uringmachine 0.16 → 0.18

data/vendor/libressl/scripts/i686-w64-mingw32.cmake

@@ -0,0 +1,9 @@
+SET(CMAKE_SYSTEM_NAME Windows)
+SET(CMAKE_SYSTEM_PROCESSOR i386)
+SET(CMAKE_C_COMPILER i686-w64-mingw32-gcc)
+SET(CMAKE_CXX_COMPILER i686-w64-mingw32-g++)
+SET(CMAKE_RC_COMPILER i686-w64-mingw32-windres)
+set(CMAKE_FIND_ROOT_PATH_MODE_PROGRAM NEVER)
+set(CMAKE_FIND_ROOT_PATH_MODE_LIBRARY ONLY)
+set(CMAKE_FIND_ROOT_PATH_MODE_INCLUDE ONLY)
+

data/vendor/libressl/scripts/test

@@ -0,0 +1,210 @@
+#!/bin/sh
+set -e
+set -x
+
+if [ "$ARCH" = "" ]; then
+	ARCH=`uname -m`
+fi
+
+if [ "$ARCH" = "mingw32" -o "$ARCH" = "mingw64" -o "$ARCH" = "arm32" ]; then
+	unset CC
+fi
+
+ENABLE_ASM="${ENABLE_ASM:=ON}"
+
+if type apt-get >/dev/null 2>&1; then
+	sudo apt-get update
+	sudo apt-get install -y cmake ninja-build
+fi
+
+# generate source tree
+./autogen.sh
+
+VERSION=`cat VERSION`
+
+# test macOS
+if [ `uname` = "Darwin" ]; then
+	# test autotools
+	./configure
+
+	# make distribution
+	make -j 4 distcheck
+
+	# test cmake
+	tar zxvf libressl-$VERSION.tar.gz
+	cd libressl-$VERSION
+
+	(
+		mkdir build-static
+		cd build-static
+		cmake -DCMAKE_OSX_ARCHITECTURES=$ARCH ..
+		make -j 4
+		if [ "$ARCH" = "arm64" ] && [ "$OS" = "macos-12" ] || [ "$OS" = "macos-13" ]; then
+			echo "##### skip tests"
+		else
+			make test
+		fi
+	)
+
+	(
+		mkdir build-shared
+		cd build-shared
+		cmake -DBUILD_SHARED_LIBS=ON -DCMAKE_OSX_ARCHITECTURES=$ARCH ..
+		make -j 4
+		if [ "$ARCH" = "arm64" ] && [ "$OS" = "macos-12" ] || [ "$OS" = "macos-13" ]; then
+			echo "##### skip tests"
+		else
+			make test
+		fi
+	)
+
+# assuming Linux below
+elif [ "$ARCH" = "native" ]; then
+	# test autotools
+	./configure
+
+	# make distribution
+	make -j 4 distcheck
+
+	tar zxvf libressl-$VERSION.tar.gz
+	cd libressl-$VERSION
+
+
+	# test cmake and ninja
+	(
+		mkdir build-static
+		cd build-static
+		cmake -GNinja -DENABLE_ASM=${ENABLE_ASM} ..
+		ninja
+		ninja test
+	)
+
+	(
+		mkdir build-shared
+		cd build-shared
+		cmake -GNinja -DBUILD_SHARED_LIBS=ON -DENABLE_ASM=${ENABLE_ASM} ..
+		ninja
+		ninja test
+	)
+
+elif [ "$ARCH" = "mingw32" -o "$ARCH" = "mingw64" ]; then
+	CPU=i686
+	if [ "$ARCH" = "mingw64" ]; then
+		CPU=x86_64
+	fi
+
+	if ! type i686-w64-mingw32-gcc > /dev/null; then
+		sudo apt-get install -y mingw-w64
+	fi
+
+	./configure --host=$CPU-w64-mingw32
+	make -j 4
+
+	(
+	 rm -fr build-static
+	 mkdir build-static
+	 cd build-static
+	 cmake -GNinja -DCMAKE_TOOLCHAIN_FILE=../scripts/$CPU-w64-mingw32.cmake -DENABLE_ASM=${ENABLE_ASM} ..
+	 ninja -j 4
+	)
+	(
+	 rm -fr build-shared
+	 mkdir build-shared
+	 cd build-shared
+	 cmake -GNinja -DCMAKE_TOOLCHAIN_FILE=../scripts/$CPU-w64-mingw32.cmake -DBUILD_SHARED_LIBS=ON -DENABLE_ASM=${ENABLE_ASM} ..
+	 ninja -j 4
+	)
+
+elif [ "$ARCH" = "arm32" -o "$ARCH" = "arm64" ]; then
+	sudo apt-get install -y qemu-user-static binfmt-support
+
+	if [ "$ARCH" = "arm32" ]; then
+		sudo apt-get install -y g++-arm-linux-gnueabihf
+		sudo ln -sf /usr/arm-linux-gnueabihf/lib/ld-linux-armhf.so.3 /lib/
+		./configure --host=arm-linux-gnueabihf
+		LD_LIBRARY_PATH=/usr/arm-linux-gnueabihf/lib make -j 4 check
+	else
+		sudo apt-get install -y g++-aarch64-linux-gnu
+		sudo ln -sf /usr/aarch64-linux-gnu/lib/ld-linux-aarch64.so.1 /lib/
+		./configure --host=aarch64-linux-gnu
+		LD_LIBRARY_PATH=/usr/aarch64-linux-gnu/lib make -j 4 check
+	fi
+
+	file apps/openssl/.libs/openssl
+
+elif [ "$ARCH" = "loong64" ]; then
+	sudo apt install -y qemu-user-static binfmt-support g++-14-loongarch64-linux-gnu
+	sudo ln -sf /usr/loongarch64-linux-gnu/lib64/ld-linux-loongarch-lp64d.so.1 /lib64
+
+	CC=loongarch64-linux-gnu-gcc-14
+	CXX=loongarch64-linux-gnu++-14
+	AR=loongarch64-linux-gnu-ar
+	STRIP=loongarch64-linux-gnu-strip-14
+	RANLIB=loongarch64-linux-gnu-ranlib
+
+	./configure --host=loongarch64-linux-gnu
+	LD_LIBRARY_PATH=/usr/loongarch64-linux-gnu/lib make -j 4 check
+
+	file apps/openssl/openssl
+
+elif [ "$ARCH" = "mips32" -o "$ARCH" = "mips64" ]; then
+	sudo apt-get install -y qemu-user-static binfmt-support
+
+	if [ "$ARCH" = "mips32" ]; then
+		sudo apt-get install -y g++-mips-linux-gnu
+		sudo ln -sf /usr/mipsel-linux-gnu/lib/ld.so.1 /lib/
+		./configure --host=mipsel-linux-gnu
+		LD_LIBRARY_PATH=/usr/mipsel-linux-gnu/lib make -j 4 check
+	else
+		sudo apt-get install -y g++-mips64el-linux-gnuabi64
+		sudo ln -sf /usr/mips64el-linux-gnuabi64/lib64/ld.so.1 /lib64
+		./configure --host=mips64el-linux-gnuabi64
+		LD_LIBRARY_PATH=/usr/mips64el-linux-gnuabi64/lib make -j 4 check
+	fi
+
+	file apps/openssl/.libs/openssl
+
+elif [ "$ARCH" = "android" ]; then
+	export TC_FILE=$ANDROID_NDK_HOME/build/cmake/android.toolchain.cmake
+
+	# set target API level and architecture
+	level_arch=""
+	level=$MIN_NAL
+	while [ $level -le $MAX_NAL ]
+	do
+		level_arch="$level_arch $level;x86_64"
+		level_arch="$level_arch $level;x86"
+		level_arch="$level_arch $level;arm64-v8a"
+
+		level=`expr $level + 1`
+	done
+
+	echo "##### level_arch = $level_arch"
+
+	# build each API level and architecture
+	for la in $level_arch
+	do
+		NAL=`echo $la | cut -d ';' -f 1`
+		ABI=`echo $la | cut -d ';' -f 2`
+		echo ""
+		echo "##### Date: `date`, Native API level: $NAL, ABI: $ABI"
+
+		(
+		 build_dir=build-$NAL_$ABI
+		 rm -fr $build_dir include/openssl/opensslconf.h
+		 mkdir $build_dir
+		 cd $build_dir
+		 echo "##### cmake -GNinja -DCMAKE_MAKE_PROGRAM=ninja -DANDROID_NDK=$ANDROID_NDK_HOME -DCMAKE_TOOLCHAIN_FILE=$TC_FILE -DANDROID_ABI=$ABI -DANDROID_NATIVE_API_LEVEL=$NAL .."
+		 cmake -GNinja -DCMAKE_MAKE_PROGRAM=ninja \
+		 -DANDROID_NDK=$ANDROID_NDK_HOME \
+		 -DCMAKE_TOOLCHAIN_FILE=$TC_FILE \
+		 -DANDROID_ABI=$ABI -DANDROID_NATIVE_API_LEVEL=$NAL \
+		 -DENABLE_ASM=${ENABLE_ASM} ..
+
+		 ninja -j 4
+
+		 echo ""
+		 file apps/openssl/openssl
+		)
+	done
+fi

data/vendor/libressl/scripts/wrap-compiler-for-flag-check

@@ -0,0 +1,31 @@
+#!/bin/sh
+
+# This file is in the public domain.
+# https://github.com/kmcallister/autoharden/blob/c5c7842f39c2f8d19836bb5427d6479db4436d62/LICENSE
+#
+# From kmcallister: 
+# https://github.com/kmcallister/autoharden/blob/efaf5a16612589808c276a11536ea9a47071f74b/scripts/wrap-compiler-for-flag-check
+
+# Prior to clang v5.1, there was no way to make
+# clang's "argument unused" warning fatal.  This
+# wrapper script that greps for this warning message. Newer clang's have no issues.
+#
+# Ideally the search string would also include 'clang: ' but this output might
+# depend on clang's argv[0].
+#
+set -o errexit
+set -o nounset
+
+if out=`"$@" 2>&1`; then
+  echo "$out"
+  if echo "$out" | grep 'warning: argument unused' >/dev/null; then
+    echo "$0: found clang warning"
+    exit 1
+  else
+    exit 0
+  fi
+else
+  code=$?
+  echo "$out"
+  exit $code
+fi

data/vendor/libressl/scripts/x86_64-w64-mingw32.cmake

@@ -0,0 +1,9 @@
+SET(CMAKE_SYSTEM_NAME Windows)
+SET(CMAKE_SYSTEM_PROCESSOR amd64)
+SET(CMAKE_C_COMPILER x86_64-w64-mingw32-gcc)
+SET(CMAKE_CXX_COMPILER x86_64-w64-mingw32-g++)
+SET(CMAKE_RC_COMPILER x86_64-w64-mingw32-windres)
+set(CMAKE_FIND_ROOT_PATH_MODE_PROGRAM NEVER)
+set(CMAKE_FIND_ROOT_PATH_MODE_LIBRARY ONLY)
+set(CMAKE_FIND_ROOT_PATH_MODE_INCLUDE ONLY)
+

data/vendor/libressl/ssl/CMakeLists.txt

@@ -0,0 +1,183 @@
+#
+# Copyright (c) 2014 Brent Cook
+#
+# Permission to use, copy, modify, and distribute this software for any
+# purpose with or without fee is hereby granted, provided that the above
+# copyright notice and this permission notice appear in all copies.
+#
+# THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+# WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+# MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+# ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+# WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+# ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+# OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+
+set(
+	SSL_SRC
+	bio_ssl.c
+	d1_both.c
+	d1_lib.c
+	d1_pkt.c
+	d1_srtp.c
+	pqueue.c
+	s3_cbc.c
+	s3_lib.c
+	ssl_asn1.c
+	ssl_both.c
+	ssl_cert.c
+	ssl_ciph.c
+	ssl_ciphers.c
+	ssl_clnt.c
+	ssl_err.c
+	ssl_init.c
+	ssl_kex.c
+	ssl_lib.c
+	ssl_methods.c
+	ssl_packet.c
+	ssl_pkt.c
+	ssl_rsa.c
+	ssl_seclevel.c
+	ssl_sess.c
+	ssl_sigalgs.c
+	ssl_srvr.c
+	ssl_stat.c
+	ssl_tlsext.c
+	ssl_transcript.c
+	ssl_txt.c
+	ssl_versions.c
+	t1_enc.c
+	t1_lib.c
+	tls_buffer.c
+	tls_content.c
+	tls_key_share.c
+	tls_lib.c
+	tls12_key_schedule.c
+	tls12_lib.c
+	tls12_record_layer.c
+	tls13_client.c
+	tls13_error.c
+	tls13_handshake.c
+	tls13_handshake_msg.c
+	tls13_key_schedule.c
+	tls13_legacy.c
+	tls13_lib.c
+	tls13_quic.c
+	tls13_record.c
+	tls13_record_layer.c
+	tls13_server.c
+)
+
+set(
+	BS_SRC
+	bs_ber.c
+	bs_cbb.c
+	bs_cbs.c
+)
+
+add_library(ssl_obj OBJECT ${SSL_SRC})
+target_include_directories(ssl_obj
+	PRIVATE
+		.
+		hidden
+		../crypto
+		../crypto/bio
+		../include/compat
+	PUBLIC
+		../include
+		${CMAKE_BINARY_DIR}/include)
+
+if(MSVC)
+	# "C4702" - unreachable code
+	set_source_files_properties(d1_pkt.c s3_cbc.c PROPERTIES
+		COMPILE_OPTIONS /wd4702
+	)
+endif()
+
+add_library(bs_obj OBJECT ${BS_SRC})
+target_include_directories(bs_obj
+	PRIVATE
+		.
+		../include/compat)
+
+if(BUILD_SHARED_LIBS)
+	add_library(ssl $<TARGET_OBJECTS:ssl_obj> $<TARGET_OBJECTS:compat_obj> $<TARGET_OBJECTS:bs_obj>)
+else()
+	add_library(ssl $<TARGET_OBJECTS:ssl_obj> empty.c)
+endif()
+
+export_symbol(ssl ${CMAKE_CURRENT_SOURCE_DIR}/ssl.sym)
+target_link_libraries(ssl crypto ${PLATFORM_LIBS})
+set_target_properties(ssl PROPERTIES
+	OUTPUT_NAME ssl
+	ARCHIVE_OUTPUT_NAME ssl
+	EXPORT_NAME SSL
+	VERSION ${SSL_VERSION}
+	SOVERSION ${SSL_MAJOR_VERSION}
+)
+if(NOT CMAKE_VERSION VERSION_LESS 3.27.0)
+	set_target_properties(ssl PROPERTIES DLL_NAME_WITH_SOVERSION TRUE)
+endif()
+
+target_include_directories(
+	ssl
+	PUBLIC
+	$<BUILD_INTERFACE:${CMAKE_BINARY_DIR}/include>
+	$<INSTALL_INTERFACE:${CMAKE_INSTALL_INCLUDEDIR}>
+)
+
+if(HOST_AARCH64)
+	target_include_directories(ssl_obj PRIVATE ../crypto/arch/aarch64/)
+elseif(HOST_ARM)
+	target_include_directories(ssl_obj PRIVATE ../crypto/arch/arm/)
+elseif(HOST_I386)
+	target_include_directories(ssl_obj PRIVATE ../crypto/arch/i386/)
+elseif(HOST_LOONGARCH64)
+	target_include_directories(ssl_obj PRIVATE ../crypto/arch/loongarch64)
+elseif(HOST_MIPS64)
+	target_include_directories(ssl_obj PRIVATE ../crypto/arch/mips64)
+elseif(HOST_MIPS)
+	target_include_directories(ssl_obj PRIVATE ../crypto/arch/mips)
+elseif(HOST_POWERPC)
+	target_include_directories(ssl_obj PRIVATE ../crypto/arch/powerpc)
+elseif(HOST_POWERPC64)
+	target_include_directories(ssl_obj PRIVATE ../crypto/arch/powerpc64)
+elseif(HOST_RISCV64)
+	target_include_directories(ssl_obj PRIVATE ../crypto/arch/riscv64)
+elseif(HOST_SPARC64)
+	target_include_directories(ssl_obj PRIVATE ../crypto/arch/sparc64)
+elseif(HOST_X86_64)
+	target_include_directories(ssl_obj PRIVATE ../crypto/arch/amd64)
+endif()
+
+install(
+	TARGETS ssl
+	EXPORT SSL-target
+)
+
+export(
+	EXPORT SSL-target
+	FILE "${LibreSSL_BINARY_DIR}/LibreSSL-SSL.cmake"
+	NAMESPACE LibreSSL::
+)
+
+if(ENABLE_LIBRESSL_INSTALL)
+	install(
+		TARGETS ssl
+		ARCHIVE DESTINATION ${CMAKE_INSTALL_LIBDIR}
+		LIBRARY DESTINATION ${CMAKE_INSTALL_LIBDIR}
+		RUNTIME DESTINATION ${CMAKE_INSTALL_BINDIR}
+	)
+	install(
+		EXPORT SSL-target
+		FILE "LibreSSL-SSL.cmake"
+		NAMESPACE LibreSSL::
+		DESTINATION "${LIBRESSL_INSTALL_CMAKEDIR}"
+	)
+endif(ENABLE_LIBRESSL_INSTALL)
+
+# build static library for regression test
+if(BUILD_SHARED_LIBS)
+	add_library(ssl-static STATIC $<TARGET_OBJECTS:ssl_obj>)
+	target_link_libraries(ssl-static crypto-static ${PLATFORM_LIBS})
+endif()

data/vendor/libressl/ssl/Makefile.am

@@ -0,0 +1,187 @@
+#
+# Copyright (c) 2014 Brent Cook
+#
+# Permission to use, copy, modify, and distribute this software for any
+# purpose with or without fee is hereby granted, provided that the above
+# copyright notice and this permission notice appear in all copies.
+#
+# THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+# WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+# MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+# ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+# WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+# ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+# OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+
+include $(top_srcdir)/Makefile.am.common
+
+-include $(abs_top_builddir)/crypto/libcrypto_la_objects.mk
+
+AM_CPPFLAGS += -I$(top_srcdir)/crypto
+AM_CPPFLAGS += -I$(top_srcdir)/crypto/bio
+
+noinst_LTLIBRARIES = libbs.la
+
+if ENABLE_LIBTLS_ONLY
+noinst_LTLIBRARIES += libssl.la
+else
+lib_LTLIBRARIES = libssl.la
+endif
+
+noinst_DATA = remove_bs_objects
+
+EXTRA_DIST = VERSION
+EXTRA_DIST += CMakeLists.txt
+EXTRA_DIST += ssl.sym
+EXTRA_DIST += empty.c
+
+CLEANFILES = libssl_la_objects.mk
+
+EXTRA_libssl_la_DEPENDENCIES = libssl_la_objects.mk
+
+libssl_la_objects.mk: Makefile
+	@echo "libssl_la_objects= $(libssl_la_OBJECTS)" \
+	  | sed 's/  */ $$\(top_builddir\)\/ssl\//g' \
+	  > libssl_la_objects.mk
+
+.PHONY: remove_bs_objects
+remove_bs_objects: libssl.la
+	-$(AR) dv $(abs_top_builddir)/ssl/.libs/libssl.a \
+	    bs_ber.o bs_cbb.o bs_cbs.o
+
+libssl_la_CPPFLAGS = -I$(top_srcdir)/ssl/hidden ${AM_CPPFLAGS}
+libssl_la_LDFLAGS = -version-info @LIBSSL_VERSION@ -no-undefined -export-symbols $(top_srcdir)/ssl/ssl.sym
+libssl_la_LIBADD = $(abs_top_builddir)/crypto/libcrypto.la $(PLATFORM_LDADD)
+libssl_la_LIBADD += $(libcompat_la_objects)
+libssl_la_LIBADD += $(libcompatnoopt_la_objects)
+libssl_la_LIBADD += libbs.la
+
+libbs_la_SOURCES = bs_ber.c
+libbs_la_SOURCES += bs_cbb.c
+libbs_la_SOURCES += bs_cbs.c
+noinst_HEADERS = bytestring.h
+
+noinst_HEADERS += hidden/ssl_namespace.h
+noinst_HEADERS += hidden/openssl/srtp.h
+noinst_HEADERS += hidden/openssl/tls1.h
+noinst_HEADERS += hidden/openssl/ssl.h
+
+libssl_la_SOURCES = bio_ssl.c
+libssl_la_SOURCES += d1_both.c
+libssl_la_SOURCES += d1_lib.c
+libssl_la_SOURCES += d1_pkt.c
+libssl_la_SOURCES += d1_srtp.c
+libssl_la_SOURCES += pqueue.c
+libssl_la_SOURCES += s3_cbc.c
+libssl_la_SOURCES += s3_lib.c
+libssl_la_SOURCES += ssl_asn1.c
+libssl_la_SOURCES += ssl_both.c
+libssl_la_SOURCES += ssl_cert.c
+libssl_la_SOURCES += ssl_ciph.c
+libssl_la_SOURCES += ssl_ciphers.c
+libssl_la_SOURCES += ssl_clnt.c
+libssl_la_SOURCES += ssl_err.c
+libssl_la_SOURCES += ssl_init.c
+libssl_la_SOURCES += ssl_kex.c
+libssl_la_SOURCES += ssl_lib.c
+libssl_la_SOURCES += ssl_methods.c
+libssl_la_SOURCES += ssl_packet.c
+libssl_la_SOURCES += ssl_pkt.c
+libssl_la_SOURCES += ssl_rsa.c
+libssl_la_SOURCES += ssl_seclevel.c
+libssl_la_SOURCES += ssl_sess.c
+libssl_la_SOURCES += ssl_sigalgs.c
+libssl_la_SOURCES += ssl_srvr.c
+libssl_la_SOURCES += ssl_stat.c
+libssl_la_SOURCES += ssl_tlsext.c
+libssl_la_SOURCES += ssl_transcript.c
+libssl_la_SOURCES += ssl_txt.c
+libssl_la_SOURCES += ssl_versions.c
+libssl_la_SOURCES += t1_enc.c
+libssl_la_SOURCES += t1_lib.c
+libssl_la_SOURCES += tls_buffer.c
+libssl_la_SOURCES += tls_content.c
+libssl_la_SOURCES += tls_key_share.c
+libssl_la_SOURCES += tls_lib.c
+libssl_la_SOURCES += tls12_key_schedule.c
+libssl_la_SOURCES += tls12_lib.c
+libssl_la_SOURCES += tls12_record_layer.c
+libssl_la_SOURCES += tls13_client.c
+libssl_la_SOURCES += tls13_error.c
+libssl_la_SOURCES += tls13_handshake.c
+libssl_la_SOURCES += tls13_handshake_msg.c
+libssl_la_SOURCES += tls13_key_schedule.c
+libssl_la_SOURCES += tls13_legacy.c
+libssl_la_SOURCES += tls13_lib.c
+libssl_la_SOURCES += tls13_quic.c
+libssl_la_SOURCES += tls13_record.c
+libssl_la_SOURCES += tls13_record_layer.c
+libssl_la_SOURCES += tls13_server.c
+
+noinst_HEADERS += srtp.h
+noinst_HEADERS += dtls_local.h
+noinst_HEADERS += ssl_local.h
+noinst_HEADERS += ssl_sigalgs.h
+noinst_HEADERS += ssl_tlsext.h
+noinst_HEADERS += tls_content.h
+noinst_HEADERS += tls_internal.h
+noinst_HEADERS += tls12_internal.h
+noinst_HEADERS += tls13_internal.h
+noinst_HEADERS += tls13_handshake.h
+noinst_HEADERS += tls13_record.h
+
+# arch
+if HOST_AARCH64
+libssl_la_CPPFLAGS += -I$(top_srcdir)/crypto/arch/aarch64/
+endif
+noinst_HEADERS += $(top_srcdir)/crypto/arch/aarch64/crypto_arch.h
+
+if HOST_ARM
+libssl_la_CPPFLAGS += -I$(top_srcdir)/crypto/arch/arm/
+endif
+noinst_HEADERS += $(top_srcdir)/crypto/arch/arm/crypto_arch.h
+
+if HOST_I386
+libssl_la_CPPFLAGS += -I$(top_srcdir)/crypto/arch/i386/
+endif
+noinst_HEADERS += $(top_srcdir)/crypto/arch/i386/crypto_arch.h
+
+if HOST_LOONGARCH64
+libssl_la_CPPFLAGS += -I$(top_srcdir)/crypto/arch/loongarch64/
+endif
+noinst_HEADERS += $(top_srcdir)/crypto/arch/loongarch64/crypto_arch.h
+
+if HOST_MIPS
+libssl_la_CPPFLAGS += -I$(top_srcdir)/crypto/arch/mips/
+endif
+noinst_HEADERS += $(top_srcdir)/crypto/arch/mips/crypto_arch.h
+
+if HOST_MIPS64
+libssl_la_CPPFLAGS += -I$(top_srcdir)/crypto/arch/mips64/
+endif
+noinst_HEADERS += $(top_srcdir)/crypto/arch/mips64/crypto_arch.h
+
+if HOST_POWERPC
+libssl_la_CPPFLAGS += -I$(top_srcdir)/crypto/arch/powerpc/
+endif
+noinst_HEADERS += $(top_srcdir)/crypto/arch/powerpc/crypto_arch.h
+
+if HOST_POWERPC64
+libssl_la_CPPFLAGS += -I$(top_srcdir)/crypto/arch/powerpc64/
+endif
+noinst_HEADERS += $(top_srcdir)/crypto/arch/powerpc64/crypto_arch.h
+
+if HOST_RISCV64
+libssl_la_CPPFLAGS += -I$(top_srcdir)/crypto/arch/riscv64/
+endif
+noinst_HEADERS += $(top_srcdir)/crypto/arch/riscv64/crypto_arch.h
+
+if HOST_SPARC64
+libssl_la_CPPFLAGS += -I$(top_srcdir)/crypto/arch/sparc64/
+endif
+noinst_HEADERS += $(top_srcdir)/crypto/arch/sparc64/crypto_arch.h
+
+if HOST_X86_64
+libssl_la_CPPFLAGS += -I$(top_srcdir)/crypto/arch/amd64/
+endif
+noinst_HEADERS += $(top_srcdir)/crypto/arch/amd64/crypto_arch.h