1 AC_INIT(openconnect, 4.00)
5 AM_MAINTAINER_MODE([enable])
6 AM_INIT_AUTOMAKE([foreign])
7 m4_ifdef([AM_SILENT_RULES], [AM_SILENT_RULES([yes])])
9 # Define htmldir and localedir for users of ancient autoconf building from git
10 AC_PREREQ([2.59c], [], [AC_SUBST([htmldir], [m4_ifset([AC_PACKAGE_TARNAME],
11 ['${datadir}/doc/${PACKAGE_TARNAME}'],
12 ['${datadir}/doc/${PACKAGE}'])
15 AC_PREREQ([2.60], [], [AC_SUBST([localedir], ['$(datadir)/locale'])])
17 # Upstream's pkg.m4 (since 0.27) offers this now, but define our own
18 # compatible version in case the local version of pkgconfig isn't new enough.
19 # https://bugs.freedesktop.org/show_bug.cgi?id=48743
20 m4_ifdef([PKG_INSTALLDIR], [PKG_INSTALLDIR],
21 [AC_ARG_WITH([pkgconfigdir],
22 [AS_HELP_STRING([--with-pkgconfigdir],
23 [install directory for openconnect.pc pkg-config file])],
24 [],[with_pkgconfigdir='$(libdir)/pkgconfig'])
25 AC_SUBST([pkgconfigdir], [${with_pkgconfigdir}])])
27 AC_ARG_WITH([vpnc-script],
28 [AS_HELP_STRING([--with-vpnc-script],
29 [default location of vpnc-script helper])])
31 if test "$with_vpnc_script" = "yes" || test "$with_vpnc_script" = ""; then
32 with_vpnc_script=/etc/vpnc/vpnc-script
33 if ! test -x "$with_vpnc_script"; then
34 AC_MSG_ERROR([${with_vpnc_script} does not seem to be executable.]
35 [OpenConnect will not function correctly without a vpnc-script.]
36 [See http://www.infradead.org/openconnect/vpnc-script.html for more details.]
38 [If you are building a distribution package, please ensure that your]
39 [packaging is correct, and that a vpnc-script will be installed when the]
40 [user installs your package. You should provide a --with-vpnc-script=]
41 [argument to this configure script, giving the full path where the script]
44 [The standard location is ${with_vpnc_script}. To bypass this error and]
45 [build OpenConnect to use the script from this location, even though it's]
46 [not present at the time you are building OpenConnect, pass the argument]
47 ["--with-vpnc-script=${with_vpnc_script}"])
49 elif test "$with_vpnc_script" = "no"; then
50 AC_ERROR([You cannot disable vpnc-script.]
51 [OpenConnect will not function correctly without it.]
52 [See http://www.infradead.org/openconnect/vpnc-script.html])
55 AC_DEFINE_UNQUOTED(DEFAULT_VPNCSCRIPT, "${with_vpnc_script}")
56 AC_SUBST(DEFAULT_VPNCSCRIPT, "${with_vpnc_script}")
60 AC_MSG_NOTICE([Applying feature macros for GNU build])
61 AC_DEFINE(_POSIX_C_SOURCE, 200112L)
63 AC_DEFINE(_BSD_SOURCE)
65 AC_DEFINE(_GNU_SOURCE)
68 AC_MSG_NOTICE([Applying feature macros for NetBSD build])
69 AC_DEFINE(_POSIX_C_SOURCE, 200112L)
70 AC_DEFINE(_NETBSD_SOURCE)
73 # On FreeBSD the only way to get vsyslog() visible is to define
74 # *nothing*, which makes absolutely everything visible.
75 # On Darwin enabling _POSIX_C_SOURCE breaks <sys/mount.h> because
76 # u_long and other types don't get defined. OpenBSD is similar.
86 symver_time="openconnect__time;"
90 AC_CHECK_FUNC(fdevname_r, [AC_DEFINE(HAVE_FDEVNAME_R, 1)], [])
91 AC_CHECK_FUNC(getline, [AC_DEFINE(HAVE_GETLINE, 1)], [symver_getline="openconnect__getline;"])
92 AC_CHECK_FUNC(strcasestr, [AC_DEFINE(HAVE_STRCASESTR, 1)], [])
93 AC_CHECK_FUNC(asprintf, [AC_DEFINE(HAVE_ASPRINTF, 1)], [symver_asprintf="openconnect__asprintf;"])
94 if test -n "$symver_asprintf"; then
95 AC_MSG_CHECKING([for va_copy])
96 AC_LINK_IFELSE([AC_LANG_PROGRAM([
102 [AC_DEFINE(HAVE_VA_COPY, 1)
103 AC_MSG_RESULT(va_copy)],
104 [AC_LINK_IFELSE([AC_LANG_PROGRAM([
110 [AC_DEFINE(HAVE___VA_COPY, 1)
111 AC_MSG_RESULT(__va_copy)],
113 AC_MSG_ERROR([Your system lacks asprintf() and va_copy()])])
116 AC_SUBST(SYMVER_TIME, $symver_time)
117 AC_SUBST(SYMVER_GETLINE, $symver_getline)
118 AC_SUBST(SYMVER_ASPRINTF, $symver_asprintf)
120 AS_COMPILER_FLAGS(CFLAGS,
123 -Wno-missing-field-initializers
125 -Wno-unused-parameter
126 -Werror=pointer-to-int-cast
127 -Wdeclaration-after-statement
128 -Werror-implicit-function-declaration
132 -Wmissing-declarations
133 -Wmissing-include-dirs
142 [ --disable-nls do not use Native Language Support],
143 [USE_NLS=$enableval], [USE_NLS=yes])
145 if test "$USE_NLS" = "yes"; then
146 AC_PATH_PROG(MSGFMT, msgfmt)
147 if test "$MSGFMT" = ""; then
148 AC_ERROR([msgfmt could not be found. Try configuring with --disable-nls])
152 if test "$USE_NLS" = "yes"; then
153 AC_MSG_CHECKING([for functional NLS support])
154 AC_LINK_IFELSE([AC_LANG_PROGRAM([
156 #include <libintl.h>],[
157 setlocale(LC_ALL, "");
158 bindtextdomain("openconnect", "/tmp");
159 (void)dgettext("openconnect", "foo");])],
160 [AC_MSG_RESULT(yes)],
163 AC_LINK_IFELSE([AC_LANG_PROGRAM([
165 #include <libintl.h>],[
166 setlocale(LC_ALL, "");
167 bindtextdomain("openconnect", "/tmp");
168 (void)dgettext("openconnect", "foo");])],
169 [AC_MSG_RESULT(yes (with -lintl))]
176 if test "$USE_NLS" = "yes"; then
178 AC_DEFINE(ENABLE_NLS, 1)
180 AM_CONDITIONAL(USE_NLS, [test "$USE_NLS" = "yes"])
182 # We will use GnuTLS if it's requested, and if GnuTLS doesn't have DTLS
183 # support then we'll *also* use OpenSSL for that, but it appears *only*
184 # only in the openconnect executable and not the library (hence shouldn't
185 # be a problem for GPL'd programs using libopenconnect).
187 # If built with --with-gnutls --without-openssl then we'll even eschew
188 # OpenSSL for DTLS support and will build without any DTLS support at all
189 # if GnuTLS cannot manage.
191 # The default (for now) is to use OpenSSL for everything.
193 AC_ARG_WITH([gnutls],
194 AS_HELP_STRING([--with-gnutls],
195 [Use GnuTLS instead of OpenSSL (EXPERIMENTAL)]))
196 AC_ARG_WITH([openssl],
197 AS_HELP_STRING([--with-openssl],
198 [Location of OpenSSL build dir]))
201 if test "$with_gnutls" = "yes"; then
202 PKG_CHECK_MODULES(GNUTLS, gnutls)
203 if ! $PKG_CONFIG --atleast-version=2.12.16 gnutls; then
204 AC_MSG_ERROR([Your GnuTLS is too old. At least v2.12.16 is required])
207 LIBS="$LIBS $GNUTLS_LIBS"
208 AC_CHECK_FUNC(gnutls_certificate_set_x509_system_trust,
209 [AC_DEFINE(HAVE_GNUTLS_CERTIFICATE_SET_X509_SYSTEM_TRUST, 1)], [])
210 AC_CHECK_FUNC(gnutls_pkcs12_simple_parse,
211 [AC_DEFINE(HAVE_GNUTLS_PKCS12_SIMPLE_PARSE, 1)], [])
212 AC_CHECK_FUNC(gnutls_certificate_set_key,
213 [AC_DEFINE(HAVE_GNUTLS_CERTIFICATE_SET_KEY, 1)], [])
214 if test "$with_openssl" = "" || test "$with_openssl" = "no"; then
215 AC_CHECK_FUNC(gnutls_session_set_premaster,
216 [have_gnutls_dtls=yes], [have_gnutls_dtls=no])
220 if test "$have_gnutls_dtls" = "yes"; then
221 if test "$with_openssl" = "" || test "$with_openssl" = "no"; then
222 # They either said no OpenSSL or didn't specify, and GnuTLS can
223 # do DTLS, so just use GnuTLS.
224 AC_DEFINE(HAVE_GNUTLS_SESSION_SET_PREMASTER, 1)
228 # They specifically asked for OpenSSL, so use it for DTLS even
229 # though GnuTLS could manage.
233 if test "$with_openssl" = "no"; then
234 # GnuTLS doesn't have DTLS, but they don't want OpenSSL. So build
235 # without DTLS support at all.
238 # GnuTLS doesn't have DTLS so use OpenSSL for it, but GnuTLS for
239 # the TCP connection (and thus in the library).
243 AC_CHECK_FUNC(gnutls_pkcs11_add_provider,
244 [PKG_CHECK_MODULES(P11KIT, p11-kit-1, [AC_DEFINE(HAVE_P11KIT)
245 AC_SUBST(P11KIT_PC, p11-kit-1)], [:])], [])
246 LIBS="$oldlibs -ltspi"
247 AC_MSG_CHECKING([for tss library])
248 AC_LINK_IFELSE([AC_LANG_PROGRAM([
249 #include <trousers/tss.h>
250 #include <trousers/trousers.h>],[
251 int err = Tspi_Context_Create((void *)0);
252 Trspi_Error_String(err);])],
254 AC_SUBST([TSS_LIBS], [-ltspi])
255 AC_SUBST([TSS_CFLAGS], [])
256 AC_DEFINE(HAVE_TROUSERS, 1)],
259 elif test "$with_gnutls" != "" && test "$with_gnutls" != "no"; then
260 AC_MSG_ERROR([Values other than 'yes' or 'no' for --with-gnutls are not supported])
262 if test "$with_openssl" = "yes" || test "$with_openssl" = "" || test "$ssl_library" = "both"; then
263 PKG_CHECK_MODULES(OPENSSL, openssl, [],
265 LIBS="$LIBS -lssl -lcrypto"
266 AC_MSG_CHECKING([for OpenSSL without pkg-config])
267 AC_LINK_IFELSE([AC_LANG_PROGRAM([
268 #include <openssl/ssl.h>
269 #include <openssl/err.h>],[
272 SSL_load_error_strings();
273 OpenSSL_add_all_algorithms();])],
275 AC_SUBST([OPENSSL_LIBS], ["-lssl -lcrypto"])
276 AC_SUBST([OPENSSL_CFLAGS], [])],
278 if test "$ssl_library" = "both"; then
279 ssl_library="gnutls";
281 AC_ERROR([Could not build against OpenSSL]);
284 if test "$ssl_library" != "both" && test "$ssl_library" != "gnutls"; then
287 elif test "$with_openssl" != "no" ; then
288 OPENSSL_CFLAGS="-I${with_openssl}/include"
289 OPENSSL_LIBS="${with_openssl}/libssl.a ${with_openssl}/libcrypto.a -ldl -lz"
290 AC_SUBST(OPENSSL_CFLAGS)
291 AC_SUBST(OPENSSL_LIBS)
294 AC_DEFINE(DTLS_OPENSSL, 1)
295 if test "$ssl_library" != "both"; then
300 case "$ssl_library" in
302 AC_DEFINE(OPENCONNECT_GNUTLS, 1)
303 AC_DEFINE(DTLS_GNUTLS, 1)
304 AC_SUBST(SSL_LIBRARY, [gnutls])
305 AC_SUBST(SSL_LIBS, ['$(GNUTLS_LIBS)'])
306 AC_SUBST(SSL_CFLAGS, ['$(GNUTLS_CFLAGS)'])
309 AC_DEFINE(OPENCONNECT_OPENSSL, 1)
310 AC_DEFINE(DTLS_OPENSSL, 1)
311 AC_SUBST(SSL_LIBRARY, [openssl])
312 AC_SUBST(SSL_LIBS, ['$(OPENSSL_LIBS)'])
313 AC_SUBST(SSL_CFLAGS, ['$(OPENSSL_CFLAGS)'])
314 AC_SUBST(SYMVER_PRINT_ERR, ["openconnect_print_err_cb;"])
317 # GnuTLS for TCP, OpenSSL for DTLS
318 AC_DEFINE(OPENCONNECT_GNUTLS, 1)
319 AC_DEFINE(DTLS_OPENSSL, 1)
320 AC_SUBST(SSL_LIBRARY, [gnutls])
321 AC_SUBST(SSL_LIBS, ['$(GNUTLS_LIBS)'])
322 AC_SUBST(SSL_CFLAGS, ['$(GNUTLS_CFLAGS)'])
323 AC_SUBST(DTLS_SSL_LIBS, ['$(OPENSSL_LIBS)'])
324 AC_SUBST(DTLS_SSL_CFLAGS, ['$(OPENSSL_CFLAGS)'])
325 AC_SUBST(SYMVER_PRINT_ERR, ["openconnect_print_err_cb;"])
328 AC_MSG_ERROR([Neither OpenSSL nor GnuTLS selected for SSL.])
331 AM_CONDITIONAL(OPENCONNECT_GNUTLS, [ test "$ssl_library" != "openssl" ])
332 AM_CONDITIONAL(OPENCONNECT_OPENSSL, [ test "$ssl_library" = "openssl" ])
334 # Needs to happen after we default to static/shared libraries based on OpenSSL
337 # Ick. This seems like it's likely to be very fragile, but I can't see a better
338 # way. I shall console myself with the observation that the failure mode isn't
339 # particularly horrible — you just don't get symbol versioning if it fails.
341 if test "$enable_shared" = "yes" ; then
342 AC_MSG_CHECKING([if library symbol versioning is available]);
343 echo 'FOO { global: foo; local: *; };' > conftest.map
344 echo 'int foo = 0;' > conftest.$ac_ext
345 if AC_TRY_EVAL(ac_compile); then
347 libobjs=conftest.$ac_objext
348 if AC_TRY_EVAL(archive_cmds ${wl}--version-script ${wl}conftest.map); then
349 AC_SUBST(VERSION_SCRIPT_ARG, [--version-script])
350 symvers="yes (with --version-script)"
351 elif AC_TRY_EVAL(archive_cmds ${wl}-M ${wl}conftest.map); then
352 AC_SUBST(VERSION_SCRIPT_ARG, [-M])
353 symvers="yes (with -M)"
356 AC_MSG_RESULT(${symvers})
358 AM_CONDITIONAL(HAVE_SYMBOL_VERSIONING, [test "${symvers}" != "no"])
360 PKG_CHECK_MODULES(LIBXML2, libxml-2.0)
362 PKG_CHECK_MODULES(ZLIB, zlib, [AC_SUBST(ZLIB_PC, [zlib])],
365 AC_MSG_CHECKING([for zlib without pkg-config])
366 AC_LINK_IFELSE([AC_LANG_PROGRAM([
369 deflateInit2(&zs, Z_DEFAULT_COMPRESSION, Z_DEFLATED,
370 -12, 9, Z_DEFAULT_STRATEGY);])],
372 AC_SUBST([ZLIB_LIBS], [-lz])
373 AC_SUBST([ZLIB_CFLAGS], [])],
375 AC_ERROR([Could not build against zlib])])
378 PKG_CHECK_MODULES(LIBPROXY, libproxy-1.0,
379 [AC_SUBST(LIBPROXY_PC, libproxy-1.0)
380 AC_DEFINE([LIBPROXY_HDR], ["proxy.h"])
383 dnl Libproxy *can* exist without a .pc file, and its header may be called
384 dnl libproxy.h in that case.
385 if (test "$libproxy_pkg" = "no"); then
386 AC_MSG_CHECKING([for libproxy])
389 AC_LINK_IFELSE([AC_LANG_PROGRAM([#include <libproxy.h>],
390 [(void)px_proxy_factory_new();])],
391 [AC_MSG_RESULT(yes (with libproxy.h))
392 AC_DEFINE([LIBPROXY_HDR], ["libproxy.h"])
393 AC_SUBST([LIBPROXY_LIBS], [-lproxy])],
394 [AC_LINK_IFELSE([AC_LANG_PROGRAM([#include <proxy.h>],
395 [(void)px_proxy_factory_new();])],
396 [AC_MSG_RESULT(yes (with proxy.h))
397 AC_DEFINE([LIBPROXY_HDR], ["proxy.h"])
398 AC_SUBST([LIBPROXY_LIBS], [-lproxy])],
399 [AC_MSG_RESULT(no)])])
403 AC_CHECK_HEADER([if_tun.h],
404 [AC_DEFINE([IF_TUN_HDR], ["if_tun.h"])],
405 [AC_CHECK_HEADER([linux/if_tun.h],
406 [AC_DEFINE([IF_TUN_HDR], ["linux/if_tun.h"])],
407 [AC_CHECK_HEADER([net/if_tun.h],
408 [AC_DEFINE([IF_TUN_HDR], ["net/if_tun.h"])],
409 [AC_CHECK_HEADER([net/tun/if_tun.h],
410 [AC_DEFINE([IF_TUN_HDR], ["net/tun/if_tun.h"])])])])])
412 if test "$ssl_library" = "openssl" || test "$ssl_library" = "both"; then
414 LIBS="$LIBS $OPENSSL_LIBS"
416 if test "$ssl_library" = "openssl"; then
417 AC_MSG_CHECKING([for ENGINE_by_id() in OpenSSL])
418 AC_LINK_IFELSE([AC_LANG_PROGRAM([#include <openssl/engine.h>],
419 [ENGINE_by_id("foo");])],
421 AC_DEFINE(HAVE_ENGINE, [1], [OpenSSL has ENGINE support])],
423 AC_MSG_NOTICE([Building without OpenSSL TPM ENGINE support])])
426 AC_MSG_CHECKING([for dtls1_stop_timer() in OpenSSL])
427 AC_LINK_IFELSE([AC_LANG_PROGRAM([#include <openssl/ssl.h>
429 extern void dtls1_stop_timer(SSL *);],
430 [dtls1_stop_timer(NULL);])],
432 AC_DEFINE(HAVE_DTLS1_STOP_TIMER, [1], [OpenSSL has dtls1_stop_timer() function])],
437 AC_PATH_PROG(PYTHON, [python], [], $PATH:/bin:/usr/bin)
438 if (test -n "${ac_cv_path_PYTHON}"); then
439 AC_SUBST(PYTHON, ${ac_cv_path_PYTHON})
441 AC_MSG_NOTICE([Python not found; not building HTML pages])
443 AM_CONDITIONAL(BUILD_WWW, [test -n "${ac_cv_path_PYTHON}"])
445 AC_SUBST([CONFIG_STATUS_DEPENDENCIES], ['$(top_srcdir)/po/LINGUAS $(top_srcdir)/openconnect.h ${top_srcdir}/libopenconnect.map.in'])
446 RAWLINGUAS=`sed -e "/^#/d" -e "s/#.*//" "${srcdir}/po/LINGUAS"`
448 LINGUAS=`echo $RAWLINGUAS`
451 APIMAJOR="`sed -n 's/^#define OPENCONNECT_API_VERSION_MAJOR \(.*\)/\1/p' ${srcdir}/openconnect.h`"
452 APIMINOR="`sed -n 's/^#define OPENCONNECT_API_VERSION_MINOR \(.*\)/\1/p' ${srcdir}/openconnect.h`"
456 # We want version.c to depend on the files that would affect the
457 # output of version.sh. But we cannot assume that they'll exist,
458 # and we cannot use $(wildcard) in a non-GNU makefile. So we just
459 # depend on the files which happen to exist at configure time.
461 for a in ${srcdir}/.git/index ${srcdir}/.git/packed-refs \
462 ${srcdir}/.git/refs/tags ${srcdir}/.git/HEAD; do
464 GITVERSIONDEPS="$GITVERSIONDEPS $a"
467 AC_SUBST(GITVERSIONDEPS)
469 AC_OUTPUT(Makefile openconnect.pc po/Makefile www/Makefile libopenconnect.map \
470 openconnect.8 www/styles/Makefile www/inc/Makefile www/images/Makefile)