configure.ac 86.6 KB
Newer Older
Roger Dingledine's avatar
Roger Dingledine committed
1
dnl Copyright (c) 2001-2004, Roger Dingledine
2
dnl Copyright (c) 2004-2006, Roger Dingledine, Nick Mathewson
Nick Mathewson's avatar
Nick Mathewson committed
3
dnl Copyright (c) 2007-2019, The Tor Project, Inc.
Nick Mathewson's avatar
Nick Mathewson committed
4
dnl See LICENSE for licensing information
5

6
AC_PREREQ([2.63])
Nick Mathewson's avatar
Nick Mathewson committed
7
AC_INIT([tor],[0.4.3.4-rc])
8
AC_CONFIG_SRCDIR([src/app/main/tor_main.c])
9
AC_CONFIG_MACRO_DIR([m4])
10

11
12
configure_flags="$*"

13
14
15
16
17
18
# DO NOT EDIT THIS DEFINITION BY HAND UNLESS YOU KNOW WHAT YOU'RE DOING.
#
# The update_versions.py script updates this definition when the
# version number changes.  Tor uses it to make sure that it
# only shuts down for missing "required protocols" when those protocols
# are listed as required by a consensus after this date.
Nick Mathewson's avatar
Nick Mathewson committed
19
AC_DEFINE(APPROX_RELEASE_DATE, ["2020-04-09"], # for 0.4.3.4-rc
20
21
          [Approximate date when this software was released. (Updated when the version changes.)])

22
23
24
# "foreign" means we don't follow GNU package layout standards
# "1.11" means we require automake version 1.11 or newer
# "subdir-objects" means put .o files in the same directory as the .c files
25
AM_INIT_AUTOMAKE([foreign 1.11 subdir-objects -Wall -Werror])
26

27
m4_ifdef([AM_SILENT_RULES], [AM_SILENT_RULES([yes])])
28
AC_CONFIG_HEADERS([orconfig.h])
29

30
AC_USE_SYSTEM_EXTENSIONS
31
32
AC_CANONICAL_HOST

33
PKG_PROG_PKG_CONFIG
34
if test "x$PKG_CONFIG" = "x" ; then
35
    pkg_config_user_action="install pkg-config, and check the PKG_CONFIG_PATH environment variable"
36
    AC_MSG_NOTICE([Some libraries need pkg-config, including systemd, nss, lzma, zstd, and custom mallocs.])
37
    AC_MSG_NOTICE([To use those libraries, $pkg_config_user_action.])
38
else
39
    pkg_config_user_action="check the PKG_CONFIG_PATH environment variable"
40
fi
41

42
43
44
45
46
if test "x$PKG_CONFIG_PATH" = "x" && test "x$prefix" != "xNONE" && test "$host" != "$build"; then
   export PKG_CONFIG_PATH=$prefix/lib/pkgconfig
   AC_MSG_NOTICE([set PKG_CONFIG_PATH=$PKG_CONFIG_PATH to support cross-compiling])
fi

47
AC_ARG_ENABLE(openbsd-malloc,
48
   AS_HELP_STRING(--enable-openbsd-malloc, [use malloc code from OpenBSD.  Linux only. Deprecated: see --with-malloc]))
49
AC_ARG_ENABLE(static-openssl,
50
   AS_HELP_STRING(--enable-static-openssl, [link against a static openssl library. Requires --with-openssl-dir]))
51
AC_ARG_ENABLE(static-libevent,
52
   AS_HELP_STRING(--enable-static-libevent, [link against a static libevent library. Requires --with-libevent-dir]))
53
AC_ARG_ENABLE(static-zlib,
54
   AS_HELP_STRING(--enable-static-zlib, [link against a static zlib library. Requires --with-zlib-dir]))
55
AC_ARG_ENABLE(static-tor,
56
   AS_HELP_STRING(--enable-static-tor, [create an entirely static Tor binary. Requires --with-openssl-dir and --with-libevent-dir and --with-zlib-dir]))
57
AC_ARG_ENABLE(unittests,
58
   AS_HELP_STRING(--disable-unittests, [don't build unit tests for Tor. Risky!]))
59
AC_ARG_ENABLE(coverage,
60
   AS_HELP_STRING(--enable-coverage, [enable coverage support in the unit-test build]))
61
62
AC_ARG_ENABLE(asserts-in-tests,
   AS_HELP_STRING(--disable-asserts-in-tests, [disable tor_assert() calls in the unit tests, for branch coverage]))
63
AC_ARG_ENABLE(system-torrc,
64
   AS_HELP_STRING(--disable-system-torrc, [don't look for a system-wide torrc file]))
Nick Mathewson's avatar
Nick Mathewson committed
65
AC_ARG_ENABLE(libfuzzer,
66
67
68
   AS_HELP_STRING(--enable-libfuzzer, [build extra fuzzers based on 'libfuzzer']))
AC_ARG_ENABLE(oss-fuzz,
   AS_HELP_STRING(--enable-oss-fuzz, [build extra fuzzers based on 'oss-fuzz' environment]))
69
70
AC_ARG_ENABLE(memory-sentinels,
   AS_HELP_STRING(--disable-memory-sentinels, [disable code that tries to prevent some kinds of memory access bugs. For fuzzing only.]))
71
72
AC_ARG_ENABLE(rust,
   AS_HELP_STRING(--enable-rust, [enable rust integration]))
73
74
AC_ARG_ENABLE(cargo-online-mode,
   AS_HELP_STRING(--enable-cargo-online-mode, [Allow cargo to make network requests to fetch crates. For builds with rust only.]))
75
76
AC_ARG_ENABLE(restart-debugging,
   AS_HELP_STRING(--enable-restart-debugging, [Build Tor with support for debugging in-process restart. Developers only.]))
77
78
AC_ARG_ENABLE(zstd-advanced-apis,
   AS_HELP_STRING(--disable-zstd-advanced-apis, [Build without support for zstd's "static-only" APIs.]))
79
80
AC_ARG_ENABLE(nss,
   AS_HELP_STRING(--enable-nss, [Use Mozilla's NSS TLS library. (EXPERIMENTAL)]))
81
82
AC_ARG_ENABLE(pic,
   AS_HELP_STRING(--enable-pic, [Build Tor's binaries as position-independent code, suitable to link as a library.]))
83

84
AC_ARG_ENABLE(missing-doc-warnings,
85
   AS_HELP_STRING(--enable-missing-doc-warnings, [Tell doxygen to warn about missing documentation. Makes doxygen warnings nonfatal.]))
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101

if test "$enable_missing_doc_warnings" = "yes"; then
   DOXYGEN_FATAL_WARNINGS=NO
   DOXYGEN_WARN_ON_MISSING=YES
elif test "$enable_fatal_warnings" = "yes"; then
   # Fatal warnings from doxygen are nice, but not if we're warning about
   # missing documentation.
   DOXYGEN_FATAL_WARNINGS=YES
   DOXYGEN_WARN_ON_MISSING=NO
else
   DOXYGEN_FATAL_WARNINGS=NO
   DOXYGEN_WARN_ON_MISSING=NO
fi
AC_SUBST(DOXYGEN_FATAL_WARNINGS)
AC_SUBST(DOXYGEN_WARN_ON_MISSING)

102
if test "x$enable_coverage" != "xyes" -a "x$enable_asserts_in_tests" = "xno" ; then
103
104
105
    AC_MSG_ERROR([Can't disable assertions outside of coverage build])
fi

106
107
108
AM_CONDITIONAL(UNITTESTS_ENABLED, test "x$enable_unittests" != "xno")
AM_CONDITIONAL(COVERAGE_ENABLED, test "x$enable_coverage" = "xyes")
AM_CONDITIONAL(DISABLE_ASSERTS_IN_UNIT_TESTS, test "x$enable_asserts_in_tests" = "xno")
Nick Mathewson's avatar
Nick Mathewson committed
109
AM_CONDITIONAL(LIBFUZZER_ENABLED, test "x$enable_libfuzzer" = "xyes")
110
AM_CONDITIONAL(OSS_FUZZ_ENABLED, test "x$enable_oss_fuzz" = "xyes")
111
AM_CONDITIONAL(USE_RUST, test "x$enable_rust" = "xyes")
112
AM_CONDITIONAL(USE_NSS, test "x$enable_nss" = "xyes")
113
AM_CONDITIONAL(USE_OPENSSL, test "x$enable_nss" != "xyes")
114
115
116

if test "x$enable_nss" = "xyes"; then
  AC_DEFINE(ENABLE_NSS, 1,
117
  	    [Defined if we're building with NSS.])
118
119
120
else
  AC_DEFINE(ENABLE_OPENSSL, 1,
            [Defined if we're building with OpenSSL or LibreSSL])
121
fi
122

123
124
125
126
127
128
if test "$enable_static_tor" = "yes"; then
  enable_static_libevent="yes";
  enable_static_openssl="yes";
  enable_static_zlib="yes";
  CFLAGS="$CFLAGS -static"
fi
129

130
131
132
133
134
if test "$enable_system_torrc" = "no"; then
  AC_DEFINE(DISABLE_SYSTEM_TORRC, 1,
            [Defined if we're not going to look for a torrc in SYSCONF])
fi

135
136
137
138
139
if test "$enable_memory_sentinels" = "no"; then
  AC_DEFINE(DISABLE_MEMORY_SENTINELS, 1,
           [Defined if we're turning off memory safety code to look for bugs])
fi

140
141
142
143
144
145
AC_ARG_ENABLE(manpage,
              AS_HELP_STRING(--disable-manpage, [Disable manpage generation.]))

AC_ARG_ENABLE(html-manual,
              AS_HELP_STRING(--disable-html-manual, [Disable HTML documentation.]))

146
AC_ARG_ENABLE(asciidoc,
147
     AS_HELP_STRING(--disable-asciidoc, [don't use asciidoc (disables building of manpages)]),
148
     [case "${enableval}" in
149
150
        "yes") asciidoc=true ;;
        "no")  asciidoc=false ;;
151
152
153
        *) AC_MSG_ERROR(bad value for --disable-asciidoc) ;;
      esac], [asciidoc=true])

154
155
# systemd notify support
AC_ARG_ENABLE(systemd,
156
      AS_HELP_STRING(--enable-systemd, [enable systemd notification support]),
157
      [case "${enableval}" in
158
159
        "yes") systemd=true ;;
        "no")  systemd=false ;;
160
161
162
        * ) AC_MSG_ERROR(bad value for --enable-systemd) ;;
      esac], [systemd=auto])

163
164
165
166
if test "$enable_restart_debugging" = "yes"; then
  AC_DEFINE(ENABLE_RESTART_DEBUGGING, 1,
            [Defined if we're building with support for in-process restart debugging.])
fi
167

168
169
170
171
if test "$enable_zstd_advanced_apis" != "no"; then
   AC_DEFINE(ENABLE_ZSTD_ADVANCED_APIS, 1,
             [Defined if we're going to try to use zstd's "static-only" APIs.])
fi
172
173

# systemd support
174
if test "x$enable_systemd" = "xno"; then
175
176
177
178
179
180
    have_systemd=no;
else
    PKG_CHECK_MODULES(SYSTEMD,
        [libsystemd-daemon],
        have_systemd=yes,
        have_systemd=no)
181
    if test "x$have_systemd" = "xno"; then
182
183
184
185
186
187
        AC_MSG_NOTICE([Okay, checking for systemd a different way...])
        PKG_CHECK_MODULES(SYSTEMD,
            [libsystemd],
            have_systemd=yes,
            have_systemd=no)
    fi
188
189
fi

190
if test "x$have_systemd" = "xyes"; then
191
    AC_DEFINE(HAVE_SYSTEMD,1,[Have systemd])
192
    TOR_SYSTEMD_CFLAGS="${SYSTEMD_CFLAGS}"
193
    TOR_SYSTEMD_LIBS="${SYSTEMD_LIBS}"
194
    PKG_CHECK_MODULES(LIBSYSTEMD209, [libsystemd >= 209],
195
         [AC_DEFINE(HAVE_SYSTEMD_209,1,[Have systemd v209 or greater])], [])
196
fi
197
AC_SUBST(TOR_SYSTEMD_CFLAGS)
198
199
AC_SUBST(TOR_SYSTEMD_LIBS)

200
if test "x$enable_systemd" = "xyes" -a "x$have_systemd" != "xyes" ; then
201
    AC_MSG_ERROR([Explicitly requested systemd support, but systemd not found, $pkg_config_user_action, or set SYSTEMD_CFLAGS and SYSTEMD_LIBS.])
202
203
fi

204
case "$host" in
205
206
207
208
209
   *-*-solaris* )
     AC_DEFINE(_REENTRANT, 1, [Define on some platforms to activate x_r() functions in time.h])
     ;;
esac

210
AC_ARG_ENABLE(gcc-warnings,
211
212
213
     AS_HELP_STRING(--enable-gcc-warnings, [deprecated alias for enable-fatal-warnings]))
AC_ARG_ENABLE(fatal-warnings,
     AS_HELP_STRING(--enable-fatal-warnings, [tell the compiler to treat all warnings as errors.]))
214
AC_ARG_ENABLE(gcc-warnings-advisory,
215
     AS_HELP_STRING(--disable-gcc-warnings-advisory, [disable the regular verbose warnings]))
216

217
218
dnl Others suggest '/gs /safeseh /nxcompat /dynamicbase' for non-gcc on Windows
AC_ARG_ENABLE(gcc-hardening,
219
    AS_HELP_STRING(--disable-gcc-hardening, [disable compiler security checks]))
220

221
dnl Deprecated --enable-expensive-hardening but keep it for now for backward compat.
222
AC_ARG_ENABLE(expensive-hardening,
223
224
225
226
227
    AS_HELP_STRING(--enable-expensive-hardening, [enable more fragile and expensive compiler hardening; makes Tor slower]))
AC_ARG_ENABLE(fragile-hardening,
    AS_HELP_STRING(--enable-fragile-hardening, [enable more fragile and expensive compiler hardening; makes Tor slower]))
if test "x$enable_expensive_hardening" = "xyes" || test "x$enable_fragile_hardening" = "xyes"; then
  fragile_hardening="yes"
228
  AC_DEFINE(DEBUG_SMARTLIST, 1, [Enable smartlist debugging])
229
fi
230

231
232
233
dnl Linker hardening options
dnl Currently these options are ELF specific - you can't use this with MacOSX
AC_ARG_ENABLE(linker-hardening,
234
    AS_HELP_STRING(--disable-linker-hardening, [disable linker security fixups]))
235

236
AC_ARG_ENABLE(local-appdata,
237
   AS_HELP_STRING(--enable-local-appdata, [default to host local application data paths on Windows]))
238
239
240
241
242
if test "$enable_local_appdata" = "yes"; then
  AC_DEFINE(ENABLE_LOCAL_APPDATA, 1,
            [Defined if we default to host local appdata paths on Windows])
fi

243
AC_ARG_ENABLE(tool-name-check,
244
     AS_HELP_STRING(--disable-tool-name-check, [check for sanely named toolchain when cross-compiling]))
245

246
AC_ARG_ENABLE(seccomp,
247
     AS_HELP_STRING(--disable-seccomp, [do not attempt to use libseccomp]))
248

249
AC_ARG_ENABLE(libscrypt,
250
     AS_HELP_STRING(--disable-libscrypt, [do not attempt to use libscrypt]))
251

252
253
254
255
256
257
258
259
260
261
dnl Enable event tracing which are transformed to debug log statement.
AC_ARG_ENABLE(event-tracing-debug,
     AS_HELP_STRING(--enable-event-tracing-debug, [build with event tracing to debug log]))
AM_CONDITIONAL([USE_EVENT_TRACING_DEBUG], [test "x$enable_event_tracing_debug" = "xyes"])

if test x$enable_event_tracing_debug = xyes; then
  AC_DEFINE([USE_EVENT_TRACING_DEBUG], [1], [Tracing framework to log debug])
  AC_DEFINE([TOR_EVENT_TRACING_ENABLED], [1], [Compile the event tracing instrumentation])
fi

262
263
264
265
266
267
268
269
270
271
272
273
274
275
dnl Enable Android only features.
AC_ARG_ENABLE(android,
     AS_HELP_STRING(--enable-android, [build with Android features enabled]))
AM_CONDITIONAL([USE_ANDROID], [test "x$enable_android" = "xyes"])

if test "x$enable_android" = "xyes"; then
  AC_DEFINE([USE_ANDROID], [1], [Compile with Android specific features enabled])

  dnl Check if the Android log library is available.
  AC_CHECK_HEADERS([android/log.h])
  AC_SEARCH_LIBS(__android_log_write, [log])

fi

276
277
278
279
dnl ---
dnl Tor modules options. These options are namespaced with --disable-module-XXX
dnl ---

280
dnl All our modules.
Nick Mathewson's avatar
Nick Mathewson committed
281
m4_define(MODULES, relay dirauth dircache)
282
283
284
285

dnl Relay module.
AC_ARG_ENABLE([module-relay],
              AS_HELP_STRING([--disable-module-relay],
286
                             [Build tor without the Relay modules: tor can not run as a relay, bridge, or authority. Implies --disable-module-dirauth]))
287
288
289
290
AM_CONDITIONAL(BUILD_MODULE_RELAY, [test "x$enable_module_relay" != "xno"])
AM_COND_IF(BUILD_MODULE_RELAY,
           AC_DEFINE([HAVE_MODULE_RELAY], [1],
                     [Compile with Relay feature support]))
291

Nick Mathewson's avatar
Nick Mathewson committed
292
dnl Dircache module.  (This cannot be enabled or disabled independently of
293
dnl the relay module.  It is not listed by --list-modules for this reason.)
Nick Mathewson's avatar
Nick Mathewson committed
294
295
296
297
298
299
AM_CONDITIONAL(BUILD_MODULE_DIRCACHE,
               [test "x$enable_module_relay" != "xno"])
AM_COND_IF(BUILD_MODULE_DIRCACHE,
           AC_DEFINE([HAVE_MODULE_DIRCACHE], [1],
                     [Compile with directory cache support]))

300
301
302
dnl Directory Authority module.
AC_ARG_ENABLE([module-dirauth],
              AS_HELP_STRING([--disable-module-dirauth],
303
                             [Build tor without the Directory Authority module: tor can not run as a directory authority or bridge authority]))
304
AM_CONDITIONAL(BUILD_MODULE_DIRAUTH,[test "x$enable_module_dirauth" != "xno" && test "x$enable_module_relay" != "xno"])
305
306
307
AM_COND_IF(BUILD_MODULE_DIRAUTH,
           AC_DEFINE([HAVE_MODULE_DIRAUTH], [1],
                     [Compile with Directory Authority feature support]))
308

309
310
311
312
313
314
315
316
317
dnl Helper variables.
TOR_MODULES_ALL_ENABLED=
AC_DEFUN([ADD_MODULE], [
    MODULE=m4_toupper($1)
    TOR_MODULES_ALL_ENABLED="${TOR_MODULES_ALL_ENABLED} -DHAVE_MODULE_${MODULE}=1"
])
m4_foreach_w([module], MODULES, [ADD_MODULE([module])])
AC_SUBST(TOR_MODULES_ALL_ENABLED)

318
319
320
321
322
323
324
325
326
dnl check for the correct "ar" when cross-compiling.
dnl   (AM_PROG_AR was new in automake 1.11.2, which we do not yet require,
dnl    so kludge up a replacement for the case where it isn't there yet.)
m4_ifdef([AM_PROG_AR],
         [AM_PROG_AR],
         [AN_MAKEVAR([AR], [AC_PROG_AR])
          AN_PROGRAM([ar], [AC_PROG_AR])
          AC_DEFUN([AC_PROG_AR], [AC_CHECK_TOOL([AR], [ar], [:])])
          AC_PROG_AR])
327

328
329
330
331
332
333
dnl Check whether the above macro has settled for a simply named tool even
dnl though we're cross compiling. We must do this before running AC_PROG_CC,
dnl because that will find any cc on the system, not only the cross-compiler,
dnl and then verify that a binary built with this compiler runs on the
dnl build system. It will then come to the false conclusion that we're not
dnl cross-compiling.
334
335
if test "x$enable_tool_name_check" != "xno"; then
    if test "x$ac_tool_warned" = "xyes"; then
336
        AC_MSG_ERROR([We are cross compiling but could not find a properly named toolchain. Do you have your cross-compiling toolchain in PATH? (You can --disable-tool-name-check to ignore this.)])
337
	elif test "x$ac_ct_AR" != "x" -a "x$cross_compiling" = "xmaybe"; then
338
339
340
341
		AC_MSG_ERROR([We think we are cross compiling but could not find a properly named toolchain. Do you have your cross-compiling toolchain in PATH? (You can --disable-tool-name-check to ignore this.)])
	fi
fi

342
AC_PROG_CC
343
AC_PROG_CPP
344
345
AC_PROG_MAKE_SET
AC_PROG_RANLIB
346
AC_PROG_SED
347

348
349
350
AC_ARG_VAR([PERL], [path to Perl binary])
AC_CHECK_PROGS([PERL], [perl])
AM_CONDITIONAL(USE_PERL, [test "x$ac_cv_prog_PERL" != "x"])
351

352
353
dnl check for asciidoc and a2x
AC_PATH_PROG([ASCIIDOC], [asciidoc], none)
354
AC_PATH_PROGS([A2X], [a2x a2x.py], none)
355

356
AM_CONDITIONAL(USE_ASCIIDOC, test "x$asciidoc" = "xtrue")
357
358
AM_CONDITIONAL(BUILD_MANPAGE, [test "x$enable_manpage" != "xno"])
AM_CONDITIONAL(BUILD_HTML_DOCS, [test "x$enable_html_manual" != "xno"])
359

360
AM_PROG_CC_C_O
361
AC_PROG_CC_C99
362

Nick Mathewson's avatar
Nick Mathewson committed
363
364
AC_CACHE_CHECK([for Python 3], [tor_cv_PYTHON],
   [AC_PATH_PROGS_FEATURE_CHECK([PYTHON], [ \
365
366
	python3 \
	python3.8 python3.7 python3.6 python3.5 python3.4 \
Nick Mathewson's avatar
Nick Mathewson committed
367
368
369
370
371
372
	python ],
   [["$ac_path_PYTHON" -c 'import sys; sys.exit(sys.version_info[0]<3)' && tor_cv_PYTHON="$ac_path_PYTHON" ac_path_PYTHON_found=:]] )])
AC_SUBST([PYTHON], [$tor_cv_PYTHON])

PYTHON="$tor_cv_PYTHON"

373
if test "x$PYTHON" = "x"; then
Nick Mathewson's avatar
Nick Mathewson committed
374
  AC_MSG_WARN([Python 3 unavailable; some tests will not be run.])
375
fi
Nick Mathewson's avatar
Nick Mathewson committed
376

377
378
AM_CONDITIONAL(USEPYTHON, [test "x$PYTHON" != "x"])

379
dnl List all external rust crates we depend on here. Include the version
380
381
382
383
rust_crates=" \
    digest-0.7.2 \
    libc-0.2.39 \
"
384
AC_SUBST(rust_crates)
385

386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
ifdef([AC_C_FLEXIBLE_ARRAY_MEMBER], [
AC_C_FLEXIBLE_ARRAY_MEMBER
], [
 dnl Maybe we've got an old autoconf...
 AC_CACHE_CHECK([for flexible array members],
     tor_cv_c_flexarray,
     [AC_COMPILE_IFELSE(
       AC_LANG_PROGRAM([
 struct abc { int a; char b[]; };
], [
 struct abc *def = malloc(sizeof(struct abc)+sizeof(char));
 def->b[0] = 33;
]),
  [tor_cv_c_flexarray=yes],
  [tor_cv_c_flexarray=no])])
401
 if test "$tor_cv_flexarray" = "yes"; then
402
   AC_DEFINE([FLEXIBLE_ARRAY_MEMBER], [], [Define to nothing if C supports flexible array members, and to 1 if it does not.])
403
 else
404
   AC_DEFINE([FLEXIBLE_ARRAY_MEMBER], [1], [Define to nothing if C supports flexible array members, and to 1 if it does not.])
405
406
407
 fi
])

408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
AC_CACHE_CHECK([for working C99 mid-block declaration syntax],
      tor_cv_c_c99_decl,
      [AC_COMPILE_IFELSE(
         [AC_LANG_PROGRAM([], [int x; x = 3; int y; y = 4 + x;])],
	 [tor_cv_c_c99_decl=yes],
	 [tor_cv_c_c99_decl=no] )])
if test "$tor_cv_c_c99_decl" != "yes"; then
  AC_MSG_ERROR([Your compiler doesn't support c99 mid-block declarations. This is required as of Tor 0.2.6.x])
fi

AC_CACHE_CHECK([for working C99 designated initializers],
      tor_cv_c_c99_designated_init,
      [AC_COMPILE_IFELSE(
         [AC_LANG_PROGRAM([struct s { int a; int b; };],
  	       [[ struct s ss = { .b = 5, .a = 6 }; ]])],
	 [tor_cv_c_c99_designated_init=yes],
	 [tor_cv_c_c99_designated_init=no] )])

if test "$tor_cv_c_c99_designated_init" != "yes"; then
  AC_MSG_ERROR([Your compiler doesn't support c99 designated initializers. This is required as of Tor 0.2.6.x])
fi

430
431
TORUSER=_tor
AC_ARG_WITH(tor-user,
432
        AS_HELP_STRING(--with-tor-user=NAME, [specify username for tor daemon]),
433
434
435
436
437
438
439
440
        [
           TORUSER=$withval
        ]
)
AC_SUBST(TORUSER)

TORGROUP=_tor
AC_ARG_WITH(tor-group,
441
        AS_HELP_STRING(--with-tor-group=NAME, [specify group name for tor daemon]),
442
443
444
445
446
447
        [
           TORGROUP=$withval
        ]
)
AC_SUBST(TORGROUP)

448

449
dnl If _WIN32 is defined and non-zero, we are building for win32
450
AC_MSG_CHECKING([for win32])
451
AC_RUN_IFELSE([AC_LANG_SOURCE([
452
int main(int c, char **v) {
453
454
#ifdef _WIN32
#if _WIN32
455
456
457
458
459
460
461
  return 0;
#else
  return 1;
#endif
#else
  return 2;
#endif
462
}])],
463
bwin32=true; AC_MSG_RESULT([yes]),
464
465
bwin32=false; AC_MSG_RESULT([no]),
bwin32=cross; AC_MSG_RESULT([cross])
466
467
)

468
if test "$bwin32" = "cross"; then
469
AC_MSG_CHECKING([for win32 (cross)])
470
AC_COMPILE_IFELSE([AC_LANG_SOURCE([
471
#ifdef _WIN32
472
473
474
475
476
int main(int c, char **v) {return 0;}
#else
#error
int main(int c, char **v) {return x(y);}
#endif
477
])],
478
479
480
481
bwin32=true; AC_MSG_RESULT([yes]),
bwin32=false; AC_MSG_RESULT([no]))
fi

482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
AH_BOTTOM([
#ifdef _WIN32
/* Defined to access windows functions and definitions for >=WinXP */
# ifndef WINVER
#  define WINVER 0x0501
# endif

/* Defined to access _other_ windows functions and definitions for >=WinXP */
# ifndef _WIN32_WINNT
#  define _WIN32_WINNT 0x0501
# endif

/* Defined to avoid including some windows headers as part of Windows.h */
# ifndef WIN32_LEAN_AND_MEAN
#  define WIN32_LEAN_AND_MEAN 1
# endif
#endif
])

501
AM_CONDITIONAL(WIN32, test "x$bwin32" = "xtrue")
502
AM_CONDITIONAL(BUILD_NT_SERVICES, test "x$bwin32" = "xtrue")
503
AM_CONDITIONAL(BUILD_LIBTORRUNNER, test "x$bwin32" != "xtrue")
504

505
506
dnl Enable C99 when compiling with MIPSpro
AC_MSG_CHECKING([for MIPSpro compiler])
507
AC_COMPILE_IFELSE([AC_LANG_PROGRAM(, [
508
509
510
511
#if (defined(__sgi) && defined(_COMPILER_VERSION))
#error
  return x(y);
#endif
512
])],
513
bmipspro=false; AC_MSG_RESULT(no),
514
bmipspro=true; AC_MSG_RESULT(yes))
515

516
if test "$bmipspro" = "true"; then
517
518
519
  CFLAGS="$CFLAGS -c99"
fi

520
521
AC_C_BIGENDIAN

Alex Xu's avatar
Alex Xu committed
522
523
AC_ARG_VAR([TOR_RUST_TARGET], [Rust target, must be specified when cross-compiling (HOST != BUILD). example: i686-pc-windows-gnu])

524
525
526
527
528
529
530
531
532
533
534
535
536
537
if test "x$enable_rust" = "xyes"; then
  AC_ARG_VAR([RUSTC], [path to the rustc binary])
  AC_CHECK_PROG([RUSTC], [rustc], [rustc],[no])
  if test "x$RUSTC" = "xno"; then
    AC_MSG_ERROR([rustc unavailable but rust integration requested.])
  fi

  AC_ARG_VAR([CARGO], [path to the cargo binary])
  AC_CHECK_PROG([CARGO], [cargo], [cargo],[no])
  if test "x$CARGO" = "xno"; then
    AC_MSG_ERROR([cargo unavailable but rust integration requested.])
  fi

  AC_DEFINE([HAVE_RUST], 1, [have Rust])
538
539
540
541
542
  if test "x$enable_fatal_warnings" = "xyes"; then
    RUST_WARN=
  else
    RUST_WARN=#
  fi
543
544
545
546
547
548
549
550
551
552
  if test "x$enable_cargo_online_mode" = "xyes"; then
    CARGO_ONLINE=
    RUST_DL=#
  else
    CARGO_ONLINE=--frozen
    RUST_DL=

    dnl When we're not allowed to touch the network, we need crate dependencies
    dnl locally available.
    AC_MSG_CHECKING([rust crate dependencies])
553
554
    AC_ARG_VAR([TOR_RUST_DEPENDENCIES], [path to directory with local crate mirror])
    if test "x$TOR_RUST_DEPENDENCIES" = "x"; then
555
      TOR_RUST_DEPENDENCIES="${srcdir}/src/ext/rust/crates"
556
    fi
557
    dnl Check whether the path exists before we try to cd into it.
558
559
    if test ! -d "$TOR_RUST_DEPENDENCIES"; then
      AC_MSG_ERROR([Rust dependency directory $TOR_RUST_DEPENDENCIES does not exist. Specify a dependency directory using the TOR_RUST_DEPENDENCIES variable or allow cargo to fetch crates using --enable-cargo-online-mode.])
560
      ERRORED=1
561
    fi
562
563
564
565
    dnl Make the path absolute, since we'll be using it from within a
    dnl subdirectory.
    TOR_RUST_DEPENDENCIES=$(cd "$TOR_RUST_DEPENDENCIES" ; pwd)

566
    for dep in $rust_crates; do
567
568
      if test ! -d "$TOR_RUST_DEPENDENCIES"/"$dep"; then
        AC_MSG_ERROR([Failure to find rust dependency $TOR_RUST_DEPENDENCIES/$dep. Specify a dependency directory using the TOR_RUST_DEPENDENCIES variable or allow cargo to fetch crates using --enable-cargo-online-mode.])
569
        ERRORED=1
570
571
      fi
    done
572
573
574
    if test "x$ERRORED" = "x"; then
      AC_MSG_RESULT([yes])
    fi
575
576
577
578
579
  fi

  dnl For now both MSVC and MinGW rust libraries will output static libs with
  dnl the MSVC naming convention.
  if test "$bwin32" = "true"; then
Alex Xu's avatar
Alex Xu committed
580
    tor_rust_static_name=tor_rust.lib
581
  else
Alex Xu's avatar
Alex Xu committed
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
    tor_rust_static_name=libtor_rust.a
  fi

  AC_CANONICAL_BUILD

  if test -n "$TOR_RUST_TARGET"; then
    if test "$host" = "$build"; then
      AC_MSG_ERROR([HOST = BUILD is invalid if TOR_RUST_TARGET is specified, see configure --help for more information.])
    fi
    RUST_TARGET_PROP="target = '$TOR_RUST_TARGET'"
    TOR_RUST_LIB_PATH="src/rust/target/$TOR_RUST_TARGET/release/$tor_rust_static_name"
  else
    if test "$host" != "$build"; then
      AC_MSG_ERROR([TOR_RUST_TARGET must be specified when cross-compiling with Rust enabled.])
    fi
    RUST_TARGET_PROP=
    TOR_RUST_LIB_PATH="src/rust/target/release/$tor_rust_static_name"
599
600
  fi

Alex Xu's avatar
Alex Xu committed
601
602
  AC_SUBST(RUST_TARGET_PROP)
  AC_SUBST(TOR_RUST_LIB_PATH)
603
  AC_SUBST(CARGO_ONLINE)
604
  AC_SUBST(RUST_WARN)
605
606
607
608
  AC_SUBST(RUST_DL)

  dnl Let's check the rustc version, too
  AC_MSG_CHECKING([rust version])
609
  RUSTC_VERSION=`$RUSTC --version`
610
611
612
613
614
  RUSTC_VERSION_MAJOR=`$RUSTC --version | cut -d ' ' -f 2 | cut -d '.' -f 1`
  RUSTC_VERSION_MINOR=`$RUSTC --version | cut -d ' ' -f 2 | cut -d '.' -f 2`
  if test "x$RUSTC_VERSION_MAJOR" = "x" -o "x$RUSTC_VERSION_MINOR" = "x"; then
    AC_MSG_ERROR([rustc version couldn't be identified])
  fi
615
616
  if test "$RUSTC_VERSION_MAJOR" -lt 2 -a "$RUSTC_VERSION_MINOR" -lt 31; then
    AC_MSG_ERROR([rustc must be at least version 1.31.0])
617
  fi
618
  AC_MSG_RESULT([$RUSTC_VERSION])
619
620
fi

621
AC_SEARCH_LIBS(socket, [socket network])
622
AC_SEARCH_LIBS(gethostbyname, [nsl])
623
AC_SEARCH_LIBS(dlopen, [dl])
624
AC_SEARCH_LIBS(inet_aton, [resolv])
625
AC_SEARCH_LIBS(backtrace, [execinfo])
626
627
628
629
630
631
saved_LIBS="$LIBS"
AC_SEARCH_LIBS([clock_gettime], [rt])
if test "$LIBS" != "$saved_LIBS"; then
   # Looks like we need -lrt for clock_gettime().
   have_rt=yes
fi
632

633
634
635
636
if test "$bwin32" = "false"; then
  AC_SEARCH_LIBS(pthread_create, [pthread])
  AC_SEARCH_LIBS(pthread_detach, [pthread])
fi
637

638
639
AM_CONDITIONAL(THREADS_WIN32, test "$bwin32" = "true")
AM_CONDITIONAL(THREADS_PTHREADS, test "$bwin32" = "false")
640

641
AC_CHECK_FUNCS(
Nick Mathewson's avatar
Nick Mathewson committed
642
	_NSGetEnviron \
643
644
	RtlSecureZeroMemory \
	SecureZeroMemory \
Nick Mathewson's avatar
Nick Mathewson committed
645
646
647
	accept4 \
	backtrace \
	backtrace_symbols_fd \
648
	eventfd \
649
	explicit_bzero \
650
	timingsafe_memcmp \
Nick Mathewson's avatar
Nick Mathewson committed
651
	flock \
652
	fsync \
Nick Mathewson's avatar
Nick Mathewson committed
653
654
655
	ftime \
	get_current_dir_name \
	getaddrinfo \
656
	getdelim \
Nick Mathewson's avatar
Nick Mathewson committed
657
	getifaddrs \
658
	getline \
Nick Mathewson's avatar
Nick Mathewson committed
659
660
661
662
	getpass \
	getrlimit \
	gettimeofday \
	gmtime_r \
663
	gnu_get_libc_version \
664
	htonll \
Nick Mathewson's avatar
Nick Mathewson committed
665
666
667
668
669
670
	inet_aton \
	ioctl \
	issetugid \
	llround \
	localtime_r \
	lround \
671
	madvise \
Nick Mathewson's avatar
Nick Mathewson committed
672
673
	memmem \
	memset_s \
674
	minherit \
Nick Mathewson's avatar
Nick Mathewson committed
675
	mmap \
676
677
	pipe \
	pipe2 \
Nick Mathewson's avatar
Nick Mathewson committed
678
	prctl \
679
	readpassphrase \
Nick Mathewson's avatar
Nick Mathewson committed
680
681
682
	rint \
	sigaction \
	socketpair \
683
	statvfs \
Nick Mathewson's avatar
Nick Mathewson committed
684
685
686
687
	strncasecmp \
	strcasecmp \
	strlcat \
	strlcpy \
688
	strnlen \
Nick Mathewson's avatar
Nick Mathewson committed
689
690
691
692
	strptime \
	strtok_r \
	strtoull \
	sysconf \
693
	sysctl \
Nick Mathewson's avatar
Nick Mathewson committed
694
	truncate \
Nick Mathewson's avatar
Nick Mathewson committed
695
	uname \
696
	usleep \
Nick Mathewson's avatar
Nick Mathewson committed
697
	vasprintf \
698
	_vscprintf
699
)
700

701
# Apple messed up when they added some functions: they
702
# forgot to decorate them with appropriate AVAILABLE_MAC_OS_VERSION
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
# checks.

# We should only probe for these functions if we are sure that we
# are not targeting OS X 10.9 or earlier.
AC_MSG_CHECKING([for a pre-Yosemite OS X build target])
AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
#ifdef __APPLE__
#  include <AvailabilityMacros.h>
#  ifndef MAC_OS_X_VERSION_10_10
#    define MAC_OS_X_VERSION_10_10 101000
#  endif
#  if defined(MAC_OS_X_VERSION_MIN_REQUIRED)
#    if MAC_OS_X_VERSION_MIN_REQUIRED < MAC_OS_X_VERSION_10_10
#      error "Running on Mac OS X 10.9 or earlier"
#    endif
#  endif
#endif
]], [[]])],
   [on_macos_pre_10_10=no ; AC_MSG_RESULT([no])],
   [on_macos_pre_10_10=yes; AC_MSG_RESULT([yes])])

if test "$on_macos_pre_10_10" = "no"; then
  AC_CHECK_FUNCS(
        mach_approximate_time \
  )
fi

# We should only probe for these functions if we are sure that we
731
# are not targeting OSX 10.11 or earlier.
732
AC_MSG_CHECKING([for a pre-Sierra OSX build target])
733
AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
734
735
#ifdef __APPLE__
#  include <AvailabilityMacros.h>
736
737
#  ifndef MAC_OS_X_VERSION_10_12
#    define MAC_OS_X_VERSION_10_12 101200
738
739
#  endif
#  if defined(MAC_OS_X_VERSION_MIN_REQUIRED)
740
#    if MAC_OS_X_VERSION_MIN_REQUIRED < MAC_OS_X_VERSION_10_12
741
742
743
744
#      error "Running on Mac OSX 10.11 or earlier"
#    endif
#  endif
#endif
745
]], [[]])],
746
747
748
749
750
751
752
753
754
755
   [on_macos_pre_10_12=no ; AC_MSG_RESULT([no])],
   [on_macos_pre_10_12=yes; AC_MSG_RESULT([yes])])

if test "$on_macos_pre_10_12" = "no"; then
  AC_CHECK_FUNCS(
        clock_gettime \
        getentropy \
  )
fi

756
if test "$bwin32" != "true"; then
757
758
  AC_CHECK_HEADERS(pthread.h)
  AC_CHECK_FUNCS(pthread_create)
759
  AC_CHECK_FUNCS(pthread_condattr_setclock)
760
761
fi

762
if test "$bwin32" = "true"; then
763
764
765
766
767
768
769
  AC_CHECK_DECLS([SecureZeroMemory, _getwch], , , [
#include <windows.h>
#include <conio.h>
#include <wchar.h>
                 ])
fi

770
771
AM_CONDITIONAL(BUILD_READPASSPHRASE_C,
  test "x$ac_cv_func_readpassphrase" = "xno" && test "$bwin32" = "false")
772

773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
AC_MSG_CHECKING([whether free(NULL) works])
AC_RUN_IFELSE([AC_LANG_PROGRAM([
  #include <stdlib.h>
], [
char *p = NULL;
free(p);
])],
[free_null_ok=true; AC_MSG_RESULT(yes)],
[free_null_ok=false; AC_MSG_RESULT(no)],
[free_null_ok=cross; AC_MSG_RESULT(cross)])

if test "$free_null_ok" = "false"; then
   AC_MSG_ERROR([Your libc implementation doesn't allow free(NULL), as required by C99.])
fi

788
dnl ------------------------------------------------------
789
dnl Where do you live, libevent?  And how do we call you?
790

791
if test "$bwin32" = "true"; then
792
  TOR_LIB_WS32=-lws2_32
793
  TOR_LIB_IPHLPAPI=-liphlpapi
794
795
  # Some of the cargo-cults recommend -lwsock32 as well, but I don't
  # think it's actually necessary.
796
  TOR_LIB_GDI=-lgdi32
797
  TOR_LIB_USERENV=-luserenv
Nick Mathewson's avatar
   
Nick Mathewson committed
798
else
799
800
  TOR_LIB_WS32=
  TOR_LIB_GDI=
801
  TOR_LIB_USERENV=
Nick Mathewson's avatar
   
Nick Mathewson committed
802
fi
803
804
AC_SUBST(TOR_LIB_WS32)
AC_SUBST(TOR_LIB_GDI)
805
AC_SUBST(TOR_LIB_IPHLPAPI)
806
AC_SUBST(TOR_LIB_USERENV)
Nick Mathewson's avatar
   
Nick Mathewson committed
807

808
tor_libevent_pkg_redhat="libevent"
809
tor_libevent_pkg_debian="libevent-dev"
810
811
812
tor_libevent_devpkg_redhat="libevent-devel"
tor_libevent_devpkg_debian="libevent-dev"

813
814
815
816
dnl On Gnu/Linux or any place we require it, we'll add librt to the Libevent
dnl linking for static builds.
STATIC_LIBEVENT_FLAGS=""
if test "$enable_static_libevent" = "yes"; then
817
    if test "$have_rt" = "yes"; then
818
819
820
821
822
      STATIC_LIBEVENT_FLAGS=" -lrt "
    fi
fi

TOR_SEARCH_LIBRARY(libevent, $trylibeventdir, [-levent $STATIC_LIBEVENT_FLAGS $TOR_LIB_WS32], [
823
#ifdef _WIN32
824
825
#include <winsock2.h>
#endif
826
#include <sys/time.h>
Roger Dingledine's avatar
Roger Dingledine committed
827
#include <sys/types.h>
828
#include <event2/event.h>], [
829
#ifdef _WIN32
830
831
#include <winsock2.h>
#endif
832
struct event_base;
833
834
struct event_base *event_base_new(void);
void event_base_free(struct event_base *);],
835
    [
836
#ifdef _WIN32
837
{WSADATA d; WSAStartup(0x101,&d); }
838
#endif
Alex Xu's avatar
Alex Xu committed
839
event_base_free(event_base_new());
840
], [--with-libevent-dir], [/opt/libevent])
841

842
dnl Determine the incantation needed to link libevent.
843
844
save_LIBS="$LIBS"
save_LDFLAGS="$LDFLAGS"
845
save_CPPFLAGS="$CPPFLAGS"
846
847

LIBS="$STATIC_LIBEVENT_FLAGS $TOR_LIB_WS32 $save_LIBS"
848
LDFLAGS="$TOR_LDFLAGS_libevent $LDFLAGS"
849
CPPFLAGS="$TOR_CPPFLAGS_libevent $CPPFLAGS"
850

851
852
AC_CHECK_HEADERS(event2/event.h event2/dns.h event2/bufferevent_ssl.h)

853
854
855
856
if test "$enable_static_libevent" = "yes"; then
   if test "$tor_cv_library_libevent_dir" = "(system)"; then
     AC_MSG_ERROR("You must specify an explicit --with-libevent-dir=x option when using --enable-static-libevent")
   else
857
     TOR_LIBEVENT_LIBS="$TOR_LIBDIR_libevent/libevent.a $STATIC_LIBEVENT_FLAGS"
858
859
   fi
else
860
     if test "x$ac_cv_header_event2_event_h" = "xyes"; then
Nick Mathewson's avatar
Nick Mathewson committed
861
862
       AC_SEARCH_LIBS(event_new, [event event_core], , AC_MSG_ERROR("libevent2 is installed but linking it failed while searching for event_new"))
       AC_SEARCH_LIBS(evdns_base_new, [event event_extra], , AC_MSG_ERROR("libevent2 is installed but linking it failed while searching for evdns_base_new"))
863

864
       if test "$ac_cv_search_event_new" != "none required"; then
865
866
         TOR_LIBEVENT_LIBS="$ac_cv_search_event_new"
       fi
867
       if test "$ac_cv_search_evdns_base_new" != "none required"; then
868
869
870
         TOR_LIBEVENT_LIBS="$ac_cv_search_evdns_base_new $TOR_LIBEVENT_LIBS"
       fi
     else
871
       AC_MSG_ERROR("libevent2 is required but the headers could not be found")
872
     fi
873
874
fi

875
876
877
dnl Now check for particular libevent functions.
AC_CHECK_FUNCS([evutil_secure_rng_set_urandom_device_file \
                evutil_secure_rng_add_bytes \
878
879
                evdns_base_get_nameserver_addr \

880
881
])

882
883
884
885
LIBS="$save_LIBS"
LDFLAGS="$save_LDFLAGS"
CPPFLAGS="$save_CPPFLAGS"

886
887
888
889
890
dnl Check that libevent is at least at version 2.0.10, the first stable
dnl release of its series
CPPFLAGS="$CPPFLAGS $TOR_CPPFLAGS_libevent"
AC_MSG_CHECKING([whether Libevent is new enough])
AC_COMPILE_IFELSE([AC_LANG_SOURCE([
891
#include <event2/event.h>
892
#if !defined(LIBEVENT_VERSION_NUMBER) || LIBEVENT_VERSION_NUMBER < 0x02000a00
893
894
895
896
897
#error
int x = y(zz);
#else
int x = 1;
#endif
898
899
900
901
902
903
904
905
])], [ AC_MSG_RESULT([yes]) ],
   [ AC_MSG_RESULT([no])
     AC_MSG_ERROR([Libevent is not new enough.  We require 2.0.10-stable or later]) ] )

LIBS="$save_LIBS"
LDFLAGS="$save_LDFLAGS"
CPPFLAGS="$save_CPPFLAGS"

906
AC_SUBST(TOR_LIBEVENT_LIBS)
907

908
909
910
911
912
913
914
dnl ------------------------------------------------------
dnl Where do you live, libm?

dnl On some platforms (Haiku/BeOS) the math library is
dnl part of libroot. In which case don't link against lm
TOR_LIB_MATH=""
save_LIBS="$LIBS"
915
916
917
AC_SEARCH_LIBS(pow, [m], , AC_MSG_ERROR([Could not find pow in libm or libc.]))
if test "$ac_cv_search_pow" != "none required"; then
    TOR_LIB_MATH="$ac_cv_search_pow"
918
919
920
921
fi
LIBS="$save_LIBS"
AC_SUBST(TOR_LIB_MATH)

922
923
924
925
926
927
dnl ------------------------------------------------------
dnl Hello, NSS.  You're new around here.
if test "x$enable_nss" = "xyes"; then
  PKG_CHECK_MODULES(NSS,
     [nss],
     [have_nss=yes],
928
     [have_nss=no; AC_MSG_ERROR([You asked for NSS but I can't find it, $pkg_config_user_action, or set NSS_CFLAGS and NSS_LIBS.])])
929
930
931
932
  AC_SUBST(NSS_CFLAGS)
  AC_SUBST(NSS_LIBS)
fi

933
dnl ------------------------------------------------------
934
dnl Where do you live, openssl?  And how do we call you?
935

936
937
if test "x$enable_nss" != "xyes"; then

938
tor_openssl_pkg_redhat="openssl"
939
tor_openssl_pkg_debian="libssl-dev"
940
941
942
tor_openssl_devpkg_redhat="openssl-devel"
tor_openssl_devpkg_debian="libssl-dev"

943
944
ALT_openssl_WITHVAL=""
AC_ARG_WITH(ssl-dir,
945
  AS_HELP_STRING(--with-ssl-dir=PATH, [obsolete alias for --with-openssl-dir]),
946
  [
947
      if test "x$withval" != "xno" && test "x$withval" != "x"; then
948
949
950
951
         ALT_openssl_WITHVAL="$withval"
      fi
  ])

952
AC_MSG_NOTICE([Now, we'll look for OpenSSL >= 1.0.1])
953
TOR_SEARCH_LIBRARY(openssl, $tryssldir, [-lssl -lcrypto $TOR_LIB_GDI $TOR_LIB_WS32],
954
955
956
957
958
959
960
961
962
963
964
965
    [#include <openssl/ssl.h>
     char *getenv(const char *);],
    [struct ssl_cipher_st;
     unsigned SSL_CIPHER_get_id(const struct ssl_cipher_st *);
     char *getenv(const char *);],
    dnl This funny-looking test program calls getenv, so that the compiler
    dnl will neither make code that call SSL_CIPHER_get_id(NULL) [producing
    dnl a crash], nor optimize out the call to SSL_CIPHER_get_id().
    dnl We look for SSL_cipher_get_id() because it is present in
    dnl OpenSSL >=1.0.1, because it is not deprecated, and because Tor
    dnl depends on it.
    [if (getenv("THIS_SHOULDNT_BE_SET_X201803")) SSL_CIPHER_get_id((void *)0);], [],
966
    [/usr/local/opt/openssl /usr/local/openssl /usr/lib/openssl /usr/local/ssl /usr/lib/ssl /usr/local /opt/openssl])
967

968
969
dnl XXXX check for OPENSSL_VERSION_NUMBER == SSLeay()

970
971
972
973
if test "$enable_static_openssl" = "yes"; then
   if test "$tor_cv_library_openssl_dir" = "(system)"; then
     AC_MSG_ERROR("You must specify an explicit --with-openssl-dir=x option when using --enable-static-openssl")
   else
974
     TOR_OPENSSL_LIBS="$TOR_LIBDIR_openssl/libssl.a $TOR_LIBDIR_openssl/libcrypto.a"
975
976
   fi
else
977
     TOR_OPENSSL_LIBS="-lssl -lcrypto"
978
979
980
fi
AC_SUBST(TOR_OPENSSL_LIBS)

981
982
983
984
985
986
987
dnl Now check for particular openssl functions.
save_LIBS="$LIBS"
save_LDFLAGS="$LDFLAGS"
save_CPPFLAGS="$CPPFLAGS"
LIBS="$TOR_OPENSSL_LIBS $LIBS"
LDFLAGS="$TOR_LDFLAGS_openssl $LDFLAGS"
CPPFLAGS="$TOR_CPPFLAGS_openssl $CPPFLAGS"
988

989
AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
990
#include <openssl/opensslv.h>
991
#if !defined(LIBRESSL_VERSION_NUMBER) && OPENSSL_VERSION_NUMBER < 0x1000100fL
992
993
#error "too old"
#endif
994
   ]], [[]])],
995
   [ : ],
996
   [ AC_MSG_ERROR([OpenSSL is too old. We require 1.0.1 or later. You can specify a path to a newer one with --with-openssl-dir.]) ])
997

998
AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
999
1000
#include <openssl/opensslv.h>
#include <openssl/evp.h>