5 ## Configure -- OpenSSL source tree configuration script
6 ## If editing this file, run this command before committing
7 ## make -f Makefile.in TABLE
13 use File::Spec::Functions qw/:DEFAULT abs2rel rel2abs/;
14 use File::Path qw/mkpath/;
16 # see INSTALL for instructions.
18 my $usage="Usage: Configure [no-<cipher> ...] [enable-<cipher> ...] [-Dxxx] [-lxxx] [-Lxxx] [-fxxx] [-Kxxx] [no-hw-xxx|no-hw] [[no-]threads] [[no-]shared] [[no-]zlib|zlib-dynamic] [no-asm] [no-dso] [no-egd] [sctp] [386] [--prefix=DIR] [--openssldir=OPENSSLDIR] [--with-xxx[=vvv]] [--config=FILE] os/compiler[:flags]\n";
22 # --config add the given configuration file, which will be read after
23 # any "Configurations*" files that are found in the same
24 # directory as this script.
25 # --prefix prefix for the OpenSSL installation, which includes the
26 # directories bin, lib, include, share/man, share/doc/openssl
27 # This becomes the value of INSTALLTOP in Makefile
28 # (Default: /usr/local)
29 # --openssldir OpenSSL data area, such as openssl.cnf, certificates and keys.
30 # If it's a relative directory, it will be added on the directory
31 # given with --prefix.
32 # This becomes the value of OPENSSLDIR in Makefile and in C.
33 # (Default: PREFIX/ssl)
35 # --cross-compile-prefix Add specified prefix to binutils components.
37 # --api One of 0.9.8, 1.0.0 or 1.1.0. Do not compile support for
38 # interfaces deprecated as of the specified OpenSSL version.
40 # no-hw-xxx do not compile support for specific crypto hardware.
41 # Generic OpenSSL-style methods relating to this support
42 # are always compiled but return NULL if the hardware
43 # support isn't compiled.
44 # no-hw do not compile support for any crypto hardware.
45 # [no-]threads [don't] try to create a library that is suitable for
46 # multithreaded applications (default is "threads" if we
48 # [no-]shared [don't] try to create shared libraries when supported.
49 # [no-]pic [don't] try to build position independent code when supported.
50 # If disabled, it also disables shared and dynamic-engine.
51 # no-asm do not use assembler
52 # no-dso do not compile in any native shared-library methods. This
53 # will ensure that all methods just return NULL.
54 # no-egd do not compile support for the entropy-gathering daemon APIs
55 # [no-]zlib [don't] compile support for zlib compression.
56 # zlib-dynamic Like "zlib", but the zlib library is expected to be a shared
57 # library and will be loaded in run-time by the OpenSSL library.
58 # sctp include SCTP support
59 # 386 generate 80386 code
60 # no-sse2 disables IA-32 SSE2 code, above option implies no-sse2
61 # no-<cipher> build without specified algorithm (rsa, idea, rc5, ...)
62 # -<xxx> +<xxx> compiler options are passed through
64 # DEBUG_SAFESTACK use type-safe stacks to enforce type-safety on stack items
65 # provided to stack calls. Generates unique stack functions for
66 # each possible stack type.
67 # BN_LLONG use the type 'long long' in crypto/bn/bn.h
68 # RC4_CHAR use 'char' instead of 'int' for RC4_INT in crypto/rc4/rc4.h
69 # Following are set automatically by this script
71 # MD5_ASM use some extra md5 assember,
72 # SHA1_ASM use some extra sha1 assember, must define L_ENDIAN for x86
73 # RMD160_ASM use some extra ripemd160 assember,
74 # SHA256_ASM sha256_block is implemented in assembler
75 # SHA512_ASM sha512_block is implemented in assembler
76 # AES_ASM ASE_[en|de]crypt is implemented in assembler
78 # Minimum warning options... any contributions to OpenSSL should at least get
81 my $gcc_devteam_warn = "-DPEDANTIC -DREF_DEBUG -DDEBUG_UNUSED -DBIO_DEBUG"
86 . " -Wmissing-prototypes"
93 # These are used in addition to $gcc_devteam_warn when the compiler is clang.
94 # TODO(openssl-team): fix problems and investigate if (at least) the
95 # following warnings can also be enabled:
99 # -Wlanguage-extension-token -- no, we use asm()
100 # -Wunused-macros -- no, too tricky for BN and _XOPEN_SOURCE etc
101 # -Wextended-offsetof -- no, needed in CMS ASN1 code
102 my $clang_devteam_warn = ""
103 . " -Qunused-arguments"
105 . " -Wno-unused-parameter"
106 . " -Wno-missing-field-initializers"
107 . " -Wno-language-extension-token"
108 . " -Wno-extended-offsetof"
109 . " -Wconditional-uninitialized"
110 . " -Wincompatible-pointer-types-discards-qualifiers"
111 . " -Wmissing-variable-declarations"
114 # This adds backtrace information to the memory leak info. Is only used
115 # when crypto-mdebug-backtrace is enabled.
116 my $memleak_devteam_backtrace = "-rdynamic";
118 my $strict_warnings = 0;
120 # As for $BSDthreads. Idea is to maintain "collective" set of flags,
121 # which would cover all BSD flavors. -pthread applies to them all,
122 # but is treated differently. OpenBSD expands is as -D_POSIX_THREAD
123 # -lc_r, which is sufficient. FreeBSD 4.x expands it as -lc_r,
124 # which has to be accompanied by explicit -D_THREAD_SAFE and
125 # sometimes -D_REENTRANT. FreeBSD 5.x expands it as -lc_r, which
126 # seems to be sufficient?
127 our $BSDthreads="-pthread -D_THREAD_SAFE -D_REENTRANT";
130 # API compability name to version number mapping.
132 my $maxapi = "1.1.0"; # API for "no-deprecated" builds
134 "1.1.0" => "0x10100000L",
135 "1.0.0" => "0x10000000L",
136 "0.9.8" => "0x00908000L",
143 # Forward declarations ###############################################
145 # read_config(filename)
147 # Reads a configuration file and populates %table with the contents
148 # (which the configuration file places in %targets).
151 # resolve_config(target)
153 # Resolves all the late evalutations, inheritances and so on for the
154 # chosen target and any target it inherits from.
158 # Information collection #############################################
160 # Unified build supports separate build dir
161 my $srcdir = catdir(absolutedir(dirname($0))); # catdir ensures local syntax
162 my $blddir = catdir(absolutedir(".")); # catdir ensures local syntax
163 my $dofile = abs2rel(catfile($srcdir, "util/dofile.pl"));
165 $config{sourcedir} = abs2rel($srcdir);
166 $config{builddir} = abs2rel($blddir);
168 # Collect version numbers
169 $config{version} = "unknown";
170 $config{version_num} = "unknown";
171 $config{shlib_version_number} = "unknown";
172 $config{shlib_version_history} = "unknown";
175 collect_from_file(catfile($srcdir,'include/openssl/opensslv.h')),
176 qr/OPENSSL.VERSION.TEXT.*OpenSSL (\S+) / => sub { $config{version} = $1; },
177 qr/OPENSSL.VERSION.NUMBER.*(0x\S+)/ => sub { $config{version_num}=$1 },
178 qr/SHLIB_VERSION_NUMBER *"([^"]+)"/ => sub { $config{shlib_version_number}=$1 },
179 qr/SHLIB_VERSION_HISTORY *"([^"]*)"/ => sub { $config{shlib_version_history}=$1 }
181 if ($config{shlib_version_history} ne "") { $config{shlib_version_history} .= ":"; }
183 ($config{major}, $config{minor})
184 = ($config{version} =~ /^([0-9]+)\.([0-9\.]+)/);
185 ($config{shlib_major}, $config{shlib_minor})
186 = ($config{shlib_version_number} =~ /^([0-9]+)\.([0-9\.]+)/);
187 die "erroneous version information in opensslv.h: ",
188 "$config{major}, $config{minor}, $config{shlib_major}, $config{shlib_minor}\n"
189 if ($config{major} eq "" || $config{minor} eq ""
190 || $config{shlib_major} eq "" || $config{shlib_minor} eq "");
192 # Collect target configurations
194 my $pattern = catfile(dirname($0), "Configurations", "*.conf");
195 foreach (sort glob($pattern) ) {
200 print "Configuring OpenSSL version $config{version} (0x$config{version_num})\n";
204 $config{openssldir}="";
205 $config{processor}="";
207 $config{cross_compile_prefix}="";
208 $config{fipslibdir}="/usr/local/ssl/fips-2.0/lib/";
209 my $nofipscanistercheck=0;
210 $config{baseaddr}="0xFB00000";
211 my $auto_threads=1; # enable threads automatically? true by default
215 # Top level directories to build
216 $config{dirs} = [ "crypto", "ssl", "engines", "apps", "test", "tools" ];
217 # crypto/ subdirectories to build
220 "md2", "md4", "md5", "sha", "mdc2", "hmac", "ripemd", "whrlpool", "poly1305",
221 "des", "aes", "rc2", "rc4", "rc5", "idea", "bf", "cast", "camellia", "seed", "chacha", "modes",
222 "bn", "ec", "rsa", "dsa", "dh", "dso", "engine",
223 "buffer", "bio", "stack", "lhash", "rand", "err",
224 "evp", "asn1", "pem", "x509", "x509v3", "conf", "txt_db", "pkcs7", "pkcs12", "comp", "ocsp", "ui",
225 "cms", "ts", "srp", "cmac", "ct", "async", "kdf"
228 # Known TLS and DTLS protocols
229 my @tls = qw(ssl3 tls1 tls1_1 tls1_2);
230 my @dtls = qw(dtls1 dtls1_2);
232 # Explicitelly known options that are possible to disable. They can
233 # be regexps, and will be used like this: /^no-${option}$/
234 # For developers: keep it sorted alphabetically
251 "crypto-mdebug-backtrace",
265 "ec_nistp_64_gcc_128",
292 "rijndael", # Old AES name
319 foreach my $proto ((@tls, @dtls))
321 push(@disablables, $proto);
322 push(@disablables, "$proto-method");
325 my @deprecated_disablables = (
329 # All of the following is disabled by default (RC5 was enabled before 0.9.8):
331 our %disabled = ( # "what" => "comment"
332 "ec_nistp_64_gcc_128" => "default",
337 "shared" => "default",
338 "ssl-trace" => "default",
339 "static-engine" => "default",
340 "unit-test" => "default",
342 "crypto-mdebug" => "default",
343 "heartbeats" => "default",
346 # Note: => pair form used for aesthetics, not to truly make a hash table
347 my @disable_cascades = (
348 # "what" => [ "cascade", ... ]
349 sub { $config{processor} eq "386" }
352 "ssl3-method" => [ "ssl3" ],
353 "zlib" => [ "zlib-dynamic" ],
354 "rijndael" => [ "aes" ],
356 "ec" => [ "ecdsa", "ecdh" ],
358 "dgram" => [ "dtls" ],
361 # SSL 3.0, (D)TLS 1.0 and TLS 1.1 require MD5 and SHA
362 "md5" => [ "ssl", "tls1", "tls1_1", "dtls1" ],
363 "sha" => [ "ssl", "tls1", "tls1_1", "dtls1" ],
365 # Additionally, SSL 3.0 requires either RSA or DSA+DH
367 && ($disabled{dsa} || $disabled{dh}); }
370 # (D)TLS 1.0 and TLS 1.1 also require either RSA or DSA+DH
371 # or ECDSA + ECDH. (D)TLS 1.2 has this requirement as well.
372 # (XXX: We don't support PSK-only builds).
374 && ($disabled{dsa} || $disabled{dh})
375 && ($disabled{ecdsa} || $disabled{ecdh}); }
376 => [ "tls1", "tls1_1", "tls1_2",
377 "dtls1", "dtls1_2" ],
381 # SRP and HEARTBEATS require TLSEXT
382 "tlsext" => [ "srp", "heartbeats" ],
384 "crypto-mdebug" => [ "crypto-mdebug-backtrace" ],
386 # Without DSO, we can't load dynamic engines, so don't build them dynamic
387 "dso" => [ "dynamic-engine" ],
389 # Without position independent code, there can be no shared libraries or DSOs
390 "pic" => [ "shared", "dynamic-engine" ],
393 # Avoid protocol support holes. Also disable all versions below N, if version
394 # N is disabled while N+1 is enabled.
396 my @list = (reverse @tls);
397 while ((my $first, my $second) = (shift @list, shift @list)) {
399 push @disable_cascades, ( sub { !$disabled{$first} && $disabled{$second} }
401 unshift @list, $second;
403 my @list = (reverse @dtls);
404 while ((my $first, my $second) = (shift @list, shift @list)) {
406 push @disable_cascades, ( sub { !$disabled{$first} && $disabled{$second} }
408 unshift @list, $second;
411 # Explicit "no-..." options will be collected in %disabled along with the defaults.
412 # To remove something from %disabled, use "enable-foo".
413 # For symmetry, "disable-foo" is a synonym for "no-foo".
415 my @generated_headers = (
416 "include/openssl/opensslconf.h",
417 "crypto/include/internal/bn_conf.h",
418 "crypto/include/internal/dso_conf.h"
421 my @generated_by_make_headers = (
428 &usage if ($#ARGV < 0);
433 $config{openssl_api_defines}=[];
434 $config{openssl_algorithm_defines}=[];
435 $config{openssl_thread_defines}=[];
436 $config{openssl_sys_defines}=[];
437 $config{openssl_other_defines}=[];
441 $config{build_type} = "release";
445 if (grep /^reconf(igure)?$/, @argvcopy) {
446 if (-f "./configdata.pm") {
447 my $file = "./configdata.pm";
448 unless (my $return = do $file) {
449 die "couldn't parse $file: $@" if $@;
450 die "couldn't do $file: $!" unless defined $return;
451 die "couldn't run $file" unless $return;
454 @argvcopy = defined($configdata::config{perlargv}) ?
455 @{$configdata::config{perlargv}} : ();
456 die "Incorrect data to reconfigure, please do a normal configuration\n"
457 if (grep(/^reconf/,@argvcopy));
458 $ENV{CROSS_COMPILE} = $configdata::config{cross_compile_prefix}
459 if defined($configdata::config{cross_compile_prefix});
460 $ENV{CROSS_COMPILE} = $configdata::config{cc}
461 if defined($configdata::config{cc});
463 print "Reconfiguring with: ", join(" ",@argvcopy), "\n";
464 print " CROSS_COMPILE = ",$ENV{CROSS_COMPILE},"\n"
465 if $ENV{CROSS_COMPILE};
466 print " CC = ",$ENV{CC},"\n" if $ENV{CC};
467 } elsif (open IN, "<Makefile") {
469 # THIS SECTION IS TEMPORARY, it helps transitioning from Makefile
470 # centered information gathering the reading configdata.pm
474 if (/^CONFIGURE_ARGS=\s*(.*)\s*/) {
475 # Older form, we split the string and hope for the best
476 @argvcopy = split /\s+/, $_;
477 die "Incorrect data to reconfigure, please do a normal configuration\n"
478 if (grep(/^reconf/,@argvcopy));
479 } elsif (/^CROSS_COMPILE=\s*(.*)/) {
480 $ENV{CROSS_COMPILE}=$1;
481 } elsif (/^CC=\s*(?:\$\(CROSS_COMPILE\))?(.*?)$/) {
486 # END OF TEMPORARY SECTION
489 die "Insufficient data to reconfigure, please do a normal configuration\n";
493 $config{perlargv} = [ @argvcopy ];
495 my %unsupported_options = ();
496 my %deprecated_options = ();
499 # VMS is a case insensitive environment, and depending on settings
500 # out of our control, we may receive options uppercased. Let's
501 # downcase at least the part before any equal sign.
506 s /^-no-/no-/; # some people just can't read the instructions
508 # rewrite some options in "enable-..." form
509 s /^-?-?shared$/enable-shared/;
510 s /^sctp$/enable-sctp/;
511 s /^threads$/enable-threads/;
512 s /^zlib$/enable-zlib/;
513 s /^zlib-dynamic$/enable-zlib-dynamic/;
515 if (/^(no|disable|enable)-(.+)$/)
518 if (grep { $word =~ /^${_}$/ } @deprecated_disablables)
520 $deprecated_options{$_} = 1;
523 elsif (!grep { $word =~ /^${_}$/ } @disablables)
525 $unsupported_options{$_} = 1;
529 if (/^no-(.+)$/ || /^disable-(.+)$/)
531 foreach my $proto ((@tls, @dtls))
533 if ($1 eq "$proto-method")
535 $disabled{"$proto"} = "option($proto-method)";
541 foreach my $proto (@dtls)
543 $disabled{$proto} = "option(dtls)";
548 # Last one of its kind
549 $disabled{"ssl3"} = "option(ssl)";
553 # XXX: Tests will fail if all SSL/TLS
554 # protocols are disabled.
555 foreach my $proto (@tls)
557 $disabled{$proto} = "option(tls)";
560 elsif ($1 eq "static-engine")
562 delete $disabled{"dynamic-engine"};
564 elsif ($1 eq "dynamic-engine")
566 $disabled{"dynamic-engine"} = "option";
570 $disabled{$1} = "option";
572 # No longer an automatic choice
573 $auto_threads = 0 if ($1 eq "threads");
575 elsif (/^enable-(.+)$/)
577 if ($1 eq "static-engine")
579 $disabled{"dynamic-engine"} = "option";
581 elsif ($1 eq "dynamic-engine")
583 delete $disabled{"dynamic-engine"};
586 delete $disabled{$algo};
588 # No longer an automatic choice
589 $auto_threads = 0 if ($1 eq "threads");
591 elsif (/^--strict-warnings$/)
593 $strict_warnings = 1;
597 $config{build_type} = "debug";
599 elsif (/^--release$/)
601 $config{build_type} = "release";
604 { $config{processor}=386; }
611 # No RSAref support any more since it's not needed.
612 # The check for the option is there so scripts aren't
615 elsif (/^nofipscanistercheck$/)
618 $nofipscanistercheck = 1;
626 elsif (/^--prefix=(.*)$/)
629 die "Directory given with --prefix MUST be absolute\n"
630 unless file_name_is_absolute($config{prefix});
632 elsif (/^--api=(.*)$/)
636 elsif (/^--libdir=(.*)$/)
640 elsif (/^--openssldir=(.*)$/)
642 $config{openssldir}=$1;
644 elsif (/^--with-zlib-lib=(.*)$/)
646 $withargs{zlib_lib}=$1;
648 elsif (/^--with-zlib-include=(.*)$/)
650 $withargs{zlib_include}="-I$1";
652 elsif (/^--with-fipslibdir=(.*)$/)
654 $config{fipslibdir}="$1/";
656 elsif (/^--with-baseaddr=(.*)$/)
658 $config{baseaddr}="$1";
660 elsif (/^--cross-compile-prefix=(.*)$/)
662 $config{cross_compile_prefix}=$1;
664 elsif (/^--config=(.*)$/)
668 elsif (/^-[lL](.*)$/ or /^-Wl,/)
674 push @user_defines, $1;
676 else # common if (/^[-+]/), just pass down...
678 $_ =~ s/%([0-9a-f]{1,2})/chr(hex($1))/gei;
679 $user_cflags.=" ".$_;
684 die "target already defined - $target (offending arg: $_)\n" if ($target ne "");
687 unless ($_ eq $target || /^no-/ || /^disable-/)
689 # "no-..." follows later after implied disactivations
690 # have been derived. (Don't take this too seroiusly,
691 # we really only write OPTIONS to the Makefile out of
694 if ($config{options} eq "")
695 { $config{options} = $_; }
697 { $config{options} .= " ".$_; }
700 if (defined($config{api}) && !exists $apitable->{$config{api}}) {
701 die "***** Unsupported api compatibility level: $config{api}\n",
704 if (keys %deprecated_options)
706 warn "***** Deprecated options: ",
707 join(", ", keys %deprecated_options), "\n";
709 if (keys %unsupported_options)
711 die "***** Unsupported options: ",
712 join(", ", keys %unsupported_options), "\n";
718 delete $disabled{"shared"} if ($disabled{"shared"} =~ /^default/);
722 @{$config{dirs}} = grep !/^fips$/, @{$config{dirs}};
725 my @tocheckfor = (keys %disabled);
726 while (@tocheckfor) {
727 my %new_tocheckfor = ();
728 my @cascade_copy = (@disable_cascades);
729 while (@cascade_copy) {
730 my ($test, $descendents) = (shift @cascade_copy, shift @cascade_copy);
731 if (ref($test) eq "CODE" ? $test->() : defined($disabled{$test})) {
733 $new_tocheckfor{$_} => 1; $disabled{$_} = "forced";
734 } grep { !defined($disabled{$_}) } @$descendents;
737 @tocheckfor = (keys %new_tocheckfor);
740 if ($target eq "TABLE") {
741 foreach (sort keys %table) {
742 print_table_entry($_, "TABLE");
747 if ($target eq "LIST") {
748 foreach (sort keys %table) {
749 print $_,"\n" unless $table{$_}->{template};
754 if ($target eq "HASH") {
755 print "%table = (\n";
756 foreach (sort keys %table) {
757 print_table_entry($_, "HASH");
762 # Backward compatibility?
763 if ($target =~ m/^CygWin32(-.*)$/) {
764 $target = "Cygwin".$1;
767 foreach (sort (keys %disabled))
769 $config{options} .= " no-$_";
771 printf " no-%-12s %-10s", $_, "[$disabled{$_}]";
783 elsif (/^dynamic-engine$/)
785 elsif (/^zlib-dynamic$/)
791 @{$config{dirs}} = grep !/^engines$/, @{$config{dirs}};
792 @{$config{sdirs}} = grep !/^engine$/, @{$config{sdirs}};
793 push @{$config{openssl_other_defines}}, "OPENSSL_NO_ENGINE";
798 ($ALGO = $algo = $_) =~ tr/[\-a-z]/[_A-Z]/;
800 if (/^asm$/ || /^err$/ || /^hw$/ || /^hw-/ || /^async$/
801 || /^autoalginit/ || /^autoerrinit/)
803 push @{$config{openssl_other_defines}}, "OPENSSL_NO_$ALGO";
804 print " OPENSSL_NO_$ALGO";
806 if (/^err$/) { push @user_defines, "OPENSSL_NO_ERR"; }
810 ($ALGO,$algo) = ("RMD160","rmd160") if ($algo eq "ripemd");
812 push @{$config{openssl_algorithm_defines}}, "OPENSSL_NO_$ALGO";
813 print " OPENSSL_NO_$ALGO";
815 # fix-up crypto/directory name(s)
816 $algo="whrlpool" if $algo eq "whirlpool";
817 $algo="ripemd" if $algo eq "rmd160";
818 @{$config{sdirs}} = grep { $_ ne $algo} @{$config{sdirs}};
827 print "Configuring for $target\n";
829 # Support for legacy targets having a name starting with 'debug-'
830 my ($d, $t) = $target =~ m/^(debug-)?(.*)$/;
832 $config{build_type} = "debug";
834 # If we do not find debug-foo in the table, the target is set to foo.
835 if (!$table{$target}) {
839 $config{target} = $target;
840 my %target = resolve_config($target);
842 &usage if (!%target || $target{template});
844 %target = ( %{$table{DEFAULTS}}, %target );
846 $target{exe_extension}="";
847 $target{exe_extension}=".exe" if ($config{target} eq "DJGPP"
848 || $config{target} =~ /^(?:Cygwin|mingw)/);
849 $target{exe_extension}=".nlm" if ($config{target} =~ /netware/);
850 $target{exe_extension}=".pm" if ($config{target} =~ /vos/);
852 ($target{shared_extension_simple}=$target{shared_extension})
853 =~ s|\.\$\(SHLIB_MAJOR\)\.\$\(SHLIB_MINOR\)||;
854 $target{dso_extension}=$target{shared_extension_simple};
855 ($target{shared_import_extension}=$target{shared_extension_simple}.".a")
856 if ($config{target} =~ /^(?:Cygwin|mingw)/);
859 $config{cross_compile_prefix} = $ENV{'CROSS_COMPILE'}
860 if $config{cross_compile_prefix} eq "";
862 # Allow overriding the names of some tools. USE WITH CARE
863 $config{perl} = $ENV{'PERL'} || which("perl5") || which("perl") || "perl";
864 $target{cc} = $ENV{'CC'} || $target{cc} || "cc";
865 $target{ranlib} = $ENV{'RANLIB'} || $target{ranlib} || which("ranlib") || "true";
866 $target{ar} = $ENV{'AR'} || $target{ar} || "ar";
867 $target{nm} = $ENV{'NM'} || $target{nm} || "nm";
869 # For cflags, lflags, plib_lflags, ex_libs and defines, add the debug_
870 # or release_ attributes.
871 # Do it in such a way that no spurious space is appended (hence the grep).
872 $config{defines} = $target{defines} || [];
873 $config{cflags} = $target{cflags} || "";
874 $config{ex_libs} = $target{ex_libs} || "";
876 # Make sure build_scheme is consistent.
877 $target{build_scheme} = [ $target{build_scheme} ]
878 if ref($target{build_scheme}) ne "ARRAY";
880 ###### TO BE REMOVED BEFORE FINAL RELEASE
882 ###### If the user has chosen --unified, we give it to them.
883 ###### The same happens if we detect that they try to build out-of-source.
884 if ($target{build_file} eq "Makefile"
885 && $target{build_scheme}->[0] eq "unixmake"
886 && ($unified || $srcdir ne $blddir)) {
887 $target{build_scheme} = [ "unified", "unix" ];
890 my ($builder, $builder_platform, @builder_opts) =
891 @{$target{build_scheme}};
893 if ($target =~ /^mingw/ && `$target{cc} --target-help 2>&1` =~ m/-mno-cygwin/m)
895 $config{cflags} .= " -mno-cygwin";
896 $target{shared_ldflag} .= " -mno-cygwin";
899 if ($target =~ /linux.*-mips/ && !$disabled{asm} && $user_cflags !~ /-m(ips|arch=)/) {
900 # minimally required architecture flags for assembly modules
901 $config{cflags}="-mips2 $config{cflags}" if ($target =~ /mips32/);
902 $config{cflags}="-mips3 $config{cflags}" if ($target =~ /mips64/);
905 my $no_shared_warn=0;
906 my $no_user_cflags=0;
907 my $no_user_defines=0;
909 # The DSO code currently always implements all functions so that no
910 # applications will have to worry about that from a compilation point
911 # of view. However, the "method"s may return zero unless that platform
912 # has support compiled in for them. Currently each method is enabled
913 # by a define "DSO_<name>" ... we translate the "dso_scheme" config
914 # string entry into using the following logic;
915 if (!$disabled{dso} && $target{dso_scheme} ne "")
917 $target{dso_scheme} =~ tr/[a-z]/[A-Z]/;
918 if ($target{dso_scheme} eq "DLFCN")
920 $config{defines} = [ "DSO_DLFCN", "HAVE_DLFCN_H",
921 @{$config{defines}} ]
923 elsif ($target{dso_scheme} eq "DLFCN_NO_H")
925 $config{defines} = [ "DSO_DLFCN", @{$config{defines}} ]
929 $config{defines} = [ "DSO_$target{dso_scheme}",
930 @{$config{defines}} ]
934 $config{ex_libs}="$libs$config{ex_libs}" if ($libs ne "");
938 @{$config{defines}} = grep !/^[BL]_ENDIAN$/, @{$config{defines}}
942 # If threads aren't disabled, check how possible they are
943 unless ($disabled{threads}) {
945 # Enabled by default, disable it forcibly if unavailable
946 if ($target{thread_scheme} eq "(unknown)") {
947 $disabled{threads} = "unavailable";
950 # The user chose to enable threads explicitely, let's see
951 # if there's a chance that's possible
952 if ($target{thread_scheme} eq "(unknown)") {
953 # If the user asked for "threads" and we don't have internal
954 # knowledge how to do it, [s]he is expected to provide any
955 # system-dependent compiler options that are necessary. We
956 # can't truly check that the given options are correct, but
957 # we expect the user to know what [s]He is doing.
958 if ($no_user_cflags && $no_user_defines) {
959 die "You asked for multi-threading support, but didn't\n"
960 ,"provide any system-specific compiler options\n";
966 # If threads still aren't disabled, add a C macro to ensure the source
967 # code knows about it. Any other flag is taken care of by the configs.
968 unless($disabled{threads}) {
969 foreach (("defines", "openssl_thread_defines")) {
970 push @{$config{$_}}, "OPENSSL_THREADS";
974 # With "deprecated" disable all deprecated features.
975 if (defined($disabled{"deprecated"})) {
976 $config{api} = $maxapi;
979 if ($target{shared_target} eq "")
982 if ((!$disabled{shared} || !$disabled{"dynamic-engine"})
984 $disabled{shared} = "no-shared-target";
985 $disabled{pic} = $disabled{shared} = $disabled{"dynamic-engine"} =
989 if ($disabled{"dynamic-engine"}) {
990 push @{$config{defines}}, "OPENSSL_NO_DYNAMIC_ENGINE";
991 $config{dynamic_engines} = 0;
993 push @{$config{defines}}, "OPENSSL_NO_STATIC_ENGINE";
994 $config{dynamic_engines} = 1;
1001 # This saves the build files from having to check
1004 $target{shared_cflag} = $target{shared_ldflag} =
1005 $target{shared_rcflag} = "";
1009 push @{$config{defines}}, "OPENSSL_PIC";
1012 if ($target{sys_id} ne "")
1014 push @{$config{openssl_sys_defines}}, "OPENSSL_SYS_$target{sys_id}";
1017 unless ($disabled{asm}) {
1018 $target{cpuid_asm_src}=$table{DEFAULTS}->{cpuid_asm_src} if ($config{processor} eq "386");
1019 $target{bn_asm_src} =~ s/\w+-gf2m.c// if (defined($disabled{ec2m}));
1021 # bn-586 is the only one implementing bn_*_part_words
1022 push @{$config{defines}}, "OPENSSL_BN_ASM_PART_WORDS" if ($target{bn_asm_src} =~ /bn-586/);
1023 push @{$config{defines}}, "OPENSSL_IA32_SSE2" if (!$no_sse2 && $target{bn_asm_src} =~ /86/);
1025 push @{$config{defines}}, "OPENSSL_BN_ASM_MONT" if ($target{bn_asm_src} =~ /-mont/);
1026 push @{$config{defines}}, "OPENSSL_BN_ASM_MONT5" if ($target{bn_asm_src} =~ /-mont5/);
1027 push @{$config{defines}}, "OPENSSL_BN_ASM_GF2m" if ($target{bn_asm_src} =~ /-gf2m/);
1029 if ($config{fips}) {
1030 push @{$config{openssl_other_defines}}, "OPENSSL_FIPS";
1033 if ($target{sha1_asm_src}) {
1034 push @{$config{defines}}, "SHA1_ASM" if ($target{sha1_asm_src} =~ /sx86/ || $target{sha1_asm_src} =~ /sha1/);
1035 push @{$config{defines}}, "SHA256_ASM" if ($target{sha1_asm_src} =~ /sha256/);
1036 push @{$config{defines}}, "SHA512_ASM" if ($target{sha1_asm_src} =~ /sha512/);
1038 if ($target{md5_asm_src}) {
1039 push @{$config{defines}}, "MD5_ASM";
1041 $target{cast_asm_src}=$table{DEFAULTS}->{cast_asm_src} unless $disabled{pic}; # CAST assembler is not PIC
1042 if ($target{rmd160_asm_src}) {
1043 push @{$config{defines}}, "RMD160_ASM";
1045 if ($target{aes_asm_src}) {
1046 push @{$config{defines}}, "AES_ASM" if ($target{aes_asm_src} =~ m/\baes-/);;
1047 # aes-ctr.fake is not a real file, only indication that assembler
1048 # module implements AES_ctr32_encrypt...
1049 push @{$config{defines}}, "AES_CTR_ASM" if ($target{aes_asm_src} =~ s/\s*aes-ctr\.fake//);
1050 # aes-xts.fake indicates presence of AES_xts_[en|de]crypt...
1051 push @{$config{defines}}, "AES_XTS_ASM" if ($target{aes_asm_src} =~ s/\s*aes-xts\.fake//);
1052 $target{aes_asm_src} =~ s/\s*(vpaes|aesni)-x86\.s//g if ($no_sse2);
1053 push @{$config{defines}}, "VPAES_ASM" if ($target{aes_asm_src} =~ m/vpaes/);
1054 push @{$config{defines}}, "BSAES_ASM" if ($target{aes_asm_src} =~ m/bsaes/);
1056 if ($target{wp_asm_src} =~ /mmx/) {
1057 if ($config{processor} eq "386") {
1058 $target{wp_asm_src}=$table{DEFAULTS}->{wp_asm_src};
1059 } elsif (!$disabled{"whirlpool"}) {
1060 $config{cflags}.=" -DWHIRLPOOL_ASM";
1063 if ($target{modes_asm_src} =~ /ghash-/) {
1064 push @{$config{defines}}, "GHASH_ASM";
1066 if ($target{ec_asm_src} =~ /ecp_nistz256/) {
1067 push @{$config{defines}}, "ECP_NISTZ256_ASM";
1069 if ($target{poly1305_asm_src} ne "") {
1070 push @{$config{defines}}, "POLY1305_ASM";
1074 my $ecc = $target{cc};
1076 # Is the compiler gcc or clang? $ecc is used below to see if
1077 # error-checking can be turned on.
1078 my $ccpcc = "$config{cross_compile_prefix}$target{cc}";
1079 $config{makedepprog} = 'makedepend';
1080 open(PIPE, "$ccpcc --version 2>&1 | head -2 |");
1082 $config{makedepprog} = $ccpcc if /clang|gcc/;
1083 $ecc = "clang" if /clang/;
1084 $ecc = "gcc" if /gcc/;
1090 # Deal with bn_ops ###################################################
1093 $config{export_var_as_fn} =0;
1094 my $def_int="unsigned int";
1095 $config{rc4_int} =$def_int;
1096 ($config{b64l},$config{b64},$config{b32})=(0,0,1);
1099 foreach (sort split(/\s+/,$target{bn_ops})) {
1100 $count++ if /SIXTY_FOUR_BIT|SIXTY_FOUR_BIT_LONG|THIRTY_TWO_BIT/;
1101 $config{export_var_as_fn}=1 if $_ eq 'EXPORT_VAR_AS_FN';
1102 $config{bn_ll}=1 if $_ eq 'BN_LLONG';
1103 $config{rc4_int}="unsigned char" if $_ eq 'RC4_CHAR';
1104 ($config{b64l},$config{b64},$config{b32})
1105 =(0,1,0) if $_ eq 'SIXTY_FOUR_BIT';
1106 ($config{b64l},$config{b64},$config{b32})
1107 =(1,0,0) if $_ eq 'SIXTY_FOUR_BIT_LONG';
1108 ($config{b64l},$config{b64},$config{b32})
1109 =(0,0,1) if $_ eq 'THIRTY_TWO_BIT';
1111 die "Exactly one of SIXTY_FOUR_BIT|SIXTY_FOUR_BIT_LONG|THIRTY_TWO_BIT can be set in bn_ops\n"
1115 # Hack cflags for better warnings (dev option) #######################
1117 # "Stringify" the C flags string. This permits it to be made part of a string
1118 # and works as well on command lines.
1119 $config{cflags} =~ s/([\\\"])/\\\1/g;
1121 if (defined($config{api})) {
1122 $config{openssl_api_defines} = [ "OPENSSL_MIN_API=".$apitable->{$config{api}} ];
1123 my $apiflag = sprintf("OPENSSL_API_COMPAT=%s", $apitable->{$config{api}});
1124 push @{$config{defines}}, $apiflag;
1127 if ($strict_warnings)
1130 die "ERROR --strict-warnings requires gcc or clang"
1131 unless $ecc eq 'gcc' || $ecc eq 'clang';
1132 foreach $wopt (split /\s+/, $gcc_devteam_warn)
1134 $config{cflags} .= " $wopt" unless ($config{cflags} =~ /(?:^|\s)$wopt(?:\s|$)/)
1136 if ($ecc eq "clang")
1138 foreach $wopt (split /\s+/, $clang_devteam_warn)
1140 $config{cflags} .= " $wopt" unless ($config{cflags} =~ /(?:^|\s)$wopt(?:\s|$)/)
1145 unless ($disabled{"crypto-mdebug-backtrace"})
1147 foreach my $wopt (split /\s+/, $memleak_devteam_backtrace)
1149 $config{cflags} .= " $wopt" unless ($config{cflags} =~ /(?:^|\s)$wopt(?:\s|$)/)
1151 if ($target =~ /^BSD-/)
1153 $config{ex_libs} .= " -lexecinfo";
1157 if ($user_cflags ne "") { $config{cflags}="$config{cflags}$user_cflags"; }
1158 else { $no_user_cflags=1; }
1159 if (@user_defines) { $config{defines}=[ @{$config{defines}}, @user_defines ]; }
1160 else { $no_user_defines=1; }
1162 # ALL MODIFICATIONS TO %config and %target MUST BE DONE FROM HERE ON
1164 # If we use the unified build, collect information from build.info files
1165 my %unified_info = ();
1167 if ($builder eq "unified") {
1168 # Store the name of the template file we will build the build file from
1169 # in %config. This may be useful for the build file itself.
1170 my $build_file_template =
1171 catfile($srcdir, "Configurations",
1172 $builder_platform."-".$target{build_file}.".tmpl");
1173 $build_file_template =
1174 catfile($srcdir, "Configurations", $target{build_file}.".tmpl")
1175 if (! -f $build_file_template);
1176 $config{build_file_template} = $build_file_template;
1178 use lib catdir(dirname(__FILE__),"util");
1179 use with_fallback qw(Text::Template);
1184 my $relativeto = shift || ".";
1186 $dir = catdir($base,$dir) unless isabsolute($dir);
1188 # Make sure the directories we're building in exists
1191 my $res = abs2rel(absolutedir($dir), rel2abs($relativeto));
1192 #print STDERR "DEBUG[cleandir]: $dir , $base => $res\n";
1199 my $relativeto = shift || ".";
1201 $file = catfile($base,$file) unless isabsolute($file);
1203 my $d = dirname($file);
1204 my $f = basename($file);
1206 # Make sure the directories we're building in exists
1209 my $res = abs2rel(catfile(absolutedir($d), $f), rel2abs($relativeto));
1210 #print STDERR "DEBUG[cleanfile]: $d , $f => $res\n";
1214 my @build_infos = ( [ ".", "build.info" ] );
1215 foreach (@{$config{dirs}}) {
1216 push @build_infos, [ $_, "build.info" ]
1217 if (-f catfile($srcdir, $_, "build.info"));
1219 foreach (@{$config{sdirs}}) {
1220 push @build_infos, [ catdir("crypto", $_), "build.info" ]
1221 if (-f catfile($srcdir, "crypto", $_, "build.info"));
1223 foreach (@{$config{engdirs}}) {
1224 push @build_infos, [ catdir("engines", $_), "build.info" ]
1225 if (-f catfile($srcdir, "engines", $_, "build.info"));
1228 $config{build_infos} = [ ];
1230 foreach (@build_infos) {
1231 my $sourced = catdir($srcdir, $_->[0]);
1232 my $buildd = catdir($blddir, $_->[0]);
1237 # The basic things we're trying to build
1243 my @intermediates = ();
1251 my %sharednames = ();
1253 push @{$config{build_infos}}, catfile(abs2rel($sourced, $blddir), $f);
1254 my $template = Text::Template->new(TYPE => 'FILE',
1255 SOURCE => catfile($sourced, $f));
1256 die "Something went wrong with $sourced/$f: $!\n" unless $template;
1259 $template->fill_in(HASH => { config => \%config,
1261 disabled => \%disabled,
1262 builddir => abs2rel($buildd, $blddir),
1263 sourcedir => abs2rel($sourced, $blddir),
1264 buildtop => abs2rel($blddir, $blddir),
1265 sourcetop => abs2rel($srcdir, $blddir) },
1266 DELIMITERS => [ "{-", "-}" ]);
1268 # The top item of this stack has the following values
1269 # -2 positive already run and we found ELSE (following ELSIF should fail)
1270 # -1 positive already run (skip until ENDIF)
1271 # 0 negatives so far (if we're at a condition, check it)
1272 # 1 last was positive (don't skip lines until next ELSE, ELSIF or ENDIF)
1273 # 2 positive ELSE (following ELSIF should fail)
1275 collect_information(
1276 collect_from_array([ @text ],
1277 qr/\\$/ => sub { my $l1 = shift; my $l2 = shift;
1278 $l1 =~ s/\\$//; $l1.$l2 }),
1279 # Info we're looking for
1280 qr/^\s*IF\[((?:\\.|[^\\\]])*)\]\s*$/
1281 => sub { push @skip, !! $1; },
1282 qr/^\s*ELSIF\[((?:\\.|[^\\\]])*)\]\s*$/
1283 => sub { die "ELSIF out of scope" if ! @skip;
1284 die "ELSIF following ELSE" if abs($skip[$#skip]) == 2;
1285 $skip[$#skip] = -1 if $skip[$#skip] != 0;
1286 $skip[$#skip] = !! $1
1287 if $skip[$#skip] == 0; },
1289 => sub { die "ELSE out of scope" if ! @skip;
1290 $skip[$#skip] = -2 if $skip[$#skip] != 0;
1291 $skip[$#skip] = 2 if $skip[$#skip] == 0; },
1293 => sub { die "ENDIF out of scope" if ! @skip;
1295 qr/^\s*PROGRAMS\s*=\s*(.*)\s*$/
1296 => sub { push @programs, split(/\s+/, $1)
1297 if !@skip || $skip[$#skip] > 0 },
1298 qr/^\s*LIBS\s*=\s*(.*)\s*$/
1299 => sub { push @libraries, split(/\s+/, $1)
1300 if !@skip || $skip[$#skip] > 0 },
1301 qr/^\s*ENGINES\s*=\s*(.*)\s*$/
1302 => sub { push @engines, split(/\s+/, $1)
1303 if !@skip || $skip[$#skip] > 0 },
1304 qr/^\s*SCRIPTS\s*=\s*(.*)\s*$/
1305 => sub { push @scripts, split(/\s+/, $1)
1306 if !@skip || $skip[$#skip] > 0 },
1307 qr/^\s*EXTRA\s*=\s*(.*)\s*$/
1308 => sub { push @extra, split(/\s+/, $1)
1309 if !@skip || $skip[$#skip] > 0 },
1311 qr/^\s*ORDINALS\[((?:\\.|[^\\\]])+)\]\s*=\s*(.*)\s*$/,
1312 => sub { push @{$ordinals{$1}}, split(/\s+/, $2)
1313 if !@skip || $skip[$#skip] > 0 },
1314 qr/^\s*SOURCE\[((?:\\.|[^\\\]])+)\]\s*=\s*(.*)\s*$/
1315 => sub { push @{$sources{$1}}, split(/\s+/, $2)
1316 if !@skip || $skip[$#skip] > 0 },
1317 qr/^\s*INCLUDE\[((?:\\.|[^\\\]])+)\]\s*=\s*(.*)\s*$/
1318 => sub { push @{$includes{$1}}, split(/\s+/, $2)
1319 if !@skip || $skip[$#skip] > 0 },
1320 qr/^\s*DEPEND\[((?:\\.|[^\\\]])+)\]\s*=\s*(.*)\s*$/
1321 => sub { push @{$depends{$1}}, split(/\s+/, $2)
1322 if !@skip || $skip[$#skip] > 0 },
1323 qr/^\s*RENAME\[((?:\\.|[^\\\]])+)\]\s*=\s*(.*)\s*$/
1324 => sub { push @{$renames{$1}}, split(/\s+/, $2)
1325 if !@skip || $skip[$#skip] > 0 },
1326 qr/^\s*SHARED_NAME\[((?:\\.|[^\\\]])+)\]\s*=\s*(.*)\s*$/
1327 => sub { push @{$sharednames{$1}}, split(/\s+/, $2)
1328 if !@skip || $skip[$#skip] > 0 },
1329 qr/^\s*BEGINRAW\[((?:\\.|[^\\\]])+)\]\s*$/
1331 my $lineiterator = shift;
1332 my $target_kind = $1;
1333 while (defined $lineiterator->()) {
1335 if (/^\s*ENDRAW\[((?:\\.|[^\\\]])+)\]\s*$/) {
1336 die "ENDRAW doesn't match BEGINRAW"
1337 if $1 ne $target_kind;
1340 next if @skip && $skip[$#skip] <= 0;
1342 if ($target_kind eq $target{build_file}
1343 || $target_kind eq $target{build_file}."(".$builder_platform.")");
1346 qr/^(?:#.*|\s*)$/ => sub { },
1347 "OTHERWISE" => sub { die "Something wrong with this line:\n$_\nat $sourced/$f" }
1349 die "runaway IF?" if (@skip);
1351 foreach (keys %renames) {
1352 die "$_ renamed to more than one thing: "
1353 ,join(" ", @{$renames{$_}}),"\n"
1354 if scalar @{$renames{$_}} > 1;
1355 my $dest = cleanfile($buildd, $_, $blddir);
1356 my $to = cleanfile($buildd, $renames{$_}->[0], $blddir);
1357 die "$dest renamed to more than one thing: "
1358 ,$unified_info{rename}->{$dest}, $to
1359 unless !defined($unified_info{rename}->{$dest})
1360 or $unified_info{rename}->{$dest} eq $to;
1361 $unified_info{rename}->{$dest} = $to;
1364 foreach (@programs) {
1365 my $program = cleanfile($buildd, $_, $blddir);
1366 if ($unified_info{rename}->{$program}) {
1367 $program = $unified_info{rename}->{$program};
1369 $unified_info{programs}->{$program} = 1;
1372 foreach (@libraries) {
1373 my $library = cleanfile($buildd, $_, $blddir);
1374 if ($unified_info{rename}->{$library}) {
1375 $library = $unified_info{rename}->{$library};
1377 $unified_info{libraries}->{$library} = 1;
1380 die <<"EOF" if scalar @engines and !$config{dynamic_engines};
1381 ENGINES can only be used if configured with 'dynamic-engine'.
1382 This is usually a fault in a build.info file.
1384 foreach (@engines) {
1385 my $library = cleanfile($buildd, $_, $blddir);
1386 if ($unified_info{rename}->{$library}) {
1387 $library = $unified_info{rename}->{$library};
1389 $unified_info{engines}->{$library} = 1;
1392 foreach (@scripts) {
1393 my $script = cleanfile($buildd, $_, $blddir);
1394 if ($unified_info{rename}->{$script}) {
1395 $script = $unified_info{rename}->{$script};
1397 $unified_info{scripts}->{$script} = 1;
1401 my $extra = cleanfile($buildd, $_, $blddir);
1402 $unified_info{extra}->{$extra} = 1;
1405 push @{$unified_info{rawlines}}, @rawlines;
1407 unless ($disabled{shared}) {
1408 # Check sharednames.
1409 foreach (keys %sharednames) {
1410 my $dest = cleanfile($buildd, $_, $blddir);
1411 if ($unified_info{rename}->{$dest}) {
1412 $dest = $unified_info{rename}->{$dest};
1414 die "shared_name for $dest with multiple values: "
1415 ,join(" ", @{$sharednames{$_}}),"\n"
1416 if scalar @{$sharednames{$_}} > 1;
1417 my $to = cleanfile($buildd, $sharednames{$_}->[0], $blddir);
1418 die "shared_name found for a library $dest that isn't defined\n"
1419 unless $unified_info{libraries}->{$dest};
1420 die "shared_name for $dest with multiple values: "
1421 ,$unified_info{sharednames}->{$dest}, ", ", $to
1422 unless !defined($unified_info{sharednames}->{$dest})
1423 or $unified_info{sharednames}->{$dest} eq $to;
1424 $unified_info{sharednames}->{$dest} = $to;
1427 # Additionally, we set up sharednames for libraries that don't
1428 # have any, as themselves.
1429 foreach (keys %{$unified_info{libraries}}) {
1430 if (!defined $unified_info{sharednames}->{$_}) {
1431 $unified_info{sharednames}->{$_} = $_
1436 foreach (keys %ordinals) {
1438 my $ddest = cleanfile($buildd, $_, $blddir);
1439 if ($unified_info{rename}->{$ddest}) {
1440 $ddest = $unified_info{rename}->{$ddest};
1442 foreach (@{$ordinals{$dest}}) {
1443 my %known_ordinals =
1446 cleanfile($sourced, catfile("util", "libeay.num"), $blddir),
1448 cleanfile($sourced, catfile("util", "ssleay.num"), $blddir)
1450 my $o = $known_ordinals{$_};
1451 die "Ordinals for $ddest defined more than once\n"
1452 if $unified_info{ordinals}->{$ddest};
1453 $unified_info{ordinals}->{$ddest} = [ $_, $o ];
1457 foreach (keys %sources) {
1459 my $ddest = cleanfile($buildd, $_, $blddir);
1460 if ($unified_info{rename}->{$ddest}) {
1461 $ddest = $unified_info{rename}->{$ddest};
1463 foreach (@{$sources{$dest}}) {
1464 my $s = cleanfile($sourced, $_, $blddir);
1466 # If it isn't in the source tree, we assume it's generated
1469 $s = cleanfile($buildd, $_, $blddir);
1471 # We recognise C and asm files
1472 if ($s =~ /\.[csS]\b$/) {
1473 (my $o = $_) =~ s/\.[csS]\b$/.o/;
1474 $o = cleanfile($buildd, $o, $blddir);
1475 $unified_info{sources}->{$ddest}->{$o} = 1;
1476 $unified_info{sources}->{$o}->{$s} = 1;
1478 $unified_info{sources}->{$ddest}->{$s} = 1;
1483 foreach (keys %depends) {
1485 my $ddest = cleanfile($buildd, $_, $blddir);
1486 if ($unified_info{rename}->{$ddest}) {
1487 $ddest = $unified_info{rename}->{$ddest};
1489 foreach (@{$depends{$dest}}) {
1490 my $d = cleanfile($sourced, $_, $blddir);
1492 # If we know it's generated, or assume it is because we can't
1493 # find it in the source tree, we set file we depend on to be
1494 # in the build tree rather than the source tree, and assume
1495 # and that there are lines to build it in a BEGINRAW..ENDRAW
1496 # section or in the Makefile template.
1498 || !(grep { $d eq $_ }
1499 map { cleanfile($srcdir, $_, $blddir) }
1500 (@generated_headers, @generated_by_make_headers))) {
1501 $d = cleanfile($buildd, $_, $blddir);
1503 # Take note if the file to depend on is being renamed
1504 if ($unified_info{rename}->{$d}) {
1505 $d = $unified_info{rename}->{$d};
1507 $unified_info{depends}->{$ddest}->{$d} = 1;
1508 # If we depend on a header file, let's make sure it
1511 my $i = dirname($d);
1512 push @{$unified_info{includes}->{$ddest}}, $i
1513 unless grep { $_ eq $i } @{$unified_info{includes}->{$ddest}};
1518 foreach (keys %includes) {
1520 my $ddest = cleanfile($buildd, $_, $blddir);
1521 if ($unified_info{rename}->{$ddest}) {
1522 $ddest = $unified_info{rename}->{$ddest};
1524 foreach (@{$includes{$dest}}) {
1525 my $i = cleandir($sourced, $_, $blddir);
1526 push @{$unified_info{includes}->{$ddest}}, $i
1527 unless grep { $_ eq $i } @{$unified_info{includes}->{$ddest}};
1532 ### Make unified_info a bit more efficient
1533 # One level structures
1534 foreach (("programs", "libraries", "engines", "scripts", "extra")) {
1535 $unified_info{$_} = [ sort keys %{$unified_info{$_}} ];
1537 # Two level structures
1538 foreach my $l1 (("sources", "ldadd", "depends")) {
1539 foreach my $l2 (sort keys %{$unified_info{$l1}}) {
1540 $unified_info{$l1}->{$l2} =
1541 [ sort keys %{$unified_info{$l1}->{$l2}} ];
1546 # For the schemes that need it, we provide the old *_obj configs
1547 # from the *_asm_obj ones
1548 foreach (grep /_(asm|aux)_src$/, keys %target) {
1550 (my $obj = $_) =~ s/_(asm|aux)_src$/_obj/;
1551 ($target{$obj} = $target{$src}) =~ s/\.[csS]\b/.o/g;
1554 # Write down our configuration where it fits #########################
1556 open(OUT,">configdata.pm") || die "unable to create configdata.pm: $!\n";
1564 #use vars qw(\@ISA \@EXPORT);
1565 our \@ISA = qw(Exporter);
1566 our \@EXPORT = qw(\%config \%target %disabled %withargs %unified_info);
1569 print OUT "our %config = (\n";
1570 foreach (sort keys %config) {
1571 if (ref($config{$_}) eq "ARRAY") {
1572 print OUT " ", $_, " => [ ", join(", ",
1573 map { quotify("perl", $_) }
1574 @{$config{$_}}), " ],\n";
1576 print OUT " ", $_, " => ", quotify("perl", $config{$_}), ",\n"
1583 print OUT "our %target = (\n";
1584 foreach (sort keys %target) {
1585 if (ref($target{$_}) eq "ARRAY") {
1586 print OUT " ", $_, " => [ ", join(", ",
1587 map { quotify("perl", $_) }
1588 @{$target{$_}}), " ],\n";
1590 print OUT " ", $_, " => ", quotify("perl", $target{$_}), ",\n"
1597 print OUT "our \%available_protocols = (\n";
1598 print OUT " tls => [ ", join(", ", map { quotify("perl", $_) } @tls), " ],\n";
1599 print OUT " dtls => [ ", join(", ", map { quotify("perl", $_) } @dtls), " ],\n";
1604 print OUT "our \%disabled = (\n";
1605 foreach (sort keys %disabled) {
1606 print OUT " ", quotify("perl", $_), " => ", quotify("perl", $disabled{$_}), ",\n";
1612 print OUT "our %withargs = (\n";
1613 foreach (sort keys %withargs) {
1614 if (ref($withargs{$_}) eq "ARRAY") {
1615 print OUT " ", $_, " => [ ", join(", ",
1616 map { quotify("perl", $_) }
1617 @{$withargs{$_}}), " ],\n";
1619 print OUT " ", $_, " => ", quotify("perl", $withargs{$_}), ",\n"
1626 if ($builder eq "unified") {
1631 if (ref $_ eq "ARRAY") {
1632 print OUT " "x$indent, "[\n";
1634 $recurse->($indent + 4, $_);
1636 print OUT " "x$indent, "],\n";
1637 } elsif (ref $_ eq "HASH") {
1639 print OUT " "x$indent, "{\n";
1640 foreach (sort keys %h) {
1641 if (ref $h{$_} eq "") {
1642 print OUT " "x($indent + 4), quotify("perl", $_), " => ", quotify("perl", $h{$_}), ",\n";
1644 print OUT " "x($indent + 4), quotify("perl", $_), " =>\n";
1645 $recurse->($indent + 8, $h{$_});
1648 print OUT " "x$indent, "},\n";
1650 print OUT " "x$indent, quotify("perl", $_), ",\n";
1654 print OUT "our %unified_info = (\n";
1655 foreach (sort keys %unified_info) {
1656 if (ref $unified_info{$_} eq "") {
1657 print OUT " "x4, quotify("perl", $_), " => ", quotify("perl", $unified_info{$_}), ",\n";
1659 print OUT " "x4, quotify("perl", $_), " =>\n";
1660 $recurse->(8, $unified_info{$_});
1672 print "IsMK1MF =", ($builder eq "mk1mf" ? "yes" : "no"), "\n";
1673 print "CC =$target{cc}\n";
1674 print "CFLAG =$config{cflags}\n";
1675 print "DEFINES =",join(" ", @{$config{defines}}),"\n";
1676 print "LFLAG =$target{lflags}\n";
1677 print "PLIB_LFLAG =$target{plib_lflags}\n";
1678 print "EX_LIBS =$config{ex_libs}\n";
1679 print "APPS_OBJ =$target{apps_obj}\n";
1680 print "CPUID_OBJ =$target{cpuid_obj}\n";
1681 print "UPLINK_OBJ =$target{uplink_obj}\n";
1682 print "BN_ASM =$target{bn_obj}\n";
1683 print "EC_ASM =$target{ec_obj}\n";
1684 print "DES_ENC =$target{des_obj}\n";
1685 print "AES_ENC =$target{aes_obj}\n";
1686 print "BF_ENC =$target{bf_obj}\n";
1687 print "CAST_ENC =$target{cast_obj}\n";
1688 print "RC4_ENC =$target{rc4_obj}\n";
1689 print "RC5_ENC =$target{rc5_obj}\n";
1690 print "MD5_OBJ_ASM =$target{md5_obj}\n";
1691 print "SHA1_OBJ_ASM =$target{sha1_obj}\n";
1692 print "RMD160_OBJ_ASM=$target{rmd160_obj}\n";
1693 print "CMLL_ENC =$target{cmll_obj}\n";
1694 print "MODES_OBJ =$target{modes_obj}\n";
1695 print "PADLOCK_OBJ =$target{padlock_obj}\n";
1696 print "CHACHA_ENC =$target{chacha_obj}\n";
1697 print "POLY1305_OBJ =$target{poly1305_obj}\n";
1698 print "PROCESSOR =$config{processor}\n";
1699 print "RANLIB =$target{ranlib}\n";
1700 print "ARFLAGS =$target{arflags}\n";
1701 print "PERL =$config{perl}\n";
1703 print "SIXTY_FOUR_BIT_LONG mode\n" if $config{b64l};
1704 print "SIXTY_FOUR_BIT mode\n" if $config{b64};
1705 print "THIRTY_TWO_BIT mode\n" if $config{b32};
1706 print "BN_LLONG mode\n" if $config{bn_ll};
1707 print "RC4 uses $config{rc4_int}\n" if $config{rc4_int} != $def_int;
1709 for (@generated_headers) {
1710 mkpath(catdir($blddir, dirname($_)));
1711 run_dofile(catfile($blddir, $_),
1712 catfile($srcdir, $_.".in"));
1716 ### When the old "unixmake" scheme goes away, so does this function
1718 sub build_Makefile {
1719 run_dofile("Makefile","Makefile.in");
1721 # Copy all Makefile.in to Makefile (except top-level)
1730 return if ($_ ne "Makefile.in" || $File::Find::dir eq ".");
1731 my $in = IO::File->new($_, "r") or
1732 die sprintf "Error reading Makefile.in in %s: !$\n",
1734 my $out = IO::File->new("Makefile", "w") or
1735 die sprintf "Error writing Makefile in %s: !$\n",
1737 print $out "# Generated from $_, do not edit\n";
1738 while (my $line = <$in>) { print $out $line }
1740 die sprintf "Error reading Makefile.in in %s: !$\n",
1743 die sprintf "Error writing Makefile in %s: !$\n",
1752 run_dofile(catfile($blddir, $target{build_file}),
1753 $config{build_file_template},
1754 catfile($srcdir, "Configurations", "common.tmpl"));
1759 run_dofile("util/domd", "util/domd.in");
1760 chmod 0755, "util/domd";
1763 my $platform = shift;
1764 # The only reason we do this is to have something to build MINFO from
1767 # create the ms/version32.rc file if needed
1768 if ($platform ne "netware") {
1769 my ($v1, $v2, $v3, $v4);
1770 if ($config{version_num} =~ /^0x([0-9a-f]{1})([0-9a-f]{2})([0-9a-f]{2})([0-9a-f]{2})([0-9a-f]{1})L$/i) {
1776 open (OUT,">ms/version32.rc") || die "Can't open ms/version32.rc";
1783 FILEVERSION $v1,$v2,$v3,$v4
1784 PRODUCTVERSION $v1,$v2,$v3,$v4
1791 FILEOS VOS__WINDOWS32
1795 BLOCK "StringFileInfo"
1800 VALUE "CompanyName", "The OpenSSL Project, http://www.openssl.org/\\0"
1801 VALUE "FileDescription", "OpenSSL Shared Library\\0"
1802 VALUE "FileVersion", "$config{version}\\0"
1804 VALUE "InternalName", "libeay32\\0"
1805 VALUE "OriginalFilename", "libeay32.dll\\0"
1807 VALUE "InternalName", "ssleay32\\0"
1808 VALUE "OriginalFilename", "ssleay32.dll\\0"
1810 VALUE "ProductName", "The OpenSSL Toolkit\\0"
1811 VALUE "ProductVersion", "$config{version}\\0"
1813 //VALUE "Comments", "\\0"
1814 VALUE "LegalCopyright", "Copyright © 1998-2015 The OpenSSL Project. Copyright © 1995-1998 Eric A. Young, Tim J. Hudson. All rights reserved.\\0"
1815 //VALUE "LegalTrademarks", "\\0"
1816 //VALUE "PrivateBuild", "\\0"
1817 //VALUE "SpecialBuild", "\\0"
1822 VALUE "Translation", 0x409, 0x4b0
1831 $builders{$builder}->($builder_platform, @builder_opts);
1835 Configured for $target.
1838 print <<"EOF" if ($disabled{threads} eq "unavailable");
1840 The library could not be configured for supporting multi-threaded
1841 applications as the compiler options required on this system are not known.
1842 See file INSTALL for details if you need multi-threading.
1845 print <<"EOF" if ($no_shared_warn);
1847 The options 'shared', 'pic' and 'dynamic-engine' aren't supported on this
1848 platform, so we will pretend you gave the option 'no-pic', which also disables
1849 'shared' and 'dynamic-engine'. If you know how to implement shared libraries
1850 or position independent code, please let us know (but please first make sure
1851 you have tried with a current version of OpenSSL).
1854 ###### TO BE REMOVED BEFORE FINAL RELEASE
1856 ###### If the user hasn't chosen --unified, try to nudge them.
1857 if ($target{build_file} eq "Makefile"
1858 && $target{build_scheme}->[0] eq "unixmake"
1861 my $plausible_builddir =
1862 abs2rel(rel2abs("../_openssl-build_$target"),rel2abs("."));
1863 my $plausible_to_sourcedir =
1864 abs2rel(rel2abs("."),rel2abs("../_openssl-build_$target"));
1867 ----------------------------------------------------------------------
1868 Please consider configuring with the flag --unified .
1869 It's to test out a new "unified" building system.
1871 One cool feature is that you can have your build directory elsewhere,
1874 make clean # Clean the current configuration away
1875 mkdir $plausible_builddir
1876 cd $plausible_builddir
1877 $plausible_to_sourcedir/config --unified
1881 Please report any problem you have.
1882 ----------------------------------------------------------------------
1889 ######################################################################
1891 # Helpers and utility functions
1894 # Configuration file reading #########################################
1896 # Helper function to implement conditional inheritance depending on the
1897 # value of $disabled{asm}. Used in inherit_from values as follows:
1899 # inherit_from => [ "template", asm("asm_tmpl") ]
1904 $disabled{asm} ? () : @x;
1908 our $add_called = 0;
1909 # Helper function to implement adding values to already existing configuration
1910 # values. It handles elements that are ARRAYs, CODEs and scalars
1912 my $separator = shift;
1914 # If there's any ARRAY in the collection of values OR the separator
1915 # is undef, we will return an ARRAY of combined values, otherwise a
1916 # string of joined values with $separator as the separator.
1917 my $found_array = !defined($separator);
1922 while (ref($res) eq "CODE") {
1925 if (defined($res)) {
1926 if (ref($res) eq "ARRAY") {
1942 join($separator, grep { defined($_) && $_ ne "" } @values);
1946 my $separator = " ";
1947 if (ref($_[$#_]) eq "HASH") {
1949 $separator = $opts->{separator};
1952 sub { _add($separator, @x, @_) };
1955 my $separator = " ";
1956 if (ref($_[$#_]) eq "HASH") {
1958 $separator = $opts->{separator};
1961 sub { _add($separator, @_, @x) };
1964 # configuration reader, evaluates the input file as a perl script and expects
1965 # it to fill %targets with target configurations. Those are then added to
1969 open(CONFFILE, "< $fname")
1970 or die "Can't open configuration file '$fname'!\n";
1973 my $content = <CONFFILE>;
1978 local %table = %::table; # Protect %table from tampering
1984 # For each target, check that it's configured with a hash table.
1985 foreach (keys %targets) {
1986 if (ref($targets{$_}) ne "HASH") {
1987 if (ref($targets{$_}) eq "") {
1988 warn "Deprecated target configuration for $_, ignoring...\n";
1990 warn "Misconfigured target configuration for $_ (should be a hash table), ignoring...\n";
1992 delete $targets{$_};
1996 %table = (%table, %targets);
2000 # configuration resolver. Will only resolve all the lazy evalutation
2001 # codeblocks for the chozen target and all those it inherits from,
2003 sub resolve_config {
2005 my @breadcrumbs = @_;
2007 my $extra_checks = defined($ENV{CONFIGURE_EXTRA_CHECKS});
2009 if (grep { $_ eq $target } @breadcrumbs) {
2010 die "inherit_from loop! target backtrace:\n "
2011 ,$target,"\n ",join("\n ", @breadcrumbs),"\n";
2014 if (!defined($table{$target})) {
2015 warn "Warning! target $target doesn't exist!\n";
2018 # Recurse through all inheritances. They will be resolved on the
2019 # fly, so when this operation is done, they will all just be a
2020 # bunch of attributes with string values.
2021 # What we get here, though, are keys with references to lists of
2022 # the combined values of them all. We will deal with lists after
2023 # this stage is done.
2024 my %combined_inheritance = ();
2025 if ($table{$target}->{inherit_from}) {
2027 map { ref($_) eq "CODE" ? $_->() : $_ } @{$table{$target}->{inherit_from}};
2028 foreach (@inherit_from) {
2029 my %inherited_config = resolve_config($_, $target, @breadcrumbs);
2031 # 'template' is a marker that's considered private to
2032 # the config that had it.
2033 delete $inherited_config{template};
2036 if (!$combined_inheritance{$_}) {
2037 $combined_inheritance{$_} = [];
2039 push @{$combined_inheritance{$_}}, $inherited_config{$_};
2040 } keys %inherited_config;
2044 # We won't need inherit_from in this target any more, since we've
2045 # resolved all the inheritances that lead to this
2046 delete $table{$target}->{inherit_from};
2048 # Now is the time to deal with those lists. Here's the place to
2049 # decide what shall be done with those lists, all based on the
2050 # values of the target we're currently dealing with.
2051 # - If a value is a coderef, it will be executed with the list of
2052 # inherited values as arguments.
2053 # - If the corresponding key doesn't have a value at all or is the
2054 # emoty string, the inherited value list will be run through the
2055 # default combiner (below), and the result becomes this target's
2057 # - Otherwise, this target's value is assumed to be a string that
2058 # will simply override the inherited list of values.
2059 my $default_combiner = add();
2062 map { $_ => 1 } (keys %combined_inheritance,
2063 keys %{$table{$target}});
2065 sub process_values {
2067 my $inherited = shift; # Always a [ list ]
2073 while(ref($object) eq "CODE") {
2074 $object = $object->(@$inherited);
2076 if (!defined($object)) {
2079 elsif (ref($object) eq "ARRAY") {
2080 local $add_called; # To make sure recursive calls don't affect it
2081 return [ map { process_values($_, $inherited, $target, $entry) }
2083 } elsif (ref($object) eq "") {
2086 die "cannot handle reference type ",ref($object)
2087 ," found in target ",$target," -> ",$entry,"\n";
2091 foreach (sort keys %all_keys) {
2092 my $previous = $combined_inheritance{$_};
2094 # Current target doesn't have a value for the current key?
2095 # Assign it the default combiner, the rest of this loop body
2096 # will handle it just like any other coderef.
2097 if (!exists $table{$target}->{$_}) {
2098 $table{$target}->{$_} = $default_combiner;
2101 $table{$target}->{$_} = process_values($table{$target}->{$_},
2102 $combined_inheritance{$_},
2104 unless(defined($table{$target}->{$_})) {
2105 delete $table{$target}->{$_};
2107 if ($extra_checks &&
2108 $previous && !($add_called || $previous ~~ $table{$target}->{$_})) {
2109 warn "$_ got replaced in $target\n";
2113 # Finally done, return the result.
2114 return %{$table{$target}};
2119 print STDERR $usage;
2120 print STDERR "\npick os/compiler from:\n";
2124 foreach $i (sort keys %table)
2126 next if $table{$i}->{template};
2127 next if $i =~ /^debug/;
2128 $k += length($i) + 1;
2134 print STDERR $i . " ";
2136 foreach $i (sort keys %table)
2138 next if $table{$i}->{template};
2139 next if $i !~ /^debug/;
2140 $k += length($i) + 1;
2146 print STDERR $i . " ";
2148 print STDERR "\n\nNOTE: If in doubt, on Unix-ish systems use './config'.\n";
2157 unlink $out || warn "Can't remove $out, $!"
2159 foreach (@templates) {
2160 die "Can't open $_, $!" unless -f $_;
2162 my $cmd = "$config{perl} \"-I.\" \"-Mconfigdata\" $dofile -o\"Configure\" \"".join("\" \"",@templates)."\" > \"$out.new\"";
2163 #print STDERR "DEBUG[run_dofile]: \$cmd = $cmd\n";
2166 rename("$out.new", $out) || die "Can't rename $out.new, $!";
2169 # Configuration printer ##############################################
2171 sub print_table_entry
2174 my %target = resolve_config($target);
2177 # Don't print the templates
2178 return if $target{template};
2215 "shared_extension_simple",
2216 "shared_import_extension",
2227 if ($type eq "TABLE") {
2229 print "*** $target\n";
2230 foreach (@sequence) {
2231 if (ref($target{$_}) eq "ARRAY") {
2232 printf "\$%-12s = %s\n", $_, join(" ", @{$target{$_}});
2234 printf "\$%-12s = %s\n", $_, $target{$_};
2237 } elsif ($type eq "HASH") {
2239 length((sort { length($a) <=> length($b) } @sequence)[-1]);
2240 print " '$target' => {\n";
2241 foreach (@sequence) {
2243 if (ref($target{$_}) eq "ARRAY") {
2244 print " '",$_,"'"," " x ($largest - length($_))," => [ ",join(", ", map { "'$_'" } @{$target{$_}})," ],\n";
2246 print " '",$_,"'"," " x ($largest - length($_))," => '",$target{$_},"',\n";
2254 # Utility routines ###################################################
2256 # On VMS, if the given file is a logical name, File::Spec::Functions
2257 # will consider it an absolute path. There are cases when we want a
2258 # purely syntactic check without checking the environment.
2262 # On non-platforms, we just use file_name_is_absolute().
2263 return file_name_is_absolute($file) unless $^O eq "VMS";
2265 # If the file spec includes a device or a directpry spec,
2266 # file_name_is_absolute() is perfectly safe.
2267 return file_name_is_absolute($file) if $file =~ m|[:\[]|;
2269 # Here, we know the given file spec isn't absolute
2273 # Makes a directory absolute and cleans out /../ in paths like foo/../bar
2274 # On some platforms, this uses rel2abs(), while on others, realpath() is used.
2275 # realpath() requires that at least all path components except the last is an
2276 # existing directory. On VMS, the last component of the directory spec must
2281 # realpath() is quite buggy on VMS. It uses LIB$FID_TO_NAME, which
2282 # will return the volume name for the device, no matter what. Also,
2283 # it will return an incorrect directory spec if the argument is a
2284 # directory that doesn't exist.
2286 return rel2abs($dir);
2289 # We use realpath() on Unix, since no other will properly clean out
2291 use Cwd qw/realpath/;
2293 return realpath($dir);
2300 foreach $path (split /:/, $ENV{PATH})
2302 if (-f "$path/$name$target{exe_extension}" and -x _)
2304 return "$path/$name$target{exe_extension}" unless ($name eq "perl" and
2305 system("$path/$name$target{exe_extension} -e " . '\'exit($]<5.0);\''));
2312 perl => sub { my $x = shift;
2313 $x =~ s/([\\\$\@"])/\\$1/g;
2314 return '"'.$x.'"'; },
2318 defined($processors{$for}) ? $processors{$for} : sub { shift; };
2320 map { $processor->($_); } @_;
2323 # collect_from_file($filename, $line_concat_cond_re, $line_concat)
2324 # $filename is a file name to read from
2325 # $line_concat_cond_re is a regexp detecting a line continuation ending
2326 # $line_concat is a CODEref that takes care of concatenating two lines
2327 sub collect_from_file {
2328 my $filename = shift;
2329 my $line_concat_cond_re = shift;
2330 my $line_concat = shift;
2332 open my $fh, $filename || die "unable to read $filename: $!\n";
2334 my $saved_line = "";
2338 if (defined $line_concat) {
2339 $_ = $line_concat->($saved_line, $_);
2342 if (defined $line_concat_cond_re && /$line_concat_cond_re/) {
2348 die "$filename ending with continuation line\n" if $_;
2354 # collect_from_array($array, $line_concat_cond_re, $line_concat)
2355 # $array is an ARRAYref of lines
2356 # $line_concat_cond_re is a regexp detecting a line continuation ending
2357 # $line_concat is a CODEref that takes care of concatenating two lines
2358 sub collect_from_array {
2360 my $line_concat_cond_re = shift;
2361 my $line_concat = shift;
2362 my @array = (@$array);
2365 my $saved_line = "";
2367 while (defined($_ = shift @array)) {
2369 if (defined $line_concat) {
2370 $_ = $line_concat->($saved_line, $_);
2373 if (defined $line_concat_cond_re && /$line_concat_cond_re/) {
2379 die "input text ending with continuation line\n" if $_;
2384 # collect_information($lineiterator, $line_continue, $regexp => $CODEref, ...)
2385 # $lineiterator is a CODEref that delivers one line at a time.
2386 # All following arguments are regex/CODEref pairs, where the regexp detects a
2387 # line and the CODEref does something with the result of the regexp.
2388 sub collect_information {
2389 my $lineiterator = shift;
2390 my %collectors = @_;
2392 while(defined($_ = $lineiterator->())) {
2395 foreach my $re (keys %collectors) {
2396 if ($re ne "OTHERWISE" && /$re/) {
2397 $collectors{$re}->($lineiterator);
2401 if ($collectors{"OTHERWISE"}) {
2402 $collectors{"OTHERWISE"}->($lineiterator, $_)
2403 unless $found || !defined $collectors{"OTHERWISE"};