xref: /freebsd/crypto/openssl/Configure (revision 6574b8ed19b093f0af09501d2c9676c28993cb97)
1:
2eval 'exec perl -S $0 ${1+"$@"}'
3    if $running_under_some_shell;
4##
5##  Configure -- OpenSSL source tree configuration script
6##
7
8require 5.000;
9use strict;
10
11# see INSTALL for instructions.
12
13my $usage="Usage: Configure [no-<cipher> ...] [enable-<cipher> ...] [experimental-<cipher> ...] [-Dxxx] [-lxxx] [-Lxxx] [-fxxx] [-Kxxx] [no-hw-xxx|no-hw] [[no-]threads] [[no-]shared] [[no-]zlib|zlib-dynamic] [no-asm] [no-dso] [no-krb5] [sctp] [386] [--prefix=DIR] [--openssldir=OPENSSLDIR] [--with-xxx[=vvv]] [--test-sanity] os/compiler[:flags]\n";
14
15# Options:
16#
17# --openssldir  install OpenSSL in OPENSSLDIR (Default: DIR/ssl if the
18#               --prefix option is given; /usr/local/ssl otherwise)
19# --prefix      prefix for the OpenSSL include, lib and bin directories
20#               (Default: the OPENSSLDIR directory)
21#
22# --install_prefix  Additional prefix for package builders (empty by
23#               default).  This needn't be set in advance, you can
24#               just as well use "make INSTALL_PREFIX=/whatever install".
25#
26# --with-krb5-dir  Declare where Kerberos 5 lives.  The libraries are expected
27#		to live in the subdirectory lib/ and the header files in
28#		include/.  A value is required.
29# --with-krb5-lib  Declare where the Kerberos 5 libraries live.  A value is
30#		required.
31#		(Default: KRB5_DIR/lib)
32# --with-krb5-include  Declare where the Kerberos 5 header files live.  A
33#		value is required.
34#		(Default: KRB5_DIR/include)
35# --with-krb5-flavor  Declare what flavor of Kerberos 5 is used.  Currently
36#		supported values are "MIT" and "Heimdal".  A value is required.
37#
38# --test-sanity Make a number of sanity checks on the data in this file.
39#               This is a debugging tool for OpenSSL developers.
40#
41# --cross-compile-prefix Add specified prefix to binutils components.
42#
43# no-hw-xxx     do not compile support for specific crypto hardware.
44#               Generic OpenSSL-style methods relating to this support
45#               are always compiled but return NULL if the hardware
46#               support isn't compiled.
47# no-hw         do not compile support for any crypto hardware.
48# [no-]threads  [don't] try to create a library that is suitable for
49#               multithreaded applications (default is "threads" if we
50#               know how to do it)
51# [no-]shared	[don't] try to create shared libraries when supported.
52# no-asm        do not use assembler
53# no-dso        do not compile in any native shared-library methods. This
54#               will ensure that all methods just return NULL.
55# no-krb5       do not compile in any KRB5 library or code.
56# [no-]zlib     [don't] compile support for zlib compression.
57# zlib-dynamic	Like "zlib", but the zlib library is expected to be a shared
58#		library and will be loaded in run-time by the OpenSSL library.
59# sctp          include SCTP support
60# 386           generate 80386 code
61# no-sse2	disables IA-32 SSE2 code, above option implies no-sse2
62# no-<cipher>   build without specified algorithm (rsa, idea, rc5, ...)
63# -<xxx> +<xxx> compiler options are passed through
64#
65# DEBUG_SAFESTACK use type-safe stacks to enforce type-safety on stack items
66#		provided to stack calls. Generates unique stack functions for
67#		each possible stack type.
68# DES_PTR	use pointer lookup vs arrays in the DES in crypto/des/des_locl.h
69# DES_RISC1	use different DES_ENCRYPT macro that helps reduce register
70#		dependancies but needs to more registers, good for RISC CPU's
71# DES_RISC2	A different RISC variant.
72# DES_UNROLL	unroll the inner DES loop, sometimes helps, somtimes hinders.
73# DES_INT	use 'int' instead of 'long' for DES_LONG in crypto/des/des.h
74#		This is used on the DEC Alpha where long is 8 bytes
75#		and int is 4
76# BN_LLONG	use the type 'long long' in crypto/bn/bn.h
77# MD2_CHAR	use 'char' instead of 'int' for MD2_INT in crypto/md2/md2.h
78# MD2_LONG	use 'long' instead of 'int' for MD2_INT in crypto/md2/md2.h
79# IDEA_SHORT	use 'short' instead of 'int' for IDEA_INT in crypto/idea/idea.h
80# IDEA_LONG	use 'long' instead of 'int' for IDEA_INT in crypto/idea/idea.h
81# RC2_SHORT	use 'short' instead of 'int' for RC2_INT in crypto/rc2/rc2.h
82# RC2_LONG	use 'long' instead of 'int' for RC2_INT in crypto/rc2/rc2.h
83# RC4_CHAR	use 'char' instead of 'int' for RC4_INT in crypto/rc4/rc4.h
84# RC4_LONG	use 'long' instead of 'int' for RC4_INT in crypto/rc4/rc4.h
85# RC4_INDEX	define RC4_INDEX in crypto/rc4/rc4_locl.h.  This turns on
86#		array lookups instead of pointer use.
87# RC4_CHUNK	enables code that handles data aligned at long (natural CPU
88#		word) boundary.
89# RC4_CHUNK_LL	enables code that handles data aligned at long long boundary
90#		(intended for 64-bit CPUs running 32-bit OS).
91# BF_PTR	use 'pointer arithmatic' for Blowfish (unsafe on Alpha).
92# BF_PTR2	intel specific version (generic version is more efficient).
93#
94# Following are set automatically by this script
95#
96# MD5_ASM	use some extra md5 assember,
97# SHA1_ASM	use some extra sha1 assember, must define L_ENDIAN for x86
98# RMD160_ASM	use some extra ripemd160 assember,
99# SHA256_ASM	sha256_block is implemented in assembler
100# SHA512_ASM	sha512_block is implemented in assembler
101# AES_ASM	ASE_[en|de]crypt is implemented in assembler
102
103# Minimum warning options... any contributions to OpenSSL should at least get
104# past these.
105
106my $gcc_devteam_warn = "-Wall -pedantic -DPEDANTIC -Wno-long-long -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Werror -DCRYPTO_MDEBUG_ALL -DCRYPTO_MDEBUG_ABORT -DREF_CHECK -DOPENSSL_NO_DEPRECATED";
107
108my $strict_warnings = 0;
109
110my $x86_gcc_des="DES_PTR DES_RISC1 DES_UNROLL";
111
112# MD2_CHAR slags pentium pros
113my $x86_gcc_opts="RC4_INDEX MD2_INT";
114
115# MODIFY THESE PARAMETERS IF YOU ARE GOING TO USE THE 'util/speed.sh SCRIPT
116# Don't worry about these normally
117
118my $tcc="cc";
119my $tflags="-fast -Xa";
120my $tbn_mul="";
121my $tlib="-lnsl -lsocket";
122#$bits1="SIXTEEN_BIT ";
123#$bits2="THIRTY_TWO_BIT ";
124my $bits1="THIRTY_TWO_BIT ";
125my $bits2="SIXTY_FOUR_BIT ";
126
127my $x86_asm="x86cpuid.o:bn-586.o co-586.o x86-mont.o x86-gf2m.o:des-586.o crypt586.o:aes-586.o vpaes-x86.o aesni-x86.o:bf-586.o:md5-586.o:sha1-586.o sha256-586.o sha512-586.o:cast-586.o:rc4-586.o:rmd-586.o:rc5-586.o:wp_block.o wp-mmx.o:cmll-x86.o:ghash-x86.o:";
128
129my $x86_elf_asm="$x86_asm:elf";
130
131my $x86_64_asm="x86_64cpuid.o:x86_64-gcc.o x86_64-mont.o x86_64-mont5.o x86_64-gf2m.o modexp512-x86_64.o::aes-x86_64.o vpaes-x86_64.o bsaes-x86_64.o aesni-x86_64.o aesni-sha1-x86_64.o::md5-x86_64.o:sha1-x86_64.o sha256-x86_64.o sha512-x86_64.o::rc4-x86_64.o rc4-md5-x86_64.o:::wp-x86_64.o:cmll-x86_64.o cmll_misc.o:ghash-x86_64.o:";
132my $ia64_asm="ia64cpuid.o:bn-ia64.o ia64-mont.o::aes_core.o aes_cbc.o aes-ia64.o::md5-ia64.o:sha1-ia64.o sha256-ia64.o sha512-ia64.o::rc4-ia64.o rc4_skey.o:::::ghash-ia64.o::void";
133my $sparcv9_asm="sparcv9cap.o sparccpuid.o:bn-sparcv9.o sparcv9-mont.o sparcv9a-mont.o:des_enc-sparc.o fcrypt_b.o:aes_core.o aes_cbc.o aes-sparcv9.o:::sha1-sparcv9.o sha256-sparcv9.o sha512-sparcv9.o:::::::ghash-sparcv9.o::void";
134my $sparcv8_asm=":sparcv8.o:des_enc-sparc.o fcrypt_b.o:::::::::::::void";
135my $alpha_asm="alphacpuid.o:bn_asm.o alpha-mont.o:::::sha1-alpha.o:::::::ghash-alpha.o::void";
136my $mips32_asm=":bn-mips.o::aes_cbc.o aes-mips.o:::sha1-mips.o sha256-mips.o::::::::";
137my $mips64_asm=":bn-mips.o mips-mont.o::aes_cbc.o aes-mips.o:::sha1-mips.o sha256-mips.o sha512-mips.o::::::::";
138my $s390x_asm="s390xcap.o s390xcpuid.o:bn-s390x.o s390x-mont.o s390x-gf2m.o::aes-s390x.o aes-ctr.o aes-xts.o:::sha1-s390x.o sha256-s390x.o sha512-s390x.o::rc4-s390x.o:::::ghash-s390x.o:";
139my $armv4_asm="armcap.o armv4cpuid.o:bn_asm.o armv4-mont.o armv4-gf2m.o::aes_cbc.o aes-armv4.o:::sha1-armv4-large.o sha256-armv4.o sha512-armv4.o:::::::ghash-armv4.o::void";
140my $parisc11_asm="pariscid.o:bn_asm.o parisc-mont.o::aes_core.o aes_cbc.o aes-parisc.o:::sha1-parisc.o sha256-parisc.o sha512-parisc.o::rc4-parisc.o:::::ghash-parisc.o::32";
141my $parisc20_asm="pariscid.o:pa-risc2W.o parisc-mont.o::aes_core.o aes_cbc.o aes-parisc.o:::sha1-parisc.o sha256-parisc.o sha512-parisc.o::rc4-parisc.o:::::ghash-parisc.o::64";
142my $ppc32_asm="ppccpuid.o ppccap.o:bn-ppc.o ppc-mont.o ppc64-mont.o::aes_core.o aes_cbc.o aes-ppc.o:::sha1-ppc.o sha256-ppc.o::::::::";
143my $ppc64_asm="ppccpuid.o ppccap.o:bn-ppc.o ppc-mont.o ppc64-mont.o::aes_core.o aes_cbc.o aes-ppc.o:::sha1-ppc.o sha256-ppc.o sha512-ppc.o::::::::";
144my $no_asm=":::::::::::::::void";
145
146# As for $BSDthreads. Idea is to maintain "collective" set of flags,
147# which would cover all BSD flavors. -pthread applies to them all,
148# but is treated differently. OpenBSD expands is as -D_POSIX_THREAD
149# -lc_r, which is sufficient. FreeBSD 4.x expands it as -lc_r,
150# which has to be accompanied by explicit -D_THREAD_SAFE and
151# sometimes -D_REENTRANT. FreeBSD 5.x expands it as -lc_r, which
152# seems to be sufficient?
153my $BSDthreads="-pthread -D_THREAD_SAFE -D_REENTRANT";
154
155#config-string	$cc : $cflags : $unistd : $thread_cflag : $sys_id : $lflags : $bn_ops : $cpuid_obj : $bn_obj : $des_obj : $aes_obj : $bf_obj : $md5_obj : $sha1_obj : $cast_obj : $rc4_obj : $rmd160_obj : $rc5_obj : $wp_obj : $cmll_obj : $modes_obj : $engines_obj : $dso_scheme : $shared_target : $shared_cflag : $shared_ldflag : $shared_extension : $ranlib : $arflags : $multilib
156
157my %table=(
158# File 'TABLE' (created by 'make TABLE') contains the data from this list,
159# formatted for better readability.
160
161
162#"b",		"${tcc}:${tflags}::${tlib}:${bits1}:${tbn_mul}::",
163#"bl-4c-2c",	"${tcc}:${tflags}::${tlib}:${bits1}BN_LLONG RC4_CHAR MD2_CHAR:${tbn_mul}::",
164#"bl-4c-ri",	"${tcc}:${tflags}::${tlib}:${bits1}BN_LLONG RC4_CHAR RC4_INDEX:${tbn_mul}::",
165#"b2-is-ri-dp",	"${tcc}:${tflags}::${tlib}:${bits2}IDEA_SHORT RC4_INDEX DES_PTR:${tbn_mul}::",
166
167# Our development configs
168"purify",	"purify gcc:-g -DPURIFY -Wall::(unknown)::-lsocket -lnsl::::",
169"debug",	"gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DOPENSSL_NO_ASM -ggdb -g2 -Wformat -Wshadow -Wmissing-prototypes -Wmissing-declarations -Werror::(unknown)::-lefence::::",
170"debug-ben",	"gcc:$gcc_devteam_warn -DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DDEBUG_SAFESTACK -O2 -pipe::(unknown):::::",
171"debug-ben-openbsd","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DPEDANTIC -DDEBUG_SAFESTACK -DOPENSSL_OPENBSD_DEV_CRYPTO -DOPENSSL_NO_ASM -O2 -pedantic -Wall -Wshadow -Werror -pipe::(unknown)::::",
172"debug-ben-openbsd-debug","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DPEDANTIC -DDEBUG_SAFESTACK -DOPENSSL_OPENBSD_DEV_CRYPTO -DOPENSSL_NO_ASM -g3 -O2 -pedantic -Wall -Wshadow -Werror -pipe::(unknown)::::",
173"debug-ben-debug",	"gcc44:$gcc_devteam_warn -DBN_DEBUG -DCONF_DEBUG -DDEBUG_SAFESTACK -DDEBUG_UNUSED -g3 -O2 -pipe::(unknown)::::::",
174"debug-ben-debug-64",	"gcc:$gcc_devteam_warn -Wno-error=overlength-strings -DBN_DEBUG -DCONF_DEBUG -DDEBUG_SAFESTACK -DDEBUG_UNUSED -g3 -O3 -pipe::${BSDthreads}:::SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
175"debug-ben-macos",	"cc:$gcc_devteam_warn -arch i386 -DBN_DEBUG -DCONF_DEBUG -DDEBUG_SAFESTACK -DDEBUG_UNUSED -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -O3 -DL_ENDIAN -g3 -pipe::(unknown)::-Wl,-search_paths_first::::",
176"debug-ben-macos-gcc46",	"gcc-mp-4.6:$gcc_devteam_warn -Wconversion -DBN_DEBUG -DCONF_DEBUG -DDEBUG_SAFESTACK -DDEBUG_UNUSED -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -O3 -DL_ENDIAN -g3 -pipe::(unknown)::::::",
177"debug-ben-darwin64","cc:$gcc_devteam_warn -Wno-language-extension-token -Wno-extended-offsetof -arch x86_64 -O3 -DL_ENDIAN -Wall::-D_REENTRANT:MACOSX:-Wl,-search_paths_first%:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL:".eval{my $asm=$x86_64_asm;$asm=~s/rc4\-[^:]+//;$asm}.":macosx:dlfcn:darwin-shared:-fPIC -fno-common:-arch x86_64 -dynamiclib:.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
178"debug-ben-no-opt",	"gcc: -Wall -Wmissing-prototypes -Wstrict-prototypes -Wmissing-declarations -DDEBUG_SAFESTACK -DCRYPTO_MDEBUG -Werror -DL_ENDIAN -DTERMIOS -Wall -g3::(unknown)::::::",
179"debug-ben-strict",	"gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DCONST_STRICT -O2 -Wall -Wshadow -Werror -Wpointer-arith -Wcast-qual -Wwrite-strings -pipe::(unknown)::::::",
180"debug-rse","cc:-DTERMIOS -DL_ENDIAN -pipe -O -g -ggdb3 -Wall::(unknown):::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}",
181"debug-bodo",	"gcc:$gcc_devteam_warn -Wno-error=overlength-strings -DBN_DEBUG -DBN_DEBUG_RAND -DCONF_DEBUG -DBIO_PAIR_DEBUG -m64 -DL_ENDIAN -DTERMIO -g -DMD32_REG_T=int::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64",
182"debug-ulf", "gcc:-DTERMIOS -DL_ENDIAN -march=i486 -Wall -DBN_DEBUG -DBN_DEBUG_RAND -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DOPENSSL_NO_ASM -g -Wformat -Wshadow -Wmissing-prototypes -Wmissing-declarations:::CYGWIN32:::${no_asm}:win32:cygwin-shared:::.dll",
183"debug-steve64", "gcc:$gcc_devteam_warn -m64 -DL_ENDIAN -DTERMIO -DCONF_DEBUG -DDEBUG_SAFESTACK -Wno-overlength-strings -g::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
184"debug-steve32", "gcc:$gcc_devteam_warn -m32 -DL_ENDIAN -DCONF_DEBUG -DDEBUG_SAFESTACK -g -pipe::-D_REENTRANT::-rdynamic -ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC:-m32:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
185"debug-steve-opt", "gcc:$gcc_devteam_warn -m64 -O3 -DL_ENDIAN -DTERMIO -DCONF_DEBUG -DDEBUG_SAFESTACK -g::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
186"debug-levitte-linux-elf","gcc:-DLEVITTE_DEBUG -DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DCRYPTO_MDEBUG -DL_ENDIAN -ggdb -g3 -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
187"debug-levitte-linux-noasm","gcc:-DLEVITTE_DEBUG -DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DCRYPTO_MDEBUG -DOPENSSL_NO_ASM -DL_ENDIAN -ggdb -g3 -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${no_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
188"debug-levitte-linux-elf-extreme","gcc:-DLEVITTE_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_DEBUG -DBN_DEBUG_RAND -DCRYPTO_MDEBUG -DENGINE_CONF_DEBUG -DL_ENDIAN -DTERMIO -DPEDANTIC -ggdb -g3 -pedantic -ansi -Wall -W -Wundef -Wshadow -Wcast-align -Wstrict-prototypes -Wmissing-prototypes -Wno-long-long -Wundef -Wconversion -pipe::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
189"debug-levitte-linux-noasm-extreme","gcc:-DLEVITTE_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_DEBUG -DBN_DEBUG_RAND -DCRYPTO_MDEBUG -DENGINE_CONF_DEBUG -DOPENSSL_NO_ASM -DL_ENDIAN -DTERMIO -DPEDANTIC -ggdb -g3 -pedantic -ansi -Wall -W -Wundef -Wshadow -Wcast-align -Wstrict-prototypes -Wmissing-prototypes -Wno-long-long -Wundef -Wconversion -pipe::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${no_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
190"debug-geoff32","gcc:-DBN_DEBUG -DBN_DEBUG_RAND -DBN_STRICT -DPURIFY -DOPENSSL_NO_DEPRECATED -DOPENSSL_NO_ASM -DOPENSSL_NO_INLINE_ASM -DL_ENDIAN -DTERMIO -DPEDANTIC -O1 -ggdb2 -Wall -Werror -Wundef -pedantic -Wshadow -Wpointer-arith -Wbad-function-cast -Wcast-align -Wsign-compare -Wmissing-prototypes -Wmissing-declarations -Wno-long-long::-D_REENTRANT::-ldl:BN_LLONG:${no_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
191"debug-geoff64","gcc:-DBN_DEBUG -DBN_DEBUG_RAND -DBN_STRICT -DPURIFY -DOPENSSL_NO_DEPRECATED -DOPENSSL_NO_ASM -DOPENSSL_NO_INLINE_ASM -DL_ENDIAN -DTERMIO -DPEDANTIC -O1 -ggdb2 -Wall -Werror -Wundef -pedantic -Wshadow -Wpointer-arith -Wbad-function-cast -Wcast-align -Wsign-compare -Wmissing-prototypes -Wmissing-declarations -Wno-long-long::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${no_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
192"debug-linux-pentium","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DL_ENDIAN -DTERMIO -g -mcpu=pentium -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn",
193"debug-linux-ppro","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DL_ENDIAN -DTERMIO -g -mcpu=pentiumpro -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn",
194"debug-linux-elf","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DL_ENDIAN -DTERMIO -g -march=i486 -Wall::-D_REENTRANT::-lefence -ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
195"debug-linux-elf-noefence","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DL_ENDIAN -DTERMIO -g -march=i486 -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
196"debug-linux-ia32-aes", "gcc:-DAES_EXPERIMENTAL -DL_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:x86cpuid.o:bn-586.o co-586.o x86-mont.o:des-586.o crypt586.o:aes_x86core.o aes_cbc.o aesni-x86.o:bf-586.o:md5-586.o:sha1-586.o sha256-586.o sha512-586.o:cast-586.o:rc4-586.o:rmd-586.o:rc5-586.o:wp_block.o wp-mmx.o::ghash-x86.o::elf:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
197"debug-linux-generic32","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DCRYPTO_MDEBUG -DTERMIO -g -Wall::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${no_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
198"debug-linux-generic64","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DCRYPTO_MDEBUG -DTERMIO -g -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${no_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
199"debug-linux-x86_64","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DCRYPTO_MDEBUG -m64 -DL_ENDIAN -DTERMIO -g -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64",
200"dist",		"cc:-O::(unknown)::::::",
201
202# Basic configs that should work on any (32 and less bit) box
203"gcc",		"gcc:-O3::(unknown):::BN_LLONG:::",
204"cc",		"cc:-O::(unknown)::::::",
205
206####VOS Configurations
207"vos-gcc","gcc:-O3 -Wall -DOPENSSL_SYSNAME_VOS -D_POSIX_C_SOURCE=200112L -D_BSD -D_VOS_EXTENDED_NAMES -DB_ENDIAN::(unknown):VOS:-Wl,-map:BN_LLONG:${no_asm}:::::.so:",
208"debug-vos-gcc","gcc:-O0 -g -Wall -DOPENSSL_SYSNAME_VOS -D_POSIX_C_SOURCE=200112L -D_BSD -D_VOS_EXTENDED_NAMES -DB_ENDIAN -DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DCRYPTO_MDEBUG::(unknown):VOS:-Wl,-map:BN_LLONG:${no_asm}:::::.so:",
209
210#### Solaris x86 with GNU C setups
211# -DOPENSSL_NO_INLINE_ASM switches off inline assembler. We have to do it
212# here because whenever GNU C instantiates an assembler template it
213# surrounds it with #APP #NO_APP comment pair which (at least Solaris
214# 7_x86) /usr/ccs/bin/as fails to assemble with "Illegal mnemonic"
215# error message.
216"solaris-x86-gcc","gcc:-O3 -fomit-frame-pointer -march=pentium -Wall -DL_ENDIAN -DOPENSSL_NO_INLINE_ASM::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:solaris-shared:-fPIC:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
217# -shared -static-libgcc might appear controversial, but modules taken
218# from static libgcc do not have relocations and linking them into our
219# shared objects doesn't have any negative side-effects. On the contrary,
220# doing so makes it possible to use gcc shared build with Sun C. Given
221# that gcc generates faster code [thanks to inline assembler], I would
222# actually recommend to consider using gcc shared build even with vendor
223# compiler:-)
224#						<appro@fy.chalmers.se>
225"solaris64-x86_64-gcc","gcc:-m64 -O3 -Wall -DL_ENDIAN::-D_REENTRANT::-lsocket -lnsl -ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:solaris-shared:-fPIC:-m64 -shared -static-libgcc:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/64",
226
227#### Solaris x86 with Sun C setups
228"solaris-x86-cc","cc:-fast -O -Xa::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_PTR DES_UNROLL BF_PTR:${no_asm}:dlfcn:solaris-shared:-KPIC:-G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
229"solaris64-x86_64-cc","cc:-fast -xarch=amd64 -xstrconst -Xa -DL_ENDIAN::-D_REENTRANT::-lsocket -lnsl -ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:solaris-shared:-KPIC:-xarch=amd64 -G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/64",
230
231#### SPARC Solaris with GNU C setups
232"solaris-sparcv7-gcc","gcc:-O3 -fomit-frame-pointer -Wall -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${no_asm}:dlfcn:solaris-shared:-fPIC:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
233"solaris-sparcv8-gcc","gcc:-mv8 -O3 -fomit-frame-pointer -Wall -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${sparcv8_asm}:dlfcn:solaris-shared:-fPIC:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
234# -m32 should be safe to add as long as driver recognizes -mcpu=ultrasparc
235"solaris-sparcv9-gcc","gcc:-m32 -mcpu=ultrasparc -O3 -fomit-frame-pointer -Wall -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT:ULTRASPARC:-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${sparcv9_asm}:dlfcn:solaris-shared:-fPIC:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
236"solaris64-sparcv9-gcc","gcc:-m64 -mcpu=ultrasparc -O3 -Wall -DB_ENDIAN::-D_REENTRANT:ULTRASPARC:-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_PTR DES_RISC1 DES_UNROLL BF_PTR:${sparcv9_asm}:dlfcn:solaris-shared:-fPIC:-m64 -shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/64",
237####
238"debug-solaris-sparcv8-gcc","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG_ALL -O -g -mv8 -Wall -DB_ENDIAN::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${sparcv8_asm}:dlfcn:solaris-shared:-fPIC:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
239"debug-solaris-sparcv9-gcc","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG_ALL -DPEDANTIC -O -g -mcpu=ultrasparc -pedantic -ansi -Wall -Wshadow -Wno-long-long -D__EXTENSIONS__ -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT:ULTRASPARC:-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${sparcv9_asm}:dlfcn:solaris-shared:-fPIC:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
240
241#### SPARC Solaris with Sun C setups
242# SC4.0 doesn't pass 'make test', upgrade to SC5.0 or SC4.2.
243# SC4.2 is ok, better than gcc even on bn as long as you tell it -xarch=v8
244# SC5.0 note: Compiler common patch 107357-01 or later is required!
245"solaris-sparcv7-cc","cc:-xO5 -xstrconst -xdepend -Xa -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_PTR DES_RISC1 DES_UNROLL BF_PTR:${no_asm}:dlfcn:solaris-shared:-KPIC:-G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
246"solaris-sparcv8-cc","cc:-xarch=v8 -xO5 -xstrconst -xdepend -Xa -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_PTR DES_RISC1 DES_UNROLL BF_PTR:${sparcv8_asm}:dlfcn:solaris-shared:-KPIC:-G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
247"solaris-sparcv9-cc","cc:-xtarget=ultra -xarch=v8plus -xO5 -xstrconst -xdepend -Xa -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT:ULTRASPARC:-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK_LL DES_PTR DES_RISC1 DES_UNROLL BF_PTR:${sparcv9_asm}:dlfcn:solaris-shared:-KPIC:-G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
248"solaris64-sparcv9-cc","cc:-xtarget=ultra -xarch=v9 -xO5 -xstrconst -xdepend -Xa -DB_ENDIAN::-D_REENTRANT:ULTRASPARC:-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_PTR DES_RISC1 DES_UNROLL BF_PTR:${sparcv9_asm}:dlfcn:solaris-shared:-KPIC:-xarch=v9 -G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/64",
249####
250"debug-solaris-sparcv8-cc","cc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG_ALL -xarch=v8 -g -O -xstrconst -Xa -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_PTR DES_RISC1 DES_UNROLL BF_PTR:${sparcv8_asm}:dlfcn:solaris-shared:-KPIC:-G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
251"debug-solaris-sparcv9-cc","cc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG_ALL -xtarget=ultra -xarch=v8plus -g -O -xstrconst -Xa -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT:ULTRASPARC:-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK_LL DES_PTR DES_RISC1 DES_UNROLL BF_PTR:${sparcv9_asm}:dlfcn:solaris-shared:-KPIC:-G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
252
253#### SunOS configs, assuming sparc for the gcc one.
254#"sunos-cc", "cc:-O4 -DNOPROTO -DNOCONST::(unknown):SUNOS::DES_UNROLL:${no_asm}::",
255"sunos-gcc","gcc:-O3 -mv8 -Dssize_t=int::(unknown):SUNOS::BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL DES_PTR DES_RISC1:${no_asm}::",
256
257#### IRIX 5.x configs
258# -mips2 flag is added by ./config when appropriate.
259"irix-gcc","gcc:-O3 -DTERMIOS -DB_ENDIAN::(unknown):::BN_LLONG MD2_CHAR RC4_INDEX RC4_CHAR RC4_CHUNK DES_UNROLL DES_RISC2 DES_PTR BF_PTR:${mips32_asm}:o32:dlfcn:irix-shared:::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
260"irix-cc", "cc:-O2 -use_readonly_const -DTERMIOS -DB_ENDIAN::(unknown):::BN_LLONG RC4_CHAR RC4_CHUNK DES_PTR DES_RISC2 DES_UNROLL BF_PTR:${mips32_asm}:o32:dlfcn:irix-shared:::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
261#### IRIX 6.x configs
262# Only N32 and N64 ABIs are supported. If you need O32 ABI build, invoke
263# './Configure irix-cc -o32' manually.
264"irix-mips3-gcc","gcc:-mabi=n32 -O3 -DTERMIOS -DB_ENDIAN -DBN_DIV3W::-D_SGI_MP_SOURCE:::MD2_CHAR RC4_INDEX RC4_CHAR RC4_CHUNK_LL DES_UNROLL DES_RISC2 DES_PTR BF_PTR SIXTY_FOUR_BIT:${mips64_asm}:n32:dlfcn:irix-shared::-mabi=n32:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::32",
265"irix-mips3-cc", "cc:-n32 -mips3 -O2 -use_readonly_const -G0 -rdata_shared -DTERMIOS -DB_ENDIAN -DBN_DIV3W::-D_SGI_MP_SOURCE:::DES_PTR RC4_CHAR RC4_CHUNK_LL DES_RISC2 DES_UNROLL BF_PTR SIXTY_FOUR_BIT:${mips64_asm}:n32:dlfcn:irix-shared::-n32:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::32",
266# N64 ABI builds.
267"irix64-mips4-gcc","gcc:-mabi=64 -mips4 -O3 -DTERMIOS -DB_ENDIAN -DBN_DIV3W::-D_SGI_MP_SOURCE:::RC4_CHAR RC4_CHUNK DES_RISC2 DES_UNROLL SIXTY_FOUR_BIT_LONG:${mips64_asm}:64:dlfcn:irix-shared::-mabi=64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64",
268"irix64-mips4-cc", "cc:-64 -mips4 -O2 -use_readonly_const -G0 -rdata_shared -DTERMIOS -DB_ENDIAN -DBN_DIV3W::-D_SGI_MP_SOURCE:::RC4_CHAR RC4_CHUNK DES_RISC2 DES_UNROLL SIXTY_FOUR_BIT_LONG:${mips64_asm}:64:dlfcn:irix-shared::-64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64",
269
270#### Unified HP-UX ANSI C configs.
271# Special notes:
272# - Originally we were optimizing at +O4 level. It should be noted
273#   that the only difference between +O3 and +O4 is global inter-
274#   procedural analysis. As it has to be performed during the link
275#   stage the compiler leaves behind certain pseudo-code in lib*.a
276#   which might be release or even patch level specific. Generating
277#   the machine code for and analyzing the *whole* program appears
278#   to be *extremely* memory demanding while the performance gain is
279#   actually questionable. The situation is intensified by the default
280#   HP-UX data set size limit (infamous 'maxdsiz' tunable) of 64MB
281#   which is way too low for +O4. In other words, doesn't +O3 make
282#   more sense?
283# - Keep in mind that the HP compiler by default generates code
284#   suitable for execution on the host you're currently compiling at.
285#   If the toolkit is ment to be used on various PA-RISC processors
286#   consider './config +DAportable'.
287# - +DD64 is chosen in favour of +DA2.0W because it's meant to be
288#   compatible with *future* releases.
289# - If you run ./Configure hpux-parisc-[g]cc manually don't forget to
290#   pass -D_REENTRANT on HP-UX 10 and later.
291# - -DMD32_XARRAY triggers workaround for compiler bug we ran into in
292#   32-bit message digests. (For the moment of this writing) HP C
293#   doesn't seem to "digest" too many local variables (they make "him"
294#   chew forever:-). For more details look-up MD32_XARRAY comment in
295#   crypto/sha/sha_lcl.h.
296#					<appro@fy.chalmers.se>
297#
298# Since there is mention of this in shlib/hpux10-cc.sh
299"hpux-parisc-cc-o4","cc:-Ae +O4 +ESlit -z -DB_ENDIAN -DBN_DIV2W -DMD32_XARRAY::-D_REENTRANT::-ldld:BN_LLONG DES_PTR DES_UNROLL DES_RISC1:${no_asm}:dl:hpux-shared:+Z:-b:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
300"hpux-parisc-gcc","gcc:-O3 -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT::-Wl,+s -ldld:BN_LLONG DES_PTR DES_UNROLL DES_RISC1:${no_asm}:dl:hpux-shared:-fPIC:-shared:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
301"hpux-parisc1_1-gcc","gcc:-O3 -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT::-Wl,+s -ldld:BN_LLONG DES_PTR DES_UNROLL DES_RISC1:${parisc11_asm}:dl:hpux-shared:-fPIC:-shared:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/pa1.1",
302"hpux-parisc2-gcc","gcc:-march=2.0 -O3 -DB_ENDIAN -D_REENTRANT::::-Wl,+s -ldld:SIXTY_FOUR_BIT RC4_CHAR RC4_CHUNK DES_PTR DES_UNROLL DES_RISC1:".eval{my $asm=$parisc20_asm;$asm=~s/2W\./2\./;$asm=~s/:64/:32/;$asm}.":dl:hpux-shared:-fPIC:-shared:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/pa20_32",
303"hpux64-parisc2-gcc","gcc:-O3 -DB_ENDIAN -D_REENTRANT::::-ldl:SIXTY_FOUR_BIT_LONG MD2_CHAR RC4_INDEX RC4_CHAR DES_UNROLL DES_RISC1 DES_INT::pa-risc2W.o::::::::::::::void:dlfcn:hpux-shared:-fpic:-shared:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/pa20_64",
304
305# More attempts at unified 10.X and 11.X targets for HP C compiler.
306#
307# Chris Ruemmler <ruemmler@cup.hp.com>
308# Kevin Steves <ks@hp.se>
309"hpux-parisc-cc","cc:+O3 +Optrs_strongly_typed -Ae +ESlit -DB_ENDIAN -DBN_DIV2W -DMD32_XARRAY::-D_REENTRANT::-Wl,+s -ldld:MD2_CHAR RC4_INDEX RC4_CHAR DES_UNROLL DES_RISC1 DES_INT:${no_asm}:dl:hpux-shared:+Z:-b:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
310"hpux-parisc1_1-cc","cc:+DA1.1 +O3 +Optrs_strongly_typed -Ae +ESlit -DB_ENDIAN -DMD32_XARRAY::-D_REENTRANT::-Wl,+s -ldld:MD2_CHAR RC4_INDEX RC4_CHAR DES_UNROLL DES_RISC1 DES_INT:${parisc11_asm}:dl:hpux-shared:+Z:-b:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/pa1.1",
311"hpux-parisc2-cc","cc:+DA2.0 +DS2.0 +O3 +Optrs_strongly_typed -Ae +ESlit -DB_ENDIAN -DMD32_XARRAY -D_REENTRANT::::-Wl,+s -ldld:SIXTY_FOUR_BIT MD2_CHAR RC4_INDEX RC4_CHAR DES_UNROLL DES_RISC1 DES_INT:".eval{my $asm=$parisc20_asm;$asm=~s/2W\./2\./;$asm=~s/:64/:32/;$asm}.":dl:hpux-shared:+Z:-b:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/pa20_32",
312"hpux64-parisc2-cc","cc:+DD64 +O3 +Optrs_strongly_typed -Ae +ESlit -DB_ENDIAN -DMD32_XARRAY -D_REENTRANT::::-ldl:SIXTY_FOUR_BIT_LONG MD2_CHAR RC4_INDEX RC4_CHAR DES_UNROLL DES_RISC1 DES_INT:${parisc20_asm}:dlfcn:hpux-shared:+Z:+DD64 -b:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/pa20_64",
313
314# HP/UX IA-64 targets
315"hpux-ia64-cc","cc:-Ae +DD32 +O2 +Olit=all -z -DB_ENDIAN -D_REENTRANT::::-ldl:SIXTY_FOUR_BIT MD2_CHAR RC4_INDEX DES_UNROLL DES_RISC1 DES_INT:${ia64_asm}:dlfcn:hpux-shared:+Z:+DD32 -b:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/hpux32",
316# Frank Geurts <frank.geurts@nl.abnamro.com> has patiently assisted with
317# with debugging of the following config.
318"hpux64-ia64-cc","cc:-Ae +DD64 +O3 +Olit=all -z -DB_ENDIAN -D_REENTRANT::::-ldl:SIXTY_FOUR_BIT_LONG MD2_CHAR RC4_INDEX DES_UNROLL DES_RISC1 DES_INT:${ia64_asm}:dlfcn:hpux-shared:+Z:+DD64 -b:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/hpux64",
319# GCC builds...
320"hpux-ia64-gcc","gcc:-O3 -DB_ENDIAN -D_REENTRANT::::-ldl:SIXTY_FOUR_BIT MD2_CHAR RC4_INDEX DES_UNROLL DES_RISC1 DES_INT:${ia64_asm}:dlfcn:hpux-shared:-fpic:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/hpux32",
321"hpux64-ia64-gcc","gcc:-mlp64 -O3 -DB_ENDIAN -D_REENTRANT::::-ldl:SIXTY_FOUR_BIT_LONG MD2_CHAR RC4_INDEX DES_UNROLL DES_RISC1 DES_INT:${ia64_asm}:dlfcn:hpux-shared:-fpic:-mlp64 -shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/hpux64",
322
323# Legacy HPUX 9.X configs...
324"hpux-cc",	"cc:-DB_ENDIAN -DBN_DIV2W -DMD32_XARRAY -Ae +ESlit +O2 -z::(unknown)::-Wl,+s -ldld:DES_PTR DES_UNROLL DES_RISC1:${no_asm}:dl:hpux-shared:+Z:-b:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
325"hpux-gcc",	"gcc:-DB_ENDIAN -DBN_DIV2W -O3::(unknown)::-Wl,+s -ldld:DES_PTR DES_UNROLL DES_RISC1:${no_asm}:dl:hpux-shared:-fPIC:-shared:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
326
327#### HP MPE/iX http://jazz.external.hp.com/src/openssl/
328"MPE/iX-gcc",	"gcc:-D_ENDIAN -DBN_DIV2W -O3 -D_POSIX_SOURCE -D_SOCKET_SOURCE -I/SYSLOG/PUB::(unknown):MPE:-L/SYSLOG/PUB -lsyslog -lsocket -lcurses:BN_LLONG DES_PTR DES_UNROLL DES_RISC1:::",
329
330# DEC Alpha OSF/1/Tru64 targets.
331#
332#	"What's in a name? That which we call a rose
333#	 By any other word would smell as sweet."
334#
335# - William Shakespeare, "Romeo & Juliet", Act II, scene II.
336#
337# For gcc, the following gave a %50 speedup on a 164 over the 'DES_INT' version
338#
339"osf1-alpha-gcc", "gcc:-O3::(unknown):::SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_UNROLL DES_RISC1:${alpha_asm}:dlfcn:alpha-osf1-shared:::.so",
340"osf1-alpha-cc",  "cc:-std1 -tune host -O4 -readonly_strings::(unknown):::SIXTY_FOUR_BIT_LONG RC4_CHUNK:${alpha_asm}:dlfcn:alpha-osf1-shared:::.so",
341"tru64-alpha-cc", "cc:-std1 -tune host -fast -readonly_strings::-pthread:::SIXTY_FOUR_BIT_LONG RC4_CHUNK:${alpha_asm}:dlfcn:alpha-osf1-shared::-msym:.so",
342
343####
344#### Variety of LINUX:-)
345####
346# *-generic* is endian-neutral target, but ./config is free to
347# throw in -D[BL]_ENDIAN, whichever appropriate...
348"linux-generic32","gcc:-DTERMIO -O3 -fomit-frame-pointer -Wall::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${no_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
349"linux-ppc",	"gcc:-DB_ENDIAN -DTERMIO -O3 -Wall::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_RISC1 DES_UNROLL:${ppc32_asm}:linux32:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
350# It's believed that majority of ARM toolchains predefine appropriate -march.
351# If you compiler does not, do complement config command line with one!
352"linux-armv4",	"gcc:-DTERMIO -O3 -Wall::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${armv4_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
353#### IA-32 targets...
354"linux-ia32-icc",	"icc:-DL_ENDIAN -DTERMIO -O2 -no_cpprt::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-KPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
355"linux-elf",	"gcc:-DL_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
356"linux-aout",	"gcc:-DL_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -march=i486 -Wall::(unknown):::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_asm}:a.out",
357####
358"linux-generic64","gcc:-DTERMIO -O3 -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${no_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
359"linux-ppc64",	"gcc:-m64 -DB_ENDIAN -DTERMIO -O3 -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_RISC1 DES_UNROLL:${ppc64_asm}:linux64:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64",
360"linux-ia64",	"gcc:-DL_ENDIAN -DTERMIO -O3 -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_UNROLL DES_INT:${ia64_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
361"linux-ia64-ecc","ecc:-DL_ENDIAN -DTERMIO -O2 -Wall -no_cpprt::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT:${ia64_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
362"linux-ia64-icc","icc:-DL_ENDIAN -DTERMIO -O2 -Wall -no_cpprt::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_RISC1 DES_INT:${ia64_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
363"linux-x86_64",	"gcc:-m64 -DL_ENDIAN -DTERMIO -O3 -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64",
364"linux64-s390x",	"gcc:-m64 -DB_ENDIAN -DTERMIO -O3 -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL:${s390x_asm}:64:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64",
365#### So called "highgprs" target for z/Architecture CPUs
366# "Highgprs" is kernel feature first implemented in Linux 2.6.32, see
367# /proc/cpuinfo. The idea is to preserve most significant bits of
368# general purpose registers not only upon 32-bit process context
369# switch, but even on asynchronous signal delivery to such process.
370# This makes it possible to deploy 64-bit instructions even in legacy
371# application context and achieve better [or should we say adequate]
372# performance. The build is binary compatible with linux-generic32,
373# and the idea is to be able to install the resulting libcrypto.so
374# alongside generic one, e.g. as /lib/highgprs/libcrypto.so.x.y, for
375# ldconfig and run-time linker to autodiscover. Unfortunately it
376# doesn't work just yet, because of couple of bugs in glibc
377# sysdeps/s390/dl-procinfo.c affecting ldconfig and ld.so.1...
378"linux32-s390x",	"gcc:-m31 -Wa,-mzarch -DB_ENDIAN -DTERMIO -O3 -Wall::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL:".eval{my $asm=$s390x_asm;$asm=~s/bn\-s390x\.o/bn_asm.o/;$asm}.":31:dlfcn:linux-shared:-fPIC:-m31:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/highgprs",
379#### SPARC Linux setups
380# Ray Miller <ray.miller@computing-services.oxford.ac.uk> has patiently
381# assisted with debugging of following two configs.
382"linux-sparcv8","gcc:-mv8 -DB_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall -DBN_DIV2W::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${sparcv8_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
383# it's a real mess with -mcpu=ultrasparc option under Linux, but
384# -Wa,-Av8plus should do the trick no matter what.
385"linux-sparcv9","gcc:-m32 -mcpu=ultrasparc -DB_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall -Wa,-Av8plus -DBN_DIV2W::-D_REENTRANT:ULTRASPARC:-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${sparcv9_asm}:dlfcn:linux-shared:-fPIC:-m32:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
386# GCC 3.1 is a requirement
387"linux64-sparcv9","gcc:-m64 -mcpu=ultrasparc -DB_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall::-D_REENTRANT:ULTRASPARC:-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_PTR DES_RISC1 DES_UNROLL BF_PTR:${sparcv9_asm}:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64",
388#### Alpha Linux with GNU C and Compaq C setups
389# Special notes:
390# - linux-alpha+bwx-gcc is ment to be used from ./config only. If you
391#   ought to run './Configure linux-alpha+bwx-gcc' manually, do
392#   complement the command line with -mcpu=ev56, -mcpu=ev6 or whatever
393#   which is appropriate.
394# - If you use ccc keep in mind that -fast implies -arch host and the
395#   compiler is free to issue instructions which gonna make elder CPU
396#   choke. If you wish to build "blended" toolkit, add -arch generic
397#   *after* -fast and invoke './Configure linux-alpha-ccc' manually.
398#
399#					<appro@fy.chalmers.se>
400#
401"linux-alpha-gcc","gcc:-O3 -DL_ENDIAN -DTERMIO::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_RISC1 DES_UNROLL:${alpha_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
402"linux-alpha+bwx-gcc","gcc:-O3 -DL_ENDIAN -DTERMIO::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_RISC1 DES_UNROLL:${alpha_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
403"linux-alpha-ccc","ccc:-fast -readonly_strings -DL_ENDIAN -DTERMIO::-D_REENTRANT:::SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_PTR DES_RISC1 DES_UNROLL:${alpha_asm}",
404"linux-alpha+bwx-ccc","ccc:-fast -readonly_strings -DL_ENDIAN -DTERMIO::-D_REENTRANT:::SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_PTR DES_RISC1 DES_UNROLL:${alpha_asm}",
405
406# Android: linux-* but without -DTERMIO and pointers to headers and libs.
407"android","gcc:-mandroid -I\$(ANDROID_DEV)/include -B\$(ANDROID_DEV)/lib -O3 -fomit-frame-pointer -Wall::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${no_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
408"android-x86","gcc:-mandroid -I\$(ANDROID_DEV)/include -B\$(ANDROID_DEV)/lib -O3 -fomit-frame-pointer -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:".eval{my $asm=${x86_elf_asm};$asm=~s/:elf/:android/;$asm}.":dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
409"android-armv7","gcc:-march=armv7-a -mandroid -I\$(ANDROID_DEV)/include -B\$(ANDROID_DEV)/lib -O3 -fomit-frame-pointer -Wall::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${armv4_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
410
411#### *BSD [do see comment about ${BSDthreads} above!]
412"BSD-generic32","gcc:-DTERMIOS -O3 -fomit-frame-pointer -Wall::${BSDthreads}:::BN_LLONG RC2_CHAR RC4_INDEX DES_INT DES_UNROLL:${no_asm}:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
413"BSD-x86",	"gcc:-DL_ENDIAN -DTERMIOS -O3 -fomit-frame-pointer -Wall::${BSDthreads}:::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_asm}:a.out:dlfcn:bsd-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
414"BSD-x86-elf",	"gcc:-DL_ENDIAN -DTERMIOS -O3 -fomit-frame-pointer -Wall::${BSDthreads}:::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:bsd-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
415"debug-BSD-x86-elf",	"gcc:-DL_ENDIAN -DTERMIOS -O3 -Wall -g::${BSDthreads}:::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:bsd-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
416"BSD-sparcv8",	"gcc:-DB_ENDIAN -DTERMIOS -O3 -mv8 -Wall::${BSDthreads}:::BN_LLONG RC2_CHAR RC4_INDEX DES_INT DES_UNROLL:${sparcv8_asm}:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
417
418"BSD-generic64","gcc:-DTERMIOS -O3 -Wall::${BSDthreads}:::SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${no_asm}:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
419# -DMD32_REG_T=int doesn't actually belong in sparc64 target, it
420# simply *happens* to work around a compiler bug in gcc 3.3.3,
421# triggered by RIPEMD160 code.
422"BSD-sparc64",	"gcc:-DB_ENDIAN -DTERMIOS -O3 -DMD32_REG_T=int -Wall::${BSDthreads}:::BN_LLONG RC2_CHAR RC4_CHUNK DES_INT DES_PTR DES_RISC2 BF_PTR:${sparcv9_asm}:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
423"BSD-ia64",	"gcc:-DL_ENDIAN -DTERMIOS -O3 -Wall::${BSDthreads}:::SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_UNROLL DES_INT:${ia64_asm}:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
424"BSD-x86_64",	"gcc:-DL_ENDIAN -DTERMIOS -O3 -Wall::${BSDthreads}:::SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
425
426"bsdi-elf-gcc",     "gcc:-DPERL5 -DL_ENDIAN -fomit-frame-pointer -O3 -march=i486 -Wall::(unknown)::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
427
428"nextstep",	"cc:-O -Wall:<libc.h>:(unknown):::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:::",
429"nextstep3.3",	"cc:-O3 -Wall:<libc.h>:(unknown):::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:::",
430
431# NCR MP-RAS UNIX ver 02.03.01
432"ncr-scde","cc:-O6 -Xa -Hoff=BEHAVED -686 -Hwide -Hiw::(unknown)::-lsocket -lnsl -lc89:${x86_gcc_des} ${x86_gcc_opts}:::",
433
434# QNX
435"qnx4",	"cc:-DL_ENDIAN -DTERMIO::(unknown):::${x86_gcc_des} ${x86_gcc_opts}:",
436"QNX6",       "gcc:-DTERMIOS::::-lsocket::${no_asm}:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
437"QNX6-i386",  "gcc:-DL_ENDIAN -DTERMIOS -O2 -Wall::::-lsocket:${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
438
439# BeOS
440"beos-x86-r5",   "gcc:-DL_ENDIAN -DTERMIOS -O3 -fomit-frame-pointer -mcpu=pentium -Wall::-D_REENTRANT:BEOS:-lbe -lnet:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:beos:beos-shared:-fPIC -DPIC:-shared:.so",
441"beos-x86-bone", "gcc:-DL_ENDIAN -DTERMIOS -O3 -fomit-frame-pointer -mcpu=pentium -Wall::-D_REENTRANT:BEOS:-lbe -lbind -lsocket:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:beos:beos-shared:-fPIC:-shared:.so",
442
443#### SCO/Caldera targets.
444#
445# Originally we had like unixware-*, unixware-*-pentium, unixware-*-p6, etc.
446# Now we only have blended unixware-* as it's the only one used by ./config.
447# If you want to optimize for particular microarchitecture, bypass ./config
448# and './Configure unixware-7 -Kpentium_pro' or whatever appropriate.
449# Note that not all targets include assembler support. Mostly because of
450# lack of motivation to support out-of-date platforms with out-of-date
451# compiler drivers and assemblers. Tim Rice <tim@multitalents.net> has
452# patiently assisted to debug most of it.
453#
454# UnixWare 2.0x fails destest with -O.
455"unixware-2.0","cc:-DFILIO_H -DNO_STRINGS_H::-Kthread::-lsocket -lnsl -lresolv -lx:${x86_gcc_des} ${x86_gcc_opts}:::",
456"unixware-2.1","cc:-O -DFILIO_H::-Kthread::-lsocket -lnsl -lresolv -lx:${x86_gcc_des} ${x86_gcc_opts}:::",
457"unixware-7","cc:-O -DFILIO_H -Kalloca::-Kthread::-lsocket -lnsl:BN_LLONG MD2_CHAR RC4_INDEX ${x86_gcc_des}:${x86_elf_asm}:dlfcn:svr5-shared:-Kpic::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
458"unixware-7-gcc","gcc:-DL_ENDIAN -DFILIO_H -O3 -fomit-frame-pointer -march=pentium -Wall::-D_REENTRANT::-lsocket -lnsl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:gnu-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
459# SCO 5 - Ben Laurie <ben@algroup.co.uk> says the -O breaks the SCO cc.
460"sco5-cc",  "cc:-belf::(unknown)::-lsocket -lnsl:${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:svr3-shared:-Kpic::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
461"sco5-gcc",  "gcc:-O3 -fomit-frame-pointer::(unknown)::-lsocket -lnsl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:svr3-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
462
463#### IBM's AIX.
464"aix3-cc",  "cc:-O -DB_ENDIAN -qmaxmem=16384::(unknown):AIX::BN_LLONG RC4_CHAR:::",
465"aix-gcc",  "gcc:-O -DB_ENDIAN::-pthread:AIX::BN_LLONG RC4_CHAR:${ppc32_asm}:aix32:dlfcn:aix-shared::-shared -Wl,-G:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)::-X32",
466"aix64-gcc","gcc:-maix64 -O -DB_ENDIAN::-pthread:AIX::SIXTY_FOUR_BIT_LONG RC4_CHAR:${ppc64_asm}:aix64:dlfcn:aix-shared::-maix64 -shared -Wl,-G:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)::-X64",
467# Below targets assume AIX 5. Idea is to effectively disregard $OBJECT_MODE
468# at build time. $OBJECT_MODE is respected at ./config stage!
469"aix-cc",   "cc:-q32 -O -DB_ENDIAN -qmaxmem=16384 -qro -qroconst::-qthreaded -D_THREAD_SAFE:AIX::BN_LLONG RC4_CHAR:${ppc32_asm}:aix32:dlfcn:aix-shared::-q32 -G:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)::-X 32",
470"aix64-cc", "cc:-q64 -O -DB_ENDIAN -qmaxmem=16384 -qro -qroconst::-qthreaded -D_THREAD_SAFE:AIX::SIXTY_FOUR_BIT_LONG RC4_CHAR:${ppc64_asm}:aix64:dlfcn:aix-shared::-q64 -G:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)::-X 64",
471
472#
473# Cray T90 and similar (SDSC)
474# It's Big-endian, but the algorithms work properly when B_ENDIAN is NOT
475# defined.  The T90 ints and longs are 8 bytes long, and apparently the
476# B_ENDIAN code assumes 4 byte ints.  Fortunately, the non-B_ENDIAN and
477# non L_ENDIAN code aligns the bytes in each word correctly.
478#
479# The BIT_FIELD_LIMITS define is to avoid two fatal compiler errors:
480#'Taking the address of a bit field is not allowed. '
481#'An expression with bit field exists as the operand of "sizeof" '
482# (written by Wayne Schroeder <schroede@SDSC.EDU>)
483#
484# j90 is considered the base machine type for unicos machines,
485# so this configuration is now called "cray-j90" ...
486"cray-j90", "cc: -DBIT_FIELD_LIMITS -DTERMIOS::(unknown):CRAY::SIXTY_FOUR_BIT_LONG DES_INT:::",
487
488#
489# Cray T3E (Research Center Juelich, beckman@acl.lanl.gov)
490#
491# The BIT_FIELD_LIMITS define was written for the C90 (it seems).  I added
492# another use.  Basically, the problem is that the T3E uses some bit fields
493# for some st_addr stuff, and then sizeof and address-of fails
494# I could not use the ams/alpha.o option because the Cray assembler, 'cam'
495# did not like it.
496"cray-t3e", "cc: -DBIT_FIELD_LIMITS -DTERMIOS::(unknown):CRAY::SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT:::",
497
498# DGUX, 88100.
499"dgux-R3-gcc",	"gcc:-O3 -fomit-frame-pointer::(unknown):::RC4_INDEX DES_UNROLL:::",
500"dgux-R4-gcc",	"gcc:-O3 -fomit-frame-pointer::(unknown)::-lnsl -lsocket:RC4_INDEX DES_UNROLL:::",
501"dgux-R4-x86-gcc",	"gcc:-O3 -fomit-frame-pointer -DL_ENDIAN::(unknown)::-lnsl -lsocket:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}",
502
503# Sinix/ReliantUNIX RM400
504# NOTE: The CDS++ Compiler up to V2.0Bsomething has the IRIX_CC_BUG optimizer problem. Better use -g  */
505"ReliantUNIX","cc:-KPIC -g -DTERMIOS -DB_ENDIAN::-Kthread:SNI:-lsocket -lnsl -lc -L/usr/ucblib -lucb:BN_LLONG DES_PTR DES_RISC2 DES_UNROLL BF_PTR:${no_asm}:dlfcn:reliantunix-shared:::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
506"SINIX","cc:-O::(unknown):SNI:-lsocket -lnsl -lc -L/usr/ucblib -lucb:RC4_INDEX RC4_CHAR:::",
507"SINIX-N","/usr/ucb/cc:-O2 -misaligned::(unknown)::-lucb:RC4_INDEX RC4_CHAR:::",
508
509# SIEMENS BS2000/OSD: an EBCDIC-based mainframe
510"BS2000-OSD","c89:-O -XLLML -XLLMK -XL -DB_ENDIAN -DTERMIOS -DCHARSET_EBCDIC::(unknown)::-lsocket -lnsl:THIRTY_TWO_BIT DES_PTR DES_UNROLL MD2_CHAR RC4_INDEX RC4_CHAR BF_PTR:::",
511
512# OS/390 Unix an EBCDIC-based Unix system on IBM mainframe
513# You need to compile using the c89.sh wrapper in the tools directory, because the
514# IBM compiler does not like the -L switch after any object modules.
515#
516"OS390-Unix","c89.sh:-O -DB_ENDIAN -DCHARSET_EBCDIC -DNO_SYS_PARAM_H  -D_ALL_SOURCE::(unknown):::THIRTY_TWO_BIT DES_PTR DES_UNROLL MD2_CHAR RC4_INDEX RC4_CHAR BF_PTR:::",
517
518# Visual C targets
519#
520# Win64 targets, WIN64I denotes IA-64 and WIN64A - AMD64
521"VC-WIN64I","cl:-W3 -Gs0 -Gy -nologo -DOPENSSL_SYSNAME_WIN32 -DWIN32_LEAN_AND_MEAN -DL_ENDIAN -DUNICODE -D_UNICODE -D_CRT_SECURE_NO_DEPRECATE:::WIN64I::SIXTY_FOUR_BIT RC4_CHUNK_LL DES_INT EXPORT_VAR_AS_FN:ia64cpuid.o:ia64.o ia64-mont.o::aes_core.o aes_cbc.o aes-ia64.o::md5-ia64.o:sha1-ia64.o sha256-ia64.o sha512-ia64.o:::::::ghash-ia64.o::ias:win32",
522"VC-WIN64A","cl:-W3 -Gs0 -Gy -nologo -DOPENSSL_SYSNAME_WIN32 -DWIN32_LEAN_AND_MEAN -DL_ENDIAN -DUNICODE -D_UNICODE -D_CRT_SECURE_NO_DEPRECATE:::WIN64A::SIXTY_FOUR_BIT RC4_CHUNK_LL DES_INT EXPORT_VAR_AS_FN:".eval{my $asm=$x86_64_asm;$asm=~s/x86_64-gcc\.o/bn_asm.o/;$asm}.":auto:win32",
523"debug-VC-WIN64I","cl:-W3 -Gs0 -Gy -Zi -nologo -DOPENSSL_SYSNAME_WIN32 -DWIN32_LEAN_AND_MEAN -DL_ENDIAN -DUNICODE -D_UNICODE -D_CRT_SECURE_NO_DEPRECATE:::WIN64I::SIXTY_FOUR_BIT RC4_CHUNK_LL DES_INT EXPORT_VAR_AS_FN:ia64cpuid.o:ia64.o::aes_core.o aes_cbc.o aes-ia64.o::md5-ia64.o:sha1-ia64.o sha256-ia64.o sha512-ia64.o:::::::ghash-ia64.o::ias:win32",
524"debug-VC-WIN64A","cl:-W3 -Gs0 -Gy -Zi -nologo -DOPENSSL_SYSNAME_WIN32 -DWIN32_LEAN_AND_MEAN -DL_ENDIAN -DUNICODE -D_UNICODE -D_CRT_SECURE_NO_DEPRECATE:::WIN64A::SIXTY_FOUR_BIT RC4_CHUNK_LL DES_INT EXPORT_VAR_AS_FN:".eval{my $asm=$x86_64_asm;$asm=~s/x86_64-gcc\.o/bn_asm.o/;$asm}.":auto:win32",
525# x86 Win32 target defaults to ANSI API, if you want UNICODE, complement
526# 'perl Configure VC-WIN32' with '-DUNICODE -D_UNICODE'
527"VC-WIN32","cl:-W3 -Gs0 -GF -Gy -nologo -DOPENSSL_SYSNAME_WIN32 -DWIN32_LEAN_AND_MEAN -DL_ENDIAN -D_CRT_SECURE_NO_DEPRECATE:::WIN32::BN_LLONG RC4_INDEX EXPORT_VAR_AS_FN ${x86_gcc_opts}:${x86_asm}:win32n:win32",
528# Unified CE target
529"debug-VC-WIN32","cl:-W3 -Gs0 -GF -Gy -Zi -nologo -DOPENSSL_SYSNAME_WIN32 -DWIN32_LEAN_AND_MEAN -DL_ENDIAN -D_CRT_SECURE_NO_DEPRECATE:::WIN32::BN_LLONG RC4_INDEX EXPORT_VAR_AS_FN ${x86_gcc_opts}:${x86_asm}:win32n:win32",
530"VC-CE","cl::::WINCE::BN_LLONG RC4_INDEX EXPORT_VAR_AS_FN ${x86_gcc_opts}:${no_asm}:win32",
531
532# Borland C++ 4.5
533"BC-32","bcc32::::WIN32::BN_LLONG DES_PTR RC4_INDEX EXPORT_VAR_AS_FN:${no_asm}:win32",
534
535# MinGW
536"mingw", "gcc:-mno-cygwin -DL_ENDIAN -DWIN32_LEAN_AND_MEAN -fomit-frame-pointer -O3 -march=i486 -Wall::-D_MT:MINGW32:-lws2_32 -lgdi32 -lcrypt32:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts} EXPORT_VAR_AS_FN:${x86_asm}:coff:win32:cygwin-shared:-D_WINDLL -DOPENSSL_USE_APPLINK:-mno-cygwin:.dll.a",
537# As for OPENSSL_USE_APPLINK. Applink makes it possible to use .dll
538# compiled with one compiler with application compiled with another
539# compiler. It's possible to engage Applink support in mingw64 build,
540# but it's not done, because till mingw64 supports structured exception
541# handling, one can't seriously consider its binaries for using with
542# non-mingw64 run-time environment. And as mingw64 is always consistent
543# with itself, Applink is never engaged and can as well be omitted.
544"mingw64", "gcc:-mno-cygwin -DL_ENDIAN -O3 -Wall -DWIN32_LEAN_AND_MEAN -DUNICODE -D_UNICODE::-D_MT:MINGW64:-lws2_32 -lgdi32 -lcrypt32:SIXTY_FOUR_BIT RC4_CHUNK_LL DES_INT EXPORT_VAR_AS_FN:${x86_64_asm}:mingw64:win32:cygwin-shared:-D_WINDLL:-mno-cygwin:.dll.a",
545
546# UWIN
547"UWIN", "cc:-DTERMIOS -DL_ENDIAN -O -Wall:::UWIN::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${no_asm}:win32",
548
549# Cygwin
550"Cygwin-pre1.3", "gcc:-DTERMIOS -DL_ENDIAN -fomit-frame-pointer -O3 -m486 -Wall::(unknown):CYGWIN32::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${no_asm}:win32",
551"Cygwin", "gcc:-DTERMIOS -DL_ENDIAN -fomit-frame-pointer -O3 -march=i486 -Wall:::CYGWIN32::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_asm}:coff:dlfcn:cygwin-shared:-D_WINDLL:-shared:.dll.a",
552"debug-Cygwin", "gcc:-DTERMIOS -DL_ENDIAN -march=i486 -Wall -DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DOPENSSL_NO_ASM -g -Wformat -Wshadow -Wmissing-prototypes -Wmissing-declarations -Werror:::CYGWIN32:::${no_asm}:dlfcn:cygwin-shared:-D_WINDLL:-shared:.dll.a",
553
554# NetWare from David Ward (dsward@novell.com)
555# requires either MetroWerks NLM development tools, or gcc / nlmconv
556# NetWare defaults socket bio to WinSock sockets. However,
557# the builds can be configured to use BSD sockets instead.
558# netware-clib => legacy CLib c-runtime support
559"netware-clib", "mwccnlm::::::${x86_gcc_opts}::",
560"netware-clib-bsdsock", "mwccnlm::::::${x86_gcc_opts}::",
561"netware-clib-gcc", "i586-netware-gcc:-nostdinc -I/ndk/nwsdk/include/nlm -I/ndk/ws295sdk/include -DL_ENDIAN -DNETWARE_CLIB -DOPENSSL_SYSNAME_NETWARE -O2 -Wall:::::${x86_gcc_opts}::",
562"netware-clib-bsdsock-gcc", "i586-netware-gcc:-nostdinc -I/ndk/nwsdk/include/nlm -DNETWARE_BSDSOCK -DNETDB_USE_INTERNET -DL_ENDIAN -DNETWARE_CLIB -DOPENSSL_SYSNAME_NETWARE -O2 -Wall:::::${x86_gcc_opts}::",
563# netware-libc => LibC/NKS support
564"netware-libc", "mwccnlm::::::BN_LLONG ${x86_gcc_opts}::",
565"netware-libc-bsdsock", "mwccnlm::::::BN_LLONG ${x86_gcc_opts}::",
566"netware-libc-gcc", "i586-netware-gcc:-nostdinc -I/ndk/libc/include -I/ndk/libc/include/winsock -DL_ENDIAN -DNETWARE_LIBC -DOPENSSL_SYSNAME_NETWARE -DTERMIO -O2 -Wall:::::BN_LLONG ${x86_gcc_opts}::",
567"netware-libc-bsdsock-gcc", "i586-netware-gcc:-nostdinc -I/ndk/libc/include -DNETWARE_BSDSOCK -DL_ENDIAN -DNETWARE_LIBC -DOPENSSL_SYSNAME_NETWARE -DTERMIO -O2 -Wall:::::BN_LLONG ${x86_gcc_opts}::",
568
569# DJGPP
570"DJGPP", "gcc:-I/dev/env/WATT_ROOT/inc -DTERMIOS -DL_ENDIAN -fomit-frame-pointer -O2 -Wall:::MSDOS:-L/dev/env/WATT_ROOT/lib -lwatt:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_asm}:a.out:",
571
572# Ultrix from Bernhard Simon <simon@zid.tuwien.ac.at>
573"ultrix-cc","cc:-std1 -O -Olimit 2500 -DL_ENDIAN::(unknown):::::::",
574"ultrix-gcc","gcc:-O3 -DL_ENDIAN::(unknown):::BN_LLONG::::",
575# K&R C is no longer supported; you need gcc on old Ultrix installations
576##"ultrix","cc:-O2 -DNOPROTO -DNOCONST -DL_ENDIAN::(unknown):::::::",
577
578##### MacOS X (a.k.a. Rhapsody or Darwin) setup
579"rhapsody-ppc-cc","cc:-O3 -DB_ENDIAN::(unknown):MACOSX_RHAPSODY::BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${no_asm}::",
580"darwin-ppc-cc","cc:-arch ppc -O3 -DB_ENDIAN -Wa,-force_cpusubtype_ALL::-D_REENTRANT:MACOSX:-Wl,-search_paths_first%:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${ppc32_asm}:osx32:dlfcn:darwin-shared:-fPIC -fno-common:-arch ppc -dynamiclib:.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
581"darwin64-ppc-cc","cc:-arch ppc64 -O3 -DB_ENDIAN::-D_REENTRANT:MACOSX:-Wl,-search_paths_first%:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${ppc64_asm}:osx64:dlfcn:darwin-shared:-fPIC -fno-common:-arch ppc64 -dynamiclib:.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
582"darwin-i386-cc","cc:-arch i386 -O3 -fomit-frame-pointer -DL_ENDIAN::-D_REENTRANT:MACOSX:-Wl,-search_paths_first%:BN_LLONG RC4_INT RC4_CHUNK DES_UNROLL BF_PTR:".eval{my $asm=$x86_asm;$asm=~s/cast\-586\.o//;$asm}.":macosx:dlfcn:darwin-shared:-fPIC -fno-common:-arch i386 -dynamiclib:.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
583"debug-darwin-i386-cc","cc:-arch i386 -g3 -DL_ENDIAN::-D_REENTRANT:MACOSX:-Wl,-search_paths_first%:BN_LLONG RC4_INT RC4_CHUNK DES_UNROLL BF_PTR:${x86_asm}:macosx:dlfcn:darwin-shared:-fPIC -fno-common:-arch i386 -dynamiclib:.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
584"darwin64-x86_64-cc","cc:-arch x86_64 -O3 -DL_ENDIAN -Wall::-D_REENTRANT:MACOSX:-Wl,-search_paths_first%:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL:".eval{my $asm=$x86_64_asm;$asm=~s/rc4\-[^:]+//;$asm}.":macosx:dlfcn:darwin-shared:-fPIC -fno-common:-arch x86_64 -dynamiclib:.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
585"debug-darwin-ppc-cc","cc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DCRYPTO_MDEBUG -DB_ENDIAN -g -Wall -O::-D_REENTRANT:MACOSX::BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${ppc32_asm}:osx32:dlfcn:darwin-shared:-fPIC:-dynamiclib:.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
586# iPhoneOS/iOS
587"iphoneos-cross","llvm-gcc:-O3 -isysroot \$(CROSS_TOP)/SDKs/\$(CROSS_SDK) -fomit-frame-pointer -fno-common::-D_REENTRANT:iOS:-Wl,-search_paths_first%:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${no_asm}:dlfcn:darwin-shared:-fPIC -fno-common:-dynamiclib:.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
588
589##### A/UX
590"aux3-gcc","gcc:-O2 -DTERMIO::(unknown):AUX:-lbsd:RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:::",
591
592##### Sony NEWS-OS 4.x
593"newsos4-gcc","gcc:-O -DB_ENDIAN::(unknown):NEWS4:-lmld -liberty:BN_LLONG RC4_CHAR RC4_CHUNK DES_PTR DES_RISC1 DES_UNROLL BF_PTR::::",
594
595##### GNU Hurd
596"hurd-x86",  "gcc:-DL_ENDIAN -DTERMIOS -O3 -fomit-frame-pointer -march=i486 -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC",
597
598##### OS/2 EMX
599"OS2-EMX", "gcc::::::::",
600
601##### VxWorks for various targets
602"vxworks-ppc60x","ccppc:-D_REENTRANT -mrtp -mhard-float -mstrict-align -fno-implicit-fp -DPPC32_fp60x -O2 -fstrength-reduce -fno-builtin -fno-strict-aliasing -Wall -DCPU=PPC32 -DTOOL_FAMILY=gnu -DTOOL=gnu -I\$(WIND_BASE)/target/usr/h -I\$(WIND_BASE)/target/usr/h/wrn/coreip:::VXWORKS:-Wl,--defsym,__wrs_rtp_base=0xe0000000 -L \$(WIND_BASE)/target/usr/lib/ppc/PPC32/common:::::",
603"vxworks-ppcgen","ccppc:-D_REENTRANT -mrtp -msoft-float -mstrict-align -O1 -fno-builtin -fno-strict-aliasing -Wall -DCPU=PPC32 -DTOOL_FAMILY=gnu -DTOOL=gnu -I\$(WIND_BASE)/target/usr/h -I\$(WIND_BASE)/target/usr/h/wrn/coreip:::VXWORKS:-Wl,--defsym,__wrs_rtp_base=0xe0000000 -L \$(WIND_BASE)/target/usr/lib/ppc/PPC32/sfcommon:::::",
604"vxworks-ppc405","ccppc:-g -msoft-float -mlongcall -DCPU=PPC405 -I\$(WIND_BASE)/target/h:::VXWORKS:-r:::::",
605"vxworks-ppc750","ccppc:-ansi -nostdinc -DPPC750 -D_REENTRANT -fvolatile -fno-builtin -fno-for-scope -fsigned-char -Wall -msoft-float -mlongcall -DCPU=PPC604 -I\$(WIND_BASE)/target/h \$(DEBUG_FLAG):::VXWORKS:-r:::::",
606"vxworks-ppc750-debug","ccppc:-ansi -nostdinc -DPPC750 -D_REENTRANT -fvolatile -fno-builtin -fno-for-scope -fsigned-char -Wall -msoft-float -mlongcall -DCPU=PPC604 -I\$(WIND_BASE)/target/h -DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DPEDANTIC -DDEBUG_SAFESTACK -DDEBUG -g:::VXWORKS:-r:::::",
607"vxworks-ppc860","ccppc:-nostdinc -msoft-float -DCPU=PPC860 -DNO_STRINGS_H -I\$(WIND_BASE)/target/h:::VXWORKS:-r:::::",
608"vxworks-simlinux","ccpentium:-B\$(WIND_BASE)/host/\$(WIND_HOST_TYPE)/lib/gcc-lib/ -D_VSB_CONFIG_FILE=\"\$(WIND_BASE)/target/lib/h/config/vsbConfig.h\" -DL_ENDIAN -DCPU=SIMLINUX -DTOOL_FAMILY=gnu -DTOOL=gnu -fno-builtin -fno-defer-pop -DNO_STRINGS_H -I\$(WIND_BASE)/target/h -I\$(WIND_BASE)/target/h/wrn/coreip -DOPENSSL_NO_HW_PADLOCK:::VXWORKS:-r::${no_asm}::::::ranlibpentium:",
609"vxworks-mips","ccmips:-mrtp -mips2 -O -G 0 -B\$(WIND_BASE)/host/\$(WIND_HOST_TYPE)/lib/gcc-lib/ -D_VSB_CONFIG_FILE=\"\$(WIND_BASE)/target/lib/h/config/vsbConfig.h\" -DCPU=MIPS32 -msoft-float -mno-branch-likely -DTOOL_FAMILY=gnu -DTOOL=gnu -fno-builtin -fno-defer-pop -DNO_STRINGS_H -I\$(WIND_BASE)/target/usr/h -I\$(WIND_BASE)/target/h/wrn/coreip::-D_REENTRANT:VXWORKS:-Wl,--defsym,__wrs_rtp_base=0xe0000000 -L \$(WIND_BASE)/target/usr/lib/mips/MIPSI32/sfcommon::${mips32_asm}:o32::::::ranlibmips:",
610
611##### Compaq Non-Stop Kernel (Tandem)
612"tandem-c89","c89:-Ww -D__TANDEM -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1 -D_TANDEM_SOURCE -DB_ENDIAN::(unknown):::THIRTY_TWO_BIT:::",
613
614# uClinux
615"uClinux-dist","$ENV{'CC'}:\$(CFLAGS)::-D_REENTRANT::\$(LDFLAGS) \$(LDLIBS):BN_LLONG:${no_asm}:$ENV{'LIBSSL_dlfcn'}:linux-shared:-fPIC:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):$ENV{'RANLIB'}::",
616"uClinux-dist64","$ENV{'CC'}:\$(CFLAGS)::-D_REENTRANT::\$(LDFLAGS) \$(LDLIBS):SIXTY_FOUR_BIT_LONG:${no_asm}:$ENV{'LIBSSL_dlfcn'}:linux-shared:-fPIC:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):$ENV{'RANLIB'}::",
617
618);
619
620my @MK1MF_Builds=qw(VC-WIN64I VC-WIN64A
621		    debug-VC-WIN64I debug-VC-WIN64A
622		    VC-NT VC-CE VC-WIN32 debug-VC-WIN32
623		    BC-32
624		    netware-clib netware-clib-bsdsock
625		    netware-libc netware-libc-bsdsock);
626
627my $idx = 0;
628my $idx_cc = $idx++;
629my $idx_cflags = $idx++;
630my $idx_unistd = $idx++;
631my $idx_thread_cflag = $idx++;
632my $idx_sys_id = $idx++;
633my $idx_lflags = $idx++;
634my $idx_bn_ops = $idx++;
635my $idx_cpuid_obj = $idx++;
636my $idx_bn_obj = $idx++;
637my $idx_des_obj = $idx++;
638my $idx_aes_obj = $idx++;
639my $idx_bf_obj = $idx++;
640my $idx_md5_obj = $idx++;
641my $idx_sha1_obj = $idx++;
642my $idx_cast_obj = $idx++;
643my $idx_rc4_obj = $idx++;
644my $idx_rmd160_obj = $idx++;
645my $idx_rc5_obj = $idx++;
646my $idx_wp_obj = $idx++;
647my $idx_cmll_obj = $idx++;
648my $idx_modes_obj = $idx++;
649my $idx_engines_obj = $idx++;
650my $idx_perlasm_scheme = $idx++;
651my $idx_dso_scheme = $idx++;
652my $idx_shared_target = $idx++;
653my $idx_shared_cflag = $idx++;
654my $idx_shared_ldflag = $idx++;
655my $idx_shared_extension = $idx++;
656my $idx_ranlib = $idx++;
657my $idx_arflags = $idx++;
658my $idx_multilib = $idx++;
659
660my $prefix="";
661my $libdir="";
662my $openssldir="";
663my $exe_ext="";
664my $install_prefix= "$ENV{'INSTALL_PREFIX'}";
665my $cross_compile_prefix="";
666my $fipsdir="/usr/local/ssl/fips-2.0";
667my $fipslibdir="";
668my $baseaddr="0xFB00000";
669my $no_threads=0;
670my $threads=0;
671my $no_shared=0; # but "no-shared" is default
672my $zlib=1;      # but "no-zlib" is default
673my $no_krb5=0;   # but "no-krb5" is implied unless "--with-krb5-..." is used
674my $no_rfc3779=1; # but "no-rfc3779" is default
675my $no_asm=0;
676my $no_dso=0;
677my $no_gmp=0;
678my @skip=();
679my $Makefile="Makefile";
680my $des_locl="crypto/des/des_locl.h";
681my $des	="crypto/des/des.h";
682my $bn	="crypto/bn/bn.h";
683my $md2	="crypto/md2/md2.h";
684my $rc4	="crypto/rc4/rc4.h";
685my $rc4_locl="crypto/rc4/rc4_locl.h";
686my $idea	="crypto/idea/idea.h";
687my $rc2	="crypto/rc2/rc2.h";
688my $bf	="crypto/bf/bf_locl.h";
689my $bn_asm	="bn_asm.o";
690my $des_enc="des_enc.o fcrypt_b.o";
691my $aes_enc="aes_core.o aes_cbc.o";
692my $bf_enc	="bf_enc.o";
693my $cast_enc="c_enc.o";
694my $rc4_enc="rc4_enc.o rc4_skey.o";
695my $rc5_enc="rc5_enc.o";
696my $md5_obj="";
697my $sha1_obj="";
698my $rmd160_obj="";
699my $cmll_enc="camellia.o cmll_misc.o cmll_cbc.o";
700my $processor="";
701my $default_ranlib;
702my $perl;
703my $fips=0;
704
705if (exists $ENV{FIPSDIR})
706	{
707	$fipsdir = $ENV{FIPSDIR};
708	$fipsdir =~ s/\/$//;
709	}
710
711# All of the following is disabled by default (RC5 was enabled before 0.9.8):
712
713my %disabled = ( # "what"         => "comment" [or special keyword "experimental"]
714		 "ec_nistp_64_gcc_128" => "default",
715		 "gmp"		  => "default",
716		 "jpake"          => "experimental",
717		 "md2"            => "default",
718		 "rc5"            => "default",
719		 "rfc3779"	  => "default",
720		 "sctp"       => "default",
721		 "shared"         => "default",
722		 "store"	  => "experimental",
723		 "unit-test"	  => "default",
724		 "zlib"           => "default",
725		 "zlib-dynamic"   => "default"
726	       );
727my @experimental = ();
728
729# This is what $depflags will look like with the above defaults
730# (we need this to see if we should advise the user to run "make depend"):
731my $default_depflags = " -DOPENSSL_NO_EC_NISTP_64_GCC_128 -DOPENSSL_NO_GMP -DOPENSSL_NO_JPAKE -DOPENSSL_NO_MD2 -DOPENSSL_NO_RC5 -DOPENSSL_NO_RFC3779 -DOPENSSL_NO_SCTP -DOPENSSL_NO_STORE -DOPENSSL_NO_UNIT_TEST";
732
733# Explicit "no-..." options will be collected in %disabled along with the defaults.
734# To remove something from %disabled, use "enable-foo" (unless it's experimental).
735# For symmetry, "disable-foo" is a synonym for "no-foo".
736
737# For features called "experimental" here, a more explicit "experimental-foo" is needed to enable.
738# We will collect such requests in @experimental.
739# To avoid accidental use of experimental features, applications will have to use -DOPENSSL_EXPERIMENTAL_FOO.
740
741
742my $no_sse2=0;
743
744&usage if ($#ARGV < 0);
745
746my $flags;
747my $depflags;
748my $openssl_experimental_defines;
749my $openssl_algorithm_defines;
750my $openssl_thread_defines;
751my $openssl_sys_defines="";
752my $openssl_other_defines;
753my $libs;
754my $libkrb5="";
755my $target;
756my $options;
757my $symlink;
758my $make_depend=0;
759my %withargs=();
760
761my @argvcopy=@ARGV;
762my $argvstring="";
763my $argv_unprocessed=1;
764
765while($argv_unprocessed)
766	{
767	$flags="";
768	$depflags="";
769	$openssl_experimental_defines="";
770	$openssl_algorithm_defines="";
771	$openssl_thread_defines="";
772	$openssl_sys_defines="";
773	$openssl_other_defines="";
774	$libs="";
775	$target="";
776	$options="";
777	$symlink=1;
778
779	$argv_unprocessed=0;
780	$argvstring=join(' ',@argvcopy);
781
782PROCESS_ARGS:
783	foreach (@argvcopy)
784		{
785		s /^-no-/no-/; # some people just can't read the instructions
786
787		# rewrite some options in "enable-..." form
788		s /^-?-?shared$/enable-shared/;
789		s /^sctp$/enable-sctp/;
790		s /^threads$/enable-threads/;
791		s /^zlib$/enable-zlib/;
792		s /^zlib-dynamic$/enable-zlib-dynamic/;
793
794		if (/^no-(.+)$/ || /^disable-(.+)$/)
795			{
796			if (!($disabled{$1} eq "experimental"))
797				{
798				if ($1 eq "ssl")
799					{
800					$disabled{"ssl2"} = "option(ssl)";
801					$disabled{"ssl3"} = "option(ssl)";
802					}
803				elsif ($1 eq "tls")
804					{
805					$disabled{"tls1"} = "option(tls)"
806					}
807				else
808					{
809					$disabled{$1} = "option";
810					}
811				}
812			}
813		elsif (/^enable-(.+)$/ || /^experimental-(.+)$/)
814			{
815			my $algo = $1;
816			if ($disabled{$algo} eq "experimental")
817				{
818				die "You are requesting an experimental feature; please say 'experimental-$algo' if you are sure\n"
819					unless (/^experimental-/);
820				push @experimental, $algo;
821				}
822			delete $disabled{$algo};
823
824			$threads = 1 if ($algo eq "threads");
825			}
826		elsif (/^--test-sanity$/)
827			{
828			exit(&test_sanity());
829			}
830		elsif (/^--strict-warnings/)
831			{
832			$strict_warnings = 1;
833			}
834		elsif (/^reconfigure/ || /^reconf/)
835			{
836			if (open(IN,"<$Makefile"))
837				{
838				while (<IN>)
839					{
840					chomp;
841					if (/^CONFIGURE_ARGS=(.*)/)
842						{
843						$argvstring=$1;
844						@argvcopy=split(' ',$argvstring);
845						die "Incorrect data to reconfigure, please do a normal configuration\n"
846							if (grep(/^reconf/,@argvcopy));
847						print "Reconfiguring with: $argvstring\n";
848						$argv_unprocessed=1;
849						close(IN);
850						last PROCESS_ARGS;
851						}
852					}
853				close(IN);
854				}
855			die "Insufficient data to reconfigure, please do a normal configuration\n";
856			}
857		elsif (/^386$/)
858			{ $processor=386; }
859		elsif (/^fips$/)
860			{
861			$fips=1;
862			}
863		elsif (/^rsaref$/)
864			{
865			# No RSAref support any more since it's not needed.
866			# The check for the option is there so scripts aren't
867			# broken
868			}
869		elsif (/^[-+]/)
870			{
871			if (/^-[lL](.*)$/ or /^-Wl,/)
872				{
873				$libs.=$_." ";
874				}
875			elsif (/^-[^-]/ or /^\+/)
876				{
877				$_ =~ s/%([0-9a-f]{1,2})/chr(hex($1))/gei;
878				$flags.=$_." ";
879				}
880			elsif (/^--prefix=(.*)$/)
881				{
882				$prefix=$1;
883				}
884			elsif (/^--libdir=(.*)$/)
885				{
886				$libdir=$1;
887				}
888			elsif (/^--openssldir=(.*)$/)
889				{
890				$openssldir=$1;
891				}
892			elsif (/^--install.prefix=(.*)$/)
893				{
894				$install_prefix=$1;
895				}
896			elsif (/^--with-krb5-(dir|lib|include|flavor)=(.*)$/)
897				{
898				$withargs{"krb5-".$1}=$2;
899				}
900			elsif (/^--with-zlib-lib=(.*)$/)
901				{
902				$withargs{"zlib-lib"}=$1;
903				}
904			elsif (/^--with-zlib-include=(.*)$/)
905				{
906				$withargs{"zlib-include"}="-I$1";
907				}
908			elsif (/^--with-fipsdir=(.*)$/)
909				{
910				$fipsdir="$1";
911				}
912			elsif (/^--with-fipslibdir=(.*)$/)
913				{
914				$fipslibdir="$1";
915				}
916			elsif (/^--with-baseaddr=(.*)$/)
917				{
918				$baseaddr="$1";
919				}
920			elsif (/^--cross-compile-prefix=(.*)$/)
921				{
922				$cross_compile_prefix=$1;
923				}
924			else
925				{
926				print STDERR $usage;
927				exit(1);
928				}
929			}
930		elsif ($_ =~ /^([^:]+):(.+)$/)
931			{
932			eval "\$table{\$1} = \"$2\""; # allow $xxx constructs in the string
933			$target=$1;
934			}
935		else
936			{
937			die "target already defined - $target (offending arg: $_)\n" if ($target ne "");
938			$target=$_;
939			}
940
941		unless ($_ eq $target || /^no-/ || /^disable-/)
942			{
943			# "no-..." follows later after implied disactivations
944			# have been derived.  (Don't take this too seroiusly,
945			# we really only write OPTIONS to the Makefile out of
946			# nostalgia.)
947
948			if ($options eq "")
949				{ $options = $_; }
950			else
951				{ $options .= " ".$_; }
952			}
953		}
954	}
955
956
957
958if ($processor eq "386")
959	{
960	$disabled{"sse2"} = "forced";
961	}
962
963if (!defined($withargs{"krb5-flavor"}) || $withargs{"krb5-flavor"} eq "")
964	{
965	$disabled{"krb5"} = "krb5-flavor not specified";
966	}
967
968if (!defined($disabled{"zlib-dynamic"}))
969	{
970	# "zlib-dynamic" was specifically enabled, so enable "zlib"
971	delete $disabled{"zlib"};
972	}
973
974if (defined($disabled{"rijndael"}))
975	{
976	$disabled{"aes"} = "forced";
977	}
978if (defined($disabled{"des"}))
979	{
980	$disabled{"mdc2"} = "forced";
981	}
982if (defined($disabled{"ec"}))
983	{
984	$disabled{"ecdsa"} = "forced";
985	$disabled{"ecdh"} = "forced";
986	}
987
988# SSL 2.0 requires MD5 and RSA
989if (defined($disabled{"md5"}) || defined($disabled{"rsa"}))
990	{
991	$disabled{"ssl2"} = "forced";
992	}
993
994if ($fips && $fipslibdir eq "")
995	{
996	$fipslibdir = $fipsdir . "/lib/";
997	}
998
999# RSAX ENGINE sets default non-FIPS RSA method.
1000if ($fips)
1001	{
1002	$disabled{"rsax"} = "forced";
1003	}
1004
1005# SSL 3.0 and TLS requires MD5 and SHA and either RSA or DSA+DH
1006if (defined($disabled{"md5"}) || defined($disabled{"sha"})
1007    || (defined($disabled{"rsa"})
1008        && (defined($disabled{"dsa"}) || defined($disabled{"dh"}))))
1009	{
1010	$disabled{"ssl3"} = "forced";
1011	$disabled{"tls1"} = "forced";
1012	}
1013
1014if (defined($disabled{"tls1"}))
1015	{
1016	$disabled{"tlsext"} = "forced";
1017	}
1018
1019if (defined($disabled{"ec"}) || defined($disabled{"dsa"})
1020    || defined($disabled{"dh"}))
1021	{
1022	$disabled{"gost"} = "forced";
1023	}
1024
1025# SRP and HEARTBEATS require TLSEXT
1026if (defined($disabled{"tlsext"}))
1027	{
1028	$disabled{"srp"} = "forced";
1029	$disabled{"heartbeats"} = "forced";
1030	}
1031
1032if ($target eq "TABLE") {
1033	foreach $target (sort keys %table) {
1034		print_table_entry($target);
1035	}
1036	exit 0;
1037}
1038
1039if ($target eq "LIST") {
1040	foreach (sort keys %table) {
1041		print;
1042		print "\n";
1043	}
1044	exit 0;
1045}
1046
1047if ($target =~ m/^CygWin32(-.*)$/) {
1048	$target = "Cygwin".$1;
1049}
1050
1051print "Configuring for $target\n";
1052
1053&usage if (!defined($table{$target}));
1054
1055
1056foreach (sort (keys %disabled))
1057	{
1058	$options .= " no-$_";
1059
1060	printf "    no-%-12s %-10s", $_, "[$disabled{$_}]";
1061
1062	if (/^dso$/)
1063		{ $no_dso = 1; }
1064	elsif (/^threads$/)
1065		{ $no_threads = 1; }
1066	elsif (/^shared$/)
1067		{ $no_shared = 1; }
1068	elsif (/^zlib$/)
1069		{ $zlib = 0; }
1070	elsif (/^static-engine$/)
1071		{ }
1072	elsif (/^zlib-dynamic$/)
1073		{ }
1074	elsif (/^symlinks$/)
1075		{ $symlink = 0; }
1076	elsif (/^sse2$/)
1077		{ $no_sse2 = 1; }
1078	else
1079		{
1080		my ($ALGO, $algo);
1081		($ALGO = $algo = $_) =~ tr/[\-a-z]/[_A-Z]/;
1082
1083		if (/^asm$/ || /^err$/ || /^hw$/ || /^hw-/)
1084			{
1085			$openssl_other_defines .= "#define OPENSSL_NO_$ALGO\n";
1086			print " OPENSSL_NO_$ALGO";
1087
1088			if (/^err$/)	{ $flags .= "-DOPENSSL_NO_ERR "; }
1089			elsif (/^asm$/)	{ $no_asm = 1; }
1090			}
1091		else
1092			{
1093			$openssl_algorithm_defines .= "#define OPENSSL_NO_$ALGO\n";
1094			print " OPENSSL_NO_$ALGO";
1095
1096			if (/^krb5$/)
1097				{ $no_krb5 = 1; }
1098			else
1099				{
1100				push @skip, $algo;
1101				# fix-up crypto/directory name(s)
1102				@skip[$#skip]="whrlpool" if $algo eq "whirlpool";
1103				print " (skip dir)";
1104
1105				$depflags .= " -DOPENSSL_NO_$ALGO";
1106				}
1107			}
1108		}
1109
1110	print "\n";
1111	}
1112
1113my $exp_cflags = "";
1114foreach (sort @experimental)
1115	{
1116	my $ALGO;
1117	($ALGO = $_) =~ tr/[a-z]/[A-Z]/;
1118
1119	# opensslconf.h will set OPENSSL_NO_... unless OPENSSL_EXPERIMENTAL_... is defined
1120	$openssl_experimental_defines .= "#define OPENSSL_NO_$ALGO\n";
1121	$exp_cflags .= " -DOPENSSL_EXPERIMENTAL_$ALGO";
1122	}
1123
1124my $IsMK1MF=scalar grep /^$target$/,@MK1MF_Builds;
1125
1126$exe_ext=".exe" if ($target eq "Cygwin" || $target eq "DJGPP" || $target =~ /^mingw/);
1127$exe_ext=".nlm" if ($target =~ /netware/);
1128$exe_ext=".pm"  if ($target =~ /vos/);
1129$openssldir="/usr/local/ssl" if ($openssldir eq "" and $prefix eq "");
1130$prefix=$openssldir if $prefix eq "";
1131
1132$default_ranlib= &which("ranlib") or $default_ranlib="true";
1133$perl=$ENV{'PERL'} or $perl=&which("perl5") or $perl=&which("perl")
1134  or $perl="perl";
1135my $make = $ENV{'MAKE'} || "make";
1136
1137$cross_compile_prefix=$ENV{'CROSS_COMPILE'} if $cross_compile_prefix eq "";
1138
1139chop $openssldir if $openssldir =~ /\/$/;
1140chop $prefix if $prefix =~ /.\/$/;
1141
1142$openssldir=$prefix . "/ssl" if $openssldir eq "";
1143$openssldir=$prefix . "/" . $openssldir if $openssldir !~ /(^\/|^[a-zA-Z]:[\\\/])/;
1144
1145
1146print "IsMK1MF=$IsMK1MF\n";
1147
1148my @fields = split(/\s*:\s*/,$table{$target} . ":" x 30 , -1);
1149my $cc = $fields[$idx_cc];
1150# Allow environment CC to override compiler...
1151if($ENV{CC}) {
1152    $cc = $ENV{CC};
1153}
1154my $cflags = $fields[$idx_cflags];
1155my $unistd = $fields[$idx_unistd];
1156my $thread_cflag = $fields[$idx_thread_cflag];
1157my $sys_id = $fields[$idx_sys_id];
1158my $lflags = $fields[$idx_lflags];
1159my $bn_ops = $fields[$idx_bn_ops];
1160my $cpuid_obj = $fields[$idx_cpuid_obj];
1161my $bn_obj = $fields[$idx_bn_obj];
1162my $des_obj = $fields[$idx_des_obj];
1163my $aes_obj = $fields[$idx_aes_obj];
1164my $bf_obj = $fields[$idx_bf_obj];
1165my $md5_obj = $fields[$idx_md5_obj];
1166my $sha1_obj = $fields[$idx_sha1_obj];
1167my $cast_obj = $fields[$idx_cast_obj];
1168my $rc4_obj = $fields[$idx_rc4_obj];
1169my $rmd160_obj = $fields[$idx_rmd160_obj];
1170my $rc5_obj = $fields[$idx_rc5_obj];
1171my $wp_obj = $fields[$idx_wp_obj];
1172my $cmll_obj = $fields[$idx_cmll_obj];
1173my $modes_obj = $fields[$idx_modes_obj];
1174my $engines_obj = $fields[$idx_engines_obj];
1175my $perlasm_scheme = $fields[$idx_perlasm_scheme];
1176my $dso_scheme = $fields[$idx_dso_scheme];
1177my $shared_target = $fields[$idx_shared_target];
1178my $shared_cflag = $fields[$idx_shared_cflag];
1179my $shared_ldflag = $fields[$idx_shared_ldflag];
1180my $shared_extension = $fields[$idx_shared_extension];
1181my $ranlib = $ENV{'RANLIB'} || $fields[$idx_ranlib];
1182my $ar = $ENV{'AR'} || "ar";
1183my $arflags = $fields[$idx_arflags];
1184my $multilib = $fields[$idx_multilib];
1185
1186# if $prefix/lib$multilib is not an existing directory, then
1187# assume that it's not searched by linker automatically, in
1188# which case adding $multilib suffix causes more grief than
1189# we're ready to tolerate, so don't...
1190$multilib="" if !-d "$prefix/lib$multilib";
1191
1192$libdir="lib$multilib" if $libdir eq "";
1193
1194$cflags = "$cflags$exp_cflags";
1195
1196# '%' in $lflags is used to split flags to "pre-" and post-flags
1197my ($prelflags,$postlflags)=split('%',$lflags);
1198if (defined($postlflags))	{ $lflags=$postlflags;	}
1199else				{ $lflags=$prelflags; undef $prelflags;	}
1200
1201if ($target =~ /^mingw/ && `$cc --target-help 2>&1` !~ m/\-mno\-cygwin/m)
1202	{
1203	$cflags =~ s/\-mno\-cygwin\s*//;
1204	$shared_ldflag =~ s/\-mno\-cygwin\s*//;
1205	}
1206
1207my $no_shared_warn=0;
1208my $no_user_cflags=0;
1209
1210if ($flags ne "")	{ $cflags="$flags$cflags"; }
1211else			{ $no_user_cflags=1;       }
1212
1213# Kerberos settings.  The flavor must be provided from outside, either through
1214# the script "config" or manually.
1215if (!$no_krb5)
1216	{
1217	my ($lresolv, $lpath, $lext);
1218	if ($withargs{"krb5-flavor"} =~ /^[Hh]eimdal$/)
1219		{
1220		die "Sorry, Heimdal is currently not supported\n";
1221		}
1222	##### HACK to force use of Heimdal.
1223	##### WARNING: Since we don't really have adequate support for Heimdal,
1224	#####          using this will break the build.  You'll have to make
1225	#####          changes to the source, and if you do, please send
1226	#####          patches to openssl-dev@openssl.org
1227	if ($withargs{"krb5-flavor"} =~ /^force-[Hh]eimdal$/)
1228		{
1229		warn "Heimdal isn't really supported.  Your build WILL break\n";
1230		warn "If you fix the problems, please send a patch to openssl-dev\@openssl.org\n";
1231		$withargs{"krb5-dir"} = "/usr/heimdal"
1232			if $withargs{"krb5-dir"} eq "";
1233		$withargs{"krb5-lib"} = "-L".$withargs{"krb5-dir"}.
1234			"/lib -lgssapi -lkrb5 -lcom_err"
1235			if $withargs{"krb5-lib"} eq "" && !$IsMK1MF;
1236		$cflags="-DKRB5_HEIMDAL $cflags";
1237		}
1238	if ($withargs{"krb5-flavor"} =~ /^[Mm][Ii][Tt]/)
1239		{
1240		$withargs{"krb5-dir"} = "/usr/kerberos"
1241			if $withargs{"krb5-dir"} eq "";
1242		$withargs{"krb5-lib"} = "-L".$withargs{"krb5-dir"}.
1243			"/lib -lgssapi_krb5 -lkrb5 -lcom_err -lk5crypto"
1244			if $withargs{"krb5-lib"} eq "" && !$IsMK1MF;
1245		$cflags="-DKRB5_MIT $cflags";
1246		$withargs{"krb5-flavor"} =~ s/^[Mm][Ii][Tt][._-]*//;
1247		if ($withargs{"krb5-flavor"} =~ /^1[._-]*[01]/)
1248			{
1249			$cflags="-DKRB5_MIT_OLD11 $cflags";
1250			}
1251		}
1252	LRESOLV:
1253	foreach $lpath ("/lib", "/usr/lib")
1254		{
1255		foreach $lext ("a", "so")
1256			{
1257			$lresolv = "$lpath/libresolv.$lext";
1258			last LRESOLV	if (-r "$lresolv");
1259			$lresolv = "";
1260			}
1261		}
1262	$withargs{"krb5-lib"} .= " -lresolv"
1263		if ("$lresolv" ne "");
1264	$withargs{"krb5-include"} = "-I".$withargs{"krb5-dir"}."/include"
1265		if $withargs{"krb5-include"} eq "" &&
1266		   $withargs{"krb5-dir"} ne "";
1267	}
1268
1269# The DSO code currently always implements all functions so that no
1270# applications will have to worry about that from a compilation point
1271# of view. However, the "method"s may return zero unless that platform
1272# has support compiled in for them. Currently each method is enabled
1273# by a define "DSO_<name>" ... we translate the "dso_scheme" config
1274# string entry into using the following logic;
1275my $dso_cflags;
1276if (!$no_dso && $dso_scheme ne "")
1277	{
1278	$dso_scheme =~ tr/[a-z]/[A-Z]/;
1279	if ($dso_scheme eq "DLFCN")
1280		{
1281		$dso_cflags = "-DDSO_DLFCN -DHAVE_DLFCN_H";
1282		}
1283	elsif ($dso_scheme eq "DLFCN_NO_H")
1284		{
1285		$dso_cflags = "-DDSO_DLFCN";
1286		}
1287	else
1288		{
1289		$dso_cflags = "-DDSO_$dso_scheme";
1290		}
1291	$cflags = "$dso_cflags $cflags";
1292	}
1293
1294my $thread_cflags;
1295my $thread_defines;
1296if ($thread_cflag ne "(unknown)" && !$no_threads)
1297	{
1298	# If we know how to do it, support threads by default.
1299	$threads = 1;
1300	}
1301if ($thread_cflag eq "(unknown)" && $threads)
1302	{
1303	# If the user asked for "threads", [s]he is also expected to
1304	# provide any system-dependent compiler options that are
1305	# necessary.
1306	if ($no_user_cflags)
1307		{
1308		print "You asked for multi-threading support, but didn't\n";
1309		print "provide any system-specific compiler options\n";
1310		exit(1);
1311		}
1312	$thread_cflags="-DOPENSSL_THREADS $cflags" ;
1313	$thread_defines .= "#define OPENSSL_THREADS\n";
1314	}
1315else
1316	{
1317	$thread_cflags="-DOPENSSL_THREADS $thread_cflag $cflags";
1318	$thread_defines .= "#define OPENSSL_THREADS\n";
1319#	my $def;
1320#	foreach $def (split ' ',$thread_cflag)
1321#		{
1322#		if ($def =~ s/^-D// && $def !~ /^_/)
1323#			{
1324#			$thread_defines .= "#define $def\n";
1325#			}
1326#		}
1327	}
1328
1329$lflags="$libs$lflags" if ($libs ne "");
1330
1331if ($no_asm)
1332	{
1333	$cpuid_obj=$bn_obj=
1334	$des_obj=$aes_obj=$bf_obj=$cast_obj=$rc4_obj=$rc5_obj=$cmll_obj=
1335	$modes_obj=$sha1_obj=$md5_obj=$rmd160_obj=$wp_obj=$engines_obj="";
1336	}
1337
1338if (!$no_shared)
1339	{
1340	$cast_obj="";	# CAST assembler is not PIC
1341	}
1342
1343if ($threads)
1344	{
1345	$cflags=$thread_cflags;
1346	$openssl_thread_defines .= $thread_defines;
1347	}
1348
1349if ($zlib)
1350	{
1351	$cflags = "-DZLIB $cflags";
1352	if (defined($disabled{"zlib-dynamic"}))
1353		{
1354		if (defined($withargs{"zlib-lib"}))
1355			{
1356			$lflags = "$lflags -L" . $withargs{"zlib-lib"} . " -lz";
1357			}
1358		else
1359			{
1360			$lflags = "$lflags -lz";
1361			}
1362		}
1363	else
1364		{
1365		$cflags = "-DZLIB_SHARED $cflags";
1366		}
1367	}
1368
1369# You will find shlib_mark1 and shlib_mark2 explained in Makefile.org
1370my $shared_mark = "";
1371if ($shared_target eq "")
1372	{
1373	$no_shared_warn = 1 if !$no_shared;
1374	$no_shared = 1;
1375	}
1376if (!$no_shared)
1377	{
1378	if ($shared_cflag ne "")
1379		{
1380		$cflags = "$shared_cflag -DOPENSSL_PIC $cflags";
1381		}
1382	}
1383
1384if (!$IsMK1MF)
1385	{
1386	# add {no-}static-engine to options to allow mkdef.pl to work without extra arguments
1387	if ($no_shared)
1388		{
1389		$openssl_other_defines.="#define OPENSSL_NO_DYNAMIC_ENGINE\n";
1390		$options.=" static-engine";
1391		}
1392	else
1393		{
1394		$openssl_other_defines.="#define OPENSSL_NO_STATIC_ENGINE\n";
1395		$options.=" no-static-engine";
1396		}
1397	}
1398
1399$cpuid_obj.=" uplink.o uplink-x86.o" if ($cflags =~ /\-DOPENSSL_USE_APPLINK/);
1400
1401#
1402# Platform fix-ups
1403#
1404if ($target =~ /\-icc$/)	# Intel C compiler
1405	{
1406	my $iccver=0;
1407	if (open(FD,"$cc -V 2>&1 |"))
1408		{
1409		while(<FD>) { $iccver=$1 if (/Version ([0-9]+)\./); }
1410		close(FD);
1411		}
1412	if ($iccver>=8)
1413		{
1414		# Eliminate unnecessary dependency from libirc.a. This is
1415		# essential for shared library support, as otherwise
1416		# apps/openssl can end up in endless loop upon startup...
1417		$cflags.=" -Dmemcpy=__builtin_memcpy -Dmemset=__builtin_memset";
1418		}
1419	if ($iccver>=9)
1420		{
1421		$cflags.=" -i-static";
1422		$cflags=~s/\-no_cpprt/-no-cpprt/;
1423		}
1424	if ($iccver>=10)
1425		{
1426		$cflags=~s/\-i\-static/-static-intel/;
1427		}
1428	}
1429
1430# Unlike other OSes (like Solaris, Linux, Tru64, IRIX) BSD run-time
1431# linkers (tested OpenBSD, NetBSD and FreeBSD) "demand" RPATH set on
1432# .so objects. Apparently application RPATH is not global and does
1433# not apply to .so linked with other .so. Problem manifests itself
1434# when libssl.so fails to load libcrypto.so. One can argue that we
1435# should engrave this into Makefile.shared rules or into BSD-* config
1436# lines above. Meanwhile let's try to be cautious and pass -rpath to
1437# linker only when --prefix is not /usr.
1438if ($target =~ /^BSD\-/)
1439	{
1440	$shared_ldflag.=" -Wl,-rpath,\$(LIBRPATH)" if ($prefix !~ m|^/usr[/]*$|);
1441	}
1442
1443if ($sys_id ne "")
1444	{
1445	#$cflags="-DOPENSSL_SYSNAME_$sys_id $cflags";
1446	$openssl_sys_defines="#define OPENSSL_SYSNAME_$sys_id\n";
1447	}
1448
1449if ($ranlib eq "")
1450	{
1451	$ranlib = $default_ranlib;
1452	}
1453
1454#my ($bn1)=split(/\s+/,$bn_obj);
1455#$bn1 = "" unless defined $bn1;
1456#$bn1=$bn_asm unless ($bn1 =~ /\.o$/);
1457#$bn_obj="$bn1";
1458
1459$cpuid_obj="" if ($processor eq "386");
1460
1461$bn_obj = $bn_asm unless $bn_obj ne "";
1462# bn-586 is the only one implementing bn_*_part_words
1463$cflags.=" -DOPENSSL_BN_ASM_PART_WORDS" if ($bn_obj =~ /bn-586/);
1464$cflags.=" -DOPENSSL_IA32_SSE2" if (!$no_sse2 && $bn_obj =~ /86/);
1465
1466$cflags.=" -DOPENSSL_BN_ASM_MONT" if ($bn_obj =~ /-mont/);
1467$cflags.=" -DOPENSSL_BN_ASM_MONT5" if ($bn_obj =~ /-mont5/);
1468$cflags.=" -DOPENSSL_BN_ASM_GF2m" if ($bn_obj =~ /-gf2m/);
1469
1470if ($fips)
1471	{
1472	$openssl_other_defines.="#define OPENSSL_FIPS\n";
1473	$cflags .= " -I\$(FIPSDIR)/include";
1474	}
1475
1476$cpuid_obj="mem_clr.o"	unless ($cpuid_obj =~ /\.o$/);
1477$des_obj=$des_enc	unless ($des_obj =~ /\.o$/);
1478$bf_obj=$bf_enc		unless ($bf_obj =~ /\.o$/);
1479$cast_obj=$cast_enc	unless ($cast_obj =~ /\.o$/);
1480$rc4_obj=$rc4_enc	unless ($rc4_obj =~ /\.o$/);
1481$rc5_obj=$rc5_enc	unless ($rc5_obj =~ /\.o$/);
1482if ($sha1_obj =~ /\.o$/)
1483	{
1484#	$sha1_obj=$sha1_enc;
1485	$cflags.=" -DSHA1_ASM"   if ($sha1_obj =~ /sx86/ || $sha1_obj =~ /sha1/);
1486	$cflags.=" -DSHA256_ASM" if ($sha1_obj =~ /sha256/);
1487	$cflags.=" -DSHA512_ASM" if ($sha1_obj =~ /sha512/);
1488	if ($sha1_obj =~ /sse2/)
1489	    {	if ($no_sse2)
1490		{   $sha1_obj =~ s/\S*sse2\S+//;        }
1491		elsif ($cflags !~ /OPENSSL_IA32_SSE2/)
1492		{   $cflags.=" -DOPENSSL_IA32_SSE2";    }
1493	    }
1494	}
1495if ($md5_obj =~ /\.o$/)
1496	{
1497#	$md5_obj=$md5_enc;
1498	$cflags.=" -DMD5_ASM";
1499	}
1500if ($rmd160_obj =~ /\.o$/)
1501	{
1502#	$rmd160_obj=$rmd160_enc;
1503	$cflags.=" -DRMD160_ASM";
1504	}
1505if ($aes_obj =~ /\.o$/)
1506	{
1507	$cflags.=" -DAES_ASM";
1508	# aes-ctr.o is not a real file, only indication that assembler
1509	# module implements AES_ctr32_encrypt...
1510	$cflags.=" -DAES_CTR_ASM" if ($aes_obj =~ s/\s*aes\-ctr\.o//);
1511	# aes-xts.o indicates presense of AES_xts_[en|de]crypt...
1512	$cflags.=" -DAES_XTS_ASM" if ($aes_obj =~ s/\s*aes\-xts\.o//);
1513	$aes_obj =~ s/\s*(vpaes|aesni)\-x86\.o//g if ($no_sse2);
1514	$cflags.=" -DVPAES_ASM" if ($aes_obj =~ m/vpaes/);
1515	$cflags.=" -DBSAES_ASM" if ($aes_obj =~ m/bsaes/);
1516	}
1517else	{
1518	$aes_obj=$aes_enc;
1519	}
1520$wp_obj="" if ($wp_obj =~ /mmx/ && $processor eq "386");
1521if ($wp_obj =~ /\.o$/ && !$disabled{"whirlpool"})
1522	{
1523	$cflags.=" -DWHIRLPOOL_ASM";
1524	}
1525else	{
1526	$wp_obj="wp_block.o";
1527	}
1528$cmll_obj=$cmll_enc	unless ($cmll_obj =~ /.o$/);
1529if ($modes_obj =~ /ghash/)
1530	{
1531	$cflags.=" -DGHASH_ASM";
1532	}
1533
1534# "Stringify" the C flags string.  This permits it to be made part of a string
1535# and works as well on command lines.
1536$cflags =~ s/([\\\"])/\\\1/g;
1537
1538my $version = "unknown";
1539my $version_num = "unknown";
1540my $major = "unknown";
1541my $minor = "unknown";
1542my $shlib_version_number = "unknown";
1543my $shlib_version_history = "unknown";
1544my $shlib_major = "unknown";
1545my $shlib_minor = "unknown";
1546
1547open(IN,'<crypto/opensslv.h') || die "unable to read opensslv.h:$!\n";
1548while (<IN>)
1549	{
1550	$version=$1 if /OPENSSL.VERSION.TEXT.*OpenSSL (\S+) /;
1551	$version_num=$1 if /OPENSSL.VERSION.NUMBER.*0x(\S+)/;
1552	$shlib_version_number=$1 if /SHLIB_VERSION_NUMBER *"([^"]+)"/;
1553	$shlib_version_history=$1 if /SHLIB_VERSION_HISTORY *"([^"]*)"/;
1554	}
1555close(IN);
1556if ($shlib_version_history ne "") { $shlib_version_history .= ":"; }
1557
1558if ($version =~ /(^[0-9]*)\.([0-9\.]*)/)
1559	{
1560	$major=$1;
1561	$minor=$2;
1562	}
1563
1564if ($shlib_version_number =~ /(^[0-9]*)\.([0-9\.]*)/)
1565	{
1566	$shlib_major=$1;
1567	$shlib_minor=$2;
1568	}
1569
1570if ($strict_warnings)
1571	{
1572	my $wopt;
1573	die "ERROR --strict-warnings requires gcc" unless ($cc =~ /gcc$/);
1574	foreach $wopt (split /\s+/, $gcc_devteam_warn)
1575		{
1576		$cflags .= " $wopt" unless ($cflags =~ /$wopt/)
1577		}
1578	}
1579
1580open(IN,'<Makefile.org') || die "unable to read Makefile.org:$!\n";
1581unlink("$Makefile.new") || die "unable to remove old $Makefile.new:$!\n" if -e "$Makefile.new";
1582open(OUT,">$Makefile.new") || die "unable to create $Makefile.new:$!\n";
1583print OUT "### Generated automatically from Makefile.org by Configure.\n\n";
1584my $sdirs=0;
1585while (<IN>)
1586	{
1587	chomp;
1588	$sdirs = 1 if /^SDIRS=/;
1589	if ($sdirs) {
1590		my $dir;
1591		foreach $dir (@skip) {
1592			s/(\s)$dir /$1/;
1593			s/\s$dir$//;
1594			}
1595		}
1596	$sdirs = 0 unless /\\$/;
1597        s/engines // if (/^DIRS=/ && $disabled{"engine"});
1598	s/ccgost// if (/^ENGDIRS=/ && $disabled{"gost"});
1599	s/^VERSION=.*/VERSION=$version/;
1600	s/^MAJOR=.*/MAJOR=$major/;
1601	s/^MINOR=.*/MINOR=$minor/;
1602	s/^SHLIB_VERSION_NUMBER=.*/SHLIB_VERSION_NUMBER=$shlib_version_number/;
1603	s/^SHLIB_VERSION_HISTORY=.*/SHLIB_VERSION_HISTORY=$shlib_version_history/;
1604	s/^SHLIB_MAJOR=.*/SHLIB_MAJOR=$shlib_major/;
1605	s/^SHLIB_MINOR=.*/SHLIB_MINOR=$shlib_minor/;
1606	s/^SHLIB_EXT=.*/SHLIB_EXT=$shared_extension/;
1607	s/^INSTALLTOP=.*$/INSTALLTOP=$prefix/;
1608	s/^MULTILIB=.*$/MULTILIB=$multilib/;
1609	s/^OPENSSLDIR=.*$/OPENSSLDIR=$openssldir/;
1610	s/^LIBDIR=.*$/LIBDIR=$libdir/;
1611	s/^INSTALL_PREFIX=.*$/INSTALL_PREFIX=$install_prefix/;
1612	s/^PLATFORM=.*$/PLATFORM=$target/;
1613	s/^OPTIONS=.*$/OPTIONS=$options/;
1614	s/^CONFIGURE_ARGS=.*$/CONFIGURE_ARGS=$argvstring/;
1615	if ($cross_compile_prefix)
1616		{
1617		s/^CC=.*$/CROSS_COMPILE= $cross_compile_prefix\nCC= \$\(CROSS_COMPILE\)$cc/;
1618		s/^AR=\s*/AR= \$\(CROSS_COMPILE\)/;
1619		s/^NM=\s*/NM= \$\(CROSS_COMPILE\)/;
1620		s/^RANLIB=\s*/RANLIB= \$\(CROSS_COMPILE\)/;
1621		s/^MAKEDEPPROG=.*$/MAKEDEPPROG= \$\(CROSS_COMPILE\)$cc/ if $cc eq "gcc";
1622		}
1623	else	{
1624		s/^CC=.*$/CC= $cc/;
1625		s/^AR=\s*ar/AR= $ar/;
1626		s/^RANLIB=.*/RANLIB= $ranlib/;
1627		s/^MAKEDEPPROG=.*$/MAKEDEPPROG= $cc/ if $cc eq "gcc";
1628		}
1629	s/^CFLAG=.*$/CFLAG= $cflags/;
1630	s/^DEPFLAG=.*$/DEPFLAG=$depflags/;
1631	s/^PEX_LIBS=.*$/PEX_LIBS= $prelflags/;
1632	s/^EX_LIBS=.*$/EX_LIBS= $lflags/;
1633	s/^EXE_EXT=.*$/EXE_EXT= $exe_ext/;
1634	s/^CPUID_OBJ=.*$/CPUID_OBJ= $cpuid_obj/;
1635	s/^BN_ASM=.*$/BN_ASM= $bn_obj/;
1636	s/^DES_ENC=.*$/DES_ENC= $des_obj/;
1637	s/^AES_ENC=.*$/AES_ENC= $aes_obj/;
1638	s/^BF_ENC=.*$/BF_ENC= $bf_obj/;
1639	s/^CAST_ENC=.*$/CAST_ENC= $cast_obj/;
1640	s/^RC4_ENC=.*$/RC4_ENC= $rc4_obj/;
1641	s/^RC5_ENC=.*$/RC5_ENC= $rc5_obj/;
1642	s/^MD5_ASM_OBJ=.*$/MD5_ASM_OBJ= $md5_obj/;
1643	s/^SHA1_ASM_OBJ=.*$/SHA1_ASM_OBJ= $sha1_obj/;
1644	s/^RMD160_ASM_OBJ=.*$/RMD160_ASM_OBJ= $rmd160_obj/;
1645	s/^WP_ASM_OBJ=.*$/WP_ASM_OBJ= $wp_obj/;
1646	s/^CMLL_ENC=.*$/CMLL_ENC= $cmll_obj/;
1647	s/^MODES_ASM_OBJ.=*$/MODES_ASM_OBJ= $modes_obj/;
1648	s/^ENGINES_ASM_OBJ.=*$/ENGINES_ASM_OBJ= $engines_obj/;
1649	s/^PERLASM_SCHEME=.*$/PERLASM_SCHEME= $perlasm_scheme/;
1650	s/^PROCESSOR=.*/PROCESSOR= $processor/;
1651	s/^ARFLAGS=.*/ARFLAGS= $arflags/;
1652	s/^PERL=.*/PERL= $perl/;
1653	s/^KRB5_INCLUDES=.*/KRB5_INCLUDES=$withargs{"krb5-include"}/;
1654	s/^LIBKRB5=.*/LIBKRB5=$withargs{"krb5-lib"}/;
1655	s/^LIBZLIB=.*/LIBZLIB=$withargs{"zlib-lib"}/;
1656	s/^ZLIB_INCLUDE=.*/ZLIB_INCLUDE=$withargs{"zlib-include"}/;
1657
1658	s/^FIPSDIR=.*/FIPSDIR=$fipsdir/;
1659	s/^FIPSLIBDIR=.*/FIPSLIBDIR=$fipslibdir/;
1660	s/^FIPSCANLIB=.*/FIPSCANLIB=libcrypto/ if $fips;
1661	s/^BASEADDR=.*/BASEADDR=$baseaddr/;
1662
1663	s/^SHLIB_TARGET=.*/SHLIB_TARGET=$shared_target/;
1664	s/^SHLIB_MARK=.*/SHLIB_MARK=$shared_mark/;
1665	s/^SHARED_LIBS=.*/SHARED_LIBS=\$(SHARED_CRYPTO) \$(SHARED_SSL)/ if (!$no_shared);
1666	if ($shared_extension ne "" && $shared_extension =~ /^\.s([ol])\.[^\.]*$/)
1667		{
1668		my $sotmp = $1;
1669		s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.s$sotmp/;
1670		}
1671	elsif ($shared_extension ne "" && $shared_extension =~ /^\.[^\.]*\.dylib$/)
1672		{
1673		s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.dylib/;
1674		}
1675	elsif ($shared_extension ne "" && $shared_extension =~ /^\.s([ol])\.[^\.]*\.[^\.]*$/)
1676		{
1677		my $sotmp = $1;
1678		s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.s$sotmp.\$(SHLIB_MAJOR) .s$sotmp/;
1679		}
1680	elsif ($shared_extension ne "" && $shared_extension =~ /^\.[^\.]*\.[^\.]*\.dylib$/)
1681		{
1682		s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.\$(SHLIB_MAJOR).dylib .dylib/;
1683		}
1684	s/^SHARED_LDFLAGS=.*/SHARED_LDFLAGS=$shared_ldflag/;
1685	print OUT $_."\n";
1686	}
1687close(IN);
1688close(OUT);
1689rename($Makefile,"$Makefile.bak") || die "unable to rename $Makefile\n" if -e $Makefile;
1690rename("$Makefile.new",$Makefile) || die "unable to rename $Makefile.new\n";
1691
1692print "CC            =$cc\n";
1693print "CFLAG         =$cflags\n";
1694print "EX_LIBS       =$lflags\n";
1695print "CPUID_OBJ     =$cpuid_obj\n";
1696print "BN_ASM        =$bn_obj\n";
1697print "DES_ENC       =$des_obj\n";
1698print "AES_ENC       =$aes_obj\n";
1699print "BF_ENC        =$bf_obj\n";
1700print "CAST_ENC      =$cast_obj\n";
1701print "RC4_ENC       =$rc4_obj\n";
1702print "RC5_ENC       =$rc5_obj\n";
1703print "MD5_OBJ_ASM   =$md5_obj\n";
1704print "SHA1_OBJ_ASM  =$sha1_obj\n";
1705print "RMD160_OBJ_ASM=$rmd160_obj\n";
1706print "CMLL_ENC      =$cmll_obj\n";
1707print "MODES_OBJ     =$modes_obj\n";
1708print "ENGINES_OBJ   =$engines_obj\n";
1709print "PROCESSOR     =$processor\n";
1710print "RANLIB        =$ranlib\n";
1711print "ARFLAGS       =$arflags\n";
1712print "PERL          =$perl\n";
1713print "KRB5_INCLUDES =",$withargs{"krb5-include"},"\n"
1714	if $withargs{"krb5-include"} ne "";
1715
1716my $des_ptr=0;
1717my $des_risc1=0;
1718my $des_risc2=0;
1719my $des_unroll=0;
1720my $bn_ll=0;
1721my $def_int=2;
1722my $rc4_int=$def_int;
1723my $md2_int=$def_int;
1724my $idea_int=$def_int;
1725my $rc2_int=$def_int;
1726my $rc4_idx=0;
1727my $rc4_chunk=0;
1728my $bf_ptr=0;
1729my @type=("char","short","int","long");
1730my ($b64l,$b64,$b32,$b16,$b8)=(0,0,1,0,0);
1731my $export_var_as_fn=0;
1732
1733my $des_int;
1734
1735foreach (sort split(/\s+/,$bn_ops))
1736	{
1737	$des_ptr=1 if /DES_PTR/;
1738	$des_risc1=1 if /DES_RISC1/;
1739	$des_risc2=1 if /DES_RISC2/;
1740	$des_unroll=1 if /DES_UNROLL/;
1741	$des_int=1 if /DES_INT/;
1742	$bn_ll=1 if /BN_LLONG/;
1743	$rc4_int=0 if /RC4_CHAR/;
1744	$rc4_int=3 if /RC4_LONG/;
1745	$rc4_idx=1 if /RC4_INDEX/;
1746	$rc4_chunk=1 if /RC4_CHUNK/;
1747	$rc4_chunk=2 if /RC4_CHUNK_LL/;
1748	$md2_int=0 if /MD2_CHAR/;
1749	$md2_int=3 if /MD2_LONG/;
1750	$idea_int=1 if /IDEA_SHORT/;
1751	$idea_int=3 if /IDEA_LONG/;
1752	$rc2_int=1 if /RC2_SHORT/;
1753	$rc2_int=3 if /RC2_LONG/;
1754	$bf_ptr=1 if $_ eq "BF_PTR";
1755	$bf_ptr=2 if $_ eq "BF_PTR2";
1756	($b64l,$b64,$b32,$b16,$b8)=(0,1,0,0,0) if /SIXTY_FOUR_BIT/;
1757	($b64l,$b64,$b32,$b16,$b8)=(1,0,0,0,0) if /SIXTY_FOUR_BIT_LONG/;
1758	($b64l,$b64,$b32,$b16,$b8)=(0,0,1,0,0) if /THIRTY_TWO_BIT/;
1759	($b64l,$b64,$b32,$b16,$b8)=(0,0,0,1,0) if /SIXTEEN_BIT/;
1760	($b64l,$b64,$b32,$b16,$b8)=(0,0,0,0,1) if /EIGHT_BIT/;
1761	$export_var_as_fn=1 if /EXPORT_VAR_AS_FN/;
1762	}
1763
1764open(IN,'<crypto/opensslconf.h.in') || die "unable to read crypto/opensslconf.h.in:$!\n";
1765unlink("crypto/opensslconf.h.new") || die "unable to remove old crypto/opensslconf.h.new:$!\n" if -e "crypto/opensslconf.h.new";
1766open(OUT,'>crypto/opensslconf.h.new') || die "unable to create crypto/opensslconf.h.new:$!\n";
1767print OUT "/* opensslconf.h */\n";
1768print OUT "/* WARNING: Generated automatically from opensslconf.h.in by Configure. */\n\n";
1769
1770print OUT "/* OpenSSL was configured with the following options: */\n";
1771my $openssl_algorithm_defines_trans = $openssl_algorithm_defines;
1772$openssl_experimental_defines =~ s/^\s*#\s*define\s+OPENSSL_NO_(.*)/#ifndef OPENSSL_EXPERIMENTAL_$1\n# ifndef OPENSSL_NO_$1\n#  define OPENSSL_NO_$1\n# endif\n#endif/mg;
1773$openssl_algorithm_defines_trans =~ s/^\s*#\s*define\s+OPENSSL_(.*)/# if defined(OPENSSL_$1) \&\& !defined($1)\n#  define $1\n# endif/mg;
1774$openssl_algorithm_defines =~ s/^\s*#\s*define\s+(.*)/#ifndef $1\n# define $1\n#endif/mg;
1775$openssl_algorithm_defines = "   /* no ciphers excluded */\n" if $openssl_algorithm_defines eq "";
1776$openssl_thread_defines =~ s/^\s*#\s*define\s+(.*)/#ifndef $1\n# define $1\n#endif/mg;
1777$openssl_sys_defines =~ s/^\s*#\s*define\s+(.*)/#ifndef $1\n# define $1\n#endif/mg;
1778$openssl_other_defines =~ s/^\s*#\s*define\s+(.*)/#ifndef $1\n# define $1\n#endif/mg;
1779print OUT $openssl_sys_defines;
1780print OUT "#ifndef OPENSSL_DOING_MAKEDEPEND\n\n";
1781print OUT $openssl_experimental_defines;
1782print OUT "\n";
1783print OUT $openssl_algorithm_defines;
1784print OUT "\n#endif /* OPENSSL_DOING_MAKEDEPEND */\n\n";
1785print OUT $openssl_thread_defines;
1786print OUT $openssl_other_defines,"\n";
1787
1788print OUT "/* The OPENSSL_NO_* macros are also defined as NO_* if the application\n";
1789print OUT "   asks for it.  This is a transient feature that is provided for those\n";
1790print OUT "   who haven't had the time to do the appropriate changes in their\n";
1791print OUT "   applications.  */\n";
1792print OUT "#ifdef OPENSSL_ALGORITHM_DEFINES\n";
1793print OUT $openssl_algorithm_defines_trans;
1794print OUT "#endif\n\n";
1795
1796print OUT "#define OPENSSL_CPUID_OBJ\n\n" if ($cpuid_obj ne "mem_clr.o");
1797
1798while (<IN>)
1799	{
1800	if	(/^#define\s+OPENSSLDIR/)
1801		{
1802		my $foo = $openssldir;
1803		$foo =~ s/\\/\\\\/g;
1804		print OUT "#define OPENSSLDIR \"$foo\"\n";
1805		}
1806	elsif	(/^#define\s+ENGINESDIR/)
1807		{
1808		my $foo = "$prefix/$libdir/engines";
1809		$foo =~ s/\\/\\\\/g;
1810		print OUT "#define ENGINESDIR \"$foo\"\n";
1811		}
1812	elsif	(/^#((define)|(undef))\s+OPENSSL_EXPORT_VAR_AS_FUNCTION/)
1813		{ printf OUT "#undef OPENSSL_EXPORT_VAR_AS_FUNCTION\n"
1814			if $export_var_as_fn;
1815		  printf OUT "#%s OPENSSL_EXPORT_VAR_AS_FUNCTION\n",
1816			($export_var_as_fn)?"define":"undef"; }
1817	elsif	(/^#define\s+OPENSSL_UNISTD/)
1818		{
1819		$unistd = "<unistd.h>" if $unistd eq "";
1820		print OUT "#define OPENSSL_UNISTD $unistd\n";
1821		}
1822	elsif	(/^#((define)|(undef))\s+SIXTY_FOUR_BIT_LONG/)
1823		{ printf OUT "#%s SIXTY_FOUR_BIT_LONG\n",($b64l)?"define":"undef"; }
1824	elsif	(/^#((define)|(undef))\s+SIXTY_FOUR_BIT/)
1825		{ printf OUT "#%s SIXTY_FOUR_BIT\n",($b64)?"define":"undef"; }
1826	elsif	(/^#((define)|(undef))\s+THIRTY_TWO_BIT/)
1827		{ printf OUT "#%s THIRTY_TWO_BIT\n",($b32)?"define":"undef"; }
1828	elsif	(/^#((define)|(undef))\s+SIXTEEN_BIT/)
1829		{ printf OUT "#%s SIXTEEN_BIT\n",($b16)?"define":"undef"; }
1830	elsif	(/^#((define)|(undef))\s+EIGHT_BIT/)
1831		{ printf OUT "#%s EIGHT_BIT\n",($b8)?"define":"undef"; }
1832	elsif	(/^#((define)|(undef))\s+BN_LLONG\s*$/)
1833		{ printf OUT "#%s BN_LLONG\n",($bn_ll)?"define":"undef"; }
1834	elsif	(/^\#define\s+DES_LONG\s+.*/)
1835		{ printf OUT "#define DES_LONG unsigned %s\n",
1836			($des_int)?'int':'long'; }
1837	elsif	(/^\#(define|undef)\s+DES_PTR/)
1838		{ printf OUT "#%s DES_PTR\n",($des_ptr)?'define':'undef'; }
1839	elsif	(/^\#(define|undef)\s+DES_RISC1/)
1840		{ printf OUT "#%s DES_RISC1\n",($des_risc1)?'define':'undef'; }
1841	elsif	(/^\#(define|undef)\s+DES_RISC2/)
1842		{ printf OUT "#%s DES_RISC2\n",($des_risc2)?'define':'undef'; }
1843	elsif	(/^\#(define|undef)\s+DES_UNROLL/)
1844		{ printf OUT "#%s DES_UNROLL\n",($des_unroll)?'define':'undef'; }
1845	elsif	(/^#define\s+RC4_INT\s/)
1846		{ printf OUT "#define RC4_INT unsigned %s\n",$type[$rc4_int]; }
1847	elsif	(/^#undef\s+RC4_CHUNK/)
1848		{
1849		printf OUT "#undef RC4_CHUNK\n" if $rc4_chunk==0;
1850		printf OUT "#define RC4_CHUNK unsigned long\n" if $rc4_chunk==1;
1851		printf OUT "#define RC4_CHUNK unsigned long long\n" if $rc4_chunk==2;
1852		}
1853	elsif	(/^#((define)|(undef))\s+RC4_INDEX/)
1854		{ printf OUT "#%s RC4_INDEX\n",($rc4_idx)?"define":"undef"; }
1855	elsif (/^#(define|undef)\s+I386_ONLY/)
1856		{ printf OUT "#%s I386_ONLY\n", ($processor eq "386")?
1857			"define":"undef"; }
1858	elsif	(/^#define\s+MD2_INT\s/)
1859		{ printf OUT "#define MD2_INT unsigned %s\n",$type[$md2_int]; }
1860	elsif	(/^#define\s+IDEA_INT\s/)
1861		{printf OUT "#define IDEA_INT unsigned %s\n",$type[$idea_int];}
1862	elsif	(/^#define\s+RC2_INT\s/)
1863		{printf OUT "#define RC2_INT unsigned %s\n",$type[$rc2_int];}
1864	elsif (/^#(define|undef)\s+BF_PTR/)
1865		{
1866		printf OUT "#undef BF_PTR\n" if $bf_ptr == 0;
1867		printf OUT "#define BF_PTR\n" if $bf_ptr == 1;
1868		printf OUT "#define BF_PTR2\n" if $bf_ptr == 2;
1869	        }
1870	else
1871		{ print OUT $_; }
1872	}
1873close(IN);
1874close(OUT);
1875rename("crypto/opensslconf.h","crypto/opensslconf.h.bak") || die "unable to rename crypto/opensslconf.h\n" if -e "crypto/opensslconf.h";
1876rename("crypto/opensslconf.h.new","crypto/opensslconf.h") || die "unable to rename crypto/opensslconf.h.new\n";
1877
1878
1879# Fix the date
1880
1881print "SIXTY_FOUR_BIT_LONG mode\n" if $b64l;
1882print "SIXTY_FOUR_BIT mode\n" if $b64;
1883print "THIRTY_TWO_BIT mode\n" if $b32;
1884print "SIXTEEN_BIT mode\n" if $b16;
1885print "EIGHT_BIT mode\n" if $b8;
1886print "DES_PTR used\n" if $des_ptr;
1887print "DES_RISC1 used\n" if $des_risc1;
1888print "DES_RISC2 used\n" if $des_risc2;
1889print "DES_UNROLL used\n" if $des_unroll;
1890print "DES_INT used\n" if $des_int;
1891print "BN_LLONG mode\n" if $bn_ll;
1892print "RC4 uses u$type[$rc4_int]\n" if $rc4_int != $def_int;
1893print "RC4_INDEX mode\n" if $rc4_idx;
1894print "RC4_CHUNK is undefined\n" if $rc4_chunk==0;
1895print "RC4_CHUNK is unsigned long\n" if $rc4_chunk==1;
1896print "RC4_CHUNK is unsigned long long\n" if $rc4_chunk==2;
1897print "MD2 uses u$type[$md2_int]\n" if $md2_int != $def_int;
1898print "IDEA uses u$type[$idea_int]\n" if $idea_int != $def_int;
1899print "RC2 uses u$type[$rc2_int]\n" if $rc2_int != $def_int;
1900print "BF_PTR used\n" if $bf_ptr == 1;
1901print "BF_PTR2 used\n" if $bf_ptr == 2;
1902
1903if($IsMK1MF) {
1904	open (OUT,">crypto/buildinf.h") || die "Can't open buildinf.h";
1905	printf OUT <<EOF;
1906#ifndef MK1MF_BUILD
1907  /* auto-generated by Configure for crypto/cversion.c:
1908   * for Unix builds, crypto/Makefile.ssl generates functional definitions;
1909   * Windows builds (and other mk1mf builds) compile cversion.c with
1910   * -DMK1MF_BUILD and use definitions added to this file by util/mk1mf.pl. */
1911  #error "Windows builds (PLATFORM=$target) use mk1mf.pl-created Makefiles"
1912#endif
1913EOF
1914	close(OUT);
1915} else {
1916	my $make_command = "$make PERL=\'$perl\'";
1917	my $make_targets = "";
1918	$make_targets .= " links" if $symlink;
1919	$make_targets .= " depend" if $depflags ne $default_depflags && $make_depend;
1920	$make_targets .= " gentests" if $symlink;
1921	(system $make_command.$make_targets) == 0 or exit $?
1922		if $make_targets ne "";
1923	if ( $perl =~ m@^/@) {
1924	    &dofile("tools/c_rehash",$perl,'^#!/', '#!%s','^my \$dir;$', 'my $dir = "' . $openssldir . '";', '^my \$prefix;$', 'my $prefix = "' . $prefix . '";');
1925	    &dofile("apps/CA.pl",$perl,'^#!/', '#!%s');
1926	} else {
1927	    # No path for Perl known ...
1928	    &dofile("tools/c_rehash",'/usr/local/bin/perl','^#!/', '#!%s','^my \$dir;$', 'my $dir = "' . $openssldir . '";',  '^my \$prefix;$', 'my $prefix = "' . $prefix . '";');
1929	    &dofile("apps/CA.pl",'/usr/local/bin/perl','^#!/', '#!%s');
1930	}
1931	if ($depflags ne $default_depflags && !$make_depend) {
1932		print <<EOF;
1933
1934Since you've disabled or enabled at least one algorithm, you need to do
1935the following before building:
1936
1937	make depend
1938EOF
1939	}
1940}
1941
1942# create the ms/version32.rc file if needed
1943if ($IsMK1MF && ($target !~ /^netware/)) {
1944	my ($v1, $v2, $v3, $v4);
1945	if ($version_num =~ /(^[0-9a-f]{1})([0-9a-f]{2})([0-9a-f]{2})([0-9a-f]{2})/i) {
1946		$v1=hex $1;
1947		$v2=hex $2;
1948		$v3=hex $3;
1949		$v4=hex $4;
1950	}
1951	open (OUT,">ms/version32.rc") || die "Can't open ms/version32.rc";
1952	print OUT <<EOF;
1953#include <winver.h>
1954
1955LANGUAGE 0x09,0x01
1956
19571 VERSIONINFO
1958  FILEVERSION $v1,$v2,$v3,$v4
1959  PRODUCTVERSION $v1,$v2,$v3,$v4
1960  FILEFLAGSMASK 0x3fL
1961#ifdef _DEBUG
1962  FILEFLAGS 0x01L
1963#else
1964  FILEFLAGS 0x00L
1965#endif
1966  FILEOS VOS__WINDOWS32
1967  FILETYPE VFT_DLL
1968  FILESUBTYPE 0x0L
1969BEGIN
1970    BLOCK "StringFileInfo"
1971    BEGIN
1972	BLOCK "040904b0"
1973	BEGIN
1974	    // Required:
1975	    VALUE "CompanyName", "The OpenSSL Project, http://www.openssl.org/\\0"
1976	    VALUE "FileDescription", "OpenSSL Shared Library\\0"
1977	    VALUE "FileVersion", "$version\\0"
1978#if defined(CRYPTO)
1979	    VALUE "InternalName", "libeay32\\0"
1980	    VALUE "OriginalFilename", "libeay32.dll\\0"
1981#elif defined(SSL)
1982	    VALUE "InternalName", "ssleay32\\0"
1983	    VALUE "OriginalFilename", "ssleay32.dll\\0"
1984#endif
1985	    VALUE "ProductName", "The OpenSSL Toolkit\\0"
1986	    VALUE "ProductVersion", "$version\\0"
1987	    // Optional:
1988	    //VALUE "Comments", "\\0"
1989	    VALUE "LegalCopyright", "Copyright � 1998-2005 The OpenSSL Project. Copyright � 1995-1998 Eric A. Young, Tim J. Hudson. All rights reserved.\\0"
1990	    //VALUE "LegalTrademarks", "\\0"
1991	    //VALUE "PrivateBuild", "\\0"
1992	    //VALUE "SpecialBuild", "\\0"
1993	END
1994    END
1995    BLOCK "VarFileInfo"
1996    BEGIN
1997        VALUE "Translation", 0x409, 0x4b0
1998    END
1999END
2000EOF
2001	close(OUT);
2002  }
2003
2004print <<EOF;
2005
2006Configured for $target.
2007EOF
2008
2009print <<\EOF if (!$no_threads && !$threads);
2010
2011The library could not be configured for supporting multi-threaded
2012applications as the compiler options required on this system are not known.
2013See file INSTALL for details if you need multi-threading.
2014EOF
2015
2016print <<\EOF if ($no_shared_warn);
2017
2018You gave the option 'shared'.  Normally, that would give you shared libraries.
2019Unfortunately, the OpenSSL configuration doesn't include shared library support
2020for this platform yet, so it will pretend you gave the option 'no-shared'.  If
2021you can inform the developpers (openssl-dev\@openssl.org) how to support shared
2022libraries on this platform, they will at least look at it and try their best
2023(but please first make sure you have tried with a current version of OpenSSL).
2024EOF
2025
2026exit(0);
2027
2028sub usage
2029	{
2030	print STDERR $usage;
2031	print STDERR "\npick os/compiler from:\n";
2032	my $j=0;
2033	my $i;
2034        my $k=0;
2035	foreach $i (sort keys %table)
2036		{
2037		next if $i =~ /^debug/;
2038		$k += length($i) + 1;
2039		if ($k > 78)
2040			{
2041			print STDERR "\n";
2042			$k=length($i);
2043			}
2044		print STDERR $i . " ";
2045		}
2046	foreach $i (sort keys %table)
2047		{
2048		next if $i !~ /^debug/;
2049		$k += length($i) + 1;
2050		if ($k > 78)
2051			{
2052			print STDERR "\n";
2053			$k=length($i);
2054			}
2055		print STDERR $i . " ";
2056		}
2057	print STDERR "\n\nNOTE: If in doubt, on Unix-ish systems use './config'.\n";
2058	exit(1);
2059	}
2060
2061sub which
2062	{
2063	my($name)=@_;
2064	my $path;
2065	foreach $path (split /:/, $ENV{PATH})
2066		{
2067		if (-f "$path/$name$exe_ext" and -x _)
2068			{
2069			return "$path/$name$exe_ext" unless ($name eq "perl" and
2070			 system("$path/$name$exe_ext -e " . '\'exit($]<5.0);\''));
2071			}
2072		}
2073	}
2074
2075sub dofile
2076	{
2077	my $f; my $p; my %m; my @a; my $k; my $ff;
2078	($f,$p,%m)=@_;
2079
2080	open(IN,"<$f.in") || open(IN,"<$f") || die "unable to open $f:$!\n";
2081	@a=<IN>;
2082	close(IN);
2083	foreach $k (keys %m)
2084		{
2085		grep(/$k/ && ($_=sprintf($m{$k}."\n",$p)),@a);
2086		}
2087	open(OUT,">$f.new") || die "unable to open $f.new:$!\n";
2088	print OUT @a;
2089	close(OUT);
2090	rename($f,"$f.bak") || die "unable to rename $f\n" if -e $f;
2091	rename("$f.new",$f) || die "unable to rename $f.new\n";
2092	}
2093
2094sub print_table_entry
2095	{
2096	my $target = shift;
2097
2098	(my $cc,my $cflags,my $unistd,my $thread_cflag,my $sys_id,my $lflags,
2099	my $bn_ops,my $cpuid_obj,my $bn_obj,my $des_obj,my $aes_obj, my $bf_obj,
2100	my $md5_obj,my $sha1_obj,my $cast_obj,my $rc4_obj,my $rmd160_obj,
2101	my $rc5_obj,my $wp_obj,my $cmll_obj,my $modes_obj, my $engines_obj,
2102	my $perlasm_scheme,my $dso_scheme,my $shared_target,my $shared_cflag,
2103	my $shared_ldflag,my $shared_extension,my $ranlib,my $arflags,my $multilib)=
2104	split(/\s*:\s*/,$table{$target} . ":" x 30 , -1);
2105
2106	print <<EOF
2107
2108*** $target
2109\$cc           = $cc
2110\$cflags       = $cflags
2111\$unistd       = $unistd
2112\$thread_cflag = $thread_cflag
2113\$sys_id       = $sys_id
2114\$lflags       = $lflags
2115\$bn_ops       = $bn_ops
2116\$cpuid_obj    = $cpuid_obj
2117\$bn_obj       = $bn_obj
2118\$des_obj      = $des_obj
2119\$aes_obj      = $aes_obj
2120\$bf_obj       = $bf_obj
2121\$md5_obj      = $md5_obj
2122\$sha1_obj     = $sha1_obj
2123\$cast_obj     = $cast_obj
2124\$rc4_obj      = $rc4_obj
2125\$rmd160_obj   = $rmd160_obj
2126\$rc5_obj      = $rc5_obj
2127\$wp_obj       = $wp_obj
2128\$cmll_obj     = $cmll_obj
2129\$modes_obj    = $modes_obj
2130\$engines_obj  = $engines_obj
2131\$perlasm_scheme = $perlasm_scheme
2132\$dso_scheme   = $dso_scheme
2133\$shared_target= $shared_target
2134\$shared_cflag = $shared_cflag
2135\$shared_ldflag = $shared_ldflag
2136\$shared_extension = $shared_extension
2137\$ranlib       = $ranlib
2138\$arflags      = $arflags
2139\$multilib     = $multilib
2140EOF
2141	}
2142
2143sub test_sanity
2144	{
2145	my $errorcnt = 0;
2146
2147	print STDERR "=" x 70, "\n";
2148	print STDERR "=== SANITY TESTING!\n";
2149	print STDERR "=== No configuration will be done, all other arguments will be ignored!\n";
2150	print STDERR "=" x 70, "\n";
2151
2152	foreach $target (sort keys %table)
2153		{
2154		@fields = split(/\s*:\s*/,$table{$target} . ":" x 30 , -1);
2155
2156		if ($fields[$idx_dso_scheme-1] =~ /^(beos|dl|dlfcn|win32|vms)$/)
2157			{
2158			$errorcnt++;
2159			print STDERR "SANITY ERROR: '$target' has the dso_scheme [$idx_dso_scheme] values\n";
2160			print STDERR "              in the previous field\n";
2161			}
2162		elsif ($fields[$idx_dso_scheme+1] =~ /^(beos|dl|dlfcn|win32|vms)$/)
2163			{
2164			$errorcnt++;
2165			print STDERR "SANITY ERROR: '$target' has the dso_scheme [$idx_dso_scheme] values\n";
2166			print STDERR "              in the following field\n";
2167			}
2168		elsif ($fields[$idx_dso_scheme] !~ /^(beos|dl|dlfcn|win32|vms|)$/)
2169			{
2170			$errorcnt++;
2171			print STDERR "SANITY ERROR: '$target' has the dso_scheme [$idx_dso_scheme] field = ",$fields[$idx_dso_scheme],"\n";
2172			print STDERR "              valid values are 'beos', 'dl', 'dlfcn', 'win32' and 'vms'\n";
2173			}
2174		}
2175	print STDERR "No sanity errors detected!\n" if $errorcnt == 0;
2176	return $errorcnt;
2177	}
2178