-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathopenssl.readme
308 lines (261 loc) · 10.7 KB
/
openssl.readme
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
The versions of OpenSSL currently supported for use with Mosaic are
0.9.4, 0.9.5, 0.9.7c, 0.9.7e, 0.9.7k, 0.9.7m and 0.9.8a (other versions
after 0.9.4 should work but have not been tested). DEC C is required
to build Mosaic with OpenSSL (GNU C and VAX C are still supported for
non-OpenSSL builds).
The OpenSSL package is available at http://www.openssl.org/source/
and various mirrors around the world. Note that it is your
responsibility to follow any applicable import/export restrictions
(using a mirror site within your country may avoid this issue).
If you use Mosaic with a version of OpenSSL prior to version 0.9.8c
(in the 0.9.8 branch) or 0.9.7k (in the 0.9.7 branch), please read
the file OPENSSL_SECADV_20060905.TXT in the Mosaic top level directory.
If OpenSSL is installed just for use by Mosaic, then a complete
OpenSSL build is not required. Mosaic only requires the following
OpenSSL build steps (the tcp/ip package can optionally be specified
with parameter five):
OpenSSL 0.9.4
----------------------------------------------------------------------
@MAKEVMS BUILDINF NORSAREF NODEBUG DECC
@MAKEVMS SOFTLINKS NORSAREF NODEBUG DECC
@MAKEVMS CRYPTO NORSAREF NODEBUG DECC
@MAKEVMS SSL NORSAREF NODEBUG DECC
----------------------------------------------------------------------
OpenSSL 0.9.5
----------------------------------------------------------------------
@MAKEVMS CONFIG NORSAREF NODEBUG DECC
@MAKEVMS BUILDINF NORSAREF NODEBUG DECC
@MAKEVMS SOFTLINKS NORSAREF NODEBUG DECC
@MAKEVMS CRYPTO NORSAREF NODEBUG DECC
@MAKEVMS SSL NORSAREF NODEBUG DECC
Note 1: The following fix to the 0.9.5 MAKEVMS.COM is
required for the above build steps. Change line
.OR.(P1.EQS."TEST").OR.(P1.EQS."APPS")
to
.OR.(P1.EQS."TEST").OR.(P1.EQS."APPS").OR.(P1.EQS."CONFIG")
Note 2: the 0.9.5 include file OPENSSLCONF.H created on
an Alpha or IA64 system will not work with a VAX Mosaic build.
----------------------------------------------------------------------
OpenSSL 0.9.7c
----------------------------------------------------------------------
@MAKEVMS CONFIG NORSAREF NODEBUG DECC
@MAKEVMS BUILDINF NORSAREF NODEBUG DECC
@MAKEVMS SOFTLINKS NORSAREF NODEBUG DECC
@MAKEVMS CRYPTO NORSAREF NODEBUG DECC
@MAKEVMS SSL NORSAREF NODEBUG DECC
Note 1: The following fix to the 0.9.7c O_TIME.C file should
be made prior to starting the build. Change lines 201 and 202
as indicated here:
************
File SSLROOT:[OPENSSL-0_9_7C.CRYPTO]O_TIME.C;2
201 }
202 #endif
203 }
******
File SSLROOT:[OPENSSL-0_9_7C.CRYPTO]O_TIME.C;1
201 #endif
202 }
203 }
************
Note 2: the 0.9.7c include file OPENSSLCONF.H created on
an Alpha or IA64 system will not work with a VAX Mosaic build.
----------------------------------------------------------------------
OpenSSL 0.9.7e
----------------------------------------------------------------------
USER_CCDISABLEWARNINGS := MIXLINKAGE
@MAKEVMS CONFIG NORSAREF NODEBUG DECC
@MAKEVMS BUILDINF NORSAREF NODEBUG DECC
@MAKEVMS SOFTLINKS NORSAREF NODEBUG DECC
@MAKEVMS CRYPTO NORSAREF NODEBUG DECC
@MAKEVMS SSL NORSAREF NODEBUG DECC
Note 1: The definition of symbol USER_CCDISABLEWARNINGS
is only required for VAX builds.
Note 2: the 0.9.7e include file OPENSSLCONF.H created on
an Alpha or IA64 system will not work with a VAX Mosaic build.
----------------------------------------------------------------------
OpenSSL 0.9.7k
----------------------------------------------------------------------
@MAKEVMS CONFIG "" NODEBUG DECC
@MAKEVMS BUILDINF "" NODEBUG DECC
@MAKEVMS SOFTLINKS "" NODEBUG DECC
@MAKEVMS CRYPTO "" NODEBUG DECC
@MAKEVMS SSL "" NODEBUG DECC
Note 1: The following fixes to the 0.9.7k INSTALL.COM and
[.FIPS-1_0]INSTALL.COM files should be made prior to starting
the build. Change "FIPS" to "FIPS-1_0" in INSTALL.COM and
"SHA1" to "SHA" in [.FIPS-1_0]INSTALL.COM as indicated below:
************
File S4:[OPENSSL.OPENSSL-0_9_7K]INSTALL.COM;2
55 $ DIRS := CRYPTO,FIPS-1_0,SSL,APPS,VMS!,RSAREF,TEST,TOOLS
56 $ EXHEADER := e_os2.h
******
File S4:[OPENSSL.OPENSSL-0_9_7K]INSTALL.COM;1
55 $ DIRS := CRYPTO,FIPS,SSL,APPS,VMS!,RSAREF,TEST,TOOLS
56 $ EXHEADER := e_os2.h
************
************
File S4:[OPENSSL.OPENSSL-0_9_7K.FIPS-1_0]INSTALL.COM;2
29 $ FDIRS := ,RAND,SHA,DES,AES,DSA,RSA,DH,HMAC
30 $ EXHEADER_ := fips.h
******
File S4:[OPENSSL.OPENSSL-0_9_7K.FIPS-1_0]INSTALL.COM;1
29 $ FDIRS := ,RAND,SHA1,DES,AES,DSA,RSA,DH,HMAC
30 $ EXHEADER_ := fips.h
************
Note 2: The following fixes to the 0.9.7k MAKEVMS.COM and
[.FIPS-1_0.SHA]FIPS_SHA.H files should be made prior to
starting a build on VAX. Add a new line 313 to MAKEVMS.COM
and move line 170 to line 159 in FIPS_SHA.H as indicated:
************
File S4:[OPENSSL.OPENSSL-0_9_7K]MAKEVMS.COM;2
313 $ WRITE H_FILE "#define OPENSSL_NO_SHA512"
314 $!
******
File S4:[OPENSSL.OPENSSL-0_9_7K]MAKEVMS.COM;1
313 $!
************
************
File S4:[OPENSSL.OPENSSL-0_9_7K.FIPS-1_0.SHA]FIPS_SHA.H;2
159 #ifndef OPENSSL_NO_SHA512
160 typedef struct SHA512state_st
******
File S4:[OPENSSL.OPENSSL-0_9_7K.FIPS-1_0.SHA]FIPS_SHA.H;1
159 typedef struct SHA512state_st
************
************
File S4:[OPENSSL.OPENSSL-0_9_7K.FIPS-1_0.SHA]FIPS_SHA.H;2
171 int SHA384_Init(SHA512_CTX *c);
******
File S4:[OPENSSL.OPENSSL-0_9_7K.FIPS-1_0.SHA]FIPS_SHA.H;1
170 #ifndef OPENSSL_NO_SHA512
171 int SHA384_Init(SHA512_CTX *c);
************
Note 3: the 0.9.7k include file OPENSSLCONF.H created on
an Alpha or IA64 system will not work with a VAX Mosaic build.
----------------------------------------------------------------------
OpenSSL 0.9.7m
----------------------------------------------------------------------
@MAKEVMS CONFIG "" NODEBUG DECC
@MAKEVMS BUILDINF "" NODEBUG DECC
@MAKEVMS SOFTLINKS "" NODEBUG DECC
@MAKEVMS CRYPTO "" NODEBUG DECC
@MAKEVMS SSL "" NODEBUG DECC
Note 1: The following fixes to the 0.9.7m MAKEVMS.COM and
[.FIPS-1_0.SHA]FIPS_SHA.H files should be made prior to
starting a build on VAX. Add a new line 313 to MAKEVMS.COM
and move line 170 to line 159 in FIPS_SHA.H as indicated:
************
File S4:[OPENSSL.OPENSSL-0_9_7M]MAKEVMS.COM;2
313 $ WRITE H_FILE "#define OPENSSL_NO_SHA512"
314 $!
******
File S4:[OPENSSL.OPENSSL-0_9_7M]MAKEVMS.COM;1
313 $!
************
************
File S4:[OPENSSL.OPENSSL-0_9_7M.FIPS-1_0.SHA]FIPS_SHA.H;2
159 #ifndef OPENSSL_NO_SHA512
160 typedef struct SHA512state_st
******
File S4:[OPENSSL.OPENSSL-0_9_7M.FIPS-1_0.SHA]FIPS_SHA.H;1
159 typedef struct SHA512state_st
************
************
File S4:[OPENSSL.OPENSSL-0_9_7M.FIPS-1_0.SHA]FIPS_SHA.H;2
171 int SHA384_Init(SHA512_CTX *c);
******
File S4:[OPENSSL.OPENSSL-0_9_7M.FIPS-1_0.SHA]FIPS_SHA.H;1
170 #ifndef OPENSSL_NO_SHA512
171 int SHA384_Init(SHA512_CTX *c);
************
Note 2: the 0.9.7m include file OPENSSLCONF.H created on
an Alpha or IA64 system will not work with a VAX Mosaic build.
----------------------------------------------------------------------
OpenSSL 0.9.8a
----------------------------------------------------------------------
USER_CCDISABLEWARNINGS = "MIXLINKAGE,EMPTYFILE"
@MAKEVMS CONFIG "" NODEBUG DECC
@MAKEVMS BUILDINF "" NODEBUG DECC
@MAKEVMS SOFTLINKS "" NODEBUG DECC
@MAKEVMS CRYPTO "" NODEBUG DECC
@MAKEVMS SSL "" NODEBUG DECC
Note 1: The following fix to the 0.9.8a [.CRYPTO]INSTALL.COM
file should be made prior to starting the build. Add ",PQUEUE"
to the end of line 43 and add a new line 92 as indicated below:
************
File S4:[OPENSSL.OPENSSL-0_9_8A.CRYPTO]INSTALL.COM;2
43 STORE,PQUEUE
44 $ EXHEADER_ := crypto.h,tmdiff.h,opensslv.h,opensslconf.h,ebcdic.h
******
File S4:[OPENSSL.OPENSSL-0_9_8A.CRYPTO]INSTALL.COM;1
43 STORE
44 $ EXHEADER_ := crypto.h,tmdiff.h,opensslv.h,opensslconf.h,ebcdic.h
************
************
File S4:[OPENSSL.OPENSSL-0_9_8A.CRYPTO]INSTALL.COM;2
92 $ EXHEADER_PQUEUE := pqueue.h,pq_compat.h
93 $ LIBS := LIBCRYPTO
******
File S4:[OPENSSL.OPENSSL-0_9_8A.CRYPTO]INSTALL.COM;1
92 $ LIBS := LIBCRYPTO
************
Note 2: The following change to the 0.9.8a MAKEVMS.COM file
should be made prior to starting a build on VAX. Add a new
line 323 as indicated:
************
File S4:[OPENSSL.OPENSSL-0_9_8A]MAKEVMS.COM;2
323 $ WRITE H_FILE "#define OPENSSL_NO_SHA512"
324 $!
******
File S4:[OPENSSL.OPENSSL-0_9_8A]MAKEVMS.COM;1
323 $!
************
Note 3: The definition of symbol USER_CCDISABLEWARNINGS
is only required for VAX builds.
Note 4: the 0.9.8a include file OPENSSLCONF.H created on
an Alpha or IA64 system will not work with a VAX Mosaic build.
----------------------------------------------------------------------
OpenSSL 0.9.8e
----------------------------------------------------------------------
@MAKEVMS CONFIG "" NODEBUG DECC
@MAKEVMS BUILDINF "" NODEBUG DECC
@MAKEVMS SOFTLINKS "" NODEBUG DECC
@MAKEVMS CRYPTO "" NODEBUG DECC
@MAKEVMS SSL "" NODEBUG DECC
Note 1: The following fixes to the 0.9.8e MAKEVMS.COM
should be made prior to starting a build on VAX. Add a
new line 323 to MAKEVMS.COM.
************
File S4:[OPENSSL.OPENSSL-0_9_8E]MAKEVMS.COM;2
323 $ WRITE H_FILE "#define OPENSSL_NO_SHA512"
324 $!
******
File S4:[OPENSSL.OPENSSL-0_9_8E]MAKEVMS.COM;1
323 $!
************
Note 2: the 0.9.8e include file OPENSSLCONF.H created on
an Alpha or IA64 system will not work with a VAX Mosaic build.
----------------------------------------------------------------------
Once the build is complete, then
@INSTALL <root>
where <root> is the directory in which the built OpenSSL will be
placed. Then in [.VMS] of that directory
@OPENSSL_STARTUP
or
@OPENSSL_STARTUP "/SYSTEM" ! Logicals defined /SYSTEM
to define the logicals needed by the Mosaic build. Once Mosaic
is built, the OpenSSL package can be removed from the system if
SSL certificate verification is not needed. However, the files
in the <root> directory should be kept so that Mosaic can be
rebuilt, as needed, in the future. If certificate verification
support is desired, then the file CERT.PEM provided with Mosaic
should be copied to the SSLCERTS directory with world read access.
--------------------------------------------------------------------
Each user of VMS Mosaic built with OpenSSL is responsible for
their compliance with all legal issues concerning that use. The
developer takes no responsibility for any mis-use. The CERT.PEM
file provided is suitable for use with VMS Mosaic, but may not be
suitable for other purposes.
--------------------------------------------------------------------
George Cook
21-Aug-2007