TLS Server Compilation

boringssl: cd boringssl mkdir build cd build cmake -DFUZZ=1 .. make

contains string
-fsanitize-coverage=edge,indirect-calls in CMakeLists.txt. The gcc does not understand them, thus need to be removed.

cd openssl
./config -fsanitize=address
make -j10

polarssl (mbedtls) cd polarssl cmake -D CMAKE_BUILD_TYPE:String="ASan" . make

gnutls 3.4.9 cd gnutls ./configure CPPFLAGS="-fsanitize=address" CFLAGS="-fsanitize=address" --disable-shared --with-included-libtasn1 --without-p11-kit make -j10 make install

botan: ./configure.py --with-sanitizers --disable-shared make

nss (without asn):

• worked only on 32bit for me!
• inserted manually asan parameter into the makefile. it resulted into compilation problems
• resources https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/Building
• missing lib patching in include: https://bugs.launchpad.net/ubuntu/+source/zlib/+bug/1155307 hg clone https://hg.mozilla.org/projects/nspr hg clone https://hg.mozilla.org/projects/nss sudo ln -s /usr/include/x86_64-linux-gnu/zconf.h /usr/include

matrixssl: To set that up in matrixssl-3-8-3/4-open, edit ./common.mk

... #Manually enable debug here MATRIX_DEBUG:=1

ifdef MATRIX_DEBUG CC:=clang OPT:=-O1 -g -DDEBUG -Wall -fsanitize=address #OPT+=-Wconversion LDFLAGS+=-fsanitize=address STRIP:=test # no-op else

How to test for asan ready compilation? objdump -d openssl | grep asan -i