5 ## Configure -- OpenSSL source tree configuration script
6 ## If editing this file, run this command before committing
7 ## make -f Makefile.in TABLE
13 use File::Spec::Functions qw/:DEFAULT abs2rel rel2abs/;
14 use File::Path qw/mkpath/;
16 # see INSTALL for instructions.
18 my $usage="Usage: Configure [no-<cipher> ...] [enable-<cipher> ...] [experimental-<cipher> ...] [-Dxxx] [-lxxx] [-Lxxx] [-fxxx] [-Kxxx] [no-hw-xxx|no-hw] [[no-]threads] [[no-]shared] [[no-]zlib|zlib-dynamic] [no-asm] [no-dso] [no-egd] [sctp] [386] [--prefix=DIR] [--openssldir=OPENSSLDIR] [--with-xxx[=vvv]] [--config=FILE] os/compiler[:flags]\n";
22 # --config add the given configuration file, which will be read after
23 # any "Configurations*" files that are found in the same
24 # directory as this script.
25 # --prefix prefix for the OpenSSL installation, which includes the
26 # directories bin, lib, include, share/man, share/doc/openssl
27 # This becomes the value of INSTALLTOP in Makefile
28 # (Default: /usr/local)
29 # --openssldir OpenSSL data area, such as openssl.cnf, certificates and keys.
30 # If it's a relative directory, it will be added on the directory
31 # given with --prefix.
32 # This becomes the value of OPENSSLDIR in Makefile and in C.
33 # (Default: PREFIX/ssl)
35 # --install_prefix Additional prefix for package builders (empty by
36 # default). This needn't be set in advance, you can
37 # just as well use "make INSTALL_PREFIX=/whatever install".
39 # --cross-compile-prefix Add specified prefix to binutils components.
41 # --api One of 0.9.8, 1.0.0 or 1.1.0. Do not compile support for
42 # interfaces deprecated as of the specified OpenSSL version.
44 # no-hw-xxx do not compile support for specific crypto hardware.
45 # Generic OpenSSL-style methods relating to this support
46 # are always compiled but return NULL if the hardware
47 # support isn't compiled.
48 # no-hw do not compile support for any crypto hardware.
49 # [no-]threads [don't] try to create a library that is suitable for
50 # multithreaded applications (default is "threads" if we
52 # [no-]shared [don't] try to create shared libraries when supported.
53 # no-asm do not use assembler
54 # no-dso do not compile in any native shared-library methods. This
55 # will ensure that all methods just return NULL.
56 # no-egd do not compile support for the entropy-gathering daemon APIs
57 # [no-]zlib [don't] compile support for zlib compression.
58 # zlib-dynamic Like "zlib", but the zlib library is expected to be a shared
59 # library and will be loaded in run-time by the OpenSSL library.
60 # sctp include SCTP support
61 # 386 generate 80386 code
62 # no-sse2 disables IA-32 SSE2 code, above option implies no-sse2
63 # no-<cipher> build without specified algorithm (rsa, idea, rc5, ...)
64 # -<xxx> +<xxx> compiler options are passed through
66 # DEBUG_SAFESTACK use type-safe stacks to enforce type-safety on stack items
67 # provided to stack calls. Generates unique stack functions for
68 # each possible stack type.
69 # BN_LLONG use the type 'long long' in crypto/bn/bn.h
70 # RC4_CHAR use 'char' instead of 'int' for RC4_INT in crypto/rc4/rc4.h
71 # Following are set automatically by this script
73 # MD5_ASM use some extra md5 assember,
74 # SHA1_ASM use some extra sha1 assember, must define L_ENDIAN for x86
75 # RMD160_ASM use some extra ripemd160 assember,
76 # SHA256_ASM sha256_block is implemented in assembler
77 # SHA512_ASM sha512_block is implemented in assembler
78 # AES_ASM ASE_[en|de]crypt is implemented in assembler
80 # Minimum warning options... any contributions to OpenSSL should at least get
83 my $gcc_devteam_warn = "-Wall -pedantic -DPEDANTIC -Wno-long-long -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Werror -DREF_CHECK -DDEBUG_UNUSED";
85 # These are used in addition to $gcc_devteam_warn when the compiler is clang.
86 # TODO(openssl-team): fix problems and investigate if (at least) the
87 # following warnings can also be enabled:
88 # -Wswitch-enum, -Wunused-macros, -Wmissing-field-initializers,
90 # -Wunreachable-code -Wunused-parameter -Wlanguage-extension-token
92 my $clang_devteam_warn = "-Wno-unused-parameter -Wno-missing-field-initializers -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Qunused-arguments -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations";
94 # These are used in addition to $gcc_devteam_warn unless this is a mingw build.
95 # This adds backtrace information to the memory leak info.
96 my $memleak_devteam_backtrace = "-rdynamic -DCRYPTO_MDEBUG_BACKTRACE";
98 my $strict_warnings = 0;
100 # As for $BSDthreads. Idea is to maintain "collective" set of flags,
101 # which would cover all BSD flavors. -pthread applies to them all,
102 # but is treated differently. OpenBSD expands is as -D_POSIX_THREAD
103 # -lc_r, which is sufficient. FreeBSD 4.x expands it as -lc_r,
104 # which has to be accompanied by explicit -D_THREAD_SAFE and
105 # sometimes -D_REENTRANT. FreeBSD 5.x expands it as -lc_r, which
106 # seems to be sufficient?
107 my $BSDthreads="-pthread -D_THREAD_SAFE -D_REENTRANT";
110 # API compability name to version number mapping.
112 my $maxapi = "1.1.0"; # API for "no-deprecated" builds
114 "1.1.0" => "0x10100000L",
115 "1.0.0" => "0x10000000L",
116 "0.9.8" => "0x00908000L",
119 my $base_target = "BASE"; # The template that all other inherit from
123 # Forward declarations ###############################################
125 # read_config(filename)
127 # Reads a configuration file and populates %table with the contents
128 # (which the configuration file places in %targets).
131 # resolve_config(target)
133 # Resolves all the late evalutations, inheritances and so on for the
134 # chosen target and any target it inherits from.
138 # Information collection #############################################
140 # Unified build supports separate build dir
141 my $srcdir = catdir(absolutedir(dirname($0))); # catdir ensures local syntax
142 my $blddir = catdir(absolutedir(".")); # catdir ensures local syntax
143 my $dofile = abs2rel(catfile($srcdir, "util/dofile.pl"));
145 $config{sourcedir} = abs2rel($srcdir);
146 $config{builddir} = abs2rel($blddir);
148 # Collect version numbers
149 $config{version} = "unknown";
150 $config{version_num} = "unknown";
151 $config{shlib_version_number} = "unknown";
152 $config{shlib_version_history} = "unknown";
155 collect_from_file(catfile($srcdir,'include/openssl/opensslv.h')),
156 qr/OPENSSL.VERSION.TEXT.*OpenSSL (\S+) / => sub { $config{version} = $1; },
157 qr/OPENSSL.VERSION.NUMBER.*(0x\S+)/ => sub { $config{version_num}=$1 },
158 qr/SHLIB_VERSION_NUMBER *"([^"]+)"/ => sub { $config{shlib_version_number}=$1 },
159 qr/SHLIB_VERSION_HISTORY *"([^"]*)"/ => sub { $config{shlib_version_history}=$1 }
161 if ($config{shlib_version_history} ne "") { $config{shlib_version_history} .= ":"; }
163 ($config{major}, $config{minor})
164 = ($config{version} =~ /^([0-9]+)\.([0-9\.]+)/);
165 ($config{shlib_major}, $config{shlib_minor})
166 = ($config{shlib_version_number} =~ /^([0-9]+)\.([0-9\.]+)/);
167 die "erroneous version information in opensslv.h: ",
168 "$config{major}, $config{minor}, $config{shlib_major}, $config{shlib_minor}\n"
169 if ($config{major} eq "" || $config{minor} eq ""
170 || $config{shlib_major} eq "" || $config{shlib_minor} eq "");
172 # Collect target configurations
174 my $pattern = catfile(dirname($0), "Configurations", "*.conf");
175 foreach (sort glob($pattern) ) {
180 print "Configuring OpenSSL version $config{version} (0x$config{version_num})\n";
184 $config{openssldir}="";
185 $config{processor}="";
187 $config{install_prefix}= "$ENV{'INSTALL_PREFIX'}";
188 $config{cross_compile_prefix}="";
189 $config{fipslibdir}="/usr/local/ssl/fips-2.0/lib/";
190 my $nofipscanistercheck=0;
191 $config{baseaddr}="0xFB00000";
194 $config{no_shared}=0; # but "no-shared" is default
195 my $zlib=1; # but "no-zlib" is default
202 # Top level directories to build
203 $config{dirs} = [ "crypto", "ssl", "engines", "apps", "test", "tools" ];
204 # crypto/ subdirectories to build
207 "md2", "md4", "md5", "sha", "mdc2", "hmac", "ripemd", "whrlpool", "poly1305",
208 "des", "aes", "rc2", "rc4", "rc5", "idea", "bf", "cast", "camellia", "seed", "chacha", "modes",
209 "bn", "ec", "rsa", "dsa", "dh", "dso", "engine",
210 "buffer", "bio", "stack", "lhash", "rand", "err",
211 "evp", "asn1", "pem", "x509", "x509v3", "conf", "txt_db", "pkcs7", "pkcs12", "comp", "ocsp", "ui",
212 "cms", "ts", "jpake", "srp", "cmac", "ct", "async", "kdf"
215 # Known TLS and DTLS protocols
216 my @tls = qw(ssl3 tls1 tls1_1 tls1_2);
217 my @dtls = qw(dtls1 dtls1_2);
219 # Explicitelly known options that are possible to disable. They can
220 # be regexps, and will be used like this: /^no-${option}$/
221 # For developers: keep it sorted alphabetically
251 "ec_nistp_64_gcc_128",
260 "locking", # Really???
277 "rijndael", # Old AES name
301 foreach my $proto ((@tls, @dtls))
303 push(@disablables, $proto);
304 push(@disablables, "$proto-method");
307 # All of the following is disabled by default (RC5 was enabled before 0.9.8):
309 my %disabled = ( # "what" => "comment" [or special keyword "experimental"]
310 "ec_nistp_64_gcc_128" => "default",
312 "jpake" => "experimental",
316 "shared" => "default",
317 "ssl-trace" => "default",
318 "unit-test" => "default",
320 "crypto-mdebug" => "default",
322 my @experimental = ();
324 # Note: => pair form used for aesthetics, not to truly make a hash table
325 my @disable_cascades = (
326 # "what" => [ "cascade", ... ]
327 sub { $config{processor} eq "386" }
330 "ssl3-method" => [ "ssl3" ],
331 "zlib" => [ "zlib-dynamic" ],
332 "rijndael" => [ "aes" ],
334 "ec" => [ "ecdsa", "ecdh" ],
335 "psk" => [ "jpake" ],
337 "dgram" => [ "dtls" ],
340 # SSL 3.0, (D)TLS 1.0 and TLS 1.1 require MD5 and SHA
341 "md5" => [ "ssl", "tls1", "tls1_1", "dtls1" ],
342 "sha" => [ "ssl", "tls1", "tls1_1", "dtls1" ],
344 # Additionally, SSL 3.0 requires either RSA or DSA+DH
346 && ($disabled{dsa} || $disabled{dh}); }
349 # (D)TLS 1.0 and TLS 1.1 also require either RSA or DSA+DH
350 # or ECDSA + ECDH. (D)TLS 1.2 has this requirement as well.
351 # (XXX: We don't support PSK-only builds).
353 && ($disabled{dsa} || $disabled{dh})
354 && ($disabled{ecdsa} || $disabled{ecdh}); }
355 => [ "tls1", "tls1_1", "tls1_2",
356 "dtls1", "dtls1_2" ],
360 # SRP and HEARTBEATS require TLSEXT
361 "tlsext" => [ "srp", "heartbeats" ],
364 # Avoid protocol support holes. Also disable all versions below N, if version
365 # N is disabled while N+1 is enabled.
367 my @list = (reverse @tls);
368 while ((my $first, my $second) = (shift @list, shift @list)) {
370 push @disable_cascades, ( sub { !$disabled{$first} && $disabled{$second} }
372 unshift @list, $second;
374 my @list = (reverse @dtls);
375 while ((my $first, my $second) = (shift @list, shift @list)) {
377 push @disable_cascades, ( sub { !$disabled{$first} && $disabled{$second} }
379 unshift @list, $second;
382 # Construct the string of what $config{depdefines} should look like with
383 # the defaults from %disabled above. (we need this to see if we should
384 # advise the user to run "make depend"):
385 my @default_depdefines =
386 map { my $x = $_; $x =~ tr{[a-z]-}{[A-Z]_}; "OPENSSL_NO_$x"; }
387 grep { $disabled{$_} !~ /\(no-depdefines\)$/ }
390 # Explicit "no-..." options will be collected in %disabled along with the defaults.
391 # To remove something from %disabled, use "enable-foo" (unless it's experimental).
392 # For symmetry, "disable-foo" is a synonym for "no-foo".
394 # For features called "experimental" here, a more explicit "experimental-foo" is needed to enable.
395 # We will collect such requests in @experimental.
396 # To avoid accidental use of experimental features, applications will have to use -DOPENSSL_EXPERIMENTAL_FOO.
401 &usage if ($#ARGV < 0);
406 $config{depdefines}=[];
407 $config{openssl_experimental_defines}=[];
408 $config{openssl_api_defines}=[];
409 $config{openssl_algorithm_defines}=[];
410 $config{openssl_thread_defines}=[];
411 $config{openssl_sys_defines}=[];
412 $config{openssl_other_defines}=[];
417 my $build_prefix = "release_";
421 if (grep /^reconf(igure)?$/, @argvcopy) {
422 if (-f "./configdata.pm") {
423 my $file = "./configdata.pm";
424 unless (my $return = do $file) {
425 die "couldn't parse $file: $@" if $@;
426 die "couldn't do $file: $!" unless defined $return;
427 die "couldn't run $file" unless $return;
430 @argvcopy = defined($configdata::config{perlargv}) ?
431 @{$configdata::config{perlargv}} : ();
432 die "Incorrect data to reconfigure, please do a normal configuration\n"
433 if (grep(/^reconf/,@argvcopy));
434 $ENV{CROSS_COMPILE} = $configdata::config{cross_compile_prefix}
435 if defined($configdata::config{cross_compile_prefix});
436 $ENV{CROSS_COMPILE} = $configdata::config{cc}
437 if defined($configdata::config{cc});
439 print "Reconfiguring with: ", join(" ",@argvcopy), "\n";
440 print " CROSS_COMPILE = ",$ENV{CROSS_COMPILE},"\n"
441 if $ENV{CROSS_COMPILE};
442 print " CC = ",$ENV{CC},"\n" if $ENV{CC};
443 } elsif (open IN, "<Makefile") {
445 # THIS SECTION IS TEMPORARY, it helps transitioning from Makefile
446 # centered information gathering the reading configdata.pm
450 if (/^CONFIGURE_ARGS=\s*(.*)\s*/) {
451 # Older form, we split the string and hope for the best
452 @argvcopy = split /\s+/, $_;
453 die "Incorrect data to reconfigure, please do a normal configuration\n"
454 if (grep(/^reconf/,@argvcopy));
455 } elsif (/^CROSS_COMPILE=\s*(.*)/) {
456 $ENV{CROSS_COMPILE}=$1;
457 } elsif (/^CC=\s*(?:\$\(CROSS_COMPILE\))?(.*?)$/) {
462 # END OF TEMPORARY SECTION
465 die "Insufficient data to reconfigure, please do a normal configuration\n";
469 $config{perlargv} = [ @argvcopy ];
471 my %unsupported_options = ();
474 s /^-no-/no-/; # some people just can't read the instructions
476 # rewrite some options in "enable-..." form
477 s /^-?-?shared$/enable-shared/;
478 s /^sctp$/enable-sctp/;
479 s /^threads$/enable-threads/;
480 s /^zlib$/enable-zlib/;
481 s /^zlib-dynamic$/enable-zlib-dynamic/;
483 if (/^(no|disable|enable|experimental)-(.+)$/)
486 if (!grep { $word =~ /^${_}$/ } @disablables)
488 $unsupported_options{$_} = 1;
492 if (/^no-(.+)$/ || /^disable-(.+)$/)
494 if (!($disabled{$1} eq "experimental"))
496 foreach my $proto ((@tls, @dtls))
498 if ($1 eq "$proto-method")
500 $disabled{"$proto"} = "option($proto-method)";
506 foreach my $proto (@dtls)
508 $disabled{$proto} = "option(dtls)";
513 # Last one of its kind
514 $disabled{"ssl3"} = "option(ssl)";
518 # XXX: Tests will fail if all SSL/TLS
519 # protocols are disabled.
520 foreach my $proto (@tls)
522 $disabled{$proto} = "option(tls)";
527 $disabled{$1} = "option";
531 elsif (/^enable-(.+)$/ || /^experimental-(.+)$/)
534 if ($disabled{$algo} eq "experimental")
536 die "You are requesting an experimental feature; please say 'experimental-$algo' if you are sure\n"
537 unless (/^experimental-/);
538 push @experimental, $algo;
540 delete $disabled{$algo};
542 $threads = 1 if ($algo eq "threads");
544 elsif (/^--strict-warnings$/)
546 $strict_warnings = 1;
550 $build_prefix = "debug_";
552 elsif (/^--release$/)
554 $build_prefix = "release_";
557 { $config{processor}=386; }
564 # No RSAref support any more since it's not needed.
565 # The check for the option is there so scripts aren't
568 elsif (/^nofipscanistercheck$/)
571 $nofipscanistercheck = 1;
579 elsif (/^--prefix=(.*)$/)
582 die "Directory given with --prefix MUST be absolute\n"
583 unless file_name_is_absolute($config{prefix});
585 elsif (/^--api=(.*)$/)
589 elsif (/^--libdir=(.*)$/)
593 elsif (/^--openssldir=(.*)$/)
595 $config{openssldir}=$1;
597 elsif (/^--install.prefix=(.*)$/)
599 $config{install_prefix}=$1;
601 elsif (/^--with-zlib-lib=(.*)$/)
603 $withargs{zlib_lib}=$1;
605 elsif (/^--with-zlib-include=(.*)$/)
607 $withargs{zlib_include}="-I$1";
609 elsif (/^--with-fipslibdir=(.*)$/)
611 $config{fipslibdir}="$1/";
613 elsif (/^--with-baseaddr=(.*)$/)
615 $config{baseaddr}="$1";
617 elsif (/^--cross-compile-prefix=(.*)$/)
619 $config{cross_compile_prefix}=$1;
621 elsif (/^--config=(.*)$/)
625 elsif (/^-[lL](.*)$/ or /^-Wl,/)
631 push @user_defines, $1;
633 else # common if (/^[-+]/), just pass down...
635 $_ =~ s/%([0-9a-f]{1,2})/chr(hex($1))/gei;
636 $user_cflags.=$_." ";
639 elsif ($_ =~ /^([^:]+):(.+)$/)
641 eval "\$table{\$1} = \"$2\""; # allow $xxx constructs in the string
646 die "target already defined - $target (offending arg: $_)\n" if ($target ne "");
649 unless ($_ eq $target || /^no-/ || /^disable-/)
651 # "no-..." follows later after implied disactivations
652 # have been derived. (Don't take this too seroiusly,
653 # we really only write OPTIONS to the Makefile out of
656 if ($config{options} eq "")
657 { $config{options} = $_; }
659 { $config{options} .= " ".$_; }
662 if (defined($config{api}) && !exists $apitable->{$config{api}}) {
663 die "***** Unsupported api compatibility level: $config{api}\n",
666 if (keys %unsupported_options)
668 die "***** Unsupported options: ",
669 join(", ", keys %unsupported_options), "\n";
675 delete $disabled{"shared"} if ($disabled{"shared"} =~ /^default/);
679 @{$config{dirs}} = grep !/^fips$/, @{$config{dirs}};
682 my @tocheckfor = (keys %disabled);
683 while (@tocheckfor) {
684 my %new_tocheckfor = ();
685 my @cascade_copy = (@disable_cascades);
686 while (@cascade_copy) {
687 my ($test, $descendents) = (shift @cascade_copy, shift @cascade_copy);
688 if (ref($test) eq "CODE" ? $test->() : defined($disabled{$test})) {
690 $new_tocheckfor{$_} => 1; $disabled{$_} = "forced";
691 } grep { !defined($disabled{$_}) } @$descendents;
694 @tocheckfor = (keys %new_tocheckfor);
697 if ($target eq "TABLE") {
698 foreach (sort keys %table) {
699 print_table_entry($_, "TABLE");
704 if ($target eq "LIST") {
705 foreach (sort keys %table) {
706 print $_,"\n" unless $table{$_}->{template};
711 if ($target eq "HASH") {
712 print "%table = (\n";
713 foreach (sort keys %table) {
714 print_table_entry($_, "HASH");
719 # Backward compatibility?
720 if ($target =~ m/^CygWin32(-.*)$/) {
721 $target = "Cygwin".$1;
724 foreach (sort (keys %disabled))
726 $config{options} .= " no-$_";
728 printf " no-%-12s %-10s", $_, "[$disabled{$_}]";
735 { $config{no_shared} = 1; }
738 elsif (/^static-engine$/)
740 elsif (/^zlib-dynamic$/)
745 { @{$config{dirs}} = grep !/^engine$/, @{$config{dirs}}; }
749 ($ALGO = $algo = $_) =~ tr/[\-a-z]/[_A-Z]/;
751 if (/^asm$/ || /^err$/ || /^hw$/ || /^hw-/ || /^async$/
752 || /^autoalginit/ || /^autoerrinit/)
754 push @{$config{openssl_other_defines}}, "OPENSSL_NO_$ALGO";
755 print " OPENSSL_NO_$ALGO";
757 if (/^err$/) { push @user_defines, "OPENSSL_NO_ERR"; }
758 elsif (/^asm$/) { $no_asm = 1; }
762 ($ALGO,$algo) = ("RMD160","rmd160") if ($algo eq "ripemd");
764 push @{$config{openssl_algorithm_defines}}, "OPENSSL_NO_$ALGO";
765 push @{$config{depdefines}}, "OPENSSL_NO_$ALGO";
766 print " OPENSSL_NO_$ALGO";
768 # fix-up crypto/directory name(s)
769 $algo="whrlpool" if $algo eq "whirlpool";
770 $algo="ripemd" if $algo eq "rmd160";
771 @{$config{sdirs}} = grep { $_ ne $algo} @{$config{sdirs}};
780 foreach (sort @experimental)
783 ($ALGO = $_) =~ tr/[a-z]/[A-Z]/;
785 # opensslconf.h will set OPENSSL_NO_... unless OPENSSL_EXPERIMENTAL_... is defined
786 push @{$config{openssl_experimental_defines}}, "OPENSSL_NO_$ALGO";
789 print "Configuring for $target\n";
791 # Support for legacy targets having a name starting with 'debug-'
792 my ($d, $t) = $target =~ m/^(debug-)?(.*)$/;
794 $build_prefix = "debug_";
796 # If we do not find debug-foo in the table, the target is set to foo.
797 if (!$table{$target}) {
801 $config{target} = $target;
802 delete $table{$base_target}->{template}; # or the next test will fail.
803 my %target = ( %{$table{$base_target}}, resolve_config($target) );
805 &usage if (!%target || $target{template});
807 $target{exe_extension}="";
808 $target{exe_extension}=".exe" if ($config{target} eq "Cygwin" || $config{target} eq "DJGPP" || $config{target} =~ /^mingw/);
809 $target{exe_extension}=".nlm" if ($config{target} =~ /netware/);
810 $target{exe_extension}=".pm" if ($config{target} =~ /vos/);
812 $default_ranlib = which("ranlib") || "true";
813 $config{perl} = $ENV{'PERL'} || which("perl5") || which("perl") || "perl";
814 my $make = $ENV{'MAKE'} || "make";
816 $config{cross_compile_prefix} = $ENV{'CROSS_COMPILE'}
817 if $config{cross_compile_prefix} eq "";
819 # Allow environment CC to override compiler...
820 $target{cc} = $ENV{CC} || $target{cc};
822 # For cflags, lflags, plib_lflags, ex_libs and defines, add the debug_
823 # or release_ attributes.
824 # Do it in such a way that no spurious space is appended (hence the grep).
825 $config{defines} = [ @{$target{defines}},
826 @{$target{$build_prefix."defines"}} ];
827 $config{cflags} = join(" ",
828 grep { $_ ne "" } ($target{cflags},
829 $target{$build_prefix."cflags"}));
830 $config{lflags} = join(" ",
831 grep { $_ ne "" } ($target{lflags},
832 $target{$build_prefix."lflags"}));
833 $config{plib_lflags} = join(" ",
834 grep { $_ ne "" } ($target{plib_lflags},
835 $target{$build_prefix."plib_lflags"}));
836 $config{ex_libs} = join(" ",
837 grep { $_ ne "" } ($target{ex_libs},
838 $target{$build_prefix."ex_libs"}));
840 $target{ranlib} = $ENV{'RANLIB'} || $target{ranlib} || $default_ranlib;
841 $target{ar} = $ENV{'AR'} || "ar";
842 $target{arflags} = "" if !defined($target{arflags});
844 # Make sure build_scheme is consistent.
845 $target{build_scheme} = [ $target{build_scheme} ]
846 if ref($target{build_scheme}) ne "ARRAY";
848 ###### TO BE REMOVED BEFORE FINAL RELEASE
850 ###### If the user has chosen --unified, we give it to them.
851 if ($target{build_file} eq "Makefile"
852 && $target{build_scheme}->[0] eq "unixmake"
854 $target{build_scheme} = [ "unified", "unix" ];
857 my ($builder, $builder_platform, @builder_opts) =
858 @{$target{build_scheme}};
860 push @{$config{defines}},
861 map { (my $x = $_) =~ s/^OPENSSL_NO_/OPENSSL_EXPERIMENTAL_/; $x }
862 @{$config{openssl_experimental_defines}};
864 if ($target =~ /^mingw/ && `$target{cc} --target-help 2>&1` !~ m/-mno-cygwin/m)
866 $config{cflags} =~ s/-mno-cygwin\s*//;
867 $target{shared_ldflag} =~ s/-mno-cygwin\s*//;
870 if ($target =~ /linux.*-mips/ && !$no_asm && $user_cflags !~ /-m(ips|arch=)/) {
871 # minimally required architecture flags for assembly modules
872 $config{cflags}="-mips2 $config{cflags}" if ($target =~ /mips32/);
873 $config{cflags}="-mips3 $config{cflags}" if ($target =~ /mips64/);
876 my $no_shared_warn=0;
877 my $no_user_cflags=0;
878 my $no_user_defines=0;
880 if ($user_cflags ne "") { $config{cflags}="$user_cflags$config{cflags}"; }
881 else { $no_user_cflags=1; }
882 if (@user_defines) { $config{defines}=[ @user_defines, @{$config{defines}} ]; }
883 else { $no_user_defines=1; }
885 # The DSO code currently always implements all functions so that no
886 # applications will have to worry about that from a compilation point
887 # of view. However, the "method"s may return zero unless that platform
888 # has support compiled in for them. Currently each method is enabled
889 # by a define "DSO_<name>" ... we translate the "dso_scheme" config
890 # string entry into using the following logic;
891 if (!$no_dso && $target{dso_scheme} ne "")
893 $target{dso_scheme} =~ tr/[a-z]/[A-Z]/;
894 if ($target{dso_scheme} eq "DLFCN")
896 $config{defines} = [ "DSO_DLFCN", "HAVE_DLFCN_H",
897 @{$config{defines}} ]
899 elsif ($target{dso_scheme} eq "DLFCN_NO_H")
901 $config{defines} = [ "DSO_DLFCN", @{$config{defines}} ]
905 $config{defines} = [ "DSO_$target{dso_scheme}",
906 @{$config{defines}} ]
910 my $thread_cflags = "";
912 if ($target{thread_cflag} ne "(unknown)" && !$no_threads)
914 # If we know how to do it, support threads by default.
917 if ($target{thread_cflag} eq "(unknown)" && $threads)
919 # If the user asked for "threads", [s]he is also expected to
920 # provide any system-dependent compiler options that are
922 if ($no_user_cflags && $no_user_defines)
924 print "You asked for multi-threading support, but didn't\n";
925 print "provide any system-specific compiler options\n";
928 push @thread_defines, "OPENSSL_THREADS";
932 $thread_cflags=" $target{thread_cflag}";
933 push @thread_defines, @{$target{thread_defines}}, "OPENSSL_THREADS";
936 $config{ex_libs}="$libs$config{ex_libs}" if ($libs ne "");
940 @{$config{defines}} = grep !/^[BL]_ENDIAN$/, @{$config{defines}}
946 $config{cflags} = "$thread_cflags $config{cflags}" if $thread_cflags;
947 push @{$config{defines}}, @thread_defines;
948 push @{$config{openssl_thread_defines}}, @thread_defines;
953 push @{$config{defines}}, "ZLIB";
954 if (defined($disabled{"zlib-dynamic"}))
956 if (defined($withargs{zlib_lib}))
958 $config{ex_libs} .= " -L" . $withargs{zlib_lib} . " -lz";
962 $config{ex_libs} .= " -lz";
967 push @{$config{defines}}, "ZLIB_SHARED";
971 # With "deprecated" disable all deprecated features.
972 if (defined($disabled{"deprecated"})) {
973 $config{api} = $maxapi;
976 if ($target{shared_target} eq "")
978 $no_shared_warn = 1 if !$config{no_shared} && !$config{fips};
979 $config{no_shared} = 1;
981 if (!$config{no_shared})
983 if ($target{shared_cflag} ne "")
985 push @{$config{defines}}, "OPENSSL_PIC";
986 $config{cflags} = "$target{shared_cflag} $config{cflags}";
990 if ($builder ne "mk1mf")
992 # add {no-}static-engine to options to allow mkdef.pl to work without extra arguments
993 if ($config{no_shared})
995 push @{$config{openssl_other_defines}}, "OPENSSL_NO_DYNAMIC_ENGINE";
996 $config{options}.=" static-engine";
1000 push @{$config{openssl_other_defines}}, "OPENSSL_NO_STATIC_ENGINE";
1001 $config{options}.=" no-static-engine";
1008 if ($target{sys_id} ne "")
1010 push @{$config{openssl_sys_defines}}, "OPENSSL_SYS_$target{sys_id}";
1013 if ($target{ranlib} eq "")
1015 $target{ranlib} = $default_ranlib;
1019 $target{cpuid_asm_src}=$table{BASE}->{cpuid_asm_src} if ($config{processor} eq "386");
1020 $target{cpuid_asm_src}.=" uplink.c uplink-x86.s" if (grep { $_ eq "OPENSSL_USE_APPLINK"} @{$config{defines}});
1022 $target{bn_asm_src} =~ s/\w+-gf2m.c// if (defined($disabled{ec2m}));
1024 # bn-586 is the only one implementing bn_*_part_words
1025 push @{$config{defines}}, "OPENSSL_BN_ASM_PART_WORDS" if ($target{bn_asm_src} =~ /bn-586/);
1026 push @{$config{defines}}, "OPENSSL_IA32_SSE2" if (!$no_sse2 && $target{bn_asm_src} =~ /86/);
1028 push @{$config{defines}}, "OPENSSL_BN_ASM_MONT" if ($target{bn_asm_src} =~ /-mont/);
1029 push @{$config{defines}}, "OPENSSL_BN_ASM_MONT5" if ($target{bn_asm_src} =~ /-mont5/);
1030 push @{$config{defines}}, "OPENSSL_BN_ASM_GF2m" if ($target{bn_asm_src} =~ /-gf2m/);
1032 if ($config{fips}) {
1033 push @{$config{openssl_other_defines}}, "OPENSSL_FIPS";
1036 if ($target{sha1_asm_src}) {
1037 push @{$config{defines}}, "SHA1_ASM" if ($target{sha1_asm_src} =~ /sx86/ || $target{sha1_asm_src} =~ /sha1/);
1038 push @{$config{defines}}, "SHA256_ASM" if ($target{sha1_asm_src} =~ /sha256/);
1039 push @{$config{defines}}, "SHA512_ASM" if ($target{sha1_asm_src} =~ /sha512/);
1041 if ($target{md5_asm_src}) {
1042 push @{$config{defines}}, "MD5_ASM";
1044 $target{cast_asm_src}=$table{BASE}->{cast_asm_src} if (!$config{no_shared}); # CAST assembler is not PIC
1045 if ($target{rmd160_asm_src}) {
1046 push @{$config{defines}}, "RMD160_ASM";
1048 if ($target{aes_asm_src}) {
1049 push @{$config{defines}}, "AES_ASM" if ($target{aes_asm_src} =~ m/\baes-/);;
1050 # aes-ctr.fake is not a real file, only indication that assembler
1051 # module implements AES_ctr32_encrypt...
1052 push @{$config{defines}}, "AES_CTR_ASM" if ($target{aes_asm_src} =~ s/\s*aes-ctr\.fake//);
1053 # aes-xts.fake indicates presence of AES_xts_[en|de]crypt...
1054 push @{$config{defines}}, "AES_XTS_ASM" if ($target{aes_asm_src} =~ s/\s*aes-xts\.fake//);
1055 $target{aes_asm_src} =~ s/\s*(vpaes|aesni)-x86\.s//g if ($no_sse2);
1056 push @{$config{defines}}, "VPAES_ASM" if ($target{aes_asm_src} =~ m/vpaes/);
1057 push @{$config{defines}}, "BSAES_ASM" if ($target{aes_asm_src} =~ m/bsaes/);
1059 if ($target{wp_asm_src} =~ /mmx/) {
1060 if ($config{processor} eq "386") {
1061 $target{wp_asm_src}=$table{BASE}->{wp_asm_src};
1062 } elsif (!$disabled{"whirlpool"}) {
1063 $config{cflags}.=" -DWHIRLPOOL_ASM";
1066 if ($target{modes_asm_src} =~ /ghash-/) {
1067 push @{$config{defines}}, "GHASH_ASM";
1069 if ($target{ec_asm_src} =~ /ecp_nistz256/) {
1070 push @{$config{defines}}, "ECP_NISTZ256_ASM";
1072 if ($target{poly1305_asm_src} ne "") {
1073 push @{$config{defines}}, "POLY1305_ASM";
1077 # Is the compiler gcc or clang? $ecc is used below to see if error-checking
1079 my $ecc = $target{cc};
1080 my $ccpcc = "$config{cross_compile_prefix}$target{cc}";
1081 $config{makedepprog} = 'makedepend';
1082 open(PIPE, "$ccpcc --version 2>&1 | head -2 |");
1084 $config{makedepprog} = $ccpcc if /clang|gcc/;
1085 $ecc = "clang" if /clang/;
1086 $ecc = "gcc" if /gcc/;
1090 $config{depflags} =~ s/^\s*//;
1093 # Deal with bn_ops ###################################################
1096 $config{export_var_as_fn} =0;
1097 my $def_int="unsigned int";
1098 $config{rc4_int} =$def_int;
1099 ($config{b64l},$config{b64},$config{b32})=(0,0,1);
1102 foreach (sort split(/\s+/,$target{bn_ops})) {
1103 $count++ if /SIXTY_FOUR_BIT|SIXTY_FOUR_BIT_LONG|THIRTY_TWO_BIT/;
1104 $config{export_var_as_fn}=1 if $_ eq 'EXPORT_VAR_AS_FN';
1105 $config{bn_ll}=1 if $_ eq 'BN_LLONG';
1106 $config{rc4_int}="unsigned char" if $_ eq 'RC4_CHAR';
1107 ($config{b64l},$config{b64},$config{b32})
1108 =(0,1,0) if $_ eq 'SIXTY_FOUR_BIT';
1109 ($config{b64l},$config{b64},$config{b32})
1110 =(1,0,0) if $_ eq 'SIXTY_FOUR_BIT_LONG';
1111 ($config{b64l},$config{b64},$config{b32})
1112 =(0,0,1) if $_ eq 'THIRTY_TWO_BIT';
1114 die "Exactly one of SIXTY_FOUR_BIT|SIXTY_FOUR_BIT_LONG|THIRTY_TWO_BIT can be set in bn_ops\n"
1118 # Hack cflags for better warnings (dev option) #######################
1120 # "Stringify" the C flags string. This permits it to be made part of a string
1121 # and works as well on command lines.
1122 $config{cflags} =~ s/([\\\"])/\\\1/g;
1124 if (defined($config{api})) {
1125 $config{openssl_api_defines} = [ "OPENSSL_MIN_API=".$apitable->{$config{api}} ];
1126 my $apiflag = sprintf("OPENSSL_API_COMPAT=%s", $apitable->{$config{api}});
1127 push @default_depdefines, $apiflag;
1128 push @{$config{defines}}, $apiflag;
1131 if ($strict_warnings)
1134 die "ERROR --strict-warnings requires gcc or clang"
1135 unless $ecc eq 'gcc' || $ecc eq 'clang';
1136 foreach $wopt (split /\s+/, $gcc_devteam_warn)
1138 $config{cflags} .= " $wopt" unless ($config{cflags} =~ /(^|\s)$wopt(\s|$)/)
1140 if ($ecc eq "clang")
1142 foreach $wopt (split /\s+/, $clang_devteam_warn)
1144 $config{cflags} .= " $wopt" unless ($config{cflags} =~ /(^|\s)$wopt(\s|$)/)
1147 if ($target !~ /^mingw/)
1149 foreach $wopt (split /\s+/, $memleak_devteam_backtrace)
1151 $config{cflags} .= " $wopt" unless ($config{cflags} =~ /(^|\s)$wopt(\s|$)/)
1153 if ($target =~ /^BSD-/)
1155 $config{ex_libs} .= " -lexecinfo";
1160 # If we use the unified build, collect information from build.info files
1161 my %unified_info = ();
1163 if ($builder eq "unified") {
1164 # Store the name of the template file we will build the build file from
1165 # in %config. This may be useful for the build file itself.
1166 my $build_file_template =
1167 catfile($srcdir, "Configurations",
1168 $builder_platform."-".$target{build_file}.".tmpl");
1169 $build_file_template =
1170 catfile($srcdir, "Configurations", $target{build_file}.".tmpl")
1171 if (! -f $build_file_template);
1172 $config{build_file_template} = $build_file_template;
1174 use lib catdir(dirname(__FILE__),"util");
1175 use with_fallback qw(Text::Template);
1180 my $relativeto = shift || ".";
1182 $dir = catdir($base,$dir) unless isabsolute($dir);
1184 # Make sure the directories we're building in exists
1187 my $res = abs2rel(absolutedir($dir), rel2abs($relativeto));
1188 #print STDERR "DEBUG[cleandir]: $dir , $base => $res\n";
1195 my $relativeto = shift || ".";
1197 $file = catfile($base,$file) unless isabsolute($file);
1199 my $d = dirname($file);
1200 my $f = basename($file);
1202 # Make sure the directories we're building in exists
1205 my $res = abs2rel(catfile(absolutedir($d), $f), rel2abs($relativeto));
1206 #print STDERR "DEBUG[cleanfile]: $d , $f => $res\n";
1210 my @build_infos = ( [ ".", "build.info" ] );
1211 foreach (@{$config{dirs}}) {
1212 push @build_infos, [ $_, "build.info" ]
1213 if (-f catfile($srcdir, $_, "build.info"));
1215 foreach (@{$config{sdirs}}) {
1216 push @build_infos, [ catdir("crypto", $_), "build.info" ]
1217 if (-f catfile($srcdir, "crypto", $_, "build.info"));
1219 foreach (@{$config{engdirs}}) {
1220 push @build_infos, [ catdir("engines", $_), "build.info" ]
1221 if (-f catfile($srcdir, "engines", $_, "build.info"));
1224 foreach (@build_infos) {
1225 my $sourced = catdir($srcdir, $_->[0]);
1226 my $buildd = catdir($blddir, $_->[0]);
1231 # The basic things we're trying to build
1237 my @intermediates = ();
1245 my %sharednames = ();
1247 my $template = Text::Template->new(TYPE => 'FILE',
1248 SOURCE => catfile($sourced, $f));
1249 die "Something went wrong with $sourced/$f: $!\n" unless $template;
1252 $template->fill_in(HASH => { config => \%config,
1254 builddir => abs2rel($buildd, $blddir),
1255 sourcedir => abs2rel($sourced, $blddir),
1256 buildtop => abs2rel($blddir, $blddir),
1257 sourcetop => abs2rel($srcdir, $blddir) },
1258 DELIMITERS => [ "{-", "-}" ]);
1260 # The top item of this stack has the following values
1261 # -2 positive already run and we found ELSE (following ELSIF should fail)
1262 # -1 positive already run (skip until ENDIF)
1263 # 0 negatives so far (if we're at a condition, check it)
1264 # 1 last was positive (don't skip lines until next ELSE, ELSIF or ENDIF)
1265 # 2 positive ELSE (following ELSIF should fail)
1267 collect_information(
1268 collect_from_array([ @text ],
1269 qr/\\$/ => sub { my $l1 = shift; my $l2 = shift;
1270 $l1 =~ s/\\$//; $l1.$l2 }),
1271 # Info we're looking for
1272 qr/^\s*IF\[((?:\\.|[^\\\]])*)\]\s*$/
1273 => sub { push @skip, !! $1; },
1274 qr/^\s*ELSIF\[((?:\\.|[^\\\]])*)\]\s*$/
1275 => sub { die "ELSIF out of scope" if ! @skip;
1276 die "ELSIF following ELSE" if abs($skip[$#skip]) == 2;
1277 $skip[$#skip] = -1 if $skip[$#skip] != 0;
1278 $skip[$#skip] = !! $1
1279 if $skip[$#skip] == 0; },
1281 => sub { die "ELSE out of scope" if ! @skip;
1282 $skip[$#skip] = -2 if $skip[$#skip] != 0;
1283 $skip[$#skip] = 2 if $skip[$#skip] == 0; },
1285 => sub { die "ENDIF out of scope" if ! @skip;
1287 qr/^\s*PROGRAMS\s*=\s*(.*)\s*$/
1288 => sub { push @programs, split(/\s+/, $1)
1289 if !@skip || $skip[$#skip] > 0 },
1290 qr/^\s*LIBS\s*=\s*(.*)\s*$/
1291 => sub { push @libraries, split(/\s+/, $1)
1292 if !@skip || $skip[$#skip] > 0 },
1293 qr/^\s*ENGINES\s*=\s*(.*)\s*$/
1294 => sub { push @engines, split(/\s+/, $1)
1295 if !@skip || $skip[$#skip] > 0 },
1296 qr/^\s*SCRIPTS\s*=\s*(.*)\s*$/
1297 => sub { push @scripts, split(/\s+/, $1)
1298 if !@skip || $skip[$#skip] > 0 },
1299 qr/^\s*EXTRA\s*=\s*(.*)\s*$/
1300 => sub { push @extra, split(/\s+/, $1)
1301 if !@skip || $skip[$#skip] > 0 },
1303 qr/^\s*ORDINALS\[((?:\\.|[^\\\]])+)\]\s*=\s*(.*)\s*$/,
1304 => sub { push @{$ordinals{$1}}, split(/\s+/, $2)
1305 if !@skip || $skip[$#skip] > 0 },
1306 qr/^\s*SOURCE\[((?:\\.|[^\\\]])+)\]\s*=\s*(.*)\s*$/
1307 => sub { push @{$sources{$1}}, split(/\s+/, $2)
1308 if !@skip || $skip[$#skip] > 0 },
1309 qr/^\s*INCLUDE\[((?:\\.|[^\\\]])+)\]\s*=\s*(.*)\s*$/
1310 => sub { push @{$includes{$1}}, split(/\s+/, $2)
1311 if !@skip || $skip[$#skip] > 0 },
1312 qr/^\s*DEPEND\[((?:\\.|[^\\\]])+)\]\s*=\s*(.*)\s*$/
1313 => sub { push @{$depends{$1}}, split(/\s+/, $2)
1314 if !@skip || $skip[$#skip] > 0 },
1315 qr/^\s*RENAME\[((?:\\.|[^\\\]])+)\]\s*=\s*(.*)\s*$/
1316 => sub { push @{$renames{$1}}, split(/\s+/, $2)
1317 if !@skip || $skip[$#skip] > 0 },
1318 qr/^\s*SHARED_NAME\[((?:\\.|[^\\\]])+)\]\s*=\s*(.*)\s*$/
1319 => sub { push @{$sharednames{$1}}, split(/\s+/, $2)
1320 if !@skip || $skip[$#skip] > 0 },
1321 qr/^\s*BEGINRAW\[((?:\\.|[^\\\]])+)\]\s*$/
1323 my $lineiterator = shift;
1324 my $target_kind = $1;
1325 while (defined $lineiterator->()) {
1327 if (/^\s*ENDRAW\[((?:\\.|[^\\\]])+)\]\s*$/) {
1328 die "ENDRAW doesn't match BEGINRAW"
1329 if $1 ne $target_kind;
1332 next if @skip && $skip[$#skip] <= 0;
1334 if ($target_kind eq $target{build_file}
1335 || $target_kind eq $target{build_file}."(".$builder_platform.")");
1338 qr/^(?:#.*|\s*)$/ => sub { },
1339 "OTHERWISE" => sub { die "Something wrong with this line:\n$_\nat $sourced/$f" }
1341 die "runaway IF?" if (@skip);
1343 foreach (keys %renames) {
1344 die "$_ renamed to more than one thing: "
1345 ,join(" ", @{$renames{$_}}),"\n"
1346 if scalar @{$renames{$_}} > 1;
1347 my $dest = cleanfile($buildd, $_, $blddir);
1348 my $to = cleanfile($buildd, $renames{$_}->[0], $blddir);
1349 die "$dest renamed to more than one thing: "
1350 ,$unified_info{rename}->{$dest}, $to
1351 unless !defined($unified_info{rename}->{$dest})
1352 or $unified_info{rename}->{$dest} eq $to;
1353 $unified_info{rename}->{$dest} = $to;
1356 foreach (@programs) {
1357 my $program = cleanfile($buildd, $_, $blddir);
1358 if ($unified_info{rename}->{$program}) {
1359 $program = $unified_info{rename}->{$program};
1361 $unified_info{programs}->{$program} = 1;
1364 foreach (@libraries) {
1365 my $library = cleanfile($buildd, $_, $blddir);
1366 if ($unified_info{rename}->{$library}) {
1367 $library = $unified_info{rename}->{$library};
1369 $unified_info{libraries}->{$library} = 1;
1372 die <<"EOF" if $config{no_shared} && scalar @engines;
1373 ENGINES can only be used if configured with 'shared'.
1374 This is usually a fault in a build.info file.
1376 foreach (@engines) {
1377 my $library = cleanfile($buildd, $_, $blddir);
1378 if ($unified_info{rename}->{$library}) {
1379 $library = $unified_info{rename}->{$library};
1381 $unified_info{engines}->{$library} = 1;
1384 foreach (@scripts) {
1385 my $script = cleanfile($buildd, $_, $blddir);
1386 if ($unified_info{rename}->{$script}) {
1387 $script = $unified_info{rename}->{$script};
1389 $unified_info{scripts}->{$script} = 1;
1393 my $extra = cleanfile($buildd, $_, $blddir);
1394 $unified_info{extra}->{$extra} = 1;
1397 push @{$unified_info{rawlines}}, @rawlines;
1399 if (!$config{no_shared}) {
1400 # Check sharednames.
1401 foreach (keys %sharednames) {
1402 my $dest = cleanfile($buildd, $_, $blddir);
1403 if ($unified_info{rename}->{$dest}) {
1404 $dest = $unified_info{rename}->{$dest};
1406 die "shared_name for $dest with multiple values: "
1407 ,join(" ", @{$sharednames{$_}}),"\n"
1408 if scalar @{$sharednames{$_}} > 1;
1409 my $to = cleanfile($buildd, $sharednames{$_}->[0], $blddir);
1410 die "shared_name found for a library $dest that isn't defined\n"
1411 unless $unified_info{libraries}->{$dest};
1412 die "shared_name for $dest with multiple values: "
1413 ,$unified_info{sharednames}->{$dest}, ", ", $to
1414 unless !defined($unified_info{sharednames}->{$dest})
1415 or $unified_info{sharednames}->{$dest} eq $to;
1416 $unified_info{sharednames}->{$dest} = $to;
1419 # Additionally, we set up sharednames for libraries that don't
1420 # have any, as themselves.
1421 foreach (keys %{$unified_info{libraries}}) {
1422 if (!defined $unified_info{sharednames}->{$_}) {
1423 $unified_info{sharednames}->{$_} = $_
1428 foreach (keys %ordinals) {
1430 my $ddest = cleanfile($buildd, $_, $blddir);
1431 if ($unified_info{rename}->{$ddest}) {
1432 $ddest = $unified_info{rename}->{$ddest};
1434 foreach (@{$ordinals{$dest}}) {
1435 my %known_ordinals =
1438 cleanfile($sourced, catfile("util", "libeay.num"), $blddir),
1440 cleanfile($sourced, catfile("util", "ssleay.num"), $blddir)
1442 my $o = $known_ordinals{$_};
1443 die "Ordinals for $ddest defined more than once\n"
1444 if $unified_info{ordinals}->{$ddest};
1445 $unified_info{ordinals}->{$ddest} = [ $_, $o ];
1449 foreach (keys %sources) {
1451 my $ddest = cleanfile($buildd, $_, $blddir);
1452 if ($unified_info{rename}->{$ddest}) {
1453 $ddest = $unified_info{rename}->{$ddest};
1455 foreach (@{$sources{$dest}}) {
1456 my $s = cleanfile($sourced, $_, $blddir);
1458 # If it isn't in the source tree, we assume it's generated
1461 $s = cleanfile($buildd, $_, $blddir);
1463 # We recognise C and asm files
1464 if ($s =~ /\.[csS]\b$/) {
1465 (my $o = $_) =~ s/\.[csS]\b$/.o/;
1466 $o = cleanfile($buildd, $o, $blddir);
1467 $unified_info{sources}->{$ddest}->{$o} = 1;
1468 $unified_info{sources}->{$o}->{$s} = 1;
1470 $unified_info{sources}->{$ddest}->{$s} = 1;
1475 foreach (keys %depends) {
1477 my $ddest = cleanfile($buildd, $_, $blddir);
1478 if ($unified_info{rename}->{$ddest}) {
1479 $ddest = $unified_info{rename}->{$ddest};
1481 foreach (@{$depends{$dest}}) {
1482 my $d = cleanfile($sourced, $_, $blddir);
1484 # If it isn't found in the source, let's assume it's generated
1485 # and that the Makefile template has the lines
1487 $d = cleanfile($buildd, $_, $blddir);
1489 # Take note if the file to depend on is being renamed
1490 if ($unified_info{rename}->{$d}) {
1491 $d = $unified_info{rename}->{$d};
1493 $unified_info{depends}->{$ddest}->{$d} = 1;
1494 # If we depend on a header file, let's make sure it
1497 my $i = dirname($d);
1498 push @{$unified_info{includes}->{$ddest}}, $i
1499 unless grep { $_ eq $i } @{$unified_info{includes}->{$ddest}};
1504 foreach (keys %includes) {
1506 my $ddest = cleanfile($buildd, $_, $blddir);
1507 if ($unified_info{rename}->{$ddest}) {
1508 $ddest = $unified_info{rename}->{$ddest};
1510 foreach (@{$includes{$dest}}) {
1511 my $i = cleandir($sourced, $_, $blddir);
1512 push @{$unified_info{includes}->{$ddest}}, $i
1513 unless grep { $_ eq $i } @{$unified_info{includes}->{$ddest}};
1518 ### Make unified_info a bit more efficient
1519 # One level structures
1520 foreach (("programs", "libraries", "engines", "scripts", "extra")) {
1521 $unified_info{$_} = [ sort keys %{$unified_info{$_}} ];
1523 # Two level structures
1524 foreach my $l1 (("sources", "ldadd", "depends")) {
1525 foreach my $l2 (sort keys %{$unified_info{$l1}}) {
1526 $unified_info{$l1}->{$l2} =
1527 [ sort keys %{$unified_info{$l1}->{$l2}} ];
1532 # For the schemes that need it, we provide the old *_obj configs
1533 # from the *_asm_obj ones
1534 foreach (grep /_asm_src$/, keys %target) {
1536 (my $obj = $_) =~ s/_asm_src$/_obj/;
1537 ($target{$obj} = $target{$src}) =~ s/\.[csS]\b/.o/g;
1540 # Write down our configuration where it fits #########################
1542 open(OUT,">configdata.pm") || die "unable to create configdata.pm: $!\n";
1550 #use vars qw(\@ISA \@EXPORT);
1551 our \@ISA = qw(Exporter);
1552 our \@EXPORT = qw(\%config \%target %withargs %unified_info);
1555 print OUT "our %config = (\n";
1556 foreach (sort keys %config) {
1557 if (ref($config{$_}) eq "ARRAY") {
1558 print OUT " ", $_, " => [ ", join(", ",
1559 map { quotify("perl", $_) }
1560 @{$config{$_}}), " ],\n";
1562 print OUT " ", $_, " => ", quotify("perl", $config{$_}), ",\n"
1569 print OUT "our %target = (\n";
1570 foreach (sort keys %target) {
1571 if (ref($target{$_}) eq "ARRAY") {
1572 print OUT " ", $_, " => [ ", join(", ",
1573 map { quotify("perl", $_) }
1574 @{$target{$_}}), " ],\n";
1576 print OUT " ", $_, " => ", quotify("perl", $target{$_}), ",\n"
1583 print OUT "our \%available_protocols = (\n";
1584 print OUT " tls => [ ", join(", ", map { quotify("perl", $_) } @tls), " ],\n";
1585 print OUT " dtls => [ ", join(", ", map { quotify("perl", $_) } @dtls), " ],\n";
1590 print OUT "our \%disabled = (\n";
1591 foreach (sort keys %disabled) {
1592 print OUT " ", quotify("perl", $_), " => ", quotify("perl", $disabled{$_}), ",\n";
1598 print OUT "our %withargs = (\n";
1599 foreach (sort keys %withargs) {
1600 if (ref($withargs{$_}) eq "ARRAY") {
1601 print OUT " ", $_, " => [ ", join(", ",
1602 map { quotify("perl", $_) }
1603 @{$withargs{$_}}), " ],\n";
1605 print OUT " ", $_, " => ", quotify("perl", $withargs{$_}), ",\n"
1612 if ($builder eq "unified") {
1617 if (ref $_ eq "ARRAY") {
1618 print OUT " "x$indent, "[\n";
1620 $recurse->($indent + 4, $_);
1622 print OUT " "x$indent, "],\n";
1623 } elsif (ref $_ eq "HASH") {
1625 print OUT " "x$indent, "{\n";
1626 foreach (sort keys %h) {
1627 if (ref $h{$_} eq "") {
1628 print OUT " "x($indent + 4), quotify("perl", $_), " => ", quotify("perl", $h{$_}), ",\n";
1630 print OUT " "x($indent + 4), quotify("perl", $_), " =>\n";
1631 $recurse->($indent + 8, $h{$_});
1634 print OUT " "x$indent, "},\n";
1636 print OUT " "x$indent, quotify("perl", $_), ",\n";
1640 print OUT "our %unified_info = (\n";
1641 foreach (sort keys %unified_info) {
1642 if (ref $unified_info{$_} eq "") {
1643 print OUT " "x4, quotify("perl", $_), " => ", quotify("perl", $unified_info{$_}), ",\n";
1645 print OUT " "x4, quotify("perl", $_), " =>\n";
1646 $recurse->(8, $unified_info{$_});
1657 die <<"EOF" if $builder ne "unified" && $srcdir ne $blddir;
1659 ***** Trying building anywhere else than in the source tree will not
1660 ***** work for target $config{target}. To make it possible, it needs
1661 ***** to use the "unified" build scheme.
1665 print "IsMK1MF =", ($builder eq "mk1mf" ? "yes" : "no"), "\n";
1666 print "CC =$target{cc}\n";
1667 print "CFLAG =$config{cflags}\n";
1668 print "DEFINES =",join(" ", @{$config{defines}}),"\n";
1669 print "LFLAG =$config{lflags}\n";
1670 print "PLIB_LFLAG =$config{plib_lflags}\n";
1671 print "EX_LIBS =$config{ex_libs}\n";
1672 print "CPUID_OBJ =$target{cpuid_obj}\n";
1673 print "BN_ASM =$target{bn_obj}\n";
1674 print "EC_ASM =$target{ec_obj}\n";
1675 print "DES_ENC =$target{des_obj}\n";
1676 print "AES_ENC =$target{aes_obj}\n";
1677 print "BF_ENC =$target{bf_obj}\n";
1678 print "CAST_ENC =$target{cast_obj}\n";
1679 print "RC4_ENC =$target{rc4_obj}\n";
1680 print "RC5_ENC =$target{rc5_obj}\n";
1681 print "MD5_OBJ_ASM =$target{md5_obj}\n";
1682 print "SHA1_OBJ_ASM =$target{sha1_obj}\n";
1683 print "RMD160_OBJ_ASM=$target{rmd160_obj}\n";
1684 print "CMLL_ENC =$target{cmll_obj}\n";
1685 print "MODES_OBJ =$target{modes_obj}\n";
1686 print "PADLOCK_OBJ =$target{padlock_obj}\n";
1687 print "CHACHA_ENC =$target{chacha_obj}\n";
1688 print "POLY1305_OBJ =$target{poly1305_obj}\n";
1689 print "PROCESSOR =$config{processor}\n";
1690 print "RANLIB =$target{ranlib}\n";
1691 print "ARFLAGS =$target{arflags}\n";
1692 print "PERL =$config{perl}\n";
1694 print "SIXTY_FOUR_BIT_LONG mode\n" if $config{b64l};
1695 print "SIXTY_FOUR_BIT mode\n" if $config{b64};
1696 print "THIRTY_TWO_BIT mode\n" if $config{b32};
1697 print "BN_LLONG mode\n" if $config{bn_ll};
1698 print "RC4 uses $config{rc4_int}\n" if $config{rc4_int} != $def_int;
1700 mkpath(catdir($blddir, "include/openssl"));
1701 run_dofile(catfile($blddir, "include/openssl/opensslconf.h"),
1702 catfile($srcdir, "include/openssl/opensslconf.h.in"));
1704 mkpath(catdir($blddir, "crypto/include/internal"));
1705 foreach my $alg ( 'bn' ) {
1706 run_dofile(catfile($blddir, "crypto/include/internal/${alg}_conf.h"),
1707 catfile($srcdir, "crypto/include/internal/${alg}_conf.h.in"));
1711 ### When the old "unixmake" scheme goes away, so does this function
1713 sub build_Makefile {
1714 run_dofile("Makefile","Makefile.in");
1716 # Copy all Makefile.in to Makefile (except top-level)
1725 return if ($_ ne "Makefile.in" || $File::Find::dir eq ".");
1726 my $in = IO::File->new($_, "r") or
1727 die sprintf "Error reading Makefile.in in %s: !$\n",
1729 my $out = IO::File->new("Makefile", "w") or
1730 die sprintf "Error writing Makefile in %s: !$\n",
1732 print $out "# Generated from $_, do not edit\n";
1733 while (my $line = <$in>) { print $out $line }
1735 die sprintf "Error reading Makefile.in in %s: !$\n",
1738 die sprintf "Error writing Makefile in %s: !$\n",
1747 run_dofile(catfile($blddir, $target{build_file}),
1748 $config{build_file_template},
1749 catfile($srcdir, "Configurations", "common.tmpl"));
1754 run_dofile("util/domd", "util/domd.in");
1755 chmod 0755, "util/domd";
1758 my $platform = shift;
1759 # The only reason we do this is to have something to build MINFO from
1762 # create the ms/version32.rc file if needed
1763 if ($platform ne "netware") {
1764 my ($v1, $v2, $v3, $v4);
1765 if ($config{version_num} =~ /^0x([0-9a-f]{1})([0-9a-f]{2})([0-9a-f]{2})([0-9a-f]{2})([0-9a-f]{1})L$/i) {
1771 open (OUT,">ms/version32.rc") || die "Can't open ms/version32.rc";
1778 FILEVERSION $v1,$v2,$v3,$v4
1779 PRODUCTVERSION $v1,$v2,$v3,$v4
1786 FILEOS VOS__WINDOWS32
1790 BLOCK "StringFileInfo"
1795 VALUE "CompanyName", "The OpenSSL Project, http://www.openssl.org/\\0"
1796 VALUE "FileDescription", "OpenSSL Shared Library\\0"
1797 VALUE "FileVersion", "$config{version}\\0"
1799 VALUE "InternalName", "libeay32\\0"
1800 VALUE "OriginalFilename", "libeay32.dll\\0"
1802 VALUE "InternalName", "ssleay32\\0"
1803 VALUE "OriginalFilename", "ssleay32.dll\\0"
1805 VALUE "ProductName", "The OpenSSL Toolkit\\0"
1806 VALUE "ProductVersion", "$config{version}\\0"
1808 //VALUE "Comments", "\\0"
1809 VALUE "LegalCopyright", "Copyright © 1998-2015 The OpenSSL Project. Copyright © 1995-1998 Eric A. Young, Tim J. Hudson. All rights reserved.\\0"
1810 //VALUE "LegalTrademarks", "\\0"
1811 //VALUE "PrivateBuild", "\\0"
1812 //VALUE "SpecialBuild", "\\0"
1817 VALUE "Translation", 0x409, 0x4b0
1826 $builders{$builder}->($builder_platform, @builder_opts);
1830 Configured for $target.
1833 print <<"EOF" if (!$no_threads && !$threads);
1835 The library could not be configured for supporting multi-threaded
1836 applications as the compiler options required on this system are not known.
1837 See file INSTALL for details if you need multi-threading.
1840 print <<"EOF" if ($no_shared_warn);
1842 You gave the option 'shared', which is not supported on this platform, so
1843 we will pretend you gave the option 'no-shared'. If you know how to implement
1844 shared libraries, please let us know (but please first make sure you have
1845 tried with a current version of OpenSSL).
1848 ###### TO BE REMOVED BEFORE FINAL RELEASE
1850 ###### If the user hasn't chosen --unified, try to nudge them.
1851 if ($target{build_file} eq "Makefile"
1852 && $target{build_scheme}->[0] eq "unixmake"
1855 my $plausible_builddir =
1856 abs2rel(rel2abs("../_openssl-build_$target"),rel2abs("."));
1857 my $plausible_to_sourcedir =
1858 abs2rel(rel2abs("."),rel2abs("../_openssl-build_$target"));
1861 ----------------------------------------------------------------------
1862 Please consider configuring with the flag --unified .
1863 It's to test out a new "unified" building system.
1865 One cool feature is that you can have your build directory elsewhere,
1868 make clean # Clean the current configuration away
1869 mkdir $plausible_builddir
1870 cd $plausible_builddir
1871 $plausible_to_sourcedir/config --unified
1875 Please report any problem you have.
1876 ----------------------------------------------------------------------
1883 ######################################################################
1885 # Helpers and utility functions
1888 # Configuration file reading #########################################
1890 # Helper function to implement conditional inheritance depending on the
1891 # value of $no_asm. Used in inherit_from values as follows:
1893 # inherit_from => [ "template", asm("asm_tmpl") ]
1902 # Helper function to implement adding values to already existing configuration
1903 # values. It handles elements that are ARRAYs, CODEs and scalars
1905 my $separator = shift;
1907 # If there's any ARRAY in the collection of values OR the separator
1908 # is undef, we will return an ARRAY of combined values, otherwise a
1909 # string of joined values with $separator as the separator.
1910 my $found_array = !defined($separator);
1914 if (ref($_) eq "ARRAY") {
1925 join($separator, @values);
1929 my $separator = shift;
1931 sub { _add($separator, @x, @_) };
1934 my $separator = shift;
1936 sub { _add($separator, @_, @x) };
1939 # configuration reader, evaluates the input file as a perl script and expects
1940 # it to fill %targets with target configurations. Those are then added to
1944 open(CONFFILE, "< $fname")
1945 or die "Can't open configuration file '$fname'!\n";
1948 my $content = <CONFFILE>;
1953 local %table = %::table; # Protect %table from tampering
1959 # For each target, check that it's configured with a hash table.
1960 foreach (keys %targets) {
1961 if (ref($targets{$_}) ne "HASH") {
1962 if (ref($targets{$_}) eq "") {
1963 warn "Deprecated target configuration for $_, ignoring...\n";
1965 warn "Misconfigured target configuration for $_ (should be a hash table), ignoring...\n";
1967 delete $targets{$_};
1971 %table = (%table, %targets);
1975 # configuration resolver. Will only resolve all the lazy evalutation
1976 # codeblocks for the chozen target and all those it inherits from,
1978 sub resolve_config {
1980 my @breadcrumbs = @_;
1982 if (grep { $_ eq $target } @breadcrumbs) {
1983 die "inherit_from loop! target backtrace:\n "
1984 ,$target,"\n ",join("\n ", @breadcrumbs),"\n";
1987 if (!defined($table{$target})) {
1988 warn "Warning! target $target doesn't exist!\n";
1991 # Recurse through all inheritances. They will be resolved on the
1992 # fly, so when this operation is done, they will all just be a
1993 # bunch of attributes with string values.
1994 # What we get here, though, are keys with references to lists of
1995 # the combined values of them all. We will deal with lists after
1996 # this stage is done.
1997 my %combined_inheritance = ();
1998 if ($table{$target}->{inherit_from}) {
2000 map { ref($_) eq "CODE" ? $_->() : $_ } @{$table{$target}->{inherit_from}};
2001 foreach (@inherit_from) {
2002 my %inherited_config = resolve_config($_, $target, @breadcrumbs);
2004 # 'template' is a marker that's considered private to
2005 # the config that had it.
2006 delete $inherited_config{template};
2009 if (!$combined_inheritance{$_}) {
2010 $combined_inheritance{$_} = [];
2012 push @{$combined_inheritance{$_}}, $inherited_config{$_};
2013 } keys %inherited_config;
2017 # We won't need inherit_from in this target any more, since we've
2018 # resolved all the inheritances that lead to this
2019 delete $table{$target}->{inherit_from};
2021 # Now is the time to deal with those lists. Here's the place to
2022 # decide what shall be done with those lists, all based on the
2023 # values of the target we're currently dealing with.
2024 # - If a value is a coderef, it will be executed with the list of
2025 # inherited values as arguments.
2026 # - If the corresponding key doesn't have a value at all or is the
2027 # emoty string, the inherited value list will be run through the
2028 # default combiner (below), and the result becomes this target's
2030 # - Otherwise, this target's value is assumed to be a string that
2031 # will simply override the inherited list of values.
2032 my $default_combiner = add(" ");
2035 map { $_ => 1 } (keys %combined_inheritance,
2036 keys %{$table{$target}});
2037 foreach (sort keys %all_keys) {
2039 # Current target doesn't have a value for the current key?
2040 # Assign it the default combiner, the rest of this loop body
2041 # will handle it just like any other coderef.
2042 if (!exists $table{$target}->{$_}) {
2043 $table{$target}->{$_} = $default_combiner;
2046 my $valuetype = ref($table{$target}->{$_});
2047 if ($valuetype eq "CODE") {
2048 # CODE reference, execute it with the inherited values as
2050 $table{$target}->{$_} =
2051 $table{$target}->{$_}->(@{$combined_inheritance{$_}});
2052 } elsif ($valuetype eq "ARRAY" || $valuetype eq "") {
2053 # ARRAY or Scalar, just leave it as is.
2055 # Some other type of reference that we don't handle.
2056 # Better to abort at this point.
2057 die "cannot handle reference type $valuetype,"
2058 ," found in target $target -> $_\n";
2062 # Finally done, return the result.
2063 return %{$table{$target}};
2068 print STDERR $usage;
2069 print STDERR "\npick os/compiler from:\n";
2073 foreach $i (sort keys %table)
2075 next if $table{$i}->{template};
2076 next if $i =~ /^debug/;
2077 $k += length($i) + 1;
2083 print STDERR $i . " ";
2085 foreach $i (sort keys %table)
2087 next if $table{$i}->{template};
2088 next if $i !~ /^debug/;
2089 $k += length($i) + 1;
2095 print STDERR $i . " ";
2097 print STDERR "\n\nNOTE: If in doubt, on Unix-ish systems use './config'.\n";
2106 unlink $out || warn "Can't remove $out, $!"
2108 foreach (@templates) {
2109 die "Can't open $_, $!" unless -f $_;
2111 my $cmd = "$config{perl} \"-I.\" \"-Mconfigdata\" $dofile -o\"Configure\" \"".join("\" \"",@templates)."\" > \"$out.new\"";
2112 #print STDERR "DEBUG[run_dofile]: \$cmd = $cmd\n";
2115 rename("$out.new", $out) || die "Can't rename $out.new, $!";
2118 # Configuration printer ##############################################
2120 sub print_table_entry
2123 my %target = resolve_config($target);
2126 # Don't print the templates
2127 return if $target{template};
2145 "debug_plib_lflags",
2148 "release_plib_lflags",
2182 if ($type eq "TABLE") {
2184 print "*** $target\n";
2185 printf "\$%-12s = %s\n", $_, $target{$_} foreach (@sequence);
2186 } elsif ($type eq "HASH") {
2188 length((sort { length($a) <=> length($b) } @sequence)[-1]);
2189 print " '$target' => {\n";
2190 foreach (@sequence) {
2192 print " '",$_,"'"," " x ($largest - length($_))," => '",$target{$_},"',\n";
2199 # Utility routines ###################################################
2201 # On VMS, if the given file is a logical name, File::Spec::Functions
2202 # will consider it an absolute path. There are cases when we want a
2203 # purely syntactic check without checking the environment.
2207 # On non-platforms, we just use file_name_is_absolute().
2208 return file_name_is_absolute($file) unless $^O eq "VMS";
2210 # If the file spec includes a device or a directpry spec,
2211 # file_name_is_absolute() is perfectly safe.
2212 return file_name_is_absolute($file) if $file =~ m|[:\[]|;
2214 # Here, we know the given file spec isn't absolute
2218 # Makes a directory absolute and cleans out /../ in paths like foo/../bar
2219 # On some platforms, this uses rel2abs(), while on others, realpath() is used.
2220 # realpath() requires that at least all path components except the last is an
2221 # existing directory. On VMS, the last component of the directory spec must
2226 # realpath() is quite buggy on VMS. It uses LIB$FID_TO_NAME, which
2227 # will return the volume name for the device, no matter what. Also,
2228 # it will return an incorrect directory spec if the argument is a
2229 # directory that doesn't exist.
2231 return rel2abs($dir);
2234 # We use realpath() on Unix, since no other will properly clean out
2236 use Cwd qw/realpath/;
2238 return realpath($dir);
2245 foreach $path (split /:/, $ENV{PATH})
2247 if (-f "$path/$name$target{exe_extension}" and -x _)
2249 return "$path/$name$target{exe_extension}" unless ($name eq "perl" and
2250 system("$path/$name$target{exe_extension} -e " . '\'exit($]<5.0);\''));
2257 perl => sub { my $x = shift;
2258 $x =~ s/([\\\$\@"])/\\$1/g;
2259 return '"'.$x.'"'; },
2263 defined($processors{$for}) ? $processors{$for} : sub { shift; };
2265 map { $processor->($_); } @_;
2268 # collect_from_file($filename, $line_concat_cond_re, $line_concat)
2269 # $filename is a file name to read from
2270 # $line_concat_cond_re is a regexp detecting a line continuation ending
2271 # $line_concat is a CODEref that takes care of concatenating two lines
2272 sub collect_from_file {
2273 my $filename = shift;
2274 my $line_concat_cond_re = shift;
2275 my $line_concat = shift;
2277 open my $fh, $filename || die "unable to read $filename: $!\n";
2279 my $saved_line = "";
2283 if (defined $line_concat) {
2284 $_ = $line_concat->($saved_line, $_);
2287 if (defined $line_concat_cond_re && /$line_concat_cond_re/) {
2293 die "$filename ending with continuation line\n" if $_;
2299 # collect_from_array($array, $line_concat_cond_re, $line_concat)
2300 # $array is an ARRAYref of lines
2301 # $line_concat_cond_re is a regexp detecting a line continuation ending
2302 # $line_concat is a CODEref that takes care of concatenating two lines
2303 sub collect_from_array {
2305 my $line_concat_cond_re = shift;
2306 my $line_concat = shift;
2307 my @array = (@$array);
2310 my $saved_line = "";
2312 while (defined($_ = shift @array)) {
2314 if (defined $line_concat) {
2315 $_ = $line_concat->($saved_line, $_);
2318 if (defined $line_concat_cond_re && /$line_concat_cond_re/) {
2324 die "input text ending with continuation line\n" if $_;
2329 # collect_information($lineiterator, $line_continue, $regexp => $CODEref, ...)
2330 # $lineiterator is a CODEref that delivers one line at a time.
2331 # All following arguments are regex/CODEref pairs, where the regexp detects a
2332 # line and the CODEref does something with the result of the regexp.
2333 sub collect_information {
2334 my $lineiterator = shift;
2335 my %collectors = @_;
2337 while(defined($_ = $lineiterator->())) {
2340 foreach my $re (keys %collectors) {
2341 if ($re ne "OTHERWISE" && /$re/) {
2342 $collectors{$re}->($lineiterator);
2346 if ($collectors{"OTHERWISE"}) {
2347 $collectors{"OTHERWISE"}->($lineiterator, $_)
2348 unless $found || !defined $collectors{"OTHERWISE"};