# Template file for 'libtls'
pkgname=libtls
version=3.2.4
revision=2
wrksrc="libressl-${version}"
build_style=gnu-configure
configure_args="$(vopt_enable asm)"
hostmakedepends="automake libtool"
depends="ca-certificates"
short_desc="Version of the TLS/crypto stack forked from OpenSSL"
maintainer="Leah Neukirchen <leah@vuxu.org>"
license="OpenSSL, ISC"
homepage="http://www.libressl.org/"
changelog="https://raw.githubusercontent.com/libressl-portable/portable/master/ChangeLog"
distfiles="http://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-${version}.tar.gz"
checksum=ac1dbb9e05a64910856599b1ac61118fdec1b3d0c700e42444d81c0d5f507a5a
_lssl_asm_ver="1.2.0"
replaces="libtls20>0"

build_options="asm"
desc_option_asm="Use platform assembly for faster crypto"

build_options_default="asm"

if [ "$build_option_asm" ]; then
	distfiles+=" https://github.com/q66/libressl-portable-asm/archive/v${_lssl_asm_ver}.tar.gz"
	checksum+=" e1c76178c4deb1cd20a0cd7ba553d6607f8131acb2e0844223f797e42f0d6f60"
fi

case "$XBPS_TARGET_MACHINE" in
	# disable ssp
	i686-musl) configure_args+=" --disable-hardening";;
	# on armv5 always disable asm as it's not supported
	armv5*) configure_args+=" --disable-asm";;
esac

post_extract() {
	[ -z "$build_option_asm" ] && return 0
	mv ../libressl-portable-asm-${_lssl_asm_ver} .
}

pre_configure() {
	if [ "$build_option_asm" ]; then
		./libressl-portable-asm-${_lssl_asm_ver}/patch_libressl.sh .
	fi
	autoreconf -if
}

do_install() {
	make -C tls install DESTDIR="$DESTDIR"
	make -C apps/nc install DESTDIR="$DESTDIR"
	# libtls expects certs linked to /etc/ssl/cert.pem
	# instead of OpenSSL's /etc/ssl/certs.pem
	# Create a symlink for now while awaiting discussion.
	vmkdir etc/ssl
	ln -s certs.pem ${DESTDIR}/etc/ssl/cert.pem
	vlicense COPYING
	if [ "$build_option_asm" ]; then
		vlicense libressl-portable-asm-${_lssl_asm_ver}/LICENSE.cryptogams
		vlicense libressl-portable-asm-${_lssl_asm_ver}/LICENSE.openssl
	fi
	#find ${DESTDIR}/usr/share/man/man1 -type f ! -name openssl.1 -delete
}

libtls-devel_package() {
	short_desc+=" - development files"
	depends="libtls-${version}_${revision}"
	pkg_install() {
		vinstall include/tls.h 644 usr/include
		vmove "usr/lib/*.a"
		vmove "usr/lib/*.so"
		vinstall libtls.pc 644 usr/lib/pkgconfig
		for m in man/tls_*; do vman $m; done
	}
}

libressl-netcat_package() {
	short_desc="TCP/IP swiss army knife (LibreSSL variant)"
	alternatives="
	 nc:nc:/usr/bin/libressl-nc
	 nc:nc.1:/usr/share/man/man1/libressl-nc.1"
	pkg_install() {
		vbin apps/nc/.libs/nc libressl-nc
		vman apps/nc/nc.1 libressl-nc.1
	}
}