# $FreeWRT$
#-
# This file is part of the FreeWRT project. FreeWRT is copyrighted
# material, please see the LICENCE file in the top-level directory
# or at http://www.freewrt.org/licence for details.

include $(TOPDIR)/rules.mk

PKG_NAME:=		openvpn
PKG_VERSION:=		2.0.7
PKG_RELEASE:=		1
PKG_MD5SUM:=		93528233f1f6d02fc18e2c00f82e0aca
PKG_INIT:=		60

PKG_SOURCE_URL:=	http://openvpn.net/release @SF/openvpn
PKG_SOURCE:=		$(PKG_NAME)-$(PKG_VERSION).tar.gz

include $(TOPDIR)/mk/package.mk

$(eval $(call PKG_template,OPENVPN,openvpn,$(PKG_VERSION)-$(PKG_RELEASE),$(ARCH)))
$(eval $(call PKG_template,OPENVPN_EASY_RSA,openvpn-easy-rsa,$(PKG_VERSION)-$(PKG_RELEASE),$(ARCH)))
$(eval $(call PKG_template,OPENVPN_WEBIF,openvpn-webif,$(PKG_VERSION)-$(PKG_RELEASE),$(ARCH)))

PKG_DEPEND:="kmod-tun"

ifneq ($(FWRT_COMPILE_OPENVPN_WITH_OPENSSL),y)
DISABLE_OPENSSL:=--disable-ssl --disable-crypto
else
PKG_DEPEND+=", libopenssl"
endif

ifneq ($(FWRT_COMPILE_OPENVPN_WITH_LZO),y)
DISABLE_LZO:=--disable-lzo
else
PKG_DEPEND+=", liblzo"
endif

ifneq ($(FWRT_COMPILE_OPENVPN_WITH_SERVER),y)
DISABLE_SERVER:=--disable-server
endif
ifneq ($(FWRT_COMPILE_OPENVPN_WITH_HTTP),y)
DISABLE_HTTP:=--disable-http
endif
ifeq ($(FWRT_COMPILE_OPENVPN_WITH_PASSWORD_SAVE),y)
ENABLE_PASSWORD_SAVE:=--enable-password-save
endif
ifeq ($(FWRT_COMPILE_OPENVPN_WITH_SMALL),y)
ENABLE_SMALL:=--enable-small
endif

$(WRKBUILD)/.configured:
	(cd $(WRKBUILD); rm -rf config.{cache,status} ; \
		$(TARGET_CONFIGURE_OPTS) \
		CFLAGS="$(strip $(TARGET_CFLAGS))" \
		CPPFLAGS="-I$(STAGING_DIR)/usr/include" \
		LDFLAGS="-L$(STAGING_DIR)/usr/lib" \
		./configure \
		  --target=$(GNU_TARGET_NAME) \
		  --host=$(GNU_TARGET_NAME) \
		  --build=$(GNU_HOST_NAME) \
		  --program-prefix="" \
		  --program-suffix="" \
		  --prefix=/usr \
		  --exec-prefix=/usr \
		  --bindir=/usr/bin \
		  --datadir=/usr/share \
		  --includedir=/usr/include \
		  --infodir=/usr/share/info \
		  --libdir=/usr/lib \
		  --libexecdir=/usr/lib \
		  --localstatedir=/var \
		  --mandir=/usr/share/man \
		  --sbindir=/usr/sbin \
		  --sysconfdir=/etc \
		  --enable-largefile \
		  --disable-nls \
		  --enable-shared \
		  --disable-static \
		  --disable-pthread \
		  --disable-debug \
		  --disable-plugins \
		  --disable-management \
		  --disable-socks \
		  $(DISABLE_LZO) \
		  $(DISABLE_OPENSSL) \
		  $(DISABLE_SERVER) \
		  $(DISABLE_HTTP) \
		  $(ENABLE_PASSWORD_SAVE) \
		  $(ENABLE_SMALL) \
	);
	touch $@

$(WRKBUILD)/.built:
	$(MAKE) -C $(WRKBUILD)
	mkdir -p $(WRKINST)
	$(MAKE) -C $(WRKBUILD) \
		DESTDIR="$(WRKINST)" \
		install
	touch $@

$(IPKG_OPENVPN):
	install -d -m0755 $(IDIR_OPENVPN)/usr/sbin
	$(CP) $(WRKINST)/usr/sbin/openvpn $(IDIR_OPENVPN)/usr/sbin/
	install -d -m0755 $(IDIR_OPENVPN)/etc/init.d
	$(CP) ./files/openvpn.init $(IDIR_OPENVPN)/etc/init.d/S$(PKG_INIT)openvpn
	echo "Depends: $(PKG_DEPEND)" >> $(IDIR_OPENVPN)/CONTROL/control
	$(RSTRIP) $(IDIR_OPENVPN)
	$(IPKG_BUILD) $(IDIR_OPENVPN) $(PACKAGE_DIR)

$(IPKG_OPENVPN_EASY_RSA):
	install -d -m0755 $(IDIR_OPENVPN_EASY_RSA)/usr/sbin $(IDIR_OPENVPN_EASY_RSA)/etc/easy-rsa
	$(CP) $(WRKBUILD)/easy-rsa/2.0/{build-*,clean-all,inherit-inter,list-crl,pkitool,revoke-full,sign-req} $(IDIR_OPENVPN_EASY_RSA)/usr/sbin
	install -m 0644 $(WRKBUILD)/easy-rsa/2.0/openssl.cnf $(IDIR_OPENVPN_EASY_RSA)/etc/easy-rsa/openssl.cnf
	install -m 0644 $(WRKBUILD)/easy-rsa/2.0/vars $(IDIR_OPENVPN_EASY_RSA)/etc/easy-rsa/vars
	$(IPKG_BUILD) $(IDIR_OPENVPN_EASY_RSA) $(PACKAGE_DIR)

$(IPKG_OPENVPN_WEBIF):
	install -d -m0755 $(IDIR_OPENVPN)/etc/init.d
	install -d -m0755 $(IDIR_OPENVPN_WEBIF)/www/cgi-bin/webif
	$(CP) ./files/openvpn-webif.init \
		$(IDIR_OPENVPN)/etc/init.d/S$(PKG_INIT)openvpn
	$(CP) ./files/openvpn.sh $(IDIR_OPENVPN_WEBIF)/www/cgi-bin/webif
	$(IPKG_BUILD) $(IDIR_OPENVPN_WEBIF) $(PACKAGE_DIR)
