5 ## Configure -- OpenSSL source tree configuration script
6 ## If editing this file, run this command before committing
7 ## make -f Makefile.in TABLE
13 use File::Spec::Functions qw/:DEFAULT abs2rel rel2abs/;
14 use File::Path qw/make_path/;
15 use Cwd qw/:DEFAULT realpath/;
17 # see INSTALL for instructions.
19 my $usage="Usage: Configure [no-<cipher> ...] [enable-<cipher> ...] [experimental-<cipher> ...] [-Dxxx] [-lxxx] [-Lxxx] [-fxxx] [-Kxxx] [no-hw-xxx|no-hw] [[no-]threads] [[no-]shared] [[no-]zlib|zlib-dynamic] [no-asm] [no-dso] [no-egd] [sctp] [386] [--prefix=DIR] [--openssldir=OPENSSLDIR] [--with-xxx[=vvv]] [--config=FILE] os/compiler[:flags]\n";
23 # --config add the given configuration file, which will be read after
24 # any "Configurations*" files that are found in the same
25 # directory as this script.
26 # --prefix prefix for the OpenSSL installation, which includes the
27 # directories bin, lib, include, share/man, share/doc/openssl
28 # This becomes the value of INSTALLTOP in Makefile
29 # (Default: /usr/local)
30 # --openssldir OpenSSL data area, such as openssl.cnf, certificates and keys.
31 # If it's a relative directory, it will be added on the directory
32 # given with --prefix.
33 # This becomes the value of OPENSSLDIR in Makefile and in C.
34 # (Default: PREFIX/ssl)
36 # --install_prefix Additional prefix for package builders (empty by
37 # default). This needn't be set in advance, you can
38 # just as well use "make INSTALL_PREFIX=/whatever install".
40 # --cross-compile-prefix Add specified prefix to binutils components.
42 # --api One of 0.9.8, 1.0.0 or 1.1.0. Do not compile support for
43 # interfaces deprecated as of the specified OpenSSL version.
45 # no-hw-xxx do not compile support for specific crypto hardware.
46 # Generic OpenSSL-style methods relating to this support
47 # are always compiled but return NULL if the hardware
48 # support isn't compiled.
49 # no-hw do not compile support for any crypto hardware.
50 # [no-]threads [don't] try to create a library that is suitable for
51 # multithreaded applications (default is "threads" if we
53 # [no-]shared [don't] try to create shared libraries when supported.
54 # no-asm do not use assembler
55 # no-dso do not compile in any native shared-library methods. This
56 # will ensure that all methods just return NULL.
57 # no-egd do not compile support for the entropy-gathering daemon APIs
58 # [no-]zlib [don't] compile support for zlib compression.
59 # zlib-dynamic Like "zlib", but the zlib library is expected to be a shared
60 # library and will be loaded in run-time by the OpenSSL library.
61 # sctp include SCTP support
62 # 386 generate 80386 code
63 # no-sse2 disables IA-32 SSE2 code, above option implies no-sse2
64 # no-<cipher> build without specified algorithm (rsa, idea, rc5, ...)
65 # -<xxx> +<xxx> compiler options are passed through
67 # DEBUG_SAFESTACK use type-safe stacks to enforce type-safety on stack items
68 # provided to stack calls. Generates unique stack functions for
69 # each possible stack type.
70 # BN_LLONG use the type 'long long' in crypto/bn/bn.h
71 # RC4_CHAR use 'char' instead of 'int' for RC4_INT in crypto/rc4/rc4.h
72 # Following are set automatically by this script
74 # MD5_ASM use some extra md5 assember,
75 # SHA1_ASM use some extra sha1 assember, must define L_ENDIAN for x86
76 # RMD160_ASM use some extra ripemd160 assember,
77 # SHA256_ASM sha256_block is implemented in assembler
78 # SHA512_ASM sha512_block is implemented in assembler
79 # AES_ASM ASE_[en|de]crypt is implemented in assembler
81 # Minimum warning options... any contributions to OpenSSL should at least get
84 my $gcc_devteam_warn = "-Wall -pedantic -DPEDANTIC -Wno-long-long -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Werror -DREF_CHECK -DDEBUG_UNUSED";
86 # These are used in addition to $gcc_devteam_warn when the compiler is clang.
87 # TODO(openssl-team): fix problems and investigate if (at least) the
88 # following warnings can also be enabled:
89 # -Wswitch-enum, -Wunused-macros, -Wmissing-field-initializers,
91 # -Wunreachable-code -Wunused-parameter -Wlanguage-extension-token
93 my $clang_devteam_warn = "-Wno-unused-parameter -Wno-missing-field-initializers -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Qunused-arguments -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations";
95 # Warn that "make depend" should be run?
96 my $warn_make_depend = 0;
98 # These are used in addition to $gcc_devteam_warn unless this is a mingw build.
99 # This adds backtrace information to the memory leak info.
100 my $memleak_devteam_backtrace = "-rdynamic -DCRYPTO_MDEBUG_BACKTRACE";
102 my $strict_warnings = 0;
104 # As for $BSDthreads. Idea is to maintain "collective" set of flags,
105 # which would cover all BSD flavors. -pthread applies to them all,
106 # but is treated differently. OpenBSD expands is as -D_POSIX_THREAD
107 # -lc_r, which is sufficient. FreeBSD 4.x expands it as -lc_r,
108 # which has to be accompanied by explicit -D_THREAD_SAFE and
109 # sometimes -D_REENTRANT. FreeBSD 5.x expands it as -lc_r, which
110 # seems to be sufficient?
111 my $BSDthreads="-pthread -D_THREAD_SAFE -D_REENTRANT";
114 # API compability name to version number mapping.
116 my $maxapi = "1.1.0"; # API for "no-deprecated" builds
118 "1.1.0" => "0x10100000L",
119 "1.0.0" => "0x10000000L",
120 "0.9.8" => "0x00908000L",
123 my $base_target = "BASE"; # The template that all other inherit from
127 # Forward declarations ###############################################
129 # read_config(filename)
131 # Reads a configuration file and populates %table with the contents
132 # (which the configuration file places in %targets).
135 # resolve_config(target)
137 # Resolves all the late evalutations, inheritances and so on for the
138 # chosen target and any target it inherits from.
142 # Information collection #############################################
144 # Unified build supports separate build dir
145 my $srcdir = catdir(realpath(dirname($0))); # catdir ensures local syntax
146 my $blddir = catdir(realpath(".")); # catdir ensures local syntax
147 my $dofile = abs2rel(catfile($srcdir, "util/dofile.pl"));
149 $config{sourcedir} = abs2rel($srcdir);
150 $config{builddir} = abs2rel($blddir);
152 # Collect version numbers
153 $config{version} = "unknown";
154 $config{version_num} = "unknown";
155 $config{shlib_version_number} = "unknown";
156 $config{shlib_version_history} = "unknown";
159 collect_from_file(catfile($srcdir,'include/openssl/opensslv.h')),
160 qr/OPENSSL.VERSION.TEXT.*OpenSSL (\S+) / => sub { $config{version} = $1; },
161 qr/OPENSSL.VERSION.NUMBER.*(0x\S+)/ => sub { $config{version_num}=$1 },
162 qr/SHLIB_VERSION_NUMBER *"([^"]+)"/ => sub { $config{shlib_version_number}=$1 },
163 qr/SHLIB_VERSION_HISTORY *"([^"]*)"/ => sub { $config{shlib_version_history}=$1 }
165 if ($config{shlib_version_history} ne "") { $config{shlib_version_history} .= ":"; }
167 ($config{major}, $config{minor})
168 = ($config{version} =~ /^([0-9]+)\.([0-9\.]+)/);
169 ($config{shlib_major}, $config{shlib_minor})
170 = ($config{shlib_version_number} =~ /^([0-9]+)\.([0-9\.]+)/);
171 die "erroneous version information in opensslv.h: ",
172 "$config{major}, $config{minor}, $config{shlib_major}, $config{shlib_minor}\n"
173 if ($config{major} eq "" || $config{minor} eq ""
174 || $config{shlib_major} eq "" || $config{shlib_minor} eq "");
176 # Collect target configurations
178 my $pattern = catfile(dirname($0), "Configurations", "*.conf");
179 foreach (sort glob($pattern) ) {
184 print "Configuring OpenSSL version $config{version} (0x$config{version_num})\n";
188 $config{openssldir}="";
189 $config{processor}="";
191 $config{install_prefix}= "$ENV{'INSTALL_PREFIX'}";
192 $config{cross_compile_prefix}="";
193 $config{fipslibdir}="/usr/local/ssl/fips-2.0/lib/";
194 my $nofipscanistercheck=0;
195 $config{baseaddr}="0xFB00000";
198 $config{no_shared}=0; # but "no-shared" is default
199 my $zlib=1; # but "no-zlib" is default
206 # Top level directories to build
207 $config{dirs} = [ "crypto", "ssl", "engines", "apps", "test", "tools" ];
208 # crypto/ subdirectories to build
211 "md2", "md4", "md5", "sha", "mdc2", "hmac", "ripemd", "whrlpool", "poly1305",
212 "des", "aes", "rc2", "rc4", "rc5", "idea", "bf", "cast", "camellia", "seed", "chacha", "modes",
213 "bn", "ec", "rsa", "dsa", "dh", "dso", "engine",
214 "buffer", "bio", "stack", "lhash", "rand", "err",
215 "evp", "asn1", "pem", "x509", "x509v3", "conf", "txt_db", "pkcs7", "pkcs12", "comp", "ocsp", "ui",
216 "cms", "ts", "jpake", "srp", "store", "cmac", "ct", "async", "kdf"
219 # Known TLS and DTLS protocols
220 my @tls = qw(ssl3 tls1 tls1_1 tls1_2);
221 my @dtls = qw(dtls1 dtls1_2);
223 # Explicitelly known options that are possible to disable. They can
224 # be regexps, and will be used like this: /^no-${option}$/
225 # For developers: keep it sorted alphabetically
253 "ec_nistp_64_gcc_128",
262 "locking", # Really???
279 "rijndael", # Old AES name
304 foreach my $proto ((@tls, @dtls))
306 push(@disablables, $proto);
307 push(@disablables, "$proto-method");
310 # All of the following is disabled by default (RC5 was enabled before 0.9.8):
312 my %disabled = ( # "what" => "comment" [or special keyword "experimental"]
313 "ec_nistp_64_gcc_128" => "default",
315 "jpake" => "experimental",
319 "shared" => "default",
320 "ssl-trace" => "default",
321 "store" => "experimental",
322 "unit-test" => "default",
324 "zlib-dynamic" => "default",
325 "crypto-mdebug" => "default",
327 my @experimental = ();
329 # Note: => pair form used for aesthetics, not to truly make a hash table
330 my @disable_cascades = (
331 # "what" => [ "cascade", ... ]
332 sub { $config{processor} eq "386" }
335 "ssl3-method" => [ "ssl3" ],
336 "zlib" => [ "zlib-dynamic" ],
337 "rijndael" => [ "aes" ],
339 "ec" => [ "ecdsa", "ecdh" ],
340 "psk" => [ "jpake" ],
342 "dgram" => [ "dtls" ],
345 # SSL 3.0, (D)TLS 1.0 and TLS 1.1 require MD5 and SHA
346 "md5" => [ "ssl", "tls1", "tls1_1", "dtls1" ],
347 "sha" => [ "ssl", "tls1", "tls1_1", "dtls1" ],
349 # Additionally, SSL 3.0 requires either RSA or DSA+DH
351 && ($disabled{dsa} || $disabled{dh}); }
354 # (D)TLS 1.0 and TLS 1.1 also require either RSA or DSA+DH
355 # or ECDSA + ECDH. (D)TLS 1.2 has this requirement as well.
356 # (XXX: We don't support PSK-only builds).
358 && ($disabled{dsa} || $disabled{dh})
359 && ($disabled{ecdsa} || $disabled{ecdh}); }
360 => [ "tls1", "tls1_1", "tls1_2",
361 "dtls1", "dtls1_2" ],
365 # SRP and HEARTBEATS require TLSEXT
366 "tlsext" => [ "srp", "heartbeats" ],
369 # Avoid protocol support holes. Also disable all versions below N, if version
370 # N is disabled while N+1 is enabled.
372 my @list = (reverse @tls);
373 while ((my $first, my $second) = (shift @list, shift @list)) {
375 push @disable_cascades, ( sub { !$disabled{$first} && $disabled{$second} }
377 unshift @list, $second;
379 my @list = (reverse @dtls);
380 while ((my $first, my $second) = (shift @list, shift @list)) {
382 push @disable_cascades, ( sub { !$disabled{$first} && $disabled{$second} }
384 unshift @list, $second;
387 # Construct the string of what $config{depflags} should look like with the defaults
388 # from %disabled above. (we need this to see if we should advise the user
389 # to run "make depend"):
390 my $default_depflags = join(" ",
391 map { my $x = $_; $x =~ tr{[a-z]-}{[A-Z]_}; "-DOPENSSL_NO_$x"; }
392 grep { $disabled{$_} !~ /\(no-depflags\)$/ }
393 sort keys %disabled);
395 # Explicit "no-..." options will be collected in %disabled along with the defaults.
396 # To remove something from %disabled, use "enable-foo" (unless it's experimental).
397 # For symmetry, "disable-foo" is a synonym for "no-foo".
399 # For features called "experimental" here, a more explicit "experimental-foo" is needed to enable.
400 # We will collect such requests in @experimental.
401 # To avoid accidental use of experimental features, applications will have to use -DOPENSSL_EXPERIMENTAL_FOO.
406 &usage if ($#ARGV < 0);
409 $config{depflags}="";
410 $config{openssl_experimental_defines}=[];
411 $config{openssl_api_defines}=[];
412 $config{openssl_algorithm_defines}=[];
413 $config{openssl_thread_defines}=[];
414 $config{openssl_sys_defines}=[];
415 $config{openssl_other_defines}=[];
421 my $build_prefix = "release_";
425 if (grep /^reconf(igure)?$/, @argvcopy) {
426 if (-f "./configdata.pm") {
427 my $file = "./configdata.pm";
428 unless (my $return = do $file) {
429 die "couldn't parse $file: $@" if $@;
430 die "couldn't do $file: $!" unless defined $return;
431 die "couldn't run $file" unless $return;
434 @argvcopy = defined($configdata::config{perlargv}) ?
435 @{$configdata::config{perlargv}} : ();
436 die "Incorrect data to reconfigure, please do a normal configuration\n"
437 if (grep(/^reconf/,@argvcopy));
438 $ENV{CROSS_COMPILE} = $configdata::config{cross_compile_prefix}
439 if defined($configdata::config{cross_compile_prefix});
440 $ENV{CROSS_COMPILE} = $configdata::config{cc}
441 if defined($configdata::config{cc});
443 print "Reconfiguring with: ", join(" ",@argvcopy), "\n";
444 print " CROSS_COMPILE = ",$ENV{CROSS_COMPILE},"\n"
445 if $ENV{CROSS_COMPILE};
446 print " CC = ",$ENV{CC},"\n" if $ENV{CC};
447 } elsif (open IN, "<Makefile") {
449 # THIS SECTION IS TEMPORARY, it helps transitioning from Makefile
450 # centered information gathering the reading configdata.pm
454 if (/^CONFIGURE_ARGS=\s*(.*)\s*/) {
455 # Older form, we split the string and hope for the best
456 @argvcopy = split /\s+/, $_;
457 die "Incorrect data to reconfigure, please do a normal configuration\n"
458 if (grep(/^reconf/,@argvcopy));
459 } elsif (/^CROSS_COMPILE=\s*(.*)/) {
460 $ENV{CROSS_COMPILE}=$1;
461 } elsif (/^CC=\s*(?:\$\(CROSS_COMPILE\))?(.*?)$/) {
466 # END OF TEMPORARY SECTION
469 die "Insufficient data to reconfigure, please do a normal configuration\n";
473 $config{perlargv} = [ @argvcopy ];
475 my %unsupported_options = ();
478 s /^-no-/no-/; # some people just can't read the instructions
480 # rewrite some options in "enable-..." form
481 s /^-?-?shared$/enable-shared/;
482 s /^sctp$/enable-sctp/;
483 s /^threads$/enable-threads/;
484 s /^zlib$/enable-zlib/;
485 s /^zlib-dynamic$/enable-zlib-dynamic/;
487 if (/^(no|disable|enable|experimental)-(.+)$/)
490 if (!grep { $word =~ /^${_}$/ } @disablables)
492 $unsupported_options{$_} = 1;
496 if (/^no-(.+)$/ || /^disable-(.+)$/)
498 if (!($disabled{$1} eq "experimental"))
500 foreach my $proto ((@tls, @dtls))
502 if ($1 eq "$proto-method")
504 $disabled{"$proto"} = "option($proto-method)";
510 foreach my $proto (@dtls)
512 $disabled{$proto} = "option(dtls)";
517 # Last one of its kind
518 $disabled{"ssl3"} = "option(ssl)";
522 # XXX: Tests will fail if all SSL/TLS
523 # protocols are disabled.
524 foreach my $proto (@tls)
526 $disabled{$proto} = "option(tls)";
531 $disabled{$1} = "option";
535 elsif (/^enable-(.+)$/ || /^experimental-(.+)$/)
538 if ($disabled{$algo} eq "experimental")
540 die "You are requesting an experimental feature; please say 'experimental-$algo' if you are sure\n"
541 unless (/^experimental-/);
542 push @experimental, $algo;
544 delete $disabled{$algo};
546 $threads = 1 if ($algo eq "threads");
548 elsif (/^--strict-warnings$/)
550 $strict_warnings = 1;
554 $build_prefix = "debug_";
556 elsif (/^--release$/)
558 $build_prefix = "release_";
561 { $config{processor}=386; }
568 # No RSAref support any more since it's not needed.
569 # The check for the option is there so scripts aren't
572 elsif (/^nofipscanistercheck$/)
575 $nofipscanistercheck = 1;
579 if (/^--prefix=(.*)$/)
583 elsif (/^--api=(.*)$/)
587 elsif (/^--libdir=(.*)$/)
591 elsif (/^--openssldir=(.*)$/)
593 $config{openssldir}=$1;
595 elsif (/^--install.prefix=(.*)$/)
597 $config{install_prefix}=$1;
599 elsif (/^--with-zlib-lib=(.*)$/)
601 $withargs{zlib_lib}=$1;
603 elsif (/^--with-zlib-include=(.*)$/)
605 $withargs{zlib_include}="-I$1";
607 elsif (/^--with-fipslibdir=(.*)$/)
609 $config{fipslibdir}="$1/";
611 elsif (/^--with-baseaddr=(.*)$/)
613 $config{baseaddr}="$1";
615 elsif (/^--cross-compile-prefix=(.*)$/)
617 $config{cross_compile_prefix}=$1;
619 elsif (/^--config=(.*)$/)
623 elsif (/^-[lL](.*)$/ or /^-Wl,/)
627 else # common if (/^[-+]/), just pass down...
629 $_ =~ s/%([0-9a-f]{1,2})/chr(hex($1))/gei;
633 elsif ($_ =~ /^([^:]+):(.+)$/)
635 eval "\$table{\$1} = \"$2\""; # allow $xxx constructs in the string
640 die "target already defined - $target (offending arg: $_)\n" if ($target ne "");
643 unless ($_ eq $target || /^no-/ || /^disable-/)
645 # "no-..." follows later after implied disactivations
646 # have been derived. (Don't take this too seroiusly,
647 # we really only write OPTIONS to the Makefile out of
650 if ($config{options} eq "")
651 { $config{options} = $_; }
653 { $config{options} .= " ".$_; }
656 if (defined($config{api}) && !exists $apitable->{$config{api}}) {
657 die "***** Unsupported api compatibility level: $config{api}\n",
660 if (keys %unsupported_options)
662 die "***** Unsupported options: ",
663 join(", ", keys %unsupported_options), "\n";
669 delete $disabled{"shared"} if ($disabled{"shared"} =~ /^default/);
673 @{$config{dirs}} = grep !/^fips$/, @{$config{dirs}};
676 my @tocheckfor = (keys %disabled);
677 while (@tocheckfor) {
678 my %new_tocheckfor = ();
679 my @cascade_copy = (@disable_cascades);
680 while (@cascade_copy) {
681 my ($test, $descendents) = (shift @cascade_copy, shift @cascade_copy);
682 if (ref($test) eq "CODE" ? $test->() : defined($disabled{$test})) {
684 $new_tocheckfor{$_} => 1; $disabled{$_} = "forced";
685 } grep { !defined($disabled{$_}) } @$descendents;
688 @tocheckfor = (keys %new_tocheckfor);
691 if ($target eq "TABLE") {
692 foreach (sort keys %table) {
693 print_table_entry($_, "TABLE");
698 if ($target eq "LIST") {
699 foreach (sort keys %table) {
700 print $_,"\n" unless $table{$_}->{template};
705 if ($target eq "HASH") {
706 print "%table = (\n";
707 foreach (sort keys %table) {
708 print_table_entry($_, "HASH");
713 # Backward compatibility?
714 if ($target =~ m/^CygWin32(-.*)$/) {
715 $target = "Cygwin".$1;
718 foreach (sort (keys %disabled))
720 $config{options} .= " no-$_";
722 printf " no-%-12s %-10s", $_, "[$disabled{$_}]";
729 { $config{no_shared} = 1; }
732 elsif (/^static-engine$/)
734 elsif (/^zlib-dynamic$/)
739 { @{$config{dirs}} = grep !/^engine$/, @{$config{dirs}}; }
743 ($ALGO = $algo = $_) =~ tr/[\-a-z]/[_A-Z]/;
745 if (/^asm$/ || /^err$/ || /^hw$/ || /^hw-/ || /^async$/)
747 push @{$config{openssl_other_defines}}, "OPENSSL_NO_$ALGO";
748 print " OPENSSL_NO_$ALGO";
750 if (/^err$/) { $flags .= "-DOPENSSL_NO_ERR "; }
751 elsif (/^asm$/) { $no_asm = 1; }
755 ($ALGO,$algo) = ("RMD160","rmd160") if ($algo eq "ripemd");
757 push @{$config{openssl_algorithm_defines}}, "OPENSSL_NO_$ALGO";
758 $config{depflags} .= " -DOPENSSL_NO_$ALGO";
759 print " OPENSSL_NO_$ALGO";
761 # fix-up crypto/directory name(s)
762 $algo="whrlpool" if $algo eq "whirlpool";
763 $algo="ripemd" if $algo eq "rmd160";
764 @{$config{sdirs}} = grep { $_ ne $algo} @{$config{sdirs}};
775 foreach (sort @experimental)
778 ($ALGO = $_) =~ tr/[a-z]/[A-Z]/;
780 # opensslconf.h will set OPENSSL_NO_... unless OPENSSL_EXPERIMENTAL_... is defined
781 push @{$config{openssl_experimental_defines}}, "OPENSSL_NO_$ALGO";
782 $exp_cflags .= " -DOPENSSL_EXPERIMENTAL_$ALGO";
785 print "Configuring for $target\n";
787 # Support for legacy targets having a name starting with 'debug-'
788 my ($d, $t) = $target =~ m/^(debug-)?(.*)$/;
790 $build_prefix = "debug_";
792 # If we do not find debug-foo in the table, the target is set to foo.
793 if (!$table{$target}) {
797 $config{target} = $target;
798 delete $table{$base_target}->{template}; # or the next test will fail.
799 my %target = ( %{$table{$base_target}}, resolve_config($target) );
801 &usage if (!%target || $target{template});
803 $target{exe_extension}="";
804 $target{exe_extension}=".exe" if ($config{target} eq "Cygwin" || $config{target} eq "DJGPP" || $config{target} =~ /^mingw/);
805 $target{exe_extension}=".nlm" if ($config{target} =~ /netware/);
806 $target{exe_extension}=".pm" if ($config{target} =~ /vos/);
808 $default_ranlib = which("ranlib") || "true";
809 $config{perl} = $ENV{'PERL'} || which("perl5") || which("perl") || "perl";
810 my $make = $ENV{'MAKE'} || "make";
812 $config{cross_compile_prefix} = $ENV{'CROSS_COMPILE'}
813 if $config{cross_compile_prefix} eq "";
815 $config{prefix} = "/usr/local" if !$config{prefix};
816 $config{openssldir} = "ssl" if !$config{openssldir};
817 $config{openssldir} = catdir($config{prefix}, $config{openssldir})
818 unless file_name_is_absolute($config{openssldir});
820 # Allow environment CC to override compiler...
821 $target{cc} = $ENV{CC} || $target{cc};
823 # For cflags, lflags and ex_libs, add the debug_ or release_ attributes
824 # Do it in such a way that no spurious space is appended (hence the grep).
825 $config{cflags} = join(" ",
826 grep { $_ ne "" } ($target{cflags},
827 $target{$build_prefix."cflags"}));
828 $config{lflags} = join(" ",
829 grep { $_ ne "" } ($target{lflags},
830 $target{$build_prefix."lflags"}));
831 $config{ex_libs} = join(" ",
832 grep { $_ ne "" } ($target{ex_libs},
833 $target{$build_prefix."ex_libs"}));
835 $target{ranlib} = $ENV{'RANLIB'} || $target{ranlib} || $default_ranlib;
836 $target{ar} = $ENV{'AR'} || "ar";
837 $target{arflags} = "" if !defined($target{arflags});
839 # Make sure build_scheme is consistent.
840 $target{build_scheme} = [ $target{build_scheme} ]
841 if ref($target{build_scheme}) ne "ARRAY";
843 # if $config{prefix}/lib$target{multilib} is not an existing directory, then
844 # assume that it's not searched by linker automatically, in
845 # which case adding $target{multilib} suffix causes more grief than
846 # we're ready to tolerate, so don't...
847 $target{multilib}="" if !-d "$config{prefix}/lib$target{multilib}";
849 $config{libdir}="lib$target{multilib}" if $config{libdir} eq "";
850 $config{enginesdir}=$config{prefix} . "/" . $config{libdir} . "/engines";
852 $config{cflags} .= "$exp_cflags";
854 if ($target =~ /^mingw/ && `$target{cc} --target-help 2>&1` !~ m/-mno-cygwin/m)
856 $config{cflags} =~ s/-mno-cygwin\s*//;
857 $target{shared_ldflag} =~ s/-mno-cygwin\s*//;
860 if ($target =~ /linux.*-mips/ && !$no_asm && $flags !~ /-m(ips|arch=)/) {
861 # minimally required architecture flags for assembly modules
862 $config{cflags}="-mips2 $config{cflags}" if ($target =~ /mips32/);
863 $config{cflags}="-mips3 $config{cflags}" if ($target =~ /mips64/);
866 my $no_shared_warn=0;
867 my $no_user_cflags=0;
869 if ($flags ne "") { $config{cflags}="$flags$config{cflags}"; }
870 else { $no_user_cflags=1; }
872 # The DSO code currently always implements all functions so that no
873 # applications will have to worry about that from a compilation point
874 # of view. However, the "method"s may return zero unless that platform
875 # has support compiled in for them. Currently each method is enabled
876 # by a define "DSO_<name>" ... we translate the "dso_scheme" config
877 # string entry into using the following logic;
879 if (!$no_dso && $target{dso_scheme} ne "")
881 $target{dso_scheme} =~ tr/[a-z]/[A-Z]/;
882 if ($target{dso_scheme} eq "DLFCN")
884 $dso_cflags = "-DDSO_DLFCN -DHAVE_DLFCN_H";
886 elsif ($target{dso_scheme} eq "DLFCN_NO_H")
888 $dso_cflags = "-DDSO_DLFCN";
892 $dso_cflags = "-DDSO_$target{dso_scheme}";
894 $config{cflags} = "$dso_cflags $config{cflags}";
897 my $thread_cflags = "";
899 if ($target{thread_cflag} ne "(unknown)" && !$no_threads)
901 # If we know how to do it, support threads by default.
904 if ($target{thread_cflag} eq "(unknown)" && $threads)
906 # If the user asked for "threads", [s]he is also expected to
907 # provide any system-dependent compiler options that are
911 print "You asked for multi-threading support, but didn't\n";
912 print "provide any system-specific compiler options\n";
915 $thread_cflags="-DOPENSSL_THREADS" ;
916 push @thread_defines, "OPENSSL_THREADS";
920 $thread_cflags="-DOPENSSL_THREADS $target{thread_cflag}";
921 push @thread_defines, "OPENSSL_THREADS";
924 $config{ex_libs}="$libs$config{ex_libs}" if ($libs ne "");
928 $config{cflags}=~s/-D[BL]_ENDIAN// if ($config{fips});
933 $config{cflags} = "$thread_cflags $config{cflags}" if $thread_cflags;
934 push @{$config{openssl_thread_defines}}, @thread_defines;
939 $config{cflags} = "-DZLIB $config{cflags}";
940 if (defined($disabled{"zlib-dynamic"}))
942 if (defined($withargs{zlib_lib}))
944 $config{ex_libs} .= " -L" . $withargs{zlib_lib} . " -lz";
948 $config{ex_libs} .= " -lz";
953 $config{cflags} = "-DZLIB_SHARED $config{cflags}";
957 # With "deprecated" disable all deprecated features.
958 if (defined($disabled{"deprecated"})) {
959 $config{api} = $maxapi;
962 if ($target{shared_target} eq "")
964 $no_shared_warn = 1 if !$config{no_shared} && !$config{fips};
965 $config{no_shared} = 1;
967 if (!$config{no_shared})
969 if ($target{shared_cflag} ne "")
971 $config{cflags} = "$target{shared_cflag} -DOPENSSL_PIC $config{cflags}";
975 if ($target{build_scheme}->[0] ne "mk1mf")
977 # add {no-}static-engine to options to allow mkdef.pl to work without extra arguments
978 if ($config{no_shared})
980 push @{$config{openssl_other_defines}}, "OPENSSL_NO_DYNAMIC_ENGINE";
981 $config{options}.=" static-engine";
985 push @{$config{openssl_other_defines}}, "OPENSSL_NO_STATIC_ENGINE";
986 $config{options}.=" no-static-engine";
993 # Unlike other OSes (like Solaris, Linux, Tru64, IRIX) BSD run-time
994 # linkers (tested OpenBSD, NetBSD and FreeBSD) "demand" RPATH set on
995 # .so objects. Apparently application RPATH is not global and does
996 # not apply to .so linked with other .so. Problem manifests itself
997 # when libssl.so fails to load libcrypto.so. One can argue that we
998 # should engrave this into Makefile.shared rules or into BSD-* config
999 # lines above. Meanwhile let's try to be cautious and pass -rpath to
1000 # linker only when --prefix is not /usr.
1001 if ($target =~ /^BSD-/)
1003 $target{shared_ldflag}.=" -Wl,-rpath,\$\$(LIBRPATH)" if ($config{prefix} !~ m|^/usr[/]*$|);
1006 if ($target{sys_id} ne "")
1008 #$config{cflags}="-DOPENSSL_SYS_$target{sys_id} $config{cflags}";
1009 push @{$config{openssl_sys_defines}}, "OPENSSL_SYS_$target{sys_id}";
1012 if ($target{ranlib} eq "")
1014 $target{ranlib} = $default_ranlib;
1018 $target{cpuid_asm_src}=$table{BASE}->{cpuid_asm_src} if ($config{processor} eq "386");
1019 $target{cpuid_asm_src}.=" uplink.c uplink-x86.s" if ($config{cflags} =~ /-DOPENSSL_USE_APPLINK/);
1021 $target{bn_asm_src} =~ s/\w+-gf2m.c// if (defined($disabled{ec2m}));
1023 # bn-586 is the only one implementing bn_*_part_words
1024 $config{cflags}.=" -DOPENSSL_BN_ASM_PART_WORDS" if ($target{bn_asm_src} =~ /bn-586/);
1025 $config{cflags}.=" -DOPENSSL_IA32_SSE2" if (!$no_sse2 && $target{bn_asm_src} =~ /86/);
1027 $config{cflags}.=" -DOPENSSL_BN_ASM_MONT" if ($target{bn_asm_src} =~ /-mont/);
1028 $config{cflags}.=" -DOPENSSL_BN_ASM_MONT5" if ($target{bn_asm_src} =~ /-mont5/);
1029 $config{cflags}.=" -DOPENSSL_BN_ASM_GF2m" if ($target{bn_asm_src} =~ /-gf2m/);
1031 if ($config{fips}) {
1032 push @{$config{openssl_other_defines}}, "OPENSSL_FIPS";
1035 if ($target{sha1_asm_src}) {
1036 $config{cflags}.=" -DSHA1_ASM" if ($target{sha1_asm_src} =~ /sx86/ || $target{sha1_asm_src} =~ /sha1/);
1037 $config{cflags}.=" -DSHA256_ASM" if ($target{sha1_asm_src} =~ /sha256/);
1038 $config{cflags}.=" -DSHA512_ASM" if ($target{sha1_asm_src} =~ /sha512/);
1040 if ($target{md5_asm_src}) {
1041 $config{cflags}.=" -DMD5_ASM";
1043 $target{cast_asm_src}=$table{BASE}->{cast_asm_src} if (!$config{no_shared}); # CAST assembler is not PIC
1044 if ($target{rmd160_asm_src}) {
1045 $config{cflags}.=" -DRMD160_ASM";
1047 if ($target{aes_asm_src}) {
1048 $config{cflags}.=" -DAES_ASM" if ($target{aes_asm_src} =~ m/\baes-/);;
1049 # aes-ctr.fake is not a real file, only indication that assembler
1050 # module implements AES_ctr32_encrypt...
1051 $config{cflags}.=" -DAES_CTR_ASM" if ($target{aes_asm_src} =~ s/\s*aes-ctr\.fake//);
1052 # aes-xts.fake indicates presence of AES_xts_[en|de]crypt...
1053 $config{cflags}.=" -DAES_XTS_ASM" if ($target{aes_asm_src} =~ s/\s*aes-xts\.fake//);
1054 $target{aes_asm_src} =~ s/\s*(vpaes|aesni)-x86\.s//g if ($no_sse2);
1055 $config{cflags}.=" -DVPAES_ASM" if ($target{aes_asm_src} =~ m/vpaes/);
1056 $config{cflags}.=" -DBSAES_ASM" if ($target{aes_asm_src} =~ m/bsaes/);
1058 if ($target{wp_asm_src} =~ /mmx/) {
1059 if ($config{processor} eq "386") {
1060 $target{wp_asm_src}=$table{BASE}->{wp_asm_src};
1061 } elsif (!$disabled{"whirlpool"}) {
1062 $config{cflags}.=" -DWHIRLPOOL_ASM";
1065 if ($target{modes_asm_src} =~ /ghash-/) {
1066 $config{cflags}.=" -DGHASH_ASM";
1068 if ($target{ec_asm_src} =~ /ecp_nistz256/) {
1069 $config{cflags}.=" -DECP_NISTZ256_ASM";
1071 if ($target{poly1305_asm_src} ne "") {
1072 $config{cflags}.=" -DPOLY1305_ASM";
1076 # Is the compiler gcc or clang? $ecc is used below to see if error-checking
1078 my $ecc = $target{cc};
1079 my $ccpcc = "$config{cross_compile_prefix}$target{cc}";
1080 $config{makedepprog} = 'makedepend';
1081 open(PIPE, "$ccpcc --version 2>&1 | head -2 |");
1083 $config{makedepprog} = $ccpcc if /clang|gcc/;
1084 $ecc = "clang" if /clang/;
1085 $ecc = "gcc" if /gcc/;
1089 $config{depflags} =~ s/^\s*//;
1092 # Deal with bn_ops ###################################################
1095 $config{export_var_as_fn} =0;
1096 my $def_int="unsigned int";
1097 $config{rc4_int} =$def_int;
1098 ($config{b64l},$config{b64},$config{b32})=(0,0,1);
1101 foreach (sort split(/\s+/,$target{bn_ops})) {
1102 $count++ if /SIXTY_FOUR_BIT|SIXTY_FOUR_BIT_LONG|THIRTY_TWO_BIT/;
1103 $config{export_var_as_fn}=1 if $_ eq 'EXPORT_VAR_AS_FN';
1104 $config{bn_ll}=1 if $_ eq 'BN_LLONG';
1105 $config{rc4_int}="unsigned char" if $_ eq 'RC4_CHAR';
1106 ($config{b64l},$config{b64},$config{b32})
1107 =(0,1,0) if $_ eq 'SIXTY_FOUR_BIT';
1108 ($config{b64l},$config{b64},$config{b32})
1109 =(1,0,0) if $_ eq 'SIXTY_FOUR_BIT_LONG';
1110 ($config{b64l},$config{b64},$config{b32})
1111 =(0,0,1) if $_ eq 'THIRTY_TWO_BIT';
1113 die "Exactly one of SIXTY_FOUR_BIT|SIXTY_FOUR_BIT_LONG|THIRTY_TWO_BIT can be set in bn_ops\n"
1117 # Hack cflags for better warnings (dev option) #######################
1119 # "Stringify" the C flags string. This permits it to be made part of a string
1120 # and works as well on command lines.
1121 $config{cflags} =~ s/([\\\"])/\\\1/g;
1123 if (defined($config{api})) {
1124 $config{openssl_api_defines} = [ "OPENSSL_MIN_API=".$apitable->{$config{api}} ];
1125 my $apiflag = sprintf("-DOPENSSL_API_COMPAT=%s", $apitable->{$config{api}});
1126 $default_depflags .= " $apiflag";
1127 $config{cflags} .= " $apiflag";
1130 if ($strict_warnings)
1133 die "ERROR --strict-warnings requires gcc or clang"
1134 unless $ecc eq 'gcc' || $ecc eq 'clang';
1135 foreach $wopt (split /\s+/, $gcc_devteam_warn)
1137 $config{cflags} .= " $wopt" unless ($config{cflags} =~ /(^|\s)$wopt(\s|$)/)
1139 if ($ecc eq "clang")
1141 foreach $wopt (split /\s+/, $clang_devteam_warn)
1143 $config{cflags} .= " $wopt" unless ($config{cflags} =~ /(^|\s)$wopt(\s|$)/)
1146 if ($target !~ /^mingw/)
1148 foreach $wopt (split /\s+/, $memleak_devteam_backtrace)
1150 $config{cflags} .= " $wopt" unless ($config{cflags} =~ /(^|\s)$wopt(\s|$)/)
1152 if ($target =~ /^BSD-/)
1154 $config{ex_libs} .= " -lexecinfo";
1159 # If we use the unified build, collect information from build.info files
1160 my %unified_info = ();
1162 if ($target{build_scheme}->[0] eq "unified") {
1163 use lib catdir(dirname(__FILE__),"util");
1164 use with_fallback qw(Text::Template);
1166 # Helpers to produce clean paths with no /../ in the middle and so on.
1167 sub int_absolutedir {
1170 # Required, because realpath only works properly with existing dirs
1173 my $res = realpath($dir);
1179 my $base = shift || ".";
1181 my $res = abs2rel(int_absolutedir($dir), rel2abs($base));
1182 #print STDERR "DEBUG[cleandir]: $dir , $base => $res\n";
1188 my $base = shift || ".";
1189 my $d = dirname($file);
1190 my $f = basename($file);
1192 my $res = abs2rel(catfile(int_absolutedir($d), $f), rel2abs($base));
1193 #print STDERR "DEBUG[cleanfile]: $d , $f => $res\n";
1197 my @build_infos = ( [ ".", "build.info" ] );
1198 foreach (@{$config{dirs}}) {
1199 push @build_infos, [ $_, "build.info" ]
1200 if (-f catfile($srcdir, $_, "build.info"));
1202 foreach (@{$config{sdirs}}) {
1203 push @build_infos, [ catdir("crypto", $_), "build.info" ]
1204 if (-f catfile($srcdir, "crypto", $_, "build.info"));
1206 foreach (@{$config{engdirs}}) {
1207 push @build_infos, [ catdir("engines", $_), "build.info" ]
1208 if (-f catfile($srcdir, "engines", $_, "build.info"));
1211 foreach (@build_infos) {
1212 my $sourced = catdir($srcdir, $_->[0]);
1213 my $buildd = catdir($blddir, $_->[0]);
1218 # The basic things we're trying to build
1224 my @intermediates = ();
1232 my %sharednames = ();
1234 my $template = Text::Template->new(TYPE => 'FILE',
1235 SOURCE => catfile($sourced, $f));
1236 die "Something went wrong with $sourced/$f: $!\n" unless $template;
1239 $template->fill_in(HASH => { config => \%config,
1241 builddir => abs2rel($buildd, $blddir),
1242 sourcedir => abs2rel($sourced, $blddir),
1243 buildtop => abs2rel($blddir, $blddir),
1244 sourcetop => abs2rel($srcdir, $blddir) },
1245 DELIMITERS => [ "{-", "-}" ]);
1247 # The top item of this stack has the following values
1248 # -2 positive already run and we found ELSE (following ELSIF should fail)
1249 # -1 positive already run (skip until ENDIF)
1250 # 0 negatives so far (if we're at a condition, check it)
1251 # 1 last was positive (don't skip lines until next ELSE, ELSIF or ENDIF)
1252 # 2 positive ELSE (following ELSIF should fail)
1254 collect_information(
1255 collect_from_array([ @text ],
1256 qr/\\$/ => sub { my $l1 = shift; my $l2 = shift;
1257 $l1 =~ s/\\$//; $l1.$l2 }),
1258 # Info we're looking for
1259 qr/^\s*IF\[((?:\\.|[^\\\]])*)\]\s*$/
1260 => sub { push @skip, !! $1; },
1261 qr/^\s*ELSIF\[((?:\\.|[^\\\]])*)\]\s*$/
1262 => sub { die "ELSIF out of scope" if ! @skip;
1263 die "ELSIF following ELSE" if abs($skip[$#skip]) == 2;
1264 $skip[$#skip] = -1 if $skip[$#skip] != 0;
1265 $skip[$#skip] = !! $1
1266 if $skip[$#skip] == 0; },
1268 => sub { die "ELSE out of scope" if ! @skip;
1269 $skip[$#skip] = -2 if $skip[$#skip] != 0;
1270 $skip[$#skip] = 2 if $skip[$#skip] == 0; },
1272 => sub { die "ENDIF out of scope" if ! @skip;
1274 qr/^\s*PROGRAMS\s*=\s*(.*)\s*$/
1275 => sub { push @programs, split(/\s+/, $1)
1276 if !@skip || $skip[$#skip] > 0 },
1277 qr/^\s*LIBS\s*=\s*(.*)\s*$/
1278 => sub { push @libraries, split(/\s+/, $1)
1279 if !@skip || $skip[$#skip] > 0 },
1280 qr/^\s*ENGINES\s*=\s*(.*)\s*$/
1281 => sub { push @engines, split(/\s+/, $1)
1282 if !@skip || $skip[$#skip] > 0 },
1283 qr/^\s*SCRIPTS\s*=\s*(.*)\s*$/
1284 => sub { push @scripts, split(/\s+/, $1)
1285 if !@skip || $skip[$#skip] > 0 },
1286 qr/^\s*EXTRA\s*=\s*(.*)\s*$/
1287 => sub { push @extra, split(/\s+/, $1)
1288 if !@skip || $skip[$#skip] > 0 },
1290 qr/^\s*ORDINALS\[((?:\\.|[^\\\]])+)\]\s*=\s*(.*)\s*$/,
1291 => sub { push @{$ordinals{$1}}, split(/\s+/, $2)
1292 if !@skip || $skip[$#skip] > 0 },
1293 qr/^\s*SOURCE\[((?:\\.|[^\\\]])+)\]\s*=\s*(.*)\s*$/
1294 => sub { push @{$sources{$1}}, split(/\s+/, $2)
1295 if !@skip || $skip[$#skip] > 0 },
1296 qr/^\s*INCLUDE\[((?:\\.|[^\\\]])+)\]\s*=\s*(.*)\s*$/
1297 => sub { push @{$includes{$1}}, split(/\s+/, $2)
1298 if !@skip || $skip[$#skip] > 0 },
1299 qr/^\s*DEPEND\[((?:\\.|[^\\\]])+)\]\s*=\s*(.*)\s*$/
1300 => sub { push @{$depends{$1}}, split(/\s+/, $2)
1301 if !@skip || $skip[$#skip] > 0 },
1302 qr/^\s*RENAME\[((?:\\.|[^\\\]])+)\]\s*=\s*(.*)\s*$/
1303 => sub { push @{$renames{$1}}, split(/\s+/, $2)
1304 if !@skip || $skip[$#skip] > 0 },
1305 qr/^\s*SHARED_NAME\[((?:\\.|[^\\\]])+)\]\s*=\s*(.*)\s*$/
1306 => sub { push @{$sharednames{$1}}, split(/\s+/, $2)
1307 if !@skip || $skip[$#skip] > 0 },
1308 qr/^\s*BEGINRAW\[((?:\\.|[^\\\]])+)\]\s*$/
1310 my $lineiterator = shift;
1311 my $target_kind = $1;
1312 while (defined $lineiterator->()) {
1314 if (/^\s*ENDRAW\[((?:\\.|[^\\\]])+)\]\s*$/) {
1315 die "ENDRAW doesn't match BEGINRAW"
1316 if $1 ne $target_kind;
1319 next if @skip && $skip[$#skip] <= 0;
1321 if ($target_kind eq $target{build_file}
1322 || $target_kind eq $target{build_file}."(".$target{build_scheme}->[1].")");
1325 qr/^(?:#.*|\s*)$/ => sub { },
1326 "OTHERWISE" => sub { die "Something wrong with this line:\n$_\nat $sourced/$f" }
1328 die "runaway IF?" if (@skip);
1330 foreach (keys %renames) {
1331 die "$_ renamed to more than one thing: "
1332 ,join(" ", @{$renames{$_}}),"\n"
1333 if scalar @{$renames{$_}} > 1;
1334 my $dest = cleanfile(catfile($buildd, $_), $blddir);
1335 my $to = cleanfile(catfile($buildd, $renames{$_}->[0]), $blddir);
1336 die "$dest renamed to more than one thing: "
1337 ,$unified_info{rename}->{$dest}, $to
1338 unless !defined($unified_info{rename}->{$dest})
1339 or $unified_info{rename}->{$dest} eq $to;
1340 $unified_info{rename}->{$dest} = $to;
1343 foreach (@programs) {
1344 my $program = cleanfile(catfile($buildd, $_), $blddir);
1345 if ($unified_info{rename}->{$program}) {
1346 $program = $unified_info{rename}->{$program};
1348 $unified_info{programs}->{$program} = 1;
1351 foreach (@libraries) {
1352 my $library = cleanfile(catfile($buildd, $_), $blddir);
1353 if ($unified_info{rename}->{$library}) {
1354 $library = $unified_info{rename}->{$library};
1356 $unified_info{libraries}->{$library} = 1;
1359 die <<"EOF" if $config{no_shared} && scalar @engines;
1360 ENGINES can only be used if configured with 'shared'.
1361 This is usually a fault in a build.info file.
1363 foreach (@engines) {
1364 my $library = cleanfile(catfile($buildd, $_), $blddir);
1365 if ($unified_info{rename}->{$library}) {
1366 $library = $unified_info{rename}->{$library};
1368 $unified_info{engines}->{$library} = 1;
1371 foreach (@scripts) {
1372 my $script = cleanfile(catfile($buildd, $_), $blddir);
1373 if ($unified_info{rename}->{$script}) {
1374 $script = $unified_info{rename}->{$script};
1376 $unified_info{scripts}->{$script} = 1;
1380 my $extra = cleanfile(catfile($buildd, $_), $blddir);
1381 $unified_info{extra}->{$extra} = 1;
1384 push @{$unified_info{rawlines}}, @rawlines;
1386 if (!$config{no_shared}) {
1387 # Check sharednames.
1388 foreach (keys %sharednames) {
1389 my $dest = cleanfile(catfile($buildd, $_), $blddir);
1390 if ($unified_info{rename}->{$dest}) {
1391 $dest = $unified_info{rename}->{$dest};
1393 die "shared_name for $dest with multiple values: "
1394 ,join(" ", @{$sharednames{$_}}),"\n"
1395 if scalar @{$sharednames{$_}} > 1;
1396 my $to = cleanfile(catfile($buildd, $sharednames{$_}->[0]),
1398 die "shared_name found for a library $dest that isn't defined\n"
1399 unless $unified_info{libraries}->{$dest};
1400 die "shared_name for $dest with multiple values: "
1401 ,$unified_info{sharednames}->{$dest}, ", ", $to
1402 unless !defined($unified_info{sharednames}->{$dest})
1403 or $unified_info{sharednames}->{$dest} eq $to;
1404 $unified_info{sharednames}->{$dest} = $to;
1407 # Additionally, we set up sharednames for libraries that don't
1408 # have any, as themselves.
1409 foreach (keys %{$unified_info{libraries}}) {
1410 if (!defined $unified_info{sharednames}->{$_}) {
1411 $unified_info{sharednames}->{$_} = $_
1416 foreach (keys %ordinals) {
1418 my $ddest = cleanfile(catfile($buildd, $_), $blddir);
1419 if ($unified_info{rename}->{$ddest}) {
1420 $ddest = $unified_info{rename}->{$ddest};
1422 foreach (@{$ordinals{$dest}}) {
1423 my %known_ordinals =
1426 cleanfile(catfile($sourced, "util", "libeay.num"), $blddir),
1428 cleanfile(catfile($sourced, "util", "ssleay.num"), $blddir)
1430 my $o = $known_ordinals{$_};
1431 die "Ordinals for $ddest defined more than once\n"
1432 if $unified_info{ordinals}->{$ddest};
1433 $unified_info{ordinals}->{$ddest} = [ $_, $o ];
1437 foreach (keys %sources) {
1439 my $ddest = cleanfile(catfile($buildd, $_), $blddir);
1440 if ($unified_info{rename}->{$ddest}) {
1441 $ddest = $unified_info{rename}->{$ddest};
1443 foreach (@{$sources{$dest}}) {
1444 my $s = cleanfile(catfile($sourced, $_), $blddir);
1446 # If it isn't in the source tree, we assume it's generated
1449 $s = cleanfile(catfile($buildd, $_), $blddir);
1451 # We recognise C and asm files
1452 if ($s =~ /\.[csS]\b$/) {
1453 (my $o = $_) =~ s/\.[csS]\b$/.o/;
1454 $o = cleanfile(catfile($buildd, $o), $blddir);
1455 $unified_info{sources}->{$ddest}->{$o} = 1;
1456 $unified_info{sources}->{$o}->{$s} = 1;
1458 $unified_info{sources}->{$ddest}->{$s} = 1;
1463 foreach (keys %depends) {
1465 my $ddest = cleanfile(catfile($buildd, $_), $blddir);
1466 if ($unified_info{rename}->{$ddest}) {
1467 $ddest = $unified_info{rename}->{$ddest};
1469 foreach (@{$depends{$dest}}) {
1470 my $d = cleanfile(catfile($sourced, $_), $blddir);
1472 # If it isn't found in the source, let's assume it's generated
1473 # and that the Makefile template has the lines
1475 $d = cleanfile(catfile($buildd, $_), $blddir);
1477 # Take note if the file to depend on is being renamed
1478 if ($unified_info{rename}->{$d}) {
1479 $d = $unified_info{rename}->{$d};
1481 $unified_info{depends}->{$ddest}->{$d} = 1;
1482 # If we depend on a header file, let's make sure it
1485 my $i = dirname($d);
1486 push @{$unified_info{includes}->{$ddest}}, $i
1487 unless grep { $_ eq $i } @{$unified_info{includes}->{$ddest}};
1492 foreach (keys %includes) {
1494 my $ddest = cleanfile(catfile($buildd, $_), $blddir);
1495 if ($unified_info{rename}->{$ddest}) {
1496 $ddest = $unified_info{rename}->{$ddest};
1498 foreach (@{$includes{$dest}}) {
1499 my $i = cleandir(catdir($sourced, $_), $blddir);
1500 push @{$unified_info{includes}->{$ddest}}, $i
1501 unless grep { $_ eq $i } @{$unified_info{includes}->{$ddest}};
1506 ### Make unified_info a bit more efficient
1507 # One level structures
1508 foreach (("programs", "libraries", "engines", "scripts", "extra")) {
1509 $unified_info{$_} = [ sort keys %{$unified_info{$_}} ];
1511 # Two level structures
1512 foreach my $l1 (("sources", "ldadd", "depends")) {
1513 foreach my $l2 (sort keys %{$unified_info{$l1}}) {
1514 $unified_info{$l1}->{$l2} =
1515 [ sort keys %{$unified_info{$l1}->{$l2}} ];
1520 # For the schemes that need it, we provide the old *_obj configs
1521 # from the *_asm_obj ones
1522 foreach (grep /_asm_src$/, keys %target) {
1524 (my $obj = $_) =~ s/_asm_src$/_obj/;
1525 ($target{$obj} = $target{$src}) =~ s/\.[csS]\b/.o/g;
1528 # Write down our configuration where it fits #########################
1530 open(OUT,">configdata.pm") || die "unable to create configdata.pm: $!\n";
1538 #use vars qw(\@ISA \@EXPORT);
1539 our \@ISA = qw(Exporter);
1540 our \@EXPORT = qw(\%config \%target %withargs %unified_info);
1543 print OUT "our %config = (\n";
1544 foreach (sort keys %config) {
1545 if (ref($config{$_}) eq "ARRAY") {
1546 print OUT " ", $_, " => [ ", join(", ",
1547 map { quotify("perl", $_) }
1548 @{$config{$_}}), " ],\n";
1550 print OUT " ", $_, " => ", quotify("perl", $config{$_}), ",\n"
1557 print OUT "our %target = (\n";
1558 foreach (sort keys %target) {
1559 if (ref($target{$_}) eq "ARRAY") {
1560 print OUT " ", $_, " => [ ", join(", ",
1561 map { quotify("perl", $_) }
1562 @{$target{$_}}), " ],\n";
1564 print OUT " ", $_, " => ", quotify("perl", $target{$_}), ",\n"
1571 print OUT "our \%available_protocols = (\n";
1572 print OUT " tls => [ ", join(", ", map { quotify("perl", $_) } @tls), " ],\n";
1573 print OUT " dtls => [ ", join(", ", map { quotify("perl", $_) } @dtls), " ],\n";
1578 print OUT "our \%disabled = (\n";
1579 foreach (sort keys %disabled) {
1580 print OUT " ", quotify("perl", $_), " => ", quotify("perl", $disabled{$_}), ",\n";
1586 print OUT "our %withargs = (\n";
1587 foreach (sort keys %withargs) {
1588 if (ref($withargs{$_}) eq "ARRAY") {
1589 print OUT " ", $_, " => [ ", join(", ",
1590 map { quotify("perl", $_) }
1591 @{$withargs{$_}}), " ],\n";
1593 print OUT " ", $_, " => ", quotify("perl", $withargs{$_}), ",\n"
1600 if ($target{build_scheme}->[0] eq "unified") {
1605 if (ref $_ eq "ARRAY") {
1606 print OUT " "x$indent, "[\n";
1608 $recurse->($indent + 4, $_);
1610 print OUT " "x$indent, "],\n";
1611 } elsif (ref $_ eq "HASH") {
1613 print OUT " "x$indent, "{\n";
1614 foreach (sort keys %h) {
1615 if (ref $h{$_} eq "") {
1616 print OUT " "x($indent + 4), quotify("perl", $_), " => ", quotify("perl", $h{$_}), ",\n";
1618 print OUT " "x($indent + 4), quotify("perl", $_), " =>\n";
1619 $recurse->($indent + 8, $h{$_});
1622 print OUT " "x$indent, "},\n";
1624 print OUT " "x$indent, quotify("perl", $_), ",\n";
1628 print OUT "our %unified_info = (\n";
1629 foreach (sort keys %unified_info) {
1630 if (ref $unified_info{$_} eq "") {
1631 print OUT " "x4, quotify("perl", $_), " => ", quotify("perl", $unified_info{$_}), ",\n";
1633 print OUT " "x4, quotify("perl", $_), " =>\n";
1634 $recurse->(8, $unified_info{$_});
1645 die <<"EOF" if $target{build_scheme}->[0] ne "unified" && $srcdir ne $blddir;
1647 ***** Trying building anywhere else than in the source tree will not
1648 ***** work for target $config{target}. To make it possible, it needs
1649 ***** to use the "unified" build scheme.
1653 print "IsMK1MF =", ($target{build_scheme}->[0] eq "mk1mf" ? "yes" : "no"), "\n";
1654 print "CC =$target{cc}\n";
1655 print "CFLAG =$config{cflags}\n";
1656 print "LFLAGS =$config{lflags}\n";
1657 print "EX_LIBS =$config{ex_libs}\n";
1658 print "CPUID_OBJ =$target{cpuid_obj}\n";
1659 print "BN_ASM =$target{bn_obj}\n";
1660 print "EC_ASM =$target{ec_obj}\n";
1661 print "DES_ENC =$target{des_obj}\n";
1662 print "AES_ENC =$target{aes_obj}\n";
1663 print "BF_ENC =$target{bf_obj}\n";
1664 print "CAST_ENC =$target{cast_obj}\n";
1665 print "RC4_ENC =$target{rc4_obj}\n";
1666 print "RC5_ENC =$target{rc5_obj}\n";
1667 print "MD5_OBJ_ASM =$target{md5_obj}\n";
1668 print "SHA1_OBJ_ASM =$target{sha1_obj}\n";
1669 print "RMD160_OBJ_ASM=$target{rmd160_obj}\n";
1670 print "CMLL_ENC =$target{cmll_obj}\n";
1671 print "MODES_OBJ =$target{modes_obj}\n";
1672 print "PADLOCK_OBJ =$target{padlock_obj}\n";
1673 print "CHACHA_ENC =$target{chacha_obj}\n";
1674 print "POLY1305_OBJ =$target{poly1305_obj}\n";
1675 print "PROCESSOR =$config{processor}\n";
1676 print "RANLIB =$target{ranlib}\n";
1677 print "ARFLAGS =$target{arflags}\n";
1678 print "PERL =$config{perl}\n";
1680 print "SIXTY_FOUR_BIT_LONG mode\n" if $config{b64l};
1681 print "SIXTY_FOUR_BIT mode\n" if $config{b64};
1682 print "THIRTY_TWO_BIT mode\n" if $config{b32};
1683 print "BN_LLONG mode\n" if $config{bn_ll};
1684 print "RC4 uses $config{rc4_int}\n" if $config{rc4_int} != $def_int;
1686 make_path(catdir($blddir, "include/openssl"));
1687 run_dofile(catfile($blddir, "include/openssl/opensslconf.h"),
1688 catfile($srcdir, "include/openssl/opensslconf.h.in"));
1690 make_path(catdir($blddir, "crypto/include/internal"));
1691 foreach my $alg ( 'bn' ) {
1692 run_dofile(catfile($blddir, "crypto/include/internal/${alg}_conf.h"),
1693 catfile($srcdir, "crypto/include/internal/${alg}_conf.h.in"));
1697 ### When the old "unixmake" scheme goes away, so does this function
1699 sub build_Makefile {
1700 run_dofile("Makefile","Makefile.in");
1702 # Copy all Makefile.in to Makefile (except top-level)
1711 return if ($_ ne "Makefile.in" || $File::Find::dir eq ".");
1712 my $in = IO::File->new($_, "r") or
1713 die sprintf "Error reading Makefile.in in %s: !$\n",
1715 my $out = IO::File->new("Makefile", "w") or
1716 die sprintf "Error writing Makefile in %s: !$\n",
1718 print $out "# Generated from $_, do not edit\n";
1719 while (my $line = <$in>) { print $out $line }
1721 die sprintf "Error reading Makefile.in in %s: !$\n",
1724 die sprintf "Error writing Makefile in %s: !$\n",
1733 die "unified build currently does nothing";
1738 run_dofile("util/domd", "util/domd.in");
1739 chmod 0755, "util/domd";
1741 my $make_command = "$make PERL=\'$config{perl}\'";
1742 my $make_targets = "";
1743 $make_targets .= " depend" if $config{depflags} ne $default_depflags && $make_depend;
1744 (system $make_command.$make_targets) == 0 or die "make $make_targets failed"
1745 if $make_targets ne "";
1746 if ($config{depflags} ne $default_depflags && !$make_depend) {
1747 $warn_make_depend++;
1751 # The only reason we do this is to have something to build MINFO from
1754 open (OUT,">crypto/buildinf.h") || die "Can't open buildinf.h";
1757 /* auto-generated by Configure for crypto/cversion.c:
1758 * for Unix builds, crypto/Makefile.ssl generates functional definitions;
1759 * Windows builds (and other mk1mf builds) compile cversion.c with
1760 * -DMK1MF_BUILD and use definitions added to this file by util/mk1mf.pl. */
1761 #error "Windows builds (PLATFORM=$target) use mk1mf.pl-created Makefiles"
1766 # create the ms/version32.rc file if needed
1767 if (! grep /^netware/, @{$target{build_scheme}}) {
1768 my ($v1, $v2, $v3, $v4);
1769 if ($config{version_num} =~ /^0x([0-9a-f]{1})([0-9a-f]{2})([0-9a-f]{2})([0-9a-f]{2})([0-9a-f]{1})L$/i) {
1775 open (OUT,">ms/version32.rc") || die "Can't open ms/version32.rc";
1782 FILEVERSION $v1,$v2,$v3,$v4
1783 PRODUCTVERSION $v1,$v2,$v3,$v4
1790 FILEOS VOS__WINDOWS32
1794 BLOCK "StringFileInfo"
1799 VALUE "CompanyName", "The OpenSSL Project, http://www.openssl.org/\\0"
1800 VALUE "FileDescription", "OpenSSL Shared Library\\0"
1801 VALUE "FileVersion", "$config{version}\\0"
1803 VALUE "InternalName", "libeay32\\0"
1804 VALUE "OriginalFilename", "libeay32.dll\\0"
1806 VALUE "InternalName", "ssleay32\\0"
1807 VALUE "OriginalFilename", "ssleay32.dll\\0"
1809 VALUE "ProductName", "The OpenSSL Toolkit\\0"
1810 VALUE "ProductVersion", "$config{version}\\0"
1812 //VALUE "Comments", "\\0"
1813 VALUE "LegalCopyright", "Copyright © 1998-2015 The OpenSSL Project. Copyright © 1995-1998 Eric A. Young, Tim J. Hudson. All rights reserved.\\0"
1814 //VALUE "LegalTrademarks", "\\0"
1815 //VALUE "PrivateBuild", "\\0"
1816 //VALUE "SpecialBuild", "\\0"
1821 VALUE "Translation", 0x409, 0x4b0
1830 my ($builder, @builder_opts) = @{$target{build_scheme}};
1831 $builders{$builder}->(@builder_opts);
1835 Configured for $target.
1838 print <<"EOF" if (!$no_threads && !$threads);
1840 The library could not be configured for supporting multi-threaded
1841 applications as the compiler options required on this system are not known.
1842 See file INSTALL for details if you need multi-threading.
1845 print <<"EOF" if ($no_shared_warn);
1847 You gave the option 'shared', which is not supported on this platform, so
1848 we will pretend you gave the option 'no-shared'. If you know how to implement
1849 shared libraries, please let us know (but please first make sure you have
1850 tried with a current version of OpenSSL).
1853 print <<"EOF" if ($warn_make_depend);
1855 *** Because of configuration changes, you MUST do the following before
1863 ######################################################################
1865 # Helpers and utility functions
1868 # Configuration file reading #########################################
1870 # Helper function to implement conditional inheritance depending on the
1871 # value of $no_asm. Used in inherit_from values as follows:
1873 # inherit_from => [ "template", asm("asm_tmpl") ]
1882 # Helper function to implement adding values to already existing configuration
1883 # values. It handles elements that are ARRAYs, CODEs and scalars
1885 my $separator = shift;
1887 # If there's any ARRAY in the collection of values, we will return
1888 # an ARRAY of combined values, otherwise a string of joined values
1889 # with $separator as the separator.
1890 my $found_array = 0;
1894 if (ref($_) eq "ARRAY") {
1905 join($separator, @values);
1909 my $separator = shift;
1911 sub { _add($separator, @x, @_) };
1914 my $separator = shift;
1916 sub { _add($separator, @_, @x) };
1919 # configuration reader, evaluates the input file as a perl script and expects
1920 # it to fill %targets with target configurations. Those are then added to
1924 open(CONFFILE, "< $fname")
1925 or die "Can't open configuration file '$fname'!\n";
1928 my $content = <CONFFILE>;
1933 local %table = %::table; # Protect %table from tampering
1939 # For each target, check that it's configured with a hash table.
1940 foreach (keys %targets) {
1941 if (ref($targets{$_}) ne "HASH") {
1942 if (ref($targets{$_}) eq "") {
1943 warn "Deprecated target configuration for $_, ignoring...\n";
1945 warn "Misconfigured target configuration for $_ (should be a hash table), ignoring...\n";
1947 delete $targets{$_};
1951 %table = (%table, %targets);
1955 # configuration resolver. Will only resolve all the lazy evalutation
1956 # codeblocks for the chozen target and all those it inherits from,
1958 sub resolve_config {
1960 my @breadcrumbs = @_;
1962 if (grep { $_ eq $target } @breadcrumbs) {
1963 die "inherit_from loop! target backtrace:\n "
1964 ,$target,"\n ",join("\n ", @breadcrumbs),"\n";
1967 if (!defined($table{$target})) {
1968 warn "Warning! target $target doesn't exist!\n";
1971 # Recurse through all inheritances. They will be resolved on the
1972 # fly, so when this operation is done, they will all just be a
1973 # bunch of attributes with string values.
1974 # What we get here, though, are keys with references to lists of
1975 # the combined values of them all. We will deal with lists after
1976 # this stage is done.
1977 my %combined_inheritance = ();
1978 if ($table{$target}->{inherit_from}) {
1980 map { ref($_) eq "CODE" ? $_->() : $_ } @{$table{$target}->{inherit_from}};
1981 foreach (@inherit_from) {
1982 my %inherited_config = resolve_config($_, $target, @breadcrumbs);
1984 # 'template' is a marker that's considered private to
1985 # the config that had it.
1986 delete $inherited_config{template};
1989 if (!$combined_inheritance{$_}) {
1990 $combined_inheritance{$_} = [];
1992 push @{$combined_inheritance{$_}}, $inherited_config{$_};
1993 } keys %inherited_config;
1997 # We won't need inherit_from in this target any more, since we've
1998 # resolved all the inheritances that lead to this
1999 delete $table{$target}->{inherit_from};
2001 # Now is the time to deal with those lists. Here's the place to
2002 # decide what shall be done with those lists, all based on the
2003 # values of the target we're currently dealing with.
2004 # - If a value is a coderef, it will be executed with the list of
2005 # inherited values as arguments.
2006 # - If the corresponding key doesn't have a value at all or is the
2007 # emoty string, the inherited value list will be run through the
2008 # default combiner (below), and the result becomes this target's
2010 # - Otherwise, this target's value is assumed to be a string that
2011 # will simply override the inherited list of values.
2012 my $default_combiner = add(" ");
2015 map { $_ => 1 } (keys %combined_inheritance,
2016 keys %{$table{$target}});
2017 foreach (sort keys %all_keys) {
2019 # Current target doesn't have a value for the current key?
2020 # Assign it the default combiner, the rest of this loop body
2021 # will handle it just like any other coderef.
2022 if (!exists $table{$target}->{$_}) {
2023 $table{$target}->{$_} = $default_combiner;
2026 my $valuetype = ref($table{$target}->{$_});
2027 if ($valuetype eq "CODE") {
2028 # CODE reference, execute it with the inherited values as
2030 $table{$target}->{$_} =
2031 $table{$target}->{$_}->(@{$combined_inheritance{$_}});
2032 } elsif ($valuetype eq "ARRAY" || $valuetype eq "") {
2033 # ARRAY or Scalar, just leave it as is.
2035 # Some other type of reference that we don't handle.
2036 # Better to abort at this point.
2037 die "cannot handle reference type $valuetype,"
2038 ," found in target $target -> $_\n";
2042 # Finally done, return the result.
2043 return %{$table{$target}};
2048 print STDERR $usage;
2049 print STDERR "\npick os/compiler from:\n";
2053 foreach $i (sort keys %table)
2055 next if $table{$i}->{template};
2056 next if $i =~ /^debug/;
2057 $k += length($i) + 1;
2063 print STDERR $i . " ";
2065 foreach $i (sort keys %table)
2067 next if $table{$i}->{template};
2068 next if $i !~ /^debug/;
2069 $k += length($i) + 1;
2075 print STDERR $i . " ";
2077 print STDERR "\n\nNOTE: If in doubt, on Unix-ish systems use './config'.\n";
2086 unlink $out || warn "Can't remove $out, $!"
2088 foreach (@templates) {
2089 die "Can't open $_, $!" unless -f $_;
2091 my $cmd = "$config{perl} \"-I.\" \"-Mconfigdata\" $dofile -o\"Configure\" \"".join("\" \"",@templates)."\" > \"$out.new\"";
2092 #print STDERR "DEBUG[run_dofile]: \$cmd = $cmd\n";
2095 rename("$out.new", $out) || die "Can't rename $out.new, $!";
2098 # Configuration printer ##############################################
2100 sub print_table_entry
2103 my %target = resolve_config($target);
2106 # Don't print the templates
2107 return if $target{template};
2156 if ($type eq "TABLE") {
2158 print "*** $target\n";
2159 printf "\$%-12s = %s\n", $_, $target{$_} foreach (@sequence);
2160 } elsif ($type eq "HASH") {
2162 length((sort { length($a) <=> length($b) } @sequence)[-1]);
2163 print " '$target' => {\n";
2164 foreach (@sequence) {
2166 print " '",$_,"'"," " x ($largest - length($_))," => '",$target{$_},"',\n";
2173 # Utility routines ###################################################
2179 foreach $path (split /:/, $ENV{PATH})
2181 if (-f "$path/$name$target{exe_extension}" and -x _)
2183 return "$path/$name$target{exe_extension}" unless ($name eq "perl" and
2184 system("$path/$name$target{exe_extension} -e " . '\'exit($]<5.0);\''));
2191 perl => sub { my $x = shift;
2192 $x =~ s/([\\\$\@"])/\\$1/g;
2193 return '"'.$x.'"'; },
2197 defined($processors{$for}) ? $processors{$for} : sub { shift; };
2199 map { $processor->($_); } @_;
2202 # collect_from_file($filename, $line_concat_cond_re, $line_concat)
2203 # $filename is a file name to read from
2204 # $line_concat_cond_re is a regexp detecting a line continuation ending
2205 # $line_concat is a CODEref that takes care of concatenating two lines
2206 sub collect_from_file {
2207 my $filename = shift;
2208 my $line_concat_cond_re = shift;
2209 my $line_concat = shift;
2211 open my $fh, $filename || die "unable to read $filename: $!\n";
2213 my $saved_line = "";
2217 if (defined $line_concat) {
2218 $_ = $line_concat->($saved_line, $_);
2221 if (defined $line_concat_cond_re && /$line_concat_cond_re/) {
2227 die "$filename ending with continuation line\n" if $_;
2233 # collect_from_array($array, $line_concat_cond_re, $line_concat)
2234 # $array is an ARRAYref of lines
2235 # $line_concat_cond_re is a regexp detecting a line continuation ending
2236 # $line_concat is a CODEref that takes care of concatenating two lines
2237 sub collect_from_array {
2239 my $line_concat_cond_re = shift;
2240 my $line_concat = shift;
2241 my @array = (@$array);
2244 my $saved_line = "";
2246 while (defined($_ = shift @array)) {
2248 if (defined $line_concat) {
2249 $_ = $line_concat->($saved_line, $_);
2252 if (defined $line_concat_cond_re && /$line_concat_cond_re/) {
2258 die "input text ending with continuation line\n" if $_;
2263 # collect_information($lineiterator, $line_continue, $regexp => $CODEref, ...)
2264 # $lineiterator is a CODEref that delivers one line at a time.
2265 # All following arguments are regex/CODEref pairs, where the regexp detects a
2266 # line and the CODEref does something with the result of the regexp.
2267 sub collect_information {
2268 my $lineiterator = shift;
2269 my %collectors = @_;
2271 while(defined($_ = $lineiterator->())) {
2274 foreach my $re (keys %collectors) {
2275 if ($re ne "OTHERWISE" && /$re/) {
2276 $collectors{$re}->($lineiterator);
2280 if ($collectors{"OTHERWISE"}) {
2281 $collectors{"OTHERWISE"}->($lineiterator, $_)
2282 unless $found || !defined $collectors{"OTHERWISE"};