#!/bin/sh
ulimit -s unlimited
shopt -s extglob
# Copyright 2000 BSDi, Inc. Concord, CA, USA
# Copyright 2001, 2002 Slackware Linux, Inc.  Concord, CA, USA
# Copyright 2005-2023 Patrick J. Volkerding, Sebeka, MN, USA
# All rights reserved.
#
# Redistribution and use of this script, with or without modification, is
# permitted provided that the following conditions are met:
#
# 1. Redistributions of this script must retain the above copyright
#    notice, this list of conditions and the following disclaimer.
#
#  THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR IMPLIED
#  WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
#  MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.  IN NO
#  EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
#  SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
#  PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS;
#  OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
#  WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
#  OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
#  ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

# openssl.SlackBuild
# Heavily based on the original Slackware build scripts,
# Modified by Stuart Winter <mozes@slackware.com>
# 22-Dec-2004

# Record toolchain & other info for the build log:
slackbuildinfo

# Paths to skeleton port's source & real Slackware source tree:
slackset_var_cwds

# Detect whether we're building for /patches:
# This function sets the variable 'SLACKPATCHING'
slack_findpkgstore_is_stablerelease

# Temporary build locations:
export TMPBUILD=$TMP/build-$PKGNAM
export PKG=$TMP/package-$PKGNAM
mkpkgdirs # Delete and re-create temporary directories

# Determine the architecture type:
case $ARCH in
   arm)     SLKCONFARGS="linux-armv4" ;;
   aarch64) SLKCONFARGS="linux-aarch64 enable-ec_nistp_64_gcc_128" ;;
esac

# This build script creates the basic a/openssl-solibs (consisting just of the shared objects)
# plus the full n/openssl package:
PKG1=$TMP/package-openssl
PKG2=$TMP/package-ossllibs
NAME1=$PKGNAM-$VERSION-$ARCH-$BUILD
NAME2=$PKGNAM-solibs-$VERSION-$ARCH-$BUILD

cd $TMP
rm -rf $PKG1 $PKG2
mkdir -p $PKG1/install $PKG2/{install,usr}

# Extract source:
cd $TMPBUILD
tar xvvf $CWD/openssl-$VERSION.tar.!(*sign|*asc|*sig)
cd $PKGNAM-*/ || exit 1
slackhousekeeping

#
# Apply patches
#
#############################################################################
# ARM:
# Use /lib64:
auto_apply_patch $PORTCWD/sources/0001-Aarch64-and-ppc64le-use-lib64.patch.xz || failpatch
#############################################################################

# Patch openssl.cnf to remove useless FIPS documentation, and to provide
# examples for enabling legacy algorithms. These are considered weaker, but
# some applications may still require them.
zcat $CWD/0024-load-legacy-prov.patch.gz | patch -p1 --verbose || exit 1
#############################################################################

# Copy docs:
mkdir -p $PKG1/usr/doc/openssl-$VERSION
cp -fav \
   ACKNOWLEDGEMENTS* AUTHORS* CHANGES* CODE-OF-CONDUCT* CONTRIBUTING* FAQ* \
   HACKING* INSTALL* LICENSE* NEWS* NOTES* README* SUPPORT* VERSION* doc \
   $PKG1/usr/doc/openssl-$VERSION

# If there's a CHANGES file, installing at least part of the recent history
# is useful, but don't let it get totally out of control:
if [ -r CHANGES ]; then
  DOCSDIR=$(echo $PKG1/usr/doc/*-$VERSION)
  head -n 2000 CHANGES > $DOCSDIR/CHANGES
  touch -r CHANGES $DOCSDIR/CHANGES
fi

# Make apps/openssl work after compilation so that it can generate
# certificates.  This is required since we removepkg openssl before building.
# This was for openssl-1.1.. it worked then but I don't think we need it now with openssl3.
#ln -vfs libcrypto.so libcrypto.so.0
#ln -vfs libssl.so    libssl.so.0

# Configure:
perl \
Configure \
   --prefix=/usr \
   --openssldir=/etc/ssl \
   --libdir=lib${LIBDIRSUFFIX} \
   zlib \
   enable-camellia \
   enable-seed \
   enable-rfc3779 \
   enable-cms \
   enable-md2 \
   enable-rc5 \
   enable-ssl3 \
   enable-ssl3-method \
   no-weak-ssl-ciphers \
   no-mdc2 \
   no-ec2m \
   no-sm2 \
   no-sm4 \
   no-sse2 \
   shared \
   ${SLKCONFARGS} || failconfig

# Build:
make depend || failmake
ln -vsf apps/openssl.pod crypto/crypto.pod ssl/ssl.pod doc/
make $NUMJOBS || make || failmake

# Install into package:
make install DESTDIR=$PKG1 || failinstall

# No thanks on the static libraries:
rm -fv $PKG1/usr/lib${LIBDIRSUFFIX}/*.a

# No thanks on manpages duplicated as html:
rm -rf $PKG1/usr/share/doc

# Also no thanks on .pod versions of the already shipped manpages:
rm -rf $PKG1/usr/doc/openssl-*/doc/man*
rm -rf $PKG1/usr/doc/openssl-*/doc/internal

# Move libraries, as they might be needed by programs that bring a network
# mounted /usr online:

mkdir -vpm755 $PKG1/lib${LIBDIRSUFFIX}
( cd $PKG1/usr/lib${LIBDIRSUFFIX}
  for file in lib*.so.? ; do
    mv -fv $file ../../lib${LIBDIRSUFFIX}
    ln -vsf ../../lib${LIBDIRSUFFIX}/$file .
  done )

# Add a cron script to warn root if a certificate is going to expire soon:
mkdir -vpm755 $PKG1/etc/cron.daily
zcat $CWD/certwatch.gz > $PKG1/etc/cron.daily/certwatch.new
chmod 755 $PKG1/etc/cron.daily/certwatch.new

# Make config file non-clobber:
mv -fv $PKG1/etc/ssl/openssl.cnf $PKG1/etc/ssl/openssl.cnf.new

# Remove duplicate config file:
rm -fv $PKG1/etc/ssl/openssl.cnf.dist

# Relocate the manpages:
mv -fv $PKG1/usr/share/man $PKG1/usr
rmdir $PKG1/usr/share

###########################################################
# Build main package
###########################################################

cd $PKG1
chmod 755 usr/lib${LIBDIRSUFFIX}/pkgconfig
sed -i -e "s#lib\$#lib${LIBDIRSUFFIX}#" usr/lib${LIBDIRSUFFIX}/pkgconfig/*.pc

# Set some generic Slackware packaging policies:
slackgzpages -i # compress man & info pages and delete usr/info/dir
slackslack      # set all files to root.root, chmod -R og-w, slackchown, slack644docs
slackdesc       # install slack-desc and doinst.sh

# Install package description:
install -vpm644 $CWD/slack-desc.openssl install/slack-desc
zcat $CWD/doinst.sh-openssl.gz > install/doinst.sh

# Build 'openssl' full package:
#[ "$SLACKPATCHING" = "yes" ] && export PKGSERIES=patches || export PKGSERIES=n
[ "$SLACKPATCHING" != "yes" ] && export PKGSERIES=n
slackmp

###########################################################
# Build runtime package
###########################################################

mkdir -vpm755 $PKG2/{etc,install,lib${LIBDIRSUFFIX},usr/lib${LIBDIRSUFFIX}}
( cd lib${LIBDIRSUFFIX} ; cp -a lib*.so.* $PKG2/lib${LIBDIRSUFFIX} )
cp -fav $PKG1/usr/lib${LIBDIRSUFFIX}/{engines-3,ossl-modules} $PKG2/usr/lib${LIBDIRSUFFIX}
( cd $PKG2/lib${LIBDIRSUFFIX}
  for file in lib*.so.? ; do
    ( cd $PKG2/usr/lib${LIBDIRSUFFIX} ; ln -vsf ../../lib${LIBDIRSUFFIX}/$file . )
  done )
( cd $PKG2/etc ; cp -fav $PKG1/etc/ssl . )

mkdir -vpm755 $PKG2/usr/doc/openssl-$VERSION
( cd $TMPBUILD/openssl-*/
  cp -fav ACKNOWLEDGEMENTS* AUTHORS* CHANGES* CONTRIBUTING* FAQ* INSTALL* \
          LICENSE* NEWS* NOTES* README* \
          $PKG2/usr/doc/openssl-$VERSION )
# If there's a CHANGES file, installing at least part of the recent history
# is useful, but don't let it get totally out of control:
if [ -r CHANGES ]; then
   DOCSDIR=$(echo $PKG2/usr/doc/*-$VERSION)
   head -n 2000 CHANGES > $DOCSDIR/CHANGES
   touch -r CHANGES $DOCSDIR/CHANGES
fi

# Build runtime package:
cd $PKG2
install -vpm644 $CWD/slack-desc.openssl-solibs install/slack-desc
zcat $CWD/doinst.sh-openssl-solibs.gz > install/doinst.sh

# Append "solibs" to the package name:
#[ "$SLACKPATCHING" = "yes" ] && export PKGSERIES=patches || export PKGSERIES=a
[ "$SLACKPATCHING" != "yes" ] && export PKGSERIES=a
export PKGNAM=openssl-solibs
export SLACKPACKAGE=$PKGNAM-$VERSION-$PKGARCH-$BUILD.txz
slackmp