Relax the requirements for a debug build
[openssl.git] / Configure
1 #! /usr/bin/env perl
2 # -*- mode: perl; -*-
3
4 ##
5 ##  Configure -- OpenSSL source tree configuration script
6 ##  If editing this file, run this command before committing
7 ##      make -f Makefile.in TABLE
8 ##
9
10 require 5.000;
11 use strict;
12 use File::Basename;
13 use File::Spec::Functions;
14
15 # see INSTALL for instructions.
16
17 my $usage="Usage: Configure [no-<cipher> ...] [enable-<cipher> ...] [experimental-<cipher> ...] [-Dxxx] [-lxxx] [-Lxxx] [-fxxx] [-Kxxx] [no-hw-xxx|no-hw] [[no-]threads] [[no-]shared] [[no-]zlib|zlib-dynamic] [no-asm] [no-dso] [sctp] [386] [--prefix=DIR] [--openssldir=OPENSSLDIR] [--with-xxx[=vvv]] [--test-sanity] [--config=FILE] os/compiler[:flags]\n";
18
19 # Options:
20 #
21 # --config      add the given configuration file, which will be read after
22 #               any "Configurations*" files that are found in the same
23 #               directory as this script.
24 # --openssldir  install OpenSSL in OPENSSLDIR (Default: DIR/ssl if the
25 #               --prefix option is given; /usr/local/ssl otherwise)
26 # --prefix      prefix for the OpenSSL include, lib and bin directories
27 #               (Default: the OPENSSLDIR directory)
28 #
29 # --install_prefix  Additional prefix for package builders (empty by
30 #               default).  This needn't be set in advance, you can
31 #               just as well use "make INSTALL_PREFIX=/whatever install".
32 #
33 # --test-sanity Make a number of sanity checks on the data in this file.
34 #               This is a debugging tool for OpenSSL developers.
35 #
36 # --cross-compile-prefix Add specified prefix to binutils components.
37 #
38 # --api         One of 0.9.8, 1.0.0 or 1.1.0.  Do not compile support for
39 #               interfaces deprecated as of the specified OpenSSL version.
40 #
41 # no-hw-xxx     do not compile support for specific crypto hardware.
42 #               Generic OpenSSL-style methods relating to this support
43 #               are always compiled but return NULL if the hardware
44 #               support isn't compiled.
45 # no-hw         do not compile support for any crypto hardware.
46 # [no-]threads  [don't] try to create a library that is suitable for
47 #               multithreaded applications (default is "threads" if we
48 #               know how to do it)
49 # [no-]shared   [don't] try to create shared libraries when supported.
50 # no-asm        do not use assembler
51 # no-dso        do not compile in any native shared-library methods. This
52 #               will ensure that all methods just return NULL.
53 # [no-]zlib     [don't] compile support for zlib compression.
54 # zlib-dynamic  Like "zlib", but the zlib library is expected to be a shared
55 #               library and will be loaded in run-time by the OpenSSL library.
56 # sctp          include SCTP support
57 # 386           generate 80386 code
58 # no-sse2       disables IA-32 SSE2 code, above option implies no-sse2
59 # no-<cipher>   build without specified algorithm (rsa, idea, rc5, ...)
60 # -<xxx> +<xxx> compiler options are passed through
61 #
62 # DEBUG_SAFESTACK use type-safe stacks to enforce type-safety on stack items
63 #               provided to stack calls. Generates unique stack functions for
64 #               each possible stack type.
65 # DES_PTR       use pointer lookup vs arrays in the DES in crypto/des/des_locl.h
66 # DES_RISC1     use different DES_ENCRYPT macro that helps reduce register
67 #               dependancies but needs to more registers, good for RISC CPU's
68 # DES_RISC2     A different RISC variant.
69 # DES_UNROLL    unroll the inner DES loop, sometimes helps, somtimes hinders.
70 # DES_INT       use 'int' instead of 'long' for DES_LONG in crypto/des/des.h
71 #               This is used on the DEC Alpha where long is 8 bytes
72 #               and int is 4
73 # BN_LLONG      use the type 'long long' in crypto/bn/bn.h
74 # MD2_CHAR      use 'char' instead of 'int' for MD2_INT in crypto/md2/md2.h
75 # MD2_LONG      use 'long' instead of 'int' for MD2_INT in crypto/md2/md2.h
76 # IDEA_SHORT    use 'short' instead of 'int' for IDEA_INT in crypto/idea/idea.h
77 # IDEA_LONG     use 'long' instead of 'int' for IDEA_INT in crypto/idea/idea.h
78 # RC2_SHORT     use 'short' instead of 'int' for RC2_INT in crypto/rc2/rc2.h
79 # RC2_LONG      use 'long' instead of 'int' for RC2_INT in crypto/rc2/rc2.h
80 # RC4_CHAR      use 'char' instead of 'int' for RC4_INT in crypto/rc4/rc4.h
81 # RC4_LONG      use 'long' instead of 'int' for RC4_INT in crypto/rc4/rc4.h
82 # RC4_INDEX     define RC4_INDEX in crypto/rc4/rc4_locl.h.  This turns on
83 #               array lookups instead of pointer use.
84 # RC4_CHUNK     enables code that handles data aligned at long (natural CPU
85 #               word) boundary.
86 # RC4_CHUNK_LL  enables code that handles data aligned at long long boundary
87 #               (intended for 64-bit CPUs running 32-bit OS).
88 # BF_PTR        use 'pointer arithmatic' for Blowfish (unsafe on Alpha).
89 # BF_PTR2       intel specific version (generic version is more efficient).
90 #
91 # Following are set automatically by this script
92 #
93 # MD5_ASM       use some extra md5 assember,
94 # SHA1_ASM      use some extra sha1 assember, must define L_ENDIAN for x86
95 # RMD160_ASM    use some extra ripemd160 assember,
96 # SHA256_ASM    sha256_block is implemented in assembler
97 # SHA512_ASM    sha512_block is implemented in assembler
98 # AES_ASM       ASE_[en|de]crypt is implemented in assembler
99
100 # Minimum warning options... any contributions to OpenSSL should at least get
101 # past these.
102
103 my $gcc_devteam_warn = "-Wall -pedantic -DPEDANTIC -Wno-long-long -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Werror -DREF_CHECK -DDEBUG_UNUSED";
104
105 # These are used in addition to $gcc_devteam_warn when the compiler is clang.
106 # TODO(openssl-team): fix problems and investigate if (at least) the
107 # following warnings can also be enabled:
108 # -Wswitch-enum, -Wunused-macros, -Wmissing-field-initializers,
109 # -Wcast-align,
110 # -Wunreachable-code -Wunused-parameter -Wlanguage-extension-token
111 # -Wextended-offsetof
112 my $clang_devteam_warn = "-Wno-unused-parameter -Wno-missing-field-initializers -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Qunused-arguments -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations";
113
114 # Warn that "make depend" should be run?
115 my $warn_make_depend = 0;
116
117 # These are used in addition to $gcc_devteam_warn unless this is a mingw build.
118 # This adds backtrace information to the memory leak info.
119 my $memleak_devteam_backtrace = "-rdynamic -DCRYPTO_MDEBUG_BACKTRACE";
120
121
122 my $strict_warnings = 0;
123
124 my $x86_gcc_des="DES_PTR DES_RISC1 DES_UNROLL";
125
126 # MD2_CHAR slags pentium pros
127 my $x86_gcc_opts="RC4_INDEX MD2_INT";
128
129 #$bits1="SIXTEEN_BIT ";
130 #$bits2="THIRTY_TWO_BIT ";
131 my $bits1="THIRTY_TWO_BIT ";
132 my $bits2="SIXTY_FOUR_BIT ";
133
134 # As for $BSDthreads. Idea is to maintain "collective" set of flags,
135 # which would cover all BSD flavors. -pthread applies to them all,
136 # but is treated differently. OpenBSD expands is as -D_POSIX_THREAD
137 # -lc_r, which is sufficient. FreeBSD 4.x expands it as -lc_r,
138 # which has to be accompanied by explicit -D_THREAD_SAFE and
139 # sometimes -D_REENTRANT. FreeBSD 5.x expands it as -lc_r, which
140 # seems to be sufficient?
141 my $BSDthreads="-pthread -D_THREAD_SAFE -D_REENTRANT";
142
143 #
144 # API compability name to version number mapping.
145 #
146 my $maxapi = "1.1.0";           # API for "no-deprecated" builds
147 my $apitable = {
148     "1.1.0" => "0x10100000L",
149     "1.0.0" => "0x10000000L",
150     "0.9.8" => "0x00908000L",
151 };
152
153 # table of known configurations, read in from files
154 #
155 # The content of each entry can take one of two forms:
156 #
157 # - old style config-string, colon seperated fields with exactly the
158 #   following structure.:
159 #
160 #       $cc : $cflags : $unistd : $thread_cflag : $sys_id : $lflags : $bn_ops : $cpuid_obj : $bn_obj : $ec_obj : $des_obj : $aes_obj : $bf_obj : $md5_obj : $sha1_obj : $cast_obj : $rc4_obj : $rmd160_obj : $rc5_obj : $wp_obj : $cmll_obj : $modes_obj : $engines_obj : $perlasm_scheme : $dso_scheme : $shared_target : $shared_cflag : $shared_ldflag : $shared_extension : $ranlib : $arflags : $multilib
161 #
162 #   We use the stringtohash function - defined below - to combine with the
163 #   fields and form a proper hash table from the string.
164 #
165 # - direct transfer of old style config string to hash table, using the names
166 #   of the fields as keys:
167 #
168 #       {
169 #         cc => $cc,
170 #         cflags => $cflags,
171 #         unistd => $unistd,
172 #         thread_cflag => $thread_cflag,
173 #         sys_id => $sys_id,
174 #         lflags => $lflags,
175 #         bn_ops => $bn_ops,
176 #         cpuid_obj => $cpuid_obj,
177 #         bn_obj => $bn_obj,
178 #         ec_obj => $ec_obj,
179 #         des_obj => $des_obj,
180 #         aes_obj => $aes_obj,
181 #         bf_obj => $bf_obj,
182 #         md5_obj => $md5_obj,
183 #         sha1_obj => $sha1_obj,
184 #         cast_obj => $cast_obj,
185 #         rc4_obj => $rc4_obj,
186 #         rmd160_obj => $rmd160_obj,
187 #         rc5_obj => $rc5_obj,
188 #         wp_obj => $wp_obj,
189 #         cmll_obj => $cmll_obj,
190 #         modes_obj => $modes_obj,
191 #         engines_obj => $engines_obj,
192 #         perlasm_scheme => $perlasm_scheme,
193 #         dso_scheme => $dso_scheme,
194 #         shared_target => $shared_target,
195 #         shared_cflag => $shared_cflag,
196 #         shared_ldflag => $shared_ldflag,
197 #         shared_extension => $shared_extension,
198 #         ranlib => $ranlib,
199 #         arflags => $arflags,
200 #         multilib => $multilib
201 #       }
202 #
203 # - new style config hash table, which has additional attributes for debug
204 #   and non-debug flags to be added to the common flags, for cflags and lflags:
205 #
206 #       {
207 #         cc => $cc,
208 #         cflags => $cflags,
209 #         debug_cflags => $debug_cflags,
210 #         release_cflags => $release_cflags,
211 #         unistd => $unistd,
212 #         thread_cflag => $thread_cflag,
213 #         sys_id => $sys_id,
214 #         lflags => $lflags,
215 #         debug_lflags => $debug_lflags,
216 #         release_lflags => $release_lflags,
217 #         bn_ops => $bn_ops,
218 #         cpuid_obj => $cpuid_obj,
219 #         bn_obj => $bn_obj,
220 #         ec_obj => $ec_obj,
221 #         des_obj => $des_obj,
222 #         aes_obj => $aes_obj,
223 #         bf_obj => $bf_obj,
224 #         md5_obj => $md5_obj,
225 #         sha1_obj => $sha1_obj,
226 #         cast_obj => $cast_obj,
227 #         rc4_obj => $rc4_obj,
228 #         rmd160_obj => $rmd160_obj,
229 #         rc5_obj => $rc5_obj,
230 #         wp_obj => $wp_obj,
231 #         cmll_obj => $cmll_obj,
232 #         modes_obj => $modes_obj,
233 #         engines_obj => $engines_obj,
234 #         chacha_obj => $wp_obj,
235 #         poly1305_obj => $cmll_obj,
236 #         dso_scheme => $dso_scheme,
237 #         shared_target => $shared_target,
238 #         shared_cflag => $shared_cflag,
239 #         shared_ldflag => $shared_ldflag,
240 #         shared_extension => $shared_extension,
241 #         ranlib => $ranlib,
242 #         arflags => $arflags,
243 #         multilib => $multilib
244 #       }
245 #
246 # The configuration reader will do what it can to translate everything into
247 # new style config hash tables, including merging $target and debug-$target
248 # if they are similar enough.
249 #
250 # The configuration hashes can refer to templates in two different manners:
251 #
252 # - as part of the hash, one can have a key called 'inherit_from' that
253 #   indicate what other configuration hashes to inherit data from.
254 #   These are resolved recursively.
255 #
256 #   Inheritance works as a set of default values that can be overriden
257 #   by corresponding attribute values in the inheriting configuration.
258 #
259 #   If several configurations are given in the 'inherit_from' array, the
260 #   values of same attribute are concatenated with space separation.
261 #   With this, it's possible to have several smaller templates for
262 #   different configuration aspects that can be combined into a complete
263 #   configuration.
264 #
265 #   Example:
266 #
267 #       "foo" => {
268 #               template => 1,
269 #               haha => "haha",
270 #               hoho => "ho"
271 #       },
272 #       "bar" => {
273 #               template => 1,
274 #               hoho => "ho",
275 #               hehe => "hehe"
276 #       },
277 #       "laughter" => {
278 #               inherit_from => [ "foo", "bar" ],
279 #       }
280 #
281 #       The entry for "foo" will become as follows after processing:
282 #
283 #       "laughter" => {
284 #               haha => "haha",
285 #               hoho => "ho ho",
286 #               hehe => "hehe"
287 #       }
288 #
289 #   Note 1: any entry from the table can be used as a template.
290 #   Note 2: pure templates have the attribute 'template => 1' and cannot
291 #           be used as targets.
292 #
293 # - instead of a string, one can have a code block of the form
294 #   'sub { /* your code here */ }', where the arguments are the list of
295 #   inherited values for that key.  In fact, the concatenation of strings
296 #   is really done by using 'sub { join(" ",@_) }' on the list of inherited
297 #   values.
298 #
299 #   Example:
300 #
301 #       "foo" => {
302 #               template => 1,
303 #               haha => "ha ha",
304 #               hoho => "ho",
305 #               ignored => "This should not appear in the end result",
306 #       },
307 #       "bar" => {
308 #               template => 1,
309 #               haha => "ah",
310 #               hoho => "haho",
311 #               hehe => "hehe"
312 #       },
313 #       "laughter" => {
314 #               inherit_from => [ "foo", "bar" ],
315 #               hehe => sub { join(" ",(@_,"!!!")) },
316 #               ignored => "",
317 #       }
318 #
319 #       The entry for "foo" will become as follows after processing:
320 #
321 #       "laughter" => {
322 #               haha => "ha ha ah",
323 #               hoho => "ho haho",
324 #               hehe => "hehe !!!",
325 #               ignored => ""
326 #       }
327 #
328
329 my %table=(
330
331     # All these templates are merely a translation of the corresponding
332     # variables further up.
333     #
334     # Note: as long as someone might use old style configuration strings,
335     # or we bother supporting that, those variables need to stay
336
337     x86_asm => {
338         template        => 1,
339         cpuid_obj       => "x86cpuid.o",
340         bn_obj          => "bn-586.o co-586.o x86-mont.o x86-gf2m.o",
341         ec_obj          => "ecp_nistz256.o ecp_nistz256-x86.o",
342         des_obj         => "des-586.o crypt586.o",
343         aes_obj         => "aes-586.o vpaes-x86.o aesni-x86.o",
344         bf_obj          => "bf-586.o",
345         md5_obj         => "md5-586.o",
346         sha1_obj        => "sha1-586.o sha256-586.o sha512-586.o",
347         rc4_obj         => "rc4-586.o",
348         rmd160_obj      => "rmd-586.o",
349         rc5_obj         => "rc5-586.o",
350         wp_obj          => "wp_block.o wp-mmx.o",
351         cmll_obj        => "cmll-x86.o",
352         modes_obj       => "ghash-x86.o",
353         engines_obj     => "e_padlock-x86.o"
354     },
355     x86_elf_asm => {
356         template        => 1,
357         inherit_from    => [ "x86_asm" ],
358         perlasm_scheme  => "elf"
359     },
360     x86_64_asm => {
361         template        => 1,
362         cpuid_obj       => "x86_64cpuid.o",
363         bn_obj          => "x86_64-gcc.o x86_64-mont.o x86_64-mont5.o x86_64-gf2m.o rsaz_exp.o rsaz-x86_64.o rsaz-avx2.o",
364         ec_obj          => "ecp_nistz256.o ecp_nistz256-x86_64.o",
365         aes_obj         => "aes-x86_64.o vpaes-x86_64.o bsaes-x86_64.o aesni-x86_64.o aesni-sha1-x86_64.o aesni-sha256-x86_64.o aesni-mb-x86_64.o",
366         md5_obj         => "md5-x86_64.o",
367         sha1_obj        => "sha1-x86_64.o sha256-x86_64.o sha512-x86_64.o sha1-mb-x86_64.o sha256-mb-x86_64.o",
368         rc4_obj         => "rc4-x86_64.o rc4-md5-x86_64.o",
369         wp_obj          => "wp-x86_64.o",
370         cmll_obj        => "cmll-x86_64.o cmll_misc.o",
371         modes_obj       => "ghash-x86_64.o aesni-gcm-x86_64.o",
372         engines_obj     => "e_padlock-x86_64.o"
373     },
374     ia64_asm => {
375         template        => 1,
376         cpuid_obj       => "ia64cpuid.o",
377         bn_obj          => "bn-ia64.o ia64-mont.o",
378         aes_obj         => "aes_core.o aes_cbc.o aes-ia64.o",
379         md5_obj         => "md5-ia64.o",
380         sha1_obj        => "sha1-ia64.o sha256-ia64.o sha512-ia64.o",
381         rc4_obj         => "rc4-ia64.o rc4_skey.o",
382         modes_obj       => "ghash-ia64.o",
383         perlasm_scheme  => "void"
384     },
385     sparcv9_asm => {
386         template        => 1,
387         cpuid_obj       => "sparcv9cap.o sparccpuid.o",
388         bn_obj          => "bn-sparcv9.o sparcv9-mont.o sparcv9a-mont.o vis3-mont.o sparct4-mont.o sparcv9-gf2m.o",
389         ec_obj          => "ecp_nistz256.o ecp_nistz256-sparcv9.o",
390         des_obj         => "des_enc-sparc.o fcrypt_b.o dest4-sparcv9.o",
391         aes_obj         => "aes_core.o aes_cbc.o aes-sparcv9.o aest4-sparcv9.o",
392         md5_obj         => "md5-sparcv9.o",
393         sha1_obj        => "sha1-sparcv9.o sha256-sparcv9.o sha512-sparcv9.o",
394         cmll_obj        => "camellia.o cmll_misc.o cmll_cbc.o cmllt4-sparcv9.o",
395         modes_obj       => "ghash-sparcv9.o",
396         perlasm_scheme  => "void"
397     },
398     sparcv8_asm => {
399         template        => 1,
400         cpuid_obj       => "",
401         bn_obj          => "sparcv8.o",
402         des_obj         => "des_enc-sparc.o fcrypt_b.o",
403         perlasm_scheme  => "void"
404     },
405     alpha_asm => {
406         template        => 1,
407         cpuid_obj       => "alphacpuid.o",
408         bn_obj          => "bn_asm.o alpha-mont.o",
409         sha1_obj        => "sha1-alpha.o",
410         modes_obj       => "ghash-alpha.o",
411         perlasm_scheme  => "void"
412     },
413     mips32_asm => {
414         template        => 1,
415         bn_obj          => "bn-mips.o mips-mont.o",
416         aes_obj         => "aes_cbc.o aes-mips.o",
417         sha1_obj        => "sha1-mips.o sha256-mips.o",
418     },
419     mips64_asm => {
420         inherit_from    => [ "mips32_asm" ],
421         template        => 1,
422         sha1_obj        => sub { join(" ", @_, "sha512-mips.o") }
423     },
424     s390x_asm => {
425         template        => 1,
426         cpuid_obj       => "s390xcap.o s390xcpuid.o",
427         bn_obj          => "bn-s390x.o s390x-mont.o s390x-gf2m.o",
428         aes_obj         => "aes-s390x.o aes-ctr.o aes-xts.o",
429         sha1_obj        => "sha1-s390x.o sha256-s390x.o sha512-s390x.o",
430         rc4_obj         => "rc4-s390x.o",
431         modes_obj       => "ghash-s390x.o",
432     },
433     armv4_asm => {
434         template        => 1,
435         cpuid_obj       => "armcap.o armv4cpuid.o",
436         bn_obj          => "bn_asm.o armv4-mont.o armv4-gf2m.o",
437         ec_obj          => "ecp_nistz256.o ecp_nistz256-armv4.o",
438         aes_obj         => "aes_cbc.o aes-armv4.o bsaes-armv7.o aesv8-armx.o",
439         sha1_obj        => "sha1-armv4-large.o sha256-armv4.o sha512-armv4.o",
440         modes_obj       => "ghash-armv4.o ghashv8-armx.o",
441         perlasm_scheme  => "void"
442     },
443     aarch64_asm => {
444         template        => 1,
445         cpuid_obj       => "armcap.o arm64cpuid.o mem_clr.o",
446         ec_obj          => "ecp_nistz256.o ecp_nistz256-armv8.o",
447         bn_obj          => "bn_asm.o armv8-mont.o",
448         aes_obj         => "aes_core.o aes_cbc.o aesv8-armx.o vpaes-armv8.o",
449         sha1_obj        => "sha1-armv8.o sha256-armv8.o sha512-armv8.o",
450         modes_obj       => "ghashv8-armx.o",
451     },
452     parisc11_asm => {
453         template        => 1,
454         cpuid_obj       => "pariscid.o",
455         bn_obj          => "bn_asm.o parisc-mont.o",
456         aes_obj         => "aes_core.o aes_cbc.o aes-parisc.o",
457         sha1_obj        => "sha1-parisc.o sha256-parisc.o sha512-parisc.o",
458         rc4_obj         => "rc4-parisc.o",
459         modes_obj       => "ghash-parisc.o",
460         perlasm_scheme  => "32"
461     },
462     parisc20_64_asm => {
463         template        => 1,
464         inherit_from    => [ "parisc11_asm" ],
465         bn_obj          => sub { my $r=join(" ",@_); $r=~s/bn_asm/pa-risc2W/; $r; },
466         perlasm_scheme  => "64",
467     },
468     ppc64_asm => {
469         template        => 1,
470         cpuid_obj       => "ppccpuid.o ppccap.o",
471         bn_obj          => "bn-ppc.o ppc-mont.o ppc64-mont.o",
472         aes_obj         => "aes_core.o aes_cbc.o aes-ppc.o vpaes-ppc.o aesp8-ppc.o",
473         sha1_obj        => "sha1-ppc.o sha256-ppc.o sha512-ppc.o sha256p8-ppc.o sha512p8-ppc.o",
474         modes_obj       => "ghashp8-ppc.o",
475     },
476     ppc32_asm => {
477         inherit_from    => [ "ppc64_asm" ],
478         template        => 1
479     },
480 );
481
482 {   my $no_asm_templates=0;
483     foreach (@ARGV) { $no_asm_templates=1 if (/^\-?no\-asm$/); }
484     sub asm { $no_asm_templates?():@_; }
485 }
486
487
488 sub stringtohash {
489     my $in = shift @_;
490     if (ref($in) eq "HASH") {
491         return $in;
492     }
493     my @stringsequence = (
494         "cc",
495         "cflags",
496         "unistd",
497         "thread_cflag",
498         "sys_id",
499         "lflags",
500         "bn_ops",
501         "cpuid_obj",
502         "bn_obj",
503         "ec_obj",
504         "des_obj",
505         "aes_obj",
506         "bf_obj",
507         "md5_obj",
508         "sha1_obj",
509         "cast_obj",
510         "rc4_obj",
511         "rmd160_obj",
512         "rc5_obj",
513         "wp_obj",
514         "cmll_obj",
515         "modes_obj",
516         "engines_obj",
517         "perlasm_scheme",
518         "dso_scheme",
519         "shared_target",
520         "shared_cflag",
521         "shared_ldflag",
522         "shared_extension",
523         "ranlib",
524         "arflags",
525         "multilib",
526         );
527
528     # return a ref to a hash, that's what the outer braces are for.
529     return { map { shift @stringsequence => $_ } split /:/, $in };
530 };
531
532 # Read configuration target stanzas from a file, so that people can have
533 # local files with their own definitions
534 sub read_config {
535         my $fname = shift;
536         open(CONFFILE, "< $fname")
537                 or die "Can't open configuration file '$fname'!\n";
538         my $x = $/;
539         undef $/;
540         my $content = <CONFFILE>;
541         $/ = $x;
542         close(CONFFILE);
543         my %targets = ();
544         eval $content;
545
546         # Make sure we have debug- targets first
547         my @keys =
548             sort {
549                 my $a_nd = $a =~ m/^debug-/ ? $' :$a;
550                 my $b_nd = $b =~ m/^debug-/ ? $' :$b;
551                 my $res = 0;
552
553                 if (($a_nd == $a) == ($b_nd == $b)) {
554                     # they are both debug- or not, compare them as they are
555                     $res = $a cmp $b;
556                 } elsif ($a_nd != $a) {
557                     # $a is debug-, make it lesser
558                     $res = -1;
559                 } else {
560                     # $b is debug-, make $a greater
561                     $res = 1;
562                 }
563                 $res;
564             } keys %targets;
565
566         foreach (@keys) {
567             if (ref($targets{$_}) ne "HASH") {
568                 # Value is assumed to be a string.  Split it up to
569                 # become a hash table of parameters.  Also, try to
570                 # merge debug- variants with the non-debug target.
571
572                 # Start with converting the value from a string to a
573                 # standardised hash of fields.  Using $tohash is safe,
574                 # if the input is already a hash ref, it's just returned
575                 # back.
576                 $targets{$_} = stringtohash($targets{$_});
577
578                 # If the current target is a debug target, there might
579                 # be a corresponding non-debug target that we can merge
580                 # with.  If it isn't a debug- target, we've already done
581                 # as much merging as we can and do not need to bother
582                 # with that any more.
583                 if ($_ =~ m/^debug-/) {
584                     my $debugkey = $_;
585                     my $nondebugkey = $';
586                     my $debug = $targets{$debugkey};
587                     my $nondebug;
588
589                     if ($targets{$nondebugkey}) {
590                         $nondebug = stringtohash($targets{$nondebugkey});
591                     }
592
593                     if ($nondebug) {
594                         # There's both a debug and non-debug variant of
595                         # this target, so we should try to merge them
596                         # together.
597
598                         # First, check that the non-debug variant isn't
599                         # already built up with all it should have.
600                         if ($nondebug->{debug_cflags}
601                             || $nondebug->{release_cflags}
602                             || $nondebug->{debug_lflags}
603                             || $nondebug->{release_lflags}) {
604                             warn "there's a debug target $debugkey to be merged with a target $nondebugkey, but the latter seems to already have both nodebug and debug information.  This requires human intervention.  Skipping $debugkey...";
605                             next;
606                         }
607
608                         # Now, check similarity.
609                         # For keys they have in common, support that
610                         # cflags and lflags can differ, otherwise they
611                         # must have exactly the same values for them
612                         # to be merged into one.
613                         my $similarenough = 1;
614                         for (keys %{$debug}) {
615                             if ($nondebug->{$_} ne $debug->{$_}
616                                 && $_ !~ m/^[cl]flags$/) {
617                                 $similarenough = 0;
618                                 last;
619                             }
620                         }
621
622                         if ($similarenough) {
623                             # Here's where the magic happens, split the
624                             # options in the debug and non-debug variants
625                             # cflags and ldflags into three strings each,
626                             # one with common flags, one with extra debug
627                             # flags and one with extra non-debug flags.
628
629                             # The result ends up in %h_nondebug, which
630                             # becomes the merged variant when we're done.
631                             # for each of cflags and lflags, they are
632                             # replaced with cflags, debug_cflags,
633                             # release_cflags and similar for lflags.
634                             #
635                             # The purpose is that 'cflags' should be
636                             # used together with 'debug_cflags' or
637                             # 'release_cflags' depending on what the
638                             # user asks for.
639                             foreach (("cflags", "lflags")) {
640                                 my @list_d = split /\s+/, $debug->{$_};
641                                 my @list_nd = split /\s+/, $nondebug->{$_};
642                                 my %presence = (); # bitmap
643                                                    # 1: present in @list_d
644                                                    # 2: present in @list_nd
645                                                    # 3: present in both
646                                 map { $presence{$_} += 1; } @list_d;
647                                 map { $presence{$_} += 2; } @list_nd;
648
649                                 delete $nondebug->{$_};
650                                 # Note: we build from the original lists to
651                                 # preserve order, it might be important
652                                 $nondebug->{"debug-".$_} =
653                                     join(" ",
654                                          grep { $presence{$_} == 1 } @list_d);
655                                 $nondebug->{"nodebug-".$_} =
656                                     join(" ",
657                                          grep { $presence{$_} == 2 } @list_nd);
658                                 $nondebug->{$_} =
659                                     join(" ",
660                                          grep { $presence{$_} == 3 } @list_d);
661                             }
662
663                             $targets{$nondebugkey} = $nondebug;
664                             delete $targets{$debugkey};
665                         }
666                     }
667                 }
668             }
669         }
670
671         %table = (%table, %targets);
672
673         # Local function to resolve inheritance
674         my $resolve_inheritance;
675         $resolve_inheritance =
676             sub {
677                 my $target = shift;
678                 my @breadcrumbs = @_;
679
680                 if (grep { $_ eq $target } @breadcrumbs) {
681                     die "inherit_from loop!  target backtrace:\n  "
682                         ,$target,"\n  ",join("\n  ", @breadcrumbs),"\n";
683                 }
684
685                 # Recurse through all inheritances.  They will be resolved on
686                 # the fly, so when this operation is done, they will all just
687                 # be a bunch of attributes with string values.
688                 # What we get here, though, are keys with references to lists
689                 # of the combined values of them all.  We will deal with lists
690                 # after this stage is done.
691                 my %combined_inheritance = ();
692                 if ($table{$target}->{inherit_from}) {
693                     foreach (@{$table{$target}->{inherit_from}}) {
694                         my %inherited_config =
695                             $resolve_inheritance->($_, $target, @breadcrumbs);
696
697                         # 'template' is a marker that's considered private to
698                         # the config that had it.
699                         delete $inherited_config{template};
700
701                         map {
702                             if (!$combined_inheritance{$_}) {
703                                 $combined_inheritance{$_} = [];
704                             }
705                             push @{$combined_inheritance{$_}}, $inherited_config{$_};
706                         } keys %inherited_config;
707                     }
708                 }
709
710                 # We won't need inherit_from in this target any more, since
711                 # we've resolved all the inheritances that lead to this
712                 delete $table{$target}->{inherit_from};
713
714                 # Now is the time to deal with those lists.  Here's the place
715                 # to decide what shall be done with those lists, all based on
716                 # the values of the target we're currently dealing with.
717                 # - If a value is a coderef, it will be executed with the list
718                 #   of inherited values as arguments.
719                 # - If the corresponding key doesn't have a value at all or is
720                 #   the emoty string, the inherited value list will be run
721                 #   through the default combiner (below), and the result
722                 #   becomes this target's value.
723                 # - Otherwise, this target's value is assumed to be a string
724                 #   that will simply override the inherited list of values.
725                 my $default_combiner = sub { join(' ',@_) };
726
727                 my %all_keys =
728                     map { $_ => 1 } (keys %combined_inheritance,
729                                      keys %{$table{$target}});
730                 foreach (sort keys %all_keys) {
731
732                     # Current target doesn't have a value for the current key?
733                     # Assign it the default combiner, the rest of this loop
734                     # body will handle it just like any other coderef.
735                     if (!exists $table{$target}->{$_}) {
736                         $table{$target}->{$_} = $default_combiner;
737                     }
738
739                     my $valuetype = ref($table{$target}->{$_});
740                     if ($valuetype eq "CODE") {
741                         # CODE reference, execute it with the inherited values
742                         # as arguments.
743                         $table{$target}->{$_} =
744                             $table{$target}->{$_}->(@{$combined_inheritance{$_}});
745                     } elsif ($valuetype eq "") {
746                         # Scalar, just leave it as is.
747                     } else {
748                         # Some other type of reference that we don't handle.
749                         # Better to abort at this point.
750                         die "cannot handle reference type $valuetype,"
751                             ," found in target $target -> $_\n";
752                     }
753                 }
754
755                 # Finally done, return the result.
756                 %{$table{$target}};
757         };
758
759         # Go through all new targets and resolve inheritance and template
760         # references.
761         foreach (keys %targets) {
762             # We're ignoring the returned values here, they are only valuable
763             # to the inner recursion of this function.
764             $resolve_inheritance->($_);
765         }
766 }
767
768 my ($vol, $dir, $dummy) = File::Spec->splitpath($0);
769 my $pattern = File::Spec->catpath($vol, $dir, "Configurations/*.conf");
770 foreach (sort glob($pattern) ) {
771     &read_config($_);
772 }
773
774 my @MK1MF_Builds=qw(VC-WIN64I VC-WIN64A
775                     debug-VC-WIN64I debug-VC-WIN64A
776                     VC-NT VC-CE VC-WIN32 debug-VC-WIN32
777                     BC-32
778                     netware-clib netware-clib-bsdsock
779                     netware-libc netware-libc-bsdsock);
780
781 my $prefix="";
782 my $libdir="";
783 my $openssldir="";
784 my $exe_ext="";
785 my $install_prefix= "$ENV{'INSTALL_PREFIX'}";
786 my $cross_compile_prefix="";
787 my $fipslibdir="/usr/local/ssl/fips-2.0/lib/";
788 my $nofipscanistercheck=0;
789 my $baseaddr="0xFB00000";
790 my $no_threads=0;
791 my $threads=0;
792 my $no_shared=0; # but "no-shared" is default
793 my $zlib=1;      # but "no-zlib" is default
794 my $no_rfc3779=0;
795 my $no_asm=0;
796 my $no_dso=0;
797 my @skip=();
798 my $Makefile="Makefile";
799 my $des_locl="crypto/des/des_locl.h";
800 my $des ="include/openssl/des.h";
801 my $bn  ="include/openssl/bn.h";
802 my $md2 ="include/openssl/md2.h";
803 my $rc4 ="include/openssl/rc4.h";
804 my $rc4_locl="crypto/rc4/rc4_locl.h";
805 my $idea        ="include/openssl/idea.h";
806 my $rc2 ="include/openssl/rc2.h";
807 my $bf  ="crypto/bf/bf_locl.h";
808 my $bn_asm      ="bn_asm.o";
809 my $des_enc="des_enc.o fcrypt_b.o";
810 my $aes_enc="aes_core.o aes_cbc.o";
811 my $bf_enc      ="bf_enc.o";
812 my $cast_enc="c_enc.o";
813 my $rc4_enc="rc4_enc.o rc4_skey.o";
814 my $rc5_enc="rc5_enc.o";
815 my $cmll_enc="camellia.o cmll_misc.o cmll_cbc.o";
816 my $chacha_enc="chacha_enc.o";
817 my $processor="";
818 my $default_ranlib;
819 my $perl;
820 my $fips=0;
821
822 # Explicitelly known options that are possible to disable.  They can
823 # be regexps, and will be used like this: /^no-${option}$/
824 # For developers: keep it sorted alphabetically
825
826 my @disablables = (
827     "aes",
828     "asm",
829     "bf",
830     "camellia",
831     "capieng",
832     "cast",
833     "chacha",
834     "cmac",
835     "cms",
836     "comp",
837     "crypto-mdebug",
838     "ct",
839     "deprecated",
840     "des",
841     "dgram",
842     "dh",
843     "dsa",
844     "dso",
845     "dtls",
846     "dynamic[-_]engine",
847     "ec",
848     "ec2m",
849     "ec_nistp_64_gcc_128",
850     "engine",
851     "err",                      # Really???
852     "gost",
853     "heartbeats",
854     "hmac",
855     "hw(-.+)?",
856     "idea",
857     "jpake",
858     "locking",                  # Really???
859     "md2",
860     "md4",
861     "md5",
862     "mdc2",
863     "md[-_]ghost94",
864     "nextprotoneg",
865     "ocb",
866     "ocsp",
867     "poly1305",
868     "posix-io",
869     "psk",
870     "rc2",
871     "rc4",
872     "rc5",
873     "rdrand",
874     "rfc3779",
875     "rijndael",                 # Old AES name
876     "rmd160",
877     "rsa",
878     "scrypt",
879     "sct",
880     "sctp",
881     "seed",
882     "sha",
883     "shared",
884     "sock",
885     "srp",
886     "srtp",
887     "sse2",
888     "ssl",
889     "ssl3",
890     "ssl3-method",
891     "ssl-trace",
892     "static-engine",
893     "stdio",
894     "store",
895     "threads",
896     "tls",
897     "tls1",
898     "unit-test",
899     "whirlpool",
900     "zlib",
901     "zlib-dynamic",
902     );
903
904 # All of the following is disabled by default (RC5 was enabled before 0.9.8):
905
906 my %disabled = ( # "what"         => "comment" [or special keyword "experimental"]
907                  "ec_nistp_64_gcc_128" => "default",
908                  "jpake"          => "experimental",
909                  "md2"            => "default",
910                  "rc5"            => "default",
911                  "sctp"           => "default",
912                  "shared"         => "default",
913                  "ssl-trace"      => "default",
914                  "store"          => "experimental",
915                  "unit-test"      => "default",
916                  "zlib"           => "default",
917                  "zlib-dynamic"   => "default",
918                  "crypto-mdebug"  => "default",
919                );
920 my @experimental = ();
921
922 # This is what $depflags will look like with the above defaults
923 # (we need this to see if we should advise the user to run "make depend"):
924 my $default_depflags = " -DOPENSSL_NO_CRYPTO_MDEBUG -DOPENSSL_NO_EC_NISTP_64_GCC_128 -DOPENSSL_NO_JPAKE -DOPENSSL_NO_MD2 -DOPENSSL_NO_RC5 -DOPENSSL_NO_SCTP -DOPENSSL_NO_SSL_TRACE -DOPENSSL_NO_STORE -DOPENSSL_NO_UNIT_TEST";
925
926 # Explicit "no-..." options will be collected in %disabled along with the defaults.
927 # To remove something from %disabled, use "enable-foo" (unless it's experimental).
928 # For symmetry, "disable-foo" is a synonym for "no-foo".
929
930 # For features called "experimental" here, a more explicit "experimental-foo" is needed to enable.
931 # We will collect such requests in @experimental.
932 # To avoid accidental use of experimental features, applications will have to use -DOPENSSL_EXPERIMENTAL_FOO.
933
934
935 my $no_sse2=0;
936
937 &usage if ($#ARGV < 0);
938
939 my $flags;
940 my $depflags;
941 my $openssl_experimental_defines;
942 my $openssl_algorithm_defines;
943 my $openssl_thread_defines;
944 my $openssl_sys_defines="";
945 my $openssl_other_defines;
946 my $libs;
947 my $target;
948 my $options;
949 my $api;
950 my $make_depend=0;
951 my %withargs=();
952 my $build_prefix = "release_";
953
954 my @argvcopy=@ARGV;
955 my $argvstring="";
956 my $argv_unprocessed=1;
957
958 while($argv_unprocessed)
959         {
960         $flags="";
961         $depflags="";
962         $openssl_experimental_defines="";
963         $openssl_algorithm_defines="";
964         $openssl_thread_defines="";
965         $openssl_sys_defines="";
966         $openssl_other_defines="";
967         $libs="";
968         $target="";
969         $options="";
970
971         $argv_unprocessed=0;
972         $argvstring=join(' ',@argvcopy);
973
974 PROCESS_ARGS:
975         {
976         my %unsupported_options = ();
977         foreach (@argvcopy)
978                 {
979                 s /^-no-/no-/; # some people just can't read the instructions
980
981                 # rewrite some options in "enable-..." form
982                 s /^-?-?shared$/enable-shared/;
983                 s /^sctp$/enable-sctp/;
984                 s /^threads$/enable-threads/;
985                 s /^zlib$/enable-zlib/;
986                 s /^zlib-dynamic$/enable-zlib-dynamic/;
987
988                 if (/^(no|disable|enable|experimental)-(.+)$/)
989                         {
990                         my $word = $2;
991                         if (!grep { $word =~ /^${_}$/ } @disablables)
992                                 {
993                                 $unsupported_options{$_} = 1;
994                                 next;
995                                 }
996                         }
997                 if (/^no-(.+)$/ || /^disable-(.+)$/)
998                         {
999                         if (!($disabled{$1} eq "experimental"))
1000                                 {
1001                                 if ($1 eq "ssl")
1002                                         {
1003                                         $disabled{"ssl3"} = "option(ssl)";
1004                                         }
1005                                 elsif ($1 eq "tls")
1006                                         {
1007                                         $disabled{"tls1"} = "option(tls)"
1008                                         }
1009                                 elsif ($1 eq "ssl3-method")
1010                                         {
1011                                         $disabled{"ssl3-method"} = "option(ssl)";
1012                                         $disabled{"ssl3"} = "option(ssl)";
1013                                         }
1014                                 else
1015                                         {
1016                                         $disabled{$1} = "option";
1017                                         }
1018                                 }
1019                         }
1020                 elsif (/^enable-(.+)$/ || /^experimental-(.+)$/)
1021                         {
1022                         my $algo = $1;
1023                         if ($disabled{$algo} eq "experimental")
1024                                 {
1025                                 die "You are requesting an experimental feature; please say 'experimental-$algo' if you are sure\n"
1026                                         unless (/^experimental-/);
1027                                 push @experimental, $algo;
1028                                 }
1029                         delete $disabled{$algo};
1030
1031                         $threads = 1 if ($algo eq "threads");
1032                         }
1033                 elsif (/^--test-sanity$/)
1034                         {
1035                         exit(&test_sanity());
1036                         }
1037                 elsif (/^--strict-warnings$/)
1038                         {
1039                         $strict_warnings = 1;
1040                         }
1041                 elsif (/^--debug$/)
1042                         {
1043                         $build_prefix = "debug_";
1044                         }
1045                 elsif (/^--release$/)
1046                         {
1047                         $build_prefix = "release_";
1048                         }
1049                 elsif (/^reconfigure/ || /^reconf/)
1050                         {
1051                         if (open(IN,"<$Makefile"))
1052                                 {
1053                                 my $config_args_found=0;
1054                                 while (<IN>)
1055                                         {
1056                                         chomp;
1057                                         if (/^CONFIGURE_ARGS=(.*)/)
1058                                                 {
1059                                                 $argvstring=$1;
1060                                                 @argvcopy=split(' ',$argvstring);
1061                                                 die "Incorrect data to reconfigure, please do a normal configuration\n"
1062                                                         if (grep(/^reconf/,@argvcopy));
1063                                                 print "Reconfiguring with: $argvstring\n";
1064                                                 $argv_unprocessed=1;
1065                                                 $config_args_found=1;
1066                                                 }
1067                                         elsif (/^CROSS_COMPILE=\s*(.*)/)
1068                                                 {
1069                                                 $ENV{CROSS_COMPILE}=$1;
1070                                                 }
1071                                         elsif (/^CC=\s*(?:\$\(CROSS_COMPILE\))?(.*?)$/)
1072                                                 {
1073                                                 $ENV{CC}=$1;
1074                                                 }
1075                                         }
1076                                 close(IN);
1077                                 last PROCESS_ARGS if ($config_args_found);
1078                                 }
1079                         die "Insufficient data to reconfigure, please do a normal configuration\n";
1080                         }
1081                 elsif (/^386$/)
1082                         { $processor=386; }
1083                 elsif (/^fips$/)
1084                         {
1085                         $fips=1;
1086                         }
1087                 elsif (/^rsaref$/)
1088                         {
1089                         # No RSAref support any more since it's not needed.
1090                         # The check for the option is there so scripts aren't
1091                         # broken
1092                         }
1093                 elsif (/^nofipscanistercheck$/)
1094                         {
1095                         $fips = 1;
1096                         $nofipscanistercheck = 1;
1097                         }
1098                 elsif (/^[-+]/)
1099                         {
1100                         if (/^--prefix=(.*)$/)
1101                                 {
1102                                 $prefix=$1;
1103                                 }
1104                         elsif (/^--api=(.*)$/)
1105                                 {
1106                                 $api=$1;
1107                                 }
1108                         elsif (/^--libdir=(.*)$/)
1109                                 {
1110                                 $libdir=$1;
1111                                 }
1112                         elsif (/^--openssldir=(.*)$/)
1113                                 {
1114                                 $openssldir=$1;
1115                                 }
1116                         elsif (/^--install.prefix=(.*)$/)
1117                                 {
1118                                 $install_prefix=$1;
1119                                 }
1120                         elsif (/^--with-zlib-lib=(.*)$/)
1121                                 {
1122                                 $withargs{"zlib-lib"}=$1;
1123                                 }
1124                         elsif (/^--with-zlib-include=(.*)$/)
1125                                 {
1126                                 $withargs{"zlib-include"}="-I$1";
1127                                 }
1128                         elsif (/^--with-fipslibdir=(.*)$/)
1129                                 {
1130                                 $fipslibdir="$1/";
1131                                 }
1132                         elsif (/^--with-baseaddr=(.*)$/)
1133                                 {
1134                                 $baseaddr="$1";
1135                                 }
1136                         elsif (/^--cross-compile-prefix=(.*)$/)
1137                                 {
1138                                 $cross_compile_prefix=$1;
1139                                 }
1140                         elsif (/^--config=(.*)$/)
1141                                 {
1142                                 read_config $1;
1143                                 }
1144                         elsif (/^-[lL](.*)$/ or /^-Wl,/)
1145                                 {
1146                                 $libs.=$_." ";
1147                                 }
1148                         else    # common if (/^[-+]/), just pass down...
1149                                 {
1150                                 $_ =~ s/%([0-9a-f]{1,2})/chr(hex($1))/gei;
1151                                 $flags.=$_." ";
1152                                 }
1153                         }
1154                 elsif ($_ =~ /^([^:]+):(.+)$/)
1155                         {
1156                         eval "\$table{\$1} = \"$2\""; # allow $xxx constructs in the string
1157                         $target=$1;
1158                         }
1159                 else
1160                         {
1161                         die "target already defined - $target (offending arg: $_)\n" if ($target ne "");
1162                         $target=$_;
1163                         }
1164
1165                 unless ($_ eq $target || /^no-/ || /^disable-/)
1166                         {
1167                         # "no-..." follows later after implied disactivations
1168                         # have been derived.  (Don't take this too seroiusly,
1169                         # we really only write OPTIONS to the Makefile out of
1170                         # nostalgia.)
1171
1172                         if ($options eq "")
1173                                 { $options = $_; }
1174                         else
1175                                 { $options .= " ".$_; }
1176                         }
1177                 }
1178
1179         if (defined($api) && !exists $apitable->{$api}) {
1180                 die "***** Unsupported api compatibility level: $api\n",
1181         }
1182
1183         if (keys %unsupported_options)
1184                 {
1185                 die "***** Unsupported options: ",
1186                         join(", ", keys %unsupported_options), "\n";
1187                 }
1188         }
1189         }
1190
1191
1192 if ($processor eq "386")
1193         {
1194         $disabled{"sse2"} = "forced";
1195         }
1196
1197 if (!defined($disabled{"zlib-dynamic"}))
1198         {
1199         # "zlib-dynamic" was specifically enabled, so enable "zlib"
1200         delete $disabled{"zlib"};
1201         }
1202
1203 if (defined($disabled{"rijndael"}))
1204         {
1205         $disabled{"aes"} = "forced";
1206         }
1207 if (defined($disabled{"des"}))
1208         {
1209         $disabled{"mdc2"} = "forced";
1210         }
1211 if (defined($disabled{"ec"}))
1212         {
1213         $disabled{"ecdsa"} = "forced";
1214         $disabled{"ecdh"} = "forced";
1215         }
1216
1217 # SSL 3.0 and TLS requires MD5 and SHA and either RSA or DSA+DH
1218 if (defined($disabled{"md5"}) || defined($disabled{"sha"})
1219     || (defined($disabled{"rsa"})
1220         && (defined($disabled{"dsa"}) || defined($disabled{"dh"}))))
1221         {
1222         $disabled{"ssl3"} = "forced";
1223         $disabled{"tls1"} = "forced";
1224         }
1225
1226 if (defined($disabled{"dgram"}))
1227         {
1228         $disabled{"dtls"} = "forced";
1229         }
1230
1231 if (defined($disabled{"ec"}) || defined($disabled{"dsa"})
1232     || defined($disabled{"dh"}) || defined($disabled{"stdio"}))
1233         {
1234         $disabled{"gost"} = "forced";
1235         }
1236
1237
1238 if ($target eq "TABLE") {
1239         foreach $target (sort keys %table) {
1240                 print_table_entry($target, "TABLE");
1241         }
1242         exit 0;
1243 }
1244
1245 if ($target eq "LIST") {
1246         foreach (sort keys %table) {
1247                 print;
1248                 print "\n";
1249         }
1250         exit 0;
1251 }
1252
1253 if ($target eq "HASH") {
1254         print "%table = (\n";
1255         foreach (sort keys %table) {
1256                 print_table_entry($_, "HASH");
1257         }
1258         exit 0;
1259 }
1260
1261 if ($target =~ m/^CygWin32(-.*)$/) {
1262         $target = "Cygwin".$1;
1263 }
1264
1265 print "Configuring for $target\n";
1266
1267 # Support for legacy targets having a name starting with 'debug-'
1268 my ($d, $t) = $target =~ m/^(debug-)?(.*)$/;
1269 if ($d) {
1270     $build_prefix = "debug_";
1271     $target = $t;
1272
1273     # If we do not find debug-foo in the table, the target is set to foo,
1274     # but only if the foo target has a noon-empty debug_cflags or debug_lflags
1275     # attribute.
1276     if (!$table{$target}) {
1277         $target = $t;
1278     }
1279 }
1280
1281 &usage if (!defined($table{$target}) || $table{$target}->{template});
1282
1283 if ($fips)
1284         {
1285         delete $disabled{"shared"} if ($disabled{"shared"} eq "default");
1286         }
1287
1288 foreach (sort (keys %disabled))
1289         {
1290         $options .= " no-$_";
1291
1292         printf "    no-%-12s %-10s", $_, "[$disabled{$_}]";
1293
1294         if (/^dso$/)
1295                 { $no_dso = 1; }
1296         elsif (/^threads$/)
1297                 { $no_threads = 1; }
1298         elsif (/^shared$/)
1299                 { $no_shared = 1; }
1300         elsif (/^zlib$/)
1301                 { $zlib = 0; }
1302         elsif (/^static-engine$/)
1303                 { }
1304         elsif (/^zlib-dynamic$/)
1305                 { }
1306         elsif (/^sse2$/)
1307                 { $no_sse2 = 1; }
1308         else
1309                 {
1310                 my ($ALGO, $algo);
1311                 ($ALGO = $algo = $_) =~ tr/[\-a-z]/[_A-Z]/;
1312
1313                 if (/^asm$/ || /^err$/ || /^hw$/ || /^hw-/)
1314                         {
1315                         $openssl_other_defines .= "#define OPENSSL_NO_$ALGO\n";
1316                         print " OPENSSL_NO_$ALGO";
1317
1318                         if (/^err$/)    { $flags .= "-DOPENSSL_NO_ERR "; }
1319                         elsif (/^asm$/) { $no_asm = 1; }
1320                         }
1321                 else
1322                         {
1323                         ($ALGO,$algo) = ("RMD160","rmd160") if ($algo eq "ripemd");
1324
1325                         $openssl_algorithm_defines .= "#define OPENSSL_NO_$ALGO\n";
1326                         print " OPENSSL_NO_$ALGO";
1327
1328                         push @skip, $algo;
1329                         # fix-up crypto/directory name(s)
1330                         $skip[$#skip]="whrlpool" if $algo eq "whirlpool";
1331                         $skip[$#skip]="ripemd" if $algo eq "rmd160";
1332
1333                         print " (skip dir)";
1334
1335                         $depflags .= " -DOPENSSL_NO_$ALGO";
1336                         }
1337                 }
1338
1339         print "\n";
1340         }
1341
1342 my $exp_cflags = "";
1343
1344 foreach (sort @experimental)
1345         {
1346         my $ALGO;
1347         ($ALGO = $_) =~ tr/[a-z]/[A-Z]/;
1348
1349         # opensslconf.h will set OPENSSL_NO_... unless OPENSSL_EXPERIMENTAL_... is defined
1350         $openssl_experimental_defines .= "#define OPENSSL_NO_$ALGO\n";
1351         $exp_cflags .= " -DOPENSSL_EXPERIMENTAL_$ALGO";
1352         }
1353
1354 my $IsMK1MF=scalar grep /^$target$/,@MK1MF_Builds;
1355
1356 $exe_ext=".exe" if ($target eq "Cygwin" || $target eq "DJGPP" || $target =~ /^mingw/);
1357 $exe_ext=".nlm" if ($target =~ /netware/);
1358 $exe_ext=".pm"  if ($target =~ /vos/);
1359 $openssldir="/usr/local/ssl" if ($openssldir eq "" and $prefix eq "");
1360 $prefix=$openssldir if $prefix eq "";
1361
1362 $default_ranlib= &which("ranlib") or $default_ranlib="true";
1363 $perl=$ENV{'PERL'} or $perl=&which("perl5") or $perl=&which("perl")
1364   or $perl="perl";
1365 my $make = $ENV{'MAKE'} || "make";
1366
1367 $cross_compile_prefix=$ENV{'CROSS_COMPILE'} if $cross_compile_prefix eq "";
1368
1369 chop $openssldir if $openssldir =~ /\/$/;
1370 chop $prefix if $prefix =~ /.\/$/;
1371
1372 $openssldir=$prefix . "/ssl" if $openssldir eq "";
1373 $openssldir=$prefix . "/" . $openssldir if $openssldir !~ /(^\/|^[a-zA-Z]:[\\\/])/;
1374
1375
1376 print "IsMK1MF=$IsMK1MF\n";
1377
1378 # Allow environment CC to override compiler...
1379 my $cc = $ENV{CC} || $table{$target}->{cc};
1380
1381 # For cflags and lflags, add the debug_ or release_ attributes
1382 # Do it in such a way that no spurious space is appended (hence the grep).
1383 my $cflags = join(" ",
1384                   grep { $_ } ($table{$target}->{cflags},
1385                                $table{$target}->{$build_prefix."cflags"}));
1386 my $lflags = join(" ",
1387                   grep { $_ } ($table{$target}->{lflags},
1388                                $table{$target}->{$build_prefix."lflags"}));
1389
1390 my $unistd = $table{$target}->{unistd};
1391 my $thread_cflag = $table{$target}->{thread_cflag};
1392 my $sys_id = $table{$target}->{sys_id};
1393 my $bn_ops = $table{$target}->{bn_ops};
1394 my $cpuid_obj = $table{$target}->{cpuid_obj};
1395 my $bn_obj = $table{$target}->{bn_obj};
1396 my $ec_obj = $table{$target}->{ec_obj};
1397 my $des_obj = $table{$target}->{des_obj};
1398 my $aes_obj = $table{$target}->{aes_obj};
1399 my $bf_obj = $table{$target}->{bf_obj};
1400 my $md5_obj = $table{$target}->{md5_obj};
1401 my $sha1_obj = $table{$target}->{sha1_obj};
1402 my $cast_obj = $table{$target}->{cast_obj};
1403 my $rc4_obj = $table{$target}->{rc4_obj};
1404 my $rmd160_obj = $table{$target}->{rmd160_obj};
1405 my $rc5_obj = $table{$target}->{rc5_obj};
1406 my $wp_obj = $table{$target}->{wp_obj};
1407 my $cmll_obj = $table{$target}->{cmll_obj};
1408 my $modes_obj = $table{$target}->{modes_obj};
1409 my $engines_obj = $table{$target}->{engines_obj};
1410 my $chacha_obj = $table{$target}->{chacha_obj};
1411 my $poly1305_obj = $table{$target}->{poly1305_obj};
1412 my $perlasm_scheme = $table{$target}->{perlasm_scheme};
1413 my $dso_scheme = $table{$target}->{dso_scheme};
1414 my $shared_target = $table{$target}->{shared_target};
1415 my $shared_cflag = $table{$target}->{shared_cflag};
1416 my $shared_ldflag = $table{$target}->{shared_ldflag};
1417 my $shared_extension = $table{$target}->{shared_extension};
1418 my $ranlib = $ENV{'RANLIB'} || $table{$target}->{ranlib};
1419 my $ar = $ENV{'AR'} || "ar";
1420 my $arflags = $table{$target}->{arflags};
1421 my $multilib = $table{$target}->{multilib};
1422
1423 # if $prefix/lib$multilib is not an existing directory, then
1424 # assume that it's not searched by linker automatically, in
1425 # which case adding $multilib suffix causes more grief than
1426 # we're ready to tolerate, so don't...
1427 $multilib="" if !-d "$prefix/lib$multilib";
1428
1429 $libdir="lib$multilib" if $libdir eq "";
1430
1431 $cflags = "$cflags$exp_cflags";
1432
1433 # '%' in $lflags is used to split flags to "pre-" and post-flags
1434 my ($prelflags,$postlflags)=split('%',$lflags);
1435 if (defined($postlflags))       { $lflags=$postlflags;  }
1436 else                            { $lflags=$prelflags; undef $prelflags; }
1437
1438 if ($target =~ /^mingw/ && `$cc --target-help 2>&1` !~ m/\-mno\-cygwin/m)
1439         {
1440         $cflags =~ s/\-mno\-cygwin\s*//;
1441         $shared_ldflag =~ s/\-mno\-cygwin\s*//;
1442         }
1443
1444 if ($target =~ /linux.*\-mips/ && !$no_asm && $flags !~ /\-m(ips|arch=)/) {
1445         # minimally required architecture flags for assembly modules
1446         $cflags="-mips2 $cflags" if ($target =~ /mips32/);
1447         $cflags="-mips3 $cflags" if ($target =~ /mips64/);
1448 }
1449
1450 my $no_shared_warn=0;
1451 my $no_user_cflags=0;
1452
1453 if ($flags ne "")       { $cflags="$flags$cflags"; }
1454 else                    { $no_user_cflags=1;       }
1455
1456 # The DSO code currently always implements all functions so that no
1457 # applications will have to worry about that from a compilation point
1458 # of view. However, the "method"s may return zero unless that platform
1459 # has support compiled in for them. Currently each method is enabled
1460 # by a define "DSO_<name>" ... we translate the "dso_scheme" config
1461 # string entry into using the following logic;
1462 my $dso_cflags;
1463 if (!$no_dso && $dso_scheme ne "")
1464         {
1465         $dso_scheme =~ tr/[a-z]/[A-Z]/;
1466         if ($dso_scheme eq "DLFCN")
1467                 {
1468                 $dso_cflags = "-DDSO_DLFCN -DHAVE_DLFCN_H";
1469                 }
1470         elsif ($dso_scheme eq "DLFCN_NO_H")
1471                 {
1472                 $dso_cflags = "-DDSO_DLFCN";
1473                 }
1474         else
1475                 {
1476                 $dso_cflags = "-DDSO_$dso_scheme";
1477                 }
1478         $cflags = "$dso_cflags $cflags";
1479         }
1480
1481 my $thread_cflags;
1482 my $thread_defines;
1483 if ($thread_cflag ne "(unknown)" && !$no_threads)
1484         {
1485         # If we know how to do it, support threads by default.
1486         $threads = 1;
1487         }
1488 if ($thread_cflag eq "(unknown)" && $threads)
1489         {
1490         # If the user asked for "threads", [s]he is also expected to
1491         # provide any system-dependent compiler options that are
1492         # necessary.
1493         if ($no_user_cflags)
1494                 {
1495                 print "You asked for multi-threading support, but didn't\n";
1496                 print "provide any system-specific compiler options\n";
1497                 exit(1);
1498                 }
1499         $thread_cflags="-DOPENSSL_THREADS $cflags" ;
1500         $thread_defines .= "#define OPENSSL_THREADS\n";
1501         }
1502 else
1503         {
1504         $thread_cflags="-DOPENSSL_THREADS $thread_cflag $cflags";
1505         $thread_defines .= "#define OPENSSL_THREADS\n";
1506 #       my $def;
1507 #       foreach $def (split ' ',$thread_cflag)
1508 #               {
1509 #               if ($def =~ s/^-D// && $def !~ /^_/)
1510 #                       {
1511 #                       $thread_defines .= "#define $def\n";
1512 #                       }
1513 #               }
1514         }
1515
1516 $lflags="$libs$lflags" if ($libs ne "");
1517
1518 if ($no_asm)
1519         {
1520         $cpuid_obj=$bn_obj=$ec_obj=
1521         $des_obj=$aes_obj=$bf_obj=$cast_obj=$rc4_obj=$rc5_obj=$cmll_obj=
1522         $modes_obj=$sha1_obj=$md5_obj=$rmd160_obj=$wp_obj=$engines_obj=
1523         $chacha_obj=$poly1305_obj="";
1524         $cflags=~s/\-D[BL]_ENDIAN//             if ($fips);
1525         $thread_cflags=~s/\-D[BL]_ENDIAN//      if ($fips);
1526         }
1527 elsif (defined($disabled{ec2m}))
1528         {
1529         $bn_obj =~ s/\w+-gf2m.o//;
1530         }
1531
1532 if (!$no_shared)
1533         {
1534         $cast_obj="";   # CAST assembler is not PIC
1535         }
1536
1537 if ($threads)
1538         {
1539         $cflags=$thread_cflags;
1540         $openssl_thread_defines .= $thread_defines;
1541         }
1542
1543 if ($zlib)
1544         {
1545         $cflags = "-DZLIB $cflags";
1546         if (defined($disabled{"zlib-dynamic"}))
1547                 {
1548                 if (defined($withargs{"zlib-lib"}))
1549                         {
1550                         $lflags = "$lflags -L" . $withargs{"zlib-lib"} . " -lz";
1551                         }
1552                 else
1553                         {
1554                         $lflags = "$lflags -lz";
1555                         }
1556                 }
1557         else
1558                 {
1559                 $cflags = "-DZLIB_SHARED $cflags";
1560                 }
1561         }
1562
1563 # With "deprecated" disable all deprecated features.
1564 if (defined($disabled{"deprecated"})) {
1565         $api = $maxapi;
1566 }
1567
1568 # You will find shlib_mark1 and shlib_mark2 explained in Makefile.in
1569 my $shared_mark = "";
1570 if ($shared_target eq "")
1571         {
1572         $no_shared_warn = 1 if !$no_shared && !$fips;
1573         $no_shared = 1;
1574         }
1575 if (!$no_shared)
1576         {
1577         if ($shared_cflag ne "")
1578                 {
1579                 $cflags = "$shared_cflag -DOPENSSL_PIC $cflags";
1580                 }
1581         }
1582
1583 if (!$IsMK1MF)
1584         {
1585         # add {no-}static-engine to options to allow mkdef.pl to work without extra arguments
1586         if ($no_shared)
1587                 {
1588                 $openssl_other_defines.="#define OPENSSL_NO_DYNAMIC_ENGINE\n";
1589                 $options.=" static-engine";
1590                 }
1591         else
1592                 {
1593                 $openssl_other_defines.="#define OPENSSL_NO_STATIC_ENGINE\n";
1594                 $options.=" no-static-engine";
1595                 }
1596         }
1597
1598 $cpuid_obj.=" uplink.o uplink-x86.o" if ($cflags =~ /\-DOPENSSL_USE_APPLINK/);
1599
1600 #
1601 # Platform fix-ups
1602 #
1603 if ($target =~ /\-icc$/)        # Intel C compiler
1604         {
1605         my $iccver=0;
1606         if (open(FD,"$cc -V 2>&1 |"))
1607                 {
1608                 while(<FD>) { $iccver=$1 if (/Version ([0-9]+)\./); }
1609                 close(FD);
1610                 }
1611         if ($iccver>=8)
1612                 {
1613                 $cflags=~s/\-KPIC/-fPIC/;
1614                 # Eliminate unnecessary dependency from libirc.a. This is
1615                 # essential for shared library support, as otherwise
1616                 # apps/openssl can end up in endless loop upon startup...
1617                 $cflags.=" -Dmemcpy=__builtin_memcpy -Dmemset=__builtin_memset";
1618                 }
1619         if ($iccver>=9)
1620                 {
1621                 $lflags.=" -i-static";
1622                 $lflags=~s/\-no_cpprt/-no-cpprt/;
1623                 }
1624         if ($iccver>=10)
1625                 {
1626                 $lflags=~s/\-i\-static/-static-intel/;
1627                 }
1628         if ($iccver>=11)
1629                 {
1630                 $cflags.=" -no-intel-extensions";       # disable Cilk
1631                 $lflags=~s/\-no\-cpprt/-no-cxxlib/;
1632                 }
1633         }
1634
1635 # Unlike other OSes (like Solaris, Linux, Tru64, IRIX) BSD run-time
1636 # linkers (tested OpenBSD, NetBSD and FreeBSD) "demand" RPATH set on
1637 # .so objects. Apparently application RPATH is not global and does
1638 # not apply to .so linked with other .so. Problem manifests itself
1639 # when libssl.so fails to load libcrypto.so. One can argue that we
1640 # should engrave this into Makefile.shared rules or into BSD-* config
1641 # lines above. Meanwhile let's try to be cautious and pass -rpath to
1642 # linker only when --prefix is not /usr.
1643 if ($target =~ /^BSD\-/)
1644         {
1645         $shared_ldflag.=" -Wl,-rpath,\$(LIBRPATH)" if ($prefix !~ m|^/usr[/]*$|);
1646         }
1647
1648 if ($sys_id ne "")
1649         {
1650         #$cflags="-DOPENSSL_SYS_$sys_id $cflags";
1651         $openssl_sys_defines="#define OPENSSL_SYS_$sys_id\n";
1652         }
1653
1654 if ($ranlib eq "")
1655         {
1656         $ranlib = $default_ranlib;
1657         }
1658
1659 #my ($bn1)=split(/\s+/,$bn_obj);
1660 #$bn1 = "" unless defined $bn1;
1661 #$bn1=$bn_asm unless ($bn1 =~ /\.o$/);
1662 #$bn_obj="$bn1";
1663
1664 $cpuid_obj="" if ($processor eq "386");
1665
1666 $bn_obj = $bn_asm unless $bn_obj ne "";
1667 # bn-586 is the only one implementing bn_*_part_words
1668 $cflags.=" -DOPENSSL_BN_ASM_PART_WORDS" if ($bn_obj =~ /bn-586/);
1669 $cflags.=" -DOPENSSL_IA32_SSE2" if (!$no_sse2 && $bn_obj =~ /86/);
1670
1671 $cflags.=" -DOPENSSL_BN_ASM_MONT" if ($bn_obj =~ /-mont/);
1672 $cflags.=" -DOPENSSL_BN_ASM_MONT5" if ($bn_obj =~ /-mont5/);
1673 $cflags.=" -DOPENSSL_BN_ASM_GF2m" if ($bn_obj =~ /-gf2m/);
1674
1675 if ($fips)
1676         {
1677         $openssl_other_defines.="#define OPENSSL_FIPS\n";
1678         }
1679
1680 $cpuid_obj="mem_clr.o"  unless ($cpuid_obj =~ /\.o$/);
1681 $des_obj=$des_enc       unless ($des_obj =~ /\.o$/);
1682 $bf_obj=$bf_enc         unless ($bf_obj =~ /\.o$/);
1683 $cast_obj=$cast_enc     unless ($cast_obj =~ /\.o$/);
1684 $rc4_obj=$rc4_enc       unless ($rc4_obj =~ /\.o$/);
1685 $rc5_obj=$rc5_enc       unless ($rc5_obj =~ /\.o$/);
1686 if ($sha1_obj =~ /\.o$/)
1687         {
1688 #       $sha1_obj=$sha1_enc;
1689         $cflags.=" -DSHA1_ASM"   if ($sha1_obj =~ /sx86/ || $sha1_obj =~ /sha1/);
1690         $cflags.=" -DSHA256_ASM" if ($sha1_obj =~ /sha256/);
1691         $cflags.=" -DSHA512_ASM" if ($sha1_obj =~ /sha512/);
1692         if ($sha1_obj =~ /sse2/)
1693             {   if ($no_sse2)
1694                 {   $sha1_obj =~ s/\S*sse2\S+//;        }
1695                 elsif ($cflags !~ /OPENSSL_IA32_SSE2/)
1696                 {   $cflags.=" -DOPENSSL_IA32_SSE2";    }
1697             }
1698         }
1699 if ($md5_obj =~ /\.o$/)
1700         {
1701 #       $md5_obj=$md5_enc;
1702         $cflags.=" -DMD5_ASM";
1703         }
1704 if ($rmd160_obj =~ /\.o$/)
1705         {
1706 #       $rmd160_obj=$rmd160_enc;
1707         $cflags.=" -DRMD160_ASM";
1708         }
1709 if ($aes_obj =~ /\.o$/)
1710         {
1711         $cflags.=" -DAES_ASM" if ($aes_obj =~ m/\baes\-/);;
1712         # aes-ctr.o is not a real file, only indication that assembler
1713         # module implements AES_ctr32_encrypt...
1714         $cflags.=" -DAES_CTR_ASM" if ($aes_obj =~ s/\s*aes\-ctr\.o//);
1715         # aes-xts.o indicates presence of AES_xts_[en|de]crypt...
1716         $cflags.=" -DAES_XTS_ASM" if ($aes_obj =~ s/\s*aes\-xts\.o//);
1717         $aes_obj =~ s/\s*(vpaes|aesni)\-x86\.o//g if ($no_sse2);
1718         $cflags.=" -DVPAES_ASM" if ($aes_obj =~ m/vpaes/);
1719         $cflags.=" -DBSAES_ASM" if ($aes_obj =~ m/bsaes/);
1720         }
1721 else    {
1722         $aes_obj=$aes_enc;
1723         }
1724 $wp_obj="" if ($wp_obj =~ /mmx/ && $processor eq "386");
1725 if ($wp_obj =~ /\.o$/ && !$disabled{"whirlpool"})
1726         {
1727         $cflags.=" -DWHIRLPOOL_ASM";
1728         }
1729 else    {
1730         $wp_obj="wp_block.o";
1731         }
1732 $cmll_obj=$cmll_enc     unless ($cmll_obj =~ /.o$/);
1733 if ($modes_obj =~ /ghash\-/)
1734         {
1735         $cflags.=" -DGHASH_ASM";
1736         }
1737 if ($ec_obj =~ /ecp_nistz256/)
1738         {
1739         $cflags.=" -DECP_NISTZ256_ASM";
1740         }
1741 $chacha_obj=$chacha_enc unless ($chacha_obj =~ /\.o$/);
1742 if ($poly1305_obj =~ /\.o$/)
1743         {
1744         $cflags.=" -DPOLY1305_ASM";
1745         }
1746
1747 # "Stringify" the C flags string.  This permits it to be made part of a string
1748 # and works as well on command lines.
1749 $cflags =~ s/([\\\"])/\\\1/g;
1750
1751 my $version = "unknown";
1752 my $version_num = "unknown";
1753 my $major = "unknown";
1754 my $minor = "unknown";
1755 my $shlib_version_number = "unknown";
1756 my $shlib_version_history = "unknown";
1757 my $shlib_major = "unknown";
1758 my $shlib_minor = "unknown";
1759
1760 open(IN,'<include/openssl/opensslv.h') || die "unable to read opensslv.h:$!\n";
1761 while (<IN>)
1762         {
1763         $version=$1 if /OPENSSL.VERSION.TEXT.*OpenSSL (\S+) /;
1764         $version_num=$1 if /OPENSSL.VERSION.NUMBER.*(0x\S+)/;
1765         $shlib_version_number=$1 if /SHLIB_VERSION_NUMBER *"([^"]+)"/;
1766         $shlib_version_history=$1 if /SHLIB_VERSION_HISTORY *"([^"]*)"/;
1767         }
1768 close(IN);
1769 if ($shlib_version_history ne "") { $shlib_version_history .= ":"; }
1770
1771 if ($version =~ /(^[0-9]*)\.([0-9\.]*)/)
1772         {
1773         $major=$1;
1774         $minor=$2;
1775         }
1776
1777 if ($shlib_version_number =~ /(^[0-9]*)\.([0-9\.]*)/)
1778         {
1779         $shlib_major=$1;
1780         $shlib_minor=$2;
1781         }
1782
1783 if (defined($api)) {
1784     my $apiflag = sprintf("-DOPENSSL_API_COMPAT=%s", $apitable->{$api});
1785     $default_depflags .= " $apiflag";
1786     $cflags .= " $apiflag";
1787 }
1788
1789 my $ecc = $cc;
1790 $ecc = "clang" if `$cc --version 2>&1` =~ /clang/;
1791
1792 if ($strict_warnings)
1793         {
1794         my $wopt;
1795         die "ERROR --strict-warnings requires gcc or clang" unless ($ecc =~ /gcc(-\d(\.\d)*)?$/ or $ecc =~ /clang$/);
1796         foreach $wopt (split /\s+/, $gcc_devteam_warn)
1797                 {
1798                 $cflags .= " $wopt" unless ($cflags =~ /(^|\s)$wopt(\s|$)/)
1799                 }
1800         if ($ecc eq "clang")
1801                 {
1802                 foreach $wopt (split /\s+/, $clang_devteam_warn)
1803                         {
1804                         $cflags .= " $wopt" unless ($cflags =~ /(^|\s)$wopt(\s|$)/)
1805                         }
1806                 }
1807         if ($target !~ /^mingw/)
1808                 {
1809                 foreach $wopt (split /\s+/, $memleak_devteam_backtrace)
1810                         {
1811                         $cflags .= " $wopt" unless ($cflags =~ /(^|\s)$wopt(\s|$)/)
1812                         }
1813                 if ($target =~ /^BSD-/)
1814                         {
1815                         $lflags .= " -lexecinfo";
1816                         }
1817                 }
1818         }
1819
1820 open(IN,"<Makefile.in") || die "unable to read Makefile.in$!\n";
1821 unlink("$Makefile.new") || die "unable to remove old $Makefile.new:$!\n" if -e "$Makefile.new";
1822 open(OUT,">$Makefile.new") || die "unable to create $Makefile.new:$!\n";
1823 print OUT "### Generated automatically from Makefile.in by Configure.\n\n";
1824 my $sdirs=0;
1825
1826 while (<IN>)
1827         {
1828         chomp;
1829         $sdirs = 1 if /^SDIRS=/;
1830         if ($sdirs) {
1831                 my $dir;
1832                 foreach $dir (@skip) {
1833                         s/(\s)$dir /$1/;
1834                         s/\s$dir$//;
1835                         }
1836                 }
1837         $sdirs = 0 unless /\\$/;
1838         s/fips // if (/^DIRS=/ && !$fips);
1839         s/engines // if (/^DIRS=/ && $disabled{"engine"});
1840         s/ccgost// if (/^ENGDIRS=/ && $disabled{"gost"});
1841         s/^VERSION=.*/VERSION=$version/;
1842         s/^MAJOR=.*/MAJOR=$major/;
1843         s/^MINOR=.*/MINOR=$minor/;
1844         s/^SHLIB_VERSION_NUMBER=.*/SHLIB_VERSION_NUMBER=$shlib_version_number/;
1845         s/^SHLIB_VERSION_HISTORY=.*/SHLIB_VERSION_HISTORY=$shlib_version_history/;
1846         s/^SHLIB_MAJOR=.*/SHLIB_MAJOR=$shlib_major/;
1847         s/^SHLIB_MINOR=.*/SHLIB_MINOR=$shlib_minor/;
1848         s/^SHLIB_EXT=.*/SHLIB_EXT=$shared_extension/;
1849         s/^INSTALLTOP=.*$/INSTALLTOP=$prefix/;
1850         s/^MULTILIB=.*$/MULTILIB=$multilib/;
1851         s/^OPENSSLDIR=.*$/OPENSSLDIR=$openssldir/;
1852         s/^LIBDIR=.*$/LIBDIR=$libdir/;
1853         s/^INSTALL_PREFIX=.*$/INSTALL_PREFIX=$install_prefix/;
1854         s/^PLATFORM=.*$/PLATFORM=$target/;
1855         s/^OPTIONS=.*$/OPTIONS=$options/;
1856         s/^CONFIGURE_ARGS=.*$/CONFIGURE_ARGS=$argvstring/;
1857         if ($cross_compile_prefix)
1858                 {
1859                 s/^CC=.*$/CROSS_COMPILE= $cross_compile_prefix\nCC= \$\(CROSS_COMPILE\)$cc/;
1860                 s/^AR=\s*/AR= \$\(CROSS_COMPILE\)/;
1861                 s/^NM=\s*/NM= \$\(CROSS_COMPILE\)/;
1862                 s/^RANLIB=\s*/RANLIB= \$\(CROSS_COMPILE\)/;
1863                 s/^MAKEDEPPROG=.*$/MAKEDEPPROG= \$\(CROSS_COMPILE\)$cc/ if $cc eq "gcc";
1864                 }
1865         else    {
1866                 s/^CC=.*$/CC= $cc/;
1867                 s/^AR=\s*ar/AR= $ar/;
1868                 s/^RANLIB=.*/RANLIB= $ranlib/;
1869                 s/^MAKEDEPPROG=.*$/MAKEDEPPROG= $cc/ if $ecc eq "gcc" || $ecc eq "clang";
1870                 }
1871         s/^CFLAG=.*$/CFLAG= $cflags/;
1872         s/^DEPFLAG=.*$/DEPFLAG=$depflags/;
1873         s/^PEX_LIBS=.*$/PEX_LIBS= $prelflags/;
1874         s/^EX_LIBS=.*$/EX_LIBS= $lflags/;
1875         s/^EXE_EXT=.*$/EXE_EXT= $exe_ext/;
1876         s/^CPUID_OBJ=.*$/CPUID_OBJ= $cpuid_obj/;
1877         s/^BN_ASM=.*$/BN_ASM= $bn_obj/;
1878         s/^EC_ASM=.*$/EC_ASM= $ec_obj/;
1879         s/^DES_ENC=.*$/DES_ENC= $des_obj/;
1880         s/^AES_ENC=.*$/AES_ENC= $aes_obj/;
1881         s/^BF_ENC=.*$/BF_ENC= $bf_obj/;
1882         s/^CAST_ENC=.*$/CAST_ENC= $cast_obj/;
1883         s/^RC4_ENC=.*$/RC4_ENC= $rc4_obj/;
1884         s/^RC5_ENC=.*$/RC5_ENC= $rc5_obj/;
1885         s/^MD5_ASM_OBJ=.*$/MD5_ASM_OBJ= $md5_obj/;
1886         s/^SHA1_ASM_OBJ=.*$/SHA1_ASM_OBJ= $sha1_obj/;
1887         s/^RMD160_ASM_OBJ=.*$/RMD160_ASM_OBJ= $rmd160_obj/;
1888         s/^WP_ASM_OBJ=.*$/WP_ASM_OBJ= $wp_obj/;
1889         s/^CMLL_ENC=.*$/CMLL_ENC= $cmll_obj/;
1890         s/^MODES_ASM_OBJ.=*$/MODES_ASM_OBJ= $modes_obj/;
1891         s/^CHACHA_ENC=.*$/CHACHA_ENC= $chacha_obj/;
1892         s/^POLY1305_ASM_OBJ=.*$/POLY1305_ASM_OBJ= $poly1305_obj/;
1893         s/^ENGINES_ASM_OBJ.=*$/ENGINES_ASM_OBJ= $engines_obj/;
1894         s/^PERLASM_SCHEME=.*$/PERLASM_SCHEME= $perlasm_scheme/;
1895         s/^PROCESSOR=.*/PROCESSOR= $processor/;
1896         s/^ARFLAGS=.*/ARFLAGS= $arflags/;
1897         s/^PERL=.*/PERL= $perl/;
1898         s/^LIBZLIB=.*/LIBZLIB=$withargs{"zlib-lib"}/;
1899         s/^ZLIB_INCLUDE=.*/ZLIB_INCLUDE=$withargs{"zlib-include"}/;
1900         s/^FIPSLIBDIR=.*/FIPSLIBDIR=$fipslibdir/;
1901         s/^FIPSCANLIB=.*/FIPSCANLIB=libcrypto/ if $fips;
1902         s/^SHARED_FIPS=.*/SHARED_FIPS=/;
1903         s/^SHLIBDIRS=.*/SHLIBDIRS= crypto ssl/;
1904         s/^BASEADDR=.*/BASEADDR=$baseaddr/;
1905         s/^SHLIB_TARGET=.*/SHLIB_TARGET=$shared_target/;
1906         s/^SHLIB_MARK=.*/SHLIB_MARK=$shared_mark/;
1907         s/^SHARED_LIBS=.*/SHARED_LIBS=\$(SHARED_CRYPTO) \$(SHARED_SSL)/ if (!$no_shared);
1908         if ($shared_extension ne "" && $shared_extension =~ /^\.s([ol])\.[^\.]*$/)
1909                 {
1910                 my $sotmp = $1;
1911                 s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.s$sotmp/;
1912                 }
1913         elsif ($shared_extension ne "" && $shared_extension =~ /^\.[^\.]*\.dylib$/)
1914                 {
1915                 s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.dylib/;
1916                 }
1917         elsif ($shared_extension ne "" && $shared_extension =~ /^\.s([ol])\.[^\.]*\.[^\.]*$/)
1918                 {
1919                 my $sotmp = $1;
1920                 s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.s$sotmp.\$(SHLIB_MAJOR) .s$sotmp/;
1921                 }
1922         elsif ($shared_extension ne "" && $shared_extension =~ /^\.[^\.]*\.[^\.]*\.dylib$/)
1923                 {
1924                 s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.\$(SHLIB_MAJOR).dylib .dylib/;
1925                 }
1926         s/^SHARED_LDFLAGS=.*/SHARED_LDFLAGS=$shared_ldflag/;
1927         print OUT $_."\n";
1928         }
1929 close(IN);
1930 close(OUT);
1931 rename($Makefile,"$Makefile.orig") || die "unable to rename $Makefile\n" if -e $Makefile;
1932 rename("$Makefile.new",$Makefile) || die "unable to rename $Makefile.new\n";
1933
1934 print "CC            =$cc\n";
1935 print "CFLAG         =$cflags\n";
1936 print "EX_LIBS       =$lflags\n";
1937 print "CPUID_OBJ     =$cpuid_obj\n";
1938 print "BN_ASM        =$bn_obj\n";
1939 print "EC_ASM        =$ec_obj\n";
1940 print "DES_ENC       =$des_obj\n";
1941 print "AES_ENC       =$aes_obj\n";
1942 print "BF_ENC        =$bf_obj\n";
1943 print "CAST_ENC      =$cast_obj\n";
1944 print "RC4_ENC       =$rc4_obj\n";
1945 print "RC5_ENC       =$rc5_obj\n";
1946 print "MD5_OBJ_ASM   =$md5_obj\n";
1947 print "SHA1_OBJ_ASM  =$sha1_obj\n";
1948 print "RMD160_OBJ_ASM=$rmd160_obj\n";
1949 print "CMLL_ENC      =$cmll_obj\n";
1950 print "MODES_OBJ     =$modes_obj\n";
1951 print "ENGINES_OBJ   =$engines_obj\n";
1952 print "CHACHA_ENC    =$chacha_obj\n";
1953 print "POLY1305_OBJ  =$poly1305_obj\n";
1954 print "PROCESSOR     =$processor\n";
1955 print "RANLIB        =$ranlib\n";
1956 print "ARFLAGS       =$arflags\n";
1957 print "PERL          =$perl\n";
1958
1959 my $des_ptr=0;
1960 my $des_risc1=0;
1961 my $des_risc2=0;
1962 my $des_unroll=0;
1963 my $bn_ll=0;
1964 my $def_int=2;
1965 my $rc4_int=$def_int;
1966 my $md2_int=$def_int;
1967 my $idea_int=$def_int;
1968 my $rc2_int=$def_int;
1969 my $rc4_idx=0;
1970 my $rc4_chunk=0;
1971 my $bf_ptr=0;
1972 my @type=("char","short","int","long");
1973 my ($b64l,$b64,$b32,$b16,$b8)=(0,0,1,0,0);
1974 my $export_var_as_fn=0;
1975
1976 my $des_int;
1977
1978 foreach (sort split(/\s+/,$bn_ops))
1979         {
1980         $des_ptr=1 if /DES_PTR/;
1981         $des_risc1=1 if /DES_RISC1/;
1982         $des_risc2=1 if /DES_RISC2/;
1983         $des_unroll=1 if /DES_UNROLL/;
1984         $des_int=1 if /DES_INT/;
1985         $bn_ll=1 if /BN_LLONG/;
1986         $rc4_int=0 if /RC4_CHAR/;
1987         $rc4_int=3 if /RC4_LONG/;
1988         $rc4_idx=1 if /RC4_INDEX/;
1989         $rc4_chunk=1 if /RC4_CHUNK/;
1990         $rc4_chunk=2 if /RC4_CHUNK_LL/;
1991         $md2_int=0 if /MD2_CHAR/;
1992         $md2_int=3 if /MD2_LONG/;
1993         $idea_int=1 if /IDEA_SHORT/;
1994         $idea_int=3 if /IDEA_LONG/;
1995         $rc2_int=1 if /RC2_SHORT/;
1996         $rc2_int=3 if /RC2_LONG/;
1997         $bf_ptr=1 if $_ eq "BF_PTR";
1998         $bf_ptr=2 if $_ eq "BF_PTR2";
1999         ($b64l,$b64,$b32,$b16,$b8)=(0,1,0,0,0) if /SIXTY_FOUR_BIT/;
2000         ($b64l,$b64,$b32,$b16,$b8)=(1,0,0,0,0) if /SIXTY_FOUR_BIT_LONG/;
2001         ($b64l,$b64,$b32,$b16,$b8)=(0,0,1,0,0) if /THIRTY_TWO_BIT/;
2002         ($b64l,$b64,$b32,$b16,$b8)=(0,0,0,1,0) if /SIXTEEN_BIT/;
2003         ($b64l,$b64,$b32,$b16,$b8)=(0,0,0,0,1) if /EIGHT_BIT/;
2004         $export_var_as_fn=1 if /EXPORT_VAR_AS_FN/;
2005         }
2006
2007 open(IN,'<crypto/opensslconf.h.in') || die "unable to read crypto/opensslconf.h.in:$!\n";
2008 unlink("include/openssl/opensslconf.h.new") || die "unable to remove old include/openssl/opensslconf.h.new:$!\n" if -e "include/openssl/opensslconf.h.new";
2009 open(OUT,'>include/openssl/opensslconf.h.new') || die "unable to create include/openssl/opensslconf.h.new:$!\n";
2010 print OUT "/* opensslconf.h */\n";
2011 print OUT "/* WARNING: Generated automatically from opensslconf.h.in by Configure. */\n\n";
2012
2013 print OUT "#ifdef  __cplusplus\n";
2014 print OUT "extern \"C\" {\n";
2015 print OUT "#endif\n";
2016 print OUT "/* OpenSSL was configured with the following options: */\n";
2017
2018 my $openssl_api_defines = "";
2019 if (defined($api)) {
2020     $openssl_api_defines = sprintf "#define OPENSSL_MIN_API %s\n", $apitable->{$api};
2021 }
2022 my $openssl_algorithm_defines_trans = $openssl_algorithm_defines;
2023 $openssl_experimental_defines =~ s/^\s*#\s*define\s+OPENSSL_NO_(.*)/#ifndef OPENSSL_EXPERIMENTAL_$1\n# ifndef OPENSSL_NO_$1\n#  define OPENSSL_NO_$1\n# endif\n#endif/mg;
2024 $openssl_algorithm_defines_trans =~ s/^\s*#\s*define\s+OPENSSL_(.*)/# if defined(OPENSSL_$1) \&\& !defined($1)\n#  define $1\n# endif/mg;
2025 $openssl_algorithm_defines =~ s/^\s*#\s*define\s+(.*)/#ifndef $1\n# define $1\n#endif/mg;
2026 $openssl_algorithm_defines = "   /* no ciphers excluded */\n" if $openssl_algorithm_defines eq "";
2027 $openssl_thread_defines =~ s/^\s*#\s*define\s+(.*)/#ifndef $1\n# define $1\n#endif/mg;
2028 $openssl_sys_defines =~ s/^\s*#\s*define\s+(.*)/#ifndef $1\n# define $1\n#endif/mg;
2029 $openssl_other_defines =~ s/^\s*#\s*define\s+(.*)/#ifndef $1\n# define $1\n#endif/mg;
2030
2031 print OUT $openssl_sys_defines;
2032 print OUT "#ifndef OPENSSL_DOING_MAKEDEPEND\n\n";
2033 print OUT $openssl_experimental_defines;
2034 print OUT $openssl_api_defines;
2035 print OUT "\n";
2036 print OUT $openssl_algorithm_defines;
2037 print OUT "\n#endif /* OPENSSL_DOING_MAKEDEPEND */\n\n";
2038 print OUT $openssl_thread_defines;
2039 print OUT $openssl_other_defines,"\n";
2040
2041 print OUT "/* The OPENSSL_NO_* macros are also defined as NO_* if the application\n";
2042 print OUT "   asks for it.  This is a transient feature that is provided for those\n";
2043 print OUT "   who haven't had the time to do the appropriate changes in their\n";
2044 print OUT "   applications.  */\n";
2045 print OUT "#ifdef OPENSSL_ALGORITHM_DEFINES\n";
2046 print OUT $openssl_algorithm_defines_trans;
2047 print OUT "#endif\n\n";
2048
2049 print OUT "#define OPENSSL_CPUID_OBJ\n\n" if ($cpuid_obj ne "mem_clr.o");
2050
2051 while (<IN>)
2052         {
2053         if      (/^#define\s+OPENSSLDIR/)
2054                 {
2055                 my $foo = $openssldir;
2056                 $foo =~ s/\\/\\\\/g;
2057                 print OUT "#define OPENSSLDIR \"$foo\"\n";
2058                 }
2059         elsif   (/^#define\s+ENGINESDIR/)
2060                 {
2061                 my $foo = "$prefix/$libdir/engines";
2062                 $foo =~ s/\\/\\\\/g;
2063                 print OUT "#define ENGINESDIR \"$foo\"\n";
2064                 }
2065         elsif   (/^#((define)|(undef))\s+OPENSSL_EXPORT_VAR_AS_FUNCTION/)
2066                 { printf OUT "#undef OPENSSL_EXPORT_VAR_AS_FUNCTION\n"
2067                         if $export_var_as_fn;
2068                   printf OUT "#%s OPENSSL_EXPORT_VAR_AS_FUNCTION\n",
2069                         ($export_var_as_fn)?"define":"undef"; }
2070         elsif   (/^#define\s+OPENSSL_UNISTD/)
2071                 {
2072                 $unistd = "<unistd.h>" if $unistd eq "";
2073                 print OUT "#define OPENSSL_UNISTD $unistd\n";
2074                 }
2075         elsif   (/^#((define)|(undef))\s+SIXTY_FOUR_BIT_LONG/)
2076                 { printf OUT "#%s SIXTY_FOUR_BIT_LONG\n",($b64l)?"define":"undef"; }
2077         elsif   (/^#((define)|(undef))\s+SIXTY_FOUR_BIT/)
2078                 { printf OUT "#%s SIXTY_FOUR_BIT\n",($b64)?"define":"undef"; }
2079         elsif   (/^#((define)|(undef))\s+THIRTY_TWO_BIT/)
2080                 { printf OUT "#%s THIRTY_TWO_BIT\n",($b32)?"define":"undef"; }
2081         elsif   (/^#((define)|(undef))\s+SIXTEEN_BIT/)
2082                 { printf OUT "#%s SIXTEEN_BIT\n",($b16)?"define":"undef"; }
2083         elsif   (/^#((define)|(undef))\s+EIGHT_BIT/)
2084                 { printf OUT "#%s EIGHT_BIT\n",($b8)?"define":"undef"; }
2085         elsif   (/^#((define)|(undef))\s+BN_LLONG\s*$/)
2086                 { printf OUT "#%s BN_LLONG\n",($bn_ll)?"define":"undef"; }
2087         elsif   (/^\#define\s+OSSL_DES_LONG\s+.*/)
2088                 { printf OUT "#define OSSL_DES_LONG unsigned %s\n",
2089                         ($des_int)?'int':'long'; }
2090         elsif   (/^\#(define|undef)\s+DES_PTR/)
2091                 { printf OUT "#%s DES_PTR\n",($des_ptr)?'define':'undef'; }
2092         elsif   (/^\#(define|undef)\s+DES_RISC1/)
2093                 { printf OUT "#%s DES_RISC1\n",($des_risc1)?'define':'undef'; }
2094         elsif   (/^\#(define|undef)\s+DES_RISC2/)
2095                 { printf OUT "#%s DES_RISC2\n",($des_risc2)?'define':'undef'; }
2096         elsif   (/^\#(define|undef)\s+DES_UNROLL/)
2097                 { printf OUT "#%s DES_UNROLL\n",($des_unroll)?'define':'undef'; }
2098         elsif   (/^#define\s+RC4_INT\s/)
2099                 { printf OUT "#define RC4_INT unsigned %s\n",$type[$rc4_int]; }
2100         elsif   (/^#undef\s+RC4_CHUNK/)
2101                 {
2102                 printf OUT "#undef RC4_CHUNK\n" if $rc4_chunk==0;
2103                 printf OUT "#define RC4_CHUNK unsigned long\n" if $rc4_chunk==1;
2104                 printf OUT "#define RC4_CHUNK unsigned long long\n" if $rc4_chunk==2;
2105                 }
2106         elsif   (/^#((define)|(undef))\s+RC4_INDEX/)
2107                 { printf OUT "#%s RC4_INDEX\n",($rc4_idx)?"define":"undef"; }
2108         elsif (/^#(define|undef)\s+I386_ONLY/)
2109                 { printf OUT "#%s I386_ONLY\n", ($processor eq "386")?
2110                         "define":"undef"; }
2111         elsif   (/^#define\s+MD2_INT\s/)
2112                 { printf OUT "#define MD2_INT unsigned %s\n",$type[$md2_int]; }
2113         elsif   (/^#define\s+IDEA_INT\s/)
2114                 {printf OUT "#define IDEA_INT unsigned %s\n",$type[$idea_int];}
2115         elsif   (/^#define\s+RC2_INT\s/)
2116                 {printf OUT "#define RC2_INT unsigned %s\n",$type[$rc2_int];}
2117         elsif (/^#(define|undef)\s+BF_PTR/)
2118                 {
2119                 printf OUT "#undef BF_PTR\n" if $bf_ptr == 0;
2120                 printf OUT "#define BF_PTR\n" if $bf_ptr == 1;
2121                 printf OUT "#define BF_PTR2\n" if $bf_ptr == 2;
2122                 }
2123         else
2124                 { print OUT $_; }
2125         }
2126 close(IN);
2127 print OUT "#ifdef  __cplusplus\n";
2128 print OUT "}\n";
2129 print OUT "#endif\n";
2130 close(OUT);
2131 rename("include/openssl/opensslconf.h","include/openssl/opensslconf.h.bak") || die "unable to rename include/openssl/opensslconf.h\n" if -e "include/openssl/opensslconf.h";
2132 rename("include/openssl/opensslconf.h.new","include/openssl/opensslconf.h") || die "unable to rename include/openssl/opensslconf.h.new\n";
2133
2134
2135 # Fix the date
2136
2137 print "SIXTY_FOUR_BIT_LONG mode\n" if $b64l;
2138 print "SIXTY_FOUR_BIT mode\n" if $b64;
2139 print "THIRTY_TWO_BIT mode\n" if $b32;
2140 print "SIXTEEN_BIT mode\n" if $b16;
2141 print "EIGHT_BIT mode\n" if $b8;
2142 print "DES_PTR used\n" if $des_ptr;
2143 print "DES_RISC1 used\n" if $des_risc1;
2144 print "DES_RISC2 used\n" if $des_risc2;
2145 print "DES_UNROLL used\n" if $des_unroll;
2146 print "DES_INT used\n" if $des_int;
2147 print "BN_LLONG mode\n" if $bn_ll;
2148 print "RC4 uses u$type[$rc4_int]\n" if $rc4_int != $def_int;
2149 print "RC4_INDEX mode\n" if $rc4_idx;
2150 print "RC4_CHUNK is undefined\n" if $rc4_chunk==0;
2151 print "RC4_CHUNK is unsigned long\n" if $rc4_chunk==1;
2152 print "RC4_CHUNK is unsigned long long\n" if $rc4_chunk==2;
2153 print "MD2 uses u$type[$md2_int]\n" if $md2_int != $def_int;
2154 print "IDEA uses u$type[$idea_int]\n" if $idea_int != $def_int;
2155 print "RC2 uses u$type[$rc2_int]\n" if $rc2_int != $def_int;
2156 print "BF_PTR used\n" if $bf_ptr == 1;
2157 print "BF_PTR2 used\n" if $bf_ptr == 2;
2158
2159 # Copy all Makefile.in to Makefile (except top-level)
2160 use File::Find;
2161 use IO::File;
2162 find(sub {
2163         return if ($_ ne "Makefile.in" || $File::Find::dir eq ".");
2164         my $in = IO::File->new($_, "r") or
2165             die sprintf "Error reading Makefile.in in %s: !$\n",
2166                 $File::Find::dir;
2167         my $out = IO::File->new("Makefile", "w") or
2168             die sprintf "Error writing Makefile in %s: !$\n",
2169                 $File::Find::dir;
2170         print $out "# Generated from $_, do not edit\n";
2171         while (my $line = <$in>) { print $out $line }
2172         $in->close() or
2173             die sprintf "Error reading Makefile.in in %s: !$\n",
2174                 $File::Find::dir;
2175         $out->close() or
2176             die sprintf "Error writing Makefile in %s: !$\n",
2177                 $File::Find::dir;
2178     }, ".");
2179
2180 {
2181     my $perlguess = $perl =~ m@^/@ ? $perl : '/usr/local/bin/perl';
2182
2183     &dofile("tools/c_rehash",$perlguess,
2184             '^#!/'              => '#!%s',
2185             '^my \$dir;$'       => 'my $dir = "' . $openssldir . '";',
2186             '^my \$prefix;$'    => 'my $prefix = "' . $prefix . '";');
2187     &dofile("apps/CA.pl",$perl,
2188             '^#!/'              => '#!%s');
2189 }
2190 if($IsMK1MF) {
2191         open (OUT,">crypto/buildinf.h") || die "Can't open buildinf.h";
2192         printf OUT <<EOF;
2193 #ifndef MK1MF_BUILD
2194   /* auto-generated by Configure for crypto/cversion.c:
2195    * for Unix builds, crypto/Makefile.ssl generates functional definitions;
2196    * Windows builds (and other mk1mf builds) compile cversion.c with
2197    * -DMK1MF_BUILD and use definitions added to this file by util/mk1mf.pl. */
2198   #error "Windows builds (PLATFORM=$target) use mk1mf.pl-created Makefiles"
2199 #endif
2200 EOF
2201         close(OUT);
2202 } else {
2203         my $make_command = "$make PERL=\'$perl\'";
2204         my $make_targets = "";
2205         $make_targets .= " depend" if $depflags ne $default_depflags && $make_depend;
2206         (system $make_command.$make_targets) == 0 or die "make $make_targets failed"
2207                 if $make_targets ne "";
2208         if ($depflags ne $default_depflags && !$make_depend) {
2209             $warn_make_depend++;
2210         }
2211 }
2212
2213 # create the ms/version32.rc file if needed
2214 if ($IsMK1MF && ($target !~ /^netware/)) {
2215         my ($v1, $v2, $v3, $v4);
2216         if ($version_num =~ /^0x([0-9a-f]{1})([0-9a-f]{2})([0-9a-f]{2})([0-9a-f]{2})([0-9a-f]{1})L$/i) {
2217                 $v1=hex $1;
2218                 $v2=hex $2;
2219                 $v3=hex $3;
2220                 $v4=hex $4;
2221         }
2222         open (OUT,">ms/version32.rc") || die "Can't open ms/version32.rc";
2223         print OUT <<EOF;
2224 #include <winver.h>
2225
2226 LANGUAGE 0x09,0x01
2227
2228 1 VERSIONINFO
2229   FILEVERSION $v1,$v2,$v3,$v4
2230   PRODUCTVERSION $v1,$v2,$v3,$v4
2231   FILEFLAGSMASK 0x3fL
2232 #ifdef _DEBUG
2233   FILEFLAGS 0x01L
2234 #else
2235   FILEFLAGS 0x00L
2236 #endif
2237   FILEOS VOS__WINDOWS32
2238   FILETYPE VFT_DLL
2239   FILESUBTYPE 0x0L
2240 BEGIN
2241     BLOCK "StringFileInfo"
2242     BEGIN
2243         BLOCK "040904b0"
2244         BEGIN
2245             // Required:
2246             VALUE "CompanyName", "The OpenSSL Project, http://www.openssl.org/\\0"
2247             VALUE "FileDescription", "OpenSSL Shared Library\\0"
2248             VALUE "FileVersion", "$version\\0"
2249 #if defined(CRYPTO)
2250             VALUE "InternalName", "libeay32\\0"
2251             VALUE "OriginalFilename", "libeay32.dll\\0"
2252 #elif defined(SSL)
2253             VALUE "InternalName", "ssleay32\\0"
2254             VALUE "OriginalFilename", "ssleay32.dll\\0"
2255 #endif
2256             VALUE "ProductName", "The OpenSSL Toolkit\\0"
2257             VALUE "ProductVersion", "$version\\0"
2258             // Optional:
2259             //VALUE "Comments", "\\0"
2260             VALUE "LegalCopyright", "Copyright © 1998-2015 The OpenSSL Project. Copyright © 1995-1998 Eric A. Young, Tim J. Hudson. All rights reserved.\\0"
2261             //VALUE "LegalTrademarks", "\\0"
2262             //VALUE "PrivateBuild", "\\0"
2263             //VALUE "SpecialBuild", "\\0"
2264         END
2265     END
2266     BLOCK "VarFileInfo"
2267     BEGIN
2268         VALUE "Translation", 0x409, 0x4b0
2269     END
2270 END
2271 EOF
2272         close(OUT);
2273   }
2274
2275 print <<EOF;
2276
2277 Configured for $target.
2278 EOF
2279
2280 print <<\EOF if (!$no_threads && !$threads);
2281
2282 The library could not be configured for supporting multi-threaded
2283 applications as the compiler options required on this system are not known.
2284 See file INSTALL for details if you need multi-threading.
2285 EOF
2286
2287 print <<\EOF if ($no_shared_warn);
2288
2289 You gave the option 'shared', which is not supported on this platform, so
2290 we will pretend you gave the option 'no-shared'.  If you know how to implement
2291 shared libraries, please let us know (but please first make sure you have
2292 tried with a current version of OpenSSL).
2293 EOF
2294
2295 print <<EOF if ($warn_make_depend);
2296
2297 *** Because of configuration changes, you MUST do the following before
2298 *** building:
2299
2300         make depend
2301 EOF
2302
2303 exit(0);
2304
2305 sub usage
2306         {
2307         print STDERR $usage;
2308         print STDERR "\npick os/compiler from:\n";
2309         my $j=0;
2310         my $i;
2311         my $k=0;
2312         foreach $i (sort keys %table)
2313                 {
2314                 next if $i =~ /^debug/;
2315                 $k += length($i) + 1;
2316                 if ($k > 78)
2317                         {
2318                         print STDERR "\n";
2319                         $k=length($i);
2320                         }
2321                 print STDERR $i . " ";
2322                 }
2323         foreach $i (sort keys %table)
2324                 {
2325                 next if $i !~ /^debug/;
2326                 $k += length($i) + 1;
2327                 if ($k > 78)
2328                         {
2329                         print STDERR "\n";
2330                         $k=length($i);
2331                         }
2332                 print STDERR $i . " ";
2333                 }
2334         print STDERR "\n\nNOTE: If in doubt, on Unix-ish systems use './config'.\n";
2335         exit(1);
2336         }
2337
2338 sub which
2339         {
2340         my($name)=@_;
2341         my $path;
2342         foreach $path (split /:/, $ENV{PATH})
2343                 {
2344                 if (-f "$path/$name$exe_ext" and -x _)
2345                         {
2346                         return "$path/$name$exe_ext" unless ($name eq "perl" and
2347                          system("$path/$name$exe_ext -e " . '\'exit($]<5.0);\''));
2348                         }
2349                 }
2350         }
2351
2352 sub dofile
2353         {
2354         my $f; my $p; my %m; my @a; my $k; my $ff;
2355         ($f,$p,%m)=@_;
2356
2357         open(IN,"<$f.in") || open(IN,"<$f") || die "unable to open $f:$!\n";
2358         @a=<IN>;
2359         close(IN);
2360         foreach $k (keys %m)
2361                 {
2362                 grep(/$k/ && ($_=sprintf($m{$k}."\n",$p)),@a);
2363                 }
2364         open(OUT,">$f.new") || die "unable to open $f.new:$!\n";
2365         print OUT @a;
2366         close(OUT);
2367         rename($f,"$f.bak") || die "unable to rename $f\n" if -e $f;
2368         rename("$f.new",$f) || die "unable to rename $f.new\n";
2369         }
2370
2371 sub print_table_entry
2372         {
2373         my $target = shift;
2374         my $type = shift;
2375
2376         # Don't print the templates
2377         return if $table{$target}->{template};
2378
2379         if ($type eq "TABLE") {
2380             print <<EOF
2381
2382 *** $target
2383 \$cc           = $table{$target}->{cc}
2384 \$cflags       = $table{$target}->{cflags}
2385 \$debug_cflags   = $table{$target}->{debug_cflags}
2386 \$release_cflags = $table{$target}->{release_cflags}
2387 \$unistd       = $table{$target}->{unistd}
2388 \$thread_cflag = $table{$target}->{thread_cflag}
2389 \$sys_id       = $table{$target}->{sys_id}
2390 \$lflags       = $table{$target}->{lflags}
2391 \$debug_lflags   = $table{$target}->{debug_lflags}
2392 \$release_lflags = $table{$target}->{release_lflags}
2393 \$bn_ops       = $table{$target}->{bn_ops}
2394 \$cpuid_obj    = $table{$target}->{cpuid_obj}
2395 \$bn_obj       = $table{$target}->{bn_obj}
2396 \$ec_obj       = $table{$target}->{ec_obj}
2397 \$des_obj      = $table{$target}->{des_obj}
2398 \$aes_obj      = $table{$target}->{aes_obj}
2399 \$bf_obj       = $table{$target}->{bf_obj}
2400 \$md5_obj      = $table{$target}->{md5_obj}
2401 \$sha1_obj     = $table{$target}->{sha1_obj}
2402 \$cast_obj     = $table{$target}->{cast_obj}
2403 \$rc4_obj      = $table{$target}->{rc4_obj}
2404 \$rmd160_obj   = $table{$target}->{rmd160_obj}
2405 \$rc5_obj      = $table{$target}->{rc5_obj}
2406 \$wp_obj       = $table{$target}->{wp_obj}
2407 \$cmll_obj     = $table{$target}->{cmll_obj}
2408 \$modes_obj    = $table{$target}->{modes_obj}
2409 \$engines_obj  = $table{$target}->{engines_obj}
2410 \$chacha_obj   = $table{$target}->{chacha_obj}
2411 \$poly1305_obj = $table{$target}->{poly1305_obj}
2412 \$perlasm_scheme = $table{$target}->{perlasm_scheme}
2413 \$dso_scheme   = $table{$target}->{dso_scheme}
2414 \$shared_target= $table{$target}->{shared_target}
2415 \$shared_cflag = $table{$target}->{shared_cflag}
2416 \$shared_ldflag = $table{$target}->{shared_ldflag}
2417 \$shared_extension = $table{$target}->{shared_extension}
2418 \$ranlib       = $table{$target}->{ranlib}
2419 \$arflags      = $table{$target}->{arflags}
2420 \$multilib     = $table{$target}->{multilib}
2421 EOF
2422         } elsif ($type eq "HASH") {
2423             my @sequence = (
2424                 "cc",
2425                 "cflags",
2426                 "debug_cflags",
2427                 "release_cflags",
2428                 "unistd",
2429                 "thread_cflag",
2430                 "sys_id",
2431                 "lflags",
2432                 "debug_lflags",
2433                 "release_lflags",
2434                 "bn_ops",
2435                 "cpuid_obj",
2436                 "bn_obj",
2437                 "ec_obj",
2438                 "des_obj",
2439                 "aes_obj",
2440                 "bf_obj",
2441                 "md5_obj",
2442                 "sha1_obj",
2443                 "cast_obj",
2444                 "rc4_obj",
2445                 "rmd160_obj",
2446                 "rc5_obj",
2447                 "wp_obj",
2448                 "cmll_obj",
2449                 "modes_obj",
2450                 "engines_obj",
2451                 "chacha_obj",
2452                 "poly1305_obj",
2453                 "perlasm_scheme",
2454                 "dso_scheme",
2455                 "shared_target",
2456                 "shared_cflag",
2457                 "shared_ldflag",
2458                 "shared_extension",
2459                 "ranlib",
2460                 "arflags",
2461                 "multilib",
2462                 );
2463             my $largest =
2464                 length((sort { length($a) <=> length($b) } @sequence)[-1]);
2465             print "    '$target' => {\n";
2466             foreach (@sequence) {
2467                 if ($table{$target}->{$_}) {
2468                     print "      '",$_,"'"," " x ($largest - length($_))," => '",$table{$target}->{$_},"',\n";
2469                 }
2470             }
2471             print "    },\n";
2472         }
2473         }
2474
2475 sub test_sanity
2476         {
2477         my $errorcnt = 0;
2478
2479         print STDERR "=" x 70, "\n";
2480         print STDERR "=== SANITY TESTING!\n";
2481         print STDERR "=== No configuration will be done, all other arguments will be ignored!\n";
2482         print STDERR "=" x 70, "\n";
2483
2484         foreach $target (sort keys %table)
2485                 {
2486                 my $pre_dso_scheme = "perlasm_scheme";
2487                 my $dso_scheme = "dso_scheme";
2488                 my $post_dso_scheme = "shared_target";
2489
2490
2491                 if ($table{$target}->{$pre_dso_scheme} =~ /^(beos|dl|dlfcn|win32|vms)$/)
2492                         {
2493                         $errorcnt++;
2494                         print STDERR "SANITY ERROR: '$target' has the dso_scheme values\n";
2495                         print STDERR "              in the previous field\n";
2496                         }
2497                 elsif ($table{$target}->{$post_dso_scheme} =~ /^(beos|dl|dlfcn|win32|vms)$/)
2498                         {
2499                         $errorcnt++;
2500                         print STDERR "SANITY ERROR: '$target' has the dso_scheme values\n";
2501                         print STDERR "              in the following field\n";
2502                         }
2503                 elsif ($table{$target}->{$dso_scheme} !~ /^(beos|dl|dlfcn|win32|vms|)$/)
2504                         {
2505                         $errorcnt++;
2506                         print STDERR "SANITY ERROR: '$target' has the dso_scheme field = ",$table{$target}->{$dso_scheme},"\n";
2507                         print STDERR "              valid values are 'beos', 'dl', 'dlfcn', 'win32' and 'vms'\n";
2508                         }
2509                 }
2510         print STDERR "No sanity errors detected!\n" if $errorcnt == 0;
2511         return $errorcnt;
2512         }