Configure

   1 :
   2 eval 'exec perl -S $0 ${1+"$@"}'
   3     if $running_under_some_shell;
   4 ##
   5 ##  Configure -- OpenSSL source tree configuration script
   6 ##
   7
   8 require 5.000;
   9 eval 'use strict;';
  10
  11 print STDERR "Warning: perl module strict not found.\n" if ($@);
  12
  13 # see INSTALL for instructions.
  14
  15 my $usage="Usage: Configure [no-<cipher> ...] [enable-<cipher> ...] [experimental-<cipher> ...] [-Dxxx] [-lxxx] [-Lxxx] [-fxxx] [-Kxxx] [no-hw-xxx|no-hw] [[no-]threads] [[no-]shared] [[no-]zlib|zlib-dynamic] [enable-montasm] [no-asm] [no-dso] [no-krb5] [386] [--prefix=DIR] [--openssldir=OPENSSLDIR] [--with-xxx[=vvv]] [--test-sanity] os/compiler[:flags]\n";
  16
  17 # Options:
  18 #
  19 # --openssldir  install OpenSSL in OPENSSLDIR (Default: DIR/ssl if the
  20 #               --prefix option is given; /usr/local/ssl otherwise)
  21 # --prefix      prefix for the OpenSSL include, lib and bin directories
  22 #               (Default: the OPENSSLDIR directory)
  23 #
  24 # --install_prefix  Additional prefix for package builders (empty by
  25 #               default).  This needn't be set in advance, you can
  26 #               just as well use "make INSTALL_PREFIX=/whatever install".
  27 #
  28 # --with-krb5-dir  Declare where Kerberos 5 lives.  The libraries are expected
  29 #               to live in the subdirectory lib/ and the header files in
  30 #               include/.  A value is required.
  31 # --with-krb5-lib  Declare where the Kerberos 5 libraries live.  A value is
  32 #               required.
  33 #               (Default: KRB5_DIR/lib)
  34 # --with-krb5-include  Declare where the Kerberos 5 header files live.  A
  35 #               value is required.
  36 #               (Default: KRB5_DIR/include)
  37 # --with-krb5-flavor  Declare what flavor of Kerberos 5 is used.  Currently
  38 #               supported values are "MIT" and "Heimdal".  A value is required.
  39 #
  40 # --test-sanity Make a number of sanity checks on the data in this file.
  41 #               This is a debugging tool for OpenSSL developers.
  42 #
  43 # no-hw-xxx     do not compile support for specific crypto hardware.
  44 #               Generic OpenSSL-style methods relating to this support
  45 #               are always compiled but return NULL if the hardware
  46 #               support isn't compiled.
  47 # no-hw         do not compile support for any crypto hardware.
  48 # [no-]threads  [don't] try to create a library that is suitable for
  49 #               multithreaded applications (default is "threads" if we
  50 #               know how to do it)
  51 # [no-]shared   [don't] try to create shared libraries when supported.
  52 # no-asm        do not use assembler
  53 # no-dso        do not compile in any native shared-library methods. This
  54 #               will ensure that all methods just return NULL.
  55 # no-krb5       do not compile in any KRB5 library or code.
  56 # [no-]zlib     [don't] compile support for zlib compression.
  57 # zlib-dynamic  Like "zlib", but the zlib library is expected to be a shared
  58 #               library and will be loaded in run-time by the OpenSSL library.
  59 # enable-montasm 0.9.8 branch only: enable Montgomery x86 assembler backport
  60 #               from 0.9.9
  61 # 386           generate 80386 code
  62 # no-sse2       disables IA-32 SSE2 code, above option implies no-sse2
  63 # no-<cipher>   build without specified algorithm (rsa, idea, rc5, ...)
  64 # -<xxx> +<xxx> compiler options are passed through
  65 #
  66 # DEBUG_SAFESTACK use type-safe stacks to enforce type-safety on stack items
  67 #               provided to stack calls. Generates unique stack functions for
  68 #               each possible stack type.
  69 # DES_PTR       use pointer lookup vs arrays in the DES in crypto/des/des_locl.h
  70 # DES_RISC1     use different DES_ENCRYPT macro that helps reduce register
  71 #               dependancies but needs to more registers, good for RISC CPU's
  72 # DES_RISC2     A different RISC variant.
  73 # DES_UNROLL    unroll the inner DES loop, sometimes helps, somtimes hinders.
  74 # DES_INT       use 'int' instead of 'long' for DES_LONG in crypto/des/des.h
  75 #               This is used on the DEC Alpha where long is 8 bytes
  76 #               and int is 4
  77 # BN_LLONG      use the type 'long long' in crypto/bn/bn.h
  78 # MD2_CHAR      use 'char' instead of 'int' for MD2_INT in crypto/md2/md2.h
  79 # MD2_LONG      use 'long' instead of 'int' for MD2_INT in crypto/md2/md2.h
  80 # IDEA_SHORT    use 'short' instead of 'int' for IDEA_INT in crypto/idea/idea.h
  81 # IDEA_LONG     use 'long' instead of 'int' for IDEA_INT in crypto/idea/idea.h
  82 # RC2_SHORT     use 'short' instead of 'int' for RC2_INT in crypto/rc2/rc2.h
  83 # RC2_LONG      use 'long' instead of 'int' for RC2_INT in crypto/rc2/rc2.h
  84 # RC4_CHAR      use 'char' instead of 'int' for RC4_INT in crypto/rc4/rc4.h
  85 # RC4_LONG      use 'long' instead of 'int' for RC4_INT in crypto/rc4/rc4.h
  86 # RC4_INDEX     define RC4_INDEX in crypto/rc4/rc4_locl.h.  This turns on
  87 #               array lookups instead of pointer use.
  88 # RC4_CHUNK     enables code that handles data aligned at long (natural CPU
  89 #               word) boundary.
  90 # RC4_CHUNK_LL  enables code that handles data aligned at long long boundary
  91 #               (intended for 64-bit CPUs running 32-bit OS).
  92 # BF_PTR        use 'pointer arithmatic' for Blowfish (unsafe on Alpha).
  93 # BF_PTR2       intel specific version (generic version is more efficient).
  94 #
  95 # Following are set automatically by this script
  96 #
  97 # MD5_ASM       use some extra md5 assember,
  98 # SHA1_ASM      use some extra sha1 assember, must define L_ENDIAN for x86
  99 # RMD160_ASM    use some extra ripemd160 assember,
 100 # SHA256_ASM    sha256_block is implemented in assembler
 101 # SHA512_ASM    sha512_block is implemented in assembler
 102 # AES_ASM       ASE_[en|de]crypt is implemented in assembler
 103
 104 # Minimum warning options... any contributions to OpenSSL should at least get
 105 # past these.
 106
 107 my $gcc_devteam_warn = "-Wall -pedantic -DPEDANTIC -Wno-long-long -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Werror -DCRYPTO_MDEBUG_ALL -DCRYPTO_MDEBUG_ABORT -DREF_CHECK -DOPENSSL_NO_DEPRECATED";
 108
 109 my $x86_gcc_des="DES_PTR DES_RISC1 DES_UNROLL";
 110
 111 # MD2_CHAR slags pentium pros
 112 my $x86_gcc_opts="RC4_INDEX MD2_INT";
 113
 114 # MODIFY THESE PARAMETERS IF YOU ARE GOING TO USE THE 'util/speed.sh SCRIPT
 115 # Don't worry about these normally
 116
 117 my $tcc="cc";
 118 my $tflags="-fast -Xa";
 119 my $tbn_mul="";
 120 my $tlib="-lnsl -lsocket";
 121 #$bits1="SIXTEEN_BIT ";
 122 #$bits2="THIRTY_TWO_BIT ";
 123 my $bits1="THIRTY_TWO_BIT ";
 124 my $bits2="SIXTY_FOUR_BIT ";
 125
 126 my $x86_elf_asm="x86cpuid-elf.o:bn86-elf.o co86-elf.o MAYBE-MO86-elf.o:dx86-elf.o yx86-elf.o:ax86-elf.o:bx86-elf.o:mx86-elf.o:sx86-elf.o s512sse2-elf.o:cx86-elf.o:rx86-elf.o rc4_skey.o:rm86-elf.o:r586-elf.o";
 127 my $x86_coff_asm="x86cpuid-cof.o:bn86-cof.o co86-cof.o MAYBE-MO86-cof.o:dx86-cof.o yx86-cof.o:ax86-cof.o:bx86-cof.o:mx86-cof.o:sx86-cof.o s512sse2-cof.o:cx86-cof.o:rx86-cof.o rc4_skey.o:rm86-cof.o:r586-cof.o";
 128 my $x86_out_asm="x86cpuid-out.o:bn86-out.o co86-out.o MAYBE-MO86-out.o:dx86-out.o yx86-out.o:ax86-out.o:bx86-out.o:mx86-out.o:sx86-out.o s512sse2-out.o:cx86-out.o:rx86-out.o rc4_skey.o:rm86-out.o:r586-out.o";
 129
 130 my $x86_64_asm="x86_64cpuid.o:x86_64-gcc.o x86_64-mont.o::aes-x86_64.o::md5-x86_64.o:sha1-x86_64.o sha256-x86_64.o sha512-x86_64.o::rc4-x86_64.o::";
 131 my $ia64_asm=":bn-ia64.o::aes_core.o aes_cbc.o aes-ia64.o:::sha1-ia64.o sha256-ia64.o sha512-ia64.o::rc4-ia64.o rc4_skey.o::";
 132
 133 my $no_asm="::::::::::";
 134
 135 # As for $BSDthreads. Idea is to maintain "collective" set of flags,
 136 # which would cover all BSD flavors. -pthread applies to them all,
 137 # but is treated differently. OpenBSD expands is as -D_POSIX_THREAD
 138 # -lc_r, which is sufficient. FreeBSD 4.x expands it as -lc_r,
 139 # which has to be accompanied by explicit -D_THREAD_SAFE and
 140 # sometimes -D_REENTRANT. FreeBSD 5.x expands it as -lc_r, which
 141 # seems to be sufficient?
 142 my $BSDthreads="-pthread -D_THREAD_SAFE -D_REENTRANT";
 143
 144 #config-string  $cc : $cflags : $unistd : $thread_cflag : $sys_id : $lflags : $bn_ops : $cpuid_obj : $bn_obj : $des_obj : $aes_obj : $bf_obj : $md5_obj : $sha1_obj : $cast_obj : $rc4_obj : $rmd160_obj : $rc5_obj : $dso_scheme : $shared_target : $shared_cflag : $shared_ldflag : $shared_extension : $ranlib : $arflags
 145
 146 my %table=(
 147 # File 'TABLE' (created by 'make TABLE') contains the data from this list,
 148 # formatted for better readability.
 149
 150
 151 #"b",           "${tcc}:${tflags}::${tlib}:${bits1}:${tbn_mul}::",
 152 #"bl-4c-2c",    "${tcc}:${tflags}::${tlib}:${bits1}BN_LLONG RC4_CHAR MD2_CHAR:${tbn_mul}::",
 153 #"bl-4c-ri",    "${tcc}:${tflags}::${tlib}:${bits1}BN_LLONG RC4_CHAR RC4_INDEX:${tbn_mul}::",
 154 #"b2-is-ri-dp", "${tcc}:${tflags}::${tlib}:${bits2}IDEA_SHORT RC4_INDEX DES_PTR:${tbn_mul}::",
 155
 156 # Our development configs
 157 "purify",       "purify gcc:-g -DPURIFY -Wall::(unknown)::-lsocket -lnsl::::",
 158 "debug",        "gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DOPENSSL_NO_ASM -ggdb -g2 -Wformat -Wshadow -Wmissing-prototypes -Wmissing-declarations -Werror::(unknown)::-lefence::::",
 159 "debug-ben",    "gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DPEDANTIC -DDEBUG_SAFESTACK -O2 -pedantic -Wall -Wshadow -Werror -pipe::(unknown):::::bn86-elf.o co86-elf.o",
 160 "debug-ben-openbsd","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DPEDANTIC -DDEBUG_SAFESTACK -DOPENSSL_OPENBSD_DEV_CRYPTO -DOPENSSL_NO_ASM -O2 -pedantic -Wall -Wshadow -Werror -pipe::(unknown)::::",
 161 "debug-ben-openbsd-debug","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DPEDANTIC -DDEBUG_SAFESTACK -DOPENSSL_OPENBSD_DEV_CRYPTO -DOPENSSL_NO_ASM -g3 -O2 -pedantic -Wall -Wshadow -Werror -pipe::(unknown)::::",
 162 "debug-ben-debug",      "gcc:$gcc_devteam_warn -DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG  -DDEBUG_SAFESTACK -g3 -O2 -pipe::(unknown)::::::",
 163 "debug-ben-strict",     "gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DCONST_STRICT -O2 -Wall -Wshadow -Werror -Wpointer-arith -Wcast-qual -Wwrite-strings -pipe::(unknown)::::::",
 164 "debug-rse","cc:-DTERMIOS -DL_ENDIAN -pipe -O -g -ggdb3 -Wall::(unknown):::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}",
 165 "debug-bodo",   "gcc:-DL_ENDIAN -DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBIO_PAIR_DEBUG -DPEDANTIC -g -march=i486 -pedantic -Wshadow -Wall -Wcast-align -Wstrict-prototypes -Wmissing-prototypes -Wno-long-long -Wundef -Wconversion -pipe::-D_REENTRANT:::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}",
 166 "debug-ulf", "gcc:-DTERMIOS -DL_ENDIAN -march=i486 -Wall -DBN_DEBUG -DBN_DEBUG_RAND -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DOPENSSL_NO_ASM -g -Wformat -Wshadow -Wmissing-prototypes -Wmissing-declarations:::CYGWIN32:::${no_asm}:win32:cygwin-shared:::.dll",
 167 "debug-steve64", "gcc:$gcc_devteam_warn -m64 -DL_ENDIAN -DTERMIO -DCONF_DEBUG -DDEBUG_SAFESTACK -g -DMD32_REG_T=int::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK BF_PTR2 DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 168 "debug-steve32", "gcc:$gcc_devteam_warn -m32 -DL_ENDIAN -DCONF_DEBUG -DDEBUG_SAFESTACK -g -pipe::-D_REENTRANT::-rdynamic -ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC:-m32:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 169 "debug-steve-opt", "gcc:$gcc_devteam_warn -m64 -O3 -DL_ENDIAN -DTERMIO -DCONF_DEBUG -DDEBUG_SAFESTACK -g -DMD32_REG_T=int::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK BF_PTR2 DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 170 "debug-steve",  "gcc:-DL_ENDIAN -DREF_CHECK -DCONF_DEBUG -DDEBUG_SAFESTACK -DCRYPTO_MDEBUG_ALL -DPEDANTIC -m32 -g -pedantic -Wno-long-long -Wall -Werror -Wshadow -pipe::-D_REENTRANT::-rdynamic -ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared",
 171 "debug-steve-linux-pseudo64",   "gcc:-DL_ENDIAN -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DDEBUG_SAFESTACK -DCRYPTO_MDEBUG_ALL -DOPENSSL_NO_ASM -g -mcpu=i486 -Wall -Werror -Wshadow -pipe::-D_REENTRANT::-rdynamic -ldl:SIXTY_FOUR_BIT:${no_asm}:dlfcn:linux-shared",
 172 "debug-levitte-linux-elf","gcc:-DLEVITTE_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_DEBUG -DBN_DEBUG_RAND -DCRYPTO_MDEBUG -DENGINE_CONF_DEBUG -DL_ENDIAN -DTERMIO -D_POSIX_SOURCE -DPEDANTIC -ggdb -g3 -mcpu=i486 -pedantic -ansi -Wall -Wshadow -Wcast-align -Wstrict-prototypes -Wmissing-prototypes -Wno-long-long -Wundef -Wconversion -pipe::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 173 "debug-levitte-linux-noasm","gcc:-DLEVITTE_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_DEBUG -DBN_DEBUG_RAND -DCRYPTO_MDEBUG -DENGINE_CONF_DEBUG -DOPENSSL_NO_ASM -DL_ENDIAN -DTERMIO -D_POSIX_SOURCE -DPEDANTIC -ggdb -g3 -mcpu=i486 -pedantic -ansi -Wall -Wshadow -Wcast-align -Wstrict-prototypes -Wmissing-prototypes -Wno-long-long -Wundef -Wconversion -pipe::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${no_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 174 "debug-levitte-linux-elf-extreme","gcc:-DLEVITTE_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_DEBUG -DBN_DEBUG_RAND -DCRYPTO_MDEBUG -DENGINE_CONF_DEBUG -DL_ENDIAN -DTERMIO -D_POSIX_SOURCE -DPEDANTIC -ggdb -g3 -mcpu=i486 -pedantic -ansi -Wall -W -Wundef -Wshadow -Wcast-align -Wstrict-prototypes -Wmissing-prototypes -Wno-long-long -Wundef -Wconversion -pipe::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 175 "debug-levitte-linux-noasm-extreme","gcc:-DLEVITTE_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_DEBUG -DBN_DEBUG_RAND -DCRYPTO_MDEBUG -DENGINE_CONF_DEBUG -DOPENSSL_NO_ASM -DL_ENDIAN -DTERMIO -D_POSIX_SOURCE -DPEDANTIC -ggdb -g3 -mcpu=i486 -pedantic -ansi -Wall -W -Wundef -Wshadow -Wcast-align -Wstrict-prototypes -Wmissing-prototypes -Wno-long-long -Wundef -Wconversion -pipe::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${no_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 176 "debug-geoff","gcc:-DBN_DEBUG -DBN_DEBUG_RAND -DBN_STRICT -DPURIFY -DOPENSSL_NO_DEPRECATED -DOPENSSL_NO_ASM -DOPENSSL_NO_INLINE_ASM -DL_ENDIAN -DTERMIO -DPEDANTIC -O1 -ggdb2 -Wall -Werror -Wundef -pedantic -Wshadow -Wpointer-arith -Wbad-function-cast -Wcast-align -Wsign-compare -Wmissing-prototypes -Wmissing-declarations -Wno-long-long::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${no_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 177 "debug-linux-pentium","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DCRYPTO_MDEBUG -DL_ENDIAN -DTERMIO -g -mcpu=pentium -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn",
 178 "debug-linux-ppro","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DCRYPTO_MDEBUG -DL_ENDIAN -DTERMIO -g -mcpu=pentiumpro -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn",
 179 "debug-linux-elf","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DCRYPTO_MDEBUG -DL_ENDIAN -DTERMIO -g -march=i486 -Wall::-D_REENTRANT::-lefence -ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 180 "debug-linux-elf-noefence","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DCRYPTO_MDEBUG -DL_ENDIAN -DTERMIO -g -march=i486 -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 181 "dist",         "cc:-O::(unknown)::::::",
 182
 183 # Basic configs that should work on any (32 and less bit) box
 184 "gcc",          "gcc:-O3::(unknown):::BN_LLONG:::",
 185 "cc",           "cc:-O::(unknown)::::::",
 186
 187 ####VOS Configurations
 188 "vos-gcc","gcc:-O3 -Wall -D_POSIX_C_SOURCE=200112L -D_BSD -DB_ENDIAN::(unknown):VOS:-Wl,-map:BN_LLONG:${no_asm}:::::.so:",
 189 "debug-vos-gcc","gcc:-O0 -g -Wall -D_POSIX_C_SOURCE=200112L -D_BSD -DB_ENDIAN -DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DCRYPTO_MDEBUG::(unknown):VOS:-Wl,-map:BN_LLONG:${no_asm}:::::.so:",
 190
 191 #### Solaris x86 with GNU C setups
 192 # -DOPENSSL_NO_INLINE_ASM switches off inline assembler. We have to do it
 193 # here because whenever GNU C instantiates an assembler template it
 194 # surrounds it with #APP #NO_APP comment pair which (at least Solaris
 195 # 7_x86) /usr/ccs/bin/as fails to assemble with "Illegal mnemonic"
 196 # error message.
 197 "solaris-x86-gcc","gcc:-O3 -fomit-frame-pointer -march=pentium -Wall -DL_ENDIAN -DOPENSSL_NO_INLINE_ASM::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:solaris-shared:-fPIC:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 198 # -shared -static-libgcc might appear controversial, but modules taken
 199 # from static libgcc do not have relocations and linking them into our
 200 # shared objects doesn't have any negative side-effects. On the contrary,
 201 # doing so makes it possible to use gcc shared build with Sun C. Given
 202 # that gcc generates faster code [thanks to inline assembler], I would
 203 # actually recommend to consider using gcc shared build even with vendor
 204 # compiler:-)
 205 #                                               <appro@fy.chalmers.se>
 206 "solaris64-x86_64-gcc","gcc:-m64 -O3 -Wall -DL_ENDIAN -DMD32_REG_T=int::-D_REENTRANT::-lsocket -lnsl -ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK BF_PTR2 DES_INT DES_UNROLL:${x86_64_asm}:dlfcn:solaris-shared:-fPIC:-m64 -shared -static-libgcc:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 207
 208 #### Solaris x86 with Sun C setups
 209 "solaris-x86-cc","cc:-fast -O -Xa::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_PTR DES_UNROLL BF_PTR:${no_asm}:dlfcn:solaris-shared:-KPIC:-G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 210 "solaris64-x86_64-cc","cc:-fast -xarch=amd64 -xstrconst -Xa -DL_ENDIAN::-D_REENTRANT::-lsocket -lnsl -ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK BF_PTR2 DES_INT DES_UNROLL:${x86_64_asm}:dlfcn:solaris-shared:-KPIC:-xarch=amd64 -G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 211
 212 #### SPARC Solaris with GNU C setups
 213 "solaris-sparcv7-gcc","gcc:-O3 -fomit-frame-pointer -Wall -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${no_asm}:dlfcn:solaris-shared:-fPIC:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 214 "solaris-sparcv8-gcc","gcc:-mv8 -O3 -fomit-frame-pointer -Wall -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR::sparcv8.o:des_enc-sparc.o fcrypt_b.o:::::::::dlfcn:solaris-shared:-fPIC:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 215 # -m32 should be safe to add as long as driver recognizes -mcpu=ultrasparc
 216 "solaris-sparcv9-gcc","gcc:-m32 -mcpu=ultrasparc -O3 -fomit-frame-pointer -Wall -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT:ULTRASPARC:-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR::sparcv8plus.o:des_enc-sparc.o fcrypt_b.o:::::::::dlfcn:solaris-shared:-fPIC:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 217 "solaris64-sparcv9-gcc","gcc:-m64 -mcpu=ultrasparc -O3 -Wall -DB_ENDIAN::-D_REENTRANT:ULTRASPARC:-lsocket -lnsl -ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_PTR DES_RISC1 DES_UNROLL BF_PTR:::des_enc-sparc.o fcrypt_b.o:::::::::dlfcn:solaris-shared:-fPIC:-m64 -shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 218 ####
 219 "debug-solaris-sparcv8-gcc","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DCRYPTO_MDEBUG_ALL -O -g -mv8 -Wall -DB_ENDIAN::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR::sparcv8.o::::::::::dlfcn:solaris-shared:-fPIC:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 220 "debug-solaris-sparcv9-gcc","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DCRYPTO_MDEBUG_ALL -DPEDANTIC -O -g -mcpu=ultrasparc -pedantic -ansi -Wall -Wshadow -Wno-long-long -D__EXTENSIONS__ -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT:ULTRASPARC:-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR::sparcv8plus.o:des_enc-sparc.o fcrypt_b.o:::::::::dlfcn:solaris-shared:-fPIC:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 221
 222 #### SPARC Solaris with Sun C setups
 223 # SC4.0 doesn't pass 'make test', upgrade to SC5.0 or SC4.2.
 224 # SC4.2 is ok, better than gcc even on bn as long as you tell it -xarch=v8
 225 # SC5.0 note: Compiler common patch 107357-01 or later is required!
 226 "solaris-sparcv7-cc","cc:-xO5 -xstrconst -xdepend -Xa -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_PTR DES_RISC1 DES_UNROLL BF_PTR:${no_asm}:dlfcn:solaris-shared:-KPIC:-G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 227 "solaris-sparcv8-cc","cc:-xarch=v8 -xO5 -xstrconst -xdepend -Xa -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_PTR DES_RISC1 DES_UNROLL BF_PTR::sparcv8.o:des_enc-sparc.o fcrypt_b.o:::::::::dlfcn:solaris-shared:-KPIC:-G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 228 "solaris-sparcv9-cc","cc:-xtarget=ultra -xarch=v8plus -xO5 -xstrconst -xdepend -Xa -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT:ULTRASPARC:-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK_LL DES_PTR DES_RISC1 DES_UNROLL BF_PTR::sparcv8plus.o:des_enc-sparc.o fcrypt_b.o:::::::::dlfcn:solaris-shared:-KPIC:-G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 229 "solaris64-sparcv9-cc","cc:-xtarget=ultra -xarch=v9 -xO5 -xstrconst -xdepend -Xa -DB_ENDIAN::-D_REENTRANT:ULTRASPARC:-lsocket -lnsl -ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_PTR DES_RISC1 DES_UNROLL BF_PTR:::des_enc-sparc.o fcrypt_b.o:::::::::dlfcn:solaris-shared:-KPIC:-xarch=v9 -G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):/usr/ccs/bin/ar rs",
 230 ####
 231 "debug-solaris-sparcv8-cc","cc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DCRYPTO_MDEBUG_ALL -xarch=v8 -g -O -xstrconst -Xa -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_PTR DES_RISC1 DES_UNROLL BF_PTR::sparcv8.o::::::::::dlfcn:solaris-shared:-KPIC:-G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 232 "debug-solaris-sparcv9-cc","cc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DCRYPTO_MDEBUG_ALL -xtarget=ultra -xarch=v8plus -g -O -xstrconst -Xa -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT:ULTRASPARC:-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK_LL DES_PTR DES_RISC1 DES_UNROLL BF_PTR::sparcv8plus.o::::::::::dlfcn:solaris-shared:-KPIC:-G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 233
 234 #### SunOS configs, assuming sparc for the gcc one.
 235 #"sunos-cc", "cc:-O4 -DNOPROTO -DNOCONST::(unknown):SUNOS::DES_UNROLL:${no_asm}::",
 236 "sunos-gcc","gcc:-O3 -mv8 -Dssize_t=int::(unknown):SUNOS::BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL DES_PTR DES_RISC1:${no_asm}::",
 237
 238 #### IRIX 5.x configs
 239 # -mips2 flag is added by ./config when appropriate.
 240 "irix-gcc","gcc:-O3 -DTERMIOS -DB_ENDIAN::(unknown):::BN_LLONG MD2_CHAR RC4_INDEX RC4_CHAR RC4_CHUNK DES_UNROLL DES_RISC2 DES_PTR BF_PTR:${no_asm}:dlfcn:irix-shared:::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 241 "irix-cc", "cc:-O2 -use_readonly_const -DTERMIOS -DB_ENDIAN::(unknown):::BN_LLONG RC4_CHAR RC4_CHUNK DES_PTR DES_RISC2 DES_UNROLL BF_PTR:${no_asm}:dlfcn:irix-shared:::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 242 #### IRIX 6.x configs
 243 # Only N32 and N64 ABIs are supported. If you need O32 ABI build, invoke
 244 # './Configure irix-cc -o32' manually.
 245 "irix-mips3-gcc","gcc:-mabi=n32 -O3 -DTERMIOS -DB_ENDIAN -DBN_DIV3W::-D_SGI_MP_SOURCE:::MD2_CHAR RC4_INDEX RC4_CHAR RC4_CHUNK_LL DES_UNROLL DES_RISC2 DES_PTR BF_PTR SIXTY_FOUR_BIT::bn-mips3.o::::::::::dlfcn:irix-shared::-mabi=n32:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 246 "irix-mips3-cc", "cc:-n32 -mips3 -O2 -use_readonly_const -G0 -rdata_shared -DTERMIOS -DB_ENDIAN -DBN_DIV3W::-D_SGI_MP_SOURCE:::DES_PTR RC4_CHAR RC4_CHUNK_LL DES_RISC2 DES_UNROLL BF_PTR SIXTY_FOUR_BIT::bn-mips3.o::::::::::dlfcn:irix-shared::-n32:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 247 # N64 ABI builds.
 248 "irix64-mips4-gcc","gcc:-mabi=64 -mips4 -O3 -DTERMIOS -DB_ENDIAN -DBN_DIV3W::-D_SGI_MP_SOURCE:::RC4_CHAR RC4_CHUNK DES_RISC2 DES_UNROLL SIXTY_FOUR_BIT_LONG::bn-mips3.o::::::::::dlfcn:irix-shared::-mabi=64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 249 "irix64-mips4-cc", "cc:-64 -mips4 -O2 -use_readonly_const -G0 -rdata_shared -DTERMIOS -DB_ENDIAN -DBN_DIV3W::-D_SGI_MP_SOURCE:::RC4_CHAR RC4_CHUNK DES_RISC2 DES_UNROLL SIXTY_FOUR_BIT_LONG::bn-mips3.o::::::::::dlfcn:irix-shared::-64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 250
 251 #### Unified HP-UX ANSI C configs.
 252 # Special notes:
 253 # - Originally we were optimizing at +O4 level. It should be noted
 254 #   that the only difference between +O3 and +O4 is global inter-
 255 #   procedural analysis. As it has to be performed during the link
 256 #   stage the compiler leaves behind certain pseudo-code in lib*.a
 257 #   which might be release or even patch level specific. Generating
 258 #   the machine code for and analyzing the *whole* program appears
 259 #   to be *extremely* memory demanding while the performance gain is
 260 #   actually questionable. The situation is intensified by the default
 261 #   HP-UX data set size limit (infamous 'maxdsiz' tunable) of 64MB
 262 #   which is way too low for +O4. In other words, doesn't +O3 make
 263 #   more sense?
 264 # - Keep in mind that the HP compiler by default generates code
 265 #   suitable for execution on the host you're currently compiling at.
 266 #   If the toolkit is ment to be used on various PA-RISC processors
 267 #   consider './config +DAportable'.
 268 # - +DD64 is chosen in favour of +DA2.0W because it's meant to be
 269 #   compatible with *future* releases.
 270 # - If you run ./Configure hpux-parisc-[g]cc manually don't forget to
 271 #   pass -D_REENTRANT on HP-UX 10 and later.
 272 # - -DMD32_XARRAY triggers workaround for compiler bug we ran into in
 273 #   32-bit message digests. (For the moment of this writing) HP C
 274 #   doesn't seem to "digest" too many local variables (they make "him"
 275 #   chew forever:-). For more details look-up MD32_XARRAY comment in
 276 #   crypto/sha/sha_lcl.h.
 277 #                                       <appro@fy.chalmers.se>
 278 #
 279 # Since there is mention of this in shlib/hpux10-cc.sh
 280 "hpux-parisc-cc-o4","cc:-Ae +O4 +ESlit -z -DB_ENDIAN -DBN_DIV2W -DMD32_XARRAY::-D_REENTRANT::-ldld:BN_LLONG DES_PTR DES_UNROLL DES_RISC1:${no_asm}:dl:hpux-shared:+Z:-b:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 281 "hpux-parisc-gcc","gcc:-O3 -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT::-Wl,+s -ldld:BN_LLONG DES_PTR DES_UNROLL DES_RISC1:${no_asm}:dl:hpux-shared:-fPIC:-shared:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 282 "hpux-parisc2-gcc","gcc:-march=2.0 -O3 -DB_ENDIAN -D_REENTRANT::::-Wl,+s -ldld:SIXTY_FOUR_BIT RC4_CHAR RC4_CHUNK DES_PTR DES_UNROLL DES_RISC1::pa-risc2.o::::::::::dl:hpux-shared:-fPIC:-shared:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 283 "hpux64-parisc2-gcc","gcc:-O3 -DB_ENDIAN -D_REENTRANT::::-ldl:SIXTY_FOUR_BIT_LONG MD2_CHAR RC4_INDEX RC4_CHAR DES_UNROLL DES_RISC1 DES_INT::pa-risc2W.o::::::::::dlfcn:hpux-shared:-fpic:-shared:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 284
 285 # More attempts at unified 10.X and 11.X targets for HP C compiler.
 286 #
 287 # Chris Ruemmler <ruemmler@cup.hp.com>
 288 # Kevin Steves <ks@hp.se>
 289 "hpux-parisc-cc","cc:+O3 +Optrs_strongly_typed -Ae +ESlit -DB_ENDIAN -DBN_DIV2W -DMD32_XARRAY::-D_REENTRANT::-Wl,+s -ldld:MD2_CHAR RC4_INDEX RC4_CHAR DES_UNROLL DES_RISC1 DES_INT:${no_asm}:dl:hpux-shared:+Z:-b:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 290 "hpux-parisc1_0-cc","cc:+DAportable +O3 +Optrs_strongly_typed -Ae +ESlit -DB_ENDIAN -DMD32_XARRAY::-D_REENTRANT::-Wl,+s -ldld:MD2_CHAR RC4_INDEX RC4_CHAR DES_UNROLL DES_RISC1 DES_INT:${no_asm}:dl:hpux-shared:+Z:-b:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 291 "hpux-parisc2-cc","cc:+DA2.0 +DS2.0 +O3 +Optrs_strongly_typed -Ae +ESlit -DB_ENDIAN -DMD32_XARRAY -D_REENTRANT::::-Wl,+s -ldld:SIXTY_FOUR_BIT MD2_CHAR RC4_INDEX RC4_CHAR DES_UNROLL DES_RISC1 DES_INT::pa-risc2.o::::::::::dl:hpux-shared:+Z:-b:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 292 "hpux64-parisc2-cc","cc:+DD64 +O3 +Optrs_strongly_typed -Ae +ESlit -DB_ENDIAN -DMD32_XARRAY -D_REENTRANT::::-ldl:SIXTY_FOUR_BIT_LONG MD2_CHAR RC4_INDEX RC4_CHAR DES_UNROLL DES_RISC1 DES_INT::pa-risc2W.o::::::::::dlfcn:hpux-shared:+Z:+DD64 -b:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 293
 294 # HP/UX IA-64 targets
 295 "hpux-ia64-cc","cc:-Ae +DD32 +O2 +Olit=all -z -DB_ENDIAN -D_REENTRANT::::-ldl:SIXTY_FOUR_BIT MD2_CHAR RC4_INDEX DES_UNROLL DES_RISC1 DES_INT:${ia64_asm}:dlfcn:hpux-shared:+Z:+DD32 -b:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 296 # Frank Geurts <frank.geurts@nl.abnamro.com> has patiently assisted with
 297 # with debugging of the following config.
 298 "hpux64-ia64-cc","cc:-Ae +DD64 +O3 +Olit=all -z -DB_ENDIAN -D_REENTRANT::::-ldl:SIXTY_FOUR_BIT_LONG MD2_CHAR RC4_INDEX DES_UNROLL DES_RISC1 DES_INT:${ia64_asm}:dlfcn:hpux-shared:+Z:+DD64 -b:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 299 # GCC builds...
 300 "hpux-ia64-gcc","gcc:-O3 -DB_ENDIAN -D_REENTRANT::::-ldl:SIXTY_FOUR_BIT MD2_CHAR RC4_INDEX DES_UNROLL DES_RISC1 DES_INT:${ia64_asm}:dlfcn:hpux-shared:-fpic:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 301 "hpux64-ia64-gcc","gcc:-mlp64 -O3 -DB_ENDIAN -D_REENTRANT::::-ldl:SIXTY_FOUR_BIT_LONG MD2_CHAR RC4_INDEX DES_UNROLL DES_RISC1 DES_INT:${ia64_asm}:dlfcn:hpux-shared:-fpic:-mlp64 -shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 302
 303 # Legacy HPUX 9.X configs...
 304 "hpux-cc",      "cc:-DB_ENDIAN -DBN_DIV2W -DMD32_XARRAY -Ae +ESlit +O2 -z::(unknown)::-Wl,+s -ldld:DES_PTR DES_UNROLL DES_RISC1:${no_asm}:dl:hpux-shared:+Z:-b:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 305 "hpux-gcc",     "gcc:-DB_ENDIAN -DBN_DIV2W -O3::(unknown)::-Wl,+s -ldld:DES_PTR DES_UNROLL DES_RISC1:${no_asm}:dl:hpux-shared:-fPIC:-shared:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 306
 307 #### HP MPE/iX http://jazz.external.hp.com/src/openssl/
 308 "MPE/iX-gcc",   "gcc:-D_ENDIAN -DBN_DIV2W -O3 -D_POSIX_SOURCE -D_SOCKET_SOURCE -I/SYSLOG/PUB::(unknown):MPE:-L/SYSLOG/PUB -lsyslog -lsocket -lcurses:BN_LLONG DES_PTR DES_UNROLL DES_RISC1:::",
 309
 310 # DEC Alpha OSF/1/Tru64 targets.
 311 #
 312 #       "What's in a name? That which we call a rose
 313 #        By any other word would smell as sweet."
 314 #
 315 # - William Shakespeare, "Romeo & Juliet", Act II, scene II.
 316 #
 317 # For gcc, the following gave a %50 speedup on a 164 over the 'DES_INT' version
 318 #
 319 "osf1-alpha-gcc", "gcc:-O3::(unknown):::SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_UNROLL DES_RISC1:${no_asm}:dlfcn:alpha-osf1-shared:::.so",
 320 "osf1-alpha-cc",  "cc:-std1 -tune host -O4 -readonly_strings::(unknown):::SIXTY_FOUR_BIT_LONG RC4_CHUNK:${no_asm}:dlfcn:alpha-osf1-shared:::.so",
 321 "tru64-alpha-cc", "cc:-std1 -tune host -fast -readonly_strings::-pthread:::SIXTY_FOUR_BIT_LONG RC4_CHUNK:${no_asm}:dlfcn:alpha-osf1-shared::-msym:.so",
 322
 323 ####
 324 #### Variety of LINUX:-)
 325 ####
 326 # *-generic* is endian-neutral target, but ./config is free to
 327 # throw in -D[BL]_ENDIAN, whichever appropriate...
 328 "linux-generic32","gcc:-DTERMIO -O3 -fomit-frame-pointer -Wall::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${no_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 329 "linux-ppc",    "gcc:-DB_ENDIAN -DTERMIO -O3 -Wall::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_RISC1 DES_UNROLL::linux_ppc32.o::::::::::dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 330 #### IA-32 targets...
 331 "linux-ia32-icc",       "icc:-DL_ENDIAN -DTERMIO -O2 -no_cpprt::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-KPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 332 "linux-elf",    "gcc:-DL_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 333 "linux-aout",   "gcc:-DL_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -march=i486 -Wall::(unknown):::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_out_asm}",
 334 ####
 335 "linux-generic64","gcc:-DTERMIO -O3 -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${no_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 336 "linux-ppc64",  "gcc:-m64 -DB_ENDIAN -DTERMIO -O3 -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_RISC1 DES_UNROLL::linux_ppc64.o::::::::::dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 337 "linux-ia64",   "gcc:-DL_ENDIAN -DTERMIO -O3 -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK:${ia64_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 338 "linux-ia64-ecc","ecc:-DL_ENDIAN -DTERMIO -O2 -Wall -no_cpprt::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK:${ia64_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 339 "linux-ia64-icc","icc:-DL_ENDIAN -DTERMIO -O2 -Wall -no_cpprt::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK:${ia64_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 340 "linux-x86_64", "gcc:-m64 -DL_ENDIAN -DTERMIO -O3 -Wall -DMD32_REG_T=int::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK BF_PTR2 DES_INT DES_UNROLL:${x86_64_asm}:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 341 #### SPARC Linux setups
 342 # Ray Miller <ray.miller@computing-services.oxford.ac.uk> has patiently
 343 # assisted with debugging of following two configs.
 344 "linux-sparcv8","gcc:-mv8 -DB_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall -DBN_DIV2W::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR::sparcv8.o:des_enc-sparc.o fcrypt_b.o:::::::::dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 345 # it's a real mess with -mcpu=ultrasparc option under Linux, but
 346 # -Wa,-Av8plus should do the trick no matter what.
 347 "linux-sparcv9","gcc:-m32 -mcpu=ultrasparc -DB_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall -Wa,-Av8plus -DBN_DIV2W::-D_REENTRANT:ULTRASPARC:-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR::sparcv8plus.o:des_enc-sparc.o fcrypt_b.o:::::::::dlfcn:linux-shared:-fPIC:-m32:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 348 # GCC 3.1 is a requirement
 349 "linux64-sparcv9","gcc:-m64 -mcpu=ultrasparc -DB_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall::-D_REENTRANT:ULTRASPARC:-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR::::::::::::dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 350 #### Alpha Linux with GNU C and Compaq C setups
 351 # Special notes:
 352 # - linux-alpha+bwx-gcc is ment to be used from ./config only. If you
 353 #   ought to run './Configure linux-alpha+bwx-gcc' manually, do
 354 #   complement the command line with -mcpu=ev56, -mcpu=ev6 or whatever
 355 #   which is appropriate.
 356 # - If you use ccc keep in mind that -fast implies -arch host and the
 357 #   compiler is free to issue instructions which gonna make elder CPU
 358 #   choke. If you wish to build "blended" toolkit, add -arch generic
 359 #   *after* -fast and invoke './Configure linux-alpha-ccc' manually.
 360 #
 361 #                                       <appro@fy.chalmers.se>
 362 #
 363 "linux-alpha-gcc","gcc:-O3 -DL_ENDIAN -DTERMIO::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_RISC1 DES_UNROLL:${no_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 364 "linux-alpha+bwx-gcc","gcc:-O3 -DL_ENDIAN -DTERMIO::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_RISC1 DES_UNROLL:${no_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 365 "linux-alpha-ccc","ccc:-fast -readonly_strings -DL_ENDIAN -DTERMIO::-D_REENTRANT:::SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_PTR DES_RISC1 DES_UNROLL:${no_asm}",
 366 "linux-alpha+bwx-ccc","ccc:-fast -readonly_strings -DL_ENDIAN -DTERMIO::-D_REENTRANT:::SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_PTR DES_RISC1 DES_UNROLL:${no_asm}",
 367
 368 #### *BSD [do see comment about ${BSDthreads} above!]
 369 "BSD-generic32","gcc:-DTERMIOS -O3 -fomit-frame-pointer -Wall::${BSDthreads}:::BN_LLONG RC2_CHAR RC4_INDEX DES_INT DES_UNROLL:${no_asm}:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 370 "BSD-x86",      "gcc:-DL_ENDIAN -DTERMIOS -O3 -fomit-frame-pointer -Wall::${BSDthreads}:::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_out_asm}:dlfcn:bsd-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 371 "BSD-x86-elf",  "gcc:-DL_ENDIAN -DTERMIOS -O3 -fomit-frame-pointer -Wall::${BSDthreads}:::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:bsd-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 372 "debug-BSD-x86-elf",    "gcc:-DL_ENDIAN -DTERMIOS -O3 -Wall -g::${BSDthreads}:::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:bsd-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 373 "BSD-sparcv8",  "gcc:-DB_ENDIAN -DTERMIOS -O3 -mv8 -Wall::${BSDthreads}:::BN_LLONG RC2_CHAR RC4_INDEX DES_INT DES_UNROLL::sparcv8.o:des_enc-sparc.o fcrypt_b.o:::::::::dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 374
 375 "BSD-generic64","gcc:-DTERMIOS -O3 -Wall::${BSDthreads}:::SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${no_asm}:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 376 # -DMD32_REG_T=int doesn't actually belong in sparc64 target, it
 377 # simply *happens* to work around a compiler bug in gcc 3.3.3,
 378 # triggered by RIPEMD160 code.
 379 "BSD-sparc64",  "gcc:-DB_ENDIAN -DTERMIOS -O3 -DMD32_REG_T=int -Wall::${BSDthreads}:::SIXTY_FOUR_BIT_LONG RC2_CHAR RC4_CHUNK DES_INT DES_PTR DES_RISC2 BF_PTR:::des_enc-sparc.o fcrypt_b.o:::::::::dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 380 "BSD-ia64",     "gcc:-DL_ENDIAN -DTERMIOS -O3 -Wall::${BSDthreads}:::SIXTY_FOUR_BIT_LONG RC4_CHUNK:${ia64_asm}:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 381 "BSD-x86_64",   "gcc:-DL_ENDIAN -DTERMIOS -O3 -DMD32_REG_T=int -Wall::${BSDthreads}:::SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 382
 383 "bsdi-elf-gcc",     "gcc:-DPERL5 -DL_ENDIAN -fomit-frame-pointer -O3 -march=i486 -Wall::(unknown)::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 384
 385 "nextstep",     "cc:-O -Wall:<libc.h>:(unknown):::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:::",
 386 "nextstep3.3",  "cc:-O3 -Wall:<libc.h>:(unknown):::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:::",
 387
 388 # NCR MP-RAS UNIX ver 02.03.01
 389 "ncr-scde","cc:-O6 -Xa -Hoff=BEHAVED -686 -Hwide -Hiw::(unknown)::-lsocket -lnsl -lc89:${x86_gcc_des} ${x86_gcc_opts}:::",
 390
 391 # QNX
 392 "qnx4", "cc:-DL_ENDIAN -DTERMIO::(unknown):::${x86_gcc_des} ${x86_gcc_opts}:",
 393 "QNX6",       "gcc:-DTERMIOS::::-lsocket::${no_asm}:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 394 "QNX6-i386",  "gcc:-DL_ENDIAN -DTERMIOS -O2 -Wall::::-lsocket:${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 395
 396 #### SCO/Caldera targets.
 397 #
 398 # Originally we had like unixware-*, unixware-*-pentium, unixware-*-p6, etc.
 399 # Now we only have blended unixware-* as it's the only one used by ./config.
 400 # If you want to optimize for particular microarchitecture, bypass ./config
 401 # and './Configure unixware-7 -Kpentium_pro' or whatever appropriate.
 402 # Note that not all targets include assembler support. Mostly because of
 403 # lack of motivation to support out-of-date platforms with out-of-date
 404 # compiler drivers and assemblers. Tim Rice <tim@multitalents.net> has
 405 # patiently assisted to debug most of it.
 406 #
 407 # UnixWare 2.0x fails destest with -O.
 408 "unixware-2.0","cc:-DFILIO_H -DNO_STRINGS_H::-Kthread::-lsocket -lnsl -lresolv -lx:${x86_gcc_des} ${x86_gcc_opts}:::",
 409 "unixware-2.1","cc:-O -DFILIO_H::-Kthread::-lsocket -lnsl -lresolv -lx:${x86_gcc_des} ${x86_gcc_opts}:::",
 410 "unixware-7","cc:-O -DFILIO_H -Kalloca::-Kthread::-lsocket -lnsl:BN_LLONG MD2_CHAR RC4_INDEX ${x86_gcc_des}:${x86_elf_asm}:dlfcn:svr5-shared:-Kpic::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 411 "unixware-7-gcc","gcc:-DL_ENDIAN -DFILIO_H -O3 -fomit-frame-pointer -march=pentium -Wall::-D_REENTRANT::-lsocket -lnsl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:gnu-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 412 # SCO 5 - Ben Laurie <ben@algroup.co.uk> says the -O breaks the SCO cc.
 413 "sco5-cc",  "cc:-belf::(unknown)::-lsocket -lnsl:${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:svr3-shared:-Kpic::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 414 "sco5-gcc",  "gcc:-O3 -fomit-frame-pointer::(unknown)::-lsocket -lnsl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:svr3-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 415
 416 #### IBM's AIX.
 417 "aix3-cc",  "cc:-O -DB_ENDIAN -qmaxmem=16384::(unknown):AIX::BN_LLONG RC4_CHAR:::",
 418 "aix-gcc",  "gcc:-O -DB_ENDIAN::-pthread:AIX::BN_LLONG RC4_CHAR::aix_ppc32.o::::::::::dlfcn:aix-shared::-shared -Wl,-G:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)::-X 32",
 419 "aix64-gcc","gcc:-maix64 -O -DB_ENDIAN::-pthread:AIX::SIXTY_FOUR_BIT_LONG RC4_CHAR::aix_ppc64.o::::::::::dlfcn:aix-shared::-maix64 -shared -Wl,-G:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)::-X64",
 420 # Below targets assume AIX 5. Idea is to effectively disregard $OBJECT_MODE
 421 # at build time. $OBJECT_MODE is respected at ./config stage!
 422 "aix-cc",   "cc:-q32 -O -DB_ENDIAN -qmaxmem=16384 -qro -qroconst::-qthreaded:AIX::BN_LLONG RC4_CHAR::aix_ppc32.o::::::::::dlfcn:aix-shared::-q32 -G:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)::-X 32",
 423 "aix64-cc", "cc:-q64 -O -DB_ENDIAN -qmaxmem=16384 -qro -qroconst::-qthreaded:AIX::SIXTY_FOUR_BIT_LONG RC4_CHAR::aix_ppc64.o::::::::::dlfcn:aix-shared::-q64 -G:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)::-X 64",
 424
 425 #
 426 # Cray T90 and similar (SDSC)
 427 # It's Big-endian, but the algorithms work properly when B_ENDIAN is NOT
 428 # defined.  The T90 ints and longs are 8 bytes long, and apparently the
 429 # B_ENDIAN code assumes 4 byte ints.  Fortunately, the non-B_ENDIAN and
 430 # non L_ENDIAN code aligns the bytes in each word correctly.
 431 #
 432 # The BIT_FIELD_LIMITS define is to avoid two fatal compiler errors:
 433 #'Taking the address of a bit field is not allowed. '
 434 #'An expression with bit field exists as the operand of "sizeof" '
 435 # (written by Wayne Schroeder <schroede@SDSC.EDU>)
 436 #
 437 # j90 is considered the base machine type for unicos machines,
 438 # so this configuration is now called "cray-j90" ...
 439 "cray-j90", "cc: -DBIT_FIELD_LIMITS -DTERMIOS::(unknown):CRAY::SIXTY_FOUR_BIT_LONG DES_INT:::",
 440
 441 #
 442 # Cray T3E (Research Center Juelich, beckman@acl.lanl.gov)
 443 #
 444 # The BIT_FIELD_LIMITS define was written for the C90 (it seems).  I added
 445 # another use.  Basically, the problem is that the T3E uses some bit fields
 446 # for some st_addr stuff, and then sizeof and address-of fails
 447 # I could not use the ams/alpha.o option because the Cray assembler, 'cam'
 448 # did not like it.
 449 "cray-t3e", "cc: -DBIT_FIELD_LIMITS -DTERMIOS::(unknown):CRAY::SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT:::",
 450
 451 # DGUX, 88100.
 452 "dgux-R3-gcc",  "gcc:-O3 -fomit-frame-pointer::(unknown):::RC4_INDEX DES_UNROLL:::",
 453 "dgux-R4-gcc",  "gcc:-O3 -fomit-frame-pointer::(unknown)::-lnsl -lsocket:RC4_INDEX DES_UNROLL:::",
 454 "dgux-R4-x86-gcc",      "gcc:-O3 -fomit-frame-pointer -DL_ENDIAN::(unknown)::-lnsl -lsocket:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}",
 455
 456 # Sinix/ReliantUNIX RM400
 457 # NOTE: The CDS++ Compiler up to V2.0Bsomething has the IRIX_CC_BUG optimizer problem. Better use -g  */
 458 "ReliantUNIX","cc:-KPIC -g -DTERMIOS -DB_ENDIAN::-Kthread:SNI:-lsocket -lnsl -lc -L/usr/ucblib -lucb:BN_LLONG DES_PTR DES_RISC2 DES_UNROLL BF_PTR:${no_asm}:dlfcn:reliantunix-shared:::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 459 "SINIX","cc:-O::(unknown):SNI:-lsocket -lnsl -lc -L/usr/ucblib -lucb:RC4_INDEX RC4_CHAR:::",
 460 "SINIX-N","/usr/ucb/cc:-O2 -misaligned::(unknown)::-lucb:RC4_INDEX RC4_CHAR:::",
 461
 462 # SIEMENS BS2000/OSD: an EBCDIC-based mainframe
 463 "BS2000-OSD","c89:-O -XLLML -XLLMK -XL -DB_ENDIAN -DTERMIOS -DCHARSET_EBCDIC::(unknown)::-lsocket -lnsl:THIRTY_TWO_BIT DES_PTR DES_UNROLL MD2_CHAR RC4_INDEX RC4_CHAR BF_PTR:::",
 464
 465 # OS/390 Unix an EBCDIC-based Unix system on IBM mainframe
 466 # You need to compile using the c89.sh wrapper in the tools directory, because the
 467 # IBM compiler does not like the -L switch after any object modules.
 468 #
 469 "OS390-Unix","c89.sh:-O -DB_ENDIAN -DCHARSET_EBCDIC -DNO_SYS_PARAM_H  -D_ALL_SOURCE::(unknown):::THIRTY_TWO_BIT DES_PTR DES_UNROLL MD2_CHAR RC4_INDEX RC4_CHAR BF_PTR:::",
 470
 471 # Win64 targets, WIN64I denotes IA-64 and WIN64A - AMD64
 472 "VC-WIN64I","cl::::WIN64I::SIXTY_FOUR_BIT RC4_CHUNK_LL DES_INT EXPORT_VAR_AS_FN:${no_asm}:win32",
 473 "VC-WIN64A","cl::::WIN64A::SIXTY_FOUR_BIT RC4_CHUNK_LL DES_INT EXPORT_VAR_AS_FN:${no_asm}:win32",
 474
 475 # Visual C targets
 476 "VC-NT","cl::::WINNT::BN_LLONG RC4_INDEX EXPORT_VAR_AS_FN ${x86_gcc_opts}:${no_asm}:win32",
 477 "VC-CE","cl::::WINCE::BN_LLONG RC4_INDEX EXPORT_VAR_AS_FN ${x86_gcc_opts}:${no_asm}:win32",
 478 "VC-WIN32","cl::::WIN32::BN_LLONG RC4_INDEX EXPORT_VAR_AS_FN ${x86_gcc_opts}:${no_asm}:win32",
 479
 480 # Borland C++ 4.5
 481 "BC-32","bcc32::::WIN32::BN_LLONG DES_PTR RC4_INDEX EXPORT_VAR_AS_FN:${no_asm}:win32",
 482
 483 # MinGW
 484 "mingw", "gcc:-mno-cygwin -DL_ENDIAN -fomit-frame-pointer -O3 -march=i486 -Wall -D_WIN32_WINNT=0x333:::MINGW32:-lwsock32 -lgdi32:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts} EXPORT_VAR_AS_FN:${x86_coff_asm}:win32:cygwin-shared:-D_WINDLL -DOPENSSL_USE_APPLINK:-mno-cygwin -shared:.dll.a",
 485
 486 # UWIN
 487 "UWIN", "cc:-DTERMIOS -DL_ENDIAN -O -Wall:::UWIN::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${no_asm}:win32",
 488
 489 # Cygwin
 490 "Cygwin-pre1.3", "gcc:-DTERMIOS -DL_ENDIAN -fomit-frame-pointer -O3 -m486 -Wall::(unknown):CYGWIN32::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${no_asm}:win32",
 491 "Cygwin", "gcc:-DTERMIOS -DL_ENDIAN -fomit-frame-pointer -O3 -march=i486 -Wall:::CYGWIN32::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_coff_asm}:dlfcn:cygwin-shared:-D_WINDLL:-shared:.dll.a",
 492 "debug-Cygwin", "gcc:-DTERMIOS -DL_ENDIAN -march=i486 -Wall -DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DCRYPTO_MDEBUG -DOPENSSL_NO_ASM -g -Wformat -Wshadow -Wmissing-prototypes -Wmissing-declarations -Werror:::CYGWIN32:::${no_asm}:dlfcn:cygwin-shared:-D_WINDLL:-shared:.dll.a",
 493
 494 # NetWare from David Ward (dsward@novell.com)
 495 # requires either MetroWerks NLM development tools, or gcc / nlmconv
 496 # NetWare defaults socket bio to WinSock sockets. However,
 497 # the builds can be configured to use BSD sockets instead.
 498 # netware-clib => legacy CLib c-runtime support
 499 "netware-clib", "mwccnlm::::::${x86_gcc_opts}::",
 500 "netware-clib-bsdsock", "mwccnlm::::::${x86_gcc_opts}::",
 501 "netware-clib-gcc", "i586-netware-gcc:-nostdinc -I/ndk/nwsdk/include/nlm -I/ndk/ws295sdk/include -DL_ENDIAN -DNETWARE_CLIB -DOPENSSL_SYSNAME_NETWARE -O2 -Wall:::::${x86_gcc_opts}::",
 502 "netware-clib-bsdsock-gcc", "i586-netware-gcc:-nostdinc -I/ndk/nwsdk/include/nlm -DNETWARE_BSDSOCK -DNETDB_USE_INTERNET -DL_ENDIAN -DNETWARE_CLIB -DOPENSSL_SYSNAME_NETWARE -O2 -Wall:::::${x86_gcc_opts}::",
 503 # netware-libc => LibC/NKS support
 504 "netware-libc", "mwccnlm::::::BN_LLONG ${x86_gcc_opts}::",
 505 "netware-libc-bsdsock", "mwccnlm::::::BN_LLONG ${x86_gcc_opts}::",
 506 "netware-libc-gcc", "i586-netware-gcc:-nostdinc -I/ndk/libc/include -I/ndk/libc/include/winsock -DL_ENDIAN -DNETWARE_LIBC -DOPENSSL_SYSNAME_NETWARE -DTERMIO -O2 -Wall:::::BN_LLONG ${x86_gcc_opts}::",
 507 "netware-libc-bsdsock-gcc", "i586-netware-gcc:-nostdinc -I/ndk/libc/include -DNETWARE_BSDSOCK -DL_ENDIAN -DNETWARE_LIBC -DOPENSSL_SYSNAME_NETWARE -DTERMIO -O2 -Wall:::::BN_LLONG ${x86_gcc_opts}::",
 508
 509 # DJGPP
 510 "DJGPP", "gcc:-I/dev/env/WATT_ROOT/inc -DTERMIOS -DL_ENDIAN -fomit-frame-pointer -O2 -Wall:::MSDOS:-L/dev/env/WATT_ROOT/lib -lwatt:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_out_asm}:",
 511
 512 # Ultrix from Bernhard Simon <simon@zid.tuwien.ac.at>
 513 "ultrix-cc","cc:-std1 -O -Olimit 2500 -DL_ENDIAN::(unknown):::::::",
 514 "ultrix-gcc","gcc:-O3 -DL_ENDIAN::(unknown):::BN_LLONG::::",
 515 # K&R C is no longer supported; you need gcc on old Ultrix installations
 516 ##"ultrix","cc:-O2 -DNOPROTO -DNOCONST -DL_ENDIAN::(unknown):::::::",
 517
 518 ##### MacOS X (a.k.a. Rhapsody or Darwin) setup
 519 "rhapsody-ppc-cc","cc:-O3 -DB_ENDIAN::(unknown):MACOSX_RHAPSODY::BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${no_asm}::",
 520 "darwin-ppc-cc","cc:-arch ppc -O3 -DB_ENDIAN::-D_REENTRANT:MACOSX:-Wl,-search_paths_first%:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR::osx_ppc32.o::::::::::dlfcn:darwin-shared:-fPIC -fno-common:-arch ppc -dynamiclib:.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
 521 "darwin64-ppc-cc","cc:-arch ppc64 -O3 -DB_ENDIAN::-D_REENTRANT:MACOSX:-Wl,-search_paths_first%:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR::osx_ppc64.o::::::::::dlfcn:darwin-shared:-fPIC -fno-common:-arch ppc64 -dynamiclib:.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
 522 "darwin-i386-cc","cc:-arch i386 -O3 -fomit-frame-pointer -DL_ENDIAN::-D_REENTRANT:MACOSX:-Wl,-search_paths_first%:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${no_asm}:dlfcn:darwin-shared:-fPIC -fno-common:-arch i386 -dynamiclib:.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
 523 "debug-darwin-i386-cc","cc:-arch i386 -g3 -DL_ENDIAN::-D_REENTRANT:MACOSX:-Wl,-search_paths_first%:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${no_asm}:dlfcn:darwin-shared:-fPIC -fno-common:-arch i386 -dynamiclib:.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
 524 "darwin64-x86_64-cc","cc:-arch x86_64 -O3 -fomit-frame-pointer -DL_ENDIAN -DMD32_REG_T=int -Wall::-D_REENTRANT:MACOSX:-Wl,-search_paths_first%:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK BF_PTR2 DES_INT DES_UNROLL:${no_asm}:dlfcn:darwin-shared:-fPIC -fno-common:-arch x86_64 -dynamiclib:.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
 525 "debug-darwin-ppc-cc","cc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DCRYPTO_MDEBUG -DB_ENDIAN -g -Wall -O::-D_REENTRANT:MACOSX::BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR::osx_ppc32.o::::::::::dlfcn:darwin-shared:-fPIC -fno-common:-dynamiclib:.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
 526
 527 ##### A/UX
 528 "aux3-gcc","gcc:-O2 -DTERMIO::(unknown):AUX:-lbsd:RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:::",
 529
 530 ##### Sony NEWS-OS 4.x
 531 "newsos4-gcc","gcc:-O -DB_ENDIAN::(unknown):NEWS4:-lmld -liberty:BN_LLONG RC4_CHAR RC4_CHUNK DES_PTR DES_RISC1 DES_UNROLL BF_PTR::::",
 532
 533 ##### GNU Hurd
 534 "hurd-x86",  "gcc:-DL_ENDIAN -DTERMIOS -O3 -fomit-frame-pointer -march=i486 -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC",
 535
 536 ##### OS/2 EMX
 537 "OS2-EMX", "gcc::::::::",
 538
 539 ##### VxWorks for various targets
 540 "vxworks-ppc405","ccppc:-g -msoft-float -mlongcall -DCPU=PPC405 -I\$(WIND_BASE)/target/h:::VXWORKS:-r:::::",
 541 "vxworks-ppc750","ccppc:-ansi -nostdinc -DPPC750 -D_REENTRANT -fvolatile -fno-builtin -fno-for-scope -fsigned-char -Wall -msoft-float -mlongcall -DCPU=PPC604 -I\$(WIND_BASE)/target/h \$(DEBUG_FLAG):::VXWORKS:-r:::::",
 542 "vxworks-ppc750-debug","ccppc:-ansi -nostdinc -DPPC750 -D_REENTRANT -fvolatile -fno-builtin -fno-for-scope -fsigned-char -Wall -msoft-float -mlongcall -DCPU=PPC604 -I\$(WIND_BASE)/target/h -DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DCRYPTO_MDEBUG -DPEDANTIC -DDEBUG_SAFESTACK -DDEBUG -g:::VXWORKS:-r:::::",
 543 "vxworks-ppc860","ccppc:-nostdinc -msoft-float -DCPU=PPC860 -DNO_STRINGS_H -I\$(WIND_BASE)/target/h:::VXWORKS:-r:::::",
 544 "vxworks-mipsle","ccmips:-B\$(WIND_BASE)/host/\$(WIND_HOST_TYPE)/lib/gcc-lib/ -DL_ENDIAN -EL -Wl,-EL -mips2 -mno-branch-likely -G 0 -fno-builtin -msoft-float -DCPU=MIPS32 -DMIPSEL -DNO_STRINGS_H -I\$(WIND_BASE)/target/h:::VXWORKS:-r::${no_asm}::::::ranlibmips:",
 545
 546 ##### Compaq Non-Stop Kernel (Tandem)
 547 "tandem-c89","c89:-Ww -D__TANDEM -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1 -D_TANDEM_SOURCE -DB_ENDIAN::(unknown):::THIRTY_TWO_BIT:::",
 548
 549 );
 550
 551 my @MK1MF_Builds=qw(VC-WIN64I VC-WIN64A
 552                     VC-NT VC-CE VC-WIN32
 553                     BC-32 OS2-EMX
 554                     netware-clib netware-clib-bsdsock
 555                     netware-libc netware-libc-bsdsock);
 556
 557 my $idx = 0;
 558 my $idx_cc = $idx++;
 559 my $idx_cflags = $idx++;
 560 my $idx_unistd = $idx++;
 561 my $idx_thread_cflag = $idx++;
 562 my $idx_sys_id = $idx++;
 563 my $idx_lflags = $idx++;
 564 my $idx_bn_ops = $idx++;
 565 my $idx_cpuid_obj = $idx++;
 566 my $idx_bn_obj = $idx++;
 567 my $idx_des_obj = $idx++;
 568 my $idx_aes_obj = $idx++;
 569 my $idx_bf_obj = $idx++;
 570 my $idx_md5_obj = $idx++;
 571 my $idx_sha1_obj = $idx++;
 572 my $idx_cast_obj = $idx++;
 573 my $idx_rc4_obj = $idx++;
 574 my $idx_rmd160_obj = $idx++;
 575 my $idx_rc5_obj = $idx++;
 576 my $idx_dso_scheme = $idx++;
 577 my $idx_shared_target = $idx++;
 578 my $idx_shared_cflag = $idx++;
 579 my $idx_shared_ldflag = $idx++;
 580 my $idx_shared_extension = $idx++;
 581 my $idx_ranlib = $idx++;
 582 my $idx_arflags = $idx++;
 583
 584 my $prefix="";
 585 my $openssldir="";
 586 my $exe_ext="";
 587 my $install_prefix="";
 588 my $fipslibdir="/usr/local/ssl/fips-1.0/lib/";
 589 my $nofipscanistercheck=0;
 590 my $fipsdso=0;
 591 my $fipscanisterinternal="n";
 592 my $baseaddr="0xFB00000";
 593 my $no_threads=0;
 594 my $threads=0;
 595 my $no_shared=0; # but "no-shared" is default
 596 my $zlib=1;      # but "no-zlib" is default
 597 my $no_krb5=0;   # but "no-krb5" is implied unless "--with-krb5-..." is used
 598 my $no_rfc3779=1; # but "no-rfc3779" is default
 599 my $montasm=1;   # but "no-montasm" is default
 600 my $no_asm=0;
 601 my $no_dso=0;
 602 my $no_gmp=0;
 603 my @skip=();
 604 my $Makefile="Makefile";
 605 my $des_locl="crypto/des/des_locl.h";
 606 my $des ="crypto/des/des.h";
 607 my $bn  ="crypto/bn/bn.h";
 608 my $md2 ="crypto/md2/md2.h";
 609 my $rc4 ="crypto/rc4/rc4.h";
 610 my $rc4_locl="crypto/rc4/rc4_locl.h";
 611 my $idea        ="crypto/idea/idea.h";
 612 my $rc2 ="crypto/rc2/rc2.h";
 613 my $bf  ="crypto/bf/bf_locl.h";
 614 my $bn_asm      ="bn_asm.o";
 615 my $des_enc="des_enc.o fcrypt_b.o";
 616 my $fips_des_enc="fips_des_enc.o";
 617 my $aes_enc="aes_core.o aes_cbc.o";
 618 my $bf_enc      ="bf_enc.o";
 619 my $cast_enc="c_enc.o";
 620 my $rc4_enc="rc4_enc.o rc4_skey.o";
 621 my $rc5_enc="rc5_enc.o";
 622 my $md5_obj="";
 623 my $sha1_obj="";
 624 my $rmd160_obj="";
 625 my $processor="";
 626 my $default_ranlib;
 627 my $perl;
 628 my $fips=0;
 629
 630
 631 # All of the following is disabled by default (RC5 was enabled before 0.9.8):
 632
 633 my %disabled = ( # "what"         => "comment" [or special keyword "experimental"]
 634                  "camellia"       => "default",
 635                  "capieng"        => "default",
 636                  "cms"            => "default",
 637                  "gmp"            => "default",
 638                  "jpake"          => "experimental",
 639                  "mdc2"           => "default",
 640                  "montasm"        => "default", # explicit option in 0.9.8 only (implicitly enabled in 0.9.9)
 641                  "rc5"            => "default",
 642                  "rfc3779"        => "default",
 643                  "seed"           => "default",
 644                  "shared"         => "default",
 645                  "zlib"           => "default",
 646                  "zlib-dynamic"   => "default"
 647                );
 648 my @experimental = ();
 649
 650 # This is what $depflags will look like with the above defaults
 651 # (we need this to see if we should advise the user to run "make depend"):
 652 my $default_depflags = " -DOPENSSL_NO_CAMELLIA -DOPENSSL_NO_CAPIENG -DOPENSSL_NO_CMS -DOPENSSL_NO_GMP -DOPENSSL_NO_JPAKE -DOPENSSL_NO_MDC2 -DOPENSSL_NO_RC5 -DOPENSSL_NO_RFC3779 -DOPENSSL_NO_SEED";
 653
 654
 655 # Explicit "no-..." options will be collected in %disabled along with the defaults.
 656 # To remove something from %disabled, use "enable-foo" (unless it's experimental).
 657 # For symmetry, "disable-foo" is a synonym for "no-foo".
 658
 659 # For features called "experimental" here, a more explicit "experimental-foo" is needed to enable.
 660 # We will collect such requests in @experimental.
 661 # To avoid accidental use of experimental features, applications will have to use -DOPENSSL_EXPERIMENTAL_FOO.
 662
 663
 664 my $no_sse2=0;
 665
 666 &usage if ($#ARGV < 0);
 667
 668 my $flags;
 669 my $depflags;
 670 my $openssl_experimental_defines;
 671 my $openssl_algorithm_defines;
 672 my $openssl_thread_defines;
 673 my $openssl_sys_defines="";
 674 my $openssl_other_defines;
 675 my $libs;
 676 my $libkrb5="";
 677 my $target;
 678 my $options;
 679 my $symlink;
 680 my $make_depend=0;
 681 my %withargs=();
 682
 683 my @argvcopy=@ARGV;
 684 my $argvstring="";
 685 my $argv_unprocessed=1;
 686
 687 while($argv_unprocessed)
 688         {
 689         $flags="";
 690         $depflags="";
 691         $openssl_experimental_defines="";
 692         $openssl_algorithm_defines="";
 693         $openssl_thread_defines="";
 694         $openssl_sys_defines="";
 695         $openssl_other_defines="";
 696         $libs="";
 697         $target="";
 698         $options="";
 699         $symlink=1;
 700
 701         $argv_unprocessed=0;
 702         $argvstring=join(' ',@argvcopy);
 703
 704 PROCESS_ARGS:
 705         foreach (@argvcopy)
 706                 {
 707                 s /^-no-/no-/; # some people just can't read the instructions
 708
 709                 # rewrite some options in "enable-..." form
 710                 s /^-?-?shared$/enable-shared/;
 711                 s /^threads$/enable-threads/;
 712                 s /^zlib$/enable-zlib/;
 713                 s /^zlib-dynamic$/enable-zlib-dynamic/;
 714
 715                 if (/^no-(.+)$/ || /^disable-(.+)$/)
 716                         {
 717                         if (!($disabled{$1} eq "experimental"))
 718                                 {
 719                                 if ($1 eq "ssl")
 720                                         {
 721                                         $disabled{"ssl2"} = "option(ssl)";
 722                                         $disabled{"ssl3"} = "option(ssl)";
 723                                         }
 724                                 elsif ($1 eq "tls")
 725                                         {
 726                                         $disabled{"tls1"} = "option(tls)"
 727                                         }
 728                                 else
 729                                         {
 730                                         $disabled{$1} = "option";
 731                                         }
 732                                 }
 733                         }
 734                 elsif (/^enable-(.+)$/ || /^experimental-(.+)$/)
 735                         {
 736                         my $algo = $1;
 737                         if ($disabled{$algo} eq "experimental")
 738                                 {
 739                                 die "You are requesting an experimental feature; please say 'experimental-$algo' if you are sure\n"
 740                                         unless (/^experimental-/);
 741                                 push @experimental, $algo;
 742                                 }
 743                         delete $disabled{$algo};
 744
 745                         $threads = 1 if ($algo eq "threads");
 746                         }
 747                 elsif (/^--test-sanity$/)
 748                         {
 749                         exit(&test_sanity());
 750                         }
 751                 elsif (/^reconfigure/ || /^reconf/)
 752                         {
 753                         if (open(IN,"<$Makefile"))
 754                                 {
 755                                 while (<IN>)
 756                                         {
 757                                         chomp;
 758                                         if (/^CONFIGURE_ARGS=(.*)/)
 759                                                 {
 760                                                 $argvstring=$1;
 761                                                 @argvcopy=split(' ',$argvstring);
 762                                                 die "Incorrect data to reconfigure, please do a normal configuration\n"
 763                                                         if (grep(/^reconf/,@argvcopy));
 764                                                 print "Reconfiguring with: $argvstring\n";
 765                                                 $argv_unprocessed=1;
 766                                                 close(IN);
 767                                                 last PROCESS_ARGS;
 768                                                 }
 769                                         }
 770                                 close(IN);
 771                                 }
 772                         die "Insufficient data to reconfigure, please do a normal configuration\n";
 773                         }
 774                 elsif (/^386$/)
 775                         { $processor=386; }
 776                 elsif (/^fips$/)
 777                         {
 778                         $fips=1;
 779                         }
 780                 elsif (/^rsaref$/)
 781                         {
 782                         # No RSAref support any more since it's not needed.
 783                         # The check for the option is there so scripts aren't
 784                         # broken
 785                         }
 786                 elsif (/^nofipscanistercheck$/)
 787                         {
 788                         $fips = 1;
 789                         $nofipscanistercheck = 1;
 790                         }
 791                 elsif (/^fipscanisterbuild$/)
 792                         {
 793                         $fips = 1;
 794                         $nofipscanistercheck = 1;
 795                         $fipslibdir="";
 796                         $fipscanisterinternal="y";
 797                         }
 798                 elsif (/^fipsdso$/)
 799                         {
 800                         $fips = 1;
 801                         $nofipscanistercheck = 1;
 802                         $fipslibdir="";
 803                         $fipscanisterinternal="y";
 804                         $fipsdso = 1;
 805                         }
 806                 elsif (/^[-+]/)
 807                         {
 808                         if (/^-[lL](.*)$/)
 809                                 {
 810                                 $libs.=$_." ";
 811                                 }
 812                         elsif (/^-[^-]/ or /^\+/)
 813                                 {
 814                                 $flags.=$_." ";
 815                                 }
 816                         elsif (/^--prefix=(.*)$/)
 817                                 {
 818                                 $prefix=$1;
 819                                 }
 820                         elsif (/^--openssldir=(.*)$/)
 821                                 {
 822                                 $openssldir=$1;
 823                                 }
 824                         elsif (/^--install.prefix=(.*)$/)
 825                                 {
 826                                 $install_prefix=$1;
 827                                 }
 828                         elsif (/^--with-krb5-(dir|lib|include|flavor)=(.*)$/)
 829                                 {
 830                                 $withargs{"krb5-".$1}=$2;
 831                                 }
 832                         elsif (/^--with-zlib-lib=(.*)$/)
 833                                 {
 834                                 $withargs{"zlib-lib"}=$1;
 835                                 }
 836                         elsif (/^--with-zlib-include=(.*)$/)
 837                                 {
 838                                 $withargs{"zlib-include"}="-I$1";
 839                                 }
 840                         elsif (/^--with-fipslibdir=(.*)$/)
 841                                 {
 842                                 $fipslibdir="$1/";
 843                                 }
 844                         elsif (/^--with-baseaddr=(.*)$/)
 845                                 {
 846                                 $baseaddr="$1";
 847                                 }
 848                         else
 849                                 {
 850                                 print STDERR $usage;
 851                                 exit(1);
 852                                 }
 853                         }
 854                 elsif ($_ =~ /^([^:]+):(.+)$/)
 855                         {
 856                         eval "\$table{\$1} = \"$2\""; # allow $xxx constructs in the string
 857                         $target=$1;
 858                         }
 859                 else
 860                         {
 861                         die "target already defined - $target (offending arg: $_)\n" if ($target ne "");
 862                         $target=$_;
 863                         }
 864
 865                 unless ($_ eq $target || /^no-/ || /^disable-/)
 866                         {
 867                         # "no-..." follows later after implied disactivations
 868                         # have been derived.  (Don't take this too seroiusly,
 869                         # we really only write OPTIONS to the Makefile out of
 870                         # nostalgia.)
 871
 872                         if ($options eq "")
 873                                 { $options = $_; }
 874                         else
 875                                 { $options .= " ".$_; }
 876                         }
 877                 }
 878         }
 879
 880
 881
 882 if ($processor eq "386")
 883         {
 884         $disabled{"sse2"} = "forced";
 885         }
 886
 887 if (!defined($withargs{"krb5-flavor"}) || $withargs{"krb5-flavor"} eq "")
 888         {
 889         $disabled{"krb5"} = "krb5-flavor not specified";
 890         }
 891
 892 if (!defined($disabled{"zlib-dynamic"}))
 893         {
 894         # "zlib-dynamic" was specifically enabled, so enable "zlib"
 895         delete $disabled{"zlib"};
 896         }
 897
 898 if (defined($disabled{"rijndael"}))
 899         {
 900         $disabled{"aes"} = "forced";
 901         }
 902 if (defined($disabled{"des"}))
 903         {
 904         $disabled{"mdc2"} = "forced";
 905         }
 906 if (defined($disabled{"ec"}))
 907         {
 908         $disabled{"ecdsa"} = "forced";
 909         $disabled{"ecdh"} = "forced";
 910         }
 911
 912 # SSL 2.0 requires MD5 and RSA
 913 if (defined($disabled{"md5"}) || defined($disabled{"rsa"}))
 914         {
 915         $disabled{"ssl2"} = "forced";
 916         }
 917
 918 # SSL 3.0 and TLS requires MD5 and SHA and either RSA or DSA+DH
 919 if (defined($disabled{"md5"}) || defined($disabled{"sha"})
 920     || (defined($disabled{"rsa"})
 921         && (defined($disabled{"dsa"}) || defined($disabled{"dh"}))))
 922         {
 923         $disabled{"ssl3"} = "forced";
 924         $disabled{"tls1"} = "forced";
 925         }
 926
 927 if (defined($disabled{"tls1"}))
 928         {
 929         $disabled{"tlsext"} = "forced";
 930         }
 931
 932 if ($target eq "TABLE") {
 933         foreach $target (sort keys %table) {
 934                 print_table_entry($target);
 935         }
 936         exit 0;
 937 }
 938
 939 if ($target eq "LIST") {
 940         foreach (sort keys %table) {
 941                 print;
 942                 print "\n";
 943         }
 944         exit 0;
 945 }
 946
 947 if ($target =~ m/^CygWin32(-.*)$/) {
 948         $target = "Cygwin".$1;
 949 }
 950
 951 print "Configuring for $target\n";
 952
 953 &usage if (!defined($table{$target}));
 954
 955 my @fields = split(/\s*:\s*/,$table{$target} . ":" x 30 , -1);
 956 my $cc = $fields[$idx_cc];
 957 # Allow environment CC to override compiler...
 958 if($ENV{CC}) {
 959     $cc = $ENV{CC};
 960 }
 961 my $cflags = $fields[$idx_cflags];
 962 my $unistd = $fields[$idx_unistd];
 963 my $thread_cflag = $fields[$idx_thread_cflag];
 964 my $sys_id = $fields[$idx_sys_id];
 965 my $lflags = $fields[$idx_lflags];
 966 my $bn_ops = $fields[$idx_bn_ops];
 967 my $cpuid_obj = $fields[$idx_cpuid_obj];
 968 my $bn_obj = $fields[$idx_bn_obj];
 969 my $des_obj = $fields[$idx_des_obj];
 970 my $aes_obj = $fields[$idx_aes_obj];
 971 my $bf_obj = $fields[$idx_bf_obj];
 972 my $md5_obj = $fields[$idx_md5_obj];
 973 my $sha1_obj = $fields[$idx_sha1_obj];
 974 my $cast_obj = $fields[$idx_cast_obj];
 975 my $rc4_obj = $fields[$idx_rc4_obj];
 976 my $rmd160_obj = $fields[$idx_rmd160_obj];
 977 my $rc5_obj = $fields[$idx_rc5_obj];
 978 my $dso_scheme = $fields[$idx_dso_scheme];
 979 my $shared_target = $fields[$idx_shared_target];
 980 my $shared_cflag = $fields[$idx_shared_cflag];
 981 my $shared_ldflag = $fields[$idx_shared_ldflag];
 982 my $shared_extension = $fields[$idx_shared_extension];
 983 my $ranlib = $fields[$idx_ranlib];
 984 my $arflags = $fields[$idx_arflags];
 985
 986 if ($fips)
 987         {
 988         delete $disabled{"shared"} if ($disabled{"shared"} eq "default");
 989         $disabled{"asm"}="forced"
 990                 if ($target !~ "VC\-.*" &&
 991                     "$cpuid_obj:$bn_obj:$aes_obj:$des_obj:$sha1_obj" eq "::::");
 992         }
 993
 994 foreach (sort @experimental)
 995         {
 996         my $ALGO;
 997         ($ALGO = $_) =~ tr/[a-z]/[A-Z]/;
 998
 999         # opensslconf.h will set OPENSSL_NO_... unless OPENSSL_EXPERIMENTAL_... is defined
1000         $openssl_experimental_defines .= "#define OPENSSL_NO_$ALGO\n";
1001         $cflags .= " -DOPENSSL_EXPERIMENTAL_$ALGO";
1002         }
1003
1004 foreach (sort (keys %disabled))
1005         {
1006         $options .= " no-$_";
1007
1008         printf "    no-%-12s %-10s", $_, "[$disabled{$_}]";
1009
1010         if (/^dso$/)
1011                 { $no_dso = 1; }
1012         elsif (/^threads$/)
1013                 { $no_threads = 1; }
1014         elsif (/^shared$/)
1015                 { $no_shared = 1; }
1016         elsif (/^zlib$/)
1017                 { $zlib = 0; }
1018         elsif (/^montasm$/)
1019                 { $montasm = 0; }
1020         elsif (/^static-engine$/)
1021                 { }
1022         elsif (/^zlib-dynamic$/)
1023                 { }
1024         elsif (/^symlinks$/)
1025                 { $symlink = 0; }
1026         elsif (/^sse2$/)
1027                 { $no_sse2 = 1; }
1028         else
1029                 {
1030                 my ($ALGO, $algo);
1031                 ($ALGO = $algo = $_) =~ tr/[a-z]/[A-Z]/;
1032
1033                 if (/^asm$/ || /^err$/ || /^hw$/ || /^hw-/)
1034                         {
1035                         $openssl_other_defines .= "#define OPENSSL_NO_$ALGO\n";
1036                         print " OPENSSL_NO_$ALGO";
1037
1038                         if (/^err$/)    { $flags .= "-DOPENSSL_NO_ERR "; }
1039                         elsif (/^asm$/) { $no_asm = 1; }
1040                         }
1041                 else
1042                         {
1043                         $openssl_algorithm_defines .= "#define OPENSSL_NO_$ALGO\n";
1044                         print " OPENSSL_NO_$ALGO";
1045
1046                         if (/^krb5$/)
1047                                 { $no_krb5 = 1; }
1048                         else
1049                                 {
1050                                 push @skip, $algo;
1051                                 print " (skip dir)";
1052
1053                                 $depflags .= " -DOPENSSL_NO_$ALGO";
1054                                 }
1055                         }
1056                 }
1057
1058         print "\n";
1059         }
1060
1061 my $IsMK1MF=scalar grep /^$target$/,@MK1MF_Builds;
1062
1063 $IsMK1MF=1 if ($target eq "mingw" && $^O ne "cygwin" && !is_msys());
1064
1065 $no_shared = 0 if ($fipsdso && !$IsMK1MF);
1066
1067 $exe_ext=".exe" if ($target eq "Cygwin" || $target eq "DJGPP" || $target eq "mingw");
1068 $exe_ext=".nlm" if ($target =~ /netware/);
1069 $exe_ext=".pm"  if ($target =~ /vos/);
1070 if ($openssldir eq "" and $prefix eq "")
1071         {
1072         if ($fips)
1073                 {
1074                 $openssldir="/usr/local/ssl/fips";
1075                 }
1076         else
1077                 {
1078                 $openssldir="/usr/local/ssl";
1079                 }
1080         }
1081 $prefix=$openssldir if $prefix eq "";
1082
1083 $default_ranlib= &which("ranlib") or $default_ranlib="true";
1084 $perl=$ENV{'PERL'} or $perl=&which("perl5") or $perl=&which("perl")
1085   or $perl="perl";
1086
1087 chop $openssldir if $openssldir =~ /\/$/;
1088 chop $prefix if $prefix =~ /.\/$/;
1089
1090 $openssldir=$prefix . "/ssl" if $openssldir eq "";
1091 $openssldir=$prefix . "/" . $openssldir if $openssldir !~ /(^\/|^[a-zA-Z]:[\\\/])/;
1092
1093
1094 print "IsMK1MF=$IsMK1MF\n";
1095
1096 # '%' in $lflags is used to split flags to "pre-" and post-flags
1097 my ($prelflags,$postlflags)=split('%',$lflags);
1098 if (defined($postlflags))       { $lflags=$postlflags;  }
1099 else                            { $lflags=$prelflags; undef $prelflags; }
1100
1101 my $no_shared_warn=0;
1102 my $no_user_cflags=0;
1103
1104 if ($flags ne "")       { $cflags="$flags$cflags"; }
1105 else                    { $no_user_cflags=1;       }
1106
1107 # Kerberos settings.  The flavor must be provided from outside, either through
1108 # the script "config" or manually.
1109 if (!$no_krb5)
1110         {
1111         my ($lresolv, $lpath, $lext);
1112         if ($withargs{"krb5-flavor"} =~ /^[Hh]eimdal$/)
1113                 {
1114                 die "Sorry, Heimdal is currently not supported\n";
1115                 }
1116         ##### HACK to force use of Heimdal.
1117         ##### WARNING: Since we don't really have adequate support for Heimdal,
1118         #####          using this will break the build.  You'll have to make
1119         #####          changes to the source, and if you do, please send
1120         #####          patches to openssl-dev@openssl.org
1121         if ($withargs{"krb5-flavor"} =~ /^force-[Hh]eimdal$/)
1122                 {
1123                 warn "Heimdal isn't really supported.  Your build WILL break\n";
1124                 warn "If you fix the problems, please send a patch to openssl-dev\@openssl.org\n";
1125                 $withargs{"krb5-dir"} = "/usr/heimdal"
1126                         if $withargs{"krb5-dir"} eq "";
1127                 $withargs{"krb5-lib"} = "-L".$withargs{"krb5-dir"}.
1128                         "/lib -lgssapi -lkrb5 -lcom_err"
1129                         if $withargs{"krb5-lib"} eq "" && !$IsMK1MF;
1130                 $cflags="-DKRB5_HEIMDAL $cflags";
1131                 }
1132         if ($withargs{"krb5-flavor"} =~ /^[Mm][Ii][Tt]/)
1133                 {
1134                 $withargs{"krb5-dir"} = "/usr/kerberos"
1135                         if $withargs{"krb5-dir"} eq "";
1136                 $withargs{"krb5-lib"} = "-L".$withargs{"krb5-dir"}.
1137                         "/lib -lgssapi_krb5 -lkrb5 -lcom_err -lk5crypto"
1138                         if $withargs{"krb5-lib"} eq "" && !$IsMK1MF;
1139                 $cflags="-DKRB5_MIT $cflags";
1140                 $withargs{"krb5-flavor"} =~ s/^[Mm][Ii][Tt][._-]*//;
1141                 if ($withargs{"krb5-flavor"} =~ /^1[._-]*[01]/)
1142                         {
1143                         $cflags="-DKRB5_MIT_OLD11 $cflags";
1144                         }
1145                 }
1146         LRESOLV:
1147         foreach $lpath ("/lib", "/usr/lib")
1148                 {
1149                 foreach $lext ("a", "so")
1150                         {
1151                         $lresolv = "$lpath/libresolv.$lext";
1152                         last LRESOLV    if (-r "$lresolv");
1153                         $lresolv = "";
1154                         }
1155                 }
1156         $withargs{"krb5-lib"} .= " -lresolv"
1157                 if ("$lresolv" ne "");
1158         $withargs{"krb5-include"} = "-I".$withargs{"krb5-dir"}."/include"
1159                 if $withargs{"krb5-include"} eq "" &&
1160                    $withargs{"krb5-dir"} ne "";
1161         }
1162
1163 # The DSO code currently always implements all functions so that no
1164 # applications will have to worry about that from a compilation point
1165 # of view. However, the "method"s may return zero unless that platform
1166 # has support compiled in for them. Currently each method is enabled
1167 # by a define "DSO_<name>" ... we translate the "dso_scheme" config
1168 # string entry into using the following logic;
1169 my $dso_cflags;
1170 if (!$no_dso && $dso_scheme ne "")
1171         {
1172         $dso_scheme =~ tr/[a-z]/[A-Z]/;
1173         if ($dso_scheme eq "DLFCN")
1174                 {
1175                 $dso_cflags = "-DDSO_DLFCN -DHAVE_DLFCN_H";
1176                 }
1177         elsif ($dso_scheme eq "DLFCN_NO_H")
1178                 {
1179                 $dso_cflags = "-DDSO_DLFCN";
1180                 }
1181         else
1182                 {
1183                 $dso_cflags = "-DDSO_$dso_scheme";
1184                 }
1185         $cflags = "$dso_cflags $cflags";
1186         }
1187
1188 my $thread_cflags;
1189 my $thread_defines;
1190 if ($thread_cflag ne "(unknown)" && !$no_threads)
1191         {
1192         # If we know how to do it, support threads by default.
1193         $threads = 1;
1194         }
1195 if ($thread_cflag eq "(unknown)" && $threads)
1196         {
1197         # If the user asked for "threads", [s]he is also expected to
1198         # provide any system-dependent compiler options that are
1199         # necessary.
1200         if ($no_user_cflags)
1201                 {
1202                 print "You asked for multi-threading support, but didn't\n";
1203                 print "provide any system-specific compiler options\n";
1204                 exit(1);
1205                 }
1206         $thread_cflags="-DOPENSSL_THREADS $cflags" ;
1207         $thread_defines .= "#define OPENSSL_THREADS\n";
1208         }
1209 else
1210         {
1211         $thread_cflags="-DOPENSSL_THREADS $thread_cflag $cflags";
1212         $thread_defines .= "#define OPENSSL_THREADS\n";
1213 #       my $def;
1214 #       foreach $def (split ' ',$thread_cflag)
1215 #               {
1216 #               if ($def =~ s/^-D// && $def !~ /^_/)
1217 #                       {
1218 #                       $thread_defines .= "#define $def\n";
1219 #                       }
1220 #               }
1221         }
1222
1223 $lflags="$libs$lflags" if ($libs ne "");
1224
1225 if ($no_asm)
1226         {
1227         $cpuid_obj=$bn_obj=$des_obj=$aes_obj=$bf_obj=$cast_obj=$rc4_obj=$rc5_obj="";
1228         $sha1_obj=$md5_obj=$rmd160_obj="";
1229         $cflags=~s/\-D[BL]_ENDIAN//             if ($fips);
1230         $thread_cflags=~s/\-D[BL]_ENDIAN//      if ($fips);
1231         }
1232 if ($montasm)
1233         {
1234         $bn_obj =~ s/MAYBE-MO86-/mo86-/;
1235         }
1236 else
1237         {
1238         $bn_obj =~ s/MAYBE-MO86-[a-z.]*//;
1239         }
1240
1241 if (!$no_shared)
1242         {
1243         $cast_obj="";   # CAST assembler is not PIC
1244         }
1245
1246 if ($threads)
1247         {
1248         $cflags=$thread_cflags;
1249         $openssl_thread_defines .= $thread_defines;
1250         }
1251
1252 if ($zlib)
1253         {
1254         $cflags = "-DZLIB $cflags";
1255         if (defined($disabled{"zlib-dynamic"}))
1256                 {
1257                 $lflags = "$lflags -lz";
1258                 }
1259         else
1260                 {
1261                 $cflags = "-DZLIB_SHARED $cflags";
1262                 }
1263         }
1264
1265 # You will find shlib_mark1 and shlib_mark2 explained in Makefile.org
1266 my $shared_mark = "";
1267 if ($shared_target eq "")
1268         {
1269         $no_shared_warn = 1 if !$no_shared && !$fips;
1270         $no_shared = 1;
1271         }
1272 if (!$no_shared)
1273         {
1274         if ($shared_cflag ne "")
1275                 {
1276                 $cflags = "$shared_cflag -DOPENSSL_PIC $cflags";
1277                 }
1278         }
1279
1280 if (!$IsMK1MF)
1281         {
1282         if ($no_shared)
1283                 {
1284                 $openssl_other_defines.="#define OPENSSL_NO_DYNAMIC_ENGINE\n";
1285                 }
1286         else
1287                 {
1288                 $openssl_other_defines.="#define OPENSSL_NO_STATIC_ENGINE\n";
1289                 }
1290         }
1291
1292 $cpuid_obj.=" uplink.o uplink-cof.o" if ($cflags =~ /\-DOPENSSL_USE_APPLINK/);
1293
1294 #
1295 # Platform fix-ups
1296 #
1297 if ($target =~ /\-icc$/)        # Intel C compiler
1298         {
1299         my $iccver=0;
1300         if (open(FD,"$cc -V 2>&1 |"))
1301                 {
1302                 while(<FD>) { $iccver=$1 if (/Version ([0-9]+)\./); }
1303                 close(FD);
1304                 }
1305         if ($iccver>=8)
1306                 {
1307                 # Eliminate unnecessary dependency from libirc.a. This is
1308                 # essential for shared library support, as otherwise
1309                 # apps/openssl can end up in endless loop upon startup...
1310                 $cflags.=" -Dmemcpy=__builtin_memcpy -Dmemset=__builtin_memset";
1311                 }
1312         if ($iccver>=9)
1313                 {
1314                 $cflags.=" -i-static";
1315                 $cflags=~s/\-no_cpprt/-no-cpprt/;
1316                 }
1317         if ($iccver>=10)
1318                 {
1319                 $cflags=~s/\-i\-static/-static-intel/;
1320                 }
1321         }
1322
1323 # Unlike other OSes (like Solaris, Linux, Tru64, IRIX) BSD run-time
1324 # linkers (tested OpenBSD, NetBSD and FreeBSD) "demand" RPATH set on
1325 # .so objects. Apparently application RPATH is not global and does
1326 # not apply to .so linked with other .so. Problem manifests itself
1327 # when libssl.so fails to load libcrypto.so. One can argue that we
1328 # should engrave this into Makefile.shared rules or into BSD-* config
1329 # lines above. Meanwhile let's try to be cautious and pass -rpath to
1330 # linker only when --prefix is not /usr.
1331 if ($target =~ /^BSD\-/)
1332         {
1333         $shared_ldflag.=" -Wl,-rpath,\$(LIBRPATH)" if ($prefix !~ m|^/usr[/]*$|);
1334         }
1335
1336 if ($sys_id ne "")
1337         {
1338         #$cflags="-DOPENSSL_SYSNAME_$sys_id $cflags";
1339         $openssl_sys_defines="#define OPENSSL_SYSNAME_$sys_id\n";
1340         }
1341
1342 if ($ranlib eq "")
1343         {
1344         $ranlib = $default_ranlib;
1345         }
1346
1347 #my ($bn1)=split(/\s+/,$bn_obj);
1348 #$bn1 = "" unless defined $bn1;
1349 #$bn1=$bn_asm unless ($bn1 =~ /\.o$/);
1350 #$bn_obj="$bn1";
1351
1352 $cpuid_obj="" if ($processor eq "386");
1353
1354 $bn_obj = $bn_asm unless $bn_obj ne "";
1355 # bn86* is the only one implementing bn_*_part_words
1356 $cflags.=" -DOPENSSL_BN_ASM_PART_WORDS" if ($bn_obj =~ /bn86/);
1357 $cflags.=" -DOPENSSL_IA32_SSE2" if (!$no_sse2 && $bn_obj =~ /bn86/);
1358
1359 $cflags.=" -DOPENSSL_BN_ASM_MONT" if ($bn_obj =~ /\-mont|mo86\-/);
1360
1361 if ($fips)
1362         {
1363         $openssl_other_defines.="#define OPENSSL_FIPS\n";
1364         }
1365
1366 $des_obj=$des_enc       unless ($des_obj =~ /\.o$/);
1367 $bf_obj=$bf_enc         unless ($bf_obj =~ /\.o$/);
1368 $cast_obj=$cast_enc     unless ($cast_obj =~ /\.o$/);
1369 $rc4_obj=$rc4_enc       unless ($rc4_obj =~ /\.o$/);
1370 $rc5_obj=$rc5_enc       unless ($rc5_obj =~ /\.o$/);
1371 if ($sha1_obj =~ /\.o$/)
1372         {
1373 #       $sha1_obj=$sha1_enc;
1374         $cflags.=" -DSHA1_ASM"   if ($sha1_obj =~ /sx86/ || $sha1_obj =~ /sha1/);
1375         $cflags.=" -DSHA256_ASM" if ($sha1_obj =~ /sha256/);
1376         $cflags.=" -DSHA512_ASM" if ($sha1_obj =~ /sha512/);
1377         if ($sha1_obj =~ /sse2/)
1378             {   if ($no_sse2)
1379                 {   $sha1_obj =~ s/\S*sse2\S+//;        }
1380                 elsif ($cflags !~ /OPENSSL_IA32_SSE2/)
1381                 {   $cflags.=" -DOPENSSL_IA32_SSE2";    }
1382             }
1383         }
1384 if ($md5_obj =~ /\.o$/)
1385         {
1386 #       $md5_obj=$md5_enc;
1387         $cflags.=" -DMD5_ASM";
1388         }
1389 if ($rmd160_obj =~ /\.o$/)
1390         {
1391 #       $rmd160_obj=$rmd160_enc;
1392         $cflags.=" -DRMD160_ASM";
1393         }
1394 if ($aes_obj =~ /\.o$/)
1395         {
1396         $cflags.=" -DAES_ASM";
1397         }
1398 else    {
1399         $aes_obj=$aes_enc;
1400         }
1401
1402 # "Stringify" the C flags string.  This permits it to be made part of a string
1403 # and works as well on command lines.
1404 $cflags =~ s/([\\\"])/\\\1/g;
1405
1406 my $version = "unknown";
1407 my $version_num = "unknown";
1408 my $major = "unknown";
1409 my $minor = "unknown";
1410 my $shlib_version_number = "unknown";
1411 my $shlib_version_history = "unknown";
1412 my $shlib_major = "unknown";
1413 my $shlib_minor = "unknown";
1414
1415 open(IN,'<crypto/opensslv.h') || die "unable to read opensslv.h:$!\n";
1416 while (<IN>)
1417         {
1418         $version=$1 if /OPENSSL.VERSION.TEXT.*OpenSSL (\S+) /;
1419         $version_num=$1 if /OPENSSL.VERSION.NUMBER.*0x(\S+)/;
1420         $shlib_version_number=$1 if /SHLIB_VERSION_NUMBER *"([^"]+)"/;
1421         $shlib_version_history=$1 if /SHLIB_VERSION_HISTORY *"([^"]*)"/;
1422         }
1423 close(IN);
1424 if ($shlib_version_history ne "") { $shlib_version_history .= ":"; }
1425
1426 if ($version =~ /(^[0-9]*)\.([0-9\.]*)/)
1427         {
1428         $major=$1;
1429         $minor=$2;
1430         }
1431
1432 if ($shlib_version_number =~ /(^[0-9]*)\.([0-9\.]*)/)
1433         {
1434         $shlib_major=$1;
1435         $shlib_minor=$2;
1436         }
1437
1438 open(IN,'<Makefile.org') || die "unable to read Makefile.org:$!\n";
1439 unlink("$Makefile.new") || die "unable to remove old $Makefile.new:$!\n" if -e "$Makefile.new";
1440 open(OUT,">$Makefile.new") || die "unable to create $Makefile.new:$!\n";
1441 print OUT "### Generated automatically from Makefile.org by Configure.\n\n";
1442 my $sdirs=0;
1443 while (<IN>)
1444         {
1445         chomp;
1446         $sdirs = 1 if /^SDIRS=/;
1447         if ($sdirs) {
1448                 my $dir;
1449                 foreach $dir (@skip) {
1450                         s/(\s)$dir\s/$1/;
1451                         s/\s$dir$//;
1452                         }
1453                 }
1454         $sdirs = 0 unless /\\$/;
1455         s/fips // if (/^DIRS=/ && !$fips);
1456         s/engines // if (/^DIRS=/ && $disabled{"engine"});
1457         s/^VERSION=.*/VERSION=$version/;
1458         s/^MAJOR=.*/MAJOR=$major/;
1459         s/^MINOR=.*/MINOR=$minor/;
1460         s/^SHLIB_VERSION_NUMBER=.*/SHLIB_VERSION_NUMBER=$shlib_version_number/;
1461         s/^SHLIB_VERSION_HISTORY=.*/SHLIB_VERSION_HISTORY=$shlib_version_history/;
1462         s/^SHLIB_MAJOR=.*/SHLIB_MAJOR=$shlib_major/;
1463         s/^SHLIB_MINOR=.*/SHLIB_MINOR=$shlib_minor/;
1464         s/^SHLIB_EXT=.*/SHLIB_EXT=$shared_extension/;
1465         s/^INSTALLTOP=.*$/INSTALLTOP=$prefix/;
1466         s/^OPENSSLDIR=.*$/OPENSSLDIR=$openssldir/;
1467         s/^INSTALL_PREFIX=.*$/INSTALL_PREFIX=$install_prefix/;
1468         s/^PLATFORM=.*$/PLATFORM=$target/;
1469         s/^OPTIONS=.*$/OPTIONS=$options/;
1470         s/^CONFIGURE_ARGS=.*$/CONFIGURE_ARGS=$argvstring/;
1471         s/^CC=.*$/CC= $cc/;
1472         s/^MAKEDEPPROG=.*$/MAKEDEPPROG= $cc/ if $cc eq "gcc";
1473         s/^CFLAG=.*$/CFLAG= $cflags/;
1474         s/^DEPFLAG=.*$/DEPFLAG=$depflags/;
1475         s/^PEX_LIBS=.*$/PEX_LIBS= $prelflags/;
1476         s/^EX_LIBS=.*$/EX_LIBS= $lflags/;
1477         s/^EXE_EXT=.*$/EXE_EXT= $exe_ext/;
1478         s/^CPUID_OBJ=.*$/CPUID_OBJ= $cpuid_obj/;
1479         s/^BN_ASM=.*$/BN_ASM= $bn_obj/;
1480         s/^DES_ENC=.*$/DES_ENC= $des_obj/;
1481         s/^AES_ASM_OBJ=.*$/AES_ASM_OBJ= $aes_obj/;
1482         s/^BF_ENC=.*$/BF_ENC= $bf_obj/;
1483         s/^CAST_ENC=.*$/CAST_ENC= $cast_obj/;
1484         s/^RC4_ENC=.*$/RC4_ENC= $rc4_obj/;
1485         s/^RC5_ENC=.*$/RC5_ENC= $rc5_obj/;
1486         s/^MD5_ASM_OBJ=.*$/MD5_ASM_OBJ= $md5_obj/;
1487         s/^SHA1_ASM_OBJ=.*$/SHA1_ASM_OBJ= $sha1_obj/;
1488         s/^RMD160_ASM_OBJ=.*$/RMD160_ASM_OBJ= $rmd160_obj/;
1489         s/^PROCESSOR=.*/PROCESSOR= $processor/;
1490         s/^RANLIB=.*/RANLIB= $ranlib/;
1491         s/^ARFLAGS=.*/ARFLAGS= $arflags/;
1492         s/^PERL=.*/PERL= $perl/;
1493         s/^KRB5_INCLUDES=.*/KRB5_INCLUDES=$withargs{"krb5-include"}/;
1494         s/^LIBKRB5=.*/LIBKRB5=$withargs{"krb5-lib"}/;
1495         s/^LIBZLIB=.*/LIBZLIB=$withargs{"zlib-lib"}/;
1496         s/^ZLIB_INCLUDE=.*/ZLIB_INCLUDE=$withargs{"zlib-include"}/;
1497         s/^FIPSLIBDIR=.*/FIPSLIBDIR=$fipslibdir/;
1498         if ($fipsdso)
1499                 {
1500                 s/^FIPSCANLIB=.*/FIPSCANLIB=libfips/;
1501                 s/^SHARED_FIPS=.*/SHARED_FIPS=libfips\$(SHLIB_EXT)/;
1502                 s/^SHLIBDIRS=.*/SHLIBDIRS= crypto ssl fips/;
1503                 }
1504         else
1505                 {
1506                 s/^FIPSCANLIB=.*/FIPSCANLIB=libcrypto/ if $fips;
1507                 s/^SHARED_FIPS=.*/SHARED_FIPS=/;
1508                 s/^SHLIBDIRS=.*/SHLIBDIRS= crypto ssl/;
1509                 }
1510         s/^FIPSCANISTERINTERNAL=.*/FIPSCANISTERINTERNAL=$fipscanisterinternal/;
1511         s/^BASEADDR=.*/BASEADDR=$baseaddr/;
1512         s/^SHLIB_TARGET=.*/SHLIB_TARGET=$shared_target/;
1513         s/^SHLIB_MARK=.*/SHLIB_MARK=$shared_mark/;
1514         s/^SHARED_LIBS=.*/SHARED_LIBS=\$(SHARED_FIPS) \$(SHARED_CRYPTO) \$(SHARED_SSL)/ if (!$no_shared);
1515         if ($shared_extension ne "" && $shared_extension =~ /^\.s([ol])\.[^\.]*$/)
1516                 {
1517                 my $sotmp = $1;
1518                 s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.s$sotmp/;
1519                 }
1520         elsif ($shared_extension ne "" && $shared_extension =~ /^\.[^\.]*\.dylib$/)
1521                 {
1522                 s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.dylib/;
1523                 }
1524         elsif ($shared_extension ne "" && $shared_extension =~ /^\.s([ol])\.[^\.]*\.[^\.]*$/)
1525                 {
1526                 my $sotmp = $1;
1527                 s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.s$sotmp.\$(SHLIB_MAJOR) .s$sotmp/;
1528                 }
1529         elsif ($shared_extension ne "" && $shared_extension =~ /^\.[^\.]*\.[^\.]*\.dylib$/)
1530                 {
1531                 s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.\$(SHLIB_MAJOR).dylib .dylib/;
1532                 }
1533         s/^SHARED_LDFLAGS=.*/SHARED_LDFLAGS=$shared_ldflag/;
1534         print OUT $_."\n";
1535         }
1536 close(IN);
1537 close(OUT);
1538 rename($Makefile,"$Makefile.bak") || die "unable to rename $Makefile\n" if -e $Makefile;
1539 rename("$Makefile.new",$Makefile) || die "unable to rename $Makefile.new\n";
1540
1541 print "CC            =$cc\n";
1542 print "CFLAG         =$cflags\n";
1543 print "EX_LIBS       =$lflags\n";
1544 print "CPUID_OBJ     =$cpuid_obj\n";
1545 print "BN_ASM        =$bn_obj\n";
1546 print "DES_ENC       =$des_obj\n";
1547 print "AES_ASM_OBJ   =$aes_obj\n";
1548 print "BF_ENC        =$bf_obj\n";
1549 print "CAST_ENC      =$cast_obj\n";
1550 print "RC4_ENC       =$rc4_obj\n";
1551 print "RC5_ENC       =$rc5_obj\n";
1552 print "MD5_OBJ_ASM   =$md5_obj\n";
1553 print "SHA1_OBJ_ASM  =$sha1_obj\n";
1554 print "RMD160_OBJ_ASM=$rmd160_obj\n";
1555 print "PROCESSOR     =$processor\n";
1556 print "RANLIB        =$ranlib\n";
1557 print "ARFLAGS       =$arflags\n";
1558 print "PERL          =$perl\n";
1559 print "KRB5_INCLUDES =",$withargs{"krb5-include"},"\n"
1560         if $withargs{"krb5-include"} ne "";
1561
1562 my $des_ptr=0;
1563 my $des_risc1=0;
1564 my $des_risc2=0;
1565 my $des_unroll=0;
1566 my $bn_ll=0;
1567 my $def_int=2;
1568 my $rc4_int=$def_int;
1569 my $md2_int=$def_int;
1570 my $idea_int=$def_int;
1571 my $rc2_int=$def_int;
1572 my $rc4_idx=0;
1573 my $rc4_chunk=0;
1574 my $bf_ptr=0;
1575 my @type=("char","short","int","long");
1576 my ($b64l,$b64,$b32,$b16,$b8)=(0,0,1,0,0);
1577 my $export_var_as_fn=0;
1578
1579 my $des_int;
1580
1581 foreach (sort split(/\s+/,$bn_ops))
1582         {
1583         $des_ptr=1 if /DES_PTR/;
1584         $des_risc1=1 if /DES_RISC1/;
1585         $des_risc2=1 if /DES_RISC2/;
1586         $des_unroll=1 if /DES_UNROLL/;
1587         $des_int=1 if /DES_INT/;
1588         $bn_ll=1 if /BN_LLONG/;
1589         $rc4_int=0 if /RC4_CHAR/;
1590         $rc4_int=3 if /RC4_LONG/;
1591         $rc4_idx=1 if /RC4_INDEX/;
1592         $rc4_chunk=1 if /RC4_CHUNK/;
1593         $rc4_chunk=2 if /RC4_CHUNK_LL/;
1594         $md2_int=0 if /MD2_CHAR/;
1595         $md2_int=3 if /MD2_LONG/;
1596         $idea_int=1 if /IDEA_SHORT/;
1597         $idea_int=3 if /IDEA_LONG/;
1598         $rc2_int=1 if /RC2_SHORT/;
1599         $rc2_int=3 if /RC2_LONG/;
1600         $bf_ptr=1 if $_ eq "BF_PTR";
1601         $bf_ptr=2 if $_ eq "BF_PTR2";
1602         ($b64l,$b64,$b32,$b16,$b8)=(0,1,0,0,0) if /SIXTY_FOUR_BIT/;
1603         ($b64l,$b64,$b32,$b16,$b8)=(1,0,0,0,0) if /SIXTY_FOUR_BIT_LONG/;
1604         ($b64l,$b64,$b32,$b16,$b8)=(0,0,1,0,0) if /THIRTY_TWO_BIT/;
1605         ($b64l,$b64,$b32,$b16,$b8)=(0,0,0,1,0) if /SIXTEEN_BIT/;
1606         ($b64l,$b64,$b32,$b16,$b8)=(0,0,0,0,1) if /EIGHT_BIT/;
1607         $export_var_as_fn=1 if /EXPORT_VAR_AS_FN/;
1608         }
1609
1610 open(IN,'<crypto/opensslconf.h.in') || die "unable to read crypto/opensslconf.h.in:$!\n";
1611 unlink("crypto/opensslconf.h.new") || die "unable to remove old crypto/opensslconf.h.new:$!\n" if -e "crypto/opensslconf.h.new";
1612 open(OUT,'>crypto/opensslconf.h.new') || die "unable to create crypto/opensslconf.h.new:$!\n";
1613 print OUT "/* opensslconf.h */\n";
1614 print OUT "/* WARNING: Generated automatically from opensslconf.h.in by Configure. */\n\n";
1615
1616 print OUT "/* OpenSSL was configured with the following options: */\n";
1617 my $openssl_algorithm_defines_trans = $openssl_algorithm_defines;
1618 $openssl_experimental_defines =~ s/^\s*#\s*define\s+OPENSSL_NO_(.*)/#ifndef OPENSSL_EXPERIMENTAL_$1\n# ifndef OPENSSL_NO_$1\n#  define OPENSSL_NO_$1\n# endif\n#endif/mg;
1619 $openssl_algorithm_defines_trans =~ s/^\s*#\s*define\s+OPENSSL_(.*)/# if defined(OPENSSL_$1) \&\& !defined($1)\n#  define $1\n# endif/mg;
1620 $openssl_algorithm_defines =~ s/^\s*#\s*define\s+(.*)/#ifndef $1\n# define $1\n#endif/mg;
1621 $openssl_algorithm_defines = "   /* no ciphers excluded */\n" if $openssl_algorithm_defines eq "";
1622 $openssl_thread_defines =~ s/^\s*#\s*define\s+(.*)/#ifndef $1\n# define $1\n#endif/mg;
1623 $openssl_sys_defines =~ s/^\s*#\s*define\s+(.*)/#ifndef $1\n# define $1\n#endif/mg;
1624 $openssl_other_defines =~ s/^\s*#\s*define\s+(.*)/#ifndef $1\n# define $1\n#endif/mg;
1625 print OUT $openssl_sys_defines;
1626 print OUT "#ifndef OPENSSL_DOING_MAKEDEPEND\n\n";
1627 print OUT $openssl_experimental_defines;
1628 print OUT "\n";
1629 print OUT $openssl_algorithm_defines;
1630 print OUT "\n#endif /* OPENSSL_DOING_MAKEDEPEND */\n\n";
1631 print OUT $openssl_thread_defines;
1632 print OUT $openssl_other_defines,"\n";
1633
1634 print OUT "/* The OPENSSL_NO_* macros are also defined as NO_* if the application\n";
1635 print OUT "   asks for it.  This is a transient feature that is provided for those\n";
1636 print OUT "   who haven't had the time to do the appropriate changes in their\n";
1637 print OUT "   applications.  */\n";
1638 print OUT "#ifdef OPENSSL_ALGORITHM_DEFINES\n";
1639 print OUT $openssl_algorithm_defines_trans;
1640 print OUT "#endif\n\n";
1641
1642 print OUT "#define OPENSSL_CPUID_OBJ\n\n" if ($cpuid_obj);
1643
1644 while (<IN>)
1645         {
1646         if      (/^#define\s+OPENSSLDIR/)
1647                 {
1648                 my $foo = $openssldir;
1649                 $foo =~ s/\\/\\\\/g;
1650                 print OUT "#define OPENSSLDIR \"$foo\"\n";
1651                 }
1652         elsif   (/^#define\s+ENGINESDIR/)
1653                 {
1654                 # $foo is to become "$prefix/lib$multilib/engines";
1655                 # as Makefile.org and engines/Makefile are adapted for
1656                 # $multilib suffix.
1657                 my $foo = "$prefix/lib/engines";
1658                 $foo =~ s/\\/\\\\/g;
1659                 print OUT "#define ENGINESDIR \"$foo\"\n";
1660                 }
1661         elsif   (/^#((define)|(undef))\s+OPENSSL_EXPORT_VAR_AS_FUNCTION/)
1662                 { printf OUT "#undef OPENSSL_EXPORT_VAR_AS_FUNCTION\n"
1663                         if $export_var_as_fn;
1664                   printf OUT "#%s OPENSSL_EXPORT_VAR_AS_FUNCTION\n",
1665                         ($export_var_as_fn)?"define":"undef"; }
1666         elsif   (/^#define\s+OPENSSL_UNISTD/)
1667                 {
1668                 $unistd = "<unistd.h>" if $unistd eq "";
1669                 print OUT "#define OPENSSL_UNISTD $unistd\n";
1670                 }
1671         elsif   (/^#((define)|(undef))\s+SIXTY_FOUR_BIT_LONG/)
1672                 { printf OUT "#%s SIXTY_FOUR_BIT_LONG\n",($b64l)?"define":"undef"; }
1673         elsif   (/^#((define)|(undef))\s+SIXTY_FOUR_BIT/)
1674                 { printf OUT "#%s SIXTY_FOUR_BIT\n",($b64)?"define":"undef"; }
1675         elsif   (/^#((define)|(undef))\s+THIRTY_TWO_BIT/)
1676                 { printf OUT "#%s THIRTY_TWO_BIT\n",($b32)?"define":"undef"; }
1677         elsif   (/^#((define)|(undef))\s+SIXTEEN_BIT/)
1678                 { printf OUT "#%s SIXTEEN_BIT\n",($b16)?"define":"undef"; }
1679         elsif   (/^#((define)|(undef))\s+EIGHT_BIT/)
1680                 { printf OUT "#%s EIGHT_BIT\n",($b8)?"define":"undef"; }
1681         elsif   (/^#((define)|(undef))\s+BN_LLONG\s*$/)
1682                 { printf OUT "#%s BN_LLONG\n",($bn_ll)?"define":"undef"; }
1683         elsif   (/^\#define\s+DES_LONG\s+.*/)
1684                 { printf OUT "#define DES_LONG unsigned %s\n",
1685                         ($des_int)?'int':'long'; }
1686         elsif   (/^\#(define|undef)\s+DES_PTR/)
1687                 { printf OUT "#%s DES_PTR\n",($des_ptr)?'define':'undef'; }
1688         elsif   (/^\#(define|undef)\s+DES_RISC1/)
1689                 { printf OUT "#%s DES_RISC1\n",($des_risc1)?'define':'undef'; }
1690         elsif   (/^\#(define|undef)\s+DES_RISC2/)
1691                 { printf OUT "#%s DES_RISC2\n",($des_risc2)?'define':'undef'; }
1692         elsif   (/^\#(define|undef)\s+DES_UNROLL/)
1693                 { printf OUT "#%s DES_UNROLL\n",($des_unroll)?'define':'undef'; }
1694         elsif   (/^#define\s+RC4_INT\s/)
1695                 { printf OUT "#define RC4_INT unsigned %s\n",$type[$rc4_int]; }
1696         elsif   (/^#undef\s+RC4_CHUNK/)
1697                 {
1698                 printf OUT "#undef RC4_CHUNK\n" if $rc4_chunk==0;
1699                 printf OUT "#define RC4_CHUNK unsigned long\n" if $rc4_chunk==1;
1700                 printf OUT "#define RC4_CHUNK unsigned long long\n" if $rc4_chunk==2;
1701                 }
1702         elsif   (/^#((define)|(undef))\s+RC4_INDEX/)
1703                 { printf OUT "#%s RC4_INDEX\n",($rc4_idx)?"define":"undef"; }
1704         elsif (/^#(define|undef)\s+I386_ONLY/)
1705                 { printf OUT "#%s I386_ONLY\n", ($processor eq "386")?
1706                         "define":"undef"; }
1707         elsif   (/^#define\s+MD2_INT\s/)
1708                 { printf OUT "#define MD2_INT unsigned %s\n",$type[$md2_int]; }
1709         elsif   (/^#define\s+IDEA_INT\s/)
1710                 {printf OUT "#define IDEA_INT unsigned %s\n",$type[$idea_int];}
1711         elsif   (/^#define\s+RC2_INT\s/)
1712                 {printf OUT "#define RC2_INT unsigned %s\n",$type[$rc2_int];}
1713         elsif (/^#(define|undef)\s+BF_PTR/)
1714                 {
1715                 printf OUT "#undef BF_PTR\n" if $bf_ptr == 0;
1716                 printf OUT "#define BF_PTR\n" if $bf_ptr == 1;
1717                 printf OUT "#define BF_PTR2\n" if $bf_ptr == 2;
1718                 }
1719         else
1720                 { print OUT $_; }
1721         }
1722 close(IN);
1723 close(OUT);
1724 rename("crypto/opensslconf.h","crypto/opensslconf.h.bak") || die "unable to rename crypto/opensslconf.h\n" if -e "crypto/opensslconf.h";
1725 rename("crypto/opensslconf.h.new","crypto/opensslconf.h") || die "unable to rename crypto/opensslconf.h.new\n";
1726
1727
1728 # Fix the date
1729
1730 print "SIXTY_FOUR_BIT_LONG mode\n" if $b64l;
1731 print "SIXTY_FOUR_BIT mode\n" if $b64;
1732 print "THIRTY_TWO_BIT mode\n" if $b32;
1733 print "SIXTEEN_BIT mode\n" if $b16;
1734 print "EIGHT_BIT mode\n" if $b8;
1735 print "DES_PTR used\n" if $des_ptr;
1736 print "DES_RISC1 used\n" if $des_risc1;
1737 print "DES_RISC2 used\n" if $des_risc2;
1738 print "DES_UNROLL used\n" if $des_unroll;
1739 print "DES_INT used\n" if $des_int;
1740 print "BN_LLONG mode\n" if $bn_ll;
1741 print "RC4 uses u$type[$rc4_int]\n" if $rc4_int != $def_int;
1742 print "RC4_INDEX mode\n" if $rc4_idx;
1743 print "RC4_CHUNK is undefined\n" if $rc4_chunk==0;
1744 print "RC4_CHUNK is unsigned long\n" if $rc4_chunk==1;
1745 print "RC4_CHUNK is unsigned long long\n" if $rc4_chunk==2;
1746 print "MD2 uses u$type[$md2_int]\n" if $md2_int != $def_int;
1747 print "IDEA uses u$type[$idea_int]\n" if $idea_int != $def_int;
1748 print "RC2 uses u$type[$rc2_int]\n" if $rc2_int != $def_int;
1749 print "BF_PTR used\n" if $bf_ptr == 1;
1750 print "BF_PTR2 used\n" if $bf_ptr == 2;
1751
1752 if($IsMK1MF) {
1753         open (OUT,">crypto/buildinf.h") || die "Can't open buildinf.h";
1754         printf OUT <<EOF;
1755 #ifndef MK1MF_BUILD
1756   /* auto-generated by Configure for crypto/cversion.c:
1757    * for Unix builds, crypto/Makefile.ssl generates functional definitions;
1758    * Windows builds (and other mk1mf builds) compile cversion.c with
1759    * -DMK1MF_BUILD and use definitions added to this file by util/mk1mf.pl. */
1760   #error "Windows builds (PLATFORM=$target) use mk1mf.pl-created Makefiles"
1761 #endif
1762 EOF
1763         close(OUT);
1764 } else {
1765         my $make_command = "make PERL=\'$perl\'";
1766         my $make_targets = "";
1767         $make_targets .= " links" if $symlink;
1768         $make_targets .= " depend" if $depflags ne $default_depflags && $make_depend;
1769         $make_targets .= " gentests" if $symlink;
1770         (system $make_command.$make_targets) == 0 or exit $?
1771                 if $make_targets ne "";
1772         if ( $perl =~ m@^/@) {
1773             &dofile("tools/c_rehash",$perl,'^#!/', '#!%s','^my \$dir;$', 'my $dir = "' . $openssldir . '";');
1774             &dofile("apps/CA.pl",$perl,'^#!/', '#!%s');
1775         } else {
1776             # No path for Perl known ...
1777             &dofile("tools/c_rehash",'/usr/local/bin/perl','^#!/', '#!%s','^my \$dir;$', 'my $dir = "' . $openssldir . '";');
1778             &dofile("apps/CA.pl",'/usr/local/bin/perl','^#!/', '#!%s');
1779         }
1780         if ($depflags ne $default_depflags && !$make_depend) {
1781                 print <<EOF;
1782
1783 Since you've disabled or enabled at least one algorithm, you need to do
1784 the following before building:
1785
1786         make depend
1787 EOF
1788         }
1789 }
1790
1791 # create the ms/version32.rc file if needed
1792 if ($IsMK1MF && ($target !~ /^netware/)) {
1793         my ($v1, $v2, $v3, $v4);
1794         if ($version_num =~ /(^[0-9a-f]{1})([0-9a-f]{2})([0-9a-f]{2})([0-9a-f]{2})/i) {
1795                 $v1=hex $1;
1796                 $v2=hex $2;
1797                 $v3=hex $3;
1798                 $v4=hex $4;
1799         }
1800         open (OUT,">ms/version32.rc") || die "Can't open ms/version32.rc";
1801         print OUT <<EOF;
1802 #include <winver.h>
1803
1804 LANGUAGE 0x09,0x01
1805
1806 1 VERSIONINFO
1807   FILEVERSION $v1,$v2,$v3,$v4
1808   PRODUCTVERSION $v1,$v2,$v3,$v4
1809   FILEFLAGSMASK 0x3fL
1810 #ifdef _DEBUG
1811   FILEFLAGS 0x01L
1812 #else
1813   FILEFLAGS 0x00L
1814 #endif
1815   FILEOS VOS__WINDOWS32
1816   FILETYPE VFT_DLL
1817   FILESUBTYPE 0x0L
1818 BEGIN
1819     BLOCK "StringFileInfo"
1820     BEGIN
1821         BLOCK "040904b0"
1822         BEGIN
1823 #if defined(FIPS)
1824             VALUE "Comments", "WARNING: TEST VERSION ONLY ***NOT*** FIPS 140-2 VALIDATED.\\0"
1825 #endif
1826             // Required:
1827             VALUE "CompanyName", "The OpenSSL Project, http://www.openssl.org/\\0"
1828 #if defined(FIPS)
1829             VALUE "FileDescription", "TEST UNVALIDATED FIPS140-2 DLL\\0"
1830 #else
1831             VALUE "FileDescription", "OpenSSL Shared Library\\0"
1832 #endif
1833             VALUE "FileVersion", "$version\\0"
1834 #if defined(CRYPTO)
1835             VALUE "InternalName", "libeay32\\0"
1836             VALUE "OriginalFilename", "libeay32.dll\\0"
1837 #elif defined(SSL)
1838             VALUE "InternalName", "ssleay32\\0"
1839             VALUE "OriginalFilename", "ssleay32.dll\\0"
1840 #elif defined(FIPS)
1841             VALUE "InternalName", "libosslfips\\0"
1842             VALUE "OriginalFilename", "libosslfips.dll\\0"
1843 #endif
1844             VALUE "ProductName", "The OpenSSL Toolkit\\0"
1845             VALUE "ProductVersion", "$version\\0"
1846             // Optional:
1847             //VALUE "Comments", "\\0"
1848             VALUE "LegalCopyright", "Copyright © 1998-2007 The OpenSSL Project. Copyright © 1995-1998 Eric A. Young, Tim J. Hudson. All rights reserved.\\0"
1849             //VALUE "LegalTrademarks", "\\0"
1850             //VALUE "PrivateBuild", "\\0"
1851             //VALUE "SpecialBuild", "\\0"
1852         END
1853     END
1854     BLOCK "VarFileInfo"
1855     BEGIN
1856         VALUE "Translation", 0x409, 0x4b0
1857     END
1858 END
1859 EOF
1860         close(OUT);
1861   }
1862
1863 print <<EOF;
1864
1865 Configured for $target.
1866 EOF
1867
1868 print <<\EOF if (!$no_threads && !$threads);
1869
1870 The library could not be configured for supporting multi-threaded
1871 applications as the compiler options required on this system are not known.
1872 See file INSTALL for details if you need multi-threading.
1873 EOF
1874
1875 print <<\EOF if ($no_shared_warn);
1876
1877 You gave the option 'shared'.  Normally, that would give you shared libraries.
1878 Unfortunately, the OpenSSL configuration doesn't include shared library support
1879 for this platform yet, so it will pretend you gave the option 'no-shared'.  If
1880 you can inform the developpers (openssl-dev\@openssl.org) how to support shared
1881 libraries on this platform, they will at least look at it and try their best
1882 (but please first make sure you have tried with a current version of OpenSSL).
1883 EOF
1884
1885 print <<\EOF if ($fipscanisterinternal eq "y");
1886
1887 WARNING: OpenSSL has been configured using unsupported option(s) to internally
1888 generate a fipscanister.o object module for TESTING PURPOSES ONLY; that
1889 compiled module is NOT FIPS 140-2 validated and CANNOT be used to replace the
1890 OpenSSL FIPS Object Module as identified by the CMVP
1891 (http://csrc.nist.gov/cryptval/) in any application requiring the use of FIPS
1892 140-2 validated software.
1893
1894 This is an OpenSSL 0.9.8 test version.
1895
1896 See the file README.FIPS for details of how to build a test library.
1897
1898 EOF
1899
1900 exit(0);
1901
1902 sub usage
1903         {
1904         print STDERR $usage;
1905         print STDERR "\npick os/compiler from:\n";
1906         my $j=0;
1907         my $i;
1908         my $k=0;
1909         foreach $i (sort keys %table)
1910                 {
1911                 next if $i =~ /^debug/;
1912                 $k += length($i) + 1;
1913                 if ($k > 78)
1914                         {
1915                         print STDERR "\n";
1916                         $k=length($i);
1917                         }
1918                 print STDERR $i . " ";
1919                 }
1920         foreach $i (sort keys %table)
1921                 {
1922                 next if $i !~ /^debug/;
1923                 $k += length($i) + 1;
1924                 if ($k > 78)
1925                         {
1926                         print STDERR "\n";
1927                         $k=length($i);
1928                         }
1929                 print STDERR $i . " ";
1930                 }
1931         print STDERR "\n\nNOTE: If in doubt, on Unix-ish systems use './config'.\n";
1932         exit(1);
1933         }
1934
1935 sub which
1936         {
1937         my($name)=@_;
1938         my $path;
1939         foreach $path (split /:/, $ENV{PATH})
1940                 {
1941                 if (-f "$path/$name$exe_ext" and -x _)
1942                         {
1943                         return "$path/$name$exe_ext" unless ($name eq "perl" and
1944                          system("$path/$name$exe_ext -e " . '\'exit($]<5.0);\''));
1945                         }
1946                 }
1947         }
1948
1949 sub dofile
1950         {
1951         my $f; my $p; my %m; my @a; my $k; my $ff;
1952         ($f,$p,%m)=@_;
1953
1954         open(IN,"<$f.in") || open(IN,"<$f") || die "unable to open $f:$!\n";
1955         @a=<IN>;
1956         close(IN);
1957         foreach $k (keys %m)
1958                 {
1959                 grep(/$k/ && ($_=sprintf($m{$k}."\n",$p)),@a);
1960                 }
1961         open(OUT,">$f.new") || die "unable to open $f.new:$!\n";
1962         print OUT @a;
1963         close(OUT);
1964         rename($f,"$f.bak") || die "unable to rename $f\n" if -e $f;
1965         rename("$f.new",$f) || die "unable to rename $f.new\n";
1966         }
1967
1968 sub print_table_entry
1969         {
1970         my $target = shift;
1971
1972         (my $cc,my $cflags,my $unistd,my $thread_cflag,my $sys_id,my $lflags,
1973         my $bn_ops,my $cpuid_obj,my $bn_obj,my $des_obj,my $aes_obj, my $bf_obj,
1974         my $md5_obj,my $sha1_obj,my $cast_obj,my $rc4_obj,my $rmd160_obj,
1975         my $rc5_obj,my $dso_scheme,my $shared_target,my $shared_cflag,
1976         my $shared_ldflag,my $shared_extension,my $ranlib,my $arflags)=
1977         split(/\s*:\s*/,$table{$target} . ":" x 30 , -1);
1978
1979         print <<EOF
1980
1981 *** $target
1982 \$cc           = $cc
1983 \$cflags       = $cflags
1984 \$unistd       = $unistd
1985 \$thread_cflag = $thread_cflag
1986 \$sys_id       = $sys_id
1987 \$lflags       = $lflags
1988 \$bn_ops       = $bn_ops
1989 \$cpuid_obj    = $cpuid_obj
1990 \$bn_obj       = $bn_obj
1991 \$des_obj      = $des_obj
1992 \$aes_obj      = $aes_obj
1993 \$bf_obj       = $bf_obj
1994 \$md5_obj      = $md5_obj
1995 \$sha1_obj     = $sha1_obj
1996 \$cast_obj     = $cast_obj
1997 \$rc4_obj      = $rc4_obj
1998 \$rmd160_obj   = $rmd160_obj
1999 \$rc5_obj      = $rc5_obj
2000 \$dso_scheme   = $dso_scheme
2001 \$shared_target= $shared_target
2002 \$shared_cflag = $shared_cflag
2003 \$shared_ldflag = $shared_ldflag
2004 \$shared_extension = $shared_extension
2005 \$ranlib       = $ranlib
2006 \$arflags      = $arflags
2007 EOF
2008         }
2009
2010 sub test_sanity
2011         {
2012         my $errorcnt = 0;
2013
2014         print STDERR "=" x 70, "\n";
2015         print STDERR "=== SANITY TESTING!\n";
2016         print STDERR "=== No configuration will be done, all other arguments will be ignored!\n";
2017         print STDERR "=" x 70, "\n";
2018
2019         foreach $target (sort keys %table)
2020                 {
2021                 @fields = split(/\s*:\s*/,$table{$target} . ":" x 30 , -1);
2022
2023                 if ($fields[$idx_dso_scheme-1] =~ /^(dl|dlfcn|win32|vms)$/)
2024                         {
2025                         $errorcnt++;
2026                         print STDERR "SANITY ERROR: '$target' has the dso_scheme [$idx_dso_scheme] values\n";
2027                         print STDERR "              in the previous field\n";
2028                         }
2029                 elsif ($fields[$idx_dso_scheme+1] =~ /^(dl|dlfcn|win32|vms)$/)
2030                         {
2031                         $errorcnt++;
2032                         print STDERR "SANITY ERROR: '$target' has the dso_scheme [$idx_dso_scheme] values\n";
2033                         print STDERR "              in the following field\n";
2034                         }
2035                 elsif ($fields[$idx_dso_scheme] !~ /^(dl|dlfcn|win32|vms|)$/)
2036                         {
2037                         $errorcnt++;
2038                         print STDERR "SANITY ERROR: '$target' has the dso_scheme [$idx_dso_scheme] field = ",$fields[$idx_dso_scheme],"\n";
2039                         print STDERR "              valid values are 'dl', 'dlfcn', 'win32' and 'vms'\n";
2040                         }
2041                 }
2042         print STDERR "No sanity errors detected!\n" if $errorcnt == 0;
2043         return $errorcnt;
2044         }
2045
2046 # Attempt to detect MSYS environment
2047
2048 sub is_msys
2049         {
2050         return 1 if (exists $ENV{"TERM"} && $ENV{"TERM"} eq "msys");
2051         return 0;
2052         }