On Tue, Sep 21, 2010, Gregory Bellier wrote:

> Hi all !
> 
> I'm currently playing with openssl-0.9.8o to add a cipher in it (just for
> fun).
> 
> I noticed in crypto/objects that 2 files (obj_dat.h and obj_mac.h) are
> automatically generated from scripts which read obj_mac.num and objects.txt.
> Therefore I did not update manually obj_dat.h and obj_mac.h.
> 
> However, when I run "make" I get errors. Those errors are from obj_dat.h and
> obj_mac.h because they were not updated whereas it was supposed to be done
> automatically. The scripts didn't run.
> 
> For ciphers already included, these errors are not triggered because the
> released tarball contains obj_dat.h and obj_mac.h already up-to-date.
> 
> The question is, is this a normal behaviour ? In my opinion, it isn't.
> 
> Those files aren't updated because they already exist. To build correctly
> OpenSSL, I have to rm -f obj_dat.h obj_mac.h. Then when I run "make", the
> scripts are executed and those two files are correctly created.
> 
> So, if I add a new symetric cipher, to be able to run a correct make test
> what would be the right thing to do :
> - add the cipher, update those 2 files manually and run config/make/make
> test. Therefore, whar's the point of "automatically generated" ?
> - add the cipher, run the scripts manually and config/make/make test
> - add the cipher, delete those files and config/make/make test.
> 
> If it's not either one of those 3 possibilities, then I think there is a
> problem. I'd like to have your opinion on this matter.
> 
> I hope I made myself clear.
> 

You should only have to modify objects.txt, the others are all updated from
it.

That said it isn't a good idea to modify objects.txt locally because the
generated NIDs will clash with future OpenSSL additions in official releases
resulting in binary incompatibility. A better way is to create a NID
dynamically using OBJ_create() and use that instead.

Steve.
--
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       openssl-dev@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to