2 # Process this file with autoconf to produce a configure script.
4 sinclude(acx_nlnetlabs.m4)
5 sinclude(ax_pthread.m4)
6 sinclude(acx_python.m4)
7 sinclude(ac_pkg_swig.m4)
9 # must be numbers. ac_defun because of later processing
10 m4_define([VERSION_MAJOR],[1])
11 m4_define([VERSION_MINOR],[4])
12 m4_define([VERSION_MICRO],[22])
13 AC_INIT(unbound, m4_defn([VERSION_MAJOR]).m4_defn([VERSION_MINOR]).m4_defn([VERSION_MICRO]), unbound-bugs@nlnetlabs.nl, unbound)
14 AC_SUBST(UNBOUND_VERSION_MAJOR, [VERSION_MAJOR])
15 AC_SUBST(UNBOUND_VERSION_MINOR, [VERSION_MINOR])
16 AC_SUBST(UNBOUND_VERSION_MICRO, [VERSION_MICRO])
28 # 1.3.0 had 1:0:0 # ub_cancel and -export-symbols.
33 # 1.4.0-snapshots had 1:5:0
34 # 1.4.0 had 1:5:0 (not 2:0:0) # ub_result.why_bogus
48 # and 1.4.13p1 and 1.4.13.p2
50 # 1.4.15 had 3:0:1 # adds ub_version()
55 # 1.4.20 had 4:0:2 # adds libunbound.ttl # but shipped 3:5:1
58 # Current -- the number of the binary API that we're implementing
59 # Revision -- which iteration of the implementation of the binary
60 # API are we supplying?
61 # Age -- How many previous binary API versions do we also
64 # If we release a new version that does not change the binary API,
67 # If we release a new version that changes the binary API, but does
68 # not break programs compiled against the old binary API, increment
69 # Current and Age. Set Revision to 0, since this is the first
70 # implementation of the new API.
72 # Otherwise, we're changing the binary API and breaking bakward
73 # compatibility with old binaries. Increment Current. Set Age to 0,
74 # since we're backward compatible with no previous APIs. Set Revision
76 AC_SUBST(LIBUNBOUND_CURRENT)
77 AC_SUBST(LIBUNBOUND_REVISION)
78 AC_SUBST(LIBUNBOUND_AGE)
82 while test -n "$1"; do
83 cmdline="$cmdline '"`echo $1 | sed -e 's/\\\\/\\\\\\\\/g' | sed -e 's/"/\\\\"/g' `"'"
88 AC_DEFINE_UNQUOTED(CONFIGURE_BUILD_WITH, ["$cmdline"], [configure flags])
90 AC_DEFINE_UNQUOTED(CONFIGURE_TARGET, ["$target"], [configure target system])
91 AC_DEFINE_UNQUOTED(CONFIGURE_DATE, ["`date`"], [configure date])
95 if test "$ac_cv_header_minix_config_h" = "yes"; then
96 AC_DEFINE(_NETBSD_SOURCE,1, [Enable for compile on Minix])
100 dnl By default set prefix to /usr/local
109 if uname -s 2>&1 | grep MINGW32 >/dev/null; then on_mingw="yes"
111 if echo $target | grep mingw32 >/dev/null; then on_mingw="yes"
112 else on_mingw="no"; fi
116 # Determine configuration file
117 # the eval is to evaluate shell expansion twice
118 if test $on_mingw = "no"; then
119 ub_conf_file=`eval echo "${sysconfdir}/unbound/unbound.conf"`
121 ub_conf_file="C:\\Program Files\\Unbound\\service.conf"
123 AC_ARG_WITH([conf_file],
124 AC_HELP_STRING([--with-conf-file=path],
125 [Pathname to the Unbound configuration file]),
126 [ub_conf_file="$withval"])
127 AC_SUBST(ub_conf_file)
128 ACX_ESCAPE_BACKSLASH($ub_conf_file, hdr_config)
129 AC_DEFINE_UNQUOTED(CONFIGFILE, ["$hdr_config"], [Pathname to the Unbound configuration file])
131 # Determine run, chroot directory and pidfile locations
133 AC_HELP_STRING([--with-run-dir=path],
134 [set default directory to chdir to (by default dir part of cfg file)]),
135 UNBOUND_RUN_DIR="$withval",
136 if test $on_mingw = no; then
137 UNBOUND_RUN_DIR=`dirname "$ub_conf_file"`
142 AC_SUBST(UNBOUND_RUN_DIR)
143 ACX_ESCAPE_BACKSLASH($UNBOUND_RUN_DIR, hdr_run)
144 AC_DEFINE_UNQUOTED(RUN_DIR, ["$hdr_run"], [Directory to chdir to])
146 AC_ARG_WITH(chroot-dir,
147 AC_HELP_STRING([--with-chroot-dir=path],
148 [set default directory to chroot to (by default same as run-dir)]),
149 UNBOUND_CHROOT_DIR="$withval",
150 if test $on_mingw = no; then
151 UNBOUND_CHROOT_DIR="$UNBOUND_RUN_DIR"
153 UNBOUND_CHROOT_DIR=""
156 AC_SUBST(UNBOUND_CHROOT_DIR)
157 ACX_ESCAPE_BACKSLASH($UNBOUND_CHROOT_DIR, hdr_chroot)
158 AC_DEFINE_UNQUOTED(CHROOT_DIR, ["$hdr_chroot"], [Directory to chroot to])
160 AC_ARG_WITH(share-dir,
161 AC_HELP_STRING([--with-share-dir=path],
162 [set default directory with shared data (by default same as share/unbound)]),
163 UNBOUND_SHARE_DIR="$withval",
164 UNBOUND_SHARE_DIR="$UNBOUND_RUN_DIR")
165 AC_SUBST(UNBOUND_SHARE_DIR)
166 AC_DEFINE_UNQUOTED(SHARE_DIR, ["$UNBOUND_SHARE_DIR"], [Shared data])
169 AC_HELP_STRING([--with-pidfile=filename],
170 [set default pathname to unbound pidfile (default run-dir/unbound.pid)]),
171 UNBOUND_PIDFILE="$withval",
172 if test $on_mingw = no; then
173 UNBOUND_PIDFILE="$UNBOUND_RUN_DIR/unbound.pid"
178 AC_SUBST(UNBOUND_PIDFILE)
179 ACX_ESCAPE_BACKSLASH($UNBOUND_PIDFILE, hdr_pid)
180 AC_DEFINE_UNQUOTED(PIDFILE, ["$hdr_pid"], [default pidfile location])
182 AC_ARG_WITH(rootkey-file,
183 AC_HELP_STRING([--with-rootkey-file=filename],
184 [set default pathname to root key file (default run-dir/root.key). This file is read and written.]),
185 UNBOUND_ROOTKEY_FILE="$withval",
186 if test $on_mingw = no; then
187 UNBOUND_ROOTKEY_FILE="$UNBOUND_RUN_DIR/root.key"
189 UNBOUND_ROOTKEY_FILE="C:\\Program Files\\Unbound\\root.key"
192 AC_SUBST(UNBOUND_ROOTKEY_FILE)
193 ACX_ESCAPE_BACKSLASH($UNBOUND_ROOTKEY_FILE, hdr_rkey)
194 AC_DEFINE_UNQUOTED(ROOT_ANCHOR_FILE, ["$hdr_rkey"], [default rootkey location])
196 AC_ARG_WITH(rootcert-file,
197 AC_HELP_STRING([--with-rootcert-file=filename],
198 [set default pathname to root update certificate file (default run-dir/icannbundle.pem). This file need not exist if you are content with the builtin.]),
199 UNBOUND_ROOTCERT_FILE="$withval",
200 if test $on_mingw = no; then
201 UNBOUND_ROOTCERT_FILE="$UNBOUND_RUN_DIR/icannbundle.pem"
203 UNBOUND_ROOTCERT_FILE="C:\\Program Files\\Unbound\\icannbundle.pem"
206 AC_SUBST(UNBOUND_ROOTCERT_FILE)
207 ACX_ESCAPE_BACKSLASH($UNBOUND_ROOTCERT_FILE, hdr_rpem)
208 AC_DEFINE_UNQUOTED(ROOT_CERT_FILE, ["$hdr_rpem"], [default rootcert location])
210 AC_ARG_WITH(username,
211 AC_HELP_STRING([--with-username=user],
212 [set default user that unbound changes to (default user is unbound)]),
213 UNBOUND_USERNAME="$withval",
214 UNBOUND_USERNAME="unbound")
215 AC_SUBST(UNBOUND_USERNAME)
216 AC_DEFINE_UNQUOTED(UB_USERNAME, ["$UNBOUND_USERNAME"], [default username])
218 AC_DEFINE(WINVER, 0x0502, [the version of the windows API enabled])
219 ACX_RSRC_VERSION(wnvs)
220 AC_DEFINE_UNQUOTED(RSRC_PACKAGE_VERSION, [$wnvs], [version number for resource files])
222 # Checks for typedefs, structures, and compiler characteristics.
225 # allow user to override the -g -O2 flags.
226 if test "x$CFLAGS" = "x" ; then
227 ACX_CHECK_COMPILER_FLAG(g, [CFLAGS="$CFLAGS -g"])
228 ACX_CHECK_COMPILER_FLAG(O2, [CFLAGS="$CFLAGS -O2"])
232 ACX_DETERMINE_EXT_FLAGS_UNBOUND
234 # debug mode flags warnings
235 AC_ARG_ENABLE(checking, AC_HELP_STRING([--enable-checking], [Enable warnings, asserts, makefile-dependencies]))
236 AC_ARG_ENABLE(debug, AC_HELP_STRING([--enable-debug], [same as enable-checking]))
237 if test "$enable_debug" = "yes"; then debug_enabled="$enable_debug";
238 else debug_enabled="$enable_checking"; fi
239 AC_SUBST(debug_enabled)
240 case "$debug_enabled" in
242 ACX_CHECK_COMPILER_FLAG(W, [CFLAGS="$CFLAGS -W"])
243 ACX_CHECK_COMPILER_FLAG(Wall, [CFLAGS="$CFLAGS -Wall"])
244 ACX_CHECK_COMPILER_FLAG(Wextra, [CFLAGS="$CFLAGS -Wextra"])
245 ACX_CHECK_COMPILER_FLAG(Wdeclaration-after-statement, [CFLAGS="$CFLAGS -Wdeclaration-after-statement"])
246 AC_DEFINE([UNBOUND_DEBUG], [], [define this to enable debug checks.])
255 ACX_CHECK_FORMAT_ATTRIBUTE
256 ACX_CHECK_UNUSED_ATTRIBUTE
258 if test "$srcdir" != "."; then
259 CPPFLAGS="$CPPFLAGS -I$srcdir"
262 AC_DEFUN([ACX_YYLEX_DESTROY], [
263 AC_MSG_CHECKING([for yylex_destroy])
264 if echo %% | $LEX -t 2>&1 | grep yylex_destroy >/dev/null 2>&1; then
265 AC_DEFINE(LEX_HAS_YYLEX_DESTROY, 1, [if lex has yylex_destroy])
267 else AC_MSG_RESULT(no); fi
273 AC_CHECK_PROG(doxygen, doxygen, doxygen)
274 AC_CHECK_TOOL(STRIP, strip)
277 # Checks for header files.
278 AC_CHECK_HEADERS([stdarg.h stdbool.h netinet/in.h sys/param.h sys/socket.h sys/uio.h sys/resource.h arpa/inet.h syslog.h netdb.h sys/wait.h pwd.h glob.h grp.h login_cap.h winsock2.h ws2tcpip.h],,, [AC_INCLUDES_DEFAULT])
281 # Using own tests for int64* because autoconf builtin only give 32bit.
282 AC_CHECK_TYPE(int8_t, signed char)
283 AC_CHECK_TYPE(int16_t, short)
284 AC_CHECK_TYPE(int32_t, int)
285 AC_CHECK_TYPE(int64_t, long long)
286 AC_CHECK_TYPE(uint8_t, unsigned char)
287 AC_CHECK_TYPE(uint16_t, unsigned short)
288 AC_CHECK_TYPE(uint32_t, unsigned int)
289 AC_CHECK_TYPE(uint64_t, unsigned long long)
291 AC_CHECK_TYPE(ssize_t, int)
300 ACX_CHECK_MEMCMP_SIGNED
302 AC_CHECK_SIZEOF(time_t,,[
304 #ifdef TIME_WITH_SYS_TIME
305 # include <sys/time.h>
308 # ifdef HAVE_SYS_TIME_H
309 # include <sys/time.h>
316 # add option to disable the evil rpath
318 AC_SUBST(RUNTIME_PATH)
320 # check to see if libraries are needed for these functions.
321 AC_SEARCH_LIBS([inet_pton], [nsl])
322 AC_SEARCH_LIBS([socket], [socket])
324 # check wether strptime also works
325 AC_DEFUN([AC_CHECK_STRPTIME_WORKS],
326 [AC_REQUIRE([AC_PROG_CC])
327 AC_MSG_CHECKING(whether strptime works)
328 if test c${cross_compiling} = cno; then
329 AC_RUN_IFELSE([AC_LANG_SOURCE([[
330 #define _XOPEN_SOURCE
332 int main(void) { struct tm tm; char *res;
333 res = strptime("2010-07-15T00:00:00+00:00", "%t%Y%t-%t%m%t-%t%d%tT%t%H%t:%t%M%t:%t%S%t", &tm);
335 res = strptime("20070207111842", "%Y%m%d%H%M%S", &tm);
336 if (!res) return 1; return 0; }
337 ]])] , [eval "ac_cv_c_strptime_works=yes"], [eval "ac_cv_c_strptime_works=no"])
339 eval "ac_cv_c_strptime_works=maybe"
341 AC_MSG_RESULT($ac_cv_c_strptime_works)
342 if test $ac_cv_c_strptime_works = no; then
345 AC_DEFINE_UNQUOTED([STRPTIME_WORKS], 1, [use default strptime.])
349 # check some functions of the OS before linking libs (while still runnable).
355 ACX_CHECK_NONBLOCKING_BROKEN
357 AC_CHECK_FUNCS([strptime],[AC_CHECK_STRPTIME_WORKS],[AC_LIBOBJ([strptime])])
359 # set memory allocation checking if requested
360 AC_ARG_ENABLE(alloc-checks, AC_HELP_STRING([--enable-alloc-checks],
361 [ enable to memory allocation statistics, for debug purposes ]),
363 AC_ARG_ENABLE(alloc-lite, AC_HELP_STRING([--enable-alloc-lite],
364 [ enable for lightweight alloc assertions, for debug purposes ]),
366 AC_ARG_ENABLE(alloc-nonregional, AC_HELP_STRING([--enable-alloc-nonregional],
367 [ enable nonregional allocs, slow but exposes regional allocations to other memory purifiers, for debug purposes ]),
369 if test x_$enable_alloc_nonregional = x_yes; then
370 AC_DEFINE(UNBOUND_ALLOC_NONREGIONAL, 1, [use malloc not regions, for debug use])
372 if test x_$enable_alloc_checks = x_yes; then
373 AC_DEFINE(UNBOUND_ALLOC_STATS, 1, [use statistics for allocs and frees, for debug use])
375 if test x_$enable_alloc_lite = x_yes; then
376 AC_DEFINE(UNBOUND_ALLOC_LITE, 1, [use to enable lightweight alloc assertions, for debug use])
378 ACX_FUNC_MALLOC([unbound])
382 # check windows threads (we use them, not pthreads, on windows).
383 if test "$on_mingw" = "yes"; then
384 # check windows threads
385 AC_CHECK_HEADERS([windows.h],,, [AC_INCLUDES_DEFAULT])
386 AC_MSG_CHECKING([for CreateThread])
387 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([
388 #ifdef HAVE_WINDOWS_H
392 HANDLE t = CreateThread(NULL, 0, NULL, NULL, 0, NULL);
395 AC_DEFINE(HAVE_WINDOWS_THREADS, 1, [Using Windows threads])
401 # not on mingw, check thread libraries.
403 # check for thread library.
404 # check this first, so that the pthread lib does not get linked in via
405 # libssl or libpython, and thus distorts the tests, and we end up using
406 # the non-threadsafe C libraries.
407 AC_ARG_WITH(pthreads, AC_HELP_STRING([--with-pthreads],
408 [use pthreads library, or --without-pthreads to disable threading support.]),
409 [ ],[ withval="yes" ])
411 if test x_$withval != x_no; then
413 AC_DEFINE(HAVE_PTHREAD,1,[Define if you have POSIX threads libraries and header files.])
414 LIBS="$PTHREAD_LIBS $LIBS"
415 CFLAGS="$CFLAGS $PTHREAD_CFLAGS"
418 AC_CHECK_TYPES([pthread_spinlock_t, pthread_rwlock_t],,,[#include <pthread.h>])
422 # check solaris thread library
423 AC_ARG_WITH(solaris-threads, AC_HELP_STRING([--with-solaris-threads],
424 [use solaris native thread library.]), [ ],[ withval="no" ])
425 ub_have_sol_threads=no
426 if test x_$withval != x_no; then
427 if test x_$ub_have_pthreads != x_no; then
428 AC_WARN([Have pthreads already, ignoring --with-solaris-threads])
430 AC_SEARCH_LIBS(thr_create, [thread],
432 AC_DEFINE(HAVE_SOLARIS_THREADS, 1, [Using Solaris threads])
434 ACX_CHECK_COMPILER_FLAG(mt, [CFLAGS="$CFLAGS -mt"],
435 [CFLAGS="$CFLAGS -D_REENTRANT"])
436 ub_have_sol_threads=yes
438 AC_ERROR([no solaris threads found.])
443 fi # end of non-mingw check of thread libraries
445 # Check for PyUnbound
446 AC_ARG_WITH(pyunbound,
447 AC_HELP_STRING([--with-pyunbound],
448 [build PyUnbound, or --without-pyunbound to skip it. (default=no)]),
449 [], [ withval="no" ])
453 if test x_$withval != x_no; then
454 ub_with_pyunbound=yes
458 # Check for Python module
459 AC_ARG_WITH(pythonmodule,
460 AC_HELP_STRING([--with-pythonmodule],
461 [build Python module, or --without-pythonmodule to disable script engine. (default=no)]),
462 [], [ withval="no" ])
465 if test x_$withval != x_no; then
466 ub_with_pythonmod=yes
470 # Check for Python & SWIG only on PyUnbound or PyModule
471 if test x_$ub_test_python != x_no; then
475 ac_save_LIBS="$LIBS" dnl otherwise AC_PYTHON_DEVEL thrashes $LIBS
477 if test ! -z "$PYTHON_VERSION"; then
478 if test `$PYTHON -c "print '$PYTHON_VERSION' >= '2.4.0'"` = "False"; then
479 AC_ERROR([Python version >= 2.4.0 is required])
483 AC_DEFINE(HAVE_PYTHON,1,[Define if you have Python libraries and header files.])
484 LIBS="$PYTHON_LDFLAGS $LIBS"
485 CPPFLAGS="$CPPFLAGS $PYTHON_CPPFLAGS"
491 AC_MSG_CHECKING(SWIG)
492 if test ! -x "$SWIG"; then
493 AC_ERROR([failed to find swig tool, install it, or do not build Python module and PyUnbound])
495 AC_DEFINE(HAVE_SWIG, 1, [Define if you have Swig libraries and header files.])
496 AC_SUBST(swig, "$SWIG")
497 AC_MSG_RESULT(present)
499 # If have Python & SWIG
501 if test x_$ub_with_pythonmod != x_no; then
502 AC_DEFINE(WITH_PYTHONMODULE, 1, [Define if you want Python module.])
503 WITH_PYTHONMODULE=yes
504 AC_SUBST(WITH_PYTHONMODULE)
505 PYTHONMOD_OBJ="pythonmod.lo pythonmod_utils.lo"
506 AC_SUBST(PYTHONMOD_OBJ)
507 PYTHONMOD_HEADER='$(srcdir)/pythonmod/pythonmod.h'
508 AC_SUBST(PYTHONMOD_HEADER)
509 PYTHONMOD_INSTALL=pythonmod-install
510 AC_SUBST(PYTHONMOD_INSTALL)
511 PYTHONMOD_UNINSTALL=pythonmod-uninstall
512 AC_SUBST(PYTHONMOD_UNINSTALL)
516 if test x_$ub_with_pyunbound != x_no; then
517 AC_DEFINE(WITH_PYUNBOUND, 1, [Define if you want PyUnbound.])
519 AC_SUBST(WITH_PYUNBOUND)
520 PYUNBOUND_OBJ="libunbound_wrap.lo"
521 AC_SUBST(PYUNBOUND_OBJ)
522 PYUNBOUND_TARGET="_unbound.la"
523 AC_SUBST(PYUNBOUND_TARGET)
524 PYUNBOUND_INSTALL=pyunbound-install
525 AC_SUBST(PYUNBOUND_INSTALL)
526 PYUNBOUND_UNINSTALL=pyunbound-uninstall
527 AC_SUBST(PYUNBOUND_UNINSTALL)
531 AC_MSG_RESULT([*** Python libraries not found, won't build PythonMod or PyUnbound ***])
537 if test "`uname`" = "NetBSD"; then
538 NETBSD_LINTFLAGS='"-D__RENAME(x)=" -D_NETINET_IN_H_'
539 AC_SUBST(NETBSD_LINTFLAGS)
541 CONFIG_DATE=`date +%Y%m%d`
542 AC_SUBST(CONFIG_DATE)
544 # Checks for libraries.
548 AC_ARG_WITH([nss], AC_HELP_STRING([--with-nss=path],
549 [use libnss instead of openssl, installed at path.]),
552 AC_DEFINE(HAVE_NSS, 1, [Use libnss for crypto])
553 if test "$withval" != "" -a "$withval" != "yes"; then
554 CPPFLAGS="$CPPFLAGS -I$withval/include/nss3"
555 LDFLAGS="$LDFLAGS -L$withval/lib"
556 ACX_RUNTIME_PATH_ADD([$withval/lib])
557 CPPFLAGS="-I$withval/include/nspr4 $CPPFLAGS"
559 CPPFLAGS="$CPPFLAGS -I/usr/include/nss3"
560 CPPFLAGS="-I/usr/include/nspr4 $CPPFLAGS"
562 LIBS="$LIBS -lnss3 -lnspr4"
567 if test $USE_NSS = "no"; then
570 AC_CHECK_HEADERS([openssl/conf.h],,, [AC_INCLUDES_DEFAULT])
571 AC_CHECK_HEADERS([openssl/engine.h],,, [AC_INCLUDES_DEFAULT])
572 AC_CHECK_FUNCS([OPENSSL_config EVP_sha1 EVP_sha256 EVP_sha512 FIPS_mode])
573 AC_CHECK_DECLS([SSL_COMP_get_compression_methods,sk_SSL_COMP_pop_free], [], [], [
575 #ifdef HAVE_OPENSSL_ERR_H
576 #include <openssl/err.h>
579 #ifdef HAVE_OPENSSL_RAND_H
580 #include <openssl/rand.h>
583 #ifdef HAVE_OPENSSL_CONF_H
584 #include <openssl/conf.h>
587 #ifdef HAVE_OPENSSL_ENGINE_H
588 #include <openssl/engine.h>
590 #include <openssl/ssl.h>
591 #include <openssl/evp.h>
596 AC_ARG_ENABLE(sha2, AC_HELP_STRING([--disable-sha2], [Disable SHA256 and SHA512 RRSIG support]))
597 case "$enable_sha2" in
601 AC_DEFINE([USE_SHA2], [1], [Define this to enable SHA256 and SHA512 support.])
605 # check wether gost also works
606 AC_DEFUN([AC_CHECK_GOST_WORKS],
607 [AC_REQUIRE([AC_PROG_CC])
608 AC_MSG_CHECKING([if GOST works])
609 if test c${cross_compiling} = cno; then
611 if test -n "$ssldir"; then
612 CFLAGS="$CFLAGS -Wl,-rpath,$ssldir/lib"
614 AC_RUN_IFELSE([AC_LANG_SOURCE([[
616 #include <openssl/ssl.h>
617 #include <openssl/evp.h>
618 #include <openssl/engine.h>
619 #include <openssl/conf.h>
620 /* routine to load gost (from sldns) */
621 int load_gost_id(void)
623 static int gost_id = 0;
624 const EVP_PKEY_ASN1_METHOD* meth;
627 if(gost_id) return gost_id;
629 /* see if configuration loaded gost implementation from other engine*/
630 meth = EVP_PKEY_asn1_find_str(NULL, "gost2001", -1);
632 EVP_PKEY_asn1_get0_info(&gost_id, NULL, NULL, NULL, NULL, meth);
636 /* see if engine can be loaded already */
637 e = ENGINE_by_id("gost");
639 /* load it ourself, in case statically linked */
640 ENGINE_load_builtin_engines();
641 ENGINE_load_dynamic();
642 e = ENGINE_by_id("gost");
645 /* no gost engine in openssl */
648 if(!ENGINE_set_default(e, ENGINE_METHOD_ALL)) {
654 meth = EVP_PKEY_asn1_find_str(&e, "gost2001", -1);
661 EVP_PKEY_asn1_get0_info(&gost_id, NULL, NULL, NULL, NULL, meth);
667 unsigned char digest[64]; /* its a 256-bit digest, so uses 32 bytes */
668 const char* str = "Hello world";
669 const unsigned char check[] = {
670 0x40 , 0xed , 0xf8 , 0x56 , 0x5a , 0xc5 , 0x36 , 0xe1 ,
671 0x33 , 0x7c , 0x7e , 0x87 , 0x62 , 0x1c , 0x42 , 0xe0 ,
672 0x17 , 0x1b , 0x5e , 0xce , 0xa8 , 0x46 , 0x65 , 0x4d ,
673 0x8d , 0x3e , 0x22 , 0x9b , 0xe1 , 0x30 , 0x19 , 0x9d
675 OPENSSL_config(NULL);
676 (void)load_gost_id();
677 md = EVP_get_digestbyname("md_gost94");
679 memset(digest, 0, sizeof(digest));
680 ctx = EVP_MD_CTX_create();
682 if(!EVP_DigestInit_ex(ctx, md, NULL)) return 3;
683 if(!EVP_DigestUpdate(ctx, str, 10)) return 4;
684 if(!EVP_DigestFinal_ex(ctx, digest, NULL)) return 5;
685 /* uncomment to see the hash calculated.
688 printf(" %2.2x", (int)digest[i]);
691 if(memcmp(digest, check, sizeof(check)) != 0)
695 ]])] , [eval "ac_cv_c_gost_works=yes"], [eval "ac_cv_c_gost_works=no"])
698 eval "ac_cv_c_gost_works=maybe"
700 AC_MSG_RESULT($ac_cv_c_gost_works)
703 AC_ARG_ENABLE(gost, AC_HELP_STRING([--disable-gost], [Disable GOST support]))
705 if test $USE_NSS = "no"; then
706 case "$enable_gost" in
710 AC_CHECK_FUNC(EVP_PKEY_set_type_str, [:],[AC_MSG_ERROR([OpenSSL 1.0.0 is needed for GOST support])])
711 AC_CHECK_FUNC(EC_KEY_new, [], [AC_MSG_ERROR([OpenSSL does not support ECC, needed for GOST support])])
713 if test "$ac_cv_c_gost_works" != no; then
715 AC_DEFINE([USE_GOST], [1], [Define this to enable GOST support.])
721 AC_ARG_ENABLE(ecdsa, AC_HELP_STRING([--disable-ecdsa], [Disable ECDSA support]))
723 case "$enable_ecdsa" in
727 if test $USE_NSS = "no"; then
728 AC_CHECK_FUNC(ECDSA_sign, [], [AC_MSG_ERROR([OpenSSL does not support ECDSA: please upgrade or rerun with --disable-ecdsa])])
729 AC_CHECK_FUNC(SHA384_Init, [], [AC_MSG_ERROR([OpenSSL does not support SHA384: please upgrade or rerun with --disable-ecdsa])])
730 AC_CHECK_DECLS([NID_X9_62_prime256v1, NID_secp384r1], [], [AC_MSG_ERROR([OpenSSL does not support the ECDSA curves: please upgrade or rerun with --disable-ecdsa])], [AC_INCLUDES_DEFAULT
731 #include <openssl/evp.h>
733 # see if OPENSSL 1.0.0 or later (has EVP MD and Verify independency)
734 AC_MSG_CHECKING([if openssl supports SHA2 and ECDSA with EVP])
735 if grep OPENSSL_VERSION_NUMBER $ssldir/include/openssl/opensslv.h | grep 0x0 >/dev/null; then
737 AC_DEFINE_UNQUOTED([USE_ECDSA_EVP_WORKAROUND], [1], [Define this to enable an EVP workaround for older openssl])
742 # we now know we have ECDSA and the required curves.
743 AC_DEFINE_UNQUOTED([USE_ECDSA], [1], [Define this to enable ECDSA support.])
748 AC_ARG_ENABLE(event-api, AC_HELP_STRING([--enable-event-api], [Enable (experimental) libevent-based libunbound API installed to unbound-event.h]))
749 use_unbound_event="no"
750 case "$enable_event_api" in
752 use_unbound_event="yes"
759 AC_ARG_WITH(libevent, AC_HELP_STRING([--with-libevent=pathname],
760 [use libevent (will check /usr/local /opt/local /usr/lib /usr/pkg /usr/sfw /usr or you can specify an explicit path). Slower, but allows use of large outgoing port ranges.]),
761 [ ],[ withval="no" ])
762 if test x_$withval = x_yes -o x_$withval != x_no; then
763 AC_MSG_CHECKING(for libevent)
764 if test x_$withval = x_ -o x_$withval = x_yes; then
765 withval="/usr/local /opt/local /usr/lib /usr/pkg /usr/sfw /usr"
767 for dir in $withval; do
769 if test -f "$dir/include/event.h" -o -f "$dir/include/event2/event.h"; then
771 dnl assume /usr is in default path.
772 if test "$thedir" != "/usr"; then
773 CPPFLAGS="$CPPFLAGS -I$thedir/include"
778 if test x_$found_libevent != x_yes; then
779 if test -f "$dir/event.h" -a \( -f "$dir/libevent.la" -o -f "$dir/libev.la" \) ; then
780 # libevent source directory
781 AC_MSG_RESULT(found in $thedir)
782 CPPFLAGS="$CPPFLAGS -I$thedir -I$thedir/include"
784 BAK_LDFLAGS="$LDFLAGS"
785 # remove evdns from linking
786 mkdir build >/dev/null 2>&1
787 mkdir build/libevent >/dev/null 2>&1
788 mkdir build/libevent/.libs >/dev/null 2>&1
789 ev_files_o=`ls $thedir/*.o | grep -v evdns\.o | grep -v bufferevent_openssl\.o`
790 ev_files_lo=`ls $thedir/*.lo | grep -v evdns\.lo | grep -v bufferevent_openssl\.lo`
791 ev_files_libso=`ls $thedir/.libs/*.o | grep -v evdns\.o | grep -v bufferevent_openssl\.o`
792 cp $ev_files_o build/libevent
793 cp $ev_files_lo build/libevent
794 cp $ev_files_libso build/libevent/.libs
795 LATE_LDFLAGS="build/libevent/*.lo -lm"
796 LDFLAGS="build/libevent/*.o $LDFLAGS -lm"
798 AC_MSG_ERROR([Cannot find the libevent library in $withval
799 You can restart ./configure --with-libevent=no to use a builtin alternative.
800 Please note that this alternative is not as capable as libevent when using
801 large outgoing port ranges. ])
804 AC_MSG_RESULT(found in $thedir)
805 dnl if event2 exists and no event lib in dir itself, use subdir
806 if test ! -f $thedir/lib/libevent.a -a ! -f $thedir/lib/libevent.so -a -d "$thedir/lib/event2"; then
807 LDFLAGS="$LDFLAGS -L$thedir/lib/event2"
808 ACX_RUNTIME_PATH_ADD([$thedir/lib/event2])
810 dnl assume /usr is in default path, do not add "".
811 if test "$thedir" != "/usr" -a "$thedir" != ""; then
812 LDFLAGS="$LDFLAGS -L$thedir/lib"
813 ACX_RUNTIME_PATH_ADD([$thedir/lib])
817 # check for library used by libevent after 1.3c
818 AC_SEARCH_LIBS([clock_gettime], [rt])
820 # is the event.h header libev or libevent?
821 AC_CHECK_HEADERS([event.h],,, [AC_INCLUDES_DEFAULT])
822 AC_CHECK_DECL(EV_VERSION_MAJOR, [
823 AC_SEARCH_LIBS(event_set, [ev])
825 AC_SEARCH_LIBS(event_set, [event])
826 ],[AC_INCLUDES_DEFAULT
829 AC_CHECK_FUNCS([event_base_free]) # only in libevent 1.2 and later
830 AC_CHECK_FUNCS([event_base_once]) # only in libevent 1.4.1 and later
831 AC_CHECK_FUNCS([event_base_new]) # only in libevent 1.4.1 and later
832 AC_CHECK_FUNCS([event_base_get_method]) # only in libevent 1.4.3 and later
833 AC_CHECK_FUNCS([ev_loop]) # only in libev. (tested on 3.51)
834 AC_CHECK_FUNCS([ev_default_loop]) # only in libev. (tested on 4.00)
835 if test -n "$BAK_LDFLAGS_SET"; then
836 LDFLAGS="$BAK_LDFLAGS"
838 if test "$use_unbound_event" = "yes"; then
839 AC_SUBST(UNBOUND_EVENT_INSTALL, [unbound-event-install])
840 AC_SUBST(UNBOUND_EVENT_UNINSTALL, [unbound-event-uninstall])
843 AC_DEFINE(USE_MINI_EVENT, 1, [Define if you want to use internal select based events])
847 AC_ARG_WITH(libexpat, AC_HELP_STRING([--with-libexpat=path],
848 [specify explicit path for libexpat.]),
849 [ ],[ withval="/usr/local /opt/local /usr/lib /usr/pkg /usr/sfw /usr" ])
850 AC_MSG_CHECKING(for libexpat)
852 for dir in $withval ; do
853 if test -f "$dir/include/expat.h"; then
855 dnl assume /usr is in default path.
856 if test "$dir" != "/usr"; then
857 CPPFLAGS="$CPPFLAGS -I$dir/include"
858 LDFLAGS="$LDFLAGS -L$dir/lib"
860 AC_MSG_RESULT(found in $dir)
864 if test x_$found_libexpat != x_yes; then
865 AC_ERROR([Could not find libexpat, expat.h])
867 AC_CHECK_HEADERS([expat.h],,, [AC_INCLUDES_DEFAULT])
869 # set static linking if requested
872 AC_ARG_ENABLE(static-exe, AC_HELP_STRING([--enable-static-exe],
873 [ enable to compile executables statically against (event) libs, for debug purposes ]),
875 if test x_$enable_static_exe = x_yes; then
877 if test "$on_mingw" = yes; then
878 staticexe="-all-static"
879 # for static crosscompile, include gdi32 and zlib here.
880 if test "`uname`" = "Linux"; then
881 LIBS="$LIBS -lgdi32 -lz"
886 # set lock checking if requested
887 AC_ARG_ENABLE(lock_checks, AC_HELP_STRING([--enable-lock-checks],
888 [ enable to check lock and unlock calls, for debug purposes ]),
890 if test x_$enable_lock_checks = x_yes; then
891 AC_DEFINE(ENABLE_LOCK_CHECKS, 1, [Define if you want to use debug lock checking (slow).])
892 CHECKLOCK_OBJ="checklocks.lo"
893 AC_SUBST(CHECKLOCK_OBJ)
896 ACX_CHECK_GETADDRINFO_WITH_INCLUDES
897 if test "$USE_WINSOCK" = 1; then
898 AC_DEFINE(UB_ON_WINDOWS, 1, [Use win32 resources and API])
899 AC_CHECK_HEADERS([iphlpapi.h],,, [AC_INCLUDES_DEFAULT
902 AC_CHECK_TOOL(WINDRES, windres)
903 LIBS="$LIBS -liphlpapi"
904 WINAPPS="unbound-service-install.exe unbound-service-remove.exe anchor-update.exe"
906 WIN_DAEMON_SRC="winrc/win_svc.c winrc/w_inst.c"
907 AC_SUBST(WIN_DAEMON_SRC)
908 WIN_DAEMON_OBJ="win_svc.lo w_inst.lo"
909 AC_SUBST(WIN_DAEMON_OBJ)
910 WIN_DAEMON_OBJ_LINK="rsrc_unbound.o"
911 AC_SUBST(WIN_DAEMON_OBJ_LINK)
912 WIN_HOST_OBJ_LINK="rsrc_unbound_host.o"
913 AC_SUBST(WIN_HOST_OBJ_LINK)
914 WIN_UBANCHOR_OBJ_LINK="rsrc_unbound_anchor.o log.lo locks.lo"
915 AC_SUBST(WIN_UBANCHOR_OBJ_LINK)
916 WIN_CONTROL_OBJ_LINK="rsrc_unbound_control.o"
917 AC_SUBST(WIN_CONTROL_OBJ_LINK)
918 WIN_CHECKCONF_OBJ_LINK="rsrc_unbound_checkconf.o"
919 AC_SUBST(WIN_CHECKCONF_OBJ_LINK)
921 if test $ac_cv_func_getaddrinfo = no; then
922 AC_LIBOBJ([fake-rfc2553])
924 # check after getaddrinfo for its libraries
927 # see if daemon(3) exists, and if it is deprecated.
928 AC_CHECK_FUNCS([daemon])
929 if test $ac_cv_func_daemon = yes; then
930 ACX_FUNC_DEPRECATED([daemon], [(void)daemon(0, 0);], [
935 AC_CHECK_MEMBERS([struct in_pktinfo.ipi_spec_dst],,,[
938 #include <sys/param.h>
941 #ifdef HAVE_SYS_SOCKET_H
942 #include <sys/socket.h>
945 #ifdef HAVE_SYS_UIO_H
949 #ifdef HAVE_NETINET_IN_H
950 #include <netinet/in.h>
953 #ifdef HAVE_ARPA_INET_H
954 #include <arpa/inet.h>
957 #ifdef HAVE_WINSOCK2_H
958 #include <winsock2.h>
961 #ifdef HAVE_WS2TCPIP_H
962 #include <ws2tcpip.h>
965 AC_SEARCH_LIBS([setusercontext], [util])
966 AC_CHECK_FUNCS([tzset sigprocmask fcntl getpwnam getrlimit setrlimit setsid sbrk chroot kill sleep usleep random srandom recvmsg sendmsg writev socketpair glob initgroups strftime localtime_r setusercontext _beginthreadex endservent endprotoent])
967 AC_CHECK_FUNCS([setresuid],,[AC_CHECK_FUNCS([setreuid])])
968 AC_CHECK_FUNCS([setresgid],,[AC_CHECK_FUNCS([setregid])])
970 # check if setreuid en setregid fail, on MacOSX10.4(darwin8).
971 if echo $build_os | grep darwin8 > /dev/null; then
972 AC_DEFINE(DARWIN_BROKEN_SETREUID, 1, [Define this if on macOSX10.4-darwin8 and setreuid and setregid do not work])
974 AC_REPLACE_FUNCS(inet_aton)
975 AC_REPLACE_FUNCS(inet_pton)
976 AC_REPLACE_FUNCS(inet_ntop)
977 AC_REPLACE_FUNCS(snprintf)
978 AC_REPLACE_FUNCS(strlcat)
979 AC_REPLACE_FUNCS(strlcpy)
980 AC_REPLACE_FUNCS(memmove)
981 AC_REPLACE_FUNCS(gmtime_r)
982 LIBOBJ_WITHOUT_CTIME="$LIBOBJS"
983 AC_SUBST(LIBOBJ_WITHOUT_CTIME)
984 AC_REPLACE_FUNCS(ctime_r)
986 AC_ARG_ENABLE(allsymbols, AC_HELP_STRING([--enable-allsymbols], [export all symbols from libunbound and link binaries to it, smaller install size but libunbound export table is polluted by internal symbols]))
987 case "$enable_allsymbols" in
989 COMMON_OBJ_ALL_SYMBOLS=""
991 EXTRALINK="-L. -L.libs -lunbound"
992 AC_DEFINE(EXPORT_ALL_SYMBOLS, 1, [Define this if you enabled-allsymbols from libunbound to link binaries to it for smaller install size, but the libunbound export table is polluted by internal symbols])
995 COMMON_OBJ_ALL_SYMBOLS='$(COMMON_OBJ)'
996 UBSYMS='-export-symbols $(srcdir)/libunbound/ubsyms.def'
1000 AC_SUBST(COMMON_OBJ_ALL_SYMBOLS)
1003 if test x_$enable_lock_checks = x_yes; then
1004 UBSYMS="-export-symbols clubsyms.def"
1005 cp ${srcdir}/libunbound/ubsyms.def clubsyms.def
1006 echo lock_protect >> clubsyms.def
1007 echo lock_unprotect >> clubsyms.def
1008 echo lock_get_mem >> clubsyms.def
1009 echo checklock_start >> clubsyms.def
1010 echo checklock_stop >> clubsyms.def
1011 echo checklock_lock >> clubsyms.def
1012 echo checklock_unlock >> clubsyms.def
1013 echo checklock_init >> clubsyms.def
1014 echo checklock_thrcreate >> clubsyms.def
1015 echo checklock_thrjoin >> clubsyms.def
1018 AC_MSG_CHECKING([if ${MAKE:-make} supports $< with implicit rule in scope])
1019 # on openBSD, the implicit rule make $< work.
1020 # on Solaris, it does not work ($? is changed sources, $^ lists dependencies).
1022 cat >conftest.make <<EOF
1025 conftest.lo foo.lo bla.lo:
1026 if test -f "\$<"; then touch \$@; fi
1030 if test -f "\$<"; then touch \$@; fi
1032 conftest.lo: conftest.dir/conftest.c
1035 touch conftest.dir/conftest.c
1036 rm -f conftest.lo conftest.c
1037 ${MAKE:-make} -f conftest.make >/dev/null
1038 rm -f conftest.make conftest.c conftest.dir/conftest.c
1040 if test ! -f conftest.lo; then
1042 SOURCEDETERMINE='echo "$^" | awk "-F " "{print \$$1;}" > .source'
1043 SOURCEFILE='`cat .source`'
1050 AC_SUBST(SOURCEDETERMINE)
1051 AC_SUBST(SOURCEFILE)
1053 # see if we want to build the library or everything
1054 ALLTARGET="alltargets"
1055 INSTALLTARGET="install-all"
1056 AC_ARG_WITH(libunbound-only, AC_HELP_STRING([--with-libunbound-only],
1057 [do not build daemon and tool programs]),
1059 if test "$withval" = "yes"; then
1061 INSTALLTARGET="install-lib"
1065 AC_SUBST(INSTALLTARGET)
1068 LDFLAGS="$LATE_LDFLAGS $LDFLAGS"
1070 AC_DEFINE_UNQUOTED([MAXSYSLOGMSGLEN], [10240], [Define to the maximum message length to pass to syslog.])
1073 dnl this must be first AH_CONFIG, to define the flags before any includes.
1074 AHX_CONFIG_EXT_FLAGS
1078 #ifndef UNBOUND_DEBUG
1082 /** Use small-ldns codebase */
1085 # define LDNS_BUILD_CONFIG_HAVE_SSL 1
1098 #ifdef HAVE_STDARG_H
1102 #ifdef HAVE_STDINT_H
1108 #if HAVE_SYS_PARAM_H
1109 #include <sys/param.h>
1112 #ifdef HAVE_SYS_SOCKET_H
1113 #include <sys/socket.h>
1116 #ifdef HAVE_SYS_UIO_H
1117 #include <sys/uio.h>
1120 #ifdef HAVE_NETINET_IN_H
1121 #include <netinet/in.h>
1124 #ifdef HAVE_ARPA_INET_H
1125 #include <arpa/inet.h>
1128 #ifdef HAVE_WINSOCK2_H
1129 #include <winsock2.h>
1132 #ifdef HAVE_WS2TCPIP_H
1133 #include <ws2tcpip.h>
1137 #define ARG_LL "%ll"
1139 #define ARG_LL "%I64"
1143 AHX_CONFIG_FORMAT_ATTRIBUTE
1144 AHX_CONFIG_UNUSED_ATTRIBUTE
1146 AHX_CONFIG_MAXHOSTNAMELEN
1147 AHX_CONFIG_SNPRINTF(unbound)
1148 AHX_CONFIG_INET_PTON(unbound)
1149 AHX_CONFIG_INET_NTOP(unbound)
1150 AHX_CONFIG_INET_ATON(unbound)
1151 AHX_CONFIG_MEMMOVE(unbound)
1152 AHX_CONFIG_STRLCAT(unbound)
1153 AHX_CONFIG_STRLCPY(unbound)
1154 AHX_CONFIG_GMTIME_R(unbound)
1155 AHX_CONFIG_W32_SLEEP
1156 AHX_CONFIG_W32_USLEEP
1157 AHX_CONFIG_W32_RANDOM
1158 AHX_CONFIG_W32_SRANDOM
1159 AHX_CONFIG_W32_FD_SET_T
1160 AHX_CONFIG_IPV6_MIN_MTU
1161 AHX_MEMCMP_BROKEN(unbound)
1164 #ifndef HAVE_CTIME_R
1165 #define ctime_r unbound_ctime_r
1166 char *ctime_r(const time_t *timep, char *buf);
1169 #if !defined(HAVE_STRPTIME) || !defined(STRPTIME_WORKS)
1170 #define strptime unbound_strptime
1172 char *strptime(const char *s, const char *format, struct tm *tm);
1175 #if defined(HAVE_EVENT_H) && !defined(HAVE_EVENT_BASE_ONCE) && !(defined(HAVE_EV_LOOP) || defined(HAVE_EV_DEFAULT_LOOP)) && (defined(HAVE_PTHREAD) || defined(HAVE_SOLARIS_THREADS))
1176 /* using version of libevent that is not threadsafe. */
1177 # define LIBEVENT_SIGNAL_PROBLEM 1
1180 #ifndef CHECKED_INET6
1181 # define CHECKED_INET6
1185 # define AF_INET6 28
1187 #endif /* CHECKED_INET6 */
1189 #ifndef HAVE_GETADDRINFO
1190 struct sockaddr_storage;
1191 #include "compat/fake-rfc2553.h"
1194 #ifdef UNBOUND_ALLOC_STATS
1195 # define malloc(s) unbound_stat_malloc_log(s, __FILE__, __LINE__, __func__)
1196 # define calloc(n,s) unbound_stat_calloc_log(n, s, __FILE__, __LINE__, __func__)
1197 # define free(p) unbound_stat_free_log(p, __FILE__, __LINE__, __func__)
1198 # define realloc(p,s) unbound_stat_realloc_log(p, s, __FILE__, __LINE__, __func__)
1199 void *unbound_stat_malloc(size_t size);
1200 void *unbound_stat_calloc(size_t nmemb, size_t size);
1201 void unbound_stat_free(void *ptr);
1202 void *unbound_stat_realloc(void *ptr, size_t size);
1203 void *unbound_stat_malloc_log(size_t size, const char* file, int line,
1205 void *unbound_stat_calloc_log(size_t nmemb, size_t size, const char* file,
1206 int line, const char* func);
1207 void unbound_stat_free_log(void *ptr, const char* file, int line,
1209 void *unbound_stat_realloc_log(void *ptr, size_t size, const char* file,
1210 int line, const char* func);
1211 #elif defined(UNBOUND_ALLOC_LITE)
1212 # include "util/alloc.h"
1213 #endif /* UNBOUND_ALLOC_LITE and UNBOUND_ALLOC_STATS */
1215 /** default port for DNS traffic. */
1216 #define UNBOUND_DNS_PORT 53
1217 /** default port for unbound control traffic, registered port with IANA,
1218 ub-dns-control 8953/tcp unbound dns nameserver control */
1219 #define UNBOUND_CONTROL_PORT 8953
1220 /** the version of unbound-control that this software implements */
1221 #define UNBOUND_CONTROL_VERSION 1
1225 AC_CONFIG_FILES([Makefile doc/example.conf doc/libunbound.3 doc/unbound.8 doc/unbound-anchor.8 doc/unbound-checkconf.8 doc/unbound.conf.5 doc/unbound-control.8])
1226 AC_CONFIG_HEADER([config.h])