diff options
| author | George McCollister <georgem@novatech-llc.com> | 2010-02-04 11:07:34 -0600 |
|---|---|---|
| committer | Stephen Gallagher <sgallagh@redhat.com> | 2010-02-05 09:43:42 -0500 |
| commit | 63be61852bd7ad1f74569843fb90629d63adb591 (patch) | |
| tree | 04ef03c32be11507365d3c348cf28fb2d8ac3531 /server/external | |
| parent | d61d37ed5c7cc51f1106fe3105c3cf226cc10277 (diff) | |
| download | sssd-63be61852bd7ad1f74569843fb90629d63adb591.tar.gz sssd-63be61852bd7ad1f74569843fb90629d63adb591.tar.bz2 sssd-63be61852bd7ad1f74569843fb90629d63adb591.zip | |
Added option to use libcrypto instead of NSS.
crypto_sha512crypt.c is a clone of nss_sha512crypt.c with the exception that
all usage of NSS and related libraries has been switched to libcrypto.
I renamed nss_sha512crypt.h to sha512crypt.h since it is common to both
crypto_sha512crypt.c and nss_sha512crypt.c. Note that the random number
generator is not seeded manually and thus relies on seeding done
automatically by libcrypto. On some systems without /dev/urandom
seeding may not be performed.
See http://www.openssl.org/docs/crypto/RAND_add.html.
Signed-off-by: George McCollister <georgem@novatech-llc.com>
Diffstat (limited to 'server/external')
| -rw-r--r-- | server/external/crypto.m4 | 13 |
1 files changed, 13 insertions, 0 deletions
diff --git a/server/external/crypto.m4 b/server/external/crypto.m4 new file mode 100644 index 00000000..d1bcf40a --- /dev/null +++ b/server/external/crypto.m4 @@ -0,0 +1,13 @@ +AC_ARG_ENABLE(crypto, + [ --enable-crypto Use OpenSSL crypto instead of NSS], + [CRYPTO="$enableval"], + [CRYPTO="no"] +) + +if test x$CRYPTO != xyes; then + PKG_CHECK_MODULES([NSS],[nss],[have_nss=1],[have_nss=]) +else + PKG_CHECK_MODULES([CRYPTO],[libcrypto],[have_crypto=1],[have_crypto=]) +fi +AM_CONDITIONAL([HAVE_NSS], [test x$have_nss != x]) +AM_CONDITIONAL([HAVE_CRYPTO], [test x$have_crypto != x]) |