5 ## Configure -- OpenSSL source tree configuration script
6 ## If editing this file, run this command before committing
7 ## make -f Makefile.in TABLE
13 use File::Spec::Functions qw/:DEFAULT abs2rel rel2abs catpath splitpath/;
14 use File::Path qw/make_path/;
15 use Cwd qw/:DEFAULT realpath/;
17 # see INSTALL for instructions.
19 my $usage="Usage: Configure [no-<cipher> ...] [enable-<cipher> ...] [experimental-<cipher> ...] [-Dxxx] [-lxxx] [-Lxxx] [-fxxx] [-Kxxx] [no-hw-xxx|no-hw] [[no-]threads] [[no-]shared] [[no-]zlib|zlib-dynamic] [no-asm] [no-dso] [no-egd] [sctp] [386] [--prefix=DIR] [--openssldir=OPENSSLDIR] [--with-xxx[=vvv]] [--config=FILE] os/compiler[:flags]\n";
23 # --config add the given configuration file, which will be read after
24 # any "Configurations*" files that are found in the same
25 # directory as this script.
26 # --prefix prefix for the OpenSSL installation, which includes the
27 # directories bin, lib, include, share/man, share/doc/openssl
28 # This becomes the value of INSTALLTOP in Makefile
29 # (Default: /usr/local)
30 # --openssldir OpenSSL data area, such as openssl.cnf, certificates and keys.
31 # If it's a relative directory, it will be added on the directory
32 # given with --prefix.
33 # This becomes the value of OPENSSLDIR in Makefile and in C.
34 # (Default: PREFIX/ssl)
36 # --install_prefix Additional prefix for package builders (empty by
37 # default). This needn't be set in advance, you can
38 # just as well use "make INSTALL_PREFIX=/whatever install".
40 # --cross-compile-prefix Add specified prefix to binutils components.
42 # --api One of 0.9.8, 1.0.0 or 1.1.0. Do not compile support for
43 # interfaces deprecated as of the specified OpenSSL version.
45 # no-hw-xxx do not compile support for specific crypto hardware.
46 # Generic OpenSSL-style methods relating to this support
47 # are always compiled but return NULL if the hardware
48 # support isn't compiled.
49 # no-hw do not compile support for any crypto hardware.
50 # [no-]threads [don't] try to create a library that is suitable for
51 # multithreaded applications (default is "threads" if we
53 # [no-]shared [don't] try to create shared libraries when supported.
54 # no-asm do not use assembler
55 # no-dso do not compile in any native shared-library methods. This
56 # will ensure that all methods just return NULL.
57 # no-egd do not compile support for the entropy-gathering daemon APIs
58 # [no-]zlib [don't] compile support for zlib compression.
59 # zlib-dynamic Like "zlib", but the zlib library is expected to be a shared
60 # library and will be loaded in run-time by the OpenSSL library.
61 # sctp include SCTP support
62 # 386 generate 80386 code
63 # no-sse2 disables IA-32 SSE2 code, above option implies no-sse2
64 # no-<cipher> build without specified algorithm (rsa, idea, rc5, ...)
65 # -<xxx> +<xxx> compiler options are passed through
67 # DEBUG_SAFESTACK use type-safe stacks to enforce type-safety on stack items
68 # provided to stack calls. Generates unique stack functions for
69 # each possible stack type.
70 # BN_LLONG use the type 'long long' in crypto/bn/bn.h
71 # RC4_CHAR use 'char' instead of 'int' for RC4_INT in crypto/rc4/rc4.h
72 # Following are set automatically by this script
74 # MD5_ASM use some extra md5 assember,
75 # SHA1_ASM use some extra sha1 assember, must define L_ENDIAN for x86
76 # RMD160_ASM use some extra ripemd160 assember,
77 # SHA256_ASM sha256_block is implemented in assembler
78 # SHA512_ASM sha512_block is implemented in assembler
79 # AES_ASM ASE_[en|de]crypt is implemented in assembler
81 # Minimum warning options... any contributions to OpenSSL should at least get
84 my $gcc_devteam_warn = "-Wall -pedantic -DPEDANTIC -Wno-long-long -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Werror -DREF_CHECK -DDEBUG_UNUSED";
86 # These are used in addition to $gcc_devteam_warn when the compiler is clang.
87 # TODO(openssl-team): fix problems and investigate if (at least) the
88 # following warnings can also be enabled:
89 # -Wswitch-enum, -Wunused-macros, -Wmissing-field-initializers,
91 # -Wunreachable-code -Wunused-parameter -Wlanguage-extension-token
93 my $clang_devteam_warn = "-Wno-unused-parameter -Wno-missing-field-initializers -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Qunused-arguments -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations";
95 # Warn that "make depend" should be run?
96 my $warn_make_depend = 0;
98 # These are used in addition to $gcc_devteam_warn unless this is a mingw build.
99 # This adds backtrace information to the memory leak info.
100 my $memleak_devteam_backtrace = "-rdynamic -DCRYPTO_MDEBUG_BACKTRACE";
102 my $strict_warnings = 0;
104 # As for $BSDthreads. Idea is to maintain "collective" set of flags,
105 # which would cover all BSD flavors. -pthread applies to them all,
106 # but is treated differently. OpenBSD expands is as -D_POSIX_THREAD
107 # -lc_r, which is sufficient. FreeBSD 4.x expands it as -lc_r,
108 # which has to be accompanied by explicit -D_THREAD_SAFE and
109 # sometimes -D_REENTRANT. FreeBSD 5.x expands it as -lc_r, which
110 # seems to be sufficient?
111 my $BSDthreads="-pthread -D_THREAD_SAFE -D_REENTRANT";
114 # API compability name to version number mapping.
116 my $maxapi = "1.1.0"; # API for "no-deprecated" builds
118 "1.1.0" => "0x10100000L",
119 "1.0.0" => "0x10000000L",
120 "0.9.8" => "0x00908000L",
123 my $base_target = "BASE"; # The template that all other inherit from
127 # Forward declarations ###############################################
129 # read_config(filename)
131 # Reads a configuration file and populates %table with the contents
132 # (which the configuration file places in %targets).
135 # resolve_config(target)
137 # Resolves all the late evalutations, inheritances and so on for the
138 # chosen target and any target it inherits from.
142 # Information collection #############################################
144 # Unified build supports separate build dir
145 my $srcdir = catdir(realpath(dirname($0))); # catdir ensures local syntax
146 my $blddir = catdir(realpath(".")); # catdir ensures local syntax
147 my $dofile = abs2rel(catfile($srcdir, "util/dofile.pl"));
149 $config{sourcedir} = abs2rel($srcdir);
150 $config{builddir} = abs2rel($blddir);
152 # Collect version numbers
153 $config{version} = "unknown";
154 $config{version_num} = "unknown";
155 $config{shlib_version_number} = "unknown";
156 $config{shlib_version_history} = "unknown";
159 collect_from_file(catfile($srcdir,'include/openssl/opensslv.h')),
160 qr/OPENSSL.VERSION.TEXT.*OpenSSL (\S+) / => sub { $config{version} = $1; },
161 qr/OPENSSL.VERSION.NUMBER.*(0x\S+)/ => sub { $config{version_num}=$1 },
162 qr/SHLIB_VERSION_NUMBER *"([^"]+)"/ => sub { $config{shlib_version_number}=$1 },
163 qr/SHLIB_VERSION_HISTORY *"([^"]*)"/ => sub { $config{shlib_version_history}=$1 }
165 if ($config{shlib_version_history} ne "") { $config{shlib_version_history} .= ":"; }
167 ($config{major}, $config{minor})
168 = ($config{version} =~ /^([0-9]+)\.([0-9\.]+)/);
169 ($config{shlib_major}, $config{shlib_minor})
170 = ($config{shlib_version_number} =~ /^([0-9]+)\.([0-9\.]+)/);
171 die "erroneous version information in opensslv.h: ",
172 "$config{major}, $config{minor}, $config{shlib_major}, $config{shlib_minor}\n"
173 if ($config{major} eq "" || $config{minor} eq ""
174 || $config{shlib_major} eq "" || $config{shlib_minor} eq "");
176 # Collect target configurations
178 my ($vol, $dir, $dummy) = splitpath($0);
179 my $pattern = catpath($vol, catdir($dir, "Configurations"), "*.conf");
180 foreach (sort glob($pattern) ) {
185 print "Configuring OpenSSL version $config{version} (0x$config{version_num})\n";
189 $config{openssldir}="";
190 $config{processor}="";
192 $config{install_prefix}= "$ENV{'INSTALL_PREFIX'}";
193 $config{cross_compile_prefix}="";
194 $config{fipslibdir}="/usr/local/ssl/fips-2.0/lib/";
195 my $nofipscanistercheck=0;
196 $config{baseaddr}="0xFB00000";
199 $config{no_shared}=0; # but "no-shared" is default
200 my $zlib=1; # but "no-zlib" is default
207 # Top level directories to build
208 $config{dirs} = [ "crypto", "ssl", "engines", "apps", "test", "tools" ];
209 # crypto/ subdirectories to build
212 "md2", "md4", "md5", "sha", "mdc2", "hmac", "ripemd", "whrlpool", "poly1305",
213 "des", "aes", "rc2", "rc4", "rc5", "idea", "bf", "cast", "camellia", "seed", "chacha", "modes",
214 "bn", "ec", "rsa", "dsa", "dh", "dso", "engine",
215 "buffer", "bio", "stack", "lhash", "rand", "err",
216 "evp", "asn1", "pem", "x509", "x509v3", "conf", "txt_db", "pkcs7", "pkcs12", "comp", "ocsp", "ui",
217 "cms", "ts", "jpake", "srp", "store", "cmac", "ct", "async", "kdf"
220 # Known TLS and DTLS protocols
221 my @tls = qw(ssl3 tls1 tls1_1 tls1_2);
222 my @dtls = qw(dtls1 dtls1_2);
224 # Explicitelly known options that are possible to disable. They can
225 # be regexps, and will be used like this: /^no-${option}$/
226 # For developers: keep it sorted alphabetically
253 "ec_nistp_64_gcc_128",
261 "locking", # Really???
278 "rijndael", # Old AES name
303 foreach my $proto ((@tls, @dtls))
305 push(@disablables, $proto);
306 push(@disablables, "$proto-method");
309 # All of the following is disabled by default (RC5 was enabled before 0.9.8):
311 my %disabled = ( # "what" => "comment" [or special keyword "experimental"]
312 "ec_nistp_64_gcc_128" => "default",
314 "jpake" => "experimental",
318 "shared" => "default",
319 "ssl-trace" => "default",
320 "store" => "experimental",
321 "unit-test" => "default",
323 "zlib-dynamic" => "default",
324 "crypto-mdebug" => "default",
326 my @experimental = ();
328 # Note: => pair form used for aesthetics, not to truly make a hash table
329 my @disable_cascades = (
330 # "what" => [ "cascade", ... ]
331 sub { $config{processor} eq "386" }
334 "ssl3-method" => [ "ssl3" ],
335 "zlib" => [ "zlib-dynamic" ],
336 "rijndael" => [ "aes" ],
338 "ec" => [ "ecdsa", "ecdh" ],
339 "psk" => [ "jpake" ],
341 "dgram" => [ "dtls" ],
344 # SSL 3.0, (D)TLS 1.0 and TLS 1.1 require MD5 and SHA
345 "md5" => [ "ssl", "tls1", "tls1_1", "dtls1" ],
346 "sha" => [ "ssl", "tls1", "tls1_1", "dtls1" ],
348 # Additionally, SSL 3.0 requires either RSA or DSA+DH
350 && ($disabled{dsa} || $disabled{dh}); }
353 # (D)TLS 1.0 and TLS 1.1 also require either RSA or DSA+DH
354 # or ECDSA + ECDH. (D)TLS 1.2 has this requirement as well.
355 # (XXX: We don't support PSK-only builds).
357 && ($disabled{dsa} || $disabled{dh})
358 && ($disabled{ecdsa} || $disabled{ecdh}); }
359 => [ "tls1", "tls1_1", "tls1_2",
360 "dtls1", "dtls1_2" ],
364 # SRP and HEARTBEATS require TLSEXT
365 "tlsext" => [ "srp", "heartbeats" ],
368 # Avoid protocol support holes. Also disable all versions below N, if version
369 # N is disabled while N+1 is enabled.
371 my @list = (reverse @tls);
372 while ((my $first, my $second) = (shift @list, shift @list)) {
374 push @disable_cascades, ( sub { !$disabled{$first} && $disabled{$second} }
376 unshift @list, $second;
378 my @list = (reverse @dtls);
379 while ((my $first, my $second) = (shift @list, shift @list)) {
381 push @disable_cascades, ( sub { !$disabled{$first} && $disabled{$second} }
383 unshift @list, $second;
386 # Construct the string of what $config{depflags} should look like with the defaults
387 # from %disabled above. (we need this to see if we should advise the user
388 # to run "make depend"):
389 my $default_depflags = join(" ",
390 map { my $x = $_; $x =~ tr{[a-z]-}{[A-Z]_}; "-DOPENSSL_NO_$x"; }
391 grep { $disabled{$_} !~ /\(no-depflags\)$/ }
392 sort keys %disabled);
394 # Explicit "no-..." options will be collected in %disabled along with the defaults.
395 # To remove something from %disabled, use "enable-foo" (unless it's experimental).
396 # For symmetry, "disable-foo" is a synonym for "no-foo".
398 # For features called "experimental" here, a more explicit "experimental-foo" is needed to enable.
399 # We will collect such requests in @experimental.
400 # To avoid accidental use of experimental features, applications will have to use -DOPENSSL_EXPERIMENTAL_FOO.
405 &usage if ($#ARGV < 0);
408 $config{depflags}="";
409 $config{openssl_experimental_defines}=[];
410 $config{openssl_api_defines}=[];
411 $config{openssl_algorithm_defines}=[];
412 $config{openssl_thread_defines}=[];
413 $config{openssl_sys_defines}=[];
414 $config{openssl_other_defines}=[];
420 my $build_prefix = "release_";
424 if (grep /^reconf(igure)?$/, @argvcopy) {
425 if (-f "./configdata.pm") {
426 my $file = "./configdata.pm";
427 unless (my $return = do $file) {
428 die "couldn't parse $file: $@" if $@;
429 die "couldn't do $file: $!" unless defined $return;
430 die "couldn't run $file" unless $return;
433 @argvcopy = defined($configdata::config{perlargv}) ?
434 @{$configdata::config{perlargv}} : ();
435 die "Incorrect data to reconfigure, please do a normal configuration\n"
436 if (grep(/^reconf/,@argvcopy));
437 $ENV{CROSS_COMPILE} = $configdata::config{cross_compile_prefix}
438 if defined($configdata::config{cross_compile_prefix});
439 $ENV{CROSS_COMPILE} = $configdata::config{cc}
440 if defined($configdata::config{cc});
442 print "Reconfiguring with: ", join(" ",@argvcopy), "\n";
443 print " CROSS_COMPILE = ",$ENV{CROSS_COMPILE},"\n"
444 if $ENV{CROSS_COMPILE};
445 print " CC = ",$ENV{CC},"\n" if $ENV{CC};
446 } elsif (open IN, "<Makefile") {
448 # THIS SECTION IS TEMPORARY, it helps transitioning from Makefile
449 # centered information gathering the reading configdata.pm
453 if (/^CONFIGURE_ARGS=\s*(.*)\s*/) {
454 # Older form, we split the string and hope for the best
455 @argvcopy = split /\s+/, $_;
456 die "Incorrect data to reconfigure, please do a normal configuration\n"
457 if (grep(/^reconf/,@argvcopy));
458 } elsif (/^CROSS_COMPILE=\s*(.*)/) {
459 $ENV{CROSS_COMPILE}=$1;
460 } elsif (/^CC=\s*(?:\$\(CROSS_COMPILE\))?(.*?)$/) {
465 # END OF TEMPORARY SECTION
468 die "Insufficient data to reconfigure, please do a normal configuration\n";
472 $config{perlargv} = [ @argvcopy ];
474 my %unsupported_options = ();
477 s /^-no-/no-/; # some people just can't read the instructions
479 # rewrite some options in "enable-..." form
480 s /^-?-?shared$/enable-shared/;
481 s /^sctp$/enable-sctp/;
482 s /^threads$/enable-threads/;
483 s /^zlib$/enable-zlib/;
484 s /^zlib-dynamic$/enable-zlib-dynamic/;
486 if (/^(no|disable|enable|experimental)-(.+)$/)
489 if (!grep { $word =~ /^${_}$/ } @disablables)
491 $unsupported_options{$_} = 1;
495 if (/^no-(.+)$/ || /^disable-(.+)$/)
497 if (!($disabled{$1} eq "experimental"))
499 foreach my $proto ((@tls, @dtls))
501 if ($1 eq "$proto-method")
503 $disabled{"$proto"} = "option($proto-method)";
509 foreach my $proto (@dtls)
511 $disabled{$proto} = "option(dtls)";
516 # Last one of its kind
517 $disabled{"ssl3"} = "option(ssl)";
521 # XXX: Tests will fail if all SSL/TLS
522 # protocols are disabled.
523 foreach my $proto (@tls)
525 $disabled{$proto} = "option(tls)";
530 $disabled{$1} = "option";
534 elsif (/^enable-(.+)$/ || /^experimental-(.+)$/)
537 if ($disabled{$algo} eq "experimental")
539 die "You are requesting an experimental feature; please say 'experimental-$algo' if you are sure\n"
540 unless (/^experimental-/);
541 push @experimental, $algo;
543 delete $disabled{$algo};
545 $threads = 1 if ($algo eq "threads");
547 elsif (/^--strict-warnings$/)
549 $strict_warnings = 1;
553 $build_prefix = "debug_";
555 elsif (/^--release$/)
557 $build_prefix = "release_";
560 { $config{processor}=386; }
567 # No RSAref support any more since it's not needed.
568 # The check for the option is there so scripts aren't
571 elsif (/^nofipscanistercheck$/)
574 $nofipscanistercheck = 1;
578 if (/^--prefix=(.*)$/)
582 elsif (/^--api=(.*)$/)
586 elsif (/^--libdir=(.*)$/)
590 elsif (/^--openssldir=(.*)$/)
592 $config{openssldir}=$1;
594 elsif (/^--install.prefix=(.*)$/)
596 $config{install_prefix}=$1;
598 elsif (/^--with-zlib-lib=(.*)$/)
600 $withargs{"zlib-lib"}=$1;
602 elsif (/^--with-zlib-include=(.*)$/)
604 $withargs{"zlib-include"}="-I$1";
606 elsif (/^--with-fipslibdir=(.*)$/)
608 $config{fipslibdir}="$1/";
610 elsif (/^--with-baseaddr=(.*)$/)
612 $config{baseaddr}="$1";
614 elsif (/^--cross-compile-prefix=(.*)$/)
616 $config{cross_compile_prefix}=$1;
618 elsif (/^--config=(.*)$/)
622 elsif (/^-[lL](.*)$/ or /^-Wl,/)
626 else # common if (/^[-+]/), just pass down...
628 $_ =~ s/%([0-9a-f]{1,2})/chr(hex($1))/gei;
632 elsif ($_ =~ /^([^:]+):(.+)$/)
634 eval "\$table{\$1} = \"$2\""; # allow $xxx constructs in the string
639 die "target already defined - $target (offending arg: $_)\n" if ($target ne "");
642 unless ($_ eq $target || /^no-/ || /^disable-/)
644 # "no-..." follows later after implied disactivations
645 # have been derived. (Don't take this too seroiusly,
646 # we really only write OPTIONS to the Makefile out of
649 if ($config{options} eq "")
650 { $config{options} = $_; }
652 { $config{options} .= " ".$_; }
655 if (defined($config{api}) && !exists $apitable->{$config{api}}) {
656 die "***** Unsupported api compatibility level: $config{api}\n",
659 if (keys %unsupported_options)
661 die "***** Unsupported options: ",
662 join(", ", keys %unsupported_options), "\n";
668 delete $disabled{"shared"} if ($disabled{"shared"} =~ /^default/);
672 @{$config{dirs}} = grep !/^fips$/, @{$config{dirs}};
675 my @tocheckfor = (keys %disabled);
676 while (@tocheckfor) {
677 my %new_tocheckfor = ();
678 my @cascade_copy = (@disable_cascades);
679 while (@cascade_copy) {
680 my ($test, $descendents) = (shift @cascade_copy, shift @cascade_copy);
681 if (ref($test) eq "CODE" ? $test->() : defined($disabled{$test})) {
683 $new_tocheckfor{$_} => 1; $disabled{$_} = "forced";
684 } grep { !defined($disabled{$_}) } @$descendents;
687 @tocheckfor = (keys %new_tocheckfor);
690 if ($target eq "TABLE") {
691 foreach (sort keys %table) {
692 print_table_entry($_, "TABLE");
697 if ($target eq "LIST") {
698 foreach (sort keys %table) {
699 print $_,"\n" unless $table{$_}->{template};
704 if ($target eq "HASH") {
705 print "%table = (\n";
706 foreach (sort keys %table) {
707 print_table_entry($_, "HASH");
712 # Backward compatibility?
713 if ($target =~ m/^CygWin32(-.*)$/) {
714 $target = "Cygwin".$1;
717 foreach (sort (keys %disabled))
719 $config{options} .= " no-$_";
721 printf " no-%-12s %-10s", $_, "[$disabled{$_}]";
728 { $config{no_shared} = 1; }
731 elsif (/^static-engine$/)
733 elsif (/^zlib-dynamic$/)
738 { @{$config{dirs}} = grep !/^engine$/, @{$config{dirs}}; }
742 ($ALGO = $algo = $_) =~ tr/[\-a-z]/[_A-Z]/;
744 if (/^asm$/ || /^err$/ || /^hw$/ || /^hw-/)
746 push @{$config{openssl_other_defines}}, "OPENSSL_NO_$ALGO";
747 print " OPENSSL_NO_$ALGO";
749 if (/^err$/) { $flags .= "-DOPENSSL_NO_ERR "; }
750 elsif (/^asm$/) { $no_asm = 1; }
754 ($ALGO,$algo) = ("RMD160","rmd160") if ($algo eq "ripemd");
756 push @{$config{openssl_algorithm_defines}}, "OPENSSL_NO_$ALGO";
757 $config{depflags} .= " -DOPENSSL_NO_$ALGO";
758 print " OPENSSL_NO_$ALGO";
760 # fix-up crypto/directory name(s)
761 $algo="whrlpool" if $algo eq "whirlpool";
762 $algo="ripemd" if $algo eq "rmd160";
763 @{$config{sdirs}} = grep { $_ ne $algo} @{$config{sdirs}};
774 foreach (sort @experimental)
777 ($ALGO = $_) =~ tr/[a-z]/[A-Z]/;
779 # opensslconf.h will set OPENSSL_NO_... unless OPENSSL_EXPERIMENTAL_... is defined
780 push @{$config{openssl_experimental_defines}}, "OPENSSL_NO_$ALGO";
781 $exp_cflags .= " -DOPENSSL_EXPERIMENTAL_$ALGO";
784 print "Configuring for $target\n";
786 # Support for legacy targets having a name starting with 'debug-'
787 my ($d, $t) = $target =~ m/^(debug-)?(.*)$/;
789 $build_prefix = "debug_";
791 # If we do not find debug-foo in the table, the target is set to foo.
792 if (!$table{$target}) {
796 $config{target} = $target;
797 delete $table{$base_target}->{template}; # or the next test will fail.
798 my %target = ( %{$table{$base_target}}, resolve_config($target) );
800 &usage if (!%target || $target{template});
802 $target{exe_extension}="";
803 $target{exe_extension}=".exe" if ($config{target} eq "Cygwin" || $config{target} eq "DJGPP" || $config{target} =~ /^mingw/);
804 $target{exe_extension}=".nlm" if ($config{target} =~ /netware/);
805 $target{exe_extension}=".pm" if ($config{target} =~ /vos/);
807 $default_ranlib = which("ranlib") || "true";
808 $config{perl} = $ENV{'PERL'} || which("perl5") || which("perl") || "perl";
809 my $make = $ENV{'MAKE'} || "make";
811 $config{cross_compile_prefix} = $ENV{'CROSS_COMPILE'}
812 if $config{cross_compile_prefix} eq "";
814 $config{prefix} = "/usr/local" if !$config{prefix};
815 $config{openssldir} = "ssl" if !$config{openssldir};
816 $config{openssldir} = catdir($config{prefix}, $config{openssldir})
817 unless file_name_is_absolute($config{openssldir});
819 # Allow environment CC to override compiler...
820 $target{cc} = $ENV{CC} || $target{cc};
822 # For cflags, lflags and ex_libs, add the debug_ or release_ attributes
823 # Do it in such a way that no spurious space is appended (hence the grep).
824 $config{cflags} = join(" ",
825 grep { $_ ne "" } ($target{cflags},
826 $target{$build_prefix."cflags"}));
827 $config{lflags} = join(" ",
828 grep { $_ ne "" } ($target{lflags},
829 $target{$build_prefix."lflags"}));
830 $config{ex_libs} = join(" ",
831 grep { $_ ne "" } ($target{ex_libs},
832 $target{$build_prefix."ex_libs"}));
834 $target{ranlib} = $ENV{'RANLIB'} || $target{ranlib} || $default_ranlib;
835 $target{ar} = $ENV{'AR'} || "ar";
836 $target{arflags} = "" if !defined($target{arflags});
838 # Make sure build_scheme is consistent.
839 $target{build_scheme} = [ $target{build_scheme} ]
840 if ref($target{build_scheme}) ne "ARRAY";
842 # if $config{prefix}/lib$target{multilib} is not an existing directory, then
843 # assume that it's not searched by linker automatically, in
844 # which case adding $target{multilib} suffix causes more grief than
845 # we're ready to tolerate, so don't...
846 $target{multilib}="" if !-d "$config{prefix}/lib$target{multilib}";
848 $config{libdir}="lib$target{multilib}" if $config{libdir} eq "";
849 $config{enginesdir}=$config{prefix} . "/" . $config{libdir} . "/engines";
851 $config{cflags} .= "$exp_cflags";
853 if ($target =~ /^mingw/ && `$target{cc} --target-help 2>&1` !~ m/-mno-cygwin/m)
855 $config{cflags} =~ s/-mno-cygwin\s*//;
856 $target{shared_ldflag} =~ s/-mno-cygwin\s*//;
859 if ($target =~ /linux.*-mips/ && !$no_asm && $flags !~ /-m(ips|arch=)/) {
860 # minimally required architecture flags for assembly modules
861 $config{cflags}="-mips2 $config{cflags}" if ($target =~ /mips32/);
862 $config{cflags}="-mips3 $config{cflags}" if ($target =~ /mips64/);
865 my $no_shared_warn=0;
866 my $no_user_cflags=0;
868 if ($flags ne "") { $config{cflags}="$flags$config{cflags}"; }
869 else { $no_user_cflags=1; }
871 # The DSO code currently always implements all functions so that no
872 # applications will have to worry about that from a compilation point
873 # of view. However, the "method"s may return zero unless that platform
874 # has support compiled in for them. Currently each method is enabled
875 # by a define "DSO_<name>" ... we translate the "dso_scheme" config
876 # string entry into using the following logic;
878 if (!$no_dso && $target{dso_scheme} ne "")
880 $target{dso_scheme} =~ tr/[a-z]/[A-Z]/;
881 if ($target{dso_scheme} eq "DLFCN")
883 $dso_cflags = "-DDSO_DLFCN -DHAVE_DLFCN_H";
885 elsif ($target{dso_scheme} eq "DLFCN_NO_H")
887 $dso_cflags = "-DDSO_DLFCN";
891 $dso_cflags = "-DDSO_$target{dso_scheme}";
893 $config{cflags} = "$dso_cflags $config{cflags}";
896 my $thread_cflags = "";
898 if ($target{thread_cflag} ne "(unknown)" && !$no_threads)
900 # If we know how to do it, support threads by default.
903 if ($target{thread_cflag} eq "(unknown)" && $threads)
905 # If the user asked for "threads", [s]he is also expected to
906 # provide any system-dependent compiler options that are
910 print "You asked for multi-threading support, but didn't\n";
911 print "provide any system-specific compiler options\n";
914 $thread_cflags="-DOPENSSL_THREADS" ;
915 push @thread_defines, "OPENSSL_THREADS";
919 $thread_cflags="-DOPENSSL_THREADS $target{thread_cflag}";
920 push @thread_defines, "OPENSSL_THREADS";
923 $config{ex_libs}="$libs$config{ex_libs}" if ($libs ne "");
927 $config{cflags}=~s/-D[BL]_ENDIAN// if ($config{fips});
932 $config{cflags} = "$thread_cflags $config{cflags}" if $thread_cflags;
933 push @{$config{openssl_thread_defines}}, @thread_defines;
938 $config{cflags} = "-DZLIB $config{cflags}";
939 if (defined($disabled{"zlib-dynamic"}))
941 if (defined($withargs{"zlib-lib"}))
943 $config{ex_libs} .= " -L" . $withargs{"zlib-lib"} . " -lz";
947 $config{ex_libs} .= " -lz";
952 $config{cflags} = "-DZLIB_SHARED $config{cflags}";
956 # With "deprecated" disable all deprecated features.
957 if (defined($disabled{"deprecated"})) {
958 $config{api} = $maxapi;
961 if ($target{shared_target} eq "")
963 $no_shared_warn = 1 if !$config{no_shared} && !$config{fips};
964 $config{no_shared} = 1;
966 if (!$config{no_shared})
968 if ($target{shared_cflag} ne "")
970 $config{cflags} = "$target{shared_cflag} -DOPENSSL_PIC $config{cflags}";
974 if ($target{build_scheme}->[0] ne "mk1mf")
976 # add {no-}static-engine to options to allow mkdef.pl to work without extra arguments
977 if ($config{no_shared})
979 push @{$config{openssl_other_defines}}, "OPENSSL_NO_DYNAMIC_ENGINE";
980 $config{options}.=" static-engine";
984 push @{$config{openssl_other_defines}}, "OPENSSL_NO_STATIC_ENGINE";
985 $config{options}.=" no-static-engine";
992 # Unlike other OSes (like Solaris, Linux, Tru64, IRIX) BSD run-time
993 # linkers (tested OpenBSD, NetBSD and FreeBSD) "demand" RPATH set on
994 # .so objects. Apparently application RPATH is not global and does
995 # not apply to .so linked with other .so. Problem manifests itself
996 # when libssl.so fails to load libcrypto.so. One can argue that we
997 # should engrave this into Makefile.shared rules or into BSD-* config
998 # lines above. Meanwhile let's try to be cautious and pass -rpath to
999 # linker only when --prefix is not /usr.
1000 if ($target =~ /^BSD-/)
1002 $target{shared_ldflag}.=" -Wl,-rpath,\$\$(LIBRPATH)" if ($config{prefix} !~ m|^/usr[/]*$|);
1005 if ($target{sys_id} ne "")
1007 #$config{cflags}="-DOPENSSL_SYS_$target{sys_id} $config{cflags}";
1008 push @{$config{openssl_sys_defines}}, "OPENSSL_SYS_$target{sys_id}";
1011 if ($target{ranlib} eq "")
1013 $target{ranlib} = $default_ranlib;
1017 $target{cpuid_asm_src}=$table{BASE}->{cpuid_asm_src} if ($config{processor} eq "386");
1018 $target{cpuid_asm_src}.=" uplink.c uplink-x86.s" if ($config{cflags} =~ /-DOPENSSL_USE_APPLINK/);
1020 $target{bn_asm_src} =~ s/\w+-gf2m.c// if (defined($disabled{ec2m}));
1022 # bn-586 is the only one implementing bn_*_part_words
1023 $config{cflags}.=" -DOPENSSL_BN_ASM_PART_WORDS" if ($target{bn_asm_src} =~ /bn-586/);
1024 $config{cflags}.=" -DOPENSSL_IA32_SSE2" if (!$no_sse2 && $target{bn_asm_src} =~ /86/);
1026 $config{cflags}.=" -DOPENSSL_BN_ASM_MONT" if ($target{bn_asm_src} =~ /-mont/);
1027 $config{cflags}.=" -DOPENSSL_BN_ASM_MONT5" if ($target{bn_asm_src} =~ /-mont5/);
1028 $config{cflags}.=" -DOPENSSL_BN_ASM_GF2m" if ($target{bn_asm_src} =~ /-gf2m/);
1030 if ($config{fips}) {
1031 push @{$config{openssl_other_defines}}, "OPENSSL_FIPS";
1034 if ($target{sha1_asm_src}) {
1035 $config{cflags}.=" -DSHA1_ASM" if ($target{sha1_asm_src} =~ /sx86/ || $target{sha1_asm_src} =~ /sha1/);
1036 $config{cflags}.=" -DSHA256_ASM" if ($target{sha1_asm_src} =~ /sha256/);
1037 $config{cflags}.=" -DSHA512_ASM" if ($target{sha1_asm_src} =~ /sha512/);
1039 if ($target{md5_asm_src}) {
1040 $config{cflags}.=" -DMD5_ASM";
1042 $target{cast_asm_src}=$table{BASE}->{cast_asm_src} if (!$config{no_shared}); # CAST assembler is not PIC
1043 if ($target{rmd160_asm_src}) {
1044 $config{cflags}.=" -DRMD160_ASM";
1046 if ($target{aes_asm_src}) {
1047 $config{cflags}.=" -DAES_ASM" if ($target{aes_asm_src} =~ m/\baes-/);;
1048 # aes-ctr.fake is not a real file, only indication that assembler
1049 # module implements AES_ctr32_encrypt...
1050 $config{cflags}.=" -DAES_CTR_ASM" if ($target{aes_asm_src} =~ s/\s*aes-ctr\.fake//);
1051 # aes-xts.fake indicates presence of AES_xts_[en|de]crypt...
1052 $config{cflags}.=" -DAES_XTS_ASM" if ($target{aes_asm_src} =~ s/\s*aes-xts\.fake//);
1053 $target{aes_asm_src} =~ s/\s*(vpaes|aesni)-x86\.s//g if ($no_sse2);
1054 $config{cflags}.=" -DVPAES_ASM" if ($target{aes_asm_src} =~ m/vpaes/);
1055 $config{cflags}.=" -DBSAES_ASM" if ($target{aes_asm_src} =~ m/bsaes/);
1057 if ($target{wp_asm_src} =~ /mmx/) {
1058 if ($config{processor} eq "386") {
1059 $target{wp_asm_src}=$table{BASE}->{wp_asm_src};
1060 } elsif (!$disabled{"whirlpool"}) {
1061 $config{cflags}.=" -DWHIRLPOOL_ASM";
1064 if ($target{modes_asm_src} =~ /ghash-/) {
1065 $config{cflags}.=" -DGHASH_ASM";
1067 if ($target{ec_asm_src} =~ /ecp_nistz256/) {
1068 $config{cflags}.=" -DECP_NISTZ256_ASM";
1070 if ($target{poly1305_asm_src} ne "") {
1071 $config{cflags}.=" -DPOLY1305_ASM";
1075 # Is the compiler gcc or clang? $ecc is used below to see if error-checking
1077 my $ecc = $target{cc};
1078 my $ccpcc = "$config{cross_compile_prefix}$target{cc}";
1079 $config{makedepprog} = 'makedepend';
1080 open(PIPE, "$ccpcc --version 2>&1 | head -2 |");
1082 $config{makedepprog} = $ccpcc if /clang|gcc/;
1083 $ecc = "clang" if /clang/;
1084 $ecc = "gcc" if /gcc/;
1088 $config{depflags} =~ s/^\s*//;
1091 # Deal with bn_ops ###################################################
1094 $config{export_var_as_fn} =0;
1095 my $def_int="unsigned int";
1096 $config{rc4_int} =$def_int;
1097 ($config{b64l},$config{b64},$config{b32})=(0,0,1);
1100 foreach (sort split(/\s+/,$target{bn_ops})) {
1101 $count++ if /SIXTY_FOUR_BIT|SIXTY_FOUR_BIT_LONG|THIRTY_TWO_BIT/;
1102 $config{export_var_as_fn}=1 if $_ eq 'EXPORT_VAR_AS_FN';
1103 $config{bn_ll}=1 if $_ eq 'BN_LLONG';
1104 $config{rc4_int}="unsigned char" if $_ eq 'RC4_CHAR';
1105 ($config{b64l},$config{b64},$config{b32})
1106 =(0,1,0) if $_ eq 'SIXTY_FOUR_BIT';
1107 ($config{b64l},$config{b64},$config{b32})
1108 =(1,0,0) if $_ eq 'SIXTY_FOUR_BIT_LONG';
1109 ($config{b64l},$config{b64},$config{b32})
1110 =(0,0,1) if $_ eq 'THIRTY_TWO_BIT';
1112 die "Exactly one of SIXTY_FOUR_BIT|SIXTY_FOUR_BIT_LONG|THIRTY_TWO_BIT can be set in bn_ops\n"
1116 # Hack cflags for better warnings (dev option) #######################
1118 # "Stringify" the C flags string. This permits it to be made part of a string
1119 # and works as well on command lines.
1120 $config{cflags} =~ s/([\\\"])/\\\1/g;
1122 if (defined($config{api})) {
1123 $config{openssl_api_defines} = [ "OPENSSL_MIN_API=".$apitable->{$config{api}} ];
1124 my $apiflag = sprintf("-DOPENSSL_API_COMPAT=%s", $apitable->{$config{api}});
1125 $default_depflags .= " $apiflag";
1126 $config{cflags} .= " $apiflag";
1129 if ($strict_warnings)
1132 die "ERROR --strict-warnings requires gcc or clang"
1133 unless $ecc eq 'gcc' || $ecc eq 'clang';
1134 foreach $wopt (split /\s+/, $gcc_devteam_warn)
1136 $config{cflags} .= " $wopt" unless ($config{cflags} =~ /(^|\s)$wopt(\s|$)/)
1138 if ($ecc eq "clang")
1140 foreach $wopt (split /\s+/, $clang_devteam_warn)
1142 $config{cflags} .= " $wopt" unless ($config{cflags} =~ /(^|\s)$wopt(\s|$)/)
1145 if ($target !~ /^mingw/)
1147 foreach $wopt (split /\s+/, $memleak_devteam_backtrace)
1149 $config{cflags} .= " $wopt" unless ($config{cflags} =~ /(^|\s)$wopt(\s|$)/)
1151 if ($target =~ /^BSD-/)
1153 $config{ex_libs} .= " -lexecinfo";
1158 # If we use the unified build, collect information from build.info files
1159 my %unified_info = ();
1161 if ($target{build_scheme}->[0] eq "unified") {
1162 use lib catdir(dirname(__FILE__),"util");
1163 use with_fallback qw(Text::Template);
1165 # Helpers to produce clean paths with no /../ in the middle and so on.
1166 sub int_absolutedir {
1169 # Required, because realpath only works properly with existing dirs
1172 my $res = realpath($dir);
1178 my $base = shift || ".";
1180 my $res = abs2rel(int_absolutedir($dir), rel2abs($base));
1181 #print STDERR "DEBUG[cleandir]: $dir , $base => $res\n";
1187 my $base = shift || ".";
1188 my $d = dirname($file);
1189 my $f = basename($file);
1191 my $res = abs2rel(catfile(int_absolutedir($d), $f), rel2abs($base));
1192 #print STDERR "DEBUG[cleanfile]: $d , $f => $res\n";
1196 my @build_infos = ( [ ".", "build.info" ] );
1197 foreach (@{$config{dirs}}) {
1198 push @build_infos, [ $_, "build.info" ]
1199 if (-f catfile($srcdir, $_, "build.info"));
1201 foreach (@{$config{sdirs}}) {
1202 push @build_infos, [ catdir("crypto", $_), "build.info" ]
1203 if (-f catfile($srcdir, "crypto", $_, "build.info"));
1205 foreach (@{$config{engdirs}}) {
1206 push @build_infos, [ catdir("engines", $_), "build.info" ]
1207 if (-f catfile($srcdir, "engines", $_, "build.info"));
1210 foreach (@build_infos) {
1211 my $sourced = catdir($srcdir, $_->[0]);
1212 my $buildd = catdir($blddir, $_->[0]);
1217 # The basic things we're trying to build
1223 my @intermediates = ();
1231 my %sharednames = ();
1233 my $template = Text::Template->new(TYPE => 'FILE',
1234 SOURCE => catfile($sourced, $f));
1235 die "Something went wrong with $sourced/$f: $!\n" unless $template;
1238 $template->fill_in(HASH => { config => \%config,
1240 builddir => abs2rel($buildd, $blddir),
1241 sourcedir => abs2rel($sourced, $blddir),
1242 buildtop => abs2rel($blddir, $blddir),
1243 sourcetop => abs2rel($srcdir, $blddir) },
1244 DELIMITERS => [ "{-", "-}" ]);
1246 # The top item of this stack has the following values
1247 # -2 positive already run and we found ELSE (following ELSIF should fail)
1248 # -1 positive already run (skip until ENDIF)
1249 # 0 negatives so far (if we're at a condition, check it)
1250 # 1 last was positive (don't skip lines until next ELSE, ELSIF or ENDIF)
1251 # 2 positive ELSE (following ELSIF should fail)
1253 collect_information(
1254 collect_from_array([ @text ],
1255 qr/\\$/ => sub { my $l1 = shift; my $l2 = shift;
1256 $l1 =~ s/\\$//; $l1.$l2 }),
1257 # Info we're looking for
1258 qr/^\s*IF\[((?:\\.|[^\\\]])*)\]\s*$/
1259 => sub { push @skip, !! $1; },
1260 qr/^\s*ELSIF\[((?:\\.|[^\\\]])*)\]\s*$/
1261 => sub { die "ELSIF out of scope" if ! @skip;
1262 die "ELSIF following ELSE" if abs($skip[$#skip]) == 2;
1263 $skip[$#skip] = -1 if $skip[$#skip] != 0;
1264 $skip[$#skip] = !! $1
1265 if $skip[$#skip] == 0; },
1267 => sub { die "ELSE out of scope" if ! @skip;
1268 $skip[$#skip] = -2 if $skip[$#skip] != 0;
1269 $skip[$#skip] = 2 if $skip[$#skip] == 0; },
1271 => sub { die "ENDIF out of scope" if ! @skip;
1273 qr/^\s*PROGRAMS\s*=\s*(.*)\s*$/
1274 => sub { push @programs, split(/\s+/, $1)
1275 if !@skip || $skip[$#skip] > 0 },
1276 qr/^\s*LIBS\s*=\s*(.*)\s*$/
1277 => sub { push @libraries, split(/\s+/, $1)
1278 if !@skip || $skip[$#skip] > 0 },
1279 qr/^\s*ENGINES\s*=\s*(.*)\s*$/
1280 => sub { push @engines, split(/\s+/, $1)
1281 if !@skip || $skip[$#skip] > 0 },
1282 qr/^\s*SCRIPTS\s*=\s*(.*)\s*$/
1283 => sub { push @scripts, split(/\s+/, $1)
1284 if !@skip || $skip[$#skip] > 0 },
1285 qr/^\s*EXTRA\s*=\s*(.*)\s*$/
1286 => sub { push @extra, split(/\s+/, $1)
1287 if !@skip || $skip[$#skip] > 0 },
1289 qr/^\s*ORDINALS\[((?:\\.|[^\\\]])+)\]\s*=\s*(.*)\s*$/,
1290 => sub { push @{$ordinals{$1}}, split(/\s+/, $2)
1291 if !@skip || $skip[$#skip] > 0 },
1292 qr/^\s*SOURCE\[((?:\\.|[^\\\]])+)\]\s*=\s*(.*)\s*$/
1293 => sub { push @{$sources{$1}}, split(/\s+/, $2)
1294 if !@skip || $skip[$#skip] > 0 },
1295 qr/^\s*INCLUDE\[((?:\\.|[^\\\]])+)\]\s*=\s*(.*)\s*$/
1296 => sub { push @{$includes{$1}}, split(/\s+/, $2)
1297 if !@skip || $skip[$#skip] > 0 },
1298 qr/^\s*DEPEND\[((?:\\.|[^\\\]])+)\]\s*=\s*(.*)\s*$/
1299 => sub { push @{$depends{$1}}, split(/\s+/, $2)
1300 if !@skip || $skip[$#skip] > 0 },
1301 qr/^\s*RENAME\[((?:\\.|[^\\\]])+)\]\s*=\s*(.*)\s*$/
1302 => sub { push @{$renames{$1}}, split(/\s+/, $2)
1303 if !@skip || $skip[$#skip] > 0 },
1304 qr/^\s*SHARED_NAME\[((?:\\.|[^\\\]])+)\]\s*=\s*(.*)\s*$/
1305 => sub { push @{$sharednames{$1}}, split(/\s+/, $2)
1306 if !@skip || $skip[$#skip] > 0 },
1307 qr/^\s*BEGINRAW\[((?:\\.|[^\\\]])+)\]\s*$/
1309 my $lineiterator = shift;
1310 my $target_kind = $1;
1311 while (defined $lineiterator->()) {
1313 if (/^\s*ENDRAW\[((?:\\.|[^\\\]])+)\]\s*$/) {
1314 die "ENDRAW doesn't match BEGINRAW"
1315 if $1 ne $target_kind;
1318 next if @skip && $skip[$#skip] <= 0;
1320 if ($target_kind eq $target{build_file}
1321 || $target_kind eq $target{build_file}."(".$target{build_scheme}->[1].")");
1324 qr/^(?:#.*|\s*)$/ => sub { },
1325 "OTHERWISE" => sub { die "Something wrong with this line:\n$_\nat $sourced/$f" }
1327 die "runaway IF?" if (@skip);
1329 foreach (keys %renames) {
1330 die "$_ renamed to more than one thing: "
1331 ,join(" ", @{$renames{$_}}),"\n"
1332 if scalar @{$renames{$_}} > 1;
1333 my $dest = cleanfile(catfile($buildd, $_), $blddir);
1334 my $to = cleanfile(catfile($buildd, $renames{$_}->[0]), $blddir);
1335 die "$dest renamed to more than one thing: "
1336 ,$unified_info{rename}->{$dest}, $to
1337 unless !defined($unified_info{rename}->{$dest})
1338 or $unified_info{rename}->{$dest} eq $to;
1339 $unified_info{rename}->{$dest} = $to;
1342 foreach (@programs) {
1343 my $program = cleanfile(catfile($buildd, $_), $blddir);
1344 if ($unified_info{rename}->{$program}) {
1345 $program = $unified_info{rename}->{$program};
1347 $unified_info{programs}->{$program} = 1;
1350 foreach (@libraries) {
1351 my $library = cleanfile(catfile($buildd, $_), $blddir);
1352 if ($unified_info{rename}->{$library}) {
1353 $library = $unified_info{rename}->{$library};
1355 $unified_info{libraries}->{$library} = 1;
1358 die <<"EOF" if $config{no_shared} && scalar @engines;
1359 ENGINES can only be used if configured with 'shared'.
1360 This is usually a fault in a build.info file.
1362 foreach (@engines) {
1363 my $library = cleanfile(catfile($buildd, $_), $blddir);
1364 if ($unified_info{rename}->{$library}) {
1365 $library = $unified_info{rename}->{$library};
1367 $unified_info{engines}->{$library} = 1;
1370 foreach (@scripts) {
1371 my $script = cleanfile(catfile($buildd, $_), $blddir);
1372 if ($unified_info{rename}->{$script}) {
1373 $script = $unified_info{rename}->{$script};
1375 $unified_info{scripts}->{$script} = 1;
1379 my $extra = cleanfile(catfile($buildd, $_), $blddir);
1380 $unified_info{extra}->{$extra} = 1;
1383 push @{$unified_info{rawlines}}, @rawlines;
1385 if (!$config{no_shared}) {
1386 # Check sharednames.
1387 foreach (keys %sharednames) {
1388 my $dest = cleanfile(catfile($buildd, $_), $blddir);
1389 if ($unified_info{rename}->{$dest}) {
1390 $dest = $unified_info{rename}->{$dest};
1392 die "shared_name for $dest with multiple values: "
1393 ,join(" ", @{$sharednames{$_}}),"\n"
1394 if scalar @{$sharednames{$_}} > 1;
1395 my $to = cleanfile(catfile($buildd, $sharednames{$_}->[0]),
1397 die "shared_name found for a library $dest that isn't defined\n"
1398 unless $unified_info{libraries}->{$dest};
1399 die "shared_name for $dest with multiple values: "
1400 ,$unified_info{sharednames}->{$dest}, ", ", $to
1401 unless !defined($unified_info{sharednames}->{$dest})
1402 or $unified_info{sharednames}->{$dest} eq $to;
1403 $unified_info{sharednames}->{$dest} = $to;
1406 # Additionally, we set up sharednames for libraries that don't
1407 # have any, as themselves.
1408 foreach (keys %{$unified_info{libraries}}) {
1409 if (!defined $unified_info{sharednames}->{$_}) {
1410 $unified_info{sharednames}->{$_} = $_
1415 foreach (keys %ordinals) {
1417 my $ddest = cleanfile(catfile($buildd, $_), $blddir);
1418 if ($unified_info{rename}->{$ddest}) {
1419 $ddest = $unified_info{rename}->{$ddest};
1421 foreach (@{$ordinals{$dest}}) {
1422 my %known_ordinals =
1425 cleanfile(catfile($sourced, "util", "libeay.num"), $blddir),
1427 cleanfile(catfile($sourced, "util", "ssleay.num"), $blddir)
1429 my $o = $known_ordinals{$_};
1430 die "Ordinals for $ddest defined more than once\n"
1431 if $unified_info{ordinals}->{$ddest};
1432 $unified_info{ordinals}->{$ddest} = [ $_, $o ];
1436 foreach (keys %sources) {
1438 my $ddest = cleanfile(catfile($buildd, $_), $blddir);
1439 if ($unified_info{rename}->{$ddest}) {
1440 $ddest = $unified_info{rename}->{$ddest};
1442 foreach (@{$sources{$dest}}) {
1443 my $s = cleanfile(catfile($sourced, $_), $blddir);
1445 # If it isn't in the source tree, we assume it's generated
1448 $s = cleanfile(catfile($buildd, $_), $blddir);
1450 # We recognise C and asm files
1451 if ($s =~ /\.[csS]\b$/) {
1452 (my $o = $_) =~ s/\.[csS]\b$/.o/;
1453 $o = cleanfile(catfile($buildd, $o), $blddir);
1454 $unified_info{sources}->{$ddest}->{$o} = 1;
1455 $unified_info{sources}->{$o}->{$s} = 1;
1457 $unified_info{sources}->{$ddest}->{$s} = 1;
1462 foreach (keys %depends) {
1464 my $ddest = cleanfile(catfile($buildd, $_), $blddir);
1465 if ($unified_info{rename}->{$ddest}) {
1466 $ddest = $unified_info{rename}->{$ddest};
1468 foreach (@{$depends{$dest}}) {
1469 my $d = cleanfile(catfile($sourced, $_), $blddir);
1471 # If it isn't found in the source, let's assume it's generated
1472 # and that the Makefile template has the lines
1474 $d = cleanfile(catfile($buildd, $_), $blddir);
1476 # Take note if the file to depend on is being renamed
1477 if ($unified_info{rename}->{$d}) {
1478 $d = $unified_info{rename}->{$d};
1480 $unified_info{depends}->{$ddest}->{$d} = 1;
1481 # If we depend on a header file, let's make sure it
1484 my $i = dirname($d);
1485 push @{$unified_info{includes}->{$ddest}}, $i
1486 unless grep { $_ eq $i } @{$unified_info{includes}->{$ddest}};
1491 foreach (keys %includes) {
1493 my $ddest = cleanfile(catfile($buildd, $_), $blddir);
1494 if ($unified_info{rename}->{$ddest}) {
1495 $ddest = $unified_info{rename}->{$ddest};
1497 foreach (@{$includes{$dest}}) {
1498 my $i = cleandir(catdir($sourced, $_), $blddir);
1499 push @{$unified_info{includes}->{$ddest}}, $i
1500 unless grep { $_ eq $i } @{$unified_info{includes}->{$ddest}};
1505 ### Make unified_info a bit more efficient
1506 # One level structures
1507 foreach (("programs", "libraries", "engines", "scripts", "extra")) {
1508 $unified_info{$_} = [ sort keys %{$unified_info{$_}} ];
1510 # Two level structures
1511 foreach my $l1 (("sources", "ldadd", "depends")) {
1512 foreach my $l2 (sort keys %{$unified_info{$l1}}) {
1513 $unified_info{$l1}->{$l2} =
1514 [ sort keys %{$unified_info{$l1}->{$l2}} ];
1519 # For the schemes that need it, we provide the old *_obj configs
1520 # from the *_asm_obj ones
1521 foreach (grep /_asm_src$/, keys %target) {
1523 (my $obj = $_) =~ s/_asm_src$/_obj/;
1524 ($target{$obj} = $target{$src}) =~ s/\.[csS]\b/.o/g;
1527 # Write down our configuration where it fits #########################
1529 open(OUT,">configdata.pm") || die "unable to create configdata.pm: $!\n";
1537 #use vars qw(\@ISA \@EXPORT);
1538 our \@ISA = qw(Exporter);
1539 our \@EXPORT = qw(\%config \%target %withargs %unified_info);
1542 print OUT "our %config = (\n";
1543 foreach (sort keys %config) {
1544 if (ref($config{$_}) eq "ARRAY") {
1545 print OUT " ", $_, " => [ ", join(", ",
1546 map { quotify("perl", $_) }
1547 @{$config{$_}}), " ],\n";
1549 print OUT " ", $_, " => ", quotify("perl", $config{$_}), ",\n"
1556 print OUT "our %target = (\n";
1557 foreach (sort keys %target) {
1558 if (ref($target{$_}) eq "ARRAY") {
1559 print OUT " ", $_, " => [ ", join(", ",
1560 map { quotify("perl", $_) }
1561 @{$target{$_}}), " ],\n";
1563 print OUT " ", $_, " => ", quotify("perl", $target{$_}), ",\n"
1570 print OUT "our \%available_protocols = (\n";
1571 print OUT " tls => [ ", join(", ", map { quotify("perl", $_) } @tls), " ],\n";
1572 print OUT " dtls => [ ", join(", ", map { quotify("perl", $_) } @dtls), " ],\n";
1577 print OUT "our \%disabled = (\n";
1578 foreach (sort keys %disabled) {
1579 print OUT " ", quotify("perl", $_), " => ", quotify("perl", $disabled{$_}), ",\n";
1585 print OUT "our %withargs = (\n";
1586 foreach (sort keys %withargs) {
1587 if (ref($withargs{$_}) eq "ARRAY") {
1588 print OUT " ", $_, " => [ ", join(", ",
1589 map { quotify("perl", $_) }
1590 @{$withargs{$_}}), " ],\n";
1592 print OUT " ", $_, " => ", quotify("perl", $withargs{$_}), ",\n"
1599 if ($target{build_scheme}->[0] eq "unified") {
1604 if (ref $_ eq "ARRAY") {
1605 print OUT " "x$indent, "[\n";
1607 $recurse->($indent + 4, $_);
1609 print OUT " "x$indent, "],\n";
1610 } elsif (ref $_ eq "HASH") {
1612 print OUT " "x$indent, "{\n";
1613 foreach (sort keys %h) {
1614 if (ref $h{$_} eq "") {
1615 print OUT " "x($indent + 4), quotify("perl", $_), " => ", quotify("perl", $h{$_}), ",\n";
1617 print OUT " "x($indent + 4), quotify("perl", $_), " =>\n";
1618 $recurse->($indent + 8, $h{$_});
1621 print OUT " "x$indent, "},\n";
1623 print OUT " "x$indent, quotify("perl", $_), ",\n";
1627 print OUT "our %unified_info = (\n";
1628 foreach (sort keys %unified_info) {
1629 if (ref $unified_info{$_} eq "") {
1630 print OUT " "x4, quotify("perl", $_), " => ", quotify("perl", $unified_info{$_}), ",\n";
1632 print OUT " "x4, quotify("perl", $_), " =>\n";
1633 $recurse->(8, $unified_info{$_});
1644 die <<"EOF" if $target{build_scheme}->[0] ne "unified" && $srcdir ne $blddir;
1646 ***** Trying building anywhere else than in the source tree will not
1647 ***** work for target $config{target}. To make it possible, it needs
1648 ***** to use the "unified" build scheme.
1652 print "IsMK1MF =", ($target{build_scheme}->[0] eq "mk1mf" ? "yes" : "no"), "\n";
1653 print "CC =$target{cc}\n";
1654 print "CFLAG =$config{cflags}\n";
1655 print "LFLAGS =$config{lflags}\n";
1656 print "EX_LIBS =$config{ex_libs}\n";
1657 print "CPUID_OBJ =$target{cpuid_obj}\n";
1658 print "BN_ASM =$target{bn_obj}\n";
1659 print "EC_ASM =$target{ec_obj}\n";
1660 print "DES_ENC =$target{des_obj}\n";
1661 print "AES_ENC =$target{aes_obj}\n";
1662 print "BF_ENC =$target{bf_obj}\n";
1663 print "CAST_ENC =$target{cast_obj}\n";
1664 print "RC4_ENC =$target{rc4_obj}\n";
1665 print "RC5_ENC =$target{rc5_obj}\n";
1666 print "MD5_OBJ_ASM =$target{md5_obj}\n";
1667 print "SHA1_OBJ_ASM =$target{sha1_obj}\n";
1668 print "RMD160_OBJ_ASM=$target{rmd160_obj}\n";
1669 print "CMLL_ENC =$target{cmll_obj}\n";
1670 print "MODES_OBJ =$target{modes_obj}\n";
1671 print "PADLOCK_OBJ =$target{padlock_obj}\n";
1672 print "CHACHA_ENC =$target{chacha_obj}\n";
1673 print "POLY1305_OBJ =$target{poly1305_obj}\n";
1674 print "PROCESSOR =$config{processor}\n";
1675 print "RANLIB =$target{ranlib}\n";
1676 print "ARFLAGS =$target{arflags}\n";
1677 print "PERL =$config{perl}\n";
1679 print "SIXTY_FOUR_BIT_LONG mode\n" if $config{b64l};
1680 print "SIXTY_FOUR_BIT mode\n" if $config{b64};
1681 print "THIRTY_TWO_BIT mode\n" if $config{b32};
1682 print "BN_LLONG mode\n" if $config{bn_ll};
1683 print "RC4 uses $config{rc4_int}\n" if $config{rc4_int} != $def_int;
1685 make_path(catdir($blddir, "include/openssl"));
1686 run_dofile(catfile($blddir, "include/openssl/opensslconf.h"),
1687 catfile($srcdir, "include/openssl/opensslconf.h.in"));
1689 make_path(catdir($blddir, "crypto/include/internal"));
1690 foreach my $alg ( 'bn' ) {
1691 run_dofile(catfile($blddir, "crypto/include/internal/${alg}_conf.h"),
1692 catfile($srcdir, "crypto/include/internal/${alg}_conf.h.in"));
1696 ### When the old "unixmake" scheme goes away, so does this function
1698 sub build_Makefile {
1699 run_dofile("Makefile","Makefile.in");
1701 # Copy all Makefile.in to Makefile (except top-level)
1710 return if ($_ ne "Makefile.in" || $File::Find::dir eq ".");
1711 my $in = IO::File->new($_, "r") or
1712 die sprintf "Error reading Makefile.in in %s: !$\n",
1714 my $out = IO::File->new("Makefile", "w") or
1715 die sprintf "Error writing Makefile in %s: !$\n",
1717 print $out "# Generated from $_, do not edit\n";
1718 while (my $line = <$in>) { print $out $line }
1720 die sprintf "Error reading Makefile.in in %s: !$\n",
1723 die sprintf "Error writing Makefile in %s: !$\n",
1732 die "unified build currently does nothing";
1737 run_dofile("util/domd", "util/domd.in");
1738 chmod 0755, "util/domd";
1740 my $make_command = "$make PERL=\'$config{perl}\'";
1741 my $make_targets = "";
1742 $make_targets .= " depend" if $config{depflags} ne $default_depflags && $make_depend;
1743 (system $make_command.$make_targets) == 0 or die "make $make_targets failed"
1744 if $make_targets ne "";
1745 if ($config{depflags} ne $default_depflags && !$make_depend) {
1746 $warn_make_depend++;
1750 # The only reason we do this is to have something to build MINFO from
1753 open (OUT,">crypto/buildinf.h") || die "Can't open buildinf.h";
1756 /* auto-generated by Configure for crypto/cversion.c:
1757 * for Unix builds, crypto/Makefile.ssl generates functional definitions;
1758 * Windows builds (and other mk1mf builds) compile cversion.c with
1759 * -DMK1MF_BUILD and use definitions added to this file by util/mk1mf.pl. */
1760 #error "Windows builds (PLATFORM=$target) use mk1mf.pl-created Makefiles"
1765 # create the ms/version32.rc file if needed
1766 if (! grep /^netware/, @{$target{build_scheme}}) {
1767 my ($v1, $v2, $v3, $v4);
1768 if ($config{version_num} =~ /^0x([0-9a-f]{1})([0-9a-f]{2})([0-9a-f]{2})([0-9a-f]{2})([0-9a-f]{1})L$/i) {
1774 open (OUT,">ms/version32.rc") || die "Can't open ms/version32.rc";
1781 FILEVERSION $v1,$v2,$v3,$v4
1782 PRODUCTVERSION $v1,$v2,$v3,$v4
1789 FILEOS VOS__WINDOWS32
1793 BLOCK "StringFileInfo"
1798 VALUE "CompanyName", "The OpenSSL Project, http://www.openssl.org/\\0"
1799 VALUE "FileDescription", "OpenSSL Shared Library\\0"
1800 VALUE "FileVersion", "$config{version}\\0"
1802 VALUE "InternalName", "libeay32\\0"
1803 VALUE "OriginalFilename", "libeay32.dll\\0"
1805 VALUE "InternalName", "ssleay32\\0"
1806 VALUE "OriginalFilename", "ssleay32.dll\\0"
1808 VALUE "ProductName", "The OpenSSL Toolkit\\0"
1809 VALUE "ProductVersion", "$config{version}\\0"
1811 //VALUE "Comments", "\\0"
1812 VALUE "LegalCopyright", "Copyright © 1998-2015 The OpenSSL Project. Copyright © 1995-1998 Eric A. Young, Tim J. Hudson. All rights reserved.\\0"
1813 //VALUE "LegalTrademarks", "\\0"
1814 //VALUE "PrivateBuild", "\\0"
1815 //VALUE "SpecialBuild", "\\0"
1820 VALUE "Translation", 0x409, 0x4b0
1829 my ($builder, @builder_opts) = @{$target{build_scheme}};
1830 $builders{$builder}->(@builder_opts);
1834 Configured for $target.
1837 print <<"EOF" if (!$no_threads && !$threads);
1839 The library could not be configured for supporting multi-threaded
1840 applications as the compiler options required on this system are not known.
1841 See file INSTALL for details if you need multi-threading.
1844 print <<"EOF" if ($no_shared_warn);
1846 You gave the option 'shared', which is not supported on this platform, so
1847 we will pretend you gave the option 'no-shared'. If you know how to implement
1848 shared libraries, please let us know (but please first make sure you have
1849 tried with a current version of OpenSSL).
1852 print <<"EOF" if ($warn_make_depend);
1854 *** Because of configuration changes, you MUST do the following before
1862 ######################################################################
1864 # Helpers and utility functions
1867 # Configuration file reading #########################################
1869 # Helper function to implement conditional inheritance depending on the
1870 # value of $no_asm. Used in inherit_from values as follows:
1872 # inherit_from => [ "template", asm("asm_tmpl") ]
1881 # Helper function to implement adding values to already existing configuration
1882 # values. It handles elements that are ARRAYs, CODEs and scalars
1884 my $separator = shift;
1886 # If there's any ARRAY in the collection of values, we will return
1887 # an ARRAY of combined values, otherwise a string of joined values
1888 # with $separator as the separator.
1889 my $found_array = 0;
1893 if (ref($_) eq "ARRAY") {
1904 join($separator, @values);
1908 my $separator = shift;
1910 sub { _add($separator, @x, @_) };
1913 my $separator = shift;
1915 sub { _add($separator, @_, @x) };
1918 # configuration reader, evaluates the input file as a perl script and expects
1919 # it to fill %targets with target configurations. Those are then added to
1923 open(CONFFILE, "< $fname")
1924 or die "Can't open configuration file '$fname'!\n";
1927 my $content = <CONFFILE>;
1932 local %table = %::table; # Protect %table from tampering
1938 # For each target, check that it's configured with a hash table.
1939 foreach (keys %targets) {
1940 if (ref($targets{$_}) ne "HASH") {
1941 if (ref($targets{$_}) eq "") {
1942 warn "Deprecated target configuration for $_, ignoring...\n";
1944 warn "Misconfigured target configuration for $_ (should be a hash table), ignoring...\n";
1946 delete $targets{$_};
1950 %table = (%table, %targets);
1954 # configuration resolver. Will only resolve all the lazy evalutation
1955 # codeblocks for the chozen target and all those it inherits from,
1957 sub resolve_config {
1959 my @breadcrumbs = @_;
1961 if (grep { $_ eq $target } @breadcrumbs) {
1962 die "inherit_from loop! target backtrace:\n "
1963 ,$target,"\n ",join("\n ", @breadcrumbs),"\n";
1966 if (!defined($table{$target})) {
1967 warn "Warning! target $target doesn't exist!\n";
1970 # Recurse through all inheritances. They will be resolved on the
1971 # fly, so when this operation is done, they will all just be a
1972 # bunch of attributes with string values.
1973 # What we get here, though, are keys with references to lists of
1974 # the combined values of them all. We will deal with lists after
1975 # this stage is done.
1976 my %combined_inheritance = ();
1977 if ($table{$target}->{inherit_from}) {
1979 map { ref($_) eq "CODE" ? $_->() : $_ } @{$table{$target}->{inherit_from}};
1980 foreach (@inherit_from) {
1981 my %inherited_config = resolve_config($_, $target, @breadcrumbs);
1983 # 'template' is a marker that's considered private to
1984 # the config that had it.
1985 delete $inherited_config{template};
1988 if (!$combined_inheritance{$_}) {
1989 $combined_inheritance{$_} = [];
1991 push @{$combined_inheritance{$_}}, $inherited_config{$_};
1992 } keys %inherited_config;
1996 # We won't need inherit_from in this target any more, since we've
1997 # resolved all the inheritances that lead to this
1998 delete $table{$target}->{inherit_from};
2000 # Now is the time to deal with those lists. Here's the place to
2001 # decide what shall be done with those lists, all based on the
2002 # values of the target we're currently dealing with.
2003 # - If a value is a coderef, it will be executed with the list of
2004 # inherited values as arguments.
2005 # - If the corresponding key doesn't have a value at all or is the
2006 # emoty string, the inherited value list will be run through the
2007 # default combiner (below), and the result becomes this target's
2009 # - Otherwise, this target's value is assumed to be a string that
2010 # will simply override the inherited list of values.
2011 my $default_combiner = add(" ");
2014 map { $_ => 1 } (keys %combined_inheritance,
2015 keys %{$table{$target}});
2016 foreach (sort keys %all_keys) {
2018 # Current target doesn't have a value for the current key?
2019 # Assign it the default combiner, the rest of this loop body
2020 # will handle it just like any other coderef.
2021 if (!exists $table{$target}->{$_}) {
2022 $table{$target}->{$_} = $default_combiner;
2025 my $valuetype = ref($table{$target}->{$_});
2026 if ($valuetype eq "CODE") {
2027 # CODE reference, execute it with the inherited values as
2029 $table{$target}->{$_} =
2030 $table{$target}->{$_}->(@{$combined_inheritance{$_}});
2031 } elsif ($valuetype eq "ARRAY" || $valuetype eq "") {
2032 # ARRAY or Scalar, just leave it as is.
2034 # Some other type of reference that we don't handle.
2035 # Better to abort at this point.
2036 die "cannot handle reference type $valuetype,"
2037 ," found in target $target -> $_\n";
2041 # Finally done, return the result.
2042 return %{$table{$target}};
2047 print STDERR $usage;
2048 print STDERR "\npick os/compiler from:\n";
2052 foreach $i (sort keys %table)
2054 next if $table{$i}->{template};
2055 next if $i =~ /^debug/;
2056 $k += length($i) + 1;
2062 print STDERR $i . " ";
2064 foreach $i (sort keys %table)
2066 next if $table{$i}->{template};
2067 next if $i !~ /^debug/;
2068 $k += length($i) + 1;
2074 print STDERR $i . " ";
2076 print STDERR "\n\nNOTE: If in doubt, on Unix-ish systems use './config'.\n";
2085 unlink $out || warn "Can't remove $out, $!"
2087 foreach (@templates) {
2088 die "Can't open $_, $!" unless -f $_;
2090 my $cmd = "$config{perl} \"-I.\" \"-Mconfigdata\" $dofile -o\"Configure\" \"".join("\" \"",@templates)."\" > \"$out.new\"";
2091 #print STDERR "DEBUG[run_dofile]: \$cmd = $cmd\n";
2094 rename("$out.new", $out) || die "Can't rename $out.new, $!";
2097 # Configuration printer ##############################################
2099 sub print_table_entry
2102 my %target = resolve_config($target);
2105 # Don't print the templates
2106 return if $target{template};
2155 if ($type eq "TABLE") {
2157 print "*** $target\n";
2158 printf "\$%-12s = %s\n", $_, $target{$_} foreach (@sequence);
2159 } elsif ($type eq "HASH") {
2161 length((sort { length($a) <=> length($b) } @sequence)[-1]);
2162 print " '$target' => {\n";
2163 foreach (@sequence) {
2165 print " '",$_,"'"," " x ($largest - length($_))," => '",$target{$_},"',\n";
2172 # Utility routines ###################################################
2178 foreach $path (split /:/, $ENV{PATH})
2180 if (-f "$path/$name$target{exe_extension}" and -x _)
2182 return "$path/$name$target{exe_extension}" unless ($name eq "perl" and
2183 system("$path/$name$target{exe_extension} -e " . '\'exit($]<5.0);\''));
2190 perl => sub { my $x = shift;
2191 $x =~ s/([\\\$\@"])/\\$1/g;
2192 return '"'.$x.'"'; },
2196 defined($processors{$for}) ? $processors{$for} : sub { shift; };
2198 map { $processor->($_); } @_;
2201 # collect_from_file($filename, $line_concat_cond_re, $line_concat)
2202 # $filename is a file name to read from
2203 # $line_concat_cond_re is a regexp detecting a line continuation ending
2204 # $line_concat is a CODEref that takes care of concatenating two lines
2205 sub collect_from_file {
2206 my $filename = shift;
2207 my $line_concat_cond_re = shift;
2208 my $line_concat = shift;
2210 open my $fh, $filename || die "unable to read $filename: $!\n";
2212 my $saved_line = "";
2216 if (defined $line_concat) {
2217 $_ = $line_concat->($saved_line, $_);
2220 if (defined $line_concat_cond_re && /$line_concat_cond_re/) {
2226 die "$filename ending with continuation line\n" if $_;
2232 # collect_from_array($array, $line_concat_cond_re, $line_concat)
2233 # $array is an ARRAYref of lines
2234 # $line_concat_cond_re is a regexp detecting a line continuation ending
2235 # $line_concat is a CODEref that takes care of concatenating two lines
2236 sub collect_from_array {
2238 my $line_concat_cond_re = shift;
2239 my $line_concat = shift;
2240 my @array = (@$array);
2243 my $saved_line = "";
2245 while (defined($_ = shift @array)) {
2247 if (defined $line_concat) {
2248 $_ = $line_concat->($saved_line, $_);
2251 if (defined $line_concat_cond_re && /$line_concat_cond_re/) {
2257 die "input text ending with continuation line\n" if $_;
2262 # collect_information($lineiterator, $line_continue, $regexp => $CODEref, ...)
2263 # $lineiterator is a CODEref that delivers one line at a time.
2264 # All following arguments are regex/CODEref pairs, where the regexp detects a
2265 # line and the CODEref does something with the result of the regexp.
2266 sub collect_information {
2267 my $lineiterator = shift;
2268 my %collectors = @_;
2270 while(defined($_ = $lineiterator->())) {
2273 foreach my $re (keys %collectors) {
2274 if ($re ne "OTHERWISE" && /$re/) {
2275 $collectors{$re}->($lineiterator);
2279 if ($collectors{"OTHERWISE"}) {
2280 $collectors{"OTHERWISE"}->($lineiterator, $_)
2281 unless $found || !defined $collectors{"OTHERWISE"};