5 ## Configure -- OpenSSL source tree configuration script
6 ## If editing this file, run this command before committing
7 ## make -f Makefile.in TABLE
13 use File::Spec::Functions qw/:DEFAULT abs2rel rel2abs/;
14 use File::Path qw/mkpath/;
16 # see INSTALL for instructions.
18 my $usage="Usage: Configure [no-<cipher> ...] [enable-<cipher> ...] [experimental-<cipher> ...] [-Dxxx] [-lxxx] [-Lxxx] [-fxxx] [-Kxxx] [no-hw-xxx|no-hw] [[no-]threads] [[no-]shared] [[no-]zlib|zlib-dynamic] [no-asm] [no-dso] [no-egd] [sctp] [386] [--prefix=DIR] [--openssldir=OPENSSLDIR] [--with-xxx[=vvv]] [--config=FILE] os/compiler[:flags]\n";
22 # --config add the given configuration file, which will be read after
23 # any "Configurations*" files that are found in the same
24 # directory as this script.
25 # --prefix prefix for the OpenSSL installation, which includes the
26 # directories bin, lib, include, share/man, share/doc/openssl
27 # This becomes the value of INSTALLTOP in Makefile
28 # (Default: /usr/local)
29 # --openssldir OpenSSL data area, such as openssl.cnf, certificates and keys.
30 # If it's a relative directory, it will be added on the directory
31 # given with --prefix.
32 # This becomes the value of OPENSSLDIR in Makefile and in C.
33 # (Default: PREFIX/ssl)
35 # --cross-compile-prefix Add specified prefix to binutils components.
37 # --api One of 0.9.8, 1.0.0 or 1.1.0. Do not compile support for
38 # interfaces deprecated as of the specified OpenSSL version.
40 # no-hw-xxx do not compile support for specific crypto hardware.
41 # Generic OpenSSL-style methods relating to this support
42 # are always compiled but return NULL if the hardware
43 # support isn't compiled.
44 # no-hw do not compile support for any crypto hardware.
45 # [no-]threads [don't] try to create a library that is suitable for
46 # multithreaded applications (default is "threads" if we
48 # [no-]shared [don't] try to create shared libraries when supported.
49 # no-asm do not use assembler
50 # no-dso do not compile in any native shared-library methods. This
51 # will ensure that all methods just return NULL.
52 # no-egd do not compile support for the entropy-gathering daemon APIs
53 # [no-]zlib [don't] compile support for zlib compression.
54 # zlib-dynamic Like "zlib", but the zlib library is expected to be a shared
55 # library and will be loaded in run-time by the OpenSSL library.
56 # sctp include SCTP support
57 # 386 generate 80386 code
58 # no-sse2 disables IA-32 SSE2 code, above option implies no-sse2
59 # no-<cipher> build without specified algorithm (rsa, idea, rc5, ...)
60 # -<xxx> +<xxx> compiler options are passed through
62 # DEBUG_SAFESTACK use type-safe stacks to enforce type-safety on stack items
63 # provided to stack calls. Generates unique stack functions for
64 # each possible stack type.
65 # BN_LLONG use the type 'long long' in crypto/bn/bn.h
66 # RC4_CHAR use 'char' instead of 'int' for RC4_INT in crypto/rc4/rc4.h
67 # Following are set automatically by this script
69 # MD5_ASM use some extra md5 assember,
70 # SHA1_ASM use some extra sha1 assember, must define L_ENDIAN for x86
71 # RMD160_ASM use some extra ripemd160 assember,
72 # SHA256_ASM sha256_block is implemented in assembler
73 # SHA512_ASM sha512_block is implemented in assembler
74 # AES_ASM ASE_[en|de]crypt is implemented in assembler
76 # Minimum warning options... any contributions to OpenSSL should at least get
79 my $gcc_devteam_warn = "-DPEDANTIC -DREF_DEBUG -DDEBUG_UNUSED"
84 . " -Wmissing-prototypes"
91 # These are used in addition to $gcc_devteam_warn when the compiler is clang.
92 # TODO(openssl-team): fix problems and investigate if (at least) the
93 # following warnings can also be enabled:
98 # -Wlanguage-extension-token
100 my $clang_devteam_warn = ""
101 . " -Qunused-arguments"
103 . " -Wno-unused-parameter"
104 . " -Wno-missing-field-initializers"
105 . " -Wno-language-extension-token"
106 . " -Wno-extended-offsetof"
107 . " -Wconditional-uninitialized"
108 . " -Wincompatible-pointer-types-discards-qualifiers"
109 . " -Wmissing-variable-declarations"
112 # This adds backtrace information to the memory leak info. Is only used
113 # when crypto-mdebug-backtrace is enabled.
114 my $memleak_devteam_backtrace = "-rdynamic";
116 my $strict_warnings = 0;
118 # As for $BSDthreads. Idea is to maintain "collective" set of flags,
119 # which would cover all BSD flavors. -pthread applies to them all,
120 # but is treated differently. OpenBSD expands is as -D_POSIX_THREAD
121 # -lc_r, which is sufficient. FreeBSD 4.x expands it as -lc_r,
122 # which has to be accompanied by explicit -D_THREAD_SAFE and
123 # sometimes -D_REENTRANT. FreeBSD 5.x expands it as -lc_r, which
124 # seems to be sufficient?
125 my $BSDthreads="-pthread -D_THREAD_SAFE -D_REENTRANT";
128 # API compability name to version number mapping.
130 my $maxapi = "1.1.0"; # API for "no-deprecated" builds
132 "1.1.0" => "0x10100000L",
133 "1.0.0" => "0x10000000L",
134 "0.9.8" => "0x00908000L",
137 my $base_target = "BASE"; # The template that all other inherit from
141 # Forward declarations ###############################################
143 # read_config(filename)
145 # Reads a configuration file and populates %table with the contents
146 # (which the configuration file places in %targets).
149 # resolve_config(target)
151 # Resolves all the late evalutations, inheritances and so on for the
152 # chosen target and any target it inherits from.
156 # Information collection #############################################
158 # Unified build supports separate build dir
159 my $srcdir = catdir(absolutedir(dirname($0))); # catdir ensures local syntax
160 my $blddir = catdir(absolutedir(".")); # catdir ensures local syntax
161 my $dofile = abs2rel(catfile($srcdir, "util/dofile.pl"));
163 $config{sourcedir} = abs2rel($srcdir);
164 $config{builddir} = abs2rel($blddir);
166 # Collect version numbers
167 $config{version} = "unknown";
168 $config{version_num} = "unknown";
169 $config{shlib_version_number} = "unknown";
170 $config{shlib_version_history} = "unknown";
173 collect_from_file(catfile($srcdir,'include/openssl/opensslv.h')),
174 qr/OPENSSL.VERSION.TEXT.*OpenSSL (\S+) / => sub { $config{version} = $1; },
175 qr/OPENSSL.VERSION.NUMBER.*(0x\S+)/ => sub { $config{version_num}=$1 },
176 qr/SHLIB_VERSION_NUMBER *"([^"]+)"/ => sub { $config{shlib_version_number}=$1 },
177 qr/SHLIB_VERSION_HISTORY *"([^"]*)"/ => sub { $config{shlib_version_history}=$1 }
179 if ($config{shlib_version_history} ne "") { $config{shlib_version_history} .= ":"; }
181 ($config{major}, $config{minor})
182 = ($config{version} =~ /^([0-9]+)\.([0-9\.]+)/);
183 ($config{shlib_major}, $config{shlib_minor})
184 = ($config{shlib_version_number} =~ /^([0-9]+)\.([0-9\.]+)/);
185 die "erroneous version information in opensslv.h: ",
186 "$config{major}, $config{minor}, $config{shlib_major}, $config{shlib_minor}\n"
187 if ($config{major} eq "" || $config{minor} eq ""
188 || $config{shlib_major} eq "" || $config{shlib_minor} eq "");
190 # Collect target configurations
192 my $pattern = catfile(dirname($0), "Configurations", "*.conf");
193 foreach (sort glob($pattern) ) {
198 print "Configuring OpenSSL version $config{version} (0x$config{version_num})\n";
202 $config{openssldir}="";
203 $config{processor}="";
205 $config{cross_compile_prefix}="";
206 $config{fipslibdir}="/usr/local/ssl/fips-2.0/lib/";
207 my $nofipscanistercheck=0;
208 $config{baseaddr}="0xFB00000";
211 $config{no_shared}=0; # but "no-shared" is default
212 my $zlib=1; # but "no-zlib" is default
219 # Top level directories to build
220 $config{dirs} = [ "crypto", "ssl", "engines", "apps", "test", "tools" ];
221 # crypto/ subdirectories to build
224 "md2", "md4", "md5", "sha", "mdc2", "hmac", "ripemd", "whrlpool", "poly1305",
225 "des", "aes", "rc2", "rc4", "rc5", "idea", "bf", "cast", "camellia", "seed", "chacha", "modes",
226 "bn", "ec", "rsa", "dsa", "dh", "dso", "engine",
227 "buffer", "bio", "stack", "lhash", "rand", "err",
228 "evp", "asn1", "pem", "x509", "x509v3", "conf", "txt_db", "pkcs7", "pkcs12", "comp", "ocsp", "ui",
229 "cms", "ts", "srp", "cmac", "ct", "async", "kdf"
232 # Known TLS and DTLS protocols
233 my @tls = qw(ssl3 tls1 tls1_1 tls1_2);
234 my @dtls = qw(dtls1 dtls1_2);
236 # Explicitelly known options that are possible to disable. They can
237 # be regexps, and will be used like this: /^no-${option}$/
238 # For developers: keep it sorted alphabetically
255 "crypto-mdebug-backtrace",
269 "ec_nistp_64_gcc_128",
294 "rijndael", # Old AES name
321 foreach my $proto ((@tls, @dtls))
323 push(@disablables, $proto);
324 push(@disablables, "$proto-method");
327 # All of the following is disabled by default (RC5 was enabled before 0.9.8):
329 my %disabled = ( # "what" => "comment" [or special keyword "experimental"]
330 "ec_nistp_64_gcc_128" => "default",
335 "shared" => "default",
336 "ssl-trace" => "default",
337 "unit-test" => "default",
339 "crypto-mdebug" => "default",
340 "heartbeats" => "default",
342 my @experimental = ();
344 # Note: => pair form used for aesthetics, not to truly make a hash table
345 my @disable_cascades = (
346 # "what" => [ "cascade", ... ]
347 sub { $config{processor} eq "386" }
350 "ssl3-method" => [ "ssl3" ],
351 "zlib" => [ "zlib-dynamic" ],
352 "rijndael" => [ "aes" ],
354 "ec" => [ "ecdsa", "ecdh" ],
356 "dgram" => [ "dtls" ],
359 # SSL 3.0, (D)TLS 1.0 and TLS 1.1 require MD5 and SHA
360 "md5" => [ "ssl", "tls1", "tls1_1", "dtls1" ],
361 "sha" => [ "ssl", "tls1", "tls1_1", "dtls1" ],
363 # Additionally, SSL 3.0 requires either RSA or DSA+DH
365 && ($disabled{dsa} || $disabled{dh}); }
368 # (D)TLS 1.0 and TLS 1.1 also require either RSA or DSA+DH
369 # or ECDSA + ECDH. (D)TLS 1.2 has this requirement as well.
370 # (XXX: We don't support PSK-only builds).
372 && ($disabled{dsa} || $disabled{dh})
373 && ($disabled{ecdsa} || $disabled{ecdh}); }
374 => [ "tls1", "tls1_1", "tls1_2",
375 "dtls1", "dtls1_2" ],
379 # SRP and HEARTBEATS require TLSEXT
380 "tlsext" => [ "srp", "heartbeats" ],
382 "crypto-mdebug" => [ "crypto-mdebug-backtrace" ],
385 # Avoid protocol support holes. Also disable all versions below N, if version
386 # N is disabled while N+1 is enabled.
388 my @list = (reverse @tls);
389 while ((my $first, my $second) = (shift @list, shift @list)) {
391 push @disable_cascades, ( sub { !$disabled{$first} && $disabled{$second} }
393 unshift @list, $second;
395 my @list = (reverse @dtls);
396 while ((my $first, my $second) = (shift @list, shift @list)) {
398 push @disable_cascades, ( sub { !$disabled{$first} && $disabled{$second} }
400 unshift @list, $second;
403 # Construct the string of what $config{depdefines} should look like with
404 # the defaults from %disabled above. (we need this to see if we should
405 # advise the user to run "make depend"):
406 my @default_depdefines =
407 map { my $x = $_; $x =~ tr{[a-z]-}{[A-Z]_}; "OPENSSL_NO_$x"; }
408 grep { $disabled{$_} !~ /\(no-depdefines\)$/ }
411 # Explicit "no-..." options will be collected in %disabled along with the defaults.
412 # To remove something from %disabled, use "enable-foo" (unless it's experimental).
413 # For symmetry, "disable-foo" is a synonym for "no-foo".
415 # For features called "experimental" here, a more explicit "experimental-foo" is needed to enable.
416 # We will collect such requests in @experimental.
417 # To avoid accidental use of experimental features, applications will have to use -DOPENSSL_EXPERIMENTAL_FOO.
419 my @generated_headers = (
420 "include/openssl/opensslconf.h",
421 "crypto/include/internal/bn_conf.h"
424 my @generated_by_make_headers = (
431 &usage if ($#ARGV < 0);
436 $config{depdefines}=[];
437 $config{openssl_experimental_defines}=[];
438 $config{openssl_api_defines}=[];
439 $config{openssl_algorithm_defines}=[];
440 $config{openssl_thread_defines}=[];
441 $config{openssl_sys_defines}=[];
442 $config{openssl_other_defines}=[];
447 my $build_prefix = "release_";
451 if (grep /^reconf(igure)?$/, @argvcopy) {
452 if (-f "./configdata.pm") {
453 my $file = "./configdata.pm";
454 unless (my $return = do $file) {
455 die "couldn't parse $file: $@" if $@;
456 die "couldn't do $file: $!" unless defined $return;
457 die "couldn't run $file" unless $return;
460 @argvcopy = defined($configdata::config{perlargv}) ?
461 @{$configdata::config{perlargv}} : ();
462 die "Incorrect data to reconfigure, please do a normal configuration\n"
463 if (grep(/^reconf/,@argvcopy));
464 $ENV{CROSS_COMPILE} = $configdata::config{cross_compile_prefix}
465 if defined($configdata::config{cross_compile_prefix});
466 $ENV{CROSS_COMPILE} = $configdata::config{cc}
467 if defined($configdata::config{cc});
469 print "Reconfiguring with: ", join(" ",@argvcopy), "\n";
470 print " CROSS_COMPILE = ",$ENV{CROSS_COMPILE},"\n"
471 if $ENV{CROSS_COMPILE};
472 print " CC = ",$ENV{CC},"\n" if $ENV{CC};
473 } elsif (open IN, "<Makefile") {
475 # THIS SECTION IS TEMPORARY, it helps transitioning from Makefile
476 # centered information gathering the reading configdata.pm
480 if (/^CONFIGURE_ARGS=\s*(.*)\s*/) {
481 # Older form, we split the string and hope for the best
482 @argvcopy = split /\s+/, $_;
483 die "Incorrect data to reconfigure, please do a normal configuration\n"
484 if (grep(/^reconf/,@argvcopy));
485 } elsif (/^CROSS_COMPILE=\s*(.*)/) {
486 $ENV{CROSS_COMPILE}=$1;
487 } elsif (/^CC=\s*(?:\$\(CROSS_COMPILE\))?(.*?)$/) {
492 # END OF TEMPORARY SECTION
495 die "Insufficient data to reconfigure, please do a normal configuration\n";
499 $config{perlargv} = [ @argvcopy ];
501 my %unsupported_options = ();
504 # VMS is a case insensitive environment, and depending on settings
505 # out of our control, we may receive options uppercased. Let's
506 # downcase at least the part before any equal sign.
511 s /^-no-/no-/; # some people just can't read the instructions
513 # rewrite some options in "enable-..." form
514 s /^-?-?shared$/enable-shared/;
515 s /^sctp$/enable-sctp/;
516 s /^threads$/enable-threads/;
517 s /^zlib$/enable-zlib/;
518 s /^zlib-dynamic$/enable-zlib-dynamic/;
520 if (/^(no|disable|enable|experimental)-(.+)$/)
523 if (!grep { $word =~ /^${_}$/ } @disablables)
525 $unsupported_options{$_} = 1;
529 if (/^no-(.+)$/ || /^disable-(.+)$/)
531 if (!($disabled{$1} eq "experimental"))
533 foreach my $proto ((@tls, @dtls))
535 if ($1 eq "$proto-method")
537 $disabled{"$proto"} = "option($proto-method)";
543 foreach my $proto (@dtls)
545 $disabled{$proto} = "option(dtls)";
550 # Last one of its kind
551 $disabled{"ssl3"} = "option(ssl)";
555 # XXX: Tests will fail if all SSL/TLS
556 # protocols are disabled.
557 foreach my $proto (@tls)
559 $disabled{$proto} = "option(tls)";
564 $disabled{$1} = "option";
568 elsif (/^enable-(.+)$/ || /^experimental-(.+)$/)
571 if ($disabled{$algo} eq "experimental")
573 die "You are requesting an experimental feature; please say 'experimental-$algo' if you are sure\n"
574 unless (/^experimental-/);
575 push @experimental, $algo;
577 delete $disabled{$algo};
579 $threads = 1 if ($algo eq "threads");
581 elsif (/^--strict-warnings$/)
583 $strict_warnings = 1;
587 $build_prefix = "debug_";
589 elsif (/^--release$/)
591 $build_prefix = "release_";
594 { $config{processor}=386; }
601 # No RSAref support any more since it's not needed.
602 # The check for the option is there so scripts aren't
605 elsif (/^nofipscanistercheck$/)
608 $nofipscanistercheck = 1;
616 elsif (/^--prefix=(.*)$/)
619 die "Directory given with --prefix MUST be absolute\n"
620 unless file_name_is_absolute($config{prefix});
622 elsif (/^--api=(.*)$/)
626 elsif (/^--libdir=(.*)$/)
630 elsif (/^--openssldir=(.*)$/)
632 $config{openssldir}=$1;
634 elsif (/^--with-zlib-lib=(.*)$/)
636 $withargs{zlib_lib}=$1;
638 elsif (/^--with-zlib-include=(.*)$/)
640 $withargs{zlib_include}="-I$1";
642 elsif (/^--with-fipslibdir=(.*)$/)
644 $config{fipslibdir}="$1/";
646 elsif (/^--with-baseaddr=(.*)$/)
648 $config{baseaddr}="$1";
650 elsif (/^--cross-compile-prefix=(.*)$/)
652 $config{cross_compile_prefix}=$1;
654 elsif (/^--config=(.*)$/)
658 elsif (/^-[lL](.*)$/ or /^-Wl,/)
664 push @user_defines, $1;
666 else # common if (/^[-+]/), just pass down...
668 $_ =~ s/%([0-9a-f]{1,2})/chr(hex($1))/gei;
669 $user_cflags.=" ".$_;
672 elsif ($_ =~ /^([^:]+):(.+)$/)
674 eval "\$table{\$1} = \"$2\""; # allow $xxx constructs in the string
679 die "target already defined - $target (offending arg: $_)\n" if ($target ne "");
682 unless ($_ eq $target || /^no-/ || /^disable-/)
684 # "no-..." follows later after implied disactivations
685 # have been derived. (Don't take this too seroiusly,
686 # we really only write OPTIONS to the Makefile out of
689 if ($config{options} eq "")
690 { $config{options} = $_; }
692 { $config{options} .= " ".$_; }
695 if (defined($config{api}) && !exists $apitable->{$config{api}}) {
696 die "***** Unsupported api compatibility level: $config{api}\n",
699 if (keys %unsupported_options)
701 die "***** Unsupported options: ",
702 join(", ", keys %unsupported_options), "\n";
708 delete $disabled{"shared"} if ($disabled{"shared"} =~ /^default/);
712 @{$config{dirs}} = grep !/^fips$/, @{$config{dirs}};
715 my @tocheckfor = (keys %disabled);
716 while (@tocheckfor) {
717 my %new_tocheckfor = ();
718 my @cascade_copy = (@disable_cascades);
719 while (@cascade_copy) {
720 my ($test, $descendents) = (shift @cascade_copy, shift @cascade_copy);
721 if (ref($test) eq "CODE" ? $test->() : defined($disabled{$test})) {
723 $new_tocheckfor{$_} => 1; $disabled{$_} = "forced";
724 } grep { !defined($disabled{$_}) } @$descendents;
727 @tocheckfor = (keys %new_tocheckfor);
730 if ($target eq "TABLE") {
731 foreach (sort keys %table) {
732 print_table_entry($_, "TABLE");
737 if ($target eq "LIST") {
738 foreach (sort keys %table) {
739 print $_,"\n" unless $table{$_}->{template};
744 if ($target eq "HASH") {
745 print "%table = (\n";
746 foreach (sort keys %table) {
747 print_table_entry($_, "HASH");
752 # Backward compatibility?
753 if ($target =~ m/^CygWin32(-.*)$/) {
754 $target = "Cygwin".$1;
757 foreach (sort (keys %disabled))
759 $config{options} .= " no-$_";
761 printf " no-%-12s %-10s", $_, "[$disabled{$_}]";
768 { $config{no_shared} = 1; }
771 elsif (/^static-engine$/)
773 elsif (/^zlib-dynamic$/)
779 @{$config{dirs}} = grep !/^engines$/, @{$config{dirs}};
780 @{$config{sdirs}} = grep !/^engine$/, @{$config{sdirs}};
781 push @{$config{openssl_other_defines}}, "OPENSSL_NO_ENGINE";
786 ($ALGO = $algo = $_) =~ tr/[\-a-z]/[_A-Z]/;
788 if (/^asm$/ || /^err$/ || /^hw$/ || /^hw-/
789 || /^autoalginit/ || /^autoerrinit/)
791 push @{$config{openssl_other_defines}}, "OPENSSL_NO_$ALGO";
792 print " OPENSSL_NO_$ALGO";
794 if (/^err$/) { push @user_defines, "OPENSSL_NO_ERR"; }
795 elsif (/^asm$/) { $no_asm = 1; }
799 ($ALGO,$algo) = ("RMD160","rmd160") if ($algo eq "ripemd");
801 push @{$config{openssl_algorithm_defines}}, "OPENSSL_NO_$ALGO";
802 push @{$config{depdefines}}, "OPENSSL_NO_$ALGO";
803 print " OPENSSL_NO_$ALGO";
805 # fix-up crypto/directory name(s)
806 $algo="whrlpool" if $algo eq "whirlpool";
807 $algo="ripemd" if $algo eq "rmd160";
808 @{$config{sdirs}} = grep { $_ ne $algo} @{$config{sdirs}};
817 foreach (sort @experimental)
820 ($ALGO = $_) =~ tr/[a-z]/[A-Z]/;
822 # opensslconf.h will set OPENSSL_NO_... unless OPENSSL_EXPERIMENTAL_... is defined
823 push @{$config{openssl_experimental_defines}}, "OPENSSL_NO_$ALGO";
826 print "Configuring for $target\n";
828 # Support for legacy targets having a name starting with 'debug-'
829 my ($d, $t) = $target =~ m/^(debug-)?(.*)$/;
831 $build_prefix = "debug_";
833 # If we do not find debug-foo in the table, the target is set to foo.
834 if (!$table{$target}) {
838 $config{target} = $target;
839 delete $table{$base_target}->{template}; # or the next test will fail.
840 my %target = ( %{$table{$base_target}}, resolve_config($target) );
842 &usage if (!%target || $target{template});
844 $target{exe_extension}="";
845 $target{exe_extension}=".exe" if ($config{target} eq "Cygwin" || $config{target} eq "DJGPP" || $config{target} =~ /^mingw/);
846 $target{exe_extension}=".nlm" if ($config{target} =~ /netware/);
847 $target{exe_extension}=".pm" if ($config{target} =~ /vos/);
849 $default_ranlib = which("ranlib") || "true";
850 $config{perl} = $ENV{'PERL'} || which("perl5") || which("perl") || "perl";
851 my $make = $ENV{'MAKE'} || "make";
853 $config{cross_compile_prefix} = $ENV{'CROSS_COMPILE'}
854 if $config{cross_compile_prefix} eq "";
856 # Allow environment CC to override compiler...
857 $target{cc} = $ENV{CC} || $target{cc};
859 # For cflags, lflags, plib_lflags, ex_libs and defines, add the debug_
860 # or release_ attributes.
861 # Do it in such a way that no spurious space is appended (hence the grep).
862 $config{defines} = [ @{$target{defines}},
863 @{$target{$build_prefix."defines"}} ];
864 $config{cflags} = join(" ",
865 grep { $_ ne "" } ($target{cflags},
866 $target{$build_prefix."cflags"}));
867 $config{lflags} = join(" ",
868 grep { $_ ne "" } ($target{lflags},
869 $target{$build_prefix."lflags"}));
870 $config{plib_lflags} = join(" ",
871 grep { $_ ne "" } ($target{plib_lflags},
872 $target{$build_prefix."plib_lflags"}));
873 $config{ex_libs} = join(" ",
874 grep { $_ ne "" } ($target{ex_libs},
875 $target{$build_prefix."ex_libs"}));
877 $target{ranlib} = $ENV{'RANLIB'} || $target{ranlib} || $default_ranlib;
878 $target{ar} = $ENV{'AR'} || "ar";
879 $target{arflags} = "" if !defined($target{arflags});
881 # Make sure build_scheme is consistent.
882 $target{build_scheme} = [ $target{build_scheme} ]
883 if ref($target{build_scheme}) ne "ARRAY";
885 ###### TO BE REMOVED BEFORE FINAL RELEASE
887 ###### If the user has chosen --unified, we give it to them.
888 if ($target{build_file} eq "Makefile"
889 && $target{build_scheme}->[0] eq "unixmake"
891 $target{build_scheme} = [ "unified", "unix" ];
894 my ($builder, $builder_platform, @builder_opts) =
895 @{$target{build_scheme}};
897 push @{$config{defines}},
898 map { (my $x = $_) =~ s/^OPENSSL_NO_/OPENSSL_EXPERIMENTAL_/; $x }
899 @{$config{openssl_experimental_defines}};
901 if ($target =~ /^mingw/ && `$target{cc} --target-help 2>&1` =~ m/-mno-cygwin/m)
903 $config{cflags} .= " -mno-cygwin";
904 $target{shared_ldflag} .= " -mno-cygwin";
907 if ($target =~ /linux.*-mips/ && !$no_asm && $user_cflags !~ /-m(ips|arch=)/) {
908 # minimally required architecture flags for assembly modules
909 $config{cflags}="-mips2 $config{cflags}" if ($target =~ /mips32/);
910 $config{cflags}="-mips3 $config{cflags}" if ($target =~ /mips64/);
913 my $no_shared_warn=0;
914 my $no_user_cflags=0;
915 my $no_user_defines=0;
917 # The DSO code currently always implements all functions so that no
918 # applications will have to worry about that from a compilation point
919 # of view. However, the "method"s may return zero unless that platform
920 # has support compiled in for them. Currently each method is enabled
921 # by a define "DSO_<name>" ... we translate the "dso_scheme" config
922 # string entry into using the following logic;
923 if (!$no_dso && $target{dso_scheme} ne "")
925 $target{dso_scheme} =~ tr/[a-z]/[A-Z]/;
926 if ($target{dso_scheme} eq "DLFCN")
928 $config{defines} = [ "DSO_DLFCN", "HAVE_DLFCN_H",
929 @{$config{defines}} ]
931 elsif ($target{dso_scheme} eq "DLFCN_NO_H")
933 $config{defines} = [ "DSO_DLFCN", @{$config{defines}} ]
937 $config{defines} = [ "DSO_$target{dso_scheme}",
938 @{$config{defines}} ]
942 my $thread_cflags = "";
944 if ($target{thread_cflag} ne "(unknown)" && !$no_threads)
946 # If we know how to do it, support threads by default.
949 if ($target{thread_cflag} eq "(unknown)" && $threads)
951 # If the user asked for "threads", [s]he is also expected to
952 # provide any system-dependent compiler options that are
954 if ($no_user_cflags && $no_user_defines)
956 print "You asked for multi-threading support, but didn't\n";
957 print "provide any system-specific compiler options\n";
960 push @thread_defines, "OPENSSL_THREADS";
964 $thread_cflags=" $target{thread_cflag}";
965 push @thread_defines, @{$target{thread_defines}}, "OPENSSL_THREADS";
968 $config{ex_libs}="$libs$config{ex_libs}" if ($libs ne "");
972 @{$config{defines}} = grep !/^[BL]_ENDIAN$/, @{$config{defines}}
978 $config{cflags} = "$thread_cflags $config{cflags}" if $thread_cflags;
979 push @{$config{defines}}, @thread_defines;
980 push @{$config{openssl_thread_defines}}, @thread_defines;
985 push @{$config{defines}}, "ZLIB";
986 if (defined($disabled{"zlib-dynamic"}))
988 if (defined($withargs{zlib_lib}))
990 $config{ex_libs} .= " -L" . $withargs{zlib_lib} . " -lz";
994 $config{ex_libs} .= " -lz";
999 push @{$config{defines}}, "ZLIB_SHARED";
1003 # With "deprecated" disable all deprecated features.
1004 if (defined($disabled{"deprecated"})) {
1005 $config{api} = $maxapi;
1008 if ($target{shared_target} eq "")
1010 $no_shared_warn = 1 if !$config{no_shared} && !$config{fips};
1011 $config{no_shared} = 1;
1013 if (!$config{no_shared})
1015 if ($target{shared_cflag} ne "")
1017 push @{$config{defines}}, "OPENSSL_PIC";
1018 $config{cflags} = "$target{shared_cflag} $config{cflags}";
1022 if ($builder ne "mk1mf")
1024 # add {no-}static-engine to options to allow mkdef.pl to work without extra arguments
1025 if ($config{no_shared})
1027 push @{$config{openssl_other_defines}}, "OPENSSL_NO_DYNAMIC_ENGINE";
1028 $config{options}.=" static-engine";
1032 push @{$config{openssl_other_defines}}, "OPENSSL_NO_STATIC_ENGINE";
1033 $config{options}.=" no-static-engine";
1040 if ($target{sys_id} ne "")
1042 push @{$config{openssl_sys_defines}}, "OPENSSL_SYS_$target{sys_id}";
1045 if ($target{ranlib} eq "")
1047 $target{ranlib} = $default_ranlib;
1051 $target{cpuid_asm_src}=$table{BASE}->{cpuid_asm_src} if ($config{processor} eq "386");
1052 $target{cpuid_asm_src}.=" uplink.c uplink-x86.s"
1053 if (grep { $_ eq "OPENSSL_USE_APPLINK"} @{$config{defines}}
1054 || grep /(^|\s)-DOPENSSL_USE_APPLINK(\s|$)/, ${$config{cflags}});
1056 $target{bn_asm_src} =~ s/\w+-gf2m.c// if (defined($disabled{ec2m}));
1058 # bn-586 is the only one implementing bn_*_part_words
1059 push @{$config{defines}}, "OPENSSL_BN_ASM_PART_WORDS" if ($target{bn_asm_src} =~ /bn-586/);
1060 push @{$config{defines}}, "OPENSSL_IA32_SSE2" if (!$no_sse2 && $target{bn_asm_src} =~ /86/);
1062 push @{$config{defines}}, "OPENSSL_BN_ASM_MONT" if ($target{bn_asm_src} =~ /-mont/);
1063 push @{$config{defines}}, "OPENSSL_BN_ASM_MONT5" if ($target{bn_asm_src} =~ /-mont5/);
1064 push @{$config{defines}}, "OPENSSL_BN_ASM_GF2m" if ($target{bn_asm_src} =~ /-gf2m/);
1066 if ($config{fips}) {
1067 push @{$config{openssl_other_defines}}, "OPENSSL_FIPS";
1070 if ($target{sha1_asm_src}) {
1071 push @{$config{defines}}, "SHA1_ASM" if ($target{sha1_asm_src} =~ /sx86/ || $target{sha1_asm_src} =~ /sha1/);
1072 push @{$config{defines}}, "SHA256_ASM" if ($target{sha1_asm_src} =~ /sha256/);
1073 push @{$config{defines}}, "SHA512_ASM" if ($target{sha1_asm_src} =~ /sha512/);
1075 if ($target{md5_asm_src}) {
1076 push @{$config{defines}}, "MD5_ASM";
1078 $target{cast_asm_src}=$table{BASE}->{cast_asm_src} if (!$config{no_shared}); # CAST assembler is not PIC
1079 if ($target{rmd160_asm_src}) {
1080 push @{$config{defines}}, "RMD160_ASM";
1082 if ($target{aes_asm_src}) {
1083 push @{$config{defines}}, "AES_ASM" if ($target{aes_asm_src} =~ m/\baes-/);;
1084 # aes-ctr.fake is not a real file, only indication that assembler
1085 # module implements AES_ctr32_encrypt...
1086 push @{$config{defines}}, "AES_CTR_ASM" if ($target{aes_asm_src} =~ s/\s*aes-ctr\.fake//);
1087 # aes-xts.fake indicates presence of AES_xts_[en|de]crypt...
1088 push @{$config{defines}}, "AES_XTS_ASM" if ($target{aes_asm_src} =~ s/\s*aes-xts\.fake//);
1089 $target{aes_asm_src} =~ s/\s*(vpaes|aesni)-x86\.s//g if ($no_sse2);
1090 push @{$config{defines}}, "VPAES_ASM" if ($target{aes_asm_src} =~ m/vpaes/);
1091 push @{$config{defines}}, "BSAES_ASM" if ($target{aes_asm_src} =~ m/bsaes/);
1093 if ($target{wp_asm_src} =~ /mmx/) {
1094 if ($config{processor} eq "386") {
1095 $target{wp_asm_src}=$table{BASE}->{wp_asm_src};
1096 } elsif (!$disabled{"whirlpool"}) {
1097 $config{cflags}.=" -DWHIRLPOOL_ASM";
1100 if ($target{modes_asm_src} =~ /ghash-/) {
1101 push @{$config{defines}}, "GHASH_ASM";
1103 if ($target{ec_asm_src} =~ /ecp_nistz256/) {
1104 push @{$config{defines}}, "ECP_NISTZ256_ASM";
1106 if ($target{poly1305_asm_src} ne "") {
1107 push @{$config{defines}}, "POLY1305_ASM";
1111 my $ecc = $target{cc};
1113 # Is the compiler gcc or clang? $ecc is used below to see if
1114 # error-checking can be turned on.
1115 my $ccpcc = "$config{cross_compile_prefix}$target{cc}";
1116 $config{makedepprog} = 'makedepend';
1117 open(PIPE, "$ccpcc --version 2>&1 | head -2 |");
1119 $config{makedepprog} = $ccpcc if /clang|gcc/;
1120 $ecc = "clang" if /clang/;
1121 $ecc = "gcc" if /gcc/;
1126 $config{depflags} =~ s/^\s*//;
1129 # Deal with bn_ops ###################################################
1132 $config{export_var_as_fn} =0;
1133 my $def_int="unsigned int";
1134 $config{rc4_int} =$def_int;
1135 ($config{b64l},$config{b64},$config{b32})=(0,0,1);
1138 foreach (sort split(/\s+/,$target{bn_ops})) {
1139 $count++ if /SIXTY_FOUR_BIT|SIXTY_FOUR_BIT_LONG|THIRTY_TWO_BIT/;
1140 $config{export_var_as_fn}=1 if $_ eq 'EXPORT_VAR_AS_FN';
1141 $config{bn_ll}=1 if $_ eq 'BN_LLONG';
1142 $config{rc4_int}="unsigned char" if $_ eq 'RC4_CHAR';
1143 ($config{b64l},$config{b64},$config{b32})
1144 =(0,1,0) if $_ eq 'SIXTY_FOUR_BIT';
1145 ($config{b64l},$config{b64},$config{b32})
1146 =(1,0,0) if $_ eq 'SIXTY_FOUR_BIT_LONG';
1147 ($config{b64l},$config{b64},$config{b32})
1148 =(0,0,1) if $_ eq 'THIRTY_TWO_BIT';
1150 die "Exactly one of SIXTY_FOUR_BIT|SIXTY_FOUR_BIT_LONG|THIRTY_TWO_BIT can be set in bn_ops\n"
1154 # Hack cflags for better warnings (dev option) #######################
1156 # "Stringify" the C flags string. This permits it to be made part of a string
1157 # and works as well on command lines.
1158 $config{cflags} =~ s/([\\\"])/\\\1/g;
1160 if (defined($config{api})) {
1161 $config{openssl_api_defines} = [ "OPENSSL_MIN_API=".$apitable->{$config{api}} ];
1162 my $apiflag = sprintf("OPENSSL_API_COMPAT=%s", $apitable->{$config{api}});
1163 push @default_depdefines, $apiflag;
1164 push @{$config{defines}}, $apiflag;
1167 if ($strict_warnings)
1170 die "ERROR --strict-warnings requires gcc or clang"
1171 unless $ecc eq 'gcc' || $ecc eq 'clang';
1172 foreach $wopt (split /\s+/, $gcc_devteam_warn)
1174 $config{cflags} .= " $wopt" unless ($config{cflags} =~ /(^|\s)$wopt(\s|$)/)
1176 if ($ecc eq "clang")
1178 foreach $wopt (split /\s+/, $clang_devteam_warn)
1180 $config{cflags} .= " $wopt" unless ($config{cflags} =~ /(^|\s)$wopt(\s|$)/)
1185 unless ($disabled{"crypto-mdebug-backtrace"})
1187 foreach my $wopt (split /\s+/, $memleak_devteam_backtrace)
1189 $config{cflags} .= " $wopt" unless ($config{cflags} =~ /(^|\s)$wopt(\s|$)/)
1191 if ($target =~ /^BSD-/)
1193 $config{ex_libs} .= " -lexecinfo";
1197 if ($user_cflags ne "") { $config{cflags}="$config{cflags}$user_cflags"; }
1198 else { $no_user_cflags=1; }
1199 if (@user_defines) { $config{defines}=[ @{$config{defines}}, @user_defines ]; }
1200 else { $no_user_defines=1; }
1202 # ALL MODIFICATIONS TO %config and %target MUST BE DONE FROM HERE ON
1204 # If we use the unified build, collect information from build.info files
1205 my %unified_info = ();
1207 if ($builder eq "unified") {
1208 # Store the name of the template file we will build the build file from
1209 # in %config. This may be useful for the build file itself.
1210 my $build_file_template =
1211 catfile($srcdir, "Configurations",
1212 $builder_platform."-".$target{build_file}.".tmpl");
1213 $build_file_template =
1214 catfile($srcdir, "Configurations", $target{build_file}.".tmpl")
1215 if (! -f $build_file_template);
1216 $config{build_file_template} = $build_file_template;
1218 use lib catdir(dirname(__FILE__),"util");
1219 use with_fallback qw(Text::Template);
1224 my $relativeto = shift || ".";
1226 $dir = catdir($base,$dir) unless isabsolute($dir);
1228 # Make sure the directories we're building in exists
1231 my $res = abs2rel(absolutedir($dir), rel2abs($relativeto));
1232 #print STDERR "DEBUG[cleandir]: $dir , $base => $res\n";
1239 my $relativeto = shift || ".";
1241 $file = catfile($base,$file) unless isabsolute($file);
1243 my $d = dirname($file);
1244 my $f = basename($file);
1246 # Make sure the directories we're building in exists
1249 my $res = abs2rel(catfile(absolutedir($d), $f), rel2abs($relativeto));
1250 #print STDERR "DEBUG[cleanfile]: $d , $f => $res\n";
1254 my @build_infos = ( [ ".", "build.info" ] );
1255 foreach (@{$config{dirs}}) {
1256 push @build_infos, [ $_, "build.info" ]
1257 if (-f catfile($srcdir, $_, "build.info"));
1259 foreach (@{$config{sdirs}}) {
1260 push @build_infos, [ catdir("crypto", $_), "build.info" ]
1261 if (-f catfile($srcdir, "crypto", $_, "build.info"));
1263 foreach (@{$config{engdirs}}) {
1264 push @build_infos, [ catdir("engines", $_), "build.info" ]
1265 if (-f catfile($srcdir, "engines", $_, "build.info"));
1268 foreach (@build_infos) {
1269 my $sourced = catdir($srcdir, $_->[0]);
1270 my $buildd = catdir($blddir, $_->[0]);
1275 # The basic things we're trying to build
1281 my @intermediates = ();
1289 my %sharednames = ();
1291 my $template = Text::Template->new(TYPE => 'FILE',
1292 SOURCE => catfile($sourced, $f));
1293 die "Something went wrong with $sourced/$f: $!\n" unless $template;
1296 $template->fill_in(HASH => { config => \%config,
1298 builddir => abs2rel($buildd, $blddir),
1299 sourcedir => abs2rel($sourced, $blddir),
1300 buildtop => abs2rel($blddir, $blddir),
1301 sourcetop => abs2rel($srcdir, $blddir) },
1302 DELIMITERS => [ "{-", "-}" ]);
1304 # The top item of this stack has the following values
1305 # -2 positive already run and we found ELSE (following ELSIF should fail)
1306 # -1 positive already run (skip until ENDIF)
1307 # 0 negatives so far (if we're at a condition, check it)
1308 # 1 last was positive (don't skip lines until next ELSE, ELSIF or ENDIF)
1309 # 2 positive ELSE (following ELSIF should fail)
1311 collect_information(
1312 collect_from_array([ @text ],
1313 qr/\\$/ => sub { my $l1 = shift; my $l2 = shift;
1314 $l1 =~ s/\\$//; $l1.$l2 }),
1315 # Info we're looking for
1316 qr/^\s*IF\[((?:\\.|[^\\\]])*)\]\s*$/
1317 => sub { push @skip, !! $1; },
1318 qr/^\s*ELSIF\[((?:\\.|[^\\\]])*)\]\s*$/
1319 => sub { die "ELSIF out of scope" if ! @skip;
1320 die "ELSIF following ELSE" if abs($skip[$#skip]) == 2;
1321 $skip[$#skip] = -1 if $skip[$#skip] != 0;
1322 $skip[$#skip] = !! $1
1323 if $skip[$#skip] == 0; },
1325 => sub { die "ELSE out of scope" if ! @skip;
1326 $skip[$#skip] = -2 if $skip[$#skip] != 0;
1327 $skip[$#skip] = 2 if $skip[$#skip] == 0; },
1329 => sub { die "ENDIF out of scope" if ! @skip;
1331 qr/^\s*PROGRAMS\s*=\s*(.*)\s*$/
1332 => sub { push @programs, split(/\s+/, $1)
1333 if !@skip || $skip[$#skip] > 0 },
1334 qr/^\s*LIBS\s*=\s*(.*)\s*$/
1335 => sub { push @libraries, split(/\s+/, $1)
1336 if !@skip || $skip[$#skip] > 0 },
1337 qr/^\s*ENGINES\s*=\s*(.*)\s*$/
1338 => sub { push @engines, split(/\s+/, $1)
1339 if !@skip || $skip[$#skip] > 0 },
1340 qr/^\s*SCRIPTS\s*=\s*(.*)\s*$/
1341 => sub { push @scripts, split(/\s+/, $1)
1342 if !@skip || $skip[$#skip] > 0 },
1343 qr/^\s*EXTRA\s*=\s*(.*)\s*$/
1344 => sub { push @extra, split(/\s+/, $1)
1345 if !@skip || $skip[$#skip] > 0 },
1347 qr/^\s*ORDINALS\[((?:\\.|[^\\\]])+)\]\s*=\s*(.*)\s*$/,
1348 => sub { push @{$ordinals{$1}}, split(/\s+/, $2)
1349 if !@skip || $skip[$#skip] > 0 },
1350 qr/^\s*SOURCE\[((?:\\.|[^\\\]])+)\]\s*=\s*(.*)\s*$/
1351 => sub { push @{$sources{$1}}, split(/\s+/, $2)
1352 if !@skip || $skip[$#skip] > 0 },
1353 qr/^\s*INCLUDE\[((?:\\.|[^\\\]])+)\]\s*=\s*(.*)\s*$/
1354 => sub { push @{$includes{$1}}, split(/\s+/, $2)
1355 if !@skip || $skip[$#skip] > 0 },
1356 qr/^\s*DEPEND\[((?:\\.|[^\\\]])+)\]\s*=\s*(.*)\s*$/
1357 => sub { push @{$depends{$1}}, split(/\s+/, $2)
1358 if !@skip || $skip[$#skip] > 0 },
1359 qr/^\s*RENAME\[((?:\\.|[^\\\]])+)\]\s*=\s*(.*)\s*$/
1360 => sub { push @{$renames{$1}}, split(/\s+/, $2)
1361 if !@skip || $skip[$#skip] > 0 },
1362 qr/^\s*SHARED_NAME\[((?:\\.|[^\\\]])+)\]\s*=\s*(.*)\s*$/
1363 => sub { push @{$sharednames{$1}}, split(/\s+/, $2)
1364 if !@skip || $skip[$#skip] > 0 },
1365 qr/^\s*BEGINRAW\[((?:\\.|[^\\\]])+)\]\s*$/
1367 my $lineiterator = shift;
1368 my $target_kind = $1;
1369 while (defined $lineiterator->()) {
1371 if (/^\s*ENDRAW\[((?:\\.|[^\\\]])+)\]\s*$/) {
1372 die "ENDRAW doesn't match BEGINRAW"
1373 if $1 ne $target_kind;
1376 next if @skip && $skip[$#skip] <= 0;
1378 if ($target_kind eq $target{build_file}
1379 || $target_kind eq $target{build_file}."(".$builder_platform.")");
1382 qr/^(?:#.*|\s*)$/ => sub { },
1383 "OTHERWISE" => sub { die "Something wrong with this line:\n$_\nat $sourced/$f" }
1385 die "runaway IF?" if (@skip);
1387 foreach (keys %renames) {
1388 die "$_ renamed to more than one thing: "
1389 ,join(" ", @{$renames{$_}}),"\n"
1390 if scalar @{$renames{$_}} > 1;
1391 my $dest = cleanfile($buildd, $_, $blddir);
1392 my $to = cleanfile($buildd, $renames{$_}->[0], $blddir);
1393 die "$dest renamed to more than one thing: "
1394 ,$unified_info{rename}->{$dest}, $to
1395 unless !defined($unified_info{rename}->{$dest})
1396 or $unified_info{rename}->{$dest} eq $to;
1397 $unified_info{rename}->{$dest} = $to;
1400 foreach (@programs) {
1401 my $program = cleanfile($buildd, $_, $blddir);
1402 if ($unified_info{rename}->{$program}) {
1403 $program = $unified_info{rename}->{$program};
1405 $unified_info{programs}->{$program} = 1;
1408 foreach (@libraries) {
1409 my $library = cleanfile($buildd, $_, $blddir);
1410 if ($unified_info{rename}->{$library}) {
1411 $library = $unified_info{rename}->{$library};
1413 $unified_info{libraries}->{$library} = 1;
1416 die <<"EOF" if $config{no_shared} && scalar @engines;
1417 ENGINES can only be used if configured with 'shared'.
1418 This is usually a fault in a build.info file.
1420 foreach (@engines) {
1421 my $library = cleanfile($buildd, $_, $blddir);
1422 if ($unified_info{rename}->{$library}) {
1423 $library = $unified_info{rename}->{$library};
1425 $unified_info{engines}->{$library} = 1;
1428 foreach (@scripts) {
1429 my $script = cleanfile($buildd, $_, $blddir);
1430 if ($unified_info{rename}->{$script}) {
1431 $script = $unified_info{rename}->{$script};
1433 $unified_info{scripts}->{$script} = 1;
1437 my $extra = cleanfile($buildd, $_, $blddir);
1438 $unified_info{extra}->{$extra} = 1;
1441 push @{$unified_info{rawlines}}, @rawlines;
1443 if (!$config{no_shared}) {
1444 # Check sharednames.
1445 foreach (keys %sharednames) {
1446 my $dest = cleanfile($buildd, $_, $blddir);
1447 if ($unified_info{rename}->{$dest}) {
1448 $dest = $unified_info{rename}->{$dest};
1450 die "shared_name for $dest with multiple values: "
1451 ,join(" ", @{$sharednames{$_}}),"\n"
1452 if scalar @{$sharednames{$_}} > 1;
1453 my $to = cleanfile($buildd, $sharednames{$_}->[0], $blddir);
1454 die "shared_name found for a library $dest that isn't defined\n"
1455 unless $unified_info{libraries}->{$dest};
1456 die "shared_name for $dest with multiple values: "
1457 ,$unified_info{sharednames}->{$dest}, ", ", $to
1458 unless !defined($unified_info{sharednames}->{$dest})
1459 or $unified_info{sharednames}->{$dest} eq $to;
1460 $unified_info{sharednames}->{$dest} = $to;
1463 # Additionally, we set up sharednames for libraries that don't
1464 # have any, as themselves.
1465 foreach (keys %{$unified_info{libraries}}) {
1466 if (!defined $unified_info{sharednames}->{$_}) {
1467 $unified_info{sharednames}->{$_} = $_
1472 foreach (keys %ordinals) {
1474 my $ddest = cleanfile($buildd, $_, $blddir);
1475 if ($unified_info{rename}->{$ddest}) {
1476 $ddest = $unified_info{rename}->{$ddest};
1478 foreach (@{$ordinals{$dest}}) {
1479 my %known_ordinals =
1482 cleanfile($sourced, catfile("util", "libeay.num"), $blddir),
1484 cleanfile($sourced, catfile("util", "ssleay.num"), $blddir)
1486 my $o = $known_ordinals{$_};
1487 die "Ordinals for $ddest defined more than once\n"
1488 if $unified_info{ordinals}->{$ddest};
1489 $unified_info{ordinals}->{$ddest} = [ $_, $o ];
1493 foreach (keys %sources) {
1495 my $ddest = cleanfile($buildd, $_, $blddir);
1496 if ($unified_info{rename}->{$ddest}) {
1497 $ddest = $unified_info{rename}->{$ddest};
1499 foreach (@{$sources{$dest}}) {
1500 my $s = cleanfile($sourced, $_, $blddir);
1502 # If it isn't in the source tree, we assume it's generated
1505 $s = cleanfile($buildd, $_, $blddir);
1507 # We recognise C and asm files
1508 if ($s =~ /\.[csS]\b$/) {
1509 (my $o = $_) =~ s/\.[csS]\b$/.o/;
1510 $o = cleanfile($buildd, $o, $blddir);
1511 $unified_info{sources}->{$ddest}->{$o} = 1;
1512 $unified_info{sources}->{$o}->{$s} = 1;
1514 $unified_info{sources}->{$ddest}->{$s} = 1;
1519 foreach (keys %depends) {
1521 my $ddest = cleanfile($buildd, $_, $blddir);
1522 if ($unified_info{rename}->{$ddest}) {
1523 $ddest = $unified_info{rename}->{$ddest};
1525 foreach (@{$depends{$dest}}) {
1526 my $d = cleanfile($sourced, $_, $blddir);
1528 # If we know it's generated, or assume it is because we can't
1529 # find it in the source tree, we set file we depend on to be
1530 # in the build tree rather than the source tree, and assume
1531 # and that there are lines to build it in a BEGINRAW..ENDRAW
1532 # section or in the Makefile template.
1534 || !(grep { $d eq $_ }
1535 map { cleanfile($srcdir, $_, $blddir) }
1536 (@generated_headers, @generated_by_make_headers))) {
1537 $d = cleanfile($buildd, $_, $blddir);
1539 # Take note if the file to depend on is being renamed
1540 if ($unified_info{rename}->{$d}) {
1541 $d = $unified_info{rename}->{$d};
1543 $unified_info{depends}->{$ddest}->{$d} = 1;
1544 # If we depend on a header file, let's make sure it
1547 my $i = dirname($d);
1548 push @{$unified_info{includes}->{$ddest}}, $i
1549 unless grep { $_ eq $i } @{$unified_info{includes}->{$ddest}};
1554 foreach (keys %includes) {
1556 my $ddest = cleanfile($buildd, $_, $blddir);
1557 if ($unified_info{rename}->{$ddest}) {
1558 $ddest = $unified_info{rename}->{$ddest};
1560 foreach (@{$includes{$dest}}) {
1561 my $i = cleandir($sourced, $_, $blddir);
1562 push @{$unified_info{includes}->{$ddest}}, $i
1563 unless grep { $_ eq $i } @{$unified_info{includes}->{$ddest}};
1568 ### Make unified_info a bit more efficient
1569 # One level structures
1570 foreach (("programs", "libraries", "engines", "scripts", "extra")) {
1571 $unified_info{$_} = [ sort keys %{$unified_info{$_}} ];
1573 # Two level structures
1574 foreach my $l1 (("sources", "ldadd", "depends")) {
1575 foreach my $l2 (sort keys %{$unified_info{$l1}}) {
1576 $unified_info{$l1}->{$l2} =
1577 [ sort keys %{$unified_info{$l1}->{$l2}} ];
1582 # For the schemes that need it, we provide the old *_obj configs
1583 # from the *_asm_obj ones
1584 foreach (grep /_asm_src$/, keys %target) {
1586 (my $obj = $_) =~ s/_asm_src$/_obj/;
1587 ($target{$obj} = $target{$src}) =~ s/\.[csS]\b/.o/g;
1590 # Write down our configuration where it fits #########################
1592 open(OUT,">configdata.pm") || die "unable to create configdata.pm: $!\n";
1600 #use vars qw(\@ISA \@EXPORT);
1601 our \@ISA = qw(Exporter);
1602 our \@EXPORT = qw(\%config \%target %withargs %unified_info);
1605 print OUT "our %config = (\n";
1606 foreach (sort keys %config) {
1607 if (ref($config{$_}) eq "ARRAY") {
1608 print OUT " ", $_, " => [ ", join(", ",
1609 map { quotify("perl", $_) }
1610 @{$config{$_}}), " ],\n";
1612 print OUT " ", $_, " => ", quotify("perl", $config{$_}), ",\n"
1619 print OUT "our %target = (\n";
1620 foreach (sort keys %target) {
1621 if (ref($target{$_}) eq "ARRAY") {
1622 print OUT " ", $_, " => [ ", join(", ",
1623 map { quotify("perl", $_) }
1624 @{$target{$_}}), " ],\n";
1626 print OUT " ", $_, " => ", quotify("perl", $target{$_}), ",\n"
1633 print OUT "our \%available_protocols = (\n";
1634 print OUT " tls => [ ", join(", ", map { quotify("perl", $_) } @tls), " ],\n";
1635 print OUT " dtls => [ ", join(", ", map { quotify("perl", $_) } @dtls), " ],\n";
1640 print OUT "our \%disabled = (\n";
1641 foreach (sort keys %disabled) {
1642 print OUT " ", quotify("perl", $_), " => ", quotify("perl", $disabled{$_}), ",\n";
1648 print OUT "our %withargs = (\n";
1649 foreach (sort keys %withargs) {
1650 if (ref($withargs{$_}) eq "ARRAY") {
1651 print OUT " ", $_, " => [ ", join(", ",
1652 map { quotify("perl", $_) }
1653 @{$withargs{$_}}), " ],\n";
1655 print OUT " ", $_, " => ", quotify("perl", $withargs{$_}), ",\n"
1662 if ($builder eq "unified") {
1667 if (ref $_ eq "ARRAY") {
1668 print OUT " "x$indent, "[\n";
1670 $recurse->($indent + 4, $_);
1672 print OUT " "x$indent, "],\n";
1673 } elsif (ref $_ eq "HASH") {
1675 print OUT " "x$indent, "{\n";
1676 foreach (sort keys %h) {
1677 if (ref $h{$_} eq "") {
1678 print OUT " "x($indent + 4), quotify("perl", $_), " => ", quotify("perl", $h{$_}), ",\n";
1680 print OUT " "x($indent + 4), quotify("perl", $_), " =>\n";
1681 $recurse->($indent + 8, $h{$_});
1684 print OUT " "x$indent, "},\n";
1686 print OUT " "x$indent, quotify("perl", $_), ",\n";
1690 print OUT "our %unified_info = (\n";
1691 foreach (sort keys %unified_info) {
1692 if (ref $unified_info{$_} eq "") {
1693 print OUT " "x4, quotify("perl", $_), " => ", quotify("perl", $unified_info{$_}), ",\n";
1695 print OUT " "x4, quotify("perl", $_), " =>\n";
1696 $recurse->(8, $unified_info{$_});
1707 die <<"EOF" if $builder ne "unified" && $srcdir ne $blddir;
1709 ***** Trying building anywhere else than in the source tree will not
1710 ***** work for target $config{target}. To make it possible, it needs
1711 ***** to use the "unified" build scheme.
1715 print "IsMK1MF =", ($builder eq "mk1mf" ? "yes" : "no"), "\n";
1716 print "CC =$target{cc}\n";
1717 print "CFLAG =$config{cflags}\n";
1718 print "DEFINES =",join(" ", @{$config{defines}}),"\n";
1719 print "LFLAG =$config{lflags}\n";
1720 print "PLIB_LFLAG =$config{plib_lflags}\n";
1721 print "EX_LIBS =$config{ex_libs}\n";
1722 print "CPUID_OBJ =$target{cpuid_obj}\n";
1723 print "BN_ASM =$target{bn_obj}\n";
1724 print "EC_ASM =$target{ec_obj}\n";
1725 print "DES_ENC =$target{des_obj}\n";
1726 print "AES_ENC =$target{aes_obj}\n";
1727 print "BF_ENC =$target{bf_obj}\n";
1728 print "CAST_ENC =$target{cast_obj}\n";
1729 print "RC4_ENC =$target{rc4_obj}\n";
1730 print "RC5_ENC =$target{rc5_obj}\n";
1731 print "MD5_OBJ_ASM =$target{md5_obj}\n";
1732 print "SHA1_OBJ_ASM =$target{sha1_obj}\n";
1733 print "RMD160_OBJ_ASM=$target{rmd160_obj}\n";
1734 print "CMLL_ENC =$target{cmll_obj}\n";
1735 print "MODES_OBJ =$target{modes_obj}\n";
1736 print "PADLOCK_OBJ =$target{padlock_obj}\n";
1737 print "CHACHA_ENC =$target{chacha_obj}\n";
1738 print "POLY1305_OBJ =$target{poly1305_obj}\n";
1739 print "PROCESSOR =$config{processor}\n";
1740 print "RANLIB =$target{ranlib}\n";
1741 print "ARFLAGS =$target{arflags}\n";
1742 print "PERL =$config{perl}\n";
1744 print "SIXTY_FOUR_BIT_LONG mode\n" if $config{b64l};
1745 print "SIXTY_FOUR_BIT mode\n" if $config{b64};
1746 print "THIRTY_TWO_BIT mode\n" if $config{b32};
1747 print "BN_LLONG mode\n" if $config{bn_ll};
1748 print "RC4 uses $config{rc4_int}\n" if $config{rc4_int} != $def_int;
1750 for (@generated_headers) {
1751 mkpath(catdir($blddir, dirname($_)));
1752 run_dofile(catfile($blddir, $_),
1753 catfile($srcdir, $_.".in"));
1757 ### When the old "unixmake" scheme goes away, so does this function
1759 sub build_Makefile {
1760 run_dofile("Makefile","Makefile.in");
1762 # Copy all Makefile.in to Makefile (except top-level)
1771 return if ($_ ne "Makefile.in" || $File::Find::dir eq ".");
1772 my $in = IO::File->new($_, "r") or
1773 die sprintf "Error reading Makefile.in in %s: !$\n",
1775 my $out = IO::File->new("Makefile", "w") or
1776 die sprintf "Error writing Makefile in %s: !$\n",
1778 print $out "# Generated from $_, do not edit\n";
1779 while (my $line = <$in>) { print $out $line }
1781 die sprintf "Error reading Makefile.in in %s: !$\n",
1784 die sprintf "Error writing Makefile in %s: !$\n",
1793 run_dofile(catfile($blddir, $target{build_file}),
1794 $config{build_file_template},
1795 catfile($srcdir, "Configurations", "common.tmpl"));
1800 run_dofile("util/domd", "util/domd.in");
1801 chmod 0755, "util/domd";
1804 my $platform = shift;
1805 # The only reason we do this is to have something to build MINFO from
1808 # create the ms/version32.rc file if needed
1809 if ($platform ne "netware") {
1810 my ($v1, $v2, $v3, $v4);
1811 if ($config{version_num} =~ /^0x([0-9a-f]{1})([0-9a-f]{2})([0-9a-f]{2})([0-9a-f]{2})([0-9a-f]{1})L$/i) {
1817 open (OUT,">ms/version32.rc") || die "Can't open ms/version32.rc";
1824 FILEVERSION $v1,$v2,$v3,$v4
1825 PRODUCTVERSION $v1,$v2,$v3,$v4
1832 FILEOS VOS__WINDOWS32
1836 BLOCK "StringFileInfo"
1841 VALUE "CompanyName", "The OpenSSL Project, http://www.openssl.org/\\0"
1842 VALUE "FileDescription", "OpenSSL Shared Library\\0"
1843 VALUE "FileVersion", "$config{version}\\0"
1845 VALUE "InternalName", "libeay32\\0"
1846 VALUE "OriginalFilename", "libeay32.dll\\0"
1848 VALUE "InternalName", "ssleay32\\0"
1849 VALUE "OriginalFilename", "ssleay32.dll\\0"
1851 VALUE "ProductName", "The OpenSSL Toolkit\\0"
1852 VALUE "ProductVersion", "$config{version}\\0"
1854 //VALUE "Comments", "\\0"
1855 VALUE "LegalCopyright", "Copyright © 1998-2015 The OpenSSL Project. Copyright © 1995-1998 Eric A. Young, Tim J. Hudson. All rights reserved.\\0"
1856 //VALUE "LegalTrademarks", "\\0"
1857 //VALUE "PrivateBuild", "\\0"
1858 //VALUE "SpecialBuild", "\\0"
1863 VALUE "Translation", 0x409, 0x4b0
1872 $builders{$builder}->($builder_platform, @builder_opts);
1876 Configured for $target.
1879 print <<"EOF" if (!$no_threads && !$threads);
1881 The library could not be configured for supporting multi-threaded
1882 applications as the compiler options required on this system are not known.
1883 See file INSTALL for details if you need multi-threading.
1886 print <<"EOF" if ($no_shared_warn);
1888 You gave the option 'shared', which is not supported on this platform, so
1889 we will pretend you gave the option 'no-shared'. If you know how to implement
1890 shared libraries, please let us know (but please first make sure you have
1891 tried with a current version of OpenSSL).
1894 ###### TO BE REMOVED BEFORE FINAL RELEASE
1896 ###### If the user hasn't chosen --unified, try to nudge them.
1897 if ($target{build_file} eq "Makefile"
1898 && $target{build_scheme}->[0] eq "unixmake"
1901 my $plausible_builddir =
1902 abs2rel(rel2abs("../_openssl-build_$target"),rel2abs("."));
1903 my $plausible_to_sourcedir =
1904 abs2rel(rel2abs("."),rel2abs("../_openssl-build_$target"));
1907 ----------------------------------------------------------------------
1908 Please consider configuring with the flag --unified .
1909 It's to test out a new "unified" building system.
1911 One cool feature is that you can have your build directory elsewhere,
1914 make clean # Clean the current configuration away
1915 mkdir $plausible_builddir
1916 cd $plausible_builddir
1917 $plausible_to_sourcedir/config --unified
1921 Please report any problem you have.
1922 ----------------------------------------------------------------------
1929 ######################################################################
1931 # Helpers and utility functions
1934 # Configuration file reading #########################################
1936 # Helper function to implement conditional inheritance depending on the
1937 # value of $no_asm. Used in inherit_from values as follows:
1939 # inherit_from => [ "template", asm("asm_tmpl") ]
1948 # Helper function to implement adding values to already existing configuration
1949 # values. It handles elements that are ARRAYs, CODEs and scalars
1951 my $separator = shift;
1953 # If there's any ARRAY in the collection of values OR the separator
1954 # is undef, we will return an ARRAY of combined values, otherwise a
1955 # string of joined values with $separator as the separator.
1956 my $found_array = !defined($separator);
1960 if (ref($_) eq "ARRAY") {
1971 join($separator, @values);
1975 my $separator = shift;
1977 sub { _add($separator, @x, @_) };
1980 my $separator = shift;
1982 sub { _add($separator, @_, @x) };
1985 # configuration reader, evaluates the input file as a perl script and expects
1986 # it to fill %targets with target configurations. Those are then added to
1990 open(CONFFILE, "< $fname")
1991 or die "Can't open configuration file '$fname'!\n";
1994 my $content = <CONFFILE>;
1999 local %table = %::table; # Protect %table from tampering
2005 # For each target, check that it's configured with a hash table.
2006 foreach (keys %targets) {
2007 if (ref($targets{$_}) ne "HASH") {
2008 if (ref($targets{$_}) eq "") {
2009 warn "Deprecated target configuration for $_, ignoring...\n";
2011 warn "Misconfigured target configuration for $_ (should be a hash table), ignoring...\n";
2013 delete $targets{$_};
2017 %table = (%table, %targets);
2021 # configuration resolver. Will only resolve all the lazy evalutation
2022 # codeblocks for the chozen target and all those it inherits from,
2024 sub resolve_config {
2026 my @breadcrumbs = @_;
2028 if (grep { $_ eq $target } @breadcrumbs) {
2029 die "inherit_from loop! target backtrace:\n "
2030 ,$target,"\n ",join("\n ", @breadcrumbs),"\n";
2033 if (!defined($table{$target})) {
2034 warn "Warning! target $target doesn't exist!\n";
2037 # Recurse through all inheritances. They will be resolved on the
2038 # fly, so when this operation is done, they will all just be a
2039 # bunch of attributes with string values.
2040 # What we get here, though, are keys with references to lists of
2041 # the combined values of them all. We will deal with lists after
2042 # this stage is done.
2043 my %combined_inheritance = ();
2044 if ($table{$target}->{inherit_from}) {
2046 map { ref($_) eq "CODE" ? $_->() : $_ } @{$table{$target}->{inherit_from}};
2047 foreach (@inherit_from) {
2048 my %inherited_config = resolve_config($_, $target, @breadcrumbs);
2050 # 'template' is a marker that's considered private to
2051 # the config that had it.
2052 delete $inherited_config{template};
2055 if (!$combined_inheritance{$_}) {
2056 $combined_inheritance{$_} = [];
2058 push @{$combined_inheritance{$_}}, $inherited_config{$_};
2059 } keys %inherited_config;
2063 # We won't need inherit_from in this target any more, since we've
2064 # resolved all the inheritances that lead to this
2065 delete $table{$target}->{inherit_from};
2067 # Now is the time to deal with those lists. Here's the place to
2068 # decide what shall be done with those lists, all based on the
2069 # values of the target we're currently dealing with.
2070 # - If a value is a coderef, it will be executed with the list of
2071 # inherited values as arguments.
2072 # - If the corresponding key doesn't have a value at all or is the
2073 # emoty string, the inherited value list will be run through the
2074 # default combiner (below), and the result becomes this target's
2076 # - Otherwise, this target's value is assumed to be a string that
2077 # will simply override the inherited list of values.
2078 my $default_combiner = add(" ");
2081 map { $_ => 1 } (keys %combined_inheritance,
2082 keys %{$table{$target}});
2083 foreach (sort keys %all_keys) {
2085 # Current target doesn't have a value for the current key?
2086 # Assign it the default combiner, the rest of this loop body
2087 # will handle it just like any other coderef.
2088 if (!exists $table{$target}->{$_}) {
2089 $table{$target}->{$_} = $default_combiner;
2092 my $valuetype = ref($table{$target}->{$_});
2093 if ($valuetype eq "CODE") {
2094 # CODE reference, execute it with the inherited values as
2096 $table{$target}->{$_} =
2097 $table{$target}->{$_}->(@{$combined_inheritance{$_}});
2098 } elsif ($valuetype eq "ARRAY" || $valuetype eq "") {
2099 # ARRAY or Scalar, just leave it as is.
2101 # Some other type of reference that we don't handle.
2102 # Better to abort at this point.
2103 die "cannot handle reference type $valuetype,"
2104 ," found in target $target -> $_\n";
2108 # Finally done, return the result.
2109 return %{$table{$target}};
2114 print STDERR $usage;
2115 print STDERR "\npick os/compiler from:\n";
2119 foreach $i (sort keys %table)
2121 next if $table{$i}->{template};
2122 next if $i =~ /^debug/;
2123 $k += length($i) + 1;
2129 print STDERR $i . " ";
2131 foreach $i (sort keys %table)
2133 next if $table{$i}->{template};
2134 next if $i !~ /^debug/;
2135 $k += length($i) + 1;
2141 print STDERR $i . " ";
2143 print STDERR "\n\nNOTE: If in doubt, on Unix-ish systems use './config'.\n";
2152 unlink $out || warn "Can't remove $out, $!"
2154 foreach (@templates) {
2155 die "Can't open $_, $!" unless -f $_;
2157 my $cmd = "$config{perl} \"-I.\" \"-Mconfigdata\" $dofile -o\"Configure\" \"".join("\" \"",@templates)."\" > \"$out.new\"";
2158 #print STDERR "DEBUG[run_dofile]: \$cmd = $cmd\n";
2161 rename("$out.new", $out) || die "Can't rename $out.new, $!";
2164 # Configuration printer ##############################################
2166 sub print_table_entry
2169 my %target = resolve_config($target);
2172 # Don't print the templates
2173 return if $target{template};
2191 "debug_plib_lflags",
2194 "release_plib_lflags",
2229 if ($type eq "TABLE") {
2231 print "*** $target\n";
2232 printf "\$%-12s = %s\n", $_, $target{$_} foreach (@sequence);
2233 } elsif ($type eq "HASH") {
2235 length((sort { length($a) <=> length($b) } @sequence)[-1]);
2236 print " '$target' => {\n";
2237 foreach (@sequence) {
2239 print " '",$_,"'"," " x ($largest - length($_))," => '",$target{$_},"',\n";
2246 # Utility routines ###################################################
2248 # On VMS, if the given file is a logical name, File::Spec::Functions
2249 # will consider it an absolute path. There are cases when we want a
2250 # purely syntactic check without checking the environment.
2254 # On non-platforms, we just use file_name_is_absolute().
2255 return file_name_is_absolute($file) unless $^O eq "VMS";
2257 # If the file spec includes a device or a directpry spec,
2258 # file_name_is_absolute() is perfectly safe.
2259 return file_name_is_absolute($file) if $file =~ m|[:\[]|;
2261 # Here, we know the given file spec isn't absolute
2265 # Makes a directory absolute and cleans out /../ in paths like foo/../bar
2266 # On some platforms, this uses rel2abs(), while on others, realpath() is used.
2267 # realpath() requires that at least all path components except the last is an
2268 # existing directory. On VMS, the last component of the directory spec must
2273 # realpath() is quite buggy on VMS. It uses LIB$FID_TO_NAME, which
2274 # will return the volume name for the device, no matter what. Also,
2275 # it will return an incorrect directory spec if the argument is a
2276 # directory that doesn't exist.
2278 return rel2abs($dir);
2281 # We use realpath() on Unix, since no other will properly clean out
2283 use Cwd qw/realpath/;
2285 return realpath($dir);
2292 foreach $path (split /:/, $ENV{PATH})
2294 if (-f "$path/$name$target{exe_extension}" and -x _)
2296 return "$path/$name$target{exe_extension}" unless ($name eq "perl" and
2297 system("$path/$name$target{exe_extension} -e " . '\'exit($]<5.0);\''));
2304 perl => sub { my $x = shift;
2305 $x =~ s/([\\\$\@"])/\\$1/g;
2306 return '"'.$x.'"'; },
2310 defined($processors{$for}) ? $processors{$for} : sub { shift; };
2312 map { $processor->($_); } @_;
2315 # collect_from_file($filename, $line_concat_cond_re, $line_concat)
2316 # $filename is a file name to read from
2317 # $line_concat_cond_re is a regexp detecting a line continuation ending
2318 # $line_concat is a CODEref that takes care of concatenating two lines
2319 sub collect_from_file {
2320 my $filename = shift;
2321 my $line_concat_cond_re = shift;
2322 my $line_concat = shift;
2324 open my $fh, $filename || die "unable to read $filename: $!\n";
2326 my $saved_line = "";
2330 if (defined $line_concat) {
2331 $_ = $line_concat->($saved_line, $_);
2334 if (defined $line_concat_cond_re && /$line_concat_cond_re/) {
2340 die "$filename ending with continuation line\n" if $_;
2346 # collect_from_array($array, $line_concat_cond_re, $line_concat)
2347 # $array is an ARRAYref of lines
2348 # $line_concat_cond_re is a regexp detecting a line continuation ending
2349 # $line_concat is a CODEref that takes care of concatenating two lines
2350 sub collect_from_array {
2352 my $line_concat_cond_re = shift;
2353 my $line_concat = shift;
2354 my @array = (@$array);
2357 my $saved_line = "";
2359 while (defined($_ = shift @array)) {
2361 if (defined $line_concat) {
2362 $_ = $line_concat->($saved_line, $_);
2365 if (defined $line_concat_cond_re && /$line_concat_cond_re/) {
2371 die "input text ending with continuation line\n" if $_;
2376 # collect_information($lineiterator, $line_continue, $regexp => $CODEref, ...)
2377 # $lineiterator is a CODEref that delivers one line at a time.
2378 # All following arguments are regex/CODEref pairs, where the regexp detects a
2379 # line and the CODEref does something with the result of the regexp.
2380 sub collect_information {
2381 my $lineiterator = shift;
2382 my %collectors = @_;
2384 while(defined($_ = $lineiterator->())) {
2387 foreach my $re (keys %collectors) {
2388 if ($re ne "OTHERWISE" && /$re/) {
2389 $collectors{$re}->($lineiterator);
2393 if ($collectors{"OTHERWISE"}) {
2394 $collectors{"OTHERWISE"}->($lineiterator, $_)
2395 unless $found || !defined $collectors{"OTHERWISE"};