| 1 | # Makefile for secnet |
| 2 | # |
| 3 | # This file is part of secnet. |
| 4 | # See README for full list of copyright holders. |
| 5 | # |
| 6 | # secnet is free software; you can redistribute it and/or modify it |
| 7 | # under the terms of the GNU General Public License as published by |
| 8 | # the Free Software Foundation; either version 3 of the License, or |
| 9 | # (at your option) any later version. |
| 10 | # |
| 11 | # secnet is distributed in the hope that it will be useful, but |
| 12 | # WITHOUT ANY WARRANTY; without even the implied warranty of |
| 13 | # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU |
| 14 | # General Public License for more details. |
| 15 | # |
| 16 | # You should have received a copy of the GNU General Public License |
| 17 | # version 3 along with secnet; if not, see |
| 18 | # https://www.gnu.org/licenses/gpl.html. |
| 19 | |
| 20 | .PHONY: all clean realclean distclean dist install |
| 21 | |
| 22 | PACKAGE:=secnet |
| 23 | VERSION=0.4.5 |
| 24 | |
| 25 | @SET_MAKE@ |
| 26 | |
| 27 | srcdir:=@srcdir@ |
| 28 | VPATH:=@srcdir@ |
| 29 | |
| 30 | SHELL:=/bin/sh |
| 31 | RM:=@RM@ |
| 32 | CC:=@CC@ |
| 33 | INSTALL:=@INSTALL@ |
| 34 | INSTALL_PROGRAM:=@INSTALL_PROGRAM@ |
| 35 | INSTALL_SCRIPT:=@INSTALL_SCRIPT@ |
| 36 | INSTALL_DATA:=@INSTALL_DATA@ |
| 37 | |
| 38 | prefix:=$(DESTDIR)@prefix@ |
| 39 | exec_prefix:=@exec_prefix@ |
| 40 | sbindir:=@sbindir@ |
| 41 | sysconfdir:=$(DESTDIR)@sysconfdir@ |
| 42 | datarootdir:=@datarootdir@ |
| 43 | transform:=@program_transform_name@ |
| 44 | mandir:=@mandir@ |
| 45 | |
| 46 | CFLAGS:=-Wall @WRITESTRINGS@ @CFLAGS@ -Werror \ |
| 47 | -W -Wno-unused -Wno-unused-parameter \ |
| 48 | -Wno-pointer-sign -Wstrict-prototypes -Wmissing-prototypes \ |
| 49 | -Wmissing-declarations -Wnested-externs -Wredundant-decls \ |
| 50 | -Wpointer-arith -Wformat=2 -Winit-self \ |
| 51 | -Wswitch-enum -Wunused-variable -Wunused-function -Wbad-function-cast \ |
| 52 | -Wno-strict-aliasing -fno-strict-aliasing \ |
| 53 | -MMD |
| 54 | ALL_CFLAGS:=@DEFS@ -I$(srcdir) -I. $(CFLAGS) $(EXTRA_CFLAGS) |
| 55 | CPPFLAGS:=@CPPFLAGS@ -DDATAROOTDIR='"$(datarootdir)"' $(EXTRA_CPPFLAGS) |
| 56 | LDFLAGS:=@LDFLAGS@ $(EXTRA_LDFLAGS) |
| 57 | LDLIBS:=@LIBS@ $(EXTRA_LDLIBS) |
| 58 | |
| 59 | TARGETS:=secnet |
| 60 | |
| 61 | OBJECTS:=secnet.o util.o conffile.yy.o conffile.tab.o conffile.o modules.o \ |
| 62 | resolver.o random.o udp.o site.o transform-cbcmac.o transform-eax.o \ |
| 63 | comm-common.o polypath.o \ |
| 64 | netlink.o rsa.o dh.o serpent.o serpentbe.o \ |
| 65 | md5.o sha512.o tun.o slip.o sha1.o ipaddr.o log.o \ |
| 66 | process.o @LIBOBJS@ \ |
| 67 | hackypar.o |
| 68 | # version.o is handled specially below and in the link rule for secnet. |
| 69 | |
| 70 | TEST_OBJECTS:=eax-aes-test.o eax-serpent-test.o eax-serpentbe-test.o \ |
| 71 | eax-test.o aes.o |
| 72 | |
| 73 | ifeq (version.o,$(MAKECMDGOALS)) |
| 74 | OBJECTS:=version.o |
| 75 | TEST_OBJECTS:= |
| 76 | endif |
| 77 | |
| 78 | STALE_PYTHON_FILES= $(foreach e, py pyc, \ |
| 79 | $(foreach p, /usr /usr/local, \ |
| 80 | $(foreach l, ipaddr, \ |
| 81 | $(DESTDIR)$p/share/secnet/$l.$e \ |
| 82 | ))) |
| 83 | |
| 84 | %.c: %.y |
| 85 | |
| 86 | %.yy.c: %.fl |
| 87 | flex --header=$*.yy.h -o$@ $< |
| 88 | |
| 89 | %.tab.c %.tab.h: %.y |
| 90 | bison -d -o $@ $< |
| 91 | |
| 92 | %.o: %.c conffile.yy.h |
| 93 | $(CC) $(CPPFLAGS) $(ALL_CFLAGS) -c $< -o $@ |
| 94 | |
| 95 | all: $(TARGETS) check |
| 96 | |
| 97 | # Automatic remaking of configuration files, from autoconf documentation |
| 98 | ${srcdir}/configure: configure.in |
| 99 | cd ${srcdir} && autoconf |
| 100 | |
| 101 | # autoheader might not change config.h.in, so touch a stamp file. |
| 102 | ${srcdir}/config.h.in: stamp-h.in |
| 103 | ${srcdir}/stamp-h.in: configure.in |
| 104 | cd ${srcdir} && autoheader |
| 105 | echo timestamp > ${srcdir}/stamp-h.in |
| 106 | |
| 107 | config.h: stamp-h |
| 108 | stamp-h: config.h.in config.status |
| 109 | ./config.status |
| 110 | |
| 111 | Makefile: Makefile.in config.status |
| 112 | ./config.status |
| 113 | |
| 114 | config.status: configure |
| 115 | ./config.status --recheck |
| 116 | # End of config file remaking rules |
| 117 | |
| 118 | # C and header file dependency rules |
| 119 | SOURCES:=$(OBJECTS:.o=.c) $(TEST_OBJECTS:.o=.c) |
| 120 | DEPENDS:=$(OBJECTS:.o=.d) $(TEST_OBJECTS:.o=.d) |
| 121 | |
| 122 | -include *.d |
| 123 | |
| 124 | # Manual dependencies section |
| 125 | conffile.yy.c: conffile.fl conffile.tab.c |
| 126 | conffile.yy.h: conffile.yy.c |
| 127 | conffile.tab.c: conffile.y |
| 128 | # End of manual dependencies section |
| 129 | |
| 130 | conffile.yy.o: ALL_CFLAGS += -Wno-sign-compare |
| 131 | |
| 132 | secnet: $(OBJECTS) |
| 133 | $(MAKE) version.o # *.o $(filter-out %.o, $^) |
| 134 | $(CC) $(LDFLAGS) $(ALL_CFLAGS) -o $@ $(OBJECTS) version.o $(LDLIBS) |
| 135 | # We (always) regenerate the version, but only if we regenerate the |
| 136 | # binary. (This is necessary as the version string is can depend on |
| 137 | # any of the source files, eg to see whether "+" is needed.) |
| 138 | |
| 139 | ifneq (,$(wildcard .git/HEAD)) |
| 140 | # If we have (eg) committed, relink and thus regenerate the version |
| 141 | # with the new info from git describe. |
| 142 | secnet: Makefile .git/HEAD $(shell sed -n 's#^ref: #.git/#p' .git/HEAD) |
| 143 | secnet: $(wildcard .git/packed-refs) |
| 144 | endif |
| 145 | |
| 146 | check: eax-aes-test.confirm eax-serpent-test.confirm \ |
| 147 | eax-serpentbe-test.confirm check-ipaddrset \ |
| 148 | msgcode-test.confirm |
| 149 | |
| 150 | version.c: Makefile |
| 151 | echo "#include \"secnet.h\"" >$@.new |
| 152 | @set -ex; if test -e .git && type -p git >/dev/null; then \ |
| 153 | v=$$(git describe --match 'v*'); v=$${v#v}; \ |
| 154 | if ! git diff --quiet HEAD; then v="$$v+"; fi; \ |
| 155 | else \ |
| 156 | v="$(VERSION)"; \ |
| 157 | fi; \ |
| 158 | echo "char version[]=\"secnet $$v\";" >>$@.new |
| 159 | mv -f $@.new $@ |
| 160 | |
| 161 | eax-%-test: eax-%-test.o eax-test.o %.o |
| 162 | $(CC) $(LDFLAGS) $(ALL_CFLAGS) -o $@ $^ |
| 163 | |
| 164 | eax-%-test.confirm: eax-%-test eax-%-test.vectors |
| 165 | ./$< <$(srcdir)/eax-$*-test.vectors >$@.new |
| 166 | mv -f $@.new $@ |
| 167 | |
| 168 | msgcode-test: msgcode-test.o |
| 169 | $(CC) $(LDFLAGS) $(ALL_CFLAGS) -o $@ $^ |
| 170 | |
| 171 | msgcode-test.confirm: msgcode-test |
| 172 | ./msgcode-test |
| 173 | touch $@ |
| 174 | |
| 175 | check-ipaddrset: ipaddrset-test.py ipaddrset.py ipaddrset-test.expected |
| 176 | $(srcdir)/ipaddrset-test.py >ipaddrset-test.new |
| 177 | diff -u $(srcdir)/ipaddrset-test.expected ipaddrset-test.new |
| 178 | |
| 179 | .PRECIOUS: eax-%-test |
| 180 | |
| 181 | installdirs: |
| 182 | $(INSTALL) -d $(prefix)/share/secnet $(sbindir) |
| 183 | $(INSTALL) -d $(mandir)/man8 |
| 184 | $(INSTALL) -d $(datarootdir)/secnet |
| 185 | |
| 186 | install: installdirs |
| 187 | set -e; ok=true; for f in $(STALE_PYTHON_FILES); do \ |
| 188 | if test -e $$f; then \ |
| 189 | echo >&2 "ERROR: $$f still exists "\ |
| 190 | "- try \`make install-force'"; \ |
| 191 | ok=false; \ |
| 192 | fi; \ |
| 193 | done; \ |
| 194 | $$ok |
| 195 | $(INSTALL_PROGRAM) secnet $(sbindir)/`echo secnet|sed '$(transform)'` |
| 196 | $(INSTALL_PROGRAM) ${srcdir}/make-secnet-sites $(sbindir)/`echo make-secnet-sites|sed '$(transform)'` |
| 197 | $(INSTALL_DATA) ${srcdir}/ipaddrset.py $(prefix)/share/secnet/ipaddrset.py |
| 198 | $(INSTALL_SCRIPT) ${srcdir}/polypath-interface-monitor-linux \ |
| 199 | $(datarootdir)/secnet/. |
| 200 | $(INSTALL_DATA) ${srcdir}/secnet.8 $(mandir)/man8/secnet.8 |
| 201 | |
| 202 | install-force: |
| 203 | rm -f $(STALE_PYTHON_FILES) |
| 204 | $(MAKE) install |
| 205 | |
| 206 | clean: |
| 207 | $(RM) -f *.o *.yy.[ch] *.tab.[ch] $(TARGETS) core version.c |
| 208 | $(RM) -f *.d *.pyc *~ eax-*-test.confirm eax-*-test |
| 209 | $(RM) -f msgcode-test.confirm msgcode-test |
| 210 | |
| 211 | realclean: clean |
| 212 | $(RM) -f *~ Makefile config.h *.d \ |
| 213 | config.log config.status config.cache \ |
| 214 | stamp-h Makefile.bak |
| 215 | |
| 216 | distclean: realclean |
| 217 | |
| 218 | # Release checklist: |
| 219 | # |
| 220 | # 0. Use this checklist from Makefile.in |
| 221 | # |
| 222 | # 1. Check that the tree has what you want |
| 223 | # |
| 224 | # 2. Update changelog: |
| 225 | # gbp dch --since=<PREVIOUS VERSION> |
| 226 | # and then edit debian/changelog. |
| 227 | # |
| 228 | # 3. Update VERSION (in this file, above) and |
| 229 | # finalise debian/changelog (removing ~ from version) and commit. |
| 230 | # |
| 231 | # 4. Build source and binaries: |
| 232 | # dgit -wgf sbuild -A -c stretch |
| 233 | # |
| 234 | # 5. dpkg -i on zealot just to check |
| 235 | # dpkg -i ~ian/things/Fvpn/bpd/secnet_${VERSION}_amd64.deb |
| 236 | # |
| 237 | # 6. run it on chiark |
| 238 | # check we can still ping davenant and chiark |
| 239 | # |
| 240 | # 7. Make git tag and source tarball signature: |
| 241 | # git-tag -u general -m "secnet $VERSION" -s v${VERSION//\~/_} |
| 242 | # gpg -u general --detach-sign ../bpd/secnet_$VERSION.tar.gz |
| 243 | # |
| 244 | # 8. Publish the branch and distriubtion files: |
| 245 | # git-push origin v${VERSION//\~/_} v${VERSION//\~/_}~0:master |
| 246 | # dcmd rsync -v ../bpd/secnet_${VERSION}_multi.changes chiark:/home/ianmdlvl/public-html/secnet/download/ |
| 247 | # |
| 248 | # 9. Sort out html. On chiark as user secnet: |
| 249 | # cd ~secnet/public-html/release/ |
| 250 | # mkdir $VERSION |
| 251 | # cd $VERSION |
| 252 | # ln -s /home/ianmdlvl/public-html/secnet/download/secnet?$VERSION* . |
| 253 | # ln -sfn $VERSION ../current |
| 254 | # |
| 255 | # 10. write and post a release announcement |
| 256 | # cd ../bpd |
| 257 | # dcmd sha256sum secnet_${VERSION}_multi.changes |
| 258 | # ... |
| 259 | # gpg --clearsign ../release-announcement |
| 260 | # rsync -vP ../release-announcement.asc c:mail/d/ |
| 261 | # |
| 262 | # 11. bump changelog version in master, to new version with ~ |