[secnet] / Makefile.in

# Makefile for secnet
#
# This file is part of secnet.
# See README for full list of copyright holders.
#
# secnet is free software; you can redistribute it and/or modify it
# under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 3 of the License, or
# (at your option) any later version.
# 
# secnet is distributed in the hope that it will be useful, but
# WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
# General Public License for more details.
# 
# You should have received a copy of the GNU General Public License
# version 3 along with secnet; if not, see
# https://www.gnu.org/licenses/gpl.html.

.PHONY:	all clean realclean distclean dist install

PACKAGE:=secnet
VERSION=0.4.5

@SET_MAKE@

srcdir:=@srcdir@
VPATH:=@srcdir@

SHELL:=/bin/sh
RM:=@RM@
CC:=@CC@
INSTALL:=@INSTALL@
INSTALL_PROGRAM:=@INSTALL_PROGRAM@
INSTALL_SCRIPT:=@INSTALL_SCRIPT@
INSTALL_DATA:=@INSTALL_DATA@

prefix:=$(DESTDIR)@prefix@
exec_prefix:=@exec_prefix@
sbindir:=@sbindir@
sysconfdir:=$(DESTDIR)@sysconfdir@
datarootdir:=@datarootdir@
transform:=@program_transform_name@
mandir:=@mandir@

CFLAGS:=-Wall @WRITESTRINGS@ @CFLAGS@ -Werror \
	-W -Wno-unused -Wno-unused-parameter \
	-Wno-pointer-sign -Wstrict-prototypes -Wmissing-prototypes \
	-Wmissing-declarations -Wnested-externs -Wredundant-decls \
	-Wpointer-arith -Wformat=2 -Winit-self \
	-Wswitch-enum -Wunused-variable -Wunused-function -Wbad-function-cast \
	-Wno-strict-aliasing -fno-strict-aliasing \
	-MMD
ALL_CFLAGS:=@DEFS@ -I$(srcdir) -I. $(CFLAGS) $(EXTRA_CFLAGS)
CPPFLAGS:=@CPPFLAGS@ -DDATAROOTDIR='"$(datarootdir)"' $(EXTRA_CPPFLAGS)
LDFLAGS:=@LDFLAGS@ $(EXTRA_LDFLAGS)
LDLIBS:=@LIBS@ $(EXTRA_LDLIBS)

TARGETS:=secnet

OBJECTS:=secnet.o util.o conffile.yy.o conffile.tab.o conffile.o modules.o \
	resolver.o random.o udp.o site.o transform-cbcmac.o transform-eax.o \
	comm-common.o polypath.o \
	netlink.o rsa.o dh.o serpent.o serpentbe.o \
	md5.o sha512.o tun.o slip.o sha1.o ipaddr.o log.o \
	process.o @LIBOBJS@ \
	hackypar.o
# version.o is handled specially below and in the link rule for secnet.

CRYPTO_TESTS = keccak1600 sha3 f25519 x25519 ed25519 fgoldi x448 ed448

TEST_OBJECTS:=eax-aes-test.o eax-serpent-test.o eax-serpentbe-test.o \
		eax-test.o aes.o \
		$(addsuffix -test.o,$(CRYPTO_TESTS))

ifeq (version.o,$(MAKECMDGOALS))
OBJECTS:=version.o
TEST_OBJECTS:=
endif

STALE_PYTHON_FILES=	$(foreach e, py pyc, \
			$(foreach p, /usr /usr/local, \
			$(foreach l, ipaddr, \
			$(DESTDIR)$p/share/secnet/$l.$e \
			)))

%.c:	%.y

%.yy.c:	%.fl
	flex --header=$*.yy.h -o$@ $<

%.tab.c %.tab.h:	%.y
	bison -d -o $@ $<

%.o: %.c conffile.yy.h
	$(CC) $(CPPFLAGS) $(ALL_CFLAGS) -c $< -o $@

all:	$(TARGETS) check

# Automatic remaking of configuration files, from autoconf documentation
${srcdir}/configure: configure.in
	cd ${srcdir} && autoconf

# autoheader might not change config.h.in, so touch a stamp file.
${srcdir}/config.h.in: stamp-h.in
${srcdir}/stamp-h.in: configure.in
	cd ${srcdir} && autoheader
	echo timestamp > ${srcdir}/stamp-h.in

config.h: stamp-h
stamp-h: config.h.in config.status
	./config.status

Makefile: Makefile.in config.status
	./config.status

config.status: configure
	./config.status --recheck
# End of config file remaking rules

# C and header file dependency rules
SOURCES:=$(OBJECTS:.o=.c) $(TEST_OBJECTS:.o=.c)
DEPENDS:=$(OBJECTS:.o=.d) $(TEST_OBJECTS:.o=.d)

-include *.d

# Manual dependencies section
conffile.yy.c:	conffile.fl conffile.tab.c
conffile.yy.h:	conffile.yy.c
conffile.tab.c:	conffile.y
# End of manual dependencies section

conffile.yy.o: ALL_CFLAGS += -Wno-sign-compare

secnet:	$(OBJECTS)
	$(MAKE) version.o # *.o $(filter-out %.o, $^)
	$(CC) $(LDFLAGS) $(ALL_CFLAGS) -o $@ $(OBJECTS) version.o $(LDLIBS)
# We (always) regenerate the version, but only if we regenerate the
# binary.  (This is necessary as the version string is can depend on
# any of the source files, eg to see whether "+" is needed.)

ifneq (,$(wildcard .git/HEAD))
# If we have (eg) committed, relink and thus regenerate the version
# with the new info from git describe.
secnet: Makefile .git/HEAD $(shell sed -n 's#^ref: #.git/#p' .git/HEAD)
secnet: $(wildcard .git/packed-refs)
endif

check: eax-aes-test.confirm eax-serpent-test.confirm \
	eax-serpentbe-test.confirm check-ipaddrset \
	msgcode-test.confirm \
	$(foreach c,$(CRYPTO_TESTS),$c-test.confirm)

version.c: Makefile
	echo "#include \"secnet.h\"" >$@.new
	@set -ex; if test -e .git && type -p git >/dev/null; then \
		v=$$(git describe --match 'v*'); v=$${v#v}; \
		if ! git diff --quiet HEAD; then v="$$v+"; fi; \
	else \
		v="$(VERSION)"; \
	fi; \
	echo "char version[]=\"secnet $$v\";" >>$@.new
	mv -f $@.new $@

eax-%-test: eax-%-test.o eax-test.o %.o
	$(CC) $(LDFLAGS) $(ALL_CFLAGS) -o $@ $^

eax-%-test.confirm: eax-%-test eax-%-test.vectors
	./$< <$(srcdir)/eax-$*-test.vectors >$@.new
	mv -f $@.new $@

msgcode-test: msgcode-test.o
	$(CC) $(LDFLAGS) $(ALL_CFLAGS) -o $@ $^

msgcode-test.confirm: msgcode-test
	./msgcode-test
	touch $@

$(foreach c,$(CRYPTO_TESTS),$c-test): %-test: %-test.o crypto-test.o
	$(CC) $(LDFLAGS) $(ALL_CFLAGS) -o $@ $^

$(foreach c,$(CRYPTO_TESTS),$c-test.confirm): \
		%-test.confirm: %-test %-tests.in
	./$*-test <$(srcdir)/$*-tests.in
	touch $@

keccak1600-test: keccak1600.o
sha3-test: sha3.o keccak1600.o
f25519-test: f25519.o
x25519-test: x25519.o f25519.o
ed25519-test: sha512.o f25519.o scaf.o ed25519.o
fgoldi-test: fgoldi.o
x448-test: x448.o fgoldi.o
ed448-test: keccak1600.o sha3.o fgoldi.o scaf.o ed448.o

f25519-test.o: ec-field-test.c
	$(CC) $(CPPFLAGS) $(ALL_CFLAGS) -c -DFIELD=f25519 $< -o $@
fgoldi-test.o: ec-field-test.c
	$(CC) $(CPPFLAGS) $(ALL_CFLAGS) -c -DFIELD=fgoldi $< -o $@
x25519-test.o: xdh-test.c
	$(CC) $(CPPFLAGS) $(ALL_CFLAGS) -c -DXDH=x25519 -DFIELD=f25519 $< -o $@
x448-test.o: xdh-test.c
	$(CC) $(CPPFLAGS) $(ALL_CFLAGS) -c -DXDH=x448 -DFIELD=fgoldi $< -o $@

check-ipaddrset: ipaddrset-test.py ipaddrset.py ipaddrset-test.expected
	$(srcdir)/ipaddrset-test.py >ipaddrset-test.new
	diff -u $(srcdir)/ipaddrset-test.expected ipaddrset-test.new

.PRECIOUS: eax-%-test

installdirs:
	$(INSTALL) -d $(prefix)/share/secnet $(sbindir)
	$(INSTALL) -d $(mandir)/man8
	$(INSTALL) -d $(datarootdir)/secnet

install: installdirs
	set -e; ok=true; for f in $(STALE_PYTHON_FILES); do \
		if test -e $$f; then \
			echo >&2 "ERROR: $$f still exists "\
				"- try \`make install-force'"; \
			ok=false; \
		fi; \
	done; \
	$$ok
	$(INSTALL_PROGRAM) secnet $(sbindir)/`echo secnet|sed '$(transform)'`
	$(INSTALL_PROGRAM) ${srcdir}/make-secnet-sites $(sbindir)/`echo make-secnet-sites|sed '$(transform)'`
	$(INSTALL_DATA) ${srcdir}/ipaddrset.py $(prefix)/share/secnet/ipaddrset.py
	$(INSTALL_SCRIPT) ${srcdir}/polypath-interface-monitor-linux \
		$(datarootdir)/secnet/.
	$(INSTALL_DATA) ${srcdir}/secnet.8 $(mandir)/man8/secnet.8

install-force:
	rm -f $(STALE_PYTHON_FILES)
	$(MAKE) install

clean:
	$(RM) -f *.o *.yy.[ch] *.tab.[ch] $(TARGETS) core version.c
	$(RM) -f *.d *.pyc *~ eax-*-test.confirm eax-*-test
	$(RM) -f msgcode-test.confirm msgcode-test
	$(RM) -f $(addsuffix -test, $(CRYPTO_TESTS))
	$(RM) -f $(addsuffix -test.confirm, $(CRYPTO_TESTS))

realclean:	clean
	$(RM) -f *~ Makefile config.h  *.d \
	config.log config.status config.cache \
	stamp-h Makefile.bak

distclean:	realclean

# Release checklist:
#
#  0. Use this checklist from Makefile.in
#
#  1. Check that the tree has what you want
#
#  2. Update changelog:
#         gbp dch --since=<PREVIOUS VERSION>
#     and then edit debian/changelog.
#
#  3. Update VERSION (in this file, above) and
#     finalise debian/changelog (removing ~ from version) and commit.
#
#  4. Build source and binaries:
#       dgit -wgf sbuild -A -c stretch
#
#  5. dpkg -i on zealot just to check
#       dpkg -i ~ian/things/Fvpn/bpd/secnet_${VERSION}_amd64.deb
#
#  6. run it on chiark
#     check we can still ping davenant and chiark
#
#  7. Make git tag and source tarball signature:
#       git-tag -u general -m "secnet $VERSION" -s v${VERSION//\~/_}
#       gpg -u general --detach-sign ../bpd/secnet_$VERSION.tar.gz
#
#  8. Publish the branch and distriubtion files:
#       git-push origin v${VERSION//\~/_} v${VERSION//\~/_}~0:master
#       dcmd rsync -v ../bpd/secnet_${VERSION}_multi.changes chiark:/home/ianmdlvl/public-html/secnet/download/
#
#  9. Sort out html.  On chiark as user secnet:
#       cd ~secnet/public-html/release/
#       mkdir $VERSION
#       cd $VERSION
#       ln -s /home/ianmdlvl/public-html/secnet/download/secnet?$VERSION* .
#       ln -sfn $VERSION ../current
#
# 10. write and post a release announcement
#       cd ../bpd
#       dcmd sha256sum secnet_${VERSION}_multi.changes
#       ...
#       gpg --clearsign ../release-announcement
#       rsync -vP ../release-announcement.asc c:mail/d/
#
# 11. bump changelog version in master, to new version with ~
Commit	Line	Data
974d0468	1	# Makefile for secnet
c215a4bc IJ	2	#
	3	# This file is part of secnet.
	4	# See README for full list of copyright holders.
	5	#
	6	# secnet is free software; you can redistribute it and/or modify it
	7	# under the terms of the GNU General Public License as published by
9c6a8729	8	# the Free Software Foundation; either version 3 of the License, or
c215a4bc IJ	9	# (at your option) any later version.
	10	#
	11	# secnet is distributed in the hope that it will be useful, but
	12	# WITHOUT ANY WARRANTY; without even the implied warranty of
	13	# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
	14	# General Public License for more details.
	15	#
974d0468	16	# You should have received a copy of the GNU General Public License
c215a4bc IJ	17	# version 3 along with secnet; if not, see
c215a4bc IJ	18	# https://www.gnu.org/licenses/gpl.html.
974d0468	19
d3fe100d	20	.PHONY: all clean realclean distclean dist install
2fe58dfd SE	21
2fe58dfd SE	22	PACKAGE:=secnet
edc9e302	23	VERSION=0.4.5
2fe58dfd SE	24
	25	@SET_MAKE@
	26
	27	srcdir:=@srcdir@
	28	VPATH:=@srcdir@
	29
974d0468 SE	30	SHELL:=/bin/sh
	31	RM:=@RM@
	32	CC:=@CC@
	33	INSTALL:=@INSTALL@
	34	INSTALL_PROGRAM:=@INSTALL_PROGRAM@
e61a41a4	35	INSTALL_SCRIPT:=@INSTALL_SCRIPT@
9c7a0b4e	36	INSTALL_DATA:=@INSTALL_DATA@
2fe58dfd	37
af720152	38	prefix:=$(DESTDIR)@prefix@
328ae477 IJ	39	exec_prefix:=@exec_prefix@
328ae477 IJ	40	sbindir:=@sbindir@
af720152	41	sysconfdir:=$(DESTDIR)@sysconfdir@
e61a41a4	42	datarootdir:=@datarootdir@
328ae477 IJ	43	transform:=@program_transform_name@
	44	mandir:=@mandir@
	45
0ade8ecc	46	CFLAGS:=-Wall @WRITESTRINGS@ @CFLAGS@ -Werror \
b24a72ef	47	-W -Wno-unused -Wno-unused-parameter \
18ca0b44 IJ	48	-Wno-pointer-sign -Wstrict-prototypes -Wmissing-prototypes \
	49	-Wmissing-declarations -Wnested-externs -Wredundant-decls \
	50	-Wpointer-arith -Wformat=2 -Winit-self \
07575765	51	-Wswitch-enum -Wunused-variable -Wunused-function -Wbad-function-cast \
76f7ef9c IJ	52	-Wno-strict-aliasing -fno-strict-aliasing \
76f7ef9c IJ	53	-MMD
68438849	54	ALL_CFLAGS:=@DEFS@ -I$(srcdir) -I. $(CFLAGS) $(EXTRA_CFLAGS)
e61a41a4	55	CPPFLAGS:=@CPPFLAGS@ -DDATAROOTDIR='"$(datarootdir)"' $(EXTRA_CPPFLAGS)
68438849 IJ	56	LDFLAGS:=@LDFLAGS@ $(EXTRA_LDFLAGS)
68438849 IJ	57	LDLIBS:=@LIBS@ $(EXTRA_LDLIBS)
2fe58dfd SE	58
	59	TARGETS:=secnet
	60
	61	OBJECTS:=secnet.o util.o conffile.yy.o conffile.tab.o conffile.o modules.o \
b02b720a	62	resolver.o random.o udp.o site.o transform-cbcmac.o transform-eax.o \
ce5c098f	63	comm-common.o polypath.o \
b02b720a	64	netlink.o rsa.o dh.o serpent.o serpentbe.o \
e4cfe537	65	md5.o sha512.o tun.o slip.o sha1.o ipaddr.o log.o \
3b83c932 SE	66	process.o @LIBOBJS@ \
3b83c932 SE	67	hackypar.o
e4cfe537	68	# version.o is handled specially below and in the link rule for secnet.
9d3a4132	69
eac0a45f MW	70	CRYPTO_TESTS = keccak1600 sha3 f25519 x25519 ed25519 fgoldi x448 ed448
eac0a45f MW	71
9018e07a	72	TEST_OBJECTS:=eax-aes-test.o eax-serpent-test.o eax-serpentbe-test.o \
eac0a45f MW	73	eax-test.o aes.o \
eac0a45f MW	74	$(addsuffix -test.o,$(CRYPTO_TESTS))
9018e07a	75
e4cfe537 IJ	76	ifeq (version.o,$(MAKECMDGOALS))
	77	OBJECTS:=version.o
	78	TEST_OBJECTS:=
	79	endif
	80
e250348a IJ	81	STALE_PYTHON_FILES= $(foreach e, py pyc, \
	82	$(foreach p, /usr /usr/local, \
	83	$(foreach l, ipaddr, \
af720152	84	$(DESTDIR)$p/share/secnet/$l.$e \
e250348a IJ	85	)))
e250348a IJ	86
2fe58dfd SE	87	%.c: %.y
	88
	89	%.yy.c: %.fl
27f5042b	90	flex --header=$*.yy.h -o$@ $<
2fe58dfd	91
76eca292	92	%.tab.c %.tab.h: %.y
8689b3a9	93	bison -d -o $@ $<
2fe58dfd	94
c26f37f0	95	%.o: %.c conffile.yy.h
fe5e9cc4	96	$(CC) $(CPPFLAGS) $(ALL_CFLAGS) -c $< -o $@
2fe58dfd	97
9018e07a	98	all: $(TARGETS) check
2fe58dfd	99
8689b3a9 SE	100	# Automatic remaking of configuration files, from autoconf documentation
	101	${srcdir}/configure: configure.in
	102	cd ${srcdir} && autoconf
	103
	104	# autoheader might not change config.h.in, so touch a stamp file.
	105	${srcdir}/config.h.in: stamp-h.in
f74f5f43	106	${srcdir}/stamp-h.in: configure.in
8689b3a9 SE	107	cd ${srcdir} && autoheader
	108	echo timestamp > ${srcdir}/stamp-h.in
	109
	110	config.h: stamp-h
	111	stamp-h: config.h.in config.status
	112	./config.status
	113
974d0468	114	Makefile: Makefile.in config.status
8689b3a9	115	./config.status
974d0468 SE	116
974d0468 SE	117	config.status: configure
8689b3a9 SE	118	./config.status --recheck
8689b3a9 SE	119	# End of config file remaking rules
59635212	120
d3fe100d	121	# C and header file dependency rules
9018e07a IJ	122	SOURCES:=$(OBJECTS:.o=.c) $(TEST_OBJECTS:.o=.c)
9018e07a IJ	123	DEPENDS:=$(OBJECTS:.o=.d) $(TEST_OBJECTS:.o=.d)
d3fe100d	124
76f7ef9c	125	-include *.d
d3fe100d SE	126
d3fe100d SE	127	# Manual dependencies section
8689b3a9	128	conffile.yy.c: conffile.fl conffile.tab.c
27f5042b	129	conffile.yy.h: conffile.yy.c
8689b3a9 SE	130	conffile.tab.c: conffile.y
8689b3a9 SE	131	# End of manual dependencies section
974d0468	132
8af1390a IJ	133	conffile.yy.o: ALL_CFLAGS += -Wno-sign-compare
8af1390a IJ	134
2fe58dfd	135	secnet: $(OBJECTS)
e4cfe537 IJ	136	$(MAKE) version.o # *.o $(filter-out %.o, $^)
	137	$(CC) $(LDFLAGS) $(ALL_CFLAGS) -o $@ $(OBJECTS) version.o $(LDLIBS)
	138	# We (always) regenerate the version, but only if we regenerate the
	139	# binary. (This is necessary as the version string is can depend on
	140	# any of the source files, eg to see whether "+" is needed.)
	141
	142	ifneq (,$(wildcard .git/HEAD))
	143	# If we have (eg) committed, relink and thus regenerate the version
	144	# with the new info from git describe.
	145	secnet: Makefile .git/HEAD $(shell sed -n 's#^ref: #.git/#p' .git/HEAD)
	146	secnet: $(wildcard .git/packed-refs)
	147	endif
2fe58dfd	148
9018e07a	149	check: eax-aes-test.confirm eax-serpent-test.confirm \
7b2ef224	150	eax-serpentbe-test.confirm check-ipaddrset \
eac0a45f MW	151	msgcode-test.confirm \
eac0a45f MW	152	$(foreach c,$(CRYPTO_TESTS),$c-test.confirm)
9018e07a	153
974d0468	154	version.c: Makefile
fcbc5905	155	echo "#include \"secnet.h\"" >$@.new
509a30c0	156	@set -ex; if test -e .git && type -p git >/dev/null; then \
e4cfe537 IJ	157	v=$$(git describe --match 'v*'); v=$${v#v}; \
	158	if ! git diff --quiet HEAD; then v="$$v+"; fi; \
	159	else \
	160	v="$(VERSION)"; \
	161	fi; \
	162	echo "char version[]=\"secnet $$v\";" >>$@.new
fcbc5905	163	mv -f $@.new $@
974d0468	164
9018e07a IJ	165	eax-%-test: eax-%-test.o eax-test.o %.o
	166	$(CC) $(LDFLAGS) $(ALL_CFLAGS) -o $@ $^
	167
	168	eax-%-test.confirm: eax-%-test eax-%-test.vectors
	169	./$< <$(srcdir)/eax-$*-test.vectors >$@.new
	170	mv -f $@.new $@
	171
7b2ef224 MW	172	msgcode-test: msgcode-test.o
	173	$(CC) $(LDFLAGS) $(ALL_CFLAGS) -o $@ $^
	174
	175	msgcode-test.confirm: msgcode-test
	176	./msgcode-test
	177	touch $@
	178
eac0a45f MW	179	$(foreach c,$(CRYPTO_TESTS),$c-test): %-test: %-test.o crypto-test.o
	180	$(CC) $(LDFLAGS) $(ALL_CFLAGS) -o $@ $^
	181
	182	$(foreach c,$(CRYPTO_TESTS),$c-test.confirm): \
	183	%-test.confirm: %-test %-tests.in
	184	./$-test <$(srcdir)/$-tests.in
	185	touch $@
	186
	187	keccak1600-test: keccak1600.o
	188	sha3-test: sha3.o keccak1600.o
	189	f25519-test: f25519.o
	190	x25519-test: x25519.o f25519.o
	191	ed25519-test: sha512.o f25519.o scaf.o ed25519.o
	192	fgoldi-test: fgoldi.o
	193	x448-test: x448.o fgoldi.o
	194	ed448-test: keccak1600.o sha3.o fgoldi.o scaf.o ed448.o
	195
	196	f25519-test.o: ec-field-test.c
	197	$(CC) $(CPPFLAGS) $(ALL_CFLAGS) -c -DFIELD=f25519 $< -o $@
	198	fgoldi-test.o: ec-field-test.c
	199	$(CC) $(CPPFLAGS) $(ALL_CFLAGS) -c -DFIELD=fgoldi $< -o $@
	200	x25519-test.o: xdh-test.c
	201	$(CC) $(CPPFLAGS) $(ALL_CFLAGS) -c -DXDH=x25519 -DFIELD=f25519 $< -o $@
	202	x448-test.o: xdh-test.c
	203	$(CC) $(CPPFLAGS) $(ALL_CFLAGS) -c -DXDH=x448 -DFIELD=fgoldi $< -o $@
	204
6437945a IJ	205	check-ipaddrset: ipaddrset-test.py ipaddrset.py ipaddrset-test.expected
6437945a IJ	206	$(srcdir)/ipaddrset-test.py >ipaddrset-test.new
889ae0a2	207	diff -u $(srcdir)/ipaddrset-test.expected ipaddrset-test.new
6437945a	208
9018e07a IJ	209	.PRECIOUS: eax-%-test
9018e07a IJ	210
60fe3102	211	installdirs:
d3fe100d	212	$(INSTALL) -d $(prefix)/share/secnet $(sbindir)
3ca86f6d	213	$(INSTALL) -d $(mandir)/man8
e61a41a4	214	$(INSTALL) -d $(datarootdir)/secnet
60fe3102 RK	215
60fe3102 RK	216	install: installdirs
e250348a IJ	217	set -e; ok=true; for f in $(STALE_PYTHON_FILES); do \
	218	if test -e $$f; then \
	219	echo >&2 "ERROR: $$f still exists "\
	220	"- try \`make install-force'"; \
	221	ok=false; \
	222	fi; \
	223	done; \
	224	$$ok
d3fe100d SE	225	$(INSTALL_PROGRAM) secnet $(sbindir)/`echo secnet\|sed '$(transform)'`
d3fe100d SE	226	$(INSTALL_PROGRAM) ${srcdir}/make-secnet-sites $(sbindir)/`echo make-secnet-sites\|sed '$(transform)'`
9c7a0b4e	227	$(INSTALL_DATA) ${srcdir}/ipaddrset.py $(prefix)/share/secnet/ipaddrset.py
e61a41a4 IJ	228	$(INSTALL_SCRIPT) ${srcdir}/polypath-interface-monitor-linux \
e61a41a4 IJ	229	$(datarootdir)/secnet/.
bdc4c1f9	230	$(INSTALL_DATA) ${srcdir}/secnet.8 $(mandir)/man8/secnet.8
974d0468	231
e250348a IJ	232	install-force:
	233	rm -f $(STALE_PYTHON_FILES)
	234	$(MAKE) install
	235
2fe58dfd	236	clean:
c26f37f0	237	$(RM) -f .o .yy.[ch] *.tab.[ch] $(TARGETS) core version.c
4b478582	238	$(RM) -f .d .pyc ~ eax--test.confirm eax-*-test
7b2ef224	239	$(RM) -f msgcode-test.confirm msgcode-test
eac0a45f MW	240	$(RM) -f $(addsuffix -test, $(CRYPTO_TESTS))
eac0a45f MW	241	$(RM) -f $(addsuffix -test.confirm, $(CRYPTO_TESTS))
2fe58dfd SE	242
2fe58dfd SE	243	realclean: clean
d3fe100d	244	$(RM) -f ~ Makefile config.h .d \
8689b3a9 SE	245	config.log config.status config.cache \
8689b3a9 SE	246	stamp-h Makefile.bak
2fe58dfd	247
469fd1d9 SE	248	distclean: realclean
469fd1d9 SE	249
2562e34b	250	# Release checklist:
0e99d630 IJ	251	#
	252	# 0. Use this checklist from Makefile.in
	253	#
2562e34b IJ	254	# 1. Check that the tree has what you want
2562e34b IJ	255	#
a9ebbc41 IJ	256	# 2. Update changelog:
	257	# gbp dch --since=<PREVIOUS VERSION>
	258	# and then edit debian/changelog.
2562e34b	259	#
a9ebbc41 IJ	260	# 3. Update VERSION (in this file, above) and
a9ebbc41 IJ	261	# finalise debian/changelog (removing ~ from version) and commit.
2562e34b	262	#
a9ebbc41 IJ	263	# 4. Build source and binaries:
a9ebbc41 IJ	264	# dgit -wgf sbuild -A -c stretch
2562e34b	265	#
a9ebbc41 IJ	266	# 5. dpkg -i on zealot just to check
a9ebbc41 IJ	267	# dpkg -i ~ian/things/Fvpn/bpd/secnet_${VERSION}_amd64.deb
2562e34b	268	#
a9ebbc41 IJ	269	# 6. run it on chiark
a9ebbc41 IJ	270	# check we can still ping davenant and chiark
2562e34b	271	#
a9ebbc41 IJ	272	# 7. Make git tag and source tarball signature:
	273	# git-tag -u general -m "secnet $VERSION" -s v${VERSION//\~/_}
	274	# gpg -u general --detach-sign ../bpd/secnet_$VERSION.tar.gz
fd44936f	275	#
a9ebbc41 IJ	276	# 8. Publish the branch and distriubtion files:
	277	# git-push origin v${VERSION//\~/_} v${VERSION//\~/_}~0:master
	278	# dcmd rsync -v ../bpd/secnet_${VERSION}_multi.changes chiark:/home/ianmdlvl/public-html/secnet/download/
b57cc2eb	279	#
a9ebbc41	280	# 9. Sort out html. On chiark as user secnet:
9c8b8146 IJ	281	# cd ~secnet/public-html/release/
	282	# mkdir $VERSION
	283	# cd $VERSION
	284	# ln -s /home/ianmdlvl/public-html/secnet/download/secnet?$VERSION* .
a9ebbc41 IJ	285	# ln -sfn $VERSION ../current
	286	#
	287	# 10. write and post a release announcement
	288	# cd ../bpd
	289	# dcmd sha256sum secnet_${VERSION}_multi.changes
	290	# ...
	291	# gpg --clearsign ../release-announcement
	292	# rsync -vP ../release-announcement.asc c:mail/d/
66ee7152	293	#
a9ebbc41	294	# 11. bump changelog version in master, to new version with ~