ViewVC Help
View File | Revision Log | Show Annotations | Download File
/cvs/gvpe/configure
(Generate patch)

Comparing gvpe/configure (file contents):
Revision 1.50 by root, Wed Jul 10 01:51:40 2013 UTC vs.
Revision 1.54 by root, Fri Jan 17 11:19:04 2014 UTC

… …
767enable_static_daemon 767enable_static_daemon
768enable_icmp 768enable_icmp
769enable_tcp 769enable_tcp
770enable_http_proxy 770enable_http_proxy
771enable_dns 771enable_dns
772enable_rsa_length
772enable_hmac_length 773enable_hmac_length
773enable_rand_length 774enable_rand_length
774enable_max_mtu 775enable_max_mtu
775enable_compression 776enable_compression
776enable_cipher 777enable_cipher
777enable_digest 778enable_hmac_digest
779enable_auth_digest
778' 780'
779 ac_precious_vars='build_alias 781 ac_precious_vars='build_alias
780host_alias 782host_alias
781target_alias 783target_alias
782CC 784CC
… …
1428 --disable-icmp enable icmp protocol support (default enabled). 1430 --disable-icmp enable icmp protocol support (default enabled).
1429 --disable-tcp enable tcp protocol support (default enabled). 1431 --disable-tcp enable tcp protocol support (default enabled).
1430 --disable-http-proxy enable http proxy connect support (default enabled). 1432 --disable-http-proxy enable http proxy connect support (default enabled).
1431 --enable-dns enable dns tunnel protocol support (default 1433 --enable-dns enable dns tunnel protocol support (default
1432 disabled). 1434 disabled).
1435 --enable-rsa-length=BITS
1436 use BITS rsa keys (default 3072). Allowed values are
1437 2048-10240.
1433 --enable-hmac-length=BYTES 1438 --enable-hmac-length=BYTES
1434 use a hmac of length BYTES bytes (default 12). 1439 use a hmac of length BYTES bytes (default 12).
1435 Allowed values are 4, 8, 12, 16. 1440 Allowed values are 4, 8, 12, 16.
1436 --enable-rand-length=BYTES 1441 --enable-rand-length=BYTES
1437 use BYTES bytes of extra randomness (default 8). 1442 use BYTES bytes of extra randomness (default 12).
1438 Allowed values are 0, 4, 8. 1443 Allowed values are 0, 4, 8, 12.
1439 --enable-max-mtu=BYTES enable mtu sizes upto BYTES bytes (default 1500). 1444 --enable-max-mtu=BYTES enable mtu sizes upto BYTES bytes (default 1500).
1440 Use 9100 for jumbogram support. 1445 Use 9100 for jumbogram support.
1441 --disable-compression Disable compression support. 1446 --disable-compression Disable compression support.
1442 --enable-cipher=CIPHER Select the symmetric cipher (default "aes-128"). 1447 --enable-cipher=CIPHER Select the symmetric cipher (default "aes-128").
1443 Must be one of "bf" (blowfish), "aes-128" 1448 Must be one of "bf" (blowfish), "aes-128"
1444 (rijndael), "aes-192" or "aes-256". 1449 (rijndael), "aes-192", "aes-256", "camellia-128" or
1445 --enable-digest=CIPHER Select the digest algorithm to use (default 1450 "camellia-256".
1451 --enable-hmac-digest=HMAC
1452 Select the HMAC digest algorithm to use (default
1446 "ripemd160"). Must be one of "sha512", "sha256", 1453 "sha1"). Must be one of "sha512", "sha256", "sha1",
1447 "sha1" (somewhat insecure), "ripemd160", "md5" 1454 "ripemd160", "whirlpool".
1448 (insecure) or "md4" (insecure). 1455 --enable-auth-digest=DIGEST
1456 Select the hmac algorithm to use (default "sha512").
1457 Must be one of "sha512", "sha256", "whirlpool".
1449 1458
1450Optional Packages: 1459Optional Packages:
1451 --with-PACKAGE[=ARG] use PACKAGE [ARG=yes] 1460 --with-PACKAGE[=ARG] use PACKAGE [ARG=yes]
1452 --without-PACKAGE do not use PACKAGE (same as --with-PACKAGE=no) 1461 --without-PACKAGE do not use PACKAGE (same as --with-PACKAGE=no)
1453 --with-gnu-ld assume the C compiler uses GNU ld default=no 1462 --with-gnu-ld assume the C compiler uses GNU ld default=no
… …
3199fi 3208fi
3200 3209
3201 3210
3202# Define the identity of the package. 3211# Define the identity of the package.
3203 PACKAGE=gvpe 3212 PACKAGE=gvpe
3204 VERSION=2.24 3213 VERSION=2.25
3205 3214
3206 3215
3207cat >>confdefs.h <<_ACEOF 3216cat >>confdefs.h <<_ACEOF
3208#define PACKAGE "$PACKAGE" 3217#define PACKAGE "$PACKAGE"
3209_ACEOF 3218_ACEOF
… …
8585 8594
8586 8595
8587fi 8596fi
8588 8597
8589 8598
8599RSA=3072
8600# Check whether --enable-rsa-length was given.
8601if test "${enable_rsa_length+set}" = set; then :
8602 enableval=$enable_rsa_length; RSA=$enableval
8603
8604fi
8605
8606
8607cat >>confdefs.h <<_ACEOF
8608#define RSABITS $RSA
8609_ACEOF
8610
8611
8590HMAC=12 8612HMACSIZE=12
8591# Check whether --enable-hmac-length was given. 8613# Check whether --enable-hmac-length was given.
8592if test "${enable_hmac_length+set}" = set; then : 8614if test "${enable_hmac_length+set}" = set; then :
8593 enableval=$enable_hmac_length; HMAC=$enableval 8615 enableval=$enable_hmac_length; HMACSIZE=$enableval
8594 8616
8595fi 8617fi
8596 8618
8597 8619
8598cat >>confdefs.h <<_ACEOF 8620cat >>confdefs.h <<_ACEOF
8599#define HMACLENGTH $HMAC 8621#define HMACLENGTH $HMACSIZE
8600_ACEOF 8622_ACEOF
8601 8623
8602 8624
8603RAND=8 8625RANDSIZE=12
8604# Check whether --enable-rand-length was given. 8626# Check whether --enable-rand-length was given.
8605if test "${enable_rand_length+set}" = set; then : 8627if test "${enable_rand_length+set}" = set; then :
8606 enableval=$enable_rand_length; RAND=$enableval 8628 enableval=$enable_rand_length; RANDSIZE=$enableval
8607 8629
8608fi 8630fi
8609 8631
8610 8632
8611cat >>confdefs.h <<_ACEOF 8633cat >>confdefs.h <<_ACEOF
8612#define RAND_SIZE $RAND 8634#define RAND_SIZE $RANDSIZE
8613_ACEOF 8635_ACEOF
8614 8636
8615 8637
8616MTU=1500 8638MTU=1500
8617# Check whether --enable-max-mtu was given. 8639# Check whether --enable-max-mtu was given.
… …
8642 8664
8643 8665
8644CIPHER=aes_128_cbc 8666CIPHER=aes_128_cbc
8645# Check whether --enable-cipher was given. 8667# Check whether --enable-cipher was given.
8646if test "${enable_cipher+set}" = set; then : 8668if test "${enable_cipher+set}" = set; then :
8647 enableval=$enable_cipher; if test "x$enableval" = xbf ; then CIPHER=bf_cbc ; fi 8669 enableval=$enable_cipher; if test "x$enableval" = xbf ; then CIPHER=bf_cbc ; fi
8648 if test "x$enableval" = xaes-128; then CIPHER=aes_128_cbc; fi 8670 if test "x$enableval" = xaes-128 ; then CIPHER=aes_128_cbc ; fi
8649 if test "x$enableval" = xaes-192; then CIPHER=aes_192_cbc; fi 8671 if test "x$enableval" = xaes-192 ; then CIPHER=aes_192_cbc ; fi
8650 if test "x$enableval" = xaes-256; then CIPHER=aes_256_cbc; fi 8672 if test "x$enableval" = xaes-256 ; then CIPHER=aes_256_cbc ; fi
8673 if test "x$enableval" = xcamellia-128; then CIPHER=camellia_128_cbc; fi
8674 if test "x$enableval" = xcamellia-256; then CIPHER=camellia_256_cbc; fi
8651 8675
8652fi 8676fi
8653 8677
8654 8678
8655cat >>confdefs.h <<_ACEOF 8679cat >>confdefs.h <<_ACEOF
8656#define ENABLE_CIPHER EVP_${CIPHER} 8680#define ENABLE_CIPHER EVP_${CIPHER}
8657_ACEOF 8681_ACEOF
8658 8682
8659 8683
8660DIGEST=ripemd160 8684HMAC=sha1
8661# Check whether --enable-digest was given. 8685# Check whether --enable-hmac-digest was given.
8662if test "${enable_digest+set}" = set; then : 8686if test "${enable_hmac_digest+set}" = set; then :
8687 enableval=$enable_hmac_digest; if test "x$enableval" = xwhirlpool; then HMAC=whirlpool; fi
8663 enableval=$enable_digest; if test "x$enableval" = xsha512 ; then DIGEST=sha512 ; fi 8688 if test "x$enableval" = xsha512 ; then HMAC=sha512 ; fi
8664 if test "x$enableval" = xsha256 ; then DIGEST=sha256 ; fi 8689 if test "x$enableval" = xsha256 ; then HMAC=sha256 ; fi
8665 if test "x$enableval" = xsha1 ; then DIGEST=sha1 ; fi 8690 if test "x$enableval" = xsha1 ; then HMAC=sha1 ; fi
8666 if test "x$enableval" = xripemd160; then DIGEST=ripemd160; fi 8691 if test "x$enableval" = xripemd160; then HMAC=ripemd160; fi
8667 if test "x$enableval" = xmd5 ; then DIGEST=md5 ; fi
8668 if test "x$enableval" = xmd4 ; then DIGEST=md4 ; fi
8669 8692
8670fi 8693fi
8671 8694
8672 8695
8673cat >>confdefs.h <<_ACEOF 8696cat >>confdefs.h <<_ACEOF
8697#define ENABLE_HMAC EVP_${HMAC}
8698_ACEOF
8699
8700
8701AUTH=sha512
8702# Check whether --enable-auth-digest was given.
8703if test "${enable_auth_digest+set}" = set; then :
8704 enableval=$enable_auth_digest; if test "x$enableval" = xwhirlpool; then AUTH=whirlpool; fi
8705 if test "x$enableval" = xsha512 ; then AUTH=sha512 ; fi
8706 if test "x$enableval" = xsha256 ; then AUTH=sha256 ; fi
8707
8708fi
8709
8710
8711cat >>confdefs.h <<_ACEOF
8674#define ENABLE_DIGEST EVP_${DIGEST} 8712#define ENABLE_AUTH EVP_${AUTH}
8675_ACEOF 8713_ACEOF
8676 8714
8677 8715
8678if $CXX -v --help 2>&1 | grep -q fno-rtti; then 8716if $CXX -v --help 2>&1 | grep -q fno-rtti; then
8679 CXXFLAGS="$CXXFLAGS -fno-rtti" 8717 CXXFLAGS="$CXXFLAGS -fno-rtti"
… …
10263echo 10301echo
10264echo "***" 10302echo "***"
10265echo "*** Configuration Summary" 10303echo "*** Configuration Summary"
10266echo "***" 10304echo "***"
10267echo "*** Kernel Iface: $IFTYPE/$IFSUBTYPE" 10305echo "*** Kernel Iface: $IFTYPE/$IFSUBTYPE"
10306echo "*** RSA size: $RSA"
10268echo "*** Cipher used: $CIPHER" 10307echo "*** Cipher used: $CIPHER"
10269echo "*** Digest used: $DIGEST" 10308echo "*** Auth Digest: $AUTH"
10309echo "*** HMAC Digest: $HMAC"
10270echo "*** HMAC length: $HMAC" 10310echo "*** HMAC length: $HMAC"
10271echo "*** RAND used: $RAND" 10311echo "*** RAND used: $RANDSIZE"
10272echo "*** Max. MTU: $MTU" 10312echo "*** Max. MTU: $MTU"
10273 10313
10274echo "***" 10314echo "***"
10275echo "*** Enable options:" 10315echo "*** Enable options:"
10276grep ENABLE_ config.h | sed -e 's/^/*** /' 10316grep ENABLE_ config.h | sed -e 's/^/*** /'
10277 10317
10278if test "x$DIGEST" = xmd4; then 10318if test "$HMACSIZE" -lt 12; then
10279echo "***" 10319echo "***"
10280echo "*** WARNING: The digest you have chosen ($DIGEST) is known to be insecure" 10320echo "*** WARNING: The hmac length you have chosen ($HMACSIZE) is quite insecure"
10281fi 10321fi
10282 10322
10283if test "x$DIGEST" = xmd5; then 10323if test "$RANDSIZE" -lt 12; then
10284echo "***" 10324echo "***"
10285echo "*** WARNING: The digest you have chosen ($DIGEST) is probably insecure"
10286fi
10287
10288if test "$HMAC" -lt 12; then
10289echo "***"
10290echo "*** WARNING: The hmac length you have chosen ($HMAC) is probably insecure"
10291fi
10292
10293if test "$RAND" -lt 8; then
10294echo "***"
10295echo "*** WARNING: The random prefix you have chosen ($RAND) is probably insecure" 10325echo "*** WARNING: The random prefix you have chosen ($RANDSIZE) is probably insecure"
10296fi 10326fi
10297 10327
10298echo "***" 10328echo "***"
10299echo 10329echo
10300 10330

Diff Legend

– Removed lines
+ Added lines
< Changed lines
> Changed lines