configure.in (153816) | configure.in (163976) |
---|---|
1# Copyright (C) 2004, 2005 Internet Systems Consortium, Inc. ("ISC") | 1# Copyright (C) 2004-2006 Internet Systems Consortium, Inc. ("ISC") |
2# Copyright (C) 1998-2003 Internet Software Consortium. 3# 4# Permission to use, copy, modify, and distribute this software for any 5# purpose with or without fee is hereby granted, provided that the above 6# copyright notice and this permission notice appear in all copies. 7# 8# THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH 9# REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY 10# AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, 11# INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM 12# LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE 13# OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR 14# PERFORMANCE OF THIS SOFTWARE. 15 16dnl 17AC_DIVERT_PUSH(1)dnl 18esyscmd([sed "s/^/# /" COPYRIGHT])dnl 19AC_DIVERT_POP()dnl 20 | 2# Copyright (C) 1998-2003 Internet Software Consortium. 3# 4# Permission to use, copy, modify, and distribute this software for any 5# purpose with or without fee is hereby granted, provided that the above 6# copyright notice and this permission notice appear in all copies. 7# 8# THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH 9# REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY 10# AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, 11# INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM 12# LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE 13# OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR 14# PERFORMANCE OF THIS SOFTWARE. 15 16dnl 17AC_DIVERT_PUSH(1)dnl 18esyscmd([sed "s/^/# /" COPYRIGHT])dnl 19AC_DIVERT_POP()dnl 20 |
21AC_REVISION($Revision: 1.294.2.23.2.51 $) | 21AC_REVISION($Revision: 1.294.2.23.2.51.4.3 $) |
22 23AC_INIT(lib/dns/name.c) 24AC_PREREQ(2.13) 25 26AC_CONFIG_HEADER(config.h) 27AC_CONFIG_SUBDIRS(lib/bind) 28 29AC_CANONICAL_HOST --- 322 unchanged lines hidden (view full) --- 352# 353# Find the machine's endian flavor. 354# 355AC_C_BIGENDIAN 356 357# 358# was --with-openssl specified? 359# | 22 23AC_INIT(lib/dns/name.c) 24AC_PREREQ(2.13) 25 26AC_CONFIG_HEADER(config.h) 27AC_CONFIG_SUBDIRS(lib/bind) 28 29AC_CANONICAL_HOST --- 322 unchanged lines hidden (view full) --- 352# 353# Find the machine's endian flavor. 354# 355AC_C_BIGENDIAN 356 357# 358# was --with-openssl specified? 359# |
360OPENSSL_WARNING= |
|
360AC_MSG_CHECKING(for OpenSSL library) 361AC_ARG_WITH(openssl, 362[ --with-openssl[=PATH] Build with OpenSSL [yes|no|path]. 363 (Required for DNSSEC)], 364 use_openssl="$withval", use_openssl="auto") 365 366openssldirs="/usr /usr/local /usr/local/ssl /usr/pkg" 367if test "$use_openssl" = "auto" --- 89 unchanged lines hidden (view full) --- 457 ], 458 [AC_MSG_RESULT(unknown) 459 AC_MSG_ERROR(OpenSSL has unsupported dynamic loading)], 460 [AC_MSG_RESULT(assuming it does work on target platform)]) 461 ], 462 [AC_MSG_RESULT(assuming it does work on target platform)] 463 ) 464 | 361AC_MSG_CHECKING(for OpenSSL library) 362AC_ARG_WITH(openssl, 363[ --with-openssl[=PATH] Build with OpenSSL [yes|no|path]. 364 (Required for DNSSEC)], 365 use_openssl="$withval", use_openssl="auto") 366 367openssldirs="/usr /usr/local /usr/local/ssl /usr/pkg" 368if test "$use_openssl" = "auto" --- 89 unchanged lines hidden (view full) --- 458 ], 459 [AC_MSG_RESULT(unknown) 460 AC_MSG_ERROR(OpenSSL has unsupported dynamic loading)], 461 [AC_MSG_RESULT(assuming it does work on target platform)]) 462 ], 463 [AC_MSG_RESULT(assuming it does work on target platform)] 464 ) 465 |
465# 466# OpenSSLDie is new with CERT CS-2002-23. If we see it we have may 467# have a patched library otherwise check that we are greater than 468# the fixed versions 469# 470 AC_CHECK_FUNC(OpenSSLDie, | 466AC_ARG_ENABLE(openssl-version-check, 467[AC_HELP_STRING([--enable-openssl-version-check], 468 [Check OpenSSL Version @<:@default=yes@:>@])]) 469case "$enable_openssl_version_check" in 470yes|'') |
471 AC_MSG_CHECKING(OpenSSL library version) 472 AC_TRY_RUN([ 473#include <stdio.h> 474#include <openssl/opensslv.h> 475int main() { | 471 AC_MSG_CHECKING(OpenSSL library version) 472 AC_TRY_RUN([ 473#include <stdio.h> 474#include <openssl/opensslv.h> 475int main() { |
476 if (OPENSSL_VERSION_NUMBER >= 0x0090581fL) | 476 if ((OPENSSL_VERSION_NUMBER >= 0x009070cfL && 477 OPENSSL_VERSION_NUMBER < 0x009080000L) || 478 OPENSSL_VERSION_NUMBER >= 0x0090804fL) |
477 return (0); 478 printf("\n\nFound OPENSSL_VERSION_NUMBER %#010x\n", 479 OPENSSL_VERSION_NUMBER); | 479 return (0); 480 printf("\n\nFound OPENSSL_VERSION_NUMBER %#010x\n", 481 OPENSSL_VERSION_NUMBER); |
480 printf("Require OPENSSL_VERSION_NUMBER 0x0090581f or greater\n\n"); | 482 printf("Require OPENSSL_VERSION_NUMBER 0x009070cf or greater (0.9.7l)\n" 483 "Require OPENSSL_VERSION_NUMBER 0x0090804f or greater (0.9.8d)\n\n"); |
481 return (1); 482} | 484 return (1); 485} |
483], | 486 ], |
484 [AC_MSG_RESULT(ok)], 485 [AC_MSG_RESULT(not compatible) | 487 [AC_MSG_RESULT(ok)], 488 [AC_MSG_RESULT(not compatible) |
486 AC_MSG_ERROR(you need OpenSSL 0.9.5a or newer)], | 489 OPENSSL_WARNING=yes 490 ], |
487 [AC_MSG_RESULT(assuming target platform has compatible version)]) | 491 [AC_MSG_RESULT(assuming target platform has compatible version)]) |
488 , 489 AC_MSG_RESULT(did not find fixes for CERT CA-2002-23) 490 AC_MSG_CHECKING(OpenSSL library version) 491 AC_TRY_RUN([ 492#include <stdio.h> 493#include <openssl/opensslv.h> 494int main() { 495 if ((OPENSSL_VERSION_NUMBER >= 0x0090605fL && 496 OPENSSL_VERSION_NUMBER < 0x009070000L) || 497 OPENSSL_VERSION_NUMBER >= 0x00907003L) 498 return (0); 499 printf("\n\nFound OPENSSL_VERSION_NUMBER %#010x\n", 500 OPENSSL_VERSION_NUMBER); 501 printf("Require OPENSSL_VERSION_NUMBER 0x0090605f or greater (0.9.6e)\n" 502 "Require OPENSSL_VERSION_NUMBER 0x00907003 or greater (0.9.7-beta2)\n\n"); 503 return (1); 504} 505], 506 [AC_MSG_RESULT(ok)], 507 [AC_MSG_RESULT(not compatible) 508 AC_MSG_ERROR(you need OpenSSL 0.9.6e/0.9.7-beta2 (or newer): CERT CA-2002-23)], 509 [AC_MSG_RESULT(assuming target platform has compatible version)])) | 492;; 493no) 494 AC_MSG_RESULT(Skipped OpenSSL version check) 495;; 496esac 497 |
510 AC_MSG_CHECKING(for OpenSSL DSA support) 511 if test -f $use_openssl/include/openssl/dsa.h 512 then 513 AC_DEFINE(HAVE_OPENSSL_DSA) 514 AC_MSG_RESULT(yes) 515 else 516 AC_MSG_RESULT(no) 517 fi --- 1593 unchanged lines hidden (view full) --- 2111 isc-config.sh 2112 doc/xsl/isc-docbook-chunk.xsl 2113 doc/xsl/isc-docbook-html.xsl 2114 doc/xsl/isc-docbook-latex.xsl 2115 doc/xsl/isc-manpage.xsl 2116) 2117chmod a+x isc-config.sh 2118 | 498 AC_MSG_CHECKING(for OpenSSL DSA support) 499 if test -f $use_openssl/include/openssl/dsa.h 500 then 501 AC_DEFINE(HAVE_OPENSSL_DSA) 502 AC_MSG_RESULT(yes) 503 else 504 AC_MSG_RESULT(no) 505 fi --- 1593 unchanged lines hidden (view full) --- 2099 isc-config.sh 2100 doc/xsl/isc-docbook-chunk.xsl 2101 doc/xsl/isc-docbook-html.xsl 2102 doc/xsl/isc-docbook-latex.xsl 2103 doc/xsl/isc-manpage.xsl 2104) 2105chmod a+x isc-config.sh 2106 |
2107if test "X$OPENSSL_WARNING" != "X"; then 2108cat << \EOF 2109WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING 2110WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING 2111WARNING WARNING 2112WARNING Your OpenSSL crypto library may be vulnerable to WARNING 2113WARNING one or more of the the following known security WARNING 2114WARNING flaws: WARNING 2115WARNING WARNING 2116WARNING CAN-2002-0659, CAN-2006-4339, CVE-2006-2937 and WARNING 2117WARNING CVE-2006-2940. WARNING 2118WARNING WARNING 2119WARNING It is recommended that you upgrade to OpenSSL WARNING 2120WARNING version 0.9.8d/0.9.7l (or greater). WARNING 2121WARNING WARNING 2122WARNING You can disable this warning by specifying: WARNING 2123WARNING WARNING 2124WARNING --disable-openssl-version-check WARNING 2125WARNING WARNING 2126WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING 2127WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING 2128EOF 2129fi 2130 |
|
2119# Tell Emacs to edit this file in shell mode. 2120# Local Variables: 2121# mode: sh 2122# End: | 2131# Tell Emacs to edit this file in shell mode. 2132# Local Variables: 2133# mode: sh 2134# End: |