diff options
Diffstat (limited to 'scripts/tools/build-target-openssl.sh')
| -rwxr-xr-x | scripts/tools/build-target-openssl.sh | 392 |
1 files changed, 392 insertions, 0 deletions
diff --git a/scripts/tools/build-target-openssl.sh b/scripts/tools/build-target-openssl.sh new file mode 100755 index 00000000..44de606a --- /dev/null +++ b/scripts/tools/build-target-openssl.sh @@ -0,0 +1,392 @@ +#!/bin/bash + +# Copyright (c) 2011-2015 CrystaX. +# All rights reserved. +# +# Redistribution and use in source and binary forms, with or without modification, are +# permitted provided that the following conditions are met: +# +# 1. Redistributions of source code must retain the above copyright notice, this list of +# conditions and the following disclaimer. +# +# 2. Redistributions in binary form must reproduce the above copyright notice, this list +# of conditions and the following disclaimer in the documentation and/or other materials +# provided with the distribution. +# +# THIS SOFTWARE IS PROVIDED BY CrystaX ''AS IS'' AND ANY EXPRESS OR IMPLIED +# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND +# FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL CrystaX OR +# CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR +# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR +# SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON +# ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING +# NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF +# ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. +# +# The views and conclusions contained in the software and documentation are those of the +# authors and should not be interpreted as representing official policies, either expressed +# or implied, of CrystaX. + +# include common function and variable definitions +. `dirname $0`/prebuilt-common.sh +PROGRAM_PARAMETERS="<src-dir>" +PROGRAM_DESCRIPTION=\ +"Rebuild OpenSSL libraries for the Android NDK. + +This requires a temporary NDK installation containing +toolchain binaries for all target architectures. + +By default, this will try with the current NDK directory, unless +you use the --ndk-dir=<path> option. + +The output will be placed in appropriate sub-directories of +<ndk>/$OPENSSL_SUBDIR, but you can override this with the --out-dir=<path> +option. +" +PACKAGE_DIR= +register_var_option "--package-dir=<path>" PACKAGE_DIR "Put prebuilt tarballs into <path>" +NDK_DIR=$ANDROID_NDK_ROOT +register_var_option "--ndk-dir=<path>" NDK_DIR "Specify NDK root path for the build" + +BUILD_DIR= +OPTION_BUILD_DIR= +register_var_option "--build-dir=<path>" OPTION_BUILD_DIR "Specify temporary build dir" + +ABIS=$PREBUILT_ABIS +register_var_option "--abis=<list>" ABIS "Specify list of target ABIs" + +register_jobs_option + +extract_parameters "$@" + +OPENSSL_SRCDIR=$(echo $PARAMETERS | sed 1q) +if [ -z "$OPENSSL_SRCDIR" ]; then + echo "ERROR: Please provide the path to the OpenSSL source tree. See --help" + exit 1 +fi + +if [ ! -d "$OPENSSL_SRCDIR" ]; then + echo "ERROR: No such directory: '$OPENSSL_SRCDIR'" + exit 1 +fi + +OPENSSL_SRCDIR=$(cd $OPENSSL_SRCDIR && pwd) +OPENSSL_SRC_VERSION=\ +$(cat $OPENSSL_SRCDIR/crypto/opensslv.h | sed -n 's/#[ \t]*define[ \t]*OPENSSL_VERSION_TEXT[ \t]*"OpenSSL[ \t]*\([A-Za-z0-9\.]*\)[A-Za-z0-9 \.]*"/\1/p') + +if [ -z "$OPENSSL_SRC_VERSION" ]; then + echo "ERROR: Can't detect OpenSSL version." 1>&2 + exit 1 +fi + +OPENSSL_DSTDIR=$NDK_DIR/$OPENSSL_SUBDIR/$OPENSSL_SRC_VERSION +mkdir -p $OPENSSL_DSTDIR +fail_panic "Can't create OpenSSL destination directory: $OPENSSL_DSTDIR" + +ABIS=$(commas_to_spaces $ABIS) + +if [ -z "$OPTION_BUILD_DIR" ]; then + BUILD_DIR="$NDK_TMPDIR/build-openssl" +else + eval BUILD_DIR=$OPTION_BUILD_DIR +fi + +rm -rf "$BUILD_DIR" +mkdir -p "$BUILD_DIR" +fail_panic "Can't create build directory: $BUILD_DIR" + + +# $1: ABI +# $2: build directory +build_openssl_for_abi () +{ + dump "Building OpenSSL-$OPENSSL_SRC_VERSION for $ABI" + + local ABI="$1" + local BUILDDIR="$2" + + local ARCH + case $ABI in + armeabi*) + ARCH=arm + ;; + arm64*) + ARCH=arm64 + ;; + x86|x86_64|mips|mips64) + ARCH=$ABI + ;; + *) + echo "ERROR: Unknown ABI: '$ABI'" 1>&2 + exit 1 + esac + + local HOST + case $ABI in + armeabi*) + HOST=arm-linux-androideabi + ;; + arm64*) + HOST=aarch64-linux-android + ;; + x86) + HOST=i686-linux-android + ;; + x86_64) + HOST=x86_64-linux-android + ;; + mips) + HOST=mipsel-linux-android + ;; + mips64) + HOST=mips64el-linux-android + ;; + *) + echo "ERROR: Unknown ABI: '$ABI'" 1>&2 + exit 1 + esac + + local APILEVEL + case $ABI in + armeabi*|x86|mips) + APILEVEL=9 + ;; + arm64*|x86_64|mips64) + APILEVEL=21 + ;; + *) + echo "ERROR: Unknown ABI: '$ABI'" 1>&2 + exit 1 + esac + + local TOOLCHAIN + case $ABI in + armeabi*) + TOOLCHAIN=arm-linux-androideabi + ;; + x86) + TOOLCHAIN=x86 + OPENSSL_TARGET=linux-elf + ;; + mips) + TOOLCHAIN=mipsel-linux-android + ;; + arm64-v8a) + TOOLCHAIN=aarch64-linux-android + ;; + x86_64) + TOOLCHAIN=x86_64 + ;; + mips64) + TOOLCHAIN=mips64el-linux-android + ;; + *) + echo "ERROR: Unknown ABI: '$ABI'" 1>&2 + exit 1 + esac + + case $ABI in + armeabi) + CFLAGS="-march=armv5te -mtune=xscale -msoft-float" + ;; + armeabi-v7a) + CFLAGS="-march=armv7-a -mfpu=vfpv3-d16 -mfloat-abi=softfp" + ;; + armeabi-v7a-hard) + CFLAGS="-march=armv7-a -mfpu=vfpv3-d16 -mhard-float" + ;; + *) + CFLAGS="" + esac + + case $ABI in + armeabi*) + CFLAGS="$CFLAGS -mthumb" + esac + + + local LDFLAGS="" + if [ "$ABI" = "armeabi-v7a-hard" ]; then + LDFLAGS="$LDFLAGS -Wl,--no-warn-mismatch" + fi + + local TCPREFIX=$NDK_DIR/toolchains/${TOOLCHAIN}-4.9/prebuilt/$HOST_TAG + + local BIN_WRAP_DIR="$BUILDDIR/bin-ndk" + mkdir -p "$BIN_WRAP_DIR" + fail_panic "Can't create directory: $BIN_WRAP_DIR" + + # gcc wrapper + local MY_GCC="$BIN_WRAP_DIR/${HOST}-gcc" + { + echo '#!/bin/bash -e' + echo "MY_CFLAGS=\"$CFLAGS\"" + echo "MY_LDFLAGS=\"$LDFLAGS -L$NDK_DIR/sources/crystax/libs/$ABI\"" + echo 'ARGS=' + echo 'BUILD_DSO=yes' + echo 'for p in "$@"; do' + echo ' ARG_IS_SONAME=no' + echo ' ARG_IS_RPATH=no' + echo ' case $p in' + echo ' -c)' + echo ' BUILD_DSO=no' + echo ' ;;' + echo ' -Wl,-rpath,*)' + echo ' ARG_IS_RPATH=yes' + echo ' ;;' + echo ' -Wl,-soname=*)' + echo ' ARG_IS_SONAME=yes' + echo ' ;;' + echo ' esac' + echo ' if [ "$ARG_IS_RPATH" = "yes" ]; then' + echo ' p=' + echo ' fi' + echo ' if [ "$ARG_IS_SONAME" = "yes" ]; then' + echo ' p=$(echo $p | sed -n "s/\(.*\.so\).*/\1/p")' + echo ' fi' + echo ' if [ -n "$p" ]; then' + echo ' ARGS="$ARGS $p"' + echo ' fi' + echo 'done' + echo 'if [ "$BUILD_DSO" = "yes" ]; then' + echo ' ARGS="$ARGS $MY_LDFLAGS"' + echo 'else' + echo ' ARGS="$MY_CFLAGS $ARGS"' + echo 'fi' + echo 'set -x' + echo "exec $TCPREFIX/bin/${HOST}-gcc --sysroot=$NDK_DIR/platforms/android-$APILEVEL/arch-$ARCH \$ARGS" + } >$MY_GCC + fail_panic "Can't create gcc wrapper" + chmod +x $MY_GCC + fail_panic "Can't chmod +x gcc wrapper" + + # script to init obj-tree + local OBJTREE_WRAPPER=$BUILDDIR/mkobjtree.sh + { + echo '#!/bin/bash -e' + echo 'DIR_HERE=$(cd $(dirname $0) && pwd)' + echo "OPENSSL_SOURCE=\"$OPENSSL_SRCDIR\"" + echo 'mkdir -p $DIR_HERE/objtree' + echo 'cd $DIR_HERE/objtree' + echo 'echo "Preparing OpenSSL obj-tree in $(pwd) ..."' + echo '(cd $OPENSSL_SOURCE; find . -type f) | while read F; do' + echo ' mkdir -p $(dirname $F)' + echo ' rm -f $F' + echo ' if [ "$F" = "./crypto/opensslconf.h" ]; then' + echo ' cp -fpH $OPENSSL_SOURCE/crypto/opensslconf.h ./crypto' + echo ' elif [ "$F" = "./crypto/cryptlib.h" ]; then' + echo ' cp -fpH $OPENSSL_SOURCE/crypto/cryptlib.h ./crypto' + echo ' else' + echo ' ln -s $OPENSSL_SOURCE/$F $F' + echo ' fi' + echo 'done' + echo 'rm -rf engines' + } >$OBJTREE_WRAPPER + fail_panic "Can't create OpenSSL objtree wrapper" + chmod +x $OBJTREE_WRAPPER + fail_panic "Can't chmod +x OpenSSL objtree wrapper" + + local OPENSSL_TARGET + case $ABI in + x86) + OPENSSL_TARGET=linux-elf + ;; + x86_64) + OPENSSL_TARGET=linux-x86_64 + ;; + armeabi*) + OPENSSL_TARGET=linux-armv4 + ;; + arm64-v8a) + OPENSSL_TARGET=linux-generic64 + ;; + mips) + OPENSSL_TARGET=linux-generic32 + ;; + mips64) + OPENSSL_TARGET=linux-generic64 + ;; + *) + echo "ERROR: Unknown ABI: '$ABI'" 1>&2 + exit 1 + esac + local OPENSSL_OPTIONS='shared zlib-dynamic no-hw no-dso -DOPENSSL_NO_DEPRECATED' + + # script for build + local BUILD_WRAPPER=$BUILDDIR/build.sh + { + echo '#!/bin/bash -e' + echo 'DIR_HERE=$(cd $(dirname $0) && pwd)' + echo "export PATH=\"$BIN_WRAP_DIR:$TCPREFIX/bin:\$PATH\"" + echo 'cd $DIR_HERE' + echo './mkobjtree.sh' + echo 'cd objtree' + echo "perl ./Configure --openssldir=/system/etc/security --prefix=/pkg --cross-compile-prefix=\"${HOST}-\" $OPENSSL_OPTIONS $OPENSSL_TARGET" + echo "perl -p -i -e 's/^(#\\s*define\\s+ENGINESDIR\\s+).*$/\$1NULL/g' crypto/opensslconf.h" + echo "perl -p -i -e 's/^(#\\s*define\\s+X509_CERT_DIR\\s+OPENSSLDIR\\s+).*$/\$1\"\\/cacerts\"/g' crypto/cryptlib.h" + echo 'make' + echo "make INSTALL_PREFIX=$BUILDDIR/install install" + } >$BUILD_WRAPPER + fail_panic "Can't create OpenSSL build wrapper" + chmod +x $BUILD_WRAPPER + fail_panic "Can't chmod +x OpenSSL build wrapper" + + run $BUILD_WRAPPER + fail_panic "Can't make OpenSSL-$OPENSSL_SRC_VERSION for $ABI" + + local OPENSSL_ABI_CONFIG_MAKE="$BUILDDIR/install/pkg/include/openssl/opensslconf.h" + local OPENSSL_ABI_CONFIG="$BUILDDIR/install/pkg/include/openssl/opensslconf_$(echo $ABI | tr '-' '_').h" + mv $OPENSSL_ABI_CONFIG_MAKE $OPENSSL_ABI_CONFIG + fail_panic "Can't rename $OPENSSL_ABI_CONFIG_MAKE in $OPENSSL_ABI_CONFIG" + + local OPENSSL_HEADERS_DSTDIR="$OPENSSL_DSTDIR/include/openssl" + if [ "$OPENSSL_HEADERS_INSTALLED" != "yes" ]; then + log "Install OpenSSL headers into $OPENSSL_HEADERS_DSTDIR" + run rm -Rf $OPENSSL_HEADERS_DSTDIR && run mkdir -p $OPENSSL_HEADERS_DSTDIR + fail_panic "Can't create directory: $OPENSSL_HEADERS_DSTDIR" + { + echo '#if defined(__ARM_ARCH_5TE__)' + echo '#include "opensslconf_armeabi.h"' + echo '#elif defined(__ARM_ARCH_7A__) && !defined(__ARM_PCS_VFP)' + echo '#include "opensslconf_armeabi_v7a.h"' + echo '#elif defined(__ARM_ARCH_7A__) && defined(__ARM_PCS_VFP)' + echo '#include "opensslconf_armeabi_v7a_hard.h"' + echo '#elif defined(__aarch64__)' + echo '#include "opensslconf_arm64_v8a.h"' + echo '#elif defined(__i386__)' + echo '#include "opensslconf_x86.h"' + echo '#elif defined(__x86_64__)' + echo '#include "opensslconf_x86_64.h"' + echo '#elif defined(__mips__) && !defined(__mips64)' + echo '#include "opensslconf_mips.h"' + echo '#elif defined(__mips__) && defined(__mips64)' + echo '#include "opensslconf_mips64.h"' + echo '#else' + echo '#error "Unsupported ABI"' + echo '#endif' + } >"$OPENSSL_HEADERS_DSTDIR/opensslconf.h" + fail_panic "Can't generate $OPENSSL_HEADERS_DSTDIR/opensslconf.h" + run cp -p $BUILDDIR/install/pkg/include/openssl/*.h $OPENSSL_HEADERS_DSTDIR + fail_panic "Can't install OpenSSL headers" + OPENSSL_HEADERS_INSTALLED=yes + export OPENSSL_HEADERS_INSTALLED + else + run cp -p $OPENSSL_ABI_CONFIG $OPENSSL_HEADERS_DSTDIR + fail_panic "Can't install $OPENSSL_ABI_CONFIG" + fi + + log "Install OpenSSL binaries into $OPENSSL_DSTDIR" + run rm -Rf $OPENSSL_DSTDIR/libs/$ABI && \ + run mkdir -p $OPENSSL_DSTDIR/libs/$ABI && \ + run cp -p $BUILDDIR/install/pkg/lib/libcrypto.a \ + $BUILDDIR/install/pkg/lib/libcrypto.so \ + $BUILDDIR/install/pkg/lib/libssl.a \ + $BUILDDIR/install/pkg/lib/libssl.so \ + $OPENSSL_DSTDIR/libs/$ABI + fail_panic "Can't install OpenSSL binaries" +} + +for ABI in $ABIS; do + build_openssl_for_abi $ABI "$BUILD_DIR/$ABI" +done +log "Done!" |