From adsharma@sharmas.dhs.org  Sun May 14 18:56:22 2000
Return-Path: <adsharma@sharmas.dhs.org>
Received: from sharmas.dhs.org (c62443-a.frmt1.sfba.home.com [24.0.69.165])
	by hub.freebsd.org (Postfix) with ESMTP id 0DE5D37B741
	for <FreeBSD-gnats-submit@freebsd.org>; Sun, 14 May 2000 18:56:22 -0700 (PDT)
	(envelope-from adsharma@sharmas.dhs.org)
Received: (from adsharma@localhost)
	by sharmas.dhs.org (8.9.3/8.9.3) id SAA50055;
	Sun, 14 May 2000 18:54:53 -0700 (PDT)
	(envelope-from adsharma)
Message-Id: <200005150154.SAA50055@sharmas.dhs.org>
Date: Sun, 14 May 2000 18:54:53 -0700 (PDT)
From: Arun Sharma <adsharma@sharmas.dhs.org>
Reply-To: adsharma@sharmas.dhs.org
To: FreeBSD-gnats-submit@freebsd.org
Subject: IDEA encryption and OpenSSL
X-Send-Pr-Version: 3.2

>Number:         18555
>Category:       bin
>Synopsis:       IDEA encryption disabled in OpenSSL
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    kris
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          change-request
>Submitter-Id:   current-users
>Arrival-Date:   Sun May 14 19:00:01 PDT 2000
>Closed-Date:    Sat Aug 12 17:08:46 PDT 2000
>Last-Modified:  Sat Aug 12 17:10:02 PDT 2000
>Originator:     Arun Sharma
>Release:        FreeBSD 4.0-STABLE i386
>Organization:
Myself
>Environment:

FreeBSD 4.0-STABLE i386 

>Description:

OpenSSL in FreeBSD disables IDEA completely. Those of us who like to
cvsup IDEA from other sources, would like to have this conditinal code
in the makefile. 

>How-To-Repeat:

make installworld. No /usr/include/openssl/idea.h

>Fix:

Get openssl from openssl.org, copy idea subdirectory to 
/usr/src/crypto/openssl/crypto/idea and use the attached patch.

My request is to apply the attached patch to the freebsd sources.

As far as I know, it's legal to use IDEA for non-commercial purposes in
both Europe and the US. So a large number of users may be interested in
the attached patch.

--- src/secure/lib/libcrypto/Makefile-	Sun May 14 18:36:24 2000
+++ src/secure/lib/libcrypto/Makefile	Sun May 14 18:42:24 2000
@@ -13,7 +13,7 @@
 	${LCRYPTO_SRC}/rc2 ${LCRYPTO_SRC}/rc4 ${LCRYPTO_SRC}/rc5 \
 	${LCRYPTO_SRC}/ripemd ${LCRYPTO_SRC}/rsa ${LCRYPTO_SRC}/../rsaref \
 	${LCRYPTO_SRC}/sha ${LCRYPTO_SRC}/stack ${LCRYPTO_SRC}/txt_db \
-	${LCRYPTO_SRC}/x509 ${LCRYPTO_SRC}/x509v3
+	${LCRYPTO_SRC}/x509 ${LCRYPTO_SRC}/x509v3 ${LCRYPTO_SRC}/idea
 
 LIB=		crypto
 SHLIB_MAJOR=	1
@@ -171,6 +171,11 @@
 	rc4/rc4.h rc5/rc5.h ripemd/ripemd.h rsa/rsa.h stack/safestack.h \
 	sha/sha.h stack/stack.h tmdiff.h txt_db/txt_db.h x509/x509.h \
 	x509/x509_vfy.h x509v3/x509v3.h
+
+.if exists(${LCRYPTO_SRC}/idea)
+SRCS+=  i_cbc.c i_cfb64.c i_ecb.c i_ofb64.c i_skey.c
+HDRS+=  idea/idea.h
+.endif  
 
 .for h in ${HDRS}
 CRYPTO_HDRS+= ${LCRYPTO_SRC}/${h}
--- src/secure/lib/libcrypto/Makefile.inc-	Sun May 14 18:39:50 2000
+++ src/secure/lib/libcrypto/Makefile.inc	Sun May 14 18:40:00 2000
@@ -1,7 +1,7 @@
 # $FreeBSD: src/secure/lib/libcrypto/Makefile.inc,v 1.9 2000/02/26 13:06:56 peter Exp $
 
 LCRYPTO_SRC=	${.CURDIR}/../../../crypto/openssl/crypto
-CFLAGS+= -DTERMIOS -DANSI_SOURCE -DNO_IDEA -I${LCRYPTO_SRC} -I${.OBJDIR}
+CFLAGS+= -DTERMIOS -DANSI_SOURCE -I${LCRYPTO_SRC} -I${.OBJDIR}
 
 .if ${MACHINE_ARCH} == "i386"
 CFLAGS+= -DL_ENDIAN

>Release-Note:
>Audit-Trail:
Responsible-Changed-From-To: freebsd-bugs->kris 
Responsible-Changed-By: hoek 
Responsible-Changed-When: Sun May 14 21:58:23 PDT 2000 
Responsible-Changed-Why:  
Looks benign enough.  Any thoughts? 
State-Changed-From-To: open->closed 
State-Changed-By: kris 
State-Changed-When: Sat Aug 12 17:08:46 PDT 2000 
State-Changed-Why:  
This is now possible by uncommenting the following line in 
/etc/make.conf: 

#MAKE_IDEA=     YES     # IDEA (128 bit symmetric encryption) 


http://www.freebsd.org/cgi/query-pr.cgi?pr=18555 
>Unformatted:
