haproxy/deps/quictls/Makefile

OPENSSL_VERSION = 1.1.1t
BUILD_VERSION_REPOSHA = $(shell git rev-parse --short HEAD)
QUICTLS_BUILD_VERSION = quic-mangadex-$(BUILD_VERSION_REPOSHA)
QUICTLS_TAG = OpenSSL_$(subst .,_,$(OPENSSL_VERSION))-quic1

QUICTLS_SOURCES = https://codeload.github.com/quictls/openssl/tar.gz/$(QUICTLS_TAG)
QUICTLS_TARBALL = quictls-$(OPENSSL_VERSION).tar.gz
QUICTLS_BUILDIR = src
QUICTLS_DESTDIR = dist
QUICTLS_DESTDIR_ABS = $(shell realpath $(QUICTLS_DESTDIR))
QUICTLS_ARCHIVE = quictls-dist.tar.gz

all: build $(QUICTLS_DESTDIR) $(QUICTLS_ARCHIVE)

$(QUICTLS_TARBALL):
	curl -sfS -o "$(QUICTLS_TARBALL)" "$(QUICTLS_SOURCES)"

$(QUICTLS_BUILDIR): $(QUICTLS_TARBALL)
	@if ! [ -d "$(QUICTLS_BUILDIR)" ]; then mkdir -v "$(QUICTLS_BUILDIR)"; fi
	tar -C $(QUICTLS_BUILDIR) --strip-components=1 -xf "$(QUICTLS_TARBALL)"

build: $(QUICTLS_BUILDIR)
	cd "$(QUICTLS_BUILDIR)" &&  sed -i 's/^# define OPENSSL_VERSION_TEXT.*$\/# define OPENSSL_VERSION_TEXT "OpenSSL $(OPENSSL_VERSION)+$(QUICTLS_BUILD_VERSION) $(shell date -u +'%e %b %Y')"/g' "include/openssl/opensslv.h"
	cd "$(QUICTLS_BUILDIR)" && CC=cc ./config --prefix="/opt/quictls" --openssldir="/opt/quictls" --libdir="lib" no-shared
	$(MAKE) -C "$(QUICTLS_BUILDIR)" -j "$(shell nproc)" VERSION=$(OPENSSL_VERSION)+quic-mangadex-$(BUILD_VERSION_REPOSHA)
	"$(QUICTLS_BUILDIR)/apps/openssl" version
	$(MAKE) buildinfo_$(shell uname -s)

.PHONY: buildinfo_Linux
buildinfo_Linux:
	@echo "Checking shared libraries openssl is linked against (Linux):"
	@ldd "$(QUICTLS_BUILDIR)/apps/openssl" || true

.PHONY: buildinfo_Darwin
buildinfo_Darwin:
	@echo "Checking shared libraries openssl is linked against (Darwin):"
	@otool -L "$(QUICTLS_BUILDIR)/apps/openssl" || true

$(QUICTLS_DESTDIR): build
	@if ! [ -d "$(QUICTLS_DESTDIR)" ]; then mkdir -v "$(QUICTLS_DESTDIR)"; fi
	$(MAKE) -C "$(QUICTLS_BUILDIR)" -j "$(shell nproc)" DESTDIR="$(QUICTLS_DESTDIR_ABS)" install_sw
	$(QUICTLS_DESTDIR_ABS)/opt/quictls/bin/openssl version

$(QUICTLS_ARCHIVE): $(QUICTLS_DESTDIR)
	tar -C "$(QUICTLS_DESTDIR)" -cjf "$(QUICTLS_ARCHIVE)" "opt"

clean:
	rm -fv "$(QUICTLS_TARBALL)"
	rm -rf "$(QUICTLS_BUILDIR)"
	rm -rf "$(QUICTLS_DESTDIR)"
	rm -fv "$(QUICTLS_ARCHIVE)"

.PHONY: clean build
Update QuicTLS to OpenSSL 1.1.1t 2023-02-09 18:31:08 +05:30			`OPENSSL_VERSION = 1.1.1t`
Set QuicTLS version to be based on build repo commit + build UTC date 2022-06-07 16:30:30 +05:30			`BUILD_VERSION_REPOSHA = $(shell git rev-parse --short HEAD)`
Build against OpenSSL/QuicTLS 3.0.3+quic 2022-06-09 17:29:28 +05:30			`QUICTLS_BUILD_VERSION = quic-mangadex-$(BUILD_VERSION_REPOSHA)`
Update QuicTLS to OpenSSL 1.1.1t 2023-02-09 18:31:08 +05:30			`QUICTLS_TAG = OpenSSL_$(subst .,_,$(OPENSSL_VERSION))-quic1`
Set QuicTLS version to be based on build repo commit + build UTC date 2022-06-07 16:30:30 +05:30
Use QuicTLS 1.1.1s In light of Willy's comments on https://github.com/haproxy/haproxy/issues/1903#issuecomment-1302171732, we should use an OpenSSL base of 1.1.1, to avoid the massive performance penalty of 3.x (with HAProxy at least). So undo the QuicTLS 3.0.7 revert (from 1.1.1q) and upgrade to QuicTLS 1.1.1s We should hear more details after HAProxyConf on the exact metrics, and in general in the future about the state of LibreSSL/WolfSSL/etc as alternatives. 2022-11-04 18:51:37 +05:30			`QUICTLS_SOURCES = https://codeload.github.com/quictls/openssl/tar.gz/$(QUICTLS_TAG)`
Set QuicTLS version to be based on build repo commit + build UTC date 2022-06-07 16:30:30 +05:30			`QUICTLS_TARBALL = quictls-$(OPENSSL_VERSION).tar.gz`
Parameterize src dirs everywhere and fix PCRE incs for HAProxy 2022-06-06 11:22:47 +05:30			`QUICTLS_BUILDIR = src`
Global cleanup for fully reproducible local build 2022-06-06 10:16:20 +05:30			`QUICTLS_DESTDIR = dist`
			`QUICTLS_DESTDIR_ABS = $(shell realpath $(QUICTLS_DESTDIR))`
Avoid artifacting untarred dist folders and add package publication 2022-06-06 13:21:31 +05:30			`QUICTLS_ARCHIVE = quictls-dist.tar.gz`
Global cleanup for fully reproducible local build 2022-06-06 10:16:20 +05:30
Cleanup makefiles and curl calls 2022-06-07 08:36:13 +05:30			`all: build $(QUICTLS_DESTDIR) $(QUICTLS_ARCHIVE)`
Global cleanup for fully reproducible local build 2022-06-06 10:16:20 +05:30
Cleanup makefiles and curl calls 2022-06-07 08:36:13 +05:30			`$(QUICTLS_TARBALL):`
			`curl -sfS -o "$(QUICTLS_TARBALL)" "$(QUICTLS_SOURCES)"`
Global cleanup for fully reproducible local build 2022-06-06 10:16:20 +05:30
Cleanup makefiles and curl calls 2022-06-07 08:36:13 +05:30			`$(QUICTLS_BUILDIR): $(QUICTLS_TARBALL)`
			`@if ! [ -d "$(QUICTLS_BUILDIR)" ]; then mkdir -v "$(QUICTLS_BUILDIR)"; fi`
Parameterize src dirs everywhere and fix PCRE incs for HAProxy 2022-06-06 11:22:47 +05:30			`tar -C $(QUICTLS_BUILDIR) --strip-components=1 -xf "$(QUICTLS_TARBALL)"`
Cleanup makefiles and curl calls 2022-06-07 08:36:13 +05:30
			`build: $(QUICTLS_BUILDIR)`
Use QuicTLS 1.1.1s In light of Willy's comments on https://github.com/haproxy/haproxy/issues/1903#issuecomment-1302171732, we should use an OpenSSL base of 1.1.1, to avoid the massive performance penalty of 3.x (with HAProxy at least). So undo the QuicTLS 3.0.7 revert (from 1.1.1q) and upgrade to QuicTLS 1.1.1s We should hear more details after HAProxyConf on the exact metrics, and in general in the future about the state of LibreSSL/WolfSSL/etc as alternatives. 2022-11-04 18:51:37 +05:30			`cd "$(QUICTLS_BUILDIR)" && sed -i 's/^# define OPENSSL_VERSION_TEXT.*$\/# define OPENSSL_VERSION_TEXT "OpenSSL $(OPENSSL_VERSION)+$(QUICTLS_BUILD_VERSION) $(shell date -u +'%e %b %Y')"/g' "include/openssl/opensslv.h"`
			`cd "$(QUICTLS_BUILDIR)" && CC=cc ./config --prefix="/opt/quictls" --openssldir="/opt/quictls" --libdir="lib" no-shared`
			`$(MAKE) -C "$(QUICTLS_BUILDIR)" -j "$(shell nproc)" VERSION=$(OPENSSL_VERSION)+quic-mangadex-$(BUILD_VERSION_REPOSHA)`
Parameterize src dirs everywhere and fix PCRE incs for HAProxy 2022-06-06 11:22:47 +05:30			`"$(QUICTLS_BUILDIR)/apps/openssl" version`
Add necessary switches for darwin builds 2022-06-23 18:53:25 +05:30			`$(MAKE) buildinfo_$(shell uname -s)`

			`.PHONY: buildinfo_Linux`
			`buildinfo_Linux:`
			`@echo "Checking shared libraries openssl is linked against (Linux):"`
			`@ldd "$(QUICTLS_BUILDIR)/apps/openssl" \|\| true`

			`.PHONY: buildinfo_Darwin`
			`buildinfo_Darwin:`
			`@echo "Checking shared libraries openssl is linked against (Darwin):"`
			`@otool -L "$(QUICTLS_BUILDIR)/apps/openssl" \|\| true`
Global cleanup for fully reproducible local build 2022-06-06 10:16:20 +05:30
Parameterize src dirs everywhere and fix PCRE incs for HAProxy 2022-06-06 11:22:47 +05:30			`$(QUICTLS_DESTDIR): build`
Add necessary switches for darwin builds 2022-06-23 18:53:25 +05:30			`@if ! [ -d "$(QUICTLS_DESTDIR)" ]; then mkdir -v "$(QUICTLS_DESTDIR)"; fi`
Parameterize src dirs everywhere and fix PCRE incs for HAProxy 2022-06-06 11:22:47 +05:30			`$(MAKE) -C "$(QUICTLS_BUILDIR)" -j "$(shell nproc)" DESTDIR="$(QUICTLS_DESTDIR_ABS)" install_sw`
Pick up CC for OpenSSL and ensure version logged for OpenSSL and HAProxy in build 2022-08-03 14:35:20 +05:30			`$(QUICTLS_DESTDIR_ABS)/opt/quictls/bin/openssl version`
Global cleanup for fully reproducible local build 2022-06-06 10:16:20 +05:30
Parameterize src dirs everywhere and fix PCRE incs for HAProxy 2022-06-06 11:22:47 +05:30			`$(QUICTLS_ARCHIVE): $(QUICTLS_DESTDIR)`
Global cleanup for fully reproducible local build 2022-06-06 10:16:20 +05:30			`tar -C "$(QUICTLS_DESTDIR)" -cjf "$(QUICTLS_ARCHIVE)" "opt"`

			`clean:`
Cleanup makefiles and curl calls 2022-06-07 08:36:13 +05:30			`rm -fv "$(QUICTLS_TARBALL)"`
Parameterize src dirs everywhere and fix PCRE incs for HAProxy 2022-06-06 11:22:47 +05:30			`rm -rf "$(QUICTLS_BUILDIR)"`
			`rm -rf "$(QUICTLS_DESTDIR)"`
			`rm -fv "$(QUICTLS_ARCHIVE)"`
Global cleanup for fully reproducible local build 2022-06-06 10:16:20 +05:30
Parameterize src dirs everywhere and fix PCRE incs for HAProxy 2022-06-06 11:22:47 +05:30			`.PHONY: clean build`