1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120112111221123112411251126112711281129113011311132113311341135113611371138113911401141114211431144114511461147114811491150115111521153115411551156115711581159116011611162116311641165116611671168116911701171117211731174117511761177117811791180118111821183118411851186118711881189119011911192119311941195119611971198119912001201120212031204120512061207120812091210121112121213121412151216121712181219122012211222122312241225122612271228122912301231123212331234123512361237123812391240124112421243124412451246124712481249125012511252125312541255125612571258125912601261126212631264126512661267126812691270127112721273127412751276127712781279128012811282128312841285128612871288128912901291129212931294129512961297129812991300130113021303130413051306130713081309131013111312131313141315131613171318131913201321132213231324132513261327132813291330133113321333133413351336133713381339134013411342134313441345134613471348134913501351135213531354135513561357135813591360136113621363136413651366136713681369137013711372137313741375137613771378137913801381138213831384138513861387138813891390139113921393139413951396139713981399140014011402140314041405140614071408140914101411141214131414141514161417141814191420142114221423142414251426142714281429143014311432143314341435143614371438143914401441144214431444144514461447144814491450145114521453145414551456145714581459146014611462146314641465146614671468146914701471147214731474147514761477147814791480148114821483148414851486148714881489149014911492149314941495149614971498149915001501150215031504150515061507150815091510151115121513151415151516151715181519152015211522152315241525152615271528152915301531153215331534153515361537153815391540154115421543154415451546154715481549155015511552155315541555155615571558155915601561156215631564156515661567156815691570157115721573157415751576157715781579158015811582158315841585158615871588158915901591159215931594159515961597159815991600160116021603160416051606160716081609161016111612161316141615161616171618161916201621162216231624162516261627162816291630163116321633163416351636163716381639164016411642164316441645164616471648164916501651165216531654165516561657165816591660166116621663166416651666166716681669167016711672167316741675167616771678167916801681168216831684168516861687168816891690169116921693169416951696169716981699170017011702170317041705170617071708170917101711171217131714171517161717171817191720172117221723172417251726172717281729173017311732173317341735173617371738173917401741174217431744174517461747174817491750175117521753175417551756175717581759176017611762176317641765176617671768176917701771177217731774177517761777177817791780178117821783178417851786178717881789179017911792179317941795179617971798179918001801180218031804180518061807180818091810181118121813181418151816181718181819182018211822182318241825182618271828182918301831183218331834183518361837183818391840184118421843184418451846184718481849185018511852185318541855185618571858185918601861186218631864186518661867186818691870187118721873187418751876187718781879188018811882188318841885188618871888188918901891189218931894189518961897189818991900190119021903190419051906190719081909191019111912191319141915191619171918191919201921192219231924192519261927192819291930193119321933193419351936193719381939194019411942194319441945194619471948194919501951195219531954195519561957195819591960196119621963196419651966196719681969197019711972197319741975197619771978197919801981198219831984198519861987198819891990199119921993199419951996199719981999200020012002200320042005200620072008200920102011201220132014201520162017201820192020202120222023202420252026202720282029203020312032203320342035203620372038203920402041204220432044204520462047204820492050205120522053205420552056205720582059206020612062206320642065206620672068206920702071207220732074207520762077207820792080208120822083208420852086208720882089209020912092209320942095209620972098209921002101210221032104210521062107210821092110211121122113211421152116211721182119212021212122212321242125212621272128212921302131213221332134213521362137213821392140214121422143214421452146214721482149215021512152215321542155215621572158215921602161216221632164216521662167216821692170217121722173217421752176217721782179218021812182218321842185218621872188218921902191219221932194219521962197219821992200220122022203220422052206220722082209221022112212221322142215221622172218221922202221222222232224222522262227222822292230223122322233223422352236223722382239224022412242224322442245224622472248224922502251225222532254225522562257225822592260226122622263226422652266226722682269227022712272227322742275227622772278227922802281228222832284228522862287228822892290229122922293229422952296229722982299230023012302230323042305230623072308230923102311231223132314231523162317231823192320232123222323232423252326232723282329233023312332233323342335233623372338233923402341234223432344234523462347234823492350235123522353235423552356235723582359236023612362236323642365236623672368236923702371237223732374237523762377237823792380238123822383238423852386238723882389239023912392239323942395239623972398239924002401240224032404240524062407240824092410241124122413241424152416241724182419242024212422242324242425242624272428242924302431243224332434243524362437243824392440244124422443244424452446244724482449245024512452245324542455245624572458245924602461246224632464246524662467246824692470247124722473247424752476247724782479248024812482248324842485248624872488248924902491249224932494249524962497249824992500250125022503250425052506250725082509251025112512251325142515251625172518251925202521252225232524252525262527252825292530253125322533253425352536253725382539254025412542254325442545254625472548254925502551255225532554255525562557255825592560256125622563256425652566256725682569257025712572257325742575257625772578257925802581258225832584258525862587258825892590259125922593259425952596259725982599260026012602260326042605260626072608260926102611261226132614261526162617261826192620262126222623262426252626262726282629263026312632263326342635263626372638263926402641264226432644264526462647264826492650265126522653265426552656265726582659266026612662266326642665266626672668266926702671267226732674267526762677267826792680268126822683268426852686268726882689269026912692269326942695269626972698269927002701270227032704270527062707270827092710271127122713271427152716271727182719272027212722272327242725272627272728272927302731273227332734273527362737273827392740274127422743274427452746274727482749275027512752275327542755275627572758275927602761276227632764276527662767276827692770277127722773277427752776277727782779278027812782278327842785278627872788 |
- cmake_minimum_required(VERSION 3.16)
- if(${CMAKE_VERSION} VERSION_LESS "3.22")
- message(STATUS "This project recommends using CMake version 3.22 or higher. You are using ${CMAKE_VERSION}.")
- else()
- cmake_policy(SET CMP0128 NEW)
- endif()
- if("${CMAKE_SOURCE_DIR}" STREQUAL "${CMAKE_BINARY_DIR}")
- message(FATAL_ERROR "In-source builds are not allowed.\
- Run cmake from a separate directory from where CMakeLists.txt lives.\
- NOTE: cmake will now create CMakeCache.txt and CMakeFiles/*.\
- You must delete them, or cmake will refuse to work.")
- endif()
- project(wolfssl VERSION 5.7.4 LANGUAGES C ASM)
- if ("${WOLFSSL_ROOT}" STREQUAL "")
- if (EXISTS "${CMAKE_SOURCE_DIR}/wolfcrypt/src/")
- get_filename_component(WOLFSSL_ROOT "${CMAKE_SOURCE_DIR}" ABSOLUTE)
- message(STATUS "Found WOLFSSL_ROOT = ${WOLFSSL_ROOT}")
- endif()
- else()
- message(STATUS "Using predefined WOLFSSL_ROOT = ${WOLFSSL_ROOT}")
- endif()
- set(WOLFSSL_LIBRARY_VERSION_FIRST 42)
- set(WOLFSSL_LIBRARY_VERSION_SECOND 3)
- set(WOLFSSL_LIBRARY_VERSION_THIRD 0)
- set(LIBTOOL_FULL_VERSION ${WOLFSSL_LIBRARY_VERSION_FIRST}.${WOLFSSL_LIBRARY_VERSION_SECOND}.${WOLFSSL_LIBRARY_VERSION_THIRD})
- set(WOLFSSL_DEFINITIONS)
- set(WOLFSSL_LINK_LIBS)
- set(WOLFSSL_INCLUDE_DIRS)
- set(CMAKE_MODULE_PATH ${CMAKE_MODULE_PATH} "${CMAKE_CURRENT_SOURCE_DIR}/cmake/modules/")
- include(${CMAKE_CURRENT_SOURCE_DIR}/cmake/functions.cmake)
- if(CMAKE_C_COMPILER_ID STREQUAL "AppleClang")
- set(CMAKE_C_ARCHIVE_CREATE "<CMAKE_AR> Scr <TARGET> <LINK_FLAGS> <OBJECTS>")
- set(CMAKE_CXX_ARCHIVE_CREATE "<CMAKE_AR> Scr <TARGET> <LINK_FLAGS> <OBJECTS>")
- set(CMAKE_C_ARCHIVE_FINISH "<CMAKE_RANLIB> -no_warning_for_no_symbols -c <TARGET>")
- set(CMAKE_CXX_ARCHIVE_FINISH "<CMAKE_RANLIB> -no_warning_for_no_symbols -c <TARGET>")
- endif()
- include(CheckIncludeFile)
- check_include_file("arpa/inet.h" HAVE_ARPA_INET_H)
- check_include_file("fcntl.h" HAVE_FCNTL_H)
- check_include_file("limits.h" HAVE_LIMITS_H)
- check_include_file("netdb.h" HAVE_NETDB_H)
- check_include_file("netinet/in.h" HAVE_NETINET_IN_H)
- check_include_file("stddef.h" HAVE_STDDEF_H)
- check_include_file("time.h" HAVE_TIME_H)
- check_include_file("sys/ioctl.h" HAVE_SYS_IOCTL_H)
- check_include_file("sys/socket.h" HAVE_SYS_SOCKET_H)
- check_include_file("sys/time.h" HAVE_SYS_TIME_H)
- check_include_file("errno.h" HAVE_ERRNO_H)
- check_include_file("dlfcn.h" HAVE_DLFCN_H)
- check_include_file("inttypes.h" HAVE_INTTYPES_H)
- check_include_file("memory.h" HAVE_MEMORY_H)
- check_include_file("stdint.h" HAVE_STDINT_H)
- check_include_file("stdlib.h" HAVE_STDLIB_H)
- check_include_file("string.h" HAVE_STRING_H)
- check_include_file("strings.h" HAVE_STRINGS_H)
- check_include_file("sys/stat.h" HAVE_SYS_STAT_H)
- check_include_file("sys/types.h" HAVE_SYS_TYPES_H)
- check_include_file("unistd.h" HAVE_UNISTD_H)
- include(CheckFunctionExists)
- check_function_exists("gethostbyname" HAVE_GETHOSTBYNAME)
- check_function_exists("getaddrinfo" HAVE_GETADDRINFO)
- check_function_exists("gettimeofday" HAVE_GETTIMEOFDAY)
- check_function_exists("gmtime_r" HAVE_GMTIME_R)
- check_function_exists("inet_ntoa" HAVE_INET_NTOA)
- check_function_exists("memset" HAVE_MEMSET)
- check_function_exists("socket" HAVE_SOCKET)
- check_function_exists("strftime" HAVE_STRFTIME)
- check_function_exists("__atomic_fetch_add" HAVE_C___ATOMIC)
- include(CheckTypeSize)
- check_type_size("__uint128_t" __UINT128_T)
- check_type_size("long long" SIZEOF_LONG_LONG)
- check_type_size("long" SIZEOF_LONG)
- check_type_size("time_t" SIZEOF_TIME_T)
- check_type_size("uintptr_t" HAVE_UINTPTR_T)
- if(HAVE___UINT128_T)
- set(HAVE___UINT128_T "1" CACHE INTERNAL "Result of TRY_COMPILE" FORCE)
- list(APPEND WOLFSSL_DEFINITIONS "-DHAVE___UINT128_T")
- endif()
- if(CMAKE_VERSION VERSION_LESS "3.20")
- include(TestBigEndian)
- test_big_endian(IS_BIG_ENDIAN)
- set(CMAKE_C_BYTE_ORDER "LITTLE_ENDIAN")
- if(IS_BIG_ENDIAN)
- set(CMAKE_C_BYTE_ORDER "BIG_ENDIAN")
- endif()
- endif()
- include(CheckCSourceCompiles)
- set(TLS_KEYWORDS "__thread" "__declspec(thread)")
- foreach(TLS_KEYWORD IN LISTS TLS_KEYWORDS)
- set(TLS_CODE "#include <stdlib.h>
- static void foo(void) {
- static ${TLS_KEYWORD} int bar\;
- exit(1)\;
- }
- int main() {
- return 0\;
- }"
- )
- check_c_source_compiles(${TLS_CODE} THREAD_LS_ON)
- if(THREAD_LS_ON)
- list(APPEND WOLFSSL_DEFINITIONS "-DHAVE_THREAD_LS")
- break()
- else()
- unset(THREAD_LS_ON CACHE)
- endif()
- endforeach()
- find_package(Threads)
- if(DEFINED WARNING_C_FLAGS)
- set(CMAKE_C_FLAGS "${WARNING_C_FLAGS} ${CMAKE_C_FLAGS}")
- elseif(WIN32)
- set(CMAKE_C_FLAGS "-Wall ${CMAKE_C_FLAGS}")
- else()
- set(CMAKE_C_FLAGS "-Wall -Wextra -Wno-unused -Werror ${CMAKE_C_FLAGS}")
- endif()
- add_option("WOLFSSL_REPRODUCIBLE_BUILD"
- "Enable maximally reproducible build (default: disabled)"
- "no" "yes;no")
- if(WOLFSSL_REPRODUCIBLE_BUILD)
- list(APPEND WOLFSSL_DEFINITIONS "-DHAVE_REPRODUCIBLE_BUILD")
- set(CMAKE_C_ARCHIVE_CREATE "<CMAKE_AR> Dqc <TARGET> <LINK_FLAGS> <OBJECTS>")
- set(CMAKE_C_ARCHIVE_APPEND "<CMAKE_AR> Dq <TARGET> <LINK_FLAGS> <OBJECTS>")
- set(CMAKE_C_ARCHIVE_FINISH "<CMAKE_RANLIB> -D <TARGET>")
- endif()
- add_option("WOLFSSL_INSTALL" "Create install target for WolfSSL project" "yes" "yes;no")
- add_option("WOLFSSL_32BIT"
- "Enables 32-bit support (default: disabled)"
- "no" "yes;no")
- add_option("WOLFSSL_16BIT"
- "Enables 16-bit support (default: disabled)"
- "no" "yes;no")
- if(WOLFSSL_16BIT)
- list(APPEND WOLFSSL_DEFINITIONS "-DWC_16BIT_CPU")
- endif()
- add_option("WOLFSSL_ASM"
- "Enables option for assembly (default: enabled)"
- "yes" "yes;no")
- if(NOT WOLFSSL_ASM)
- list(APPEND WOLFSSL_DEFINITIONS
- "-DTFM_NO_ASM"
- "-DWOLFSSL_NO_ASM")
- endif()
- add_option("WOLFSSL_DEBUG"
- "Enables option for debug (default: disabled)"
- "no" "yes;no")
- if(WOLFSSL_DEBUG)
- set(CMAKE_C_FLAGS "-g ${CMAKE_C_FLAGS}")
- list(APPEND WOLFSSL_DEFINITIONS
- "-DDEBUG_WOLFSSL"
- "-DDEBUG")
- endif()
- add_option("WOLFSSL_SINGLE_THREADED"
- "Enable wolfSSL single threaded (default: disabled)"
- "no" "yes;no")
- if(NOT WOLFSSL_SINGLE_THREADED)
- if(CMAKE_USE_PTHREADS_INIT)
- list(APPEND WOLFSSL_LINK_LIBS Threads::Threads)
- set(HAVE_PTHREAD 1)
- list(APPEND WOLFSSL_DEFINITIONS
- "-DHAVE_PTHREAD"
- "-D_POSIX_THREADS")
- endif()
- else()
- list(APPEND WOLFSSL_DEFINITIONS "-DSINGLE_THREADED")
- endif()
- add_option("WOLFSSL_SRTP"
- "Enables wolfSSL DTLS-SRTP (default: disabled)"
- "no" "yes;no")
- if(WOLFSSL_SRTP)
- list(APPEND WOLFSSL_DEFINITIONS
- "-DWOLFSSL_SRTP")
- set(WOLFSSL_DTLS "yes")
- set(WOLFSSL_KEYING_MATERIAL "yes")
- endif()
- add_option("WOLFSSL_DTLS"
- "Enables wolfSSL DTLS (default: disabled)"
- "no" "yes;no")
- if(WOLFSSL_DTLS)
- list(APPEND WOLFSSL_DEFINITIONS
- "-DWOLFSSL_DTLS")
- endif()
- add_option("WOLFSSL_TLS13"
- "Enable wolfSSL TLS v1.3 (default: enabled)"
- "yes" "yes;no")
- if("${FIPS_VERSION}" STREQUAL "v1")
- override_cache(WOLFSSL_TLS13 "no")
- endif()
- add_option("WOLFSSL_POSTAUTH"
- "Enable wolfSSL Post-handshake Authentication (default: disabled)"
- "no" "yes;no")
- if(WOLFSSL_POSTAUTH)
- if(NOT WOLFSSL_TLS13)
- message(WARNING "TLS 1.3 is disabled - disabling Post-handshake Authentication")
- override_cache(WOLFSSL_POSTAUTH "no")
- else()
- list(APPEND WOLFSSL_DEFINITIONS
- "-DWOLFSSL_POST_HANDSHAKE_AUTH")
- endif()
- endif()
- add_option("WOLFSSL_HRR_COOKIE"
- "Enable the server to send Cookie Extension in HRR with state (default: disabled)"
- "undefined" "yes;no;undefined")
- if("${WOLFSSL_HRR_COOKIE}" STREQUAL "yes")
- if(NOT WOLFSSL_TLS13)
- message(WARNING "TLS 1.3 is disabled - disabling HRR Cookie")
- override_cache(WOLFSSL_HRR_COOKIE "no")
- else()
- list(APPEND WOLFSSL_DEFINITIONS
- "-DWOLFSSL_SEND_HRR_COOKIE")
- endif()
- endif()
- add_option("WOLFSSL_DTLS13"
- "Enable wolfSSL DTLS v1.3 (default: disabled)"
- "no" "yes;no")
- if(WOLFSSL_DTLS13)
- if (NOT WOLFSSL_DTLS)
- message(FATAL_ERROR "DTLS13 requires DTLS")
- endif()
- if (NOT WOLFSSL_TLS13)
- message(FATAL_ERROR "DTLS13 requires TLS13")
- endif()
- list(APPEND WOLFSSL_DEFINITIONS "-DWOLFSSL_DTLS13")
- list(APPEND WOLFSSL_DEFINITIONS "-DWOLFSSL_W64_WRAPPER")
- if ("${WOLFSSL_HRR_COOKIE}" STREQUAL "undefined")
- message(WARNING "DTLS1.3 is enabled - enabling HRR Cookie")
- override_cache(WOLFSSL_HRR_COOKIE "yes")
- list(APPEND WOLFSSL_DEFINITIONS "-DWOLFSSL_SEND_HRR_COOKIE")
- endif()
- if (WOLFSSL_AES)
- list(APPEND WOLFSSL_DEFINITIONS "-DWOLFSSL_AES_DIRECT")
- endif()
- endif()
- add_option("WOLFSSL_DTLS_CID"
- "Enables wolfSSL DTLS CID (default: disabled)"
- "no" "yes;no")
- if(WOLFSSL_DTLS_CID)
- if(NOT WOLFSSL_DTLS13)
- message(FATAL_ERROR "CID are supported only for DTLSv1.3")
- endif()
- list(APPEND WOLFSSL_DEFINITIONS "-DWOLFSSL_DTLS_CID")
- endif()
- add_option("WOLFSSL_RNG"
- "Enable compiling and using RNG (default: enabled)"
- "yes" "yes;no")
- if(NOT WOLFSSL_RNG)
- list(APPEND WOLFSSL_DEFINITIONS "-DWC_NO_RNG")
- endif()
- add_option(WOLFSSL_QUIC
- "Enable QUIC support (default: disabled)"
- "no" "yes;no")
- if(WOLFSSL_QUIC)
- set(WOLFSSL_ALPN "yes")
- set(WOLFSSL_OPENSSLEXTRA "yes")
- set(WOLFSSL_AESCTR "yes")
- set(WOLFSSL_CURVE25519 "yes")
- set(WOLFSSL_SNI "yes")
- list(APPEND WOLFSSL_DEFINITIONS "-DWOLFSSL_QUIC" "-DHAVE_EX_DATA")
- endif()
- add_option(WOLFSSL_CURL
- "Enable CURL support (default: disabled)"
- "no" "yes;no")
- if(WOLFSSL_CURL)
- set(WOLFSSL_MD4 "yes")
- set(WOLFSSL_DES3 "yes")
- set(WOLFSSL_ALPN "yes")
- set(WOLFSSL_WOLFSSH "yes")
- set(WOLFSSL_OPENSSLEXTRA "yes")
- set(WOLFSSL_CRL "yes")
- set(WOLFSSL_OCSP "yes")
- set(WOLFSSL_OCSPSTAPLING "yes")
- set(WOLFSSL_OCSPSTAPLING_V2 "yes")
- set(WOLFSSL_SNI "yes")
- set(WOLFSSL_ALT_CERT_CHAINS "yes")
- set(WOLFSSL_IP_ALT_NAME "yes")
- set(WOLFSSL_SESSION_TICKET "yes")
- list(APPEND WOLFSSL_DEFINITIONS
- "-DNO_SESSION_CACHE_REF" "-DWOLFSSL_DES_ECB")
- endif()
- add_option(WOLFSSL_ALPN
- "Enable ALPN support (default: disabled)"
- "no" "yes;no")
- if(WOLFSSL_ALPN)
- list(APPEND WOLFSSL_DEFINITIONS "-DHAVE_ALPN" "-DHAVE_TLS_EXTENSIONS")
- endif()
- add_option(WOLFSSL_ALT_CERT_CHAINS
- "Enable support for Alternate certification chains (default: disabled)"
- "no" "yes;no")
- if(WOLFSSL_ALT_CERT_CHAINS)
- list(APPEND WOLFSSL_DEFINITIONS "-DWOLFSSL_ALT_CERT_CHAINS")
- endif()
- add_option(WOLFSSL_IP_ALT_NAME
- "Enable support for IP alternative name (default: disabled)"
- "no" "yes;no")
- if(WOLFSSL_IP_ALT_NAME)
- list(APPEND WOLFSSL_DEFINITIONS "-DWOLFSSL_IP_ALT_NAME")
- endif()
- add_option(WOLFSSL_WOLFSSH
- "Enable support for wolfSSH (default: disabled)"
- "no" "yes;no")
- if(WOLFSSL_WOLFSSH)
- list(APPEND WOLFSSL_DEFINITIONS "-DWOLFSSL_WOLFSSH")
- endif()
- if(WOLFSSL_WOLFSSH OR WOLFSSL_WPAS)
- list(APPEND WOLFSSL_DEFINITIONS "-DWOLFSSL_PUBLIC_MP")
- endif()
- add_option("WOLFSSL_HARDEN"
- "Enable Hardened build, Enables Timing Resistance and Blinding (default: enabled)"
- "yes" "yes;no")
- if(WOLFSSL_HARDEN)
- list(APPEND WOLFSSL_DEFINITIONS "-DTFM_TIMING_RESISTANT" "-DECC_TIMING_RESISTANT")
- if(WOLFSSL_RNG)
- list(APPEND WOLFSSL_DEFINITIONS "-DWC_RSA_BLINDING")
- endif()
- else()
- list(APPEND WOLFSSL_DEFINITIONS "-DWC_NO_HARDEN")
- endif()
- add_option(WOLFSSL_OPENSSLEXTRA
- "Enable extra OpenSSL API, size+ (default: disabled)"
- "no" "yes;no")
- add_option(WOLFSSL_OPENSSLALL
- "Enable all OpenSSL API, size++ (default: disabled)"
- "no" "yes;no")
- add_option(WOLFSSL_ASIO
- "Enable asio support (default: disabled)"
- "no" "yes;no")
- if (WOLFSSL_ASIO)
- list(APPEND WOLFSSL_DEFINITIONS
- "-DWOLFSSL_ASIO" "-DASIO_USE_WOLFSSL"
- "-DBOOST_ASIO_USE_WOLFSSL" "-DHAVE_EX_DATA"
- "-DSSL_TXT_TLSV1_2" "-DOPENSSL_NO_SSL2" "-DOPENSSL_NO_SSL3"
- "-DHAVE_OCSP" "-DWOLFSSL_KEY_GEN")
- override_cache(WOLFSSL_OPENSSLALL "yes")
- override_cache(WOLFSSL_OPENSSLEXTRA "yes")
- endif()
- if (WOLFSSL_OPENSSLEXTRA AND NOT WOLFSSL_OPENSSLCOEXIST)
- list(APPEND WOLFSSL_DEFINITIONS
- "-DOPENSSL_EXTRA")
- endif()
- if (WOLFSSL_OPENSSLALL)
- list(APPEND WOLFSSL_DEFINITIONS
- "-DOPENSSL_ALL" "-DWOLFSSL_EITHER_SIDE" "-DWC_RSA_NO_PADDING"
- "-DWC_RSA_PSS" "-DWOLFSSL_PSS_LONG_SALT" "-DWOLFSSL_TICKET_HAVE_ID"
- "-DWOLFSSL_ERROR_CODE_OPENSSL" "-DWOLFSSL_CERT_NAME_ALL")
- endif()
- add_option(WOLFSSL_NO_STUB
- "Removes OpenSSL compatibility stub functions (default: disabled)"
- "no" "yes;no")
- if (WOLFSSL_NO_STUB)
- list(APPEND WOLFSSL_DEFINITIONS
- "-DNO_WOLFSSL_STUB")
- endif()
- set(WOLFSSL_SLOW_MATH "yes")
- add_option(WOLFSSL_OQS
- "Enable integration with the OQS (Open Quantum Safe) liboqs library (default: disabled)"
- "no" "yes;no")
- add_option(WOLFSSL_KYBER
- "Enable the wolfSSL PQ Kyber library (default: disabled)"
- "no" "yes;no")
- add_option(WOLFSSL_EXPERIMENTAL
- "Enable experimental features (default: disabled)"
- "no" "yes;no")
- message(STATUS "Looking for WOLFSSL_EXPERIMENTAL")
- if (WOLFSSL_EXPERIMENTAL)
- message(STATUS "Looking for WOLFSSL_EXPERIMENTAL - found")
- set(WOLFSSL_FOUND_EXPERIMENTAL_FEATURE 0)
- set_wolfssl_definitions("WOLFSSL_EXPERIMENTAL_SETTINGS" RESUlT)
- message(STATUS "Looking for WOLFSSL_OQS")
- if (WOLFSSL_OQS)
- set(WOLFSSL_FOUND_EXPERIMENTAL_FEATURE 1)
- message(STATUS "Looking for WOLFSSL_OQS - found")
- message(STATUS "Checking OQS")
- find_package(OQS)
- if (OQS_FOUND)
- message(STATUS "Checking OQS - found")
- list(APPEND WOLFSSL_LINK_LIBS ${OQS_LIBRARY})
- list(APPEND WOLFSSL_INCLUDE_DIRS ${OQS_INCLUDE_DIR})
- set_wolfssl_definitions("HAVE_LIBOQS" RESUlT)
- set_wolfssl_definitions("HAVE_TLS_EXTENSIONS" RESUlT)
- set_wolfssl_definitions("OPENSSL_EXTRA" RESUlT)
- else()
- message(STATUS "Checking OQS - not found")
- message(STATUS "WARNING: WOLFSSL_OQS enabled but not found: OQS_LIBRARY=${OQS_LIBRARY}, OQS_INCLUDE_DIR=${OQS_INCLUDE_DIR} ")
- endif()
- else()
- message(STATUS "Looking for WOLFSSL_OQS - not found")
- endif()
- message(STATUS "Looking for WOLFSSL_KYBER")
- if (WOLFSSL_KYBER)
- set(WOLFSSL_FOUND_EXPERIMENTAL_FEATURE 1)
- message(STATUS "Automatically set related requirements for Kyber:")
- set_wolfssl_definitions("WOLFSSL_HAVE_KYBER" RESUlT)
- set_wolfssl_definitions("WOLFSSL_WC_KYBER" RESUlT)
- set_wolfssl_definitions("WOLFSSL_SHA3" RESUlT)
- set_wolfssl_definitions("WOLFSSL_SHAKE128" RESUlT)
- set_wolfssl_definitions("WOLFSSL_SHAKE256" RESUlT)
- message(STATUS "Looking for WOLFSSL_KYBER - found")
- else()
- message(STATUS "Looking for WOLFSSL_KYBER - not found")
- endif()
- if(WOLFSSL_FOUND_EXPERIMENTAL_FEATURE)
- message(STATUS "WOLFSSL_EXPERIMENTAL enabled, experimental features enabled.")
- else()
- message(STATUS "Warning: WOLFSSL_EXPERIMENTAL enabled, but no experimental features enabled.")
- endif()
- if(WOLFSSL_OQS AND WOLFSSL_KYBER)
- message(FATAL_ERROR "Error: cannot enable both WOLFSSL_OQS and WOLFSSL_KYBER at the same time.")
- endif()
- else()
- message(STATUS "Looking for WOLFSSL_EXPERIMENTAL - not found")
- if (WOLFSSL_OQS)
- message(FATAL_ERROR "Error: WOLFSSL_OQS requires WOLFSSL_EXPERIMENTAL at this time.")
- endif()
- if(WOLFSSL_KYBER)
- message(FATAL_ERROR "Error: WOLFSSL_KYBER requires WOLFSSL_EXPERIMENTAL at this time.")
- endif()
- endif()
- add_option("WOLFSSL_AESCBC"
- "Enable wolfSSL AES-CBC support (default: enabled)"
- "yes" "yes;no")
- if(NOT WOLFSSL_AESCBC)
- list(APPEND WOLFSSL_DEFINITIONS "-DNO_AES_CBC")
- endif()
- add_option("WOLFSSL_AESGCM"
- "Enable wolfSSL AES-GCM support (default: enabled)"
- "yes" "yes;no;table;small;word32;4bit")
- if(WOLFSSL_LEAN_PSK OR (WOLFSSL_LEAN_TLS AND NOT WOLFSSL_TLS13))
- override_cache(WOLFSSL_AESGCM "no")
- endif()
- if(WOLFSSL_AESGCM AND CMAKE_C_BYTE_ORDER STREQUAL "LITTLE_ENDIAN")
- override_cache(WOLFSSL_AESGCM "4bit")
- endif()
- if(WOLFSSL_AESGCM)
- if("${WOLFSSL_AESGCM}" STREQUAL "word32")
- list(APPEND WOLFSSL_DEFINITIONS "-DGCM_WORD32")
- override_cache(WOLFSSL_AESGCM "yes")
- endif()
- if(("${WOLFSSL_AESGCM}" STREQUAL "small") OR WOLFSSL_LOW_RESOURCE)
- list(APPEND WOLFSSL_DEFINITIONS "-DGCM_SMALL")
- override_cache(WOLFSSL_AESGCM "yes")
- endif()
- if("${WOLFSSL_AESGCM}" STREQUAL "table")
- list(APPEND WOLFSSL_DEFINITIONS "-DGCM_TABLE")
- override_cache(WOLFSSL_AESGCM "yes")
- endif()
- if("${WOLFSSL_AESGCM}" STREQUAL "4bit")
- list(APPEND WOLFSSL_DEFINITIONS "-DGCM_TABLE_4BIT")
- override_cache(WOLFSSL_AESGCM "yes")
- endif()
- list(APPEND WOLFSSL_DEFINITIONS "-DHAVE_AESGCM")
- endif()
- if(WOLFSSL_QUIC)
- if(NOT WOLFSSL_TLS13)
- message(FATAL_ERROR "TLS 1.3 is disabled - necessary for QUIC")
- endif()
- if(NOT WOLFSSL_AESGCM)
- message(FATAL_ERROR "AES-GCM is disabled - necessary for QUIC")
- endif()
- endif()
- add_option("WOLFSSL_AESSIV"
- "Enable wolfSSL AES-SIV support (default: disabled)"
- "no" "yes;no")
- if(WOLFSSL_AESSIV)
- list(APPEND WOLFSSL_DEFINITIONS "-DWOLFSSL_AES_SIV")
- endif()
- add_option("WOLFSSL_AESCTR"
- "Enable wolfSSL AES-CTR support (default: disabled)"
- "no" "yes;no")
- if(WOLFSSL_OPENVPN OR
- WOLFSSL_LIBSSH2 OR
- WOLFSSL_AESSIV)
- override_cache(WOLFSSL_AESCTR "yes")
- endif()
- if(WOLFSSL_AESCTR AND NOT WOLFSSL_FORTRESS)
- list(APPEND WOLFSSL_DEFINITIONS
- "-DWOLFSSL_AES_COUNTER"
- "-DWOLFSSL_AES_DIRECT")
- endif()
- add_option("WOLFSSL_ARIA"
- "Enable wolfSSL ARIA support (default: disabled)"
- "no" "yes;no")
- add_option("WOLFSSL_AESCCM"
- "Enable wolfSSL AES-CCM support (default: disabled)"
- "no" "yes;no")
- add_option("WOLFSSL_AESOFB"
- "Enable wolfSSL AES-OFB support (default: disabled)"
- "no" "yes;no")
- add_option("WOLFSSL_AESCFB"
- "Enable wolfSSL AES-CFB support (default: disabled)"
- "no" "yes;no")
- add_option("WOLFSSL_ALIGN_DATA"
- "Align data for ciphers (default: enabled)"
- "yes" "yes;no")
- if(WOLFSSL_ALIGN_DATA)
- list(APPEND WOLFSSL_DEFINITIONS "-DWOLFSSL_USE_ALIGN")
- endif()
- set(SHA224_DEFAULT "no")
- if(("${CMAKE_SYSTEM_PROCESSOR}" MATCHES "x86_64|AMD64|arm64") OR
- ("${CMAKE_SYSTEM_PROCESSOR}" STREQUAL "aarch64"))
- if(NOT WOLFSSL_AFALG AND NOT WOLFSSL_DEVCRYPTO AND
- (NOT WOLFSSL_FIPS OR ("${FIPS_VERSION}" STREQUAL "v2")))
- set(SHA224_DEFAULT "yes")
- endif()
- endif()
- add_option("WOLFSSL_SHA224"
- "Enable wolfSSL SHA-224 support (default: enabled on x86_64/aarch64)"
- ${SHA224_DEFAULT} "yes;no")
- set(SHA3_DEFAULT "no")
- if(("${CMAKE_SYSTEM_PROCESSOR}" MATCHES "x86_64|AMD64|arm64") OR
- ("${CMAKE_SYSTEM_PROCESSOR}" STREQUAL "aarch64"))
- if(NOT WOLFSSL_FIPS OR ("${FIPS_VERSION}" STREQUAL "v2"))
- set(SHA3_DEFAULT "yes")
- endif()
- endif()
- add_option("WOLFSSL_SHA3"
- "Enable wolfSSL SHA-3 support (default: enabled on x86_64/aarch64)"
- ${SHA3_DEFAULT} "yes;no;small")
- add_option("WOLFSSL_SHAKE256"
- "Enable wolfSSL SHAKE256 support (default: enabled on x86_64/aarch64)"
- "no" "yes;no;small")
- add_option("WOLFSSL_SHAKE128"
- "Enable wolfSSL SHAKE128 support (default: enabled on x86_64/aarch64)"
- "no" "yes;no;small")
- add_option("WOLFSSL_SHA512"
- "Enable wolfSSL SHA-512 support (default: enabled)"
- "yes" "yes;no")
- if(WOLFSSL_LEAN_PSK OR
- WOLFSSL_LEAN_TLS OR
- WOLFSSL_32BIT OR
- WOLFSSL_16BIT)
- override_cache(WOLFSSL_SHA512 "no")
- endif()
- if(WOLFSSL_OPENSSH OR
- WOLFSSL_WPAS OR
- WOLFSSL_FORTRESS)
- override_cache(WOLFSSL_SHA512 "yes")
- endif()
- if(WOLFSSL_SHA512)
- list(APPEND WOLFSSL_DEFINITIONS "-DWOLFSSL_SHA512")
- endif()
- add_option("WOLFSSL_SHA384"
- "Enable wolfSSL SHA-384 support (default: enabled)"
- "yes" "yes;no")
- if(WOLFSSL_LEAN_PSK OR
- WOLFSSL_LEAN_TLS OR
- WOLFSSL_32BIT OR
- WOLFSSL_16BIT)
- override_cache(WOLFSSL_SHA384 "no")
- endif()
- if(WOLFSSL_OPENSSH OR
- WOLFSSL_WPAS OR
- WOLFSSL_FORTRESS)
- override_cache(WOLFSSL_SHA384 "yes")
- endif()
- if(WOLFSSL_SHA384)
- list(APPEND WOLFSSL_DEFINITIONS "-DWOLFSSL_SHA384")
- endif()
- add_option("WOLFSSL_KEYGEN"
- "Enable key generation (default: disabled)])"
- "no" "yes;no")
- add_option("WOLFSSL_CERTGEN"
- "Enable cert generation (default: disabled)"
- "no" "yes;no")
- add_option("WOLFSSL_CERTREQ"
- "Enable cert request generation (default: disabled)"
- "no" "yes;no")
- add_option("WOLFSSL_CERTEXT"
- "Enable cert request extensions (default: disabled)"
- "no" "yes;no")
- add_option("WOLFSSL_CERTGENCACHE"
- "Enable decoded cert caching (default: disabled)"
- "no" "yes;no")
- add_option("WOLFSSL_HKDF"
- "Enable HKDF (HMAC-KDF) support (default: disabled)"
- "no" "yes;no")
- if(WOLFSSL_TLS13)
- override_cache(WOLFSSL_HKDF "yes")
- endif()
- if(WOLFSSL_HKDF)
- list(APPEND WOLFSSL_DEFINITIONS "-DHAVE_HKDF")
- endif()
- add_option("WOLFSSL_DSA"
- "Enable DSA (default: disabled)"
- "no" "yes;no")
- if(NOT WOLFSSL_DSA AND NOT WOLFSSL_OPENSSH)
- list(APPEND WOLFSSL_DEFINITIONS "-DNO_DSA")
- endif()
- add_option("WOLFSSL_ECCSHAMIR"
- "Enable ECC Shamir (default: enabled)"
- "yes" "yes;no")
- add_option("WOLFSSL_ECC"
- "Enable ECC (default: enabled)"
- "yes" "yes;no;nonblock")
- if(WOLFSSL_LEAN_PSK)
- override_cache(WOLFSSL_ECC "no")
- endif()
- if(WOLFSSL_OPENSSH OR
- WOLFSSL_NGINX OR
- WOLFSSL_SIGNAL)
- override_cache(WOLFSSL_ECC "yes")
- endif()
- if(WOLFSSL_ECC)
- list(APPEND WOLFSSL_DEFINITIONS "-DHAVE_ECC" "-DTFM_ECC256")
- if(WOLFSSL_ECCSHAMIR AND NOT WOLFSSL_LOW_RESOURCE)
- list(APPEND WOLFSSL_DEFINITIONS "-DECC_SHAMIR")
- endif()
- if("${WOLFSSL_ECC}" STREQUAL "nonblock")
- list(APPEND WOLFSSL_DEFINITIONS "-DWC_ECC_NONBLOCK")
- endif()
- endif()
- add_option("WOLFSSL_ECCCUSTCURVES"
- "Enable ECC Custom Curves (default: disabled)"
- "no" "yes;no;all")
- if(WOLFSSL_ECCCUSTCURVES)
- if("${WOLFSSL_ECCCUSTCURVES}" STREQUAL "all")
- list(APPEND WOLFSSL_DEFINITIONS "-DHAVE_ECC_SECPR2")
- list(APPEND WOLFSSL_DEFINITIONS "-DHAVE_ECC_SECPR3")
- list(APPEND WOLFSSL_DEFINITIONS "-DHAVE_ECC_BRAINPOOL")
- list(APPEND WOLFSSL_DEFINITIONS "-DHAVE_ECC_KOBLITZ")
- list(APPEND WOLFSSL_DEFINITIONS "-DHAVE_ECC_CDH")
- endif()
- list(APPEND WOLFSSL_DEFINITIONS "-DWOLFSSL_CUSTOM_CURVES")
- endif()
- set(WOLFSSL_CURVE25519_SMALL "no")
- add_option("WOLFSSL_CURVE25519"
- "Enable Curve25519 (default: disabled)"
- "no" "yes;no;small;no128bit")
- if(WOLFSSL_OPENSSH)
- override_cache(WOLFSSL_CURVE25519 "yes")
- endif()
- if(WOLFSSL_CURVE25519)
- if("${WOLFSSL_CURVE25519}" STREQUAL "small" OR WOLFSSL_LOW_RESOURCE)
- list(APPEND WOLFSSL_DEFINITIONS "-DCURVE25519_SMALL")
- set(WOLFSSL_CURVE25519_SMALL "yes")
- endif()
- if("${WOLFSSL_CURVE25519}" STREQUAL "no128bit" OR WOLFSSL_32BIT)
- list(APPEND WOLFSSL_DEFINITIONS "-DNO_CURVED25519_128BIT")
- endif()
- list(APPEND WOLFSSL_DEFINITIONS "-DHAVE_CURVE25519")
- set(WOLFSSL_FEMATH "yes")
- endif()
- set(WOLFSSL_ED25519_SMALL "no")
- add_option("WOLFSSL_ED25519"
- "Enable ED25519 (default: disabled)"
- "no" "yes;no")
- if(WOLFSSL_OPENSSH)
- override_cache(WOLFSSL_ED25519 "yes")
- endif()
- if(WOLFSSL_ED25519 AND NOT WOLFSSL_32BIT)
- if("${WOLFSSL_ED25519}" STREQUAL "small" OR WOLFSSL_LOW_RESOURCE)
- list(APPEND WOLFSSL_DEFINITIONS "-DED25519_SMALL")
- set(WOLFSSL_ED25519_SMALL "yes")
- set(WOLFSSL_CURVE25519_SMALL "yes")
- endif()
- if(NOT WOLFSSL_SHA512)
- message(FATAL_ERROR "cannot enable ed25519 without enabling sha512.")
- endif()
- set(WOLFSSL_FEMATH "yes")
- set(WOLFSSL_GEMATH "yes")
- list(APPEND WOLFSSL_DEFINITIONS "-DHAVE_ED25519")
- endif()
- set(WOLFSSL_CURVE448_SMALL "no")
- add_option("WOLFSSL_CURVE448"
- "Enable Curve448 (default: disabled)"
- "no" "yes;no;small")
- if(WOLFSSL_CURVE448)
- if("${WOLFSSL_CURVE448}" STREQUAL "small" OR WOLFSSL_LOW_RESOURCE)
- list(APPEND WOLFSSL_DEFINITIONS "-DCURVE448_SMALL")
- set(WOLFSSL_CURVE448_SMALL "yes")
- endif()
- if("${WOLFSSL_CURVE448}" STREQUAL "no128bit" OR WOLFSSL_32BIT)
- list(APPEND WOLFSSL_DEFINITIONS "-DNO_CURVED448_128BIT")
- endif()
- list(APPEND WOLFSSL_DEFINITIONS "-DHAVE_CURVE448")
- set(WOLFSSL_FE448 "yes")
- endif()
- set(WOLFSSL_ED448_SMALL "no")
- add_option("WOLFSSL_ED448"
- "Enable ED448 (default: disabled)"
- "no" "yes;no;small")
- if(WOLFSSL_ED448 AND NOT WOLFSSL_32BIT)
- if("${WOLFSSL_ED448}" STREQUAL "small" OR WOLFSSL_LOW_RESOURCE)
- list(APPEND WOLFSSL_DEFINITIONS "-DED448_SMALL")
- set(WOLFSSL_ED448_SMALL "yes")
- set(WOLFSSL_CURVE448_SMALL "yes")
- endif()
- if(NOT WOLFSSL_SHA512)
- message(FATAL_ERROR "cannot enable ed448 without enabling sha512.")
- endif()
- set(WOLFSSL_FE448 "yes")
- set(WOLFSSL_GE448 "yes")
- list(APPEND WOLFSSL_DEFINITIONS "-DHAVE_ED448")
- override_cache(WOLFSSL_SHAKE256 "yes")
- endif()
- add_option("WOLFSSL_ERROR_STRINGS"
- "Enable error strings table (default: enabled)"
- "yes" "yes;no")
- if(NOT WOLFSSL_ERROR_STRINGS)
- list(APPEND WOLFSSL_DEFINITIONS "-DNO_ERROR_STRINGS")
- else()
- if(WOLFSSL_LEAN_PSK OR WOLFSSL_LEAN_TLS)
- list(APPEND WOLFSSL_DEFINITIONS "-DNO_ERROR_STRINGS")
- override_cache(WOLFSSL_ERROR_STRINGS "no")
- endif()
- endif()
- add_option("WOLFSSL_ERROR_QUEUE"
- "Enables adding nodes to error queue when compiled with OPENSSL_EXTRA (default: enabled)"
- "yes" "yes;no")
- if(NOT WOLFSSL_ERROR_QUEUE)
- list(APPEND WOLFSSL_DEFINITIONS "-DNO_ERROR_QUEUE")
- endif()
- add_option("WOLFSSL_OLD_TLS"
- "Enable old TLS versions < 1.2 (default: enabled)"
- "yes" "yes;no")
- if(NOT WOLFSSL_OLD_TLS)
- list(APPEND WOLFSSL_DEFINITIONS "-DNO_OLD_TLS")
- else()
- if(WOLFSSL_LEAN_PSK OR WOLFSSL_LEAN_TLS)
- list(APPEND WOLFSSL_DEFINITIONS "-DNO_OLD_TLS")
- override_cache(WOLFSSL_OLD_TLS "no")
- endif()
- endif()
- add_option("WOLFSSL_TLSV12"
- "Enable TLS versions 1.2 (default: enabled)"
- "yes" "yes;no")
- if(NOT WOLFSSL_TLSV12)
- list(APPEND WOLFSSL_DEFINITIONS
- "-DWOLFSSL_NO_TLS12"
- "-DNO_OLD_TLS")
- endif()
- add_option("WOLFSSL_MEMORY"
- "Enable memory callbacks (default: enabled)"
- "yes" "yes;no")
- if(NOT WOLFSSL_MEMORY)
- list(APPEND WOLFSSL_DEFINITIONS "-DNO_WOLFSSL_MEMORY")
- else()
- if(WOLFSSL_LEAN_PSK OR WOLFSSL_LEAN_TLS)
- override_cache(WOLFSSL_MEMORY "no")
- endif()
- endif()
- add_option("WOLFSSL_RSA"
- "Enable RSA (default: enabled)"
- "yes" "yes;no")
- if(NOT WOLFSSL_RSA)
- list(APPEND WOLFSSL_DEFINITIONS "-DNO_RSA")
- else()
- if(WOLFSSL_LEAN_PSK OR WOLFSSL_LEAN_TLS)
- list(APPEND WOLFSSL_DEFINITIONS "-DNO_RSA")
- override_cache(WOLFSSL_RSA "no")
- endif()
- endif()
- add_option("WOLFSSL_OAEP"
- "Enable RSA OAEP (default: enabled)"
- "yes" "yes;no")
- if(NOT WOLFSSL_OAEP)
- list(APPEND WOLFSSL_DEFINITIONS "-DWC_NO_RSA_OAEP")
- endif()
- add_option("WOLFSSL_RSA_PSS"
- "Enable RSA-PSS (default: disabled)"
- "no" "yes;no")
- if(NOT WOLFSSL_RSA)
- override_cache(WOLFSSL_RSA_PSS "no")
- else()
- if(WOLFSSL_TLS13)
- override_cache(WOLFSSL_RSA_PSS "yes")
- endif()
- endif()
- if(WOLFSSL_RSA_PSS)
- list(APPEND WOLFSSL_DEFINITIONS "-DWC_RSA_PSS")
- list(APPEND WOLFSSL_DEFINITIONS "-DWOLFSSL_PSS_LONG_SALT")
- endif()
- add_option("WOLFSSL_DH"
- "Enable DH (default: enabled)"
- "yes" "yes;no;const")
- if(WOLFSSL_OPENSSH)
- override_cache(WOLFSSL_DH "yes")
- endif()
- if(NOT WOLFSSL_DH)
- list(APPEND WOLFSSL_DEFINITIONS "-DNO_DH")
- else()
- if(WOLFSSL_LEAN_PSK OR WOLFSSL_LEAN_TLS)
- list(APPEND WOLFSSL_DEFINITIONS "-DNO_DH")
- override_cache(WOLFSSL_DH "no")
- endif()
- endif()
- if("${WOLFSSL_DH}" STREQUAL "const")
- list(APPEND WOLFSSL_DEFINITIONS "-DWOLFSSL_DH_CONST")
- set(WOLFSSL_DH_CONST "yes")
- endif()
- add_option("WOLFSSL_ASN"
- "Enable ASN (default: enabled)"
- "yes" "yes;no")
- if(NOT WOLFSSL_ASN)
- list(APPEND WOLFSSL_DEFINITIONS "-DNO_ASN" "-DNO_CERTS")
- if(NOT WOLFSSL_DH AND NOT WOLFSSL_ECC)
- list(APPEND WOLFSSL_DEFINITIONS "-DNO_BIG_INT")
- endif()
- else()
- if(WOLFSSL_LEAN_PSK)
- list(APPEND WOLFSSL_DEFINITIONS
- "-DNO_ASN"
- "-DNO_CERTS"
- "-DNO_BIG_INT")
- override_cache(WOLFSSL_ASN "no")
- else()
- if("${WOLFSSL_ASN}" STREQUAL "nocrypt")
- list(APPEND WOLFSSL_DEFINITIONS "-DNO_ASN_CRYPT")
- override_cache(WOLFSSL_PWDBASED "no")
- endif()
- endif()
- endif()
- if(WOLFSSL_RSA AND NOT WOLFSSL_RSA_VFY AND NOT WOLFSSL_ASN)
- message(FATAL_ERROR "please disable rsa if disabling asn.")
- endif()
- if(WOLFSSL_DSA AND NOT WOLFSSL_ASN)
- message(FATAL_ERROR "please disable dsa if disabling asn.")
- endif()
- if(NOT WOLFSSL_ASN AND
- NOT WOLFSSL_DH AND
- NOT WOLFSSL_ECC AND
- NOT WOLFSSL_RSA)
- override_cache(WOLFSSL_FAST_MATH "no")
- set(WOLFSSL_SLOWMATH "no")
- endif()
- add_option("WOLFSSL_AES"
- "Enable AES (default: enabled)"
- "yes" "yes;no")
- if(NOT WOLFSSL_AES)
- list(APPEND WOLFSSL_DEFINITIONS "-DNO_AES")
- if(WOLFSSL_FORTRESS)
- message(FATAL_ERROR "fortress requires aes")
- endif()
- if(WOLFSSL_ECC_ENCRYPT)
- message(FATAL_ERROR "cannot enable eccencrypt and hkdf without aes.")
- endif()
- if(WOLFSSL_AESGCM)
- message(FATAL_ERROR "AESGCM requires AES.")
- endif()
- if(WOLFSSL_AESCCM)
- message(FATAL_ERROR "AESCCM requires AES.")
- endif()
- if(WOLFSSL_AESCTR)
- message(FATAL_ERROR "AESCTR requires AES.")
- endif()
- else()
- if(WOLFSSL_LEAN_PSK)
- list(APPEND WOLFSSL_DEFINITIONS "-DNO_AES")
- override_cache(WOLFSSL_AES "no")
- endif()
- endif()
- add_option("WOLFSSL_CODING"
- "Enable coding base 16/64 (default: enabled)"
- "yes" "yes;no")
- if(NOT WOLFSSL_CODING)
- list(APPEND WOLFSSL_DEFINITIONS "-DNO_CODING")
- else()
- if(WOLFSSL_LEAN_PSK)
- list(APPEND WOLFSSL_DEFINITIONS "-DNO_CODING")
- override_cache(WOLFSSL_CODING "no")
- endif()
- endif()
- set(BASE64_ENCODE_DEFAULT "no")
- if("${CMAKE_SYSTEM_PROCESSOR}" MATCHES "x86_64|AMD64|arm64")
- set(BASE64_ENCODE_DEFAULT "yes")
- endif()
- set(WOLFSSL_BASE64_ENCODE_HELP_STRING "Enable Base64 encoding (default: enabled on x86_64)")
- add_option("WOLFSSL_BASE64_ENCODE" ${WOLFSSL_BASE64_ENCODE_HELP_STRING} ${BASE64_ENCODE_DEFAULT} "yes;no")
- if(WOLFSSL_BASE64_ENCODE)
- list(APPEND WOLFSSL_DEFINITIONS "-DWOLFSSL_BASE64_ENCODE")
- endif()
- set(WOLFSSL_DES3_HELP_STRING "Enable DES3 (default: disabled)")
- add_option("WOLFSSL_DES3" ${WOLFSSL_DES3_HELP_STRING} "no" "yes;no")
- if(WOLFSSL_OPENSSH OR
- WOLFSSL_QT OR
- WOLFSSL_OPENVPN OR
- WOLFSSL_WPAS OR
- WOLFSSL_ASIO)
- override_cache(WOLFSSL_DES3 "yes")
- endif()
- set(WOLFSSL_DES3_TLS_SUITES_STRING "Enable DES3 TLS cipher suites (default: disabled)")
- add_option("WOLFSSL_DES3_TLS_SUITES" ${WOLFSSL_DES3_TLS_SUITES_STRING} "no" "yes;no")
- if(NOT WOLFSSL_DES3_TLS_SUITES)
- list(APPEND WOLFSSL_DEFINITIONS "-DNO_DES3_TLS_SUITES")
- endif()
- set(WOLFSSL_ARC4_HELP_STRING "Enable ARC4 (default: disabled)")
- add_option("WOLFSSL_ARC4" ${WOLFSSL_ARC4_HELP_STRING} "no" "yes;no")
- if(WOLFSSL_OPENSSH OR WOLFSSL_WPAS)
- override_cache(WOLFSSL_ARC4 "yes")
- endif()
- set(WOLFSSL_MD5_HELP_STRING "Enable MD5 (default: enabled)")
- add_option("WOLFSSL_MD5" ${WOLFSSL_MD5_HELP_STRING} "yes" "yes;no")
- if(NOT WOLFSSL_MD5)
- list(APPEND WOLFSSL_DEFINITIONS "-DNO_MD5" "-DNO_OLD_TLS")
- else()
- if(WOLFSSL_LEAN_PSK OR WOLFSSL_LEAN_TLS)
- list(APPEND WOLFSSL_DEFINITIONS "-DNO_MD5" "-DNO_OLD_TLS")
- override_cache(WOLFSSL_MD5 "no")
- endif()
- endif()
- add_option("WOLFSSL_SHA"
- "Enable SHA (default: enabled)"
- "yes" "yes;no")
- if(NOT WOLFSSL_SHA)
- list(APPEND WOLFSSL_DEFINITIONS "-DNO_SHA" "-DNO_OLD_TLS")
- else()
- if(WOLFSSL_LEAN_PSK OR WOLFSSL_LEAN_TLS)
- list(APPEND WOLFSSL_DEFINITIONS "-DNO_SHA" "-DNO_OLD_TLS")
- override_cache(WOLFSSL_SHA "no")
- endif()
- endif()
- add_option("WOLFSSL_CMAC"
- "Enable CMAC (default: disabled)"
- "no" "yes;no")
- if(WOLFSSL_WPAS OR
- WOLFSSL_NTP OR
- WOLFSSL_AESSIV)
- override_cache(WOLFSSL_CMAC "yes")
- endif()
- if(WOLFSSL_CMAC)
- if (NOT WOLFSSL_AES)
- message(FATAL_ERROR "Cannot use CMAC without AES.")
- else()
- list(APPEND WOLFSSL_DEFINITIONS
- "-DWOLFSSL_CMAC"
- "-DWOLFSSL_AES_DIRECT")
- endif()
- endif()
- if(WOLFSSL_SHA224)
- list(APPEND WOLFSSL_DEFINITIONS "-DWOLFSSL_SHA224")
- endif()
- if("${WOLFSSL_SHA3}" STREQUAL "small")
- list(APPEND WOLFSSL_DEFINITIONS "-DWOLFSSL_SHA3_SMALL")
- override_cache(WOLFSSL_SHA3 "yes")
- endif()
- if(WOLFSSL_SHA3 AND NOT WOLFSSL_32BIT)
- list(APPEND WOLFSSL_DEFINITIONS "-DWOLFSSL_SHA3")
- endif()
- if(WOLFSSL_SHAKE256)
- if(NOT WOLFSSL_32BIT)
- list(APPEND WOLFSSL_DEFINITIONS "-DWOLFSSL_SHAKE256")
- if(NOT WOLFSSL_SHA3)
- message(FATAL_ERROR "Must have SHA-3 enabled: --enable-sha3")
- endif()
- endif()
- else()
- list(APPEND WOLFSSL_DEFINITIONS "-DWOLFSSL_NO_SHAKE256")
- endif()
- if(WOLFSSL_SHAKE128)
- if(NOT WOLFSSL_32BIT)
- list(APPEND WOLFSSL_DEFINITIONS "-DWOLFSSL_SHAKE128")
- if(NOT WOLFSSL_SHA3)
- message(FATAL_ERROR "Must have SHA-3 enabled: --enable-sha3")
- endif()
- endif()
- else()
- list(APPEND WOLFSSL_DEFINITIONS "-DWOLFSSL_NO_SHAKE128")
- endif()
- set(POLY1305_DEFAULT "yes")
- if(WOLFSSL_FIPS)
- set(POLY1305_DEFAULT "no")
- endif()
- set(WOLFSSL_POLY1305_HELP_STRING "Enable wolfSSL POLY1305 support (default: enabled)")
- add_option("WOLFSSL_POLY1305" ${WOLFSSL_POLY1305_HELP_STRING} ${POLY1305_DEFAULT} "yes;no")
- if(WOLFSSL_LEAN_PSK OR WOLFSSL_LEAN_TLS)
- override_cache(WOLFSSL_POLY1305 "no")
- endif()
- if(WOLFSSL_POLY1305)
- list(APPEND WOLFSSL_DEFINITIONS
- "-DHAVE_POLY1305"
- "-DHAVE_ONE_TIME_AUTH")
- endif()
- set(CHACHA_DEFAULT "yes")
- if(WOLFSSL_FIPS)
- set(CHACHA_DEFAULT "no")
- endif()
- add_option("WOLFSSL_CHACHA"
- "Enable CHACHA (default: enabled). Use `=noasm` to disable ASM AVX/AVX2 speedups"
- ${CHACHA_DEFAULT} "yes;no;noasm")
- if(WOLFSSL_LEAN_PSK OR WOLFSSL_LEAN_TLS)
- override_cache(WOLFSSL_CHACHA "no")
- endif()
- if(("${WOLFSSL_CHACHA}" STREQUAL "noasm") OR NOT WOLFSSL_ASM)
- list(APPEND WOLFSSL_DEFINITIONS "-DNO_CHACHA_ASM")
- endif()
- if(NOT ("${WOLFSSL_CHACHA}" STREQUAL "noasm") AND WOLFSSL_CHACHA)
- list(APPEND WOLFSSL_DEFINITIONS "-DHAVE_CHACHA")
- endif()
- add_option("WOLFSSL_HASH_DRBG"
- "Enable Hash DRBG support (default: enabled)"
- "yes" "yes;no")
- if(WOLFSSL_HASH_DRBG)
- list(APPEND WOLFSSL_DEFINITIONS "-DHAVE_HASHDRBG")
- else()
- if(WOLFSSL_FIPS)
- list(APPEND WOLFSSL_DEFINITIONS "-DHAVE_HASHDRBG")
- override_cache(WOLFSSL_HASH_DRBG "yes")
- else()
- list(APPEND WOLFSSL_DEFINITIONS "-DWC_NO_HASHDRBG")
- endif()
- endif()
- if(WOLFSSL_LINUX_KM)
- set(FILESYSTEM_DEFAULT "no")
- else()
- set(FILESYSTEM_DEFAULT "yes")
- endif()
- add_option("WOLFSSL_FILESYSTEM"
- "Enable Filesystem support (default: enabled)"
- ${FILESYSTEM_DEFAULT} "yes;no")
- if(NOT WOLFSSL_FILESYSTEM)
- list(APPEND WOLFSSL_DEFINITIONS "-DNO_FILESYSTEM")
- else()
- if(WOLFSSL_LEAN_PSK OR WOLFSSL_LEAN_TLS)
- list(APPEND WOLFSSL_DEFINITIONS "-DNO_FILESYSTEM")
- override_cache(WOLFSSL_FILESYSTEM "no")
- endif()
- endif()
- add_option("WOLFSSL_INLINE"
- "Enable inline functions (default: enabled)"
- "yes" "yes;no")
- if(NOT WOLFSSL_INLINE)
- list(APPEND WOLFSSL_DEFINITIONS "-DNO_INLINE")
- endif()
- add_option(WOLFSSL_OCSP "Enable OCSP (default: disabled)" "no" "yes;no")
- add_option(WOLFSSL_OCSPSTAPLING "Enable OCSP Stapling (default: disabled)" "no" "yes;no")
- add_option(WOLFSSL_OCSPSTAPLING_V2 "Enable OCSP Stapling v2 (default: disabled)" "no" "yes;no")
- add_option(WOLFSSL_CRL
- "Enable CRL (Use =io for inline CRL HTTP GET) (default: disabled)"
- "no" "yes;no;io")
- set(SNI_DEFAULT "no")
- if(("${CMAKE_SYSTEM_PROCESSOR}" MATCHES "x86_64|x86|AMD64|arm64") OR
- ("${CMAKE_SYSTEM_PROCESSOR}" STREQUAL "aarch64"))
- set(SNI_DEFAULT "yes")
- endif()
- set(WOLFSSL_SNI_HELP_STRING "Enable SNI (default: disabled)")
- add_option(WOLFSSL_SNI ${WOLFSSL_SNI_HELP_STRING} ${SNI_DEFAULT} "yes;no")
- set(WOLFSSL_TLSX_HELP_STRING "Enable all TLS Extensions (default: disabled)")
- add_option(WOLFSSL_TLSX ${WOLFSSL_TLSX_HELP_STRING} "no" "yes;no")
- add_option(WOLFSSL_EX_DATA
- "Enable app data (default: disabled)"
- "no" "yes;no")
- if (WOLFSSL_EX_DATA)
- list(APPEND WOLFSSL_DEFINITIONS
- "-DHAVE_EX_DATA")
- endif()
- add_option("WOLFSSL_SUPPORTED_CURVES"
- "Enable Supported Elliptic Curves (default: enabled)"
- "yes" "yes;no")
- if(WOLFSSL_SUPPORTED_CURVES)
- if(NOT WOLFSSL_ECC AND NOT WOLFSSL_CURVE25519 AND NOT WOLFSSL_CURVE448)
- override_cache(WOLFSSL_SUPPORTED_CURVES "no")
- else()
- list(APPEND WOLFSSL_DEFINITIONS
- "-DHAVE_TLS_EXTENSIONS"
- "-DHAVE_SUPPORTED_CURVES")
- endif()
- endif()
- if(WOLFSSL_DH)
- if(WOLFSSL_TLS13 OR WOLFSSL_SUPPORTED_CURVES)
- list(APPEND WOLFSSL_DEFINITIONS "-DHAVE_FFDHE_2048")
- endif()
- endif()
- if (NOT WOLFSSL_ECC AND
- (NOT WOLFSSL_RSA OR NOT WOLFSSL_DH) AND
- (NOT WOLFSSL_CURVE25519 OR NOT WOLFSSL_ED25519) AND
- (NOT WOLFSSL_CURVE448 AND NOT WOLFSSL_ED448))
- override_cache(WOLFSSL_TLS13 "no")
- endif()
- if (WOLFSSL_TLS13)
- list(APPEND WOLFSSL_DEFINITIONS
- "-DHAVE_SUPPORTED_CURVES"
- "-DWOLFSSL_TLS13"
- "-DHAVE_TLS_EXTENSIONS"
- )
- endif()
- add_option("WOLFSSL_SESSION_TICKET"
- "Enable Session Ticket (default: disabled)"
- "no" "yes;no")
- if(WOLFSSL_NGINX OR WOLFSSL_WPAS OR WOLFSSL_HAPROXY OR WOLFSSL_LIGHTY)
- override_cache(WOLFSSL_SESSION_TICKET "yes")
- endif()
- if(WOLFSSL_SESSION_TICKET)
- list(APPEND WOLFSSL_DEFINITIONS
- "-DHAVE_TLS_EXTENSIONS"
- "-DHAVE_SESSION_TICKET")
- endif()
- add_option("WOLFSSL_TICKET_NONCE_MALLOC"
- "Enable dynamic allocation of ticket nonces (default: disabled)"
- "no" "yes;no")
- if(WOLFSSL_TICKET_NONCE_MALLOC)
- list(APPEND WOLFSSL_DEFINITIONS
- "-DWOLFSSL_TICKET_NONCE_MALLOC")
- endif()
- add_option("WOLFSSL_EXTENDED_MASTER"
- "Enable Extended Master Secret (default: enabled)"
- "yes" "yes;no")
- if(WOLFSSL_EXTENDED_MASTER)
- list(APPEND WOLFSSL_DEFINITIONS "-DHAVE_EXTENDED_MASTER")
- endif()
- if(NOT WOLFSSL_ARC4)
- list(APPEND WOLFSSL_DEFINITIONS "-DNO_RC4")
- else()
- if(WOLFSSL_LEAN_PSK OR WOLFSSL_LEAN_TLS)
- list(APPEND WOLFSSL_DEFINITIONS "-DNO_RC4")
- override_cache(WOLFSSL_ARC4 "no")
- endif()
- endif()
- set(WOLFSSL_PKCS7_HELP_STRING "Enable PKCS7 (default: disabled)")
- add_option(WOLFSSL_PKCS7 ${WOLFSSL_PKCS7_HELP_STRING} "no" "yes;no")
- set(WOLFSSL_TPM_HELP_STRING "Enable wolfTPM options (default: disabled)")
- add_option(WOLFSSL_TPM ${WOLFSSL_TPM_HELP_STRING} "no" "yes;no")
- set(WOLFSSL_AESKEYWRAP_HELP_STRING "Enable AES key wrap support (default: disabled)")
- add_option(WOLFSSL_AESKEYWRAP ${WOLFSSL_AESKEYWRAP_HELP_STRING} "no" "yes;no")
- set(WOLFSSL_X963KDF_HELP_STRING "Enable X9.63 KDF support (default: disabled)")
- add_option(WOLFSSL_X963KDF ${WOLFSSL_X963KDF_HELP_STRING} "no" "yes;no")
- add_option("WOLFSSL_ENC_THEN_MAC"
- "Enable Encryptr-Then-Mac extension (default: enabled)"
- "yes" "yes;no")
- if(WOLFSSL_APACHE_HTTPD)
- override_cache(WOLFSSL_ENC_THEN_MAC "no")
- endif()
- if(WOLFSSL_TLSX)
- override_cache(WOLFSSL_ENC_THEN_MAC "yes")
- endif()
- if(WOLFSSL_SNIFFER)
- override_cache(WOLFSSL_ENC_THEN_MAC "no")
- endif()
- add_option("WOLFSSL_STUNNEL"
- "Enable stunnel (default: disabled)"
- "no" "yes;no")
- if(WOLFSSL_ENC_THEN_MAC)
- list(APPEND WOLFSSL_DEFINITIONS "-DHAVE_ENCRYPT_THEN_MAC")
- endif()
- if(NOT WOLFSSL_PSK AND
- NOT WOLFSSL_LEAN_PSK AND
- NOT WOLFSSL_STUNNEL)
- list(APPEND WOLFSSL_DEFINITIONS "-DNO_PSK")
- endif()
- set(WOLFSSL_MD4_HELP_STRING "Enable MD4 (default: disabled)")
- add_option("WOLFSSL_MD4" ${WOLFSSL_MD4_HELP_STRING} "no" "yes;no")
- if(NOT WOLFSSL_MD4)
- if(WOLFSSL_STUNNEL OR WOLFSSL_WPAS)
- override_cache(WOLFSSL_MD4 "yes")
- else()
- list(APPEND WOLFSSL_DEFINITIONS "-DNO_MD4")
- endif()
- endif()
- add_option("WOLFSSL_ENCKEYS"
- "Enable PEM encrypted key support (default: disabled)"
- "no" "yes;no")
- if(NOT WOLFSSL_ENCKEYS)
- if(WOLFSSL_OPENSSLEXTRA OR
- WOLFSSL_WEBSERVER OR
- WOLFSSL_WPAS)
- override_cache(WOLFSSL_ENCKEYS "yes")
- endif()
- endif()
- if(WOLFSSL_ENCKEYS)
- list(APPEND WOLFSSL_DEFINITIONS "-DWOLFSSL_ENCRYPTED_KEYS")
- endif()
- set(WOLFSSL_PKCS12_HELP_STRING "Enable pkcs12 (default: enabled)")
- add_option("WOLFSSL_PKCS12" ${WOLFSSL_PKCS12_HELP_STRING} "yes" "yes;no")
- if(NOT WOLFSSL_ASN)
- override_cache(WOLFSSL_PKCS12 "no")
- endif()
- if(NOT WOLFSSL_PKCS12)
- list(APPEND WOLFSSL_DEFINITIONS "-DNO_PKCS12")
- endif()
- add_option("WOLFSSL_PWDBASED"
- "Enable PWDBASED (default: disabled)"
- "no" "yes;no")
- if(NOT WOLFSSL_PWDBASED)
- if(WOLFSSL_OPENSSLEXTRA OR
- WOLFSSL_OPENSSLALL OR
- WOLFSSL_WEBSERVER OR
- WOLFSSL_ENC_KEYS OR
- WOLFSSL_PKCS12)
- override_cache(WOLFSSL_PWDBASED "yes")
- else()
- list(APPEND WOLFSSL_DEFINITIONS "-DNO_PWDBASED")
- endif()
- endif()
- add_option("WOLFSSL_FAST_MATH"
- "Enable fast math ops (default: disabled)"
- "no" "yes;no")
- if(WOLFSSL_FAST_MATH)
- if(WOLFSSL_LEAN_PSK OR NOT WOLFSSL_ASN)
- if(NOT WOLFSSL_DH AND
- NOT WOLFSSL_ECC AND
- NOT WOLFSSL_RSA)
- override_cache(WOLFSSL_FAST_MATH "no")
- else()
- list(APPEND WOLFSSL_DEFINITIONS "-DUSE_FAST_MATH")
- set(WOLFSSL_SLOWMATH "no")
- endif()
- else()
- list(APPEND WOLFSSL_DEFINITIONS "-DUSE_FAST_MATH")
- set(WOLFSSL_SLOWMATH "no")
- endif()
- endif()
- if("${CMAKE_SYSTEM_PROCESSOR}" MATCHES "x86_64|AMD64")
- set(WOLFSSL_X86_64_BUILD ON)
- add_option("WOLFSSL_X86_64_BUILD_ASM" "Build ASM files" "yes" "yes;no")
- list(APPEND WOLFSSL_DEFINITIONS "-DWOLFSSL_X86_64_BUILD")
- elseif("${CMAKE_SYSTEM_PROCESSOR}" MATCHES "aarch64|arm64")
- list(APPEND WOLFSSL_DEFINITIONS "-DWOLFSSL_AARCH64_BUILD")
- endif()
- add_option("WOLFSSL_SP_MATH_ALL"
- "Enable Single Precision math implementation for full algorithm suite (default: enabled)"
- "yes" "yes;no")
- if(WOLFSSL_LINUX_KM)
- set(EXAMPLES_DEFAULT "no")
- else()
- set(EXAMPLES_DEFAULT "yes")
- endif()
- add_option("WOLFSSL_EXAMPLES"
- "Enable examples (default: enabled)"
- ${EXAMPLES_DEFAULT} "yes;no")
- if(NOT WOLFSSL_FILESYSTEM OR
- NOT WOLFSSL_INLINE OR
- WOLFSSL_CRYPT_ONLY)
- override_cache(WOLFSSL_EXAMPLES "no")
- endif()
- if(WOLFSSL_LINUX_KM)
- set(CRYPT_TESTS_DEFAULT "no")
- else()
- set(CRYPT_TESTS_DEFAULT "yes")
- endif()
- add_option("WOLFSSL_CRYPT_TESTS"
- "Enable Crypt Bench/Test (default: enabled)"
- ${CRYPT_TESTS_DEFAULT} "yes;no")
- add_option("WOLFSSL_CRYPT_TESTS_LIBS"
- "Build static libraries from the wolfCrypt test and benchmark sources (default: disabled)"
- "no" "yes;no")
- add_option("WOLFSSL_CRYPT_TESTS_HELP"
- "Add help text to wolfCrypt test (default: disabled)"
- "no" "yes;no")
- add_option("WOLFSSL_ASYNC_THREADS"
- "Enable Asynchronous Threading (default: enabled)"
- "yes" "yes;no")
- if(WOLFSSL_ASYNC_CRYPT AND WOLFSSL_ASYNC_THREADS)
- if(CMAKE_USE_PTHREADS_INIT)
- override_cache(WOLFSSL_ASYNC_THREADS "yes")
- else()
- override_cache(WOLFSSL_ASYNC_THREADS "no")
- endif()
- else()
- override_cache(WOLFSSL_ASYNC_THREADS "no")
- endif()
- if(WOLFSSL_ASYNC_THREADS)
- list(APPEND WOLFSSL_LINK_LIBS Threads::Threads)
- list(APPEND WOLFSSL_DEFINITIONS "-D_GNU_SOURCE")
- else()
- list(APPEND WOLFSSL_DEFINITIONS "-DWC_NO_ASYNC_THREADING")
- endif()
- add_option("WOLFSSL_CRYPTOCB"
- "Enable crypto callbacks (default: disabled)"
- "no" "yes;no")
- add_option("WOLFSSL_CRYPTOCB_NO_SW_TEST"
- "Disable crypto callback SW testing (default: disabled)"
- "no" "yes;no")
- add_option("WOLFSSL_PKCALLBACKS"
- "Enable public key callbacks (default: disabled)"
- "no" "yes;no")
- add_option("WOLFSSL_OLD_NAMES"
- "Keep backwards compat with old names (default: enabled)"
- "yes" "yes;no")
- if(NOT WOLFSSL_OLD_NAMES AND NOT WOLFSSL_OPENSSL_COEXIST)
- list(APPEND WOLFSSL_DEFINITIONS
- "-DNO_OLD_RNGNAME"
- "-DNO_OLD_WC_NAMES"
- "-DNO_OLD_SSL_NAMES"
- "-DNO_OLD_SHA_NAMES")
- endif()
- add_option("WOLFSSL_DH_DEFAULT_PARAMS"
- "Enables option for default dh parameters (default: disabled)"
- "no" "yes;no")
- if(WOLFSSL_DH_DEFAULT_PARAMS OR NOT WOLFSSL_QT)
- override_cache(WOLFSSL_DH_DEFAULT_PARAMS "yes")
- list(APPEND WOLFSSL_DEFINITIONS "-DHAVE_DH_DEFAULT_PARAMS")
- endif()
- if(NOT WOLFSSL_DES3)
- list(APPEND WOLFSSL_DEFINITIONS "-DNO_DES3")
- else()
- if(WOLFSSL_LEAN_PSK OR WOLFSSL_LEAN_TLS)
- list(APPEND WOLFSSL_DEFINITIONS "-DNO_DES3")
- override_cache(WOLFSSL_DES3 "no")
- endif()
- endif()
- add_option("WOLFSSL_USER_SETTINGS"
- "Use your own user_settings.h and do not add Makefile CFLAGS (default: disabled)"
- "no" "yes;no")
- add_option("WOLFSSL_USER_SETTINGS_ASM"
- "Enable use of user_settings_asm.h in assembly files (default: disabled)"
- "no" "yes;no")
- add_option("WOLFSSL_OPTFLAGS"
- "Enable default optimization CFLAGS for the compiler (default: enabled)"
- "yes" "yes;no")
- add_option("WOLFSSL_SYS_CA_CERTS"
- "Enable ability to load CA certs from OS (default: enabled)"
- "yes" "yes;no")
- if(WOLFSSL_SYS_CA_CERTS)
- if(NOT WOLFSSL_FILESYSTEM)
- message("Can't enable system CA certs without a filesystem.")
- override_cache(WOLFSSL_SYS_CA_CERTS "no")
- elseif(APPLE)
- check_include_file("Security/SecTrustSettings.h" HAVE_SECURITY_SECTRUSTSETTINGS_H)
- check_include_file("Security/SecCertificate.h" HAVE_SECURITY_SECCERTIFICATE_H)
- check_include_file("Security/SecTrust.h" HAVE_SECURITY_SECTRUST_H)
- check_include_file("Security/SecPolicy.h" HAVE_SECURITY_SECPOLICY_H)
- if(HAVE_SECURITY_SECTRUSTSETTINGS_H OR (HAVE_SECURITY_SECCERTIFICATE_H
- AND HAVE_SECURITY_SECTRUST_H
- AND HAVE_SECURITY_SECPOLICY_H))
- find_library(CORE_FOUNDATION_FRAMEWORK CoreFoundation)
- if(NOT CORE_FOUNDATION_FRAMEWORK)
- message(FATAL_ERROR "Can't enable system CA certs without CoreFoundation framework.")
- else()
- find_library(SECURITY_FRAMEWORK Security)
- if(NOT SECURITY_FRAMEWORK)
- message(FATAL_ERROR "Can't enable system CA certs without Security framework.")
- endif()
- endif()
- if(NOT HAVE_SECURITY_SECTRUSTSETTINGS_H AND HAVE_SECURITY_SECCERTIFICATE_H
- AND HAVE_SECURITY_SECTRUST_H
- AND HAVE_SECURITY_SECPOLICY_H)
- list(APPEND WOLFSSL_DEFINITIONS "-DWOLFSSL_APPLE_NATIVE_CERT_VALIDATION")
- endif()
- else()
- message(FATAL_ERROR "Can't enable system CA certs without Apple Security.framework headers.")
- endif()
- endif()
- if(WOLFSSL_SYS_CA_CERTS)
- list(APPEND WOLFSSL_DEFINITIONS "-DWOLFSSL_SYS_CA_CERTS")
- endif()
- endif()
- if(WOLFSSL_AESCCM)
- list(APPEND WOLFSSL_DEFINITIONS "-DHAVE_AESCCM")
- endif()
- if(WOLFSSL_AESOFB)
- list(APPEND WOLFSSL_DEFINITIONS "-DWOLFSSL_AES_OFB" "-DWOLFSSL_AES_DIRECT")
- endif()
- if(WOLFSSL_TPM)
- override_cache(WOLFSSL_KEYGEN "yes")
- override_cache(WOLFSSL_CERTGEN "yes")
- override_cache(WOLFSSL_CRYPTOCB "yes")
- override_cache(WOLFSSL_CERTREQ "yes")
- override_cache(WOLFSSL_CERTEXT "yes")
- override_cache(WOLFSSL_PKCS7 "yes")
- override_cache(WOLFSSL_AESCFB "yes")
- endif()
- if(WOLFSSL_AESCFB)
- list(APPEND WOLFSSL_DEFINITIONS "-DWOLFSSL_AES_CFB")
- endif()
- if(WOLFSSL_PKCS7)
- list(APPEND WOLFSSL_DEFINITIONS "-DHAVE_PKCS7")
- override_cache(WOLFSSL_AESKEYWRAP "yes")
- if(WOLFSSL_ECC)
- override_cache(WOLFSSL_X963KDF "yes")
- endif()
- endif()
- if(WOLFSSL_X963KDF)
- list(APPEND WOLFSSL_DEFINITIONS "-DHAVE_X963_KDF")
- endif()
- if(WOLFSSL_AESKEYWRAP)
- list(APPEND WOLFSSL_DEFINITIONS
- "-DHAVE_AES_KEYWRAP"
- "-DWOLFSSL_AES_DIRECT"
- )
- endif()
- add_option("WOLFSSL_HPKE"
- "Enable wolfSSL hybrid public key encryption (default: disabled)"
- "no" "yes;no")
- add_option("WOLFSSL_ECH"
- "Enable wolfSSL encrypted client hello (default: disabled)"
- "no" "yes;no")
- add_option("WOLFSSL_KEYING_MATERIAL"
- "Enable wolfSSL keying material export (default: disabled)"
- "no" "yes;no")
- if(WOLFSSL_HPKE)
- if(NOT WOLFSSL_ECC)
- message(FATAL_ERROR "HPKE supported only with ECC (WOLFSSL_ECC)")
- endif()
- list(APPEND WOLFSSL_DEFINITIONS "-DHAVE_HPKE")
- override_cache(WOLFSSL_HKDF "yes")
- endif()
- if(WOLFSSL_ECH)
- if(NOT WOLFSSL_HPKE)
- message(FATAL_ERROR "ECH supported only with HPKE (WOLFSSL_HPKE)")
- endif()
- if(NOT WOLFSSL_SNI)
- message(FATAL_ERROR "ECH supported only with SNI (WOLFSSL_SNI)")
- endif()
- list(APPEND WOLFSSL_DEFINITIONS "-DHAVE_ECH")
- endif()
- if(WOLFSSL_KEYING_MATERIAL)
- list(APPEND WOLFSSL_DEFINITIONS "-DHAVE_KEYING_MATERIAL")
- endif()
- if(WOLFSSL_KEYGEN)
- list(APPEND WOLFSSL_DEFINITIONS "-DWOLFSSL_KEY_GEN")
- endif()
- if(WOLFSSL_CERTGEN)
- list(APPEND WOLFSSL_DEFINITIONS "-DWOLFSSL_CERT_GEN")
- endif()
- if(WOLFSSL_CERTREQ)
- list(APPEND WOLFSSL_DEFINITIONS "-DWOLFSSL_CERT_REQ")
- endif()
- if(WOLFSSL_CERTEXT)
- list(APPEND WOLFSSL_DEFINITIONS "-DWOLFSSL_CERT_EXT")
- endif()
- if(WOLFSSL_CERTGENCACHE)
- list(APPEND WOLFSSL_DEFINITIONS "-DWOLFSSL_CERT_GEN_CACHE")
- endif()
- if(WOLFSSL_CRYPTOCB)
- list(APPEND WOLFSSL_DEFINITIONS "-DWOLF_CRYPTO_CB")
- endif()
- if(WOLFSSL_CRYPTOCB_NO_SW_TEST)
- list(APPEND WOLFSSL_DEFINITIONS "-DWC_TEST_NO_CRYPTOCB_SW_TEST")
- endif()
- if(WOLFSSL_PKCALLBACKS)
- list(APPEND WOLFSSL_DEFINITIONS "-DHAVE_PK_CALLBACKS")
- endif()
- if(WOLFSSL_OCSPSTAPLING)
- list(APPEND WOLFSSL_DEFINITIONS "-DHAVE_CERTIFICATE_STATUS_REQUEST" "-DHAVE_TLS_EXTENSIONS")
- override_cache(WOLFSSL_OCSP "yes")
- endif()
- if(WOLFSSL_OCSPSTAPLING_V2)
- list(APPEND WOLFSSL_DEFINITIONS "-DHAVE_CERTIFICATE_STATUS_REQUEST_V2" "-DHAVE_TLS_EXTENSIONS")
- override_cache(WOLFSSL_OCSP "yes")
- endif()
- if (WOLFSSL_OCSP)
- list(APPEND WOLFSSL_DEFINITIONS "-DHAVE_OCSP")
- endif()
- if (WOLFSSL_CRL STREQUAL "yes")
- list(APPEND WOLFSSL_DEFINITIONS "-DHAVE_CRL")
- elseif(WOLFSSL_CRL STREQUAL "io")
- list(APPEND WOLFSSL_DEFINITIONS "-DHAVE_CRL" "-DHAVE_CRL_IO")
- endif()
- if (WOLFSSL_SNI)
- list(APPEND WOLFSSL_DEFINITIONS "-DHAVE_TLS_EXTENSIONS" "-DHAVE_SNI")
- endif()
- if (WOLFSSL_TLSX)
- list(APPEND WOLFSSL_DEFINITIONS
- "-DHAVE_TLS_EXTENSIONS"
- "-DHAVE_SNI"
- "-DHAVE_MAX_FRAGMENT"
- "-DHAVE_TRUNCATED_HMAC"
- "-DHAVE_ALPN"
- "-DHAVE_TRUSTED_CA")
- if (WOLFSSL_ECC OR WOLFSSL_CURVE25519 OR WOLFSSL_CURVE448 OR WOLFSSL_TLS13)
- list(APPEND WOLFSSL_DEFINITIONS "-DHAVE_SUPPORTED_CURVES")
- endif()
- endif()
- add_option("WOLFSSL_CAAM"
- "Enable use of CAAM with NXP (default: disabled)"
- "no" "yes;no")
- if (WOLFSSL_CAAM)
- list(APPEND WOLFSSL_DEFINITIONS "-DWOLFSSL_CAAM")
- endif()
- if (WOLFSSL_ARIA)
- list(APPEND WOLFSSL_DEFINITIONS "-DHAVE_ARIA")
- endif()
- generate_build_flags()
- if(WOLFSSL_USER_SETTINGS)
- set(WOLFSSL_DEFINITIONS "-DWOLFSSL_USER_SETTINGS")
- endif()
- if(WOLFSSL_USER_SETTINGS_ASM)
- if(WOLFSSL_USER_SETTINGS)
- list(APPEND WOLFSSL_DEFINITIONS "-DWOLFSSL_USER_SETTINGS_ASM")
- if(WIN32)
- execute_process(COMMAND
- $ENV{SHELL} ${CMAKE_CURRENT_SOURCE_DIR}/scripts/user_settings_asm.sh
- "${CMAKE_C_FLAGS} ${CMAKE_CXX_FLAGS}"
- RESULT_VARIABLE USER_SETTINGS_ASM_RET)
- else()
- execute_process(COMMAND
- ${CMAKE_CURRENT_SOURCE_DIR}/scripts/user_settings_asm.sh
- "${CMAKE_C_FLAGS} ${CMAKE_CXX_FLAGS}"
- RESULT_VARIABLE USER_SETTINGS_ASM_RET)
- endif()
- if (NOT USER_SETTINGS_ASM_RET EQUAL 0)
- message(FATAL_ERROR
- "${CMAKE_CURRENT_SOURCE_DIR}/scripts/user_settings_asm.sh failed.")
- endif()
- else()
- message(FATAL_ERROR
- "Must have WOLFSSL_USER_SETTINGS to enable WOLFSSL_USER_SETTINGS_ASM.")
- endif()
- endif()
- add_option("WOLFSSL_CONFIG_H"
- "Enable generation of config.h and define HAVE_CONFIG_H (default: enabled)"
- "yes" "yes;no")
- if(WOLFSSL_CONFIG_H)
- add_definitions("-DHAVE_CONFIG_H")
- configure_file("${CMAKE_CURRENT_SOURCE_DIR}/cmake/config.in"
- "${CMAKE_CURRENT_BINARY_DIR}/config.h" )
- set(abs_top_srcdir ${CMAKE_CURRENT_SOURCE_DIR})
- set(abs_top_builddir ${CMAKE_CURRENT_BINARY_DIR})
- configure_file("${CMAKE_CURRENT_SOURCE_DIR}/wolfcrypt/test/test_paths.h.in"
- "${CMAKE_CURRENT_BINARY_DIR}/wolfcrypt/test/test_paths.h" )
- endif()
- if (EXISTS "${CMAKE_CURRENT_SOURCE_DIR}/wolfssl/options.h")
- file(REMOVE "${CMAKE_CURRENT_SOURCE_DIR}/wolfssl/options.h")
- endif()
- if (EXISTS "${CMAKE_CURRENT_SOURCE_DIR}/config.h")
- file(REMOVE "${CMAKE_CURRENT_SOURCE_DIR}/config.h")
- endif()
- add_definitions("-DWOLFSSL_IGNORE_FILE_WARN")
- message(STATUS "Generating user options header...")
- if (${CMAKE_DISABLE_SOURCE_CHANGES})
- set(WOLFSSL_BUILD_OUT_OF_TREE_DEFAULT "${CMAKE_DISABLE_SOURCE_CHANGES}")
- else()
- set(WOLFSSL_BUILD_OUT_OF_TREE_DEFAULT "yes")
- endif()
- add_option("WOLFSSL_BUILD_OUT_OF_TREE"
- "Don't generate files in the source tree (default: ${WOLFSSL_BUILD_OUT_OF_TREE_DEFAULT})"
- "${WOLFSSL_BUILD_OUT_OF_TREE_DEFAULT}" "yes;no")
- if (${WOLFSSL_BUILD_OUT_OF_TREE})
- set(WOLFSSL_OUTPUT_BASE ${CMAKE_CURRENT_BINARY_DIR})
- else()
- set(WOLFSSL_OUTPUT_BASE ${CMAKE_CURRENT_SOURCE_DIR})
- endif()
- set(OPTION_FILE "${WOLFSSL_OUTPUT_BASE}/wolfssl/options.h")
- add_option("ENABLE_SCCACHE"
- "Enable sccache (default: disabled)"
- "no" "yes;no")
- if (ENABLE_SCCACHE AND (NOT WOLFSSL_SCCACHE_ALREADY_SET_FLAG))
- find_program(SCCACHE sccache REQUIRED)
- if(SCCACHE)
- message(STATUS "Enable sccache")
- if(CMAKE_C_COMPILER_LAUNCHER)
- set(CMAKE_C_COMPILER_LAUNCHER "${CMAKE_C_COMPILER_LAUNCHER}" "${SCCACHE}")
- else()
- set(CMAKE_C_COMPILER_LAUNCHER "${SCCACHE}")
- endif()
- if(CMAKE_CXX_COMPILER_LAUNCHER)
- set(CMAKE_CXX_COMPILER_LAUNCHER "${CMAKE_CXX_COMPILER_LAUNCHER}" "${SCCACHE}")
- else()
- set(CMAKE_CXX_COMPILER_LAUNCHER "${SCCACHE}")
- endif()
- if (MSVC)
- if(CMAKE_BUILD_TYPE STREQUAL "Debug")
- string(REPLACE "/Zi" "/Z7" CMAKE_CXX_FLAGS_DEBUG "${CMAKE_CXX_FLAGS_DEBUG}")
- string(REPLACE "/Zi" "/Z7" CMAKE_C_FLAGS_DEBUG "${CMAKE_C_FLAGS_DEBUG}")
- elseif(CMAKE_BUILD_TYPE STREQUAL "Release")
- string(REPLACE "/Zi" "/Z7" CMAKE_CXX_FLAGS_RELEASE "${CMAKE_CXX_FLAGS_RELEASE}")
- string(REPLACE "/Zi" "/Z7" CMAKE_C_FLAGS_RELEASE "${CMAKE_C_FLAGS_RELEASE}")
- elseif(CMAKE_BUILD_TYPE STREQUAL "RelWithDebInfo")
- string(REPLACE "/Zi" "/Z7" CMAKE_CXX_FLAGS_RELWITHDEBINFO "${CMAKE_CXX_FLAGS_RELWITHDEBINFO}")
- string(REPLACE "/Zi" "/Z7" CMAKE_C_FLAGS_RELWITHDEBINFO "${CMAKE_C_FLAGS_RELWITHDEBINFO}")
- endif()
- endif()
- set(WOLFSSL_SCCACHE_ALREADY_SET_FLAG ON)
- endif()
- endif()
- file(REMOVE ${OPTION_FILE})
- option(BUILD_SHARED_LIBS "Build shared libraries (.dll/.so) instead of static ones (.lib/.a)" ON)
- set(LIB_SOURCES "")
- generate_lib_src_list("${LIB_SOURCES}")
- if(BUILD_SHARED_LIBS)
- message(STATUS "BUILD_SHARED_LIBS enabled: ${LIB_SOURCES}")
- add_library(wolfssl SHARED ${LIB_SOURCES})
- else()
- message(STATUS "Static Libs: ${LIB_SOURCES}")
- add_library(wolfssl STATIC ${LIB_SOURCES})
- endif()
- add_library(wolfssl::wolfssl ALIAS wolfssl)
- if (NOT "$ENV{ARIA_DIR}" STREQUAL "")
- message(STATUS "Found Environment variable ARIA_DIR=$ENV{ARIA_DIR}")
- if(WOLFSSL_ARIA)
- message(STATUS "wolfSSL WOLFSSL_ARIA is enabled")
- else()
- message(STATUS "wolfSSL WOLFSSL_ARIA is not enabled. To enable, specify a user_settings.h file or run: cmake .. -DWOLFSSL_ARIA=yes")
- message(STATUS "Clear the ARIA_DIR environment variable to otherwise suppress this message when not using ARIA ciphers.")
- endif()
- endif()
- if(WOLFSSL_ARIA)
- message(STATUS "WOLFSSL_ARIA is enabled")
- find_package(ARIA)
- if(ARIA_FOUND)
- message(STATUS "ARIA find_package() success.")
- else()
- message(FATAL_ERROR "WOLFSSL_ARIA is enabled, but find_package() did not find ARIA MagicCrypto.\n"
- "Check ARIA_DIR environment variable and/or copy MagicCrypto directory locally.")
- endif()
- list(APPEND WOLFSSL_LINK_LIBS "${ARIA_LIB_FILE}")
- if(ARIA_IS_LOCAL)
- include_directories("wolfssl/wolfcrypt/port/aria" "MagicCrypto/include")
- else()
- include_directories("wolfssl/wolfcrypt/port/aria")
- message(STATUS "ARIA_IS_LOCAL is false, appending ${ARIA_INCLUDE_DIR} to WOLFSSL_INCLUDE_DIRS")
- list(APPEND WOLFSSL_INCLUDE_DIRS "${ARIA_INCLUDE_DIR}")
- endif()
- add_library(MagicCrypto_lib
- ${CMAKE_CURRENT_SOURCE_DIR}/wolfcrypt/src/port/aria/aria-crypt.c
- ${CMAKE_CURRENT_SOURCE_DIR}/wolfcrypt/src/port/aria/aria-cryptocb.c
- )
- set_target_properties(MagicCrypto_lib PROPERTIES OUTPUT_NAME "MagicCrypto")
- target_link_libraries(MagicCrypto_lib wolfssl)
- target_compile_options(MagicCrypto_lib PRIVATE "-DHAVE_ARIA")
- set(HAVE_ARIA 1)
- list(APPEND WOLFSSL_DEFINITIONS "-DHAVE_ARIA")
- message(STATUS "ARIA Check: WOLFSSL_LINK_LIBS = ${WOLFSSL_LINK_LIBS}")
- endif()
- foreach(DEF IN LISTS WOLFSSL_DEFINITIONS)
- string(REGEX MATCH "^(-D)?([^=]+)(=(.*))?$" DEF_MATCH ${DEF})
- if (NOT "${CMAKE_MATCH_4}" STREQUAL "")
- set(${CMAKE_MATCH_2} ${CMAKE_MATCH_4})
- else()
- set(${CMAKE_MATCH_2} 1)
- endif()
- endforeach()
- configure_file(${CMAKE_CURRENT_SOURCE_DIR}/cmake/options.h.in ${OPTION_FILE})
- set_target_properties(wolfssl
- PROPERTIES
- SOVERSION ${WOLFSSL_LIBRARY_VERSION_FIRST}
- VERSION ${LIBTOOL_FULL_VERSION}
- )
- target_compile_definitions(wolfssl PRIVATE "BUILDING_WOLFSSL")
- if(${BUILD_SHARED_LIBS})
- target_compile_definitions(wolfssl PUBLIC "WOLFSSL_DLL")
- endif()
- target_compile_definitions(wolfssl PUBLIC ${WOLFSSL_DEFINITIONS})
- if("${WOLFSSL_INCLUDE_DIRS}" STREQUAL "")
- message(STATUS "WOLFSSL_INCLUDE_DIRS is blank. No additional directories will be added.")
- else()
- message(STATUS "WOLFSSL_INCLUDE_DIRS = ${WOLFSSL_INCLUDE_DIRS}")
- endif()
- target_include_directories(wolfssl
- PUBLIC
- $<INSTALL_INTERFACE:include>
- $<BUILD_INTERFACE:${CMAKE_CURRENT_SOURCE_DIR}>
- $<BUILD_INTERFACE:${CMAKE_CURRENT_BINARY_DIR}>
- ${WOLFSSL_INCLUDE_DIRS}
- )
- target_link_libraries(wolfssl PUBLIC ${WOLFSSL_LINK_LIBS})
- if(WIN32)
- target_link_libraries(wolfssl PUBLIC
- $<$<PLATFORM_ID:Windows>:ws2_32 crypt32>)
- elseif(APPLE)
- if(WOLFSSL_SYS_CA_CERTS)
- target_link_libraries(wolfssl PUBLIC
- ${CORE_FOUNDATION_FRAMEWORK}
- ${SECURITY_FRAMEWORK})
- endif()
- else()
- if(WOLFSSL_DH AND NOT WOLFSSL_DH_CONST)
- target_link_libraries(wolfssl
- PUBLIC
- m)
- endif()
- endif()
- enable_testing()
- if(WOLFSSL_EXAMPLES)
- add_executable(client
- ${CMAKE_CURRENT_SOURCE_DIR}/examples/client/client.c)
- target_link_libraries(client wolfssl)
- set_property(TARGET client
- PROPERTY RUNTIME_OUTPUT_DIRECTORY
- ${WOLFSSL_OUTPUT_BASE}/examples/client)
- add_executable(server
- ${CMAKE_CURRENT_SOURCE_DIR}/examples/server/server.c)
- target_link_libraries(server wolfssl)
- set_property(TARGET server
- PROPERTY RUNTIME_OUTPUT_DIRECTORY
- ${WOLFSSL_OUTPUT_BASE}/examples/server)
- add_executable(echoclient
- ${CMAKE_CURRENT_SOURCE_DIR}/examples/echoclient/echoclient.c)
- target_include_directories(echoclient PRIVATE
- ${CMAKE_CURRENT_BINARY_DIR})
- target_link_libraries(echoclient wolfssl)
- set_property(TARGET echoclient
- PROPERTY RUNTIME_OUTPUT_DIRECTORY
- ${WOLFSSL_OUTPUT_BASE}/examples/echoclient)
- add_executable(echoserver
- ${CMAKE_CURRENT_SOURCE_DIR}/examples/echoserver/echoserver.c)
- target_include_directories(echoserver PRIVATE
- ${CMAKE_CURRENT_BINARY_DIR})
- target_link_libraries(echoserver wolfssl)
- set_property(TARGET echoserver
- PROPERTY RUNTIME_OUTPUT_DIRECTORY
- ${WOLFSSL_OUTPUT_BASE}/examples/echoserver)
- if(NOT WIN32 AND NOT WOLFSSL_SINGLE_THREADED)
- add_executable(tls_bench
- ${CMAKE_CURRENT_SOURCE_DIR}/examples/benchmark/tls_bench.c)
- target_link_libraries(tls_bench wolfssl)
- target_link_libraries(tls_bench Threads::Threads)
- set_property(TARGET tls_bench
- PROPERTY RUNTIME_OUTPUT_DIRECTORY
- ${WOLFSSL_OUTPUT_BASE}/examples/benchmark)
- endif()
- add_executable(unit_test
- tests/api.c
- tests/hash.c
- tests/srp.c
- tests/suites.c
- tests/w64wrapper.c
- tests/unit.c
- tests/quic.c
- examples/server/server.c
- examples/client/client.c)
- target_include_directories(unit_test PRIVATE
- ${CMAKE_CURRENT_BINARY_DIR})
- target_compile_options(unit_test PUBLIC "-DNO_MAIN_DRIVER")
- target_link_libraries(unit_test wolfssl)
- target_link_libraries(unit_test Threads::Threads)
- set_property(TARGET unit_test
- PROPERTY RUNTIME_OUTPUT_DIRECTORY
- ${WOLFSSL_OUTPUT_BASE}/tests/)
- set_property(TARGET unit_test
- PROPERTY RUNTIME_OUTPUT_NAME
- unit.test)
- add_test(NAME unit_test
- COMMAND $<TARGET_FILE:unit_test>
- WORKING_DIRECTORY ${CMAKE_CURRENT_SOURCE_DIR})
- endif()
- if(WOLFSSL_CRYPT_TESTS)
- if(WOLFSSL_CRYPT_TESTS_LIBS)
- add_library(wolfcrypttest_lib
- ${CMAKE_CURRENT_SOURCE_DIR}/wolfcrypt/test/test.c)
- set_target_properties(wolfcrypttest_lib PROPERTIES OUTPUT_NAME "wolfcrypttest")
- target_link_libraries(wolfcrypttest_lib wolfssl)
- target_compile_options(wolfcrypttest_lib PRIVATE "-DNO_MAIN_DRIVER")
- if(WOLFSSL_CRYPT_TESTS_HELP)
- target_compile_options(wolfcrypttest_lib PRIVATE "-DHAVE_WOLFCRYPT_TEST_OPTIONS")
- endif()
- add_library(wolfcryptbench_lib
- ${CMAKE_CURRENT_SOURCE_DIR}/wolfcrypt/benchmark/benchmark.c)
- set_target_properties(wolfcryptbench_lib PROPERTIES OUTPUT_NAME "wolfcryptbench")
- target_link_libraries(wolfcryptbench_lib wolfssl)
- target_compile_options(wolfcryptbench_lib PRIVATE "-DNO_MAIN_DRIVER")
- endif()
- add_executable(wolfcrypttest
- ${CMAKE_CURRENT_SOURCE_DIR}/wolfcrypt/test/test.c)
- target_link_libraries(wolfcrypttest wolfssl)
- set_property(TARGET wolfcrypttest
- PROPERTY RUNTIME_OUTPUT_DIRECTORY
- ${WOLFSSL_OUTPUT_BASE}/wolfcrypt/test)
- set_property(TARGET wolfcrypttest
- PROPERTY RUNTIME_OUTPUT_NAME
- testwolfcrypt)
- if(WOLFSSL_CRYPT_TESTS_HELP)
- target_compile_options(wolfcrypttest PRIVATE "-DHAVE_WOLFCRYPT_TEST_OPTIONS")
- endif()
- add_test(NAME wolfcrypttest
- COMMAND $<TARGET_FILE:wolfcrypttest>
- WORKING_DIRECTORY ${CMAKE_CURRENT_SOURCE_DIR})
- add_executable(wolfcryptbench
- ${CMAKE_CURRENT_SOURCE_DIR}/wolfcrypt/benchmark/benchmark.c)
- target_include_directories(wolfcryptbench PRIVATE
- ${CMAKE_CURRENT_BINARY_DIR})
- target_link_libraries(wolfcryptbench wolfssl)
- set_property(TARGET wolfcryptbench
- PROPERTY RUNTIME_OUTPUT_DIRECTORY
- ${WOLFSSL_OUTPUT_BASE}/wolfcrypt/benchmark)
- set_property(TARGET wolfcryptbench
- PROPERTY RUNTIME_OUTPUT_NAME
- benchmark)
- endif()
- include(GNUInstallDirs)
- set(HEADER_EXCLUDE
- "internal.h"
- "wolfssl/wolfcrypt/port/nrf51.h"
- "wolfssl/wolfcrypt/port/arm"
- "wolfssl/wolfcrypt/port/cypress"
- "wolfssl/wolfcrypt/port/Espressif"
- "wolfssl/wolfcrypt/port/iotsafe"
- "wolfssl/wolfcrypt/port/nxp"
- "wolfssl/wolfcrypt/port/pic"
- "wolfssl/wolfcrypt/port/Renesas"
- "wolfssl/wolfcrypt/port/silabs"
- "wolfssl/wolfcrypt/port/st"
- "wolfssl/wolfcrypt/port/ti"
- "wolfssl/wolfcrypt/port/xilinx"
- )
- if(BUILD_DISTRO)
- list(APPEND HEADER_EXCLUDE
- "options.h")
- endif()
- if(NOT BUILD_CRYPTOAUTHLIB)
- list(APPEND HEADER_EXCLUDE
- "wolfssl/wolfcrypt/port/atmel")
- endif()
- if(NOT BUILD_AFALG)
- list(APPEND HEADER_EXCLUDE
- "wolfssl/wolfcrypt/port/af_alg")
- endif()
- if(NOT BUILD_KCAPI)
- list(APPEND HEADER_EXCLUDE
- "wolfssl/wolfcrypt/port/kcapi"
- )
- endif()
- if(NOT BUILD_DEVCRYPTO)
- list(APPEND HEADER_EXCLUDE
- "wolfssl/wolfcrypt/port/devcrypto")
- endif()
- if(NOT BUILD_ASYNCCRYPT)
- list(APPEND HEADER_EXCLUDE
- "wolfssl/wolfcrypt/async.h")
- endif()
- if(NOT BUILD_PKCS11)
- list(APPEND HEADER_EXCLUDE
- "wolfssl/wolfcrypt/wc_pkcs11.h"
- "wolfssl/wolfcrypt/pkcs11.h"
- )
- endif()
- if(NOT BUILD_CAVIUM AND NOT BUILD_OCTEON_SYNC)
- list(APPEND HEADER_EXCLUDE
- "wolfssl/wolfcrypt/port/cavium")
- else()
- if(NOT BUILD_CAVIUM)
- list(APPEND HEADER_EXCLUDE
- "wolfssl/wolfcrypt/port/cavium/cavium_nitrox.h")
- endif()
- if(NOT BUILD_OCTEON_SYNC)
- list(APPEND HEADER_EXCLUDE
- "wolfssl/wolfcrypt/port/cavium/cavium_octeon_sync.h"
- )
- endif()
- endif()
- if(NOT BUILD_INTEL_QA AND NOT BUILD_INTEL_QA_SYNC)
- list(APPEND HEADER_EXCLUDE
- "wolfssl/wolfcrypt/port/intel")
- else()
- if(NOT BUILD_INTEL_QA)
- list(APPEND HEADER_EXCLUDE
- "wolfssl/wolfcrypt/port/intel/quickassist.h"
- "wolfssl/wolfcrypt/port/intel/quickassist_mem.h"
- )
- endif()
- if(NOT BUILD_INTEL_QA_SYNC)
- list(APPEND HEADER_EXCLUDE
- "wolfssl/wolfcrypt/port/intel/quickassist_sync.h")
- endif()
- endif()
- if(NOT BUILD_SP)
- list(APPEND HEADER_EXCLUDE
- "wolfssl/wolfcrypt/sp.h")
- endif()
- if(NOT BUILD_SP_INT)
- list(APPEND HEADER_EXCLUDE
- "wolfssl/wolfcrypt/sp_int.h")
- endif()
- if(NOT BUILD_SELFTEST)
- list(APPEND HEADER_EXCLUDE
- "wolfssl/wolfcrypt/selftest.h")
- endif()
- if(NOT BUILD_FIPS OR BUILD_FIPS_V1)
- list(APPEND HEADER_EXCLUDE
- "wolfssl/wolfcrypt/fips.h")
- endif()
- if(NOT BUILD_QNXCAAM OR BUILD_CAAM)
- list(APPEND HEADER_EXCLUDE
- "wolfssl/wolfcrypt/port/caam"
- )
- endif()
- list(JOIN HEADER_EXCLUDE "|" EXCLUDED_HEADERS_REGEX)
- string(PREPEND EXCLUDED_HEADERS_REGEX "(")
- string(APPEND EXCLUDED_HEADERS_REGEX ")")
- if(WOLFSSL_INSTALL)
- set(INSTALLED_EXAMPLES
- ${CMAKE_CURRENT_SOURCE_DIR}/examples/echoserver/echoserver.c
- ${CMAKE_CURRENT_SOURCE_DIR}/examples/sctp/sctp-server.c
- ${CMAKE_CURRENT_SOURCE_DIR}/examples/sctp/sctp-client-dtls.c
- ${CMAKE_CURRENT_SOURCE_DIR}/examples/sctp/sctp-client.c
- ${CMAKE_CURRENT_SOURCE_DIR}/examples/sctp/sctp-server-dtls.c
- ${CMAKE_CURRENT_SOURCE_DIR}/examples/echoclient/echoclient.c
- ${CMAKE_CURRENT_SOURCE_DIR}/examples/server/server.c
- ${CMAKE_CURRENT_SOURCE_DIR}/examples/benchmark/tls_bench.c
- ${CMAKE_CURRENT_SOURCE_DIR}/examples/client/client.c)
- install(TARGETS wolfssl
- EXPORT wolfssl-targets
- LIBRARY DESTINATION lib
- ARCHIVE DESTINATION lib
- RUNTIME DESTINATION bin
- )
- install(DIRECTORY ${WOLFSSL_OUTPUT_BASE}/wolfssl/
- DESTINATION ${CMAKE_INSTALL_INCLUDEDIR}/wolfssl
- FILES_MATCHING PATTERN "*.h"
- REGEX ${EXCLUDED_HEADERS_REGEX} EXCLUDE)
- install(DIRECTORY ${CMAKE_CURRENT_SOURCE_DIR}/wolfssl/
- DESTINATION ${CMAKE_INSTALL_INCLUDEDIR}/wolfssl
- FILES_MATCHING PATTERN "*.h"
- REGEX ${EXCLUDED_HEADERS_REGEX} EXCLUDE)
- install(FILES ${INSTALLED_EXAMPLES}
- DESTINATION ${CMAKE_INSTALL_DOCDIR}/example)
- install(FILES
- ${CMAKE_CURRENT_SOURCE_DIR}/doc/README.txt
- ${CMAKE_CURRENT_SOURCE_DIR}/certs/taoCert.txt
- DESTINATION ${CMAKE_INSTALL_DOCDIR})
- install(EXPORT wolfssl-targets
- DESTINATION ${CMAKE_INSTALL_LIBDIR}/cmake/wolfssl
- FILE wolfssl-targets.cmake
- NAMESPACE wolfssl::)
- set(prefix ${CMAKE_INSTALL_PREFIX})
- set(exec_prefix "\${prefix}")
- set(libdir "\${exec_prefix}/lib")
- set(includedir "\${prefix}/include")
- set(VERSION ${PROJECT_VERSION})
- get_target_property(_wolfssl_dep_libs wolfssl LINK_LIBRARIES)
- list(FIND _wolfssl_dep_libs m _dep_libm)
- if ("${_dep_libm}" GREATER -1)
- set(LIBM -lm)
- else()
- set(LIBM)
- endif()
- configure_file(support/wolfssl.pc.in ${CMAKE_CURRENT_BINARY_DIR}/support/wolfssl.pc @ONLY)
- install(FILES ${CMAKE_CURRENT_BINARY_DIR}/support/wolfssl.pc
- DESTINATION ${CMAKE_INSTALL_LIBDIR}/pkgconfig)
- include(CMakePackageConfigHelpers)
- configure_package_config_file(${CMAKE_CURRENT_SOURCE_DIR}/cmake/Config.cmake.in
- "${CMAKE_CURRENT_BINARY_DIR}/wolfssl-config.cmake"
- INSTALL_DESTINATION "${CMAKE_INSTALL_LIBDIR}/cmake/wolfssl"
- NO_SET_AND_CHECK_MACRO
- NO_CHECK_REQUIRED_COMPONENTS_MACRO
- )
- export(EXPORT wolfssl-targets
- FILE "${CMAKE_CURRENT_BINARY_DIR}/wolfssl-targets.cmake"
- NAMESPACE wolfssl::
- )
- write_basic_package_version_file(
- "${CMAKE_CURRENT_BINARY_DIR}/wolfssl-config-version.cmake"
- VERSION "${wolfssl_VERSION_MAJOR}.${wolfssl_VERSION_MINOR}"
- COMPATIBILITY AnyNewerVersion
- )
- install(FILES
- ${CMAKE_CURRENT_BINARY_DIR}/wolfssl-config.cmake
- ${CMAKE_CURRENT_BINARY_DIR}/wolfssl-config-version.cmake
- DESTINATION ${CMAKE_INSTALL_LIBDIR}/cmake/wolfssl
- )
- endif()
|