Initial
This commit is contained in:
Anton Batenev
commit
daf6a2dbf7
10 changed files with 386 additions and 0 deletions
11
.gitignore
vendored
Normal file
11
.gitignore
vendored
Normal file
|
|
@ -0,0 +1,11 @@
|
||||||
|
build/*
|
||||||
|
release/*
|
||||||
|
sqlcipher.git/*
|
||||||
|
php-*/*
|
||||||
|
|
||||||
|
package/DEBIAN/md5sums
|
||||||
|
package/usr/bin/*
|
||||||
|
package/usr/lib/*
|
||||||
|
|
||||||
|
*.tar.gz
|
||||||
|
*.deb
|
||||||
24
README.rst
Normal file
24
README.rst
Normal file
|
|
@ -0,0 +1,24 @@
|
||||||
|
PDO SQLCipher
|
||||||
|
============
|
||||||
|
|
||||||
|
Драйвер, реализующий интерфейс PDO (PHP Data Objects) для SQLCipher без замещения оригинальной версии PDO SQLite или системной версии SQLite. Основан на оригинальном коде PDO SQLite путем простого замещения имен и встраиванием кода SQLCipher (вместо динамической линковки с библиотеками SQLite).
|
||||||
|
|
||||||
|
Подобное разделение позволяет работать с шифрованными базами только тем приложениям, которые в этом явно нуждаются не опасаясь потери данных или замедления работы остальнх приложений.
|
||||||
|
|
||||||
|
Скрипт сборки протестирован на Debian Squeeze (PHP 5.3.3) и FreeBSD 8.2 (PHP 5.4.3)
|
||||||
|
|
||||||
|
Для сборки под Debain потребуются (помимо стандартных) следующие dev пакеты:
|
||||||
|
|
||||||
|
* libicu-dev
|
||||||
|
* libreadline-dev
|
||||||
|
* libssl-dev
|
||||||
|
* php5-dev
|
||||||
|
* tcl-dev
|
||||||
|
|
||||||
|
SQLCipher
|
||||||
|
=========
|
||||||
|
|
||||||
|
SQLCipher является расширением SQLite, которое реализует прозрачное шифрование файлов данных посредством AES-256. Страницы базы данных шифруются перед записью на диск и расшифровываются при чтении.
|
||||||
|
|
||||||
|
Официальный сайт: http://sqlcipher.net
|
||||||
|
Репозиторий кода: https://github.com/sqlcipher/sqlcipher
|
||||||
237
build.sh
Executable file
237
build.sh
Executable file
|
|
@ -0,0 +1,237 @@
|
||||||
|
#!/bin/sh
|
||||||
|
|
||||||
|
#
|
||||||
|
# Get PHP source code (installed version)
|
||||||
|
#
|
||||||
|
|
||||||
|
PHP_CONFIG=$(which php-config)
|
||||||
|
|
||||||
|
if [ "x${PHP_CONFIG}" = "x" ]; then
|
||||||
|
echo "Error: php-config not found"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
# 5.3.3-7+squeeze13
|
||||||
|
PHP_VER=$(${PHP_CONFIG} --version | cut -d '-' -f 1)
|
||||||
|
|
||||||
|
if [ "x${PHP_VER}" = "x" ]; then
|
||||||
|
echo "Error: unknown php version"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
PHP_SRC="php-${PHP_VER}"
|
||||||
|
PHP_TGZ="${PHP_SRC}.tar.gz"
|
||||||
|
|
||||||
|
if [ ! -f "${PHP_TGZ}" ]; then
|
||||||
|
wget "http://museum.php.net/php5/${PHP_TGZ}"
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
# newest version?
|
||||||
|
wget -O "${PHP_TGZ}" "http://ru2.php.net/get/${PHP_TGZ}/from/this/mirror"
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
exit $?
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ ! -d "${PHP_SRC}" ]; then
|
||||||
|
tar -xf "${PHP_TGZ}" -C ./
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
exit $?
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
#
|
||||||
|
# Get SQLCipher source code and make SQLite Amalgamation
|
||||||
|
#
|
||||||
|
|
||||||
|
SQLCIPHER_SRC="sqlcipher.git"
|
||||||
|
|
||||||
|
if [ ! -d "${SQLCIPHER_SRC}" ]; then
|
||||||
|
git clone "git://github.com/sqlcipher/sqlcipher.git" "${SQLCIPHER_SRC}"
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
exit $?
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ ! -f "${SQLCIPHER_SRC}/sqlite3.c" ]; then
|
||||||
|
cd "${SQLCIPHER_SRC}"
|
||||||
|
|
||||||
|
make distclean
|
||||||
|
|
||||||
|
# subject to change (see http://www.sqlite.org/compile.html)
|
||||||
|
./configure \
|
||||||
|
--disable-shared \
|
||||||
|
--enable-tempstore=yes \
|
||||||
|
CFLAGS=" \
|
||||||
|
-DSQLITE_HAS_CODEC \
|
||||||
|
-DSQLITE_ENABLE_UPDATE_DELETE_LIMIT \
|
||||||
|
-DSQLITE_ENABLE_COLUMN_METADATA \
|
||||||
|
-DSQLITE_ENABLE_STAT3 \
|
||||||
|
-DSQLITE_ENABLE_RTREE \
|
||||||
|
-DSQLITE_ENABLE_FTS3 \
|
||||||
|
-DSQLITE_ENABLE_FTS3_PARENTHESIS \
|
||||||
|
-DSQLITE_ENABLE_FTS4 \
|
||||||
|
-DSQLITE_SECURE_DELETE \
|
||||||
|
-DSQLITE_ENABLE_ICU \
|
||||||
|
-DSQLITE_SOUNDEX \
|
||||||
|
-DSQLITE_DEFAULT_FOREIGN_KEYS=1 \
|
||||||
|
-I/usr/local/include" \
|
||||||
|
LDFLAGS="-lcrypto -licuuc -licui18n -L/usr/local/lib"
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
exit $?
|
||||||
|
fi
|
||||||
|
|
||||||
|
make
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
exit $?
|
||||||
|
fi
|
||||||
|
|
||||||
|
cd ..
|
||||||
|
fi
|
||||||
|
|
||||||
|
#
|
||||||
|
# Clone pdo_sqlite sources for pdo_sqlcipher
|
||||||
|
#
|
||||||
|
|
||||||
|
BUILD_DIR="build"
|
||||||
|
|
||||||
|
if [ -d "${BUILD_DIR}" ]; then
|
||||||
|
rm -rf "${BUILD_DIR}"
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
exit $?
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
mkdir -p "${BUILD_DIR}"
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
exit $?
|
||||||
|
fi
|
||||||
|
|
||||||
|
PDO_SQLITE="${PHP_SRC}/ext/pdo_sqlite"
|
||||||
|
|
||||||
|
cp "${PDO_SQLITE}/"*.c "${PDO_SQLITE}"/*.h "${BUILD_DIR}/"
|
||||||
|
|
||||||
|
# magic :)
|
||||||
|
for FILE in "${BUILD_DIR}"/*
|
||||||
|
do
|
||||||
|
cat "${FILE}" | \
|
||||||
|
sed -e 's/<sqlite3.h>/"sqlite3.h"/g' | \
|
||||||
|
sed -e 's/pdo_sqlite/pdo_sqlcipher/g' | \
|
||||||
|
sed -e 's/php_sqlite3/php_sqlcipher/g' | \
|
||||||
|
sed -e 's/sqlite_handle_/sqlcipher_handle_/g' | \
|
||||||
|
sed -e 's/sqlite_stmt_methods/sqlcipher_stmt_methods/g' | \
|
||||||
|
sed -e 's/PDO_SQLITE/PDO_SQLCIPHER/g' | \
|
||||||
|
sed -e 's/HEADER(sqlite)/HEADER(sqlcipher)/g' | \
|
||||||
|
sed -e 's/PDO Driver for SQLite 3.x/PDO Driver for SQLCipher/g' | \
|
||||||
|
sed -e 's/SQLite Library/SQLCipher Library/g' > \
|
||||||
|
"${FILE}.tmp"
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
exit $?
|
||||||
|
fi
|
||||||
|
|
||||||
|
NEW_FILE=$(echo ${FILE} | sed 's/pdo_sqlite/pdo_sqlcipher/')
|
||||||
|
|
||||||
|
mv "${FILE}.tmp" "${NEW_FILE}"
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
exit $?
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ "${NEW_FILE}" != "${FILE}" ]; then
|
||||||
|
rm -f "${FILE}"
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
exit $?
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
|
||||||
|
#
|
||||||
|
# Build pdo_sqlcipher
|
||||||
|
#
|
||||||
|
|
||||||
|
cp -r "${SQLCIPHER_SRC}" "${BUILD_DIR}/sqlcipher"
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
exit $?
|
||||||
|
fi
|
||||||
|
|
||||||
|
cp "config.m4" "${BUILD_DIR}/config.m4"
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
exit $?
|
||||||
|
fi
|
||||||
|
|
||||||
|
cd "${BUILD_DIR}"
|
||||||
|
|
||||||
|
phpize --clean
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
exit $?
|
||||||
|
fi
|
||||||
|
|
||||||
|
phpize
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
exit $?
|
||||||
|
fi
|
||||||
|
|
||||||
|
./configure
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
exit $?
|
||||||
|
fi
|
||||||
|
|
||||||
|
make
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
exit $?
|
||||||
|
fi
|
||||||
|
|
||||||
|
cd ..
|
||||||
|
|
||||||
|
#
|
||||||
|
# Copy binaries
|
||||||
|
#
|
||||||
|
|
||||||
|
RELEASE_DIR="release"
|
||||||
|
|
||||||
|
if [ -d "${RELEASE_DIR}" ]; then
|
||||||
|
rm -rf "${RELEASE_DIR}"
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
exit $?
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
mkdir -p "${RELEASE_DIR}"
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
exit $?
|
||||||
|
fi
|
||||||
|
|
||||||
|
# pdo_sqlite.so
|
||||||
|
cp "${BUILD_DIR}/modules/pdo_sqlcipher.so" "${RELEASE_DIR}/pdo_sqlcipher.so"
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
exit $?
|
||||||
|
fi
|
||||||
|
|
||||||
|
strip "${RELEASE_DIR}/pdo_sqlcipher.so"
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
exit $?
|
||||||
|
fi
|
||||||
|
|
||||||
|
chmod 0644 "${RELEASE_DIR}/pdo_sqlcipher.so"
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
exit $?
|
||||||
|
fi
|
||||||
|
|
||||||
|
# sqlcipher static binary
|
||||||
|
cp "${SQLCIPHER_SRC}/sqlite3" "${RELEASE_DIR}/sqlcipher"
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
exit $?
|
||||||
|
fi
|
||||||
|
|
||||||
|
strip "${RELEASE_DIR}/sqlcipher"
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
exit $?
|
||||||
|
fi
|
||||||
|
|
||||||
|
#
|
||||||
|
# Clean
|
||||||
|
#
|
||||||
|
|
||||||
|
rm -rf ${PHP_SRC}
|
||||||
|
rm -rf ${SQLCIPHER_SRC}
|
||||||
|
rm -rf ${BUILD_DIR}
|
||||||
|
rm -f ${PHP_TGZ}
|
||||||
36
config.m4
Normal file
36
config.m4
Normal file
|
|
@ -0,0 +1,36 @@
|
||||||
|
dnl $Id$
|
||||||
|
dnl config.m4 for extension pdo_sqlcipher
|
||||||
|
dnl vim:et:sw=2:ts=2:
|
||||||
|
|
||||||
|
PHP_ARG_ENABLE(pdo_sqlcipher, whether to enable pdo_sqlcipher support,
|
||||||
|
[ --enable-pdo_sqlcipher Enable pdo_sqlcipher support])
|
||||||
|
|
||||||
|
if test "$PHP_PDO_SQLCIPHER" != "no"; then
|
||||||
|
|
||||||
|
if test "$PHP_PDO" = "no" && test "$ext_shared" = "no"; then
|
||||||
|
AC_MSG_ERROR([PDO is not enabled! Add --enable-pdo to your configure line.])
|
||||||
|
fi
|
||||||
|
|
||||||
|
AC_MSG_CHECKING([for PDO includes])
|
||||||
|
if test -f $abs_srcdir/include/php/ext/pdo/php_pdo_driver.h; then
|
||||||
|
pdo_inc_path=$abs_srcdir/ext
|
||||||
|
elif test -f $abs_srcdir/ext/pdo/php_pdo_driver.h; then
|
||||||
|
pdo_inc_path=$abs_srcdir/ext
|
||||||
|
elif test -f $prefix/include/php/ext/pdo/php_pdo_driver.h; then
|
||||||
|
pdo_inc_path=$prefix/include/php/ext
|
||||||
|
elif test -f $prefix/include/php5/ext/pdo/php_pdo_driver.h; then
|
||||||
|
pdo_inc_path=$prefix/include/php5/ext
|
||||||
|
else
|
||||||
|
AC_MSG_ERROR([Cannot find php_pdo_driver.h.])
|
||||||
|
fi
|
||||||
|
AC_MSG_RESULT($pdo_inc_path)
|
||||||
|
|
||||||
|
php_pdo_sqlcipher_sources_core="pdo_sqlcipher.c sqlite_driver.c sqlite_statement.c sqlcipher/sqlite3.c"
|
||||||
|
|
||||||
|
PHP_NEW_EXTENSION(pdo_sqlcipher, $php_pdo_sqlcipher_sources_core, $ext_shared,,-I$pdo_inc_path -Isqlcipher)
|
||||||
|
|
||||||
|
ifdef([PHP_ADD_EXTENSION_DEP],
|
||||||
|
[
|
||||||
|
PHP_ADD_EXTENSION_DEP(pdo_sqlcipher, pdo)
|
||||||
|
])
|
||||||
|
fi
|
||||||
53
debian.sh
Executable file
53
debian.sh
Executable file
|
|
@ -0,0 +1,53 @@
|
||||||
|
#!/bin/sh
|
||||||
|
|
||||||
|
RELEASE_DIR="release"
|
||||||
|
|
||||||
|
mkdir -p package/usr/bin
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
exit $?
|
||||||
|
fi
|
||||||
|
|
||||||
|
mkdir -p package/usr/lib/php5/20090626
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
exit $?
|
||||||
|
fi
|
||||||
|
|
||||||
|
cp "${RELEASE_DIR}/pdo_sqlcipher.so" package/usr/lib/php5/20090626/
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
exit $?
|
||||||
|
fi
|
||||||
|
|
||||||
|
cp "${RELEASE_DIR}/sqlcipher" package/usr/bin/
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
exit $?
|
||||||
|
fi
|
||||||
|
|
||||||
|
cd package
|
||||||
|
|
||||||
|
md5deep -rl etc usr > DEBIAN/md5sums
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
exit $?
|
||||||
|
fi
|
||||||
|
|
||||||
|
cd ..
|
||||||
|
|
||||||
|
fakeroot dpkg-deb -z9 -b package
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
exit $?
|
||||||
|
fi
|
||||||
|
|
||||||
|
mv package.deb php5-sqlcipher.deb
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
exit $?
|
||||||
|
fi
|
||||||
|
|
||||||
|
# http://lintian.debian.org/tags.html
|
||||||
|
lintian php5-sqlcipher.deb
|
||||||
|
if [ $? -ne 0 ]; then
|
||||||
|
exit $?
|
||||||
|
fi
|
||||||
|
|
||||||
|
# clean
|
||||||
|
rm -rf package/usr/bin
|
||||||
|
rm -rf package/usr/lib
|
||||||
|
rm -f package/DEBIAN/md5sums
|
||||||
1
package/DEBIAN/conffiles
Normal file
1
package/DEBIAN/conffiles
Normal file
|
|
@ -0,0 +1 @@
|
||||||
|
/etc/php5/conf.d/pdo_sqlcipher.ini
|
||||||
12
package/DEBIAN/control
Normal file
12
package/DEBIAN/control
Normal file
|
|
@ -0,0 +1,12 @@
|
||||||
|
Package: php5-sqlcipher
|
||||||
|
Version: 5.3.3-7+squeeze13
|
||||||
|
Architecture: amd64
|
||||||
|
Maintainer: Anton Batenev <antonbatenev@yandex.ru>
|
||||||
|
Installed-Size: 350
|
||||||
|
Depends: libc6 (>= 2.11.3-3), libstdc++6 (>= 4.4.5-8), libssl0.9.8 (>= 0.9.8o-4squeeze13), libicu44 (>= 4.4.1-8), libreadline6 (>= 6.1-3), zlib1g (>= 1:1.2.3.4.dfsg-3), libgcc1 (>= 1:4.4.5-8), libncurses5 (>= 5.7+20100313-5), phpapi-20090626, php5-common (= 5.3.3-7+squeeze13)
|
||||||
|
Section: php
|
||||||
|
Priority: optional
|
||||||
|
Homepage: https://github.com/abbat/pdo_sqlcipher
|
||||||
|
Description: sqlcipher module for PHP 5
|
||||||
|
SQLCipher is an SQLite extension that provides transparent
|
||||||
|
256-bit AES encryption of database files.
|
||||||
1
package/etc/php5/conf.d/pdo_sqlcipher.ini
Normal file
1
package/etc/php5/conf.d/pdo_sqlcipher.ini
Normal file
|
|
@ -0,0 +1 @@
|
||||||
|
extension=pdo_sqlcipher.so
|
||||||
4
package/usr/share/doc/php5-sqlcipher/copyright
Normal file
4
package/usr/share/doc/php5-sqlcipher/copyright
Normal file
|
|
@ -0,0 +1,4 @@
|
||||||
|
This package was debianized by Anton Batenev <antonbatenev@yandex.ru>
|
||||||
|
|
||||||
|
pdo_sqlite under PHP License (http://www.php.net/license/3_0.txt)
|
||||||
|
sqlcipher under BSD-style open source license (http://sqlcipher.net/license)
|
||||||
7
package/usr/share/lintian/overrides/php5-sqlcipher
Normal file
7
package/usr/share/lintian/overrides/php5-sqlcipher
Normal file
|
|
@ -0,0 +1,7 @@
|
||||||
|
php5-sqlcipher: debian-changelog-file-missing
|
||||||
|
php5-sqlcipher: hardening-no-relro
|
||||||
|
php5-sqlcipher: copyright-without-copyright-notice
|
||||||
|
php5-sqlcipher: binary-or-shlib-defines-rpath
|
||||||
|
php5-sqlcipher: embedded-library
|
||||||
|
php5-sqlcipher: hardening-no-fortify-functions
|
||||||
|
php5-sqlcipher: binary-without-manpage
|
||||||
Loading…
Add table
Add a link
Reference in a new issue