… | |
… | |
892 | use BYTES bytes of extra randomness (default 8). |
892 | use BYTES bytes of extra randomness (default 8). |
893 | Allowed values are 0, 4, 8. |
893 | Allowed values are 0, 4, 8. |
894 | --enable-max-mtu=BYTES enable mtu sizes upto BYTES bytes (default 1500). |
894 | --enable-max-mtu=BYTES enable mtu sizes upto BYTES bytes (default 1500). |
895 | Use 9100 for jumbogram support. |
895 | Use 9100 for jumbogram support. |
896 | --disable-compression Disable compression support. |
896 | --disable-compression Disable compression support. |
897 | --enable-cipher Select the symmetric cipher (default "bf"). Must be |
897 | --enable-cipher Select the symmetric cipher (default "aes-128"). |
898 | one of "bf" (blowfish), "aes-128" (rijndael), |
898 | Must be one of "bf" (blowfish), "aes-128" |
899 | "aes-192" or "aes-256". |
899 | (rijndael), "aes-192" or "aes-256". |
900 | --enable-digest Select the digets algorithm to use (default "sha1"). |
900 | --enable-digest Select the digets algorithm to use (default |
901 | Must be one of "sha1", "ripemd160", "md5" or "md4" |
901 | "ripemd160"). Must be one of "sha1", "ripemd160", |
902 | (insecure). |
902 | "md5" or "md4" (insecure). |
903 | |
903 | |
904 | Optional Packages: |
904 | Optional Packages: |
905 | --with-PACKAGE[=ARG] use PACKAGE [ARG=yes] |
905 | --with-PACKAGE[=ARG] use PACKAGE [ARG=yes] |
906 | --without-PACKAGE do not use PACKAGE (same as --with-PACKAGE=no) |
906 | --without-PACKAGE do not use PACKAGE (same as --with-PACKAGE=no) |
907 | --with-gnu-ld assume the C compiler uses GNU ld default=no |
907 | --with-gnu-ld assume the C compiler uses GNU ld default=no |
… | |
… | |
9721 | ROHC_TRUE='#' |
9721 | ROHC_TRUE='#' |
9722 | ROHC_FALSE= |
9722 | ROHC_FALSE= |
9723 | fi |
9723 | fi |
9724 | |
9724 | |
9725 | |
9725 | |
|
|
9726 | |
9726 | # Check whether --enable-icmp or --disable-icmp was given. |
9727 | # Check whether --enable-icmp or --disable-icmp was given. |
9727 | if test "${enable_icmp+set}" = set; then |
9728 | if test "${enable_icmp+set}" = set; then |
9728 | enableval="$enable_icmp" |
9729 | enableval="$enable_icmp" |
9729 | |
9730 | |
9730 | cat >>confdefs.h <<_ACEOF |
9731 | cat >>confdefs.h <<_ACEOF |
… | |
… | |
10038 | cat >>confdefs.h <<_ACEOF |
10039 | cat >>confdefs.h <<_ACEOF |
10039 | #define ENABLE_COMPRESSION $COMPRESS |
10040 | #define ENABLE_COMPRESSION $COMPRESS |
10040 | _ACEOF |
10041 | _ACEOF |
10041 | |
10042 | |
10042 | |
10043 | |
10043 | CIPHER=bf_cbc |
10044 | CIPHER=aes_128_cbc |
10044 | # Check whether --enable-cipher or --disable-cipher was given. |
10045 | # Check whether --enable-cipher or --disable-cipher was given. |
10045 | if test "${enable_cipher+set}" = set; then |
10046 | if test "${enable_cipher+set}" = set; then |
10046 | enableval="$enable_cipher" |
10047 | enableval="$enable_cipher" |
10047 | if test "x$enableval" = xbf ; then CIPHER=bf_cbc ; fi |
10048 | if test "x$enableval" = xbf ; then CIPHER=bf_cbc ; fi |
10048 | if test "x$enableval" = xaes-128; then CIPHER=aes_128_cbc; fi |
10049 | if test "x$enableval" = xaes-128; then CIPHER=aes_128_cbc; fi |
… | |
… | |
10054 | cat >>confdefs.h <<_ACEOF |
10055 | cat >>confdefs.h <<_ACEOF |
10055 | #define ENABLE_CIPHER EVP_${CIPHER} |
10056 | #define ENABLE_CIPHER EVP_${CIPHER} |
10056 | _ACEOF |
10057 | _ACEOF |
10057 | |
10058 | |
10058 | |
10059 | |
10059 | DIGEST=sha1 |
10060 | DIGEST=ripemd160 |
10060 | # Check whether --enable-digest or --disable-digest was given. |
10061 | # Check whether --enable-digest or --disable-digest was given. |
10061 | if test "${enable_digest+set}" = set; then |
10062 | if test "${enable_digest+set}" = set; then |
10062 | enableval="$enable_digest" |
10063 | enableval="$enable_digest" |
10063 | if test "x$enableval" = xsha1 ; then DIGEST=sha1 ; fi |
10064 | if test "x$enableval" = xsha1 ; then DIGEST=sha1 ; fi |
10064 | if test "x$enableval" = xripemd160; then DIGEST=ripemd160; fi |
10065 | if test "x$enableval" = xripemd160; then DIGEST=ripemd160; fi |
… | |
… | |
10077 | fi |
10078 | fi |
10078 | |
10079 | |
10079 | if $CXX -v --help 2>&1 | grep -q fexceptions; then |
10080 | if $CXX -v --help 2>&1 | grep -q fexceptions; then |
10080 | CXXFLAGS="$CXXFLAGS -fno-exceptions" |
10081 | CXXFLAGS="$CXXFLAGS -fno-exceptions" |
10081 | fi |
10082 | fi |
10082 | |
|
|
10083 | |
|
|
10084 | |
10083 | |
10085 | |
10084 | |
10086 | |
10085 | |
10087 | |
10086 | |
10088 | ac_config_files="$ac_config_files Makefile po/Makefile.in src/Makefile doc/Makefile lib/Makefile m4/Makefile" |
10087 | ac_config_files="$ac_config_files Makefile po/Makefile.in src/Makefile doc/Makefile lib/Makefile m4/Makefile" |
… | |
… | |
11645 | _ACEOF |
11644 | _ACEOF |
11646 | chmod +x $CONFIG_STATUS |
11645 | chmod +x $CONFIG_STATUS |
11647 | ac_clean_files=$ac_clean_files_save |
11646 | ac_clean_files=$ac_clean_files_save |
11648 | |
11647 | |
11649 | |
11648 | |
11650 | |
|
|
11651 | echo |
|
|
11652 | echo "***" |
|
|
11653 | echo "*** Configuration Summary" |
|
|
11654 | echo "***" |
|
|
11655 | echo "*** Kernel Iface: $IFTYPE/$IFSUBTYPE" |
|
|
11656 | echo "*** Cipher used: $CIPHER" |
|
|
11657 | echo "*** Digest used: $DIGEST" |
|
|
11658 | echo "*** HMAC length: $HMAC" |
|
|
11659 | echo "*** RAND used: $RAND" |
|
|
11660 | echo "*** Max. MTU: $MTU" |
|
|
11661 | echo "*** Compression: $COMPRESS" |
|
|
11662 | |
|
|
11663 | if test "x$DIGEST" = xmd4; then |
|
|
11664 | echo "***" |
|
|
11665 | echo "*** WARNING: The digest you have chosen ($DIGEST) is known to be insecure" |
|
|
11666 | fi |
|
|
11667 | |
|
|
11668 | if test "$HMAC" -lt 12; then |
|
|
11669 | echo "***" |
|
|
11670 | echo "*** WARNING: The hmac length you have chosen ($HMAC) is probably insecure" |
|
|
11671 | fi |
|
|
11672 | |
|
|
11673 | if test "$RAND" -lt 8; then |
|
|
11674 | echo "***" |
|
|
11675 | echo "*** WARNING: The random prefix you have chosen ($RAND) is probably insecure" |
|
|
11676 | fi |
|
|
11677 | |
|
|
11678 | echo "***" |
|
|
11679 | |
|
|
11680 | echo |
|
|
11681 | |
|
|
11682 | |
|
|
11683 | |
|
|
11684 | # configure is writing to config.log, and then calls config.status. |
11649 | # configure is writing to config.log, and then calls config.status. |
11685 | # config.status does its own redirection, appending to config.log. |
11650 | # config.status does its own redirection, appending to config.log. |
11686 | # Unfortunately, on DOS this fails, as config.log is still kept open |
11651 | # Unfortunately, on DOS this fails, as config.log is still kept open |
11687 | # by configure, so config.status won't be able to write to it; its |
11652 | # by configure, so config.status won't be able to write to it; its |
11688 | # output is simply discarded. So we exec the FD to /dev/null, |
11653 | # output is simply discarded. So we exec the FD to /dev/null, |
… | |
… | |
11700 | # Use ||, not &&, to avoid exiting from the if with $? = 1, which |
11665 | # Use ||, not &&, to avoid exiting from the if with $? = 1, which |
11701 | # would make configure fail if this is the last instruction. |
11666 | # would make configure fail if this is the last instruction. |
11702 | $ac_cs_success || { (exit 1); exit 1; } |
11667 | $ac_cs_success || { (exit 1); exit 1; } |
11703 | fi |
11668 | fi |
11704 | |
11669 | |
|
|
11670 | |
|
|
11671 | echo |
|
|
11672 | echo "***" |
|
|
11673 | echo "*** Configuration Summary" |
|
|
11674 | echo "***" |
|
|
11675 | echo "*** Kernel Iface: $IFTYPE/$IFSUBTYPE" |
|
|
11676 | echo "*** Cipher used: $CIPHER" |
|
|
11677 | echo "*** Digest used: $DIGEST" |
|
|
11678 | echo "*** HMAC length: $HMAC" |
|
|
11679 | echo "*** RAND used: $RAND" |
|
|
11680 | echo "*** Max. MTU: $MTU" |
|
|
11681 | |
|
|
11682 | echo "***" |
|
|
11683 | echo "*** Enable options:" |
|
|
11684 | grep ENABLE_ config.h | sed -e 's/^/*** /' |
|
|
11685 | |
|
|
11686 | if test "x$DIGEST" = xmd4; then |
|
|
11687 | echo "***" |
|
|
11688 | echo "*** WARNING: The digest you have chosen ($DIGEST) is known to be insecure" |
|
|
11689 | fi |
|
|
11690 | |
|
|
11691 | if test "$HMAC" -lt 12; then |
|
|
11692 | echo "***" |
|
|
11693 | echo "*** WARNING: The hmac length you have chosen ($HMAC) is probably insecure" |
|
|
11694 | fi |
|
|
11695 | |
|
|
11696 | if test "$RAND" -lt 8; then |
|
|
11697 | echo "***" |
|
|
11698 | echo "*** WARNING: The random prefix you have chosen ($RAND) is probably insecure" |
|
|
11699 | fi |
|
|
11700 | |
|
|
11701 | echo "***" |
|
|
11702 | echo |
|
|
11703 | |
|
|
11704 | |