[7bebb42] | 1 | dnl |
---|
[b26a792] | 2 | AC_INIT(mod_gnutls, 0.8.0-beta) |
---|
[9706fc2] | 3 | OOO_CONFIG_NICE(config.nice) |
---|
[42307a9] | 4 | MOD_GNUTLS_VERSION=AC_PACKAGE_VERSION |
---|
[6e0bfd6] | 5 | AC_PREREQ(2.53) |
---|
[9706fc2] | 6 | AC_CONFIG_SRCDIR([src/mod_gnutls.c]) |
---|
[6e0bfd6] | 7 | AC_CONFIG_AUX_DIR(config) |
---|
[7bebb42] | 8 | |
---|
[5a6446d] | 9 | OOO_MAINTAIN_MODE |
---|
[9706fc2] | 10 | AM_MAINTAINER_MODE |
---|
| 11 | AC_CANONICAL_TARGET |
---|
[9a4d250] | 12 | # mod_gnutls test suite requires GNU make |
---|
| 13 | AM_INIT_AUTOMAKE([-Wno-portability]) |
---|
[6e0bfd6] | 14 | AM_CONFIG_HEADER(include/mod_gnutls_config.h:config.in) |
---|
[9706fc2] | 15 | |
---|
[eda8686] | 16 | LT_INIT([disable-static]) |
---|
| 17 | |
---|
[42307a9] | 18 | AC_SUBST(MOD_GNUTLS_VERSION) |
---|
[9706fc2] | 19 | |
---|
| 20 | AC_PROG_CC |
---|
[dff03fa] | 21 | AC_PROG_CC_C99 |
---|
[9706fc2] | 22 | AC_PROG_LD |
---|
| 23 | AC_PROG_INSTALL |
---|
[7bebb42] | 24 | AC_PROG_LIBTOOL |
---|
[9706fc2] | 25 | |
---|
[4aec9a1] | 26 | AC_CONFIG_MACRO_DIR([m4]) |
---|
| 27 | |
---|
[4c529de] | 28 | AP_VERSION=2.4.0 |
---|
[9706fc2] | 29 | CHECK_APACHE(,$AP_VERSION, |
---|
| 30 | :,:, |
---|
| 31 | AC_MSG_ERROR([*** Apache version $AP_VERSION not found!]) |
---|
| 32 | ) |
---|
| 33 | |
---|
[4c529de] | 34 | PKG_CHECK_MODULES([LIBGNUTLS], [gnutls >= 3.3.0]) |
---|
[cac3a7f] | 35 | |
---|
| 36 | LIBGNUTLS_VERSION=`pkg-config --modversion gnutls` |
---|
[16068f4] | 37 | |
---|
[0bda20f] | 38 | AC_ARG_ENABLE(vpath-install, |
---|
| 39 | AS_HELP_STRING([--enable-vpath-install], |
---|
| 40 | [Modify the Apache module directory provided by apxs to \ |
---|
| 41 | follow --prefix, if necessary. Most users will not want this, \ |
---|
| 42 | but it is required for VPATH builds including "make \ |
---|
| 43 | distcheck".]), |
---|
| 44 | vpath_install=$enableval, vpath_install=no) |
---|
| 45 | AM_CONDITIONAL([ENABLE_VPATH_INSTALL], [test "$vpath_install" = "yes"]) |
---|
| 46 | |
---|
[787dab7] | 47 | AC_ARG_ENABLE(srp, |
---|
| 48 | AS_HELP_STRING([--disable-srp], |
---|
| 49 | [unconditionally disable the SRP functionality]), |
---|
| 50 | use_srp=$enableval, use_srp=yes) |
---|
[b072204] | 51 | |
---|
[f71e6ce] | 52 | # check if the available GnuTLS library supports SRP |
---|
| 53 | AC_SEARCH_LIBS([gnutls_srp_server_get_username], [gnutls], [], [use_srp="no"]) |
---|
| 54 | |
---|
[b072204] | 55 | SRP_CFLAGS="" |
---|
[787dab7] | 56 | if test "$use_srp" != "no"; then |
---|
[b27cce7] | 57 | SRP_CFLAGS="-DENABLE_SRP=1" |
---|
[787dab7] | 58 | fi |
---|
[c70c6d7] | 59 | |
---|
[fd82e59] | 60 | AC_ARG_ENABLE(strict, |
---|
| 61 | AS_HELP_STRING([--disable-strict], |
---|
| 62 | [Avoid strict compiler warnings and errors]), |
---|
| 63 | use_strict=$enableval, use_strict=yes) |
---|
| 64 | |
---|
| 65 | STRICT_CFLAGS="" |
---|
| 66 | if test "$use_strict" != "no"; then |
---|
| 67 | STRICT_CFLAGS="-Wall -Werror -Wextra" |
---|
| 68 | fi |
---|
| 69 | |
---|
[787dab7] | 70 | AC_MSG_CHECKING([whether to enable SRP functionality]) |
---|
| 71 | AC_MSG_RESULT($use_srp) |
---|
| 72 | |
---|
[412ee84] | 73 | dnl Optionally disable flock |
---|
| 74 | AC_ARG_ENABLE(flock, |
---|
[dff57b4] | 75 | AS_HELP_STRING([--disable-flock], [Disable use of flock during tests \ |
---|
| 76 | (some exotic architectures don't support it)]), |
---|
[412ee84] | 77 | [use_flock=$enableval], [use_flock=yes]) |
---|
[5d9f34e] | 78 | # Check if flock is available and supports --timeout |
---|
| 79 | AC_PATH_PROG([FLOCK], [flock], [no]) |
---|
| 80 | AS_IF([test "${FLOCK}" != "no"], |
---|
| 81 | [ |
---|
| 82 | AC_MSG_CHECKING([whether ${FLOCK} supports --timeout]) |
---|
| 83 | lockfile="$(mktemp)" |
---|
| 84 | AS_IF([${FLOCK} --timeout 1 ${lockfile} true >&AS_MESSAGE_LOG_FD 2>&1], |
---|
| 85 | [flock_works="yes"], [flock_works="no"]) |
---|
| 86 | rm "${lockfile}" |
---|
| 87 | AC_MSG_RESULT([$flock_works]) |
---|
| 88 | ], |
---|
| 89 | [flock_works="no"]) |
---|
| 90 | # disable flock if requested by user or it doesn't support timeout |
---|
| 91 | AM_CONDITIONAL([DISABLE_FLOCK], |
---|
| 92 | [test "$enable_flock" = "no" || test "$flock_works" = "no"]) |
---|
[412ee84] | 93 | |
---|
[21181b2] | 94 | # openssl is needed as the responder for OCSP tests |
---|
| 95 | AC_PATH_PROG([OPENSSL], [openssl], [no]) |
---|
[3725f2d] | 96 | # OCSP checks with gnutls-cli from GnuTLS versions before 3.3.23, |
---|
| 97 | # 3.4.12, or 3.5.1 (on the respective 3.x branch) fail if intermediate |
---|
| 98 | # CAs cannot be status checked, even if there are no intermediate CAs |
---|
| 99 | # like in the mod_gnutls test suite where end entity certificates are |
---|
| 100 | # directly issued by a root CA. |
---|
[efe884e] | 101 | AC_MSG_CHECKING([for gnutls-cli version supporting OCSP for EE under root CA]) |
---|
| 102 | AC_PREPROC_IFELSE( |
---|
| 103 | [AC_LANG_SOURCE([[#include "gnutls/gnutls.h" |
---|
| 104 | #if GNUTLS_VERSION_NUMBER < 0x030317 |
---|
| 105 | #error |
---|
| 106 | #elif GNUTLS_VERSION_NUMBER >= 0x030400 && GNUTLS_VERSION_NUMBER < 0x03040c |
---|
| 107 | #error |
---|
[3725f2d] | 108 | #elif GNUTLS_VERSION_NUMBER == 0x030500 |
---|
| 109 | #error |
---|
[efe884e] | 110 | #endif |
---|
| 111 | ]])], |
---|
| 112 | [gnutls_ocsp_ok="yes"], |
---|
| 113 | [gnutls_ocsp_ok="no"], |
---|
| 114 | ) |
---|
| 115 | AC_MSG_RESULT([$gnutls_ocsp_ok]) |
---|
| 116 | AM_CONDITIONAL([ENABLE_OCSP_TEST], [test "${OPENSSL}" != "no" && test "${gnutls_ocsp_ok}" = "yes"]) |
---|
[42bee37] | 117 | |
---|
[cf4e708] | 118 | dnl Enable test namespaces? Default is "yes". |
---|
| 119 | AC_ARG_ENABLE(test-namespaces, |
---|
| 120 | AS_HELP_STRING([--disable-test-namespaces], [Disable use of network \ |
---|
| 121 | namespaces to run tests in parallel (some architectures might not \ |
---|
| 122 | support it)]), |
---|
| 123 | [use_netns=$enableval], [use_netns=yes]) |
---|
[b21bf4f] | 124 | |
---|
| 125 | # Check if "unshare" is available and has permission to create network |
---|
| 126 | # and user namespaces |
---|
| 127 | AC_PATH_PROG([UNSHARE], [unshare], [no]) |
---|
| 128 | AS_IF([test "${UNSHARE}" != "no"], |
---|
| 129 | [ |
---|
[5aae10e] | 130 | AC_MSG_CHECKING([for permission to create network and user namespaces]) |
---|
[b21bf4f] | 131 | AS_IF([${UNSHARE} --net -r /bin/sh -c \ |
---|
[d7c2508] | 132 | "ip link set up lo && ip addr show" >&AS_MESSAGE_LOG_FD 2>&1], |
---|
[b21bf4f] | 133 | [unshare_works="yes"], [unshare_works="no"]) |
---|
| 134 | AC_MSG_RESULT([$unshare_works]) |
---|
| 135 | ], |
---|
[1bb6b1c] | 136 | [unshare_works="no"]) |
---|
[b21bf4f] | 137 | # decide whether to enable network namespaces |
---|
| 138 | AS_IF([test "$enable_test_namespaces" != "no" \ |
---|
| 139 | && test "$unshare_works" = "yes"], |
---|
| 140 | [use_netns="yes"], [use_netns="no"]) |
---|
[cf4e708] | 141 | AM_CONDITIONAL([ENABLE_NETNS], [test "$use_netns" != "no"]) |
---|
[b21bf4f] | 142 | # Adjust Apache configuration for tests accordingly: Use pthread mutex |
---|
| 143 | # and test specific PID files if using namespaces, defaults otherwise. |
---|
| 144 | AS_IF([test "$use_netns" = "yes"], |
---|
| 145 | [MUTEX_TYPE="pthread"; PID_AFFIX="-\${TEST_NAME}"], |
---|
| 146 | [MUTEX_TYPE="default"; PID_AFFIX=""]) |
---|
[cf4e708] | 147 | AC_SUBST(MUTEX_TYPE) |
---|
| 148 | AC_SUBST(PID_AFFIX) |
---|
| 149 | AM_SUBST_NOTMAKE(MUTEX_TYPE) |
---|
| 150 | AM_SUBST_NOTMAKE(PID_AFFIX) |
---|
| 151 | |
---|
[fa45dcb] | 152 | AC_ARG_ENABLE(msva, |
---|
| 153 | AS_HELP_STRING([--enable-msva], |
---|
| 154 | [enable Monkeysphere client certificate verification]), |
---|
| 155 | use_msva=$enableval, use_msva=no) |
---|
[b27cce7] | 156 | AM_CONDITIONAL([USE_MSVA], [test "$use_msva" != "no"]) |
---|
[fa45dcb] | 157 | |
---|
| 158 | MSVA_CFLAGS="" |
---|
| 159 | if test "$use_msva" != "no"; then |
---|
[b27cce7] | 160 | AC_CHECK_HEADERS([msv/msv.h], [], |
---|
[fa45dcb] | 161 | [AC_MSG_ERROR([*** No libmsv headers found!])]) |
---|
| 162 | AC_SEARCH_LIBS([msv_query_agent], [msv], [], |
---|
| 163 | [AC_MSG_ERROR([*** No libmsv found with msv_query_agent!])]) |
---|
[b27cce7] | 164 | MSVA_CFLAGS="-DENABLE_MSVA=1" |
---|
[fa45dcb] | 165 | fi |
---|
| 166 | |
---|
| 167 | AC_MSG_CHECKING([whether to enable MSVA functionality]) |
---|
| 168 | AC_MSG_RESULT($use_msva) |
---|
| 169 | |
---|
[6e0bfd6] | 170 | have_apr_memcache=0 |
---|
| 171 | CHECK_APR_MEMCACHE([have_apr_memcache=1], [have_apr_memcache=0]) |
---|
| 172 | AC_SUBST(have_apr_memcache) |
---|
[ed47098] | 173 | |
---|
[6e1d45d] | 174 | # Building documentation requires pandoc, which in turn needs pdflatex |
---|
| 175 | # to build PDF output. |
---|
[28f3f4f] | 176 | build_doc=no |
---|
[6e1d45d] | 177 | AC_PATH_PROG([PANDOC], [pandoc], [no]) |
---|
| 178 | if test "$PANDOC" != "no"; then |
---|
| 179 | AC_PATH_PROG([PDFLATEX], [pdflatex], [no]) |
---|
[28f3f4f] | 180 | if test "$PDFLATEX" != "no"; then |
---|
| 181 | build_doc=yes |
---|
| 182 | else |
---|
| 183 | build_doc="html only" |
---|
| 184 | fi |
---|
[7225749] | 185 | else |
---|
| 186 | AC_PATH_PROG([MARKDOWN], [markdown], [no]) |
---|
| 187 | if test "$MARKDOWN" != "no"; then |
---|
| 188 | build_doc="html stub" |
---|
| 189 | fi |
---|
[6e1d45d] | 190 | fi |
---|
| 191 | AM_CONDITIONAL([USE_PANDOC], [test "$PANDOC" != "no"]) |
---|
| 192 | AM_CONDITIONAL([USE_PDFLATEX], [test "$PANDOC" != "no" && \ |
---|
| 193 | test "$PDFLATEX" != "no"]) |
---|
[7225749] | 194 | AM_CONDITIONAL([USE_MARKDOWN], [test -n "$MARKDOWN" && \ |
---|
| 195 | test "$MARKDOWN" != "no"]) |
---|
[6e1d45d] | 196 | |
---|
[af7da2d] | 197 | # Check for Apache binary |
---|
[83b3901] | 198 | AC_PATH_PROGS([APACHE2], [apache2 httpd], [no], [$PATH:/usr/sbin]) |
---|
[af7da2d] | 199 | if test "${APACHE2}" = "no"; then |
---|
| 200 | AC_MSG_WARN([Neither apache2 nor httpd found in \ |
---|
[52c3f68] | 201 | PATH. Test suite will fail.]) |
---|
| 202 | fi |
---|
| 203 | |
---|
[67f2f58] | 204 | AC_PATH_PROGS([HTTP_CLI], [curl wget], [no]) |
---|
| 205 | |
---|
[fd82e59] | 206 | MODULE_CFLAGS="${LIBGNUTLS_CFLAGS} ${SRP_CFLAGS} ${MSVA_CFLAGS} ${APR_MEMCACHE_CFLAGS} ${APXS_CFLAGS} ${AP_INCLUDES} ${APR_INCLUDES} ${APU_INCLUDES} ${STRICT_CFLAGS}" |
---|
[5021874] | 207 | MODULE_LIBS="${APR_MEMCACHE_LIBS} ${LIBGNUTLS_LIBS}" |
---|
[9706fc2] | 208 | |
---|
[b0e5dae] | 209 | AC_PATH_PROGS([SOFTHSM], [softhsm2-util softhsm], [no]) |
---|
[74772b2] | 210 | if test "${SOFTHSM}" != "no"; then |
---|
| 211 | softhsm_version=$(${SOFTHSM} --version) |
---|
| 212 | AS_VERSION_COMPARE([$(${SOFTHSM} --version)], [2.0.0], |
---|
| 213 | [AC_SUBST(SOFTHSM_MAJOR_VERSION, [1])], |
---|
| 214 | [AC_SUBST(SOFTHSM_MAJOR_VERSION, [2])], |
---|
| 215 | [AC_SUBST(SOFTHSM_MAJOR_VERSION, [2])]) |
---|
| 216 | fi |
---|
[5eb4544] | 217 | AM_CONDITIONAL([HAVE_SOFTHSM], [test "${SOFTHSM}" != "no"]) |
---|
[74772b2] | 218 | AM_CONDITIONAL([HAVE_SOFTHSM1], [test "${SOFTHSM_MAJOR_VERSION}" = "1"]) |
---|
| 219 | AM_CONDITIONAL([HAVE_SOFTHSM2], [test "${SOFTHSM_MAJOR_VERSION}" = "2"]) |
---|
[5eb4544] | 220 | |
---|
[9706fc2] | 221 | AC_SUBST(MODULE_CFLAGS) |
---|
[16068f4] | 222 | AC_SUBST(MODULE_LIBS) |
---|
[9706fc2] | 223 | |
---|
[26081ce] | 224 | # assign default values to TEST_HOST and TEST_IP if necessary |
---|
| 225 | : ${TEST_HOST:="localhost"} |
---|
[a08b25e] | 226 | : ${TEST_IP:="[[::1]] 127.0.0.1"} |
---|
[26081ce] | 227 | AC_ARG_VAR([TEST_HOST], [Host name to use for server instances started by \ |
---|
[a08b25e] | 228 | "make check", must resolve to addresses in TEST_IP. \ |
---|
| 229 | The default is "localhost".]) |
---|
| 230 | AC_ARG_VAR([TEST_IP], [List of IP addresses to use for server instances \ |
---|
| 231 | started by "make check". The default is \ |
---|
| 232 | "[::1] 127.0.0.1". Note that IPv6 addresses must be \ |
---|
| 233 | enclosed in square brackets.]) |
---|
| 234 | AM_SUBST_NOTMAKE(TEST_IP) |
---|
| 235 | |
---|
[aeaf28b] | 236 | dnl Allow user to set SoftHSM PKCS #11 module |
---|
| 237 | AC_ARG_VAR([SOFTHSM_LIB], [Absolute path of the SoftHSM PKCS @%:@11 module to \ |
---|
| 238 | use. By default the test suite will search common \ |
---|
| 239 | library paths.]) |
---|
| 240 | |
---|
[a08b25e] | 241 | dnl Build list of "Listen" statements for Apache |
---|
[21181b2] | 242 | LISTEN_LIST="@%:@ Listen addresses for the test servers" |
---|
[a08b25e] | 243 | for i in ${TEST_IP}; do |
---|
| 244 | LISTEN_LIST="${LISTEN_LIST} |
---|
| 245 | Listen ${i}:\${TEST_PORT}" |
---|
| 246 | done |
---|
[21181b2] | 247 | # Available extra ports, tests can "Define" variables of the listed |
---|
| 248 | # names in their apache.conf to enable them. |
---|
| 249 | for j in TEST_HTTP_PORT OCSP_PORT; do |
---|
[8ac7c0d] | 250 | LISTEN_LIST="${LISTEN_LIST} |
---|
[21181b2] | 251 | <IfDefine ${j}>" |
---|
[8ac7c0d] | 252 | for i in ${TEST_IP}; do |
---|
| 253 | LISTEN_LIST="${LISTEN_LIST} |
---|
[21181b2] | 254 | Listen ${i}:\${${j}}" |
---|
[8ac7c0d] | 255 | done |
---|
| 256 | LISTEN_LIST="${LISTEN_LIST} |
---|
| 257 | </IfDefine>" |
---|
[21181b2] | 258 | done |
---|
[a08b25e] | 259 | AC_SUBST(LISTEN_LIST) |
---|
| 260 | AM_SUBST_NOTMAKE(LISTEN_LIST) |
---|
[26081ce] | 261 | |
---|
[9a18e30] | 262 | DX_DOXYGEN_FEATURE(ON) |
---|
| 263 | DX_DOT_FEATURE(ON) |
---|
| 264 | DX_HTML_FEATURE(ON) |
---|
| 265 | DX_MAN_FEATURE(OFF) |
---|
| 266 | DX_RTF_FEATURE(OFF) |
---|
| 267 | DX_XML_FEATURE(OFF) |
---|
| 268 | DX_PDF_FEATURE(ON) |
---|
| 269 | DX_PS_FEATURE(OFF) |
---|
| 270 | DX_INIT_DOXYGEN([mod_gnutls], [doc/doxygen.conf], [doc/api]) |
---|
| 271 | |
---|
[6e1d45d] | 272 | AC_CONFIG_FILES([Makefile src/Makefile test/Makefile test/tests/Makefile \ |
---|
[9a18e30] | 273 | doc/Makefile doc/doxygen.conf include/mod_gnutls.h \ |
---|
[f87c1b5] | 274 | test/proxy_backend.conf \ |
---|
[ddf6027] | 275 | test/apache-conf/listen.conf \ |
---|
| 276 | test/apache-conf/netns.conf]) |
---|
[9706fc2] | 277 | AC_OUTPUT |
---|
| 278 | |
---|
| 279 | echo "---" |
---|
[42307a9] | 280 | echo "Configuration summary for mod_gnutls:" |
---|
[9706fc2] | 281 | echo "" |
---|
[ea14e97] | 282 | echo " * mod_gnutls version: ${MOD_GNUTLS_VERSION}" |
---|
[16068f4] | 283 | echo " * Apache Modules directory: ${AP_LIBEXECDIR}" |
---|
[42307a9] | 284 | echo " * GnuTLS Library version: ${LIBGNUTLS_VERSION}" |
---|
[28f3f4f] | 285 | echo " * SRP Authentication: ${use_srp}" |
---|
| 286 | echo " * MSVA Client Verification: ${use_msva}" |
---|
| 287 | echo " * Build documentation: ${build_doc}" |
---|
[9706fc2] | 288 | echo "" |
---|
| 289 | echo "---" |
---|