Configure

   1 :
   2 eval 'exec perl -S $0 ${1+"$@"}'
   3     if $running_under_some_shell;
   4 ##
   5 ##  Configure -- OpenSSL source tree configuration script
   6 ##
   7
   8 require 5.000;
   9 use strict;
  10 use File::Compare;
  11
  12 # see INSTALL for instructions.
  13
  14 my $usage="Usage: Configure [no-<cipher> ...] [enable-<cipher> ...] [experimental-<cipher> ...] [-Dxxx] [-lxxx] [-Lxxx] [-fxxx] [-Kxxx] [no-hw-xxx|no-hw] [[no-]threads] [[no-]shared] [[no-]zlib|zlib-dynamic] [no-asm] [no-dso] [no-krb5] [sctp] [386] [--prefix=DIR] [--openssldir=OPENSSLDIR] [--with-xxx[=vvv]] [--test-sanity] os/compiler[:flags]\n";
  15
  16 # Options:
  17 #
  18 # --openssldir  install OpenSSL in OPENSSLDIR (Default: DIR/ssl if the
  19 #               --prefix option is given; /usr/local/ssl otherwise)
  20 # --prefix      prefix for the OpenSSL include, lib and bin directories
  21 #               (Default: the OPENSSLDIR directory)
  22 #
  23 # --install_prefix  Additional prefix for package builders (empty by
  24 #               default).  This needn't be set in advance, you can
  25 #               just as well use "make INSTALL_PREFIX=/whatever install".
  26 #
  27 # --with-krb5-dir  Declare where Kerberos 5 lives.  The libraries are expected
  28 #               to live in the subdirectory lib/ and the header files in
  29 #               include/.  A value is required.
  30 # --with-krb5-lib  Declare where the Kerberos 5 libraries live.  A value is
  31 #               required.
  32 #               (Default: KRB5_DIR/lib)
  33 # --with-krb5-include  Declare where the Kerberos 5 header files live.  A
  34 #               value is required.
  35 #               (Default: KRB5_DIR/include)
  36 # --with-krb5-flavor  Declare what flavor of Kerberos 5 is used.  Currently
  37 #               supported values are "MIT" and "Heimdal".  A value is required.
  38 #
  39 # --test-sanity Make a number of sanity checks on the data in this file.
  40 #               This is a debugging tool for OpenSSL developers.
  41 #
  42 # --cross-compile-prefix Add specified prefix to binutils components.
  43 #
  44 # no-hw-xxx     do not compile support for specific crypto hardware.
  45 #               Generic OpenSSL-style methods relating to this support
  46 #               are always compiled but return NULL if the hardware
  47 #               support isn't compiled.
  48 # no-hw         do not compile support for any crypto hardware.
  49 # [no-]threads  [don't] try to create a library that is suitable for
  50 #               multithreaded applications (default is "threads" if we
  51 #               know how to do it)
  52 # [no-]shared   [don't] try to create shared libraries when supported.
  53 # no-asm        do not use assembler
  54 # no-dso        do not compile in any native shared-library methods. This
  55 #               will ensure that all methods just return NULL.
  56 # no-krb5       do not compile in any KRB5 library or code.
  57 # [no-]zlib     [don't] compile support for zlib compression.
  58 # zlib-dynamic  Like "zlib", but the zlib library is expected to be a shared
  59 #               library and will be loaded in run-time by the OpenSSL library.
  60 # sctp          include SCTP support
  61 # enable-weak-ssl-ciphers
  62 #               Enable EXPORT and LOW SSLv3 ciphers that are disabled by
  63 #               default.  Note, weak SSLv2 ciphers are unconditionally
  64 #               disabled.
  65 # 386           generate 80386 code in assembly modules
  66 # no-sse2       disables IA-32 SSE2 code in assembly modules, the above
  67 #               mentioned '386' option implies this one
  68 # no-<cipher>   build without specified algorithm (rsa, idea, rc5, ...)
  69 # -<xxx> +<xxx> compiler options are passed through
  70 #
  71 # DEBUG_SAFESTACK use type-safe stacks to enforce type-safety on stack items
  72 #               provided to stack calls. Generates unique stack functions for
  73 #               each possible stack type.
  74 # DES_PTR       use pointer lookup vs arrays in the DES in crypto/des/des_locl.h
  75 # DES_RISC1     use different DES_ENCRYPT macro that helps reduce register
  76 #               dependancies but needs to more registers, good for RISC CPU's
  77 # DES_RISC2     A different RISC variant.
  78 # DES_UNROLL    unroll the inner DES loop, sometimes helps, somtimes hinders.
  79 # DES_INT       use 'int' instead of 'long' for DES_LONG in crypto/des/des.h
  80 #               This is used on the DEC Alpha where long is 8 bytes
  81 #               and int is 4
  82 # BN_LLONG      use the type 'long long' in crypto/bn/bn.h
  83 # MD2_CHAR      use 'char' instead of 'int' for MD2_INT in crypto/md2/md2.h
  84 # MD2_LONG      use 'long' instead of 'int' for MD2_INT in crypto/md2/md2.h
  85 # IDEA_SHORT    use 'short' instead of 'int' for IDEA_INT in crypto/idea/idea.h
  86 # IDEA_LONG     use 'long' instead of 'int' for IDEA_INT in crypto/idea/idea.h
  87 # RC2_SHORT     use 'short' instead of 'int' for RC2_INT in crypto/rc2/rc2.h
  88 # RC2_LONG      use 'long' instead of 'int' for RC2_INT in crypto/rc2/rc2.h
  89 # RC4_CHAR      use 'char' instead of 'int' for RC4_INT in crypto/rc4/rc4.h
  90 # RC4_LONG      use 'long' instead of 'int' for RC4_INT in crypto/rc4/rc4.h
  91 # RC4_INDEX     define RC4_INDEX in crypto/rc4/rc4_locl.h.  This turns on
  92 #               array lookups instead of pointer use.
  93 # RC4_CHUNK     enables code that handles data aligned at long (natural CPU
  94 #               word) boundary.
  95 # RC4_CHUNK_LL  enables code that handles data aligned at long long boundary
  96 #               (intended for 64-bit CPUs running 32-bit OS).
  97 # BF_PTR        use 'pointer arithmatic' for Blowfish (unsafe on Alpha).
  98 # BF_PTR2       intel specific version (generic version is more efficient).
  99 #
 100 # Following are set automatically by this script
 101 #
 102 # MD5_ASM       use some extra md5 assember,
 103 # SHA1_ASM      use some extra sha1 assember, must define L_ENDIAN for x86
 104 # RMD160_ASM    use some extra ripemd160 assember,
 105 # SHA256_ASM    sha256_block is implemented in assembler
 106 # SHA512_ASM    sha512_block is implemented in assembler
 107 # AES_ASM       ASE_[en|de]crypt is implemented in assembler
 108
 109 # Minimum warning options... any contributions to OpenSSL should at least get
 110 # past these.
 111
 112 my $gcc_devteam_warn = "-Wall -pedantic -DPEDANTIC -Wno-long-long -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wundef -Werror -DCRYPTO_MDEBUG_ALL -DCRYPTO_MDEBUG_ABORT -DREF_CHECK -DOPENSSL_NO_DEPRECATED";
 113
 114 # TODO(openssl-team): fix problems and investigate if (at least) the following
 115 # warnings can also be enabled:
 116 # -Wconditional-uninitialized, -Wswitch-enum, -Wunused-macros,
 117 # -Wmissing-field-initializers, -Wmissing-variable-declarations,
 118 # -Wincompatible-pointer-types-discards-qualifiers, -Wcast-align,
 119 # -Wunreachable-code -Wunused-parameter -Wlanguage-extension-token
 120 # -Wextended-offsetof
 121 my $clang_disabled_warnings = "-Wno-unused-parameter -Wno-missing-field-initializers -Wno-language-extension-token  -Wno-extended-offsetof";
 122
 123 # These are used in addition to $gcc_devteam_warn when the compiler is clang.
 124 # TODO(openssl-team): fix problems and investigate if (at least) the
 125 # following warnings can also be enabled: -Wconditional-uninitialized,
 126 # -Wswitch-enum, -Wunused-macros, -Wmissing-field-initializers,
 127 # -Wmissing-variable-declarations,
 128 # -Wincompatible-pointer-types-discards-qualifiers, -Wcast-align,
 129 # -Wunreachable-code -Wunused-parameter -Wlanguage-extension-token
 130 # -Wextended-offsetof
 131 my $clang_devteam_warn = "-Wno-unused-parameter -Wno-missing-field-initializers -Wno-language-extension-token -Wno-extended-offsetof -Qunused-arguments";
 132
 133 # Warn that "make depend" should be run?
 134 my $warn_make_depend = 0;
 135
 136 my $strict_warnings = 0;
 137
 138 my $x86_gcc_des="DES_PTR DES_RISC1 DES_UNROLL";
 139
 140 # MD2_CHAR slags pentium pros
 141 my $x86_gcc_opts="RC4_INDEX MD2_INT";
 142
 143 # MODIFY THESE PARAMETERS IF YOU ARE GOING TO USE THE 'util/speed.sh SCRIPT
 144 # Don't worry about these normally
 145
 146 my $tcc="cc";
 147 my $tflags="-fast -Xa";
 148 my $tbn_mul="";
 149 my $tlib="-lnsl -lsocket";
 150 #$bits1="SIXTEEN_BIT ";
 151 #$bits2="THIRTY_TWO_BIT ";
 152 my $bits1="THIRTY_TWO_BIT ";
 153 my $bits2="SIXTY_FOUR_BIT ";
 154
 155 my $x86_asm="x86cpuid.o:bn-586.o co-586.o x86-mont.o x86-gf2m.o::des-586.o crypt586.o:aes-586.o vpaes-x86.o aesni-x86.o:bf-586.o:md5-586.o:sha1-586.o sha256-586.o sha512-586.o:cast-586.o:rc4-586.o:rmd-586.o:rc5-586.o:wp_block.o wp-mmx.o:cmll-x86.o:ghash-x86.o:";
 156
 157 my $x86_elf_asm="$x86_asm:elf";
 158
 159 my $x86_64_asm="x86_64cpuid.o:x86_64-gcc.o x86_64-mont.o x86_64-mont5.o x86_64-gf2m.o rsaz_exp.o rsaz-x86_64.o rsaz-avx2.o:ecp_nistz256.o ecp_nistz256-x86_64.o::aes-x86_64.o vpaes-x86_64.o bsaes-x86_64.o aesni-x86_64.o aesni-sha1-x86_64.o aesni-sha256-x86_64.o aesni-mb-x86_64.o::md5-x86_64.o:sha1-x86_64.o sha256-x86_64.o sha512-x86_64.o sha1-mb-x86_64.o sha256-mb-x86_64.o::rc4-x86_64.o rc4-md5-x86_64.o:::wp-x86_64.o:cmll-x86_64.o cmll_misc.o:ghash-x86_64.o aesni-gcm-x86_64.o:";
 160 my $ia64_asm="ia64cpuid.o:bn-ia64.o ia64-mont.o:::aes_core.o aes_cbc.o aes-ia64.o::md5-ia64.o:sha1-ia64.o sha256-ia64.o sha512-ia64.o::rc4-ia64.o rc4_skey.o:::::ghash-ia64.o::void";
 161 my $sparcv9_asm="sparcv9cap.o sparccpuid.o:bn-sparcv9.o sparcv9-mont.o sparcv9a-mont.o vis3-mont.o sparct4-mont.o sparcv9-gf2m.o::des_enc-sparc.o fcrypt_b.o dest4-sparcv9.o:aes_core.o aes_cbc.o aes-sparcv9.o aest4-sparcv9.o::md5-sparcv9.o:sha1-sparcv9.o sha256-sparcv9.o sha512-sparcv9.o::::::camellia.o cmll_misc.o cmll_cbc.o cmllt4-sparcv9.o:ghash-sparcv9.o::void";
 162 my $sparcv8_asm=":sparcv8.o::des_enc-sparc.o fcrypt_b.o:::::::::::::void";
 163 my $alpha_asm="alphacpuid.o:bn_asm.o alpha-mont.o::::::sha1-alpha.o:::::::ghash-alpha.o::void";
 164 my $mips64_asm=":bn-mips.o mips-mont.o:::aes_cbc.o aes-mips.o:::sha1-mips.o sha256-mips.o sha512-mips.o::::::::";
 165 my $mips32_asm=$mips64_asm; $mips32_asm =~ s/\s*sha512\-mips\.o//;
 166 my $s390x_asm="s390xcap.o s390xcpuid.o:bn-s390x.o s390x-mont.o s390x-gf2m.o:::aes-s390x.o aes-ctr.o aes-xts.o:::sha1-s390x.o sha256-s390x.o sha512-s390x.o::rc4-s390x.o:::::ghash-s390x.o:";
 167 my $armv4_asm="armcap.o armv4cpuid.o:bn_asm.o armv4-mont.o armv4-gf2m.o:::aes_cbc.o aes-armv4.o bsaes-armv7.o aesv8-armx.o:::sha1-armv4-large.o sha256-armv4.o sha512-armv4.o:::::::ghash-armv4.o ghashv8-armx.o::void";
 168 my $aarch64_asm="armcap.o arm64cpuid.o mem_clr.o::::aes_core.o aes_cbc.o aesv8-armx.o:::sha1-armv8.o sha256-armv8.o sha512-armv8.o:::::::ghashv8-armx.o:";
 169 my $parisc11_asm="pariscid.o:bn_asm.o parisc-mont.o:::aes_core.o aes_cbc.o aes-parisc.o:::sha1-parisc.o sha256-parisc.o sha512-parisc.o::rc4-parisc.o:::::ghash-parisc.o::32";
 170 my $parisc20_asm="pariscid.o:pa-risc2W.o parisc-mont.o:::aes_core.o aes_cbc.o aes-parisc.o:::sha1-parisc.o sha256-parisc.o sha512-parisc.o::rc4-parisc.o:::::ghash-parisc.o::64";
 171 my $ppc64_asm="ppccpuid.o ppccap.o:bn-ppc.o ppc-mont.o ppc64-mont.o:::aes_core.o aes_cbc.o aes-ppc.o vpaes-ppc.o aesp8-ppc.o:::sha1-ppc.o sha256-ppc.o sha512-ppc.o sha256p8-ppc.o sha512p8-ppc.o:::::::ghashp8-ppc.o:";
 172 my $ppc32_asm=$ppc64_asm;
 173 my $no_asm="::::::::::::::::void";
 174
 175 # As for $BSDthreads. Idea is to maintain "collective" set of flags,
 176 # which would cover all BSD flavors. -pthread applies to them all,
 177 # but is treated differently. OpenBSD expands is as -D_POSIX_THREAD
 178 # -lc_r, which is sufficient. FreeBSD 4.x expands it as -lc_r,
 179 # which has to be accompanied by explicit -D_THREAD_SAFE and
 180 # sometimes -D_REENTRANT. FreeBSD 5.x expands it as -lc_r, which
 181 # seems to be sufficient?
 182 my $BSDthreads="-pthread -D_THREAD_SAFE -D_REENTRANT";
 183
 184 #config-string  $cc : $cflags : $unistd : $thread_cflag : $sys_id : $lflags : $bn_ops : $cpuid_obj : $bn_obj : $ec_obj : $des_obj : $aes_obj : $bf_obj : $md5_obj : $sha1_obj : $cast_obj : $rc4_obj : $rmd160_obj : $rc5_obj : $wp_obj : $cmll_obj : $modes_obj : $engines_obj : $dso_scheme : $shared_target : $shared_cflag : $shared_ldflag : $shared_extension : $ranlib : $arflags : $multilib
 185
 186 my %table=(
 187 # File 'TABLE' (created by 'make TABLE') contains the data from this list,
 188 # formatted for better readability.
 189
 190
 191 #"b",           "${tcc}:${tflags}::${tlib}:${bits1}:${tbn_mul}::",
 192 #"bl-4c-2c",    "${tcc}:${tflags}::${tlib}:${bits1}BN_LLONG RC4_CHAR MD2_CHAR:${tbn_mul}::",
 193 #"bl-4c-ri",    "${tcc}:${tflags}::${tlib}:${bits1}BN_LLONG RC4_CHAR RC4_INDEX:${tbn_mul}::",
 194 #"b2-is-ri-dp", "${tcc}:${tflags}::${tlib}:${bits2}IDEA_SHORT RC4_INDEX DES_PTR:${tbn_mul}::",
 195
 196 # Our development configs
 197 "purify",       "purify gcc:-g -DPURIFY -Wall::(unknown)::-lsocket -lnsl::::",
 198 "debug",        "gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DOPENSSL_NO_ASM -ggdb -g2 -Wformat -Wshadow -Wmissing-prototypes -Wmissing-declarations -Werror::(unknown)::-lefence::::",
 199 "debug-ben",    "gcc:$gcc_devteam_warn -DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DDEBUG_SAFESTACK -O2 -pipe::(unknown):::::",
 200 "debug-ben-openbsd","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DPEDANTIC -DDEBUG_SAFESTACK -DOPENSSL_OPENBSD_DEV_CRYPTO -DOPENSSL_NO_ASM -O2 -pedantic -Wall -Wshadow -Werror -pipe::(unknown)::::",
 201 "debug-ben-openbsd-debug","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DPEDANTIC -DDEBUG_SAFESTACK -DOPENSSL_OPENBSD_DEV_CRYPTO -DOPENSSL_NO_ASM -g3 -O2 -pedantic -Wall -Wshadow -Werror -pipe::(unknown)::::",
 202 "debug-ben-debug",      "gcc44:$gcc_devteam_warn -DBN_DEBUG -DCONF_DEBUG -DDEBUG_SAFESTACK -DDEBUG_UNUSED -g3 -O2 -pipe::(unknown)::::::",
 203 "debug-ben-debug-64",   "gcc:$gcc_devteam_warn -Wno-error=overlength-strings -DBN_DEBUG -DCONF_DEBUG -DDEBUG_SAFESTACK -DDEBUG_UNUSED -g3 -O3 -pipe::${BSDthreads}:::SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 204 "debug-ben-macos",      "cc:$gcc_devteam_warn -arch i386 -DBN_DEBUG -DCONF_DEBUG -DDEBUG_SAFESTACK -DDEBUG_UNUSED -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -O3 -DL_ENDIAN -g3 -pipe::(unknown)::-Wl,-search_paths_first::::",
 205 "debug-ben-macos-gcc46",        "gcc-mp-4.6:$gcc_devteam_warn -Wconversion -DBN_DEBUG -DCONF_DEBUG -DDEBUG_SAFESTACK -DDEBUG_UNUSED -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -O3 -DL_ENDIAN -g3 -pipe::(unknown)::::::",
 206 "debug-ben-darwin64","cc:$gcc_devteam_warn -g -Wno-language-extension-token -Wno-extended-offsetof -arch x86_64 -O3 -DL_ENDIAN -Wall::-D_REENTRANT:MACOSX:-Wl,-search_paths_first%:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL:".eval{my $asm=$x86_64_asm;$asm=~s/rc4\-[^:]+//;$asm}.":macosx:dlfcn:darwin-shared:-fPIC -fno-common:-arch x86_64 -dynamiclib:.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
 207 "debug-ben-debug-64-clang",     "clang:$gcc_devteam_warn -Wno-error=overlength-strings -Wno-error=extended-offsetof -Qunused-arguments -DBN_DEBUG -DCONF_DEBUG -DDEBUG_SAFESTACK -DDEBUG_UNUSED -g3 -O3 -pipe::${BSDthreads}:::SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 208 "debug-ben-no-opt",     "gcc: -Wall -Wmissing-prototypes -Wstrict-prototypes -Wmissing-declarations -DDEBUG_SAFESTACK -DCRYPTO_MDEBUG -Werror -DL_ENDIAN -DTERMIOS -Wall -g3::(unknown)::::::",
 209 "debug-ben-strict",     "gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DCONST_STRICT -O2 -Wall -Wshadow -Werror -Wpointer-arith -Wcast-qual -Wwrite-strings -pipe::(unknown)::::::",
 210 "debug-rse","cc:-DTERMIOS -DL_ENDIAN -pipe -O -g -ggdb3 -Wall::(unknown):::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}",
 211 "debug-bodo",   "gcc:$gcc_devteam_warn -Wno-error=overlength-strings -DBN_DEBUG -DBN_DEBUG_RAND -DCONF_DEBUG -DBIO_PAIR_DEBUG -m64 -DL_ENDIAN -DTERMIO -g -DMD32_REG_T=int::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64",
 212 "debug-steve64", "gcc:$gcc_devteam_warn -m64 -DL_ENDIAN -DTERMIO -DCONF_DEBUG -DDEBUG_SAFESTACK -Wno-overlength-strings -g::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 213 "debug-steve32", "gcc:$gcc_devteam_warn -m32 -DL_ENDIAN -DCONF_DEBUG -DDEBUG_SAFESTACK -Wno-overlength-strings -g -pipe::-D_REENTRANT::-rdynamic -ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC:-m32:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 214 "debug-steve-opt", "gcc:$gcc_devteam_warn -m64 -O3 -DL_ENDIAN -DTERMIO -DCONF_DEBUG -DDEBUG_SAFESTACK -g::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 215 "debug-levitte-linux-elf","gcc:-DLEVITTE_DEBUG -DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DCRYPTO_MDEBUG -DL_ENDIAN -ggdb -g3 -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 216 "debug-levitte-linux-noasm","gcc:-DLEVITTE_DEBUG -DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DCRYPTO_MDEBUG -DOPENSSL_NO_ASM -DL_ENDIAN -ggdb -g3 -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${no_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 217 "debug-levitte-linux-elf-extreme","gcc:-DLEVITTE_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_DEBUG -DBN_DEBUG_RAND -DCRYPTO_MDEBUG -DENGINE_CONF_DEBUG -DL_ENDIAN -DPEDANTIC -ggdb -g3 -pedantic -ansi -Wall -W -Wundef -Wshadow -Wcast-align -Wstrict-prototypes -Wmissing-prototypes -Wno-long-long -Wundef -Wconversion -pipe::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 218 "debug-levitte-linux-noasm-extreme","gcc:-DLEVITTE_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_DEBUG -DBN_DEBUG_RAND -DCRYPTO_MDEBUG -DENGINE_CONF_DEBUG -DOPENSSL_NO_ASM -DL_ENDIAN -DPEDANTIC -ggdb -g3 -pedantic -ansi -Wall -W -Wundef -Wshadow -Wcast-align -Wstrict-prototypes -Wmissing-prototypes -Wno-long-long -Wundef -Wconversion -pipe::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${no_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 219 "debug-geoff32","gcc:-DBN_DEBUG -DBN_DEBUG_RAND -DBN_STRICT -DPURIFY -DOPENSSL_NO_DEPRECATED -DOPENSSL_NO_ASM -DOPENSSL_NO_INLINE_ASM -DL_ENDIAN -DTERMIO -DPEDANTIC -O1 -ggdb2 -Wall -Werror -Wundef -pedantic -Wshadow -Wpointer-arith -Wbad-function-cast -Wcast-align -Wsign-compare -Wmissing-prototypes -Wmissing-declarations -Wno-long-long::-D_REENTRANT::-ldl:BN_LLONG:${no_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 220 "debug-geoff64","gcc:-DBN_DEBUG -DBN_DEBUG_RAND -DBN_STRICT -DPURIFY -DOPENSSL_NO_DEPRECATED -DOPENSSL_NO_ASM -DOPENSSL_NO_INLINE_ASM -DL_ENDIAN -DTERMIO -DPEDANTIC -O1 -ggdb2 -Wall -Werror -Wundef -pedantic -Wshadow -Wpointer-arith -Wbad-function-cast -Wcast-align -Wsign-compare -Wmissing-prototypes -Wmissing-declarations -Wno-long-long::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${no_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 221 "debug-linux-pentium","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DL_ENDIAN -g -mcpu=pentium -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn",
 222 "debug-linux-ppro","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DL_ENDIAN -g -mcpu=pentiumpro -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn",
 223 "debug-linux-elf","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DL_ENDIAN -g -march=i486 -Wall::-D_REENTRANT::-lefence -ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 224 "debug-linux-elf-noefence","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DL_ENDIAN -g -march=i486 -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 225 "debug-linux-ia32-aes", "gcc:-DAES_EXPERIMENTAL -DL_ENDIAN -O3 -fomit-frame-pointer -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:x86cpuid.o:bn-586.o co-586.o x86-mont.o::des-586.o crypt586.o:aes_x86core.o aes_cbc.o aesni-x86.o:bf-586.o:md5-586.o:sha1-586.o sha256-586.o sha512-586.o:cast-586.o:rc4-586.o:rmd-586.o:rc5-586.o:wp_block.o wp-mmx.o::ghash-x86.o::elf:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 226 "debug-linux-generic32","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DCRYPTO_MDEBUG -g -Wall::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${no_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 227 "debug-linux-generic64","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DCRYPTO_MDEBUG -DTERMIO -g -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${no_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 228 "debug-linux-x86_64","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DCRYPTO_MDEBUG -m64 -DL_ENDIAN -g -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64",
 229 "dist",         "cc:-O::(unknown)::::::",
 230
 231 # Basic configs that should work on any (32 and less bit) box
 232 "gcc",          "gcc:-O3::(unknown):::BN_LLONG:::",
 233 "cc",           "cc:-O::(unknown)::::::",
 234
 235 ####VOS Configurations
 236 "vos-gcc","gcc:-O3 -Wall -DOPENSSL_SYSNAME_VOS -D_POSIX_C_SOURCE=200112L -D_BSD -D_VOS_EXTENDED_NAMES -DB_ENDIAN::(unknown):VOS:-Wl,-map:BN_LLONG:${no_asm}:::::.so:",
 237 "debug-vos-gcc","gcc:-O0 -g -Wall -DOPENSSL_SYSNAME_VOS -D_POSIX_C_SOURCE=200112L -D_BSD -D_VOS_EXTENDED_NAMES -DB_ENDIAN -DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DCRYPTO_MDEBUG::(unknown):VOS:-Wl,-map:BN_LLONG:${no_asm}:::::.so:",
 238
 239 #### Solaris x86 with GNU C setups
 240 # -DOPENSSL_NO_INLINE_ASM switches off inline assembler. We have to do it
 241 # here because whenever GNU C instantiates an assembler template it
 242 # surrounds it with #APP #NO_APP comment pair which (at least Solaris
 243 # 7_x86) /usr/ccs/bin/as fails to assemble with "Illegal mnemonic"
 244 # error message.
 245 "solaris-x86-gcc","gcc:-O3 -fomit-frame-pointer -march=pentium -Wall -DL_ENDIAN -DOPENSSL_NO_INLINE_ASM::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:solaris-shared:-fPIC:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 246 # -shared -static-libgcc might appear controversial, but modules taken
 247 # from static libgcc do not have relocations and linking them into our
 248 # shared objects doesn't have any negative side-effects. On the contrary,
 249 # doing so makes it possible to use gcc shared build with Sun C. Given
 250 # that gcc generates faster code [thanks to inline assembler], I would
 251 # actually recommend to consider using gcc shared build even with vendor
 252 # compiler:-)
 253 #                                               <appro@fy.chalmers.se>
 254 "solaris64-x86_64-gcc","gcc:-m64 -O3 -Wall -DL_ENDIAN::-D_REENTRANT::-lsocket -lnsl -ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:solaris-shared:-fPIC:-m64 -shared -static-libgcc:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/64",
 255
 256 #### Solaris x86 with Sun C setups
 257 "solaris-x86-cc","cc:-fast -xarch=generic -O -Xa::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_PTR DES_UNROLL BF_PTR:${no_asm}:dlfcn:solaris-shared:-KPIC:-G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 258 "solaris64-x86_64-cc","cc:-fast -xarch=amd64 -xstrconst -Xa -DL_ENDIAN::-D_REENTRANT::-lsocket -lnsl -ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:solaris-shared:-KPIC:-xarch=amd64 -G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/64",
 259
 260 #### SPARC Solaris with GNU C setups
 261 "solaris-sparcv7-gcc","gcc:-O3 -fomit-frame-pointer -Wall -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${no_asm}:dlfcn:solaris-shared:-fPIC:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 262 "solaris-sparcv8-gcc","gcc:-mcpu=v8 -O3 -fomit-frame-pointer -Wall -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${sparcv8_asm}:dlfcn:solaris-shared:-fPIC:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 263 # -m32 should be safe to add as long as driver recognizes -mcpu=ultrasparc
 264 "solaris-sparcv9-gcc","gcc:-m32 -mcpu=ultrasparc -O3 -fomit-frame-pointer -Wall -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT:ULTRASPARC:-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${sparcv9_asm}:dlfcn:solaris-shared:-fPIC:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 265 "solaris64-sparcv9-gcc","gcc:-m64 -mcpu=ultrasparc -O3 -Wall -DB_ENDIAN::-D_REENTRANT:ULTRASPARC:-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_PTR DES_RISC1 DES_UNROLL BF_PTR:${sparcv9_asm}:dlfcn:solaris-shared:-fPIC:-m64 -shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/64",
 266 ####
 267 "debug-solaris-sparcv8-gcc","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG_ALL -O -g -mcpu=v8 -Wall -DB_ENDIAN::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${sparcv8_asm}:dlfcn:solaris-shared:-fPIC:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 268 "debug-solaris-sparcv9-gcc","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG_ALL -DPEDANTIC -O -g -mcpu=ultrasparc -pedantic -ansi -Wall -Wshadow -Wno-long-long -D__EXTENSIONS__ -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT:ULTRASPARC:-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${sparcv9_asm}:dlfcn:solaris-shared:-fPIC:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 269
 270 #### SPARC Solaris with Sun C setups
 271 # SC4.0 doesn't pass 'make test', upgrade to SC5.0 or SC4.2.
 272 # SC4.2 is ok, better than gcc even on bn as long as you tell it -xarch=v8
 273 # SC5.0 note: Compiler common patch 107357-01 or later is required!
 274 "solaris-sparcv7-cc","cc:-xO5 -xstrconst -xdepend -Xa -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_PTR DES_RISC1 DES_UNROLL BF_PTR:${no_asm}:dlfcn:solaris-shared:-KPIC:-G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 275 "solaris-sparcv8-cc","cc:-xarch=v8 -xO5 -xstrconst -xdepend -Xa -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_PTR DES_RISC1 DES_UNROLL BF_PTR:${sparcv8_asm}:dlfcn:solaris-shared:-KPIC:-G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 276 "solaris-sparcv9-cc","cc:-xtarget=ultra -xarch=v8plus -xO5 -xstrconst -xdepend -Xa -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT:ULTRASPARC:-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK_LL DES_PTR DES_RISC1 DES_UNROLL BF_PTR:${sparcv9_asm}:dlfcn:solaris-shared:-KPIC:-G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 277 "solaris64-sparcv9-cc","cc:-xtarget=ultra -xarch=v9 -xO5 -xstrconst -xdepend -Xa -DB_ENDIAN::-D_REENTRANT:ULTRASPARC:-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_PTR DES_RISC1 DES_UNROLL BF_PTR:${sparcv9_asm}:dlfcn:solaris-shared:-KPIC:-xarch=v9 -G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/64",
 278 ####
 279 "debug-solaris-sparcv8-cc","cc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG_ALL -xarch=v8 -g -O -xstrconst -Xa -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_PTR DES_RISC1 DES_UNROLL BF_PTR:${sparcv8_asm}:dlfcn:solaris-shared:-KPIC:-G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 280 "debug-solaris-sparcv9-cc","cc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG_ALL -xtarget=ultra -xarch=v8plus -g -O -xstrconst -Xa -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT:ULTRASPARC:-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK_LL DES_PTR DES_RISC1 DES_UNROLL BF_PTR:${sparcv9_asm}:dlfcn:solaris-shared:-KPIC:-G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 281
 282 #### SunOS configs, assuming sparc for the gcc one.
 283 #"sunos-cc", "cc:-O4 -DNOPROTO -DNOCONST::(unknown):SUNOS::DES_UNROLL:${no_asm}::",
 284 "sunos-gcc","gcc:-O3 -mcpu=v8 -Dssize_t=int::(unknown):SUNOS::BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL DES_PTR DES_RISC1:${no_asm}::",
 285
 286 #### IRIX 5.x configs
 287 # -mips2 flag is added by ./config when appropriate.
 288 "irix-gcc","gcc:-O3 -DB_ENDIAN::(unknown):::BN_LLONG MD2_CHAR RC4_INDEX RC4_CHAR RC4_CHUNK DES_UNROLL DES_RISC2 DES_PTR BF_PTR:${mips32_asm}:o32:dlfcn:irix-shared:::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 289 "irix-cc", "cc:-O2 -use_readonly_const -DB_ENDIAN::(unknown):::BN_LLONG RC4_CHAR RC4_CHUNK DES_PTR DES_RISC2 DES_UNROLL BF_PTR:${mips32_asm}:o32:dlfcn:irix-shared:::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 290 #### IRIX 6.x configs
 291 # Only N32 and N64 ABIs are supported. If you need O32 ABI build, invoke
 292 # './Configure irix-cc -o32' manually.
 293 "irix-mips3-gcc","gcc:-mabi=n32 -O3 -DB_ENDIAN -DBN_DIV3W::-D_SGI_MP_SOURCE:::MD2_CHAR RC4_INDEX RC4_CHAR RC4_CHUNK_LL DES_UNROLL DES_RISC2 DES_PTR BF_PTR SIXTY_FOUR_BIT:${mips64_asm}:n32:dlfcn:irix-shared::-mabi=n32:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::32",
 294 "irix-mips3-cc", "cc:-n32 -mips3 -O2 -use_readonly_const -G0 -rdata_shared -DB_ENDIAN -DBN_DIV3W::-D_SGI_MP_SOURCE:::DES_PTR RC4_CHAR RC4_CHUNK_LL DES_RISC2 DES_UNROLL BF_PTR SIXTY_FOUR_BIT:${mips64_asm}:n32:dlfcn:irix-shared::-n32:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::32",
 295 # N64 ABI builds.
 296 "irix64-mips4-gcc","gcc:-mabi=64 -mips4 -O3 -DB_ENDIAN -DBN_DIV3W::-D_SGI_MP_SOURCE:::RC4_CHAR RC4_CHUNK DES_RISC2 DES_UNROLL SIXTY_FOUR_BIT_LONG:${mips64_asm}:64:dlfcn:irix-shared::-mabi=64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64",
 297 "irix64-mips4-cc", "cc:-64 -mips4 -O2 -use_readonly_const -G0 -rdata_shared -DB_ENDIAN -DBN_DIV3W::-D_SGI_MP_SOURCE:::RC4_CHAR RC4_CHUNK DES_RISC2 DES_UNROLL SIXTY_FOUR_BIT_LONG:${mips64_asm}:64:dlfcn:irix-shared::-64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64",
 298
 299 #### Unified HP-UX ANSI C configs.
 300 # Special notes:
 301 # - Originally we were optimizing at +O4 level. It should be noted
 302 #   that the only difference between +O3 and +O4 is global inter-
 303 #   procedural analysis. As it has to be performed during the link
 304 #   stage the compiler leaves behind certain pseudo-code in lib*.a
 305 #   which might be release or even patch level specific. Generating
 306 #   the machine code for and analyzing the *whole* program appears
 307 #   to be *extremely* memory demanding while the performance gain is
 308 #   actually questionable. The situation is intensified by the default
 309 #   HP-UX data set size limit (infamous 'maxdsiz' tunable) of 64MB
 310 #   which is way too low for +O4. In other words, doesn't +O3 make
 311 #   more sense?
 312 # - Keep in mind that the HP compiler by default generates code
 313 #   suitable for execution on the host you're currently compiling at.
 314 #   If the toolkit is ment to be used on various PA-RISC processors
 315 #   consider './config +DAportable'.
 316 # - +DD64 is chosen in favour of +DA2.0W because it's meant to be
 317 #   compatible with *future* releases.
 318 # - If you run ./Configure hpux-parisc-[g]cc manually don't forget to
 319 #   pass -D_REENTRANT on HP-UX 10 and later.
 320 # - -DMD32_XARRAY triggers workaround for compiler bug we ran into in
 321 #   32-bit message digests. (For the moment of this writing) HP C
 322 #   doesn't seem to "digest" too many local variables (they make "him"
 323 #   chew forever:-). For more details look-up MD32_XARRAY comment in
 324 #   crypto/sha/sha_lcl.h.
 325 #                                       <appro@fy.chalmers.se>
 326 #
 327 # Since there is mention of this in shlib/hpux10-cc.sh
 328 "hpux-parisc-cc-o4","cc:-Ae +O4 +ESlit -z -DB_ENDIAN -DBN_DIV2W -DMD32_XARRAY::-D_REENTRANT::-ldld:BN_LLONG DES_PTR DES_UNROLL DES_RISC1:${no_asm}:dl:hpux-shared:+Z:-b:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 329 "hpux-parisc-gcc","gcc:-O3 -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT::-Wl,+s -ldld:BN_LLONG DES_PTR DES_UNROLL DES_RISC1:${no_asm}:dl:hpux-shared:-fPIC:-shared:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 330 "hpux-parisc1_1-gcc","gcc:-O3 -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT::-Wl,+s -ldld:BN_LLONG DES_PTR DES_UNROLL DES_RISC1:${parisc11_asm}:dl:hpux-shared:-fPIC:-shared:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/pa1.1",
 331 "hpux-parisc2-gcc","gcc:-march=2.0 -O3 -DB_ENDIAN -D_REENTRANT::::-Wl,+s -ldld:SIXTY_FOUR_BIT RC4_CHAR RC4_CHUNK DES_PTR DES_UNROLL DES_RISC1:".eval{my $asm=$parisc20_asm;$asm=~s/2W\./2\./;$asm=~s/:64/:32/;$asm}.":dl:hpux-shared:-fPIC:-shared:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/pa20_32",
 332 "hpux64-parisc2-gcc","gcc:-O3 -DB_ENDIAN -D_REENTRANT::::-ldl:SIXTY_FOUR_BIT_LONG MD2_CHAR RC4_INDEX RC4_CHAR DES_UNROLL DES_RISC1 DES_INT::pa-risc2W.o:::::::::::::::void:dlfcn:hpux-shared:-fpic:-shared:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/pa20_64",
 333
 334 # More attempts at unified 10.X and 11.X targets for HP C compiler.
 335 #
 336 # Chris Ruemmler <ruemmler@cup.hp.com>
 337 # Kevin Steves <ks@hp.se>
 338 "hpux-parisc-cc","cc:+O3 +Optrs_strongly_typed -Ae +ESlit -DB_ENDIAN -DBN_DIV2W -DMD32_XARRAY::-D_REENTRANT::-Wl,+s -ldld:MD2_CHAR RC4_INDEX RC4_CHAR DES_UNROLL DES_RISC1 DES_INT:${no_asm}:dl:hpux-shared:+Z:-b:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 339 "hpux-parisc1_1-cc","cc:+DA1.1 +O3 +Optrs_strongly_typed -Ae +ESlit -DB_ENDIAN -DMD32_XARRAY::-D_REENTRANT::-Wl,+s -ldld:MD2_CHAR RC4_INDEX RC4_CHAR DES_UNROLL DES_RISC1 DES_INT:${parisc11_asm}:dl:hpux-shared:+Z:-b:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/pa1.1",
 340 "hpux-parisc2-cc","cc:+DA2.0 +DS2.0 +O3 +Optrs_strongly_typed -Ae +ESlit -DB_ENDIAN -DMD32_XARRAY -D_REENTRANT::::-Wl,+s -ldld:SIXTY_FOUR_BIT MD2_CHAR RC4_INDEX RC4_CHAR DES_UNROLL DES_RISC1 DES_INT:".eval{my $asm=$parisc20_asm;$asm=~s/2W\./2\./;$asm=~s/:64/:32/;$asm}.":dl:hpux-shared:+Z:-b:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/pa20_32",
 341 "hpux64-parisc2-cc","cc:+DD64 +O3 +Optrs_strongly_typed -Ae +ESlit -DB_ENDIAN -DMD32_XARRAY -D_REENTRANT::::-ldl:SIXTY_FOUR_BIT_LONG MD2_CHAR RC4_INDEX RC4_CHAR DES_UNROLL DES_RISC1 DES_INT:${parisc20_asm}:dlfcn:hpux-shared:+Z:+DD64 -b:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/pa20_64",
 342
 343 # HP/UX IA-64 targets
 344 "hpux-ia64-cc","cc:-Ae +DD32 +O2 +Olit=all -z -DB_ENDIAN -D_REENTRANT::::-ldl:SIXTY_FOUR_BIT MD2_CHAR RC4_INDEX DES_UNROLL DES_RISC1 DES_INT:${ia64_asm}:dlfcn:hpux-shared:+Z:+DD32 -b:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/hpux32",
 345 # Frank Geurts <frank.geurts@nl.abnamro.com> has patiently assisted with
 346 # with debugging of the following config.
 347 "hpux64-ia64-cc","cc:-Ae +DD64 +O3 +Olit=all -z -DB_ENDIAN -D_REENTRANT::::-ldl:SIXTY_FOUR_BIT_LONG MD2_CHAR RC4_INDEX DES_UNROLL DES_RISC1 DES_INT:${ia64_asm}:dlfcn:hpux-shared:+Z:+DD64 -b:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/hpux64",
 348 # GCC builds...
 349 "hpux-ia64-gcc","gcc:-O3 -DB_ENDIAN -D_REENTRANT::::-ldl:SIXTY_FOUR_BIT MD2_CHAR RC4_INDEX DES_UNROLL DES_RISC1 DES_INT:${ia64_asm}:dlfcn:hpux-shared:-fpic:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/hpux32",
 350 "hpux64-ia64-gcc","gcc:-mlp64 -O3 -DB_ENDIAN -D_REENTRANT::::-ldl:SIXTY_FOUR_BIT_LONG MD2_CHAR RC4_INDEX DES_UNROLL DES_RISC1 DES_INT:${ia64_asm}:dlfcn:hpux-shared:-fpic:-mlp64 -shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/hpux64",
 351
 352 # Legacy HPUX 9.X configs...
 353 "hpux-cc",      "cc:-DB_ENDIAN -DBN_DIV2W -DMD32_XARRAY -Ae +ESlit +O2 -z::(unknown)::-Wl,+s -ldld:DES_PTR DES_UNROLL DES_RISC1:${no_asm}:dl:hpux-shared:+Z:-b:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 354 "hpux-gcc",     "gcc:-DB_ENDIAN -DBN_DIV2W -O3::(unknown)::-Wl,+s -ldld:DES_PTR DES_UNROLL DES_RISC1:${no_asm}:dl:hpux-shared:-fPIC:-shared:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 355
 356 #### HP MPE/iX http://jazz.external.hp.com/src/openssl/
 357 "MPE/iX-gcc",   "gcc:-DBN_DIV2W -O3 -D_POSIX_SOURCE -D_SOCKET_SOURCE -I/SYSLOG/PUB::(unknown):MPE:-L/SYSLOG/PUB -lsyslog -lsocket -lcurses:BN_LLONG DES_PTR DES_UNROLL DES_RISC1:::",
 358
 359 # DEC Alpha OSF/1/Tru64 targets.
 360 #
 361 #       "What's in a name? That which we call a rose
 362 #        By any other word would smell as sweet."
 363 #
 364 # - William Shakespeare, "Romeo & Juliet", Act II, scene II.
 365 #
 366 # For gcc, the following gave a %50 speedup on a 164 over the 'DES_INT' version
 367 #
 368 "osf1-alpha-gcc", "gcc:-O3::(unknown):::SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_UNROLL DES_RISC1:${alpha_asm}:dlfcn:alpha-osf1-shared:::.so",
 369 "osf1-alpha-cc",  "cc:-std1 -tune host -O4 -readonly_strings::(unknown):::SIXTY_FOUR_BIT_LONG RC4_CHUNK:${alpha_asm}:dlfcn:alpha-osf1-shared:::.so",
 370 "tru64-alpha-cc", "cc:-std1 -tune host -fast -readonly_strings::-pthread:::SIXTY_FOUR_BIT_LONG RC4_CHUNK:${alpha_asm}:dlfcn:alpha-osf1-shared::-msym:.so",
 371
 372 ####
 373 #### Variety of LINUX:-)
 374 ####
 375 # *-generic* is endian-neutral target, but ./config is free to
 376 # throw in -D[BL]_ENDIAN, whichever appropriate...
 377 "linux-generic32","gcc:-O3 -fomit-frame-pointer -Wall::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${no_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 378 "linux-ppc",    "gcc:-DB_ENDIAN -O3 -Wall::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_RISC1 DES_UNROLL:${ppc32_asm}:linux32:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 379
 380 #######################################################################
 381 # Note that -march is not among compiler options in below linux-armv4
 382 # target line. Not specifying one is intentional to give you choice to:
 383 #
 384 # a) rely on your compiler default by not specifying one;
 385 # b) specify your target platform explicitly for optimal performance,
 386 #    e.g. -march=armv6 or -march=armv7-a;
 387 # c) build "universal" binary that targets *range* of platforms by
 388 #    specifying minimum and maximum supported architecture;
 389 #
 390 # As for c) option. It actually makes no sense to specify maximum to be
 391 # less than ARMv7, because it's the least requirement for run-time
 392 # switch between platform-specific code paths. And without run-time
 393 # switch performance would be equivalent to one for minimum. Secondly,
 394 # there are some natural limitations that you'd have to accept and
 395 # respect. Most notably you can *not* build "universal" binary for
 396 # big-endian platform. This is because ARMv7 processor always picks
 397 # instructions in little-endian order. Another similar limitation is
 398 # that -mthumb can't "cross" -march=armv6t2 boundary, because that's
 399 # where it became Thumb-2. Well, this limitation is a bit artificial,
 400 # because it's not really impossible, but it's deemed too tricky to
 401 # support. And of course you have to be sure that your binutils are
 402 # actually up to the task of handling maximum target platform. With all
 403 # this in mind here is an example of how to configure "universal" build:
 404 #
 405 #       ./Configure linux-armv4 -march=armv6 -D__ARM_MAX_ARCH__=8
 406 #
 407 "linux-armv4",  "gcc: -O3 -Wall::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${armv4_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 408 "linux-aarch64","gcc: -O3 -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${aarch64_asm}:linux64:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 409 # Configure script adds minimally required -march for assembly support,
 410 # if no -march was specified at command line. mips32 and mips64 below
 411 # refer to contemporary MIPS Architecture specifications, MIPS32 and
 412 # MIPS64, rather than to kernel bitness.
 413 "linux-mips32", "gcc:-mabi=32 -O3 -Wall -DBN_DIV3W::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${mips32_asm}:o32:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 414 "linux-mips64",   "gcc:-mabi=n32 -O3 -Wall -DBN_DIV3W::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${mips64_asm}:n32:dlfcn:linux-shared:-fPIC:-mabi=n32:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::32",
 415 "linux64-mips64",   "gcc:-mabi=64 -O3 -Wall -DBN_DIV3W::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${mips64_asm}:64:dlfcn:linux-shared:-fPIC:-mabi=64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64",
 416 #### IA-32 targets...
 417 "linux-ia32-icc",       "icc:-DL_ENDIAN -O2::-D_REENTRANT::-ldl -no_cpprt:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-KPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 418 "linux-elf",    "gcc:-DL_ENDIAN -O3 -fomit-frame-pointer -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 419 "linux-aout",   "gcc:-DL_ENDIAN -O3 -fomit-frame-pointer -march=i486 -Wall::(unknown):::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_asm}:a.out",
 420 ####
 421 "linux-generic64","gcc:-O3 -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${no_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 422 "linux-ppc64",  "gcc:-m64 -DB_ENDIAN -O3 -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_RISC1 DES_UNROLL:${ppc64_asm}:linux64:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64",
 423 "linux-ppc64le","gcc:-m64 -DL_ENDIAN -O3 -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_RISC1 DES_UNROLL:$ppc64_asm:linux64le:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::",
 424 "linux-ia64",   "gcc:-DL_ENDIAN -DTERMIO -O3 -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_UNROLL DES_INT:${ia64_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 425 "linux-ia64-icc","icc:-DL_ENDIAN -O2 -Wall::-D_REENTRANT::-ldl -no_cpprt:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_RISC1 DES_INT:${ia64_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 426 "linux-x86_64", "gcc:-m64 -DL_ENDIAN -O3 -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64",
 427 "linux-x86_64-clang",   "clang: -m64 -DL_ENDIAN -O3 -Wall -Wextra $clang_disabled_warnings -Qunused-arguments::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64",
 428 "debug-linux-x86_64-clang",     "clang: -DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DCRYPTO_MDEBUG -m64 -DL_ENDIAN -g -Wall -Wextra $clang_disabled_warnings -Qunused-arguments::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64",
 429 "linux-x86_64-icc", "icc:-DL_ENDIAN -O2::-D_REENTRANT::-ldl -no_cpprt:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64",
 430 "linux-x32",    "gcc:-mx32 -DL_ENDIAN -O3 -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT RC4_CHUNK_LL DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:linux-shared:-fPIC:-mx32:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::x32",
 431 "linux64-s390x",        "gcc:-m64 -DB_ENDIAN -O3 -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL:${s390x_asm}:64:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64",
 432 #### So called "highgprs" target for z/Architecture CPUs
 433 # "Highgprs" is kernel feature first implemented in Linux 2.6.32, see
 434 # /proc/cpuinfo. The idea is to preserve most significant bits of
 435 # general purpose registers not only upon 32-bit process context
 436 # switch, but even on asynchronous signal delivery to such process.
 437 # This makes it possible to deploy 64-bit instructions even in legacy
 438 # application context and achieve better [or should we say adequate]
 439 # performance. The build is binary compatible with linux-generic32,
 440 # and the idea is to be able to install the resulting libcrypto.so
 441 # alongside generic one, e.g. as /lib/highgprs/libcrypto.so.x.y, for
 442 # ldconfig and run-time linker to autodiscover. Unfortunately it
 443 # doesn't work just yet, because of couple of bugs in glibc
 444 # sysdeps/s390/dl-procinfo.c affecting ldconfig and ld.so.1...
 445 "linux32-s390x",        "gcc:-m31 -Wa,-mzarch -DB_ENDIAN -O3 -Wall::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL:".eval{my $asm=$s390x_asm;$asm=~s/bn\-s390x\.o/bn_asm.o/;$asm}.":31:dlfcn:linux-shared:-fPIC:-m31:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/highgprs",
 446 #### SPARC Linux setups
 447 # Ray Miller <ray.miller@computing-services.oxford.ac.uk> has patiently
 448 # assisted with debugging of following two configs.
 449 "linux-sparcv8","gcc:-mcpu=v8 -DB_ENDIAN -O3 -fomit-frame-pointer -Wall -DBN_DIV2W::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${sparcv8_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 450 # it's a real mess with -mcpu=ultrasparc option under Linux, but
 451 # -Wa,-Av8plus should do the trick no matter what.
 452 "linux-sparcv9","gcc:-m32 -mcpu=ultrasparc -DB_ENDIAN -O3 -fomit-frame-pointer -Wall -Wa,-Av8plus -DBN_DIV2W::-D_REENTRANT:ULTRASPARC:-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${sparcv9_asm}:dlfcn:linux-shared:-fPIC:-m32:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 453 # GCC 3.1 is a requirement
 454 "linux64-sparcv9","gcc:-m64 -mcpu=ultrasparc -DB_ENDIAN -O3 -fomit-frame-pointer -Wall::-D_REENTRANT:ULTRASPARC:-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_PTR DES_RISC1 DES_UNROLL BF_PTR:${sparcv9_asm}:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64",
 455 #### Alpha Linux with GNU C and Compaq C setups
 456 # Special notes:
 457 # - linux-alpha+bwx-gcc is ment to be used from ./config only. If you
 458 #   ought to run './Configure linux-alpha+bwx-gcc' manually, do
 459 #   complement the command line with -mcpu=ev56, -mcpu=ev6 or whatever
 460 #   which is appropriate.
 461 # - If you use ccc keep in mind that -fast implies -arch host and the
 462 #   compiler is free to issue instructions which gonna make elder CPU
 463 #   choke. If you wish to build "blended" toolkit, add -arch generic
 464 #   *after* -fast and invoke './Configure linux-alpha-ccc' manually.
 465 #
 466 #                                       <appro@fy.chalmers.se>
 467 #
 468 "linux-alpha-gcc","gcc:-O3 -DL_ENDIAN::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_RISC1 DES_UNROLL:${alpha_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 469 "linux-alpha+bwx-gcc","gcc:-O3 -DL_ENDIAN::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_RISC1 DES_UNROLL:${alpha_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 470 "linux-alpha-ccc","ccc:-fast -readonly_strings -DL_ENDIAN::-D_REENTRANT:::SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_PTR DES_RISC1 DES_UNROLL:${alpha_asm}",
 471 "linux-alpha+bwx-ccc","ccc:-fast -readonly_strings -DL_ENDIAN::-D_REENTRANT:::SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_PTR DES_RISC1 DES_UNROLL:${alpha_asm}",
 472
 473 # Android: linux-* but without pointers to headers and libs.
 474 "android","gcc:-mandroid -I\$(ANDROID_DEV)/include -B\$(ANDROID_DEV)/lib -O3 -fomit-frame-pointer -Wall::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${no_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 475 "android-x86","gcc:-mandroid -I\$(ANDROID_DEV)/include -B\$(ANDROID_DEV)/lib -O3 -fomit-frame-pointer -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:".eval{my $asm=${x86_elf_asm};$asm=~s/:elf/:android/;$asm}.":dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 476 "android-armv7","gcc:-march=armv7-a -mandroid -I\$(ANDROID_DEV)/include -B\$(ANDROID_DEV)/lib -O3 -fomit-frame-pointer -Wall::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${armv4_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 477 "android-mips","gcc:-mandroid -I\$(ANDROID_DEV)/include -B\$(ANDROID_DEV)/lib -O3 -Wall::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${mips32_asm}:o32:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 478
 479 #### *BSD [do see comment about ${BSDthreads} above!]
 480 "BSD-generic32","gcc:-O3 -fomit-frame-pointer -Wall::${BSDthreads}:::BN_LLONG RC2_CHAR RC4_INDEX DES_INT DES_UNROLL:${no_asm}:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 481 "BSD-x86",      "gcc:-DL_ENDIAN -O3 -fomit-frame-pointer -Wall::${BSDthreads}:::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_asm}:a.out:dlfcn:bsd-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 482 "BSD-x86-elf",  "gcc:-DL_ENDIAN -O3 -fomit-frame-pointer -Wall::${BSDthreads}:::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:bsd-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 483 "debug-BSD-x86-elf",    "gcc:-DL_ENDIAN -O3 -Wall -g::${BSDthreads}:::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:bsd-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 484 "BSD-sparcv8",  "gcc:-DB_ENDIAN -O3 -mcpu=v8 -Wall::${BSDthreads}:::BN_LLONG RC2_CHAR RC4_INDEX DES_INT DES_UNROLL:${sparcv8_asm}:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 485
 486 "BSD-generic64","gcc:-O3 -Wall::${BSDthreads}:::SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${no_asm}:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 487 # -DMD32_REG_T=int doesn't actually belong in sparc64 target, it
 488 # simply *happens* to work around a compiler bug in gcc 3.3.3,
 489 # triggered by RIPEMD160 code.
 490 "BSD-sparc64",  "gcc:-DB_ENDIAN -O3 -DMD32_REG_T=int -Wall::${BSDthreads}:::BN_LLONG RC2_CHAR RC4_CHUNK DES_INT DES_PTR DES_RISC2 BF_PTR:${sparcv9_asm}:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 491 "BSD-ia64",     "gcc:-DL_ENDIAN -O3 -Wall::${BSDthreads}:::SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_UNROLL DES_INT:${ia64_asm}:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 492 "BSD-x86_64",   "cc:-DL_ENDIAN -O3 -Wall::${BSDthreads}:::SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 493
 494 "bsdi-elf-gcc",     "gcc:-DPERL5 -DL_ENDIAN -fomit-frame-pointer -O3 -march=i486 -Wall::(unknown)::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 495
 496 "nextstep",     "cc:-O -Wall:<libc.h>:(unknown):::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:::",
 497 "nextstep3.3",  "cc:-O3 -Wall:<libc.h>:(unknown):::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:::",
 498
 499 # NCR MP-RAS UNIX ver 02.03.01
 500 "ncr-scde","cc:-O6 -Xa -Hoff=BEHAVED -686 -Hwide -Hiw::(unknown)::-lsocket -lnsl -lc89:${x86_gcc_des} ${x86_gcc_opts}:::",
 501
 502 # QNX
 503 "qnx4", "cc:-DL_ENDIAN -DTERMIO::(unknown):::${x86_gcc_des} ${x86_gcc_opts}:",
 504 "QNX6",       "gcc:::::-lsocket::${no_asm}:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 505 "QNX6-i386",  "gcc:-DL_ENDIAN -O2 -Wall::::-lsocket:${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 506
 507 # BeOS
 508 "beos-x86-r5",   "gcc:-DL_ENDIAN -DTERMIOS -O3 -fomit-frame-pointer -mcpu=pentium -Wall::-D_REENTRANT:BEOS:-lbe -lnet:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:beos:beos-shared:-fPIC -DPIC:-shared:.so",
 509 "beos-x86-bone", "gcc:-DL_ENDIAN -DTERMIOS -O3 -fomit-frame-pointer -mcpu=pentium -Wall::-D_REENTRANT:BEOS:-lbe -lbind -lsocket:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:beos:beos-shared:-fPIC:-shared:.so",
 510
 511 #### SCO/Caldera targets.
 512 #
 513 # Originally we had like unixware-*, unixware-*-pentium, unixware-*-p6, etc.
 514 # Now we only have blended unixware-* as it's the only one used by ./config.
 515 # If you want to optimize for particular microarchitecture, bypass ./config
 516 # and './Configure unixware-7 -Kpentium_pro' or whatever appropriate.
 517 # Note that not all targets include assembler support. Mostly because of
 518 # lack of motivation to support out-of-date platforms with out-of-date
 519 # compiler drivers and assemblers. Tim Rice <tim@multitalents.net> has
 520 # patiently assisted to debug most of it.
 521 #
 522 # UnixWare 2.0x fails destest with -O.
 523 "unixware-2.0","cc:-DFILIO_H -DNO_STRINGS_H::-Kthread::-lsocket -lnsl -lresolv -lx:${x86_gcc_des} ${x86_gcc_opts}:::",
 524 "unixware-2.1","cc:-O -DFILIO_H::-Kthread::-lsocket -lnsl -lresolv -lx:${x86_gcc_des} ${x86_gcc_opts}:::",
 525 "unixware-7","cc:-O -DFILIO_H -Kalloca::-Kthread::-lsocket -lnsl:BN_LLONG MD2_CHAR RC4_INDEX ${x86_gcc_des}:${x86_elf_asm}-1:dlfcn:svr5-shared:-Kpic::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 526 "unixware-7-gcc","gcc:-DL_ENDIAN -DFILIO_H -O3 -fomit-frame-pointer -march=pentium -Wall::-D_REENTRANT::-lsocket -lnsl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}-1:dlfcn:gnu-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 527 # SCO 5 - Ben Laurie <ben@algroup.co.uk> says the -O breaks the SCO cc.
 528 "sco5-cc",  "cc:-belf::(unknown)::-lsocket -lnsl:${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}-1:dlfcn:svr3-shared:-Kpic::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 529 "sco5-gcc",  "gcc:-O3 -fomit-frame-pointer::(unknown)::-lsocket -lnsl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}-1:dlfcn:svr3-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 530
 531 #### IBM's AIX.
 532 "aix3-cc",  "cc:-O -DB_ENDIAN -qmaxmem=16384::(unknown):AIX::BN_LLONG RC4_CHAR:::",
 533 "aix-gcc",  "gcc:-O -DB_ENDIAN::-pthread:AIX::BN_LLONG RC4_CHAR:${ppc32_asm}:aix32:dlfcn:aix-shared::-shared -Wl,-G:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)::-X32",
 534 "aix64-gcc","gcc:-maix64 -O -DB_ENDIAN::-pthread:AIX::SIXTY_FOUR_BIT_LONG RC4_CHAR:${ppc64_asm}:aix64:dlfcn:aix-shared::-maix64 -shared -Wl,-G:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)::-X64",
 535 # Below targets assume AIX 5. Idea is to effectively disregard $OBJECT_MODE
 536 # at build time. $OBJECT_MODE is respected at ./config stage!
 537 "aix-cc",   "cc:-q32 -O -DB_ENDIAN -qmaxmem=16384 -qro -qroconst::-qthreaded -D_THREAD_SAFE:AIX::BN_LLONG RC4_CHAR:${ppc32_asm}:aix32:dlfcn:aix-shared::-q32 -G:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)::-X 32",
 538 "aix64-cc", "cc:-q64 -O -DB_ENDIAN -qmaxmem=16384 -qro -qroconst::-qthreaded -D_THREAD_SAFE:AIX::SIXTY_FOUR_BIT_LONG RC4_CHAR:${ppc64_asm}:aix64:dlfcn:aix-shared::-q64 -G:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)::-X 64",
 539
 540 #
 541 # Cray T90 and similar (SDSC)
 542 # It's Big-endian, but the algorithms work properly when B_ENDIAN is NOT
 543 # defined.  The T90 ints and longs are 8 bytes long, and apparently the
 544 # B_ENDIAN code assumes 4 byte ints.  Fortunately, the non-B_ENDIAN and
 545 # non L_ENDIAN code aligns the bytes in each word correctly.
 546 #
 547 # The BIT_FIELD_LIMITS define is to avoid two fatal compiler errors:
 548 #'Taking the address of a bit field is not allowed. '
 549 #'An expression with bit field exists as the operand of "sizeof" '
 550 # (written by Wayne Schroeder <schroede@SDSC.EDU>)
 551 #
 552 # j90 is considered the base machine type for unicos machines,
 553 # so this configuration is now called "cray-j90" ...
 554 "cray-j90", "cc: -DBIT_FIELD_LIMITS -DTERMIOS::(unknown):CRAY::SIXTY_FOUR_BIT_LONG DES_INT:::",
 555
 556 #
 557 # Cray T3E (Research Center Juelich, beckman@acl.lanl.gov)
 558 #
 559 # The BIT_FIELD_LIMITS define was written for the C90 (it seems).  I added
 560 # another use.  Basically, the problem is that the T3E uses some bit fields
 561 # for some st_addr stuff, and then sizeof and address-of fails
 562 # I could not use the ams/alpha.o option because the Cray assembler, 'cam'
 563 # did not like it.
 564 "cray-t3e", "cc: -DBIT_FIELD_LIMITS -DTERMIOS::(unknown):CRAY::SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT:::",
 565
 566 # DGUX, 88100.
 567 "dgux-R3-gcc",  "gcc:-O3 -fomit-frame-pointer::(unknown):::RC4_INDEX DES_UNROLL:::",
 568 "dgux-R4-gcc",  "gcc:-O3 -fomit-frame-pointer::(unknown)::-lnsl -lsocket:RC4_INDEX DES_UNROLL:::",
 569 "dgux-R4-x86-gcc",      "gcc:-O3 -fomit-frame-pointer -DL_ENDIAN::(unknown)::-lnsl -lsocket:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}",
 570
 571 # Sinix/ReliantUNIX RM400
 572 # NOTE: The CDS++ Compiler up to V2.0Bsomething has the IRIX_CC_BUG optimizer problem. Better use -g  */
 573 "ReliantUNIX","cc:-KPIC -g -DTERMIOS -DB_ENDIAN::-Kthread:SNI:-lsocket -lnsl -lc -L/usr/ucblib -lucb:BN_LLONG DES_PTR DES_RISC2 DES_UNROLL BF_PTR:${no_asm}:dlfcn:reliantunix-shared:::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 574 "SINIX","cc:-O::(unknown):SNI:-lsocket -lnsl -lc -L/usr/ucblib -lucb:RC4_INDEX RC4_CHAR:::",
 575 "SINIX-N","/usr/ucb/cc:-O2 -misaligned::(unknown)::-lucb:RC4_INDEX RC4_CHAR:::",
 576
 577 # SIEMENS BS2000/OSD: an EBCDIC-based mainframe
 578 "BS2000-OSD","c89:-O -XLLML -XLLMK -XL -DB_ENDIAN -DCHARSET_EBCDIC::(unknown)::-lsocket -lnsl:THIRTY_TWO_BIT DES_PTR DES_UNROLL MD2_CHAR RC4_INDEX RC4_CHAR BF_PTR:::",
 579
 580 # OS/390 Unix an EBCDIC-based Unix system on IBM mainframe
 581 # You need to compile using the c89.sh wrapper in the tools directory, because the
 582 # IBM compiler does not like the -L switch after any object modules.
 583 #
 584 "OS390-Unix","c89.sh:-O -DB_ENDIAN -DCHARSET_EBCDIC -DNO_SYS_PARAM_H  -D_ALL_SOURCE::(unknown):::THIRTY_TWO_BIT DES_PTR DES_UNROLL MD2_CHAR RC4_INDEX RC4_CHAR BF_PTR:::",
 585
 586 # Visual C targets
 587 #
 588 # Win64 targets, WIN64I denotes IA-64 and WIN64A - AMD64
 589 "VC-WIN64I","cl:-W3 -Gs0 -Gy -nologo -DOPENSSL_SYSNAME_WIN32 -DWIN32_LEAN_AND_MEAN -DL_ENDIAN -DUNICODE -D_UNICODE -D_CRT_SECURE_NO_DEPRECATE:::WIN64I::SIXTY_FOUR_BIT RC4_CHUNK_LL DES_INT EXPORT_VAR_AS_FN:ia64cpuid.o:ia64.o ia64-mont.o:::aes_core.o aes_cbc.o aes-ia64.o::md5-ia64.o:sha1-ia64.o sha256-ia64.o sha512-ia64.o:::::::ghash-ia64.o::ias:win32",
 590 "VC-WIN64A","cl:-W3 -Gs0 -Gy -nologo -DOPENSSL_SYSNAME_WIN32 -DWIN32_LEAN_AND_MEAN -DL_ENDIAN -DUNICODE -D_UNICODE -D_CRT_SECURE_NO_DEPRECATE:::WIN64A::SIXTY_FOUR_BIT RC4_CHUNK_LL DES_INT EXPORT_VAR_AS_FN:".eval{my $asm=$x86_64_asm;$asm=~s/x86_64-gcc\.o/bn_asm.o/;$asm}.":auto:win32",
 591 "debug-VC-WIN64I","cl:-W3 -Gs0 -Gy -Zi -nologo -DOPENSSL_SYSNAME_WIN32 -DWIN32_LEAN_AND_MEAN -DL_ENDIAN -DUNICODE -D_UNICODE -D_CRT_SECURE_NO_DEPRECATE:::WIN64I::SIXTY_FOUR_BIT RC4_CHUNK_LL DES_INT EXPORT_VAR_AS_FN:ia64cpuid.o:ia64.o:::aes_core.o aes_cbc.o aes-ia64.o::md5-ia64.o:sha1-ia64.o sha256-ia64.o sha512-ia64.o:::::::ghash-ia64.o::ias:win32",
 592 "debug-VC-WIN64A","cl:-W3 -Gs0 -Gy -Zi -nologo -DOPENSSL_SYSNAME_WIN32 -DWIN32_LEAN_AND_MEAN -DL_ENDIAN -DUNICODE -D_UNICODE -D_CRT_SECURE_NO_DEPRECATE:::WIN64A::SIXTY_FOUR_BIT RC4_CHUNK_LL DES_INT EXPORT_VAR_AS_FN:".eval{my $asm=$x86_64_asm;$asm=~s/x86_64-gcc\.o/bn_asm.o/;$asm}.":auto:win32",
 593 # x86 Win32 target defaults to ANSI API, if you want UNICODE, complement
 594 # 'perl Configure VC-WIN32' with '-DUNICODE -D_UNICODE'
 595 "VC-WIN32","cl:-W3 -WX -Gs0 -GF -Gy -nologo -DOPENSSL_SYSNAME_WIN32 -DWIN32_LEAN_AND_MEAN -DL_ENDIAN -D_CRT_SECURE_NO_DEPRECATE -D_WINSOCK_DEPRECATED_NO_WARNINGS:::WIN32::BN_LLONG RC4_INDEX EXPORT_VAR_AS_FN ${x86_gcc_opts}:${x86_asm}:win32n:win32",
 596 # Unified CE target
 597 "debug-VC-WIN32","cl:-W3 -WX -Gs0 -GF -Gy -Zi -nologo -DOPENSSL_SYSNAME_WIN32 -DWIN32_LEAN_AND_MEAN -DL_ENDIAN -D_CRT_SECURE_NO_DEPRECATE -D_WINSOCK_DEPRECATED_NO_WARNINGS:::WIN32::BN_LLONG RC4_INDEX EXPORT_VAR_AS_FN ${x86_gcc_opts}:${x86_asm}:win32n:win32",
 598 "VC-CE","cl::::WINCE::BN_LLONG RC4_INDEX EXPORT_VAR_AS_FN ${x86_gcc_opts}:${no_asm}:win32",
 599
 600 # Borland C++ 4.5
 601 "BC-32","bcc32::::WIN32::BN_LLONG DES_PTR RC4_INDEX EXPORT_VAR_AS_FN:${no_asm}:win32",
 602
 603 # MinGW
 604 "mingw", "gcc:-mno-cygwin -DL_ENDIAN -DWIN32_LEAN_AND_MEAN -fomit-frame-pointer -O3 -march=i486 -Wall::-D_MT:MINGW32:-lws2_32 -lgdi32 -lcrypt32:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts} EXPORT_VAR_AS_FN:${x86_asm}:coff:win32:cygwin-shared:-D_WINDLL -DOPENSSL_USE_APPLINK:-mno-cygwin:.dll.a",
 605 # As for OPENSSL_USE_APPLINK. Applink makes it possible to use .dll
 606 # compiled with one compiler with application compiled with another
 607 # compiler. It's possible to engage Applink support in mingw64 build,
 608 # but it's not done, because till mingw64 supports structured exception
 609 # handling, one can't seriously consider its binaries for using with
 610 # non-mingw64 run-time environment. And as mingw64 is always consistent
 611 # with itself, Applink is never engaged and can as well be omitted.
 612 "mingw64", "gcc:-mno-cygwin -DL_ENDIAN -O3 -Wall -DWIN32_LEAN_AND_MEAN -DUNICODE -D_UNICODE::-D_MT:MINGW64:-lws2_32 -lgdi32 -lcrypt32:SIXTY_FOUR_BIT RC4_CHUNK_LL DES_INT EXPORT_VAR_AS_FN:${x86_64_asm}:mingw64:win32:cygwin-shared:-D_WINDLL:-mno-cygwin:.dll.a",
 613
 614 # UWIN
 615 "UWIN", "cc:-DTERMIOS -DL_ENDIAN -O -Wall:::UWIN::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${no_asm}:win32",
 616
 617 # Cygwin
 618 "Cygwin", "gcc:-DTERMIOS -DL_ENDIAN -fomit-frame-pointer -O3 -march=i486 -Wall:::CYGWIN::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_asm}:coff:dlfcn:cygwin-shared:-D_WINDLL:-shared:.dll.a",
 619 "Cygwin-x86_64", "gcc:-DTERMIOS -DL_ENDIAN -O3 -Wall:::CYGWIN::SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:mingw64:dlfcn:cygwin-shared:-D_WINDLL:-shared:.dll.a",
 620
 621 # NetWare from David Ward (dsward@novell.com)
 622 # requires either MetroWerks NLM development tools, or gcc / nlmconv
 623 # NetWare defaults socket bio to WinSock sockets. However,
 624 # the builds can be configured to use BSD sockets instead.
 625 # netware-clib => legacy CLib c-runtime support
 626 "netware-clib", "mwccnlm::::::${x86_gcc_opts}::",
 627 "netware-clib-bsdsock", "mwccnlm::::::${x86_gcc_opts}::",
 628 "netware-clib-gcc", "i586-netware-gcc:-nostdinc -I/ndk/nwsdk/include/nlm -I/ndk/ws295sdk/include -DL_ENDIAN -DNETWARE_CLIB -DOPENSSL_SYSNAME_NETWARE -O2 -Wall:::::${x86_gcc_opts}::",
 629 "netware-clib-bsdsock-gcc", "i586-netware-gcc:-nostdinc -I/ndk/nwsdk/include/nlm -DNETWARE_BSDSOCK -DNETDB_USE_INTERNET -DL_ENDIAN -DNETWARE_CLIB -DOPENSSL_SYSNAME_NETWARE -O2 -Wall:::::${x86_gcc_opts}::",
 630 # netware-libc => LibC/NKS support
 631 "netware-libc", "mwccnlm::::::BN_LLONG ${x86_gcc_opts}::",
 632 "netware-libc-bsdsock", "mwccnlm::::::BN_LLONG ${x86_gcc_opts}::",
 633 "netware-libc-gcc", "i586-netware-gcc:-nostdinc -I/ndk/libc/include -I/ndk/libc/include/winsock -DL_ENDIAN -DNETWARE_LIBC -DOPENSSL_SYSNAME_NETWARE -DTERMIO -O2 -Wall:::::BN_LLONG ${x86_gcc_opts}::",
 634 "netware-libc-bsdsock-gcc", "i586-netware-gcc:-nostdinc -I/ndk/libc/include -DNETWARE_BSDSOCK -DL_ENDIAN -DNETWARE_LIBC -DOPENSSL_SYSNAME_NETWARE -DTERMIO -O2 -Wall:::::BN_LLONG ${x86_gcc_opts}::",
 635
 636 # DJGPP
 637 "DJGPP", "gcc:-I/dev/env/WATT_ROOT/inc -DTERMIO -DL_ENDIAN -fomit-frame-pointer -O2 -Wall:::MSDOS:-L/dev/env/WATT_ROOT/lib -lwatt:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_asm}:a.out:",
 638
 639 # Ultrix from Bernhard Simon <simon@zid.tuwien.ac.at>
 640 "ultrix-cc","cc:-std1 -O -Olimit 2500 -DL_ENDIAN::(unknown):::::::",
 641 "ultrix-gcc","gcc:-O3 -DL_ENDIAN::(unknown):::BN_LLONG::::",
 642 # K&R C is no longer supported; you need gcc on old Ultrix installations
 643 ##"ultrix","cc:-O2 -DNOPROTO -DNOCONST -DL_ENDIAN::(unknown):::::::",
 644
 645 ##### MacOS X (a.k.a. Rhapsody or Darwin) setup
 646 "rhapsody-ppc-cc","cc:-O3 -DB_ENDIAN::(unknown):MACOSX_RHAPSODY::BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${no_asm}::",
 647 "darwin-ppc-cc","cc:-arch ppc -O3 -DB_ENDIAN -Wa,-force_cpusubtype_ALL::-D_REENTRANT:MACOSX:-Wl,-search_paths_first%:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${ppc32_asm}:osx32:dlfcn:darwin-shared:-fPIC -fno-common:-arch ppc -dynamiclib:.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
 648 "darwin64-ppc-cc","cc:-arch ppc64 -O3 -DB_ENDIAN::-D_REENTRANT:MACOSX:-Wl,-search_paths_first%:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${ppc64_asm}:osx64:dlfcn:darwin-shared:-fPIC -fno-common:-arch ppc64 -dynamiclib:.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
 649 "darwin-i386-cc","cc:-arch i386 -O3 -fomit-frame-pointer -DL_ENDIAN::-D_REENTRANT:MACOSX:-Wl,-search_paths_first%:BN_LLONG RC4_INT RC4_CHUNK DES_UNROLL BF_PTR:".eval{my $asm=$x86_asm;$asm=~s/cast\-586\.o//;$asm}.":macosx:dlfcn:darwin-shared:-fPIC -fno-common:-arch i386 -dynamiclib:.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
 650 "debug-darwin-i386-cc","cc:-arch i386 -g3 -DL_ENDIAN::-D_REENTRANT:MACOSX:-Wl,-search_paths_first%:BN_LLONG RC4_INT RC4_CHUNK DES_UNROLL BF_PTR:${x86_asm}:macosx:dlfcn:darwin-shared:-fPIC -fno-common:-arch i386 -dynamiclib:.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
 651 "darwin64-x86_64-cc","cc:-arch x86_64 -O3 -DL_ENDIAN -Wall::-D_REENTRANT:MACOSX:-Wl,-search_paths_first%:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:".eval{my $asm=$x86_64_asm;$asm=~s/rc4\-[^:]+//;$asm}.":macosx:dlfcn:darwin-shared:-fPIC -fno-common:-arch x86_64 -dynamiclib:.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
 652 "debug-darwin64-x86_64-cc","cc:-arch x86_64 -ggdb -g2 -O0 -DL_ENDIAN -Wall::-D_REENTRANT:MACOSX:-Wl,-search_paths_first%:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:".eval{my $asm=$x86_64_asm;$asm=~s/rc4\-[^:]+//;$asm}.":macosx:dlfcn:darwin-shared:-fPIC -fno-common:-arch x86_64 -dynamiclib:.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
 653 "debug-darwin-ppc-cc","cc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DCRYPTO_MDEBUG -DB_ENDIAN -g -Wall -O::-D_REENTRANT:MACOSX::BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${ppc32_asm}:osx32:dlfcn:darwin-shared:-fPIC:-dynamiclib:.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
 654 # iPhoneOS/iOS
 655 "iphoneos-cross","llvm-gcc:-O3 -isysroot \$(CROSS_TOP)/SDKs/\$(CROSS_SDK) -fomit-frame-pointer -fno-common::-D_REENTRANT:iOS:-Wl,-search_paths_first%:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${no_asm}:dlfcn:darwin-shared:-fPIC -fno-common:-dynamiclib:.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
 656
 657 ##### A/UX
 658 "aux3-gcc","gcc:-O2 -DTERMIO::(unknown):AUX:-lbsd:RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:::",
 659
 660 ##### Sony NEWS-OS 4.x
 661 "newsos4-gcc","gcc:-O -DB_ENDIAN::(unknown):NEWS4:-lmld -liberty:BN_LLONG RC4_CHAR RC4_CHUNK DES_PTR DES_RISC1 DES_UNROLL BF_PTR::::",
 662
 663 ##### GNU Hurd
 664 "hurd-x86",  "gcc:-DL_ENDIAN -O3 -fomit-frame-pointer -march=i486 -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC",
 665
 666 ##### OS/2 EMX
 667 "OS2-EMX", "gcc::::::::",
 668
 669 ##### VxWorks for various targets
 670 "vxworks-ppc60x","ccppc:-D_REENTRANT -mrtp -mhard-float -mstrict-align -fno-implicit-fp -DPPC32_fp60x -O2 -fstrength-reduce -fno-builtin -fno-strict-aliasing -Wall -DCPU=PPC32 -DTOOL_FAMILY=gnu -DTOOL=gnu -I\$(WIND_BASE)/target/usr/h -I\$(WIND_BASE)/target/usr/h/wrn/coreip:::VXWORKS:-Wl,--defsym,__wrs_rtp_base=0xe0000000 -L \$(WIND_BASE)/target/usr/lib/ppc/PPC32/common:::::",
 671 "vxworks-ppcgen","ccppc:-D_REENTRANT -mrtp -msoft-float -mstrict-align -O1 -fno-builtin -fno-strict-aliasing -Wall -DCPU=PPC32 -DTOOL_FAMILY=gnu -DTOOL=gnu -I\$(WIND_BASE)/target/usr/h -I\$(WIND_BASE)/target/usr/h/wrn/coreip:::VXWORKS:-Wl,--defsym,__wrs_rtp_base=0xe0000000 -L \$(WIND_BASE)/target/usr/lib/ppc/PPC32/sfcommon:::::",
 672 "vxworks-ppc405","ccppc:-g -msoft-float -mlongcall -DCPU=PPC405 -I\$(WIND_BASE)/target/h:::VXWORKS:-r:::::",
 673 "vxworks-ppc750","ccppc:-ansi -nostdinc -DPPC750 -D_REENTRANT -fvolatile -fno-builtin -fno-for-scope -fsigned-char -Wall -msoft-float -mlongcall -DCPU=PPC604 -I\$(WIND_BASE)/target/h \$(DEBUG_FLAG):::VXWORKS:-r:::::",
 674 "vxworks-ppc750-debug","ccppc:-ansi -nostdinc -DPPC750 -D_REENTRANT -fvolatile -fno-builtin -fno-for-scope -fsigned-char -Wall -msoft-float -mlongcall -DCPU=PPC604 -I\$(WIND_BASE)/target/h -DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DPEDANTIC -DDEBUG_SAFESTACK -DDEBUG -g:::VXWORKS:-r:::::",
 675 "vxworks-ppc860","ccppc:-nostdinc -msoft-float -DCPU=PPC860 -DNO_STRINGS_H -I\$(WIND_BASE)/target/h:::VXWORKS:-r:::::",
 676 "vxworks-simlinux","ccpentium:-B\$(WIND_BASE)/host/\$(WIND_HOST_TYPE)/lib/gcc-lib/ -D_VSB_CONFIG_FILE=\"\$(WIND_BASE)/target/lib/h/config/vsbConfig.h\" -DL_ENDIAN -DCPU=SIMLINUX -DTOOL_FAMILY=gnu -DTOOL=gnu -fno-builtin -fno-defer-pop -DNO_STRINGS_H -I\$(WIND_BASE)/target/h -I\$(WIND_BASE)/target/h/wrn/coreip -DOPENSSL_NO_HW_PADLOCK:::VXWORKS:-r::${no_asm}::::::ranlibpentium:",
 677 "vxworks-mips","ccmips:-mrtp -mips2 -O -G 0 -B\$(WIND_BASE)/host/\$(WIND_HOST_TYPE)/lib/gcc-lib/ -D_VSB_CONFIG_FILE=\"\$(WIND_BASE)/target/lib/h/config/vsbConfig.h\" -DCPU=MIPS32 -msoft-float -mno-branch-likely -DTOOL_FAMILY=gnu -DTOOL=gnu -fno-builtin -fno-defer-pop -DNO_STRINGS_H -I\$(WIND_BASE)/target/usr/h -I\$(WIND_BASE)/target/h/wrn/coreip::-D_REENTRANT:VXWORKS:-Wl,--defsym,__wrs_rtp_base=0xe0000000 -L \$(WIND_BASE)/target/usr/lib/mips/MIPSI32/sfcommon::${mips32_asm}:o32::::::ranlibmips:",
 678
 679 ##### Compaq Non-Stop Kernel (Tandem)
 680 "tandem-c89","c89:-Ww -D__TANDEM -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1 -D_TANDEM_SOURCE -DB_ENDIAN::(unknown):::THIRTY_TWO_BIT:::",
 681
 682 # uClinux
 683 "uClinux-dist","$ENV{'CC'}:\$(CFLAGS)::-D_REENTRANT::\$(LDFLAGS) \$(LDLIBS):BN_LLONG:${no_asm}:$ENV{'LIBSSL_dlfcn'}:linux-shared:-fPIC:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):$ENV{'RANLIB'}::",
 684 "uClinux-dist64","$ENV{'CC'}:\$(CFLAGS)::-D_REENTRANT::\$(LDFLAGS) \$(LDLIBS):SIXTY_FOUR_BIT_LONG:${no_asm}:$ENV{'LIBSSL_dlfcn'}:linux-shared:-fPIC:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):$ENV{'RANLIB'}::",
 685
 686 );
 687
 688 my @MK1MF_Builds=qw(VC-WIN64I VC-WIN64A
 689                     debug-VC-WIN64I debug-VC-WIN64A
 690                     VC-NT VC-CE VC-WIN32 debug-VC-WIN32
 691                     BC-32
 692                     netware-clib netware-clib-bsdsock
 693                     netware-libc netware-libc-bsdsock);
 694
 695 my $idx = 0;
 696 my $idx_cc = $idx++;
 697 my $idx_cflags = $idx++;
 698 my $idx_unistd = $idx++;
 699 my $idx_thread_cflag = $idx++;
 700 my $idx_sys_id = $idx++;
 701 my $idx_lflags = $idx++;
 702 my $idx_bn_ops = $idx++;
 703 my $idx_cpuid_obj = $idx++;
 704 my $idx_bn_obj = $idx++;
 705 my $idx_ec_obj = $idx++;
 706 my $idx_des_obj = $idx++;
 707 my $idx_aes_obj = $idx++;
 708 my $idx_bf_obj = $idx++;
 709 my $idx_md5_obj = $idx++;
 710 my $idx_sha1_obj = $idx++;
 711 my $idx_cast_obj = $idx++;
 712 my $idx_rc4_obj = $idx++;
 713 my $idx_rmd160_obj = $idx++;
 714 my $idx_rc5_obj = $idx++;
 715 my $idx_wp_obj = $idx++;
 716 my $idx_cmll_obj = $idx++;
 717 my $idx_modes_obj = $idx++;
 718 my $idx_engines_obj = $idx++;
 719 my $idx_perlasm_scheme = $idx++;
 720 my $idx_dso_scheme = $idx++;
 721 my $idx_shared_target = $idx++;
 722 my $idx_shared_cflag = $idx++;
 723 my $idx_shared_ldflag = $idx++;
 724 my $idx_shared_extension = $idx++;
 725 my $idx_ranlib = $idx++;
 726 my $idx_arflags = $idx++;
 727 my $idx_multilib = $idx++;
 728
 729 my $prefix="";
 730 my $libdir="";
 731 my $openssldir="";
 732 my $exe_ext="";
 733 my $install_prefix= "$ENV{'INSTALL_PREFIX'}";
 734 my $cross_compile_prefix="";
 735 my $fipsdir="/usr/local/ssl/fips-2.0";
 736 my $fipslibdir="";
 737 my $baseaddr="0xFB00000";
 738 my $no_threads=0;
 739 my $threads=0;
 740 my $no_shared=0; # but "no-shared" is default
 741 my $zlib=1;      # but "no-zlib" is default
 742 my $no_krb5=0;   # but "no-krb5" is implied unless "--with-krb5-..." is used
 743 my $no_rfc3779=1; # but "no-rfc3779" is default
 744 my $no_asm=0;
 745 my $no_dso=0;
 746 my $no_gmp=0;
 747 my @skip=();
 748 my $Makefile="Makefile";
 749 my $des_locl="crypto/des/des_locl.h";
 750 my $des ="crypto/des/des.h";
 751 my $bn  ="crypto/bn/bn.h";
 752 my $md2 ="crypto/md2/md2.h";
 753 my $rc4 ="crypto/rc4/rc4.h";
 754 my $rc4_locl="crypto/rc4/rc4_locl.h";
 755 my $idea        ="crypto/idea/idea.h";
 756 my $rc2 ="crypto/rc2/rc2.h";
 757 my $bf  ="crypto/bf/bf_locl.h";
 758 my $bn_asm      ="bn_asm.o";
 759 my $des_enc="des_enc.o fcrypt_b.o";
 760 my $aes_enc="aes_core.o aes_cbc.o";
 761 my $bf_enc      ="bf_enc.o";
 762 my $cast_enc="c_enc.o";
 763 my $rc4_enc="rc4_enc.o rc4_skey.o";
 764 my $rc5_enc="rc5_enc.o";
 765 my $md5_obj="";
 766 my $sha1_obj="";
 767 my $rmd160_obj="";
 768 my $cmll_enc="camellia.o cmll_misc.o cmll_cbc.o";
 769 my $processor="";
 770 my $default_ranlib;
 771 my $perl;
 772 my $fips=0;
 773
 774 if (exists $ENV{FIPSDIR})
 775         {
 776         $fipsdir = $ENV{FIPSDIR};
 777         $fipsdir =~ s/\/$//;
 778         }
 779
 780 # All of the following is disabled by default (RC5 was enabled before 0.9.8):
 781
 782 my %disabled = ( # "what"         => "comment" [or special keyword "experimental"]
 783                  "ec_nistp_64_gcc_128" => "default",
 784                  "gmp"            => "default",
 785                  "jpake"          => "experimental",
 786                  "libunbound"     => "experimental",
 787                  "md2"            => "default",
 788                  "rc5"            => "default",
 789                  "rfc3779"        => "default",
 790                  "sctp"           => "default",
 791                  "shared"         => "default",
 792                  "ssl-trace"      => "default",
 793                  "ssl2"           => "default",
 794                  "store"          => "experimental",
 795                  "unit-test"      => "default",
 796                  "weak-ssl-ciphers" => "default",
 797                  "zlib"           => "default",
 798                  "zlib-dynamic"   => "default"
 799                );
 800 my @experimental = ();
 801
 802 # This is what $depflags will look like with the above defaults
 803 # (we need this to see if we should advise the user to run "make depend"):
 804 my $default_depflags = " -DOPENSSL_NO_EC_NISTP_64_GCC_128 -DOPENSSL_NO_GMP -DOPENSSL_NO_JPAKE -DOPENSSL_NO_LIBUNBOUND -DOPENSSL_NO_MD2 -DOPENSSL_NO_RC5 -DOPENSSL_NO_RFC3779 -DOPENSSL_NO_SCTP -DOPENSSL_NO_SSL_TRACE -DOPENSSL_NO_SSL2 -DOPENSSL_NO_STORE -DOPENSSL_NO_UNIT_TEST -DOPENSSL_NO_WEAK_SSL_CIPHERS";
 805
 806 # Explicit "no-..." options will be collected in %disabled along with the defaults.
 807 # To remove something from %disabled, use "enable-foo" (unless it's experimental).
 808 # For symmetry, "disable-foo" is a synonym for "no-foo".
 809
 810 # For features called "experimental" here, a more explicit "experimental-foo" is needed to enable.
 811 # We will collect such requests in @experimental.
 812 # To avoid accidental use of experimental features, applications will have to use -DOPENSSL_EXPERIMENTAL_FOO.
 813
 814
 815 my $no_sse2=0;
 816
 817 &usage if ($#ARGV < 0);
 818
 819 my $flags;
 820 my $depflags;
 821 my $openssl_experimental_defines;
 822 my $openssl_algorithm_defines;
 823 my $openssl_thread_defines;
 824 my $openssl_sys_defines="";
 825 my $openssl_other_defines;
 826 my $libs;
 827 my $libkrb5="";
 828 my $target;
 829 my $options;
 830 my $symlink;
 831 my $make_depend=0;
 832 my %withargs=();
 833
 834 my @argvcopy=@ARGV;
 835 my $argvstring="";
 836 my $argv_unprocessed=1;
 837
 838 while($argv_unprocessed)
 839         {
 840         $flags="";
 841         $depflags="";
 842         $openssl_experimental_defines="";
 843         $openssl_algorithm_defines="";
 844         $openssl_thread_defines="";
 845         $openssl_sys_defines="";
 846         $openssl_other_defines="";
 847         $libs="";
 848         $target="";
 849         $options="";
 850         $symlink=1;
 851
 852         $argv_unprocessed=0;
 853         $argvstring=join(' ',@argvcopy);
 854
 855 PROCESS_ARGS:
 856         foreach (@argvcopy)
 857                 {
 858                 s /^-no-/no-/; # some people just can't read the instructions
 859
 860                 # rewrite some options in "enable-..." form
 861                 s /^-?-?shared$/enable-shared/;
 862                 s /^sctp$/enable-sctp/;
 863                 s /^threads$/enable-threads/;
 864                 s /^zlib$/enable-zlib/;
 865                 s /^zlib-dynamic$/enable-zlib-dynamic/;
 866
 867                 if (/^no-(.+)$/ || /^disable-(.+)$/)
 868                         {
 869                         if (!($disabled{$1} eq "experimental"))
 870                                 {
 871                                 if ($1 eq "ssl")
 872                                         {
 873                                         $disabled{"ssl2"} = "option(ssl)";
 874                                         $disabled{"ssl3"} = "option(ssl)";
 875                                         }
 876                                 elsif ($1 eq "tls")
 877                                         {
 878                                         $disabled{"tls1"} = "option(tls)"
 879                                         }
 880                                 elsif ($1 eq "ssl3-method")
 881                                         {
 882                                         $disabled{"ssl3-method"} = "option(ssl)";
 883                                         $disabled{"ssl3"} = "option(ssl)";
 884                                         }
 885                                 else
 886                                         {
 887                                         $disabled{$1} = "option";
 888                                         }
 889                                 }
 890                         }
 891                 elsif (/^enable-(.+)$/ || /^experimental-(.+)$/)
 892                         {
 893                         my $algo = $1;
 894                         if ($disabled{$algo} eq "experimental")
 895                                 {
 896                                 die "You are requesting an experimental feature; please say 'experimental-$algo' if you are sure\n"
 897                                         unless (/^experimental-/);
 898                                 push @experimental, $algo;
 899                                 }
 900                         delete $disabled{$algo};
 901
 902                         $threads = 1 if ($algo eq "threads");
 903                         }
 904                 elsif (/^--test-sanity$/)
 905                         {
 906                         exit(&test_sanity());
 907                         }
 908                 elsif (/^--strict-warnings/)
 909                         {
 910                         $strict_warnings = 1;
 911                         }
 912                 elsif (/^reconfigure/ || /^reconf/)
 913                         {
 914                         if (open(IN,"<$Makefile"))
 915                                 {
 916                                 while (<IN>)
 917                                         {
 918                                         chomp;
 919                                         if (/^CONFIGURE_ARGS=(.*)/)
 920                                                 {
 921                                                 $argvstring=$1;
 922                                                 @argvcopy=split(' ',$argvstring);
 923                                                 die "Incorrect data to reconfigure, please do a normal configuration\n"
 924                                                         if (grep(/^reconf/,@argvcopy));
 925                                                 print "Reconfiguring with: $argvstring\n";
 926                                                 $argv_unprocessed=1;
 927                                                 close(IN);
 928                                                 last PROCESS_ARGS;
 929                                                 }
 930                                         }
 931                                 close(IN);
 932                                 }
 933                         die "Insufficient data to reconfigure, please do a normal configuration\n";
 934                         }
 935                 elsif (/^386$/)
 936                         { $processor=386; }
 937                 elsif (/^fips$/)
 938                         {
 939                         $fips=1;
 940                         }
 941                 elsif (/^rsaref$/)
 942                         {
 943                         # No RSAref support any more since it's not needed.
 944                         # The check for the option is there so scripts aren't
 945                         # broken
 946                         }
 947                 elsif (/^[-+]/)
 948                         {
 949                         if (/^--prefix=(.*)$/)
 950                                 {
 951                                 $prefix=$1;
 952                                 }
 953                         elsif (/^--libdir=(.*)$/)
 954                                 {
 955                                 $libdir=$1;
 956                                 }
 957                         elsif (/^--openssldir=(.*)$/)
 958                                 {
 959                                 $openssldir=$1;
 960                                 }
 961                         elsif (/^--install.prefix=(.*)$/)
 962                                 {
 963                                 $install_prefix=$1;
 964                                 }
 965                         elsif (/^--with-krb5-(dir|lib|include|flavor)=(.*)$/)
 966                                 {
 967                                 $withargs{"krb5-".$1}=$2;
 968                                 }
 969                         elsif (/^--with-zlib-lib=(.*)$/)
 970                                 {
 971                                 $withargs{"zlib-lib"}=$1;
 972                                 }
 973                         elsif (/^--with-zlib-include=(.*)$/)
 974                                 {
 975                                 $withargs{"zlib-include"}="-I$1";
 976                                 }
 977                         elsif (/^--with-fipsdir=(.*)$/)
 978                                 {
 979                                 $fipsdir="$1";
 980                                 }
 981                         elsif (/^--with-fipslibdir=(.*)$/)
 982                                 {
 983                                 $fipslibdir="$1";
 984                                 }
 985                         elsif (/^--with-baseaddr=(.*)$/)
 986                                 {
 987                                 $baseaddr="$1";
 988                                 }
 989                         elsif (/^--cross-compile-prefix=(.*)$/)
 990                                 {
 991                                 $cross_compile_prefix=$1;
 992                                 }
 993                         elsif (/^-[lL](.*)$/ or /^-Wl,/)
 994                                 {
 995                                 $libs.=$_." ";
 996                                 }
 997                         else    # common if (/^[-+]/), just pass down...
 998                                 {
 999                                 $_ =~ s/%([0-9a-f]{1,2})/chr(hex($1))/gei;
1000                                 $flags.=$_." ";
1001                                 }
1002                         }
1003                 elsif ($_ =~ /^([^:]+):(.+)$/)
1004                         {
1005                         eval "\$table{\$1} = \"$2\""; # allow $xxx constructs in the string
1006                         $target=$1;
1007                         }
1008                 else
1009                         {
1010                         die "target already defined - $target (offending arg: $_)\n" if ($target ne "");
1011                         $target=$_;
1012                         }
1013
1014                 unless ($_ eq $target || /^no-/ || /^disable-/)
1015                         {
1016                         # "no-..." follows later after implied disactivations
1017                         # have been derived.  (Don't take this too seroiusly,
1018                         # we really only write OPTIONS to the Makefile out of
1019                         # nostalgia.)
1020
1021                         if ($options eq "")
1022                                 { $options = $_; }
1023                         else
1024                                 { $options .= " ".$_; }
1025                         }
1026                 }
1027         }
1028
1029
1030
1031 if ($processor eq "386")
1032         {
1033         $disabled{"sse2"} = "forced";
1034         }
1035
1036 if (!defined($withargs{"krb5-flavor"}) || $withargs{"krb5-flavor"} eq "")
1037         {
1038         $disabled{"krb5"} = "krb5-flavor not specified";
1039         }
1040
1041 if (!defined($disabled{"zlib-dynamic"}))
1042         {
1043         # "zlib-dynamic" was specifically enabled, so enable "zlib"
1044         delete $disabled{"zlib"};
1045         }
1046
1047 if (defined($disabled{"rijndael"}))
1048         {
1049         $disabled{"aes"} = "forced";
1050         }
1051 if (defined($disabled{"des"}))
1052         {
1053         $disabled{"mdc2"} = "forced";
1054         }
1055 if (defined($disabled{"ec"}))
1056         {
1057         $disabled{"ecdsa"} = "forced";
1058         $disabled{"ecdh"} = "forced";
1059         }
1060
1061 # SSL 2.0 requires MD5 and RSA
1062 if (defined($disabled{"md5"}) || defined($disabled{"rsa"}))
1063         {
1064         $disabled{"ssl2"} = "forced";
1065         }
1066
1067 if ($fips && $fipslibdir eq "")
1068         {
1069         $fipslibdir = $fipsdir . "/lib/";
1070         }
1071
1072 # RSAX ENGINE sets default non-FIPS RSA method.
1073 if ($fips)
1074         {
1075         $disabled{"rsax"} = "forced";
1076         }
1077
1078 # SSL 3.0 and TLS requires MD5 and SHA and either RSA or DSA+DH
1079 if (defined($disabled{"md5"}) || defined($disabled{"sha"})
1080     || (defined($disabled{"rsa"})
1081         && (defined($disabled{"dsa"}) || defined($disabled{"dh"}))))
1082         {
1083         $disabled{"ssl3"} = "forced";
1084         $disabled{"tls1"} = "forced";
1085         }
1086
1087 if (defined($disabled{"ec"}) || defined($disabled{"dsa"})
1088     || defined($disabled{"dh"}))
1089         {
1090         $disabled{"gost"} = "forced";
1091         }
1092
1093 # SRP and HEARTBEATS require TLSEXT
1094 if (defined($disabled{"tlsext"}))
1095         {
1096         $disabled{"srp"} = "forced";
1097         $disabled{"heartbeats"} = "forced";
1098         }
1099
1100 if ($target eq "TABLE") {
1101         foreach $target (sort keys %table) {
1102                 print_table_entry($target);
1103         }
1104         exit 0;
1105 }
1106
1107 if ($target eq "LIST") {
1108         foreach (sort keys %table) {
1109                 print;
1110                 print "\n";
1111         }
1112         exit 0;
1113 }
1114
1115 if ($target =~ m/^CygWin32(-.*)$/) {
1116         $target = "Cygwin".$1;
1117 }
1118
1119 print "Configuring for $target\n";
1120
1121 &usage if (!defined($table{$target}));
1122
1123
1124 foreach (sort (keys %disabled))
1125         {
1126         $options .= " no-$_";
1127
1128         printf "    no-%-12s %-10s", $_, "[$disabled{$_}]";
1129
1130         if (/^dso$/)
1131                 { $no_dso = 1; }
1132         elsif (/^threads$/)
1133                 { $no_threads = 1; }
1134         elsif (/^shared$/)
1135                 { $no_shared = 1; }
1136         elsif (/^zlib$/)
1137                 { $zlib = 0; }
1138         elsif (/^static-engine$/)
1139                 { }
1140         elsif (/^zlib-dynamic$/)
1141                 { }
1142         elsif (/^symlinks$/)
1143                 { $symlink = 0; }
1144         elsif (/^sse2$/)
1145                 { $no_sse2 = 1; }
1146         else
1147                 {
1148                 my ($ALGO, $algo);
1149                 ($ALGO = $algo = $_) =~ tr/[\-a-z]/[_A-Z]/;
1150
1151                 if (/^asm$/ || /^err$/ || /^hw$/ || /^hw-/)
1152                         {
1153                         $openssl_other_defines .= "#define OPENSSL_NO_$ALGO\n";
1154                         print " OPENSSL_NO_$ALGO";
1155
1156                         if (/^err$/)    { $flags .= "-DOPENSSL_NO_ERR "; }
1157                         elsif (/^asm$/) { $no_asm = 1; }
1158                         }
1159                 else
1160                         {
1161                         $openssl_algorithm_defines .= "#define OPENSSL_NO_$ALGO\n";
1162                         print " OPENSSL_NO_$ALGO";
1163
1164                         if (/^krb5$/)
1165                                 { $no_krb5 = 1; }
1166                         else
1167                                 {
1168                                 push @skip, $algo;
1169                                 # fix-up crypto/directory name(s)
1170                                 @skip[$#skip]="whrlpool" if $algo eq "whirlpool";
1171                                 print " (skip dir)";
1172
1173                                 $depflags .= " -DOPENSSL_NO_$ALGO";
1174                                 }
1175                         }
1176                         if (/^comp$/)   { $zlib = 0; }
1177                 }
1178
1179         print "\n";
1180         }
1181
1182 my $exp_cflags = "";
1183 foreach (sort @experimental)
1184         {
1185         my $ALGO;
1186         ($ALGO = $_) =~ tr/[a-z]/[A-Z]/;
1187
1188         # opensslconf.h will set OPENSSL_NO_... unless OPENSSL_EXPERIMENTAL_... is defined
1189         $openssl_experimental_defines .= "#define OPENSSL_NO_$ALGO\n";
1190         $exp_cflags .= " -DOPENSSL_EXPERIMENTAL_$ALGO";
1191         }
1192
1193 my $IsMK1MF=scalar grep /^$target$/,@MK1MF_Builds;
1194
1195 $exe_ext=".exe" if ($target eq "Cygwin" || $target eq "DJGPP" || $target =~ /^mingw/);
1196 $exe_ext=".nlm" if ($target =~ /netware/);
1197 $exe_ext=".pm"  if ($target =~ /vos/);
1198 $openssldir="/usr/local/ssl" if ($openssldir eq "" and $prefix eq "");
1199 $prefix=$openssldir if $prefix eq "";
1200
1201 $default_ranlib= &which("ranlib") or $default_ranlib="true";
1202 $perl=$ENV{'PERL'} or $perl=&which("perl5") or $perl=&which("perl")
1203   or $perl="perl";
1204 my $make = $ENV{'MAKE'} || "make";
1205
1206 $cross_compile_prefix=$ENV{'CROSS_COMPILE'} if $cross_compile_prefix eq "";
1207
1208 chop $openssldir if $openssldir =~ /\/$/;
1209 chop $prefix if $prefix =~ /.\/$/;
1210
1211 $openssldir=$prefix . "/ssl" if $openssldir eq "";
1212 $openssldir=$prefix . "/" . $openssldir if $openssldir !~ /(^\/|^[a-zA-Z]:[\\\/])/;
1213
1214
1215 print "IsMK1MF=$IsMK1MF\n";
1216
1217 my @fields = split(/\s*:\s*/,$table{$target} . ":" x 30 , -1);
1218 my $cc = $fields[$idx_cc];
1219 # Allow environment CC to override compiler...
1220 if($ENV{CC}) {
1221     $cc = $ENV{CC};
1222 }
1223
1224 my $cflags = $fields[$idx_cflags];
1225 my $unistd = $fields[$idx_unistd];
1226 my $thread_cflag = $fields[$idx_thread_cflag];
1227 my $sys_id = $fields[$idx_sys_id];
1228 my $lflags = $fields[$idx_lflags];
1229 my $bn_ops = $fields[$idx_bn_ops];
1230 my $cpuid_obj = $fields[$idx_cpuid_obj];
1231 my $bn_obj = $fields[$idx_bn_obj];
1232 my $ec_obj = $fields[$idx_ec_obj];
1233 my $des_obj = $fields[$idx_des_obj];
1234 my $aes_obj = $fields[$idx_aes_obj];
1235 my $bf_obj = $fields[$idx_bf_obj];
1236 my $md5_obj = $fields[$idx_md5_obj];
1237 my $sha1_obj = $fields[$idx_sha1_obj];
1238 my $cast_obj = $fields[$idx_cast_obj];
1239 my $rc4_obj = $fields[$idx_rc4_obj];
1240 my $rmd160_obj = $fields[$idx_rmd160_obj];
1241 my $rc5_obj = $fields[$idx_rc5_obj];
1242 my $wp_obj = $fields[$idx_wp_obj];
1243 my $cmll_obj = $fields[$idx_cmll_obj];
1244 my $modes_obj = $fields[$idx_modes_obj];
1245 my $engines_obj = $fields[$idx_engines_obj];
1246 my $perlasm_scheme = $fields[$idx_perlasm_scheme];
1247 my $dso_scheme = $fields[$idx_dso_scheme];
1248 my $shared_target = $fields[$idx_shared_target];
1249 my $shared_cflag = $fields[$idx_shared_cflag];
1250 my $shared_ldflag = $fields[$idx_shared_ldflag];
1251 my $shared_extension = $fields[$idx_shared_extension];
1252 my $ranlib = $ENV{'RANLIB'} || $fields[$idx_ranlib];
1253 my $ar = $ENV{'AR'} || "ar";
1254 my $arflags = $fields[$idx_arflags];
1255 my $windres = $ENV{'RC'} || $ENV{'WINDRES'} || "windres";
1256 my $multilib = $fields[$idx_multilib];
1257
1258 # if $prefix/lib$multilib is not an existing directory, then
1259 # assume that it's not searched by linker automatically, in
1260 # which case adding $multilib suffix causes more grief than
1261 # we're ready to tolerate, so don't...
1262 $multilib="" if !-d "$prefix/lib$multilib";
1263
1264 $libdir="lib$multilib" if $libdir eq "";
1265
1266 $cflags = "$cflags$exp_cflags";
1267
1268 # '%' in $lflags is used to split flags to "pre-" and post-flags
1269 my ($prelflags,$postlflags)=split('%',$lflags);
1270 if (defined($postlflags))       { $lflags=$postlflags;  }
1271 else                            { $lflags=$prelflags; undef $prelflags; }
1272
1273 if ($target =~ /^mingw/ && `$cross_compile_prefix$cc --target-help 2>&1` !~ m/\-mno\-cygwin/m)
1274         {
1275         $cflags =~ s/\-mno\-cygwin\s*//;
1276         $shared_ldflag =~ s/\-mno\-cygwin\s*//;
1277         }
1278
1279 if ($target =~ /linux.*\-mips/ && !$no_asm && $flags !~ /\-m(ips|arch=)/) {
1280         # minimally required architecture flags for assembly modules
1281         $cflags="-mips2 $cflags" if ($target =~ /mips32/);
1282         $cflags="-mips3 $cflags" if ($target =~ /mips64/);
1283 }
1284
1285 my $no_shared_warn=0;
1286 my $no_user_cflags=0;
1287
1288 if ($flags ne "")       { $cflags="$flags$cflags"; }
1289 else                    { $no_user_cflags=1;       }
1290
1291 # Kerberos settings.  The flavor must be provided from outside, either through
1292 # the script "config" or manually.
1293 if (!$no_krb5)
1294         {
1295         my ($lresolv, $lpath, $lext);
1296         if ($withargs{"krb5-flavor"} =~ /^[Hh]eimdal$/)
1297                 {
1298                 die "Sorry, Heimdal is currently not supported\n";
1299                 }
1300         ##### HACK to force use of Heimdal.
1301         ##### WARNING: Since we don't really have adequate support for Heimdal,
1302         #####          using this will break the build.  You'll have to make
1303         #####          changes to the source, and if you do, please send
1304         #####          patches to openssl-dev@openssl.org
1305         if ($withargs{"krb5-flavor"} =~ /^force-[Hh]eimdal$/)
1306                 {
1307                 warn "Heimdal isn't really supported.  Your build WILL break\n";
1308                 warn "If you fix the problems, please send a patch to openssl-dev\@openssl.org\n";
1309                 $withargs{"krb5-dir"} = "/usr/heimdal"
1310                         if $withargs{"krb5-dir"} eq "";
1311                 $withargs{"krb5-lib"} = "-L".$withargs{"krb5-dir"}.
1312                         "/lib -lgssapi -lkrb5 -lcom_err"
1313                         if $withargs{"krb5-lib"} eq "" && !$IsMK1MF;
1314                 $cflags="-DKRB5_HEIMDAL $cflags";
1315                 }
1316         if ($withargs{"krb5-flavor"} =~ /^[Mm][Ii][Tt]/)
1317                 {
1318                 $withargs{"krb5-dir"} = "/usr/kerberos"
1319                         if $withargs{"krb5-dir"} eq "";
1320                 $withargs{"krb5-lib"} = "-L".$withargs{"krb5-dir"}.
1321                         "/lib -lgssapi_krb5 -lkrb5 -lcom_err -lk5crypto"
1322                         if $withargs{"krb5-lib"} eq "" && !$IsMK1MF;
1323                 $cflags="-DKRB5_MIT $cflags";
1324                 $withargs{"krb5-flavor"} =~ s/^[Mm][Ii][Tt][._-]*//;
1325                 if ($withargs{"krb5-flavor"} =~ /^1[._-]*[01]/)
1326                         {
1327                         $cflags="-DKRB5_MIT_OLD11 $cflags";
1328                         }
1329                 }
1330         LRESOLV:
1331         foreach $lpath ("/lib", "/usr/lib")
1332                 {
1333                 foreach $lext ("a", "so")
1334                         {
1335                         $lresolv = "$lpath/libresolv.$lext";
1336                         last LRESOLV    if (-r "$lresolv");
1337                         $lresolv = "";
1338                         }
1339                 }
1340         $withargs{"krb5-lib"} .= " -lresolv"
1341                 if ("$lresolv" ne "");
1342         $withargs{"krb5-include"} = "-I".$withargs{"krb5-dir"}."/include"
1343                 if $withargs{"krb5-include"} eq "" &&
1344                    $withargs{"krb5-dir"} ne "";
1345         }
1346
1347 # The DSO code currently always implements all functions so that no
1348 # applications will have to worry about that from a compilation point
1349 # of view. However, the "method"s may return zero unless that platform
1350 # has support compiled in for them. Currently each method is enabled
1351 # by a define "DSO_<name>" ... we translate the "dso_scheme" config
1352 # string entry into using the following logic;
1353 my $dso_cflags;
1354 if (!$no_dso && $dso_scheme ne "")
1355         {
1356         $dso_scheme =~ tr/[a-z]/[A-Z]/;
1357         if ($dso_scheme eq "DLFCN")
1358                 {
1359                 $dso_cflags = "-DDSO_DLFCN -DHAVE_DLFCN_H";
1360                 }
1361         elsif ($dso_scheme eq "DLFCN_NO_H")
1362                 {
1363                 $dso_cflags = "-DDSO_DLFCN";
1364                 }
1365         else
1366                 {
1367                 $dso_cflags = "-DDSO_$dso_scheme";
1368                 }
1369         $cflags = "$dso_cflags $cflags";
1370         }
1371
1372 my $thread_cflags;
1373 my $thread_defines;
1374 if ($thread_cflag ne "(unknown)" && !$no_threads)
1375         {
1376         # If we know how to do it, support threads by default.
1377         $threads = 1;
1378         }
1379 if ($thread_cflag eq "(unknown)" && $threads)
1380         {
1381         # If the user asked for "threads", [s]he is also expected to
1382         # provide any system-dependent compiler options that are
1383         # necessary.
1384         if ($no_user_cflags)
1385                 {
1386                 print "You asked for multi-threading support, but didn't\n";
1387                 print "provide any system-specific compiler options\n";
1388                 exit(1);
1389                 }
1390         $thread_cflags="-DOPENSSL_THREADS $cflags" ;
1391         $thread_defines .= "#define OPENSSL_THREADS\n";
1392         }
1393 else
1394         {
1395         $thread_cflags="-DOPENSSL_THREADS $thread_cflag $cflags";
1396         $thread_defines .= "#define OPENSSL_THREADS\n";
1397 #       my $def;
1398 #       foreach $def (split ' ',$thread_cflag)
1399 #               {
1400 #               if ($def =~ s/^-D// && $def !~ /^_/)
1401 #                       {
1402 #                       $thread_defines .= "#define $def\n";
1403 #                       }
1404 #               }
1405         }
1406
1407 $lflags="$libs$lflags" if ($libs ne "");
1408
1409 if ($no_asm)
1410         {
1411         $cpuid_obj=$bn_obj=$ec_obj=
1412         $des_obj=$aes_obj=$bf_obj=$cast_obj=$rc4_obj=$rc5_obj=$cmll_obj=
1413         $modes_obj=$sha1_obj=$md5_obj=$rmd160_obj=$wp_obj=$engines_obj="";
1414         }
1415
1416 if (!$no_shared)
1417         {
1418         $cast_obj="";   # CAST assembler is not PIC
1419         }
1420
1421 if ($threads)
1422         {
1423         $cflags=$thread_cflags;
1424         $openssl_thread_defines .= $thread_defines;
1425         }
1426
1427 if ($zlib)
1428         {
1429         $cflags = "-DZLIB $cflags";
1430         if (defined($disabled{"zlib-dynamic"}))
1431                 {
1432                 if (defined($withargs{"zlib-lib"}))
1433                         {
1434                         $lflags = "$lflags -L" . $withargs{"zlib-lib"} . " -lz";
1435                         }
1436                 else
1437                         {
1438                         $lflags = "$lflags -lz";
1439                         }
1440                 }
1441         else
1442                 {
1443                 $cflags = "-DZLIB_SHARED $cflags";
1444                 }
1445         }
1446
1447 # You will find shlib_mark1 and shlib_mark2 explained in Makefile.org
1448 my $shared_mark = "";
1449 if ($shared_target eq "")
1450         {
1451         $no_shared_warn = 1 if !$no_shared;
1452         $no_shared = 1;
1453         }
1454 if (!$no_shared)
1455         {
1456         if ($shared_cflag ne "")
1457                 {
1458                 $cflags = "$shared_cflag -DOPENSSL_PIC $cflags";
1459                 }
1460         }
1461
1462 if (!$IsMK1MF)
1463         {
1464         # add {no-}static-engine to options to allow mkdef.pl to work without extra arguments
1465         if ($no_shared)
1466                 {
1467                 $openssl_other_defines.="#define OPENSSL_NO_DYNAMIC_ENGINE\n";
1468                 $options.=" static-engine";
1469                 }
1470         else
1471                 {
1472                 $openssl_other_defines.="#define OPENSSL_NO_STATIC_ENGINE\n";
1473                 $options.=" no-static-engine";
1474                 }
1475         }
1476
1477 $cpuid_obj.=" uplink.o uplink-x86.o" if ($cflags =~ /\-DOPENSSL_USE_APPLINK/);
1478
1479 #
1480 # Platform fix-ups
1481 #
1482 if ($target =~ /\-icc$/)        # Intel C compiler
1483         {
1484         my $iccver=0;
1485         if (open(FD,"$cc -V 2>&1 |"))
1486                 {
1487                 while(<FD>) { $iccver=$1 if (/Version ([0-9]+)\./); }
1488                 close(FD);
1489                 }
1490         if ($iccver>=8)
1491                 {
1492                 $cflags=~s/\-KPIC/-fPIC/;
1493                 # Eliminate unnecessary dependency from libirc.a. This is
1494                 # essential for shared library support, as otherwise
1495                 # apps/openssl can end up in endless loop upon startup...
1496                 $cflags.=" -Dmemcpy=__builtin_memcpy -Dmemset=__builtin_memset";
1497                 }
1498         if ($iccver>=9)
1499                 {
1500                 $lflags.=" -i-static";
1501                 $lflags=~s/\-no_cpprt/-no-cpprt/;
1502                 }
1503         if ($iccver>=10)
1504                 {
1505                 $lflags=~s/\-i\-static/-static-intel/;
1506                 }
1507         if ($iccver>=11)
1508                 {
1509                 $cflags.=" -no-intel-extensions";       # disable Cilk
1510                 $lflags=~s/\-no\-cpprt/-no-cxxlib/;
1511                 }
1512         }
1513
1514 # Unlike other OSes (like Solaris, Linux, Tru64, IRIX) BSD run-time
1515 # linkers (tested OpenBSD, NetBSD and FreeBSD) "demand" RPATH set on
1516 # .so objects. Apparently application RPATH is not global and does
1517 # not apply to .so linked with other .so. Problem manifests itself
1518 # when libssl.so fails to load libcrypto.so. One can argue that we
1519 # should engrave this into Makefile.shared rules or into BSD-* config
1520 # lines above. Meanwhile let's try to be cautious and pass -rpath to
1521 # linker only when --prefix is not /usr.
1522 if ($target =~ /^BSD\-/)
1523         {
1524         $shared_ldflag.=" -Wl,-rpath,\$\$(LIBRPATH)" if ($prefix !~ m|^/usr[/]*$|);
1525         }
1526
1527 if ($sys_id ne "")
1528         {
1529         #$cflags="-DOPENSSL_SYSNAME_$sys_id $cflags";
1530         $openssl_sys_defines="#define OPENSSL_SYSNAME_$sys_id\n";
1531         }
1532
1533 if ($ranlib eq "")
1534         {
1535         $ranlib = $default_ranlib;
1536         }
1537
1538 #my ($bn1)=split(/\s+/,$bn_obj);
1539 #$bn1 = "" unless defined $bn1;
1540 #$bn1=$bn_asm unless ($bn1 =~ /\.o$/);
1541 #$bn_obj="$bn1";
1542
1543 $cpuid_obj="" if ($processor eq "386");
1544
1545 $bn_obj = $bn_asm unless $bn_obj ne "";
1546 # bn-586 is the only one implementing bn_*_part_words
1547 $cflags.=" -DOPENSSL_BN_ASM_PART_WORDS" if ($bn_obj =~ /bn-586/);
1548 $cflags.=" -DOPENSSL_IA32_SSE2" if (!$no_sse2 && $bn_obj =~ /86/);
1549
1550 $cflags.=" -DOPENSSL_BN_ASM_MONT" if ($bn_obj =~ /-mont/);
1551 $cflags.=" -DOPENSSL_BN_ASM_MONT5" if ($bn_obj =~ /-mont5/);
1552 $cflags.=" -DOPENSSL_BN_ASM_GF2m" if ($bn_obj =~ /-gf2m/);
1553
1554 if ($fips)
1555         {
1556         $openssl_other_defines.="#define OPENSSL_FIPS\n";
1557         $cflags .= " -I\$(FIPSDIR)/include";
1558         }
1559
1560 $cpuid_obj="mem_clr.o"  unless ($cpuid_obj =~ /\.o$/);
1561 $des_obj=$des_enc       unless ($des_obj =~ /\.o$/);
1562 $bf_obj=$bf_enc         unless ($bf_obj =~ /\.o$/);
1563 $cast_obj=$cast_enc     unless ($cast_obj =~ /\.o$/);
1564 $rc5_obj=$rc5_enc       unless ($rc5_obj =~ /\.o$/);
1565 if ($rc4_obj =~ /\.o$/)
1566         {
1567         $cflags.=" -DRC4_ASM";
1568         }
1569 else
1570         {
1571         $rc4_obj=$rc4_enc;
1572         }
1573 if ($sha1_obj =~ /\.o$/)
1574         {
1575 #       $sha1_obj=$sha1_enc;
1576         $cflags.=" -DSHA1_ASM"   if ($sha1_obj =~ /sx86/ || $sha1_obj =~ /sha1/);
1577         $cflags.=" -DSHA256_ASM" if ($sha1_obj =~ /sha256/);
1578         $cflags.=" -DSHA512_ASM" if ($sha1_obj =~ /sha512/);
1579         if ($sha1_obj =~ /sse2/)
1580             {   if ($no_sse2)
1581                 {   $sha1_obj =~ s/\S*sse2\S+//;        }
1582                 elsif ($cflags !~ /OPENSSL_IA32_SSE2/)
1583                 {   $cflags.=" -DOPENSSL_IA32_SSE2";    }
1584             }
1585         }
1586 if ($md5_obj =~ /\.o$/)
1587         {
1588 #       $md5_obj=$md5_enc;
1589         $cflags.=" -DMD5_ASM";
1590         }
1591 if ($rmd160_obj =~ /\.o$/)
1592         {
1593 #       $rmd160_obj=$rmd160_enc;
1594         $cflags.=" -DRMD160_ASM";
1595         }
1596 if ($aes_obj =~ /\.o$/)
1597         {
1598         $cflags.=" -DAES_ASM" if ($aes_obj =~ m/\baes\-/);;
1599         # aes-ctr.o is not a real file, only indication that assembler
1600         # module implements AES_ctr32_encrypt...
1601         $cflags.=" -DAES_CTR_ASM" if ($aes_obj =~ s/\s*aes\-ctr\.o//);
1602         # aes-xts.o indicates presense of AES_xts_[en|de]crypt...
1603         $cflags.=" -DAES_XTS_ASM" if ($aes_obj =~ s/\s*aes\-xts\.o//);
1604         $aes_obj =~ s/\s*(vpaes|aesni)\-x86\.o//g if ($no_sse2);
1605         $cflags.=" -DVPAES_ASM" if ($aes_obj =~ m/vpaes/);
1606         $cflags.=" -DBSAES_ASM" if ($aes_obj =~ m/bsaes/);
1607         }
1608 else    {
1609         $aes_obj=$aes_enc;
1610         }
1611 $wp_obj="" if ($wp_obj =~ /mmx/ && $processor eq "386");
1612 if ($wp_obj =~ /\.o$/ && !$disabled{"whirlpool"})
1613         {
1614         $cflags.=" -DWHIRLPOOL_ASM";
1615         }
1616 else    {
1617         $wp_obj="wp_block.o";
1618         }
1619 $cmll_obj=$cmll_enc     unless ($cmll_obj =~ /.o$/);
1620 if ($modes_obj =~ /ghash\-/)
1621         {
1622         $cflags.=" -DGHASH_ASM";
1623         }
1624 if ($ec_obj =~ /ecp_nistz256/)
1625         {
1626         $cflags.=" -DECP_NISTZ256_ASM";
1627         }
1628
1629 # "Stringify" the C flags string.  This permits it to be made part of a string
1630 # and works as well on command lines.
1631 $cflags =~ s/([\\\"])/\\\1/g;
1632
1633 my $version = "unknown";
1634 my $version_num = "unknown";
1635 my $major = "unknown";
1636 my $minor = "unknown";
1637 my $shlib_version_number = "unknown";
1638 my $shlib_version_history = "unknown";
1639 my $shlib_major = "unknown";
1640 my $shlib_minor = "unknown";
1641
1642 open(IN,'<crypto/opensslv.h') || die "unable to read opensslv.h:$!\n";
1643 while (<IN>)
1644         {
1645         $version=$1 if /OPENSSL.VERSION.TEXT.*OpenSSL (\S+) /;
1646         $version_num=$1 if /OPENSSL.VERSION.NUMBER.*0x(\S+)/;
1647         $shlib_version_number=$1 if /SHLIB_VERSION_NUMBER *"([^"]+)"/;
1648         $shlib_version_history=$1 if /SHLIB_VERSION_HISTORY *"([^"]*)"/;
1649         }
1650 close(IN);
1651 if ($shlib_version_history ne "") { $shlib_version_history .= ":"; }
1652
1653 if ($version =~ /(^[0-9]*)\.([0-9\.]*)/)
1654         {
1655         $major=$1;
1656         $minor=$2;
1657         }
1658
1659 if ($shlib_version_number =~ /(^[0-9]*)\.([0-9\.]*)/)
1660         {
1661         $shlib_major=$1;
1662         $shlib_minor=$2;
1663         }
1664
1665 my %predefined;
1666
1667 # collect compiler pre-defines from gcc or gcc-alike...
1668 open(PIPE, "$cross_compile_prefix$cc -dM -E -x c /dev/null 2>&1 |");
1669 while (<PIPE>) {
1670   m/^#define\s+(\w+(?:\(\w+\))?)(?:\s+(.+))?/ or last;
1671   $predefined{$1} = defined($2) ? $2 : "";
1672 }
1673 close(PIPE);
1674
1675 # Xcode did not handle $cc -M before clang support
1676 my $cc_as_makedepend = 0;
1677 if ($predefined{__GNUC__} >= 3 && !(defined($predefined{__APPLE_CC__})
1678                                     && !defined($predefined{__clang__}))) {
1679   $cc_as_makedepend = 1;
1680 }
1681
1682 if ($strict_warnings)
1683         {
1684         my $wopt;
1685         die "ERROR --strict-warnings requires gcc or clang" unless defined($predefined{__GNUC__});
1686         foreach $wopt (split /\s+/, $gcc_devteam_warn)
1687                 {
1688                 $cflags .= " $wopt" unless ($cflags =~ /(^|\s)$wopt(\s|$)/)
1689                 }
1690         if (defined($predefined{__clang__}))
1691                 {
1692                 foreach $wopt (split /\s+/, $clang_devteam_warn)
1693                         {
1694                         $cflags .= " $wopt" unless ($cflags =~ /(^|\s)$wopt(\s|$)/)
1695                         }
1696                 }
1697         }
1698
1699 open(IN,'<Makefile.org') || die "unable to read Makefile.org:$!\n";
1700 unlink("$Makefile.new") || die "unable to remove old $Makefile.new:$!\n" if -e "$Makefile.new";
1701 open(OUT,">$Makefile.new") || die "unable to create $Makefile.new:$!\n";
1702 print OUT "### Generated automatically from Makefile.org by Configure.\n\n";
1703 my $sdirs=0;
1704 while (<IN>)
1705         {
1706         chomp;
1707         $sdirs = 1 if /^SDIRS=/;
1708         if ($sdirs) {
1709                 my $dir;
1710                 foreach $dir (@skip) {
1711                         s/(\s)$dir /$1/;
1712                         s/\s$dir$//;
1713                         }
1714                 }
1715         $sdirs = 0 unless /\\$/;
1716         s/engines // if (/^DIRS=/ && $disabled{"engine"});
1717         s/ccgost// if (/^ENGDIRS=/ && $disabled{"gost"});
1718         s/^VERSION=.*/VERSION=$version/;
1719         s/^MAJOR=.*/MAJOR=$major/;
1720         s/^MINOR=.*/MINOR=$minor/;
1721         s/^SHLIB_VERSION_NUMBER=.*/SHLIB_VERSION_NUMBER=$shlib_version_number/;
1722         s/^SHLIB_VERSION_HISTORY=.*/SHLIB_VERSION_HISTORY=$shlib_version_history/;
1723         s/^SHLIB_MAJOR=.*/SHLIB_MAJOR=$shlib_major/;
1724         s/^SHLIB_MINOR=.*/SHLIB_MINOR=$shlib_minor/;
1725         s/^SHLIB_EXT=.*/SHLIB_EXT=$shared_extension/;
1726         s/^INSTALLTOP=.*$/INSTALLTOP=$prefix/;
1727         s/^MULTILIB=.*$/MULTILIB=$multilib/;
1728         s/^OPENSSLDIR=.*$/OPENSSLDIR=$openssldir/;
1729         s/^LIBDIR=.*$/LIBDIR=$libdir/;
1730         s/^INSTALL_PREFIX=.*$/INSTALL_PREFIX=$install_prefix/;
1731         s/^PLATFORM=.*$/PLATFORM=$target/;
1732         s/^OPTIONS=.*$/OPTIONS=$options/;
1733         s/^CONFIGURE_ARGS=.*$/CONFIGURE_ARGS=$argvstring/;
1734         if ($cross_compile_prefix)
1735                 {
1736                 s/^CC=.*$/CROSS_COMPILE= $cross_compile_prefix\nCC= \$\(CROSS_COMPILE\)$cc/;
1737                 s/^AR=\s*/AR= \$\(CROSS_COMPILE\)/;
1738                 s/^NM=\s*/NM= \$\(CROSS_COMPILE\)/;
1739                 s/^RANLIB=\s*/RANLIB= \$\(CROSS_COMPILE\)/;
1740                 s/^RC=\s*/RC= \$\(CROSS_COMPILE\)/;
1741                 s/^MAKEDEPPROG=.*$/MAKEDEPPROG= \$\(CROSS_COMPILE\)$cc/ if $cc_as_makedepend;
1742                 }
1743         else    {
1744                 s/^CC=.*$/CC= $cc/;
1745                 s/^AR=\s*ar/AR= $ar/;
1746                 s/^RANLIB=.*/RANLIB= $ranlib/;
1747                 s/^RC=.*/RC= $windres/;
1748                 s/^MAKEDEPPROG=.*$/MAKEDEPPROG= $cc/ if $cc_as_makedepend;
1749                 }
1750         s/^CFLAG=.*$/CFLAG= $cflags/;
1751         s/^DEPFLAG=.*$/DEPFLAG=$depflags/;
1752         s/^PEX_LIBS=.*$/PEX_LIBS= $prelflags/;
1753         s/^EX_LIBS=.*$/EX_LIBS= $lflags/;
1754         s/^EXE_EXT=.*$/EXE_EXT= $exe_ext/;
1755         s/^CPUID_OBJ=.*$/CPUID_OBJ= $cpuid_obj/;
1756         s/^BN_ASM=.*$/BN_ASM= $bn_obj/;
1757         s/^EC_ASM=.*$/EC_ASM= $ec_obj/;
1758         s/^DES_ENC=.*$/DES_ENC= $des_obj/;
1759         s/^AES_ENC=.*$/AES_ENC= $aes_obj/;
1760         s/^BF_ENC=.*$/BF_ENC= $bf_obj/;
1761         s/^CAST_ENC=.*$/CAST_ENC= $cast_obj/;
1762         s/^RC4_ENC=.*$/RC4_ENC= $rc4_obj/;
1763         s/^RC5_ENC=.*$/RC5_ENC= $rc5_obj/;
1764         s/^MD5_ASM_OBJ=.*$/MD5_ASM_OBJ= $md5_obj/;
1765         s/^SHA1_ASM_OBJ=.*$/SHA1_ASM_OBJ= $sha1_obj/;
1766         s/^RMD160_ASM_OBJ=.*$/RMD160_ASM_OBJ= $rmd160_obj/;
1767         s/^WP_ASM_OBJ=.*$/WP_ASM_OBJ= $wp_obj/;
1768         s/^CMLL_ENC=.*$/CMLL_ENC= $cmll_obj/;
1769         s/^MODES_ASM_OBJ.=*$/MODES_ASM_OBJ= $modes_obj/;
1770         s/^ENGINES_ASM_OBJ.=*$/ENGINES_ASM_OBJ= $engines_obj/;
1771         s/^PERLASM_SCHEME=.*$/PERLASM_SCHEME= $perlasm_scheme/;
1772         s/^PROCESSOR=.*/PROCESSOR= $processor/;
1773         s/^ARFLAGS=.*/ARFLAGS= $arflags/;
1774         s/^PERL=.*/PERL= $perl/;
1775         s/^KRB5_INCLUDES=.*/KRB5_INCLUDES=$withargs{"krb5-include"}/;
1776         s/^LIBKRB5=.*/LIBKRB5=$withargs{"krb5-lib"}/;
1777         s/^LIBZLIB=.*/LIBZLIB=$withargs{"zlib-lib"}/;
1778         s/^ZLIB_INCLUDE=.*/ZLIB_INCLUDE=$withargs{"zlib-include"}/;
1779
1780         s/^FIPSDIR=.*/FIPSDIR=$fipsdir/;
1781         s/^FIPSLIBDIR=.*/FIPSLIBDIR=$fipslibdir/;
1782         s/^FIPSCANLIB=.*/FIPSCANLIB=libcrypto/ if $fips;
1783         s/^BASEADDR=.*/BASEADDR=$baseaddr/;
1784
1785         s/^SHLIB_TARGET=.*/SHLIB_TARGET=$shared_target/;
1786         s/^SHLIB_MARK=.*/SHLIB_MARK=$shared_mark/;
1787         s/^SHARED_LIBS=.*/SHARED_LIBS=\$(SHARED_CRYPTO) \$(SHARED_SSL)/ if (!$no_shared);
1788         if ($shared_extension ne "" && $shared_extension =~ /^\.s([ol])\.[^\.]*$/)
1789                 {
1790                 my $sotmp = $1;
1791                 s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.s$sotmp/;
1792                 }
1793         elsif ($shared_extension ne "" && $shared_extension =~ /^\.[^\.]*\.dylib$/)
1794                 {
1795                 s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.dylib/;
1796                 }
1797         elsif ($shared_extension ne "" && $shared_extension =~ /^\.s([ol])\.[^\.]*\.[^\.]*$/)
1798                 {
1799                 my $sotmp = $1;
1800                 s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.s$sotmp.\$(SHLIB_MAJOR) .s$sotmp/;
1801                 }
1802         elsif ($shared_extension ne "" && $shared_extension =~ /^\.[^\.]*\.[^\.]*\.dylib$/)
1803                 {
1804                 s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.\$(SHLIB_MAJOR).dylib .dylib/;
1805                 }
1806         s/^SHARED_LDFLAGS=.*/SHARED_LDFLAGS=$shared_ldflag/;
1807         print OUT $_."\n";
1808         }
1809 close(IN);
1810 close(OUT);
1811 if ((compare($Makefile, "$Makefile.new"))
1812         or file_newer('Configure', $Makefile)
1813         or file_newer('config', $Makefile)
1814         or file_newer('Makefile.org', $Makefile))
1815         {
1816         rename($Makefile,"$Makefile.bak") || die "unable to rename $Makefile\n" if -e $Makefile;
1817         rename("$Makefile.new",$Makefile) || die "unable to rename $Makefile.new\n";
1818         }
1819 else
1820         { unlink("$Makefile.new"); }
1821
1822 print "CC            =$cc\n";
1823 print "CFLAG         =$cflags\n";
1824 print "EX_LIBS       =$lflags\n";
1825 print "CPUID_OBJ     =$cpuid_obj\n";
1826 print "BN_ASM        =$bn_obj\n";
1827 print "EC_ASM        =$ec_obj\n";
1828 print "DES_ENC       =$des_obj\n";
1829 print "AES_ENC       =$aes_obj\n";
1830 print "BF_ENC        =$bf_obj\n";
1831 print "CAST_ENC      =$cast_obj\n";
1832 print "RC4_ENC       =$rc4_obj\n";
1833 print "RC5_ENC       =$rc5_obj\n";
1834 print "MD5_OBJ_ASM   =$md5_obj\n";
1835 print "SHA1_OBJ_ASM  =$sha1_obj\n";
1836 print "RMD160_OBJ_ASM=$rmd160_obj\n";
1837 print "CMLL_ENC      =$cmll_obj\n";
1838 print "MODES_OBJ     =$modes_obj\n";
1839 print "ENGINES_OBJ   =$engines_obj\n";
1840 print "PROCESSOR     =$processor\n";
1841 print "RANLIB        =$ranlib\n";
1842 print "ARFLAGS       =$arflags\n";
1843 print "PERL          =$perl\n";
1844 print "KRB5_INCLUDES =",$withargs{"krb5-include"},"\n"
1845         if $withargs{"krb5-include"} ne "";
1846
1847 my $des_ptr=0;
1848 my $des_risc1=0;
1849 my $des_risc2=0;
1850 my $des_unroll=0;
1851 my $bn_ll=0;
1852 my $def_int=2;
1853 my $rc4_int=$def_int;
1854 my $md2_int=$def_int;
1855 my $idea_int=$def_int;
1856 my $rc2_int=$def_int;
1857 my $rc4_idx=0;
1858 my $rc4_chunk=0;
1859 my $bf_ptr=0;
1860 my @type=("char","short","int","long");
1861 my ($b64l,$b64,$b32,$b16,$b8)=(0,0,1,0,0);
1862 my $export_var_as_fn=0;
1863
1864 my $des_int;
1865
1866 foreach (sort split(/\s+/,$bn_ops))
1867         {
1868         $des_ptr=1 if /DES_PTR/;
1869         $des_risc1=1 if /DES_RISC1/;
1870         $des_risc2=1 if /DES_RISC2/;
1871         $des_unroll=1 if /DES_UNROLL/;
1872         $des_int=1 if /DES_INT/;
1873         $bn_ll=1 if /BN_LLONG/;
1874         $rc4_int=0 if /RC4_CHAR/;
1875         $rc4_int=3 if /RC4_LONG/;
1876         $rc4_idx=1 if /RC4_INDEX/;
1877         $rc4_chunk=1 if /RC4_CHUNK/;
1878         $rc4_chunk=2 if /RC4_CHUNK_LL/;
1879         $md2_int=0 if /MD2_CHAR/;
1880         $md2_int=3 if /MD2_LONG/;
1881         $idea_int=1 if /IDEA_SHORT/;
1882         $idea_int=3 if /IDEA_LONG/;
1883         $rc2_int=1 if /RC2_SHORT/;
1884         $rc2_int=3 if /RC2_LONG/;
1885         $bf_ptr=1 if $_ eq "BF_PTR";
1886         $bf_ptr=2 if $_ eq "BF_PTR2";
1887         ($b64l,$b64,$b32,$b16,$b8)=(0,1,0,0,0) if /SIXTY_FOUR_BIT/;
1888         ($b64l,$b64,$b32,$b16,$b8)=(1,0,0,0,0) if /SIXTY_FOUR_BIT_LONG/;
1889         ($b64l,$b64,$b32,$b16,$b8)=(0,0,1,0,0) if /THIRTY_TWO_BIT/;
1890         ($b64l,$b64,$b32,$b16,$b8)=(0,0,0,1,0) if /SIXTEEN_BIT/;
1891         ($b64l,$b64,$b32,$b16,$b8)=(0,0,0,0,1) if /EIGHT_BIT/;
1892         $export_var_as_fn=1 if /EXPORT_VAR_AS_FN/;
1893         }
1894
1895 open(IN,'<crypto/opensslconf.h.in') || die "unable to read crypto/opensslconf.h.in:$!\n";
1896 unlink("crypto/opensslconf.h.new") || die "unable to remove old crypto/opensslconf.h.new:$!\n" if -e "crypto/opensslconf.h.new";
1897 open(OUT,'>crypto/opensslconf.h.new') || die "unable to create crypto/opensslconf.h.new:$!\n";
1898 print OUT "/* opensslconf.h */\n";
1899 print OUT "/* WARNING: Generated automatically from opensslconf.h.in by Configure. */\n\n";
1900
1901 print OUT "#ifdef  __cplusplus\n";
1902 print OUT "extern \"C\" {\n";
1903 print OUT "#endif\n";
1904 print OUT "/* OpenSSL was configured with the following options: */\n";
1905 my $openssl_algorithm_defines_trans = $openssl_algorithm_defines;
1906 $openssl_experimental_defines =~ s/^\s*#\s*define\s+OPENSSL_NO_(.*)/#ifndef OPENSSL_EXPERIMENTAL_$1\n# ifndef OPENSSL_NO_$1\n#  define OPENSSL_NO_$1\n# endif\n#endif/mg;
1907 $openssl_algorithm_defines_trans =~ s/^\s*#\s*define\s+OPENSSL_(.*)/# if defined(OPENSSL_$1) \&\& !defined($1)\n#  define $1\n# endif/mg;
1908 $openssl_algorithm_defines =~ s/^\s*#\s*define\s+(.*)/#ifndef $1\n# define $1\n#endif/mg;
1909 $openssl_algorithm_defines = "   /* no ciphers excluded */\n" if $openssl_algorithm_defines eq "";
1910 $openssl_thread_defines =~ s/^\s*#\s*define\s+(.*)/#ifndef $1\n# define $1\n#endif/mg;
1911 $openssl_sys_defines =~ s/^\s*#\s*define\s+(.*)/#ifndef $1\n# define $1\n#endif/mg;
1912 $openssl_other_defines =~ s/^\s*#\s*define\s+(.*)/#ifndef $1\n# define $1\n#endif/mg;
1913 print OUT $openssl_sys_defines;
1914 print OUT "#ifndef OPENSSL_DOING_MAKEDEPEND\n\n";
1915 print OUT $openssl_experimental_defines;
1916 print OUT "\n";
1917 print OUT $openssl_algorithm_defines;
1918 print OUT "\n#endif /* OPENSSL_DOING_MAKEDEPEND */\n\n";
1919 print OUT $openssl_thread_defines;
1920 print OUT $openssl_other_defines,"\n";
1921
1922 print OUT "/* The OPENSSL_NO_* macros are also defined as NO_* if the application\n";
1923 print OUT "   asks for it.  This is a transient feature that is provided for those\n";
1924 print OUT "   who haven't had the time to do the appropriate changes in their\n";
1925 print OUT "   applications.  */\n";
1926 print OUT "#ifdef OPENSSL_ALGORITHM_DEFINES\n";
1927 print OUT $openssl_algorithm_defines_trans;
1928 print OUT "#endif\n\n";
1929
1930 print OUT "#define OPENSSL_CPUID_OBJ\n\n" if ($cpuid_obj ne "mem_clr.o");
1931
1932 while (<IN>)
1933         {
1934         if      (/^#define\s+OPENSSLDIR/)
1935                 {
1936                 my $foo = $openssldir;
1937                 $foo =~ s/\\/\\\\/g;
1938                 print OUT "#define OPENSSLDIR \"$foo\"\n";
1939                 }
1940         elsif   (/^#define\s+ENGINESDIR/)
1941                 {
1942                 my $foo = "$prefix/$libdir/engines";
1943                 $foo =~ s/\\/\\\\/g;
1944                 print OUT "#define ENGINESDIR \"$foo\"\n";
1945                 }
1946         elsif   (/^#((define)|(undef))\s+OPENSSL_EXPORT_VAR_AS_FUNCTION/)
1947                 { printf OUT "#undef OPENSSL_EXPORT_VAR_AS_FUNCTION\n"
1948                         if $export_var_as_fn;
1949                   printf OUT "#%s OPENSSL_EXPORT_VAR_AS_FUNCTION\n",
1950                         ($export_var_as_fn)?"define":"undef"; }
1951         elsif   (/^#define\s+OPENSSL_UNISTD/)
1952                 {
1953                 $unistd = "<unistd.h>" if $unistd eq "";
1954                 print OUT "#define OPENSSL_UNISTD $unistd\n";
1955                 }
1956         elsif   (/^#((define)|(undef))\s+SIXTY_FOUR_BIT_LONG/)
1957                 { printf OUT "#%s SIXTY_FOUR_BIT_LONG\n",($b64l)?"define":"undef"; }
1958         elsif   (/^#((define)|(undef))\s+SIXTY_FOUR_BIT/)
1959                 { printf OUT "#%s SIXTY_FOUR_BIT\n",($b64)?"define":"undef"; }
1960         elsif   (/^#((define)|(undef))\s+THIRTY_TWO_BIT/)
1961                 { printf OUT "#%s THIRTY_TWO_BIT\n",($b32)?"define":"undef"; }
1962         elsif   (/^#((define)|(undef))\s+SIXTEEN_BIT/)
1963                 { printf OUT "#%s SIXTEEN_BIT\n",($b16)?"define":"undef"; }
1964         elsif   (/^#((define)|(undef))\s+EIGHT_BIT/)
1965                 { printf OUT "#%s EIGHT_BIT\n",($b8)?"define":"undef"; }
1966         elsif   (/^#((define)|(undef))\s+BN_LLONG\s*$/)
1967                 { printf OUT "#%s BN_LLONG\n",($bn_ll)?"define":"undef"; }
1968         elsif   (/^\#define\s+DES_LONG\s+.*/)
1969                 { printf OUT "#define DES_LONG unsigned %s\n",
1970                         ($des_int)?'int':'long'; }
1971         elsif   (/^\#(define|undef)\s+DES_PTR/)
1972                 { printf OUT "#%s DES_PTR\n",($des_ptr)?'define':'undef'; }
1973         elsif   (/^\#(define|undef)\s+DES_RISC1/)
1974                 { printf OUT "#%s DES_RISC1\n",($des_risc1)?'define':'undef'; }
1975         elsif   (/^\#(define|undef)\s+DES_RISC2/)
1976                 { printf OUT "#%s DES_RISC2\n",($des_risc2)?'define':'undef'; }
1977         elsif   (/^\#(define|undef)\s+DES_UNROLL/)
1978                 { printf OUT "#%s DES_UNROLL\n",($des_unroll)?'define':'undef'; }
1979         elsif   (/^#define\s+RC4_INT\s/)
1980                 { printf OUT "#define RC4_INT unsigned %s\n",$type[$rc4_int]; }
1981         elsif   (/^#undef\s+RC4_CHUNK/)
1982                 {
1983                 printf OUT "#undef RC4_CHUNK\n" if $rc4_chunk==0;
1984                 printf OUT "#define RC4_CHUNK unsigned long\n" if $rc4_chunk==1;
1985                 printf OUT "#define RC4_CHUNK unsigned long long\n" if $rc4_chunk==2;
1986                 }
1987         elsif   (/^#((define)|(undef))\s+RC4_INDEX/)
1988                 { printf OUT "#%s RC4_INDEX\n",($rc4_idx)?"define":"undef"; }
1989         elsif (/^#(define|undef)\s+I386_ONLY/)
1990                 { printf OUT "#%s I386_ONLY\n", ($processor eq "386")?
1991                         "define":"undef"; }
1992         elsif   (/^#define\s+MD2_INT\s/)
1993                 { printf OUT "#define MD2_INT unsigned %s\n",$type[$md2_int]; }
1994         elsif   (/^#define\s+IDEA_INT\s/)
1995                 {printf OUT "#define IDEA_INT unsigned %s\n",$type[$idea_int];}
1996         elsif   (/^#define\s+RC2_INT\s/)
1997                 {printf OUT "#define RC2_INT unsigned %s\n",$type[$rc2_int];}
1998         elsif (/^#(define|undef)\s+BF_PTR/)
1999                 {
2000                 printf OUT "#undef BF_PTR\n" if $bf_ptr == 0;
2001                 printf OUT "#define BF_PTR\n" if $bf_ptr == 1;
2002                 printf OUT "#define BF_PTR2\n" if $bf_ptr == 2;
2003                 }
2004         else
2005                 { print OUT $_; }
2006         }
2007 close(IN);
2008 print OUT "#ifdef  __cplusplus\n";
2009 print OUT "}\n";
2010 print OUT "#endif\n";
2011 close(OUT);
2012 if (compare("crypto/opensslconf.h.new","crypto/opensslconf.h"))
2013         {
2014         rename("crypto/opensslconf.h","crypto/opensslconf.h.bak") || die "unable to rename crypto/opensslconf.h\n" if -e "crypto/opensslconf.h";
2015         rename("crypto/opensslconf.h.new","crypto/opensslconf.h") || die "unable to rename crypto/opensslconf.h.new\n";
2016         }
2017 else
2018         { unlink("crypto/opensslconf.h.new"); }
2019
2020 # Fix the date
2021
2022 print "SIXTY_FOUR_BIT_LONG mode\n" if $b64l;
2023 print "SIXTY_FOUR_BIT mode\n" if $b64;
2024 print "THIRTY_TWO_BIT mode\n" if $b32;
2025 print "SIXTEEN_BIT mode\n" if $b16;
2026 print "EIGHT_BIT mode\n" if $b8;
2027 print "DES_PTR used\n" if $des_ptr;
2028 print "DES_RISC1 used\n" if $des_risc1;
2029 print "DES_RISC2 used\n" if $des_risc2;
2030 print "DES_UNROLL used\n" if $des_unroll;
2031 print "DES_INT used\n" if $des_int;
2032 print "BN_LLONG mode\n" if $bn_ll;
2033 print "RC4 uses u$type[$rc4_int]\n" if $rc4_int != $def_int;
2034 print "RC4_INDEX mode\n" if $rc4_idx;
2035 print "RC4_CHUNK is undefined\n" if $rc4_chunk==0;
2036 print "RC4_CHUNK is unsigned long\n" if $rc4_chunk==1;
2037 print "RC4_CHUNK is unsigned long long\n" if $rc4_chunk==2;
2038 print "MD2 uses u$type[$md2_int]\n" if $md2_int != $def_int;
2039 print "IDEA uses u$type[$idea_int]\n" if $idea_int != $def_int;
2040 print "RC2 uses u$type[$rc2_int]\n" if $rc2_int != $def_int;
2041 print "BF_PTR used\n" if $bf_ptr == 1;
2042 print "BF_PTR2 used\n" if $bf_ptr == 2;
2043
2044 if($IsMK1MF) {
2045         open (OUT,">crypto/buildinf.h") || die "Can't open buildinf.h";
2046         printf OUT <<EOF;
2047 #ifndef MK1MF_BUILD
2048   /* auto-generated by Configure for crypto/cversion.c:
2049    * for Unix builds, crypto/Makefile.ssl generates functional definitions;
2050    * Windows builds (and other mk1mf builds) compile cversion.c with
2051    * -DMK1MF_BUILD and use definitions added to this file by util/mk1mf.pl. */
2052   #error "Windows builds (PLATFORM=$target) use mk1mf.pl-created Makefiles"
2053 #endif
2054 EOF
2055         close(OUT);
2056 } else {
2057         my $make_command = "$make PERL=\'$perl\'";
2058         my @make_targets = ();
2059         push @make_targets, "links" if $symlink;
2060         push @make_targets, "depend" if $depflags ne $default_depflags && $make_depend;
2061         push @make_targets, "gentests" if $symlink;
2062         foreach my $make_target (@make_targets) {
2063             (system "$make_command $make_target") == 0 or exit $?;
2064         }
2065         if ( $perl =~ m@^/@) {
2066             &dofile("tools/c_rehash",$perl,'^#!/', '#!%s','^my \$dir;$', 'my $dir = "' . $openssldir . '";', '^my \$prefix;$', 'my $prefix = "' . $prefix . '";');
2067             &dofile("apps/CA.pl",$perl,'^#!/', '#!%s');
2068         } else {
2069             # No path for Perl known ...
2070             &dofile("tools/c_rehash",'/usr/local/bin/perl','^#!/', '#!%s','^my \$dir;$', 'my $dir = "' . $openssldir . '";',  '^my \$prefix;$', 'my $prefix = "' . $prefix . '";');
2071             &dofile("apps/CA.pl",'/usr/local/bin/perl','^#!/', '#!%s');
2072         }
2073         if ($depflags ne $default_depflags && !$make_depend) {
2074             $warn_make_depend++;
2075         }
2076 }
2077
2078 # create the ms/version32.rc file if needed
2079 if ($IsMK1MF && ($target !~ /^netware/)) {
2080         my ($v1, $v2, $v3, $v4);
2081         if ($version_num =~ /(^[0-9a-f]{1})([0-9a-f]{2})([0-9a-f]{2})([0-9a-f]{2})/i) {
2082                 $v1=hex $1;
2083                 $v2=hex $2;
2084                 $v3=hex $3;
2085                 $v4=hex $4;
2086         }
2087         open (OUT,">ms/version32.rc") || die "Can't open ms/version32.rc";
2088         print OUT <<EOF;
2089 #include <winver.h>
2090
2091 LANGUAGE 0x09,0x01
2092
2093 1 VERSIONINFO
2094   FILEVERSION $v1,$v2,$v3,$v4
2095   PRODUCTVERSION $v1,$v2,$v3,$v4
2096   FILEFLAGSMASK 0x3fL
2097 #ifdef _DEBUG
2098   FILEFLAGS 0x01L
2099 #else
2100   FILEFLAGS 0x00L
2101 #endif
2102   FILEOS VOS__WINDOWS32
2103   FILETYPE VFT_DLL
2104   FILESUBTYPE 0x0L
2105 BEGIN
2106     BLOCK "StringFileInfo"
2107     BEGIN
2108         BLOCK "040904b0"
2109         BEGIN
2110             // Required:
2111             VALUE "CompanyName", "The OpenSSL Project, http://www.openssl.org/\\0"
2112             VALUE "FileDescription", "OpenSSL Shared Library\\0"
2113             VALUE "FileVersion", "$version\\0"
2114 #if defined(CRYPTO)
2115             VALUE "InternalName", "libeay32\\0"
2116             VALUE "OriginalFilename", "libeay32.dll\\0"
2117 #elif defined(SSL)
2118             VALUE "InternalName", "ssleay32\\0"
2119             VALUE "OriginalFilename", "ssleay32.dll\\0"
2120 #endif
2121             VALUE "ProductName", "The OpenSSL Toolkit\\0"
2122             VALUE "ProductVersion", "$version\\0"
2123             // Optional:
2124             //VALUE "Comments", "\\0"
2125             VALUE "LegalCopyright", "Copyright  © 1998-2005 The OpenSSL Project. Copyright © 1995-1998 Eric A. Young, Tim J. Hudson. All rights reserved.\\0"
2126             //VALUE "LegalTrademarks", "\\0"
2127             //VALUE "PrivateBuild", "\\0"
2128             //VALUE "SpecialBuild", "\\0"
2129         END
2130     END
2131     BLOCK "VarFileInfo"
2132     BEGIN
2133         VALUE "Translation", 0x409, 0x4b0
2134     END
2135 END
2136 EOF
2137         close(OUT);
2138   }
2139
2140 print <<EOF;
2141
2142 Configured for $target.
2143 EOF
2144
2145 print <<\EOF if (!$no_threads && !$threads);
2146
2147 The library could not be configured for supporting multi-threaded
2148 applications as the compiler options required on this system are not known.
2149 See file INSTALL for details if you need multi-threading.
2150 EOF
2151
2152 print <<\EOF if ($no_shared_warn);
2153
2154 You gave the option 'shared', which is not supported on this platform, so
2155 we will pretend you gave the option 'no-shared'.  If you know how to implement
2156 shared libraries, please let us know (but please first make sure you have
2157 tried with a current version of OpenSSL).
2158 EOF
2159
2160 print <<EOF if ($warn_make_depend);
2161
2162 *** Because of configuration changes, you MUST do the following before
2163 *** building:
2164
2165         make depend
2166 EOF
2167
2168 exit(0);
2169
2170 sub usage
2171         {
2172         print STDERR $usage;
2173         print STDERR "\npick os/compiler from:\n";
2174         my $j=0;
2175         my $i;
2176         my $k=0;
2177         foreach $i (sort keys %table)
2178                 {
2179                 next if $i =~ /^debug/;
2180                 $k += length($i) + 1;
2181                 if ($k > 78)
2182                         {
2183                         print STDERR "\n";
2184                         $k=length($i);
2185                         }
2186                 print STDERR $i . " ";
2187                 }
2188         foreach $i (sort keys %table)
2189                 {
2190                 next if $i !~ /^debug/;
2191                 $k += length($i) + 1;
2192                 if ($k > 78)
2193                         {
2194                         print STDERR "\n";
2195                         $k=length($i);
2196                         }
2197                 print STDERR $i . " ";
2198                 }
2199         print STDERR "\n\nNOTE: If in doubt, on Unix-ish systems use './config'.\n";
2200         exit(1);
2201         }
2202
2203 sub which
2204         {
2205         my($name)=@_;
2206         my $path;
2207         foreach $path (split /:/, $ENV{PATH})
2208                 {
2209                 if (-f "$path/$name$exe_ext" and -x _)
2210                         {
2211                         return "$path/$name$exe_ext" unless ($name eq "perl" and
2212                          system("$path/$name$exe_ext -e " . '\'exit($]<5.0);\''));
2213                         }
2214                 }
2215         }
2216
2217 sub dofile
2218         {
2219         my $f; my $p; my %m; my @a; my $k; my $ff;
2220         ($f,$p,%m)=@_;
2221
2222         open(IN,"<$f.in") || open(IN,"<$f") || die "unable to open $f:$!\n";
2223         @a=<IN>;
2224         close(IN);
2225         foreach $k (keys %m)
2226                 {
2227                 grep(/$k/ && ($_=sprintf($m{$k}."\n",$p)),@a);
2228                 }
2229         open(OUT,">$f.new") || die "unable to open $f.new:$!\n";
2230         print OUT @a;
2231         close(OUT);
2232         rename($f,"$f.bak") || die "unable to rename $f\n" if -e $f;
2233         rename("$f.new",$f) || die "unable to rename $f.new\n";
2234         }
2235
2236 sub print_table_entry
2237         {
2238         my $target = shift;
2239
2240         my ($cc, $cflags, $unistd, $thread_cflag, $sys_id, $lflags,
2241             $bn_ops, $cpuid_obj, $bn_obj, $ec_obj, $des_obj, $aes_obj, $bf_obj,
2242             $md5_obj, $sha1_obj, $cast_obj, $rc4_obj, $rmd160_obj,
2243             $rc5_obj, $wp_obj, $cmll_obj, $modes_obj, $engines_obj,
2244             $perlasm_scheme, $dso_scheme, $shared_target, $shared_cflag,
2245             $shared_ldflag, $shared_extension, $ranlib, $arflags, $multilib)=
2246         split(/\s*:\s*/,$table{$target} . ":" x 30 , -1);
2247
2248         print <<EOF
2249
2250 *** $target
2251 \$cc           = $cc
2252 \$cflags       = $cflags
2253 \$unistd       = $unistd
2254 \$thread_cflag = $thread_cflag
2255 \$sys_id       = $sys_id
2256 \$lflags       = $lflags
2257 \$bn_ops       = $bn_ops
2258 \$cpuid_obj    = $cpuid_obj
2259 \$bn_obj       = $bn_obj
2260 \$ec_obj       = $ec_obj
2261 \$des_obj      = $des_obj
2262 \$aes_obj      = $aes_obj
2263 \$bf_obj       = $bf_obj
2264 \$md5_obj      = $md5_obj
2265 \$sha1_obj     = $sha1_obj
2266 \$cast_obj     = $cast_obj
2267 \$rc4_obj      = $rc4_obj
2268 \$rmd160_obj   = $rmd160_obj
2269 \$rc5_obj      = $rc5_obj
2270 \$wp_obj       = $wp_obj
2271 \$cmll_obj     = $cmll_obj
2272 \$modes_obj    = $modes_obj
2273 \$engines_obj  = $engines_obj
2274 \$perlasm_scheme = $perlasm_scheme
2275 \$dso_scheme   = $dso_scheme
2276 \$shared_target= $shared_target
2277 \$shared_cflag = $shared_cflag
2278 \$shared_ldflag = $shared_ldflag
2279 \$shared_extension = $shared_extension
2280 \$ranlib       = $ranlib
2281 \$arflags      = $arflags
2282 \$multilib     = $multilib
2283 EOF
2284         }
2285
2286 sub test_sanity
2287         {
2288         my $errorcnt = 0;
2289
2290         print STDERR "=" x 70, "\n";
2291         print STDERR "=== SANITY TESTING!\n";
2292         print STDERR "=== No configuration will be done, all other arguments will be ignored!\n";
2293         print STDERR "=" x 70, "\n";
2294
2295         foreach $target (sort keys %table)
2296                 {
2297                 @fields = split(/\s*:\s*/,$table{$target} . ":" x 30 , -1);
2298
2299                 if ($fields[$idx_dso_scheme-1] =~ /^(beos|dl|dlfcn|win32|vms)$/)
2300                         {
2301                         $errorcnt++;
2302                         print STDERR "SANITY ERROR: '$target' has the dso_scheme [$idx_dso_scheme] values\n";
2303                         print STDERR "              in the previous field\n";
2304                         }
2305                 elsif ($fields[$idx_dso_scheme+1] =~ /^(beos|dl|dlfcn|win32|vms)$/)
2306                         {
2307                         $errorcnt++;
2308                         print STDERR "SANITY ERROR: '$target' has the dso_scheme [$idx_dso_scheme] values\n";
2309                         print STDERR "              in the following field\n";
2310                         }
2311                 elsif ($fields[$idx_dso_scheme] !~ /^(beos|dl|dlfcn|win32|vms|)$/)
2312                         {
2313                         $errorcnt++;
2314                         print STDERR "SANITY ERROR: '$target' has the dso_scheme [$idx_dso_scheme] field = ",$fields[$idx_dso_scheme],"\n";
2315                         print STDERR "              valid values are 'beos', 'dl', 'dlfcn', 'win32' and 'vms'\n";
2316                         }
2317                 }
2318         print STDERR "No sanity errors detected!\n" if $errorcnt == 0;
2319         return $errorcnt;
2320         }
2321
2322 sub file_newer
2323         {
2324         my ($file1, $file2) = @_;
2325         return (stat($file1))[9] > (stat($file2))[9]
2326         }