mirror of
https://github.com/sonertari/SSLproxy
synced 2024-11-02 15:40:19 +00:00
349 lines
8.7 KiB
Makefile
349 lines
8.7 KiB
Makefile
### OpenSSL tweaking
|
|
|
|
# Define to use dubious hacks to decrease OpenSSL memory consumption.
|
|
#FEATURES+= -DUSE_FOOTPRINT_HACKS
|
|
|
|
# Define to disable server-mode SSL session caching for SSLv2 clients.
|
|
# This is needed if SSL session resumption fails with a bufferevent error:
|
|
# "illegal padding in SSL routines SSL2_READ_INTERNAL".
|
|
FEATURES+= -DDISABLE_SSLV2_SESSION_CACHE
|
|
|
|
# Define to disable server-mode SSLv2 completely, but still use SSL23 method.
|
|
#FEATURES+= -DDISABLE_SSLV2_SERVER
|
|
|
|
# Define to make SSLsplit set a session id context in server mode.
|
|
#FEATURES+= -DUSE_SSL_SESSION_ID_CONTEXT
|
|
|
|
|
|
### Debugging
|
|
|
|
# These CFLAGS are added when building from git
|
|
DEBUG_CFLAGS?= -g
|
|
#DEBUG_CFLAGS+= -Werror
|
|
|
|
# Define to remove false positives when debugging memory allocation.
|
|
# Note that you probably want to build OpenSSL with -DPURIFY too.
|
|
#FEATURES+= -DPURIFY
|
|
|
|
# Define to add proxy state machine debugging; dump state in debug mode.
|
|
#FEATURES+= -DDEBUG_PROXY
|
|
|
|
# Define to add certificate debugging; dump all certificates in debug mode.
|
|
#FEATURES+= -DDEBUG_CERTIFICATE
|
|
|
|
# Define to add SSL session cache debugging; dump all sessions in debug mode.
|
|
#FEATURES+= -DDEBUG_SESSION_CACHE
|
|
|
|
# Define to add debugging of parsing the SNI from the SSL ClientHello.
|
|
#FEATURES+= -DDEBUG_SNI_PARSER
|
|
|
|
# Define to add thread debugging; dump thread state when choosing a thread.
|
|
#FEATURES+= -DDEBUG_THREAD
|
|
|
|
|
|
### Autodetected features
|
|
|
|
# Autodetect pf
|
|
ifneq ($(wildcard /usr/include/net/pfvar.h),)
|
|
FEATURES+= -DHAVE_PF
|
|
endif
|
|
|
|
# Autodetect ipfw
|
|
ifneq ($(wildcard /sbin/ipfw),)
|
|
FEATURES+= -DHAVE_IPFW
|
|
endif
|
|
|
|
# Autodetect ipfilter
|
|
ifneq ($(wildcard /usr/include/netinet/ip_fil.h),)
|
|
FEATURES+= -DHAVE_IPFILTER
|
|
endif
|
|
|
|
# Autodetect netfilter
|
|
ifneq ($(wildcard /usr/include/linux/netfilter.h),)
|
|
FEATURES+= -DHAVE_NETFILTER
|
|
endif
|
|
|
|
# Autodetect glibc
|
|
ifneq ($(wildcard /usr/include/gnu/libc-version.h),)
|
|
CPPFLAGS+= -D_GNU_SOURCE
|
|
endif
|
|
|
|
|
|
### Variables you might need to override
|
|
|
|
PREFIX?= /usr/local
|
|
|
|
OPENSSL?= openssl
|
|
PKGCONFIG?= pkg-config
|
|
|
|
BASENAME?= basename
|
|
CAT?= cat
|
|
GREP?= grep
|
|
INSTALL?= install
|
|
MKDIR?= mkdir
|
|
SED?= sed
|
|
|
|
|
|
### Variables only used for developer targets
|
|
|
|
KHASH_URL?= https://github.com/attractivechaos/klib/raw/master/khash.h
|
|
|
|
CPPCHECK?= cppcheck
|
|
GIT?= git
|
|
WGET?= wget
|
|
|
|
BZIP2?= bzip2
|
|
COL?= col
|
|
LN?= ln
|
|
MAN?= man
|
|
TAR?= tar
|
|
|
|
|
|
### You should not need to touch anything below this line
|
|
|
|
TARGET:= sslsplit
|
|
PNAME:= SSLsplit
|
|
SRCS:= $(wildcard *.c)
|
|
HDRS:= $(wildcard *.h)
|
|
OBJS:= $(SRCS:.c=.o)
|
|
|
|
TSRCS:= $(wildcard *.t)
|
|
TOBJS:= $(TSRCS:.t=.ot)
|
|
TOBJS+= $(filter-out main.o,$(OBJS))
|
|
|
|
VFILE:= $(wildcard VERSION)
|
|
GITDIR:= $(wildcard .git)
|
|
ifdef VFILE
|
|
VERSION:= $(shell $(CAT) VERSION)
|
|
else
|
|
ifndef GITDIR
|
|
VERSION:= $(shell $(BASENAME) $(PWD)|\
|
|
$(GREP) $(TARGET)-|\
|
|
$(SED) 's/.*$(TARGET)-\(.*\)/\1/g')
|
|
else
|
|
VERSION:= $(shell $(GIT) describe --tags --dirty --always)
|
|
endif
|
|
CFLAGS+= $(DEBUG_CFLAGS)
|
|
endif
|
|
BUILD_DATE:= $(shell date +%Y-%m-%d)
|
|
|
|
CFLAGS+= $(PKG_CFLAGS) -pthread \
|
|
-std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2
|
|
CPPFLAGS+= $(PKG_CPPFLAGS) $(FEATURES) -D"BNAME=\"$(TARGET)\"" \
|
|
-D"PNAME=\"$(PNAME)\"" -D"VERSION=\"$(VERSION)\"" \
|
|
-D"FEATURES=\"$(FEATURES)\"" -D"BUILD_DATE=\"$(BUILD_DATE)\""
|
|
LDFLAGS+= $(PKG_LDFLAGS) -pthread
|
|
LIBS+= $(PKG_LIBS)
|
|
|
|
# Autodetect dependencies known to pkg-config
|
|
PKGS:=
|
|
ifndef OPENSSL_BASE
|
|
PKGS+= $(shell $(PKGCONFIG) --exists openssl && echo openssl)
|
|
endif
|
|
ifndef LIBEVENT_BASE
|
|
PKGS+= $(shell $(PKGCONFIG) --exists libevent && echo libevent)
|
|
PKGS+= $(shell $(PKGCONFIG) --exists libevent_openssl \
|
|
&& echo libevent_openssl)
|
|
PKGS+= $(shell $(PKGCONFIG) --exists libevent_pthreads \
|
|
&& echo libevent_pthreads)
|
|
endif
|
|
TPKGS:=
|
|
ifndef CHECK_BASE
|
|
TPKGS+= $(shell $(PKGCONFIG) --exists check && echo check)
|
|
endif
|
|
|
|
# Autodetect dependencies not known to pkg-config
|
|
ifeq (,$(filter openssl,$(PKGS)))
|
|
OPENSSL_PAT:= include/openssl/ssl.h
|
|
ifdef OPENSSL_BASE
|
|
OPENSSL_FIND:= $(wildcard $(OPENSSL_BASE)/$(OPENSSL_PAT))
|
|
else
|
|
OPENSSL_FIND:= $(wildcard \
|
|
/opt/local/$(OPENSSL_PAT) \
|
|
/usr/local/$(OPENSSL_PAT) \
|
|
/usr/$(OPENSSL_PAT))
|
|
endif
|
|
OPENSSL_FOUND:= $(OPENSSL_FIND:/$(OPENSSL_PAT)=)
|
|
ifndef OPENSSL_FOUND
|
|
$(error OpenSSL not found; please point OPENSSL_BASE to base path)
|
|
endif
|
|
endif
|
|
ifeq (,$(filter libevent,$(PKGS)))
|
|
LIBEVENT_PAT:= include/event2/event.h
|
|
ifdef LIBEVENT_BASE
|
|
LIBEVENT_FIND:= $(wildcard $(LIBEVENT_BASE)/$(LIBEVENT_PAT))
|
|
else
|
|
LIBEVENT_FIND:= $(wildcard \
|
|
/opt/local/$(LIBEVENT_PAT) \
|
|
/usr/local/$(LIBEVENT_PAT) \
|
|
/usr/$(LIBEVENT_PAT))
|
|
endif
|
|
LIBEVENT_FOUND:=$(LIBEVENT_FIND:/$(LIBEVENT_PAT)=)
|
|
ifndef LIBEVENT_FOUND
|
|
$(error libevent 2.x not found; please point LIBEVENT_BASE to base path)
|
|
endif
|
|
endif
|
|
ifeq (,$(filter check,$(TPKGS)))
|
|
CHECK_PAT:= include/check.h
|
|
ifdef CHECK_BASE
|
|
CHECK_FIND:= $(wildcard $(CHECK_BASE)/$(CHECK_PAT))
|
|
else
|
|
CHECK_FIND:= $(wildcard \
|
|
/opt/local/$(CHECK_PAT) \
|
|
/usr/local/$(CHECK_PAT) \
|
|
/usr/$(CHECK_PAT))
|
|
endif
|
|
CHECK_FOUND:= $(CHECK_FIND:/$(CHECK_PAT)=)
|
|
ifndef CHECK_FOUND
|
|
$(warning check not found; please point CHECK_BASE to base path [optional])
|
|
endif
|
|
endif
|
|
|
|
ifdef OPENSSL_FOUND
|
|
PKG_CPPFLAGS+= -I$(OPENSSL_FOUND)/include
|
|
PKG_LDFLAGS+= -L$(OPENSSL_FOUND)/lib
|
|
PKG_LIBS+= -lssl -lcrypto -lz
|
|
endif
|
|
ifdef LIBEVENT_FOUND
|
|
PKG_CPPFLAGS+= -I$(LIBEVENT_FOUND)/include
|
|
PKG_LDFLAGS+= -L$(LIBEVENT_FOUND)/lib
|
|
PKG_LIBS+= -levent
|
|
endif
|
|
ifeq (,$(filter libevent_openssl,$(PKGS)))
|
|
PKG_LIBS+= -levent_openssl
|
|
endif
|
|
ifeq (,$(filter libevent_pthreads,$(PKGS)))
|
|
PKG_LIBS+= -levent_pthreads
|
|
endif
|
|
ifdef CHECK_FOUND
|
|
TPKG_CPPFLAGS+= -I$(CHECK_FOUND)/include
|
|
TPKG_LDFLAGS+= -L$(CHECK_FOUND)/lib
|
|
TPKG_LIBS+= -lcheck
|
|
endif
|
|
|
|
ifneq (,$(strip $(PKGS)))
|
|
PKG_CFLAGS+= $(shell $(PKGCONFIG) --cflags-only-other $(PKGS))
|
|
PKG_CPPFLAGS+= $(shell $(PKGCONFIG) --cflags-only-I $(PKGS))
|
|
PKG_LDFLAGS+= $(shell $(PKGCONFIG) --libs-only-L --libs-only-other $(PKGS))
|
|
PKG_LIBS+= $(shell $(PKGCONFIG) --libs-only-l $(PKGS))
|
|
endif
|
|
ifneq (,$(strip $(TPKGS)))
|
|
TPKG_CFLAGS+= $(shell $(PKGCONFIG) --cflags-only-other $(TPKGS))
|
|
TPKG_CPPFLAGS+= $(shell $(PKGCONFIG) --cflags-only-I $(TPKGS))
|
|
TPKG_LDFLAGS+= $(shell $(PKGCONFIG) --libs-only-L --libs-only-other $(TPKGS))
|
|
TPKG_LIBS+= $(shell $(PKGCONFIG) --libs-only-l $(TPKGS))
|
|
endif
|
|
|
|
export VERSION
|
|
export OPENSSL
|
|
export MKDIR
|
|
|
|
all: version config $(TARGET)
|
|
|
|
version:
|
|
@echo "$(PNAME) $(VERSION)"
|
|
|
|
config:
|
|
@echo "via pkg-config: $(strip $(PKGS) $(TPKGS))"
|
|
ifdef OPENSSL_FOUND
|
|
@echo "OPENSSL_BASE: $(strip $(OPENSSL_FOUND))"
|
|
endif
|
|
ifdef LIBEVENT_FOUND
|
|
@echo "LIBEVENT_BASE: $(strip $(LIBEVENT_FOUND))"
|
|
endif
|
|
ifdef CHECK_FOUND
|
|
@echo "CHECK_BASE: $(strip $(CHECK_FOUND))"
|
|
endif
|
|
@echo "Build options: $(FEATURES)"
|
|
|
|
$(TARGET): $(OBJS)
|
|
$(CC) $(LDFLAGS) -o $@ $^ $(LIBS)
|
|
|
|
%.o: %.c $(HDRS) GNUmakefile
|
|
$(CC) -c $(CPPFLAGS) $(CFLAGS) -o $@ $<
|
|
|
|
version.o: version.c version.h GNUmakefile $(VFILE) FORCE
|
|
|
|
extra/pki/rsa.pem:
|
|
$(MAKE) -C extra/pki
|
|
|
|
test: extra/pki/rsa.pem $(TARGET).test
|
|
$(RM) extra/pki/session.pem
|
|
$(MAKE) -C extra/pki session
|
|
./$(TARGET).test
|
|
|
|
$(TARGET).test: $(TOBJS)
|
|
$(CC) $(LDFLAGS) $(TPKG_LDFLAGS) -o $@ $^ $(LIBS) $(TPKG_LIBS)
|
|
|
|
%.ot: %.t $(HDRS) GNUmakefile
|
|
$(CC) -c $(CPPFLAGS) $(TPKG_CPPFLAGS) $(CFLAGS) $(TPKG_CFLAGS) -o $@ \
|
|
-x c $<
|
|
|
|
clean:
|
|
$(RM) -f $(TARGET) *.o $(TARGET).test *.ot *.core *~
|
|
$(RM) -rf *.dSYM
|
|
|
|
install: $(TARGET)
|
|
test -d $(PREFIX)/bin || $(MKDIR) -p $(PREFIX)/bin
|
|
test -d $(PREFIX)/share/man/man1 || \
|
|
$(MKDIR) -p $(PREFIX)/share/man/man1
|
|
$(INSTALL) -o 0 -g 0 -m 0755 $(TARGET) $(PREFIX)/bin/
|
|
$(INSTALL) -o 0 -g 0 -m 0644 $(TARGET).1 $(PREFIX)/share/man/man1/
|
|
|
|
deinstall:
|
|
$(RM) -f $(PREFIX)/bin/$(TARGET) $(PREFIX)/share/man/man1/$(TARGET).1
|
|
|
|
ifdef GITDIR
|
|
lint:
|
|
$(CPPCHECK) --force --enable=all --error-exitcode=1 .
|
|
|
|
mantest:
|
|
$(RM) -f man1
|
|
$(LN) -sf . man1
|
|
$(MAN) -M . 1 $(TARGET)
|
|
$(RM) man1
|
|
|
|
$(TARGET)-$(VERSION).1.txt: $(TARGET).1
|
|
$(RM) -f man1
|
|
$(LN) -sf . man1
|
|
$(MAN) -M . 1 $(TARGET) | $(COL) -b >$@
|
|
$(RM) man1
|
|
|
|
man: $(TARGET)-$(VERSION).1.txt
|
|
|
|
manclean:
|
|
$(RM) -f $(TARGET)-*.1.txt
|
|
|
|
fetchdeps:
|
|
$(WGET) --no-check-certificate -O- $(KHASH_URL) >khash.h
|
|
|
|
dist: $(TARGET)-$(VERSION).tar.bz2
|
|
|
|
$(TARGET)-$(VERSION).tar.bz2:
|
|
$(MKDIR) -p $(TARGET)-$(VERSION)
|
|
echo $(VERSION) >$(TARGET)-$(VERSION)/VERSION
|
|
$(GIT) archive --prefix=$(TARGET)-$(VERSION)/ HEAD \
|
|
>$(TARGET)-$(VERSION).tar
|
|
$(TAR) -f $(TARGET)-$(VERSION).tar -r $(TARGET)-$(VERSION)/VERSION
|
|
$(BZIP2) <$(TARGET)-$(VERSION).tar >$(TARGET)-$(VERSION).tar.bz2
|
|
$(RM) $(TARGET)-$(VERSION).tar
|
|
$(RM) -r $(TARGET)-$(VERSION)
|
|
|
|
disttest: $(TARGET)-$(VERSION).tar.bz2
|
|
$(BZIP2) -d < $(TARGET)-$(VERSION).tar.bz2 | $(TAR) -x -f -
|
|
cd $(TARGET)-$(VERSION) && $(MAKE) && $(MAKE) test && ./$(TARGET) -V
|
|
$(RM) -r $(TARGET)-$(VERSION)
|
|
|
|
distclean:
|
|
$(RM) -f $(TARGET)-*.tar.bz2
|
|
|
|
realclean: distclean manclean clean
|
|
$(MAKE) -C extra/pki clean
|
|
endif
|
|
|
|
FORCE:
|
|
|
|
.PHONY: all config clean test lint install deinstall \
|
|
mantest man manclean fetchdeps dist disttest distclean realclean
|
|
|