ViewVC Help
View File | Revision Log | Show Annotations | Download File
/cvs/gvpe/configure.ac
(Generate patch)

Comparing gvpe/configure.ac (file contents):
Revision 1.34 by pcg, Fri Mar 4 03:43:09 2005 UTC vs.
Revision 1.68 by root, Thu Oct 6 03:25:53 2022 UTC

1dnl Process this file with autoconf to produce a configure script. 1dnl Process this file with autoconf to produce a configure script.
2 2
3AC_PREREQ(2.59) 3AC_PREREQ([2.71])
4AC_INIT 4AC_INIT([gvpe],[3.1])
5AC_CONFIG_SRCDIR([src/vped.C]) 5AC_CONFIG_SRCDIR([src/gvpe.C])
6AC_CANONICAL_TARGET 6AC_CANONICAL_TARGET
7AM_INIT_AUTOMAKE(gvpe, 1.7) 7AM_INIT_AUTOMAKE
8AC_CONFIG_HEADERS([config.h]) 8AC_CONFIG_HEADERS([config.h])
9AM_MAINTAINER_MODE 9AM_MAINTAINER_MODE
10 10
11AH_TOP([ 11AH_TOP([
12#ifndef CONFIG_H__ 12#ifndef CONFIG_H__
… …
38typedef int16_t s16; 38typedef int16_t s16;
39typedef int32_t s32; 39typedef int32_t s32;
40#endif 40#endif
41 41
42#endif 42#endif
43])
44 43
45dnl Include the macros from the m4/ directory 44#if HAVE_CLOCALE
46AM_ACLOCAL_INCLUDE(m4) 45# define CLOCALE <clocale>
46#else
47# define CLOCALE <locale.h>
48#endif
49])
47 50
48AM_GNU_GETTEXT([external]) 51AM_GNU_GETTEXT([external])
49AM_GNU_GETTEXT_VERSION(0.11.5) 52AM_GNU_GETTEXT_VERSION(0.11.5)
50 53
51# Enable GNU extensions. 54# Enable GNU extensions.
52# Define this here, not in acconfig's @TOP@ section, since definitions 55# Define this here, not in acconfig's @TOP@ section, since definitions
53# in the latter don't make it into the configure-time tests. 56# in the latter don't make it into the configure-time tests.
54AC_DEFINE([_GNU_SOURCE], 1, [Enable GNU extenstions]) 57AC_DEFINE([_GNU_SOURCE], 1, [Enable GNU extensions])
55 58
56# do NOT define POSIX_SOURCE, sicne this clashes with many BSDs 59# do NOT define POSIX_SOURCE, sicne this clashes with many BSDs
57dnl AC_DEFINE([_POSIX_SOURCE], 1, [Enable POSIX 1003.1 extensions]) 60dnl AC_DEFINE([_POSIX_SOURCE], 1, [Enable POSIX 1003.1 extensions])
58dnl AC_DEFINE([_XOPEN_SOURCE], 500, [Enable XOPEN extensions]) 61dnl AC_DEFINE([_XOPEN_SOURCE], 500, [Enable XOPEN extensions])
59 62
60ALL_LINGUAS="" 63ALL_LINGUAS=""
61 64
62dnl Checks for programs. 65dnl Checks for programs.
63AC_PROG_CC
64AC_PROG_CPP 66AC_PROG_CPP
65AC_PROG_CXX 67AC_PROG_CXX
66AC_PROG_GCC_TRADITIONAL 68AC_PROG_GCC_TRADITIONAL
67AC_PROG_AWK 69AC_PROG_AWK
68AC_PROG_INSTALL 70AC_PROG_INSTALL
… …
71AC_PROG_RANLIB 73AC_PROG_RANLIB
72 74
73AC_ARG_ENABLE(iftype, 75AC_ARG_ENABLE(iftype,
74 [AS_HELP_STRING(--enable-iftype=TYPE/SUBTYPE, 76 [AS_HELP_STRING(--enable-iftype=TYPE/SUBTYPE,
75 Use kernel/net device interface TYPE/SUBTYPE. 77 Use kernel/net device interface TYPE/SUBTYPE.
76 Working combinations are: 78 Working combinations are (see doc/gvpe.osdep.5.pod):
77 "native/linux" 79 "native/linux"
78 "tincd/linux" 80 "tincd/linux"
81 "tincd/netbsd"
79 "tincd/freebsd" 82 "tincd/freebsd"
80 "tincd/openbsd" 83 "tincd/openbsd"
84 "native/darwin"
81 "tincd/darwin" 85 "tincd/darwin"
82 "native/cygwin"; 86 "native/cygwin";
83 Untested combinations are: 87 Untested combinations are:
84 "tincd/netbsd" 88 "tincd/bsd"
85 "tincd/solaris" 89 "tincd/solaris"
86 "tincd/mingw"; 90 "tincd/mingw"
91 "tincd/raw_socket"
92 "tincd/uml_socket";
87 Broken combinations are: 93 Broken combinations are:
88 "tincd/cygwin"; 94 "tincd/cygwin";
89 The default is to autodetect. 95 The default is to autodetect.
90 )], 96 )],
91 [ 97 [
… …
108 IFTYPE=tincd 114 IFTYPE=tincd
109 IFSUBTYPE=freebsd 115 IFSUBTYPE=freebsd
110 AC_DEFINE(HAVE_FREEBSD, 1, [FreeBSD]) 116 AC_DEFINE(HAVE_FREEBSD, 1, [FreeBSD])
111 ;; 117 ;;
112 *darwin*) 118 *darwin*)
113 IFTYPE=tincd 119 IFTYPE=native
114 IFSUBTYPE=darwin 120 IFSUBTYPE=darwin
115 AC_DEFINE(HAVE_DARWIN, 1, [Darwin (MacOS/X)]) 121 AC_DEFINE(HAVE_DARWIN, 1, [Darwin (MacOS/X)])
116 ;; 122 ;;
117 *solaris*) 123 *solaris*)
118 IFTYPE=tincd 124 IFTYPE=tincd
… …
148AC_CACHE_SAVE 154AC_CACHE_SAVE
149 155
150dnl Checks for libraries. 156dnl Checks for libraries.
151 157
152AC_LANG(C++) 158AC_LANG(C++)
153AC_CHECK_HEADERS(ext/hash_map) 159AC_CHECK_HEADERS(tr1/unordered_map ext/hash_map clocale)
154 160
155dnl Checks for header files. 161dnl Checks for header files.
156AC_CHECK_HEADERS([fcntl.h inttypes.h limits.h malloc.h stdint.h strings.h syslog.h unistd.h \ 162AC_CHECK_HEADERS([fcntl.h inttypes.h limits.h malloc.h stdint.h strings.h syslog.h unistd.h \
157 sys/file.h sys/ioctl.h sys/param.h sys/time.h netinet/in_systm.h sys/cygwin.h \ 163 sys/file.h sys/ioctl.h sys/param.h sys/time.h netinet/in_systm.h sys/cygwin.h \
158 sys/mman.h netinet/in.h]) 164 sys/mman.h netinet/in.h])
… …
173 179
174dnl Checks for typedefs, structures, and compiler characteristics. 180dnl Checks for typedefs, structures, and compiler characteristics.
175AC_C_CONST 181AC_C_CONST
176AC_TYPE_PID_T 182AC_TYPE_PID_T
177AC_TYPE_SIZE_T 183AC_TYPE_SIZE_T
178AC_HEADER_TIME 184AC_CHECK_HEADERS_ONCE([sys/time.h])
185
179AC_STRUCT_TM 186AC_STRUCT_TM
180 187
181AC_CACHE_CHECK([for socklen_t], ac_cv_type_socklen_t, 188AC_CACHE_CHECK([for socklen_t], ac_cv_type_socklen_t,
182[ 189[
183 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[#include <sys/types.h> 190 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[#include <sys/types.h>
… …
195]) 202])
196if test $ac_cv_struct_addrinfo = yes; then 203if test $ac_cv_struct_addrinfo = yes; then
197 AC_DEFINE(HAVE_STRUCT_ADDRINFO, 1, [struct addrinfo available]) 204 AC_DEFINE(HAVE_STRUCT_ADDRINFO, 1, [struct addrinfo available])
198fi 205fi
199 206
200dnl Checks for library functions.
201AC_TYPE_SIGNAL
202
203AC_LANG_PUSH(C) 207AC_LANG_PUSH(C)
204
205AC_HEADER_STDC
206 208
207dnl argl, could somebody catapult darwin into the 21st century??? 209dnl argl, could somebody catapult darwin into the 21st century???
208AC_CHECK_FUNCS(asprintf daemon get_current_dir_name putenv select strerror strsignal strtol unsetenv mlockall) 210AC_CHECK_FUNCS(asprintf daemon get_current_dir_name putenv select strerror strsignal strtol unsetenv mlockall)
209 211
210AC_FUNC_ALLOCA 212AC_FUNC_ALLOCA
… …
216]) 218])
217AC_CHECK_FUNC(gethostbyname, [], [ 219AC_CHECK_FUNC(gethostbyname, [], [
218 AC_CHECK_LIB(nsl, gethostbyname) 220 AC_CHECK_LIB(nsl, gethostbyname)
219]) 221])
220 222
223dnl libev support
224m4_include([libev/libev.m4])
225
221AC_LANG_POP 226AC_LANG_POP
222 227
223dnl AC_CHECK_FUNCS([freeaddrinfo gai_strerror getaddrinfo getnameinfo]) 228dnl AC_CHECK_FUNCS([freeaddrinfo gai_strerror getaddrinfo getnameinfo])
224 229
225AC_CACHE_SAVE 230AC_CACHE_SAVE
226 231
227dnl These are defined in files in m4/ 232dnl These are defined in files in m4/
228tinc_TUNTAP 233tinc_TUNTAP
229 234
230tinc_OPENSSL 235PKG_CHECK_MODULES([LIBCRYPTO], [libcrypto >= 1])
231if test "x$openssl_include" != x; then 236
232 CXXFLAGS="$CXXFLAGS -I$openssl_include" 237AC_ARG_ENABLE(threads,
238 [AS_HELP_STRING(--enable-threads,try to use threads for long-running asynchronous operations (default enabled).)],
239 [try_threads=$enableval],
240 [try_threads=yes]
241)
242
243if test "x$try_threads" = xyes; then
244 AC_CHECK_HEADER(pthread.h,[
245 LIBS="$LIBS -lpthread"
246 AC_COMPILE_IFELSE(
247 [AC_LANG_PROGRAM([#include <pthread.h>], [pthread_t id; pthread_create (&id, 0, 0, 0);])],
248 [AC_DEFINE_UNQUOTED(ENABLE_PTHREADS, 1, [POSIX thread support.])]
249 )
250 ])
233fi 251fi
234dnl tinc_ZLIB
235 252
236AC_ARG_ENABLE(static-daemon, 253AC_ARG_ENABLE(static-daemon,
237 [AS_HELP_STRING(--enable-static-daemon,enable statically linked daemon.)], 254 [AS_HELP_STRING(--enable-static-daemon,enable statically linked daemon.)],
238 [LDFLAGS_DAEMON=-static] 255 [LDFLAGS_DAEMON=-static]
239) 256)
240AC_SUBST(LDFLAGS_DAEMON) 257AC_SUBST(LDFLAGS_DAEMON)
241 258
242AC_ARG_ENABLE(rohc, 259dnl AC_ARG_ENABLE(rohc,
243 [AS_HELP_STRING(--enable-rohc,enable robust header compression (rfc3095).)], 260dnl [AS_HELP_STRING(--enable-rohc,enable robust header compression (rfc3095).)],
244 [ 261dnl [
245 echo 262dnl echo
246 echo "**********************************************************************" 263dnl echo "**********************************************************************"
247 echo "**********************************************************************" 264dnl echo "**********************************************************************"
248 echo "**** --enable-rohc is highly experimental, do not use ****************" 265dnl echo "**** --enable-rohc is highly experimental, do not use ****************"
249 echo "**********************************************************************" 266dnl echo "**********************************************************************"
250 echo "**********************************************************************" 267dnl echo "**********************************************************************"
251 echo 268dnl echo
252 rohc=true 269dnl rohc=true
253 AC_DEFINE_UNQUOTED(ENABLE_ROHC, 1, [ROHC support]) 270dnl AC_DEFINE_UNQUOTED(ENABLE_ROHC, 1, [ROHC support])
254 ] 271dnl ]
255) 272dnl )
256 273
257AM_CONDITIONAL(ROHC, test x$rohc = xtrue) 274AM_CONDITIONAL(ROHC, test x$rohc = xtrue)
258 275
276dnl AC_ARG_ENABLE(bridging,
277dnl [AS_HELP_STRING(--enable-bridging,enable bridging support (default disabled).)],
278dnl AC_DEFINE_UNQUOTED(ENABLE_BRIDGING, 1, [bridging support.])
279dnl )
280
281ICMP=1
259AC_ARG_ENABLE(icmp, 282AC_ARG_ENABLE(icmp,
260 [AS_HELP_STRING(--enable-icmp,enable icmp protocol support (default disabled).)], 283 [AS_HELP_STRING(--disable-icmp,enable icmp protocol support (default enabled).)],
284 if test "x$enableval" = xno; then
285 ICMP=0
286 fi
287)
288if test "x$ICMP" = x1; then
261 AC_DEFINE_UNQUOTED(ENABLE_ICMP, 1, [ICMP protocol support.]) 289 AC_DEFINE_UNQUOTED(ENABLE_ICMP, 1, [ICMP protocol support.])
262) 290fi
263 291
292TCP=1
264AC_ARG_ENABLE(tcp, 293AC_ARG_ENABLE(tcp,
265 [AS_HELP_STRING(--enable-tcp,enable tcp protocol support (default disabled).)], 294 [AS_HELP_STRING(--disable-tcp,enable tcp protocol support (default enabled).)],
295 if test "x$enableval" = xno; then
296 TCP=0
297 fi
298)
299if test "x$TCP" = x1; then
266 AC_DEFINE_UNQUOTED(ENABLE_TCP, 1, [TCP protocol support.]) 300 AC_DEFINE_UNQUOTED(ENABLE_TCP, 1, [TCP protocol support.])
301fi
302
303HTTP=1
304AC_ARG_ENABLE(http-proxy,
305 [AS_HELP_STRING(--disable-http-proxy,enable http proxy connect support (default enabled).)],
306 if test "x$enableval" = xno; then
307 HTTP=0
308 fi
267) 309)
310if test "x$HTTP" = x1; then
311 AC_DEFINE_UNQUOTED(ENABLE_HTTP_PROXY, 1, [http proxy connect support.])
312fi
268 313
269AC_ARG_ENABLE(dns, 314AC_ARG_ENABLE(dns,
270 [AS_HELP_STRING(--enable-dns,enable dns tunnel protocol support (DOES NOT WORK).)], 315 [AS_HELP_STRING(--enable-dns,enable dns tunnel protocol support (default disabled).)],
271 [ 316 [
272 AC_CHECK_HEADER(gmp.h,,[AC_MSG_ERROR([gmp.h not found, required for --enable-dns])]) 317 AC_CHECK_HEADER(gmp.h,,[AC_MSG_ERROR([gmp.h not found, required for --enable-dns])])
273 AC_CHECK_LIB(gmp,main,,[AC_MSG_ERROR([libgmp not found, required for --enable-dns])]) 318 AC_CHECK_LIB(gmp,main,,[AC_MSG_ERROR([libgmp not found, required for --enable-dns])])
274 319
275 AC_DEFINE_UNQUOTED(ENABLE_DNS, 1, [DNS tunnel protocol support.]) 320 AC_DEFINE_UNQUOTED(ENABLE_DNS, 1, [DNS tunnel protocol support.])
276 ] 321 ]
277) 322)
278 323
279AC_ARG_ENABLE(http-proxy, 324RSA=3072
280 [AS_HELP_STRING(--enable-http-proxy,enable http proxy connect support (default disabled).)], 325AC_ARG_ENABLE(rsa-length,
281 AC_DEFINE_UNQUOTED(ENABLE_HTTP_PROXY, 1, [http proxy connect support.]) 326 [AS_HELP_STRING(--enable-rsa-length=BITS,[
327 use BITS rsa keys (default 3072). Allowed values are 2048-10240.])],
328 RSA=$enableval
282) 329)
330AC_DEFINE_UNQUOTED(RSABITS, $RSA, [Size of RSA keys.])
283 331
284HMAC=12 332HMACSIZE=12
285AC_ARG_ENABLE(hmac-length, 333AC_ARG_ENABLE(hmac-length,
286 [AS_HELP_STRING(--enable-hmac-length=BYTES,[ 334 [AS_HELP_STRING(--enable-hmac-length=BYTES,[
287 use a hmac of length BYTES bytes (default 12). Allowed values are 4, 8, 12, 16.])], 335 use a hmac of length BYTES bytes (default 12). Allowed values are 4, 8, 12, 16.])],
288 HMAC=$enableval 336 HMACSIZE=$enableval
289) 337)
290AC_DEFINE_UNQUOTED(HMACLENGTH, $HMAC, [Size of HMAC in each packet in bytes.]) 338AC_DEFINE_UNQUOTED(HMACLENGTH, $HMACSIZE, [Size of HMAC in each packet in bytes.])
291
292RAND=8
293AC_ARG_ENABLE(rand-length,
294 [AS_HELP_STRING(--enable-rand-length=BYTES,
295 [use BYTES bytes of extra randomness (default 8). Allowed values are 0, 4, 8.])],
296 RAND=$enableval
297)
298AC_DEFINE_UNQUOTED(RAND_SIZE, $RAND, [Add this many bytes of randomness to each packet.])
299 339
300MTU=1500 340MTU=1500
301AC_ARG_ENABLE(mtu, 341AC_ARG_ENABLE(max-mtu,
302 [AS_HELP_STRING(--enable-max-mtu=BYTES,enable mtu sizes upto BYTES bytes (default 1500). Use 9100 for jumbogram support.)], 342 [AS_HELP_STRING(--enable-max-mtu=BYTES,enable mtu sizes upto BYTES bytes (default 1500). Use 9100 for jumbogram support.)],
303 MTU=$enableval 343 MTU=$enableval
304) 344)
305AC_DEFINE_UNQUOTED(MAX_MTU, $MTU + 14, [Maximum MTU supported.]) 345AC_DEFINE_UNQUOTED(MAX_MTU, ($MTU + 14), [Maximum MTU supported.])
306 346
307COMPRESS=1 347COMPRESS=1
308AC_ARG_ENABLE(compression, 348AC_ARG_ENABLE(compression,
309 [AS_HELP_STRING(--disable-compression,Disable compression support.)], 349 [AS_HELP_STRING(--disable-compression,Disable compression support.)],
310 if test "x$enableval" = xno; then 350 if test "x$enableval" = xno; then
311 COMPRESS=0 351 COMPRESS=0
312 fi 352 fi
313) 353)
314AC_DEFINE_UNQUOTED(ENABLE_COMPRESSION, $COMPRESS, [Enable compression support.]) 354AC_DEFINE_UNQUOTED(ENABLE_COMPRESSION, $COMPRESS, [Enable compression support.])
315 355
316CIPHER=bf_cbc 356CIPHER=aes_128_ctr
317AC_ARG_ENABLE(cipher, 357AC_ARG_ENABLE(cipher,
318 [AS_HELP_STRING(--enable-cipher,[ 358 [AS_HELP_STRING(--enable-cipher=CIPHER,[
319 Select the symmetric cipher (default "bf"). 359 Select the symmetric cipher (default "aes-128").
320 Must be one of "bf" (blowfish), "aes-128" (rijndael), "aes-192" or "aes-256".])], 360 Must be one of "aes-128" (rijndael), "aes-192", or "aes-256".])],
321 if test "x$enableval" = xbf ; then CIPHER=bf_cbc ; fi 361 #if test "x$enableval" = xbf ; then CIPHER=bf_ctr ; fi
322 if test "x$enableval" = xaes-128; then CIPHER=aes_128_cbc; fi 362 if test "x$enableval" = xaes-128 ; then CIPHER=aes_128_ctr ; fi
323 if test "x$enableval" = xaes-192; then CIPHER=aes_192_cbc; fi 363 if test "x$enableval" = xaes-192 ; then CIPHER=aes_192_ctr ; fi
324 if test "x$enableval" = xaes-256; then CIPHER=aes_256_cbc; fi 364 if test "x$enableval" = xaes-256 ; then CIPHER=aes_256_ctr ; fi
365 #if test "x$enableval" = xcamellia-128; then CIPHER=camellia_128_ctr; fi
366 #if test "x$enableval" = xcamellia-256; then CIPHER=camellia_256_ctr; fi
325) 367)
326AC_DEFINE_UNQUOTED(ENABLE_CIPHER, EVP_${CIPHER}, [Select the symmetric cipher to use.]) 368AC_DEFINE_UNQUOTED(ENABLE_CIPHER, EVP_${CIPHER}, [Select the symmetric cipher to use.])
327 369
328DIGEST=sha1 370HMAC=sha1
329AC_ARG_ENABLE(digest, 371AC_ARG_ENABLE(hmac-digest,
330 [AS_HELP_STRING(--enable-digest,[ 372 [AS_HELP_STRING(--enable-hmac-digest=HMAC,[
331 Select the digets algorithm to use (default "sha1"). Must be one of 373 Select the HMAC digest algorithm to use (default "sha1"). Must be one of
332 "sha1", "ripemd160", "md5" or "md4" (insecure).])], 374 "sha512", "sha256", "sha1", "ripemd160", "whirlpool".])],
375 if test "x$enableval" = xwhirlpool; then HMAC=whirlpool; fi
376 if test "x$enableval" = xsha512 ; then HMAC=sha512 ; fi
377 if test "x$enableval" = xsha256 ; then HMAC=sha256 ; fi
333 if test "x$enableval" = xsha1 ; then DIGEST=sha1 ; fi 378 if test "x$enableval" = xsha1 ; then HMAC=sha1 ; fi
334 if test "x$enableval" = xripemd160; then DIGEST=ripemd160; fi 379 if test "x$enableval" = xripemd160; then HMAC=ripemd160; fi
380)
381AC_DEFINE_UNQUOTED(ENABLE_HMAC, EVP_${HMAC}, [Select the HMAC digest algorithm to use.])
382
383AUTH=sha512
384AC_ARG_ENABLE(auth-digest,
385 [AS_HELP_STRING(--enable-auth-digest=DIGEST,[
386 Select the hmac algorithm to use (default "sha512"). Must be one of
387 "sha512", "sha256", "whirlpool".])],
388 if test "x$enableval" = xwhirlpool; then AUTH=whirlpool; fi
335 if test "x$enableval" = xmd5 ; then DIGEST=md5 ; fi 389 if test "x$enableval" = xsha512 ; then AUTH=sha512 ; fi
336 if test "x$enableval" = xmd4 ; then DIGEST=md4 ; fi 390 if test "x$enableval" = xsha256 ; then AUTH=sha256 ; fi
337) 391)
338AC_DEFINE_UNQUOTED(ENABLE_DIGEST, EVP_${DIGEST}, [Select the digest algorithm to use.]) 392AC_DEFINE_UNQUOTED(ENABLE_AUTH, EVP_${AUTH}, [Select the auth digest algorithm to use.])
339 393
340if $CXX -v --help 2>&1 | grep -q fno-rtti; then 394if $CXX -v --help 2>&1 | grep -q fno-rtti; then
341 CXXFLAGS="$CXXFLAGS -fno-rtti" 395 CXXFLAGS="$CXXFLAGS -fno-rtti"
342fi 396fi
343 397
344if $CXX -v --help 2>&1 | grep -q fexceptions; then 398#if $CXX -v --help 2>&1 | grep -q fexceptions; then
345 CXXFLAGS="$CXXFLAGS -fno-exceptions" 399# CXXFLAGS="$CXXFLAGS -fno-exceptions"
346fi 400#fi
401
402LIBS="$EXTRA_LIBS $LIBS"
347 403
348dnl if $CXX -v --help 2>&1 | grep -q ffunction-sections; then 404dnl if $CXX -v --help 2>&1 | grep -q ffunction-sections; then
349dnl CXXFLAGS="$CXXFLAGS -ffunction-sections" 405dnl CXXFLAGS="$CXXFLAGS -ffunction-sections"
350dnl fi 406dnl fi
351dnl 407dnl
352dnl if $LD -v --help 2>&1 | grep -q gc-sections; then 408dnl if $LD -v --help 2>&1 | grep -q gc-sections; then
353dnl LDFLAGS="$LDFLAGS -Wl,--gc-sections" 409dnl LDFLAGS="$LDFLAGS -Wl,--gc-sections"
354dnl fi 410dnl fi
355 411
356AC_CONFIG_COMMANDS_POST([ 412AC_SUBST(AM_CPPFLAGS)
413
414AC_CONFIG_FILES([Makefile po/Makefile.in
415src/Makefile
416doc/Makefile
417lib/Makefile
418m4/Makefile
419])
420AC_OUTPUT
357 421
358echo 422echo
359echo "***" 423echo "***"
360echo "*** Configuration Summary" 424echo "*** Configuration Summary"
361echo "***" 425echo "***"
362echo "*** Kernel Iface: $IFTYPE/$IFSUBTYPE" 426echo "*** Kernel Iface: $IFTYPE/$IFSUBTYPE"
427echo "*** RSA size: $RSA"
363echo "*** Cipher used: $CIPHER" 428echo "*** Cipher used: $CIPHER"
364echo "*** Digest used: $DIGEST" 429echo "*** Digest used: $DIGEST"
430echo "*** Authdigest: $AUTH"
365echo "*** HMAC length: $HMAC" 431echo "*** HMAC length: $HMAC"
366echo "*** RAND used: $RAND"
367echo "*** Max. MTU: $MTU" 432echo "*** Max. MTU: $MTU"
368echo "*** Compression: $COMPRESS"
369 433
370if test "x$DIGEST" = xmd4; then
371echo "***" 434echo "***"
372echo "*** WARNING: The digest you have chosen ($DIGEST) is known to be insecure" 435echo "*** Enable options:"
373fi 436grep ENABLE_ config.h | sed -e 's/^/*** /'
374 437
375if test "$HMAC" -lt 12; then 438if test "$HMACSIZE" -lt 12; then
376echo "***" 439echo "***"
377echo "*** WARNING: The hmac length you have chosen ($HMAC) is probably insecure" 440echo "*** WARNING: The hmac length you have chosen ($HMACSIZE) is quite insecure"
378fi 441fi
379 442
380if test "$RAND" -lt 8; then
381echo "***" 443echo "***"
382echo "*** WARNING: The random prefix you have chosen ($RAND) is probably insecure"
383fi
384
385echo "***"
386
387echo 444echo
388 445
389]) 446if pkg-config --exists 'libcrypto >= 1.1 libcrypto < 2.0'; then
447 cat <<EOF
448@<:@33m
449***
450*** WARNING WARNING WARNING WARNING WARNING WARNING WARNING
451***
452*** You seem to configure gvpe with OpenSSL 1.1 or newer.
453*** While this probably compiles, please note that this is not only
454*** unsupported, but also discouraged.
455***
456*** It is recommended to use either OpenSSL 1.0, as long as that is still
457*** supported, or LibreSSL (https://www.libressl.org/).
458***
459*** This is not a political issue - while porting GVPE to the newer
460*** OpenSSL 1.1 API, I encountered two incompatible API changes that were
461*** not documented, were not caught while compiling but caused security
462*** issues. When reported, the reaction of the OpenSSL developers was to
463*** update the documentation.
464***
465*** As a result, I lost all confidence in the ability and desire of
466*** OpenSSL developers to create a safe API, and would highly recommend
467*** switching to LibreSSL which explicitly avoids such braking changes.
468***
469*** WARNING WARNING WARNING WARNING WARNING WARNING WARNING
470***
471*** Again, do not use OpenSSL 1.1 and complain if stuff breaks.
472*** You have been warned, but your choice is respected.
473***
474@<:@0m
390 475
391AC_SUBST(INCLUDES) 476EOF
477fi
392 478
393AC_CONFIG_FILES([Makefile po/Makefile.in 479
394src/Makefile
395doc/Makefile
396lib/Makefile
397m4/Makefile
398])
399AC_OUTPUT

Diff Legend

– Removed lines
+ Added lines
< Changed lines
> Changed lines