Adjust Makefile to match more with DTLS client example
JacobBarthelmeh
parent
8b3c7bee89
commit
c4659fbb9d
|
|
@ -1,146 +1,169 @@
|
|||
## Makefile for TLS/DTLS Server using wolfHSM for crypto operations
|
||||
##
|
||||
## This example demonstrates a server that offloads all cryptographic
|
||||
## operations to a wolfHSM server running on the POSIX transport with
|
||||
## DMA support. By default, DTLS (UDP) mode is used.
|
||||
##
|
||||
## Usage:
|
||||
## 1. Build: make DEBUG=1
|
||||
## 2. Start the wolfHSM server: cd ../../posix/wh_posix_server && ./Build/wh_posix_server.elf --type dma
|
||||
## 3. Run this server: ./Build/wh_server.elf
|
||||
## 4. Connect with a client
|
||||
# Makefile for TLS/DTLS Server using wolfHSM for crypto operations
|
||||
#
|
||||
# This example demonstrates a server that offloads all cryptographic
|
||||
# operations to a wolfHSM server running on the POSIX transport with
|
||||
# DMA support. By default, DTLS (UDP) mode is used.
|
||||
#
|
||||
# Usage:
|
||||
# make download_repos # Clone wolfSSL and wolfHSM repos
|
||||
# make all # Build everything (wolfSSL, wolfHSM server, DTLS server)
|
||||
# make run_hsm_server # Start wolfHSM server
|
||||
# make run_dtls_server # Start wolfSSL DTLS server (this example)
|
||||
# make run_client # Run the wolfSSL DTLS client
|
||||
# make clean # Clean build artifacts
|
||||
# make clean_repos # Remove cloned repositories
|
||||
|
||||
## Project name - sets output filename
|
||||
BIN = wh_server
|
||||
|
||||
## Important directories
|
||||
PROJECT_DIR ?= .
|
||||
CONFIG_DIR ?= $(PROJECT_DIR)/config
|
||||
WOLFSSL_DIR ?= ./wolfssl
|
||||
WOLFHSM_DIR ?= ./wolfhsm
|
||||
WOLFHSM_PORT_DIR = $(WOLFHSM_DIR)/port/posix
|
||||
WOLFHSM_SERVER_DIR = $(WOLFHSM_DIR)/examples/posix/wh_posix_server
|
||||
|
||||
# wolfSSL and wolfHSM directories (relative to this Makefile)
|
||||
WOLFSSL_DIR ?= ../../../../wolfssl
|
||||
WOLFHSM_DIR ?= ../../..
|
||||
WOLFHSM_PORT_DIR ?= $(WOLFHSM_DIR)/port/posix
|
||||
PROJECT_DIR = .
|
||||
CONFIG_DIR = $(PROJECT_DIR)/config
|
||||
BUILD_DIR = $(PROJECT_DIR)/Build
|
||||
|
||||
# Output directory for build files
|
||||
BUILD_DIR ?= $(PROJECT_DIR)/Build
|
||||
# Compiler settings
|
||||
CC = gcc
|
||||
CSTD = -std=c99
|
||||
CFLAGS_EXTRA = -Werror -Wall -Wextra -ffunction-sections -fdata-sections
|
||||
CFLAGS = $(CSTD) $(CFLAGS_EXTRA)
|
||||
|
||||
## Includes
|
||||
INC = -I$(PROJECT_DIR) \
|
||||
-I$(CONFIG_DIR) \
|
||||
-I$(WOLFSSL_DIR) \
|
||||
-I$(WOLFHSM_DIR) \
|
||||
-I$(WOLFHSM_PORT_DIR)
|
||||
|
||||
## Defines
|
||||
# POSIX requires C source be defined before any header
|
||||
DEF += -D_POSIX_C_SOURCE=200809L
|
||||
|
||||
# Library configuration defines for user-supplied settings
|
||||
DEF += -DWOLFSSL_USER_SETTINGS -DWOLFHSM_CFG
|
||||
|
||||
# Enable DMA transport by default (matches server --type dma)
|
||||
# Defines
|
||||
DEF = -D_POSIX_C_SOURCE=200809L -DWOLFSSL_USER_SETTINGS -DWOLFHSM_CFG
|
||||
DEF += -DWOLFHSM_CFG_DMA
|
||||
|
||||
## Architecture flags
|
||||
ARCHFLAGS ?=
|
||||
# Includes
|
||||
INC = -I$(PROJECT_DIR) -I$(CONFIG_DIR) -I$(WOLFSSL_DIR) -I$(WOLFHSM_DIR) -I$(WOLFHSM_PORT_DIR)
|
||||
|
||||
## Compiler and linker flags
|
||||
ASFLAGS ?= $(ARCHFLAGS)
|
||||
CFLAGS_EXTRA ?= -Wextra
|
||||
CFLAGS ?= $(ARCHFLAGS) -Wno-cpp -std=c99 -Wall -Werror $(CFLAGS_EXTRA)
|
||||
LDFLAGS ?= $(ARCHFLAGS)
|
||||
LIBS = -lc -lm
|
||||
|
||||
# Platform-specific linker flags for dead code stripping
|
||||
# Linker settings (platform-specific: darwin uses -dead_strip, others use --gc-sections)
|
||||
OS_NAME := $(shell uname -s | tr A-Z a-z)
|
||||
ifeq ($(OS_NAME),darwin)
|
||||
LDFLAGS += -Wl,-dead_strip
|
||||
LDFLAGS = -Wl,-dead_strip
|
||||
else
|
||||
LDFLAGS += -Wl,--gc-sections
|
||||
LDFLAGS = -Wl,--gc-sections
|
||||
endif
|
||||
LIBS = -lc -lm
|
||||
|
||||
## Makefile options
|
||||
# Source files (wolfCrypt, wolfSSL, wolfHSM, port, project)
|
||||
SRC_C = $(wildcard $(WOLFSSL_DIR)/wolfcrypt/src/*.c)
|
||||
SRC_C += $(wildcard $(WOLFSSL_DIR)/src/*.c)
|
||||
SRC_C += $(wildcard $(WOLFHSM_DIR)/src/*.c)
|
||||
SRC_C += $(wildcard $(WOLFHSM_PORT_DIR)/*.c)
|
||||
SRC_C += $(PROJECT_DIR)/server.c $(PROJECT_DIR)/server_io.c
|
||||
|
||||
# Set to @ to suppress command echo
|
||||
CMD_ECHO ?=
|
||||
|
||||
# Debug build
|
||||
# Debug support
|
||||
ifeq ($(DEBUG),1)
|
||||
DBGFLAGS = -ggdb -g3 -O0
|
||||
CFLAGS += $(DBGFLAGS)
|
||||
LDFLAGS += $(DBGFLAGS)
|
||||
CFLAGS += -ggdb -g3
|
||||
LDFLAGS += -ggdb -g3
|
||||
DEF += -DWOLFHSM_CFG_DEBUG
|
||||
endif
|
||||
|
||||
# Verbose debug output
|
||||
ifeq ($(DEBUG_VERBOSE),1)
|
||||
DBGFLAGS = -ggdb -g3 -O0
|
||||
CFLAGS += $(DBGFLAGS)
|
||||
LDFLAGS += $(DBGFLAGS)
|
||||
DEF += -DWOLFHSM_CFG_DEBUG -DWOLFHSM_CFG_DEBUG_VERBOSE
|
||||
endif
|
||||
|
||||
# Address sanitizer
|
||||
ifeq ($(ASAN),1)
|
||||
CFLAGS += -fsanitize=address
|
||||
LDFLAGS += -fsanitize=address
|
||||
endif
|
||||
|
||||
## Source files
|
||||
|
||||
# wolfCrypt source files
|
||||
SRC_C += $(wildcard $(WOLFSSL_DIR)/wolfcrypt/src/*.c)
|
||||
|
||||
# wolfSSL TLS source files
|
||||
SRC_C += $(wildcard $(WOLFSSL_DIR)/src/*.c)
|
||||
|
||||
# wolfHSM source files
|
||||
SRC_C += $(wildcard $(WOLFHSM_DIR)/src/*.c)
|
||||
|
||||
# wolfHSM POSIX port/HAL code
|
||||
SRC_C += $(wildcard $(WOLFHSM_PORT_DIR)/*.c)
|
||||
|
||||
# Project source files
|
||||
SRC_C += $(PROJECT_DIR)/server.c
|
||||
SRC_C += $(PROJECT_DIR)/server_io.c
|
||||
|
||||
## Automated processing
|
||||
|
||||
# Object files
|
||||
FILENAMES_C = $(notdir $(SRC_C))
|
||||
OBJS_C = $(addprefix $(BUILD_DIR)/, $(FILENAMES_C:.c=.o))
|
||||
vpath %.c $(dir $(SRC_C))
|
||||
|
||||
## Makefile Targets
|
||||
# Phony targets
|
||||
.PHONY: all download_repos build_wolfssl build_wolfhsm_server build_app run_hsm_server run_dtls_server run_client clean clean_repos
|
||||
|
||||
.PHONY: all build clean help
|
||||
# Default target
|
||||
all: check_repos build_wolfssl build_wolfhsm_server build_app
|
||||
@echo "Build complete. Run 'make run_hsm_server', 'make run_dtls_server', 'make run_client' in separate terminals."
|
||||
|
||||
all: build
|
||||
# Clone repositories
|
||||
download_repos:
|
||||
@echo "=== Cloning repositories ==="
|
||||
@if [ ! -d "$(WOLFSSL_DIR)" ]; then \
|
||||
git clone --depth 1 https://github.com/wolfssl/wolfssl.git $(WOLFSSL_DIR); \
|
||||
else \
|
||||
echo "wolfssl already exists, skipping clone"; \
|
||||
fi
|
||||
@if [ ! -d "$(WOLFHSM_DIR)" ]; then \
|
||||
git clone --depth 1 https://github.com/wolfssl/wolfhsm.git $(WOLFHSM_DIR); \
|
||||
else \
|
||||
echo "wolfhsm already exists, skipping clone"; \
|
||||
fi
|
||||
|
||||
build: $(BUILD_DIR) $(BUILD_DIR)/$(BIN).elf
|
||||
# Check that repos exist
|
||||
check_repos:
|
||||
@if [ ! -d "$(WOLFSSL_DIR)" ] || [ ! -d "$(WOLFHSM_DIR)" ]; then \
|
||||
echo "Error: Repositories not found. Run 'make download_repos' first."; \
|
||||
exit 1; \
|
||||
fi
|
||||
|
||||
# Build wolfSSL (for example client)
|
||||
build_wolfssl: check_repos
|
||||
@echo "=== Building wolfSSL ==="
|
||||
@if [ ! -f "$(WOLFSSL_DIR)/examples/server/server" ]; then \
|
||||
cd $(WOLFSSL_DIR) && \
|
||||
./autogen.sh && \
|
||||
./configure --enable-dtls --enable-dtls13 --enable-ecc && \
|
||||
make -j; \
|
||||
else \
|
||||
echo "wolfSSL already built, skipping"; \
|
||||
fi
|
||||
|
||||
# Build wolfHSM POSIX server (with DMA for this example)
|
||||
# Note: The wolfHSM server Makefile expects WOLFSSL_DIR relative to its location
|
||||
# Server is at ./wolfhsm/examples/posix/wh_posix_server/
|
||||
# wolfssl is at ./wolfssl/
|
||||
# So from server: ../../../../wolfssl
|
||||
build_wolfhsm_server: check_repos
|
||||
@echo "=== Building wolfHSM server ==="
|
||||
@if [ ! -f "$(WOLFHSM_SERVER_DIR)/Build/wh_posix_server.elf" ]; then \
|
||||
$(MAKE) -C $(WOLFHSM_SERVER_DIR) clean || true; \
|
||||
$(MAKE) -C $(WOLFHSM_SERVER_DIR) WOLFSSL_DIR=../../../../wolfssl DMA=1 -j; \
|
||||
else \
|
||||
echo "wolfHSM server already built, skipping"; \
|
||||
fi
|
||||
|
||||
# Build DTLS server
|
||||
build_app: $(BUILD_DIR) $(BUILD_DIR)/$(BIN).elf
|
||||
@echo "DTLS server built: $(BUILD_DIR)/$(BIN).elf"
|
||||
|
||||
$(BUILD_DIR):
|
||||
$(CMD_ECHO) mkdir -p $(BUILD_DIR)
|
||||
mkdir -p $(BUILD_DIR)
|
||||
|
||||
$(BUILD_DIR)/%.o: %.c
|
||||
@echo "Compiling: $(notdir $<)"
|
||||
$(CMD_ECHO) $(CC) $(CFLAGS) $(DEF) $(INC) -c -o $@ $<
|
||||
$(CC) $(CFLAGS) $(DEF) $(INC) -c -o $@ $<
|
||||
|
||||
$(BUILD_DIR)/$(BIN).elf: $(OBJS_C)
|
||||
@echo "Linking: $(notdir $@)"
|
||||
$(CMD_ECHO) $(CC) $(LDFLAGS) -o $@ $^ $(LIBS)
|
||||
$(CC) $(LDFLAGS) -o $@ $^ $(LIBS)
|
||||
|
||||
# Convenience targets for running each component in separate terminals
|
||||
|
||||
run_hsm_server: all
|
||||
@echo "Starting wolfHSM server..."
|
||||
@echo "Press Ctrl+C to stop"
|
||||
@echo ""
|
||||
$(WOLFHSM_SERVER_DIR)/Build/wh_posix_server.elf --type dma
|
||||
|
||||
run_dtls_server: all
|
||||
@echo "Starting wolfSSL DTLS server (wolfHSM crypto offload)..."
|
||||
@echo "Press Ctrl+C to stop"
|
||||
@echo ""
|
||||
$(BUILD_DIR)/$(BIN).elf -p 11111 -A $(WOLFSSL_DIR)/certs/client-cert.pem
|
||||
|
||||
run_client: all
|
||||
cd $(WOLFSSL_DIR) && ./examples/client/client -u -v 4 -h 127.0.0.1 -p 11111
|
||||
|
||||
# Clean build artifacts
|
||||
clean:
|
||||
@echo "Cleaning build files..."
|
||||
@rm -rf $(BUILD_DIR)
|
||||
rm -rf $(BUILD_DIR)
|
||||
@# Clean wolfHSM server build
|
||||
@if [ -d "$(WOLFHSM_SERVER_DIR)" ]; then \
|
||||
$(MAKE) -C $(WOLFHSM_SERVER_DIR) clean 2>/dev/null || true; \
|
||||
fi
|
||||
@# Clean wolfSSL build
|
||||
@if [ -f "$(WOLFSSL_DIR)/Makefile" ]; then \
|
||||
$(MAKE) -C $(WOLFSSL_DIR) clean 2>/dev/null || true; \
|
||||
fi
|
||||
|
||||
help:
|
||||
@echo "TLS/DTLS Server with wolfHSM Crypto Offload"
|
||||
@echo ""
|
||||
@echo "Options:"
|
||||
@echo " DEBUG=1 - Enable debug build with symbols"
|
||||
@echo " DEBUG_VERBOSE=1 - Enable verbose debug output"
|
||||
@echo " ASAN=1 - Enable address sanitizer"
|
||||
@echo ""
|
||||
@echo "Example:"
|
||||
@echo " make DEBUG=1"
|
||||
clean_repos: clean
|
||||
@echo "Removing cloned repositories"
|
||||
rm -rf $(WOLFSSL_DIR) $(WOLFHSM_DIR)
|
||||
|
|
|
|||
|
|
@ -214,7 +214,8 @@ int main(int argc, char** argv)
|
|||
}
|
||||
}
|
||||
|
||||
printf("DTLS server starting on port %d...\n", config.port);
|
||||
printf("Example DTLS server using wolfHSM is starting on port %d\n",
|
||||
config.port);
|
||||
|
||||
/* Initialize wolfCrypt */
|
||||
ret = wolfCrypt_Init();
|
||||
|
|
|
|||
Loading…
Reference in New Issue