wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2025-08-02 12:14:38 +02:00
Code Issues Packages Projects Releases Wiki Activity

FIPS Check Script with Explicit Versioning

Browse Source 
1. Remove the demo variable presets. Actually use them in testing.
2. FIPS_REPO can be set to a local file path to speed up testing.
3. Add files missing from the demo OE checkout.
4. Add the fips-read OE files.
5. Add the quiet option to grep.
This commit is contained in:
John Safranek
2023-08-17 11:54:02 -07:00
parent 98c50e05a3
commit 87695adc82
1 changed files with 19 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files

38
fips-check.sh
View File

@@ -36,9 +36,8 @@ MAKE="${MAKE:-make}"
GIT="${GIT:-git -c advice.detachedHead=false}" GIT="${GIT:-git -c advice.detachedHead=false}"
TEST_DIR="${TEST_DIR:-XXX-fips-test}" TEST_DIR="${TEST_DIR:-XXX-fips-test}"
FLAVOR="${FLAVOR:-linux}" FLAVOR="${FLAVOR:-linux}"
#KEEP="${KEEP:-no}" KEEP="${KEEP:-no}"
KEEP="${KEEP:-yes}" FIPS_REPO="${FIPS_REPO:-git@github.com:wolfssl/fips.git}"
#FIPS_REPO="${FIPS_REPO:-git@github.com:wolfssl/fips.git}"
while [ "$1" ]; do while [ "$1" ]; do
if [ "$1" = 'keep' ]; then KEEP='yes'; else FLAVOR="$1"; fi if [ "$1" = 'keep' ]; then KEEP='yes'; else FLAVOR="$1"; fi
@@ -94,7 +93,8 @@ linuxv5a)
) )
WOLFCRYPT_FILES=( WOLFCRYPT_FILES=(
'wolfcrypt/src/aes.c:WCv5.0-RC12' 'wolfcrypt/src/aes.c:WCv5.0-RC12'
'wolfcrypt/src/aes_asm.c:WCv5.0-RC12' 'wolfcrypt/src/aes_asm.S:WCv5.0-RC12'
'wolfcrypt/src/aes_gcm_asm.S:WCv5.0-RC12'
'wolfcrypt/src/cmac.c:WCv5.0-RC12' 'wolfcrypt/src/cmac.c:WCv5.0-RC12'
'wolfcrypt/src/dh.c:WCv5.0-RC12' 'wolfcrypt/src/dh.c:WCv5.0-RC12'
'wolfcrypt/src/ecc.c:WCv5.0-RC12' 'wolfcrypt/src/ecc.c:WCv5.0-RC12'
@@ -104,13 +104,11 @@ linuxv5a)
'wolfcrypt/src/rsa.c:WCv5.0-RC12' 'wolfcrypt/src/rsa.c:WCv5.0-RC12'
'wolfcrypt/src/sha.c:WCv5.0-RC12' 'wolfcrypt/src/sha.c:WCv5.0-RC12'
'wolfcrypt/src/sha256.c:WCv5.0-RC12' 'wolfcrypt/src/sha256.c:WCv5.0-RC12'
'wolfcrypt/src/sha256_asm.c:WCv5.0-RC12' 'wolfcrypt/src/sha256_asm.S:WCv5.0-RC12'
'wolfcrypt/src/sha3.c:WCv5.0-RC12' 'wolfcrypt/src/sha3.c:WCv5.0-RC12'
'wolfcrypt/src/sha512.c:WCv5.0-RC12' 'wolfcrypt/src/sha512.c:WCv5.0-RC12'
'wolfcrypt/src/sha512_asm.c:WCv5.0-RC12' 'wolfcrypt/src/sha512_asm.S:WCv5.0-RC12'
'wolfcrypt/src/aes_gcm_asm.S:WCv5.0-RC12'
'wolfssl/wolfcrypt/aes.h:WCv5.0-RC12' 'wolfssl/wolfcrypt/aes.h:WCv5.0-RC12'
'wolfssl/wolfcrypt/aes_asm.h:WCv5.0-RC12'
'wolfssl/wolfcrypt/cmac.h:WCv5.0-RC12' 'wolfssl/wolfcrypt/cmac.h:WCv5.0-RC12'
'wolfssl/wolfcrypt/dh.h:WCv5.0-RC12' 'wolfssl/wolfcrypt/dh.h:WCv5.0-RC12'
'wolfssl/wolfcrypt/ecc.h:WCv5.0-RC12' 'wolfssl/wolfcrypt/ecc.h:WCv5.0-RC12'
@@ -120,18 +118,20 @@ linuxv5a)
'wolfssl/wolfcrypt/rsa.h:WCv5.0-RC12' 'wolfssl/wolfcrypt/rsa.h:WCv5.0-RC12'
'wolfssl/wolfcrypt/sha.h:WCv5.0-RC12' 'wolfssl/wolfcrypt/sha.h:WCv5.0-RC12'
'wolfssl/wolfcrypt/sha256.h:WCv5.0-RC12' 'wolfssl/wolfcrypt/sha256.h:WCv5.0-RC12'
'wolfssl/wolfcrypt/sha256_asm.h:WCv5.0-RC12'
'wolfssl/wolfcrypt/sha3.h:WCv5.0-RC12' 'wolfssl/wolfcrypt/sha3.h:WCv5.0-RC12'
'wolfssl/wolfcrypt/sha512.h:WCv5.0-RC12' 'wolfssl/wolfcrypt/sha512.h:WCv5.0-RC12'
'wolfssl/wolfcrypt/sha512_asm.h:WCv5.0-RC12'
) )
;; ;;
#fips-ready) fips-ready)
# FIPS_OPTION='ready' FIPS_OPTION='ready'
# FIPS_VERSION='master' FIPS_FILES=('master'
# FIPS_SRCS=('fips.c' 'fips_test.c' 'wolfcrypt_first.c' 'wolfcrypt_last.c') 'wolfcrypt/src/fips.c'
# FIPS_INCS=('fips.h') 'wolfcrypt/src/fips_test.c'
# ;; 'wolfcrypt/src/wolfcrypt_first.c'
'wolfcrypt/src/wolfcrypt_last.c'
'wolfssl/wolfcrypt/fips.h'
)
;;
#fips-dev) #fips-dev)
# FIPS_OPTION='dev' # FIPS_OPTION='dev'
# FIPS_VERSION='master' # FIPS_VERSION='master'
@@ -169,7 +169,7 @@ function checkout_files() {
do do
local name=${file_entry%%:*} local name=${file_entry%%:*}
local tag=${file_entry#*:} local tag=${file_entry#*:}
if ! $GIT branch --list | grep "my$tag" if ! $GIT branch --list | grep --quiet "my$tag"
then then
$GIT branch --no-track "my$tag" "$tag" || exit $? $GIT branch --no-track "my$tag" "$tag" || exit $?
fi fi
@@ -183,7 +183,7 @@ function checkout_files() {
function copy_fips_files() { function copy_fips_files() {
local tag="$1" local tag="$1"
shift shift
if ! $GIT clone --depth 1 -b "$tag" 'git@github.com:wolfssl/fips.git' fips if ! $GIT clone --depth 1 -b "$tag" "$FIPS_REPO" fips
then then
echo "fips-check: Couldn't check out $tag from FIPS repository." echo "fips-check: Couldn't check out $tag from FIPS repository."
exit 1 exit 1
@@ -252,7 +252,7 @@ esac
if ! $MAKE if ! $MAKE
then then
echo "fips-check: Make failed. Debris left for analysis." echo 'fips-check: Make failed. Debris left for analysis.'
exit 3 exit 3
fi fi