mirror of
https://github.com/ibm-s390-linux/s390-tools.git
synced 2026-08-05 02:14:52 +00:00
Ingo Franzki
c56aea0fa9
Authentication with KMIP servers is based on TLS client authentication. To establish trust between zkey and the KMIP server, a client certificate must be registered with the KMIP server before a client can communicate with it. The signature key of the client's certificate is a secure key created by zkey. It can either be an RSA or an ECC key, using either CCA or EP11 type crypto adapters configured with the KMIP plugin. Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com> Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>
55 lines
2.0 KiB
Makefile
55 lines
2.0 KiB
Makefile
include ../../common.mak
|
|
|
|
VERSION = 1.0
|
|
VERM = $(shell echo $(VERSION) | cut -d '.' -f 1)
|
|
|
|
all: zkey-kmip.so
|
|
|
|
libs = $(rootdir)/libutil/libutil.a $(rootdir)/libseckey/libseckey.a
|
|
|
|
zkey-kmip.o: zkey-kmip.c zkey-kmip.h ../kms-plugin.h ../plugin-utils.h \
|
|
../cca.h ../utils.h ../pkey.h ../properties.h \
|
|
$(rootdir)include/kmipclient/kmipclient.h libkmipclient.dep
|
|
|
|
plugin-utils.o: ../plugin-utils.c ../plugin-utils.h ../kms-plugin.h
|
|
$(CC) $(ALL_CPPFLAGS) $(ALL_CFLAGS) -fPIC -c $< -o $@
|
|
|
|
properties.o: ../properties.c ../properties.h
|
|
$(CC) $(ALL_CPPFLAGS) $(ALL_CFLAGS) -fPIC -c $< -o $@
|
|
|
|
pkey.o: ../pkey.c ../pkey.h ../cca.h ../ep11.h ../utils.h ../kms-plugin.h
|
|
$(CC) $(ALL_CPPFLAGS) $(ALL_CFLAGS) -fPIC -c $< -o $@
|
|
|
|
cca.o: ../cca.c ../cca.h ../pkey.h ../ep11.h ../utils.h ../properties.h ../kms-plugin.h
|
|
$(CC) $(ALL_CPPFLAGS) $(ALL_CFLAGS) -fPIC -c $< -o $@
|
|
|
|
ep11.o: ../ep11.c ../ep11.h ../pkey.h ../cca.h ../utils.h ../kms-plugin.h
|
|
$(CC) $(ALL_CPPFLAGS) $(ALL_CFLAGS) -fPIC -c $< -o $@
|
|
|
|
utils.o: ../utils.c ../utils.h ../pkey.h ../cca.h ../ep11.h ../kms-plugin.h
|
|
$(CC) $(ALL_CPPFLAGS) $(ALL_CFLAGS) -fPIC -c $< -o $@
|
|
|
|
zkey-kmip.so: ALL_CFLAGS += -fPIC
|
|
zkey-kmip.so: LDLIBS = -L$(rootdir)/libkmipclient -lkmipclient -ldl -lcrypto
|
|
zkey-kmip.so: ALL_LDFLAGS += -shared -Wl,--version-script=zkey-kmip.map \
|
|
-Wl,-z,defs,-Bsymbolic -Wl,-soname,zkey-kmip.so.$(VERM)
|
|
zkey-kmip.so: zkey-kmip.o plugin-utils.o properties.o pkey.o cca.o ep11.o \
|
|
utils.o $(libs)
|
|
$(LINK) $(ALL_LDFLAGS) $^ $(LDLIBS) -o $@
|
|
|
|
install-libkmipclient.dep:
|
|
$(MAKE) -C $(rootdir)/libkmipclient/ TOPDIR=$(TOPDIR) ARCH=$(ARCH) install
|
|
touch install-libkmipclient.dep
|
|
|
|
libkmipclient.dep:
|
|
$(MAKE) -C $(rootdir)/libkmipclient/ TOPDIR=$(TOPDIR) ARCH=$(ARCH) all
|
|
touch libkmipclient.dep
|
|
|
|
install: all install-libkmipclient.dep zkey-kmip.so
|
|
$(INSTALL) -d -m 755 $(DESTDIR)$(ZKEYKMSPLUGINDIR)
|
|
$(INSTALL) -g $(GROUP) -o $(OWNER) -m 755 -T zkey-kmip.so $(DESTDIR)$(ZKEYKMSPLUGINDIR)/zkey-kmip.so
|
|
|
|
clean:
|
|
rm -f *.o zkey-kmip.so install-libkmipclient.dep libkmipclient.dep
|
|
|
|
.PHONY: all install clean |