configure.ac

   1 #                                               -*- Autoconf -*-
   2 # Process this file with autoconf to produce a configure script.
   3 AC_PREREQ(2.56)
   4 sinclude(acx_nlnetlabs.m4)
   5 sinclude(ax_pthread.m4)
   6 sinclude(acx_python.m4)
   7 sinclude(ac_pkg_swig.m4)
   8 sinclude(dnstap/dnstap.m4)
   9 sinclude(dnscrypt/dnscrypt.m4)
  10
  11 # must be numbers. ac_defun because of later processing
  12 m4_define([VERSION_MAJOR],[1])
  13 m4_define([VERSION_MINOR],[12])
  14 m4_define([VERSION_MICRO],[0])
  15 AC_INIT(unbound, m4_defn([VERSION_MAJOR]).m4_defn([VERSION_MINOR]).m4_defn([VERSION_MICRO]), unbound-bugs@nlnetlabs.nl or https://github.com/NLnetLabs/unbound/issues, unbound)
  16 AC_SUBST(UNBOUND_VERSION_MAJOR, [VERSION_MAJOR])
  17 AC_SUBST(UNBOUND_VERSION_MINOR, [VERSION_MINOR])
  18 AC_SUBST(UNBOUND_VERSION_MICRO, [VERSION_MICRO])
  19
  20 LIBUNBOUND_CURRENT=9
  21 LIBUNBOUND_REVISION=10
  22 LIBUNBOUND_AGE=1
  23 # 1.0.0 had 0:12:0
  24 # 1.0.1 had 0:13:0
  25 # 1.0.2 had 0:14:0
  26 # 1.1.0 had 0:15:0
  27 # 1.1.1 had 0:16:0
  28 # 1.2.0 had 0:17:0
  29 # 1.2.1 had 0:18:0
  30 # 1.3.0 had 1:0:0   # ub_cancel and -export-symbols.
  31 # 1.3.1 had 1:1:0
  32 # 1.3.2 had 1:2:0
  33 # 1.3.3 had 1:3:0
  34 # 1.3.4 had 1:4:0
  35 # 1.4.0-snapshots had 1:5:0
  36 # 1.4.0 had 1:5:0 (not 2:0:0)   # ub_result.why_bogus
  37 # 1.4.1 had 2:1:0
  38 # 1.4.2 had 2:2:0
  39 # 1.4.3 had 2:3:0
  40 # 1.4.4 had 2:4:0
  41 # 1.4.5 had 2:5:0
  42 # 1.4.6 had 2:6:0
  43 # 1.4.7 had 2:7:0
  44 # 1.4.8 had 2:8:0
  45 # 1.4.9 had 2:9:0
  46 # 1.4.10 had 2:10:0
  47 # 1.4.11 had 2:11:0
  48 # 1.4.12 had 2:12:0
  49 # 1.4.13 had 2:13:0
  50 # and 1.4.13p1 and 1.4.13.p2
  51 # 1.4.14 had 2:14:0
  52 # 1.4.15 had 3:0:1 # adds ub_version()
  53 # 1.4.16 had 3:1:1
  54 # 1.4.17 had 3:2:1
  55 # 1.4.18 had 3:3:1
  56 # 1.4.19 had 3:4:1
  57 # 1.4.20 had 4:0:2 # adds libunbound.ttl # but shipped 3:5:1
  58 # 1.4.21 had 4:1:2
  59 # 1.4.22 had 4:1:2
  60 # 1.5.0 had 5:3:3 # adds ub_ctx_add_ta_autr
  61 # 1.5.1 had 5:3:3
  62 # 1.5.2 had 5:5:3
  63 # 1.5.3 had 5:6:3
  64 # 1.5.4 had 5:7:3
  65 # 1.5.5 had 5:8:3
  66 # 1.5.6 had 5:9:3
  67 # 1.5.7 had 5:10:3
  68 # 1.5.8 had 6:0:4 # adds ub_ctx_set_stub
  69 # 1.5.9 had 6:1:4
  70 # 1.5.10 had 6:2:4
  71 # 1.6.0 had 6:3:4
  72 # 1.6.1 had 7:0:5 # ub_callback_t typedef renamed to ub_callback_type
  73 # 1.6.2 had 7:1:5
  74 # 1.6.3 had 7:2:5
  75 # 1.6.4 had 7:3:5
  76 # 1.6.5 had 7:4:5
  77 # 1.6.6 had 7:5:5
  78 # 1.6.7 had 7:6:5
  79 # 1.6.8 had 7:7:5
  80 # 1.7.0 had 7:8:5
  81 # 1.7.1 had 7:9:5
  82 # 1.7.2 had 7:10:5
  83 # 1.7.3 had 7:11:5
  84 # 1.8.0 had 8:0:0 # changes the event callback function signature
  85 # 1.8.1 had 8:1:0
  86 # 1.8.2 had 8:2:0
  87 # 1.8.3 had 8:3:0
  88 # 1.9.0 had 9:0:1 # add ub_ctx_set_tls
  89 # 1.9.1 had 9:1:1
  90 # 1.9.2 had 9:2:1
  91 # 1.9.3 had 9:3:1
  92 # 1.9.4 had 9:4:1
  93 # 1.9.5 had 9:5:1
  94 # 1.9.6 had 9:6:1
  95 # 1.10.0 had 9:7:1
  96 # 1.10.1 had 9:8:1
  97 # 1.11.0 had 9:9:1
  98 # 1.12.0 had 9:10:1
  99
 100 #   Current  -- the number of the binary API that we're implementing
 101 #   Revision -- which iteration of the implementation of the binary
 102 #               API are we supplying?
 103 #   Age      -- How many previous binary API versions do we also
 104 #               support?
 105 #
 106 # If we release a new version that does not change the binary API,
 107 # increment Revision.
 108 #
 109 # If we release a new version that changes the binary API, but does
 110 # not break programs compiled against the old binary API, increment
 111 # Current and Age.  Set Revision to 0, since this is the first
 112 # implementation of the new API.
 113 #
 114 # Otherwise, we're changing the binary API and breaking backward
 115 # compatibility with old binaries.  Increment Current.  Set Age to 0,
 116 # since we're backward compatible with no previous APIs.  Set Revision
 117 # to 0 too.
 118 AC_SUBST(LIBUNBOUND_CURRENT)
 119 AC_SUBST(LIBUNBOUND_REVISION)
 120 AC_SUBST(LIBUNBOUND_AGE)
 121
 122
 123 cmdln="`echo $@ | sed -e 's/\\\\/\\\\\\\\/g' | sed -e 's/"/\\\\"/'g`"
 124 AC_DEFINE_UNQUOTED(CONFCMDLINE, ["$cmdln"], [Command line arguments used with configure])
 125
 126 CFLAGS="$CFLAGS"
 127 AC_AIX
 128 if test "$ac_cv_header_minix_config_h" = "yes"; then
 129         AC_DEFINE(_NETBSD_SOURCE,1, [Enable for compile on Minix])
 130 fi
 131
 132 dnl
 133 dnl By default set prefix to /usr/local
 134 dnl
 135 case "$prefix" in
 136         NONE)
 137                 prefix="/usr/local"
 138         ;;
 139 esac
 140 case "$exec_prefix" in
 141         NONE)
 142                 exec_prefix="$prefix"
 143         ;;
 144 esac
 145
 146 # are we on MinGW?
 147 if uname -s 2>&1 | grep MINGW32 >/dev/null; then on_mingw="yes"
 148 else
 149         if echo $host $target | grep mingw32 >/dev/null; then on_mingw="yes"
 150         else on_mingw="no"; fi
 151 fi
 152
 153 #
 154 # Determine configuration file
 155 # the eval is to evaluate shell expansion twice
 156 UNBOUND_SBIN_DIR=`eval echo "${sbindir}"`
 157 AC_SUBST(UNBOUND_SBIN_DIR)
 158 UNBOUND_SYSCONF_DIR=`eval echo "${sysconfdir}"`
 159 AC_SUBST(UNBOUND_SYSCONF_DIR)
 160 UNBOUND_LOCALSTATE_DIR=`eval echo "${localstatedir}"`
 161 AC_SUBST(UNBOUND_LOCALSTATE_DIR)
 162 if test $on_mingw = "no"; then
 163   ub_conf_file=`eval echo "${sysconfdir}/unbound/unbound.conf"`
 164 else
 165   ub_conf_file="C:\\Program Files\\Unbound\\service.conf"
 166 fi
 167 AC_ARG_WITH([conf_file],
 168         AC_HELP_STRING([--with-conf-file=path],
 169         [Pathname to the Unbound configuration file]),
 170         [ub_conf_file="$withval"])
 171 AC_SUBST(ub_conf_file)
 172 ACX_ESCAPE_BACKSLASH($ub_conf_file, hdr_config)
 173 AC_DEFINE_UNQUOTED(CONFIGFILE, ["$hdr_config"], [Pathname to the Unbound configuration file])
 174 ub_conf_dir=`AS_DIRNAME(["$ub_conf_file"])`
 175 AC_SUBST(ub_conf_dir)
 176
 177 # Determine run, chroot directory and pidfile locations
 178 AC_ARG_WITH(run-dir,
 179     AC_HELP_STRING([--with-run-dir=path],
 180     [set default directory to chdir to (by default dir part of cfg file)]),
 181     UNBOUND_RUN_DIR="$withval",
 182 if test $on_mingw = no; then
 183     UNBOUND_RUN_DIR=`dirname "$ub_conf_file"`
 184 else
 185     UNBOUND_RUN_DIR=""
 186 fi
 187 )
 188 AC_SUBST(UNBOUND_RUN_DIR)
 189 ACX_ESCAPE_BACKSLASH($UNBOUND_RUN_DIR, hdr_run)
 190 AC_DEFINE_UNQUOTED(RUN_DIR, ["$hdr_run"], [Directory to chdir to])
 191
 192 AC_ARG_WITH(chroot-dir,
 193     AC_HELP_STRING([--with-chroot-dir=path],
 194     [set default directory to chroot to (by default same as run-dir)]),
 195     UNBOUND_CHROOT_DIR="$withval",
 196 if test $on_mingw = no; then
 197     UNBOUND_CHROOT_DIR="$UNBOUND_RUN_DIR"
 198 else
 199     UNBOUND_CHROOT_DIR=""
 200 fi
 201 )
 202 AC_SUBST(UNBOUND_CHROOT_DIR)
 203 ACX_ESCAPE_BACKSLASH($UNBOUND_CHROOT_DIR, hdr_chroot)
 204 AC_DEFINE_UNQUOTED(CHROOT_DIR, ["$hdr_chroot"], [Directory to chroot to])
 205
 206 AC_ARG_WITH(share-dir,
 207     AC_HELP_STRING([--with-share-dir=path],
 208     [set default directory with shared data (by default same as share/unbound)]),
 209     UNBOUND_SHARE_DIR="$withval",
 210     UNBOUND_SHARE_DIR="$UNBOUND_RUN_DIR")
 211 AC_SUBST(UNBOUND_SHARE_DIR)
 212 AC_DEFINE_UNQUOTED(SHARE_DIR, ["$UNBOUND_SHARE_DIR"], [Shared data])
 213
 214 AC_ARG_WITH(pidfile,
 215     AC_HELP_STRING([--with-pidfile=filename],
 216     [set default pathname to unbound pidfile (default run-dir/unbound.pid)]),
 217     UNBOUND_PIDFILE="$withval",
 218 if test $on_mingw = no; then
 219     UNBOUND_PIDFILE="$UNBOUND_RUN_DIR/unbound.pid"
 220 else
 221     UNBOUND_PIDFILE=""
 222 fi
 223 )
 224 AC_SUBST(UNBOUND_PIDFILE)
 225 ACX_ESCAPE_BACKSLASH($UNBOUND_PIDFILE, hdr_pid)
 226 AC_DEFINE_UNQUOTED(PIDFILE, ["$hdr_pid"], [default pidfile location])
 227
 228 AC_ARG_WITH(rootkey-file,
 229     AC_HELP_STRING([--with-rootkey-file=filename],
 230     [set default pathname to root key file (default run-dir/root.key). This file is read and written.]),
 231     UNBOUND_ROOTKEY_FILE="$withval",
 232 if test $on_mingw = no; then
 233     UNBOUND_ROOTKEY_FILE="$UNBOUND_RUN_DIR/root.key"
 234 else
 235     UNBOUND_ROOTKEY_FILE="C:\\Program Files\\Unbound\\root.key"
 236 fi
 237 )
 238 AC_SUBST(UNBOUND_ROOTKEY_FILE)
 239 ACX_ESCAPE_BACKSLASH($UNBOUND_ROOTKEY_FILE, hdr_rkey)
 240 AC_DEFINE_UNQUOTED(ROOT_ANCHOR_FILE, ["$hdr_rkey"], [default rootkey location])
 241
 242 AC_ARG_WITH(rootcert-file,
 243     AC_HELP_STRING([--with-rootcert-file=filename],
 244     [set default pathname to root update certificate file (default run-dir/icannbundle.pem).  This file need not exist if you are content with the builtin.]),
 245     UNBOUND_ROOTCERT_FILE="$withval",
 246 if test $on_mingw = no; then
 247     UNBOUND_ROOTCERT_FILE="$UNBOUND_RUN_DIR/icannbundle.pem"
 248 else
 249     UNBOUND_ROOTCERT_FILE="C:\\Program Files\\Unbound\\icannbundle.pem"
 250 fi
 251 )
 252 AC_SUBST(UNBOUND_ROOTCERT_FILE)
 253 ACX_ESCAPE_BACKSLASH($UNBOUND_ROOTCERT_FILE, hdr_rpem)
 254 AC_DEFINE_UNQUOTED(ROOT_CERT_FILE, ["$hdr_rpem"], [default rootcert location])
 255
 256 AC_ARG_WITH(username,
 257     AC_HELP_STRING([--with-username=user],
 258     [set default user that unbound changes to (default user is unbound)]),
 259     UNBOUND_USERNAME="$withval",
 260     UNBOUND_USERNAME="unbound")
 261 AC_SUBST(UNBOUND_USERNAME)
 262 AC_DEFINE_UNQUOTED(UB_USERNAME, ["$UNBOUND_USERNAME"], [default username])
 263
 264 AC_DEFINE(WINVER, 0x0502, [the version of the windows API enabled])
 265 ACX_RSRC_VERSION(wnvs)
 266 AC_DEFINE_UNQUOTED(RSRC_PACKAGE_VERSION, [$wnvs], [version number for resource files])
 267
 268 # Checks for typedefs, structures, and compiler characteristics.
 269 AC_C_CONST
 270 AC_LANG_C
 271 # allow user to override the -g -O2 flags.
 272 default_cflags=no
 273 if test "x$CFLAGS" = "x" ; then
 274 ACX_CHECK_COMPILER_FLAG(g, [CFLAGS="$CFLAGS -g"])
 275 ACX_CHECK_COMPILER_FLAG(O2, [CFLAGS="$CFLAGS -O2"])
 276 default_cflags=yes
 277 fi
 278 AC_PROG_CC
 279 ACX_DEPFLAG
 280 ACX_DETERMINE_EXT_FLAGS_UNBOUND
 281
 282 # debug mode flags warnings
 283 AC_ARG_ENABLE(checking, AC_HELP_STRING([--enable-checking], [Enable warnings, asserts, makefile-dependencies]))
 284 AC_ARG_ENABLE(debug, AC_HELP_STRING([--enable-debug], [same as enable-checking]))
 285 if test "$enable_debug" = "yes"; then debug_enabled="$enable_debug";
 286 else debug_enabled="$enable_checking"; fi
 287 AC_SUBST(debug_enabled)
 288 case "$debug_enabled" in
 289         yes)
 290                 ACX_CHECK_COMPILER_FLAG(W, [CFLAGS="$CFLAGS -W"])
 291                 ACX_CHECK_COMPILER_FLAG(Wall, [CFLAGS="$CFLAGS -Wall"])
 292                 ACX_CHECK_COMPILER_FLAG(Wextra, [CFLAGS="$CFLAGS -Wextra"])
 293                 ACX_CHECK_COMPILER_FLAG(Wdeclaration-after-statement, [CFLAGS="$CFLAGS -Wdeclaration-after-statement"])
 294                 AC_DEFINE([UNBOUND_DEBUG], [], [define this to enable debug checks.])
 295                 ;;
 296         no|*)
 297                 # nothing to do.
 298                 ;;
 299 esac
 300 if test "$default_cflags" = "yes"; then
 301         # only when CFLAGS was "" at the start, if the users wants to
 302         # override we shouldn't add default cflags, because they wouldn't
 303         # be able to turn off these options and set the CFLAGS wanted.
 304         ACX_CHECK_FLTO
 305         ACX_CHECK_PIE
 306         ACX_CHECK_RELRO_NOW
 307 fi
 308
 309 AC_C_INLINE
 310 ACX_CHECK_FORMAT_ATTRIBUTE
 311 ACX_CHECK_UNUSED_ATTRIBUTE
 312
 313 AC_DEFUN([CHECK_WEAK_ATTRIBUTE],
 314 [AC_REQUIRE([AC_PROG_CC])
 315 AC_MSG_CHECKING(whether the C compiler (${CC-cc}) accepts the "weak" attribute)
 316 AC_CACHE_VAL(ac_cv_c_weak_attribute,
 317 [ac_cv_c_weak_attribute=no
 318 AC_TRY_COMPILE(
 319 [ #include <stdio.h>
 320 __attribute__((weak)) void f(int x) { printf("%d", x); }
 321 ], [
 322    f(1);
 323 ],
 324 [ac_cv_c_weak_attribute="yes"],
 325 [ac_cv_c_weak_attribute="no"])
 326 ])
 327
 328 AC_MSG_RESULT($ac_cv_c_weak_attribute)
 329 if test $ac_cv_c_weak_attribute = yes; then
 330   AC_DEFINE(HAVE_ATTR_WEAK, 1, [Whether the C compiler accepts the "weak" attribute])
 331   AC_DEFINE(ATTR_WEAK, [__attribute__((weak))], [apply the weak attribute to a symbol])
 332 fi
 333 ])dnl End of CHECK_WEAK_ATTRIBUTE
 334
 335 CHECK_WEAK_ATTRIBUTE
 336
 337 AC_DEFUN([CHECK_NORETURN_ATTRIBUTE],
 338 [AC_REQUIRE([AC_PROG_CC])
 339 AC_MSG_CHECKING(whether the C compiler (${CC-cc}) accepts the "noreturn" attribute)
 340 AC_CACHE_VAL(ac_cv_c_noreturn_attribute,
 341 [ac_cv_c_noreturn_attribute=no
 342 AC_TRY_COMPILE(
 343 [ #include <stdio.h>
 344 __attribute__((noreturn)) void f(int x) { printf("%d", x); }
 345 ], [
 346    f(1);
 347 ],
 348 [ac_cv_c_noreturn_attribute="yes"],
 349 [ac_cv_c_noreturn_attribute="no"])
 350 ])
 351
 352 AC_MSG_RESULT($ac_cv_c_noreturn_attribute)
 353 if test $ac_cv_c_noreturn_attribute = yes; then
 354   AC_DEFINE(HAVE_ATTR_NORETURN, 1, [Whether the C compiler accepts the "noreturn" attribute])
 355   AC_DEFINE(ATTR_NORETURN, [__attribute__((__noreturn__))], [apply the noreturn attribute to a function that exits the program])
 356 fi
 357 ])dnl End of CHECK_NORETURN_ATTRIBUTE
 358
 359 CHECK_NORETURN_ATTRIBUTE
 360
 361 if test "$srcdir" != "."; then
 362         CPPFLAGS="$CPPFLAGS -I$srcdir"
 363 fi
 364
 365 AC_DEFUN([ACX_YYLEX_DESTROY], [
 366         AC_MSG_CHECKING([for yylex_destroy])
 367         if echo %% | $LEX -t 2>&1 | grep yylex_destroy >/dev/null 2>&1; then
 368                 AC_DEFINE(LEX_HAS_YYLEX_DESTROY, 1, [if lex has yylex_destroy])
 369                 AC_MSG_RESULT(yes)
 370         else AC_MSG_RESULT(no);
 371                 LEX=":"
 372         fi
 373 ])
 374
 375 AC_DEFUN([ACX_YYLEX_OPTION], [
 376         AC_MSG_CHECKING([for lex %option])
 377         if cat <<EOF | $LEX -t 2>&1 | grep yy_delete_buffer >/dev/null 2>&1; then
 378 %option nounput
 379 %%
 380 EOF
 381                 AC_MSG_RESULT(yes)
 382         else AC_MSG_RESULT(no);
 383                 LEX=":"
 384         fi
 385 ])
 386
 387 AC_PROG_LEX
 388 if test "$LEX" != "" -a "$LEX" != ":"; then
 389 ACX_YYLEX_DESTROY
 390 fi
 391 if test "$LEX" != "" -a "$LEX" != ":"; then
 392 ACX_YYLEX_OPTION
 393 fi
 394 AC_PROG_YACC
 395 AC_CHECK_PROG(doxygen, doxygen, doxygen)
 396 AC_CHECK_TOOL(STRIP, strip)
 397 ACX_LIBTOOL_C_ONLY
 398
 399 PKG_PROG_PKG_CONFIG
 400
 401 # Checks for header files.
 402 AC_CHECK_HEADERS([stdarg.h stdbool.h netinet/in.h netinet/tcp.h sys/param.h sys/select.h sys/socket.h sys/un.h sys/uio.h sys/resource.h arpa/inet.h syslog.h netdb.h sys/wait.h pwd.h glob.h grp.h login_cap.h winsock2.h ws2tcpip.h endian.h sys/endian.h libkern/OSByteOrder.h sys/ipc.h sys/shm.h ifaddrs.h net/if.h],,, [AC_INCLUDES_DEFAULT])
 403
 404 # Check for Apple header. This uncovers TARGET_OS_IPHONE, TARGET_OS_TV or TARGET_OS_WATCH
 405 AC_CHECK_HEADERS([TargetConditionals.h])
 406
 407 # check for types.
 408 # Using own tests for int64* because autoconf builtin only give 32bit.
 409 AC_CHECK_TYPE(int8_t, signed char)
 410 AC_CHECK_TYPE(int16_t, short)
 411 AC_CHECK_TYPE(int32_t, int)
 412 AC_CHECK_TYPE(int64_t, long long)
 413 AC_CHECK_TYPE(uint8_t, unsigned char)
 414 AC_CHECK_TYPE(uint16_t, unsigned short)
 415 AC_CHECK_TYPE(uint32_t, unsigned int)
 416 AC_CHECK_TYPE(uint64_t, unsigned long long)
 417 AC_TYPE_SIZE_T
 418 AC_CHECK_TYPE(ssize_t, int)
 419 AC_TYPE_UID_T
 420 AC_TYPE_PID_T
 421 AC_TYPE_OFF_T
 422 ACX_TYPE_U_CHAR
 423 ACX_TYPE_RLIM_T
 424 ACX_TYPE_SOCKLEN_T
 425 ACX_TYPE_IN_ADDR_T
 426 ACX_TYPE_IN_PORT_T
 427 ACX_CHECK_MEMCMP_SIGNED
 428
 429 AC_CHECK_SIZEOF(time_t,,[
 430 AC_INCLUDES_DEFAULT
 431 #ifdef TIME_WITH_SYS_TIME
 432 # include <sys/time.h>
 433 # include <time.h>
 434 #else
 435 # ifdef HAVE_SYS_TIME_H
 436 #  include <sys/time.h>
 437 # else
 438 #  include <time.h>
 439 # endif
 440 #endif
 441 ])
 442 AC_CHECK_SIZEOF(size_t)
 443
 444 # add option to disable the evil rpath
 445 ACX_ARG_RPATH
 446 AC_SUBST(RUNTIME_PATH)
 447
 448 # check to see if libraries are needed for these functions.
 449 AC_SEARCH_LIBS([inet_pton], [nsl])
 450 AC_SEARCH_LIBS([socket], [socket])
 451
 452 # check wether strptime also works
 453 AC_DEFUN([AC_CHECK_STRPTIME_WORKS],
 454 [AC_REQUIRE([AC_PROG_CC])
 455 AC_MSG_CHECKING(whether strptime works)
 456 if test c${cross_compiling} = cno; then
 457 AC_RUN_IFELSE([AC_LANG_SOURCE([[
 458 #define _XOPEN_SOURCE 600
 459 #include <time.h>
 460 int main(void) { struct tm tm; char *res;
 461 res = strptime("2010-07-15T00:00:00+00:00", "%t%Y%t-%t%m%t-%t%d%tT%t%H%t:%t%M%t:%t%S%t", &tm);
 462 if (!res) return 2;
 463 res = strptime("20070207111842", "%Y%m%d%H%M%S", &tm);
 464 if (!res) return 1; return 0; }
 465 ]])] , [eval "ac_cv_c_strptime_works=yes"], [eval "ac_cv_c_strptime_works=no"])
 466 else
 467 eval "ac_cv_c_strptime_works=maybe"
 468 fi
 469 AC_MSG_RESULT($ac_cv_c_strptime_works)
 470 if test $ac_cv_c_strptime_works = no; then
 471 AC_LIBOBJ(strptime)
 472 else
 473 AC_DEFINE_UNQUOTED([STRPTIME_WORKS], 1, [use default strptime.])
 474 fi
 475 ])dnl
 476
 477 # check some functions of the OS before linking libs (while still runnable).
 478 AC_FUNC_CHOWN
 479 AC_FUNC_FORK
 480 AC_TYPE_SIGNAL
 481 AC_FUNC_FSEEKO
 482 ACX_SYS_LARGEFILE
 483 ACX_CHECK_NONBLOCKING_BROKEN
 484 ACX_MKDIR_ONE_ARG
 485 AC_CHECK_FUNCS([strptime],[AC_CHECK_STRPTIME_WORKS],[AC_LIBOBJ([strptime])])
 486
 487 # check if we can use SO_REUSEPORT
 488 if echo "$host" | $GREP -i -e linux -e dragonfly >/dev/null; then
 489         AC_DEFINE(REUSEPORT_DEFAULT, 1, [if REUSEPORT is enabled by default])
 490 else
 491         AC_DEFINE(REUSEPORT_DEFAULT, 0, [if REUSEPORT is enabled by default])
 492 fi
 493
 494 # Include systemd.m4 - begin
 495 sinclude(systemd.m4)
 496 # Include systemd.m4 - end
 497
 498 # set memory allocation checking if requested
 499 AC_ARG_ENABLE(alloc-checks, AC_HELP_STRING([--enable-alloc-checks],
 500         [ enable to memory allocation statistics, for debug purposes ]),
 501         , )
 502 AC_ARG_ENABLE(alloc-lite, AC_HELP_STRING([--enable-alloc-lite],
 503         [ enable for lightweight alloc assertions, for debug purposes ]),
 504         , )
 505 AC_ARG_ENABLE(alloc-nonregional, AC_HELP_STRING([--enable-alloc-nonregional],
 506         [ enable nonregional allocs, slow but exposes regional allocations to other memory purifiers, for debug purposes ]),
 507         , )
 508 if test x_$enable_alloc_nonregional = x_yes; then
 509         AC_DEFINE(UNBOUND_ALLOC_NONREGIONAL, 1, [use malloc not regions, for debug use])
 510 fi
 511 if test x_$enable_alloc_checks = x_yes; then
 512         AC_DEFINE(UNBOUND_ALLOC_STATS, 1, [use statistics for allocs and frees, for debug use])
 513         SLDNS_ALLOCCHECK_EXTRA_OBJ="alloc.lo log.lo"
 514         AC_SUBST(SLDNS_ALLOCCHECK_EXTRA_OBJ)
 515         ASYNCLOOK_ALLOCCHECK_EXTRA_OBJ="alloc.lo"
 516         AC_SUBST(ASYNCLOOK_ALLOCCHECK_EXTRA_OBJ)
 517 else
 518         if test x_$enable_alloc_lite = x_yes; then
 519                 AC_DEFINE(UNBOUND_ALLOC_LITE, 1, [use to enable lightweight alloc assertions, for debug use])
 520         else
 521                 ACX_FUNC_MALLOC([unbound])
 522         fi
 523 fi
 524
 525 # check windows threads (we use them, not pthreads, on windows).
 526 if test "$on_mingw" = "yes"; then
 527 # check windows threads
 528         AC_CHECK_HEADERS([windows.h],,, [AC_INCLUDES_DEFAULT])
 529         AC_MSG_CHECKING([for CreateThread])
 530         AC_COMPILE_IFELSE([AC_LANG_PROGRAM([
 531 #ifdef HAVE_WINDOWS_H
 532 #include <windows.h>
 533 #endif
 534 ], [
 535         HANDLE t = CreateThread(NULL, 0, NULL, NULL, 0, NULL);
 536 ])],
 537         AC_MSG_RESULT(yes)
 538         AC_DEFINE(HAVE_WINDOWS_THREADS, 1, [Using Windows threads])
 539 ,
 540         AC_MSG_RESULT(no)
 541 )
 542
 543 else
 544 # not on mingw, check thread libraries.
 545
 546 # check for thread library.
 547 # check this first, so that the pthread lib does not get linked in via
 548 # libssl or libpython, and thus distorts the tests, and we end up using
 549 # the non-threadsafe C libraries.
 550 AC_ARG_WITH(pthreads, AC_HELP_STRING([--with-pthreads],
 551  [use pthreads library, or --without-pthreads to disable threading support.]),
 552  [ ],[ withval="yes" ])
 553 ub_have_pthreads=no
 554 if test x_$withval != x_no; then
 555         AX_PTHREAD([
 556                 AC_DEFINE(HAVE_PTHREAD,1,[Define if you have POSIX threads libraries and header files.])
 557                 if test -n "$PTHREAD_LIBS"; then
 558                   LIBS="$PTHREAD_LIBS $LIBS"
 559                 fi
 560                 CFLAGS="$CFLAGS $PTHREAD_CFLAGS"
 561                 CC="$PTHREAD_CC"
 562                 ub_have_pthreads=yes
 563                 AC_CHECK_TYPES([pthread_spinlock_t, pthread_rwlock_t],,,[#include <pthread.h>])
 564
 565                 if echo "$CFLAGS" | $GREP -e "-pthread" >/dev/null; then
 566                 AC_MSG_CHECKING([if -pthread unused during linking])
 567                 # catch clang warning 'argument unused during compilation'
 568                 AC_LANG_CONFTEST([AC_LANG_SOURCE(AC_INCLUDES_DEFAULT
 569 [[
 570 int main(void) {return 0;}
 571 ]])])
 572                 pthread_unused="yes"
 573                 # first compile
 574                 echo "$CC $CFLAGS -c conftest.c -o conftest.o" >&AS_MESSAGE_LOG_FD
 575                 $CC $CFLAGS -c conftest.c -o conftest.o 2>&AS_MESSAGE_LOG_FD >&AS_MESSAGE_LOG_FD
 576                 if test $? = 0; then
 577                         # then link
 578                         echo "$CC $CFLAGS -Werror $LDFLAGS $LIBS -o conftest contest.o" >&AS_MESSAGE_LOG_FD
 579                         $CC $CFLAGS -Werror $LDFLAGS $LIBS -o conftest conftest.o 2>&AS_MESSAGE_LOG_FD >&AS_MESSAGE_LOG_FD
 580                         if test $? -ne 0; then
 581                                 AC_MSG_RESULT(yes)
 582                                 CFLAGS=`echo "$CFLAGS" | sed -e 's/-pthread//'`
 583                                 PTHREAD_CFLAGS_ONLY="-pthread"
 584                                 AC_SUBST(PTHREAD_CFLAGS_ONLY)
 585                         else
 586                                 AC_MSG_RESULT(no)
 587                         fi
 588                 else
 589                         AC_MSG_RESULT(no)
 590                 fi # endif cc successful
 591                 rm -f conftest conftest.c conftest.o
 592                 fi # endif -pthread in CFLAGS
 593
 594                 ])
 595 fi
 596
 597 # check solaris thread library
 598 AC_ARG_WITH(solaris-threads, AC_HELP_STRING([--with-solaris-threads],
 599         [use solaris native thread library.]), [ ],[ withval="no" ])
 600 ub_have_sol_threads=no
 601 if test x_$withval != x_no; then
 602         if test x_$ub_have_pthreads != x_no; then
 603             AC_WARN([Have pthreads already, ignoring --with-solaris-threads])
 604         else
 605         AC_SEARCH_LIBS(thr_create, [thread],
 606         [
 607                 AC_DEFINE(HAVE_SOLARIS_THREADS, 1, [Using Solaris threads])
 608
 609                 ACX_CHECK_COMPILER_FLAG(mt, [CFLAGS="$CFLAGS -mt"],
 610                         [CFLAGS="$CFLAGS -D_REENTRANT"])
 611                 ub_have_sol_threads=yes
 612         ] , [
 613                 AC_ERROR([no solaris threads found.])
 614         ])
 615         fi
 616 fi
 617
 618 fi # end of non-mingw check of thread libraries
 619
 620 # Check for SYSLOG_FACILITY
 621 AC_ARG_WITH(syslog-facility, AC_HELP_STRING([--with-syslog-facility=LOCAL0 - LOCAL7], [ set SYSLOG_FACILITY, default DAEMON ]),
 622         [ UNBOUND_SYSLOG_FACILITY="$withval" ], [])
 623 case "${UNBOUND_SYSLOG_FACILITY}" in
 624
 625   LOCAL[[0-7]]) UNBOUND_SYSLOG_FACILITY="LOG_${UNBOUND_SYSLOG_FACILITY}" ;;
 626
 627            *) UNBOUND_SYSLOG_FACILITY="LOG_DAEMON" ;;
 628
 629 esac
 630 AC_DEFINE_UNQUOTED(UB_SYSLOG_FACILITY,${UNBOUND_SYSLOG_FACILITY},[the SYSLOG_FACILITY to use, default LOG_DAEMON])
 631
 632 # Check for dynamic library module
 633 AC_ARG_WITH(dynlibmodule,
 634    AC_HELP_STRING([--with-dynlibmodule],
 635    [build dynamic library module, or --without-dynlibmodule to disable it. (default=no)]),
 636    [], [ withval="no" ])
 637
 638 if test x_$withval != x_no; then
 639   AC_DEFINE(WITH_DYNLIBMODULE, 1, [Define if you want dynlib module.])
 640   WITH_DYNLIBMODULE=yes
 641   AC_SUBST(WITH_DYNLIBMODULE)
 642   DYNLIBMOD_OBJ="dynlibmod.lo"
 643   AC_SUBST(DYNLIBMOD_OBJ)
 644   DYNLIBMOD_HEADER='$(srcdir)/dynlibmod/dynlibmod.h'
 645   AC_SUBST(DYNLIBMOD_HEADER)
 646   if test $on_mingw = "no"; then
 647     DYNLIBMOD_EXTRALIBS="-ldl -export-dynamic"
 648   else
 649     DYNLIBMOD_EXTRALIBS="-Wl,--export-all-symbols,--out-implib,libunbound.a"
 650   fi
 651   AC_SUBST(DYNLIBMOD_EXTRALIBS)
 652 fi
 653
 654 # Check for PyUnbound
 655 AC_ARG_WITH(pyunbound,
 656    AC_HELP_STRING([--with-pyunbound],
 657    [build PyUnbound, or --without-pyunbound to skip it. (default=no)]),
 658    [], [ withval="no" ])
 659
 660 ub_test_python=no
 661 ub_with_pyunbound=no
 662 if test x_$withval != x_no; then
 663    ub_with_pyunbound=yes
 664    ub_test_python=yes
 665 fi
 666
 667 # Check for Python module
 668 AC_ARG_WITH(pythonmodule,
 669    AC_HELP_STRING([--with-pythonmodule],
 670    [build Python module, or --without-pythonmodule to disable script engine. (default=no)]),
 671    [], [ withval="no" ])
 672
 673 ub_with_pythonmod=no
 674 if test x_$withval != x_no; then
 675    ub_with_pythonmod=yes
 676    ub_test_python=yes
 677 fi
 678
 679 # Check for Python & SWIG only on PyUnbound or PyModule
 680 if test x_$ub_test_python != x_no; then
 681
 682    # Check for Python
 683    ub_have_python=no
 684    ac_save_LIBS="$LIBS" dnl otherwise AC_PYTHON_DEVEL thrashes $LIBS
 685    AC_PYTHON_DEVEL
 686    if test ! -z "$PYTHON_VERSION"; then
 687         if test `$PYTHON -c "print('$PYTHON_VERSION' >= '2.4.0')"` = "False"; then
 688                 AC_ERROR([Python version >= 2.4.0 is required])
 689         fi
 690
 691       [PY_MAJOR_VERSION="`$PYTHON -c \"import sys; print(sys.version_info[0])\"`"]
 692       AC_SUBST(PY_MAJOR_VERSION)
 693       # Have Python
 694       AC_DEFINE(HAVE_PYTHON,1,[Define if you have Python libraries and header files.])
 695       if test -n "$LIBS"; then
 696         LIBS="$PYTHON_LDFLAGS $LIBS"
 697       else
 698         LIBS="$PYTHON_LDFLAGS"
 699       fi
 700       if test -n "$CPPFLAGS"; then
 701         CPPFLAGS="$CPPFLAGS $PYTHON_CPPFLAGS"
 702       else
 703         CPPFLAGS="$PYTHON_CPPFLAGS"
 704       fi
 705       if test "$PYTHON_LIBDIR" != "/usr/lib" -a "$PYTHON_LIBDIR" != "" -a "$PYTHON_LIBDIR" != "/usr/lib64"; then
 706         ACX_RUNTIME_PATH_ADD([$PYTHON_LIBDIR])
 707       fi
 708       ub_have_python=yes
 709       PKG_CHECK_EXISTS(["python${PY_MAJOR_VERSION}"],
 710                        [PC_PY_DEPENDENCY="python${PY_MAJOR_VERSION}"],
 711                        [PC_PY_DEPENDENCY="python"])
 712       AC_SUBST(PC_PY_DEPENDENCY)
 713
 714       # Check for SWIG
 715       ub_have_swig=no
 716       AC_ARG_ENABLE(swig-version-check, AC_HELP_STRING([--disable-swig-version-check], [Disable swig version check to build python modules with older swig even though that is unreliable]))
 717       if test "$enable_swig_version_check" = "yes"; then
 718         AC_PROG_SWIG(2.0.1)
 719       else
 720         AC_PROG_SWIG
 721       fi
 722       AC_MSG_CHECKING(SWIG)
 723       if test ! -x "$SWIG"; then
 724          AC_ERROR([failed to find swig tool, install it, or do not build Python module and PyUnbound])
 725       else
 726          AC_DEFINE(HAVE_SWIG, 1, [Define if you have Swig libraries and header files.])
 727          AC_SUBST(swig, "$SWIG")
 728          AC_MSG_RESULT(present)
 729
 730          # If have Python & SWIG
 731          # Declare PythonMod
 732          if test x_$ub_with_pythonmod != x_no; then
 733             AC_DEFINE(WITH_PYTHONMODULE, 1, [Define if you want Python module.])
 734             WITH_PYTHONMODULE=yes
 735             AC_SUBST(WITH_PYTHONMODULE)
 736             PYTHONMOD_OBJ="pythonmod.lo pythonmod_utils.lo"
 737             AC_SUBST(PYTHONMOD_OBJ)
 738             PYTHONMOD_HEADER='$(srcdir)/pythonmod/pythonmod.h'
 739             AC_SUBST(PYTHONMOD_HEADER)
 740             PYTHONMOD_INSTALL=pythonmod-install
 741             AC_SUBST(PYTHONMOD_INSTALL)
 742             PYTHONMOD_UNINSTALL=pythonmod-uninstall
 743             AC_SUBST(PYTHONMOD_UNINSTALL)
 744          fi
 745
 746          # Declare PyUnbound
 747          if test x_$ub_with_pyunbound != x_no; then
 748             AC_DEFINE(WITH_PYUNBOUND, 1, [Define if you want PyUnbound.])
 749             WITH_PYUNBOUND=yes
 750             AC_SUBST(WITH_PYUNBOUND)
 751             PYUNBOUND_OBJ="libunbound_wrap.lo"
 752             AC_SUBST(PYUNBOUND_OBJ)
 753             PYUNBOUND_TARGET="_unbound.la"
 754             AC_SUBST(PYUNBOUND_TARGET)
 755             PYUNBOUND_INSTALL=pyunbound-install
 756             AC_SUBST(PYUNBOUND_INSTALL)
 757             PYUNBOUND_UNINSTALL=pyunbound-uninstall
 758             AC_SUBST(PYUNBOUND_UNINSTALL)
 759          fi
 760       fi
 761    else
 762       AC_MSG_RESULT([*** Python libraries not found, won't build PythonMod or PyUnbound ***])
 763       ub_with_pyunbound=no
 764       ub_with_pythonmod=no
 765    fi
 766 fi
 767
 768 if test "`uname`" = "NetBSD"; then
 769         NETBSD_LINTFLAGS='"-D__RENAME(x)=" -D_NETINET_IN_H_'
 770         AC_SUBST(NETBSD_LINTFLAGS)
 771 fi
 772 CONFIG_DATE=`date +%Y%m%d`
 773 AC_SUBST(CONFIG_DATE)
 774
 775 # Checks for libraries.
 776
 777 # libnss
 778 USE_NSS="no"
 779 AC_ARG_WITH([nss], AC_HELP_STRING([--with-nss=path],
 780         [use libnss instead of openssl, installed at path.]),
 781         [
 782         USE_NSS="yes"
 783         AC_DEFINE(HAVE_NSS, 1, [Use libnss for crypto])
 784         if test "$withval" != "" -a "$withval" != "yes"; then
 785                 CPPFLAGS="$CPPFLAGS -I$withval/include/nss3"
 786                 LDFLAGS="$LDFLAGS -L$withval/lib"
 787                 ACX_RUNTIME_PATH_ADD([$withval/lib])
 788                 CPPFLAGS="-I$withval/include/nspr4 $CPPFLAGS"
 789         else
 790                 CPPFLAGS="$CPPFLAGS -I/usr/include/nss3"
 791                 CPPFLAGS="-I/usr/include/nspr4 $CPPFLAGS"
 792         fi
 793         LIBS="$LIBS -lnss3 -lnspr4"
 794         SSLLIB=""
 795         PC_CRYPTO_DEPENDENCY="nss nspr"
 796         AC_SUBST(PC_CRYPTO_DEPENDENCY)
 797         ]
 798 )
 799
 800 # libnettle
 801 USE_NETTLE="no"
 802 AC_ARG_WITH([nettle], AC_HELP_STRING([--with-nettle=path],
 803         [use libnettle as crypto library, installed at path.]),
 804         [
 805         USE_NETTLE="yes"
 806         AC_DEFINE(HAVE_NETTLE, 1, [Use libnettle for crypto])
 807         AC_CHECK_HEADERS([nettle/dsa-compat.h],,, [AC_INCLUDES_DEFAULT])
 808         if test "$withval" != "" -a "$withval" != "yes"; then
 809                 CPPFLAGS="$CPPFLAGS -I$withval/include/nettle"
 810                 LDFLAGS="$LDFLAGS -L$withval/lib"
 811                 ACX_RUNTIME_PATH_ADD([$withval/lib])
 812         else
 813                 CPPFLAGS="$CPPFLAGS -I/usr/include/nettle"
 814         fi
 815         LIBS="$LIBS -lhogweed -lnettle -lgmp"
 816         SSLLIB=""
 817         PC_CRYPTO_DEPENDENCY="hogweed nettle"
 818         AC_SUBST(PC_CRYPTO_DEPENDENCY)
 819         ]
 820 )
 821
 822 # openssl
 823 if test $USE_NSS = "no" -a $USE_NETTLE = "no"; then
 824 ACX_WITH_SSL
 825 ACX_LIB_SSL
 826 SSLLIB="-lssl"
 827
 828 PC_CRYPTO_DEPENDENCY="libcrypto libssl"
 829 AC_SUBST(PC_CRYPTO_DEPENDENCY)
 830
 831 # check if -lcrypt32 is needed because CAPIENG needs that. (on windows)
 832 BAKLIBS="$LIBS"
 833 LIBS="-lssl $LIBS"
 834 AC_MSG_CHECKING([if libssl needs -lcrypt32])
 835 AC_TRY_LINK_FUNC([EVP_sha256], [
 836         AC_MSG_RESULT([no])
 837         LIBS="$BAKLIBS"
 838 ], [
 839         AC_MSG_RESULT([yes])
 840         LIBS="$BAKLIBS"
 841         LIBS="$LIBS -lcrypt32"
 842 ])
 843
 844 AC_MSG_CHECKING([for LibreSSL])
 845 if grep VERSION_TEXT $ssldir/include/openssl/opensslv.h | grep "LibreSSL" >/dev/null; then
 846         AC_MSG_RESULT([yes])
 847         AC_DEFINE([HAVE_LIBRESSL], [1], [Define if we have LibreSSL])
 848         # libressl provides these compat functions, but they may also be
 849         # declared by the OS in libc.  See if they have been declared.
 850         AC_CHECK_DECLS([strlcpy,strlcat,arc4random,arc4random_uniform])
 851 else
 852         AC_MSG_RESULT([no])
 853 fi
 854 AC_CHECK_HEADERS([openssl/conf.h openssl/engine.h openssl/bn.h openssl/dh.h openssl/dsa.h openssl/rsa.h openssl/core_names.h],,, [AC_INCLUDES_DEFAULT])
 855 AC_CHECK_FUNCS([OPENSSL_config EVP_sha1 EVP_sha256 EVP_sha512 FIPS_mode EVP_MD_CTX_new OpenSSL_add_all_digests OPENSSL_init_crypto EVP_cleanup ENGINE_cleanup ERR_load_crypto_strings CRYPTO_cleanup_all_ex_data ERR_free_strings RAND_cleanup DSA_SIG_set0 EVP_dss1 EVP_DigestVerify EVP_aes_256_cbc EVP_EncryptInit_ex HMAC_Init_ex CRYPTO_THREADID_set_callback EVP_MAC_CTX_set_params])
 856
 857 # these check_funcs need -lssl
 858 BAKLIBS="$LIBS"
 859 LIBS="-lssl $LIBS"
 860 AC_CHECK_FUNCS([OPENSSL_init_ssl SSL_CTX_set_security_level SSL_set1_host SSL_get0_peername X509_VERIFY_PARAM_set1_host SSL_CTX_set_ciphersuites SSL_CTX_set_tlsext_ticket_key_evp_cb SSL_CTX_set_alpn_select_cb])
 861 LIBS="$BAKLIBS"
 862
 863 AC_CHECK_DECLS([SSL_COMP_get_compression_methods,sk_SSL_COMP_pop_free,SSL_CTX_set_ecdh_auto], [], [], [
 864 AC_INCLUDES_DEFAULT
 865 #ifdef HAVE_OPENSSL_ERR_H
 866 #include <openssl/err.h>
 867 #endif
 868
 869 #ifdef HAVE_OPENSSL_RAND_H
 870 #include <openssl/rand.h>
 871 #endif
 872
 873 #ifdef HAVE_OPENSSL_CONF_H
 874 #include <openssl/conf.h>
 875 #endif
 876
 877 #ifdef HAVE_OPENSSL_ENGINE_H
 878 #include <openssl/engine.h>
 879 #endif
 880 #include <openssl/ssl.h>
 881 #include <openssl/evp.h>
 882 ])
 883
 884 if test "$ac_cv_func_HMAC_Init_ex" = "yes"; then
 885 # check function return type.
 886 AC_MSG_CHECKING(the return type of HMAC_Init_ex)
 887 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([
 888 #ifdef HAVE_OPENSSL_ERR_H
 889 #include <openssl/err.h>
 890 #endif
 891
 892 #ifdef HAVE_OPENSSL_RAND_H
 893 #include <openssl/rand.h>
 894 #endif
 895
 896 #ifdef HAVE_OPENSSL_CONF_H
 897 #include <openssl/conf.h>
 898 #endif
 899
 900 #ifdef HAVE_OPENSSL_ENGINE_H
 901 #include <openssl/engine.h>
 902 #endif
 903 #include <openssl/ssl.h>
 904 #include <openssl/evp.h>
 905 ], [
 906         HMAC_CTX* hmac_ctx = NULL;
 907         void* hmac_key = NULL;
 908         const EVP_MD* digest = NULL;
 909         int x = HMAC_Init_ex(hmac_ctx, hmac_key, 32, digest, NULL);
 910         (void)x;
 911 ])], [
 912         AC_MSG_RESULT(int)
 913 ], [
 914         AC_MSG_RESULT(void)
 915         AC_DEFINE([HMAC_INIT_EX_RETURNS_VOID], 1, [If HMAC_Init_ex() returns void])
 916 ])
 917 fi
 918
 919 fi
 920 AC_SUBST(SSLLIB)
 921
 922 # libbsd
 923 AC_ARG_WITH([libbsd], AC_HELP_STRING([--with-libbsd], [Use portable libbsd functions]), [
 924         AC_CHECK_HEADERS([bsd/string.h bsd/stdlib.h],,, [AC_INCLUDES_DEFAULT])
 925         if test "x$ac_cv_header_bsd_string_h" = xyes -a "x$ac_cv_header_bsd_stdlib_h" = xyes; then
 926                 for func in strlcpy strlcat arc4random arc4random_uniform reallocarray; do
 927                         AC_SEARCH_LIBS([$func], [bsd], [
 928                                 AC_DEFINE(HAVE_LIBBSD, 1, [Use portable libbsd functions])
 929                                 PC_LIBBSD_DEPENDENCY=libbsd
 930                                 AC_SUBST(PC_LIBBSD_DEPENDENCY)
 931                         ])
 932                 done
 933         fi
 934 ])
 935
 936 AC_ARG_ENABLE(sha1, AC_HELP_STRING([--disable-sha1], [Disable SHA1 RRSIG support, does not disable nsec3 support]))
 937 case "$enable_sha1" in
 938         no)
 939         ;;
 940         yes|*)
 941         AC_DEFINE([USE_SHA1], [1], [Define this to enable SHA1 support.])
 942         ;;
 943 esac
 944
 945
 946 AC_ARG_ENABLE(sha2, AC_HELP_STRING([--disable-sha2], [Disable SHA256 and SHA512 RRSIG support]))
 947 case "$enable_sha2" in
 948         no)
 949         ;;
 950         yes|*)
 951         AC_DEFINE([USE_SHA2], [1], [Define this to enable SHA256 and SHA512 support.])
 952         ;;
 953 esac
 954
 955 AC_ARG_ENABLE(subnet, AC_HELP_STRING([--enable-subnet], [Enable client subnet]))
 956 case "$enable_subnet" in
 957         yes)
 958         AC_DEFINE([CLIENT_SUBNET], [1], [Define this to enable client subnet option.])
 959         SUBNET_OBJ="edns-subnet.lo subnetmod.lo addrtree.lo subnet-whitelist.lo"
 960         AC_SUBST(SUBNET_OBJ)
 961         SUBNET_HEADER='$(srcdir)/edns-subnet/subnetmod.h $(srcdir)/edns-subnet/edns-subnet.h $(srcdir)/edns-subnet/subnet-whitelist.h $(srcdir)/edns-subnet/addrtree.h'
 962         AC_SUBST(SUBNET_HEADER)
 963         ;;
 964         no|*)
 965         ;;
 966 esac
 967
 968 # check wether gost also works
 969 AC_DEFUN([AC_CHECK_GOST_WORKS],
 970 [AC_REQUIRE([AC_PROG_CC])
 971 AC_MSG_CHECKING([if GOST works])
 972 if test c${cross_compiling} = cno; then
 973 BAKCFLAGS="$CFLAGS"
 974 if test -n "$ssldir"; then
 975         CFLAGS="$CFLAGS -Wl,-rpath,$ssldir/lib"
 976 fi
 977 AC_RUN_IFELSE([AC_LANG_SOURCE([[
 978 #include <string.h>
 979 #include <openssl/ssl.h>
 980 #include <openssl/evp.h>
 981 #include <openssl/engine.h>
 982 #include <openssl/conf.h>
 983 /* routine to load gost (from sldns) */
 984 int load_gost_id(void)
 985 {
 986         static int gost_id = 0;
 987         const EVP_PKEY_ASN1_METHOD* meth;
 988         ENGINE* e;
 989
 990         if(gost_id) return gost_id;
 991
 992         /* see if configuration loaded gost implementation from other engine*/
 993         meth = EVP_PKEY_asn1_find_str(NULL, "gost2001", -1);
 994         if(meth) {
 995                 EVP_PKEY_asn1_get0_info(&gost_id, NULL, NULL, NULL, NULL, meth);
 996                 return gost_id;
 997         }
 998
 999         /* see if engine can be loaded already */
1000         e = ENGINE_by_id("gost");
1001         if(!e) {
1002                 /* load it ourself, in case statically linked */
1003                 ENGINE_load_builtin_engines();
1004                 ENGINE_load_dynamic();
1005                 e = ENGINE_by_id("gost");
1006         }
1007         if(!e) {
1008                 /* no gost engine in openssl */
1009                 return 0;
1010         }
1011         if(!ENGINE_set_default(e, ENGINE_METHOD_ALL)) {
1012                 ENGINE_finish(e);
1013                 ENGINE_free(e);
1014                 return 0;
1015         }
1016
1017         meth = EVP_PKEY_asn1_find_str(&e, "gost2001", -1);
1018         if(!meth) {
1019                 /* algo not found */
1020                 ENGINE_finish(e);
1021                 ENGINE_free(e);
1022                 return 0;
1023         }
1024         EVP_PKEY_asn1_get0_info(&gost_id, NULL, NULL, NULL, NULL, meth);
1025         return gost_id;
1026 }
1027 int main(void) {
1028         EVP_MD_CTX* ctx;
1029         const EVP_MD* md;
1030         unsigned char digest[64]; /* its a 256-bit digest, so uses 32 bytes */
1031         const char* str = "Hello world";
1032         const unsigned char check[] = {
1033                 0x40 , 0xed , 0xf8 , 0x56 , 0x5a , 0xc5 , 0x36 , 0xe1 ,
1034                 0x33 , 0x7c , 0x7e , 0x87 , 0x62 , 0x1c , 0x42 , 0xe0 ,
1035                 0x17 , 0x1b , 0x5e , 0xce , 0xa8 , 0x46 , 0x65 , 0x4d ,
1036                 0x8d , 0x3e , 0x22 , 0x9b , 0xe1 , 0x30 , 0x19 , 0x9d
1037         };
1038         OPENSSL_config(NULL);
1039         (void)load_gost_id();
1040         md = EVP_get_digestbyname("md_gost94");
1041         if(!md) return 1;
1042         memset(digest, 0, sizeof(digest));
1043         ctx = EVP_MD_CTX_create();
1044         if(!ctx) return 2;
1045         if(!EVP_DigestInit_ex(ctx, md, NULL)) return 3;
1046         if(!EVP_DigestUpdate(ctx, str, 10)) return 4;
1047         if(!EVP_DigestFinal_ex(ctx, digest, NULL)) return 5;
1048         /* uncomment to see the hash calculated.
1049                 {int i;
1050                 for(i=0; i<32; i++)
1051                         printf(" %2.2x", (int)digest[i]);
1052                 printf("\n");}
1053         */
1054         if(memcmp(digest, check, sizeof(check)) != 0)
1055                 return 6;
1056         return 0;
1057 }
1058 ]])] , [eval "ac_cv_c_gost_works=yes"], [eval "ac_cv_c_gost_works=no"])
1059 CFLAGS="$BAKCFLAGS"
1060 else
1061 eval "ac_cv_c_gost_works=maybe"
1062 fi
1063 AC_MSG_RESULT($ac_cv_c_gost_works)
1064 ])dnl
1065
1066 AC_ARG_ENABLE(gost, AC_HELP_STRING([--disable-gost], [Disable GOST support]))
1067 use_gost="no"
1068 if test $USE_NSS = "no" -a $USE_NETTLE = "no"; then
1069 case "$enable_gost" in
1070         no)
1071         ;;
1072         *)
1073         AC_CHECK_FUNC(EVP_PKEY_set_type_str, [:],[AC_MSG_ERROR([OpenSSL 1.0.0 is needed for GOST support])])
1074         AC_CHECK_FUNC(EC_KEY_new, [], [AC_MSG_ERROR([OpenSSL does not support ECC, needed for GOST support])])
1075         AC_CHECK_GOST_WORKS
1076         if test "$ac_cv_c_gost_works" != no; then
1077                 use_gost="yes"
1078                 AC_DEFINE([USE_GOST], [1], [Define this to enable GOST support.])
1079         fi
1080         ;;
1081 esac
1082 fi dnl !USE_NSS && !USE_NETTLE
1083
1084 AC_ARG_ENABLE(ecdsa, AC_HELP_STRING([--disable-ecdsa], [Disable ECDSA support]))
1085 use_ecdsa="no"
1086 case "$enable_ecdsa" in
1087     no)
1088       ;;
1089     *)
1090       if test $USE_NSS = "no" -a $USE_NETTLE = "no"; then
1091               AC_CHECK_FUNC(ECDSA_sign, [], [AC_MSG_ERROR([OpenSSL does not support ECDSA: please upgrade or rerun with --disable-ecdsa])])
1092               AC_CHECK_FUNC(SHA384_Init, [], [AC_MSG_ERROR([OpenSSL does not support SHA384: please upgrade or rerun with --disable-ecdsa])])
1093               AC_CHECK_DECLS([NID_X9_62_prime256v1, NID_secp384r1], [], [AC_MSG_ERROR([OpenSSL does not support the ECDSA curves: please upgrade or rerun with --disable-ecdsa])], [AC_INCLUDES_DEFAULT
1094 #include <openssl/evp.h>
1095               ])
1096               # see if OPENSSL 1.0.0 or later (has EVP MD and Verify independency)
1097               AC_MSG_CHECKING([if openssl supports SHA2 and ECDSA with EVP])
1098               if grep OPENSSL_VERSION_TEXT $ssldir/include/openssl/opensslv.h | grep "OpenSSL" >/dev/null; then
1099                 if grep OPENSSL_VERSION_NUMBER $ssldir/include/openssl/opensslv.h | grep 0x0 >/dev/null; then
1100                   AC_MSG_RESULT([no])
1101                   AC_DEFINE_UNQUOTED([USE_ECDSA_EVP_WORKAROUND], [1], [Define this to enable an EVP workaround for older openssl])
1102                 else
1103                   AC_MSG_RESULT([yes])
1104                 fi
1105               else
1106                 # not OpenSSL, thus likely LibreSSL, which supports it
1107                 AC_MSG_RESULT([yes])
1108               fi
1109       fi
1110       # we now know we have ECDSA and the required curves.
1111       AC_DEFINE_UNQUOTED([USE_ECDSA], [1], [Define this to enable ECDSA support.])
1112       use_ecdsa="yes"
1113       ;;
1114 esac
1115
1116 AC_ARG_ENABLE(dsa, AC_HELP_STRING([--disable-dsa], [Disable DSA support]))
1117 use_dsa="no"
1118 case "$enable_dsa" in
1119     yes)
1120       # detect if DSA is supported, and turn it off if not.
1121       if test $USE_NSS = "no" -a $USE_NETTLE = "no"; then
1122       AC_CHECK_FUNC(DSA_SIG_new, [
1123       AC_CHECK_TYPE(DSA_SIG*, [
1124       AC_DEFINE_UNQUOTED([USE_DSA], [1], [Define this to enable DSA support.])
1125       ], [if test "x$enable_dsa" = "xyes"; then AC_MSG_ERROR([OpenSSL does not support DSA and you used --enable-dsa.])
1126                fi ], [
1127 AC_INCLUDES_DEFAULT
1128 #ifdef HAVE_OPENSSL_ERR_H
1129 #include <openssl/err.h>
1130 #endif
1131
1132 #ifdef HAVE_OPENSSL_RAND_H
1133 #include <openssl/rand.h>
1134 #endif
1135
1136 #ifdef HAVE_OPENSSL_CONF_H
1137 #include <openssl/conf.h>
1138 #endif
1139
1140 #ifdef HAVE_OPENSSL_ENGINE_H
1141 #include <openssl/engine.h>
1142 #endif
1143       ])
1144       ], [if test "x$enable_dsa" = "xyes"; then AC_MSG_ERROR([OpenSSL does not support DSA and you used --enable-dsa.])
1145                fi ])
1146       else
1147       AC_DEFINE_UNQUOTED([USE_DSA], [1], [Define this to enable DSA support.])
1148       fi
1149       ;;
1150     *)
1151       # disable dsa by default, RFC 8624 section 3.1, validators MUST NOT
1152       # support DSA for DNSSEC Validation.
1153       ;;
1154 esac
1155
1156 AC_ARG_ENABLE(ed25519, AC_HELP_STRING([--disable-ed25519], [Disable ED25519 support]))
1157 use_ed25519="no"
1158 case "$enable_ed25519" in
1159     no)
1160       ;;
1161     *)
1162       if test $USE_NSS = "no" -a $USE_NETTLE = "no"; then
1163               AC_CHECK_DECLS([NID_ED25519], [
1164                 use_ed25519="yes"
1165               ], [ if test "x$enable_ed25519" = "xyes"; then AC_MSG_ERROR([OpenSSL does not support ED25519 and you used --enable-ed25519.])
1166                 fi ], [AC_INCLUDES_DEFAULT
1167 #include <openssl/evp.h>
1168               ])
1169       fi
1170       if test $USE_NETTLE = "yes"; then
1171                 AC_CHECK_HEADERS([nettle/eddsa.h], use_ed25519="yes",, [AC_INCLUDES_DEFAULT])
1172       fi
1173       if test $use_ed25519 = "yes"; then
1174                 AC_DEFINE_UNQUOTED([USE_ED25519], [1], [Define this to enable ED25519 support.])
1175       fi
1176       ;;
1177 esac
1178
1179 AC_ARG_ENABLE(ed448, AC_HELP_STRING([--disable-ed448], [Disable ED448 support]))
1180 use_ed448="no"
1181 case "$enable_ed448" in
1182     no)
1183       ;;
1184     *)
1185       if test $USE_NSS = "no" -a $USE_NETTLE = "no"; then
1186               AC_CHECK_DECLS([NID_ED448], [
1187                 use_ed448="yes"
1188               ], [ if test "x$enable_ed448" = "xyes"; then AC_MSG_ERROR([OpenSSL does not support ED448 and you used --enable-ed448.])
1189                 fi ], [AC_INCLUDES_DEFAULT
1190 #include <openssl/evp.h>
1191               ])
1192       fi
1193       if test $use_ed448 = "yes"; then
1194                 AC_DEFINE_UNQUOTED([USE_ED448], [1], [Define this to enable ED448 support.])
1195       fi
1196       ;;
1197 esac
1198
1199 AC_ARG_ENABLE(event-api, AC_HELP_STRING([--enable-event-api], [Enable (experimental) pluggable event base libunbound API installed to unbound-event.h]))
1200 case "$enable_event_api" in
1201     yes)
1202       AC_SUBST(UNBOUND_EVENT_INSTALL, [unbound-event-install])
1203       AC_SUBST(UNBOUND_EVENT_UNINSTALL, [unbound-event-uninstall])
1204       ;;
1205     *)
1206       ;;
1207 esac
1208
1209 AC_ARG_ENABLE(tfo-client, AC_HELP_STRING([--enable-tfo-client], [Enable TCP Fast Open for client mode]))
1210 case "$enable_tfo_client" in
1211         yes)
1212                 case `uname` in
1213                         Linux) AC_CHECK_DECL([MSG_FASTOPEN], [AC_MSG_WARN([Check the platform specific TFO kernel parameters are correctly configured to support client mode TFO])],
1214                                              [AC_MSG_ERROR([TCP Fast Open is not available for client mode: please rerun without --enable-tfo-client])],
1215                                              [AC_INCLUDES_DEFAULT
1216 #include <netinet/tcp.h>
1217 ])
1218                                         AC_DEFINE_UNQUOTED([USE_MSG_FASTOPEN], [1], [Define this to enable client TCP Fast Open.])
1219                           ;;
1220                         Darwin) AC_CHECK_DECL([CONNECT_RESUME_ON_READ_WRITE], [AC_MSG_WARN([Check the platform specific TFO kernel parameters are correctly configured to support client mode TFO])],
1221                                               [AC_MSG_ERROR([TCP Fast Open is not available for client mode: please rerun without --enable-tfo-client])],
1222                                               [AC_INCLUDES_DEFAULT
1223 #include <sys/socket.h>
1224 ])
1225                                         AC_DEFINE_UNQUOTED([USE_OSX_MSG_FASTOPEN], [1], [Define this to enable client TCP Fast Open.])
1226                           ;;
1227                 esac
1228         ;;
1229         no|*)
1230                 ;;
1231 esac
1232
1233 AC_ARG_ENABLE(tfo-server, AC_HELP_STRING([--enable-tfo-server], [Enable TCP Fast Open for server mode]))
1234 case "$enable_tfo_server" in
1235         yes)
1236               AC_CHECK_DECL([TCP_FASTOPEN], [AC_MSG_WARN([Check the platform specific TFO kernel parameters are correctly configured to support server mode TFO])], [AC_MSG_ERROR([TCP Fast Open is not available for server mode: please rerun without --enable-tfo-server])], [AC_INCLUDES_DEFAULT
1237 #include <netinet/tcp.h>
1238               ])
1239                 AC_DEFINE_UNQUOTED([USE_TCP_FASTOPEN], [1], [Define this to enable server TCP Fast Open.])
1240                 ;;
1241         no|*)
1242                 ;;
1243 esac
1244
1245 # check for libevent
1246 AC_ARG_WITH(libevent, AC_HELP_STRING([--with-libevent=pathname],
1247     [use libevent (will check /usr/local /opt/local /usr/lib /usr/pkg /usr/sfw /usr  or you can specify an explicit path). Slower, but allows use of large outgoing port ranges.]),
1248     [ ],[ with_libevent="no" ])
1249 if test "x_$with_libevent" != x_no; then
1250         AC_DEFINE([USE_LIBEVENT], [1], [Define if you enable libevent])
1251         AC_MSG_CHECKING(for libevent)
1252         if test "x_$with_libevent" = x_ -o "x_$with_libevent" = x_yes; then
1253             with_libevent="/usr/local /opt/local /usr/lib /usr/pkg /usr/sfw /usr"
1254         fi
1255         for dir in $with_libevent; do
1256             thedir="$dir"
1257             if test -f "$dir/include/event.h" -o -f "$dir/include/event2/event.h"; then
1258                 found_libevent="yes"
1259                                 dnl assume /usr is in default path.
1260                                 if test "$thedir" != "/usr"; then
1261                                     CPPFLAGS="$CPPFLAGS -I$thedir/include"
1262                                 fi
1263                                 break;
1264                     fi
1265         done
1266         if test x_$found_libevent != x_yes; then
1267                 if test -f "$dir/event.h" -a \( -f "$dir/libevent.la" -o -f "$dir/libev.la" \) ; then
1268                         # libevent source directory
1269                         AC_MSG_RESULT(found in $thedir)
1270                         CPPFLAGS="$CPPFLAGS -I$thedir -I$thedir/include"
1271                         BAK_LDFLAGS_SET="1"
1272                         BAK_LDFLAGS="$LDFLAGS"
1273                         # remove evdns from linking
1274                         mkdir build >/dev/null 2>&1
1275                         mkdir build/libevent >/dev/null 2>&1
1276                         mkdir build/libevent/.libs >/dev/null 2>&1
1277                         ev_files_o=`ls $thedir/*.o | grep -v evdns\.o | grep -v bufferevent_openssl\.o`
1278                         ev_files_lo=`ls $thedir/*.lo | grep -v evdns\.lo | grep -v bufferevent_openssl\.lo`
1279                         ev_files_libso=`ls $thedir/.libs/*.o | grep -v evdns\.o | grep -v bufferevent_openssl\.o`
1280                         cp $ev_files_o build/libevent
1281                         cp $ev_files_lo build/libevent
1282                         cp $ev_files_libso build/libevent/.libs
1283                         LATE_LDFLAGS="build/libevent/*.lo -lm"
1284                         LDFLAGS="build/libevent/*.o $LDFLAGS -lm"
1285                 else
1286             AC_MSG_ERROR([Cannot find the libevent library in $with_libevent
1287 You can restart ./configure --with-libevent=no to use a builtin alternative.
1288 Please note that this alternative is not as capable as libevent when using
1289 large outgoing port ranges.  ])
1290                 fi
1291         else
1292             AC_MSG_RESULT(found in $thedir)
1293             dnl if event2 exists and no event lib in dir itself, use subdir
1294             if test ! -f $thedir/lib/libevent.a -a ! -f $thedir/lib/libevent.so -a -d "$thedir/lib/event2"; then
1295                     LDFLAGS="$LDFLAGS -L$thedir/lib/event2"
1296                     ACX_RUNTIME_PATH_ADD([$thedir/lib/event2])
1297             else
1298                     dnl assume /usr is in default path, do not add "".
1299                     if test "$thedir" != "/usr" -a "$thedir" != ""; then
1300                         LDFLAGS="$LDFLAGS -L$thedir/lib"
1301                         ACX_RUNTIME_PATH_ADD([$thedir/lib])
1302                     fi
1303             fi
1304         fi
1305         # check for library used by libevent after 1.3c
1306         AC_SEARCH_LIBS([clock_gettime], [rt])
1307
1308         # is the event.h header libev or libevent?
1309         AC_CHECK_HEADERS([event.h],,, [AC_INCLUDES_DEFAULT])
1310         AC_CHECK_DECL(EV_VERSION_MAJOR, [
1311                 AC_SEARCH_LIBS(event_set, [ev])
1312         ],[
1313                 AC_SEARCH_LIBS(event_set, [event])
1314         ],[AC_INCLUDES_DEFAULT
1315 #include <event.h>
1316         ])
1317         AC_CHECK_FUNCS([event_base_free]) # only in libevent 1.2 and later
1318         AC_CHECK_FUNCS([event_base_once]) # only in libevent 1.4.1 and later
1319         AC_CHECK_FUNCS([event_base_new]) # only in libevent 1.4.1 and later
1320         AC_CHECK_FUNCS([event_base_get_method]) # only in libevent 1.4.3 and later
1321         AC_CHECK_FUNCS([ev_loop]) # only in libev. (tested on 3.51)
1322         AC_CHECK_FUNCS([ev_default_loop]) # only in libev. (tested on 4.00)
1323         AC_CHECK_FUNCS([event_assign]) # in libevent, for thread-safety
1324         AC_CHECK_DECLS([evsignal_assign], [], [], [AC_INCLUDES_DEFAULT
1325 #ifdef HAVE_EVENT_H
1326 #  include <event.h>
1327 #else
1328 #  include "event2/event.h"
1329 #endif
1330         ])
1331         PC_LIBEVENT_DEPENDENCY="libevent"
1332         AC_SUBST(PC_LIBEVENT_DEPENDENCY)
1333         if test -n "$BAK_LDFLAGS_SET"; then
1334                 LDFLAGS="$BAK_LDFLAGS"
1335         fi
1336 else
1337         AC_DEFINE(USE_MINI_EVENT, 1, [Define if you want to use internal select based events])
1338 fi
1339
1340 # check for libexpat
1341 AC_ARG_WITH(libexpat, AC_HELP_STRING([--with-libexpat=path],
1342     [specify explicit path for libexpat.]),
1343     [ ],[ withval="/usr/local /opt/local /usr/lib /usr/pkg /usr/sfw /usr" ])
1344 AC_MSG_CHECKING(for libexpat)
1345 found_libexpat="no"
1346 for dir in $withval ; do
1347             if test -f "$dir/include/expat.h"; then
1348                 found_libexpat="yes"
1349                 dnl assume /usr is in default path.
1350                 if test "$dir" != "/usr"; then
1351                     CPPFLAGS="$CPPFLAGS -I$dir/include"
1352                     LDFLAGS="$LDFLAGS -L$dir/lib"
1353                 fi
1354                 AC_MSG_RESULT(found in $dir)
1355                 break;
1356             fi
1357 done
1358 if test x_$found_libexpat != x_yes; then
1359         AC_ERROR([Could not find libexpat, expat.h])
1360 fi
1361 AC_CHECK_HEADERS([expat.h],,, [AC_INCLUDES_DEFAULT])
1362 AC_CHECK_DECLS([XML_StopParser], [], [], [AC_INCLUDES_DEFAULT
1363 #include <expat.h>
1364 ])
1365
1366 # hiredis (redis C client for cachedb)
1367 AC_ARG_WITH(libhiredis, AC_HELP_STRING([--with-libhiredis=path],
1368     [specify explicit path for libhiredis.]),
1369     [ ],[ withval="no" ])
1370 found_libhiredis="no"
1371 if test x_$withval = x_yes -o x_$withval != x_no; then
1372    AC_MSG_CHECKING(for libhiredis)
1373    if test x_$withval = x_ -o x_$withval = x_yes; then
1374             withval="/usr/local /opt/local /usr/lib /usr/pkg /usr/sfw /usr"
1375    fi
1376    for dir in $withval ; do
1377             if test -f "$dir/include/hiredis/hiredis.h"; then
1378                 found_libhiredis="yes"
1379                 dnl assume /usr is in default path.
1380                 if test "$dir" != "/usr"; then
1381                     CPPFLAGS="$CPPFLAGS -I$dir/include"
1382                     LDFLAGS="$LDFLAGS -L$dir/lib"
1383                 fi
1384                 AC_MSG_RESULT(found in $dir)
1385                 AC_DEFINE([USE_REDIS], [1], [Define this to use hiredis client.])
1386                 LIBS="$LIBS -lhiredis"
1387                 break;
1388             fi
1389     done
1390     if test x_$found_libhiredis != x_yes; then
1391         AC_ERROR([Could not find libhiredis, hiredis.h])
1392     fi
1393     AC_CHECK_HEADERS([hiredis/hiredis.h],,, [AC_INCLUDES_DEFAULT])
1394     AC_CHECK_DECLS([redisConnect], [], [], [AC_INCLUDES_DEFAULT
1395     #include <hiredis/hiredis.h>
1396     ])
1397 fi
1398
1399 # nghttp2
1400 AC_ARG_WITH(libnghttp2, AC_HELP_STRING([--with-libnghttp2=path],
1401     [specify explicit path for libnghttp2.]),
1402     [ ],[ withval="no" ])
1403 found_libnghttp2="no"
1404 if test x_$withval = x_yes -o x_$withval != x_no; then
1405    AC_MSG_CHECKING(for libnghttp2)
1406    if test x_$withval = x_ -o x_$withval = x_yes; then
1407             withval="/usr/local /opt/local /usr/lib /usr/pkg /usr/sfw /usr"
1408    fi
1409    for dir in $withval ; do
1410             if test -f "$dir/include/nghttp2/nghttp2.h"; then
1411                 found_libnghttp2="yes"
1412                 dnl assume /usr is in default path.
1413                 if test "$dir" != "/usr"; then
1414                     CPPFLAGS="$CPPFLAGS -I$dir/include"
1415                     LDFLAGS="$LDFLAGS -L$dir/lib"
1416                 fi
1417                 AC_MSG_RESULT(found in $dir)
1418                 AC_DEFINE([HAVE_NGHTTP2], [1], [Define this to use nghttp2 client.])
1419                 LIBS="$LIBS -lnghttp2"
1420                 break;
1421             fi
1422     done
1423     if test x_$found_libnghttp2 != x_yes; then
1424         AC_ERROR([Could not find libnghttp2, nghttp2.h])
1425     fi
1426     AC_CHECK_HEADERS([nghttp2/nghttp2.h],,, [AC_INCLUDES_DEFAULT])
1427     AC_CHECK_DECLS([nghttp2_session_server_new], [], [], [AC_INCLUDES_DEFAULT
1428     #include <nghttp2/nghttp2.h>
1429     ])
1430 fi
1431
1432 # set static linking for uninstalled libraries if requested
1433 AC_SUBST(staticexe)
1434 staticexe=""
1435 AC_ARG_ENABLE(static-exe, AC_HELP_STRING([--enable-static-exe],
1436         [ enable to compile executables statically against (event) uninstalled libs, for debug purposes ]),
1437         , )
1438 if test x_$enable_static_exe = x_yes; then
1439         staticexe="-static"
1440         if test "$on_mingw" = yes; then
1441                 staticexe="-all-static"
1442                 # for static compile, include gdi32 and zlib here.
1443                 if echo $LIBS | grep 'lgdi32' >/dev/null; then
1444                         :
1445                 else
1446                         LIBS="$LIBS -lgdi32"
1447                 fi
1448                 LIBS="$LIBS -lz"
1449         fi
1450 fi
1451
1452 # set full static linking if requested
1453 AC_ARG_ENABLE(fully-static, AC_HELP_STRING([--enable-fully-static],
1454         [ enable to compile fully static ]),
1455         , )
1456 if test x_$enable_fully_static = x_yes; then
1457         staticexe="-all-static"
1458         if test "$on_mingw" = yes; then
1459                 # for static compile, include gdi32 and zlib here.
1460                 if echo $LIBS | grep 'lgdi32' >/dev/null; then
1461                         :
1462                 else
1463                         LIBS="$LIBS -lgdi32"
1464                 fi
1465                 LIBS="$LIBS -lz"
1466         fi
1467 fi
1468
1469 # set lock checking if requested
1470 AC_ARG_ENABLE(lock_checks, AC_HELP_STRING([--enable-lock-checks],
1471         [ enable to check lock and unlock calls, for debug purposes ]),
1472         , )
1473 if test x_$enable_lock_checks = x_yes; then
1474         AC_DEFINE(ENABLE_LOCK_CHECKS, 1, [Define if you want to use debug lock checking (slow).])
1475         CHECKLOCK_OBJ="checklocks.lo"
1476         AC_SUBST(CHECKLOCK_OBJ)
1477 fi
1478
1479 ACX_CHECK_GETADDRINFO_WITH_INCLUDES
1480 if test "$USE_WINSOCK" = 1; then
1481         AC_DEFINE(UB_ON_WINDOWS, 1, [Use win32 resources and API])
1482         AC_CHECK_HEADERS([iphlpapi.h],,, [AC_INCLUDES_DEFAULT
1483 #include <windows.h>
1484         ])
1485         AC_CHECK_TOOL(WINDRES, windres)
1486         LIBS="$LIBS -liphlpapi -lcrypt32"
1487         WINAPPS="unbound-service-install.exe unbound-service-remove.exe anchor-update.exe"
1488         AC_SUBST(WINAPPS)
1489         WIN_DAEMON_SRC="winrc/win_svc.c winrc/w_inst.c"
1490         AC_SUBST(WIN_DAEMON_SRC)
1491         WIN_DAEMON_OBJ="win_svc.lo w_inst.lo"
1492         AC_SUBST(WIN_DAEMON_OBJ)
1493         WIN_DAEMON_OBJ_LINK="rsrc_unbound.o"
1494         AC_SUBST(WIN_DAEMON_OBJ_LINK)
1495         WIN_HOST_OBJ_LINK="rsrc_unbound_host.o"
1496         AC_SUBST(WIN_HOST_OBJ_LINK)
1497         WIN_UBANCHOR_OBJ_LINK="rsrc_unbound_anchor.o log.lo locks.lo"
1498         AC_SUBST(WIN_UBANCHOR_OBJ_LINK)
1499         WIN_CONTROL_OBJ_LINK="rsrc_unbound_control.o"
1500         AC_SUBST(WIN_CONTROL_OBJ_LINK)
1501         WIN_CHECKCONF_OBJ_LINK="rsrc_unbound_checkconf.o"
1502         AC_SUBST(WIN_CHECKCONF_OBJ_LINK)
1503 fi
1504 if test $ac_cv_func_getaddrinfo = no; then
1505         AC_LIBOBJ([fake-rfc2553])
1506 fi
1507 # check after getaddrinfo for its libraries
1508 ACX_FUNC_IOCTLSOCKET
1509
1510 # see if daemon(3) exists, and if it is deprecated.
1511 AC_CHECK_FUNCS([daemon])
1512 if test $ac_cv_func_daemon = yes; then
1513         ACX_FUNC_DEPRECATED([daemon], [(void)daemon(0, 0);], [
1514 #include <stdlib.h>
1515 ])
1516 fi
1517
1518 AC_CHECK_MEMBERS([struct sockaddr_un.sun_len],,,[
1519 AC_INCLUDES_DEFAULT
1520 #ifdef HAVE_SYS_UN_H
1521 #include <sys/un.h>
1522 #endif
1523 ])
1524 AC_CHECK_MEMBERS([struct in_pktinfo.ipi_spec_dst],,,[
1525 AC_INCLUDES_DEFAULT
1526 #if HAVE_SYS_PARAM_H
1527 #include <sys/param.h>
1528 #endif
1529
1530 #ifdef HAVE_SYS_SOCKET_H
1531 #include <sys/socket.h>
1532 #endif
1533
1534 #ifdef HAVE_SYS_UIO_H
1535 #include <sys/uio.h>
1536 #endif
1537
1538 #ifdef HAVE_NETINET_IN_H
1539 #include <netinet/in.h>
1540 #endif
1541
1542 #ifdef HAVE_NETINET_TCP_H
1543 #include <netinet/tcp.h>
1544 #endif
1545
1546 #ifdef HAVE_ARPA_INET_H
1547 #include <arpa/inet.h>
1548 #endif
1549
1550 #ifdef HAVE_WINSOCK2_H
1551 #include <winsock2.h>
1552 #endif
1553
1554 #ifdef HAVE_WS2TCPIP_H
1555 #include <ws2tcpip.h>
1556 #endif
1557 ])
1558
1559 AC_MSG_CHECKING([for htobe64])
1560 AC_LINK_IFELSE([AC_LANG_PROGRAM([
1561 #include <stdio.h>
1562 #ifdef HAVE_ENDIAN_H
1563 #  include <endian.h>
1564 #endif
1565 #ifdef HAVE_SYS_ENDIAN_H
1566 #  include <sys/endian.h>
1567 #endif
1568 ], [unsigned long long x = htobe64(0); printf("%u", (unsigned)x);])],
1569   AC_MSG_RESULT(yes)
1570   AC_DEFINE(HAVE_HTOBE64, 1, [If we have htobe64]),
1571   AC_MSG_RESULT(no))
1572
1573 AC_MSG_CHECKING([for be64toh])
1574 AC_LINK_IFELSE([AC_LANG_PROGRAM([
1575 #include <stdio.h>
1576 #ifdef HAVE_ENDIAN_H
1577 #  include <endian.h>
1578 #endif
1579 #ifdef HAVE_SYS_ENDIAN_H
1580 #  include <sys/endian.h>
1581 #endif
1582 ], [unsigned long long x = be64toh(0); printf("%u", (unsigned)x);])],
1583   AC_MSG_RESULT(yes)
1584   AC_DEFINE(HAVE_BE64TOH, 1, [If we have be64toh]),
1585   AC_MSG_RESULT(no))
1586
1587 AC_SEARCH_LIBS([setusercontext], [util])
1588 AC_CHECK_FUNCS([tzset sigprocmask fcntl getpwnam endpwent getrlimit setrlimit setsid chroot kill chown sleep usleep random srandom recvmsg sendmsg writev socketpair glob initgroups strftime localtime_r setusercontext _beginthreadex endservent endprotoent fsync shmget accept4 getifaddrs])
1589 AC_CHECK_FUNCS([setresuid],,[AC_CHECK_FUNCS([setreuid])])
1590 AC_CHECK_FUNCS([setresgid],,[AC_CHECK_FUNCS([setregid])])
1591
1592 # check if setreuid en setregid fail, on MacOSX10.4(darwin8).
1593 if echo $target_os | grep darwin8 > /dev/null; then
1594         AC_DEFINE(DARWIN_BROKEN_SETREUID, 1, [Define this if on macOSX10.4-darwin8 and setreuid and setregid do not work])
1595 fi
1596 AC_CHECK_DECLS([inet_pton,inet_ntop], [], [], [
1597 AC_INCLUDES_DEFAULT
1598 #ifdef HAVE_NETINET_IN_H
1599 #include <netinet/in.h>
1600 #endif
1601
1602 #ifdef HAVE_NETINET_TCP_H
1603 #include <netinet/tcp.h>
1604 #endif
1605
1606 #ifdef HAVE_ARPA_INET_H
1607 #include <arpa/inet.h>
1608 #endif
1609
1610 #ifdef HAVE_WINSOCK2_H
1611 #include <winsock2.h>
1612 #endif
1613
1614 #ifdef HAVE_WS2TCPIP_H
1615 #include <ws2tcpip.h>
1616 #endif
1617 ])
1618 AC_REPLACE_FUNCS(inet_aton)
1619 AC_REPLACE_FUNCS(inet_pton)
1620 AC_REPLACE_FUNCS(inet_ntop)
1621 AC_REPLACE_FUNCS(snprintf)
1622 # test if snprintf return the proper length
1623 if test "x$ac_cv_func_snprintf" = xyes; then
1624     if test c${cross_compiling} = cno; then
1625         AC_MSG_CHECKING([for correct snprintf return value])
1626         AC_RUN_IFELSE([AC_LANG_SOURCE(AC_INCLUDES_DEFAULT
1627 [[
1628 int main(void) { return !(snprintf(NULL, 0, "test") == 4); }
1629 ]])], [AC_MSG_RESULT(yes)], [
1630                 AC_MSG_RESULT(no)
1631                 AC_DEFINE([SNPRINTF_RET_BROKEN], [], [define if (v)snprintf does not return length needed, (but length used)])
1632                 AC_LIBOBJ(snprintf)
1633           ])
1634     fi
1635 fi
1636 AC_REPLACE_FUNCS(strlcat)
1637 AC_REPLACE_FUNCS(strlcpy)
1638 AC_REPLACE_FUNCS(memmove)
1639 AC_REPLACE_FUNCS(gmtime_r)
1640 AC_REPLACE_FUNCS(isblank)
1641 AC_REPLACE_FUNCS(explicit_bzero)
1642 dnl without CTIME, ARC4-functions and without reallocarray.
1643 LIBOBJ_WITHOUT_CTIMEARC4="$LIBOBJS"
1644 AC_SUBST(LIBOBJ_WITHOUT_CTIMEARC4)
1645 AC_MSG_CHECKING([for reallocarray])
1646 AC_LINK_IFELSE([AC_LANG_SOURCE(AC_INCLUDES_DEFAULT
1647 [[
1648 #ifndef _OPENBSD_SOURCE
1649 #define _OPENBSD_SOURCE 1
1650 #endif
1651 #include <stdlib.h>
1652 int main(void) {
1653         void* p = reallocarray(NULL, 10, 100);
1654         free(p);
1655         return 0;
1656 }
1657 ]])], [AC_MSG_RESULT(yes)
1658         AC_DEFINE(HAVE_REALLOCARRAY, 1, [If we have reallocarray(3)])
1659 ], [
1660         AC_MSG_RESULT(no)
1661         AC_LIBOBJ(reallocarray)
1662 ])
1663 AC_CHECK_DECLS([reallocarray])
1664 if test "$USE_NSS" = "no"; then
1665         AC_REPLACE_FUNCS(arc4random)
1666         AC_REPLACE_FUNCS(arc4random_uniform)
1667         if test "$ac_cv_func_arc4random" = "no"; then
1668                 AC_LIBOBJ(arc4_lock)
1669                 AC_CHECK_FUNCS([getentropy],,[
1670                     if test "$USE_WINSOCK" = 1; then
1671                         AC_LIBOBJ(getentropy_win)
1672                     else
1673                         case "$host" in
1674                         Darwin|*darwin*)
1675                                 AC_LIBOBJ(getentropy_osx)
1676                         ;;
1677                         *solaris*|*sunos*|SunOS)
1678                                 AC_LIBOBJ(getentropy_solaris)
1679                                 AC_CHECK_HEADERS([sys/sha2.h],, [
1680                                         AC_CHECK_FUNCS([SHA512_Update],,[
1681                                                 AC_LIBOBJ(sha512)
1682                                         ])
1683                                 ], [AC_INCLUDES_DEFAULT])
1684                                 if test "$ac_cv_header_sys_sha2_h" = "yes"; then
1685                                         # this lib needed for sha2 on solaris
1686                                         LIBS="$LIBS -lmd"
1687                                 fi
1688                                 AC_SEARCH_LIBS([clock_gettime], [rt])
1689                         ;;
1690                         *freebsd*|*FreeBSD)
1691                                 AC_LIBOBJ(getentropy_freebsd)
1692                         ;;
1693                         *linux*|Linux|*)
1694                                 AC_LIBOBJ(getentropy_linux)
1695                                 AC_CHECK_FUNCS([SHA512_Update],,[
1696                                         AC_DEFINE([COMPAT_SHA512], [1], [Do sha512 definitions in config.h])
1697                                         AC_LIBOBJ(sha512)
1698                                 ])
1699                                 AC_CHECK_HEADERS([sys/sysctl.h],,, [AC_INCLUDES_DEFAULT])
1700                                 AC_CHECK_FUNCS([getauxval])
1701                                 AC_SEARCH_LIBS([clock_gettime], [rt])
1702                         ;;
1703                         esac
1704                     fi
1705                 ])
1706         fi
1707 fi
1708 LIBOBJ_WITHOUT_CTIME="$LIBOBJS"
1709 AC_SUBST(LIBOBJ_WITHOUT_CTIME)
1710 AC_REPLACE_FUNCS(ctime_r)
1711 AC_REPLACE_FUNCS(strsep)
1712
1713 AC_ARG_ENABLE(allsymbols, AC_HELP_STRING([--enable-allsymbols], [export all symbols from libunbound and link binaries to it, smaller install size but libunbound export table is polluted by internal symbols]))
1714 case "$enable_allsymbols" in
1715         yes)
1716         COMMON_OBJ_ALL_SYMBOLS=""
1717         UBSYMS=""
1718         EXTRALINK="-L. -L.libs -lunbound"
1719         AC_DEFINE(EXPORT_ALL_SYMBOLS, 1, [Define this if you enabled-allsymbols from libunbound to link binaries to it for smaller install size, but the libunbound export table is polluted by internal symbols])
1720         ;;
1721         no|*)
1722         COMMON_OBJ_ALL_SYMBOLS='$(COMMON_OBJ)'
1723         UBSYMS='-export-symbols $(srcdir)/libunbound/ubsyms.def'
1724         EXTRALINK=""
1725         ;;
1726 esac
1727 AC_SUBST(COMMON_OBJ_ALL_SYMBOLS)
1728 AC_SUBST(EXTRALINK)
1729 AC_SUBST(UBSYMS)
1730 if test x_$enable_lock_checks = x_yes; then
1731         UBSYMS="-export-symbols clubsyms.def"
1732         cp ${srcdir}/libunbound/ubsyms.def clubsyms.def
1733         echo lock_protect >> clubsyms.def
1734         echo lock_unprotect >> clubsyms.def
1735         echo lock_get_mem >> clubsyms.def
1736         echo checklock_start >> clubsyms.def
1737         echo checklock_stop >> clubsyms.def
1738         echo checklock_lock >> clubsyms.def
1739         echo checklock_unlock >> clubsyms.def
1740         echo checklock_init >> clubsyms.def
1741         echo checklock_thrcreate >> clubsyms.def
1742         echo checklock_thrjoin >> clubsyms.def
1743 fi
1744
1745 # check for dnstap if requested
1746 dt_DNSTAP([$UNBOUND_RUN_DIR/dnstap.sock],
1747     [
1748         AC_DEFINE([USE_DNSTAP], [1], [Define to 1 to enable dnstap support])
1749         AC_SUBST([ENABLE_DNSTAP], [1])
1750
1751         AC_SUBST([opt_dnstap_socket_path])
1752         ACX_ESCAPE_BACKSLASH($opt_dnstap_socket_path, hdr_dnstap_socket_path)
1753         AC_DEFINE_UNQUOTED(DNSTAP_SOCKET_PATH,
1754             ["$hdr_dnstap_socket_path"], [default dnstap socket path])
1755         AC_SUBST(DNSTAP_SOCKET_PATH,["$hdr_dnstap_socket_path"])
1756
1757         AC_SUBST([DNSTAP_SRC], ["dnstap/dnstap.c dnstap/dnstap.pb-c.c dnstap/dnstap_fstrm.c dnstap/dtstream.c"])
1758         AC_SUBST([DNSTAP_OBJ], ["dnstap.lo dnstap.pb-c.lo dnstap_fstrm.lo dtstream.lo"])
1759     ],
1760     [
1761         AC_SUBST([ENABLE_DNSTAP], [0])
1762     ]
1763 )
1764
1765 # check for dnscrypt if requested
1766 dnsc_DNSCRYPT([
1767         AC_DEFINE([USE_DNSCRYPT], [1], [Define to 1 to enable dnscrypt support])
1768         AC_SUBST([ENABLE_DNSCRYPT], [1])
1769
1770         AC_SUBST([DNSCRYPT_SRC], ["dnscrypt/dnscrypt.c"])
1771         AC_SUBST([DNSCRYPT_OBJ], ["dnscrypt.lo"])
1772     ],
1773     [
1774         AC_SUBST([ENABLE_DNSCRYPT], [0])
1775     ]
1776 )
1777
1778 # check for cachedb if requested
1779 AC_ARG_ENABLE(cachedb, AC_HELP_STRING([--enable-cachedb], [enable cachedb module that can use external cache storage]))
1780 # turn on cachedb when hiredis support is enabled.
1781 if test "$found_libhiredis" = "yes"; then enable_cachedb="yes"; fi
1782 case "$enable_cachedb" in
1783     yes)
1784         AC_DEFINE([USE_CACHEDB], [1], [Define to 1 to use cachedb support])
1785         ;;
1786     no|*)
1787         # nothing
1788         ;;
1789 esac
1790
1791 # check for ipsecmod if requested
1792 AC_ARG_ENABLE(ipsecmod, AC_HELP_STRING([--enable-ipsecmod], [Enable ipsecmod module that facilitates opportunistic IPsec]))
1793 case "$enable_ipsecmod" in
1794         yes)
1795                 AC_DEFINE([USE_IPSECMOD], [1], [Define to 1 to use ipsecmod support.])
1796                 IPSECMOD_OBJ="ipsecmod.lo ipsecmod-whitelist.lo"
1797                 AC_SUBST(IPSECMOD_OBJ)
1798                 IPSECMOD_HEADER='$(srcdir)/ipsecmod/ipsecmod.h $(srcdir)/ipsecmod/ipsecmod-whitelist.h'
1799                 AC_SUBST(IPSECMOD_HEADER)
1800                 ;;
1801         no|*)
1802                 # nothing
1803                 ;;
1804 esac
1805
1806 # check for ipset if requested
1807 AC_ARG_ENABLE(ipset, AC_HELP_STRING([--enable-ipset], [enable ipset module]))
1808 case "$enable_ipset" in
1809     yes)
1810                 AC_DEFINE([USE_IPSET], [1], [Define to 1 to use ipset support])
1811                 IPSET_SRC="ipset/ipset.c"
1812                 AC_SUBST(IPSET_SRC)
1813                 IPSET_OBJ="ipset.lo"
1814                 AC_SUBST(IPSET_OBJ)
1815
1816                 # mnl
1817                 AC_ARG_WITH(libmnl, AC_HELP_STRING([--with-libmnl=path],
1818                         [specify explicit path for libmnl.]),
1819                         [ ],[ withval="yes" ])
1820                 found_libmnl="no"
1821                 AC_MSG_CHECKING(for libmnl)
1822                 if test x_$withval = x_ -o x_$withval = x_yes; then
1823                         withval="/usr/local /opt/local /usr/lib /usr/pkg /usr/sfw /usr"
1824                 fi
1825                 for dir in $withval ; do
1826                         if test -f "$dir/include/libmnl/libmnl.h"; then
1827                                 found_libmnl="yes"
1828                                 dnl assume /usr is in default path.
1829                                 if test "$dir" != "/usr"; then
1830                                         CPPFLAGS="$CPPFLAGS -I$dir/include"
1831                                         LDFLAGS="$LDFLAGS -L$dir/lib"
1832                                 fi
1833                                 AC_MSG_RESULT(found in $dir)
1834                                 LIBS="$LIBS -lmnl"
1835                                 break;
1836                         fi
1837                 done
1838                 if test x_$found_libmnl != x_yes; then
1839                         AC_ERROR([Could not find libmnl, libmnl.h])
1840                 fi
1841                 ;;
1842     no|*)
1843         # nothing
1844                 ;;
1845 esac
1846 AC_ARG_ENABLE(explicit-port-randomisation, AC_HELP_STRING([--disable-explicit-port-randomisation], [disable explicit source port randomisation and rely on the kernel to provide random source ports]))
1847 case "$enable_explicit_port_randomisation" in
1848         no)
1849                 AC_DEFINE([DISABLE_EXPLICIT_PORT_RANDOMISATION], [1], [Define this to enable kernel based UDP source port randomization.])
1850                 ;;
1851         yes|*)
1852                 ;;
1853 esac
1854
1855
1856 AC_MSG_CHECKING([if ${MAKE:-make} supports $< with implicit rule in scope])
1857 # on openBSD, the implicit rule make $< work.
1858 # on Solaris, it does not work ($? is changed sources, $^ lists dependencies).
1859 # gmake works.
1860 cat >conftest.make <<EOF
1861 all:    conftest.lo
1862
1863 conftest.lo foo.lo bla.lo:
1864         if test -f "\$<"; then touch \$@; fi
1865
1866 .SUFFIXES: .lo
1867 .c.lo:
1868         if test -f "\$<"; then touch \$@; fi
1869
1870 conftest.lo:        conftest.dir/conftest.c
1871 EOF
1872 mkdir conftest.dir
1873 touch conftest.dir/conftest.c
1874 rm -f conftest.lo conftest.c
1875 ${MAKE:-make} -f conftest.make >/dev/null
1876 rm -f conftest.make conftest.c conftest.dir/conftest.c
1877 rm -rf conftest.dir
1878 if test ! -f conftest.lo; then
1879         AC_MSG_RESULT(no)
1880         SOURCEDETERMINE='echo "$^" | awk "-F " "{print \$$1;}" > .source'
1881         SOURCEFILE='`cat .source`'
1882 else
1883         AC_MSG_RESULT(yes)
1884         SOURCEDETERMINE=':'
1885         SOURCEFILE='$<'
1886 fi
1887 rm -f conftest.lo
1888 AC_SUBST(SOURCEDETERMINE)
1889 AC_SUBST(SOURCEFILE)
1890
1891 # see if we want to build the library or everything
1892 ALLTARGET="alltargets"
1893 INSTALLTARGET="install-all"
1894 AC_ARG_WITH(libunbound-only, AC_HELP_STRING([--with-libunbound-only],
1895         [do not build daemon and tool programs]),
1896         [
1897         if test "$withval" = "yes"; then
1898                 ALLTARGET="lib"
1899                 INSTALLTARGET="install-lib"
1900         fi
1901 ])
1902 if test $ALLTARGET = "alltargets"; then
1903         if test $USE_NSS = "yes"; then
1904                 AC_ERROR([--with-nss can only be used in combination with --with-libunbound-only.])
1905         fi
1906         if test $USE_NETTLE = "yes"; then
1907                 AC_ERROR([--with-nettle can only be used in combination with --with-libunbound-only.])
1908         fi
1909 fi
1910
1911 AC_SUBST(ALLTARGET)
1912 AC_SUBST(INSTALLTARGET)
1913
1914 ACX_STRIP_EXT_FLAGS
1915 if test -n "$LATE_LDFLAGS"; then
1916   LDFLAGS="$LATE_LDFLAGS $LDFLAGS"
1917 fi
1918 # remove start spaces
1919 LDFLAGS=`echo "$LDFLAGS"|sed -e 's/^ *//'`
1920 LIBS=`echo "$LIBS"|sed -e 's/^ *//'`
1921
1922 AC_DEFINE_UNQUOTED([MAXSYSLOGMSGLEN], [10240], [Define to the maximum message length to pass to syslog.])
1923
1924 AH_BOTTOM(
1925 dnl this must be first AH_CONFIG, to define the flags before any includes.
1926 AHX_CONFIG_EXT_FLAGS
1927
1928 dnl includes
1929 [
1930 #ifndef _OPENBSD_SOURCE
1931 #define _OPENBSD_SOURCE 1
1932 #endif
1933
1934 #ifndef UNBOUND_DEBUG
1935 # ifndef NDEBUG
1936 #  define NDEBUG
1937 # endif
1938 #endif
1939
1940 /** Use small-ldns codebase */
1941 #define USE_SLDNS 1
1942 #ifdef HAVE_SSL
1943 #  define LDNS_BUILD_CONFIG_HAVE_SSL 1
1944 #endif
1945
1946 #include <stdio.h>
1947 #include <string.h>
1948 #include <unistd.h>
1949 #include <assert.h>
1950
1951 #if STDC_HEADERS
1952 #include <stdlib.h>
1953 #include <stddef.h>
1954 #endif
1955
1956 #ifdef HAVE_STDARG_H
1957 #include <stdarg.h>
1958 #endif
1959
1960 #ifdef HAVE_STDINT_H
1961 #include <stdint.h>
1962 #endif
1963
1964 #include <errno.h>
1965
1966 #if HAVE_SYS_PARAM_H
1967 #include <sys/param.h>
1968 #endif
1969
1970 #ifdef HAVE_SYS_SOCKET_H
1971 #include <sys/socket.h>
1972 #endif
1973
1974 #ifdef HAVE_SYS_UIO_H
1975 #include <sys/uio.h>
1976 #endif
1977
1978 #ifdef HAVE_NETINET_IN_H
1979 #include <netinet/in.h>
1980 #endif
1981
1982 #ifdef HAVE_NETINET_TCP_H
1983 #include <netinet/tcp.h>
1984 #endif
1985
1986 #ifdef HAVE_ARPA_INET_H
1987 #include <arpa/inet.h>
1988 #endif
1989
1990 #ifdef HAVE_WINSOCK2_H
1991 #include <winsock2.h>
1992 #endif
1993
1994 #ifdef HAVE_WS2TCPIP_H
1995 #include <ws2tcpip.h>
1996 #endif
1997
1998 #ifndef USE_WINSOCK
1999 #define ARG_LL "%ll"
2000 #else
2001 #define ARG_LL "%I64"
2002 #endif
2003
2004 #ifndef AF_LOCAL
2005 #define AF_LOCAL AF_UNIX
2006 #endif
2007 ]
2008
2009 AHX_CONFIG_FORMAT_ATTRIBUTE
2010 AHX_CONFIG_UNUSED_ATTRIBUTE
2011 AHX_CONFIG_FSEEKO
2012 AHX_CONFIG_MAXHOSTNAMELEN
2013 #if !defined(HAVE_SNPRINTF) || defined(SNPRINTF_RET_BROKEN)
2014 #define snprintf snprintf_unbound
2015 #define vsnprintf vsnprintf_unbound
2016 #include <stdarg.h>
2017 int snprintf (char *str, size_t count, const char *fmt, ...);
2018 int vsnprintf (char *str, size_t count, const char *fmt, va_list arg);
2019 #endif /* HAVE_SNPRINTF or SNPRINTF_RET_BROKEN */
2020 AHX_CONFIG_INET_PTON(unbound)
2021 AHX_CONFIG_INET_NTOP(unbound)
2022 AHX_CONFIG_INET_ATON(unbound)
2023 AHX_CONFIG_MEMMOVE(unbound)
2024 AHX_CONFIG_STRLCAT(unbound)
2025 AHX_CONFIG_STRLCPY(unbound)
2026 AHX_CONFIG_GMTIME_R(unbound)
2027 AHX_CONFIG_REALLOCARRAY(unbound)
2028 AHX_CONFIG_W32_SLEEP
2029 AHX_CONFIG_W32_USLEEP
2030 AHX_CONFIG_W32_RANDOM
2031 AHX_CONFIG_W32_SRANDOM
2032 AHX_CONFIG_W32_FD_SET_T
2033 AHX_CONFIG_IPV6_MIN_MTU
2034 AHX_MEMCMP_BROKEN(unbound)
2035
2036 [
2037 #ifndef HAVE_CTIME_R
2038 #define ctime_r unbound_ctime_r
2039 char *ctime_r(const time_t *timep, char *buf);
2040 #endif
2041
2042 #ifndef HAVE_STRSEP
2043 #define strsep unbound_strsep
2044 char *strsep(char **stringp, const char *delim);
2045 #endif
2046
2047 #ifndef HAVE_ISBLANK
2048 #define isblank unbound_isblank
2049 int isblank(int c);
2050 #endif
2051
2052 #ifndef HAVE_EXPLICIT_BZERO
2053 #define explicit_bzero unbound_explicit_bzero
2054 void explicit_bzero(void* buf, size_t len);
2055 #endif
2056
2057 #if defined(HAVE_INET_NTOP) && !HAVE_DECL_INET_NTOP
2058 const char *inet_ntop(int af, const void *src, char *dst, size_t size);
2059 #endif
2060
2061 #if defined(HAVE_INET_PTON) && !HAVE_DECL_INET_PTON
2062 int inet_pton(int af, const char* src, void* dst);
2063 #endif
2064
2065 #if !defined(HAVE_STRPTIME) || !defined(STRPTIME_WORKS)
2066 #define strptime unbound_strptime
2067 struct tm;
2068 char *strptime(const char *s, const char *format, struct tm *tm);
2069 #endif
2070
2071 #if !HAVE_DECL_REALLOCARRAY
2072 void *reallocarray(void *ptr, size_t nmemb, size_t size);
2073 #endif
2074
2075 #ifdef HAVE_LIBBSD
2076 #include <bsd/string.h>
2077 #include <bsd/stdlib.h>
2078 #endif
2079
2080 #ifdef HAVE_LIBRESSL
2081 #  if !HAVE_DECL_STRLCPY
2082 size_t strlcpy(char *dst, const char *src, size_t siz);
2083 #  endif
2084 #  if !HAVE_DECL_STRLCAT
2085 size_t strlcat(char *dst, const char *src, size_t siz);
2086 #  endif
2087 #  if !HAVE_DECL_ARC4RANDOM && defined(HAVE_ARC4RANDOM)
2088 uint32_t arc4random(void);
2089 #  endif
2090 #  if !HAVE_DECL_ARC4RANDOM_UNIFORM && defined(HAVE_ARC4RANDOM_UNIFORM)
2091 uint32_t arc4random_uniform(uint32_t upper_bound);
2092 #  endif
2093 #endif /* HAVE_LIBRESSL */
2094 #ifndef HAVE_ARC4RANDOM
2095 int getentropy(void* buf, size_t len);
2096 uint32_t arc4random(void);
2097 void arc4random_buf(void* buf, size_t n);
2098 void _ARC4_LOCK(void);
2099 void _ARC4_UNLOCK(void);
2100 void _ARC4_LOCK_DESTROY(void);
2101 #endif
2102 #ifndef HAVE_ARC4RANDOM_UNIFORM
2103 uint32_t arc4random_uniform(uint32_t upper_bound);
2104 #endif
2105 #ifdef COMPAT_SHA512
2106 #ifndef SHA512_DIGEST_LENGTH
2107 #define SHA512_BLOCK_LENGTH             128
2108 #define SHA512_DIGEST_LENGTH            64
2109 #define SHA512_DIGEST_STRING_LENGTH     (SHA512_DIGEST_LENGTH * 2 + 1)
2110 typedef struct _SHA512_CTX {
2111         uint64_t        state[8];
2112         uint64_t        bitcount[2];
2113         uint8_t buffer[SHA512_BLOCK_LENGTH];
2114 } SHA512_CTX;
2115 #endif /* SHA512_DIGEST_LENGTH */
2116 void SHA512_Init(SHA512_CTX*);
2117 void SHA512_Update(SHA512_CTX*, void*, size_t);
2118 void SHA512_Final(uint8_t[SHA512_DIGEST_LENGTH], SHA512_CTX*);
2119 unsigned char *SHA512(void* data, unsigned int data_len, unsigned char *digest);
2120 #endif /* COMPAT_SHA512 */
2121
2122
2123
2124 #if defined(HAVE_EVENT_H) && !defined(HAVE_EVENT_BASE_ONCE) && !(defined(HAVE_EV_LOOP) || defined(HAVE_EV_DEFAULT_LOOP)) && (defined(HAVE_PTHREAD) || defined(HAVE_SOLARIS_THREADS))
2125    /* using version of libevent that is not threadsafe. */
2126 #  define LIBEVENT_SIGNAL_PROBLEM 1
2127 #endif
2128
2129 #ifndef CHECKED_INET6
2130 #  define CHECKED_INET6
2131 #  ifdef AF_INET6
2132 #    define INET6
2133 #  else
2134 #    define AF_INET6        28
2135 #  endif
2136 #endif /* CHECKED_INET6 */
2137
2138 #ifndef HAVE_GETADDRINFO
2139 struct sockaddr_storage;
2140 #include "compat/fake-rfc2553.h"
2141 #endif
2142
2143 #ifdef UNBOUND_ALLOC_STATS
2144 #  define malloc(s) unbound_stat_malloc_log(s, __FILE__, __LINE__, __func__)
2145 #  define calloc(n,s) unbound_stat_calloc_log(n, s, __FILE__, __LINE__, __func__)
2146 #  define free(p) unbound_stat_free_log(p, __FILE__, __LINE__, __func__)
2147 #  define realloc(p,s) unbound_stat_realloc_log(p, s, __FILE__, __LINE__, __func__)
2148 void *unbound_stat_malloc(size_t size);
2149 void *unbound_stat_calloc(size_t nmemb, size_t size);
2150 void unbound_stat_free(void *ptr);
2151 void *unbound_stat_realloc(void *ptr, size_t size);
2152 void *unbound_stat_malloc_log(size_t size, const char* file, int line,
2153         const char* func);
2154 void *unbound_stat_calloc_log(size_t nmemb, size_t size, const char* file,
2155         int line, const char* func);
2156 void unbound_stat_free_log(void *ptr, const char* file, int line,
2157         const char* func);
2158 void *unbound_stat_realloc_log(void *ptr, size_t size, const char* file,
2159         int line, const char* func);
2160 #elif defined(UNBOUND_ALLOC_LITE)
2161 #  include "util/alloc.h"
2162 #endif /* UNBOUND_ALLOC_LITE and UNBOUND_ALLOC_STATS */
2163
2164 /** default port for DNS traffic. */
2165 #define UNBOUND_DNS_PORT 53
2166 /** default port for DNS over TLS traffic. */
2167 #define UNBOUND_DNS_OVER_TLS_PORT 853
2168 /** default port for DNS over HTTPS traffic. */
2169 #define UNBOUND_DNS_OVER_HTTPS_PORT 443
2170 /** default port for unbound control traffic, registered port with IANA,
2171     ub-dns-control  8953/tcp    unbound dns nameserver control */
2172 #define UNBOUND_CONTROL_PORT 8953
2173 /** the version of unbound-control that this software implements */
2174 #define UNBOUND_CONTROL_VERSION 1
2175
2176 ])
2177
2178 dnl if we build from source tree, the man pages need @date@ and @version@
2179 dnl if this is a distro tarball, that was already done by makedist.sh
2180 AC_SUBST(version, [VERSION_MAJOR.VERSION_MINOR.VERSION_MICRO])
2181 AC_SUBST(date, [`date +'%b %e, %Y'`])
2182
2183 AC_CONFIG_FILES([Makefile doc/example.conf doc/libunbound.3 doc/unbound.8 doc/unbound-anchor.8 doc/unbound-checkconf.8 doc/unbound.conf.5 doc/unbound-control.8 doc/unbound-host.1 smallapp/unbound-control-setup.sh dnstap/dnstap_config.h dnscrypt/dnscrypt_config.h contrib/libunbound.pc contrib/unbound.socket contrib/unbound.service contrib/unbound_portable.service])
2184 AC_CONFIG_HEADER([config.h])
2185 AC_OUTPUT