e94bd30c476c35c6660503cbd2babfb7540f78e8
[gnupg.git] / configure.ac
1 # configure.ac - for GnuPG 2.1
2 # Copyright (C) 1998-2018 Free Software Foundation, Inc.
3 # Copyright (C) 1998-2018 Werner Koch
4 #
5 # This file is part of GnuPG.
6 #
7 # GnuPG is free software; you can redistribute it and/or modify
8 # it under the terms of the GNU General Public License as published by
9 # the Free Software Foundation; either version 3 of the License, or
10 # (at your option) any later version.
11 #
12 # GnuPG is distributed in the hope that it will be useful,
13 # but WITHOUT ANY WARRANTY; without even the implied warranty of
14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
15 # GNU General Public License for more details.
16 #
17 # You should have received a copy of the GNU General Public License
18 # along with this program; if not, see <https://www.gnu.org/licenses/>.
19
20 # Process this file with autoconf to produce a configure script.
21 AC_PREREQ(2.61)
22 min_automake_version="1.14"
23
24 # To build a release you need to create a tag with the version number
25 # (git tag -s gnupg-2.n.m) and run "./autogen.sh --force".  Please
26 # bump the version number immediately *after* the release and do
27 # another commit and push so that the git magic is able to work.
28 m4_define([mym4_package],[gnupg])
29 m4_define([mym4_major], [2])
30 m4_define([mym4_minor], [2])
31 m4_define([mym4_micro], [7])
32
33 # To start a new development series, i.e a new major or minor number
34 # you need to mark an arbitrary commit before the first beta release
35 # with an annotated tag.  For example the 2.1 branch starts off with
36 # the tag "gnupg-2.1-base".  This is used as the base for counting
37 # beta numbers before the first release of a series.
38
39 # Below is m4 magic to extract and compute the git revision number,
40 # the decimalized short revision number, a beta version string and a
41 # flag indicating a development version (mym4_isbeta).  Note that the
42 # m4 processing is done by autoconf and not during the configure run.
43 m4_define([mym4_verslist], m4_split(m4_esyscmd([./autogen.sh --find-version] \
44                            mym4_package mym4_major mym4_minor mym4_micro),[:]))
45 m4_define([mym4_isbeta],       m4_argn(2, mym4_verslist))
46 m4_define([mym4_version],      m4_argn(4, mym4_verslist))
47 m4_define([mym4_revision],     m4_argn(7, mym4_verslist))
48 m4_define([mym4_revision_dec], m4_argn(8, mym4_verslist))
49 m4_esyscmd([echo ]mym4_version[>VERSION])
50 AC_INIT([mym4_package],[mym4_version], [https://bugs.gnupg.org])
51
52 # When changing the SWDB tag please also adjust the hard coded tags in
53 # build-aux/speedo.mk and Makefile.am
54 AC_DEFINE_UNQUOTED(GNUPG_SWDB_TAG, "gnupg22", [swdb tag for this branch])
55
56 NEED_GPG_ERROR_VERSION=1.24
57
58 NEED_LIBGCRYPT_API=1
59 NEED_LIBGCRYPT_VERSION=1.7.0
60
61 NEED_LIBASSUAN_API=2
62 NEED_LIBASSUAN_VERSION=2.5.0
63
64 NEED_KSBA_API=1
65 NEED_KSBA_VERSION=1.3.4
66
67 NEED_NTBTLS_API=1
68 NEED_NTBTLS_VERSION=0.1.0
69
70 NEED_NPTH_API=1
71 NEED_NPTH_VERSION=1.2
72
73
74 NEED_GNUTLS_VERSION=3.0
75
76 NEED_SQLITE_VERSION=3.7
77
78 development_version=mym4_isbeta
79 PACKAGE=$PACKAGE_NAME
80 PACKAGE_GT=${PACKAGE_NAME}2
81 VERSION=$PACKAGE_VERSION
82
83 AC_CONFIG_AUX_DIR([build-aux])
84 AC_CONFIG_SRCDIR([sm/gpgsm.c])
85 AC_CONFIG_HEADER([config.h])
86 AM_INIT_AUTOMAKE([serial-tests dist-bzip2 no-dist-gzip])
87 AC_CANONICAL_HOST
88 AB_INIT
89
90 AC_GNU_SOURCE
91
92
93 # Some status variables.
94 have_gpg_error=no
95 have_libgcrypt=no
96 have_libassuan=no
97 have_ksba=no
98 have_ntbtls=no
99 have_gnutls=no
100 have_sqlite=no
101 have_npth=no
102 have_libusb=no
103 have_system_resolver=no
104 gnupg_have_ldap="n/a"
105
106 use_zip=yes
107 use_bzip2=yes
108 use_exec=yes
109 use_trust_models=yes
110 use_tofu=yes
111 use_libdns=yes
112 card_support=yes
113 use_ccid_driver=auto
114 dirmngr_auto_start=yes
115 use_tls_library=no
116 large_secmem=no
117 show_tor_support=no
118
119
120 GNUPG_BUILD_PROGRAM(gpg, yes)
121 GNUPG_BUILD_PROGRAM(gpgsm, yes)
122 # The agent is a required part and can't be disabled anymore.
123 build_agent=yes
124 GNUPG_BUILD_PROGRAM(scdaemon, yes)
125 GNUPG_BUILD_PROGRAM(g13, no)
126 GNUPG_BUILD_PROGRAM(dirmngr, yes)
127 GNUPG_BUILD_PROGRAM(doc, yes)
128 GNUPG_BUILD_PROGRAM(symcryptrun, no)
129 # We use gpgtar to unpack test data, hence we always build it.  If the
130 # user opts out, we simply don't install it.
131 GNUPG_BUILD_PROGRAM(gpgtar, yes)
132 GNUPG_BUILD_PROGRAM(wks-tools, no)
133
134 AC_SUBST(PACKAGE)
135 AC_SUBST(PACKAGE_GT)
136 AC_SUBST(VERSION)
137 AC_DEFINE_UNQUOTED(PACKAGE, "$PACKAGE", [Name of this package])
138 AC_DEFINE_UNQUOTED(PACKAGE_GT, "$PACKAGE_GT",
139                                 [Name of this package for gettext])
140 AC_DEFINE_UNQUOTED(VERSION, "$VERSION", [Version of this package])
141 AC_DEFINE_UNQUOTED(PACKAGE_BUGREPORT, "$PACKAGE_BUGREPORT",
142                                         [Bug report address])
143 AC_DEFINE_UNQUOTED(NEED_LIBGCRYPT_VERSION, "$NEED_LIBGCRYPT_VERSION",
144                                        [Required version of Libgcrypt])
145 AC_DEFINE_UNQUOTED(NEED_KSBA_VERSION, "$NEED_KSBA_VERSION",
146                                        [Required version of Libksba])
147 AC_DEFINE_UNQUOTED(NEED_NTBTLS_VERSION, "$NEED_NTBTLS_VERSION",
148                                        [Required version of NTBTLS])
149
150
151
152 # The default is to use the modules from this package and the few
153 # other packages in a standard place; i.e where this package gets
154 # installed.  With these options it is possible to override these
155 # ${prefix} depended values with fixed paths, which can't be replaced
156 # at make time.  See also am/cmacros.am and the defaults in AH_BOTTOM.
157 AC_ARG_WITH(agent-pgm,
158     [  --with-agent-pgm=PATH  Use PATH as the default for the agent)],
159           GNUPG_AGENT_PGM="$withval", GNUPG_AGENT_PGM="" )
160 AC_SUBST(GNUPG_AGENT_PGM)
161 AM_CONDITIONAL(GNUPG_AGENT_PGM, test -n "$GNUPG_AGENT_PGM")
162 show_gnupg_agent_pgm="(default)"
163 test -n "$GNUPG_AGENT_PGM" && show_gnupg_agent_pgm="$GNUPG_AGENT_PGM"
164
165 AC_ARG_WITH(pinentry-pgm,
166     [  --with-pinentry-pgm=PATH  Use PATH as the default for the pinentry)],
167           GNUPG_PINENTRY_PGM="$withval", GNUPG_PINENTRY_PGM="" )
168 AC_SUBST(GNUPG_PINENTRY_PGM)
169 AM_CONDITIONAL(GNUPG_PINENTRY_PGM, test -n "$GNUPG_PINENTRY_PGM")
170 show_gnupg_pinentry_pgm="(default)"
171 test -n "$GNUPG_PINENTRY_PGM" && show_gnupg_pinentry_pgm="$GNUPG_PINENTRY_PGM"
172
173
174 AC_ARG_WITH(scdaemon-pgm,
175     [  --with-scdaemon-pgm=PATH  Use PATH as the default for the scdaemon)],
176           GNUPG_SCDAEMON_PGM="$withval", GNUPG_SCDAEMON_PGM="" )
177 AC_SUBST(GNUPG_SCDAEMON_PGM)
178 AM_CONDITIONAL(GNUPG_SCDAEMON_PGM, test -n "$GNUPG_SCDAEMON_PGM")
179 show_gnupg_scdaemon_pgm="(default)"
180 test -n "$GNUPG_SCDAEMON_PGM" && show_gnupg_scdaemon_pgm="$GNUPG_SCDAEMON_PGM"
181
182
183 AC_ARG_WITH(dirmngr-pgm,
184     [  --with-dirmngr-pgm=PATH  Use PATH as the default for the dirmngr)],
185           GNUPG_DIRMNGR_PGM="$withval", GNUPG_DIRMNGR_PGM="" )
186 AC_SUBST(GNUPG_DIRMNGR_PGM)
187 AM_CONDITIONAL(GNUPG_DIRMNGR_PGM, test -n "$GNUPG_DIRMNGR_PGM")
188 show_gnupg_dirmngr_pgm="(default)"
189 test -n "$GNUPG_DIRMNGR_PGM" && show_gnupg_dirmngr_pgm="$GNUPG_DIRMNGR_PGM"
190
191 AC_ARG_WITH(protect-tool-pgm,
192     [  --with-protect-tool-pgm=PATH  Use PATH as the default for the protect-tool)],
193           GNUPG_PROTECT_TOOL_PGM="$withval", GNUPG_PROTECT_TOOL_PGM="" )
194 AC_SUBST(GNUPG_PROTECT_TOOL_PGM)
195 AM_CONDITIONAL(GNUPG_PROTECT_TOOL_PGM, test -n "$GNUPG_PROTECT_TOOL_PGM")
196 show_gnupg_protect_tool_pgm="(default)"
197 test -n "$GNUPG_PROTECT_TOOL_PGM" \
198       && show_gnupg_protect_tool_pgm="$GNUPG_PROTECT_TOOL_PGM"
199
200 AC_ARG_WITH(dirmngr-ldap-pgm,
201     [  --with-dirmngr-ldap-pgm=PATH  Use PATH as the default for the dirmngr ldap wrapper)],
202           GNUPG_DIRMNGR_LDAP_PGM="$withval", GNUPG_DIRMNGR_LDAP_PGM="" )
203 AC_SUBST(GNUPG_DIRMNGR_LDAP_PGM)
204 AM_CONDITIONAL(GNUPG_DIRMNGR_LDAP_PGM, test -n "$GNUPG_DIRMNGR_LDAP_PGM")
205 show_gnupg_dirmngr_ldap_pgm="(default)"
206 test -n "$GNUPG_DIRMNGR_LDAP_PGM" \
207       && show_gnupg_dirmngr_ldap_pgm="$GNUPG_DIRMNGR_LDAP_PGM"
208
209
210 #
211 # For a long time gpg 2.x was installed as gpg2.  This changed with
212 # 2.2.  This option can be used to install gpg under the name gpg2.
213 #
214 AC_ARG_ENABLE(gpg-is-gpg2,
215     AC_HELP_STRING([--enable-gpg-is-gpg2],[Set installed name of gpg to gpg2]),
216     gpg_is_gpg2=$enableval)
217 if test "$gpg_is_gpg2" = "yes"; then
218    AC_DEFINE(USE_GPG2_HACK, 1, [Define to install gpg as gpg2])
219 fi
220 AM_CONDITIONAL(USE_GPG2_HACK, test "$gpg_is_gpg2" = "yes")
221
222
223 # SELinux support includes tracking of sensitive files to avoid
224 # leaking their contents through processing these files by gpg itself
225 AC_MSG_CHECKING([whether SELinux support is requested])
226 AC_ARG_ENABLE(selinux-support,
227               AC_HELP_STRING([--enable-selinux-support],
228                              [enable SELinux support]),
229               selinux_support=$enableval, selinux_support=no)
230 AC_MSG_RESULT($selinux_support)
231
232
233 AC_MSG_CHECKING([whether to allocate extra secure memory])
234 AC_ARG_ENABLE(large-secmem,
235               AC_HELP_STRING([--enable-large-secmem],
236                              [allocate extra secure memory]),
237               large_secmem=$enableval, large_secmem=no)
238 AC_MSG_RESULT($large_secmem)
239 if test "$large_secmem" = yes ; then
240    SECMEM_BUFFER_SIZE=65536
241 else
242    SECMEM_BUFFER_SIZE=32768
243 fi
244 AC_DEFINE_UNQUOTED(SECMEM_BUFFER_SIZE,$SECMEM_BUFFER_SIZE,
245                    [Size of secure memory buffer])
246
247 AC_MSG_CHECKING([whether to enable trust models])
248 AC_ARG_ENABLE(trust-models,
249               AC_HELP_STRING([--disable-trust-models],
250                              [disable all trust models except "always"]),
251               use_trust_models=$enableval)
252 AC_MSG_RESULT($use_trust_models)
253 if test "$use_trust_models" = no ; then
254     AC_DEFINE(NO_TRUST_MODELS, 1,
255              [Define to include only trust-model always])
256 fi
257
258 AC_MSG_CHECKING([whether to enable TOFU])
259 AC_ARG_ENABLE(tofu,
260                 AC_HELP_STRING([--disable-tofu],
261                                [disable the TOFU trust model]),
262               use_tofu=$enableval, use_tofu=$use_trust_models)
263 AC_MSG_RESULT($use_tofu)
264 if test "$use_trust_models" = no && test "$use_tofu" = yes; then
265     AC_MSG_ERROR([both --disable-trust-models and --enable-tofu given])
266 fi
267
268 AC_MSG_CHECKING([whether to enable libdns])
269 AC_ARG_ENABLE(libdns,
270                 AC_HELP_STRING([--disable-libdns],
271                                [do not build with libdns support]),
272               use_libdns=$enableval, use_libdns=yes)
273 AC_MSG_RESULT($use_libdns)
274 if test x"$use_libdns" = xyes ; then
275     AC_DEFINE(USE_LIBDNS, 1, [Build with integrated libdns support])
276 fi
277 AM_CONDITIONAL(USE_LIBDNS, test "$use_libdns" = yes)
278
279
280 #
281 # Options to disable algorithm
282 #
283
284 GNUPG_GPG_DISABLE_ALGO([rsa],[RSA public key])
285 # Elgamal is a MUST algorithm
286 # DSA is a MUST algorithm
287 GNUPG_GPG_DISABLE_ALGO([ecdh],[ECDH public key])
288 GNUPG_GPG_DISABLE_ALGO([ecdsa],[ECDSA public key])
289 GNUPG_GPG_DISABLE_ALGO([eddsa],[EdDSA public key])
290
291 GNUPG_GPG_DISABLE_ALGO([idea],[IDEA cipher])
292 # 3DES is a MUST algorithm
293 GNUPG_GPG_DISABLE_ALGO([cast5],[CAST5 cipher])
294 GNUPG_GPG_DISABLE_ALGO([blowfish],[BLOWFISH cipher])
295 GNUPG_GPG_DISABLE_ALGO([aes128],[AES128 cipher])
296 GNUPG_GPG_DISABLE_ALGO([aes192],[AES192 cipher])
297 GNUPG_GPG_DISABLE_ALGO([aes256],[AES256 cipher])
298 GNUPG_GPG_DISABLE_ALGO([twofish],[TWOFISH cipher])
299 GNUPG_GPG_DISABLE_ALGO([camellia128],[CAMELLIA128 cipher])
300 GNUPG_GPG_DISABLE_ALGO([camellia192],[CAMELLIA192 cipher])
301 GNUPG_GPG_DISABLE_ALGO([camellia256],[CAMELLIA256 cipher])
302
303 GNUPG_GPG_DISABLE_ALGO([md5],[MD5 hash])
304 # SHA1 is a MUST algorithm
305 GNUPG_GPG_DISABLE_ALGO([rmd160],[RIPE-MD160 hash])
306 GNUPG_GPG_DISABLE_ALGO([sha224],[SHA-224 hash])
307 # SHA256 is a MUST algorithm for GnuPG.
308 GNUPG_GPG_DISABLE_ALGO([sha384],[SHA-384 hash])
309 GNUPG_GPG_DISABLE_ALGO([sha512],[SHA-512 hash])
310
311
312 # Allow disabling of zip support.
313 # This is in general not a good idea because according to rfc4880 OpenPGP
314 # implementations SHOULD support ZLIB.
315 AC_MSG_CHECKING([whether to enable the ZIP and ZLIB compression algorithm])
316 AC_ARG_ENABLE(zip,
317    AC_HELP_STRING([--disable-zip],
318                   [disable the ZIP and ZLIB compression algorithm]),
319    use_zip=$enableval)
320 AC_MSG_RESULT($use_zip)
321
322 # Allow disabling of bzib2 support.
323 # It is defined only after we confirm the library is available later
324 AC_MSG_CHECKING([whether to enable the BZIP2 compression algorithm])
325 AC_ARG_ENABLE(bzip2,
326    AC_HELP_STRING([--disable-bzip2],[disable the BZIP2 compression algorithm]),
327    use_bzip2=$enableval)
328 AC_MSG_RESULT($use_bzip2)
329
330 # Configure option to allow or disallow execution of external
331 # programs, like a photo viewer.
332 AC_MSG_CHECKING([whether to enable external program execution])
333 AC_ARG_ENABLE(exec,
334     AC_HELP_STRING([--disable-exec],[disable all external program execution]),
335     use_exec=$enableval)
336 AC_MSG_RESULT($use_exec)
337 if test "$use_exec" = no ; then
338     AC_DEFINE(NO_EXEC,1,[Define to disable all external program execution])
339 fi
340
341 if test "$use_exec" = yes ; then
342   AC_MSG_CHECKING([whether to enable photo ID viewing])
343   AC_ARG_ENABLE(photo-viewers,
344       [  --disable-photo-viewers disable photo ID viewers],
345       [if test "$enableval" = no ; then
346          AC_DEFINE(DISABLE_PHOTO_VIEWER,1,[define to disable photo viewing])
347       fi],enableval=yes)
348   gnupg_cv_enable_photo_viewers=$enableval
349   AC_MSG_RESULT($enableval)
350
351   if test "$gnupg_cv_enable_photo_viewers" = yes ; then
352     AC_MSG_CHECKING([whether to use a fixed photo ID viewer])
353     AC_ARG_WITH(photo-viewer,
354         [  --with-photo-viewer=FIXED_VIEWER  set a fixed photo ID viewer],
355         [if test "$withval" = yes ; then
356            withval=no
357         elif test "$withval" != no ; then
358            AC_DEFINE_UNQUOTED(FIXED_PHOTO_VIEWER,"$withval",
359                             [if set, restrict photo-viewer to this])
360         fi],withval=no)
361     AC_MSG_RESULT($withval)
362   fi
363 fi
364
365
366 #
367 # Check for the key/uid cache size.  This can't be zero, but can be
368 # pretty small on embedded systems.  This is used for the gpg part.
369 #
370 AC_MSG_CHECKING([for the size of the key and uid cache])
371 AC_ARG_ENABLE(key-cache,
372         AC_HELP_STRING([--enable-key-cache=SIZE],
373                        [Set key cache to SIZE (default 4096)]),,enableval=4096)
374 if test "$enableval" = "no"; then
375    enableval=5
376 elif test "$enableval" = "yes" || test "$enableval" = ""; then
377    enableval=4096
378 fi
379 changequote(,)dnl
380 key_cache_size=`echo "$enableval" | sed 's/[A-Za-z]//g'`
381 changequote([,])dnl
382 if test "$enableval" != "$key_cache_size" || test "$key_cache_size" -lt 5; then
383    AC_MSG_ERROR([invalid key-cache size])
384 fi
385 AC_MSG_RESULT($key_cache_size)
386 AC_DEFINE_UNQUOTED(PK_UID_CACHE_SIZE,$key_cache_size,
387                   [Size of the key and UID caches])
388
389
390
391 #
392 # Check whether we want to use Linux capabilities
393 #
394 AC_MSG_CHECKING([whether use of capabilities is requested])
395 AC_ARG_WITH(capabilities,
396     [  --with-capabilities     use linux capabilities [default=no]],
397 [use_capabilities="$withval"],[use_capabilities=no])
398 AC_MSG_RESULT($use_capabilities)
399
400 #
401 # Check whether to disable the card support
402 AC_MSG_CHECKING([whether smartcard support is requested])
403 AC_ARG_ENABLE(card-support,
404               AC_HELP_STRING([--disable-card-support],
405                              [disable smartcard support]),
406               card_support=$enableval)
407 AC_MSG_RESULT($card_support)
408 if test "$card_support" = yes ; then
409   AC_DEFINE(ENABLE_CARD_SUPPORT,1,[Define to include smartcard support])
410 else
411   build_scdaemon=no
412 fi
413
414 #
415 # Allow disabling of internal CCID support.
416 # It is defined only after we confirm the library is available later
417 #
418 AC_MSG_CHECKING([whether to enable the internal CCID driver])
419 AC_ARG_ENABLE(ccid-driver,
420               AC_HELP_STRING([--disable-ccid-driver],
421                              [disable the internal CCID driver]),
422               use_ccid_driver=$enableval)
423 AC_MSG_RESULT($use_ccid_driver)
424
425 AC_MSG_CHECKING([whether to auto start dirmngr])
426 AC_ARG_ENABLE(dirmngr-auto-start,
427               AC_HELP_STRING([--disable-dirmngr-auto-start],
428                              [disable auto starting of the dirmngr]),
429               dirmngr_auto_start=$enableval)
430 AC_MSG_RESULT($dirmngr_auto_start)
431 if test "$dirmngr_auto_start" = yes ; then
432     AC_DEFINE(USE_DIRMNGR_AUTO_START,1,
433               [Define to enable auto starting of the dirmngr])
434 fi
435
436
437 #
438 # To avoid double inclusion of config.h which might happen at some
439 # places, we add the usual double inclusion protection at the top of
440 # config.h.
441 #
442 AH_TOP([
443 #ifndef GNUPG_CONFIG_H_INCLUDED
444 #define GNUPG_CONFIG_H_INCLUDED
445 ])
446
447 #
448 # Stuff which goes at the bottom of config.h.
449 #
450 AH_BOTTOM([
451 /* This is the major version number of GnuPG so that
452    source included files can test for this.  Note, that
453    we use 2 here even for GnuPG 1.9.x. */
454 #define GNUPG_MAJOR_VERSION 2
455
456 /* Now to separate file name parts.
457    Please note that the string version must not contain more
458    than one character because the code assumes strlen()==1 */
459 #ifdef HAVE_DOSISH_SYSTEM
460 #define DIRSEP_C '\\'
461 #define DIRSEP_S "\\"
462 #define EXTSEP_C '.'
463 #define EXTSEP_S "."
464 #define PATHSEP_C ';'
465 #define PATHSEP_S ";"
466 #define EXEEXT_S ".exe"
467 #else
468 #define DIRSEP_C '/'
469 #define DIRSEP_S "/"
470 #define EXTSEP_C '.'
471 #define EXTSEP_S "."
472 #define PATHSEP_C ':'
473 #define PATHSEP_S ":"
474 #define EXEEXT_S ""
475 #endif
476
477 /* This is the same as VERSION, but should be overridden if the
478    platform cannot handle things like dots '.' in filenames. Set
479    SAFE_VERSION_DOT and SAFE_VERSION_DASH to whatever SAFE_VERSION
480    uses for dots and dashes. */
481 #define SAFE_VERSION VERSION
482 #define SAFE_VERSION_DOT  '.'
483 #define SAFE_VERSION_DASH '-'
484
485 /* Some global constants.
486  * Note that the homedir must not end in a slash.  */
487 #ifdef HAVE_DOSISH_SYSTEM
488 # ifdef HAVE_DRIVE_LETTERS
489 #  define GNUPG_DEFAULT_HOMEDIR "c:/gnupg"
490 # else
491 #  define GNUPG_DEFAULT_HOMEDIR "/gnupg"
492 # endif
493 #elif defined(__VMS)
494 #define GNUPG_DEFAULT_HOMEDIR "/SYS$LOGIN/gnupg"
495 #else
496 #define GNUPG_DEFAULT_HOMEDIR "~/.gnupg"
497 #endif
498 #define GNUPG_PRIVATE_KEYS_DIR  "private-keys-v1.d"
499 #define GNUPG_OPENPGP_REVOC_DIR "openpgp-revocs.d"
500
501 /* For some systems (DOS currently), we hardcode the path here.  For
502    POSIX systems the values are constructed by the Makefiles, so that
503    the values may be overridden by the make invocations; this is to
504    comply with the GNU coding standards.  Note that these values are
505    only defaults.  */
506 #ifdef HAVE_DOSISH_SYSTEM
507 # ifdef HAVE_DRIVE_LETTERS
508 #  define GNUPG_BINDIR      "c:\\gnupg"
509 #  define GNUPG_LIBEXECDIR  "c:\\gnupg"
510 #  define GNUPG_LIBDIR      "c:\\gnupg"
511 #  define GNUPG_DATADIR     "c:\\gnupg"
512 #  define GNUPG_SYSCONFDIR  "c:\\gnupg"
513 # else
514 #  define GNUPG_BINDIR      "\\gnupg"
515 #  define GNUPG_LIBEXECDIR  "\\gnupg"
516 #  define GNUPG_LIBDIR      "\\gnupg"
517 #  define GNUPG_DATADIR     "\\gnupg"
518 #  define GNUPG_SYSCONFDIR  "\\gnupg"
519 # endif
520 #endif
521
522 /* Derive some other constants. */
523 #if !(defined(HAVE_FORK) && defined(HAVE_PIPE) && defined(HAVE_WAITPID))
524 #define EXEC_TEMPFILE_ONLY
525 #endif
526
527
528 /* We didn't define endianness above, so get it from OS macros.  This
529    is intended for making fat binary builds on OS X. */
530 #if !defined(BIG_ENDIAN_HOST) && !defined(LITTLE_ENDIAN_HOST)
531 #if defined(__BIG_ENDIAN__)
532 #define BIG_ENDIAN_HOST 1
533 #elif defined(__LITTLE_ENDIAN__)
534 #define LITTLE_ENDIAN_HOST 1
535 #else
536 #error "No endianness found"
537 #endif
538 #endif
539
540
541 /* Hack used for W32: ldap.m4 also tests for the ASCII version of
542    ldap_start_tls_s because that is the actual symbol used in the
543    library.  winldap.h redefines it to our commonly used value,
544    thus we define our usual macro here.  */
545 #ifdef HAVE_LDAP_START_TLS_SA
546 # ifndef HAVE_LDAP_START_TLS_S
547 #  define HAVE_LDAP_START_TLS_S 1
548 # endif
549 #endif
550
551 /* Provide the es_ macro for estream.  */
552 #define GPGRT_ENABLE_ES_MACROS 1
553
554 /* Tell libgcrypt not to use its own libgpg-error implementation. */
555 #define USE_LIBGPG_ERROR 1
556
557 /* Tell Libgcrypt not to include deprecated definitions.  */
558 #define GCRYPT_NO_DEPRECATED 1
559
560 /* Our HTTP code is used in estream mode.  */
561 #define HTTP_USE_ESTREAM 1
562
563 /* Under W32 we do an explicit socket initialization, thus we need to
564    avoid the on-demand initialization which would also install an atexit
565    handler.  */
566 #define HTTP_NO_WSASTARTUP
567
568 /* Under Windows we use the gettext code from libgpg-error.  */
569 #define GPG_ERR_ENABLE_GETTEXT_MACROS
570
571 /* Under WindowsCE we use the strerror replacement from libgpg-error.  */
572 #define GPG_ERR_ENABLE_ERRNO_MACROS
573
574 #endif /*GNUPG_CONFIG_H_INCLUDED*/
575 ])
576
577
578 AM_MAINTAINER_MODE
579 AC_ARG_VAR(SYSROOT,[locate config scripts also below that directory])
580
581 # Checks for programs.
582 AC_MSG_NOTICE([checking for programs])
583 AC_PROG_MAKE_SET
584 AM_SANITY_CHECK
585 missing_dir=`cd $ac_aux_dir && pwd`
586 AM_MISSING_PROG(ACLOCAL, aclocal, $missing_dir)
587 AM_MISSING_PROG(AUTOCONF, autoconf, $missing_dir)
588 AM_MISSING_PROG(AUTOMAKE, automake, $missing_dir)
589 AM_MISSING_PROG(AUTOHEADER, autoheader, $missing_dir)
590 AM_MISSING_PROG(MAKEINFO, makeinfo, $missing_dir)
591 AM_SILENT_RULES
592 AC_PROG_AWK
593 AC_PROG_CC
594 AC_PROG_CPP
595 AM_PROG_CC_C_O
596 if test "x$ac_cv_prog_cc_c89" = "xno" ; then
597   AC_MSG_ERROR([[No C-89 compiler found]])
598 fi
599 AC_PROG_INSTALL
600 AC_PROG_LN_S
601 AC_PROG_RANLIB
602 AC_CHECK_TOOL(AR, ar, :)
603 AC_PATH_PROG(PERL,"perl")
604 AC_CHECK_TOOL(WINDRES, windres, :)
605 AC_PATH_PROG(YAT2M, "yat2m")
606 AC_ARG_VAR(YAT2M, [tool to convert texi to man pages])
607 AM_CONDITIONAL(HAVE_YAT2M, test -n "$ac_cv_path_YAT2M")
608 AC_ISC_POSIX
609 AC_SYS_LARGEFILE
610 GNUPG_CHECK_USTAR
611
612
613 # We need to compile and run a program on the build machine.  A
614 # comment in libgpg-error says that the AC_PROG_CC_FOR_BUILD macro in
615 # the AC archive is broken for autoconf 2.57.  Given that there is no
616 # newer version of that macro, we assume that it is also broken for
617 # autoconf 2.61 and thus we use a simple but usually sufficient
618 # approach.
619 AC_MSG_CHECKING(for cc for build)
620 if test "$cross_compiling" = "yes"; then
621   CC_FOR_BUILD="${CC_FOR_BUILD-cc}"
622 else
623   CC_FOR_BUILD="${CC_FOR_BUILD-$CC}"
624 fi
625 AC_MSG_RESULT($CC_FOR_BUILD)
626 AC_ARG_VAR(CC_FOR_BUILD,[build system C compiler])
627
628 # We need to call this macro because other pkg-config macros are
629 # not always used.
630 PKG_PROG_PKG_CONFIG
631
632
633 try_gettext=yes
634 require_iconv=yes
635 have_dosish_system=no
636 have_w32_system=no
637 have_w32ce_system=no
638 have_android_system=no
639 use_simple_gettext=no
640 use_ldapwrapper=yes
641 mmap_needed=yes
642 require_pipe_to_unblock_pselect=yes
643 case "${host}" in
644     *-mingw32*)
645         # special stuff for Windoze NT
646         ac_cv_have_dev_random=no
647         AC_DEFINE(USE_ONLY_8DOT3,1,
648                   [Set this to limit filenames to the 8.3 format])
649         AC_DEFINE(USE_SIMPLE_GETTEXT,1,
650                   [Because the Unix gettext has too much overhead on
651                    MingW32 systems and these systems lack Posix functions,
652                    we use a simplified version of gettext])
653         have_dosish_system=yes
654         have_w32_system=yes
655         require_iconv=no
656         require_pipe_to_unblock_pselect=no
657         case "${host}" in
658           *-mingw32ce*)
659             have_w32ce_system=yes
660             ;;
661           *)
662             AC_DEFINE(HAVE_DRIVE_LETTERS,1,
663                       [Defined if the OS supports drive letters.])
664             ;;
665         esac
666         try_gettext="no"
667         use_simple_gettext=yes
668         mmap_needed=no
669         ;;
670     i?86-emx-os2 | i?86-*-os2*emx )
671         # OS/2 with the EMX environment
672         ac_cv_have_dev_random=no
673         AC_DEFINE(HAVE_DRIVE_LETTERS)
674         have_dosish_system=yes
675         try_gettext="no"
676         ;;
677
678     i?86-*-msdosdjgpp*)
679         # DOS with the DJGPP environment
680         ac_cv_have_dev_random=no
681         AC_DEFINE(HAVE_DRIVE_LETTERS)
682         have_dosish_system=yes
683         try_gettext="no"
684         ;;
685
686     *-*-hpux*)
687         if test -z "$GCC" ; then
688             CFLAGS="-Ae -D_HPUX_SOURCE $CFLAGS"
689         fi
690         ;;
691     *-dec-osf4*)
692         if test -z "$GCC" ; then
693             # Suppress all warnings
694             # to get rid of the unsigned/signed char mismatch warnings.
695             CFLAGS="-w $CFLAGS"
696         fi
697         ;;
698     *-dec-osf5*)
699         if test -z "$GCC" ; then
700             # Use the newer compiler `-msg_disable ptrmismatch1' to
701             # get rid of the unsigned/signed char mismatch warnings.
702             # Using this may hide other pointer mismatch warnings, but
703             # it at least lets other warning classes through
704             CFLAGS="-msg_disable ptrmismatch1 $CFLAGS"
705         fi
706         ;;
707     m68k-atari-mint)
708         ;;
709     *-linux-android*)
710         have_android_system=yes
711         # Android is fully utf-8 and we do not want to use iconv to
712         # keeps things simple
713         require_iconv=no
714         ;;
715     *-apple-darwin*)
716         AC_DEFINE(_DARWIN_C_SOURCE, 900000L,
717                   Expose all libc features (__DARWIN_C_FULL).)
718         ;;
719     *-*-netbsd*)
720         require_pipe_to_unblock_pselect=yes
721         ;;
722     *)
723         ;;
724 esac
725
726 if test "$require_pipe_to_unblock_pselect" = yes; then
727    AC_DEFINE(HAVE_PSELECT_NO_EINTR, 1,
728              [Defined if we run on systems like NetBSD, where
729               pselect cannot be unblocked by signal from a thread
730               within the same process.  We use pipe in this case, instead.])
731 fi
732
733 if test "$have_dosish_system" = yes; then
734    AC_DEFINE(HAVE_DOSISH_SYSTEM,1,
735              [Defined if we run on some of the PCDOS like systems
736               (DOS, Windoze. OS/2) with special properties like
737               no file modes, case insensitive file names and preferred
738               use of backslashes as directory name separators.])
739 fi
740 AM_CONDITIONAL(HAVE_DOSISH_SYSTEM, test "$have_dosish_system" = yes)
741
742 AM_CONDITIONAL(USE_SIMPLE_GETTEXT, test x"$use_simple_gettext" = xyes)
743
744 if test "$have_w32_system" = yes; then
745    AC_DEFINE(HAVE_W32_SYSTEM,1, [Defined if we run on a W32 API based system])
746    if test "$have_w32ce_system" = yes; then
747       AC_DEFINE(HAVE_W32CE_SYSTEM,1,[Defined if we run on WindowsCE])
748    fi
749 fi
750 AM_CONDITIONAL(HAVE_W32_SYSTEM, test "$have_w32_system" = yes)
751 AM_CONDITIONAL(HAVE_W32CE_SYSTEM, test "$have_w32ce_system" = yes)
752
753 if test "$have_android_system" = yes; then
754    AC_DEFINE(HAVE_ANDROID_SYSTEM,1, [Defined if we build for an Android system])
755 fi
756 AM_CONDITIONAL(HAVE_ANDROID_SYSTEM, test "$have_android_system" = yes)
757
758
759 # (These need to go after AC_PROG_CC so that $EXEEXT is defined)
760 AC_DEFINE_UNQUOTED(EXEEXT,"$EXEEXT",[The executable file extension, if any])
761
762
763 #
764 # Checks for libraries.
765 #
766 AC_MSG_NOTICE([checking for libraries])
767
768
769 #
770 # libgpg-error is a library with error codes shared between GnuPG
771 # related projects.
772 #
773 AM_PATH_GPG_ERROR("$NEED_GPG_ERROR_VERSION",
774                   have_gpg_error=yes,have_gpg_error=no)
775
776
777 #
778 # Libgcrypt is our generic crypto library
779 #
780 AM_PATH_LIBGCRYPT("$NEED_LIBGCRYPT_API:$NEED_LIBGCRYPT_VERSION",
781         have_libgcrypt=yes,have_libgcrypt=no)
782
783
784 #
785 # libassuan is used for IPC
786 #
787 AM_PATH_LIBASSUAN("$NEED_LIBASSUAN_API:$NEED_LIBASSUAN_VERSION",
788                   have_libassuan=yes,have_libassuan=no)
789 if test "$have_libassuan" = "yes"; then
790   AC_DEFINE_UNQUOTED(GNUPG_LIBASSUAN_VERSION, "$libassuan_version",
791                      [version of the libassuan library])
792   show_tor_support="only .onion"
793 fi
794
795
796 #
797 # libksba is our X.509 support library
798 #
799 AM_PATH_KSBA("$NEED_KSBA_API:$NEED_KSBA_VERSION",have_ksba=yes,have_ksba=no)
800
801
802 #
803 # libusb allows us to use the integrated CCID smartcard reader driver.
804 #
805 # FiXME: Use GNUPG_CHECK_LIBUSB and modify to use separate AC_SUBSTs.
806 if test "$use_ccid_driver" = auto || test "$use_ccid_driver" = yes; then
807    case "${host}" in
808      *-mingw32*)
809        LIBUSB_NAME=
810        LIBUSB_LIBS=
811        LIBUSB_CPPFLAGS=
812        ;;
813      *-*-darwin*)
814        LIBUSB_NAME=usb-1.0
815        LIBUSB_LIBS="-Wl,-framework,CoreFoundation -Wl,-framework,IOKit"
816        ;;
817      *-*-freebsd*)
818        # FreeBSD has a native 1.0 compatible library by -lusb.
819        LIBUSB_NAME=usb
820        LIBUSB_LIBS=
821        ;;
822      *)
823        LIBUSB_NAME=usb-1.0
824        LIBUSB_LIBS=
825        ;;
826    esac
827 fi
828 if test x"$LIBUSB_NAME" != x ; then
829    AC_CHECK_LIB($LIBUSB_NAME, libusb_init,
830                 [ LIBUSB_LIBS="-l$LIBUSB_NAME $LIBUSB_LIBS"
831                   have_libusb=yes ])
832    AC_MSG_CHECKING([libusb include dir])
833    usb_incdir_found="no"
834    for _incdir in "" "/usr/include/libusb-1.0" \
835        "/usr/local/include/libusb-1.0" "/usr/pkg/include/libusb-1.0"; do
836      _libusb_save_cppflags=$CPPFLAGS
837      if test -n "${_incdir}"; then
838        CPPFLAGS="-I${_incdir} ${CPPFLAGS}"
839      fi
840      AC_PREPROC_IFELSE([AC_LANG_SOURCE([[@%:@include <libusb.h>]])],
841      [usb_incdir=${_incdir}; usb_incdir_found="yes"], [])
842      CPPFLAGS=${_libusb_save_cppflags}
843      if test "$usb_incdir_found" = "yes"; then
844        break
845      fi
846    done
847    if test "$usb_incdir_found" = "yes"; then
848      AC_MSG_RESULT([${usb_incdir}])
849    else
850      AC_MSG_RESULT([not found])
851      usb_incdir=""
852      have_libusb=no
853      if test "$use_ccid_driver" != yes; then
854        use_ccid_driver=no
855      fi
856      LIBUSB_LIBS=""
857    fi
858
859    if test "$have_libusb" = yes; then
860      AC_DEFINE(HAVE_LIBUSB,1, [defined if libusb is available])
861    fi
862    if test x"$usb_incdir" = x; then
863      LIBUSB_CPPFLAGS=""
864    else
865      LIBUSB_CPPFLAGS="-I${usb_incdir}"
866    fi
867 fi
868 AC_SUBST(LIBUSB_LIBS)
869 AC_SUBST(LIBUSB_CPPFLAGS)
870
871 #
872 # Check whether it is necessary to link against libdl.
873 # (For example to load libpcsclite)
874 #
875 gnupg_dlopen_save_libs="$LIBS"
876 LIBS=""
877 AC_SEARCH_LIBS(dlopen, c dl,,,)
878 DL_LIBS=$LIBS
879 AC_SUBST(DL_LIBS)
880 LIBS="$gnupg_dlopen_save_libs"
881
882
883 # Checks for g10
884
885 AC_ARG_ENABLE(sqlite,
886                 AC_HELP_STRING([--disable-sqlite],
887                                [disable the use of SQLITE]),
888               try_sqlite=$enableval, try_sqlite=yes)
889
890 if test x"$use_tofu" = xyes ; then
891   if test x"$try_sqlite" = xyes ; then
892     PKG_CHECK_MODULES([SQLITE3], [sqlite3 >= $NEED_SQLITE_VERSION],
893                                  [have_sqlite=yes],
894                                  [have_sqlite=no])
895   fi
896   if test "$have_sqlite" = "yes"; then
897     :
898     AC_SUBST([SQLITE3_CFLAGS])
899     AC_SUBST([SQLITE3_LIBS])
900   else
901     use_tofu=no
902     tmp=$(echo "$SQLITE3_PKG_ERRORS" | tr '\n' '\v' | sed 's/\v/\n*** /g')
903     AC_MSG_WARN([[
904 ***
905 *** Building without SQLite support - TOFU disabled
906 ***
907 *** $tmp]])
908   fi
909 fi
910
911 AM_CONDITIONAL(SQLITE3, test "$have_sqlite" = "yes")
912
913 if test x"$use_tofu" = xyes ; then
914     AC_DEFINE(USE_TOFU, 1, [Enable to build the TOFU code])
915 fi
916
917
918 # Checks for g13
919
920 AC_PATH_PROG(ENCFS, encfs, /usr/bin/encfs)
921 AC_DEFINE_UNQUOTED(ENCFS,
922         "${ENCFS}", [defines the filename of the encfs program])
923
924 AC_PATH_PROG(FUSERMOUNT, fusermount, /usr/bin/fusermount)
925 AC_DEFINE_UNQUOTED(FUSERMOUNT,
926         "${FUSERMOUNT}", [defines the filename of the fusermount program])
927
928
929 # Checks for dirmngr
930
931
932 #
933 # Checks for symcryptrun:
934 #
935
936 # libutil has openpty() and login_tty().
937 AC_CHECK_LIB(util, openpty,
938               [ LIBUTIL_LIBS="$LIBUTIL_LIBS -lutil"
939                 AC_DEFINE(HAVE_LIBUTIL,1,
940                          [defined if libutil is available])
941              ])
942 AC_SUBST(LIBUTIL_LIBS)
943
944 # shred is used to clean temporary plain text files.
945 AC_PATH_PROG(SHRED, shred, /usr/bin/shred)
946 AC_DEFINE_UNQUOTED(SHRED,
947         "${SHRED}", [defines the filename of the shred program])
948
949
950 #
951 # Check whether the nPth library is available
952 #
953 AM_PATH_NPTH("$NEED_NPTH_API:$NEED_NPTH_VERSION",have_npth=yes,have_npth=no)
954 if test "$have_npth" = "yes"; then
955   AC_DEFINE(HAVE_NPTH, 1,
956               [Defined if the New Portable Thread Library is available])
957   AC_DEFINE(USE_NPTH, 1,
958               [Defined if support for nPth is requested and nPth is available])
959 else
960   AC_MSG_WARN([[
961 ***
962 *** To support concurrent access for example in gpg-agent and the SCdaemon
963 *** we need the support of the New Portable Threads Library.
964 ***]])
965 fi
966 #
967 # Enable debugging of nPth
968 #
969 AC_ARG_ENABLE(npth-debug,
970    AC_HELP_STRING([--enable-npth-debug],
971                   [build with debug version of npth]),
972                   [if test $enableval = yes ; then
973                      AC_DEFINE(NPTH_ENABLE_DEBUG,1,
974                               [Build with debug version of nPth])
975                   fi])
976
977
978
979 #
980 # NTBTLS is our TLS library.  If it is not available fallback to
981 # GNUTLS.
982 #
983 AC_ARG_ENABLE(ntbtls,
984               AC_HELP_STRING([--disable-ntbtls],
985                              [disable the use of NTBTLS as TLS library]),
986               try_ntbtls=$enableval, try_ntbtls=yes)
987 if test x"$try_ntbtls" = xyes ; then
988   AM_PATH_NTBTLS("$NEED_NTBTLS_API:$NEED_NTBTLS_VERSION",
989                  [have_ntbtls=yes],[have_ntbtls=no])
990 fi
991 if test "$have_ntbtls" = yes ; then
992    use_tls_library=ntbtls
993    AC_DEFINE(HTTP_USE_NTBTLS, 1, [Enable NTBTLS support in http.c])
994 else
995   AC_ARG_ENABLE(gnutls,
996                 AC_HELP_STRING([--disable-gnutls],
997                                [disable GNUTLS as fallback TLS library]),
998                 try_gnutls=$enableval, try_gnutls=yes)
999   if test x"$try_gnutls" = xyes ; then
1000     PKG_CHECK_MODULES([LIBGNUTLS], [gnutls >= $NEED_GNUTLS_VERSION],
1001                                    [have_gnutls=yes],
1002                                    [have_gnutls=no])
1003   fi
1004   if test "$have_gnutls" = "yes"; then
1005     AC_SUBST([LIBGNUTLS_CFLAGS])
1006     AC_SUBST([LIBGNUTLS_LIBS])
1007     use_tls_library=gnutls
1008     AC_DEFINE(HTTP_USE_GNUTLS, 1, [Enable GNUTLS support in http.c])
1009   else
1010     tmp=$(echo "$LIBGNUTLS_PKG_ERRORS" | tr '\n' '\v' | sed 's/\v/\n*** /g')
1011     AC_MSG_WARN([[
1012 ***
1013 *** Building without NTBTLS and GNUTLS - no TLS access to keyservers.
1014 ***
1015 *** $tmp]])
1016   fi
1017 fi
1018
1019 #
1020 # Allow to set a fixed trust store file for system provided certificates.
1021 #
1022 AC_ARG_WITH([default-trust-store-file],
1023             [AC_HELP_STRING([--with-default-trust-store-file=FILE],
1024                             [Use FILE as system trust store])],
1025             default_trust_store_file="$withval",
1026             default_trust_store_file="")
1027 if test x"$default_trust_store_file" = xno;then
1028   default_trust_store_file=""
1029 fi
1030 if test x"$default_trust_store_file" != x ; then
1031   AC_DEFINE_UNQUOTED([DEFAULT_TRUST_STORE_FILE],
1032     ["$default_trust_store_file"], [Use as default system trust store file])
1033 fi
1034
1035
1036 AC_MSG_NOTICE([checking for networking options])
1037
1038 #
1039 # Must check for network library requirements before doing link tests
1040 # for ldap, for example. If ldap libs are static (or dynamic and without
1041 # ELF runtime link paths), then link will fail and LDAP support won't
1042 # be detected.
1043 #
1044 AC_CHECK_FUNC(gethostbyname, , AC_CHECK_LIB(nsl, gethostbyname,
1045         [NETLIBS="-lnsl $NETLIBS"]))
1046 AC_CHECK_FUNC(setsockopt, , AC_CHECK_LIB(socket, setsockopt,
1047         [NETLIBS="-lsocket $NETLIBS"]))
1048
1049
1050 #
1051 # Check standard resolver functions.
1052 #
1053 if test "$build_dirmngr" = "yes"; then
1054   _dns_save_libs=$LIBS
1055   LIBS=""
1056
1057   # Find the system resolver which can always be enabled with
1058   # the dirmngr option --standard-resolver.
1059
1060   # the double underscore thing is a glibc-ism?
1061   AC_SEARCH_LIBS(res_query,resolv bind,,
1062                  AC_SEARCH_LIBS(__res_query,resolv bind,,have_resolver=no))
1063   AC_SEARCH_LIBS(dn_expand,resolv bind,,
1064                  AC_SEARCH_LIBS(__dn_expand,resolv bind,,have_resolver=no))
1065
1066   # macOS renames dn_skipname into res_9_dn_skipname in <resolv.h>,
1067   # and for some reason fools us into believing we don't need
1068   # -lresolv even if we do.  Since the test program checking for the
1069   # symbol does not include <resolv.h>, we need to check for the
1070   # renamed symbol explicitly.
1071   AC_SEARCH_LIBS(res_9_dn_skipname,resolv bind,,
1072       AC_SEARCH_LIBS(dn_skipname,resolv bind,,
1073           AC_SEARCH_LIBS(__dn_skipname,resolv bind,,have_resolver=no)))
1074
1075   if test x"$have_resolver" != xno ; then
1076
1077       # Make sure that the BIND 4 resolver interface is workable before
1078       # enabling any code that calls it.  At some point I'll rewrite the
1079       # code to use the BIND 8 resolver API.
1080       # We might also want to use libdns instead.
1081
1082     AC_MSG_CHECKING([whether the resolver is usable])
1083     AC_LINK_IFELSE([AC_LANG_PROGRAM([[#include <sys/types.h>
1084 #include <netinet/in.h>
1085 #include <arpa/nameser.h>
1086 #include <resolv.h>]],
1087 [[unsigned char answer[PACKETSZ];
1088   res_query("foo.bar",C_IN,T_A,answer,PACKETSZ);
1089   dn_skipname(0,0);
1090   dn_expand(0,0,0,0,0);
1091 ]])],have_resolver=yes,have_resolver=no)
1092     AC_MSG_RESULT($have_resolver)
1093
1094     # This is Apple-specific and somewhat bizarre as they changed the
1095     # define in bind 8 for some reason.
1096
1097     if test x"$have_resolver" != xyes ; then
1098       AC_MSG_CHECKING(
1099            [whether I can make the resolver usable with BIND_8_COMPAT])
1100       AC_LINK_IFELSE([AC_LANG_PROGRAM([[#define BIND_8_COMPAT
1101 #include <sys/types.h>
1102 #include <netinet/in.h>
1103 #include <arpa/nameser.h>
1104 #include <resolv.h>]],
1105 [[unsigned char answer[PACKETSZ];
1106   res_query("foo.bar",C_IN,T_A,answer,PACKETSZ);
1107   dn_skipname(0,0); dn_expand(0,0,0,0,0);
1108 ]])],[have_resolver=yes ; need_compat=yes])
1109       AC_MSG_RESULT($have_resolver)
1110     fi
1111   fi
1112
1113   if test x"$have_resolver" = xyes ; then
1114     AC_DEFINE(HAVE_SYSTEM_RESOLVER,1,[The system's resolver is usable.])
1115     DNSLIBS="$DNSLIBS $LIBS"
1116     if test x"$need_compat" = xyes ; then
1117       AC_DEFINE(BIND_8_COMPAT,1,[an Apple OSXism])
1118     fi
1119     if test "$use_libdns" = yes; then
1120      show_tor_support=yes
1121     fi
1122   elif test "$use_libdns" = yes; then
1123     show_tor_support=yes
1124   else
1125     AC_MSG_WARN([[
1126 ***
1127 *** The system's DNS resolver is not usable.
1128 *** Dirmngr functionality is limited.
1129 ***]])
1130     show_tor_support="${show_tor_support} (no system resolver)"
1131   fi
1132
1133   if test "$have_w32_system" = yes; then
1134     if test "$use_libdns" = yes; then
1135       DNSLIBS="$DNSLIBS -liphlpapi"
1136     fi
1137   fi
1138
1139   LIBS=$_dns_save_libs
1140 fi
1141
1142 AC_SUBST(DNSLIBS)
1143
1144
1145 #
1146 # Check for LDAP
1147 #
1148 # Note that running the check changes the variable
1149 # gnupg_have_ldap from "n/a" to "no" or "yes".
1150
1151 AC_ARG_ENABLE(ldap,
1152     AC_HELP_STRING([--disable-ldap],[disable LDAP support]),
1153     [if test "$enableval" = "no"; then gnupg_have_ldap=no; fi])
1154
1155 if test "$gnupg_have_ldap" != "no" ; then
1156   if test "$build_dirmngr" = "yes" ; then
1157      GNUPG_CHECK_LDAP($NETLIBS)
1158      AC_CHECK_LIB(lber, ber_free,
1159                   [ LBER_LIBS="$LBER_LIBS -llber"
1160                     AC_DEFINE(HAVE_LBER,1,
1161                              [defined if liblber is available])
1162                     have_lber=yes
1163                  ])
1164   fi
1165 fi
1166 AC_SUBST(LBER_LIBS)
1167 if test "$gnupg_have_ldap" = "no"; then
1168     AC_MSG_WARN([[
1169 ***
1170 *** Building without LDAP support.
1171 *** No CRL access or X.509 certificate search available.
1172 ***]])
1173 fi
1174
1175 AM_CONDITIONAL(USE_LDAP, [test "$gnupg_have_ldap" = yes])
1176 if test "$gnupg_have_ldap" = yes ; then
1177   AC_DEFINE(USE_LDAP,1,[Defined if LDAP is support])
1178 else
1179  use_ldapwrapper=no
1180 fi
1181
1182 if test "$use_ldapwrapper" = yes; then
1183    AC_DEFINE(USE_LDAPWRAPPER,1, [Build dirmngr with LDAP wrapper process])
1184 fi
1185 AM_CONDITIONAL(USE_LDAPWRAPPER, test "$use_ldapwrapper" = yes)
1186
1187
1188
1189
1190 #
1191 # Check for sendmail
1192 #
1193 # This isn't necessarily sendmail itself, but anything that gives a
1194 # sendmail-ish interface to the outside world.  That includes Exim,
1195 # Postfix, etc.  Basically, anything that can handle "sendmail -t".
1196 AC_ARG_WITH(mailprog,
1197       AC_HELP_STRING([--with-mailprog=NAME],
1198                      [use "NAME -t" for mail transport]),
1199              ,with_mailprog=yes)
1200 if test x"$with_mailprog" = xyes ; then
1201     AC_PATH_PROG(SENDMAIL,sendmail,,$PATH:/usr/sbin:/usr/libexec:/usr/lib)
1202 elif test x"$with_mailprog" != xno ; then
1203     AC_MSG_CHECKING([for a mail transport program])
1204     AC_SUBST(SENDMAIL,$with_mailprog)
1205     AC_MSG_RESULT($with_mailprog)
1206 fi
1207
1208
1209 #
1210 # Construct a printable name of the OS
1211 #
1212 case "${host}" in
1213     *-mingw32ce*)
1214         PRINTABLE_OS_NAME="W32CE"
1215         ;;
1216     *-mingw32*)
1217         PRINTABLE_OS_NAME="MingW32"
1218         ;;
1219     *-*-cygwin*)
1220         PRINTABLE_OS_NAME="Cygwin"
1221         ;;
1222     i?86-emx-os2 | i?86-*-os2*emx )
1223         PRINTABLE_OS_NAME="OS/2"
1224         ;;
1225     i?86-*-msdosdjgpp*)
1226         PRINTABLE_OS_NAME="MSDOS/DJGPP"
1227         try_dynload=no
1228         ;;
1229     *-linux*)
1230         PRINTABLE_OS_NAME="GNU/Linux"
1231         ;;
1232     *)
1233         PRINTABLE_OS_NAME=`uname -s || echo "Unknown"`
1234         ;;
1235 esac
1236 AC_DEFINE_UNQUOTED(PRINTABLE_OS_NAME, "$PRINTABLE_OS_NAME",
1237                    [A human readable text with the name of the OS])
1238
1239
1240 #
1241 # Checking for iconv
1242 #
1243 if test "$require_iconv" = yes; then
1244   AM_ICONV
1245 else
1246   LIBICONV=
1247   LTLIBICONV=
1248   AC_SUBST(LIBICONV)
1249   AC_SUBST(LTLIBICONV)
1250 fi
1251
1252
1253 #
1254 # Check for gettext
1255 #
1256 # This is "GNU gnupg" - The project-id script from gettext
1257 #                       needs this string
1258 #
1259 AC_MSG_NOTICE([checking for gettext])
1260 AM_PO_SUBDIRS
1261 AM_GNU_GETTEXT_VERSION([0.17])
1262 if test "$try_gettext" = yes; then
1263   AM_GNU_GETTEXT([external],[need-ngettext])
1264
1265   # gettext requires some extra checks.  These really should be part of
1266   # the basic AM_GNU_GETTEXT macro.  TODO: move other gettext-specific
1267   # function checks to here.
1268
1269   AC_CHECK_FUNCS(strchr)
1270 else
1271   USE_NLS=no
1272   USE_INCLUDED_LIBINTL=no
1273   BUILD_INCLUDED_LIBINTL=no
1274   POSUB=po
1275   AC_SUBST(USE_NLS)
1276   AC_SUBST(USE_INCLUDED_LIBINTL)
1277   AC_SUBST(BUILD_INCLUDED_LIBINTL)
1278   AC_SUBST(POSUB)
1279 fi
1280
1281 # We use HAVE_LANGINFO_CODESET in a couple of places.
1282 AM_LANGINFO_CODESET
1283
1284 # Checks required for our use of locales
1285 gt_LC_MESSAGES
1286
1287
1288 #
1289 # SELinux support
1290 #
1291 if test "$selinux_support" = yes ; then
1292   AC_DEFINE(ENABLE_SELINUX_HACKS,1,[Define to enable SELinux support])
1293 fi
1294
1295
1296 #
1297 # Checks for header files.
1298 #
1299 AC_MSG_NOTICE([checking for header files])
1300 AC_HEADER_STDC
1301 AC_CHECK_HEADERS([string.h unistd.h langinfo.h termio.h locale.h getopt.h \
1302                   pty.h utmp.h pwd.h inttypes.h signal.h sys/select.h     \
1303                   stdint.h signal.h util.h libutil.h termios.h \
1304                   ucred.h sys/ucred.h sys/sysmacros.h sys/mkdev.h])
1305
1306 AC_HEADER_TIME
1307
1308
1309 #
1310 # Checks for typedefs, structures, and compiler characteristics.
1311 #
1312 AC_MSG_NOTICE([checking for system characteristics])
1313 AC_C_CONST
1314 AC_C_INLINE
1315 AC_C_VOLATILE
1316 AC_TYPE_SIZE_T
1317 AC_TYPE_MODE_T
1318 AC_TYPE_SIGNAL
1319 AC_DECL_SYS_SIGLIST
1320
1321 gl_HEADER_SYS_SOCKET
1322 gl_TYPE_SOCKLEN_T
1323
1324 AC_SEARCH_LIBS([inet_addr], [nsl])
1325
1326 AC_ARG_ENABLE(endian-check,
1327               AC_HELP_STRING([--disable-endian-check],
1328               [disable the endian check and trust the OS provided macros]),
1329               endiancheck=$enableval,endiancheck=yes)
1330
1331 if test x"$endiancheck" = xyes ; then
1332   GNUPG_CHECK_ENDIAN
1333 fi
1334
1335 # fixme: we should get rid of the byte type
1336 GNUPG_CHECK_TYPEDEF(byte, HAVE_BYTE_TYPEDEF)
1337 GNUPG_CHECK_TYPEDEF(ushort, HAVE_USHORT_TYPEDEF)
1338 GNUPG_CHECK_TYPEDEF(ulong, HAVE_ULONG_TYPEDEF)
1339 GNUPG_CHECK_TYPEDEF(u16, HAVE_U16_TYPEDEF)
1340 GNUPG_CHECK_TYPEDEF(u32, HAVE_U32_TYPEDEF)
1341
1342 AC_CHECK_SIZEOF(unsigned short)
1343 AC_CHECK_SIZEOF(unsigned int)
1344 AC_CHECK_SIZEOF(unsigned long)
1345 AC_CHECK_SIZEOF(unsigned long long)
1346 AC_HEADER_TIME
1347 AC_CHECK_SIZEOF(time_t,,[[
1348 #include <stdio.h>
1349 #if TIME_WITH_SYS_TIME
1350 # include <sys/time.h>
1351 # include <time.h>
1352 #else
1353 # if HAVE_SYS_TIME_H
1354 #  include <sys/time.h>
1355 # else
1356 #  include <time.h>
1357 # endif
1358 #endif
1359 ]])
1360 GNUPG_TIME_T_UNSIGNED
1361
1362
1363 if test "$ac_cv_sizeof_unsigned_short" = "0" \
1364    || test "$ac_cv_sizeof_unsigned_int" = "0" \
1365    || test "$ac_cv_sizeof_unsigned_long" = "0"; then
1366     AC_MSG_WARN([Hmmm, something is wrong with the sizes - using defaults]);
1367 fi
1368
1369
1370 #
1371 # Checks for library functions.
1372 #
1373 AC_MSG_NOTICE([checking for library functions])
1374 AC_CHECK_DECLS(getpagesize)
1375 AC_FUNC_FSEEKO
1376 AC_FUNC_VPRINTF
1377 AC_FUNC_FORK
1378 AC_CHECK_FUNCS([strerror strlwr tcgetattr mmap canonicalize_file_name])
1379 AC_CHECK_FUNCS([strcasecmp strncasecmp ctermid times gmtime_r strtoull])
1380 AC_CHECK_FUNCS([setenv unsetenv fcntl ftruncate inet_ntop])
1381 AC_CHECK_FUNCS([canonicalize_file_name])
1382 AC_CHECK_FUNCS([gettimeofday getrusage getrlimit setrlimit clock_gettime])
1383 AC_CHECK_FUNCS([atexit raise getpagesize strftime nl_langinfo setlocale])
1384 AC_CHECK_FUNCS([waitpid wait4 sigaction sigprocmask pipe getaddrinfo])
1385 AC_CHECK_FUNCS([ttyname rand ftello fsync stat lstat])
1386 AC_CHECK_FUNCS([memicmp stpcpy strsep strlwr strtoul memmove stricmp strtol \
1387                 memrchr isascii timegm getrusage setrlimit stat setlocale   \
1388                 flockfile funlockfile getpwnam getpwuid \
1389                 getenv inet_pton strpbrk])
1390
1391 # On some systems (e.g. Solaris) nanosleep requires linking to librl.
1392 # Given that we use nanosleep only as an optimization over a select
1393 # based wait function we want it only if it is available in libc.
1394 _save_libs="$LIBS"
1395 AC_SEARCH_LIBS([nanosleep], [],
1396                [AC_DEFINE(HAVE_NANOSLEEP,1,
1397                 [Define to 1 if you have the `nanosleep' function in libc.])])
1398 LIBS="$_save_libs"
1399
1400
1401 # See whether libc supports the Linux inotify interface
1402 case "${host}" in
1403     *-*-linux*)
1404         AC_CHECK_FUNCS([inotify_init])
1405         ;;
1406 esac
1407
1408
1409 if test "$have_android_system" = yes; then
1410    # On Android ttyname is a stub but prints an error message.
1411    AC_DEFINE(HAVE_BROKEN_TTYNAME,1,
1412              [Defined if ttyname does not work properly])
1413 fi
1414
1415 AC_CHECK_TYPES([struct sigaction, sigset_t],,,[#include <signal.h>])
1416
1417 # Dirmngr requires mmap on Unix systems.
1418 if test $ac_cv_func_mmap != yes -a $mmap_needed = yes; then
1419   AC_MSG_ERROR([[Sorry, the current implementation requires mmap.]])
1420 fi
1421
1422
1423 #
1424 # Check for the getsockopt SO_PEERCRED, etc.
1425 #
1426 AC_CHECK_MEMBERS([struct ucred.pid, struct ucred.cr_pid, struct sockpeercred.pid], [], [], [#include <sys/types.h>
1427 #include <sys/socket.h> ])
1428
1429 # (Open)Solaris
1430 AC_CHECK_FUNCS([getpeerucred])
1431
1432
1433 #
1434 # W32 specific test
1435 #
1436 GNUPG_FUNC_MKDIR_TAKES_ONE_ARG
1437
1438 #
1439 # Sanity check regex.  Tests adapted from mutt.
1440 #
1441 AC_MSG_CHECKING([whether regular expression support is requested])
1442 AC_ARG_ENABLE(regex,
1443   AC_HELP_STRING([--disable-regex],
1444     [do not handle regular expressions in trust signatures]),
1445   use_regex=$enableval, use_regex=yes)
1446 AC_MSG_RESULT($use_regex)
1447
1448 if test "$use_regex" = yes ; then
1449   _cppflags="${CPPFLAGS}"
1450   _ldflags="${LDFLAGS}"
1451   AC_ARG_WITH(regex,
1452      AC_HELP_STRING([--with-regex=DIR],[look for regex in DIR]),
1453       [
1454       if test -d "$withval" ; then
1455         CPPFLAGS="${CPPFLAGS} -I$withval/include"
1456         LDFLAGS="${LDFLAGS} -L$withval/lib"
1457       fi
1458       ],withval="")
1459
1460   # Does the system have regex functions at all?
1461   AC_SEARCH_LIBS([regcomp], [regex])
1462   AC_CHECK_FUNC(regcomp, gnupg_cv_have_regex=yes, gnupg_cv_have_regex=no)
1463
1464   if test $gnupg_cv_have_regex = no; then
1465     use_regex=no
1466   else
1467     if test x"$cross_compiling" = xyes; then
1468       AC_MSG_WARN([cross compiling; assuming regexp libray is not broken])
1469     else
1470       AC_CACHE_CHECK([whether your system's regexp library is broken],
1471        [gnupg_cv_regex_broken],
1472        AC_TRY_RUN([
1473 #include <unistd.h>
1474 #include <regex.h>
1475 main() { regex_t blah ; regmatch_t p; p.rm_eo = p.rm_eo; return regcomp(&blah, "foo.*bar", REG_NOSUB) || regexec (&blah, "foobar", 0, NULL, 0); }],
1476        gnupg_cv_regex_broken=no, gnupg_cv_regex_broken=yes, gnupg_cv_regex_broken=yes))
1477
1478       if test $gnupg_cv_regex_broken = yes; then
1479         AC_MSG_WARN([your regex is broken - disabling regex use])
1480         use_regex=no
1481       fi
1482     fi
1483   fi
1484   CPPFLAGS="${_cppflags}"
1485   LDFLAGS="${_ldflags}"
1486 fi
1487
1488 if test "$use_regex" != yes ; then
1489   AC_DEFINE(DISABLE_REGEX,1, [Define to disable regular expression support])
1490 fi
1491 AM_CONDITIONAL(DISABLE_REGEX, test x"$use_regex" != xyes)
1492
1493
1494
1495 #
1496 # Do we have zlib? Must do it here because Solaris failed
1497 # when compiling a conftest (due to the "-lz" from LIBS).
1498 # Note that we combine zlib and bzlib2 in ZLIBS.
1499 #
1500 if test "$use_zip" = yes ; then
1501   _cppflags="${CPPFLAGS}"
1502   _ldflags="${LDFLAGS}"
1503   AC_ARG_WITH(zlib,
1504     [  --with-zlib=DIR         use libz in DIR],[
1505       if test -d "$withval"; then
1506         CPPFLAGS="${CPPFLAGS} -I$withval/include"
1507         LDFLAGS="${LDFLAGS} -L$withval/lib"
1508       fi
1509     ])
1510
1511   AC_CHECK_HEADER(zlib.h,
1512      AC_CHECK_LIB(z, deflateInit2_,
1513        [
1514        ZLIBS="-lz"
1515        AC_DEFINE(HAVE_ZIP,1, [Defined if ZIP and ZLIB are supported])
1516        ],
1517        CPPFLAGS=${_cppflags} LDFLAGS=${_ldflags}),
1518        CPPFLAGS=${_cppflags} LDFLAGS=${_ldflags})
1519 fi
1520
1521
1522 #
1523 # Check whether we can support bzip2
1524 #
1525 if test "$use_bzip2" = yes ; then
1526   _cppflags="${CPPFLAGS}"
1527   _ldflags="${LDFLAGS}"
1528   AC_ARG_WITH(bzip2,
1529      AC_HELP_STRING([--with-bzip2=DIR],[look for bzip2 in DIR]),
1530       [
1531       if test -d "$withval" ; then
1532         CPPFLAGS="${CPPFLAGS} -I$withval/include"
1533         LDFLAGS="${LDFLAGS} -L$withval/lib"
1534       fi
1535       ],withval="")
1536
1537   # Checking alongside stdio.h as an early version of bzip2 (1.0)
1538   # required stdio.h to be included before bzlib.h, and Solaris 9 is
1539   # woefully out of date.
1540   if test "$withval" != no ; then
1541      AC_CHECK_HEADER(bzlib.h,
1542         AC_CHECK_LIB(bz2,BZ2_bzCompressInit,
1543           [
1544           have_bz2=yes
1545           ZLIBS="$ZLIBS -lbz2"
1546           AC_DEFINE(HAVE_BZIP2,1,
1547                   [Defined if the bz2 compression library is available])
1548           ],
1549           CPPFLAGS=${_cppflags} LDFLAGS=${_ldflags}),
1550           CPPFLAGS=${_cppflags} LDFLAGS=${_ldflags},[#include <stdio.h>])
1551   fi
1552 fi
1553 AM_CONDITIONAL(ENABLE_BZIP2_SUPPORT,test x"$have_bz2" = "xyes")
1554 AC_SUBST(ZLIBS)
1555
1556
1557 # Check for readline support
1558 GNUPG_CHECK_READLINE
1559
1560
1561 if test "$development_version" = yes; then
1562     AC_DEFINE(IS_DEVELOPMENT_VERSION,1,
1563             [Defined if this is not a regular release])
1564 fi
1565
1566 if test "$USE_MAINTAINER_MODE" = "yes"; then
1567     AC_DEFINE(MAINTAINER_MODE,1,
1568             [Defined if this build is in maintainer mode])
1569 fi
1570
1571 AM_CONDITIONAL(CROSS_COMPILING, test x$cross_compiling = xyes)
1572
1573 GNUPG_CHECK_GNUMAKE
1574
1575 # Add some extra libs here so that previous tests don't fail for
1576 # mysterious reasons - the final link step should bail out.
1577 # W32SOCKLIBS is also defined so that if can be used for tools not
1578 # requiring any network stuff but linking to code in libcommon which
1579 # tracks in winsock stuff (e.g. init_common_subsystems).
1580 if test "$have_w32_system" = yes; then
1581    if test "$have_w32ce_system" = yes; then
1582      W32SOCKLIBS="-lws2"
1583    else
1584      W32SOCKLIBS="-lws2_32"
1585    fi
1586    NETLIBS="${NETLIBS} ${W32SOCKLIBS}"
1587 fi
1588
1589 AC_SUBST(NETLIBS)
1590 AC_SUBST(W32SOCKLIBS)
1591
1592 #
1593 # Setup gcc specific options
1594 #
1595 USE_C99_CFLAGS=
1596 AC_MSG_NOTICE([checking for cc features])
1597 if test "$GCC" = yes; then
1598     mycflags=
1599     mycflags_save=$CFLAGS
1600
1601     # Check whether gcc does not emit a diagnositc for unknown -Wno-*
1602     # options.  This is the case for gcc >= 4.6
1603     AC_MSG_CHECKING([if gcc ignores unknown -Wno-* options])
1604     AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
1605 #if __GNUC__ < 4 || (__GNUC__ == 4 && __GNUC_MINOR__ < 6 )
1606 #kickerror
1607 #endif]],[])],[_gcc_silent_wno=yes],[_gcc_silent_wno=no])
1608     AC_MSG_RESULT($_gcc_silent_wno)
1609
1610     # Note that it is okay to use CFLAGS here because these are just
1611     # warning options and the user should have a chance of overriding
1612     # them.
1613     if test "$USE_MAINTAINER_MODE" = "yes"; then
1614         mycflags="$mycflags -O3 -Wall -Wcast-align -Wshadow -Wstrict-prototypes"
1615         mycflags="$mycflags -Wformat -Wno-format-y2k -Wformat-security"
1616         if test x"$_gcc_silent_wno" = xyes ; then
1617           _gcc_wopt=yes
1618         else
1619           AC_MSG_CHECKING([if gcc supports -Wno-missing-field-initializers])
1620           CFLAGS="-Wno-missing-field-initializers"
1621           AC_COMPILE_IFELSE([AC_LANG_PROGRAM([],[])],
1622                             [_gcc_wopt=yes],[_gcc_wopt=no])
1623           AC_MSG_RESULT($_gcc_wopt)
1624         fi
1625         if test x"$_gcc_wopt" = xyes ; then
1626           mycflags="$mycflags -W -Wno-sign-compare"
1627           mycflags="$mycflags -Wno-missing-field-initializers"
1628         fi
1629
1630         AC_MSG_CHECKING([if gcc supports -Wdeclaration-after-statement])
1631         CFLAGS="-Wdeclaration-after-statement"
1632         AC_COMPILE_IFELSE([AC_LANG_PROGRAM([],[])],_gcc_wopt=yes,_gcc_wopt=no)
1633         AC_MSG_RESULT($_gcc_wopt)
1634         if test x"$_gcc_wopt" = xyes ; then
1635           mycflags="$mycflags -Wdeclaration-after-statement"
1636         fi
1637
1638         AC_MSG_CHECKING([if gcc supports -Wlogical-op])
1639         CFLAGS="-Wlogical-op -Werror"
1640         AC_COMPILE_IFELSE([AC_LANG_PROGRAM([],[])],_gcc_wopt=yes,_gcc_wopt=no)
1641         AC_MSG_RESULT($_gcc_wopt)
1642         if test x"$_gcc_wopt" = xyes ; then
1643           mycflags="$mycflags -Wlogical-op"
1644         fi
1645
1646         AC_MSG_CHECKING([if gcc supports -Wvla])
1647         CFLAGS="-Wvla"
1648         AC_COMPILE_IFELSE([AC_LANG_PROGRAM([],[])],_gcc_wopt=yes,_gcc_wopt=no)
1649         AC_MSG_RESULT($_gcc_wopt)
1650         if test x"$_gcc_wopt" = xyes ; then
1651           mycflags="$mycflags -Wvla"
1652         fi
1653
1654     else
1655         mycflags="$mycflags -Wall"
1656     fi
1657
1658     if test x"$_gcc_silent_wno" = xyes ; then
1659       _gcc_psign=yes
1660     else
1661       AC_MSG_CHECKING([if gcc supports -Wno-pointer-sign])
1662       CFLAGS="-Wno-pointer-sign"
1663       AC_COMPILE_IFELSE([AC_LANG_PROGRAM([],[])],
1664                         [_gcc_psign=yes],[_gcc_psign=no])
1665       AC_MSG_RESULT($_gcc_psign)
1666     fi
1667     if test x"$_gcc_psign" = xyes ; then
1668        mycflags="$mycflags -Wno-pointer-sign"
1669     fi
1670
1671     AC_MSG_CHECKING([if gcc supports -Wpointer-arith])
1672     CFLAGS="-Wpointer-arith"
1673     AC_COMPILE_IFELSE([AC_LANG_PROGRAM([],[])],_gcc_psign=yes,_gcc_psign=no)
1674     AC_MSG_RESULT($_gcc_psign)
1675     if test x"$_gcc_psign" = xyes ; then
1676        mycflags="$mycflags -Wpointer-arith"
1677     fi
1678
1679     CFLAGS="$mycflags $mycflags_save"
1680     if test "$use_libdns" = yes; then
1681        # dirmngr/dns.{c,h} require C99 and GNU extensions.  */
1682        USE_C99_CFLAGS="-std=gnu99"
1683     fi
1684 fi
1685
1686 AC_SUBST(USE_C99_CFLAGS)
1687
1688
1689 #
1690 # This is handy for debugging so the compiler doesn't rearrange
1691 # things and eliminate variables.
1692 #
1693 AC_ARG_ENABLE(optimization,
1694    AC_HELP_STRING([--disable-optimization],
1695                   [disable compiler optimization]),
1696                   [if test $enableval = no ; then
1697                       CFLAGS=`echo $CFLAGS | sed s/-O[[1-9]]\ /-O0\ /g`
1698                    fi])
1699
1700 #
1701 # Add -Werror to CFLAGS.  This hack can be used to avoid problems with
1702 # misbehaving autoconf tests in case the user supplied -Werror.
1703 #
1704 AC_ARG_ENABLE(werror,
1705    AC_HELP_STRING([--enable-werror],
1706                   [append -Werror to CFLAGS]),
1707                   [if test $enableval = yes ; then
1708                       CFLAGS="$CFLAGS -Werror"
1709                    fi])
1710
1711 #
1712 # Configure option --enable-all-tests
1713 #
1714 AC_MSG_CHECKING([whether "make check" shall run all tests])
1715 AC_ARG_ENABLE(all-tests,
1716               AC_HELP_STRING([--enable-all-tests],
1717                              [let "make check" run all tests]),
1718               run_all_tests=$enableval, run_all_tests=no)
1719 AC_MSG_RESULT($run_all_tests)
1720 if test "$run_all_tests" = "yes"; then
1721     AC_DEFINE(RUN_ALL_TESTS,1,
1722             [Defined if "make check" shall run all tests])
1723 fi
1724
1725 #
1726 # We do not want support for the GNUPG_BUILDDIR environment variable
1727 # in a released version.  However, our regression tests suite requires
1728 # this and thus we build with support for it during "make distcheck".
1729 # This configure option implements this along with the top Makefile's
1730 # AM_DISTCHECK_CONFIGURE_FLAGS.
1731 #
1732 gnupg_builddir_envvar=no
1733 AC_ARG_ENABLE(gnupg-builddir-envvar,,
1734               gnupg_builddir_envvar=$enableval)
1735 if test x"$gnupg_builddir_envvar" = x"yes"; then
1736    AC_DEFINE(ENABLE_GNUPG_BUILDDIR_ENVVAR, 1,
1737       [This is only used with "make distcheck"])
1738 fi
1739
1740
1741 #
1742 # To avoid problems with systemd cleaning up the /run/user directory,
1743 # this option will make GnuPG try to use /run/gnupg/user as socket dir
1744 # before /run/user
1745 #
1746 AC_ARG_ENABLE(run-gnupg-user-socket,
1747     AC_HELP_STRING([--enable-run-gnupg-user-socket],
1748                    [try /run/gnupg/user for sockets prior to /run/user]),
1749     use_run_gnupg_user_socket=$enableval)
1750 if test x"$use_run_gnupg_user_socket" = x"yes"; then
1751    AC_DEFINE(USE_RUN_GNUPG_USER_SOCKET, 1,
1752             [If defined try /run/gnupg/user before /run/user])
1753 fi
1754
1755
1756 #
1757 # Decide what to build
1758 #
1759
1760 build_scdaemon_extra=""
1761 if test "$build_scdaemon" = "yes"; then
1762   if test $have_libusb = no; then
1763      build_scdaemon_extra="without internal CCID driver"
1764   fi
1765   if test -n "$build_scdaemon_extra"; then
1766      build_scdaemon_extra="(${build_scdaemon_extra})"
1767   fi
1768 fi
1769
1770
1771 #
1772 # Set variables for use by automake makefiles.
1773 #
1774 AM_CONDITIONAL(BUILD_GPG,         test "$build_gpg" = "yes")
1775 AM_CONDITIONAL(BUILD_GPGSM,       test "$build_gpgsm" = "yes")
1776 AM_CONDITIONAL(BUILD_AGENT,       test "$build_agent" = "yes")
1777 AM_CONDITIONAL(BUILD_SCDAEMON,    test "$build_scdaemon" = "yes")
1778 AM_CONDITIONAL(BUILD_G13,         test "$build_g13" = "yes")
1779 AM_CONDITIONAL(BUILD_DIRMNGR,     test "$build_dirmngr" = "yes")
1780 AM_CONDITIONAL(BUILD_DOC,         test "$build_doc" = "yes")
1781 AM_CONDITIONAL(BUILD_SYMCRYPTRUN, test "$build_symcryptrun" = "yes")
1782 AM_CONDITIONAL(BUILD_GPGTAR,      test "$build_gpgtar" = "yes")
1783 AM_CONDITIONAL(BUILD_WKS_TOOLS,   test "$build_wks_tools" = "yes")
1784
1785 AM_CONDITIONAL(ENABLE_CARD_SUPPORT, test "$card_support" = yes)
1786 AM_CONDITIONAL(NO_TRUST_MODELS,     test "$use_trust_models" = no)
1787 AM_CONDITIONAL(USE_TOFU,            test "$use_tofu" = yes)
1788
1789 #
1790 # Set some defines for use gpgconf.
1791 #
1792 if test "$build_gpg" = yes ; then
1793     AC_DEFINE(BUILD_WITH_GPG,1,[Defined if GPG is to be build])
1794 fi
1795 if test "$build_gpgsm" = yes ; then
1796     AC_DEFINE(BUILD_WITH_GPGSM,1,[Defined if GPGSM is to be build])
1797 fi
1798 if test "$build_agent" = yes ; then
1799     AC_DEFINE(BUILD_WITH_AGENT,1,[Defined if GPG-AGENT is to be build])
1800 fi
1801 if test "$build_scdaemon" = yes ; then
1802     AC_DEFINE(BUILD_WITH_SCDAEMON,1,[Defined if SCDAEMON is to be build])
1803 fi
1804 if test "$build_dirmngr" = yes ; then
1805     AC_DEFINE(BUILD_WITH_DIRMNGR,1,[Defined if DIRMNGR is to be build])
1806 fi
1807 if test "$build_g13" = yes ; then
1808     AC_DEFINE(BUILD_WITH_G13,1,[Defined if G13 is to be build])
1809 fi
1810
1811
1812 #
1813 # Define Name strings
1814 #
1815 AC_DEFINE_UNQUOTED(GNUPG_NAME, "GnuPG", [The name of the project])
1816
1817 AC_DEFINE_UNQUOTED(GPG_NAME, "gpg", [The name of the OpenPGP tool])
1818 AC_DEFINE_UNQUOTED(GPG_DISP_NAME, "GnuPG", [The displayed name of gpg])
1819
1820 AC_DEFINE_UNQUOTED(GPGSM_NAME, "gpgsm", [The name of the S/MIME tool])
1821 AC_DEFINE_UNQUOTED(GPGSM_DISP_NAME, "GPGSM", [The displayed name of gpgsm])
1822
1823 AC_DEFINE_UNQUOTED(GPG_AGENT_NAME, "gpg-agent", [The name of the agent])
1824 AC_DEFINE_UNQUOTED(GPG_AGENT_DISP_NAME, "GPG Agent",
1825                                         [The displayed name of gpg-agent])
1826
1827 AC_DEFINE_UNQUOTED(SCDAEMON_NAME, "scdaemon", [The name of the scdaemon])
1828 AC_DEFINE_UNQUOTED(SCDAEMON_DISP_NAME, "SCDaemon",
1829                                        [The displayed name of scdaemon])
1830
1831 AC_DEFINE_UNQUOTED(DIRMNGR_NAME, "dirmngr", [The name of the dirmngr])
1832 AC_DEFINE_UNQUOTED(DIRMNGR_DISP_NAME, "DirMngr",
1833                                       [The displayed name of dirmngr])
1834
1835 AC_DEFINE_UNQUOTED(G13_NAME, "g13", [The name of the g13 tool])
1836 AC_DEFINE_UNQUOTED(G13_DISP_NAME, "G13", [The displayed name of g13])
1837
1838 AC_DEFINE_UNQUOTED(GPGCONF_NAME, "gpgconf", [The name of the gpgconf tool])
1839 AC_DEFINE_UNQUOTED(GPGCONF_DISP_NAME, "GPGConf",
1840                                       [The displayed name of gpgconf])
1841
1842 AC_DEFINE_UNQUOTED(GPGTAR_NAME, "gpgtar", [The name of the gpgtar tool])
1843
1844 AC_DEFINE_UNQUOTED(GPG_AGENT_SOCK_NAME, "S.gpg-agent",
1845                    [The name of the agent socket])
1846 AC_DEFINE_UNQUOTED(GPG_AGENT_EXTRA_SOCK_NAME, "S.gpg-agent.extra",
1847                    [The name of the agent socket for remote access])
1848 AC_DEFINE_UNQUOTED(GPG_AGENT_BROWSER_SOCK_NAME, "S.gpg-agent.browser",
1849                    [The name of the agent socket for browsers])
1850 AC_DEFINE_UNQUOTED(GPG_AGENT_SSH_SOCK_NAME, "S.gpg-agent.ssh",
1851                    [The name of the agent socket for ssh])
1852 AC_DEFINE_UNQUOTED(DIRMNGR_INFO_NAME, "DIRMNGR_INFO",
1853                    [The name of the dirmngr info envvar])
1854 AC_DEFINE_UNQUOTED(SCDAEMON_SOCK_NAME, "S.scdaemon",
1855                    [The name of the SCdaemon socket])
1856 AC_DEFINE_UNQUOTED(DIRMNGR_SOCK_NAME, "S.dirmngr",
1857                    [The name of the dirmngr socket])
1858 AC_DEFINE_UNQUOTED(DIRMNGR_DEFAULT_KEYSERVER,
1859                    "hkps://hkps.pool.sks-keyservers.net",
1860       [The default keyserver for dirmngr to use, if none is explicitly given])
1861
1862 AC_DEFINE_UNQUOTED(GPGEXT_GPG, "gpg", [The standard binary file suffix])
1863
1864 if test "$have_w32_system" = yes; then
1865   AC_DEFINE_UNQUOTED(GNUPG_REGISTRY_DIR, "Software\\\\GNU\\\\GnuPG",
1866                      [The directory part of the W32 registry keys])
1867 fi
1868
1869
1870 #
1871 # Provide information about the build.
1872 #
1873 BUILD_REVISION="mym4_revision"
1874 AC_SUBST(BUILD_REVISION)
1875 AC_DEFINE_UNQUOTED(BUILD_REVISION, "$BUILD_REVISION",
1876                    [GIT commit id revision used to build this package])
1877
1878 changequote(,)dnl
1879 BUILD_VERSION=`echo "$VERSION" | sed 's/\([0-9.]*\).*/\1./'`
1880 changequote([,])dnl
1881 BUILD_VERSION="${BUILD_VERSION}mym4_revision_dec"
1882 BUILD_FILEVERSION=`echo "${BUILD_VERSION}" | tr . ,`
1883 AC_SUBST(BUILD_VERSION)
1884 AC_SUBST(BUILD_FILEVERSION)
1885
1886 AC_ARG_ENABLE([build-timestamp],
1887   AC_HELP_STRING([--enable-build-timestamp],
1888                  [set an explicit build timestamp for reproducibility.
1889                   (default is the current time in ISO-8601 format)]),
1890      [if test "$enableval" = "yes"; then
1891         BUILD_TIMESTAMP=`date -u +%Y-%m-%dT%H:%M+0000 2>/dev/null || date`
1892       else
1893         BUILD_TIMESTAMP="$enableval"
1894       fi
1895       BUILD_HOSTNAME="$ac_hostname"],
1896      [BUILD_TIMESTAMP="<none>"
1897       BUILD_HOSTNAME="<anon>"])
1898 AC_SUBST(BUILD_TIMESTAMP)
1899 AC_DEFINE_UNQUOTED(BUILD_TIMESTAMP, "$BUILD_TIMESTAMP",
1900                    [The time this package was configured for a build])
1901 AC_SUBST(BUILD_HOSTNAME)
1902
1903
1904 #
1905 # Print errors here so that they are visible all
1906 # together and the user can acquire them all together.
1907 #
1908 die=no
1909 if test "$have_gpg_error" = "no"; then
1910    die=yes
1911    AC_MSG_NOTICE([[
1912 ***
1913 *** You need libgpg-error to build this program.
1914 **  This library is for example available at
1915 ***   https://gnupg.org/ftp/gcrypt/libgpg-error
1916 *** (at least version $NEED_GPG_ERROR_VERSION is required.)
1917 ***]])
1918 fi
1919 if test "$have_libgcrypt" = "no"; then
1920    die=yes
1921    AC_MSG_NOTICE([[
1922 ***
1923 *** You need libgcrypt to build this program.
1924 **  This library is for example available at
1925 ***   https://gnupg.org/ftp/gcrypt/libgcrypt/
1926 *** (at least version $NEED_LIBGCRYPT_VERSION (API $NEED_LIBGCRYPT_API) is required.)
1927 ***]])
1928 fi
1929 if test "$have_libassuan" = "no"; then
1930    die=yes
1931    AC_MSG_NOTICE([[
1932 ***
1933 *** You need libassuan to build this program.
1934 *** This library is for example available at
1935 ***   https://gnupg.org/ftp/gcrypt/libassuan/
1936 *** (at least version $NEED_LIBASSUAN_VERSION (API $NEED_LIBASSUAN_API) is required).
1937 ***]])
1938 fi
1939 if test "$have_ksba" = "no"; then
1940     die=yes
1941     AC_MSG_NOTICE([[
1942 ***
1943 *** You need libksba to build this program.
1944 *** This library is for example available at
1945 ***   https://gnupg.org/ftp/gcrypt/libksba/
1946 *** (at least version $NEED_KSBA_VERSION using API $NEED_KSBA_API is required).
1947 ***]])
1948 fi
1949 if test "$gnupg_have_ldap" = yes; then
1950   if test "$have_w32ce_system" = yes; then
1951     AC_MSG_NOTICE([[
1952 *** Note that CeGCC might be broken, a package fixing this is:
1953 ***    http://files.kolab.org/local/windows-ce/
1954 ***                           source/wldap32_0.1-mingw32ce.orig.tar.gz
1955 ***                           binary/wldap32-ce-arm-dev_0.1-1_all.deb
1956 ***]])
1957    fi
1958 fi
1959 if test "$have_npth" = "no"; then
1960     die=yes
1961     AC_MSG_NOTICE([[
1962 ***
1963 *** It is now required to build with support for the
1964 *** New Portable Threads Library (nPth). Please install this
1965 *** library first.  The library is for example available at
1966 ***   https://gnupg.org/ftp/gcrypt/npth/
1967 *** (at least version $NEED_NPTH_VERSION (API $NEED_NPTH_API) is required).
1968 ***]])
1969 fi
1970
1971 if test "$require_iconv" = yes; then
1972   if test "$am_func_iconv" != yes; then
1973     die=yes
1974     AC_MSG_NOTICE([[
1975 ***
1976 *** The system does not provide a working iconv function.  Please
1977 *** install a suitable library; for example GNU Libiconv which is
1978 *** available at:
1979 ***   https://ftp.gnu.org/gnu/libiconv/
1980 ***]])
1981   fi
1982 fi
1983
1984 if test "$use_ccid_driver" = yes; then
1985   if test "$have_libusb" != yes; then
1986     die=yes
1987     AC_MSG_NOTICE([[
1988 ***
1989 *** You need libusb to build the internal ccid driver.  Please
1990 *** install a libusb suitable for your system.
1991 ***]])
1992   fi
1993 fi
1994
1995 if test "$die" = "yes"; then
1996     AC_MSG_ERROR([[
1997 ***
1998 *** Required libraries not found. Please consult the above messages
1999 *** and install them before running configure again.
2000 ***]])
2001 fi
2002
2003
2004
2005 AC_CONFIG_FILES([ m4/Makefile
2006 Makefile
2007 po/Makefile.in
2008 common/Makefile
2009 common/w32info-rc.h
2010 kbx/Makefile
2011 g10/Makefile
2012 sm/Makefile
2013 agent/Makefile
2014 scd/Makefile
2015 g13/Makefile
2016 dirmngr/Makefile
2017 tools/gpg-zip
2018 tools/Makefile
2019 doc/Makefile
2020 tests/Makefile
2021 tests/gpgscm/Makefile
2022 tests/openpgp/Makefile
2023 tests/migrations/Makefile
2024 tests/gpgsm/Makefile
2025 tests/gpgme/Makefile
2026 tests/pkits/Makefile
2027 g10/gpg.w32-manifest
2028 ])
2029
2030
2031 AC_OUTPUT
2032
2033
2034 echo "
2035         GnuPG v${VERSION} has been configured as follows:
2036
2037         Revision:  mym4_revision  (mym4_revision_dec)
2038         Platform:  $PRINTABLE_OS_NAME ($host)
2039
2040         OpenPGP:   $build_gpg
2041         S/MIME:    $build_gpgsm
2042         Agent:     $build_agent
2043         Smartcard: $build_scdaemon $build_scdaemon_extra
2044         G13:       $build_g13
2045         Dirmngr:   $build_dirmngr
2046         Gpgtar:    $build_gpgtar
2047         WKS tools: $build_wks_tools
2048
2049         Protect tool:      $show_gnupg_protect_tool_pgm
2050         LDAP wrapper:      $show_gnupg_dirmngr_ldap_pgm
2051         Default agent:     $show_gnupg_agent_pgm
2052         Default pinentry:  $show_gnupg_pinentry_pgm
2053         Default scdaemon:  $show_gnupg_scdaemon_pgm
2054         Default dirmngr:   $show_gnupg_dirmngr_pgm
2055
2056         Dirmngr auto start:  $dirmngr_auto_start
2057         Readline support:    $gnupg_cv_have_readline
2058         LDAP support:        $gnupg_have_ldap
2059         TLS support:         $use_tls_library
2060         TOFU support:        $use_tofu
2061         Tor support:         $show_tor_support
2062 "
2063 if test x"$use_regex" != xyes ; then
2064 echo "
2065         Warning: No regular expression support available.
2066                  OpenPGP trust signatures won't work.
2067                  gpg-check-pattern will not be built.
2068 "
2069 fi
2070 if test "x${gpg_config_script_warn}" != x; then
2071 cat <<G10EOF
2072         Warning: Mismatches between the target platform and the
2073                  to be used libraries have been detected for:
2074                   ${gpg_config_script_warn}
2075                  Please check above for more warning messages.
2076
2077 G10EOF
2078 fi