summaryrefslogtreecommitdiff
path: root/configure.ac
Commit message (Collapse)AuthorAgeFilesLines
* Merge branch 'tmp-autogen-bak' into 'master'Nikos Mavrogiannopoulos2018-11-141-15/+4
|\ | | | | | | | | build: remove autogen .bak files from repository See merge request gnutls/gnutls!801
| * build: remove autogen .bak files from the repositoryDaiki Ueno2018-11-131-11/+0
| | | | | | | | | | | | | | | | | | | | While the .bak files are necessary for not requiring autogen on deployment environment, they are not needed for development and may cause conflict when other developers use different version of autogen. This removes those files from the repository and require autogen at make dist time. Signed-off-by: Daiki Ueno <dueno@redhat.com>
| * build: use AM_MISSING_PROG for autogenDaiki Ueno2018-11-131-4/+4
| | | | | | | | | | | | | | That makes error message more friendly when autogen is not installed on developing environment. Signed-off-by: Daiki Ueno <dueno@redhat.com>
* | configure.ac: drop obsolete info lineDmitry Eremin-Solenikov2018-11-141-1/+0
|/ | | | | | | | | | Since 4b567871 there is no `ac_enable_session_tickets` variable, so let's drop obsolete remnants. Closes #616 Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com> Noted-by: Dilyan Palauzov
* Merge branch 'tmp-f29' into 'master'Dmitry Eremin-Solenikov2018-11-121-0/+6
|\ | | | | | | | | | | | | .gitlab-ci.yml: move to fedora29 for CI Closes #607 See merge request gnutls/gnutls!794
| * tls13: use system's openssl for interop testingNikos Mavrogiannopoulos2018-11-101-0/+6
| | | | | | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* | configure.ac: merge autogen/libopts checksDmitry Eremin-Solenikov2018-11-101-14/+11
| | | | | | | | | | | | | | Move handling of autogen/libopts to a single place. Enforce usage of local libopts if autogen is not found. Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
* | src: args-std.def: substitute variables using configureDmitry Eremin-Solenikov2018-11-101-0/+1
|/ | | | | | | | | Use standard way (configure script) to substiture variables in args-std.def file, instead of manually replacing them in dist-hook. Fixes #567 Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
* Vendor in CMAC functionality from NettleSimo Sorce2018-10-281-0/+6
| | | | | | | | If nettle's CMAC is not available, use a vendored in version from master. This is necessary as long as we need to link against 3.4 for ABI compatibility reasons. Signed-off-by: Simo Sorce <simo@redhat.com>
* Vendor in CFB8 functionality from NettleSimo Sorce2018-10-241-0/+6
| | | | | | | | If nettle's CFB8 is not available, use a vendored in version from master. This is necessary as long as we need to link against 3.4 for ABI compatibility reasons. Signed-off-by: Simo Sorce <simo@redhat.com>
* pkcs11 uris: the URI scheme is case insensitivetmp-urisNikos Mavrogiannopoulos2018-10-121-1/+1
| | | | | | | | | | | Makes the comparisons of the URI scheme to use c_strcasecmp from gnulib. It also replaces various straw strcasecmp with the gnulib variant. This ensures that comparison will be reliable irrespective of the locale. Resolves #590 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* bumped versions and updated NEWS fileNikos Mavrogiannopoulos2018-09-241-1/+1
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* gnutls_memset: use explicit_bzeroNikos Mavrogiannopoulos2018-08-081-1/+1
| | | | | | | | | That is, use the glibc function when available and the second parameter is zero. Resolves #230 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* Fix gcc-8 -Wabi warningsTim Rühsen2018-07-271-0/+1
| | | | | | Fixes #531 Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* bumped versionsNikos Mavrogiannopoulos2018-07-141-1/+1
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* tests: check explicitly the size of time_tNikos Mavrogiannopoulos2018-07-021-1/+2
| | | | | | | | Previously we were disabling the 2038 tests on 32-bit systems, but there can be 32-bit systems with a 64-bit time_t. Ensure that we run the right tests. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* aarch64: use getauxval() if available to discover cpu capstmp-aarch64Nikos Mavrogiannopoulos2018-06-241-1/+1
| | | | | | | | This improves CPU detection by avoiding the parsing of of a human-readable file and allows operation under debian multilib qemu setup. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* Add configure argument to disable GOST supportDmitry Eremin-Solenikov2018-06-231-0/+1
| | | | Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
* Fix usage of 'autoreconf'Tim Rühsen2018-06-161-1/+1
| | | | | | | | | | | 'autoreconf' created a different configure script than ./bootstrap. The result was a broken wchar.h that failed to compile. The work-around was 'autoreconf -I gl/m4' which is not what a developer expects. This patch moves gl/m4/* to m4/ which is the default include dir for autoreconf. Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* configure: Check for clock_gettime and fmemopen using a proper testMartin Storsjo2018-06-161-1/+18
| | | | | | | | | | | | | | Don't use AC_CHECK_FUNCS for these functions, but actually test by including the real header that defines the functions. This allows the macOS version selection work as intended, making the references to these functions weak if targeting a version of macOS where these functions aren't available. Thanks to -no_weak_imports, these weak references end up in failed linker tests, marking the functions as unavailable. This fixes issue #142. Signed-off-by: Martin Storsjo <martin@martin.st>
* configure: Include sys/random.h before checking for getentropy on macOSMartin Storsjo2018-06-161-0/+3
| | | | | | | | | | | | | | | This function is available since macOS 10.12, but it's in sys/random.h on macOS, contrary to the other platforms supporting it where it is present in unistd.h. If we don't include the right header that declares the function and its availability, the configure check would succeed even if targeting older versions of macOS that lacks the function. Also include the same header in the source file that actually uses getentropy. Signed-off-by: Martin Storsjo <martin@martin.st>
* configure: Pass -no_weak_imports to the linker, if supportedMartin Storsjo2018-06-161-0/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | This avoids linking to functions that aren't available in the lowest targeted macOS version. If the proper header declaring a function is included, and gnutls is built with -mmacosx-version-min or the MACOSX_DEPLOYMENT_TARGET environment variable is set, each reference to a function that doesn't exist in the minimum targeted version will be made a weak reference, so that loading the binary still works, but the function pointer will resolve to NULL if running on a version of the platform that lacks it. Since this project doesn't do such runtime checks for functions it expects to have available, we should instead add this linker option to fail on the weak references. This allows autoconf to work as intended, detecting that these functions aren't usable. This flag appeared in Xcode 8, so check for its availability before using it. (Xcode 8 and the 10.12 SDK is coincidentally the release where most relevant new functions appeared, so with older Xcode versions, the modern platform functions we might want to avoid don't exist.) See issue #142. Signed-off-by: Martin Storsjo <martin@martin.st>
* configure: Remove a duplicate check for fmemopenMartin Storsjo2018-06-161-1/+1
| | | | | | | The duplicate was added in 5bb8a18b without any specific reasoning as to why. Signed-off-by: Martin Storsjo <martin@martin.st>
* corrected check for iovec types in libcNikos Mavrogiannopoulos2018-06-141-1/+1
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* configure: reduce warnings about implicit-fallthrough [ci skip]Nikos Mavrogiannopoulos2018-06-141-0/+1
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* Update GTK-DOC check in configure.acTim Rühsen2018-06-141-1/+13
| | | | Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* nettle: require Nettle library >= 3.4Dmitry Eremin-Solenikov2018-06-131-2/+0
| | | | | | | | Nettle version 3.4 was released more than a half year ago, require it to compile GnuTLS library. It allows us to remove bundled code that was merged into that release. Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
* tests: eliminated destructive teststmp-simplify-nettle-checkNikos Mavrogiannopoulos2018-03-021-6/+2
| | | | | | That adds a dependency to p11-kit 0.23.10 for the test suite. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* configure: simplified nettle version checkNikos Mavrogiannopoulos2018-03-011-7/+1
| | | | | | Relates #401 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* require nettle 3.3 or laterNikos Mavrogiannopoulos2018-02-191-7/+0
| | | | | | This will simplify handling of the x25519 key exchange. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* bumped versiongnutls_3_6_2Nikos Mavrogiannopoulos2018-02-161-1/+1
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* configure: treat solaris as ELF systemNikos Mavrogiannopoulos2018-02-061-0/+1
| | | | | | Resolves #376 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* tests: combined key and cert teststmp-simplify-testsNikos Mavrogiannopoulos2017-11-211-1/+0
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* tests: dtls subdir was merged into main testsNikos Mavrogiannopoulos2017-11-211-1/+0
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* tests: added PKCS#11 module loading testNikos Mavrogiannopoulos2017-11-031-0/+8
| | | | | | | | | | | | | | | | | | This checks: 1. Whether all modules are loaded from p11-kit when no explicit gnutls_pkcs11_init() is called and pkcs11 calls are accessed. 2. Whether only the trusted modules are loaded from p11-kit and no other PKCS#11 calls than PKCS#11 cert validation is performed. 3. Whether the trusted modules are loaded when gnutls_pkcs11_init() is called with manual flag. Resolves #315 Resolves #316 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* bumped versionNikos Mavrogiannopoulos2017-10-181-1/+1
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* cmocka: require 1.0.1Nikos Mavrogiannopoulos2017-09-061-1/+1
| | | | | | | | | This prevents failures in test suite due to insufficient cmocka library version. Resolves #268 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* configure: disable hardware acceleration on aarch64/ilp32 modetmp-disable-aarch64-ilp32Nikos Mavrogiannopoulos2017-08-191-0/+6
| | | | | | | | | Our included assembly code for aarch64 is not suitable for that data mode. Resolves #252 Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* configure.ac: removed conditional FUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTIONtmp-conditional-fuzzer-targetNikos Mavrogiannopoulos2017-08-191-1/+0
| | | | | | | | Instead rely only on the definition, to make fuzzying mode to be enabled even if --enable-fuzzer-target is not specified, but defined b the compiler. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* fuzzer: Initial check in for improved fuzzingTim Rühsen2017-08-161-1/+2
| | | | Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* fuzzer: added a fuzzer targetNikos Mavrogiannopoulos2017-08-161-0/+14
| | | | | | | | This allows to compile the library with flags which will add predictable random generation and eliminate some crypto checks, in order for the library to be used for testing (fuzzying). Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* tests: improved detection of 64-bit systemstmp-added-x86-buildNikos Mavrogiannopoulos2017-08-111-0/+3
| | | | | | | We now use the ${ac_cv_sizeof_unsigned_long_int} variable which gives the numbers used in the host system, not the build one. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* configure: do not utilize the -Wno-format-truncation gcc warningNikos Mavrogiannopoulos2017-07-171-0/+1
| | | | | | The warnings it produces have little value in our use of string functions. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* Removed support for compression mechanismsNikos Mavrogiannopoulos2017-06-221-31/+0
| | | | | | | | | | They are not required for TLS 1.3, and are deprecated for TLS 1.2. We eliminate them in order to reduce the complexity in the record packet handling. Resolves #212 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* Removed support for openpgp certificates and keysNikos Mavrogiannopoulos2017-06-161-4/+0
| | | | | | Resolves #178 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* build: import files from Nettle for RSA-PSSDaiki Ueno2017-05-291-0/+8
| | | | Signed-off-by: Daiki Ueno <dueno@redhat.com>
* configure: warn when building as static library [ci skip]Nikos Mavrogiannopoulos2017-05-241-0/+9
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* sysrng-linux: improved detection of getrandom()tmp-remove-arcfour-from-benchmarksNikos Mavrogiannopoulos2017-05-201-2/+2
| | | | | | The getrandom() call is defined in sys/random.h. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* Makefile: files-update directive will update the auto-generated files in src/Nikos Mavrogiannopoulos2017-05-101-0/+1
| | | | | | This simplifies the update of files generated by autogen. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* Removed support for libidn1Nikos Mavrogiannopoulos2017-05-011-36/+4
| | | | | | | | | | Currently we support both IDNA2003 and IDNA2008. However, IDNA2003 is already obsolete by registrars and NICs, thus there is no reason to continue supporting it. We switch to IDNA2008 exclusively using libidn2. Resolves #194 Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>