From a2405c5f2019707d1a4306f152faa9ccda5f4cd5 Mon Sep 17 00:00:00 2001 From: Richard Levitte Date: Mon, 24 May 2021 14:06:00 +0200 Subject: Rework how providers/fipsmodule.cnf is produced First of all, we have concluded that we can calculate the integrity checksum with a simple perl script. Second, having the production of providers/fipsmodule.cnf as a dependency for run_tests wasn't quite right. What we really want is to generate it as soon as a new providers/fips.so is produced. That required a small bit of fiddling with how diverse dependencies are made. Fixes #15166 Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/15436) --- providers/build.info | 15 ++++----------- 1 file changed, 4 insertions(+), 11 deletions(-) (limited to 'providers/build.info') diff --git a/providers/build.info b/providers/build.info index e9ec4cf646..3f55f3aa44 100644 --- a/providers/build.info +++ b/providers/build.info @@ -114,17 +114,10 @@ IF[{- !$disabled{fips} -}] GENERATE[fips.ld]=../util/providers.num ENDIF - # For tests that try to use the FIPS module, we need to make a local fips - # module installation. We have the output go to standard output, because - # the generated commands in build templates are expected to catch that, - # and thereby keep control over the exact output file location. - IF[{- !$disabled{tests} -}] - DEPEND[|run_tests|]=fipsmodule.cnf - GENERATE[fipsmodule.cnf]=../apps/openssl fipsinstall \ - -module providers/$(FIPSMODULENAME) -provider_name fips \ - -mac_name HMAC -section_name fips_sect - DEPEND[fipsmodule.cnf]=$FIPSGOAL - ENDIF + DEPEND[|build_modules_nodep|]=fipsmodule.cnf + GENERATE[fipsmodule.cnf]=../util/mk-fipsmodule-cnf.pl \ + -module $(FIPSMODULE) -section_name fips_sect -key $(FIPSKEY) + DEPEND[fipsmodule.cnf]=$FIPSGOAL ENDIF # -- cgit v1.2.3