ViewVC Help
View File | Revision Log | Show Annotations | Download File
/cvs/gvpe/configure.ac
(Generate patch)

Comparing gvpe/configure.ac (file contents):
Revision 1.36 by pcg, Thu Mar 17 23:59:37 2005 UTC vs.
Revision 1.68 by root, Thu Oct 6 03:25:53 2022 UTC

1dnl Process this file with autoconf to produce a configure script. 1dnl Process this file with autoconf to produce a configure script.
2 2
3AC_PREREQ(2.59) 3AC_PREREQ([2.71])
4AC_INIT 4AC_INIT([gvpe],[3.1])
5AC_CONFIG_SRCDIR([src/vped.C]) 5AC_CONFIG_SRCDIR([src/gvpe.C])
6AC_CANONICAL_TARGET 6AC_CANONICAL_TARGET
7AM_INIT_AUTOMAKE(gvpe, 1.8) 7AM_INIT_AUTOMAKE
8AC_CONFIG_HEADERS([config.h]) 8AC_CONFIG_HEADERS([config.h])
9AM_MAINTAINER_MODE 9AM_MAINTAINER_MODE
10 10
11AH_TOP([ 11AH_TOP([
12#ifndef CONFIG_H__ 12#ifndef CONFIG_H__
… …
38typedef int16_t s16; 38typedef int16_t s16;
39typedef int32_t s32; 39typedef int32_t s32;
40#endif 40#endif
41 41
42#endif 42#endif
43])
44 43
45dnl Include the macros from the m4/ directory 44#if HAVE_CLOCALE
46AM_ACLOCAL_INCLUDE(m4) 45# define CLOCALE <clocale>
46#else
47# define CLOCALE <locale.h>
48#endif
49])
47 50
48AM_GNU_GETTEXT([external]) 51AM_GNU_GETTEXT([external])
49AM_GNU_GETTEXT_VERSION(0.11.5) 52AM_GNU_GETTEXT_VERSION(0.11.5)
50 53
51# Enable GNU extensions. 54# Enable GNU extensions.
52# Define this here, not in acconfig's @TOP@ section, since definitions 55# Define this here, not in acconfig's @TOP@ section, since definitions
53# in the latter don't make it into the configure-time tests. 56# in the latter don't make it into the configure-time tests.
54AC_DEFINE([_GNU_SOURCE], 1, [Enable GNU extenstions]) 57AC_DEFINE([_GNU_SOURCE], 1, [Enable GNU extensions])
55 58
56# do NOT define POSIX_SOURCE, sicne this clashes with many BSDs 59# do NOT define POSIX_SOURCE, sicne this clashes with many BSDs
57dnl AC_DEFINE([_POSIX_SOURCE], 1, [Enable POSIX 1003.1 extensions]) 60dnl AC_DEFINE([_POSIX_SOURCE], 1, [Enable POSIX 1003.1 extensions])
58dnl AC_DEFINE([_XOPEN_SOURCE], 500, [Enable XOPEN extensions]) 61dnl AC_DEFINE([_XOPEN_SOURCE], 500, [Enable XOPEN extensions])
59 62
60ALL_LINGUAS="" 63ALL_LINGUAS=""
61 64
62dnl Checks for programs. 65dnl Checks for programs.
63AC_PROG_CC
64AC_PROG_CPP 66AC_PROG_CPP
65AC_PROG_CXX 67AC_PROG_CXX
66AC_PROG_GCC_TRADITIONAL 68AC_PROG_GCC_TRADITIONAL
67AC_PROG_AWK 69AC_PROG_AWK
68AC_PROG_INSTALL 70AC_PROG_INSTALL
… …
71AC_PROG_RANLIB 73AC_PROG_RANLIB
72 74
73AC_ARG_ENABLE(iftype, 75AC_ARG_ENABLE(iftype,
74 [AS_HELP_STRING(--enable-iftype=TYPE/SUBTYPE, 76 [AS_HELP_STRING(--enable-iftype=TYPE/SUBTYPE,
75 Use kernel/net device interface TYPE/SUBTYPE. 77 Use kernel/net device interface TYPE/SUBTYPE.
76 Working combinations are: 78 Working combinations are (see doc/gvpe.osdep.5.pod):
77 "native/linux" 79 "native/linux"
78 "tincd/linux" 80 "tincd/linux"
81 "tincd/netbsd"
79 "tincd/freebsd" 82 "tincd/freebsd"
80 "tincd/openbsd" 83 "tincd/openbsd"
84 "native/darwin"
81 "tincd/darwin" 85 "tincd/darwin"
82 "native/cygwin"; 86 "native/cygwin";
83 Untested combinations are: 87 Untested combinations are:
84 "tincd/netbsd" 88 "tincd/bsd"
85 "tincd/solaris" 89 "tincd/solaris"
86 "tincd/mingw" 90 "tincd/mingw"
87 "tincd/raw_socket" 91 "tincd/raw_socket"
88 "tincd/uml_socket"; 92 "tincd/uml_socket";
89 Broken combinations are: 93 Broken combinations are:
… …
110 IFTYPE=tincd 114 IFTYPE=tincd
111 IFSUBTYPE=freebsd 115 IFSUBTYPE=freebsd
112 AC_DEFINE(HAVE_FREEBSD, 1, [FreeBSD]) 116 AC_DEFINE(HAVE_FREEBSD, 1, [FreeBSD])
113 ;; 117 ;;
114 *darwin*) 118 *darwin*)
115 IFTYPE=tincd 119 IFTYPE=native
116 IFSUBTYPE=darwin 120 IFSUBTYPE=darwin
117 AC_DEFINE(HAVE_DARWIN, 1, [Darwin (MacOS/X)]) 121 AC_DEFINE(HAVE_DARWIN, 1, [Darwin (MacOS/X)])
118 ;; 122 ;;
119 *solaris*) 123 *solaris*)
120 IFTYPE=tincd 124 IFTYPE=tincd
… …
150AC_CACHE_SAVE 154AC_CACHE_SAVE
151 155
152dnl Checks for libraries. 156dnl Checks for libraries.
153 157
154AC_LANG(C++) 158AC_LANG(C++)
155AC_CHECK_HEADERS(ext/hash_map) 159AC_CHECK_HEADERS(tr1/unordered_map ext/hash_map clocale)
156 160
157dnl Checks for header files. 161dnl Checks for header files.
158AC_CHECK_HEADERS([fcntl.h inttypes.h limits.h malloc.h stdint.h strings.h syslog.h unistd.h \ 162AC_CHECK_HEADERS([fcntl.h inttypes.h limits.h malloc.h stdint.h strings.h syslog.h unistd.h \
159 sys/file.h sys/ioctl.h sys/param.h sys/time.h netinet/in_systm.h sys/cygwin.h \ 163 sys/file.h sys/ioctl.h sys/param.h sys/time.h netinet/in_systm.h sys/cygwin.h \
160 sys/mman.h netinet/in.h]) 164 sys/mman.h netinet/in.h])
… …
175 179
176dnl Checks for typedefs, structures, and compiler characteristics. 180dnl Checks for typedefs, structures, and compiler characteristics.
177AC_C_CONST 181AC_C_CONST
178AC_TYPE_PID_T 182AC_TYPE_PID_T
179AC_TYPE_SIZE_T 183AC_TYPE_SIZE_T
180AC_HEADER_TIME 184AC_CHECK_HEADERS_ONCE([sys/time.h])
185
181AC_STRUCT_TM 186AC_STRUCT_TM
182 187
183AC_CACHE_CHECK([for socklen_t], ac_cv_type_socklen_t, 188AC_CACHE_CHECK([for socklen_t], ac_cv_type_socklen_t,
184[ 189[
185 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[#include <sys/types.h> 190 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[#include <sys/types.h>
… …
197]) 202])
198if test $ac_cv_struct_addrinfo = yes; then 203if test $ac_cv_struct_addrinfo = yes; then
199 AC_DEFINE(HAVE_STRUCT_ADDRINFO, 1, [struct addrinfo available]) 204 AC_DEFINE(HAVE_STRUCT_ADDRINFO, 1, [struct addrinfo available])
200fi 205fi
201 206
202dnl Checks for library functions.
203AC_TYPE_SIGNAL
204
205AC_LANG_PUSH(C) 207AC_LANG_PUSH(C)
206
207AC_HEADER_STDC
208 208
209dnl argl, could somebody catapult darwin into the 21st century??? 209dnl argl, could somebody catapult darwin into the 21st century???
210AC_CHECK_FUNCS(asprintf daemon get_current_dir_name putenv select strerror strsignal strtol unsetenv mlockall) 210AC_CHECK_FUNCS(asprintf daemon get_current_dir_name putenv select strerror strsignal strtol unsetenv mlockall)
211 211
212AC_FUNC_ALLOCA 212AC_FUNC_ALLOCA
… …
218]) 218])
219AC_CHECK_FUNC(gethostbyname, [], [ 219AC_CHECK_FUNC(gethostbyname, [], [
220 AC_CHECK_LIB(nsl, gethostbyname) 220 AC_CHECK_LIB(nsl, gethostbyname)
221]) 221])
222 222
223dnl libev support
224m4_include([libev/libev.m4])
225
223AC_LANG_POP 226AC_LANG_POP
224 227
225dnl AC_CHECK_FUNCS([freeaddrinfo gai_strerror getaddrinfo getnameinfo]) 228dnl AC_CHECK_FUNCS([freeaddrinfo gai_strerror getaddrinfo getnameinfo])
226 229
227AC_CACHE_SAVE 230AC_CACHE_SAVE
228 231
229dnl These are defined in files in m4/ 232dnl These are defined in files in m4/
230tinc_TUNTAP 233tinc_TUNTAP
231 234
232tinc_OPENSSL 235PKG_CHECK_MODULES([LIBCRYPTO], [libcrypto >= 1])
233if test "x$openssl_include" != x; then 236
234 CXXFLAGS="$CXXFLAGS -I$openssl_include" 237AC_ARG_ENABLE(threads,
238 [AS_HELP_STRING(--enable-threads,try to use threads for long-running asynchronous operations (default enabled).)],
239 [try_threads=$enableval],
240 [try_threads=yes]
241)
242
243if test "x$try_threads" = xyes; then
244 AC_CHECK_HEADER(pthread.h,[
245 LIBS="$LIBS -lpthread"
246 AC_COMPILE_IFELSE(
247 [AC_LANG_PROGRAM([#include <pthread.h>], [pthread_t id; pthread_create (&id, 0, 0, 0);])],
248 [AC_DEFINE_UNQUOTED(ENABLE_PTHREADS, 1, [POSIX thread support.])]
249 )
250 ])
235fi 251fi
236dnl tinc_ZLIB
237 252
238AC_ARG_ENABLE(static-daemon, 253AC_ARG_ENABLE(static-daemon,
239 [AS_HELP_STRING(--enable-static-daemon,enable statically linked daemon.)], 254 [AS_HELP_STRING(--enable-static-daemon,enable statically linked daemon.)],
240 [LDFLAGS_DAEMON=-static] 255 [LDFLAGS_DAEMON=-static]
241) 256)
242AC_SUBST(LDFLAGS_DAEMON) 257AC_SUBST(LDFLAGS_DAEMON)
243 258
244AC_ARG_ENABLE(rohc, 259dnl AC_ARG_ENABLE(rohc,
245 [AS_HELP_STRING(--enable-rohc,enable robust header compression (rfc3095).)], 260dnl [AS_HELP_STRING(--enable-rohc,enable robust header compression (rfc3095).)],
246 [ 261dnl [
247 echo 262dnl echo
248 echo "**********************************************************************" 263dnl echo "**********************************************************************"
249 echo "**********************************************************************" 264dnl echo "**********************************************************************"
250 echo "**** --enable-rohc is highly experimental, do not use ****************" 265dnl echo "**** --enable-rohc is highly experimental, do not use ****************"
251 echo "**********************************************************************" 266dnl echo "**********************************************************************"
252 echo "**********************************************************************" 267dnl echo "**********************************************************************"
253 echo 268dnl echo
254 rohc=true 269dnl rohc=true
255 AC_DEFINE_UNQUOTED(ENABLE_ROHC, 1, [ROHC support]) 270dnl AC_DEFINE_UNQUOTED(ENABLE_ROHC, 1, [ROHC support])
256 ] 271dnl ]
257) 272dnl )
258 273
259AM_CONDITIONAL(ROHC, test x$rohc = xtrue) 274AM_CONDITIONAL(ROHC, test x$rohc = xtrue)
260 275
276dnl AC_ARG_ENABLE(bridging,
277dnl [AS_HELP_STRING(--enable-bridging,enable bridging support (default disabled).)],
278dnl AC_DEFINE_UNQUOTED(ENABLE_BRIDGING, 1, [bridging support.])
279dnl )
280
281ICMP=1
261AC_ARG_ENABLE(icmp, 282AC_ARG_ENABLE(icmp,
262 [AS_HELP_STRING(--enable-icmp,enable icmp protocol support (default disabled).)], 283 [AS_HELP_STRING(--disable-icmp,enable icmp protocol support (default enabled).)],
284 if test "x$enableval" = xno; then
285 ICMP=0
286 fi
287)
288if test "x$ICMP" = x1; then
263 AC_DEFINE_UNQUOTED(ENABLE_ICMP, 1, [ICMP protocol support.]) 289 AC_DEFINE_UNQUOTED(ENABLE_ICMP, 1, [ICMP protocol support.])
264) 290fi
265 291
292TCP=1
266AC_ARG_ENABLE(tcp, 293AC_ARG_ENABLE(tcp,
267 [AS_HELP_STRING(--enable-tcp,enable tcp protocol support (default disabled).)], 294 [AS_HELP_STRING(--disable-tcp,enable tcp protocol support (default enabled).)],
295 if test "x$enableval" = xno; then
296 TCP=0
297 fi
298)
299if test "x$TCP" = x1; then
268 AC_DEFINE_UNQUOTED(ENABLE_TCP, 1, [TCP protocol support.]) 300 AC_DEFINE_UNQUOTED(ENABLE_TCP, 1, [TCP protocol support.])
301fi
302
303HTTP=1
304AC_ARG_ENABLE(http-proxy,
305 [AS_HELP_STRING(--disable-http-proxy,enable http proxy connect support (default enabled).)],
306 if test "x$enableval" = xno; then
307 HTTP=0
308 fi
269) 309)
310if test "x$HTTP" = x1; then
311 AC_DEFINE_UNQUOTED(ENABLE_HTTP_PROXY, 1, [http proxy connect support.])
312fi
270 313
271AC_ARG_ENABLE(dns, 314AC_ARG_ENABLE(dns,
272 [AS_HELP_STRING(--enable-dns,enable dns tunnel protocol support (DOES NOT WORK).)], 315 [AS_HELP_STRING(--enable-dns,enable dns tunnel protocol support (default disabled).)],
273 [ 316 [
274 AC_CHECK_HEADER(gmp.h,,[AC_MSG_ERROR([gmp.h not found, required for --enable-dns])]) 317 AC_CHECK_HEADER(gmp.h,,[AC_MSG_ERROR([gmp.h not found, required for --enable-dns])])
275 AC_CHECK_LIB(gmp,main,,[AC_MSG_ERROR([libgmp not found, required for --enable-dns])]) 318 AC_CHECK_LIB(gmp,main,,[AC_MSG_ERROR([libgmp not found, required for --enable-dns])])
276 319
277 AC_DEFINE_UNQUOTED(ENABLE_DNS, 1, [DNS tunnel protocol support.]) 320 AC_DEFINE_UNQUOTED(ENABLE_DNS, 1, [DNS tunnel protocol support.])
278 ] 321 ]
279) 322)
280 323
281AC_ARG_ENABLE(http-proxy, 324RSA=3072
282 [AS_HELP_STRING(--enable-http-proxy,enable http proxy connect support (default disabled).)], 325AC_ARG_ENABLE(rsa-length,
283 AC_DEFINE_UNQUOTED(ENABLE_HTTP_PROXY, 1, [http proxy connect support.]) 326 [AS_HELP_STRING(--enable-rsa-length=BITS,[
327 use BITS rsa keys (default 3072). Allowed values are 2048-10240.])],
328 RSA=$enableval
284) 329)
330AC_DEFINE_UNQUOTED(RSABITS, $RSA, [Size of RSA keys.])
285 331
286HMAC=12 332HMACSIZE=12
287AC_ARG_ENABLE(hmac-length, 333AC_ARG_ENABLE(hmac-length,
288 [AS_HELP_STRING(--enable-hmac-length=BYTES,[ 334 [AS_HELP_STRING(--enable-hmac-length=BYTES,[
289 use a hmac of length BYTES bytes (default 12). Allowed values are 4, 8, 12, 16.])], 335 use a hmac of length BYTES bytes (default 12). Allowed values are 4, 8, 12, 16.])],
290 HMAC=$enableval 336 HMACSIZE=$enableval
291) 337)
292AC_DEFINE_UNQUOTED(HMACLENGTH, $HMAC, [Size of HMAC in each packet in bytes.]) 338AC_DEFINE_UNQUOTED(HMACLENGTH, $HMACSIZE, [Size of HMAC in each packet in bytes.])
293
294RAND=8
295AC_ARG_ENABLE(rand-length,
296 [AS_HELP_STRING(--enable-rand-length=BYTES,
297 [use BYTES bytes of extra randomness (default 8). Allowed values are 0, 4, 8.])],
298 RAND=$enableval
299)
300AC_DEFINE_UNQUOTED(RAND_SIZE, $RAND, [Add this many bytes of randomness to each packet.])
301 339
302MTU=1500 340MTU=1500
303AC_ARG_ENABLE(mtu, 341AC_ARG_ENABLE(max-mtu,
304 [AS_HELP_STRING(--enable-max-mtu=BYTES,enable mtu sizes upto BYTES bytes (default 1500). Use 9100 for jumbogram support.)], 342 [AS_HELP_STRING(--enable-max-mtu=BYTES,enable mtu sizes upto BYTES bytes (default 1500). Use 9100 for jumbogram support.)],
305 MTU=$enableval 343 MTU=$enableval
306) 344)
307AC_DEFINE_UNQUOTED(MAX_MTU, $MTU + 14, [Maximum MTU supported.]) 345AC_DEFINE_UNQUOTED(MAX_MTU, ($MTU + 14), [Maximum MTU supported.])
308 346
309COMPRESS=1 347COMPRESS=1
310AC_ARG_ENABLE(compression, 348AC_ARG_ENABLE(compression,
311 [AS_HELP_STRING(--disable-compression,Disable compression support.)], 349 [AS_HELP_STRING(--disable-compression,Disable compression support.)],
312 if test "x$enableval" = xno; then 350 if test "x$enableval" = xno; then
313 COMPRESS=0 351 COMPRESS=0
314 fi 352 fi
315) 353)
316AC_DEFINE_UNQUOTED(ENABLE_COMPRESSION, $COMPRESS, [Enable compression support.]) 354AC_DEFINE_UNQUOTED(ENABLE_COMPRESSION, $COMPRESS, [Enable compression support.])
317 355
318CIPHER=bf_cbc 356CIPHER=aes_128_ctr
319AC_ARG_ENABLE(cipher, 357AC_ARG_ENABLE(cipher,
320 [AS_HELP_STRING(--enable-cipher,[ 358 [AS_HELP_STRING(--enable-cipher=CIPHER,[
321 Select the symmetric cipher (default "bf"). 359 Select the symmetric cipher (default "aes-128").
322 Must be one of "bf" (blowfish), "aes-128" (rijndael), "aes-192" or "aes-256".])], 360 Must be one of "aes-128" (rijndael), "aes-192", or "aes-256".])],
323 if test "x$enableval" = xbf ; then CIPHER=bf_cbc ; fi 361 #if test "x$enableval" = xbf ; then CIPHER=bf_ctr ; fi
324 if test "x$enableval" = xaes-128; then CIPHER=aes_128_cbc; fi 362 if test "x$enableval" = xaes-128 ; then CIPHER=aes_128_ctr ; fi
325 if test "x$enableval" = xaes-192; then CIPHER=aes_192_cbc; fi 363 if test "x$enableval" = xaes-192 ; then CIPHER=aes_192_ctr ; fi
326 if test "x$enableval" = xaes-256; then CIPHER=aes_256_cbc; fi 364 if test "x$enableval" = xaes-256 ; then CIPHER=aes_256_ctr ; fi
365 #if test "x$enableval" = xcamellia-128; then CIPHER=camellia_128_ctr; fi
366 #if test "x$enableval" = xcamellia-256; then CIPHER=camellia_256_ctr; fi
327) 367)
328AC_DEFINE_UNQUOTED(ENABLE_CIPHER, EVP_${CIPHER}, [Select the symmetric cipher to use.]) 368AC_DEFINE_UNQUOTED(ENABLE_CIPHER, EVP_${CIPHER}, [Select the symmetric cipher to use.])
329 369
330DIGEST=sha1 370HMAC=sha1
331AC_ARG_ENABLE(digest, 371AC_ARG_ENABLE(hmac-digest,
332 [AS_HELP_STRING(--enable-digest,[ 372 [AS_HELP_STRING(--enable-hmac-digest=HMAC,[
333 Select the digets algorithm to use (default "sha1"). Must be one of 373 Select the HMAC digest algorithm to use (default "sha1"). Must be one of
334 "sha1", "ripemd160", "md5" or "md4" (insecure).])], 374 "sha512", "sha256", "sha1", "ripemd160", "whirlpool".])],
375 if test "x$enableval" = xwhirlpool; then HMAC=whirlpool; fi
376 if test "x$enableval" = xsha512 ; then HMAC=sha512 ; fi
377 if test "x$enableval" = xsha256 ; then HMAC=sha256 ; fi
335 if test "x$enableval" = xsha1 ; then DIGEST=sha1 ; fi 378 if test "x$enableval" = xsha1 ; then HMAC=sha1 ; fi
336 if test "x$enableval" = xripemd160; then DIGEST=ripemd160; fi 379 if test "x$enableval" = xripemd160; then HMAC=ripemd160; fi
380)
381AC_DEFINE_UNQUOTED(ENABLE_HMAC, EVP_${HMAC}, [Select the HMAC digest algorithm to use.])
382
383AUTH=sha512
384AC_ARG_ENABLE(auth-digest,
385 [AS_HELP_STRING(--enable-auth-digest=DIGEST,[
386 Select the hmac algorithm to use (default "sha512"). Must be one of
387 "sha512", "sha256", "whirlpool".])],
388 if test "x$enableval" = xwhirlpool; then AUTH=whirlpool; fi
337 if test "x$enableval" = xmd5 ; then DIGEST=md5 ; fi 389 if test "x$enableval" = xsha512 ; then AUTH=sha512 ; fi
338 if test "x$enableval" = xmd4 ; then DIGEST=md4 ; fi 390 if test "x$enableval" = xsha256 ; then AUTH=sha256 ; fi
339) 391)
340AC_DEFINE_UNQUOTED(ENABLE_DIGEST, EVP_${DIGEST}, [Select the digest algorithm to use.]) 392AC_DEFINE_UNQUOTED(ENABLE_AUTH, EVP_${AUTH}, [Select the auth digest algorithm to use.])
341 393
342if $CXX -v --help 2>&1 | grep -q fno-rtti; then 394if $CXX -v --help 2>&1 | grep -q fno-rtti; then
343 CXXFLAGS="$CXXFLAGS -fno-rtti" 395 CXXFLAGS="$CXXFLAGS -fno-rtti"
344fi 396fi
345 397
346if $CXX -v --help 2>&1 | grep -q fexceptions; then 398#if $CXX -v --help 2>&1 | grep -q fexceptions; then
347 CXXFLAGS="$CXXFLAGS -fno-exceptions" 399# CXXFLAGS="$CXXFLAGS -fno-exceptions"
348fi 400#fi
401
402LIBS="$EXTRA_LIBS $LIBS"
349 403
350dnl if $CXX -v --help 2>&1 | grep -q ffunction-sections; then 404dnl if $CXX -v --help 2>&1 | grep -q ffunction-sections; then
351dnl CXXFLAGS="$CXXFLAGS -ffunction-sections" 405dnl CXXFLAGS="$CXXFLAGS -ffunction-sections"
352dnl fi 406dnl fi
353dnl 407dnl
354dnl if $LD -v --help 2>&1 | grep -q gc-sections; then 408dnl if $LD -v --help 2>&1 | grep -q gc-sections; then
355dnl LDFLAGS="$LDFLAGS -Wl,--gc-sections" 409dnl LDFLAGS="$LDFLAGS -Wl,--gc-sections"
356dnl fi 410dnl fi
357 411
358AC_CONFIG_COMMANDS_POST([ 412AC_SUBST(AM_CPPFLAGS)
413
414AC_CONFIG_FILES([Makefile po/Makefile.in
415src/Makefile
416doc/Makefile
417lib/Makefile
418m4/Makefile
419])
420AC_OUTPUT
359 421
360echo 422echo
361echo "***" 423echo "***"
362echo "*** Configuration Summary" 424echo "*** Configuration Summary"
363echo "***" 425echo "***"
364echo "*** Kernel Iface: $IFTYPE/$IFSUBTYPE" 426echo "*** Kernel Iface: $IFTYPE/$IFSUBTYPE"
427echo "*** RSA size: $RSA"
365echo "*** Cipher used: $CIPHER" 428echo "*** Cipher used: $CIPHER"
366echo "*** Digest used: $DIGEST" 429echo "*** Digest used: $DIGEST"
430echo "*** Authdigest: $AUTH"
367echo "*** HMAC length: $HMAC" 431echo "*** HMAC length: $HMAC"
368echo "*** RAND used: $RAND"
369echo "*** Max. MTU: $MTU" 432echo "*** Max. MTU: $MTU"
370echo "*** Compression: $COMPRESS"
371 433
372if test "x$DIGEST" = xmd4; then
373echo "***" 434echo "***"
374echo "*** WARNING: The digest you have chosen ($DIGEST) is known to be insecure" 435echo "*** Enable options:"
375fi 436grep ENABLE_ config.h | sed -e 's/^/*** /'
376 437
377if test "$HMAC" -lt 12; then 438if test "$HMACSIZE" -lt 12; then
378echo "***" 439echo "***"
379echo "*** WARNING: The hmac length you have chosen ($HMAC) is probably insecure" 440echo "*** WARNING: The hmac length you have chosen ($HMACSIZE) is quite insecure"
380fi 441fi
381 442
382if test "$RAND" -lt 8; then
383echo "***" 443echo "***"
384echo "*** WARNING: The random prefix you have chosen ($RAND) is probably insecure"
385fi
386
387echo "***"
388
389echo 444echo
390 445
391]) 446if pkg-config --exists 'libcrypto >= 1.1 libcrypto < 2.0'; then
447 cat <<EOF
448@<:@33m
449***
450*** WARNING WARNING WARNING WARNING WARNING WARNING WARNING
451***
452*** You seem to configure gvpe with OpenSSL 1.1 or newer.
453*** While this probably compiles, please note that this is not only
454*** unsupported, but also discouraged.
455***
456*** It is recommended to use either OpenSSL 1.0, as long as that is still
457*** supported, or LibreSSL (https://www.libressl.org/).
458***
459*** This is not a political issue - while porting GVPE to the newer
460*** OpenSSL 1.1 API, I encountered two incompatible API changes that were
461*** not documented, were not caught while compiling but caused security
462*** issues. When reported, the reaction of the OpenSSL developers was to
463*** update the documentation.
464***
465*** As a result, I lost all confidence in the ability and desire of
466*** OpenSSL developers to create a safe API, and would highly recommend
467*** switching to LibreSSL which explicitly avoids such braking changes.
468***
469*** WARNING WARNING WARNING WARNING WARNING WARNING WARNING
470***
471*** Again, do not use OpenSSL 1.1 and complain if stuff breaks.
472*** You have been warned, but your choice is respected.
473***
474@<:@0m
392 475
393AC_SUBST(INCLUDES) 476EOF
477fi
394 478
395AC_CONFIG_FILES([Makefile po/Makefile.in 479
396src/Makefile
397doc/Makefile
398lib/Makefile
399m4/Makefile
400])
401AC_OUTPUT

Diff Legend

– Removed lines
+ Added lines
< Changed lines
> Changed lines