BuildInstructionsSecurity

Requirements

• MacPorts is the recommended way to get the following necessary tools
• ANTLR
• subversion

Preparing the toolchain

Here the steps to prepare the build environment using MacPorts:

1. install MacPorts as described
2. install ANTLR
   sudo port install antlr
3. create symlinks so the build process will find antlr:
   sudo mkdir -p /usr/local/bin
   sudo mkdir -p /usr/local/lib
   sudo mkdir -p /usr/local/include
   cd /usr/local/bin
   sudo ln -s /opt/local/lib/antlr.jar antlr.jar
   cd /usr/local/lib
   sudo ln -s /opt/local/lib/libantlr.a libantlr2c++.a
   cd /usr/local/include
   sudo ln -s /opt/local/include/antlr antlr
4. install subversion
   sudo port install subversion

Getting the sources

AOSM (http://dll.nu/aosm/) provides the Apple open source projects as git repositories which is very convenient for backporting.

1. Check out the Security main project
   svn co https://github.com/aosm/Security/tags/mac-os-x-1068 Security

2. Check out the following sub projects into the root directoty of the main project:
   Don't forget to add the destination path to the end of the command line (e.g. 'libsecurity_apple_csp')!
   If not indicated differently all repositories are checked out at the tag 'mac-os-x-1068', like libsecurity_apple_csp.

   • libsecurity_apple_csp
     https://github.com/aosm/libsecurity_apple_csp/tags/mac-os-x-1068
   • libsecurity_apple_cspdl
   • libsecurity_apple_file_dl
   • libsecurity_apple_x509_cl
   • libsecurity_apple_x509_tp
   • libsecurity_asn1
   • libsecurity_authorization
   • libsecurity_cdsa_client
   • libsecurity_cdsa_plugin
   • libsecurity_cdsa_utilities
   • libsecurity_cdsa_utils
   • libsecurity_checkpw
   • libsecurity_cms
   • libsecurity_codesigning
   • libsecurity_comcryption
     https://github.com/aosm/Security/trunk/Security/libsecurity_comcryption
   • libsecurity_cryptkit
     https://github.com/aosm/Security/trunk/Security/libsecurity_cryptkit
   • libsecurity_cssm
   • libsecurity_dotmacdl
   • libsecurity_filedb
   • libsecurity_keychain
   • libsecurity_manifest
   • libsecurity_mds
   • libsecurity_ocspd
   • libsecurity_pkcs12
   • libsecurity_sd_cspdl
   • libsecurity_smime
   • libsecurity_ssl
     https://github.com/aosm/Security/tags/mac-os-x-108/libsecurity_ssl
   • libsecurity_utilities
   • libsecurityd
     for Leopard you need to get the tag 'mac-os-x-1058'
   • security_dotmac_tp
   • Get some private CoreFoundation headers and put them in the header search path (for Snow Leopard you need to replace mac-os-x-1058 with mac-os-x-1068 in the URL):
     sudo mkdir -p /usr/local/include/CoreFoundation
     cd /usr/local/include/CoreFoundation
     sudo svn export https://github.com/aosm/CF/tags/mac-os-x-1058/CFRuntime.h CFRuntime.h
     sudo svn export https://github.com/aosm/CF/tags/mac-os-x-1058/CFBundlePriv.h CFBundlePriv.h
   • Get a private launchd header (for Snow Leopard you need to replace mac-os-x-1058 with mac-os-x-1068 in the URL)::
     cd /usr/local/include/
     sudo svn export https://github.com/aosm/launchd/tags/mac-os-x-1058/launchd/src/vproc_priv.h vproc_priv.h
   • You need a part from DirectoryService (for Snow Leopard you need to replace mac-os-x-1058 with mac-os-x-1068 in the URL):
     svn co https://github.com/aosm/DirectoryService/tags/mac-os-x-1058 DirectoryService
   • You'll also need to install some private headers from CommonCrypto (for Snow Leopard you need to replace mac-os-x-1058 with mac-os-x-1068 in the URL):
     svn co https://github.com/aosm/CommonCrypto/tags/mac-os-x-1058 CommonCrypto
     sudo xcodebuild installhdrs -configuration Deployment
     sudo ditto /tmp/CommonCrypto.dst/usr/local /usr/local

Applying the patches

When targetting Snow Leopard you only need to patch libsecurity_ssl.

• you have to move some libsecurity_ssl headers manually before patching (current directory has to be the root directory of the main project):
  svn move libsecurity_ssl/Security/* libsecurity_ssl/lib/
• in order to patch libsecurity_comcryption, libsecurity_cryptkit and libsecurity_ssl you have to pass '--strip 3' in the next step!
• apply the patches the following way:
  svn patch --strip 2 {path to the patchfile} {path to the subproject; e.g. "libsecurity_apple_csp"}
• patch the CFBundlePriv header to include some missing symbols:
  cd /usr/local/include/CoreFoundation
  sudo patch --strip 1 <{path to CFBundlePriv.diff}
• apply a patch to DirectoryService:
  cd {path to the DirectoryService directory}
  svn patch --strip 2 {path to DirectoryService.diff}

Building the sources

You have to build the projects "the Apple way", like DarwinBuild does:

• build a library from DirectoryService and the corresponding headers:
  cd {path to the DirectoryService directory}
  sudo xcodebuild install -target "API Framework" -target DirectoryServiceMIG -configuration Deployment GCC_VERSION=4.2
• install the needed parts into /usr/local/:
  sudo ditto /tmp/DirectoryService.dst/usr/local /usr/local
• create the needed build directories for the Security project:
  cd {path to the Security directory}
  mkdir -p destroot objroot symroot
• create a symbolic link required by all the projects ('$(pwd)' should result in the full path to the root directory of the main project):
  "sudo ln -s $(pwd)/destroot/usr/local/SecurityPieces /usr/local/SecurityPieces"
• repeat this step for all subprojects (some will fail, but you can ignore that) in order to install the headers of all the subprojects into the shared directories created above:
  cd {path to the subproject}
  "sudo xcodebuild installhdrs DSTROOT=../destroot SYMROOT=../symroot OBJROOT=../objroot -configuration Deployment BUILD_VARIANTS=normal STRIP_INSTALLED_PRODUCT=NO PUBLIC_HEADERS_FOLDER_PATH=/usr/local/SecurityPieces/Headers/Security"
  cd ..
• install the headers of the main project into the shared directories (issued from Security directory):
  "sudo xcodebuild installhdrs DSTROOT=./destroot SYMROOT=./symroot OBJROOT=./objroot -configuration Deployment BUILD_VARIANTS=normal STRIP_INSTALLED_PRODUCT=NO"
• repeat the above three steps for installing the headers of all the subprojects (none should fail this time)
• now build the subprojects:
  cd {path to the subproject}
  "sudo xcodebuild install DSTROOT=../destroot SYMROOT=../symroot OBJROOT=../objroot -configuration Deployment BUILD_VARIANTS=normal STRIP_INSTALLED_PRODUCT=NO PUBLIC_HEADERS_FOLDER_PATH=/usr/local/SecurityPieces/Headers/Security GCC_VERSION=4.2"
  cd ..
• in case some of the above build steps fail ignore that until you have built all subprojects and then start again, rebuilding the ones that failed (you might need to adjust the order in which you build them)
• finally build the framework:
  "sudo xcodebuild install DSTROOT=./destroot SYMROOT=./symroot OBJROOT=./objroot -configuration Deployment BUILD_VARIANTS=normal STRIP_INSTALLED_PRODUCT=NO GCC_VERSION=4.2"
  libsecurityd has to be compiled with gcc 4.0 so you have to pass GCC_VERSION=4.0
• you find the resulting framework bundle in its install path in the destroot directory.