softhsm · halderen · Jul 31, 2023 · Apr 7, 2021 · Apr 7, 2021 · Apr 7, 2021
diff --git a/.appveyor.yml b/.appveyor.yml
@@ -2,7 +2,6 @@ version: 2.6.0-{build}
 configuration: Release
 platform:
 - x86
-- x64
 init:
 - ps: >-
     If ($env:Platform -Match "x86") {
@@ -41,31 +40,47 @@ init:
     $env:RELEASE_DIR=Join-Path $env:BUILD_DIR "SoftHSMv2-$env:ENV_PLATFORM"
 
     $env:CONFIGURE_OPTIONS = "$env:CONFIGURE_OPTIONS with-crypto-backend=$env:CRYPTO_BACKEND with-$env:CRYPTO_BACKEND=$env:CRYPTO_PACKAGE_PATH\ with-cppunit=$env:CPPUNIT_PATH\"
+cache: 
+  - C:/Tools/vcpkg/installed/
 environment:
+  APPVEYOR_SAVE_CACHE_ON_ERROR: true
   matrix:
-  - CRYPTO_BACKEND: botan
-    ADDITIONAL_CONFIGURE_OPTIONS: disable-eddsa disable-gost with-crypto-backend=botan
   - CRYPTO_BACKEND: openssl
     ADDITIONAL_CONFIGURE_OPTIONS: disable-eddsa disable-gost with-crypto-backend=openssl
+    DB_BACKEND: OFF
+  - CRYPTO_BACKEND: openssl
+    ADDITIONAL_CONFIGURE_OPTIONS: disable-eddsa disable-gost with-crypto-backend=openssl
+    DB_BACKEND: ON
+  - CRYPTO_BACKEND: botan
+    ADDITIONAL_CONFIGURE_OPTIONS: disable-eddsa disable-gost with-crypto-backend=botan
+    DB_BACKEND: OFF
 install:
+# Update vcpkg
+- cd c:\tools\vcpkg
+- cmd: git fetch
+- cmd: git checkout 2021.05.12
+- cmd: bootstrap-vcpkg.bat
 - cmd: vcpkg install sqlite3:x86-windows
-- cmd: vcpkg install openssl-windows:x64-windows
+- cmd: vcpkg install openssl-windows:x86-windows
 - cmd: vcpkg install botan:x86-windows
 - cmd: vcpkg install cppunit:x86-windows
-- cmd: vcpkg install getopt-win32:x86-windows
+# static link is forbidden with components under GNU license
+# switch to a source code under a more permissive NETBSD license
+#- cmd: vcpkg install getopt-win32:x86-windows-static
+- cmd: vcpkg update
+- cmd: vcpkg upgrade --no-dry-run
 build_script:
+- cmd: if exist "C:\projects\softhsmv2\build" rd /s /q C:\projects\softhsmv2\build
+- cmd: mkdir C:\projects\softhsmv2\build
+- cmd: cd C:\projects\softhsmv2\build
 - cmd: vcpkg integrate install
-- cmd: cmake -DCMAKE_TOOLCHAIN_FILE=C:/Tools/vcpkg/scripts/buildsystems/vcpkg.cmake -DWITH_CRYPTO_BACKEND=%CRYPTO_BACKEND% -DBUILD_TESTS=OFF -DDISABLE_NON_PAGED_MEMORY=ON -DENABLE_GOST=OFF .
-- cmd: msbuild softhsm2.sln /p:Configuration="Release" /p:Platform="Win32" /p:PlatformToolset=v140 /target:Build
-- cmd: IF "%ENV_PLATFORM%"=="x86" ( CD win32\Release ) ELSE ( CD win32\x64\Release)
-- cmd: cryptotest.exe
-- cmd: datamgrtest.exe
-- cmd: handlemgrtest.exe
-- cmd: objstoretest.exe
-- cmd: p11test.exe
-- cmd: sessionmgrtest.exe
-- cmd: slotmgrtest.exe
-test: off
+- cmd: cmake .. -DCMAKE_TOOLCHAIN_FILE=C:/Tools/vcpkg/scripts/buildsystems/vcpkg.cmake -DWITH_OBJECTSTORE_BACKEND_DB=%DB_BACKEND% -DWITH_CRYPTO_BACKEND=%CRYPTO_BACKEND% -DBUILD_TESTS=ON -DDISABLE_NON_PAGED_MEMORY=ON -DENABLE_GOST=OFF 
+- cmd: cmake --build . --config RelWithDebInfo
+- cmd: ctest -C RelWithDebInfo --progress --verbose
+- cmd: cmake -DCMAKE_INSTALL_PREFIX=build/SoftHSMv2-$(Platform) -DCMAKE_INSTALL_CONFIG_NAME=RelWithDebInfo -P cmake_install.cmake
+#on_finish:
+#  - ps: $blockRdp = $true; iex ((new-object net.webclient).DownloadString('https://raw.githubusercontent.com/appveyor/ci/master/scripts/enable-rdp.ps1'))
+#test: off
 artifacts:
 - path: build/SoftHSMv2-$(Platform)
   name: SoftHSMv2-$(PACKAGE_VERSION_NAME)-$(Platform)
diff --git a/CMAKE-WIN-NOTES.md b/CMAKE-WIN-NOTES.md
@@ -0,0 +1,74 @@
+# Building SoftHSMv2 for Windows
+
+This document describes process of building both 32-bit and 64-bit versions of SoftHSMv2.
+
+## Required software
+
+- [Visual Studio](https://visualstudio.microsoft.com/vs/community/) (Community)
+- [C/C++ dependency manager from Microsoft](https://vcpkg.io/)
+- [CMake](https://cmake.org/)
+
+## Prepare working directories
+
+	set VCPKG_HOME=C:\Projects\vcpkg
+	set SOFTHSM_HOME=C:\Projects\SoftHSMv2
+	git clone https://github.com/opendnssec/SoftHSMv2.git %SOFTHSM_HOME%
+	git clone https://github.com/Microsoft/vcpkg.git %VCPKG_HOME%
+
+## Build dependencies
+
+	cd %VCPKG_HOME%
+	bootstrap-vcpkg.bat
+	git fetch
+	git checkout 2021.05.12
+
+	vcpkg install cppunit:x86-windows
+	vcpkg install cppunit:x86-windows-static
+	vcpkg install openssl-windows:x86-windows
+	vcpkg install botan:x86-windows
+	vcpkg install sqlite3:x86-windows
+
+	vcpkg install cppunit:x64-windows
+	vcpkg install cppunit:x64-windows-static
+	vcpkg install openssl-windows:x64-windows
+	vcpkg install botan:x64-windows
+	vcpkg install sqlite3:x64-windows
+
+	vcpkg integrate install
+
+## Configure SoftHSMv2
+
+Build can be configured using the following commands:
+
+	mkdir %SOFTHSM_HOME%\tmp32
+	cd %SOFTHSM_HOME%\tmp32
+	cmake .. -G "Visual Studio 15 2017" -A Win32 -DCMAKE_TOOLCHAIN_FILE=%VCPKG_HOME%\scripts\buildsystems\vcpkg.cmake -DCMAKE_INSTALL_PREFIX=%SOFTHSM_HOME%\out32 -DBUILD_TESTS=ON -DWITH_CRYPTO_BACKEND=openssl -DWITH_OBJECTSTORE_BACKEND_DB=OFF
+
+	mkdir %SOFTHSM_HOME%\tmp64
+	cd %SOFTHSM_HOME%\tmp64
+	cmake .. -G "Visual Studio 15 2017" -A x64 -DCMAKE_TOOLCHAIN_FILE=%VCPKG_HOME%\scripts\buildsystems\vcpkg.cmake -DCMAKE_INSTALL_PREFIX=%SOFTHSM_HOME%\out64 -DBUILD_TESTS=ON -DWITH_CRYPTO_BACKEND=botan -DWITH_OBJECTSTORE_BACKEND_DB=ON
+
+Some options (more can be found in CMakeLists.txt):
+
+	-DBUILD_TESTS=ON                Compile tests along with libraries
+	-DENABLE_EDDSA=ON               Enable support for EDDSA
+	-DWITH_MIGRATE=ON               Build migration tool
+	-DWITH_CRYPTO_BACKEND=          Select crypto backend (openssl|botan)
+	-DDISABLE_NON_PAGED_MEMORY=ON   Disable non-paged memory for secure storage
+	-DWITH_OBJECTSTORE_BACKEND_DB=ON	Enable sqlite3 data storage
+
+## Compile
+
+Compile the source code using the following command:
+
+	cmake --build . --config RelWithDebInfo
+
+## Test
+
+	ctest -C RelWithDebInfo --output-on-failure --progress --verbose
+
+## Install
+
+Install the library using the follow command:
+
+	cmake  -DCMAKE_INSTALL_CONFIG_NAME=RelWithDebInfo  -P cmake_install.cmake
diff --git a/CMakeLists.txt b/CMakeLists.txt
@@ -1,15 +1,14 @@
-cmake_minimum_required(VERSION 3.5)
-
+cmake_minimum_required(VERSION 3.16)
 project(softhsm2 C CXX)
 
 # Build Options
 option(BUILD_TESTS "Compile tests along with libraries" OFF)
 option(DISABLE_NON_PAGED_MEMORY "Disable non-paged memory for secure storage" OFF)
 option(DISABLE_VISIBILITY "Disables and unsets -fvisibility=hidden" OFF)
 option(ENABLE_64bit "Enable 64-bit compiling" OFF)
-option(ENABLE_ECC "Enable support for ECC" ON)
+option(ENABLE_ECC "Enable support for ECC" OFF)
 option(ENABLE_EDDSA "Enable support for EDDSA" OFF)
-option(ENABLE_GOST "Enable support for GOST" ON)
+option(ENABLE_GOST "Enable support for GOST" OFF)
 option(ENABLE_FIPS "Enable support for FIPS 140-2 mode" OFF)
 option(ENABLE_P11_KIT "Enable p11-kit integration" ON)
 option(ENABLE_PEDANTIC "Enable pedantic compile mode" OFF)
@@ -59,7 +58,7 @@ set(DEFAULT_TOKENDIR "${CMAKE_INSTALL_FULL_LOCALSTATEDIR}/lib/softhsm/tokens/"
     CACHE STRING "The default location of the token directory")
 set(DEFAULT_UMASK "0077"
     CACHE STRING "The default file mode creation mask")
-
+	
 set(MAX_PIN_LEN 255 CACHE STRING "Maximum PIN length")
 set(MIN_PIN_LEN 4 CACHE STRING "Minimum PIN length")
 
@@ -80,6 +79,32 @@ if(NOT CMAKE_BUILD_TYPE)
     set(CMAKE_BUILD_TYPE RelWithDebInfo CACHE STRING "Default build type for SoftHSMv2 project" FORCE)
 endif(NOT CMAKE_BUILD_TYPE)
 
+
+set(CMAKE_CXX_FLAGS_MAINTAINER "-Wall -Wabi" CACHE STRING
+ "Flags used by the C++ compiler during maintainer builds."
+  FORCE)
+set(CMAKE_C_FLAGS_MAINTAINER "-Wall -pedantic" CACHE STRING
+  "Flags used by the C compiler during maintainer builds."
+  FORCE)
+set(CMAKE_EXE_LINKER_FLAGS_MAINTAINER
+  "-Wl,--warn-unresolved-symbols,--warn-once" CACHE STRING
+  "Flags used for linking binaries during maintainer builds."
+  FORCE)
+set(CMAKE_SHARED_LINKER_FLAGS_MAINTAINER
+  "-Wl,--warn-unresolved-symbols,--warn-once" CACHE STRING
+  "Flags used by the shared libraries linker during maintainer builds."
+  FORCE)
+mark_as_advanced(
+  CMAKE_CXX_FLAGS_MAINTAINER
+  CMAKE_C_FLAGS_MAINTAINER
+  CMAKE_EXE_LINKER_FLAGS_MAINTAINER
+  CMAKE_SHARED_LINKER_FLAGS_MAINTAINER)
+
+set(CMAKE_BUILD_TYPE "${CMAKE_BUILD_TYPE}" CACHE STRING
+  "Choose the type of build, options are: None Debug Release RelWithDebInfo MinSizeRel Maintainer."
+  FORCE)
+
+
 message(STATUS "Build Configuration: ${CMAKE_BUILD_TYPE}")
 
 # Build Modules Path
@@ -102,12 +127,18 @@ add_subdirectory(src)
 # p11-kit
 set(default_softhsm2_lib ${DEFAULT_PKCS11_LIB})
 configure_file(softhsm2.module.in softhsm2.module)
+
 if(ENABLE_P11_KIT)
     install(FILES ${PROJECT_BINARY_DIR}/softhsm2.module
             DESTINATION ${P11KIT_PATH}
             )
 endif(ENABLE_P11_KIT)
 
+#get_cmake_property(_variableNames VARIABLES)
+#foreach (_variableName ${_variableNames})
+#    message(STATUS "${_variableName}=${${_variableName}}")
+#endforeach()
+
 # Packaging
 set(CPACK_PACKAGE_NAME ${PACKAGE_NAME})
 set(CPACK_PACKAGE_VENDOR "OpenDNSSEC")

diff --git a/config.h.in.cmake b/config.h.in.cmake
@@ -170,31 +170,11 @@
  */
 #ifdef _WIN32
 
-/* The default log level */
-#undef DEFAULT_LOG_LEVEL
-#define DEFAULT_LOG_LEVEL "INFO"
-
-/* Default storage backend for token objects */
-#undef DEFAULT_OBJECTSTORE_BACKEND
-#define DEFAULT_OBJECTSTORE_BACKEND "file"
-
-/* The default PKCS#11 library */
-#undef DEFAULT_PKCS11_LIB
-#define DEFAULT_PKCS11_LIB "softhsm2.dll"
-
-/* The default location of softhsm2.conf */
-#undef DEFAULT_SOFTHSM2_CONF
-#define DEFAULT_SOFTHSM2_CONF "softhsm2.conf"
-
-/* The default location of the token directory */
-#undef DEFAULT_TOKENDIR
-#define DEFAULT_TOKENDIR "tokens"
 
 /* Whether LoadLibrary is available */
 #undef HAVE_LOADLIBRARY
 #define HAVE_LOADLIBRARY 1
 
-
 /* Define to 1 if you have the <stdlib.h> header file. */
 #undef HAVE_STDLIB_H
 #define HAVE_STDLIB_H 1
@@ -262,4 +242,4 @@ int setenv(const char *name, const char *value, int overwrite);
 
 // #pragma warning(disable: 4996)
 
-#endif
+#endif
diff --git a/modules/CompilerOptions.cmake b/modules/CompilerOptions.cmake
@@ -1,3 +1,5 @@
+find_package(PkgConfig)
+
 include(CheckCXXCompilerFlag)
 include(CheckFunctionExists)
 include(CheckIncludeFiles)
@@ -117,6 +119,14 @@ else(DISABLE_NON_PAGED_MEMORY)
     endif(NOT "${MLOCK_SIZE}" STREQUAL "unlimited")
 endif(DISABLE_NON_PAGED_MEMORY)
 
+
+if(CMAKE_CXX_COMPILER_ID STREQUAL "MSVC")
+	# disable 
+    # C4996 warning for deprecated posix function name
+    # C4456 declaration of 'identifier' hides previous local declaration
+	set(COMPILE_OPTIONS "/MP;/W4;/wd4996;/wd4456")
+endif()
+
 # Check if -ldl exists (equivalent of acx_dlopen.m4)
 check_library_exists(dl dlopen "" HAVE_DLOPEN)
 check_function_exists(LoadLibrary HAVE_LOADLIBRARY)
@@ -150,8 +160,8 @@ if(WITH_CRYPTO_BACKEND STREQUAL "botan")
         message(FATAL_ERROR "Failed to find Botan!")
     endif()
 
-    set(CRYPTO_INCLUDES ${BOTAN_INCLUDE_DIRS})
-    set(CRYPTO_LIBS ${BOTAN_LIBRARIES})
+    set(CRYPTO_INCLUDES ${BOTAN_INCLUDE_DIR})
+    set(CRYPTO_LIBS ${BOTAN_LIBRARY})
     message(STATUS "Botan: Includes: ${CRYPTO_INCLUDES}")
     message(STATUS "Botan: Libs: ${CRYPTO_LIBS}")
 
@@ -433,12 +443,13 @@ if(WITH_SQLITE3)
     message(STATUS "SQLite3: Includes: ${SQLITE3_INCLUDES}")
     message(STATUS "SQLite3: Libs: ${SQLITE3_LIBS}")
 
-    check_include_files(sqlite3.h HAVE_SQLITE3_H)
-    check_library_exists(sqlite3 sqlite3_prepare_v2 "" HAVE_LIBSQLITE3)
-    find_program(SQLITE3_COMMAND NAMES sqlite3)
-    if(SQLITE3_COMMAND MATCHES "-NOTFOUND")
-        message(FATAL_ERROR "SQLite3: Command was not found")
-    endif(SQLITE3_COMMAND MATCHES "-NOTFOUND")
+    set(HAVE_SQLITE3_H 1) 
+    #check_include_files(sqlite3.h HAVE_SQLITE3_H)
+    #check_library_exists(sqlite3 sqlite3_prepare_v2 "" HAVE_LIBSQLITE3)
+    #find_program(SQLITE3_COMMAND NAMES sqlite3)
+    #if(SQLITE3_COMMAND MATCHES "-NOTFOUND")
+    #    message(FATAL_ERROR "SQLite3: Command was not found")
+    #endif(SQLITE3_COMMAND MATCHES "-NOTFOUND")
 else(WITH_SQLITE3)
     message(STATUS "Not including SQLite3 in build")
 endif(WITH_SQLITE3)
@@ -475,17 +486,17 @@ else(ENABLE_P11_KIT)
 endif(ENABLE_P11_KIT)
 
 if(BUILD_TESTS)
-    # Find CppUnit (equivalent of acx_cppunit.m4)
-    set(CppUnit_FIND_QUIETLY ON)
+    set(CppUnit_FIND_QUIETLY OFF)
+
+	# Find CppUnit (equivalent of acx_cppunit.m4)
     include(FindCppUnit)
-    if(NOT CPPUNIT_FOUND)
-        message(FATAL_ERROR "Failed to find CppUnit!")
-    endif(NOT CPPUNIT_FOUND)
-
-    set(CPPUNIT_INCLUDES ${CPPUNIT_INCLUDE_DIR})
-    set(CPPUNIT_LIBS ${CPPUNIT_LIBRARY})
-    message(STATUS "CppUnit: Includes: ${CPPUNIT_INCLUDES}")
-    message(STATUS "CppUnit: Libs: ${CPPUNIT_LIBS}")
+
+	if(NOT CppUnit_FOUND)
+		message(FATAL_ERROR "Failed to find CppUnit, try to set the path to CppUnit root folder in the system variable CPPUNIT_INCLUDE_DIR and library path in CPPUNIT_LIBRARY!")
+	else()
+		message(STATUS "CppUnit tests enabled.")
+	endif(NOT CppUnit_FOUND)
+
 else(BUILD_TESTS)
     message(STATUS "Not building tests")
 endif(BUILD_TESTS)

diff --git a/modules/FindBotan.cmake b/modules/FindBotan.cmake
@@ -15,12 +15,13 @@
 #
 # This file is in the public domain
 
-include(FindPkgConfig)
+find_package(Botan CONFIG)
 
 if(NOT BOTAN_FOUND)
-  pkg_check_modules(BOTAN botan-2)
+  pkg_check_modules(botan BOTAN_FOUND)
 endif()
 
+
 if(NOT BOTAN_FOUND)
   find_path(BOTAN_INCLUDE_DIRS NAMES botan/botan.h
       PATH_SUFFIXES botan-2