142 lines
4.5 KiB
Bash
142 lines
4.5 KiB
Bash
#!/bin/sh
|
|
#################################################################
|
|
# #
|
|
# Copyright 2009, 2011 Fidelity Information Services, Inc #
|
|
# #
|
|
# This source code contains the intellectual property #
|
|
# of its copyright holder(s), and is made available #
|
|
# under a license. If you do not know the terms of #
|
|
# the license, please stop and do not read further. #
|
|
# #
|
|
#################################################################
|
|
###########################################################################################
|
|
#
|
|
# check_encrypt_support.sh - Checks if encryption library and executables required for
|
|
# building encryption plugin are available
|
|
# Returns :
|
|
# TRUE - if ksh, gpg, crypt headers and libraries are available
|
|
# FALSE - if not all of them are available i.e the host does not support encryption
|
|
###########################################################################################
|
|
|
|
hostos=`uname -s`
|
|
# We know we don't support these platforms
|
|
if [ "OSF1" = "$hostos" -o \( "HP-UX" = "$hostos" -a "ia64" != `uname -m` \) ]; then
|
|
echo "FALSE"
|
|
exit 0
|
|
fi
|
|
|
|
lib_search_path="/usr/local/lib64 /usr/local/lib /usr/lib64 /usr/lib /lib64 /lib /usr/local/ssl/lib /usr/lib/x86_64-linux-gnu"
|
|
include_search_path="/usr/include /usr/local/include /usr/local/include/gpgme"
|
|
bin_search_path="/usr/bin /usr/local/bin /bin"
|
|
|
|
sym_headers="gcrypt.h gcrypt-module.h"
|
|
req_lib_files="libgpg-error libgpgme"
|
|
lib_ext="so"
|
|
if [ "AIX" = "$hostos" ]; then
|
|
sym_headers="openssl/evp.h openssl/sha.h openssl/blowfish.h"
|
|
req_lib_files="libcrypto $req_lib_files"
|
|
lib_ext="$lib_ext a"
|
|
else
|
|
req_lib_files="libgcrypt $req_lib_files"
|
|
fi
|
|
if [ "OS/390" = "$hosotos" ]; then
|
|
lib_ext="dll"
|
|
fi
|
|
req_inc_files="gpgme.h gpg-error.h $sym_headers"
|
|
req_bin_files="gpg ksh"
|
|
|
|
found_headers="TRUE"
|
|
found_libs="TRUE"
|
|
found_bins="TRUE"
|
|
|
|
whatsmissing=""
|
|
|
|
for each_lib in $req_lib_files
|
|
do
|
|
find_flag=0
|
|
for each_lib_path in $lib_search_path
|
|
do
|
|
for each_ext in $lib_ext
|
|
do
|
|
if [ -f $each_lib_path/$each_lib.$each_ext ]; then
|
|
find_flag=1
|
|
break
|
|
fi
|
|
done
|
|
done
|
|
if [ $find_flag -eq 0 ]; then
|
|
found_libs="FALSE"
|
|
whatsmissing="$whatsmissing library $each_lib is missing \n"
|
|
fi
|
|
done
|
|
for each_header in $req_inc_files
|
|
do
|
|
find_flag=0
|
|
for each_path in $include_search_path
|
|
do
|
|
if [ -f $each_path/$each_header ]; then
|
|
find_flag=1
|
|
break
|
|
fi
|
|
done
|
|
if [ $find_flag -eq 0 ]; then
|
|
found_headers="FALSE"
|
|
whatsmissing="$whatsmissing include file $each_header is missing \n"
|
|
fi
|
|
done
|
|
|
|
for each_bin in $req_bin_files
|
|
do
|
|
find_flag=0
|
|
for each_path in $bin_search_path
|
|
do
|
|
if [ -x $each_path/$each_bin ]; then
|
|
find_flag=1
|
|
break
|
|
fi
|
|
done
|
|
if [ $find_flag -eq 0 ]; then
|
|
found_bins="FALSE"
|
|
whatsmissing="$whatsmissing executable $each_bin is missing \n"
|
|
fi
|
|
done
|
|
|
|
hostname=`uname -n | awk -F. '{print $1}'`
|
|
if [ $found_headers = "TRUE" -a $found_libs = "TRUE" -a $found_bins = "TRUE" ];then
|
|
# We want to keep at least one server without support for encryption. So if it send a warning if it is not the case.
|
|
non_encrypt_other_servers="dincern"
|
|
echo $non_encrypt_other_servers | grep -w $hostname > /dev/null
|
|
if [ $? -eq 0 ]; then
|
|
errmsg="This system should not supports encryption, but it does.\n"
|
|
echo $errmsg | mailx -s \
|
|
"ENCRYPTSUPPORTED-W-WARNING : Server $hostname will build encryption plugin (but should not)" \
|
|
gglogs
|
|
fi
|
|
echo "TRUE"
|
|
else
|
|
# These are distribution servers that support encryption. If can't build encryption plugin send error.
|
|
encrypt_dist_servers="charybdis jackal pfloyd snail atllita1 atlhxit1 sagaloo"
|
|
echo $encrypt_dist_servers | grep -w $hostname > /dev/null
|
|
if [ $? -eq 0 ]; then
|
|
errmsg="Please setup the required dependencies for this distribution server:\n"
|
|
errmsg="$errmsg $whatsmissing"
|
|
echo $errmsg | mailx -s \
|
|
"ENCRYPTSUPPORTED-E-ERROR : Distribution server $hostname will not build encryption plugin" \
|
|
gglogs
|
|
fi
|
|
# There are servers that can support encryption. If can't build encryption plugin send warning.
|
|
encrypt_other_servers="scylla mlnlit1 lespaul atlst2000 turtle atllita2 atlhxit2 sagapaneer"
|
|
encrypt_other_servers="$encrypt_other_servers rajamanin kishoreh johnsons shaha maimoneb estess sopini karthikk bahirs"
|
|
encrypt_other_servers="$encrypt_other_servers parenteaul"
|
|
echo $encrypt_other_servers | grep -w $hostname > /dev/null
|
|
if [ $? -eq 0 ]; then
|
|
errmsg="This system supports encryption but does not have the required dependencies setup:\n"
|
|
errmsg="$errmsg $whatsmissing"
|
|
echo $errmsg | mailx -s \
|
|
"ENCRYPTSUPPORTED-W-WARNING : Server $hostname will not build encryption plugin" \
|
|
gglogs
|
|
fi
|
|
echo "FALSE"
|
|
fi
|
|
exit 0
|