common: Accept the Z-suffix for yymmddThhmmssZ format.
[gnupg.git] / configure.ac
1 # configure.ac - for GnuPG 2.1
2 # Copyright (C) 1998-2017 Free Software Foundation, Inc.
3 # Copyright (C) 1998-2017 Werner Koch
4 #
5 # This file is part of GnuPG.
6 #
7 # GnuPG is free software; you can redistribute it and/or modify
8 # it under the terms of the GNU General Public License as published by
9 # the Free Software Foundation; either version 3 of the License, or
10 # (at your option) any later version.
11 #
12 # GnuPG is distributed in the hope that it will be useful,
13 # but WITHOUT ANY WARRANTY; without even the implied warranty of
14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
15 # GNU General Public License for more details.
16 #
17 # You should have received a copy of the GNU General Public License
18 # along with this program; if not, see <https://www.gnu.org/licenses/>.
19
20 # Process this file with autoconf to produce a configure script.
21 AC_PREREQ(2.61)
22 min_automake_version="1.14"
23
24 # To build a release you need to create a tag with the version number
25 # (git tag -s gnupg-2.n.m) and run "./autogen.sh --force".  Please
26 # bump the version number immediately *after* the release and do
27 # another commit and push so that the git magic is able to work.
28 m4_define([mym4_package],[gnupg])
29 m4_define([mym4_major], [2])
30 m4_define([mym4_minor], [2])
31 m4_define([mym4_micro], [2])
32
33 # To start a new development series, i.e a new major or minor number
34 # you need to mark an arbitrary commit before the first beta release
35 # with an annotated tag.  For example the 2.1 branch starts off with
36 # the tag "gnupg-2.1-base".  This is used as the base for counting
37 # beta numbers before the first release of a series.
38
39 # Below is m4 magic to extract and compute the git revision number,
40 # the decimalized short revision number, a beta version string and a
41 # flag indicating a development version (mym4_isbeta).  Note that the
42 # m4 processing is done by autoconf and not during the configure run.
43 m4_define([mym4_verslist], m4_split(m4_esyscmd([./autogen.sh --find-version] \
44                            mym4_package mym4_major mym4_minor mym4_micro),[:]))
45 m4_define([mym4_isbeta],       m4_argn(2, mym4_verslist))
46 m4_define([mym4_version],      m4_argn(4, mym4_verslist))
47 m4_define([mym4_revision],     m4_argn(7, mym4_verslist))
48 m4_define([mym4_revision_dec], m4_argn(8, mym4_verslist))
49 m4_esyscmd([echo ]mym4_version[>VERSION])
50 AC_INIT([mym4_package],[mym4_version], [https://bugs.gnupg.org])
51
52 # When changing the SWDB tag please also adjust the hard coded tags in
53 # build-aux/speedo.mk and Makefile.am
54 AC_DEFINE_UNQUOTED(GNUPG_SWDB_TAG, "gnupg22", [swdb tag for this branch])
55
56 NEED_GPG_ERROR_VERSION=1.24
57
58 NEED_LIBGCRYPT_API=1
59 NEED_LIBGCRYPT_VERSION=1.7.0
60
61 NEED_LIBASSUAN_API=2
62 NEED_LIBASSUAN_VERSION=2.4.3
63
64 NEED_KSBA_API=1
65 NEED_KSBA_VERSION=1.3.4
66
67 NEED_NTBTLS_API=1
68 NEED_NTBTLS_VERSION=0.1.0
69
70 NEED_NPTH_API=1
71 NEED_NPTH_VERSION=1.2
72
73
74 NEED_GNUTLS_VERSION=3.0
75
76 NEED_SQLITE_VERSION=3.7
77
78 development_version=mym4_isbeta
79 PACKAGE=$PACKAGE_NAME
80 PACKAGE_GT=${PACKAGE_NAME}2
81 VERSION=$PACKAGE_VERSION
82
83 AC_CONFIG_AUX_DIR([build-aux])
84 AC_CONFIG_SRCDIR([sm/gpgsm.c])
85 AC_CONFIG_HEADER([config.h])
86 AM_INIT_AUTOMAKE([serial-tests dist-bzip2 no-dist-gzip])
87 AC_CANONICAL_HOST
88 AB_INIT
89
90 AC_GNU_SOURCE
91
92
93 # Some status variables.
94 have_gpg_error=no
95 have_libgcrypt=no
96 have_libassuan=no
97 have_ksba=no
98 have_ntbtls=no
99 have_gnutls=no
100 have_sqlite=no
101 have_npth=no
102 have_libusb=no
103 have_system_resolver=no
104 gnupg_have_ldap="n/a"
105
106 use_zip=yes
107 use_bzip2=yes
108 use_exec=yes
109 use_trust_models=yes
110 use_tofu=yes
111 use_libdns=yes
112 card_support=yes
113 use_ccid_driver=auto
114 dirmngr_auto_start=yes
115 use_tls_library=no
116 large_secmem=no
117 show_tor_support=no
118
119
120 GNUPG_BUILD_PROGRAM(gpg, yes)
121 GNUPG_BUILD_PROGRAM(gpgsm, yes)
122 # The agent is a required part and can't be disabled anymore.
123 build_agent=yes
124 GNUPG_BUILD_PROGRAM(scdaemon, yes)
125 GNUPG_BUILD_PROGRAM(g13, no)
126 GNUPG_BUILD_PROGRAM(dirmngr, yes)
127 GNUPG_BUILD_PROGRAM(doc, yes)
128 GNUPG_BUILD_PROGRAM(symcryptrun, no)
129 # We use gpgtar to unpack test data, hence we always build it.  If the
130 # user opts out, we simply don't install it.
131 GNUPG_BUILD_PROGRAM(gpgtar, yes)
132 GNUPG_BUILD_PROGRAM(wks-tools, no)
133
134 AC_SUBST(PACKAGE)
135 AC_SUBST(PACKAGE_GT)
136 AC_SUBST(VERSION)
137 AC_DEFINE_UNQUOTED(PACKAGE, "$PACKAGE", [Name of this package])
138 AC_DEFINE_UNQUOTED(PACKAGE_GT, "$PACKAGE_GT",
139                                 [Name of this package for gettext])
140 AC_DEFINE_UNQUOTED(VERSION, "$VERSION", [Version of this package])
141 AC_DEFINE_UNQUOTED(PACKAGE_BUGREPORT, "$PACKAGE_BUGREPORT",
142                                         [Bug report address])
143 AC_DEFINE_UNQUOTED(NEED_LIBGCRYPT_VERSION, "$NEED_LIBGCRYPT_VERSION",
144                                        [Required version of Libgcrypt])
145 AC_DEFINE_UNQUOTED(NEED_KSBA_VERSION, "$NEED_KSBA_VERSION",
146                                        [Required version of Libksba])
147 AC_DEFINE_UNQUOTED(NEED_NTBTLS_VERSION, "$NEED_NTBTLS_VERSION",
148                                        [Required version of NTBTLS])
149
150
151
152 # The default is to use the modules from this package and the few
153 # other packages in a standard place; i.e where this package gets
154 # installed.  With these options it is possible to override these
155 # ${prefix} depended values with fixed paths, which can't be replaced
156 # at make time.  See also am/cmacros.am and the defaults in AH_BOTTOM.
157 AC_ARG_WITH(agent-pgm,
158     [  --with-agent-pgm=PATH  Use PATH as the default for the agent)],
159           GNUPG_AGENT_PGM="$withval", GNUPG_AGENT_PGM="" )
160 AC_SUBST(GNUPG_AGENT_PGM)
161 AM_CONDITIONAL(GNUPG_AGENT_PGM, test -n "$GNUPG_AGENT_PGM")
162 show_gnupg_agent_pgm="(default)"
163 test -n "$GNUPG_AGENT_PGM" && show_gnupg_agent_pgm="$GNUPG_AGENT_PGM"
164
165 AC_ARG_WITH(pinentry-pgm,
166     [  --with-pinentry-pgm=PATH  Use PATH as the default for the pinentry)],
167           GNUPG_PINENTRY_PGM="$withval", GNUPG_PINENTRY_PGM="" )
168 AC_SUBST(GNUPG_PINENTRY_PGM)
169 AM_CONDITIONAL(GNUPG_PINENTRY_PGM, test -n "$GNUPG_PINENTRY_PGM")
170 show_gnupg_pinentry_pgm="(default)"
171 test -n "$GNUPG_PINENTRY_PGM" && show_gnupg_pinentry_pgm="$GNUPG_PINENTRY_PGM"
172
173
174 AC_ARG_WITH(scdaemon-pgm,
175     [  --with-scdaemon-pgm=PATH  Use PATH as the default for the scdaemon)],
176           GNUPG_SCDAEMON_PGM="$withval", GNUPG_SCDAEMON_PGM="" )
177 AC_SUBST(GNUPG_SCDAEMON_PGM)
178 AM_CONDITIONAL(GNUPG_SCDAEMON_PGM, test -n "$GNUPG_SCDAEMON_PGM")
179 show_gnupg_scdaemon_pgm="(default)"
180 test -n "$GNUPG_SCDAEMON_PGM" && show_gnupg_scdaemon_pgm="$GNUPG_SCDAEMON_PGM"
181
182
183 AC_ARG_WITH(dirmngr-pgm,
184     [  --with-dirmngr-pgm=PATH  Use PATH as the default for the dirmngr)],
185           GNUPG_DIRMNGR_PGM="$withval", GNUPG_DIRMNGR_PGM="" )
186 AC_SUBST(GNUPG_DIRMNGR_PGM)
187 AM_CONDITIONAL(GNUPG_DIRMNGR_PGM, test -n "$GNUPG_DIRMNGR_PGM")
188 show_gnupg_dirmngr_pgm="(default)"
189 test -n "$GNUPG_DIRMNGR_PGM" && show_gnupg_dirmngr_pgm="$GNUPG_DIRMNGR_PGM"
190
191 AC_ARG_WITH(protect-tool-pgm,
192     [  --with-protect-tool-pgm=PATH  Use PATH as the default for the protect-tool)],
193           GNUPG_PROTECT_TOOL_PGM="$withval", GNUPG_PROTECT_TOOL_PGM="" )
194 AC_SUBST(GNUPG_PROTECT_TOOL_PGM)
195 AM_CONDITIONAL(GNUPG_PROTECT_TOOL_PGM, test -n "$GNUPG_PROTECT_TOOL_PGM")
196 show_gnupg_protect_tool_pgm="(default)"
197 test -n "$GNUPG_PROTECT_TOOL_PGM" \
198       && show_gnupg_protect_tool_pgm="$GNUPG_PROTECT_TOOL_PGM"
199
200 AC_ARG_WITH(dirmngr-ldap-pgm,
201     [  --with-dirmngr-ldap-pgm=PATH  Use PATH as the default for the dirmngr ldap wrapper)],
202           GNUPG_DIRMNGR_LDAP_PGM="$withval", GNUPG_DIRMNGR_LDAP_PGM="" )
203 AC_SUBST(GNUPG_DIRMNGR_LDAP_PGM)
204 AM_CONDITIONAL(GNUPG_DIRMNGR_LDAP_PGM, test -n "$GNUPG_DIRMNGR_LDAP_PGM")
205 show_gnupg_dirmngr_ldap_pgm="(default)"
206 test -n "$GNUPG_DIRMNGR_LDAP_PGM" \
207       && show_gnupg_dirmngr_ldap_pgm="$GNUPG_DIRMNGR_LDAP_PGM"
208
209
210 #
211 # For a long time gpg 2.x was installed as gpg2.  This changed with
212 # 2.2.  This option can be used to install gpg under the name gpg2.
213 #
214 AC_ARG_ENABLE(gpg-is-gpg2,
215     AC_HELP_STRING([--enable-gpg-is-gpg2],[Set installed name of gpg to gpg2]),
216     gpg_is_gpg2=$enableval)
217 if test "$gpg_is_gpg2" = "yes"; then
218    AC_DEFINE(USE_GPG2_HACK, 1, [Define to install gpg as gpg2])
219 fi
220 AM_CONDITIONAL(USE_GPG2_HACK, test "$gpg_is_gpg2" = "yes")
221
222
223 # SELinux support includes tracking of sensitive files to avoid
224 # leaking their contents through processing these files by gpg itself
225 AC_MSG_CHECKING([whether SELinux support is requested])
226 AC_ARG_ENABLE(selinux-support,
227               AC_HELP_STRING([--enable-selinux-support],
228                              [enable SELinux support]),
229               selinux_support=$enableval, selinux_support=no)
230 AC_MSG_RESULT($selinux_support)
231
232
233 AC_MSG_CHECKING([whether to allocate extra secure memory])
234 AC_ARG_ENABLE(large-secmem,
235               AC_HELP_STRING([--enable-large-secmem],
236                              [allocate extra secure memory]),
237               large_secmem=$enableval, large_secmem=no)
238 AC_MSG_RESULT($large_secmem)
239 if test "$large_secmem" = yes ; then
240    SECMEM_BUFFER_SIZE=65536
241 else
242    SECMEM_BUFFER_SIZE=32768
243 fi
244 AC_DEFINE_UNQUOTED(SECMEM_BUFFER_SIZE,$SECMEM_BUFFER_SIZE,
245                    [Size of secure memory buffer])
246
247 AC_MSG_CHECKING([whether to enable trust models])
248 AC_ARG_ENABLE(trust-models,
249               AC_HELP_STRING([--disable-trust-models],
250                              [disable all trust models except "always"]),
251               use_trust_models=$enableval)
252 AC_MSG_RESULT($use_trust_models)
253 if test "$use_trust_models" = no ; then
254     AC_DEFINE(NO_TRUST_MODELS, 1,
255              [Define to include only trust-model always])
256 fi
257
258 AC_MSG_CHECKING([whether to enable TOFU])
259 AC_ARG_ENABLE(tofu,
260                 AC_HELP_STRING([--disable-tofu],
261                                [disable the TOFU trust model]),
262               use_tofu=$enableval, use_tofu=$use_trust_models)
263 AC_MSG_RESULT($use_tofu)
264 if test "$use_trust_models" = no && test "$use_tofu" = yes; then
265     AC_MSG_ERROR([both --disable-trust-models and --enable-tofu given])
266 fi
267
268 AC_MSG_CHECKING([whether to enable libdns])
269 AC_ARG_ENABLE(libdns,
270                 AC_HELP_STRING([--disable-libdns],
271                                [do not build with libdns support]),
272               use_libdns=$enableval, use_libdns=yes)
273 AC_MSG_RESULT($use_libdns)
274 if test x"$use_libdns" = xyes ; then
275     AC_DEFINE(USE_LIBDNS, 1, [Build with integrated libdns support])
276 fi
277 AM_CONDITIONAL(USE_LIBDNS, test "$use_libdns" = yes)
278
279
280 #
281 # Options to disable algorithm
282 #
283
284 GNUPG_GPG_DISABLE_ALGO([rsa],[RSA public key])
285 # Elgamal is a MUST algorithm
286 # DSA is a MUST algorithm
287 GNUPG_GPG_DISABLE_ALGO([ecdh],[ECDH public key])
288 GNUPG_GPG_DISABLE_ALGO([ecdsa],[ECDSA public key])
289 GNUPG_GPG_DISABLE_ALGO([eddsa],[EdDSA public key])
290
291 GNUPG_GPG_DISABLE_ALGO([idea],[IDEA cipher])
292 # 3DES is a MUST algorithm
293 GNUPG_GPG_DISABLE_ALGO([cast5],[CAST5 cipher])
294 GNUPG_GPG_DISABLE_ALGO([blowfish],[BLOWFISH cipher])
295 GNUPG_GPG_DISABLE_ALGO([aes128],[AES128 cipher])
296 GNUPG_GPG_DISABLE_ALGO([aes192],[AES192 cipher])
297 GNUPG_GPG_DISABLE_ALGO([aes256],[AES256 cipher])
298 GNUPG_GPG_DISABLE_ALGO([twofish],[TWOFISH cipher])
299 GNUPG_GPG_DISABLE_ALGO([camellia128],[CAMELLIA128 cipher])
300 GNUPG_GPG_DISABLE_ALGO([camellia192],[CAMELLIA192 cipher])
301 GNUPG_GPG_DISABLE_ALGO([camellia256],[CAMELLIA256 cipher])
302
303 GNUPG_GPG_DISABLE_ALGO([md5],[MD5 hash])
304 # SHA1 is a MUST algorithm
305 GNUPG_GPG_DISABLE_ALGO([rmd160],[RIPE-MD160 hash])
306 GNUPG_GPG_DISABLE_ALGO([sha224],[SHA-224 hash])
307 # SHA256 is a MUST algorithm for GnuPG.
308 GNUPG_GPG_DISABLE_ALGO([sha384],[SHA-384 hash])
309 GNUPG_GPG_DISABLE_ALGO([sha512],[SHA-512 hash])
310
311
312 # Allow disabling of zip support.
313 # This is in general not a good idea because according to rfc4880 OpenPGP
314 # implementations SHOULD support ZLIB.
315 AC_MSG_CHECKING([whether to enable the ZIP and ZLIB compression algorithm])
316 AC_ARG_ENABLE(zip,
317    AC_HELP_STRING([--disable-zip],
318                   [disable the ZIP and ZLIB compression algorithm]),
319    use_zip=$enableval)
320 AC_MSG_RESULT($use_zip)
321
322 # Allow disabling of bzib2 support.
323 # It is defined only after we confirm the library is available later
324 AC_MSG_CHECKING([whether to enable the BZIP2 compression algorithm])
325 AC_ARG_ENABLE(bzip2,
326    AC_HELP_STRING([--disable-bzip2],[disable the BZIP2 compression algorithm]),
327    use_bzip2=$enableval)
328 AC_MSG_RESULT($use_bzip2)
329
330 # Configure option to allow or disallow execution of external
331 # programs, like a photo viewer.
332 AC_MSG_CHECKING([whether to enable external program execution])
333 AC_ARG_ENABLE(exec,
334     AC_HELP_STRING([--disable-exec],[disable all external program execution]),
335     use_exec=$enableval)
336 AC_MSG_RESULT($use_exec)
337 if test "$use_exec" = no ; then
338     AC_DEFINE(NO_EXEC,1,[Define to disable all external program execution])
339 fi
340
341 if test "$use_exec" = yes ; then
342   AC_MSG_CHECKING([whether to enable photo ID viewing])
343   AC_ARG_ENABLE(photo-viewers,
344       [  --disable-photo-viewers disable photo ID viewers],
345       [if test "$enableval" = no ; then
346          AC_DEFINE(DISABLE_PHOTO_VIEWER,1,[define to disable photo viewing])
347       fi],enableval=yes)
348   gnupg_cv_enable_photo_viewers=$enableval
349   AC_MSG_RESULT($enableval)
350
351   if test "$gnupg_cv_enable_photo_viewers" = yes ; then
352     AC_MSG_CHECKING([whether to use a fixed photo ID viewer])
353     AC_ARG_WITH(photo-viewer,
354         [  --with-photo-viewer=FIXED_VIEWER  set a fixed photo ID viewer],
355         [if test "$withval" = yes ; then
356            withval=no
357         elif test "$withval" != no ; then
358            AC_DEFINE_UNQUOTED(FIXED_PHOTO_VIEWER,"$withval",
359                             [if set, restrict photo-viewer to this])
360         fi],withval=no)
361     AC_MSG_RESULT($withval)
362   fi
363 fi
364
365
366 #
367 # Check for the key/uid cache size.  This can't be zero, but can be
368 # pretty small on embedded systems.  This is used for the gpg part.
369 #
370 AC_MSG_CHECKING([for the size of the key and uid cache])
371 AC_ARG_ENABLE(key-cache,
372         AC_HELP_STRING([--enable-key-cache=SIZE],
373                        [Set key cache to SIZE (default 4096)]),,enableval=4096)
374 if test "$enableval" = "no"; then
375    enableval=5
376 elif test "$enableval" = "yes" || test "$enableval" = ""; then
377    enableval=4096
378 fi
379 changequote(,)dnl
380 key_cache_size=`echo "$enableval" | sed 's/[A-Za-z]//g'`
381 changequote([,])dnl
382 if test "$enableval" != "$key_cache_size" || test "$key_cache_size" -lt 5; then
383    AC_MSG_ERROR([invalid key-cache size])
384 fi
385 AC_MSG_RESULT($key_cache_size)
386 AC_DEFINE_UNQUOTED(PK_UID_CACHE_SIZE,$key_cache_size,
387                   [Size of the key and UID caches])
388
389
390
391 #
392 # Check whether we want to use Linux capabilities
393 #
394 AC_MSG_CHECKING([whether use of capabilities is requested])
395 AC_ARG_WITH(capabilities,
396     [  --with-capabilities     use linux capabilities [default=no]],
397 [use_capabilities="$withval"],[use_capabilities=no])
398 AC_MSG_RESULT($use_capabilities)
399
400 #
401 # Check whether to disable the card support
402 AC_MSG_CHECKING([whether smartcard support is requested])
403 AC_ARG_ENABLE(card-support,
404               AC_HELP_STRING([--disable-card-support],
405                              [disable smartcard support]),
406               card_support=$enableval)
407 AC_MSG_RESULT($card_support)
408 if test "$card_support" = yes ; then
409   AC_DEFINE(ENABLE_CARD_SUPPORT,1,[Define to include smartcard support])
410 else
411   build_scdaemon=no
412 fi
413
414 #
415 # Allow disabling of internal CCID support.
416 # It is defined only after we confirm the library is available later
417 #
418 AC_MSG_CHECKING([whether to enable the internal CCID driver])
419 AC_ARG_ENABLE(ccid-driver,
420               AC_HELP_STRING([--disable-ccid-driver],
421                              [disable the internal CCID driver]),
422               use_ccid_driver=$enableval)
423 AC_MSG_RESULT($use_ccid_driver)
424
425 AC_MSG_CHECKING([whether to auto start dirmngr])
426 AC_ARG_ENABLE(dirmngr-auto-start,
427               AC_HELP_STRING([--disable-dirmngr-auto-start],
428                              [disable auto starting of the dirmngr]),
429               dirmngr_auto_start=$enableval)
430 AC_MSG_RESULT($dirmngr_auto_start)
431 if test "$dirmngr_auto_start" = yes ; then
432     AC_DEFINE(USE_DIRMNGR_AUTO_START,1,
433               [Define to enable auto starting of the dirmngr])
434 fi
435
436
437 #
438 # To avoid double inclusion of config.h which might happen at some
439 # places, we add the usual double inclusion protection at the top of
440 # config.h.
441 #
442 AH_TOP([
443 #ifndef GNUPG_CONFIG_H_INCLUDED
444 #define GNUPG_CONFIG_H_INCLUDED
445 ])
446
447 #
448 # Stuff which goes at the bottom of config.h.
449 #
450 AH_BOTTOM([
451 /* This is the major version number of GnuPG so that
452    source included files can test for this.  Note, that
453    we use 2 here even for GnuPG 1.9.x. */
454 #define GNUPG_MAJOR_VERSION 2
455
456 /* Now to separate file name parts.
457    Please note that the string version must not contain more
458    than one character because the code assumes strlen()==1 */
459 #ifdef HAVE_DOSISH_SYSTEM
460 #define DIRSEP_C '\\'
461 #define DIRSEP_S "\\"
462 #define EXTSEP_C '.'
463 #define EXTSEP_S "."
464 #define PATHSEP_C ';'
465 #define PATHSEP_S ";"
466 #define EXEEXT_S ".exe"
467 #else
468 #define DIRSEP_C '/'
469 #define DIRSEP_S "/"
470 #define EXTSEP_C '.'
471 #define EXTSEP_S "."
472 #define PATHSEP_C ':'
473 #define PATHSEP_S ":"
474 #define EXEEXT_S ""
475 #endif
476
477 /* This is the same as VERSION, but should be overridden if the
478    platform cannot handle things like dots '.' in filenames. Set
479    SAFE_VERSION_DOT and SAFE_VERSION_DASH to whatever SAFE_VERSION
480    uses for dots and dashes. */
481 #define SAFE_VERSION VERSION
482 #define SAFE_VERSION_DOT  '.'
483 #define SAFE_VERSION_DASH '-'
484
485 /* Some global constants.
486  * Note that the homedir must not end in a slash.  */
487 #ifdef HAVE_DOSISH_SYSTEM
488 # ifdef HAVE_DRIVE_LETTERS
489 #  define GNUPG_DEFAULT_HOMEDIR "c:/gnupg"
490 # else
491 #  define GNUPG_DEFAULT_HOMEDIR "/gnupg"
492 # endif
493 #elif defined(__VMS)
494 #define GNUPG_DEFAULT_HOMEDIR "/SYS$LOGIN/gnupg"
495 #else
496 #define GNUPG_DEFAULT_HOMEDIR "~/.gnupg"
497 #endif
498 #define GNUPG_PRIVATE_KEYS_DIR  "private-keys-v1.d"
499 #define GNUPG_OPENPGP_REVOC_DIR "openpgp-revocs.d"
500
501 /* For some systems (DOS currently), we hardcode the path here.  For
502    POSIX systems the values are constructed by the Makefiles, so that
503    the values may be overridden by the make invocations; this is to
504    comply with the GNU coding standards.  Note that these values are
505    only defaults.  */
506 #ifdef HAVE_DOSISH_SYSTEM
507 # ifdef HAVE_DRIVE_LETTERS
508 #  define GNUPG_BINDIR      "c:\\gnupg"
509 #  define GNUPG_LIBEXECDIR  "c:\\gnupg"
510 #  define GNUPG_LIBDIR      "c:\\gnupg"
511 #  define GNUPG_DATADIR     "c:\\gnupg"
512 #  define GNUPG_SYSCONFDIR  "c:\\gnupg"
513 # else
514 #  define GNUPG_BINDIR      "\\gnupg"
515 #  define GNUPG_LIBEXECDIR  "\\gnupg"
516 #  define GNUPG_LIBDIR      "\\gnupg"
517 #  define GNUPG_DATADIR     "\\gnupg"
518 #  define GNUPG_SYSCONFDIR  "\\gnupg"
519 # endif
520 #endif
521
522 /* Derive some other constants. */
523 #if !(defined(HAVE_FORK) && defined(HAVE_PIPE) && defined(HAVE_WAITPID))
524 #define EXEC_TEMPFILE_ONLY
525 #endif
526
527
528 /* We didn't define endianness above, so get it from OS macros.  This
529    is intended for making fat binary builds on OS X. */
530 #if !defined(BIG_ENDIAN_HOST) && !defined(LITTLE_ENDIAN_HOST)
531 #if defined(__BIG_ENDIAN__)
532 #define BIG_ENDIAN_HOST 1
533 #elif defined(__LITTLE_ENDIAN__)
534 #define LITTLE_ENDIAN_HOST 1
535 #else
536 #error "No endianness found"
537 #endif
538 #endif
539
540
541 /* Hack used for W32: ldap.m4 also tests for the ASCII version of
542    ldap_start_tls_s because that is the actual symbol used in the
543    library.  winldap.h redefines it to our commonly used value,
544    thus we define our usual macro here.  */
545 #ifdef HAVE_LDAP_START_TLS_SA
546 # ifndef HAVE_LDAP_START_TLS_S
547 #  define HAVE_LDAP_START_TLS_S 1
548 # endif
549 #endif
550
551 /* Provide the es_ macro for estream.  */
552 #define GPGRT_ENABLE_ES_MACROS 1
553
554 /* Tell libgcrypt not to use its own libgpg-error implementation. */
555 #define USE_LIBGPG_ERROR 1
556
557 /* Tell Libgcrypt not to include deprecated definitions.  */
558 #define GCRYPT_NO_DEPRECATED 1
559
560 /* Our HTTP code is used in estream mode.  */
561 #define HTTP_USE_ESTREAM 1
562
563 /* Under W32 we do an explicit socket initialization, thus we need to
564    avoid the on-demand initialization which would also install an atexit
565    handler.  */
566 #define HTTP_NO_WSASTARTUP
567
568 /* Under Windows we use the gettext code from libgpg-error.  */
569 #define GPG_ERR_ENABLE_GETTEXT_MACROS
570
571 /* Under WindowsCE we use the strerror replacement from libgpg-error.  */
572 #define GPG_ERR_ENABLE_ERRNO_MACROS
573
574 #endif /*GNUPG_CONFIG_H_INCLUDED*/
575 ])
576
577
578 AM_MAINTAINER_MODE
579 AC_ARG_VAR(SYSROOT,[locate config scripts also below that directory])
580
581 # Checks for programs.
582 AC_MSG_NOTICE([checking for programs])
583 AC_PROG_MAKE_SET
584 AM_SANITY_CHECK
585 missing_dir=`cd $ac_aux_dir && pwd`
586 AM_MISSING_PROG(ACLOCAL, aclocal, $missing_dir)
587 AM_MISSING_PROG(AUTOCONF, autoconf, $missing_dir)
588 AM_MISSING_PROG(AUTOMAKE, automake, $missing_dir)
589 AM_MISSING_PROG(AUTOHEADER, autoheader, $missing_dir)
590 AM_MISSING_PROG(MAKEINFO, makeinfo, $missing_dir)
591 AM_SILENT_RULES
592 AC_PROG_AWK
593 AC_PROG_CC
594 AC_PROG_CPP
595 AM_PROG_CC_C_O
596 if test "x$ac_cv_prog_cc_c89" = "xno" ; then
597   AC_MSG_ERROR([[No C-89 compiler found]])
598 fi
599 AC_PROG_INSTALL
600 AC_PROG_LN_S
601 AC_PROG_RANLIB
602 AC_CHECK_TOOL(AR, ar, :)
603 AC_PATH_PROG(PERL,"perl")
604 AC_CHECK_TOOL(WINDRES, windres, :)
605 AC_PATH_PROG(YAT2M, "yat2m", "./yat2m" )
606 AC_ARG_VAR(YAT2M, [tool to convert texi to man pages])
607 AC_ISC_POSIX
608 AC_SYS_LARGEFILE
609 GNUPG_CHECK_USTAR
610
611
612 # We need to compile and run a program on the build machine.  A
613 # comment in libgpg-error says that the AC_PROG_CC_FOR_BUILD macro in
614 # the AC archive is broken for autoconf 2.57.  Given that there is no
615 # newer version of that macro, we assume that it is also broken for
616 # autoconf 2.61 and thus we use a simple but usually sufficient
617 # approach.
618 AC_MSG_CHECKING(for cc for build)
619 if test "$cross_compiling" = "yes"; then
620   CC_FOR_BUILD="${CC_FOR_BUILD-cc}"
621 else
622   CC_FOR_BUILD="${CC_FOR_BUILD-$CC}"
623 fi
624 AC_MSG_RESULT($CC_FOR_BUILD)
625 AC_ARG_VAR(CC_FOR_BUILD,[build system C compiler])
626
627 # We need to call this macro because other pkg-config macros are
628 # not always used.
629 PKG_PROG_PKG_CONFIG
630
631
632 try_gettext=yes
633 require_iconv=yes
634 have_dosish_system=no
635 have_w32_system=no
636 have_w32ce_system=no
637 have_android_system=no
638 use_simple_gettext=no
639 use_ldapwrapper=yes
640 mmap_needed=yes
641 case "${host}" in
642     *-mingw32*)
643         # special stuff for Windoze NT
644         ac_cv_have_dev_random=no
645         AC_DEFINE(USE_ONLY_8DOT3,1,
646                   [Set this to limit filenames to the 8.3 format])
647         AC_DEFINE(USE_SIMPLE_GETTEXT,1,
648                   [Because the Unix gettext has too much overhead on
649                    MingW32 systems and these systems lack Posix functions,
650                    we use a simplified version of gettext])
651         have_dosish_system=yes
652         have_w32_system=yes
653         require_iconv=no
654         use_ldapwrapper=no  # Fixme: Do this only for CE.
655         case "${host}" in
656           *-mingw32ce*)
657             have_w32ce_system=yes
658             ;;
659           *)
660             AC_DEFINE(HAVE_DRIVE_LETTERS,1,
661                       [Defined if the OS supports drive letters.])
662             ;;
663         esac
664         try_gettext="no"
665         use_simple_gettext=yes
666         mmap_needed=no
667         ;;
668     i?86-emx-os2 | i?86-*-os2*emx )
669         # OS/2 with the EMX environment
670         ac_cv_have_dev_random=no
671         AC_DEFINE(HAVE_DRIVE_LETTERS)
672         have_dosish_system=yes
673         try_gettext="no"
674         ;;
675
676     i?86-*-msdosdjgpp*)
677         # DOS with the DJGPP environment
678         ac_cv_have_dev_random=no
679         AC_DEFINE(HAVE_DRIVE_LETTERS)
680         have_dosish_system=yes
681         try_gettext="no"
682         ;;
683
684     *-*-hpux*)
685         if test -z "$GCC" ; then
686             CFLAGS="-Ae -D_HPUX_SOURCE $CFLAGS"
687         fi
688         ;;
689     *-dec-osf4*)
690         if test -z "$GCC" ; then
691             # Suppress all warnings
692             # to get rid of the unsigned/signed char mismatch warnings.
693             CFLAGS="-w $CFLAGS"
694         fi
695         ;;
696     *-dec-osf5*)
697         if test -z "$GCC" ; then
698             # Use the newer compiler `-msg_disable ptrmismatch1' to
699             # get rid of the unsigned/signed char mismatch warnings.
700             # Using this may hide other pointer mismatch warnings, but
701             # it at least lets other warning classes through
702             CFLAGS="-msg_disable ptrmismatch1 $CFLAGS"
703         fi
704         ;;
705     m68k-atari-mint)
706         ;;
707     *-linux-android*)
708         have_android_system=yes
709         # Android is fully utf-8 and we do not want to use iconv to
710         # keeps things simple
711         require_iconv=no
712         ;;
713     *-apple-darwin*)
714         AC_DEFINE(_DARWIN_C_SOURCE, 900000L,
715                   Expose all libc features (__DARWIN_C_FULL).)
716         ;;
717     *)
718        ;;
719 esac
720
721 if test "$have_dosish_system" = yes; then
722    AC_DEFINE(HAVE_DOSISH_SYSTEM,1,
723              [Defined if we run on some of the PCDOS like systems
724               (DOS, Windoze. OS/2) with special properties like
725               no file modes, case insensitive file names and preferred
726               use of backslashes as directory name separators.])
727 fi
728 AM_CONDITIONAL(HAVE_DOSISH_SYSTEM, test "$have_dosish_system" = yes)
729
730 AM_CONDITIONAL(USE_SIMPLE_GETTEXT, test x"$use_simple_gettext" = xyes)
731
732 if test "$have_w32_system" = yes; then
733    AC_DEFINE(HAVE_W32_SYSTEM,1, [Defined if we run on a W32 API based system])
734    if test "$have_w32ce_system" = yes; then
735       AC_DEFINE(HAVE_W32CE_SYSTEM,1,[Defined if we run on WindowsCE])
736    fi
737 fi
738 AM_CONDITIONAL(HAVE_W32_SYSTEM, test "$have_w32_system" = yes)
739 AM_CONDITIONAL(HAVE_W32CE_SYSTEM, test "$have_w32ce_system" = yes)
740
741 if test "$have_android_system" = yes; then
742    AC_DEFINE(HAVE_ANDROID_SYSTEM,1, [Defined if we build for an Android system])
743 fi
744 AM_CONDITIONAL(HAVE_ANDROID_SYSTEM, test "$have_android_system" = yes)
745
746
747 # (These need to go after AC_PROG_CC so that $EXEEXT is defined)
748 AC_DEFINE_UNQUOTED(EXEEXT,"$EXEEXT",[The executable file extension, if any])
749
750
751 #
752 # Checks for libraries.
753 #
754 AC_MSG_NOTICE([checking for libraries])
755
756
757 #
758 # libgpg-error is a library with error codes shared between GnuPG
759 # related projects.
760 #
761 AM_PATH_GPG_ERROR("$NEED_GPG_ERROR_VERSION",
762                   have_gpg_error=yes,have_gpg_error=no)
763
764
765 #
766 # Libgcrypt is our generic crypto library
767 #
768 AM_PATH_LIBGCRYPT("$NEED_LIBGCRYPT_API:$NEED_LIBGCRYPT_VERSION",
769         have_libgcrypt=yes,have_libgcrypt=no)
770
771
772 #
773 # libassuan is used for IPC
774 #
775 AM_PATH_LIBASSUAN("$NEED_LIBASSUAN_API:$NEED_LIBASSUAN_VERSION",
776                   have_libassuan=yes,have_libassuan=no)
777 if test "$have_libassuan" = "yes"; then
778   AC_DEFINE_UNQUOTED(GNUPG_LIBASSUAN_VERSION, "$libassuan_version",
779                      [version of the libassuan library])
780   show_tor_support="only .onion"
781 fi
782
783
784 #
785 # libksba is our X.509 support library
786 #
787 AM_PATH_KSBA("$NEED_KSBA_API:$NEED_KSBA_VERSION",have_ksba=yes,have_ksba=no)
788
789
790 #
791 # libusb allows us to use the integrated CCID smartcard reader driver.
792 #
793 # FiXME: Use GNUPG_CHECK_LIBUSB and modify to use separate AC_SUBSTs.
794 if test "$use_ccid_driver" = auto || test "$use_ccid_driver" = yes; then
795    case "${host}" in
796      *-mingw32*)
797        LIBUSB_NAME=
798        LIBUSB_LIBS=
799        LIBUSB_CPPFLAGS=
800        ;;
801      *-*-darwin*)
802        LIBUSB_NAME=usb-1.0
803        LIBUSB_LIBS="-Wl,-framework,CoreFoundation -Wl,-framework,IOKit"
804        ;;
805      *-*-freebsd*)
806        # FreeBSD has a native 1.0 compatible library by -lusb.
807        LIBUSB_NAME=usb
808        LIBUSB_LIBS=
809        ;;
810      *)
811        LIBUSB_NAME=usb-1.0
812        LIBUSB_LIBS=
813        ;;
814    esac
815 fi
816 if test x"$LIBUSB_NAME" != x ; then
817    AC_CHECK_LIB($LIBUSB_NAME, libusb_init,
818                 [ LIBUSB_LIBS="-l$LIBUSB_NAME $LIBUSB_LIBS"
819                   have_libusb=yes ])
820    AC_MSG_CHECKING([libusb include dir])
821    usb_incdir_found="no"
822    for _incdir in "" "/usr/include/libusb-1.0" "/usr/local/include/libusb-1.0"; do
823      _libusb_save_cppflags=$CPPFLAGS
824      if test -n "${_incdir}"; then
825        CPPFLAGS="-I${_incdir} ${CPPFLAGS}"
826      fi
827      AC_PREPROC_IFELSE([AC_LANG_SOURCE([[@%:@include <libusb.h>]])],
828      [usb_incdir=${_incdir}; usb_incdir_found="yes"], [])
829      CPPFLAGS=${_libusb_save_cppflags}
830      if test "$usb_incdir_found" = "yes"; then
831        break
832      fi
833    done
834    if test "$usb_incdir_found" = "yes"; then
835      AC_MSG_RESULT([${usb_incdir}])
836    else
837      AC_MSG_RESULT([not found])
838      usb_incdir=""
839      have_libusb=no
840      if test "$use_ccid_driver" != yes; then
841        use_ccid_driver=no
842      fi
843      LIBUSB_LIBS=""
844    fi
845
846    if test "$have_libusb" = yes; then
847      AC_DEFINE(HAVE_LIBUSB,1, [defined if libusb is available])
848    fi
849    if test x"$usb_incdir" = x; then
850      LIBUSB_CPPFLAGS=""
851    else
852      LIBUSB_CPPFLAGS="-I${usb_incdir}"
853    fi
854 fi
855 AC_SUBST(LIBUSB_LIBS)
856 AC_SUBST(LIBUSB_CPPFLAGS)
857
858 #
859 # Check whether it is necessary to link against libdl.
860 # (For example to load libpcsclite)
861 #
862 gnupg_dlopen_save_libs="$LIBS"
863 LIBS=""
864 AC_SEARCH_LIBS(dlopen, c dl,,,)
865 DL_LIBS=$LIBS
866 AC_SUBST(DL_LIBS)
867 LIBS="$gnupg_dlopen_save_libs"
868
869
870 # Checks for g10
871
872 AC_ARG_ENABLE(sqlite,
873                 AC_HELP_STRING([--disable-sqlite],
874                                [disable the use of SQLITE]),
875               try_sqlite=$enableval, try_sqlite=yes)
876
877 if test x"$use_tofu" = xyes ; then
878   if test x"$try_sqlite" = xyes ; then
879     PKG_CHECK_MODULES([SQLITE3], [sqlite3 >= $NEED_SQLITE_VERSION],
880                                  [have_sqlite=yes],
881                                  [have_sqlite=no])
882   fi
883   if test "$have_sqlite" = "yes"; then
884     :
885     AC_SUBST([SQLITE3_CFLAGS])
886     AC_SUBST([SQLITE3_LIBS])
887   else
888     use_tofu=no
889     tmp=$(echo "$SQLITE3_PKG_ERRORS" | tr '\n' '\v' | sed 's/\v/\n*** /g')
890     AC_MSG_WARN([[
891 ***
892 *** Building without SQLite support - TOFU disabled
893 ***
894 *** $tmp]])
895   fi
896 fi
897
898 AM_CONDITIONAL(SQLITE3, test "$have_sqlite" = "yes")
899
900 if test x"$use_tofu" = xyes ; then
901     AC_DEFINE(USE_TOFU, 1, [Enable to build the TOFU code])
902 fi
903
904
905 # Checks for g13
906
907 AC_PATH_PROG(ENCFS, encfs, /usr/bin/encfs)
908 AC_DEFINE_UNQUOTED(ENCFS,
909         "${ENCFS}", [defines the filename of the encfs program])
910
911 AC_PATH_PROG(FUSERMOUNT, fusermount, /usr/bin/fusermount)
912 AC_DEFINE_UNQUOTED(FUSERMOUNT,
913         "${FUSERMOUNT}", [defines the filename of the fusermount program])
914
915
916 # Checks for dirmngr
917
918
919 #
920 # Checks for symcryptrun:
921 #
922
923 # libutil has openpty() and login_tty().
924 AC_CHECK_LIB(util, openpty,
925               [ LIBUTIL_LIBS="$LIBUTIL_LIBS -lutil"
926                 AC_DEFINE(HAVE_LIBUTIL,1,
927                          [defined if libutil is available])
928              ])
929 AC_SUBST(LIBUTIL_LIBS)
930
931 # shred is used to clean temporary plain text files.
932 AC_PATH_PROG(SHRED, shred, /usr/bin/shred)
933 AC_DEFINE_UNQUOTED(SHRED,
934         "${SHRED}", [defines the filename of the shred program])
935
936
937 #
938 # Check whether the nPth library is available
939 #
940 AM_PATH_NPTH("$NEED_NPTH_API:$NEED_NPTH_VERSION",have_npth=yes,have_npth=no)
941 if test "$have_npth" = "yes"; then
942   AC_DEFINE(HAVE_NPTH, 1,
943               [Defined if the New Portable Thread Library is available])
944   AC_DEFINE(USE_NPTH, 1,
945               [Defined if support for nPth is requested and nPth is available])
946 else
947   AC_MSG_WARN([[
948 ***
949 *** To support concurrent access for example in gpg-agent and the SCdaemon
950 *** we need the support of the New Portable Threads Library.
951 ***]])
952 fi
953
954
955 #
956 # NTBTLS is our TLS library.  If it is not available fallback to
957 # GNUTLS.
958 #
959 AC_ARG_ENABLE(ntbtls,
960               AC_HELP_STRING([--disable-ntbtls],
961                              [disable the use of NTBTLS as TLS library]),
962               try_ntbtls=$enableval, try_ntbtls=yes)
963 if test x"$try_ntbtls" = xyes ; then
964   AM_PATH_NTBTLS("$NEED_NTBTLS_API:$NEED_NTBTLS_VERSION",
965                  [have_ntbtls=yes],[have_ntbtls=no])
966 fi
967 if test "$have_ntbtls" = yes ; then
968    use_tls_library=ntbtls
969    AC_DEFINE(HTTP_USE_NTBTLS, 1, [Enable NTBTLS support in http.c])
970 else
971   AC_ARG_ENABLE(gnutls,
972                 AC_HELP_STRING([--disable-gnutls],
973                                [disable GNUTLS as fallback TLS library]),
974                 try_gnutls=$enableval, try_gnutls=yes)
975   if test x"$try_gnutls" = xyes ; then
976     PKG_CHECK_MODULES([LIBGNUTLS], [gnutls >= $NEED_GNUTLS_VERSION],
977                                    [have_gnutls=yes],
978                                    [have_gnutls=no])
979   fi
980   if test "$have_gnutls" = "yes"; then
981     AC_SUBST([LIBGNUTLS_CFLAGS])
982     AC_SUBST([LIBGNUTLS_LIBS])
983     use_tls_library=gnutls
984     AC_DEFINE(HTTP_USE_GNUTLS, 1, [Enable GNUTLS support in http.c])
985   else
986     tmp=$(echo "$LIBGNUTLS_PKG_ERRORS" | tr '\n' '\v' | sed 's/\v/\n*** /g')
987     AC_MSG_WARN([[
988 ***
989 *** Building without NTBTLS and GNUTLS - no TLS access to keyservers.
990 ***
991 *** $tmp]])
992   fi
993 fi
994
995 #
996 # Allow to set a fixed trust store file for system provided certificates.
997 #
998 AC_ARG_WITH([default-trust-store-file],
999             [AC_HELP_STRING([--with-default-trust-store-file=FILE],
1000                             [Use FILE as system trust store])],
1001             default_trust_store_file="$withval",
1002             default_trust_store_file="")
1003 if test x"$default_trust_store_file" = xno;then
1004   default_trust_store_file=""
1005 fi
1006 if test x"$default_trust_store_file" != x ; then
1007   AC_DEFINE_UNQUOTED([DEFAULT_TRUST_STORE_FILE],
1008     ["$default_trust_store_file"], [Use as default system trust store file])
1009 fi
1010
1011
1012 AC_MSG_NOTICE([checking for networking options])
1013
1014 #
1015 # Must check for network library requirements before doing link tests
1016 # for ldap, for example. If ldap libs are static (or dynamic and without
1017 # ELF runtime link paths), then link will fail and LDAP support won't
1018 # be detected.
1019 #
1020 AC_CHECK_FUNC(gethostbyname, , AC_CHECK_LIB(nsl, gethostbyname,
1021         [NETLIBS="-lnsl $NETLIBS"]))
1022 AC_CHECK_FUNC(setsockopt, , AC_CHECK_LIB(socket, setsockopt,
1023         [NETLIBS="-lsocket $NETLIBS"]))
1024
1025
1026 #
1027 # Check standard resolver functions.
1028 #
1029 if test "$build_dirmngr" = "yes"; then
1030   _dns_save_libs=$LIBS
1031   LIBS=""
1032
1033   # Find the system resolver which can always be enabled with
1034   # the dirmngr option --standard-resolver.
1035
1036   # the double underscore thing is a glibc-ism?
1037   AC_SEARCH_LIBS(res_query,resolv bind,,
1038                  AC_SEARCH_LIBS(__res_query,resolv bind,,have_resolver=no))
1039   AC_SEARCH_LIBS(dn_expand,resolv bind,,
1040                  AC_SEARCH_LIBS(__dn_expand,resolv bind,,have_resolver=no))
1041
1042   # macOS renames dn_skipname into res_9_dn_skipname in <resolv.h>,
1043   # and for some reason fools us into believing we don't need
1044   # -lresolv even if we do.  Since the test program checking for the
1045   # symbol does not include <resolv.h>, we need to check for the
1046   # renamed symbol explicitly.
1047   AC_SEARCH_LIBS(res_9_dn_skipname,resolv bind,,
1048       AC_SEARCH_LIBS(dn_skipname,resolv bind,,
1049           AC_SEARCH_LIBS(__dn_skipname,resolv bind,,have_resolver=no)))
1050
1051   if test x"$have_resolver" != xno ; then
1052
1053       # Make sure that the BIND 4 resolver interface is workable before
1054       # enabling any code that calls it.  At some point I'll rewrite the
1055       # code to use the BIND 8 resolver API.
1056       # We might also want to use libdns instead.
1057
1058     AC_MSG_CHECKING([whether the resolver is usable])
1059     AC_LINK_IFELSE([AC_LANG_PROGRAM([[#include <sys/types.h>
1060 #include <netinet/in.h>
1061 #include <arpa/nameser.h>
1062 #include <resolv.h>]],
1063 [[unsigned char answer[PACKETSZ];
1064   res_query("foo.bar",C_IN,T_A,answer,PACKETSZ);
1065   dn_skipname(0,0);
1066   dn_expand(0,0,0,0,0);
1067 ]])],have_resolver=yes,have_resolver=no)
1068     AC_MSG_RESULT($have_resolver)
1069
1070     # This is Apple-specific and somewhat bizarre as they changed the
1071     # define in bind 8 for some reason.
1072
1073     if test x"$have_resolver" != xyes ; then
1074       AC_MSG_CHECKING(
1075            [whether I can make the resolver usable with BIND_8_COMPAT])
1076       AC_LINK_IFELSE([AC_LANG_PROGRAM([[#define BIND_8_COMPAT
1077 #include <sys/types.h>
1078 #include <netinet/in.h>
1079 #include <arpa/nameser.h>
1080 #include <resolv.h>]],
1081 [[unsigned char answer[PACKETSZ];
1082   res_query("foo.bar",C_IN,T_A,answer,PACKETSZ);
1083   dn_skipname(0,0); dn_expand(0,0,0,0,0);
1084 ]])],[have_resolver=yes ; need_compat=yes])
1085       AC_MSG_RESULT($have_resolver)
1086     fi
1087   fi
1088
1089   if test x"$have_resolver" = xyes ; then
1090     AC_DEFINE(HAVE_SYSTEM_RESOLVER,1,[The system's resolver is usable.])
1091     DNSLIBS="$DNSLIBS $LIBS"
1092     if test x"$need_compat" = xyes ; then
1093       AC_DEFINE(BIND_8_COMPAT,1,[an Apple OSXism])
1094     fi
1095     if test "$use_libdns" = yes; then
1096      show_tor_support=yes
1097     fi
1098   elif test "$use_libdns" = yes; then
1099     show_tor_support=yes
1100   else
1101     AC_MSG_WARN([[
1102 ***
1103 *** The system's DNS resolver is not usable.
1104 *** Dirmngr functionality is limited.
1105 ***]])
1106     show_tor_support="${show_tor_support} (no system resolver)"
1107   fi
1108
1109   if test "$have_w32_system" = yes; then
1110     if test "$use_libdns" = yes; then
1111       DNSLIBS="$DNSLIBS -liphlpapi"
1112     fi
1113   fi
1114
1115   LIBS=$_dns_save_libs
1116 fi
1117
1118 AC_SUBST(DNSLIBS)
1119
1120
1121 #
1122 # Check for LDAP
1123 #
1124 # Note that running the check changes the variable
1125 # gnupg_have_ldap from "n/a" to "no" or "yes".
1126
1127 AC_ARG_ENABLE(ldap,
1128     AC_HELP_STRING([--disable-ldap],[disable LDAP support]),
1129     [if test "$enableval" = "no"; then gnupg_have_ldap=no; fi])
1130
1131 if test "$gnupg_have_ldap" != "no" ; then
1132   if test "$build_dirmngr" = "yes" ; then
1133      GNUPG_CHECK_LDAP($NETLIBS)
1134      AC_CHECK_LIB(lber, ber_free,
1135                   [ LBER_LIBS="$LBER_LIBS -llber"
1136                     AC_DEFINE(HAVE_LBER,1,
1137                              [defined if liblber is available])
1138                     have_lber=yes
1139                  ])
1140   fi
1141 fi
1142 AC_SUBST(LBER_LIBS)
1143 if test "$gnupg_have_ldap" = "no"; then
1144     AC_MSG_WARN([[
1145 ***
1146 *** Building without LDAP support.
1147 *** No CRL access or X.509 certificate search available.
1148 ***]])
1149 fi
1150
1151 AM_CONDITIONAL(USE_LDAP, [test "$gnupg_have_ldap" = yes])
1152 if test "$gnupg_have_ldap" = yes ; then
1153   AC_DEFINE(USE_LDAP,1,[Defined if LDAP is support])
1154 else
1155  use_ldapwrapper=no
1156 fi
1157
1158 if test "$use_ldapwrapper" = yes; then
1159    AC_DEFINE(USE_LDAPWRAPPER,1, [Build dirmngr with LDAP wrapper process])
1160 fi
1161 AM_CONDITIONAL(USE_LDAPWRAPPER, test "$use_ldapwrapper" = yes)
1162
1163
1164
1165
1166 #
1167 # Check for sendmail
1168 #
1169 # This isn't necessarily sendmail itself, but anything that gives a
1170 # sendmail-ish interface to the outside world.  That includes Exim,
1171 # Postfix, etc.  Basically, anything that can handle "sendmail -t".
1172 AC_ARG_WITH(mailprog,
1173       AC_HELP_STRING([--with-mailprog=NAME],
1174                      [use "NAME -t" for mail transport]),
1175              ,with_mailprog=yes)
1176 if test x"$with_mailprog" = xyes ; then
1177     AC_PATH_PROG(SENDMAIL,sendmail,,$PATH:/usr/sbin:/usr/libexec:/usr/lib)
1178 elif test x"$with_mailprog" != xno ; then
1179     AC_MSG_CHECKING([for a mail transport program])
1180     AC_SUBST(SENDMAIL,$with_mailprog)
1181     AC_MSG_RESULT($with_mailprog)
1182 fi
1183
1184
1185 #
1186 # Construct a printable name of the OS
1187 #
1188 case "${host}" in
1189     *-mingw32ce*)
1190         PRINTABLE_OS_NAME="W32CE"
1191         ;;
1192     *-mingw32*)
1193         PRINTABLE_OS_NAME="MingW32"
1194         ;;
1195     *-*-cygwin*)
1196         PRINTABLE_OS_NAME="Cygwin"
1197         ;;
1198     i?86-emx-os2 | i?86-*-os2*emx )
1199         PRINTABLE_OS_NAME="OS/2"
1200         ;;
1201     i?86-*-msdosdjgpp*)
1202         PRINTABLE_OS_NAME="MSDOS/DJGPP"
1203         try_dynload=no
1204         ;;
1205     *-linux*)
1206         PRINTABLE_OS_NAME="GNU/Linux"
1207         ;;
1208     *)
1209         PRINTABLE_OS_NAME=`uname -s || echo "Unknown"`
1210         ;;
1211 esac
1212 AC_DEFINE_UNQUOTED(PRINTABLE_OS_NAME, "$PRINTABLE_OS_NAME",
1213                    [A human readable text with the name of the OS])
1214
1215
1216 #
1217 # Checking for iconv
1218 #
1219 if test "$require_iconv" = yes; then
1220   AM_ICONV
1221 else
1222   LIBICONV=
1223   LTLIBICONV=
1224   AC_SUBST(LIBICONV)
1225   AC_SUBST(LTLIBICONV)
1226 fi
1227
1228
1229 #
1230 # Check for gettext
1231 #
1232 # This is "GNU gnupg" - The project-id script from gettext
1233 #                       needs this string
1234 #
1235 AC_MSG_NOTICE([checking for gettext])
1236 AM_PO_SUBDIRS
1237 AM_GNU_GETTEXT_VERSION([0.17])
1238 if test "$try_gettext" = yes; then
1239   AM_GNU_GETTEXT([external],[need-ngettext])
1240
1241   # gettext requires some extra checks.  These really should be part of
1242   # the basic AM_GNU_GETTEXT macro.  TODO: move other gettext-specific
1243   # function checks to here.
1244
1245   AC_CHECK_FUNCS(strchr)
1246 else
1247   USE_NLS=no
1248   USE_INCLUDED_LIBINTL=no
1249   BUILD_INCLUDED_LIBINTL=no
1250   POSUB=po
1251   AC_SUBST(USE_NLS)
1252   AC_SUBST(USE_INCLUDED_LIBINTL)
1253   AC_SUBST(BUILD_INCLUDED_LIBINTL)
1254   AC_SUBST(POSUB)
1255 fi
1256
1257 # We use HAVE_LANGINFO_CODESET in a couple of places.
1258 AM_LANGINFO_CODESET
1259
1260 # Checks required for our use of locales
1261 gt_LC_MESSAGES
1262
1263
1264 #
1265 # SELinux support
1266 #
1267 if test "$selinux_support" = yes ; then
1268   AC_DEFINE(ENABLE_SELINUX_HACKS,1,[Define to enable SELinux support])
1269 fi
1270
1271
1272 #
1273 # Checks for header files.
1274 #
1275 AC_MSG_NOTICE([checking for header files])
1276 AC_HEADER_STDC
1277 AC_CHECK_HEADERS([string.h unistd.h langinfo.h termio.h locale.h getopt.h \
1278                   pty.h utmp.h pwd.h inttypes.h signal.h sys/select.h     \
1279                   stdint.h signal.h util.h libutil.h termios.h \
1280                   ucred.h sys/sysmacros.h sys/mkdev.h])
1281
1282 AC_HEADER_TIME
1283
1284
1285 #
1286 # Checks for typedefs, structures, and compiler characteristics.
1287 #
1288 AC_MSG_NOTICE([checking for system characteristics])
1289 AC_C_CONST
1290 AC_C_INLINE
1291 AC_C_VOLATILE
1292 AC_TYPE_SIZE_T
1293 AC_TYPE_MODE_T
1294 AC_TYPE_SIGNAL
1295 AC_DECL_SYS_SIGLIST
1296
1297 gl_HEADER_SYS_SOCKET
1298 gl_TYPE_SOCKLEN_T
1299
1300 AC_SEARCH_LIBS([inet_addr], [nsl])
1301
1302 AC_ARG_ENABLE(endian-check,
1303               AC_HELP_STRING([--disable-endian-check],
1304               [disable the endian check and trust the OS provided macros]),
1305               endiancheck=$enableval,endiancheck=yes)
1306
1307 if test x"$endiancheck" = xyes ; then
1308   GNUPG_CHECK_ENDIAN
1309 fi
1310
1311 # fixme: we should get rid of the byte type
1312 GNUPG_CHECK_TYPEDEF(byte, HAVE_BYTE_TYPEDEF)
1313 GNUPG_CHECK_TYPEDEF(ushort, HAVE_USHORT_TYPEDEF)
1314 GNUPG_CHECK_TYPEDEF(ulong, HAVE_ULONG_TYPEDEF)
1315 GNUPG_CHECK_TYPEDEF(u16, HAVE_U16_TYPEDEF)
1316 GNUPG_CHECK_TYPEDEF(u32, HAVE_U32_TYPEDEF)
1317
1318 AC_CHECK_SIZEOF(unsigned short)
1319 AC_CHECK_SIZEOF(unsigned int)
1320 AC_CHECK_SIZEOF(unsigned long)
1321 AC_CHECK_SIZEOF(unsigned long long)
1322 AC_HEADER_TIME
1323 AC_CHECK_SIZEOF(time_t,,[[
1324 #include <stdio.h>
1325 #if TIME_WITH_SYS_TIME
1326 # include <sys/time.h>
1327 # include <time.h>
1328 #else
1329 # if HAVE_SYS_TIME_H
1330 #  include <sys/time.h>
1331 # else
1332 #  include <time.h>
1333 # endif
1334 #endif
1335 ]])
1336 GNUPG_TIME_T_UNSIGNED
1337
1338
1339 if test "$ac_cv_sizeof_unsigned_short" = "0" \
1340    || test "$ac_cv_sizeof_unsigned_int" = "0" \
1341    || test "$ac_cv_sizeof_unsigned_long" = "0"; then
1342     AC_MSG_WARN([Hmmm, something is wrong with the sizes - using defaults]);
1343 fi
1344
1345
1346 #
1347 # Checks for library functions.
1348 #
1349 AC_MSG_NOTICE([checking for library functions])
1350 AC_CHECK_DECLS(getpagesize)
1351 AC_FUNC_FSEEKO
1352 AC_FUNC_VPRINTF
1353 AC_FUNC_FORK
1354 AC_CHECK_FUNCS([strerror strlwr tcgetattr mmap canonicalize_file_name])
1355 AC_CHECK_FUNCS([strcasecmp strncasecmp ctermid times gmtime_r strtoull])
1356 AC_CHECK_FUNCS([setenv unsetenv fcntl ftruncate inet_ntop])
1357 AC_CHECK_FUNCS([canonicalize_file_name])
1358 AC_CHECK_FUNCS([gettimeofday getrusage getrlimit setrlimit clock_gettime])
1359 AC_CHECK_FUNCS([atexit raise getpagesize strftime nl_langinfo setlocale])
1360 AC_CHECK_FUNCS([waitpid wait4 sigaction sigprocmask pipe getaddrinfo])
1361 AC_CHECK_FUNCS([ttyname rand ftello fsync stat lstat])
1362 AC_CHECK_FUNCS([memicmp stpcpy strsep strlwr strtoul memmove stricmp strtol \
1363                 memrchr isascii timegm getrusage setrlimit stat setlocale   \
1364                 flockfile funlockfile getpwnam getpwuid \
1365                 getenv inet_pton strpbrk])
1366
1367 # On some systems (e.g. Solaris) nanosleep requires linking to librl.
1368 # Given that we use nanosleep only as an optimization over a select
1369 # based wait function we want it only if it is available in libc.
1370 _save_libs="$LIBS"
1371 AC_SEARCH_LIBS([nanosleep], [],
1372                [AC_DEFINE(HAVE_NANOSLEEP,1,
1373                 [Define to 1 if you have the `nanosleep' function in libc.])])
1374 LIBS="$_save_libs"
1375
1376
1377 # See whether libc supports the Linux inotify interface
1378 case "${host}" in
1379     *-*-linux*)
1380         AC_CHECK_FUNCS([inotify_init])
1381         ;;
1382 esac
1383
1384
1385 if test "$have_android_system" = yes; then
1386    # On Android ttyname is a stub but prints an error message.
1387    AC_DEFINE(HAVE_BROKEN_TTYNAME,1,
1388              [Defined if ttyname does not work properly])
1389 fi
1390
1391 AC_CHECK_TYPES([struct sigaction, sigset_t],,,[#include <signal.h>])
1392
1393 # Dirmngr requires mmap on Unix systems.
1394 if test $ac_cv_func_mmap != yes -a $mmap_needed = yes; then
1395   AC_MSG_ERROR([[Sorry, the current implementation requires mmap.]])
1396 fi
1397
1398
1399 #
1400 # Check for the getsockopt SO_PEERCRED, etc.
1401 #
1402 AC_CHECK_MEMBERS([struct ucred.pid, struct ucred.cr_pid, struct sockpeercred.pid], [], [], [#include <sys/types.h>
1403 #include <sys/socket.h> ])
1404
1405 # (Open)Solaris
1406 AC_CHECK_FUNCS([getpeerucred])
1407
1408
1409 #
1410 # W32 specific test
1411 #
1412 GNUPG_FUNC_MKDIR_TAKES_ONE_ARG
1413
1414 #
1415 # Sanity check regex.  Tests adapted from mutt.
1416 #
1417 AC_MSG_CHECKING([whether regular expression support is requested])
1418 AC_ARG_ENABLE(regex,
1419   AC_HELP_STRING([--disable-regex],
1420     [do not handle regular expressions in trust signatures]),
1421   use_regex=$enableval, use_regex=yes)
1422 AC_MSG_RESULT($use_regex)
1423
1424 if test "$use_regex" = yes ; then
1425   _cppflags="${CPPFLAGS}"
1426   _ldflags="${LDFLAGS}"
1427   AC_ARG_WITH(regex,
1428      AC_HELP_STRING([--with-regex=DIR],[look for regex in DIR]),
1429       [
1430       if test -d "$withval" ; then
1431         CPPFLAGS="${CPPFLAGS} -I$withval/include"
1432         LDFLAGS="${LDFLAGS} -L$withval/lib"
1433       fi
1434       ],withval="")
1435
1436   # Does the system have regex functions at all?
1437   AC_SEARCH_LIBS([regcomp], [regex])
1438   AC_CHECK_FUNC(regcomp, gnupg_cv_have_regex=yes, gnupg_cv_have_regex=no)
1439
1440   if test $gnupg_cv_have_regex = no; then
1441     use_regex=no
1442   else
1443     if test x"$cross_compiling" = xyes; then
1444       AC_MSG_WARN([cross compiling; assuming regexp libray is not broken])
1445     else
1446       AC_CACHE_CHECK([whether your system's regexp library is broken],
1447        [gnupg_cv_regex_broken],
1448        AC_TRY_RUN([
1449 #include <unistd.h>
1450 #include <regex.h>
1451 main() { regex_t blah ; regmatch_t p; p.rm_eo = p.rm_eo; return regcomp(&blah, "foo.*bar", REG_NOSUB) || regexec (&blah, "foobar", 0, NULL, 0); }],
1452        gnupg_cv_regex_broken=no, gnupg_cv_regex_broken=yes, gnupg_cv_regex_broken=yes))
1453
1454       if test $gnupg_cv_regex_broken = yes; then
1455         AC_MSG_WARN([your regex is broken - disabling regex use])
1456         use_regex=no
1457       fi
1458     fi
1459   fi
1460   CPPFLAGS="${_cppflags}"
1461   LDFLAGS="${_ldflags}"
1462 fi
1463
1464 if test "$use_regex" != yes ; then
1465   AC_DEFINE(DISABLE_REGEX,1, [Define to disable regular expression support])
1466 fi
1467 AM_CONDITIONAL(DISABLE_REGEX, test x"$use_regex" != xyes)
1468
1469
1470
1471 #
1472 # Do we have zlib? Must do it here because Solaris failed
1473 # when compiling a conftest (due to the "-lz" from LIBS).
1474 # Note that we combine zlib and bzlib2 in ZLIBS.
1475 #
1476 if test "$use_zip" = yes ; then
1477   _cppflags="${CPPFLAGS}"
1478   _ldflags="${LDFLAGS}"
1479   AC_ARG_WITH(zlib,
1480     [  --with-zlib=DIR         use libz in DIR],[
1481       if test -d "$withval"; then
1482         CPPFLAGS="${CPPFLAGS} -I$withval/include"
1483         LDFLAGS="${LDFLAGS} -L$withval/lib"
1484       fi
1485     ])
1486
1487   AC_CHECK_HEADER(zlib.h,
1488      AC_CHECK_LIB(z, deflateInit2_,
1489        [
1490        ZLIBS="-lz"
1491        AC_DEFINE(HAVE_ZIP,1, [Defined if ZIP and ZLIB are supported])
1492        ],
1493        CPPFLAGS=${_cppflags} LDFLAGS=${_ldflags}),
1494        CPPFLAGS=${_cppflags} LDFLAGS=${_ldflags})
1495 fi
1496
1497
1498 #
1499 # Check whether we can support bzip2
1500 #
1501 if test "$use_bzip2" = yes ; then
1502   _cppflags="${CPPFLAGS}"
1503   _ldflags="${LDFLAGS}"
1504   AC_ARG_WITH(bzip2,
1505      AC_HELP_STRING([--with-bzip2=DIR],[look for bzip2 in DIR]),
1506       [
1507       if test -d "$withval" ; then
1508         CPPFLAGS="${CPPFLAGS} -I$withval/include"
1509         LDFLAGS="${LDFLAGS} -L$withval/lib"
1510       fi
1511       ],withval="")
1512
1513   # Checking alongside stdio.h as an early version of bzip2 (1.0)
1514   # required stdio.h to be included before bzlib.h, and Solaris 9 is
1515   # woefully out of date.
1516   if test "$withval" != no ; then
1517      AC_CHECK_HEADER(bzlib.h,
1518         AC_CHECK_LIB(bz2,BZ2_bzCompressInit,
1519           [
1520           have_bz2=yes
1521           ZLIBS="$ZLIBS -lbz2"
1522           AC_DEFINE(HAVE_BZIP2,1,
1523                   [Defined if the bz2 compression library is available])
1524           ],
1525           CPPFLAGS=${_cppflags} LDFLAGS=${_ldflags}),
1526           CPPFLAGS=${_cppflags} LDFLAGS=${_ldflags},[#include <stdio.h>])
1527   fi
1528 fi
1529 AM_CONDITIONAL(ENABLE_BZIP2_SUPPORT,test x"$have_bz2" = "xyes")
1530 AC_SUBST(ZLIBS)
1531
1532
1533 # Check for readline support
1534 GNUPG_CHECK_READLINE
1535
1536
1537 if test "$development_version" = yes; then
1538     AC_DEFINE(IS_DEVELOPMENT_VERSION,1,
1539             [Defined if this is not a regular release])
1540 fi
1541
1542 if test "$USE_MAINTAINER_MODE" = "yes"; then
1543     AC_DEFINE(MAINTAINER_MODE,1,
1544             [Defined if this build is in maintainer mode])
1545 fi
1546
1547 AM_CONDITIONAL(CROSS_COMPILING, test x$cross_compiling = xyes)
1548
1549 GNUPG_CHECK_GNUMAKE
1550
1551 # Add some extra libs here so that previous tests don't fail for
1552 # mysterious reasons - the final link step should bail out.
1553 # W32SOCKLIBS is also defined so that if can be used for tools not
1554 # requiring any network stuff but linking to code in libcommon which
1555 # tracks in winsock stuff (e.g. init_common_subsystems).
1556 if test "$have_w32_system" = yes; then
1557    if test "$have_w32ce_system" = yes; then
1558      W32SOCKLIBS="-lws2"
1559    else
1560      W32SOCKLIBS="-lws2_32"
1561    fi
1562    NETLIBS="${NETLIBS} ${W32SOCKLIBS}"
1563 fi
1564
1565 AC_SUBST(NETLIBS)
1566 AC_SUBST(W32SOCKLIBS)
1567
1568 #
1569 # Setup gcc specific options
1570 #
1571 USE_C99_CFLAGS=
1572 AC_MSG_NOTICE([checking for cc features])
1573 if test "$GCC" = yes; then
1574     mycflags=
1575     mycflags_save=$CFLAGS
1576
1577     # Check whether gcc does not emit a diagnositc for unknown -Wno-*
1578     # options.  This is the case for gcc >= 4.6
1579     AC_MSG_CHECKING([if gcc ignores unknown -Wno-* options])
1580     AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
1581 #if __GNUC__ < 4 || (__GNUC__ == 4 && __GNUC_MINOR__ < 6 )
1582 #kickerror
1583 #endif]],[])],[_gcc_silent_wno=yes],[_gcc_silent_wno=no])
1584     AC_MSG_RESULT($_gcc_silent_wno)
1585
1586     # Note that it is okay to use CFLAGS here because these are just
1587     # warning options and the user should have a chance of overriding
1588     # them.
1589     if test "$USE_MAINTAINER_MODE" = "yes"; then
1590         mycflags="$mycflags -O3 -Wall -Wcast-align -Wshadow -Wstrict-prototypes"
1591         mycflags="$mycflags -Wformat -Wno-format-y2k -Wformat-security"
1592         if test x"$_gcc_silent_wno" = xyes ; then
1593           _gcc_wopt=yes
1594         else
1595           AC_MSG_CHECKING([if gcc supports -Wno-missing-field-initializers])
1596           CFLAGS="-Wno-missing-field-initializers"
1597           AC_COMPILE_IFELSE([AC_LANG_PROGRAM([],[])],
1598                             [_gcc_wopt=yes],[_gcc_wopt=no])
1599           AC_MSG_RESULT($_gcc_wopt)
1600         fi
1601         if test x"$_gcc_wopt" = xyes ; then
1602           mycflags="$mycflags -W -Wno-sign-compare"
1603           mycflags="$mycflags -Wno-missing-field-initializers"
1604         fi
1605
1606         AC_MSG_CHECKING([if gcc supports -Wdeclaration-after-statement])
1607         CFLAGS="-Wdeclaration-after-statement"
1608         AC_COMPILE_IFELSE([AC_LANG_PROGRAM([],[])],_gcc_wopt=yes,_gcc_wopt=no)
1609         AC_MSG_RESULT($_gcc_wopt)
1610         if test x"$_gcc_wopt" = xyes ; then
1611           mycflags="$mycflags -Wdeclaration-after-statement"
1612         fi
1613
1614         AC_MSG_CHECKING([if gcc supports -Wlogical-op and -Wvla])
1615         CFLAGS="-Wlogical-op -Wvla"
1616         AC_COMPILE_IFELSE([AC_LANG_PROGRAM([],[])],_gcc_wopt=yes,_gcc_wopt=no)
1617         AC_MSG_RESULT($_gcc_wopt)
1618         if test x"$_gcc_wopt" = xyes ; then
1619           mycflags="$mycflags -Wlogical-op -Wvla"
1620         fi
1621
1622     else
1623         mycflags="$mycflags -Wall"
1624     fi
1625
1626     if test x"$_gcc_silent_wno" = xyes ; then
1627       _gcc_psign=yes
1628     else
1629       AC_MSG_CHECKING([if gcc supports -Wno-pointer-sign])
1630       CFLAGS="-Wno-pointer-sign"
1631       AC_COMPILE_IFELSE([AC_LANG_PROGRAM([],[])],
1632                         [_gcc_psign=yes],[_gcc_psign=no])
1633       AC_MSG_RESULT($_gcc_psign)
1634     fi
1635     if test x"$_gcc_psign" = xyes ; then
1636        mycflags="$mycflags -Wno-pointer-sign"
1637     fi
1638
1639     AC_MSG_CHECKING([if gcc supports -Wpointer-arith])
1640     CFLAGS="-Wpointer-arith"
1641     AC_COMPILE_IFELSE([AC_LANG_PROGRAM([],[])],_gcc_psign=yes,_gcc_psign=no)
1642     AC_MSG_RESULT($_gcc_psign)
1643     if test x"$_gcc_psign" = xyes ; then
1644        mycflags="$mycflags -Wpointer-arith"
1645     fi
1646
1647     CFLAGS="$mycflags $mycflags_save"
1648     if test "$use_libdns" = yes; then
1649        # dirmngr/dns.{c,h} require C99 and GNU extensions.  */
1650        USE_C99_CFLAGS="-std=gnu99"
1651     fi
1652 fi
1653
1654 AC_SUBST(USE_C99_CFLAGS)
1655
1656
1657 #
1658 # This is handy for debugging so the compiler doesn't rearrange
1659 # things and eliminate variables.
1660 #
1661 AC_ARG_ENABLE(optimization,
1662    AC_HELP_STRING([--disable-optimization],
1663                   [disable compiler optimization]),
1664                   [if test $enableval = no ; then
1665                       CFLAGS=`echo $CFLAGS | sed s/-O[[1-9]]\ /-O0\ /g`
1666                    fi])
1667
1668 #
1669 # Add -Werror to CFLAGS.  This hack can be used to avoid problems with
1670 # misbehaving autoconf tests in case the user supplied -Werror.
1671 #
1672 AC_ARG_ENABLE(werror,
1673    AC_HELP_STRING([--enable-werror],
1674                   [append -Werror to CFLAGS]),
1675                   [if test $enableval = yes ; then
1676                       CFLAGS="$CFLAGS -Werror"
1677                    fi])
1678
1679 #
1680 # Configure option --enable-all-tests
1681 #
1682 AC_MSG_CHECKING([whether "make check" shall run all tests])
1683 AC_ARG_ENABLE(all-tests,
1684               AC_HELP_STRING([--enable-all-tests],
1685                              [let "make check" run all tests]),
1686               run_all_tests=$enableval, run_all_tests=no)
1687 AC_MSG_RESULT($run_all_tests)
1688 if test "$run_all_tests" = "yes"; then
1689     AC_DEFINE(RUN_ALL_TESTS,1,
1690             [Defined if "make check" shall run all tests])
1691 fi
1692
1693 #
1694 # We do not want support for the GNUPG_BUILDDIR environment variable
1695 # in a released version.  However, our regression tests suite requires
1696 # this and thus we build with support for it during "make distcheck".
1697 # This configure option implements this along with the top Makefile's
1698 # AM_DISTCHECK_CONFIGURE_FLAGS.
1699 #
1700 gnupg_builddir_envvar=no
1701 AC_ARG_ENABLE(gnupg-builddir-envvar,,
1702               gnupg_builddir_envvar=$enableval)
1703 if test x"$gnupg_builddir_envvar" = x"yes"; then
1704    AC_DEFINE(ENABLE_GNUPG_BUILDDIR_ENVVAR, 1,
1705       [This is only used with "make distcheck"])
1706 fi
1707
1708 #
1709 # Decide what to build
1710 #
1711
1712 build_scdaemon_extra=""
1713 if test "$build_scdaemon" = "yes"; then
1714   if test $have_libusb = no; then
1715      build_scdaemon_extra="without internal CCID driver"
1716   fi
1717   if test -n "$build_scdaemon_extra"; then
1718      build_scdaemon_extra="(${build_scdaemon_extra})"
1719   fi
1720 fi
1721
1722
1723 #
1724 # Set variables for use by automake makefiles.
1725 #
1726 AM_CONDITIONAL(BUILD_GPG,         test "$build_gpg" = "yes")
1727 AM_CONDITIONAL(BUILD_GPGSM,       test "$build_gpgsm" = "yes")
1728 AM_CONDITIONAL(BUILD_AGENT,       test "$build_agent" = "yes")
1729 AM_CONDITIONAL(BUILD_SCDAEMON,    test "$build_scdaemon" = "yes")
1730 AM_CONDITIONAL(BUILD_G13,         test "$build_g13" = "yes")
1731 AM_CONDITIONAL(BUILD_DIRMNGR,     test "$build_dirmngr" = "yes")
1732 AM_CONDITIONAL(BUILD_DOC,         test "$build_doc" = "yes")
1733 AM_CONDITIONAL(BUILD_SYMCRYPTRUN, test "$build_symcryptrun" = "yes")
1734 AM_CONDITIONAL(BUILD_GPGTAR,      test "$build_gpgtar" = "yes")
1735 AM_CONDITIONAL(BUILD_WKS_TOOLS,   test "$build_wks_tools" = "yes")
1736
1737 AM_CONDITIONAL(ENABLE_CARD_SUPPORT, test "$card_support" = yes)
1738 AM_CONDITIONAL(NO_TRUST_MODELS,     test "$use_trust_models" = no)
1739 AM_CONDITIONAL(USE_TOFU,            test "$use_tofu" = yes)
1740
1741 #
1742 # Set some defines for use gpgconf.
1743 #
1744 if test "$build_gpg" = yes ; then
1745     AC_DEFINE(BUILD_WITH_GPG,1,[Defined if GPG is to be build])
1746 fi
1747 if test "$build_gpgsm" = yes ; then
1748     AC_DEFINE(BUILD_WITH_GPGSM,1,[Defined if GPGSM is to be build])
1749 fi
1750 if test "$build_agent" = yes ; then
1751     AC_DEFINE(BUILD_WITH_AGENT,1,[Defined if GPG-AGENT is to be build])
1752 fi
1753 if test "$build_scdaemon" = yes ; then
1754     AC_DEFINE(BUILD_WITH_SCDAEMON,1,[Defined if SCDAEMON is to be build])
1755 fi
1756 if test "$build_dirmngr" = yes ; then
1757     AC_DEFINE(BUILD_WITH_DIRMNGR,1,[Defined if DIRMNGR is to be build])
1758 fi
1759 if test "$build_g13" = yes ; then
1760     AC_DEFINE(BUILD_WITH_G13,1,[Defined if G13 is to be build])
1761 fi
1762
1763
1764 #
1765 # Define Name strings
1766 #
1767 AC_DEFINE_UNQUOTED(GNUPG_NAME, "GnuPG", [The name of the project])
1768
1769 AC_DEFINE_UNQUOTED(GPG_NAME, "gpg", [The name of the OpenPGP tool])
1770 AC_DEFINE_UNQUOTED(GPG_DISP_NAME, "GnuPG", [The displayed name of gpg])
1771
1772 AC_DEFINE_UNQUOTED(GPGSM_NAME, "gpgsm", [The name of the S/MIME tool])
1773 AC_DEFINE_UNQUOTED(GPGSM_DISP_NAME, "GPGSM", [The displayed name of gpgsm])
1774
1775 AC_DEFINE_UNQUOTED(GPG_AGENT_NAME, "gpg-agent", [The name of the agent])
1776 AC_DEFINE_UNQUOTED(GPG_AGENT_DISP_NAME, "GPG Agent",
1777                                         [The displayed name of gpg-agent])
1778
1779 AC_DEFINE_UNQUOTED(SCDAEMON_NAME, "scdaemon", [The name of the scdaemon])
1780 AC_DEFINE_UNQUOTED(SCDAEMON_DISP_NAME, "SCDaemon",
1781                                        [The displayed name of scdaemon])
1782
1783 AC_DEFINE_UNQUOTED(DIRMNGR_NAME, "dirmngr", [The name of the dirmngr])
1784 AC_DEFINE_UNQUOTED(DIRMNGR_DISP_NAME, "DirMngr",
1785                                       [The displayed name of dirmngr])
1786
1787 AC_DEFINE_UNQUOTED(G13_NAME, "g13", [The name of the g13 tool])
1788 AC_DEFINE_UNQUOTED(G13_DISP_NAME, "G13", [The displayed name of g13])
1789
1790 AC_DEFINE_UNQUOTED(GPGCONF_NAME, "gpgconf", [The name of the gpgconf tool])
1791 AC_DEFINE_UNQUOTED(GPGCONF_DISP_NAME, "GPGConf",
1792                                       [The displayed name of gpgconf])
1793
1794 AC_DEFINE_UNQUOTED(GPGTAR_NAME, "gpgtar", [The name of the gpgtar tool])
1795
1796 AC_DEFINE_UNQUOTED(GPG_AGENT_SOCK_NAME, "S.gpg-agent",
1797                    [The name of the agent socket])
1798 AC_DEFINE_UNQUOTED(GPG_AGENT_EXTRA_SOCK_NAME, "S.gpg-agent.extra",
1799                    [The name of the agent socket for remote access])
1800 AC_DEFINE_UNQUOTED(GPG_AGENT_BROWSER_SOCK_NAME, "S.gpg-agent.browser",
1801                    [The name of the agent socket for browsers])
1802 AC_DEFINE_UNQUOTED(GPG_AGENT_SSH_SOCK_NAME, "S.gpg-agent.ssh",
1803                    [The name of the agent socket for ssh])
1804 AC_DEFINE_UNQUOTED(DIRMNGR_INFO_NAME, "DIRMNGR_INFO",
1805                    [The name of the dirmngr info envvar])
1806 AC_DEFINE_UNQUOTED(SCDAEMON_SOCK_NAME, "S.scdaemon",
1807                    [The name of the SCdaemon socket])
1808 AC_DEFINE_UNQUOTED(DIRMNGR_SOCK_NAME, "S.dirmngr",
1809                    [The name of the dirmngr socket])
1810 AC_DEFINE_UNQUOTED(DIRMNGR_DEFAULT_KEYSERVER,
1811                    "hkps://hkps.pool.sks-keyservers.net",
1812       [The default keyserver for dirmngr to use, if none is explicitly given])
1813
1814 AC_DEFINE_UNQUOTED(GPGEXT_GPG, "gpg", [The standard binary file suffix])
1815
1816 if test "$have_w32_system" = yes; then
1817   AC_DEFINE_UNQUOTED(GNUPG_REGISTRY_DIR, "\\\\Software\\\\GNU\\\\GnuPG",
1818                      [The directory part of the W32 registry keys])
1819 fi
1820
1821
1822 #
1823 # Provide information about the build.
1824 #
1825 BUILD_REVISION="mym4_revision"
1826 AC_SUBST(BUILD_REVISION)
1827 AC_DEFINE_UNQUOTED(BUILD_REVISION, "$BUILD_REVISION",
1828                    [GIT commit id revision used to build this package])
1829
1830 changequote(,)dnl
1831 BUILD_VERSION=`echo "$VERSION" | sed 's/\([0-9.]*\).*/\1./'`
1832 changequote([,])dnl
1833 BUILD_VERSION="${BUILD_VERSION}mym4_revision_dec"
1834 BUILD_FILEVERSION=`echo "${BUILD_VERSION}" | tr . ,`
1835 AC_SUBST(BUILD_VERSION)
1836 AC_SUBST(BUILD_FILEVERSION)
1837
1838 AC_ARG_ENABLE([build-timestamp],
1839   AC_HELP_STRING([--enable-build-timestamp],
1840                  [set an explicit build timestamp for reproducibility.
1841                   (default is the current time in ISO-8601 format)]),
1842      [if test "$enableval" = "yes"; then
1843         BUILD_TIMESTAMP=`date -u +%Y-%m-%dT%H:%M+0000 2>/dev/null || date`
1844       else
1845         BUILD_TIMESTAMP="$enableval"
1846       fi
1847       BUILD_HOSTNAME="$ac_hostname"],
1848      [BUILD_TIMESTAMP="<none>"
1849       BUILD_HOSTNAME="<anon>"])
1850 AC_SUBST(BUILD_TIMESTAMP)
1851 AC_DEFINE_UNQUOTED(BUILD_TIMESTAMP, "$BUILD_TIMESTAMP",
1852                    [The time this package was configured for a build])
1853 AC_SUBST(BUILD_HOSTNAME)
1854
1855
1856 #
1857 # Print errors here so that they are visible all
1858 # together and the user can acquire them all together.
1859 #
1860 die=no
1861 if test "$have_gpg_error" = "no"; then
1862    die=yes
1863    AC_MSG_NOTICE([[
1864 ***
1865 *** You need libgpg-error to build this program.
1866 **  This library is for example available at
1867 ***   https://gnupg.org/ftp/gcrypt/libgpg-error
1868 *** (at least version $NEED_GPG_ERROR_VERSION is required.)
1869 ***]])
1870 fi
1871 if test "$have_libgcrypt" = "no"; then
1872    die=yes
1873    AC_MSG_NOTICE([[
1874 ***
1875 *** You need libgcrypt to build this program.
1876 **  This library is for example available at
1877 ***   https://gnupg.org/ftp/gcrypt/libgcrypt/
1878 *** (at least version $NEED_LIBGCRYPT_VERSION (API $NEED_LIBGCRYPT_API) is required.)
1879 ***]])
1880 fi
1881 if test "$have_libassuan" = "no"; then
1882    die=yes
1883    AC_MSG_NOTICE([[
1884 ***
1885 *** You need libassuan to build this program.
1886 *** This library is for example available at
1887 ***   https://gnupg.org/ftp/gcrypt/libassuan/
1888 *** (at least version $NEED_LIBASSUAN_VERSION (API $NEED_LIBASSUAN_API) is required).
1889 ***]])
1890 fi
1891 if test "$have_ksba" = "no"; then
1892     die=yes
1893     AC_MSG_NOTICE([[
1894 ***
1895 *** You need libksba to build this program.
1896 *** This library is for example available at
1897 ***   https://gnupg.org/ftp/gcrypt/libksba/
1898 *** (at least version $NEED_KSBA_VERSION using API $NEED_KSBA_API is required).
1899 ***]])
1900 fi
1901 if test "$gnupg_have_ldap" = yes; then
1902   if test "$have_w32ce_system" = yes; then
1903     AC_MSG_NOTICE([[
1904 *** Note that CeGCC might be broken, a package fixing this is:
1905 ***    http://files.kolab.org/local/windows-ce/
1906 ***                           source/wldap32_0.1-mingw32ce.orig.tar.gz
1907 ***                           binary/wldap32-ce-arm-dev_0.1-1_all.deb
1908 ***]])
1909    fi
1910 fi
1911 if test "$have_npth" = "no"; then
1912     die=yes
1913     AC_MSG_NOTICE([[
1914 ***
1915 *** It is now required to build with support for the
1916 *** New Portable Threads Library (nPth). Please install this
1917 *** library first.  The library is for example available at
1918 ***   https://gnupg.org/ftp/gcrypt/npth/
1919 *** (at least version $NEED_NPTH_VERSION (API $NEED_NPTH_API) is required).
1920 ***]])
1921 fi
1922
1923 if test "$require_iconv" = yes; then
1924   if test "$am_func_iconv" != yes; then
1925     die=yes
1926     AC_MSG_NOTICE([[
1927 ***
1928 *** The system does not provide a working iconv function.  Please
1929 *** install a suitable library; for example GNU Libiconv which is
1930 *** available at:
1931 ***   https://ftp.gnu.org/gnu/libiconv/
1932 ***]])
1933   fi
1934 fi
1935
1936 if test "$use_ccid_driver" = yes; then
1937   if test "$have_libusb" != yes; then
1938     die=yes
1939     AC_MSG_NOTICE([[
1940 ***
1941 *** You need libusb to build the internal ccid driver.  Please
1942 *** install a libusb suitable for your system.
1943 ***]])
1944   fi
1945 fi
1946
1947 if test "$die" = "yes"; then
1948     AC_MSG_ERROR([[
1949 ***
1950 *** Required libraries not found. Please consult the above messages
1951 *** and install them before running configure again.
1952 ***]])
1953 fi
1954
1955
1956
1957 AC_CONFIG_FILES([ m4/Makefile
1958 Makefile
1959 po/Makefile.in
1960 common/Makefile
1961 common/w32info-rc.h
1962 kbx/Makefile
1963 g10/Makefile
1964 sm/Makefile
1965 agent/Makefile
1966 scd/Makefile
1967 g13/Makefile
1968 dirmngr/Makefile
1969 tools/gpg-zip
1970 tools/Makefile
1971 doc/Makefile
1972 tests/Makefile
1973 tests/gpgscm/Makefile
1974 tests/openpgp/Makefile
1975 tests/migrations/Makefile
1976 tests/gpgsm/Makefile
1977 tests/gpgme/Makefile
1978 tests/pkits/Makefile
1979 g10/gpg.w32-manifest
1980 ])
1981
1982
1983 AC_OUTPUT
1984
1985
1986 echo "
1987         GnuPG v${VERSION} has been configured as follows:
1988
1989         Revision:  mym4_revision  (mym4_revision_dec)
1990         Platform:  $PRINTABLE_OS_NAME ($host)
1991
1992         OpenPGP:   $build_gpg
1993         S/MIME:    $build_gpgsm
1994         Agent:     $build_agent
1995         Smartcard: $build_scdaemon $build_scdaemon_extra
1996         G13:       $build_g13
1997         Dirmngr:   $build_dirmngr
1998         Gpgtar:    $build_gpgtar
1999         WKS tools: $build_wks_tools
2000
2001         Protect tool:      $show_gnupg_protect_tool_pgm
2002         LDAP wrapper:      $show_gnupg_dirmngr_ldap_pgm
2003         Default agent:     $show_gnupg_agent_pgm
2004         Default pinentry:  $show_gnupg_pinentry_pgm
2005         Default scdaemon:  $show_gnupg_scdaemon_pgm
2006         Default dirmngr:   $show_gnupg_dirmngr_pgm
2007
2008         Dirmngr auto start:  $dirmngr_auto_start
2009         Readline support:    $gnupg_cv_have_readline
2010         LDAP support:        $gnupg_have_ldap
2011         TLS support:         $use_tls_library
2012         TOFU support:        $use_tofu
2013         Tor support:         $show_tor_support
2014 "
2015 if test x"$use_regex" != xyes ; then
2016 echo "
2017         Warning: No regular expression support available.
2018                  OpenPGP trust signatures won't work.
2019                  gpg-check-pattern will not be built.
2020 "
2021 fi
2022 if test "x${gpg_config_script_warn}" != x; then
2023 cat <<G10EOF
2024         Warning: Mismatches between the target platform and the
2025                  to be used libraries have been detected for:
2026                   ${gpg_config_script_warn}
2027                  Please check above for more warning messages.
2028
2029 G10EOF
2030 fi