diff options
Diffstat (limited to 'configure.ac')
| -rw-r--r-- | configure.ac | 636 |
1 files changed, 636 insertions, 0 deletions
diff --git a/configure.ac b/configure.ac new file mode 100644 index 0000000..2b09280 --- /dev/null +++ b/configure.ac @@ -0,0 +1,636 @@ +dnl OpenVPN -- An application to securely tunnel IP networks +dnl over a single UDP port, with support for SSL/TLS-based +dnl session authentication and key exchange, +dnl packet encryption, packet authentication, and +dnl packet compression. +dnl +dnl Copyright (C) 2002-2005 OpenVPN Solutions LLC <info@openvpn.net> +dnl +dnl This program is free software; you can redistribute it and/or modify +dnl it under the terms of the GNU General Public License as published by +dnl the Free Software Foundation; either version 2 of the License, or +dnl (at your option) any later version. +dnl +dnl This program is distributed in the hope that it will be useful, +dnl but WITHOUT ANY WARRANTY; without even the implied warranty of +dnl MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +dnl GNU General Public License for more details. +dnl +dnl You should have received a copy of the GNU General Public License +dnl along with this program (see the file COPYING included with this +dnl distribution); if not, write to the Free Software Foundation, Inc., +dnl 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA + +dnl Process this file with autoconf to produce a configure script. + +AC_PREREQ(2.50) + +AC_INIT([OpenVPN], [2.0.3_rc1], [openvpn-users@lists.sourceforge.net], [openvpn]) +AM_CONFIG_HEADER(config.h) +AC_CONFIG_SRCDIR(syshead.h) + +AC_ARG_ENABLE(lzo, + [ --disable-lzo Disable LZO compression support], + [LZO="$enableval"], + [LZO="yes"] +) + +AC_ARG_ENABLE(crypto, + [ --disable-crypto Disable OpenSSL crypto support], + [CRYPTO="$enableval"], + [CRYPTO="yes"] +) + +AC_ARG_ENABLE(ssl, + [ --disable-ssl Disable OpenSSL SSL support for TLS-based key exchange], + [SSL="$enableval"], + [SSL="yes"] +) + +AC_ARG_ENABLE(multi, + [ --disable-multi Disable client/server support (--mode server + client mode)], + [MULTI="$enableval"], + [MULTI="yes"] +) + +AC_ARG_ENABLE(server, + [ --disable-server Disable server support only (but retain client support)], + [MULTI_SERVER="$enableval"], + [MULTI_SERVER="yes"] +) + +AC_ARG_ENABLE(plugins, + [ --disable-plugins Disable plug-in support], + [PLUGINS="$enableval"], + [PLUGINS="yes"] +) + +AC_ARG_ENABLE(management, + [ --disable-management Disable management server support], + [MANAGEMENT="$enableval"], + [MANAGEMENT="yes"] +) + +AC_ARG_ENABLE(socks, + [ --disable-socks Disable Socks support], + [SOCKS="$enableval"], + [SOCKS="yes"] +) + +AC_ARG_ENABLE(http, + [ --disable-http Disable HTTP proxy support], + [HTTP_PROXY="$enableval"], + [HTTP_PROXY="yes"] +) + +AC_ARG_ENABLE(fragment, + [ --disable-fragment Disable internal fragmentation support (--fragment)], + [FRAGMENT="$enableval"], + [FRAGMENT="yes"] +) + +AC_ARG_ENABLE(debug, + [ --disable-debug Disable debugging support (disable gremlin and verb 7+ messages)], + [DEBUG="$enableval"], + [DEBUG="yes"] +) + +AC_ARG_ENABLE(small, + [ --enable-small Enable smaller executable size (disable OCC, usage message, and verb 4 parm list)], + [SMALL="$enableval"], + [SMALL="no"] +) + +AC_ARG_ENABLE(pthread, + [ --enable-pthread Enable pthread support (Experimental for OpenVPN 2.0)], + [PTHREAD="$enableval"], + [PTHREAD="no"] +) + +AC_ARG_ENABLE(password-save, + [ --enable-password-save Allow --askpass and --auth-user-pass passwords to be read from a file], + [PASSWORD_SAVE="$enableval"], + [PASSWORD_SAVE="no"] +) + +AC_ARG_ENABLE(iproute2, + [ --enable-iproute2 Enable support for iproute2], + AC_DEFINE(CONFIG_FEATURE_IPROUTE, 1, [enable iproute2 support]) +) + +AC_ARG_ENABLE(strict, + [ --enable-strict Enable strict compiler warnings (debugging option)], + [STRICT="$enableval"], + [STRICT="no"] +) + +AC_ARG_ENABLE(pedantic, + [ --enable-pedantic Enable pedantic compiler warnings, will not generate a working executable (debugging option)], + [PEDANTIC="$enableval"], + [PEDANTIC="no"] +) + +AC_ARG_ENABLE(profiling, + [ --enable-profiling Enable profiling (debugging option)], + [PROFILE="$enableval"], + [PROFILE="no"] +) + +AC_ARG_ENABLE(strict-options, + [ --enable-strict-options Enable strict options check between peers (debugging option)], + [STRICT_OPTIONS="$enableval"], + [STRICT_OPTIONS="no"] +) + +AC_ARG_WITH(ssl-headers, + [ --with-ssl-headers=DIR Crypto/SSL Include files location], + [CS_HDR_DIR="$withval"] + [CPPFLAGS="$CPPFLAGS -I$withval"] +) + +AC_ARG_WITH(ssl-lib, + [ --with-ssl-lib=DIR Crypto/SSL Library location], + [LDFLAGS="$LDFLAGS -L$withval"] +) + +AC_ARG_WITH(lzo-headers, + [ --with-lzo-headers=DIR LZO Include files location], + [LZO_HDR_DIR="$withval"] + [CPPFLAGS="$CPPFLAGS -I$withval"] +) + +AC_ARG_WITH(lzo-lib, + [ --with-lzo-lib=DIR LZO Library location], + [LDFLAGS="$LDFLAGS -L$withval"] +) + +AC_ARG_WITH(ifconfig-path, + [ --with-ifconfig-path=PATH Path to ifconfig tool], + [IFCONFIG="$withval"], + [AC_PATH_PROG([IFCONFIG], [ifconfig], [ifconfig], [$PATH:/usr/local/sbin:/usr/sbin:/sbin])] +) +AC_DEFINE_UNQUOTED(IFCONFIG_PATH, "$IFCONFIG", [Path to ifconfig tool]) + +AC_ARG_WITH(iproute-path, + [ --with-iproute-path=PATH Path to iproute tool], + [IPROUTE="$withval"], + [AC_PATH_PROG([IPROUTE], [ip], [ip], [$PATH:/usr/local/sbin:/usr/sbin:/sbin])] +) +AC_DEFINE_UNQUOTED(IPROUTE_PATH, "$IPROUTE", [Path to iproute tool]) + + +AC_ARG_WITH(route-path, + [ --with-route-path=PATH Path to route tool], + [ROUTE="$withval"], + [AC_PATH_PROG([ROUTE], [route], [route], [$PATH:/usr/local/sbin:/usr/sbin:/sbin])] +) +AC_DEFINE_UNQUOTED(ROUTE_PATH, "$ROUTE", [Path to route tool]) + +AC_ARG_WITH(mem-check, + [ --with-mem-check=TYPE Build with debug memory checking, TYPE = dmalloc or valgrind], + [MEMCHECK="$withval"] +) + +dnl Guess host type. +AC_CANONICAL_HOST +AC_CANONICAL_SYSTEM +AM_INIT_AUTOMAKE(openvpn, [$PACKAGE_VERSION]) + +dnl fix search path, to allow compilers to find syshead.h +CPPFLAGS="$CPPFLAGS -I${srcdir}" + +dnl check target OS +openvpn_target=$target +if test $target_alias; then + openvpn_target=$target_alias +fi +AC_DEFINE_UNQUOTED(TARGET_ALIAS, "$openvpn_target", [A string representing our target]) +case "$target" in +*linux*) + AC_DEFINE(TARGET_LINUX, 1, [Are we running on Linux?]) + dnl RH9 SSL headers workaround + if test -z $CS_HDR_DIR && test "$CRYPTO" = "yes"; then + CPPFLAGS="$CPPFLAGS $(pkg-config --cflags openssl 2>/dev/null)" + fi + ;; +*solaris*) + AC_DEFINE(TARGET_SOLARIS, 1, [Are we running on Solaris?]) + ;; +*openbsd*) + AC_DEFINE(TARGET_OPENBSD, 1, [Are we running on OpenBSD?]) + ;; +*freebsd*) + AC_DEFINE(TARGET_FREEBSD, 1, [Are we running on FreeBSD?]) + ;; +*netbsd*) + AC_DEFINE(TARGET_NETBSD, 1, [Are we running NetBSD?]) + ;; +*darwin*) + dnl some Mac OS X tendering (we use vararg macros...) + AC_DEFINE(TARGET_DARWIN, 1, [Are we running on Mac OS X?]) + CPPFLAGS="$CPPFLAGS -no-cpp-precomp" + ;; +*mingw*) + AC_MSG_RESULT([WARNING: configure support for mingw is incomplete]) + AC_MSG_RESULT([WARNING: use makefile.w32 instead]) + OPENVPN_ADD_LIBS(-lgdi32) + OPENVPN_ADD_LIBS(-lwsock32) + ;; + +esac + +dnl Checks for programs. +AC_PROG_CC +AC_PROG_INSTALL +AC_PROG_GCC_TRADITIONAL + +dnl Checks for header files. +AC_HEADER_STDC + +dnl Checks for typedefs, structures, and compiler characteristics. +AC_C_CONST +AC_C_INLINE +AC_C_VOLATILE +AC_TYPE_OFF_T +AC_TYPE_PID_T +AC_TYPE_SIZE_T +AC_TYPE_UID_T +AC_HEADER_TIME +AX_CPP_VARARG_MACRO_ISO +AX_CPP_VARARG_MACRO_GCC +AX_EMPTY_ARRAY + +dnl Check for more header files. +AC_HEADER_SYS_WAIT +AC_CHECK_HEADERS(sys/time.h sys/socket.h sys/ioctl.h sys/stat.h dnl + sys/mman.h fcntl.h sys/file.h stdlib.h stdint.h dnl + stdarg.h unistd.h signal.h stdio.h string.h dnl + strings.h ctype.h errno.h syslog.h pwd.h grp.h dnl + net/if_tun.h net/if.h stropts.h sys/sockio.h dnl + netinet/in.h netinet/in_systm.h netinet/ip.h dnl + netinet/if_ether.h netinet/tcp.h resolv.h arpa/inet.h dnl + netdb.h sys/uio.h linux/if_tun.h linux/sockios.h dnl + linux/types.h sys/poll.h sys/epoll.h dnl +) +AC_CHECK_HEADERS(linux/errqueue.h,,, + [#ifdef HAVE_LINUX_TYPES_H + # include <linux/types.h> + #endif + ]) +AC_CACHE_SAVE + +dnl check that in_addr_t is defined +AC_CHECK_TYPE( + [in_addr_t], + [], + [AC_DEFINE(in_addr_t, uint32_t, [Some systems don't define in_addr_t])], + [#include "syshead.h"]) + +dnl check for basic types +AC_CHECK_TYPE( + [uint8_t], + [], + [AC_DEFINE(uint8_t, unsigned char, [8-bit unsigned type])], + [#include "syshead.h"]) +AC_CHECK_TYPE( + [uint16_t], + [], + [AC_DEFINE(uint16_t, unsigned char, [16-bit unsigned type])], + [#include "syshead.h"]) +AC_CHECK_TYPE( + [uint32_t], + [], + [AC_DEFINE(uint32_t, unsigned long, [32-bit unsigned type])], + [#include "syshead.h"]) + +dnl check for IPv6 types +AC_CHECK_TYPE( + [struct tun_pi], + [AC_DEFINE(HAVE_TUN_PI, 1, [struct tun_pi needed for IPv6 support])], + [], + [#include "syshead.h"]) +AC_CHECK_TYPE( + [struct iphdr], + [AC_DEFINE(HAVE_IPHDR, 1, [struct iphdr needed for IPv6 support])], + [], + [#include "syshead.h"]) +AC_CHECK_TYPE( + [struct iovec], + [AC_DEFINE(HAVE_IOVEC, 1, [struct iovec needed for IPv6 support])], + [], + [#include "syshead.h"]) + +dnl check for extended socket error types +AC_CHECK_TYPE( + [struct sock_extended_err], + [AC_DEFINE(HAVE_SOCK_EXTENDED_ERR, 1, [struct sock_extended_err needed for extended socket error support])], + [], + [#include "syshead.h"]) +AC_CHECK_TYPE( + [struct msghdr], + [AC_DEFINE(HAVE_MSGHDR, 1, [struct msghdr needed for extended socket error support])], + [], + [#include "syshead.h"]) +AC_CHECK_TYPE( + [struct cmsghdr], + [AC_DEFINE(HAVE_CMSGHDR, 1, [struct cmsghdr needed for extended socket error support])], + [], + [#include "syshead.h"]) + +AC_CHECK_SIZEOF(unsigned int) +AC_CHECK_SIZEOF(unsigned long) + +AC_CACHE_SAVE + +dnl check for other types +TYPE_SOCKLEN_T +AC_TYPE_SIGNAL + +dnl Check for libsocket +AC_SEARCH_LIBS(socket, socket) + +dnl Check for libnsl +AC_SEARCH_LIBS(inet_ntoa, nsl) + +dnl Check for libresolv +AC_SEARCH_LIBS(gethostbyname, resolv nsl) + +dnl optional library functions +AC_FUNC_FORK +AC_CHECK_FUNCS(daemon chroot getpwnam setuid nice system getpid dup dup2 dnl + getpass strerror syslog openlog mlockall getgrnam setgid dnl + setgroups stat flock readv writev setsockopt getsockopt dnl + setsid chdir gettimeofday putenv getpeername unlink dnl + poll chsize ftruncate) +AC_CACHE_SAVE + +dnl Required library functions +AC_FUNC_MEMCMP + +AC_CHECK_FUNCS(socket recv recvfrom send sendto listen dnl + accept connect bind select gethostbyname dnl + inet_ntoa time ctime memset vsnprintf, [], + [AC_MSG_ERROR([Required library function not found])]) + +dnl +dnl check libraries +dnl + +dnl Checking for a working epoll +AC_CHECKING([for working epoll implementation]) +OLDLDFLAGS="$LDFLAGS" +LDFLAGS="$LDFLAGS -Wl,--fatal-warnings" +AC_CHECK_FUNCS(epoll_create, AC_DEFINE([HAVE_EPOLL_CREATE], 1, [])) +LDFLAGS="$OLDLDFLAGS" + +dnl +dnl check for valgrind tool +dnl + +if test "$MEMCHECK" = "valgrind"; then + AC_CHECKING([for valgrind tool and Header files]) + AC_CHECK_HEADER(valgrind/memcheck.h, + [ + AC_DEFINE(USE_VALGRIND, 1, [Use valgrind memory debugging library]) + CFLAGS="-g -fno-inline" + ], + [AC_MSG_ERROR([valgrind headers not found.])] + ) +fi + +dnl +dnl check for pthread library +dnl + +if test "$PTHREAD" = "yes"; then + AC_CHECKING([for pthread support]) + AC_MSG_RESULT([********* WARNING: pthread support is experimental for OpenVPN 2.0]) + ACX_PTHREAD( + [ + case "$target" in + *openbsd*) + AC_MSG_RESULT([WARNING: pthread support on OpenBSD is unstable!]) + CFLAGS="$CFLAGS -pthread" + ;; + esac + LIBS="$PTHREAD_LIBS $LIBS" + CFLAGS="$CFLAGS $PTHREAD_CFLAGS" + CC="$PTHREAD_CC" + AC_DEFINE(USE_PTHREAD, 1, [Use pthread-based multithreading]) + ], + [ + AC_MSG_RESULT([I don't know how to build with pthread support on this platform.]) + AC_MSG_ERROR([try ./configure --disable-pthread]) + ]) +fi + +dnl +dnl check for dmalloc library +dnl + +if test "$MEMCHECK" = "dmalloc"; then + AC_CHECKING([for dmalloc Library and Header files]) + AC_CHECK_HEADER(dmalloc.h, + [AC_CHECK_LIB(dmalloc, malloc, + [ + if test "$PTHREAD" = "yes"; then + OPENVPN_ADD_LIBS(-ldmallocth) + else + OPENVPN_ADD_LIBS(-ldmalloc) + fi + AC_DEFINE(DMALLOC, 1, [Use dmalloc memory debugging library]) + ], + [AC_MSG_ERROR([dmalloc library not found.])] + )], + [AC_MSG_ERROR([dmalloc headers not found.])] + ) +fi + +dnl +dnl Check for dlopen -- first try libc then libdl. +dnl +if test "$PLUGINS" = "yes"; then + AC_CHECKING([for libdl Library and Header files]) + AC_CHECK_HEADER(dlfcn.h, + [AC_CHECK_FUNC(dlopen, + [AC_DEFINE(USE_LIBDL, 1, [Use libdl for dynamic library loading])], + [AC_CHECK_LIB(dl, dlopen, + [ + OPENVPN_ADD_LIBS(-ldl) + AC_DEFINE(USE_LIBDL, 1, [Use libdl for dynamic library loading]) + ], + [AC_MSG_RESULT([libdl library not found.])] + )], + )], + [AC_MSG_RESULT([libdl headers not found.])] + ) +fi + +dnl +dnl check for LZO library +dnl + +if test "$LZO" = "yes"; then + LZO_H="" + AC_CHECKING([for LZO Library and Header files]) + AC_CHECK_HEADER(lzo/lzo1x.h, + [ LZO_H="2" + lzolibs="lzo2 lzo" + AC_DEFINE(LZO_HEADER_DIR, 1, [Use lzo/ directory prefix for LZO header files (for LZO 2.0)]) + ], + [ AC_CHECK_HEADER(lzo1x.h, [ LZO_H="1" ; lzolibs=lzo ]) ] + ) + + if test -n "$LZO_H"; then + havelzolib=0 + for i in $lzolibs ; do + if test $havelzolib = 1 ; then break ; fi + AC_CHECK_LIB($i, lzo1x_1_15_compress, + [ + OPENVPN_ADD_LIBS(-l$i) + AC_DEFINE(USE_LZO, 1, [Use LZO compression library]) + havelzolib=1 + ] + ) + done + if test $havelzolib = 0 ; then + AC_MSG_ERROR([LZO headers were found but LZO library was not found]) + fi + else + AC_MSG_RESULT([LZO headers were not found]) + AC_MSG_RESULT([LZO library available from http://www.oberhumer.com/opensource/lzo/]) + AC_MSG_ERROR([Or try ./configure --disable-lzo]) + fi +fi + +dnl +dnl check for OpenSSL-crypto library +dnl + +if test "$CRYPTO" = "yes"; then + AC_CHECKING([for OpenSSL Crypto Library and Header files]) + AC_CHECK_HEADER(openssl/evp.h, + [AC_CHECK_LIB(crypto, EVP_CIPHER_CTX_init, + [ + AC_CHECKING([that OpenSSL Library is at least version 0.9.6]) + AC_EGREP_CPP(yes, + [ + #include "openssl/evp.h" + #if SSLEAY_VERSION_NUMBER >= 0x00906000L + yes + #endif + ], + [ + AC_DEFINE(USE_CRYPTO, 1, [Use OpenSSL crypto library]) + OPENVPN_ADD_LIBS(-lcrypto) + AC_CHECK_FUNCS(EVP_CIPHER_CTX_set_key_length) + + dnl check for OpenSSL crypto acceleration capability + AC_CHECK_HEADERS(openssl/engine.h) + AC_CHECK_FUNCS(ENGINE_load_builtin_engines) + AC_CHECK_FUNCS(ENGINE_register_all_complete) + AC_CHECK_FUNCS(ENGINE_cleanup) + ], + [AC_MSG_ERROR([OpenSSL crypto Library is too old.])] + ) + ], + [AC_MSG_ERROR([OpenSSL Crypto library not found.])] + )], + [AC_MSG_ERROR([OpenSSL Crypto headers not found.])] + ) + +dnl +dnl check for OpenSSL-SSL library +dnl + + if test "$SSL" = "yes"; then + AC_CHECKING([for OpenSSL SSL Library and Header files]) + AC_CHECK_HEADER(openssl/ssl.h, + [AC_CHECK_LIB(ssl, SSL_CTX_new, + [ + if test "$MEMCHECK" = "ssl"; then + AC_CHECKING([for Memory Debugging Capabilities in OpenSSL Library]) + AC_CHECK_LIB(ssl, CRYPTO_mem_ctrl, + [ + AC_DEFINE(CRYPTO_MDEBUG, 1, [Use memory debugging function in OpenSSL]) + AC_MSG_RESULT([NOTE: OpenSSL library must be compiled with CRYPTO_MDEBUG]) + ], + [AC_MSG_ERROR([Memory Debugging function in OpenSSL library not found.])] + ) + fi + ], + [AC_MSG_ERROR([OpenSSL SSL library not found.])] + )], + [AC_MSG_ERROR([OpenSSL SSL headers not found.])] + ) + AC_DEFINE(USE_SSL, 1, [Use OpenSSL SSL library]) + OPENVPN_ADD_LIBS(-lssl) + fi +fi + +dnl enable multi-client mode +if test "$MULTI" = "yes"; then + AC_DEFINE(ENABLE_CLIENT_SERVER, 1, [Enable client/server capability]) +fi + +dnl enable client mode only, not server +if test "$MULTI_SERVER" = "no"; then + AC_DEFINE(ENABLE_CLIENT_ONLY, 1, [Enable client capability only]) +fi + +dnl enable management server capability +if test "$MANAGEMENT" = "yes"; then + AC_DEFINE(ENABLE_MANAGEMENT, 1, [Enable management server capability]) +fi + +dnl enable socks +if test "$SOCKS" = "yes"; then + AC_DEFINE(ENABLE_SOCKS, 1, [Enable Socks proxy support]) +fi + +dnl enable HTTP proxy +if test "$HTTP_PROXY" = "yes"; then + AC_DEFINE(ENABLE_HTTP_PROXY, 1, [Enable HTTP proxy support]) +fi + +dnl enable debugging +if test "$DEBUG" = "yes"; then + AC_DEFINE(ENABLE_DEBUG, 1, [Enable debugging support]) +fi + +dnl enable small size optimizations +if test "$SMALL" = "yes"; then + AC_DEFINE(ENABLE_SMALL, 1, [Enable smaller executable size]) +fi + +dnl enable --fragment +if test "$FRAGMENT" = "yes"; then + AC_DEFINE(ENABLE_FRAGMENT, 1, [Enable internal fragmentation support]) +fi + +dnl enable strict compiler warnings +if test "$STRICT" = "yes"; then + CFLAGS="$CFLAGS -Wall -Wpointer-arith -Wsign-compare -Wno-unused-parameter -Wno-unused-function" +fi + +dnl enable pedantic compiler warnings +if test "$PEDANTIC" = "yes"; then + CFLAGS="$CFLAGS -ansi -pedantic" +fi + +dnl enable profiling +if test "$PROFILE" = "yes"; then + CFLAGS="$CFLAGS -pg -DENABLE_PROFILING" +fi + +dnl enable strict options check between peers +if test "$STRICT_OPTIONS" = "yes"; then + AC_DEFINE(STRICT_OPTIONS_CHECK, 1, [Enable strict options check between peers]) +fi + +dnl enable password save +if test "$PASSWORD_SAVE" = "yes"; then + AC_DEFINE(ENABLE_PASSWORD_SAVE, 1, [Allow --askpass and --auth-user-pass passwords to be read from a file]) +fi + +AC_OUTPUT(Makefile openvpn.spec config-win32.h install-win32/openvpn.nsi) |