1 dnl Copyright (c) 1994, 1995, 1996, 1997
2 dnl The Regents of the University of California. All rights reserved.
4 dnl Process this file with autoconf to produce a configure script.
10 # https://ftp.gnu.org/gnu/config/README
12 # for the URLs to use to fetch new versions of config.guess and
17 AC_INIT([tcpdump],[m4_esyscmd_s(cat VERSION)])
18 AC_CONFIG_SRCDIR(tcpdump.c)
22 AC_LBL_C_INIT_BEFORE_CC(V_INCLS)
24 # Try to enable as many C99 features as we can.
25 # At minimum, we want C++/C99-style // comments.
28 if test "$ac_cv_prog_cc_c99" = "no"; then
29 AC_MSG_WARN([The C compiler does not support C99; there may be compiler errors])
31 AC_LBL_C_INIT(V_CCOPT, V_INCLS)
34 AC_CHECK_HEADERS(fcntl.h rpc/rpc.h rpc/rpcent.h net/if.h)
39 AC_ARG_ENABLE(universal,
40 AS_HELP_STRING([--disable-universal],[don't build universal on macOS]))
41 if test "$enable_universal" != "no"; then
46 # Leopard. Build for x86 and 32-bit PowerPC, with
47 # x86 first. (That's what Apple does.)
49 V_CCOPT="$V_CCOPT -arch i386 -arch ppc"
50 LDFLAGS="$LDFLAGS -arch i386 -arch ppc"
55 # Snow Leopard. Build for x86-64 and x86, with
56 # x86-64 first. (That's what Apple does.)
58 V_CCOPT="$V_CCOPT -arch x86_64 -arch i386"
59 LDFLAGS="$LDFLAGS -arch x86_64 -arch i386"
67 [AS_HELP_STRING([--with-smi],
68 [link with libsmi (allows to load MIBs on the fly to decode SNMP packets) [default=yes, if available]])],
72 if test "x$with_smi" != "xno" ; then
73 AC_CHECK_HEADER(smi.h,
76 # OK, we found smi.h. Do we have libsmi with smiInit?
78 AC_CHECK_LIB(smi, smiInit,
81 # OK, we have libsmi with smiInit. Can we use it?
83 AC_MSG_CHECKING([whether to enable libsmi])
86 AC_RUN_IFELSE([AC_LANG_SOURCE([[
87 /* libsmi available check */
94 int current, revision, age, n;
95 const int required = 2;
98 if (strcmp(SMI_LIBRARY_VERSION, smi_library_version))
100 n = sscanf(smi_library_version, "%d:%d:%d", ¤t, &revision, &age);
103 if (required < current - age || required > current)
111 AC_DEFINE(USE_LIBSMI, 1,
112 [Define if you enable support for libsmi])
115 dnl autoconf documentation says that
116 dnl $? contains the exit value.
117 dnl reality is that it does not.
118 dnl We leave this in just in case
119 dnl autoconf ever comes back to
120 dnl match the documentation.
122 1) AC_MSG_RESULT(no - smiInit failed) ;;
123 2) AC_MSG_RESULT(no - header/library version mismatch) ;;
124 3) AC_MSG_RESULT(no - can't determine library version) ;;
125 4) AC_MSG_RESULT(no - too old) ;;
126 *) AC_MSG_RESULT(no) ;;
131 AC_MSG_RESULT(not when cross-compiling)
139 AC_MSG_CHECKING([whether to enable the instrument functions code])
140 AC_ARG_ENABLE([instrument-functions],
141 [AS_HELP_STRING([--enable-instrument-functions],
142 [enable instrument functions code [default=no]])],
146 yes) AC_MSG_RESULT(yes)
147 AC_CHECK_LIB([bfd], [bfd_init],
150 [--enable-instrument-functions was given, but test for library libbfd failed. Please install the 'binutils-dev' package.])],
152 AC_DEFINE(ENABLE_INSTRUMENT_FUNCTIONS, 1,
153 [define if you want to build the instrument functions code])
154 LOCALSRC="$LOCALSRC instrument-functions.c"
155 # Add '-finstrument-functions' instrumentation option to generate
156 # instrumentation calls for entry and exit to functions.
157 # Try to avoid Address Space Layout Randomization (ALSR).
158 CFLAGS="$CFLAGS -O0 -ggdb -finstrument-functions -fno-stack-protector -fno-pic"
159 LDFLAGS="$LDFLAGS -O0 -ggdb -fno-stack-protector -no-pie"
166 AC_MSG_CHECKING([whether to enable the possibly-buggy SMB printer])
168 [AS_HELP_STRING([--enable-smb],
169 [enable possibly-buggy SMB printer [default=no]])],
173 yes) AC_MSG_RESULT(yes)
174 AC_DEFINE(ENABLE_SMB, 1,
175 [define if you want to build the possibly-buggy SMB printer])
176 LOCALSRC="print-smb.c smbutil.c $LOCALSRC"
182 AC_MSG_CHECKING([whether to drop root privileges by default])
185 [AS_HELP_STRING([--with-user=USERNAME],
186 [drop privileges by default to USERNAME]
190 AS_CASE(["$withval"],
191 [no], [AC_MSG_RESULT(no)],
192 [''|yes], [AC_MSG_ERROR([--with-user requires a username])],
194 AC_DEFINE_UNQUOTED(WITH_USER, "$withval",
195 [define if should drop privileges by default])
196 AC_MSG_RESULT([yes, to user "$withval"])
200 AC_MSG_CHECKING([whether to chroot])
203 [AS_HELP_STRING([--with-chroot=DIRECTORY],
204 [when dropping privileges, chroot to DIRECTORY]
209 AS_CASE(["$withval"],
210 [no], [AC_MSG_RESULT(no)],
211 [''|yes], [AC_MSG_ERROR([--with-chroot requires a directory])],
213 AC_DEFINE_UNQUOTED(WITH_CHROOT, "$withval",
214 [define if should chroot when dropping privileges])
215 AC_MSG_RESULT([yes, to directory "$withval"])
219 AC_ARG_WITH(sandbox-capsicum,
220 AS_HELP_STRING([--with-sandbox-capsicum],
221 [use Capsicum security functions @<:@default=yes, if available@:>@]))
223 # Check whether various functions are available. If any are, set
224 # ac_lbl_capsicum_function_seen to yes; if any are not, set
225 # ac_lbl_capsicum_function_not_seen to yes.
227 # We don't check cap_rights_init(), as it's a macro, wrapping another
228 # function, in at least some versions of FreeBSD, and AC_CHECK_FUNCS()
229 # doesn't handle that.
231 # All of the ones we check for must be available in order to enable
232 # capsicum sandboxing.
234 # XXX - do we need to check for all of them, or are there some that, if
235 # present, imply others are present?
237 if test -z "$with_sandbox_capsicum" || test "$with_sandbox_capsicum" != "no" ; then
239 # First, make sure we have the required header.
241 AC_CHECK_HEADER(sys/capsicum.h,
244 # We do; now make sure we have the required functions.
246 AC_CHECK_FUNCS(cap_enter cap_rights_limit cap_ioctls_limit openat,
247 ac_lbl_capsicum_function_seen=yes,
248 ac_lbl_capsicum_function_not_seen=yes)
250 AC_CHECK_LIB(casper, cap_init, LIBS="$LIBS -lcasper")
251 AC_CHECK_LIB(cap_dns, cap_gethostbyaddr, LIBS="$LIBS -lcap_dns")
253 AC_MSG_CHECKING([whether to sandbox using capsicum])
254 if test "x$ac_lbl_capsicum_function_seen" = "xyes" -a "x$ac_lbl_capsicum_function_not_seen" != "xyes"; then
255 AC_DEFINE(HAVE_CAPSICUM, 1, [capsicum support available])
260 AC_MSG_CHECKING([whether to sandbox using Casper library])
261 if test "x$ac_cv_lib_casper_cap_init" = "xyes" -a "x$ac_cv_lib_cap_dns_cap_gethostbyaddr" = "xyes"; then
262 AC_DEFINE(HAVE_CASPER, 1, [Casper support available])
269 # We must check this before checking whether to check the OS's IPv6,
270 # support because, on some platforms (such as SunOS 5.x), the test
271 # program requires the extra networking libraries.
275 AC_REPLACE_FUNCS(strlcat strlcpy strsep getservent getopt_long)
276 AC_CHECK_FUNCS(fork vfork)
277 AC_CHECK_FUNCS(setlinebuf)
280 # Make sure we have snprintf(); we require it.
282 AC_CHECK_FUNC(snprintf,,
283 AC_MSG_ERROR([snprintf() is required but wasn't found]))
286 # It became apparent at some point that using a suitable C99 compiler does not
287 # automatically mean snprintf(3) implementation in the libc supports all the
288 # modifiers and specifiers used in the project, so let's test that before the
291 # Testing the sizeof_t length modifier takes making an snprintf() call and
292 # comparing the actual result with the expected result. If this fails, it will
293 # most likely happen at run time, not compile time.
295 # Testing the 64-bit conversion specifiers in addition to that requires the
296 # <inttypes.h> header to be present and the macros to be defined, so if this
297 # fails, it will more likely happen at compile time.
299 AC_MSG_CHECKING([whether snprintf is suitable])
305 #include <inttypes.h>
306 #include <sys/types.h>
311 uint64_t t = (uint64_t)1 << 32;
313 snprintf(buf, sizeof(buf), "%zu", sizeof(buf));
314 if (strncmp(buf, "100", sizeof(buf)))
317 snprintf(buf, sizeof(buf), "%zd", -sizeof(buf));
318 if (strncmp(buf, "-100", sizeof(buf)))
321 snprintf(buf, sizeof(buf), "%" PRId64, -t);
322 if (strncmp(buf, "-4294967296", sizeof(buf)))
325 snprintf(buf, sizeof(buf), "0o%" PRIo64, t);
326 if (strncmp(buf, "0o40000000000", sizeof(buf)))
329 snprintf(buf, sizeof(buf), "0x%" PRIx64, t);
330 if (strncmp(buf, "0x100000000", sizeof(buf)))
333 snprintf(buf, sizeof(buf), "%" PRIu64, t);
334 if (strncmp(buf, "4294967296", sizeof(buf)))
347 [The snprintf(3) implementation in this libc is not suitable,
348 tcpdump would not work correctly even if it managed to compile.])
351 AC_MSG_RESULT(not while cross-compiling)
355 AC_CHECK_LIB(rpc, main) dnl It's unclear why we might need -lrpc
357 dnl Some platforms may need -lnsl for getrpcbynumber.
358 AC_SEARCH_LIBS(getrpcbynumber, nsl,
359 AC_DEFINE(HAVE_GETRPCBYNUMBER, 1, [define if you have getrpcbynumber()]))
361 AC_LBL_LIBPCAP(V_PCAPDEP, V_INCLS)
364 # Check for these after AC_LBL_LIBPCAP, so we link with the appropriate
365 # libraries (e.g., "-lsocket -lnsl" on Solaris).
367 # You are in a twisty little maze of UN*Xes, all different.
368 # Some might not have ether_ntohost().
369 # Some might have it and declare it in <net/ethernet.h>.
370 # Some might have it and declare it in <netinet/ether.h>
371 # Some might have it and declare it in <sys/ethernet.h>.
372 # Some might have it and declare it in <arpa/inet.h>.
373 # Some might have it and declare it in <netinet/if_ether.h>.
374 # Some might have it and not declare it in any header file.
376 # Before you is a C compiler.
378 AC_CHECK_FUNCS(ether_ntohost, [
379 AC_CACHE_CHECK(for buggy ether_ntohost, ac_cv_buggy_ether_ntohost, [
380 AC_RUN_IFELSE([AC_LANG_SOURCE([[
382 #include <netinet/ether.h>
384 #include <sys/types.h>
385 #include <sys/param.h>
386 #include <sys/socket.h>
389 main(int argc, char **argv)
391 u_char ea[6] = { 0xff, 0xff, 0xff, 0xff, 0xff };
392 char name[MAXHOSTNAMELEN];
394 ether_ntohost(name, (struct ether_addr *)ea);
398 ], [ac_cv_buggy_ether_ntohost=no],
399 [ac_cv_buggy_ether_ntohost=yes],
400 [ac_cv_buggy_ether_ntohost="not while cross-compiling"])])
401 if test "$ac_cv_buggy_ether_ntohost" = "no"; then
402 AC_DEFINE(USE_ETHER_NTOHOST, 1,
403 [define if you have ether_ntohost() and it works])
406 if test "$ac_cv_func_ether_ntohost" = yes -a \
407 "$ac_cv_buggy_ether_ntohost" = "no"; then
409 # OK, we have ether_ntohost(). Is it declared in <net/ethernet.h>?
411 # This test fails if we don't have <net/ethernet.h> or if we do
412 # but it doesn't declare ether_ntohost().
414 AC_CHECK_DECL(ether_ntohost,
416 AC_DEFINE(NET_ETHERNET_H_DECLARES_ETHER_NTOHOST,,
417 [Define to 1 if net/ethernet.h declares `ether_ntohost'])
420 #include <net/ethernet.h>
425 if test "$ac_cv_have_decl_ether_ntohost" != yes; then
427 # No, how about <netinet/ether.h>, as on Linux?
429 # This test fails if we don't have <netinet/ether.h>
430 # or if we do but it doesn't declare ether_ntohost().
432 # Unset ac_cv_have_decl_ether_ntohost so we don't
433 # treat the previous failure as a cached value and
434 # suppress the next test.
436 unset ac_cv_have_decl_ether_ntohost
437 AC_CHECK_DECL(ether_ntohost,
439 AC_DEFINE(NETINET_ETHER_H_DECLARES_ETHER_NTOHOST,,
440 [Define to 1 if netinet/ether.h declares `ether_ntohost'])
443 #include <netinet/ether.h>
449 if test "$ac_cv_have_decl_ether_ntohost" != yes; then
451 # No, how about <sys/ethernet.h>, as on Solaris 10
454 # This test fails if we don't have <sys/ethernet.h>
455 # or if we do but it doesn't declare ether_ntohost().
457 # Unset ac_cv_have_decl_ether_ntohost so we don't
458 # treat the previous failure as a cached value and
459 # suppress the next test.
461 unset ac_cv_have_decl_ether_ntohost
462 AC_CHECK_DECL(ether_ntohost,
464 AC_DEFINE(SYS_ETHERNET_H_DECLARES_ETHER_NTOHOST,,
465 [Define to 1 if sys/ethernet.h declares `ether_ntohost'])
468 #include <sys/ethernet.h>
474 if test "$ac_cv_have_decl_ether_ntohost" != yes; then
476 # No, how about <arpa/inet.h>, as in AIX?
478 # This test fails if we don't have <arpa/inet.h>
479 # (if we have ether_ntohost(), we should have
480 # networking, and if we have networking, we should
481 # have <arpa/inet.h>) or if we do but it doesn't
482 # declare ether_ntohost().
484 # Unset ac_cv_have_decl_ether_ntohost so we don't
485 # treat the previous failure as a cached value and
486 # suppress the next test.
488 unset ac_cv_have_decl_ether_ntohost
489 AC_CHECK_DECL(ether_ntohost,
491 AC_DEFINE(ARPA_INET_H_DECLARES_ETHER_NTOHOST,,
492 [Define to 1 if arpa/inet.h declares `ether_ntohost'])
495 #include <arpa/inet.h>
501 if test "$ac_cv_have_decl_ether_ntohost" != yes; then
503 # No, how about <netinet/if_ether.h>?
504 # On some platforms, it requires <net/if.h> and
505 # <netinet/in.h>, and we always include it with
506 # both of them, so test it with both of them.
508 # This test fails if we don't have <netinet/if_ether.h>
509 # and the headers we include before it, or if we do but
510 # <netinet/if_ether.h> doesn't declare ether_hostton().
512 # Unset ac_cv_have_decl_ether_ntohost so we don't
513 # treat the previous failure as a cached value and
514 # suppress the next test.
516 unset ac_cv_have_decl_ether_ntohost
517 AC_CHECK_DECL(ether_ntohost,
519 AC_DEFINE(NETINET_IF_ETHER_H_DECLARES_ETHER_NTOHOST,,
520 [Define to 1 if netinet/if_ether.h declares `ether_ntohost'])
523 #include <sys/types.h>
524 #include <sys/socket.h>
526 #include <netinet/in.h>
527 #include <netinet/if_ether.h>
531 # After all that, is ether_ntohost() declared?
533 if test "$ac_cv_have_decl_ether_ntohost" = yes; then
537 AC_DEFINE(HAVE_DECL_ETHER_NTOHOST, 1,
538 [Define to 1 if you have the declaration of `ether_ntohost'])
541 # No, we'll have to declare it ourselves.
542 # Do we have "struct ether_addr" if we include
543 # <netinet/if_ether.h>?
545 AC_CHECK_TYPES(struct ether_addr,,,
547 #include <sys/types.h>
548 #include <sys/socket.h>
550 #include <netinet/in.h>
551 #include <netinet/if_ether.h>
557 dnl Check for "pcap_list_datalinks()" and use a substitute version if
558 dnl it's not present. If it is present, check for "pcap_free_datalinks()";
559 dnl if it's not present, we don't replace it for now. (We could do so
560 dnl on UN*X, but not on Windows, where hilarity ensues if a program
561 dnl built with one version of the MSVC support library tries to free
562 dnl something allocated by a library built with another version of
563 dnl the MSVC support library.)
565 AC_CHECK_FUNC(pcap_list_datalinks,
567 AC_DEFINE(HAVE_PCAP_LIST_DATALINKS, 1,
568 [define if libpcap has pcap_list_datalinks()])
569 AC_CHECK_FUNCS(pcap_free_datalinks)
576 dnl Check for "pcap_datalink_name_to_val()", and use a substitute
577 dnl version if it's not present. If it is present, check for
578 dnl "pcap_datalink_val_to_description()", and if we don't have it,
579 dnl use a substitute version.
581 AC_CHECK_FUNC(pcap_datalink_name_to_val,
583 AC_DEFINE(HAVE_PCAP_DATALINK_NAME_TO_VAL, 1,
584 [define if libpcap has pcap_datalink_name_to_val()])
585 AC_CHECK_FUNC(pcap_datalink_val_to_description,
586 AC_DEFINE(HAVE_PCAP_DATALINK_VAL_TO_DESCRIPTION, 1,
587 [define if libpcap has pcap_datalink_val_to_description()]),
597 dnl Check for "pcap_set_datalink()"; you can't substitute for it if
598 dnl it's absent (it has hooks into libpcap), so just define the
599 dnl HAVE_ value if it's there.
601 AC_CHECK_FUNCS(pcap_set_datalink)
604 dnl Check for "pcap_breakloop()"; you can't substitute for it if
605 dnl it's absent (it has hooks into the live capture routines),
606 dnl so just define the HAVE_ value if it's there.
608 AC_CHECK_FUNCS(pcap_breakloop)
611 # Do we have the new open API? Check for pcap_create, and assume that,
612 # if we do, we also have pcap_activate() and the other new routines
613 # introduced in libpcap 1.0.0.
615 AC_CHECK_FUNCS(pcap_create)
616 if test $ac_cv_func_pcap_create = "yes" ; then
618 # OK, do we have pcap_set_tstamp_type? If so, assume we have
619 # pcap_list_tstamp_types and pcap_free_tstamp_types as well.
621 AC_CHECK_FUNCS(pcap_set_tstamp_type)
623 # And do we have pcap_set_tstamp_precision? If so, we assume
624 # we also have pcap_open_offline_with_tstamp_precision.
626 AC_CHECK_FUNCS(pcap_set_tstamp_precision)
630 # Check for a miscellaneous collection of functions which we use
633 AC_CHECK_FUNCS(pcap_findalldevs)
634 AC_CHECK_FUNCS(pcap_dump_flush pcap_lib_version)
635 if test $ac_cv_func_pcap_lib_version = "no" ; then
636 AC_MSG_CHECKING(whether pcap_version is defined by libpcap)
637 AC_LINK_IFELSE([AC_LANG_PROGRAM([[]], [[
638 extern char pcap_version[];
640 return (int)pcap_version;
643 [ac_lbl_cv_pcap_version_defined=yes],
644 [ac_lbl_cv_pcap_version_defined=no])
645 if test "$ac_lbl_cv_pcap_version_defined" = yes ; then
647 AC_DEFINE(HAVE_PCAP_VERSION, 1, [define if libpcap has pcap_version])
652 AC_CHECK_FUNCS(pcap_setdirection pcap_set_immediate_mode pcap_dump_ftell64)
653 AC_CHECK_FUNCS(pcap_open pcap_findalldevs_ex)
654 AC_REPLACE_FUNCS(pcap_dump_ftell)
657 # Check for special debugging functions
659 AC_CHECK_FUNCS(pcap_set_parser_debug)
660 if test "$ac_cv_func_pcap_set_parser_debug" = "no" ; then
662 # OK, we don't have pcap_set_parser_debug() to set the libpcap
663 # filter expression parser debug flag; can we directly set the
665 AC_MSG_CHECKING(whether pcap_debug is defined by libpcap)
666 AC_LINK_IFELSE([AC_LANG_PROGRAM([[]], [[
667 extern int pcap_debug;
672 [ac_lbl_cv_pcap_debug_defined=yes],
673 [ac_lbl_cv_pcap_debug_defined=no])
674 if test "$ac_lbl_cv_pcap_debug_defined" = yes ; then
676 AC_DEFINE(HAVE_PCAP_DEBUG, 1, [define if libpcap has pcap_debug])
680 # OK, what about "yydebug"?
682 AC_MSG_CHECKING(whether yydebug is defined by libpcap)
683 AC_LINK_IFELSE([AC_LANG_PROGRAM([[]], [[
689 [ac_lbl_cv_yydebug_defined=yes],
690 [ac_lbl_cv_yydebug_defined=no])
691 if test "$ac_lbl_cv_yydebug_defined" = yes ; then
693 AC_DEFINE(HAVE_YYDEBUG, 1, [define if libpcap has yydebug])
699 AC_CHECK_FUNCS(pcap_set_optimizer_debug)
700 AC_REPLACE_FUNCS(bpf_dump) dnl moved to libpcap in 0.6
703 if test -f /etc/group -a ! -z "`grep '^wheel:' /etc/group`" ; then
707 # Assume V7/BSD convention for man pages (file formats in section 5,
708 # miscellaneous info in section 7).
715 dnl Workaround to enable certain features
716 AC_DEFINE(_SUN,1,[define on AIX to get certain functions])
721 # Use System V conventions for man pages.
731 # Use System V conventions for man pages.
738 if test -f /dev/bpf0 ; then
743 # Make sure we have a definition for C99's uintptr_t (regardless of
744 # whether the environment is a C99 environment or not).
748 savedcppflags="$CPPFLAGS"
749 CPPFLAGS="$CPPFLAGS $V_INCLS"
752 # Check whether we have pcap/pcap-inttypes.h.
753 # If we do, we use that to get the C99 types defined.
755 AC_CHECK_HEADERS(pcap/pcap-inttypes.h)
758 # At compile time HAVE_PCAP_FINDALLDEVS depends on HAVE_PCAP_IF_T.
760 AC_CHECK_TYPES(pcap_if_t, , , [#include <pcap.h>])
762 CPPFLAGS="$savedcppflags"
765 # Define the old BSD specified-width types in terms of the C99 types;
766 # we may need them with libpcap include files.
768 AC_CHECK_TYPE([u_int8_t], ,
769 [AC_DEFINE([u_int8_t], [uint8_t],
770 [Define to `uint8_t' if u_int8_t not defined.])],
772 #include <sys/types.h>
774 AC_CHECK_TYPE([u_int16_t], ,
775 [AC_DEFINE([u_int16_t], [uint16_t],
776 [Define to `uint16_t' if u_int16_t not defined.])],
778 #include <sys/types.h>
780 AC_CHECK_TYPE([u_int32_t], ,
781 [AC_DEFINE([u_int32_t], [uint32_t],
782 [Define to `uint32_t' if u_int32_t not defined.])],
784 #include <sys/types.h>
786 AC_CHECK_TYPE([u_int64_t], ,
787 [AC_DEFINE([u_int64_t], [uint64_t],
788 [Define to `uint64_t' if u_int64_t not defined.])],
790 #include <sys/types.h>
794 AC_CHECK_TOOL([AR], [ar])
796 AC_LBL_DEVEL(V_CCOPT)
798 # Check for OpenSSL/libressl libcrypto
799 AC_MSG_CHECKING(whether to use OpenSSL/libressl libcrypto)
800 # Specify location for both includes and libraries.
801 want_libcrypto=ifavailable
803 AS_HELP_STRING([--with-crypto]@<:@=DIR@:>@,
804 [use OpenSSL/libressl libcrypto (located in directory DIR, if specified) @<:@default=yes, if available@:>@]),
806 if test $withval = no
808 # User doesn't want to link with libcrypto.
811 elif test $withval = yes
813 # User wants to link with libcrypto but hasn't specified
818 # User wants to link with libcrypto and has specified
819 # a directory, so use the provided value.
821 libcrypto_root=$withval
822 AC_MSG_RESULT([yes, using the version installed in $withval])
825 # Put the subdirectories of the libcrypto root directory
826 # at the front of the header and library search path.
828 CFLAGS="-I$withval/include $CFLAGS"
829 LIBS="-L$withval/lib $LIBS"
833 # Use libcrypto if it's present, otherwise don't; no directory
836 want_libcrypto=ifavailable
837 AC_MSG_RESULT([yes, if available])
839 if test "$want_libcrypto" != "no"; then
841 # Don't check for libcrypto unless we have its headers;
842 # Apple, bless their pointy little heads, apparently ship
843 # libcrypto as a library, but not the header files, in
844 # El Capitan, probably because they don't want you writing
845 # nasty portable code that could run on other UN*Xes, they
846 # want you writing code that uses their Shiny New Crypto
847 # Library and that only runs on macOS.
849 AC_CHECK_HEADER(openssl/crypto.h,
851 AC_CHECK_LIB(crypto, DES_cbc_encrypt)
852 if test "$ac_cv_lib_crypto_DES_cbc_encrypt" = "yes"; then
853 AC_CHECK_HEADERS(openssl/evp.h)
857 # 1) do we have EVP_CIPHER_CTX_new?
858 # If so, we use it to allocate an
859 # EVP_CIPHER_CTX, as EVP_CIPHER_CTX may be
860 # opaque; otherwise, we allocate it ourselves.
862 # 2) do we have EVP_DecryptInit_ex()?
863 # If so, we use it, because we need to be
864 # able to make two "initialize the cipher"
865 # calls, one with the cipher and key, and
866 # one with the IV, and, as of OpenSSL 1.1,
867 # You Can't Do That with EVP_DecryptInit(),
868 # because a call to EVP_DecryptInit() will
869 # unconditionally clear the context, and
870 # if you don't supply a cipher, it'll
871 # clear the cipher, rendering the context
872 # unusable and causing a crash.
874 AC_CHECK_FUNCS(EVP_CIPHER_CTX_new EVP_DecryptInit_ex)
879 # Check for libcap-ng
880 AC_MSG_CHECKING(whether to use libcap-ng)
881 # Specify location for both includes and libraries.
882 want_libcap_ng=ifavailable
884 AS_HELP_STRING([--with-cap-ng],
885 [use libcap-ng @<:@default=yes, if available@:>@]),
887 if test $withval = no
891 elif test $withval = yes
898 # Use libcap-ng if it's present, otherwise don't.
900 want_libcap_ng=ifavailable
901 AC_MSG_RESULT([yes, if available])
903 if test "$want_libcap_ng" != "no"; then
904 AC_CHECK_LIB(cap-ng, capng_change_id)
905 AC_CHECK_HEADERS(cap-ng.h)
909 dnl set additional include path if necessary
910 if test "$missing_includes" = "yes"; then
911 CPPFLAGS="$CPPFLAGS -I$srcdir/missing"
912 V_INCLS="$V_INCLS -I$srcdir/missing"
921 AC_SUBST(MAN_FILE_FORMATS)
922 AC_SUBST(MAN_MISC_INFO)
926 AC_CONFIG_HEADERS([config.h])
928 AC_CONFIG_COMMANDS([.devel],[[if test -f .devel; then
929 echo timestamp > stamp-h
930 cat $srcdir/Makefile-devel-adds >> Makefile
931 make depend || exit 1
933 AC_CONFIG_FILES([Makefile tcpdump.1])