This is the start of the BETA21 branch.

It includes the --topology feature, and
TAP-Win32 driver changes to allow
non-admin access.



git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@580 e7ae566f-a301-0410-adde-c780ea21d3b5

1 files changed, 636 insertions, 0 deletions

diff --git a/configure.ac b/configure.ac
new file mode 100644
index 0000000..2b09280
--- /dev/null
+++ b/configure.ac
@@ -0,0 +1,636 @@
+dnl  OpenVPN -- An application to securely tunnel IP networks
+dnl             over a single UDP port, with support for SSL/TLS-based
+dnl             session authentication and key exchange,
+dnl             packet encryption, packet authentication, and
+dnl             packet compression.
+dnl
+dnl  Copyright (C) 2002-2005 OpenVPN Solutions LLC <info@openvpn.net>
+dnl
+dnl  This program is free software; you can redistribute it and/or modify
+dnl  it under the terms of the GNU General Public License as published by
+dnl  the Free Software Foundation; either version 2 of the License, or
+dnl  (at your option) any later version.
+dnl
+dnl  This program is distributed in the hope that it will be useful,
+dnl  but WITHOUT ANY WARRANTY; without even the implied warranty of
+dnl  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+dnl  GNU General Public License for more details.
+dnl
+dnl  You should have received a copy of the GNU General Public License
+dnl  along with this program (see the file COPYING included with this
+dnl  distribution); if not, write to the Free Software Foundation, Inc.,
+dnl  59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
+
+dnl Process this file with autoconf to produce a configure script.
+
+AC_PREREQ(2.50)
+
+AC_INIT([OpenVPN], [2.0.3_rc1], [openvpn-users@lists.sourceforge.net], [openvpn])
+AM_CONFIG_HEADER(config.h)
+AC_CONFIG_SRCDIR(syshead.h)
+
+AC_ARG_ENABLE(lzo,
+   [  --disable-lzo           Disable LZO compression support],
+   [LZO="$enableval"],
+   [LZO="yes"]
+)
+
+AC_ARG_ENABLE(crypto,
+   [  --disable-crypto        Disable OpenSSL crypto support],
+   [CRYPTO="$enableval"],
+   [CRYPTO="yes"]
+)
+
+AC_ARG_ENABLE(ssl,
+   [  --disable-ssl           Disable OpenSSL SSL support for TLS-based key exchange],
+   [SSL="$enableval"],
+   [SSL="yes"]
+)
+
+AC_ARG_ENABLE(multi,
+   [  --disable-multi         Disable client/server support (--mode server + client mode)],
+   [MULTI="$enableval"],
+   [MULTI="yes"]
+)
+
+AC_ARG_ENABLE(server,
+   [  --disable-server        Disable server support only (but retain client support)],
+   [MULTI_SERVER="$enableval"],
+   [MULTI_SERVER="yes"]
+)
+
+AC_ARG_ENABLE(plugins,
+   [  --disable-plugins       Disable plug-in support],
+   [PLUGINS="$enableval"],
+   [PLUGINS="yes"]
+)
+
+AC_ARG_ENABLE(management,
+   [  --disable-management    Disable management server support],
+   [MANAGEMENT="$enableval"],
+   [MANAGEMENT="yes"]
+)
+
+AC_ARG_ENABLE(socks,
+   [  --disable-socks         Disable Socks support],
+   [SOCKS="$enableval"],
+   [SOCKS="yes"]
+)
+
+AC_ARG_ENABLE(http,
+   [  --disable-http          Disable HTTP proxy support],
+   [HTTP_PROXY="$enableval"],
+   [HTTP_PROXY="yes"]
+)
+
+AC_ARG_ENABLE(fragment,
+   [  --disable-fragment      Disable internal fragmentation support (--fragment)],
+   [FRAGMENT="$enableval"],
+   [FRAGMENT="yes"]
+)
+
+AC_ARG_ENABLE(debug,
+   [  --disable-debug         Disable debugging support (disable gremlin and verb 7+ messages)],
+   [DEBUG="$enableval"],
+   [DEBUG="yes"]
+)
+
+AC_ARG_ENABLE(small,
+   [  --enable-small          Enable smaller executable size (disable OCC, usage message, and verb 4 parm list)],
+   [SMALL="$enableval"],
+   [SMALL="no"]
+)
+
+AC_ARG_ENABLE(pthread,
+   [  --enable-pthread        Enable pthread support (Experimental for OpenVPN 2.0)],
+   [PTHREAD="$enableval"],
+   [PTHREAD="no"]
+)
+
+AC_ARG_ENABLE(password-save,
+   [  --enable-password-save  Allow --askpass and --auth-user-pass passwords to be read from a file],
+   [PASSWORD_SAVE="$enableval"],
+   [PASSWORD_SAVE="no"]
+)
+
+AC_ARG_ENABLE(iproute2,
+   [  --enable-iproute2       Enable support for iproute2],
+   AC_DEFINE(CONFIG_FEATURE_IPROUTE, 1, [enable iproute2 support])   
+)
+
+AC_ARG_ENABLE(strict,
+   [  --enable-strict         Enable strict compiler warnings (debugging option)],
+   [STRICT="$enableval"],
+   [STRICT="no"]
+)
+
+AC_ARG_ENABLE(pedantic,
+   [  --enable-pedantic       Enable pedantic compiler warnings, will not generate a working executable (debugging option)],
+   [PEDANTIC="$enableval"],
+   [PEDANTIC="no"]
+)
+
+AC_ARG_ENABLE(profiling,
+   [  --enable-profiling      Enable profiling (debugging option)],
+   [PROFILE="$enableval"],
+   [PROFILE="no"]
+)
+
+AC_ARG_ENABLE(strict-options,
+   [  --enable-strict-options Enable strict options check between peers (debugging option)],
+   [STRICT_OPTIONS="$enableval"],
+   [STRICT_OPTIONS="no"]
+)
+
+AC_ARG_WITH(ssl-headers,
+   [  --with-ssl-headers=DIR  Crypto/SSL Include files location],
+   [CS_HDR_DIR="$withval"]
+   [CPPFLAGS="$CPPFLAGS -I$withval"] 
+)
+
+AC_ARG_WITH(ssl-lib,
+   [  --with-ssl-lib=DIR      Crypto/SSL Library location],
+   [LDFLAGS="$LDFLAGS -L$withval"] 
+)
+
+AC_ARG_WITH(lzo-headers,
+   [  --with-lzo-headers=DIR  LZO Include files location],
+   [LZO_HDR_DIR="$withval"]
+   [CPPFLAGS="$CPPFLAGS -I$withval"] 
+)
+
+AC_ARG_WITH(lzo-lib,
+   [  --with-lzo-lib=DIR      LZO Library location],
+   [LDFLAGS="$LDFLAGS -L$withval"] 
+)
+
+AC_ARG_WITH(ifconfig-path,
+   [  --with-ifconfig-path=PATH   Path to ifconfig tool],
+   [IFCONFIG="$withval"],
+   [AC_PATH_PROG([IFCONFIG], [ifconfig], [ifconfig], [$PATH:/usr/local/sbin:/usr/sbin:/sbin])]
+)
+AC_DEFINE_UNQUOTED(IFCONFIG_PATH, "$IFCONFIG", [Path to ifconfig tool])
+
+AC_ARG_WITH(iproute-path,
+   [  --with-iproute-path=PATH    Path to iproute tool],
+   [IPROUTE="$withval"],
+   [AC_PATH_PROG([IPROUTE], [ip], [ip], [$PATH:/usr/local/sbin:/usr/sbin:/sbin])]
+)
+AC_DEFINE_UNQUOTED(IPROUTE_PATH, "$IPROUTE", [Path to iproute tool])
+
+
+AC_ARG_WITH(route-path,
+   [  --with-route-path=PATH  Path to route tool],
+   [ROUTE="$withval"],
+   [AC_PATH_PROG([ROUTE], [route], [route], [$PATH:/usr/local/sbin:/usr/sbin:/sbin])]
+)
+AC_DEFINE_UNQUOTED(ROUTE_PATH, "$ROUTE", [Path to route tool])
+
+AC_ARG_WITH(mem-check,
+   [  --with-mem-check=TYPE  Build with debug memory checking, TYPE = dmalloc or valgrind],
+   [MEMCHECK="$withval"]
+)
+
+dnl Guess host type.
+AC_CANONICAL_HOST
+AC_CANONICAL_SYSTEM
+AM_INIT_AUTOMAKE(openvpn, [$PACKAGE_VERSION])
+
+dnl fix search path, to allow compilers to find syshead.h
+CPPFLAGS="$CPPFLAGS -I${srcdir}"
+
+dnl check target OS
+openvpn_target=$target
+if test $target_alias; then
+  openvpn_target=$target_alias
+fi
+AC_DEFINE_UNQUOTED(TARGET_ALIAS, "$openvpn_target", [A string representing our target])
+case "$target" in
+*linux*)
+	AC_DEFINE(TARGET_LINUX, 1, [Are we running on Linux?])
+	dnl RH9 SSL headers workaround
+        if test -z $CS_HDR_DIR && test "$CRYPTO" = "yes"; then
+           CPPFLAGS="$CPPFLAGS $(pkg-config --cflags openssl 2>/dev/null)"
+        fi
+	;;
+*solaris*)
+	AC_DEFINE(TARGET_SOLARIS, 1, [Are we running on Solaris?])
+	;;
+*openbsd*)
+	AC_DEFINE(TARGET_OPENBSD, 1, [Are we running on OpenBSD?])
+	;;
+*freebsd*)
+	AC_DEFINE(TARGET_FREEBSD, 1, [Are we running on FreeBSD?])
+	;;
+*netbsd*)
+	AC_DEFINE(TARGET_NETBSD, 1, [Are we running NetBSD?])
+	;;
+*darwin*)
+	dnl some Mac OS X tendering (we use vararg macros...)
+	AC_DEFINE(TARGET_DARWIN, 1, [Are we running on Mac OS X?])
+	CPPFLAGS="$CPPFLAGS -no-cpp-precomp"
+	;;
+*mingw*)
+	AC_MSG_RESULT([WARNING: configure support for mingw is incomplete])
+	AC_MSG_RESULT([WARNING: use makefile.w32 instead])
+	OPENVPN_ADD_LIBS(-lgdi32)
+	OPENVPN_ADD_LIBS(-lwsock32)
+	;;
+	
+esac
+
+dnl Checks for programs.
+AC_PROG_CC
+AC_PROG_INSTALL
+AC_PROG_GCC_TRADITIONAL
+
+dnl Checks for header files.
+AC_HEADER_STDC
+
+dnl Checks for typedefs, structures, and compiler characteristics.
+AC_C_CONST
+AC_C_INLINE
+AC_C_VOLATILE
+AC_TYPE_OFF_T
+AC_TYPE_PID_T
+AC_TYPE_SIZE_T
+AC_TYPE_UID_T
+AC_HEADER_TIME
+AX_CPP_VARARG_MACRO_ISO
+AX_CPP_VARARG_MACRO_GCC
+AX_EMPTY_ARRAY
+
+dnl Check for more header files.
+AC_HEADER_SYS_WAIT
+AC_CHECK_HEADERS(sys/time.h sys/socket.h sys/ioctl.h sys/stat.h dnl
+		 sys/mman.h fcntl.h sys/file.h stdlib.h stdint.h dnl
+		 stdarg.h unistd.h signal.h stdio.h string.h dnl
+		 strings.h ctype.h errno.h syslog.h pwd.h grp.h dnl
+		 net/if_tun.h net/if.h stropts.h sys/sockio.h dnl
+		 netinet/in.h netinet/in_systm.h netinet/ip.h dnl
+		 netinet/if_ether.h netinet/tcp.h resolv.h arpa/inet.h dnl
+		 netdb.h sys/uio.h linux/if_tun.h linux/sockios.h dnl
+		 linux/types.h sys/poll.h sys/epoll.h dnl
+)
+AC_CHECK_HEADERS(linux/errqueue.h,,,
+	[#ifdef HAVE_LINUX_TYPES_H
+	 # include <linux/types.h>
+	 #endif
+	])
+AC_CACHE_SAVE
+
+dnl check that in_addr_t is defined
+AC_CHECK_TYPE(
+	[in_addr_t],
+	[],
+	[AC_DEFINE(in_addr_t, uint32_t, [Some systems don't define in_addr_t])],
+	[#include "syshead.h"])
+
+dnl check for basic types
+AC_CHECK_TYPE(
+	[uint8_t],
+	[],
+	[AC_DEFINE(uint8_t, unsigned char, [8-bit unsigned type])],
+	[#include "syshead.h"])
+AC_CHECK_TYPE(
+	[uint16_t],
+	[],
+	[AC_DEFINE(uint16_t, unsigned char, [16-bit unsigned type])],
+	[#include "syshead.h"])
+AC_CHECK_TYPE(
+	[uint32_t],
+	[],
+	[AC_DEFINE(uint32_t, unsigned long, [32-bit unsigned type])],
+	[#include "syshead.h"])
+
+dnl check for IPv6 types
+AC_CHECK_TYPE(
+	[struct tun_pi],
+	[AC_DEFINE(HAVE_TUN_PI, 1, [struct tun_pi needed for IPv6 support])],
+	[],
+	[#include "syshead.h"])
+AC_CHECK_TYPE(
+	[struct iphdr],
+	[AC_DEFINE(HAVE_IPHDR, 1, [struct iphdr needed for IPv6 support])],
+	[],
+	[#include "syshead.h"])
+AC_CHECK_TYPE(
+	[struct iovec],
+	[AC_DEFINE(HAVE_IOVEC, 1, [struct iovec needed for IPv6 support])],
+	[],
+	[#include "syshead.h"])
+
+dnl check for extended socket error types
+AC_CHECK_TYPE(
+	[struct sock_extended_err],
+	[AC_DEFINE(HAVE_SOCK_EXTENDED_ERR, 1, [struct sock_extended_err needed for extended socket error support])],
+	[],
+	[#include "syshead.h"])
+AC_CHECK_TYPE(
+	[struct msghdr],
+	[AC_DEFINE(HAVE_MSGHDR, 1, [struct msghdr needed for extended socket error support])],
+	[],
+	[#include "syshead.h"])
+AC_CHECK_TYPE(
+	[struct cmsghdr],
+	[AC_DEFINE(HAVE_CMSGHDR, 1, [struct cmsghdr needed for extended socket error support])],
+	[],
+	[#include "syshead.h"])
+
+AC_CHECK_SIZEOF(unsigned int)
+AC_CHECK_SIZEOF(unsigned long)
+
+AC_CACHE_SAVE
+
+dnl check for other types
+TYPE_SOCKLEN_T
+AC_TYPE_SIGNAL
+
+dnl Check for libsocket
+AC_SEARCH_LIBS(socket, socket)
+
+dnl Check for libnsl
+AC_SEARCH_LIBS(inet_ntoa, nsl)
+
+dnl Check for libresolv
+AC_SEARCH_LIBS(gethostbyname, resolv nsl)
+
+dnl optional library functions
+AC_FUNC_FORK
+AC_CHECK_FUNCS(daemon chroot getpwnam setuid nice system getpid dup dup2 dnl
+	       getpass strerror syslog openlog mlockall getgrnam setgid dnl
+	       setgroups stat flock readv writev setsockopt getsockopt dnl
+	       setsid chdir gettimeofday putenv getpeername unlink dnl
+               poll chsize ftruncate)
+AC_CACHE_SAVE
+
+dnl Required library functions
+AC_FUNC_MEMCMP
+
+AC_CHECK_FUNCS(socket recv recvfrom send sendto listen dnl
+	       accept connect bind select gethostbyname dnl
+               inet_ntoa time ctime memset vsnprintf, [],
+	       [AC_MSG_ERROR([Required library function not found])])
+
+dnl
+dnl check libraries
+dnl
+
+dnl Checking for a working epoll
+AC_CHECKING([for working epoll implementation])
+OLDLDFLAGS="$LDFLAGS"
+LDFLAGS="$LDFLAGS -Wl,--fatal-warnings"
+AC_CHECK_FUNCS(epoll_create, AC_DEFINE([HAVE_EPOLL_CREATE], 1, []))
+LDFLAGS="$OLDLDFLAGS"
+
+dnl
+dnl check for valgrind tool
+dnl
+
+if test "$MEMCHECK" = "valgrind"; then
+   AC_CHECKING([for valgrind tool and Header files])
+   AC_CHECK_HEADER(valgrind/memcheck.h, 
+        [
+	    AC_DEFINE(USE_VALGRIND, 1, [Use valgrind memory debugging library])
+	    CFLAGS="-g -fno-inline"
+	],
+        [AC_MSG_ERROR([valgrind headers not found.])]
+   )
+fi
+
+dnl
+dnl check for pthread library
+dnl
+
+if test "$PTHREAD" = "yes"; then
+  AC_CHECKING([for pthread support])
+  AC_MSG_RESULT([********* WARNING: pthread support is experimental for OpenVPN 2.0])
+  ACX_PTHREAD(
+        [
+	    case "$target" in
+	    *openbsd*)
+		AC_MSG_RESULT([WARNING: pthread support on OpenBSD is unstable!])
+		CFLAGS="$CFLAGS -pthread"
+		;;
+	    esac
+	    LIBS="$PTHREAD_LIBS $LIBS"
+	    CFLAGS="$CFLAGS $PTHREAD_CFLAGS"
+	    CC="$PTHREAD_CC"
+	    AC_DEFINE(USE_PTHREAD, 1, [Use pthread-based multithreading])
+	],
+	[
+	    AC_MSG_RESULT([I don't know how to build with pthread support on this platform.])
+	    AC_MSG_ERROR([try ./configure --disable-pthread])
+	])
+fi
+
+dnl
+dnl check for dmalloc library
+dnl
+
+if test "$MEMCHECK" = "dmalloc"; then
+   AC_CHECKING([for dmalloc Library and Header files])
+   AC_CHECK_HEADER(dmalloc.h, 
+        [AC_CHECK_LIB(dmalloc, malloc,
+	    [
+               if test "$PTHREAD" = "yes"; then
+                   OPENVPN_ADD_LIBS(-ldmallocth)
+               else
+                   OPENVPN_ADD_LIBS(-ldmalloc)
+               fi
+	       AC_DEFINE(DMALLOC, 1, [Use dmalloc memory debugging library])
+	    ],
+	    [AC_MSG_ERROR([dmalloc library not found.])]
+	)],
+        [AC_MSG_ERROR([dmalloc headers not found.])]
+   )
+fi
+
+dnl
+dnl Check for dlopen -- first try libc then libdl.
+dnl
+if test "$PLUGINS" = "yes"; then
+   AC_CHECKING([for libdl Library and Header files])
+   AC_CHECK_HEADER(dlfcn.h,
+        [AC_CHECK_FUNC(dlopen,
+            [AC_DEFINE(USE_LIBDL, 1, [Use libdl for dynamic library loading])],
+            [AC_CHECK_LIB(dl, dlopen,
+	        [
+                   OPENVPN_ADD_LIBS(-ldl)
+	           AC_DEFINE(USE_LIBDL, 1, [Use libdl for dynamic library loading])
+	        ],
+	        [AC_MSG_RESULT([libdl library not found.])]
+	    )],
+        )],
+        [AC_MSG_RESULT([libdl headers not found.])]
+   )
+fi
+
+dnl
+dnl check for LZO library
+dnl
+
+if test "$LZO" = "yes"; then
+   LZO_H=""
+   AC_CHECKING([for LZO Library and Header files])
+   AC_CHECK_HEADER(lzo/lzo1x.h,
+	[ LZO_H="2"
+	  lzolibs="lzo2 lzo"
+	  AC_DEFINE(LZO_HEADER_DIR, 1, [Use lzo/ directory prefix for LZO header files (for LZO 2.0)])
+	],
+	[ AC_CHECK_HEADER(lzo1x.h, [ LZO_H="1" ; lzolibs=lzo ]) ]
+   )
+
+   if test -n "$LZO_H"; then
+     havelzolib=0
+     for i in $lzolibs ; do
+	if test $havelzolib = 1 ; then break ; fi
+	AC_CHECK_LIB($i, lzo1x_1_15_compress,
+          [
+	    OPENVPN_ADD_LIBS(-l$i)
+	    AC_DEFINE(USE_LZO, 1, [Use LZO compression library])
+	    havelzolib=1
+	  ]
+        )
+     done
+     if test $havelzolib = 0 ; then
+       AC_MSG_ERROR([LZO headers were found but LZO library was not found])
+     fi
+   else
+     AC_MSG_RESULT([LZO headers were not found])
+     AC_MSG_RESULT([LZO library available from http://www.oberhumer.com/opensource/lzo/])
+     AC_MSG_ERROR([Or try ./configure --disable-lzo])
+   fi
+fi
+
+dnl
+dnl check for OpenSSL-crypto library
+dnl
+
+if test "$CRYPTO" = "yes"; then
+   AC_CHECKING([for OpenSSL Crypto Library and Header files])
+   AC_CHECK_HEADER(openssl/evp.h,
+	[AC_CHECK_LIB(crypto, EVP_CIPHER_CTX_init,
+            [
+		   AC_CHECKING([that OpenSSL Library is at least version 0.9.6])
+		   AC_EGREP_CPP(yes,
+		     [
+		       #include "openssl/evp.h"
+		       #if SSLEAY_VERSION_NUMBER >= 0x00906000L
+		         yes
+		       #endif
+		     ],
+		     [
+                       AC_DEFINE(USE_CRYPTO, 1, [Use OpenSSL crypto library])
+                       OPENVPN_ADD_LIBS(-lcrypto)
+                       AC_CHECK_FUNCS(EVP_CIPHER_CTX_set_key_length)
+
+		       dnl check for OpenSSL crypto acceleration capability
+		       AC_CHECK_HEADERS(openssl/engine.h)
+                       AC_CHECK_FUNCS(ENGINE_load_builtin_engines)
+                       AC_CHECK_FUNCS(ENGINE_register_all_complete)
+                       AC_CHECK_FUNCS(ENGINE_cleanup)
+                     ],
+		     [AC_MSG_ERROR([OpenSSL crypto Library is too old.])]
+		   )
+	    ],
+	    [AC_MSG_ERROR([OpenSSL Crypto library not found.])]
+	)],
+	[AC_MSG_ERROR([OpenSSL Crypto headers not found.])]
+   )
+
+dnl
+dnl check for OpenSSL-SSL library
+dnl
+
+   if test "$SSL" = "yes"; then
+      AC_CHECKING([for OpenSSL SSL Library and Header files])
+      AC_CHECK_HEADER(openssl/ssl.h,
+	   [AC_CHECK_LIB(ssl, SSL_CTX_new,
+	       [
+                  if test "$MEMCHECK" = "ssl"; then
+                     AC_CHECKING([for Memory Debugging Capabilities in OpenSSL Library])
+                     AC_CHECK_LIB(ssl, CRYPTO_mem_ctrl,
+                         [
+                             AC_DEFINE(CRYPTO_MDEBUG, 1, [Use memory debugging function in OpenSSL])
+			     AC_MSG_RESULT([NOTE: OpenSSL library must be compiled with CRYPTO_MDEBUG])
+                         ],
+                         [AC_MSG_ERROR([Memory Debugging function in OpenSSL library not found.])]
+                     )
+                  fi
+	       ],
+	       [AC_MSG_ERROR([OpenSSL SSL library not found.])]
+	   )],
+	   [AC_MSG_ERROR([OpenSSL SSL headers not found.])]
+      )
+      AC_DEFINE(USE_SSL, 1, [Use OpenSSL SSL library])
+      OPENVPN_ADD_LIBS(-lssl)
+   fi
+fi
+
+dnl enable multi-client mode
+if test "$MULTI" = "yes"; then
+   AC_DEFINE(ENABLE_CLIENT_SERVER, 1, [Enable client/server capability])
+fi
+
+dnl enable client mode only, not server
+if test "$MULTI_SERVER" = "no"; then
+   AC_DEFINE(ENABLE_CLIENT_ONLY, 1, [Enable client capability only])
+fi
+
+dnl enable management server capability
+if test "$MANAGEMENT" = "yes"; then
+   AC_DEFINE(ENABLE_MANAGEMENT, 1, [Enable management server capability])
+fi
+
+dnl enable socks 
+if test "$SOCKS" = "yes"; then
+   AC_DEFINE(ENABLE_SOCKS, 1, [Enable Socks proxy support])
+fi
+
+dnl enable HTTP proxy
+if test "$HTTP_PROXY" = "yes"; then
+   AC_DEFINE(ENABLE_HTTP_PROXY, 1, [Enable HTTP proxy support])
+fi
+
+dnl enable debugging
+if test "$DEBUG" = "yes"; then
+   AC_DEFINE(ENABLE_DEBUG, 1, [Enable debugging support])
+fi
+
+dnl enable small size optimizations
+if test "$SMALL" = "yes"; then
+   AC_DEFINE(ENABLE_SMALL, 1, [Enable smaller executable size])
+fi
+
+dnl enable --fragment
+if test "$FRAGMENT" = "yes"; then
+   AC_DEFINE(ENABLE_FRAGMENT, 1, [Enable internal fragmentation support])
+fi
+
+dnl enable strict compiler warnings
+if test "$STRICT" = "yes"; then
+   CFLAGS="$CFLAGS -Wall -Wpointer-arith -Wsign-compare -Wno-unused-parameter -Wno-unused-function"
+fi
+
+dnl enable pedantic compiler warnings
+if test "$PEDANTIC" = "yes"; then
+   CFLAGS="$CFLAGS -ansi -pedantic"
+fi
+
+dnl enable profiling
+if test "$PROFILE" = "yes"; then
+   CFLAGS="$CFLAGS -pg -DENABLE_PROFILING"
+fi
+
+dnl enable strict options check between peers
+if test "$STRICT_OPTIONS" = "yes"; then
+   AC_DEFINE(STRICT_OPTIONS_CHECK, 1, [Enable strict options check between peers])
+fi
+
+dnl enable password save
+if test "$PASSWORD_SAVE" = "yes"; then
+   AC_DEFINE(ENABLE_PASSWORD_SAVE, 1, [Allow --askpass and --auth-user-pass passwords to be read from a file])
+fi
+
+AC_OUTPUT(Makefile openvpn.spec config-win32.h install-win32/openvpn.nsi)