ViewVC Help
View File | Revision Log | Show Annotations | Download File
/cvs/gvpe/configure.ac
(Generate patch)

Comparing gvpe/configure.ac (file contents):
Revision 1.2 by pcg, Wed Apr 2 21:38:18 2003 UTC vs.
Revision 1.63 by root, Thu Jul 18 13:35:19 2013 UTC

1dnl Process this file with autoconf to produce a configure script. 1dnl Process this file with autoconf to produce a configure script.
2 2
3AC_PREREQ(2.57) 3AC_PREREQ(2.69)
4AC_INIT(src/vped.C) 4AC_INIT
5AC_CONFIG_SRCDIR([src/gvpe.C])
5AC_CANONICAL_TARGET 6AC_CANONICAL_TARGET
6AM_INIT_AUTOMAKE(vpe, 0.1) 7AM_INIT_AUTOMAKE(gvpe, 2.25)
7AM_CONFIG_HEADER(config.h) 8AC_CONFIG_HEADERS([config.h])
8AM_MAINTAINER_MODE 9AM_MAINTAINER_MODE
9 10
10AH_TOP([ 11AH_TOP([
11#ifndef CONFIG_H__ 12#ifndef CONFIG_H__
12#define CONFIG_H__ 13#define CONFIG_H__
… …
16#endif 17#endif
17 18
18]) 19])
19 20
20AH_BOTTOM([ 21AH_BOTTOM([
22typedef unsigned char u8;
23typedef signed char s8;
24
21#if __CYGWIN__ 25#if __CYGWIN__
22 26
23typedef unsigned char u8;
24typedef unsigned short u16; 27typedef unsigned short u16;
25typedef unsigned int u32; 28typedef unsigned int u32;
29typedef signed short s16;
30typedef signed int s32;
26 31
27#else 32#else
28#include <inttypes.h> 33#include <inttypes.h>
29 34
30/* old modula-2 habits */ 35/* old modula-2 habits */
31typedef unsigned char u8;
32typedef uint16_t u16; 36typedef uint16_t u16;
33typedef uint32_t u32; 37typedef uint32_t u32;
38typedef int16_t s16;
39typedef int32_t s32;
34#endif 40#endif
35 41
36#endif 42#endif
37])
38 43
39dnl Include the macros from the m4/ directory 44#if HAVE_CLOCALE
40AM_ACLOCAL_INCLUDE(m4) 45# define CLOCALE <clocale>
46#else
47# define CLOCALE <locale.h>
48#endif
49])
41 50
42AM_GNU_GETTEXT([external]) 51AM_GNU_GETTEXT([external])
43AM_GNU_GETTEXT_VERSION(0.11.5) 52AM_GNU_GETTEXT_VERSION(0.11.5)
44 53
45# Enable GNU extensions. 54# Enable GNU extensions.
46# Define this here, not in acconfig's @TOP@ section, since definitions 55# Define this here, not in acconfig's @TOP@ section, since definitions
47# in the latter don't make it into the configure-time tests. 56# in the latter don't make it into the configure-time tests.
48AC_DEFINE([_GNU_SOURCE], 1, [Enable GNU extenstions]) 57AC_DEFINE([_GNU_SOURCE], 1, [Enable GNU extensions])
49AC_DEFINE([__USE_BSD], 1, [Enable BSD extensions]) 58
59# do NOT define POSIX_SOURCE, sicne this clashes with many BSDs
60dnl AC_DEFINE([_POSIX_SOURCE], 1, [Enable POSIX 1003.1 extensions])
61dnl AC_DEFINE([_XOPEN_SOURCE], 500, [Enable XOPEN extensions])
50 62
51ALL_LINGUAS="" 63ALL_LINGUAS=""
52 64
53dnl Checks for programs. 65dnl Checks for programs.
54AC_PROG_CC
55AC_PROG_CPP 66AC_PROG_CPP
56AC_PROG_CXX 67AC_PROG_CXX
57AC_PROG_GCC_TRADITIONAL 68AC_PROG_GCC_TRADITIONAL
58AC_PROG_AWK 69AC_PROG_AWK
59AC_PROG_INSTALL 70AC_PROG_INSTALL
60AC_PROG_LN_S 71AC_PROG_LN_S
61AC_PROG_MAKE_SET 72AC_PROG_MAKE_SET
62AC_PROG_RANLIB 73AC_PROG_RANLIB
63 74
64AC_ISC_POSIX 75AC_ARG_ENABLE(iftype,
76 [AS_HELP_STRING(--enable-iftype=TYPE/SUBTYPE,
77 Use kernel/net device interface TYPE/SUBTYPE.
78 Working combinations are (see doc/gvpe.osdep.5.pod):
79 "native/linux"
80 "tincd/linux"
81 "tincd/netbsd"
82 "tincd/freebsd"
83 "tincd/openbsd"
84 "native/darwin"
85 "tincd/darwin"
86 "native/cygwin";
87 Untested combinations are:
88 "tincd/bsd"
89 "tincd/solaris"
90 "tincd/mingw"
91 "tincd/raw_socket"
92 "tincd/uml_socket";
93 Broken combinations are:
94 "tincd/cygwin";
95 The default is to autodetect.
96 )],
97 [
98 IFTYPE=`echo $enableval | sed s%/.*%%`
99 IFSUBTYPE=`echo $enableval | sed s%.*/%%`
100 ]
101)
65 102
66m4_if([
67dnl Check and set OS 103dnl Check and set OS
104AC_MSG_CHECKING(for kernel networking interface type)
68 105
106if test "x$IFTYPE" = "x"; then
69case $target_os in 107 case $target_os in
70 *linux*) 108 *linux*)
109 IFTYPE=native
110 IFSUBTYPE=linux
71 AC_DEFINE(HAVE_LINUX, 1, [Linux]) 111 AC_DEFINE(HAVE_LINUX, 1, [Linux])
72 [ rm -f src/device.c; ln -sf linux/device.c src/device.c ] 112 ;;
73 ;;
74 *freebsd*) 113 *freebsd*)
114 IFTYPE=tincd
115 IFSUBTYPE=freebsd
75 AC_DEFINE(HAVE_FREEBSD, 1, [FreeBSD]) 116 AC_DEFINE(HAVE_FREEBSD, 1, [FreeBSD])
76 [ rm -f src/device.c; ln -sf freebsd/device.c src/device.c ] 117 ;;
77 ;;
78 *darwin*) 118 *darwin*)
119 IFTYPE=native
120 IFSUBTYPE=darwin
79 AC_DEFINE(HAVE_DARWIN, 1, [Darwin (MacOS/X)]) 121 AC_DEFINE(HAVE_DARWIN, 1, [Darwin (MacOS/X)])
80 [ rm -f src/device.c; ln -sf darwin/device.c src/device.c ] 122 ;;
81 ;;
82 *solaris*) 123 *solaris*)
124 IFTYPE=tincd
125 IFSUBTYPE=solaris
83 AC_DEFINE(HAVE_SOLARIS, 1, [Solaris/SunOS]) 126 AC_DEFINE(HAVE_SOLARIS, 1, [Solaris/SunOS])
84 [ rm -f src/device.c; ln -sf solaris/device.c src/device.c ] 127 ;;
85 ;;
86 *openbsd*) 128 *openbsd*)
129 IFTYPE=tincd
130 IFSUBTYPE=openbsd
87 AC_DEFINE(HAVE_OPENBSD, 1, [OpenBSD]) 131 AC_DEFINE(HAVE_OPENBSD, 1, [OpenBSD])
88 [ rm -f src/device.c; ln -sf openbsd/device.c src/device.c ] 132 ;;
89 ;;
90 *netbsd*) 133 *netbsd*)
134 IFTYPE=tincd
135 IFSUBTYPE=netbsd
91 AC_DEFINE(HAVE_NETBSD, 1, [NetBSD]) 136 AC_DEFINE(HAVE_NETBSD, 1, [NetBSD])
92 [ rm -f src/device.c; ln -sf netbsd/device.c src/device.c ] 137 ;;
93 ;;
94 *cygwin*) 138 *cygwin*)
139 IFTYPE=native
140 IFSUBTYPE=cygwin
95 AC_DEFINE(HAVE_CYGWIN, 1, [Cygwin]) 141 AC_DEFINE(HAVE_CYGWIN, 1, [Cygwin])
96 [ rm -f src/device.c; ln -sf cygwin/device.c src/device.c ] 142 ;;
97 ;; 143 *)
98 *)
99 AC_MSG_ERROR("Unknown operating system.") 144 AC_MSG_ERROR("Unknown operating system.")
100 ;; 145 ;;
101esac 146 esac
102]) 147fi
148AC_MSG_RESULT($IFTYPE/$IFSUBTYPE)
149AC_SUBST(IFTYPE,$IFTYPE)
150AC_SUBST(IFSUBTYPE,$IFSUBTYPE)
151AC_DEFINE_UNQUOTED(IFTYPE,"$IFTYPE",[kernel interface type])
152AC_DEFINE_UNQUOTED(IFSUBTYPE,"$IFSUBTYPE",[kernel interface subtype])
103 153
104AC_CACHE_SAVE 154AC_CACHE_SAVE
105 155
106dnl Checks for libraries. 156dnl Checks for libraries.
107 157
108AC_LANG(C++) 158AC_LANG(C++)
109AC_CHECK_HEADERS(ext/hash_map) 159AC_CHECK_HEADERS(tr1/unordered_map ext/hash_map clocale)
110 160
111dnl Checks for header files. 161dnl Checks for header files.
112AC_CHECK_HEADERS([fcntl.h inttypes.h limits.h malloc.h stdint.h strings.h syslog.h unistd.h \ 162AC_CHECK_HEADERS([fcntl.h inttypes.h limits.h malloc.h stdint.h strings.h syslog.h unistd.h \
113 sys/file.h sys/ioctl.h sys/param.h sys/time.h netinet/in_systm.h cygwin.h]) 163 sys/file.h sys/ioctl.h sys/param.h sys/time.h netinet/in_systm.h sys/cygwin.h \
164 sys/mman.h netinet/in.h])
114AC_CHECK_HEADERS([net/ethernet.h net/if.h netinet/ip.h netinet/tcp.h], [], [], 165AC_CHECK_HEADERS([arpa/inet.h net/ethernet.h net/if.h netinet/ip.h netinet/tcp.h netinet/in_systm.h], [], [],
166[
115 [#include <sys/types.h> 167#include <sys/types.h>
116 #include <sys/socket.h> 168#include <sys/socket.h>
169#ifdef HAVE_NETINET_IN_H
170# include <netinet/in.h>
171#endif
172#ifdef HAVE_ARPA_INET_H
173# include <arpa/inet.h>
174#endif
117 #ifdef HAVE_NETINET_IN_SYSTM_H 175#ifdef HAVE_NETINET_IN_SYSTM_H
118 #include <netinet/in_systm.h> 176# include <netinet/in_systm.h>
119 #endif]) 177#endif
178])
120 179
121dnl Checks for typedefs, structures, and compiler characteristics. 180dnl Checks for typedefs, structures, and compiler characteristics.
122AC_C_CONST 181AC_C_CONST
123AC_TYPE_PID_T 182AC_TYPE_PID_T
124AC_TYPE_SIZE_T 183AC_TYPE_SIZE_T
125AC_HEADER_TIME 184AC_HEADER_TIME
126AC_STRUCT_TM 185AC_STRUCT_TM
127 186
128AC_CACHE_CHECK([for socklen_t], ac_cv_type_socklen_t, 187AC_CACHE_CHECK([for socklen_t], ac_cv_type_socklen_t,
129[ 188[
130 AC_TRY_COMPILE( 189 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[#include <sys/types.h>
131 [#include <sys/types.h> 190 #include <sys/socket.h>]], [[socklen_t len = 42; return len;]])],[ac_cv_type_socklen_t=yes],[ac_cv_type_socklen_t=no])
132 #include <sys/socket.h>],
133 [socklen_t len = 42; return len;],
134 ac_cv_type_socklen_t=yes,
135 ac_cv_type_socklen_t=no)
136]) 191])
137if test $ac_cv_type_socklen_t = yes; then 192if test $ac_cv_type_socklen_t = yes; then
138 AC_DEFINE(HAVE_SOCKLEN_T, 1, [socklen_t available]) 193 AC_DEFINE(HAVE_SOCKLEN_T, 1, [socklen_t available])
139fi 194fi
140 195
141AC_CACHE_CHECK([for struct addrinfo], ac_cv_struct_addrinfo, 196AC_CACHE_CHECK([for struct addrinfo], ac_cv_struct_addrinfo,
142[ 197[
143 AC_TRY_COMPILE( 198 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[#include <sys/types.h>
144 [#include <sys/types.h>
145 #include <sys/socket.h> 199 #include <sys/socket.h>
146 #include <netdb.h>], 200 #include <netdb.h>]], [[struct addrinfo ai; ai.ai_family = AF_INET; return ai.ai_family;]])],[ac_cv_struct_addrinfo=yes],[ac_cv_struct_addrinfo=no])
147 [struct addrinfo ai; ai.ai_family = AF_INET; return ai.ai_family;],
148 ac_cv_struct_addrinfo=yes,
149 ac_cv_struct_addrinfo=no)
150]) 201])
151if test $ac_cv_struct_addrinfo = yes; then 202if test $ac_cv_struct_addrinfo = yes; then
152 AC_DEFINE(HAVE_STRUCT_ADDRINFO, 1, [struct addrinfo available]) 203 AC_DEFINE(HAVE_STRUCT_ADDRINFO, 1, [struct addrinfo available])
153fi 204fi
154 205
… …
157 208
158AC_LANG_PUSH(C) 209AC_LANG_PUSH(C)
159 210
160AC_HEADER_STDC 211AC_HEADER_STDC
161 212
213dnl argl, could somebody catapult darwin into the 21st century???
162AC_CHECK_FUNCS(asprintf daemon get_current_dir_name putenv select strerror strsignal strtol unsetenv mlockall) 214AC_CHECK_FUNCS(asprintf daemon get_current_dir_name putenv select strerror strsignal strtol unsetenv mlockall)
163 215
164AC_FUNC_ALLOCA 216AC_FUNC_ALLOCA
165 217
166dnl Support for SunOS 218dnl Support for SunOS
… …
170]) 222])
171AC_CHECK_FUNC(gethostbyname, [], [ 223AC_CHECK_FUNC(gethostbyname, [], [
172 AC_CHECK_LIB(nsl, gethostbyname) 224 AC_CHECK_LIB(nsl, gethostbyname)
173]) 225])
174 226
227dnl libev support
228m4_include([libev/libev.m4])
229
175AC_LANG_POP 230AC_LANG_POP
176 231
177dnl AC_CHECK_FUNCS([freeaddrinfo gai_strerror getaddrinfo getnameinfo]) 232dnl AC_CHECK_FUNCS([freeaddrinfo gai_strerror getaddrinfo getnameinfo])
178 233
179AC_CACHE_SAVE 234AC_CACHE_SAVE
180 235
181dnl These are defined in files in m4/ 236dnl These are defined in files in m4/
182tinc_TUNTAP 237tinc_TUNTAP
238
183tinc_OPENSSL 239tinc_OPENSSL
240if test "x$openssl_include" != x; then
241 CXXFLAGS="$CXXFLAGS -I$openssl_include"
242fi
184dnl tinc_ZLIB 243dnl tinc_ZLIB
185 244
245AC_ARG_ENABLE(threads,
246 [AS_HELP_STRING(--enable-threads,try to use threads for long-running asynchronous operations (default enabled).)],
247 [try_threads=$enableval],
248 [try_threads=yes]
249)
250
251if test "x$try_threads" = xyes; then
252 AC_CHECK_HEADER(pthread.h,[
253 LIBS="$LIBS -lpthread"
254 AC_COMPILE_IFELSE(
255 [AC_LANG_PROGRAM([#include <pthread.h>], [pthread_t id; pthread_create (&id, 0, 0, 0);])],
256 [AC_DEFINE_UNQUOTED(ENABLE_PTHREADS, 1, [POSIX thread support.])]
257 )
258 ])
259fi
260
261AC_ARG_ENABLE(static-daemon,
262 [AS_HELP_STRING(--enable-static-daemon,enable statically linked daemon.)],
263 [LDFLAGS_DAEMON=-static]
264)
265AC_SUBST(LDFLAGS_DAEMON)
266
267dnl AC_ARG_ENABLE(rohc,
268dnl [AS_HELP_STRING(--enable-rohc,enable robust header compression (rfc3095).)],
269dnl [
270dnl echo
271dnl echo "**********************************************************************"
272dnl echo "**********************************************************************"
273dnl echo "**** --enable-rohc is highly experimental, do not use ****************"
274dnl echo "**********************************************************************"
275dnl echo "**********************************************************************"
276dnl echo
277dnl rohc=true
278dnl AC_DEFINE_UNQUOTED(ENABLE_ROHC, 1, [ROHC support])
279dnl ]
280dnl )
281
282AM_CONDITIONAL(ROHC, test x$rohc = xtrue)
283
284dnl AC_ARG_ENABLE(bridging,
285dnl [AS_HELP_STRING(--enable-bridging,enable bridging support (default disabled).)],
286dnl AC_DEFINE_UNQUOTED(ENABLE_BRIDGING, 1, [bridging support.])
287dnl )
288
289ICMP=1
290AC_ARG_ENABLE(icmp,
291 [AS_HELP_STRING(--disable-icmp,enable icmp protocol support (default enabled).)],
292 if test "x$enableval" = xno; then
293 ICMP=0
294 fi
295)
296if test "x$ICMP" = x1; then
297 AC_DEFINE_UNQUOTED(ENABLE_ICMP, 1, [ICMP protocol support.])
298fi
299
300TCP=1
186AC_ARG_ENABLE(tcp, 301AC_ARG_ENABLE(tcp,
187 [AC_HELP_STRING(--enable-tcp, [enable tcp protocol support.])], 302 [AS_HELP_STRING(--disable-tcp,enable tcp protocol support (default enabled).)],
303 if test "x$enableval" = xno; then
304 TCP=0
305 fi
306)
307if test "x$TCP" = x1; then
188 AC_DEFINE_UNQUOTED(ENABLE_TCP, 1, [TCP protocol support.]) 308 AC_DEFINE_UNQUOTED(ENABLE_TCP, 1, [TCP protocol support.])
189) 309fi
190 310
191HMAC=16 dnl see also the AC_HELP_STRING 311HTTP=1
312AC_ARG_ENABLE(http-proxy,
313 [AS_HELP_STRING(--disable-http-proxy,enable http proxy connect support (default enabled).)],
314 if test "x$enableval" = xno; then
315 HTTP=0
316 fi
317)
318if test "x$HTTP" = x1; then
319 AC_DEFINE_UNQUOTED(ENABLE_HTTP_PROXY, 1, [http proxy connect support.])
320fi
321
322AC_ARG_ENABLE(dns,
323 [AS_HELP_STRING(--enable-dns,enable dns tunnel protocol support (default disabled).)],
324 [
325 AC_CHECK_HEADER(gmp.h,,[AC_MSG_ERROR([gmp.h not found, required for --enable-dns])])
326 AC_CHECK_LIB(gmp,main,,[AC_MSG_ERROR([libgmp not found, required for --enable-dns])])
327
328 AC_DEFINE_UNQUOTED(ENABLE_DNS, 1, [DNS tunnel protocol support.])
329 ]
330)
331
332RSA=3072
333AC_ARG_ENABLE(rsa-length,
334 [AS_HELP_STRING(--enable-rsa-length=BITS,[
335 use BITS rsa keys (default 3072). Allowed values are 2048-10240.])],
336 RSA=$enableval
337)
338AC_DEFINE_UNQUOTED(RSABITS, $RSA, [Size of RSA keys.])
339
340HMACSIZE=12
192AC_ARG_ENABLE(hmac-length, 341AC_ARG_ENABLE(hmac-length,
193 [AC_HELP_STRING(--enable-hmac-length=BYTES, [use a hmac of length BYTES bytes (default 16). Allowed values are 4, 8, 12, 16.])], 342 [AS_HELP_STRING(--enable-hmac-length=BYTES,[
343 use a hmac of length BYTES bytes (default 12). Allowed values are 4, 8, 12, 16.])],
194 HMAC=$enableval 344 HMACSIZE=$enableval
195) 345)
196AC_DEFINE_UNQUOTED(HMACLENGTH, $HMAC, [Size of HMAC in each packet in bytes.]) 346AC_DEFINE_UNQUOTED(HMACLENGTH, $HMACSIZE, [Size of HMAC in each packet in bytes.])
197 347
198RAND=8 dnl see also the AC_HELP_STRING 348RANDSIZE=12
199AC_ARG_ENABLE(rand-length, 349AC_ARG_ENABLE(rand-length,
200 [AC_HELP_STRING(--enable-rand-length=BYTES, [use BYTES bytes of extra randomness (default 8). Allowed values are 0, 4, 8.])], 350 [AS_HELP_STRING(--enable-rand-length=BYTES,
351 [use BYTES bytes of extra randomness (default 12). Allowed values are 0, 4, 8, 12.])],
201 RAND=$enableval 352 RANDSIZE=$enableval
202) 353)
203AC_DEFINE_UNQUOTED(RAND_SIZE, $RAND, [Add this many bytes of randomness to each packet.]) 354AC_DEFINE_UNQUOTED(RAND_SIZE, $RANDSIZE, [Add this many bytes of randomness to each packet.])
204 355
205MTU=1500 dnl see also the AC_HELP_STRING 356MTU=1500
206AC_ARG_ENABLE(mtu, 357AC_ARG_ENABLE(max-mtu,
207 [AC_HELP_STRING(--enable-max-mtu=BYTES, enable mtu sizes upto BYTES bytes (default 1500). Use 9100 for jumbogram support.)], 358 [AS_HELP_STRING(--enable-max-mtu=BYTES,enable mtu sizes upto BYTES bytes (default 1500). Use 9100 for jumbogram support.)],
208 MTU=$enableval 359 MTU=$enableval
209) 360)
210AC_DEFINE_UNQUOTED(MAX_MTU, $MTU + 14, [Maximum MTU supported.]) 361AC_DEFINE_UNQUOTED(MAX_MTU, ($MTU + 14), [Maximum MTU supported.])
211 362
212COMPRESS=1 363COMPRESS=1
213AC_ARG_ENABLE(compression, 364AC_ARG_ENABLE(compression,
214 [AC_HELP_STRING(--disable-compression, Disable compression support.)], 365 [AS_HELP_STRING(--disable-compression,Disable compression support.)],
215 if test "x$enableval" = xno; then 366 if test "x$enableval" = xno; then
216 COMPRESS=0 367 COMPRESS=0
217 fi 368 fi
218) 369)
219AC_DEFINE_UNQUOTED(ENABLE_COMPRESSION, $COMPRESS, [Enable compression support.]) 370AC_DEFINE_UNQUOTED(ENABLE_COMPRESSION, $COMPRESS, [Enable compression support.])
220 371
221CIPHER=bf_cbc 372CIPHER=aes_128_cbc
222AC_ARG_ENABLE(cipher, 373AC_ARG_ENABLE(cipher,
223 [AC_HELP_STRING(--enable-cipher, [ 374 [AS_HELP_STRING(--enable-cipher=CIPHER,[
224 Select the symmetric cipher (default "bf"). Must be one of 375 Select the symmetric cipher (default "aes-128").
225 "bf" (blowfish), "aes-128", "aes-192" or "aes-256".])], 376 Must be one of "bf" (blowfish), "aes-128" (rijndael), "aes-192", "aes-256", "camellia-128" or "camellia-256".])],
226 if test "x$enableval" = xbf ; then CIPHER=bf_cbc ; fi 377 if test "x$enableval" = xbf ; then CIPHER=bf_cbc ; fi
227 if test "x$enableval" = xaes-128; then CIPHER=aes_128_cbc; fi 378 if test "x$enableval" = xaes-128 ; then CIPHER=aes_128_cbc ; fi
228 if test "x$enableval" = xaes-192; then CIPHER=aes_192_cbc; fi 379 if test "x$enableval" = xaes-192 ; then CIPHER=aes_192_cbc ; fi
229 if test "x$enableval" = xaes-256; then CIPHER=aes_256_cbc; fi 380 if test "x$enableval" = xaes-256 ; then CIPHER=aes_256_cbc ; fi
381 if test "x$enableval" = xcamellia-128; then CIPHER=camellia_128_cbc; fi
382 if test "x$enableval" = xcamellia-256; then CIPHER=camellia_256_cbc; fi
230) 383)
231AC_DEFINE_UNQUOTED(ENABLE_CIPHER, EVP_${CIPHER}, [Select the symmetric cipher to use.]) 384AC_DEFINE_UNQUOTED(ENABLE_CIPHER, EVP_${CIPHER}, [Select the symmetric cipher to use.])
232 385
233DIGEST=sha1 386HMAC=sha1
234AC_ARG_ENABLE(digest, 387AC_ARG_ENABLE(hmac-digest,
235 [AC_HELP_STRING(--enable-digest, [ 388 [AS_HELP_STRING(--enable-hmac-digest=HMAC,[
236 Select the digets algorithm to use (default "sha1"). Must be one of 389 Select the HMAC digest algorithm to use (default "sha1"). Must be one of
237 "sha1", "ripemd160", "md4" or "md5".])], 390 "sha512", "sha256", "sha1", "ripemd160", "whirlpool".])],
391 if test "x$enableval" = xwhirlpool; then HMAC=whirlpool; fi
392 if test "x$enableval" = xsha512 ; then HMAC=sha512 ; fi
393 if test "x$enableval" = xsha256 ; then HMAC=sha256 ; fi
238 if test "x$enableval" = xsha1 ; then DIGEST=sha1 ; fi 394 if test "x$enableval" = xsha1 ; then HMAC=sha1 ; fi
239 if test "x$enableval" = xripemd160; then DIGEST=ripemd160; fi 395 if test "x$enableval" = xripemd160; then HMAC=ripemd160; fi
240 if test "x$enableval" = xmd4 ; then DIGEST=md4 ; fi 396)
397AC_DEFINE_UNQUOTED(ENABLE_HMAC, EVP_${HMAC}, [Select the HMAC digest algorithm to use.])
398
399AUTH=sha512
400AC_ARG_ENABLE(auth-digest,
401 [AS_HELP_STRING(--enable-auth-digest=DIGEST,[
402 Select the hmac algorithm to use (default "sha512"). Must be one of
403 "sha512", "sha256", "whirlpool".])],
404 if test "x$enableval" = xwhirlpool; then AUTH=whirlpool; fi
241 if test "x$enableval" = xmd5 ; then DIGEST=md5 ; fi 405 if test "x$enableval" = xsha512 ; then AUTH=sha512 ; fi
406 if test "x$enableval" = xsha256 ; then AUTH=sha256 ; fi
242) 407)
243AC_DEFINE_UNQUOTED(ENABLE_DIGEST, EVP_${DIGEST}, [Select the digest algorithm to use.]) 408AC_DEFINE_UNQUOTED(ENABLE_AUTH, EVP_${AUTH}, [Select the auth digest algorithm to use.])
244
245TRUST=1
246m4_if([
247AC_ARG_ENABLE(trust,
248 [AC_HELP_STRING(--enable-trust, [
249 Make authentication faster but allow decoding by all hosts of a VPN.
250 Use this when the VPN hosts DO trust each other and you don't care
251 wether man-in-the-middle sniffing attacks are possible by admins
252 of other VPN hosts. On pentiums or similar machines this can cut down
253 the time for reconnects by 0.4 seconds or more.])],
254 if test "x$enableval" = xyes; then
255 TRUST=1
256 fi
257)
258])
259AC_DEFINE_UNQUOTED(ENABLE_TRUST, $TRUST, [Faster, but VPN hosts may sniff each others data.])
260 409
261if $CXX -v --help 2>&1 | grep -q fno-rtti; then 410if $CXX -v --help 2>&1 | grep -q fno-rtti; then
262 CXXFLAGS="$CXXFLAGS -fno-rtti" 411 CXXFLAGS="$CXXFLAGS -fno-rtti"
263fi 412fi
264 413
265if $CXX -v --help 2>&1 | grep -q fexceptions; then 414#if $CXX -v --help 2>&1 | grep -q fexceptions; then
266 CXXFLAGS="$CXXFLAGS -fno-exceptions" 415# CXXFLAGS="$CXXFLAGS -fno-exceptions"
267fi 416#fi
268 417
418LIBS="$EXTRA_LIBS $LIBS"
419
269if $CXX -v --help 2>&1 | grep -q ffunction-sections; then 420dnl if $CXX -v --help 2>&1 | grep -q ffunction-sections; then
270 CXXFLAGS="$CXXFLAGS -ffunction-sections" 421dnl CXXFLAGS="$CXXFLAGS -ffunction-sections"
271fi 422dnl fi
272 423dnl
273if $LD -v --help 2>&1 | grep -q gc-sections; then 424dnl if $LD -v --help 2>&1 | grep -q gc-sections; then
274 LDFLAGS="$LDFLAGS -Wl,--gc-sections" 425dnl LDFLAGS="$LDFLAGS -Wl,--gc-sections"
275fi 426dnl fi
276
277AC_CONFIG_COMMANDS_POST([
278
279echo
280echo "***"
281echo "*** Configuration Summary"
282echo "***"
283echo "*** Cipher used: $CIPHER"
284echo "*** Digest used: $DIGEST"
285echo "*** HMAC length: $HMAC"
286echo "*** RAND used: $RAND"
287echo "*** Max. MTU: $MTU"
288echo "*** Compression: $COMPRESS"
289dnl echo "*** Trusted Mode: $TRUST"
290echo "***"
291echo
292
293])
294 427
295AC_SUBST(INCLUDES) 428AC_SUBST(INCLUDES)
296 429
297AC_OUTPUT(Makefile po/Makefile.in 430AC_CONFIG_FILES([Makefile po/Makefile.in
298src/Makefile 431src/Makefile
299doc/Makefile 432doc/Makefile
300lib/Makefile 433lib/Makefile
301m4/Makefile 434m4/Makefile
302) 435])
436AC_OUTPUT
437
438echo
439echo "***"
440echo "*** Configuration Summary"
441echo "***"
442echo "*** Kernel Iface: $IFTYPE/$IFSUBTYPE"
443echo "*** RSA size: $RSA"
444echo "*** Cipher used: $CIPHER"
445echo "*** Digest used: $DIGEST"
446echo "*** Authdigest: $AUTH"
447echo "*** HMAC length: $HMAC"
448echo "*** RAND used: $RAND"
449echo "*** Max. MTU: $MTU"
450
451echo "***"
452echo "*** Enable options:"
453grep ENABLE_ config.h | sed -e 's/^/*** /'
454
455if test "$HMACSIZE" -lt 12; then
456echo "***"
457echo "*** WARNING: The hmac length you have chosen ($HMACSIZE) is quite insecure"
458fi
459
460if test "$RANDSIZE" -lt 12; then
461echo "***"
462echo "*** WARNING: The random prefix you have chosen ($RANDSIZE) is probably insecure"
463fi
464
465echo "***"
466echo
467
468

Diff Legend

– Removed lines
+ Added lines
< Changed lines
> Changed lines