227 lines
7.1 KiB
Plaintext
227 lines
7.1 KiB
Plaintext
|
|
# Copyright (C) Igor Sysoev
|
|
# Copyright (C) Nginx, Inc.
|
|
|
|
|
|
if [ $OPENSSL != NONE ]; then
|
|
|
|
have=NGX_OPENSSL . auto/have
|
|
have=NGX_SSL . auto/have
|
|
|
|
have=NGX_OPENSSL_NO_CONFIG . auto/have
|
|
|
|
if [ $USE_OPENSSL_QUIC = YES ]; then
|
|
have=NGX_QUIC . auto/have
|
|
fi
|
|
|
|
case "$CC" in
|
|
|
|
cl | bcc32)
|
|
CFLAGS="$CFLAGS -DNO_SYS_TYPES_H"
|
|
|
|
CORE_INCS="$CORE_INCS $OPENSSL/openssl/include"
|
|
CORE_DEPS="$CORE_DEPS $OPENSSL/openssl/include/openssl/ssl.h"
|
|
|
|
if [ -f $OPENSSL/ms/do_ms.bat ]; then
|
|
# before OpenSSL 1.1.0
|
|
CORE_LIBS="$CORE_LIBS $OPENSSL/openssl/lib/ssleay32.lib"
|
|
CORE_LIBS="$CORE_LIBS $OPENSSL/openssl/lib/libeay32.lib"
|
|
else
|
|
# OpenSSL 1.1.0+
|
|
CORE_LIBS="$CORE_LIBS $OPENSSL/openssl/lib/libssl.lib"
|
|
CORE_LIBS="$CORE_LIBS $OPENSSL/openssl/lib/libcrypto.lib"
|
|
fi
|
|
|
|
# libeay32.lib requires gdi32.lib
|
|
CORE_LIBS="$CORE_LIBS gdi32.lib"
|
|
# OpenSSL 1.0.0 requires crypt32.lib
|
|
CORE_LIBS="$CORE_LIBS crypt32.lib"
|
|
;;
|
|
|
|
*)
|
|
CORE_INCS="$CORE_INCS $OPENSSL/.openssl/include"
|
|
CORE_DEPS="$CORE_DEPS $OPENSSL/.openssl/include/openssl/ssl.h"
|
|
CORE_LIBS="$CORE_LIBS $OPENSSL/.openssl/lib/libssl.a"
|
|
CORE_LIBS="$CORE_LIBS $OPENSSL/.openssl/lib/libcrypto.a"
|
|
CORE_LIBS="$CORE_LIBS $NGX_LIBDL"
|
|
CORE_LIBS="$CORE_LIBS $NGX_LIBPTHREAD"
|
|
|
|
if [ "$NGX_PLATFORM" = win32 ]; then
|
|
CORE_LIBS="$CORE_LIBS -lgdi32 -lcrypt32 -lws2_32"
|
|
fi
|
|
;;
|
|
esac
|
|
|
|
else
|
|
|
|
if [ "$NGX_PLATFORM" != win32 ]; then
|
|
|
|
OPENSSL=NO
|
|
|
|
ngx_feature="OpenSSL library"
|
|
ngx_feature_name="NGX_OPENSSL"
|
|
ngx_feature_run=no
|
|
ngx_feature_incs="#include <openssl/ssl.h>"
|
|
ngx_feature_path=
|
|
ngx_feature_libs="-lssl -lcrypto $NGX_LIBDL $NGX_LIBPTHREAD"
|
|
ngx_feature_test="SSL_CTX_set_options(NULL, 0)"
|
|
. auto/feature
|
|
|
|
if [ $ngx_found = no ]; then
|
|
|
|
# FreeBSD port
|
|
|
|
ngx_feature="OpenSSL library in /usr/local/"
|
|
ngx_feature_path="/usr/local/include"
|
|
|
|
if [ $NGX_RPATH = YES ]; then
|
|
ngx_feature_libs="-R/usr/local/lib -L/usr/local/lib -lssl -lcrypto"
|
|
else
|
|
ngx_feature_libs="-L/usr/local/lib -lssl -lcrypto"
|
|
fi
|
|
|
|
ngx_feature_libs="$ngx_feature_libs $NGX_LIBDL $NGX_LIBPTHREAD"
|
|
|
|
. auto/feature
|
|
fi
|
|
|
|
if [ $ngx_found = no ]; then
|
|
|
|
# NetBSD port
|
|
|
|
ngx_feature="OpenSSL library in /usr/pkg/"
|
|
ngx_feature_path="/usr/pkg/include"
|
|
|
|
if [ $NGX_RPATH = YES ]; then
|
|
ngx_feature_libs="-R/usr/pkg/lib -L/usr/pkg/lib -lssl -lcrypto"
|
|
else
|
|
ngx_feature_libs="-L/usr/pkg/lib -lssl -lcrypto"
|
|
fi
|
|
|
|
ngx_feature_libs="$ngx_feature_libs $NGX_LIBDL $NGX_LIBPTHREAD"
|
|
|
|
. auto/feature
|
|
fi
|
|
|
|
if [ $ngx_found = no ]; then
|
|
|
|
# MacPorts
|
|
|
|
ngx_feature="OpenSSL library in /opt/local/"
|
|
ngx_feature_path="/opt/local/include"
|
|
|
|
if [ $NGX_RPATH = YES ]; then
|
|
ngx_feature_libs="-R/opt/local/lib -L/opt/local/lib -lssl -lcrypto"
|
|
else
|
|
ngx_feature_libs="-L/opt/local/lib -lssl -lcrypto"
|
|
fi
|
|
|
|
ngx_feature_libs="$ngx_feature_libs $NGX_LIBDL $NGX_LIBPTHREAD"
|
|
|
|
. auto/feature
|
|
fi
|
|
|
|
if [ $ngx_found = no ]; then
|
|
|
|
# Homebrew on Apple Silicon
|
|
|
|
ngx_feature="OpenSSL library in /opt/homebrew/"
|
|
ngx_feature_path="/opt/homebrew/include"
|
|
|
|
if [ $NGX_RPATH = YES ]; then
|
|
ngx_feature_libs="-R/opt/homebrew/lib -L/opt/homebrew/lib -lssl -lcrypto"
|
|
else
|
|
ngx_feature_libs="-L/opt/homebrew/lib -lssl -lcrypto"
|
|
fi
|
|
|
|
ngx_feature_libs="$ngx_feature_libs $NGX_LIBDL $NGX_LIBPTHREAD"
|
|
|
|
. auto/feature
|
|
fi
|
|
|
|
if [ $ngx_found = yes ]; then
|
|
have=NGX_SSL . auto/have
|
|
CORE_INCS="$CORE_INCS $ngx_feature_path"
|
|
CORE_LIBS="$CORE_LIBS $ngx_feature_libs"
|
|
OPENSSL=YES
|
|
|
|
if [ $USE_OPENSSL_QUIC = YES ]; then
|
|
|
|
ngx_feature="OpenSSL QUIC API"
|
|
ngx_feature_name="NGX_QUIC"
|
|
ngx_feature_test="SSL_set_quic_tls_cbs(NULL, NULL, NULL)"
|
|
. auto/feature
|
|
|
|
if [ $ngx_found = no ]; then
|
|
ngx_feature="BoringSSL-like QUIC API"
|
|
ngx_feature_test="SSL_set_quic_method(NULL, NULL)"
|
|
. auto/feature
|
|
fi
|
|
|
|
if [ $ngx_found = no ]; then
|
|
ngx_feature="OpenSSL QUIC compatibility"
|
|
ngx_feature_test="SSL_CTX_add_custom_ext(NULL, 0, 0,
|
|
NULL, NULL, NULL, NULL, NULL)"
|
|
. auto/feature
|
|
fi
|
|
|
|
if [ $ngx_found = no ]; then
|
|
cat << END
|
|
|
|
$0: error: certain modules require OpenSSL QUIC support.
|
|
You can either do not enable the modules, or install the OpenSSL library with
|
|
QUIC support into the system, or build the OpenSSL library with QUIC support
|
|
statically from the source with nginx by using --with-openssl=<path> option.
|
|
|
|
END
|
|
exit 1
|
|
fi
|
|
fi
|
|
|
|
if [ $HTTP_ACME = YES ]; then
|
|
ngx_feature="OpenSSL version for ACME support"
|
|
ngx_feature_name="NGX_HTTP_ACME"
|
|
ngx_feature_incs="#define OPENSSL_SUPPRESS_DEPRECATED
|
|
#include <openssl/x509v3.h>
|
|
#include <openssl/ssl.h>"
|
|
ngx_feature_test="EVP_PKEY_get0_EC_KEY(NULL);
|
|
EVP_PKEY_get0_RSA(NULL);
|
|
RSA_get0_key(NULL, NULL, NULL, NULL);
|
|
EC_POINT_get_affine_coordinates(NULL, NULL, NULL, NULL, NULL);
|
|
ECDSA_SIG_get0(NULL, NULL, NULL);
|
|
#if defined(OPENSSL_IS_BORINGSSL) || defined(OPENSSL_IS_AWSLC)
|
|
X509V3_EXT_nconf_nid(NULL, NULL, NID_server_auth, NULL);
|
|
#else
|
|
X509V3_EXT_conf_nid(NULL, NULL, NID_tlsfeature, NULL);
|
|
#endif
|
|
"
|
|
. auto/feature
|
|
|
|
if [ $ngx_found = no ]; then
|
|
cat << END
|
|
|
|
$0: error: your OpenSSL library is missing some functionality required for ACME support.
|
|
|
|
END
|
|
exit 1
|
|
fi
|
|
fi
|
|
|
|
fi
|
|
fi
|
|
|
|
if [ $OPENSSL != YES ]; then
|
|
|
|
cat << END
|
|
|
|
$0: error: SSL modules require the OpenSSL library.
|
|
You can either do not enable the modules, or install the OpenSSL library
|
|
into the system, or build the OpenSSL library statically from the source
|
|
with Angie by using --with-openssl=<path> option.
|
|
|
|
END
|
|
exit 1
|
|
fi
|
|
|
|
fi
|