Let ssl_get_prev_session reliably work in multi-threaded settings.
[openssl.git] / Configure
1 :
2 eval 'exec perl -S $0 ${1+"$@"}'
3     if $running_under_some_shell;
4 ##
5 ##  Configure -- OpenSSL source tree configuration script
6 ##
7
8 require 5.000;
9 use strict;
10
11 # see INSTALL for instructions.
12
13 my $usage="Usage: Configure [-Dxxx] [-lxxx] [-Lxxx] [-fxxx] [-Kxxx] [rsaref] [no-threads] [no-asm] [386] [--prefix=DIR] [--openssldir=OPENSSLDIR] os/compiler[:flags]\n";
14
15 # Options:
16 #
17 # --openssldir  install OpenSSL in OPENSSLDIR (Default: DIR/ssl if the
18 #               --prefix option is given; /usr/local/ssl otherwise)
19 # --prefix      prefix for the OpenSSL include, lib and bin directories
20 #               (Default: the OPENSSLDIR directory)
21 #
22 # --install_prefix  Additional prefix for package builders (empty by
23 #               default).  This needn't be set in advance, you can
24 #               just as well use "make INSTALL_PREFIX=/whatever install".
25 #
26 # rsaref        use RSAref
27 # [no-]threads  [don't] try to create a library that is suitable for
28 #               multithreaded applications (default is "threads" if we
29 #               know how to do it)
30 # no-asm        do not use assembler
31 # 386           generate 80386 code
32 # no-<cipher>   build without specified algorithm (rsa, idea, rc5, ...)
33 # -<xxx> +<xxx> compiler options are passed through 
34
35 # DES_PTR       use pointer lookup vs arrays in the DES in crypto/des/des_locl.h
36 # DES_RISC1     use different DES_ENCRYPT macro that helps reduce register
37 #               dependancies but needs to more registers, good for RISC CPU's
38 # DES_RISC2     A different RISC variant.
39 # DES_UNROLL    unroll the inner DES loop, sometimes helps, somtimes hinders.
40 # DES_INT       use 'int' instead of 'long' for DES_LONG in crypto/des/des.h
41 #               This is used on the DEC Alpha where long is 8 bytes
42 #               and int is 4
43 # BN_LLONG      use the type 'long long' in crypto/bn/bn.h
44 # MD2_CHAR      use 'char' instead of 'int' for MD2_INT in crypto/md2/md2.h
45 # MD2_LONG      use 'long' instead of 'int' for MD2_INT in crypto/md2/md2.h
46 # IDEA_SHORT    use 'short' instead of 'int' for IDEA_INT in crypto/idea/idea.h
47 # IDEA_LONG     use 'long' instead of 'int' for IDEA_INT in crypto/idea/idea.h
48 # RC2_SHORT     use 'short' instead of 'int' for RC2_INT in crypto/rc2/rc2.h
49 # RC2_LONG      use 'long' instead of 'int' for RC2_INT in crypto/rc2/rc2.h
50 # RC4_CHAR      use 'char' instead of 'int' for RC4_INT in crypto/rc4/rc4.h
51 # RC4_LONG      use 'long' instead of 'int' for RC4_INT in crypto/rc4/rc4.h
52 # RC4_INDEX     define RC4_INDEX in crypto/rc4/rc4_locl.h.  This turns on
53 #               array lookups instead of pointer use.
54 # BF_PTR        use 'pointer arithmatic' for Blowfish (unsafe on Alpha).
55 # BF_PTR2       intel specific version (generic version is more efficient).
56 # MD5_ASM       use some extra md5 assember,
57 # SHA1_ASM      use some extra sha1 assember, must define L_ENDIAN for x86
58 # RMD160_ASM    use some extra ripemd160 assember,
59
60 my $x86_gcc_des="DES_PTR DES_RISC1 DES_UNROLL";
61
62 # MD2_CHAR slags pentium pros
63 my $x86_gcc_opts="RC4_INDEX MD2_INT";
64
65 # MODIFY THESE PARAMETERS IF YOU ARE GOING TO USE THE 'util/speed.sh SCRIPT
66 # Don't worry about these normally
67
68 my $tcc="cc";
69 my $tflags="-fast -Xa";
70 my $tbn_mul="";
71 my $tlib="-lnsl -lsocket";
72 #$bits1="SIXTEEN_BIT ";
73 #$bits2="THIRTY_TWO_BIT ";
74 my $bits1="THIRTY_TWO_BIT ";
75 my $bits2="SIXTY_FOUR_BIT ";
76
77 my $x86_sol_asm="asm/bn86-sol.o asm/co86-sol.o:asm/dx86-sol.o asm/yx86-sol.o:asm/bx86-sol.o:asm/mx86-sol.o:asm/sx86-sol.o:asm/cx86-sol.o:asm/rx86-sol.o:asm/rm86-sol.o:asm/r586-sol.o";
78 my $x86_elf_asm="asm/bn86-elf.o asm/co86-elf.o:asm/dx86-elf.o asm/yx86-elf.o:asm/bx86-elf.o:asm/mx86-elf.o:asm/sx86-elf.o:asm/cx86-elf.o:asm/rx86-elf.o:asm/rm86-elf.o:asm/r586-elf.o";
79 my $x86_out_asm="asm/bn86-out.o asm/co86-out.o:asm/dx86-out.o asm/yx86-out.o:asm/bx86-out.o:asm/mx86-out.o:asm/sx86-out.o:asm/cx86-out.o:asm/rx86-out.o:asm/rm86-out.o:asm/r586-out.o";
80 my $x86_bsdi_asm="asm/bn86bsdi.o asm/co86bsdi.o:asm/dx86bsdi.o asm/yx86bsdi.o:asm/bx86bsdi.o:asm/mx86bsdi.o:asm/sx86bsdi.o:asm/cx86bsdi.o:asm/rx86bsdi.o:asm/rm86bsdi.o:asm/r586bsdi.o";
81
82 # -DB_ENDIAN slows things down on a sparc for md5, but helps sha1.
83 # So the md5_locl.h file has an undef B_ENDIAN if sun is defined
84
85 #config-string  CC : CFLAGS : LDFLAGS : special header file mods:bn_asm \
86 # des_asm:bf_asm
87 my %table=(
88 #"b",           "$tcc:$tflags::$tlib:$bits1:$tbn_mul::",
89 #"bl-4c-2c",    "$tcc:$tflags::$tlib:${bits1}BN_LLONG RC4_CHAR MD2_CHAR:$tbn_mul::",
90 #"bl-4c-ri",    "$tcc:$tflags::$tlib:${bits1}BN_LLONG RC4_CHAR RC4_INDEX:$tbn_mul::",
91 #"b2-is-ri-dp", "$tcc:$tflags::$tlib:${bits2}IDEA_SHORT RC4_INDEX DES_PTR:$tbn_mul::",
92
93 # Our development configs
94 "purify",       "purify gcc:-g -DPURIFY -Wall:(unknown):-lsocket -lnsl::::",
95 "debug",        "gcc:-DBN_DEBUG -DREF_CHECK -DCRYPTO_MDEBUG -ggdb -g2 -Wformat -Wshadow -Wmissing-prototypes -Wmissing-declarations -Werror:(unknown):-lefence::::",
96 "debug-ben",    "gcc:-DBN_DEBUG -DREF_CHECK -DCRYPTO_MDEBUG -DPEDANTIC -O2 -pedantic -Wall -Wshadow -Werror -pipe:(unknown):::::",
97 "debug-ben-debug",      "gcc:-DBN_DEBUG -DREF_CHECK -DCRYPTO_MDEBUG -g3 -O2 -pedantic -Wall -Wshadow -Werror -pipe:(unknown):::::",
98 "debug-ben-strict",     "gcc:-DBN_DEBUG -DREF_CHECK -DCRYPTO_MDEBUG -DCONST_STRICT -O2 -Wall -Wshadow -Werror -Wpointer-arith -Wcast-qual -Wwrite-strings -pipe:(unknown):::::",
99 "debug-rse","cc:-DTERMIOS -DL_ENDIAN -pipe -O -g -ggdb3 -Wall:(unknown)::BN_LLONG $x86_gcc_des $x86_gcc_opts:$x86_elf_asm",
100 "dist",         "cc:-O:(unknown):::::",
101
102 # Basic configs that should work on any box
103 "gcc",          "gcc:-O3:(unknown)::BN_LLONG:::",
104 "cc",           "cc:-O:(unknown):::::",
105
106 # Solaris setups
107 "solaris-x86-gcc","gcc:-O3 -fomit-frame-pointer -m486 -Wall -DL_ENDIAN:-D_REENTRANT:-lsocket -lnsl:BN_LLONG $x86_gcc_des $x86_gcc_opts:$x86_sol_asm",
108 "solaris-sparc-gcc","gcc:-O3 -fomit-frame-pointer -mv8 -Wall -DB_ENDIAN:-D_REENTRANT:-lsocket -lnsl:BN_LLONG RC4_CHAR DES_UNROLL BF_PTR:asm/sparcv8.o::",
109 "solaris-usparc-gcc","gcc:-O3 -fomit-frame-pointer -mcpu=ultrasparc -Wall -DB_ENDIAN -DULTRASPARC:-D_REENTRANT:-lsocket -lnsl:BN_LLONG RC4_CHAR DES_UNROLL BF_PTR:asm/sparcv8plus-gcc.o:::asm/md5-sparcv8plus.o:",
110 "solaris-usparc-oldgcc","gcc:-O3 -fomit-frame-pointer -mv8 -Wall -DB_ENDIAN -DULTRASPARC:-D_REENTRANT:-lsocket -lnsl:BN_LLONG RC4_CHAR DES_UNROLL BF_PTR:asm/sparcv8plus-gcc.o:::asm/md5-sparcv8plus.o:",
111 "debug-solaris-sparc-gcc","gcc:-O3 -g -mv8 -Wall -DB_ENDIAN:-D_REENTRANT:-lsocket -lnsl:BN_LLONG RC4_CHAR DES_UNROLL BF_PTR:::",
112 "debug-solaris-usparc-gcc","gcc:-O3 -g -mcpu=ultrasparc -Wall -DB_ENDIAN:-D_REENTRANT:-lsocket -lnsl:BN_LLONG RC4_CHAR DES_UNROLL BF_PTR:asm/sparcv8plus-gcc.o::",
113
114 # DO NOT use /xO[34] on sparc with SC3.0.  It is broken, and will not pass the tests
115 "solaris-sparc-sc3","cc:-fast -O -Xa -DB_ENDIAN:-D_REENTRANT:-lsocket -lnsl:BN_LLONG RC4_CHAR DES_PTR DES_UNROLL BF_PTR:::",
116 # SC4 is ok, better than gcc even on bn as long as you tell it -xarch=v8
117 # -fast slows things like DES down quite a lot
118 "solaris-sparc-cc","cc:-xarch=v8 -xstrconst -xO5 -xdepend -Xa -DB_ENDIAN -DBN_DIV2W:-D_REENTRANT:-lsocket -lnsl:BN_LLONG RC4_CHAR DES_PTR DES_RISC1 DES_UNROLL BF_PTR:asm/sparcv8.o::",
119 "solaris-usparc-cc","cc:-xtarget=ultra -xarch=v8plus -xstrconst -xO5 -xdepend -Xa -DB_ENDIAN -DULTRASPARC -DBN_DIV2W:-D_REENTRANT:-lsocket -lnsl:BN_LLONG RC4_CHAR DES_PTR DES_RISC1 DES_UNROLL BF_PTR:asm/sparcv8plus.o:::asm/md5-sparcv8plus.o:",
120 "solaris64-usparc-cc","cc:-xtarget=ultra -xarch=v9 -xstrconst -xO5 -xdepend -Xa -DB_ENDIAN -DULTRASPARC:-D_REENTRANT:-lsocket -lnsl:SIXTY_FOUR_BIT_LONG RC4_CHAR DES_INT DES_PTR DES_RISC1 DES_UNROLL BF_PTR::::asm/md5-sparcv9.o:",
121
122 # Sunos configs, assuming sparc for the gcc one.
123 ##"sunos-cc", "cc:-O4 -DNOPROTO -DNOCONST:(unknown)::DES_UNROLL:::",
124 "sunos-gcc","gcc:-O3 -mv8:(unknown)::BN_LLONG RC4_CHAR DES_UNROLL DES_PTR DES_RISC1:::",
125
126 # SGI configurations.  If the box is rather old (r3000 cpu), you will
127 # probably have to remove the '-mips2' flag.  I've only been using
128 # IRIX 5.[23].
129 # I've recently done 32 and 64 bit mips assember, it make this RSA
130 # 3 times faster, use if at all possible.
131 #"irix-gcc","gcc:-O2 -mips2::SIXTY_FOUR_BIT BN_LLONG RC4_INDEX RC4_CHAR:::",
132 "irix-gcc","gcc:-O2 -DTERMIOS -DB_ENDIAN:(unknown)::BN_LLONG MD2_CHAR RC4_INDEX RC4_CHAR DES_UNROLL DES_RISC2 DES_PTR BF_PTR:::",
133 "irix-cc", "cc:-O2 -use_readonly_const -DTERMIOS -DB_ENDIAN:(unknown)::BN_LLONG DES_PTR DES_RISC2 DES_UNROLL BF_PTR:::",
134 "irix-mips3-gcc","gcc:-mips3 -O2 -DTERMIOS -DB_ENDIAN:(unknown)::MD2_CHAR RC4_INDEX RC4_CHAR DES_UNROLL DES_RISC2 DES_PTR BF_PTR SIXTY_FOUR_BIT:::",
135 "irix-mips3-cc", "cc:-n32 -mips3 -O2 -use_readonly_const -DTERMIOS -DB_ENDIAN:(unknown)::DES_PTR DES_RISC2 DES_UNROLL BF_PTR SIXTY_FOUR_BIT:::",
136 "debug-irix-cc", "cc:-w2 -g -DCRYPTO_MDEBUG -DTERMIOS -DB_ENDIAN:(unknown):::::",
137 # This is the n64 mode build. (Untested!)
138 "irix64-mips4-cc", "cc:-64 -mips4 -O2 -use_readonly_const -DTERMIOS:(unknown)::DES_RISC2 DES_UNROLL SIXTY_FOUR_BIT:::",
139
140 # HPUX 9.X config.
141 # Don't use the bundled cc.  It is broken.  Use HP ANSI C if possible, or gcc.
142 "hpux-cc",      "cc:-DB_ENDIAN -DBN_DIV2W -Ae +ESlit +O4 -z:(unknown)::BN_LLONG DES_PTR DES_UNROLL DES_RISC1:::",
143 "hpux-gcc",     "gcc:-DB_ENDIAN -DBN_DIV2W -O3:(unknown)::BN_LLONG DES_PTR DES_UNROLL DES_RISC1:::",
144 # HPUX 10.X config.  Supports threads.
145 "hpux10-cc",    "cc:-DB_ENDIAN -DBN_DIV2W -Ae +ESlit +O4 -z:-D_REENTRANT::BN_LLONG DES_PTR DES_UNROLL DES_RISC1:::",
146 "hpux10-gcc",   "gcc:-DB_ENDIAN -DBN_DIV2W -O3:-D_REENTRANT::BN_LLONG DES_PTR DES_UNROLL DES_RISC1:::",
147 # HPUX 11.X from www.globus.org.
148 # Only works on PA-RISC 2.0 cpus, and not optimized.  Why?
149 "hpux11-32bit-cc","cc:+DA2.0 -DB_ENDIAN -D_HPUX_SOURCE -Aa -Ae +ESlit:-D_REENTRANT::DES_PTR DES_UNROLL DES_RISC1:::",
150 "hpux11-64bit-cc","cc:+DA2.0W -g -D_HPUX_SOURCE -Aa -Ae +ESlit:-D_REENTRANT::SIXTY_FOUR_BIT_LONG MD2_CHAR RC4_INDEX RC4_CHAR DES_UNROLL DES_RISC1 DES_INT :::",
151
152 # Dec Alpha, OSF/1 - the alpha164-cc is the flags for a 21164A with
153 # the new compiler
154 # For gcc, the following gave a %50 speedup on a 164 over the 'DES_INT' version
155 "alpha-gcc","gcc:-O3:(unknown)::SIXTY_FOUR_BIT_LONG DES_UNROLL DES_RISC1:::",
156 "alpha-cc", "cc:-std1 -tune host -O4 -readonly_strings:(unknown)::SIXTY_FOUR_BIT_LONG:::",
157 "alpha164-cc", "cc:-std1 -tune host -fast -readonly_strings:(unknown)::SIXTY_FOUR_BIT_LONG:::",
158 "FreeBSD-alpha","gcc:-DTERMIOS -O3 -fomit-frame-pointer:(unknown)::SIXTY_FOUR_BIT_LONG DES_INT DES_PTR DES_RISC2:::",
159
160 # assembler versions -- currently defunct:
161 ##"alpha-gcc","gcc:-O3:(unknown)::SIXTY_FOUR_BIT_LONG DES_UNROLL DES_RISC1:asm/alpha.o::",
162 ##"alpha-cc", "cc:-tune host -O4 -readonly_strings:(unknown)::SIXTY_FOUR_BIT_LONG:asm/alpha.o::",
163 ##"alpha164-cc", "cc:-tune host -fast -readonly_strings:(unknown)::SIXTY_FOUR_BIT_LONG:asm/alpha.o::",
164 ##"OpenBSD-alpha","gcc:-DTERMIOS -O3 -fomit-frame-pointer:(unknown):SIXTY_FOUR_BIT_LONG DES_INT DES_PTR DES_RISC2:asm/alpha.o::",
165
166 # The intel boxes :-), It would be worth seeing if bsdi-gcc can use the
167 # bn86-elf.o file file since it is hand tweaked assembler.
168 "linux-elf",    "gcc:-DL_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -m486 -Wall:-D_REENTRANT::BN_LLONG $x86_gcc_des $x86_gcc_opts:$x86_elf_asm",
169 "debug-linux-elf","gcc:-DREF_CHECK -DCRYPTO_MDEBUG -DL_ENDIAN -DTERMIO -g -m486 -Wall:-D_REENTRANT:-lefence:BN_LLONG $x86_gcc_des $x86_gcc_opts:$x86_elf_asm",
170 "linux-aout",   "gcc:-DL_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -m486 -Wall:(unknown)::BN_LLONG $x86_gcc_des $x86_gcc_opts:$x86_out_asm",
171 "linux-mips",   "gcc:-DL_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall:(unknown)::BN_LLONG:::",
172 "linux-ppc",    "gcc:-DB_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall:(unknown)::::",
173 "NetBSD-sparc", "gcc:-DTERMIOS -O3 -fomit-frame-pointer -mv8 -Wall -DB_ENDIAN:(unknown)::BN_LLONG MD2_CHAR RC4_INDEX DES_UNROLL:::",
174 "NetBSD-m68",   "gcc:-DTERMIOS -O3 -fomit-frame-pointer -Wall -DB_ENDIAN:(unknown)::BN_LLONG MD2_CHAR RC4_INDEX DES_UNROLL:::",
175 "NetBSD-x86",   "gcc:-DTERMIOS -D_ANSI_SOURCE -O3 -fomit-frame-pointer -m486 -Wall:(unknown)::BN_LLONG $x86_gcc_des $x86_gcc_opts:",
176 #"FreeBSD",   "gcc:-DTERMIOS -DL_ENDIAN -D_ANSI_SOURCE -fomit-frame-pointer -O3 -m486 -Wall:(unknown)::BN_LLONG $x86_gcc_des $x86_gcc_opts:$x86_out_asm",
177 "FreeBSD",      "gcc:-DTERMIOS -DL_ENDIAN -fomit-frame-pointer -O3 -m486 -Wall:(unknown)::BN_LLONG $x86_gcc_des $x86_gcc_opts:$x86_out_asm",
178 "FreeBSD-elf",  "gcc:-DTERMIOS -DL_ENDIAN -fomit-frame-pointer -O3 -m486 -Wall:(unknown)::BN_LLONG $x86_gcc_des $x86_gcc_opts:$x86_elf_asm",
179 "bsdi-gcc",     "gcc:-O3 -ffast-math -DL_ENDIAN -DPERL5 -m486:(unknown)::RSA_LLONG $x86_gcc_des $x86_gcc_opts:$x86_bsdi_asm",
180 "nextstep",     "cc:-O3 -Wall:(unknown)::BN_LLONG $x86_gcc_des ${x86_gcc_opts}:::",
181 # NCR MP-RAS UNIX ver 02.03.01
182 "ncr-scde","cc:-O6 -Xa -Hoff=BEHAVED -686 -Hwide -Hiw:(unknown):-lsocket -lnsl:$x86_gcc_des ${x86_gcc_opts}:::",
183
184 # UnixWare 2.0
185 "unixware-2.0","cc:-O -DFILIO_H:(unknown):-lsocket -lnsl:$x86_gcc_des ${x86_gcc_opts}:::",
186 "unixware-2.0-pentium","cc:-O -DFILIO_H -Kpentium -Kthread:(unknown):-lsocket -lnsl:MD2_CHAR RC4_INDEX ${x86_gcc_des}::",
187
188 # IBM's AIX.
189 "aix-cc",   "cc:-O -DAIX -DB_ENDIAN:(unknown)::BN_LLONG RC4_CHAR:::",
190 "aix-gcc",  "gcc:-O3 -DAIX -DB_ENDIAN:(unknown)::BN_LLONG RC4_CHAR:::",
191
192 #
193 # Cray T90 (SDSC)
194 # It's Big-endian, but the algorithms work properly when B_ENDIAN is NOT
195 # defined.  The T90 ints and longs are 8 bytes long, and apparently the
196 # B_ENDIAN code assumes 4 byte ints.  Fortunately, the non-B_ENDIAN and
197 # non L_ENDIAN code aligns the bytes in each word correctly.
198 #
199 # The BIT_FIELD_LIMITS define is to avoid two fatal compiler errors:
200 #'Taking the address of a bit field is not allowed. '
201 #'An expression with bit field exists as the operand of "sizeof" '
202 # (written by Wayne Schroeder <schroede@SDSC.EDU>)
203 "cray-t90-cc", "cc: -DBIT_FIELD_LIMITS -DTERMIOS:(unknown)::SIXTY_FOUR_BIT_LONG DES_INT:::",
204
205 #
206 # Cray T3E (Research Center Juelich, beckman@acl.lanl.gov)
207 #
208 # The BIT_FIELD_LIMITS define was written for the C90 (it seems).  I added
209 # another use.  Basically, the problem is that the T3E uses some bit fields
210 # for some st_addr stuff, and then sizeof and address-of fails
211 # I could not use the ams/alpha.o option because the Cray assembler, 'cam'
212 # did not like it.
213 "cray-t3e", "cc: -DBIT_FIELD_LIMITS -DTERMIOS:(unknown)::SIXTY_FOUR_BIT_LONG DES_INT:::",
214
215 # DGUX, 88100.
216 "dgux-R3-gcc",  "gcc:-O3 -fomit-frame-pointer:(unknown)::RC4_INDEX DES_UNROLL:::",
217 "dgux-R4-gcc",  "gcc:-O3 -fomit-frame-pointer:(unknown):-lnsl -lsocket:RC4_INDEX:RC4_INDEX DES_UNROLL:::",
218 "dgux-R4-x86-gcc",      "gcc:-O3 -fomit-frame-pointer -DL_ENDIAN:(unknown):-lnsl -lsocket:BN_LLONG $x86_gcc_des $x86_gcc_opts:$x86_elf_asm",
219
220 # SCO 5 - Ben Laurie <ben@algroup.co.uk> says the -O breaks the
221 # SCO cc.
222 "sco5-cc",  "cc::(unknown):-lsocket:$x86_gcc_des ${x86_gcc_opts}:::", # des options?
223
224 # Sinix/ReliantUNIX RM400
225 # NOTE: The CDS++ Compiler up to V2.0Bsomething has the IRIX_CC_BUG optimizer problem. Better use -g  */
226 "ReliantUNIX","cc:-KPIC -g -DSNI -DTERMIOS -DB_ENDIAN:-Kthread:-lsocket -lnsl -lc -L/usr/ucblib -lucb:BN_LLONG DES_PTR DES_RISC2 DES_UNROLL BF_PTR:::",
227 "SINIX","cc:-O -DSNI:(unknown):-lsocket -lnsl -lc -L/usr/ucblib -lucb:RC4_INDEX RC4_CHAR:::",
228 "SINIX-N","/usr/ucb/cc:-O2 -misaligned:(unknown):-lucb:RC4_INDEX RC4_CHAR:::",
229
230 # Windows NT, Microsoft Visual C++ 4.0
231
232 "VC-NT","cl::(unknown)::BN_LLONG RC4_INDEX ${x86_gcc_opts}:::",
233 "VC-WIN32","cl::(unknown)::BN_LLONG RC4_INDEX ${x86_gcc_opts}:::",
234 "VC-WIN16","cl::(unknown)::MD2_CHAR DES_UNROLL DES_PTR RC4_INDEX THIRTY_TWO_BIT:::",
235 "VC-W31-16","cl::(unknown)::BN_LLONG MD2_CHAR DES_UNROLL DES_PTR RC4_INDEX SIXTEEN_BIT:::",
236 "VC-W31-32","cl::(unknown)::BN_LLONG MD2_CHAR DES_UNROLL DES_PTR RC4_INDEX THIRTY_TWO_BIT:::",
237 "VC-MSDOS","cl::(unknown)::BN_LLONG MD2_CHAR DES_UNROLL DES_PTR RC4_INDEX SIXTEEN_BIT:::",
238
239 # Borland C++ 4.5
240 "BC-32","bcc32::(unknown)::BN_LLONG DES_PTR RC4_INDEX:::",
241 "BC-16","bcc::(unknown)::BN_LLONG DES_PTR RC4_INDEX SIXTEEN_BIT:::",
242
243 # CygWin32
244 "CygWin32", "gcc:-DTERMIOS -DL_ENDIAN -fomit-frame-pointer -O3 -m486 -Wall:(unknown)::BN_LLONG $x86_gcc_des $x86_gcc_opts:",
245 "Mingw32", "gcc:-DL_ENDIAN -fomit-frame-pointer -O3 -m486 -Wall:(unknown):BN_LLONG $x86_gcc_des $x86_gcc_opts:",
246
247 # Ultrix from Bernhard Simon <simon@zid.tuwien.ac.at>
248 "ultrix-cc","cc:-std1 -O -Olimit 1000 -DL_ENDIAN:(unknown)::::::",
249 "ultrix-gcc","gcc:-O3 -DL_ENDIAN:(unknown)::::::",
250 # K&R C is no longer supported; you need gcc on old Ultrix installations
251 ##"ultrix","cc:-O2 -DNOPROTO -DNOCONST -DL_ENDIAN:(unknown)::::::",
252
253 # Some OpenBSD from Bob Beck <beck@obtuse.com>
254 "OpenBSD-alpha","gcc:-DTERMIOS -O3 -fomit-frame-pointer:(unknown)::SIXTY_FOUR_BIT_LONG DES_INT DES_PTR DES_RISC2:::",
255 "OpenBSD-x86",  "gcc:-DL_ENDIAN -DTERMIOS -O3 -fomit-frame-pointer -m486:(unknown)::BN_LLONG $x86_gcc_des $x86_gcc_opts:$x86_out_asm",
256 "OpenBSD",      "gcc:-DTERMIOS -O3 -fomit-frame-pointer:(unknown)::BN_LLONG RC2_CHAR RC4_INDEX DES_UNROLL:::",
257 "OpenBSD-mips","gcc:-O2 -DL_ENDIAN:(unknown):BN_LLONG MD2_CHAR RC4_INDEX RC4_CHAR DES_UNROLL DES_RISC2 DES_PTR BF_PTR::::",
258
259 );
260
261 my @WinTargets=qw(VC-NT VC-WIN32 VC-WIN16 VC-W31-16 VC-W31-32 VC-MSDOS BC-32
262         BC-16 CygWin32 Mingw32);
263
264 my $prefix="";
265 my $openssldir="";
266 my $install_prefix="";
267 my $no_threads=0;
268 my $threads=0;
269 my $no_asm=0;
270 my @skip=();
271 my $Makefile="Makefile.ssl";
272 my $des_locl="crypto/des/des_locl.h";
273 my $des ="crypto/des/des.h";
274 my $bn  ="crypto/bn/bn.h";
275 my $md2 ="crypto/md2/md2.h";
276 my $rc4 ="crypto/rc4/rc4.h";
277 my $rc4_locl="crypto/rc4/rc4_locl.h";
278 my $idea        ="crypto/idea/idea.h";
279 my $rc2 ="crypto/rc2/rc2.h";
280 my $bf  ="crypto/bf/bf_locl.h";
281 my $bn_asm      ="bn_asm.o";
282 my $des_enc="des_enc.o fcrypt_b.o";
283 my $bf_enc      ="bf_enc.o";
284 my $cast_enc="c_enc.o";
285 my $rc4_enc="rc4_enc.o";
286 my $rc5_enc="rc5_enc.o";
287 my $md5_obj="";
288 my $sha1_obj="";
289 my $rmd160_obj="";
290 my $processor="";
291 my $ranlib;
292 my $perl;
293
294 $ranlib=&which("ranlib") or $ranlib="true";
295 $perl=&which("perl5") or $perl=&which("perl") or $perl="perl";
296
297 &usage if ($#ARGV < 0);
298
299 my $flags="";
300 my $depflags="";
301 my $libs="";
302 my $target="";
303 my $options="";
304 foreach (@ARGV)
305         {
306         if (/^no-asm$/)
307                 { $no_asm=1; }
308         elsif (/^no-threads$/)
309                 { $no_threads=1; }
310         elsif (/^threads$/)
311                 { $threads=1; }
312         elsif (/^no-(.+)$/)
313                 {
314                 my $algo=$1;
315                 push @skip,$algo;
316                 $algo =~ tr/[a-z]/[A-Z]/;
317                 $flags .= "-DNO_$algo ";
318                 $depflags .= "-DNO_$algo ";
319                 }
320         elsif (/^386$/)
321                 { $processor=386; }
322         elsif (/^rsaref$/)
323                 {
324                 $libs.= "-lRSAglue -lrsaref ";
325                 $flags.= "-DRSAref ";
326                 }
327         elsif (/^[-+]/)
328                 {
329                 if (/^-[lL](.*)$/)
330                         {
331                         $libs.=$_." ";
332                         }
333                 elsif (/^-[^-]/ or /^\+/)
334                         {
335                         $flags.=$_." ";
336                         }
337                 elsif (/^--prefix=(.*)$/)
338                         {
339                         $prefix=$1;
340                         }
341                 elsif (/^--openssldir=(.*)$/)
342                         {
343                         $openssldir=$1;
344                         }
345                 elsif (/^--install.prefix=(.*)$/)
346                         {
347                         $install_prefix=$1;
348                         }
349                 else
350                         {
351                         print STDERR $usage;
352                         exit(1);
353                         }
354                 }
355         elsif ($_ =~ /^([^:]+):(.+)$/)
356                 {
357                 eval "\$table{\$1} = \"$2\""; # allow $xxx constructs in the string
358                 $target=$1;
359                 }
360         else
361                 {
362                 die "target already defined - $target\n" if ($target ne "");
363                 $target=$_;
364                 }
365         $options .= $_ unless $_ eq $target;
366 }
367
368 &usage if (!defined($table{$target}));
369
370 my $IsWindows=scalar grep /^$target$/,@WinTargets;
371
372 $openssldir="/usr/local/ssl" if ($openssldir eq "" and $prefix eq "");
373 $prefix=$openssldir if $prefix eq "";
374
375 chop $openssldir if $openssldir =~ /\/$/;
376 chop $prefix if $prefix =~ /\/$/;
377
378 $openssldir=$prefix . "/ssl" if $openssldir eq "";
379 $openssldir=$prefix . "/" . $openssldir if $openssldir !~ /^\//;
380
381
382 print "IsWindows=$IsWindows\n";
383
384 (my $cc,my $cflags,my $thread_cflag,my $lflags,my $bn_ops,my $bn_obj,my $des_obj,my $bf_obj,
385  $md5_obj,$sha1_obj,my $cast_obj,my $rc4_obj,$rmd160_obj,my $rc5_obj)=
386         split(/\s*:\s*/,$table{$target} . ":" x 20 , -1);
387 $cflags="$flags$cflags" if ($flags ne "");
388
389 my $thread_cflags;
390 if ($thread_cflag ne "(unknown)" && !$no_threads)
391         {
392         # If we know how to do it, support threads by default.
393         $threads = 1;
394         }
395 if ($thread_cflag eq "(unknown)")
396         {
397         # If the user asked for "threads", hopefully they also provided
398         # any system-dependent compiler options that are necessary.
399         $thread_cflags="-DTHREADS $cflags" 
400         }
401 else
402         {
403         $thread_cflags="-DTHREADS $thread_cflag $cflags" 
404         }       
405
406 $lflags="$libs$lflags"if ($libs ne "");
407
408 if ($no_asm)
409         {
410         $bn_obj=$des_obj=$bf_obj=$cast_obj=$rc4_obj=$rc5_obj="";
411         $sha1_obj=$md5_obj=$rmd160_obj="";
412         }
413
414 if ($threads)
415         {
416                 $cflags=$thread_cflags;
417         }
418
419 #my ($bn1)=split(/\s+/,$bn_obj);
420 #$bn1 = "" unless defined $bn1;
421 #$bn1=$bn_asm unless ($bn1 =~ /\.o$/);
422 #$bn_obj="$bn1";
423
424 $bn_obj = $bn_asm unless $bn_obj ne "";
425
426 $des_obj=$des_enc       unless ($des_obj =~ /\.o$/);
427 $bf_obj=$bf_enc         unless ($bf_obj =~ /\.o$/);
428 $cast_obj=$cast_enc     unless ($cast_obj =~ /\.o$/);
429 $rc4_obj=$rc4_enc       unless ($rc4_obj =~ /\.o$/);
430 $rc5_obj=$rc5_enc       unless ($rc5_obj =~ /\.o$/);
431 if ($sha1_obj =~ /\.o$/)
432         {
433 #       $sha1_obj=$sha1_enc;
434         $cflags.=" -DSHA1_ASM";
435         }
436 if ($md5_obj =~ /\.o$/)
437         {
438 #       $md5_obj=$md5_enc;
439         $cflags.=" -DMD5_ASM";
440         }
441 if ($rmd160_obj =~ /\.o$/)
442         {
443 #       $rmd160_obj=$rmd160_enc;
444         $cflags.=" -DRMD160_ASM";
445         }
446
447 my $version = "unknown";
448 my $major = "unknown";
449 my $minor = "unknown";
450
451 open(IN,'<crypto/opensslv.h') || die "unable to read opensslv.h:$!\n";
452 while (<IN>)
453         {
454         $version=$1 if /OPENSSL.VERSION.TEXT.*OpenSSL (\S+) /;
455         }
456 close(IN);
457
458 if ($version =~ /(^[0-9]*)\.([0-9\.]*)/)
459         {
460         $major=$1;
461         $minor=$2;
462         }
463
464 open(IN,'<Makefile.org') || die "unable to read Makefile.org:$!\n";
465 open(OUT,">$Makefile") || die "unable to create $Makefile:$!\n";
466 my $sdirs=0;
467 while (<IN>)
468         {
469         chop;
470         $sdirs = 1 if /^SDIRS=/;
471         $sdirs = 0 unless /\\$/;
472         if ($sdirs) {
473                 my $dir;
474                 foreach $dir (@skip) {
475                         s/$dir//;
476                         }
477                 }
478         s/^VERSION=.*/VERSION=$version/;
479         s/^MAJOR=.*/MAJOR=$major/;
480         s/^MINOR=.*/MINOR=$minor/;
481         s/^INSTALLTOP=.*$/INSTALLTOP=$prefix/;
482         s/^OPENSSLDIR=.*$/OPENSSLDIR=$openssldir/;
483         s/^INSTALL_PREFIX=.*$/INSTALL_PREFIX=$install_prefix/;
484         s/^PLATFORM=.*$/PLATFORM=$target/;
485         s/^OPTIONS=.*$/OPTIONS=$options/;
486         s/^CC=.*$/CC= $cc/;
487         s/^CFLAG=.*$/CFLAG= $cflags/;
488         s/^DEPFLAG=.*$/DEPFLAG= $depflags/;
489         s/^EX_LIBS=.*$/EX_LIBS= $lflags/;
490         s/^BN_ASM=.*$/BN_ASM= $bn_obj/;
491         s/^DES_ENC=.*$/DES_ENC= $des_obj/;
492         s/^BF_ENC=.*$/BF_ENC= $bf_obj/;
493         s/^CAST_ENC=.*$/CAST_ENC= $cast_obj/;
494         s/^RC4_ENC=.*$/RC4_ENC= $rc4_obj/;
495         s/^RC5_ENC=.*$/RC5_ENC= $rc5_obj/;
496         s/^MD5_ASM_OBJ=.*$/MD5_ASM_OBJ= $md5_obj/;
497         s/^SHA1_ASM_OBJ=.*$/SHA1_ASM_OBJ= $sha1_obj/;
498         s/^RMD160_ASM_OBJ=.*$/RMD160_ASM_OBJ= $rmd160_obj/;
499         s/^PROCESSOR=.*/PROCESSOR= $processor/;
500         s/^RANLIB=.*/RANLIB= $ranlib/;
501         s/^PERL=.*/PERL= $perl/;
502         print OUT $_."\n";
503         }
504 close(IN);
505 close(OUT);
506
507 print "CC            =$cc\n";
508 print "CFLAG         =$cflags\n";
509 print "EX_LIBS       =$lflags\n";
510 print "BN_ASM        =$bn_obj\n";
511 print "DES_ENC       =$des_obj\n";
512 print "BF_ENC        =$bf_obj\n";
513 print "CAST_ENC      =$cast_obj\n";
514 print "RC4_ENC       =$rc4_obj\n";
515 print "RC5_ENC       =$rc5_obj\n";
516 print "MD5_OBJ_ASM   =$md5_obj\n";
517 print "SHA1_OBJ_ASM  =$sha1_obj\n";
518 print "RMD160_OBJ_ASM=$rmd160_obj\n";
519 print "PROCESSOR     =$processor\n";
520 print "RANLIB        =$ranlib\n";
521 print "PERL          =$perl\n";
522
523 my $des_ptr=0;
524 my $des_risc1=0;
525 my $des_risc2=0;
526 my $des_unroll=0;
527 my $bn_ll=0;
528 my $def_int=2;
529 my $rc4_int=$def_int;
530 my $md2_int=$def_int;
531 my $idea_int=$def_int;
532 my $rc2_int=$def_int;
533 my $rc4_idx=0;
534 my $bf_ptr=0;
535 my @type=("char","short","int","long");
536 my ($b64l,$b64,$b32,$b16,$b8)=(0,0,1,0,0);
537
538 my $des_int;
539
540 foreach (sort split(/\s+/,$bn_ops))
541         {
542         $des_ptr=1 if /DES_PTR/;
543         $des_risc1=1 if /DES_RISC1/;
544         $des_risc2=1 if /DES_RISC2/;
545         $des_unroll=1 if /DES_UNROLL/;
546         $des_int=1 if /DES_INT/;
547         $bn_ll=1 if /BN_LLONG/;
548         $rc4_int=0 if /RC4_CHAR/;
549         $rc4_int=3 if /RC4_LONG/;
550         $rc4_idx=1 if /RC4_INDEX/;
551         $md2_int=0 if /MD2_CHAR/;
552         $md2_int=3 if /MD2_LONG/;
553         $idea_int=1 if /IDEA_SHORT/;
554         $idea_int=3 if /IDEA_LONG/;
555         $rc2_int=1 if /RC2_SHORT/;
556         $rc2_int=3 if /RC2_LONG/;
557         $bf_ptr=1 if $_ eq "BF_PTR";
558         $bf_ptr=2 if $_ eq "BF_PTR2";
559         ($b64l,$b64,$b32,$b16,$b8)=(0,1,0,0,0) if /SIXTY_FOUR_BIT/;
560         ($b64l,$b64,$b32,$b16,$b8)=(1,0,0,0,0) if /SIXTY_FOUR_BIT_LONG/;
561         ($b64l,$b64,$b32,$b16,$b8)=(0,0,1,0,0) if /THIRTY_TWO_BIT/;
562         ($b64l,$b64,$b32,$b16,$b8)=(0,0,0,1,0) if /SIXTEEN_BIT/;
563         ($b64l,$b64,$b32,$b16,$b8)=(0,0,0,0,1) if /EIGHT_BIT/;
564         }
565
566 open(IN,'<crypto/opensslconf.h.in') || die "unable to read crypto/opensslconf.h.in:$!\n";
567 open(OUT,'>crypto/opensslconf.h') || die "unable to create crypto/opensslconf.h:$!\n";
568 while (<IN>)
569         {
570         if      (/^#define\s+OPENSSLDIR/)
571                 { print OUT "#define OPENSSLDIR \"$openssldir\"\n"; }
572         elsif   (/^#((define)|(undef))\s+SIXTY_FOUR_BIT_LONG/)
573                 { printf OUT "#%s SIXTY_FOUR_BIT_LONG\n",($b64l)?"define":"undef"; }
574         elsif   (/^#((define)|(undef))\s+SIXTY_FOUR_BIT/)
575                 { printf OUT "#%s SIXTY_FOUR_BIT\n",($b64)?"define":"undef"; }
576         elsif   (/^#((define)|(undef))\s+THIRTY_TWO_BIT/)
577                 { printf OUT "#%s THIRTY_TWO_BIT\n",($b32)?"define":"undef"; }
578         elsif   (/^#((define)|(undef))\s+SIXTEEN_BIT/)
579                 { printf OUT "#%s SIXTEEN_BIT\n",($b16)?"define":"undef"; }
580         elsif   (/^#((define)|(undef))\s+EIGHT_BIT/)
581                 { printf OUT "#%s EIGHT_BIT\n",($b8)?"define":"undef"; }
582         elsif   (/^#((define)|(undef))\s+BN_LLONG\s*$/)
583                 { printf OUT "#%s BN_LLONG\n",($bn_ll)?"define":"undef"; }
584         elsif   (/^\#define\s+DES_LONG\s+.*/)
585                 { printf OUT "#define DES_LONG unsigned %s\n",
586                         ($des_int)?'int':'long'; }
587         elsif   (/^\#(define|undef)\s+DES_PTR/)
588                 { printf OUT "#%s DES_PTR\n",($des_ptr)?'define':'undef'; }
589         elsif   (/^\#(define|undef)\s+DES_RISC1/)
590                 { printf OUT "#%s DES_RISC1\n",($des_risc1)?'define':'undef'; }
591         elsif   (/^\#(define|undef)\s+DES_RISC2/)
592                 { printf OUT "#%s DES_RISC2\n",($des_risc2)?'define':'undef'; }
593         elsif   (/^\#(define|undef)\s+DES_UNROLL/)
594                 { printf OUT "#%s DES_UNROLL\n",($des_unroll)?'define':'undef'; }
595         elsif   (/^#define\s+RC4_INT\s/)
596                 { printf OUT "#define RC4_INT unsigned %s\n",$type[$rc4_int]; }
597         elsif   (/^#((define)|(undef))\s+RC4_INDEX/)
598                 { printf OUT "#%s RC4_INDEX\n",($rc4_idx)?"define":"undef"; }
599         elsif (/^#(define|undef)\s+I386_ONLY/)
600                 { printf OUT "#%s I386_ONLY\n", ($processor == 386)?
601                         "define":"undef"; }
602         elsif   (/^#define\s+MD2_INT\s/)
603                 { printf OUT "#define MD2_INT unsigned %s\n",$type[$md2_int]; }
604         elsif   (/^#define\s+IDEA_INT\s/)
605                 {printf OUT "#define IDEA_INT unsigned %s\n",$type[$idea_int];}
606         elsif   (/^#define\s+RC2_INT\s/)
607                 {printf OUT "#define RC2_INT unsigned %s\n",$type[$rc2_int];}
608         elsif (/^#(define|undef)\s+BF_PTR/)
609                 {
610                 printf OUT "#undef BF_PTR\n" if $bf_ptr == 0;
611                 printf OUT "#define BF_PTR\n" if $bf_ptr == 1;
612                 printf OUT "#define BF_PTR2\n" if $bf_ptr == 2;
613                 }
614         else
615                 { print OUT $_; }
616         }
617 close(IN);
618 close(OUT);
619
620 # Fix the date
621
622 print "SIXTY_FOUR_BIT_LONG mode\n" if $b64l;
623 print "SIXTY_FOUR_BIT mode\n" if $b64;
624 print "THIRTY_TWO_BIT mode\n" if $b32;
625 print "SIXTEEN_BIT mode\n" if $b16;
626 print "EIGHT_BIT mode\n" if $b8;
627 print "DES_PTR used\n" if $des_ptr;
628 print "DES_RISC1 used\n" if $des_risc1;
629 print "DES_RISC2 used\n" if $des_risc2;
630 print "DES_UNROLL used\n" if $des_unroll;
631 print "DES_INT used\n" if $des_int;
632 print "BN_LLONG mode\n" if $bn_ll;
633 print "RC4 uses u$type[$rc4_int]\n" if $rc4_int != $def_int;
634 print "RC4_INDEX mode\n" if $rc4_idx;
635 print "MD2 uses u$type[$md2_int]\n" if $md2_int != $def_int;
636 print "IDEA uses u$type[$idea_int]\n" if $idea_int != $def_int;
637 print "RC2 uses u$type[$rc2_int]\n" if $rc2_int != $def_int;
638 print "BF_PTR used\n" if $bf_ptr == 1; 
639 print "BF_PTR2 used\n" if $bf_ptr == 2; 
640
641 if($IsWindows) {
642         open (OUT,">crypto/date.h") || die "Can't open date.h";
643         printf OUT "#define DATE \"%s\"\n", scalar gmtime();
644         close(OUT);
645         system "perl crypto/objects/obj_dat.pl <crypto/objects/objects.h >crypto/objects/obj_dat.h";
646 } else {
647         (system "make -f Makefile.ssl PERL=\'$perl\' links") == 0 or exit $?;
648         ### (system 'make depend') == 0 or exit $? if $depflags ne "";
649         # Run "make depend" manually if you want to be able to delete
650         # the source code files of ciphers you left out.
651         &dofile("tools/c_rehash",$openssldir,'^DIR=',   'DIR=%s',);
652 }
653
654 my $pwd;
655
656 if($IsWindows) {
657         $pwd="(current directory)";
658 } else {
659         $pwd =`pwd`;
660         chop($pwd);
661 }
662 print <<EOF;
663
664 NOTE: The OpenSSL header files have been moved from include/*.h
665 to include/openssl/*.h.  To include OpenSSL header files, now
666 directives of the form
667      #include <openssl/foo.h>
668 should be used instead of #include <foo.h>.
669 These new file locations allow installing the OpenSSL header
670 files in /usr/local/include/openssl/ and should help avoid
671 conflicts with other libraries.
672
673 To compile programs that use the old form <foo.h>,
674 usually an additional compiler option will suffice: E.g., add
675      -I$prefix/include/openssl
676 or
677      -I$pwd/include/openssl
678 to the CFLAGS in the Makefile of the program that you want to compile
679 (and leave all the original -I...'s in place!).
680
681 Please make sure that no old OpenSSL header files are around:
682 The include directory should now be empty except for the openssl
683 subdirectory.
684
685 EOF
686
687 print <<\EOF if (!$no_threads && !$threads);
688
689 The library could not be configured for supporting multi-threaded
690 applications as the compiler options required on this system are not known.
691 See file INSTALL for details.
692
693 EOF
694
695 exit(0);
696
697 sub usage
698         {
699         print STDERR $usage;
700         print STDERR "pick os/compiler from:";
701         my $j=0;
702         my $i;
703         foreach $i (sort keys %table)
704                 {
705                 next if $i =~ /^debug/;
706                 print STDERR "\n" if ($j++ % 4) == 0;
707                 printf(STDERR "%-18s ",$i);
708                 }
709         foreach $i (sort keys %table)
710                 {
711                 next if $i !~ /^debug/;
712                 print STDERR "\n" if ($j++ % 4) == 0;
713                 printf(STDERR "%-18s ",$i);
714                 }
715         print STDERR "\n";
716         exit(1);
717         }
718
719 sub which
720         {
721         my($name)=@_;
722         my $path;
723         foreach $path (split /:/, $ENV{PATH})
724                 {
725                 if (-x "$path/$name")
726                         {
727                         return "$path/$name" unless ($name eq "perl" and
728                          system("$path/$name -e " . '\'exit($]<5.0);\''));
729                         }
730                 }
731         }
732
733 sub dofile
734         {
735         my $f; my $p; my %m; my @a; my $k; my $ff;
736         ($f,$p,%m)=@_;
737
738         open(IN,"<$f.in") || open(IN,"<$f") || die "unable to open $f:$!\n";
739         @a=<IN>;
740         close(IN);
741         foreach $k (keys %m)
742                 {
743                 grep(/$k/ && ($_=sprintf($m{$k}."\n",$p)),@a);
744                 }
745         ($ff=$f) =~ s/\..*$//;
746         open(OUT,">$ff.new") || die "unable to open $f:$!\n";
747         print OUT @a;
748         close(OUT);
749         rename($f,"$ff.bak") || die "unable to rename $f\n" if -e $f;
750         rename("$ff.new",$f) || die "unable to rename $ff.new\n";
751         }