]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/blob - contrib/unbound/configure.ac
MFV r298691:
[FreeBSD/FreeBSD.git] / contrib / unbound / configure.ac
1 #                                               -*- Autoconf -*-
2 # Process this file with autoconf to produce a configure script.
3 AC_PREREQ(2.56)
4 sinclude(acx_nlnetlabs.m4)
5 sinclude(ax_pthread.m4)
6 sinclude(acx_python.m4)
7 sinclude(ac_pkg_swig.m4)
8 sinclude(dnstap/dnstap.m4)
9
10 # must be numbers. ac_defun because of later processing
11 m4_define([VERSION_MAJOR],[1])
12 m4_define([VERSION_MINOR],[5])
13 m4_define([VERSION_MICRO],[8])
14 AC_INIT(unbound, m4_defn([VERSION_MAJOR]).m4_defn([VERSION_MINOR]).m4_defn([VERSION_MICRO]), unbound-bugs@nlnetlabs.nl, unbound)
15 AC_SUBST(UNBOUND_VERSION_MAJOR, [VERSION_MAJOR])
16 AC_SUBST(UNBOUND_VERSION_MINOR, [VERSION_MINOR])
17 AC_SUBST(UNBOUND_VERSION_MICRO, [VERSION_MICRO])
18
19 LIBUNBOUND_CURRENT=6
20 LIBUNBOUND_REVISION=0
21 LIBUNBOUND_AGE=4
22 # 1.0.0 had 0:12:0
23 # 1.0.1 had 0:13:0
24 # 1.0.2 had 0:14:0
25 # 1.1.0 had 0:15:0
26 # 1.1.1 had 0:16:0
27 # 1.2.0 had 0:17:0
28 # 1.2.1 had 0:18:0
29 # 1.3.0 had 1:0:0   # ub_cancel and -export-symbols.
30 # 1.3.1 had 1:1:0
31 # 1.3.2 had 1:2:0
32 # 1.3.3 had 1:3:0
33 # 1.3.4 had 1:4:0
34 # 1.4.0-snapshots had 1:5:0
35 # 1.4.0 had 1:5:0 (not 2:0:0)   # ub_result.why_bogus
36 # 1.4.1 had 2:1:0
37 # 1.4.2 had 2:2:0
38 # 1.4.3 had 2:3:0
39 # 1.4.4 had 2:4:0
40 # 1.4.5 had 2:5:0
41 # 1.4.6 had 2:6:0
42 # 1.4.7 had 2:7:0
43 # 1.4.8 had 2:8:0
44 # 1.4.9 had 2:9:0
45 # 1.4.10 had 2:10:0
46 # 1.4.11 had 2:11:0
47 # 1.4.12 had 2:12:0
48 # 1.4.13 had 2:13:0
49 # and 1.4.13p1 and 1.4.13.p2
50 # 1.4.14 had 2:14:0
51 # 1.4.15 had 3:0:1 # adds ub_version()
52 # 1.4.16 had 3:1:1
53 # 1.4.17 had 3:2:1
54 # 1.4.18 had 3:3:1
55 # 1.4.19 had 3:4:1
56 # 1.4.20 had 4:0:2 # adds libunbound.ttl # but shipped 3:5:1
57 # 1.4.21 had 4:1:2
58 # 1.4.22 had 4:1:2
59 # 1.5.0 had 5:3:3 # adds ub_ctx_add_ta_autr
60 # 1.5.1 had 5:3:3
61 # 1.5.2 had 5:5:3
62 # 1.5.3 had 5:6:3
63 # 1.5.4 had 5:7:3
64 # 1.5.5 had 5:8:3
65 # 1.5.6 had 5:9:3
66 # 1.5.7 had 5:10:3
67 # 1.5.8 had 6:0:4 # adds ub_ctx_set_stub
68
69 #   Current  -- the number of the binary API that we're implementing
70 #   Revision -- which iteration of the implementation of the binary
71 #               API are we supplying?
72 #   Age      -- How many previous binary API versions do we also
73 #               support?
74 #
75 # If we release a new version that does not change the binary API,
76 # increment Revision.
77 #
78 # If we release a new version that changes the binary API, but does
79 # not break programs compiled against the old binary API, increment
80 # Current and Age.  Set Revision to 0, since this is the first
81 # implementation of the new API.
82 #
83 # Otherwise, we're changing the binary API and breaking bakward
84 # compatibility with old binaries.  Increment Current.  Set Age to 0,
85 # since we're backward compatible with no previous APIs.  Set Revision
86 # to 0 too.
87 AC_SUBST(LIBUNBOUND_CURRENT)
88 AC_SUBST(LIBUNBOUND_REVISION)
89 AC_SUBST(LIBUNBOUND_AGE)
90
91 CFLAGS="$CFLAGS"
92 AC_AIX
93 if test "$ac_cv_header_minix_config_h" = "yes"; then
94         AC_DEFINE(_NETBSD_SOURCE,1, [Enable for compile on Minix])
95 fi
96
97 dnl
98 dnl By default set prefix to /usr/local
99 dnl
100 case "$prefix" in
101         NONE)
102                 prefix="/usr/local"
103         ;;
104 esac
105
106 # are we on MinGW?
107 if uname -s 2>&1 | grep MINGW32 >/dev/null; then on_mingw="yes"
108 else 
109         if echo $target | grep mingw32 >/dev/null; then on_mingw="yes"
110         else on_mingw="no"; fi
111 fi
112
113 #
114 # Determine configuration file
115 # the eval is to evaluate shell expansion twice
116 if test $on_mingw = "no"; then
117   ub_conf_file=`eval echo "${sysconfdir}/unbound/unbound.conf"`
118 else
119   ub_conf_file="C:\\Program Files\\Unbound\\service.conf"
120 fi
121 AC_ARG_WITH([conf_file],
122         AC_HELP_STRING([--with-conf-file=path], 
123         [Pathname to the Unbound configuration file]),
124         [ub_conf_file="$withval"])
125 AC_SUBST(ub_conf_file)
126 ACX_ESCAPE_BACKSLASH($ub_conf_file, hdr_config)
127 AC_DEFINE_UNQUOTED(CONFIGFILE, ["$hdr_config"], [Pathname to the Unbound configuration file])
128 ub_conf_dir=`AS_DIRNAME(["$ub_conf_file"])`
129 AC_SUBST(ub_conf_dir)
130
131 # Determine run, chroot directory and pidfile locations
132 AC_ARG_WITH(run-dir, 
133     AC_HELP_STRING([--with-run-dir=path], 
134     [set default directory to chdir to (by default dir part of cfg file)]), 
135     UNBOUND_RUN_DIR="$withval", 
136 if test $on_mingw = no; then
137     UNBOUND_RUN_DIR=`dirname "$ub_conf_file"`
138 else
139     UNBOUND_RUN_DIR=""
140 fi
141 )
142 AC_SUBST(UNBOUND_RUN_DIR)
143 ACX_ESCAPE_BACKSLASH($UNBOUND_RUN_DIR, hdr_run)
144 AC_DEFINE_UNQUOTED(RUN_DIR, ["$hdr_run"], [Directory to chdir to])
145
146 AC_ARG_WITH(chroot-dir, 
147     AC_HELP_STRING([--with-chroot-dir=path], 
148     [set default directory to chroot to (by default same as run-dir)]), 
149     UNBOUND_CHROOT_DIR="$withval", 
150 if test $on_mingw = no; then
151     UNBOUND_CHROOT_DIR="$UNBOUND_RUN_DIR"
152 else
153     UNBOUND_CHROOT_DIR=""
154 fi
155 )
156 AC_SUBST(UNBOUND_CHROOT_DIR)
157 ACX_ESCAPE_BACKSLASH($UNBOUND_CHROOT_DIR, hdr_chroot)
158 AC_DEFINE_UNQUOTED(CHROOT_DIR, ["$hdr_chroot"], [Directory to chroot to])
159
160 AC_ARG_WITH(share-dir,
161     AC_HELP_STRING([--with-share-dir=path],
162     [set default directory with shared data (by default same as share/unbound)]),
163     UNBOUND_SHARE_DIR="$withval",
164     UNBOUND_SHARE_DIR="$UNBOUND_RUN_DIR")
165 AC_SUBST(UNBOUND_SHARE_DIR)
166 AC_DEFINE_UNQUOTED(SHARE_DIR, ["$UNBOUND_SHARE_DIR"], [Shared data])
167
168 AC_ARG_WITH(pidfile, 
169     AC_HELP_STRING([--with-pidfile=filename], 
170     [set default pathname to unbound pidfile (default run-dir/unbound.pid)]), 
171     UNBOUND_PIDFILE="$withval", 
172 if test $on_mingw = no; then
173     UNBOUND_PIDFILE="$UNBOUND_RUN_DIR/unbound.pid"
174 else
175     UNBOUND_PIDFILE=""
176 fi
177 )
178 AC_SUBST(UNBOUND_PIDFILE)
179 ACX_ESCAPE_BACKSLASH($UNBOUND_PIDFILE, hdr_pid)
180 AC_DEFINE_UNQUOTED(PIDFILE, ["$hdr_pid"], [default pidfile location])
181
182 AC_ARG_WITH(rootkey-file, 
183     AC_HELP_STRING([--with-rootkey-file=filename], 
184     [set default pathname to root key file (default run-dir/root.key). This file is read and written.]), 
185     UNBOUND_ROOTKEY_FILE="$withval", 
186 if test $on_mingw = no; then
187     UNBOUND_ROOTKEY_FILE="$UNBOUND_RUN_DIR/root.key"
188 else
189     UNBOUND_ROOTKEY_FILE="C:\\Program Files\\Unbound\\root.key"
190 fi
191 )
192 AC_SUBST(UNBOUND_ROOTKEY_FILE)
193 ACX_ESCAPE_BACKSLASH($UNBOUND_ROOTKEY_FILE, hdr_rkey)
194 AC_DEFINE_UNQUOTED(ROOT_ANCHOR_FILE, ["$hdr_rkey"], [default rootkey location])
195
196 AC_ARG_WITH(rootcert-file, 
197     AC_HELP_STRING([--with-rootcert-file=filename], 
198     [set default pathname to root update certificate file (default run-dir/icannbundle.pem).  This file need not exist if you are content with the builtin.]), 
199     UNBOUND_ROOTCERT_FILE="$withval", 
200 if test $on_mingw = no; then
201     UNBOUND_ROOTCERT_FILE="$UNBOUND_RUN_DIR/icannbundle.pem"
202 else
203     UNBOUND_ROOTCERT_FILE="C:\\Program Files\\Unbound\\icannbundle.pem"
204 fi
205 )
206 AC_SUBST(UNBOUND_ROOTCERT_FILE)
207 ACX_ESCAPE_BACKSLASH($UNBOUND_ROOTCERT_FILE, hdr_rpem)
208 AC_DEFINE_UNQUOTED(ROOT_CERT_FILE, ["$hdr_rpem"], [default rootcert location])
209
210 AC_ARG_WITH(username, 
211     AC_HELP_STRING([--with-username=user], 
212     [set default user that unbound changes to (default user is unbound)]), 
213     UNBOUND_USERNAME="$withval", 
214     UNBOUND_USERNAME="unbound")
215 AC_SUBST(UNBOUND_USERNAME)
216 AC_DEFINE_UNQUOTED(UB_USERNAME, ["$UNBOUND_USERNAME"], [default username])
217
218 AC_DEFINE(WINVER, 0x0502, [the version of the windows API enabled])
219 ACX_RSRC_VERSION(wnvs)
220 AC_DEFINE_UNQUOTED(RSRC_PACKAGE_VERSION, [$wnvs], [version number for resource files])
221
222 # Checks for typedefs, structures, and compiler characteristics.
223 AC_C_CONST
224 AC_LANG_C
225 # allow user to override the -g -O2 flags.
226 if test "x$CFLAGS" = "x" ; then
227 ACX_CHECK_COMPILER_FLAG(g, [CFLAGS="$CFLAGS -g"])
228 ACX_CHECK_COMPILER_FLAG(O2, [CFLAGS="$CFLAGS -O2"])
229 fi
230 AC_PROG_CC
231 ACX_DEPFLAG
232 ACX_DETERMINE_EXT_FLAGS_UNBOUND
233
234 # debug mode flags warnings
235 AC_ARG_ENABLE(checking, AC_HELP_STRING([--enable-checking], [Enable warnings, asserts, makefile-dependencies]))
236 AC_ARG_ENABLE(debug, AC_HELP_STRING([--enable-debug], [same as enable-checking]))
237 if test "$enable_debug" = "yes"; then debug_enabled="$enable_debug"; 
238 else debug_enabled="$enable_checking"; fi
239 AC_SUBST(debug_enabled)
240 case "$debug_enabled" in
241         yes)
242                 ACX_CHECK_COMPILER_FLAG(W, [CFLAGS="$CFLAGS -W"])
243                 ACX_CHECK_COMPILER_FLAG(Wall, [CFLAGS="$CFLAGS -Wall"])
244                 ACX_CHECK_COMPILER_FLAG(Wextra, [CFLAGS="$CFLAGS -Wextra"])
245                 ACX_CHECK_COMPILER_FLAG(Wdeclaration-after-statement, [CFLAGS="$CFLAGS -Wdeclaration-after-statement"])
246                 AC_DEFINE([UNBOUND_DEBUG], [], [define this to enable debug checks.])
247                 ;;
248         no|*)
249                 # nothing to do.
250                 ;;
251 esac
252 ACX_CHECK_FLTO
253 ACX_CHECK_PIE
254 ACX_CHECK_RELRO_NOW
255
256 AC_C_INLINE
257 ACX_CHECK_FORMAT_ATTRIBUTE
258 ACX_CHECK_UNUSED_ATTRIBUTE
259
260 if test "$srcdir" != "."; then
261         CPPFLAGS="$CPPFLAGS -I$srcdir"
262 fi
263
264 AC_DEFUN([ACX_YYLEX_DESTROY], [
265         AC_MSG_CHECKING([for yylex_destroy])
266         if echo %% | $LEX -t 2>&1 | grep yylex_destroy >/dev/null 2>&1; then
267                 AC_DEFINE(LEX_HAS_YYLEX_DESTROY, 1, [if lex has yylex_destroy])
268                 AC_MSG_RESULT(yes)
269         else AC_MSG_RESULT(no); fi
270 ])
271
272 AC_PROG_LEX
273 ACX_YYLEX_DESTROY
274 AC_PROG_YACC
275 AC_CHECK_PROG(doxygen, doxygen, doxygen)
276 AC_CHECK_TOOL(STRIP, strip)
277 ACX_LIBTOOL_C_ONLY
278
279 # Checks for header files.
280 AC_CHECK_HEADERS([stdarg.h stdbool.h netinet/in.h netinet/tcp.h sys/param.h sys/socket.h sys/un.h sys/uio.h sys/resource.h arpa/inet.h syslog.h netdb.h sys/wait.h pwd.h glob.h grp.h login_cap.h winsock2.h ws2tcpip.h endian.h],,, [AC_INCLUDES_DEFAULT])
281
282 # check for types.  
283 # Using own tests for int64* because autoconf builtin only give 32bit.
284 AC_CHECK_TYPE(int8_t, signed char)
285 AC_CHECK_TYPE(int16_t, short)
286 AC_CHECK_TYPE(int32_t, int)
287 AC_CHECK_TYPE(int64_t, long long)
288 AC_CHECK_TYPE(uint8_t, unsigned char)
289 AC_CHECK_TYPE(uint16_t, unsigned short)
290 AC_CHECK_TYPE(uint32_t, unsigned int)
291 AC_CHECK_TYPE(uint64_t, unsigned long long)
292 AC_TYPE_SIZE_T
293 AC_CHECK_TYPE(ssize_t, int)
294 AC_TYPE_UID_T
295 AC_TYPE_PID_T
296 AC_TYPE_OFF_T
297 ACX_TYPE_U_CHAR
298 ACX_TYPE_RLIM_T
299 ACX_TYPE_SOCKLEN_T
300 ACX_TYPE_IN_ADDR_T
301 ACX_TYPE_IN_PORT_T
302 ACX_CHECK_MEMCMP_SIGNED
303
304 AC_CHECK_SIZEOF(time_t,,[
305 AC_INCLUDES_DEFAULT
306 #ifdef TIME_WITH_SYS_TIME
307 # include <sys/time.h>
308 # include <time.h>
309 #else
310 # ifdef HAVE_SYS_TIME_H
311 #  include <sys/time.h>
312 # else
313 #  include <time.h>
314 # endif
315 #endif
316 ])
317
318 # add option to disable the evil rpath
319 ACX_ARG_RPATH
320 AC_SUBST(RUNTIME_PATH)
321
322 # check to see if libraries are needed for these functions.
323 AC_SEARCH_LIBS([inet_pton], [nsl])
324 AC_SEARCH_LIBS([socket], [socket])
325
326 # check wether strptime also works
327 AC_DEFUN([AC_CHECK_STRPTIME_WORKS],
328 [AC_REQUIRE([AC_PROG_CC])
329 AC_MSG_CHECKING(whether strptime works)
330 if test c${cross_compiling} = cno; then
331 AC_RUN_IFELSE([AC_LANG_SOURCE([[
332 #define _XOPEN_SOURCE 600
333 #include <time.h>
334 int main(void) { struct tm tm; char *res;
335 res = strptime("2010-07-15T00:00:00+00:00", "%t%Y%t-%t%m%t-%t%d%tT%t%H%t:%t%M%t:%t%S%t", &tm);
336 if (!res) return 2;
337 res = strptime("20070207111842", "%Y%m%d%H%M%S", &tm);
338 if (!res) return 1; return 0; }
339 ]])] , [eval "ac_cv_c_strptime_works=yes"], [eval "ac_cv_c_strptime_works=no"])
340 else
341 eval "ac_cv_c_strptime_works=maybe"
342 fi
343 AC_MSG_RESULT($ac_cv_c_strptime_works)
344 if test $ac_cv_c_strptime_works = no; then
345 AC_LIBOBJ(strptime)
346 else
347 AC_DEFINE_UNQUOTED([STRPTIME_WORKS], 1, [use default strptime.])
348 fi
349 ])dnl
350
351 # check some functions of the OS before linking libs (while still runnable).
352 AC_FUNC_CHOWN
353 AC_FUNC_FORK
354 AC_TYPE_SIGNAL
355 AC_FUNC_FSEEKO
356 ACX_SYS_LARGEFILE
357 ACX_CHECK_NONBLOCKING_BROKEN
358 ACX_MKDIR_ONE_ARG
359 AC_CHECK_FUNCS([strptime],[AC_CHECK_STRPTIME_WORKS],[AC_LIBOBJ([strptime])])
360
361 # set memory allocation checking if requested
362 AC_ARG_ENABLE(alloc-checks, AC_HELP_STRING([--enable-alloc-checks],
363         [ enable to memory allocation statistics, for debug purposes ]), 
364         , )
365 AC_ARG_ENABLE(alloc-lite, AC_HELP_STRING([--enable-alloc-lite],
366         [ enable for lightweight alloc assertions, for debug purposes ]), 
367         , )
368 AC_ARG_ENABLE(alloc-nonregional, AC_HELP_STRING([--enable-alloc-nonregional],
369         [ enable nonregional allocs, slow but exposes regional allocations to other memory purifiers, for debug purposes ]), 
370         , )
371 if test x_$enable_alloc_nonregional = x_yes; then
372         AC_DEFINE(UNBOUND_ALLOC_NONREGIONAL, 1, [use malloc not regions, for debug use])
373 fi
374 if test x_$enable_alloc_checks = x_yes; then
375         AC_DEFINE(UNBOUND_ALLOC_STATS, 1, [use statistics for allocs and frees, for debug use])
376 else
377         if test x_$enable_alloc_lite = x_yes; then
378                 AC_DEFINE(UNBOUND_ALLOC_LITE, 1, [use to enable lightweight alloc assertions, for debug use])
379         else
380                 ACX_FUNC_MALLOC([unbound])
381         fi
382 fi
383
384 # check windows threads (we use them, not pthreads, on windows).
385 if test "$on_mingw" = "yes"; then
386 # check windows threads
387         AC_CHECK_HEADERS([windows.h],,, [AC_INCLUDES_DEFAULT])
388         AC_MSG_CHECKING([for CreateThread])
389         AC_COMPILE_IFELSE([AC_LANG_PROGRAM([
390 #ifdef HAVE_WINDOWS_H
391 #include <windows.h>
392 #endif
393 ], [
394         HANDLE t = CreateThread(NULL, 0, NULL, NULL, 0, NULL);
395 ])],
396         AC_MSG_RESULT(yes)
397         AC_DEFINE(HAVE_WINDOWS_THREADS, 1, [Using Windows threads])
398 ,       
399         AC_MSG_RESULT(no)
400 )
401
402 else
403 # not on mingw, check thread libraries.
404
405 # check for thread library.
406 # check this first, so that the pthread lib does not get linked in via
407 # libssl or libpython, and thus distorts the tests, and we end up using
408 # the non-threadsafe C libraries.
409 AC_ARG_WITH(pthreads, AC_HELP_STRING([--with-pthreads], 
410  [use pthreads library, or --without-pthreads to disable threading support.]), 
411  [ ],[ withval="yes" ])
412 ub_have_pthreads=no
413 if test x_$withval != x_no; then
414         AX_PTHREAD([
415                 AC_DEFINE(HAVE_PTHREAD,1,[Define if you have POSIX threads libraries and header files.])
416                 LIBS="$PTHREAD_LIBS $LIBS"
417                 CFLAGS="$CFLAGS $PTHREAD_CFLAGS"
418                 CC="$PTHREAD_CC"
419                 ub_have_pthreads=yes
420                 AC_CHECK_TYPES([pthread_spinlock_t, pthread_rwlock_t],,,[#include <pthread.h>])
421
422                 if echo "$CFLAGS" | $GREP -e "-pthread" >/dev/null; then
423                 AC_MSG_CHECKING([if -pthread unused during linking])
424                 # catch clang warning 'argument unused during compilation'
425                 AC_LANG_CONFTEST([AC_LANG_SOURCE(AC_INCLUDES_DEFAULT
426 [[
427 int main(void) {return 0;}
428 ]])])
429                 pthread_unused="yes"
430                 # first compile
431                 echo "$CC $CFLAGS -c conftest.c -o conftest.o" >&AS_MESSAGE_LOG_FD
432                 $CC $CFLAGS -c conftest.c -o conftest.o 2>&AS_MESSAGE_LOG_FD >&AS_MESSAGE_LOG_FD
433                 if test $? = 0; then 
434                         # then link
435                         echo "$CC $CFLAGS -Werror $LDFLAGS $LIBS -o conftest contest.o" >&AS_MESSAGE_LOG_FD
436                         $CC $CFLAGS -Werror $LDFLAGS $LIBS -o conftest conftest.o 2>&AS_MESSAGE_LOG_FD >&AS_MESSAGE_LOG_FD
437                         if test $? -ne 0; then
438                                 AC_MSG_RESULT(yes)
439                                 CFLAGS=`echo "$CFLAGS" | sed -e 's/-pthread//'`
440                                 PTHREAD_CFLAGS_ONLY="-pthread"
441                                 AC_SUBST(PTHREAD_CFLAGS_ONLY)
442                         else
443                                 AC_MSG_RESULT(no)
444                         fi
445                 else
446                         AC_MSG_RESULT(no)
447                 fi # endif cc successful
448                 rm -f conftest conftest.c conftest.o
449                 fi # endif -pthread in CFLAGS
450
451                 ])
452 fi
453
454 # check solaris thread library 
455 AC_ARG_WITH(solaris-threads, AC_HELP_STRING([--with-solaris-threads], 
456         [use solaris native thread library.]), [ ],[ withval="no" ])
457 ub_have_sol_threads=no
458 if test x_$withval != x_no; then
459         if test x_$ub_have_pthreads != x_no; then
460             AC_WARN([Have pthreads already, ignoring --with-solaris-threads])
461         else
462         AC_SEARCH_LIBS(thr_create, [thread],
463         [
464                 AC_DEFINE(HAVE_SOLARIS_THREADS, 1, [Using Solaris threads])
465
466                 ACX_CHECK_COMPILER_FLAG(mt, [CFLAGS="$CFLAGS -mt"],
467                         [CFLAGS="$CFLAGS -D_REENTRANT"])
468                 ub_have_sol_threads=yes
469         ] , [ 
470                 AC_ERROR([no solaris threads found.]) 
471         ])
472         fi
473 fi
474
475 fi # end of non-mingw check of thread libraries
476
477 # Check for PyUnbound
478 AC_ARG_WITH(pyunbound,
479    AC_HELP_STRING([--with-pyunbound],
480    [build PyUnbound, or --without-pyunbound to skip it. (default=no)]),
481    [], [ withval="no" ])
482
483 ub_test_python=no
484 ub_with_pyunbound=no
485 if test x_$withval != x_no; then
486    ub_with_pyunbound=yes
487    ub_test_python=yes
488 fi
489
490 # Check for Python module
491 AC_ARG_WITH(pythonmodule,
492    AC_HELP_STRING([--with-pythonmodule],
493    [build Python module, or --without-pythonmodule to disable script engine. (default=no)]),
494    [], [ withval="no" ])
495
496 ub_with_pythonmod=no
497 if test x_$withval != x_no; then
498    ub_with_pythonmod=yes
499    ub_test_python=yes
500 fi
501
502 # Check for Python & SWIG only on PyUnbound or PyModule
503 if test x_$ub_test_python != x_no; then
504
505    # Check for Python
506    ub_have_python=no
507    ac_save_LIBS="$LIBS" dnl otherwise AC_PYTHON_DEVEL thrashes $LIBS
508    AC_PYTHON_DEVEL
509    if test ! -z "$PYTHON_VERSION"; then
510         if test `$PYTHON -c "print('$PYTHON_VERSION' >= '2.4.0')"` = "False"; then
511                 AC_ERROR([Python version >= 2.4.0 is required])
512         fi
513
514       [PY_MAJOR_VERSION="`$PYTHON -c \"import sys; print(sys.version_info[0])\"`"]
515       AC_SUBST(PY_MAJOR_VERSION)
516       # Have Python
517       AC_DEFINE(HAVE_PYTHON,1,[Define if you have Python libraries and header files.])
518       LIBS="$PYTHON_LDFLAGS $LIBS"
519       CPPFLAGS="$CPPFLAGS $PYTHON_CPPFLAGS"
520       ub_have_python=yes
521
522       # Check for SWIG
523       ub_have_swig=no
524       AC_PROG_SWIG
525       AC_MSG_CHECKING(SWIG)
526       if test ! -x "$SWIG"; then
527          AC_ERROR([failed to find swig tool, install it, or do not build Python module and PyUnbound])
528       else
529          AC_DEFINE(HAVE_SWIG, 1, [Define if you have Swig libraries and header files.])
530          AC_SUBST(swig, "$SWIG")
531          AC_MSG_RESULT(present)
532
533          # If have Python & SWIG
534          # Declare PythonMod
535          if test x_$ub_with_pythonmod != x_no; then
536             AC_DEFINE(WITH_PYTHONMODULE, 1, [Define if you want Python module.])
537             WITH_PYTHONMODULE=yes
538             AC_SUBST(WITH_PYTHONMODULE)
539             PYTHONMOD_OBJ="pythonmod.lo pythonmod_utils.lo"
540             AC_SUBST(PYTHONMOD_OBJ)
541             PYTHONMOD_HEADER='$(srcdir)/pythonmod/pythonmod.h'
542             AC_SUBST(PYTHONMOD_HEADER)
543             PYTHONMOD_INSTALL=pythonmod-install
544             AC_SUBST(PYTHONMOD_INSTALL)
545             PYTHONMOD_UNINSTALL=pythonmod-uninstall
546             AC_SUBST(PYTHONMOD_UNINSTALL)
547          fi
548
549          # Declare PyUnbound
550          if test x_$ub_with_pyunbound != x_no; then
551             AC_DEFINE(WITH_PYUNBOUND, 1, [Define if you want PyUnbound.])
552             WITH_PYUNBOUND=yes
553             AC_SUBST(WITH_PYUNBOUND)
554             PYUNBOUND_OBJ="libunbound_wrap.lo"
555             AC_SUBST(PYUNBOUND_OBJ)
556             PYUNBOUND_TARGET="_unbound.la"
557             AC_SUBST(PYUNBOUND_TARGET)
558             PYUNBOUND_INSTALL=pyunbound-install
559             AC_SUBST(PYUNBOUND_INSTALL)
560             PYUNBOUND_UNINSTALL=pyunbound-uninstall
561             AC_SUBST(PYUNBOUND_UNINSTALL)
562          fi
563       fi
564    else
565       AC_MSG_RESULT([*** Python libraries not found, won't build PythonMod or PyUnbound ***])
566       ub_with_pyunbound=no
567       ub_with_pythonmod=no
568    fi
569 fi
570
571 if test "`uname`" = "NetBSD"; then
572         NETBSD_LINTFLAGS='"-D__RENAME(x)=" -D_NETINET_IN_H_'
573         AC_SUBST(NETBSD_LINTFLAGS)
574 fi
575 CONFIG_DATE=`date +%Y%m%d`
576 AC_SUBST(CONFIG_DATE)
577
578 # Checks for libraries.
579
580 # libnss
581 USE_NSS="no"
582 AC_ARG_WITH([nss], AC_HELP_STRING([--with-nss=path],
583         [use libnss instead of openssl, installed at path.]),
584         [
585         USE_NSS="yes"
586         AC_DEFINE(HAVE_NSS, 1, [Use libnss for crypto])
587         if test "$withval" != "" -a "$withval" != "yes"; then
588                 CPPFLAGS="$CPPFLAGS -I$withval/include/nss3"
589                 LDFLAGS="$LDFLAGS -L$withval/lib"
590                 ACX_RUNTIME_PATH_ADD([$withval/lib])
591                 CPPFLAGS="-I$withval/include/nspr4 $CPPFLAGS"
592         else
593                 CPPFLAGS="$CPPFLAGS -I/usr/include/nss3"
594                 CPPFLAGS="-I/usr/include/nspr4 $CPPFLAGS"
595         fi
596         LIBS="$LIBS -lnss3 -lnspr4"
597         SSLLIB=""
598         ]
599 )
600
601 # libnettle
602 USE_NETTLE="no"
603 AC_ARG_WITH([nettle], AC_HELP_STRING([--with-nettle=path],
604         [use libnettle as crypto library, installed at path.]),
605         [
606         USE_NETTLE="yes"
607         AC_DEFINE(HAVE_NETTLE, 1, [Use libnettle for crypto])
608         if test "$withval" != "" -a "$withval" != "yes"; then
609                 CPPFLAGS="$CPPFLAGS -I$withval/include/nettle"
610                 LDFLAGS="$LDFLAGS -L$withval/lib"
611                 ACX_RUNTIME_PATH_ADD([$withval/lib])
612         else
613                 CPPFLAGS="$CPPFLAGS -I/usr/include/nettle"
614         fi
615         LIBS="$LIBS -lhogweed -lnettle -lgmp"
616         SSLLIB=""
617         ]
618 )
619
620 # openssl
621 if test $USE_NSS = "no" -a $USE_NETTLE = "no"; then
622 ACX_WITH_SSL
623 ACX_LIB_SSL
624 SSLLIB="-lssl"
625 AC_MSG_CHECKING([for LibreSSL])
626 if grep VERSION_TEXT $ssldir/include/openssl/opensslv.h | grep "LibreSSL" >/dev/null; then
627         AC_MSG_RESULT([yes])
628         AC_DEFINE([HAVE_LIBRESSL], [1], [Define if we have LibreSSL])
629         # libressl provides these compat functions, but they may also be
630         # declared by the OS in libc.  See if they have been declared.
631         AC_CHECK_DECLS([strlcpy,strlcat,arc4random,arc4random_uniform,reallocarray])
632 else
633         AC_MSG_RESULT([no])
634 fi
635 AC_CHECK_HEADERS([openssl/conf.h],,, [AC_INCLUDES_DEFAULT])
636 AC_CHECK_HEADERS([openssl/engine.h],,, [AC_INCLUDES_DEFAULT])
637 AC_CHECK_FUNCS([OPENSSL_config EVP_sha1 EVP_sha256 EVP_sha512 FIPS_mode])
638 AC_CHECK_DECLS([SSL_COMP_get_compression_methods,sk_SSL_COMP_pop_free,SSL_CTX_set_ecdh_auto], [], [], [
639 AC_INCLUDES_DEFAULT
640 #ifdef HAVE_OPENSSL_ERR_H
641 #include <openssl/err.h>
642 #endif
643
644 #ifdef HAVE_OPENSSL_RAND_H
645 #include <openssl/rand.h>
646 #endif
647
648 #ifdef HAVE_OPENSSL_CONF_H
649 #include <openssl/conf.h>
650 #endif
651
652 #ifdef HAVE_OPENSSL_ENGINE_H
653 #include <openssl/engine.h>
654 #endif
655 #include <openssl/ssl.h>
656 #include <openssl/evp.h>
657 ])
658 fi
659 AC_SUBST(SSLLIB)
660
661
662 AC_ARG_ENABLE(sha2, AC_HELP_STRING([--disable-sha2], [Disable SHA256 and SHA512 RRSIG support]))
663 case "$enable_sha2" in
664         no)
665         ;;
666         yes|*)
667         AC_DEFINE([USE_SHA2], [1], [Define this to enable SHA256 and SHA512 support.])
668         ;;
669 esac
670
671 # check wether gost also works
672 AC_DEFUN([AC_CHECK_GOST_WORKS],
673 [AC_REQUIRE([AC_PROG_CC])
674 AC_MSG_CHECKING([if GOST works])
675 if test c${cross_compiling} = cno; then
676 BAKCFLAGS="$CFLAGS"
677 if test -n "$ssldir"; then
678         CFLAGS="$CFLAGS -Wl,-rpath,$ssldir/lib"
679 fi
680 AC_RUN_IFELSE([AC_LANG_SOURCE([[
681 #include <string.h>
682 #include <openssl/ssl.h>
683 #include <openssl/evp.h>
684 #include <openssl/engine.h>
685 #include <openssl/conf.h>
686 /* routine to load gost (from sldns) */
687 int load_gost_id(void)
688 {
689         static int gost_id = 0;
690         const EVP_PKEY_ASN1_METHOD* meth;
691         ENGINE* e;
692
693         if(gost_id) return gost_id;
694
695         /* see if configuration loaded gost implementation from other engine*/
696         meth = EVP_PKEY_asn1_find_str(NULL, "gost2001", -1);
697         if(meth) {
698                 EVP_PKEY_asn1_get0_info(&gost_id, NULL, NULL, NULL, NULL, meth);
699                 return gost_id;
700         }
701
702         /* see if engine can be loaded already */
703         e = ENGINE_by_id("gost");
704         if(!e) {
705                 /* load it ourself, in case statically linked */
706                 ENGINE_load_builtin_engines();
707                 ENGINE_load_dynamic();
708                 e = ENGINE_by_id("gost");
709         }
710         if(!e) {
711                 /* no gost engine in openssl */
712                 return 0;
713         }
714         if(!ENGINE_set_default(e, ENGINE_METHOD_ALL)) {
715                 ENGINE_finish(e);
716                 ENGINE_free(e);
717                 return 0;
718         }
719
720         meth = EVP_PKEY_asn1_find_str(&e, "gost2001", -1);
721         if(!meth) {
722                 /* algo not found */
723                 ENGINE_finish(e);
724                 ENGINE_free(e);
725                 return 0;
726         }
727         EVP_PKEY_asn1_get0_info(&gost_id, NULL, NULL, NULL, NULL, meth);
728         return gost_id;
729 }
730 int main(void) { 
731         EVP_MD_CTX* ctx;
732         const EVP_MD* md;
733         unsigned char digest[64]; /* its a 256-bit digest, so uses 32 bytes */
734         const char* str = "Hello world";
735         const unsigned char check[] = {
736                 0x40 , 0xed , 0xf8 , 0x56 , 0x5a , 0xc5 , 0x36 , 0xe1 ,
737                 0x33 , 0x7c , 0x7e , 0x87 , 0x62 , 0x1c , 0x42 , 0xe0 ,
738                 0x17 , 0x1b , 0x5e , 0xce , 0xa8 , 0x46 , 0x65 , 0x4d ,
739                 0x8d , 0x3e , 0x22 , 0x9b , 0xe1 , 0x30 , 0x19 , 0x9d
740         };
741         OPENSSL_config(NULL);
742         (void)load_gost_id();
743         md = EVP_get_digestbyname("md_gost94");
744         if(!md) return 1;
745         memset(digest, 0, sizeof(digest));
746         ctx = EVP_MD_CTX_create();
747         if(!ctx) return 2;
748         if(!EVP_DigestInit_ex(ctx, md, NULL)) return 3;
749         if(!EVP_DigestUpdate(ctx, str, 10)) return 4;
750         if(!EVP_DigestFinal_ex(ctx, digest, NULL)) return 5;
751         /* uncomment to see the hash calculated.
752                 {int i;
753                 for(i=0; i<32; i++)
754                         printf(" %2.2x", (int)digest[i]);
755                 printf("\n");}
756         */
757         if(memcmp(digest, check, sizeof(check)) != 0)
758                 return 6;
759         return 0;
760 }
761 ]])] , [eval "ac_cv_c_gost_works=yes"], [eval "ac_cv_c_gost_works=no"])
762 CFLAGS="$BAKCFLAGS"
763 else
764 eval "ac_cv_c_gost_works=maybe"
765 fi
766 AC_MSG_RESULT($ac_cv_c_gost_works)
767 ])dnl
768
769 AC_ARG_ENABLE(gost, AC_HELP_STRING([--disable-gost], [Disable GOST support]))
770 use_gost="no"
771 if test $USE_NSS = "no" -a $USE_NETTLE = "no"; then
772 case "$enable_gost" in
773         no)
774         ;;
775         *)
776         AC_CHECK_FUNC(EVP_PKEY_set_type_str, [:],[AC_MSG_ERROR([OpenSSL 1.0.0 is needed for GOST support])])
777         AC_CHECK_FUNC(EC_KEY_new, [], [AC_MSG_ERROR([OpenSSL does not support ECC, needed for GOST support])])
778         AC_CHECK_GOST_WORKS
779         if test "$ac_cv_c_gost_works" != no; then
780                 use_gost="yes"
781                 AC_DEFINE([USE_GOST], [1], [Define this to enable GOST support.])
782         fi
783         ;;
784 esac
785 fi dnl !USE_NSS && !USE_NETTLE
786
787 AC_ARG_ENABLE(ecdsa, AC_HELP_STRING([--disable-ecdsa], [Disable ECDSA support]))
788 use_ecdsa="no"
789 case "$enable_ecdsa" in
790     no)
791       ;;
792     *)
793       if test $USE_NSS = "no" -a $USE_NETTLE = "no"; then
794               AC_CHECK_FUNC(ECDSA_sign, [], [AC_MSG_ERROR([OpenSSL does not support ECDSA: please upgrade or rerun with --disable-ecdsa])])
795               AC_CHECK_FUNC(SHA384_Init, [], [AC_MSG_ERROR([OpenSSL does not support SHA384: please upgrade or rerun with --disable-ecdsa])])
796               AC_CHECK_DECLS([NID_X9_62_prime256v1, NID_secp384r1], [], [AC_MSG_ERROR([OpenSSL does not support the ECDSA curves: please upgrade or rerun with --disable-ecdsa])], [AC_INCLUDES_DEFAULT
797 #include <openssl/evp.h>
798               ])
799               # see if OPENSSL 1.0.0 or later (has EVP MD and Verify independency)
800               AC_MSG_CHECKING([if openssl supports SHA2 and ECDSA with EVP])
801               if grep OPENSSL_VERSION_TEXT $ssldir/include/openssl/opensslv.h | grep "OpenSSL" >/dev/null; then
802                 if grep OPENSSL_VERSION_NUMBER $ssldir/include/openssl/opensslv.h | grep 0x0 >/dev/null; then
803                   AC_MSG_RESULT([no])
804                   AC_DEFINE_UNQUOTED([USE_ECDSA_EVP_WORKAROUND], [1], [Define this to enable an EVP workaround for older openssl])
805                 else
806                   AC_MSG_RESULT([yes])
807                 fi
808               else
809                 # not OpenSSL, thus likely LibreSSL, which supports it
810                 AC_MSG_RESULT([yes])
811               fi
812       fi
813       # we now know we have ECDSA and the required curves.
814       AC_DEFINE_UNQUOTED([USE_ECDSA], [1], [Define this to enable ECDSA support.])
815       use_ecdsa="yes"
816       ;;
817 esac
818
819 AC_ARG_ENABLE(event-api, AC_HELP_STRING([--enable-event-api], [Enable (experimental) libevent-based libunbound API installed to unbound-event.h]))
820 use_unbound_event="no"
821 case "$enable_event_api" in
822     yes)
823       use_unbound_event="yes"
824       ;;
825     *)
826       ;;
827 esac
828
829 # check for libevent
830 AC_ARG_WITH(libevent, AC_HELP_STRING([--with-libevent=pathname],
831     [use libevent (will check /usr/local /opt/local /usr/lib /usr/pkg /usr/sfw /usr  or you can specify an explicit path). Slower, but allows use of large outgoing port ranges.]),
832     [ ],[ withval="no" ])
833 if test x_$withval = x_yes -o x_$withval != x_no; then
834         AC_MSG_CHECKING(for libevent)
835         if test x_$withval = x_ -o x_$withval = x_yes; then
836             withval="/usr/local /opt/local /usr/lib /usr/pkg /usr/sfw /usr"
837         fi
838         for dir in $withval; do
839             thedir="$dir"
840             if test -f "$dir/include/event.h" -o -f "$dir/include/event2/event.h"; then
841                 found_libevent="yes"
842                 dnl assume /usr is in default path.
843                 if test "$thedir" != "/usr"; then
844                     CPPFLAGS="$CPPFLAGS -I$thedir/include"
845                 fi
846                 break;
847             fi
848         done
849         if test x_$found_libevent != x_yes; then
850                 if test -f "$dir/event.h" -a \( -f "$dir/libevent.la" -o -f "$dir/libev.la" \) ; then
851                         # libevent source directory
852                         AC_MSG_RESULT(found in $thedir)
853                         CPPFLAGS="$CPPFLAGS -I$thedir -I$thedir/include"
854                         BAK_LDFLAGS_SET="1"
855                         BAK_LDFLAGS="$LDFLAGS"
856                         # remove evdns from linking
857                         mkdir build >/dev/null 2>&1
858                         mkdir build/libevent >/dev/null 2>&1
859                         mkdir build/libevent/.libs >/dev/null 2>&1
860                         ev_files_o=`ls $thedir/*.o | grep -v evdns\.o | grep -v bufferevent_openssl\.o`
861                         ev_files_lo=`ls $thedir/*.lo | grep -v evdns\.lo | grep -v bufferevent_openssl\.lo`
862                         ev_files_libso=`ls $thedir/.libs/*.o | grep -v evdns\.o | grep -v bufferevent_openssl\.o`
863                         cp $ev_files_o build/libevent
864                         cp $ev_files_lo build/libevent
865                         cp $ev_files_libso build/libevent/.libs
866                         LATE_LDFLAGS="build/libevent/*.lo -lm"
867                         LDFLAGS="build/libevent/*.o $LDFLAGS -lm"
868                 else
869                         AC_MSG_ERROR([Cannot find the libevent library in $withval
870 You can restart ./configure --with-libevent=no to use a builtin alternative.
871 Please note that this alternative is not as capable as libevent when using
872 large outgoing port ranges.  ])
873                 fi
874         else
875             AC_MSG_RESULT(found in $thedir)
876             dnl if event2 exists and no event lib in dir itself, use subdir
877             if test ! -f $thedir/lib/libevent.a -a ! -f $thedir/lib/libevent.so -a -d "$thedir/lib/event2"; then
878                     LDFLAGS="$LDFLAGS -L$thedir/lib/event2"
879                     ACX_RUNTIME_PATH_ADD([$thedir/lib/event2])
880             else
881                     dnl assume /usr is in default path, do not add "".
882                     if test "$thedir" != "/usr" -a "$thedir" != ""; then
883                         LDFLAGS="$LDFLAGS -L$thedir/lib"
884                         ACX_RUNTIME_PATH_ADD([$thedir/lib])
885                     fi
886             fi
887         fi
888         # check for library used by libevent after 1.3c
889         AC_SEARCH_LIBS([clock_gettime], [rt])
890
891         # is the event.h header libev or libevent?
892         AC_CHECK_HEADERS([event.h],,, [AC_INCLUDES_DEFAULT])
893         AC_CHECK_DECL(EV_VERSION_MAJOR, [
894                 AC_SEARCH_LIBS(event_set, [ev])
895         ],[
896                 AC_SEARCH_LIBS(event_set, [event])
897         ],[AC_INCLUDES_DEFAULT
898 #include <event.h>
899         ])
900         AC_CHECK_FUNCS([event_base_free]) # only in libevent 1.2 and later
901         AC_CHECK_FUNCS([event_base_once]) # only in libevent 1.4.1 and later
902         AC_CHECK_FUNCS([event_base_new]) # only in libevent 1.4.1 and later
903         AC_CHECK_FUNCS([event_base_get_method]) # only in libevent 1.4.3 and later
904         AC_CHECK_FUNCS([ev_loop]) # only in libev. (tested on 3.51)
905         AC_CHECK_FUNCS([ev_default_loop]) # only in libev. (tested on 4.00)
906         if test -n "$BAK_LDFLAGS_SET"; then
907                 LDFLAGS="$BAK_LDFLAGS"
908         fi
909         if test "$use_unbound_event" = "yes"; then
910                 AC_SUBST(UNBOUND_EVENT_INSTALL, [unbound-event-install])
911                 AC_SUBST(UNBOUND_EVENT_UNINSTALL, [unbound-event-uninstall])
912         fi
913 else
914         AC_DEFINE(USE_MINI_EVENT, 1, [Define if you want to use internal select based events])
915 fi
916
917 # check for libexpat
918 AC_ARG_WITH(libexpat, AC_HELP_STRING([--with-libexpat=path],
919     [specify explicit path for libexpat.]),
920     [ ],[ withval="/usr/local /opt/local /usr/lib /usr/pkg /usr/sfw /usr" ])
921 AC_MSG_CHECKING(for libexpat)
922 found_libexpat="no"
923 for dir in $withval ; do
924             if test -f "$dir/include/expat.h"; then
925                 found_libexpat="yes"
926                 dnl assume /usr is in default path.
927                 if test "$dir" != "/usr"; then
928                     CPPFLAGS="$CPPFLAGS -I$dir/include"
929                     LDFLAGS="$LDFLAGS -L$dir/lib"
930                 fi
931                 AC_MSG_RESULT(found in $dir)
932                 break;
933             fi
934 done
935 if test x_$found_libexpat != x_yes; then
936         AC_ERROR([Could not find libexpat, expat.h])
937 fi
938 AC_CHECK_HEADERS([expat.h],,, [AC_INCLUDES_DEFAULT])
939 AC_CHECK_DECLS([XML_StopParser], [], [], [AC_INCLUDES_DEFAULT
940 #include <expat.h>
941 ])
942
943 # set static linking if requested
944 AC_SUBST(staticexe)
945 staticexe=""
946 AC_ARG_ENABLE(static-exe, AC_HELP_STRING([--enable-static-exe],
947         [ enable to compile executables statically against (event) libs, for debug purposes ]), 
948         , )
949 if test x_$enable_static_exe = x_yes; then
950         staticexe="-static"
951         if test "$on_mingw" = yes; then
952                 staticexe="-all-static"
953                 # for static crosscompile, include gdi32 and zlib here.
954                 if test "`uname`" = "Linux"; then
955                         LIBS="$LIBS -lgdi32 -lz"
956                 fi
957         fi
958 fi
959
960 # set lock checking if requested
961 AC_ARG_ENABLE(lock_checks, AC_HELP_STRING([--enable-lock-checks],
962         [ enable to check lock and unlock calls, for debug purposes ]), 
963         , )
964 if test x_$enable_lock_checks = x_yes; then
965         AC_DEFINE(ENABLE_LOCK_CHECKS, 1, [Define if you want to use debug lock checking (slow).])
966         CHECKLOCK_OBJ="checklocks.lo"
967         AC_SUBST(CHECKLOCK_OBJ)
968 fi
969
970 ACX_CHECK_GETADDRINFO_WITH_INCLUDES
971 if test "$USE_WINSOCK" = 1; then
972         AC_DEFINE(UB_ON_WINDOWS, 1, [Use win32 resources and API])
973         AC_CHECK_HEADERS([iphlpapi.h],,, [AC_INCLUDES_DEFAULT
974 #include <windows.h>
975         ])
976         AC_CHECK_TOOL(WINDRES, windres)
977         LIBS="$LIBS -liphlpapi"
978         WINAPPS="unbound-service-install.exe unbound-service-remove.exe anchor-update.exe"
979         AC_SUBST(WINAPPS)
980         WIN_DAEMON_SRC="winrc/win_svc.c winrc/w_inst.c"
981         AC_SUBST(WIN_DAEMON_SRC)
982         WIN_DAEMON_OBJ="win_svc.lo w_inst.lo"
983         AC_SUBST(WIN_DAEMON_OBJ)
984         WIN_DAEMON_OBJ_LINK="rsrc_unbound.o"
985         AC_SUBST(WIN_DAEMON_OBJ_LINK)
986         WIN_HOST_OBJ_LINK="rsrc_unbound_host.o"
987         AC_SUBST(WIN_HOST_OBJ_LINK)
988         WIN_UBANCHOR_OBJ_LINK="rsrc_unbound_anchor.o log.lo locks.lo"
989         AC_SUBST(WIN_UBANCHOR_OBJ_LINK)
990         WIN_CONTROL_OBJ_LINK="rsrc_unbound_control.o"
991         AC_SUBST(WIN_CONTROL_OBJ_LINK)
992         WIN_CHECKCONF_OBJ_LINK="rsrc_unbound_checkconf.o"
993         AC_SUBST(WIN_CHECKCONF_OBJ_LINK)
994 fi
995 if test $ac_cv_func_getaddrinfo = no; then
996         AC_LIBOBJ([fake-rfc2553])
997 fi
998 # check after getaddrinfo for its libraries
999 ACX_FUNC_IOCTLSOCKET
1000
1001 # see if daemon(3) exists, and if it is deprecated.
1002 AC_CHECK_FUNCS([daemon])
1003 if test $ac_cv_func_daemon = yes; then
1004         ACX_FUNC_DEPRECATED([daemon], [(void)daemon(0, 0);], [
1005 #include <stdlib.h>
1006 ])
1007 fi
1008
1009 AC_CHECK_MEMBERS([struct sockaddr_un.sun_len],,,[
1010 AC_INCLUDES_DEFAULT
1011 #ifdef HAVE_SYS_UN_H
1012 #include <sys/un.h>
1013 #endif
1014 ])
1015 AC_CHECK_MEMBERS([struct in_pktinfo.ipi_spec_dst],,,[
1016 AC_INCLUDES_DEFAULT
1017 #if HAVE_SYS_PARAM_H
1018 #include <sys/param.h>
1019 #endif
1020
1021 #ifdef HAVE_SYS_SOCKET_H
1022 #include <sys/socket.h>
1023 #endif
1024
1025 #ifdef HAVE_SYS_UIO_H
1026 #include <sys/uio.h>
1027 #endif
1028
1029 #ifdef HAVE_NETINET_IN_H
1030 #include <netinet/in.h>
1031 #endif
1032
1033 #ifdef HAVE_NETINET_TCP_H
1034 #include <netinet/tcp.h>
1035 #endif
1036
1037 #ifdef HAVE_ARPA_INET_H
1038 #include <arpa/inet.h>
1039 #endif
1040
1041 #ifdef HAVE_WINSOCK2_H
1042 #include <winsock2.h>
1043 #endif
1044
1045 #ifdef HAVE_WS2TCPIP_H
1046 #include <ws2tcpip.h>
1047 #endif
1048 ])
1049 AC_SEARCH_LIBS([setusercontext], [util])
1050 AC_CHECK_FUNCS([tzset sigprocmask fcntl getpwnam getrlimit setrlimit setsid chroot kill chown sleep usleep random srandom recvmsg sendmsg writev socketpair glob initgroups strftime localtime_r setusercontext _beginthreadex endservent endprotoent fsync])
1051 AC_CHECK_FUNCS([setresuid],,[AC_CHECK_FUNCS([setreuid])])
1052 AC_CHECK_FUNCS([setresgid],,[AC_CHECK_FUNCS([setregid])])
1053
1054 AC_MSG_CHECKING([for sbrk])
1055 # catch the warning of deprecated sbrk
1056 old_cflags="$CFLAGS"
1057 CFLAGS="$CFLAGS -Werror"
1058 AC_COMPILE_IFELSE([AC_LANG_SOURCE(AC_INCLUDES_DEFAULT
1059 [[
1060 int main(void) { void* cur = sbrk(0); printf("%u\n", (unsigned)(size_t)((char*)cur - (char*)sbrk(0))); return 0; }
1061 ]])], [
1062         AC_MSG_RESULT(yes)
1063         AC_DEFINE(HAVE_SBRK, 1, [define if you have the sbrk() call])
1064     ], [AC_MSG_RESULT(no)])
1065 CFLAGS="$old_cflags"
1066
1067 # check if setreuid en setregid fail, on MacOSX10.4(darwin8).
1068 if echo $build_os | grep darwin8 > /dev/null; then
1069         AC_DEFINE(DARWIN_BROKEN_SETREUID, 1, [Define this if on macOSX10.4-darwin8 and setreuid and setregid do not work])
1070 fi
1071 AC_REPLACE_FUNCS(inet_aton)
1072 AC_REPLACE_FUNCS(inet_pton)
1073 AC_REPLACE_FUNCS(inet_ntop)
1074 AC_REPLACE_FUNCS(snprintf)
1075 # test if snprintf return the proper length
1076 if test "x$ac_cv_func_snprintf" = xyes; then
1077     if test c${cross_compiling} = cno; then
1078         AC_MSG_CHECKING([for correct snprintf return value])
1079         AC_RUN_IFELSE([AC_LANG_SOURCE(AC_INCLUDES_DEFAULT
1080 [[
1081 int main(void) { return !(snprintf(NULL, 0, "test") == 4); }
1082 ]])], [AC_MSG_RESULT(yes)], [
1083                 AC_MSG_RESULT(no)
1084                 AC_DEFINE([SNPRINTF_RET_BROKEN], [], [define if (v)snprintf does not return length needed, (but length used)])
1085                 AC_LIBOBJ(snprintf)
1086           ])
1087     fi
1088 fi
1089 AC_REPLACE_FUNCS(strlcat)
1090 AC_REPLACE_FUNCS(strlcpy)
1091 AC_REPLACE_FUNCS(memmove)
1092 AC_REPLACE_FUNCS(gmtime_r)
1093 AC_REPLACE_FUNCS(isblank)
1094 dnl without CTIME, ARC4-functions and without reallocarray.
1095 LIBOBJ_WITHOUT_CTIMEARC4="$LIBOBJS"
1096 AC_SUBST(LIBOBJ_WITHOUT_CTIMEARC4)
1097 AC_REPLACE_FUNCS(reallocarray)
1098 if test "$USE_NSS" = "no"; then
1099         AC_REPLACE_FUNCS(arc4random)
1100         AC_REPLACE_FUNCS(arc4random_uniform)
1101         if test "$ac_cv_func_arc4random" = "no"; then
1102                 AC_LIBOBJ(explicit_bzero)
1103                 AC_LIBOBJ(arc4_lock)
1104                 AC_CHECK_FUNCS([getentropy],,[
1105                     if test "$USE_WINSOCK" = 1; then
1106                         AC_LIBOBJ(getentropy_win)
1107                     else
1108                         case `uname` in
1109                         Darwin)
1110                                 AC_LIBOBJ(getentropy_osx)
1111                         ;;
1112                         SunOS)
1113                                 AC_LIBOBJ(getentropy_solaris)
1114                                 AC_CHECK_HEADERS([sys/sha2.h],, [
1115                                         AC_CHECK_FUNCS([SHA512_Update],,[
1116                                                 AC_LIBOBJ(sha512)
1117                                         ])
1118                                 ], [AC_INCLUDES_DEFAULT])
1119                                 if test "$ac_cv_header_sys_sha2_h" = "yes"; then
1120                                         # this lib needed for sha2 on solaris
1121                                         LIBS="$LIBS -lmd"
1122                                 fi
1123                                 AC_SEARCH_LIBS([clock_gettime], [rt])
1124                         ;;
1125                         Linux|*)
1126                                 AC_LIBOBJ(getentropy_linux)
1127                                 AC_CHECK_FUNCS([SHA512_Update],,[
1128                                         AC_DEFINE([COMPAT_SHA512], [1], [Do sha512 definitions in config.h])
1129                                         AC_LIBOBJ(sha512)
1130                                 ])
1131                                 AC_CHECK_HEADERS([sys/sysctl.h],,, [AC_INCLUDES_DEFAULT])
1132                                 AC_CHECK_FUNCS([getauxval])
1133                                 AC_SEARCH_LIBS([clock_gettime], [rt])
1134                         ;;
1135                         esac
1136                     fi
1137                 ])
1138         fi
1139 fi
1140 LIBOBJ_WITHOUT_CTIME="$LIBOBJS"
1141 AC_SUBST(LIBOBJ_WITHOUT_CTIME)
1142 AC_REPLACE_FUNCS(ctime_r)
1143
1144 AC_ARG_ENABLE(allsymbols, AC_HELP_STRING([--enable-allsymbols], [export all symbols from libunbound and link binaries to it, smaller install size but libunbound export table is polluted by internal symbols]))
1145 case "$enable_allsymbols" in
1146         yes)
1147         COMMON_OBJ_ALL_SYMBOLS=""
1148         UBSYMS=""
1149         EXTRALINK="-L. -L.libs -lunbound"
1150         AC_DEFINE(EXPORT_ALL_SYMBOLS, 1, [Define this if you enabled-allsymbols from libunbound to link binaries to it for smaller install size, but the libunbound export table is polluted by internal symbols])
1151         ;;
1152         no|*)
1153         COMMON_OBJ_ALL_SYMBOLS='$(COMMON_OBJ)'
1154         UBSYMS='-export-symbols $(srcdir)/libunbound/ubsyms.def'
1155         EXTRALINK=""
1156         ;;
1157 esac
1158 AC_SUBST(COMMON_OBJ_ALL_SYMBOLS)
1159 AC_SUBST(EXTRALINK)
1160 AC_SUBST(UBSYMS)
1161 if test x_$enable_lock_checks = x_yes; then
1162         UBSYMS="-export-symbols clubsyms.def"
1163         cp ${srcdir}/libunbound/ubsyms.def clubsyms.def
1164         echo lock_protect >> clubsyms.def
1165         echo lock_unprotect >> clubsyms.def
1166         echo lock_get_mem >> clubsyms.def
1167         echo checklock_start >> clubsyms.def
1168         echo checklock_stop >> clubsyms.def
1169         echo checklock_lock >> clubsyms.def
1170         echo checklock_unlock >> clubsyms.def
1171         echo checklock_init >> clubsyms.def
1172         echo checklock_thrcreate >> clubsyms.def
1173         echo checklock_thrjoin >> clubsyms.def
1174 fi
1175
1176 # check for dnstap if requested
1177 dt_DNSTAP([$UNBOUND_RUN_DIR/dnstap.sock],
1178     [
1179         AC_DEFINE([USE_DNSTAP], [1], [Define to 1 to enable dnstap support])
1180         AC_SUBST([ENABLE_DNSTAP], [1])
1181
1182         AC_SUBST([opt_dnstap_socket_path])
1183         ACX_ESCAPE_BACKSLASH($opt_dnstap_socket_path, hdr_dnstap_socket_path)
1184         AC_DEFINE_UNQUOTED(DNSTAP_SOCKET_PATH,
1185             ["$hdr_dnstap_socket_path"], [default dnstap socket path])
1186
1187         AC_SUBST([DNSTAP_SRC], ["dnstap/dnstap.c dnstap/dnstap.pb-c.c"])
1188         AC_SUBST([DNSTAP_OBJ], ["dnstap.lo dnstap.pb-c.lo"])
1189     ],
1190     [
1191         AC_SUBST([ENABLE_DNSTAP], [0])
1192     ]
1193 )
1194
1195 AC_MSG_CHECKING([if ${MAKE:-make} supports $< with implicit rule in scope])
1196 # on openBSD, the implicit rule make $< work.
1197 # on Solaris, it does not work ($? is changed sources, $^ lists dependencies).
1198 # gmake works.
1199 cat >conftest.make <<EOF
1200 all:    conftest.lo
1201
1202 conftest.lo foo.lo bla.lo:
1203         if test -f "\$<"; then touch \$@; fi
1204
1205 .SUFFIXES: .lo
1206 .c.lo:
1207         if test -f "\$<"; then touch \$@; fi
1208
1209 conftest.lo:        conftest.dir/conftest.c
1210 EOF
1211 mkdir conftest.dir
1212 touch conftest.dir/conftest.c
1213 rm -f conftest.lo conftest.c
1214 ${MAKE:-make} -f conftest.make >/dev/null
1215 rm -f conftest.make conftest.c conftest.dir/conftest.c
1216 rm -rf conftest.dir
1217 if test ! -f conftest.lo; then
1218         AC_MSG_RESULT(no)
1219         SOURCEDETERMINE='echo "$^" | awk "-F " "{print \$$1;}" > .source'
1220         SOURCEFILE='`cat .source`'
1221 else
1222         AC_MSG_RESULT(yes)
1223         SOURCEDETERMINE=':'
1224         SOURCEFILE='$<'
1225 fi
1226 rm -f conftest.lo
1227 AC_SUBST(SOURCEDETERMINE)
1228 AC_SUBST(SOURCEFILE)
1229
1230 # see if we want to build the library or everything
1231 ALLTARGET="alltargets"
1232 INSTALLTARGET="install-all"
1233 AC_ARG_WITH(libunbound-only, AC_HELP_STRING([--with-libunbound-only],
1234         [do not build daemon and tool programs]),
1235         [
1236         if test "$withval" = "yes"; then
1237                 ALLTARGET="lib"
1238                 INSTALLTARGET="install-lib"
1239         fi
1240 ])
1241 AC_SUBST(ALLTARGET)
1242 AC_SUBST(INSTALLTARGET)
1243
1244 ACX_STRIP_EXT_FLAGS
1245 LDFLAGS="$LATE_LDFLAGS $LDFLAGS"
1246
1247 AC_DEFINE_UNQUOTED([MAXSYSLOGMSGLEN], [10240], [Define to the maximum message length to pass to syslog.])
1248
1249 AH_BOTTOM(
1250 dnl this must be first AH_CONFIG, to define the flags before any includes.
1251 AHX_CONFIG_EXT_FLAGS
1252
1253 dnl includes
1254 [
1255 #ifndef UNBOUND_DEBUG
1256 #  define NDEBUG
1257 #endif
1258
1259 /** Use small-ldns codebase */
1260 #define USE_SLDNS 1
1261 #ifdef HAVE_SSL
1262 #  define LDNS_BUILD_CONFIG_HAVE_SSL 1
1263 #endif
1264
1265 #include <stdio.h>
1266 #include <string.h>
1267 #include <unistd.h>
1268 #include <assert.h>
1269
1270 #if STDC_HEADERS
1271 #include <stdlib.h>
1272 #include <stddef.h>
1273 #endif
1274
1275 #ifdef HAVE_STDARG_H
1276 #include <stdarg.h>
1277 #endif
1278
1279 #ifdef HAVE_STDINT_H
1280 #include <stdint.h>
1281 #endif
1282
1283 #include <errno.h>
1284
1285 #if HAVE_SYS_PARAM_H
1286 #include <sys/param.h>
1287 #endif
1288
1289 #ifdef HAVE_SYS_SOCKET_H
1290 #include <sys/socket.h>
1291 #endif
1292
1293 #ifdef HAVE_SYS_UIO_H
1294 #include <sys/uio.h>
1295 #endif
1296
1297 #ifdef HAVE_NETINET_IN_H
1298 #include <netinet/in.h>
1299 #endif
1300
1301 #ifdef HAVE_NETINET_TCP_H
1302 #include <netinet/tcp.h>
1303 #endif
1304
1305 #ifdef HAVE_ARPA_INET_H
1306 #include <arpa/inet.h>
1307 #endif
1308
1309 #ifdef HAVE_WINSOCK2_H
1310 #include <winsock2.h>
1311 #endif
1312
1313 #ifdef HAVE_WS2TCPIP_H
1314 #include <ws2tcpip.h>
1315 #endif
1316
1317 #ifndef USE_WINSOCK
1318 #define ARG_LL "%ll"
1319 #else
1320 #define ARG_LL "%I64"
1321 #endif
1322
1323 #ifndef AF_LOCAL
1324 #define AF_LOCAL AF_UNIX
1325 #endif
1326 ]
1327
1328 AHX_CONFIG_FORMAT_ATTRIBUTE
1329 AHX_CONFIG_UNUSED_ATTRIBUTE
1330 AHX_CONFIG_FSEEKO
1331 AHX_CONFIG_MAXHOSTNAMELEN
1332 #if !defined(HAVE_SNPRINTF) || defined(SNPRINTF_RET_BROKEN)
1333 #define snprintf snprintf_unbound
1334 #define vsnprintf vsnprintf_unbound
1335 #include <stdarg.h>
1336 int snprintf (char *str, size_t count, const char *fmt, ...);
1337 int vsnprintf (char *str, size_t count, const char *fmt, va_list arg);
1338 #endif /* HAVE_SNPRINTF or SNPRINTF_RET_BROKEN */
1339 AHX_CONFIG_INET_PTON(unbound)
1340 AHX_CONFIG_INET_NTOP(unbound)
1341 AHX_CONFIG_INET_ATON(unbound)
1342 AHX_CONFIG_MEMMOVE(unbound)
1343 AHX_CONFIG_STRLCAT(unbound)
1344 AHX_CONFIG_STRLCPY(unbound)
1345 AHX_CONFIG_GMTIME_R(unbound)
1346 AHX_CONFIG_REALLOCARRAY(unbound)
1347 AHX_CONFIG_W32_SLEEP
1348 AHX_CONFIG_W32_USLEEP
1349 AHX_CONFIG_W32_RANDOM
1350 AHX_CONFIG_W32_SRANDOM
1351 AHX_CONFIG_W32_FD_SET_T
1352 AHX_CONFIG_IPV6_MIN_MTU
1353 AHX_MEMCMP_BROKEN(unbound)
1354
1355 [
1356 #ifndef HAVE_CTIME_R
1357 #define ctime_r unbound_ctime_r
1358 char *ctime_r(const time_t *timep, char *buf);
1359 #endif
1360
1361 #ifndef HAVE_ISBLANK
1362 #define isblank unbound_isblank
1363 int isblank(int c);
1364 #endif
1365
1366 #if !defined(HAVE_STRPTIME) || !defined(STRPTIME_WORKS)
1367 #define strptime unbound_strptime
1368 struct tm;
1369 char *strptime(const char *s, const char *format, struct tm *tm);
1370 #endif
1371
1372 #ifdef HAVE_LIBRESSL
1373 #  if !HAVE_DECL_STRLCPY
1374 size_t strlcpy(char *dst, const char *src, size_t siz);
1375 #  endif
1376 #  if !HAVE_DECL_STRLCAT
1377 size_t strlcat(char *dst, const char *src, size_t siz);
1378 #  endif
1379 #  if !HAVE_DECL_ARC4RANDOM && defined(HAVE_ARC4RANDOM)
1380 uint32_t arc4random(void);
1381 #  endif
1382 #  if !HAVE_DECL_ARC4RANDOM_UNIFORM && defined(HAVE_ARC4RANDOM_UNIFORM)
1383 uint32_t arc4random_uniform(uint32_t upper_bound);
1384 #  endif
1385 #  if !HAVE_DECL_REALLOCARRAY
1386 void *reallocarray(void *ptr, size_t nmemb, size_t size);
1387 #  endif
1388 #endif /* HAVE_LIBRESSL */
1389 #ifndef HAVE_ARC4RANDOM
1390 void explicit_bzero(void* buf, size_t len);
1391 int getentropy(void* buf, size_t len);
1392 uint32_t arc4random(void);
1393 void arc4random_buf(void* buf, size_t n);
1394 void _ARC4_LOCK(void);
1395 void _ARC4_UNLOCK(void);
1396 #endif
1397 #ifndef HAVE_ARC4RANDOM_UNIFORM
1398 uint32_t arc4random_uniform(uint32_t upper_bound);
1399 #endif
1400 #ifdef COMPAT_SHA512
1401 #ifndef SHA512_DIGEST_LENGTH
1402 #define SHA512_BLOCK_LENGTH             128
1403 #define SHA512_DIGEST_LENGTH            64
1404 #define SHA512_DIGEST_STRING_LENGTH     (SHA512_DIGEST_LENGTH * 2 + 1)
1405 typedef struct _SHA512_CTX {
1406         uint64_t        state[8];
1407         uint64_t        bitcount[2];
1408         uint8_t buffer[SHA512_BLOCK_LENGTH];
1409 } SHA512_CTX;
1410 #endif /* SHA512_DIGEST_LENGTH */
1411 void SHA512_Init(SHA512_CTX*);
1412 void SHA512_Update(SHA512_CTX*, void*, size_t);
1413 void SHA512_Final(uint8_t[SHA512_DIGEST_LENGTH], SHA512_CTX*);
1414 unsigned char *SHA512(void* data, unsigned int data_len, unsigned char *digest);
1415 #endif /* COMPAT_SHA512 */
1416
1417
1418
1419 #if defined(HAVE_EVENT_H) && !defined(HAVE_EVENT_BASE_ONCE) && !(defined(HAVE_EV_LOOP) || defined(HAVE_EV_DEFAULT_LOOP)) && (defined(HAVE_PTHREAD) || defined(HAVE_SOLARIS_THREADS))
1420    /* using version of libevent that is not threadsafe. */
1421 #  define LIBEVENT_SIGNAL_PROBLEM 1
1422 #endif
1423
1424 #ifndef CHECKED_INET6
1425 #  define CHECKED_INET6
1426 #  ifdef AF_INET6
1427 #    define INET6
1428 #  else
1429 #    define AF_INET6        28
1430 #  endif
1431 #endif /* CHECKED_INET6 */
1432
1433 #ifndef HAVE_GETADDRINFO
1434 struct sockaddr_storage;
1435 #include "compat/fake-rfc2553.h"
1436 #endif
1437
1438 #ifdef UNBOUND_ALLOC_STATS
1439 #  define malloc(s) unbound_stat_malloc_log(s, __FILE__, __LINE__, __func__)
1440 #  define calloc(n,s) unbound_stat_calloc_log(n, s, __FILE__, __LINE__, __func__)
1441 #  define free(p) unbound_stat_free_log(p, __FILE__, __LINE__, __func__)
1442 #  define realloc(p,s) unbound_stat_realloc_log(p, s, __FILE__, __LINE__, __func__)
1443 void *unbound_stat_malloc(size_t size);
1444 void *unbound_stat_calloc(size_t nmemb, size_t size);
1445 void unbound_stat_free(void *ptr);
1446 void *unbound_stat_realloc(void *ptr, size_t size);
1447 void *unbound_stat_malloc_log(size_t size, const char* file, int line,
1448         const char* func);
1449 void *unbound_stat_calloc_log(size_t nmemb, size_t size, const char* file,
1450         int line, const char* func);
1451 void unbound_stat_free_log(void *ptr, const char* file, int line,
1452         const char* func);
1453 void *unbound_stat_realloc_log(void *ptr, size_t size, const char* file,
1454         int line, const char* func);
1455 #elif defined(UNBOUND_ALLOC_LITE)
1456 #  include "util/alloc.h"
1457 #endif /* UNBOUND_ALLOC_LITE and UNBOUND_ALLOC_STATS */
1458
1459 /** default port for DNS traffic. */
1460 #define UNBOUND_DNS_PORT 53
1461 /** default port for unbound control traffic, registered port with IANA,
1462     ub-dns-control  8953/tcp    unbound dns nameserver control */
1463 #define UNBOUND_CONTROL_PORT 8953
1464 /** the version of unbound-control that this software implements */
1465 #define UNBOUND_CONTROL_VERSION 1
1466
1467 ])
1468
1469 dnl if we build from source tree, the man pages need @date@ and @version@
1470 dnl if this is a distro tarball, that was already done by makedist.sh
1471 AC_SUBST(version, [VERSION_MAJOR.VERSION_MINOR.VERSION_MICRO])
1472 AC_SUBST(date, [`date +'%b %e, %Y'`])
1473
1474 AC_CONFIG_FILES([Makefile doc/example.conf doc/libunbound.3 doc/unbound.8 doc/unbound-anchor.8 doc/unbound-checkconf.8 doc/unbound.conf.5 doc/unbound-control.8 doc/unbound-host.1 smallapp/unbound-control-setup.sh dnstap/dnstap_config.h])
1475 AC_CONFIG_HEADER([config.h])
1476 AC_OUTPUT