dnl Process this file with autoconf to produce a configure script.

AC_PREREQ([2.69])

AC_INIT([openCryptoki],[3.14.0],[opencryptoki-tech@lists.sourceforge.net],[],[https://github.com/opencryptoki/opencryptoki])

AC_CONFIG_SRCDIR([testcases/common/common.c])

dnl Needed for $target!

AC_CANONICAL_TARGET

AM_INIT_AUTOMAKE([-Wall -Wno-portability foreign subdir-objects])

dnl Checks for header files.

AC_DISABLE_STATIC

LT_INIT

AC_HEADER_STDC

AC_CHECK_HEADER_STDBOOL

AC_CHECK_HEADERS([arpa/inet.h fcntl.h libintl.h limits.h locale.h malloc.h \

		  nl_types.h stddef.h sys/file.h sys/socket.h sys/time.h   \

		  sys/timeb.h syslog.h termios.h])

dnl Checks for typedefs, structures, and compiler characteristics.

AC_C_INLINE

AC_C_RESTRICT

AC_C_CONST

AC_TYPE_UID_T

AC_TYPE_PID_T

AC_TYPE_SIZE_T

AC_TYPE_MODE_T

AC_TYPE_INT8_T

AC_TYPE_INT16_T

AC_TYPE_INT32_T

AC_TYPE_UINT8_T

AC_TYPE_UINT16_T

AC_TYPE_UINT32_T

AC_TYPE_UINT64_T

AC_STRUCT_TM

dnl Checks for library functions.

AC_FUNC_ALLOCA

AC_FUNC_CHOWN

AC_FUNC_FORK

AC_FUNC_MALLOC

AC_FUNC_MKTIME

AC_FUNC_MMAP

AC_FUNC_REALLOC

AC_FUNC_STRERROR_R

AC_CHECK_FUNCS([atexit ftruncate gettimeofday localtime_r memchr memmove \

		memset mkdir munmap regcomp select socket strchr strcspn \

		strdup strerror strncasecmp strrchr strstr strtol strtoul])

dnl Used in various scripts

AC_PATH_PROG([ID], [id], [/us/bin/id])

AC_PATH_PROG([USERMOD], [usermod], [/usr/sbin/usermod])

AC_PATH_PROG([GROUPADD], [groupadd], [/usr/sbin/groupadd])

AC_PATH_PROG([CAT], [cat], [/bin/cat])

AC_PATH_PROG([CHMOD], [chmod], [/bin/chmod])

AC_PATH_PROG([CHGRP], [chgrp], [/bin/chgrp])

AC_PROG_AWK

AC_PROG_INSTALL

AC_PROG_LN_S

AC_PROG_MAKE_SET

AM_PROG_LEX

if test "x$LEX" != "xflex"; then

    AC_MSG_ERROR(['flex' is missing on your system. Please install 'flex'.])

fi

AC_PROG_YACC

if test "x$YACC" = "xyacc"; then

    # AC_PROG_YACC only checks for yacc replacements, not for yacc itself

    AC_CHECK_PROG([YACC_FOUND], [yacc], [yes], [no])

    if test "x$YACC_FOUND" = "xno"; then

	AC_MSG_ERROR(['YACC' program is missing on your system. Please install 'bison'.])

    fi

fi

AC_CHECK_LIB([itm], [_ITM_commitTransaction], [itm=yes], [itm=no])

OPENLDAP_LIBS=

AC_CHECK_HEADERS([lber.h ldap.h],

		[OPENLDAP_LIBS="-llber -lldap"],

		[AC_MSG_ERROR([lber.h and ldap.h are missing. Please install

			      'openldap-devel'.])])

LIBS="$LIBS $OPENLDAP_LIBS"

AC_SUBST([OPENLDAP_LIBS])

dnl Define custom variables

lockdir=/run/lock/opencryptoki

AC_SUBST(lockdir)

logdir=$localstatedir/log/opencryptoki

AC_SUBST(logdir)

dnl ---

dnl --- Check all --enable/--disable-features

dnl ---

dnl --- Debugging support

AC_ARG_ENABLE([debug],

	AS_HELP_STRING([--enable-debug],[enable debugging build @<:@default=no@:>@]),

	[],

	[enable_debug=no])

dnl --- build testcases

AC_ARG_ENABLE([testcases],

	AS_HELP_STRING([--enable-testcases],[build the test cases @<:@default=no@:>@]),

	[],

	[enable_testcases=no])

dnl --- Check if building daemon

AC_ARG_ENABLE([daemon],

	AS_HELP_STRING([--enable-daemon],[build pkcsslotd daemon @<:@default=yes@:>@]),

	[],

	[enable_daemon=yes])

dnl --- Check if building library

AC_ARG_ENABLE([library],

	AS_HELP_STRING([--enable-library],[build opencryptoki libraries @<:@default=yes@:>@]),

	[],

	[enable_library=yes])

dnl --- Enable/disable tokens

dnl --- those have an additional 'check' state, which essentially means

dnl --- that it will enable it by default it dependencies are met

dnl --- ICA token

AC_ARG_ENABLE([icatok],

	AS_HELP_STRING([--enable-icatok],[build ica token @<:@default=enabled if

	libica is present@:>@]),

	[],

	[enable_icatok=check])

dnl --- CCA token

AC_ARG_ENABLE([ccatok],

	AS_HELP_STRING([--enable-ccatok],[build cca token (IBM Common Cryptographic

	Architecture) @<:@default=enabled@:>@]),

	[],

	[enable_ccatok=yes])

dnl --- software token

AC_ARG_ENABLE([swtok],

	AS_HELP_STRING([--enable-swtok],[build software token @<:@default=enabled@:>@]),

	[],

	[enable_swtok=yes])

dnl --- EP11 token

AC_ARG_ENABLE([ep11tok],

    AS_HELP_STRING([--enable-ep11tok],[build ep11 token @<:@default=enabled

	if zcrypt is present@:>@]),

    [],

    [enable_ep11tok=check])

dnl --- TPM token

AC_ARG_ENABLE([tpmtok],

	AS_HELP_STRING([--enable-tpmtok],[build tpm token (Trusted Platform Module)

	@<:@default=enabled if TrouSerS is present@:>@]),

	[],

	[enable_tpmtok=check])

dnl -- icsf token (Integrated Cryptographic Service Facility remote token)

AC_ARG_ENABLE([icsftok],

	AS_HELP_STRING([--enable-icsftok],[build icsf token (Integrated

	Cryptographic Service Facility) @<:@default=enabled if OpenLDAP library

	is present@:>@]),

	[],

	[enable_icsftok=check])

dnl --- token-specific stuff

dnl --- pkcsep11_migrate

AC_ARG_ENABLE([pkcsep11_migrate],

	AS_HELP_STRING([--enable-pkcsep11_migrate],[build pkcsep11_migrate (EP11 token key migration tool) @<:@default=enabled if EP11 library is present@:>@]),

	[],

	[enable_pkcsep11_migrate=check])

dnl --- pkcsep11_session

AC_ARG_ENABLE([pkcsep11_session],

	AS_HELP_STRING([--enable-pkcsep11_session],[build pkcsep11_session (EP11 token session logout tool) @<:@default=enabled if EP11 library is present@:>@]),

	[],

	[enable_pkcsep11_session=check])

dnl --- locking support

AC_ARG_ENABLE([locks],

	AS_HELP_STRING([--disable-locks],[build opencryptoki with transactional memory instead of locks]))

dnl --- p11sak tool

AC_ARG_ENABLE([p11sak],

	AS_HELP_STRING([--enable-p11sak],[build p11sak tool @<:@default=enabled@:>@]),

	[],

	[enable_p11sak=yes])

dnl ---

dnl --- Check for external software

dnl --- Define what to check based on enabled features

dnl --- Openssl development files

AC_ARG_WITH([openssl],

	AS_HELP_STRING([--with-openssl@<:@=DIR@:>@],[OpenSSL development files location]),

	[],

	[with_openssl=check])

dnl --- Libica development files

AC_ARG_WITH([libica],

	AS_HELP_STRING([--with-libica@<:@=DIR@:>@],[libica development files location]),

	[],

	[with_libica=check])

dnl --- zcrypt development files

AC_ARG_WITH([zcrypt],

	AS_HELP_STRING([--with-zcrypt@<:@=DIR@:>@],[zcrypt development files location]),

	[],

	[with_zcrypt=check])

dnl --- TSS (TrouSerS) development files

AC_ARG_WITH([tss],

	AS_HELP_STRING([--with-tss@<:@=DIR@:>@],[TrouSerS development files location]),

	[],

	[with_tss=check])

dnl --- xcryptolinz development files (IBM CCA development files)

AC_ARG_WITH([xcryptolinz],

	AS_HELP_STRING([--with-xcryptolinz@<:@=DIR@:>@],[CCA library (xcryptolinz) location]),

	[],

	[with_xcryptolinz=check])

dnl --- systemd system unit files location

AC_ARG_WITH([systemd],

	AS_HELP_STRING([--with-systemd@<:@=DIR@:>@],[systemd system unit files location]),

	[],

	[with_systemd=no])

dnl ---

dnl ---

dnl --- Now that we have all the options, let's check for a valid build

dnl ---

case $target in

     *s390x*)

	  ;;

     *s390*)

	  CFLAGS="$CFLAGS -m31"

	  ;;

     *ppc64* | *x86_64*)

	  ;;

     *ppc* | i*86*)

	  CFLAGS="$CFLAGS -m32"

	  ;;

esac

dnl --- enable_debug

if test "x$enable_debug" = "xyes"; then

	CFLAGS="$CFLAGS -gdwarf-2 -g3 -O0 -DDEBUG"

fi

dnl --- first, check what external software is present or specified

dnl --- with --with-package=DIR

dnl --- with_openssl

OPENSSL_CFLAGS=

OPENSSL_LIBS=

if test "x$with_openssl" != "xno"; then

	if test "x$with_openssl" != "xyes" -a "x$with_openssl" != "xcheck"; then

		OPENSSL_CFLAGS="-I$with_openssl"

		OPENSSL_LIBS="-L$with_openssl"

	fi

	old_cflags="$CFLAGS"

	old_libs="$LIBS"

	CFLAGS="$CFLAGS $OPENSSL_CFLAGS"

	LIBS="$LIBS $OPENSSL_LIBS"

	AC_CHECK_HEADER([openssl/ssl.h], [], [

		if test "x$with_openssl" != "xcheck"; then

			AC_MSG_ERROR([Build with OpenSSL requested but OpenSSL headers couldn't be found])

		fi

		with_openssl=no

	])

	if test "x$with_openssl" != "xno"; then

		AC_CHECK_LIB([crypto], [RSA_generate_key], [

			OPENSSL_LIBS="$OPENSSL_LIBS -lcrypto"

			with_openssl=yes

			], [

				if test "x$with_openssl" != "xcheck"; then

					AC_MSG_ERROR([Build with OpenSSL requested but OpenSSL libraries couldn't be found])

				fi

				with_openssl=no

		])

	fi

	if test "x$with_openssl" = "xno"; then

		CFLAGS="$old_cflags"

		LIBS="$old_libs"

	fi

fi

AC_SUBST([OPENSSL_CFLAGS])

AC_SUBST([OPENSSL_LIBS])

dnl --- with_libica

LIBICA_CFLAGS=

LIBICA_LIBS=

if test "x$with_libica" != "xno"; then

	if test "x$with_libica" != "xyes" -a "x$with_libica" != "xcheck"; then

		LIBICA_CFLAGS="-I$with_libica"

		LIBICA_LIBS="-L$with_libica"

	fi

	old_cflags="$CFLAGS"

	old_libs="$LIBS"

	CFLAGS="$CFLAGS $LIBICA_CFLAGS"

	LIBS="$LIBS $LIBICA_LIBS"

	AC_CHECK_HEADER([ica_api.h], [], [

		if test "x$with_libica" != "xcheck"; then

			AC_MSG_ERROR([Build with Libica requested but Libica headers couldn't be found])

		fi

		with_libica=no

	])

	if test "x$with_libica" != "xno"; then

		AC_CHECK_LIB([ica], [ica_open_adapter],

			[with_libica=yes], [

				if test "x$with_libica" != "xcheck"; then

					AC_MSG_ERROR([Build with Libica requested but Libica libraries (v 2.x or higher) couldn't be found])

				fi

				with_libica=no

		])

	fi

	if test "x$with_libica" = "xno"; then

		CFLAGS="$old_cflags"

		LIBS="$old_libs"

	fi

fi

AC_SUBST([LIBICA_CFLAGS])

AC_SUBST([LIBICA_LIBS])

dnl --- with_zcrypt

ZCRYPT_CFLAGS=

ZCRYPT_LIBS=

if test "x$with_zcrypt" != "xno"; then

	if test "x$with_zcrypt" != "xyes" -a "x$with_zcrypt" != "xcheck"; then

		ZCRYPT_CFLAGS="-I$with_zcrypt"

		ZCRYPT_LIBS="-L$with_zcrypt"

	fi

	old_cflags="$CFLAGS"

	old_libs="$LIBS"

	CFLAGS="$CFLAGS $ZCRYPT_CFLAGS"

	LIBS="$LIBS $ZCRYPT_LIBS"

	AC_CHECK_HEADER([asm/zcrypt.h], [], [

		if test "x$with_zcrypt" != "xcheck"; then

			AC_MSG_ERROR([Build with zcrypt requested but zcrypt headers couldn't be found])

		fi

		with_zcrypt=no

	])

	if test "x$with_zcrypt" != "xno"; then

		with_zcrypt=yes

	fi

	if test "x$with_zcrypt" = "xno"; then

		CFLAGS="$old_cflags"

		LIBS="$old_libs"

	fi

fi

AC_SUBST([ZCRYPT_CFLAGS])

AC_SUBST([ZCRYPT_LIBS])

dnl --- with_tss

TSS_CFLAGS=

TSS_LIBS=

if test "x$with_tss" != "xno"; then

	if test "x$with_tss" != "xyes" -a "x$with_tss" != "xcheck"; then

		TSS_CFLAGS="-I$with_tss"

		TSS_LIBS="-L$with_tss"

	fi

	old_cflags="$CFLAGS"

	old_libs="$LIBS"

	CFLAGS="$CFLAGS $TSS_CFLAGS"

	LIBS="$LIBS $TSS_LIBS"

	AC_CHECK_HEADER([tss/platform.h], [], [

		if test "x$with_tss" != "xcheck"; then

			AC_MSG_ERROR([Build with TSS requested but TSS headers couldn't be found])

		fi

		with_tss=no

	])

	if test "x$with_tss" != "xno"; then

		AC_CHECK_LIB([tspi], [Tspi_Context_Create],

			[with_tss=yes], [

				if test "x$with_tss" != "xcheck"; then

					AC_MSG_ERROR([Build with TSS requested but TSS libraries couldn't be found])

				fi

				with_tss=no

		])

	fi

	if test "x$with_tss" = "xno"; then

		CFLAGS="$old_cflags"

		LIBS="$old_libs"

	fi

fi

AC_SUBST([TSS_CFLAGS])

AC_SUBST([TSS_LIBS])

dnl --- with_xcryptolinz

XCRYPTOLINZ_CFLAGS=

XCRYPTOLINZ_LIBS=

if test "x$with_xcryptolinz" != "xno"; then

	if test "x$with_xcryptolinz" != "xyes" -a "x$with_xcryptolinz" != "xcheck"; then

		XCRYPTOLINZ_CFLAGS="-I$with_xcryptolinz"

		XCRYPTOLINZ_LIBS="-L$with_xcryptolinz"

	fi

	old_cflags="$CFLAGS"

	old_libs="$LIBS"

	CFLAGS="$CFLAGS $XCRYPTOLINZ_CFLAGS"

	LIBS="$LIBS $XCRYPTOLINZ_LIBS"

dnl - The above may not be necessary since opencryptoki brings this header file anyway.

	AC_CHECK_HEADER([csulincl.h], [], [

		if test "x$with_xcryptolinz" != "xcheck"; then

			AC_MSG_ERROR([Build with xcryptolinz requested but xcryptolinz headers couldn't be found])

		fi

		with_xcryptolinz=no

	])

	if test "x$with_xcryptolinz" != "xno"; then

		AC_CHECK_LIB([csulcca], [CSNBKTC],

			[with_xcryptolinz=yes], [

				if test "x$with_xcryptolinz" != "xcheck"; then

					AC_MSG_ERROR([Build with xcryptolinz requested but xcryptolinz libraries couldn't be found])

				fi

				with_xcryptolinz=no

		])

	fi

	if test "x$with_xcryptolinz" = "xno"; then

		CFLAGS="$old_cflags"

		LIBS="$old_libs"

	fi

fi

AC_SUBST([XCRYPTOLINZ_CFLAGS])

AC_SUBST([XCRYPTOLINZ_LIBS])

dnl ---

dnl --- Now check enabled features, while making sure every required

dnl --- package is available

dnl ---

dnl --- enable_testcases

if test "x$enable_testcases" = "xyes"; then

	AC_CHECK_PROG([HAVE_EXPECT], [expect], [yes], [no])

	if test "x$HAVE_EXPECT" = "xno"; then

		AC_MSG_ERROR([*** testcases requires 'expect' interpreter, which wasn't found])

		enable_testcases=no

	fi

fi

AM_CONDITIONAL([ENABLE_TESTCASES], [test "x$enable_testcases" = "xyes"])

dnl --- enable_daemon

AM_CONDITIONAL([ENABLE_DAEMON], [test "x$enable_daemon" = "xyes"])

dnl --- enable_library

AM_CONDITIONAL([ENABLE_LIBRARY], [test "x$enable_library" = "xyes"])

dnl --- enable systemd and set unit dir

if test "x$with_systemd" != "xno"; then

	if test "x$with_systemd" != "xyes" -a "x$with_systemd" != "xcheck"; then

		unitdir=$with_systemd

		enable_systemd=yes

	else

		if test "x$with_systemd" = "xyes"; then

			unitdir=${ac_default_prefix}/lib/systemd/system

			enable_systemd=yes

		else

			enable_systemd=no

		fi

	fi

else

	enable_systemd=no

fi

AM_CONDITIONAL([ENABLE_SYSTEMD], [test "x$enable_systemd" = "xyes"])

AC_SUBST(unitdir)

dnl --- enable_icatok

if test "x$enable_icatok" = "xyes"; then

	if test "x$with_libica" != "xyes"; then

		AC_MSG_ERROR([ica token build requested but libica development files not found])

		enable_icatok=no

	fi

	if test "x$with_openssl" != "xyes"; then

		AC_MSG_ERROR([ica token build requested but OpenSSL development files not found])

		enable_icatok=no

	fi

fi

if test "x$enable_icatok" != "xno" -a "x$with_libica" != "xno" -a "x$with_openssl" != "xno"; then

	enable_icatok=yes

else

	enable_icatok=no

fi

AM_CONDITIONAL([ENABLE_ICATOK], [test "x$enable_icatok" = "xyes"])

dnl --- enable_ccatok

AM_CONDITIONAL([ENABLE_CCATOK], [test "x$enable_ccatok" = "xyes"])

dnl --- enable_swtok

if test "x$enable_swtok" = "xyes"; then

	if test "x$with_openssl" != "xyes"; then

		AC_MSG_ERROR([software token build requested but OpenSSL development files not found])

		enable_swtok=no

	fi

fi

if test "x$enable_swtok" != "xno" -a "x$with_openssl" != "xno"; then

	enable_swtok=yes

else

	enable_swtok=no

fi

AM_CONDITIONAL([ENABLE_SWTOK], [test "x$enable_swtok" = "xyes"])

dnl --- enable_ep11tok

if test "x$enable_ep11tok" = "xyes"; then

	if test "x$with_zcrypt" != "xyes"; then

		AC_MSG_ERROR([ep11 token build requested but ep11 development files not found])

		enable_ep11=no

	fi

	AC_CHECK_HEADER([ica_api.h], [], [

		AC_MSG_ERROR([ep11 token build requested but Libica headers couldn't be found])

	])

fi

if test "x$enable_ep11tok" != "xno" -a "x$with_zcrypt" != "xno"; then

	enable_ep11tok=yes

	AC_CHECK_HEADER([ica_api.h], [], [

		enable_ep11tok=no

	])

else

	enable_ep11tok=no

fi

AM_CONDITIONAL([ENABLE_EP11TOK], [test "x$enable_ep11tok" = "xyes"])

dnl --- enable_icsftok

if test "x$enable_icsftok" = "xyes"; then

	if test "x$with_openssl" != "xyes"; then

		AC_MSG_ERROR([ICSF token build requested but OpenSSL development files not found])

		enable_icsftok=no

	fi

fi

if test "x$enable_icsftok" != "xno" -a "x$with_openssl" != "xno"; then

	enable_icsftok=yes

else

	enable_icsftok=no

fi

AM_CONDITIONAL([ENABLE_ICSFTOK], [test "x$enable_icsftok" = "xyes"])

dnl --- enable_tpmtok

if test "x$enable_tpmtok" = "xyes"; then

	if test "x$with_tss" != "xyes"; then

		AC_MSG_ERROR([tpm token build requested but TSS development files not found])

		enable_tpmtok=no

	fi

fi

if test "x$enable_tpmtok" != "xno" -a "x$with_tss" != "xno"; then

	enable_tpmtok=yes

else

	enable_tpmtok=no

fi

AM_CONDITIONAL([ENABLE_TPMTOK], [test "x$enable_tpmtok" = "xyes"])

dnl --- enable_pkcsep11_migrate

if test "x$enable_pkcsep11_migrate" = "xyes"; then

	if test "x$with_zcrypt" != "xyes"; then

		AC_MSG_ERROR([pkcsep11_migrate build requested but no ep11 libraries found])

		enable_pkcsep11_migrate=no

	fi

fi

if test "x$enable_pkcsep11_migrate" != "xno" -a "x$with_zcrypt" != "xno"; then

	enable_pkcsep11_migrate=yes

else

	enable_pkcsep11_migrate=no

fi

AM_CONDITIONAL([ENABLE_PKCSEP11_MIGRATE], [test "x$enable_pkcsep11_migrate" = "xyes"])

dnl --- enable_pkcsep11_session

if test "x$enable_pkcsep11_session" = "xyes"; then

	if test "x$with_zcrypt" != "xyes"; then

		AC_MSG_ERROR([pkcsep11_session build requested but no ep11 libraries found])

		enable_pkcsep11_session=no

	fi

fi

if test "x$enable_pkcsep11_session" != "xno" -a "x$with_zcrypt" != "xno"; then

	enable_pkcsep11_session=yes

else

	enable_pkcsep11_session=no

fi

AM_CONDITIONAL([ENABLE_PKCSEP11_SESSION], [test "x$enable_pkcsep11_session" = "xyes"])

dnl --- enable_p11sak

AM_CONDITIONAL([ENABLE_P11SAK], [test "x$enable_p11sak" = "xyes"])

dnl --- enable_locks

if test "x$enable_locks" != "xno"; then

	enable_locks=yes

	CFLAGS="$CFLAGS -DENABLE_LOCKS"

else

	enable_locks=no

	CFLAGS="$CFLAGS -fgnu-tm"

fi

if test "x$enable_locks" = "xno"; then

	if test "x$itm" != "xyes"; then

		AC_MSG_ERROR([in order to build opencryptoki with transactional memory,

libitm and gcc>=4.7 is required])

    fi

fi

AM_CONDITIONAL([ENABLE_LOCKS], [test "x$enable_locks" = "xyes"])

CFLAGS="$CFLAGS -DPKCS64 -D_XOPEN_SOURCE=600 -Wall -Wextra"

CFLAGS+=' -DCONFIG_PATH=\"$(localstatedir)/lib/opencryptoki\" -DSBIN_PATH=\"$(sbindir)\" -DLIB_PATH=\"$(libdir)\" -DLOCKDIR_PATH=\"$(lockdir)\" -DOCK_CONFDIR=\"$(sysconfdir)/opencryptoki\" -DOCK_LOGDIR=\"$(logdir)\"'

# At this point, CFLAGS is set to something sensible

AC_PROG_CC

AC_CONFIG_MACRO_DIRS([m4])

AC_CONFIG_FILES([Makefile				\

		 usr/lib/api/shrd_mem.c			\

		 man/man1/pkcsconf.1			\

		 man/man1/pkcsicsf.1			\

		 man/man1/pkcscca.1			\

		 man/man1/p11sak.1			\

		 man/man1/pkcsep11_migrate.1		\

		 man/man1/pkcsep11_session.1		\

		 man/man5/opencryptoki.conf.5		\

		 man/man7/opencryptoki.7		\

		 man/man8/pkcsslotd.8])

AC_OUTPUT

echo "Enabled features:"

echo "	Debug build:		$enable_debug"

echo "	Testcases:		$enable_testcases"

echo "	Daemon build:		$enable_daemon"

echo "	Library build:		$enable_library"

echo "	Systemd service:	$enable_systemd"

echo "	Build with locks:	$enable_locks"

echo "	Build p11sak tool:	$enable_p11sak"

echo

echo "Enabled token types:"

echo "	ICA token:		$enable_icatok"

echo "	CCA token:		$enable_ccatok"

echo "	Software token:		$enable_swtok"

echo "	EP11 token:		$enable_ep11tok"

echo "	TPM token:		$enable_tpmtok"

echo "	ICSF token:		$enable_icsftok"

echo

echo "Token-specific features:"

echo "	pkcsep11migrate build:	$enable_pkcsep11_migrate"

echo "	pkcsep11session build:	$enable_pkcsep11_session"

echo

echo "CFLAGS=$CFLAGS"

echo