www.gitorious.org Git - gnutls:gnutls.git/blob

1 dnl Process this file with autoconf to produce a configure script.

3 #

4 # Author: Nikos Mavrogiannopoulos, Simon Josefsson

5 #

6 # This file is part of GnuTLS.

7 #

8 # This program is free software; you can redistribute it and/or modify

9 # it under the terms of the GNU General Public License as published by

10 # the Free Software Foundation; either version 3 of the License, or

11 # (at your option) any later version.

12 #

13 # This program is distributed in the hope that it will be useful, but

14 # WITHOUT ANY WARRANTY; without even the implied warranty of

15 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU

16 # General Public License for more details.

17 #

18 # You should have received a copy of the GNU General Public License

19 # along with this program; if not, write to the Free Software

20 # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301

21 # USA

23 AC_PREREQ(2.61)

24 AC_INIT([GnuTLS], [3.4.0], [bugs@gnutls.org])

25 AC_CONFIG_AUX_DIR([build-aux])

26 AC_CONFIG_MACRO_DIR([m4])

27 AC_CANONICAL_HOST

29 AM_INIT_AUTOMAKE([1.12.2 subdir-objects no-dist-gzip dist-xz dist-lzip -Wall -Wno-override])

30 m4_ifdef([AM_SILENT_RULES], [AM_SILENT_RULES([yes])])

31 AC_CONFIG_HEADERS([config.h])

33 AC_MSG_RESULT([***

34 *** Checking for compilation programs...

35 ])

37 dnl Checks for programs.

38 AC_PROG_CC

39 gl_EARLY

40 ggl_EARLY

41 AM_PROG_AS

42 AM_PROG_AR

43 AC_PROG_CXX

44 AM_PROG_CC_C_O

45 AC_PROG_YACC

46 AC_PROG_SED

47 AC_CHECK_PROG([AUTOGEN], [autogen], [autogen], [/bin/true])

49 if test x"$AUTOGEN" = "x/bin/true"; then

50 AC_MSG_WARN([[

51 ***

52 *** autogen not found. Will not link against libopts.

53 *** ]])

54 enable_local_libopts=yes

55 fi

57 # For includes/gnutls/gnutls.h.in.

58 AC_SUBST(MAJOR_VERSION, `echo $PACKAGE_VERSION | sed 's/$.*$\..*\..*/\1/g'`)

59 AC_SUBST(MINOR_VERSION, `echo $PACKAGE_VERSION | sed 's/.*\.$.*$\..*/\1/g'`)

60 AC_SUBST(PATCH_VERSION, [[`echo $PACKAGE_VERSION | sed 's/.*\..*\.$[0-9]*$.*/\1/g'`]])

61 AC_SUBST(NUMBER_VERSION, `printf "0x%02x%02x%02x" $MAJOR_VERSION $MINOR_VERSION $PATCH_VERSION`)

63 touch suppressions.valgrind

64 dnl C and C++ capabilities

65 AC_C_INLINE

66 AC_HEADER_STDC

68 # For the C++ code

69 AC_ARG_ENABLE(cxx,

70 AS_HELP_STRING([--disable-cxx], [unconditionally disable the C++ library]),

71 use_cxx=$enableval, use_cxx=yes)

72 if test "$use_cxx" != "no"; then

73 AC_LANG_PUSH(C++)

74 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([],[])], use_cxx=yes, use_cxx=no)

75 AC_LANG_POP(C++)

76 fi

77 AM_CONDITIONAL(ENABLE_CXX, test "$use_cxx" != "no")

78 AM_CONDITIONAL(WANT_TEST_SUITE, [test -f tests/suite/mini-eagain2.c])

80 dnl Detect windows build

81 case "$host" in

82 *mingw32* | *mingw64*)

83 have_win=yes

84 ;;

85 *darwin*)

86 have_macosx=yes

87 ;;

88 *)

89 have_elf=yes

90 ;;

91 esac

93 AM_CONDITIONAL(WINDOWS, test "$have_win" = yes)

94 AM_CONDITIONAL(MACOSX, test "$have_macosx" = yes)

95 AM_CONDITIONAL(ELF, test "$have_elf" = yes)

97 dnl Hardware Acceleration

98 AC_ARG_ENABLE(hardware-acceleration,

99 AS_HELP_STRING([--disable-hardware-acceleration], [unconditionally disable hardware acceleration]),

100 use_accel=$enableval, use_accel=yes)

101 hw_accel=none

102

103

104 if test "$use_accel" != "no"; then

105 case $host_cpu in

106 i?86 | x86_64 | amd64)

107 AC_CHECK_HEADERS(cpuid.h)

108 if test "$host_cpu" = "x86_64" || test "$host_cpu" = "amd64"; then

109 hw_accel="x86-64"

110 else

111 hw_accel="x86"

112 fi

113 ;;

114 *)

115 ;;

116 esac

117

118 fi

119

120 AM_CONDITIONAL(ASM_X86_64, test x"$hw_accel" = x"x86-64")

121 AM_CONDITIONAL(ASM_X86_32, test x"$hw_accel" = x"x86")

122 AM_CONDITIONAL(ASM_X86, test x"$hw_accel" = x"x86" || test x"$hw_accel" = x"x86-64")

123 AM_CONDITIONAL(HAVE_GCC_GNU89_INLINE_OPTION, test "$gnu89_inline" = "yes"])

124 AM_CONDITIONAL(HAVE_GCC, test "$GCC" = "yes")

125

126

127 dnl Try the hooks.m4

128 LIBGNUTLS_HOOKS

129 LIBGNUTLS_EXTRA_HOOKS

130

131 AC_ARG_ENABLE(doc,

132 AS_HELP_STRING([--disable-doc], [don't generate any documentation]),

133 enable_doc=$enableval, enable_doc=yes)

134 AM_CONDITIONAL(ENABLE_DOC, test "$enable_doc" != "no")

135

136 AC_ARG_ENABLE(tests,

137 AS_HELP_STRING([--disable-tests], [don't compile or run any tests]),

138 enable_tests=$enableval, enable_tests=yes)

139 AM_CONDITIONAL(ENABLE_TESTS, test "$enable_tests" != "no")

140

141 GTK_DOC_CHECK(1.1)

142 AM_GNU_GETTEXT([external])

143 AM_GNU_GETTEXT_VERSION([0.18])

144

145 AC_C_BIGENDIAN

146

147 dnl No fork on MinGW, disable some self-tests until we fix them.

148 dnl Check clock_gettime and pthread_mutex_lock in libc (avoid linking to other libs)

149 AC_CHECK_FUNCS([fork inet_ntop inet_pton getrusage getpwuid_r nanosleep daemon getpid clock_gettime iconv localtime vasprintf],,)

150 AM_CONDITIONAL(HAVE_FORK, test "$ac_cv_func_fork" != "no")

151

152 AC_CHECK_FUNCS([pthread_atfork __register_atfork],,)

153

154 AC_LIB_HAVE_LINKFLAGS(rt,, [#include <time.h>

155 #include <signal.h>

156 ], [timer_create (0,0,0);])

157

158 if test "$have_win" != "yes";then

159 AC_CHECK_FUNCS([pthread_mutex_lock],,)

160 if test "$ac_cv_func_pthread_mutex_lock" != "yes";then

161 AC_LIB_HAVE_LINKFLAGS(pthread,, [#include <pthread.h>], [pthread_mutex_lock (0);])

162 fi

163 fi

164

165 if test "$ac_cv_func_nanosleep" != "yes";then

166 AC_LIB_HAVE_LINKFLAGS(rt,, [#include <time.h>], [nanosleep (0, 0);])

167 gnutls_needs_librt=yes

168 fi

169

170 if test "$ac_cv_func_clock_gettime" != "yes";then

171 AC_LIB_HAVE_LINKFLAGS(rt,, [#include <time.h>], [clock_gettime (0, 0);])

172 gnutls_needs_librt=yes

173 fi

174

175 ac_have_unicode=no

176 if test "$ac_cv_func_iconv" != "yes";then

177 AC_LIB_HAVE_LINKFLAGS(iconv,, [#include <iconv.h>], [iconv (0, 0, 0, 0, 0);])

178 if test "$HAVE_LIBICONV" = "yes";then

179 ac_have_unicode=yes

180 fi

181 else

182 ac_have_unicode=yes

183 fi

184

185 if test "$ac_have_unicode" != "yes";then

186 if test "$have_win" = "yes";then

187 ac_have_unicode=yes

188 fi

189 fi

190

191 dnl Note that g*l_INIT are run after we check for library capabilities,

192 dnl to prevent issues from caching lib dependencies. See discussion

193 dnl in https://bugs.gentoo.org/show_bug.cgi?id=494940 and

194 dnl http://gnu-autoconf.7623.n7.nabble.com/Correct-way-to-check-for-clock-gettime-td12276.html

195 gl_INIT

196 ggl_INIT

197

198 dnl GCC warnings to enable

199

200 AC_ARG_ENABLE([gcc-warnings],

201 [AS_HELP_STRING([--enable-gcc-warnings],

202 [turn on lots of GCC warnings (for developers)])],

203 [case $enableval in

204 yes|no) ;;

205 *) AC_MSG_ERROR([bad value $enableval for gcc-warnings option]) ;;

206 esac

207 gl_gcc_warnings=$enableval],

208 [gl_gcc_warnings=no]

209 )

210

211 if test "$gl_gcc_warnings" = yes; then

212 gl_WARN_ADD([-Wframe-larger-than=1024], [WSTACK_CFLAGS])

213

214 nw="$nw -Wsystem-headers" # Don't let system headers trigger warnings

215 nw="$nw -Wc++-compat" # We don't care about C++ compilers

216 nw="$nw -Wundef" # Warns on '#if GNULIB_FOO' etc in gnulib

217 nw="$nw -Wtraditional" # Warns on #elif which we use often

218 nw="$nw -Wlogical-op" # Too many false positives

219 nw="$nw -Wold-style-definition" #

220 nw="$nw -Wpadded" # Our structs are not padded

221 nw="$nw -Wunreachable-code" # Too many false positives

222 nw="$nw -Wtraditional-conversion" # Too many warnings for now

223 nw="$nw -Wcast-qual" # Too many warnings for now

224 nw="$nw -Waggregate-return" # Too many warnings for now

225 nw="$nw -Wshadow" # Too many warnings for now

226 nw="$nw -Wswitch-default" # Too many warnings for now

227 nw="$nw -Wswitch-enum" # Too many warnings for now

228 nw="$nw -Wconversion" # Too many warnings for now

229 nw="$nw -Wsign-conversion" # Too many warnings for now

230 nw="$nw -Wformat-y2k" # Too many warnings for now

231 nw="$nw -Woverlength-strings" # We use some in tests/

232 nw="$nw -Wvla" # There is no point to avoid C99 variable length arrays

233 nw="$nw -Wformat-nonliteral" # Incompatible with gettext _()

234 nw="$nw -Wunsafe-loop-optimizations"

235 nw="$nw -Wstrict-overflow"

236 nw="$nw -Wmissing-noreturn"

237 nw="$nw -Winline" # Too compiler dependent

238 nw="$nw -Wsuggest-attribute=pure" # Is it worth using attributes?

239 nw="$nw -Wsuggest-attribute=const" # Is it worth using attributes?

240 nw="$nw -Wsuggest-attribute=noreturn" # Is it worth using attributes?

241 nw="$nw -Wstack-protector" # Some functions cannot be protected

242 nw="$nw -Wredundant-decls" # Some files cannot be compiled with that (gl_fd_to_handle)

243

244 gl_MANYWARN_ALL_GCC([ws])

245 gl_MANYWARN_COMPLEMENT(ws, [$ws], [$nw])

246 for w in $ws; do

247 gl_WARN_ADD([$w])

248 done

249

250 gl_WARN_ADD([-Wno-missing-field-initializers]) # We need this one

251 gl_WARN_ADD([-Wno-format-y2k]) # Too many warnings for now

252 gl_WARN_ADD([-Wno-unused-value]) # warnings for things we don't want to get

253 gl_WARN_ADD([-Wno-unused-result]) # warnings for things we don't want to get

254 gl_WARN_ADD([-Wno-unused-parameter]) # Too many warnings for now

255 gl_WARN_ADD([-Wno-stack-protector]) # Some functions cannot be protected

256 gl_WARN_ADD([-Wno-int-to-pointer-cast]) # Some files cannot be compiled with that (gl_fd_to_handle)

257 gl_WARN_ADD([-fdiagnostics-show-option])

258 fi

259

260 AC_SUBST([WERROR_CFLAGS])

261 AC_SUBST([WSTACK_CFLAGS])

262 AC_SUBST([WARN_CFLAGS])

263

264 dnl Programs for compilation or development

265 AC_PROG_LN_S

266 LT_INIT([disable-static,win32-dll,shared])

267

268

269

270 AC_ARG_ENABLE(self-checks,

271 AS_HELP_STRING([--enable-self-checks], [enable self checking functionality]),

272 enable_self_checks=$enableval, enable_self_checks=no)

273

274 AC_ARG_ENABLE(fips140-mode,

275 AS_HELP_STRING([--enable-fips140-mode], [enable FIPS140-2 mode (implies self checks)]),

276 enable_fips=$enableval, enable_fips=no)

277 AM_CONDITIONAL(ENABLE_FIPS140, test "$enable_fips" = "yes")

278 if [ test "$enable_fips" = "yes" ];then

279 AC_LIB_HAVE_LINKFLAGS(dl,, [#include <dlfcn.h>], [dladdr (0, 0);])

280 if test "x$HAVE_LIBDL" = "xyes";then

281 enable_self_checks=yes

282

283 AC_DEFINE([ENABLE_FIPS140], 1, [Enable FIPS140-2 mode])

284

285 AC_SUBST([FIPS140_LIBS], $LIBDL)

286 else

287 enable_fips=no

288 AC_MSG_WARN([[

289 ***

290 *** This system is not supported in FIPS140 mode.

291 *** libdl and dladdr() are required.

292 *** ]])

293 fi

294 fi

295

296 PKG_CHECK_MODULES(LIBIDN, libidn >= 0.0.0, [with_libidn=yes], [with_libidn=no])

297 if test "$with_libidn" != "no";then

298 AC_DEFINE([HAVE_LIBIDN], 1, [Build IDNA support])

299 if test "x$GNUTLS_REQUIRES_PRIVATE" = "x"; then

300 GNUTLS_REQUIRES_PRIVATE="Requires.private: libidn"

301 else

302 GNUTLS_REQUIRES_PRIVATE="${GNUTLS_REQUIRES_PRIVATE}, libidn"

303 fi

304 else

305 with_libidn=no

306 AC_MSG_WARN([[

307 ***

308 *** libidn was not found. IDNA support will be disabled.

309 *** ]])

310 fi

311

312 AM_CONDITIONAL(HAVE_LIBIDN, test "$with_libidn" != "no")

313

314 AC_ARG_ENABLE(non-suiteb-curves,

315 AS_HELP_STRING([--disable-non-suiteb-curves], [disable curves not in SuiteB]),

316 enable_non_suiteb=$enableval, enable_non_suiteb=yes)

317 if [ test "$enable_non_suiteb" = "yes" ];then

318 AC_DEFINE([ENABLE_NON_SUITEB_CURVES], 1, [Enable all curves])

319 fi

320

321 AM_CONDITIONAL(ENABLE_SELF_CHECKS, test "$enable_self_checks" = "yes")

322 if [ test "$enable_self_checks" = "yes" ];then

323 AC_DEFINE([ENABLE_SELF_CHECKS], 1, [Self checks are included in the library])

324 fi

325

326 AC_MSG_CHECKING([whether to build libdane])

327 AC_ARG_ENABLE(libdane,

328 AS_HELP_STRING([--disable-libdane],

329 [disable the built of libdane]),

330 enable_dane=$enableval, enable_dane=yes)

331 AC_MSG_RESULT($enable_dane)

332

333 if test "$enable_dane" != "no"; then

334 LIBS="$oldlibs -lunbound"

335 AC_MSG_CHECKING([for unbound library])

336 AC_LINK_IFELSE([AC_LANG_PROGRAM([

337 #include <unbound.h>],[

338 struct ub_ctx* ctx;

339 ctx = ub_ctx_create();])],

340 [AC_MSG_RESULT(yes)

341 AC_SUBST([UNBOUND_LIBS], [-lunbound])

342 AC_SUBST([UNBOUND_CFLAGS], [])

343 AC_DEFINE([HAVE_DANE], 1, [Enable the DANE library])

344 enable_dane=yes],

345 [AC_MSG_RESULT(no)

346 AC_MSG_WARN([[

347 ***

348 *** libunbound was not found. Libdane will not be built.

349 *** ]])

350 enable_dane=no])

351 LIBS="$oldlibs"

352 fi

353

354 AM_CONDITIONAL(ENABLE_DANE, test "$enable_dane" = "yes")

355

356 AC_ARG_WITH(unbound-root-key-file, AS_HELP_STRING([--with-unbound-root-key-file],

357 [specify the unbound root key file]),

358 unbound_root_key_file="$withval",

359 if test "$have_win" = yes; then

360 unbound_root_key_file="C:\\Program Files\\Unbound\\root.key"

361 else

362 if test -f /var/lib/unbound/root.key;then

363 unbound_root_key_file="/var/lib/unbound/root.key"

364 else

365 unbound_root_key_file="/etc/unbound/root.key"

366 fi

367 fi

368 )

369

370 AC_DEFINE_UNQUOTED([UNBOUND_ROOT_KEY_FILE],

371 ["$unbound_root_key_file"], [The DNSSEC root key file])

372

373 AC_ARG_WITH(system-priority-file, AS_HELP_STRING([--with-system-priority-file],

374 [specify the system priority file]),

375 system_priority_file="$withval",

376 system_priority_file="/etc/gnutls/default-priorities"

377 )

378

379 AC_DEFINE_UNQUOTED([SYSTEM_PRIORITY_FILE],

380 ["$system_priority_file"], [The system priority file])

381

382 dnl Check for p11-kit

383 P11_KIT_MINIMUM=0.20.0

384 AC_ARG_WITH(p11-kit,

385 AS_HELP_STRING([--without-p11-kit],

386 [Build without p11-kit and PKCS#11 support]))

387 if test "$with_p11_kit" != "no"; then

388 PKG_CHECK_MODULES(P11_KIT, [p11-kit-1 >= $P11_KIT_MINIMUM], [with_p11_kit=yes], [with_p11_kit=no])

389 if test "$with_p11_kit" != "no";then

390 AC_DEFINE([ENABLE_PKCS11], 1, [Build PKCS#11 support])

391 if test "x$GNUTLS_REQUIRES_PRIVATE" = "x"; then

392 GNUTLS_REQUIRES_PRIVATE="Requires.private: p11-kit-1"

393 else

394 GNUTLS_REQUIRES_PRIVATE="${GNUTLS_REQUIRES_PRIVATE}, p11-kit-1"

395 fi

396 else

397 with_p11_kit=no

398 AC_MSG_WARN([[

399 ***

400 *** p11-kit >= $P11_KIT_MINIMUM was not found. PKCS #11 support will be disabled.

401 *** You may get it from http://p11-glue.freedesktop.org/p11-kit.html

402 *** ]])

403 fi

404 fi

405

406 AM_CONDITIONAL(ENABLE_PKCS11, test "$with_p11_kit" != "no")

407

408 AC_ARG_WITH(tpm,

409 AS_HELP_STRING([--without-tpm],

410 [Disable TPM (trousers) support.]),

411 [with_tpm=$withval], [with_tpm=yes])

412 if test "$with_tpm" != "no"; then

413 LIBS="$oldlibs -ltspi"

414 AC_MSG_CHECKING([for tss library])

415 AC_LINK_IFELSE([AC_LANG_PROGRAM([

416 #include <trousers/tss.h>

417 #include <trousers/trousers.h>],[

418 int err = Tspi_Context_Create((void *)0);

419 Trspi_Error_String(err);])],

420 [AC_MSG_RESULT(yes)

421 AC_SUBST([TSS_LIBS], [-ltspi])

422 AC_SUBST([TSS_CFLAGS], [])

423 AC_DEFINE([HAVE_TROUSERS], 1, [Enable TPM])

424 with_tpm=yes],

425 [AC_MSG_RESULT(no)

426 AC_MSG_WARN([[

427 ***

428 *** trousers was not found. TPM support will be disabled.

429 *** ]])

430 with_tpm=no])

431 LIBS="$oldlibs"

432 fi

433

434 AM_CONDITIONAL(ENABLE_TROUSERS, test "$with_tpm" != "no")

435

436 LIBOPTS_CHECK([src/libopts])

437 if test "$NEED_LIBOPTS_DIR" = "true";then

438 dnl replace libopts-generated files with distributed backups, if present

439 missing_baks=

440 for i in ${srcdir}/src/*-args.c.bak ${srcdir}/src/*-args.h.bak; do

441 nam=`echo $i|sed 's/.bak//g'`

442 if test -f $i;then

443 cp -f $i $nam

444 else

445 missing_baks=true

446 fi

447 done

448 if test -z "$missing_baks"; then

449 AC_SUBST([AUTOGEN], [/bin/true])

450 fi

451 enable_local_libopts=yes

452 else

453 enable_local_libopts=no

454 fi

455 AM_CONDITIONAL(NEED_LIBOPTS, test "$enable_local_libopts" = "yes")

456

457 AC_CHECK_TYPE(ssize_t,

458 [

459 DEFINE_SSIZE_T="#include <sys/types.h>"

460 AC_SUBST(DEFINE_SSIZE_T)

461 ], [

462 AC_DEFINE([NO_SSIZE_T], 1, [no ssize_t type was found])

463 DEFINE_SSIZE_T="typedef int ssize_t;"

464 AC_SUBST(DEFINE_SSIZE_T)

465 ], [

466 #include <sys/types.h>

467 ])

468

469 # For minitasn1.

470 AC_CHECK_SIZEOF(unsigned long int, 4)

471 AC_CHECK_SIZEOF(unsigned int, 4)

472

473 AC_ARG_WITH(zlib, AS_HELP_STRING([--without-zlib],

474 [disable zlib compression support]),

475 ac_zlib=$withval, ac_zlib=yes)

476 AC_MSG_CHECKING([whether to include zlib compression support])

477 if test x$ac_zlib != xno; then

478 AC_MSG_RESULT(yes)

479 AC_LIB_HAVE_LINKFLAGS(z,, [#include <zlib.h>], [compress (0, 0, 0, 0);])

480 if test x$ac_cv_libz != xyes; then

481 AC_MSG_WARN(

482 ***

483 *** ZLIB was not found. You will not be able to use ZLIB compression.)

484 fi

485 else

486 AC_MSG_RESULT(no)

487 fi

488

489 PKG_CHECK_EXISTS(zlib, ZLIB_HAS_PKGCONFIG=y, ZLIB_HAS_PKGCONFIG=n)

490

491 if test x$ac_zlib != xno; then

492 if test "$ZLIB_HAS_PKGCONFIG" = "y" ; then

493 if test "x$GNUTLS_REQUIRES_PRIVATE" = x; then

494 GNUTLS_REQUIRES_PRIVATE="Requires.private: zlib"

495 else

496 GNUTLS_REQUIRES_PRIVATE="$GNUTLS_REQUIRES_PRIVATE, zlib"

497 fi

498 fi

499 fi

500 AC_SUBST(GNUTLS_REQUIRES_PRIVATE)

501

502

503

504 AC_ARG_WITH([default-trust-store-pkcs11],

505 [AS_HELP_STRING([--with-default-trust-store-pkcs11=URI],

506 [use the given pkcs11 uri as default trust store])])

507

508 if test "x$with_default_trust_store_pkcs11" != x; then

509 if test "x$with_p11_kit" = xno; then

510 AC_MSG_ERROR([cannot use pkcs11 store without p11-kit])

511 fi

512 AC_DEFINE_UNQUOTED([DEFAULT_TRUST_STORE_PKCS11],

513 ["$with_default_trust_store_pkcs11"], [use the given pkcs11 uri as default trust store])

514 fi

515

516 AC_ARG_WITH([default-trust-store-dir],

517 [AS_HELP_STRING([--with-default-trust-store-dir=DIR],

518 [use the given directory as default trust store])])

519

520 if test "x$with_default_trust_store_dir" != x; then

521 AC_DEFINE_UNQUOTED([DEFAULT_TRUST_STORE_DIR],

522 ["$with_default_trust_store_dir"], [use the given directory as default trust store])

523 fi

524

525 dnl auto detect http://lists.gnu.org/archive/html/help-gnutls/2012-05/msg00004.html

526 AC_ARG_WITH([default-trust-store-file],

527 [AS_HELP_STRING([--with-default-trust-store-file=FILE],

528 [use the given file default trust store])], with_default_trust_store_file="$withval",

529 [if test "$build" = "$host" && test x$with_default_trust_store_pkcs11 = x && test x$with_default_trust_store_dir = x;then

530 for i in \

531 /etc/ssl/ca-bundle.pem \

532 /etc/ssl/certs/ca-certificates.crt \

533 /etc/pki/tls/cert.pem \

534 /usr/local/share/certs/ca-root-nss.crt \

535 /etc/ssl/cert.pem

536 do

537 if test -e "$i"; then

538 with_default_trust_store_file="$i"

539 break

540 fi

541 done

542 fi]

543 )

544

545 if test "$with_default_trust_store_file" = "no";then

546 with_default_trust_store_file=""

547 fi

548

549 AC_ARG_WITH([default-crl-file],

550 [AS_HELP_STRING([--with-default-crl-file=FILE],

551 [use the given CRL file as default])])

552

553 AC_ARG_WITH([default-blacklist-file],

554 [AS_HELP_STRING([--with-default-blacklist-file=FILE],

555 [use the given certificate blacklist file as default])])

556

557 if test "x$with_default_trust_store_file" != x; then

558 AC_DEFINE_UNQUOTED([DEFAULT_TRUST_STORE_FILE],

559 ["$with_default_trust_store_file"], [use the given file default trust store])

560 fi

561

562 if test "x$with_default_crl_file" != x; then

563 AC_DEFINE_UNQUOTED([DEFAULT_CRL_FILE],

564 ["$with_default_crl_file"], [use the given CRL file])

565 fi

566

567 if test "x$with_default_blacklist_file" != x; then

568 AC_DEFINE_UNQUOTED([DEFAULT_BLACKLIST_FILE],

569 ["$with_default_blacklist_file"], [use the given certificate blacklist file])

570 fi

571

572 dnl Guile bindings.

573 opt_guile_bindings=yes

574 AC_MSG_CHECKING([whether building Guile bindings])

575 AC_ARG_ENABLE(guile,

576 AS_HELP_STRING([--enable-guile], [build GNU Guile bindings]),

577 opt_guile_bindings=$enableval)

578 AC_MSG_RESULT($opt_guile_bindings)

579

580 AC_ARG_WITH([guile-site-dir],

581 [AS_HELP_STRING([--with-guile-site-dir],

582 [use the given directory as the Guile site (use with care)])])

583

584 if test "$opt_guile_bindings" = "yes"; then

585 AC_MSG_RESULT([***

586 *** Detecting GNU Guile...

587 ])

588

589 AC_PATH_PROG([guile_snarf], [guile-snarf])

590 if test "x$guile_snarf" = "x"; then

591 AC_MSG_WARN([`guile-snarf' from Guile 1.8 not found. Guile bindings not built.])

592 opt_guile_bindings=no

593 else

594 GUILE_PROGS

595 GUILE_FLAGS

596

597 save_CFLAGS="$CFLAGS"

598 save_LIBS="$LIBS"

599 CFLAGS="$CFLAGS $GUILE_CFLAGS"

600 LIBS="$LIBS $GUILE_LDFLAGS"

601 AC_MSG_CHECKING([whether GNU Guile is recent enough])

602 AC_LINK_IFELSE([AC_LANG_PROGRAM([], [scm_from_locale_string ("")])],

603 [], [opt_guile_bindings=no])

604 CFLAGS="$save_CFLAGS"

605 LIBS="$save_LIBS"

606

607 if test "$opt_guile_bindings" = "yes"; then

608 AC_MSG_RESULT([yes])

609 case "x$with_guile_site_dir" in

610 xno)

611 # Use the default $(GUILE_SITE).

612 GUILE_SITE_DIR

613 ;;

614 x|xyes)

615 # Automatically derive $(GUILE_SITE) from $(pkgdatadir). This

616 # hack is used to allow `distcheck' to work (see

617 # `DISTCHECK_CONFIGURE_FLAGS' in the top-level `Makefile.am').

618 GUILE_SITE="\$(datadir)/guile/site"

619 AC_SUBST(GUILE_SITE)

620 ;;

621 *)

622 # Use the user-specified directory as $(GUILE_SITE).

623 GUILE_SITE="$with_guile_site_dir"

624 AC_SUBST(GUILE_SITE)

625 ;;

626 esac

627 AC_MSG_CHECKING([whether gcc supports -fgnu89-inline])

628 _gcc_cflags_save="$CFLAGS"

629 CFLAGS="${CFLAGS} -fgnu89-inline"

630 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([])],

631 gnu89_inline=yes, gnu89_inline=no)

632 AC_MSG_RESULT($gnu89_inline)

633 CFLAGS="$_gcc_cflags_save"

634

635 # Optional Guile functions.

636 save_CFLAGS="$CFLAGS"

637 save_LIBS="$LIBS"

638 CFLAGS="$CFLAGS $GUILE_CFLAGS"

639 LIBS="$LIBS $GUILE_LDFLAGS"

640 AC_CHECK_FUNCS([scm_gc_malloc_pointerless])

641 CFLAGS="$save_CFLAGS"

642 LIBS="$save_LIBS"

643

644 # The place where guile-gnutls.la will go.

645 AC_MSG_CHECKING([the Guile effective version])

646 guile_effective_version="`$GUILE -c '(display (effective-version))'`"

647 AC_MSG_RESULT([$guile_effective_version])

648 guileextensiondir="$libdir/guile/$guile_effective_version"

649 AC_SUBST([guileextensiondir])

650 else

651 AC_MSG_RESULT([no])

652 AC_MSG_WARN([A sufficiently recent GNU Guile not found. Guile bindings not built.])

653 opt_guile_bindings=no

654 fi

655 fi

656 fi

657 AM_CONDITIONAL(HAVE_GUILE, test "$opt_guile_bindings" = "yes")

658

659 LIBGNUTLS_LIBS="-L${libdir} -lgnutls $LIBS"

660 LIBGNUTLS_CFLAGS="-I${includedir}"

661 AC_SUBST(LIBGNUTLS_LIBS)

662 AC_SUBST(LIBGNUTLS_CFLAGS)

663

664 AM_CONDITIONAL(NEEDS_LIBRT, test "$gnutls_needs_librt" = "yes")

665

666 AC_DEFINE([GNUTLS_COMPAT_H], 1, [Make sure we don't use old features in code.])

667 AC_DEFINE([GNUTLS_INTERNAL_BUILD], 1, [We allow temporarily usage of deprecated functions - until they are removed.])

668

669 AC_DEFINE([fread_file], [_gnutls_fread_file], [static lib rename])

670 AC_DEFINE([read_file], [_gnutls_read_file], [static lib rename])

671 AC_DEFINE([read_binary_file], [_gnutls_read_binary_file], [static lib rename])

672

673 dnl Crywrap dependencies

674 AC_MSG_RESULT([***

675 *** Checking dependencies for crywrap...

676 ])

677

678 crywrap=no

679

680 if test "$have_win" != "yes"; then

681

682 AC_CHECK_HEADERS([arpa/inet.h netinet/in.h sys/select.h sys/types.h sys/wait.h])

683

684 dnl **********************

685 dnl * Typedefs & co

686 dnl **********************

687 AC_CACHE_CHECK([return type of signal handlers],[ac_cv_type_signal],[AC_COMPILE_IFELSE(

688 [AC_LANG_PROGRAM([#include <sys/types.h>

689 #include <signal.h>

690 ],

691 [return *(signal (0, 0)) (0) == 1;])],

692 [ac_cv_type_signal=int],

693 [ac_cv_type_signal=void])])

694 AC_DEFINE_UNQUOTED([RETSIGTYPE],[$ac_cv_type_signal],[Define as the return type of signal handlers

695 (`int' or `void').])

696

697 AC_FUNC_SELECT_ARGTYPES

698 AC_CHECK_FUNCS([alarm atexit dup2 epoll_create kqueue memchr memset munmap \

699 putenv regcomp scandir select socket strcasecmp strchr \

700 strdup strerror strncasecmp strrchr strstr strtoul uname])

701

702 AC_ARG_ENABLE(crywrap,

703 AS_HELP_STRING([--disable-crywrap], [unconditionally disable the crywrap TLS proxy service]))

704

705

706 if test "x$enable_crywrap" != "xno" ; then

707 AC_CHECK_FUNCS([argp_usage],[ac_argp=yes],[ac_argp=no])

708 fi

709

710 if test "$ac_cv_func_daemon" != "no" && test "$ac_argp" != "no";then

711 crywrap=yes

712 fi

713

714 fi

715

716 AM_CONDITIONAL(ENABLE_CRYWRAP, test "x$crywrap" != "xno")

717

718 dnl end of crywrap requirements

719

720 dnl Some variables needed in makefiles

721 YEAR=`date +%Y`

722 AC_SUBST([YEAR], $YEAR)

723

724 AC_CONFIG_FILES([guile/pre-inst-guile], [chmod +x guile/pre-inst-guile])

725 AC_CONFIG_FILES([

726 Makefile

727 doc/Makefile

728 doc/credentials/Makefile

729 doc/credentials/openpgp/Makefile

730 doc/credentials/srp/Makefile

731 doc/credentials/x509/Makefile

732 doc/cyclo/Makefile

733 doc/doxygen/Doxyfile

734 doc/examples/Makefile

735 doc/latex/Makefile

736 doc/manpages/Makefile

737 doc/reference/Makefile

738 doc/reference/version.xml

739 doc/scripts/Makefile

740 extra/Makefile

741 extra/includes/Makefile

742 libdane/Makefile

743 libdane/includes/Makefile

744 libdane/gnutls-dane.pc

745 gl/Makefile

746 gl/tests/Makefile

747 guile/Makefile

748 guile/modules/Makefile

749 guile/src/Makefile

750 guile/tests/Makefile

751 lib/Makefile

752 lib/accelerated/Makefile

753 lib/accelerated/x86/Makefile

754 lib/algorithms/Makefile

755 lib/auth/Makefile

756 lib/ext/Makefile

757 lib/extras/Makefile

758 lib/gnutls.pc

759 lib/includes/Makefile

760 lib/includes/gnutls/gnutls.h

761 lib/minitasn1/Makefile

762 lib/nettle/Makefile

763 lib/opencdk/Makefile

764 lib/openpgp/Makefile

765 lib/x509/Makefile

766 po/Makefile.in

767 src/Makefile

768 src/crywrap/Makefile

769 src/gl/Makefile

770 tests/Makefile

771 tests/cert-tests/Makefile

772 tests/dsa/Makefile

773 tests/dtls/Makefile

774 tests/srp/Makefile

775 tests/ecdsa/Makefile

776 tests/key-tests/Makefile

777 tests/openpgp-certs/Makefile

778 tests/pkcs1-padding/Makefile

779 tests/pkcs12-decode/Makefile

780 tests/pkcs8-decode/Makefile

781 tests/rsa-md5-collision/Makefile

782 tests/safe-renegotiation/Makefile

783 tests/scripts/Makefile

784 tests/sha2/Makefile

785 tests/slow/Makefile

786 tests/suite/Makefile

787 tests/userid/Makefile

788 ])

789

790 AC_OUTPUT

791

792 dnl Warning flags: errors: ${WERROR_CFLAGS} warnings: ${WARN_CFLAGS}

793 dnl Valgrind: $opt_valgrind_tests ${VALGRIND}

794 AC_MSG_NOTICE([summary of build options:

795

796 version: ${VERSION} shared $LT_CURRENT:$LT_REVISION:$LT_AGE

797 Host/Target system: ${host}

798 Build system: ${build}

799 Install prefix: ${prefix}

800 Compiler: ${CC}

801 CFlags: ${CFLAGS}

802 Library types: Shared=${enable_shared}, Static=${enable_static}

803 Local libopts: ${enable_local_libopts}

804 Local libtasn1: ${included_libtasn1}

805 Use nettle-mini: ${mini_nettle}

806 ])

807

808 AC_MSG_NOTICE([External hardware support:

809

810 /dev/crypto: $enable_cryptodev

811 Hardware accel: $hw_accel

812 PKCS#11 support: $with_p11_kit

813 TPM support: $with_tpm

814 ])

815

816 AC_MSG_NOTICE([Optional features:

817 (note that included applications might not compile properly

818 if features are disabled)

819

820 DTLS-SRTP support: $ac_enable_srtp

821 ALPN support: $ac_enable_alpn

822 OCSP support: $ac_enable_ocsp

823 Ses. ticket support: $ac_enable_session_tickets

824 OpenPGP support: $ac_enable_openpgp

825 SRP support: $ac_enable_srp

826 PSK support: $ac_enable_psk

827 DHE support: $ac_enable_dhe

828 ECDHE support: $ac_enable_ecdhe

829 RSA-EXPORT support: $ac_enable_rsa_export

830 Anon auth support: $ac_enable_anon

831 Heartbeat support: $ac_enable_heartbeat

832 IDNA support: $libidn

833 Unicode support: $ac_have_unicode

834 Self checks: $enable_self_checks

835 Non-SuiteB curves: $enable_non_suiteb

836 FIPS140 mode: $enable_fips

837 ])

838

839 AC_MSG_NOTICE([Optional applications:

840

841 crywrap app: $crywrap

842 ])

843

844 AC_MSG_NOTICE([Optional libraries:

845

846 Guile wrappers: $opt_guile_bindings

847 C++ library: $use_cxx

848 DANE library: $enable_dane

849 OpenSSL compat: $enable_openssl

850 ])

851

852 AC_MSG_NOTICE([System files:

853

854 Trust store pkcs11: $with_default_trust_store_pkcs11

855 Trust store dir: $with_default_trust_store_dir

856 Trust store file: $with_default_trust_store_file

857 Blacklist file: $with_default_blacklist_file

858 CRL file: $with_default_crl_file

859 Priority file: $system_priority_file

860 DNSSEC root key file: $unbound_root_key_file

861 ])

862

863 if test ! -f "$unbound_root_key_file"; then

864 AC_MSG_WARN([[

865 ***

866 *** The DNSSEC root key file in $unbound_root_key_file was not found.

867 *** This file is needed for the verification of DNSSEC responses.

868 *** Use the command: unbound-anchor -a "$unbound_root_key_file"

869 *** to generate or update it.

870 *** ]])

871 fi