text: # This file is dual licensed under the terms of the Apache License, Version
  # 2.0, and the BSD License. See the LICENSE file in the root of this repository
  # for complete details.
  
  
  import os
  import sys
  from distutils import dist
  from distutils.ccompiler import get_default_compiler
  from distutils.command.config import config
  
  from _cffi_src.utils import (
      build_ffi_for_binding,
      compiler_type,
      extra_link_args,
  )
  
  
  def _get_openssl_libraries(platform):
      if os.environ.get("CRYPTOGRAPHY_SUPPRESS_LINK_FLAGS", None):
          return []
      # OpenSSL goes by a different library name on different operating systems.
      if platform == "win32" and compiler_type() == "msvc":
          return [
              "libssl",
              "libcrypto",
              "advapi32",
              "crypt32",
              "gdi32",
              "user32",
              "ws2_32",
          ]
      else:
          # darwin, linux, mingw all use this path
          # In some circumstances, the order in which these libs are
          # specified on the linker command-line is significant;
          # libssl must come before libcrypto
          # (https://marc.info/?l=openssl-users&m=135361825921871)
          # -lpthread required due to usage of pthread an potential
          # existance of a static part containing e.g. pthread_atfork
          # (https://github.com/pyca/cryptography/issues/5084)
          if sys.platform == "zos":
              return ["ssl", "crypto"]
          else:
              return ["ssl", "crypto", "pthread"]
  
  
  def _extra_compile_args(platform):
      """
      We set -Wconversion args here so that we only do Wconversion checks on the
      code we're compiling and not on cffi itself (as passing -Wconversion in
      CFLAGS would do). We set no error on sign conversion because some
      function signatures in LibreSSL differ from OpenSSL have changed on long
      vs. unsigned long in the past. Since that isn't a precision issue we don't
      care.
      """
      # make sure the compiler used supports the flags to be added
      is_gcc = False
      if get_default_compiler() == "unix":
          d = dist.Distribution()
          cmd = config(d)
          cmd._check_compiler()
          is_gcc = (
              "gcc" in cmd.compiler.compiler[0]
              or "clang" in cmd.compiler.compiler[0]
          )
      if is_gcc or not (
          platform in ["win32", "hp-ux11", "sunos5"]
          or platform.startswith("aix")
      ):
          return ["-Wconversion", "-Wno-error=sign-conversion"]
      else:
          return []
  
  
  ffi = build_ffi_for_binding(
      module_name="_openssl",
      module_prefix="_cffi_src.openssl.",
      modules=[
          # This goes first so we can define some cryptography-wide symbols.
          "cryptography",
          # Provider comes early as well so we define OSSL_LIB_CTX
          "provider",
          "asn1",
          "bignum",
          "bio",
          "cmac",
          "conf",
          "crypto",
          "dh",
          "dsa",
          "ec",
          "ecdh",
          "ecdsa",
          "engine",
          "err",
          "evp",
          "fips",
          "hmac",
          "nid",
          "objects",
          "ocsp",
          "opensslv",
          "osrandom_engine",
          "pem",
          "pkcs12",
          "rand",
          "rsa",
          "ssl",
          "x509",
          "x509name",
          "x509v3",
          "x509_vfy",
          "pkcs7",
          "callbacks",
      ],
      libraries=_get_openssl_libraries(sys.platform),
      extra_compile_args=_extra_compile_args(sys.platform),
      extra_link_args=extra_link_args(compiler_type()),
  )
  