[swtpm.git] / configure.ac

#
# configure.ac
#
#       The Initial Developer of the Original Code is International
#       Business Machines Corporation. Portions created by IBM
#       Corporation are Copyright (C) 2014 International Business
#       Machines Corporation. All Rights Reserved.
#
#       This program is free software; you can redistribute it and/or modify
#       it under the terms of the Common Public License as published by
#       IBM Corporation; either version 1 of the License, or (at your option)
#       any later version.
#
#       This program is distributed in the hope that it will be useful,
#       but WITHOUT ANY WARRANTY; without even the implied warranty of
#       MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
#       Common Public License for more details.
#
#       You should have received a copy of the Common Public License
#       along with this program; if not, a copy can be viewed at
#       http://www.opensource.org/licenses/cpl1.0.php.
#
#       This file is derived from tpm-tool's configure.in.
#

AC_INIT(swtpm, 0.1.0)
AC_PREREQ(2.12)
AC_CONFIG_SRCDIR(Makefile.am)
AC_CONFIG_HEADER(config.h)

SWTPM_VER_MAJOR=`echo $PACKAGE_VERSION | cut -d "." -f1`
SWTPM_VER_MINOR=`echo $PACKAGE_VERSION | cut -d "." -f2`
SWTPM_VER_MICRO=`echo $PACKAGE_VERSION | cut -d "." -f3`

AC_SUBST([SWTPM_VER_MAJOR])
AC_SUBST([SWTPM_VER_MINOR])
AC_SUBST([SWTPM_VER_MICRO])

dnl Check for programs
AC_PROG_CC
AC_PROG_INSTALL
AC_PROG_LN_S
LT_INIT

AC_CONFIG_MACRO_DIR([m4])
AC_CANONICAL_TARGET
AC_CANONICAL_HOST
AM_INIT_AUTOMAKE([foreign 1.6])

DEBUG=""
AC_MSG_CHECKING([for debug-enabled build])
AC_ARG_ENABLE(debug, AC_HELP_STRING([--enable-debug], [create a debug build]),
  [if test "$enableval" = "yes"; then
     DEBUG="yes"
     AC_MSG_RESULT([yes])
   else
     DEBUG="no"
     AC_MSG_RESULT([no])
   fi],
  [DEBUG="no",
   AC_MSG_RESULT([no])])

# If the user has not set CFLAGS, do something appropriate
test_CFLAGS=${CFLAGS+set}
if test "$test_CFLAGS" != set; then
	if test "$DEBUG" = "yes"; then
		CFLAGS="-O0 -g -DDEBUG"
	else
		CFLAGS="-g -O2"
	fi
elif test "$DEBUG" = "yes"; then
	CFLAGS="$CFLAGS -O0 -g -DDEBUG"
fi

AC_HEADER_STDC
AC_C_CONST
AC_C_INLINE

AC_TYPE_SIZE_T
AC_TYPE_SIGNAL

AC_PROG_CC
AC_PROG_INSTALL
AC_PROG_MKDIR_P

AC_ARG_WITH([selinux],
   AS_HELP_STRING([--with-selinux],
      [add SELinux policy extensions @<:@default=check@:>@]))
m4_divert_text([DEFAULTS], [with_selinux=check])

dnl Check for SELinux policy support

if test "$with_selinux" != "no"; then
    if test "$with_selinux" = "check" || test "$with_selinux" = "yes"; then
        if ! test -f /usr/share/selinux/devel/Makefile; then
            if test "$with_selinux" = "yes"; then
                AC_MSG_ERROR("Is selinux-policy-devel installed?")
            else
                with_selinux="no"
            fi
        fi
        AC_PATH_PROG([SEMODULE], semodule)
        if test "x$SEMODULE" = "x"; then
            if test "$with_selinux" = "yes"; then
	        AC_MSG_ERROR("Is selinux-policy-devel installed?")
	    else
	        with_selinux="no"
	    fi
        fi
        if test "$with_selinux" = "check"; then
            with_selinux="yes"
        fi
    fi
fi
AM_CONDITIONAL([WITH_SELINUX], [test "x$with_selinux" = "xyes"])

if test "$prefix" = "/usr" && test "$sysconfdir" = '${prefix}/etc'; then
	sysconfdir="/etc"
fi
if test "$prefix" = "" && test "$datarootdir" = '${prefix}/share'; then
	datarootdir="/usr/share"
fi

cryptolib=openssl

AC_ARG_WITH([openssl],
            [AS_HELP_STRING([--with-openssl],
                           [build with openssl library])],
            [],
            [])

case "$cryptolib" in
openssl)
	AC_CHECK_LIB(crypto,
		      [AES_set_encrypt_key],
		      [true],
		      AC_MSG_ERROR(Faulty openssl crypto library))
	AC_CHECK_HEADERS([openssl/aes.h],[],
			 AC_MSG_ERROR(Is openssl-devel/libssl-dev installed?))
	AC_MSG_RESULT([Building with openssl crypto library])
	;;
esac

LIBTASN1_LIBS=$(pkg-config --libs libtasn1)
if test $? -ne 0; then
	AC_MSG_ERROR("Is libtasn1-devel installed? -- could not get libs for libtasn1")
fi
AC_SUBST([LIBTASN1_LIBS])

LIBTPMS_LIBS=$(pkg-config --libs libtpms)
if test $? -ne 0; then
	AC_MSG_ERROR("Is libtpms-devel installed? -- could not get libs for libtpms")
fi
AC_CHECK_LIB(tpms,
             TPMLIB_ChooseTPMVersion,[true],
             AC_MSG_ERROR("libtpms 0.6 or later is required")
)
AC_SUBST([LIBTPMS_LIBS])

AC_CHECK_LIB(c, clock_gettime, LIBRT_LIBS="", LIBRT_LIBS="-lrt")
AC_SUBST([LIBRT_LIBS])

AC_PATH_PROG([TPM_NVDEFINE], tpm_nvdefine)
if test "x$TPM_NVDEFINE" = "x"; then
    have_tcsd=no
    AC_MSG_WARN([NVRAM area tools are needed for TPM 1.2 certificate injection: tpm-tools package])
else
    have_tcsd=yes
fi
with_swtpm_setup=yes
AM_CONDITIONAL([HAVE_TCSD], test "$have_tcsd" != "no")

dnl If we have the tcsd package, we can build swtpm_setup, but need netstat also
AC_PATH_PROG([NETSTAT], [netstat])
case $host_os in
linux-*)
    if test "x$NETSTAT" = "x" && test "have_tcsd" != "no"; then
        AC_MSG_ERROR([netstat tool is missing for tests: net-tools package])
    fi
    ;;
esac

AC_MSG_CHECKING([for whether to build with CUSE interface])
AC_ARG_WITH([cuse],
            AC_HELP_STRING([--with-cuse],
                           [build with CUSE interface]),
            [],
            [with_cuse=check]
)

if test "$with_cuse" != "no"; then
    LIBFUSE_CFLAGS=$(pkg-config fuse --cflags 2>/dev/null)
    if test $? -ne 0; then
        if test "$with_cuse" = "yes"; then
            AC_MSG_ERROR("Is fuse-devel installed? -- could not get cflags for libfuse")
        else
            with_cuse=no
        fi
    else
        with_cuse=yes
    fi
fi

dnl with_cuse is now yes or no
if test "$with_cuse" != "no"; then
    LIBFUSE_LIBS=$(pkg-config fuse --libs)
    if test $? -ne 0; then
        AC_MSG_ERROR("Is fuse-devel installed? -- could not get libs for libfuse")
    fi
    AC_SUBST([LIBFUSE_CFLAGS])
    AC_SUBST([LIBFUSE_LIBS])
    AC_DEFINE_UNQUOTED([WITH_CUSE], 1,
                       [whether to build with CUSE interface])

    GLIB_CFLAGS=$(pkg-config --cflags glib-2.0)
    if test $? -ne 0; then
        AC_MSG_ERROR("Is glib-2.0 installed? -- could not get cflags")
    fi
    AC_SUBST([GLIB_CFLAGS])

    GLIB_LIBS=$(pkg-config --libs glib-2.0)
    if test $? -ne 0; then
        AC_MSG_ERROR("Is glib-2.0 installed? -- could not get libs")
    fi
    AC_SUBST([GLIB_LIBS])

    GTHREAD_LIBS=$(pkg-config --libs gthread-2.0)
    if test $? -ne 0; then
        AC_MSG_ERROR("Is glib-2.0 installed? -- could not get libs for gthread-2.0")
    fi
    AC_SUBST([GTHREAD_LIBS])
fi
AM_CONDITIONAL([WITH_CUSE],[test "$with_cuse" = "yes"])
AC_MSG_RESULT($with_cuse)

AC_MSG_CHECKING([for whether to build with chardev interface])
case $host_os in
linux-*)
    with_chardev=yes
    AC_DEFINE_UNQUOTED([WITH_CHARDEV], 1,
                       [whether to build with chardev interface])
    ;;
*)
    with_chardev=no
esac
AM_CONDITIONAL([WITH_CHARDEV],[test "$with_chardev" = "yes"])
AC_MSG_RESULT($with_cuse)

AC_ARG_WITH([gnutls],
            AC_HELP_STRING([--with-gnutls],
                           [build with gnutls library]),
            [],
            [with_gnutls=check]
)

if test "x$with_gnutls" != "xno"; then
    GNUTLS_LDFLAGS=$(pkg-config --libs gnutls)
    if test $? -ne 0; then
        if test "x$with_gnutls" = "xyes"; then
            AC_MSG_ERROR("Is gnutls installed? -- could not get libs for gnutls")
        else
            with_gnutls=no
        fi
    fi
fi

if test "x$with_gnutls" != "xno"; then
     AC_PATH_PROG([GNUTLS_CERTTOOL], certtool)
     if test "x$GNUTLS_CERTTOOL" = "x"; then
         if test "x$with_gnutls" = "xyes"; then
             AC_MSG_ERROR("Could not find certtool. Is gnutls-utils/gnutls-bin installed?")
         else
             with_gnutls=no
         fi
     fi
fi

if test "x$with_gnutls" != "xno"; then
    ORIG_CFLAGS="$CFLAGS"
    GNUTLS_CFLAGS=$(pkg-config gnutls --cflags)
    CFLAGS="$CFLAGS $GNUTLS_CFLAGS $GNUTLS_LDFLAGS"
    AC_CHECK_LIB([gnutls], [gnutls_load_file], [
                 GNUTLS_LIBS=-lgnutls
             ],
             [if test "x$with_gnutls" = "xyes"; then
                 AC_MSG_ERROR([GNUTLS >= 3.1.0 library not found: libgnutls.so])
              else
                 with_gnutls="no"
              fi])
    CFLAGS="$ORIG_CFLAGS"
fi

if test "x$with_gnutls" != "xno"; then
    ORIG_CFLAGS="$CFLAGS"
    CFLAGS="$CFLAGS $GNUTLS_CFLAGS"
    AC_CHECK_HEADER(gnutls/abstract.h, [], \
             [if test "x$with_gnutls" = "xyes"; then
                 AC_MSG_ERROR([GNUTLS >= 3.1.0 library header not found: gnutls/abstract.h])
              else
                 with_gnutls="no"
              fi])
    CFLAGS="$ORIG_CFLAGS"
fi

if test "x$with_gnutls" != "xno"; then
    with_gnutls="yes"
fi
AM_CONDITIONAL([WITH_GNUTLS], [test "x$with_gnutls" = "xyes"])
AC_SUBST([GNUTLS_LIBS])

AC_PATH_PROG([EXPECT], expect)
if test "x$EXPECT" = "x"; then
	AC_MSG_ERROR([expect is required: expect package])
fi

AC_PATH_PROG([GAWK], gawk)
if test "x$GAWK" = "x"; then
	AC_MSG_ERROR([gawk is required: gawk package])
fi

AC_PATH_PROG([SOCAT], socat)
if test "x$SOCAT" = "x"; then
	AC_MSG_ERROR([socat is required: socat package])
fi

AC_PATH_PROG([PYTHON], python3)
if test "x$PYTHON" = "x"; then
	AC_MSG_ERROR([python3 is required])
fi

AC_ARG_ENABLE([hardening],
  AS_HELP_STRING([--disable-hardening], [Disable hardening flags]))

if test "x$enable_hardening" != "xno"; then
	TMP="$($CC -fstack-protector-strong $srcdir/include/swtpm/tpm_ioctl.h 2>&1)"
	if echo $TMP | $GREP 'unrecognized command line option' >/dev/null; then
		HARDENING_CFLAGS="-fstack-protector -Wstack-protector "
	else
		HARDENING_CFLAGS="-fstack-protector-strong -Wstack-protector "
	fi

	dnl Must not have -O0 but must have a -O for -D_FORTIFY_SOURCE=2
	TMP1="$(echo $CFLAGS | sed -n 's/.*\(-O0\).*/\1/p')"
	TMP2="$(echo $CFLAGS | sed -n 's/.*\(-O\).*/\1/p')"
	if test -z "$TMP1" && test -n "$TPM2"; then
		HARDENING_CFLAGS="$HARDENING_CFLAGS -D_FORTIFY_SOURCE=2 "
	fi
	dnl Check ld for 'relro' and 'now'
	if $LD --help 2>&1 | $GREP '\-z relro ' > /dev/null; then
		HARDENING_CFLAGS="$HARDENING_CFLAGS -Wl,-z,relro "
	fi
	if $LD --help 2>&1 | $GREP '\-z now ' > /dev/null; then
		HARDENING_CFLAGS="$HARDENING_CFLAGS -Wl,-z,now "
	fi
	AC_SUBST([HARDENING_CFLAGS])
fi

AC_ARG_ENABLE([test-coverage],
  AS_HELP_STRING([--enable-test-coverage], [Enable test coverage flags]))

if test "x$enable_test_coverage" = "xyes"; then
	COVERAGE_CFLAGS="-fprofile-arcs -ftest-coverage"
	COVERAGE_LDFLAGS="-fprofile-arcs"
fi

AC_ARG_WITH([tss-user],
            AC_HELP_STRING([--with-tss-user=TSS_USER],
                           [The tss user to use]),
            [TSS_USER="$withval"],
            [TSS_USER="tss"]
)

AC_ARG_WITH([tss-group],
            AC_HELP_STRING([--with-tss-group=TSS_GROUP],
                           [The tss group to use]),
            [TSS_GROUP="$withval"],
            [TSS_GROUP="tss"]
)
AC_SUBST([TSS_USER])
AC_SUBST([TSS_GROUP])

CFLAGS="$CFLAGS -Wreturn-type -Wsign-compare -Wswitch-enum"
CFLAGS="$CFLAGS -Wmissing-prototypes -Wall -Werror"
CFLAGS="$CFLAGS -Wformat -Wformat-security"
CFLAGS="$CFLAGS $GNUTLS_CFLAGS $COVERAGE_CFLAGS"

LDFLAGS="$LDFLAGS $COVERAGE_LDFLAGS"

dnl Simulate the following for systems with pkg-config < 0.28:
dnl PKG_CHECK_VAR([libtpms_cryptolib], [libtpms], [cryptolib],
dnl  [], AC_MSG_ERROR([Could not determine libtpms crypto library.]))
PKG_PROG_PKG_CONFIG

AC_MSG_CHECKING([Checking the crypto library libtpms is linked to])
libtpms_cryptolib=`$PKG_CONFIG --variable cryptolib libtpms`
if test "x$libtpms_cryptolib" = "x"; then
  AC_MSG_ERROR([Could not determine the crypto library libtpms is using])
fi
AC_MSG_RESULT($libtpms_cryptolib)

if test "$libtpms_cryptolib" != "$cryptolib"; then
  echo "libtpms is using $libtpms_cryptolib; we have to use the same"
  if test "$cryptolib" = "openssl"; then
    AC_MSG_ERROR([do not use --with-openssl])
  else
    AC_MSG_ERROR([use --with-openssl])
  fi
fi

with_vtpm_proxy=no
case $host_os in
linux-*)
  with_vtpm_proxy=yes
  AC_DEFINE_UNQUOTED([WITH_VTPM_PROXY], 1,
                     [whether to build in vTPM proxy support (Linux only)])
esac

case $host_os in
cygwin)
  CFLAGS="$CFLAGS -D__USE_LINUX_IOCTL_DEFS"
esac

AC_CONFIG_FILES([Makefile                    \
		dist/swtpm.spec             \
		etc/Makefile                \
		samples/Makefile            \
		include/Makefile            \
		include/swtpm/Makefile      \
		include/swtpm.h             \
		src/Makefile                \
		src/selinux/Makefile        \
		src/swtpm/Makefile          \
		src/swtpm_bios/Makefile     \
		src/swtpm_cert/Makefile     \
		src/swtpm_ioctl/Makefile    \
		src/swtpm_setup/Makefile    \
		src/swtpm_setup/swtpm_setup.h  \
		man/Makefile                \
		man/man3/Makefile           \
		man/man8/Makefile           \
		tests/Makefile              \
		tests/test_config           \
		])
AC_CONFIG_FILES([src/swtpm_setup/swtpm_setup.sh],
		[chmod 755 src/swtpm_setup/swtpm_setup.sh])
AC_OUTPUT

echo
printf "with_gnutls     : %5s  (no = swtpm_cert will NOT be built)\n" $with_gnutls
printf "with_selinux    : %5s  (no = SELinux policy extenions will NOT be built)\n" $with_selinux
printf "with_cuse       : %5s  (no = no CUSE interface)\n" $with_cuse
printf "with_chardev    : %5s  (no = no chardev interface)\n" $with_chardev
printf "with_swtpm_setup: %5s  (no = swtpm_setup will NOT be built)\n" $with_swtpm_setup
printf "with_vtpm_proxy : %5s  (no = no vtpm proxy support; Linux only)\n" $with_vtpm_proxy
echo
echo "cryptolib: $cryptolib"
echo
echo "CFLAGS=$CFLAGS"
echo "HARDENING_CFLAGS=$HARDENING_CFLAGS"
echo "LDFLAGS=$LDFLAGS"
echo
echo "TSS_USER=$TSS_USER"
echo "TSS_GROUP=$TSS_GROUP"
echo
Commit	Line	Data
f163b202 SB	1	#
	2	# configure.ac
	3	#
	4	# The Initial Developer of the Original Code is International
	5	# Business Machines Corporation. Portions created by IBM
	6	# Corporation are Copyright (C) 2014 International Business
	7	# Machines Corporation. All Rights Reserved.
	8	#
	9	# This program is free software; you can redistribute it and/or modify
	10	# it under the terms of the Common Public License as published by
	11	# IBM Corporation; either version 1 of the License, or (at your option)
	12	# any later version.
	13	#
	14	# This program is distributed in the hope that it will be useful,
	15	# but WITHOUT ANY WARRANTY; without even the implied warranty of
	16	# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
	17	# Common Public License for more details.
	18	#
	19	# You should have received a copy of the Common Public License
	20	# along with this program; if not, a copy can be viewed at
	21	# http://www.opensource.org/licenses/cpl1.0.php.
	22	#
	23	# This file is derived from tpm-tool's configure.in.
	24	#
	25
	26	AC_INIT(swtpm, 0.1.0)
	27	AC_PREREQ(2.12)
	28	AC_CONFIG_SRCDIR(Makefile.am)
	29	AC_CONFIG_HEADER(config.h)
	30
	31	SWTPM_VER_MAJOR=`echo $PACKAGE_VERSION \| cut -d "." -f1`
	32	SWTPM_VER_MINOR=`echo $PACKAGE_VERSION \| cut -d "." -f2`
	33	SWTPM_VER_MICRO=`echo $PACKAGE_VERSION \| cut -d "." -f3`
	34
	35	AC_SUBST([SWTPM_VER_MAJOR])
	36	AC_SUBST([SWTPM_VER_MINOR])
	37	AC_SUBST([SWTPM_VER_MICRO])
	38
	39	dnl Check for programs
	40	AC_PROG_CC
	41	AC_PROG_INSTALL
	42	AC_PROG_LN_S
908afaf5	43	LT_INIT
f163b202	44
f163b202 SB	45	AC_CONFIG_MACRO_DIR([m4])
f163b202 SB	46	AC_CANONICAL_TARGET
c3fdf688	47	AC_CANONICAL_HOST
f163b202 SB	48	AM_INIT_AUTOMAKE([foreign 1.6])
	49
	50	DEBUG=""
	51	AC_MSG_CHECKING([for debug-enabled build])
	52	AC_ARG_ENABLE(debug, AC_HELP_STRING([--enable-debug], [create a debug build]),
	53	[if test "$enableval" = "yes"; then
	54	DEBUG="yes"
	55	AC_MSG_RESULT([yes])
	56	else
	57	DEBUG="no"
	58	AC_MSG_RESULT([no])
	59	fi],
	60	[DEBUG="no",
	61	AC_MSG_RESULT([no])])
	62
	63	# If the user has not set CFLAGS, do something appropriate
	64	test_CFLAGS=${CFLAGS+set}
	65	if test "$test_CFLAGS" != set; then
33be7be2	66	if test "$DEBUG" = "yes"; then
f163b202 SB	67	CFLAGS="-O0 -g -DDEBUG"
	68	else
	69	CFLAGS="-g -O2"
	70	fi
33be7be2	71	elif test "$DEBUG" = "yes"; then
f163b202 SB	72	CFLAGS="$CFLAGS -O0 -g -DDEBUG"
	73	fi
	74
e46a2b66 SB	75	AC_HEADER_STDC
	76	AC_C_CONST
	77	AC_C_INLINE
	78
	79	AC_TYPE_SIZE_T
	80	AC_TYPE_SIGNAL
	81
baecda40 SB	82	AC_PROG_CC
baecda40 SB	83	AC_PROG_INSTALL
3cb54a5d	84	AC_PROG_MKDIR_P
e46a2b66	85
ec37bb56 SB	86	AC_ARG_WITH([selinux],
	87	AS_HELP_STRING([--with-selinux],
	88	[add SELinux policy extensions @<:@default=check@:>@]))
	89	m4_divert_text([DEFAULTS], [with_selinux=check])
	90
	91	dnl Check for SELinux policy support
	92
	93	if test "$with_selinux" != "no"; then
	94	if test "$with_selinux" = "check" \|\| test "$with_selinux" = "yes"; then
	95	if ! test -f /usr/share/selinux/devel/Makefile; then
	96	if test "$with_selinux" = "yes"; then
	97	AC_MSG_ERROR("Is selinux-policy-devel installed?")
	98	else
	99	with_selinux="no"
	100	fi
	101	fi
	102	AC_PATH_PROG([SEMODULE], semodule)
33be7be2	103	if test "x$SEMODULE" = "x"; then
ec37bb56 SB	104	if test "$with_selinux" = "yes"; then
	105	AC_MSG_ERROR("Is selinux-policy-devel installed?")
	106	else
	107	with_selinux="no"
	108	fi
	109	fi
	110	if test "$with_selinux" = "check"; then
	111	with_selinux="yes"
	112	fi
	113	fi
	114	fi
33be7be2	115	AM_CONDITIONAL([WITH_SELINUX], [test "x$with_selinux" = "xyes"])
ec37bb56	116
b096be26 SB	117	if test "$prefix" = "/usr" && test "$sysconfdir" = '${prefix}/etc'; then
	118	sysconfdir="/etc"
	119	fi
	120	if test "$prefix" = "" && test "$datarootdir" = '${prefix}/share'; then
	121	datarootdir="/usr/share"
	122	fi
	123
7849b6c6	124	cryptolib=openssl
3bbdd7bc SB	125
3bbdd7bc SB	126	AC_ARG_WITH([openssl],
7849b6c6 SB	127	[AS_HELP_STRING([--with-openssl],
	128	[build with openssl library])],
	129	[],
	130	[])
3bbdd7bc SB	131
3bbdd7bc SB	132	case "$cryptolib" in
3bbdd7bc	133	openssl)
7849b6c6 SB	134	AC_CHECK_LIB(crypto,
7849b6c6 SB	135	[AES_set_encrypt_key],
b78b6af2	136	[true],
7849b6c6 SB	137	AC_MSG_ERROR(Faulty openssl crypto library))
	138	AC_CHECK_HEADERS([openssl/aes.h],[],
	139	AC_MSG_ERROR(Is openssl-devel/libssl-dev installed?))
	140	AC_MSG_RESULT([Building with openssl crypto library])
	141	;;
3bbdd7bc	142	esac
833a5416	143
baecda40 SB	144	LIBTASN1_LIBS=$(pkg-config --libs libtasn1)
	145	if test $? -ne 0; then
	146	AC_MSG_ERROR("Is libtasn1-devel installed? -- could not get libs for libtasn1")
	147	fi
	148	AC_SUBST([LIBTASN1_LIBS])
f163b202	149
baecda40 SB	150	LIBTPMS_LIBS=$(pkg-config --libs libtpms)
	151	if test $? -ne 0; then
	152	AC_MSG_ERROR("Is libtpms-devel installed? -- could not get libs for libtpms")
	153	fi
fbc596ab	154	AC_CHECK_LIB(tpms,
b78b6af2	155	TPMLIB_ChooseTPMVersion,[true],
fbc596ab SB	156	AC_MSG_ERROR("libtpms 0.6 or later is required")
fbc596ab SB	157	)
baecda40	158	AC_SUBST([LIBTPMS_LIBS])
f163b202	159
5478de0a SB	160	AC_CHECK_LIB(c, clock_gettime, LIBRT_LIBS="", LIBRT_LIBS="-lrt")
	161	AC_SUBST([LIBRT_LIBS])
	162
e46a2b66	163	AC_PATH_PROG([TPM_NVDEFINE], tpm_nvdefine)
ef606d4a	164	if test "x$TPM_NVDEFINE" = "x"; then
64faf455	165	have_tcsd=no
ef606d4a SB	166	AC_MSG_WARN([NVRAM area tools are needed for TPM 1.2 certificate injection: tpm-tools package])
	167	else
	168	have_tcsd=yes
	169	fi
64faf455 SB	170	with_swtpm_setup=yes
64faf455 SB	171	AM_CONDITIONAL([HAVE_TCSD], test "$have_tcsd" != "no")
e46a2b66	172
5cd844d0 SB	173	dnl If we have the tcsd package, we can build swtpm_setup, but need netstat also
	174	AC_PATH_PROG([NETSTAT], [netstat])
	175	case $host_os in
	176	linux-*)
33be7be2	177	if test "x$NETSTAT" = "x" && test "have_tcsd" != "no"; then
64faf455	178	AC_MSG_ERROR([netstat tool is missing for tests: net-tools package])
5cd844d0 SB	179	fi
	180	;;
	181	esac
	182
09d1a532 SB	183	AC_MSG_CHECKING([for whether to build with CUSE interface])
	184	AC_ARG_WITH([cuse],
	185	AC_HELP_STRING([--with-cuse],
	186	[build with CUSE interface]),
	187	[],
	188	[with_cuse=check]
	189	)
f163b202	190
09d1a532 SB	191	if test "$with_cuse" != "no"; then
	192	LIBFUSE_CFLAGS=$(pkg-config fuse --cflags 2>/dev/null)
	193	if test $? -ne 0; then
	194	if test "$with_cuse" = "yes"; then
	195	AC_MSG_ERROR("Is fuse-devel installed? -- could not get cflags for libfuse")
	196	else
	197	with_cuse=no
	198	fi
	199	else
	200	with_cuse=yes
	201	fi
498433f7	202	fi
09d1a532 SB	203
	204	dnl with_cuse is now yes or no
	205	if test "$with_cuse" != "no"; then
	206	LIBFUSE_LIBS=$(pkg-config fuse --libs)
	207	if test $? -ne 0; then
	208	AC_MSG_ERROR("Is fuse-devel installed? -- could not get libs for libfuse")
	209	fi
	210	AC_SUBST([LIBFUSE_CFLAGS])
	211	AC_SUBST([LIBFUSE_LIBS])
	212	AC_DEFINE_UNQUOTED([WITH_CUSE], 1,
	213	[whether to build with CUSE interface])
ebf1557d SB	214
	215	GLIB_CFLAGS=$(pkg-config --cflags glib-2.0)
	216	if test $? -ne 0; then
	217	AC_MSG_ERROR("Is glib-2.0 installed? -- could not get cflags")
	218	fi
	219	AC_SUBST([GLIB_CFLAGS])
	220
	221	GLIB_LIBS=$(pkg-config --libs glib-2.0)
	222	if test $? -ne 0; then
	223	AC_MSG_ERROR("Is glib-2.0 installed? -- could not get libs")
	224	fi
	225	AC_SUBST([GLIB_LIBS])
	226
	227	GTHREAD_LIBS=$(pkg-config --libs gthread-2.0)
	228	if test $? -ne 0; then
	229	AC_MSG_ERROR("Is glib-2.0 installed? -- could not get libs for gthread-2.0")
	230	fi
	231	AC_SUBST([GTHREAD_LIBS])
baecda40	232	fi
09d1a532 SB	233	AM_CONDITIONAL([WITH_CUSE],[test "$with_cuse" = "yes"])
09d1a532 SB	234	AC_MSG_RESULT($with_cuse)
f163b202	235
498433f7 SB	236	AC_MSG_CHECKING([for whether to build with chardev interface])
	237	case $host_os in
	238	linux-*)
	239	with_chardev=yes
	240	AC_DEFINE_UNQUOTED([WITH_CHARDEV], 1,
	241	[whether to build with chardev interface])
	242	;;
	243	*)
	244	with_chardev=no
	245	esac
	246	AM_CONDITIONAL([WITH_CHARDEV],[test "$with_chardev" = "yes"])
	247	AC_MSG_RESULT($with_cuse)
	248
10002933 SB	249	AC_ARG_WITH([gnutls],
	250	AC_HELP_STRING([--with-gnutls],
	251	[build with gnutls library]),
	252	[],
	253	[with_gnutls=check]
	254	)
	255
e46a2b66 SB	256	if test "x$with_gnutls" != "xno"; then
	257	GNUTLS_LDFLAGS=$(pkg-config --libs gnutls)
	258	if test $? -ne 0; then
33be7be2	259	if test "x$with_gnutls" = "xyes"; then
e46a2b66 SB	260	AC_MSG_ERROR("Is gnutls installed? -- could not get libs for gnutls")
	261	else
	262	with_gnutls=no
	263	fi
	264	fi
	265	fi
f163b202	266
1828edee SB	267	if test "x$with_gnutls" != "xno"; then
1828edee SB	268	AC_PATH_PROG([GNUTLS_CERTTOOL], certtool)
33be7be2 SB	269	if test "x$GNUTLS_CERTTOOL" = "x"; then
33be7be2 SB	270	if test "x$with_gnutls" = "xyes"; then
1828edee SB	271	AC_MSG_ERROR("Could not find certtool. Is gnutls-utils/gnutls-bin installed?")
	272	else
	273	with_gnutls=no
	274	fi
	275	fi
	276	fi
	277
e46a2b66	278	if test "x$with_gnutls" != "xno"; then
571a8eed	279	ORIG_CFLAGS="$CFLAGS"
baecda40	280	GNUTLS_CFLAGS=$(pkg-config gnutls --cflags)
571a8eed	281	CFLAGS="$CFLAGS $GNUTLS_CFLAGS $GNUTLS_LDFLAGS"
10002933	282	AC_CHECK_LIB([gnutls], [gnutls_load_file], [
baecda40 SB	283	GNUTLS_LIBS=-lgnutls
baecda40 SB	284	],
33be7be2	285	[if test "x$with_gnutls" = "xyes"; then
e46a2b66 SB	286	AC_MSG_ERROR([GNUTLS >= 3.1.0 library not found: libgnutls.so])
	287	else
	288	with_gnutls="no"
	289	fi])
571a8eed	290	CFLAGS="$ORIG_CFLAGS"
e46a2b66 SB	291	fi
	292
	293	if test "x$with_gnutls" != "xno"; then
571a8eed SB	294	ORIG_CFLAGS="$CFLAGS"
571a8eed SB	295	CFLAGS="$CFLAGS $GNUTLS_CFLAGS"
e46a2b66	296	AC_CHECK_HEADER(gnutls/abstract.h, [], \
33be7be2	297	[if test "x$with_gnutls" = "xyes"; then
e46a2b66 SB	298	AC_MSG_ERROR([GNUTLS >= 3.1.0 library header not found: gnutls/abstract.h])
	299	else
	300	with_gnutls="no"
	301	fi])
571a8eed	302	CFLAGS="$ORIG_CFLAGS"
e46a2b66 SB	303	fi
	304
	305	if test "x$with_gnutls" != "xno"; then
	306	with_gnutls="yes"
	307	fi
33be7be2	308	AM_CONDITIONAL([WITH_GNUTLS], [test "x$with_gnutls" = "xyes"])
baecda40	309	AC_SUBST([GNUTLS_LIBS])
f163b202	310
48abfbb1	311	AC_PATH_PROG([EXPECT], expect)
33be7be2	312	if test "x$EXPECT" = "x"; then
48abfbb1 SB	313	AC_MSG_ERROR([expect is required: expect package])
	314	fi
	315
b080afb5	316	AC_PATH_PROG([GAWK], gawk)
33be7be2	317	if test "x$GAWK" = "x"; then
b080afb5 SB	318	AC_MSG_ERROR([gawk is required: gawk package])
	319	fi
	320
8cb126e4	321	AC_PATH_PROG([SOCAT], socat)
33be7be2	322	if test "x$SOCAT" = "x"; then
8cb126e4 SB	323	AC_MSG_ERROR([socat is required: socat package])
	324	fi
	325
b4372fe5	326	AC_PATH_PROG([PYTHON], python3)
33be7be2	327	if test "x$PYTHON" = "x"; then
b4372fe5	328	AC_MSG_ERROR([python3 is required])
dbb399de SB	329	fi
dbb399de SB	330
5eeea357 SB	331	AC_ARG_ENABLE([hardening],
5eeea357 SB	332	AS_HELP_STRING([--disable-hardening], [Disable hardening flags]))
a76b4eeb	333
5eeea357 SB	334	if test "x$enable_hardening" != "xno"; then
	335	TMP="$($CC -fstack-protector-strong $srcdir/include/swtpm/tpm_ioctl.h 2>&1)"
	336	if echo $TMP \| $GREP 'unrecognized command line option' >/dev/null; then
	337	HARDENING_CFLAGS="-fstack-protector -Wstack-protector "
	338	else
	339	HARDENING_CFLAGS="-fstack-protector-strong -Wstack-protector "
	340	fi
	341
	342	dnl Must not have -O0 but must have a -O for -D_FORTIFY_SOURCE=2
	343	TMP1="$(echo $CFLAGS \| sed -n 's/.\(-O0\)./\1/p')"
	344	TMP2="$(echo $CFLAGS \| sed -n 's/.\(-O\)./\1/p')"
	345	if test -z "$TMP1" && test -n "$TPM2"; then
	346	HARDENING_CFLAGS="$HARDENING_CFLAGS -D_FORTIFY_SOURCE=2 "
	347	fi
	348	dnl Check ld for 'relro' and 'now'
	349	if $LD --help 2>&1 \| $GREP '\-z relro ' > /dev/null; then
	350	HARDENING_CFLAGS="$HARDENING_CFLAGS -Wl,-z,relro "
	351	fi
	352	if $LD --help 2>&1 \| $GREP '\-z now ' > /dev/null; then
	353	HARDENING_CFLAGS="$HARDENING_CFLAGS -Wl,-z,now "
	354	fi
	355	AC_SUBST([HARDENING_CFLAGS])
a76b4eeb	356	fi
e6085e96	357
b8421f3d SB	358	AC_ARG_ENABLE([test-coverage],
	359	AS_HELP_STRING([--enable-test-coverage], [Enable test coverage flags]))
	360
	361	if test "x$enable_test_coverage" = "xyes"; then
	362	COVERAGE_CFLAGS="-fprofile-arcs -ftest-coverage"
	363	COVERAGE_LDFLAGS="-fprofile-arcs"
	364	fi
	365
c4ac0a11 SB	366	AC_ARG_WITH([tss-user],
	367	AC_HELP_STRING([--with-tss-user=TSS_USER],
	368	[The tss user to use]),
	369	[TSS_USER="$withval"],
	370	[TSS_USER="tss"]
	371	)
	372
	373	AC_ARG_WITH([tss-group],
	374	AC_HELP_STRING([--with-tss-group=TSS_GROUP],
	375	[The tss group to use]),
	376	[TSS_GROUP="$withval"],
	377	[TSS_GROUP="tss"]
	378	)
	379	AC_SUBST([TSS_USER])
	380	AC_SUBST([TSS_GROUP])
	381
f163b202 SB	382	CFLAGS="$CFLAGS -Wreturn-type -Wsign-compare -Wswitch-enum"
f163b202 SB	383	CFLAGS="$CFLAGS -Wmissing-prototypes -Wall -Werror"
e6085e96	384	CFLAGS="$CFLAGS -Wformat -Wformat-security"
b8421f3d SB	385	CFLAGS="$CFLAGS $GNUTLS_CFLAGS $COVERAGE_CFLAGS"
	386
	387	LDFLAGS="$LDFLAGS $COVERAGE_LDFLAGS"
f163b202	388
f2458ef7 SB	389	dnl Simulate the following for systems with pkg-config < 0.28:
	390	dnl PKG_CHECK_VAR([libtpms_cryptolib], [libtpms], [cryptolib],
	391	dnl [], AC_MSG_ERROR([Could not determine libtpms crypto library.]))
	392	PKG_PROG_PKG_CONFIG
	393
	394	AC_MSG_CHECKING([Checking the crypto library libtpms is linked to])
	395	libtpms_cryptolib=`$PKG_CONFIG --variable cryptolib libtpms`
33be7be2	396	if test "x$libtpms_cryptolib" = "x"; then
f2458ef7 SB	397	AC_MSG_ERROR([Could not determine the crypto library libtpms is using])
	398	fi
	399	AC_MSG_RESULT($libtpms_cryptolib)
86cc4527 SB	400
	401	if test "$libtpms_cryptolib" != "$cryptolib"; then
	402	echo "libtpms is using $libtpms_cryptolib; we have to use the same"
33be7be2	403	if test "$cryptolib" = "openssl"; then
86cc4527 SB	404	AC_MSG_ERROR([do not use --with-openssl])
	405	else
	406	AC_MSG_ERROR([use --with-openssl])
	407	fi
	408	fi
	409
c751e32e SB	410	with_vtpm_proxy=no
c751e32e SB	411	case $host_os in
f071d820	412	linux-*)
c751e32e SB	413	with_vtpm_proxy=yes
	414	AC_DEFINE_UNQUOTED([WITH_VTPM_PROXY], 1,
	415	[whether to build in vTPM proxy support (Linux only)])
	416	esac
	417
6286beac SB	418	case $host_os in
	419	cygwin)
	420	CFLAGS="$CFLAGS -D__USE_LINUX_IOCTL_DEFS"
	421	esac
	422
58774fd6	423	AC_CONFIG_FILES([Makefile \
f163b202	424	dist/swtpm.spec \
e46a2b66 SB	425	etc/Makefile \
e46a2b66 SB	426	samples/Makefile \
f163b202 SB	427	include/Makefile \
f163b202 SB	428	include/swtpm/Makefile \
a1fa5d77	429	include/swtpm.h \
f163b202 SB	430	src/Makefile \
	431	src/selinux/Makefile \
	432	src/swtpm/Makefile \
e46a2b66 SB	433	src/swtpm_bios/Makefile \
	434	src/swtpm_cert/Makefile \
	435	src/swtpm_ioctl/Makefile \
	436	src/swtpm_setup/Makefile \
c4ac0a11	437	src/swtpm_setup/swtpm_setup.h \
f163b202	438	man/Makefile \
39d0c3de	439	man/man3/Makefile \
f163b202	440	man/man8/Makefile \
e46a2b66	441	tests/Makefile \
c4ac0a11	442	tests/test_config \
10002933 SB	443	])
	444	AC_CONFIG_FILES([src/swtpm_setup/swtpm_setup.sh],
	445	[chmod 755 src/swtpm_setup/swtpm_setup.sh])
f163b202 SB	446	AC_OUTPUT
f163b202 SB	447
e46a2b66	448	echo
c3fdf688 SB	449	printf "with_gnutls : %5s (no = swtpm_cert will NOT be built)\n" $with_gnutls
	450	printf "with_selinux : %5s (no = SELinux policy extenions will NOT be built)\n" $with_selinux
	451	printf "with_cuse : %5s (no = no CUSE interface)\n" $with_cuse
498433f7	452	printf "with_chardev : %5s (no = no chardev interface)\n" $with_chardev
c3fdf688	453	printf "with_swtpm_setup: %5s (no = swtpm_setup will NOT be built)\n" $with_swtpm_setup
c751e32e	454	printf "with_vtpm_proxy : %5s (no = no vtpm proxy support; Linux only)\n" $with_vtpm_proxy
e46a2b66	455	echo
10002933 SB	456	echo "cryptolib: $cryptolib"
10002933 SB	457	echo
f163b202	458	echo "CFLAGS=$CFLAGS"
a76b4eeb	459	echo "HARDENING_CFLAGS=$HARDENING_CFLAGS"
f163b202	460	echo "LDFLAGS=$LDFLAGS"
c4ac0a11 SB	461	echo
	462	echo "TSS_USER=$TSS_USER"
	463	echo "TSS_GROUP=$TSS_GROUP"
	464	echo