@ -43,6 +43,7 @@ cc = meson.get_compiler('c')
not_found_dep = dependency ( '' , required : false ) not_found_dep = dependency ( '' , required : false )
thread_dep = dependency ( 'threads' ) thread_dep = dependency ( 'threads' )
auto_features = get_option ( 'auto_features' )
@ -1171,7 +1172,16 @@ cdata.set('USE_SYSTEMD', systemd.found() ? 1 : false)
# Library: SSL # Library: SSL
############################################################### ###############################################################
if get_option ( 'ssl' ) == 'openssl' ssl = not_found_dep
ssl_library = 'none'
sslopt = get_option ( 'ssl' )
if sslopt == 'auto' and auto_features . disabled ( )
sslopt = 'none'
endif
if sslopt in [ 'auto' , 'openssl' ]
openssl_required = ( sslopt == 'openssl' )
# Try to find openssl via pkg-config et al, if that doesn't work # Try to find openssl via pkg-config et al, if that doesn't work
# (e.g. because it's provided as part of the OS, like on FreeBSD), look for # (e.g. because it's provided as part of the OS, like on FreeBSD), look for
@ -1193,58 +1203,70 @@ if get_option('ssl') == 'openssl'
ssl = declare_dependency ( dependencies : ssl_int , ssl = declare_dependency ( dependencies : ssl_int ,
include_directories : postgres_inc ) include_directories : postgres_inc )
else elif cc . has_header ( 'openssl/ssl.h' , args : test_c_args , dependencies : ssl , required : openssl_required ) and \
cc . has_header ( 'openssl/ssl.h' , args : test_c_args , dependencies : ssl , required : true ) cc . has_header ( 'openssl/err.h' , args : test_c_args , dependencies : ssl , required : openssl_required )
cc . has_header ( 'openssl/err.h' , args : test_c_args , dependencies : ssl , required : true )
ssl_int = [ ssl ] ssl_int = [ ssl ]
endif endif
check_funcs = [ if ssl . found ( )
[ 'CRYPTO_new_ex_data' , { 'required' : true } ] , check_funcs = [
[ 'SSL_new' , { 'required' : true } ] , [ 'CRYPTO_new_ex_data' , { 'required' : true } ] ,
[ 'SSL_new' , { 'required' : true } ] ,
# Function introduced in OpenSSL 1.0.2.
[ 'X509_get_signature_nid' ] , # Function introduced in OpenSSL 1.0.2.
[ 'X509_get_signature_nid' ] ,
# Functions introduced in OpenSSL 1.1.0. We used to check for
# OPENSSL_VERSION_NUMBER, but that didn't work with 1.1.0, because LibreSSL # Functions introduced in OpenSSL 1.1.0. We used to check for
# defines OPENSSL_VERSION_NUMBER to claim version 2.0.0, even though it # OPENSSL_VERSION_NUMBER, but that didn't work with 1.1.0, because LibreSSL
# doesn't have these OpenSSL 1.1.0 functions. So check for individual # defines OPENSSL_VERSION_NUMBER to claim version 2.0.0, even though it
# functions. # doesn't have these OpenSSL 1.1.0 functions. So check for individual
[ 'OPENSSL_init_ssl' ] , # functions.
[ 'BIO_get_data' ] , [ 'OPENSSL_init_ssl' ] ,
[ 'BIO_meth_new' ] , [ 'BIO_get_data' ] ,
[ 'ASN1_STRING_get0_data' ] , [ 'BIO_meth_new' ] ,
[ 'HMAC_CTX_new' ] , [ 'ASN1_STRING_get0_data' ] ,
[ 'HMAC_CTX_free' ] , [ 'HMAC_CTX_new' ] ,
[ 'HMAC_CTX_free' ] ,
# OpenSSL versions before 1.1.0 required setting callback functions, for
# thread-safety. In 1.1.0, it's no longer required, and CRYPTO_lock() # OpenSSL versions before 1.1.0 required setting callback functions, for
# function was removed. # thread-safety. In 1.1.0, it's no longer required, and CRYPTO_lock()
[ 'CRYPTO_lock' ] , # function was removed.
[ 'CRYPTO_lock' ] ,
# Function introduced in OpenSSL 1.1.1
[ 'X509_get_signature_info' ] , # Function introduced in OpenSSL 1.1.1
] [ 'X509_get_signature_info' ] ,
]
are_openssl_funcs_complete = true
foreach c : check_funcs
func = c . get ( 0 )
val = cc . has_function ( func , args : test_c_args , dependencies : ssl_int )
required = c . get ( 1 , { } ) . get ( 'required' , false )
if required and not val
are_openssl_funcs_complete = false
if openssl_required
error ( 'openssl function @0@ is required' . format ( func ) )
endif
break
elif not required
cdata . set ( 'HAVE_' + func . to_upper ( ) , val ? 1 : false )
endif
endforeach
foreach c : check_funcs if are_openssl_funcs_complete
func = c . get ( 0 ) cdata . set ( 'USE_OPENSSL' , 1 ,
val = cc . has_function ( func , args : test_c_args , dependencies : ssl_int ) description : 'Define to 1 to build with OpenSSL support. (-Dssl=openssl)' )
required = c . get ( 1 , { } ) . get ( 'required' , false ) cdata . set ( 'OPENSSL_API_COMPAT' , '0x10001000L' ,
if required and not val description : '''Define to the OpenSSL API version in use. This avoids deprecation warnings from newer OpenSSL versions.''' )
error ( 'openssl function @0@ is required' . format ( func ) ) ssl_library = 'openssl'
elif not required els e
cdata . set ( 'HAVE_' + func . to_upper ( ) , val ? 1 : false ) ssl = not_found_dep
endif endif
endforeach endif
endif
cdata . set ( 'USE_OPENSSL' , 1 , if sslopt == 'auto' and auto_features . enabled ( ) and not ssl . found ( )
description : 'Define to 1 to build with OpenSSL support. (-Dssl=openssl)' ) error ( 'no SSL library found' )
cdata . set ( 'OPENSSL_API_COMPAT' , '0x10001000L' ,
description : '''Define to the OpenSSL API version in use. This avoids deprecation warnings from newer OpenSSL versions.''' )
else
ssl = not_found_dep
endif endif
@ -3266,13 +3288,13 @@ if meson.version().version_compare('>=0.57')
'llvm' : llvm , 'llvm' : llvm ,
'lz4' : lz4 , 'lz4' : lz4 ,
'nls' : libintl , 'nls' : libintl ,
'openssl' : ssl ,
'pam' : pam , 'pam' : pam ,
'plperl' : perl_dep , 'plperl' : perl_dep ,
'plpython' : python3_dep , 'plpython' : python3_dep ,
'pltcl' : tcl_dep , 'pltcl' : tcl_dep ,
'readline' : readline , 'readline' : readline ,
'selinux' : selinux , 'selinux' : selinux ,
'ssl' : ssl ,
'systemd' : systemd , 'systemd' : systemd ,
'uuid' : uuid , 'uuid' : uuid ,
'zlib' : zlib , 'zlib' : zlib ,
Peter Eisentraut
2 years ago