1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
|
# -*- Autoconf -*-
# $Id$
# Bare-bones autoconf for RPKI tools. This will almost certainly
# expand later, right now I'm only using it for things that absolutely
# must be configured just to get the code to build at all.
AC_PREREQ(2.61)
AC_INIT(rpkitools, 1.0,)
AC_CONFIG_SRCDIR([rcynic/rcynic.c])
AC_CONFIG_AUX_DIR([buildtools])
AC_PROG_CC
AC_CANONICAL_HOST
AC_CHECK_SIZEOF([long])
# We'd like to build rcynic as a static binary if we can, because that
# makes it much simpler to run rcynic in a chroot jail, but we don't
# know how to do it on all platforms, so we try the hack we know, and
# if that doesn't work, oh well.
AC_MSG_CHECKING([if linker supports -static])
old_LDFLAGS="$LDFLAGS"
LDFLAGS="$LDFLAGS -static"
AC_LINK_IFELSE(
[AC_LANG_SOURCE([[int main (int argc, char *argv[]) { return 0; }]])],
[
AC_MSG_RESULT(yes)
LD_STATIC_FLAG='-static'
],
[
AC_MSG_RESULT(no)
LD_STATIC_FLAG=''
]
)
AC_SUBST(LD_STATIC_FLAG)
LDFLAGS="$old_LDFLAGS"
unset old_LDFLAGS
# OpenSSL has its own build system that bears no relationship to
# anything but itself. On at least one platform, OpenSSL's opinion on
# the right thing to do is so completely at odds with everything else
# that the resulting libraries require special compilation options for
# any program that wants to use them. Feh.
AC_MSG_CHECKING([what configuration target to use when building OpenSSL])
OPENSSL_CONFIG_COMMAND='./config'
case $host in
i*86-apple-darwin*)
if test "$ac_cv_sizeof_long" = 8
then
OPENSSL_CONFIG_COMMAND='./Configure darwin64-x86_64-cc'
fi
;;
esac
AC_SUBST(OPENSSL_CONFIG_COMMAND)
AC_MSG_RESULT([$OPENSSL_CONFIG_COMMAND])
AC_PATH_PROG([XSLTPROC], [xsltproc])
AC_PATH_PROG([AWK], [awk])
if test "x$XSLTPROC" != "x" && test "x$AWK" != "x"
then
AC_CONFIG_FILES([rcynic/show.sh], [chmod +x rcynic/show.sh])
fi
# Figure out whether we need to build our own OpenSSL library or can
# use the system libraries. We're looking for two recent features:
# CMS and RFC 3779 support.
AC_CHECK_LIB([crypto], [v3_addr_validate_path],
[system_openssl_has_rfc3779=yes],
[system_openssl_has_rfc3779=no])
AC_CHECK_LIB([crypto], [CMS_verify],
[system_openssl_has_cms=yes],
[system_openssl_has_cms=no])
if test "$system_openssl_has_rfc3779" = yes && test "$system_openssl_has_cms" = yes
then
have_usable_openssl=yes
else
have_usable_openssl=no
fi
AC_PATH_PROG([PYTHON], [python])
if test "x$PYTHON" = "x"
then
have_python=no
have_python_h=no
need_pywrap=no
have_django=no
else
have_python=yes
AC_MSG_CHECKING([distutils to find out where Python.h should be])
python_h=`$PYTHON -c 'import distutils.sysconfig; print distutils.sysconfig.get_python_inc() + "/Python.h"'`
AC_MSG_RESULT([$python_h])
AC_CHECK_HEADER([$python_h],
[have_python_h=yes],
[have_python_h=no])
if test "x$have_python_h" = "xyes"
then
AC_MSG_CHECKING([whether Python links against libcrypto])
if ldd $PYTHON 2>&AS_MESSAGE_LOG_FD | $PYTHON -c 'import sys; sys.exit("libcrypto" not in sys.stdin.read())'
then
need_pywrap=yes
else
need_pywrap=no
fi
AC_MSG_RESULT([$need_pywrap])
fi
AC_MSG_CHECKING([for Django])
if $PYTHON -c 'import django' 2>/dev/null
then
have_django="yes"
else
have_django="no"
fi
AC_MSG_RESULT([$have_django])
fi
AC_ARG_ENABLE([system_openssl], [AS_HELP_STRING([--disable-system-openssl], [Don't build against system copy of OpenSSL])], [], [enable_system_openssl=auto])
AC_ARG_ENABLE([python], [AS_HELP_STRING([--disable-python], [Don't build any of the Python-based tools])], [], [enable_python=auto])
AC_ARG_ENABLE([pywrap], [AS_HELP_STRING([--enable-pywrap], [Build pywrap])], [], [enable_pywrap=auto])
AC_ARG_ENABLE([django], [AS_HELP_STRING([--disable-django], [Don't build Django GUI])], [], [enable_django=auto])
case $enable_system_openssl in
yes) build_openssl=no
if test $have_usable_openssl = no
then
AC_MSG_ERROR([I can't find an OpenSSL crypto library with CMS and RFC 3779 support, maybe you need to set LDFLAGS?])
fi
;;
no) build_openssl=yes
;;
auto) if test $have_usable_openssl = no
then
build_openssl=yes
else
build_openssl=no
fi
;;
*) AC_MSG_ERROR([Unrecognized value for --enable-system-openssl: $enable-system-openssl]);;
esac
case $enable_python in
yes) build_python=yes
if test $have_python = no
then
AC_MSG_ERROR([I can't find a Python binary, maybe you need to set PATH?])
fi
;;
no) build_python=no
;;
auto) build_python=$have_python
if test $have_python = no
then
AC_MSG_WARN([I can't find your Python binary, disabling build for all Python-using code])
fi
;;
*) AC_MSG_ERROR([Unrecognized value for --enable-python: $enable-python]);;
esac
case $enable_pywrap in
yes) build_pywrap=yes
if test $build_python = no
then
AC_MSG_ERROR([Building pywrap without Python makes no sense])
fi
if test $build_openssl = no
then
AC_MSG_WARN([Building pywrap when using system OpenSSL library makes no sense (but I'll try to do it anyway)])
fi
;;
no) build_pywrap=no
if test $need_pywrap = yes
then
AC_MSG_ERROR([This platform appears to require pywrap])
fi
;;
auto) build_pywrap=$need_pywrap
;;
*) AC_MSG_ERROR([Unrecognized value for --enable-pywrap: $enable-pywrap]);;
esac
case $enable_django in
yes) build_django=yes
if test $have_django = no
then
AC_MSG_WARN([You don't appear to have Django installed (but I'll try to build the Django-based GUI anyway)])
fi
;;
no) build_django=no
;;
auto) build_django=$have_django
;;
*) AC_MSG_ERROR([Unrecognized value for --enable-django: $enable-django]);;
esac
if test $build_python = yes && test $have_python_h = no
then
AC_MSG_ERROR([Need Python sources to build extension module, either install sources or rerun with --disable-python])
fi
# Maze of Python-related tests is complicated.
#
# - If we don't have Python at all, we can't run any of the Python
# tools and probably should not even attempt to configure them.
#
# - If the system Python executable was linked against OpenSSL -and-
# we had to build our own copy of OpenSSL (because the system copy
# wasn't good enough), we need to build pywrap and configure scripts
# to use it.
#
# - Otherwise (we have python and it's not linked against the wrong
# version of OpenSSL), we can use the system Python executable and
# don't need pywrap.
#
# - Unless we're punting on Python entirely, we need to build POW,
# either against the system OpenSSL or against our own copy.
#
# - If we're building either POW or pywrap, we need Python.h.
#
# If any of this fails, we need to tell the user and give useful hint
# on what to do next (doc reference, whatever).
if test $build_pywrap = yes
then
# Eventually this should be the installation directory, but
# we're not there yet.
PYWRAP=`pwd`/pow/pywrap/pywrap
else
PYWRAP=$PYTHON
fi
AC_SUBST(PYWRAP)
if test $build_python = yes
then
# These are plain Python scripts, do not require pywrap
AC_CONFIG_FILES([rpkid/backup-sql:buildtools/python-header:rpkid/backup-sql.py], [chmod +x rpkid/backup-sql])
AC_CONFIG_FILES([rpkid/sql-setup:buildtools/python-header:rpkid/sql-setup.py], [chmod +x rpkid/sql-setup])
AC_CONFIG_FILES([rpkid/start-servers:buildtools/python-header:rpkid/start-servers.py], [chmod +x rpkid/start-servers])
# These use POW, so may require pywrap
AC_CONFIG_FILES([rpkid/irbe_cli:buildtools/pywrap-header:rpkid/irbe_cli.py], [chmod +x rpkid/irbe_cli])
AC_CONFIG_FILES([rpkid/irdbd:buildtools/pywrap-header:rpkid/irdbd.py], [chmod +x rpkid/irdbd])
AC_CONFIG_FILES([rpkid/myrpki:buildtools/pywrap-header:rpkid/myrpki.py], [chmod +x rpkid/myrpki])
AC_CONFIG_FILES([rpkid/pubd:buildtools/pywrap-header:rpkid/pubd.py], [chmod +x rpkid/pubd])
AC_CONFIG_FILES([rpkid/rootd:buildtools/pywrap-header:rpkid/rootd.py], [chmod +x rpkid/rootd])
AC_CONFIG_FILES([rpkid/rpkid:buildtools/pywrap-header:rpkid/rpkid.py], [chmod +x rpkid/rpkid])
fi
# This isn't the complete list of Makefiles (let alone setup.py, etc
# files) in this tree, just the ones we're customizing today. At some
# point I should do a pass through the rest of the tree, making clever
# use of abs_top_builddir, etc.
AC_CONFIG_FILES([Makefile
openssl/Makefile
rcynic/Makefile
rpkid/rpki/__doc__.py])
AC_OUTPUT
|
