RE: [RFC] OpenSSL and Windows

["Thomas Buchanan" <TBuchanan () thecompassgrp net>]

> -----Original Message-----
> From: nmap-dev-bounces () insecure org 
> [mailto:nmap-dev-bounces () insecure org] On Behalf Of Thomas Buchanan
> Sent: Tuesday, February 05, 2008 7:55 PM
> To: Fyodor
> Cc: nmap-dev () insecure org; DePriest, Jason R.
> Subject: RE: [RFC] OpenSSL and Windows
>
>
> I'll have a go at creating the patch this evening.  The only part I'm
> unfamiliar with is NSIS, but if I run into issues, I'm sure somebody
> more familiar with the build system can help me out.
>
> Thomas

Well, that wasn't so bad, I think.  Here's a patch that enables OpenSSL
compilation on Windows, and includes an installer for the required
OpenSSL .dll files.

Requirements:

The build machine for Windows must download and install
http://www.slproweb.com/download/Win32OpenSSL-0_9_8g.exe to the default
location (C:\OpenSSL)

The Light installer
http://www.slproweb.com/download/Win32OpenSSL_Light-0_9_8g.exe must be
downloaded and copied to the mswin32 folder of the root nmap source
directory.

Once that is done, and the patch is applied, everything else should
work.  Here's the build sizes from SVN and with OpenSSL included:

SVN nmap-4.53-setup.exe stats:
EXE header size:               51200 / 35328 bytes
Install code:                  18680 / 65743 bytes
Install data:               12658774 / 39065612 bytes
Uninstall code+data:           12044 / 16403 bytes
CRC (0x3D604C3A):                  4 / 4 bytes

Total size:                 12740702 / 39183090 bytes (32.5%)

with OpenSSL:
EXE header size:               51200 / 35328 bytes
Install code:                  18951 / 67256 bytes
Install data:               14026988 / 40462911 bytes
Uninstall code+data:           12067 / 16426 bytes
CRC (0x2A54084D):                  4 / 4 bytes

Total size:                 14109210 / 40581925 bytes (34.7%)

One issue that I have with this approach is that when
nmap-4.53-setup.exe is run, it launches two additional installers, one
for WinPcap, and one for OpenSSL.  They are both run at the same time,
on top of the Nmap installer, and it can be a little confusing to have
multiple installers running at once.  

A better option might be to extract only the .dll files that are
required, and not ship the installer.  This would probably help us save
a little space, as the Light installer does include more than just the
.dll files.

I successfully tested the resulting setup.exe and win32.zip files on
both Windows 2000 and Windows XP, but not on Vista.

As always, questions or comments are welcome.

Thomas

Attachment: windows-openssl-build.patch
Description: windows-openssl-build.patch

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org