5 ## Configure -- OpenSSL source tree configuration script
6 ## If editing this file, run this command before committing
7 ## make -f Makefile.in TABLE
13 use File::Spec::Functions qw/:DEFAULT abs2rel rel2abs/;
14 use File::Path qw/mkpath/;
16 # see INSTALL for instructions.
18 my $usage="Usage: Configure [no-<cipher> ...] [enable-<cipher> ...] [experimental-<cipher> ...] [-Dxxx] [-lxxx] [-Lxxx] [-fxxx] [-Kxxx] [no-hw-xxx|no-hw] [[no-]threads] [[no-]shared] [[no-]zlib|zlib-dynamic] [no-asm] [no-dso] [no-egd] [sctp] [386] [--prefix=DIR] [--openssldir=OPENSSLDIR] [--with-xxx[=vvv]] [--config=FILE] os/compiler[:flags]\n";
22 # --config add the given configuration file, which will be read after
23 # any "Configurations*" files that are found in the same
24 # directory as this script.
25 # --prefix prefix for the OpenSSL installation, which includes the
26 # directories bin, lib, include, share/man, share/doc/openssl
27 # This becomes the value of INSTALLTOP in Makefile
28 # (Default: /usr/local)
29 # --openssldir OpenSSL data area, such as openssl.cnf, certificates and keys.
30 # If it's a relative directory, it will be added on the directory
31 # given with --prefix.
32 # This becomes the value of OPENSSLDIR in Makefile and in C.
33 # (Default: PREFIX/ssl)
35 # --cross-compile-prefix Add specified prefix to binutils components.
37 # --api One of 0.9.8, 1.0.0 or 1.1.0. Do not compile support for
38 # interfaces deprecated as of the specified OpenSSL version.
40 # no-hw-xxx do not compile support for specific crypto hardware.
41 # Generic OpenSSL-style methods relating to this support
42 # are always compiled but return NULL if the hardware
43 # support isn't compiled.
44 # no-hw do not compile support for any crypto hardware.
45 # [no-]threads [don't] try to create a library that is suitable for
46 # multithreaded applications (default is "threads" if we
48 # [no-]shared [don't] try to create shared libraries when supported.
49 # no-asm do not use assembler
50 # no-dso do not compile in any native shared-library methods. This
51 # will ensure that all methods just return NULL.
52 # no-egd do not compile support for the entropy-gathering daemon APIs
53 # [no-]zlib [don't] compile support for zlib compression.
54 # zlib-dynamic Like "zlib", but the zlib library is expected to be a shared
55 # library and will be loaded in run-time by the OpenSSL library.
56 # sctp include SCTP support
57 # 386 generate 80386 code
58 # no-sse2 disables IA-32 SSE2 code, above option implies no-sse2
59 # no-<cipher> build without specified algorithm (rsa, idea, rc5, ...)
60 # -<xxx> +<xxx> compiler options are passed through
62 # DEBUG_SAFESTACK use type-safe stacks to enforce type-safety on stack items
63 # provided to stack calls. Generates unique stack functions for
64 # each possible stack type.
65 # BN_LLONG use the type 'long long' in crypto/bn/bn.h
66 # RC4_CHAR use 'char' instead of 'int' for RC4_INT in crypto/rc4/rc4.h
67 # Following are set automatically by this script
69 # MD5_ASM use some extra md5 assember,
70 # SHA1_ASM use some extra sha1 assember, must define L_ENDIAN for x86
71 # RMD160_ASM use some extra ripemd160 assember,
72 # SHA256_ASM sha256_block is implemented in assembler
73 # SHA512_ASM sha512_block is implemented in assembler
74 # AES_ASM ASE_[en|de]crypt is implemented in assembler
76 # Minimum warning options... any contributions to OpenSSL should at least get
79 my $gcc_devteam_warn = "-DPEDANTIC -DREF_DEBUG -DDEBUG_UNUSED"
84 . " -Wmissing-prototypes"
91 # These are used in addition to $gcc_devteam_warn when the compiler is clang.
92 # TODO(openssl-team): fix problems and investigate if (at least) the
93 # following warnings can also be enabled:
98 # -Wlanguage-extension-token
100 my $clang_devteam_warn = ""
101 . " -Qunused-arguments"
103 . " -Wno-unused-parameter"
104 . " -Wno-missing-field-initializers"
105 . " -Wno-language-extension-token"
106 . " -Wno-extended-offsetof"
107 . " -Wconditional-uninitialized"
108 . " -Wincompatible-pointer-types-discards-qualifiers"
109 . " -Wmissing-variable-declarations"
112 # This adds backtrace information to the memory leak info. Is only used
113 # when crypto-mdebug-backtrace is enabled.
114 my $memleak_devteam_backtrace = "-rdynamic";
116 my $strict_warnings = 0;
118 # As for $BSDthreads. Idea is to maintain "collective" set of flags,
119 # which would cover all BSD flavors. -pthread applies to them all,
120 # but is treated differently. OpenBSD expands is as -D_POSIX_THREAD
121 # -lc_r, which is sufficient. FreeBSD 4.x expands it as -lc_r,
122 # which has to be accompanied by explicit -D_THREAD_SAFE and
123 # sometimes -D_REENTRANT. FreeBSD 5.x expands it as -lc_r, which
124 # seems to be sufficient?
125 my $BSDthreads="-pthread -D_THREAD_SAFE -D_REENTRANT";
128 # API compability name to version number mapping.
130 my $maxapi = "1.1.0"; # API for "no-deprecated" builds
132 "1.1.0" => "0x10100000L",
133 "1.0.0" => "0x10000000L",
134 "0.9.8" => "0x00908000L",
137 my $base_target = "BASE"; # The template that all other inherit from
141 # Forward declarations ###############################################
143 # read_config(filename)
145 # Reads a configuration file and populates %table with the contents
146 # (which the configuration file places in %targets).
149 # resolve_config(target)
151 # Resolves all the late evalutations, inheritances and so on for the
152 # chosen target and any target it inherits from.
156 # Information collection #############################################
158 # Unified build supports separate build dir
159 my $srcdir = catdir(absolutedir(dirname($0))); # catdir ensures local syntax
160 my $blddir = catdir(absolutedir(".")); # catdir ensures local syntax
161 my $dofile = abs2rel(catfile($srcdir, "util/dofile.pl"));
163 $config{sourcedir} = abs2rel($srcdir);
164 $config{builddir} = abs2rel($blddir);
166 # Collect version numbers
167 $config{version} = "unknown";
168 $config{version_num} = "unknown";
169 $config{shlib_version_number} = "unknown";
170 $config{shlib_version_history} = "unknown";
173 collect_from_file(catfile($srcdir,'include/openssl/opensslv.h')),
174 qr/OPENSSL.VERSION.TEXT.*OpenSSL (\S+) / => sub { $config{version} = $1; },
175 qr/OPENSSL.VERSION.NUMBER.*(0x\S+)/ => sub { $config{version_num}=$1 },
176 qr/SHLIB_VERSION_NUMBER *"([^"]+)"/ => sub { $config{shlib_version_number}=$1 },
177 qr/SHLIB_VERSION_HISTORY *"([^"]*)"/ => sub { $config{shlib_version_history}=$1 }
179 if ($config{shlib_version_history} ne "") { $config{shlib_version_history} .= ":"; }
181 ($config{major}, $config{minor})
182 = ($config{version} =~ /^([0-9]+)\.([0-9\.]+)/);
183 ($config{shlib_major}, $config{shlib_minor})
184 = ($config{shlib_version_number} =~ /^([0-9]+)\.([0-9\.]+)/);
185 die "erroneous version information in opensslv.h: ",
186 "$config{major}, $config{minor}, $config{shlib_major}, $config{shlib_minor}\n"
187 if ($config{major} eq "" || $config{minor} eq ""
188 || $config{shlib_major} eq "" || $config{shlib_minor} eq "");
190 # Collect target configurations
192 my $pattern = catfile(dirname($0), "Configurations", "*.conf");
193 foreach (sort glob($pattern) ) {
198 print "Configuring OpenSSL version $config{version} (0x$config{version_num})\n";
202 $config{openssldir}="";
203 $config{processor}="";
205 $config{cross_compile_prefix}="";
206 $config{fipslibdir}="/usr/local/ssl/fips-2.0/lib/";
207 my $nofipscanistercheck=0;
208 $config{baseaddr}="0xFB00000";
211 $config{no_shared}=0; # but "no-shared" is default
212 my $zlib=1; # but "no-zlib" is default
219 # Top level directories to build
220 $config{dirs} = [ "crypto", "ssl", "engines", "apps", "test", "tools" ];
221 # crypto/ subdirectories to build
224 "md2", "md4", "md5", "sha", "mdc2", "hmac", "ripemd", "whrlpool", "poly1305",
225 "des", "aes", "rc2", "rc4", "rc5", "idea", "bf", "cast", "camellia", "seed", "chacha", "modes",
226 "bn", "ec", "rsa", "dsa", "dh", "dso", "engine",
227 "buffer", "bio", "stack", "lhash", "rand", "err",
228 "evp", "asn1", "pem", "x509", "x509v3", "conf", "txt_db", "pkcs7", "pkcs12", "comp", "ocsp", "ui",
229 "cms", "ts", "jpake", "srp", "cmac", "ct", "async", "kdf"
232 # Known TLS and DTLS protocols
233 my @tls = qw(ssl3 tls1 tls1_1 tls1_2);
234 my @dtls = qw(dtls1 dtls1_2);
236 # Explicitelly known options that are possible to disable. They can
237 # be regexps, and will be used like this: /^no-${option}$/
238 # For developers: keep it sorted alphabetically
255 "crypto-mdebug-backtrace",
269 "ec_nistp_64_gcc_128",
278 "locking", # Really???
295 "rijndael", # Old AES name
319 foreach my $proto ((@tls, @dtls))
321 push(@disablables, $proto);
322 push(@disablables, "$proto-method");
325 # All of the following is disabled by default (RC5 was enabled before 0.9.8):
327 my %disabled = ( # "what" => "comment" [or special keyword "experimental"]
328 "ec_nistp_64_gcc_128" => "default",
330 "jpake" => "experimental",
334 "shared" => "default",
335 "ssl-trace" => "default",
336 "unit-test" => "default",
338 "crypto-mdebug" => "default",
339 "heartbeats" => "default",
341 my @experimental = ();
343 # Note: => pair form used for aesthetics, not to truly make a hash table
344 my @disable_cascades = (
345 # "what" => [ "cascade", ... ]
346 sub { $config{processor} eq "386" }
349 "ssl3-method" => [ "ssl3" ],
350 "zlib" => [ "zlib-dynamic" ],
351 "rijndael" => [ "aes" ],
353 "ec" => [ "ecdsa", "ecdh" ],
354 "psk" => [ "jpake" ],
356 "dgram" => [ "dtls" ],
359 # SSL 3.0, (D)TLS 1.0 and TLS 1.1 require MD5 and SHA
360 "md5" => [ "ssl", "tls1", "tls1_1", "dtls1" ],
361 "sha" => [ "ssl", "tls1", "tls1_1", "dtls1" ],
363 # Additionally, SSL 3.0 requires either RSA or DSA+DH
365 && ($disabled{dsa} || $disabled{dh}); }
368 # (D)TLS 1.0 and TLS 1.1 also require either RSA or DSA+DH
369 # or ECDSA + ECDH. (D)TLS 1.2 has this requirement as well.
370 # (XXX: We don't support PSK-only builds).
372 && ($disabled{dsa} || $disabled{dh})
373 && ($disabled{ecdsa} || $disabled{ecdh}); }
374 => [ "tls1", "tls1_1", "tls1_2",
375 "dtls1", "dtls1_2" ],
379 # SRP and HEARTBEATS require TLSEXT
380 "tlsext" => [ "srp", "heartbeats" ],
382 "crypto-mdebug" => [ "crypto-mdebug-backtrace" ],
385 # Avoid protocol support holes. Also disable all versions below N, if version
386 # N is disabled while N+1 is enabled.
388 my @list = (reverse @tls);
389 while ((my $first, my $second) = (shift @list, shift @list)) {
391 push @disable_cascades, ( sub { !$disabled{$first} && $disabled{$second} }
393 unshift @list, $second;
395 my @list = (reverse @dtls);
396 while ((my $first, my $second) = (shift @list, shift @list)) {
398 push @disable_cascades, ( sub { !$disabled{$first} && $disabled{$second} }
400 unshift @list, $second;
403 # Construct the string of what $config{depdefines} should look like with
404 # the defaults from %disabled above. (we need this to see if we should
405 # advise the user to run "make depend"):
406 my @default_depdefines =
407 map { my $x = $_; $x =~ tr{[a-z]-}{[A-Z]_}; "OPENSSL_NO_$x"; }
408 grep { $disabled{$_} !~ /\(no-depdefines\)$/ }
411 # Explicit "no-..." options will be collected in %disabled along with the defaults.
412 # To remove something from %disabled, use "enable-foo" (unless it's experimental).
413 # For symmetry, "disable-foo" is a synonym for "no-foo".
415 # For features called "experimental" here, a more explicit "experimental-foo" is needed to enable.
416 # We will collect such requests in @experimental.
417 # To avoid accidental use of experimental features, applications will have to use -DOPENSSL_EXPERIMENTAL_FOO.
419 my @generated_headers = (
420 "include/openssl/opensslconf.h",
421 "crypto/include/internal/bn_conf.h"
424 my @generated_by_make_headers = (
431 &usage if ($#ARGV < 0);
436 $config{depdefines}=[];
437 $config{openssl_experimental_defines}=[];
438 $config{openssl_api_defines}=[];
439 $config{openssl_algorithm_defines}=[];
440 $config{openssl_thread_defines}=[];
441 $config{openssl_sys_defines}=[];
442 $config{openssl_other_defines}=[];
447 my $build_prefix = "release_";
451 if (grep /^reconf(igure)?$/, @argvcopy) {
452 if (-f "./configdata.pm") {
453 my $file = "./configdata.pm";
454 unless (my $return = do $file) {
455 die "couldn't parse $file: $@" if $@;
456 die "couldn't do $file: $!" unless defined $return;
457 die "couldn't run $file" unless $return;
460 @argvcopy = defined($configdata::config{perlargv}) ?
461 @{$configdata::config{perlargv}} : ();
462 die "Incorrect data to reconfigure, please do a normal configuration\n"
463 if (grep(/^reconf/,@argvcopy));
464 $ENV{CROSS_COMPILE} = $configdata::config{cross_compile_prefix}
465 if defined($configdata::config{cross_compile_prefix});
466 $ENV{CROSS_COMPILE} = $configdata::config{cc}
467 if defined($configdata::config{cc});
469 print "Reconfiguring with: ", join(" ",@argvcopy), "\n";
470 print " CROSS_COMPILE = ",$ENV{CROSS_COMPILE},"\n"
471 if $ENV{CROSS_COMPILE};
472 print " CC = ",$ENV{CC},"\n" if $ENV{CC};
473 } elsif (open IN, "<Makefile") {
475 # THIS SECTION IS TEMPORARY, it helps transitioning from Makefile
476 # centered information gathering the reading configdata.pm
480 if (/^CONFIGURE_ARGS=\s*(.*)\s*/) {
481 # Older form, we split the string and hope for the best
482 @argvcopy = split /\s+/, $_;
483 die "Incorrect data to reconfigure, please do a normal configuration\n"
484 if (grep(/^reconf/,@argvcopy));
485 } elsif (/^CROSS_COMPILE=\s*(.*)/) {
486 $ENV{CROSS_COMPILE}=$1;
487 } elsif (/^CC=\s*(?:\$\(CROSS_COMPILE\))?(.*?)$/) {
492 # END OF TEMPORARY SECTION
495 die "Insufficient data to reconfigure, please do a normal configuration\n";
499 $config{perlargv} = [ @argvcopy ];
501 my %unsupported_options = ();
504 s /^-no-/no-/; # some people just can't read the instructions
506 # rewrite some options in "enable-..." form
507 s /^-?-?shared$/enable-shared/;
508 s /^sctp$/enable-sctp/;
509 s /^threads$/enable-threads/;
510 s /^zlib$/enable-zlib/;
511 s /^zlib-dynamic$/enable-zlib-dynamic/;
513 if (/^(no|disable|enable|experimental)-(.+)$/)
516 if (!grep { $word =~ /^${_}$/ } @disablables)
518 $unsupported_options{$_} = 1;
522 if (/^no-(.+)$/ || /^disable-(.+)$/)
524 if (!($disabled{$1} eq "experimental"))
526 foreach my $proto ((@tls, @dtls))
528 if ($1 eq "$proto-method")
530 $disabled{"$proto"} = "option($proto-method)";
536 foreach my $proto (@dtls)
538 $disabled{$proto} = "option(dtls)";
543 # Last one of its kind
544 $disabled{"ssl3"} = "option(ssl)";
548 # XXX: Tests will fail if all SSL/TLS
549 # protocols are disabled.
550 foreach my $proto (@tls)
552 $disabled{$proto} = "option(tls)";
557 $disabled{$1} = "option";
561 elsif (/^enable-(.+)$/ || /^experimental-(.+)$/)
564 if ($disabled{$algo} eq "experimental")
566 die "You are requesting an experimental feature; please say 'experimental-$algo' if you are sure\n"
567 unless (/^experimental-/);
568 push @experimental, $algo;
570 delete $disabled{$algo};
572 $threads = 1 if ($algo eq "threads");
574 elsif (/^--strict-warnings$/)
576 $strict_warnings = 1;
580 $build_prefix = "debug_";
582 elsif (/^--release$/)
584 $build_prefix = "release_";
587 { $config{processor}=386; }
594 # No RSAref support any more since it's not needed.
595 # The check for the option is there so scripts aren't
598 elsif (/^nofipscanistercheck$/)
601 $nofipscanistercheck = 1;
609 elsif (/^--prefix=(.*)$/)
612 die "Directory given with --prefix MUST be absolute\n"
613 unless file_name_is_absolute($config{prefix});
615 elsif (/^--api=(.*)$/)
619 elsif (/^--libdir=(.*)$/)
623 elsif (/^--openssldir=(.*)$/)
625 $config{openssldir}=$1;
627 elsif (/^--with-zlib-lib=(.*)$/)
629 $withargs{zlib_lib}=$1;
631 elsif (/^--with-zlib-include=(.*)$/)
633 $withargs{zlib_include}="-I$1";
635 elsif (/^--with-fipslibdir=(.*)$/)
637 $config{fipslibdir}="$1/";
639 elsif (/^--with-baseaddr=(.*)$/)
641 $config{baseaddr}="$1";
643 elsif (/^--cross-compile-prefix=(.*)$/)
645 $config{cross_compile_prefix}=$1;
647 elsif (/^--config=(.*)$/)
651 elsif (/^-[lL](.*)$/ or /^-Wl,/)
657 push @user_defines, $1;
659 else # common if (/^[-+]/), just pass down...
661 $_ =~ s/%([0-9a-f]{1,2})/chr(hex($1))/gei;
662 $user_cflags.=" ".$_;
665 elsif ($_ =~ /^([^:]+):(.+)$/)
667 eval "\$table{\$1} = \"$2\""; # allow $xxx constructs in the string
672 die "target already defined - $target (offending arg: $_)\n" if ($target ne "");
675 unless ($_ eq $target || /^no-/ || /^disable-/)
677 # "no-..." follows later after implied disactivations
678 # have been derived. (Don't take this too seroiusly,
679 # we really only write OPTIONS to the Makefile out of
682 if ($config{options} eq "")
683 { $config{options} = $_; }
685 { $config{options} .= " ".$_; }
688 if (defined($config{api}) && !exists $apitable->{$config{api}}) {
689 die "***** Unsupported api compatibility level: $config{api}\n",
692 if (keys %unsupported_options)
694 die "***** Unsupported options: ",
695 join(", ", keys %unsupported_options), "\n";
701 delete $disabled{"shared"} if ($disabled{"shared"} =~ /^default/);
705 @{$config{dirs}} = grep !/^fips$/, @{$config{dirs}};
708 my @tocheckfor = (keys %disabled);
709 while (@tocheckfor) {
710 my %new_tocheckfor = ();
711 my @cascade_copy = (@disable_cascades);
712 while (@cascade_copy) {
713 my ($test, $descendents) = (shift @cascade_copy, shift @cascade_copy);
714 if (ref($test) eq "CODE" ? $test->() : defined($disabled{$test})) {
716 $new_tocheckfor{$_} => 1; $disabled{$_} = "forced";
717 } grep { !defined($disabled{$_}) } @$descendents;
720 @tocheckfor = (keys %new_tocheckfor);
723 if ($target eq "TABLE") {
724 foreach (sort keys %table) {
725 print_table_entry($_, "TABLE");
730 if ($target eq "LIST") {
731 foreach (sort keys %table) {
732 print $_,"\n" unless $table{$_}->{template};
737 if ($target eq "HASH") {
738 print "%table = (\n";
739 foreach (sort keys %table) {
740 print_table_entry($_, "HASH");
745 # Backward compatibility?
746 if ($target =~ m/^CygWin32(-.*)$/) {
747 $target = "Cygwin".$1;
750 foreach (sort (keys %disabled))
752 $config{options} .= " no-$_";
754 printf " no-%-12s %-10s", $_, "[$disabled{$_}]";
761 { $config{no_shared} = 1; }
764 elsif (/^static-engine$/)
766 elsif (/^zlib-dynamic$/)
771 { @{$config{dirs}} = grep !/^engine$/, @{$config{dirs}}; }
775 ($ALGO = $algo = $_) =~ tr/[\-a-z]/[_A-Z]/;
777 if (/^asm$/ || /^err$/ || /^hw$/ || /^hw-/ || /^async$/
778 || /^autoalginit/ || /^autoerrinit/)
780 push @{$config{openssl_other_defines}}, "OPENSSL_NO_$ALGO";
781 print " OPENSSL_NO_$ALGO";
783 if (/^err$/) { push @user_defines, "OPENSSL_NO_ERR"; }
784 elsif (/^asm$/) { $no_asm = 1; }
788 ($ALGO,$algo) = ("RMD160","rmd160") if ($algo eq "ripemd");
790 push @{$config{openssl_algorithm_defines}}, "OPENSSL_NO_$ALGO";
791 push @{$config{depdefines}}, "OPENSSL_NO_$ALGO";
792 print " OPENSSL_NO_$ALGO";
794 # fix-up crypto/directory name(s)
795 $algo="whrlpool" if $algo eq "whirlpool";
796 $algo="ripemd" if $algo eq "rmd160";
797 @{$config{sdirs}} = grep { $_ ne $algo} @{$config{sdirs}};
806 foreach (sort @experimental)
809 ($ALGO = $_) =~ tr/[a-z]/[A-Z]/;
811 # opensslconf.h will set OPENSSL_NO_... unless OPENSSL_EXPERIMENTAL_... is defined
812 push @{$config{openssl_experimental_defines}}, "OPENSSL_NO_$ALGO";
815 print "Configuring for $target\n";
817 # Support for legacy targets having a name starting with 'debug-'
818 my ($d, $t) = $target =~ m/^(debug-)?(.*)$/;
820 $build_prefix = "debug_";
822 # If we do not find debug-foo in the table, the target is set to foo.
823 if (!$table{$target}) {
827 $config{target} = $target;
828 delete $table{$base_target}->{template}; # or the next test will fail.
829 my %target = ( %{$table{$base_target}}, resolve_config($target) );
831 &usage if (!%target || $target{template});
833 $target{exe_extension}="";
834 $target{exe_extension}=".exe" if ($config{target} eq "Cygwin" || $config{target} eq "DJGPP" || $config{target} =~ /^mingw/);
835 $target{exe_extension}=".nlm" if ($config{target} =~ /netware/);
836 $target{exe_extension}=".pm" if ($config{target} =~ /vos/);
838 $default_ranlib = which("ranlib") || "true";
839 $config{perl} = $ENV{'PERL'} || which("perl5") || which("perl") || "perl";
840 my $make = $ENV{'MAKE'} || "make";
842 $config{cross_compile_prefix} = $ENV{'CROSS_COMPILE'}
843 if $config{cross_compile_prefix} eq "";
845 # Allow environment CC to override compiler...
846 $target{cc} = $ENV{CC} || $target{cc};
848 # For cflags, lflags, plib_lflags, ex_libs and defines, add the debug_
849 # or release_ attributes.
850 # Do it in such a way that no spurious space is appended (hence the grep).
851 $config{defines} = [ @{$target{defines}},
852 @{$target{$build_prefix."defines"}} ];
853 $config{cflags} = join(" ",
854 grep { $_ ne "" } ($target{cflags},
855 $target{$build_prefix."cflags"}));
856 $config{lflags} = join(" ",
857 grep { $_ ne "" } ($target{lflags},
858 $target{$build_prefix."lflags"}));
859 $config{plib_lflags} = join(" ",
860 grep { $_ ne "" } ($target{plib_lflags},
861 $target{$build_prefix."plib_lflags"}));
862 $config{ex_libs} = join(" ",
863 grep { $_ ne "" } ($target{ex_libs},
864 $target{$build_prefix."ex_libs"}));
866 $target{ranlib} = $ENV{'RANLIB'} || $target{ranlib} || $default_ranlib;
867 $target{ar} = $ENV{'AR'} || "ar";
868 $target{arflags} = "" if !defined($target{arflags});
870 # Make sure build_scheme is consistent.
871 $target{build_scheme} = [ $target{build_scheme} ]
872 if ref($target{build_scheme}) ne "ARRAY";
874 ###### TO BE REMOVED BEFORE FINAL RELEASE
876 ###### If the user has chosen --unified, we give it to them.
877 if ($target{build_file} eq "Makefile"
878 && $target{build_scheme}->[0] eq "unixmake"
880 $target{build_scheme} = [ "unified", "unix" ];
883 my ($builder, $builder_platform, @builder_opts) =
884 @{$target{build_scheme}};
886 push @{$config{defines}},
887 map { (my $x = $_) =~ s/^OPENSSL_NO_/OPENSSL_EXPERIMENTAL_/; $x }
888 @{$config{openssl_experimental_defines}};
890 if ($target =~ /^mingw/ && `$target{cc} --target-help 2>&1` =~ m/-mno-cygwin/m)
892 $config{cflags} .= " -mno-cygwin";
893 $target{shared_ldflag} .= " -mno-cygwin";
896 if ($target =~ /linux.*-mips/ && !$no_asm && $user_cflags !~ /-m(ips|arch=)/) {
897 # minimally required architecture flags for assembly modules
898 $config{cflags}="-mips2 $config{cflags}" if ($target =~ /mips32/);
899 $config{cflags}="-mips3 $config{cflags}" if ($target =~ /mips64/);
902 my $no_shared_warn=0;
903 my $no_user_cflags=0;
904 my $no_user_defines=0;
906 # The DSO code currently always implements all functions so that no
907 # applications will have to worry about that from a compilation point
908 # of view. However, the "method"s may return zero unless that platform
909 # has support compiled in for them. Currently each method is enabled
910 # by a define "DSO_<name>" ... we translate the "dso_scheme" config
911 # string entry into using the following logic;
912 if (!$no_dso && $target{dso_scheme} ne "")
914 $target{dso_scheme} =~ tr/[a-z]/[A-Z]/;
915 if ($target{dso_scheme} eq "DLFCN")
917 $config{defines} = [ "DSO_DLFCN", "HAVE_DLFCN_H",
918 @{$config{defines}} ]
920 elsif ($target{dso_scheme} eq "DLFCN_NO_H")
922 $config{defines} = [ "DSO_DLFCN", @{$config{defines}} ]
926 $config{defines} = [ "DSO_$target{dso_scheme}",
927 @{$config{defines}} ]
931 my $thread_cflags = "";
933 if ($target{thread_cflag} ne "(unknown)" && !$no_threads)
935 # If we know how to do it, support threads by default.
938 if ($target{thread_cflag} eq "(unknown)" && $threads)
940 # If the user asked for "threads", [s]he is also expected to
941 # provide any system-dependent compiler options that are
943 if ($no_user_cflags && $no_user_defines)
945 print "You asked for multi-threading support, but didn't\n";
946 print "provide any system-specific compiler options\n";
949 push @thread_defines, "OPENSSL_THREADS";
953 $thread_cflags=" $target{thread_cflag}";
954 push @thread_defines, @{$target{thread_defines}}, "OPENSSL_THREADS";
957 $config{ex_libs}="$libs$config{ex_libs}" if ($libs ne "");
961 @{$config{defines}} = grep !/^[BL]_ENDIAN$/, @{$config{defines}}
967 $config{cflags} = "$thread_cflags $config{cflags}" if $thread_cflags;
968 push @{$config{defines}}, @thread_defines;
969 push @{$config{openssl_thread_defines}}, @thread_defines;
974 push @{$config{defines}}, "ZLIB";
975 if (defined($disabled{"zlib-dynamic"}))
977 if (defined($withargs{zlib_lib}))
979 $config{ex_libs} .= " -L" . $withargs{zlib_lib} . " -lz";
983 $config{ex_libs} .= " -lz";
988 push @{$config{defines}}, "ZLIB_SHARED";
992 # With "deprecated" disable all deprecated features.
993 if (defined($disabled{"deprecated"})) {
994 $config{api} = $maxapi;
997 if ($target{shared_target} eq "")
999 $no_shared_warn = 1 if !$config{no_shared} && !$config{fips};
1000 $config{no_shared} = 1;
1002 if (!$config{no_shared})
1004 if ($target{shared_cflag} ne "")
1006 push @{$config{defines}}, "OPENSSL_PIC";
1007 $config{cflags} = "$target{shared_cflag} $config{cflags}";
1011 if ($builder ne "mk1mf")
1013 # add {no-}static-engine to options to allow mkdef.pl to work without extra arguments
1014 if ($config{no_shared})
1016 push @{$config{openssl_other_defines}}, "OPENSSL_NO_DYNAMIC_ENGINE";
1017 $config{options}.=" static-engine";
1021 push @{$config{openssl_other_defines}}, "OPENSSL_NO_STATIC_ENGINE";
1022 $config{options}.=" no-static-engine";
1029 if ($target{sys_id} ne "")
1031 push @{$config{openssl_sys_defines}}, "OPENSSL_SYS_$target{sys_id}";
1034 if ($target{ranlib} eq "")
1036 $target{ranlib} = $default_ranlib;
1040 $target{cpuid_asm_src}=$table{BASE}->{cpuid_asm_src} if ($config{processor} eq "386");
1041 $target{cpuid_asm_src}.=" uplink.c uplink-x86.s" if (grep { $_ eq "OPENSSL_USE_APPLINK"} @{$config{defines}});
1043 $target{bn_asm_src} =~ s/\w+-gf2m.c// if (defined($disabled{ec2m}));
1045 # bn-586 is the only one implementing bn_*_part_words
1046 push @{$config{defines}}, "OPENSSL_BN_ASM_PART_WORDS" if ($target{bn_asm_src} =~ /bn-586/);
1047 push @{$config{defines}}, "OPENSSL_IA32_SSE2" if (!$no_sse2 && $target{bn_asm_src} =~ /86/);
1049 push @{$config{defines}}, "OPENSSL_BN_ASM_MONT" if ($target{bn_asm_src} =~ /-mont/);
1050 push @{$config{defines}}, "OPENSSL_BN_ASM_MONT5" if ($target{bn_asm_src} =~ /-mont5/);
1051 push @{$config{defines}}, "OPENSSL_BN_ASM_GF2m" if ($target{bn_asm_src} =~ /-gf2m/);
1053 if ($config{fips}) {
1054 push @{$config{openssl_other_defines}}, "OPENSSL_FIPS";
1057 if ($target{sha1_asm_src}) {
1058 push @{$config{defines}}, "SHA1_ASM" if ($target{sha1_asm_src} =~ /sx86/ || $target{sha1_asm_src} =~ /sha1/);
1059 push @{$config{defines}}, "SHA256_ASM" if ($target{sha1_asm_src} =~ /sha256/);
1060 push @{$config{defines}}, "SHA512_ASM" if ($target{sha1_asm_src} =~ /sha512/);
1062 if ($target{md5_asm_src}) {
1063 push @{$config{defines}}, "MD5_ASM";
1065 $target{cast_asm_src}=$table{BASE}->{cast_asm_src} if (!$config{no_shared}); # CAST assembler is not PIC
1066 if ($target{rmd160_asm_src}) {
1067 push @{$config{defines}}, "RMD160_ASM";
1069 if ($target{aes_asm_src}) {
1070 push @{$config{defines}}, "AES_ASM" if ($target{aes_asm_src} =~ m/\baes-/);;
1071 # aes-ctr.fake is not a real file, only indication that assembler
1072 # module implements AES_ctr32_encrypt...
1073 push @{$config{defines}}, "AES_CTR_ASM" if ($target{aes_asm_src} =~ s/\s*aes-ctr\.fake//);
1074 # aes-xts.fake indicates presence of AES_xts_[en|de]crypt...
1075 push @{$config{defines}}, "AES_XTS_ASM" if ($target{aes_asm_src} =~ s/\s*aes-xts\.fake//);
1076 $target{aes_asm_src} =~ s/\s*(vpaes|aesni)-x86\.s//g if ($no_sse2);
1077 push @{$config{defines}}, "VPAES_ASM" if ($target{aes_asm_src} =~ m/vpaes/);
1078 push @{$config{defines}}, "BSAES_ASM" if ($target{aes_asm_src} =~ m/bsaes/);
1080 if ($target{wp_asm_src} =~ /mmx/) {
1081 if ($config{processor} eq "386") {
1082 $target{wp_asm_src}=$table{BASE}->{wp_asm_src};
1083 } elsif (!$disabled{"whirlpool"}) {
1084 $config{cflags}.=" -DWHIRLPOOL_ASM";
1087 if ($target{modes_asm_src} =~ /ghash-/) {
1088 push @{$config{defines}}, "GHASH_ASM";
1090 if ($target{ec_asm_src} =~ /ecp_nistz256/) {
1091 push @{$config{defines}}, "ECP_NISTZ256_ASM";
1093 if ($target{poly1305_asm_src} ne "") {
1094 push @{$config{defines}}, "POLY1305_ASM";
1098 # Is the compiler gcc or clang? $ecc is used below to see if error-checking
1100 my $ecc = $target{cc};
1101 my $ccpcc = "$config{cross_compile_prefix}$target{cc}";
1102 $config{makedepprog} = 'makedepend';
1103 open(PIPE, "$ccpcc --version 2>&1 | head -2 |");
1105 $config{makedepprog} = $ccpcc if /clang|gcc/;
1106 $ecc = "clang" if /clang/;
1107 $ecc = "gcc" if /gcc/;
1111 $config{depflags} =~ s/^\s*//;
1114 # Deal with bn_ops ###################################################
1117 $config{export_var_as_fn} =0;
1118 my $def_int="unsigned int";
1119 $config{rc4_int} =$def_int;
1120 ($config{b64l},$config{b64},$config{b32})=(0,0,1);
1123 foreach (sort split(/\s+/,$target{bn_ops})) {
1124 $count++ if /SIXTY_FOUR_BIT|SIXTY_FOUR_BIT_LONG|THIRTY_TWO_BIT/;
1125 $config{export_var_as_fn}=1 if $_ eq 'EXPORT_VAR_AS_FN';
1126 $config{bn_ll}=1 if $_ eq 'BN_LLONG';
1127 $config{rc4_int}="unsigned char" if $_ eq 'RC4_CHAR';
1128 ($config{b64l},$config{b64},$config{b32})
1129 =(0,1,0) if $_ eq 'SIXTY_FOUR_BIT';
1130 ($config{b64l},$config{b64},$config{b32})
1131 =(1,0,0) if $_ eq 'SIXTY_FOUR_BIT_LONG';
1132 ($config{b64l},$config{b64},$config{b32})
1133 =(0,0,1) if $_ eq 'THIRTY_TWO_BIT';
1135 die "Exactly one of SIXTY_FOUR_BIT|SIXTY_FOUR_BIT_LONG|THIRTY_TWO_BIT can be set in bn_ops\n"
1139 # Hack cflags for better warnings (dev option) #######################
1141 # "Stringify" the C flags string. This permits it to be made part of a string
1142 # and works as well on command lines.
1143 $config{cflags} =~ s/([\\\"])/\\\1/g;
1145 if (defined($config{api})) {
1146 $config{openssl_api_defines} = [ "OPENSSL_MIN_API=".$apitable->{$config{api}} ];
1147 my $apiflag = sprintf("OPENSSL_API_COMPAT=%s", $apitable->{$config{api}});
1148 push @default_depdefines, $apiflag;
1149 push @{$config{defines}}, $apiflag;
1152 if ($strict_warnings)
1155 die "ERROR --strict-warnings requires gcc or clang"
1156 unless $ecc eq 'gcc' || $ecc eq 'clang';
1157 foreach $wopt (split /\s+/, $gcc_devteam_warn)
1159 $config{cflags} .= " $wopt" unless ($config{cflags} =~ /(^|\s)$wopt(\s|$)/)
1161 if ($ecc eq "clang")
1163 foreach $wopt (split /\s+/, $clang_devteam_warn)
1165 $config{cflags} .= " $wopt" unless ($config{cflags} =~ /(^|\s)$wopt(\s|$)/)
1170 unless ($disabled{"crypto-mdebug-backtrace"})
1172 foreach my $wopt (split /\s+/, $memleak_devteam_backtrace)
1174 $config{cflags} .= " $wopt" unless ($config{cflags} =~ /(^|\s)$wopt(\s|$)/)
1176 if ($target =~ /^BSD-/)
1178 $config{ex_libs} .= " -lexecinfo";
1182 if ($user_cflags ne "") { $config{cflags}="$config{cflags}$user_cflags"; }
1183 else { $no_user_cflags=1; }
1184 if (@user_defines) { $config{defines}=[ @{$config{defines}}, @user_defines ]; }
1185 else { $no_user_defines=1; }
1187 # ALL MODIFICATIONS TO %config and %target MUST BE DONE FROM HERE ON
1189 # If we use the unified build, collect information from build.info files
1190 my %unified_info = ();
1192 if ($builder eq "unified") {
1193 # Store the name of the template file we will build the build file from
1194 # in %config. This may be useful for the build file itself.
1195 my $build_file_template =
1196 catfile($srcdir, "Configurations",
1197 $builder_platform."-".$target{build_file}.".tmpl");
1198 $build_file_template =
1199 catfile($srcdir, "Configurations", $target{build_file}.".tmpl")
1200 if (! -f $build_file_template);
1201 $config{build_file_template} = $build_file_template;
1203 use lib catdir(dirname(__FILE__),"util");
1204 use with_fallback qw(Text::Template);
1209 my $relativeto = shift || ".";
1211 $dir = catdir($base,$dir) unless isabsolute($dir);
1213 # Make sure the directories we're building in exists
1216 my $res = abs2rel(absolutedir($dir), rel2abs($relativeto));
1217 #print STDERR "DEBUG[cleandir]: $dir , $base => $res\n";
1224 my $relativeto = shift || ".";
1226 $file = catfile($base,$file) unless isabsolute($file);
1228 my $d = dirname($file);
1229 my $f = basename($file);
1231 # Make sure the directories we're building in exists
1234 my $res = abs2rel(catfile(absolutedir($d), $f), rel2abs($relativeto));
1235 #print STDERR "DEBUG[cleanfile]: $d , $f => $res\n";
1239 my @build_infos = ( [ ".", "build.info" ] );
1240 foreach (@{$config{dirs}}) {
1241 push @build_infos, [ $_, "build.info" ]
1242 if (-f catfile($srcdir, $_, "build.info"));
1244 foreach (@{$config{sdirs}}) {
1245 push @build_infos, [ catdir("crypto", $_), "build.info" ]
1246 if (-f catfile($srcdir, "crypto", $_, "build.info"));
1248 foreach (@{$config{engdirs}}) {
1249 push @build_infos, [ catdir("engines", $_), "build.info" ]
1250 if (-f catfile($srcdir, "engines", $_, "build.info"));
1253 foreach (@build_infos) {
1254 my $sourced = catdir($srcdir, $_->[0]);
1255 my $buildd = catdir($blddir, $_->[0]);
1260 # The basic things we're trying to build
1266 my @intermediates = ();
1274 my %sharednames = ();
1276 my $template = Text::Template->new(TYPE => 'FILE',
1277 SOURCE => catfile($sourced, $f));
1278 die "Something went wrong with $sourced/$f: $!\n" unless $template;
1281 $template->fill_in(HASH => { config => \%config,
1283 builddir => abs2rel($buildd, $blddir),
1284 sourcedir => abs2rel($sourced, $blddir),
1285 buildtop => abs2rel($blddir, $blddir),
1286 sourcetop => abs2rel($srcdir, $blddir) },
1287 DELIMITERS => [ "{-", "-}" ]);
1289 # The top item of this stack has the following values
1290 # -2 positive already run and we found ELSE (following ELSIF should fail)
1291 # -1 positive already run (skip until ENDIF)
1292 # 0 negatives so far (if we're at a condition, check it)
1293 # 1 last was positive (don't skip lines until next ELSE, ELSIF or ENDIF)
1294 # 2 positive ELSE (following ELSIF should fail)
1296 collect_information(
1297 collect_from_array([ @text ],
1298 qr/\\$/ => sub { my $l1 = shift; my $l2 = shift;
1299 $l1 =~ s/\\$//; $l1.$l2 }),
1300 # Info we're looking for
1301 qr/^\s*IF\[((?:\\.|[^\\\]])*)\]\s*$/
1302 => sub { push @skip, !! $1; },
1303 qr/^\s*ELSIF\[((?:\\.|[^\\\]])*)\]\s*$/
1304 => sub { die "ELSIF out of scope" if ! @skip;
1305 die "ELSIF following ELSE" if abs($skip[$#skip]) == 2;
1306 $skip[$#skip] = -1 if $skip[$#skip] != 0;
1307 $skip[$#skip] = !! $1
1308 if $skip[$#skip] == 0; },
1310 => sub { die "ELSE out of scope" if ! @skip;
1311 $skip[$#skip] = -2 if $skip[$#skip] != 0;
1312 $skip[$#skip] = 2 if $skip[$#skip] == 0; },
1314 => sub { die "ENDIF out of scope" if ! @skip;
1316 qr/^\s*PROGRAMS\s*=\s*(.*)\s*$/
1317 => sub { push @programs, split(/\s+/, $1)
1318 if !@skip || $skip[$#skip] > 0 },
1319 qr/^\s*LIBS\s*=\s*(.*)\s*$/
1320 => sub { push @libraries, split(/\s+/, $1)
1321 if !@skip || $skip[$#skip] > 0 },
1322 qr/^\s*ENGINES\s*=\s*(.*)\s*$/
1323 => sub { push @engines, split(/\s+/, $1)
1324 if !@skip || $skip[$#skip] > 0 },
1325 qr/^\s*SCRIPTS\s*=\s*(.*)\s*$/
1326 => sub { push @scripts, split(/\s+/, $1)
1327 if !@skip || $skip[$#skip] > 0 },
1328 qr/^\s*EXTRA\s*=\s*(.*)\s*$/
1329 => sub { push @extra, split(/\s+/, $1)
1330 if !@skip || $skip[$#skip] > 0 },
1332 qr/^\s*ORDINALS\[((?:\\.|[^\\\]])+)\]\s*=\s*(.*)\s*$/,
1333 => sub { push @{$ordinals{$1}}, split(/\s+/, $2)
1334 if !@skip || $skip[$#skip] > 0 },
1335 qr/^\s*SOURCE\[((?:\\.|[^\\\]])+)\]\s*=\s*(.*)\s*$/
1336 => sub { push @{$sources{$1}}, split(/\s+/, $2)
1337 if !@skip || $skip[$#skip] > 0 },
1338 qr/^\s*INCLUDE\[((?:\\.|[^\\\]])+)\]\s*=\s*(.*)\s*$/
1339 => sub { push @{$includes{$1}}, split(/\s+/, $2)
1340 if !@skip || $skip[$#skip] > 0 },
1341 qr/^\s*DEPEND\[((?:\\.|[^\\\]])+)\]\s*=\s*(.*)\s*$/
1342 => sub { push @{$depends{$1}}, split(/\s+/, $2)
1343 if !@skip || $skip[$#skip] > 0 },
1344 qr/^\s*RENAME\[((?:\\.|[^\\\]])+)\]\s*=\s*(.*)\s*$/
1345 => sub { push @{$renames{$1}}, split(/\s+/, $2)
1346 if !@skip || $skip[$#skip] > 0 },
1347 qr/^\s*SHARED_NAME\[((?:\\.|[^\\\]])+)\]\s*=\s*(.*)\s*$/
1348 => sub { push @{$sharednames{$1}}, split(/\s+/, $2)
1349 if !@skip || $skip[$#skip] > 0 },
1350 qr/^\s*BEGINRAW\[((?:\\.|[^\\\]])+)\]\s*$/
1352 my $lineiterator = shift;
1353 my $target_kind = $1;
1354 while (defined $lineiterator->()) {
1356 if (/^\s*ENDRAW\[((?:\\.|[^\\\]])+)\]\s*$/) {
1357 die "ENDRAW doesn't match BEGINRAW"
1358 if $1 ne $target_kind;
1361 next if @skip && $skip[$#skip] <= 0;
1363 if ($target_kind eq $target{build_file}
1364 || $target_kind eq $target{build_file}."(".$builder_platform.")");
1367 qr/^(?:#.*|\s*)$/ => sub { },
1368 "OTHERWISE" => sub { die "Something wrong with this line:\n$_\nat $sourced/$f" }
1370 die "runaway IF?" if (@skip);
1372 foreach (keys %renames) {
1373 die "$_ renamed to more than one thing: "
1374 ,join(" ", @{$renames{$_}}),"\n"
1375 if scalar @{$renames{$_}} > 1;
1376 my $dest = cleanfile($buildd, $_, $blddir);
1377 my $to = cleanfile($buildd, $renames{$_}->[0], $blddir);
1378 die "$dest renamed to more than one thing: "
1379 ,$unified_info{rename}->{$dest}, $to
1380 unless !defined($unified_info{rename}->{$dest})
1381 or $unified_info{rename}->{$dest} eq $to;
1382 $unified_info{rename}->{$dest} = $to;
1385 foreach (@programs) {
1386 my $program = cleanfile($buildd, $_, $blddir);
1387 if ($unified_info{rename}->{$program}) {
1388 $program = $unified_info{rename}->{$program};
1390 $unified_info{programs}->{$program} = 1;
1393 foreach (@libraries) {
1394 my $library = cleanfile($buildd, $_, $blddir);
1395 if ($unified_info{rename}->{$library}) {
1396 $library = $unified_info{rename}->{$library};
1398 $unified_info{libraries}->{$library} = 1;
1401 die <<"EOF" if $config{no_shared} && scalar @engines;
1402 ENGINES can only be used if configured with 'shared'.
1403 This is usually a fault in a build.info file.
1405 foreach (@engines) {
1406 my $library = cleanfile($buildd, $_, $blddir);
1407 if ($unified_info{rename}->{$library}) {
1408 $library = $unified_info{rename}->{$library};
1410 $unified_info{engines}->{$library} = 1;
1413 foreach (@scripts) {
1414 my $script = cleanfile($buildd, $_, $blddir);
1415 if ($unified_info{rename}->{$script}) {
1416 $script = $unified_info{rename}->{$script};
1418 $unified_info{scripts}->{$script} = 1;
1422 my $extra = cleanfile($buildd, $_, $blddir);
1423 $unified_info{extra}->{$extra} = 1;
1426 push @{$unified_info{rawlines}}, @rawlines;
1428 if (!$config{no_shared}) {
1429 # Check sharednames.
1430 foreach (keys %sharednames) {
1431 my $dest = cleanfile($buildd, $_, $blddir);
1432 if ($unified_info{rename}->{$dest}) {
1433 $dest = $unified_info{rename}->{$dest};
1435 die "shared_name for $dest with multiple values: "
1436 ,join(" ", @{$sharednames{$_}}),"\n"
1437 if scalar @{$sharednames{$_}} > 1;
1438 my $to = cleanfile($buildd, $sharednames{$_}->[0], $blddir);
1439 die "shared_name found for a library $dest that isn't defined\n"
1440 unless $unified_info{libraries}->{$dest};
1441 die "shared_name for $dest with multiple values: "
1442 ,$unified_info{sharednames}->{$dest}, ", ", $to
1443 unless !defined($unified_info{sharednames}->{$dest})
1444 or $unified_info{sharednames}->{$dest} eq $to;
1445 $unified_info{sharednames}->{$dest} = $to;
1448 # Additionally, we set up sharednames for libraries that don't
1449 # have any, as themselves.
1450 foreach (keys %{$unified_info{libraries}}) {
1451 if (!defined $unified_info{sharednames}->{$_}) {
1452 $unified_info{sharednames}->{$_} = $_
1457 foreach (keys %ordinals) {
1459 my $ddest = cleanfile($buildd, $_, $blddir);
1460 if ($unified_info{rename}->{$ddest}) {
1461 $ddest = $unified_info{rename}->{$ddest};
1463 foreach (@{$ordinals{$dest}}) {
1464 my %known_ordinals =
1467 cleanfile($sourced, catfile("util", "libeay.num"), $blddir),
1469 cleanfile($sourced, catfile("util", "ssleay.num"), $blddir)
1471 my $o = $known_ordinals{$_};
1472 die "Ordinals for $ddest defined more than once\n"
1473 if $unified_info{ordinals}->{$ddest};
1474 $unified_info{ordinals}->{$ddest} = [ $_, $o ];
1478 foreach (keys %sources) {
1480 my $ddest = cleanfile($buildd, $_, $blddir);
1481 if ($unified_info{rename}->{$ddest}) {
1482 $ddest = $unified_info{rename}->{$ddest};
1484 foreach (@{$sources{$dest}}) {
1485 my $s = cleanfile($sourced, $_, $blddir);
1487 # If it isn't in the source tree, we assume it's generated
1490 $s = cleanfile($buildd, $_, $blddir);
1492 # We recognise C and asm files
1493 if ($s =~ /\.[csS]\b$/) {
1494 (my $o = $_) =~ s/\.[csS]\b$/.o/;
1495 $o = cleanfile($buildd, $o, $blddir);
1496 $unified_info{sources}->{$ddest}->{$o} = 1;
1497 $unified_info{sources}->{$o}->{$s} = 1;
1499 $unified_info{sources}->{$ddest}->{$s} = 1;
1504 foreach (keys %depends) {
1506 my $ddest = cleanfile($buildd, $_, $blddir);
1507 if ($unified_info{rename}->{$ddest}) {
1508 $ddest = $unified_info{rename}->{$ddest};
1510 foreach (@{$depends{$dest}}) {
1511 my $d = cleanfile($sourced, $_, $blddir);
1513 # If we know it's generated, or assume it is because we can't
1514 # find it in the source tree, we set file we depend on to be
1515 # in the build tree rather than the source tree, and assume
1516 # and that there are lines to build it in a BEGINRAW..ENDRAW
1517 # section or in the Makefile template.
1519 || !(grep { $d eq $_ }
1520 map { cleanfile($srcdir, $_, $blddir) }
1521 (@generated_headers, @generated_by_make_headers))) {
1522 $d = cleanfile($buildd, $_, $blddir);
1524 # Take note if the file to depend on is being renamed
1525 if ($unified_info{rename}->{$d}) {
1526 $d = $unified_info{rename}->{$d};
1528 $unified_info{depends}->{$ddest}->{$d} = 1;
1529 # If we depend on a header file, let's make sure it
1532 my $i = dirname($d);
1533 push @{$unified_info{includes}->{$ddest}}, $i
1534 unless grep { $_ eq $i } @{$unified_info{includes}->{$ddest}};
1539 foreach (keys %includes) {
1541 my $ddest = cleanfile($buildd, $_, $blddir);
1542 if ($unified_info{rename}->{$ddest}) {
1543 $ddest = $unified_info{rename}->{$ddest};
1545 foreach (@{$includes{$dest}}) {
1546 my $i = cleandir($sourced, $_, $blddir);
1547 push @{$unified_info{includes}->{$ddest}}, $i
1548 unless grep { $_ eq $i } @{$unified_info{includes}->{$ddest}};
1553 ### Make unified_info a bit more efficient
1554 # One level structures
1555 foreach (("programs", "libraries", "engines", "scripts", "extra")) {
1556 $unified_info{$_} = [ sort keys %{$unified_info{$_}} ];
1558 # Two level structures
1559 foreach my $l1 (("sources", "ldadd", "depends")) {
1560 foreach my $l2 (sort keys %{$unified_info{$l1}}) {
1561 $unified_info{$l1}->{$l2} =
1562 [ sort keys %{$unified_info{$l1}->{$l2}} ];
1567 # For the schemes that need it, we provide the old *_obj configs
1568 # from the *_asm_obj ones
1569 foreach (grep /_asm_src$/, keys %target) {
1571 (my $obj = $_) =~ s/_asm_src$/_obj/;
1572 ($target{$obj} = $target{$src}) =~ s/\.[csS]\b/.o/g;
1575 # Write down our configuration where it fits #########################
1577 open(OUT,">configdata.pm") || die "unable to create configdata.pm: $!\n";
1585 #use vars qw(\@ISA \@EXPORT);
1586 our \@ISA = qw(Exporter);
1587 our \@EXPORT = qw(\%config \%target %withargs %unified_info);
1590 print OUT "our %config = (\n";
1591 foreach (sort keys %config) {
1592 if (ref($config{$_}) eq "ARRAY") {
1593 print OUT " ", $_, " => [ ", join(", ",
1594 map { quotify("perl", $_) }
1595 @{$config{$_}}), " ],\n";
1597 print OUT " ", $_, " => ", quotify("perl", $config{$_}), ",\n"
1604 print OUT "our %target = (\n";
1605 foreach (sort keys %target) {
1606 if (ref($target{$_}) eq "ARRAY") {
1607 print OUT " ", $_, " => [ ", join(", ",
1608 map { quotify("perl", $_) }
1609 @{$target{$_}}), " ],\n";
1611 print OUT " ", $_, " => ", quotify("perl", $target{$_}), ",\n"
1618 print OUT "our \%available_protocols = (\n";
1619 print OUT " tls => [ ", join(", ", map { quotify("perl", $_) } @tls), " ],\n";
1620 print OUT " dtls => [ ", join(", ", map { quotify("perl", $_) } @dtls), " ],\n";
1625 print OUT "our \%disabled = (\n";
1626 foreach (sort keys %disabled) {
1627 print OUT " ", quotify("perl", $_), " => ", quotify("perl", $disabled{$_}), ",\n";
1633 print OUT "our %withargs = (\n";
1634 foreach (sort keys %withargs) {
1635 if (ref($withargs{$_}) eq "ARRAY") {
1636 print OUT " ", $_, " => [ ", join(", ",
1637 map { quotify("perl", $_) }
1638 @{$withargs{$_}}), " ],\n";
1640 print OUT " ", $_, " => ", quotify("perl", $withargs{$_}), ",\n"
1647 if ($builder eq "unified") {
1652 if (ref $_ eq "ARRAY") {
1653 print OUT " "x$indent, "[\n";
1655 $recurse->($indent + 4, $_);
1657 print OUT " "x$indent, "],\n";
1658 } elsif (ref $_ eq "HASH") {
1660 print OUT " "x$indent, "{\n";
1661 foreach (sort keys %h) {
1662 if (ref $h{$_} eq "") {
1663 print OUT " "x($indent + 4), quotify("perl", $_), " => ", quotify("perl", $h{$_}), ",\n";
1665 print OUT " "x($indent + 4), quotify("perl", $_), " =>\n";
1666 $recurse->($indent + 8, $h{$_});
1669 print OUT " "x$indent, "},\n";
1671 print OUT " "x$indent, quotify("perl", $_), ",\n";
1675 print OUT "our %unified_info = (\n";
1676 foreach (sort keys %unified_info) {
1677 if (ref $unified_info{$_} eq "") {
1678 print OUT " "x4, quotify("perl", $_), " => ", quotify("perl", $unified_info{$_}), ",\n";
1680 print OUT " "x4, quotify("perl", $_), " =>\n";
1681 $recurse->(8, $unified_info{$_});
1692 die <<"EOF" if $builder ne "unified" && $srcdir ne $blddir;
1694 ***** Trying building anywhere else than in the source tree will not
1695 ***** work for target $config{target}. To make it possible, it needs
1696 ***** to use the "unified" build scheme.
1700 print "IsMK1MF =", ($builder eq "mk1mf" ? "yes" : "no"), "\n";
1701 print "CC =$target{cc}\n";
1702 print "CFLAG =$config{cflags}\n";
1703 print "DEFINES =",join(" ", @{$config{defines}}),"\n";
1704 print "LFLAG =$config{lflags}\n";
1705 print "PLIB_LFLAG =$config{plib_lflags}\n";
1706 print "EX_LIBS =$config{ex_libs}\n";
1707 print "CPUID_OBJ =$target{cpuid_obj}\n";
1708 print "BN_ASM =$target{bn_obj}\n";
1709 print "EC_ASM =$target{ec_obj}\n";
1710 print "DES_ENC =$target{des_obj}\n";
1711 print "AES_ENC =$target{aes_obj}\n";
1712 print "BF_ENC =$target{bf_obj}\n";
1713 print "CAST_ENC =$target{cast_obj}\n";
1714 print "RC4_ENC =$target{rc4_obj}\n";
1715 print "RC5_ENC =$target{rc5_obj}\n";
1716 print "MD5_OBJ_ASM =$target{md5_obj}\n";
1717 print "SHA1_OBJ_ASM =$target{sha1_obj}\n";
1718 print "RMD160_OBJ_ASM=$target{rmd160_obj}\n";
1719 print "CMLL_ENC =$target{cmll_obj}\n";
1720 print "MODES_OBJ =$target{modes_obj}\n";
1721 print "PADLOCK_OBJ =$target{padlock_obj}\n";
1722 print "CHACHA_ENC =$target{chacha_obj}\n";
1723 print "POLY1305_OBJ =$target{poly1305_obj}\n";
1724 print "PROCESSOR =$config{processor}\n";
1725 print "RANLIB =$target{ranlib}\n";
1726 print "ARFLAGS =$target{arflags}\n";
1727 print "PERL =$config{perl}\n";
1729 print "SIXTY_FOUR_BIT_LONG mode\n" if $config{b64l};
1730 print "SIXTY_FOUR_BIT mode\n" if $config{b64};
1731 print "THIRTY_TWO_BIT mode\n" if $config{b32};
1732 print "BN_LLONG mode\n" if $config{bn_ll};
1733 print "RC4 uses $config{rc4_int}\n" if $config{rc4_int} != $def_int;
1735 for (@generated_headers) {
1736 mkpath(catdir($blddir, dirname($_)));
1737 run_dofile(catfile($blddir, $_),
1738 catfile($srcdir, $_.".in"));
1742 ### When the old "unixmake" scheme goes away, so does this function
1744 sub build_Makefile {
1745 run_dofile("Makefile","Makefile.in");
1747 # Copy all Makefile.in to Makefile (except top-level)
1756 return if ($_ ne "Makefile.in" || $File::Find::dir eq ".");
1757 my $in = IO::File->new($_, "r") or
1758 die sprintf "Error reading Makefile.in in %s: !$\n",
1760 my $out = IO::File->new("Makefile", "w") or
1761 die sprintf "Error writing Makefile in %s: !$\n",
1763 print $out "# Generated from $_, do not edit\n";
1764 while (my $line = <$in>) { print $out $line }
1766 die sprintf "Error reading Makefile.in in %s: !$\n",
1769 die sprintf "Error writing Makefile in %s: !$\n",
1778 run_dofile(catfile($blddir, $target{build_file}),
1779 $config{build_file_template},
1780 catfile($srcdir, "Configurations", "common.tmpl"));
1785 run_dofile("util/domd", "util/domd.in");
1786 chmod 0755, "util/domd";
1789 my $platform = shift;
1790 # The only reason we do this is to have something to build MINFO from
1793 # create the ms/version32.rc file if needed
1794 if ($platform ne "netware") {
1795 my ($v1, $v2, $v3, $v4);
1796 if ($config{version_num} =~ /^0x([0-9a-f]{1})([0-9a-f]{2})([0-9a-f]{2})([0-9a-f]{2})([0-9a-f]{1})L$/i) {
1802 open (OUT,">ms/version32.rc") || die "Can't open ms/version32.rc";
1809 FILEVERSION $v1,$v2,$v3,$v4
1810 PRODUCTVERSION $v1,$v2,$v3,$v4
1817 FILEOS VOS__WINDOWS32
1821 BLOCK "StringFileInfo"
1826 VALUE "CompanyName", "The OpenSSL Project, http://www.openssl.org/\\0"
1827 VALUE "FileDescription", "OpenSSL Shared Library\\0"
1828 VALUE "FileVersion", "$config{version}\\0"
1830 VALUE "InternalName", "libeay32\\0"
1831 VALUE "OriginalFilename", "libeay32.dll\\0"
1833 VALUE "InternalName", "ssleay32\\0"
1834 VALUE "OriginalFilename", "ssleay32.dll\\0"
1836 VALUE "ProductName", "The OpenSSL Toolkit\\0"
1837 VALUE "ProductVersion", "$config{version}\\0"
1839 //VALUE "Comments", "\\0"
1840 VALUE "LegalCopyright", "Copyright © 1998-2015 The OpenSSL Project. Copyright © 1995-1998 Eric A. Young, Tim J. Hudson. All rights reserved.\\0"
1841 //VALUE "LegalTrademarks", "\\0"
1842 //VALUE "PrivateBuild", "\\0"
1843 //VALUE "SpecialBuild", "\\0"
1848 VALUE "Translation", 0x409, 0x4b0
1857 $builders{$builder}->($builder_platform, @builder_opts);
1861 Configured for $target.
1864 print <<"EOF" if (!$no_threads && !$threads);
1866 The library could not be configured for supporting multi-threaded
1867 applications as the compiler options required on this system are not known.
1868 See file INSTALL for details if you need multi-threading.
1871 print <<"EOF" if ($no_shared_warn);
1873 You gave the option 'shared', which is not supported on this platform, so
1874 we will pretend you gave the option 'no-shared'. If you know how to implement
1875 shared libraries, please let us know (but please first make sure you have
1876 tried with a current version of OpenSSL).
1879 ###### TO BE REMOVED BEFORE FINAL RELEASE
1881 ###### If the user hasn't chosen --unified, try to nudge them.
1882 if ($target{build_file} eq "Makefile"
1883 && $target{build_scheme}->[0] eq "unixmake"
1886 my $plausible_builddir =
1887 abs2rel(rel2abs("../_openssl-build_$target"),rel2abs("."));
1888 my $plausible_to_sourcedir =
1889 abs2rel(rel2abs("."),rel2abs("../_openssl-build_$target"));
1892 ----------------------------------------------------------------------
1893 Please consider configuring with the flag --unified .
1894 It's to test out a new "unified" building system.
1896 One cool feature is that you can have your build directory elsewhere,
1899 make clean # Clean the current configuration away
1900 mkdir $plausible_builddir
1901 cd $plausible_builddir
1902 $plausible_to_sourcedir/config --unified
1906 Please report any problem you have.
1907 ----------------------------------------------------------------------
1914 ######################################################################
1916 # Helpers and utility functions
1919 # Configuration file reading #########################################
1921 # Helper function to implement conditional inheritance depending on the
1922 # value of $no_asm. Used in inherit_from values as follows:
1924 # inherit_from => [ "template", asm("asm_tmpl") ]
1933 # Helper function to implement adding values to already existing configuration
1934 # values. It handles elements that are ARRAYs, CODEs and scalars
1936 my $separator = shift;
1938 # If there's any ARRAY in the collection of values OR the separator
1939 # is undef, we will return an ARRAY of combined values, otherwise a
1940 # string of joined values with $separator as the separator.
1941 my $found_array = !defined($separator);
1945 if (ref($_) eq "ARRAY") {
1956 join($separator, @values);
1960 my $separator = shift;
1962 sub { _add($separator, @x, @_) };
1965 my $separator = shift;
1967 sub { _add($separator, @_, @x) };
1970 # configuration reader, evaluates the input file as a perl script and expects
1971 # it to fill %targets with target configurations. Those are then added to
1975 open(CONFFILE, "< $fname")
1976 or die "Can't open configuration file '$fname'!\n";
1979 my $content = <CONFFILE>;
1984 local %table = %::table; # Protect %table from tampering
1990 # For each target, check that it's configured with a hash table.
1991 foreach (keys %targets) {
1992 if (ref($targets{$_}) ne "HASH") {
1993 if (ref($targets{$_}) eq "") {
1994 warn "Deprecated target configuration for $_, ignoring...\n";
1996 warn "Misconfigured target configuration for $_ (should be a hash table), ignoring...\n";
1998 delete $targets{$_};
2002 %table = (%table, %targets);
2006 # configuration resolver. Will only resolve all the lazy evalutation
2007 # codeblocks for the chozen target and all those it inherits from,
2009 sub resolve_config {
2011 my @breadcrumbs = @_;
2013 if (grep { $_ eq $target } @breadcrumbs) {
2014 die "inherit_from loop! target backtrace:\n "
2015 ,$target,"\n ",join("\n ", @breadcrumbs),"\n";
2018 if (!defined($table{$target})) {
2019 warn "Warning! target $target doesn't exist!\n";
2022 # Recurse through all inheritances. They will be resolved on the
2023 # fly, so when this operation is done, they will all just be a
2024 # bunch of attributes with string values.
2025 # What we get here, though, are keys with references to lists of
2026 # the combined values of them all. We will deal with lists after
2027 # this stage is done.
2028 my %combined_inheritance = ();
2029 if ($table{$target}->{inherit_from}) {
2031 map { ref($_) eq "CODE" ? $_->() : $_ } @{$table{$target}->{inherit_from}};
2032 foreach (@inherit_from) {
2033 my %inherited_config = resolve_config($_, $target, @breadcrumbs);
2035 # 'template' is a marker that's considered private to
2036 # the config that had it.
2037 delete $inherited_config{template};
2040 if (!$combined_inheritance{$_}) {
2041 $combined_inheritance{$_} = [];
2043 push @{$combined_inheritance{$_}}, $inherited_config{$_};
2044 } keys %inherited_config;
2048 # We won't need inherit_from in this target any more, since we've
2049 # resolved all the inheritances that lead to this
2050 delete $table{$target}->{inherit_from};
2052 # Now is the time to deal with those lists. Here's the place to
2053 # decide what shall be done with those lists, all based on the
2054 # values of the target we're currently dealing with.
2055 # - If a value is a coderef, it will be executed with the list of
2056 # inherited values as arguments.
2057 # - If the corresponding key doesn't have a value at all or is the
2058 # emoty string, the inherited value list will be run through the
2059 # default combiner (below), and the result becomes this target's
2061 # - Otherwise, this target's value is assumed to be a string that
2062 # will simply override the inherited list of values.
2063 my $default_combiner = add(" ");
2066 map { $_ => 1 } (keys %combined_inheritance,
2067 keys %{$table{$target}});
2068 foreach (sort keys %all_keys) {
2070 # Current target doesn't have a value for the current key?
2071 # Assign it the default combiner, the rest of this loop body
2072 # will handle it just like any other coderef.
2073 if (!exists $table{$target}->{$_}) {
2074 $table{$target}->{$_} = $default_combiner;
2077 my $valuetype = ref($table{$target}->{$_});
2078 if ($valuetype eq "CODE") {
2079 # CODE reference, execute it with the inherited values as
2081 $table{$target}->{$_} =
2082 $table{$target}->{$_}->(@{$combined_inheritance{$_}});
2083 } elsif ($valuetype eq "ARRAY" || $valuetype eq "") {
2084 # ARRAY or Scalar, just leave it as is.
2086 # Some other type of reference that we don't handle.
2087 # Better to abort at this point.
2088 die "cannot handle reference type $valuetype,"
2089 ," found in target $target -> $_\n";
2093 # Finally done, return the result.
2094 return %{$table{$target}};
2099 print STDERR $usage;
2100 print STDERR "\npick os/compiler from:\n";
2104 foreach $i (sort keys %table)
2106 next if $table{$i}->{template};
2107 next if $i =~ /^debug/;
2108 $k += length($i) + 1;
2114 print STDERR $i . " ";
2116 foreach $i (sort keys %table)
2118 next if $table{$i}->{template};
2119 next if $i !~ /^debug/;
2120 $k += length($i) + 1;
2126 print STDERR $i . " ";
2128 print STDERR "\n\nNOTE: If in doubt, on Unix-ish systems use './config'.\n";
2137 unlink $out || warn "Can't remove $out, $!"
2139 foreach (@templates) {
2140 die "Can't open $_, $!" unless -f $_;
2142 my $cmd = "$config{perl} \"-I.\" \"-Mconfigdata\" $dofile -o\"Configure\" \"".join("\" \"",@templates)."\" > \"$out.new\"";
2143 #print STDERR "DEBUG[run_dofile]: \$cmd = $cmd\n";
2146 rename("$out.new", $out) || die "Can't rename $out.new, $!";
2149 # Configuration printer ##############################################
2151 sub print_table_entry
2154 my %target = resolve_config($target);
2157 # Don't print the templates
2158 return if $target{template};
2176 "debug_plib_lflags",
2179 "release_plib_lflags",
2214 if ($type eq "TABLE") {
2216 print "*** $target\n";
2217 printf "\$%-12s = %s\n", $_, $target{$_} foreach (@sequence);
2218 } elsif ($type eq "HASH") {
2220 length((sort { length($a) <=> length($b) } @sequence)[-1]);
2221 print " '$target' => {\n";
2222 foreach (@sequence) {
2224 print " '",$_,"'"," " x ($largest - length($_))," => '",$target{$_},"',\n";
2231 # Utility routines ###################################################
2233 # On VMS, if the given file is a logical name, File::Spec::Functions
2234 # will consider it an absolute path. There are cases when we want a
2235 # purely syntactic check without checking the environment.
2239 # On non-platforms, we just use file_name_is_absolute().
2240 return file_name_is_absolute($file) unless $^O eq "VMS";
2242 # If the file spec includes a device or a directpry spec,
2243 # file_name_is_absolute() is perfectly safe.
2244 return file_name_is_absolute($file) if $file =~ m|[:\[]|;
2246 # Here, we know the given file spec isn't absolute
2250 # Makes a directory absolute and cleans out /../ in paths like foo/../bar
2251 # On some platforms, this uses rel2abs(), while on others, realpath() is used.
2252 # realpath() requires that at least all path components except the last is an
2253 # existing directory. On VMS, the last component of the directory spec must
2258 # realpath() is quite buggy on VMS. It uses LIB$FID_TO_NAME, which
2259 # will return the volume name for the device, no matter what. Also,
2260 # it will return an incorrect directory spec if the argument is a
2261 # directory that doesn't exist.
2263 return rel2abs($dir);
2266 # We use realpath() on Unix, since no other will properly clean out
2268 use Cwd qw/realpath/;
2270 return realpath($dir);
2277 foreach $path (split /:/, $ENV{PATH})
2279 if (-f "$path/$name$target{exe_extension}" and -x _)
2281 return "$path/$name$target{exe_extension}" unless ($name eq "perl" and
2282 system("$path/$name$target{exe_extension} -e " . '\'exit($]<5.0);\''));
2289 perl => sub { my $x = shift;
2290 $x =~ s/([\\\$\@"])/\\$1/g;
2291 return '"'.$x.'"'; },
2295 defined($processors{$for}) ? $processors{$for} : sub { shift; };
2297 map { $processor->($_); } @_;
2300 # collect_from_file($filename, $line_concat_cond_re, $line_concat)
2301 # $filename is a file name to read from
2302 # $line_concat_cond_re is a regexp detecting a line continuation ending
2303 # $line_concat is a CODEref that takes care of concatenating two lines
2304 sub collect_from_file {
2305 my $filename = shift;
2306 my $line_concat_cond_re = shift;
2307 my $line_concat = shift;
2309 open my $fh, $filename || die "unable to read $filename: $!\n";
2311 my $saved_line = "";
2315 if (defined $line_concat) {
2316 $_ = $line_concat->($saved_line, $_);
2319 if (defined $line_concat_cond_re && /$line_concat_cond_re/) {
2325 die "$filename ending with continuation line\n" if $_;
2331 # collect_from_array($array, $line_concat_cond_re, $line_concat)
2332 # $array is an ARRAYref of lines
2333 # $line_concat_cond_re is a regexp detecting a line continuation ending
2334 # $line_concat is a CODEref that takes care of concatenating two lines
2335 sub collect_from_array {
2337 my $line_concat_cond_re = shift;
2338 my $line_concat = shift;
2339 my @array = (@$array);
2342 my $saved_line = "";
2344 while (defined($_ = shift @array)) {
2346 if (defined $line_concat) {
2347 $_ = $line_concat->($saved_line, $_);
2350 if (defined $line_concat_cond_re && /$line_concat_cond_re/) {
2356 die "input text ending with continuation line\n" if $_;
2361 # collect_information($lineiterator, $line_continue, $regexp => $CODEref, ...)
2362 # $lineiterator is a CODEref that delivers one line at a time.
2363 # All following arguments are regex/CODEref pairs, where the regexp detects a
2364 # line and the CODEref does something with the result of the regexp.
2365 sub collect_information {
2366 my $lineiterator = shift;
2367 my %collectors = @_;
2369 while(defined($_ = $lineiterator->())) {
2372 foreach my $re (keys %collectors) {
2373 if ($re ne "OTHERWISE" && /$re/) {
2374 $collectors{$re}->($lineiterator);
2378 if ($collectors{"OTHERWISE"}) {
2379 $collectors{"OTHERWISE"}->($lineiterator, $_)
2380 unless $found || !defined $collectors{"OTHERWISE"};