       --enable-eap-sim-file \
+       --enable-eap-md5 \
+       --enable-md4 \
+       --enable-eap-mschapv2 \
+       --enable-eap-identity \
+       --enable-eap-radius \
+       --enable-eap-dynamic \
+       --enable-eap-tls \
+       --enable-eap-ttls \
+       --enable-eap-peap \
+       --enable-eap-tnc \
+       --enable-tnc-ifmap \
+       --enable-tnc-pdp \
+       --enable-tnc-imc \
+       --enable-tnc-imv \
+       --enable-tnccs-11 \
+       --enable-tnccs-20 \
+       --enable-tnccs-dynamic \
+       --enable-imc-test \
+       --enable-imv-test \
+       --enable-imc-scanner \
+       --enable-imv-scanner \
+       --enable-imc-os \
+       --enable-imv-os \
+       --enable-imc-attestation \
+       --enable-imv-attestation \
+       --enable-sql \
+       --enable-sqlite \
+       --enable-attr-sql \
+       --enable-mediation \
+       --enable-openssl \
+       --enable-blowfish \
+       --enable-kernel-pfkey \
+       --enable-integrity-test \
+       --enable-leak-detective \
+       --enable-load-tester \
+       --enable-test-vectors \
+       --enable-gcrypt \
+       --enable-socket-default \
+       --enable-socket-dynamic \
+       --enable-dhcp \
+       --enable-farp \
+       --enable-addrblock \
+       --enable-ctr \
+       --enable-ccm \
+       --enable-gcm \
+       --enable-cmac \
+       --enable-ha \
+       --enable-af-alg \
+       --enable-whitelist \
+       --enable-xauth-generic \
+       --enable-xauth-eap \
+       --enable-pkcs8 \
+       --enable-unity \
+       --enable-unbound \
+       --enable-ipseckey \
+       --enable-tkm
+
+export ADA_PROJECT_PATH=/usr/local/ada/lib/gnat
+
+all: install
+
+$(TAR):
+       wget $(SRC)
+
+$(PKG): $(TAR)
+       tar xfj $(TAR)
+
+configure: $(PKG)
+       cd $(PKG) && ./configure $(CONFIG_OPTS)
+
+build: configure
+       cd $(PKG) && make -j $(NUM_CPUS)
+
+install: build
+       cd $(PKG) && make install