1 dnl Copyright (c) 1994, 1995, 1996, 1997
2 dnl The Regents of the University of California. All rights reserved.
4 dnl Process this file with autoconf to produce a configure script.
10 # https://ftp.gnu.org/gnu/config/README
12 # for the URLs to use to fetch new versions of config.guess and
17 AC_INIT([tcpdump],[m4_esyscmd_s(cat VERSION)])
18 AC_CONFIG_SRCDIR(tcpdump.c)
22 AC_LBL_C_INIT_BEFORE_CC(V_INCLS)
24 # Try to enable as many C99 features as we can.
25 # At minimum, we want C++/C99-style // comments.
28 if test "$ac_cv_prog_cc_c99" = "no"; then
29 AC_MSG_WARN([The C compiler does not support C99; there may be compiler errors])
31 AC_LBL_C_INIT(V_CCOPT, V_INCLS)
34 AC_CHECK_HEADERS(fcntl.h rpc/rpc.h rpc/rpcent.h net/if.h)
39 AC_ARG_ENABLE(universal,
40 AS_HELP_STRING([--disable-universal],[don't build universal on macOS]))
41 if test "$enable_universal" != "no"; then
46 # Leopard. Build for x86 and 32-bit PowerPC, with
47 # x86 first. (That's what Apple does.)
49 V_CCOPT="$V_CCOPT -arch i386 -arch ppc"
50 LDFLAGS="$LDFLAGS -arch i386 -arch ppc"
55 # Snow Leopard. Build for x86-64 and x86, with
56 # x86-64 first. (That's what Apple does.)
58 V_CCOPT="$V_CCOPT -arch x86_64 -arch i386"
59 LDFLAGS="$LDFLAGS -arch x86_64 -arch i386"
67 [AS_HELP_STRING([--with-smi],
68 [link with libsmi (allows to load MIBs on the fly to decode SNMP packets) [default=yes, if available]])],
72 if test "x$with_smi" != "xno" ; then
73 AC_CHECK_HEADER(smi.h,
76 # OK, we found smi.h. Do we have libsmi with smiInit?
78 AC_CHECK_LIB(smi, smiInit,
81 # OK, we have libsmi with smiInit. Can we use it?
83 AC_MSG_CHECKING([whether to enable libsmi])
86 AC_RUN_IFELSE([AC_LANG_SOURCE([[
87 /* libsmi available check */
94 int current, revision, age, n;
95 const int required = 2;
98 if (strcmp(SMI_LIBRARY_VERSION, smi_library_version))
100 n = sscanf(smi_library_version, "%d:%d:%d", ¤t, &revision, &age);
103 if (required < current - age || required > current)
111 AC_DEFINE(USE_LIBSMI, 1,
112 [Define if you enable support for libsmi])
115 dnl autoconf documentation says that
116 dnl $? contains the exit value.
117 dnl reality is that it does not.
118 dnl We leave this in just in case
119 dnl autoconf ever comes back to
120 dnl match the documentation.
122 1) AC_MSG_RESULT(no - smiInit failed) ;;
123 2) AC_MSG_RESULT(no - header/library version mismatch) ;;
124 3) AC_MSG_RESULT(no - can't determine library version) ;;
125 4) AC_MSG_RESULT(no - too old) ;;
126 *) AC_MSG_RESULT(no) ;;
131 AC_MSG_RESULT(not when cross-compiling)
139 AC_MSG_CHECKING([whether to enable the instrument functions code])
140 AC_ARG_ENABLE([instrument-functions],
141 [AS_HELP_STRING([--enable-instrument-functions],
142 [enable instrument functions code [default=no]])],
146 yes) AC_MSG_RESULT(yes)
147 AC_CHECK_LIB([bfd], [bfd_init],
150 [--enable-instrument-functions was given, but test for library libbfd failed. Please install the 'binutils-dev' package.])],
152 AC_DEFINE(ENABLE_INSTRUMENT_FUNCTIONS, 1,
153 [define if you want to build the instrument functions code])
154 LOCALSRC="$LOCALSRC instrument-functions.c"
155 # Add '-finstrument-functions' instrumentation option to generate
156 # instrumentation calls for entry and exit to functions.
157 # Try to avoid Address Space Layout Randomization (ALSR).
158 CFLAGS="$CFLAGS -O0 -ggdb -finstrument-functions -fno-stack-protector -fno-pic"
159 LDFLAGS="$LDFLAGS -O0 -ggdb -fno-stack-protector -no-pie"
166 AC_MSG_CHECKING([whether to enable the possibly-buggy SMB printer])
168 [AS_HELP_STRING([--enable-smb],
169 [enable possibly-buggy SMB printer [default=no]])],
173 yes) AC_MSG_RESULT(yes)
174 AC_DEFINE(ENABLE_SMB, 1,
175 [define if you want to build the possibly-buggy SMB printer])
176 LOCALSRC="print-smb.c smbutil.c $LOCALSRC"
182 AC_MSG_CHECKING([whether to drop root privileges by default])
185 [AS_HELP_STRING([--with-user=USERNAME],
186 [drop privileges by default to USERNAME]
190 AS_CASE(["$withval"],
191 [no], [AC_MSG_RESULT(no)],
192 [''|yes], [AC_MSG_ERROR([--with-user requires a username])],
194 AC_DEFINE_UNQUOTED(WITH_USER, "$withval",
195 [define if should drop privileges by default])
196 AC_MSG_RESULT([yes, to user "$withval"])
200 AC_MSG_CHECKING([whether to chroot])
203 [AS_HELP_STRING([--with-chroot=DIRECTORY],
204 [when dropping privileges, chroot to DIRECTORY]
209 AS_CASE(["$withval"],
210 [no], [AC_MSG_RESULT(no)],
211 [''|yes], [AC_MSG_ERROR([--with-chroot requires a directory])],
213 AC_DEFINE_UNQUOTED(WITH_CHROOT, "$withval",
214 [define if should chroot when dropping privileges])
215 AC_MSG_RESULT([yes, to directory "$withval"])
219 AC_ARG_WITH(sandbox-capsicum,
220 AS_HELP_STRING([--with-sandbox-capsicum],
221 [use Capsicum security functions @<:@default=yes, if available@:>@]))
223 # Check whether various functions are available. If any are, set
224 # ac_lbl_capsicum_function_seen to yes; if any are not, set
225 # ac_lbl_capsicum_function_not_seen to yes.
227 # We don't check cap_rights_init(), as it's a macro, wrapping another
228 # function, in at least some versions of FreeBSD, and AC_CHECK_FUNCS()
229 # doesn't handle that.
231 # All of the ones we check for must be available in order to enable
232 # capsicum sandboxing.
234 # XXX - do we need to check for all of them, or are there some that, if
235 # present, imply others are present?
237 if test -z "$with_sandbox_capsicum" || test "$with_sandbox_capsicum" != "no" ; then
239 # First, make sure we have the required header.
241 AC_CHECK_HEADER(sys/capsicum.h,
244 # We do; now make sure we have the required functions.
246 AC_CHECK_FUNCS(cap_enter cap_rights_limit cap_ioctls_limit openat,
247 ac_lbl_capsicum_function_seen=yes,
248 ac_lbl_capsicum_function_not_seen=yes)
250 AC_CHECK_LIB(casper, cap_init, LIBS="$LIBS -lcasper")
251 AC_CHECK_LIB(cap_dns, cap_gethostbyaddr, LIBS="$LIBS -lcap_dns")
253 AC_MSG_CHECKING([whether to sandbox using capsicum])
254 if test "x$ac_lbl_capsicum_function_seen" = "xyes" -a "x$ac_lbl_capsicum_function_not_seen" != "xyes"; then
255 AC_DEFINE(HAVE_CAPSICUM, 1, [capsicum support available])
260 AC_MSG_CHECKING([whether to sandbox using Casper library])
261 if test "x$ac_cv_lib_casper_cap_init" = "xyes" -a "x$ac_cv_lib_cap_dns_cap_gethostbyaddr" = "xyes"; then
262 AC_DEFINE(HAVE_CASPER, 1, [Casper support available])
269 # We must check this before checking whether to check the OS's IPv6,
270 # support because, on some platforms (such as SunOS 5.x), the test
271 # program requires the extra networking libraries.
275 AC_REPLACE_FUNCS(strlcat strlcpy strsep getservent getopt_long)
276 AC_CHECK_FUNCS(fork vfork)
277 AC_CHECK_FUNCS(setlinebuf)
280 # Make sure we have snprintf(); we require it.
282 AC_CHECK_FUNC(snprintf,,
283 AC_MSG_ERROR([snprintf() is required but wasn't found]))
286 # It became apparent at some point that using a suitable C99 compiler does not
287 # automatically mean snprintf(3) implementation in the libc supports all the
288 # modifiers and specifiers used in the project, so let's test that before the
291 # Testing the sizeof_t length modifier takes making an snprintf() call and
292 # comparing the actual result with the expected result. If this fails, it will
293 # most likely happen at run time, not compile time.
295 # Testing the 64-bit conversion specifiers in addition to that requires the
296 # <inttypes.h> header to be present and the macros to be defined, so if this
297 # fails, it will more likely happen at compile time.
299 AC_MSG_CHECKING([whether snprintf is suitable])
305 #include <inttypes.h>
306 #include <sys/types.h>
311 uint64_t t = (uint64_t)1 << 32;
313 snprintf(buf, sizeof(buf), "%zu", sizeof(buf));
314 if (strncmp(buf, "100", sizeof(buf)))
317 snprintf(buf, sizeof(buf), "%zd", -sizeof(buf));
318 if (strncmp(buf, "-100", sizeof(buf)))
321 snprintf(buf, sizeof(buf), "%" PRId64, -t);
322 if (strncmp(buf, "-4294967296", sizeof(buf)))
325 snprintf(buf, sizeof(buf), "0o%" PRIo64, t);
326 if (strncmp(buf, "0o40000000000", sizeof(buf)))
329 snprintf(buf, sizeof(buf), "0x%" PRIx64, t);
330 if (strncmp(buf, "0x100000000", sizeof(buf)))
333 snprintf(buf, sizeof(buf), "%" PRIu64, t);
334 if (strncmp(buf, "4294967296", sizeof(buf)))
347 [The snprintf(3) implementation in this libc is not suitable,
348 tcpdump would not work correctly even if it managed to compile.])
351 AC_MSG_RESULT(not while cross-compiling)
355 AC_CHECK_LIB(rpc, main) dnl It's unclear why we might need -lrpc
357 dnl Some platforms may need -lnsl for getrpcbynumber.
358 AC_SEARCH_LIBS(getrpcbynumber, nsl,
359 AC_DEFINE(HAVE_GETRPCBYNUMBER, 1, [define if you have getrpcbynumber()]))
361 AC_LBL_LIBPCAP(V_PCAPDEP, V_INCLS)
364 # Check for these after AC_LBL_LIBPCAP, so we link with the appropriate
365 # libraries (e.g., "-lsocket -lnsl" on Solaris).
367 # You are in a twisty little maze of UN*Xes, all different.
368 # Some might not have ether_ntohost().
369 # Some might have it and declare it in <net/ethernet.h>.
370 # Some might have it and declare it in <netinet/ether.h>
371 # Some might have it and declare it in <sys/ethernet.h>.
372 # Some might have it and declare it in <arpa/inet.h>.
373 # Some might have it and declare it in <netinet/if_ether.h>.
374 # Some might have it and not declare it in any header file.
376 # Before you is a C compiler.
378 AC_CHECK_FUNCS(ether_ntohost, [
379 AC_CACHE_CHECK(for buggy ether_ntohost, ac_cv_buggy_ether_ntohost, [
380 AC_RUN_IFELSE([AC_LANG_SOURCE([[
382 #include <netinet/ether.h>
384 #include <sys/types.h>
385 #include <sys/param.h>
386 #include <sys/socket.h>
389 main(int argc, char **argv)
391 u_char ea[6] = { 0xff, 0xff, 0xff, 0xff, 0xff };
392 char name[MAXHOSTNAMELEN];
394 ether_ntohost(name, (struct ether_addr *)ea);
398 ], [ac_cv_buggy_ether_ntohost=no],
399 [ac_cv_buggy_ether_ntohost=yes],
400 [ac_cv_buggy_ether_ntohost="not while cross-compiling"])])
401 if test "$ac_cv_buggy_ether_ntohost" = "no"; then
402 AC_DEFINE(USE_ETHER_NTOHOST, 1,
403 [define if you have ether_ntohost() and it works])
406 if test "$ac_cv_func_ether_ntohost" = yes -a \
407 "$ac_cv_buggy_ether_ntohost" = "no"; then
409 # OK, we have ether_ntohost(). Is it declared in <net/ethernet.h>?
411 # This test fails if we don't have <net/ethernet.h> or if we do
412 # but it doesn't declare ether_ntohost().
414 AC_CHECK_DECL(ether_ntohost,
416 AC_DEFINE(NET_ETHERNET_H_DECLARES_ETHER_NTOHOST,,
417 [Define to 1 if net/ethernet.h declares `ether_ntohost'])
420 #include <net/ethernet.h>
425 if test "$ac_cv_have_decl_ether_ntohost" != yes; then
427 # No, how about <netinet/ether.h>, as on Linux?
429 # This test fails if we don't have <netinet/ether.h>
430 # or if we do but it doesn't declare ether_ntohost().
432 # Unset ac_cv_have_decl_ether_ntohost so we don't
433 # treat the previous failure as a cached value and
434 # suppress the next test.
436 unset ac_cv_have_decl_ether_ntohost
437 AC_CHECK_DECL(ether_ntohost,
439 AC_DEFINE(NETINET_ETHER_H_DECLARES_ETHER_NTOHOST,,
440 [Define to 1 if netinet/ether.h declares `ether_ntohost'])
443 #include <netinet/ether.h>
449 if test "$ac_cv_have_decl_ether_ntohost" != yes; then
451 # No, how about <sys/ethernet.h>, as on Solaris 10
454 # This test fails if we don't have <sys/ethernet.h>
455 # or if we do but it doesn't declare ether_ntohost().
457 # Unset ac_cv_have_decl_ether_ntohost so we don't
458 # treat the previous failure as a cached value and
459 # suppress the next test.
461 unset ac_cv_have_decl_ether_ntohost
462 AC_CHECK_DECL(ether_ntohost,
464 AC_DEFINE(SYS_ETHERNET_H_DECLARES_ETHER_NTOHOST,,
465 [Define to 1 if sys/ethernet.h declares `ether_ntohost'])
468 #include <sys/ethernet.h>
474 if test "$ac_cv_have_decl_ether_ntohost" != yes; then
476 # No, how about <arpa/inet.h>, as in AIX?
478 # This test fails if we don't have <arpa/inet.h>
479 # (if we have ether_ntohost(), we should have
480 # networking, and if we have networking, we should
481 # have <arpa/inet.h>) or if we do but it doesn't
482 # declare ether_ntohost().
484 # Unset ac_cv_have_decl_ether_ntohost so we don't
485 # treat the previous failure as a cached value and
486 # suppress the next test.
488 unset ac_cv_have_decl_ether_ntohost
489 AC_CHECK_DECL(ether_ntohost,
491 AC_DEFINE(ARPA_INET_H_DECLARES_ETHER_NTOHOST,,
492 [Define to 1 if arpa/inet.h declares `ether_ntohost'])
495 #include <arpa/inet.h>
501 if test "$ac_cv_have_decl_ether_ntohost" != yes; then
503 # No, how about <netinet/if_ether.h>?
504 # On some platforms, it requires <net/if.h> and
505 # <netinet/in.h>, and we always include it with
506 # both of them, so test it with both of them.
508 # This test fails if we don't have <netinet/if_ether.h>
509 # and the headers we include before it, or if we do but
510 # <netinet/if_ether.h> doesn't declare ether_hostton().
512 # Unset ac_cv_have_decl_ether_ntohost so we don't
513 # treat the previous failure as a cached value and
514 # suppress the next test.
516 unset ac_cv_have_decl_ether_ntohost
517 AC_CHECK_DECL(ether_ntohost,
519 AC_DEFINE(NETINET_IF_ETHER_H_DECLARES_ETHER_NTOHOST,,
520 [Define to 1 if netinet/if_ether.h declares `ether_ntohost'])
523 #include <sys/types.h>
524 #include <sys/socket.h>
526 #include <netinet/in.h>
527 #include <netinet/if_ether.h>
531 # After all that, is ether_ntohost() declared?
533 if test "$ac_cv_have_decl_ether_ntohost" = yes; then
537 AC_DEFINE(HAVE_DECL_ETHER_NTOHOST, 1,
538 [Define to 1 if you have the declaration of `ether_ntohost'])
541 # No, we'll have to declare it ourselves.
542 # Do we have "struct ether_addr" if we include
543 # <netinet/if_ether.h>?
545 AC_CHECK_TYPES(struct ether_addr,,,
547 #include <sys/types.h>
548 #include <sys/socket.h>
550 #include <netinet/in.h>
551 #include <netinet/if_ether.h>
557 dnl Check for "pcap_list_datalinks()" and use a substitute version if
558 dnl it's not present. If it is present, check for "pcap_free_datalinks()";
559 dnl if it's not present, we don't replace it for now. (We could do so
560 dnl on UN*X, but not on Windows, where hilarity ensues if a program
561 dnl built with one version of the MSVC support library tries to free
562 dnl something allocated by a library built with another version of
563 dnl the MSVC support library.)
565 AC_CHECK_FUNC(pcap_list_datalinks,
567 AC_DEFINE(HAVE_PCAP_LIST_DATALINKS, 1,
568 [define if libpcap has pcap_list_datalinks()])
569 AC_CHECK_FUNCS(pcap_free_datalinks)
576 dnl Check for "pcap_datalink_name_to_val()", and use a substitute
577 dnl version if it's not present. If it is present, check for
578 dnl "pcap_datalink_val_to_description()", and if we don't have it,
579 dnl use a substitute version.
581 AC_CHECK_FUNC(pcap_datalink_name_to_val,
583 AC_DEFINE(HAVE_PCAP_DATALINK_NAME_TO_VAL, 1,
584 [define if libpcap has pcap_datalink_name_to_val()])
585 AC_CHECK_FUNC(pcap_datalink_val_to_description,
586 AC_DEFINE(HAVE_PCAP_DATALINK_VAL_TO_DESCRIPTION, 1,
587 [define if libpcap has pcap_datalink_val_to_description()]),
597 dnl Check for "pcap_set_datalink()"; you can't substitute for it if
598 dnl it's absent (it has hooks into libpcap), so just define the
599 dnl HAVE_ value if it's there.
601 AC_CHECK_FUNCS(pcap_set_datalink)
604 dnl Check for "pcap_breakloop()"; you can't substitute for it if
605 dnl it's absent (it has hooks into the live capture routines),
606 dnl so just define the HAVE_ value if it's there.
608 AC_CHECK_FUNCS(pcap_breakloop)
611 # Do we have the new open API? Check for pcap_create, and assume that,
612 # if we do, we also have pcap_activate() and the other new routines
613 # introduced in libpcap 1.0.0.
615 AC_CHECK_FUNCS(pcap_create)
616 if test $ac_cv_func_pcap_create = "yes" ; then
618 # OK, do we have pcap_set_tstamp_type? If so, assume we have
619 # pcap_list_tstamp_types and pcap_free_tstamp_types as well.
621 AC_CHECK_FUNCS(pcap_set_tstamp_type)
623 # And do we have pcap_set_tstamp_precision? If so, we assume
624 # we also have pcap_open_offline_with_tstamp_precision.
626 AC_CHECK_FUNCS(pcap_set_tstamp_precision)
630 # Check for a miscellaneous collection of functions which we use
633 AC_CHECK_FUNCS(pcap_findalldevs)
634 AC_CHECK_FUNCS(pcap_dump_flush pcap_lib_version)
635 if test $ac_cv_func_pcap_lib_version = "no" ; then
636 AC_MSG_CHECKING(whether pcap_version is defined by libpcap)
637 AC_LINK_IFELSE([AC_LANG_PROGRAM([[]], [[
638 extern char pcap_version[];
640 return (int)pcap_version;
643 [ac_lbl_cv_pcap_version_defined=yes],
644 [ac_lbl_cv_pcap_version_defined=no])
645 if test "$ac_lbl_cv_pcap_version_defined" = yes ; then
647 AC_DEFINE(HAVE_PCAP_VERSION, 1, [define if libpcap has pcap_version])
652 AC_CHECK_FUNCS(pcap_setdirection pcap_set_immediate_mode pcap_dump_ftell64)
653 AC_CHECK_FUNCS(pcap_open pcap_findalldevs_ex)
654 AC_REPLACE_FUNCS(pcap_dump_ftell)
657 # Check for special debugging functions
659 AC_CHECK_FUNCS(pcap_set_parser_debug)
660 if test "$ac_cv_func_pcap_set_parser_debug" = "no" ; then
662 # OK, we don't have pcap_set_parser_debug() to set the libpcap
663 # filter expression parser debug flag; can we directly set the
665 AC_MSG_CHECKING(whether pcap_debug is defined by libpcap)
666 AC_LINK_IFELSE([AC_LANG_PROGRAM([[]], [[
667 extern int pcap_debug;
672 [ac_lbl_cv_pcap_debug_defined=yes],
673 [ac_lbl_cv_pcap_debug_defined=no])
674 if test "$ac_lbl_cv_pcap_debug_defined" = yes ; then
676 AC_DEFINE(HAVE_PCAP_DEBUG, 1, [define if libpcap has pcap_debug])
680 # OK, what about "yydebug"?
682 AC_MSG_CHECKING(whether yydebug is defined by libpcap)
683 AC_LINK_IFELSE([AC_LANG_PROGRAM([[]], [[
689 [ac_lbl_cv_yydebug_defined=yes],
690 [ac_lbl_cv_yydebug_defined=no])
691 if test "$ac_lbl_cv_yydebug_defined" = yes ; then
693 AC_DEFINE(HAVE_YYDEBUG, 1, [define if libpcap has yydebug])
699 AC_CHECK_FUNCS(pcap_set_optimizer_debug)
700 AC_REPLACE_FUNCS(bpf_dump) dnl moved to libpcap in 0.6
703 if test -f /etc/group -a ! -z "`grep '^wheel:' /etc/group`" ; then
707 # Assume V7/BSD convention for man pages (file formats in section 5,
708 # miscellaneous info in section 7).
715 dnl Workaround to enable certain features
716 AC_DEFINE(_SUN,1,[define on AIX to get certain functions])
721 # Use System V conventions for man pages.
731 # Use System V conventions for man pages.
741 # Use System V conventions for man pages.
751 # Use System V conventions for man pages.
758 if test -f /dev/bpf0 ; then
763 # Make sure we have a definition for C99's uintptr_t (regardless of
764 # whether the environment is a C99 environment or not).
768 savedcppflags="$CPPFLAGS"
769 CPPFLAGS="$CPPFLAGS $V_INCLS"
772 # Check whether we have pcap/pcap-inttypes.h.
773 # If we do, we use that to get the C99 types defined.
775 AC_CHECK_HEADERS(pcap/pcap-inttypes.h)
778 # At compile time HAVE_PCAP_FINDALLDEVS depends on HAVE_PCAP_IF_T.
780 AC_CHECK_TYPES(pcap_if_t, , , [#include <pcap.h>])
782 CPPFLAGS="$savedcppflags"
785 # Define the old BSD specified-width types in terms of the C99 types;
786 # we may need them with libpcap include files.
788 AC_CHECK_TYPE([u_int8_t], ,
789 [AC_DEFINE([u_int8_t], [uint8_t],
790 [Define to `uint8_t' if u_int8_t not defined.])],
792 #include <sys/types.h>
794 AC_CHECK_TYPE([u_int16_t], ,
795 [AC_DEFINE([u_int16_t], [uint16_t],
796 [Define to `uint16_t' if u_int16_t not defined.])],
798 #include <sys/types.h>
800 AC_CHECK_TYPE([u_int32_t], ,
801 [AC_DEFINE([u_int32_t], [uint32_t],
802 [Define to `uint32_t' if u_int32_t not defined.])],
804 #include <sys/types.h>
806 AC_CHECK_TYPE([u_int64_t], ,
807 [AC_DEFINE([u_int64_t], [uint64_t],
808 [Define to `uint64_t' if u_int64_t not defined.])],
810 #include <sys/types.h>
814 AC_CHECK_TOOL([AR], [ar])
816 AC_LBL_DEVEL(V_CCOPT)
818 # Check for OpenSSL/libressl libcrypto
819 AC_MSG_CHECKING(whether to use OpenSSL/libressl libcrypto)
820 # Specify location for both includes and libraries.
821 want_libcrypto=ifavailable
823 AS_HELP_STRING([--with-crypto]@<:@=DIR@:>@,
824 [use OpenSSL/libressl libcrypto (located in directory DIR, if specified) @<:@default=yes, if available@:>@]),
826 if test $withval = no
828 # User doesn't want to link with libcrypto.
831 elif test $withval = yes
833 # User wants to link with libcrypto but hasn't specified
838 # User wants to link with libcrypto and has specified
839 # a directory, so use the provided value.
841 libcrypto_root=$withval
842 AC_MSG_RESULT([yes, using the version installed in $withval])
845 # Put the subdirectories of the libcrypto root directory
846 # at the front of the header and library search path.
848 CFLAGS="-I$withval/include $CFLAGS"
849 LIBS="-L$withval/lib $LIBS"
853 # Use libcrypto if it's present, otherwise don't; no directory
856 want_libcrypto=ifavailable
857 AC_MSG_RESULT([yes, if available])
859 if test "$want_libcrypto" != "no"; then
861 # Don't check for libcrypto unless we have its headers;
862 # Apple, bless their pointy little heads, apparently ship
863 # libcrypto as a library, but not the header files, in
864 # El Capitan, probably because they don't want you writing
865 # nasty portable code that could run on other UN*Xes, they
866 # want you writing code that uses their Shiny New Crypto
867 # Library and that only runs on macOS.
869 AC_CHECK_HEADER(openssl/crypto.h,
871 AC_CHECK_LIB(crypto, DES_cbc_encrypt)
872 if test "$ac_cv_lib_crypto_DES_cbc_encrypt" = "yes"; then
873 AC_CHECK_HEADERS(openssl/evp.h)
877 # 1) do we have EVP_CIPHER_CTX_new?
878 # If so, we use it to allocate an
879 # EVP_CIPHER_CTX, as EVP_CIPHER_CTX may be
880 # opaque; otherwise, we allocate it ourselves.
882 # 2) do we have EVP_DecryptInit_ex()?
883 # If so, we use it, because we need to be
884 # able to make two "initialize the cipher"
885 # calls, one with the cipher and key, and
886 # one with the IV, and, as of OpenSSL 1.1,
887 # You Can't Do That with EVP_DecryptInit(),
888 # because a call to EVP_DecryptInit() will
889 # unconditionally clear the context, and
890 # if you don't supply a cipher, it'll
891 # clear the cipher, rendering the context
892 # unusable and causing a crash.
894 AC_CHECK_FUNCS(EVP_CIPHER_CTX_new EVP_DecryptInit_ex)
899 # Check for libcap-ng
900 AC_MSG_CHECKING(whether to use libcap-ng)
901 # Specify location for both includes and libraries.
902 want_libcap_ng=ifavailable
904 AS_HELP_STRING([--with-cap-ng],
905 [use libcap-ng @<:@default=yes, if available@:>@]),
907 if test $withval = no
911 elif test $withval = yes
918 # Use libcap-ng if it's present, otherwise don't.
920 want_libcap_ng=ifavailable
921 AC_MSG_RESULT([yes, if available])
923 if test "$want_libcap_ng" != "no"; then
924 AC_CHECK_LIB(cap-ng, capng_change_id)
925 AC_CHECK_HEADERS(cap-ng.h)
929 dnl set additional include path if necessary
930 if test "$missing_includes" = "yes"; then
931 CPPFLAGS="$CPPFLAGS -I$srcdir/missing"
932 V_INCLS="$V_INCLS -I$srcdir/missing"
941 AC_SUBST(MAN_FILE_FORMATS)
942 AC_SUBST(MAN_MISC_INFO)
946 AC_CONFIG_HEADERS([config.h])
948 AC_CONFIG_COMMANDS([.devel],[[if test -f .devel; then
949 echo timestamp > stamp-h
950 cat $srcdir/Makefile-devel-adds >> Makefile
951 make depend || exit 1
953 AC_CONFIG_FILES([Makefile tcpdump.1])