configure.ac 87.6 KB
Newer Older
Roger Dingledine's avatar
Roger Dingledine committed
1
dnl Copyright (c) 2001-2004, Roger Dingledine
2
dnl Copyright (c) 2004-2006, Roger Dingledine, Nick Mathewson
Nick Mathewson's avatar
Nick Mathewson committed
3
dnl Copyright (c) 2007-2019, The Tor Project, Inc.
Nick Mathewson's avatar
Nick Mathewson committed
4
dnl See LICENSE for licensing information
5

6
AC_PREREQ([2.63])
Nick Mathewson's avatar
Nick Mathewson committed
7
AC_INIT([tor],[0.4.4.0-alpha-dev])
8
AC_CONFIG_SRCDIR([src/app/main/tor_main.c])
9
AC_CONFIG_MACRO_DIR([m4])
10

11
12
configure_flags="$*"

13
14
15
16
17
18
# DO NOT EDIT THIS DEFINITION BY HAND UNLESS YOU KNOW WHAT YOU'RE DOING.
#
# The update_versions.py script updates this definition when the
# version number changes.  Tor uses it to make sure that it
# only shuts down for missing "required protocols" when those protocols
# are listed as required by a consensus after this date.
Nick Mathewson's avatar
Nick Mathewson committed
19
AC_DEFINE(APPROX_RELEASE_DATE, ["2020-02-11"], # for 0.4.4.0-alpha-dev
20
21
          [Approximate date when this software was released. (Updated when the version changes.)])

22
23
24
# "foreign" means we don't follow GNU package layout standards
# "1.11" means we require automake version 1.11 or newer
# "subdir-objects" means put .o files in the same directory as the .c files
25
AM_INIT_AUTOMAKE([foreign 1.11 subdir-objects -Wall -Werror])
26

27
m4_ifdef([AM_SILENT_RULES], [AM_SILENT_RULES([yes])])
28
AC_CONFIG_HEADERS([orconfig.h])
29

30
AC_USE_SYSTEM_EXTENSIONS
31
32
AC_CANONICAL_HOST

33
PKG_PROG_PKG_CONFIG
34
if test "x$PKG_CONFIG" = "x" ; then
35
    pkg_config_user_action="install pkg-config, and check the PKG_CONFIG_PATH environment variable"
36
    AC_MSG_NOTICE([Some libraries need pkg-config, including systemd, nss, lzma, zstd, and custom mallocs.])
37
    AC_MSG_NOTICE([To use those libraries, $pkg_config_user_action.])
38
else
39
    pkg_config_user_action="check the PKG_CONFIG_PATH environment variable"
40
fi
41

42
43
44
45
46
if test "x$PKG_CONFIG_PATH" = "x" && test "x$prefix" != "xNONE" && test "$host" != "$build"; then
   export PKG_CONFIG_PATH=$prefix/lib/pkgconfig
   AC_MSG_NOTICE([set PKG_CONFIG_PATH=$PKG_CONFIG_PATH to support cross-compiling])
fi

47
AC_ARG_ENABLE(openbsd-malloc,
48
   AS_HELP_STRING(--enable-openbsd-malloc, [use malloc code from OpenBSD.  Linux only. Deprecated: see --with-malloc]))
49
AC_ARG_ENABLE(static-openssl,
50
   AS_HELP_STRING(--enable-static-openssl, [link against a static openssl library. Requires --with-openssl-dir]))
51
AC_ARG_ENABLE(static-libevent,
52
   AS_HELP_STRING(--enable-static-libevent, [link against a static libevent library. Requires --with-libevent-dir]))
53
AC_ARG_ENABLE(static-zlib,
54
   AS_HELP_STRING(--enable-static-zlib, [link against a static zlib library. Requires --with-zlib-dir]))
55
AC_ARG_ENABLE(static-tor,
56
   AS_HELP_STRING(--enable-static-tor, [create an entirely static Tor binary. Requires --with-openssl-dir and --with-libevent-dir and --with-zlib-dir]))
57
AC_ARG_ENABLE(unittests,
58
   AS_HELP_STRING(--disable-unittests, [don't build unit tests for Tor. Risky!]))
59
AC_ARG_ENABLE(coverage,
60
   AS_HELP_STRING(--enable-coverage, [enable coverage support in the unit-test build]))
61
62
AC_ARG_ENABLE(asserts-in-tests,
   AS_HELP_STRING(--disable-asserts-in-tests, [disable tor_assert() calls in the unit tests, for branch coverage]))
63
AC_ARG_ENABLE(system-torrc,
64
   AS_HELP_STRING(--disable-system-torrc, [don't look for a system-wide torrc file]))
Nick Mathewson's avatar
Nick Mathewson committed
65
AC_ARG_ENABLE(libfuzzer,
66
67
68
   AS_HELP_STRING(--enable-libfuzzer, [build extra fuzzers based on 'libfuzzer']))
AC_ARG_ENABLE(oss-fuzz,
   AS_HELP_STRING(--enable-oss-fuzz, [build extra fuzzers based on 'oss-fuzz' environment]))
69
70
AC_ARG_ENABLE(memory-sentinels,
   AS_HELP_STRING(--disable-memory-sentinels, [disable code that tries to prevent some kinds of memory access bugs. For fuzzing only.]))
71
72
AC_ARG_ENABLE(rust,
   AS_HELP_STRING(--enable-rust, [enable rust integration]))
73
74
AC_ARG_ENABLE(cargo-online-mode,
   AS_HELP_STRING(--enable-cargo-online-mode, [Allow cargo to make network requests to fetch crates. For builds with rust only.]))
75
76
AC_ARG_ENABLE(restart-debugging,
   AS_HELP_STRING(--enable-restart-debugging, [Build Tor with support for debugging in-process restart. Developers only.]))
77
78
AC_ARG_ENABLE(zstd-advanced-apis,
   AS_HELP_STRING(--disable-zstd-advanced-apis, [Build without support for zstd's "static-only" APIs.]))
79
80
AC_ARG_ENABLE(nss,
   AS_HELP_STRING(--enable-nss, [Use Mozilla's NSS TLS library. (EXPERIMENTAL)]))
81
82
AC_ARG_ENABLE(pic,
   AS_HELP_STRING(--enable-pic, [Build Tor's binaries as position-independent code, suitable to link as a library.]))
83

84
AC_ARG_ENABLE(missing-doc-warnings,
85
   AS_HELP_STRING(--enable-missing-doc-warnings, [Tell doxygen to warn about missing documentation. Makes doxygen warnings nonfatal.]))
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101

if test "$enable_missing_doc_warnings" = "yes"; then
   DOXYGEN_FATAL_WARNINGS=NO
   DOXYGEN_WARN_ON_MISSING=YES
elif test "$enable_fatal_warnings" = "yes"; then
   # Fatal warnings from doxygen are nice, but not if we're warning about
   # missing documentation.
   DOXYGEN_FATAL_WARNINGS=YES
   DOXYGEN_WARN_ON_MISSING=NO
else
   DOXYGEN_FATAL_WARNINGS=NO
   DOXYGEN_WARN_ON_MISSING=NO
fi
AC_SUBST(DOXYGEN_FATAL_WARNINGS)
AC_SUBST(DOXYGEN_WARN_ON_MISSING)

102
if test "x$enable_coverage" != "xyes" -a "x$enable_asserts_in_tests" = "xno" ; then
103
104
105
    AC_MSG_ERROR([Can't disable assertions outside of coverage build])
fi

106
107
108
AM_CONDITIONAL(UNITTESTS_ENABLED, test "x$enable_unittests" != "xno")
AM_CONDITIONAL(COVERAGE_ENABLED, test "x$enable_coverage" = "xyes")
AM_CONDITIONAL(DISABLE_ASSERTS_IN_UNIT_TESTS, test "x$enable_asserts_in_tests" = "xno")
Nick Mathewson's avatar
Nick Mathewson committed
109
AM_CONDITIONAL(LIBFUZZER_ENABLED, test "x$enable_libfuzzer" = "xyes")
110
AM_CONDITIONAL(OSS_FUZZ_ENABLED, test "x$enable_oss_fuzz" = "xyes")
111
AM_CONDITIONAL(USE_RUST, test "x$enable_rust" = "xyes")
112
AM_CONDITIONAL(USE_NSS, test "x$enable_nss" = "xyes")
113
AM_CONDITIONAL(USE_OPENSSL, test "x$enable_nss" != "xyes")
114
115
116

if test "x$enable_nss" = "xyes"; then
  AC_DEFINE(ENABLE_NSS, 1,
117
  	    [Defined if we're building with NSS.])
118
119
120
else
  AC_DEFINE(ENABLE_OPENSSL, 1,
            [Defined if we're building with OpenSSL or LibreSSL])
121
fi
122

123
124
125
126
127
128
if test "$enable_static_tor" = "yes"; then
  enable_static_libevent="yes";
  enable_static_openssl="yes";
  enable_static_zlib="yes";
  CFLAGS="$CFLAGS -static"
fi
129

130
131
132
133
134
if test "$enable_system_torrc" = "no"; then
  AC_DEFINE(DISABLE_SYSTEM_TORRC, 1,
            [Defined if we're not going to look for a torrc in SYSCONF])
fi

135
136
137
138
139
if test "$enable_memory_sentinels" = "no"; then
  AC_DEFINE(DISABLE_MEMORY_SENTINELS, 1,
           [Defined if we're turning off memory safety code to look for bugs])
fi

140
141
142
143
144
145
AC_ARG_ENABLE(manpage,
              AS_HELP_STRING(--disable-manpage, [Disable manpage generation.]))

AC_ARG_ENABLE(html-manual,
              AS_HELP_STRING(--disable-html-manual, [Disable HTML documentation.]))

146
AC_ARG_ENABLE(asciidoc,
147
     AS_HELP_STRING(--disable-asciidoc, [don't use asciidoc (disables building of manpages)]),
148
     [case "${enableval}" in
149
150
        "yes") asciidoc=true ;;
        "no")  asciidoc=false ;;
151
152
153
        *) AC_MSG_ERROR(bad value for --disable-asciidoc) ;;
      esac], [asciidoc=true])

154
155
# systemd notify support
AC_ARG_ENABLE(systemd,
156
      AS_HELP_STRING(--enable-systemd, [enable systemd notification support]),
157
      [case "${enableval}" in
158
159
        "yes") systemd=true ;;
        "no")  systemd=false ;;
160
161
162
        * ) AC_MSG_ERROR(bad value for --enable-systemd) ;;
      esac], [systemd=auto])

163
164
165
166
if test "$enable_restart_debugging" = "yes"; then
  AC_DEFINE(ENABLE_RESTART_DEBUGGING, 1,
            [Defined if we're building with support for in-process restart debugging.])
fi
167

168
169
170
171
if test "$enable_zstd_advanced_apis" != "no"; then
   AC_DEFINE(ENABLE_ZSTD_ADVANCED_APIS, 1,
             [Defined if we're going to try to use zstd's "static-only" APIs.])
fi
172
173

# systemd support
174
if test "x$enable_systemd" = "xno"; then
175
176
177
178
179
180
    have_systemd=no;
else
    PKG_CHECK_MODULES(SYSTEMD,
        [libsystemd-daemon],
        have_systemd=yes,
        have_systemd=no)
181
    if test "x$have_systemd" = "xno"; then
182
183
184
185
186
187
        AC_MSG_NOTICE([Okay, checking for systemd a different way...])
        PKG_CHECK_MODULES(SYSTEMD,
            [libsystemd],
            have_systemd=yes,
            have_systemd=no)
    fi
188
189
fi

190
if test "x$have_systemd" = "xyes"; then
191
    AC_DEFINE(HAVE_SYSTEMD,1,[Have systemd])
192
    TOR_SYSTEMD_CFLAGS="${SYSTEMD_CFLAGS}"
193
    TOR_SYSTEMD_LIBS="${SYSTEMD_LIBS}"
194
    PKG_CHECK_MODULES(LIBSYSTEMD209, [libsystemd >= 209],
195
         [AC_DEFINE(HAVE_SYSTEMD_209,1,[Have systemd v209 or greater])], [])
196
fi
197
AC_SUBST(TOR_SYSTEMD_CFLAGS)
198
199
AC_SUBST(TOR_SYSTEMD_LIBS)

200
if test "x$enable_systemd" = "xyes" -a "x$have_systemd" != "xyes" ; then
201
    AC_MSG_ERROR([Explicitly requested systemd support, but systemd not found, $pkg_config_user_action, or set SYSTEMD_CFLAGS and SYSTEMD_LIBS.])
202
203
fi

204
case "$host" in
205
206
207
208
209
   *-*-solaris* )
     AC_DEFINE(_REENTRANT, 1, [Define on some platforms to activate x_r() functions in time.h])
     ;;
esac

210
AC_ARG_ENABLE(gcc-warnings,
211
212
213
     AS_HELP_STRING(--enable-gcc-warnings, [deprecated alias for enable-fatal-warnings]))
AC_ARG_ENABLE(fatal-warnings,
     AS_HELP_STRING(--enable-fatal-warnings, [tell the compiler to treat all warnings as errors.]))
214
AC_ARG_ENABLE(gcc-warnings-advisory,
215
     AS_HELP_STRING(--disable-gcc-warnings-advisory, [disable the regular verbose warnings]))
216

217
218
dnl Others suggest '/gs /safeseh /nxcompat /dynamicbase' for non-gcc on Windows
AC_ARG_ENABLE(gcc-hardening,
219
    AS_HELP_STRING(--disable-gcc-hardening, [disable compiler security checks]))
220

221
dnl Deprecated --enable-expensive-hardening but keep it for now for backward compat.
222
AC_ARG_ENABLE(expensive-hardening,
223
224
225
226
227
    AS_HELP_STRING(--enable-expensive-hardening, [enable more fragile and expensive compiler hardening; makes Tor slower]))
AC_ARG_ENABLE(fragile-hardening,
    AS_HELP_STRING(--enable-fragile-hardening, [enable more fragile and expensive compiler hardening; makes Tor slower]))
if test "x$enable_expensive_hardening" = "xyes" || test "x$enable_fragile_hardening" = "xyes"; then
  fragile_hardening="yes"
228
  AC_DEFINE(DEBUG_SMARTLIST, 1, [Enable smartlist debugging])
229
fi
230

231
232
233
234
235
236
237
AC_ARG_ENABLE(all-bugs-are-fatal,
   AS_HELP_STRING(--enable-all-bugs-are-fatal, [force all soft asserts in Tor codebase (tor_assert_nonfatal(), BUG(), etc.) to act as hard asserts (tor_assert() and equivalents); makes Tor fragile; only recommended for dev builds]))

if test "x$enable_all_bugs_are_fatal" = "xyes"; then
  AC_DEFINE(ALL_BUGS_ARE_FATAL, 1, [All assert failures are fatal])
fi

238
239
240
dnl Linker hardening options
dnl Currently these options are ELF specific - you can't use this with MacOSX
AC_ARG_ENABLE(linker-hardening,
241
    AS_HELP_STRING(--disable-linker-hardening, [disable linker security fixups]))
242

243
AC_ARG_ENABLE(local-appdata,
244
   AS_HELP_STRING(--enable-local-appdata, [default to host local application data paths on Windows]))
245
246
247
248
249
if test "$enable_local_appdata" = "yes"; then
  AC_DEFINE(ENABLE_LOCAL_APPDATA, 1,
            [Defined if we default to host local appdata paths on Windows])
fi

250
AC_ARG_ENABLE(tool-name-check,
251
     AS_HELP_STRING(--disable-tool-name-check, [check for sanely named toolchain when cross-compiling]))
252

253
AC_ARG_ENABLE(seccomp,
254
     AS_HELP_STRING(--disable-seccomp, [do not attempt to use libseccomp]))
255

256
AC_ARG_ENABLE(libscrypt,
257
     AS_HELP_STRING(--disable-libscrypt, [do not attempt to use libscrypt]))
258

259
260
261
262
263
264
265
266
267
268
dnl Enable event tracing which are transformed to debug log statement.
AC_ARG_ENABLE(event-tracing-debug,
     AS_HELP_STRING(--enable-event-tracing-debug, [build with event tracing to debug log]))
AM_CONDITIONAL([USE_EVENT_TRACING_DEBUG], [test "x$enable_event_tracing_debug" = "xyes"])

if test x$enable_event_tracing_debug = xyes; then
  AC_DEFINE([USE_EVENT_TRACING_DEBUG], [1], [Tracing framework to log debug])
  AC_DEFINE([TOR_EVENT_TRACING_ENABLED], [1], [Compile the event tracing instrumentation])
fi

269
270
271
272
273
274
275
276
277
278
279
280
281
282
dnl Enable Android only features.
AC_ARG_ENABLE(android,
     AS_HELP_STRING(--enable-android, [build with Android features enabled]))
AM_CONDITIONAL([USE_ANDROID], [test "x$enable_android" = "xyes"])

if test "x$enable_android" = "xyes"; then
  AC_DEFINE([USE_ANDROID], [1], [Compile with Android specific features enabled])

  dnl Check if the Android log library is available.
  AC_CHECK_HEADERS([android/log.h])
  AC_SEARCH_LIBS(__android_log_write, [log])

fi

283
284
285
286
dnl ---
dnl Tor modules options. These options are namespaced with --disable-module-XXX
dnl ---

287
dnl All our modules.
Nick Mathewson's avatar
Nick Mathewson committed
288
m4_define(MODULES, relay dirauth dircache)
289
290
291
292

dnl Relay module.
AC_ARG_ENABLE([module-relay],
              AS_HELP_STRING([--disable-module-relay],
293
                             [Build tor without the Relay modules: tor can not run as a relay, bridge, or authority. Implies --disable-module-dirauth]))
294
295
296
297
AM_CONDITIONAL(BUILD_MODULE_RELAY, [test "x$enable_module_relay" != "xno"])
AM_COND_IF(BUILD_MODULE_RELAY,
           AC_DEFINE([HAVE_MODULE_RELAY], [1],
                     [Compile with Relay feature support]))
298

Nick Mathewson's avatar
Nick Mathewson committed
299
dnl Dircache module.  (This cannot be enabled or disabled independently of
300
dnl the relay module.  It is not listed by --list-modules for this reason.)
Nick Mathewson's avatar
Nick Mathewson committed
301
302
303
304
305
306
AM_CONDITIONAL(BUILD_MODULE_DIRCACHE,
               [test "x$enable_module_relay" != "xno"])
AM_COND_IF(BUILD_MODULE_DIRCACHE,
           AC_DEFINE([HAVE_MODULE_DIRCACHE], [1],
                     [Compile with directory cache support]))

307
308
309
dnl Directory Authority module.
AC_ARG_ENABLE([module-dirauth],
              AS_HELP_STRING([--disable-module-dirauth],
310
                             [Build tor without the Directory Authority module: tor can not run as a directory authority or bridge authority]))
311
AM_CONDITIONAL(BUILD_MODULE_DIRAUTH,[test "x$enable_module_dirauth" != "xno" && test "x$enable_module_relay" != "xno"])
312
313
314
AM_COND_IF(BUILD_MODULE_DIRAUTH,
           AC_DEFINE([HAVE_MODULE_DIRAUTH], [1],
                     [Compile with Directory Authority feature support]))
315

316
317
318
319
320
321
322
323
324
dnl Helper variables.
TOR_MODULES_ALL_ENABLED=
AC_DEFUN([ADD_MODULE], [
    MODULE=m4_toupper($1)
    TOR_MODULES_ALL_ENABLED="${TOR_MODULES_ALL_ENABLED} -DHAVE_MODULE_${MODULE}=1"
])
m4_foreach_w([module], MODULES, [ADD_MODULE([module])])
AC_SUBST(TOR_MODULES_ALL_ENABLED)

325
326
327
328
329
330
331
332
333
dnl check for the correct "ar" when cross-compiling.
dnl   (AM_PROG_AR was new in automake 1.11.2, which we do not yet require,
dnl    so kludge up a replacement for the case where it isn't there yet.)
m4_ifdef([AM_PROG_AR],
         [AM_PROG_AR],
         [AN_MAKEVAR([AR], [AC_PROG_AR])
          AN_PROGRAM([ar], [AC_PROG_AR])
          AC_DEFUN([AC_PROG_AR], [AC_CHECK_TOOL([AR], [ar], [:])])
          AC_PROG_AR])
334

335
336
337
338
339
340
dnl Check whether the above macro has settled for a simply named tool even
dnl though we're cross compiling. We must do this before running AC_PROG_CC,
dnl because that will find any cc on the system, not only the cross-compiler,
dnl and then verify that a binary built with this compiler runs on the
dnl build system. It will then come to the false conclusion that we're not
dnl cross-compiling.
341
342
if test "x$enable_tool_name_check" != "xno"; then
    if test "x$ac_tool_warned" = "xyes"; then
343
        AC_MSG_ERROR([We are cross compiling but could not find a properly named toolchain. Do you have your cross-compiling toolchain in PATH? (You can --disable-tool-name-check to ignore this.)])
344
	elif test "x$ac_ct_AR" != "x" -a "x$cross_compiling" = "xmaybe"; then
345
346
347
348
		AC_MSG_ERROR([We think we are cross compiling but could not find a properly named toolchain. Do you have your cross-compiling toolchain in PATH? (You can --disable-tool-name-check to ignore this.)])
	fi
fi

349
AC_PROG_CC
350
AC_PROG_CPP
351
352
AC_PROG_MAKE_SET
AC_PROG_RANLIB
353
AC_PROG_SED
354

355
356
357
AC_ARG_VAR([PERL], [path to Perl binary])
AC_CHECK_PROGS([PERL], [perl])
AM_CONDITIONAL(USE_PERL, [test "x$ac_cv_prog_PERL" != "x"])
358

359
360
dnl check for asciidoc and a2x
AC_PATH_PROG([ASCIIDOC], [asciidoc], none)
361
AC_PATH_PROGS([A2X], [a2x a2x.py], none)
362

363
AM_CONDITIONAL(USE_ASCIIDOC, test "x$asciidoc" = "xtrue")
364
365
AM_CONDITIONAL(BUILD_MANPAGE, [test "x$enable_manpage" != "xno"])
AM_CONDITIONAL(BUILD_HTML_DOCS, [test "x$enable_html_manual" != "xno"])
366

367
AM_PROG_CC_C_O
368
AC_PROG_CC_C99
369

Nick Mathewson's avatar
Nick Mathewson committed
370
371
AC_CACHE_CHECK([for Python 3], [tor_cv_PYTHON],
   [AC_PATH_PROGS_FEATURE_CHECK([PYTHON], [ \
372
373
	python3 \
	python3.8 python3.7 python3.6 python3.5 python3.4 \
Nick Mathewson's avatar
Nick Mathewson committed
374
375
376
377
378
379
	python ],
   [["$ac_path_PYTHON" -c 'import sys; sys.exit(sys.version_info[0]<3)' && tor_cv_PYTHON="$ac_path_PYTHON" ac_path_PYTHON_found=:]] )])
AC_SUBST([PYTHON], [$tor_cv_PYTHON])

PYTHON="$tor_cv_PYTHON"

380
if test "x$PYTHON" = "x"; then
Nick Mathewson's avatar
Nick Mathewson committed
381
  AC_MSG_WARN([Python 3 unavailable; some tests will not be run.])
382
fi
Nick Mathewson's avatar
Nick Mathewson committed
383

384
385
AM_CONDITIONAL(USEPYTHON, [test "x$PYTHON" != "x"])

386
dnl List all external rust crates we depend on here. Include the version
387
388
389
390
rust_crates=" \
    digest-0.7.2 \
    libc-0.2.39 \
"
391
AC_SUBST(rust_crates)
392

393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
ifdef([AC_C_FLEXIBLE_ARRAY_MEMBER], [
AC_C_FLEXIBLE_ARRAY_MEMBER
], [
 dnl Maybe we've got an old autoconf...
 AC_CACHE_CHECK([for flexible array members],
     tor_cv_c_flexarray,
     [AC_COMPILE_IFELSE(
       AC_LANG_PROGRAM([
 struct abc { int a; char b[]; };
], [
 struct abc *def = malloc(sizeof(struct abc)+sizeof(char));
 def->b[0] = 33;
]),
  [tor_cv_c_flexarray=yes],
  [tor_cv_c_flexarray=no])])
408
 if test "$tor_cv_flexarray" = "yes"; then
409
   AC_DEFINE([FLEXIBLE_ARRAY_MEMBER], [], [Define to nothing if C supports flexible array members, and to 1 if it does not.])
410
 else
411
   AC_DEFINE([FLEXIBLE_ARRAY_MEMBER], [1], [Define to nothing if C supports flexible array members, and to 1 if it does not.])
412
413
414
 fi
])

415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
AC_CACHE_CHECK([for working C99 mid-block declaration syntax],
      tor_cv_c_c99_decl,
      [AC_COMPILE_IFELSE(
         [AC_LANG_PROGRAM([], [int x; x = 3; int y; y = 4 + x;])],
	 [tor_cv_c_c99_decl=yes],
	 [tor_cv_c_c99_decl=no] )])
if test "$tor_cv_c_c99_decl" != "yes"; then
  AC_MSG_ERROR([Your compiler doesn't support c99 mid-block declarations. This is required as of Tor 0.2.6.x])
fi

AC_CACHE_CHECK([for working C99 designated initializers],
      tor_cv_c_c99_designated_init,
      [AC_COMPILE_IFELSE(
         [AC_LANG_PROGRAM([struct s { int a; int b; };],
  	       [[ struct s ss = { .b = 5, .a = 6 }; ]])],
	 [tor_cv_c_c99_designated_init=yes],
	 [tor_cv_c_c99_designated_init=no] )])

if test "$tor_cv_c_c99_designated_init" != "yes"; then
  AC_MSG_ERROR([Your compiler doesn't support c99 designated initializers. This is required as of Tor 0.2.6.x])
fi

Nick Mathewson's avatar
Nick Mathewson committed
437
438
439
440
441
442
443
444
445
446
447
448
saved_CFLAGS="$CFLAGS"
CFLAGS="$CFLAGS -Werror"
AC_CACHE_CHECK([for __attribute__((fallthrough))],
      tor_cv_c_attr_fallthrough,
      [AC_COMPILE_IFELSE(
         [AC_LANG_PROGRAM([extern int x; void fn(void) ;],
	       [[ switch (x) { case 1: fn(); __attribute__((fallthrough));
                               case 2: fn(); break; } ]])],
	 [tor_cv_c_attr_fallthrough=yes],
	 [tor_cv_c_attr_fallthrough=no] )])
CFLAGS="$saved_CFLAGS"

449
if test "$tor_cv_c_attr_fallthrough" = "yes"; then
Nick Mathewson's avatar
Nick Mathewson committed
450
451
452
  AC_DEFINE(HAVE_ATTR_FALLTHROUGH, [1], [defined if we have the fallthrough attribute.])
fi

453
454
TORUSER=_tor
AC_ARG_WITH(tor-user,
455
        AS_HELP_STRING(--with-tor-user=NAME, [specify username for tor daemon]),
456
457
458
459
460
461
462
463
        [
           TORUSER=$withval
        ]
)
AC_SUBST(TORUSER)

TORGROUP=_tor
AC_ARG_WITH(tor-group,
464
        AS_HELP_STRING(--with-tor-group=NAME, [specify group name for tor daemon]),
465
466
467
468
469
470
        [
           TORGROUP=$withval
        ]
)
AC_SUBST(TORGROUP)

471

472
dnl If _WIN32 is defined and non-zero, we are building for win32
473
AC_MSG_CHECKING([for win32])
474
AC_RUN_IFELSE([AC_LANG_SOURCE([
475
int main(int c, char **v) {
476
477
#ifdef _WIN32
#if _WIN32
478
479
480
481
482
483
484
  return 0;
#else
  return 1;
#endif
#else
  return 2;
#endif
485
}])],
486
bwin32=true; AC_MSG_RESULT([yes]),
487
488
bwin32=false; AC_MSG_RESULT([no]),
bwin32=cross; AC_MSG_RESULT([cross])
489
490
)

491
if test "$bwin32" = "cross"; then
492
AC_MSG_CHECKING([for win32 (cross)])
493
AC_COMPILE_IFELSE([AC_LANG_SOURCE([
494
#ifdef _WIN32
495
496
497
498
499
int main(int c, char **v) {return 0;}
#else
#error
int main(int c, char **v) {return x(y);}
#endif
500
])],
501
502
503
504
bwin32=true; AC_MSG_RESULT([yes]),
bwin32=false; AC_MSG_RESULT([no]))
fi

505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
AH_BOTTOM([
#ifdef _WIN32
/* Defined to access windows functions and definitions for >=WinXP */
# ifndef WINVER
#  define WINVER 0x0501
# endif

/* Defined to access _other_ windows functions and definitions for >=WinXP */
# ifndef _WIN32_WINNT
#  define _WIN32_WINNT 0x0501
# endif

/* Defined to avoid including some windows headers as part of Windows.h */
# ifndef WIN32_LEAN_AND_MEAN
#  define WIN32_LEAN_AND_MEAN 1
# endif
#endif
])

524
AM_CONDITIONAL(WIN32, test "x$bwin32" = "xtrue")
525
AM_CONDITIONAL(BUILD_NT_SERVICES, test "x$bwin32" = "xtrue")
526
AM_CONDITIONAL(BUILD_LIBTORRUNNER, test "x$bwin32" != "xtrue")
527

528
529
dnl Enable C99 when compiling with MIPSpro
AC_MSG_CHECKING([for MIPSpro compiler])
530
AC_COMPILE_IFELSE([AC_LANG_PROGRAM(, [
531
532
533
534
#if (defined(__sgi) && defined(_COMPILER_VERSION))
#error
  return x(y);
#endif
535
])],
536
bmipspro=false; AC_MSG_RESULT(no),
537
bmipspro=true; AC_MSG_RESULT(yes))
538

539
if test "$bmipspro" = "true"; then
540
541
542
  CFLAGS="$CFLAGS -c99"
fi

543
544
AC_C_BIGENDIAN

Alex Xu's avatar
Alex Xu committed
545
546
AC_ARG_VAR([TOR_RUST_TARGET], [Rust target, must be specified when cross-compiling (HOST != BUILD). example: i686-pc-windows-gnu])

547
548
549
550
551
552
553
554
555
556
557
558
559
560
if test "x$enable_rust" = "xyes"; then
  AC_ARG_VAR([RUSTC], [path to the rustc binary])
  AC_CHECK_PROG([RUSTC], [rustc], [rustc],[no])
  if test "x$RUSTC" = "xno"; then
    AC_MSG_ERROR([rustc unavailable but rust integration requested.])
  fi

  AC_ARG_VAR([CARGO], [path to the cargo binary])
  AC_CHECK_PROG([CARGO], [cargo], [cargo],[no])
  if test "x$CARGO" = "xno"; then
    AC_MSG_ERROR([cargo unavailable but rust integration requested.])
  fi

  AC_DEFINE([HAVE_RUST], 1, [have Rust])
561
562
563
564
565
  if test "x$enable_fatal_warnings" = "xyes"; then
    RUST_WARN=
  else
    RUST_WARN=#
  fi
566
567
568
569
570
571
572
573
574
575
  if test "x$enable_cargo_online_mode" = "xyes"; then
    CARGO_ONLINE=
    RUST_DL=#
  else
    CARGO_ONLINE=--frozen
    RUST_DL=

    dnl When we're not allowed to touch the network, we need crate dependencies
    dnl locally available.
    AC_MSG_CHECKING([rust crate dependencies])
576
577
    AC_ARG_VAR([TOR_RUST_DEPENDENCIES], [path to directory with local crate mirror])
    if test "x$TOR_RUST_DEPENDENCIES" = "x"; then
578
      TOR_RUST_DEPENDENCIES="${srcdir}/src/ext/rust/crates"
579
    fi
580
    dnl Check whether the path exists before we try to cd into it.
581
582
    if test ! -d "$TOR_RUST_DEPENDENCIES"; then
      AC_MSG_ERROR([Rust dependency directory $TOR_RUST_DEPENDENCIES does not exist. Specify a dependency directory using the TOR_RUST_DEPENDENCIES variable or allow cargo to fetch crates using --enable-cargo-online-mode.])
583
      ERRORED=1
584
    fi
585
586
587
588
    dnl Make the path absolute, since we'll be using it from within a
    dnl subdirectory.
    TOR_RUST_DEPENDENCIES=$(cd "$TOR_RUST_DEPENDENCIES" ; pwd)

589
    for dep in $rust_crates; do
590
591
      if test ! -d "$TOR_RUST_DEPENDENCIES"/"$dep"; then
        AC_MSG_ERROR([Failure to find rust dependency $TOR_RUST_DEPENDENCIES/$dep. Specify a dependency directory using the TOR_RUST_DEPENDENCIES variable or allow cargo to fetch crates using --enable-cargo-online-mode.])
592
        ERRORED=1
593
594
      fi
    done
595
596
597
    if test "x$ERRORED" = "x"; then
      AC_MSG_RESULT([yes])
    fi
598
599
600
601
602
  fi

  dnl For now both MSVC and MinGW rust libraries will output static libs with
  dnl the MSVC naming convention.
  if test "$bwin32" = "true"; then
Alex Xu's avatar
Alex Xu committed
603
    tor_rust_static_name=tor_rust.lib
604
  else
Alex Xu's avatar
Alex Xu committed
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
    tor_rust_static_name=libtor_rust.a
  fi

  AC_CANONICAL_BUILD

  if test -n "$TOR_RUST_TARGET"; then
    if test "$host" = "$build"; then
      AC_MSG_ERROR([HOST = BUILD is invalid if TOR_RUST_TARGET is specified, see configure --help for more information.])
    fi
    RUST_TARGET_PROP="target = '$TOR_RUST_TARGET'"
    TOR_RUST_LIB_PATH="src/rust/target/$TOR_RUST_TARGET/release/$tor_rust_static_name"
  else
    if test "$host" != "$build"; then
      AC_MSG_ERROR([TOR_RUST_TARGET must be specified when cross-compiling with Rust enabled.])
    fi
    RUST_TARGET_PROP=
    TOR_RUST_LIB_PATH="src/rust/target/release/$tor_rust_static_name"
622
623
  fi

Alex Xu's avatar
Alex Xu committed
624
625
  AC_SUBST(RUST_TARGET_PROP)
  AC_SUBST(TOR_RUST_LIB_PATH)
626
  AC_SUBST(CARGO_ONLINE)
627
  AC_SUBST(RUST_WARN)
628
629
630
631
  AC_SUBST(RUST_DL)

  dnl Let's check the rustc version, too
  AC_MSG_CHECKING([rust version])
632
  RUSTC_VERSION=`$RUSTC --version`
633
634
635
636
637
  RUSTC_VERSION_MAJOR=`$RUSTC --version | cut -d ' ' -f 2 | cut -d '.' -f 1`
  RUSTC_VERSION_MINOR=`$RUSTC --version | cut -d ' ' -f 2 | cut -d '.' -f 2`
  if test "x$RUSTC_VERSION_MAJOR" = "x" -o "x$RUSTC_VERSION_MINOR" = "x"; then
    AC_MSG_ERROR([rustc version couldn't be identified])
  fi
638
639
  if test "$RUSTC_VERSION_MAJOR" -lt 2 -a "$RUSTC_VERSION_MINOR" -lt 31; then
    AC_MSG_ERROR([rustc must be at least version 1.31.0])
640
  fi
641
  AC_MSG_RESULT([$RUSTC_VERSION])
642
643
fi

644
AC_SEARCH_LIBS(socket, [socket network])
645
AC_SEARCH_LIBS(gethostbyname, [nsl])
646
AC_SEARCH_LIBS(dlopen, [dl])
647
AC_SEARCH_LIBS(inet_aton, [resolv])
648
AC_SEARCH_LIBS(backtrace, [execinfo])
649
650
651
652
653
654
saved_LIBS="$LIBS"
AC_SEARCH_LIBS([clock_gettime], [rt])
if test "$LIBS" != "$saved_LIBS"; then
   # Looks like we need -lrt for clock_gettime().
   have_rt=yes
fi
655

656
657
658
659
if test "$bwin32" = "false"; then
  AC_SEARCH_LIBS(pthread_create, [pthread])
  AC_SEARCH_LIBS(pthread_detach, [pthread])
fi
660

661
662
AM_CONDITIONAL(THREADS_WIN32, test "$bwin32" = "true")
AM_CONDITIONAL(THREADS_PTHREADS, test "$bwin32" = "false")
663

664
AC_CHECK_FUNCS(
Nick Mathewson's avatar
Nick Mathewson committed
665
	_NSGetEnviron \
666
667
	RtlSecureZeroMemory \
	SecureZeroMemory \
Nick Mathewson's avatar
Nick Mathewson committed
668
669
670
	accept4 \
	backtrace \
	backtrace_symbols_fd \
671
	eventfd \
672
	explicit_bzero \
673
	timingsafe_memcmp \
Nick Mathewson's avatar
Nick Mathewson committed
674
	flock \
675
	fsync \
Nick Mathewson's avatar
Nick Mathewson committed
676
677
678
	ftime \
	get_current_dir_name \
	getaddrinfo \
679
	getdelim \
Nick Mathewson's avatar
Nick Mathewson committed
680
	getifaddrs \
681
	getline \
Nick Mathewson's avatar
Nick Mathewson committed
682
683
684
685
	getpass \
	getrlimit \
	gettimeofday \
	gmtime_r \
686
	gnu_get_libc_version \
687
	htonll \
Nick Mathewson's avatar
Nick Mathewson committed
688
689
690
691
692
693
	inet_aton \
	ioctl \
	issetugid \
	llround \
	localtime_r \
	lround \
694
	madvise \
Nick Mathewson's avatar
Nick Mathewson committed
695
696
	memmem \
	memset_s \
697
	minherit \
Nick Mathewson's avatar
Nick Mathewson committed
698
	mmap \
699
700
	pipe \
	pipe2 \
Nick Mathewson's avatar
Nick Mathewson committed
701
	prctl \
702
	readpassphrase \
Nick Mathewson's avatar
Nick Mathewson committed
703
704
705
	rint \
	sigaction \
	socketpair \
706
	statvfs \
Nick Mathewson's avatar
Nick Mathewson committed
707
708
709
710
	strncasecmp \
	strcasecmp \
	strlcat \
	strlcpy \
711
	strnlen \
Nick Mathewson's avatar
Nick Mathewson committed
712
713
714
715
	strptime \
	strtok_r \
	strtoull \
	sysconf \
716
	sysctl \
Nick Mathewson's avatar
Nick Mathewson committed
717
	truncate \
Nick Mathewson's avatar
Nick Mathewson committed
718
	uname \
719
	usleep \
Nick Mathewson's avatar
Nick Mathewson committed
720
	vasprintf \
721
	_vscprintf
722
)
723

724
# Apple messed up when they added some functions: they
725
# forgot to decorate them with appropriate AVAILABLE_MAC_OS_VERSION
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
# checks.

# We should only probe for these functions if we are sure that we
# are not targeting OS X 10.9 or earlier.
AC_MSG_CHECKING([for a pre-Yosemite OS X build target])
AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
#ifdef __APPLE__
#  include <AvailabilityMacros.h>
#  ifndef MAC_OS_X_VERSION_10_10
#    define MAC_OS_X_VERSION_10_10 101000
#  endif
#  if defined(MAC_OS_X_VERSION_MIN_REQUIRED)
#    if MAC_OS_X_VERSION_MIN_REQUIRED < MAC_OS_X_VERSION_10_10
#      error "Running on Mac OS X 10.9 or earlier"
#    endif
#  endif
#endif
]], [[]])],
   [on_macos_pre_10_10=no ; AC_MSG_RESULT([no])],
   [on_macos_pre_10_10=yes; AC_MSG_RESULT([yes])])

if test "$on_macos_pre_10_10" = "no"; then
  AC_CHECK_FUNCS(
        mach_approximate_time \
  )
fi

# We should only probe for these functions if we are sure that we
754
# are not targeting OSX 10.11 or earlier.
755
AC_MSG_CHECKING([for a pre-Sierra OSX build target])
756
AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
757
758
#ifdef __APPLE__
#  include <AvailabilityMacros.h>
759
760
#  ifndef MAC_OS_X_VERSION_10_12
#    define MAC_OS_X_VERSION_10_12 101200
761
762
#  endif
#  if defined(MAC_OS_X_VERSION_MIN_REQUIRED)
763
#    if MAC_OS_X_VERSION_MIN_REQUIRED < MAC_OS_X_VERSION_10_12
764
765
766
767
#      error "Running on Mac OSX 10.11 or earlier"
#    endif
#  endif
#endif
768
]], [[]])],
769
770
771
772
773
774
775
776
777
778
   [on_macos_pre_10_12=no ; AC_MSG_RESULT([no])],
   [on_macos_pre_10_12=yes; AC_MSG_RESULT([yes])])

if test "$on_macos_pre_10_12" = "no"; then
  AC_CHECK_FUNCS(
        clock_gettime \
        getentropy \
  )
fi

779
if test "$bwin32" != "true"; then
780
781
  AC_CHECK_HEADERS(pthread.h)
  AC_CHECK_FUNCS(pthread_create)
782
  AC_CHECK_FUNCS(pthread_condattr_setclock)
783
784
fi

785
if test "$bwin32" = "true"; then
786
787
788
789
790
791
792
  AC_CHECK_DECLS([SecureZeroMemory, _getwch], , , [
#include <windows.h>
#include <conio.h>
#include <wchar.h>
                 ])
fi

793
794
AM_CONDITIONAL(BUILD_READPASSPHRASE_C,
  test "x$ac_cv_func_readpassphrase" = "xno" && test "$bwin32" = "false")
795

796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
AC_MSG_CHECKING([whether free(NULL) works])
AC_RUN_IFELSE([AC_LANG_PROGRAM([
  #include <stdlib.h>
], [
char *p = NULL;
free(p);
])],
[free_null_ok=true; AC_MSG_RESULT(yes)],
[free_null_ok=false; AC_MSG_RESULT(no)],
[free_null_ok=cross; AC_MSG_RESULT(cross)])

if test "$free_null_ok" = "false"; then
   AC_MSG_ERROR([Your libc implementation doesn't allow free(NULL), as required by C99.])
fi

811
dnl ------------------------------------------------------
812
dnl Where do you live, libevent?  And how do we call you?
813

814
if test "$bwin32" = "true"; then
815
  TOR_LIB_WS32=-lws2_32
816
  TOR_LIB_IPHLPAPI=-liphlpapi
817
818
  # Some of the cargo-cults recommend -lwsock32 as well, but I don't
  # think it's actually necessary.
819
  TOR_LIB_GDI=-lgdi32
820
  TOR_LIB_USERENV=-luserenv
Nick Mathewson's avatar
   
Nick Mathewson committed
821
else
822
823
  TOR_LIB_WS32=
  TOR_LIB_GDI=
824
  TOR_LIB_USERENV=
Nick Mathewson's avatar
   
Nick Mathewson committed
825
fi
826
827
AC_SUBST(TOR_LIB_WS32)
AC_SUBST(TOR_LIB_GDI)
828
AC_SUBST(TOR_LIB_IPHLPAPI)
829
AC_SUBST(TOR_LIB_USERENV)
Nick Mathewson's avatar
   
Nick Mathewson committed
830

831
tor_libevent_pkg_redhat="libevent"
832
tor_libevent_pkg_debian="libevent-dev"
833
834
835
tor_libevent_devpkg_redhat="libevent-devel"
tor_libevent_devpkg_debian="libevent-dev"

836
837
838
839
dnl On Gnu/Linux or any place we require it, we'll add librt to the Libevent
dnl linking for static builds.
STATIC_LIBEVENT_FLAGS=""
if test "$enable_static_libevent" = "yes"; then
840
    if test "$have_rt" = "yes"; then
841
842
843
844
845
      STATIC_LIBEVENT_FLAGS=" -lrt "
    fi
fi

TOR_SEARCH_LIBRARY(libevent, $trylibeventdir, [-levent $STATIC_LIBEVENT_FLAGS $TOR_LIB_WS32], [
846
#ifdef _WIN32
847
848
#include <winsock2.h>
#endif
849
#include <sys/time.h>
Roger Dingledine's avatar
Roger Dingledine committed
850
#include <sys/types.h>
851
#include <event2/event.h>], [
852
#ifdef _WIN32
853
854
#include <winsock2.h>
#endif
855
struct event_base;
856
857
struct event_base *event_base_new(void);
void event_base_free(struct event_base *);],
858
    [
859
#ifdef _WIN32
860
{WSADATA d; WSAStartup(0x101,&d); }
861
#endif
Alex Xu's avatar
Alex Xu committed
862
event_base_free(event_base_new());
863
], [--with-libevent-dir], [/opt/libevent])
864

865
dnl Determine the incantation needed to link libevent.
866
867
save_LIBS="$LIBS"
save_LDFLAGS="$LDFLAGS"
868
save_CPPFLAGS="$CPPFLAGS"
869
870

LIBS="$STATIC_LIBEVENT_FLAGS $TOR_LIB_WS32 $save_LIBS"
871
LDFLAGS="$TOR_LDFLAGS_libevent $LDFLAGS"
872
CPPFLAGS="$TOR_CPPFLAGS_libevent $CPPFLAGS"
873

874
875
AC_CHECK_HEADERS(event2/event.h event2/dns.h event2/bufferevent_ssl.h)

876
877
878
879
if test "$enable_static_libevent" = "yes"; then
   if test "$tor_cv_library_libevent_dir" = "(system)"; then
     AC_MSG_ERROR("You must specify an explicit --with-libevent-dir=x option when using --enable-static-libevent")
   else
880
     TOR_LIBEVENT_LIBS="$TOR_LIBDIR_libevent/libevent.a $STATIC_LIBEVENT_FLAGS"
881
882
   fi
else
883
     if test "x$ac_cv_header_event2_event_h" = "xyes"; then
Nick Mathewson's avatar
Nick Mathewson committed
884
885
       AC_SEARCH_LIBS(event_new, [event event_core], , AC_MSG_ERROR("libevent2 is installed but linking it failed while searching for event_new"))
       AC_SEARCH_LIBS(evdns_base_new, [event event_extra], , AC_MSG_ERROR("libevent2 is installed but linking it failed while searching for evdns_base_new"))
886

887
       if test "$ac_cv_search_event_new" != "none required"; then
888
889
         TOR_LIBEVENT_LIBS="$ac_cv_search_event_new"
       fi
890
       if test "$ac_cv_search_evdns_base_new" != "none required"; then
891
892
893
         TOR_LIBEVENT_LIBS="$ac_cv_search_evdns_base_new $TOR_LIBEVENT_LIBS"
       fi
     else
894
       AC_MSG_ERROR("libevent2 is required but the headers could not be found")
895
     fi
896
897
fi

898
899
900
dnl Now check for particular libevent functions.
AC_CHECK_FUNCS([evutil_secure_rng_set_urandom_device_file \
                evutil_secure_rng_add_bytes \
901
902
                evdns_base_get_nameserver_addr \

903
904
])

905
906
907
908
LIBS="$save_LIBS"
LDFLAGS="$save_LDFLAGS"
CPPFLAGS="$save_CPPFLAGS"

909
910
911
912
913
dnl Check that libevent is at least at version 2.0.10, the first stable
dnl release of its series
CPPFLAGS="$CPPFLAGS $TOR_CPPFLAGS_libevent"
AC_MSG_CHECKING([whether Libevent is new enough])
AC_COMPILE_IFELSE([AC_LANG_SOURCE([
914
#include <event2/event.h>
915
#if !defined(LIBEVENT_VERSION_NUMBER) || LIBEVENT_VERSION_NUMBER < 0x02000a00
916
917
918
919
920
#error
int x = y(zz);
#else
int x = 1;
#endif
921
922
923
924
925
926
927
928
])], [ AC_MSG_RESULT([yes]) ],
   [ AC_MSG_RESULT([no])
     AC_MSG_ERROR([Libevent is not new enough.  We require 2.0.10-stable or later]) ] )

LIBS="$save_LIBS"
LDFLAGS="$save_LDFLAGS"
CPPFLAGS="$save_CPPFLAGS"

929
AC_SUBST(TOR_LIBEVENT_LIBS)
930

931
932
933
934
935
936
937
dnl ------------------------------------------------------
dnl Where do you live, libm?

dnl On some platforms (Haiku/BeOS) the math library is
dnl part of libroot. In which case don't link against lm
TOR_LIB_MATH=""
save_LIBS="$LIBS"
938
939
940
AC_SEARCH_LIBS(pow, [m], , AC_MSG_ERROR([Could not find pow in libm or libc.]))
if test "$ac_cv_search_pow" != "none required"; then
    TOR_LIB_MATH="$ac_cv_search_pow"
941
942
943
944
fi
LIBS="$save_LIBS"
AC_SUBST(TOR_LIB_MATH)

945
946
947
948
949
950
dnl ------------------------------------------------------
dnl Hello, NSS.  You're new around here.
if test "x$enable_nss" = "xyes"; then
  PKG_CHECK_MODULES(NSS,
     [nss],
     [have_nss=yes],
951
     [have_nss=no; AC_MSG_ERROR([You asked for NSS but I can't find it, $pkg_config_user_action, or set NSS_CFLAGS and NSS_LIBS.])])
952
953
954
955
  AC_SUBST(NSS_CFLAGS)
  AC_SUBST(NSS_LIBS)
fi

956
dnl ------------------------------------------------------
957
dnl Where do you live, openssl?  And how do we call you?
958

959
960
if test "x$enable_nss" != "xyes"; then

961
tor_openssl_pkg_redhat="openssl"
962
tor_openssl_pkg_debian="libssl-dev"
963
964
965
tor_openssl_devpkg_redhat="openssl-devel"
tor_openssl_devpkg_debian="libssl-dev"

966
967
ALT_openssl_WITHVAL=""
AC_ARG_WITH(ssl-dir,
968
  AS_HELP_STRING(--with-ssl-dir=PATH, [obsolete alias for --with-openssl-dir]),
969
  [
970
      if test "x$withval" != "xno" && test "x$withval" != "x"; then
971
972
973
974
         ALT_openssl_WITHVAL="$withval"
      fi
  ])

975
AC_MSG_NOTICE([Now, we'll look for OpenSSL >= 1.0.1])
976
TOR_SEARCH_LIBRARY(openssl, $tryssldir, [-lssl -lcrypto $TOR_LIB_GDI $TOR_LIB_WS32],
977
978
979
980
981
982
983
984
985
986
987
988
    [#include <openssl/ssl.h>
     char *getenv(const char *);],
    [struct ssl_cipher_st;
     unsigned SSL_CIPHER_get_id(const struct ssl_cipher_st *);
     char *getenv(const char *);],
    dnl This funny-looking test program calls getenv, so that the compiler
    dnl will neither make code that call SSL_CIPHER_get_id(NULL) [producing
    dnl a crash], nor optimize out the call to SSL_CIPHER_get_id().
    dnl We look for SSL_cipher_get_id() because it is present in
    dnl OpenSSL >=1.0.1, because it is not deprecated, and because Tor
    dnl depends on it.
    [if (getenv("THIS_SHOULDNT_BE_SET_X201803")) SSL_CIPHER_get_id((void *)0);], [],
989
    [/usr/local/opt/openssl /usr/local/openssl /usr/lib/openssl /usr/local/ssl /usr/lib/ssl /usr/local /opt/openssl])
990

991
992
dnl XXXX check for OPENSSL_VERSION_NUMBER == SSLeay()

993
994
995
996
if test "$enable_static_openssl" = "yes"; then
   if test "$tor_cv_library_openssl_dir" = "(system)"; then
     AC_MSG_ERROR("You must specify an explicit --with-openssl-dir=x option when using --enable-static-openssl")
   else
997
     TOR_OPENSSL_LIBS="$TOR_LIBDIR_openssl/libssl.a $TOR_LIBDIR_openssl/libcrypto.a"
998
999
   fi
else
1000
     TOR_OPENSSL_LIBS="-lssl -lcrypto"