Commit | Line | Data |
---|---|---|
974d0468 | 1 | # Makefile for secnet |
c215a4bc IJ |
2 | # |
3 | # This file is part of secnet. | |
4 | # See README for full list of copyright holders. | |
5 | # | |
6 | # secnet is free software; you can redistribute it and/or modify it | |
7 | # under the terms of the GNU General Public License as published by | |
9c6a8729 | 8 | # the Free Software Foundation; either version 3 of the License, or |
c215a4bc IJ |
9 | # (at your option) any later version. |
10 | # | |
11 | # secnet is distributed in the hope that it will be useful, but | |
12 | # WITHOUT ANY WARRANTY; without even the implied warranty of | |
13 | # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU | |
14 | # General Public License for more details. | |
15 | # | |
974d0468 | 16 | # You should have received a copy of the GNU General Public License |
c215a4bc IJ |
17 | # version 3 along with secnet; if not, see |
18 | # https://www.gnu.org/licenses/gpl.html. | |
974d0468 | 19 | |
d3fe100d | 20 | .PHONY: all clean realclean distclean dist install |
2fe58dfd SE |
21 | |
22 | PACKAGE:=secnet | |
edc9e302 | 23 | VERSION=0.4.5 |
2fe58dfd SE |
24 | |
25 | @SET_MAKE@ | |
26 | ||
27 | srcdir:=@srcdir@ | |
28 | VPATH:=@srcdir@ | |
29 | ||
974d0468 SE |
30 | SHELL:=/bin/sh |
31 | RM:=@RM@ | |
32 | CC:=@CC@ | |
33 | INSTALL:=@INSTALL@ | |
34 | INSTALL_PROGRAM:=@INSTALL_PROGRAM@ | |
e61a41a4 | 35 | INSTALL_SCRIPT:=@INSTALL_SCRIPT@ |
9c7a0b4e | 36 | INSTALL_DATA:=@INSTALL_DATA@ |
2fe58dfd | 37 | |
af720152 | 38 | prefix:=$(DESTDIR)@prefix@ |
328ae477 IJ |
39 | exec_prefix:=@exec_prefix@ |
40 | sbindir:=@sbindir@ | |
af720152 | 41 | sysconfdir:=$(DESTDIR)@sysconfdir@ |
e61a41a4 | 42 | datarootdir:=@datarootdir@ |
328ae477 IJ |
43 | transform:=@program_transform_name@ |
44 | mandir:=@mandir@ | |
45 | ||
0ade8ecc | 46 | CFLAGS:=-Wall @WRITESTRINGS@ @CFLAGS@ -Werror \ |
b24a72ef | 47 | -W -Wno-unused -Wno-unused-parameter \ |
18ca0b44 IJ |
48 | -Wno-pointer-sign -Wstrict-prototypes -Wmissing-prototypes \ |
49 | -Wmissing-declarations -Wnested-externs -Wredundant-decls \ | |
50 | -Wpointer-arith -Wformat=2 -Winit-self \ | |
07575765 | 51 | -Wswitch-enum -Wunused-variable -Wunused-function -Wbad-function-cast \ |
76f7ef9c IJ |
52 | -Wno-strict-aliasing -fno-strict-aliasing \ |
53 | -MMD | |
68438849 | 54 | ALL_CFLAGS:=@DEFS@ -I$(srcdir) -I. $(CFLAGS) $(EXTRA_CFLAGS) |
e61a41a4 | 55 | CPPFLAGS:=@CPPFLAGS@ -DDATAROOTDIR='"$(datarootdir)"' $(EXTRA_CPPFLAGS) |
68438849 IJ |
56 | LDFLAGS:=@LDFLAGS@ $(EXTRA_LDFLAGS) |
57 | LDLIBS:=@LIBS@ $(EXTRA_LDLIBS) | |
2fe58dfd SE |
58 | |
59 | TARGETS:=secnet | |
60 | ||
61 | OBJECTS:=secnet.o util.o conffile.yy.o conffile.tab.o conffile.o modules.o \ | |
b02b720a | 62 | resolver.o random.o udp.o site.o transform-cbcmac.o transform-eax.o \ |
ce5c098f | 63 | comm-common.o polypath.o \ |
7111e1f7 | 64 | netlink.o rsa.o dh.o xdh.o serpent.o serpentbe.o \ |
0d4b3c1f | 65 | scaf.o f25519.o x25519.o ed25519.o fgoldi.o x448.o ed448.o \ |
5bf585d2 MW |
66 | md5.o sha512.o keccak1600.o sha3.o \ |
67 | tun.o slip.o sha1.o ipaddr.o log.o \ | |
3b83c932 SE |
68 | process.o @LIBOBJS@ \ |
69 | hackypar.o | |
e4cfe537 | 70 | # version.o is handled specially below and in the link rule for secnet. |
9d3a4132 | 71 | |
9018e07a | 72 | TEST_OBJECTS:=eax-aes-test.o eax-serpent-test.o eax-serpentbe-test.o \ |
0bcb8184 | 73 | eax-test.o aes.o x25519-test.o x448-test.o |
9018e07a | 74 | |
e4cfe537 IJ |
75 | ifeq (version.o,$(MAKECMDGOALS)) |
76 | OBJECTS:=version.o | |
77 | TEST_OBJECTS:= | |
78 | endif | |
79 | ||
e250348a IJ |
80 | STALE_PYTHON_FILES= $(foreach e, py pyc, \ |
81 | $(foreach p, /usr /usr/local, \ | |
82 | $(foreach l, ipaddr, \ | |
af720152 | 83 | $(DESTDIR)$p/share/secnet/$l.$e \ |
e250348a IJ |
84 | ))) |
85 | ||
2fe58dfd SE |
86 | %.c: %.y |
87 | ||
88 | %.yy.c: %.fl | |
27f5042b | 89 | flex --header=$*.yy.h -o$@ $< |
2fe58dfd | 90 | |
76eca292 | 91 | %.tab.c %.tab.h: %.y |
8689b3a9 | 92 | bison -d -o $@ $< |
2fe58dfd | 93 | |
c26f37f0 | 94 | %.o: %.c conffile.yy.h |
fe5e9cc4 | 95 | $(CC) $(CPPFLAGS) $(ALL_CFLAGS) -c $< -o $@ |
2fe58dfd | 96 | |
9018e07a | 97 | all: $(TARGETS) check |
2fe58dfd | 98 | |
8689b3a9 SE |
99 | # Automatic remaking of configuration files, from autoconf documentation |
100 | ${srcdir}/configure: configure.in | |
101 | cd ${srcdir} && autoconf | |
102 | ||
103 | # autoheader might not change config.h.in, so touch a stamp file. | |
104 | ${srcdir}/config.h.in: stamp-h.in | |
f74f5f43 | 105 | ${srcdir}/stamp-h.in: configure.in |
8689b3a9 SE |
106 | cd ${srcdir} && autoheader |
107 | echo timestamp > ${srcdir}/stamp-h.in | |
108 | ||
109 | config.h: stamp-h | |
110 | stamp-h: config.h.in config.status | |
111 | ./config.status | |
112 | ||
974d0468 | 113 | Makefile: Makefile.in config.status |
8689b3a9 | 114 | ./config.status |
974d0468 SE |
115 | |
116 | config.status: configure | |
8689b3a9 SE |
117 | ./config.status --recheck |
118 | # End of config file remaking rules | |
59635212 | 119 | |
d3fe100d | 120 | # C and header file dependency rules |
9018e07a IJ |
121 | SOURCES:=$(OBJECTS:.o=.c) $(TEST_OBJECTS:.o=.c) |
122 | DEPENDS:=$(OBJECTS:.o=.d) $(TEST_OBJECTS:.o=.d) | |
d3fe100d | 123 | |
76f7ef9c | 124 | -include *.d |
d3fe100d SE |
125 | |
126 | # Manual dependencies section | |
8689b3a9 | 127 | conffile.yy.c: conffile.fl conffile.tab.c |
27f5042b | 128 | conffile.yy.h: conffile.yy.c |
8689b3a9 SE |
129 | conffile.tab.c: conffile.y |
130 | # End of manual dependencies section | |
974d0468 | 131 | |
8af1390a IJ |
132 | conffile.yy.o: ALL_CFLAGS += -Wno-sign-compare |
133 | ||
2fe58dfd | 134 | secnet: $(OBJECTS) |
e4cfe537 IJ |
135 | $(MAKE) version.o # *.o $(filter-out %.o, $^) |
136 | $(CC) $(LDFLAGS) $(ALL_CFLAGS) -o $@ $(OBJECTS) version.o $(LDLIBS) | |
137 | # We (always) regenerate the version, but only if we regenerate the | |
138 | # binary. (This is necessary as the version string is can depend on | |
139 | # any of the source files, eg to see whether "+" is needed.) | |
140 | ||
141 | ifneq (,$(wildcard .git/HEAD)) | |
142 | # If we have (eg) committed, relink and thus regenerate the version | |
143 | # with the new info from git describe. | |
144 | secnet: Makefile .git/HEAD $(shell sed -n 's#^ref: #.git/#p' .git/HEAD) | |
145 | secnet: $(wildcard .git/packed-refs) | |
146 | endif | |
2fe58dfd | 147 | |
462c35a1 MW |
148 | CRYPTO_TESTS = keccak1600 sha3 f25519 x25519 ed25519 fgoldi x448 ed448 |
149 | ||
9018e07a | 150 | check: eax-aes-test.confirm eax-serpent-test.confirm \ |
7b2ef224 | 151 | eax-serpentbe-test.confirm check-ipaddrset \ |
a4c6c9ba | 152 | msgcode-test.confirm \ |
462c35a1 | 153 | $(foreach c,$(CRYPTO_TESTS),$c-test.confirm) |
9018e07a | 154 | |
974d0468 | 155 | version.c: Makefile |
fcbc5905 | 156 | echo "#include \"secnet.h\"" >$@.new |
509a30c0 | 157 | @set -ex; if test -e .git && type -p git >/dev/null; then \ |
e4cfe537 IJ |
158 | v=$$(git describe --match 'v*'); v=$${v#v}; \ |
159 | if ! git diff --quiet HEAD; then v="$$v+"; fi; \ | |
160 | else \ | |
161 | v="$(VERSION)"; \ | |
162 | fi; \ | |
163 | echo "char version[]=\"secnet $$v\";" >>$@.new | |
fcbc5905 | 164 | mv -f $@.new $@ |
974d0468 | 165 | |
9018e07a IJ |
166 | eax-%-test: eax-%-test.o eax-test.o %.o |
167 | $(CC) $(LDFLAGS) $(ALL_CFLAGS) -o $@ $^ | |
168 | ||
169 | eax-%-test.confirm: eax-%-test eax-%-test.vectors | |
170 | ./$< <$(srcdir)/eax-$*-test.vectors >$@.new | |
171 | mv -f $@.new $@ | |
172 | ||
7b2ef224 MW |
173 | msgcode-test: msgcode-test.o |
174 | $(CC) $(LDFLAGS) $(ALL_CFLAGS) -o $@ $^ | |
175 | ||
176 | msgcode-test.confirm: msgcode-test | |
177 | ./msgcode-test | |
178 | touch $@ | |
179 | ||
462c35a1 | 180 | $(foreach c,$(CRYPTO_TESTS),$c-test): %-test: %-test.o crypto-test.o |
5bf585d2 MW |
181 | $(CC) $(LDFLAGS) $(ALL_CFLAGS) -o $@ $^ |
182 | ||
462c35a1 | 183 | $(foreach c,$(CRYPTO_TESTS),$c-test.confirm): \ |
a4c6c9ba | 184 | %-test.confirm: %-test %-tests.in |
0bcb8184 MW |
185 | ./$*-test <$(srcdir)/$*-tests.in |
186 | touch $@ | |
187 | ||
462c35a1 MW |
188 | keccak1600-test: keccak1600.o |
189 | sha3-test: sha3.o keccak1600.o | |
190 | f25519-test: f25519.o | |
191 | x25519-test: x25519.o f25519.o | |
192 | ed25519-test: sha512.o f25519.o scaf.o ed25519.o | |
193 | fgoldi-test: fgoldi.o | |
194 | x448-test: x448.o fgoldi.o | |
195 | ed448-test: keccak1600.o sha3.o fgoldi.o scaf.o ed448.o | |
196 | ||
197 | f25519-test.o: ec-field-test.c | |
198 | $(CC) $(CPPFLAGS) $(ALL_CFLAGS) -c -DFIELD=f25519 $< -o $@ | |
199 | fgoldi-test.o: ec-field-test.c | |
200 | $(CC) $(CPPFLAGS) $(ALL_CFLAGS) -c -DFIELD=fgoldi $< -o $@ | |
201 | x25519-test.o: xdh-test.c | |
202 | $(CC) $(CPPFLAGS) $(ALL_CFLAGS) -c -DXDH=x25519 -DFIELD=f25519 $< -o $@ | |
203 | x448-test.o: xdh-test.c | |
204 | $(CC) $(CPPFLAGS) $(ALL_CFLAGS) -c -DXDH=x448 -DFIELD=fgoldi $< -o $@ | |
0d4b3c1f | 205 | |
6437945a IJ |
206 | check-ipaddrset: ipaddrset-test.py ipaddrset.py ipaddrset-test.expected |
207 | $(srcdir)/ipaddrset-test.py >ipaddrset-test.new | |
889ae0a2 | 208 | diff -u $(srcdir)/ipaddrset-test.expected ipaddrset-test.new |
6437945a | 209 | |
9018e07a IJ |
210 | .PRECIOUS: eax-%-test |
211 | ||
60fe3102 | 212 | installdirs: |
d3fe100d | 213 | $(INSTALL) -d $(prefix)/share/secnet $(sbindir) |
3ca86f6d | 214 | $(INSTALL) -d $(mandir)/man8 |
e61a41a4 | 215 | $(INSTALL) -d $(datarootdir)/secnet |
60fe3102 RK |
216 | |
217 | install: installdirs | |
e250348a IJ |
218 | set -e; ok=true; for f in $(STALE_PYTHON_FILES); do \ |
219 | if test -e $$f; then \ | |
220 | echo >&2 "ERROR: $$f still exists "\ | |
221 | "- try \`make install-force'"; \ | |
222 | ok=false; \ | |
223 | fi; \ | |
224 | done; \ | |
225 | $$ok | |
d3fe100d SE |
226 | $(INSTALL_PROGRAM) secnet $(sbindir)/`echo secnet|sed '$(transform)'` |
227 | $(INSTALL_PROGRAM) ${srcdir}/make-secnet-sites $(sbindir)/`echo make-secnet-sites|sed '$(transform)'` | |
9c7a0b4e | 228 | $(INSTALL_DATA) ${srcdir}/ipaddrset.py $(prefix)/share/secnet/ipaddrset.py |
e61a41a4 IJ |
229 | $(INSTALL_SCRIPT) ${srcdir}/polypath-interface-monitor-linux \ |
230 | $(datarootdir)/secnet/. | |
bdc4c1f9 | 231 | $(INSTALL_DATA) ${srcdir}/secnet.8 $(mandir)/man8/secnet.8 |
974d0468 | 232 | |
e250348a IJ |
233 | install-force: |
234 | rm -f $(STALE_PYTHON_FILES) | |
235 | $(MAKE) install | |
236 | ||
2fe58dfd | 237 | clean: |
c26f37f0 | 238 | $(RM) -f *.o *.yy.[ch] *.tab.[ch] $(TARGETS) core version.c |
4b478582 | 239 | $(RM) -f *.d *.pyc *~ eax-*-test.confirm eax-*-test |
7b2ef224 | 240 | $(RM) -f msgcode-test.confirm msgcode-test |
462c35a1 MW |
241 | $(RM) -f $(addsuffix -test, $(CRYPTO_TESTS)) |
242 | $(RM) -f $(addsuffix -test.confirm, $(CRYPTO_TESTS)) | |
2fe58dfd SE |
243 | |
244 | realclean: clean | |
d3fe100d | 245 | $(RM) -f *~ Makefile config.h *.d \ |
8689b3a9 SE |
246 | config.log config.status config.cache \ |
247 | stamp-h Makefile.bak | |
2fe58dfd | 248 | |
469fd1d9 SE |
249 | distclean: realclean |
250 | ||
2562e34b | 251 | # Release checklist: |
0e99d630 IJ |
252 | # |
253 | # 0. Use this checklist from Makefile.in | |
254 | # | |
2562e34b IJ |
255 | # 1. Check that the tree has what you want |
256 | # | |
a9ebbc41 IJ |
257 | # 2. Update changelog: |
258 | # gbp dch --since=<PREVIOUS VERSION> | |
259 | # and then edit debian/changelog. | |
2562e34b | 260 | # |
a9ebbc41 IJ |
261 | # 3. Update VERSION (in this file, above) and |
262 | # finalise debian/changelog (removing ~ from version) and commit. | |
2562e34b | 263 | # |
a9ebbc41 IJ |
264 | # 4. Build source and binaries: |
265 | # dgit -wgf sbuild -A -c stretch | |
2562e34b | 266 | # |
a9ebbc41 IJ |
267 | # 5. dpkg -i on zealot just to check |
268 | # dpkg -i ~ian/things/Fvpn/bpd/secnet_${VERSION}_amd64.deb | |
2562e34b | 269 | # |
a9ebbc41 IJ |
270 | # 6. run it on chiark |
271 | # check we can still ping davenant and chiark | |
2562e34b | 272 | # |
a9ebbc41 IJ |
273 | # 7. Make git tag and source tarball signature: |
274 | # git-tag -u general -m "secnet $VERSION" -s v${VERSION//\~/_} | |
275 | # gpg -u general --detach-sign ../bpd/secnet_$VERSION.tar.gz | |
fd44936f | 276 | # |
a9ebbc41 IJ |
277 | # 8. Publish the branch and distriubtion files: |
278 | # git-push origin v${VERSION//\~/_} v${VERSION//\~/_}~0:master | |
279 | # dcmd rsync -v ../bpd/secnet_${VERSION}_multi.changes chiark:/home/ianmdlvl/public-html/secnet/download/ | |
b57cc2eb | 280 | # |
a9ebbc41 | 281 | # 9. Sort out html. On chiark as user secnet: |
9c8b8146 IJ |
282 | # cd ~secnet/public-html/release/ |
283 | # mkdir $VERSION | |
284 | # cd $VERSION | |
285 | # ln -s /home/ianmdlvl/public-html/secnet/download/secnet?$VERSION* . | |
a9ebbc41 IJ |
286 | # ln -sfn $VERSION ../current |
287 | # | |
288 | # 10. write and post a release announcement | |
289 | # cd ../bpd | |
290 | # dcmd sha256sum secnet_${VERSION}_multi.changes | |
291 | # ... | |
292 | # gpg --clearsign ../release-announcement | |
293 | # rsync -vP ../release-announcement.asc c:mail/d/ | |
66ee7152 | 294 | # |
a9ebbc41 | 295 | # 11. bump changelog version in master, to new version with ~ |