@@ -3,7 +3,7 @@ CRYPTOPP_NAME=cryptopp

 CXXFLAGS += -fPIC -fno-stack-protector -std=c++11  -g -DCRYPTOPP_NAME=$(CRYPTOPP_NAME)

 CFLAGS += -fPIC -fno-stack-protector -g

 #LDFLAGS = -Wl,-Bstatic -l$(CRYPTOPP_NAME) -Wl,-Bdynamic -lpam -Wl,--as-needed

-LDFLAGS = -lpam -l$(CRYPTOPP_NAME)

+LDFLAGS = -lpam -l$(CRYPTOPP_NAME) @LIBS@

 INTEGRATION_OBJS = sys_syslog.o sys_fstream.o sys_unistd.o sys_pwd.o sys_pam.o \

                    sys_stdlib.o sys_time.o

@@ -49,7 +49,7 @@ distclean: clean

 -include .depend

 %_test.out: %_test.o $(OBJS)

-	$(CXX) $(CXXFLAGS) $(CPPFLAGS) -o $@ $^ -l$(CRYPTOPP_NAME)

+	$(CXX) $(CXXFLAGS) $(CPPFLAGS) $(LDFLAGS) -o $@ $^

 RUN_%: %.out

 	@echo running $<

@@ -1386,6 +1386,52 @@ fi

   as_fn_set_status $ac_retval

 } # ac_fn_c_try_compile

+

+# ac_fn_c_try_link LINENO

+# -----------------------

+# Try to link conftest.$ac_ext, and return whether this succeeded.

+ac_fn_c_try_link ()

+{

+  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack

+  rm -f conftest.$ac_objext conftest$ac_exeext

+  if { { ac_try="$ac_link"

+case "(($ac_try" in

+  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;

+  *) ac_try_echo=$ac_try;;

+esac

+eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""

+$as_echo "$ac_try_echo"; } >&5

+  (eval "$ac_link") 2>conftest.err

+  ac_status=$?

+  if test -s conftest.err; then

+    grep -v '^ *+' conftest.err >conftest.er1

+    cat conftest.er1 >&5

+    mv -f conftest.er1 conftest.err

+  fi

+  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5

+  test $ac_status = 0; } && {

+	 test -z "$ac_c_werror_flag" ||

+	 test ! -s conftest.err

+       } && test -s conftest$ac_exeext && {

+	 test "$cross_compiling" = yes ||

+	 test -x conftest$ac_exeext

+       }; then :

+  ac_retval=0

+else

+  $as_echo "$as_me: failed program was:" >&5

+sed 's/^/| /' conftest.$ac_ext >&5

+

+	ac_retval=1

+fi

+  # Delete the IPA/IPO (Inter Procedural Analysis/Optimization) information

+  # created by the PGI compiler (conftest_ipa8_conftest.oo), as it would

+  # interfere with the next link command; also delete a directory that is

+  # left behind by Apple's compiler.  We do this before executing the actions.

+  rm -rf conftest.dSYM conftest_ipa8_conftest.oo

+  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno

+  as_fn_set_status $ac_retval

+

+} # ac_fn_c_try_link

 cat >config.log <<_ACEOF

 This file contains any messages produced by compilers while

 running configure, to aid debugging if configure makes a mistake.

@@ -2563,7 +2609,103 @@ else

 fi

-#and check crypto++

+

+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for SSL_library_init in -lssl" >&5

+$as_echo_n "checking for SSL_library_init in -lssl... " >&6; }

+if ${ac_cv_lib_ssl_SSL_library_init+:} false; then :

+  $as_echo_n "(cached) " >&6

+else

+  ac_check_lib_save_LIBS=$LIBS

+LIBS="-lssl  $LIBS"

+cat confdefs.h - <<_ACEOF >conftest.$ac_ext

+/* end confdefs.h.  */

+

+/* Override any GCC internal prototype to avoid an error.

+   Use char because int might match the return type of a GCC

+   builtin and then its argument prototype would still apply.  */

+#ifdef __cplusplus

+extern "C"

+#endif

+char SSL_library_init ();

+int

+main ()

+{

+return SSL_library_init ();

+  ;

+  return 0;

+}

+_ACEOF

+if ac_fn_c_try_link "$LINENO"; then :

+  ac_cv_lib_ssl_SSL_library_init=yes

+else

+  ac_cv_lib_ssl_SSL_library_init=no

+fi

+rm -f core conftest.err conftest.$ac_objext \

+    conftest$ac_exeext conftest.$ac_ext

+LIBS=$ac_check_lib_save_LIBS

+fi

+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_ssl_SSL_library_init" >&5

+$as_echo "$ac_cv_lib_ssl_SSL_library_init" >&6; }

+if test "x$ac_cv_lib_ssl_SSL_library_init" = xyes; then :

+  cat >>confdefs.h <<_ACEOF

+#define HAVE_LIBSSL 1

+_ACEOF

+

+  LIBS="-lssl $LIBS"

+

+else

+  as_fn_error $? "\"Can't find -lssl\"" "$LINENO" 5

+fi

+

+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for EVP_EncryptInit in -lcrypto" >&5

+$as_echo_n "checking for EVP_EncryptInit in -lcrypto... " >&6; }

+if ${ac_cv_lib_crypto_EVP_EncryptInit+:} false; then :

+  $as_echo_n "(cached) " >&6

+else

+  ac_check_lib_save_LIBS=$LIBS

+LIBS="-lcrypto  $LIBS"

+cat confdefs.h - <<_ACEOF >conftest.$ac_ext

+/* end confdefs.h.  */

+

+/* Override any GCC internal prototype to avoid an error.

+   Use char because int might match the return type of a GCC

+   builtin and then its argument prototype would still apply.  */

+#ifdef __cplusplus

+extern "C"

+#endif

+char EVP_EncryptInit ();

+int

+main ()

+{

+return EVP_EncryptInit ();

+  ;

+  return 0;

+}

+_ACEOF

+if ac_fn_c_try_link "$LINENO"; then :

+  ac_cv_lib_crypto_EVP_EncryptInit=yes

+else

+  ac_cv_lib_crypto_EVP_EncryptInit=no

+fi

+rm -f core conftest.err conftest.$ac_objext \

+    conftest$ac_exeext conftest.$ac_ext

+LIBS=$ac_check_lib_save_LIBS

+fi

+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_crypto_EVP_EncryptInit" >&5

+$as_echo "$ac_cv_lib_crypto_EVP_EncryptInit" >&6; }

+if test "x$ac_cv_lib_crypto_EVP_EncryptInit" = xyes; then :

+  cat >>confdefs.h <<_ACEOF

+#define HAVE_LIBCRYPTO 1

+_ACEOF

+

+  LIBS="-lcrypto $LIBS"

+

+else

+  as_fn_error $? "\"Can't find -lcrypto\"" "$LINENO" 5

+fi

+

+

+

 ac_config_files="$ac_config_files Makefile"

 cat >confcache <<\_ACEOF

@@ -3839,6 +3981,8 @@ $as_echo "$as_me: WARNING: unrecognized options: $ac_unrecognized_opts" >&2;}

 fi

+

+

 if test "$PAM_MODULE_DIRECTORY" = "$DEFAULT_PAM_MODULE_DIRECTORY"; then

     { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING:

         **

@@ -32,10 +32,15 @@ AC_ARG_WITH([cryptopp],

 	[WITH_CRYPTOPP=$withval],

 	[WITH_CRYPTOPP=yes])

-#and check crypto++

+AC_CHECK_LIB([ssl], [SSL_library_init],,[AC_MSG_ERROR("Can't find -lssl")])

+AC_CHECK_LIB([crypto], [EVP_EncryptInit],,[AC_MSG_ERROR("Can't find -lcrypto")])

+

+

 AC_CONFIG_FILES([Makefile])

 AC_OUTPUT

+

+

 if test "$PAM_MODULE_DIRECTORY" = "$DEFAULT_PAM_MODULE_DIRECTORY"; then

     AC_MSG_WARN([

         **