1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
|
dnl Licensed to the Apache Software Foundation (ASF) under one or more
dnl contributor license agreements. See the NOTICE file distributed with
dnl this work for additional information regarding copyright ownership.
dnl The ASF licenses this file to You under the Apache License, Version 2.0
dnl (the "License"); you may not use this file except in compliance with
dnl the License. You may obtain a copy of the License at
dnl
dnl http://www.apache.org/licenses/LICENSE-2.0
dnl
dnl Unless required by applicable law or agreed to in writing, software
dnl distributed under the License is distributed on an "AS IS" BASIS,
dnl WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
dnl See the License for the specific language governing permissions and
dnl limitations under the License.
dnl # start of module specific part
APACHE_MODPATH_INIT(tls)
dnl # list of module object files
tls_objs="dnl
mod_tls.lo dnl
tls_cache.lo dnl
tls_cert.lo dnl
tls_conf.lo dnl
tls_core.lo dnl
tls_filter.lo dnl
tls_ocsp.lo dnl
tls_proto.lo dnl
tls_util.lo dnl
tls_var.lo dnl
"
dnl
dnl APACHE_CHECK_TLS
dnl
dnl Configure for rustls, giving preference to
dnl "--with-rustls=<path>" if it was specified.
dnl
AC_DEFUN([APACHE_CHECK_RUSTLS],[
AC_CACHE_CHECK([for rustls], [ac_cv_rustls], [
dnl initialise the variables we use
ac_cv_rustls=no
ap_rustls_found=""
ap_rustls_base=""
ap_rustls_libs=""
dnl Determine the rustls base directory, if any
AC_MSG_CHECKING([for user-provided rustls base directory])
AC_ARG_WITH(rustls, APACHE_HELP_STRING(--with-rustls=PATH, rustls installation directory), [
dnl If --with-rustls specifies a directory, we use that directory
if test "x$withval" != "xyes" -a "x$withval" != "x"; then
dnl This ensures $withval is actually a directory and that it is absolute
ap_rustls_base="`cd $withval ; pwd`"
fi
])
if test "x$ap_rustls_base" = "x"; then
AC_MSG_RESULT(none)
else
AC_MSG_RESULT($ap_rustls_base)
fi
dnl Run header and version checks
saved_CPPFLAGS="$CPPFLAGS"
saved_LIBS="$LIBS"
saved_LDFLAGS="$LDFLAGS"
dnl Before doing anything else, load in pkg-config variables
if test -n "$PKGCONFIG"; then
saved_PKG_CONFIG_PATH="$PKG_CONFIG_PATH"
AC_MSG_CHECKING([for pkg-config along $PKG_CONFIG_PATH])
if test "x$ap_rustls_base" != "x" ; then
if test -f "${ap_rustls_base}/lib/pkgconfig/librustls.pc"; then
dnl Ensure that the given path is used by pkg-config too, otherwise
dnl the system librustls.pc might be picked up instead.
PKG_CONFIG_PATH="${ap_rustls_base}/lib/pkgconfig${PKG_CONFIG_PATH+:}${PKG_CONFIG_PATH}"
export PKG_CONFIG_PATH
elif test -f "${ap_rustls_base}/lib64/pkgconfig/librustls.pc"; then
dnl Ensure that the given path is used by pkg-config too, otherwise
dnl the system librustls.pc might be picked up instead.
PKG_CONFIG_PATH="${ap_rustls_base}/lib64/pkgconfig${PKG_CONFIG_PATH+:}${PKG_CONFIG_PATH}"
export PKG_CONFIG_PATH
fi
fi
ap_rustls_libs="`$PKGCONFIG $PKGCONFIG_LIBOPTS --libs-only-l --silence-errors librustls`"
if test $? -eq 0; then
ap_rustls_found="yes"
pkglookup="`$PKGCONFIG --cflags-only-I librustls`"
APR_ADDTO(CPPFLAGS, [$pkglookup])
APR_ADDTO(MOD_CFLAGS, [$pkglookup])
pkglookup="`$PKGCONFIG $PKGCONFIG_LIBOPTS --libs-only-L librustls`"
APR_ADDTO(LDFLAGS, [$pkglookup])
APR_ADDTO(MOD_LDFLAGS, [$pkglookup])
pkglookup="`$PKGCONFIG $PKGCONFIG_LIBOPTS --libs-only-other librustls`"
APR_ADDTO(LDFLAGS, [$pkglookup])
APR_ADDTO(MOD_LDFLAGS, [$pkglookup])
fi
PKG_CONFIG_PATH="$saved_PKG_CONFIG_PATH"
fi
dnl fall back to the user-supplied directory if not found via pkg-config
if test "x$ap_rustls_base" != "x" -a "x$ap_rustls_found" = "x"; then
APR_ADDTO(CPPFLAGS, [-I$ap_rustls_base/include])
APR_ADDTO(MOD_CFLAGS, [-I$ap_rustls_base/include])
APR_ADDTO(LDFLAGS, [-L$ap_rustls_base/lib])
APR_ADDTO(MOD_LDFLAGS, [-L$ap_rustls_base/lib])
if test "x$ap_platform_runtime_link_flag" != "x"; then
APR_ADDTO(LDFLAGS, [$ap_platform_runtime_link_flag$ap_rustls_base/lib])
APR_ADDTO(MOD_LDFLAGS, [$ap_platform_runtime_link_flag$ap_rustls_base/lib])
fi
fi
AC_MSG_CHECKING([for rustls version >= 0.9.2])
AC_TRY_COMPILE([#include <rustls.h>],[
rustls_version();
rustls_acceptor_new();
],
[AC_MSG_RESULT(OK)
ac_cv_rustls=yes],
[AC_MSG_RESULT(FAILED)])
dnl restore
CPPFLAGS="$saved_CPPFLAGS"
LIBS="$saved_LIBS"
LDFLAGS="$saved_LDFLAGS"
])
if test "x$ac_cv_rustls" = "xyes"; then
AC_DEFINE(HAVE_RUSTLS, 1, [Define if rustls is available])
fi
])
dnl # hook module into the Autoconf mechanism (--enable-http2)
APACHE_MODULE(tls, [TLS protocol handling using rustls. Implemented by mod_tls.
This module requires a librustls installation.
See --with-rustls on how to manage non-standard locations. This module
is usually linked shared and requires loading. ], $tls_objs, , most, [
APACHE_CHECK_RUSTLS
if test "$ac_cv_rustls" = "yes" ; then
if test "x$enable_tls" = "xshared"; then
case `uname` in
"Darwin")
MOD_TLS_LINK_LIBS="-lrustls -framework Security -framework Foundation"
;;
*)
MOD_TLS_LINK_LIBS="-lrustls"
;;
esac
# Some rustls versions need an extra -lm when linked
# See https://github.com/rustls/rustls-ffi/issues/133
rustls_version=`rustc --version`
case "$rustls_version" in
*1.55*) need_lm="yes" ;;
*1.56*) need_lm="yes" ;;
*1.57*) need_lm="yes" ;;
esac
if test "$need_lm" = "yes" ; then
MOD_TLS_LINK_LIBS="$MOD_TLS_LINK_LIBS -lm"
fi
# The only symbol which needs to be exported is the module
# structure, so ask libtool to hide everything else:
APR_ADDTO(MOD_TLS_LDADD, [$MOD_TLS_LINK_LIBS -export-symbols-regex tls_module])
fi
else
enable_tls=no
fi
])
dnl # end of module specific part
APACHE_MODPATH_FINISH
|
