#

# To build a 64-bit executable: make -f Makefile.mingw

# To build a 32-bit executable: make -f Makefile.mingw BUILD_32BIT=1

#

# Enable to echo commands for debugging.

#SHELL = sh -xv

# If we're in Linux, lets see if we can find the path to Mingw automatically...

ARCHITECTURE=

CC_PREFIX=

OPENSSL_TARGET=

ifneq ($(BUILD_32BIT),)

DEFINES=-DBUILD_32BIT=1

endif

ifeq ($(shell uname), Linux)

MINGW32=$(shell which i686-w64-mingw32-gcc)

ifneq ($(MINGW32),)

CC=$(MINGW32)

ARCHITECTURE=32-bit

CC_PREFIX=i686-w64-mingw32-

OPENSSL_TARGET=mingw

endif

MINGW64=$(shell which x86_64-w64-mingw32-gcc)

ifneq ($(MINGW64),)

ifeq ($(BUILD_32BIT),)

CC=$(MINGW64)

ARCHITECTURE=64-bit

CC_PREFIX=x86_64-w64-mingw32-

OPENSSL_TARGET=mingw64

endif

endif

endif

ifndef CC

$(error "Failed to determine the compiler!")

endif

.PHONY: clean

# Enable security options like stack protectors and variable formatting checks.

# Sadly, we can't use -pie, because MinGW produces a broken executable when

# enabled.

SECURITY_OPTIONS=-fstack-protector-all -D_FORTIFY_SOURCE=2 -Wformat -Wformat-security

# Turn on linker optimizations, and DEP support (--nxcompat)

LINK_OPTIONS=-Wl,-O1 -Wl,--discard-all -Wl,--no-undefined -Wl,--dynamicbase -Wl,--nxcompat -static

CFLAGS += -Iopenssl_mingw/include -D__USE_GNU -DOPENSSL_NO_SSL2 -Wno-deprecated-declarations

LDFLAGS += -lws2_32 -lgdi32 -lcrypt32

# Set the version string for the program.

VERSION = "$(shell grep -E -o -m 1 '[0-9]+\.[0-9]+\.[0-9]+(\-[a-z]+[0-9]+)?' Changelog) Windows $(ARCHITECTURE) (Mingw)"

all: sslscan

.openssl_mingw.is.fresh: opensslpull

true

zlibpull:

# If the zlib dir already exists, issue a pull, otherwise clone it from GitHub. Either way, check out the latest tag.

if [ -d zlib_mingw -a -d zlib_mingw/.git ]; then \

cd ./zlib_mingw && git pull && git checkout tags/`git describe --abbrev=0 --tags` ; \

else \

git clone -b master --depth 1 https://github.com/madler/zlib ./zlib_mingw && cd ./zlib_mingw && git checkout tags/`git describe --abbrev=0` ; \

fi

opensslpull:

# OpenSSL 3.5.5 breaks the build, so stick on 3.5.4 for now until 3.5.6 is released to fix it

# https://github.com/openssl/openssl/issues/29818

# upstream=`git ls-remote https://github.com/openssl/openssl | grep -Eo '(openssl-3\.5\.[0-9]+)' | sort -V | tail -n 1` ; \

upstream='openssl-3.5.4' ; \

if [ -d openssl_mingw -a -d openssl_mingw/.git ]; then \

if [ "$$upstream" != "`cd ./openssl_mingw && git describe --exact-match --tags`" ]; then \

cd ./openssl_mingw && git fetch --depth 1 origin refs/tags/$$upstream:refs/tags/$$upstream && git checkout $$upstream && touch ../.openssl_mingw.is.fresh ; \

fi \

else \

git clone --depth 1 -b $$upstream https://github.com/openssl/openssl ./openssl_mingw && cd ./openssl_mingw && touch ../.openssl_mingw.is.fresh ; \

fi

zlib_mingw/libz.a: zlibpull

cd ./zlib_mingw; make -f win32/Makefile.gcc PREFIX=$(CC_PREFIX)

openssl_mingw/Makefile: .openssl_mingw.is.fresh zlib_mingw/libz.a

cd ./openssl_mingw; ./Configure --cross-compile-prefix=$(CC_PREFIX) --with-zlib-include=`pwd`/../zlib_mingw --with-zlib-lib=`pwd`/../zlib_mingw -fstack-protector-all -D_FORTIFY_SOURCE=2 $(OPENSSL_TARGET) no-shared enable-weak-ssl-ciphers enable-ssl2 zlib

openssl_mingw/libcrypto.a: openssl_mingw/Makefile

$(MAKE) -C openssl_mingw depend CC=$(CC)

$(MAKE) -j 10 -C openssl_mingw all CC=$(CC)

sslscan: openssl_mingw/libcrypto.a sslscan.c

$(CC) $(CFLAGS) -DVERSION=\"$(VERSION)\" $(DEFINES) $(SECURITY_OPTIONS) $(LINK_OPTIONS) -o sslscan.exe sslscan.c openssl_mingw/libssl.a openssl_mingw/libcrypto.a zlib_mingw/libz.a $(LDFLAGS)

$(CC_PREFIX)strip sslscan.exe

clean:

rm -f *.o sslscan.exe .openssl_mingw.is.fresh

if [ -f openssl_mingw/Makefile ]; then $(MAKE) -C openssl_mingw clean; fi

if [ -f zlib_mingw/win32/Makefile.gcc ]; then $(MAKE) -C zlib_mingw -f win32/Makefile.gcc clean; fi