###############################################################################
# IPFire.org    - An Open Source Firewall Solution                            #
# Copyright (C) - IPFire Development Team <info@ipfire.org>                   #
###############################################################################

name       = compat-openssl
version    = 1.1.1s
release    = 1
thisapp    = openssl-%{version}

maintainer = Michael Tremer <michael.tremer@ipfire.org>
groups     = System/Libraries
url        = https://www.openssl.org/
license    = OpenSSL
summary    = A general purpose cryptography library with TLS implementation.

description
	The OpenSSL toolkit provides support for secure communications between
	machines. OpenSSL includes a certificate management tool and shared
	libraries which provide various cryptographic algorithms and protocols.
end

source_dl  = https://openssl.org/source/

build
	requires
		bc
		gnutls-devel
		perl
		perl(Test::Harness)
		util-linux
		zlib-devel
	end

	CFLAGS += -DPURIFY
	export RPM_OPT_FLAGS = %{CFLAGS} %{LDFLAGS}

	prepare_cmds
		sed -e 's/SHLIB_VERSION_NUMBER "1.0.0"/SHLIB_VERSION_NUMBER "%{version}"/' \
			-i include/openssl/opensslv.h

		find crypto/ -name Makefile -exec \
			sed 's/^ASFLAGS=/&-Wa,--noexecstack /' -i {} \;
	end

	# Set default ssl_arch.
	ssl_arch = linux-%{DISTRO_ARCH}

	build
		./Configure \
			--prefix=/usr \
			--openssldir=/etc/pki/tls \
			shared \
			zlib-dynamic \
			enable-camellia \
			enable-md2 \
			enable-seed \
			enable-rfc3779 \
			no-idea \
			no-mdc2 \
			no-rc5 \
			no-ec2m \
			no-srp \
			-DSSL_FORBID_ENULL \
			 %{ssl_arch}

		# Build.
		make depend
		make all
	end

	#test
	#
	#	#make test
	#end

	install
		make install DESTDIR=%{BUILDROOT}

		# Remove man pages and configuration files
		rm -rfv %{BUILDROOT}%{sysconfdir} %{BUILDROOT}/usr/share/man*

		# Remove engines
		rm -rfv %{BUILDROOT}%{libdir}/{engines,openssl}

		# Remove binaries
		rm -rfv %{BUILDROOT}%{bindir}
	end
end

packages
	package %{name}
		requires
			ca-certificates
		end

		provides
			openssl = %{thisver}
		end

		obsoletes
			openssl <= %{thisver}
		end
	end

	package %{name}-devel
		template DEVEL

		provides
			openssl-devel = %{thisver}
		end

		obsoletes
			openssl-devel <= %{thisver}
		end
	end

	package %{name}-debuginfo
		template DEBUGINFO
	end
end