Configure

   1 :
   2 eval 'exec perl -S $0 ${1+"$@"}'
   3     if $running_under_some_shell;
   4 ##
   5 ##  Configure -- OpenSSL source tree configuration script
   6 ##
   7
   8 require 5.000;
   9 use strict;
  10 use File::Compare;
  11
  12 # see INSTALL for instructions.
  13
  14 my $usage="Usage: Configure [no-<cipher> ...] [enable-<cipher> ...] [experimental-<cipher> ...] [-Dxxx] [-lxxx] [-Lxxx] [-fxxx] [-Kxxx] [no-hw-xxx|no-hw] [[no-]threads] [[no-]shared] [[no-]zlib|zlib-dynamic] [no-asm] [no-dso] [no-krb5] [sctp] [386] [--prefix=DIR] [--openssldir=OPENSSLDIR] [--with-xxx[=vvv]] [--test-sanity] os/compiler[:flags]\n";
  15
  16 # Options:
  17 #
  18 # --openssldir  install OpenSSL in OPENSSLDIR (Default: DIR/ssl if the
  19 #               --prefix option is given; /usr/local/ssl otherwise)
  20 # --prefix      prefix for the OpenSSL include, lib and bin directories
  21 #               (Default: the OPENSSLDIR directory)
  22 #
  23 # --install_prefix  Additional prefix for package builders (empty by
  24 #               default).  This needn't be set in advance, you can
  25 #               just as well use "make INSTALL_PREFIX=/whatever install".
  26 #
  27 # --with-krb5-dir  Declare where Kerberos 5 lives.  The libraries are expected
  28 #               to live in the subdirectory lib/ and the header files in
  29 #               include/.  A value is required.
  30 # --with-krb5-lib  Declare where the Kerberos 5 libraries live.  A value is
  31 #               required.
  32 #               (Default: KRB5_DIR/lib)
  33 # --with-krb5-include  Declare where the Kerberos 5 header files live.  A
  34 #               value is required.
  35 #               (Default: KRB5_DIR/include)
  36 # --with-krb5-flavor  Declare what flavor of Kerberos 5 is used.  Currently
  37 #               supported values are "MIT" and "Heimdal".  A value is required.
  38 #
  39 # --test-sanity Make a number of sanity checks on the data in this file.
  40 #               This is a debugging tool for OpenSSL developers.
  41 #
  42 # --cross-compile-prefix Add specified prefix to binutils components.
  43 #
  44 # no-hw-xxx     do not compile support for specific crypto hardware.
  45 #               Generic OpenSSL-style methods relating to this support
  46 #               are always compiled but return NULL if the hardware
  47 #               support isn't compiled.
  48 # no-hw         do not compile support for any crypto hardware.
  49 # [no-]threads  [don't] try to create a library that is suitable for
  50 #               multithreaded applications (default is "threads" if we
  51 #               know how to do it)
  52 # [no-]shared   [don't] try to create shared libraries when supported.
  53 # no-asm        do not use assembler
  54 # no-dso        do not compile in any native shared-library methods. This
  55 #               will ensure that all methods just return NULL.
  56 # no-krb5       do not compile in any KRB5 library or code.
  57 # [no-]zlib     [don't] compile support for zlib compression.
  58 # zlib-dynamic  Like "zlib", but the zlib library is expected to be a shared
  59 #               library and will be loaded in run-time by the OpenSSL library.
  60 # sctp          include SCTP support
  61 # enable-weak-ssl-ciphers
  62 #               Enable EXPORT and LOW SSLv3 ciphers that are disabled by
  63 #               default.  Note, weak SSLv2 ciphers are unconditionally
  64 #               disabled.
  65 # 386           generate 80386 code in assembly modules
  66 # no-sse2       disables IA-32 SSE2 code in assembly modules, the above
  67 #               mentioned '386' option implies this one
  68 # no-<cipher>   build without specified algorithm (rsa, idea, rc5, ...)
  69 # -<xxx> +<xxx> compiler options are passed through
  70 #
  71 # DEBUG_SAFESTACK use type-safe stacks to enforce type-safety on stack items
  72 #               provided to stack calls. Generates unique stack functions for
  73 #               each possible stack type.
  74 # DES_PTR       use pointer lookup vs arrays in the DES in crypto/des/des_locl.h
  75 # DES_RISC1     use different DES_ENCRYPT macro that helps reduce register
  76 #               dependancies but needs to more registers, good for RISC CPU's
  77 # DES_RISC2     A different RISC variant.
  78 # DES_UNROLL    unroll the inner DES loop, sometimes helps, somtimes hinders.
  79 # DES_INT       use 'int' instead of 'long' for DES_LONG in crypto/des/des.h
  80 #               This is used on the DEC Alpha where long is 8 bytes
  81 #               and int is 4
  82 # BN_LLONG      use the type 'long long' in crypto/bn/bn.h
  83 # MD2_CHAR      use 'char' instead of 'int' for MD2_INT in crypto/md2/md2.h
  84 # MD2_LONG      use 'long' instead of 'int' for MD2_INT in crypto/md2/md2.h
  85 # IDEA_SHORT    use 'short' instead of 'int' for IDEA_INT in crypto/idea/idea.h
  86 # IDEA_LONG     use 'long' instead of 'int' for IDEA_INT in crypto/idea/idea.h
  87 # RC2_SHORT     use 'short' instead of 'int' for RC2_INT in crypto/rc2/rc2.h
  88 # RC2_LONG      use 'long' instead of 'int' for RC2_INT in crypto/rc2/rc2.h
  89 # RC4_CHAR      use 'char' instead of 'int' for RC4_INT in crypto/rc4/rc4.h
  90 # RC4_LONG      use 'long' instead of 'int' for RC4_INT in crypto/rc4/rc4.h
  91 # RC4_INDEX     define RC4_INDEX in crypto/rc4/rc4_locl.h.  This turns on
  92 #               array lookups instead of pointer use.
  93 # RC4_CHUNK     enables code that handles data aligned at long (natural CPU
  94 #               word) boundary.
  95 # RC4_CHUNK_LL  enables code that handles data aligned at long long boundary
  96 #               (intended for 64-bit CPUs running 32-bit OS).
  97 # BF_PTR        use 'pointer arithmatic' for Blowfish (unsafe on Alpha).
  98 # BF_PTR2       intel specific version (generic version is more efficient).
  99 #
 100 # Following are set automatically by this script
 101 #
 102 # MD5_ASM       use some extra md5 assember,
 103 # SHA1_ASM      use some extra sha1 assember, must define L_ENDIAN for x86
 104 # RMD160_ASM    use some extra ripemd160 assember,
 105 # SHA256_ASM    sha256_block is implemented in assembler
 106 # SHA512_ASM    sha512_block is implemented in assembler
 107 # AES_ASM       ASE_[en|de]crypt is implemented in assembler
 108
 109 # Minimum warning options... any contributions to OpenSSL should at least get
 110 # past these.
 111
 112 my $gcc_devteam_warn = "-Wall -pedantic -DPEDANTIC -Wno-long-long -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Wundef -Werror -DCRYPTO_MDEBUG_ALL -DCRYPTO_MDEBUG_ABORT -DREF_CHECK -DOPENSSL_NO_DEPRECATED";
 113
 114 # TODO(openssl-team): fix problems and investigate if (at least) the following
 115 # warnings can also be enabled:
 116 # -Wconditional-uninitialized, -Wswitch-enum, -Wunused-macros,
 117 # -Wmissing-field-initializers, -Wmissing-variable-declarations,
 118 # -Wincompatible-pointer-types-discards-qualifiers, -Wcast-align,
 119 # -Wunreachable-code -Wunused-parameter -Wlanguage-extension-token
 120 # -Wextended-offsetof
 121 my $clang_disabled_warnings = "-Wno-unused-parameter -Wno-missing-field-initializers -Wno-language-extension-token  -Wno-extended-offsetof";
 122
 123 # These are used in addition to $gcc_devteam_warn when the compiler is clang.
 124 # TODO(openssl-team): fix problems and investigate if (at least) the
 125 # following warnings can also be enabled: -Wconditional-uninitialized,
 126 # -Wswitch-enum, -Wunused-macros, -Wmissing-field-initializers,
 127 # -Wmissing-variable-declarations,
 128 # -Wincompatible-pointer-types-discards-qualifiers, -Wcast-align,
 129 # -Wunreachable-code -Wunused-parameter -Wlanguage-extension-token
 130 # -Wextended-offsetof
 131 my $clang_devteam_warn = "-Wno-unused-parameter -Wno-missing-field-initializers -Wno-language-extension-token -Wno-extended-offsetof -Qunused-arguments";
 132
 133 # Warn that "make depend" should be run?
 134 my $warn_make_depend = 0;
 135
 136 my $strict_warnings = 0;
 137
 138 my $x86_gcc_des="DES_PTR DES_RISC1 DES_UNROLL";
 139
 140 # MD2_CHAR slags pentium pros
 141 my $x86_gcc_opts="RC4_INDEX MD2_INT";
 142
 143 # MODIFY THESE PARAMETERS IF YOU ARE GOING TO USE THE 'util/speed.sh SCRIPT
 144 # Don't worry about these normally
 145
 146 my $tcc="cc";
 147 my $tflags="-fast -Xa";
 148 my $tbn_mul="";
 149 my $tlib="-lnsl -lsocket";
 150 #$bits1="SIXTEEN_BIT ";
 151 #$bits2="THIRTY_TWO_BIT ";
 152 my $bits1="THIRTY_TWO_BIT ";
 153 my $bits2="SIXTY_FOUR_BIT ";
 154
 155 my $x86_asm="x86cpuid.o:bn-586.o co-586.o x86-mont.o x86-gf2m.o::des-586.o crypt586.o:aes-586.o vpaes-x86.o aesni-x86.o:bf-586.o:md5-586.o:sha1-586.o sha256-586.o sha512-586.o:cast-586.o:rc4-586.o:rmd-586.o:rc5-586.o:wp_block.o wp-mmx.o:cmll-x86.o:ghash-x86.o:";
 156
 157 my $x86_elf_asm="$x86_asm:elf";
 158
 159 my $x86_64_asm="x86_64cpuid.o:x86_64-gcc.o x86_64-mont.o x86_64-mont5.o x86_64-gf2m.o rsaz_exp.o rsaz-x86_64.o rsaz-avx2.o:ecp_nistz256.o ecp_nistz256-x86_64.o::aes-x86_64.o vpaes-x86_64.o bsaes-x86_64.o aesni-x86_64.o aesni-sha1-x86_64.o aesni-sha256-x86_64.o aesni-mb-x86_64.o::md5-x86_64.o:sha1-x86_64.o sha256-x86_64.o sha512-x86_64.o sha1-mb-x86_64.o sha256-mb-x86_64.o::rc4-x86_64.o rc4-md5-x86_64.o:::wp-x86_64.o:cmll-x86_64.o cmll_misc.o:ghash-x86_64.o aesni-gcm-x86_64.o:";
 160 my $ia64_asm="ia64cpuid.o:bn-ia64.o ia64-mont.o:::aes_core.o aes_cbc.o aes-ia64.o::md5-ia64.o:sha1-ia64.o sha256-ia64.o sha512-ia64.o::rc4-ia64.o rc4_skey.o:::::ghash-ia64.o::void";
 161 my $sparcv9_asm="sparcv9cap.o sparccpuid.o:bn-sparcv9.o sparcv9-mont.o sparcv9a-mont.o vis3-mont.o sparct4-mont.o sparcv9-gf2m.o::des_enc-sparc.o fcrypt_b.o dest4-sparcv9.o:aes_core.o aes_cbc.o aes-sparcv9.o aest4-sparcv9.o::md5-sparcv9.o:sha1-sparcv9.o sha256-sparcv9.o sha512-sparcv9.o::::::camellia.o cmll_misc.o cmll_cbc.o cmllt4-sparcv9.o:ghash-sparcv9.o::void";
 162 my $sparcv8_asm=":sparcv8.o::des_enc-sparc.o fcrypt_b.o:::::::::::::void";
 163 my $alpha_asm="alphacpuid.o:bn_asm.o alpha-mont.o::::::sha1-alpha.o:::::::ghash-alpha.o::void";
 164 my $mips64_asm=":bn-mips.o mips-mont.o:::aes_cbc.o aes-mips.o:::sha1-mips.o sha256-mips.o sha512-mips.o::::::::";
 165 my $mips32_asm=$mips64_asm; $mips32_asm =~ s/\s*sha512\-mips\.o//;
 166 my $s390x_asm="s390xcap.o s390xcpuid.o:bn-s390x.o s390x-mont.o s390x-gf2m.o:::aes-s390x.o aes-ctr.o aes-xts.o:::sha1-s390x.o sha256-s390x.o sha512-s390x.o::rc4-s390x.o:::::ghash-s390x.o:";
 167 my $armv4_asm="armcap.o armv4cpuid.o:bn_asm.o armv4-mont.o armv4-gf2m.o:::aes_cbc.o aes-armv4.o bsaes-armv7.o aesv8-armx.o:::sha1-armv4-large.o sha256-armv4.o sha512-armv4.o:::::::ghash-armv4.o ghashv8-armx.o::void";
 168 my $aarch64_asm="armcap.o arm64cpuid.o mem_clr.o::::aes_core.o aes_cbc.o aesv8-armx.o:::sha1-armv8.o sha256-armv8.o sha512-armv8.o:::::::ghashv8-armx.o:";
 169 my $parisc11_asm="pariscid.o:bn_asm.o parisc-mont.o:::aes_core.o aes_cbc.o aes-parisc.o:::sha1-parisc.o sha256-parisc.o sha512-parisc.o::rc4-parisc.o:::::ghash-parisc.o::32";
 170 my $parisc20_asm="pariscid.o:pa-risc2W.o parisc-mont.o:::aes_core.o aes_cbc.o aes-parisc.o:::sha1-parisc.o sha256-parisc.o sha512-parisc.o::rc4-parisc.o:::::ghash-parisc.o::64";
 171 my $ppc64_asm="ppccpuid.o ppccap.o:bn-ppc.o ppc-mont.o ppc64-mont.o:::aes_core.o aes_cbc.o aes-ppc.o vpaes-ppc.o aesp8-ppc.o:::sha1-ppc.o sha256-ppc.o sha512-ppc.o sha256p8-ppc.o sha512p8-ppc.o:::::::ghashp8-ppc.o:";
 172 my $ppc32_asm=$ppc64_asm;
 173 my $no_asm="::::::::::::::::void";
 174
 175 # As for $BSDthreads. Idea is to maintain "collective" set of flags,
 176 # which would cover all BSD flavors. -pthread applies to them all,
 177 # but is treated differently. OpenBSD expands is as -D_POSIX_THREAD
 178 # -lc_r, which is sufficient. FreeBSD 4.x expands it as -lc_r,
 179 # which has to be accompanied by explicit -D_THREAD_SAFE and
 180 # sometimes -D_REENTRANT. FreeBSD 5.x expands it as -lc_r, which
 181 # seems to be sufficient?
 182 my $BSDthreads="-pthread -D_THREAD_SAFE -D_REENTRANT";
 183
 184 #config-string  $cc : $cflags : $unistd : $thread_cflag : $sys_id : $lflags : $bn_ops : $cpuid_obj : $bn_obj : $ec_obj : $des_obj : $aes_obj : $bf_obj : $md5_obj : $sha1_obj : $cast_obj : $rc4_obj : $rmd160_obj : $rc5_obj : $wp_obj : $cmll_obj : $modes_obj : $engines_obj : $dso_scheme : $shared_target : $shared_cflag : $shared_ldflag : $shared_extension : $ranlib : $arflags : $multilib
 185
 186 my %table=(
 187 # File 'TABLE' (created by 'make TABLE') contains the data from this list,
 188 # formatted for better readability.
 189
 190
 191 #"b",           "${tcc}:${tflags}::${tlib}:${bits1}:${tbn_mul}::",
 192 #"bl-4c-2c",    "${tcc}:${tflags}::${tlib}:${bits1}BN_LLONG RC4_CHAR MD2_CHAR:${tbn_mul}::",
 193 #"bl-4c-ri",    "${tcc}:${tflags}::${tlib}:${bits1}BN_LLONG RC4_CHAR RC4_INDEX:${tbn_mul}::",
 194 #"b2-is-ri-dp", "${tcc}:${tflags}::${tlib}:${bits2}IDEA_SHORT RC4_INDEX DES_PTR:${tbn_mul}::",
 195
 196 # Our development configs
 197 "purify",       "purify gcc:-g -DPURIFY -Wall::(unknown)::-lsocket -lnsl::::",
 198 "debug",        "gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DOPENSSL_NO_ASM -ggdb -g2 -Wformat -Wshadow -Wmissing-prototypes -Wmissing-declarations -Werror::(unknown)::-lefence::::",
 199 "debug-ben",    "gcc:$gcc_devteam_warn -DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DDEBUG_SAFESTACK -O2 -pipe::(unknown):::::",
 200 "debug-ben-openbsd","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DPEDANTIC -DDEBUG_SAFESTACK -DOPENSSL_OPENBSD_DEV_CRYPTO -DOPENSSL_NO_ASM -O2 -pedantic -Wall -Wshadow -Werror -pipe::(unknown)::::",
 201 "debug-ben-openbsd-debug","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DPEDANTIC -DDEBUG_SAFESTACK -DOPENSSL_OPENBSD_DEV_CRYPTO -DOPENSSL_NO_ASM -g3 -O2 -pedantic -Wall -Wshadow -Werror -pipe::(unknown)::::",
 202 "debug-ben-debug",      "gcc44:$gcc_devteam_warn -DBN_DEBUG -DCONF_DEBUG -DDEBUG_SAFESTACK -DDEBUG_UNUSED -g3 -O2 -pipe::(unknown)::::::",
 203 "debug-ben-debug-64",   "gcc:$gcc_devteam_warn -Wno-error=overlength-strings -DBN_DEBUG -DCONF_DEBUG -DDEBUG_SAFESTACK -DDEBUG_UNUSED -g3 -O3 -pipe::${BSDthreads}:::SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 204 "debug-ben-macos",      "cc:$gcc_devteam_warn -arch i386 -DBN_DEBUG -DCONF_DEBUG -DDEBUG_SAFESTACK -DDEBUG_UNUSED -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -O3 -DL_ENDIAN -g3 -pipe::(unknown)::-Wl,-search_paths_first::::",
 205 "debug-ben-macos-gcc46",        "gcc-mp-4.6:$gcc_devteam_warn -Wconversion -DBN_DEBUG -DCONF_DEBUG -DDEBUG_SAFESTACK -DDEBUG_UNUSED -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -O3 -DL_ENDIAN -g3 -pipe::(unknown)::::::",
 206 "debug-ben-darwin64","cc:$gcc_devteam_warn -g -Wno-language-extension-token -Wno-extended-offsetof -arch x86_64 -O3 -DL_ENDIAN -Wall::-D_REENTRANT:MACOSX:-Wl,-search_paths_first%:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL:".eval{my $asm=$x86_64_asm;$asm=~s/rc4\-[^:]+//;$asm}.":macosx:dlfcn:darwin-shared:-fPIC -fno-common:-arch x86_64 -dynamiclib:.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
 207 "debug-ben-debug-64-clang",     "clang:$gcc_devteam_warn -Wno-error=overlength-strings -Wno-error=extended-offsetof -Qunused-arguments -DBN_DEBUG -DCONF_DEBUG -DDEBUG_SAFESTACK -DDEBUG_UNUSED -g3 -O3 -pipe::${BSDthreads}:::SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 208 "debug-ben-no-opt",     "gcc: -Wall -Wmissing-prototypes -Wstrict-prototypes -Wmissing-declarations -DDEBUG_SAFESTACK -DCRYPTO_MDEBUG -Werror -DL_ENDIAN -DTERMIOS -Wall -g3::(unknown)::::::",
 209 "debug-ben-strict",     "gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DCONST_STRICT -O2 -Wall -Wshadow -Werror -Wpointer-arith -Wcast-qual -Wwrite-strings -pipe::(unknown)::::::",
 210 "debug-rse","cc:-DTERMIOS -DL_ENDIAN -pipe -O -g -ggdb3 -Wall::(unknown):::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}",
 211 "debug-bodo",   "gcc:$gcc_devteam_warn -Wno-error=overlength-strings -DBN_DEBUG -DBN_DEBUG_RAND -DCONF_DEBUG -DBIO_PAIR_DEBUG -m64 -DL_ENDIAN -DTERMIO -g -DMD32_REG_T=int::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64",
 212 "debug-steve64", "gcc:$gcc_devteam_warn -m64 -DL_ENDIAN -DTERMIO -DCONF_DEBUG -DDEBUG_SAFESTACK -Wno-overlength-strings -g::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 213 "debug-steve32", "gcc:$gcc_devteam_warn -m32 -DL_ENDIAN -DCONF_DEBUG -DDEBUG_SAFESTACK -Wno-overlength-strings -g -pipe::-D_REENTRANT::-rdynamic -ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC:-m32:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 214 "debug-steve-opt", "gcc:$gcc_devteam_warn -m64 -O3 -DL_ENDIAN -DTERMIO -DCONF_DEBUG -DDEBUG_SAFESTACK -g::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 215 "debug-levitte-linux-elf","gcc:-DLEVITTE_DEBUG -DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DCRYPTO_MDEBUG -DL_ENDIAN -ggdb -g3 -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 216 "debug-levitte-linux-noasm","gcc:-DLEVITTE_DEBUG -DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DCRYPTO_MDEBUG -DOPENSSL_NO_ASM -DL_ENDIAN -ggdb -g3 -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${no_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 217 "debug-levitte-linux-elf-extreme","gcc:-DLEVITTE_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_DEBUG -DBN_DEBUG_RAND -DCRYPTO_MDEBUG -DENGINE_CONF_DEBUG -DL_ENDIAN -DPEDANTIC -ggdb -g3 -pedantic -ansi -Wall -W -Wundef -Wshadow -Wcast-align -Wstrict-prototypes -Wmissing-prototypes -Wno-long-long -Wundef -Wconversion -pipe::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 218 "debug-levitte-linux-noasm-extreme","gcc:-DLEVITTE_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_DEBUG -DBN_DEBUG_RAND -DCRYPTO_MDEBUG -DENGINE_CONF_DEBUG -DOPENSSL_NO_ASM -DL_ENDIAN -DPEDANTIC -ggdb -g3 -pedantic -ansi -Wall -W -Wundef -Wshadow -Wcast-align -Wstrict-prototypes -Wmissing-prototypes -Wno-long-long -Wundef -Wconversion -pipe::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${no_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 219 "debug-geoff32","gcc:-DBN_DEBUG -DBN_DEBUG_RAND -DBN_STRICT -DPURIFY -DOPENSSL_NO_DEPRECATED -DOPENSSL_NO_ASM -DOPENSSL_NO_INLINE_ASM -DL_ENDIAN -DTERMIO -DPEDANTIC -O1 -ggdb2 -Wall -Werror -Wundef -pedantic -Wshadow -Wpointer-arith -Wbad-function-cast -Wcast-align -Wsign-compare -Wmissing-prototypes -Wmissing-declarations -Wno-long-long::-D_REENTRANT::-ldl:BN_LLONG:${no_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 220 "debug-geoff64","gcc:-DBN_DEBUG -DBN_DEBUG_RAND -DBN_STRICT -DPURIFY -DOPENSSL_NO_DEPRECATED -DOPENSSL_NO_ASM -DOPENSSL_NO_INLINE_ASM -DL_ENDIAN -DTERMIO -DPEDANTIC -O1 -ggdb2 -Wall -Werror -Wundef -pedantic -Wshadow -Wpointer-arith -Wbad-function-cast -Wcast-align -Wsign-compare -Wmissing-prototypes -Wmissing-declarations -Wno-long-long::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${no_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 221 "debug-linux-pentium","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DL_ENDIAN -g -mcpu=pentium -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn",
 222 "debug-linux-ppro","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DL_ENDIAN -g -mcpu=pentiumpro -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn",
 223 "debug-linux-elf","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DL_ENDIAN -g -march=i486 -Wall::-D_REENTRANT::-lefence -ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 224 "debug-linux-elf-noefence","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DL_ENDIAN -g -march=i486 -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 225 "debug-linux-ia32-aes", "gcc:-DAES_EXPERIMENTAL -DL_ENDIAN -O3 -fomit-frame-pointer -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:x86cpuid.o:bn-586.o co-586.o x86-mont.o::des-586.o crypt586.o:aes_x86core.o aes_cbc.o aesni-x86.o:bf-586.o:md5-586.o:sha1-586.o sha256-586.o sha512-586.o:cast-586.o:rc4-586.o:rmd-586.o:rc5-586.o:wp_block.o wp-mmx.o::ghash-x86.o::elf:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 226 "debug-linux-generic32","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DCRYPTO_MDEBUG -g -Wall::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${no_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 227 "debug-linux-generic64","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DCRYPTO_MDEBUG -DTERMIO -g -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${no_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 228 "debug-linux-x86_64","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DCRYPTO_MDEBUG -m64 -DL_ENDIAN -g -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64",
 229 "dist",         "cc:-O::(unknown)::::::",
 230
 231 # Basic configs that should work on any (32 and less bit) box
 232 "gcc",          "gcc:-O3::(unknown):::BN_LLONG:::",
 233 "cc",           "cc:-O::(unknown)::::::",
 234
 235 ####VOS Configurations
 236 "vos-gcc","gcc:-O3 -Wall -DOPENSSL_SYSNAME_VOS -D_POSIX_C_SOURCE=200112L -D_BSD -D_VOS_EXTENDED_NAMES -DB_ENDIAN::(unknown):VOS:-Wl,-map:BN_LLONG:${no_asm}:::::.so:",
 237 "debug-vos-gcc","gcc:-O0 -g -Wall -DOPENSSL_SYSNAME_VOS -D_POSIX_C_SOURCE=200112L -D_BSD -D_VOS_EXTENDED_NAMES -DB_ENDIAN -DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DCRYPTO_MDEBUG::(unknown):VOS:-Wl,-map:BN_LLONG:${no_asm}:::::.so:",
 238
 239 #### Solaris x86 with GNU C setups
 240 # -DOPENSSL_NO_INLINE_ASM switches off inline assembler. We have to do it
 241 # here because whenever GNU C instantiates an assembler template it
 242 # surrounds it with #APP #NO_APP comment pair which (at least Solaris
 243 # 7_x86) /usr/ccs/bin/as fails to assemble with "Illegal mnemonic"
 244 # error message.
 245 "solaris-x86-gcc","gcc:-O3 -fomit-frame-pointer -march=pentium -Wall -DL_ENDIAN -DOPENSSL_NO_INLINE_ASM::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:solaris-shared:-fPIC:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 246 # -shared -static-libgcc might appear controversial, but modules taken
 247 # from static libgcc do not have relocations and linking them into our
 248 # shared objects doesn't have any negative side-effects. On the contrary,
 249 # doing so makes it possible to use gcc shared build with Sun C. Given
 250 # that gcc generates faster code [thanks to inline assembler], I would
 251 # actually recommend to consider using gcc shared build even with vendor
 252 # compiler:-)
 253 #                                               <appro@fy.chalmers.se>
 254 "solaris64-x86_64-gcc","gcc:-m64 -O3 -Wall -DL_ENDIAN::-D_REENTRANT::-lsocket -lnsl -ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:solaris-shared:-fPIC:-m64 -shared -static-libgcc:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/64",
 255
 256 #### Solaris x86 with Sun C setups
 257 "solaris-x86-cc","cc:-fast -xarch=generic -O -Xa::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_PTR DES_UNROLL BF_PTR:${no_asm}:dlfcn:solaris-shared:-KPIC:-G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 258 "solaris64-x86_64-cc","cc:-fast -xarch=amd64 -xstrconst -Xa -DL_ENDIAN::-D_REENTRANT::-lsocket -lnsl -ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:solaris-shared:-KPIC:-xarch=amd64 -G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/64",
 259
 260 #### SPARC Solaris with GNU C setups
 261 "solaris-sparcv7-gcc","gcc:-O3 -fomit-frame-pointer -Wall -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${no_asm}:dlfcn:solaris-shared:-fPIC:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 262 "solaris-sparcv8-gcc","gcc:-mcpu=v8 -O3 -fomit-frame-pointer -Wall -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${sparcv8_asm}:dlfcn:solaris-shared:-fPIC:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 263 # -m32 should be safe to add as long as driver recognizes -mcpu=ultrasparc
 264 "solaris-sparcv9-gcc","gcc:-m32 -mcpu=ultrasparc -O3 -fomit-frame-pointer -Wall -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT:ULTRASPARC:-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${sparcv9_asm}:dlfcn:solaris-shared:-fPIC:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 265 "solaris64-sparcv9-gcc","gcc:-m64 -mcpu=ultrasparc -O3 -Wall -DB_ENDIAN::-D_REENTRANT:ULTRASPARC:-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_PTR DES_RISC1 DES_UNROLL BF_PTR:${sparcv9_asm}:dlfcn:solaris-shared:-fPIC:-m64 -shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/64",
 266 ####
 267 "debug-solaris-sparcv8-gcc","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG_ALL -O -g -mcpu=v8 -Wall -DB_ENDIAN::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${sparcv8_asm}:dlfcn:solaris-shared:-fPIC:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 268 "debug-solaris-sparcv9-gcc","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG_ALL -DPEDANTIC -O -g -mcpu=ultrasparc -pedantic -ansi -Wall -Wshadow -Wno-long-long -D__EXTENSIONS__ -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT:ULTRASPARC:-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${sparcv9_asm}:dlfcn:solaris-shared:-fPIC:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 269
 270 #### SPARC Solaris with Sun C setups
 271 # SC4.0 doesn't pass 'make test', upgrade to SC5.0 or SC4.2.
 272 # SC4.2 is ok, better than gcc even on bn as long as you tell it -xarch=v8
 273 # SC5.0 note: Compiler common patch 107357-01 or later is required!
 274 "solaris-sparcv7-cc","cc:-xO5 -xstrconst -xdepend -Xa -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_PTR DES_RISC1 DES_UNROLL BF_PTR:${no_asm}:dlfcn:solaris-shared:-KPIC:-G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 275 "solaris-sparcv8-cc","cc:-xarch=v8 -xO5 -xstrconst -xdepend -Xa -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_PTR DES_RISC1 DES_UNROLL BF_PTR:${sparcv8_asm}:dlfcn:solaris-shared:-KPIC:-G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 276 "solaris-sparcv9-cc","cc:-xtarget=ultra -xarch=v8plus -xO5 -xstrconst -xdepend -Xa -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT:ULTRASPARC:-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK_LL DES_PTR DES_RISC1 DES_UNROLL BF_PTR:${sparcv9_asm}:dlfcn:solaris-shared:-KPIC:-G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 277 "solaris64-sparcv9-cc","cc:-xtarget=ultra -xarch=v9 -xO5 -xstrconst -xdepend -Xa -DB_ENDIAN::-D_REENTRANT:ULTRASPARC:-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_PTR DES_RISC1 DES_UNROLL BF_PTR:${sparcv9_asm}:dlfcn:solaris-shared:-KPIC:-xarch=v9 -G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/64",
 278 ####
 279 "debug-solaris-sparcv8-cc","cc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG_ALL -xarch=v8 -g -O -xstrconst -Xa -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT::-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_PTR DES_RISC1 DES_UNROLL BF_PTR:${sparcv8_asm}:dlfcn:solaris-shared:-KPIC:-G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 280 "debug-solaris-sparcv9-cc","cc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG_ALL -xtarget=ultra -xarch=v8plus -g -O -xstrconst -Xa -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT:ULTRASPARC:-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK_LL DES_PTR DES_RISC1 DES_UNROLL BF_PTR:${sparcv9_asm}:dlfcn:solaris-shared:-KPIC:-G -dy -z text:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 281
 282 #### SunOS configs, assuming sparc for the gcc one.
 283 #"sunos-cc", "cc:-O4 -DNOPROTO -DNOCONST::(unknown):SUNOS::DES_UNROLL:${no_asm}::",
 284 "sunos-gcc","gcc:-O3 -mcpu=v8 -Dssize_t=int::(unknown):SUNOS::BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL DES_PTR DES_RISC1:${no_asm}::",
 285
 286 #### IRIX 5.x configs
 287 # -mips2 flag is added by ./config when appropriate.
 288 "irix-gcc","gcc:-O3 -DB_ENDIAN::(unknown):::BN_LLONG MD2_CHAR RC4_INDEX RC4_CHAR RC4_CHUNK DES_UNROLL DES_RISC2 DES_PTR BF_PTR:${mips32_asm}:o32:dlfcn:irix-shared:::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 289 "irix-cc", "cc:-O2 -use_readonly_const -DB_ENDIAN::(unknown):::BN_LLONG RC4_CHAR RC4_CHUNK DES_PTR DES_RISC2 DES_UNROLL BF_PTR:${mips32_asm}:o32:dlfcn:irix-shared:::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 290 #### IRIX 6.x configs
 291 # Only N32 and N64 ABIs are supported. If you need O32 ABI build, invoke
 292 # './Configure irix-cc -o32' manually.
 293 "irix-mips3-gcc","gcc:-mabi=n32 -O3 -DB_ENDIAN -DBN_DIV3W::-D_SGI_MP_SOURCE:::MD2_CHAR RC4_INDEX RC4_CHAR RC4_CHUNK_LL DES_UNROLL DES_RISC2 DES_PTR BF_PTR SIXTY_FOUR_BIT:${mips64_asm}:n32:dlfcn:irix-shared::-mabi=n32:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::32",
 294 "irix-mips3-cc", "cc:-n32 -mips3 -O2 -use_readonly_const -G0 -rdata_shared -DB_ENDIAN -DBN_DIV3W::-D_SGI_MP_SOURCE:::DES_PTR RC4_CHAR RC4_CHUNK_LL DES_RISC2 DES_UNROLL BF_PTR SIXTY_FOUR_BIT:${mips64_asm}:n32:dlfcn:irix-shared::-n32:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::32",
 295 # N64 ABI builds.
 296 "irix64-mips4-gcc","gcc:-mabi=64 -mips4 -O3 -DB_ENDIAN -DBN_DIV3W::-D_SGI_MP_SOURCE:::RC4_CHAR RC4_CHUNK DES_RISC2 DES_UNROLL SIXTY_FOUR_BIT_LONG:${mips64_asm}:64:dlfcn:irix-shared::-mabi=64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64",
 297 "irix64-mips4-cc", "cc:-64 -mips4 -O2 -use_readonly_const -G0 -rdata_shared -DB_ENDIAN -DBN_DIV3W::-D_SGI_MP_SOURCE:::RC4_CHAR RC4_CHUNK DES_RISC2 DES_UNROLL SIXTY_FOUR_BIT_LONG:${mips64_asm}:64:dlfcn:irix-shared::-64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64",
 298
 299 #### Unified HP-UX ANSI C configs.
 300 # Special notes:
 301 # - Originally we were optimizing at +O4 level. It should be noted
 302 #   that the only difference between +O3 and +O4 is global inter-
 303 #   procedural analysis. As it has to be performed during the link
 304 #   stage the compiler leaves behind certain pseudo-code in lib*.a
 305 #   which might be release or even patch level specific. Generating
 306 #   the machine code for and analyzing the *whole* program appears
 307 #   to be *extremely* memory demanding while the performance gain is
 308 #   actually questionable. The situation is intensified by the default
 309 #   HP-UX data set size limit (infamous 'maxdsiz' tunable) of 64MB
 310 #   which is way too low for +O4. In other words, doesn't +O3 make
 311 #   more sense?
 312 # - Keep in mind that the HP compiler by default generates code
 313 #   suitable for execution on the host you're currently compiling at.
 314 #   If the toolkit is ment to be used on various PA-RISC processors
 315 #   consider './config +DAportable'.
 316 # - +DD64 is chosen in favour of +DA2.0W because it's meant to be
 317 #   compatible with *future* releases.
 318 # - If you run ./Configure hpux-parisc-[g]cc manually don't forget to
 319 #   pass -D_REENTRANT on HP-UX 10 and later.
 320 # - -DMD32_XARRAY triggers workaround for compiler bug we ran into in
 321 #   32-bit message digests. (For the moment of this writing) HP C
 322 #   doesn't seem to "digest" too many local variables (they make "him"
 323 #   chew forever:-). For more details look-up MD32_XARRAY comment in
 324 #   crypto/sha/sha_lcl.h.
 325 #                                       <appro@fy.chalmers.se>
 326 #
 327 # Since there is mention of this in shlib/hpux10-cc.sh
 328 "hpux-parisc-cc-o4","cc:-Ae +O4 +ESlit -z -DB_ENDIAN -DBN_DIV2W -DMD32_XARRAY::-D_REENTRANT::-ldld:BN_LLONG DES_PTR DES_UNROLL DES_RISC1:${no_asm}:dl:hpux-shared:+Z:-b:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 329 "hpux-parisc-gcc","gcc:-O3 -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT::-Wl,+s -ldld:BN_LLONG DES_PTR DES_UNROLL DES_RISC1:${no_asm}:dl:hpux-shared:-fPIC:-shared:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 330 "hpux-parisc1_1-gcc","gcc:-O3 -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT::-Wl,+s -ldld:BN_LLONG DES_PTR DES_UNROLL DES_RISC1:${parisc11_asm}:dl:hpux-shared:-fPIC:-shared:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/pa1.1",
 331 "hpux-parisc2-gcc","gcc:-march=2.0 -O3 -DB_ENDIAN -D_REENTRANT::::-Wl,+s -ldld:SIXTY_FOUR_BIT RC4_CHAR RC4_CHUNK DES_PTR DES_UNROLL DES_RISC1:".eval{my $asm=$parisc20_asm;$asm=~s/2W\./2\./;$asm=~s/:64/:32/;$asm}.":dl:hpux-shared:-fPIC:-shared:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/pa20_32",
 332 "hpux64-parisc2-gcc","gcc:-O3 -DB_ENDIAN -D_REENTRANT::::-ldl:SIXTY_FOUR_BIT_LONG MD2_CHAR RC4_INDEX RC4_CHAR DES_UNROLL DES_RISC1 DES_INT::pa-risc2W.o:::::::::::::::void:dlfcn:hpux-shared:-fpic:-shared:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/pa20_64",
 333
 334 # More attempts at unified 10.X and 11.X targets for HP C compiler.
 335 #
 336 # Chris Ruemmler <ruemmler@cup.hp.com>
 337 # Kevin Steves <ks@hp.se>
 338 "hpux-parisc-cc","cc:+O3 +Optrs_strongly_typed -Ae +ESlit -DB_ENDIAN -DBN_DIV2W -DMD32_XARRAY::-D_REENTRANT::-Wl,+s -ldld:MD2_CHAR RC4_INDEX RC4_CHAR DES_UNROLL DES_RISC1 DES_INT:${no_asm}:dl:hpux-shared:+Z:-b:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 339 "hpux-parisc1_1-cc","cc:+DA1.1 +O3 +Optrs_strongly_typed -Ae +ESlit -DB_ENDIAN -DMD32_XARRAY::-D_REENTRANT::-Wl,+s -ldld:MD2_CHAR RC4_INDEX RC4_CHAR DES_UNROLL DES_RISC1 DES_INT:${parisc11_asm}:dl:hpux-shared:+Z:-b:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/pa1.1",
 340 "hpux-parisc2-cc","cc:+DA2.0 +DS2.0 +O3 +Optrs_strongly_typed -Ae +ESlit -DB_ENDIAN -DMD32_XARRAY -D_REENTRANT::::-Wl,+s -ldld:SIXTY_FOUR_BIT MD2_CHAR RC4_INDEX RC4_CHAR DES_UNROLL DES_RISC1 DES_INT:".eval{my $asm=$parisc20_asm;$asm=~s/2W\./2\./;$asm=~s/:64/:32/;$asm}.":dl:hpux-shared:+Z:-b:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/pa20_32",
 341 "hpux64-parisc2-cc","cc:+DD64 +O3 +Optrs_strongly_typed -Ae +ESlit -DB_ENDIAN -DMD32_XARRAY -D_REENTRANT::::-ldl:SIXTY_FOUR_BIT_LONG MD2_CHAR RC4_INDEX RC4_CHAR DES_UNROLL DES_RISC1 DES_INT:${parisc20_asm}:dlfcn:hpux-shared:+Z:+DD64 -b:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/pa20_64",
 342
 343 # HP/UX IA-64 targets
 344 "hpux-ia64-cc","cc:-Ae +DD32 +O2 +Olit=all -z -DB_ENDIAN -D_REENTRANT::::-ldl:SIXTY_FOUR_BIT MD2_CHAR RC4_INDEX DES_UNROLL DES_RISC1 DES_INT:${ia64_asm}:dlfcn:hpux-shared:+Z:+DD32 -b:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/hpux32",
 345 # Frank Geurts <frank.geurts@nl.abnamro.com> has patiently assisted with
 346 # with debugging of the following config.
 347 "hpux64-ia64-cc","cc:-Ae +DD64 +O3 +Olit=all -z -DB_ENDIAN -D_REENTRANT::::-ldl:SIXTY_FOUR_BIT_LONG MD2_CHAR RC4_INDEX DES_UNROLL DES_RISC1 DES_INT:${ia64_asm}:dlfcn:hpux-shared:+Z:+DD64 -b:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/hpux64",
 348 # GCC builds...
 349 "hpux-ia64-gcc","gcc:-O3 -DB_ENDIAN -D_REENTRANT::::-ldl:SIXTY_FOUR_BIT MD2_CHAR RC4_INDEX DES_UNROLL DES_RISC1 DES_INT:${ia64_asm}:dlfcn:hpux-shared:-fpic:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/hpux32",
 350 "hpux64-ia64-gcc","gcc:-mlp64 -O3 -DB_ENDIAN -D_REENTRANT::::-ldl:SIXTY_FOUR_BIT_LONG MD2_CHAR RC4_INDEX DES_UNROLL DES_RISC1 DES_INT:${ia64_asm}:dlfcn:hpux-shared:-fpic:-mlp64 -shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/hpux64",
 351
 352 # Legacy HPUX 9.X configs...
 353 "hpux-cc",      "cc:-DB_ENDIAN -DBN_DIV2W -DMD32_XARRAY -Ae +ESlit +O2 -z::(unknown)::-Wl,+s -ldld:DES_PTR DES_UNROLL DES_RISC1:${no_asm}:dl:hpux-shared:+Z:-b:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 354 "hpux-gcc",     "gcc:-DB_ENDIAN -DBN_DIV2W -O3::(unknown)::-Wl,+s -ldld:DES_PTR DES_UNROLL DES_RISC1:${no_asm}:dl:hpux-shared:-fPIC:-shared:.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 355
 356 #### HP MPE/iX http://jazz.external.hp.com/src/openssl/
 357 "MPE/iX-gcc",   "gcc:-DBN_DIV2W -O3 -D_POSIX_SOURCE -D_SOCKET_SOURCE -I/SYSLOG/PUB::(unknown):MPE:-L/SYSLOG/PUB -lsyslog -lsocket -lcurses:BN_LLONG DES_PTR DES_UNROLL DES_RISC1:::",
 358
 359 # DEC Alpha OSF/1/Tru64 targets.
 360 #
 361 #       "What's in a name? That which we call a rose
 362 #        By any other word would smell as sweet."
 363 #
 364 # - William Shakespeare, "Romeo & Juliet", Act II, scene II.
 365 #
 366 # For gcc, the following gave a %50 speedup on a 164 over the 'DES_INT' version
 367 #
 368 "osf1-alpha-gcc", "gcc:-O3::(unknown):::SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_UNROLL DES_RISC1:${alpha_asm}:dlfcn:alpha-osf1-shared:::.so",
 369 "osf1-alpha-cc",  "cc:-std1 -tune host -O4 -readonly_strings::(unknown):::SIXTY_FOUR_BIT_LONG RC4_CHUNK:${alpha_asm}:dlfcn:alpha-osf1-shared:::.so",
 370 "tru64-alpha-cc", "cc:-std1 -tune host -fast -readonly_strings::-pthread:::SIXTY_FOUR_BIT_LONG RC4_CHUNK:${alpha_asm}:dlfcn:alpha-osf1-shared::-msym:.so",
 371
 372 ####
 373 #### Variety of LINUX:-)
 374 ####
 375 # *-generic* is endian-neutral target, but ./config is free to
 376 # throw in -D[BL]_ENDIAN, whichever appropriate...
 377 "linux-generic32","gcc:-O3 -fomit-frame-pointer -Wall::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${no_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 378 "linux-ppc",    "gcc:-DB_ENDIAN -O3 -Wall::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_RISC1 DES_UNROLL:${ppc32_asm}:linux32:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 379
 380 #######################################################################
 381 # Note that -march is not among compiler options in below linux-armv4
 382 # target line. Not specifying one is intentional to give you choice to:
 383 #
 384 # a) rely on your compiler default by not specifying one;
 385 # b) specify your target platform explicitly for optimal performance,
 386 #    e.g. -march=armv6 or -march=armv7-a;
 387 # c) build "universal" binary that targets *range* of platforms by
 388 #    specifying minimum and maximum supported architecture;
 389 #
 390 # As for c) option. It actually makes no sense to specify maximum to be
 391 # less than ARMv7, because it's the least requirement for run-time
 392 # switch between platform-specific code paths. And without run-time
 393 # switch performance would be equivalent to one for minimum. Secondly,
 394 # there are some natural limitations that you'd have to accept and
 395 # respect. Most notably you can *not* build "universal" binary for
 396 # big-endian platform. This is because ARMv7 processor always picks
 397 # instructions in little-endian order. Another similar limitation is
 398 # that -mthumb can't "cross" -march=armv6t2 boundary, because that's
 399 # where it became Thumb-2. Well, this limitation is a bit artificial,
 400 # because it's not really impossible, but it's deemed too tricky to
 401 # support. And of course you have to be sure that your binutils are
 402 # actually up to the task of handling maximum target platform. With all
 403 # this in mind here is an example of how to configure "universal" build:
 404 #
 405 #       ./Configure linux-armv4 -march=armv6 -D__ARM_MAX_ARCH__=8
 406 #
 407 "linux-armv4",  "gcc: -O3 -Wall::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${armv4_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 408 "linux-aarch64","gcc: -O3 -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${aarch64_asm}:linux64:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 409 # Configure script adds minimally required -march for assembly support,
 410 # if no -march was specified at command line. mips32 and mips64 below
 411 # refer to contemporary MIPS Architecture specifications, MIPS32 and
 412 # MIPS64, rather than to kernel bitness.
 413 "linux-mips32", "gcc:-mabi=32 -O3 -Wall -DBN_DIV3W::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${mips32_asm}:o32:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 414 "linux-mips64",   "gcc:-mabi=n32 -O3 -Wall -DBN_DIV3W::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${mips64_asm}:n32:dlfcn:linux-shared:-fPIC:-mabi=n32:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::32",
 415 "linux64-mips64",   "gcc:-mabi=64 -O3 -Wall -DBN_DIV3W::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${mips64_asm}:64:dlfcn:linux-shared:-fPIC:-mabi=64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64",
 416 #### IA-32 targets...
 417 "linux-ia32-icc",       "icc:-DL_ENDIAN -O2::-D_REENTRANT::-ldl -no_cpprt:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-KPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 418 "linux-elf",    "gcc:-DL_ENDIAN -O3 -fomit-frame-pointer -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 419 "linux-aout",   "gcc:-DL_ENDIAN -O3 -fomit-frame-pointer -march=i486 -Wall::(unknown):::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_asm}:a.out",
 420 ####
 421 "linux-generic64","gcc:-O3 -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${no_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 422 "linux-ppc64",  "gcc:-m64 -DB_ENDIAN -O3 -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_RISC1 DES_UNROLL:${ppc64_asm}:linux64:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64",
 423 "linux-ppc64le","gcc:-m64 -DL_ENDIAN -O3 -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_RISC1 DES_UNROLL:$ppc64_asm:linux64le:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::",
 424 "linux-ia64",   "gcc:-DL_ENDIAN -DTERMIO -O3 -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_UNROLL DES_INT:${ia64_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 425 "linux-ia64-icc","icc:-DL_ENDIAN -O2 -Wall::-D_REENTRANT::-ldl -no_cpprt:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_RISC1 DES_INT:${ia64_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 426 "linux-x86_64", "gcc:-m64 -DL_ENDIAN -O3 -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64",
 427 "linux-x86_64-clang",   "clang: -m64 -DL_ENDIAN -O3 -Wall -Wextra $clang_disabled_warnings -Qunused-arguments::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64",
 428 "debug-linux-x86_64-clang",     "clang: -DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DCRYPTO_MDEBUG -m64 -DL_ENDIAN -g -Wall -Wextra $clang_disabled_warnings -Qunused-arguments::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64",
 429 "linux-x86_64-icc", "icc:-DL_ENDIAN -O2::-D_REENTRANT::-ldl -no_cpprt:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64",
 430 "linux-x32",    "gcc:-mx32 -DL_ENDIAN -O3 -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT RC4_CHUNK_LL DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:linux-shared:-fPIC:-mx32:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::x32",
 431 "linux64-s390x",        "gcc:-m64 -DB_ENDIAN -O3 -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL:${s390x_asm}:64:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64",
 432 #### So called "highgprs" target for z/Architecture CPUs
 433 # "Highgprs" is kernel feature first implemented in Linux 2.6.32, see
 434 # /proc/cpuinfo. The idea is to preserve most significant bits of
 435 # general purpose registers not only upon 32-bit process context
 436 # switch, but even on asynchronous signal delivery to such process.
 437 # This makes it possible to deploy 64-bit instructions even in legacy
 438 # application context and achieve better [or should we say adequate]
 439 # performance. The build is binary compatible with linux-generic32,
 440 # and the idea is to be able to install the resulting libcrypto.so
 441 # alongside generic one, e.g. as /lib/highgprs/libcrypto.so.x.y, for
 442 # ldconfig and run-time linker to autodiscover. Unfortunately it
 443 # doesn't work just yet, because of couple of bugs in glibc
 444 # sysdeps/s390/dl-procinfo.c affecting ldconfig and ld.so.1...
 445 "linux32-s390x",        "gcc:-m31 -Wa,-mzarch -DB_ENDIAN -O3 -Wall::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL:".eval{my $asm=$s390x_asm;$asm=~s/bn\-s390x\.o/bn_asm.o/;$asm}.":31:dlfcn:linux-shared:-fPIC:-m31:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::/highgprs",
 446 #### SPARC Linux setups
 447 # Ray Miller <ray.miller@computing-services.oxford.ac.uk> has patiently
 448 # assisted with debugging of following two configs.
 449 "linux-sparcv8","gcc:-mcpu=v8 -DB_ENDIAN -O3 -fomit-frame-pointer -Wall -DBN_DIV2W::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${sparcv8_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 450 # it's a real mess with -mcpu=ultrasparc option under Linux, but
 451 # -Wa,-Av8plus should do the trick no matter what.
 452 "linux-sparcv9","gcc:-m32 -mcpu=ultrasparc -DB_ENDIAN -O3 -fomit-frame-pointer -Wall -Wa,-Av8plus -DBN_DIV2W::-D_REENTRANT:ULTRASPARC:-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${sparcv9_asm}:dlfcn:linux-shared:-fPIC:-m32:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 453 # GCC 3.1 is a requirement
 454 "linux64-sparcv9","gcc:-m64 -mcpu=ultrasparc -DB_ENDIAN -O3 -fomit-frame-pointer -Wall::-D_REENTRANT:ULTRASPARC:-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_PTR DES_RISC1 DES_UNROLL BF_PTR:${sparcv9_asm}:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64",
 455 #### Alpha Linux with GNU C and Compaq C setups
 456 # Special notes:
 457 # - linux-alpha+bwx-gcc is ment to be used from ./config only. If you
 458 #   ought to run './Configure linux-alpha+bwx-gcc' manually, do
 459 #   complement the command line with -mcpu=ev56, -mcpu=ev6 or whatever
 460 #   which is appropriate.
 461 # - If you use ccc keep in mind that -fast implies -arch host and the
 462 #   compiler is free to issue instructions which gonna make elder CPU
 463 #   choke. If you wish to build "blended" toolkit, add -arch generic
 464 #   *after* -fast and invoke './Configure linux-alpha-ccc' manually.
 465 #
 466 #                                       <appro@fy.chalmers.se>
 467 #
 468 "linux-alpha-gcc","gcc:-O3 -DL_ENDIAN::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_RISC1 DES_UNROLL:${alpha_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 469 "linux-alpha+bwx-gcc","gcc:-O3 -DL_ENDIAN::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_RISC1 DES_UNROLL:${alpha_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 470 "linux-alpha-ccc","ccc:-fast -readonly_strings -DL_ENDIAN::-D_REENTRANT:::SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_PTR DES_RISC1 DES_UNROLL:${alpha_asm}",
 471 "linux-alpha+bwx-ccc","ccc:-fast -readonly_strings -DL_ENDIAN::-D_REENTRANT:::SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_PTR DES_RISC1 DES_UNROLL:${alpha_asm}",
 472
 473 # Android: linux-* but without pointers to headers and libs.
 474 "android","gcc:-mandroid -I\$(ANDROID_DEV)/include -B\$(ANDROID_DEV)/lib -O3 -fomit-frame-pointer -Wall::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${no_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 475 "android-x86","gcc:-mandroid -I\$(ANDROID_DEV)/include -B\$(ANDROID_DEV)/lib -O3 -fomit-frame-pointer -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:".eval{my $asm=${x86_elf_asm};$asm=~s/:elf/:android/;$asm}.":dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 476 "android-armv7","gcc:-march=armv7-a -mandroid -I\$(ANDROID_DEV)/include -B\$(ANDROID_DEV)/lib -O3 -fomit-frame-pointer -Wall::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${armv4_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 477 "android-mips","gcc:-mandroid -I\$(ANDROID_DEV)/include -B\$(ANDROID_DEV)/lib -O3 -Wall::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${mips32_asm}:o32:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 478 "android64-aarch64","gcc:-mandroid -fPIC -I\$(ANDROID_DEV)/include -B\$(ANDROID_DEV)/lib -O3 -Wall::-D_REENTRANT::-pie%-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${aarch64_asm}:linux64:dlfcn:linux-shared:::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 479
 480 #### *BSD [do see comment about ${BSDthreads} above!]
 481 "BSD-generic32","gcc:-O3 -fomit-frame-pointer -Wall::${BSDthreads}:::BN_LLONG RC2_CHAR RC4_INDEX DES_INT DES_UNROLL:${no_asm}:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 482 "BSD-x86",      "gcc:-DL_ENDIAN -O3 -fomit-frame-pointer -Wall::${BSDthreads}:::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_asm}:a.out:dlfcn:bsd-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 483 "BSD-x86-elf",  "gcc:-DL_ENDIAN -O3 -fomit-frame-pointer -Wall::${BSDthreads}:::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:bsd-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 484 "debug-BSD-x86-elf",    "gcc:-DL_ENDIAN -O3 -Wall -g::${BSDthreads}:::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:bsd-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 485 "BSD-sparcv8",  "gcc:-DB_ENDIAN -O3 -mcpu=v8 -Wall::${BSDthreads}:::BN_LLONG RC2_CHAR RC4_INDEX DES_INT DES_UNROLL:${sparcv8_asm}:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 486
 487 "BSD-generic64","gcc:-O3 -Wall::${BSDthreads}:::SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${no_asm}:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 488 # -DMD32_REG_T=int doesn't actually belong in sparc64 target, it
 489 # simply *happens* to work around a compiler bug in gcc 3.3.3,
 490 # triggered by RIPEMD160 code.
 491 "BSD-sparc64",  "gcc:-DB_ENDIAN -O3 -DMD32_REG_T=int -Wall::${BSDthreads}:::BN_LLONG RC2_CHAR RC4_CHUNK DES_INT DES_PTR DES_RISC2 BF_PTR:${sparcv9_asm}:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 492 "BSD-ia64",     "gcc:-DL_ENDIAN -O3 -Wall::${BSDthreads}:::SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_UNROLL DES_INT:${ia64_asm}:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 493 "BSD-x86_64",   "cc:-DL_ENDIAN -O3 -Wall::${BSDthreads}:::SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 494
 495 "bsdi-elf-gcc",     "gcc:-DPERL5 -DL_ENDIAN -fomit-frame-pointer -O3 -march=i486 -Wall::(unknown)::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 496
 497 "nextstep",     "cc:-O -Wall:<libc.h>:(unknown):::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:::",
 498 "nextstep3.3",  "cc:-O3 -Wall:<libc.h>:(unknown):::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:::",
 499
 500 # NCR MP-RAS UNIX ver 02.03.01
 501 "ncr-scde","cc:-O6 -Xa -Hoff=BEHAVED -686 -Hwide -Hiw::(unknown)::-lsocket -lnsl -lc89:${x86_gcc_des} ${x86_gcc_opts}:::",
 502
 503 # QNX
 504 "qnx4", "cc:-DL_ENDIAN -DTERMIO::(unknown):::${x86_gcc_des} ${x86_gcc_opts}:",
 505 "QNX6",       "gcc:::::-lsocket::${no_asm}:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 506 "QNX6-i386",  "gcc:-DL_ENDIAN -O2 -Wall::::-lsocket:${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:bsd-gcc-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 507
 508 # BeOS
 509 "beos-x86-r5",   "gcc:-DL_ENDIAN -DTERMIOS -O3 -fomit-frame-pointer -mcpu=pentium -Wall::-D_REENTRANT:BEOS:-lbe -lnet:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:beos:beos-shared:-fPIC -DPIC:-shared:.so",
 510 "beos-x86-bone", "gcc:-DL_ENDIAN -DTERMIOS -O3 -fomit-frame-pointer -mcpu=pentium -Wall::-D_REENTRANT:BEOS:-lbe -lbind -lsocket:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:beos:beos-shared:-fPIC:-shared:.so",
 511
 512 #### SCO/Caldera targets.
 513 #
 514 # Originally we had like unixware-*, unixware-*-pentium, unixware-*-p6, etc.
 515 # Now we only have blended unixware-* as it's the only one used by ./config.
 516 # If you want to optimize for particular microarchitecture, bypass ./config
 517 # and './Configure unixware-7 -Kpentium_pro' or whatever appropriate.
 518 # Note that not all targets include assembler support. Mostly because of
 519 # lack of motivation to support out-of-date platforms with out-of-date
 520 # compiler drivers and assemblers. Tim Rice <tim@multitalents.net> has
 521 # patiently assisted to debug most of it.
 522 #
 523 # UnixWare 2.0x fails destest with -O.
 524 "unixware-2.0","cc:-DFILIO_H -DNO_STRINGS_H::-Kthread::-lsocket -lnsl -lresolv -lx:${x86_gcc_des} ${x86_gcc_opts}:::",
 525 "unixware-2.1","cc:-O -DFILIO_H::-Kthread::-lsocket -lnsl -lresolv -lx:${x86_gcc_des} ${x86_gcc_opts}:::",
 526 "unixware-7","cc:-O -DFILIO_H -Kalloca::-Kthread::-lsocket -lnsl:BN_LLONG MD2_CHAR RC4_INDEX ${x86_gcc_des}:${x86_elf_asm}-1:dlfcn:svr5-shared:-Kpic::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 527 "unixware-7-gcc","gcc:-DL_ENDIAN -DFILIO_H -O3 -fomit-frame-pointer -march=pentium -Wall::-D_REENTRANT::-lsocket -lnsl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}-1:dlfcn:gnu-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 528 # SCO 5 - Ben Laurie <ben@algroup.co.uk> says the -O breaks the SCO cc.
 529 "sco5-cc",  "cc:-belf::(unknown)::-lsocket -lnsl:${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}-1:dlfcn:svr3-shared:-Kpic::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 530 "sco5-gcc",  "gcc:-O3 -fomit-frame-pointer::(unknown)::-lsocket -lnsl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}-1:dlfcn:svr3-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 531
 532 #### IBM's AIX.
 533 "aix3-cc",  "cc:-O -DB_ENDIAN -qmaxmem=16384::(unknown):AIX::BN_LLONG RC4_CHAR:::",
 534 "aix-gcc",  "gcc:-O -DB_ENDIAN::-pthread:AIX::BN_LLONG RC4_CHAR:${ppc32_asm}:aix32:dlfcn:aix-shared::-shared -Wl,-G:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)::-X32",
 535 "aix64-gcc","gcc:-maix64 -O -DB_ENDIAN::-pthread:AIX::SIXTY_FOUR_BIT_LONG RC4_CHAR:${ppc64_asm}:aix64:dlfcn:aix-shared::-maix64 -shared -Wl,-G:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)::-X64",
 536 # Below targets assume AIX 5. Idea is to effectively disregard $OBJECT_MODE
 537 # at build time. $OBJECT_MODE is respected at ./config stage!
 538 "aix-cc",   "cc:-q32 -O -DB_ENDIAN -qmaxmem=16384 -qro -qroconst::-qthreaded -D_THREAD_SAFE:AIX::BN_LLONG RC4_CHAR:${ppc32_asm}:aix32:dlfcn:aix-shared::-q32 -G:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)::-X 32",
 539 "aix64-cc", "cc:-q64 -O -DB_ENDIAN -qmaxmem=16384 -qro -qroconst::-qthreaded -D_THREAD_SAFE:AIX::SIXTY_FOUR_BIT_LONG RC4_CHAR:${ppc64_asm}:aix64:dlfcn:aix-shared::-q64 -G:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)::-X 64",
 540
 541 #
 542 # Cray T90 and similar (SDSC)
 543 # It's Big-endian, but the algorithms work properly when B_ENDIAN is NOT
 544 # defined.  The T90 ints and longs are 8 bytes long, and apparently the
 545 # B_ENDIAN code assumes 4 byte ints.  Fortunately, the non-B_ENDIAN and
 546 # non L_ENDIAN code aligns the bytes in each word correctly.
 547 #
 548 # The BIT_FIELD_LIMITS define is to avoid two fatal compiler errors:
 549 #'Taking the address of a bit field is not allowed. '
 550 #'An expression with bit field exists as the operand of "sizeof" '
 551 # (written by Wayne Schroeder <schroede@SDSC.EDU>)
 552 #
 553 # j90 is considered the base machine type for unicos machines,
 554 # so this configuration is now called "cray-j90" ...
 555 "cray-j90", "cc: -DBIT_FIELD_LIMITS -DTERMIOS::(unknown):CRAY::SIXTY_FOUR_BIT_LONG DES_INT:::",
 556
 557 #
 558 # Cray T3E (Research Center Juelich, beckman@acl.lanl.gov)
 559 #
 560 # The BIT_FIELD_LIMITS define was written for the C90 (it seems).  I added
 561 # another use.  Basically, the problem is that the T3E uses some bit fields
 562 # for some st_addr stuff, and then sizeof and address-of fails
 563 # I could not use the ams/alpha.o option because the Cray assembler, 'cam'
 564 # did not like it.
 565 "cray-t3e", "cc: -DBIT_FIELD_LIMITS -DTERMIOS::(unknown):CRAY::SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT:::",
 566
 567 # DGUX, 88100.
 568 "dgux-R3-gcc",  "gcc:-O3 -fomit-frame-pointer::(unknown):::RC4_INDEX DES_UNROLL:::",
 569 "dgux-R4-gcc",  "gcc:-O3 -fomit-frame-pointer::(unknown)::-lnsl -lsocket:RC4_INDEX DES_UNROLL:::",
 570 "dgux-R4-x86-gcc",      "gcc:-O3 -fomit-frame-pointer -DL_ENDIAN::(unknown)::-lnsl -lsocket:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}",
 571
 572 # Sinix/ReliantUNIX RM400
 573 # NOTE: The CDS++ Compiler up to V2.0Bsomething has the IRIX_CC_BUG optimizer problem. Better use -g  */
 574 "ReliantUNIX","cc:-KPIC -g -DTERMIOS -DB_ENDIAN::-Kthread:SNI:-lsocket -lnsl -lc -L/usr/ucblib -lucb:BN_LLONG DES_PTR DES_RISC2 DES_UNROLL BF_PTR:${no_asm}:dlfcn:reliantunix-shared:::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
 575 "SINIX","cc:-O::(unknown):SNI:-lsocket -lnsl -lc -L/usr/ucblib -lucb:RC4_INDEX RC4_CHAR:::",
 576 "SINIX-N","/usr/ucb/cc:-O2 -misaligned::(unknown)::-lucb:RC4_INDEX RC4_CHAR:::",
 577
 578 # SIEMENS BS2000/OSD: an EBCDIC-based mainframe
 579 "BS2000-OSD","c89:-O -XLLML -XLLMK -XL -DB_ENDIAN -DCHARSET_EBCDIC::(unknown)::-lsocket -lnsl:THIRTY_TWO_BIT DES_PTR DES_UNROLL MD2_CHAR RC4_INDEX RC4_CHAR BF_PTR:::",
 580
 581 # OS/390 Unix an EBCDIC-based Unix system on IBM mainframe
 582 # You need to compile using the c89.sh wrapper in the tools directory, because the
 583 # IBM compiler does not like the -L switch after any object modules.
 584 #
 585 "OS390-Unix","c89.sh:-O -DB_ENDIAN -DCHARSET_EBCDIC -DNO_SYS_PARAM_H  -D_ALL_SOURCE::(unknown):::THIRTY_TWO_BIT DES_PTR DES_UNROLL MD2_CHAR RC4_INDEX RC4_CHAR BF_PTR:::",
 586
 587 # Visual C targets
 588 #
 589 # Win64 targets, WIN64I denotes IA-64 and WIN64A - AMD64
 590 "VC-WIN64I","cl:-W3 -Gs0 -Gy -nologo -DOPENSSL_SYSNAME_WIN32 -DWIN32_LEAN_AND_MEAN -DL_ENDIAN -DUNICODE -D_UNICODE -D_CRT_SECURE_NO_DEPRECATE:::WIN64I::SIXTY_FOUR_BIT RC4_CHUNK_LL DES_INT EXPORT_VAR_AS_FN:ia64cpuid.o:ia64.o ia64-mont.o:::aes_core.o aes_cbc.o aes-ia64.o::md5-ia64.o:sha1-ia64.o sha256-ia64.o sha512-ia64.o:::::::ghash-ia64.o::ias:win32",
 591 "VC-WIN64A","cl:-W3 -Gs0 -Gy -nologo -DOPENSSL_SYSNAME_WIN32 -DWIN32_LEAN_AND_MEAN -DL_ENDIAN -DUNICODE -D_UNICODE -D_CRT_SECURE_NO_DEPRECATE:::WIN64A::SIXTY_FOUR_BIT RC4_CHUNK_LL DES_INT EXPORT_VAR_AS_FN:".eval{my $asm=$x86_64_asm;$asm=~s/x86_64-gcc\.o/bn_asm.o/;$asm}.":auto:win32",
 592 "debug-VC-WIN64I","cl:-W3 -Gs0 -Gy -Zi -nologo -DOPENSSL_SYSNAME_WIN32 -DWIN32_LEAN_AND_MEAN -DL_ENDIAN -DUNICODE -D_UNICODE -D_CRT_SECURE_NO_DEPRECATE:::WIN64I::SIXTY_FOUR_BIT RC4_CHUNK_LL DES_INT EXPORT_VAR_AS_FN:ia64cpuid.o:ia64.o:::aes_core.o aes_cbc.o aes-ia64.o::md5-ia64.o:sha1-ia64.o sha256-ia64.o sha512-ia64.o:::::::ghash-ia64.o::ias:win32",
 593 "debug-VC-WIN64A","cl:-W3 -Gs0 -Gy -Zi -nologo -DOPENSSL_SYSNAME_WIN32 -DWIN32_LEAN_AND_MEAN -DL_ENDIAN -DUNICODE -D_UNICODE -D_CRT_SECURE_NO_DEPRECATE:::WIN64A::SIXTY_FOUR_BIT RC4_CHUNK_LL DES_INT EXPORT_VAR_AS_FN:".eval{my $asm=$x86_64_asm;$asm=~s/x86_64-gcc\.o/bn_asm.o/;$asm}.":auto:win32",
 594 # x86 Win32 target defaults to ANSI API, if you want UNICODE, complement
 595 # 'perl Configure VC-WIN32' with '-DUNICODE -D_UNICODE'
 596 "VC-WIN32","cl:-W3 -WX -Gs0 -GF -Gy -nologo -DOPENSSL_SYSNAME_WIN32 -DWIN32_LEAN_AND_MEAN -DL_ENDIAN -D_CRT_SECURE_NO_DEPRECATE -D_WINSOCK_DEPRECATED_NO_WARNINGS:::WIN32::BN_LLONG RC4_INDEX EXPORT_VAR_AS_FN ${x86_gcc_opts}:${x86_asm}:win32n:win32",
 597 # Unified CE target
 598 "debug-VC-WIN32","cl:-W3 -WX -Gs0 -GF -Gy -Zi -nologo -DOPENSSL_SYSNAME_WIN32 -DWIN32_LEAN_AND_MEAN -DL_ENDIAN -D_CRT_SECURE_NO_DEPRECATE -D_WINSOCK_DEPRECATED_NO_WARNINGS:::WIN32::BN_LLONG RC4_INDEX EXPORT_VAR_AS_FN ${x86_gcc_opts}:${x86_asm}:win32n:win32",
 599 "VC-CE","cl::::WINCE::BN_LLONG RC4_INDEX EXPORT_VAR_AS_FN ${x86_gcc_opts}:${no_asm}:win32",
 600
 601 # Borland C++ 4.5
 602 "BC-32","bcc32::::WIN32::BN_LLONG DES_PTR RC4_INDEX EXPORT_VAR_AS_FN:${no_asm}:win32",
 603
 604 # MinGW
 605 "mingw", "gcc:-mno-cygwin -DL_ENDIAN -DWIN32_LEAN_AND_MEAN -fomit-frame-pointer -O3 -march=i486 -Wall::-D_MT:MINGW32:-lws2_32 -lgdi32 -lcrypt32:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts} EXPORT_VAR_AS_FN:${x86_asm}:coff:win32:cygwin-shared:-D_WINDLL -DOPENSSL_USE_APPLINK:-mno-cygwin:.dll.a",
 606 # As for OPENSSL_USE_APPLINK. Applink makes it possible to use .dll
 607 # compiled with one compiler with application compiled with another
 608 # compiler. It's possible to engage Applink support in mingw64 build,
 609 # but it's not done, because till mingw64 supports structured exception
 610 # handling, one can't seriously consider its binaries for using with
 611 # non-mingw64 run-time environment. And as mingw64 is always consistent
 612 # with itself, Applink is never engaged and can as well be omitted.
 613 "mingw64", "gcc:-mno-cygwin -DL_ENDIAN -O3 -Wall -DWIN32_LEAN_AND_MEAN -DUNICODE -D_UNICODE::-D_MT:MINGW64:-lws2_32 -lgdi32 -lcrypt32:SIXTY_FOUR_BIT RC4_CHUNK_LL DES_INT EXPORT_VAR_AS_FN:${x86_64_asm}:mingw64:win32:cygwin-shared:-D_WINDLL:-mno-cygwin:.dll.a",
 614
 615 # UWIN
 616 "UWIN", "cc:-DTERMIOS -DL_ENDIAN -O -Wall:::UWIN::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${no_asm}:win32",
 617
 618 # Cygwin
 619 "Cygwin", "gcc:-DTERMIOS -DL_ENDIAN -fomit-frame-pointer -O3 -march=i486 -Wall:::CYGWIN::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_asm}:coff:dlfcn:cygwin-shared:-D_WINDLL:-shared:.dll.a",
 620 "Cygwin-x86_64", "gcc:-DTERMIOS -DL_ENDIAN -O3 -Wall:::CYGWIN::SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:mingw64:dlfcn:cygwin-shared:-D_WINDLL:-shared:.dll.a",
 621
 622 # NetWare from David Ward (dsward@novell.com)
 623 # requires either MetroWerks NLM development tools, or gcc / nlmconv
 624 # NetWare defaults socket bio to WinSock sockets. However,
 625 # the builds can be configured to use BSD sockets instead.
 626 # netware-clib => legacy CLib c-runtime support
 627 "netware-clib", "mwccnlm::::::${x86_gcc_opts}::",
 628 "netware-clib-bsdsock", "mwccnlm::::::${x86_gcc_opts}::",
 629 "netware-clib-gcc", "i586-netware-gcc:-nostdinc -I/ndk/nwsdk/include/nlm -I/ndk/ws295sdk/include -DL_ENDIAN -DNETWARE_CLIB -DOPENSSL_SYSNAME_NETWARE -O2 -Wall:::::${x86_gcc_opts}::",
 630 "netware-clib-bsdsock-gcc", "i586-netware-gcc:-nostdinc -I/ndk/nwsdk/include/nlm -DNETWARE_BSDSOCK -DNETDB_USE_INTERNET -DL_ENDIAN -DNETWARE_CLIB -DOPENSSL_SYSNAME_NETWARE -O2 -Wall:::::${x86_gcc_opts}::",
 631 # netware-libc => LibC/NKS support
 632 "netware-libc", "mwccnlm::::::BN_LLONG ${x86_gcc_opts}::",
 633 "netware-libc-bsdsock", "mwccnlm::::::BN_LLONG ${x86_gcc_opts}::",
 634 "netware-libc-gcc", "i586-netware-gcc:-nostdinc -I/ndk/libc/include -I/ndk/libc/include/winsock -DL_ENDIAN -DNETWARE_LIBC -DOPENSSL_SYSNAME_NETWARE -DTERMIO -O2 -Wall:::::BN_LLONG ${x86_gcc_opts}::",
 635 "netware-libc-bsdsock-gcc", "i586-netware-gcc:-nostdinc -I/ndk/libc/include -DNETWARE_BSDSOCK -DL_ENDIAN -DNETWARE_LIBC -DOPENSSL_SYSNAME_NETWARE -DTERMIO -O2 -Wall:::::BN_LLONG ${x86_gcc_opts}::",
 636
 637 # DJGPP
 638 "DJGPP", "gcc:-I/dev/env/WATT_ROOT/inc -DTERMIO -DL_ENDIAN -fomit-frame-pointer -O2 -Wall:::MSDOS:-L/dev/env/WATT_ROOT/lib -lwatt:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_asm}:a.out:",
 639
 640 # Ultrix from Bernhard Simon <simon@zid.tuwien.ac.at>
 641 "ultrix-cc","cc:-std1 -O -Olimit 2500 -DL_ENDIAN::(unknown):::::::",
 642 "ultrix-gcc","gcc:-O3 -DL_ENDIAN::(unknown):::BN_LLONG::::",
 643 # K&R C is no longer supported; you need gcc on old Ultrix installations
 644 ##"ultrix","cc:-O2 -DNOPROTO -DNOCONST -DL_ENDIAN::(unknown):::::::",
 645
 646 ##### MacOS X (a.k.a. Rhapsody or Darwin) setup
 647 "rhapsody-ppc-cc","cc:-O3 -DB_ENDIAN::(unknown):MACOSX_RHAPSODY::BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${no_asm}::",
 648 "darwin-ppc-cc","cc:-arch ppc -O3 -DB_ENDIAN -Wa,-force_cpusubtype_ALL::-D_REENTRANT:MACOSX:-Wl,-search_paths_first%:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${ppc32_asm}:osx32:dlfcn:darwin-shared:-fPIC -fno-common:-arch ppc -dynamiclib:.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
 649 "darwin64-ppc-cc","cc:-arch ppc64 -O3 -DB_ENDIAN::-D_REENTRANT:MACOSX:-Wl,-search_paths_first%:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${ppc64_asm}:osx64:dlfcn:darwin-shared:-fPIC -fno-common:-arch ppc64 -dynamiclib:.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
 650 "darwin-i386-cc","cc:-arch i386 -O3 -fomit-frame-pointer -DL_ENDIAN::-D_REENTRANT:MACOSX:-Wl,-search_paths_first%:BN_LLONG RC4_INT RC4_CHUNK DES_UNROLL BF_PTR:".eval{my $asm=$x86_asm;$asm=~s/cast\-586\.o//;$asm}.":macosx:dlfcn:darwin-shared:-fPIC -fno-common:-arch i386 -dynamiclib:.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
 651 "debug-darwin-i386-cc","cc:-arch i386 -g3 -DL_ENDIAN::-D_REENTRANT:MACOSX:-Wl,-search_paths_first%:BN_LLONG RC4_INT RC4_CHUNK DES_UNROLL BF_PTR:${x86_asm}:macosx:dlfcn:darwin-shared:-fPIC -fno-common:-arch i386 -dynamiclib:.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
 652 "darwin64-x86_64-cc","cc:-arch x86_64 -O3 -DL_ENDIAN -Wall::-D_REENTRANT:MACOSX:-Wl,-search_paths_first%:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:".eval{my $asm=$x86_64_asm;$asm=~s/rc4\-[^:]+//;$asm}.":macosx:dlfcn:darwin-shared:-fPIC -fno-common:-arch x86_64 -dynamiclib:.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
 653 "debug-darwin64-x86_64-cc","cc:-arch x86_64 -ggdb -g2 -O0 -DL_ENDIAN -Wall::-D_REENTRANT:MACOSX:-Wl,-search_paths_first%:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:".eval{my $asm=$x86_64_asm;$asm=~s/rc4\-[^:]+//;$asm}.":macosx:dlfcn:darwin-shared:-fPIC -fno-common:-arch x86_64 -dynamiclib:.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
 654 "debug-darwin-ppc-cc","cc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DCRYPTO_MDEBUG -DB_ENDIAN -g -Wall -O::-D_REENTRANT:MACOSX::BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${ppc32_asm}:osx32:dlfcn:darwin-shared:-fPIC:-dynamiclib:.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
 655 # iPhoneOS/iOS
 656 "iphoneos-cross","llvm-gcc:-O3 -isysroot \$(CROSS_TOP)/SDKs/\$(CROSS_SDK) -fomit-frame-pointer -fno-common::-D_REENTRANT:iOS:-Wl,-search_paths_first%:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${no_asm}:dlfcn:darwin-shared:-fPIC -fno-common:-dynamiclib:.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
 657
 658 ##### A/UX
 659 "aux3-gcc","gcc:-O2 -DTERMIO::(unknown):AUX:-lbsd:RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:::",
 660
 661 ##### Sony NEWS-OS 4.x
 662 "newsos4-gcc","gcc:-O -DB_ENDIAN::(unknown):NEWS4:-lmld -liberty:BN_LLONG RC4_CHAR RC4_CHUNK DES_PTR DES_RISC1 DES_UNROLL BF_PTR::::",
 663
 664 ##### GNU Hurd
 665 "hurd-x86",  "gcc:-DL_ENDIAN -O3 -fomit-frame-pointer -march=i486 -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC",
 666
 667 ##### OS/2 EMX
 668 "OS2-EMX", "gcc::::::::",
 669
 670 ##### VxWorks for various targets
 671 "vxworks-ppc60x","ccppc:-D_REENTRANT -mrtp -mhard-float -mstrict-align -fno-implicit-fp -DPPC32_fp60x -O2 -fstrength-reduce -fno-builtin -fno-strict-aliasing -Wall -DCPU=PPC32 -DTOOL_FAMILY=gnu -DTOOL=gnu -I\$(WIND_BASE)/target/usr/h -I\$(WIND_BASE)/target/usr/h/wrn/coreip:::VXWORKS:-Wl,--defsym,__wrs_rtp_base=0xe0000000 -L \$(WIND_BASE)/target/usr/lib/ppc/PPC32/common:::::",
 672 "vxworks-ppcgen","ccppc:-D_REENTRANT -mrtp -msoft-float -mstrict-align -O1 -fno-builtin -fno-strict-aliasing -Wall -DCPU=PPC32 -DTOOL_FAMILY=gnu -DTOOL=gnu -I\$(WIND_BASE)/target/usr/h -I\$(WIND_BASE)/target/usr/h/wrn/coreip:::VXWORKS:-Wl,--defsym,__wrs_rtp_base=0xe0000000 -L \$(WIND_BASE)/target/usr/lib/ppc/PPC32/sfcommon:::::",
 673 "vxworks-ppc405","ccppc:-g -msoft-float -mlongcall -DCPU=PPC405 -I\$(WIND_BASE)/target/h:::VXWORKS:-r:::::",
 674 "vxworks-ppc750","ccppc:-ansi -nostdinc -DPPC750 -D_REENTRANT -fvolatile -fno-builtin -fno-for-scope -fsigned-char -Wall -msoft-float -mlongcall -DCPU=PPC604 -I\$(WIND_BASE)/target/h \$(DEBUG_FLAG):::VXWORKS:-r:::::",
 675 "vxworks-ppc750-debug","ccppc:-ansi -nostdinc -DPPC750 -D_REENTRANT -fvolatile -fno-builtin -fno-for-scope -fsigned-char -Wall -msoft-float -mlongcall -DCPU=PPC604 -I\$(WIND_BASE)/target/h -DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DPEDANTIC -DDEBUG_SAFESTACK -DDEBUG -g:::VXWORKS:-r:::::",
 676 "vxworks-ppc860","ccppc:-nostdinc -msoft-float -DCPU=PPC860 -DNO_STRINGS_H -I\$(WIND_BASE)/target/h:::VXWORKS:-r:::::",
 677 "vxworks-simlinux","ccpentium:-B\$(WIND_BASE)/host/\$(WIND_HOST_TYPE)/lib/gcc-lib/ -D_VSB_CONFIG_FILE=\"\$(WIND_BASE)/target/lib/h/config/vsbConfig.h\" -DL_ENDIAN -DCPU=SIMLINUX -DTOOL_FAMILY=gnu -DTOOL=gnu -fno-builtin -fno-defer-pop -DNO_STRINGS_H -I\$(WIND_BASE)/target/h -I\$(WIND_BASE)/target/h/wrn/coreip -DOPENSSL_NO_HW_PADLOCK:::VXWORKS:-r::${no_asm}::::::ranlibpentium:",
 678 "vxworks-mips","ccmips:-mrtp -mips2 -O -G 0 -B\$(WIND_BASE)/host/\$(WIND_HOST_TYPE)/lib/gcc-lib/ -D_VSB_CONFIG_FILE=\"\$(WIND_BASE)/target/lib/h/config/vsbConfig.h\" -DCPU=MIPS32 -msoft-float -mno-branch-likely -DTOOL_FAMILY=gnu -DTOOL=gnu -fno-builtin -fno-defer-pop -DNO_STRINGS_H -I\$(WIND_BASE)/target/usr/h -I\$(WIND_BASE)/target/h/wrn/coreip::-D_REENTRANT:VXWORKS:-Wl,--defsym,__wrs_rtp_base=0xe0000000 -L \$(WIND_BASE)/target/usr/lib/mips/MIPSI32/sfcommon::${mips32_asm}:o32::::::ranlibmips:",
 679
 680 ##### Compaq Non-Stop Kernel (Tandem)
 681 "tandem-c89","c89:-Ww -D__TANDEM -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1 -D_TANDEM_SOURCE -DB_ENDIAN::(unknown):::THIRTY_TWO_BIT:::",
 682
 683 # uClinux
 684 "uClinux-dist","$ENV{'CC'}:\$(CFLAGS)::-D_REENTRANT::\$(LDFLAGS) \$(LDLIBS):BN_LLONG:${no_asm}:$ENV{'LIBSSL_dlfcn'}:linux-shared:-fPIC:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):$ENV{'RANLIB'}::",
 685 "uClinux-dist64","$ENV{'CC'}:\$(CFLAGS)::-D_REENTRANT::\$(LDFLAGS) \$(LDLIBS):SIXTY_FOUR_BIT_LONG:${no_asm}:$ENV{'LIBSSL_dlfcn'}:linux-shared:-fPIC:-shared:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):$ENV{'RANLIB'}::",
 686
 687 );
 688
 689 my @MK1MF_Builds=qw(VC-WIN64I VC-WIN64A
 690                     debug-VC-WIN64I debug-VC-WIN64A
 691                     VC-NT VC-CE VC-WIN32 debug-VC-WIN32
 692                     BC-32
 693                     netware-clib netware-clib-bsdsock
 694                     netware-libc netware-libc-bsdsock);
 695
 696 my $idx = 0;
 697 my $idx_cc = $idx++;
 698 my $idx_cflags = $idx++;
 699 my $idx_unistd = $idx++;
 700 my $idx_thread_cflag = $idx++;
 701 my $idx_sys_id = $idx++;
 702 my $idx_lflags = $idx++;
 703 my $idx_bn_ops = $idx++;
 704 my $idx_cpuid_obj = $idx++;
 705 my $idx_bn_obj = $idx++;
 706 my $idx_ec_obj = $idx++;
 707 my $idx_des_obj = $idx++;
 708 my $idx_aes_obj = $idx++;
 709 my $idx_bf_obj = $idx++;
 710 my $idx_md5_obj = $idx++;
 711 my $idx_sha1_obj = $idx++;
 712 my $idx_cast_obj = $idx++;
 713 my $idx_rc4_obj = $idx++;
 714 my $idx_rmd160_obj = $idx++;
 715 my $idx_rc5_obj = $idx++;
 716 my $idx_wp_obj = $idx++;
 717 my $idx_cmll_obj = $idx++;
 718 my $idx_modes_obj = $idx++;
 719 my $idx_engines_obj = $idx++;
 720 my $idx_perlasm_scheme = $idx++;
 721 my $idx_dso_scheme = $idx++;
 722 my $idx_shared_target = $idx++;
 723 my $idx_shared_cflag = $idx++;
 724 my $idx_shared_ldflag = $idx++;
 725 my $idx_shared_extension = $idx++;
 726 my $idx_ranlib = $idx++;
 727 my $idx_arflags = $idx++;
 728 my $idx_multilib = $idx++;
 729
 730 my $prefix="";
 731 my $libdir="";
 732 my $openssldir="";
 733 my $exe_ext="";
 734 my $install_prefix= "$ENV{'INSTALL_PREFIX'}";
 735 my $cross_compile_prefix="";
 736 my $fipsdir="/usr/local/ssl/fips-2.0";
 737 my $fipslibdir="";
 738 my $baseaddr="0xFB00000";
 739 my $no_threads=0;
 740 my $threads=0;
 741 my $no_shared=0; # but "no-shared" is default
 742 my $zlib=1;      # but "no-zlib" is default
 743 my $no_krb5=0;   # but "no-krb5" is implied unless "--with-krb5-..." is used
 744 my $no_rfc3779=1; # but "no-rfc3779" is default
 745 my $no_asm=0;
 746 my $no_dso=0;
 747 my $no_gmp=0;
 748 my @skip=();
 749 my $Makefile="Makefile";
 750 my $des_locl="crypto/des/des_locl.h";
 751 my $des ="crypto/des/des.h";
 752 my $bn  ="crypto/bn/bn.h";
 753 my $md2 ="crypto/md2/md2.h";
 754 my $rc4 ="crypto/rc4/rc4.h";
 755 my $rc4_locl="crypto/rc4/rc4_locl.h";
 756 my $idea        ="crypto/idea/idea.h";
 757 my $rc2 ="crypto/rc2/rc2.h";
 758 my $bf  ="crypto/bf/bf_locl.h";
 759 my $bn_asm      ="bn_asm.o";
 760 my $des_enc="des_enc.o fcrypt_b.o";
 761 my $aes_enc="aes_core.o aes_cbc.o";
 762 my $bf_enc      ="bf_enc.o";
 763 my $cast_enc="c_enc.o";
 764 my $rc4_enc="rc4_enc.o rc4_skey.o";
 765 my $rc5_enc="rc5_enc.o";
 766 my $md5_obj="";
 767 my $sha1_obj="";
 768 my $rmd160_obj="";
 769 my $cmll_enc="camellia.o cmll_misc.o cmll_cbc.o";
 770 my $processor="";
 771 my $default_ranlib;
 772 my $perl;
 773 my $fips=0;
 774
 775 if (exists $ENV{FIPSDIR})
 776         {
 777         $fipsdir = $ENV{FIPSDIR};
 778         $fipsdir =~ s/\/$//;
 779         }
 780
 781 # All of the following is disabled by default (RC5 was enabled before 0.9.8):
 782
 783 my %disabled = ( # "what"         => "comment" [or special keyword "experimental"]
 784                  "ec_nistp_64_gcc_128" => "default",
 785                  "gmp"            => "default",
 786                  "jpake"          => "experimental",
 787                  "libunbound"     => "experimental",
 788                  "md2"            => "default",
 789                  "rc5"            => "default",
 790                  "rfc3779"        => "default",
 791                  "sctp"           => "default",
 792                  "shared"         => "default",
 793                  "ssl-trace"      => "default",
 794                  "ssl2"           => "default",
 795                  "store"          => "experimental",
 796                  "unit-test"      => "default",
 797                  "weak-ssl-ciphers" => "default",
 798                  "zlib"           => "default",
 799                  "zlib-dynamic"   => "default"
 800                );
 801 my @experimental = ();
 802
 803 # This is what $depflags will look like with the above defaults
 804 # (we need this to see if we should advise the user to run "make depend"):
 805 my $default_depflags = " -DOPENSSL_NO_EC_NISTP_64_GCC_128 -DOPENSSL_NO_GMP -DOPENSSL_NO_JPAKE -DOPENSSL_NO_LIBUNBOUND -DOPENSSL_NO_MD2 -DOPENSSL_NO_RC5 -DOPENSSL_NO_RFC3779 -DOPENSSL_NO_SCTP -DOPENSSL_NO_SSL_TRACE -DOPENSSL_NO_SSL2 -DOPENSSL_NO_STORE -DOPENSSL_NO_UNIT_TEST -DOPENSSL_NO_WEAK_SSL_CIPHERS";
 806
 807 # Explicit "no-..." options will be collected in %disabled along with the defaults.
 808 # To remove something from %disabled, use "enable-foo" (unless it's experimental).
 809 # For symmetry, "disable-foo" is a synonym for "no-foo".
 810
 811 # For features called "experimental" here, a more explicit "experimental-foo" is needed to enable.
 812 # We will collect such requests in @experimental.
 813 # To avoid accidental use of experimental features, applications will have to use -DOPENSSL_EXPERIMENTAL_FOO.
 814
 815
 816 my $no_sse2=0;
 817
 818 &usage if ($#ARGV < 0);
 819
 820 my $flags;
 821 my $depflags;
 822 my $openssl_experimental_defines;
 823 my $openssl_algorithm_defines;
 824 my $openssl_thread_defines;
 825 my $openssl_sys_defines="";
 826 my $openssl_other_defines;
 827 my $libs;
 828 my $libkrb5="";
 829 my $target;
 830 my $options;
 831 my $symlink;
 832 my $make_depend=0;
 833 my %withargs=();
 834
 835 my @argvcopy=@ARGV;
 836 my $argvstring="";
 837 my $argv_unprocessed=1;
 838
 839 while($argv_unprocessed)
 840         {
 841         $flags="";
 842         $depflags="";
 843         $openssl_experimental_defines="";
 844         $openssl_algorithm_defines="";
 845         $openssl_thread_defines="";
 846         $openssl_sys_defines="";
 847         $openssl_other_defines="";
 848         $libs="";
 849         $target="";
 850         $options="";
 851         $symlink=1;
 852
 853         $argv_unprocessed=0;
 854         $argvstring=join(' ',@argvcopy);
 855
 856 PROCESS_ARGS:
 857         foreach (@argvcopy)
 858                 {
 859                 s /^-no-/no-/; # some people just can't read the instructions
 860
 861                 # rewrite some options in "enable-..." form
 862                 s /^-?-?shared$/enable-shared/;
 863                 s /^sctp$/enable-sctp/;
 864                 s /^threads$/enable-threads/;
 865                 s /^zlib$/enable-zlib/;
 866                 s /^zlib-dynamic$/enable-zlib-dynamic/;
 867
 868                 if (/^no-(.+)$/ || /^disable-(.+)$/)
 869                         {
 870                         if (!($disabled{$1} eq "experimental"))
 871                                 {
 872                                 if ($1 eq "ssl")
 873                                         {
 874                                         $disabled{"ssl2"} = "option(ssl)";
 875                                         $disabled{"ssl3"} = "option(ssl)";
 876                                         }
 877                                 elsif ($1 eq "tls")
 878                                         {
 879                                         $disabled{"tls1"} = "option(tls)"
 880                                         }
 881                                 elsif ($1 eq "ssl3-method")
 882                                         {
 883                                         $disabled{"ssl3-method"} = "option(ssl)";
 884                                         $disabled{"ssl3"} = "option(ssl)";
 885                                         }
 886                                 else
 887                                         {
 888                                         $disabled{$1} = "option";
 889                                         }
 890                                 }
 891                         }
 892                 elsif (/^enable-(.+)$/ || /^experimental-(.+)$/)
 893                         {
 894                         my $algo = $1;
 895                         if ($disabled{$algo} eq "experimental")
 896                                 {
 897                                 die "You are requesting an experimental feature; please say 'experimental-$algo' if you are sure\n"
 898                                         unless (/^experimental-/);
 899                                 push @experimental, $algo;
 900                                 }
 901                         delete $disabled{$algo};
 902
 903                         $threads = 1 if ($algo eq "threads");
 904                         }
 905                 elsif (/^--test-sanity$/)
 906                         {
 907                         exit(&test_sanity());
 908                         }
 909                 elsif (/^--strict-warnings/)
 910                         {
 911                         $strict_warnings = 1;
 912                         }
 913                 elsif (/^reconfigure/ || /^reconf/)
 914                         {
 915                         if (open(IN,"<$Makefile"))
 916                                 {
 917                                 while (<IN>)
 918                                         {
 919                                         chomp;
 920                                         if (/^CONFIGURE_ARGS=(.*)/)
 921                                                 {
 922                                                 $argvstring=$1;
 923                                                 @argvcopy=split(' ',$argvstring);
 924                                                 die "Incorrect data to reconfigure, please do a normal configuration\n"
 925                                                         if (grep(/^reconf/,@argvcopy));
 926                                                 print "Reconfiguring with: $argvstring\n";
 927                                                 $argv_unprocessed=1;
 928                                                 close(IN);
 929                                                 last PROCESS_ARGS;
 930                                                 }
 931                                         }
 932                                 close(IN);
 933                                 }
 934                         die "Insufficient data to reconfigure, please do a normal configuration\n";
 935                         }
 936                 elsif (/^386$/)
 937                         { $processor=386; }
 938                 elsif (/^fips$/)
 939                         {
 940                         $fips=1;
 941                         }
 942                 elsif (/^rsaref$/)
 943                         {
 944                         # No RSAref support any more since it's not needed.
 945                         # The check for the option is there so scripts aren't
 946                         # broken
 947                         }
 948                 elsif (/^[-+]/)
 949                         {
 950                         if (/^--prefix=(.*)$/)
 951                                 {
 952                                 $prefix=$1;
 953                                 }
 954                         elsif (/^--libdir=(.*)$/)
 955                                 {
 956                                 $libdir=$1;
 957                                 }
 958                         elsif (/^--openssldir=(.*)$/)
 959                                 {
 960                                 $openssldir=$1;
 961                                 }
 962                         elsif (/^--install.prefix=(.*)$/)
 963                                 {
 964                                 $install_prefix=$1;
 965                                 }
 966                         elsif (/^--with-krb5-(dir|lib|include|flavor)=(.*)$/)
 967                                 {
 968                                 $withargs{"krb5-".$1}=$2;
 969                                 }
 970                         elsif (/^--with-zlib-lib=(.*)$/)
 971                                 {
 972                                 $withargs{"zlib-lib"}=$1;
 973                                 }
 974                         elsif (/^--with-zlib-include=(.*)$/)
 975                                 {
 976                                 $withargs{"zlib-include"}="-I$1";
 977                                 }
 978                         elsif (/^--with-fipsdir=(.*)$/)
 979                                 {
 980                                 $fipsdir="$1";
 981                                 }
 982                         elsif (/^--with-fipslibdir=(.*)$/)
 983                                 {
 984                                 $fipslibdir="$1";
 985                                 }
 986                         elsif (/^--with-baseaddr=(.*)$/)
 987                                 {
 988                                 $baseaddr="$1";
 989                                 }
 990                         elsif (/^--cross-compile-prefix=(.*)$/)
 991                                 {
 992                                 $cross_compile_prefix=$1;
 993                                 }
 994                         elsif (/^-[lL](.*)$/ or /^-Wl,/)
 995                                 {
 996                                 $libs.=$_." ";
 997                                 }
 998                         else    # common if (/^[-+]/), just pass down...
 999                                 {
1000                                 $_ =~ s/%([0-9a-f]{1,2})/chr(hex($1))/gei;
1001                                 $flags.=$_." ";
1002                                 }
1003                         }
1004                 elsif ($_ =~ /^([^:]+):(.+)$/)
1005                         {
1006                         eval "\$table{\$1} = \"$2\""; # allow $xxx constructs in the string
1007                         $target=$1;
1008                         }
1009                 else
1010                         {
1011                         die "target already defined - $target (offending arg: $_)\n" if ($target ne "");
1012                         $target=$_;
1013                         }
1014
1015                 unless ($_ eq $target || /^no-/ || /^disable-/)
1016                         {
1017                         # "no-..." follows later after implied disactivations
1018                         # have been derived.  (Don't take this too seroiusly,
1019                         # we really only write OPTIONS to the Makefile out of
1020                         # nostalgia.)
1021
1022                         if ($options eq "")
1023                                 { $options = $_; }
1024                         else
1025                                 { $options .= " ".$_; }
1026                         }
1027                 }
1028         }
1029
1030
1031
1032 if ($processor eq "386")
1033         {
1034         $disabled{"sse2"} = "forced";
1035         }
1036
1037 if (!defined($withargs{"krb5-flavor"}) || $withargs{"krb5-flavor"} eq "")
1038         {
1039         $disabled{"krb5"} = "krb5-flavor not specified";
1040         }
1041
1042 if (!defined($disabled{"zlib-dynamic"}))
1043         {
1044         # "zlib-dynamic" was specifically enabled, so enable "zlib"
1045         delete $disabled{"zlib"};
1046         }
1047
1048 if (defined($disabled{"rijndael"}))
1049         {
1050         $disabled{"aes"} = "forced";
1051         }
1052 if (defined($disabled{"des"}))
1053         {
1054         $disabled{"mdc2"} = "forced";
1055         }
1056 if (defined($disabled{"ec"}))
1057         {
1058         $disabled{"ecdsa"} = "forced";
1059         $disabled{"ecdh"} = "forced";
1060         }
1061
1062 # SSL 2.0 requires MD5 and RSA
1063 if (defined($disabled{"md5"}) || defined($disabled{"rsa"}))
1064         {
1065         $disabled{"ssl2"} = "forced";
1066         }
1067
1068 if ($fips && $fipslibdir eq "")
1069         {
1070         $fipslibdir = $fipsdir . "/lib/";
1071         }
1072
1073 # RSAX ENGINE sets default non-FIPS RSA method.
1074 if ($fips)
1075         {
1076         $disabled{"rsax"} = "forced";
1077         }
1078
1079 # SSL 3.0 and TLS requires MD5 and SHA and either RSA or DSA+DH
1080 if (defined($disabled{"md5"}) || defined($disabled{"sha"})
1081     || (defined($disabled{"rsa"})
1082         && (defined($disabled{"dsa"}) || defined($disabled{"dh"}))))
1083         {
1084         $disabled{"ssl3"} = "forced";
1085         $disabled{"tls1"} = "forced";
1086         }
1087
1088 if (defined($disabled{"ec"}) || defined($disabled{"dsa"})
1089     || defined($disabled{"dh"}))
1090         {
1091         $disabled{"gost"} = "forced";
1092         }
1093
1094 # SRP and HEARTBEATS require TLSEXT
1095 if (defined($disabled{"tlsext"}))
1096         {
1097         $disabled{"srp"} = "forced";
1098         $disabled{"heartbeats"} = "forced";
1099         }
1100
1101 if ($target eq "TABLE") {
1102         foreach $target (sort keys %table) {
1103                 print_table_entry($target);
1104         }
1105         exit 0;
1106 }
1107
1108 if ($target eq "LIST") {
1109         foreach (sort keys %table) {
1110                 print;
1111                 print "\n";
1112         }
1113         exit 0;
1114 }
1115
1116 if ($target =~ m/^CygWin32(-.*)$/) {
1117         $target = "Cygwin".$1;
1118 }
1119
1120 print "Configuring for $target\n";
1121
1122 &usage if (!defined($table{$target}));
1123
1124
1125 foreach (sort (keys %disabled))
1126         {
1127         $options .= " no-$_";
1128
1129         printf "    no-%-12s %-10s", $_, "[$disabled{$_}]";
1130
1131         if (/^dso$/)
1132                 { $no_dso = 1; }
1133         elsif (/^threads$/)
1134                 { $no_threads = 1; }
1135         elsif (/^shared$/)
1136                 { $no_shared = 1; }
1137         elsif (/^zlib$/)
1138                 { $zlib = 0; }
1139         elsif (/^static-engine$/)
1140                 { }
1141         elsif (/^zlib-dynamic$/)
1142                 { }
1143         elsif (/^symlinks$/)
1144                 { $symlink = 0; }
1145         elsif (/^sse2$/)
1146                 { $no_sse2 = 1; }
1147         else
1148                 {
1149                 my ($ALGO, $algo);
1150                 ($ALGO = $algo = $_) =~ tr/[\-a-z]/[_A-Z]/;
1151
1152                 if (/^asm$/ || /^err$/ || /^hw$/ || /^hw-/)
1153                         {
1154                         $openssl_other_defines .= "#define OPENSSL_NO_$ALGO\n";
1155                         print " OPENSSL_NO_$ALGO";
1156
1157                         if (/^err$/)    { $flags .= "-DOPENSSL_NO_ERR "; }
1158                         elsif (/^asm$/) { $no_asm = 1; }
1159                         }
1160                 else
1161                         {
1162                         $openssl_algorithm_defines .= "#define OPENSSL_NO_$ALGO\n";
1163                         print " OPENSSL_NO_$ALGO";
1164
1165                         if (/^krb5$/)
1166                                 { $no_krb5 = 1; }
1167                         else
1168                                 {
1169                                 push @skip, $algo;
1170                                 # fix-up crypto/directory name(s)
1171                                 @skip[$#skip]="whrlpool" if $algo eq "whirlpool";
1172                                 print " (skip dir)";
1173
1174                                 $depflags .= " -DOPENSSL_NO_$ALGO";
1175                                 }
1176                         }
1177                         if (/^comp$/)   { $zlib = 0; }
1178                 }
1179
1180         print "\n";
1181         }
1182
1183 my $exp_cflags = "";
1184 foreach (sort @experimental)
1185         {
1186         my $ALGO;
1187         ($ALGO = $_) =~ tr/[a-z]/[A-Z]/;
1188
1189         # opensslconf.h will set OPENSSL_NO_... unless OPENSSL_EXPERIMENTAL_... is defined
1190         $openssl_experimental_defines .= "#define OPENSSL_NO_$ALGO\n";
1191         $exp_cflags .= " -DOPENSSL_EXPERIMENTAL_$ALGO";
1192         }
1193
1194 my $IsMK1MF=scalar grep /^$target$/,@MK1MF_Builds;
1195
1196 $exe_ext=".exe" if ($target eq "Cygwin" || $target eq "DJGPP" || $target =~ /^mingw/);
1197 $exe_ext=".nlm" if ($target =~ /netware/);
1198 $exe_ext=".pm"  if ($target =~ /vos/);
1199 $openssldir="/usr/local/ssl" if ($openssldir eq "" and $prefix eq "");
1200 $prefix=$openssldir if $prefix eq "";
1201
1202 $default_ranlib= &which("ranlib") or $default_ranlib="true";
1203 $perl=$ENV{'PERL'} or $perl=&which("perl5") or $perl=&which("perl")
1204   or $perl="perl";
1205 my $make = $ENV{'MAKE'} || "make";
1206
1207 $cross_compile_prefix=$ENV{'CROSS_COMPILE'} if $cross_compile_prefix eq "";
1208
1209 chop $openssldir if $openssldir =~ /\/$/;
1210 chop $prefix if $prefix =~ /.\/$/;
1211
1212 $openssldir=$prefix . "/ssl" if $openssldir eq "";
1213 $openssldir=$prefix . "/" . $openssldir if $openssldir !~ /(^\/|^[a-zA-Z]:[\\\/])/;
1214
1215
1216 print "IsMK1MF=$IsMK1MF\n";
1217
1218 my @fields = split(/\s*:\s*/,$table{$target} . ":" x 30 , -1);
1219 my $cc = $fields[$idx_cc];
1220 # Allow environment CC to override compiler...
1221 if($ENV{CC}) {
1222     $cc = $ENV{CC};
1223 }
1224
1225 my $cflags = $fields[$idx_cflags];
1226 my $unistd = $fields[$idx_unistd];
1227 my $thread_cflag = $fields[$idx_thread_cflag];
1228 my $sys_id = $fields[$idx_sys_id];
1229 my $lflags = $fields[$idx_lflags];
1230 my $bn_ops = $fields[$idx_bn_ops];
1231 my $cpuid_obj = $fields[$idx_cpuid_obj];
1232 my $bn_obj = $fields[$idx_bn_obj];
1233 my $ec_obj = $fields[$idx_ec_obj];
1234 my $des_obj = $fields[$idx_des_obj];
1235 my $aes_obj = $fields[$idx_aes_obj];
1236 my $bf_obj = $fields[$idx_bf_obj];
1237 my $md5_obj = $fields[$idx_md5_obj];
1238 my $sha1_obj = $fields[$idx_sha1_obj];
1239 my $cast_obj = $fields[$idx_cast_obj];
1240 my $rc4_obj = $fields[$idx_rc4_obj];
1241 my $rmd160_obj = $fields[$idx_rmd160_obj];
1242 my $rc5_obj = $fields[$idx_rc5_obj];
1243 my $wp_obj = $fields[$idx_wp_obj];
1244 my $cmll_obj = $fields[$idx_cmll_obj];
1245 my $modes_obj = $fields[$idx_modes_obj];
1246 my $engines_obj = $fields[$idx_engines_obj];
1247 my $perlasm_scheme = $fields[$idx_perlasm_scheme];
1248 my $dso_scheme = $fields[$idx_dso_scheme];
1249 my $shared_target = $fields[$idx_shared_target];
1250 my $shared_cflag = $fields[$idx_shared_cflag];
1251 my $shared_ldflag = $fields[$idx_shared_ldflag];
1252 my $shared_extension = $fields[$idx_shared_extension];
1253 my $ranlib = $ENV{'RANLIB'} || $fields[$idx_ranlib];
1254 my $ar = $ENV{'AR'} || "ar";
1255 my $arflags = $fields[$idx_arflags];
1256 my $windres = $ENV{'RC'} || $ENV{'WINDRES'} || "windres";
1257 my $multilib = $fields[$idx_multilib];
1258
1259 # if $prefix/lib$multilib is not an existing directory, then
1260 # assume that it's not searched by linker automatically, in
1261 # which case adding $multilib suffix causes more grief than
1262 # we're ready to tolerate, so don't...
1263 $multilib="" if !-d "$prefix/lib$multilib";
1264
1265 $libdir="lib$multilib" if $libdir eq "";
1266
1267 $cflags = "$cflags$exp_cflags";
1268
1269 # '%' in $lflags is used to split flags to "pre-" and post-flags
1270 my ($prelflags,$postlflags)=split('%',$lflags);
1271 if (defined($postlflags))       { $lflags=$postlflags;  }
1272 else                            { $lflags=$prelflags; undef $prelflags; }
1273
1274 if ($target =~ /^mingw/ && `$cross_compile_prefix$cc --target-help 2>&1` !~ m/\-mno\-cygwin/m)
1275         {
1276         $cflags =~ s/\-mno\-cygwin\s*//;
1277         $shared_ldflag =~ s/\-mno\-cygwin\s*//;
1278         }
1279
1280 if ($target =~ /linux.*\-mips/ && !$no_asm && $flags !~ /\-m(ips|arch=)/) {
1281         # minimally required architecture flags for assembly modules
1282         $cflags="-mips2 $cflags" if ($target =~ /mips32/);
1283         $cflags="-mips3 $cflags" if ($target =~ /mips64/);
1284 }
1285
1286 my $no_shared_warn=0;
1287 my $no_user_cflags=0;
1288
1289 if ($flags ne "")       { $cflags="$flags$cflags"; }
1290 else                    { $no_user_cflags=1;       }
1291
1292 # Kerberos settings.  The flavor must be provided from outside, either through
1293 # the script "config" or manually.
1294 if (!$no_krb5)
1295         {
1296         my ($lresolv, $lpath, $lext);
1297         if ($withargs{"krb5-flavor"} =~ /^[Hh]eimdal$/)
1298                 {
1299                 die "Sorry, Heimdal is currently not supported\n";
1300                 }
1301         ##### HACK to force use of Heimdal.
1302         ##### WARNING: Since we don't really have adequate support for Heimdal,
1303         #####          using this will break the build.  You'll have to make
1304         #####          changes to the source, and if you do, please send
1305         #####          patches to openssl-dev@openssl.org
1306         if ($withargs{"krb5-flavor"} =~ /^force-[Hh]eimdal$/)
1307                 {
1308                 warn "Heimdal isn't really supported.  Your build WILL break\n";
1309                 warn "If you fix the problems, please send a patch to openssl-dev\@openssl.org\n";
1310                 $withargs{"krb5-dir"} = "/usr/heimdal"
1311                         if $withargs{"krb5-dir"} eq "";
1312                 $withargs{"krb5-lib"} = "-L".$withargs{"krb5-dir"}.
1313                         "/lib -lgssapi -lkrb5 -lcom_err"
1314                         if $withargs{"krb5-lib"} eq "" && !$IsMK1MF;
1315                 $cflags="-DKRB5_HEIMDAL $cflags";
1316                 }
1317         if ($withargs{"krb5-flavor"} =~ /^[Mm][Ii][Tt]/)
1318                 {
1319                 $withargs{"krb5-dir"} = "/usr/kerberos"
1320                         if $withargs{"krb5-dir"} eq "";
1321                 $withargs{"krb5-lib"} = "-L".$withargs{"krb5-dir"}.
1322                         "/lib -lgssapi_krb5 -lkrb5 -lcom_err -lk5crypto"
1323                         if $withargs{"krb5-lib"} eq "" && !$IsMK1MF;
1324                 $cflags="-DKRB5_MIT $cflags";
1325                 $withargs{"krb5-flavor"} =~ s/^[Mm][Ii][Tt][._-]*//;
1326                 if ($withargs{"krb5-flavor"} =~ /^1[._-]*[01]/)
1327                         {
1328                         $cflags="-DKRB5_MIT_OLD11 $cflags";
1329                         }
1330                 }
1331         LRESOLV:
1332         foreach $lpath ("/lib", "/usr/lib")
1333                 {
1334                 foreach $lext ("a", "so")
1335                         {
1336                         $lresolv = "$lpath/libresolv.$lext";
1337                         last LRESOLV    if (-r "$lresolv");
1338                         $lresolv = "";
1339                         }
1340                 }
1341         $withargs{"krb5-lib"} .= " -lresolv"
1342                 if ("$lresolv" ne "");
1343         $withargs{"krb5-include"} = "-I".$withargs{"krb5-dir"}."/include"
1344                 if $withargs{"krb5-include"} eq "" &&
1345                    $withargs{"krb5-dir"} ne "";
1346         }
1347
1348 # The DSO code currently always implements all functions so that no
1349 # applications will have to worry about that from a compilation point
1350 # of view. However, the "method"s may return zero unless that platform
1351 # has support compiled in for them. Currently each method is enabled
1352 # by a define "DSO_<name>" ... we translate the "dso_scheme" config
1353 # string entry into using the following logic;
1354 my $dso_cflags;
1355 if (!$no_dso && $dso_scheme ne "")
1356         {
1357         $dso_scheme =~ tr/[a-z]/[A-Z]/;
1358         if ($dso_scheme eq "DLFCN")
1359                 {
1360                 $dso_cflags = "-DDSO_DLFCN -DHAVE_DLFCN_H";
1361                 }
1362         elsif ($dso_scheme eq "DLFCN_NO_H")
1363                 {
1364                 $dso_cflags = "-DDSO_DLFCN";
1365                 }
1366         else
1367                 {
1368                 $dso_cflags = "-DDSO_$dso_scheme";
1369                 }
1370         $cflags = "$dso_cflags $cflags";
1371         }
1372
1373 my $thread_cflags;
1374 my $thread_defines;
1375 if ($thread_cflag ne "(unknown)" && !$no_threads)
1376         {
1377         # If we know how to do it, support threads by default.
1378         $threads = 1;
1379         }
1380 if ($thread_cflag eq "(unknown)" && $threads)
1381         {
1382         # If the user asked for "threads", [s]he is also expected to
1383         # provide any system-dependent compiler options that are
1384         # necessary.
1385         if ($no_user_cflags)
1386                 {
1387                 print "You asked for multi-threading support, but didn't\n";
1388                 print "provide any system-specific compiler options\n";
1389                 exit(1);
1390                 }
1391         $thread_cflags="-DOPENSSL_THREADS $cflags" ;
1392         $thread_defines .= "#define OPENSSL_THREADS\n";
1393         }
1394 else
1395         {
1396         $thread_cflags="-DOPENSSL_THREADS $thread_cflag $cflags";
1397         $thread_defines .= "#define OPENSSL_THREADS\n";
1398 #       my $def;
1399 #       foreach $def (split ' ',$thread_cflag)
1400 #               {
1401 #               if ($def =~ s/^-D// && $def !~ /^_/)
1402 #                       {
1403 #                       $thread_defines .= "#define $def\n";
1404 #                       }
1405 #               }
1406         }
1407
1408 $lflags="$libs$lflags" if ($libs ne "");
1409
1410 if ($no_asm)
1411         {
1412         $cpuid_obj=$bn_obj=$ec_obj=
1413         $des_obj=$aes_obj=$bf_obj=$cast_obj=$rc4_obj=$rc5_obj=$cmll_obj=
1414         $modes_obj=$sha1_obj=$md5_obj=$rmd160_obj=$wp_obj=$engines_obj="";
1415         }
1416
1417 if (!$no_shared)
1418         {
1419         $cast_obj="";   # CAST assembler is not PIC
1420         }
1421
1422 if ($threads)
1423         {
1424         $cflags=$thread_cflags;
1425         $openssl_thread_defines .= $thread_defines;
1426         }
1427
1428 if ($zlib)
1429         {
1430         $cflags = "-DZLIB $cflags";
1431         if (defined($disabled{"zlib-dynamic"}))
1432                 {
1433                 if (defined($withargs{"zlib-lib"}))
1434                         {
1435                         $lflags = "$lflags -L" . $withargs{"zlib-lib"} . " -lz";
1436                         }
1437                 else
1438                         {
1439                         $lflags = "$lflags -lz";
1440                         }
1441                 }
1442         else
1443                 {
1444                 $cflags = "-DZLIB_SHARED $cflags";
1445                 }
1446         }
1447
1448 # You will find shlib_mark1 and shlib_mark2 explained in Makefile.org
1449 my $shared_mark = "";
1450 if ($shared_target eq "")
1451         {
1452         $no_shared_warn = 1 if !$no_shared;
1453         $no_shared = 1;
1454         }
1455 if (!$no_shared)
1456         {
1457         if ($shared_cflag ne "")
1458                 {
1459                 $cflags = "$shared_cflag -DOPENSSL_PIC $cflags";
1460                 }
1461         }
1462
1463 if (!$IsMK1MF)
1464         {
1465         # add {no-}static-engine to options to allow mkdef.pl to work without extra arguments
1466         if ($no_shared)
1467                 {
1468                 $openssl_other_defines.="#define OPENSSL_NO_DYNAMIC_ENGINE\n";
1469                 $options.=" static-engine";
1470                 }
1471         else
1472                 {
1473                 $openssl_other_defines.="#define OPENSSL_NO_STATIC_ENGINE\n";
1474                 $options.=" no-static-engine";
1475                 }
1476         }
1477
1478 $cpuid_obj.=" uplink.o uplink-x86.o" if ($cflags =~ /\-DOPENSSL_USE_APPLINK/);
1479
1480 #
1481 # Platform fix-ups
1482 #
1483 if ($target =~ /\-icc$/)        # Intel C compiler
1484         {
1485         my $iccver=0;
1486         if (open(FD,"$cc -V 2>&1 |"))
1487                 {
1488                 while(<FD>) { $iccver=$1 if (/Version ([0-9]+)\./); }
1489                 close(FD);
1490                 }
1491         if ($iccver>=8)
1492                 {
1493                 $cflags=~s/\-KPIC/-fPIC/;
1494                 # Eliminate unnecessary dependency from libirc.a. This is
1495                 # essential for shared library support, as otherwise
1496                 # apps/openssl can end up in endless loop upon startup...
1497                 $cflags.=" -Dmemcpy=__builtin_memcpy -Dmemset=__builtin_memset";
1498                 }
1499         if ($iccver>=9)
1500                 {
1501                 $lflags.=" -i-static";
1502                 $lflags=~s/\-no_cpprt/-no-cpprt/;
1503                 }
1504         if ($iccver>=10)
1505                 {
1506                 $lflags=~s/\-i\-static/-static-intel/;
1507                 }
1508         if ($iccver>=11)
1509                 {
1510                 $cflags.=" -no-intel-extensions";       # disable Cilk
1511                 $lflags=~s/\-no\-cpprt/-no-cxxlib/;
1512                 }
1513         }
1514
1515 # Unlike other OSes (like Solaris, Linux, Tru64, IRIX) BSD run-time
1516 # linkers (tested OpenBSD, NetBSD and FreeBSD) "demand" RPATH set on
1517 # .so objects. Apparently application RPATH is not global and does
1518 # not apply to .so linked with other .so. Problem manifests itself
1519 # when libssl.so fails to load libcrypto.so. One can argue that we
1520 # should engrave this into Makefile.shared rules or into BSD-* config
1521 # lines above. Meanwhile let's try to be cautious and pass -rpath to
1522 # linker only when --prefix is not /usr.
1523 if ($target =~ /^BSD\-/)
1524         {
1525         $shared_ldflag.=" -Wl,-rpath,\$\$(LIBRPATH)" if ($prefix !~ m|^/usr[/]*$|);
1526         }
1527
1528 if ($sys_id ne "")
1529         {
1530         #$cflags="-DOPENSSL_SYSNAME_$sys_id $cflags";
1531         $openssl_sys_defines="#define OPENSSL_SYSNAME_$sys_id\n";
1532         }
1533
1534 if ($ranlib eq "")
1535         {
1536         $ranlib = $default_ranlib;
1537         }
1538
1539 #my ($bn1)=split(/\s+/,$bn_obj);
1540 #$bn1 = "" unless defined $bn1;
1541 #$bn1=$bn_asm unless ($bn1 =~ /\.o$/);
1542 #$bn_obj="$bn1";
1543
1544 $cpuid_obj="" if ($processor eq "386");
1545
1546 $bn_obj = $bn_asm unless $bn_obj ne "";
1547 # bn-586 is the only one implementing bn_*_part_words
1548 $cflags.=" -DOPENSSL_BN_ASM_PART_WORDS" if ($bn_obj =~ /bn-586/);
1549 $cflags.=" -DOPENSSL_IA32_SSE2" if (!$no_sse2 && $bn_obj =~ /86/);
1550
1551 $cflags.=" -DOPENSSL_BN_ASM_MONT" if ($bn_obj =~ /-mont/);
1552 $cflags.=" -DOPENSSL_BN_ASM_MONT5" if ($bn_obj =~ /-mont5/);
1553 $cflags.=" -DOPENSSL_BN_ASM_GF2m" if ($bn_obj =~ /-gf2m/);
1554
1555 if ($fips)
1556         {
1557         $openssl_other_defines.="#define OPENSSL_FIPS\n";
1558         $cflags .= " -I\$(FIPSDIR)/include";
1559         }
1560
1561 $cpuid_obj="mem_clr.o"  unless ($cpuid_obj =~ /\.o$/);
1562 $des_obj=$des_enc       unless ($des_obj =~ /\.o$/);
1563 $bf_obj=$bf_enc         unless ($bf_obj =~ /\.o$/);
1564 $cast_obj=$cast_enc     unless ($cast_obj =~ /\.o$/);
1565 $rc5_obj=$rc5_enc       unless ($rc5_obj =~ /\.o$/);
1566 if ($rc4_obj =~ /\.o$/)
1567         {
1568         $cflags.=" -DRC4_ASM";
1569         }
1570 else
1571         {
1572         $rc4_obj=$rc4_enc;
1573         }
1574 if ($sha1_obj =~ /\.o$/)
1575         {
1576 #       $sha1_obj=$sha1_enc;
1577         $cflags.=" -DSHA1_ASM"   if ($sha1_obj =~ /sx86/ || $sha1_obj =~ /sha1/);
1578         $cflags.=" -DSHA256_ASM" if ($sha1_obj =~ /sha256/);
1579         $cflags.=" -DSHA512_ASM" if ($sha1_obj =~ /sha512/);
1580         if ($sha1_obj =~ /sse2/)
1581             {   if ($no_sse2)
1582                 {   $sha1_obj =~ s/\S*sse2\S+//;        }
1583                 elsif ($cflags !~ /OPENSSL_IA32_SSE2/)
1584                 {   $cflags.=" -DOPENSSL_IA32_SSE2";    }
1585             }
1586         }
1587 if ($md5_obj =~ /\.o$/)
1588         {
1589 #       $md5_obj=$md5_enc;
1590         $cflags.=" -DMD5_ASM";
1591         }
1592 if ($rmd160_obj =~ /\.o$/)
1593         {
1594 #       $rmd160_obj=$rmd160_enc;
1595         $cflags.=" -DRMD160_ASM";
1596         }
1597 if ($aes_obj =~ /\.o$/)
1598         {
1599         $cflags.=" -DAES_ASM" if ($aes_obj =~ m/\baes\-/);;
1600         # aes-ctr.o is not a real file, only indication that assembler
1601         # module implements AES_ctr32_encrypt...
1602         $cflags.=" -DAES_CTR_ASM" if ($aes_obj =~ s/\s*aes\-ctr\.o//);
1603         # aes-xts.o indicates presense of AES_xts_[en|de]crypt...
1604         $cflags.=" -DAES_XTS_ASM" if ($aes_obj =~ s/\s*aes\-xts\.o//);
1605         $aes_obj =~ s/\s*(vpaes|aesni)\-x86\.o//g if ($no_sse2);
1606         $cflags.=" -DVPAES_ASM" if ($aes_obj =~ m/vpaes/);
1607         $cflags.=" -DBSAES_ASM" if ($aes_obj =~ m/bsaes/);
1608         }
1609 else    {
1610         $aes_obj=$aes_enc;
1611         }
1612 $wp_obj="" if ($wp_obj =~ /mmx/ && $processor eq "386");
1613 if ($wp_obj =~ /\.o$/ && !$disabled{"whirlpool"})
1614         {
1615         $cflags.=" -DWHIRLPOOL_ASM";
1616         }
1617 else    {
1618         $wp_obj="wp_block.o";
1619         }
1620 $cmll_obj=$cmll_enc     unless ($cmll_obj =~ /.o$/);
1621 if ($modes_obj =~ /ghash\-/)
1622         {
1623         $cflags.=" -DGHASH_ASM";
1624         }
1625 if ($ec_obj =~ /ecp_nistz256/)
1626         {
1627         $cflags.=" -DECP_NISTZ256_ASM";
1628         }
1629
1630 # "Stringify" the C flags string.  This permits it to be made part of a string
1631 # and works as well on command lines.
1632 $cflags =~ s/([\\\"])/\\\1/g;
1633
1634 my $version = "unknown";
1635 my $version_num = "unknown";
1636 my $major = "unknown";
1637 my $minor = "unknown";
1638 my $shlib_version_number = "unknown";
1639 my $shlib_version_history = "unknown";
1640 my $shlib_major = "unknown";
1641 my $shlib_minor = "unknown";
1642
1643 open(IN,'<crypto/opensslv.h') || die "unable to read opensslv.h:$!\n";
1644 while (<IN>)
1645         {
1646         $version=$1 if /OPENSSL.VERSION.TEXT.*OpenSSL (\S+) /;
1647         $version_num=$1 if /OPENSSL.VERSION.NUMBER.*0x(\S+)/;
1648         $shlib_version_number=$1 if /SHLIB_VERSION_NUMBER *"([^"]+)"/;
1649         $shlib_version_history=$1 if /SHLIB_VERSION_HISTORY *"([^"]*)"/;
1650         }
1651 close(IN);
1652 if ($shlib_version_history ne "") { $shlib_version_history .= ":"; }
1653
1654 if ($version =~ /(^[0-9]*)\.([0-9\.]*)/)
1655         {
1656         $major=$1;
1657         $minor=$2;
1658         }
1659
1660 if ($shlib_version_number =~ /(^[0-9]*)\.([0-9\.]*)/)
1661         {
1662         $shlib_major=$1;
1663         $shlib_minor=$2;
1664         }
1665
1666 my %predefined;
1667
1668 # collect compiler pre-defines from gcc or gcc-alike...
1669 open(PIPE, "$cross_compile_prefix$cc -dM -E -x c /dev/null 2>&1 |");
1670 while (<PIPE>) {
1671   m/^#define\s+(\w+(?:\(\w+\))?)(?:\s+(.+))?/ or last;
1672   $predefined{$1} = defined($2) ? $2 : "";
1673 }
1674 close(PIPE);
1675
1676 # Xcode did not handle $cc -M before clang support
1677 my $cc_as_makedepend = 0;
1678 if ($predefined{__GNUC__} >= 3 && !(defined($predefined{__APPLE_CC__})
1679                                     && !defined($predefined{__clang__}))) {
1680   $cc_as_makedepend = 1;
1681 }
1682
1683 if ($strict_warnings)
1684         {
1685         my $wopt;
1686         die "ERROR --strict-warnings requires gcc or clang" unless defined($predefined{__GNUC__});
1687         foreach $wopt (split /\s+/, $gcc_devteam_warn)
1688                 {
1689                 $cflags .= " $wopt" unless ($cflags =~ /(^|\s)$wopt(\s|$)/)
1690                 }
1691         if (defined($predefined{__clang__}))
1692                 {
1693                 foreach $wopt (split /\s+/, $clang_devteam_warn)
1694                         {
1695                         $cflags .= " $wopt" unless ($cflags =~ /(^|\s)$wopt(\s|$)/)
1696                         }
1697                 }
1698         }
1699
1700 open(IN,'<Makefile.org') || die "unable to read Makefile.org:$!\n";
1701 unlink("$Makefile.new") || die "unable to remove old $Makefile.new:$!\n" if -e "$Makefile.new";
1702 open(OUT,">$Makefile.new") || die "unable to create $Makefile.new:$!\n";
1703 print OUT "### Generated automatically from Makefile.org by Configure.\n\n";
1704 my $sdirs=0;
1705 while (<IN>)
1706         {
1707         chomp;
1708         $sdirs = 1 if /^SDIRS=/;
1709         if ($sdirs) {
1710                 my $dir;
1711                 foreach $dir (@skip) {
1712                         s/(\s)$dir /$1/;
1713                         s/\s$dir$//;
1714                         }
1715                 }
1716         $sdirs = 0 unless /\\$/;
1717         s/engines // if (/^DIRS=/ && $disabled{"engine"});
1718         s/ccgost// if (/^ENGDIRS=/ && $disabled{"gost"});
1719         s/^VERSION=.*/VERSION=$version/;
1720         s/^MAJOR=.*/MAJOR=$major/;
1721         s/^MINOR=.*/MINOR=$minor/;
1722         s/^SHLIB_VERSION_NUMBER=.*/SHLIB_VERSION_NUMBER=$shlib_version_number/;
1723         s/^SHLIB_VERSION_HISTORY=.*/SHLIB_VERSION_HISTORY=$shlib_version_history/;
1724         s/^SHLIB_MAJOR=.*/SHLIB_MAJOR=$shlib_major/;
1725         s/^SHLIB_MINOR=.*/SHLIB_MINOR=$shlib_minor/;
1726         s/^SHLIB_EXT=.*/SHLIB_EXT=$shared_extension/;
1727         s/^INSTALLTOP=.*$/INSTALLTOP=$prefix/;
1728         s/^MULTILIB=.*$/MULTILIB=$multilib/;
1729         s/^OPENSSLDIR=.*$/OPENSSLDIR=$openssldir/;
1730         s/^LIBDIR=.*$/LIBDIR=$libdir/;
1731         s/^INSTALL_PREFIX=.*$/INSTALL_PREFIX=$install_prefix/;
1732         s/^PLATFORM=.*$/PLATFORM=$target/;
1733         s/^OPTIONS=.*$/OPTIONS=$options/;
1734         s/^CONFIGURE_ARGS=.*$/CONFIGURE_ARGS=$argvstring/;
1735         if ($cross_compile_prefix)
1736                 {
1737                 s/^CC=.*$/CROSS_COMPILE= $cross_compile_prefix\nCC= \$\(CROSS_COMPILE\)$cc/;
1738                 s/^AR=\s*/AR= \$\(CROSS_COMPILE\)/;
1739                 s/^NM=\s*/NM= \$\(CROSS_COMPILE\)/;
1740                 s/^RANLIB=\s*/RANLIB= \$\(CROSS_COMPILE\)/;
1741                 s/^RC=\s*/RC= \$\(CROSS_COMPILE\)/;
1742                 s/^MAKEDEPPROG=.*$/MAKEDEPPROG= \$\(CROSS_COMPILE\)$cc/ if $cc_as_makedepend;
1743                 }
1744         else    {
1745                 s/^CC=.*$/CC= $cc/;
1746                 s/^AR=\s*ar/AR= $ar/;
1747                 s/^RANLIB=.*/RANLIB= $ranlib/;
1748                 s/^RC=.*/RC= $windres/;
1749                 s/^MAKEDEPPROG=.*$/MAKEDEPPROG= $cc/ if $cc_as_makedepend;
1750                 }
1751         s/^CFLAG=.*$/CFLAG= $cflags/;
1752         s/^DEPFLAG=.*$/DEPFLAG=$depflags/;
1753         s/^PEX_LIBS=.*$/PEX_LIBS= $prelflags/;
1754         s/^EX_LIBS=.*$/EX_LIBS= $lflags/;
1755         s/^EXE_EXT=.*$/EXE_EXT= $exe_ext/;
1756         s/^CPUID_OBJ=.*$/CPUID_OBJ= $cpuid_obj/;
1757         s/^BN_ASM=.*$/BN_ASM= $bn_obj/;
1758         s/^EC_ASM=.*$/EC_ASM= $ec_obj/;
1759         s/^DES_ENC=.*$/DES_ENC= $des_obj/;
1760         s/^AES_ENC=.*$/AES_ENC= $aes_obj/;
1761         s/^BF_ENC=.*$/BF_ENC= $bf_obj/;
1762         s/^CAST_ENC=.*$/CAST_ENC= $cast_obj/;
1763         s/^RC4_ENC=.*$/RC4_ENC= $rc4_obj/;
1764         s/^RC5_ENC=.*$/RC5_ENC= $rc5_obj/;
1765         s/^MD5_ASM_OBJ=.*$/MD5_ASM_OBJ= $md5_obj/;
1766         s/^SHA1_ASM_OBJ=.*$/SHA1_ASM_OBJ= $sha1_obj/;
1767         s/^RMD160_ASM_OBJ=.*$/RMD160_ASM_OBJ= $rmd160_obj/;
1768         s/^WP_ASM_OBJ=.*$/WP_ASM_OBJ= $wp_obj/;
1769         s/^CMLL_ENC=.*$/CMLL_ENC= $cmll_obj/;
1770         s/^MODES_ASM_OBJ.=*$/MODES_ASM_OBJ= $modes_obj/;
1771         s/^ENGINES_ASM_OBJ.=*$/ENGINES_ASM_OBJ= $engines_obj/;
1772         s/^PERLASM_SCHEME=.*$/PERLASM_SCHEME= $perlasm_scheme/;
1773         s/^PROCESSOR=.*/PROCESSOR= $processor/;
1774         s/^ARFLAGS=.*/ARFLAGS= $arflags/;
1775         s/^PERL=.*/PERL= $perl/;
1776         s/^KRB5_INCLUDES=.*/KRB5_INCLUDES=$withargs{"krb5-include"}/;
1777         s/^LIBKRB5=.*/LIBKRB5=$withargs{"krb5-lib"}/;
1778         s/^LIBZLIB=.*/LIBZLIB=$withargs{"zlib-lib"}/;
1779         s/^ZLIB_INCLUDE=.*/ZLIB_INCLUDE=$withargs{"zlib-include"}/;
1780
1781         s/^FIPSDIR=.*/FIPSDIR=$fipsdir/;
1782         s/^FIPSLIBDIR=.*/FIPSLIBDIR=$fipslibdir/;
1783         s/^FIPSCANLIB=.*/FIPSCANLIB=libcrypto/ if $fips;
1784         s/^BASEADDR=.*/BASEADDR=$baseaddr/;
1785
1786         s/^SHLIB_TARGET=.*/SHLIB_TARGET=$shared_target/;
1787         s/^SHLIB_MARK=.*/SHLIB_MARK=$shared_mark/;
1788         s/^SHARED_LIBS=.*/SHARED_LIBS=\$(SHARED_CRYPTO) \$(SHARED_SSL)/ if (!$no_shared);
1789         if ($shared_extension ne "" && $shared_extension =~ /^\.s([ol])\.[^\.]*$/)
1790                 {
1791                 my $sotmp = $1;
1792                 s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.s$sotmp/;
1793                 }
1794         elsif ($shared_extension ne "" && $shared_extension =~ /^\.[^\.]*\.dylib$/)
1795                 {
1796                 s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.dylib/;
1797                 }
1798         elsif ($shared_extension ne "" && $shared_extension =~ /^\.s([ol])\.[^\.]*\.[^\.]*$/)
1799                 {
1800                 my $sotmp = $1;
1801                 s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.s$sotmp.\$(SHLIB_MAJOR) .s$sotmp/;
1802                 }
1803         elsif ($shared_extension ne "" && $shared_extension =~ /^\.[^\.]*\.[^\.]*\.dylib$/)
1804                 {
1805                 s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.\$(SHLIB_MAJOR).dylib .dylib/;
1806                 }
1807         s/^SHARED_LDFLAGS=.*/SHARED_LDFLAGS=$shared_ldflag/;
1808         print OUT $_."\n";
1809         }
1810 close(IN);
1811 close(OUT);
1812 if ((compare($Makefile, "$Makefile.new"))
1813         or file_newer('Configure', $Makefile)
1814         or file_newer('config', $Makefile)
1815         or file_newer('Makefile.org', $Makefile))
1816         {
1817         rename($Makefile,"$Makefile.bak") || die "unable to rename $Makefile\n" if -e $Makefile;
1818         rename("$Makefile.new",$Makefile) || die "unable to rename $Makefile.new\n";
1819         }
1820 else
1821         { unlink("$Makefile.new"); }
1822
1823 print "CC            =$cc\n";
1824 print "CFLAG         =$cflags\n";
1825 print "EX_LIBS       =$lflags\n";
1826 print "CPUID_OBJ     =$cpuid_obj\n";
1827 print "BN_ASM        =$bn_obj\n";
1828 print "EC_ASM        =$ec_obj\n";
1829 print "DES_ENC       =$des_obj\n";
1830 print "AES_ENC       =$aes_obj\n";
1831 print "BF_ENC        =$bf_obj\n";
1832 print "CAST_ENC      =$cast_obj\n";
1833 print "RC4_ENC       =$rc4_obj\n";
1834 print "RC5_ENC       =$rc5_obj\n";
1835 print "MD5_OBJ_ASM   =$md5_obj\n";
1836 print "SHA1_OBJ_ASM  =$sha1_obj\n";
1837 print "RMD160_OBJ_ASM=$rmd160_obj\n";
1838 print "CMLL_ENC      =$cmll_obj\n";
1839 print "MODES_OBJ     =$modes_obj\n";
1840 print "ENGINES_OBJ   =$engines_obj\n";
1841 print "PROCESSOR     =$processor\n";
1842 print "RANLIB        =$ranlib\n";
1843 print "ARFLAGS       =$arflags\n";
1844 print "PERL          =$perl\n";
1845 print "KRB5_INCLUDES =",$withargs{"krb5-include"},"\n"
1846         if $withargs{"krb5-include"} ne "";
1847
1848 my $des_ptr=0;
1849 my $des_risc1=0;
1850 my $des_risc2=0;
1851 my $des_unroll=0;
1852 my $bn_ll=0;
1853 my $def_int=2;
1854 my $rc4_int=$def_int;
1855 my $md2_int=$def_int;
1856 my $idea_int=$def_int;
1857 my $rc2_int=$def_int;
1858 my $rc4_idx=0;
1859 my $rc4_chunk=0;
1860 my $bf_ptr=0;
1861 my @type=("char","short","int","long");
1862 my ($b64l,$b64,$b32,$b16,$b8)=(0,0,1,0,0);
1863 my $export_var_as_fn=0;
1864
1865 my $des_int;
1866
1867 foreach (sort split(/\s+/,$bn_ops))
1868         {
1869         $des_ptr=1 if /DES_PTR/;
1870         $des_risc1=1 if /DES_RISC1/;
1871         $des_risc2=1 if /DES_RISC2/;
1872         $des_unroll=1 if /DES_UNROLL/;
1873         $des_int=1 if /DES_INT/;
1874         $bn_ll=1 if /BN_LLONG/;
1875         $rc4_int=0 if /RC4_CHAR/;
1876         $rc4_int=3 if /RC4_LONG/;
1877         $rc4_idx=1 if /RC4_INDEX/;
1878         $rc4_chunk=1 if /RC4_CHUNK/;
1879         $rc4_chunk=2 if /RC4_CHUNK_LL/;
1880         $md2_int=0 if /MD2_CHAR/;
1881         $md2_int=3 if /MD2_LONG/;
1882         $idea_int=1 if /IDEA_SHORT/;
1883         $idea_int=3 if /IDEA_LONG/;
1884         $rc2_int=1 if /RC2_SHORT/;
1885         $rc2_int=3 if /RC2_LONG/;
1886         $bf_ptr=1 if $_ eq "BF_PTR";
1887         $bf_ptr=2 if $_ eq "BF_PTR2";
1888         ($b64l,$b64,$b32,$b16,$b8)=(0,1,0,0,0) if /SIXTY_FOUR_BIT/;
1889         ($b64l,$b64,$b32,$b16,$b8)=(1,0,0,0,0) if /SIXTY_FOUR_BIT_LONG/;
1890         ($b64l,$b64,$b32,$b16,$b8)=(0,0,1,0,0) if /THIRTY_TWO_BIT/;
1891         ($b64l,$b64,$b32,$b16,$b8)=(0,0,0,1,0) if /SIXTEEN_BIT/;
1892         ($b64l,$b64,$b32,$b16,$b8)=(0,0,0,0,1) if /EIGHT_BIT/;
1893         $export_var_as_fn=1 if /EXPORT_VAR_AS_FN/;
1894         }
1895
1896 open(IN,'<crypto/opensslconf.h.in') || die "unable to read crypto/opensslconf.h.in:$!\n";
1897 unlink("crypto/opensslconf.h.new") || die "unable to remove old crypto/opensslconf.h.new:$!\n" if -e "crypto/opensslconf.h.new";
1898 open(OUT,'>crypto/opensslconf.h.new') || die "unable to create crypto/opensslconf.h.new:$!\n";
1899 print OUT "/* opensslconf.h */\n";
1900 print OUT "/* WARNING: Generated automatically from opensslconf.h.in by Configure. */\n\n";
1901
1902 print OUT "#ifdef  __cplusplus\n";
1903 print OUT "extern \"C\" {\n";
1904 print OUT "#endif\n";
1905 print OUT "/* OpenSSL was configured with the following options: */\n";
1906 my $openssl_algorithm_defines_trans = $openssl_algorithm_defines;
1907 $openssl_experimental_defines =~ s/^\s*#\s*define\s+OPENSSL_NO_(.*)/#ifndef OPENSSL_EXPERIMENTAL_$1\n# ifndef OPENSSL_NO_$1\n#  define OPENSSL_NO_$1\n# endif\n#endif/mg;
1908 $openssl_algorithm_defines_trans =~ s/^\s*#\s*define\s+OPENSSL_(.*)/# if defined(OPENSSL_$1) \&\& !defined($1)\n#  define $1\n# endif/mg;
1909 $openssl_algorithm_defines =~ s/^\s*#\s*define\s+(.*)/#ifndef $1\n# define $1\n#endif/mg;
1910 $openssl_algorithm_defines = "   /* no ciphers excluded */\n" if $openssl_algorithm_defines eq "";
1911 $openssl_thread_defines =~ s/^\s*#\s*define\s+(.*)/#ifndef $1\n# define $1\n#endif/mg;
1912 $openssl_sys_defines =~ s/^\s*#\s*define\s+(.*)/#ifndef $1\n# define $1\n#endif/mg;
1913 $openssl_other_defines =~ s/^\s*#\s*define\s+(.*)/#ifndef $1\n# define $1\n#endif/mg;
1914 print OUT $openssl_sys_defines;
1915 print OUT "#ifndef OPENSSL_DOING_MAKEDEPEND\n\n";
1916 print OUT $openssl_experimental_defines;
1917 print OUT "\n";
1918 print OUT $openssl_algorithm_defines;
1919 print OUT "\n#endif /* OPENSSL_DOING_MAKEDEPEND */\n\n";
1920 print OUT $openssl_thread_defines;
1921 print OUT $openssl_other_defines,"\n";
1922
1923 print OUT "/* The OPENSSL_NO_* macros are also defined as NO_* if the application\n";
1924 print OUT "   asks for it.  This is a transient feature that is provided for those\n";
1925 print OUT "   who haven't had the time to do the appropriate changes in their\n";
1926 print OUT "   applications.  */\n";
1927 print OUT "#ifdef OPENSSL_ALGORITHM_DEFINES\n";
1928 print OUT $openssl_algorithm_defines_trans;
1929 print OUT "#endif\n\n";
1930
1931 print OUT "#define OPENSSL_CPUID_OBJ\n\n" if ($cpuid_obj ne "mem_clr.o");
1932
1933 while (<IN>)
1934         {
1935         if      (/^#define\s+OPENSSLDIR/)
1936                 {
1937                 my $foo = $openssldir;
1938                 $foo =~ s/\\/\\\\/g;
1939                 print OUT "#define OPENSSLDIR \"$foo\"\n";
1940                 }
1941         elsif   (/^#define\s+ENGINESDIR/)
1942                 {
1943                 my $foo = "$prefix/$libdir/engines";
1944                 $foo =~ s/\\/\\\\/g;
1945                 print OUT "#define ENGINESDIR \"$foo\"\n";
1946                 }
1947         elsif   (/^#((define)|(undef))\s+OPENSSL_EXPORT_VAR_AS_FUNCTION/)
1948                 { printf OUT "#undef OPENSSL_EXPORT_VAR_AS_FUNCTION\n"
1949                         if $export_var_as_fn;
1950                   printf OUT "#%s OPENSSL_EXPORT_VAR_AS_FUNCTION\n",
1951                         ($export_var_as_fn)?"define":"undef"; }
1952         elsif   (/^#define\s+OPENSSL_UNISTD/)
1953                 {
1954                 $unistd = "<unistd.h>" if $unistd eq "";
1955                 print OUT "#define OPENSSL_UNISTD $unistd\n";
1956                 }
1957         elsif   (/^#((define)|(undef))\s+SIXTY_FOUR_BIT_LONG/)
1958                 { printf OUT "#%s SIXTY_FOUR_BIT_LONG\n",($b64l)?"define":"undef"; }
1959         elsif   (/^#((define)|(undef))\s+SIXTY_FOUR_BIT/)
1960                 { printf OUT "#%s SIXTY_FOUR_BIT\n",($b64)?"define":"undef"; }
1961         elsif   (/^#((define)|(undef))\s+THIRTY_TWO_BIT/)
1962                 { printf OUT "#%s THIRTY_TWO_BIT\n",($b32)?"define":"undef"; }
1963         elsif   (/^#((define)|(undef))\s+SIXTEEN_BIT/)
1964                 { printf OUT "#%s SIXTEEN_BIT\n",($b16)?"define":"undef"; }
1965         elsif   (/^#((define)|(undef))\s+EIGHT_BIT/)
1966                 { printf OUT "#%s EIGHT_BIT\n",($b8)?"define":"undef"; }
1967         elsif   (/^#((define)|(undef))\s+BN_LLONG\s*$/)
1968                 { printf OUT "#%s BN_LLONG\n",($bn_ll)?"define":"undef"; }
1969         elsif   (/^\#define\s+DES_LONG\s+.*/)
1970                 { printf OUT "#define DES_LONG unsigned %s\n",
1971                         ($des_int)?'int':'long'; }
1972         elsif   (/^\#(define|undef)\s+DES_PTR/)
1973                 { printf OUT "#%s DES_PTR\n",($des_ptr)?'define':'undef'; }
1974         elsif   (/^\#(define|undef)\s+DES_RISC1/)
1975                 { printf OUT "#%s DES_RISC1\n",($des_risc1)?'define':'undef'; }
1976         elsif   (/^\#(define|undef)\s+DES_RISC2/)
1977                 { printf OUT "#%s DES_RISC2\n",($des_risc2)?'define':'undef'; }
1978         elsif   (/^\#(define|undef)\s+DES_UNROLL/)
1979                 { printf OUT "#%s DES_UNROLL\n",($des_unroll)?'define':'undef'; }
1980         elsif   (/^#define\s+RC4_INT\s/)
1981                 { printf OUT "#define RC4_INT unsigned %s\n",$type[$rc4_int]; }
1982         elsif   (/^#undef\s+RC4_CHUNK/)
1983                 {
1984                 printf OUT "#undef RC4_CHUNK\n" if $rc4_chunk==0;
1985                 printf OUT "#define RC4_CHUNK unsigned long\n" if $rc4_chunk==1;
1986                 printf OUT "#define RC4_CHUNK unsigned long long\n" if $rc4_chunk==2;
1987                 }
1988         elsif   (/^#((define)|(undef))\s+RC4_INDEX/)
1989                 { printf OUT "#%s RC4_INDEX\n",($rc4_idx)?"define":"undef"; }
1990         elsif (/^#(define|undef)\s+I386_ONLY/)
1991                 { printf OUT "#%s I386_ONLY\n", ($processor eq "386")?
1992                         "define":"undef"; }
1993         elsif   (/^#define\s+MD2_INT\s/)
1994                 { printf OUT "#define MD2_INT unsigned %s\n",$type[$md2_int]; }
1995         elsif   (/^#define\s+IDEA_INT\s/)
1996                 {printf OUT "#define IDEA_INT unsigned %s\n",$type[$idea_int];}
1997         elsif   (/^#define\s+RC2_INT\s/)
1998                 {printf OUT "#define RC2_INT unsigned %s\n",$type[$rc2_int];}
1999         elsif (/^#(define|undef)\s+BF_PTR/)
2000                 {
2001                 printf OUT "#undef BF_PTR\n" if $bf_ptr == 0;
2002                 printf OUT "#define BF_PTR\n" if $bf_ptr == 1;
2003                 printf OUT "#define BF_PTR2\n" if $bf_ptr == 2;
2004                 }
2005         else
2006                 { print OUT $_; }
2007         }
2008 close(IN);
2009 print OUT "#ifdef  __cplusplus\n";
2010 print OUT "}\n";
2011 print OUT "#endif\n";
2012 close(OUT);
2013 if (compare("crypto/opensslconf.h.new","crypto/opensslconf.h"))
2014         {
2015         rename("crypto/opensslconf.h","crypto/opensslconf.h.bak") || die "unable to rename crypto/opensslconf.h\n" if -e "crypto/opensslconf.h";
2016         rename("crypto/opensslconf.h.new","crypto/opensslconf.h") || die "unable to rename crypto/opensslconf.h.new\n";
2017         }
2018 else
2019         { unlink("crypto/opensslconf.h.new"); }
2020
2021 # Fix the date
2022
2023 print "SIXTY_FOUR_BIT_LONG mode\n" if $b64l;
2024 print "SIXTY_FOUR_BIT mode\n" if $b64;
2025 print "THIRTY_TWO_BIT mode\n" if $b32;
2026 print "SIXTEEN_BIT mode\n" if $b16;
2027 print "EIGHT_BIT mode\n" if $b8;
2028 print "DES_PTR used\n" if $des_ptr;
2029 print "DES_RISC1 used\n" if $des_risc1;
2030 print "DES_RISC2 used\n" if $des_risc2;
2031 print "DES_UNROLL used\n" if $des_unroll;
2032 print "DES_INT used\n" if $des_int;
2033 print "BN_LLONG mode\n" if $bn_ll;
2034 print "RC4 uses u$type[$rc4_int]\n" if $rc4_int != $def_int;
2035 print "RC4_INDEX mode\n" if $rc4_idx;
2036 print "RC4_CHUNK is undefined\n" if $rc4_chunk==0;
2037 print "RC4_CHUNK is unsigned long\n" if $rc4_chunk==1;
2038 print "RC4_CHUNK is unsigned long long\n" if $rc4_chunk==2;
2039 print "MD2 uses u$type[$md2_int]\n" if $md2_int != $def_int;
2040 print "IDEA uses u$type[$idea_int]\n" if $idea_int != $def_int;
2041 print "RC2 uses u$type[$rc2_int]\n" if $rc2_int != $def_int;
2042 print "BF_PTR used\n" if $bf_ptr == 1;
2043 print "BF_PTR2 used\n" if $bf_ptr == 2;
2044
2045 if($IsMK1MF) {
2046         open (OUT,">crypto/buildinf.h") || die "Can't open buildinf.h";
2047         printf OUT <<EOF;
2048 #ifndef MK1MF_BUILD
2049   /* auto-generated by Configure for crypto/cversion.c:
2050    * for Unix builds, crypto/Makefile.ssl generates functional definitions;
2051    * Windows builds (and other mk1mf builds) compile cversion.c with
2052    * -DMK1MF_BUILD and use definitions added to this file by util/mk1mf.pl. */
2053   #error "Windows builds (PLATFORM=$target) use mk1mf.pl-created Makefiles"
2054 #endif
2055 EOF
2056         close(OUT);
2057 } else {
2058         my $make_command = "$make PERL=\'$perl\'";
2059         my @make_targets = ();
2060         push @make_targets, "links" if $symlink;
2061         push @make_targets, "depend" if $depflags ne $default_depflags && $make_depend;
2062         push @make_targets, "gentests" if $symlink;
2063         foreach my $make_target (@make_targets) {
2064             (system "$make_command $make_target") == 0 or exit $?;
2065         }
2066         if ( $perl =~ m@^/@) {
2067             &dofile("tools/c_rehash",$perl,'^#!/', '#!%s','^my \$dir;$', 'my $dir = "' . $openssldir . '";', '^my \$prefix;$', 'my $prefix = "' . $prefix . '";');
2068             &dofile("apps/CA.pl",$perl,'^#!/', '#!%s');
2069         } else {
2070             # No path for Perl known ...
2071             &dofile("tools/c_rehash",'/usr/local/bin/perl','^#!/', '#!%s','^my \$dir;$', 'my $dir = "' . $openssldir . '";',  '^my \$prefix;$', 'my $prefix = "' . $prefix . '";');
2072             &dofile("apps/CA.pl",'/usr/local/bin/perl','^#!/', '#!%s');
2073         }
2074         if ($depflags ne $default_depflags && !$make_depend) {
2075             $warn_make_depend++;
2076         }
2077 }
2078
2079 # create the ms/version32.rc file if needed
2080 if ($IsMK1MF && ($target !~ /^netware/)) {
2081         my ($v1, $v2, $v3, $v4);
2082         if ($version_num =~ /(^[0-9a-f]{1})([0-9a-f]{2})([0-9a-f]{2})([0-9a-f]{2})/i) {
2083                 $v1=hex $1;
2084                 $v2=hex $2;
2085                 $v3=hex $3;
2086                 $v4=hex $4;
2087         }
2088         open (OUT,">ms/version32.rc") || die "Can't open ms/version32.rc";
2089         print OUT <<EOF;
2090 #include <winver.h>
2091
2092 LANGUAGE 0x09,0x01
2093
2094 1 VERSIONINFO
2095   FILEVERSION $v1,$v2,$v3,$v4
2096   PRODUCTVERSION $v1,$v2,$v3,$v4
2097   FILEFLAGSMASK 0x3fL
2098 #ifdef _DEBUG
2099   FILEFLAGS 0x01L
2100 #else
2101   FILEFLAGS 0x00L
2102 #endif
2103   FILEOS VOS__WINDOWS32
2104   FILETYPE VFT_DLL
2105   FILESUBTYPE 0x0L
2106 BEGIN
2107     BLOCK "StringFileInfo"
2108     BEGIN
2109         BLOCK "040904b0"
2110         BEGIN
2111             // Required:
2112             VALUE "CompanyName", "The OpenSSL Project, http://www.openssl.org/\\0"
2113             VALUE "FileDescription", "OpenSSL Shared Library\\0"
2114             VALUE "FileVersion", "$version\\0"
2115 #if defined(CRYPTO)
2116             VALUE "InternalName", "libeay32\\0"
2117             VALUE "OriginalFilename", "libeay32.dll\\0"
2118 #elif defined(SSL)
2119             VALUE "InternalName", "ssleay32\\0"
2120             VALUE "OriginalFilename", "ssleay32.dll\\0"
2121 #endif
2122             VALUE "ProductName", "The OpenSSL Toolkit\\0"
2123             VALUE "ProductVersion", "$version\\0"
2124             // Optional:
2125             //VALUE "Comments", "\\0"
2126             VALUE "LegalCopyright", "Copyright  © 1998-2005 The OpenSSL Project. Copyright © 1995-1998 Eric A. Young, Tim J. Hudson. All rights reserved.\\0"
2127             //VALUE "LegalTrademarks", "\\0"
2128             //VALUE "PrivateBuild", "\\0"
2129             //VALUE "SpecialBuild", "\\0"
2130         END
2131     END
2132     BLOCK "VarFileInfo"
2133     BEGIN
2134         VALUE "Translation", 0x409, 0x4b0
2135     END
2136 END
2137 EOF
2138         close(OUT);
2139   }
2140
2141 print <<EOF;
2142
2143 Configured for $target.
2144 EOF
2145
2146 print <<\EOF if (!$no_threads && !$threads);
2147
2148 The library could not be configured for supporting multi-threaded
2149 applications as the compiler options required on this system are not known.
2150 See file INSTALL for details if you need multi-threading.
2151 EOF
2152
2153 print <<\EOF if ($no_shared_warn);
2154
2155 You gave the option 'shared', which is not supported on this platform, so
2156 we will pretend you gave the option 'no-shared'.  If you know how to implement
2157 shared libraries, please let us know (but please first make sure you have
2158 tried with a current version of OpenSSL).
2159 EOF
2160
2161 print <<EOF if ($warn_make_depend);
2162
2163 *** Because of configuration changes, you MUST do the following before
2164 *** building:
2165
2166         make depend
2167 EOF
2168
2169 exit(0);
2170
2171 sub usage
2172         {
2173         print STDERR $usage;
2174         print STDERR "\npick os/compiler from:\n";
2175         my $j=0;
2176         my $i;
2177         my $k=0;
2178         foreach $i (sort keys %table)
2179                 {
2180                 next if $i =~ /^debug/;
2181                 $k += length($i) + 1;
2182                 if ($k > 78)
2183                         {
2184                         print STDERR "\n";
2185                         $k=length($i);
2186                         }
2187                 print STDERR $i . " ";
2188                 }
2189         foreach $i (sort keys %table)
2190                 {
2191                 next if $i !~ /^debug/;
2192                 $k += length($i) + 1;
2193                 if ($k > 78)
2194                         {
2195                         print STDERR "\n";
2196                         $k=length($i);
2197                         }
2198                 print STDERR $i . " ";
2199                 }
2200         print STDERR "\n\nNOTE: If in doubt, on Unix-ish systems use './config'.\n";
2201         exit(1);
2202         }
2203
2204 sub which
2205         {
2206         my($name)=@_;
2207         my $path;
2208         foreach $path (split /:/, $ENV{PATH})
2209                 {
2210                 if (-f "$path/$name$exe_ext" and -x _)
2211                         {
2212                         return "$path/$name$exe_ext" unless ($name eq "perl" and
2213                          system("$path/$name$exe_ext -e " . '\'exit($]<5.0);\''));
2214                         }
2215                 }
2216         }
2217
2218 sub dofile
2219         {
2220         my $f; my $p; my %m; my @a; my $k; my $ff;
2221         ($f,$p,%m)=@_;
2222
2223         open(IN,"<$f.in") || open(IN,"<$f") || die "unable to open $f:$!\n";
2224         @a=<IN>;
2225         close(IN);
2226         foreach $k (keys %m)
2227                 {
2228                 grep(/$k/ && ($_=sprintf($m{$k}."\n",$p)),@a);
2229                 }
2230         open(OUT,">$f.new") || die "unable to open $f.new:$!\n";
2231         print OUT @a;
2232         close(OUT);
2233         rename($f,"$f.bak") || die "unable to rename $f\n" if -e $f;
2234         rename("$f.new",$f) || die "unable to rename $f.new\n";
2235         }
2236
2237 sub print_table_entry
2238         {
2239         my $target = shift;
2240
2241         my ($cc, $cflags, $unistd, $thread_cflag, $sys_id, $lflags,
2242             $bn_ops, $cpuid_obj, $bn_obj, $ec_obj, $des_obj, $aes_obj, $bf_obj,
2243             $md5_obj, $sha1_obj, $cast_obj, $rc4_obj, $rmd160_obj,
2244             $rc5_obj, $wp_obj, $cmll_obj, $modes_obj, $engines_obj,
2245             $perlasm_scheme, $dso_scheme, $shared_target, $shared_cflag,
2246             $shared_ldflag, $shared_extension, $ranlib, $arflags, $multilib)=
2247         split(/\s*:\s*/,$table{$target} . ":" x 30 , -1);
2248
2249         print <<EOF
2250
2251 *** $target
2252 \$cc           = $cc
2253 \$cflags       = $cflags
2254 \$unistd       = $unistd
2255 \$thread_cflag = $thread_cflag
2256 \$sys_id       = $sys_id
2257 \$lflags       = $lflags
2258 \$bn_ops       = $bn_ops
2259 \$cpuid_obj    = $cpuid_obj
2260 \$bn_obj       = $bn_obj
2261 \$ec_obj       = $ec_obj
2262 \$des_obj      = $des_obj
2263 \$aes_obj      = $aes_obj
2264 \$bf_obj       = $bf_obj
2265 \$md5_obj      = $md5_obj
2266 \$sha1_obj     = $sha1_obj
2267 \$cast_obj     = $cast_obj
2268 \$rc4_obj      = $rc4_obj
2269 \$rmd160_obj   = $rmd160_obj
2270 \$rc5_obj      = $rc5_obj
2271 \$wp_obj       = $wp_obj
2272 \$cmll_obj     = $cmll_obj
2273 \$modes_obj    = $modes_obj
2274 \$engines_obj  = $engines_obj
2275 \$perlasm_scheme = $perlasm_scheme
2276 \$dso_scheme   = $dso_scheme
2277 \$shared_target= $shared_target
2278 \$shared_cflag = $shared_cflag
2279 \$shared_ldflag = $shared_ldflag
2280 \$shared_extension = $shared_extension
2281 \$ranlib       = $ranlib
2282 \$arflags      = $arflags
2283 \$multilib     = $multilib
2284 EOF
2285         }
2286
2287 sub test_sanity
2288         {
2289         my $errorcnt = 0;
2290
2291         print STDERR "=" x 70, "\n";
2292         print STDERR "=== SANITY TESTING!\n";
2293         print STDERR "=== No configuration will be done, all other arguments will be ignored!\n";
2294         print STDERR "=" x 70, "\n";
2295
2296         foreach $target (sort keys %table)
2297                 {
2298                 @fields = split(/\s*:\s*/,$table{$target} . ":" x 30 , -1);
2299
2300                 if ($fields[$idx_dso_scheme-1] =~ /^(beos|dl|dlfcn|win32|vms)$/)
2301                         {
2302                         $errorcnt++;
2303                         print STDERR "SANITY ERROR: '$target' has the dso_scheme [$idx_dso_scheme] values\n";
2304                         print STDERR "              in the previous field\n";
2305                         }
2306                 elsif ($fields[$idx_dso_scheme+1] =~ /^(beos|dl|dlfcn|win32|vms)$/)
2307                         {
2308                         $errorcnt++;
2309                         print STDERR "SANITY ERROR: '$target' has the dso_scheme [$idx_dso_scheme] values\n";
2310                         print STDERR "              in the following field\n";
2311                         }
2312                 elsif ($fields[$idx_dso_scheme] !~ /^(beos|dl|dlfcn|win32|vms|)$/)
2313                         {
2314                         $errorcnt++;
2315                         print STDERR "SANITY ERROR: '$target' has the dso_scheme [$idx_dso_scheme] field = ",$fields[$idx_dso_scheme],"\n";
2316                         print STDERR "              valid values are 'beos', 'dl', 'dlfcn', 'win32' and 'vms'\n";
2317                         }
2318                 }
2319         print STDERR "No sanity errors detected!\n" if $errorcnt == 0;
2320         return $errorcnt;
2321         }
2322
2323 sub file_newer
2324         {
2325         my ($file1, $file2) = @_;
2326         return (stat($file1))[9] > (stat($file2))[9]
2327         }