mirror of
https://github.com/Mbed-TLS/mbedtls.git
synced 2026-03-20 19:21:09 +01:00
a1502f54f5
We put that in 3.6.0 because we wanted to minimize changes in a minor release, and in particular we wanted users to be able to build the library if they were checking out a release tag without checking out submodules recursively. That was possible because 3.6.x release tags contain the generated files. Since 4.0.0, it's completely impossible to build Mbed TLS without the `tf-psa-crypto` submodule. So there's no point in trying to allow a build without the `framework` submodule. In the libtestdriver1 build, where we copy part of the framework, copy the framework makefile as well, which is what we use to check for the presence of the framework (even though the framework makefile doesn't do anything useful after all). Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
378 lines
12 KiB
Makefile
378 lines
12 KiB
Makefile
ifndef MBEDTLS_PATH
|
|
MBEDTLS_PATH := ..
|
|
endif
|
|
|
|
TF_PSA_CRYPTO_CORE_PATH = $(MBEDTLS_PATH)/tf-psa-crypto/core
|
|
TF_PSA_CRYPTO_DRIVERS_BUILTIN_SRC_PATH = $(MBEDTLS_PATH)/tf-psa-crypto/drivers/builtin/src
|
|
|
|
# List the generated files without running a script, so that this
|
|
# works with no tooling dependencies when GEN_FILES is disabled.
|
|
GENERATED_FILES := \
|
|
mbedtls_config_check_before.h \
|
|
mbedtls_config_check_final.h \
|
|
mbedtls_config_check_user.h \
|
|
error.c \
|
|
version_features.c \
|
|
ssl_debug_helpers_generated.c
|
|
|
|
# Also list the generated files from crypto that are needed in the build,
|
|
# because we don't have the list in a consumable form.
|
|
GENERATED_FILES += \
|
|
$(TF_PSA_CRYPTO_CORE_PATH)/psa_crypto_driver_wrappers.h \
|
|
$(TF_PSA_CRYPTO_CORE_PATH)/psa_crypto_driver_wrappers_no_static.c \
|
|
$(TF_PSA_CRYPTO_CORE_PATH)/tf_psa_crypto_config_check_before.h \
|
|
$(TF_PSA_CRYPTO_CORE_PATH)/tf_psa_crypto_config_check_final.h \
|
|
$(TF_PSA_CRYPTO_CORE_PATH)/tf_psa_crypto_config_check_user.h
|
|
|
|
ifeq (,$(wildcard $(MBEDTLS_PATH)/framework/exported.make))
|
|
# Use the define keyword to get a multi-line message.
|
|
# GNU make appends ". Stop.", so tweak the ending of our message accordingly.
|
|
define error_message
|
|
$(MBEDTLS_PATH)/framework/exported.make not found.
|
|
Run `git submodule update --init` to fetch the submodule contents.
|
|
This is a fatal error
|
|
endef
|
|
$(error $(error_message))
|
|
endif
|
|
include $(MBEDTLS_PATH)/framework/exported.make
|
|
|
|
# Also see "include/mbedtls/mbedtls_config.h"
|
|
|
|
CFLAGS ?= -O2
|
|
WARNING_CFLAGS ?= -Wall -Wextra -Wformat=2 -Wno-format-nonliteral
|
|
LDFLAGS ?=
|
|
|
|
# Include ../include, ../tf-psa-crypto/include and
|
|
# ../tf-psa-crypto/drivers/builtin/include for public headers and .,
|
|
# ../tf-psa-crypto/core and ../tf-psa-crypto/drivers/builtin/src for
|
|
# private headers.
|
|
LOCAL_CFLAGS = $(WARNING_CFLAGS) -I. -I../tf-psa-crypto/core \
|
|
-I../tf-psa-crypto/drivers/builtin/src \
|
|
-I../include -I../tf-psa-crypto/include \
|
|
-I../tf-psa-crypto/drivers/builtin/include -D_FILE_OFFSET_BITS=64
|
|
LOCAL_LDFLAGS =
|
|
|
|
ifdef DEBUG
|
|
LOCAL_CFLAGS += -g3
|
|
endif
|
|
|
|
# MicroBlaze specific options:
|
|
# CFLAGS += -mno-xl-soft-mul -mxl-barrel-shift
|
|
|
|
# To compile on Plan9:
|
|
# CFLAGS += -D_BSD_EXTENSION
|
|
|
|
PERL ?= perl
|
|
|
|
ifdef WINDOWS
|
|
PYTHON ?= python
|
|
else
|
|
PYTHON ?= $(shell if type python3 >/dev/null 2>/dev/null; then echo python3; else echo python; fi)
|
|
endif
|
|
|
|
# if were running on Windows build for Windows
|
|
ifdef WINDOWS
|
|
WINDOWS_BUILD=1
|
|
else ifeq ($(shell uname -s),Darwin)
|
|
ifeq ($(AR),ar)
|
|
APPLE_BUILD ?= 1
|
|
endif
|
|
endif
|
|
|
|
ifdef WINDOWS_BUILD
|
|
LOCAL_LDFLAGS += -lbcrypt
|
|
endif
|
|
|
|
# To compile as a shared library:
|
|
ifdef SHARED
|
|
# all code is position-indep with mingw, avoid warning about useless flag
|
|
ifndef WINDOWS_BUILD
|
|
LOCAL_CFLAGS += -fPIC -fpic
|
|
endif
|
|
endif
|
|
|
|
SOEXT_TLS?=so.21
|
|
SOEXT_X509?=so.8
|
|
SOEXT_CRYPTO?=so.16
|
|
|
|
# Set AR_DASH= (empty string) to use an ar implementation that does not accept
|
|
# the - prefix for command line options (e.g. llvm-ar)
|
|
AR_DASH ?= -
|
|
|
|
ARFLAGS = $(AR_DASH)src
|
|
ifdef APPLE_BUILD
|
|
ifneq ($(APPLE_BUILD),0)
|
|
ARFLAGS = $(AR_DASH)Src
|
|
RLFLAGS = -no_warning_for_no_symbols -c
|
|
RL ?= ranlib
|
|
endif
|
|
endif
|
|
|
|
DLEXT ?= so
|
|
ifdef WINDOWS_BUILD
|
|
# Windows shared library extension:
|
|
DLEXT = dll
|
|
else ifdef APPLE_BUILD
|
|
ifneq ($(APPLE_BUILD),0)
|
|
# Mac OS X shared library extension:
|
|
DLEXT = dylib
|
|
endif
|
|
endif
|
|
|
|
OBJS_CRYPTO = $(patsubst %.c, %.o,$(wildcard $(TF_PSA_CRYPTO_CORE_PATH)/*.c $(TF_PSA_CRYPTO_DRIVERS_BUILTIN_SRC_PATH)/*.c))
|
|
GENERATED_OBJS_CRYPTO = $(TF_PSA_CRYPTO_CORE_PATH)/psa_crypto_driver_wrappers_no_static.o
|
|
OBJS_CRYPTO := $(filter-out $(GENERATED_OBJS_CRYPTO),$(OBJS_CRYPTO))
|
|
OBJS_CRYPTO += $(GENERATED_OBJS_CRYPTO)
|
|
|
|
THIRDPARTY_DIR := $(MBEDTLS_PATH)/tf-psa-crypto/drivers
|
|
include $(MBEDTLS_PATH)/tf-psa-crypto/drivers/everest/Makefile.inc
|
|
include $(MBEDTLS_PATH)/tf-psa-crypto/drivers/p256-m/Makefile.inc
|
|
LOCAL_CFLAGS+=$(THIRDPARTY_INCLUDES)
|
|
OBJS_CRYPTO+=$(THIRDPARTY_CRYPTO_OBJECTS)
|
|
|
|
OBJS_X509= \
|
|
mbedtls_config.o \
|
|
x509.o \
|
|
x509_create.o \
|
|
x509_crl.o \
|
|
x509_crt.o \
|
|
x509_csr.o \
|
|
x509_oid.o \
|
|
x509write.o \
|
|
x509write_crt.o \
|
|
x509write_csr.o \
|
|
pkcs7.o \
|
|
error.o \
|
|
# This line is intentionally left blank
|
|
|
|
OBJS_TLS= \
|
|
debug.o \
|
|
mps_reader.o \
|
|
mps_trace.o \
|
|
net_sockets.o \
|
|
ssl_cache.o \
|
|
ssl_ciphersuites.o \
|
|
ssl_client.o \
|
|
ssl_cookie.o \
|
|
ssl_debug_helpers_generated.o \
|
|
ssl_msg.o \
|
|
ssl_ticket.o \
|
|
ssl_tls.o \
|
|
ssl_tls12_client.o \
|
|
ssl_tls12_server.o \
|
|
ssl_tls13_keys.o \
|
|
ssl_tls13_client.o \
|
|
ssl_tls13_server.o \
|
|
ssl_tls13_generic.o \
|
|
timing.o \
|
|
version.o \
|
|
version_features.o \
|
|
# This line is intentionally left blank
|
|
|
|
.SILENT:
|
|
|
|
.PHONY: all static shared clean
|
|
|
|
ifndef SHARED
|
|
all: static
|
|
else
|
|
all: shared static
|
|
endif
|
|
|
|
static: libmbedcrypto.a libmbedx509.a libmbedtls.a
|
|
cd ../tests && echo "This is a seedfile that contains 64 bytes (65 on Windows)......" > seedfile
|
|
cd ../tf-psa-crypto/tests && echo "This is a seedfile that contains 64 bytes (65 on Windows)......" > seedfile
|
|
|
|
shared: libmbedcrypto.$(DLEXT) libmbedx509.$(DLEXT) libmbedtls.$(DLEXT)
|
|
|
|
# Windows builds under Mingw can fail if make tries to create archives in the same
|
|
# directory at the same time - see https://bugs.launchpad.net/gcc-arm-embedded/+bug/1848002.
|
|
# This forces builds of the .a files to be serialised.
|
|
ifdef WINDOWS
|
|
libmbedtls.a: | libmbedx509.a
|
|
libmbedx509.a: | libmbedcrypto.a
|
|
endif
|
|
|
|
# tls
|
|
libmbedtls.a: $(OBJS_TLS)
|
|
echo " AR $@"
|
|
$(AR) $(ARFLAGS) $@ $(OBJS_TLS)
|
|
ifdef APPLE_BUILD
|
|
ifneq ($(APPLE_BUILD),0)
|
|
echo " RL $@"
|
|
$(RL) $(RLFLAGS) $@
|
|
endif
|
|
endif
|
|
|
|
libmbedtls.$(SOEXT_TLS): $(OBJS_TLS) libmbedx509.so
|
|
echo " LD $@"
|
|
$(CC) -shared -Wl,-soname,$@ -o $@ $(OBJS_TLS) -L. -lmbedx509 -lmbedcrypto $(LOCAL_LDFLAGS) $(LDFLAGS)
|
|
|
|
ifneq ($(SOEXT_TLS),so)
|
|
libmbedtls.so: libmbedtls.$(SOEXT_TLS)
|
|
echo " LN $@ -> $<"
|
|
ln -sf $< $@
|
|
endif
|
|
|
|
libmbedtls.dylib: $(OBJS_TLS) libmbedx509.dylib
|
|
echo " LD $@"
|
|
$(CC) -dynamiclib -o $@ $(OBJS_TLS) -L. -lmbedx509 -lmbedcrypto $(LOCAL_LDFLAGS) $(LDFLAGS)
|
|
|
|
libmbedtls.dll: $(OBJS_TLS) libmbedx509.dll
|
|
echo " LD $@"
|
|
$(CC) -shared -Wl,-soname,$@ -Wl,--out-implib,$@.a -o $@ $(OBJS_TLS) -lws2_32 -lwinmm -lgdi32 -L. -lmbedx509 -lmbedcrypto -static-libgcc $(LOCAL_LDFLAGS) $(LDFLAGS)
|
|
|
|
# x509
|
|
libmbedx509.a: $(OBJS_X509)
|
|
echo " AR $@"
|
|
$(AR) $(ARFLAGS) $@ $(OBJS_X509)
|
|
ifdef APPLE_BUILD
|
|
ifneq ($(APPLE_BUILD),0)
|
|
echo " RL $@"
|
|
$(RL) $(RLFLAGS) $@
|
|
endif
|
|
endif
|
|
|
|
libmbedx509.$(SOEXT_X509): $(OBJS_X509) libmbedcrypto.so
|
|
echo " LD $@"
|
|
$(CC) -shared -Wl,-soname,$@ -o $@ $(OBJS_X509) -L. -lmbedcrypto $(LOCAL_LDFLAGS) $(LDFLAGS)
|
|
|
|
ifneq ($(SOEXT_X509),so)
|
|
libmbedx509.so: libmbedx509.$(SOEXT_X509)
|
|
echo " LN $@ -> $<"
|
|
ln -sf $< $@
|
|
endif
|
|
|
|
libmbedx509.dylib: $(OBJS_X509) libmbedcrypto.dylib
|
|
echo " LD $@"
|
|
$(CC) -dynamiclib -o $@ $(OBJS_X509) -L. -lmbedcrypto $(LOCAL_LDFLAGS) $(LDFLAGS)
|
|
|
|
libmbedx509.dll: $(OBJS_X509) libmbedcrypto.dll
|
|
echo " LD $@"
|
|
$(CC) -shared -Wl,-soname,$@ -Wl,--out-implib,$@.a -o $@ $(OBJS_X509) -lws2_32 -lwinmm -lgdi32 -L. -lmbedcrypto -static-libgcc $(LOCAL_LDFLAGS) $(LDFLAGS)
|
|
|
|
# crypto
|
|
libmbedcrypto.a: $(OBJS_CRYPTO)
|
|
echo " AR $@"
|
|
$(AR) $(ARFLAGS) $@ $(OBJS_CRYPTO)
|
|
ifdef APPLE_BUILD
|
|
ifneq ($(APPLE_BUILD),0)
|
|
echo " RL $@"
|
|
$(RL) $(RLFLAGS) $@
|
|
endif
|
|
endif
|
|
|
|
libmbedcrypto.$(SOEXT_CRYPTO): $(OBJS_CRYPTO)
|
|
echo " LD $@"
|
|
$(CC) -shared -Wl,-soname,$@ -o $@ $(OBJS_CRYPTO) $(LOCAL_LDFLAGS) $(LDFLAGS)
|
|
|
|
ifneq ($(SOEXT_CRYPTO),so)
|
|
libmbedcrypto.so: libmbedcrypto.$(SOEXT_CRYPTO)
|
|
echo " LN $@ -> $<"
|
|
ln -sf $< $@
|
|
endif
|
|
|
|
libmbedcrypto.dylib: $(OBJS_CRYPTO)
|
|
echo " LD $@"
|
|
$(CC) -dynamiclib -o $@ $(OBJS_CRYPTO) $(LOCAL_LDFLAGS) $(LDFLAGS)
|
|
|
|
libmbedcrypto.dll: $(OBJS_CRYPTO)
|
|
echo " LD $@"
|
|
$(CC) -shared -Wl,-soname,$@ -Wl,--out-implib,$@.a -o $@ $(OBJS_CRYPTO) -lws2_32 -lwinmm -lgdi32 -static-libgcc $(LOCAL_LDFLAGS) $(LDFLAGS)
|
|
|
|
.c.o:
|
|
echo " CC $<"
|
|
$(CC) $(LOCAL_CFLAGS) $(CFLAGS) -o $@ -c $<
|
|
|
|
.c.s:
|
|
echo " CC $<"
|
|
$(CC) $(LOCAL_CFLAGS) $(CFLAGS) -S -o $@ -c $<
|
|
|
|
.PHONY: generated_files
|
|
generated_files: $(GENERATED_FILES)
|
|
|
|
# See root Makefile
|
|
GEN_FILES ?= yes
|
|
ifdef GEN_FILES
|
|
gen_file_dep =
|
|
else
|
|
gen_file_dep = |
|
|
endif
|
|
|
|
error.c: $(gen_file_dep) ../scripts/generate_errors.pl
|
|
error.c: $(gen_file_dep) ../scripts/data_files/error.fmt
|
|
error.c: $(gen_file_dep) $(filter-out %config%,$(wildcard ../include/mbedtls/*.h))
|
|
error.c:
|
|
echo " Gen $@"
|
|
$(PERL) ../scripts/generate_errors.pl
|
|
|
|
ssl_debug_helpers_generated.c: $(gen_file_dep) ../framework/scripts/generate_ssl_debug_helpers.py
|
|
ssl_debug_helpers_generated.c: $(gen_file_dep) $(filter-out %config%,$(wildcard ../include/mbedtls/*.h))
|
|
ssl_debug_helpers_generated.c:
|
|
echo " Gen $@"
|
|
$(PYTHON) ../framework/scripts/generate_ssl_debug_helpers.py --mbedtls-root .. .
|
|
|
|
version_features.c: $(gen_file_dep) ../scripts/generate_features.pl
|
|
version_features.c: $(gen_file_dep) ../scripts/data_files/version_features.fmt
|
|
## The generated file only depends on the options that are present in mbedtls_config.h,
|
|
## not on which options are set. To avoid regenerating this file all the time
|
|
## when switching between configurations, don't declare mbedtls_config.h as a
|
|
## dependency. Remove this file from your working tree if you've just added or
|
|
## removed an option in mbedtls_config.h.
|
|
#version_features.c: ../include/mbedtls/mbedtls_config.h
|
|
version_features.c:
|
|
echo " Gen $@"
|
|
$(PERL) ../scripts/generate_features.pl
|
|
|
|
GENERATED_WRAPPER_FILES = \
|
|
$(TF_PSA_CRYPTO_CORE_PATH)/psa_crypto_driver_wrappers.h \
|
|
$(TF_PSA_CRYPTO_CORE_PATH)/psa_crypto_driver_wrappers_no_static.c
|
|
$(GENERATED_WRAPPER_FILES): ../tf-psa-crypto/scripts/generate_driver_wrappers.py
|
|
$(GENERATED_WRAPPER_FILES): ../tf-psa-crypto/scripts/data_files/driver_templates/psa_crypto_driver_wrappers.h.jinja
|
|
$(GENERATED_WRAPPER_FILES): ../tf-psa-crypto/scripts/data_files/driver_templates/psa_crypto_driver_wrappers_no_static.c.jinja
|
|
$(GENERATED_WRAPPER_FILES):
|
|
echo " Gen $(GENERATED_WRAPPER_FILES)"
|
|
$(PYTHON) ../tf-psa-crypto/scripts/generate_driver_wrappers.py $(TF_PSA_CRYPTO_CORE_PATH)
|
|
|
|
$(TF_PSA_CRYPTO_CORE_PATH)/psa_crypto.o:$(TF_PSA_CRYPTO_CORE_PATH)/psa_crypto_driver_wrappers.h
|
|
|
|
GENERATED_CONFIG_CHECK_FILES = $(shell $(PYTHON) ../scripts/generate_config_checks.py --list .)
|
|
$(GENERATED_CONFIG_CHECK_FILES): $(gen_file_dep) \
|
|
$(TF_PSA_CRYPTO_CORE_PATH)/../scripts/generate_config_checks.py \
|
|
../framework/scripts/mbedtls_framework/config_checks_generator.py
|
|
$(GENERATED_CONFIG_CHECK_FILES):
|
|
echo " Gen $(GENERATED_CONFIG_CHECK_FILES)"
|
|
$(PYTHON) ../scripts/generate_config_checks.py
|
|
|
|
mbedtls_config.o: $(GENERATED_CONFIG_CHECK_FILES)
|
|
|
|
TF_PSA_CRYPTO_GENERATED_CONFIG_CHECK_FILES = $(shell $(PYTHON) \
|
|
$(TF_PSA_CRYPTO_CORE_PATH)/../scripts/generate_config_checks.py \
|
|
--list $(TF_PSA_CRYPTO_CORE_PATH))
|
|
$(TF_PSA_CRYPTO_GENERATED_CONFIG_CHECK_FILES): $(gen_file_dep) \
|
|
../scripts/generate_config_checks.py \
|
|
../framework/scripts/mbedtls_framework/config_checks_generator.py
|
|
$(TF_PSA_CRYPTO_GENERATED_CONFIG_CHECK_FILES):
|
|
echo " Gen $(TF_PSA_CRYPTO_GENERATED_CONFIG_CHECK_FILES)"
|
|
$(PYTHON) $(TF_PSA_CRYPTO_CORE_PATH)/../scripts/generate_config_checks.py
|
|
|
|
$(TF_PSA_CRYPTO_CORE_PATH)/tf_psa_crypto_config.o: $(TF_PSA_CRYPTO_GENERATED_CONFIG_CHECK_FILES)
|
|
|
|
clean:
|
|
ifndef WINDOWS
|
|
rm -f *.o *.s libmbed*
|
|
rm -f $(OBJS_CRYPTO) $(OBJS_CRYPTO:.o=.s)
|
|
else
|
|
if exist *.o del /Q /F *.o
|
|
if exist *.s del /Q /F *.s
|
|
if exist libmbed* del /Q /F libmbed*
|
|
del /Q /F del_errors_out_if_the_file_list_is_empty_but_not_if_a_file_does_not_exist $(subst /,\,$(OBJS_CRYPTO))
|
|
endif
|
|
|
|
neat: clean
|
|
ifndef WINDOWS
|
|
rm -f $(GENERATED_FILES)
|
|
else
|
|
for %f in ($(subst /,\,$(GENERATED_FILES))) if exist %f del /Q /F %f
|
|
endif
|