diff --git a/Makefile.am b/Makefile.am index da4153eb8..37533fa23 100644 --- a/Makefile.am +++ b/Makefile.am @@ -134,6 +134,7 @@ EXTRA_DIST+= wolfssl-ntru.sln EXTRA_DIST+= wolfssl.sln EXTRA_DIST+= wolfssl64.sln EXTRA_DIST+= valgrind-error.sh +EXTRA_DIST+= fips-hash.sh EXTRA_DIST+= gencertbuf.pl EXTRA_DIST+= README.md EXTRA_DIST+= README diff --git a/SCRIPTS-LIST b/SCRIPTS-LIST index d4635b6f3..8b03e778f 100644 --- a/SCRIPTS-LIST +++ b/SCRIPTS-LIST @@ -6,6 +6,7 @@ pre-commit.sh - our pre commit hook, saves current state before running commit commit-tests.sh - our commit tests, must pass before a commit is accepted, use -n (--no-verify) to disable +fips-hash.sh - updates the verifyCore hash in fips_test.c fips-check.sh - checks if current wolfSSL version works against FIPS wolfCrypt comment out last line to leave working directory diff --git a/fips-hash.sh b/fips-hash.sh new file mode 100755 index 000000000..fa2c1b908 --- /dev/null +++ b/fips-hash.sh @@ -0,0 +1,20 @@ +#!/bin/bash + +if test ! -x ./wolfcrypt/test/testwolfcrypt +then + echo "fips-hash: wolfCrypt test missing" + exit 1 +fi + +if test ! -s ./wolfcrypt/src/fips_test.c +then + echo "fips-hash: fips_test.c missing" + exit 1 +fi + +NEWHASH=$(./wolfcrypt/test/testwolfcrypt | sed -n 's/hash = \(.*\)/\1/p') +if test -n "$NEWHASH" +then + sed -i.bak "s/^\".*\";/\"${NEWHASH}\";/" wolfcrypt/src/fips_test.c +fi +