1 dnl Copyright (c) 1994, 1995, 1996, 1997
2 dnl The Regents of the University of California. All rights reserved.
4 dnl Process this file with autoconf to produce a configure script.
10 # https://ftp.gnu.org/gnu/config/README
12 # for the URLs to use to fetch new versions of config.guess and
17 AC_INIT([tcpdump],[m4_esyscmd_s(cat VERSION)],[https://github.com/the-tcpdump-group/tcpdump/issues])
18 AC_CONFIG_SRCDIR(tcpdump.c)
22 AC_LBL_C_INIT_BEFORE_CC(V_INCLS)
24 # Try to enable as many C99 features as we can.
25 # At minimum, we want C++/C99-style // comments.
28 if test "$ac_cv_prog_cc_c99" = "no"; then
29 AC_MSG_WARN([The C compiler does not support C99; there may be compiler errors])
31 AC_LBL_C_INIT(V_CCOPT, V_INCLS)
34 AC_CHECK_HEADERS(fcntl.h rpc/rpc.h rpc/rpcent.h net/if.h)
36 # Get the size of a void *, to know whether this is a 32-bit or 64-bit build.
38 AC_CHECK_SIZEOF([void *])
41 # Get the size of a time_t, to know whether it's 32-bit or 64-bit.
43 AC_CHECK_SIZEOF([time_t],,[#include <time.h>])
48 AC_ARG_ENABLE(universal,
49 AS_HELP_STRING([--disable-universal],[don't build universal on macOS]))
50 if test "$enable_universal" != "no"; then
55 # Leopard. Build for x86 and 32-bit PowerPC, with
56 # x86 first. (That's what Apple does.)
58 V_CCOPT="$V_CCOPT -arch i386 -arch ppc"
59 LDFLAGS="$LDFLAGS -arch i386 -arch ppc"
64 # Snow Leopard. Build for x86-64 and x86, with
65 # x86-64 first. (That's what Apple does.)
67 V_CCOPT="$V_CCOPT -arch x86_64 -arch i386"
68 LDFLAGS="$LDFLAGS -arch x86_64 -arch i386"
76 [AS_HELP_STRING([--with-smi],
77 [link with libsmi (allows to load MIBs on the fly to decode SNMP packets) [default=yes, if available]])],
81 if test "x$with_smi" != "xno" ; then
82 AC_CHECK_HEADER(smi.h,
85 # OK, we found smi.h. Do we have libsmi with smiInit?
87 AC_CHECK_LIB(smi, smiInit,
90 # OK, we have libsmi with smiInit. Can we use it?
92 AC_MSG_CHECKING([whether to enable libsmi])
95 AC_RUN_IFELSE([AC_LANG_SOURCE([[
96 /* libsmi available check */
103 int current, revision, age, n;
104 const int required = 2;
107 if (strcmp(SMI_LIBRARY_VERSION, smi_library_version))
109 n = sscanf(smi_library_version, "%d:%d:%d", ¤t, &revision, &age);
112 if (required < current - age || required > current)
120 AC_DEFINE(USE_LIBSMI, 1,
121 [Define if you enable support for libsmi])
124 dnl autoconf documentation says that
125 dnl $? contains the exit value.
126 dnl reality is that it does not.
127 dnl We leave this in just in case
128 dnl autoconf ever comes back to
129 dnl match the documentation.
131 1) AC_MSG_RESULT(no - smiInit failed) ;;
132 2) AC_MSG_RESULT(no - header/library version mismatch) ;;
133 3) AC_MSG_RESULT(no - can't determine library version) ;;
134 4) AC_MSG_RESULT(no - too old) ;;
135 *) AC_MSG_RESULT(no) ;;
140 AC_MSG_RESULT(not when cross-compiling)
148 AC_MSG_CHECKING([whether to enable the instrument functions code])
149 AC_ARG_ENABLE([instrument-functions],
150 [AS_HELP_STRING([--enable-instrument-functions],
151 [enable instrument functions code [default=no]])],
155 yes) AC_MSG_RESULT(yes)
156 AC_CHECK_LIB([bfd], [bfd_init],
159 [--enable-instrument-functions was given, but test for library libbfd failed. Please install the 'binutils-dev' package.])],
161 AC_DEFINE(ENABLE_INSTRUMENT_FUNCTIONS, 1,
162 [define if you want to build the instrument functions code])
163 LOCALSRC="$LOCALSRC instrument-functions.c"
164 # Add '-finstrument-functions' instrumentation option to generate
165 # instrumentation calls for entry and exit to functions.
166 # Try to avoid Address Space Layout Randomization (ALSR).
167 CFLAGS="$CFLAGS -O0 -ggdb -finstrument-functions -fno-stack-protector -fno-pic"
168 LDFLAGS="$LDFLAGS -O0 -ggdb -fno-stack-protector -no-pie"
175 AC_MSG_CHECKING([whether to enable the possibly-buggy SMB printer])
177 [AS_HELP_STRING([--enable-smb],
178 [enable possibly-buggy SMB printer [default=no]])],
182 yes) AC_MSG_RESULT(yes)
183 AC_DEFINE(ENABLE_SMB, 1,
184 [define if you want to build the possibly-buggy SMB printer])
185 LOCALSRC="print-smb.c smbutil.c $LOCALSRC"
191 AC_MSG_CHECKING([whether to drop root privileges by default])
194 [AS_HELP_STRING([--with-user=USERNAME],
195 [drop privileges by default to USERNAME]
199 AS_CASE(["$withval"],
200 [no], [AC_MSG_RESULT(no)],
201 [''|yes], [AC_MSG_ERROR([--with-user requires a username])],
203 AC_DEFINE_UNQUOTED(WITH_USER, "$withval",
204 [define if should drop privileges by default])
205 AC_MSG_RESULT([yes, to user "$withval"])
209 AC_MSG_CHECKING([whether to chroot])
212 [AS_HELP_STRING([--with-chroot=DIRECTORY],
213 [when dropping privileges, chroot to DIRECTORY]
218 AS_CASE(["$withval"],
219 [no], [AC_MSG_RESULT(no)],
220 [''|yes], [AC_MSG_ERROR([--with-chroot requires a directory])],
222 AC_DEFINE_UNQUOTED(WITH_CHROOT, "$withval",
223 [define if should chroot when dropping privileges])
224 AC_MSG_RESULT([yes, to directory "$withval"])
228 AC_ARG_WITH(sandbox-capsicum,
229 AS_HELP_STRING([--with-sandbox-capsicum],
230 [use Capsicum security functions @<:@default=yes, if available@:>@]))
232 # Check whether various functions are available. If any are, set
233 # ac_lbl_capsicum_function_seen to yes; if any are not, set
234 # ac_lbl_capsicum_function_not_seen to yes.
236 # We don't check cap_rights_init(), as it's a macro, wrapping another
237 # function, in at least some versions of FreeBSD, and AC_CHECK_FUNCS()
238 # doesn't handle that.
240 # All of the ones we check for must be available in order to enable
241 # capsicum sandboxing.
243 # XXX - do we need to check for all of them, or are there some that, if
244 # present, imply others are present?
246 if test -z "$with_sandbox_capsicum" || test "$with_sandbox_capsicum" != "no" ; then
248 # First, make sure we have the required header.
250 AC_CHECK_HEADER(sys/capsicum.h,
253 # We do; now make sure we have the required functions.
255 AC_CHECK_FUNCS(cap_enter cap_rights_limit cap_ioctls_limit openat,
256 ac_lbl_capsicum_function_seen=yes,
257 ac_lbl_capsicum_function_not_seen=yes)
259 AC_CHECK_LIB(casper, cap_init, LIBS="$LIBS -lcasper")
260 AC_CHECK_LIB(cap_dns, cap_gethostbyaddr, LIBS="$LIBS -lcap_dns")
262 AC_MSG_CHECKING([whether to sandbox using capsicum])
263 if test "x$ac_lbl_capsicum_function_seen" = "xyes" -a "x$ac_lbl_capsicum_function_not_seen" != "xyes"; then
264 AC_DEFINE(HAVE_CAPSICUM, 1, [capsicum support available])
269 AC_MSG_CHECKING([whether to sandbox using Casper library])
270 if test "x$ac_cv_lib_casper_cap_init" = "xyes" -a "x$ac_cv_lib_cap_dns_cap_gethostbyaddr" = "xyes"; then
271 AC_DEFINE(HAVE_CASPER, 1, [Casper support available])
278 # We must check this before checking whether to check the OS's IPv6,
279 # support because, on some platforms (such as SunOS 5.x), the test
280 # program requires the extra networking libraries.
284 AC_REPLACE_FUNCS(strlcat strlcpy strsep getservent getopt_long)
285 AC_CHECK_FUNCS(fork vfork)
286 AC_CHECK_FUNCS(setlinebuf)
289 # Make sure we have snprintf(); we require it.
291 AC_CHECK_FUNC(snprintf,,
292 AC_MSG_ERROR([snprintf() is required but wasn't found]))
295 # It became apparent at some point that using a suitable C99 compiler does not
296 # automatically mean snprintf(3) implementation in the libc supports all the
297 # modifiers and specifiers used in the project, so let's test that before the
300 # Testing the sizeof_t length modifier takes making an snprintf() call and
301 # comparing the actual result with the expected result. If this fails, it will
302 # most likely happen at run time, not compile time.
304 # Testing the 64-bit conversion specifiers in addition to that requires the
305 # <inttypes.h> header to be present and the macros to be defined, so if this
306 # fails, it will more likely happen at compile time.
308 AC_MSG_CHECKING([whether snprintf is suitable])
314 #include <inttypes.h>
315 #include <sys/types.h>
320 uint64_t t = (uint64_t)1 << 32;
322 snprintf(buf, sizeof(buf), "%zu", sizeof(buf));
323 if (strncmp(buf, "100", sizeof(buf)))
326 snprintf(buf, sizeof(buf), "%zd", -sizeof(buf));
327 if (strncmp(buf, "-100", sizeof(buf)))
330 snprintf(buf, sizeof(buf), "%" PRId64, -t);
331 if (strncmp(buf, "-4294967296", sizeof(buf)))
334 snprintf(buf, sizeof(buf), "0o%" PRIo64, t);
335 if (strncmp(buf, "0o40000000000", sizeof(buf)))
338 snprintf(buf, sizeof(buf), "0x%" PRIx64, t);
339 if (strncmp(buf, "0x100000000", sizeof(buf)))
342 snprintf(buf, sizeof(buf), "%" PRIu64, t);
343 if (strncmp(buf, "4294967296", sizeof(buf)))
356 [The snprintf(3) implementation in this libc is not suitable,
357 tcpdump would not work correctly even if it managed to compile.])
360 AC_MSG_RESULT(not while cross-compiling)
364 AC_CHECK_LIB(rpc, main) dnl It's unclear why we might need -lrpc
366 dnl Some platforms may need -lnsl for getrpcbynumber.
367 AC_SEARCH_LIBS(getrpcbynumber, nsl,
368 AC_DEFINE(HAVE_GETRPCBYNUMBER, 1, [define if you have getrpcbynumber()]))
370 AC_LBL_LIBPCAP(V_PCAPDEP, V_INCLS)
373 # Check for these after AC_LBL_LIBPCAP, so we link with the appropriate
374 # libraries (e.g., "-lsocket -lnsl" on Solaris).
376 # You are in a twisty little maze of UN*Xes, all different.
377 # Some might not have ether_ntohost().
378 # Some might have it and declare it in <net/ethernet.h>.
379 # Some might have it and declare it in <netinet/ether.h>
380 # Some might have it and declare it in <sys/ethernet.h>.
381 # Some might have it and declare it in <arpa/inet.h>.
382 # Some might have it and declare it in <netinet/if_ether.h>.
383 # Some might have it and not declare it in any header file.
385 # Before you is a C compiler.
387 AC_CHECK_FUNCS(ether_ntohost, [
388 AC_CACHE_CHECK(for buggy ether_ntohost, ac_cv_buggy_ether_ntohost, [
389 AC_RUN_IFELSE([AC_LANG_SOURCE([[
391 #include <netinet/ether.h>
393 #include <sys/types.h>
394 #include <sys/param.h>
395 #include <sys/socket.h>
398 main(int argc, char **argv)
400 u_char ea[6] = { 0xff, 0xff, 0xff, 0xff, 0xff };
401 char name[MAXHOSTNAMELEN];
403 ether_ntohost(name, (struct ether_addr *)ea);
407 ], [ac_cv_buggy_ether_ntohost=no],
408 [ac_cv_buggy_ether_ntohost=yes],
409 [ac_cv_buggy_ether_ntohost="not while cross-compiling"])])
410 if test "$ac_cv_buggy_ether_ntohost" = "no"; then
411 AC_DEFINE(USE_ETHER_NTOHOST, 1,
412 [define if you have ether_ntohost() and it works])
415 if test "$ac_cv_func_ether_ntohost" = yes -a \
416 "$ac_cv_buggy_ether_ntohost" = "no"; then
418 # OK, we have ether_ntohost(). Is it declared in <net/ethernet.h>?
420 # This test fails if we don't have <net/ethernet.h> or if we do
421 # but it doesn't declare ether_ntohost().
423 AC_CHECK_DECL(ether_ntohost,
425 AC_DEFINE(NET_ETHERNET_H_DECLARES_ETHER_NTOHOST,,
426 [Define to 1 if net/ethernet.h declares `ether_ntohost'])
429 #include <net/ethernet.h>
434 if test "$ac_cv_have_decl_ether_ntohost" != yes; then
436 # No, how about <netinet/ether.h>, as on Linux?
438 # This test fails if we don't have <netinet/ether.h>
439 # or if we do but it doesn't declare ether_ntohost().
441 # Unset ac_cv_have_decl_ether_ntohost so we don't
442 # treat the previous failure as a cached value and
443 # suppress the next test.
445 unset ac_cv_have_decl_ether_ntohost
446 AC_CHECK_DECL(ether_ntohost,
448 AC_DEFINE(NETINET_ETHER_H_DECLARES_ETHER_NTOHOST,,
449 [Define to 1 if netinet/ether.h declares `ether_ntohost'])
452 #include <netinet/ether.h>
458 if test "$ac_cv_have_decl_ether_ntohost" != yes; then
460 # No, how about <sys/ethernet.h>, as on Solaris 10
463 # This test fails if we don't have <sys/ethernet.h>
464 # or if we do but it doesn't declare ether_ntohost().
466 # Unset ac_cv_have_decl_ether_ntohost so we don't
467 # treat the previous failure as a cached value and
468 # suppress the next test.
470 unset ac_cv_have_decl_ether_ntohost
471 AC_CHECK_DECL(ether_ntohost,
473 AC_DEFINE(SYS_ETHERNET_H_DECLARES_ETHER_NTOHOST,,
474 [Define to 1 if sys/ethernet.h declares `ether_ntohost'])
477 #include <sys/ethernet.h>
483 if test "$ac_cv_have_decl_ether_ntohost" != yes; then
485 # No, how about <arpa/inet.h>, as in AIX?
487 # This test fails if we don't have <arpa/inet.h>
488 # (if we have ether_ntohost(), we should have
489 # networking, and if we have networking, we should
490 # have <arpa/inet.h>) or if we do but it doesn't
491 # declare ether_ntohost().
493 # Unset ac_cv_have_decl_ether_ntohost so we don't
494 # treat the previous failure as a cached value and
495 # suppress the next test.
497 unset ac_cv_have_decl_ether_ntohost
498 AC_CHECK_DECL(ether_ntohost,
500 AC_DEFINE(ARPA_INET_H_DECLARES_ETHER_NTOHOST,,
501 [Define to 1 if arpa/inet.h declares `ether_ntohost'])
504 #include <arpa/inet.h>
510 if test "$ac_cv_have_decl_ether_ntohost" != yes; then
512 # No, how about <netinet/if_ether.h>?
513 # On some platforms, it requires <net/if.h> and
514 # <netinet/in.h>, and we always include it with
515 # both of them, so test it with both of them.
517 # This test fails if we don't have <netinet/if_ether.h>
518 # and the headers we include before it, or if we do but
519 # <netinet/if_ether.h> doesn't declare ether_hostton().
521 # Unset ac_cv_have_decl_ether_ntohost so we don't
522 # treat the previous failure as a cached value and
523 # suppress the next test.
525 unset ac_cv_have_decl_ether_ntohost
526 AC_CHECK_DECL(ether_ntohost,
528 AC_DEFINE(NETINET_IF_ETHER_H_DECLARES_ETHER_NTOHOST,,
529 [Define to 1 if netinet/if_ether.h declares `ether_ntohost'])
532 #include <sys/types.h>
533 #include <sys/socket.h>
535 #include <netinet/in.h>
536 #include <netinet/if_ether.h>
540 # After all that, is ether_ntohost() declared?
542 if test "$ac_cv_have_decl_ether_ntohost" = yes; then
546 AC_DEFINE(HAVE_DECL_ETHER_NTOHOST, 1,
547 [Define to 1 if you have the declaration of `ether_ntohost'])
550 # No, we'll have to declare it ourselves.
551 # Do we have "struct ether_addr" if we include
552 # <netinet/if_ether.h>?
554 AC_CHECK_TYPES(struct ether_addr,,,
556 #include <sys/types.h>
557 #include <sys/socket.h>
559 #include <netinet/in.h>
560 #include <netinet/if_ether.h>
566 dnl Check for "pcap_list_datalinks()" and use a substitute version if
567 dnl it's not present. If it is present, check for "pcap_free_datalinks()";
568 dnl if it's not present, we don't replace it for now. (We could do so
569 dnl on UN*X, but not on Windows, where hilarity ensues if a program
570 dnl built with one version of the MSVC support library tries to free
571 dnl something allocated by a library built with another version of
572 dnl the MSVC support library.)
574 AC_CHECK_FUNC(pcap_list_datalinks,
576 AC_DEFINE(HAVE_PCAP_LIST_DATALINKS, 1,
577 [define if libpcap has pcap_list_datalinks()])
578 AC_CHECK_FUNCS(pcap_free_datalinks)
585 dnl Check for "pcap_datalink_name_to_val()", and use a substitute
586 dnl version if it's not present. If it is present, check for
587 dnl "pcap_datalink_val_to_description()", and if we don't have it,
588 dnl use a substitute version.
590 AC_CHECK_FUNC(pcap_datalink_name_to_val,
592 AC_DEFINE(HAVE_PCAP_DATALINK_NAME_TO_VAL, 1,
593 [define if libpcap has pcap_datalink_name_to_val()])
594 AC_CHECK_FUNC(pcap_datalink_val_to_description,
595 AC_DEFINE(HAVE_PCAP_DATALINK_VAL_TO_DESCRIPTION, 1,
596 [define if libpcap has pcap_datalink_val_to_description()]),
606 dnl Check for "pcap_set_datalink()"; you can't substitute for it if
607 dnl it's absent (it has hooks into libpcap), so just define the
608 dnl HAVE_ value if it's there.
610 AC_CHECK_FUNCS(pcap_set_datalink)
613 dnl Check for "pcap_breakloop()"; you can't substitute for it if
614 dnl it's absent (it has hooks into the live capture routines),
615 dnl so just define the HAVE_ value if it's there.
617 AC_CHECK_FUNCS(pcap_breakloop)
620 # Do we have the new open API? Check for pcap_create, and assume that,
621 # if we do, we also have pcap_activate() and the other new routines
622 # introduced in libpcap 1.0.0.
624 AC_CHECK_FUNCS(pcap_create)
625 if test $ac_cv_func_pcap_create = "yes" ; then
627 # OK, do we have pcap_set_tstamp_type? If so, assume we have
628 # pcap_list_tstamp_types and pcap_free_tstamp_types as well.
630 AC_CHECK_FUNCS(pcap_set_tstamp_type)
632 # And do we have pcap_set_tstamp_precision? If so, we assume
633 # we also have pcap_open_offline_with_tstamp_precision.
635 AC_CHECK_FUNCS(pcap_set_tstamp_precision)
639 # Check for a miscellaneous collection of functions which we use
642 AC_CHECK_FUNCS(pcap_findalldevs)
643 AC_CHECK_FUNCS(pcap_dump_flush pcap_lib_version)
644 if test $ac_cv_func_pcap_lib_version = "no" ; then
645 AC_MSG_CHECKING(whether pcap_version is defined by libpcap)
646 AC_LINK_IFELSE([AC_LANG_PROGRAM([[]], [[
647 extern char pcap_version[];
649 return (int)pcap_version;
652 [ac_lbl_cv_pcap_version_defined=yes],
653 [ac_lbl_cv_pcap_version_defined=no])
654 if test "$ac_lbl_cv_pcap_version_defined" = yes ; then
656 AC_DEFINE(HAVE_PCAP_VERSION, 1, [define if libpcap has pcap_version])
661 AC_CHECK_FUNCS(pcap_setdirection pcap_set_immediate_mode pcap_dump_ftell64)
662 AC_CHECK_FUNCS(pcap_open pcap_findalldevs_ex)
663 AC_REPLACE_FUNCS(pcap_dump_ftell)
666 # Check for special debugging functions
668 AC_CHECK_FUNCS(pcap_set_parser_debug)
669 if test "$ac_cv_func_pcap_set_parser_debug" = "no" ; then
671 # OK, we don't have pcap_set_parser_debug() to set the libpcap
672 # filter expression parser debug flag; can we directly set the
674 AC_MSG_CHECKING(whether pcap_debug is defined by libpcap)
675 AC_LINK_IFELSE([AC_LANG_PROGRAM([[]], [[
676 extern int pcap_debug;
681 [ac_lbl_cv_pcap_debug_defined=yes],
682 [ac_lbl_cv_pcap_debug_defined=no])
683 if test "$ac_lbl_cv_pcap_debug_defined" = yes ; then
685 AC_DEFINE(HAVE_PCAP_DEBUG, 1, [define if libpcap has pcap_debug])
689 # OK, what about "yydebug"?
691 AC_MSG_CHECKING(whether yydebug is defined by libpcap)
692 AC_LINK_IFELSE([AC_LANG_PROGRAM([[]], [[
698 [ac_lbl_cv_yydebug_defined=yes],
699 [ac_lbl_cv_yydebug_defined=no])
700 if test "$ac_lbl_cv_yydebug_defined" = yes ; then
702 AC_DEFINE(HAVE_YYDEBUG, 1, [define if libpcap has yydebug])
708 AC_CHECK_FUNCS(pcap_set_optimizer_debug)
709 AC_REPLACE_FUNCS(bpf_dump) dnl moved to libpcap in 0.6
712 # Assume V7/BSD convention for man pages (file formats in section 5,
713 # miscellaneous info in section 7).
720 dnl Workaround to enable certain features
721 AC_DEFINE(_SUN,1,[define on AIX to get certain functions])
726 # Use System V conventions for man pages.
734 # Use System V conventions for man pages.
742 # Make sure we have a definition for C99's uintptr_t (regardless of
743 # whether the environment is a C99 environment or not).
747 savedcppflags="$CPPFLAGS"
748 CPPFLAGS="$CPPFLAGS $V_INCLS"
751 # Check whether we have pcap/pcap-inttypes.h.
752 # If we do, we use that to get the C99 types defined.
754 AC_CHECK_HEADERS(pcap/pcap-inttypes.h)
757 # At compile time HAVE_PCAP_FINDALLDEVS depends on HAVE_PCAP_IF_T.
759 AC_CHECK_TYPES(pcap_if_t, , , [#include <pcap.h>])
761 CPPFLAGS="$savedcppflags"
764 # Define the old BSD specified-width types in terms of the C99 types;
765 # we may need them with libpcap include files.
767 AC_CHECK_TYPE([u_int8_t], ,
768 [AC_DEFINE([u_int8_t], [uint8_t],
769 [Define to `uint8_t' if u_int8_t not defined.])],
771 #include <sys/types.h>
773 AC_CHECK_TYPE([u_int16_t], ,
774 [AC_DEFINE([u_int16_t], [uint16_t],
775 [Define to `uint16_t' if u_int16_t not defined.])],
777 #include <sys/types.h>
779 AC_CHECK_TYPE([u_int32_t], ,
780 [AC_DEFINE([u_int32_t], [uint32_t],
781 [Define to `uint32_t' if u_int32_t not defined.])],
783 #include <sys/types.h>
785 AC_CHECK_TYPE([u_int64_t], ,
786 [AC_DEFINE([u_int64_t], [uint64_t],
787 [Define to `uint64_t' if u_int64_t not defined.])],
789 #include <sys/types.h>
793 AC_CHECK_TOOL([AR], [ar])
795 AC_LBL_DEVEL(V_CCOPT)
797 # Check for OpenSSL/libressl libcrypto
798 AC_MSG_CHECKING(whether to use OpenSSL/libressl libcrypto)
799 # Specify location for both includes and libraries.
800 want_libcrypto=ifavailable
802 AS_HELP_STRING([--with-crypto]@<:@=DIR@:>@,
803 [use OpenSSL/libressl libcrypto (located in directory DIR, if specified) @<:@default=yes, if available@:>@]),
805 if test $withval = no
807 # User doesn't want to link with libcrypto.
810 elif test $withval = yes
812 # User wants to link with libcrypto but hasn't specified
817 # User wants to link with libcrypto and has specified
818 # a directory, so use the provided value.
820 libcrypto_root=$withval
821 AC_MSG_RESULT([yes, using the version installed in $withval])
824 # Put the subdirectories of the libcrypto root directory
825 # at the front of the header and library search path.
827 CFLAGS="-I$withval/include $CFLAGS"
828 LIBS="-L$withval/lib $LIBS"
832 # Use libcrypto if it's present, otherwise don't; no directory
835 want_libcrypto=ifavailable
836 AC_MSG_RESULT([yes, if available])
838 if test "$want_libcrypto" != "no"; then
840 # Don't check for libcrypto unless we have its headers;
841 # Apple, bless their pointy little heads, apparently ship
842 # libcrypto as a library, but not the header files, in
843 # El Capitan, probably because they don't want you writing
844 # nasty portable code that could run on other UN*Xes, they
845 # want you writing code that uses their Shiny New Crypto
846 # Library and that only runs on macOS.
848 AC_CHECK_HEADER(openssl/crypto.h,
850 AC_CHECK_LIB(crypto, DES_cbc_encrypt)
851 if test "$ac_cv_lib_crypto_DES_cbc_encrypt" = "yes"; then
852 AC_CHECK_HEADERS(openssl/evp.h)
856 # 1) do we have EVP_CIPHER_CTX_new?
857 # If so, we use it to allocate an
858 # EVP_CIPHER_CTX, as EVP_CIPHER_CTX may be
859 # opaque; otherwise, we allocate it ourselves.
861 # 2) do we have EVP_DecryptInit_ex()?
862 # If so, we use it, because we need to be
863 # able to make two "initialize the cipher"
864 # calls, one with the cipher and key, and
865 # one with the IV, and, as of OpenSSL 1.1,
866 # You Can't Do That with EVP_DecryptInit(),
867 # because a call to EVP_DecryptInit() will
868 # unconditionally clear the context, and
869 # if you don't supply a cipher, it'll
870 # clear the cipher, rendering the context
871 # unusable and causing a crash.
873 AC_CHECK_FUNCS(EVP_CIPHER_CTX_new EVP_DecryptInit_ex)
878 # Check for libcap-ng
879 AC_MSG_CHECKING(whether to use libcap-ng)
880 # Specify location for both includes and libraries.
881 want_libcap_ng=ifavailable
883 AS_HELP_STRING([--with-cap-ng],
884 [use libcap-ng @<:@default=yes, if available@:>@]),
886 if test $withval = no
890 elif test $withval = yes
897 # Use libcap-ng if it's present, otherwise don't.
899 want_libcap_ng=ifavailable
900 AC_MSG_RESULT([yes, if available])
902 if test "$want_libcap_ng" != "no"; then
903 AC_CHECK_LIB(cap-ng, capng_change_id)
904 AC_CHECK_HEADERS(cap-ng.h)
908 dnl set additional include path if necessary
909 if test "$missing_includes" = "yes"; then
910 CPPFLAGS="$CPPFLAGS -I$srcdir/missing"
911 V_INCLS="$V_INCLS -I$srcdir/missing"
919 AC_SUBST(MAN_FILE_FORMATS)
920 AC_SUBST(MAN_MISC_INFO)
924 AC_CONFIG_HEADERS([config.h])
926 AC_CONFIG_COMMANDS([.devel],[[if test -f .devel; then
927 echo timestamp > stamp-h
928 cat $srcdir/Makefile-devel-adds >> Makefile
929 make depend || exit 1
931 AC_CONFIG_FILES([Makefile tcpdump.1])