1 dnl configure.in for linux strongSwan
2 dnl Copyright (C) 2006 Martin Willi
3 dnl Hochschule fuer Technik Rapperswil
5 dnl This program is free software; you can redistribute it and/or modify it
6 dnl under the terms of the GNU General Public License as published by the
7 dnl Free Software Foundation; either version 2 of the License, or (at your
8 dnl option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>.
10 dnl This program is distributed in the hope that it will be useful, but
11 dnl WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
12 dnl or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
15 dnl ===========================
16 dnl initialize & set some vars
17 dnl ===========================
19 AC_INIT(strongSwan,4.1.8)
20 AM_INIT_AUTOMAKE(tar-ustar)
22 AC_SUBST(confdir, '${sysconfdir}')
24 dnl =================================
25 dnl check --enable-xxx & --with-xxx
26 dnl =================================
31 AS_HELP_STRING([--with-default-pkcs11=lib],[set the default PKCS11 library other than "/usr/lib/opensc-pkcs11.so"]),
32 [AC_DEFINE_UNQUOTED(PKCS11_DEFAULT_LIB, "$withval")],
33 [AC_DEFINE_UNQUOTED(PKCS11_DEFAULT_LIB, "/usr/lib/opensc-pkcs11.so")]
38 AS_HELP_STRING([--with-xauth-module=lib],[set the path to the XAUTH module]),
39 [AC_DEFINE_UNQUOTED(XAUTH_DEFAULT_LIB, "$withval")],
44 AS_HELP_STRING([--with-random-device=dev],[set the device for real random data other than "/dev/random"]),
45 [AC_DEFINE_UNQUOTED(DEV_RANDOM, "$withval")],
46 [AC_DEFINE_UNQUOTED(DEV_RANDOM, "/dev/random")]
50 AS_HELP_STRING([--with-resolv-conf=file],[set the file to store DNS server information other than "sysconfdir/resolv.conf"]),
51 [AC_DEFINE_UNQUOTED(RESOLV_CONF, "$withval")],
52 [AC_DEFINE_UNQUOTED(RESOLV_CONF, "${sysconfdir}/resolv.conf")]
57 AS_HELP_STRING([--with-urandom-device=dev],[set the device for pseudo random data other than "/dev/urandom"]),
58 [AC_DEFINE_UNQUOTED(DEV_URANDOM, "$withval")],
59 [AC_DEFINE_UNQUOTED(DEV_URANDOM, "/dev/urandom")]
64 AS_HELP_STRING([--with-ipsecdir=dir],[installation path for ipsec tools other than "libexecdir/ipsec"]),
65 [AC_SUBST(ipsecdir, "$withval")],
66 [AC_SUBST(ipsecdir, "${libexecdir}/ipsec")]
71 AS_HELP_STRING([--with-piddir=dir],[path for PID and UNIX socket files other than "/var/run"]),
72 [AC_SUBST(piddir, "$withval")],
73 [AC_SUBST(piddir, "/var/run")]
78 AS_HELP_STRING([--with-eapdir=dir],[path for pluggable EAP modules other than "ipsecdir/plugins/eap"]),
79 [AC_SUBST(eapdir, "$withval")],
80 [AC_SUBST(eapdir, "${ipsecdir}/plugins/eap")]
85 AS_HELP_STRING([--with-backenddir=dir],[path for pluggable configuration backend modules other than "ipsecdir/plugins/backends"]),
86 [AC_SUBST(backenddir, "$withval")],
87 [AC_SUBST(backenddir, "${ipsecdir}/plugins/backends")]
92 AS_HELP_STRING([--with-interfacedir=dir],[path for pluggable control interface modules other than "ipsecdir/plugins/interfaces"]),
93 [AC_SUBST(interfacedir, "$withval")],
94 [AC_SUBST(interfacedir, "${ipsecdir}/plugins/interfaces")]
99 AS_HELP_STRING([--with-sim-reader=library.so],[library containing the sim_run_alg() function for EAP-SIM]),
100 [AC_DEFINE_UNQUOTED(SIM_READER_LIB, "$withval")]
105 AS_HELP_STRING([--with-linux-headers=dir],[use the linux header files in dir instead of the supplied ones in "src/include"]),
106 [AC_SUBST(linuxdir, "$withval")], [AC_SUBST(linuxdir, "../include")]
108 AC_SUBST(LINUX_HEADERS)
112 AS_HELP_STRING([--with-routing-table=num],[use routing table for IPsec routes (default: 220)]),
113 [AC_DEFINE_UNQUOTED(IPSEC_ROUTING_TABLE, $withval) AC_SUBST(IPSEC_ROUTING_TABLE, "$withval")],
114 [AC_DEFINE_UNQUOTED(IPSEC_ROUTING_TABLE, 220) AC_SUBST(IPSEC_ROUTING_TABLE, "220")]
118 [routing-table-prio],
119 AS_HELP_STRING([--with-routing-table-prio=prio],[priority for IPsec routing table (default: 220)]),
120 [AC_DEFINE_UNQUOTED(IPSEC_ROUTING_TABLE_PRIO, $withval) AC_SUBST(IPSEC_ROUTING_TABLE_PRIO, "$withval")],
121 [AC_DEFINE_UNQUOTED(IPSEC_ROUTING_TABLE_PRIO, 220) AC_SUBST(IPSEC_ROUTING_TABLE_PRIO, "220")]
126 AS_HELP_STRING([--with-uid=uid],[change user of the daemons to UID after startup (default is 0).]),
127 [AC_DEFINE_UNQUOTED(IPSEC_UID, $withval) AC_SUBST(ipsecuid, "$withval")],
128 [AC_DEFINE_UNQUOTED(IPSEC_UID, 0) AC_SUBST(ipsecuid, "0")]
133 AS_HELP_STRING([--with-gid=gid],[change group of the daemons to GID after startup (default is 0).]),
134 [AC_DEFINE_UNQUOTED(IPSEC_GID, $withval) AC_SUBST(ipsecgid, "$withval")],
135 [AC_DEFINE_UNQUOTED(IPSEC_GID, 0) AC_SUBST(ipsecgid, "0")]
140 AS_HELP_STRING([--enable-http],[enable OCSP and fetching of Certificates and CRLs over HTTP (default is NO). Requires libcurl.]),
141 [if test x$enableval = xyes; then
146 AM_CONDITIONAL(USE_LIBCURL, test x$http = xtrue)
150 AS_HELP_STRING([--enable-ldap],[enable fetching of CRLs from LDAP (default is NO). Requires openLDAP.]),
151 [if test x$enableval = xyes; then
156 AM_CONDITIONAL(USE_LIBLDAP, test x$ldap = xtrue)
160 AS_HELP_STRING([--enable-dbus],[enable DBUS configuration and control interface (default is NO). Requires libdbus.]),
161 [if test x$enableval = xyes; then
166 AM_CONDITIONAL(USE_LIBDBUS, test x$dbus = xtrue)
170 AS_HELP_STRING([--enable-xml],[enable XML configuration and control interface (default is NO). Requires libxml.]),
171 [if test x$enableval = xyes; then
176 AM_CONDITIONAL(USE_LIBXML, test x$xml = xtrue)
180 AS_HELP_STRING([--enable-sqlite],[enable SQLite configuration backend (default is NO). Requires libsqlite3.]),
181 [if test x$enableval = xyes; then
186 AM_CONDITIONAL(USE_LIBSQLITE, test x$sqlite = xtrue)
190 AS_HELP_STRING([--enable-smartcard],[enable smartcard support (default is NO).]),
191 [if test x$enableval = xyes; then
196 AM_CONDITIONAL(USE_SMARTCARD, test x$smartcard = xtrue)
200 AS_HELP_STRING([--enable-cisco-quirks],[enable support of Cisco VPN client (default is NO).]),
201 [if test x$enableval = xyes; then
205 AM_CONDITIONAL(USE_CISCO_QUIRKS, test x$cisco_quirks = xtrue)
209 AS_HELP_STRING([--enable-leak-detective],[enable malloc hooks to find memory leaks (default is NO).]),
210 [if test x$enableval = xyes; then
214 AM_CONDITIONAL(USE_LEAK_DETECTIVE, test x$leak_detective = xtrue)
218 AS_HELP_STRING([--enable-eap-sim],[build SIM authenication module for EAP (default is NO).]),
219 [if test x$enableval = xyes; then
223 AM_CONDITIONAL(BUILD_EAP_SIM, test x$eap_sim = xtrue)
227 AS_HELP_STRING([--enable-nat-transport],[enable NAT traversal with IPsec transport mode (default is NO).]),
228 [if test x$enableval = xyes; then
232 AM_CONDITIONAL(USE_NAT_TRANSPORT, test x$nat_transport = xtrue)
236 AS_HELP_STRING([--disable-vendor-id],[disable the sending of the strongSwan vendor ID (default is NO).]),
237 [if test x$enableval = xyes; then
244 AM_CONDITIONAL(USE_VENDORID, test x$vendor_id = xtrue)
248 AS_HELP_STRING([--disable-xauth-vid],[disable the sending of the XAUTH vendor ID (default is NO).]),
249 [if test x$enableval = xyes; then
256 AM_CONDITIONAL(USE_XAUTH_VID, test x$xauth_vid = xtrue)
260 AS_HELP_STRING([--enable-uml],[build the UML test framework (default is NO).]),
261 [if test x$enableval = xyes; then
265 AM_CONDITIONAL(USE_UML, test x$uml = xtrue)
269 AS_HELP_STRING([--enable-manager],[build web management console (default is NO).]),
270 [if test x$enableval = xyes; then
274 AM_CONDITIONAL(USE_MANAGER, test x$manager = xtrue)
278 AS_HELP_STRING([--enable-p2p],[enable peer-to-peer NAT traversal (default is NO).]),
279 [if test x$enableval = xyes; then
284 AM_CONDITIONAL(USE_P2P, test x$p2p = xtrue)
288 AS_HELP_STRING([--enable-integrity-test],[enable the integrity test of the crypto library (default is NO).]),
289 [if test x$enableval = xyes; then
291 AC_DEFINE(INTEGRITY_TEST)
294 AM_CONDITIONAL(USE_INTEGRITY_TEST, test x$integrity_test = xtrue)
298 AS_HELP_STRING([--disable-self-test],[disable the self-test of the crypto library (default is NO).]),
299 [if test x$enableval = xyes; then
303 AC_DEFINE(NO_SELF_TEST)
307 AM_CONDITIONAL(USE_SELF_TEST, test x$self_test = xtrue)
309 dnl =========================
310 dnl check required programs
311 dnl =========================
318 AC_PATH_PROG([GPERF], [gperf], [], [$PATH:/bin:/usr/bin:/usr/local/bin])
319 AC_PATH_PROG([PERL], [perl], [], [$PATH:/bin:/usr/bin:/usr/local/bin])
321 dnl ==========================
322 dnl check required libraries
323 dnl ==========================
325 AC_CHECK_FUNCS(backtrace)
326 AC_CHECK_FUNCS(getifaddrs)
328 AC_HAVE_LIBRARY([gmp],[LIBS="$LIBS"],[AC_MSG_ERROR([GNU Multi Precision library gmp not found])])
329 if test "$ldap" = "true"; then
330 AC_HAVE_LIBRARY([ldap],[LIBS="$LIBS"],[AC_MSG_ERROR([LDAP enabled, but library ldap not found])])
331 AC_HAVE_LIBRARY([lber],[LIBS="$LIBS"],[AC_MSG_ERROR([LDAP enabled, but library lber not found])])
333 if test "$http" = "true"; then
334 AC_HAVE_LIBRARY([curl],[LIBS="$LIBS"],[AC_MSG_ERROR([HTTP enabled, but library curl not found])])
337 if test "$xml" = "true"; then
338 PKG_CHECK_MODULES(xml, libxml-2.0,, AC_MSG_ERROR([No libxml2 package information found]))
343 if test "$dbus" = "true"; then
344 PKG_CHECK_MODULES(dbus, dbus-1,, AC_MSG_ERROR([No libdbus package information found]))
345 AC_SUBST(dbus_CFLAGS)
350 dnl =============================
351 dnl check required header files
352 dnl =============================
355 AC_MSG_CHECKING([gmp.h version >= 4.1.4])
359 #if (__GNU_MP_VERSION*100 + __GNU_MP_VERSION_MINOR*10 + __GNU_MP_VERSION_PATCHLEVEL) < 414
363 [AC_MSG_RESULT([yes])], [AC_MSG_RESULT([no]); AC_MSG_ERROR([No usable gmp.h found!])]
365 AC_MSG_CHECKING([capset() definition])
367 [#include <linux/capset.h>],
371 [AC_MSG_RESULT([yes])], [AC_MSG_RESULT([no]); AC_DEFINE_UNQUOTED(NO_CAPSET_DEFINED, 1)]
373 if test "$ldap" = "true"; then
374 AC_CHECK_HEADER([ldap.h],,[AC_MSG_ERROR([LDAP enabled, but ldap.h not found!])])
376 if test "$http" = "true"; then
377 AC_CHECK_HEADER([curl/curl.h],,[AC_MSG_ERROR([HTTP enabled, but curl.h not found!])])
380 dnl ==============================
382 dnl ==============================
388 src/libstrongswan/Makefile
389 src/libcrypto/Makefile
390 src/libfreeswan/Makefile
398 src/_updown_espmark/Makefile
399 src/_copyright/Makefile
401 src/scepclient/Makefile