xref: /freebsd/crypto/openssl/Configure (revision 718cf2ccb9956613756ab15d7a0e28f2c8e91cab)
1:
2eval 'exec perl -S $0 ${1+"$@"}'
3    if $running_under_some_shell;
4##
5##  Configure -- OpenSSL source tree configuration script
6##
7
8require 5.000;
9use strict;
10use File::Compare;
11
12# see INSTALL for instructions.
13
14my $usage="Usage: Configure [no-<cipher> ...] [enable-<cipher> ...] [experimental-<cipher> ...] [-Dxxx] [-lxxx] [-Lxxx] [-fxxx] [-Kxxx] [no-hw-xxx|no-hw] [[no-]threads] [[no-]shared] [[no-]zlib|zlib-dynamic] [no-asm] [no-dso] [no-krb5] [sctp] [386] [--prefix=DIR] [--openssldir=OPENSSLDIR] [--with-xxx[=vvv]] [--test-sanity] os/compiler[:flags]\n";
15
16# Options:
17#
18# --openssldir  install OpenSSL in OPENSSLDIR (Default: DIR/ssl if the
19#               --prefix option is given; /usr/local/ssl otherwise)
20# --prefix      prefix for the OpenSSL include, lib and bin directories
21#               (Default: the OPENSSLDIR directory)
22#
23# --install_prefix  Additional prefix for package builders (empty by
24#               default).  This needn't be set in advance, you can
25#               just as well use "make INSTALL_PREFIX=/whatever install".
26#
27# --with-krb5-dir  Declare where Kerberos 5 lives.  The libraries are expected
28#		to live in the subdirectory lib/ and the header files in
29#		include/.  A value is required.
30# --with-krb5-lib  Declare where the Kerberos 5 libraries live.  A value is
31#		required.
32#		(Default: KRB5_DIR/lib)
33# --with-krb5-include  Declare where the Kerberos 5 header files live.  A
34#		value is required.
35#		(Default: KRB5_DIR/include)
36# --with-krb5-flavor  Declare what flavor of Kerberos 5 is used.  Currently
37#		supported values are "MIT" and "Heimdal".  A value is required.
38#
39# --test-sanity Make a number of sanity checks on the data in this file.
40#               This is a debugging tool for OpenSSL developers.
41#
42# --cross-compile-prefix Add specified prefix to binutils components.
43#
44# no-hw-xxx     do not compile support for specific crypto hardware.
45#               Generic OpenSSL-style methods relating to this support
46#               are always compiled but return NULL if the hardware
47#               support isn't compiled.
48# no-hw         do not compile support for any crypto hardware.
49# [no-]threads  [don't] try to create a library that is suitable for
50#               multithreaded applications (default is "threads" if we
51#               know how to do it)
52# [no-]shared	[don't] try to create shared libraries when supported.
53# no-asm        do not use assembler
54# no-dso        do not compile in any native shared-library methods. This
55#               will ensure that all methods just return NULL.
56# no-krb5       do not compile in any KRB5 library or code.
57# [no-]zlib     [don't] compile support for zlib compression.
58# zlib-dynamic	Like "zlib", but the zlib library is expected to be a shared
59#		library and will be loaded in run-time by the OpenSSL library.
60# sctp          include SCTP support
61# enable-weak-ssl-ciphers
62#		Enable EXPORT and LOW SSLv3 ciphers that are disabled by
63#		default.  Note, weak SSLv2 ciphers are unconditionally
64#		disabled.
65# 386		generate 80386 code in assembly modules
66# no-sse2	disables IA-32 SSE2 code in assembly modules, the above
67#		mentioned '386' option implies this one
68# no-<cipher>   build without specified algorithm (rsa, idea, rc5, ...)
69# -<xxx> +<xxx> compiler options are passed through
70#
71# DEBUG_SAFESTACK use type-safe stacks to enforce type-safety on stack items
72#		provided to stack calls. Generates unique stack functions for
73#		each possible stack type.
74# DES_PTR	use pointer lookup vs arrays in the DES in crypto/des/des_locl.h
75# DES_RISC1	use different DES_ENCRYPT macro that helps reduce register
76#		dependancies but needs to more registers, good for RISC CPU's
77# DES_RISC2	A different RISC variant.
78# DES_UNROLL	unroll the inner DES loop, sometimes helps, somtimes hinders.
79# DES_INT	use 'int' instead of 'long' for DES_LONG in crypto/des/des.h
80#		This is used on the DEC Alpha where long is 8 bytes
81#		and int is 4
82# BN_LLONG	use the type 'long long' in crypto/bn/bn.h
83# MD2_CHAR	use 'char' instead of 'int' for MD2_INT in crypto/md2/md2.h
84# MD2_LONG	use 'long' instead of 'int' for MD2_INT in crypto/md2/md2.h
85# IDEA_SHORT	use 'short' instead of 'int' for IDEA_INT in crypto/idea/idea.h
86# IDEA_LONG	use 'long' instead of 'int' for IDEA_INT in crypto/idea/idea.h
87# RC2_SHORT	use 'short' instead of 'int' for RC2_INT in crypto/rc2/rc2.h
88# RC2_LONG	use 'long' instead of 'int' for RC2_INT in crypto/rc2/rc2.h
89# RC4_CHAR	use 'char' instead of 'int' for RC4_INT in crypto/rc4/rc4.h
90# RC4_LONG	use 'long' instead of 'int' for RC4_INT in crypto/rc4/rc4.h
91# RC4_INDEX	define RC4_INDEX in crypto/rc4/rc4_locl.h.  This turns on
92#		array lookups instead of pointer use.
93# RC4_CHUNK	enables code that handles data aligned at long (natural CPU
94#		word) boundary.
95# RC4_CHUNK_LL	enables code that handles data aligned at long long boundary
96#		(intended for 64-bit CPUs running 32-bit OS).
97# BF_PTR	use 'pointer arithmatic' for Blowfish (unsafe on Alpha).
98# BF_PTR2	intel specific version (generic version is more efficient).
99#
100# Following are set automatically by this script
101#
102# MD5_ASM	use some extra md5 assember,
103# SHA1_ASM	use some extra sha1 assember, must define L_ENDIAN for x86
104# RMD160_ASM	use some extra ripemd160 assember,
105# SHA256_ASM	sha256_block is implemented in assembler
106# SHA512_ASM	sha512_block is implemented in assembler
107# AES_ASM	ASE_[en|de]crypt is implemented in assembler
108
109# Minimum warning options... any contributions to OpenSSL should at least get
110# past these.
111
112my $gcc_devteam_warn = "-Wall -pedantic -DPEDANTIC -Wno-long-long -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wundef -Werror -DCRYPTO_MDEBUG_ALL -DCRYPTO_MDEBUG_ABORT -DREF_CHECK -DOPENSSL_NO_DEPRECATED";
113
114# TODO(openssl-team): fix problems and investigate if (at least) the following
115# warnings can also be enabled:
116# -Wconditional-uninitialized, -Wswitch-enum, -Wunused-macros,
117# -Wmissing-field-initializers, -Wmissing-variable-declarations,
118# -Wincompatible-pointer-types-discards-qualifiers, -Wcast-align,
119# -Wunreachable-code -Wunused-parameter -Wlanguage-extension-token
120# -Wextended-offsetof
121my $clang_disabled_warnings = "-Wno-unused-parameter -Wno-missing-field-initializers -Wno-language-extension-token  -Wno-extended-offsetof";
122
123# These are used in addition to $gcc_devteam_warn when the compiler is clang.
124# TODO(openssl-team): fix problems and investigate if (at least) the
125# following warnings can also be enabled: -Wconditional-uninitialized,
126# -Wswitch-enum, -Wunused-macros, -Wmissing-field-initializers,
127# -Wmissing-variable-declarations,
128# -Wincompatible-pointer-types-discards-qualifiers, -Wcast-align,
129# -Wunreachable-code -Wunused-parameter -Wlanguage-extension-token
130# -Wextended-offsetof
131my $clang_devteam_warn = "-Wno-unused-parameter -Wno-missing-field-initializers -Wno-language-extension-token -Wno-extended-offsetof -Qunused-arguments";
132
133# Warn that "make depend" should be run?
134my $warn_make_depend = 0;
135
136my $strict_warnings = 0;
137
138my $x86_gcc_des="DES_PTR DES_RISC1 DES_UNROLL";
139
140# MD2_CHAR slags pentium pros
141my $x86_gcc_opts="RC4_INDEX MD2_INT";
142
143# MODIFY THESE PARAMETERS IF YOU ARE GOING TO USE THE 'util/speed.sh SCRIPT
144# Don't worry about these normally
145
146my $tcc="cc";
147my $tflags="-fast -Xa";
148my $tbn_mul="";
149my $tlib="-lnsl -lsocket";
150#$bits1="SIXTEEN_BIT ";
151#$bits2="THIRTY_TWO_BIT ";
152my $bits1="THIRTY_TWO_BIT ";
153my $bits2="SIXTY_FOUR_BIT ";
154
155my $x86_asm="x86cpuid.o:bn-586.o co-586.o x86-mont.o x86-gf2m.o::des-586.o crypt586.o:aes-586.o vpaes-x86.o aesni-x86.o:bf-586.o:md5-586.o:sha1-586.o sha256-586.o sha512-586.o:cast-586.o:rc4-586.o:rmd-586.o:rc5-586.o:wp_block.o wp-mmx.o:cmll-x86.o:ghash-x86.o:";
156
157my $x86_elf_asm="$x86_asm:elf";
158
159my $x86_64_asm="x86_64cpuid.o:x86_64-gcc.o x86_64-mont.o x86_64-mont5.o x86_64-gf2m.o rsaz_exp.o rsaz-x86_64.o rsaz-avx2.o:ecp_nistz256.o ecp_nistz256-x86_64.o::aes-x86_64.o vpaes-x86_64.o bsaes-x86_64.o aesni-x86_64.o aesni-sha1-x86_64.o aesni-sha256-x86_64.o aesni-mb-x86_64.o::md5-x86_64.o:sha1-x86_64.o sha256-x86_64.o sha512-x86_64.o sha1-mb-x86_64.o sha256-mb-x86_64.o::rc4-x86_64.o rc4-md5-x86_64.o:::wp-x86_64.o:cmll-x86_64.o cmll_misc.o:ghash-x86_64.o aesni-gcm-x86_64.o:";
160my $ia64_asm="ia64cpuid.o:bn-ia64.o ia64-mont.o:::aes_core.o aes_cbc.o aes-ia64.o::md5-ia64.o:sha1-ia64.o sha256-ia64.o sha512-ia64.o::rc4-ia64.o rc4_skey.o:::::ghash-ia64.o::void";
161my $sparcv9_asm="sparcv9cap.o sparccpuid.o:bn-sparcv9.o sparcv9-mont.o sparcv9a-mont.o vis3-mont.o sparct4-mont.o sparcv9-gf2m.o::des_enc-sparc.o fcrypt_b.o dest4-sparcv9.o:aes_core.o aes_cbc.o aes-sparcv9.o aest4-sparcv9.o::md5-sparcv9.o:sha1-sparcv9.o sha256-sparcv9.o sha512-sparcv9.o::::::camellia.o cmll_misc.o cmll_cbc.o cmllt4-sparcv9.o:ghash-sparcv9.o::void";
162my $sparcv8_asm=":sparcv8.o::des_enc-sparc.o fcrypt_b.o:::::::::::::void";
163my $alpha_asm="alphacpuid.o:bn_asm.o alpha-mont.o::::::sha1-alpha.o:::::::ghash-alpha.o::void";
164my $mips64_asm=":bn-mips.o mips-mont.o:::aes_cbc.o aes-mips.o:::sha1-mips.o sha256-mips.o sha512-mips.o::::::::";
165my $mips32_asm=$mips64_asm; $mips32_asm =~ s/\s*sha512\-mips\.o//;
166my $s390x_asm="s390xcap.o s390xcpuid.o:bn-s390x.o s390x-mont.o s390x-gf2m.o:::aes-s390x.o aes-ctr.o aes-xts.o:::sha1-s390x.o sha256-s390x.o sha512-s390x.o::rc4-s390x.o:::::ghash-s390x.o:";
167my $armv4_asm="armcap.o armv4cpuid.o:bn_asm.o armv4-mont.o armv4-gf2m.o:::aes_cbc.o aes-armv4.o bsaes-armv7.o aesv8-armx.o:::sha1-armv4-large.o sha256-armv4.o sha512-armv4.o:::::::ghash-armv4.o ghashv8-armx.o::void";
168my $aarch64_asm="armcap.o arm64cpuid.o mem_clr.o::::aes_core.o aes_cbc.o aesv8-armx.o:::sha1-armv8.o sha256-armv8.o sha512-armv8.o:::::::ghashv8-armx.o:";
169my $parisc11_asm="pariscid.o:bn_asm.o parisc-mont.o:::aes_core.o aes_cbc.o aes-parisc.o:::sha1-parisc.o sha256-parisc.o sha512-parisc.o::rc4-parisc.o:::::ghash-parisc.o::32";
170my $parisc20_asm="pariscid.o:pa-risc2W.o parisc-mont.o:::aes_core.o aes_cbc.o aes-parisc.o:::sha1-parisc.o sha256-parisc.o sha512-parisc.o::rc4-parisc.o:::::ghash-parisc.o::64";
171my $ppc64_asm="ppccpuid.o ppccap.o:bn-ppc.o ppc-mont.o ppc64-mont.o:::aes_core.o aes_cbc.o aes-ppc.o vpaes-ppc.o aesp8-ppc.o:::sha1-ppc.o sha256-ppc.o sha512-ppc.o sha256p8-ppc.o sha512p8-ppc.o:::::::ghashp8-ppc.o:";
172my $ppc32_asm=$ppc64_asm;
173my $no_asm="::::::::::::::::void";
174
175# As for $BSDthreads. Idea is to maintain "collective" set of flags,
176# which would cover all BSD flavors. -pthread applies to them all,
177# but is treated differently. OpenBSD expands is as -D_POSIX_THREAD
178# -lc_r, which is sufficient. FreeBSD 4.x expands it as -lc_r,
179# which has to be accompanied by explicit -D_THREAD_SAFE and
180# sometimes -D_REENTRANT. FreeBSD 5.x expands it as -lc_r, which
181# seems to be sufficient?
182my $BSDthreads="-pthread -D_THREAD_SAFE -D_REENTRANT";
183
184#config-string	$cc : $cflags : $unistd : $thread_cflag : $sys_id : $lflags : $bn_ops : $cpuid_obj : $bn_obj : $ec_obj : $des_obj : $aes_obj : $bf_obj : $md5_obj : $sha1_obj : $cast_obj : $rc4_obj : $rmd160_obj : $rc5_obj : $wp_obj : $cmll_obj : $modes_obj : $engines_obj : $dso_scheme : $shared_target : $shared_cflag : $shared_ldflag : $shared_extension : $ranlib : $arflags : $multilib
185
186my %table=(
187# File 'TABLE' (created by 'make TABLE') contains the data from this list,
188# formatted for better readability.
189
190
191#"b",		"${tcc}:${tflags}::${tlib}:${bits1}:${tbn_mul}::",
192#"bl-4c-2c",	"${tcc}:${tflags}::${tlib}:${bits1}BN_LLONG RC4_CHAR MD2_CHAR:${tbn_mul}::",
193#"bl-4c-ri",	"${tcc}:${tflags}::${tlib}:${bits1}BN_LLONG RC4_CHAR RC4_INDEX:${tbn_mul}::",
194#"b2-is-ri-dp",	"${tcc}:${tflags}::${tlib}:${bits2}IDEA_SHORT RC4_INDEX DES_PTR:${tbn_mul}::",
195
196# Our development configs
197"purify",	"purify gcc:-g -DPURIFY -Wall::(unknown)::-lsocket -lnsl::::",
198"debug",	"gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DOPENSSL_NO_ASM -ggdb -g2 -Wformat -Wshadow -Wmissing-prototypes -Wmissing-declarations -Werror::(unknown)::-lefence::::",
199"debug-ben",	"gcc:$gcc_devteam_warn -DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DDEBUG_SAFESTACK -O2 -pipe::(unknown):::::",
200"debug-ben-openbsd","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DPEDANTIC -DDEBUG_SAFESTACK -DOPENSSL_OPENBSD_DEV_CRYPTO -DOPENSSL_NO_ASM -O2 -pedantic -Wall -Wshadow -Werror -pipe::(unknown)::::",
201"debug-ben-openbsd-debug","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DPEDANTIC -DDEBUG_SAFESTACK -DOPENSSL_OPENBSD_DEV_CRYPTO -DOPENSSL_NO_ASM -g3 -O2 -pedantic -Wall -Wshadow -Werror -pipe::(unknown)::::",
202"debug-ben-debug",	"gcc44:$gcc_devteam_warn -DBN_DEBUG -DCONF_DEBUG -DDEBUG_SAFESTACK -DDEBUG_UNUSED -g3 -O2 -pipe::(unknown)::::::",
203"debug-ben-debug-64",	"gcc:$gcc_devteam_warn -Wno-error=overlength-strings -DBN_DEBUG -DCONF_DEBUG -DDEBUG_SAFESTACK -DDEBUG_UNUSED -g3 -O3 -pipe::${BSDthreads}:::SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
204"debug-ben-macos",	"cc:$gcc_devteam_warn -arch i386 -DBN_DEBUG -DCONF_DEBUG -DDEBUG_SAFESTACK -DDEBUG_UNUSED -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -O3 -DL_ENDIAN -g3 -pipe::(unknown)::-Wl,-search_paths_first::::",
205"debug-ben-macos-gcc46",	"gcc-mp-4.6:$gcc_devteam_warn -Wconversion -DBN_DEBUG -DCONF_DEBUG -DDEBUG_SAFESTACK -DDEBUG_UNUSED -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -O3 -DL_ENDIAN -g3 -pipe::(unknown)::::::",
206"debug-ben-darwin64","cc:$gcc_devteam_warn -g -Wno-language-extension-token -Wno-extended-offsetof -arch x86_64 -O3 -DL_ENDIAN -Wall::-D_REENTRANT:MACOSX:-Wl,-search_paths_first%:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL:".eval{my $asm=$x86_64_asm;$asm=~s/rc4\-[^:]+//;$asm}.":macosx:dlfcn:darwin-shared:-fPIC -fno-common:-arch x86_64 -dynamiclib:.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
207"debug-ben-debug-64-clang",	"clang:$gcc_devteam_warn -Wno-error=overlength-strings -Wno-error=extended-offsetof -Qunused-arguments -DBN_DEBUG -DCONF_DEBUG -DDEBUG_SAFESTACK -DDEBUG_UNUSED -g3 -O3 -pipe::${BSDthreads}:::SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
208"debug-ben-no-opt",	"gcc: -Wall -Wmissing-prototypes -Wstrict-prototypes -Wmissing-declarations -DDEBUG_SAFESTACK -DCRYPTO_MDEBUG -Werror -DL_ENDIAN -DTERMIOS -Wall -g3::(unknown)::::::",
209"debug-ben-strict",	"gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DCONST_STRICT -O2 -Wall -Wshadow -Werror -Wpointer-arith -Wcast-qual -Wwrite-strings -pipe::(unknown)::::::",
210"debug-rse","cc:-DTERMIOS -DL_ENDIAN -pipe -O -g -ggdb3 -Wall::(unknown):::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}",
211"debug-bodo",	"gcc:$gcc_devteam_warn -Wno-error=overlength-strings -DBN_DEBUG -DBN_DEBUG_RAND -DCONF_DEBUG -DBIO_PAIR_DEBUG -m64 -DL_ENDIAN -DTERMIO -g -DMD32_REG_T=int::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64",
212"debug-steve64", "gcc:$gcc_devteam_warn -m64 -DL_ENDIAN -DTERMIO -DCONF_DEBUG -DDEBUG_SAFESTACK -Wno-overlength-strings -g::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
213"debug-steve32", "gcc:$gcc_devteam_warn -m32 -DL_ENDIAN -DCONF_DEBUG -DDEBUG_SAFESTACK -Wno-overlength-strings -g -pipe::-D_REENTRANT::-rdynamic -ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC:-m32:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
214"debug-steve-opt", "gcc:$gcc_devteam_warn -m64 -O3 -DL_ENDIAN -DTERMIO -DCONF_DEBUG -DDEBUG_SAFESTACK -g::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
215"debug-levitte-linux-elf","gcc:-DLEVITTE_DEBUG -DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DCRYPTO_MDEBUG -DL_ENDIAN -ggdb -g3 -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
216"debug-levitte-linux-noasm","gcc:-DLEVITTE_DEBUG -DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DCRYPTO_MDEBUG -DOPENSSL_NO_ASM -DL_ENDIAN -ggdb -g3 -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${no_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
217"debug-levitte-linux-elf-extreme","gcc:-DLEVITTE_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_DEBUG -DBN_DEBUG_RAND -DCRYPTO_MDEBUG -DENGINE_CONF_DEBUG -DL_ENDIAN -DPEDANTIC -ggdb -g3 -pedantic -ansi -Wall -W -Wundef -Wshadow -Wcast-align -Wstrict-prototypes -Wmissing-prototypes -Wno-long-long -Wundef -Wconversion -pipe::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
218"debug-levitte-linux-noasm-extreme","gcc:-DLEVITTE_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_DEBUG -DBN_DEBUG_RAND -DCRYPTO_MDEBUG -DENGINE_CONF_DEBUG -DOPENSSL_NO_ASM -DL_ENDIAN -DPEDANTIC -ggdb -g3 -pedantic -ansi -Wall -W -Wundef -Wshadow -Wcast-align -Wstrict-prototypes -Wmissing-prototypes -Wno-long-long -Wundef -Wconversion -pipe::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${no_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
219"debug-geoff32","gcc:-DBN_DEBUG -DBN_DEBUG_RAND -DBN_STRICT -DPURIFY -DOPENSSL_NO_DEPRECATED -DOPENSSL_NO_ASM -DOPENSSL_NO_INLINE_ASM -DL_ENDIAN -DTERMIO -DPEDANTIC -O1 -ggdb2 -Wall -Werror -Wundef -pedantic -Wshadow -Wpointer-arith -Wbad-function-cast -Wcast-align -Wsign-compare -Wmissing-prototypes -Wmissing-declarations -Wno-long-long::-D_REENTRANT::-ldl:BN_LLONG:${no_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
220"debug-geoff64","gcc:-DBN_DEBUG -DBN_DEBUG_RAND -DBN_STRICT -DPURIFY -DOPENSSL_NO_DEPRECATED -DOPENSSL_NO_ASM -DOPENSSL_NO_INLINE_ASM -DL_ENDIAN -DTERMIO -DPEDANTIC -O1 -ggdb2 -Wall -Werror -Wundef -pedantic -Wshadow -Wpointer-arith -Wbad-function-cast -Wcast-align -Wsign-compare -Wmissing-prototypes -Wmissing-declarations -Wno-long-long::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${no_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
221"debug-linux-pentium","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DL_ENDIAN -g -mcpu=pentium -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn",
222"debug-linux-ppro","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DL_ENDIAN -g -mcpu=pentiumpro -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn",
223"debug-linux-elf","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DL_ENDIAN -g -march=i486 -Wall::-D_REENTRANT::-lefence -ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
224"debug-linux-elf-noefence","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DL_ENDIAN -g -march=i486 -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
225"debug-linux-ia32-aes", "gcc:-DAES_EXPERIMENTAL -DL_ENDIAN -O3 -fomit-frame-pointer -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:x86cpuid.o:bn-586.o co-586.o x86-mont.o::des-586.o crypt586.o:aes_x86core.o aes_cbc.o aesni-x86.o:bf-586.o:md5-586.o:sha1-586.o sha256-586.o sha512-586.o:cast-586.o:rc4-586.o:rmd-586.o:rc5-586.o:wp_block.o wp-mmx.o::ghash-x86.o::elf:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
226"debug-linux-generic32","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DCRYPTO_MDEBUG -g -Wall::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${no_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
227"debug-linux-generic64","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DCRYPTO_MDEBUG -DTERMIO -g -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${no_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
228"debug-linux-x86_64","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DCRYPTO_MDEBUG -m64 -DL_ENDIAN -g -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64",
229"dist",		"cc:-O::(unknown)::::::",
230
231# Basic configs that should work on any (32 and less bit) box
232"gcc",		"gcc:-O3::(unknown):::BN_LLONG:::",
233"cc",		"cc:-O::(unknown)::::::",
234
235####VOS Configurations
236"vos-gcc","gcc:-O3 -Wall -DOPENSSL_SYSNAME_VOS -D_POSIX_C_SOURCE=200112L -D_BSD -D_VOS_EXTENDED_NAMES -DB_ENDIAN::(unknown):VOS:-Wl,-map:BN_LLONG:${no_asm}:::::.so:",
237"debug-vos-gcc","gcc:-O0 -g -Wall -DOPENSSL_SYSNAME_VOS -D_POSIX_C_SOURCE=200112L -D_BSD -D_VOS_EXTENDED_NAMES -DB_ENDIAN -DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DCRYPTO_MDEBUG::(unknown):VOS:-Wl,-map:BN_LLONG:${no_asm}:::::.so:",
238
239#### Solaris x86 with GNU C setups
240# -DOPENSSL_NO_INLINE_ASM switches off inline assembler. We have to do it
241# here because whenever GNU C instantiates an assembler template it
242# surrounds it with #APP #NO_APP comment pair which (at least Solaris
243# 7_x86) /usr/ccs/bin/as fails to assemble with "Illegal mnemonic"
244# error message.
245"solaris-x86-gcc","gcc:-O3 -fomit-frame-pointer -march=pentium -Wall -DL_ENDIAN -DOPENSSL_NO_INLINE_ASM::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:solaris-shared:-fPIC:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
246# -shared -static-libgcc might appear controversial, but modules taken
247# from static libgcc do not have relocations and linking them into our
248# shared objects doesn't have any negative side-effects. On the contrary,
249# doing so makes it possible to use gcc shared build with Sun C. Given
250# that gcc generates faster code [thanks to inline assembler], I would
251# actually recommend to consider using gcc shared build even with vendor
252# compiler:-)
253#						<appro@fy.chalmers.se>
254"solaris64-x86_64-gcc","gcc:-m64 -O3 -Wall -DL_ENDIAN::-D_REENTRANT::-lsocket -lnsl -ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:solaris-shared:-fPIC:-m64 -shared -static-libgcc:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/64",
255
256#### Solaris x86 with Sun C setups
257"solaris-x86-cc","cc:-fast -xarch=generic -O -Xa::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_PTR DES_UNROLL BF_PTR:${no_asm}:dlfcn:solaris-shared:-KPIC:-G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
258"solaris64-x86_64-cc","cc:-fast -xarch=amd64 -xstrconst -Xa -DL_ENDIAN::-D_REENTRANT::-lsocket -lnsl -ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:solaris-shared:-KPIC:-xarch=amd64 -G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/64",
259
260#### SPARC Solaris with GNU C setups
261"solaris-sparcv7-gcc","gcc:-O3 -fomit-frame-pointer -Wall -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${no_asm}:dlfcn:solaris-shared:-fPIC:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
262"solaris-sparcv8-gcc","gcc:-mcpu=v8 -O3 -fomit-frame-pointer -Wall -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${sparcv8_asm}:dlfcn:solaris-shared:-fPIC:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
263# -m32 should be safe to add as long as driver recognizes -mcpu=ultrasparc
264"solaris-sparcv9-gcc","gcc:-m32 -mcpu=ultrasparc -O3 -fomit-frame-pointer -Wall -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT:ULTRASPARC:-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${sparcv9_asm}:dlfcn:solaris-shared:-fPIC:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
265"solaris64-sparcv9-gcc","gcc:-m64 -mcpu=ultrasparc -O3 -Wall -DB_ENDIAN::-D_REENTRANT:ULTRASPARC:-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_PTR DES_RISC1 DES_UNROLL BF_PTR:${sparcv9_asm}:dlfcn:solaris-shared:-fPIC:-m64 -shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/64",
266####
267"debug-solaris-sparcv8-gcc","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG_ALL -O -g -mcpu=v8 -Wall -DB_ENDIAN::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${sparcv8_asm}:dlfcn:solaris-shared:-fPIC:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
268"debug-solaris-sparcv9-gcc","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG_ALL -DPEDANTIC -O -g -mcpu=ultrasparc -pedantic -ansi -Wall -Wshadow -Wno-long-long -D__EXTENSIONS__ -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT:ULTRASPARC:-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${sparcv9_asm}:dlfcn:solaris-shared:-fPIC:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
269
270#### SPARC Solaris with Sun C setups
271# SC4.0 doesn't pass 'make test', upgrade to SC5.0 or SC4.2.
272# SC4.2 is ok, better than gcc even on bn as long as you tell it -xarch=v8
273# SC5.0 note: Compiler common patch 107357-01 or later is required!
274"solaris-sparcv7-cc","cc:-xO5 -xstrconst -xdepend -Xa -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_PTR DES_RISC1 DES_UNROLL BF_PTR:${no_asm}:dlfcn:solaris-shared:-KPIC:-G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
275"solaris-sparcv8-cc","cc:-xarch=v8 -xO5 -xstrconst -xdepend -Xa -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_PTR DES_RISC1 DES_UNROLL BF_PTR:${sparcv8_asm}:dlfcn:solaris-shared:-KPIC:-G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
276"solaris-sparcv9-cc","cc:-xtarget=ultra -xarch=v8plus -xO5 -xstrconst -xdepend -Xa -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT:ULTRASPARC:-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK_LL DES_PTR DES_RISC1 DES_UNROLL BF_PTR:${sparcv9_asm}:dlfcn:solaris-shared:-KPIC:-G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
277"solaris64-sparcv9-cc","cc:-xtarget=ultra -xarch=v9 -xO5 -xstrconst -xdepend -Xa -DB_ENDIAN::-D_REENTRANT:ULTRASPARC:-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_PTR DES_RISC1 DES_UNROLL BF_PTR:${sparcv9_asm}:dlfcn:solaris-shared:-KPIC:-xarch=v9 -G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/64",
278####
279"debug-solaris-sparcv8-cc","cc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG_ALL -xarch=v8 -g -O -xstrconst -Xa -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_PTR DES_RISC1 DES_UNROLL BF_PTR:${sparcv8_asm}:dlfcn:solaris-shared:-KPIC:-G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
280"debug-solaris-sparcv9-cc","cc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG_ALL -xtarget=ultra -xarch=v8plus -g -O -xstrconst -Xa -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT:ULTRASPARC:-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK_LL DES_PTR DES_RISC1 DES_UNROLL BF_PTR:${sparcv9_asm}:dlfcn:solaris-shared:-KPIC:-G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
281
282#### SunOS configs, assuming sparc for the gcc one.
283#"sunos-cc", "cc:-O4 -DNOPROTO -DNOCONST::(unknown):SUNOS::DES_UNROLL:${no_asm}::",
284"sunos-gcc","gcc:-O3 -mcpu=v8 -Dssize_t=int::(unknown):SUNOS::BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL DES_PTR DES_RISC1:${no_asm}::",
285
286#### IRIX 5.x configs
287# -mips2 flag is added by ./config when appropriate.
288"irix-gcc","gcc:-O3 -DB_ENDIAN::(unknown):::BN_LLONG MD2_CHAR RC4_INDEX RC4_CHAR RC4_CHUNK DES_UNROLL DES_RISC2 DES_PTR BF_PTR:${mips32_asm}:o32:dlfcn:irix-shared:::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
289"irix-cc", "cc:-O2 -use_readonly_const -DB_ENDIAN::(unknown):::BN_LLONG RC4_CHAR RC4_CHUNK DES_PTR DES_RISC2 DES_UNROLL BF_PTR:${mips32_asm}:o32:dlfcn:irix-shared:::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
290#### IRIX 6.x configs
291# Only N32 and N64 ABIs are supported. If you need O32 ABI build, invoke
292# './Configure irix-cc -o32' manually.
293"irix-mips3-gcc","gcc:-mabi=n32 -O3 -DB_ENDIAN -DBN_DIV3W::-D_SGI_MP_SOURCE:::MD2_CHAR RC4_INDEX RC4_CHAR RC4_CHUNK_LL DES_UNROLL DES_RISC2 DES_PTR BF_PTR SIXTY_FOUR_BIT:${mips64_asm}:n32:dlfcn:irix-shared::-mabi=n32:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::32",
294"irix-mips3-cc", "cc:-n32 -mips3 -O2 -use_readonly_const -G0 -rdata_shared -DB_ENDIAN -DBN_DIV3W::-D_SGI_MP_SOURCE:::DES_PTR RC4_CHAR RC4_CHUNK_LL DES_RISC2 DES_UNROLL BF_PTR SIXTY_FOUR_BIT:${mips64_asm}:n32:dlfcn:irix-shared::-n32:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::32",
295# N64 ABI builds.
296"irix64-mips4-gcc","gcc:-mabi=64 -mips4 -O3 -DB_ENDIAN -DBN_DIV3W::-D_SGI_MP_SOURCE:::RC4_CHAR RC4_CHUNK DES_RISC2 DES_UNROLL SIXTY_FOUR_BIT_LONG:${mips64_asm}:64:dlfcn:irix-shared::-mabi=64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64",
297"irix64-mips4-cc", "cc:-64 -mips4 -O2 -use_readonly_const -G0 -rdata_shared -DB_ENDIAN -DBN_DIV3W::-D_SGI_MP_SOURCE:::RC4_CHAR RC4_CHUNK DES_RISC2 DES_UNROLL SIXTY_FOUR_BIT_LONG:${mips64_asm}:64:dlfcn:irix-shared::-64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64",
298
299#### Unified HP-UX ANSI C configs.
300# Special notes:
301# - Originally we were optimizing at +O4 level. It should be noted
302#   that the only difference between +O3 and +O4 is global inter-
303#   procedural analysis. As it has to be performed during the link
304#   stage the compiler leaves behind certain pseudo-code in lib*.a
305#   which might be release or even patch level specific. Generating
306#   the machine code for and analyzing the *whole* program appears
307#   to be *extremely* memory demanding while the performance gain is
308#   actually questionable. The situation is intensified by the default
309#   HP-UX data set size limit (infamous 'maxdsiz' tunable) of 64MB
310#   which is way too low for +O4. In other words, doesn't +O3 make
311#   more sense?
312# - Keep in mind that the HP compiler by default generates code
313#   suitable for execution on the host you're currently compiling at.
314#   If the toolkit is ment to be used on various PA-RISC processors
315#   consider './config +DAportable'.
316# - +DD64 is chosen in favour of +DA2.0W because it's meant to be
317#   compatible with *future* releases.
318# - If you run ./Configure hpux-parisc-[g]cc manually don't forget to
319#   pass -D_REENTRANT on HP-UX 10 and later.
320# - -DMD32_XARRAY triggers workaround for compiler bug we ran into in
321#   32-bit message digests. (For the moment of this writing) HP C
322#   doesn't seem to "digest" too many local variables (they make "him"
323#   chew forever:-). For more details look-up MD32_XARRAY comment in
324#   crypto/sha/sha_lcl.h.
325#					<appro@fy.chalmers.se>
326#
327# Since there is mention of this in shlib/hpux10-cc.sh
328"hpux-parisc-cc-o4","cc:-Ae +O4 +ESlit -z -DB_ENDIAN -DBN_DIV2W -DMD32_XARRAY::-D_REENTRANT::-ldld:BN_LLONG DES_PTR DES_UNROLL DES_RISC1:${no_asm}:dl:hpux-shared:+Z:-b:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
329"hpux-parisc-gcc","gcc:-O3 -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT::-Wl,+s -ldld:BN_LLONG DES_PTR DES_UNROLL DES_RISC1:${no_asm}:dl:hpux-shared:-fPIC:-shared:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
330"hpux-parisc1_1-gcc","gcc:-O3 -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT::-Wl,+s -ldld:BN_LLONG DES_PTR DES_UNROLL DES_RISC1:${parisc11_asm}:dl:hpux-shared:-fPIC:-shared:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/pa1.1",
331"hpux-parisc2-gcc","gcc:-march=2.0 -O3 -DB_ENDIAN -D_REENTRANT::::-Wl,+s -ldld:SIXTY_FOUR_BIT RC4_CHAR RC4_CHUNK DES_PTR DES_UNROLL DES_RISC1:".eval{my $asm=$parisc20_asm;$asm=~s/2W\./2\./;$asm=~s/:64/:32/;$asm}.":dl:hpux-shared:-fPIC:-shared:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/pa20_32",
332"hpux64-parisc2-gcc","gcc:-O3 -DB_ENDIAN -D_REENTRANT::::-ldl:SIXTY_FOUR_BIT_LONG MD2_CHAR RC4_INDEX RC4_CHAR DES_UNROLL DES_RISC1 DES_INT::pa-risc2W.o:::::::::::::::void:dlfcn:hpux-shared:-fpic:-shared:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/pa20_64",
333
334# More attempts at unified 10.X and 11.X targets for HP C compiler.
335#
336# Chris Ruemmler <ruemmler@cup.hp.com>
337# Kevin Steves <ks@hp.se>
338"hpux-parisc-cc","cc:+O3 +Optrs_strongly_typed -Ae +ESlit -DB_ENDIAN -DBN_DIV2W -DMD32_XARRAY::-D_REENTRANT::-Wl,+s -ldld:MD2_CHAR RC4_INDEX RC4_CHAR DES_UNROLL DES_RISC1 DES_INT:${no_asm}:dl:hpux-shared:+Z:-b:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
339"hpux-parisc1_1-cc","cc:+DA1.1 +O3 +Optrs_strongly_typed -Ae +ESlit -DB_ENDIAN -DMD32_XARRAY::-D_REENTRANT::-Wl,+s -ldld:MD2_CHAR RC4_INDEX RC4_CHAR DES_UNROLL DES_RISC1 DES_INT:${parisc11_asm}:dl:hpux-shared:+Z:-b:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/pa1.1",
340"hpux-parisc2-cc","cc:+DA2.0 +DS2.0 +O3 +Optrs_strongly_typed -Ae +ESlit -DB_ENDIAN -DMD32_XARRAY -D_REENTRANT::::-Wl,+s -ldld:SIXTY_FOUR_BIT MD2_CHAR RC4_INDEX RC4_CHAR DES_UNROLL DES_RISC1 DES_INT:".eval{my $asm=$parisc20_asm;$asm=~s/2W\./2\./;$asm=~s/:64/:32/;$asm}.":dl:hpux-shared:+Z:-b:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/pa20_32",
341"hpux64-parisc2-cc","cc:+DD64 +O3 +Optrs_strongly_typed -Ae +ESlit -DB_ENDIAN -DMD32_XARRAY -D_REENTRANT::::-ldl:SIXTY_FOUR_BIT_LONG MD2_CHAR RC4_INDEX RC4_CHAR DES_UNROLL DES_RISC1 DES_INT:${parisc20_asm}:dlfcn:hpux-shared:+Z:+DD64 -b:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/pa20_64",
342
343# HP/UX IA-64 targets
344"hpux-ia64-cc","cc:-Ae +DD32 +O2 +Olit=all -z -DB_ENDIAN -D_REENTRANT::::-ldl:SIXTY_FOUR_BIT MD2_CHAR RC4_INDEX DES_UNROLL DES_RISC1 DES_INT:${ia64_asm}:dlfcn:hpux-shared:+Z:+DD32 -b:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/hpux32",
345# Frank Geurts <frank.geurts@nl.abnamro.com> has patiently assisted with
346# with debugging of the following config.
347"hpux64-ia64-cc","cc:-Ae +DD64 +O3 +Olit=all -z -DB_ENDIAN -D_REENTRANT::::-ldl:SIXTY_FOUR_BIT_LONG MD2_CHAR RC4_INDEX DES_UNROLL DES_RISC1 DES_INT:${ia64_asm}:dlfcn:hpux-shared:+Z:+DD64 -b:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/hpux64",
348# GCC builds...
349"hpux-ia64-gcc","gcc:-O3 -DB_ENDIAN -D_REENTRANT::::-ldl:SIXTY_FOUR_BIT MD2_CHAR RC4_INDEX DES_UNROLL DES_RISC1 DES_INT:${ia64_asm}:dlfcn:hpux-shared:-fpic:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/hpux32",
350"hpux64-ia64-gcc","gcc:-mlp64 -O3 -DB_ENDIAN -D_REENTRANT::::-ldl:SIXTY_FOUR_BIT_LONG MD2_CHAR RC4_INDEX DES_UNROLL DES_RISC1 DES_INT:${ia64_asm}:dlfcn:hpux-shared:-fpic:-mlp64 -shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/hpux64",
351
352# Legacy HPUX 9.X configs...
353"hpux-cc",	"cc:-DB_ENDIAN -DBN_DIV2W -DMD32_XARRAY -Ae +ESlit +O2 -z::(unknown)::-Wl,+s -ldld:DES_PTR DES_UNROLL DES_RISC1:${no_asm}:dl:hpux-shared:+Z:-b:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
354"hpux-gcc",	"gcc:-DB_ENDIAN -DBN_DIV2W -O3::(unknown)::-Wl,+s -ldld:DES_PTR DES_UNROLL DES_RISC1:${no_asm}:dl:hpux-shared:-fPIC:-shared:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
355
356#### HP MPE/iX http://jazz.external.hp.com/src/openssl/
357"MPE/iX-gcc",	"gcc:-D_ENDIAN -DBN_DIV2W -O3 -D_POSIX_SOURCE -D_SOCKET_SOURCE -I/SYSLOG/PUB::(unknown):MPE:-L/SYSLOG/PUB -lsyslog -lsocket -lcurses:BN_LLONG DES_PTR DES_UNROLL DES_RISC1:::",
358
359# DEC Alpha OSF/1/Tru64 targets.
360#
361#	"What's in a name? That which we call a rose
362#	 By any other word would smell as sweet."
363#
364# - William Shakespeare, "Romeo & Juliet", Act II, scene II.
365#
366# For gcc, the following gave a %50 speedup on a 164 over the 'DES_INT' version
367#
368"osf1-alpha-gcc", "gcc:-O3::(unknown):::SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_UNROLL DES_RISC1:${alpha_asm}:dlfcn:alpha-osf1-shared:::.so",
369"osf1-alpha-cc",  "cc:-std1 -tune host -O4 -readonly_strings::(unknown):::SIXTY_FOUR_BIT_LONG RC4_CHUNK:${alpha_asm}:dlfcn:alpha-osf1-shared:::.so",
370"tru64-alpha-cc", "cc:-std1 -tune host -fast -readonly_strings::-pthread:::SIXTY_FOUR_BIT_LONG RC4_CHUNK:${alpha_asm}:dlfcn:alpha-osf1-shared::-msym:.so",
371
372####
373#### Variety of LINUX:-)
374####
375# *-generic* is endian-neutral target, but ./config is free to
376# throw in -D[BL]_ENDIAN, whichever appropriate...
377"linux-generic32","gcc:-O3 -fomit-frame-pointer -Wall::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${no_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
378"linux-ppc",	"gcc:-DB_ENDIAN -O3 -Wall::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_RISC1 DES_UNROLL:${ppc32_asm}:linux32:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
379
380#######################################################################
381# Note that -march is not among compiler options in below linux-armv4
382# target line. Not specifying one is intentional to give you choice to:
383#
384# a) rely on your compiler default by not specifying one;
385# b) specify your target platform explicitly for optimal performance,
386#    e.g. -march=armv6 or -march=armv7-a;
387# c) build "universal" binary that targets *range* of platforms by
388#    specifying minimum and maximum supported architecture;
389#
390# As for c) option. It actually makes no sense to specify maximum to be
391# less than ARMv7, because it's the least requirement for run-time
392# switch between platform-specific code paths. And without run-time
393# switch performance would be equivalent to one for minimum. Secondly,
394# there are some natural limitations that you'd have to accept and
395# respect. Most notably you can *not* build "universal" binary for
396# big-endian platform. This is because ARMv7 processor always picks
397# instructions in little-endian order. Another similar limitation is
398# that -mthumb can't "cross" -march=armv6t2 boundary, because that's
399# where it became Thumb-2. Well, this limitation is a bit artificial,
400# because it's not really impossible, but it's deemed too tricky to
401# support. And of course you have to be sure that your binutils are
402# actually up to the task of handling maximum target platform. With all
403# this in mind here is an example of how to configure "universal" build:
404#
405#       ./Configure linux-armv4 -march=armv6 -D__ARM_MAX_ARCH__=8
406#
407"linux-armv4",	"gcc: -O3 -Wall::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${armv4_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
408"linux-aarch64","gcc: -O3 -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${aarch64_asm}:linux64:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
409# Configure script adds minimally required -march for assembly support,
410# if no -march was specified at command line. mips32 and mips64 below
411# refer to contemporary MIPS Architecture specifications, MIPS32 and
412# MIPS64, rather than to kernel bitness.
413"linux-mips32",	"gcc:-mabi=32 -O3 -Wall -DBN_DIV3W::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${mips32_asm}:o32:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
414"linux-mips64",   "gcc:-mabi=n32 -O3 -Wall -DBN_DIV3W::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${mips64_asm}:n32:dlfcn:linux-shared:-fPIC:-mabi=n32:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::32",
415"linux64-mips64",   "gcc:-mabi=64 -O3 -Wall -DBN_DIV3W::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${mips64_asm}:64:dlfcn:linux-shared:-fPIC:-mabi=64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64",
416#### IA-32 targets...
417"linux-ia32-icc",	"icc:-DL_ENDIAN -O2::-D_REENTRANT::-ldl -no_cpprt:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-KPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
418"linux-elf",	"gcc:-DL_ENDIAN -O3 -fomit-frame-pointer -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
419"linux-aout",	"gcc:-DL_ENDIAN -O3 -fomit-frame-pointer -march=i486 -Wall::(unknown):::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_asm}:a.out",
420####
421"linux-generic64","gcc:-O3 -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${no_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
422"linux-ppc64",	"gcc:-m64 -DB_ENDIAN -O3 -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_RISC1 DES_UNROLL:${ppc64_asm}:linux64:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64",
423"linux-ppc64le","gcc:-m64 -DL_ENDIAN -O3 -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_RISC1 DES_UNROLL:$ppc64_asm:linux64le:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::",
424"linux-ia64",	"gcc:-DL_ENDIAN -DTERMIO -O3 -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_UNROLL DES_INT:${ia64_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
425"linux-ia64-icc","icc:-DL_ENDIAN -O2 -Wall::-D_REENTRANT::-ldl -no_cpprt:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_RISC1 DES_INT:${ia64_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
426"linux-x86_64",	"gcc:-m64 -DL_ENDIAN -O3 -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64",
427"linux-x86_64-clang",	"clang: -m64 -DL_ENDIAN -O3 -Wall -Wextra $clang_disabled_warnings -Qunused-arguments::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64",
428"debug-linux-x86_64-clang",	"clang: -DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DCRYPTO_MDEBUG -m64 -DL_ENDIAN -g -Wall -Wextra $clang_disabled_warnings -Qunused-arguments::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64",
429"linux-x86_64-icc", "icc:-DL_ENDIAN -O2::-D_REENTRANT::-ldl -no_cpprt:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64",
430"linux-x32",	"gcc:-mx32 -DL_ENDIAN -O3 -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT RC4_CHUNK_LL DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:linux-shared:-fPIC:-mx32:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::x32",
431"linux64-s390x",	"gcc:-m64 -DB_ENDIAN -O3 -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL:${s390x_asm}:64:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64",
432#### So called "highgprs" target for z/Architecture CPUs
433# "Highgprs" is kernel feature first implemented in Linux 2.6.32, see
434# /proc/cpuinfo. The idea is to preserve most significant bits of
435# general purpose registers not only upon 32-bit process context
436# switch, but even on asynchronous signal delivery to such process.
437# This makes it possible to deploy 64-bit instructions even in legacy
438# application context and achieve better [or should we say adequate]
439# performance. The build is binary compatible with linux-generic32,
440# and the idea is to be able to install the resulting libcrypto.so
441# alongside generic one, e.g. as /lib/highgprs/libcrypto.so.x.y, for
442# ldconfig and run-time linker to autodiscover. Unfortunately it
443# doesn't work just yet, because of couple of bugs in glibc
444# sysdeps/s390/dl-procinfo.c affecting ldconfig and ld.so.1...
445"linux32-s390x",	"gcc:-m31 -Wa,-mzarch -DB_ENDIAN -O3 -Wall::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL:".eval{my $asm=$s390x_asm;$asm=~s/bn\-s390x\.o/bn_asm.o/;$asm}.":31:dlfcn:linux-shared:-fPIC:-m31:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/highgprs",
446#### SPARC Linux setups
447# Ray Miller <ray.miller@computing-services.oxford.ac.uk> has patiently
448# assisted with debugging of following two configs.
449"linux-sparcv8","gcc:-mcpu=v8 -DB_ENDIAN -O3 -fomit-frame-pointer -Wall -DBN_DIV2W::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${sparcv8_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
450# it's a real mess with -mcpu=ultrasparc option under Linux, but
451# -Wa,-Av8plus should do the trick no matter what.
452"linux-sparcv9","gcc:-m32 -mcpu=ultrasparc -DB_ENDIAN -O3 -fomit-frame-pointer -Wall -Wa,-Av8plus -DBN_DIV2W::-D_REENTRANT:ULTRASPARC:-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${sparcv9_asm}:dlfcn:linux-shared:-fPIC:-m32:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
453# GCC 3.1 is a requirement
454"linux64-sparcv9","gcc:-m64 -mcpu=ultrasparc -DB_ENDIAN -O3 -fomit-frame-pointer -Wall::-D_REENTRANT:ULTRASPARC:-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_PTR DES_RISC1 DES_UNROLL BF_PTR:${sparcv9_asm}:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64",
455#### Alpha Linux with GNU C and Compaq C setups
456# Special notes:
457# - linux-alpha+bwx-gcc is ment to be used from ./config only. If you
458#   ought to run './Configure linux-alpha+bwx-gcc' manually, do
459#   complement the command line with -mcpu=ev56, -mcpu=ev6 or whatever
460#   which is appropriate.
461# - If you use ccc keep in mind that -fast implies -arch host and the
462#   compiler is free to issue instructions which gonna make elder CPU
463#   choke. If you wish to build "blended" toolkit, add -arch generic
464#   *after* -fast and invoke './Configure linux-alpha-ccc' manually.
465#
466#					<appro@fy.chalmers.se>
467#
468"linux-alpha-gcc","gcc:-O3 -DL_ENDIAN::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_RISC1 DES_UNROLL:${alpha_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
469"linux-alpha+bwx-gcc","gcc:-O3 -DL_ENDIAN::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_RISC1 DES_UNROLL:${alpha_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
470"linux-alpha-ccc","ccc:-fast -readonly_strings -DL_ENDIAN::-D_REENTRANT:::SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_PTR DES_RISC1 DES_UNROLL:${alpha_asm}",
471"linux-alpha+bwx-ccc","ccc:-fast -readonly_strings -DL_ENDIAN::-D_REENTRANT:::SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_PTR DES_RISC1 DES_UNROLL:${alpha_asm}",
472
473# Android: linux-* but without pointers to headers and libs.
474"android","gcc:-mandroid -I\$(ANDROID_DEV)/include -B\$(ANDROID_DEV)/lib -O3 -fomit-frame-pointer -Wall::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${no_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
475"android-x86","gcc:-mandroid -I\$(ANDROID_DEV)/include -B\$(ANDROID_DEV)/lib -O3 -fomit-frame-pointer -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:".eval{my $asm=${x86_elf_asm};$asm=~s/:elf/:android/;$asm}.":dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
476"android-armv7","gcc:-march=armv7-a -mandroid -I\$(ANDROID_DEV)/include -B\$(ANDROID_DEV)/lib -O3 -fomit-frame-pointer -Wall::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${armv4_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
477"android-mips","gcc:-mandroid -I\$(ANDROID_DEV)/include -B\$(ANDROID_DEV)/lib -O3 -Wall::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${mips32_asm}:o32:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
478
479#### *BSD [do see comment about ${BSDthreads} above!]
480"BSD-generic32","gcc:-O3 -fomit-frame-pointer -Wall::${BSDthreads}:::BN_LLONG RC2_CHAR RC4_INDEX DES_INT DES_UNROLL:${no_asm}:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
481"BSD-x86",	"gcc:-DL_ENDIAN -O3 -fomit-frame-pointer -Wall::${BSDthreads}:::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_asm}:a.out:dlfcn:bsd-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
482"BSD-x86-elf",	"gcc:-DL_ENDIAN -O3 -fomit-frame-pointer -Wall::${BSDthreads}:::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:bsd-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
483"debug-BSD-x86-elf",	"gcc:-DL_ENDIAN -O3 -Wall -g::${BSDthreads}:::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:bsd-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
484"BSD-sparcv8",	"gcc:-DB_ENDIAN -O3 -mcpu=v8 -Wall::${BSDthreads}:::BN_LLONG RC2_CHAR RC4_INDEX DES_INT DES_UNROLL:${sparcv8_asm}:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
485
486"BSD-generic64","gcc:-O3 -Wall::${BSDthreads}:::SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${no_asm}:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
487# -DMD32_REG_T=int doesn't actually belong in sparc64 target, it
488# simply *happens* to work around a compiler bug in gcc 3.3.3,
489# triggered by RIPEMD160 code.
490"BSD-sparc64",	"gcc:-DB_ENDIAN -O3 -DMD32_REG_T=int -Wall::${BSDthreads}:::BN_LLONG RC2_CHAR RC4_CHUNK DES_INT DES_PTR DES_RISC2 BF_PTR:${sparcv9_asm}:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
491"BSD-ia64",	"gcc:-DL_ENDIAN -O3 -Wall::${BSDthreads}:::SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_UNROLL DES_INT:${ia64_asm}:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
492"BSD-x86_64",	"cc:-DL_ENDIAN -O3 -Wall::${BSDthreads}:::SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
493
494"bsdi-elf-gcc",     "gcc:-DPERL5 -DL_ENDIAN -fomit-frame-pointer -O3 -march=i486 -Wall::(unknown)::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
495
496"nextstep",	"cc:-O -Wall:<libc.h>:(unknown):::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:::",
497"nextstep3.3",	"cc:-O3 -Wall:<libc.h>:(unknown):::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:::",
498
499# NCR MP-RAS UNIX ver 02.03.01
500"ncr-scde","cc:-O6 -Xa -Hoff=BEHAVED -686 -Hwide -Hiw::(unknown)::-lsocket -lnsl -lc89:${x86_gcc_des} ${x86_gcc_opts}:::",
501
502# QNX
503"qnx4",	"cc:-DL_ENDIAN -DTERMIO::(unknown):::${x86_gcc_des} ${x86_gcc_opts}:",
504"QNX6",       "gcc:::::-lsocket::${no_asm}:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
505"QNX6-i386",  "gcc:-DL_ENDIAN -O2 -Wall::::-lsocket:${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
506
507# BeOS
508"beos-x86-r5",   "gcc:-DL_ENDIAN -DTERMIOS -O3 -fomit-frame-pointer -mcpu=pentium -Wall::-D_REENTRANT:BEOS:-lbe -lnet:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:beos:beos-shared:-fPIC -DPIC:-shared:.so",
509"beos-x86-bone", "gcc:-DL_ENDIAN -DTERMIOS -O3 -fomit-frame-pointer -mcpu=pentium -Wall::-D_REENTRANT:BEOS:-lbe -lbind -lsocket:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:beos:beos-shared:-fPIC:-shared:.so",
510
511#### SCO/Caldera targets.
512#
513# Originally we had like unixware-*, unixware-*-pentium, unixware-*-p6, etc.
514# Now we only have blended unixware-* as it's the only one used by ./config.
515# If you want to optimize for particular microarchitecture, bypass ./config
516# and './Configure unixware-7 -Kpentium_pro' or whatever appropriate.
517# Note that not all targets include assembler support. Mostly because of
518# lack of motivation to support out-of-date platforms with out-of-date
519# compiler drivers and assemblers. Tim Rice <tim@multitalents.net> has
520# patiently assisted to debug most of it.
521#
522# UnixWare 2.0x fails destest with -O.
523"unixware-2.0","cc:-DFILIO_H -DNO_STRINGS_H::-Kthread::-lsocket -lnsl -lresolv -lx:${x86_gcc_des} ${x86_gcc_opts}:::",
524"unixware-2.1","cc:-O -DFILIO_H::-Kthread::-lsocket -lnsl -lresolv -lx:${x86_gcc_des} ${x86_gcc_opts}:::",
525"unixware-7","cc:-O -DFILIO_H -Kalloca::-Kthread::-lsocket -lnsl:BN_LLONG MD2_CHAR RC4_INDEX ${x86_gcc_des}:${x86_elf_asm}-1:dlfcn:svr5-shared:-Kpic::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
526"unixware-7-gcc","gcc:-DL_ENDIAN -DFILIO_H -O3 -fomit-frame-pointer -march=pentium -Wall::-D_REENTRANT::-lsocket -lnsl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}-1:dlfcn:gnu-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
527# SCO 5 - Ben Laurie <ben@algroup.co.uk> says the -O breaks the SCO cc.
528"sco5-cc",  "cc:-belf::(unknown)::-lsocket -lnsl:${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}-1:dlfcn:svr3-shared:-Kpic::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
529"sco5-gcc",  "gcc:-O3 -fomit-frame-pointer::(unknown)::-lsocket -lnsl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}-1:dlfcn:svr3-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
530
531#### IBM's AIX.
532"aix3-cc",  "cc:-O -DB_ENDIAN -qmaxmem=16384::(unknown):AIX::BN_LLONG RC4_CHAR:::",
533"aix-gcc",  "gcc:-O -DB_ENDIAN::-pthread:AIX::BN_LLONG RC4_CHAR:${ppc32_asm}:aix32:dlfcn:aix-shared::-shared -Wl,-G:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)::-X32",
534"aix64-gcc","gcc:-maix64 -O -DB_ENDIAN::-pthread:AIX::SIXTY_FOUR_BIT_LONG RC4_CHAR:${ppc64_asm}:aix64:dlfcn:aix-shared::-maix64 -shared -Wl,-G:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)::-X64",
535# Below targets assume AIX 5. Idea is to effectively disregard $OBJECT_MODE
536# at build time. $OBJECT_MODE is respected at ./config stage!
537"aix-cc",   "cc:-q32 -O -DB_ENDIAN -qmaxmem=16384 -qro -qroconst::-qthreaded -D_THREAD_SAFE:AIX::BN_LLONG RC4_CHAR:${ppc32_asm}:aix32:dlfcn:aix-shared::-q32 -G:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)::-X 32",
538"aix64-cc", "cc:-q64 -O -DB_ENDIAN -qmaxmem=16384 -qro -qroconst::-qthreaded -D_THREAD_SAFE:AIX::SIXTY_FOUR_BIT_LONG RC4_CHAR:${ppc64_asm}:aix64:dlfcn:aix-shared::-q64 -G:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)::-X 64",
539
540#
541# Cray T90 and similar (SDSC)
542# It's Big-endian, but the algorithms work properly when B_ENDIAN is NOT
543# defined.  The T90 ints and longs are 8 bytes long, and apparently the
544# B_ENDIAN code assumes 4 byte ints.  Fortunately, the non-B_ENDIAN and
545# non L_ENDIAN code aligns the bytes in each word correctly.
546#
547# The BIT_FIELD_LIMITS define is to avoid two fatal compiler errors:
548#'Taking the address of a bit field is not allowed. '
549#'An expression with bit field exists as the operand of "sizeof" '
550# (written by Wayne Schroeder <schroede@SDSC.EDU>)
551#
552# j90 is considered the base machine type for unicos machines,
553# so this configuration is now called "cray-j90" ...
554"cray-j90", "cc: -DBIT_FIELD_LIMITS -DTERMIOS::(unknown):CRAY::SIXTY_FOUR_BIT_LONG DES_INT:::",
555
556#
557# Cray T3E (Research Center Juelich, beckman@acl.lanl.gov)
558#
559# The BIT_FIELD_LIMITS define was written for the C90 (it seems).  I added
560# another use.  Basically, the problem is that the T3E uses some bit fields
561# for some st_addr stuff, and then sizeof and address-of fails
562# I could not use the ams/alpha.o option because the Cray assembler, 'cam'
563# did not like it.
564"cray-t3e", "cc: -DBIT_FIELD_LIMITS -DTERMIOS::(unknown):CRAY::SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT:::",
565
566# DGUX, 88100.
567"dgux-R3-gcc",	"gcc:-O3 -fomit-frame-pointer::(unknown):::RC4_INDEX DES_UNROLL:::",
568"dgux-R4-gcc",	"gcc:-O3 -fomit-frame-pointer::(unknown)::-lnsl -lsocket:RC4_INDEX DES_UNROLL:::",
569"dgux-R4-x86-gcc",	"gcc:-O3 -fomit-frame-pointer -DL_ENDIAN::(unknown)::-lnsl -lsocket:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}",
570
571# Sinix/ReliantUNIX RM400
572# NOTE: The CDS++ Compiler up to V2.0Bsomething has the IRIX_CC_BUG optimizer problem. Better use -g  */
573"ReliantUNIX","cc:-KPIC -g -DTERMIOS -DB_ENDIAN::-Kthread:SNI:-lsocket -lnsl -lc -L/usr/ucblib -lucb:BN_LLONG DES_PTR DES_RISC2 DES_UNROLL BF_PTR:${no_asm}:dlfcn:reliantunix-shared:::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
574"SINIX","cc:-O::(unknown):SNI:-lsocket -lnsl -lc -L/usr/ucblib -lucb:RC4_INDEX RC4_CHAR:::",
575"SINIX-N","/usr/ucb/cc:-O2 -misaligned::(unknown)::-lucb:RC4_INDEX RC4_CHAR:::",
576
577# SIEMENS BS2000/OSD: an EBCDIC-based mainframe
578"BS2000-OSD","c89:-O -XLLML -XLLMK -XL -DB_ENDIAN -DCHARSET_EBCDIC::(unknown)::-lsocket -lnsl:THIRTY_TWO_BIT DES_PTR DES_UNROLL MD2_CHAR RC4_INDEX RC4_CHAR BF_PTR:::",
579
580# OS/390 Unix an EBCDIC-based Unix system on IBM mainframe
581# You need to compile using the c89.sh wrapper in the tools directory, because the
582# IBM compiler does not like the -L switch after any object modules.
583#
584"OS390-Unix","c89.sh:-O -DB_ENDIAN -DCHARSET_EBCDIC -DNO_SYS_PARAM_H  -D_ALL_SOURCE::(unknown):::THIRTY_TWO_BIT DES_PTR DES_UNROLL MD2_CHAR RC4_INDEX RC4_CHAR BF_PTR:::",
585
586# Visual C targets
587#
588# Win64 targets, WIN64I denotes IA-64 and WIN64A - AMD64
589"VC-WIN64I","cl:-W3 -Gs0 -Gy -nologo -DOPENSSL_SYSNAME_WIN32 -DWIN32_LEAN_AND_MEAN -DL_ENDIAN -DUNICODE -D_UNICODE -D_CRT_SECURE_NO_DEPRECATE:::WIN64I::SIXTY_FOUR_BIT RC4_CHUNK_LL DES_INT EXPORT_VAR_AS_FN:ia64cpuid.o:ia64.o ia64-mont.o:::aes_core.o aes_cbc.o aes-ia64.o::md5-ia64.o:sha1-ia64.o sha256-ia64.o sha512-ia64.o:::::::ghash-ia64.o::ias:win32",
590"VC-WIN64A","cl:-W3 -Gs0 -Gy -nologo -DOPENSSL_SYSNAME_WIN32 -DWIN32_LEAN_AND_MEAN -DL_ENDIAN -DUNICODE -D_UNICODE -D_CRT_SECURE_NO_DEPRECATE:::WIN64A::SIXTY_FOUR_BIT RC4_CHUNK_LL DES_INT EXPORT_VAR_AS_FN:".eval{my $asm=$x86_64_asm;$asm=~s/x86_64-gcc\.o/bn_asm.o/;$asm}.":auto:win32",
591"debug-VC-WIN64I","cl:-W3 -Gs0 -Gy -Zi -nologo -DOPENSSL_SYSNAME_WIN32 -DWIN32_LEAN_AND_MEAN -DL_ENDIAN -DUNICODE -D_UNICODE -D_CRT_SECURE_NO_DEPRECATE:::WIN64I::SIXTY_FOUR_BIT RC4_CHUNK_LL DES_INT EXPORT_VAR_AS_FN:ia64cpuid.o:ia64.o:::aes_core.o aes_cbc.o aes-ia64.o::md5-ia64.o:sha1-ia64.o sha256-ia64.o sha512-ia64.o:::::::ghash-ia64.o::ias:win32",
592"debug-VC-WIN64A","cl:-W3 -Gs0 -Gy -Zi -nologo -DOPENSSL_SYSNAME_WIN32 -DWIN32_LEAN_AND_MEAN -DL_ENDIAN -DUNICODE -D_UNICODE -D_CRT_SECURE_NO_DEPRECATE:::WIN64A::SIXTY_FOUR_BIT RC4_CHUNK_LL DES_INT EXPORT_VAR_AS_FN:".eval{my $asm=$x86_64_asm;$asm=~s/x86_64-gcc\.o/bn_asm.o/;$asm}.":auto:win32",
593# x86 Win32 target defaults to ANSI API, if you want UNICODE, complement
594# 'perl Configure VC-WIN32' with '-DUNICODE -D_UNICODE'
595"VC-WIN32","cl:-W3 -Gs0 -GF -Gy -nologo -DOPENSSL_SYSNAME_WIN32 -DWIN32_LEAN_AND_MEAN -DL_ENDIAN -D_CRT_SECURE_NO_DEPRECATE:::WIN32::BN_LLONG RC4_INDEX EXPORT_VAR_AS_FN ${x86_gcc_opts}:${x86_asm}:win32n:win32",
596# Unified CE target
597"debug-VC-WIN32","cl:-W3 -Gs0 -GF -Gy -Zi -nologo -DOPENSSL_SYSNAME_WIN32 -DWIN32_LEAN_AND_MEAN -DL_ENDIAN -D_CRT_SECURE_NO_DEPRECATE:::WIN32::BN_LLONG RC4_INDEX EXPORT_VAR_AS_FN ${x86_gcc_opts}:${x86_asm}:win32n:win32",
598"VC-CE","cl::::WINCE::BN_LLONG RC4_INDEX EXPORT_VAR_AS_FN ${x86_gcc_opts}:${no_asm}:win32",
599
600# Borland C++ 4.5
601"BC-32","bcc32::::WIN32::BN_LLONG DES_PTR RC4_INDEX EXPORT_VAR_AS_FN:${no_asm}:win32",
602
603# MinGW
604"mingw", "gcc:-mno-cygwin -DL_ENDIAN -DWIN32_LEAN_AND_MEAN -fomit-frame-pointer -O3 -march=i486 -Wall::-D_MT:MINGW32:-lws2_32 -lgdi32 -lcrypt32:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts} EXPORT_VAR_AS_FN:${x86_asm}:coff:win32:cygwin-shared:-D_WINDLL -DOPENSSL_USE_APPLINK:-mno-cygwin:.dll.a",
605# As for OPENSSL_USE_APPLINK. Applink makes it possible to use .dll
606# compiled with one compiler with application compiled with another
607# compiler. It's possible to engage Applink support in mingw64 build,
608# but it's not done, because till mingw64 supports structured exception
609# handling, one can't seriously consider its binaries for using with
610# non-mingw64 run-time environment. And as mingw64 is always consistent
611# with itself, Applink is never engaged and can as well be omitted.
612"mingw64", "gcc:-mno-cygwin -DL_ENDIAN -O3 -Wall -DWIN32_LEAN_AND_MEAN -DUNICODE -D_UNICODE::-D_MT:MINGW64:-lws2_32 -lgdi32 -lcrypt32:SIXTY_FOUR_BIT RC4_CHUNK_LL DES_INT EXPORT_VAR_AS_FN:${x86_64_asm}:mingw64:win32:cygwin-shared:-D_WINDLL:-mno-cygwin:.dll.a",
613
614# UWIN
615"UWIN", "cc:-DTERMIOS -DL_ENDIAN -O -Wall:::UWIN::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${no_asm}:win32",
616
617# Cygwin
618"Cygwin", "gcc:-DTERMIOS -DL_ENDIAN -fomit-frame-pointer -O3 -march=i486 -Wall:::CYGWIN::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_asm}:coff:dlfcn:cygwin-shared:-D_WINDLL:-shared:.dll.a",
619"Cygwin-x86_64", "gcc:-DTERMIOS -DL_ENDIAN -O3 -Wall:::CYGWIN::SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:mingw64:dlfcn:cygwin-shared:-D_WINDLL:-shared:.dll.a",
620
621# NetWare from David Ward (dsward@novell.com)
622# requires either MetroWerks NLM development tools, or gcc / nlmconv
623# NetWare defaults socket bio to WinSock sockets. However,
624# the builds can be configured to use BSD sockets instead.
625# netware-clib => legacy CLib c-runtime support
626"netware-clib", "mwccnlm::::::${x86_gcc_opts}::",
627"netware-clib-bsdsock", "mwccnlm::::::${x86_gcc_opts}::",
628"netware-clib-gcc", "i586-netware-gcc:-nostdinc -I/ndk/nwsdk/include/nlm -I/ndk/ws295sdk/include -DL_ENDIAN -DNETWARE_CLIB -DOPENSSL_SYSNAME_NETWARE -O2 -Wall:::::${x86_gcc_opts}::",
629"netware-clib-bsdsock-gcc", "i586-netware-gcc:-nostdinc -I/ndk/nwsdk/include/nlm -DNETWARE_BSDSOCK -DNETDB_USE_INTERNET -DL_ENDIAN -DNETWARE_CLIB -DOPENSSL_SYSNAME_NETWARE -O2 -Wall:::::${x86_gcc_opts}::",
630# netware-libc => LibC/NKS support
631"netware-libc", "mwccnlm::::::BN_LLONG ${x86_gcc_opts}::",
632"netware-libc-bsdsock", "mwccnlm::::::BN_LLONG ${x86_gcc_opts}::",
633"netware-libc-gcc", "i586-netware-gcc:-nostdinc -I/ndk/libc/include -I/ndk/libc/include/winsock -DL_ENDIAN -DNETWARE_LIBC -DOPENSSL_SYSNAME_NETWARE -DTERMIO -O2 -Wall:::::BN_LLONG ${x86_gcc_opts}::",
634"netware-libc-bsdsock-gcc", "i586-netware-gcc:-nostdinc -I/ndk/libc/include -DNETWARE_BSDSOCK -DL_ENDIAN -DNETWARE_LIBC -DOPENSSL_SYSNAME_NETWARE -DTERMIO -O2 -Wall:::::BN_LLONG ${x86_gcc_opts}::",
635
636# DJGPP
637"DJGPP", "gcc:-I/dev/env/WATT_ROOT/inc -DTERMIO -DL_ENDIAN -fomit-frame-pointer -O2 -Wall:::MSDOS:-L/dev/env/WATT_ROOT/lib -lwatt:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_asm}:a.out:",
638
639# Ultrix from Bernhard Simon <simon@zid.tuwien.ac.at>
640"ultrix-cc","cc:-std1 -O -Olimit 2500 -DL_ENDIAN::(unknown):::::::",
641"ultrix-gcc","gcc:-O3 -DL_ENDIAN::(unknown):::BN_LLONG::::",
642# K&R C is no longer supported; you need gcc on old Ultrix installations
643##"ultrix","cc:-O2 -DNOPROTO -DNOCONST -DL_ENDIAN::(unknown):::::::",
644
645##### MacOS X (a.k.a. Rhapsody or Darwin) setup
646"rhapsody-ppc-cc","cc:-O3 -DB_ENDIAN::(unknown):MACOSX_RHAPSODY::BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${no_asm}::",
647"darwin-ppc-cc","cc:-arch ppc -O3 -DB_ENDIAN -Wa,-force_cpusubtype_ALL::-D_REENTRANT:MACOSX:-Wl,-search_paths_first%:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${ppc32_asm}:osx32:dlfcn:darwin-shared:-fPIC -fno-common:-arch ppc -dynamiclib:.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
648"darwin64-ppc-cc","cc:-arch ppc64 -O3 -DB_ENDIAN::-D_REENTRANT:MACOSX:-Wl,-search_paths_first%:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${ppc64_asm}:osx64:dlfcn:darwin-shared:-fPIC -fno-common:-arch ppc64 -dynamiclib:.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
649"darwin-i386-cc","cc:-arch i386 -O3 -fomit-frame-pointer -DL_ENDIAN::-D_REENTRANT:MACOSX:-Wl,-search_paths_first%:BN_LLONG RC4_INT RC4_CHUNK DES_UNROLL BF_PTR:".eval{my $asm=$x86_asm;$asm=~s/cast\-586\.o//;$asm}.":macosx:dlfcn:darwin-shared:-fPIC -fno-common:-arch i386 -dynamiclib:.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
650"debug-darwin-i386-cc","cc:-arch i386 -g3 -DL_ENDIAN::-D_REENTRANT:MACOSX:-Wl,-search_paths_first%:BN_LLONG RC4_INT RC4_CHUNK DES_UNROLL BF_PTR:${x86_asm}:macosx:dlfcn:darwin-shared:-fPIC -fno-common:-arch i386 -dynamiclib:.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
651"darwin64-x86_64-cc","cc:-arch x86_64 -O3 -DL_ENDIAN -Wall::-D_REENTRANT:MACOSX:-Wl,-search_paths_first%:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:".eval{my $asm=$x86_64_asm;$asm=~s/rc4\-[^:]+//;$asm}.":macosx:dlfcn:darwin-shared:-fPIC -fno-common:-arch x86_64 -dynamiclib:.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
652"debug-darwin64-x86_64-cc","cc:-arch x86_64 -ggdb -g2 -O0 -DL_ENDIAN -Wall::-D_REENTRANT:MACOSX:-Wl,-search_paths_first%:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:".eval{my $asm=$x86_64_asm;$asm=~s/rc4\-[^:]+//;$asm}.":macosx:dlfcn:darwin-shared:-fPIC -fno-common:-arch x86_64 -dynamiclib:.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
653"debug-darwin-ppc-cc","cc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DCRYPTO_MDEBUG -DB_ENDIAN -g -Wall -O::-D_REENTRANT:MACOSX::BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${ppc32_asm}:osx32:dlfcn:darwin-shared:-fPIC:-dynamiclib:.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
654# iPhoneOS/iOS
655"iphoneos-cross","llvm-gcc:-O3 -isysroot \$(CROSS_TOP)/SDKs/\$(CROSS_SDK) -fomit-frame-pointer -fno-common::-D_REENTRANT:iOS:-Wl,-search_paths_first%:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${no_asm}:dlfcn:darwin-shared:-fPIC -fno-common:-dynamiclib:.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
656
657##### A/UX
658"aux3-gcc","gcc:-O2 -DTERMIO::(unknown):AUX:-lbsd:RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:::",
659
660##### Sony NEWS-OS 4.x
661"newsos4-gcc","gcc:-O -DB_ENDIAN::(unknown):NEWS4:-lmld -liberty:BN_LLONG RC4_CHAR RC4_CHUNK DES_PTR DES_RISC1 DES_UNROLL BF_PTR::::",
662
663##### GNU Hurd
664"hurd-x86",  "gcc:-DL_ENDIAN -O3 -fomit-frame-pointer -march=i486 -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC",
665
666##### OS/2 EMX
667"OS2-EMX", "gcc::::::::",
668
669##### VxWorks for various targets
670"vxworks-ppc60x","ccppc:-D_REENTRANT -mrtp -mhard-float -mstrict-align -fno-implicit-fp -DPPC32_fp60x -O2 -fstrength-reduce -fno-builtin -fno-strict-aliasing -Wall -DCPU=PPC32 -DTOOL_FAMILY=gnu -DTOOL=gnu -I\$(WIND_BASE)/target/usr/h -I\$(WIND_BASE)/target/usr/h/wrn/coreip:::VXWORKS:-Wl,--defsym,__wrs_rtp_base=0xe0000000 -L \$(WIND_BASE)/target/usr/lib/ppc/PPC32/common:::::",
671"vxworks-ppcgen","ccppc:-D_REENTRANT -mrtp -msoft-float -mstrict-align -O1 -fno-builtin -fno-strict-aliasing -Wall -DCPU=PPC32 -DTOOL_FAMILY=gnu -DTOOL=gnu -I\$(WIND_BASE)/target/usr/h -I\$(WIND_BASE)/target/usr/h/wrn/coreip:::VXWORKS:-Wl,--defsym,__wrs_rtp_base=0xe0000000 -L \$(WIND_BASE)/target/usr/lib/ppc/PPC32/sfcommon:::::",
672"vxworks-ppc405","ccppc:-g -msoft-float -mlongcall -DCPU=PPC405 -I\$(WIND_BASE)/target/h:::VXWORKS:-r:::::",
673"vxworks-ppc750","ccppc:-ansi -nostdinc -DPPC750 -D_REENTRANT -fvolatile -fno-builtin -fno-for-scope -fsigned-char -Wall -msoft-float -mlongcall -DCPU=PPC604 -I\$(WIND_BASE)/target/h \$(DEBUG_FLAG):::VXWORKS:-r:::::",
674"vxworks-ppc750-debug","ccppc:-ansi -nostdinc -DPPC750 -D_REENTRANT -fvolatile -fno-builtin -fno-for-scope -fsigned-char -Wall -msoft-float -mlongcall -DCPU=PPC604 -I\$(WIND_BASE)/target/h -DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DPEDANTIC -DDEBUG_SAFESTACK -DDEBUG -g:::VXWORKS:-r:::::",
675"vxworks-ppc860","ccppc:-nostdinc -msoft-float -DCPU=PPC860 -DNO_STRINGS_H -I\$(WIND_BASE)/target/h:::VXWORKS:-r:::::",
676"vxworks-simlinux","ccpentium:-B\$(WIND_BASE)/host/\$(WIND_HOST_TYPE)/lib/gcc-lib/ -D_VSB_CONFIG_FILE=\"\$(WIND_BASE)/target/lib/h/config/vsbConfig.h\" -DL_ENDIAN -DCPU=SIMLINUX -DTOOL_FAMILY=gnu -DTOOL=gnu -fno-builtin -fno-defer-pop -DNO_STRINGS_H -I\$(WIND_BASE)/target/h -I\$(WIND_BASE)/target/h/wrn/coreip -DOPENSSL_NO_HW_PADLOCK:::VXWORKS:-r::${no_asm}::::::ranlibpentium:",
677"vxworks-mips","ccmips:-mrtp -mips2 -O -G 0 -B\$(WIND_BASE)/host/\$(WIND_HOST_TYPE)/lib/gcc-lib/ -D_VSB_CONFIG_FILE=\"\$(WIND_BASE)/target/lib/h/config/vsbConfig.h\" -DCPU=MIPS32 -msoft-float -mno-branch-likely -DTOOL_FAMILY=gnu -DTOOL=gnu -fno-builtin -fno-defer-pop -DNO_STRINGS_H -I\$(WIND_BASE)/target/usr/h -I\$(WIND_BASE)/target/h/wrn/coreip::-D_REENTRANT:VXWORKS:-Wl,--defsym,__wrs_rtp_base=0xe0000000 -L \$(WIND_BASE)/target/usr/lib/mips/MIPSI32/sfcommon::${mips32_asm}:o32::::::ranlibmips:",
678
679##### Compaq Non-Stop Kernel (Tandem)
680"tandem-c89","c89:-Ww -D__TANDEM -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1 -D_TANDEM_SOURCE -DB_ENDIAN::(unknown):::THIRTY_TWO_BIT:::",
681
682# uClinux
683"uClinux-dist","$ENV{'CC'}:\$(CFLAGS)::-D_REENTRANT::\$(LDFLAGS) \$(LDLIBS):BN_LLONG:${no_asm}:$ENV{'LIBSSL_dlfcn'}:linux-shared:-fPIC:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):$ENV{'RANLIB'}::",
684"uClinux-dist64","$ENV{'CC'}:\$(CFLAGS)::-D_REENTRANT::\$(LDFLAGS) \$(LDLIBS):SIXTY_FOUR_BIT_LONG:${no_asm}:$ENV{'LIBSSL_dlfcn'}:linux-shared:-fPIC:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):$ENV{'RANLIB'}::",
685
686);
687
688my @MK1MF_Builds=qw(VC-WIN64I VC-WIN64A
689		    debug-VC-WIN64I debug-VC-WIN64A
690		    VC-NT VC-CE VC-WIN32 debug-VC-WIN32
691		    BC-32
692		    netware-clib netware-clib-bsdsock
693		    netware-libc netware-libc-bsdsock);
694
695my $idx = 0;
696my $idx_cc = $idx++;
697my $idx_cflags = $idx++;
698my $idx_unistd = $idx++;
699my $idx_thread_cflag = $idx++;
700my $idx_sys_id = $idx++;
701my $idx_lflags = $idx++;
702my $idx_bn_ops = $idx++;
703my $idx_cpuid_obj = $idx++;
704my $idx_bn_obj = $idx++;
705my $idx_ec_obj = $idx++;
706my $idx_des_obj = $idx++;
707my $idx_aes_obj = $idx++;
708my $idx_bf_obj = $idx++;
709my $idx_md5_obj = $idx++;
710my $idx_sha1_obj = $idx++;
711my $idx_cast_obj = $idx++;
712my $idx_rc4_obj = $idx++;
713my $idx_rmd160_obj = $idx++;
714my $idx_rc5_obj = $idx++;
715my $idx_wp_obj = $idx++;
716my $idx_cmll_obj = $idx++;
717my $idx_modes_obj = $idx++;
718my $idx_engines_obj = $idx++;
719my $idx_perlasm_scheme = $idx++;
720my $idx_dso_scheme = $idx++;
721my $idx_shared_target = $idx++;
722my $idx_shared_cflag = $idx++;
723my $idx_shared_ldflag = $idx++;
724my $idx_shared_extension = $idx++;
725my $idx_ranlib = $idx++;
726my $idx_arflags = $idx++;
727my $idx_multilib = $idx++;
728
729my $prefix="";
730my $libdir="";
731my $openssldir="";
732my $exe_ext="";
733my $install_prefix= "$ENV{'INSTALL_PREFIX'}";
734my $cross_compile_prefix="";
735my $fipsdir="/usr/local/ssl/fips-2.0";
736my $fipslibdir="";
737my $baseaddr="0xFB00000";
738my $no_threads=0;
739my $threads=0;
740my $no_shared=0; # but "no-shared" is default
741my $zlib=1;      # but "no-zlib" is default
742my $no_krb5=0;   # but "no-krb5" is implied unless "--with-krb5-..." is used
743my $no_rfc3779=1; # but "no-rfc3779" is default
744my $no_asm=0;
745my $no_dso=0;
746my $no_gmp=0;
747my @skip=();
748my $Makefile="Makefile";
749my $des_locl="crypto/des/des_locl.h";
750my $des	="crypto/des/des.h";
751my $bn	="crypto/bn/bn.h";
752my $md2	="crypto/md2/md2.h";
753my $rc4	="crypto/rc4/rc4.h";
754my $rc4_locl="crypto/rc4/rc4_locl.h";
755my $idea	="crypto/idea/idea.h";
756my $rc2	="crypto/rc2/rc2.h";
757my $bf	="crypto/bf/bf_locl.h";
758my $bn_asm	="bn_asm.o";
759my $des_enc="des_enc.o fcrypt_b.o";
760my $aes_enc="aes_core.o aes_cbc.o";
761my $bf_enc	="bf_enc.o";
762my $cast_enc="c_enc.o";
763my $rc4_enc="rc4_enc.o rc4_skey.o";
764my $rc5_enc="rc5_enc.o";
765my $md5_obj="";
766my $sha1_obj="";
767my $rmd160_obj="";
768my $cmll_enc="camellia.o cmll_misc.o cmll_cbc.o";
769my $processor="";
770my $default_ranlib;
771my $perl;
772my $fips=0;
773
774if (exists $ENV{FIPSDIR})
775	{
776	$fipsdir = $ENV{FIPSDIR};
777	$fipsdir =~ s/\/$//;
778	}
779
780# All of the following is disabled by default (RC5 was enabled before 0.9.8):
781
782my %disabled = ( # "what"         => "comment" [or special keyword "experimental"]
783		 "ec_nistp_64_gcc_128" => "default",
784		 "gmp"		  => "default",
785		 "jpake"          => "experimental",
786		 "libunbound"     => "experimental",
787		 "md2"            => "default",
788		 "rc5"            => "default",
789		 "rfc3779"	  => "default",
790		 "sctp"           => "default",
791		 "shared"         => "default",
792		 "ssl-trace"	  => "default",
793		 "ssl2"           => "default",
794		 "store"	  => "experimental",
795		 "unit-test"	  => "default",
796		 "weak-ssl-ciphers" => "default",
797		 "zlib"           => "default",
798		 "zlib-dynamic"   => "default"
799	       );
800my @experimental = ();
801
802# This is what $depflags will look like with the above defaults
803# (we need this to see if we should advise the user to run "make depend"):
804my $default_depflags = " -DOPENSSL_NO_EC_NISTP_64_GCC_128 -DOPENSSL_NO_GMP -DOPENSSL_NO_JPAKE -DOPENSSL_NO_LIBUNBOUND -DOPENSSL_NO_MD2 -DOPENSSL_NO_RC5 -DOPENSSL_NO_RFC3779 -DOPENSSL_NO_SCTP -DOPENSSL_NO_SSL_TRACE -DOPENSSL_NO_SSL2 -DOPENSSL_NO_STORE -DOPENSSL_NO_UNIT_TEST -DOPENSSL_NO_WEAK_SSL_CIPHERS";
805
806# Explicit "no-..." options will be collected in %disabled along with the defaults.
807# To remove something from %disabled, use "enable-foo" (unless it's experimental).
808# For symmetry, "disable-foo" is a synonym for "no-foo".
809
810# For features called "experimental" here, a more explicit "experimental-foo" is needed to enable.
811# We will collect such requests in @experimental.
812# To avoid accidental use of experimental features, applications will have to use -DOPENSSL_EXPERIMENTAL_FOO.
813
814
815my $no_sse2=0;
816
817&usage if ($#ARGV < 0);
818
819my $flags;
820my $depflags;
821my $openssl_experimental_defines;
822my $openssl_algorithm_defines;
823my $openssl_thread_defines;
824my $openssl_sys_defines="";
825my $openssl_other_defines;
826my $libs;
827my $libkrb5="";
828my $target;
829my $options;
830my $symlink;
831my $make_depend=0;
832my %withargs=();
833
834my @argvcopy=@ARGV;
835my $argvstring="";
836my $argv_unprocessed=1;
837
838while($argv_unprocessed)
839	{
840	$flags="";
841	$depflags="";
842	$openssl_experimental_defines="";
843	$openssl_algorithm_defines="";
844	$openssl_thread_defines="";
845	$openssl_sys_defines="";
846	$openssl_other_defines="";
847	$libs="";
848	$target="";
849	$options="";
850	$symlink=1;
851
852	$argv_unprocessed=0;
853	$argvstring=join(' ',@argvcopy);
854
855PROCESS_ARGS:
856	foreach (@argvcopy)
857		{
858		s /^-no-/no-/; # some people just can't read the instructions
859
860		# rewrite some options in "enable-..." form
861		s /^-?-?shared$/enable-shared/;
862		s /^sctp$/enable-sctp/;
863		s /^threads$/enable-threads/;
864		s /^zlib$/enable-zlib/;
865		s /^zlib-dynamic$/enable-zlib-dynamic/;
866
867		if (/^no-(.+)$/ || /^disable-(.+)$/)
868			{
869			if (!($disabled{$1} eq "experimental"))
870				{
871				if ($1 eq "ssl")
872					{
873					$disabled{"ssl2"} = "option(ssl)";
874					$disabled{"ssl3"} = "option(ssl)";
875					}
876				elsif ($1 eq "tls")
877					{
878					$disabled{"tls1"} = "option(tls)"
879					}
880				elsif ($1 eq "ssl3-method")
881					{
882					$disabled{"ssl3-method"} = "option(ssl)";
883					$disabled{"ssl3"} = "option(ssl)";
884					}
885				else
886					{
887					$disabled{$1} = "option";
888					}
889				}
890			}
891		elsif (/^enable-(.+)$/ || /^experimental-(.+)$/)
892			{
893			my $algo = $1;
894			if ($disabled{$algo} eq "experimental")
895				{
896				die "You are requesting an experimental feature; please say 'experimental-$algo' if you are sure\n"
897					unless (/^experimental-/);
898				push @experimental, $algo;
899				}
900			delete $disabled{$algo};
901
902			$threads = 1 if ($algo eq "threads");
903			}
904		elsif (/^--test-sanity$/)
905			{
906			exit(&test_sanity());
907			}
908		elsif (/^--strict-warnings/)
909			{
910			$strict_warnings = 1;
911			}
912		elsif (/^reconfigure/ || /^reconf/)
913			{
914			if (open(IN,"<$Makefile"))
915				{
916				while (<IN>)
917					{
918					chomp;
919					if (/^CONFIGURE_ARGS=(.*)/)
920						{
921						$argvstring=$1;
922						@argvcopy=split(' ',$argvstring);
923						die "Incorrect data to reconfigure, please do a normal configuration\n"
924							if (grep(/^reconf/,@argvcopy));
925						print "Reconfiguring with: $argvstring\n";
926						$argv_unprocessed=1;
927						close(IN);
928						last PROCESS_ARGS;
929						}
930					}
931				close(IN);
932				}
933			die "Insufficient data to reconfigure, please do a normal configuration\n";
934			}
935		elsif (/^386$/)
936			{ $processor=386; }
937		elsif (/^fips$/)
938			{
939			$fips=1;
940			}
941		elsif (/^rsaref$/)
942			{
943			# No RSAref support any more since it's not needed.
944			# The check for the option is there so scripts aren't
945			# broken
946			}
947		elsif (/^[-+]/)
948			{
949			if (/^--prefix=(.*)$/)
950				{
951				$prefix=$1;
952				}
953			elsif (/^--libdir=(.*)$/)
954				{
955				$libdir=$1;
956				}
957			elsif (/^--openssldir=(.*)$/)
958				{
959				$openssldir=$1;
960				}
961			elsif (/^--install.prefix=(.*)$/)
962				{
963				$install_prefix=$1;
964				}
965			elsif (/^--with-krb5-(dir|lib|include|flavor)=(.*)$/)
966				{
967				$withargs{"krb5-".$1}=$2;
968				}
969			elsif (/^--with-zlib-lib=(.*)$/)
970				{
971				$withargs{"zlib-lib"}=$1;
972				}
973			elsif (/^--with-zlib-include=(.*)$/)
974				{
975				$withargs{"zlib-include"}="-I$1";
976				}
977			elsif (/^--with-fipsdir=(.*)$/)
978				{
979				$fipsdir="$1";
980				}
981			elsif (/^--with-fipslibdir=(.*)$/)
982				{
983				$fipslibdir="$1";
984				}
985			elsif (/^--with-baseaddr=(.*)$/)
986				{
987				$baseaddr="$1";
988				}
989			elsif (/^--cross-compile-prefix=(.*)$/)
990				{
991				$cross_compile_prefix=$1;
992				}
993			elsif (/^-[lL](.*)$/ or /^-Wl,/)
994				{
995				$libs.=$_." ";
996				}
997			else	# common if (/^[-+]/), just pass down...
998				{
999				$_ =~ s/%([0-9a-f]{1,2})/chr(hex($1))/gei;
1000				$flags.=$_." ";
1001				}
1002			}
1003		elsif ($_ =~ /^([^:]+):(.+)$/)
1004			{
1005			eval "\$table{\$1} = \"$2\""; # allow $xxx constructs in the string
1006			$target=$1;
1007			}
1008		else
1009			{
1010			die "target already defined - $target (offending arg: $_)\n" if ($target ne "");
1011			$target=$_;
1012			}
1013
1014		unless ($_ eq $target || /^no-/ || /^disable-/)
1015			{
1016			# "no-..." follows later after implied disactivations
1017			# have been derived.  (Don't take this too seroiusly,
1018			# we really only write OPTIONS to the Makefile out of
1019			# nostalgia.)
1020
1021			if ($options eq "")
1022				{ $options = $_; }
1023			else
1024				{ $options .= " ".$_; }
1025			}
1026		}
1027	}
1028
1029
1030
1031if ($processor eq "386")
1032	{
1033	$disabled{"sse2"} = "forced";
1034	}
1035
1036if (!defined($withargs{"krb5-flavor"}) || $withargs{"krb5-flavor"} eq "")
1037	{
1038	$disabled{"krb5"} = "krb5-flavor not specified";
1039	}
1040
1041if (!defined($disabled{"zlib-dynamic"}))
1042	{
1043	# "zlib-dynamic" was specifically enabled, so enable "zlib"
1044	delete $disabled{"zlib"};
1045	}
1046
1047if (defined($disabled{"rijndael"}))
1048	{
1049	$disabled{"aes"} = "forced";
1050	}
1051if (defined($disabled{"des"}))
1052	{
1053	$disabled{"mdc2"} = "forced";
1054	}
1055if (defined($disabled{"ec"}))
1056	{
1057	$disabled{"ecdsa"} = "forced";
1058	$disabled{"ecdh"} = "forced";
1059	}
1060
1061# SSL 2.0 requires MD5 and RSA
1062if (defined($disabled{"md5"}) || defined($disabled{"rsa"}))
1063	{
1064	$disabled{"ssl2"} = "forced";
1065	}
1066
1067if ($fips && $fipslibdir eq "")
1068	{
1069	$fipslibdir = $fipsdir . "/lib/";
1070	}
1071
1072# RSAX ENGINE sets default non-FIPS RSA method.
1073if ($fips)
1074	{
1075	$disabled{"rsax"} = "forced";
1076	}
1077
1078# SSL 3.0 and TLS requires MD5 and SHA and either RSA or DSA+DH
1079if (defined($disabled{"md5"}) || defined($disabled{"sha"})
1080    || (defined($disabled{"rsa"})
1081        && (defined($disabled{"dsa"}) || defined($disabled{"dh"}))))
1082	{
1083	$disabled{"ssl3"} = "forced";
1084	$disabled{"tls1"} = "forced";
1085	}
1086
1087if (defined($disabled{"ec"}) || defined($disabled{"dsa"})
1088    || defined($disabled{"dh"}))
1089	{
1090	$disabled{"gost"} = "forced";
1091	}
1092
1093# SRP and HEARTBEATS require TLSEXT
1094if (defined($disabled{"tlsext"}))
1095	{
1096	$disabled{"srp"} = "forced";
1097	$disabled{"heartbeats"} = "forced";
1098	}
1099
1100if ($target eq "TABLE") {
1101	foreach $target (sort keys %table) {
1102		print_table_entry($target);
1103	}
1104	exit 0;
1105}
1106
1107if ($target eq "LIST") {
1108	foreach (sort keys %table) {
1109		print;
1110		print "\n";
1111	}
1112	exit 0;
1113}
1114
1115if ($target =~ m/^CygWin32(-.*)$/) {
1116	$target = "Cygwin".$1;
1117}
1118
1119print "Configuring for $target\n";
1120
1121&usage if (!defined($table{$target}));
1122
1123
1124foreach (sort (keys %disabled))
1125	{
1126	$options .= " no-$_";
1127
1128	printf "    no-%-12s %-10s", $_, "[$disabled{$_}]";
1129
1130	if (/^dso$/)
1131		{ $no_dso = 1; }
1132	elsif (/^threads$/)
1133		{ $no_threads = 1; }
1134	elsif (/^shared$/)
1135		{ $no_shared = 1; }
1136	elsif (/^zlib$/)
1137		{ $zlib = 0; }
1138	elsif (/^static-engine$/)
1139		{ }
1140	elsif (/^zlib-dynamic$/)
1141		{ }
1142	elsif (/^symlinks$/)
1143		{ $symlink = 0; }
1144	elsif (/^sse2$/)
1145		{ $no_sse2 = 1; }
1146	else
1147		{
1148		my ($ALGO, $algo);
1149		($ALGO = $algo = $_) =~ tr/[\-a-z]/[_A-Z]/;
1150
1151		if (/^asm$/ || /^err$/ || /^hw$/ || /^hw-/)
1152			{
1153			$openssl_other_defines .= "#define OPENSSL_NO_$ALGO\n";
1154			print " OPENSSL_NO_$ALGO";
1155
1156			if (/^err$/)	{ $flags .= "-DOPENSSL_NO_ERR "; }
1157			elsif (/^asm$/)	{ $no_asm = 1; }
1158			}
1159		else
1160			{
1161			$openssl_algorithm_defines .= "#define OPENSSL_NO_$ALGO\n";
1162			print " OPENSSL_NO_$ALGO";
1163
1164			if (/^krb5$/)
1165				{ $no_krb5 = 1; }
1166			else
1167				{
1168				push @skip, $algo;
1169				# fix-up crypto/directory name(s)
1170				@skip[$#skip]="whrlpool" if $algo eq "whirlpool";
1171				print " (skip dir)";
1172
1173				$depflags .= " -DOPENSSL_NO_$ALGO";
1174				}
1175			}
1176		}
1177
1178	print "\n";
1179	}
1180
1181my $exp_cflags = "";
1182foreach (sort @experimental)
1183	{
1184	my $ALGO;
1185	($ALGO = $_) =~ tr/[a-z]/[A-Z]/;
1186
1187	# opensslconf.h will set OPENSSL_NO_... unless OPENSSL_EXPERIMENTAL_... is defined
1188	$openssl_experimental_defines .= "#define OPENSSL_NO_$ALGO\n";
1189	$exp_cflags .= " -DOPENSSL_EXPERIMENTAL_$ALGO";
1190	}
1191
1192my $IsMK1MF=scalar grep /^$target$/,@MK1MF_Builds;
1193
1194$exe_ext=".exe" if ($target eq "Cygwin" || $target eq "DJGPP" || $target =~ /^mingw/);
1195$exe_ext=".nlm" if ($target =~ /netware/);
1196$exe_ext=".pm"  if ($target =~ /vos/);
1197$openssldir="/usr/local/ssl" if ($openssldir eq "" and $prefix eq "");
1198$prefix=$openssldir if $prefix eq "";
1199
1200$default_ranlib= &which("ranlib") or $default_ranlib="true";
1201$perl=$ENV{'PERL'} or $perl=&which("perl5") or $perl=&which("perl")
1202  or $perl="perl";
1203my $make = $ENV{'MAKE'} || "make";
1204
1205$cross_compile_prefix=$ENV{'CROSS_COMPILE'} if $cross_compile_prefix eq "";
1206
1207chop $openssldir if $openssldir =~ /\/$/;
1208chop $prefix if $prefix =~ /.\/$/;
1209
1210$openssldir=$prefix . "/ssl" if $openssldir eq "";
1211$openssldir=$prefix . "/" . $openssldir if $openssldir !~ /(^\/|^[a-zA-Z]:[\\\/])/;
1212
1213
1214print "IsMK1MF=$IsMK1MF\n";
1215
1216my @fields = split(/\s*:\s*/,$table{$target} . ":" x 30 , -1);
1217my $cc = $fields[$idx_cc];
1218# Allow environment CC to override compiler...
1219if($ENV{CC}) {
1220    $cc = $ENV{CC};
1221}
1222
1223my $cflags = $fields[$idx_cflags];
1224my $unistd = $fields[$idx_unistd];
1225my $thread_cflag = $fields[$idx_thread_cflag];
1226my $sys_id = $fields[$idx_sys_id];
1227my $lflags = $fields[$idx_lflags];
1228my $bn_ops = $fields[$idx_bn_ops];
1229my $cpuid_obj = $fields[$idx_cpuid_obj];
1230my $bn_obj = $fields[$idx_bn_obj];
1231my $ec_obj = $fields[$idx_ec_obj];
1232my $des_obj = $fields[$idx_des_obj];
1233my $aes_obj = $fields[$idx_aes_obj];
1234my $bf_obj = $fields[$idx_bf_obj];
1235my $md5_obj = $fields[$idx_md5_obj];
1236my $sha1_obj = $fields[$idx_sha1_obj];
1237my $cast_obj = $fields[$idx_cast_obj];
1238my $rc4_obj = $fields[$idx_rc4_obj];
1239my $rmd160_obj = $fields[$idx_rmd160_obj];
1240my $rc5_obj = $fields[$idx_rc5_obj];
1241my $wp_obj = $fields[$idx_wp_obj];
1242my $cmll_obj = $fields[$idx_cmll_obj];
1243my $modes_obj = $fields[$idx_modes_obj];
1244my $engines_obj = $fields[$idx_engines_obj];
1245my $perlasm_scheme = $fields[$idx_perlasm_scheme];
1246my $dso_scheme = $fields[$idx_dso_scheme];
1247my $shared_target = $fields[$idx_shared_target];
1248my $shared_cflag = $fields[$idx_shared_cflag];
1249my $shared_ldflag = $fields[$idx_shared_ldflag];
1250my $shared_extension = $fields[$idx_shared_extension];
1251my $ranlib = $ENV{'RANLIB'} || $fields[$idx_ranlib];
1252my $ar = $ENV{'AR'} || "ar";
1253my $arflags = $fields[$idx_arflags];
1254my $windres = $ENV{'RC'} || $ENV{'WINDRES'} || "windres";
1255my $multilib = $fields[$idx_multilib];
1256
1257# if $prefix/lib$multilib is not an existing directory, then
1258# assume that it's not searched by linker automatically, in
1259# which case adding $multilib suffix causes more grief than
1260# we're ready to tolerate, so don't...
1261$multilib="" if !-d "$prefix/lib$multilib";
1262
1263$libdir="lib$multilib" if $libdir eq "";
1264
1265$cflags = "$cflags$exp_cflags";
1266
1267# '%' in $lflags is used to split flags to "pre-" and post-flags
1268my ($prelflags,$postlflags)=split('%',$lflags);
1269if (defined($postlflags))	{ $lflags=$postlflags;	}
1270else				{ $lflags=$prelflags; undef $prelflags;	}
1271
1272if ($target =~ /^mingw/ && `$cc --target-help 2>&1` !~ m/\-mno\-cygwin/m)
1273	{
1274	$cflags =~ s/\-mno\-cygwin\s*//;
1275	$shared_ldflag =~ s/\-mno\-cygwin\s*//;
1276	}
1277
1278if ($target =~ /linux.*\-mips/ && !$no_asm && $flags !~ /\-m(ips|arch=)/) {
1279	# minimally required architecture flags for assembly modules
1280	$cflags="-mips2 $cflags" if ($target =~ /mips32/);
1281	$cflags="-mips3 $cflags" if ($target =~ /mips64/);
1282}
1283
1284my $no_shared_warn=0;
1285my $no_user_cflags=0;
1286
1287if ($flags ne "")	{ $cflags="$flags$cflags"; }
1288else			{ $no_user_cflags=1;       }
1289
1290# Kerberos settings.  The flavor must be provided from outside, either through
1291# the script "config" or manually.
1292if (!$no_krb5)
1293	{
1294	my ($lresolv, $lpath, $lext);
1295	if ($withargs{"krb5-flavor"} =~ /^[Hh]eimdal$/)
1296		{
1297		die "Sorry, Heimdal is currently not supported\n";
1298		}
1299	##### HACK to force use of Heimdal.
1300	##### WARNING: Since we don't really have adequate support for Heimdal,
1301	#####          using this will break the build.  You'll have to make
1302	#####          changes to the source, and if you do, please send
1303	#####          patches to openssl-dev@openssl.org
1304	if ($withargs{"krb5-flavor"} =~ /^force-[Hh]eimdal$/)
1305		{
1306		warn "Heimdal isn't really supported.  Your build WILL break\n";
1307		warn "If you fix the problems, please send a patch to openssl-dev\@openssl.org\n";
1308		$withargs{"krb5-dir"} = "/usr/heimdal"
1309			if $withargs{"krb5-dir"} eq "";
1310		$withargs{"krb5-lib"} = "-L".$withargs{"krb5-dir"}.
1311			"/lib -lgssapi -lkrb5 -lcom_err"
1312			if $withargs{"krb5-lib"} eq "" && !$IsMK1MF;
1313		$cflags="-DKRB5_HEIMDAL $cflags";
1314		}
1315	if ($withargs{"krb5-flavor"} =~ /^[Mm][Ii][Tt]/)
1316		{
1317		$withargs{"krb5-dir"} = "/usr/kerberos"
1318			if $withargs{"krb5-dir"} eq "";
1319		$withargs{"krb5-lib"} = "-L".$withargs{"krb5-dir"}.
1320			"/lib -lgssapi_krb5 -lkrb5 -lcom_err -lk5crypto"
1321			if $withargs{"krb5-lib"} eq "" && !$IsMK1MF;
1322		$cflags="-DKRB5_MIT $cflags";
1323		$withargs{"krb5-flavor"} =~ s/^[Mm][Ii][Tt][._-]*//;
1324		if ($withargs{"krb5-flavor"} =~ /^1[._-]*[01]/)
1325			{
1326			$cflags="-DKRB5_MIT_OLD11 $cflags";
1327			}
1328		}
1329	LRESOLV:
1330	foreach $lpath ("/lib", "/usr/lib")
1331		{
1332		foreach $lext ("a", "so")
1333			{
1334			$lresolv = "$lpath/libresolv.$lext";
1335			last LRESOLV	if (-r "$lresolv");
1336			$lresolv = "";
1337			}
1338		}
1339	$withargs{"krb5-lib"} .= " -lresolv"
1340		if ("$lresolv" ne "");
1341	$withargs{"krb5-include"} = "-I".$withargs{"krb5-dir"}."/include"
1342		if $withargs{"krb5-include"} eq "" &&
1343		   $withargs{"krb5-dir"} ne "";
1344	}
1345
1346# The DSO code currently always implements all functions so that no
1347# applications will have to worry about that from a compilation point
1348# of view. However, the "method"s may return zero unless that platform
1349# has support compiled in for them. Currently each method is enabled
1350# by a define "DSO_<name>" ... we translate the "dso_scheme" config
1351# string entry into using the following logic;
1352my $dso_cflags;
1353if (!$no_dso && $dso_scheme ne "")
1354	{
1355	$dso_scheme =~ tr/[a-z]/[A-Z]/;
1356	if ($dso_scheme eq "DLFCN")
1357		{
1358		$dso_cflags = "-DDSO_DLFCN -DHAVE_DLFCN_H";
1359		}
1360	elsif ($dso_scheme eq "DLFCN_NO_H")
1361		{
1362		$dso_cflags = "-DDSO_DLFCN";
1363		}
1364	else
1365		{
1366		$dso_cflags = "-DDSO_$dso_scheme";
1367		}
1368	$cflags = "$dso_cflags $cflags";
1369	}
1370
1371my $thread_cflags;
1372my $thread_defines;
1373if ($thread_cflag ne "(unknown)" && !$no_threads)
1374	{
1375	# If we know how to do it, support threads by default.
1376	$threads = 1;
1377	}
1378if ($thread_cflag eq "(unknown)" && $threads)
1379	{
1380	# If the user asked for "threads", [s]he is also expected to
1381	# provide any system-dependent compiler options that are
1382	# necessary.
1383	if ($no_user_cflags)
1384		{
1385		print "You asked for multi-threading support, but didn't\n";
1386		print "provide any system-specific compiler options\n";
1387		exit(1);
1388		}
1389	$thread_cflags="-DOPENSSL_THREADS $cflags" ;
1390	$thread_defines .= "#define OPENSSL_THREADS\n";
1391	}
1392else
1393	{
1394	$thread_cflags="-DOPENSSL_THREADS $thread_cflag $cflags";
1395	$thread_defines .= "#define OPENSSL_THREADS\n";
1396#	my $def;
1397#	foreach $def (split ' ',$thread_cflag)
1398#		{
1399#		if ($def =~ s/^-D// && $def !~ /^_/)
1400#			{
1401#			$thread_defines .= "#define $def\n";
1402#			}
1403#		}
1404	}
1405
1406$lflags="$libs$lflags" if ($libs ne "");
1407
1408if ($no_asm)
1409	{
1410	$cpuid_obj=$bn_obj=$ec_obj=
1411	$des_obj=$aes_obj=$bf_obj=$cast_obj=$rc4_obj=$rc5_obj=$cmll_obj=
1412	$modes_obj=$sha1_obj=$md5_obj=$rmd160_obj=$wp_obj=$engines_obj="";
1413	}
1414
1415if (!$no_shared)
1416	{
1417	$cast_obj="";	# CAST assembler is not PIC
1418	}
1419
1420if ($threads)
1421	{
1422	$cflags=$thread_cflags;
1423	$openssl_thread_defines .= $thread_defines;
1424	}
1425
1426if ($zlib)
1427	{
1428	$cflags = "-DZLIB $cflags";
1429	if (defined($disabled{"zlib-dynamic"}))
1430		{
1431		if (defined($withargs{"zlib-lib"}))
1432			{
1433			$lflags = "$lflags -L" . $withargs{"zlib-lib"} . " -lz";
1434			}
1435		else
1436			{
1437			$lflags = "$lflags -lz";
1438			}
1439		}
1440	else
1441		{
1442		$cflags = "-DZLIB_SHARED $cflags";
1443		}
1444	}
1445
1446# You will find shlib_mark1 and shlib_mark2 explained in Makefile.org
1447my $shared_mark = "";
1448if ($shared_target eq "")
1449	{
1450	$no_shared_warn = 1 if !$no_shared;
1451	$no_shared = 1;
1452	}
1453if (!$no_shared)
1454	{
1455	if ($shared_cflag ne "")
1456		{
1457		$cflags = "$shared_cflag -DOPENSSL_PIC $cflags";
1458		}
1459	}
1460
1461if (!$IsMK1MF)
1462	{
1463	# add {no-}static-engine to options to allow mkdef.pl to work without extra arguments
1464	if ($no_shared)
1465		{
1466		$openssl_other_defines.="#define OPENSSL_NO_DYNAMIC_ENGINE\n";
1467		$options.=" static-engine";
1468		}
1469	else
1470		{
1471		$openssl_other_defines.="#define OPENSSL_NO_STATIC_ENGINE\n";
1472		$options.=" no-static-engine";
1473		}
1474	}
1475
1476$cpuid_obj.=" uplink.o uplink-x86.o" if ($cflags =~ /\-DOPENSSL_USE_APPLINK/);
1477
1478#
1479# Platform fix-ups
1480#
1481if ($target =~ /\-icc$/)	# Intel C compiler
1482	{
1483	my $iccver=0;
1484	if (open(FD,"$cc -V 2>&1 |"))
1485		{
1486		while(<FD>) { $iccver=$1 if (/Version ([0-9]+)\./); }
1487		close(FD);
1488		}
1489	if ($iccver>=8)
1490		{
1491		$cflags=~s/\-KPIC/-fPIC/;
1492		# Eliminate unnecessary dependency from libirc.a. This is
1493		# essential for shared library support, as otherwise
1494		# apps/openssl can end up in endless loop upon startup...
1495		$cflags.=" -Dmemcpy=__builtin_memcpy -Dmemset=__builtin_memset";
1496		}
1497	if ($iccver>=9)
1498		{
1499		$lflags.=" -i-static";
1500		$lflags=~s/\-no_cpprt/-no-cpprt/;
1501		}
1502	if ($iccver>=10)
1503		{
1504		$lflags=~s/\-i\-static/-static-intel/;
1505		}
1506	if ($iccver>=11)
1507		{
1508		$cflags.=" -no-intel-extensions";	# disable Cilk
1509		$lflags=~s/\-no\-cpprt/-no-cxxlib/;
1510		}
1511	}
1512
1513# Unlike other OSes (like Solaris, Linux, Tru64, IRIX) BSD run-time
1514# linkers (tested OpenBSD, NetBSD and FreeBSD) "demand" RPATH set on
1515# .so objects. Apparently application RPATH is not global and does
1516# not apply to .so linked with other .so. Problem manifests itself
1517# when libssl.so fails to load libcrypto.so. One can argue that we
1518# should engrave this into Makefile.shared rules or into BSD-* config
1519# lines above. Meanwhile let's try to be cautious and pass -rpath to
1520# linker only when --prefix is not /usr.
1521if ($target =~ /^BSD\-/)
1522	{
1523	$shared_ldflag.=" -Wl,-rpath,\$\$(LIBRPATH)" if ($prefix !~ m|^/usr[/]*$|);
1524	}
1525
1526if ($sys_id ne "")
1527	{
1528	#$cflags="-DOPENSSL_SYSNAME_$sys_id $cflags";
1529	$openssl_sys_defines="#define OPENSSL_SYSNAME_$sys_id\n";
1530	}
1531
1532if ($ranlib eq "")
1533	{
1534	$ranlib = $default_ranlib;
1535	}
1536
1537#my ($bn1)=split(/\s+/,$bn_obj);
1538#$bn1 = "" unless defined $bn1;
1539#$bn1=$bn_asm unless ($bn1 =~ /\.o$/);
1540#$bn_obj="$bn1";
1541
1542$cpuid_obj="" if ($processor eq "386");
1543
1544$bn_obj = $bn_asm unless $bn_obj ne "";
1545# bn-586 is the only one implementing bn_*_part_words
1546$cflags.=" -DOPENSSL_BN_ASM_PART_WORDS" if ($bn_obj =~ /bn-586/);
1547$cflags.=" -DOPENSSL_IA32_SSE2" if (!$no_sse2 && $bn_obj =~ /86/);
1548
1549$cflags.=" -DOPENSSL_BN_ASM_MONT" if ($bn_obj =~ /-mont/);
1550$cflags.=" -DOPENSSL_BN_ASM_MONT5" if ($bn_obj =~ /-mont5/);
1551$cflags.=" -DOPENSSL_BN_ASM_GF2m" if ($bn_obj =~ /-gf2m/);
1552
1553if ($fips)
1554	{
1555	$openssl_other_defines.="#define OPENSSL_FIPS\n";
1556	$cflags .= " -I\$(FIPSDIR)/include";
1557	}
1558
1559$cpuid_obj="mem_clr.o"	unless ($cpuid_obj =~ /\.o$/);
1560$des_obj=$des_enc	unless ($des_obj =~ /\.o$/);
1561$bf_obj=$bf_enc		unless ($bf_obj =~ /\.o$/);
1562$cast_obj=$cast_enc	unless ($cast_obj =~ /\.o$/);
1563$rc5_obj=$rc5_enc	unless ($rc5_obj =~ /\.o$/);
1564if ($rc4_obj =~ /\.o$/)
1565	{
1566	$cflags.=" -DRC4_ASM";
1567	}
1568else
1569	{
1570	$rc4_obj=$rc4_enc;
1571	}
1572if ($sha1_obj =~ /\.o$/)
1573	{
1574#	$sha1_obj=$sha1_enc;
1575	$cflags.=" -DSHA1_ASM"   if ($sha1_obj =~ /sx86/ || $sha1_obj =~ /sha1/);
1576	$cflags.=" -DSHA256_ASM" if ($sha1_obj =~ /sha256/);
1577	$cflags.=" -DSHA512_ASM" if ($sha1_obj =~ /sha512/);
1578	if ($sha1_obj =~ /sse2/)
1579	    {	if ($no_sse2)
1580		{   $sha1_obj =~ s/\S*sse2\S+//;        }
1581		elsif ($cflags !~ /OPENSSL_IA32_SSE2/)
1582		{   $cflags.=" -DOPENSSL_IA32_SSE2";    }
1583	    }
1584	}
1585if ($md5_obj =~ /\.o$/)
1586	{
1587#	$md5_obj=$md5_enc;
1588	$cflags.=" -DMD5_ASM";
1589	}
1590if ($rmd160_obj =~ /\.o$/)
1591	{
1592#	$rmd160_obj=$rmd160_enc;
1593	$cflags.=" -DRMD160_ASM";
1594	}
1595if ($aes_obj =~ /\.o$/)
1596	{
1597	$cflags.=" -DAES_ASM" if ($aes_obj =~ m/\baes\-/);;
1598	# aes-ctr.o is not a real file, only indication that assembler
1599	# module implements AES_ctr32_encrypt...
1600	$cflags.=" -DAES_CTR_ASM" if ($aes_obj =~ s/\s*aes\-ctr\.o//);
1601	# aes-xts.o indicates presense of AES_xts_[en|de]crypt...
1602	$cflags.=" -DAES_XTS_ASM" if ($aes_obj =~ s/\s*aes\-xts\.o//);
1603	$aes_obj =~ s/\s*(vpaes|aesni)\-x86\.o//g if ($no_sse2);
1604	$cflags.=" -DVPAES_ASM" if ($aes_obj =~ m/vpaes/);
1605	$cflags.=" -DBSAES_ASM" if ($aes_obj =~ m/bsaes/);
1606	}
1607else	{
1608	$aes_obj=$aes_enc;
1609	}
1610$wp_obj="" if ($wp_obj =~ /mmx/ && $processor eq "386");
1611if ($wp_obj =~ /\.o$/ && !$disabled{"whirlpool"})
1612	{
1613	$cflags.=" -DWHIRLPOOL_ASM";
1614	}
1615else	{
1616	$wp_obj="wp_block.o";
1617	}
1618$cmll_obj=$cmll_enc	unless ($cmll_obj =~ /.o$/);
1619if ($modes_obj =~ /ghash\-/)
1620	{
1621	$cflags.=" -DGHASH_ASM";
1622	}
1623if ($ec_obj =~ /ecp_nistz256/)
1624	{
1625	$cflags.=" -DECP_NISTZ256_ASM";
1626	}
1627
1628# "Stringify" the C flags string.  This permits it to be made part of a string
1629# and works as well on command lines.
1630$cflags =~ s/([\\\"])/\\\1/g;
1631
1632my $version = "unknown";
1633my $version_num = "unknown";
1634my $major = "unknown";
1635my $minor = "unknown";
1636my $shlib_version_number = "unknown";
1637my $shlib_version_history = "unknown";
1638my $shlib_major = "unknown";
1639my $shlib_minor = "unknown";
1640
1641open(IN,'<crypto/opensslv.h') || die "unable to read opensslv.h:$!\n";
1642while (<IN>)
1643	{
1644	$version=$1 if /OPENSSL.VERSION.TEXT.*OpenSSL (\S+) /;
1645	$version_num=$1 if /OPENSSL.VERSION.NUMBER.*0x(\S+)/;
1646	$shlib_version_number=$1 if /SHLIB_VERSION_NUMBER *"([^"]+)"/;
1647	$shlib_version_history=$1 if /SHLIB_VERSION_HISTORY *"([^"]*)"/;
1648	}
1649close(IN);
1650if ($shlib_version_history ne "") { $shlib_version_history .= ":"; }
1651
1652if ($version =~ /(^[0-9]*)\.([0-9\.]*)/)
1653	{
1654	$major=$1;
1655	$minor=$2;
1656	}
1657
1658if ($shlib_version_number =~ /(^[0-9]*)\.([0-9\.]*)/)
1659	{
1660	$shlib_major=$1;
1661	$shlib_minor=$2;
1662	}
1663
1664my $ecc = $cc;
1665$ecc = "clang" if `$cc --version 2>&1` =~ /clang/;
1666
1667if ($strict_warnings)
1668	{
1669	my $wopt;
1670	die "ERROR --strict-warnings requires gcc or clang" unless ($ecc =~ /gcc$/ or $ecc =~ /clang$/);
1671	foreach $wopt (split /\s+/, $gcc_devteam_warn)
1672		{
1673		$cflags .= " $wopt" unless ($cflags =~ /(^|\s)$wopt(\s|$)/)
1674		}
1675	if ($ecc eq "clang")
1676		{
1677		foreach $wopt (split /\s+/, $clang_devteam_warn)
1678			{
1679			$cflags .= " $wopt" unless ($cflags =~ /(^|\s)$wopt(\s|$)/)
1680			}
1681		}
1682	}
1683
1684open(IN,'<Makefile.org') || die "unable to read Makefile.org:$!\n";
1685unlink("$Makefile.new") || die "unable to remove old $Makefile.new:$!\n" if -e "$Makefile.new";
1686open(OUT,">$Makefile.new") || die "unable to create $Makefile.new:$!\n";
1687print OUT "### Generated automatically from Makefile.org by Configure.\n\n";
1688my $sdirs=0;
1689while (<IN>)
1690	{
1691	chomp;
1692	$sdirs = 1 if /^SDIRS=/;
1693	if ($sdirs) {
1694		my $dir;
1695		foreach $dir (@skip) {
1696			s/(\s)$dir /$1/;
1697			s/\s$dir$//;
1698			}
1699		}
1700	$sdirs = 0 unless /\\$/;
1701        s/engines // if (/^DIRS=/ && $disabled{"engine"});
1702	s/ccgost// if (/^ENGDIRS=/ && $disabled{"gost"});
1703	s/^VERSION=.*/VERSION=$version/;
1704	s/^MAJOR=.*/MAJOR=$major/;
1705	s/^MINOR=.*/MINOR=$minor/;
1706	s/^SHLIB_VERSION_NUMBER=.*/SHLIB_VERSION_NUMBER=$shlib_version_number/;
1707	s/^SHLIB_VERSION_HISTORY=.*/SHLIB_VERSION_HISTORY=$shlib_version_history/;
1708	s/^SHLIB_MAJOR=.*/SHLIB_MAJOR=$shlib_major/;
1709	s/^SHLIB_MINOR=.*/SHLIB_MINOR=$shlib_minor/;
1710	s/^SHLIB_EXT=.*/SHLIB_EXT=$shared_extension/;
1711	s/^INSTALLTOP=.*$/INSTALLTOP=$prefix/;
1712	s/^MULTILIB=.*$/MULTILIB=$multilib/;
1713	s/^OPENSSLDIR=.*$/OPENSSLDIR=$openssldir/;
1714	s/^LIBDIR=.*$/LIBDIR=$libdir/;
1715	s/^INSTALL_PREFIX=.*$/INSTALL_PREFIX=$install_prefix/;
1716	s/^PLATFORM=.*$/PLATFORM=$target/;
1717	s/^OPTIONS=.*$/OPTIONS=$options/;
1718	s/^CONFIGURE_ARGS=.*$/CONFIGURE_ARGS=$argvstring/;
1719	if ($cross_compile_prefix)
1720		{
1721		s/^CC=.*$/CROSS_COMPILE= $cross_compile_prefix\nCC= \$\(CROSS_COMPILE\)$cc/;
1722		s/^AR=\s*/AR= \$\(CROSS_COMPILE\)/;
1723		s/^NM=\s*/NM= \$\(CROSS_COMPILE\)/;
1724		s/^RANLIB=\s*/RANLIB= \$\(CROSS_COMPILE\)/;
1725		s/^RC=\s*/RC= \$\(CROSS_COMPILE\)/;
1726		s/^MAKEDEPPROG=.*$/MAKEDEPPROG= \$\(CROSS_COMPILE\)$cc/ if $cc eq "gcc";
1727		}
1728	else	{
1729		s/^CC=.*$/CC= $cc/;
1730		s/^AR=\s*ar/AR= $ar/;
1731		s/^RANLIB=.*/RANLIB= $ranlib/;
1732		s/^RC=.*/RC= $windres/;
1733		s/^MAKEDEPPROG=.*$/MAKEDEPPROG= $cc/ if $cc eq "gcc";
1734		s/^MAKEDEPPROG=.*$/MAKEDEPPROG= $cc/ if $ecc eq "gcc" || $ecc eq "clang";
1735		}
1736	s/^CFLAG=.*$/CFLAG= $cflags/;
1737	s/^DEPFLAG=.*$/DEPFLAG=$depflags/;
1738	s/^PEX_LIBS=.*$/PEX_LIBS= $prelflags/;
1739	s/^EX_LIBS=.*$/EX_LIBS= $lflags/;
1740	s/^EXE_EXT=.*$/EXE_EXT= $exe_ext/;
1741	s/^CPUID_OBJ=.*$/CPUID_OBJ= $cpuid_obj/;
1742	s/^BN_ASM=.*$/BN_ASM= $bn_obj/;
1743	s/^EC_ASM=.*$/EC_ASM= $ec_obj/;
1744	s/^DES_ENC=.*$/DES_ENC= $des_obj/;
1745	s/^AES_ENC=.*$/AES_ENC= $aes_obj/;
1746	s/^BF_ENC=.*$/BF_ENC= $bf_obj/;
1747	s/^CAST_ENC=.*$/CAST_ENC= $cast_obj/;
1748	s/^RC4_ENC=.*$/RC4_ENC= $rc4_obj/;
1749	s/^RC5_ENC=.*$/RC5_ENC= $rc5_obj/;
1750	s/^MD5_ASM_OBJ=.*$/MD5_ASM_OBJ= $md5_obj/;
1751	s/^SHA1_ASM_OBJ=.*$/SHA1_ASM_OBJ= $sha1_obj/;
1752	s/^RMD160_ASM_OBJ=.*$/RMD160_ASM_OBJ= $rmd160_obj/;
1753	s/^WP_ASM_OBJ=.*$/WP_ASM_OBJ= $wp_obj/;
1754	s/^CMLL_ENC=.*$/CMLL_ENC= $cmll_obj/;
1755	s/^MODES_ASM_OBJ.=*$/MODES_ASM_OBJ= $modes_obj/;
1756	s/^ENGINES_ASM_OBJ.=*$/ENGINES_ASM_OBJ= $engines_obj/;
1757	s/^PERLASM_SCHEME=.*$/PERLASM_SCHEME= $perlasm_scheme/;
1758	s/^PROCESSOR=.*/PROCESSOR= $processor/;
1759	s/^ARFLAGS=.*/ARFLAGS= $arflags/;
1760	s/^PERL=.*/PERL= $perl/;
1761	s/^KRB5_INCLUDES=.*/KRB5_INCLUDES=$withargs{"krb5-include"}/;
1762	s/^LIBKRB5=.*/LIBKRB5=$withargs{"krb5-lib"}/;
1763	s/^LIBZLIB=.*/LIBZLIB=$withargs{"zlib-lib"}/;
1764	s/^ZLIB_INCLUDE=.*/ZLIB_INCLUDE=$withargs{"zlib-include"}/;
1765
1766	s/^FIPSDIR=.*/FIPSDIR=$fipsdir/;
1767	s/^FIPSLIBDIR=.*/FIPSLIBDIR=$fipslibdir/;
1768	s/^FIPSCANLIB=.*/FIPSCANLIB=libcrypto/ if $fips;
1769	s/^BASEADDR=.*/BASEADDR=$baseaddr/;
1770
1771	s/^SHLIB_TARGET=.*/SHLIB_TARGET=$shared_target/;
1772	s/^SHLIB_MARK=.*/SHLIB_MARK=$shared_mark/;
1773	s/^SHARED_LIBS=.*/SHARED_LIBS=\$(SHARED_CRYPTO) \$(SHARED_SSL)/ if (!$no_shared);
1774	if ($shared_extension ne "" && $shared_extension =~ /^\.s([ol])\.[^\.]*$/)
1775		{
1776		my $sotmp = $1;
1777		s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.s$sotmp/;
1778		}
1779	elsif ($shared_extension ne "" && $shared_extension =~ /^\.[^\.]*\.dylib$/)
1780		{
1781		s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.dylib/;
1782		}
1783	elsif ($shared_extension ne "" && $shared_extension =~ /^\.s([ol])\.[^\.]*\.[^\.]*$/)
1784		{
1785		my $sotmp = $1;
1786		s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.s$sotmp.\$(SHLIB_MAJOR) .s$sotmp/;
1787		}
1788	elsif ($shared_extension ne "" && $shared_extension =~ /^\.[^\.]*\.[^\.]*\.dylib$/)
1789		{
1790		s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.\$(SHLIB_MAJOR).dylib .dylib/;
1791		}
1792	s/^SHARED_LDFLAGS=.*/SHARED_LDFLAGS=$shared_ldflag/;
1793	print OUT $_."\n";
1794	}
1795close(IN);
1796close(OUT);
1797if ((compare($Makefile, "$Makefile.new"))
1798	or file_newer('Configure', $Makefile)
1799	or file_newer('config', $Makefile)
1800	or file_newer('Makefile.org', $Makefile))
1801	{
1802	rename($Makefile,"$Makefile.bak") || die "unable to rename $Makefile\n" if -e $Makefile;
1803	rename("$Makefile.new",$Makefile) || die "unable to rename $Makefile.new\n";
1804	}
1805else
1806	{ unlink("$Makefile.new"); }
1807
1808print "CC            =$cc\n";
1809print "CFLAG         =$cflags\n";
1810print "EX_LIBS       =$lflags\n";
1811print "CPUID_OBJ     =$cpuid_obj\n";
1812print "BN_ASM        =$bn_obj\n";
1813print "EC_ASM        =$ec_obj\n";
1814print "DES_ENC       =$des_obj\n";
1815print "AES_ENC       =$aes_obj\n";
1816print "BF_ENC        =$bf_obj\n";
1817print "CAST_ENC      =$cast_obj\n";
1818print "RC4_ENC       =$rc4_obj\n";
1819print "RC5_ENC       =$rc5_obj\n";
1820print "MD5_OBJ_ASM   =$md5_obj\n";
1821print "SHA1_OBJ_ASM  =$sha1_obj\n";
1822print "RMD160_OBJ_ASM=$rmd160_obj\n";
1823print "CMLL_ENC      =$cmll_obj\n";
1824print "MODES_OBJ     =$modes_obj\n";
1825print "ENGINES_OBJ   =$engines_obj\n";
1826print "PROCESSOR     =$processor\n";
1827print "RANLIB        =$ranlib\n";
1828print "ARFLAGS       =$arflags\n";
1829print "PERL          =$perl\n";
1830print "KRB5_INCLUDES =",$withargs{"krb5-include"},"\n"
1831	if $withargs{"krb5-include"} ne "";
1832
1833my $des_ptr=0;
1834my $des_risc1=0;
1835my $des_risc2=0;
1836my $des_unroll=0;
1837my $bn_ll=0;
1838my $def_int=2;
1839my $rc4_int=$def_int;
1840my $md2_int=$def_int;
1841my $idea_int=$def_int;
1842my $rc2_int=$def_int;
1843my $rc4_idx=0;
1844my $rc4_chunk=0;
1845my $bf_ptr=0;
1846my @type=("char","short","int","long");
1847my ($b64l,$b64,$b32,$b16,$b8)=(0,0,1,0,0);
1848my $export_var_as_fn=0;
1849
1850my $des_int;
1851
1852foreach (sort split(/\s+/,$bn_ops))
1853	{
1854	$des_ptr=1 if /DES_PTR/;
1855	$des_risc1=1 if /DES_RISC1/;
1856	$des_risc2=1 if /DES_RISC2/;
1857	$des_unroll=1 if /DES_UNROLL/;
1858	$des_int=1 if /DES_INT/;
1859	$bn_ll=1 if /BN_LLONG/;
1860	$rc4_int=0 if /RC4_CHAR/;
1861	$rc4_int=3 if /RC4_LONG/;
1862	$rc4_idx=1 if /RC4_INDEX/;
1863	$rc4_chunk=1 if /RC4_CHUNK/;
1864	$rc4_chunk=2 if /RC4_CHUNK_LL/;
1865	$md2_int=0 if /MD2_CHAR/;
1866	$md2_int=3 if /MD2_LONG/;
1867	$idea_int=1 if /IDEA_SHORT/;
1868	$idea_int=3 if /IDEA_LONG/;
1869	$rc2_int=1 if /RC2_SHORT/;
1870	$rc2_int=3 if /RC2_LONG/;
1871	$bf_ptr=1 if $_ eq "BF_PTR";
1872	$bf_ptr=2 if $_ eq "BF_PTR2";
1873	($b64l,$b64,$b32,$b16,$b8)=(0,1,0,0,0) if /SIXTY_FOUR_BIT/;
1874	($b64l,$b64,$b32,$b16,$b8)=(1,0,0,0,0) if /SIXTY_FOUR_BIT_LONG/;
1875	($b64l,$b64,$b32,$b16,$b8)=(0,0,1,0,0) if /THIRTY_TWO_BIT/;
1876	($b64l,$b64,$b32,$b16,$b8)=(0,0,0,1,0) if /SIXTEEN_BIT/;
1877	($b64l,$b64,$b32,$b16,$b8)=(0,0,0,0,1) if /EIGHT_BIT/;
1878	$export_var_as_fn=1 if /EXPORT_VAR_AS_FN/;
1879	}
1880
1881open(IN,'<crypto/opensslconf.h.in') || die "unable to read crypto/opensslconf.h.in:$!\n";
1882unlink("crypto/opensslconf.h.new") || die "unable to remove old crypto/opensslconf.h.new:$!\n" if -e "crypto/opensslconf.h.new";
1883open(OUT,'>crypto/opensslconf.h.new') || die "unable to create crypto/opensslconf.h.new:$!\n";
1884print OUT "/* opensslconf.h */\n";
1885print OUT "/* WARNING: Generated automatically from opensslconf.h.in by Configure. */\n\n";
1886
1887print OUT "#ifdef  __cplusplus\n";
1888print OUT "extern \"C\" {\n";
1889print OUT "#endif\n";
1890print OUT "/* OpenSSL was configured with the following options: */\n";
1891my $openssl_algorithm_defines_trans = $openssl_algorithm_defines;
1892$openssl_experimental_defines =~ s/^\s*#\s*define\s+OPENSSL_NO_(.*)/#ifndef OPENSSL_EXPERIMENTAL_$1\n# ifndef OPENSSL_NO_$1\n#  define OPENSSL_NO_$1\n# endif\n#endif/mg;
1893$openssl_algorithm_defines_trans =~ s/^\s*#\s*define\s+OPENSSL_(.*)/# if defined(OPENSSL_$1) \&\& !defined($1)\n#  define $1\n# endif/mg;
1894$openssl_algorithm_defines =~ s/^\s*#\s*define\s+(.*)/#ifndef $1\n# define $1\n#endif/mg;
1895$openssl_algorithm_defines = "   /* no ciphers excluded */\n" if $openssl_algorithm_defines eq "";
1896$openssl_thread_defines =~ s/^\s*#\s*define\s+(.*)/#ifndef $1\n# define $1\n#endif/mg;
1897$openssl_sys_defines =~ s/^\s*#\s*define\s+(.*)/#ifndef $1\n# define $1\n#endif/mg;
1898$openssl_other_defines =~ s/^\s*#\s*define\s+(.*)/#ifndef $1\n# define $1\n#endif/mg;
1899print OUT $openssl_sys_defines;
1900print OUT "#ifndef OPENSSL_DOING_MAKEDEPEND\n\n";
1901print OUT $openssl_experimental_defines;
1902print OUT "\n";
1903print OUT $openssl_algorithm_defines;
1904print OUT "\n#endif /* OPENSSL_DOING_MAKEDEPEND */\n\n";
1905print OUT $openssl_thread_defines;
1906print OUT $openssl_other_defines,"\n";
1907
1908print OUT "/* The OPENSSL_NO_* macros are also defined as NO_* if the application\n";
1909print OUT "   asks for it.  This is a transient feature that is provided for those\n";
1910print OUT "   who haven't had the time to do the appropriate changes in their\n";
1911print OUT "   applications.  */\n";
1912print OUT "#ifdef OPENSSL_ALGORITHM_DEFINES\n";
1913print OUT $openssl_algorithm_defines_trans;
1914print OUT "#endif\n\n";
1915
1916print OUT "#define OPENSSL_CPUID_OBJ\n\n" if ($cpuid_obj ne "mem_clr.o");
1917
1918while (<IN>)
1919	{
1920	if	(/^#define\s+OPENSSLDIR/)
1921		{
1922		my $foo = $openssldir;
1923		$foo =~ s/\\/\\\\/g;
1924		print OUT "#define OPENSSLDIR \"$foo\"\n";
1925		}
1926	elsif	(/^#define\s+ENGINESDIR/)
1927		{
1928		my $foo = "$prefix/$libdir/engines";
1929		$foo =~ s/\\/\\\\/g;
1930		print OUT "#define ENGINESDIR \"$foo\"\n";
1931		}
1932	elsif	(/^#((define)|(undef))\s+OPENSSL_EXPORT_VAR_AS_FUNCTION/)
1933		{ printf OUT "#undef OPENSSL_EXPORT_VAR_AS_FUNCTION\n"
1934			if $export_var_as_fn;
1935		  printf OUT "#%s OPENSSL_EXPORT_VAR_AS_FUNCTION\n",
1936			($export_var_as_fn)?"define":"undef"; }
1937	elsif	(/^#define\s+OPENSSL_UNISTD/)
1938		{
1939		$unistd = "<unistd.h>" if $unistd eq "";
1940		print OUT "#define OPENSSL_UNISTD $unistd\n";
1941		}
1942	elsif	(/^#((define)|(undef))\s+SIXTY_FOUR_BIT_LONG/)
1943		{ printf OUT "#%s SIXTY_FOUR_BIT_LONG\n",($b64l)?"define":"undef"; }
1944	elsif	(/^#((define)|(undef))\s+SIXTY_FOUR_BIT/)
1945		{ printf OUT "#%s SIXTY_FOUR_BIT\n",($b64)?"define":"undef"; }
1946	elsif	(/^#((define)|(undef))\s+THIRTY_TWO_BIT/)
1947		{ printf OUT "#%s THIRTY_TWO_BIT\n",($b32)?"define":"undef"; }
1948	elsif	(/^#((define)|(undef))\s+SIXTEEN_BIT/)
1949		{ printf OUT "#%s SIXTEEN_BIT\n",($b16)?"define":"undef"; }
1950	elsif	(/^#((define)|(undef))\s+EIGHT_BIT/)
1951		{ printf OUT "#%s EIGHT_BIT\n",($b8)?"define":"undef"; }
1952	elsif	(/^#((define)|(undef))\s+BN_LLONG\s*$/)
1953		{ printf OUT "#%s BN_LLONG\n",($bn_ll)?"define":"undef"; }
1954	elsif	(/^\#define\s+DES_LONG\s+.*/)
1955		{ printf OUT "#define DES_LONG unsigned %s\n",
1956			($des_int)?'int':'long'; }
1957	elsif	(/^\#(define|undef)\s+DES_PTR/)
1958		{ printf OUT "#%s DES_PTR\n",($des_ptr)?'define':'undef'; }
1959	elsif	(/^\#(define|undef)\s+DES_RISC1/)
1960		{ printf OUT "#%s DES_RISC1\n",($des_risc1)?'define':'undef'; }
1961	elsif	(/^\#(define|undef)\s+DES_RISC2/)
1962		{ printf OUT "#%s DES_RISC2\n",($des_risc2)?'define':'undef'; }
1963	elsif	(/^\#(define|undef)\s+DES_UNROLL/)
1964		{ printf OUT "#%s DES_UNROLL\n",($des_unroll)?'define':'undef'; }
1965	elsif	(/^#define\s+RC4_INT\s/)
1966		{ printf OUT "#define RC4_INT unsigned %s\n",$type[$rc4_int]; }
1967	elsif	(/^#undef\s+RC4_CHUNK/)
1968		{
1969		printf OUT "#undef RC4_CHUNK\n" if $rc4_chunk==0;
1970		printf OUT "#define RC4_CHUNK unsigned long\n" if $rc4_chunk==1;
1971		printf OUT "#define RC4_CHUNK unsigned long long\n" if $rc4_chunk==2;
1972		}
1973	elsif	(/^#((define)|(undef))\s+RC4_INDEX/)
1974		{ printf OUT "#%s RC4_INDEX\n",($rc4_idx)?"define":"undef"; }
1975	elsif (/^#(define|undef)\s+I386_ONLY/)
1976		{ printf OUT "#%s I386_ONLY\n", ($processor eq "386")?
1977			"define":"undef"; }
1978	elsif	(/^#define\s+MD2_INT\s/)
1979		{ printf OUT "#define MD2_INT unsigned %s\n",$type[$md2_int]; }
1980	elsif	(/^#define\s+IDEA_INT\s/)
1981		{printf OUT "#define IDEA_INT unsigned %s\n",$type[$idea_int];}
1982	elsif	(/^#define\s+RC2_INT\s/)
1983		{printf OUT "#define RC2_INT unsigned %s\n",$type[$rc2_int];}
1984	elsif (/^#(define|undef)\s+BF_PTR/)
1985		{
1986		printf OUT "#undef BF_PTR\n" if $bf_ptr == 0;
1987		printf OUT "#define BF_PTR\n" if $bf_ptr == 1;
1988		printf OUT "#define BF_PTR2\n" if $bf_ptr == 2;
1989	        }
1990	else
1991		{ print OUT $_; }
1992	}
1993close(IN);
1994print OUT "#ifdef  __cplusplus\n";
1995print OUT "}\n";
1996print OUT "#endif\n";
1997close(OUT);
1998if (compare("crypto/opensslconf.h.new","crypto/opensslconf.h"))
1999	{
2000	rename("crypto/opensslconf.h","crypto/opensslconf.h.bak") || die "unable to rename crypto/opensslconf.h\n" if -e "crypto/opensslconf.h";
2001	rename("crypto/opensslconf.h.new","crypto/opensslconf.h") || die "unable to rename crypto/opensslconf.h.new\n";
2002	}
2003else
2004	{ unlink("crypto/opensslconf.h.new"); }
2005
2006# Fix the date
2007
2008print "SIXTY_FOUR_BIT_LONG mode\n" if $b64l;
2009print "SIXTY_FOUR_BIT mode\n" if $b64;
2010print "THIRTY_TWO_BIT mode\n" if $b32;
2011print "SIXTEEN_BIT mode\n" if $b16;
2012print "EIGHT_BIT mode\n" if $b8;
2013print "DES_PTR used\n" if $des_ptr;
2014print "DES_RISC1 used\n" if $des_risc1;
2015print "DES_RISC2 used\n" if $des_risc2;
2016print "DES_UNROLL used\n" if $des_unroll;
2017print "DES_INT used\n" if $des_int;
2018print "BN_LLONG mode\n" if $bn_ll;
2019print "RC4 uses u$type[$rc4_int]\n" if $rc4_int != $def_int;
2020print "RC4_INDEX mode\n" if $rc4_idx;
2021print "RC4_CHUNK is undefined\n" if $rc4_chunk==0;
2022print "RC4_CHUNK is unsigned long\n" if $rc4_chunk==1;
2023print "RC4_CHUNK is unsigned long long\n" if $rc4_chunk==2;
2024print "MD2 uses u$type[$md2_int]\n" if $md2_int != $def_int;
2025print "IDEA uses u$type[$idea_int]\n" if $idea_int != $def_int;
2026print "RC2 uses u$type[$rc2_int]\n" if $rc2_int != $def_int;
2027print "BF_PTR used\n" if $bf_ptr == 1;
2028print "BF_PTR2 used\n" if $bf_ptr == 2;
2029
2030if($IsMK1MF) {
2031	open (OUT,">crypto/buildinf.h") || die "Can't open buildinf.h";
2032	printf OUT <<EOF;
2033#ifndef MK1MF_BUILD
2034  /* auto-generated by Configure for crypto/cversion.c:
2035   * for Unix builds, crypto/Makefile.ssl generates functional definitions;
2036   * Windows builds (and other mk1mf builds) compile cversion.c with
2037   * -DMK1MF_BUILD and use definitions added to this file by util/mk1mf.pl. */
2038  #error "Windows builds (PLATFORM=$target) use mk1mf.pl-created Makefiles"
2039#endif
2040EOF
2041	close(OUT);
2042} else {
2043	my $make_command = "$make PERL=\'$perl\'";
2044	my @make_targets = ();
2045	push @make_targets, "links" if $symlink;
2046	push @make_targets, "depend" if $depflags ne $default_depflags && $make_depend;
2047	push @make_targets, "gentests" if $symlink;
2048	foreach my $make_target (@make_targets) {
2049	    (system "$make_command $make_target") == 0 or exit $?;
2050	}
2051	if ( $perl =~ m@^/@) {
2052	    &dofile("tools/c_rehash",$perl,'^#!/', '#!%s','^my \$dir;$', 'my $dir = "' . $openssldir . '";', '^my \$prefix;$', 'my $prefix = "' . $prefix . '";');
2053	    &dofile("apps/CA.pl",$perl,'^#!/', '#!%s');
2054	} else {
2055	    # No path for Perl known ...
2056	    &dofile("tools/c_rehash",'/usr/local/bin/perl','^#!/', '#!%s','^my \$dir;$', 'my $dir = "' . $openssldir . '";',  '^my \$prefix;$', 'my $prefix = "' . $prefix . '";');
2057	    &dofile("apps/CA.pl",'/usr/local/bin/perl','^#!/', '#!%s');
2058	}
2059	if ($depflags ne $default_depflags && !$make_depend) {
2060	    $warn_make_depend++;
2061	}
2062}
2063
2064# create the ms/version32.rc file if needed
2065if ($IsMK1MF && ($target !~ /^netware/)) {
2066	my ($v1, $v2, $v3, $v4);
2067	if ($version_num =~ /(^[0-9a-f]{1})([0-9a-f]{2})([0-9a-f]{2})([0-9a-f]{2})/i) {
2068		$v1=hex $1;
2069		$v2=hex $2;
2070		$v3=hex $3;
2071		$v4=hex $4;
2072	}
2073	open (OUT,">ms/version32.rc") || die "Can't open ms/version32.rc";
2074	print OUT <<EOF;
2075#include <winver.h>
2076
2077LANGUAGE 0x09,0x01
2078
20791 VERSIONINFO
2080  FILEVERSION $v1,$v2,$v3,$v4
2081  PRODUCTVERSION $v1,$v2,$v3,$v4
2082  FILEFLAGSMASK 0x3fL
2083#ifdef _DEBUG
2084  FILEFLAGS 0x01L
2085#else
2086  FILEFLAGS 0x00L
2087#endif
2088  FILEOS VOS__WINDOWS32
2089  FILETYPE VFT_DLL
2090  FILESUBTYPE 0x0L
2091BEGIN
2092    BLOCK "StringFileInfo"
2093    BEGIN
2094	BLOCK "040904b0"
2095	BEGIN
2096	    // Required:
2097	    VALUE "CompanyName", "The OpenSSL Project, http://www.openssl.org/\\0"
2098	    VALUE "FileDescription", "OpenSSL Shared Library\\0"
2099	    VALUE "FileVersion", "$version\\0"
2100#if defined(CRYPTO)
2101	    VALUE "InternalName", "libeay32\\0"
2102	    VALUE "OriginalFilename", "libeay32.dll\\0"
2103#elif defined(SSL)
2104	    VALUE "InternalName", "ssleay32\\0"
2105	    VALUE "OriginalFilename", "ssleay32.dll\\0"
2106#endif
2107	    VALUE "ProductName", "The OpenSSL Toolkit\\0"
2108	    VALUE "ProductVersion", "$version\\0"
2109	    // Optional:
2110	    //VALUE "Comments", "\\0"
2111	    VALUE "LegalCopyright", "Copyright  � 1998-2005 The OpenSSL Project. Copyright � 1995-1998 Eric A. Young, Tim J. Hudson. All rights reserved.\\0"
2112	    //VALUE "LegalTrademarks", "\\0"
2113	    //VALUE "PrivateBuild", "\\0"
2114	    //VALUE "SpecialBuild", "\\0"
2115	END
2116    END
2117    BLOCK "VarFileInfo"
2118    BEGIN
2119        VALUE "Translation", 0x409, 0x4b0
2120    END
2121END
2122EOF
2123	close(OUT);
2124  }
2125
2126print <<EOF;
2127
2128Configured for $target.
2129EOF
2130
2131print <<\EOF if (!$no_threads && !$threads);
2132
2133The library could not be configured for supporting multi-threaded
2134applications as the compiler options required on this system are not known.
2135See file INSTALL for details if you need multi-threading.
2136EOF
2137
2138print <<\EOF if ($no_shared_warn);
2139
2140You gave the option 'shared', which is not supported on this platform, so
2141we will pretend you gave the option 'no-shared'.  If you know how to implement
2142shared libraries, please let us know (but please first make sure you have
2143tried with a current version of OpenSSL).
2144EOF
2145
2146print <<EOF if ($warn_make_depend);
2147
2148*** Because of configuration changes, you MUST do the following before
2149*** building:
2150
2151	make depend
2152EOF
2153
2154exit(0);
2155
2156sub usage
2157	{
2158	print STDERR $usage;
2159	print STDERR "\npick os/compiler from:\n";
2160	my $j=0;
2161	my $i;
2162        my $k=0;
2163	foreach $i (sort keys %table)
2164		{
2165		next if $i =~ /^debug/;
2166		$k += length($i) + 1;
2167		if ($k > 78)
2168			{
2169			print STDERR "\n";
2170			$k=length($i);
2171			}
2172		print STDERR $i . " ";
2173		}
2174	foreach $i (sort keys %table)
2175		{
2176		next if $i !~ /^debug/;
2177		$k += length($i) + 1;
2178		if ($k > 78)
2179			{
2180			print STDERR "\n";
2181			$k=length($i);
2182			}
2183		print STDERR $i . " ";
2184		}
2185	print STDERR "\n\nNOTE: If in doubt, on Unix-ish systems use './config'.\n";
2186	exit(1);
2187	}
2188
2189sub which
2190	{
2191	my($name)=@_;
2192	my $path;
2193	foreach $path (split /:/, $ENV{PATH})
2194		{
2195		if (-f "$path/$name$exe_ext" and -x _)
2196			{
2197			return "$path/$name$exe_ext" unless ($name eq "perl" and
2198			 system("$path/$name$exe_ext -e " . '\'exit($]<5.0);\''));
2199			}
2200		}
2201	}
2202
2203sub dofile
2204	{
2205	my $f; my $p; my %m; my @a; my $k; my $ff;
2206	($f,$p,%m)=@_;
2207
2208	open(IN,"<$f.in") || open(IN,"<$f") || die "unable to open $f:$!\n";
2209	@a=<IN>;
2210	close(IN);
2211	foreach $k (keys %m)
2212		{
2213		grep(/$k/ && ($_=sprintf($m{$k}."\n",$p)),@a);
2214		}
2215	open(OUT,">$f.new") || die "unable to open $f.new:$!\n";
2216	print OUT @a;
2217	close(OUT);
2218	rename($f,"$f.bak") || die "unable to rename $f\n" if -e $f;
2219	rename("$f.new",$f) || die "unable to rename $f.new\n";
2220	}
2221
2222sub print_table_entry
2223	{
2224	my $target = shift;
2225
2226	my ($cc, $cflags, $unistd, $thread_cflag, $sys_id, $lflags,
2227	    $bn_ops, $cpuid_obj, $bn_obj, $ec_obj, $des_obj, $aes_obj, $bf_obj,
2228	    $md5_obj, $sha1_obj, $cast_obj, $rc4_obj, $rmd160_obj,
2229	    $rc5_obj, $wp_obj, $cmll_obj, $modes_obj, $engines_obj,
2230	    $perlasm_scheme, $dso_scheme, $shared_target, $shared_cflag,
2231	    $shared_ldflag, $shared_extension, $ranlib, $arflags, $multilib)=
2232	split(/\s*:\s*/,$table{$target} . ":" x 30 , -1);
2233
2234	print <<EOF
2235
2236*** $target
2237\$cc           = $cc
2238\$cflags       = $cflags
2239\$unistd       = $unistd
2240\$thread_cflag = $thread_cflag
2241\$sys_id       = $sys_id
2242\$lflags       = $lflags
2243\$bn_ops       = $bn_ops
2244\$cpuid_obj    = $cpuid_obj
2245\$bn_obj       = $bn_obj
2246\$ec_obj       = $ec_obj
2247\$des_obj      = $des_obj
2248\$aes_obj      = $aes_obj
2249\$bf_obj       = $bf_obj
2250\$md5_obj      = $md5_obj
2251\$sha1_obj     = $sha1_obj
2252\$cast_obj     = $cast_obj
2253\$rc4_obj      = $rc4_obj
2254\$rmd160_obj   = $rmd160_obj
2255\$rc5_obj      = $rc5_obj
2256\$wp_obj       = $wp_obj
2257\$cmll_obj     = $cmll_obj
2258\$modes_obj    = $modes_obj
2259\$engines_obj  = $engines_obj
2260\$perlasm_scheme = $perlasm_scheme
2261\$dso_scheme   = $dso_scheme
2262\$shared_target= $shared_target
2263\$shared_cflag = $shared_cflag
2264\$shared_ldflag = $shared_ldflag
2265\$shared_extension = $shared_extension
2266\$ranlib       = $ranlib
2267\$arflags      = $arflags
2268\$multilib     = $multilib
2269EOF
2270	}
2271
2272sub test_sanity
2273	{
2274	my $errorcnt = 0;
2275
2276	print STDERR "=" x 70, "\n";
2277	print STDERR "=== SANITY TESTING!\n";
2278	print STDERR "=== No configuration will be done, all other arguments will be ignored!\n";
2279	print STDERR "=" x 70, "\n";
2280
2281	foreach $target (sort keys %table)
2282		{
2283		@fields = split(/\s*:\s*/,$table{$target} . ":" x 30 , -1);
2284
2285		if ($fields[$idx_dso_scheme-1] =~ /^(beos|dl|dlfcn|win32|vms)$/)
2286			{
2287			$errorcnt++;
2288			print STDERR "SANITY ERROR: '$target' has the dso_scheme [$idx_dso_scheme] values\n";
2289			print STDERR "              in the previous field\n";
2290			}
2291		elsif ($fields[$idx_dso_scheme+1] =~ /^(beos|dl|dlfcn|win32|vms)$/)
2292			{
2293			$errorcnt++;
2294			print STDERR "SANITY ERROR: '$target' has the dso_scheme [$idx_dso_scheme] values\n";
2295			print STDERR "              in the following field\n";
2296			}
2297		elsif ($fields[$idx_dso_scheme] !~ /^(beos|dl|dlfcn|win32|vms|)$/)
2298			{
2299			$errorcnt++;
2300			print STDERR "SANITY ERROR: '$target' has the dso_scheme [$idx_dso_scheme] field = ",$fields[$idx_dso_scheme],"\n";
2301			print STDERR "              valid values are 'beos', 'dl', 'dlfcn', 'win32' and 'vms'\n";
2302			}
2303		}
2304	print STDERR "No sanity errors detected!\n" if $errorcnt == 0;
2305	return $errorcnt;
2306	}
2307
2308sub file_newer
2309	{
2310	my ($file1, $file2) = @_;
2311	return (stat($file1))[9] > (stat($file2))[9]
2312	}
2313