1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
|
#
# This Makefile attempts to build OpenConnect and its dependencies for Android
#
# It doesn't do a stunning job of tracking changes in the dependencies and
# automatically rebuilding them, but it's good enough for getting them built
# and installed into its own local sysroot.
#
# As long as you have the Android NDK toolchain on your path, you should then
# be able to edit fairly much anything in place and rebuild it locally.
#
# It should also be fairly simple to extend this to cross-compile for any target
# Last tested with https://dl.google.com/android/repository/android-ndk-r21b-linux-x86_64.zip
NDK := /opt/android-sdk-linux_x86/android-ndk-r21b
ARCH := x86_64
API_LEVEL := 23
EXTRA_CFLAGS :=
# You should be able to just 'make ARCH=x86' and it should DTRT.
ifeq ($(ARCH),arm)
TRIPLET := arm-linux-androideabi
EXTRA_CFLAGS := -march=armv7-a -mthumb
endif
ifeq ($(ARCH),arm64)
TRIPLET := aarch64-linux-android
API_LEVEL := 26
endif
ifeq ($(ARCH),x86)
TRIPLET := i686-linux-android
endif
ifeq ($(ARCH),x86_64)
TRIPLET := x86_64-linux-android
endif
TOPDIR := $(shell pwd)
DESTDIR := $(TOPDIR)/$(TRIPLET)/out
EXTRA_CFLAGS += -D__ANDROID_API__=$(API_LEVEL) -O2
TOOLCHAIN := $(TOPDIR)/$(TRIPLET)/toolchain
TOOLCHAIN_BUILT := $(TOOLCHAIN)/.built
TOOLCHAIN_OPTS := --platform=android-$(API_LEVEL) --arch=$(ARCH) \
--install-dir=$(TOOLCHAIN)
PATH := $(TOOLCHAIN)/bin:$(PATH)
OC_SYSROOT := $(TOOLCHAIN)/sysroot/usr
PKG_CONFIG_LIBDIR := $(OC_SYSROOT)/lib/pkgconfig
export PATH PKG_CONFIG_LIBDIR
# PKG_CONFIG_LIBDIR gets exported to sub-makes, but not to $(shell
PKG_CONFIG := PKG_CONFIG_LIBDIR=$(PKG_CONFIG_LIBDIR) pkg-config
MAKEINSTALL=$(MAKE) INSTALL=$(TOPDIR)/install_symlink.sh
FETCH=$(TOPDIR)/fetch.sh
CONFIGURE_ARGS := --host=$(TRIPLET) --prefix=$(OC_SYSROOT) \
--disable-shared --enable-static --with-pic \
CC=$(TRIPLET)-clang CFLAGS="$(EXTRA_CFLAGS)"
SOURCE_LIST = $(LIBXML2_SRC)/configure $(GMP_SRC)/configure \
$(NETTLE_SRC)/configure $(GNUTLS_SRC)/configure \
$(STOKEN_SRC)/configure \
$(LZ4_DIR)/Makefile
PKG_LIST := LIBXML2 GMP NETTLE GNUTLS STOKEN LZ4
MIRROR_TEST_TARGETS := $(addprefix mirror-test-,$(PKG_LIST))
all: openconnect run_pie
#####################################################################
#
# Install a local cross toolchain + sysroot
#
# (The fallback logic is because NDK versions <= r8e can fail after trying to
# use 32-bit binaries on a 64-bit NDK installation.)
#
$(TOOLCHAIN_BUILT):
$(NDK)/build/tools/make-standalone-toolchain.sh $(TOOLCHAIN_OPTS) || \
$(NDK)/build/tools/make-standalone-toolchain.sh \
$(TOOLCHAIN_OPTS) --system=linux-x86_64
touch $@
#####################################################################
#
# Build libxml2 with minimal configuration for OpenConnect
#
# http://xmlsoft.org/news.html
LIBXML2_VER := 2.9.11
LIBXML2_TAR := libxml2-$(LIBXML2_VER).tar.gz
LIBXML2_SHA := 886f696d5d5b45d780b2880645edf9e0c62a4fd6841b853e824ada4e02b4d331
LIBXML2_SRC := sources/libxml2-$(LIBXML2_VER)
LIBXML2_BUILD := $(TRIPLET)/libxml2
$(LIBXML2_TAR):
$(FETCH) $@ $(LIBXML2_SHA)
$(LIBXML2_SRC)/configure: $(LIBXML2_TAR)
mkdir -p sources
tar xfz $< -C sources
touch $@
$(LIBXML2_BUILD)/Makefile: $(TOOLCHAIN_BUILT) $(LIBXML2_SRC)/configure
mkdir -p $(LIBXML2_BUILD)
cd $(LIBXML2_BUILD) && ../../$(LIBXML2_SRC)/configure $(CONFIGURE_ARGS) \
--without-c14n -without-catalog --without-debug --without-docbook \
--without-fexceptions --without-ftp --without-history \
--without-http --without-iconv --without-iconv \
--without-iso8859x --without-legacy --without-pattern \
--without-push --without-regexps --without-run-debug \
--without-sax1 --without-schemas --without-schematron \
--without-threads --without-valid --without-xinclude \
--without-xpath --without-xptr --without-zlib --without-lzma \
--without-coverage --without-python
$(LIBXML2_BUILD)/libxml2.la: $(LIBXML2_BUILD)/Makefile
$(MAKE) -C $(LIBXML2_BUILD) libxml2.la
$(LIBXML2_BUILD)/libxml-2.0.pc: $(LIBXML2_BUILD)/Makefile
$(MAKE) -C $(LIBXML2_BUILD) libxml-2.0.pc
$(OC_SYSROOT)/lib/libxml2.la: $(LIBXML2_BUILD)/libxml2.la
$(MAKEINSTALL) -C $(LIBXML2_BUILD) install-libLTLIBRARIES
$(OC_SYSROOT)/lib/pkgconfig/libxml-2.0.pc: $(LIBXML2_BUILD)/libxml-2.0.pc
$(MAKEINSTALL) -C $(LIBXML2_BUILD) install-data
LIBXML_DEPS := $(OC_SYSROOT)/lib/libxml2.la $(OC_SYSROOT)/lib/pkgconfig/libxml-2.0.pc
libxml: $(LIBXML_DEPS)
#####################################################################
#
# Build GNU MP
#
# https://gmplib.org/
GMP_VER := 6.2.1
GMP_TAR := gmp-$(GMP_VER).tar.xz
GMP_SHA := fd4829912cddd12f84181c3451cc752be224643e87fac497b69edddadc49b4f2
GMP_SRC := sources/gmp-$(GMP_VER)
GMP_BUILD := $(TRIPLET)/gmp
$(GMP_TAR):
$(FETCH) $@ $(GMP_SHA)
$(GMP_SRC)/configure: $(GMP_TAR)
mkdir -p sources
tar -xJf $< -C sources
touch $@
$(GMP_BUILD)/Makefile: $(TOOLCHAIN_BUILT) $(GMP_SRC)/configure
mkdir -p $(GMP_BUILD)
cd $(GMP_BUILD) && ../../$(GMP_SRC)/configure $(CONFIGURE_ARGS)
$(GMP_BUILD)/libgmp.la: $(GMP_BUILD)/Makefile
$(MAKE) -C $(GMP_BUILD)
$(OC_SYSROOT)/lib/libgmp.la: $(GMP_BUILD)/libgmp.la
$(MAKEINSTALL) -C $(GMP_BUILD) install
GMP_DEPS := $(OC_SYSROOT)/lib/libgmp.la
gmp: $(GMP_DEPS)
#####################################################################
#
# Build nettle
#
# https://ftp.gnu.org/gnu/nettle/
NETTLE_VER := 3.6
NETTLE_TAR := nettle-$(NETTLE_VER).tar.gz
NETTLE_SHA := d24c0d0f2abffbc8f4f34dcf114b0f131ec3774895f3555922fe2f40f3d5e3f1
NETTLE_SRC := sources/nettle-$(NETTLE_VER)
NETTLE_BUILD := $(TRIPLET)/nettle
$(NETTLE_TAR):
$(FETCH) $@ $(NETTLE_SHA)
$(NETTLE_SRC)/configure: $(NETTLE_TAR)
mkdir -p sources
tar xfz $< -C sources
touch $@
$(NETTLE_BUILD)/Makefile: $(TOOLCHAIN_BUILT) $(NETTLE_SRC)/configure $(GMP_DEPS)
mkdir -p $(NETTLE_BUILD)
cd $(NETTLE_BUILD) && ../../$(NETTLE_SRC)/configure $(CONFIGURE_ARGS)
$(NETTLE_BUILD)/libnettle.a: $(NETTLE_BUILD)/Makefile
$(MAKE) -C $(NETTLE_BUILD) SUBDIRS=
$(OC_SYSROOT)/lib/libnettle.a: $(NETTLE_BUILD)/libnettle.a
$(MAKEINSTALL) -C $(NETTLE_BUILD) SUBDIRS= install
NETTLE_DEPS := $(OC_SYSROOT)/lib/libnettle.a
nettle: $(NETTLE_DEPS)
#####################################################################
#
# Build GnuTLS
#
# https://www.gnutls.org/download.html
GNUTLS_VER := 3.6.16
GNUTLS_TAR := gnutls-$(GNUTLS_VER).tar.xz
GNUTLS_SHA := 1b79b381ac283d8b054368b335c408fedcb9b7144e0c07f531e3537d4328f3b3
GNUTLS_SRC := sources/gnutls-$(GNUTLS_VER)
GNUTLS_BUILD := $(TRIPLET)/gnutls
$(GNUTLS_TAR):
$(FETCH) $@ $(GNUTLS_SHA)
$(GNUTLS_SRC)/configure: $(GNUTLS_TAR)
mkdir -p sources
xz -d < $< | tar xf - -C sources
touch $@
#$(GNUTLS_SRC)/configure.ac:
# mkdir -p sources
# cd sources && git clone git://gitorious.org/gnutls/gnutls.git
#$(GNUTLS_SRC)/configure: $(GNUTLS_SRC)/configure.ac
# touch $(GNUTLS_SRC)/ChangeLog
# cd $(GNUTLS_SRC) && autoreconf -fvi
$(GNUTLS_BUILD)/Makefile: $(TOOLCHAIN_BUILT) $(GNUTLS_SRC)/configure $(NETTLE_DEPS)
mkdir -p $(GNUTLS_BUILD)
cd $(GNUTLS_BUILD) && ../../$(GNUTLS_SRC)/configure $(CONFIGURE_ARGS) \
AUTOGEN=/bin/false \
--disable-threads --disable-tests --disable-nls \
--disable-doc --disable-openssl-compatibility --disable-cxx \
--disable-openssl-compatibility --disable-ocsp --disable-tools \
--disable-anon-authentication --with-included-libtasn1 \
--enable-psk-authentication --disable-srp-authentication \
--disable-dtls-srtp-support --enable-dhe --enable-ecdhe \
--with-included-unistring --without-p11-kit --disable-guile
$(GNUTLS_BUILD)/lib/libgnutls.la: $(GNUTLS_BUILD)/Makefile
$(MAKE) -C $(GNUTLS_BUILD)
$(OC_SYSROOT)/lib/libgnutls.la: $(GNUTLS_BUILD)/lib/libgnutls.la
$(MAKEINSTALL) -C $(GNUTLS_BUILD) install
GNUTLS_DEPS := $(OC_SYSROOT)/lib/libgnutls.la
gnutls: $(GNUTLS_DEPS)
#####################################################################
#
# Build libstoken
#
# https://sourceforge.net/projects/stoken/files/
STOKEN_VER := 0.92
STOKEN_TAR := stoken-$(STOKEN_VER).tar.gz
STOKEN_SHA := aa2b481b058e4caf068f7e747a2dcf5772bcbf278a4f89bc9efcbf82bcc9ef5a
STOKEN_SRC := sources/stoken-$(STOKEN_VER)
STOKEN_BUILD := $(TRIPLET)/stoken
$(STOKEN_TAR):
$(FETCH) $@ $(STOKEN_SHA)
$(STOKEN_SRC)/configure: $(STOKEN_TAR)
mkdir -p sources
tar xfz $< -C sources
touch $@
$(STOKEN_BUILD)/Makefile: $(TOOLCHAIN_BUILT) $(STOKEN_SRC)/configure $(NETTLE_DEPS)
mkdir -p $(STOKEN_BUILD)
cd $(STOKEN_BUILD) && ../../$(STOKEN_SRC)/configure $(CONFIGURE_ARGS) \
--without-gtk
$(STOKEN_BUILD)/libstoken.la: $(STOKEN_BUILD)/Makefile
$(MAKE) -C $(STOKEN_BUILD)
$(OC_SYSROOT)/lib/libstoken.la: $(STOKEN_BUILD)/libstoken.la
$(MAKEINSTALL) -C $(STOKEN_BUILD) install
STOKEN_DEPS := $(OC_SYSROOT)/lib/libstoken.la
stoken: $(STOKEN_DEPS)
#####################################################################
#
# Build liblz4
#
# https://github.com/lz4/lz4/tags
LZ4_VER := 1.9.3
LZ4_TAR := lz4-v$(LZ4_VER).tar.gz
LZ4_SHA := 030644df4611007ff7dc962d981f390361e6c97a34e5cbc393ddfbe019ffe2c1
LZ4_DIR := $(TRIPLET)/lz4-$(LZ4_VER)
$(LZ4_TAR):
$(FETCH) $@ $(LZ4_SHA)
$(LZ4_DIR)/Makefile: $(LZ4_TAR)
mkdir -p $(TRIPLET)
tar xzf $< -C $(TRIPLET)
touch $@
$(OC_SYSROOT)/lib/liblz4.a: $(TOOLCHAIN_BUILT) $(LZ4_DIR)/Makefile
$(MAKE) -C $(LZ4_DIR)/lib \
CC="$(TRIPLET)-clang $(EXTRA_CFLAGS)" \
AR="$(TRIPLET)-ar" \
LIBDIR=$(OC_SYSROOT)/lib \
INCLUDEDIR=$(OC_SYSROOT)/include \
install
rm -f $(OC_SYSROOT)/lib/liblz4.so*
LZ4_DEPS := $(OC_SYSROOT)/lib/liblz4.a
lz4: $(LZ4_DEPS)
#####################################################################
#
# Build OpenConnect for Android
#
OPENCONNECT_SRC := ..
OPENCONNECT_BUILD := $(TRIPLET)/openconnect
$(OPENCONNECT_SRC)/configure:
cd $(OPENCONNECT_SRC) && ./autogen.sh
$(OPENCONNECT_BUILD)/Makefile: $(TOOLCHAIN_BUILT) $(GNUTLS_DEPS) $(LIBXML_DEPS) \
$(STOKEN_DEPS) $(LZ4_DEPS) $(OPENCONNECT_SRC)/configure
mkdir -p $(OPENCONNECT_BUILD)
cd $(OPENCONNECT_BUILD) && ../../../configure \
--host=$(TRIPLET) --prefix=/ \
CFLAGS="$(EXTRA_CFLAGS) -fvisibility=default -fPIE" \
LDFLAGS="$(EXTRA_LDFLAGS) -rdynamic -pie" \
GNUTLS_LIBS="$(shell $(PKG_CONFIG) --static --libs gnutls)" \
LIBSTOKEN_LIBS="$(shell $(PKG_CONFIG) --static --libs stoken)" \
--enable-shared --with-vpnc-script=/etc/vpnc/vpnc-script \
--with-java=$(OC_SYSROOT)/include --enable-jni-standalone \
--disable-symvers
openconnect: $(OPENCONNECT_BUILD)/Makefile
make -C $(OPENCONNECT_BUILD)
make -C $(OPENCONNECT_BUILD) install-strip DESTDIR=$(DESTDIR)
#####################################################################
#
# Build run_pie helper program
#
$(DESTDIR)/sbin/run_pie: run_pie.c $(TOOLCHAIN_BUILT)
mkdir -p $(DESTDIR)/sbin
$(TRIPLET)-clang $< -o $@ -ldl
.PHONY: run_pie
run_pie: $(DESTDIR)/sbin/run_pie
#####################################################################
#
# Special targets for maintainer use
#
# download + extract, but do not build
.PHONY: sources
sources: $(SOURCE_LIST)
.PHONY: $(MIRROR_TEST_TARGETS)
$(MIRROR_TEST_TARGETS) : mirror-test-% :
$(FETCH) --mirror-test $($(*)_TAR) $($(*)_SHA)
# (re)test all mirrors for all packages. safe for use with "make -jN"
.PHONY: mirror-test
mirror-test: $(MIRROR_TEST_TARGETS)
|
