ViewVC Help
View File | Revision Log | Show Annotations | Download File
/cvs/gvpe/configure.ac
(Generate patch)

Comparing gvpe/configure.ac (file contents):
Revision 1.53 by pcg, Sun Jan 18 03:45:28 2009 UTC vs.
Revision 1.64 by root, Thu Jan 29 00:21:39 2015 UTC

1dnl Process this file with autoconf to produce a configure script. 1dnl Process this file with autoconf to produce a configure script.
2 2
3AC_PREREQ(2.59) 3AC_PREREQ(2.69)
4AC_INIT 4AC_INIT
5AC_CONFIG_SRCDIR([src/gvpe.C]) 5AC_CONFIG_SRCDIR([src/gvpe.C])
6AC_CANONICAL_TARGET 6AC_CANONICAL_TARGET
7AM_INIT_AUTOMAKE(gvpe, 2.22) 7AM_INIT_AUTOMAKE(gvpe, 2.25)
8AC_CONFIG_HEADERS([config.h]) 8AC_CONFIG_HEADERS([config.h])
9AM_MAINTAINER_MODE 9AM_MAINTAINER_MODE
10 10
11AH_TOP([ 11AH_TOP([
12#ifndef CONFIG_H__ 12#ifndef CONFIG_H__
… …
45# define CLOCALE <clocale> 45# define CLOCALE <clocale>
46#else 46#else
47# define CLOCALE <locale.h> 47# define CLOCALE <locale.h>
48#endif 48#endif
49]) 49])
50
51dnl Include the macros from the m4/ directory
52AM_ACLOCAL_INCLUDE(m4)
53 50
54AM_GNU_GETTEXT([external]) 51AM_GNU_GETTEXT([external])
55AM_GNU_GETTEXT_VERSION(0.11.5) 52AM_GNU_GETTEXT_VERSION(0.11.5)
56 53
57# Enable GNU extensions. 54# Enable GNU extensions.
… …
243if test "x$openssl_include" != x; then 240if test "x$openssl_include" != x; then
244 CXXFLAGS="$CXXFLAGS -I$openssl_include" 241 CXXFLAGS="$CXXFLAGS -I$openssl_include"
245fi 242fi
246dnl tinc_ZLIB 243dnl tinc_ZLIB
247 244
245AC_ARG_ENABLE(threads,
246 [AS_HELP_STRING(--enable-threads,try to use threads for long-running asynchronous operations (default enabled).)],
247 [try_threads=$enableval],
248 [try_threads=yes]
249)
250
251if test "x$try_threads" = xyes; then
252 AC_CHECK_HEADER(pthread.h,[
253 LIBS="$LIBS -lpthread"
254 AC_COMPILE_IFELSE(
255 [AC_LANG_PROGRAM([#include <pthread.h>], [pthread_t id; pthread_create (&id, 0, 0, 0);])],
256 [AC_DEFINE_UNQUOTED(ENABLE_PTHREADS, 1, [POSIX thread support.])]
257 )
258 ])
259fi
260
248AC_ARG_ENABLE(static-daemon, 261AC_ARG_ENABLE(static-daemon,
249 [AS_HELP_STRING(--enable-static-daemon,enable statically linked daemon.)], 262 [AS_HELP_STRING(--enable-static-daemon,enable statically linked daemon.)],
250 [LDFLAGS_DAEMON=-static] 263 [LDFLAGS_DAEMON=-static]
251) 264)
252AC_SUBST(LDFLAGS_DAEMON) 265AC_SUBST(LDFLAGS_DAEMON)
… …
314 327
315 AC_DEFINE_UNQUOTED(ENABLE_DNS, 1, [DNS tunnel protocol support.]) 328 AC_DEFINE_UNQUOTED(ENABLE_DNS, 1, [DNS tunnel protocol support.])
316 ] 329 ]
317) 330)
318 331
332RSA=3072
333AC_ARG_ENABLE(rsa-length,
334 [AS_HELP_STRING(--enable-rsa-length=BITS,[
335 use BITS rsa keys (default 3072). Allowed values are 2048-10240.])],
336 RSA=$enableval
337)
338AC_DEFINE_UNQUOTED(RSABITS, $RSA, [Size of RSA keys.])
339
319HMAC=12 340HMACSIZE=12
320AC_ARG_ENABLE(hmac-length, 341AC_ARG_ENABLE(hmac-length,
321 [AS_HELP_STRING(--enable-hmac-length=BYTES,[ 342 [AS_HELP_STRING(--enable-hmac-length=BYTES,[
322 use a hmac of length BYTES bytes (default 12). Allowed values are 4, 8, 12, 16.])], 343 use a hmac of length BYTES bytes (default 12). Allowed values are 4, 8, 12, 16.])],
323 HMAC=$enableval 344 HMACSIZE=$enableval
324) 345)
325AC_DEFINE_UNQUOTED(HMACLENGTH, $HMAC, [Size of HMAC in each packet in bytes.]) 346AC_DEFINE_UNQUOTED(HMACLENGTH, $HMACSIZE, [Size of HMAC in each packet in bytes.])
326
327RAND=8
328AC_ARG_ENABLE(rand-length,
329 [AS_HELP_STRING(--enable-rand-length=BYTES,
330 [use BYTES bytes of extra randomness (default 8). Allowed values are 0, 4, 8.])],
331 RAND=$enableval
332)
333AC_DEFINE_UNQUOTED(RAND_SIZE, $RAND, [Add this many bytes of randomness to each packet.])
334 347
335MTU=1500 348MTU=1500
336AC_ARG_ENABLE(mtu, 349AC_ARG_ENABLE(max-mtu,
337 [AS_HELP_STRING(--enable-max-mtu=BYTES,enable mtu sizes upto BYTES bytes (default 1500). Use 9100 for jumbogram support.)], 350 [AS_HELP_STRING(--enable-max-mtu=BYTES,enable mtu sizes upto BYTES bytes (default 1500). Use 9100 for jumbogram support.)],
338 MTU=$enableval 351 MTU=$enableval
339) 352)
340AC_DEFINE_UNQUOTED(MAX_MTU, $MTU + 14, [Maximum MTU supported.]) 353AC_DEFINE_UNQUOTED(MAX_MTU, ($MTU + 14), [Maximum MTU supported.])
341 354
342COMPRESS=1 355COMPRESS=1
343AC_ARG_ENABLE(compression, 356AC_ARG_ENABLE(compression,
344 [AS_HELP_STRING(--disable-compression,Disable compression support.)], 357 [AS_HELP_STRING(--disable-compression,Disable compression support.)],
345 if test "x$enableval" = xno; then 358 if test "x$enableval" = xno; then
346 COMPRESS=0 359 COMPRESS=0
347 fi 360 fi
348) 361)
349AC_DEFINE_UNQUOTED(ENABLE_COMPRESSION, $COMPRESS, [Enable compression support.]) 362AC_DEFINE_UNQUOTED(ENABLE_COMPRESSION, $COMPRESS, [Enable compression support.])
350 363
351CIPHER=aes_128_cbc 364CIPHER=aes_128_ctr
352AC_ARG_ENABLE(cipher, 365AC_ARG_ENABLE(cipher,
353 [AS_HELP_STRING(--enable-cipher=CIPHER,[ 366 [AS_HELP_STRING(--enable-cipher=CIPHER,[
354 Select the symmetric cipher (default "aes-128"). 367 Select the symmetric cipher (default "aes-128").
355 Must be one of "bf" (blowfish), "aes-128" (rijndael), "aes-192" or "aes-256".])], 368 Must be one of "aes-128" (rijndael), "aes-192", or "aes-256".])],
356 if test "x$enableval" = xbf ; then CIPHER=bf_cbc ; fi 369 #if test "x$enableval" = xbf ; then CIPHER=bf_ctr ; fi
357 if test "x$enableval" = xaes-128; then CIPHER=aes_128_cbc; fi 370 if test "x$enableval" = xaes-128 ; then CIPHER=aes_128_ctr ; fi
358 if test "x$enableval" = xaes-192; then CIPHER=aes_192_cbc; fi 371 if test "x$enableval" = xaes-192 ; then CIPHER=aes_192_ctr ; fi
359 if test "x$enableval" = xaes-256; then CIPHER=aes_256_cbc; fi 372 if test "x$enableval" = xaes-256 ; then CIPHER=aes_256_ctr ; fi
373 #if test "x$enableval" = xcamellia-128; then CIPHER=camellia_128_ctr; fi
374 #if test "x$enableval" = xcamellia-256; then CIPHER=camellia_256_ctr; fi
360) 375)
361AC_DEFINE_UNQUOTED(ENABLE_CIPHER, EVP_${CIPHER}, [Select the symmetric cipher to use.]) 376AC_DEFINE_UNQUOTED(ENABLE_CIPHER, EVP_${CIPHER}, [Select the symmetric cipher to use.])
362 377
363DIGEST=ripemd160 378HMAC=sha1
364AC_ARG_ENABLE(digest, 379AC_ARG_ENABLE(hmac-digest,
365 [AS_HELP_STRING(--enable-digest=CIPHER,[ 380 [AS_HELP_STRING(--enable-hmac-digest=HMAC,[
366 Select the digest algorithm to use (default "ripemd160"). Must be one of 381 Select the HMAC digest algorithm to use (default "sha1"). Must be one of
367 "sha512", "sha256", "sha1", "ripemd160", "md5" or "md4" (insecure).])], 382 "sha512", "sha256", "sha1", "ripemd160", "whirlpool".])],
383 if test "x$enableval" = xwhirlpool; then HMAC=whirlpool; fi
384 if test "x$enableval" = xsha512 ; then HMAC=sha512 ; fi
385 if test "x$enableval" = xsha256 ; then HMAC=sha256 ; fi
386 if test "x$enableval" = xsha1 ; then HMAC=sha1 ; fi
387 if test "x$enableval" = xripemd160; then HMAC=ripemd160; fi
388)
389AC_DEFINE_UNQUOTED(ENABLE_HMAC, EVP_${HMAC}, [Select the HMAC digest algorithm to use.])
390
391AUTH=sha512
392AC_ARG_ENABLE(auth-digest,
393 [AS_HELP_STRING(--enable-auth-digest=DIGEST,[
394 Select the hmac algorithm to use (default "sha512"). Must be one of
395 "sha512", "sha256", "whirlpool".])],
396 if test "x$enableval" = xwhirlpool; then AUTH=whirlpool; fi
368 if test "x$enableval" = xsha512 ; then DIGEST=sha512 ; fi 397 if test "x$enableval" = xsha512 ; then AUTH=sha512 ; fi
369 if test "x$enableval" = xsha256 ; then DIGEST=sha256 ; fi 398 if test "x$enableval" = xsha256 ; then AUTH=sha256 ; fi
370 if test "x$enableval" = xsha1 ; then DIGEST=sha1 ; fi
371 if test "x$enableval" = xripemd160; then DIGEST=ripemd160; fi
372 if test "x$enableval" = xmd5 ; then DIGEST=md5 ; fi
373 if test "x$enableval" = xmd4 ; then DIGEST=md4 ; fi
374) 399)
375AC_DEFINE_UNQUOTED(ENABLE_DIGEST, EVP_${DIGEST}, [Select the digest algorithm to use.]) 400AC_DEFINE_UNQUOTED(ENABLE_AUTH, EVP_${AUTH}, [Select the auth digest algorithm to use.])
376 401
377if $CXX -v --help 2>&1 | grep -q fno-rtti; then 402if $CXX -v --help 2>&1 | grep -q fno-rtti; then
378 CXXFLAGS="$CXXFLAGS -fno-rtti" 403 CXXFLAGS="$CXXFLAGS -fno-rtti"
379fi 404fi
380 405
… …
385LIBS="$EXTRA_LIBS $LIBS" 410LIBS="$EXTRA_LIBS $LIBS"
386 411
387dnl if $CXX -v --help 2>&1 | grep -q ffunction-sections; then 412dnl if $CXX -v --help 2>&1 | grep -q ffunction-sections; then
388dnl CXXFLAGS="$CXXFLAGS -ffunction-sections" 413dnl CXXFLAGS="$CXXFLAGS -ffunction-sections"
389dnl fi 414dnl fi
390dnl 415dnl
391dnl if $LD -v --help 2>&1 | grep -q gc-sections; then 416dnl if $LD -v --help 2>&1 | grep -q gc-sections; then
392dnl LDFLAGS="$LDFLAGS -Wl,--gc-sections" 417dnl LDFLAGS="$LDFLAGS -Wl,--gc-sections"
393dnl fi 418dnl fi
394 419
395AC_SUBST(INCLUDES) 420AC_SUBST(INCLUDES)
… …
405echo 430echo
406echo "***" 431echo "***"
407echo "*** Configuration Summary" 432echo "*** Configuration Summary"
408echo "***" 433echo "***"
409echo "*** Kernel Iface: $IFTYPE/$IFSUBTYPE" 434echo "*** Kernel Iface: $IFTYPE/$IFSUBTYPE"
435echo "*** RSA size: $RSA"
410echo "*** Cipher used: $CIPHER" 436echo "*** Cipher used: $CIPHER"
411echo "*** Digest used: $DIGEST" 437echo "*** Digest used: $DIGEST"
438echo "*** Authdigest: $AUTH"
412echo "*** HMAC length: $HMAC" 439echo "*** HMAC length: $HMAC"
413echo "*** RAND used: $RAND"
414echo "*** Max. MTU: $MTU" 440echo "*** Max. MTU: $MTU"
415 441
416echo "***" 442echo "***"
417echo "*** Enable options:" 443echo "*** Enable options:"
418grep ENABLE_ config.h | sed -e 's/^/*** /' 444grep ENABLE_ config.h | sed -e 's/^/*** /'
419 445
420if test "x$DIGEST" = xmd4; then 446if test "$HMACSIZE" -lt 12; then
421echo "***" 447echo "***"
422echo "*** WARNING: The digest you have chosen ($DIGEST) is known to be insecure"
423fi
424
425if test "$HMAC" -lt 12; then
426echo "***"
427echo "*** WARNING: The hmac length you have chosen ($HMAC) is probably insecure" 448echo "*** WARNING: The hmac length you have chosen ($HMACSIZE) is quite insecure"
428fi
429
430if test "$RAND" -lt 8; then
431echo "***"
432echo "*** WARNING: The random prefix you have chosen ($RAND) is probably insecure"
433fi 449fi
434 450
435echo "***" 451echo "***"
436echo 452echo
437 453

Diff Legend

– Removed lines
+ Added lines
< Changed lines
> Changed lines