Fix last-resort depth 0 check when the chain has multiple certificates
[openssl.git] / Configure
1 #! /usr/bin/env perl
2 # -*- mode: perl; -*-
3
4 ##
5 ##  Configure -- OpenSSL source tree configuration script
6 ##  If editing this file, run this command before committing
7 ##      make -f Makefile.in TABLE
8 ##
9
10 require 5.000;
11 use strict;
12 use File::Basename;
13 use File::Spec::Functions;
14
15 # see INSTALL for instructions.
16
17 my $usage="Usage: Configure [no-<cipher> ...] [enable-<cipher> ...] [experimental-<cipher> ...] [-Dxxx] [-lxxx] [-Lxxx] [-fxxx] [-Kxxx] [no-hw-xxx|no-hw] [[no-]threads] [[no-]shared] [[no-]zlib|zlib-dynamic] [no-asm] [no-dso] [no-egd] [sctp] [386] [--prefix=DIR] [--openssldir=OPENSSLDIR] [--with-xxx[=vvv]] [--test-sanity] [--config=FILE] os/compiler[:flags]\n";
18
19 # Options:
20 #
21 # --config      add the given configuration file, which will be read after
22 #               any "Configurations*" files that are found in the same
23 #               directory as this script.
24 # --openssldir  install OpenSSL in OPENSSLDIR (Default: DIR/ssl if the
25 #               --prefix option is given; /usr/local/ssl otherwise)
26 # --prefix      prefix for the OpenSSL include, lib and bin directories
27 #               (Default: the OPENSSLDIR directory)
28 #
29 # --install_prefix  Additional prefix for package builders (empty by
30 #               default).  This needn't be set in advance, you can
31 #               just as well use "make INSTALL_PREFIX=/whatever install".
32 #
33 # --test-sanity Make a number of sanity checks on the data in this file.
34 #               This is a debugging tool for OpenSSL developers.
35 #
36 # --cross-compile-prefix Add specified prefix to binutils components.
37 #
38 # --api         One of 0.9.8, 1.0.0 or 1.1.0.  Do not compile support for
39 #               interfaces deprecated as of the specified OpenSSL version.
40 #
41 # no-hw-xxx     do not compile support for specific crypto hardware.
42 #               Generic OpenSSL-style methods relating to this support
43 #               are always compiled but return NULL if the hardware
44 #               support isn't compiled.
45 # no-hw         do not compile support for any crypto hardware.
46 # [no-]threads  [don't] try to create a library that is suitable for
47 #               multithreaded applications (default is "threads" if we
48 #               know how to do it)
49 # [no-]shared   [don't] try to create shared libraries when supported.
50 # no-asm        do not use assembler
51 # no-dso        do not compile in any native shared-library methods. This
52 #               will ensure that all methods just return NULL.
53 # no-egd        do not compile support for the entropy-gathering daemon APIs
54 # [no-]zlib     [don't] compile support for zlib compression.
55 # zlib-dynamic  Like "zlib", but the zlib library is expected to be a shared
56 #               library and will be loaded in run-time by the OpenSSL library.
57 # sctp          include SCTP support
58 # 386           generate 80386 code
59 # no-sse2       disables IA-32 SSE2 code, above option implies no-sse2
60 # no-<cipher>   build without specified algorithm (rsa, idea, rc5, ...)
61 # -<xxx> +<xxx> compiler options are passed through
62 #
63 # DEBUG_SAFESTACK use type-safe stacks to enforce type-safety on stack items
64 #               provided to stack calls. Generates unique stack functions for
65 #               each possible stack type.
66 # DES_PTR       use pointer lookup vs arrays in the DES in crypto/des/des_locl.h
67 # DES_RISC1     use different DES_ENCRYPT macro that helps reduce register
68 #               dependancies but needs to more registers, good for RISC CPU's
69 # DES_RISC2     A different RISC variant.
70 # DES_UNROLL    unroll the inner DES loop, sometimes helps, somtimes hinders.
71 # DES_INT       use 'int' instead of 'long' for DES_LONG in crypto/des/des.h
72 #               This is used on the DEC Alpha where long is 8 bytes
73 #               and int is 4
74 # BN_LLONG      use the type 'long long' in crypto/bn/bn.h
75 # MD2_CHAR      use 'char' instead of 'int' for MD2_INT in crypto/md2/md2.h
76 # MD2_LONG      use 'long' instead of 'int' for MD2_INT in crypto/md2/md2.h
77 # IDEA_SHORT    use 'short' instead of 'int' for IDEA_INT in crypto/idea/idea.h
78 # IDEA_LONG     use 'long' instead of 'int' for IDEA_INT in crypto/idea/idea.h
79 # RC2_SHORT     use 'short' instead of 'int' for RC2_INT in crypto/rc2/rc2.h
80 # RC2_LONG      use 'long' instead of 'int' for RC2_INT in crypto/rc2/rc2.h
81 # RC4_CHAR      use 'char' instead of 'int' for RC4_INT in crypto/rc4/rc4.h
82 # RC4_LONG      use 'long' instead of 'int' for RC4_INT in crypto/rc4/rc4.h
83 # RC4_INDEX     define RC4_INDEX in crypto/rc4/rc4_locl.h.  This turns on
84 #               array lookups instead of pointer use.
85 # RC4_CHUNK     enables code that handles data aligned at long (natural CPU
86 #               word) boundary.
87 # RC4_CHUNK_LL  enables code that handles data aligned at long long boundary
88 #               (intended for 64-bit CPUs running 32-bit OS).
89 # BF_PTR        use 'pointer arithmatic' for Blowfish (unsafe on Alpha).
90 # BF_PTR2       intel specific version (generic version is more efficient).
91 #
92 # Following are set automatically by this script
93 #
94 # MD5_ASM       use some extra md5 assember,
95 # SHA1_ASM      use some extra sha1 assember, must define L_ENDIAN for x86
96 # RMD160_ASM    use some extra ripemd160 assember,
97 # SHA256_ASM    sha256_block is implemented in assembler
98 # SHA512_ASM    sha512_block is implemented in assembler
99 # AES_ASM       ASE_[en|de]crypt is implemented in assembler
100
101 # Minimum warning options... any contributions to OpenSSL should at least get
102 # past these.
103
104 my $gcc_devteam_warn = "-Wall -pedantic -DPEDANTIC -Wno-long-long -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wtype-limits -Werror -DREF_CHECK -DDEBUG_UNUSED";
105
106 # These are used in addition to $gcc_devteam_warn when the compiler is clang.
107 # TODO(openssl-team): fix problems and investigate if (at least) the
108 # following warnings can also be enabled:
109 # -Wswitch-enum, -Wunused-macros, -Wmissing-field-initializers,
110 # -Wcast-align,
111 # -Wunreachable-code -Wunused-parameter -Wlanguage-extension-token
112 # -Wextended-offsetof
113 my $clang_devteam_warn = "-Wno-unused-parameter -Wno-missing-field-initializers -Wno-language-extension-token -Wno-extended-offsetof -Wconditional-uninitialized -Qunused-arguments -Wincompatible-pointer-types-discards-qualifiers -Wmissing-variable-declarations";
114
115 # Warn that "make depend" should be run?
116 my $warn_make_depend = 0;
117
118 # These are used in addition to $gcc_devteam_warn unless this is a mingw build.
119 # This adds backtrace information to the memory leak info.
120 my $memleak_devteam_backtrace = "-rdynamic -DCRYPTO_MDEBUG_BACKTRACE";
121
122
123 my $strict_warnings = 0;
124
125 my $x86_gcc_des="DES_PTR DES_RISC1 DES_UNROLL";
126
127 # MD2_CHAR slags pentium pros
128 my $x86_gcc_opts="RC4_INDEX MD2_INT";
129
130 #$bits1="SIXTEEN_BIT ";
131 #$bits2="THIRTY_TWO_BIT ";
132 my $bits1="THIRTY_TWO_BIT ";
133 my $bits2="SIXTY_FOUR_BIT ";
134
135 # As for $BSDthreads. Idea is to maintain "collective" set of flags,
136 # which would cover all BSD flavors. -pthread applies to them all,
137 # but is treated differently. OpenBSD expands is as -D_POSIX_THREAD
138 # -lc_r, which is sufficient. FreeBSD 4.x expands it as -lc_r,
139 # which has to be accompanied by explicit -D_THREAD_SAFE and
140 # sometimes -D_REENTRANT. FreeBSD 5.x expands it as -lc_r, which
141 # seems to be sufficient?
142 my $BSDthreads="-pthread -D_THREAD_SAFE -D_REENTRANT";
143
144 #
145 # API compability name to version number mapping.
146 #
147 my $maxapi = "1.1.0";           # API for "no-deprecated" builds
148 my $apitable = {
149     "1.1.0" => "0x10100000L",
150     "1.0.0" => "0x10000000L",
151     "0.9.8" => "0x00908000L",
152 };
153
154 # table of known configurations, read in from files
155 #
156 # The content of each entry can take one of two forms:
157 #
158 # - old style config-string, colon seperated fields with exactly the
159 #   following structure.:
160 #
161 #       $cc : $cflags : $unistd : $thread_cflag : $sys_id : $lflags : $bn_ops : $cpuid_obj : $bn_obj : $ec_obj : $des_obj : $aes_obj : $bf_obj : $md5_obj : $sha1_obj : $cast_obj : $rc4_obj : $rmd160_obj : $rc5_obj : $wp_obj : $cmll_obj : $modes_obj : $engines_obj : $perlasm_scheme : $dso_scheme : $shared_target : $shared_cflag : $shared_ldflag : $shared_extension : $ranlib : $arflags : $multilib
162 #
163 #   We use the stringtohash function - defined below - to combine with the
164 #   fields and form a proper hash table from the string.
165 #
166 # - direct transfer of old style config string to hash table, using the names
167 #   of the fields as keys:
168 #
169 #       {
170 #         cc => $cc,
171 #         cflags => $cflags,
172 #         unistd => $unistd,
173 #         thread_cflag => $thread_cflag,
174 #         sys_id => $sys_id,
175 #         lflags => $lflags,
176 #         bn_ops => $bn_ops,
177 #         cpuid_obj => $cpuid_obj,
178 #         bn_obj => $bn_obj,
179 #         ec_obj => $ec_obj,
180 #         des_obj => $des_obj,
181 #         aes_obj => $aes_obj,
182 #         bf_obj => $bf_obj,
183 #         md5_obj => $md5_obj,
184 #         sha1_obj => $sha1_obj,
185 #         cast_obj => $cast_obj,
186 #         rc4_obj => $rc4_obj,
187 #         rmd160_obj => $rmd160_obj,
188 #         rc5_obj => $rc5_obj,
189 #         wp_obj => $wp_obj,
190 #         cmll_obj => $cmll_obj,
191 #         modes_obj => $modes_obj,
192 #         engines_obj => $engines_obj,
193 #         perlasm_scheme => $perlasm_scheme,
194 #         dso_scheme => $dso_scheme,
195 #         shared_target => $shared_target,
196 #         shared_cflag => $shared_cflag,
197 #         shared_ldflag => $shared_ldflag,
198 #         shared_extension => $shared_extension,
199 #         ranlib => $ranlib,
200 #         arflags => $arflags,
201 #         multilib => $multilib
202 #       }
203 #
204 # - new style config hash table, which has additional attributes for debug
205 #   and non-debug flags to be added to the common flags, for cflags and lflags:
206 #
207 #       {
208 #         cc => $cc,
209 #         cflags => $cflags,
210 #         debug_cflags => $debug_cflags,
211 #         release_cflags => $release_cflags,
212 #         unistd => $unistd,
213 #         thread_cflag => $thread_cflag,
214 #         sys_id => $sys_id,
215 #         lflags => $lflags,
216 #         debug_lflags => $debug_lflags,
217 #         release_lflags => $release_lflags,
218 #         bn_ops => $bn_ops,
219 #         cpuid_obj => $cpuid_obj,
220 #         bn_obj => $bn_obj,
221 #         ec_obj => $ec_obj,
222 #         des_obj => $des_obj,
223 #         aes_obj => $aes_obj,
224 #         bf_obj => $bf_obj,
225 #         md5_obj => $md5_obj,
226 #         sha1_obj => $sha1_obj,
227 #         cast_obj => $cast_obj,
228 #         rc4_obj => $rc4_obj,
229 #         rmd160_obj => $rmd160_obj,
230 #         rc5_obj => $rc5_obj,
231 #         wp_obj => $wp_obj,
232 #         cmll_obj => $cmll_obj,
233 #         modes_obj => $modes_obj,
234 #         engines_obj => $engines_obj,
235 #         chacha_obj => $wp_obj,
236 #         poly1305_obj => $cmll_obj,
237 #         dso_scheme => $dso_scheme,
238 #         shared_target => $shared_target,
239 #         shared_cflag => $shared_cflag,
240 #         shared_ldflag => $shared_ldflag,
241 #         shared_extension => $shared_extension,
242 #         ranlib => $ranlib,
243 #         arflags => $arflags,
244 #         multilib => $multilib
245 #       }
246 #
247 # The configuration reader will do what it can to translate everything into
248 # new style config hash tables, including merging $target and debug-$target
249 # if they are similar enough.
250 #
251 # The configuration hashes can refer to templates in two different manners:
252 #
253 # - as part of the hash, one can have a key called 'inherit_from' that
254 #   indicate what other configuration hashes to inherit data from.
255 #   These are resolved recursively.
256 #
257 #   Inheritance works as a set of default values that can be overriden
258 #   by corresponding attribute values in the inheriting configuration.
259 #
260 #   If several configurations are given in the 'inherit_from' array, the
261 #   values of same attribute are concatenated with space separation.
262 #   With this, it's possible to have several smaller templates for
263 #   different configuration aspects that can be combined into a complete
264 #   configuration.
265 #
266 #   Example:
267 #
268 #       "foo" => {
269 #               template => 1,
270 #               haha => "haha",
271 #               hoho => "ho"
272 #       },
273 #       "bar" => {
274 #               template => 1,
275 #               hoho => "ho",
276 #               hehe => "hehe"
277 #       },
278 #       "laughter" => {
279 #               inherit_from => [ "foo", "bar" ],
280 #       }
281 #
282 #       The entry for "foo" will become as follows after processing:
283 #
284 #       "laughter" => {
285 #               haha => "haha",
286 #               hoho => "ho ho",
287 #               hehe => "hehe"
288 #       }
289 #
290 #   Note 1: any entry from the table can be used as a template.
291 #   Note 2: pure templates have the attribute 'template => 1' and cannot
292 #           be used as targets.
293 #
294 # - instead of a string, one can have a code block of the form
295 #   'sub { /* your code here */ }', where the arguments are the list of
296 #   inherited values for that key.  In fact, the concatenation of strings
297 #   is really done by using 'sub { join(" ",@_) }' on the list of inherited
298 #   values.
299 #
300 #   Example:
301 #
302 #       "foo" => {
303 #               template => 1,
304 #               haha => "ha ha",
305 #               hoho => "ho",
306 #               ignored => "This should not appear in the end result",
307 #       },
308 #       "bar" => {
309 #               template => 1,
310 #               haha => "ah",
311 #               hoho => "haho",
312 #               hehe => "hehe"
313 #       },
314 #       "laughter" => {
315 #               inherit_from => [ "foo", "bar" ],
316 #               hehe => sub { join(" ",(@_,"!!!")) },
317 #               ignored => "",
318 #       }
319 #
320 #       The entry for "foo" will become as follows after processing:
321 #
322 #       "laughter" => {
323 #               haha => "ha ha ah",
324 #               hoho => "ho haho",
325 #               hehe => "hehe !!!",
326 #               ignored => ""
327 #       }
328 #
329
330 my %table=(
331
332     # All these templates are merely a translation of the corresponding
333     # variables further up.
334     #
335     # Note: as long as someone might use old style configuration strings,
336     # or we bother supporting that, those variables need to stay
337
338     x86_asm => {
339         template        => 1,
340         cpuid_obj       => "x86cpuid.o",
341         bn_obj          => "bn-586.o co-586.o x86-mont.o x86-gf2m.o",
342         ec_obj          => "ecp_nistz256.o ecp_nistz256-x86.o",
343         des_obj         => "des-586.o crypt586.o",
344         aes_obj         => "aes-586.o vpaes-x86.o aesni-x86.o",
345         bf_obj          => "bf-586.o",
346         md5_obj         => "md5-586.o",
347         sha1_obj        => "sha1-586.o sha256-586.o sha512-586.o",
348         rc4_obj         => "rc4-586.o",
349         rmd160_obj      => "rmd-586.o",
350         rc5_obj         => "rc5-586.o",
351         wp_obj          => "wp_block.o wp-mmx.o",
352         cmll_obj        => "cmll-x86.o",
353         modes_obj       => "ghash-x86.o",
354         engines_obj     => "e_padlock-x86.o"
355     },
356     x86_elf_asm => {
357         template        => 1,
358         inherit_from    => [ "x86_asm" ],
359         perlasm_scheme  => "elf"
360     },
361     x86_64_asm => {
362         template        => 1,
363         cpuid_obj       => "x86_64cpuid.o",
364         bn_obj          => "x86_64-gcc.o x86_64-mont.o x86_64-mont5.o x86_64-gf2m.o rsaz_exp.o rsaz-x86_64.o rsaz-avx2.o",
365         ec_obj          => "ecp_nistz256.o ecp_nistz256-x86_64.o",
366         aes_obj         => "aes-x86_64.o vpaes-x86_64.o bsaes-x86_64.o aesni-x86_64.o aesni-sha1-x86_64.o aesni-sha256-x86_64.o aesni-mb-x86_64.o",
367         md5_obj         => "md5-x86_64.o",
368         sha1_obj        => "sha1-x86_64.o sha256-x86_64.o sha512-x86_64.o sha1-mb-x86_64.o sha256-mb-x86_64.o",
369         rc4_obj         => "rc4-x86_64.o rc4-md5-x86_64.o",
370         wp_obj          => "wp-x86_64.o",
371         cmll_obj        => "cmll-x86_64.o cmll_misc.o",
372         modes_obj       => "ghash-x86_64.o aesni-gcm-x86_64.o",
373         engines_obj     => "e_padlock-x86_64.o"
374     },
375     ia64_asm => {
376         template        => 1,
377         cpuid_obj       => "ia64cpuid.o",
378         bn_obj          => "bn-ia64.o ia64-mont.o",
379         aes_obj         => "aes_core.o aes_cbc.o aes-ia64.o",
380         md5_obj         => "md5-ia64.o",
381         sha1_obj        => "sha1-ia64.o sha256-ia64.o sha512-ia64.o",
382         rc4_obj         => "rc4-ia64.o rc4_skey.o",
383         modes_obj       => "ghash-ia64.o",
384         perlasm_scheme  => "void"
385     },
386     sparcv9_asm => {
387         template        => 1,
388         cpuid_obj       => "sparcv9cap.o sparccpuid.o",
389         bn_obj          => "bn-sparcv9.o sparcv9-mont.o sparcv9a-mont.o vis3-mont.o sparct4-mont.o sparcv9-gf2m.o",
390         ec_obj          => "ecp_nistz256.o ecp_nistz256-sparcv9.o",
391         des_obj         => "des_enc-sparc.o fcrypt_b.o dest4-sparcv9.o",
392         aes_obj         => "aes_core.o aes_cbc.o aes-sparcv9.o aest4-sparcv9.o",
393         md5_obj         => "md5-sparcv9.o",
394         sha1_obj        => "sha1-sparcv9.o sha256-sparcv9.o sha512-sparcv9.o",
395         cmll_obj        => "camellia.o cmll_misc.o cmll_cbc.o cmllt4-sparcv9.o",
396         modes_obj       => "ghash-sparcv9.o",
397         perlasm_scheme  => "void"
398     },
399     sparcv8_asm => {
400         template        => 1,
401         cpuid_obj       => "",
402         bn_obj          => "sparcv8.o",
403         des_obj         => "des_enc-sparc.o fcrypt_b.o",
404         perlasm_scheme  => "void"
405     },
406     alpha_asm => {
407         template        => 1,
408         cpuid_obj       => "alphacpuid.o",
409         bn_obj          => "bn_asm.o alpha-mont.o",
410         sha1_obj        => "sha1-alpha.o",
411         modes_obj       => "ghash-alpha.o",
412         perlasm_scheme  => "void"
413     },
414     mips32_asm => {
415         template        => 1,
416         bn_obj          => "bn-mips.o mips-mont.o",
417         aes_obj         => "aes_cbc.o aes-mips.o",
418         sha1_obj        => "sha1-mips.o sha256-mips.o",
419     },
420     mips64_asm => {
421         inherit_from    => [ "mips32_asm" ],
422         template        => 1,
423         sha1_obj        => sub { join(" ", @_, "sha512-mips.o") }
424     },
425     s390x_asm => {
426         template        => 1,
427         cpuid_obj       => "s390xcap.o s390xcpuid.o",
428         bn_obj          => "bn-s390x.o s390x-mont.o s390x-gf2m.o",
429         aes_obj         => "aes-s390x.o aes-ctr.o aes-xts.o",
430         sha1_obj        => "sha1-s390x.o sha256-s390x.o sha512-s390x.o",
431         rc4_obj         => "rc4-s390x.o",
432         modes_obj       => "ghash-s390x.o",
433     },
434     armv4_asm => {
435         template        => 1,
436         cpuid_obj       => "armcap.o armv4cpuid.o",
437         bn_obj          => "bn_asm.o armv4-mont.o armv4-gf2m.o",
438         ec_obj          => "ecp_nistz256.o ecp_nistz256-armv4.o",
439         aes_obj         => "aes_cbc.o aes-armv4.o bsaes-armv7.o aesv8-armx.o",
440         sha1_obj        => "sha1-armv4-large.o sha256-armv4.o sha512-armv4.o",
441         modes_obj       => "ghash-armv4.o ghashv8-armx.o",
442         perlasm_scheme  => "void"
443     },
444     aarch64_asm => {
445         template        => 1,
446         cpuid_obj       => "armcap.o arm64cpuid.o mem_clr.o",
447         ec_obj          => "ecp_nistz256.o ecp_nistz256-armv8.o",
448         bn_obj          => "bn_asm.o armv8-mont.o",
449         aes_obj         => "aes_core.o aes_cbc.o aesv8-armx.o vpaes-armv8.o",
450         sha1_obj        => "sha1-armv8.o sha256-armv8.o sha512-armv8.o",
451         modes_obj       => "ghashv8-armx.o",
452     },
453     parisc11_asm => {
454         template        => 1,
455         cpuid_obj       => "pariscid.o",
456         bn_obj          => "bn_asm.o parisc-mont.o",
457         aes_obj         => "aes_core.o aes_cbc.o aes-parisc.o",
458         sha1_obj        => "sha1-parisc.o sha256-parisc.o sha512-parisc.o",
459         rc4_obj         => "rc4-parisc.o",
460         modes_obj       => "ghash-parisc.o",
461         perlasm_scheme  => "32"
462     },
463     parisc20_64_asm => {
464         template        => 1,
465         inherit_from    => [ "parisc11_asm" ],
466         bn_obj          => sub { my $r=join(" ",@_); $r=~s/bn_asm/pa-risc2W/; $r; },
467         perlasm_scheme  => "64",
468     },
469     ppc64_asm => {
470         template        => 1,
471         cpuid_obj       => "ppccpuid.o ppccap.o",
472         bn_obj          => "bn-ppc.o ppc-mont.o ppc64-mont.o",
473         aes_obj         => "aes_core.o aes_cbc.o aes-ppc.o vpaes-ppc.o aesp8-ppc.o",
474         sha1_obj        => "sha1-ppc.o sha256-ppc.o sha512-ppc.o sha256p8-ppc.o sha512p8-ppc.o",
475         modes_obj       => "ghashp8-ppc.o",
476     },
477     ppc32_asm => {
478         inherit_from    => [ "ppc64_asm" ],
479         template        => 1
480     },
481 );
482
483 {   my $no_asm_templates=0;
484     foreach (@ARGV) { $no_asm_templates=1 if (/^\-?no\-asm$/); }
485     sub asm { $no_asm_templates?():@_; }
486 }
487
488
489 sub stringtohash {
490     my $in = shift @_;
491     if (ref($in) eq "HASH") {
492         return $in;
493     }
494     my @stringsequence = (
495         "cc",
496         "cflags",
497         "unistd",
498         "thread_cflag",
499         "sys_id",
500         "lflags",
501         "bn_ops",
502         "cpuid_obj",
503         "bn_obj",
504         "ec_obj",
505         "des_obj",
506         "aes_obj",
507         "bf_obj",
508         "md5_obj",
509         "sha1_obj",
510         "cast_obj",
511         "rc4_obj",
512         "rmd160_obj",
513         "rc5_obj",
514         "wp_obj",
515         "cmll_obj",
516         "modes_obj",
517         "engines_obj",
518         "perlasm_scheme",
519         "dso_scheme",
520         "shared_target",
521         "shared_cflag",
522         "shared_ldflag",
523         "shared_extension",
524         "ranlib",
525         "arflags",
526         "multilib",
527         );
528
529     # return a ref to a hash, that's what the outer braces are for.
530     return { map { shift @stringsequence => $_ } split /:/, $in };
531 };
532
533 # Read configuration target stanzas from a file, so that people can have
534 # local files with their own definitions
535 sub read_config {
536         my $fname = shift;
537         open(CONFFILE, "< $fname")
538                 or die "Can't open configuration file '$fname'!\n";
539         my $x = $/;
540         undef $/;
541         my $content = <CONFFILE>;
542         $/ = $x;
543         close(CONFFILE);
544         my %targets = ();
545         eval $content;
546
547         # Make sure we have debug- targets first
548         my @keys =
549             sort {
550                 my $a_nd = $a =~ m/^debug-/ ? $' :$a;
551                 my $b_nd = $b =~ m/^debug-/ ? $' :$b;
552                 my $res = 0;
553
554                 if (($a_nd == $a) == ($b_nd == $b)) {
555                     # they are both debug- or not, compare them as they are
556                     $res = $a cmp $b;
557                 } elsif ($a_nd != $a) {
558                     # $a is debug-, make it lesser
559                     $res = -1;
560                 } else {
561                     # $b is debug-, make $a greater
562                     $res = 1;
563                 }
564                 $res;
565             } keys %targets;
566
567         foreach (@keys) {
568             if (ref($targets{$_}) ne "HASH") {
569                 # Value is assumed to be a string.  Split it up to
570                 # become a hash table of parameters.  Also, try to
571                 # merge debug- variants with the non-debug target.
572
573                 # Start with converting the value from a string to a
574                 # standardised hash of fields.  Using $tohash is safe,
575                 # if the input is already a hash ref, it's just returned
576                 # back.
577                 $targets{$_} = stringtohash($targets{$_});
578
579                 # If the current target is a debug target, there might
580                 # be a corresponding non-debug target that we can merge
581                 # with.  If it isn't a debug- target, we've already done
582                 # as much merging as we can and do not need to bother
583                 # with that any more.
584                 if ($_ =~ m/^debug-/) {
585                     my $debugkey = $_;
586                     my $nondebugkey = $';
587                     my $debug = $targets{$debugkey};
588                     my $nondebug;
589
590                     if ($targets{$nondebugkey}) {
591                         $nondebug = stringtohash($targets{$nondebugkey});
592                     }
593
594                     if ($nondebug) {
595                         # There's both a debug and non-debug variant of
596                         # this target, so we should try to merge them
597                         # together.
598
599                         # First, check that the non-debug variant isn't
600                         # already built up with all it should have.
601                         if ($nondebug->{debug_cflags}
602                             || $nondebug->{release_cflags}
603                             || $nondebug->{debug_lflags}
604                             || $nondebug->{release_lflags}) {
605                             warn "there's a debug target $debugkey to be merged with a target $nondebugkey, but the latter seems to already have both nodebug and debug information.  This requires human intervention.  Skipping $debugkey...";
606                             next;
607                         }
608
609                         # Now, check similarity.
610                         # For keys they have in common, support that
611                         # cflags and lflags can differ, otherwise they
612                         # must have exactly the same values for them
613                         # to be merged into one.
614                         my $similarenough = 1;
615                         for (keys %{$debug}) {
616                             if ($nondebug->{$_} ne $debug->{$_}
617                                 && $_ !~ m/^[cl]flags$/) {
618                                 $similarenough = 0;
619                                 last;
620                             }
621                         }
622
623                         if ($similarenough) {
624                             # Here's where the magic happens, split the
625                             # options in the debug and non-debug variants
626                             # cflags and ldflags into three strings each,
627                             # one with common flags, one with extra debug
628                             # flags and one with extra non-debug flags.
629
630                             # The result ends up in %h_nondebug, which
631                             # becomes the merged variant when we're done.
632                             # for each of cflags and lflags, they are
633                             # replaced with cflags, debug_cflags,
634                             # release_cflags and similar for lflags.
635                             #
636                             # The purpose is that 'cflags' should be
637                             # used together with 'debug_cflags' or
638                             # 'release_cflags' depending on what the
639                             # user asks for.
640                             foreach (("cflags", "lflags")) {
641                                 my @list_d = split /\s+/, $debug->{$_};
642                                 my @list_nd = split /\s+/, $nondebug->{$_};
643                                 my %presence = (); # bitmap
644                                                    # 1: present in @list_d
645                                                    # 2: present in @list_nd
646                                                    # 3: present in both
647                                 map { $presence{$_} += 1; } @list_d;
648                                 map { $presence{$_} += 2; } @list_nd;
649
650                                 delete $nondebug->{$_};
651                                 # Note: we build from the original lists to
652                                 # preserve order, it might be important
653                                 $nondebug->{"debug-".$_} =
654                                     join(" ",
655                                          grep { $presence{$_} == 1 } @list_d);
656                                 $nondebug->{"nodebug-".$_} =
657                                     join(" ",
658                                          grep { $presence{$_} == 2 } @list_nd);
659                                 $nondebug->{$_} =
660                                     join(" ",
661                                          grep { $presence{$_} == 3 } @list_d);
662                             }
663
664                             $targets{$nondebugkey} = $nondebug;
665                             delete $targets{$debugkey};
666                         }
667                     }
668                 }
669             }
670         }
671
672         %table = (%table, %targets);
673
674         # Local function to resolve inheritance
675         my $resolve_inheritance;
676         $resolve_inheritance =
677             sub {
678                 my $target = shift;
679                 my @breadcrumbs = @_;
680
681                 if (grep { $_ eq $target } @breadcrumbs) {
682                     die "inherit_from loop!  target backtrace:\n  "
683                         ,$target,"\n  ",join("\n  ", @breadcrumbs),"\n";
684                 }
685
686                 # Recurse through all inheritances.  They will be resolved on
687                 # the fly, so when this operation is done, they will all just
688                 # be a bunch of attributes with string values.
689                 # What we get here, though, are keys with references to lists
690                 # of the combined values of them all.  We will deal with lists
691                 # after this stage is done.
692                 my %combined_inheritance = ();
693                 if ($table{$target}->{inherit_from}) {
694                     foreach (@{$table{$target}->{inherit_from}}) {
695                         my %inherited_config =
696                             $resolve_inheritance->($_, $target, @breadcrumbs);
697
698                         # 'template' is a marker that's considered private to
699                         # the config that had it.
700                         delete $inherited_config{template};
701
702                         map {
703                             if (!$combined_inheritance{$_}) {
704                                 $combined_inheritance{$_} = [];
705                             }
706                             push @{$combined_inheritance{$_}}, $inherited_config{$_};
707                         } keys %inherited_config;
708                     }
709                 }
710
711                 # We won't need inherit_from in this target any more, since
712                 # we've resolved all the inheritances that lead to this
713                 delete $table{$target}->{inherit_from};
714
715                 # Now is the time to deal with those lists.  Here's the place
716                 # to decide what shall be done with those lists, all based on
717                 # the values of the target we're currently dealing with.
718                 # - If a value is a coderef, it will be executed with the list
719                 #   of inherited values as arguments.
720                 # - If the corresponding key doesn't have a value at all or is
721                 #   the emoty string, the inherited value list will be run
722                 #   through the default combiner (below), and the result
723                 #   becomes this target's value.
724                 # - Otherwise, this target's value is assumed to be a string
725                 #   that will simply override the inherited list of values.
726                 my $default_combiner = sub { join(' ',@_) };
727
728                 my %all_keys =
729                     map { $_ => 1 } (keys %combined_inheritance,
730                                      keys %{$table{$target}});
731                 foreach (sort keys %all_keys) {
732
733                     # Current target doesn't have a value for the current key?
734                     # Assign it the default combiner, the rest of this loop
735                     # body will handle it just like any other coderef.
736                     if (!exists $table{$target}->{$_}) {
737                         $table{$target}->{$_} = $default_combiner;
738                     }
739
740                     my $valuetype = ref($table{$target}->{$_});
741                     if ($valuetype eq "CODE") {
742                         # CODE reference, execute it with the inherited values
743                         # as arguments.
744                         $table{$target}->{$_} =
745                             $table{$target}->{$_}->(@{$combined_inheritance{$_}});
746                     } elsif ($valuetype eq "") {
747                         # Scalar, just leave it as is.
748                     } else {
749                         # Some other type of reference that we don't handle.
750                         # Better to abort at this point.
751                         die "cannot handle reference type $valuetype,"
752                             ," found in target $target -> $_\n";
753                     }
754                 }
755
756                 # Finally done, return the result.
757                 %{$table{$target}};
758         };
759
760         # Go through all new targets and resolve inheritance and template
761         # references.
762         foreach (keys %targets) {
763             # We're ignoring the returned values here, they are only valuable
764             # to the inner recursion of this function.
765             $resolve_inheritance->($_);
766         }
767 }
768
769 my ($vol, $dir, $dummy) = File::Spec->splitpath($0);
770 my $pattern = File::Spec->catpath($vol, $dir, "Configurations/*.conf");
771 foreach (sort glob($pattern) ) {
772     &read_config($_);
773 }
774
775 my @MK1MF_Builds=qw(VC-WIN64I VC-WIN64A
776                     debug-VC-WIN64I debug-VC-WIN64A
777                     VC-NT VC-CE VC-WIN32 debug-VC-WIN32
778                     BC-32
779                     netware-clib netware-clib-bsdsock
780                     netware-libc netware-libc-bsdsock);
781
782 my $prefix="";
783 my $libdir="";
784 my $openssldir="";
785 my $exe_ext="";
786 my $install_prefix= "$ENV{'INSTALL_PREFIX'}";
787 my $cross_compile_prefix="";
788 my $fipslibdir="/usr/local/ssl/fips-2.0/lib/";
789 my $nofipscanistercheck=0;
790 my $baseaddr="0xFB00000";
791 my $no_threads=0;
792 my $threads=0;
793 my $no_shared=0; # but "no-shared" is default
794 my $zlib=1;      # but "no-zlib" is default
795 my $no_rfc3779=0;
796 my $no_asm=0;
797 my $no_dso=0;
798 my @skip=();
799 my $Makefile="Makefile";
800 my $des_locl="crypto/des/des_locl.h";
801 my $des ="include/openssl/des.h";
802 my $bn  ="include/openssl/bn.h";
803 my $md2 ="include/openssl/md2.h";
804 my $rc4 ="include/openssl/rc4.h";
805 my $rc4_locl="crypto/rc4/rc4_locl.h";
806 my $idea        ="include/openssl/idea.h";
807 my $rc2 ="include/openssl/rc2.h";
808 my $bf  ="crypto/bf/bf_locl.h";
809 my $bn_asm      ="bn_asm.o";
810 my $des_enc="des_enc.o fcrypt_b.o";
811 my $aes_enc="aes_core.o aes_cbc.o";
812 my $bf_enc      ="bf_enc.o";
813 my $cast_enc="c_enc.o";
814 my $rc4_enc="rc4_enc.o rc4_skey.o";
815 my $rc5_enc="rc5_enc.o";
816 my $cmll_enc="camellia.o cmll_misc.o cmll_cbc.o";
817 my $chacha_enc="chacha_enc.o";
818 my $processor="";
819 my $default_ranlib;
820 my $perl;
821 my $fips=0;
822
823 # Explicitelly known options that are possible to disable.  They can
824 # be regexps, and will be used like this: /^no-${option}$/
825 # For developers: keep it sorted alphabetically
826
827 my @disablables = (
828     "aes",
829     "asm",
830     "bf",
831     "camellia",
832     "capieng",
833     "cast",
834     "chacha",
835     "cmac",
836     "cms",
837     "comp",
838     "crypto-mdebug",
839     "ct",
840     "deprecated",
841     "des",
842     "dgram",
843     "dh",
844     "dsa",
845     "dso",
846     "dtls",
847     "dynamic[-_]engine",
848     "ec",
849     "ec2m",
850     "ec_nistp_64_gcc_128",
851     "engine",
852     "err",                      # Really???
853     "gost",
854     "heartbeats",
855     "hmac",
856     "hw(-.+)?",
857     "idea",
858     "jpake",
859     "locking",                  # Really???
860     "md2",
861     "md4",
862     "md5",
863     "mdc2",
864     "md[-_]ghost94",
865     "nextprotoneg",
866     "ocb",
867     "ocsp",
868     "poly1305",
869     "posix-io",
870     "psk",
871     "rc2",
872     "rc4",
873     "rc5",
874     "rdrand",
875     "rfc3779",
876     "rijndael",                 # Old AES name
877     "rmd160",
878     "rsa",
879     "scrypt",
880     "sct",
881     "sctp",
882     "seed",
883     "sha",
884     "shared",
885     "sock",
886     "srp",
887     "srtp",
888     "sse2",
889     "ssl",
890     "ssl3",
891     "ssl3-method",
892     "ssl-trace",
893     "static-engine",
894     "stdio",
895     "store",
896     "threads",
897     "tls",
898     "tls1",
899     "unit-test",
900     "whirlpool",
901     "zlib",
902     "zlib-dynamic",
903     );
904
905 # All of the following is disabled by default (RC5 was enabled before 0.9.8):
906
907 my %disabled = ( # "what"         => "comment" [or special keyword "experimental"]
908                  "ec_nistp_64_gcc_128" => "default",
909                  "egd"            => "default",
910                  "jpake"          => "experimental",
911                  "md2"            => "default",
912                  "rc5"            => "default",
913                  "sctp"           => "default",
914                  "shared"         => "default",
915                  "ssl-trace"      => "default",
916                  "store"          => "experimental",
917                  "unit-test"      => "default",
918                  "zlib"           => "default",
919                  "zlib-dynamic"   => "default",
920                  "crypto-mdebug"  => "default",
921                );
922 my @experimental = ();
923
924 # This is what $depflags will look like with the above defaults
925 # (we need this to see if we should advise the user to run "make depend"):
926 my $default_depflags = " -DOPENSSL_NO_CRYPTO_MDEBUG -DOPENSSL_NO_EC_NISTP_64_GCC_128 -DOPENSSL_NO_JPAKE -DOPENSSL_NO_MD2 -DOPENSSL_NO_RC5 -DOPENSSL_NO_SCTP -DOPENSSL_NO_SSL_TRACE -DOPENSSL_NO_STORE -DOPENSSL_NO_UNIT_TEST";
927
928 # Explicit "no-..." options will be collected in %disabled along with the defaults.
929 # To remove something from %disabled, use "enable-foo" (unless it's experimental).
930 # For symmetry, "disable-foo" is a synonym for "no-foo".
931
932 # For features called "experimental" here, a more explicit "experimental-foo" is needed to enable.
933 # We will collect such requests in @experimental.
934 # To avoid accidental use of experimental features, applications will have to use -DOPENSSL_EXPERIMENTAL_FOO.
935
936
937 my $no_sse2=0;
938
939 &usage if ($#ARGV < 0);
940
941 my $flags;
942 my $depflags;
943 my $openssl_experimental_defines;
944 my $openssl_algorithm_defines;
945 my $openssl_thread_defines;
946 my $openssl_sys_defines="";
947 my $openssl_other_defines;
948 my $libs;
949 my $target;
950 my $options;
951 my $api;
952 my $make_depend=0;
953 my %withargs=();
954 my $build_prefix = "release_";
955
956 my @argvcopy=@ARGV;
957 my $argvstring="";
958 my $argv_unprocessed=1;
959
960 while($argv_unprocessed)
961         {
962         $flags="";
963         $depflags="";
964         $openssl_experimental_defines="";
965         $openssl_algorithm_defines="";
966         $openssl_thread_defines="";
967         $openssl_sys_defines="";
968         $openssl_other_defines="";
969         $libs="";
970         $target="";
971         $options="";
972
973         $argv_unprocessed=0;
974         $argvstring=join(' ',@argvcopy);
975
976 PROCESS_ARGS:
977         {
978         my %unsupported_options = ();
979         foreach (@argvcopy)
980                 {
981                 s /^-no-/no-/; # some people just can't read the instructions
982
983                 # rewrite some options in "enable-..." form
984                 s /^-?-?shared$/enable-shared/;
985                 s /^sctp$/enable-sctp/;
986                 s /^threads$/enable-threads/;
987                 s /^zlib$/enable-zlib/;
988                 s /^zlib-dynamic$/enable-zlib-dynamic/;
989
990                 if (/^(no|disable|enable|experimental)-(.+)$/)
991                         {
992                         my $word = $2;
993                         if (!grep { $word =~ /^${_}$/ } @disablables)
994                                 {
995                                 $unsupported_options{$_} = 1;
996                                 next;
997                                 }
998                         }
999                 if (/^no-(.+)$/ || /^disable-(.+)$/)
1000                         {
1001                         if (!($disabled{$1} eq "experimental"))
1002                                 {
1003                                 if ($1 eq "ssl")
1004                                         {
1005                                         $disabled{"ssl3"} = "option(ssl)";
1006                                         }
1007                                 elsif ($1 eq "tls")
1008                                         {
1009                                         $disabled{"tls1"} = "option(tls)"
1010                                         }
1011                                 elsif ($1 eq "ssl3-method")
1012                                         {
1013                                         $disabled{"ssl3-method"} = "option(ssl)";
1014                                         $disabled{"ssl3"} = "option(ssl)";
1015                                         }
1016                                 else
1017                                         {
1018                                         $disabled{$1} = "option";
1019                                         }
1020                                 }
1021                         }
1022                 elsif (/^enable-(.+)$/ || /^experimental-(.+)$/)
1023                         {
1024                         my $algo = $1;
1025                         if ($disabled{$algo} eq "experimental")
1026                                 {
1027                                 die "You are requesting an experimental feature; please say 'experimental-$algo' if you are sure\n"
1028                                         unless (/^experimental-/);
1029                                 push @experimental, $algo;
1030                                 }
1031                         delete $disabled{$algo};
1032
1033                         $threads = 1 if ($algo eq "threads");
1034                         }
1035                 elsif (/^--test-sanity$/)
1036                         {
1037                         exit(&test_sanity());
1038                         }
1039                 elsif (/^--strict-warnings$/)
1040                         {
1041                         $strict_warnings = 1;
1042                         }
1043                 elsif (/^--debug$/)
1044                         {
1045                         $build_prefix = "debug_";
1046                         }
1047                 elsif (/^--release$/)
1048                         {
1049                         $build_prefix = "release_";
1050                         }
1051                 elsif (/^reconfigure/ || /^reconf/)
1052                         {
1053                         if (open(IN,"<$Makefile"))
1054                                 {
1055                                 my $config_args_found=0;
1056                                 while (<IN>)
1057                                         {
1058                                         chomp;
1059                                         if (/^CONFIGURE_ARGS=(.*)/)
1060                                                 {
1061                                                 $argvstring=$1;
1062                                                 @argvcopy=split(' ',$argvstring);
1063                                                 die "Incorrect data to reconfigure, please do a normal configuration\n"
1064                                                         if (grep(/^reconf/,@argvcopy));
1065                                                 print "Reconfiguring with: $argvstring\n";
1066                                                 $argv_unprocessed=1;
1067                                                 $config_args_found=1;
1068                                                 }
1069                                         elsif (/^CROSS_COMPILE=\s*(.*)/)
1070                                                 {
1071                                                 $ENV{CROSS_COMPILE}=$1;
1072                                                 }
1073                                         elsif (/^CC=\s*(?:\$\(CROSS_COMPILE\))?(.*?)$/)
1074                                                 {
1075                                                 $ENV{CC}=$1;
1076                                                 }
1077                                         }
1078                                 close(IN);
1079                                 last PROCESS_ARGS if ($config_args_found);
1080                                 }
1081                         die "Insufficient data to reconfigure, please do a normal configuration\n";
1082                         }
1083                 elsif (/^386$/)
1084                         { $processor=386; }
1085                 elsif (/^fips$/)
1086                         {
1087                         $fips=1;
1088                         }
1089                 elsif (/^rsaref$/)
1090                         {
1091                         # No RSAref support any more since it's not needed.
1092                         # The check for the option is there so scripts aren't
1093                         # broken
1094                         }
1095                 elsif (/^nofipscanistercheck$/)
1096                         {
1097                         $fips = 1;
1098                         $nofipscanistercheck = 1;
1099                         }
1100                 elsif (/^[-+]/)
1101                         {
1102                         if (/^--prefix=(.*)$/)
1103                                 {
1104                                 $prefix=$1;
1105                                 }
1106                         elsif (/^--api=(.*)$/)
1107                                 {
1108                                 $api=$1;
1109                                 }
1110                         elsif (/^--libdir=(.*)$/)
1111                                 {
1112                                 $libdir=$1;
1113                                 }
1114                         elsif (/^--openssldir=(.*)$/)
1115                                 {
1116                                 $openssldir=$1;
1117                                 }
1118                         elsif (/^--install.prefix=(.*)$/)
1119                                 {
1120                                 $install_prefix=$1;
1121                                 }
1122                         elsif (/^--with-zlib-lib=(.*)$/)
1123                                 {
1124                                 $withargs{"zlib-lib"}=$1;
1125                                 }
1126                         elsif (/^--with-zlib-include=(.*)$/)
1127                                 {
1128                                 $withargs{"zlib-include"}="-I$1";
1129                                 }
1130                         elsif (/^--with-fipslibdir=(.*)$/)
1131                                 {
1132                                 $fipslibdir="$1/";
1133                                 }
1134                         elsif (/^--with-baseaddr=(.*)$/)
1135                                 {
1136                                 $baseaddr="$1";
1137                                 }
1138                         elsif (/^--cross-compile-prefix=(.*)$/)
1139                                 {
1140                                 $cross_compile_prefix=$1;
1141                                 }
1142                         elsif (/^--config=(.*)$/)
1143                                 {
1144                                 read_config $1;
1145                                 }
1146                         elsif (/^-[lL](.*)$/ or /^-Wl,/)
1147                                 {
1148                                 $libs.=$_." ";
1149                                 }
1150                         else    # common if (/^[-+]/), just pass down...
1151                                 {
1152                                 $_ =~ s/%([0-9a-f]{1,2})/chr(hex($1))/gei;
1153                                 $flags.=$_." ";
1154                                 }
1155                         }
1156                 elsif ($_ =~ /^([^:]+):(.+)$/)
1157                         {
1158                         eval "\$table{\$1} = \"$2\""; # allow $xxx constructs in the string
1159                         $target=$1;
1160                         }
1161                 else
1162                         {
1163                         die "target already defined - $target (offending arg: $_)\n" if ($target ne "");
1164                         $target=$_;
1165                         }
1166
1167                 unless ($_ eq $target || /^no-/ || /^disable-/)
1168                         {
1169                         # "no-..." follows later after implied disactivations
1170                         # have been derived.  (Don't take this too seroiusly,
1171                         # we really only write OPTIONS to the Makefile out of
1172                         # nostalgia.)
1173
1174                         if ($options eq "")
1175                                 { $options = $_; }
1176                         else
1177                                 { $options .= " ".$_; }
1178                         }
1179                 }
1180
1181         if (defined($api) && !exists $apitable->{$api}) {
1182                 die "***** Unsupported api compatibility level: $api\n",
1183         }
1184
1185         if (keys %unsupported_options)
1186                 {
1187                 die "***** Unsupported options: ",
1188                         join(", ", keys %unsupported_options), "\n";
1189                 }
1190         }
1191         }
1192
1193
1194 if ($processor eq "386")
1195         {
1196         $disabled{"sse2"} = "forced";
1197         }
1198
1199 if (!defined($disabled{"zlib-dynamic"}))
1200         {
1201         # "zlib-dynamic" was specifically enabled, so enable "zlib"
1202         delete $disabled{"zlib"};
1203         }
1204
1205 if (defined($disabled{"rijndael"}))
1206         {
1207         $disabled{"aes"} = "forced";
1208         }
1209 if (defined($disabled{"des"}))
1210         {
1211         $disabled{"mdc2"} = "forced";
1212         }
1213 if (defined($disabled{"ec"}))
1214         {
1215         $disabled{"ecdsa"} = "forced";
1216         $disabled{"ecdh"} = "forced";
1217         }
1218
1219 # SSL 3.0 and TLS requires MD5 and SHA and either RSA or DSA+DH
1220 if (defined($disabled{"md5"}) || defined($disabled{"sha"})
1221     || (defined($disabled{"rsa"})
1222         && (defined($disabled{"dsa"}) || defined($disabled{"dh"}))))
1223         {
1224         $disabled{"ssl3"} = "forced";
1225         $disabled{"tls1"} = "forced";
1226         }
1227
1228 if (defined($disabled{"dgram"}))
1229         {
1230         $disabled{"dtls"} = "forced";
1231         }
1232
1233 if (defined($disabled{"ec"}) || defined($disabled{"dsa"})
1234     || defined($disabled{"dh"}) || defined($disabled{"stdio"}))
1235         {
1236         $disabled{"gost"} = "forced";
1237         }
1238
1239
1240 if ($target eq "TABLE") {
1241         foreach $target (sort keys %table) {
1242                 print_table_entry($target, "TABLE");
1243         }
1244         exit 0;
1245 }
1246
1247 if ($target eq "LIST") {
1248         foreach (sort keys %table) {
1249                 print;
1250                 print "\n";
1251         }
1252         exit 0;
1253 }
1254
1255 if ($target eq "HASH") {
1256         print "%table = (\n";
1257         foreach (sort keys %table) {
1258                 print_table_entry($_, "HASH");
1259         }
1260         exit 0;
1261 }
1262
1263 if ($target =~ m/^CygWin32(-.*)$/) {
1264         $target = "Cygwin".$1;
1265 }
1266
1267 print "Configuring for $target\n";
1268
1269 # Support for legacy targets having a name starting with 'debug-'
1270 my ($d, $t) = $target =~ m/^(debug-)?(.*)$/;
1271 if ($d) {
1272     $build_prefix = "debug_";
1273     $target = $t;
1274
1275     # If we do not find debug-foo in the table, the target is set to foo,
1276     # but only if the foo target has a noon-empty debug_cflags or debug_lflags
1277     # attribute.
1278     if (!$table{$target}) {
1279         $target = $t;
1280     }
1281 }
1282
1283 &usage if (!defined($table{$target}) || $table{$target}->{template});
1284
1285 if ($fips)
1286         {
1287         delete $disabled{"shared"} if ($disabled{"shared"} eq "default");
1288         }
1289
1290 foreach (sort (keys %disabled))
1291         {
1292         $options .= " no-$_";
1293
1294         printf "    no-%-12s %-10s", $_, "[$disabled{$_}]";
1295
1296         if (/^dso$/)
1297                 { $no_dso = 1; }
1298         elsif (/^threads$/)
1299                 { $no_threads = 1; }
1300         elsif (/^shared$/)
1301                 { $no_shared = 1; }
1302         elsif (/^zlib$/)
1303                 { $zlib = 0; }
1304         elsif (/^static-engine$/)
1305                 { }
1306         elsif (/^zlib-dynamic$/)
1307                 { }
1308         elsif (/^sse2$/)
1309                 { $no_sse2 = 1; }
1310         else
1311                 {
1312                 my ($ALGO, $algo);
1313                 ($ALGO = $algo = $_) =~ tr/[\-a-z]/[_A-Z]/;
1314
1315                 if (/^asm$/ || /^err$/ || /^hw$/ || /^hw-/)
1316                         {
1317                         $openssl_other_defines .= "#define OPENSSL_NO_$ALGO\n";
1318                         print " OPENSSL_NO_$ALGO";
1319
1320                         if (/^err$/)    { $flags .= "-DOPENSSL_NO_ERR "; }
1321                         elsif (/^asm$/) { $no_asm = 1; }
1322                         }
1323                 else
1324                         {
1325                         ($ALGO,$algo) = ("RMD160","rmd160") if ($algo eq "ripemd");
1326
1327                         $openssl_algorithm_defines .= "#define OPENSSL_NO_$ALGO\n";
1328                         print " OPENSSL_NO_$ALGO";
1329
1330                         push @skip, $algo;
1331                         # fix-up crypto/directory name(s)
1332                         $skip[$#skip]="whrlpool" if $algo eq "whirlpool";
1333                         $skip[$#skip]="ripemd" if $algo eq "rmd160";
1334
1335                         print " (skip dir)";
1336
1337                         $depflags .= " -DOPENSSL_NO_$ALGO";
1338                         }
1339                 }
1340
1341         print "\n";
1342         }
1343
1344 my $exp_cflags = "";
1345
1346 foreach (sort @experimental)
1347         {
1348         my $ALGO;
1349         ($ALGO = $_) =~ tr/[a-z]/[A-Z]/;
1350
1351         # opensslconf.h will set OPENSSL_NO_... unless OPENSSL_EXPERIMENTAL_... is defined
1352         $openssl_experimental_defines .= "#define OPENSSL_NO_$ALGO\n";
1353         $exp_cflags .= " -DOPENSSL_EXPERIMENTAL_$ALGO";
1354         }
1355
1356 my $IsMK1MF=scalar grep /^$target$/,@MK1MF_Builds;
1357
1358 $exe_ext=".exe" if ($target eq "Cygwin" || $target eq "DJGPP" || $target =~ /^mingw/);
1359 $exe_ext=".nlm" if ($target =~ /netware/);
1360 $exe_ext=".pm"  if ($target =~ /vos/);
1361 $openssldir="/usr/local/ssl" if ($openssldir eq "" and $prefix eq "");
1362 $prefix=$openssldir if $prefix eq "";
1363
1364 $default_ranlib= &which("ranlib") or $default_ranlib="true";
1365 $perl=$ENV{'PERL'} or $perl=&which("perl5") or $perl=&which("perl")
1366   or $perl="perl";
1367 my $make = $ENV{'MAKE'} || "make";
1368
1369 $cross_compile_prefix=$ENV{'CROSS_COMPILE'} if $cross_compile_prefix eq "";
1370
1371 chop $openssldir if $openssldir =~ /\/$/;
1372 chop $prefix if $prefix =~ /.\/$/;
1373
1374 $openssldir=$prefix . "/ssl" if $openssldir eq "";
1375 $openssldir=$prefix . "/" . $openssldir if $openssldir !~ /(^\/|^[a-zA-Z]:[\\\/])/;
1376
1377
1378 print "IsMK1MF=$IsMK1MF\n";
1379
1380 # Allow environment CC to override compiler...
1381 my $cc = $ENV{CC} || $table{$target}->{cc};
1382
1383 # For cflags and lflags, add the debug_ or release_ attributes
1384 # Do it in such a way that no spurious space is appended (hence the grep).
1385 my $cflags = join(" ",
1386                   grep { $_ } ($table{$target}->{cflags},
1387                                $table{$target}->{$build_prefix."cflags"}));
1388 my $lflags = join(" ",
1389                   grep { $_ } ($table{$target}->{lflags},
1390                                $table{$target}->{$build_prefix."lflags"}));
1391
1392 my $unistd = $table{$target}->{unistd};
1393 my $thread_cflag = $table{$target}->{thread_cflag};
1394 my $sys_id = $table{$target}->{sys_id};
1395 my $bn_ops = $table{$target}->{bn_ops};
1396 my $cpuid_obj = $table{$target}->{cpuid_obj};
1397 my $bn_obj = $table{$target}->{bn_obj};
1398 my $ec_obj = $table{$target}->{ec_obj};
1399 my $des_obj = $table{$target}->{des_obj};
1400 my $aes_obj = $table{$target}->{aes_obj};
1401 my $bf_obj = $table{$target}->{bf_obj};
1402 my $md5_obj = $table{$target}->{md5_obj};
1403 my $sha1_obj = $table{$target}->{sha1_obj};
1404 my $cast_obj = $table{$target}->{cast_obj};
1405 my $rc4_obj = $table{$target}->{rc4_obj};
1406 my $rmd160_obj = $table{$target}->{rmd160_obj};
1407 my $rc5_obj = $table{$target}->{rc5_obj};
1408 my $wp_obj = $table{$target}->{wp_obj};
1409 my $cmll_obj = $table{$target}->{cmll_obj};
1410 my $modes_obj = $table{$target}->{modes_obj};
1411 my $engines_obj = $table{$target}->{engines_obj};
1412 my $chacha_obj = $table{$target}->{chacha_obj};
1413 my $poly1305_obj = $table{$target}->{poly1305_obj};
1414 my $perlasm_scheme = $table{$target}->{perlasm_scheme};
1415 my $dso_scheme = $table{$target}->{dso_scheme};
1416 my $shared_target = $table{$target}->{shared_target};
1417 my $shared_cflag = $table{$target}->{shared_cflag};
1418 my $shared_ldflag = $table{$target}->{shared_ldflag};
1419 my $shared_extension = $table{$target}->{shared_extension};
1420 my $ranlib = $ENV{'RANLIB'} || $table{$target}->{ranlib};
1421 my $ar = $ENV{'AR'} || "ar";
1422 my $arflags = $table{$target}->{arflags};
1423 my $multilib = $table{$target}->{multilib};
1424
1425 # if $prefix/lib$multilib is not an existing directory, then
1426 # assume that it's not searched by linker automatically, in
1427 # which case adding $multilib suffix causes more grief than
1428 # we're ready to tolerate, so don't...
1429 $multilib="" if !-d "$prefix/lib$multilib";
1430
1431 $libdir="lib$multilib" if $libdir eq "";
1432
1433 $cflags = "$cflags$exp_cflags";
1434
1435 # '%' in $lflags is used to split flags to "pre-" and post-flags
1436 my ($prelflags,$postlflags)=split('%',$lflags);
1437 if (defined($postlflags))       { $lflags=$postlflags;  }
1438 else                            { $lflags=$prelflags; undef $prelflags; }
1439
1440 if ($target =~ /^mingw/ && `$cc --target-help 2>&1` !~ m/\-mno\-cygwin/m)
1441         {
1442         $cflags =~ s/\-mno\-cygwin\s*//;
1443         $shared_ldflag =~ s/\-mno\-cygwin\s*//;
1444         }
1445
1446 if ($target =~ /linux.*\-mips/ && !$no_asm && $flags !~ /\-m(ips|arch=)/) {
1447         # minimally required architecture flags for assembly modules
1448         $cflags="-mips2 $cflags" if ($target =~ /mips32/);
1449         $cflags="-mips3 $cflags" if ($target =~ /mips64/);
1450 }
1451
1452 my $no_shared_warn=0;
1453 my $no_user_cflags=0;
1454
1455 if ($flags ne "")       { $cflags="$flags$cflags"; }
1456 else                    { $no_user_cflags=1;       }
1457
1458 # The DSO code currently always implements all functions so that no
1459 # applications will have to worry about that from a compilation point
1460 # of view. However, the "method"s may return zero unless that platform
1461 # has support compiled in for them. Currently each method is enabled
1462 # by a define "DSO_<name>" ... we translate the "dso_scheme" config
1463 # string entry into using the following logic;
1464 my $dso_cflags;
1465 if (!$no_dso && $dso_scheme ne "")
1466         {
1467         $dso_scheme =~ tr/[a-z]/[A-Z]/;
1468         if ($dso_scheme eq "DLFCN")
1469                 {
1470                 $dso_cflags = "-DDSO_DLFCN -DHAVE_DLFCN_H";
1471                 }
1472         elsif ($dso_scheme eq "DLFCN_NO_H")
1473                 {
1474                 $dso_cflags = "-DDSO_DLFCN";
1475                 }
1476         else
1477                 {
1478                 $dso_cflags = "-DDSO_$dso_scheme";
1479                 }
1480         $cflags = "$dso_cflags $cflags";
1481         }
1482
1483 my $thread_cflags;
1484 my $thread_defines;
1485 if ($thread_cflag ne "(unknown)" && !$no_threads)
1486         {
1487         # If we know how to do it, support threads by default.
1488         $threads = 1;
1489         }
1490 if ($thread_cflag eq "(unknown)" && $threads)
1491         {
1492         # If the user asked for "threads", [s]he is also expected to
1493         # provide any system-dependent compiler options that are
1494         # necessary.
1495         if ($no_user_cflags)
1496                 {
1497                 print "You asked for multi-threading support, but didn't\n";
1498                 print "provide any system-specific compiler options\n";
1499                 exit(1);
1500                 }
1501         $thread_cflags="-DOPENSSL_THREADS $cflags" ;
1502         $thread_defines .= "#define OPENSSL_THREADS\n";
1503         }
1504 else
1505         {
1506         $thread_cflags="-DOPENSSL_THREADS $thread_cflag $cflags";
1507         $thread_defines .= "#define OPENSSL_THREADS\n";
1508 #       my $def;
1509 #       foreach $def (split ' ',$thread_cflag)
1510 #               {
1511 #               if ($def =~ s/^-D// && $def !~ /^_/)
1512 #                       {
1513 #                       $thread_defines .= "#define $def\n";
1514 #                       }
1515 #               }
1516         }
1517
1518 $lflags="$libs$lflags" if ($libs ne "");
1519
1520 if ($no_asm)
1521         {
1522         $cpuid_obj=$bn_obj=$ec_obj=
1523         $des_obj=$aes_obj=$bf_obj=$cast_obj=$rc4_obj=$rc5_obj=$cmll_obj=
1524         $modes_obj=$sha1_obj=$md5_obj=$rmd160_obj=$wp_obj=$engines_obj=
1525         $chacha_obj=$poly1305_obj="";
1526         $cflags=~s/\-D[BL]_ENDIAN//             if ($fips);
1527         $thread_cflags=~s/\-D[BL]_ENDIAN//      if ($fips);
1528         }
1529 elsif (defined($disabled{ec2m}))
1530         {
1531         $bn_obj =~ s/\w+-gf2m.o//;
1532         }
1533
1534 if (!$no_shared)
1535         {
1536         $cast_obj="";   # CAST assembler is not PIC
1537         }
1538
1539 if ($threads)
1540         {
1541         $cflags=$thread_cflags;
1542         $openssl_thread_defines .= $thread_defines;
1543         }
1544
1545 if ($zlib)
1546         {
1547         $cflags = "-DZLIB $cflags";
1548         if (defined($disabled{"zlib-dynamic"}))
1549                 {
1550                 if (defined($withargs{"zlib-lib"}))
1551                         {
1552                         $lflags = "$lflags -L" . $withargs{"zlib-lib"} . " -lz";
1553                         }
1554                 else
1555                         {
1556                         $lflags = "$lflags -lz";
1557                         }
1558                 }
1559         else
1560                 {
1561                 $cflags = "-DZLIB_SHARED $cflags";
1562                 }
1563         }
1564
1565 # With "deprecated" disable all deprecated features.
1566 if (defined($disabled{"deprecated"})) {
1567         $api = $maxapi;
1568 }
1569
1570 # You will find shlib_mark1 and shlib_mark2 explained in Makefile.in
1571 my $shared_mark = "";
1572 if ($shared_target eq "")
1573         {
1574         $no_shared_warn = 1 if !$no_shared && !$fips;
1575         $no_shared = 1;
1576         }
1577 if (!$no_shared)
1578         {
1579         if ($shared_cflag ne "")
1580                 {
1581                 $cflags = "$shared_cflag -DOPENSSL_PIC $cflags";
1582                 }
1583         }
1584
1585 if (!$IsMK1MF)
1586         {
1587         # add {no-}static-engine to options to allow mkdef.pl to work without extra arguments
1588         if ($no_shared)
1589                 {
1590                 $openssl_other_defines.="#define OPENSSL_NO_DYNAMIC_ENGINE\n";
1591                 $options.=" static-engine";
1592                 }
1593         else
1594                 {
1595                 $openssl_other_defines.="#define OPENSSL_NO_STATIC_ENGINE\n";
1596                 $options.=" no-static-engine";
1597                 }
1598         }
1599
1600 $cpuid_obj.=" uplink.o uplink-x86.o" if ($cflags =~ /\-DOPENSSL_USE_APPLINK/);
1601
1602 #
1603 # Platform fix-ups
1604 #
1605 if ($target =~ /\-icc$/)        # Intel C compiler
1606         {
1607         my $iccver=0;
1608         if (open(FD,"$cc -V 2>&1 |"))
1609                 {
1610                 while(<FD>) { $iccver=$1 if (/Version ([0-9]+)\./); }
1611                 close(FD);
1612                 }
1613         if ($iccver>=8)
1614                 {
1615                 $cflags=~s/\-KPIC/-fPIC/;
1616                 # Eliminate unnecessary dependency from libirc.a. This is
1617                 # essential for shared library support, as otherwise
1618                 # apps/openssl can end up in endless loop upon startup...
1619                 $cflags.=" -Dmemcpy=__builtin_memcpy -Dmemset=__builtin_memset";
1620                 }
1621         if ($iccver>=9)
1622                 {
1623                 $lflags.=" -i-static";
1624                 $lflags=~s/\-no_cpprt/-no-cpprt/;
1625                 }
1626         if ($iccver>=10)
1627                 {
1628                 $lflags=~s/\-i\-static/-static-intel/;
1629                 }
1630         if ($iccver>=11)
1631                 {
1632                 $cflags.=" -no-intel-extensions";       # disable Cilk
1633                 $lflags=~s/\-no\-cpprt/-no-cxxlib/;
1634                 }
1635         }
1636
1637 # Unlike other OSes (like Solaris, Linux, Tru64, IRIX) BSD run-time
1638 # linkers (tested OpenBSD, NetBSD and FreeBSD) "demand" RPATH set on
1639 # .so objects. Apparently application RPATH is not global and does
1640 # not apply to .so linked with other .so. Problem manifests itself
1641 # when libssl.so fails to load libcrypto.so. One can argue that we
1642 # should engrave this into Makefile.shared rules or into BSD-* config
1643 # lines above. Meanwhile let's try to be cautious and pass -rpath to
1644 # linker only when --prefix is not /usr.
1645 if ($target =~ /^BSD\-/)
1646         {
1647         $shared_ldflag.=" -Wl,-rpath,\$(LIBRPATH)" if ($prefix !~ m|^/usr[/]*$|);
1648         }
1649
1650 if ($sys_id ne "")
1651         {
1652         #$cflags="-DOPENSSL_SYS_$sys_id $cflags";
1653         $openssl_sys_defines="#define OPENSSL_SYS_$sys_id\n";
1654         }
1655
1656 if ($ranlib eq "")
1657         {
1658         $ranlib = $default_ranlib;
1659         }
1660
1661 #my ($bn1)=split(/\s+/,$bn_obj);
1662 #$bn1 = "" unless defined $bn1;
1663 #$bn1=$bn_asm unless ($bn1 =~ /\.o$/);
1664 #$bn_obj="$bn1";
1665
1666 $cpuid_obj="" if ($processor eq "386");
1667
1668 $bn_obj = $bn_asm unless $bn_obj ne "";
1669 # bn-586 is the only one implementing bn_*_part_words
1670 $cflags.=" -DOPENSSL_BN_ASM_PART_WORDS" if ($bn_obj =~ /bn-586/);
1671 $cflags.=" -DOPENSSL_IA32_SSE2" if (!$no_sse2 && $bn_obj =~ /86/);
1672
1673 $cflags.=" -DOPENSSL_BN_ASM_MONT" if ($bn_obj =~ /-mont/);
1674 $cflags.=" -DOPENSSL_BN_ASM_MONT5" if ($bn_obj =~ /-mont5/);
1675 $cflags.=" -DOPENSSL_BN_ASM_GF2m" if ($bn_obj =~ /-gf2m/);
1676
1677 if ($fips)
1678         {
1679         $openssl_other_defines.="#define OPENSSL_FIPS\n";
1680         }
1681
1682 $cpuid_obj="mem_clr.o"  unless ($cpuid_obj =~ /\.o$/);
1683 $des_obj=$des_enc       unless ($des_obj =~ /\.o$/);
1684 $bf_obj=$bf_enc         unless ($bf_obj =~ /\.o$/);
1685 $cast_obj=$cast_enc     unless ($cast_obj =~ /\.o$/);
1686 $rc4_obj=$rc4_enc       unless ($rc4_obj =~ /\.o$/);
1687 $rc5_obj=$rc5_enc       unless ($rc5_obj =~ /\.o$/);
1688 if ($sha1_obj =~ /\.o$/)
1689         {
1690 #       $sha1_obj=$sha1_enc;
1691         $cflags.=" -DSHA1_ASM"   if ($sha1_obj =~ /sx86/ || $sha1_obj =~ /sha1/);
1692         $cflags.=" -DSHA256_ASM" if ($sha1_obj =~ /sha256/);
1693         $cflags.=" -DSHA512_ASM" if ($sha1_obj =~ /sha512/);
1694         if ($sha1_obj =~ /sse2/)
1695             {   if ($no_sse2)
1696                 {   $sha1_obj =~ s/\S*sse2\S+//;        }
1697                 elsif ($cflags !~ /OPENSSL_IA32_SSE2/)
1698                 {   $cflags.=" -DOPENSSL_IA32_SSE2";    }
1699             }
1700         }
1701 if ($md5_obj =~ /\.o$/)
1702         {
1703 #       $md5_obj=$md5_enc;
1704         $cflags.=" -DMD5_ASM";
1705         }
1706 if ($rmd160_obj =~ /\.o$/)
1707         {
1708 #       $rmd160_obj=$rmd160_enc;
1709         $cflags.=" -DRMD160_ASM";
1710         }
1711 if ($aes_obj =~ /\.o$/)
1712         {
1713         $cflags.=" -DAES_ASM" if ($aes_obj =~ m/\baes\-/);;
1714         # aes-ctr.o is not a real file, only indication that assembler
1715         # module implements AES_ctr32_encrypt...
1716         $cflags.=" -DAES_CTR_ASM" if ($aes_obj =~ s/\s*aes\-ctr\.o//);
1717         # aes-xts.o indicates presence of AES_xts_[en|de]crypt...
1718         $cflags.=" -DAES_XTS_ASM" if ($aes_obj =~ s/\s*aes\-xts\.o//);
1719         $aes_obj =~ s/\s*(vpaes|aesni)\-x86\.o//g if ($no_sse2);
1720         $cflags.=" -DVPAES_ASM" if ($aes_obj =~ m/vpaes/);
1721         $cflags.=" -DBSAES_ASM" if ($aes_obj =~ m/bsaes/);
1722         }
1723 else    {
1724         $aes_obj=$aes_enc;
1725         }
1726 $wp_obj="" if ($wp_obj =~ /mmx/ && $processor eq "386");
1727 if ($wp_obj =~ /\.o$/ && !$disabled{"whirlpool"})
1728         {
1729         $cflags.=" -DWHIRLPOOL_ASM";
1730         }
1731 else    {
1732         $wp_obj="wp_block.o";
1733         }
1734 $cmll_obj=$cmll_enc     unless ($cmll_obj =~ /.o$/);
1735 if ($modes_obj =~ /ghash\-/)
1736         {
1737         $cflags.=" -DGHASH_ASM";
1738         }
1739 if ($ec_obj =~ /ecp_nistz256/)
1740         {
1741         $cflags.=" -DECP_NISTZ256_ASM";
1742         }
1743 $chacha_obj=$chacha_enc unless ($chacha_obj =~ /\.o$/);
1744 if ($poly1305_obj =~ /\.o$/)
1745         {
1746         $cflags.=" -DPOLY1305_ASM";
1747         }
1748
1749 # "Stringify" the C flags string.  This permits it to be made part of a string
1750 # and works as well on command lines.
1751 $cflags =~ s/([\\\"])/\\\1/g;
1752
1753 my $version = "unknown";
1754 my $version_num = "unknown";
1755 my $major = "unknown";
1756 my $minor = "unknown";
1757 my $shlib_version_number = "unknown";
1758 my $shlib_version_history = "unknown";
1759 my $shlib_major = "unknown";
1760 my $shlib_minor = "unknown";
1761
1762 open(IN,'<include/openssl/opensslv.h') || die "unable to read opensslv.h:$!\n";
1763 while (<IN>)
1764         {
1765         $version=$1 if /OPENSSL.VERSION.TEXT.*OpenSSL (\S+) /;
1766         $version_num=$1 if /OPENSSL.VERSION.NUMBER.*(0x\S+)/;
1767         $shlib_version_number=$1 if /SHLIB_VERSION_NUMBER *"([^"]+)"/;
1768         $shlib_version_history=$1 if /SHLIB_VERSION_HISTORY *"([^"]*)"/;
1769         }
1770 close(IN);
1771 if ($shlib_version_history ne "") { $shlib_version_history .= ":"; }
1772
1773 if ($version =~ /(^[0-9]*)\.([0-9\.]*)/)
1774         {
1775         $major=$1;
1776         $minor=$2;
1777         }
1778
1779 if ($shlib_version_number =~ /(^[0-9]*)\.([0-9\.]*)/)
1780         {
1781         $shlib_major=$1;
1782         $shlib_minor=$2;
1783         }
1784
1785 if (defined($api)) {
1786     my $apiflag = sprintf("-DOPENSSL_API_COMPAT=%s", $apitable->{$api});
1787     $default_depflags .= " $apiflag";
1788     $cflags .= " $apiflag";
1789 }
1790
1791 my $ecc = $cc;
1792 $ecc = "clang" if `$cc --version 2>&1` =~ /clang/;
1793
1794 if ($strict_warnings)
1795         {
1796         my $wopt;
1797         die "ERROR --strict-warnings requires gcc or clang" unless ($ecc =~ /gcc(-\d(\.\d)*)?$/ or $ecc =~ /clang$/);
1798         foreach $wopt (split /\s+/, $gcc_devteam_warn)
1799                 {
1800                 $cflags .= " $wopt" unless ($cflags =~ /(^|\s)$wopt(\s|$)/)
1801                 }
1802         if ($ecc eq "clang")
1803                 {
1804                 foreach $wopt (split /\s+/, $clang_devteam_warn)
1805                         {
1806                         $cflags .= " $wopt" unless ($cflags =~ /(^|\s)$wopt(\s|$)/)
1807                         }
1808                 }
1809         if ($target !~ /^mingw/)
1810                 {
1811                 foreach $wopt (split /\s+/, $memleak_devteam_backtrace)
1812                         {
1813                         $cflags .= " $wopt" unless ($cflags =~ /(^|\s)$wopt(\s|$)/)
1814                         }
1815                 if ($target =~ /^BSD-/)
1816                         {
1817                         $lflags .= " -lexecinfo";
1818                         }
1819                 }
1820         }
1821
1822 open(IN,"<Makefile.in") || die "unable to read Makefile.in$!\n";
1823 unlink("$Makefile.new") || die "unable to remove old $Makefile.new:$!\n" if -e "$Makefile.new";
1824 open(OUT,">$Makefile.new") || die "unable to create $Makefile.new:$!\n";
1825 print OUT "### Generated automatically from Makefile.in by Configure.\n\n";
1826 my $sdirs=0;
1827
1828 while (<IN>)
1829         {
1830         chomp;
1831         $sdirs = 1 if /^SDIRS=/;
1832         if ($sdirs) {
1833                 my $dir;
1834                 foreach $dir (@skip) {
1835                         s/(\s)$dir /$1/;
1836                         s/\s$dir$//;
1837                         }
1838                 }
1839         $sdirs = 0 unless /\\$/;
1840         s/fips // if (/^DIRS=/ && !$fips);
1841         s/engines // if (/^DIRS=/ && $disabled{"engine"});
1842         s/ccgost// if (/^ENGDIRS=/ && $disabled{"gost"});
1843         s/^VERSION=.*/VERSION=$version/;
1844         s/^MAJOR=.*/MAJOR=$major/;
1845         s/^MINOR=.*/MINOR=$minor/;
1846         s/^SHLIB_VERSION_NUMBER=.*/SHLIB_VERSION_NUMBER=$shlib_version_number/;
1847         s/^SHLIB_VERSION_HISTORY=.*/SHLIB_VERSION_HISTORY=$shlib_version_history/;
1848         s/^SHLIB_MAJOR=.*/SHLIB_MAJOR=$shlib_major/;
1849         s/^SHLIB_MINOR=.*/SHLIB_MINOR=$shlib_minor/;
1850         s/^SHLIB_EXT=.*/SHLIB_EXT=$shared_extension/;
1851         s/^INSTALLTOP=.*$/INSTALLTOP=$prefix/;
1852         s/^MULTILIB=.*$/MULTILIB=$multilib/;
1853         s/^OPENSSLDIR=.*$/OPENSSLDIR=$openssldir/;
1854         s/^LIBDIR=.*$/LIBDIR=$libdir/;
1855         s/^INSTALL_PREFIX=.*$/INSTALL_PREFIX=$install_prefix/;
1856         s/^PLATFORM=.*$/PLATFORM=$target/;
1857         s/^OPTIONS=.*$/OPTIONS=$options/;
1858         s/^CONFIGURE_ARGS=.*$/CONFIGURE_ARGS=$argvstring/;
1859         if ($cross_compile_prefix)
1860                 {
1861                 s/^CC=.*$/CROSS_COMPILE= $cross_compile_prefix\nCC= \$\(CROSS_COMPILE\)$cc/;
1862                 s/^AR=\s*/AR= \$\(CROSS_COMPILE\)/;
1863                 s/^NM=\s*/NM= \$\(CROSS_COMPILE\)/;
1864                 s/^RANLIB=\s*/RANLIB= \$\(CROSS_COMPILE\)/;
1865                 s/^MAKEDEPPROG=.*$/MAKEDEPPROG= \$\(CROSS_COMPILE\)$cc/ if $cc eq "gcc";
1866                 }
1867         else    {
1868                 s/^CC=.*$/CC= $cc/;
1869                 s/^AR=\s*ar/AR= $ar/;
1870                 s/^RANLIB=.*/RANLIB= $ranlib/;
1871                 s/^MAKEDEPPROG=.*$/MAKEDEPPROG= $cc/ if $ecc eq "gcc" || $ecc eq "clang";
1872                 }
1873         s/^CFLAG=.*$/CFLAG= $cflags/;
1874         s/^DEPFLAG=.*$/DEPFLAG=$depflags/;
1875         s/^PEX_LIBS=.*$/PEX_LIBS= $prelflags/;
1876         s/^EX_LIBS=.*$/EX_LIBS= $lflags/;
1877         s/^EXE_EXT=.*$/EXE_EXT= $exe_ext/;
1878         s/^CPUID_OBJ=.*$/CPUID_OBJ= $cpuid_obj/;
1879         s/^BN_ASM=.*$/BN_ASM= $bn_obj/;
1880         s/^EC_ASM=.*$/EC_ASM= $ec_obj/;
1881         s/^DES_ENC=.*$/DES_ENC= $des_obj/;
1882         s/^AES_ENC=.*$/AES_ENC= $aes_obj/;
1883         s/^BF_ENC=.*$/BF_ENC= $bf_obj/;
1884         s/^CAST_ENC=.*$/CAST_ENC= $cast_obj/;
1885         s/^RC4_ENC=.*$/RC4_ENC= $rc4_obj/;
1886         s/^RC5_ENC=.*$/RC5_ENC= $rc5_obj/;
1887         s/^MD5_ASM_OBJ=.*$/MD5_ASM_OBJ= $md5_obj/;
1888         s/^SHA1_ASM_OBJ=.*$/SHA1_ASM_OBJ= $sha1_obj/;
1889         s/^RMD160_ASM_OBJ=.*$/RMD160_ASM_OBJ= $rmd160_obj/;
1890         s/^WP_ASM_OBJ=.*$/WP_ASM_OBJ= $wp_obj/;
1891         s/^CMLL_ENC=.*$/CMLL_ENC= $cmll_obj/;
1892         s/^MODES_ASM_OBJ.=*$/MODES_ASM_OBJ= $modes_obj/;
1893         s/^CHACHA_ENC=.*$/CHACHA_ENC= $chacha_obj/;
1894         s/^POLY1305_ASM_OBJ=.*$/POLY1305_ASM_OBJ= $poly1305_obj/;
1895         s/^ENGINES_ASM_OBJ.=*$/ENGINES_ASM_OBJ= $engines_obj/;
1896         s/^PERLASM_SCHEME=.*$/PERLASM_SCHEME= $perlasm_scheme/;
1897         s/^PROCESSOR=.*/PROCESSOR= $processor/;
1898         s/^ARFLAGS=.*/ARFLAGS= $arflags/;
1899         s/^PERL=.*/PERL= $perl/;
1900         s/^LIBZLIB=.*/LIBZLIB=$withargs{"zlib-lib"}/;
1901         s/^ZLIB_INCLUDE=.*/ZLIB_INCLUDE=$withargs{"zlib-include"}/;
1902         s/^FIPSLIBDIR=.*/FIPSLIBDIR=$fipslibdir/;
1903         s/^FIPSCANLIB=.*/FIPSCANLIB=libcrypto/ if $fips;
1904         s/^SHARED_FIPS=.*/SHARED_FIPS=/;
1905         s/^SHLIBDIRS=.*/SHLIBDIRS= crypto ssl/;
1906         s/^BASEADDR=.*/BASEADDR=$baseaddr/;
1907         s/^SHLIB_TARGET=.*/SHLIB_TARGET=$shared_target/;
1908         s/^SHLIB_MARK=.*/SHLIB_MARK=$shared_mark/;
1909         s/^SHARED_LIBS=.*/SHARED_LIBS=\$(SHARED_CRYPTO) \$(SHARED_SSL)/ if (!$no_shared);
1910         if ($shared_extension ne "" && $shared_extension =~ /^\.s([ol])\.[^\.]*$/)
1911                 {
1912                 my $sotmp = $1;
1913                 s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.s$sotmp/;
1914                 }
1915         elsif ($shared_extension ne "" && $shared_extension =~ /^\.[^\.]*\.dylib$/)
1916                 {
1917                 s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.dylib/;
1918                 }
1919         elsif ($shared_extension ne "" && $shared_extension =~ /^\.s([ol])\.[^\.]*\.[^\.]*$/)
1920                 {
1921                 my $sotmp = $1;
1922                 s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.s$sotmp.\$(SHLIB_MAJOR) .s$sotmp/;
1923                 }
1924         elsif ($shared_extension ne "" && $shared_extension =~ /^\.[^\.]*\.[^\.]*\.dylib$/)
1925                 {
1926                 s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.\$(SHLIB_MAJOR).dylib .dylib/;
1927                 }
1928         s/^SHARED_LDFLAGS=.*/SHARED_LDFLAGS=$shared_ldflag/;
1929         print OUT $_."\n";
1930         }
1931 close(IN);
1932 close(OUT);
1933 rename($Makefile,"$Makefile.orig") || die "unable to rename $Makefile\n" if -e $Makefile;
1934 rename("$Makefile.new",$Makefile) || die "unable to rename $Makefile.new\n";
1935
1936 print "CC            =$cc\n";
1937 print "CFLAG         =$cflags\n";
1938 print "EX_LIBS       =$lflags\n";
1939 print "CPUID_OBJ     =$cpuid_obj\n";
1940 print "BN_ASM        =$bn_obj\n";
1941 print "EC_ASM        =$ec_obj\n";
1942 print "DES_ENC       =$des_obj\n";
1943 print "AES_ENC       =$aes_obj\n";
1944 print "BF_ENC        =$bf_obj\n";
1945 print "CAST_ENC      =$cast_obj\n";
1946 print "RC4_ENC       =$rc4_obj\n";
1947 print "RC5_ENC       =$rc5_obj\n";
1948 print "MD5_OBJ_ASM   =$md5_obj\n";
1949 print "SHA1_OBJ_ASM  =$sha1_obj\n";
1950 print "RMD160_OBJ_ASM=$rmd160_obj\n";
1951 print "CMLL_ENC      =$cmll_obj\n";
1952 print "MODES_OBJ     =$modes_obj\n";
1953 print "ENGINES_OBJ   =$engines_obj\n";
1954 print "CHACHA_ENC    =$chacha_obj\n";
1955 print "POLY1305_OBJ  =$poly1305_obj\n";
1956 print "PROCESSOR     =$processor\n";
1957 print "RANLIB        =$ranlib\n";
1958 print "ARFLAGS       =$arflags\n";
1959 print "PERL          =$perl\n";
1960
1961 my $des_ptr=0;
1962 my $des_risc1=0;
1963 my $des_risc2=0;
1964 my $des_unroll=0;
1965 my $bn_ll=0;
1966 my $def_int=2;
1967 my $rc4_int=$def_int;
1968 my $md2_int=$def_int;
1969 my $idea_int=$def_int;
1970 my $rc2_int=$def_int;
1971 my $rc4_idx=0;
1972 my $rc4_chunk=0;
1973 my $bf_ptr=0;
1974 my @type=("char","short","int","long");
1975 my ($b64l,$b64,$b32,$b16,$b8)=(0,0,1,0,0);
1976 my $export_var_as_fn=0;
1977
1978 my $des_int;
1979
1980 foreach (sort split(/\s+/,$bn_ops))
1981         {
1982         $des_ptr=1 if /DES_PTR/;
1983         $des_risc1=1 if /DES_RISC1/;
1984         $des_risc2=1 if /DES_RISC2/;
1985         $des_unroll=1 if /DES_UNROLL/;
1986         $des_int=1 if /DES_INT/;
1987         $bn_ll=1 if /BN_LLONG/;
1988         $rc4_int=0 if /RC4_CHAR/;
1989         $rc4_int=3 if /RC4_LONG/;
1990         $rc4_idx=1 if /RC4_INDEX/;
1991         $rc4_chunk=1 if /RC4_CHUNK/;
1992         $rc4_chunk=2 if /RC4_CHUNK_LL/;
1993         $md2_int=0 if /MD2_CHAR/;
1994         $md2_int=3 if /MD2_LONG/;
1995         $idea_int=1 if /IDEA_SHORT/;
1996         $idea_int=3 if /IDEA_LONG/;
1997         $rc2_int=1 if /RC2_SHORT/;
1998         $rc2_int=3 if /RC2_LONG/;
1999         $bf_ptr=1 if $_ eq "BF_PTR";
2000         $bf_ptr=2 if $_ eq "BF_PTR2";
2001         ($b64l,$b64,$b32,$b16,$b8)=(0,1,0,0,0) if /SIXTY_FOUR_BIT/;
2002         ($b64l,$b64,$b32,$b16,$b8)=(1,0,0,0,0) if /SIXTY_FOUR_BIT_LONG/;
2003         ($b64l,$b64,$b32,$b16,$b8)=(0,0,1,0,0) if /THIRTY_TWO_BIT/;
2004         ($b64l,$b64,$b32,$b16,$b8)=(0,0,0,1,0) if /SIXTEEN_BIT/;
2005         ($b64l,$b64,$b32,$b16,$b8)=(0,0,0,0,1) if /EIGHT_BIT/;
2006         $export_var_as_fn=1 if /EXPORT_VAR_AS_FN/;
2007         }
2008
2009 open(IN,'<crypto/opensslconf.h.in') || die "unable to read crypto/opensslconf.h.in:$!\n";
2010 unlink("include/openssl/opensslconf.h.new") || die "unable to remove old include/openssl/opensslconf.h.new:$!\n" if -e "include/openssl/opensslconf.h.new";
2011 open(OUT,'>include/openssl/opensslconf.h.new') || die "unable to create include/openssl/opensslconf.h.new:$!\n";
2012 print OUT "/* opensslconf.h */\n";
2013 print OUT "/* WARNING: Generated automatically from opensslconf.h.in by Configure. */\n\n";
2014
2015 print OUT "#ifdef  __cplusplus\n";
2016 print OUT "extern \"C\" {\n";
2017 print OUT "#endif\n";
2018 print OUT "/* OpenSSL was configured with the following options: */\n";
2019
2020 my $openssl_api_defines = "";
2021 if (defined($api)) {
2022     $openssl_api_defines = sprintf "#define OPENSSL_MIN_API %s\n", $apitable->{$api};
2023 }
2024 my $openssl_algorithm_defines_trans = $openssl_algorithm_defines;
2025 $openssl_experimental_defines =~ s/^\s*#\s*define\s+OPENSSL_NO_(.*)/#ifndef OPENSSL_EXPERIMENTAL_$1\n# ifndef OPENSSL_NO_$1\n#  define OPENSSL_NO_$1\n# endif\n#endif/mg;
2026 $openssl_algorithm_defines_trans =~ s/^\s*#\s*define\s+OPENSSL_(.*)/# if defined(OPENSSL_$1) \&\& !defined($1)\n#  define $1\n# endif/mg;
2027 $openssl_algorithm_defines =~ s/^\s*#\s*define\s+(.*)/#ifndef $1\n# define $1\n#endif/mg;
2028 $openssl_algorithm_defines = "   /* no ciphers excluded */\n" if $openssl_algorithm_defines eq "";
2029 $openssl_thread_defines =~ s/^\s*#\s*define\s+(.*)/#ifndef $1\n# define $1\n#endif/mg;
2030 $openssl_sys_defines =~ s/^\s*#\s*define\s+(.*)/#ifndef $1\n# define $1\n#endif/mg;
2031 $openssl_other_defines =~ s/^\s*#\s*define\s+(.*)/#ifndef $1\n# define $1\n#endif/mg;
2032
2033 print OUT $openssl_sys_defines;
2034 print OUT "#ifndef OPENSSL_DOING_MAKEDEPEND\n\n";
2035 print OUT $openssl_experimental_defines;
2036 print OUT $openssl_api_defines;
2037 print OUT "\n";
2038 print OUT $openssl_algorithm_defines;
2039 print OUT "\n#endif /* OPENSSL_DOING_MAKEDEPEND */\n\n";
2040 print OUT $openssl_thread_defines;
2041 print OUT $openssl_other_defines,"\n";
2042
2043 print OUT "/* The OPENSSL_NO_* macros are also defined as NO_* if the application\n";
2044 print OUT "   asks for it.  This is a transient feature that is provided for those\n";
2045 print OUT "   who haven't had the time to do the appropriate changes in their\n";
2046 print OUT "   applications.  */\n";
2047 print OUT "#ifdef OPENSSL_ALGORITHM_DEFINES\n";
2048 print OUT $openssl_algorithm_defines_trans;
2049 print OUT "#endif\n\n";
2050
2051 print OUT "#define OPENSSL_CPUID_OBJ\n\n" if ($cpuid_obj ne "mem_clr.o");
2052
2053 while (<IN>)
2054         {
2055         if      (/^#define\s+OPENSSLDIR/)
2056                 {
2057                 my $foo = $openssldir;
2058                 $foo =~ s/\\/\\\\/g;
2059                 print OUT "#define OPENSSLDIR \"$foo\"\n";
2060                 }
2061         elsif   (/^#define\s+ENGINESDIR/)
2062                 {
2063                 my $foo = "$prefix/$libdir/engines";
2064                 $foo =~ s/\\/\\\\/g;
2065                 print OUT "#define ENGINESDIR \"$foo\"\n";
2066                 }
2067         elsif   (/^#((define)|(undef))\s+OPENSSL_EXPORT_VAR_AS_FUNCTION/)
2068                 { printf OUT "#undef OPENSSL_EXPORT_VAR_AS_FUNCTION\n"
2069                         if $export_var_as_fn;
2070                   printf OUT "#%s OPENSSL_EXPORT_VAR_AS_FUNCTION\n",
2071                         ($export_var_as_fn)?"define":"undef"; }
2072         elsif   (/^#define\s+OPENSSL_UNISTD/)
2073                 {
2074                 $unistd = "<unistd.h>" if $unistd eq "";
2075                 print OUT "#define OPENSSL_UNISTD $unistd\n";
2076                 }
2077         elsif   (/^#((define)|(undef))\s+SIXTY_FOUR_BIT_LONG/)
2078                 { printf OUT "#%s SIXTY_FOUR_BIT_LONG\n",($b64l)?"define":"undef"; }
2079         elsif   (/^#((define)|(undef))\s+SIXTY_FOUR_BIT/)
2080                 { printf OUT "#%s SIXTY_FOUR_BIT\n",($b64)?"define":"undef"; }
2081         elsif   (/^#((define)|(undef))\s+THIRTY_TWO_BIT/)
2082                 { printf OUT "#%s THIRTY_TWO_BIT\n",($b32)?"define":"undef"; }
2083         elsif   (/^#((define)|(undef))\s+SIXTEEN_BIT/)
2084                 { printf OUT "#%s SIXTEEN_BIT\n",($b16)?"define":"undef"; }
2085         elsif   (/^#((define)|(undef))\s+EIGHT_BIT/)
2086                 { printf OUT "#%s EIGHT_BIT\n",($b8)?"define":"undef"; }
2087         elsif   (/^#((define)|(undef))\s+BN_LLONG\s*$/)
2088                 { printf OUT "#%s BN_LLONG\n",($bn_ll)?"define":"undef"; }
2089         elsif   (/^\#define\s+OSSL_DES_LONG\s+.*/)
2090                 { printf OUT "#define OSSL_DES_LONG unsigned %s\n",
2091                         ($des_int)?'int':'long'; }
2092         elsif   (/^\#(define|undef)\s+DES_PTR/)
2093                 { printf OUT "#%s DES_PTR\n",($des_ptr)?'define':'undef'; }
2094         elsif   (/^\#(define|undef)\s+DES_RISC1/)
2095                 { printf OUT "#%s DES_RISC1\n",($des_risc1)?'define':'undef'; }
2096         elsif   (/^\#(define|undef)\s+DES_RISC2/)
2097                 { printf OUT "#%s DES_RISC2\n",($des_risc2)?'define':'undef'; }
2098         elsif   (/^\#(define|undef)\s+DES_UNROLL/)
2099                 { printf OUT "#%s DES_UNROLL\n",($des_unroll)?'define':'undef'; }
2100         elsif   (/^#define\s+RC4_INT\s/)
2101                 { printf OUT "#define RC4_INT unsigned %s\n",$type[$rc4_int]; }
2102         elsif   (/^#undef\s+RC4_CHUNK/)
2103                 {
2104                 printf OUT "#undef RC4_CHUNK\n" if $rc4_chunk==0;
2105                 printf OUT "#define RC4_CHUNK unsigned long\n" if $rc4_chunk==1;
2106                 printf OUT "#define RC4_CHUNK unsigned long long\n" if $rc4_chunk==2;
2107                 }
2108         elsif   (/^#((define)|(undef))\s+RC4_INDEX/)
2109                 { printf OUT "#%s RC4_INDEX\n",($rc4_idx)?"define":"undef"; }
2110         elsif (/^#(define|undef)\s+I386_ONLY/)
2111                 { printf OUT "#%s I386_ONLY\n", ($processor eq "386")?
2112                         "define":"undef"; }
2113         elsif   (/^#define\s+MD2_INT\s/)
2114                 { printf OUT "#define MD2_INT unsigned %s\n",$type[$md2_int]; }
2115         elsif   (/^#define\s+IDEA_INT\s/)
2116                 {printf OUT "#define IDEA_INT unsigned %s\n",$type[$idea_int];}
2117         elsif   (/^#define\s+RC2_INT\s/)
2118                 {printf OUT "#define RC2_INT unsigned %s\n",$type[$rc2_int];}
2119         elsif (/^#(define|undef)\s+BF_PTR/)
2120                 {
2121                 printf OUT "#undef BF_PTR\n" if $bf_ptr == 0;
2122                 printf OUT "#define BF_PTR\n" if $bf_ptr == 1;
2123                 printf OUT "#define BF_PTR2\n" if $bf_ptr == 2;
2124                 }
2125         else
2126                 { print OUT $_; }
2127         }
2128 close(IN);
2129 print OUT "#ifdef  __cplusplus\n";
2130 print OUT "}\n";
2131 print OUT "#endif\n";
2132 close(OUT);
2133 rename("include/openssl/opensslconf.h","include/openssl/opensslconf.h.bak") || die "unable to rename include/openssl/opensslconf.h\n" if -e "include/openssl/opensslconf.h";
2134 rename("include/openssl/opensslconf.h.new","include/openssl/opensslconf.h") || die "unable to rename include/openssl/opensslconf.h.new\n";
2135
2136
2137 # Fix the date
2138
2139 print "SIXTY_FOUR_BIT_LONG mode\n" if $b64l;
2140 print "SIXTY_FOUR_BIT mode\n" if $b64;
2141 print "THIRTY_TWO_BIT mode\n" if $b32;
2142 print "SIXTEEN_BIT mode\n" if $b16;
2143 print "EIGHT_BIT mode\n" if $b8;
2144 print "DES_PTR used\n" if $des_ptr;
2145 print "DES_RISC1 used\n" if $des_risc1;
2146 print "DES_RISC2 used\n" if $des_risc2;
2147 print "DES_UNROLL used\n" if $des_unroll;
2148 print "DES_INT used\n" if $des_int;
2149 print "BN_LLONG mode\n" if $bn_ll;
2150 print "RC4 uses u$type[$rc4_int]\n" if $rc4_int != $def_int;
2151 print "RC4_INDEX mode\n" if $rc4_idx;
2152 print "RC4_CHUNK is undefined\n" if $rc4_chunk==0;
2153 print "RC4_CHUNK is unsigned long\n" if $rc4_chunk==1;
2154 print "RC4_CHUNK is unsigned long long\n" if $rc4_chunk==2;
2155 print "MD2 uses u$type[$md2_int]\n" if $md2_int != $def_int;
2156 print "IDEA uses u$type[$idea_int]\n" if $idea_int != $def_int;
2157 print "RC2 uses u$type[$rc2_int]\n" if $rc2_int != $def_int;
2158 print "BF_PTR used\n" if $bf_ptr == 1;
2159 print "BF_PTR2 used\n" if $bf_ptr == 2;
2160
2161 # Copy all Makefile.in to Makefile (except top-level)
2162 use File::Find;
2163 use IO::File;
2164 find(sub {
2165         return if ($_ ne "Makefile.in" || $File::Find::dir eq ".");
2166         my $in = IO::File->new($_, "r") or
2167             die sprintf "Error reading Makefile.in in %s: !$\n",
2168                 $File::Find::dir;
2169         my $out = IO::File->new("Makefile", "w") or
2170             die sprintf "Error writing Makefile in %s: !$\n",
2171                 $File::Find::dir;
2172         print $out "# Generated from $_, do not edit\n";
2173         while (my $line = <$in>) { print $out $line }
2174         $in->close() or
2175             die sprintf "Error reading Makefile.in in %s: !$\n",
2176                 $File::Find::dir;
2177         $out->close() or
2178             die sprintf "Error writing Makefile in %s: !$\n",
2179                 $File::Find::dir;
2180     }, ".");
2181
2182 {
2183     my $perlguess = $perl =~ m@^/@ ? $perl : '/usr/local/bin/perl';
2184
2185     &dofile("tools/c_rehash",$perlguess,
2186             '^#!/'              => '#!%s',
2187             '^my \$dir;$'       => 'my $dir = "' . $openssldir . '";',
2188             '^my \$prefix;$'    => 'my $prefix = "' . $prefix . '";');
2189     &dofile("apps/CA.pl",$perl,
2190             '^#!/'              => '#!%s');
2191 }
2192 if($IsMK1MF) {
2193         open (OUT,">crypto/buildinf.h") || die "Can't open buildinf.h";
2194         printf OUT <<EOF;
2195 #ifndef MK1MF_BUILD
2196   /* auto-generated by Configure for crypto/cversion.c:
2197    * for Unix builds, crypto/Makefile.ssl generates functional definitions;
2198    * Windows builds (and other mk1mf builds) compile cversion.c with
2199    * -DMK1MF_BUILD and use definitions added to this file by util/mk1mf.pl. */
2200   #error "Windows builds (PLATFORM=$target) use mk1mf.pl-created Makefiles"
2201 #endif
2202 EOF
2203         close(OUT);
2204 } else {
2205         my $make_command = "$make PERL=\'$perl\'";
2206         my $make_targets = "";
2207         $make_targets .= " depend" if $depflags ne $default_depflags && $make_depend;
2208         (system $make_command.$make_targets) == 0 or die "make $make_targets failed"
2209                 if $make_targets ne "";
2210         if ($depflags ne $default_depflags && !$make_depend) {
2211             $warn_make_depend++;
2212         }
2213 }
2214
2215 # create the ms/version32.rc file if needed
2216 if ($IsMK1MF && ($target !~ /^netware/)) {
2217         my ($v1, $v2, $v3, $v4);
2218         if ($version_num =~ /^0x([0-9a-f]{1})([0-9a-f]{2})([0-9a-f]{2})([0-9a-f]{2})([0-9a-f]{1})L$/i) {
2219                 $v1=hex $1;
2220                 $v2=hex $2;
2221                 $v3=hex $3;
2222                 $v4=hex $4;
2223         }
2224         open (OUT,">ms/version32.rc") || die "Can't open ms/version32.rc";
2225         print OUT <<EOF;
2226 #include <winver.h>
2227
2228 LANGUAGE 0x09,0x01
2229
2230 1 VERSIONINFO
2231   FILEVERSION $v1,$v2,$v3,$v4
2232   PRODUCTVERSION $v1,$v2,$v3,$v4
2233   FILEFLAGSMASK 0x3fL
2234 #ifdef _DEBUG
2235   FILEFLAGS 0x01L
2236 #else
2237   FILEFLAGS 0x00L
2238 #endif
2239   FILEOS VOS__WINDOWS32
2240   FILETYPE VFT_DLL
2241   FILESUBTYPE 0x0L
2242 BEGIN
2243     BLOCK "StringFileInfo"
2244     BEGIN
2245         BLOCK "040904b0"
2246         BEGIN
2247             // Required:
2248             VALUE "CompanyName", "The OpenSSL Project, http://www.openssl.org/\\0"
2249             VALUE "FileDescription", "OpenSSL Shared Library\\0"
2250             VALUE "FileVersion", "$version\\0"
2251 #if defined(CRYPTO)
2252             VALUE "InternalName", "libeay32\\0"
2253             VALUE "OriginalFilename", "libeay32.dll\\0"
2254 #elif defined(SSL)
2255             VALUE "InternalName", "ssleay32\\0"
2256             VALUE "OriginalFilename", "ssleay32.dll\\0"
2257 #endif
2258             VALUE "ProductName", "The OpenSSL Toolkit\\0"
2259             VALUE "ProductVersion", "$version\\0"
2260             // Optional:
2261             //VALUE "Comments", "\\0"
2262             VALUE "LegalCopyright", "Copyright Â© 1998-2015 The OpenSSL Project. Copyright Â© 1995-1998 Eric A. Young, Tim J. Hudson. All rights reserved.\\0"
2263             //VALUE "LegalTrademarks", "\\0"
2264             //VALUE "PrivateBuild", "\\0"
2265             //VALUE "SpecialBuild", "\\0"
2266         END
2267     END
2268     BLOCK "VarFileInfo"
2269     BEGIN
2270         VALUE "Translation", 0x409, 0x4b0
2271     END
2272 END
2273 EOF
2274         close(OUT);
2275   }
2276
2277 print <<EOF;
2278
2279 Configured for $target.
2280 EOF
2281
2282 print <<\EOF if (!$no_threads && !$threads);
2283
2284 The library could not be configured for supporting multi-threaded
2285 applications as the compiler options required on this system are not known.
2286 See file INSTALL for details if you need multi-threading.
2287 EOF
2288
2289 print <<\EOF if ($no_shared_warn);
2290
2291 You gave the option 'shared', which is not supported on this platform, so
2292 we will pretend you gave the option 'no-shared'.  If you know how to implement
2293 shared libraries, please let us know (but please first make sure you have
2294 tried with a current version of OpenSSL).
2295 EOF
2296
2297 print <<EOF if ($warn_make_depend);
2298
2299 *** Because of configuration changes, you MUST do the following before
2300 *** building:
2301
2302         make depend
2303 EOF
2304
2305 exit(0);
2306
2307 sub usage
2308         {
2309         print STDERR $usage;
2310         print STDERR "\npick os/compiler from:\n";
2311         my $j=0;
2312         my $i;
2313         my $k=0;
2314         foreach $i (sort keys %table)
2315                 {
2316                 next if $i =~ /^debug/;
2317                 $k += length($i) + 1;
2318                 if ($k > 78)
2319                         {
2320                         print STDERR "\n";
2321                         $k=length($i);
2322                         }
2323                 print STDERR $i . " ";
2324                 }
2325         foreach $i (sort keys %table)
2326                 {
2327                 next if $i !~ /^debug/;
2328                 $k += length($i) + 1;
2329                 if ($k > 78)
2330                         {
2331                         print STDERR "\n";
2332                         $k=length($i);
2333                         }
2334                 print STDERR $i . " ";
2335                 }
2336         print STDERR "\n\nNOTE: If in doubt, on Unix-ish systems use './config'.\n";
2337         exit(1);
2338         }
2339
2340 sub which
2341         {
2342         my($name)=@_;
2343         my $path;
2344         foreach $path (split /:/, $ENV{PATH})
2345                 {
2346                 if (-f "$path/$name$exe_ext" and -x _)
2347                         {
2348                         return "$path/$name$exe_ext" unless ($name eq "perl" and
2349                          system("$path/$name$exe_ext -e " . '\'exit($]<5.0);\''));
2350                         }
2351                 }
2352         }
2353
2354 sub dofile
2355         {
2356         my $f; my $p; my %m; my @a; my $k; my $ff;
2357         ($f,$p,%m)=@_;
2358
2359         open(IN,"<$f.in") || open(IN,"<$f") || die "unable to open $f:$!\n";
2360         @a=<IN>;
2361         close(IN);
2362         foreach $k (keys %m)
2363                 {
2364                 grep(/$k/ && ($_=sprintf($m{$k}."\n",$p)),@a);
2365                 }
2366         open(OUT,">$f.new") || die "unable to open $f.new:$!\n";
2367         print OUT @a;
2368         close(OUT);
2369         rename($f,"$f.bak") || die "unable to rename $f\n" if -e $f;
2370         rename("$f.new",$f) || die "unable to rename $f.new\n";
2371         }
2372
2373 sub print_table_entry
2374         {
2375         my $target = shift;
2376         my $type = shift;
2377
2378         # Don't print the templates
2379         return if $table{$target}->{template};
2380
2381         if ($type eq "TABLE") {
2382             print <<EOF
2383
2384 *** $target
2385 \$cc           = $table{$target}->{cc}
2386 \$cflags       = $table{$target}->{cflags}
2387 \$debug_cflags   = $table{$target}->{debug_cflags}
2388 \$release_cflags = $table{$target}->{release_cflags}
2389 \$unistd       = $table{$target}->{unistd}
2390 \$thread_cflag = $table{$target}->{thread_cflag}
2391 \$sys_id       = $table{$target}->{sys_id}
2392 \$lflags       = $table{$target}->{lflags}
2393 \$debug_lflags   = $table{$target}->{debug_lflags}
2394 \$release_lflags = $table{$target}->{release_lflags}
2395 \$bn_ops       = $table{$target}->{bn_ops}
2396 \$cpuid_obj    = $table{$target}->{cpuid_obj}
2397 \$bn_obj       = $table{$target}->{bn_obj}
2398 \$ec_obj       = $table{$target}->{ec_obj}
2399 \$des_obj      = $table{$target}->{des_obj}
2400 \$aes_obj      = $table{$target}->{aes_obj}
2401 \$bf_obj       = $table{$target}->{bf_obj}
2402 \$md5_obj      = $table{$target}->{md5_obj}
2403 \$sha1_obj     = $table{$target}->{sha1_obj}
2404 \$cast_obj     = $table{$target}->{cast_obj}
2405 \$rc4_obj      = $table{$target}->{rc4_obj}
2406 \$rmd160_obj   = $table{$target}->{rmd160_obj}
2407 \$rc5_obj      = $table{$target}->{rc5_obj}
2408 \$wp_obj       = $table{$target}->{wp_obj}
2409 \$cmll_obj     = $table{$target}->{cmll_obj}
2410 \$modes_obj    = $table{$target}->{modes_obj}
2411 \$engines_obj  = $table{$target}->{engines_obj}
2412 \$chacha_obj   = $table{$target}->{chacha_obj}
2413 \$poly1305_obj = $table{$target}->{poly1305_obj}
2414 \$perlasm_scheme = $table{$target}->{perlasm_scheme}
2415 \$dso_scheme   = $table{$target}->{dso_scheme}
2416 \$shared_target= $table{$target}->{shared_target}
2417 \$shared_cflag = $table{$target}->{shared_cflag}
2418 \$shared_ldflag = $table{$target}->{shared_ldflag}
2419 \$shared_extension = $table{$target}->{shared_extension}
2420 \$ranlib       = $table{$target}->{ranlib}
2421 \$arflags      = $table{$target}->{arflags}
2422 \$multilib     = $table{$target}->{multilib}
2423 EOF
2424         } elsif ($type eq "HASH") {
2425             my @sequence = (
2426                 "cc",
2427                 "cflags",
2428                 "debug_cflags",
2429                 "release_cflags",
2430                 "unistd",
2431                 "thread_cflag",
2432                 "sys_id",
2433                 "lflags",
2434                 "debug_lflags",
2435                 "release_lflags",
2436                 "bn_ops",
2437                 "cpuid_obj",
2438                 "bn_obj",
2439                 "ec_obj",
2440                 "des_obj",
2441                 "aes_obj",
2442                 "bf_obj",
2443                 "md5_obj",
2444                 "sha1_obj",
2445                 "cast_obj",
2446                 "rc4_obj",
2447                 "rmd160_obj",
2448                 "rc5_obj",
2449                 "wp_obj",
2450                 "cmll_obj",
2451                 "modes_obj",
2452                 "engines_obj",
2453                 "chacha_obj",
2454                 "poly1305_obj",
2455                 "perlasm_scheme",
2456                 "dso_scheme",
2457                 "shared_target",
2458                 "shared_cflag",
2459                 "shared_ldflag",
2460                 "shared_extension",
2461                 "ranlib",
2462                 "arflags",
2463                 "multilib",
2464                 );
2465             my $largest =
2466                 length((sort { length($a) <=> length($b) } @sequence)[-1]);
2467             print "    '$target' => {\n";
2468             foreach (@sequence) {
2469                 if ($table{$target}->{$_}) {
2470                     print "      '",$_,"'"," " x ($largest - length($_))," => '",$table{$target}->{$_},"',\n";
2471                 }
2472             }
2473             print "    },\n";
2474         }
2475         }
2476
2477 sub test_sanity
2478         {
2479         my $errorcnt = 0;
2480
2481         print STDERR "=" x 70, "\n";
2482         print STDERR "=== SANITY TESTING!\n";
2483         print STDERR "=== No configuration will be done, all other arguments will be ignored!\n";
2484         print STDERR "=" x 70, "\n";
2485
2486         foreach $target (sort keys %table)
2487                 {
2488                 my $pre_dso_scheme = "perlasm_scheme";
2489                 my $dso_scheme = "dso_scheme";
2490                 my $post_dso_scheme = "shared_target";
2491
2492
2493                 if ($table{$target}->{$pre_dso_scheme} =~ /^(beos|dl|dlfcn|win32|vms)$/)
2494                         {
2495                         $errorcnt++;
2496                         print STDERR "SANITY ERROR: '$target' has the dso_scheme values\n";
2497                         print STDERR "              in the previous field\n";
2498                         }
2499                 elsif ($table{$target}->{$post_dso_scheme} =~ /^(beos|dl|dlfcn|win32|vms)$/)
2500                         {
2501                         $errorcnt++;
2502                         print STDERR "SANITY ERROR: '$target' has the dso_scheme values\n";
2503                         print STDERR "              in the following field\n";
2504                         }
2505                 elsif ($table{$target}->{$dso_scheme} !~ /^(beos|dl|dlfcn|win32|vms|)$/)
2506                         {
2507                         $errorcnt++;
2508                         print STDERR "SANITY ERROR: '$target' has the dso_scheme field = ",$table{$target}->{$dso_scheme},"\n";
2509                         print STDERR "              valid values are 'beos', 'dl', 'dlfcn', 'win32' and 'vms'\n";
2510                         }
2511                 }
2512         print STDERR "No sanity errors detected!\n" if $errorcnt == 0;
2513         return $errorcnt;
2514         }