diff options
Diffstat (limited to 'cf/crypto.m4')
| -rw-r--r-- | cf/crypto.m4 | 177 |
1 files changed, 177 insertions, 0 deletions
diff --git a/cf/crypto.m4 b/cf/crypto.m4 new file mode 100644 index 0000000..69b2fc9 --- /dev/null +++ b/cf/crypto.m4 @@ -0,0 +1,177 @@ +dnl $Id: crypto.m4 22080 2007-11-16 11:10:54Z lha $ +dnl +dnl test for crypto libraries: +dnl - libcrypto (from openssl) +dnl - own-built libhcrypto + +m4_define([test_headers], [ + #undef KRB5 /* makes md4.h et al unhappy */ + #ifdef HAVE_OPENSSL + #ifdef HAVE_SYS_TYPES_H + #include <sys/types.h> + #endif + #include <openssl/evp.h> + #include <openssl/md4.h> + #include <openssl/md5.h> + #include <openssl/sha.h> + #include <openssl/des.h> + #include <openssl/rc4.h> + #include <openssl/aes.h> + #include <openssl/engine.h> + #include <openssl/ui.h> + #include <openssl/rand.h> + #include <openssl/hmac.h> + #include <openssl/pkcs12.h> + #else + #include <hcrypto/evp.h> + #include <hcrypto/md4.h> + #include <hcrypto/md5.h> + #include <hcrypto/sha.h> + #include <hcrypto/des.h> + #include <hcrypto/rc4.h> + #include <hcrypto/aes.h> + #include <hcrypto/engine.h> + #include <hcrypto/hmac.h> + #include <hcrypto/pkcs12.h> + #endif + ]) +m4_define([test_body], [ + void *schedule = 0; + MD4_CTX md4; + MD5_CTX md5; + SHA_CTX sha1; + SHA256_CTX sha256; + + MD4_Init(&md4); + MD5_Init(&md5); + SHA1_Init(&sha1); + SHA256_Init(&sha256); + EVP_CIPHER_iv_length(((EVP_CIPHER*)0)); + #ifdef HAVE_OPENSSL + RAND_status(); + UI_UTIL_read_pw_string(0,0,0,0); + #endif + + OpenSSL_add_all_algorithms(); + AES_encrypt(0,0,0); + DES_cbc_encrypt(0, 0, 0, schedule, 0, 0); + RC4(0, 0, 0, 0);]) + + +AC_DEFUN([KRB_CRYPTO],[ +crypto_lib=unknown +AC_WITH_ALL([openssl]) + +DIR_hcrypto= + +AC_MSG_CHECKING([for crypto library]) + +openssl=no + +if test "$crypto_lib" = "unknown" -a "$with_krb4" != "no"; then + save_CPPFLAGS="$CPPFLAGS" + save_LIBS="$LIBS" + + cdirs= clibs= + for i in $LIB_krb4; do + case "$i" in + -L*) cdirs="$cdirs $i";; + -l*) clibs="$clibs $i";; + esac + done + + ires= + for i in $INCLUDE_krb4; do + CFLAGS="-DHAVE_OPENSSL $i $save_CFLAGS" + for j in $cdirs; do + for k in $clibs; do + LIBS="$j $k $save_LIBS" + AC_LINK_IFELSE([AC_LANG_PROGRAM([test_headers], + [test_body])], + [openssl=yes ires="$i" lres="$j $k"; break 3]) + done + done + CFLAGS="$i $save_CFLAGS" + for j in $cdirs; do + for k in $clibs; do + LIBS="$j $k $save_LIBS" + AC_LINK_IFELSE([AC_LANG_PROGRAM([test_headers],[test_body])], + [openssl=no ires="$i" lres="$j $k"; break 3]) + done + done + done + + CFLAGS="$save_CFLAGS" + LIBS="$save_LIBS" + if test "$ires" -a "$lres"; then + INCLUDE_hcrypto="$ires" + LIB_hcrypto="$lres" + crypto_lib=krb4 + AC_MSG_RESULT([same as krb4]) + LIB_hcrypto_a='$(LIB_hcrypto)' + LIB_hcrypto_so='$(LIB_hcrypto)' + LIB_hcrypto_appl='$(LIB_hcrypto)' + fi +fi + +if test "$crypto_lib" = "unknown" -a "$with_openssl" != "no"; then + save_CFLAGS="$CFLAGS" + save_LIBS="$LIBS" + INCLUDE_hcrypto= + LIB_hcrypto= + if test "$with_openssl_include" != ""; then + INCLUDE_hcrypto="-I${with_openssl_include}" + fi + if test "$with_openssl_lib" != ""; then + LIB_hcrypto="-L${with_openssl_lib}" + fi + CFLAGS="-DHAVE_OPENSSL ${INCLUDE_hcrypto} ${CFLAGS}" + saved_LIB_hcrypto="$LIB_hcrypto" + for lres in "" "-ldl" "-lnsl -lsocket" "-lnsl -lsocket -ldl"; do + LIB_hcrypto="${saved_LIB_hcrypto} -lcrypto $lres" + LIB_hcrypto_a="$LIB_hcrypto" + LIB_hcrypto_so="$LIB_hcrypto" + LIB_hcrypto_appl="$LIB_hcrypto" + LIBS="${LIBS} ${LIB_hcrypto}" + AC_LINK_IFELSE([AC_LANG_PROGRAM([test_headers],[test_body])], [ + crypto_lib=libcrypto openssl=yes + AC_MSG_RESULT([libcrypto]) + ]) + if test "$crypto_lib" = libcrypto ; then + break; + fi + done + CFLAGS="$save_CFLAGS" + LIBS="$save_LIBS" +fi + +if test "$crypto_lib" = "unknown"; then + + DIR_hcrypto='hcrypto' + LIB_hcrypto='$(top_builddir)/lib/hcrypto/libhcrypto.la' + LIB_hcrypto_a='$(top_builddir)/lib/hcrypto/.libs/libhcrypto.a' + LIB_hcrypto_so='$(top_builddir)/lib/hcrypto/.libs/libhcrypto.so' + LIB_hcrypto_appl="-lhcrypto" + + AC_MSG_RESULT([included libhcrypto]) + +fi + +if test "$with_krb4" != no -a "$crypto_lib" != krb4; then + AC_MSG_ERROR([the crypto library used by krb4 lacks features +required by Kerberos 5; to continue, you need to install a newer +Kerberos 4 or configure --without-krb4]) +fi + +if test "$openssl" = "yes"; then + AC_DEFINE([HAVE_OPENSSL], 1, [define to use openssl's libcrypto]) +fi +AM_CONDITIONAL(HAVE_OPENSSL, test "$openssl" = yes)dnl + +AC_SUBST(DIR_hcrypto) +AC_SUBST(INCLUDE_hcrypto) +AC_SUBST(LIB_hcrypto) +AC_SUBST(LIB_hcrypto_a) +AC_SUBST(LIB_hcrypto_so) +AC_SUBST(LIB_hcrypto_appl) +]) |
