sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-26 10:04:02 +03:00
Code
samba-mirror/lib/crypto/wscript_build

55 lines
1.6 KiB
Plaintext
Raw Normal View History

s4-waf: mark the wscript files as python so vim/emacs knows how to highlight them
2010-03-28 09:48:49 +11:00
#!/usr/bin/env python
crypto: Use libbsd md5 header, if available.
2012-02-06 17:47:25 +01:00
extra_deps = ''
lib:crypto: Build intel aes-ni only if GnuTLS doesn't provide AES CMAC Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Tue Dec 10 20:30:57 UTC 2019 on sn-devel-184
2019-12-10 18:06:29 +01:00
if (bld.CONFIG_SET("HAVE_AESNI_INTEL") and
not bld.CONFIG_SET('HAVE_GNUTLS_AES_CMAC')):
lib: crypto: Plumb in the Intel AES instructions. Causes: AES_set_encrypt_key() AES_set_decrypt_key() AES_encrypt() AES_decrypt() to probe for the Intel AES instructions at runtime (only once) and then call the hardware implementations if so, otherwise fall back to the software implementations. BUG: https://bugzilla.samba.org/show_bug.cgi?id=13008 Based on original work by Justin Maggard <jmaggard@netgear.com> Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
2017-09-06 11:40:02 -07:00
extra_deps += ' aesni-intel'
lib/crypto: move gnutls error wrapper to own subsystem Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
2019-06-26 16:41:05 +12:00
bld.SAMBA_SUBSYSTEM('GNUTLS_HELPERS',
lib/crypto: Add GnuTLS helper function samba_gnutls_arcfour_confounded_md5() This will avoid duplicated code as we convert arcfour_crypt_blob() into direct GnuTLS calls Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
2019-06-27 15:05:49 +12:00
source='''
gnutls_error.c
gnutls_arcfour_confounded_md5.c
lib:crypto: Add samba_gnutls_weak_crypto() Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2019-11-04 17:01:50 +01:00
gnutls_weak_crypto.c
lib/crypto: Add GnuTLS helper function samba_gnutls_arcfour_confounded_md5() This will avoid duplicated code as we convert arcfour_crypt_blob() into direct GnuTLS calls Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
2019-06-27 15:05:49 +12:00
''',
lib/crypto: Use GnuTLS RC4 for samba_gnutls_arcfour_confounded_md5() This allows Samba to use GnuTLS for drsuapi_{en,de}crypt_attribute_value() Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
2019-06-27 16:45:33 +12:00
deps='gnutls samba-errors');
lib/crypto: move gnutls error wrapper to own subsystem Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
2019-06-26 16:41:05 +12:00
lib:crypto: Prepare not to build AES or AES-CMAC if we use GnuTLS support it Samba will soon require GnuTLS >= 3.4.7. Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Adjusted by Andrew Bartlett from an earlier more comprehensive patch by Andreas Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2019-03-15 14:54:13 +01:00
bld.SAMBA_SUBSYSTEM('LIBCRYPTO_AES',
source='aes.c rijndael-alg-fst.c',
lib:crypto: Only build AES code if we need AES CMAC Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2019-12-10 18:03:57 +01:00
deps='talloc',
enabled=not bld.CONFIG_SET('HAVE_GNUTLS_AES_CMAC'))
lib:crypto: Prepare not to build AES or AES-CMAC if we use GnuTLS support it Samba will soon require GnuTLS >= 3.4.7. Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Adjusted by Andrew Bartlett from an earlier more comprehensive patch by Andreas Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2019-03-15 14:54:13 +01:00
bld.SAMBA_SUBSYSTEM('LIBCRYPTO_AES_CMAC',
source='aes_cmac_128.c',
lib:crypto: Do not build AES-CMAC if we use GnuTLS that supports it This requires GnuTLS >= 3.6.5. Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Wed Aug 21 11:14:11 UTC 2019 on sn-devel-184
2019-03-15 14:54:13 +01:00
deps='talloc',
enabled=not bld.CONFIG_SET('HAVE_GNUTLS_AES_CMAC'))
lib:crypto: Prepare not to build AES or AES-CMAC if we use GnuTLS support it Samba will soon require GnuTLS >= 3.4.7. Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Adjusted by Andrew Bartlett from an earlier more comprehensive patch by Andreas Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2019-03-15 14:54:13 +01:00
build: commit all the waf build files in the tree
2010-03-17 22:07:42 +11:00
bld.SAMBA_SUBSYSTEM('LIBCRYPTO',
lib:crypto: Don't build RC4 if we have GnuTLS >= 3.4.7 We have a GnuTLS DCEPRC backupkey implementation for the server and the test. However this is only working with GnuTLS >= 3.4.7. So we need to keep this around till we can require at least GnuTLS in a newer version. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14031 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2019-02-22 13:28:01 +01:00
source='''
md4.c
''',
deps='''
talloc
lib:crypto: Prepare not to build AES or AES-CMAC if we use GnuTLS support it Samba will soon require GnuTLS >= 3.4.7. Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Adjusted by Andrew Bartlett from an earlier more comprehensive patch by Andreas Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2019-03-15 14:54:13 +01:00
LIBCRYPTO_AES
LIBCRYPTO_AES_CMAC
lib:crypto: Don't build RC4 if we have GnuTLS >= 3.4.7 We have a GnuTLS DCEPRC backupkey implementation for the server and the test. However this is only working with GnuTLS >= 3.4.7. So we need to keep this around till we can require at least GnuTLS in a newer version. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14031 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2019-02-22 13:28:01 +01:00
''' + extra_deps)
build: commit all the waf build files in the tree
2010-03-17 22:07:42 +11:00
lib:crypto: Prepare not to build AES or AES-CMAC if we use GnuTLS support it Samba will soon require GnuTLS >= 3.4.7. Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Adjusted by Andrew Bartlett from an earlier more comprehensive patch by Andreas Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2019-03-15 14:54:13 +01:00
bld.SAMBA_SUBSYSTEM('TORTURE_LIBCRYPTO_AES_CMAC',
source='aes_cmac_128_test.c',
autoproto='aes_cmac_test_proto.h',
lib:crypto: Do not build AES-CMAC if we use GnuTLS that supports it This requires GnuTLS >= 3.6.5. Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Wed Aug 21 11:14:11 UTC 2019 on sn-devel-184
2019-03-15 14:54:13 +01:00
deps='talloc',
enabled=not bld.CONFIG_SET('HAVE_GNUTLS_AES_CMAC'))
lib:crypto: Prepare not to build AES or AES-CMAC if we use GnuTLS support it Samba will soon require GnuTLS >= 3.4.7. Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Adjusted by Andrew Bartlett from an earlier more comprehensive patch by Andreas Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2019-03-15 14:54:13 +01:00
build: commit all the waf build files in the tree
2010-03-17 22:07:42 +11:00
bld.SAMBA_SUBSYSTEM('TORTURE_LIBCRYPTO',
lib:crypto: Prepare not to build AES or AES-CMAC if we use GnuTLS support it Samba will soon require GnuTLS >= 3.4.7. Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Adjusted by Andrew Bartlett from an earlier more comprehensive patch by Andreas Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2019-03-15 14:54:13 +01:00
source='md4test.c',
lib/crypto: add aes_ccm_128 tests BUG: https://bugzilla.samba.org/show_bug.cgi?id=11451 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
2015-08-14 13:13:21 +02:00
autoproto='test_proto.h',
lib:crypto: Prepare not to build AES or AES-CMAC if we use GnuTLS support it Samba will soon require GnuTLS >= 3.4.7. Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Adjusted by Andrew Bartlett from an earlier more comprehensive patch by Andreas Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2019-03-15 14:54:13 +01:00
deps='''
LIBCRYPTO
TORTURE_LIBCRYPTO_AES_CMAC
''')
lib/crypto: implement samba.crypto Python module for RC4 Implement a small Python module that exposes arcfour_crypt_blob() function widely used in Samba C code. When Samba Python bindings are used to call LSA CreateTrustedDomainEx2, there is a need to encrypt trusted credentials with RC4 cipher. Current Samba Python code relies on Python runtime to provide RC4 cipher. However, in FIPS 140-2 mode system crypto libraries do not provide access RC4 cipher at all. According to Microsoft dochelp team, Windows is treating AuthenticationInformation blob encryption as 'plain text' in terms of FIPS 140-2, thus doing application-level encryption. Replace samba.arcfour_encrypt() implementation with a call to samba.crypto.arcfour_crypt_blob(). Signed-off-by: Alexander Bokovoy <ab@samba.org> Reviewed-by: Simo Sorce <idra@samba.org> Reviewed-by: Guenther Deschner <gd@samba.org> Autobuild-User(master): Günther Deschner <gd@samba.org> Autobuild-Date(master): Wed Mar 15 01:30:24 CET 2017 on sn-devel-144
2017-03-10 16:20:06 +02:00
build: Remove bld.gen_python_environments() This was part of --extra-python support. Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Garming Sam <garming@catalyst.net.nz>
2019-02-15 16:37:48 +13:00
bld.SAMBA_PYTHON('python_crypto',
lib:crypto: Use GnuTLS RC4 in py_crypto BUG: https://bugzilla.samba.org/show_bug.cgi?id=14031 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2019-02-22 12:59:13 +01:00
source='py_crypto.c',
deps='gnutls talloc',
realname='samba/crypto.so')
Copy Permalink