-$ CONFIG_LOGICALS := NO_ASM,NO_RSA,NO_DSA,NO_DH,NO_MD2,NO_MD5,NO_RIPEMD,-
- NO_SHA,NO_SHA0,NO_SHA1,NO_DES/NO_MDC2;NO_MDC2,NO_RC2,NO_RC4,NO_RC5,-
- NO_IDEA,NO_BF,NO_CAST,NO_HMAC,NO_SSL2
+$
+$!
+$! Defined the full SDIRS here. It will be pruned depending on configuration.
+$! This is an exact copy of what's found in Makefile.org, with spaces replaced
+$! with commas.
+$!
+$ SDIRS := -
+ objects,-
+ md2,md4,md5,sha,mdc2,hmac,ripemd,whrlpool,-
+ des,aes,rc2,rc4,rc5,idea,bf,cast,camellia,seed,modes,-
+ bn,ec,rsa,dsa,ecdsa,dh,ecdh,dso,engine,-
+ buffer,bio,stack,lhash,rand,err,-
+ evp,asn1,pem,x509,x509v3,conf,txt_db,pkcs7,pkcs12,comp,ocsp,ui,-
+ cms,pqueue,ts,jpake,srp,store,cmac
+$
+$! One of the best way to figure out what the list should be is to do
+$! the following on a Unix system:
+$! grep OPENSSL_NO_ crypto/include/internal/*.h crypto/*/*.h ssl/*.h engines/*.h engines/*/*.h|grep ':# *if'|sed -e 's/^.*def //'|sort|uniq
+$! For that reason, the list will also always end up in alphabetical order
+$ CONFIG_LOGICALS := AES,-
+ ASM,INLINE_ASM,-
+ BF,-
+ CAMELLIA,-
+ CAST,-
+ CMS,-
+ COMP,-
+ DEPRECATED,-
+ DES,-
+ DGRAM,-
+ DH,-
+ DSA,-
+ EC,-
+ EC2M,-
+ ECDH,-
+ ECDSA,-
+ EC_NISTP_64_GCC_128,-
+ ENGINE,-
+ ERR,-
+ GMP,-
+ GOST,-
+ HEARTBEATS,-
+ HMAC,-
+ IDEA,-
+ JPAKE,-
+ MD2,-
+ MD4,-
+ MD5,-
+ MDC2,-
+ NEXTPROTONEG,-
+ OCB,-
+ OCSP,-
+ PSK,-
+ RC2,-
+ RC4,-
+ RC5,-
+ RMD160,-
+ RSA,-
+ SCTP,-
+ SEED,-
+ SOCK,-
+ SRP,-
+ SRTP,-
+ SSL3_METHOD,-
+ SSL_TRACE,-
+ STATIC_ENGINE,-
+ STDIO,-
+ STORE,-
+ UNIT_TEST,-
+ WHIRLPOOL
+$ CONFIG_EXPERIMENTAL := JPAKE,-
+ STORE
+$! The following rules, which dictate how some algorithm choices affect
+$! others, are picked from Configure.
+$! Quick syntax:
+$! list = item[ ; list]
+$! item = algos / dependents
+$! algos = algo [, algos]
+$! dependents = dependent [, dependents]
+$! When a list of algos is specified in one item, it means that they must
+$! all be disabled for the rule to apply.
+$! When a list of dependents is specified in one item, it means that they
+$! will all be disabled if the rule applies.
+$! Rules are checked sequentially. If a rule disables an algorithm, it will
+$! affect all following rules that depend on that algorithm being disabled.
+$! To force something to be enabled or disabled, have no algorithms in the
+$! algos part.
+$ CONFIG_DISABLE_RULES := RIJNDAEL/AES;-
+ RMD160/RIPEMD;-
+ DES/MDC2;-
+ EC/ECDSA,ECDH;-
+ MD5/SSL3,TLS1;-
+ SHA/SSL3,TLS1;-
+ RSA,DSA/SSL3,TLS1;-
+ DH/SSL3,TLS1;-
+ EC/GOST;-
+ DSA/GOST;-
+ DH/GOST;-
+ /STATIC_ENGINE;-
+ /DEPRECATED;-
+ /EC_NISTP_64_GCC_128;-
+ /GMP;-
+ /MD2;-
+ /RC5;-
+ /RFC3779;-
+ /SCTP;-
+ /SSL_TRACE;-
+ /UNIT_TEST
+$ CONFIG_ENABLE_RULES := ZLIB_DYNAMIC/ZLIB;-
+ /THREADS
+$
+$! Architecture specific rule addtions
+$ IF ARCH .EQS. "VAX"
+$ THEN
+$ ! Disable algorithms that require 64-bit integers in C
+$ CONFIG_DISABLE_RULES = CONFIG_DISABLE_RULES + -
+ ";/GOST" + -
+ ";/WHIRLPOOL"
+$ ENDIF
+$
+$! Keep track of things to remove from SDIRS, have the items surrounded
+$! with commas
+$ SKIP_SDIRS = ","
+$