diff options
Diffstat (limited to 'usr/src/common/openssl/README.SUNW')
| -rw-r--r-- | usr/src/common/openssl/README.SUNW | 49 |
1 files changed, 29 insertions, 20 deletions
diff --git a/usr/src/common/openssl/README.SUNW b/usr/src/common/openssl/README.SUNW index 3fd205870d..e7246baf58 100644 --- a/usr/src/common/openssl/README.SUNW +++ b/usr/src/common/openssl/README.SUNW @@ -1,13 +1,16 @@ # -# Copyright 2005 Sun Microsystems, Inc. All rights reserved. +# Copyright 2006 Sun Microsystems, Inc. All rights reserved. # Use is subject to license terms. # #ident "%Z%%M% %I% %E% SMI" The version of OpenSSL found in this directory was created by taking the -stock version of OpenSSL 0.9.7d from www.openssl.org and modifying some of +stock version of OpenSSL 0.9.8a from www.openssl.org and modifying some of the files to conform to Sun standards. +This work is based on previous work done on stock version of OpenSSL 0.9.7d +shipped with Solaris 10. + =================== Configure options =================== @@ -18,18 +21,22 @@ To build shared objects, ./Configure \ no-ec \ - no-mdc2 \ + no-ecdh \ + no-ecdsa \ no-rc3 \ no-rc5 \ + no-mdc2 \ no-idea \ - no-hw-cswift \ - no-hw-ncipher \ - no-hw-atalla \ - no-hw-nuron \ - no-hw-ubsec \ - no-hw-aep \ - no-hw-sureware \ - no-hw-4758-cca \ + no-hw_cswift \ + no-hw_ncipher \ + no-hw_atalla \ + no-hw_nuron \ + no-hw_ubsec \ + no-hw_aep \ + no-hw_sureware \ + no-hw_4758-cca \ + no-hw_chil \ + no-hw_gmp \ threads \ shared \ $TARGET @@ -48,6 +55,8 @@ For libcrypto.a and libssl.a used by wanboot, no-cast \ no-dso \ no-ec \ + no-ecdh \ + no-ecdsa \ no-mdc2 \ no-rc3 \ no-rc4 \ @@ -63,23 +72,23 @@ For libcrypto.a and libssl.a used by wanboot, The files differ from the original distribution =============================================== -The following files are different from the OpenSSL 0.9.7d release. +The following files are different from the OpenSSL 0.9.8a release. 1. This header file is generated by Configure. We combined four versions of this file generated by four runs of Configure. crypto/opensslconf.h -2. OpenSSL 0.9.7d has limitation in the key length for some of the crypto - algorithms. We implemented extensions that enable uses of longer key - lengths. The user needs to add SUNWcry to take advantage of this feature. - The following files are modified for this purpose. Added code is - surrounded by "#ifdef CRYPTO_UNLIMITED". +2. Due to import restrictions of several countries we limit the use of + symetric keys over 128 bits. The user needs to add SUNWcry to take advantage + of full key length. The following files are modified for this purpose. + Added code is surrounded by "#ifdef CRYPTO_UNLIMITED". crypto/bf/bf_skey.c - crypto/evp/e_aes.c crypto/evp/c_allc.c + crypto/evp/e_aes.c crypto/evp/e_bf.c + crypto/evp/e_old.c crypto/evp/e_rc4.c crypto/rc4/rc4_skey.c crypto/aes/aes_core.c @@ -128,11 +137,12 @@ The following files are different from the OpenSSL 0.9.7d release. The following files are modified for this purpose. Added code is surrounded by "#ifdef _BOOT". + crypto/opensslconf.h crypto/err/err_all.c crypto/evp/evp_key.c crypto/rand/rand_unix.c crypto/rand/randfile.c - crypto/x509v3/v3_alt.c + crypto/x509v3/v3_utl.c e_os.h @@ -142,7 +152,6 @@ The following files are different from the OpenSSL 0.9.7d release. (Note: apps/openssl.cnf is unused.) - 8. Two files were added for a clean ON build even though the OpenSSL code itself is not subject to lint checks. |