www.gitorious.org Git - gnutls:gnutls.git/blob

1 dnl Process this file with autoconf to produce a configure script.

3 #

4 # Author: Nikos Mavrogiannopoulos, Simon Josefsson

5 #

6 # This file is part of GnuTLS.

7 #

8 # This program is free software; you can redistribute it and/or modify

9 # it under the terms of the GNU General Public License as published by

10 # the Free Software Foundation; either version 3 of the License, or

11 # (at your option) any later version.

12 #

13 # This program is distributed in the hope that it will be useful, but

14 # WITHOUT ANY WARRANTY; without even the implied warranty of

15 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU

16 # General Public License for more details.

17 #

18 # You should have received a copy of the GNU General Public License

19 # along with this program; if not, write to the Free Software

20 # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301

21 # USA

23 AC_PREREQ(2.61)

24 AC_INIT([GnuTLS], [3.4.0], [bugs@gnutls.org])

25 AC_CONFIG_AUX_DIR([build-aux])

26 AC_CONFIG_MACRO_DIR([m4])

27 AC_CANONICAL_HOST

29 AM_INIT_AUTOMAKE([1.12.2 subdir-objects no-dist-gzip dist-xz dist-lzip -Wall -Wno-override])

30 m4_ifdef([AM_SILENT_RULES], [AM_SILENT_RULES([yes])])

31 AC_CONFIG_HEADERS([config.h])

33 AC_MSG_RESULT([***

34 *** Checking for compilation programs...

35 ])

37 dnl Checks for programs.

38 PKG_PROG_PKG_CONFIG

39 AC_PROG_CC

40 gl_EARLY

41 ggl_EARLY

42 AM_PROG_AS

43 AM_PROG_AR

44 AC_PROG_CXX

45 AM_PROG_CC_C_O

46 AC_PROG_YACC

47 AC_PROG_SED

48 AC_CHECK_PROG([AUTOGEN], [autogen], [autogen], [/bin/true])

50 if test x"$AUTOGEN" = "x/bin/true"; then

51 AC_MSG_WARN([[

52 ***

53 *** autogen not found. Will not link against libopts.

54 *** ]])

55 enable_local_libopts=yes

56 fi

58 # For includes/gnutls/gnutls.h.in.

59 AC_SUBST(MAJOR_VERSION, `echo $PACKAGE_VERSION | sed 's/$.*$\..*\..*/\1/g'`)

60 AC_SUBST(MINOR_VERSION, `echo $PACKAGE_VERSION | sed 's/.*\.$.*$\..*/\1/g'`)

61 AC_SUBST(PATCH_VERSION, [[`echo $PACKAGE_VERSION | sed 's/.*\..*\.$[0-9]*$.*/\1/g'`]])

62 AC_SUBST(NUMBER_VERSION, `printf "0x%02x%02x%02x" $MAJOR_VERSION $MINOR_VERSION $PATCH_VERSION`)

64 touch suppressions.valgrind

65 dnl C and C++ capabilities

66 AC_C_INLINE

67 AC_HEADER_STDC

69 # For the C++ code

70 AC_ARG_ENABLE(cxx,

71 AS_HELP_STRING([--disable-cxx], [unconditionally disable the C++ library]),

72 use_cxx=$enableval, use_cxx=yes)

73 if test "$use_cxx" != "no"; then

74 AC_LANG_PUSH(C++)

75 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([],[])], use_cxx=yes, use_cxx=no)

76 AC_LANG_POP(C++)

77 fi

78 AM_CONDITIONAL(ENABLE_CXX, test "$use_cxx" != "no")

79 AM_CONDITIONAL(WANT_TEST_SUITE, [test -f tests/suite/mini-eagain2.c])

81 dnl Detect windows build

82 use_accel=yes

83 case "$host" in

84 *android*)

85 have_android=yes

86 ;;

87 *mingw32* | *mingw64*)

88 have_win=yes

89 ;;

90 *darwin*)

91 have_macosx=yes

92 ;;

93 *solaris*)

94 use_accel=no

95 AC_MSG_WARN([[

96 ***

97 *** In solaris hardware acceleration is disabled by default due to issues

98 *** with the assembler. Use --enable-hardware-acceleration to enable it.

99 *** ]])

100 ;;

101 *)

102 have_elf=yes

103 ;;

104 esac

105

106 AM_CONDITIONAL(ANDROID, test "$have_android" = yes)

107 AM_CONDITIONAL(WINDOWS, test "$have_win" = yes)

108 AM_CONDITIONAL(MACOSX, test "$have_macosx" = yes)

109 AM_CONDITIONAL(ELF, test "$have_elf" = yes)

110

111 dnl Hardware Acceleration

112 AC_ARG_ENABLE(hardware-acceleration,

113 AS_HELP_STRING([--disable-hardware-acceleration], [unconditionally disable hardware acceleration]),

114 use_accel=$enableval)

115 hw_accel=none

116

117

118 use_padlock=no

119 if test "$use_accel" != "no"; then

120 case $host_cpu in

121 i?86 | x86_64 | amd64)

122 AC_CHECK_HEADERS(cpuid.h)

123 if test "$host_cpu" = "x86_64" || test "$host_cpu" = "amd64"; then

124 hw_accel="x86-64"

125 else

126 hw_accel="x86"

127 fi

128 use_padlock=yes

129 ;;

130 *)

131 ;;

132 esac

133

134 fi

135

136 AC_ARG_ENABLE(padlock,

137 AS_HELP_STRING([--disable-padlock], [unconditionally disable padlock acceleration]),

138 use_padlock=$enableval)

139

140 if test "$use_padlock" != "no"; then

141 AC_DEFINE([ENABLE_PADLOCK], 1, [Enable padlock acceleration])

142 AC_SUBST([ENABLE_PADLOCK])

143 fi

144 AM_CONDITIONAL(ENABLE_PADLOCK, test "$use_padlock" = "yes")

145 AM_CONDITIONAL(ASM_X86_64, test x"$hw_accel" = x"x86-64")

146 AM_CONDITIONAL(ASM_X86_32, test x"$hw_accel" = x"x86")

147 AM_CONDITIONAL(ASM_X86, test x"$hw_accel" = x"x86" || test x"$hw_accel" = x"x86-64")

148 AM_CONDITIONAL(HAVE_GCC_GNU89_INLINE_OPTION, test "$gnu89_inline" = "yes"])

149 AM_CONDITIONAL(HAVE_GCC, test "$GCC" = "yes")

150

151 dnl check for getrandom()

152 enable_getrandom=no

153 AC_MSG_CHECKING([for getrandom])

154 AC_LINK_IFELSE([AC_LANG_PROGRAM([

155 #include <linux/random.h>],[

156 getrandom(0, 0, 0);

157 ])],

158 [AC_MSG_RESULT(yes)

159 AC_DEFINE([HAVE_LINUX_GETRANDOM], 1, [Enable the Linux getrandom function])

160 enable_getrandom=getrandom],

161 [AC_MSG_RESULT(no)])

162

163 AC_MSG_CHECKING([for getentropy])

164 AC_LINK_IFELSE([AC_LANG_PROGRAM([

165 #include <unistd.h>],[

166 getentropy(0, 0);

167 ])],

168 [AC_MSG_RESULT(yes)

169 AC_DEFINE([HAVE_GETENTROPY], 1, [Enable the OpenBSD getentropy function])

170 enable_getrandom=getentropy],

171 [AC_MSG_RESULT(no)])

172

173 dnl Try the hooks.m4

174 LIBGNUTLS_HOOKS

175 LIBGNUTLS_EXTRA_HOOKS

176

177 AC_ARG_ENABLE(doc,

178 AS_HELP_STRING([--disable-doc], [don't generate any documentation]),

179 enable_doc=$enableval, enable_doc=yes)

180 AM_CONDITIONAL(ENABLE_DOC, test "$enable_doc" != "no")

181

182 AC_ARG_ENABLE(tests,

183 AS_HELP_STRING([--disable-tests], [don't compile or run any tests]),

184 enable_tests=$enableval, enable_tests=yes)

185 AM_CONDITIONAL(ENABLE_TESTS, test "$enable_tests" != "no")

186

187 GTK_DOC_CHECK(1.1)

188 AM_GNU_GETTEXT([external])

189 AM_GNU_GETTEXT_VERSION([0.18])

190

191 AC_C_BIGENDIAN

192

193 dnl No fork on MinGW, disable some self-tests until we fix them.

194 dnl Check clock_gettime and pthread_mutex_lock in libc (avoid linking to other libs)

195 AC_CHECK_FUNCS([fork inet_ntop inet_pton getrusage getpwuid_r nanosleep daemon getpid clock_gettime iconv localtime vasprintf],,)

196 if test "$ac_cv_func_vasprintf" != "yes";then

197 AC_MSG_CHECKING([for va_copy])

198 AC_LINK_IFELSE([AC_LANG_PROGRAM([

199 #include <stdarg.h>

200 va_list a;],[

201 va_list b;

202 va_copy(b,a);

203 va_end(b);])],

204 [AC_DEFINE(HAVE_VA_COPY, 1, [Have va_copy()])

205 AC_MSG_RESULT(va_copy)],

206 [AC_LINK_IFELSE([AC_LANG_PROGRAM([

207 #include <stdarg.h>

208 va_list a;],[

209 va_list b;

210 __va_copy(b,a);

211 va_end(b);])],

212 [AC_DEFINE(HAVE___VA_COPY, 1, [Have __va_copy()])

213 AC_MSG_RESULT(__va_copy)],

214 [AC_MSG_RESULT(no)

215 AC_MSG_ERROR([Your system lacks vasprintf() and va_copy()])])

216 ])

217 fi

218

219 AM_CONDITIONAL(HAVE_FORK, test "$ac_cv_func_fork" != "no")

220

221 AC_CHECK_FUNCS([pthread_atfork __register_atfork],,)

222

223 AC_LIB_HAVE_LINKFLAGS(rt,, [#include <time.h>

224 #include <signal.h>

225 ], [timer_create (0,0,0);])

226

227 if test "$have_win" != "yes";then

228 AC_CHECK_FUNCS([pthread_mutex_lock],,)

229 if test "$ac_cv_func_pthread_mutex_lock" != "yes";then

230 AC_LIB_HAVE_LINKFLAGS(pthread,, [#include <pthread.h>], [pthread_mutex_lock (0);])

231 fi

232 fi

233

234 if test "$ac_cv_func_nanosleep" != "yes";then

235 AC_LIB_HAVE_LINKFLAGS(rt,, [#include <time.h>], [nanosleep (0, 0);])

236 gnutls_needs_librt=yes

237 fi

238

239 if test "$ac_cv_func_inet_pton" != "yes";then

240 AC_LIB_HAVE_LINKFLAGS(nsl,, [#include <arpa/inet.h>], [inet_pton(0,0,0);])

241 fi

242

243 if test "$ac_cv_func_clock_gettime" != "yes";then

244 AC_LIB_HAVE_LINKFLAGS(rt,, [#include <time.h>], [clock_gettime (0, 0);])

245 gnutls_needs_librt=yes

246 fi

247

248 ac_have_unicode=no

249 if test "$ac_cv_func_iconv" != "yes";then

250 AC_LIB_HAVE_LINKFLAGS(iconv,, [#include <iconv.h>], [iconv (0, 0, 0, 0, 0);])

251 if test "$HAVE_LIBICONV" = "yes";then

252 ac_have_unicode=yes

253 fi

254 else

255 ac_have_unicode=yes

256 fi

257

258 if test "$ac_have_unicode" != "yes";then

259 if test "$have_win" = "yes";then

260 ac_have_unicode=yes

261 fi

262 fi

263

264 dnl Note that g*l_INIT are run after we check for library capabilities,

265 dnl to prevent issues from caching lib dependencies. See discussion

266 dnl in https://bugs.gentoo.org/show_bug.cgi?id=494940 and

267 dnl http://gnu-autoconf.7623.n7.nabble.com/Correct-way-to-check-for-clock-gettime-td12276.html

268 gl_INIT

269 ggl_INIT

270

271 dnl GCC warnings to enable

272

273 AC_ARG_ENABLE([gcc-warnings],

274 [AS_HELP_STRING([--disable-gcc-warnings],

275 [turn off lots of GCC warnings (for developers)])],

276 [case $enableval in

277 yes|no) ;;

278 *) AC_MSG_ERROR([bad value $enableval for gcc-warnings option]) ;;

279 esac

280 gl_gcc_warnings=$enableval],

281 [gl_gcc_warnings=yes]

282 )

283

284 if test "$gl_gcc_warnings" = yes; then

285 gl_WARN_ADD([-Wframe-larger-than=1024], [WSTACK_CFLAGS])

286

287 nw="$nw -Wsystem-headers" # Don't let system headers trigger warnings

288 nw="$nw -Wc++-compat" # We don't care about C++ compilers

289 nw="$nw -Wundef" # Warns on '#if GNULIB_FOO' etc in gnulib

290 nw="$nw -Wtraditional" # Warns on #elif which we use often

291 nw="$nw -Wpadded" # Our structs are not padded

292 nw="$nw -Wtraditional-conversion" # Too many warnings for now

293 nw="$nw -Wswitch-default" # Too many warnings for now

294 nw="$nw -Wformat-y2k" # Too many warnings for now

295 nw="$nw -Woverlength-strings" # We use some in tests/

296 nw="$nw -Wvla" # There is no point to avoid C99 variable length arrays

297 nw="$nw -Wformat-nonliteral" # Incompatible with gettext _()

298 nw="$nw -Wstrict-overflow"

299 nw="$nw -Wmissing-noreturn"

300 nw="$nw -Winline" # Too compiler dependent

301 nw="$nw -Wsuggest-attribute=pure" # Is it worth using attributes?

302 nw="$nw -Wsuggest-attribute=const" # Is it worth using attributes?

303 nw="$nw -Wsuggest-attribute=noreturn" # Is it worth using attributes?

304 nw="$nw -Wstack-protector" # Some functions cannot be protected

305 nw="$nw -Wredundant-decls" # Some files cannot be compiled with that (gl_fd_to_handle)

306

307 gl_MANYWARN_ALL_GCC([ws])

308 gl_MANYWARN_COMPLEMENT(ws, [$ws], [$nw])

309 for w in $ws; do

310 gl_WARN_ADD([$w])

311 done

312

313 gl_WARN_ADD([-Wno-missing-field-initializers]) # We need this one

314 gl_WARN_ADD([-Wno-format-y2k]) # Too many warnings for now

315 gl_WARN_ADD([-Wno-unused-value]) # warnings for things we don't want to get

316 gl_WARN_ADD([-Wno-unused-result]) # warnings for things we don't want to get

317 gl_WARN_ADD([-Wno-unused-parameter]) # Too many warnings for now

318 gl_WARN_ADD([-Wno-stack-protector]) # Some functions cannot be protected

319 gl_WARN_ADD([-Wno-int-to-pointer-cast]) # Some files cannot be compiled with that (gl_fd_to_handle)

320 gl_WARN_ADD([-fdiagnostics-show-option])

321 fi

322

323 AC_SUBST([WERROR_CFLAGS])

324 AC_SUBST([WSTACK_CFLAGS])

325 AC_SUBST([WARN_CFLAGS])

326

327 dnl Programs for compilation or development

328 AC_PROG_LN_S

329 LT_INIT([disable-static,win32-dll,shared])

330

331

332

333 AC_ARG_ENABLE(self-checks,

334 AS_HELP_STRING([--enable-self-checks], [enable self checking functionality]),

335 enable_self_checks=$enableval, enable_self_checks=no)

336

337 AC_ARG_ENABLE(fips140-mode,

338 AS_HELP_STRING([--enable-fips140-mode], [enable FIPS140-2 mode (implies self checks)]),

339 enable_fips=$enableval, enable_fips=no)

340 AM_CONDITIONAL(ENABLE_FIPS140, test "$enable_fips" = "yes")

341 if [ test "$enable_fips" = "yes" ];then

342 AC_LIB_HAVE_LINKFLAGS(dl,, [#include <dlfcn.h>], [dladdr (0, 0);])

343 if test "x$HAVE_LIBDL" = "xyes";then

344 enable_self_checks=yes

345

346 AC_DEFINE([ENABLE_FIPS140], 1, [Enable FIPS140-2 mode])

347

348 AC_SUBST([FIPS140_LIBS], $LIBDL)

349 else

350 enable_fips=no

351 AC_MSG_WARN([[

352 ***

353 *** This system is not supported in FIPS140 mode.

354 *** libdl and dladdr() are required.

355 *** ]])

356 fi

357 fi

358

359 AC_ARG_WITH(idn, AS_HELP_STRING([--without-idn],

360 [disable support for libidn]),

361 try_libidn="$withval",

362 try_libidn=yes)

363

364 if test "$try_libidn" = yes;then

365 PKG_CHECK_MODULES(LIBIDN, libidn >= 0.5.6, [with_libidn=yes], [with_libidn=no])

366 if test "$with_libidn" != "no";then

367 AC_DEFINE([HAVE_LIBIDN], 1, [Build IDNA support])

368 if test "x$GNUTLS_REQUIRES_PRIVATE" = "x"; then

369 GNUTLS_REQUIRES_PRIVATE="Requires.private: libidn"

370 else

371 GNUTLS_REQUIRES_PRIVATE="${GNUTLS_REQUIRES_PRIVATE}, libidn"

372 fi

373 else

374 with_libidn=no

375 AC_MSG_WARN([[

376 ***

377 *** libidn was not found. IDNA support will be disabled.

378 *** ]])

379 fi

380 else

381 with_libidn=no

382 fi

383

384 AM_CONDITIONAL(HAVE_LIBIDN, test "$with_libidn" != "no")

385

386 AC_ARG_ENABLE(non-suiteb-curves,

387 AS_HELP_STRING([--disable-non-suiteb-curves], [disable curves not in SuiteB]),

388 enable_non_suiteb=$enableval, enable_non_suiteb=yes)

389 if [ test "$enable_non_suiteb" = "yes" ];then

390 AC_DEFINE([ENABLE_NON_SUITEB_CURVES], 1, [Enable all curves])

391 fi

392 AM_CONDITIONAL(ENABLE_NON_SUITEB_CURVES, test "$enable_non_suiteb" = "yes")

393

394 AM_CONDITIONAL(ENABLE_SELF_CHECKS, test "$enable_self_checks" = "yes")

395 if [ test "$enable_self_checks" = "yes" ];then

396 AC_DEFINE([ENABLE_SELF_CHECKS], 1, [Self checks are included in the library])

397 fi

398

399 AC_MSG_CHECKING([whether to build libdane])

400 AC_ARG_ENABLE(libdane,

401 AS_HELP_STRING([--disable-libdane],

402 [disable the built of libdane]),

403 enable_dane=$enableval, enable_dane=yes)

404 AC_MSG_RESULT($enable_dane)

405

406 if test "$enable_dane" != "no"; then

407 LIBS="$oldlibs -lunbound"

408 AC_MSG_CHECKING([for unbound library])

409 AC_LINK_IFELSE([AC_LANG_PROGRAM([

410 #include <unbound.h>],[

411 struct ub_ctx* ctx;

412 ctx = ub_ctx_create();])],

413 [AC_MSG_RESULT(yes)

414 AC_SUBST([UNBOUND_LIBS], [-lunbound])

415 AC_SUBST([UNBOUND_CFLAGS], [])

416 AC_DEFINE([HAVE_DANE], 1, [Enable the DANE library])

417 enable_dane=yes],

418 [AC_MSG_RESULT(no)

419 AC_MSG_WARN([[

420 ***

421 *** libunbound was not found. Libdane will not be built.

422 *** ]])

423 enable_dane=no])

424 LIBS="$oldlibs"

425 fi

426

427 AM_CONDITIONAL(ENABLE_DANE, test "$enable_dane" = "yes")

428

429 AC_ARG_WITH(unbound-root-key-file, AS_HELP_STRING([--with-unbound-root-key-file],

430 [specify the unbound root key file]),

431 unbound_root_key_file="$withval",

432 if test "$have_win" = yes; then

433 unbound_root_key_file="C:\\Program Files\\Unbound\\root.key"

434 else

435 if test -f /var/lib/unbound/root.key;then

436 unbound_root_key_file="/var/lib/unbound/root.key"

437 else

438 unbound_root_key_file="/etc/unbound/root.key"

439 fi

440 fi

441 )

442

443 AC_DEFINE_UNQUOTED([UNBOUND_ROOT_KEY_FILE],

444 ["$unbound_root_key_file"], [The DNSSEC root key file])

445

446 AC_ARG_WITH(system-priority-file, AS_HELP_STRING([--with-system-priority-file],

447 [specify the system priority file]),

448 system_priority_file="$withval",

449 system_priority_file="/etc/gnutls/default-priorities"

450 )

451

452 AC_DEFINE_UNQUOTED([SYSTEM_PRIORITY_FILE],

453 ["$system_priority_file"], [The system priority file])

454

455

456 dnl Check for p11-kit

457 P11_KIT_MINIMUM=0.20.7

458 AC_ARG_WITH(p11-kit,

459 AS_HELP_STRING([--without-p11-kit],

460 [Build without p11-kit and PKCS#11 support]))

461 if test "$with_p11_kit" != "no"; then

462 PKG_CHECK_MODULES(P11_KIT, [p11-kit-1 >= $P11_KIT_MINIMUM], [with_p11_kit=yes], [with_p11_kit=no])

463 if test "$with_p11_kit" != "no";then

464 AC_DEFINE([ENABLE_PKCS11], 1, [Build PKCS#11 support])

465 if test "x$GNUTLS_REQUIRES_PRIVATE" = "x"; then

466 GNUTLS_REQUIRES_PRIVATE="Requires.private: p11-kit-1"

467 else

468 GNUTLS_REQUIRES_PRIVATE="${GNUTLS_REQUIRES_PRIVATE}, p11-kit-1"

469 fi

470 else

471 with_p11_kit=no

472 AC_MSG_ERROR([[

473 ***

474 *** p11-kit >= $P11_KIT_MINIMUM was not found. To disable PKCS #11 support

475 *** use --without-p11-kit, otherwise you may get p11-kit from

476 *** http://p11-glue.freedesktop.org/p11-kit.html

477 *** ]])

478 fi

479 fi

480

481 AM_CONDITIONAL(ENABLE_PKCS11, test "$with_p11_kit" != "no")

482

483 AC_ARG_WITH(tpm,

484 AS_HELP_STRING([--without-tpm],

485 [Disable TPM (trousers) support.]),

486 [with_tpm=$withval], [with_tpm=yes])

487 if test "$with_tpm" != "no"; then

488 LIBS="$oldlibs -ltspi"

489 AC_MSG_CHECKING([for tss library])

490 AC_LINK_IFELSE([AC_LANG_PROGRAM([

491 #include <trousers/tss.h>

492 #include <trousers/trousers.h>],[

493 int err = Tspi_Context_Create((void *)0);

494 Trspi_Error_String(err);])],

495 [AC_MSG_RESULT(yes)

496 AC_SUBST([TSS_LIBS], [-ltspi])

497 AC_SUBST([TSS_CFLAGS], [])

498 AC_DEFINE([HAVE_TROUSERS], 1, [Enable TPM])

499 with_tpm=yes],

500 [AC_MSG_RESULT(no)

501 AC_MSG_WARN([[

502 ***

503 *** trousers was not found. TPM support will be disabled.

504 *** ]])

505 with_tpm=no])

506 LIBS="$oldlibs"

507 fi

508

509 AM_CONDITIONAL(ENABLE_TROUSERS, test "$with_tpm" != "no")

510

511 LIBOPTS_CHECK([src/libopts])

512 if test "$NEED_LIBOPTS_DIR" = "true";then

513 dnl replace libopts-generated files with distributed backups, if present

514 missing_baks=

515 for i in ${srcdir}/src/*-args.c.bak ${srcdir}/src/*-args.h.bak; do

516 nam=`echo $i|sed 's/.bak//g'`

517 if test -f $i;then

518 cp -f $i $nam

519 else

520 missing_baks=true

521 fi

522 done

523 if test -z "$missing_baks"; then

524 AC_SUBST([AUTOGEN], [/bin/true])

525 fi

526 enable_local_libopts=yes

527 else

528 enable_local_libopts=no

529 fi

530 AM_CONDITIONAL(NEED_LIBOPTS, test "$enable_local_libopts" = "yes")

531

532 AC_CHECK_TYPE(ssize_t,

533 [

534 DEFINE_SSIZE_T="#include <sys/types.h>"

535 AC_SUBST(DEFINE_SSIZE_T)

536 ], [

537 AC_DEFINE([NO_SSIZE_T], 1, [no ssize_t type was found])

538 DEFINE_SSIZE_T="typedef int ssize_t;"

539 AC_SUBST(DEFINE_SSIZE_T)

540 ], [

541 #include <sys/types.h>

542 ])

543

544 # For minitasn1.

545 AC_CHECK_SIZEOF(unsigned long int, 4)

546 AC_CHECK_SIZEOF(unsigned int, 4)

547

548 AC_ARG_WITH(zlib, AS_HELP_STRING([--without-zlib],

549 [disable zlib compression support]),

550 ac_zlib=$withval, ac_zlib=yes)

551 AC_MSG_CHECKING([whether to include zlib compression support])

552 if test x$ac_zlib != xno; then

553 AC_MSG_RESULT(yes)

554 AC_LIB_HAVE_LINKFLAGS(z,, [#include <zlib.h>], [compress (0, 0, 0, 0);])

555 if test x$ac_cv_libz != xyes; then

556 AC_MSG_WARN(

557 ***

558 *** ZLIB was not found. You will not be able to use ZLIB compression.)

559 fi

560 else

561 AC_MSG_RESULT(no)

562 fi

563

564 PKG_CHECK_EXISTS(zlib, ZLIB_HAS_PKGCONFIG=y, ZLIB_HAS_PKGCONFIG=n)

565

566 if test x$ac_zlib != xno; then

567 if test "$ZLIB_HAS_PKGCONFIG" = "y" ; then

568 if test "x$GNUTLS_REQUIRES_PRIVATE" = x; then

569 GNUTLS_REQUIRES_PRIVATE="Requires.private: zlib"

570 else

571 GNUTLS_REQUIRES_PRIVATE="$GNUTLS_REQUIRES_PRIVATE, zlib"

572 fi

573 fi

574 fi

575 AC_SUBST(GNUTLS_REQUIRES_PRIVATE)

576

577

578

579 AC_ARG_WITH([default-trust-store-pkcs11],

580 [AS_HELP_STRING([--with-default-trust-store-pkcs11=URI],

581 [use the given pkcs11 uri as default trust store])])

582

583 if test "x$with_default_trust_store_pkcs11" != x; then

584 if test "x$with_p11_kit" = xno; then

585 AC_MSG_ERROR([cannot use pkcs11 store without p11-kit])

586 fi

587 AC_DEFINE_UNQUOTED([DEFAULT_TRUST_STORE_PKCS11],

588 ["$with_default_trust_store_pkcs11"], [use the given pkcs11 uri as default trust store])

589 fi

590

591 AC_ARG_WITH([default-trust-store-dir],

592 [AS_HELP_STRING([--with-default-trust-store-dir=DIR],

593 [use the given directory as default trust store])])

594

595 if test "x$with_default_trust_store_dir" != x; then

596 AC_DEFINE_UNQUOTED([DEFAULT_TRUST_STORE_DIR],

597 ["$with_default_trust_store_dir"], [use the given directory as default trust store])

598 fi

599

600 dnl auto detect http://lists.gnu.org/archive/html/help-gnutls/2012-05/msg00004.html

601 AC_ARG_WITH([default-trust-store-file],

602 [AS_HELP_STRING([--with-default-trust-store-file=FILE],

603 [use the given file default trust store])], with_default_trust_store_file="$withval",

604 [if test "$build" = "$host" && test x$with_default_trust_store_pkcs11 = x && test x$with_default_trust_store_dir = x;then

605 for i in \

606 /etc/ssl/ca-bundle.pem \

607 /etc/ssl/certs/ca-certificates.crt \

608 /etc/pki/tls/cert.pem \

609 /usr/local/share/certs/ca-root-nss.crt \

610 /etc/ssl/cert.pem

611 do

612 if test -e "$i"; then

613 with_default_trust_store_file="$i"

614 break

615 fi

616 done

617 fi]

618 )

619

620 if test "$with_default_trust_store_file" = "no";then

621 with_default_trust_store_file=""

622 fi

623

624 AC_ARG_WITH([default-crl-file],

625 [AS_HELP_STRING([--with-default-crl-file=FILE],

626 [use the given CRL file as default])])

627

628 AC_ARG_WITH([default-blacklist-file],

629 [AS_HELP_STRING([--with-default-blacklist-file=FILE],

630 [use the given certificate blacklist file as default])])

631

632 if test "x$with_default_trust_store_file" != x; then

633 AC_DEFINE_UNQUOTED([DEFAULT_TRUST_STORE_FILE],

634 ["$with_default_trust_store_file"], [use the given file default trust store])

635 fi

636

637 if test "x$with_default_crl_file" != x; then

638 AC_DEFINE_UNQUOTED([DEFAULT_CRL_FILE],

639 ["$with_default_crl_file"], [use the given CRL file])

640 fi

641

642 if test "x$with_default_blacklist_file" != x; then

643 AC_DEFINE_UNQUOTED([DEFAULT_BLACKLIST_FILE],

644 ["$with_default_blacklist_file"], [use the given certificate blacklist file])

645 fi

646

647 dnl Guile bindings.

648 opt_guile_bindings=yes

649 AC_MSG_CHECKING([whether building Guile bindings])

650 AC_ARG_ENABLE(guile,

651 AS_HELP_STRING([--enable-guile], [build GNU Guile bindings]),

652 opt_guile_bindings=$enableval)

653 AC_MSG_RESULT($opt_guile_bindings)

654

655 AC_ARG_WITH([guile-site-dir],

656 [AS_HELP_STRING([--with-guile-site-dir],

657 [use the given directory as the Guile site (use with care)])])

658

659 if test "$opt_guile_bindings" = "yes"; then

660 AC_MSG_RESULT([***

661 *** Detecting GNU Guile...

662 ])

663

664 AC_PATH_PROG([guile_snarf], [guile-snarf])

665 if test "x$guile_snarf" = "x"; then

666 AC_MSG_WARN([`guile-snarf' from Guile 1.8 not found. Guile bindings not built.])

667 opt_guile_bindings=no

668 else

669 GUILE_PROGS

670 GUILE_FLAGS

671

672 save_CFLAGS="$CFLAGS"

673 save_LIBS="$LIBS"

674 CFLAGS="$CFLAGS $GUILE_CFLAGS"

675 LIBS="$LIBS $GUILE_LDFLAGS"

676 AC_MSG_CHECKING([whether GNU Guile is recent enough])

677 AC_LINK_IFELSE([AC_LANG_PROGRAM([], [scm_from_locale_string ("")])],

678 [], [opt_guile_bindings=no])

679 CFLAGS="$save_CFLAGS"

680 LIBS="$save_LIBS"

681

682 if test "$opt_guile_bindings" = "yes"; then

683 AC_MSG_RESULT([yes])

684 case "x$with_guile_site_dir" in

685 xno)

686 # Use the default $(GUILE_SITE).

687 GUILE_SITE_DIR

688 ;;

689 x|xyes)

690 # Automatically derive $(GUILE_SITE) from $(pkgdatadir). This

691 # hack is used to allow `distcheck' to work (see

692 # `DISTCHECK_CONFIGURE_FLAGS' in the top-level `Makefile.am').

693 GUILE_SITE="\$(datadir)/guile/site"

694 AC_SUBST(GUILE_SITE)

695 ;;

696 *)

697 # Use the user-specified directory as $(GUILE_SITE).

698 GUILE_SITE="$with_guile_site_dir"

699 AC_SUBST(GUILE_SITE)

700 ;;

701 esac

702 AC_MSG_CHECKING([whether gcc supports -fgnu89-inline])

703 _gcc_cflags_save="$CFLAGS"

704 CFLAGS="${CFLAGS} -fgnu89-inline"

705 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([])],

706 gnu89_inline=yes, gnu89_inline=no)

707 AC_MSG_RESULT($gnu89_inline)

708 CFLAGS="$_gcc_cflags_save"

709

710 # Optional Guile functions.

711 save_CFLAGS="$CFLAGS"

712 save_LIBS="$LIBS"

713 CFLAGS="$CFLAGS $GUILE_CFLAGS"

714 LIBS="$LIBS $GUILE_LDFLAGS"

715 AC_CHECK_FUNCS([scm_gc_malloc_pointerless])

716 CFLAGS="$save_CFLAGS"

717 LIBS="$save_LIBS"

718

719 # The place where guile-gnutls.la will go.

720 AC_MSG_CHECKING([the Guile effective version])

721 guile_effective_version="`$GUILE -c '(display (effective-version))'`"

722 AC_MSG_RESULT([$guile_effective_version])

723 guileextensiondir="$libdir/guile/$guile_effective_version"

724 AC_SUBST([guileextensiondir])

725 else

726 AC_MSG_RESULT([no])

727 AC_MSG_WARN([A sufficiently recent GNU Guile not found. Guile bindings not built.])

728 opt_guile_bindings=no

729 fi

730 fi

731 fi

732 AM_CONDITIONAL(HAVE_GUILE, test "$opt_guile_bindings" = "yes")

733

734 LIBGNUTLS_LIBS="-L${libdir} -lgnutls $LIBS"

735 LIBGNUTLS_CFLAGS="-I${includedir}"

736 AC_SUBST(LIBGNUTLS_LIBS)

737 AC_SUBST(LIBGNUTLS_CFLAGS)

738

739 AM_CONDITIONAL(NEEDS_LIBRT, test "$gnutls_needs_librt" = "yes")

740

741 AC_DEFINE([GNUTLS_COMPAT_H], 1, [Make sure we don't use old features in code.])

742 AC_DEFINE([GNUTLS_INTERNAL_BUILD], 1, [We allow temporarily usage of deprecated functions - until they are removed.])

743

744 AC_DEFINE([fread_file], [_gnutls_fread_file], [static lib rename])

745 AC_DEFINE([read_file], [_gnutls_read_file], [static lib rename])

746 AC_DEFINE([read_binary_file], [_gnutls_read_binary_file], [static lib rename])

747

748 dnl Crywrap dependencies

749 AC_MSG_RESULT([***

750 *** Checking dependencies for crywrap...

751 ])

752

753 crywrap=no

754

755 if test "$have_win" != "yes"; then

756

757 AC_CHECK_HEADERS([arpa/inet.h netinet/in.h sys/select.h sys/types.h sys/wait.h])

758

759 dnl **********************

760 dnl * Typedefs & co

761 dnl **********************

762 AC_CACHE_CHECK([return type of signal handlers],[ac_cv_type_signal],[AC_COMPILE_IFELSE(

763 [AC_LANG_PROGRAM([#include <sys/types.h>

764 #include <signal.h>

765 ],

766 [return *(signal (0, 0)) (0) == 1;])],

767 [ac_cv_type_signal=int],

768 [ac_cv_type_signal=void])])

769 AC_DEFINE_UNQUOTED([RETSIGTYPE],[$ac_cv_type_signal],[Define as the return type of signal handlers

770 (`int' or `void').])

771

772 AC_FUNC_SELECT_ARGTYPES

773 AC_CHECK_FUNCS([alarm atexit dup2 epoll_create kqueue memchr memset munmap \

774 putenv regcomp scandir select socket strcasecmp strchr \

775 strdup strerror strncasecmp strrchr strstr strtoul uname])

776

777 AC_ARG_ENABLE(crywrap,

778 AS_HELP_STRING([--disable-crywrap], [unconditionally disable the crywrap TLS proxy service]))

779

780

781 if test "x$enable_crywrap" != "xno" ; then

782 AC_CHECK_FUNCS([argp_usage],[ac_argp=yes],[ac_argp=no])

783 fi

784

785 if test "$ac_cv_func_daemon" != "no" && test "$ac_argp" != "no" && test "$with_libidn" != "no";then

786 crywrap=yes

787 fi

788

789 fi

790

791 AM_CONDITIONAL(ENABLE_CRYWRAP, test "x$crywrap" != "xno")

792

793 dnl end of crywrap requirements

794

795 dnl Some variables needed in makefiles

796 YEAR=`date +%Y`

797 AC_SUBST([YEAR], $YEAR)

798

799 AC_CONFIG_FILES([guile/pre-inst-guile], [chmod +x guile/pre-inst-guile])

800 AC_CONFIG_FILES([

801 Makefile

802 doc/Makefile

803 doc/credentials/Makefile

804 doc/credentials/openpgp/Makefile

805 doc/credentials/srp/Makefile

806 doc/credentials/x509/Makefile

807 doc/cyclo/Makefile

808 doc/doxygen/Doxyfile

809 doc/examples/Makefile

810 doc/latex/Makefile

811 doc/manpages/Makefile

812 doc/reference/Makefile

813 doc/reference/version.xml

814 doc/scripts/Makefile

815 extra/Makefile

816 extra/includes/Makefile

817 libdane/Makefile

818 libdane/includes/Makefile

819 libdane/gnutls-dane.pc

820 gl/Makefile

821 gl/tests/Makefile

822 guile/Makefile

823 guile/modules/Makefile

824 guile/src/Makefile

825 guile/tests/Makefile

826 lib/Makefile

827 lib/accelerated/Makefile

828 lib/accelerated/x86/Makefile

829 lib/algorithms/Makefile

830 lib/auth/Makefile

831 lib/ext/Makefile

832 lib/extras/Makefile

833 lib/gnutls.pc

834 lib/includes/Makefile

835 lib/includes/gnutls/gnutls.h

836 lib/minitasn1/Makefile

837 lib/nettle/Makefile

838 lib/opencdk/Makefile

839 lib/openpgp/Makefile

840 lib/x509/Makefile

841 po/Makefile.in

842 src/Makefile

843 src/crywrap/Makefile

844 src/gl/Makefile

845 tests/Makefile

846 tests/cert-tests/Makefile

847 tests/dsa/Makefile

848 tests/dtls/Makefile

849 tests/srp/Makefile

850 tests/ecdsa/Makefile

851 tests/key-tests/Makefile

852 tests/openpgp-certs/Makefile

853 tests/pkcs1-padding/Makefile

854 tests/pkcs12-decode/Makefile

855 tests/pkcs8-decode/Makefile

856 tests/rsa-md5-collision/Makefile

857 tests/safe-renegotiation/Makefile

858 tests/scripts/Makefile

859 tests/sha2/Makefile

860 tests/slow/Makefile

861 tests/suite/Makefile

862 tests/userid/Makefile

863 ])

864

865 AC_OUTPUT

866

867 dnl Warning flags: errors: ${WERROR_CFLAGS} warnings: ${WARN_CFLAGS}

868 dnl Valgrind: $opt_valgrind_tests ${VALGRIND}

869 AC_MSG_NOTICE([summary of build options:

870

871 version: ${VERSION} shared $LT_CURRENT:$LT_REVISION:$LT_AGE

872 Host/Target system: ${host}

873 Build system: ${build}

874 Install prefix: ${prefix}

875 Compiler: ${CC}

876 CFlags: ${CFLAGS}

877 Library types: Shared=${enable_shared}, Static=${enable_static}

878 Local libopts: ${enable_local_libopts}

879 Local libtasn1: ${included_libtasn1}

880 Use nettle-mini: ${mini_nettle}

881 ])

882

883 AC_MSG_NOTICE([External hardware support:

884

885 /dev/crypto: $enable_cryptodev

886 Hardware accel: $hw_accel

887 Padlock accel: $use_padlock

888 getrandom variant: $enable_getrandom

889 PKCS#11 support: $with_p11_kit

890 TPM support: $with_tpm

891 ])

892

893 AC_MSG_NOTICE([Optional features:

894 (note that included applications might not compile properly

895 if features are disabled)

896

897 DTLS-SRTP support: $ac_enable_srtp

898 ALPN support: $ac_enable_alpn

899 OCSP support: $ac_enable_ocsp

900 Ses. ticket support: $ac_enable_session_tickets

901 OpenPGP support: $ac_enable_openpgp

902 SRP support: $ac_enable_srp

903 PSK support: $ac_enable_psk

904 DHE support: $ac_enable_dhe

905 ECDHE support: $ac_enable_ecdhe

906 Anon auth support: $ac_enable_anon

907 Heartbeat support: $ac_enable_heartbeat

908 IDNA support: $with_libidn

909 Unicode support: $ac_have_unicode

910 Self checks: $enable_self_checks

911 Non-SuiteB curves: $enable_non_suiteb

912 FIPS140 mode: $enable_fips

913 ])

914

915 AC_MSG_NOTICE([Optional applications:

916

917 crywrap app: $crywrap

918 ])

919

920 AC_MSG_NOTICE([Optional libraries:

921

922 Guile wrappers: $opt_guile_bindings

923 C++ library: $use_cxx

924 DANE library: $enable_dane

925 OpenSSL compat: $enable_openssl

926 ])

927

928 AC_MSG_NOTICE([System files:

929

930 Trust store pkcs11: $with_default_trust_store_pkcs11

931 Trust store dir: $with_default_trust_store_dir

932 Trust store file: $with_default_trust_store_file

933 Blacklist file: $with_default_blacklist_file

934 CRL file: $with_default_crl_file

935 Priority file: $system_priority_file

936 DNSSEC root key file: $unbound_root_key_file

937 ])

938

939 if test ! -f "$unbound_root_key_file"; then

940 AC_MSG_WARN([[

941 ***

942 *** The DNSSEC root key file in $unbound_root_key_file was not found.

943 *** This file is needed for the verification of DNSSEC responses.

944 *** Use the command: unbound-anchor -a "$unbound_root_key_file"

945 *** to generate or update it.

946 *** ]])

947 fi