Configure

   1 #! /usr/bin/env perl
   2 # -*- mode: perl; -*-
   3 # Copyright 2016-2022 The OpenSSL Project Authors. All Rights Reserved.
   4 #
   5 # Licensed under the Apache License 2.0 (the "License").  You may not use
   6 # this file except in compliance with the License.  You can obtain a copy
   7 # in the file LICENSE in the source distribution or at
   8 # https://www.openssl.org/source/license.html
   9
  10 ##  Configure -- OpenSSL source tree configuration script
  11
  12 use 5.10.0;
  13 use strict;
  14 use Config;
  15 use FindBin;
  16 use lib "$FindBin::Bin/util/perl";
  17 use File::Basename;
  18 use File::Spec::Functions qw/:DEFAULT abs2rel rel2abs splitdir/;
  19 use File::Path qw/mkpath/;
  20 use File::Compare qw(compare_text);
  21 use OpenSSL::fallback "$FindBin::Bin/external/perl/MODULES.txt";
  22 use OpenSSL::Glob;
  23 use OpenSSL::Template;
  24 use OpenSSL::config;
  25
  26 # see INSTALL.md for instructions.
  27
  28 my $orig_death_handler = $SIG{__DIE__};
  29 $SIG{__DIE__} = \&death_handler;
  30
  31 my $usage="Usage: Configure [no-<cipher> ...] [enable-<cipher> ...] [-Dxxx] [-lxxx] [-Lxxx] [-fxxx] [-Kxxx] [no-hw-xxx|no-hw] [[no-]threads] [[no-]shared] [[no-]zlib|zlib-dynamic] [no-asm] [no-egd] [sctp] [386] [--prefix=DIR] [--openssldir=OPENSSLDIR] [--with-xxx[=vvv]] [--config=FILE] os/compiler[:flags]\n";
  32
  33 my $banner = <<"EOF";
  34
  35 **********************************************************************
  36 ***                                                                ***
  37 ***   OpenSSL has been successfully configured                     ***
  38 ***                                                                ***
  39 ***   If you encounter a problem while building, please open an    ***
  40 ***   issue on GitHub <https://github.com/openssl/openssl/issues>  ***
  41 ***   and include the output from the following command:           ***
  42 ***                                                                ***
  43 ***       perl configdata.pm --dump                                ***
  44 ***                                                                ***
  45 ***   (If you are new to OpenSSL, you might want to consult the    ***
  46 ***   'Troubleshooting' section in the INSTALL.md file first)      ***
  47 ***                                                                ***
  48 **********************************************************************
  49 EOF
  50
  51 # Options:
  52 #
  53 # --config      add the given configuration file, which will be read after
  54 #               any "Configurations*" files that are found in the same
  55 #               directory as this script.
  56 # --prefix      prefix for the OpenSSL installation, which includes the
  57 #               directories bin, lib, include, share/man, share/doc/openssl
  58 #               This becomes the value of INSTALLTOP in Makefile
  59 #               (Default: /usr/local)
  60 # --openssldir  OpenSSL data area, such as openssl.cnf, certificates and keys.
  61 #               If it's a relative directory, it will be added on the directory
  62 #               given with --prefix.
  63 #               This becomes the value of OPENSSLDIR in Makefile and in C.
  64 #               (Default: PREFIX/ssl)
  65 # --banner=".." Output specified text instead of default completion banner
  66 #
  67 # -w            Don't wait after showing a Configure warning
  68 #
  69 # --cross-compile-prefix Add specified prefix to binutils components.
  70 #
  71 # --api         One of 0.9.8, 1.0.0, 1.0.1, 1.0.2, 1.1.0, 1.1.1, or 3.0
  72 #               Define the public APIs as they were for that version
  73 #               including patch releases.  If 'no-deprecated' is also
  74 #               given, do not compile support for interfaces deprecated
  75 #               up to and including the specified OpenSSL version.
  76 #
  77 # no-hw-xxx     do not compile support for specific crypto hardware.
  78 #               Generic OpenSSL-style methods relating to this support
  79 #               are always compiled but return NULL if the hardware
  80 #               support isn't compiled.
  81 # no-hw         do not compile support for any crypto hardware.
  82 # [no-]threads  [don't] try to create a library that is suitable for
  83 #               multithreaded applications (default is "threads" if we
  84 #               know how to do it)
  85 # [no-]shared   [don't] try to create shared libraries when supported.
  86 # [no-]pic      [don't] try to build position independent code when supported.
  87 #               If disabled, it also disables shared and dynamic-engine.
  88 # no-asm        do not use assembler
  89 # no-egd        do not compile support for the entropy-gathering daemon APIs
  90 # [no-]zlib     [don't] compile support for zlib compression.
  91 # zlib-dynamic  Like "zlib", but the zlib library is expected to be a shared
  92 #               library and will be loaded in run-time by the OpenSSL library.
  93 # sctp          include SCTP support
  94 # enable-quic   include QUIC support (currently just for developers as the
  95 #               implementation is by no means complete and usable)
  96 # no-uplink     Don't build support for UPLINK interface.
  97 # enable-weak-ssl-ciphers
  98 #               Enable weak ciphers that are disabled by default.
  99 # 386           generate 80386 code in assembly modules
 100 # no-sse2       disables IA-32 SSE2 code in assembly modules, the above
 101 #               mentioned '386' option implies this one
 102 # no-<cipher>   build without specified algorithm (dsa, idea, rc5, ...)
 103 # -<xxx> +<xxx> All options which are unknown to the 'Configure' script are
 104 # /<xxx>        passed through to the compiler. Unix-style options beginning
 105 #               with a '-' or '+' are recognized, as well as Windows-style
 106 #               options beginning with a '/'. If the option contains arguments
 107 #               separated by spaces, then the URL-style notation %20 can be
 108 #               used for the space character in order to avoid having to quote
 109 #               the option. For example, -opt%20arg gets expanded to -opt arg.
 110 #               In fact, any ASCII character can be encoded as %xx using its
 111 #               hexadecimal encoding.
 112 # -static       while -static is also a pass-through compiler option (and
 113 #               as such is limited to environments where it's actually
 114 #               meaningful), it triggers a number configuration options,
 115 #               namely no-pic, no-shared and no-threads. It is
 116 #               argued that the only reason to produce statically linked
 117 #               binaries (and in context it means executables linked with
 118 #               -static flag, and not just executables linked with static
 119 #               libcrypto.a) is to eliminate dependency on specific run-time,
 120 #               a.k.a. libc version. The mentioned config options are meant
 121 #               to achieve just that. Unfortunately on Linux it's impossible
 122 #               to eliminate the dependency completely for openssl executable
 123 #               because of getaddrinfo and gethostbyname calls, which can
 124 #               invoke dynamically loadable library facility anyway to meet
 125 #               the lookup requests. For this reason on Linux statically
 126 #               linked openssl executable has rather debugging value than
 127 #               production quality.
 128 #
 129 # BN_LLONG      use the type 'long long' in crypto/bn/bn.h
 130 # RC4_CHAR      use 'char' instead of 'int' for RC4_INT in crypto/rc4/rc4.h
 131 # Following are set automatically by this script
 132 #
 133 # MD5_ASM       use some extra md5 assembler,
 134 # SHA1_ASM      use some extra sha1 assembler, must define L_ENDIAN for x86
 135 # RMD160_ASM    use some extra ripemd160 assembler,
 136 # SHA256_ASM    sha256_block is implemented in assembler
 137 # SHA512_ASM    sha512_block is implemented in assembler
 138 # AES_ASM       AES_[en|de]crypt is implemented in assembler
 139
 140 # Minimum warning options... any contributions to OpenSSL should at least
 141 # get past these.  Note that we only use these with C compilers, not with
 142 # C++ compilers.
 143
 144 # -DPEDANTIC complements -pedantic and is meant to mask code that
 145 # is not strictly standard-compliant and/or implementation-specific,
 146 # e.g. inline assembly, disregards to alignment requirements, such
 147 # that -pedantic would complain about. Incidentally -DPEDANTIC has
 148 # to be used even in sanitized builds, because sanitizer too is
 149 # supposed to and does take notice of non-standard behaviour. Then
 150 # -pedantic with pre-C9x compiler would also complain about 'long
 151 # long' not being supported. As 64-bit algorithms are common now,
 152 # it grew impossible to resolve this without sizeable additional
 153 # code, so we just tell compiler to be pedantic about everything
 154 # but 'long long' type.
 155
 156 my @gcc_devteam_warn = qw(
 157     -DPEDANTIC -pedantic -Wno-long-long -DUNUSEDRESULT_DEBUG
 158     -Wall
 159     -Wmissing-declarations
 160     -Wextra
 161     -Wno-unused-parameter
 162     -Wno-missing-field-initializers
 163     -Wswitch
 164     -Wsign-compare
 165     -Wshadow
 166     -Wformat
 167     -Wtype-limits
 168     -Wundef
 169     -Werror
 170     -Wmissing-prototypes
 171     -Wstrict-prototypes
 172 );
 173
 174 # These are used in addition to $gcc_devteam_warn when the compiler is clang.
 175 # TODO(openssl-team): fix problems and investigate if (at least) the
 176 # following warnings can also be enabled:
 177 #       -Wcast-align
 178 #       -Wunreachable-code -- no, too ugly/compiler-specific
 179 #       -Wlanguage-extension-token -- no, we use asm()
 180 #       -Wunused-macros -- no, too tricky for BN and _XOPEN_SOURCE etc
 181 #       -Wextended-offsetof -- no, needed in CMS ASN1 code
 182 my @clang_devteam_warn = qw(
 183     -Wno-unknown-warning-option
 184     -Wswitch-default
 185     -Wno-parentheses-equality
 186     -Wno-language-extension-token
 187     -Wno-extended-offsetof
 188     -Wconditional-uninitialized
 189     -Wincompatible-pointer-types-discards-qualifiers
 190     -Wmissing-variable-declarations
 191 );
 192
 193 my @cl_devteam_warn = qw(
 194     /WX
 195 );
 196
 197 my $strict_warnings = 0;
 198
 199 # As for $BSDthreads. Idea is to maintain "collective" set of flags,
 200 # which would cover all BSD flavors. -pthread applies to them all,
 201 # but is treated differently. OpenBSD expands is as -D_POSIX_THREAD
 202 # -lc_r, which is sufficient. FreeBSD 4.x expands it as -lc_r,
 203 # which has to be accompanied by explicit -D_THREAD_SAFE and
 204 # sometimes -D_REENTRANT. FreeBSD 5.x expands it as -lc_r, which
 205 # seems to be sufficient?
 206 our $BSDthreads="-pthread -D_THREAD_SAFE -D_REENTRANT";
 207
 208 #
 209 # API compatibility name to version number mapping.
 210 #
 211 my $apitable = {
 212     # This table expresses when API additions or changes can occur.
 213     # The numbering used changes from 3.0 and on because we updated
 214     # (solidified) our version numbering scheme at that point.
 215
 216     # From 3.0 and on, we internalise the given version number in decimal
 217     # as MAJOR * 10000 + MINOR * 100 + 0
 218     "3.0.0" => 30000,
 219     "3.0"   => 30000,
 220
 221     # Note that before 3.0, we didn't have the same version number scheme.
 222     # Still, the numbering we use here covers what we need.
 223     "1.1.1" => 10101,
 224     "1.1.0" => 10100,
 225     "1.0.2" => 10002,
 226     "1.0.1" => 10001,
 227     "1.0.0" => 10000,
 228     "0.9.8" =>   908,
 229 };
 230
 231 # For OpenSSL::config::get_platform
 232 my %guess_opts = ();
 233
 234 my $dryrun = 0;
 235
 236 our %table = ();
 237 our %config = ();
 238 our %withargs = ();
 239 our $now_printing;      # set to current entry's name in print_table_entry
 240                         # (todo: right thing would be to encapsulate name
 241                         # into %target [class] and make print_table_entry
 242                         # a method)
 243
 244 # Forward declarations ###############################################
 245
 246 # read_config(filename)
 247 #
 248 # Reads a configuration file and populates %table with the contents
 249 # (which the configuration file places in %targets).
 250 sub read_config;
 251
 252 # resolve_config(target)
 253 #
 254 # Resolves all the late evaluations, inheritances and so on for the
 255 # chosen target and any target it inherits from.
 256 sub resolve_config;
 257
 258
 259 # Information collection #############################################
 260
 261 # Unified build supports separate build dir
 262 my $srcdir = catdir(absolutedir(dirname($0))); # catdir ensures local syntax
 263 my $blddir = catdir(absolutedir("."));         # catdir ensures local syntax
 264
 265 # File::Spec::Unix doesn't detect case insensitivity, so we make sure to
 266 # check if the source and build directory are really the same, and make
 267 # them so.  This avoids all kinds of confusion later on.
 268 # We must check @File::Spec::ISA rather than using File::Spec->isa() to
 269 # know if File::Spec ended up loading File::Spec::Unix.
 270 $srcdir = $blddir
 271     if (grep(/::Unix$/, @File::Spec::ISA)
 272         && samedir($srcdir, $blddir));
 273
 274 my $dofile = abs2rel(catfile($srcdir, "util/dofile.pl"));
 275
 276 my $local_config_envname = 'OPENSSL_LOCAL_CONFIG_DIR';
 277
 278 $config{sourcedir} = abs2rel($srcdir, $blddir);
 279 $config{builddir} = abs2rel($blddir, $blddir);
 280 # echo -n 'holy hand grenade of antioch' | openssl sha256
 281 $config{FIPSKEY} =
 282     'f4556650ac31d35461610bac4ed81b1a181b2d8a43ea2854cbae22ca74560813';
 283
 284 # Collect reconfiguration information if needed
 285 my @argvcopy=@ARGV;
 286
 287 if (grep /^reconf(igure)?$/, @argvcopy) {
 288     die "reconfiguring with other arguments present isn't supported"
 289         if scalar @argvcopy > 1;
 290     if (-f "./configdata.pm") {
 291         my $file = "./configdata.pm";
 292         unless (my $return = do $file) {
 293             die "couldn't parse $file: $@" if $@;
 294             die "couldn't do $file: $!"    unless defined $return;
 295             die "couldn't run $file"       unless $return;
 296         }
 297
 298         @argvcopy = defined($configdata::config{perlargv}) ?
 299             @{$configdata::config{perlargv}} : ();
 300         die "Incorrect data to reconfigure, please do a normal configuration\n"
 301             if (grep(/^reconf/,@argvcopy));
 302         $config{perlenv} = $configdata::config{perlenv} // {};
 303     } else {
 304         die "Insufficient data to reconfigure, please do a normal configuration\n";
 305     }
 306 }
 307
 308 $config{perlargv} = [ @argvcopy ];
 309
 310 # Historical: if known directories in crypto/ have been removed, it means
 311 # that those sub-systems are disabled.
 312 # (the other option would be to removed them from the SUBDIRS statement in
 313 # crypto/build.info)
 314 # We reverse the input list for cosmetic purely reasons, to compensate that
 315 # 'unshift' adds at the front of the list (i.e. in reverse input order).
 316 foreach ( reverse sort( 'aes', 'aria', 'bf', 'camellia', 'cast', 'des', 'dh',
 317                         'dsa', 'ec', 'hmac', 'idea', 'md2', 'md5', 'mdc2',
 318                         'rc2', 'rc4', 'rc5', 'ripemd', 'seed', 'sha',
 319                         'sm2', 'sm3', 'sm4') ) {
 320     unshift @argvcopy, "no-$_" if ! -d catdir($srcdir, 'crypto', $_);
 321 }
 322
 323 # Collect version numbers
 324 my %version = ();
 325
 326 collect_information(
 327     collect_from_file(catfile($srcdir,'VERSION.dat')),
 328     qr/\s*(\w+)\s*=\s*(.*?)\s*$/ =>
 329         sub {
 330             # Only define it if there is a value at all
 331             if ($2 ne '') {
 332                 my $k = $1;
 333                 my $v = $2;
 334                 # Some values are quoted.  Trim the quotes
 335                 $v = $1 if $v =~ /^"(.*)"$/;
 336                 $version{uc $k} = $v;
 337             }
 338         },
 339     "OTHERWISE" =>
 340         sub { die "Something wrong with this line:\n$_\nin $srcdir/VERSION.dat" },
 341     );
 342
 343 $config{major} = $version{MAJOR} // 'unknown';
 344 $config{minor} = $version{MINOR} // 'unknown';
 345 $config{patch} = $version{PATCH} // 'unknown';
 346 $config{prerelease} =
 347     defined $version{PRE_RELEASE_TAG} ? "-$version{PRE_RELEASE_TAG}" : '';
 348 $config{build_metadata} =
 349     defined $version{BUILD_METADATA} ? "+$version{BUILD_METADATA}" : '';
 350 $config{shlib_version} = $version{SHLIB_VERSION} // 'unknown';
 351 $config{release_date} = $version{RELEASE_DATE} // 'xx XXX xxxx';
 352
 353 $config{version} = "$config{major}.$config{minor}.$config{patch}";
 354 $config{full_version} = "$config{version}$config{prerelease}$config{build_metadata}";
 355
 356 die "erroneous version information in VERSION.dat: ",
 357     "$config{version}, $config{shlib_version}\n"
 358     unless (defined $version{MAJOR}
 359             && defined $version{MINOR}
 360             && defined $version{PATCH}
 361             && defined $version{SHLIB_VERSION});
 362
 363 # Collect target configurations
 364
 365 my $pattern = catfile(dirname($0), "Configurations", "*.conf");
 366 foreach (sort glob($pattern)) {
 367     &read_config($_);
 368 }
 369
 370 if (defined env($local_config_envname)) {
 371     if ($^O eq 'VMS') {
 372         # VMS environment variables are logical names,
 373         # which can be used as is
 374         $pattern = $local_config_envname . ':' . '*.conf';
 375     } else {
 376         $pattern = catfile(env($local_config_envname), '*.conf');
 377     }
 378
 379     foreach (sort glob($pattern)) {
 380         &read_config($_);
 381     }
 382 }
 383
 384 # Save away perl command information
 385 $config{perl_cmd} = $^X;
 386 $config{perl_version} = $Config{version};
 387 $config{perl_archname} = $Config{archname};
 388
 389 $config{prefix}="";
 390 $config{openssldir}="";
 391 $config{processor}="";
 392 $config{libdir}="";
 393 my $auto_threads=1;    # enable threads automatically? true by default
 394 my $default_ranlib;
 395
 396 # Known TLS and DTLS protocols
 397 my @tls = qw(ssl3 tls1 tls1_1 tls1_2 tls1_3);
 398 my @dtls = qw(dtls1 dtls1_2);
 399
 400 # Explicitly known options that are possible to disable.  They can
 401 # be regexps, and will be used like this: /^no-${option}$/
 402 # For developers: keep it sorted alphabetically
 403
 404 my @disablables = (
 405     "acvp-tests",
 406     "afalgeng",
 407     "aria",
 408     "asan",
 409     "asm",
 410     "async",
 411     "autoalginit",
 412     "autoerrinit",
 413     "autoload-config",
 414     "bf",
 415     "blake2",
 416     "buildtest-c++",
 417     "bulk",
 418     "cached-fetch",
 419     "camellia",
 420     "capieng",
 421     "cast",
 422     "chacha",
 423     "cmac",
 424     "cmp",
 425     "cms",
 426     "comp",
 427     "crypto-mdebug",
 428     "ct",
 429     "deprecated",
 430     "des",
 431     "devcryptoeng",
 432     "dgram",
 433     "dh",
 434     "dsa",
 435     "dso",
 436     "dtls",
 437     "dynamic-engine",
 438     "ec",
 439     "ec2m",
 440     "ec_nistp_64_gcc_128",
 441     "ecdh",
 442     "ecdsa",
 443     "egd",
 444     "engine",
 445     "err",
 446     "external-tests",
 447     "filenames",
 448     "fips",
 449     "fips-securitychecks",
 450     "fuzz-afl",
 451     "fuzz-libfuzzer",
 452     "gost",
 453     "idea",
 454     "ktls",
 455     "legacy",
 456     "loadereng",
 457     "makedepend",
 458     "md2",
 459     "md4",
 460     "mdc2",
 461     "module",
 462     "msan",
 463     "multiblock",
 464     "nextprotoneg",
 465     "ocb",
 466     "ocsp",
 467     "padlockeng",
 468     "pic",
 469     "pinshared",
 470     "poly1305",
 471     "posix-io",
 472     "psk",
 473     "quic",
 474     "rc2",
 475     "rc4",
 476     "rc5",
 477     "rdrand",
 478     "rfc3779",
 479     "rmd160",
 480     "scrypt",
 481     "sctp",
 482     "secure-memory",
 483     "seed",
 484     "shared",
 485     "siphash",
 486     "siv",
 487     "sm2",
 488     "sm3",
 489     "sm4",
 490     "sock",
 491     "srp",
 492     "srtp",
 493     "sse2",
 494     "ssl",
 495     "ssl-trace",
 496     "static-engine",
 497     "stdio",
 498     "tests",
 499     "tfo",
 500     "threads",
 501     "tls",
 502     "trace",
 503     "ts",
 504     "ubsan",
 505     "ui-console",
 506     "unit-test",
 507     "uplink",
 508     "weak-ssl-ciphers",
 509     "whirlpool",
 510     "zlib",
 511     "zlib-dynamic",
 512     );
 513 foreach my $proto ((@tls, @dtls))
 514         {
 515         push(@disablables, $proto);
 516         push(@disablables, "$proto-method") unless $proto eq "tls1_3";
 517         }
 518
 519 # Internal disablables, for aliasing purposes.  They serve no special
 520 # purpose here, but allow scripts to get to know them through configdata.pm,
 521 # where these are merged with @disablables.
 522 # The actual aliasing mechanism is done via %disable_cascades
 523 my @disablables_int = qw(
 524     crmf
 525     );
 526
 527 my %deprecated_disablables = (
 528     "ssl2" => undef,
 529     "buf-freelists" => undef,
 530     "crypto-mdebug-backtrace" => undef,
 531     "hw" => "hw",               # causes cascade, but no macro
 532     "hw-padlock" => "padlockeng",
 533     "ripemd" => "rmd160",
 534     "ui" => "ui-console",
 535     "heartbeats" => undef,
 536     );
 537
 538 # All of the following are disabled by default:
 539
 540 our %disabled = ( # "what"         => "comment"
 541                   "fips"                => "default",
 542                   "asan"                => "default",
 543                   "buildtest-c++"       => "default",
 544                   "crypto-mdebug"       => "default",
 545                   "crypto-mdebug-backtrace" => "default",
 546                   "devcryptoeng"        => "default",
 547                   "ec_nistp_64_gcc_128" => "default",
 548                   "egd"                 => "default",
 549                   "external-tests"      => "default",
 550                   "fuzz-afl"            => "default",
 551                   "fuzz-libfuzzer"      => "default",
 552                   "ktls"                => "default",
 553                   "md2"                 => "default",
 554                   "msan"                => "default",
 555                   "quic"                => "default",
 556                   "rc5"                 => "default",
 557                   "sctp"                => "default",
 558                   "ssl3"                => "default",
 559                   "ssl3-method"         => "default",
 560                   "tfo"                 => "default",
 561                   "trace"               => "default",
 562                   "ubsan"               => "default",
 563                   "unit-test"           => "default",
 564                   "weak-ssl-ciphers"    => "default",
 565                   "zlib"                => "default",
 566                   "zlib-dynamic"        => "default",
 567                 );
 568
 569 # Note: => pair form used for aesthetics, not to truly make a hash table
 570 my @disable_cascades = (
 571     # "what"            => [ "cascade", ... ]
 572     "bulk"              => [ "shared", "dso",
 573                              "aria", "async", "autoload-config",
 574                              "blake2", "bf", "camellia", "cast", "chacha",
 575                              "cmac", "cms", "cmp", "comp", "ct",
 576                              "des", "dgram", "dh", "dsa",
 577                              "ec", "engine",
 578                              "filenames",
 579                              "idea", "ktls",
 580                              "md4", "multiblock", "nextprotoneg",
 581                              "ocsp", "ocb", "poly1305", "psk",
 582                              "rc2", "rc4", "rmd160",
 583                              "seed", "siphash", "siv",
 584                              "sm3", "sm4", "srp",
 585                              "srtp", "ssl3-method", "ssl-trace",
 586                              "tfo",
 587                              "ts", "ui-console", "whirlpool",
 588                              "fips-securitychecks" ],
 589     sub { $config{processor} eq "386" }
 590                         => [ "sse2" ],
 591     "ssl"               => [ "ssl3" ],
 592     "ssl3-method"       => [ "ssl3" ],
 593     "zlib"              => [ "zlib-dynamic" ],
 594     "des"               => [ "mdc2" ],
 595     "ec"                => [ "ec2m", "ecdsa", "ecdh", "sm2", "gost" ],
 596     "dgram"             => [ "dtls", "quic", "sctp" ],
 597     "sock"              => [ "dgram", "tfo" ],
 598     "dtls"              => [ @dtls ],
 599     sub { 0 == scalar grep { !$disabled{$_} } @dtls }
 600                         => [ "dtls" ],
 601
 602     "tls"               => [ @tls ],
 603     sub { 0 == scalar grep { !$disabled{$_} } @tls }
 604                         => [ "tls" ],
 605
 606     "crypto-mdebug"     => [ "crypto-mdebug-backtrace" ],
 607
 608     # If no modules, then no dynamic engines either
 609     "module"            => [ "dynamic-engine" ],
 610
 611     # Without shared libraries, dynamic engines aren't possible.
 612     # This is due to them having to link with libcrypto and register features
 613     # using the ENGINE functionality, and since that relies on global tables,
 614     # those *have* to be exactly the same as the ones accessed from the app,
 615     # which cannot be guaranteed if shared libraries aren't present.
 616     # (note that even with shared libraries, both the app and dynamic engines
 617     # must be linked with the same library)
 618     "shared"            => [ "dynamic-engine", "uplink" ],
 619     "dso"               => [ "dynamic-engine", "module" ],
 620     # Other modules don't necessarily have to link with libcrypto, so shared
 621     # libraries do not have to be a condition to produce those.
 622
 623     # Without position independent code, there can be no shared libraries
 624     # or modules.
 625     "pic"               => [ "shared", "module" ],
 626
 627     "module"            => [ "fips", "dso" ],
 628
 629     "engine"            => [ "dynamic-engine", grep(/eng$/, @disablables) ],
 630     "dynamic-engine"    => [ "loadereng" ],
 631     "hw"                => [ "padlockeng" ],
 632
 633     # no-autoalginit is only useful when building non-shared
 634     "autoalginit"       => [ "shared", "apps", "fips" ],
 635
 636     "stdio"             => [ "apps", "capieng", "egd" ],
 637     "apps"              => [ "tests" ],
 638     "tests"             => [ "external-tests" ],
 639     "comp"              => [ "zlib" ],
 640     "sm3"               => [ "sm2" ],
 641     sub { !$disabled{"unit-test"} } => [ "heartbeats" ],
 642
 643     sub { !$disabled{"msan"} } => [ "asm" ],
 644
 645     "cmac"              => [ "siv" ],
 646     "legacy"            => [ "md2" ],
 647
 648     "cmp"               => [ "crmf" ],
 649
 650     "fips"              => [ "fips-securitychecks", "acvp-tests" ],
 651
 652     "deprecated-3.0"    => [ "engine", "srp" ]
 653     );
 654
 655 # Avoid protocol support holes.  Also disable all versions below N, if version
 656 # N is disabled while N+1 is enabled.
 657 #
 658 my @list = (reverse @tls);
 659 while ((my $first, my $second) = (shift @list, shift @list)) {
 660     last unless @list;
 661     push @disable_cascades, ( sub { !$disabled{$first} && $disabled{$second} }
 662                               => [ @list ] );
 663     unshift @list, $second;
 664 }
 665 my @list = (reverse @dtls);
 666 while ((my $first, my $second) = (shift @list, shift @list)) {
 667     last unless @list;
 668     push @disable_cascades, ( sub { !$disabled{$first} && $disabled{$second} }
 669                               => [ @list ] );
 670     unshift @list, $second;
 671 }
 672
 673 # Explicit "no-..." options will be collected in %disabled along with the defaults.
 674 # To remove something from %disabled, use "enable-foo".
 675 # For symmetry, "disable-foo" is a synonym for "no-foo".
 676
 677 # For the "make variables" CPPINCLUDES and CPPDEFINES, we support lists with
 678 # platform specific list separators.  Users from those platforms should
 679 # recognise those separators from how you set up the PATH to find executables.
 680 # The default is the Unix like separator, :, but as an exception, we also
 681 # support the space as separator.
 682 my $list_separator_re =
 683     { VMS           => qr/(?<!\^),/,
 684       MSWin32       => qr/(?<!\\);/ } -> {$^O} // qr/(?<!\\)[:\s]/;
 685 # All the "make variables" we support
 686 # Some get pre-populated for the sake of backward compatibility
 687 # (we supported those before the change to "make variable" support.
 688 my %user = (
 689     AR          => env('AR'),
 690     ARFLAGS     => [],
 691     AS          => undef,
 692     ASFLAGS     => [],
 693     CC          => env('CC'),
 694     CFLAGS      => [ env('CFLAGS') || () ],
 695     CXX         => env('CXX'),
 696     CXXFLAGS    => [ env('CXXFLAGS') || () ],
 697     CPP         => undef,
 698     CPPFLAGS    => [ env('CPPFLAGS') || () ],  # -D, -I, -Wp,
 699     CPPDEFINES  => [],  # Alternative for -D
 700     CPPINCLUDES => [],  # Alternative for -I
 701     CROSS_COMPILE => env('CROSS_COMPILE'),
 702     HASHBANGPERL=> env('HASHBANGPERL') || env('PERL'),
 703     LD          => undef,
 704     LDFLAGS     => [ env('LDFLAGS') || () ],  # -L, -Wl,
 705     LDLIBS      => [ env('LDLIBS') || () ],  # -l
 706     MT          => undef,
 707     MTFLAGS     => [],
 708     PERL        => env('PERL') || ($^O ne "VMS" ? $^X : "perl"),
 709     RANLIB      => env('RANLIB'),
 710     RC          => env('RC') || env('WINDRES'),
 711     RCFLAGS     => [ env('RCFLAGS') || () ],
 712     RM          => undef,
 713    );
 714 # Info about what "make variables" may be prefixed with the cross compiler
 715 # prefix.  This should NEVER mention any such variable with a list for value.
 716 my @user_crossable = qw ( AR AS CC CXX CPP LD MT RANLIB RC );
 717 # The same but for flags given as Configure options.  These are *additional*
 718 # input, as opposed to the VAR=string option that override the corresponding
 719 # config target attributes
 720 my %useradd = (
 721     CPPDEFINES  => [],
 722     CPPINCLUDES => [],
 723     CPPFLAGS    => [],
 724     CFLAGS      => [],
 725     CXXFLAGS    => [],
 726     LDFLAGS     => [],
 727     LDLIBS      => [],
 728     RCFLAGS     => [],
 729    );
 730
 731 my %user_synonyms = (
 732     HASHBANGPERL=> 'PERL',
 733     RC          => 'WINDRES',
 734    );
 735
 736 # Some target attributes have been renamed, this is the translation table
 737 my %target_attr_translate =(
 738     ar          => 'AR',
 739     as          => 'AS',
 740     cc          => 'CC',
 741     cxx         => 'CXX',
 742     cpp         => 'CPP',
 743     hashbangperl => 'HASHBANGPERL',
 744     ld          => 'LD',
 745     mt          => 'MT',
 746     ranlib      => 'RANLIB',
 747     rc          => 'RC',
 748     rm          => 'RM',
 749    );
 750
 751 # Initialisers coming from 'config' scripts
 752 $config{defines} = [ split(/$list_separator_re/, env('__CNF_CPPDEFINES')) ];
 753 $config{includes} = [ split(/$list_separator_re/, env('__CNF_CPPINCLUDES')) ];
 754 $config{cppflags} = [ env('__CNF_CPPFLAGS') || () ];
 755 $config{cflags} = [ env('__CNF_CFLAGS') || () ];
 756 $config{cxxflags} = [ env('__CNF_CXXFLAGS') || () ];
 757 $config{lflags} = [ env('__CNF_LDFLAGS') || () ];
 758 $config{ex_libs} = [ env('__CNF_LDLIBS') || () ];
 759
 760 $config{openssl_api_defines}=[];
 761 $config{openssl_sys_defines}=[];
 762 $config{openssl_feature_defines}=[];
 763 $config{options}="";
 764 $config{build_type} = "release";
 765 my $target="";
 766
 767 my %cmdvars = ();               # Stores FOO='blah' type arguments
 768 my %unsupported_options = ();
 769 my %deprecated_options = ();
 770 # If you change this, update apps/version.c
 771 my @known_seed_sources = qw(getrandom devrandom os egd none rdcpu librandom);
 772 my @seed_sources = ();
 773 while (@argvcopy)
 774         {
 775         $_ = shift @argvcopy;
 776
 777         # Support env variable assignments among the options
 778         if (m|^(\w+)=(.+)?$|)
 779                 {
 780                 $cmdvars{$1} = $2;
 781                 # Every time a variable is given as a configuration argument,
 782                 # it acts as a reset if the variable.
 783                 if (exists $user{$1})
 784                         {
 785                         $user{$1} = ref $user{$1} eq "ARRAY" ? [] : undef;
 786                         }
 787                 #if (exists $useradd{$1})
 788                 #       {
 789                 #       $useradd{$1} = [];
 790                 #       }
 791                 next;
 792                 }
 793
 794         # VMS is a case insensitive environment, and depending on settings
 795         # out of our control, we may receive options uppercased.  Let's
 796         # downcase at least the part before any equal sign.
 797         if ($^O eq "VMS")
 798                 {
 799                 s/^([^=]*)/lc($1)/e;
 800                 }
 801
 802         # some people just can't read the instructions, clang people have to...
 803         s/^-no-(?!integrated-as)/no-/;
 804
 805         # rewrite some options in "enable-..." form
 806         s /^-?-?shared$/enable-shared/;
 807         s /^sctp$/enable-sctp/;
 808         s /^threads$/enable-threads/;
 809         s /^zlib$/enable-zlib/;
 810         s /^zlib-dynamic$/enable-zlib-dynamic/;
 811         s /^fips$/enable-fips/;
 812
 813         if (/^(no|disable|enable)-(.+)$/)
 814                 {
 815                 my $word = $2;
 816                 if ($word !~ m|hw(?:-.+)| # special treatment for hw regexp opt
 817                         && !exists $deprecated_disablables{$word}
 818                         && !grep { $word eq $_ } @disablables)
 819                         {
 820                         $unsupported_options{$_} = 1;
 821                         next;
 822                         }
 823                 }
 824         if (/^no-(.+)$/ || /^disable-(.+)$/)
 825                 {
 826                 foreach my $proto ((@tls, @dtls))
 827                         {
 828                         if ($1 eq "$proto-method")
 829                                 {
 830                                 $disabled{"$proto"} = "option($proto-method)";
 831                                 last;
 832                                 }
 833                         }
 834                 if ($1 eq "dtls")
 835                         {
 836                         foreach my $proto (@dtls)
 837                                 {
 838                                 $disabled{$proto} = "option(dtls)";
 839                                 }
 840                         $disabled{"dtls"} = "option(dtls)";
 841                         }
 842                 elsif ($1 eq "ssl")
 843                         {
 844                         # Last one of its kind
 845                         $disabled{"ssl3"} = "option(ssl)";
 846                         }
 847                 elsif ($1 eq "tls")
 848                         {
 849                         # XXX: Tests will fail if all SSL/TLS
 850                         # protocols are disabled.
 851                         foreach my $proto (@tls)
 852                                 {
 853                                 $disabled{$proto} = "option(tls)";
 854                                 }
 855                         }
 856                 elsif ($1 eq "static-engine")
 857                         {
 858                         delete $disabled{"dynamic-engine"};
 859                         }
 860                 elsif ($1 eq "dynamic-engine")
 861                         {
 862                         $disabled{"dynamic-engine"} = "option";
 863                         }
 864                 elsif (exists $deprecated_disablables{$1})
 865                         {
 866                         $deprecated_options{$_} = 1;
 867                         if (defined $deprecated_disablables{$1})
 868                                 {
 869                                 $disabled{$deprecated_disablables{$1}} = "option";
 870                                 }
 871                         }
 872                 elsif ($1 =~ m|hw(?:-.+)|) # deprecate hw options in regexp form
 873                         {
 874                         $deprecated_options{$_} = 1;
 875                         }
 876                 else
 877                         {
 878                         $disabled{$1} = "option";
 879                         }
 880                 # No longer an automatic choice
 881                 $auto_threads = 0 if ($1 eq "threads");
 882                 }
 883         elsif (/^enable-(.+)$/)
 884                 {
 885                 if ($1 eq "static-engine")
 886                         {
 887                         $disabled{"dynamic-engine"} = "option";
 888                         }
 889                 elsif ($1 eq "dynamic-engine")
 890                         {
 891                         delete $disabled{"dynamic-engine"};
 892                         }
 893                 elsif ($1 eq "zlib-dynamic")
 894                         {
 895                         delete $disabled{"zlib"};
 896                         }
 897                 my $algo = $1;
 898                 delete $disabled{$algo};
 899
 900                 # No longer an automatic choice
 901                 $auto_threads = 0 if ($1 eq "threads");
 902                 }
 903         elsif (/^-d$/)          # From older 'config'
 904                 {
 905                 $config{build_type} = "debug";
 906                 }
 907         elsif (/^-v$/)          # From older 'config'
 908                 {
 909                 $guess_opts{verbose} = 1;
 910                 }
 911         elsif (/^-w$/)
 912                 {
 913                 $guess_opts{nowait} = 1;
 914                 }
 915         elsif (/^-t$/)          # From older 'config'
 916                 {
 917                 $dryrun = 1;
 918                 }
 919         elsif (/^--strict-warnings$/)
 920                 {
 921                 # Pretend that our strict flags is a C flag, and replace it
 922                 # with the proper flags later on
 923                 push @{$useradd{CFLAGS}}, '--ossl-strict-warnings';
 924                 $strict_warnings=1;
 925                 }
 926         elsif (/^--debug$/)
 927                 {
 928                 $config{build_type} = "debug";
 929                 }
 930         elsif (/^--release$/)
 931                 {
 932                 $config{build_type} = "release";
 933                 }
 934         elsif (/^386$/)
 935                 { $config{processor}=386; }
 936         elsif (/^rsaref$/)
 937                 {
 938                 # No RSAref support any more since it's not needed.
 939                 # The check for the option is there so scripts aren't
 940                 # broken
 941                 }
 942         elsif (m|^[-+/]|)
 943                 {
 944                 if (/^--prefix=(.*)$/)
 945                         {
 946                         $config{prefix}=$1;
 947                         die "Directory given with --prefix MUST be absolute\n"
 948                                 unless file_name_is_absolute($config{prefix});
 949                         }
 950                 elsif (/^--api=(.*)$/)
 951                         {
 952                         my $api = $1;
 953                         die "Unknown API compatibility level $api"
 954                                 unless defined $apitable->{$api};
 955                         $config{api}=$apitable->{$api};
 956                         }
 957                 elsif (/^--libdir=(.*)$/)
 958                         {
 959                         $config{libdir}=$1;
 960                         }
 961                 elsif (/^--openssldir=(.*)$/)
 962                         {
 963                         $config{openssldir}=$1;
 964                         }
 965                 elsif (/^--with-zlib-lib=(.*)$/)
 966                         {
 967                         $withargs{zlib_lib}=$1;
 968                         }
 969                 elsif (/^--with-zlib-include=(.*)$/)
 970                         {
 971                         $withargs{zlib_include}=$1;
 972                         }
 973                 elsif (/^--with-fuzzer-lib=(.*)$/)
 974                         {
 975                         $withargs{fuzzer_lib}=$1;
 976                         }
 977                 elsif (/^--with-fuzzer-include=(.*)$/)
 978                         {
 979                         $withargs{fuzzer_include}=$1;
 980                         }
 981                 elsif (/^--with-rand-seed=(.*)$/)
 982                         {
 983                         foreach my $x (split(m|,|, $1))
 984                             {
 985                             die "Unknown --with-rand-seed choice $x\n"
 986                                 if ! grep { $x eq $_ } @known_seed_sources;
 987                             push @seed_sources, $x;
 988                             }
 989                         }
 990                 elsif (/^--fips-key=(.*)$/)
 991                         {
 992                         $user{FIPSKEY}=lc($1);
 993                         die "Non-hex character in FIPS key\n"
 994                            if $user{FIPSKEY} =~ /[^a-f0-9]/;
 995                         die "FIPS key must have even number of characters\n"
 996                            if length $1 & 1;
 997                         die "FIPS key too long (64 bytes max)\n"
 998                            if length $1 > 64;
 999                         }
1000                 elsif (/^--banner=(.*)$/)
1001                         {
1002                         $banner = $1 . "\n";
1003                         }
1004                 elsif (/^--cross-compile-prefix=(.*)$/)
1005                         {
1006                         $user{CROSS_COMPILE}=$1;
1007                         }
1008                 elsif (/^--config=(.*)$/)
1009                         {
1010                         read_config $1;
1011                         }
1012                 elsif (/^-l(.*)$/)
1013                         {
1014                         push @{$useradd{LDLIBS}}, $_;
1015                         }
1016                 elsif (/^-framework$/)
1017                         {
1018                         push @{$useradd{LDLIBS}}, $_, shift(@argvcopy);
1019                         }
1020                 elsif (/^-L(.*)$/ or /^-Wl,/)
1021                         {
1022                         push @{$useradd{LDFLAGS}}, $_;
1023                         }
1024                 elsif (/^-rpath$/ or /^-R$/)
1025                         # -rpath is the OSF1 rpath flag
1026                         # -R is the old Solaris rpath flag
1027                         {
1028                         my $rpath = shift(@argvcopy) || "";
1029                         $rpath .= " " if $rpath ne "";
1030                         push @{$useradd{LDFLAGS}}, $_, $rpath;
1031                         }
1032                 elsif (/^-static$/)
1033                         {
1034                         push @{$useradd{LDFLAGS}}, $_;
1035                         }
1036                 elsif (m|^[-/]D(.*)$|)
1037                         {
1038                         push @{$useradd{CPPDEFINES}}, $1;
1039                         }
1040                 elsif (m|^[-/]I(.*)$|)
1041                         {
1042                         push @{$useradd{CPPINCLUDES}}, $1;
1043                         }
1044                 elsif (/^-Wp,$/)
1045                         {
1046                         push @{$useradd{CPPFLAGS}}, $1;
1047                         }
1048                 else    # common if (/^[-+]/), just pass down...
1049                         {
1050                         # Treat %xx as an ASCII code (e.g. replace %20 by a space character).
1051                         # This provides a simple way to pass options with arguments separated
1052                         # by spaces without quoting (e.g. -opt%20arg translates to -opt arg).
1053                         $_ =~ s/%([0-9a-f]{1,2})/chr(hex($1))/gei;
1054                         push @{$useradd{CFLAGS}}, $_;
1055                         push @{$useradd{CXXFLAGS}}, $_;
1056                         }
1057                 }
1058         elsif (m|^/|)
1059                 {
1060                 # Treat %xx as an ASCII code (e.g. replace %20 by a space character).
1061                 # This provides a simple way to pass options with arguments separated
1062                 # by spaces without quoting (e.g. /opt%20arg translates to /opt arg).
1063                 $_ =~ s/%([0-9a-f]{1,2})/chr(hex($1))/gei;
1064                 push @{$useradd{CFLAGS}}, $_;
1065                 push @{$useradd{CXXFLAGS}}, $_;
1066                 }
1067         else
1068                 {
1069                 die "target already defined - $target (offending arg: $_)\n" if ($target ne "");
1070                 $target=$_;
1071                 }
1072         unless ($_ eq $target || /^no-/ || /^disable-/)
1073                 {
1074                 # "no-..." follows later after implied deactivations
1075                 # have been derived.  (Don't take this too seriously,
1076                 # we really only write OPTIONS to the Makefile out of
1077                 # nostalgia.)
1078
1079                 if ($config{options} eq "")
1080                         { $config{options} = $_; }
1081                 else
1082                         { $config{options} .= " ".$_; }
1083                 }
1084         }
1085
1086 if (keys %deprecated_options)
1087         {
1088         warn "***** Deprecated options: ",
1089                 join(", ", keys %deprecated_options), "\n";
1090         }
1091 if (keys %unsupported_options)
1092         {
1093         die "***** Unsupported options: ",
1094                 join(", ", keys %unsupported_options), "\n";
1095         }
1096
1097 # If any %useradd entry has been set, we must check that the "make
1098 # variables" haven't been set.  We start by checking of any %useradd entry
1099 # is set.
1100 if (grep { scalar @$_ > 0 } values %useradd) {
1101     # Hash of env / make variables names.  The possible values are:
1102     # 1 - "make vars"
1103     # 2 - %useradd entry set
1104     # 3 - both set
1105     my %detected_vars =
1106         map { my $v = 0;
1107               $v += 1 if $cmdvars{$_};
1108               $v += 2 if @{$useradd{$_}};
1109               $_ => $v }
1110         keys %useradd;
1111
1112     # If any of the corresponding "make variables" is set, we error
1113     if (grep { $_ & 1 } values %detected_vars) {
1114         my $names = join(', ', grep { $detected_vars{$_} > 0 }
1115                                sort keys %detected_vars);
1116         die <<"_____";
1117 ***** Mixing make variables and additional compiler/linker flags as
1118 ***** configure command line option is not permitted.
1119 ***** Affected make variables: $names
1120 _____
1121     }
1122 }
1123
1124 # Check through all supported command line variables to see if any of them
1125 # were set, and canonicalise the values we got.  If no compiler or linker
1126 # flag or anything else that affects %useradd was set, we also check the
1127 # environment for values.
1128 my $anyuseradd =
1129     grep { defined $_ && (ref $_ ne 'ARRAY' || @$_) } values %useradd;
1130 foreach (keys %user) {
1131     my $value = $cmdvars{$_};
1132     $value //= env($_) unless $anyuseradd;
1133     $value //=
1134         defined $user_synonyms{$_} ? $cmdvars{$user_synonyms{$_}} : undef;
1135     $value //= defined $user_synonyms{$_} ? env($user_synonyms{$_}) : undef
1136         unless $anyuseradd;
1137
1138     if (defined $value) {
1139         if (ref $user{$_} eq 'ARRAY') {
1140             if ($_ eq 'CPPDEFINES' || $_ eq 'CPPINCLUDES') {
1141                 $user{$_} = [ split /$list_separator_re/, $value ];
1142             } else {
1143                 $user{$_} = [ $value ];
1144             }
1145         } elsif (!defined $user{$_}) {
1146             $user{$_} = $value;
1147         }
1148     }
1149 }
1150
1151 if (grep { /-rpath\b/ } ($user{LDFLAGS} ? @{$user{LDFLAGS}} : ())
1152     && !$disabled{shared}
1153     && !($disabled{asan} && $disabled{msan} && $disabled{ubsan})) {
1154     die "***** Cannot simultaneously use -rpath, shared libraries, and\n",
1155         "***** any of asan, msan or ubsan\n";
1156 }
1157
1158 # If no target was given, try guessing.
1159 unless ($target) {
1160     my %system_config = OpenSSL::config::get_platform(%guess_opts, %user);
1161
1162     # The $system_config{disable} is used to populate %disabled with
1163     # entries that aren't already there.
1164     foreach ( @{$system_config{disable} // []} ) {
1165         $disabled{$_} = 'system' unless defined $disabled{$_};
1166     }
1167     delete $system_config{disable};
1168
1169     # Override config entries with stuff from the guesser.
1170     # It's assumed that this really is nothing new.
1171     %config = ( %config, %system_config );
1172     $target = $system_config{target};
1173 }
1174
1175 sub disable {
1176     my $disable_type = shift;
1177
1178     for (@_) {
1179         $disabled{$_} = $disable_type;
1180     }
1181
1182     my @tocheckfor = (@_ ? @_ : keys %disabled);
1183     while (@tocheckfor) {
1184         my %new_tocheckfor = ();
1185         my @cascade_copy = (@disable_cascades);
1186         while (@cascade_copy) {
1187             my ($test, $descendents) =
1188                 (shift @cascade_copy, shift @cascade_copy);
1189             if (ref($test) eq "CODE" ? $test->() : defined($disabled{$test})) {
1190                 foreach (grep { !defined($disabled{$_}) } @$descendents) {
1191                     $new_tocheckfor{$_} = 1; $disabled{$_} = "cascade";
1192                 }
1193             }
1194         }
1195         @tocheckfor = (keys %new_tocheckfor);
1196     }
1197 }
1198 disable();                     # First cascade run
1199
1200 our $die = sub { die @_; };
1201 if ($target eq "TABLE") {
1202     local $die = sub { warn @_; };
1203     foreach (sort keys %table) {
1204         print_table_entry($_, "TABLE");
1205     }
1206     exit 0;
1207 }
1208
1209 if ($target eq "LIST") {
1210     foreach (sort keys %table) {
1211         print $_,"\n" unless $table{$_}->{template};
1212     }
1213     exit 0;
1214 }
1215
1216 if ($target eq "HASH") {
1217     local $die = sub { warn @_; };
1218     print "%table = (\n";
1219     foreach (sort keys %table) {
1220         print_table_entry($_, "HASH");
1221     }
1222     exit 0;
1223 }
1224
1225 print "Configuring OpenSSL version $config{full_version} ";
1226 print "for target $target\n";
1227
1228 if (scalar(@seed_sources) == 0) {
1229     print "Using os-specific seed configuration\n";
1230     push @seed_sources, 'os';
1231 }
1232 if (scalar(grep { $_ eq 'egd' } @seed_sources) > 0) {
1233     delete $disabled{'egd'};
1234 }
1235 if (scalar(grep { $_ eq 'none' } @seed_sources) > 0) {
1236     die "Cannot seed with none and anything else" if scalar(@seed_sources) > 1;
1237     warn <<_____ if scalar(@seed_sources) == 1;
1238
1239 ============================== WARNING ===============================
1240 You have selected the --with-rand-seed=none option, which effectively
1241 disables automatic reseeding of the OpenSSL random generator.
1242 All operations depending on the random generator such as creating keys
1243 will not work unless the random generator is seeded manually by the
1244 application.
1245
1246 Please read the 'Note on random number generation' section in the
1247 INSTALL.md instructions and the RAND_DRBG(7) manual page for more
1248 details.
1249 ============================== WARNING ===============================
1250
1251 _____
1252 }
1253 push @{$config{openssl_feature_defines}},
1254      map { (my $x = $_) =~ tr|[\-a-z]|[_A-Z]|; "OPENSSL_RAND_SEED_$x" }
1255         @seed_sources;
1256
1257 # Backward compatibility?
1258 if ($target =~ m/^CygWin32(-.*)$/) {
1259     $target = "Cygwin".$1;
1260 }
1261
1262 # Support for legacy targets having a name starting with 'debug-'
1263 my ($d, $t) = $target =~ m/^(debug-)?(.*)$/;
1264 if ($d) {
1265     $config{build_type} = "debug";
1266
1267     # If we do not find debug-foo in the table, the target is set to foo.
1268     if (!$table{$target}) {
1269         $target = $t;
1270     }
1271 }
1272
1273 if ($target) {
1274     # It's possible that we have different config targets for specific
1275     # toolchains, so we try to detect them, and go for the plain config
1276     # target if not.
1277     my $found;
1278     foreach ( ( "$target-$user{CC}", "$target", undef ) ) {
1279         $found=$_ if $table{$_} && !$table{$_}->{template};
1280         last if $found;
1281     }
1282     $target = $found;
1283 } else {
1284     # If we don't have a config target now, we try the C compiler as we
1285     # fallback
1286     my $cc = $user{CC} // 'cc';
1287     $target = $cc if $table{$cc} && !$table{$cc}->{template};
1288 }
1289
1290 &usage unless $target;
1291
1292 exit 0 if $dryrun;              # From older 'config'
1293
1294 $config{target} = $target;
1295 my %target = resolve_config($target);
1296
1297 foreach (keys %target_attr_translate) {
1298     $target{$target_attr_translate{$_}} = $target{$_}
1299         if $target{$_};
1300     delete $target{$_};
1301 }
1302
1303 %target = ( %{$table{DEFAULTS}}, %target );
1304
1305 my %conf_files = map { $_ => 1 } (@{$target{_conf_fname_int}});
1306 $config{conf_files} = [ sort keys %conf_files ];
1307
1308 # Using sub disable within these loops may prove fragile, so we run
1309 # a cascade afterwards
1310 foreach my $feature (@{$target{disable}}) {
1311     if (exists $deprecated_disablables{$feature}) {
1312         warn "***** config $target disables deprecated feature $feature\n";
1313     } elsif (!grep { $feature eq $_ } @disablables) {
1314         die "***** config $target disables unknown feature $feature\n";
1315     }
1316     $disabled{$feature} = 'config';
1317 }
1318 foreach my $feature (@{$target{enable}}) {
1319     if ("default" eq ($disabled{$feature} // "")) {
1320         if (exists $deprecated_disablables{$feature}) {
1321             warn "***** config $target enables deprecated feature $feature\n";
1322         } elsif (!grep { $feature eq $_ } @disablables) {
1323             die "***** config $target enables unknown feature $feature\n";
1324         }
1325         delete $disabled{$feature};
1326     }
1327 }
1328
1329 # If uplink_arch isn't defined, disable uplink
1330 $disabled{uplink} = 'no uplink_arch' unless (defined $target{uplink_arch});
1331 # If asm_arch isn't defined, disable asm
1332 $disabled{asm} = 'no asm_arch' unless (defined $target{asm_arch});
1333
1334 disable();                      # Run a cascade now
1335
1336 $target{CXXFLAGS}//=$target{CFLAGS} if $target{CXX};
1337 $target{cxxflags}//=$target{cflags} if $target{CXX};
1338 $target{exe_extension}=".exe" if ($config{target} eq "DJGPP");
1339 $target{exe_extension}=".pm"  if ($config{target} =~ /vos/);
1340
1341 # Fill %config with values from %user, and in case those are undefined or
1342 # empty, use values from %target (acting as a default).
1343 foreach (keys %user) {
1344     my $ref_type = ref $user{$_};
1345
1346     # Temporary function.  Takes an intended ref type (empty string or "ARRAY")
1347     # and a value that's to be coerced into that type.
1348     my $mkvalue = sub {
1349         my $type = shift;
1350         my $value = shift;
1351         my $undef_p = shift;
1352
1353         die "Too many arguments for \$mkvalue" if @_;
1354
1355         while (ref $value eq 'CODE') {
1356             $value = $value->();
1357         }
1358
1359         if ($type eq 'ARRAY') {
1360             return undef unless defined $value;
1361             return undef if ref $value ne 'ARRAY' && !$value;
1362             return undef if ref $value eq 'ARRAY' && !@$value;
1363             return [ $value ] unless ref $value eq 'ARRAY';
1364         }
1365         return undef unless $value;
1366         return $value;
1367     };
1368
1369     $config{$_} =
1370         $mkvalue->($ref_type, $user{$_})
1371         || $mkvalue->($ref_type, $target{$_});
1372     delete $config{$_} unless defined $config{$_};
1373 }
1374
1375 # Finish up %config by appending things the user gave us on the command line
1376 # apart from "make variables"
1377 foreach (keys %useradd) {
1378     # The must all be lists, so we assert that here
1379     die "internal error: \$useradd{$_} isn't an ARRAY\n"
1380         unless ref $useradd{$_} eq 'ARRAY';
1381
1382     if (defined $config{$_}) {
1383         push @{$config{$_}}, @{$useradd{$_}};
1384     } else {
1385         $config{$_} = [ @{$useradd{$_}} ];
1386     }
1387 }
1388 # At this point, we can forget everything about %user and %useradd,
1389 # because it's now all been merged into the corresponding $config entry
1390
1391 if (grep { $_ =~ /(?:^|\s)-static(?:\s|$)/ } @{$config{LDFLAGS}}) {
1392     disable('static', 'pic', 'threads');
1393 }
1394
1395 # Allow overriding the build file name
1396 $config{build_file} = env('BUILDFILE') || $target{build_file} || "Makefile";
1397
1398 # Make sure build_scheme is consistent.
1399 $target{build_scheme} = [ $target{build_scheme} ]
1400     if ref($target{build_scheme}) ne "ARRAY";
1401
1402 my ($builder, $builder_platform, @builder_opts) =
1403     @{$target{build_scheme}};
1404
1405 foreach my $checker (($builder_platform."-".$target{build_file}."-checker.pm",
1406                       $builder_platform."-checker.pm")) {
1407     my $checker_path = catfile($srcdir, "Configurations", $checker);
1408     if (-f $checker_path) {
1409         my $fn = $ENV{CONFIGURE_CHECKER_WARN}
1410             ? sub { warn $@; } : sub { die $@; };
1411         if (! do $checker_path) {
1412             if ($@) {
1413                 $fn->($@);
1414             } elsif ($!) {
1415                 $fn->($!);
1416             } else {
1417                 $fn->("The detected tools didn't match the platform\n");
1418             }
1419         }
1420         last;
1421     }
1422 }
1423
1424 push @{$config{defines}}, "NDEBUG"    if $config{build_type} eq "release";
1425
1426 if ($target =~ /^mingw/ && `$config{CC} --target-help 2>&1` =~ m/-mno-cygwin/m)
1427         {
1428         push @{$config{cflags}}, "-mno-cygwin";
1429         push @{$config{cxxflags}}, "-mno-cygwin" if $config{CXX};
1430         push @{$config{shared_ldflag}}, "-mno-cygwin";
1431         }
1432
1433 if ($target =~ /linux.*-mips/ && !$disabled{asm}
1434         && !grep { $_ !~ /-m(ips|arch=)/ } (@{$config{CFLAGS}})) {
1435         # minimally required architecture flags for assembly modules
1436         my $value;
1437         $value = '-mips2' if ($target =~ /mips32/);
1438         $value = '-mips3' if ($target =~ /mips64/);
1439         unshift @{$config{cflags}}, $value;
1440         unshift @{$config{cxxflags}}, $value if $config{CXX};
1441 }
1442
1443 # If threads aren't disabled, check how possible they are
1444 unless ($disabled{threads}) {
1445     if ($auto_threads) {
1446         # Enabled by default, disable it forcibly if unavailable
1447         if ($target{thread_scheme} eq "(unknown)") {
1448             disable("unavailable", 'threads');
1449         }
1450     } else {
1451         # The user chose to enable threads explicitly, let's see
1452         # if there's a chance that's possible
1453         if ($target{thread_scheme} eq "(unknown)") {
1454             # If the user asked for "threads" and we don't have internal
1455             # knowledge how to do it, [s]he is expected to provide any
1456             # system-dependent compiler options that are necessary.  We
1457             # can't truly check that the given options are correct, but
1458             # we expect the user to know what [s]He is doing.
1459             if (!@{$config{CFLAGS}} && !@{$config{CPPDEFINES}}) {
1460                 die "You asked for multi-threading support, but didn't\n"
1461                     ,"provide any system-specific compiler options\n";
1462             }
1463         }
1464     }
1465 }
1466
1467 # Find out if clang's sanitizers have been enabled with -fsanitize
1468 # flags and ensure that the corresponding %disabled elements area
1469 # removed to reflect that the sanitizers are indeed enabled.
1470 my %detected_sanitizers = ();
1471 foreach (grep /^-fsanitize=/, @{$config{CFLAGS} || []}) {
1472     (my $checks = $_) =~ s/^-fsanitize=//;
1473     foreach (split /,/, $checks) {
1474         my $d = { address       => 'asan',
1475                   undefined     => 'ubsan',
1476                   memory        => 'msan' } -> {$_};
1477         next unless defined $d;
1478
1479         $detected_sanitizers{$d} = 1;
1480         if (defined $disabled{$d}) {
1481             die "***** Conflict between disabling $d and enabling $_ sanitizer"
1482                 if $disabled{$d} ne "default";
1483             delete $disabled{$d};
1484         }
1485     }
1486 }
1487
1488 # If threads still aren't disabled, add a C macro to ensure the source
1489 # code knows about it.  Any other flag is taken care of by the configs.
1490 unless($disabled{threads}) {
1491     push @{$config{openssl_feature_defines}}, "OPENSSL_THREADS";
1492 }
1493
1494 my $no_shared_warn=0;
1495 if (($target{shared_target} // '') eq "")
1496         {
1497         $no_shared_warn = 1
1498             if (!$disabled{shared} || !$disabled{"dynamic-engine"});
1499         disable('no-shared-target', 'pic');
1500         }
1501
1502 if ($disabled{"dynamic-engine"}) {
1503         $config{dynamic_engines} = 0;
1504 } else {
1505         $config{dynamic_engines} = 1;
1506 }
1507
1508 unless ($disabled{asan} || defined $detected_sanitizers{asan}) {
1509     push @{$config{cflags}}, "-fsanitize=address";
1510 }
1511
1512 unless ($disabled{ubsan} || defined $detected_sanitizers{ubsan}) {
1513     # -DPEDANTIC or -fnosanitize=alignment may also be required on some
1514     # platforms.
1515     push @{$config{cflags}}, "-fsanitize=undefined", "-fno-sanitize-recover=all";
1516 }
1517
1518 unless ($disabled{msan} || defined $detected_sanitizers{msan}) {
1519   push @{$config{cflags}}, "-fsanitize=memory";
1520 }
1521
1522 unless ($disabled{"fuzz-libfuzzer"} && $disabled{"fuzz-afl"}
1523         && $disabled{asan} && $disabled{ubsan} && $disabled{msan}) {
1524     push @{$config{cflags}}, "-fno-omit-frame-pointer", "-g";
1525     push @{$config{cxxflags}}, "-fno-omit-frame-pointer", "-g" if $config{CXX};
1526 }
1527 #
1528 # Platform fix-ups
1529 #
1530
1531 # This saves the build files from having to check
1532 if ($disabled{pic})
1533         {
1534         foreach (qw(shared_cflag shared_cxxflag shared_cppflag
1535                     shared_defines shared_includes shared_ldflag
1536                     module_cflags module_cxxflags module_cppflags
1537                     module_defines module_includes module_lflags))
1538                 {
1539                 delete $config{$_};
1540                 $target{$_} = "";
1541                 }
1542         }
1543 else
1544         {
1545         push @{$config{lib_defines}}, "OPENSSL_PIC";
1546         }
1547
1548 if ($target{sys_id} ne "")
1549         {
1550         push @{$config{openssl_sys_defines}}, "OPENSSL_SYS_$target{sys_id}";
1551         }
1552
1553 my %predefined_C = compiler_predefined($config{CROSS_COMPILE}.$config{CC});
1554 my %predefined_CXX = $config{CXX}
1555     ? compiler_predefined($config{CROSS_COMPILE}.$config{CXX})
1556     : ();
1557
1558 unless ($disabled{asm}) {
1559     # big endian systems can use ELFv2 ABI
1560     if ($target eq "linux-ppc64" || $target eq "BSD-ppc64") {
1561         $target{perlasm_scheme} = "linux64v2" if ($predefined_C{_CALL_ELF} == 2);
1562     }
1563 }
1564
1565 # Check for makedepend capabilities.
1566 if (!$disabled{makedepend}) {
1567     # If the attribute makedep_scheme is defined, then we assume that the
1568     # config target and its associated build file are programmed to deal
1569     # with it.
1570     # If makedep_scheme is undefined, we go looking for GCC compatible
1571     # dependency making, and if that's not available, we try to fall back
1572     # on 'makedepend'.
1573     if ($target{makedep_scheme}) {
1574         $config{makedep_scheme} = $target{makedep_scheme};
1575         # If the makedepcmd attribute is defined, copy it.  If not, the
1576         # build files will have to fend for themselves.
1577         $config{makedepcmd} = $target{makedepcmd} if $target{makedepcmd};
1578     } elsif (($predefined_C{__GNUC__} // -1) >= 3
1579              && !($predefined_C{__APPLE_CC__} && !$predefined_C{__clang__})) {
1580         # We know that GNU C version 3 and up as well as all clang
1581         # versions support dependency generation, but Xcode did not
1582         # handle $cc -M before clang support (but claims __GNUC__ = 3)
1583         $config{makedep_scheme} = 'gcc';
1584     } else {
1585         # In all other cases, we look for 'makedepend', and set the
1586         # makedep_scheme value if we found it.
1587         $config{makedepcmd} = which('makedepend');
1588         $config{makedep_scheme} = 'makedepend' if $config{makedepcmd};
1589     }
1590
1591     # If no depend scheme is set, we disable makedepend
1592     disable('unavailable', 'makedepend') unless $config{makedep_scheme};
1593 }
1594
1595 if (!$disabled{asm} && !$predefined_C{__MACH__} && $^O ne 'VMS') {
1596     # probe for -Wa,--noexecstack option...
1597     if ($predefined_C{__clang__}) {
1598         # clang has builtin assembler, which doesn't recognize --help,
1599         # but it apparently recognizes the option in question on all
1600         # supported platforms even when it's meaningless. In other words
1601         # probe would fail, but probed option always accepted...
1602         push @{$config{cflags}}, "-Wa,--noexecstack", "-Qunused-arguments";
1603     } else {
1604         my $cc = $config{CROSS_COMPILE}.$config{CC};
1605         open(PIPE, "$cc -Wa,--help -c -o null.$$.o -x assembler /dev/null 2>&1 |");
1606         while(<PIPE>) {
1607             if (m/--noexecstack/) {
1608                 push @{$config{cflags}}, "-Wa,--noexecstack";
1609                 last;
1610             }
1611         }
1612         close(PIPE);
1613         unlink("null.$$.o");
1614     }
1615 }
1616
1617 # Deal with bn_ops ###################################################
1618
1619 $config{bn_ll}                  =0;
1620 my $def_int="unsigned int";
1621 $config{rc4_int}                =$def_int;
1622 ($config{b64l},$config{b64},$config{b32})=(0,0,1);
1623
1624 my $count = 0;
1625 foreach (sort split(/\s+/,$target{bn_ops})) {
1626     $count++ if /SIXTY_FOUR_BIT|SIXTY_FOUR_BIT_LONG|THIRTY_TWO_BIT/;
1627     $config{bn_ll}=1                            if $_ eq 'BN_LLONG';
1628     $config{rc4_int}="unsigned char"            if $_ eq 'RC4_CHAR';
1629     ($config{b64l},$config{b64},$config{b32})
1630         =(0,1,0)                                if $_ eq 'SIXTY_FOUR_BIT';
1631     ($config{b64l},$config{b64},$config{b32})
1632         =(1,0,0)                                if $_ eq 'SIXTY_FOUR_BIT_LONG';
1633     ($config{b64l},$config{b64},$config{b32})
1634         =(0,0,1)                                if $_ eq 'THIRTY_TWO_BIT';
1635 }
1636 die "Exactly one of SIXTY_FOUR_BIT|SIXTY_FOUR_BIT_LONG|THIRTY_TWO_BIT can be set in bn_ops\n"
1637     if $count > 1;
1638
1639 $config{api} = $config{major} * 10000 + $config{minor} * 100
1640     unless $config{api};
1641 foreach (keys %$apitable) {
1642     $disabled{"deprecated-$_"} = "deprecation"
1643         if $disabled{deprecated} && $config{api} >= $apitable->{$_};
1644 }
1645
1646 disable();                      # Run a cascade now
1647
1648 # Hack cflags for better warnings (dev option) #######################
1649
1650 # "Stringify" the C and C++ flags string.  This permits it to be made part of
1651 # a string and works as well on command lines.
1652 $config{cflags} = [ map { (my $x = $_) =~ s/([\\\"])/\\$1/g; $x }
1653                         @{$config{cflags}} ];
1654 $config{cxxflags} = [ map { (my $x = $_) =~ s/([\\\"])/\\$1/g; $x }
1655                           @{$config{cxxflags}} ] if $config{CXX};
1656
1657 $config{openssl_api_defines} = [
1658     "OPENSSL_CONFIGURED_API=".$config{api},
1659 ];
1660
1661 my @strict_warnings_collection=();
1662 if ($strict_warnings)
1663         {
1664         my $wopt;
1665         my $gccver = $predefined_C{__GNUC__} // -1;
1666
1667         if ($gccver >= 4)
1668                 {
1669                 push @strict_warnings_collection, @gcc_devteam_warn;
1670                 push @strict_warnings_collection, @clang_devteam_warn
1671                     if (defined($predefined_C{__clang__}));
1672                 }
1673         elsif ($config{target} =~ /^VC-/)
1674                 {
1675                 push @strict_warnings_collection, @cl_devteam_warn;
1676                 }
1677         else
1678                 {
1679                 warn "WARNING --strict-warnings requires gcc[>=4] or gcc-alike, or MSVC"
1680                 }
1681         }
1682
1683 $config{CFLAGS} = [ map { $_ eq '--ossl-strict-warnings'
1684                               ? @strict_warnings_collection
1685                               : ( $_ ) }
1686                     @{$config{CFLAGS}} ];
1687
1688 unless ($disabled{afalgeng}) {
1689     $config{afalgeng}="";
1690     if (grep { $_ eq 'afalgeng' } @{$target{enable}}) {
1691         push @{$config{engdirs}}, "afalg";
1692     } else {
1693         disable('not-linux', 'afalgeng');
1694     }
1695 }
1696
1697 unless ($disabled{devcryptoeng}) {
1698     if ($target =~ m/^BSD/) {
1699         my $maxver = 5*100 + 7;
1700         my $sysstr = `uname -s`;
1701         my $verstr = `uname -r`;
1702         $sysstr =~ s|\R$||;
1703         $verstr =~ s|\R$||;
1704         my ($ma, $mi, @rest) = split m|\.|, $verstr;
1705         my $ver = $ma*100 + $mi;
1706         if ($sysstr eq 'OpenBSD' && $ver >= $maxver) {
1707             disable('too-new-kernel', 'devcryptoeng');
1708         }
1709     }
1710 }
1711
1712 unless ($disabled{ktls}) {
1713     $config{ktls}="";
1714     if ($target =~ m/^linux/) {
1715         my $usr = "/usr/$config{cross_compile_prefix}";
1716         chop($usr);
1717         if ($config{cross_compile_prefix} eq "") {
1718             $usr = "/usr";
1719         }
1720         my $minver = (4 << 16) + (13 << 8) + 0;
1721         my @verstr = split(" ",`cat $usr/include/linux/version.h | grep LINUX_VERSION_CODE`);
1722
1723         if ($verstr[2] < $minver) {
1724             disable('too-old-kernel', 'ktls');
1725         }
1726     } elsif ($target =~ m/^BSD/) {
1727         my $cc = $config{CROSS_COMPILE}.$config{CC};
1728         system("printf '#include <sys/types.h>\n#include <sys/ktls.h>' | $cc -E - >/dev/null 2>&1");
1729         if ($? != 0) {
1730             disable('too-old-freebsd', 'ktls');
1731         }
1732     } else {
1733         disable('not-linux-or-freebsd', 'ktls');
1734     }
1735 }
1736
1737 push @{$config{openssl_other_defines}}, "OPENSSL_NO_KTLS" if ($disabled{ktls});
1738
1739 # Get the extra flags used when building shared libraries and modules.  We
1740 # do this late because some of them depend on %disabled.
1741
1742 # Make the flags to build DSOs the same as for shared libraries unless they
1743 # are already defined
1744 $target{module_cflags} = $target{shared_cflag} unless defined $target{module_cflags};
1745 $target{module_cxxflags} = $target{shared_cxxflag} unless defined $target{module_cxxflags};
1746 $target{module_ldflags} = $target{shared_ldflag} unless defined $target{module_ldflags};
1747 {
1748     my $shared_info_pl =
1749         catfile(dirname($0), "Configurations", "shared-info.pl");
1750     my %shared_info = read_eval_file($shared_info_pl);
1751     push @{$target{_conf_fname_int}}, $shared_info_pl;
1752     my $si = $target{shared_target};
1753     while (ref $si ne "HASH") {
1754         last if ! defined $si;
1755         if (ref $si eq "CODE") {
1756             $si = $si->();
1757         } else {
1758             $si = $shared_info{$si};
1759         }
1760     }
1761
1762     # Some of the 'shared_target' values don't have any entries in
1763     # %shared_info.  That's perfectly fine, AS LONG AS the build file
1764     # template knows how to handle this.  That is currently the case for
1765     # Windows and VMS.
1766     if (defined $si) {
1767         # Just as above, copy certain shared_* attributes to the corresponding
1768         # module_ attribute unless the latter is already defined
1769         $si->{module_cflags} = $si->{shared_cflag} unless defined $si->{module_cflags};
1770         $si->{module_cxxflags} = $si->{shared_cxxflag} unless defined $si->{module_cxxflags};
1771         $si->{module_ldflags} = $si->{shared_ldflag} unless defined $si->{module_ldflags};
1772         foreach (sort keys %$si) {
1773             $target{$_} = defined $target{$_}
1774                 ? add($si->{$_})->($target{$_})
1775                 : $si->{$_};
1776         }
1777     }
1778 }
1779
1780 # ALL MODIFICATIONS TO %disabled, %config and %target MUST BE DONE FROM HERE ON
1781
1782 ######################################################################
1783 # Build up information for skipping certain directories depending on disabled
1784 # features, as well as setting up macros for disabled features.
1785
1786 # This is a tentative database of directories to skip.  Some entries may not
1787 # correspond to anything real, but that's ok, they will simply be ignored.
1788 # The actual processing of these entries is done in the build.info lookup
1789 # loop further down.
1790 #
1791 # The key is a Unix formatted path in the source tree, the value is an index
1792 # into %disabled_info, so any existing path gets added to a corresponding
1793 # 'skipped' entry in there with the list of skipped directories.
1794 my %skipdir = ();
1795 my %disabled_info = ();         # For configdata.pm
1796 foreach my $what (sort keys %disabled) {
1797     # There are deprecated disablables that translate to themselves.
1798     # They cause disabling cascades, but should otherwise not register.
1799     next if $deprecated_disablables{$what};
1800     # The generated $disabled{"deprecated-x.y"} entries are special
1801     # and treated properly elsewhere
1802     next if $what =~ m|^deprecated-|;
1803
1804     $config{options} .= " no-$what";
1805
1806     if (!grep { $what eq $_ } ( 'buildtest-c++', 'fips', 'threads', 'shared',
1807                                 'module', 'pic', 'dynamic-engine', 'makedepend',
1808                                 'zlib-dynamic', 'zlib', 'sse2', 'legacy' )) {
1809         (my $WHAT = uc $what) =~ s|-|_|g;
1810         my $skipdir = $what;
1811
1812         # fix-up crypto/directory name(s)
1813         $skipdir = "ripemd" if $what eq "rmd160";
1814         $skipdir = "whrlpool" if $what eq "whirlpool";
1815
1816         my $macro = $disabled_info{$what}->{macro} = "OPENSSL_NO_$WHAT";
1817         push @{$config{openssl_feature_defines}}, $macro;
1818
1819         $skipdir{engines} = $what if $what eq 'engine';
1820         $skipdir{"crypto/$skipdir"} = $what
1821             unless $what eq 'async' || $what eq 'err' || $what eq 'dso';
1822     }
1823 }
1824
1825 if ($disabled{"dynamic-engine"}) {
1826     push @{$config{openssl_feature_defines}}, "OPENSSL_NO_DYNAMIC_ENGINE";
1827 } else {
1828     push @{$config{openssl_feature_defines}}, "OPENSSL_NO_STATIC_ENGINE";
1829 }
1830
1831 # If we use the unified build, collect information from build.info files
1832 my %unified_info = ();
1833
1834 my $buildinfo_debug = defined($ENV{CONFIGURE_DEBUG_BUILDINFO});
1835 if ($builder eq "unified") {
1836     use Text::Template 1.46;
1837
1838     sub cleandir {
1839         my $base = shift;
1840         my $dir = shift;
1841         my $relativeto = shift || ".";
1842
1843         $dir = catdir($base,$dir) unless isabsolute($dir);
1844
1845         # Make sure the directories we're building in exists
1846         mkpath($dir);
1847
1848         my $res = abs2rel(absolutedir($dir), rel2abs($relativeto));
1849         #print STDERR "DEBUG[cleandir]: $dir , $base => $res\n";
1850         return $res;
1851     }
1852
1853     sub cleanfile {
1854         my $base = shift;
1855         my $file = shift;
1856         my $relativeto = shift || ".";
1857
1858         $file = catfile($base,$file) unless isabsolute($file);
1859
1860         my $d = dirname($file);
1861         my $f = basename($file);
1862
1863         # Make sure the directories we're building in exists
1864         mkpath($d);
1865
1866         my $res = abs2rel(catfile(absolutedir($d), $f), rel2abs($relativeto));
1867         #print STDERR "DEBUG[cleanfile]: $d , $f => $res\n";
1868         return $res;
1869     }
1870
1871     # Store the name of the template file we will build the build file from
1872     # in %config.  This may be useful for the build file itself.
1873     my @build_file_template_names =
1874         ( $builder_platform."-".$target{build_file}.".tmpl",
1875           $target{build_file}.".tmpl" );
1876     my @build_file_templates = ();
1877
1878     # First, look in the user provided directory, if given
1879     if (defined env($local_config_envname)) {
1880         @build_file_templates =
1881             map {
1882                 if ($^O eq 'VMS') {
1883                     # VMS environment variables are logical names,
1884                     # which can be used as is
1885                     $local_config_envname . ':' . $_;
1886                 } else {
1887                     catfile(env($local_config_envname), $_);
1888                 }
1889             }
1890             @build_file_template_names;
1891     }
1892     # Then, look in our standard directory
1893     push @build_file_templates,
1894         ( map { cleanfile($srcdir, catfile("Configurations", $_), $blddir) }
1895           @build_file_template_names );
1896
1897     my $build_file_template;
1898     for $_ (@build_file_templates) {
1899         $build_file_template = $_;
1900         last if -f $build_file_template;
1901
1902         $build_file_template = undef;
1903     }
1904     if (!defined $build_file_template) {
1905         die "*** Couldn't find any of:\n", join("\n", @build_file_templates), "\n";
1906     }
1907     $config{build_file_templates}
1908       = [ cleanfile($srcdir, catfile("Configurations", "common0.tmpl"),
1909                     $blddir),
1910            $build_file_template ];
1911
1912     my @build_dirs = ( [ ] );   # current directory
1913
1914     $config{build_infos} = [ ];
1915
1916     # We want to detect configdata.pm in the source tree, so we
1917     # don't use it if the build tree is different.
1918     my $src_configdata = cleanfile($srcdir, "configdata.pm", $blddir);
1919
1920     # Any source file that we recognise is placed in this hash table, with
1921     # the list of its intended destinations as value.  When everything has
1922     # been collected, there's a routine that checks that these source files
1923     # exist, or if they are generated, that the generator exists.
1924     my %check_exist = ();
1925     my %check_generate = ();
1926
1927     my %ordinals = ();
1928     while (@build_dirs) {
1929         my @curd = @{shift @build_dirs};
1930         my $sourced = catdir($srcdir, @curd);
1931         my $buildd = catdir($blddir, @curd);
1932
1933         my $unixdir = join('/', @curd);
1934         if (exists $skipdir{$unixdir}) {
1935             my $what = $skipdir{$unixdir};
1936             push @{$disabled_info{$what}->{skipped}}, catdir(@curd);
1937             next;
1938         }
1939
1940         mkpath($buildd);
1941
1942         my $f = 'build.info';
1943         # The basic things we're trying to build
1944         my @programs = ();
1945         my @libraries = ();
1946         my @modules = ();
1947         my @scripts = ();
1948
1949         my %sources = ();
1950         my %shared_sources = ();
1951         my %includes = ();
1952         my %defines = ();
1953         my %depends = ();
1954         my %generate = ();
1955         my %imagedocs = ();
1956         my %htmldocs = ();
1957         my %mandocs = ();
1958
1959         # Support for $variablename in build.info files.
1960         # Embedded perl code is the ultimate master, still.  If its output
1961         # contains a dollar sign, it had better be escaped, or it will be
1962         # taken for a variable name prefix.
1963         my %variables = ();
1964         # Variable name syntax
1965         my $variable_name_re = qr/(?P<VARIABLE>[[:alpha:]][[:alnum:]_]*)/;
1966         # Value modifier syntaxes
1967         my $variable_subst_re = qr/\/(?P<RE>(?:\\\/|.)*?)\/(?P<SUBST>.*?)/;
1968         # Variable reference
1969         my $variable_simple_re = qr/(?<!\\)\$${variable_name_re}/;
1970         my $variable_w_mod_re =
1971             qr/(?<!\\)\$\{${variable_name_re}(?P<MOD>(?:\\\/|.)*?)\}/;
1972         # Tie it all together
1973         my $variable_re = qr/${variable_simple_re}|${variable_w_mod_re}/;
1974
1975         my $expand_variables = sub {
1976             my $value = '';
1977             my $value_rest = shift;
1978
1979             if ($ENV{CONFIGURE_DEBUG_VARIABLE_EXPAND}) {
1980                 print STDERR
1981                     "DEBUG[\$expand_variables] Parsed '$value_rest' ...\n"
1982             }
1983
1984             while ($value_rest =~ /${variable_re}/) {
1985                 # We must save important regexp values, because the next
1986                 # regexp clears them
1987                 my $mod = $+{MOD};
1988                 my $variable_value = $variables{$+{VARIABLE}};
1989
1990                 $value_rest = $';
1991                 $value .= $`;
1992
1993                 # Process modifier expressions, if present
1994                 if (defined $mod) {
1995                     if ($mod =~ /^${variable_subst_re}$/) {
1996                         my $re = $+{RE};
1997                         my $subst = $+{SUBST};
1998
1999                         $variable_value =~ s/\Q$re\E/$subst/g;
2000
2001                         if ($ENV{CONFIGURE_DEBUG_VARIABLE_EXPAND}) {
2002                             print STDERR
2003                                 "DEBUG[\$expand_variables] ... and substituted ",
2004                                 "'$re' with '$subst'\n";
2005                         }
2006                     }
2007                 }
2008
2009                 $value .= $variable_value;
2010             }
2011             if ($ENV{CONFIGURE_DEBUG_VARIABLE_EXPAND}) {
2012                 print STDERR
2013                     "DEBUG[\$expand_variables] ... into: '$value$value_rest'\n";
2014             }
2015             return $value . $value_rest;
2016         };
2017
2018         # Support for attributes in build.info files
2019         my %attributes = ();
2020         my $handle_attributes = sub {
2021             my $attr_str = shift;
2022             my $ref = shift;
2023             my @goals = @_;
2024
2025             return unless defined $attr_str;
2026
2027             my @a = tokenize($attr_str, qr|\s*,\s*|);
2028             foreach my $a (@a) {
2029                 my $ac = 1;
2030                 my $ak = $a;
2031                 my $av = 1;
2032                 if ($a =~ m|^(!)?(.*?)\s* = \s*(.*?)$|x) {
2033                     $ac = ! $1;
2034                     $ak = $2;
2035                     $av = $3;
2036                 }
2037                 foreach my $g (@goals) {
2038                     if ($ac) {
2039                         $$ref->{$g}->{$ak} = $av;
2040                     } else {
2041                         delete $$ref->{$g}->{$ak};
2042                     }
2043                 }
2044             }
2045         };
2046
2047         # Support for pushing values on multiple indexes of a given hash
2048         # array.
2049         my $push_to = sub {
2050             my $valueref = shift;
2051             my $index_str = shift; # May be undef or empty
2052             my $attrref = shift;   # May be undef
2053             my $attr_str = shift;
2054             my @values = @_;
2055
2056             if (defined $index_str) {
2057                 my @indexes = ( '' );
2058                 if ($index_str !~ m|^\s*$|) {
2059                     @indexes = tokenize($index_str);
2060                 }
2061                 foreach (@indexes) {
2062                     push @{$valueref->{$_}}, @values;
2063                     if (defined $attrref) {
2064                         $handle_attributes->($attr_str, \$$attrref->{$_},
2065                                              @values);
2066                     }
2067                 }
2068             } else {
2069                 push @$valueref, @values;
2070                 $handle_attributes->($attr_str, $attrref, @values)
2071                     if defined $attrref;
2072             }
2073         };
2074
2075         if ($buildinfo_debug) {
2076             print STDERR "DEBUG: Reading ",catfile($sourced, $f),"\n";
2077         }
2078         push @{$config{build_infos}}, catfile(abs2rel($sourced, $blddir), $f);
2079         my $template =
2080             Text::Template->new(TYPE => 'FILE',
2081                                 SOURCE => catfile($sourced, $f),
2082                                 PREPEND => qq{use lib "$FindBin::Bin/util/perl";});
2083         die "Something went wrong with $sourced/$f: $!\n" unless $template;
2084         my @text =
2085             split /^/m,
2086             $template->fill_in(HASH => { config => \%config,
2087                                          target => \%target,
2088                                          disabled => \%disabled,
2089                                          withargs => \%withargs,
2090                                          builddir => abs2rel($buildd, $blddir),
2091                                          sourcedir => abs2rel($sourced, $blddir),
2092                                          buildtop => abs2rel($blddir, $blddir),
2093                                          sourcetop => abs2rel($srcdir, $blddir) },
2094                                DELIMITERS => [ "{-", "-}" ]);
2095
2096         # The top item of this stack has the following values
2097         # -2 positive already run and we found ELSE (following ELSIF should fail)
2098         # -1 positive already run (skip until ENDIF)
2099         # 0 negatives so far (if we're at a condition, check it)
2100         # 1 last was positive (don't skip lines until next ELSE, ELSIF or ENDIF)
2101         # 2 positive ELSE (following ELSIF should fail)
2102         my @skip = ();
2103
2104         # A few useful generic regexps
2105         my $index_re = qr/\[\s*(?P<INDEX>(?:\\.|.)*?)\s*\]/;
2106         my $cond_re = qr/\[\s*(?P<COND>(?:\\.|.)*?)\s*\]/;
2107         my $attribs_re = qr/(?:\{\s*(?P<ATTRIBS>(?:\\.|.)*?)\s*\})?/;
2108         my $value_re = qr/(?P<VALUE>.*?)/;
2109         collect_information(
2110             collect_from_array([ @text ],
2111                                qr/\\$/ => sub { my $l1 = shift; my $l2 = shift;
2112                                                 $l1 =~ s/\\$//; $l1.$l2 }),
2113             # Info we're looking for
2114             qr/^\s* IF ${cond_re} \s*$/x
2115             => sub {
2116                 if (! @skip || $skip[$#skip] > 0) {
2117                     push @skip, !! $expand_variables->($+{COND});
2118                 } else {
2119                     push @skip, -1;
2120                 }
2121             },
2122             qr/^\s* ELSIF ${cond_re} \s*$/x
2123             => sub { die "ELSIF out of scope" if ! @skip;
2124                      die "ELSIF following ELSE" if abs($skip[$#skip]) == 2;
2125                      $skip[$#skip] = -1 if $skip[$#skip] != 0;
2126                      $skip[$#skip] = !! $expand_variables->($+{COND})
2127                          if $skip[$#skip] == 0; },
2128             qr/^\s* ELSE \s*$/x
2129             => sub { die "ELSE out of scope" if ! @skip;
2130                      $skip[$#skip] = -2 if $skip[$#skip] != 0;
2131                      $skip[$#skip] = 2 if $skip[$#skip] == 0; },
2132             qr/^\s* ENDIF \s*$/x
2133             => sub { die "ENDIF out of scope" if ! @skip;
2134                      pop @skip; },
2135             qr/^\s* ${variable_re} \s* = \s* ${value_re} \s* $/x
2136             => sub {
2137                 if (!@skip || $skip[$#skip] > 0) {
2138                     $variables{$+{VARIABLE}} = $expand_variables->($+{VALUE});
2139                 }
2140             },
2141             qr/^\s* SUBDIRS \s* = \s* ${value_re} \s* $/x
2142             => sub {
2143                 if (!@skip || $skip[$#skip] > 0) {
2144                     foreach (tokenize($expand_variables->($+{VALUE}))) {
2145                         push @build_dirs, [ @curd, splitdir($_, 1) ];
2146                     }
2147                 }
2148             },
2149             qr/^\s* PROGRAMS ${attribs_re} \s* =  \s* ${value_re} \s* $/x
2150             => sub { $push_to->(\@programs, undef,
2151                                 \$attributes{programs}, $+{ATTRIBS},
2152                                 tokenize($expand_variables->($+{VALUE})))
2153                          if !@skip || $skip[$#skip] > 0; },
2154             qr/^\s* LIBS ${attribs_re} \s* =  \s* ${value_re} \s* $/x
2155             => sub { $push_to->(\@libraries, undef,
2156                                 \$attributes{libraries}, $+{ATTRIBS},
2157                                 tokenize($expand_variables->($+{VALUE})))
2158                          if !@skip || $skip[$#skip] > 0; },
2159             qr/^\s* MODULES ${attribs_re} \s* =  \s* ${value_re} \s* $/x
2160             => sub { $push_to->(\@modules, undef,
2161                                 \$attributes{modules}, $+{ATTRIBS},
2162                                 tokenize($expand_variables->($+{VALUE})))
2163                          if !@skip || $skip[$#skip] > 0; },
2164             qr/^\s* SCRIPTS ${attribs_re} \s* = \s* ${value_re} \s* $/x
2165             => sub { $push_to->(\@scripts, undef,
2166                                 \$attributes{scripts}, $+{ATTRIBS},
2167                                 tokenize($expand_variables->($+{VALUE})))
2168                          if !@skip || $skip[$#skip] > 0; },
2169             qr/^\s* IMAGEDOCS ${index_re} \s* = \s* ${value_re} \s* $/x
2170             => sub { $push_to->(\%imagedocs, $expand_variables->($+{INDEX}),
2171                                 undef, undef,
2172                                 tokenize($expand_variables->($+{VALUE})))
2173                          if !@skip || $skip[$#skip] > 0; },
2174             qr/^\s* HTMLDOCS ${index_re} \s* = \s* ${value_re} \s* $/x
2175             => sub { $push_to->(\%htmldocs, $expand_variables->($+{INDEX}),
2176                                 undef, undef,
2177                                 tokenize($expand_variables->($+{VALUE})))
2178                          if !@skip || $skip[$#skip] > 0; },
2179             qr/^\s* MANDOCS ${index_re} \s* = \s* ${value_re} \s* $/x
2180             => sub { $push_to->(\%mandocs, $expand_variables->($+{INDEX}),
2181                                 undef, undef,
2182                                 tokenize($expand_variables->($+{VALUE})))
2183                          if !@skip || $skip[$#skip] > 0; },
2184             qr/^\s* SOURCE ${index_re} ${attribs_re} \s* = \s* ${value_re} \s* $/x
2185             => sub { $push_to->(\%sources, $expand_variables->($+{INDEX}),
2186                                 \$attributes{sources}, $+{ATTRIBS},
2187                                 tokenize($expand_variables->($+{VALUE})))
2188                          if !@skip || $skip[$#skip] > 0; },
2189             qr/^\s* SHARED_SOURCE ${index_re} ${attribs_re} \s* = \s* ${value_re} \s* $/x
2190             => sub { $push_to->(\%shared_sources, $expand_variables->($+{INDEX}),
2191                                 \$attributes{sources}, $+{ATTRIBS},
2192                                 tokenize($expand_variables->($+{VALUE})))
2193                          if !@skip || $skip[$#skip] > 0; },
2194             qr/^\s* INCLUDE ${index_re} \s* = \s* ${value_re} \s* $/x
2195             => sub { $push_to->(\%includes, $expand_variables->($+{INDEX}),
2196                                 undef, undef,
2197                                 tokenize($expand_variables->($+{VALUE})))
2198                          if !@skip || $skip[$#skip] > 0; },
2199             qr/^\s* DEFINE ${index_re} \s* = \s* ${value_re} \s* $/x
2200             => sub { $push_to->(\%defines, $expand_variables->($+{INDEX}),
2201                                 undef, undef,
2202                                 tokenize($expand_variables->($+{VALUE})))
2203                          if !@skip || $skip[$#skip] > 0; },
2204             qr/^\s* DEPEND ${index_re} ${attribs_re} \s* = \s* ${value_re} \s* $/x
2205             => sub { $push_to->(\%depends, $expand_variables->($+{INDEX}),
2206                                 \$attributes{depends}, $+{ATTRIBS},
2207                                 tokenize($expand_variables->($+{VALUE})))
2208                          if !@skip || $skip[$#skip] > 0; },
2209             qr/^\s* GENERATE ${index_re} ${attribs_re} \s* = \s* ${value_re} \s* $/x
2210             => sub { $push_to->(\%generate, $expand_variables->($+{INDEX}),
2211                                 \$attributes{generate}, $+{ATTRIBS},
2212                                 $expand_variables->($+{VALUE}))
2213                          if !@skip || $skip[$#skip] > 0; },
2214             qr/^\s* (?:\#.*)? $/x => sub { },
2215             "OTHERWISE" => sub { die "Something wrong with this line:\n$_\nat $sourced/$f" },
2216             "BEFORE" => sub {
2217                 if ($buildinfo_debug) {
2218                     print STDERR "DEBUG: Parsing ",join(" ", @_),"\n";
2219                     print STDERR "DEBUG: ... before parsing, skip stack is ",join(" ", map { int($_) } @skip),"\n";
2220                 }
2221             },
2222             "AFTER" => sub {
2223                 if ($buildinfo_debug) {
2224                     print STDERR "DEBUG: .... after parsing, skip stack is ",join(" ", map { int($_) } @skip),"\n";
2225                 }
2226             },
2227             );
2228         die "runaway IF?" if (@skip);
2229
2230         if (grep { defined $attributes{modules}->{$_}->{engine} } keys %attributes
2231                 and !$config{dynamic_engines}) {
2232             die <<"EOF"
2233 ENGINES can only be used if configured with 'dynamic-engine'.
2234 This is usually a fault in a build.info file.
2235 EOF
2236         }
2237
2238         {
2239             my %infos = ( programs  => [ @programs  ],
2240                           libraries => [ @libraries ],
2241                           modules   => [ @modules   ],
2242                           scripts   => [ @scripts   ] );
2243             foreach my $k (keys %infos) {
2244                 foreach (@{$infos{$k}}) {
2245                     my $item = cleanfile($buildd, $_, $blddir);
2246                     $unified_info{$k}->{$item} = 1;
2247
2248                     # Fix up associated attributes
2249                     $unified_info{attributes}->{$k}->{$item} =
2250                         $attributes{$k}->{$_}
2251                         if defined $attributes{$k}->{$_};
2252                 }
2253             }
2254         }
2255
2256         # Check that we haven't defined any library as both shared and
2257         # explicitly static.  That is forbidden.
2258         my @doubles = ();
2259         foreach (grep /\.a$/, keys %{$unified_info{libraries}}) {
2260             (my $l = $_) =~ s/\.a$//;
2261             push @doubles, $l if defined $unified_info{libraries}->{$l};
2262         }
2263         die "these libraries are both explicitly static and shared:\n  ",
2264             join(" ", @doubles), "\n"
2265             if @doubles;
2266
2267         foreach (keys %sources) {
2268             my $dest = $_;
2269             my $ddest = cleanfile($buildd, $_, $blddir);
2270             foreach (@{$sources{$dest}}) {
2271                 my $s = cleanfile($sourced, $_, $blddir);
2272
2273                 # If it's generated or we simply don't find it in the source
2274                 # tree, we assume it's in the build tree.
2275                 if ($s eq $src_configdata || $generate{$_} || ! -f $s) {
2276                     $s = cleanfile($buildd, $_, $blddir);
2277                 }
2278                 my $o = $_;
2279                 # We recognise C++, C and asm files
2280                 if ($s =~ /\.(cc|cpp|c|s|S)$/) {
2281                     push @{$check_exist{$s}}, $ddest;
2282                     $o =~ s/\.[csS]$/.o/; # C and assembler
2283                     $o =~ s/\.(cc|cpp)$/_cc.o/; # C++
2284                     $o = cleanfile($buildd, $o, $blddir);
2285                     $unified_info{sources}->{$ddest}->{$o} = -1;
2286                     $unified_info{sources}->{$o}->{$s} = -1;
2287                 } elsif ($s =~ /\.rc$/) {
2288                     # We also recognise resource files
2289                     push @{$check_exist{$s}}, $ddest;
2290                     $o =~ s/\.rc$/.res/; # Resource configuration
2291                     $o = cleanfile($buildd, $o, $blddir);
2292                     $unified_info{sources}->{$ddest}->{$o} = -1;
2293                     $unified_info{sources}->{$o}->{$s} = -1;
2294                 } else {
2295                     push @{$check_exist{$s}}, $ddest;
2296                     $unified_info{sources}->{$ddest}->{$s} = 1;
2297                 }
2298                 # Fix up associated attributes
2299                 if ($o ne $_) {
2300                     $unified_info{attributes}->{sources}->{$ddest}->{$o} =
2301                         $unified_info{attributes}->{sources}->{$o}->{$s} =
2302                         $attributes{sources}->{$dest}->{$_}
2303                         if defined $attributes{sources}->{$dest}->{$_};
2304                 } else {
2305                     $unified_info{attributes}->{sources}->{$ddest}->{$s} =
2306                         $attributes{sources}->{$dest}->{$_}
2307                         if defined $attributes{sources}->{$dest}->{$_};
2308                 }
2309             }
2310         }
2311
2312         foreach (keys %shared_sources) {
2313             my $dest = $_;
2314             my $ddest = cleanfile($buildd, $_, $blddir);
2315             foreach (@{$shared_sources{$dest}}) {
2316                 my $s = cleanfile($sourced, $_, $blddir);
2317
2318                 # If it's generated or we simply don't find it in the source
2319                 # tree, we assume it's in the build tree.
2320                 if ($s eq $src_configdata || $generate{$_} || ! -f $s) {
2321                     $s = cleanfile($buildd, $_, $blddir);
2322                 }
2323
2324                 my $o = $_;
2325                 if ($s =~ /\.(cc|cpp|c|s|S)$/) {
2326                     # We recognise C++, C and asm files
2327                     push @{$check_exist{$s}}, $ddest;
2328                     $o =~ s/\.[csS]$/.o/; # C and assembler
2329                     $o =~ s/\.(cc|cpp)$/_cc.o/; # C++
2330                     $o = cleanfile($buildd, $o, $blddir);
2331                     $unified_info{shared_sources}->{$ddest}->{$o} = -1;
2332                     $unified_info{sources}->{$o}->{$s} = -1;
2333                 } elsif ($s =~ /\.rc$/) {
2334                     # We also recognise resource files
2335                     push @{$check_exist{$s}}, $ddest;
2336                     $o =~ s/\.rc$/.res/; # Resource configuration
2337                     $o = cleanfile($buildd, $o, $blddir);
2338                     $unified_info{shared_sources}->{$ddest}->{$o} = -1;
2339                     $unified_info{sources}->{$o}->{$s} = -1;
2340                 } elsif ($s =~ /\.ld$/) {
2341                     # We also recognise linker scripts (or corresponding)
2342                     # We know they are generated files
2343                     push @{$check_exist{$s}}, $ddest;
2344                     $o = cleanfile($buildd, $_, $blddir);
2345                     $unified_info{shared_sources}->{$ddest}->{$o} = 1;
2346                 } else {
2347                     die "unrecognised source file type for shared library: $s\n";
2348                 }
2349                 # Fix up associated attributes
2350                 if ($o ne $_) {
2351                     $unified_info{attributes}->{shared_sources}->{$ddest}->{$o} =
2352                         $unified_info{attributes}->{sources}->{$o}->{$s} =
2353                         $attributes{sources}->{$dest}->{$_}
2354                         if defined $attributes{sources}->{$dest}->{$_};
2355                 } else {
2356                     $unified_info{attributes}->{shared_sources}->{$ddest}->{$o} =
2357                         $attributes{sources}->{$dest}->{$_}
2358                         if defined $attributes{sources}->{$dest}->{$_};
2359                 }
2360             }
2361         }
2362
2363         foreach (keys %generate) {
2364             my $dest = $_;
2365             my $ddest = cleanfile($buildd, $_, $blddir);
2366             die "more than one generator for $dest: "
2367                 ,join(" ", @{$generate{$_}}),"\n"
2368                 if scalar @{$generate{$_}} > 1;
2369             my @generator = split /\s+/, $generate{$dest}->[0];
2370             my $gen = $generator[0];
2371             $generator[0] = cleanfile($sourced, $gen, $blddir);
2372
2373             # If the generator is itself generated, it's in the build tree
2374             if ($generate{$gen} || ! -f $generator[0]) {
2375                 $generator[0] = cleanfile($buildd, $gen, $blddir);
2376             }
2377             $check_generate{$ddest}->{$generator[0]}++;
2378
2379             $unified_info{generate}->{$ddest} = [ @generator ];
2380             # Fix up associated attributes
2381             $unified_info{attributes}->{generate}->{$ddest} =
2382                 $attributes{generate}->{$dest}->{$gen}
2383                 if defined $attributes{generate}->{$dest}->{$gen};
2384         }
2385
2386         foreach (keys %depends) {
2387             my $dest = $_;
2388             my $ddest = $dest;
2389
2390             if ($dest =~ /^\|(.*)\|$/) {
2391                 # Collect the raw target
2392                 $unified_info{targets}->{$1} = 1;
2393                 $ddest = $1;
2394             } elsif ($dest eq '') {
2395                 $ddest = '';
2396             } else {
2397                 $ddest = cleanfile($sourced, $_, $blddir);
2398
2399                 # If the destination doesn't exist in source, it can only be
2400                 # a generated file in the build tree.
2401                 if ($ddest eq $src_configdata || ! -f $ddest) {
2402                     $ddest = cleanfile($buildd, $_, $blddir);
2403                 }
2404             }
2405             foreach (@{$depends{$dest}}) {
2406                 my $d = cleanfile($sourced, $_, $blddir);
2407                 my $d2 = cleanfile($buildd, $_, $blddir);
2408
2409                 # If we know it's generated, or assume it is because we can't
2410                 # find it in the source tree, we set file we depend on to be
2411                 # in the build tree rather than the source tree.
2412                 if ($d eq $src_configdata
2413                     || (grep { $d2 eq $_ }
2414                         keys %{$unified_info{generate}})
2415                     || ! -f $d) {
2416                     $d = $d2;
2417                 }
2418                 $unified_info{depends}->{$ddest}->{$d} = 1;
2419
2420                 # Fix up associated attributes
2421                 $unified_info{attributes}->{depends}->{$ddest}->{$d} =
2422                     $attributes{depends}->{$dest}->{$_}
2423                     if defined $attributes{depends}->{$dest}->{$_};
2424             }
2425         }
2426
2427         foreach (keys %includes) {
2428             my $dest = $_;
2429             my $ddest = cleanfile($sourced, $_, $blddir);
2430
2431             # If the destination doesn't exist in source, it can only be
2432             # a generated file in the build tree.
2433             if ($ddest eq $src_configdata || ! -f $ddest) {
2434                 $ddest = cleanfile($buildd, $_, $blddir);
2435             }
2436             foreach (@{$includes{$dest}}) {
2437                 my $is = cleandir($sourced, $_, $blddir);
2438                 my $ib = cleandir($buildd, $_, $blddir);
2439                 push @{$unified_info{includes}->{$ddest}->{source}}, $is
2440                     unless grep { $_ eq $is } @{$unified_info{includes}->{$ddest}->{source}};
2441                 push @{$unified_info{includes}->{$ddest}->{build}}, $ib
2442                     unless grep { $_ eq $ib } @{$unified_info{includes}->{$ddest}->{build}};
2443             }
2444         }
2445
2446         foreach my $dest (keys %defines) {
2447             my $ddest;
2448
2449             if ($dest ne "") {
2450                 $ddest = cleanfile($sourced, $dest, $blddir);
2451
2452                 # If the destination doesn't exist in source, it can only
2453                 # be a generated file in the build tree.
2454                 if (! -f $ddest) {
2455                     $ddest = cleanfile($buildd, $dest, $blddir);
2456                 }
2457             }
2458             foreach my $v (@{$defines{$dest}}) {
2459                 $v =~ m|^([^=]*)(=.*)?$|;
2460                 die "0 length macro name not permitted\n" if $1 eq "";
2461                 if ($dest ne "") {
2462                     die "$1 defined more than once\n"
2463                         if defined $unified_info{defines}->{$ddest}->{$1};
2464                     $unified_info{defines}->{$ddest}->{$1} = $2;
2465                 } else {
2466                     die "$1 defined more than once\n"
2467                         if grep { $v eq $_ } @{$config{defines}};
2468                     push @{$config{defines}}, $v;
2469                 }
2470             }
2471         }
2472
2473         foreach my $section (keys %imagedocs) {
2474             foreach (@{$imagedocs{$section}}) {
2475                 my $imagedocs = cleanfile($buildd, $_, $blddir);
2476                 $unified_info{imagedocs}->{$section}->{$imagedocs} = 1;
2477             }
2478         }
2479
2480         foreach my $section (keys %htmldocs) {
2481             foreach (@{$htmldocs{$section}}) {
2482                 my $htmldocs = cleanfile($buildd, $_, $blddir);
2483                 $unified_info{htmldocs}->{$section}->{$htmldocs} = 1;
2484             }
2485         }
2486
2487         foreach my $section (keys %mandocs) {
2488             foreach (@{$mandocs{$section}}) {
2489                 my $mandocs = cleanfile($buildd, $_, $blddir);
2490                 $unified_info{mandocs}->{$section}->{$mandocs} = 1;
2491             }
2492         }
2493     }
2494
2495     my $ordinals_text = join(', ', sort keys %ordinals);
2496     warn <<"EOF" if $ordinals_text;
2497
2498 WARNING: ORDINALS were specified for $ordinals_text
2499 They are ignored and should be replaced with a combination of GENERATE,
2500 DEPEND and SHARED_SOURCE.
2501 EOF
2502
2503     # Check that each generated file is only generated once
2504     my $ambiguous_generation = 0;
2505     foreach (sort keys %check_generate) {
2506         my @generators = sort keys %{$check_generate{$_}};
2507         my $generators_txt = join(', ', @generators);
2508         if (scalar @generators > 1) {
2509             warn "$_ is GENERATEd by more than one generator ($generators_txt)\n";
2510             $ambiguous_generation++;
2511         }
2512         if ($check_generate{$_}->{$generators[0]} > 1) {
2513             warn "INFO: $_ has more than one GENERATE declaration (same generator)\n"
2514         }
2515     }
2516     die "There are ambiguous source file generations\n"
2517         if $ambiguous_generation > 0;
2518
2519     # All given source files should exist, or if generated, their
2520     # generator should exist.  This loop ensures this is true.
2521     my $missing = 0;
2522     foreach my $orig (sort keys %check_exist) {
2523         foreach my $dest (@{$check_exist{$orig}}) {
2524             if ($orig ne $src_configdata) {
2525                 if ($orig =~ /\.a$/) {
2526                     # Static library names may be used as sources, so we
2527                     # need to detect those and give them special treatment.
2528                     unless (grep { $_ eq $orig }
2529                             keys %{$unified_info{libraries}}) {
2530                         warn "$orig is given as source for $dest, but no such library is built\n";
2531                         $missing++;
2532                     }
2533                 } else {
2534                     # A source may be generated, and its generator may be
2535                     # generated as well.  We therefore loop to dig out the
2536                     # first generator.
2537                     my $gen = $orig;
2538
2539                     while (my @next = keys %{$check_generate{$gen}}) {
2540                         $gen = $next[0];
2541                     }
2542
2543                     if (! -f $gen) {
2544                         if ($gen ne $orig) {
2545                             $missing++;
2546                             warn "$orig is given as source for $dest, but its generator (leading to $gen) is missing\n";
2547                         } else {
2548                             $missing++;
2549                             warn "$orig is given as source for $dest, but is missing\n";
2550                         }
2551                     }
2552                 }
2553             }
2554         }
2555     }
2556     die "There are files missing\n" if $missing > 0;
2557
2558     # Go through the sources of all libraries and check that the same basename
2559     # doesn't appear more than once.  Some static library archivers depend on
2560     # them being unique.
2561     {
2562         my $err = 0;
2563         foreach my $prod (keys %{$unified_info{libraries}}) {
2564             my @prod_sources =
2565                 map { keys %{$unified_info{sources}->{$_}} }
2566                 keys %{$unified_info{sources}->{$prod}};
2567             my %srccnt = ();
2568
2569             # Count how many times a given each source basename
2570             # appears for each product.
2571             foreach my $src (@prod_sources) {
2572                 $srccnt{basename $src}++;
2573             }
2574
2575             foreach my $src (keys %srccnt) {
2576                 if ((my $cnt = $srccnt{$src}) > 1) {
2577                     print STDERR "$src appears $cnt times for the product $prod\n";
2578                     $err++
2579                 }
2580             }
2581         }
2582         die if $err > 0;
2583     }
2584
2585     # Massage the result
2586
2587     # If we depend on a header file or a perl module, add an inclusion of
2588     # its directory to allow smoothe inclusion
2589     foreach my $dest (keys %{$unified_info{depends}}) {
2590         next if $dest eq "";
2591         foreach my $d (keys %{$unified_info{depends}->{$dest}}) {
2592             next unless $d =~ /\.(h|pm)$/;
2593             my $i = dirname($d);
2594             my $spot =
2595                 $d eq "configdata.pm" || defined($unified_info{generate}->{$d})
2596                 ? 'build' : 'source';
2597             push @{$unified_info{includes}->{$dest}->{$spot}}, $i
2598                 unless grep { $_ eq $i } @{$unified_info{includes}->{$dest}->{$spot}};
2599         }
2600     }
2601
2602     # Go through all intermediary files and change their names to something that
2603     # reflects what they will be built for.  Note that for some source files,
2604     # this leads to duplicate object files because they are used multiple times.
2605     # the goal is to rename all object files according to this scheme:
2606     #    {productname}-{midfix}-{origobjname}.[o|res]
2607     # the {midfix} is a keyword indicating the type of product, which is mostly
2608     # valuable for libraries since they come in two forms.
2609     #
2610     # This also reorganises the {sources} and {shared_sources} so that the
2611     # former only contains ALL object files that are supposed to end up in
2612     # static libraries and programs, while the latter contains ALL object files
2613     # that are supposed to end up in shared libraries and DSOs.
2614     # The main reason for having two different source structures is to allow
2615     # the same name to be used for the static and the shared variants of a
2616     # library.
2617     {
2618         # Take copies so we don't get interference from added stuff
2619         my %unified_copy = ();
2620         foreach (('sources', 'shared_sources')) {
2621             $unified_copy{$_} = { %{$unified_info{$_}} }
2622                 if defined($unified_info{$_});
2623             delete $unified_info{$_};
2624         }
2625         foreach my $prodtype (('programs', 'libraries', 'modules', 'scripts')) {
2626             # $intent serves multi purposes:
2627             # - give a prefix for the new object files names
2628             # - in the case of libraries, rearrange the object files so static
2629             #   libraries use the 'sources' structure exclusively, while shared
2630             #   libraries use the 'shared_sources' structure exclusively.
2631             my $intent = {
2632                 programs  => { bin    => { src => [ 'sources' ],
2633                                            dst => 'sources' } },
2634                 libraries => { lib    => { src => [ 'sources' ],
2635                                            dst => 'sources' },
2636                                shlib  => { prodselect =>
2637                                                sub { grep !/\.a$/, @_ },
2638                                            src => [ 'sources',
2639                                                     'shared_sources' ],
2640                                            dst => 'shared_sources' } },
2641                 modules   => { dso    => { src => [ 'sources' ],
2642                                            dst => 'sources' } },
2643                 scripts   => { script => { src => [ 'sources' ],
2644                                            dst => 'sources' } }
2645                } -> {$prodtype};
2646             foreach my $kind (keys %$intent) {
2647                 next if ($intent->{$kind}->{dst} eq 'shared_sources'
2648                              && $disabled{shared});
2649
2650                 my @src = @{$intent->{$kind}->{src}};
2651                 my $dst = $intent->{$kind}->{dst};
2652                 my $prodselect = $intent->{$kind}->{prodselect} // sub { @_ };
2653                 foreach my $prod ($prodselect->(keys %{$unified_info{$prodtype}})) {
2654                     # %prod_sources has all applicable objects as keys, and
2655                     # their corresponding sources as values
2656                     my %prod_sources =
2657                         map { $_ => [ keys %{$unified_copy{sources}->{$_}} ] }
2658                         map { keys %{$unified_copy{$_}->{$prod}} }
2659                         @src;
2660                     foreach (keys %prod_sources) {
2661                         # Only affect object files and resource files,
2662                         # the others simply get a new value
2663                         # (+1 instead of -1)
2664                         if ($_ =~ /\.(o|res)$/) {
2665                             (my $prodname = $prod) =~ s|\.a$||;
2666                             my $newobj =
2667                                 catfile(dirname($_),
2668                                         basename($prodname)
2669                                             . '-' . $kind
2670                                             . '-' . basename($_));
2671                             $unified_info{$dst}->{$prod}->{$newobj} = 1;
2672                             foreach my $src (@{$prod_sources{$_}}) {
2673                                 $unified_info{sources}->{$newobj}->{$src} = 1;
2674                                 # Adjust source attributes
2675                                 my $attrs = $unified_info{attributes}->{sources};
2676                                 if (defined $attrs->{$prod}
2677                                     && defined $attrs->{$prod}->{$_}) {
2678                                     $attrs->{$prod}->{$newobj} =
2679                                         $attrs->{$prod}->{$_};
2680                                     delete $attrs->{$prod}->{$_};
2681                                 }
2682                                 foreach my $objsrc (keys %{$attrs->{$_} // {}}) {
2683                                     $attrs->{$newobj}->{$objsrc} =
2684                                         $attrs->{$_}->{$objsrc};
2685                                     delete $attrs->{$_}->{$objsrc};
2686                                 }
2687                             }
2688                             # Adjust dependencies
2689                             foreach my $deps (keys %{$unified_info{depends}->{$_}}) {
2690                                 $unified_info{depends}->{$_}->{$deps} = -1;
2691                                 $unified_info{depends}->{$newobj}->{$deps} = 1;
2692                             }
2693                             # Adjust includes
2694                             foreach my $k (('source', 'build')) {
2695                                 next unless
2696                                     defined($unified_info{includes}->{$_}->{$k});
2697                                 my @incs = @{$unified_info{includes}->{$_}->{$k}};
2698                                 $unified_info{includes}->{$newobj}->{$k} = [ @incs ];
2699                             }
2700                         } else {
2701                             $unified_info{$dst}->{$prod}->{$_} = 1;
2702                         }
2703                     }
2704                 }
2705             }
2706         }
2707     }
2708
2709     # At this point, we have a number of sources with the value -1.  They
2710     # aren't part of the local build and are probably meant for a different
2711     # platform, and can therefore be cleaned away.  That happens when making
2712     # %unified_info more efficient below.
2713
2714     ### Make unified_info a bit more efficient
2715     # One level structures
2716     foreach (("programs", "libraries", "modules", "scripts", "targets")) {
2717         $unified_info{$_} = [ sort keys %{$unified_info{$_}} ];
2718     }
2719     # Two level structures
2720     foreach my $l1 (("sources", "shared_sources", "ldadd", "depends",
2721                      "imagedocs", "htmldocs", "mandocs")) {
2722         foreach my $l2 (sort keys %{$unified_info{$l1}}) {
2723             my @items =
2724                 sort
2725                 grep { $unified_info{$l1}->{$l2}->{$_} > 0 }
2726                 keys %{$unified_info{$l1}->{$l2}};
2727             if (@items) {
2728                 $unified_info{$l1}->{$l2} = [ @items ];
2729             } else {
2730                 delete $unified_info{$l1}->{$l2};
2731             }
2732         }
2733     }
2734     # Defines
2735     foreach my $dest (sort keys %{$unified_info{defines}}) {
2736         $unified_info{defines}->{$dest}
2737             = [ map { $_.$unified_info{defines}->{$dest}->{$_} }
2738                 sort keys %{$unified_info{defines}->{$dest}} ];
2739     }
2740     # Includes
2741     foreach my $dest (sort keys %{$unified_info{includes}}) {
2742         if (defined($unified_info{includes}->{$dest}->{build})) {
2743             my @source_includes = ();
2744             @source_includes = ( @{$unified_info{includes}->{$dest}->{source}} )
2745                 if defined($unified_info{includes}->{$dest}->{source});
2746             $unified_info{includes}->{$dest} =
2747                 [ @{$unified_info{includes}->{$dest}->{build}} ];
2748             foreach my $inc (@source_includes) {
2749                 push @{$unified_info{includes}->{$dest}}, $inc
2750                     unless grep { $_ eq $inc } @{$unified_info{includes}->{$dest}};
2751             }
2752         } elsif (defined($unified_info{includes}->{$dest}->{source})) {
2753             $unified_info{includes}->{$dest} =
2754                 [ @{$unified_info{includes}->{$dest}->{source}} ];
2755         } else {
2756             delete $unified_info{includes}->{$dest};
2757         }
2758     }
2759
2760     # For convenience collect information regarding directories where
2761     # files are generated, those generated files and the end product
2762     # they end up in where applicable.  Then, add build rules for those
2763     # directories
2764     my %loopinfo = ( "lib" => [ @{$unified_info{libraries}} ],
2765                      "dso" => [ @{$unified_info{modules}} ],
2766                      "bin" => [ @{$unified_info{programs}} ],
2767                      "script" => [ @{$unified_info{scripts}} ],
2768                      "docs" => [ (map { @{$unified_info{imagedocs}->{$_} // []} }
2769                                   keys %{$unified_info{imagedocs} // {}}),
2770                                  (map { @{$unified_info{htmldocs}->{$_} // []} }
2771                                   keys %{$unified_info{htmldocs} // {}}),
2772                                  (map { @{$unified_info{mandocs}->{$_} // []} }
2773                                   keys %{$unified_info{mandocs} // {}}) ] );
2774     foreach my $type (sort keys %loopinfo) {
2775         foreach my $product (@{$loopinfo{$type}}) {
2776             my %dirs = ();
2777             my $pd = dirname($product);
2778
2779             foreach (@{$unified_info{sources}->{$product} // []},
2780                      @{$unified_info{shared_sources}->{$product} // []}) {
2781                 my $d = dirname($_);
2782
2783                 # We don't want to create targets for source directories
2784                 # when building out of source
2785                 next if ($config{sourcedir} ne $config{builddir}
2786                              && $d =~ m|^\Q$config{sourcedir}\E|);
2787                 # We already have a "test" target, and the current directory
2788                 # is just silly to make a target for
2789                 next if $d eq "test" || $d eq ".";
2790
2791                 $dirs{$d} = 1;
2792                 push @{$unified_info{dirinfo}->{$d}->{deps}}, $_
2793                     if $d ne $pd;
2794             }
2795             foreach (sort keys %dirs) {
2796                 push @{$unified_info{dirinfo}->{$_}->{products}->{$type}},
2797                     $product;
2798             }
2799         }
2800     }
2801 }
2802
2803 # For the schemes that need it, we provide the old *_obj configs
2804 # from the *_asm_obj ones
2805 foreach (grep /_(asm|aux)_src$/, keys %target) {
2806     my $src = $_;
2807     (my $obj = $_) =~ s/_(asm|aux)_src$/_obj/;
2808     $target{$obj} = $target{$src};
2809     $target{$obj} =~ s/\.[csS]\b/.o/g; # C and assembler
2810     $target{$obj} =~ s/\.(cc|cpp)\b/_cc.o/g; # C++
2811 }
2812
2813 # Write down our configuration where it fits #########################
2814
2815 my %template_vars = (
2816     config => \%config,
2817     target => \%target,
2818     disablables => \@disablables,
2819     disablables_int => \@disablables_int,
2820     disabled => \%disabled,
2821     withargs => \%withargs,
2822     unified_info => \%unified_info,
2823     tls => \@tls,
2824     dtls => \@dtls,
2825     makevars => [ sort keys %user ],
2826     disabled_info => \%disabled_info,
2827     user_crossable => \@user_crossable,
2828 );
2829 my $configdata_outname = 'configdata.pm';
2830 open CONFIGDATA, ">$configdata_outname.new"
2831     or die "Trying to create $configdata_outname.new: $!";
2832 my $configdata_tmplname = cleanfile($srcdir, "configdata.pm.in", $blddir);
2833 my $configdata_tmpl =
2834     OpenSSL::Template->new(TYPE => 'FILE', SOURCE => $configdata_tmplname);
2835 $configdata_tmpl->fill_in(
2836     FILENAME => $configdata_tmplname,
2837     OUTPUT => \*CONFIGDATA,
2838     HASH => { %template_vars,
2839               autowarntext => [
2840                   'WARNING: do not edit!',
2841                   "Generated by Configure from $configdata_tmplname",
2842               ] }
2843 ) or die $Text::Template::ERROR;
2844 close CONFIGDATA;
2845
2846 # When using stat() on Windows, we can get it to perform better by avoid some
2847 # data.  This doesn't affect the mtime field, so we're not losing anything...
2848 ${^WIN32_SLOPPY_STAT} = 1;
2849
2850 my $update_configdata = 0;
2851 my $run_configdata = 0;
2852 if (-f $configdata_outname) {
2853     my $Configure_mtime = (stat($0))[9];
2854     my $configdata_mtime = (stat($configdata_outname))[9];
2855
2856     # If this script was updated after the last configdata.pm, or if
2857     # configdata.pm.new differs from configdata.pm, we update configdata.pm
2858     if ($configdata_mtime < $Configure_mtime
2859         || compare_text("$configdata_outname.new", $configdata_outname) != 0) {
2860         $update_configdata = 1;
2861     } else {
2862         # If nothing has changed, let's just drop the new one and pretend
2863         # like nothing happened
2864         unlink "$configdata_outname.new";
2865
2866         # We still run configdata.pm if one of the build file (Makefile) or
2867         # the configuration header file are missing
2868         $run_configdata =
2869             !( -f $target{build_file} )
2870             || !( -f catfile('include', 'openssl', 'configuration.h') );
2871     }
2872 } else {
2873     $update_configdata = 1;
2874 }
2875
2876 if ($update_configdata) {
2877     # If something did change, or there was no previous configdata.pm, we
2878     # rename the new one, set permissions as needed, and run it.
2879     rename "$configdata_outname.new", $configdata_outname;
2880     if ($builder_platform eq 'unix') {
2881         my $mode = (0755 & ~umask);
2882         chmod $mode, 'configdata.pm'
2883             or warn sprintf("WARNING: Couldn't change mode for 'configdata.pm' to 0%03o: %s\n",$mode,$!);
2884     }
2885     $run_configdata = 1;
2886     print "Created $configdata_outname\n";
2887 }
2888
2889 if ($run_configdata) {
2890     print "Running $configdata_outname\n";
2891     my $perlcmd = (quotify("maybeshell", $config{PERL}))[0];
2892     my $cmd = "$perlcmd $configdata_outname";
2893     #print STDERR "DEBUG[run_dofile]: \$cmd = $cmd\n";
2894     system($cmd);
2895     exit 1 if $? != 0;
2896 } else {
2897     print "No changes in $configdata_outname, no need to run it\n";
2898 }
2899
2900 $SIG{__DIE__} = $orig_death_handler;
2901
2902 print <<"EOF" if ($disabled{threads} eq "unavailable");
2903
2904 The library could not be configured for supporting multi-threaded
2905 applications as the compiler options required on this system are not known.
2906 See file INSTALL.md for details if you need multi-threading.
2907 EOF
2908
2909 print <<"EOF" if ($no_shared_warn);
2910
2911 The options 'shared', 'pic' and 'dynamic-engine' aren't supported on this
2912 platform, so we will pretend you gave the option 'no-pic', which also disables
2913 'shared' and 'dynamic-engine'.  If you know how to implement shared libraries
2914 or position independent code, please let us know (but please first make sure
2915 you have tried with a current version of OpenSSL).
2916 EOF
2917
2918 print $banner;
2919
2920 exit(0);
2921
2922 ######################################################################
2923 #
2924 # Helpers and utility functions
2925 #
2926
2927 # Death handler, to print a helpful message in case of failure #######
2928 #
2929 sub death_handler {
2930     die @_ if $^S;              # To prevent the added message in eval blocks
2931     my $build_file = $target{build_file} // "build file";
2932     my @message = ( <<"_____", @_ );
2933
2934 Failure!  $build_file wasn't produced.
2935 Please read INSTALL.md and associated NOTES-* files.  You may also have to
2936 look over your available compiler tool chain or change your configuration.
2937
2938 _____
2939
2940     # Dying is terminal, so it's ok to reset the signal handler here.
2941     $SIG{__DIE__} = $orig_death_handler;
2942     die @message;
2943 }
2944
2945 # Configuration file reading #########################################
2946
2947 # Note: All of the helper functions are for lazy evaluation.  They all
2948 # return a CODE ref, which will return the intended value when evaluated.
2949 # Thus, whenever there's mention of a returned value, it's about that
2950 # intended value.
2951
2952 # Helper function to implement conditional value variants, with a default
2953 # plus additional values based on the value of $config{build_type}.
2954 # Arguments are given in hash table form:
2955 #
2956 #       picker(default => "Basic string: ",
2957 #              debug   => "debug",
2958 #              release => "release")
2959 #
2960 # When configuring with --debug, the resulting string will be
2961 # "Basic string: debug", and when not, it will be "Basic string: release"
2962 #
2963 # This can be used to create variants of sets of flags according to the
2964 # build type:
2965 #
2966 #       cflags => picker(default => "-Wall",
2967 #                        debug   => "-g -O0",
2968 #                        release => "-O3")
2969 #
2970 sub picker {
2971     my %opts = @_;
2972     return sub { add($opts{default} || (),
2973                      $opts{$config{build_type}} || ())->(); }
2974 }
2975
2976 # Helper function to combine several values of different types into one.
2977 # This is useful if you want to combine a string with the result of a
2978 # lazy function, such as:
2979 #
2980 #       cflags => combine("-Wall", sub { $disabled{zlib} ? () : "-DZLIB" })
2981 #
2982 sub combine {
2983     my @stuff = @_;
2984     return sub { add(@stuff)->(); }
2985 }
2986
2987 # Helper function to implement conditional values depending on the value
2988 # of $disabled{threads}.  Can be used as follows:
2989 #
2990 #       cflags => combine("-Wall", threads("-pthread"))
2991 #
2992 sub threads {
2993     my @flags = @_;
2994     return sub { add($disabled{threads} ? () : @flags)->(); }
2995 }
2996
2997 sub shared {
2998     my @flags = @_;
2999     return sub { add($disabled{shared} ? () : @flags)->(); }
3000 }
3001
3002 our $add_called = 0;
3003 # Helper function to implement adding values to already existing configuration
3004 # values.  It handles elements that are ARRAYs, CODEs and scalars
3005 sub _add {
3006     my $separator = shift;
3007
3008     # If there's any ARRAY in the collection of values OR the separator
3009     # is undef, we will return an ARRAY of combined values, otherwise a
3010     # string of joined values with $separator as the separator.
3011     my $found_array = !defined($separator);
3012
3013     my @values =
3014         map {
3015             my $res = $_;
3016             while (ref($res) eq "CODE") {
3017                 $res = $res->();
3018             }
3019             if (defined($res)) {
3020                 if (ref($res) eq "ARRAY") {
3021                     $found_array = 1;
3022                     @$res;
3023                 } else {
3024                     $res;
3025                 }
3026             } else {
3027                 ();
3028             }
3029     } (@_);
3030
3031     $add_called = 1;
3032
3033     if ($found_array) {
3034         [ @values ];
3035     } else {
3036         join($separator, grep { defined($_) && $_ ne "" } @values);
3037     }
3038 }
3039 sub add_before {
3040     my $separator = " ";
3041     if (ref($_[$#_]) eq "HASH") {
3042         my $opts = pop;
3043         $separator = $opts->{separator};
3044     }
3045     my @x = @_;
3046     sub { _add($separator, @x, @_) };
3047 }
3048 sub add {
3049     my $separator = " ";
3050     if (ref($_[$#_]) eq "HASH") {
3051         my $opts = pop;
3052         $separator = $opts->{separator};
3053     }
3054     my @x = @_;
3055     sub { _add($separator, @_, @x) };
3056 }
3057
3058 sub read_eval_file {
3059     my $fname = shift;
3060     my $content;
3061     my @result;
3062
3063     open F, "< $fname" or die "Can't open '$fname': $!\n";
3064     {
3065         undef local $/;
3066         $content = <F>;
3067     }
3068     close F;
3069     {
3070         local $@;
3071
3072         @result = ( eval $content );
3073         warn $@ if $@;
3074     }
3075     return wantarray ? @result : $result[0];
3076 }
3077
3078 # configuration reader, evaluates the input file as a perl script and expects
3079 # it to fill %targets with target configurations.  Those are then added to
3080 # %table.
3081 sub read_config {
3082     my $fname = shift;
3083     my %targets;
3084
3085     {
3086         # Protect certain tables from tampering
3087         local %table = ();
3088
3089         %targets = read_eval_file($fname);
3090     }
3091     my %preexisting = ();
3092     foreach (sort keys %targets) {
3093         $preexisting{$_} = 1 if $table{$_};
3094     }
3095     die <<"EOF",
3096 The following config targets from $fname
3097 shadow pre-existing config targets with the same name:
3098 EOF
3099         map { "  $_\n" } sort keys %preexisting
3100         if %preexisting;
3101
3102
3103     # For each target, check that it's configured with a hash table.
3104     foreach (keys %targets) {
3105         if (ref($targets{$_}) ne "HASH") {
3106             if (ref($targets{$_}) eq "") {
3107                 warn "Deprecated target configuration for $_, ignoring...\n";
3108             } else {
3109                 warn "Misconfigured target configuration for $_ (should be a hash table), ignoring...\n";
3110             }
3111             delete $targets{$_};
3112         } else {
3113             $targets{$_}->{_conf_fname_int} = add([ $fname ]);
3114         }
3115     }
3116
3117     %table = (%table, %targets);
3118
3119 }
3120
3121 # configuration resolver.  Will only resolve all the lazy evaluation
3122 # codeblocks for the chosen target and all those it inherits from,
3123 # recursively
3124 sub resolve_config {
3125     my $target = shift;
3126     my @breadcrumbs = @_;
3127
3128 #    my $extra_checks = defined($ENV{CONFIGURE_EXTRA_CHECKS});
3129
3130     if (grep { $_ eq $target } @breadcrumbs) {
3131         die "inherit_from loop!  target backtrace:\n  "
3132             ,$target,"\n  ",join("\n  ", @breadcrumbs),"\n";
3133     }
3134
3135     if (!defined($table{$target})) {
3136         warn "Warning! target $target doesn't exist!\n";
3137         return ();
3138     }
3139     # Recurse through all inheritances.  They will be resolved on the
3140     # fly, so when this operation is done, they will all just be a
3141     # bunch of attributes with string values.
3142     # What we get here, though, are keys with references to lists of
3143     # the combined values of them all.  We will deal with lists after
3144     # this stage is done.
3145     my %combined_inheritance = ();
3146     if ($table{$target}->{inherit_from}) {
3147         my @inherit_from =
3148             map { ref($_) eq "CODE" ? $_->() : $_ } @{$table{$target}->{inherit_from}};
3149         foreach (@inherit_from) {
3150             my %inherited_config = resolve_config($_, $target, @breadcrumbs);
3151
3152             # 'template' is a marker that's considered private to
3153             # the config that had it.
3154             delete $inherited_config{template};
3155
3156             foreach (keys %inherited_config) {
3157                 if (!$combined_inheritance{$_}) {
3158                     $combined_inheritance{$_} = [];
3159                 }
3160                 push @{$combined_inheritance{$_}}, $inherited_config{$_};
3161             }
3162         }
3163     }
3164
3165     # We won't need inherit_from in this target any more, since we've
3166     # resolved all the inheritances that lead to this
3167     delete $table{$target}->{inherit_from};
3168
3169     # Now is the time to deal with those lists.  Here's the place to
3170     # decide what shall be done with those lists, all based on the
3171     # values of the target we're currently dealing with.
3172     # - If a value is a coderef, it will be executed with the list of
3173     #   inherited values as arguments.
3174     # - If the corresponding key doesn't have a value at all or is the
3175     #   empty string, the inherited value list will be run through the
3176     #   default combiner (below), and the result becomes this target's
3177     #   value.
3178     # - Otherwise, this target's value is assumed to be a string that
3179     #   will simply override the inherited list of values.
3180     my $default_combiner = add();
3181
3182     my %all_keys =
3183         map { $_ => 1 } (keys %combined_inheritance,
3184                          keys %{$table{$target}});
3185
3186     sub process_values {
3187         my $object    = shift;
3188         my $inherited = shift;  # Always a [ list ]
3189         my $target    = shift;
3190         my $entry     = shift;
3191
3192         $add_called = 0;
3193
3194         while(ref($object) eq "CODE") {
3195             $object = $object->(@$inherited);
3196         }
3197         if (!defined($object)) {
3198             return ();
3199         }
3200         elsif (ref($object) eq "ARRAY") {
3201             local $add_called;  # To make sure recursive calls don't affect it
3202             return [ map { process_values($_, $inherited, $target, $entry) }
3203                      @$object ];
3204         } elsif (ref($object) eq "") {
3205             return $object;
3206         } else {
3207             die "cannot handle reference type ",ref($object)
3208                 ," found in target ",$target," -> ",$entry,"\n";
3209         }
3210     }
3211
3212     foreach my $key (sort keys %all_keys) {
3213         my $previous = $combined_inheritance{$key};
3214
3215         # Current target doesn't have a value for the current key?
3216         # Assign it the default combiner, the rest of this loop body
3217         # will handle it just like any other coderef.
3218         if (!exists $table{$target}->{$key}) {
3219             $table{$target}->{$key} = $default_combiner;
3220         }
3221
3222         $table{$target}->{$key} = process_values($table{$target}->{$key},
3223                                                $combined_inheritance{$key},
3224                                                $target, $key);
3225         unless(defined($table{$target}->{$key})) {
3226             delete $table{$target}->{$key};
3227         }
3228 #        if ($extra_checks &&
3229 #            $previous && !($add_called ||  $previous ~~ $table{$target}->{$key})) {
3230 #            warn "$key got replaced in $target\n";
3231 #        }
3232     }
3233
3234     # Finally done, return the result.
3235     return %{$table{$target}};
3236 }
3237
3238 sub usage
3239         {
3240         print STDERR $usage;
3241         print STDERR "\npick os/compiler from:\n";
3242         my $j=0;
3243         my $i;
3244         my $k=0;
3245         foreach $i (sort keys %table)
3246                 {
3247                 next if $table{$i}->{template};
3248                 next if $i =~ /^debug/;
3249                 $k += length($i) + 1;
3250                 if ($k > 78)
3251                         {
3252                         print STDERR "\n";
3253                         $k=length($i);
3254                         }
3255                 print STDERR $i . " ";
3256                 }
3257         foreach $i (sort keys %table)
3258                 {
3259                 next if $table{$i}->{template};
3260                 next if $i !~ /^debug/;
3261                 $k += length($i) + 1;
3262                 if ($k > 78)
3263                         {
3264                         print STDERR "\n";
3265                         $k=length($i);
3266                         }
3267                 print STDERR $i . " ";
3268                 }
3269         exit(1);
3270         }
3271
3272 sub compiler_predefined {
3273     state %predefined;
3274     my $cc = shift;
3275
3276     return () if $^O eq 'VMS';
3277
3278     die 'compiler_predefined called without a compiler command'
3279         unless $cc;
3280
3281     if (! $predefined{$cc}) {
3282
3283         $predefined{$cc} = {};
3284
3285         # collect compiler pre-defines from gcc or gcc-alike...
3286         open(PIPE, "$cc -dM -E -x c /dev/null 2>&1 |");
3287         while (my $l = <PIPE>) {
3288             $l =~ m/^#define\s+(\w+(?:\(\w+\))?)(?:\s+(.+))?/ or last;
3289             $predefined{$cc}->{$1} = $2 // '';
3290         }
3291         close(PIPE);
3292     }
3293
3294     return %{$predefined{$cc}};
3295 }
3296
3297 sub which
3298 {
3299     my ($name)=@_;
3300
3301     if (eval { require IPC::Cmd; 1; }) {
3302         IPC::Cmd->import();
3303         return scalar IPC::Cmd::can_run($name);
3304     } else {
3305         # if there is $directories component in splitpath,
3306         # then it's not something to test with $PATH...
3307         return $name if (File::Spec->splitpath($name))[1];
3308
3309         foreach (File::Spec->path()) {
3310             my $fullpath = catfile($_, "$name$target{exe_extension}");
3311             if (-f $fullpath and -x $fullpath) {
3312                 return $fullpath;
3313             }
3314         }
3315     }
3316 }
3317
3318 sub env
3319 {
3320     my $name = shift;
3321     my %opts = @_;
3322
3323     unless ($opts{cacheonly}) {
3324         # Note that if $ENV{$name} doesn't exist or is undefined,
3325         # $config{perlenv}->{$name} will be created with the value
3326         # undef.  This is intentional.
3327
3328         $config{perlenv}->{$name} = $ENV{$name}
3329             if ! exists $config{perlenv}->{$name};
3330     }
3331     return $config{perlenv}->{$name};
3332 }
3333
3334 # Configuration printer ##############################################
3335
3336 sub print_table_entry
3337 {
3338     local $now_printing = shift;
3339     my %target = resolve_config($now_printing);
3340     my $type = shift;
3341
3342     # Don't print the templates
3343     return if $target{template};
3344
3345     my @sequence = (
3346         "sys_id",
3347         "cpp",
3348         "cppflags",
3349         "defines",
3350         "includes",
3351         "cc",
3352         "cflags",
3353         "ld",
3354         "lflags",
3355         "loutflag",
3356         "ex_libs",
3357         "bn_ops",
3358         "enable",
3359         "disable",
3360         "poly1035_asm_src",
3361         "thread_scheme",
3362         "perlasm_scheme",
3363         "dso_scheme",
3364         "shared_target",
3365         "shared_cflag",
3366         "shared_defines",
3367         "shared_ldflag",
3368         "shared_rcflag",
3369         "shared_extension",
3370         "dso_extension",
3371         "obj_extension",
3372         "exe_extension",
3373         "ranlib",
3374         "ar",
3375         "arflags",
3376         "aroutflag",
3377         "rc",
3378         "rcflags",
3379         "rcoutflag",
3380         "mt",
3381         "mtflags",
3382         "mtinflag",
3383         "mtoutflag",
3384         "multilib",
3385         "build_scheme",
3386         );
3387
3388     if ($type eq "TABLE") {
3389         print "\n";
3390         print "*** $now_printing\n";
3391         foreach (@sequence) {
3392             if (ref($target{$_}) eq "ARRAY") {
3393                 printf "\$%-12s = %s\n", $_, join(" ", @{$target{$_}});
3394             } else {
3395                 printf "\$%-12s = %s\n", $_, $target{$_};
3396             }
3397         }
3398     } elsif ($type eq "HASH") {
3399         my $largest =
3400             length((sort { length($a) <=> length($b) } @sequence)[-1]);
3401         print "    '$now_printing' => {\n";
3402         foreach (@sequence) {
3403             if ($target{$_}) {
3404                 if (ref($target{$_}) eq "ARRAY") {
3405                     print "      '",$_,"'"," " x ($largest - length($_))," => [ ",join(", ", map { "'$_'" } @{$target{$_}})," ],\n";
3406                 } else {
3407                     print "      '",$_,"'"," " x ($largest - length($_))," => '",$target{$_},"',\n";
3408                 }
3409             }
3410         }
3411         print "    },\n";
3412     }
3413 }
3414
3415 # Utility routines ###################################################
3416
3417 # On VMS, if the given file is a logical name, File::Spec::Functions
3418 # will consider it an absolute path.  There are cases when we want a
3419 # purely syntactic check without checking the environment.
3420 sub isabsolute {
3421     my $file = shift;
3422
3423     # On non-platforms, we just use file_name_is_absolute().
3424     return file_name_is_absolute($file) unless $^O eq "VMS";
3425
3426     # If the file spec includes a device or a directory spec,
3427     # file_name_is_absolute() is perfectly safe.
3428     return file_name_is_absolute($file) if $file =~ m|[:\[]|;
3429
3430     # Here, we know the given file spec isn't absolute
3431     return 0;
3432 }
3433
3434 # Makes a directory absolute and cleans out /../ in paths like foo/../bar
3435 # On some platforms, this uses rel2abs(), while on others, realpath() is used.
3436 # realpath() requires that at least all path components except the last is an
3437 # existing directory.  On VMS, the last component of the directory spec must
3438 # exist.
3439 sub absolutedir {
3440     my $dir = shift;
3441
3442     # realpath() is quite buggy on VMS.  It uses LIB$FID_TO_NAME, which
3443     # will return the volume name for the device, no matter what.  Also,
3444     # it will return an incorrect directory spec if the argument is a
3445     # directory that doesn't exist.
3446     if ($^O eq "VMS") {
3447         return rel2abs($dir);
3448     }
3449
3450     # We use realpath() on Unix, since no other will properly clean out
3451     # a directory spec.
3452     use Cwd qw/realpath/;
3453
3454     return realpath($dir);
3455 }
3456
3457 # Check if all paths are one and the same, using stat.  They must both exist
3458 # We need this for the cases when File::Spec doesn't detect case insensitivity
3459 # (File::Spec::Unix assumes case sensitivity)
3460 sub samedir {
3461     die "samedir expects two arguments\n" unless scalar @_ == 2;
3462
3463     my @stat0 = stat($_[0]);    # First argument
3464     my @stat1 = stat($_[1]);    # Second argument
3465
3466     die "Couldn't stat $_[0]" unless @stat0;
3467     die "Couldn't stat $_[1]" unless @stat1;
3468
3469     # Compare device number
3470     return 0 unless ($stat0[0] == $stat1[0]);
3471     # Compare "inode".  The perl manual recommends comparing as
3472     # string rather than as number.
3473     return 0 unless ($stat0[1] eq $stat1[1]);
3474
3475     return 1;                   # All the same
3476 }
3477
3478 sub quotify {
3479     my %processors = (
3480         perl    => sub { my $x = shift;
3481                          $x =~ s/([\\\$\@"])/\\$1/g;
3482                          return '"'.$x.'"'; },
3483         maybeshell => sub { my $x = shift;
3484                             (my $y = $x) =~ s/([\\\"])/\\$1/g;
3485                             if ($x ne $y || $x =~ m|\s|) {
3486                                 return '"'.$y.'"';
3487                             } else {
3488                                 return $x;
3489                             }
3490                         },
3491         );
3492     my $for = shift;
3493     my $processor =
3494         defined($processors{$for}) ? $processors{$for} : sub { shift; };
3495
3496     return map { $processor->($_); } @_;
3497 }
3498
3499 # collect_from_file($filename, $line_concat_cond_re, $line_concat)
3500 # $filename is a file name to read from
3501 # $line_concat_cond_re is a regexp detecting a line continuation ending
3502 # $line_concat is a CODEref that takes care of concatenating two lines
3503 sub collect_from_file {
3504     my $filename = shift;
3505     my $line_concat_cond_re = shift;
3506     my $line_concat = shift;
3507
3508     open my $fh, $filename || die "unable to read $filename: $!\n";
3509     return sub {
3510         my $saved_line = "";
3511         $_ = "";
3512         while (<$fh>) {
3513             s|\R$||;
3514             if (defined $line_concat) {
3515                 $_ = $line_concat->($saved_line, $_);
3516                 $saved_line = "";
3517             }
3518             if (defined $line_concat_cond_re && /$line_concat_cond_re/) {
3519                 $saved_line = $_;
3520                 next;
3521             }
3522             return $_;
3523         }
3524         die "$filename ending with continuation line\n" if $_;
3525         close $fh;
3526         return undef;
3527     }
3528 }
3529
3530 # collect_from_array($array, $line_concat_cond_re, $line_concat)
3531 # $array is an ARRAYref of lines
3532 # $line_concat_cond_re is a regexp detecting a line continuation ending
3533 # $line_concat is a CODEref that takes care of concatenating two lines
3534 sub collect_from_array {
3535     my $array = shift;
3536     my $line_concat_cond_re = shift;
3537     my $line_concat = shift;
3538     my @array = (@$array);
3539
3540     return sub {
3541         my $saved_line = "";
3542         $_ = "";
3543         while (defined($_ = shift @array)) {
3544             s|\R$||;
3545             if (defined $line_concat) {
3546                 $_ = $line_concat->($saved_line, $_);
3547                 $saved_line = "";
3548             }
3549             if (defined $line_concat_cond_re && /$line_concat_cond_re/) {
3550                 $saved_line = $_;
3551                 next;
3552             }
3553             return $_;
3554         }
3555         die "input text ending with continuation line\n" if $_;
3556         return undef;
3557     }
3558 }
3559
3560 # collect_information($lineiterator, $line_continue, $regexp => $CODEref, ...)
3561 # $lineiterator is a CODEref that delivers one line at a time.
3562 # All following arguments are regex/CODEref pairs, where the regexp detects a
3563 # line and the CODEref does something with the result of the regexp.
3564 sub collect_information {
3565     my $lineiterator = shift;
3566     my %collectors = @_;
3567
3568     while(defined($_ = $lineiterator->())) {
3569         s|\R$||;
3570         my $found = 0;
3571         if ($collectors{"BEFORE"}) {
3572             $collectors{"BEFORE"}->($_);
3573         }
3574         foreach my $re (keys %collectors) {
3575             if ($re !~ /^OTHERWISE|BEFORE|AFTER$/ && /$re/) {
3576                 $collectors{$re}->($lineiterator);
3577                 $found = 1;
3578             };
3579         }
3580         if ($collectors{"OTHERWISE"}) {
3581             $collectors{"OTHERWISE"}->($lineiterator, $_)
3582                 unless $found || !defined $collectors{"OTHERWISE"};
3583         }
3584         if ($collectors{"AFTER"}) {
3585             $collectors{"AFTER"}->($_);
3586         }
3587     }
3588 }
3589
3590 # tokenize($line)
3591 # tokenize($line,$separator)
3592 # $line is a line of text to split up into tokens
3593 # $separator [optional] is a regular expression that separates the tokens,
3594 # the default being spaces.  Do not use quotes of any kind as separators,
3595 # that will give undefined results.
3596 # Returns a list of tokens.
3597 #
3598 # Tokens are divided by separator (spaces by default).  If the tokens include
3599 # the separators, they have to be quoted with single or double quotes.
3600 # Double quotes inside a double quoted token must be escaped.  Escaping is done
3601 # with backslash.
3602 # Basically, the same quoting rules apply for " and ' as in any
3603 # Unix shell.
3604 sub tokenize {
3605     my $line = my $debug_line = shift;
3606     my $separator = shift // qr|\s+|;
3607     my @result = ();
3608
3609     if ($ENV{CONFIGURE_DEBUG_TOKENIZE}) {
3610         print STDERR "DEBUG[tokenize]: \$separator = $separator\n";
3611     }
3612
3613     while ($line =~ s|^${separator}||, $line ne "") {
3614         my $token = "";
3615     again:
3616         $line =~ m/^(.*?)(${separator}|"|'|$)/;
3617         $token .= $1;
3618         $line = $2.$';
3619
3620         if ($line =~ m/^"((?:[^"\\]+|\\.)*)"/) {
3621             $token .= $1;
3622             $line = $';
3623             goto again;
3624         } elsif ($line =~ m/^'([^']*)'/) {
3625             $token .= $1;
3626             $line = $';
3627             goto again;
3628         }
3629         push @result, $token;
3630     }
3631
3632     if ($ENV{CONFIGURE_DEBUG_TOKENIZE}) {
3633         print STDERR "DEBUG[tokenize]: Parsed '$debug_line' into:\n";
3634         print STDERR "DEBUG[tokenize]: ('", join("', '", @result), "')\n";
3635     }
3636     return @result;
3637 }