1 dnl Copyright (c) 1994, 1995, 1996, 1997
2 dnl The Regents of the University of California. All rights reserved.
4 dnl Process this file with autoconf to produce a configure script.
10 # https://ftp.gnu.org/gnu/config/README
12 # for the URLs to use to fetch new versions of config.guess and
17 AC_INIT([tcpdump],[m4_esyscmd_s(cat VERSION)],[https://github.com/the-tcpdump-group/tcpdump/issues])
18 AC_CONFIG_SRCDIR(tcpdump.c)
22 AC_LBL_C_INIT_BEFORE_CC(V_INCLS)
24 # Try to enable as many C99 features as we can.
25 # At minimum, we want C++/C99-style // comments.
28 if test "$ac_cv_prog_cc_c99" = "no"; then
29 AC_MSG_WARN([The C compiler does not support C99; there may be compiler errors])
31 AC_LBL_C_INIT(V_CCOPT, V_INCLS)
34 AC_CHECK_HEADERS(fcntl.h rpc/rpc.h rpc/rpcent.h net/if.h)
36 # Get the size of a void *, to know whether this is a 32-bit or 64-bit build.
38 AC_CHECK_SIZEOF([void *])
41 # Get the size of a time_t, to know whether it's 32-bit or 64-bit.
43 AC_CHECK_SIZEOF([time_t],,[#include <time.h>])
48 AC_ARG_ENABLE(universal,
49 AS_HELP_STRING([--disable-universal],[don't build universal on macOS]))
50 if test "$enable_universal" != "no"; then
55 # Leopard. Build for x86 and 32-bit PowerPC, with
56 # x86 first. (That's what Apple does.)
58 V_CCOPT="$V_CCOPT -arch i386 -arch ppc"
59 LDFLAGS="$LDFLAGS -arch i386 -arch ppc"
64 # Snow Leopard. Build for x86-64 and x86, with
65 # x86-64 first. (That's what Apple does.)
67 V_CCOPT="$V_CCOPT -arch x86_64 -arch i386"
68 LDFLAGS="$LDFLAGS -arch x86_64 -arch i386"
76 [AS_HELP_STRING([--with-smi],
77 [link with libsmi (allows to load MIBs on the fly to decode SNMP packets) [default=yes, if available]])],
81 if test "x$with_smi" != "xno" ; then
82 AC_CHECK_HEADER(smi.h,
85 # OK, we found smi.h. Do we have libsmi with smiInit?
87 AC_CHECK_LIB(smi, smiInit,
90 # OK, we have libsmi with smiInit. Can we use it?
92 AC_MSG_CHECKING([whether to enable libsmi])
95 AC_RUN_IFELSE([AC_LANG_SOURCE([[
96 /* libsmi available check */
103 int current, revision, age, n;
104 const int required = 2;
107 if (strcmp(SMI_LIBRARY_VERSION, smi_library_version))
109 n = sscanf(smi_library_version, "%d:%d:%d", ¤t, &revision, &age);
112 if (required < current - age || required > current)
120 AC_DEFINE(USE_LIBSMI, 1,
121 [Define if you enable support for libsmi])
124 dnl autoconf documentation says that
125 dnl $? contains the exit value.
126 dnl reality is that it does not.
127 dnl We leave this in just in case
128 dnl autoconf ever comes back to
129 dnl match the documentation.
131 1) AC_MSG_RESULT(no - smiInit failed) ;;
132 2) AC_MSG_RESULT(no - header/library version mismatch) ;;
133 3) AC_MSG_RESULT(no - can't determine library version) ;;
134 4) AC_MSG_RESULT(no - too old) ;;
135 *) AC_MSG_RESULT(no) ;;
140 AC_MSG_RESULT(not when cross-compiling)
148 AC_MSG_CHECKING([whether to enable the instrument functions code])
149 AC_ARG_ENABLE([instrument-functions],
150 [AS_HELP_STRING([--enable-instrument-functions],
151 [enable instrument functions code [default=no]])],
155 yes) AC_MSG_RESULT(yes)
156 AC_CHECK_LIB([bfd], [bfd_init],
159 [--enable-instrument-functions was given, but test for library libbfd failed. Please install the 'binutils-dev' package.])],
161 AC_DEFINE(ENABLE_INSTRUMENT_FUNCTIONS, 1,
162 [define if you want to build the instrument functions code])
163 LOCALSRC="$LOCALSRC instrument-functions.c"
164 # Add '-finstrument-functions' instrumentation option to generate
165 # instrumentation calls for entry and exit to functions.
166 # Try to avoid Address Space Layout Randomization (ALSR).
167 CFLAGS="$CFLAGS -O0 -ggdb -finstrument-functions -fno-stack-protector -fno-pic"
168 LDFLAGS="$LDFLAGS -O0 -ggdb -fno-stack-protector -no-pie"
175 AC_MSG_CHECKING([whether to enable the possibly-buggy SMB printer])
177 [AS_HELP_STRING([--enable-smb],
178 [enable possibly-buggy SMB printer [default=no]])],
182 yes) AC_MSG_RESULT(yes)
183 AC_DEFINE(ENABLE_SMB, 1,
184 [define if you want to build the possibly-buggy SMB printer])
185 LOCALSRC="print-smb.c smbutil.c $LOCALSRC"
191 AC_MSG_CHECKING([whether to drop root privileges by default])
194 [AS_HELP_STRING([--with-user=USERNAME],
195 [drop privileges by default to USERNAME]
199 AS_CASE(["$withval"],
200 [no], [AC_MSG_RESULT(no)],
201 [''|yes], [AC_MSG_ERROR([--with-user requires a username])],
203 AC_DEFINE_UNQUOTED(WITH_USER, "$withval",
204 [define if should drop privileges by default])
205 AC_MSG_RESULT([yes, to user "$withval"])
209 AC_MSG_CHECKING([whether to chroot])
212 [AS_HELP_STRING([--with-chroot=DIRECTORY],
213 [when dropping privileges, chroot to DIRECTORY]
218 AS_CASE(["$withval"],
219 [no], [AC_MSG_RESULT(no)],
220 [''|yes], [AC_MSG_ERROR([--with-chroot requires a directory])],
222 AC_DEFINE_UNQUOTED(WITH_CHROOT, "$withval",
223 [define if should chroot when dropping privileges])
224 AC_MSG_RESULT([yes, to directory "$withval"])
228 AC_ARG_WITH(sandbox-capsicum,
229 AS_HELP_STRING([--with-sandbox-capsicum],
230 [use Capsicum security functions @<:@default=yes, if available@:>@]))
232 # Check whether various functions are available. If any are, set
233 # ac_lbl_capsicum_function_seen to yes; if any are not, set
234 # ac_lbl_capsicum_function_not_seen to yes.
236 # We don't check cap_rights_init(), as it's a macro, wrapping another
237 # function, in at least some versions of FreeBSD, and AC_CHECK_FUNCS()
238 # doesn't handle that.
240 # All of the ones we check for must be available in order to enable
241 # capsicum sandboxing.
243 # XXX - do we need to check for all of them, or are there some that, if
244 # present, imply others are present?
246 if test -z "$with_sandbox_capsicum" || test "$with_sandbox_capsicum" != "no" ; then
248 # First, make sure we have the required header.
250 AC_CHECK_HEADER(sys/capsicum.h,
253 # We do; now make sure we have the required functions.
255 AC_CHECK_FUNCS(cap_enter cap_rights_limit cap_ioctls_limit openat,
256 ac_lbl_capsicum_function_seen=yes,
257 ac_lbl_capsicum_function_not_seen=yes)
259 AC_CHECK_LIB(casper, cap_init, LIBS="$LIBS -lcasper")
260 AC_CHECK_LIB(cap_dns, cap_gethostbyaddr, LIBS="$LIBS -lcap_dns")
262 AC_MSG_CHECKING([whether to sandbox using capsicum])
263 if test "x$ac_lbl_capsicum_function_seen" = "xyes" -a "x$ac_lbl_capsicum_function_not_seen" != "xyes"; then
264 AC_DEFINE(HAVE_CAPSICUM, 1, [capsicum support available])
269 AC_MSG_CHECKING([whether to sandbox using Casper library])
270 if test "x$ac_cv_lib_casper_cap_init" = "xyes" -a "x$ac_cv_lib_cap_dns_cap_gethostbyaddr" = "xyes"; then
271 AC_DEFINE(HAVE_CASPER, 1, [Casper support available])
278 # We must check this before checking whether to check the OS's IPv6,
279 # support because, on some platforms (such as SunOS 5.x), the test
280 # program requires the extra networking libraries.
284 AC_REPLACE_FUNCS(strlcat strlcpy strsep getservent getopt_long)
285 AC_CHECK_FUNCS(fork vfork)
288 # Make sure we have snprintf(); we require it.
290 AC_CHECK_FUNC(snprintf,,
291 AC_MSG_ERROR([snprintf() is required but wasn't found]))
294 # It became apparent at some point that using a suitable C99 compiler does not
295 # automatically mean snprintf(3) implementation in the libc supports all the
296 # modifiers and specifiers used in the project, so let's test that before the
299 # Testing the sizeof_t length modifier takes making an snprintf() call and
300 # comparing the actual result with the expected result. If this fails, it will
301 # most likely happen at run time, not compile time.
303 # Testing the 64-bit conversion specifiers in addition to that requires the
304 # <inttypes.h> header to be present and the macros to be defined, so if this
305 # fails, it will more likely happen at compile time.
307 AC_MSG_CHECKING([whether snprintf is suitable])
313 #include <inttypes.h>
314 #include <sys/types.h>
319 uint64_t t = (uint64_t)1 << 32;
321 snprintf(buf, sizeof(buf), "%zu", sizeof(buf));
322 if (strncmp(buf, "100", sizeof(buf)))
325 snprintf(buf, sizeof(buf), "%zd", -sizeof(buf));
326 if (strncmp(buf, "-100", sizeof(buf)))
329 snprintf(buf, sizeof(buf), "%" PRId64, -t);
330 if (strncmp(buf, "-4294967296", sizeof(buf)))
333 snprintf(buf, sizeof(buf), "0o%" PRIo64, t);
334 if (strncmp(buf, "0o40000000000", sizeof(buf)))
337 snprintf(buf, sizeof(buf), "0x%" PRIx64, t);
338 if (strncmp(buf, "0x100000000", sizeof(buf)))
341 snprintf(buf, sizeof(buf), "%" PRIu64, t);
342 if (strncmp(buf, "4294967296", sizeof(buf)))
355 [The snprintf(3) implementation in this libc is not suitable,
356 tcpdump would not work correctly even if it managed to compile.])
359 AC_MSG_RESULT(not while cross-compiling)
363 AC_CHECK_LIB(rpc, main) dnl It's unclear why we might need -lrpc
365 dnl Some platforms may need -lnsl for getrpcbynumber.
366 AC_SEARCH_LIBS(getrpcbynumber, nsl,
367 AC_DEFINE(HAVE_GETRPCBYNUMBER, 1, [define if you have getrpcbynumber()]))
369 AC_LBL_LIBPCAP(V_PCAPDEP, V_INCLS)
372 # Check for these after AC_LBL_LIBPCAP, so we link with the appropriate
373 # libraries (e.g., "-lsocket -lnsl" on Solaris).
375 # You are in a twisty little maze of UN*Xes, all different.
376 # Some might not have ether_ntohost().
377 # Some might have it and declare it in <net/ethernet.h>.
378 # Some might have it and declare it in <netinet/ether.h>
379 # Some might have it and declare it in <sys/ethernet.h>.
380 # Some might have it and declare it in <arpa/inet.h>.
381 # Some might have it and declare it in <netinet/if_ether.h>.
382 # Some might have it and not declare it in any header file.
384 # Before you is a C compiler.
386 AC_CHECK_FUNCS(ether_ntohost, [
387 AC_CACHE_CHECK(for buggy ether_ntohost, ac_cv_buggy_ether_ntohost, [
388 AC_RUN_IFELSE([AC_LANG_SOURCE([[
390 #include <netinet/ether.h>
392 #include <sys/types.h>
393 #include <sys/param.h>
394 #include <sys/socket.h>
397 main(int argc, char **argv)
399 u_char ea[6] = { 0xff, 0xff, 0xff, 0xff, 0xff };
400 char name[MAXHOSTNAMELEN];
402 ether_ntohost(name, (struct ether_addr *)ea);
406 ], [ac_cv_buggy_ether_ntohost=no],
407 [ac_cv_buggy_ether_ntohost=yes],
408 [ac_cv_buggy_ether_ntohost="not while cross-compiling"])])
409 if test "$ac_cv_buggy_ether_ntohost" = "no"; then
410 AC_DEFINE(USE_ETHER_NTOHOST, 1,
411 [define if you have ether_ntohost() and it works])
414 if test "$ac_cv_func_ether_ntohost" = yes -a \
415 "$ac_cv_buggy_ether_ntohost" = "no"; then
417 # OK, we have ether_ntohost(). Is it declared in <net/ethernet.h>?
419 # This test fails if we don't have <net/ethernet.h> or if we do
420 # but it doesn't declare ether_ntohost().
422 AC_CHECK_DECL(ether_ntohost,
424 AC_DEFINE(NET_ETHERNET_H_DECLARES_ETHER_NTOHOST,,
425 [Define to 1 if net/ethernet.h declares `ether_ntohost'])
428 #include <net/ethernet.h>
433 if test "$ac_cv_have_decl_ether_ntohost" != yes; then
435 # No, how about <netinet/ether.h>, as on Linux?
437 # This test fails if we don't have <netinet/ether.h>
438 # or if we do but it doesn't declare ether_ntohost().
440 # Unset ac_cv_have_decl_ether_ntohost so we don't
441 # treat the previous failure as a cached value and
442 # suppress the next test.
444 unset ac_cv_have_decl_ether_ntohost
445 AC_CHECK_DECL(ether_ntohost,
447 AC_DEFINE(NETINET_ETHER_H_DECLARES_ETHER_NTOHOST,,
448 [Define to 1 if netinet/ether.h declares `ether_ntohost'])
451 #include <netinet/ether.h>
457 if test "$ac_cv_have_decl_ether_ntohost" != yes; then
459 # No, how about <sys/ethernet.h>, as on Solaris 10
462 # This test fails if we don't have <sys/ethernet.h>
463 # or if we do but it doesn't declare ether_ntohost().
465 # Unset ac_cv_have_decl_ether_ntohost so we don't
466 # treat the previous failure as a cached value and
467 # suppress the next test.
469 unset ac_cv_have_decl_ether_ntohost
470 AC_CHECK_DECL(ether_ntohost,
472 AC_DEFINE(SYS_ETHERNET_H_DECLARES_ETHER_NTOHOST,,
473 [Define to 1 if sys/ethernet.h declares `ether_ntohost'])
476 #include <sys/ethernet.h>
482 if test "$ac_cv_have_decl_ether_ntohost" != yes; then
484 # No, how about <arpa/inet.h>, as in AIX?
486 # This test fails if we don't have <arpa/inet.h>
487 # (if we have ether_ntohost(), we should have
488 # networking, and if we have networking, we should
489 # have <arpa/inet.h>) or if we do but it doesn't
490 # declare ether_ntohost().
492 # Unset ac_cv_have_decl_ether_ntohost so we don't
493 # treat the previous failure as a cached value and
494 # suppress the next test.
496 unset ac_cv_have_decl_ether_ntohost
497 AC_CHECK_DECL(ether_ntohost,
499 AC_DEFINE(ARPA_INET_H_DECLARES_ETHER_NTOHOST,,
500 [Define to 1 if arpa/inet.h declares `ether_ntohost'])
503 #include <arpa/inet.h>
509 if test "$ac_cv_have_decl_ether_ntohost" != yes; then
511 # No, how about <netinet/if_ether.h>?
512 # On some platforms, it requires <net/if.h> and
513 # <netinet/in.h>, and we always include it with
514 # both of them, so test it with both of them.
516 # This test fails if we don't have <netinet/if_ether.h>
517 # and the headers we include before it, or if we do but
518 # <netinet/if_ether.h> doesn't declare ether_hostton().
520 # Unset ac_cv_have_decl_ether_ntohost so we don't
521 # treat the previous failure as a cached value and
522 # suppress the next test.
524 unset ac_cv_have_decl_ether_ntohost
525 AC_CHECK_DECL(ether_ntohost,
527 AC_DEFINE(NETINET_IF_ETHER_H_DECLARES_ETHER_NTOHOST,,
528 [Define to 1 if netinet/if_ether.h declares `ether_ntohost'])
531 #include <sys/types.h>
532 #include <sys/socket.h>
534 #include <netinet/in.h>
535 #include <netinet/if_ether.h>
539 # After all that, is ether_ntohost() declared?
541 if test "$ac_cv_have_decl_ether_ntohost" = yes; then
545 AC_DEFINE(HAVE_DECL_ETHER_NTOHOST, 1,
546 [Define to 1 if you have the declaration of `ether_ntohost'])
549 # No, we'll have to declare it ourselves.
550 # Do we have "struct ether_addr" if we include
551 # <netinet/if_ether.h>?
553 AC_CHECK_TYPES(struct ether_addr,,,
555 #include <sys/types.h>
556 #include <sys/socket.h>
558 #include <netinet/in.h>
559 #include <netinet/if_ether.h>
565 dnl Check for "pcap_list_datalinks()" and use a substitute version if
566 dnl it's not present. If it is present, check for "pcap_free_datalinks()";
567 dnl if it's not present, we don't replace it for now. (We could do so
568 dnl on UN*X, but not on Windows, where hilarity ensues if a program
569 dnl built with one version of the MSVC support library tries to free
570 dnl something allocated by a library built with another version of
571 dnl the MSVC support library.)
573 AC_CHECK_FUNC(pcap_list_datalinks,
575 AC_DEFINE(HAVE_PCAP_LIST_DATALINKS, 1,
576 [define if libpcap has pcap_list_datalinks()])
577 AC_CHECK_FUNCS(pcap_free_datalinks)
584 dnl Check for "pcap_datalink_name_to_val()", and use a substitute
585 dnl version if it's not present. If it is present, check for
586 dnl "pcap_datalink_val_to_description()", and if we don't have it,
587 dnl use a substitute version.
589 AC_CHECK_FUNC(pcap_datalink_name_to_val,
591 AC_DEFINE(HAVE_PCAP_DATALINK_NAME_TO_VAL, 1,
592 [define if libpcap has pcap_datalink_name_to_val()])
593 AC_CHECK_FUNC(pcap_datalink_val_to_description,
594 AC_DEFINE(HAVE_PCAP_DATALINK_VAL_TO_DESCRIPTION, 1,
595 [define if libpcap has pcap_datalink_val_to_description()]),
605 dnl Check for "pcap_set_datalink()"; you can't substitute for it if
606 dnl it's absent (it has hooks into libpcap), so just define the
607 dnl HAVE_ value if it's there.
609 AC_CHECK_FUNCS(pcap_set_datalink)
612 dnl Check for "pcap_breakloop()"; you can't substitute for it if
613 dnl it's absent (it has hooks into the live capture routines),
614 dnl so just define the HAVE_ value if it's there.
616 AC_CHECK_FUNCS(pcap_breakloop)
619 # Do we have the new open API? Check for pcap_create, and assume that,
620 # if we do, we also have pcap_activate() and the other new routines
621 # introduced in libpcap 1.0.0.
623 AC_CHECK_FUNCS(pcap_create)
624 if test $ac_cv_func_pcap_create = "yes" ; then
626 # OK, do we have pcap_set_tstamp_type? If so, assume we have
627 # pcap_list_tstamp_types and pcap_free_tstamp_types as well.
629 AC_CHECK_FUNCS(pcap_set_tstamp_type)
631 # And do we have pcap_set_tstamp_precision? If so, we assume
632 # we also have pcap_open_offline_with_tstamp_precision.
634 AC_CHECK_FUNCS(pcap_set_tstamp_precision)
638 # Check for a miscellaneous collection of functions which we use
641 AC_CHECK_FUNCS(pcap_findalldevs)
642 AC_CHECK_FUNCS(pcap_dump_flush pcap_lib_version)
643 if test $ac_cv_func_pcap_lib_version = "no" ; then
644 AC_MSG_CHECKING(whether pcap_version is defined by libpcap)
645 AC_LINK_IFELSE([AC_LANG_PROGRAM([[]], [[
646 extern char pcap_version[];
648 return (int)pcap_version;
651 [ac_lbl_cv_pcap_version_defined=yes],
652 [ac_lbl_cv_pcap_version_defined=no])
653 if test "$ac_lbl_cv_pcap_version_defined" = yes ; then
655 AC_DEFINE(HAVE_PCAP_VERSION, 1, [define if libpcap has pcap_version])
660 AC_CHECK_FUNCS(pcap_setdirection pcap_set_immediate_mode pcap_dump_ftell64)
661 AC_CHECK_FUNCS(pcap_open pcap_findalldevs_ex)
662 AC_REPLACE_FUNCS(pcap_dump_ftell)
665 # Check for special debugging functions
667 AC_CHECK_FUNCS(pcap_set_parser_debug)
668 if test "$ac_cv_func_pcap_set_parser_debug" = "no" ; then
670 # OK, we don't have pcap_set_parser_debug() to set the libpcap
671 # filter expression parser debug flag; can we directly set the
673 AC_MSG_CHECKING(whether pcap_debug is defined by libpcap)
674 AC_LINK_IFELSE([AC_LANG_PROGRAM([[]], [[
675 extern int pcap_debug;
680 [ac_lbl_cv_pcap_debug_defined=yes],
681 [ac_lbl_cv_pcap_debug_defined=no])
682 if test "$ac_lbl_cv_pcap_debug_defined" = yes ; then
684 AC_DEFINE(HAVE_PCAP_DEBUG, 1, [define if libpcap has pcap_debug])
688 # OK, what about "yydebug"?
690 AC_MSG_CHECKING(whether yydebug is defined by libpcap)
691 AC_LINK_IFELSE([AC_LANG_PROGRAM([[]], [[
697 [ac_lbl_cv_yydebug_defined=yes],
698 [ac_lbl_cv_yydebug_defined=no])
699 if test "$ac_lbl_cv_yydebug_defined" = yes ; then
701 AC_DEFINE(HAVE_YYDEBUG, 1, [define if libpcap has yydebug])
707 AC_CHECK_FUNCS(pcap_set_optimizer_debug)
708 AC_REPLACE_FUNCS(bpf_dump) dnl moved to libpcap in 0.6
711 # Assume V7/BSD convention for man pages (file formats in section 5,
712 # miscellaneous info in section 7).
719 dnl Workaround to enable certain features
720 AC_DEFINE(_SUN,1,[define on AIX to get certain functions])
725 # Use System V conventions for man pages.
733 # Use System V conventions for man pages.
741 # Make sure we have a definition for C99's uintptr_t (regardless of
742 # whether the environment is a C99 environment or not).
746 savedcppflags="$CPPFLAGS"
747 CPPFLAGS="$CPPFLAGS $V_INCLS"
750 # Check whether we have pcap/pcap-inttypes.h.
751 # If we do, we use that to get the C99 types defined.
753 AC_CHECK_HEADERS(pcap/pcap-inttypes.h)
756 # At compile time HAVE_PCAP_FINDALLDEVS depends on HAVE_PCAP_IF_T.
758 AC_CHECK_TYPES(pcap_if_t, , , [#include <pcap.h>])
760 CPPFLAGS="$savedcppflags"
763 # Define the old BSD specified-width types in terms of the C99 types;
764 # we may need them with libpcap include files.
766 AC_CHECK_TYPE([u_int8_t], ,
767 [AC_DEFINE([u_int8_t], [uint8_t],
768 [Define to `uint8_t' if u_int8_t not defined.])],
770 #include <sys/types.h>
772 AC_CHECK_TYPE([u_int16_t], ,
773 [AC_DEFINE([u_int16_t], [uint16_t],
774 [Define to `uint16_t' if u_int16_t not defined.])],
776 #include <sys/types.h>
778 AC_CHECK_TYPE([u_int32_t], ,
779 [AC_DEFINE([u_int32_t], [uint32_t],
780 [Define to `uint32_t' if u_int32_t not defined.])],
782 #include <sys/types.h>
784 AC_CHECK_TYPE([u_int64_t], ,
785 [AC_DEFINE([u_int64_t], [uint64_t],
786 [Define to `uint64_t' if u_int64_t not defined.])],
788 #include <sys/types.h>
792 AC_CHECK_TOOL([AR], [ar])
794 AC_LBL_DEVEL(V_CCOPT)
796 # Check for OpenSSL/libressl libcrypto
797 AC_MSG_CHECKING(whether to use OpenSSL/libressl libcrypto)
798 # Specify location for both includes and libraries.
799 want_libcrypto=ifavailable
801 AS_HELP_STRING([--with-crypto]@<:@=DIR@:>@,
802 [use OpenSSL/libressl libcrypto (located in directory DIR, if specified) @<:@default=yes, if available@:>@]),
804 if test $withval = no
806 # User doesn't want to link with libcrypto.
809 elif test $withval = yes
811 # User wants to link with libcrypto but hasn't specified
816 # User wants to link with libcrypto and has specified
817 # a directory, so use the provided value.
819 libcrypto_root=$withval
820 AC_MSG_RESULT([yes, using the version installed in $withval])
823 # Put the subdirectories of the libcrypto root directory
824 # at the front of the header and library search path.
826 CFLAGS="-I$withval/include $CFLAGS"
827 LIBS="-L$withval/lib $LIBS"
831 # Use libcrypto if it's present, otherwise don't; no directory
834 want_libcrypto=ifavailable
835 AC_MSG_RESULT([yes, if available])
837 if test "$want_libcrypto" != "no"; then
839 # Don't check for libcrypto unless we have its headers;
840 # Apple, bless their pointy little heads, apparently ship
841 # libcrypto as a library, but not the header files, in
842 # El Capitan, probably because they don't want you writing
843 # nasty portable code that could run on other UN*Xes, they
844 # want you writing code that uses their Shiny New Crypto
845 # Library and that only runs on macOS.
847 AC_CHECK_HEADER(openssl/crypto.h,
849 AC_CHECK_LIB(crypto, DES_cbc_encrypt)
850 if test "$ac_cv_lib_crypto_DES_cbc_encrypt" = "yes"; then
851 AC_CHECK_HEADERS(openssl/evp.h)
855 # 1) do we have EVP_CIPHER_CTX_new?
856 # If so, we use it to allocate an
857 # EVP_CIPHER_CTX, as EVP_CIPHER_CTX may be
858 # opaque; otherwise, we allocate it ourselves.
860 # 2) do we have EVP_DecryptInit_ex()?
861 # If so, we use it, because we need to be
862 # able to make two "initialize the cipher"
863 # calls, one with the cipher and key, and
864 # one with the IV, and, as of OpenSSL 1.1,
865 # You Can't Do That with EVP_DecryptInit(),
866 # because a call to EVP_DecryptInit() will
867 # unconditionally clear the context, and
868 # if you don't supply a cipher, it'll
869 # clear the cipher, rendering the context
870 # unusable and causing a crash.
872 AC_CHECK_FUNCS(EVP_CIPHER_CTX_new EVP_DecryptInit_ex)
877 # Check for libcap-ng
878 AC_MSG_CHECKING(whether to use libcap-ng)
879 # Specify location for both includes and libraries.
880 want_libcap_ng=ifavailable
882 AS_HELP_STRING([--with-cap-ng],
883 [use libcap-ng @<:@default=yes, if available@:>@]),
885 if test $withval = no
889 elif test $withval = yes
896 # Use libcap-ng if it's present, otherwise don't.
898 want_libcap_ng=ifavailable
899 AC_MSG_RESULT([yes, if available])
901 if test "$want_libcap_ng" != "no"; then
902 AC_CHECK_LIB(cap-ng, capng_change_id)
903 AC_CHECK_HEADERS(cap-ng.h)
907 dnl set additional include path if necessary
908 if test "$missing_includes" = "yes"; then
909 CPPFLAGS="$CPPFLAGS -I$srcdir/missing"
910 V_INCLS="$V_INCLS -I$srcdir/missing"
918 AC_SUBST(MAN_FILE_FORMATS)
919 AC_SUBST(MAN_MISC_INFO)
923 AC_CONFIG_HEADERS([config.h])
925 AC_CONFIG_COMMANDS([.devel],[[if test -f .devel; then
926 echo timestamp > stamp-h
927 cat $srcdir/Makefile-devel-adds >> Makefile
928 make depend || exit 1
930 AC_CONFIG_FILES([Makefile tcpdump.1])