From d053217223eff6e329da84b4d2e0c73d95e1a00f Mon Sep 17 00:00:00 2001

From: Jaroslav Rohel <jrohel@redhat.com>

Date: Thu, 28 Mar 2019 12:56:08 +0100

Subject: [PATCH] Add support for computing hashes using OpenSSL

---

 CMakeLists.txt       | 11 ++++++++++-

 src/CMakeLists.txt   | 15 ++++++++++-----

 src/chksum.c         | 32 ++++++++++++++++++++++++++++++++

 tools/CMakeLists.txt |  2 +-

 4 files changed, 53 insertions(+), 7 deletions(-)

diff --git a/CMakeLists.txt b/CMakeLists.txt

index ab385f1..b2a0b72 100644

--- a/CMakeLists.txt

+++ b/CMakeLists.txt

@@ -38,6 +38,7 @@ OPTION (ENABLE_ZSTD_COMPRESSION "Build with zstd compression support?" OFF)

 OPTION (ENABLE_ZCHUNK_COMPRESSION "Build with zchunk compression support?" OFF)

 OPTION (WITH_SYSTEM_ZCHUNK "Use system zchunk library?" OFF)

 OPTION (WITH_LIBXML2  "Build with libxml2 instead of libexpat?" OFF)

+OPTION (WITH_OPENSSL "Use OpenSSL instead of internal implementation of hashes?" OFF)

 # Library

 IF (DEFINED LIB)

@@ -177,6 +178,11 @@ INCLUDE_DIRECTORIES (${EXPAT_INCLUDE_DIRS})

 ENDIF (WITH_LIBXML2 )

 ENDIF (ENABLE_RPMMD OR ENABLE_SUSEREPO OR ENABLE_APPDATA OR ENABLE_COMPS OR ENABLE_HELIXREPO OR ENABLE_MDKREPO)

+IF (WITH_OPENSSL)

+FIND_PACKAGE (OpenSSL REQUIRED)

+INCLUDE_DIRECTORIES (${OPENSSL_INCLUDE_DIR})

+ENDIF(WITH_OPENSSL)

+

 IF (ENABLE_ZLIB_COMPRESSION)

 FIND_PACKAGE (ZLIB REQUIRED)

 INCLUDE_DIRECTORIES (${ZLIB_INCLUDE_DIRS})

@@ -287,7 +293,7 @@ ENDIF (${CMAKE_MAJOR_VERSION} GREATER 2)

 # should create config.h with #cmakedefine instead...

 FOREACH (VAR HAVE_STRCHRNUL HAVE_FOPENCOOKIE HAVE_FUNOPEN WORDS_BIGENDIAN

-  HAVE_RPM_DB_H HAVE_PGPDIGGETPARAMS WITH_LIBXML2 )

+  HAVE_RPM_DB_H HAVE_PGPDIGGETPARAMS WITH_LIBXML2 WITH_OPENSSL)

   IF(${VAR})

     ADD_DEFINITIONS (-D${VAR}=1)

     SET (SWIG_FLAGS ${SWIG_FLAGS} -D${VAR})

@@ -419,6 +425,9 @@ ENDIF (ENABLE_ZSTD_COMPRESSION)

 IF (WITH_SYSTEM_ZCHUNK)

 SET (SYSTEM_LIBRARIES ${SYSTEM_LIBRARIES} ${ZCHUNK_LIBRARIES})

 ENDIF (WITH_SYSTEM_ZCHUNK)

+IF (WITH_OPENSSL)

+SET (SYSTEM_LIBRARIES ${SYSTEM_LIBRARIES} ${OPENSSL_CRYPTO_LIBRARY})

+ENDIF (WITH_OPENSSL)

 IF (ENABLE_RPMDB)

 SET (SYSTEM_LIBRARIES ${RPMDB_LIBRARY} ${SYSTEM_LIBRARIES})

 ENDIF (ENABLE_RPMDB)

diff --git a/src/CMakeLists.txt b/src/CMakeLists.txt

index be487a7..fc3092a 100644

--- a/src/CMakeLists.txt

+++ b/src/CMakeLists.txt

@@ -18,9 +18,8 @@ SET (libsolv_SRCS

     solver.c solverdebug.c repo_solv.c repo_write.c evr.c pool.c

     queue.c repo.c repodata.c repopage.c util.c policy.c solvable.c

     transaction.c order.c rules.c problems.c linkedpkg.c cplxdeps.c

-    chksum.c md5.c sha1.c sha2.c solvversion.c selection.c

-    fileprovides.c diskusage.c suse.c solver_util.c cleandeps.c

-    userinstalled.c filelistfilter.c)

+    chksum.c solvversion.c selection.c fileprovides.c diskusage.c

+    suse.c solver_util.c cleandeps.c userinstalled.c filelistfilter.c)

 SET (libsolv_HEADERS

     bitmap.h evr.h hash.h policy.h poolarch.h poolvendor.h pool.h

@@ -33,16 +32,22 @@ IF (ENABLE_CONDA)

     SET (libsolv_SRCS ${libsolv_SRCS} conda.c)

 ENDIF (ENABLE_CONDA)

+IF (NOT WITH_OPENSSL)

+  SET (libsolv_SRCS ${libsolv_SRCS} md5.c sha1.c sha2.c)

+ENDIF (NOT WITH_OPENSSL)

 SET (CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -fPIC")

 IF (HAVE_LINKER_VERSION_SCRIPT)

 SET (CMAKE_SHARED_LINKER_FLAGS "${CMAKE_SHARED_LINKER_FLAGS} ${LINK_FLAGS} -Wl,--version-script=${CMAKE_SOURCE_DIR}/src/libsolv.ver")

 ENDIF (HAVE_LINKER_VERSION_SCRIPT)

 IF (DISABLE_SHARED)

-ADD_LIBRARY (libsolv STATIC ${libsolv_SRCS})

+  ADD_LIBRARY (libsolv STATIC ${libsolv_SRCS})

 ELSE (DISABLE_SHARED)

-ADD_LIBRARY (libsolv SHARED ${libsolv_SRCS})

+  ADD_LIBRARY (libsolv SHARED ${libsolv_SRCS})

+  IF (WITH_OPENSSL)

+    TARGET_LINK_LIBRARIES (libsolv ${OPENSSL_CRYPTO_LIBRARY})

+  ENDIF (WITH_OPENSSL)

 ENDIF (DISABLE_SHARED)

 SET_TARGET_PROPERTIES(libsolv PROPERTIES OUTPUT_NAME "solv")

diff --git a/src/chksum.c b/src/chksum.c

index df46145..d7b39e8 100644

--- a/src/chksum.c

+++ b/src/chksum.c

@@ -15,10 +15,42 @@

 #include "util.h"

 #include "chksum.h"

+#ifdef WITH_OPENSSL

+

+#include <openssl/md5.h>

+#include <openssl/sha.h>

+

+typedef SHA_CTX SHA1_CTX;

+typedef SHA256_CTX SHA224_CTX;

+typedef SHA512_CTX SHA384_CTX;

+

+#define solv_MD5_Init(ctx) MD5_Init(ctx)

+#define solv_MD5_Update(ctx, data, len) MD5_Update(ctx, data, len)

+#define solv_MD5_Final(md, ctx) MD5_Final(md, ctx)

+#define solv_SHA1_Init(ctx) SHA1_Init(ctx)

+#define solv_SHA1_Update(ctx, data, len) SHA1_Update(ctx, data, len)

+#define solv_SHA1_Final(ctx, md) SHA1_Final(md, ctx)

+#define solv_SHA224_Init(ctx) SHA224_Init(ctx)

+#define solv_SHA224_Update(ctx, data, len) SHA224_Update(ctx, data, len)

+#define solv_SHA224_Final(md, ctx) SHA224_Final(md, ctx)

+#define solv_SHA256_Init(ctx) SHA256_Init(ctx)

+#define solv_SHA256_Update(ctx, data, len) SHA256_Update(ctx, data, len)

+#define solv_SHA256_Final(md, ctx) SHA256_Final(md, ctx)

+#define solv_SHA384_Init(ctx) SHA384_Init(ctx)

+#define solv_SHA384_Update(ctx, data, len) SHA384_Update(ctx, data, len)

+#define solv_SHA384_Final(md, ctx) SHA384_Final(md, ctx)

+#define solv_SHA512_Init(ctx) SHA512_Init(ctx)

+#define solv_SHA512_Update(ctx, data, len) SHA512_Update(ctx, data, len)

+#define solv_SHA512_Final(md, ctx) SHA512_Final(md, ctx)

+

+#else

+

 #include "md5.h"

 #include "sha1.h"

 #include "sha2.h"

+#endif

+

 struct s_Chksum {

   Id type;

   int done;

diff --git a/tools/CMakeLists.txt b/tools/CMakeLists.txt

index 802dc50..b1f6c7a 100644

--- a/tools/CMakeLists.txt

+++ b/tools/CMakeLists.txt

@@ -99,7 +99,7 @@ SET (tools_list ${tools_list} appdata2solv)

 ENDIF (ENABLE_APPDATA)

 ADD_EXECUTABLE (dumpsolv dumpsolv.c )

-TARGET_LINK_LIBRARIES (dumpsolv libsolv)

+TARGET_LINK_LIBRARIES (dumpsolv libsolv ${SYSTEM_LIBRARIES})

 ADD_EXECUTABLE (mergesolv mergesolv.c )

 TARGET_LINK_LIBRARIES (mergesolv toolstuff libsolvext libsolv ${SYSTEM_LIBRARIES})

--

libgit2 0.27.8