Use 2048-bit RSA keys for auto-generated certificates.

[test.git] / configure.ac

diff --git a/configure.ac b/configure.ac
index 84d420ef25c1c414d8562e792e64b221d1030f01..c4a4d557927496ee64553b304474e84400a8fe86 100644 (file)
--- a/configure.ac
+++ b/configure.ac
@@ -1,8 +1,8 @@
 AC_PREREQ(2.57)
 
 dnl This is the one location where the authoritative version number is stored
-AC_INIT(shellinabox, 2.9, markus@shellinabox.com)
-VCS_REVISION=149
+AC_INIT(shellinabox, 2.10, markus@shellinabox.com)
+VCS_REVISION=239
 AC_SUBST(VCS_REVISION)
 AC_DEFINE_UNQUOTED(VCS_REVISION, "${VCS_REVISION}",
                    [Most recent revision number in the version control system])
@@ -20,8 +20,8 @@ AC_C_CONST
 AC_PROG_GCC_TRADITIONAL
 
 dnl Check for header files that do not exist on all platforms
-AC_CHECK_HEADERS([libutil.h pthread.h pty.h sys/prctl.h sys/uio.h util.h      \
-                  utmp.h utmpx.h])
+AC_CHECK_HEADERS([libutil.h pthread.h pty.h strings.h sys/prctl.h sys/uio.h  \
+                  util.h utmp.h utmpx.h])
 
 dnl Most systems require linking against libutil.so in order to get login_tty()
 AC_CHECK_FUNCS(login_tty, [],
@@ -33,8 +33,8 @@ dnl Use strlcat() instead of strncat() to avoid spurious warnings
 AC_CHECK_FUNCS([strlcat])
 
 dnl Prefer thread-safe functions, if available
-AC_CHECK_FUNCS([getgrgid_r getgrnam_r getpwnam_r getpwuid_r openpty          \
-                strcasestr ])
+AC_CHECK_FUNCS([getgrgid_r getgrnam_r gethostbyname_r getpwnam_r getpwuid_r  \
+                openpty strcasestr getresuid getresgid setresuid setresgid ])
 
 dnl We prefer ptsname_r(), but will settle for ptsname() if necessary
 AC_TRY_LINK([#ifndef _XOPEN_SOURCE
@@ -55,6 +55,56 @@ AC_TRY_LINK([#include <pthread.h>
             [AC_DEFINE(HAVE_SIGWAIT, 1,
                        Define to 1 if you have a working sigwait)])
 
+dnl Not every system has support for isnan()
+AC_TRY_LINK([#include <math.h>],
+            [if (isnan(0.0)) return 1;],
+            [AC_DEFINE(HAVE_ISNAN, 1,
+                       Define to 1 if you have support for isnan)])
+
+dnl Even if utmpx.h exists, not all systems have support for updwtmpx()
+AC_TRY_LINK([#include <utmp.h>],
+            [updwtmp(0, 0);],
+            [AC_DEFINE(HAVE_UPDWTMP, 1,
+                       Define to 1 if you have support for updwtmp)])
+AC_TRY_LINK([#include <utmpx.h>],
+            [updwtmpx(0, 0);],
+            [AC_DEFINE(HAVE_UPDWTMPX, 1,
+                       Define to 1 if you have support for updwtmpx)])
+
+dnl Check if the compiler supports aliasing of symbols
+AC_TRY_LINK([void x(void) { };
+             void y(void) __attribute__((alias("x")));],
+            [y();],
+            [AC_DEFINE(HAVE_ATTRIBUTE_ALIAS, 1,
+                       Define to 1 if you have support for symbol aliasing)])
+
+dnl Check if the compiler has support to mark parameters as unused
+AC_TRY_LINK([void x(int i __attribute__((unused))) __attribute__((unused));],
+            [],
+            [AC_DEFINE(HAVE_ATTRIBUTE_UNUSED, 1,
+                  Define to 1 if you have support for the "unused" attribute)])
+
+dnl Check the function signature of getgrouplist()
+AC_TRY_LINK([#define _BSD_SOURCE
+             #include <grp.h>
+             #include <unistd.h>],
+            [int (*f)(const char *, int, int *, int *) = getgrouplist;],
+            [AC_DEFINE(HAVE_GETGROUPLIST_TAKES_INTS, 1,
+                       Define to 1 if getgrouplist() takes ints as arguments)])
+
+dnl On some systems, calling /bin/login does not work. Disable the LOGIN
+dnl feature, if the user tells us that it does not do the right thing.
+AC_ARG_ENABLE(login,
+              [  --disable-login           on some systems (e.g. Fedora), calling /bin/login
+                            does not work well. If you know that your system
+                            suffers from this problem, set this option to
+                            remove support for the LOGIN keyword in the
+                            service description.])
+if test "x$enable_login" != xno; then
+  AC_DEFINE(HAVE_BIN_LOGIN, 1,
+                                Set if you want support for calling /bin/login)
+fi
+
 dnl We automatically detect SSL support, but allow users to disable it
 AC_ARG_ENABLE(ssl,
               [  --disable-ssl             if available at built-time, support for SSL