Configure

   1 :
   2 eval 'exec perl -S $0 ${1+"$@"}'
   3     if $running_under_some_shell;
   4 ##
   5 ##  Configure -- OpenSSL source tree configuration script
   6 ##
   7
   8 require 5.000;
   9 use strict;
  10
  11 # see INSTALL for instructions.
  12
  13 my $usage="Usage: Configure [no-<cipher> ...] [-Dxxx] [-lxxx] [-Lxxx] [-fxxx] [-Kxxx] [no-engine] [no-hw-xxx|no-hw] [[no-]threads] [[no-]shared] [[no-]zlib|zlib-dynamic] [no-asm] [no-dso] [no-krb5] [386] [[no-]fips] [debug] [--prefix=DIR] [--openssldir=OPENSSLDIR] [--with-xxx[=vvv]] [--test-sanity] os/compiler[:flags]\n";
  14
  15 # Options:
  16 #
  17 # --openssldir  install OpenSSL in OPENSSLDIR (Default: DIR/ssl if the
  18 #               --prefix option is given; /usr/local/ssl otherwise)
  19 # --prefix      prefix for the OpenSSL include, lib and bin directories
  20 #               (Default: the OPENSSLDIR directory)
  21 #
  22 # --install_prefix  Additional prefix for package builders (empty by
  23 #               default).  This needn't be set in advance, you can
  24 #               just as well use "make INSTALL_PREFIX=/whatever install".
  25 #
  26 # --with-krb5-dir  Declare where Kerberos 5 lives.  The libraries are expected
  27 #               to live in the subdirectory lib/ and the header files in
  28 #               include/.  A value is required.
  29 # --with-krb5-lib  Declare where the Kerberos 5 libraries live.  A value is
  30 #               required.
  31 #               (Default: KRB5_DIR/lib)
  32 # --with-krb5-include  Declare where the Kerberos 5 header files live.  A
  33 #               value is required.
  34 #               (Default: KRB5_DIR/include)
  35 # --with-krb5-flavor  Declare what flavor of Kerberos 5 is used.  Currently
  36 #               supported values are "MIT" and "Heimdal".  A value is required.
  37 #
  38 # --test-sanity Make a number of sanity checks on the data in this file.
  39 #               This is a debugging tool for OpenSSL developers.
  40 #
  41 # no-engine     do not compile in any engine code.
  42 # no-hw-xxx     do not compile support for specific crypto hardware.
  43 #               Generic OpenSSL-style methods relating to this support
  44 #               are always compiled but return NULL if the hardware
  45 #               support isn't compiled.
  46 # no-hw         do not compile support for any crypto hardware.
  47 # [no-]threads  [don't] try to create a library that is suitable for
  48 #               multithreaded applications (default is "threads" if we
  49 #               know how to do it)
  50 # [no-]shared   [don't] try to create shared libraries when supported.
  51 # no-asm        do not use assembler
  52 # no-dso        do not compile in any native shared-library methods. This
  53 #               will ensure that all methods just return NULL.
  54 # no-krb5       do not compile in any KRB5 library or code.
  55 # [no-]zlib     [don't] compile support for zlib compression.
  56 # zlib-dynamic  Like "zlib", but the zlib library is expected to be a shared
  57 #               library and will be loaded in run-time by the OpenSSL library.
  58 # 386           generate 80386 code
  59 # no-<cipher>   build without specified algorithm (rsa, idea, rc5, ...)
  60 # -<xxx> +<xxx> compiler options are passed through
  61 #
  62 # DEBUG_SAFESTACK use type-safe stacks to enforce type-safety on stack items
  63 #               provided to stack calls. Generates unique stack functions for
  64 #               each possible stack type.
  65 # DES_PTR       use pointer lookup vs arrays in the DES in crypto/des/des_locl.h
  66 # DES_RISC1     use different DES_ENCRYPT macro that helps reduce register
  67 #               dependancies but needs to more registers, good for RISC CPU's
  68 # DES_RISC2     A different RISC variant.
  69 # DES_UNROLL    unroll the inner DES loop, sometimes helps, somtimes hinders.
  70 # DES_INT       use 'int' instead of 'long' for DES_LONG in crypto/des/des.h
  71 #               This is used on the DEC Alpha where long is 8 bytes
  72 #               and int is 4
  73 # BN_LLONG      use the type 'long long' in crypto/bn/bn.h
  74 # MD2_CHAR      use 'char' instead of 'int' for MD2_INT in crypto/md2/md2.h
  75 # MD2_LONG      use 'long' instead of 'int' for MD2_INT in crypto/md2/md2.h
  76 # IDEA_SHORT    use 'short' instead of 'int' for IDEA_INT in crypto/idea/idea.h
  77 # IDEA_LONG     use 'long' instead of 'int' for IDEA_INT in crypto/idea/idea.h
  78 # RC2_SHORT     use 'short' instead of 'int' for RC2_INT in crypto/rc2/rc2.h
  79 # RC2_LONG      use 'long' instead of 'int' for RC2_INT in crypto/rc2/rc2.h
  80 # RC4_CHAR      use 'char' instead of 'int' for RC4_INT in crypto/rc4/rc4.h
  81 # RC4_LONG      use 'long' instead of 'int' for RC4_INT in crypto/rc4/rc4.h
  82 # RC4_INDEX     define RC4_INDEX in crypto/rc4/rc4_locl.h.  This turns on
  83 #               array lookups instead of pointer use.
  84 # RC4_CHUNK     enables code that handles data aligned at long (natural CPU
  85 #               word) boundary.
  86 # RC4_CHUNK_LL  enables code that handles data aligned at long long boundary
  87 #               (intended for 64-bit CPUs running 32-bit OS).
  88 # BF_PTR        use 'pointer arithmatic' for Blowfish (unsafe on Alpha).
  89 # BF_PTR2       intel specific version (generic version is more efficient).
  90 # MD5_ASM       use some extra md5 assember,
  91 # SHA1_ASM      use some extra sha1 assember, must define L_ENDIAN for x86
  92 # RMD160_ASM    use some extra ripemd160 assember,
  93
  94 my $x86_gcc_des="DES_PTR DES_RISC1 DES_UNROLL";
  95
  96 # MD2_CHAR slags pentium pros
  97 my $x86_gcc_opts="RC4_INDEX MD2_INT";
  98
  99 # MODIFY THESE PARAMETERS IF YOU ARE GOING TO USE THE 'util/speed.sh SCRIPT
 100 # Don't worry about these normally
 101
 102 my $tcc="cc";
 103 my $tflags="-fast -Xa";
 104 my $tbn_mul="";
 105 my $tlib="-lnsl -lsocket";
 106 #$bits1="SIXTEEN_BIT ";
 107 #$bits2="THIRTY_TWO_BIT ";
 108 my $bits1="THIRTY_TWO_BIT ";
 109 my $bits2="SIXTY_FOUR_BIT ";
 110
 111 my $x86_elf_asm="asm/bn86-elf.o asm/co86-elf.o:asm/dx86-elf.o asm/yx86-elf.o:asm/bx86-elf.o:asm/mx86-elf.o:asm/sx86-elf.o:asm/cx86-elf.o:asm/rx86-elf.o:asm/rm86-elf.o:asm/r586-elf.o";
 112 my $x86_out_asm="asm/bn86-out.o asm/co86-out.o:asm/dx86-out.o asm/yx86-out.o:asm/bx86-out.o:asm/mx86-out.o:asm/sx86-out.o:asm/cx86-out.o:asm/rx86-out.o:asm/rm86-out.o:asm/r586-out.o";
 113 my $x86_bsdi_asm="asm/bn86bsdi.o asm/co86bsdi.o:asm/dx86bsdi.o asm/yx86bsdi.o:asm/bx86bsdi.o:asm/mx86bsdi.o:asm/sx86bsdi.o:asm/cx86bsdi.o:asm/rx86bsdi.o:asm/rm86bsdi.o:asm/r586bsdi.o";
 114
 115 my $mips3_irix_asm="asm/mips3.o::::::::";
 116 # There seems to be boundary faults in asm/alpha.s.
 117 #my $alpha_asm="asm/alpha.o::::::::";
 118 my $alpha_asm="::::::::";
 119
 120 # -DB_ENDIAN slows things down on a sparc for md5, but helps sha1.
 121 # So the md5_locl.h file has an undef B_ENDIAN if sun is defined
 122
 123 #config-string  $cc : $cflags : $unistd : $thread_cflag : $sys_id : $lflags : $bn_ops : $bn_obj : $des_obj : $bf_obj : $md5_obj : $sha1_obj : $cast_obj : $rc4_obj : $rmd160_obj : $rc5_obj : $dso_scheme : $shared_target : $shared_cflag : $shared_ldflag : $shared_extension : $ranlib : $arflags
 124
 125 my %table=(
 126 # File 'TABLE' (created by 'make TABLE') contains the data from this list,
 127 # formatted for better readability.
 128
 129
 130 #"b",           "${tcc}:${tflags}::${tlib}:${bits1}:${tbn_mul}::",
 131 #"bl-4c-2c",    "${tcc}:${tflags}::${tlib}:${bits1}BN_LLONG RC4_CHAR MD2_CHAR:${tbn_mul}::",
 132 #"bl-4c-ri",    "${tcc}:${tflags}::${tlib}:${bits1}BN_LLONG RC4_CHAR RC4_INDEX:${tbn_mul}::",
 133 #"b2-is-ri-dp", "${tcc}:${tflags}::${tlib}:${bits2}IDEA_SHORT RC4_INDEX DES_PTR:${tbn_mul}::",
 134
 135 # Our development configs
 136 "purify",       "purify gcc:-g -DPURIFY -Wall::(unknown)::-lsocket -lnsl::::",
 137 "debug",        "gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DOPENSSL_NO_ASM -ggdb -g2 -Wformat -Wshadow -Wmissing-prototypes -Wmissing-declarations -Werror::(unknown)::-lefence::::",
 138 "debug-ben",    "gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DPEDANTIC -DDEBUG_SAFESTACK -O2 -Wall -Wshadow -Werror -pipe::(unknown)::::asm/bn86-elf.o asm/co86-elf.o",
 139 "debug-ben-openbsd","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DPEDANTIC -DDEBUG_SAFESTACK -DOPENSSL_OPENBSD_DEV_CRYPTO -DOPENSSL_NO_ASM -O2 -pedantic -Wall -Wshadow -Werror -pipe::(unknown)::::",
 140 "debug-ben-openbsd-debug","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DPEDANTIC -DDEBUG_SAFESTACK -DOPENSSL_OPENBSD_DEV_CRYPTO -DOPENSSL_NO_ASM -g3 -O2 -pedantic -Wall -Wshadow -Werror -pipe::(unknown)::::",
 141 "debug-ben-debug",      "gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DPEDANTIC -DDEBUG_SAFESTACK -g3 -O2 -Wall -Wshadow -Werror -pipe::(unknown)::::::",
 142 "debug-ben-strict",     "gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DCONST_STRICT -O2 -Wall -Wshadow -Werror -Wpointer-arith -Wcast-qual -Wwrite-strings -pipe::(unknown)::::::",
 143 "debug-ben-fips-debug","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DPEDANTIC -DDEBUG_SAFESTACK -DOPENSSL_FIPS -g3 -O2 -pedantic -Wall -Wshadow -Werror -pipe::(unknown)::::asm/bn86-elf.o asm/co86-elf.o",
 144 "debug-rse","cc:-DTERMIOS -DL_ENDIAN -pipe -O -g -ggdb3 -Wall::(unknown):::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}",
 145 "debug-bodo",   "gcc:-DL_ENDIAN -DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DBIO_PAIR_DEBUG -DPEDANTIC -g -m486 -pedantic -Wshadow -Wall::-D_REENTRANT:::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}",
 146 "debug-ulf",    "gcc:-DL_ENDIAN -DREF_CHECK -DCONF_DEBUG -DBN_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG_ALL -g -O2 -m486 -Wall -Werror -Wshadow -pipe::-D_REENTRANT:::${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}",
 147 "debug-steve",  "gcc:-DL_ENDIAN -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DDEBUG_SAFESTACK -DCRYPTO_MDEBUG_ALL -DPEDANTIC -g -mcpu=i486 -pedantic -Wno-long-long -Wall -Werror -Wshadow -pipe::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn",
 148 "debug-steve-linux-pseudo64",   "gcc:-DL_ENDIAN -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DDEBUG_SAFESTACK -DCRYPTO_MDEBUG_ALL -DOPENSSL_NO_ASM -g -mcpu=i486 -Wall -Werror -Wshadow -pipe::-D_REENTRANT::-rdynamic -ldl:SIXTY_FOUR_BIT::dlfcn",
 149 "debug-levitte-linux-elf","gcc:-DLEVITTE_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DL_ENDIAN -DTERMIO -D_POSIX_SOURCE -DPEDANTIC -ggdb -g3 -mcpu=i486 -pedantic -ansi -Wall -Wshadow -Wcast-align -Wmissing-prototypes -Wno-long-long -pipe::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 150 "debug-levitte-linux-noasm","gcc:-DLEVITTE_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DOPENSSL_NO_ASM -DL_ENDIAN -DTERMIO -D_POSIX_SOURCE -DPEDANTIC -ggdb -g3 -mcpu=i486 -pedantic -ansi -Wall -Wshadow -Wcast-align -Wmissing-prototypes -Wno-long-long -pipe::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}::::::::::dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 151 "debug-levitte-linux-elf-extreme","gcc:-DLEVITTE_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DL_ENDIAN -DTERMIO -D_POSIX_SOURCE -DPEDANTIC -ggdb -g3 -mcpu=i486 -pedantic -ansi -Wall -W -Wundef -Wshadow -Wcast-align -Wmissing-prototypes -Wconversion -Wno-long-long -pipe::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 152 "debug-levitte-linux-noasm-extreme","gcc:-DLEVITTE_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DOPENSSL_NO_ASM -DL_ENDIAN -DTERMIO -D_POSIX_SOURCE -DPEDANTIC -ggdb -g3 -mcpu=i486 -pedantic -ansi -Wall -W -Wundef -Wshadow -Wcast-align -Wmissing-prototypes -Wconversion -Wno-long-long -pipe::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}::::::::::dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 153 "dist",         "cc:-O::(unknown)::::::",
 154
 155 # Basic configs that should work on any (32 and less bit) box
 156 "gcc",          "gcc:-O3::(unknown):::BN_LLONG:::",
 157 "cc",           "cc:-O::(unknown)::::::",
 158
 159 ####VOS Configurations
 160 "vos-gcc","gcc:-b hppa1.1-stratus-vos -O3 -Wall -Wuninitialized -D_POSIX_C_SOURCE=200112L -D_BSD::(unknown):VOS:-Wl,-map:BN_LLONG:::::::::::::.so:",
 161 "debug-vos-gcc","gcc:-b hppa1.1-stratus-vos -O0 -g -Wall -D_POSIX_C_SOURCE=200112L -D_BSD -DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG::(unknown):VOS:-Wl,-map:BN_LLONG:::::::::::::.so:",
 162 "vos-vcc","vcc:-b i386-stratus-vos -O3 -D_POSIX_C_SOURCE=200112L -D_BSD::(unknown):VOS:-Wl,-map::::::::::::::.so:",
 163 "debug-vos-vcc","vcc:-b i386-stratus-vos -O0 -g -D_POSIX_C_SOURCE=200112L -D_BSD -DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG::(unknown):VOS:-Wl,-map::::::::::::::.so:",
 164
 165 #### Solaris x86 with GNU C setups
 166 # -DOPENSSL_NO_INLINE_ASM switches off inline assembler. We have to do it
 167 # here because whenever GNU C instantiates an assembler template it
 168 # surrounds it with #APP #NO_APP comment pair which (at least Solaris
 169 # 7_x86) /usr/ccs/bin/as fails to assemble with "Illegal mnemonic"
 170 # error message.
 171 "solaris-x86-gcc","gcc:-O3 -fomit-frame-pointer -m486 -Wall -DL_ENDIAN -DOPENSSL_NO_INLINE_ASM::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:solaris-shared:-fPIC:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 172 # -shared -static-libgcc might appear controversial, but modules taken
 173 # from static libgcc do not have relocations and linking them into our
 174 # shared objects doesn't have any negative side-effects. On the contrary,
 175 # doing so makes it possible to use gcc shared build with Sun C. Given
 176 # that gcc generates faster code [thanks to inline assembler], I would
 177 # actually recommend to consider using gcc shared build even with vendor
 178 # compiler:-)
 179 #                                               <appro@fy.chalmers.se>
 180 "solaris64-x86_64-gcc","gcc:-m64 -O3 -Wall -DL_ENDIAN -DMD32_REG_T=int::-D_REENTRANT::-lsocket -lnsl -ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK RC4_CHAR BF_PTR2 DES_INT DES_UNROLL:asm/x86_64-gcc.o::::::asm/rc4-x86_64.o:::dlfcn:solaris-shared:-fPIC:-m64 -shared -static-libgcc:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 181
 182 #### Solaris x86 with Sun C setups
 183 "solaris-x86-cc","cc:-fast -O -Xa::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_PTR DES_UNROLL BF_PTR::::::::::dlfcn:solaris-shared:-KPIC:-G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 184 "solaris64-x86_64-cc","cc:-fast -xarch=amd64 -xstrconst -Xa -DL_ENDIAN::-D_REENTRANT::-lsocket -lnsl -ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK RC4_CHAR BF_PTR2 DES_INT DES_UNROLL::::::::::dlfcn:solaris-shared:-KPIC:-xarch=amd64 -G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 185
 186 #### SPARC Solaris with GNU C setups
 187 "solaris-sparcv7-gcc","gcc:-O3 -fomit-frame-pointer -Wall -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR::::::::::dlfcn:solaris-shared:-fPIC:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 188 "solaris-sparcv8-gcc","gcc:-mv8 -O3 -fomit-frame-pointer -Wall -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:asm/sparcv8.o:::::::::dlfcn:solaris-shared:-fPIC:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 189 # -m32 should be safe to add as long as driver recognizes -mcpu=ultrasparc
 190 "solaris-sparcv9-gcc","gcc:-m32 -mcpu=ultrasparc -O3 -fomit-frame-pointer -Wall -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT:ULTRASPARC:-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:asm/sparcv8plus.o:::asm/md5-sparcv8plus.o::::::dlfcn:solaris-shared:-fPIC:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 191 "solaris64-sparcv9-gcc31","gcc:-mcpu=ultrasparc -m64 -O3 -fomit-frame-pointer -Wall -DB_ENDIAN::-D_REENTRANT:ULTRASPARC:-lsocket -lnsl -ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_PTR DES_RISC1 DES_UNROLL BF_PTR::::asm/md5-sparcv9.o::::::dlfcn:solaris-shared:-fPIC:-m64 -shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 192 # gcc pre-2.8 doesn't understand -mcpu=ultrasparc, so fall down to -mv8
 193 # but keep the assembler modules.
 194 "solaris-sparcv9-gcc27","gcc:-mv8 -O3 -fomit-frame-pointer -Wall -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT:ULTRASPARC:-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:asm/sparcv8plus-gcc27.o:::asm/md5-sparcv8plus-gcc27.o::::::dlfcn:solaris-shared:-fPIC:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 195 "solaris64-sparcv9-gcc","gcc:-m64 -mcpu=ultrasparc -O3 -Wall -DB_ENDIAN::-D_REENTRANT:ULTRASPARC:-lsocket -lnsl -ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_PTR DES_RISC1 DES_UNROLL BF_PTR::::asm/md5-sparcv9.o::::::dlfcn:solaris-shared:-fPIC:-m64 -shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 196
 197 ####
 198 "debug-solaris-sparcv8-gcc","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG_ALL -O -g -mv8 -Wall -DB_ENDIAN::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:asm/sparcv8.o:::::::::dlfcn:solaris-shared:-fPIC:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 199 "debug-solaris-sparcv9-gcc","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG_ALL -O -g -mcpu=ultrasparc -Wall -DB_ENDIAN::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:asm/sparcv8plus.o:::::::::dlfcn:solaris-shared:-fPIC:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 200
 201 #### SPARC Solaris with Sun C setups
 202 # DO NOT use /xO[34] on sparc with SC3.0.  It is broken, and will not pass the tests
 203 "solaris-sparc-sc3","cc:-fast -O -Xa -DB_ENDIAN::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_PTR DES_UNROLL BF_PTR::::::::::dlfcn:solaris-shared:-KPIC:-G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 204 # SC4.0 doesn't pass 'make test', upgrade to SC5.0 or SC4.2.
 205 # SC4.2 is ok, better than gcc even on bn as long as you tell it -xarch=v8
 206 # SC5.0 note: Compiler common patch 107357-01 or later is required!
 207 "solaris-sparcv7-cc","cc:-xO5 -xstrconst -xdepend -Xa -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_PTR DES_RISC1 DES_UNROLL BF_PTR::::::::::dlfcn:solaris-shared:-KPIC:-G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 208 "solaris-sparcv8-cc","cc:-xarch=v8 -xO5 -xstrconst -xdepend -Xa -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_PTR DES_RISC1 DES_UNROLL BF_PTR:asm/sparcv8.o:::::::::dlfcn:solaris-shared:-KPIC:-G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 209 "solaris-sparcv9-cc","cc:-xtarget=ultra -xarch=v8plus -xO5 -xstrconst -xdepend -Xa -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT:ULTRASPARC:-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK_LL DES_PTR DES_RISC1 DES_UNROLL BF_PTR:asm/sparcv8plus.o:::asm/md5-sparcv8plus.o::::::dlfcn:solaris-shared:-KPIC:-G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 210 "solaris64-sparcv9-cc","cc:-xtarget=ultra -xarch=v9 -xO5 -xstrconst -xdepend -Xa -DB_ENDIAN::-D_REENTRANT:ULTRASPARC:-lsocket -lnsl -ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_PTR DES_RISC1 DES_UNROLL BF_PTR::::asm/md5-sparcv9.o::::::dlfcn:solaris-shared:-KPIC:-xarch=v9 -G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):/usr/ccs/bin/ar rs",
 211 ####
 212 "debug-solaris-sparcv8-cc","cc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG_ALL -xarch=v8 -g -O -xstrconst -Xa -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_PTR DES_RISC1 DES_UNROLL BF_PTR:asm/sparcv8.o:::::::::dlfcn:solaris-shared:-KPIC:-G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 213 "debug-solaris-sparcv9-cc","cc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG_ALL -xtarget=ultra -xarch=v8plus -g -O -xstrconst -Xa -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT:ULTRASPARC:-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK_LL DES_PTR DES_RISC1 DES_UNROLL BF_PTR:asm/sparcv8plus.o:::asm/md5-sparcv8plus.o::::::dlfcn:solaris-shared:-KPIC:-G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 214
 215 #### SPARC Linux setups
 216 "linux-sparcv7","gcc:-DB_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall::-D_REENTRANT:::BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR::",
 217 # Ray Miller <ray.miller@computing-services.oxford.ac.uk> has patiently
 218 # assisted with debugging of following two configs.
 219 "linux-sparcv8","gcc:-mv8 -DB_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall -DBN_DIV2W::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:asm/sparcv8.o:::::::::dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 220 # it's a real mess with -mcpu=ultrasparc option under Linux, but
 221 # -Wa,-Av8plus should do the trick no matter what.
 222 "linux-sparcv9","gcc:-mcpu=ultrasparc -DB_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall -Wa,-Av8plus -DBN_DIV2W::-D_REENTRANT:ULTRASPARC:-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:asm/sparcv8plus.o:::asm/md5-sparcv8plus.o::::::dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 223 # GCC 3.1 is a requirement
 224 "linux64-sparcv9","gcc:-m64 -mcpu=ultrasparc -DB_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall::-D_REENTRANT:ULTRASPARC:-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR::::asm/md5-sparcv9.o::::::dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 225
 226 # Sunos configs, assuming sparc for the gcc one.
 227 ##"sunos-cc", "cc:-O4 -DNOPROTO -DNOCONST::(unknown):SUNOS::DES_UNROLL:::",
 228 "sunos-gcc","gcc:-O3 -mv8 -Dssize_t=int::(unknown):SUNOS::BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL DES_PTR DES_RISC1:::",
 229
 230 #### IRIX 5.x configs
 231 # -mips2 flag is added by ./config when appropriate.
 232 "irix-gcc","gcc:-O3 -DTERMIOS -DB_ENDIAN::(unknown):::BN_LLONG MD2_CHAR RC4_INDEX RC4_CHAR RC4_CHUNK DES_UNROLL DES_RISC2 DES_PTR BF_PTR::::::::::dlfcn:irix-shared:::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 233 "irix-cc", "cc:-O2 -use_readonly_const -DTERMIOS -DB_ENDIAN::(unknown):::BN_LLONG RC4_CHAR RC4_CHUNK DES_PTR DES_RISC2 DES_UNROLL BF_PTR::::::::::dlfcn:irix-shared:::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 234 #### IRIX 6.x configs
 235 # Only N32 and N64 ABIs are supported. If you need O32 ABI build, invoke
 236 # './Configure irix-cc -o32' manually.
 237 # -mips4 flag is added by ./config when appropriate.
 238 "irix-mips3-gcc","gcc:-mabi=n32 -mmips-as -O3 -DTERMIOS -DB_ENDIAN -DBN_DIV3W::-D_SGI_MP_SOURCE:::MD2_CHAR RC4_INDEX RC4_CHAR RC4_CHUNK_LL DES_UNROLL DES_RISC2 DES_PTR BF_PTR SIXTY_FOUR_BIT:${mips3_irix_asm}:dlfcn:irix-shared::-mabi=n32:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 239 "irix-mips3-cc", "cc:-n32 -mips3 -O2 -use_readonly_const -DTERMIOS -DB_ENDIAN -DBN_DIV3W::-D_SGI_MP_SOURCE:::DES_PTR RC4_CHAR RC4_CHUNK_LL DES_RISC2 DES_UNROLL BF_PTR SIXTY_FOUR_BIT:${mips3_irix_asm}:dlfcn:irix-shared::-n32:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 240 # N64 ABI builds.
 241 "irix64-mips4-gcc","gcc:-mabi=64 -mips4 -mmips-as -O3 -DTERMIOS -DB_ENDIAN -DBN_DIV3W::-D_SGI_MP_SOURCE:::RC4_CHAR RC4_CHUNK DES_RISC2 DES_UNROLL SIXTY_FOUR_BIT_LONG:${mips3_irix_asm}:dlfcn:irix-shared::-mabi=64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 242 "irix64-mips4-cc", "cc:-64 -mips4 -O2 -use_readonly_const -DTERMIOS -DB_ENDIAN -DBN_DIV3W::-D_SGI_MP_SOURCE:::RC4_CHAR RC4_CHUNK DES_RISC2 DES_UNROLL SIXTY_FOUR_BIT_LONG:${mips3_irix_asm}:dlfcn:irix-shared::-64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 243
 244 #### Unified HP-UX ANSI C configs.
 245 # Special notes:
 246 # - Originally we were optimizing at +O4 level. It should be noted
 247 #   that the only difference between +O3 and +O4 is global inter-
 248 #   procedural analysis. As it has to be performed during the link
 249 #   stage the compiler leaves behind certain pseudo-code in lib*.a
 250 #   which might be release or even patch level specific. Generating
 251 #   the machine code for and analyzing the *whole* program appears
 252 #   to be *extremely* memory demanding while the performance gain is
 253 #   actually questionable. The situation is intensified by the default
 254 #   HP-UX data set size limit (infamous 'maxdsiz' tunable) of 64MB
 255 #   which is way too low for +O4. In other words, doesn't +O3 make
 256 #   more sense?
 257 # - Keep in mind that the HP compiler by default generates code
 258 #   suitable for execution on the host you're currently compiling at.
 259 #   If the toolkit is ment to be used on various PA-RISC processors
 260 #   consider './config +DAportable'.
 261 # - +DD64 is chosen in favour of +DA2.0W because it's ment to be
 262 #   compatible with *future* releases.
 263 # - If you run ./Configure hpux-parisc-[g]cc manually don't forget to
 264 #   pass -D_REENTRANT on HP-UX 10 and later.
 265 # - -DMD32_XARRAY triggers workaround for compiler bug we ran into in
 266 #   32-bit message digests. (For the moment of this writing) HP C
 267 #   doesn't seem to "digest" too many local variables (they make "him"
 268 #   chew forever:-). For more details look-up MD32_XARRAY comment in
 269 #   crypto/sha/sha_lcl.h.
 270 #                                       <appro@fy.chalmers.se>
 271 #
 272 #!#"hpux-parisc-cc","cc:-Ae +O3 +ESlit -z -DB_ENDIAN -DBN_DIV2W -DMD32_XARRAY::::-ldld:BN_LLONG DES_PTR DES_UNROLL DES_RISC1::::::::::dl",
 273 # Since there is mention of this in shlib/hpux10-cc.sh
 274 "hpux-parisc-cc-o4","cc:-Ae +O4 +ESlit -z -DB_ENDIAN -DBN_DIV2W -DMD32_XARRAY::::-Wl,+cdp,../%3a,+cdp,./%3a,+s,+b,\$(INSTALLTOP)/lib -ldld:BN_LLONG DES_PTR DES_UNROLL DES_RISC1::::::::::dl:hpux-shared:+Z:-b:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 275 "hpux-parisc-gcc","gcc:-O3 -DB_ENDIAN -DBN_DIV2W::::-Wl,+cdp,../%3a,+cdp,./%3a,+s,+b,\$(INSTALLTOP)/lib -ldld:BN_LLONG DES_PTR DES_UNROLL DES_RISC1::::::::::dl:hpux-shared:-fPIC:-shared:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 276 "hpux64-parisc-cc","cc:-Ae +DD64 +O3 +ESlit -z -DB_ENDIAN -DMD32_XARRAY::-D_REENTRANT::-Wl,+s,+b,\$(INSTALLTOP)/lib -ldl:SIXTY_FOUR_BIT_LONG MD2_CHAR RC4_INDEX RC4_CHAR DES_UNROLL DES_RISC1 DES_INT::::::::::dlfcn:hpux-shared:+Z:+DD64 -b:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 277 # 64bit PARISC for GCC without optimization, which seems to make problems.
 278 # Submitted by <ross.alexander@uk.neceur.com>
 279 "hpux64-parisc-gcc","gcc:-DB_ENDIAN -DMD32_XARRAY::-D_REENTRANT::-Wl,+s,+b,\$(INSTALLTOP)/lib -ldl:SIXTY_FOUR_BIT_LONG MD2_CHAR RC4_INDEX RC4_CHAR DES_UNROLL DES_RISC1 DES_INT::::::::::dlfcn:hpux-shared:-fpic:-shared:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 280 "hpux64-parisc2-gcc","gcc:-O3 -DB_ENDIAN -DMD32_XARRAY::-D_REENTRANT::-Wl,+s,+b,\$(INSTALLTOP)/lib -ldl:SIXTY_FOUR_BIT_LONG MD2_CHAR RC4_INDEX RC4_CHAR DES_UNROLL DES_RISC1 DES_INT:asm/pa-risc2W.o:::::::::dlfcn:hpux-shared:-fPIC:-shared:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 281
 282 # IA-64 targets
 283 "hpux-ia64-cc","cc:-Ae +DD32 +O3 +Olit=all -z -DB_ENDIAN::-D_REENTRANT::-Wl,+s,+b,\$(INSTALLTOP)/lib -ldl:SIXTY_FOUR_BIT MD2_CHAR RC4_INDEX RC4_CHAR DES_UNROLL DES_RISC1 DES_INT:asm/ia64-cpp.o::::asm/sha1-ia64.o::asm/rc4-ia64.o:::dlfcn:hpux-shared:+Z:-b:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 284 # Frank Geurts <frank.geurts@nl.abnamro.com> has patiently assisted with
 285 # with debugging of the following config.
 286 "hpux64-ia64-cc","cc:-Ae +DD64 +O3 +Olit=all -z -DB_ENDIAN::-D_REENTRANT::-Wl,+s,+b,\$(INSTALLTOP)/lib -ldl:SIXTY_FOUR_BIT_LONG MD2_CHAR RC4_INDEX RC4_CHAR DES_UNROLL DES_RISC1 DES_INT:asm/ia64-cpp.o::::asm/sha1-ia64.o::asm/rc4-ia64.o:::dlfcn:hpux-shared:+Z:+DD64 -b:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 287
 288 # More attempts at unified 10.X and 11.X targets for HP C compiler.
 289 #
 290 # Chris Ruemmler <ruemmler@cup.hp.com>
 291 # Kevin Steves <ks@hp.se>
 292 "hpux-parisc-cc","cc:+O3 +Optrs_strongly_typed -Ae +ESlit -DB_ENDIAN -DBN_DIV2W -DMD32_XARRAY::-D_REENTRANT::-Wl,+cdp,../%3a,+cdp,./%3a,+s,+b,\$(INSTALLTOP)/lib -ldld:MD2_CHAR RC4_INDEX RC4_CHAR DES_UNROLL DES_RISC1 DES_INT::::::::::dl:hpux-shared:+Z:-b:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 293 "hpux-parisc2-cc","cc:+DA2.0 +DS2.0 +O3 +Optrs_strongly_typed -Ae +ESlit -DB_ENDIAN -DMD32_XARRAY::-D_REENTRANT::-Wl,+cdp,../%3a,+cdp,./%3a,+s,+b,\$(INSTALLTOP)/lib -ldld:SIXTY_FOUR_BIT MD2_CHAR RC4_INDEX RC4_CHAR DES_UNROLL DES_RISC1 DES_INT:asm/pa-risc2.o:::::::::dl:hpux-shared:+Z:-b:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 294 "hpux64-parisc2-cc","cc:+DD64 +O3 +Optrs_strongly_typed -Ae +ESlit -DB_ENDIAN -DMD32_XARRAY::-D_REENTRANT::-Wl,+s,+b,\$(INSTALLTOP)/lib -ldl:SIXTY_FOUR_BIT_LONG MD2_CHAR RC4_INDEX RC4_CHAR DES_UNROLL DES_RISC1 DES_INT:asm/pa-risc2W.o:::::::::dlfcn:hpux-shared:+Z:+DD64 -b:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 295 # Isn't the line below meaningless? HP-UX cc optimizes for host by default.
 296 # hpux-parisc1_0-cc with +DAportable flag would make more sense. <appro>
 297 "hpux-parisc1_1-cc","cc:+DA1.1 +DS1.1 +O3 +Optrs_strongly_typed -Ae +ESlit -DB_ENDIAN -DMD32_XARRAY::-D_REENTRANT::-Wl,+cdp,../%3a,+cdp,./%3a,+s,+b,\$(INSTALLTOP)/lib -ldld:MD2_CHAR RC4_INDEX RC4_CHAR DES_UNROLL DES_RISC1 DES_INT::::::::::dl:hpux-shared:+Z:-b:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 298
 299 # HPUX 9.X config.
 300 # Don't use the bundled cc.  It is broken.  Use HP ANSI C if possible, or
 301 # egcs.  gcc 2.8.1 is also broken.
 302
 303 "hpux-cc",      "cc:-DB_ENDIAN -DBN_DIV2W -DMD32_XARRAY -Ae +ESlit +O3 -z::(unknown)::-Wl,+s,+b,\$(INSTALLTOP)/lib -ldld:BN_LLONG DES_PTR DES_UNROLL DES_RISC1::::::::::dl:hpux-shared:+Z:-b:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 304 # If hpux-cc fails (e.g. during "make test"), try the next one; otherwise,
 305 # please report your OS and compiler version to the openssl-bugs@openssl.org
 306 # mailing list.
 307 "hpux-brokencc",        "cc:-DB_ENDIAN -DBN_DIV2W -Ae +ESlit +O2 -z::(unknown)::-Wl,+s,+b,\$(INSTALLTOP)/lib -ldld:DES_PTR DES_UNROLL DES_RISC1::::::::::dl:hpux-shared:+Z:-b:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 308
 309 "hpux-gcc",     "gcc:-DB_ENDIAN -DBN_DIV2W -O3::(unknown)::-Wl,+s,+b,\$(INSTALLTOP)/lib -ldld:BN_LLONG DES_PTR DES_UNROLL DES_RISC1::::::::::dl:hpux-shared:-fPIC:-shared:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 310 # If hpux-gcc fails, try this one:
 311 "hpux-brokengcc",       "gcc:-DB_ENDIAN -DBN_DIV2W -O3::(unknown)::-Wl,+s,+b,\$(INSTALLTOP)/lib -ldld:DES_PTR DES_UNROLL DES_RISC1::::::::::dl:hpux-shared:-fPIC:-shared:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 312
 313 # HPUX 9.X on Motorola 68k platforms with gcc
 314 "hpux-m68k-gcc",  "gcc:-DB_ENDIAN -DBN_DIV2W -O3::(unknown):::BN_LLONG DES_PTR DES_UNROLL:::::::::::::",
 315
 316 # HPUX 10.X config.  Supports threads.
 317 "hpux10-cc",    "cc:-DB_ENDIAN -DBN_DIV2W -DMD32_XARRAY -Ae +ESlit +O3 -z::-D_REENTRANT::-Wl,+s,+b,\$(INSTALLTOP)/lib -ldld:BN_LLONG DES_PTR DES_UNROLL DES_RISC1::::::::::dl:hpux-shared:+Z:-b:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 318 # If hpux10-cc fails, try this one (if still fails, try deleting BN_LLONG):
 319 "hpux10-brokencc",      "cc:-DB_ENDIAN -DBN_DIV2W -Ae +ESlit +O2 -z::-D_REENTRANT::-Wl,+s,+b,\$(INSTALLTOP)/lib -ldld:BN_LLONG DES_PTR DES_UNROLL DES_RISC1::::::::::dl:hpux-shared:+Z:-b:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 320
 321 "hpux10-gcc",   "gcc:-DB_ENDIAN -DBN_DIV2W -O3::-D_REENTRANT::-Wl,+s,+b,\$(INSTALLTOP)/lib -ldld:BN_LLONG DES_PTR DES_UNROLL DES_RISC1::::::::::dl:hpux-shared:-fPIC:-shared:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 322 # If hpux10-gcc fails, try this one:
 323 "hpux10-brokengcc",     "gcc:-DB_ENDIAN -DBN_DIV2W -O3::-D_REENTRANT::-Wl,+s,+b,\$(INSTALLTOP)/lib -ldld:DES_PTR DES_UNROLL DES_RISC1::::::::::dl:hpux-shared:-fPIC:-shared:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 324
 325 # HPUX 11.X from www.globus.org.
 326 # Only works on PA-RISC 2.0 cpus, and not optimized.  Why?
 327 #"hpux11-32bit-cc","cc:+DA2.0 -DB_ENDIAN -D_HPUX_SOURCE -Aa -Ae +ESlit::-D_REENTRANT:::DES_PTR DES_UNROLL DES_RISC1:::",
 328 #"hpux11-64bit-cc","cc:+DA2.0W -g -D_HPUX_SOURCE -Aa -Ae +ESlit::-D_REENTRANT:::SIXTY_FOUR_BIT_LONG MD2_CHAR RC4_INDEX RC4_CHAR DES_UNROLL DES_RISC1 DES_INT :::",
 329 # Use unified settings above instead.
 330
 331 #### HP MPE/iX http://jazz.external.hp.com/src/openssl/
 332 "MPE/iX-gcc", "gcc:-D_ENDIAN -DBN_DIV2W -O3 -D_POSIX_SOURCE -D_SOCKET_SOURCE -I/SYSLOG/PUB::(unknown):MPE:-L/SYSLOG/PUB -lsyslog -lsocket -lcurses:BN_LLONG DES_PTR DES_UNROLL DES_RISC1:::",
 333
 334 #### PARISC Linux setups
 335 "linux-parisc","gcc:-DB_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall -DBN_DIV2W::-D_REENTRANT:::BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR::",
 336
 337 # Dec Alpha, OSF/1 - the alpha164-cc is historical, for the conversion
 338 # from the older DEC C Compiler to the newer compiler.  It's now the
 339 # same as the preferred entry, alpha-cc.  If you are still using the
 340 # older compiler (you're at 3.x or earlier, or perhaps very early 4.x)
 341 # you should use `alphaold-cc'.
 342 #
 343 #       "What's in a name? That which we call a rose
 344 #        By any other word would smell as sweet."
 345 #
 346 # - William Shakespeare, "Romeo & Juliet", Act II, scene II.
 347 #
 348 # For OSF/1 3.2b and earlier, and Digital UNIX 3.2c - 3.2g, with the
 349 # vendor compiler, use alphaold-cc.
 350 # For Digital UNIX 4.0 - 4.0e, with the vendor compiler, use alpha-cc.
 351 # For Tru64 UNIX 4.f - current, with the vendor compiler, use alpha-cc.
 352 #
 353 # There's also an alternate target available (which `config' will never
 354 # select) called alpha-cc-rpath.  This target builds an RPATH into the
 355 # shared libraries, which is very convenient on Tru64 since binaries
 356 # linked against that shared library will automatically inherit that RPATH,
 357 # and hence know where to look for the openssl libraries, even if they're in
 358 # an odd place.
 359 #
 360 # For gcc, the following gave a %50 speedup on a 164 over the 'DES_INT' version
 361 #
 362 "alpha-gcc","gcc:-O3::(unknown):::SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_UNROLL DES_RISC1:${alpha_asm}:dlfcn:alpha-osf1-shared:::.so",
 363 "alphaold-cc", "cc:-std1 -tune host -O4 -readonly_strings::(unknown):::SIXTY_FOUR_BIT_LONG RC4_CHUNK:${alpha_asm}:dlfcn:alpha-osf1-shared:::.so",
 364 "alpha164-cc", "cc:-std1 -tune host -fast -readonly_strings::-pthread:::SIXTY_FOUR_BIT_LONG RC4_CHUNK:${alpha_asm}:dlfcn:tru64-shared:::.so",
 365 "alpha-cc", "cc:-std1 -tune host -fast -readonly_strings::-pthread:::SIXTY_FOUR_BIT_LONG RC4_CHUNK:${alpha_asm}:dlfcn:tru64-shared:::.so",
 366 "alpha-cc-rpath", "cc:-std1 -tune host -fast -readonly_strings::-pthread:::SIXTY_FOUR_BIT_LONG RC4_CHUNK:${alpha_asm}:dlfcn:tru64-shared-rpath:::.so",
 367 #
 368 # This probably belongs in a different section.
 369 #
 370 "FreeBSD-alpha","gcc:-DTERMIOS -O -fomit-frame-pointer::(unknown):::SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_PTR DES_RISC2::::::::::dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 371
 372 #### Alpha Linux with GNU C and Compaq C setups
 373 # Special notes:
 374 # - linux-alpha+bwx-gcc is ment to be used from ./config only. If you
 375 #   ought to run './Configure linux-alpha+bwx-gcc' manually, do
 376 #   complement the command line with -mcpu=ev56, -mcpu=ev6 or whatever
 377 #   which is appropriate.
 378 # - If you use ccc keep in mind that -fast implies -arch host and the
 379 #   compiler is free to issue instructions which gonna make elder CPU
 380 #   choke. If you wish to build "blended" toolkit, add -arch generic
 381 #   *after* -fast and invoke './Configure linux-alpha-ccc' manually.
 382 #
 383 #                                       <appro@fy.chalmers.se>
 384 #
 385 "linux-alpha-gcc","gcc:-O3 -DL_ENDIAN -DTERMIO::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_RISC1 DES_UNROLL:${alpha_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 386 "linux-alpha+bwx-gcc","gcc:-O3 -DL_ENDIAN -DTERMIO::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_RISC1 DES_UNROLL:${alpha_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 387 "linux-alpha-ccc","ccc:-fast -readonly_strings -DL_ENDIAN -DTERMIO::-D_REENTRANT:::SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_PTR DES_RISC1 DES_UNROLL:${alpha_asm}",
 388 "linux-alpha+bwx-ccc","ccc:-fast -readonly_strings -DL_ENDIAN -DTERMIO::-D_REENTRANT:::SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_PTR DES_RISC1 DES_UNROLL:${alpha_asm}",
 389
 390 # assembler versions -- currently defunct:
 391 ##"OpenBSD-alpha","gcc:-DTERMIOS -O3 -fomit-frame-pointer:::(unknown):SIXTY_FOUR_BIT_LONG DES_INT DES_PTR DES_RISC2:${alpha_asm}",
 392
 393 # The intel boxes :-), It would be worth seeing if bsdi-gcc can use the
 394 # bn86-elf.o file file since it is hand tweaked assembler.
 395 "linux-elf",    "gcc:-DL_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -m486 -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 396 "linux-pentium",        "gcc:-DL_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -mcpu=pentium -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 397 "linux-ppro",   "gcc:-DL_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -mcpu=pentiumpro -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 398 "linux-k6",     "gcc:-DL_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -mcpu=k6 -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 399 "debug-linux-pentium","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DL_ENDIAN -DTERMIO -g -mcpu=pentium -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn",
 400 "debug-linux-ppro","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DL_ENDIAN -DTERMIO -g -mcpu=pentiumpro -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn",
 401 "debug-linux-elf","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DL_ENDIAN -DTERMIO -g -m486 -Wall::-D_REENTRANT::-lefence -ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 402 "debug-linux-elf-noefence","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DL_ENDIAN -DTERMIO -g -m486 -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 403 "linux-aout",   "gcc:-DL_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -m486 -Wall::(unknown):::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_out_asm}",
 404 "linux-mipsel",   "gcc:-DL_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall::-D_REENTRANT::-ldl:BN_LLONG RC2_CHAR RC4_INDEX DES_INT DES_UNROLL DES_RISC2::::::::::dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 405 "linux-mips",   "gcc:-DB_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall::-D_REENTRANT::-ldl:BN_LLONG RC2_CHAR RC4_INDEX DES_INT DES_UNROLL DES_RISC2::::::::::dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 406 "linux-ppc",    "gcc:-DB_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_RISC1 DES_UNROLL:asm/linux_ppc32.o:::::::::dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 407 # -bpowerpc64-linux is transient option, -m64 should be the one to use...
 408 "linux-ppc64",  "gcc:-bpowerpc64-linux -DB_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_RISC1 DES_UNROLL:asm/linux_ppc64.o:::::::::dlfcn:linux-shared:-fPIC:-bpowerpc64-linux:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 409 "linux-m68k",   "gcc:-DB_ENDIAN -DTERMIO -O2 -fomit-frame-pointer -Wall::-D_REENTRANT:::BN_LLONG::",
 410 "linux-s390",   "gcc:-DB_ENDIAN -DTERMIO -DNO_ASM -O3 -fomit-frame-pointer -Wall::-D_REENTRANT::-ldl:BN_LLONG::::::::::dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 411 "linux-s390x",  "gcc:-DB_ENDIAN -DTERMIO -DNO_ASM -O3 -fomit-frame-pointer -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG::::::::::dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 412 "linux-ia64",   "gcc:-DL_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK RC4_CHAR:asm/ia64.o::::asm/sha1-ia64.o::asm/rc4-ia64.o:::dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 413 "linux-ia64-ecc",   "ecc:-DL_ENDIAN -DTERMIO -O2 -Wall -no_cpprt::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK RC4_CHAR:asm/ia64.o::::asm/sha1-ia64.o::asm/rc4-ia64.o:::dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 414 "linux-x86_64", "gcc:-m64 -DL_ENDIAN -DTERMIO -O3 -Wall -DMD32_REG_T=int::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK RC4_CHAR BF_PTR2 DES_INT DES_UNROLL:asm/x86_64-gcc.o::::::asm/rc4-x86_64.o:::dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 415 "NetBSD-sparc", "gcc:-DTERMIOS -O3 -fomit-frame-pointer -mv8 -Wall -DB_ENDIAN::(unknown):::BN_LLONG MD2_CHAR RC4_INDEX DES_UNROLL::::::::::dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 416 "NetBSD-m68",   "gcc:-DTERMIOS -O3 -fomit-frame-pointer -Wall -DB_ENDIAN::(unknown):::BN_LLONG MD2_CHAR RC4_INDEX DES_UNROLL::::::::::dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 417 "NetBSD-x86",   "gcc:-DTERMIOS -O3 -fomit-frame-pointer -m486 -Wall::(unknown):::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}::::::::::dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 418 "FreeBSD-elf",  "gcc:-DTERMIOS -DL_ENDIAN -fomit-frame-pointer -O3 -m486 -Wall::-pthread -D_REENTRANT -D_THREAD_SAFE -D_THREADSAFE:::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 419 "FreeBSD-sparc64","gcc:-DB_ENDIAN -DTERMIOS -O3 -fomit-frame-pointer::-pthread -D_REENTRANT -D_THREAD_SAFE -D_THREADSAFE:::SIXTY_FOUR_BIT_LONG DES_INT DES_PTR DES_RISC2 BF_PTR::::::::::dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 420 "FreeBSD-ia64","gcc:-DL_ENDIAN -DTERMIOS -O -fomit-frame-pointer::(unknown):::SIXTY_FOUR_BIT_LONG RC4_CHUNK RC4_CHAR:asm/ia64-cpp.o:::::::::dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 421 "FreeBSD",      "gcc:-DTERMIOS -DL_ENDIAN -fomit-frame-pointer -O3 -m486 -Wall::(unknown):::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_out_asm}",
 422 "bsdi-gcc",     "gcc:-O3 -ffast-math -DL_ENDIAN -DPERL5 -m486::(unknown):::RSA_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_bsdi_asm}",
 423 "bsdi-elf-gcc",     "gcc:-DPERL5 -DL_ENDIAN -fomit-frame-pointer -O3 -m486 -Wall::(unknown)::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 424 "nextstep",     "cc:-O -Wall:<libc.h>:(unknown):::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:::",
 425 "nextstep3.3",  "cc:-O3 -Wall:<libc.h>:(unknown):::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:::",
 426
 427 # NCR MP-RAS UNIX ver 02.03.01
 428 "ncr-scde","cc:-O6 -Xa -Hoff=BEHAVED -686 -Hwide -Hiw::(unknown)::-lsocket -lnsl -lc89:${x86_gcc_des} ${x86_gcc_opts}:::",
 429
 430 # QNX 4
 431 "qnx4", "cc:-DL_ENDIAN -DTERMIO::(unknown):::${x86_gcc_des} ${x86_gcc_opts}:",
 432
 433 # QNX 6
 434 "qnx6", "cc:-DL_ENDIAN -DTERMIOS::(unknown)::-lsocket:${x86_gcc_des} ${x86_gcc_opts}:",
 435
 436 # Linux on ARM
 437 # ARM comes in both little- and big-endian flavors. The following line is
 438 # endian neutral, but ./config is free to throw in -D[BL]_ENDIAN...
 439 "linux-elf-arm","gcc:-DTERMIO -O3 -fomit-frame-pointer -Wall::-D_REENTRANT::-ldl:BN_LLONG::::::::::dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 440
 441 # SCO/Caldera targets.
 442 #
 443 # Originally we had like unixware-*, unixware-*-pentium, unixware-*-p6, etc.
 444 # Now we only have blended unixware-* as it's the only one used by ./config.
 445 # If you want to optimize for particular microarchitecture, bypass ./config
 446 # and './Configure unixware-7 -Kpentium_pro' or whatever appropriate.
 447 # Note that not all targets include assembler support. Mostly because of
 448 # lack of motivation to support out-of-date platforms with out-of-date
 449 # compiler drivers and assemblers. Tim Rice <tim@multitalents.net> has
 450 # patiently assisted to debug most of it.
 451 #
 452 # UnixWare 2.0x fails destest with -O
 453 "unixware-2.0","cc:-DFILIO_H -DNO_STRINGS_H::-Kthread::-lsocket -lnsl -lresolv -lx:${x86_gcc_des} ${x86_gcc_opts}:::",
 454 "unixware-2.1","cc:-O -DFILIO_H::-Kthread::-lsocket -lnsl -lresolv -lx:${x86_gcc_des} ${x86_gcc_opts}:::",
 455 "unixware-7","cc:-O -DFILIO_H -Kalloca::-Kthread::-lsocket -lnsl:BN_LLONG MD2_CHAR RC4_INDEX ${x86_gcc_des}:${x86_elf_asm}:dlfcn:svr5-shared:-Kpic::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 456 "unixware-7-gcc","gcc:-DL_ENDIAN -DFILIO_H -O3 -fomit-frame-pointer -m486 -Wall::-D_REENTRANT::-lsocket -lnsl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:gnu-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 457 "OpenUNIX-8","cc:-O -DFILIO_H -Kalloca::-Kthread::-lsocket -lnsl:BN_LLONG MD2_CHAR RC4_INDEX ${x86_gcc_des}:${x86_elf_asm}:dlfcn:svr5-shared:-Kpic::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 458 "OpenUNIX-8-gcc","gcc:-O -DFILIO_H -fomit-frame-pointer::-pthread::-lsocket -lnsl:BN_LLONG MD2_CHAR RC4_INDEX ${x86_gcc_des}:${x86_elf_asm}:dlfcn:svr5-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 459 "sco3-gcc",  "gcc:-O3 -fomit-frame-pointer -Dssize_t=int -DNO_SYS_UN_H::(unknown)::-lsocket:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:::", # the SCO assembler doesn't seem to like our assembler files ...
 460 # SCO 5 - Ben Laurie <ben@algroup.co.uk> says the -O breaks the SCO cc.
 461 "sco5-cc",  "cc:-belf::(unknown)::-lsocket -lnsl:${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:svr3-shared:-Kpic::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 462 "sco5-gcc",  "gcc:-O3 -fomit-frame-pointer::(unknown)::-lsocket -lnsl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:svr3-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 463
 464
 465 # IBM's AIX.
 466 "aix3-cc",    "cc:-O -DB_ENDIAN -qmaxmem=16384::(unknown):AIX::BN_LLONG RC4_CHAR:::",
 467 "aix-gcc",    "gcc:-O3 -DB_ENDIAN::-D_THREAD_SAFE:AIX::BN_LLONG RC4_CHAR:asm/aix_ppc32.o:::::::::dlfcn:",
 468 "aix-cc",     "cc:-q32 -O -DB_ENDIAN -qmaxmem=16384::-qthreaded:AIX::BN_LLONG RC4_CHAR:asm/aix_ppc32.o:::::::::dlfcn:aix-shared::-q32:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)::-X 32",
 469 "aix64-cc",   "cc:-q64 -O -DB_ENDIAN -qmaxmem=16384::-qthreaded:AIX::SIXTY_FOUR_BIT_LONG RC4_CHAR:asm/aix_ppc64.o:::::::::dlfcn:aix-shared::-q64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)::-X 64",
 470
 471 #
 472 # Cray T90 and similar (SDSC)
 473 # It's Big-endian, but the algorithms work properly when B_ENDIAN is NOT
 474 # defined.  The T90 ints and longs are 8 bytes long, and apparently the
 475 # B_ENDIAN code assumes 4 byte ints.  Fortunately, the non-B_ENDIAN and
 476 # non L_ENDIAN code aligns the bytes in each word correctly.
 477 #
 478 # The BIT_FIELD_LIMITS define is to avoid two fatal compiler errors:
 479 #'Taking the address of a bit field is not allowed. '
 480 #'An expression with bit field exists as the operand of "sizeof" '
 481 # (written by Wayne Schroeder <schroede@SDSC.EDU>)
 482 #
 483 # j90 is considered the base machine type for unicos machines,
 484 # so this configuration is now called "cray-j90" ...
 485 "cray-j90", "cc: -DBIT_FIELD_LIMITS -DTERMIOS::(unknown):CRAY::SIXTY_FOUR_BIT_LONG DES_INT:::",
 486
 487 #
 488 # Cray T3E (Research Center Juelich, beckman@acl.lanl.gov)
 489 #
 490 # The BIT_FIELD_LIMITS define was written for the C90 (it seems).  I added
 491 # another use.  Basically, the problem is that the T3E uses some bit fields
 492 # for some st_addr stuff, and then sizeof and address-of fails
 493 # I could not use the ams/alpha.o option because the Cray assembler, 'cam'
 494 # did not like it.
 495 "cray-t3e", "cc: -DBIT_FIELD_LIMITS -DTERMIOS::(unknown):CRAY::SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT:::",
 496
 497 # DGUX, 88100.
 498 "dgux-R3-gcc",  "gcc:-O3 -fomit-frame-pointer::(unknown):::RC4_INDEX DES_UNROLL:::",
 499 "dgux-R4-gcc",  "gcc:-O3 -fomit-frame-pointer::(unknown)::-lnsl -lsocket:RC4_INDEX DES_UNROLL:::",
 500 "dgux-R4-x86-gcc",      "gcc:-O3 -fomit-frame-pointer -DL_ENDIAN::(unknown)::-lnsl -lsocket:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}",
 501
 502 # Sinix/ReliantUNIX RM400
 503 # NOTE: The CDS++ Compiler up to V2.0Bsomething has the IRIX_CC_BUG optimizer problem. Better use -g  */
 504 "ReliantUNIX","cc:-KPIC -g -DTERMIOS -DB_ENDIAN::-Kthread:SNI:-lsocket -lnsl -lc -L/usr/ucblib -lucb:BN_LLONG DES_PTR DES_RISC2 DES_UNROLL BF_PTR::::::::::dlfcn:reliantunix-shared:::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 505 "SINIX","cc:-O::(unknown):SNI:-lsocket -lnsl -lc -L/usr/ucblib -lucb:RC4_INDEX RC4_CHAR:::",
 506 "SINIX-N","/usr/ucb/cc:-O2 -misaligned::(unknown)::-lucb:RC4_INDEX RC4_CHAR:::",
 507
 508 # SIEMENS BS2000/OSD: an EBCDIC-based mainframe
 509 "BS2000-OSD","c89:-O -XLLML -XLLMK -XL -DB_ENDIAN -DTERMIOS -DCHARSET_EBCDIC::(unknown)::-lsocket -lnsl:THIRTY_TWO_BIT DES_PTR DES_UNROLL MD2_CHAR RC4_INDEX RC4_CHAR BF_PTR:::",
 510
 511 # OS/390 Unix an EBCDIC-based Unix system on IBM mainframe
 512 # You need to compile using the c89.sh wrapper in the tools directory, because the
 513 # IBM compiler does not like the -L switch after any object modules.
 514 #
 515 "OS390-Unix","c89.sh:-O -DB_ENDIAN -DCHARSET_EBCDIC -DNO_SYS_PARAM_H  -D_ALL_SOURCE::(unknown):::THIRTY_TWO_BIT DES_PTR DES_UNROLL MD2_CHAR RC4_INDEX RC4_CHAR BF_PTR:::",
 516
 517 # Windows NT, Microsoft Visual C++ 4.0
 518
 519 "VC-NT","cl::::WINNT::BN_LLONG RC4_INDEX EXPORT_VAR_AS_FN ${x86_gcc_opts}::::::::::win32",
 520 "VC-CE","cl::::WINCE::BN_LLONG RC4_INDEX EXPORT_VAR_AS_FN ${x86_gcc_opts}::::::::::win32",
 521 "VC-WIN32","cl::::WIN32::BN_LLONG RC4_INDEX EXPORT_VAR_AS_FN ${x86_gcc_opts}::::::::::win32",
 522 "VC-WIN16","cl:::(unknown):WIN16::MD2_CHAR DES_UNROLL DES_PTR RC4_INDEX THIRTY_TWO_BIT:::",
 523 "VC-W31-16","cl:::(unknown):WIN16::BN_LLONG MD2_CHAR DES_UNROLL DES_PTR RC4_INDEX SIXTEEN_BIT:::",
 524 "VC-W31-32","cl::::WIN16::BN_LLONG MD2_CHAR DES_UNROLL DES_PTR RC4_INDEX THIRTY_TWO_BIT:::",
 525 "VC-MSDOS","cl:::(unknown):MSDOS::BN_LLONG MD2_CHAR DES_UNROLL DES_PTR RC4_INDEX SIXTEEN_BIT:::",
 526
 527 # Borland C++ 4.5
 528 "BC-32","bcc32::::WIN32::BN_LLONG DES_PTR RC4_INDEX EXPORT_VAR_AS_FN::::::::::win32",
 529 "BC-16","bcc:::(unknown):WIN16::BN_LLONG DES_PTR RC4_INDEX SIXTEEN_BIT:::",
 530
 531 # MinGW
 532 "mingw", "gcc:-DL_ENDIAN -fomit-frame-pointer -O3 -march=i486 -mno-cygwin -Wall -D_WIN32_WINNT=0x333:::MINGW32:-lwsock32 -lgdi32:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts} EXPORT_VAR_AS_FN:${x86_out_asm}:win32:cygwin-shared:-D_WINDLL:-mno-cygwin:.dll.a",
 533
 534 # UWIN
 535 "UWIN", "cc:-DTERMIOS -DL_ENDIAN -O -Wall:::UWIN::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}::::::::::win32",
 536
 537 # Cygwin
 538 "Cygwin-pre1.3", "gcc:-DTERMIOS -DL_ENDIAN -fomit-frame-pointer -O3 -m486 -Wall::(unknown):CYGWIN32::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}::::::::::win32",
 539 "Cygwin", "gcc:-DTERMIOS -DL_ENDIAN -fomit-frame-pointer -O3 -march=i486 -Wall:::CYGWIN32::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_out_asm}:dlfcn:cygwin-shared:-D_WINDLL::.dll.a",
 540
 541 # DJGPP
 542 "DJGPP", "gcc:-I/dev/env/WATT_ROOT/inc -DTERMIOS -DL_ENDIAN -fomit-frame-pointer -O2 -Wall:::MSDOS:-L/dev/env/WATT_ROOT/lib -lwatt:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}::::::::::",
 543
 544 # Ultrix from Bernhard Simon <simon@zid.tuwien.ac.at>
 545 "ultrix-cc","cc:-std1 -O -Olimit 2500 -DL_ENDIAN::(unknown):::::::",
 546 "ultrix-gcc","gcc:-O3 -DL_ENDIAN::(unknown):::::::",
 547 # K&R C is no longer supported; you need gcc on old Ultrix installations
 548 ##"ultrix","cc:-O2 -DNOPROTO -DNOCONST -DL_ENDIAN::(unknown):::::::",
 549
 550 # Some OpenBSD from Bob Beck <beck@obtuse.com>
 551 "OpenBSD",              "gcc:-DTERMIOS -O3 -fomit-frame-pointer::(unknown):::BN_LLONG RC2_CHAR RC4_INDEX DES_INT DES_UNROLL::::::::::dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 552 "OpenBSD-alpha",        "gcc:-DTERMIOS -O3 -fomit-frame-pointer::(unknown):::SIXTY_FOUR_BIT_LONG DES_INT DES_PTR DES_RISC2::::::::::dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 553 "OpenBSD-i386", "gcc:-DL_ENDIAN -DTERMIOS -O3 -fomit-frame-pointer::(unknown):::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_out_asm}:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 554 "OpenBSD-m68k",         "gcc:-DTERMIOS -O3 -fomit-frame-pointer::(unknown):::BN_LLONG RC2_CHAR RC4_INDEX DES_INT DES_UNROLL::::::::::dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 555 "OpenBSD-m88k",         "gcc:-DTERMIOS -O3 -fomit-frame-pointer::(unknown):::BN_LLONG RC2_CHAR RC4_INDEX DES_INT DES_UNROLL::::::::::dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 556 "OpenBSD-mips",         "gcc:-DL_ENDIAN -DTERMIOS -O3 -fomit-frame-pointer::(unknown):::BN_LLONG RC2_CHAR RC4_INDEX DES_INT DES_UNROLL DES_RISC2::::::::::dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 557 "OpenBSD-powerpc",      "gcc:-DTERMIOS -O3 -fomit-frame-pointer::(unknown):::BN_LLONG RC2_CHAR RC4_INDEX DES_INT DES_UNROLL::::::::::dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 558 "OpenBSD-sparc",        "gcc:-DTERMIOS -O3 -fomit-frame-pointer::(unknown):::BN_LLONG RC2_CHAR RC4_INDEX DES_INT DES_UNROLL::::::::::dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 559 "OpenBSD-sparc64",      "gcc:-DB_ENDIAN -DTERMIOS -O3 -fomit-frame-pointer::(unknown):::SIXTY_FOUR_BIT_LONG DES_INT DES_PTR DES_RISC2 BF_PTR::::::::::dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 560 "OpenBSD-vax",          "gcc:-DL_ENDIAN -DTERMIOS -O3 -fomit-frame-pointer::(unknown):::BN_LLONG RC2_CHAR RC4_INDEX DES_INT DES_UNROLL::::::::::dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 561 "OpenBSD-hppa",         "gcc:-DTERMIOS -O3 -fomit-frame-pointer::(unknown):::BN_LLONG RC2_CHAR RC4_INDEX DES_UNROLL::::::::::dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 562
 563 ##### MacOS X (a.k.a. Rhapsody or Darwin) setup
 564 "rhapsody-ppc-cc","cc:-O3 -DB_ENDIAN::(unknown):MACOSX_RHAPSODY::BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:::",
 565 "darwin-ppc-cc","cc:-O3 -fomit-frame-pointer -DB_ENDIAN::-D_REENTRANT:MACOSX::BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:asm/osx_ppc32.o:::::::::dlfcn:darwin-shared:-fPIC -fno-common::.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
 566 "darwin-i386-cc","cc:-O3 -fomit-frame-pointer -fno-common::-D_REENTRANT:MACOSX::BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:::::::::::darwin-shared:-fPIC::.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
 567
 568 ##### A/UX
 569 "aux3-gcc","gcc:-O2 -DTERMIO::(unknown):AUX:-lbsd:RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:::",
 570
 571 ##### Sony NEWS-OS 4.x
 572 "newsos4-gcc","gcc:-O -DB_ENDIAN::(unknown):NEWS4:-lmld -liberty:BN_LLONG RC4_CHAR RC4_CHUNK DES_PTR DES_RISC1 DES_UNROLL BF_PTR::::",
 573
 574 ##### GNU Hurd
 575 "hurd-x86",  "gcc:-DL_ENDIAN -DTERMIOS -O3 -fomit-frame-pointer -m486 -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC",
 576
 577 ##### OS/2 EMX
 578 "OS2-EMX", "gcc::::::::",
 579
 580 ##### VxWorks for various targets
 581 "vxworks-ppc405","ccppc:-g -msoft-float -mlongcall -DCPU=PPC405 -I\$(WIND_BASE)/target/h:::VXWORKS:-r:::::",
 582 "vxworks-ppc750","ccppc:-ansi -nostdinc -DPPC750 -D_REENTRANT -fvolatile -fno-builtin -fno-for-scope -fsigned-char -Wall -msoft-float -mlongcall -DCPU=PPC604 -I\$(WIND_BASE)/target/h \$(DEBUG_FLAG):::VXWORKS:-r:::::",
 583 "vxworks-ppc750-debug","ccppc:-ansi -nostdinc -DPPC750 -D_REENTRANT -fvolatile -fno-builtin -fno-for-scope -fsigned-char -Wall -msoft-float -mlongcall -DCPU=PPC604 -I\$(WIND_BASE)/target/h -DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DPEDANTIC -DDEBUG_SAFESTACK -DDEBUG -g:::VXWORKS:-r:::::",
 584 "vxworks-ppc860","ccppc:-nostdinc -msoft-float -DCPU=PPC860 -DNO_STRINGS_H -I\$(WIND_BASE)/target/h:::VXWORKS:-r:::::",
 585 "vxworks-mipsle","ccmips:-B\$(WIND_BASE)/host/\$(WIND_HOST_TYPE)/lib/gcc-lib/ -DL_ENDIAN -EL -Wl,-EL -mips2 -mno-branch-likely -G 0 -fno-builtin -msoft-float -DCPU=MIPS32 -DMIPSEL -DNO_STRINGS_H -I\$(WIND_BASE)/target/h:::VXWORKS:-r::::::::::::::::ranlibmips:",
 586
 587 ##### Compaq Non-Stop Kernel (Tandem)
 588 "tandem-c89","c89:-Ww -D__TANDEM -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1 -D_TANDEM_SOURCE -DB_ENDIAN::(unknown):::THIRTY_TWO_BIT:::",
 589
 590 );
 591
 592 my @WinTargets=qw(VC-NT VC-CE VC-WIN32 VC-WIN16 VC-W31-16 VC-W31-32 VC-MSDOS
 593         BC-32 BC-16 Mingw32 OS2-EMX);
 594
 595 my $idx = 0;
 596 my $idx_cc = $idx++;
 597 my $idx_cflags = $idx++;
 598 my $idx_unistd = $idx++;
 599 my $idx_thread_cflag = $idx++;
 600 my $idx_sys_id = $idx++;
 601 my $idx_lflags = $idx++;
 602 my $idx_bn_ops = $idx++;
 603 my $idx_bn_obj = $idx++;
 604 my $idx_des_obj = $idx++;
 605 my $idx_bf_obj = $idx++;
 606 my $idx_md5_obj = $idx++;
 607 my $idx_sha1_obj = $idx++;
 608 my $idx_cast_obj = $idx++;
 609 my $idx_rc4_obj = $idx++;
 610 my $idx_rmd160_obj = $idx++;
 611 my $idx_rc5_obj = $idx++;
 612 my $idx_dso_scheme = $idx++;
 613 my $idx_shared_target = $idx++;
 614 my $idx_shared_cflag = $idx++;
 615 my $idx_shared_ldflag = $idx++;
 616 my $idx_shared_extension = $idx++;
 617 my $idx_ranlib = $idx++;
 618 my $idx_arflags = $idx++;
 619
 620 my $prefix="";
 621 my $openssldir="";
 622 my $exe_ext="";
 623 my $install_prefix="";
 624 my $fipslibdir="/usr/local/ssl/lib";
 625 my $no_threads=0;
 626 my $no_shared=1;
 627 my $zlib=0;
 628 my $no_krb5=0;
 629 my $threads=0;
 630 my $no_asm=0;
 631 my $no_dso=0;
 632 my @skip=();
 633 my $Makefile="Makefile";
 634 my $des_locl="crypto/des/des_locl.h";
 635 my $des ="crypto/des/des.h";
 636 my $bn  ="crypto/bn/bn.h";
 637 my $md2 ="crypto/md2/md2.h";
 638 my $rc4 ="crypto/rc4/rc4.h";
 639 my $rc4_locl="crypto/rc4/rc4_locl.h";
 640 my $idea        ="crypto/idea/idea.h";
 641 my $rc2 ="crypto/rc2/rc2.h";
 642 my $bf  ="crypto/bf/bf_locl.h";
 643 my $bn_asm      ="bn_asm.o";
 644 my $des_enc="des_enc.o fcrypt_b.o";
 645 my $fips_des_enc="fips_des_enc.o";
 646 my $bf_enc      ="bf_enc.o";
 647 my $cast_enc="c_enc.o";
 648 my $rc4_enc="rc4_enc.o";
 649 my $rc5_enc="rc5_enc.o";
 650 my $md5_obj="";
 651 my $sha1_obj="";
 652 my $rmd160_obj="";
 653 my $processor="";
 654 my $default_ranlib;
 655 my $perl;
 656 my $fips=0;
 657 my $debug=0;
 658
 659 my $no_ssl2=0;
 660 my $no_ssl3=0;
 661 my $no_tls1=0;
 662 my $no_md5=0;
 663 my $no_sha=0;
 664 my $no_rsa=0;
 665 my $no_dh=0;
 666
 667 &usage if ($#ARGV < 0);
 668
 669 my $flags;
 670 my $depflags;
 671 my $openssl_algorithm_defines;
 672 my $openssl_thread_defines;
 673 my $openssl_sys_defines="";
 674 my $openssl_other_defines;
 675 my $libs;
 676 my $libkrb5="";
 677 my $target;
 678 my $options;
 679 my $symlink;
 680 my $make_depend=0;
 681 my %withargs=();
 682
 683 my @argvcopy=@ARGV;
 684 my $argvstring="";
 685 my $argv_unprocessed=1;
 686
 687 while($argv_unprocessed)
 688         {
 689         $flags="";
 690         $depflags="";
 691         $openssl_algorithm_defines="";
 692         $openssl_thread_defines="";
 693         $openssl_sys_defines="";
 694         $openssl_other_defines="";
 695         $libs="";
 696         $target="";
 697         $options="";
 698         $symlink=1;
 699
 700         $argv_unprocessed=0;
 701         $argvstring=join(' ',@argvcopy);
 702
 703 PROCESS_ARGS:
 704         foreach (@argvcopy)
 705                 {
 706                 s /^-no-/no-/; # some people just can't read the instructions
 707                 if (/^--test-sanity$/)
 708                         {
 709                         exit(&test_sanity());
 710                         }
 711                 elsif (/^no-asm$/)
 712                         {
 713                         $no_asm=1;
 714                         $flags .= "-DOPENSSL_NO_ASM ";
 715                         $openssl_other_defines .= "#define OPENSSL_NO_ASM\n";
 716                         }
 717                 elsif (/^no-err$/)
 718                         {
 719                         $flags .= "-DOPENSSL_NO_ERR ";
 720                         $openssl_other_defines .= "#define OPENSSL_NO_ERR\n";
 721                         }
 722                 elsif (/^no-hw-(.+)$/)
 723                         {
 724                         my $hw=$1;
 725                         $hw =~ tr/[a-z]/[A-Z]/;
 726                         $flags .= "-DOPENSSL_NO_HW_$hw ";
 727                         $openssl_other_defines .= "#define OPENSSL_NO_HW_$hw\n";
 728                         }
 729                 elsif (/^no-hw$/)
 730                         {
 731                         $flags .= "-DOPENSSL_NO_HW ";
 732                         $openssl_other_defines .= "#define OPENSSL_NO_HW\n";
 733                         }
 734                 elsif (/^no-dso$/)
 735                         { $no_dso=1; }
 736                 elsif (/^no-krb5$/)
 737                         { $no_krb5=1; }
 738                 elsif (/^no-threads$/)
 739                         { $no_threads=1; }
 740                 elsif (/^threads$/)
 741                         { $threads=1; }
 742                 elsif (/^no-shared$/)
 743                         { $no_shared=1; }
 744                 elsif (/^shared$/ || /^-shared$/ || /^--shared$/)
 745                         { $no_shared=0; }
 746                 elsif (/^no-zlib$/)
 747                         { $zlib=0; }
 748                 elsif (/^zlib$/)
 749                         { $zlib=1; }
 750                 elsif (/^zlib-dynamic$/)
 751                         { $zlib=2; }
 752                 elsif (/^no-symlinks$/)
 753                         { $symlink=0; }
 754                 elsif (/^no-ssl$/)
 755                         { $no_ssl2 = $no_ssl3 = 1; }
 756                 elsif (/^no-ssl2$/)
 757                         { $no_ssl2 = 1; }
 758                 elsif (/^no-ssl3$/)
 759                         { $no_ssl3 = 1; }
 760                 elsif (/^no-tls1?$/)
 761                         { $no_tls1 = 1; }
 762                 elsif (/^no-fips$/)
 763                         { $fips = 0; }
 764                 elsif (/^no-(.+)$/)
 765                         {
 766                         my $algo=$1;
 767                         push @skip,$algo;
 768                         $algo =~ tr/[a-z]/[A-Z]/;
 769                         $flags .= "-DOPENSSL_NO_$algo ";
 770                         $depflags .= "-DOPENSSL_NO_$algo ";
 771                         $openssl_algorithm_defines .= "#define OPENSSL_NO_$algo\n";
 772                         if ($algo eq "RIJNDAEL")
 773                                 {
 774                                 push @skip, "aes";
 775                                 $flags .= "-DOPENSSL_NO_AES ";
 776                                 $depflags .= "-DOPENSSL_NO_AES ";
 777                                 $openssl_algorithm_defines .= "#define OPENSSL_NO_AES\n";
 778                                 }
 779                         if ($algo eq "DES")
 780                                 {
 781                                 push @skip, "mdc2";
 782                                 $options .= " no-mdc2";
 783                                 $flags .= "-DOPENSSL_NO_MDC2 ";
 784                                 $depflags .= "-DOPENSSL_NO_MDC2 ";
 785                                 $openssl_algorithm_defines .= "#define OPENSSL_NO_MDC2\n";
 786                                 }
 787                         if ($algo eq "MD5")
 788                                 {
 789                                 $no_md5 = 1;
 790                                 }
 791                         if ($algo eq "SHA")
 792                                 {
 793                                 $no_sha = 1;
 794                                 }
 795                         if ($algo eq "RSA")
 796                                 {
 797                                 $no_rsa = 1;
 798                                 }
 799                         if ($algo eq "DH")
 800                                 {
 801                                 $no_dh = 1;
 802                                 }
 803                         }
 804                 elsif (/^reconfigure/ || /^reconf/)
 805                         {
 806                         if (open(IN,"<$Makefile"))
 807                                 {
 808                                 while (<IN>)
 809                                         {
 810                                         chomp;
 811                                         if (/^CONFIGURE_ARGS=(.*)/)
 812                                                 {
 813                                                 $argvstring=$1;
 814                                                 @argvcopy=split(' ',$argvstring);
 815                                                 die "Incorrect data to reconfigure, please do a normal configuration\n"
 816                                                         if (grep(/^reconf/,@argvcopy));
 817                                                 print "Reconfiguring with: $argvstring\n";
 818                                                 $argv_unprocessed=1;
 819                                                 close(IN);
 820                                                 last PROCESS_ARGS;
 821                                                 }
 822                                         }
 823                                 close(IN);
 824                                 }
 825                         die "Insufficient data to reconfigure, please do a normal configuration\n";
 826                         }
 827                 elsif (/^386$/)
 828                         { $processor=386; }
 829                 elsif (/^fips$/)
 830                         {
 831                         $fips=1;
 832                         }
 833                 elsif (/^debug$/)
 834                         {
 835                         $debug=1;
 836                         }
 837                 elsif (/^rsaref$/)
 838                         {
 839                         # No RSAref support any more since it's not needed.
 840                         # The check for the option is there so scripts aren't
 841                         # broken
 842                         }
 843                 elsif (/^[-+]/)
 844                         {
 845                         if (/^-[lL](.*)$/)
 846                                 {
 847                                 $libs.=$_." ";
 848                                 }
 849                         elsif (/^-[^-]/ or /^\+/)
 850                                 {
 851                                 $flags.=$_." ";
 852                                 }
 853                         elsif (/^--prefix=(.*)$/)
 854                                 {
 855                                 $prefix=$1;
 856                                 }
 857                         elsif (/^--openssldir=(.*)$/)
 858                                 {
 859                                 $openssldir=$1;
 860                                 }
 861                         elsif (/^--install.prefix=(.*)$/)
 862                                 {
 863                                 $install_prefix=$1;
 864                                 }
 865                         elsif (/^--with-krb5-(dir|lib|include|flavor)=(.*)$/)
 866                                 {
 867                                 $withargs{"krb5-".$1}=$2;
 868                                 }
 869                         elsif (/^--with-zlib-lib=(.*)$/)
 870                                 {
 871                                 $withargs{"zlib-lib"}=$1;
 872                                 }
 873                         elsif (/^--with-fipslibdir=(.*)$/)
 874                                 {
 875                                 $fipslibdir="$1";
 876                                 }
 877                         elsif (/^--with-zlib-include=(.*)$/)
 878                                 {
 879                                 $withargs{"zlib-include"}="-I$1";
 880                                 }
 881                         else
 882                                 {
 883                                 print STDERR $usage;
 884                                 exit(1);
 885                                 }
 886                         }
 887                 elsif ($_ =~ /^([^:]+):(.+)$/)
 888                         {
 889                         eval "\$table{\$1} = \"$2\""; # allow $xxx constructs in the string
 890                         $target=$1;
 891                         }
 892                 else
 893                         {
 894                         die "target already defined - $target (offending arg: $_)\n" if ($target ne "");
 895                         $target=$_;
 896                         }
 897                 unless ($_ eq $target) {
 898                         if ($options eq "") {
 899                                 $options = $_;
 900                         } else {
 901                                 $options .= " ".$_;
 902                         }
 903                 }
 904         }
 905 }
 906
 907 $no_ssl3=1 if ($no_md5 || $no_sha);
 908 $no_ssl3=1 if ($no_rsa && $no_dh);
 909
 910 $no_ssl2=1 if ($no_md5);
 911 $no_ssl2=1 if ($no_rsa);
 912
 913 $no_tls1=1 if ($no_md5 || $no_sha);
 914 $no_tls1=1 if ($no_dh);
 915
 916 if ($no_ssl2)
 917         {
 918         push @skip,"SSL2";
 919         $flags .= "-DOPENSSL_NO_SSL2 ";
 920         $depflags .= "-DOPENSSL_NO_SSL2 ";
 921         $openssl_algorithm_defines .= "#define OPENSSL_NO_SSL2\n";
 922         }
 923
 924 if ($no_ssl3)
 925         {
 926         push @skip,"SSL3";
 927         $flags .= "-DOPENSSL_NO_SSL3 ";
 928         $depflags .= "-DOPENSSL_NO_SSL3 ";
 929         $openssl_algorithm_defines .= "#define OPENSSL_NO_SSL3\n";
 930         }
 931
 932 if ($no_tls1)
 933         {
 934         push @skip,"TLS1";
 935         $flags .= "-DOPENSSL_NO_TLS1 ";
 936         $depflags .= "-DOPENSSL_NO_TLS1 ";
 937         $openssl_algorithm_defines .= "#define OPENSSL_NO_TLS1\n";
 938         }
 939
 940 if ($target eq "TABLE") {
 941         foreach $target (sort keys %table) {
 942                 print_table_entry($target);
 943         }
 944         exit 0;
 945 }
 946
 947 if ($target eq "LIST") {
 948         foreach (sort keys %table) {
 949                 print;
 950                 print "\n";
 951         }
 952         exit 0;
 953 }
 954
 955 if ($target =~ m/^CygWin32(-.*)$/) {
 956         $target = "Cygwin".$1;
 957 }
 958
 959 print "Configuring for $target\n";
 960
 961 &usage if (!defined($table{$target}));
 962
 963 my $IsWindows=scalar grep /^$target$/,@WinTargets;
 964
 965 $exe_ext=".exe" if ($target eq "Cygwin" || $target eq "DJGPP" || $target eq "mingw");
 966 $exe_ext=".pm" if ($target eq "vos-gcc" or $target eq "debug-vos-gcc" or $target eq "vos-vcc" or $target eq "debug-vos-vcc");
 967 $openssldir="/usr/local/ssl" if ($openssldir eq "" and $prefix eq "");
 968 $prefix=$openssldir if $prefix eq "";
 969
 970 $default_ranlib= &which("ranlib") or $default_ranlib="true";
 971 $perl=$ENV{'PERL'} or $perl=&which("perl5") or $perl=&which("perl")
 972   or $perl="perl";
 973
 974 chop $openssldir if $openssldir =~ /\/$/;
 975 chop $prefix if $prefix =~ /\/$/;
 976
 977 $openssldir=$prefix . "/ssl" if $openssldir eq "";
 978 $openssldir=$prefix . "/" . $openssldir if $openssldir !~ /(^\/|^[a-zA-Z]:[\\\/])/;
 979
 980 if ($fips && ! -f "$fipslibdir/fipscanister.o")
 981         {
 982         my $fipswinerr = "";
 983         $fipswinerr = <<EOF if $IsWindows;
 984  Ensure that the correct path to the FIPS module directory
 985 has been given to the --with-fipslibdir option.
 986 EOF
 987         print STDERR <<EOF;
 988 The file fipscanister.o could not be located. Please build and install the
 989 FIPS module using the instructions in the user guide before compiling OpenSSL
 990 in FIPS mode.$fipswinerr
 991 EOF
 992         exit 1;
 993         }
 994
 995
 996 print "IsWindows=$IsWindows\n";
 997
 998 my @fields = split(/\s*:\s*/,$table{$target} . ":" x 30 , -1);
 999 for (@fields) { s/%([\dA-Fa-f]{2})/chr(hex($1))/eg; }
1000 my $cc = $fields[$idx_cc];
1001 my $cflags = $fields[$idx_cflags];
1002 my $unistd = $fields[$idx_unistd];
1003 my $thread_cflag = $fields[$idx_thread_cflag];
1004 my $sys_id = $fields[$idx_sys_id];
1005 my $lflags = $fields[$idx_lflags];
1006 my $bn_ops = $fields[$idx_bn_ops];
1007 my $bn_obj = $fields[$idx_bn_obj];
1008 my $des_obj = $fields[$idx_des_obj];
1009 my $bf_obj = $fields[$idx_bf_obj];
1010 $md5_obj = $fields[$idx_md5_obj];
1011 $sha1_obj = $fields[$idx_sha1_obj];
1012 my $cast_obj = $fields[$idx_cast_obj];
1013 my $rc4_obj = $fields[$idx_rc4_obj];
1014 $rmd160_obj = $fields[$idx_rmd160_obj];
1015 my $rc5_obj = $fields[$idx_rc5_obj];
1016 my $dso_scheme = $fields[$idx_dso_scheme];
1017 my $shared_target = $fields[$idx_shared_target];
1018 my $shared_cflag = $fields[$idx_shared_cflag];
1019 my $shared_ldflag = $fields[$idx_shared_ldflag];
1020 my $shared_extension = $fields[$idx_shared_extension];
1021 my $ranlib = $fields[$idx_ranlib];
1022 my $arflags = $fields[$idx_arflags];
1023
1024 my $no_shared_warn=0;
1025
1026 $cflags="$flags$cflags" if ($flags ne "");
1027
1028 # Kerberos settings.  The flavor must be provided from outside, either through
1029 # the script "config" or manually.
1030 if ($no_krb5
1031         || !defined($withargs{"krb5-flavor"})
1032         || $withargs{"krb5-flavor"} eq "")
1033         {
1034         $cflags="-DOPENSSL_NO_KRB5 $cflags";
1035         $options.=" no-krb5" unless $no_krb5;
1036         $openssl_algorithm_defines .= "#define OPENSSL_NO_KRB5\n";
1037         }
1038 else
1039         {
1040         my ($lresolv, $lpath, $lext);
1041         if ($withargs{"krb5-flavor"} =~ /^[Hh]eimdal$/)
1042                 {
1043                 die "Sorry, Heimdal is currently not supported\n";
1044                 }
1045         ##### HACK to force use of Heimdal.
1046         ##### WARNING: Since we don't really have adequate support for Heimdal,
1047         #####          using this will break the build.  You'll have to make
1048         #####          changes to the source, and if you do, please send
1049         #####          patches to openssl-dev@openssl.org
1050         if ($withargs{"krb5-flavor"} =~ /^force-[Hh]eimdal$/)
1051                 {
1052                 warn "Heimdal isn't really supported.  Your build WILL break\n";
1053                 warn "If you fix the problems, please send a patch to openssl-dev\@openssl.org\n";
1054                 $withargs{"krb5-dir"} = "/usr/heimdal"
1055                         if $withargs{"krb5-dir"} eq "";
1056                 $withargs{"krb5-lib"} = "-L".$withargs{"krb5-dir"}.
1057                         "/lib -lgssapi -lkrb5 -lcom_err"
1058                         if $withargs{"krb5-lib"} eq "" && !$IsWindows;
1059                 $cflags="-DKRB5_HEIMDAL $cflags";
1060                 }
1061         if ($withargs{"krb5-flavor"} =~ /^[Mm][Ii][Tt]/)
1062                 {
1063                 $withargs{"krb5-dir"} = "/usr/kerberos"
1064                         if $withargs{"krb5-dir"} eq "";
1065                 $withargs{"krb5-lib"} = "-L".$withargs{"krb5-dir"}.
1066                         "/lib -lgssapi_krb5 -lkrb5 -lcom_err -lk5crypto"
1067                         if $withargs{"krb5-lib"} eq "" && !$IsWindows;
1068                 $cflags="-DKRB5_MIT $cflags";
1069                 $withargs{"krb5-flavor"} =~ s/^[Mm][Ii][Tt][._-]*//;
1070                 if ($withargs{"krb5-flavor"} =~ /^1[._-]*[01]/)
1071                         {
1072                         $cflags="-DKRB5_MIT_OLD11 $cflags";
1073                         }
1074                 }
1075         LRESOLV:
1076         foreach $lpath ("/lib", "/usr/lib")
1077                 {
1078                 foreach $lext ("a", "so")
1079                         {
1080                         $lresolv = "$lpath/libresolv.$lext";
1081                         last LRESOLV    if (-r "$lresolv");
1082                         $lresolv = "";
1083                         }
1084                 }
1085         $withargs{"krb5-lib"} .= " -lresolv"
1086                 if ("$lresolv" ne "" && !$IsWindows);
1087         $withargs{"krb5-include"} = "-I".$withargs{"krb5-dir"}."/include"
1088                 if $withargs{"krb5-include"} eq "" &&
1089                    $withargs{"krb5-dir"} ne "";
1090         }
1091
1092 # The DSO code currently always implements all functions so that no
1093 # applications will have to worry about that from a compilation point
1094 # of view. However, the "method"s may return zero unless that platform
1095 # has support compiled in for them. Currently each method is enabled
1096 # by a define "DSO_<name>" ... we translate the "dso_scheme" config
1097 # string entry into using the following logic;
1098 my $dso_cflags;
1099 if (!$no_dso && $dso_scheme ne "")
1100         {
1101         $dso_scheme =~ tr/[a-z]/[A-Z]/;
1102         if ($dso_scheme eq "DLFCN")
1103                 {
1104                 $dso_cflags = "-DDSO_DLFCN -DHAVE_DLFCN_H";
1105                 }
1106         elsif ($dso_scheme eq "DLFCN_NO_H")
1107                 {
1108                 $dso_cflags = "-DDSO_DLFCN";
1109                 }
1110         else
1111                 {
1112                 $dso_cflags = "-DDSO_$dso_scheme";
1113                 }
1114         $cflags = "$dso_cflags $cflags";
1115         }
1116
1117 my $thread_cflags;
1118 my $thread_defines;
1119 if ($thread_cflag ne "(unknown)" && !$no_threads)
1120         {
1121         # If we know how to do it, support threads by default.
1122         $threads = 1;
1123         }
1124 if ($thread_cflag eq "(unknown)")
1125         {
1126         # If the user asked for "threads", hopefully they also provided
1127         # any system-dependent compiler options that are necessary.
1128         $thread_cflags="-DOPENSSL_THREADS $cflags" ;
1129         $thread_defines .= "#define OPENSSL_THREADS\n";
1130         }
1131 else
1132         {
1133         $thread_cflags="-DOPENSSL_THREADS $thread_cflag $cflags";
1134         $thread_defines .= "#define OPENSSL_THREADS\n";
1135 #       my $def;
1136 #       foreach $def (split ' ',$thread_cflag)
1137 #               {
1138 #               if ($def =~ s/^-D// && $def !~ /^_/)
1139 #                       {
1140 #                       $thread_defines .= "#define $def\n";
1141 #                       }
1142 #               }
1143         }
1144
1145 $lflags="$libs$lflags" if ($libs ne "");
1146
1147 if ($no_asm)
1148         {
1149         $bn_obj=$des_obj=$bf_obj=$cast_obj=$rc4_obj=$rc5_obj="";
1150         $sha1_obj=$md5_obj=$rmd160_obj="";
1151         }
1152
1153 if (!$no_shared)
1154         {
1155         $cast_obj="";   # CAST assembler is not PIC
1156         }
1157
1158 if ($threads)
1159         {
1160         $cflags=$thread_cflags;
1161         $openssl_thread_defines .= $thread_defines;
1162         }
1163
1164 if ($zlib)
1165         {
1166         $cflags = "-DZLIB $cflags";
1167         $cflags = "-DZLIB_SHARED $cflags" if $zlib == 2;
1168         $lflags = "$lflags -lz" if $zlib == 1;
1169         }
1170
1171 # You will find shlib_mark1 and shlib_mark2 explained in Makefile.org
1172 my $shared_mark = "";
1173 if ($shared_target eq "")
1174         {
1175         $no_shared_warn = 1 if !$no_shared;
1176         $no_shared = 1;
1177         }
1178 if (!$no_shared)
1179         {
1180         if ($shared_cflag ne "")
1181                 {
1182                 $cflags = "$shared_cflag -DOPENSSL_PIC $cflags";
1183                 $shared_ldflag = "$shared_ldflag $shared_cflag" if($fips);
1184                 }
1185         }
1186
1187 if ($sys_id ne "")
1188         {
1189         $cflags="-DOPENSSL_SYSNAME_$sys_id $cflags";
1190         $openssl_sys_defines="#define OPENSSL_SYSNAME_$sys_id\n";
1191         }
1192
1193 if ($ranlib eq "")
1194         {
1195         $ranlib = $default_ranlib;
1196         }
1197
1198 #my ($bn1)=split(/\s+/,$bn_obj);
1199 #$bn1 = "" unless defined $bn1;
1200 #$bn1=$bn_asm unless ($bn1 =~ /\.o$/);
1201 #$bn_obj="$bn1";
1202
1203 $bn_obj = $bn_asm unless $bn_obj ne "";
1204
1205 my $fips_des_obj;
1206 my $fips_aes_obj;
1207 my $fips_sha1_obj;
1208 if ($fips)
1209         {
1210         if ($des_obj =~ /\-elf\.o$/)
1211                 {
1212                 $fips_des_obj='asm/fips-dx86-elf.o';
1213                 $openssl_other_defines.="#define OPENSSL_FIPS_DES_ASM\n";
1214                 $fips_aes_obj='asm/fips-ax86-elf.o';
1215                 $openssl_other_defines.="#define OPENSSL_FIPS_AES_ASM\n";
1216                 }
1217         else    {
1218                 $fips_des_obj=$fips_des_enc;
1219                 $fips_aes_obj='fips_aes_core.o';
1220                 }
1221         $fips_sha1_obj='asm/fips-sx86-elf.o' if ($sha1_obj =~ /\-elf\.o$/);
1222         $des_obj=$sha1_obj="";
1223         $openssl_other_defines.="#define OPENSSL_FIPS\n";
1224         }
1225 $des_obj=$des_enc       unless ($des_obj =~ /\.o$/);
1226 $bf_obj=$bf_enc         unless ($bf_obj =~ /\.o$/);
1227 $cast_obj=$cast_enc     unless ($cast_obj =~ /\.o$/);
1228 $rc4_obj=$rc4_enc       unless ($rc4_obj =~ /\.o$/);
1229 $rc5_obj=$rc5_enc       unless ($rc5_obj =~ /\.o$/);
1230 if ($sha1_obj =~ /\.o$/ || $fips_sha1_obj =~ /\.o$/)
1231         {
1232 #       $sha1_obj=$sha1_enc;
1233         $cflags.=" -DSHA1_ASM";
1234         }
1235 if ($md5_obj =~ /\.o$/)
1236         {
1237 #       $md5_obj=$md5_enc;
1238         $cflags.=" -DMD5_ASM";
1239         }
1240 if ($rmd160_obj =~ /\.o$/)
1241         {
1242 #       $rmd160_obj=$rmd160_enc;
1243         $cflags.=" -DRMD160_ASM";
1244         }
1245
1246 if ($debug)
1247         {
1248         $cflags.=" -g";
1249         $cflags=~s/-fomit-frame-pointer//;
1250         }
1251
1252 # "Stringify" the C flags string.  This permits it to be made part of a string
1253 # and works as well on command lines.
1254 $cflags =~ s/([\\\"])/\\\1/g;
1255
1256 my $version = "unknown";
1257 my $major = "unknown";
1258 my $minor = "unknown";
1259 my $shlib_version_number = "unknown";
1260 my $shlib_version_history = "unknown";
1261 my $shlib_major = "unknown";
1262 my $shlib_minor = "unknown";
1263
1264 open(IN,'<crypto/opensslv.h') || die "unable to read opensslv.h:$!\n";
1265 while (<IN>)
1266         {
1267         $version=$1 if /OPENSSL.VERSION.TEXT.*OpenSSL (\S+) /;
1268         $shlib_version_number=$1 if /SHLIB_VERSION_NUMBER *"([^"]+)"/;
1269         $shlib_version_history=$1 if /SHLIB_VERSION_HISTORY *"([^"]*)"/;
1270         }
1271 close(IN);
1272 if ($shlib_version_history ne "") { $shlib_version_history .= ":"; }
1273
1274 if ($version =~ /(^[0-9]*)\.([0-9\.]*)/)
1275         {
1276         $major=$1;
1277         $minor=$2;
1278         }
1279
1280 if ($shlib_version_number =~ /(^[0-9]*)\.([0-9\.]*)/)
1281         {
1282         $shlib_major=$1;
1283         $shlib_minor=$2;
1284         }
1285
1286 open(IN,'<Makefile.org') || die "unable to read Makefile.org:$!\n";
1287 unlink("$Makefile.new") || die "unable to remove old $Makefile.new:$!\n" if -e "$Makefile.new";
1288 open(OUT,">$Makefile.new") || die "unable to create $Makefile.new:$!\n";
1289 print OUT "### Generated automatically from Makefile.org by Configure.\n\n";
1290 my $sdirs=0;
1291 while (<IN>)
1292         {
1293         chomp;
1294         $sdirs = 1 if /^SDIRS=/;
1295         if ($sdirs) {
1296                 my $dir;
1297                 foreach $dir (@skip) {
1298                         s/([    ])$dir /\1/;
1299                         }
1300                 }
1301         $sdirs = 0 unless /\\$/;
1302         s/^VERSION=.*/VERSION=$version/;
1303         s/^MAJOR=.*/MAJOR=$major/;
1304         s/^MINOR=.*/MINOR=$minor/;
1305         s/^SHLIB_VERSION_NUMBER=.*/SHLIB_VERSION_NUMBER=$shlib_version_number/;
1306         s/^SHLIB_VERSION_HISTORY=.*/SHLIB_VERSION_HISTORY=$shlib_version_history/;
1307         s/^SHLIB_MAJOR=.*/SHLIB_MAJOR=$shlib_major/;
1308         s/^SHLIB_MINOR=.*/SHLIB_MINOR=$shlib_minor/;
1309         s/^SHLIB_EXT=.*/SHLIB_EXT=$shared_extension/;
1310         s/^INSTALLTOP=.*$/INSTALLTOP=$prefix/;
1311         s/^OPENSSLDIR=.*$/OPENSSLDIR=$openssldir/;
1312         s/^INSTALL_PREFIX=.*$/INSTALL_PREFIX=$install_prefix/;
1313         s/^PLATFORM=.*$/PLATFORM=$target/;
1314         s/^OPTIONS=.*$/OPTIONS=$options/;
1315         s/^CONFIGURE_ARGS=.*$/CONFIGURE_ARGS=$argvstring/;
1316         s/^CC=.*$/CC= $cc/;
1317         s/^MAKEDEPPROG=.*$/MAKEDEPPROG= $cc/ if $cc eq "gcc";
1318         s/^CFLAG=.*$/CFLAG= $cflags/;
1319         s/^DEPFLAG=.*$/DEPFLAG= $depflags/;
1320         s/^EX_LIBS=.*$/EX_LIBS= $lflags/;
1321         s/^EXE_EXT=.*$/EXE_EXT= $exe_ext/;
1322         s/^BN_ASM=.*$/BN_ASM= $bn_obj/;
1323         s/^DES_ENC=.*$/DES_ENC= $des_obj/;
1324         s/^FIPS_DES_ENC=.*$/FIPS_DES_ENC= $fips_des_obj/;
1325         s/^FIPS_AES_ENC=.*$/FIPS_AES_ENC= $fips_aes_obj/;
1326         s/^BF_ENC=.*$/BF_ENC= $bf_obj/;
1327         s/^CAST_ENC=.*$/CAST_ENC= $cast_obj/;
1328         s/^RC4_ENC=.*$/RC4_ENC= $rc4_obj/;
1329         s/^RC5_ENC=.*$/RC5_ENC= $rc5_obj/;
1330         s/^MD5_ASM_OBJ=.*$/MD5_ASM_OBJ= $md5_obj/;
1331         s/^SHA1_ASM_OBJ=.*$/SHA1_ASM_OBJ= $sha1_obj/;
1332         s/^FIPS_SHA1_ASM_OBJ=.*$/FIPS_SHA1_ASM_OBJ= $fips_sha1_obj/;
1333         s/^RMD160_ASM_OBJ=.*$/RMD160_ASM_OBJ= $rmd160_obj/;
1334         s/^PROCESSOR=.*/PROCESSOR= $processor/;
1335         s/^RANLIB=.*/RANLIB= $ranlib/;
1336         s/^ARFLAGS=.*/ARFLAGS= $arflags/;
1337         s/^PERL=.*/PERL= $perl/;
1338         s/^KRB5_INCLUDES=.*/KRB5_INCLUDES=$withargs{"krb5-include"}/;
1339         s/^LIBKRB5=.*/LIBKRB5=$withargs{"krb5-lib"}/;
1340         s/^LIBZLIB=.*/LIBZLIB=$withargs{"zlib-lib"}/;
1341         s/^FIPSLIBDIR=.*/FIPSLIBDIR=$fipslibdir/;
1342         s/^ZLIB_INCLUDE=.*/ZLIB_INCLUDE=$withargs{"zlib-include"}/;
1343         s/^SHLIB_TARGET=.*/SHLIB_TARGET=$shared_target/;
1344         s/^SHLIB_MARK=.*/SHLIB_MARK=$shared_mark/;
1345         s/^SHARED_LIBS=.*/SHARED_LIBS=\$(SHARED_CRYPTO) \$(SHARED_SSL)/ if (!$no_shared);
1346         if ($shared_extension ne "" && $shared_extension =~ /^\.s([ol])\.[^\.]*$/)
1347                 {
1348                 my $sotmp = $1;
1349                 s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.s$sotmp/;
1350                 }
1351         elsif ($shared_extension ne "" && $shared_extension =~ /^\.[^\.]*\.dylib$/)
1352                 {
1353                 s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.dylib/;
1354                 }
1355         elsif ($shared_extension ne "" && $shared_extension =~ /^\.s([ol])\.[^\.]*\.[^\.]*$/)
1356                 {
1357                 my $sotmp = $1;
1358                 s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.s$sotmp.\$(SHLIB_MAJOR) .s$sotmp/;
1359                 }
1360         elsif ($shared_extension ne "" && $shared_extension =~ /^\.[^\.]*\.[^\.]*\.dylib$/)
1361                 {
1362                 s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.\$(SHLIB_MAJOR).dylib .dylib/;
1363                 }
1364         s/^SHARED_LDFLAGS=.*/SHARED_LDFLAGS=$shared_ldflag/;
1365         print OUT $_."\n";
1366         }
1367 close(IN);
1368 close(OUT);
1369 rename($Makefile,"$Makefile.bak") || die "unable to rename $Makefile\n" if -e $Makefile;
1370 rename("$Makefile.new",$Makefile) || die "unable to rename $Makefile.new\n";
1371
1372 print "CC            =$cc\n";
1373 print "CFLAG         =$cflags\n";
1374 print "EX_LIBS       =$lflags\n";
1375 print "BN_ASM        =$bn_obj\n";
1376 print "DES_ENC       =$des_obj\n";
1377 print "BF_ENC        =$bf_obj\n";
1378 print "CAST_ENC      =$cast_obj\n";
1379 print "RC4_ENC       =$rc4_obj\n";
1380 print "RC5_ENC       =$rc5_obj\n";
1381 print "MD5_OBJ_ASM   =$md5_obj\n";
1382 print "SHA1_OBJ_ASM  =$sha1_obj\n";
1383 print "RMD160_OBJ_ASM=$rmd160_obj\n";
1384 print "PROCESSOR     =$processor\n";
1385 print "RANLIB        =$ranlib\n";
1386 print "ARFLAGS       =$arflags\n";
1387 print "PERL          =$perl\n";
1388 print "KRB5_INCLUDES =",$withargs{"krb5-include"},"\n"
1389         if $withargs{"krb5-include"} ne "";
1390
1391 my $des_ptr=0;
1392 my $des_risc1=0;
1393 my $des_risc2=0;
1394 my $des_unroll=0;
1395 my $bn_ll=0;
1396 my $def_int=2;
1397 my $rc4_int=$def_int;
1398 my $md2_int=$def_int;
1399 my $idea_int=$def_int;
1400 my $rc2_int=$def_int;
1401 my $rc4_idx=0;
1402 my $rc4_chunk=0;
1403 my $bf_ptr=0;
1404 my @type=("char","short","int","long");
1405 my ($b64l,$b64,$b32,$b16,$b8)=(0,0,1,0,0);
1406 my $export_var_as_fn=0;
1407
1408 my $des_int;
1409
1410 foreach (sort split(/\s+/,$bn_ops))
1411         {
1412         $des_ptr=1 if /DES_PTR/;
1413         $des_risc1=1 if /DES_RISC1/;
1414         $des_risc2=1 if /DES_RISC2/;
1415         $des_unroll=1 if /DES_UNROLL/;
1416         $des_int=1 if /DES_INT/;
1417         $bn_ll=1 if /BN_LLONG/;
1418         $rc4_int=0 if /RC4_CHAR/;
1419         $rc4_int=3 if /RC4_LONG/;
1420         $rc4_idx=1 if /RC4_INDEX/;
1421         $rc4_chunk=1 if /RC4_CHUNK/;
1422         $rc4_chunk=2 if /RC4_CHUNK_LL/;
1423         $md2_int=0 if /MD2_CHAR/;
1424         $md2_int=3 if /MD2_LONG/;
1425         $idea_int=1 if /IDEA_SHORT/;
1426         $idea_int=3 if /IDEA_LONG/;
1427         $rc2_int=1 if /RC2_SHORT/;
1428         $rc2_int=3 if /RC2_LONG/;
1429         $bf_ptr=1 if $_ eq "BF_PTR";
1430         $bf_ptr=2 if $_ eq "BF_PTR2";
1431         ($b64l,$b64,$b32,$b16,$b8)=(0,1,0,0,0) if /SIXTY_FOUR_BIT/;
1432         ($b64l,$b64,$b32,$b16,$b8)=(1,0,0,0,0) if /SIXTY_FOUR_BIT_LONG/;
1433         ($b64l,$b64,$b32,$b16,$b8)=(0,0,1,0,0) if /THIRTY_TWO_BIT/;
1434         ($b64l,$b64,$b32,$b16,$b8)=(0,0,0,1,0) if /SIXTEEN_BIT/;
1435         ($b64l,$b64,$b32,$b16,$b8)=(0,0,0,0,1) if /EIGHT_BIT/;
1436         $export_var_as_fn=1 if /EXPORT_VAR_AS_FN/;
1437         }
1438
1439 open(IN,'<crypto/opensslconf.h.in') || die "unable to read crypto/opensslconf.h.in:$!\n";
1440 unlink("crypto/opensslconf.h.new") || die "unable to remove old crypto/opensslconf.h.new:$!\n" if -e "crypto/opensslconf.h.new";
1441 open(OUT,'>crypto/opensslconf.h.new') || die "unable to create crypto/opensslconf.h.new:$!\n";
1442 print OUT "/* opensslconf.h */\n";
1443 print OUT "/* WARNING: Generated automatically from opensslconf.h.in by Configure. */\n\n";
1444
1445 print OUT "/* OpenSSL was configured with the following options: */\n";
1446 my $openssl_algorithm_defines_trans = $openssl_algorithm_defines;
1447 $openssl_algorithm_defines_trans =~ s/^\s*#\s*define\s+OPENSSL_(.*)/# if defined(OPENSSL_$1) \&\& !defined($1)\n#  define $1\n# endif/mg;
1448 $openssl_algorithm_defines =~ s/^\s*#\s*define\s+(.*)/#ifndef $1\n# define $1\n#endif/mg;
1449 $openssl_algorithm_defines = "   /* no ciphers excluded */\n" if $openssl_algorithm_defines eq "";
1450 $openssl_thread_defines =~ s/^\s*#\s*define\s+(.*)/#ifndef $1\n# define $1\n#endif/mg;
1451 $openssl_sys_defines =~ s/^\s*#\s*define\s+(.*)/#ifndef $1\n# define $1\n#endif/mg;
1452 $openssl_other_defines =~ s/^\s*#\s*define\s+(.*)/#ifndef $1\n# define $1\n#endif/mg;
1453 print OUT $openssl_sys_defines;
1454 print OUT "#ifndef OPENSSL_DOING_MAKEDEPEND\n\n";
1455 print OUT $openssl_algorithm_defines;
1456 print OUT "\n#endif /* OPENSSL_DOING_MAKEDEPEND */\n";
1457 print OUT $openssl_thread_defines;
1458 print OUT $openssl_other_defines,"\n";
1459
1460 print OUT "/* The OPENSSL_NO_* macros are also defined as NO_* if the application\n";
1461 print OUT "   asks for it.  This is a transient feature that is provided for those\n";
1462 print OUT "   who haven't had the time to do the appropriate changes in their\n";
1463 print OUT "   applications.  */\n";
1464 print OUT "#ifdef OPENSSL_ALGORITHM_DEFINES\n";
1465 print OUT $openssl_algorithm_defines_trans;
1466 print OUT "#endif\n\n";
1467
1468 while (<IN>)
1469         {
1470         if      (/^#define\s+OPENSSLDIR/)
1471                 { print OUT "#define OPENSSLDIR \"$openssldir\"\n"; }
1472         elsif   (/^#((define)|(undef))\s+OPENSSL_EXPORT_VAR_AS_FUNCTION/)
1473                 { printf OUT "#undef OPENSSL_EXPORT_VAR_AS_FUNCTION\n"
1474                         if $export_var_as_fn;
1475                   printf OUT "#%s OPENSSL_EXPORT_VAR_AS_FUNCTION\n",
1476                         ($export_var_as_fn)?"define":"undef"; }
1477         elsif   (/^#define\s+OPENSSL_UNISTD/)
1478                 {
1479                 $unistd = "<unistd.h>" if $unistd eq "";
1480                 print OUT "#define OPENSSL_UNISTD $unistd\n";
1481                 }
1482         elsif   (/^#((define)|(undef))\s+SIXTY_FOUR_BIT_LONG/)
1483                 { printf OUT "#%s SIXTY_FOUR_BIT_LONG\n",($b64l)?"define":"undef"; }
1484         elsif   (/^#((define)|(undef))\s+SIXTY_FOUR_BIT/)
1485                 { printf OUT "#%s SIXTY_FOUR_BIT\n",($b64)?"define":"undef"; }
1486         elsif   (/^#((define)|(undef))\s+THIRTY_TWO_BIT/)
1487                 { printf OUT "#%s THIRTY_TWO_BIT\n",($b32)?"define":"undef"; }
1488         elsif   (/^#((define)|(undef))\s+SIXTEEN_BIT/)
1489                 { printf OUT "#%s SIXTEEN_BIT\n",($b16)?"define":"undef"; }
1490         elsif   (/^#((define)|(undef))\s+EIGHT_BIT/)
1491                 { printf OUT "#%s EIGHT_BIT\n",($b8)?"define":"undef"; }
1492         elsif   (/^#((define)|(undef))\s+BN_LLONG\s*$/)
1493                 { printf OUT "#%s BN_LLONG\n",($bn_ll)?"define":"undef"; }
1494         elsif   (/^\#define\s+DES_LONG\s+.*/)
1495                 { printf OUT "#define DES_LONG unsigned %s\n",
1496                         ($des_int)?'int':'long'; }
1497         elsif   (/^\#(define|undef)\s+DES_PTR/)
1498                 { printf OUT "#%s DES_PTR\n",($des_ptr)?'define':'undef'; }
1499         elsif   (/^\#(define|undef)\s+DES_RISC1/)
1500                 { printf OUT "#%s DES_RISC1\n",($des_risc1)?'define':'undef'; }
1501         elsif   (/^\#(define|undef)\s+DES_RISC2/)
1502                 { printf OUT "#%s DES_RISC2\n",($des_risc2)?'define':'undef'; }
1503         elsif   (/^\#(define|undef)\s+DES_UNROLL/)
1504                 { printf OUT "#%s DES_UNROLL\n",($des_unroll)?'define':'undef'; }
1505         elsif   (/^#define\s+RC4_INT\s/)
1506                 { printf OUT "#define RC4_INT unsigned %s\n",$type[$rc4_int]; }
1507         elsif   (/^#undef\s+RC4_CHUNK/)
1508                 {
1509                 printf OUT "#undef RC4_CHUNK\n" if $rc4_chunk==0;
1510                 printf OUT "#define RC4_CHUNK unsigned long\n" if $rc4_chunk==1;
1511                 printf OUT "#define RC4_CHUNK unsigned long long\n" if $rc4_chunk==2;
1512                 }
1513         elsif   (/^#((define)|(undef))\s+RC4_INDEX/)
1514                 { printf OUT "#%s RC4_INDEX\n",($rc4_idx)?"define":"undef"; }
1515         elsif (/^#(define|undef)\s+I386_ONLY/)
1516                 { printf OUT "#%s I386_ONLY\n", ($processor == 386)?
1517                         "define":"undef"; }
1518         elsif   (/^#define\s+MD2_INT\s/)
1519                 { printf OUT "#define MD2_INT unsigned %s\n",$type[$md2_int]; }
1520         elsif   (/^#define\s+IDEA_INT\s/)
1521                 {printf OUT "#define IDEA_INT unsigned %s\n",$type[$idea_int];}
1522         elsif   (/^#define\s+RC2_INT\s/)
1523                 {printf OUT "#define RC2_INT unsigned %s\n",$type[$rc2_int];}
1524         elsif (/^#(define|undef)\s+BF_PTR/)
1525                 {
1526                 printf OUT "#undef BF_PTR\n" if $bf_ptr == 0;
1527                 printf OUT "#define BF_PTR\n" if $bf_ptr == 1;
1528                 printf OUT "#define BF_PTR2\n" if $bf_ptr == 2;
1529                 }
1530         else
1531                 { print OUT $_; }
1532         }
1533 close(IN);
1534 close(OUT);
1535 rename("crypto/opensslconf.h","crypto/opensslconf.h.bak") || die "unable to rename crypto/opensslconf.h\n" if -e "crypto/opensslconf.h";
1536 rename("crypto/opensslconf.h.new","crypto/opensslconf.h") || die "unable to rename crypto/opensslconf.h.new\n";
1537
1538
1539 # Fix the date
1540
1541 print "SIXTY_FOUR_BIT_LONG mode\n" if $b64l;
1542 print "SIXTY_FOUR_BIT mode\n" if $b64;
1543 print "THIRTY_TWO_BIT mode\n" if $b32;
1544 print "SIXTEEN_BIT mode\n" if $b16;
1545 print "EIGHT_BIT mode\n" if $b8;
1546 print "DES_PTR used\n" if $des_ptr;
1547 print "DES_RISC1 used\n" if $des_risc1;
1548 print "DES_RISC2 used\n" if $des_risc2;
1549 print "DES_UNROLL used\n" if $des_unroll;
1550 print "DES_INT used\n" if $des_int;
1551 print "BN_LLONG mode\n" if $bn_ll;
1552 print "RC4 uses u$type[$rc4_int]\n" if $rc4_int != $def_int;
1553 print "RC4_INDEX mode\n" if $rc4_idx;
1554 print "RC4_CHUNK is undefined\n" if $rc4_chunk==0;
1555 print "RC4_CHUNK is unsigned long\n" if $rc4_chunk==1;
1556 print "RC4_CHUNK is unsigned long long\n" if $rc4_chunk==2;
1557 print "MD2 uses u$type[$md2_int]\n" if $md2_int != $def_int;
1558 print "IDEA uses u$type[$idea_int]\n" if $idea_int != $def_int;
1559 print "RC2 uses u$type[$rc2_int]\n" if $rc2_int != $def_int;
1560 print "BF_PTR used\n" if $bf_ptr == 1;
1561 print "BF_PTR2 used\n" if $bf_ptr == 2;
1562
1563 if($IsWindows) {
1564         open (OUT,">crypto/buildinf.h") || die "Can't open buildinf.h";
1565         printf OUT <<EOF;
1566 #ifndef MK1MF_BUILD
1567   /* auto-generated by Configure for crypto/cversion.c:
1568    * for Unix builds, crypto/Makefile generates functional definitions;
1569    * Windows builds (and other mk1mf builds) compile cversion.c with
1570    * -DMK1MF_BUILD and use definitions added to this file by util/mk1mf.pl. */
1571   #error "Windows builds (PLATFORM=$target) use mk1mf.pl-created Makefiles"
1572 #endif
1573 EOF
1574         close(OUT);
1575 } else {
1576         my $make_command = "make PERL=\'$perl\'";
1577         my $make_targets = "";
1578         $make_targets .= " links" if $symlink;
1579         $make_targets .= " depend" if $depflags ne "" && $make_depend;
1580         $make_targets .= " gentests" if $symlink;
1581         (system $make_command.$make_targets) == 0 or exit $?
1582                 if $make_targets ne "";
1583         if ( $perl =~ m@^/@) {
1584             &dofile("tools/c_rehash",$perl,'^#!/', '#!%s','^my \$dir;$', 'my $dir = "' . $openssldir . '";');
1585             &dofile("apps/CA.pl",$perl,'^#!/', '#!%s');
1586         } else {
1587             # No path for Perl known ...
1588             &dofile("tools/c_rehash",'/usr/local/bin/perl','^#!/', '#!%s','^my \$dir;$', 'my $dir = "' . $openssldir . '";');
1589             &dofile("apps/CA.pl",'/usr/local/bin/perl','^#!/', '#!%s');
1590         }
1591         if ($depflags ne "" && !$make_depend) {
1592                 print <<EOF;
1593
1594 Since you've disabled at least one algorithm, you need to do the following
1595 before building:
1596
1597         make depend
1598 EOF
1599         }
1600 }
1601
1602 print <<EOF;
1603
1604 Configured for $target.
1605 EOF
1606
1607 print <<\EOF if (!$no_threads && !$threads);
1608
1609 The library could not be configured for supporting multi-threaded
1610 applications as the compiler options required on this system are not known.
1611 See file INSTALL for details if you need multi-threading.
1612 EOF
1613
1614 print <<\EOF if ($no_shared_warn);
1615
1616 You gave the option 'shared'.  Normally, that would give you shared libraries.
1617 Unfortunately, the OpenSSL configuration doesn't include shared library support
1618 for this platform yet, so it will pretend you gave the option 'no-shared'.  If
1619 you can inform the developpers (openssl-dev\@openssl.org) how to support shared
1620 libraries on this platform, they will at least look at it and try their best
1621 (but please first make sure you have tried with a current version of OpenSSL).
1622 EOF
1623
1624 exit(0);
1625
1626 sub usage
1627         {
1628         print STDERR $usage;
1629         print STDERR "\npick os/compiler from:\n";
1630         my $j=0;
1631         my $i;
1632         my $k=0;
1633         foreach $i (sort keys %table)
1634                 {
1635                 next if $i =~ /^debug/;
1636                 $k += length($i) + 1;
1637                 if ($k > 78)
1638                         {
1639                         print STDERR "\n";
1640                         $k=length($i);
1641                         }
1642                 print STDERR $i . " ";
1643                 }
1644         foreach $i (sort keys %table)
1645                 {
1646                 next if $i !~ /^debug/;
1647                 $k += length($i) + 1;
1648                 if ($k > 78)
1649                         {
1650                         print STDERR "\n";
1651                         $k=length($i);
1652                         }
1653                 print STDERR $i . " ";
1654                 }
1655         print STDERR "\n\nNOTE: If in doubt, on Unix-ish systems use './config'.\n";
1656         exit(1);
1657         }
1658
1659 sub which
1660         {
1661         my($name)=@_;
1662         my $path;
1663         foreach $path (split /:/, $ENV{PATH})
1664                 {
1665                 if (-f "$path/$name$exe_ext" and -x _)
1666                         {
1667                         return "$path/$name$exe_ext" unless ($name eq "perl" and
1668                          system("$path/$name$exe_ext -e " . '\'exit($]<5.0);\''));
1669                         }
1670                 }
1671         }
1672
1673 sub dofile
1674         {
1675         my $f; my $p; my %m; my @a; my $k; my $ff;
1676         ($f,$p,%m)=@_;
1677
1678         open(IN,"<$f.in") || open(IN,"<$f") || die "unable to open $f:$!\n";
1679         @a=<IN>;
1680         close(IN);
1681         foreach $k (keys %m)
1682                 {
1683                 grep(/$k/ && ($_=sprintf($m{$k}."\n",$p)),@a);
1684                 }
1685         open(OUT,">$f.new") || die "unable to open $f.new:$!\n";
1686         print OUT @a;
1687         close(OUT);
1688         rename($f,"$f.bak") || die "unable to rename $f\n" if -e $f;
1689         rename("$f.new",$f) || die "unable to rename $f.new\n";
1690         }
1691
1692 sub print_table_entry
1693         {
1694         my $target = shift;
1695
1696         my @fields = split(/\s*:\s*/,$table{$target} . ":" x 30 , -1);
1697         for (@fields) { s/%([\dA-Fa-f]{2})/chr(hex($1))/eg; }
1698         (my $cc,my $cflags,my $unistd,my $thread_cflag,my $sys_id,my $lflags,
1699         my $bn_ops,my $bn_obj,my $des_obj,my $bf_obj,
1700         my $md5_obj,my $sha1_obj,my $cast_obj,my $rc4_obj,my $rmd160_obj,
1701         my $rc5_obj,my $dso_scheme,my $shared_target,my $shared_cflag,
1702         my $shared_ldflag,my $shared_extension,my $ranlib,my $arflags)=@fields;
1703
1704         print <<EOF
1705
1706 *** $target
1707 \$cc           = $cc
1708 \$cflags       = $cflags
1709 \$unistd       = $unistd
1710 \$thread_cflag = $thread_cflag
1711 \$sys_id       = $sys_id
1712 \$lflags       = $lflags
1713 \$bn_ops       = $bn_ops
1714 \$bn_obj       = $bn_obj
1715 \$des_obj      = $des_obj
1716 \$bf_obj       = $bf_obj
1717 \$md5_obj      = $md5_obj
1718 \$sha1_obj     = $sha1_obj
1719 \$cast_obj     = $cast_obj
1720 \$rc4_obj      = $rc4_obj
1721 \$rmd160_obj   = $rmd160_obj
1722 \$rc5_obj      = $rc5_obj
1723 \$dso_scheme   = $dso_scheme
1724 \$shared_target= $shared_target
1725 \$shared_cflag = $shared_cflag
1726 \$shared_ldflag = $shared_ldflag
1727 \$shared_extension = $shared_extension
1728 \$ranlib       = $ranlib
1729 \$arflags      = $arflags
1730 EOF
1731         }
1732
1733 sub test_sanity
1734         {
1735         my $errorcnt = 0;
1736
1737         print STDERR "=" x 70, "\n";
1738         print STDERR "=== SANITY TESTING!\n";
1739         print STDERR "=== No configuration will be done, all other arguments will be ignored!\n";
1740         print STDERR "=" x 70, "\n";
1741
1742         foreach $target (sort keys %table)
1743                 {
1744                 @fields = split(/\s*:\s*/,$table{$target} . ":" x 30 , -1);
1745                 for (@fields) { s/%([\dA-Fa-f]{2})/chr(hex($1))/eg; }
1746
1747                 if ($fields[$idx_dso_scheme-1] =~ /^(dl|dlfcn|win32|vms)$/)
1748                         {
1749                         $errorcnt++;
1750                         print STDERR "SANITY ERROR: '$target' has the dso_scheme [$idx_dso_scheme] values\n";
1751                         print STDERR "              in the previous field\n";
1752                         }
1753                 elsif ($fields[$idx_dso_scheme+1] =~ /^(dl|dlfcn|win32|vms)$/)
1754                         {
1755                         $errorcnt++;
1756                         print STDERR "SANITY ERROR: '$target' has the dso_scheme [$idx_dso_scheme] values\n";
1757                         print STDERR "              in the following field\n";
1758                         }
1759                 elsif ($fields[$idx_dso_scheme] !~ /^(dl|dlfcn|win32|vms|)$/)
1760                         {
1761                         $errorcnt++;
1762                         print STDERR "SANITY ERROR: '$target' has the dso_scheme [$idx_dso_scheme] field = ",$fields[$idx_dso_scheme],"\n";
1763                         print STDERR "              valid values are 'dl', 'dlfcn', 'win32' and 'vms'\n";
1764                         }
1765                 }
1766         print STDERR "No sanity errors detected!\n" if $errorcnt == 0;
1767         return $errorcnt;
1768         }