ViewVC Help
View File | Revision Log | Show Annotations | Download File
/cvs/gvpe/configure.ac
(Generate patch)

Comparing gvpe/configure.ac (file contents):
Revision 1.8 by pcg, Tue Oct 14 03:22:09 2003 UTC vs.
Revision 1.68 by root, Thu Oct 6 03:25:53 2022 UTC

1dnl Process this file with autoconf to produce a configure script. 1dnl Process this file with autoconf to produce a configure script.
2 2
3AC_PREREQ(2.57) 3AC_PREREQ([2.71])
4AC_INIT(src/vped.C) 4AC_INIT([gvpe],[3.1])
5AC_CONFIG_SRCDIR([src/gvpe.C])
5AC_CANONICAL_TARGET 6AC_CANONICAL_TARGET
6AM_INIT_AUTOMAKE(vpe, 1.0) 7AM_INIT_AUTOMAKE
7AM_CONFIG_HEADER(config.h) 8AC_CONFIG_HEADERS([config.h])
8AM_MAINTAINER_MODE 9AM_MAINTAINER_MODE
9 10
10AH_TOP([ 11AH_TOP([
11#ifndef CONFIG_H__ 12#ifndef CONFIG_H__
12#define CONFIG_H__ 13#define CONFIG_H__
… …
16#endif 17#endif
17 18
18]) 19])
19 20
20AH_BOTTOM([ 21AH_BOTTOM([
22typedef unsigned char u8;
23typedef signed char s8;
24
21#if __CYGWIN__ 25#if __CYGWIN__
22 26
23typedef unsigned char u8;
24typedef unsigned short u16; 27typedef unsigned short u16;
25typedef unsigned int u32; 28typedef unsigned int u32;
29typedef signed short s16;
30typedef signed int s32;
26 31
27#else 32#else
28#include <inttypes.h> 33#include <inttypes.h>
29 34
30/* old modula-2 habits */ 35/* old modula-2 habits */
31typedef unsigned char u8;
32typedef uint16_t u16; 36typedef uint16_t u16;
33typedef uint32_t u32; 37typedef uint32_t u32;
38typedef int16_t s16;
39typedef int32_t s32;
34#endif 40#endif
35 41
36#endif 42#endif
37])
38 43
39dnl Include the macros from the m4/ directory 44#if HAVE_CLOCALE
40AM_ACLOCAL_INCLUDE(m4) 45# define CLOCALE <clocale>
46#else
47# define CLOCALE <locale.h>
48#endif
49])
41 50
42AM_GNU_GETTEXT([external]) 51AM_GNU_GETTEXT([external])
43AM_GNU_GETTEXT_VERSION(0.11.5) 52AM_GNU_GETTEXT_VERSION(0.11.5)
44 53
45# Enable GNU extensions. 54# Enable GNU extensions.
46# Define this here, not in acconfig's @TOP@ section, since definitions 55# Define this here, not in acconfig's @TOP@ section, since definitions
47# in the latter don't make it into the configure-time tests. 56# in the latter don't make it into the configure-time tests.
48AC_DEFINE([_GNU_SOURCE], 1, [Enable GNU extenstions]) 57AC_DEFINE([_GNU_SOURCE], 1, [Enable GNU extensions])
49AC_DEFINE([__USE_BSD], 1, [Enable BSD extensions]) 58
59# do NOT define POSIX_SOURCE, sicne this clashes with many BSDs
60dnl AC_DEFINE([_POSIX_SOURCE], 1, [Enable POSIX 1003.1 extensions])
61dnl AC_DEFINE([_XOPEN_SOURCE], 500, [Enable XOPEN extensions])
50 62
51ALL_LINGUAS="" 63ALL_LINGUAS=""
52 64
53dnl Checks for programs. 65dnl Checks for programs.
54AC_PROG_CC
55AC_PROG_CPP 66AC_PROG_CPP
56AC_PROG_CXX 67AC_PROG_CXX
57AC_PROG_GCC_TRADITIONAL 68AC_PROG_GCC_TRADITIONAL
58AC_PROG_AWK 69AC_PROG_AWK
59AC_PROG_INSTALL 70AC_PROG_INSTALL
60AC_PROG_LN_S 71AC_PROG_LN_S
61AC_PROG_MAKE_SET 72AC_PROG_MAKE_SET
62AC_PROG_RANLIB 73AC_PROG_RANLIB
63 74
64AC_ISC_POSIX
65
66AC_ARG_ENABLE(iftype, 75AC_ARG_ENABLE(iftype,
67 [AC_HELP_STRING(--enable-iftype[=TYPE/SUBTYPE], [ 76 [AS_HELP_STRING(--enable-iftype=TYPE/SUBTYPE,
68 Use kernel/net device interface TYPE/SUBTYPE. 77 Use kernel/net device interface TYPE/SUBTYPE.
69 Working combinations are: 78 Working combinations are (see doc/gvpe.osdep.5.pod):
70 "native/linux" "tincd/linux"; 79 "native/linux"
80 "tincd/linux"
81 "tincd/netbsd"
82 "tincd/freebsd"
83 "tincd/openbsd"
84 "native/darwin"
85 "tincd/darwin"
86 "native/cygwin";
71 Untested combinations are: 87 Untested combinations are:
72 "tincd/freebsd" "tincd/netbsd" "tincd/darwin" "tincd/solaris" 88 "tincd/bsd"
73 "tincd/openbsd" "tincd/netbsd" "tincd/cygwin"; 89 "tincd/solaris"
90 "tincd/mingw"
91 "tincd/raw_socket"
92 "tincd/uml_socket";
74 Broken combinations are: 93 Broken combinations are:
75 "native/cygwin"; 94 "tincd/cygwin";
76 The default is autodetected. 95 The default is to autodetect.
77 ])], 96 )],
78 [ 97 [
79 IFTYPE=`echo $enableval | sed s%/.*%%` 98 IFTYPE=`echo $enableval | sed s%/.*%%`
80 IFSUBTYPE=`echo $enableval | sed s%.*/%%` 99 IFSUBTYPE=`echo $enableval | sed s%.*/%%`
81 ] 100 ]
82) 101)
… …
95 IFTYPE=tincd 114 IFTYPE=tincd
96 IFSUBTYPE=freebsd 115 IFSUBTYPE=freebsd
97 AC_DEFINE(HAVE_FREEBSD, 1, [FreeBSD]) 116 AC_DEFINE(HAVE_FREEBSD, 1, [FreeBSD])
98 ;; 117 ;;
99 *darwin*) 118 *darwin*)
100 IFTYPE=tincd 119 IFTYPE=native
101 IFSUBTYPE=darwin 120 IFSUBTYPE=darwin
102 AC_DEFINE(HAVE_DARWIN, 1, [Darwin (MacOS/X)]) 121 AC_DEFINE(HAVE_DARWIN, 1, [Darwin (MacOS/X)])
103 ;; 122 ;;
104 *solaris*) 123 *solaris*)
105 IFTYPE=tincd 124 IFTYPE=tincd
… …
115 IFTYPE=tincd 134 IFTYPE=tincd
116 IFSUBTYPE=netbsd 135 IFSUBTYPE=netbsd
117 AC_DEFINE(HAVE_NETBSD, 1, [NetBSD]) 136 AC_DEFINE(HAVE_NETBSD, 1, [NetBSD])
118 ;; 137 ;;
119 *cygwin*) 138 *cygwin*)
120 IFTYPE=tincd 139 IFTYPE=native
121 IFSUBTYPE=cygwin 140 IFSUBTYPE=cygwin
122 AC_DEFINE(HAVE_CYGWIN, 1, [Cygwin]) 141 AC_DEFINE(HAVE_CYGWIN, 1, [Cygwin])
123 ;; 142 ;;
124 *) 143 *)
125 AC_MSG_ERROR("Unknown operating system.") 144 AC_MSG_ERROR("Unknown operating system.")
… …
127 esac 146 esac
128fi 147fi
129AC_MSG_RESULT($IFTYPE/$IFSUBTYPE) 148AC_MSG_RESULT($IFTYPE/$IFSUBTYPE)
130AC_SUBST(IFTYPE,$IFTYPE) 149AC_SUBST(IFTYPE,$IFTYPE)
131AC_SUBST(IFSUBTYPE,$IFSUBTYPE) 150AC_SUBST(IFSUBTYPE,$IFSUBTYPE)
151AC_DEFINE_UNQUOTED(IFTYPE,"$IFTYPE",[kernel interface type])
152AC_DEFINE_UNQUOTED(IFSUBTYPE,"$IFSUBTYPE",[kernel interface subtype])
132 153
133AC_CACHE_SAVE 154AC_CACHE_SAVE
134 155
135dnl Checks for libraries. 156dnl Checks for libraries.
136 157
137AC_LANG(C++) 158AC_LANG(C++)
138AC_CHECK_HEADERS(ext/hash_map) 159AC_CHECK_HEADERS(tr1/unordered_map ext/hash_map clocale)
139 160
140dnl Checks for header files. 161dnl Checks for header files.
141AC_CHECK_HEADERS([fcntl.h inttypes.h limits.h malloc.h stdint.h strings.h syslog.h unistd.h \ 162AC_CHECK_HEADERS([fcntl.h inttypes.h limits.h malloc.h stdint.h strings.h syslog.h unistd.h \
142 sys/file.h sys/ioctl.h sys/param.h sys/time.h netinet/in_systm.h cygwin.h arpa/inet.h netinet/in.h]) 163 sys/file.h sys/ioctl.h sys/param.h sys/time.h netinet/in_systm.h sys/cygwin.h \
164 sys/mman.h netinet/in.h])
143AC_CHECK_HEADERS([net/ethernet.h net/if.h netinet/ip.h netinet/tcp.h netinet/in_systm.h], [], [], 165AC_CHECK_HEADERS([arpa/inet.h net/ethernet.h net/if.h netinet/ip.h netinet/tcp.h netinet/in_systm.h], [], [],
144[ 166[
145#include <sys/types.h> 167#include <sys/types.h>
146#include <sys/socket.h> 168#include <sys/socket.h>
147#ifdef HAVE_NETINET_IN_H 169#ifdef HAVE_NETINET_IN_H
148# include <netinet/in.h> 170# include <netinet/in.h>
… …
157 179
158dnl Checks for typedefs, structures, and compiler characteristics. 180dnl Checks for typedefs, structures, and compiler characteristics.
159AC_C_CONST 181AC_C_CONST
160AC_TYPE_PID_T 182AC_TYPE_PID_T
161AC_TYPE_SIZE_T 183AC_TYPE_SIZE_T
162AC_HEADER_TIME 184AC_CHECK_HEADERS_ONCE([sys/time.h])
185
163AC_STRUCT_TM 186AC_STRUCT_TM
164 187
165AC_CACHE_CHECK([for socklen_t], ac_cv_type_socklen_t, 188AC_CACHE_CHECK([for socklen_t], ac_cv_type_socklen_t,
166[ 189[
167 AC_TRY_COMPILE( 190 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[#include <sys/types.h>
168 [#include <sys/types.h> 191 #include <sys/socket.h>]], [[socklen_t len = 42; return len;]])],[ac_cv_type_socklen_t=yes],[ac_cv_type_socklen_t=no])
169 #include <sys/socket.h>],
170 [socklen_t len = 42; return len;],
171 ac_cv_type_socklen_t=yes,
172 ac_cv_type_socklen_t=no)
173]) 192])
174if test $ac_cv_type_socklen_t = yes; then 193if test $ac_cv_type_socklen_t = yes; then
175 AC_DEFINE(HAVE_SOCKLEN_T, 1, [socklen_t available]) 194 AC_DEFINE(HAVE_SOCKLEN_T, 1, [socklen_t available])
176fi 195fi
177 196
178AC_CACHE_CHECK([for struct addrinfo], ac_cv_struct_addrinfo, 197AC_CACHE_CHECK([for struct addrinfo], ac_cv_struct_addrinfo,
179[ 198[
180 AC_TRY_COMPILE( 199 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[#include <sys/types.h>
181 [#include <sys/types.h>
182 #include <sys/socket.h> 200 #include <sys/socket.h>
183 #include <netdb.h>], 201 #include <netdb.h>]], [[struct addrinfo ai; ai.ai_family = AF_INET; return ai.ai_family;]])],[ac_cv_struct_addrinfo=yes],[ac_cv_struct_addrinfo=no])
184 [struct addrinfo ai; ai.ai_family = AF_INET; return ai.ai_family;],
185 ac_cv_struct_addrinfo=yes,
186 ac_cv_struct_addrinfo=no)
187]) 202])
188if test $ac_cv_struct_addrinfo = yes; then 203if test $ac_cv_struct_addrinfo = yes; then
189 AC_DEFINE(HAVE_STRUCT_ADDRINFO, 1, [struct addrinfo available]) 204 AC_DEFINE(HAVE_STRUCT_ADDRINFO, 1, [struct addrinfo available])
190fi 205fi
191 206
192dnl Checks for library functions.
193AC_TYPE_SIGNAL
194
195AC_LANG_PUSH(C) 207AC_LANG_PUSH(C)
196 208
197AC_HEADER_STDC 209dnl argl, could somebody catapult darwin into the 21st century???
198
199AC_CHECK_FUNCS(asprintf daemon get_current_dir_name putenv select strerror strsignal strtol unsetenv mlockall) 210AC_CHECK_FUNCS(asprintf daemon get_current_dir_name putenv select strerror strsignal strtol unsetenv mlockall)
200 211
201AC_FUNC_ALLOCA 212AC_FUNC_ALLOCA
202 213
203dnl Support for SunOS 214dnl Support for SunOS
… …
207]) 218])
208AC_CHECK_FUNC(gethostbyname, [], [ 219AC_CHECK_FUNC(gethostbyname, [], [
209 AC_CHECK_LIB(nsl, gethostbyname) 220 AC_CHECK_LIB(nsl, gethostbyname)
210]) 221])
211 222
223dnl libev support
224m4_include([libev/libev.m4])
225
212AC_LANG_POP 226AC_LANG_POP
213 227
214dnl AC_CHECK_FUNCS([freeaddrinfo gai_strerror getaddrinfo getnameinfo]) 228dnl AC_CHECK_FUNCS([freeaddrinfo gai_strerror getaddrinfo getnameinfo])
215 229
216AC_CACHE_SAVE 230AC_CACHE_SAVE
217 231
218dnl These are defined in files in m4/ 232dnl These are defined in files in m4/
219tinc_TUNTAP 233tinc_TUNTAP
220tinc_OPENSSL
221dnl tinc_ZLIB
222 234
235PKG_CHECK_MODULES([LIBCRYPTO], [libcrypto >= 1])
236
237AC_ARG_ENABLE(threads,
238 [AS_HELP_STRING(--enable-threads,try to use threads for long-running asynchronous operations (default enabled).)],
239 [try_threads=$enableval],
240 [try_threads=yes]
241)
242
243if test "x$try_threads" = xyes; then
244 AC_CHECK_HEADER(pthread.h,[
245 LIBS="$LIBS -lpthread"
246 AC_COMPILE_IFELSE(
247 [AC_LANG_PROGRAM([#include <pthread.h>], [pthread_t id; pthread_create (&id, 0, 0, 0);])],
248 [AC_DEFINE_UNQUOTED(ENABLE_PTHREADS, 1, [POSIX thread support.])]
249 )
250 ])
251fi
252
253AC_ARG_ENABLE(static-daemon,
254 [AS_HELP_STRING(--enable-static-daemon,enable statically linked daemon.)],
255 [LDFLAGS_DAEMON=-static]
256)
257AC_SUBST(LDFLAGS_DAEMON)
258
223AC_ARG_ENABLE(rohc, 259dnl AC_ARG_ENABLE(rohc,
224 [AC_HELP_STRING(--enable-rohc, [enable robust header compression (rfc3095).])], 260dnl [AS_HELP_STRING(--enable-rohc,enable robust header compression (rfc3095).)],
261dnl [
262dnl echo
263dnl echo "**********************************************************************"
264dnl echo "**********************************************************************"
265dnl echo "**** --enable-rohc is highly experimental, do not use ****************"
266dnl echo "**********************************************************************"
267dnl echo "**********************************************************************"
268dnl echo
269dnl rohc=true
270dnl AC_DEFINE_UNQUOTED(ENABLE_ROHC, 1, [ROHC support])
271dnl ]
272dnl )
273
274AM_CONDITIONAL(ROHC, test x$rohc = xtrue)
275
276dnl AC_ARG_ENABLE(bridging,
277dnl [AS_HELP_STRING(--enable-bridging,enable bridging support (default disabled).)],
278dnl AC_DEFINE_UNQUOTED(ENABLE_BRIDGING, 1, [bridging support.])
279dnl )
280
281ICMP=1
282AC_ARG_ENABLE(icmp,
283 [AS_HELP_STRING(--disable-icmp,enable icmp protocol support (default enabled).)],
284 if test "x$enableval" = xno; then
285 ICMP=0
286 fi
287)
288if test "x$ICMP" = x1; then
289 AC_DEFINE_UNQUOTED(ENABLE_ICMP, 1, [ICMP protocol support.])
290fi
291
292TCP=1
293AC_ARG_ENABLE(tcp,
294 [AS_HELP_STRING(--disable-tcp,enable tcp protocol support (default enabled).)],
295 if test "x$enableval" = xno; then
296 TCP=0
297 fi
298)
299if test "x$TCP" = x1; then
300 AC_DEFINE_UNQUOTED(ENABLE_TCP, 1, [TCP protocol support.])
301fi
302
303HTTP=1
304AC_ARG_ENABLE(http-proxy,
305 [AS_HELP_STRING(--disable-http-proxy,enable http proxy connect support (default enabled).)],
306 if test "x$enableval" = xno; then
307 HTTP=0
308 fi
309)
310if test "x$HTTP" = x1; then
311 AC_DEFINE_UNQUOTED(ENABLE_HTTP_PROXY, 1, [http proxy connect support.])
312fi
313
314AC_ARG_ENABLE(dns,
315 [AS_HELP_STRING(--enable-dns,enable dns tunnel protocol support (default disabled).)],
225 [ 316 [
226 echo 317 AC_CHECK_HEADER(gmp.h,,[AC_MSG_ERROR([gmp.h not found, required for --enable-dns])])
227 echo "**********************************************************************" 318 AC_CHECK_LIB(gmp,main,,[AC_MSG_ERROR([libgmp not found, required for --enable-dns])])
228 echo "**********************************************************************" 319
229 echo "**** --enable-rohc not yet implemented *******************************" 320 AC_DEFINE_UNQUOTED(ENABLE_DNS, 1, [DNS tunnel protocol support.])
230 echo "**********************************************************************"
231 echo "**** uuh sorry, I am such an ass, but I didn't find any rfc3095 (ROHC)"
232 echo "**** implementation to be used in GPL code on the web."
233 echo "**** so this option is just a fake. Please implement one and send it"
234 echo "**** to me ;)"
235 echo "**********************************************************************"
236 echo "**********************************************************************"
237 echo "**********************************************************************"
238 echo "**********************************************************************"
239 echo
240 ] 321 ]
241) 322)
242 323
243AC_ARG_ENABLE(icmp, 324RSA=3072
244 [AC_HELP_STRING(--enable-icmp, [enable icmp protocol support.])], 325AC_ARG_ENABLE(rsa-length,
245 AC_DEFINE_UNQUOTED(ENABLE_ICMP, 1, [ICMP protocol support.]) 326 [AS_HELP_STRING(--enable-rsa-length=BITS,[
327 use BITS rsa keys (default 3072). Allowed values are 2048-10240.])],
328 RSA=$enableval
246) 329)
330AC_DEFINE_UNQUOTED(RSABITS, $RSA, [Size of RSA keys.])
247 331
248AC_ARG_ENABLE(tcp, 332HMACSIZE=12
249 [AC_HELP_STRING(--enable-tcp, [enable tcp protocol support.])],
250 AC_DEFINE_UNQUOTED(ENABLE_TCP, 1, [TCP protocol support.])
251)
252
253AC_ARG_ENABLE(http-proxy,
254 [AC_HELP_STRING(--enable-http-proxy, [enable http proxy connect support.])],
255 AC_DEFINE_UNQUOTED(ENABLE_HTTP_PROXY, 1, [http proxy connect support.])
256)
257
258HMAC=16 dnl see also the AC_HELP_STRING
259AC_ARG_ENABLE(hmac-length, 333AC_ARG_ENABLE(hmac-length,
260 [AC_HELP_STRING(--enable-hmac-length=BYTES, [use a hmac of length BYTES bytes (default 16). Allowed values are 4, 8, 12, 16.])], 334 [AS_HELP_STRING(--enable-hmac-length=BYTES,[
335 use a hmac of length BYTES bytes (default 12). Allowed values are 4, 8, 12, 16.])],
261 HMAC=$enableval 336 HMACSIZE=$enableval
262) 337)
263AC_DEFINE_UNQUOTED(HMACLENGTH, $HMAC, [Size of HMAC in each packet in bytes.]) 338AC_DEFINE_UNQUOTED(HMACLENGTH, $HMACSIZE, [Size of HMAC in each packet in bytes.])
264 339
265RAND=8 dnl see also the AC_HELP_STRING 340MTU=1500
266AC_ARG_ENABLE(rand-length,
267 [AC_HELP_STRING(--enable-rand-length=BYTES, [use BYTES bytes of extra randomness (default 8). Allowed values are 0, 4, 8.])],
268 RAND=$enableval
269)
270AC_DEFINE_UNQUOTED(RAND_SIZE, $RAND, [Add this many bytes of randomness to each packet.])
271
272MTU=1500 dnl see also the AC_HELP_STRING
273AC_ARG_ENABLE(mtu, 341AC_ARG_ENABLE(max-mtu,
274 [AC_HELP_STRING(--enable-max-mtu=BYTES, enable mtu sizes upto BYTES bytes (default 1500). Use 9100 for jumbogram support.)], 342 [AS_HELP_STRING(--enable-max-mtu=BYTES,enable mtu sizes upto BYTES bytes (default 1500). Use 9100 for jumbogram support.)],
275 MTU=$enableval 343 MTU=$enableval
276) 344)
277AC_DEFINE_UNQUOTED(MAX_MTU, $MTU + 14, [Maximum MTU supported.]) 345AC_DEFINE_UNQUOTED(MAX_MTU, ($MTU + 14), [Maximum MTU supported.])
278 346
279COMPRESS=1 347COMPRESS=1
280AC_ARG_ENABLE(compression, 348AC_ARG_ENABLE(compression,
281 [AC_HELP_STRING(--disable-compression, Disable compression support.)], 349 [AS_HELP_STRING(--disable-compression,Disable compression support.)],
282 if test "x$enableval" = xno; then 350 if test "x$enableval" = xno; then
283 COMPRESS=0 351 COMPRESS=0
284 fi 352 fi
285) 353)
286AC_DEFINE_UNQUOTED(ENABLE_COMPRESSION, $COMPRESS, [Enable compression support.]) 354AC_DEFINE_UNQUOTED(ENABLE_COMPRESSION, $COMPRESS, [Enable compression support.])
287 355
288CIPHER=bf_cbc 356CIPHER=aes_128_ctr
289AC_ARG_ENABLE(cipher, 357AC_ARG_ENABLE(cipher,
290 [AC_HELP_STRING(--enable-cipher, [ 358 [AS_HELP_STRING(--enable-cipher=CIPHER,[
291 Select the symmetric cipher (default "bf"). Must be one of 359 Select the symmetric cipher (default "aes-128").
292 "bf" (blowfish), "aes-128", "aes-192" or "aes-256".])], 360 Must be one of "aes-128" (rijndael), "aes-192", or "aes-256".])],
293 if test "x$enableval" = xbf ; then CIPHER=bf_cbc ; fi 361 #if test "x$enableval" = xbf ; then CIPHER=bf_ctr ; fi
294 if test "x$enableval" = xaes-128; then CIPHER=aes_128_cbc; fi 362 if test "x$enableval" = xaes-128 ; then CIPHER=aes_128_ctr ; fi
295 if test "x$enableval" = xaes-192; then CIPHER=aes_192_cbc; fi 363 if test "x$enableval" = xaes-192 ; then CIPHER=aes_192_ctr ; fi
296 if test "x$enableval" = xaes-256; then CIPHER=aes_256_cbc; fi 364 if test "x$enableval" = xaes-256 ; then CIPHER=aes_256_ctr ; fi
365 #if test "x$enableval" = xcamellia-128; then CIPHER=camellia_128_ctr; fi
366 #if test "x$enableval" = xcamellia-256; then CIPHER=camellia_256_ctr; fi
297) 367)
298AC_DEFINE_UNQUOTED(ENABLE_CIPHER, EVP_${CIPHER}, [Select the symmetric cipher to use.]) 368AC_DEFINE_UNQUOTED(ENABLE_CIPHER, EVP_${CIPHER}, [Select the symmetric cipher to use.])
299 369
300DIGEST=sha1 370HMAC=sha1
301AC_ARG_ENABLE(digest, 371AC_ARG_ENABLE(hmac-digest,
302 [AC_HELP_STRING(--enable-digest, [ 372 [AS_HELP_STRING(--enable-hmac-digest=HMAC,[
303 Select the digets algorithm to use (default "sha1"). Must be one of 373 Select the HMAC digest algorithm to use (default "sha1"). Must be one of
304 "sha1", "ripemd160", "md4" or "md5".])], 374 "sha512", "sha256", "sha1", "ripemd160", "whirlpool".])],
375 if test "x$enableval" = xwhirlpool; then HMAC=whirlpool; fi
376 if test "x$enableval" = xsha512 ; then HMAC=sha512 ; fi
377 if test "x$enableval" = xsha256 ; then HMAC=sha256 ; fi
305 if test "x$enableval" = xsha1 ; then DIGEST=sha1 ; fi 378 if test "x$enableval" = xsha1 ; then HMAC=sha1 ; fi
306 if test "x$enableval" = xripemd160; then DIGEST=ripemd160; fi 379 if test "x$enableval" = xripemd160; then HMAC=ripemd160; fi
307 if test "x$enableval" = xmd4 ; then DIGEST=md4 ; fi 380)
381AC_DEFINE_UNQUOTED(ENABLE_HMAC, EVP_${HMAC}, [Select the HMAC digest algorithm to use.])
382
383AUTH=sha512
384AC_ARG_ENABLE(auth-digest,
385 [AS_HELP_STRING(--enable-auth-digest=DIGEST,[
386 Select the hmac algorithm to use (default "sha512"). Must be one of
387 "sha512", "sha256", "whirlpool".])],
388 if test "x$enableval" = xwhirlpool; then AUTH=whirlpool; fi
308 if test "x$enableval" = xmd5 ; then DIGEST=md5 ; fi 389 if test "x$enableval" = xsha512 ; then AUTH=sha512 ; fi
390 if test "x$enableval" = xsha256 ; then AUTH=sha256 ; fi
309) 391)
310AC_DEFINE_UNQUOTED(ENABLE_DIGEST, EVP_${DIGEST}, [Select the digest algorithm to use.]) 392AC_DEFINE_UNQUOTED(ENABLE_AUTH, EVP_${AUTH}, [Select the auth digest algorithm to use.])
311 393
312if $CXX -v --help 2>&1 | grep -q fno-rtti; then 394if $CXX -v --help 2>&1 | grep -q fno-rtti; then
313 CXXFLAGS="$CXXFLAGS -fno-rtti" 395 CXXFLAGS="$CXXFLAGS -fno-rtti"
314fi 396fi
315 397
316if $CXX -v --help 2>&1 | grep -q fexceptions; then 398#if $CXX -v --help 2>&1 | grep -q fexceptions; then
317 CXXFLAGS="$CXXFLAGS -fno-exceptions" 399# CXXFLAGS="$CXXFLAGS -fno-exceptions"
318fi 400#fi
319 401
402LIBS="$EXTRA_LIBS $LIBS"
403
320if $CXX -v --help 2>&1 | grep -q ffunction-sections; then 404dnl if $CXX -v --help 2>&1 | grep -q ffunction-sections; then
321 CXXFLAGS="$CXXFLAGS -ffunction-sections" 405dnl CXXFLAGS="$CXXFLAGS -ffunction-sections"
322fi 406dnl fi
323 407dnl
324if $LD -v --help 2>&1 | grep -q gc-sections; then 408dnl if $LD -v --help 2>&1 | grep -q gc-sections; then
325 LDFLAGS="$LDFLAGS -Wl,--gc-sections" 409dnl LDFLAGS="$LDFLAGS -Wl,--gc-sections"
326fi 410dnl fi
327 411
328AC_CONFIG_COMMANDS_POST([ 412AC_SUBST(AM_CPPFLAGS)
413
414AC_CONFIG_FILES([Makefile po/Makefile.in
415src/Makefile
416doc/Makefile
417lib/Makefile
418m4/Makefile
419])
420AC_OUTPUT
329 421
330echo 422echo
331echo "***" 423echo "***"
332echo "*** Configuration Summary" 424echo "*** Configuration Summary"
333echo "***" 425echo "***"
334echo "*** Kernel Iface: $IFTYPE/$IFSUBTYPE" 426echo "*** Kernel Iface: $IFTYPE/$IFSUBTYPE"
427echo "*** RSA size: $RSA"
335echo "*** Cipher used: $CIPHER" 428echo "*** Cipher used: $CIPHER"
336echo "*** Digest used: $DIGEST" 429echo "*** Digest used: $DIGEST"
430echo "*** Authdigest: $AUTH"
337echo "*** HMAC length: $HMAC" 431echo "*** HMAC length: $HMAC"
338echo "*** RAND used: $RAND"
339echo "*** Max. MTU: $MTU" 432echo "*** Max. MTU: $MTU"
340echo "*** Compression: $COMPRESS" 433
341echo "***" 434echo "***"
435echo "*** Enable options:"
436grep ENABLE_ config.h | sed -e 's/^/*** /'
342 437
343if test "x$DIGEST" = xmd4; then 438if test "$HMACSIZE" -lt 12; then
344echo "*** WARNING"
345echo "*** The digest you have chosen ($DIGEST) is known to be insecure"
346echo "***" 439echo "***"
440echo "*** WARNING: The hmac length you have chosen ($HMACSIZE) is quite insecure"
347fi 441fi
348 442
443echo "***"
349echo 444echo
350 445
351]) 446if pkg-config --exists 'libcrypto >= 1.1 libcrypto < 2.0'; then
447 cat <<EOF
448@<:@33m
449***
450*** WARNING WARNING WARNING WARNING WARNING WARNING WARNING
451***
452*** You seem to configure gvpe with OpenSSL 1.1 or newer.
453*** While this probably compiles, please note that this is not only
454*** unsupported, but also discouraged.
455***
456*** It is recommended to use either OpenSSL 1.0, as long as that is still
457*** supported, or LibreSSL (https://www.libressl.org/).
458***
459*** This is not a political issue - while porting GVPE to the newer
460*** OpenSSL 1.1 API, I encountered two incompatible API changes that were
461*** not documented, were not caught while compiling but caused security
462*** issues. When reported, the reaction of the OpenSSL developers was to
463*** update the documentation.
464***
465*** As a result, I lost all confidence in the ability and desire of
466*** OpenSSL developers to create a safe API, and would highly recommend
467*** switching to LibreSSL which explicitly avoids such braking changes.
468***
469*** WARNING WARNING WARNING WARNING WARNING WARNING WARNING
470***
471*** Again, do not use OpenSSL 1.1 and complain if stuff breaks.
472*** You have been warned, but your choice is respected.
473***
474@<:@0m
352 475
353AC_SUBST(INCLUDES) 476EOF
477fi
354 478
355AC_OUTPUT(Makefile po/Makefile.in 479
356src/Makefile
357doc/Makefile
358lib/Makefile
359m4/Makefile
360)

Diff Legend

– Removed lines
+ Added lines
< Changed lines
> Changed lines