3 # This file is part of secnet.
4 # See README for full list of copyright holders.
6 # secnet is free software; you can redistribute it and/or modify it
7 # under the terms of the GNU General Public License as published by
8 # the Free Software Foundation; either version 3 of the License, or
9 # (at your option) any later version.
11 # secnet is distributed in the hope that it will be useful, but
12 # WITHOUT ANY WARRANTY; without even the implied warranty of
13 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14 # General Public License for more details.
16 # You should have received a copy of the GNU General Public License
17 # version 3 along with secnet; if not, see
18 # https://www.gnu.org/licenses/gpl.html.
20 .PHONY: all clean realclean distclean dist install
30 INSTALL_PROGRAM:=@INSTALL_PROGRAM@
31 INSTALL_SCRIPT:=@INSTALL_SCRIPT@
32 INSTALL_DATA:=@INSTALL_DATA@
34 prefix:=$(DESTDIR)@prefix@
35 exec_prefix:=@exec_prefix@
37 sysconfdir:=$(DESTDIR)@sysconfdir@
38 datarootdir:=@datarootdir@
39 transform:=@program_transform_name@
42 ALL_CFLAGS:=@DEFS@ -I$(srcdir) -I. $(CFLAGS) $(EXTRA_CFLAGS)
43 CPPFLAGS:=@CPPFLAGS@ -DDATAROOTDIR='"$(datarootdir)"' $(EXTRA_CPPFLAGS)
44 LDFLAGS:=@LDFLAGS@ $(EXTRA_LDFLAGS)
45 LDLIBS:=@LIBS@ $(EXTRA_LDLIBS)
49 OBJECTS:=secnet.o util.o conffile.yy.o conffile.tab.o conffile.o modules.o \
50 resolver.o random.o udp.o site.o transform-cbcmac.o transform-eax.o \
51 comm-common.o polypath.o \
52 netlink.o rsa.o dh.o serpent.o serpentbe.o \
53 md5.o sha512.o tun.o slip.o sha1.o ipaddr.o log.o \
56 # version.o is handled specially below and in the link rule for secnet.
58 PYMODULES := ipaddrset.py argparseactionnoyes.py
60 TEST_OBJECTS:=eax-aes-test.o eax-serpent-test.o eax-serpentbe-test.o \
63 ifeq (version.o,$(MAKECMDGOALS))
68 STALE_PYTHON_FILES= $(foreach e, py pyc, \
69 $(foreach p, /usr /usr/local, \
70 $(foreach l, ipaddr, \
71 $(DESTDIR)$p/share/secnet/$l.$e \
77 flex --header=$*.yy.h -o$@ $<
82 %.o: %.c conffile.yy.h
83 $(CC) $(CPPFLAGS) $(ALL_CFLAGS) -c $< -o $@
87 # Automatic remaking of configuration files, from autoconf documentation
88 ${srcdir}/configure: configure.in
89 cd ${srcdir} && autoconf
91 # autoheader might not change config.h.in, so touch a stamp file.
92 ${srcdir}/config.h.in: config.stamp.in
93 ${srcdir}/config.stamp.in: configure.in
94 cd ${srcdir} && autoheader
95 echo timestamp > ${srcdir}/config.stamp.in
97 config.h: config.stamp
98 config.stamp: config.h.in config.status
101 Makefile: Makefile.in config.status
104 config.status: configure
105 ./config.status --recheck
106 # End of config file remaking rules
108 # C and header file dependency rules
109 SOURCES:=$(OBJECTS:.o=.c) $(TEST_OBJECTS:.o=.c)
110 DEPENDS:=$(OBJECTS:.o=.d) $(TEST_OBJECTS:.o=.d)
114 # Manual dependencies section
115 conffile.yy.c: conffile.fl conffile.tab.c
116 conffile.yy.h: conffile.yy.c
117 conffile.tab.c: conffile.y
118 # End of manual dependencies section
120 conffile.yy.o: ALL_CFLAGS += -Wno-sign-compare
123 $(MAKE) version.o # *.o $(filter-out %.o, $^)
124 $(CC) $(LDFLAGS) $(ALL_CFLAGS) -o $@ $(OBJECTS) version.o $(LDLIBS)
125 # We (always) regenerate the version, but only if we regenerate the
126 # binary. (This is necessary as the version string is can depend on
127 # any of the source files, eg to see whether "+" is needed.)
129 ifneq (,$(wildcard .git/HEAD))
130 # If we have (eg) committed, relink and thus regenerate the version
131 # with the new info from git describe.
132 secnet: Makefile .git/HEAD $(shell sed -n 's#^ref: #.git/#p' .git/HEAD)
133 secnet: $(wildcard .git/packed-refs)
138 FAST_CHECKS= eax-aes-test.confirm eax-serpent-test.confirm \
139 eax-serpentbe-test.confirm check-ipaddrset \
140 $(addprefix check-,$(TESTDIRS))
142 CHECKS += $(FAST_CHECKS)
143 CHECKS += msgcode-test.confirm
149 rm -rf $(addsuffix /d-*, $(TESTDIRS))
153 echo "#include \"secnet.h\"" >$@.new
154 @set -ex; if test -e .git && type -p git >/dev/null; then \
155 v=$$(git describe --match 'v*'); v=$${v#v}; \
156 if ! git diff --quiet HEAD; then v="$$v+"; fi; \
160 echo "char version[]=\"secnet $$v\";" >>$@.new
163 eax-%-test: eax-%-test.o eax-test.o %.o
164 $(CC) $(LDFLAGS) $(ALL_CFLAGS) -o $@ $^
166 eax-%-test.confirm: eax-%-test eax-%-test.vectors
167 ./$< <$(srcdir)/eax-$*-test.vectors >$@.new
170 msgcode-test: msgcode-test.o
171 $(CC) $(LDFLAGS) $(ALL_CFLAGS) -o $@ $^
173 msgcode-test.confirm: msgcode-test
177 check-ipaddrset: ipaddrset-test.py ipaddrset.py ipaddrset-test.expected
178 $(srcdir)/ipaddrset-test.py >ipaddrset-test.new
179 diff -u $(srcdir)/ipaddrset-test.expected ipaddrset-test.new
181 check-stest: secnet test-example/sites.conf
182 $(MAKE) -C stest check
184 check-mtest: make-secnet-sites $(PYMODULES)
185 $(MAKE) -C mtest check
187 test-example/sites.conf:
188 $(MAKE) -C test-example
190 .PRECIOUS: eax-%-test
193 $(INSTALL) -d $(prefix)/share/secnet $(sbindir)
194 $(INSTALL) -d $(mandir)/man8
195 $(INSTALL) -d $(datarootdir)/secnet
198 set -e; ok=true; for f in $(STALE_PYTHON_FILES); do \
199 if test -e $$f; then \
200 echo >&2 "ERROR: $$f still exists "\
201 "- try \`make install-force'"; \
206 $(INSTALL_PROGRAM) secnet $(sbindir)/`echo secnet|sed '$(transform)'`
207 $(INSTALL_PROGRAM) ${srcdir}/make-secnet-sites $(sbindir)/`echo make-secnet-sites|sed '$(transform)'`
208 set -e; for m in $(PYMODULES); do \
209 $(INSTALL_DATA) ${srcdir}/$$m $(prefix)/share/secnet/$$m; \
211 $(INSTALL_SCRIPT) ${srcdir}/polypath-interface-monitor-linux \
212 $(datarootdir)/secnet/.
213 $(INSTALL_DATA) ${srcdir}/secnet.8 $(mandir)/man8/secnet.8
216 rm -f $(STALE_PYTHON_FILES)
219 clean: $(addprefix clean-,$(TESTDIRS))
220 $(RM) -f *.o *.yy.[ch] *.tab.[ch] $(TARGETS) core version.c
221 $(RM) -f *.d *.pyc *~ eax-*-test.confirm eax-*-test
222 $(RM) -rf __pycache__
223 $(RM) -f msgcode-test.confirm msgcode-test
225 $(addprefix clean-,$(TESTDIRS)): clean-%:
229 $(RM) -f *~ Makefile config.h *.d \
230 config.log config.status config.cache \
231 config.stamp Makefile.bak
237 # 0. Use this checklist from Makefile.in
239 # 1. Check that the tree has what you want
241 # 2. Update changelog:
242 # gbp dch --since=<PREVIOUS VERSION>
243 # and then edit debian/changelog.
245 # 3. Update VERSION (in this file, above) and
246 # finalise debian/changelog (removing ~ from version) and commit.
248 # 4. Build source and binaries:
249 # dgit -wgf sbuild -A -c stretch -j8
251 # 5. dpkg -i on zealot just to check
252 # dpkg -i ~ian/things/Fvpn/bpd/secnet_${VERSION}_amd64.deb
254 # 6. run it on chiark
255 # check we can still ping davenant and chiark
257 # 7. Make git tag and source tarball signature:
258 # git-tag -u general -m "secnet $VERSION" -s v${VERSION//\~/_}
259 # gpg -u general --detach-sign ../bpd/secnet_$VERSION.tar.gz
261 # 8. Publish the branch and distriubtion files:
262 # git-push origin v${VERSION//\~/_} v${VERSION//\~/_}~0:master
263 # dcmd rsync -v ../bpd/secnet_${VERSION}_multi.changes chiark:/home/ianmdlvl/public-html/secnet/download/
265 # 9. Sort out html. On chiark as user secnet:
266 # cd ~secnet/public-html/release/
269 # ln -s /home/ianmdlvl/public-html/secnet/download/secnet?$VERSION* .
270 # ln -sfn $VERSION ../current
272 # 10. write and post a release announcement
274 # dcmd sha256sum secnet_${VERSION}_multi.changes
276 # gpg --clearsign ../release-announcement
277 # rsync -vP ../release-announcement.asc c:mail/d/
279 # 11. bump changelog version in master, to new version with ~