# $FreeWRT$
#-
# This file is part of the FreeWRT project. FreeWRT is copyrighted
# material, please see the LICENCE file in the top-level directory
# or at http://www.freewrt.org/licence for details.

include $(TOPDIR)/rules.mk

PKG_NAME:=		openssl
PKG_VERSION:=		0.9.8h
PKG_RELEASE:=		1
PKG_MD5SUM:=		7d3d41dafc76cf2fcb5559963b5783b3

PKG_SOURCE_URL:=	http://www.openssl.org/source/ \
			ftp://ftp.funet.fi/pub/crypt/cryptography/libs/openssl/source/ \
			ftp://ftp.webmonster.de/pub/openssl/source/ \
			ftp://ftp.sunet.se/pub/security/tools/net/openssl/source/
PKG_SOURCE:=		$(PKG_NAME)-$(PKG_VERSION).tar.gz

OPENSSL_OPTIONS = shared no-ec no-err no-fips no-hw no-krb5 no-threads zlib-dynamic no-engines

ifeq ($(FWRT_PACKAGE_LIBOPENSSL_CUSTOM_FEATURES),y)
OPENSSL_OPTIONS-$(FWRT_PACKAGE_LIBOPENSSL_FEATURE_OCSP) += ocsp
#OPENSSL_OPTIONS-$(FWRT_PACKAGE_LIBOPENSSL_FEATURE_PKCS7) += pkcs7
endif

ifneq ($(FWRT_PACKAGE_LIBOPENSSL_CUSTOM_CIPHERS),y)
OPENSSL_OPTIONS += no-camellia no-idea no-rc5
else
OPENSSL_OPTIONS-$(FWRT_PACKAGE_LIBOPENSSL_CIPHER_DSA) += dsa
OPENSSL_OPTIONS-$(FWRT_PACKAGE_LIBOPENSSL_CIPHER_RSA) += rsa
OPENSSL_OPTIONS-$(FWRT_PACKAGE_LIBOPENSSL_CIPHER_AES) += aes
OPENSSL_OPTIONS-$(FWRT_PACKAGE_LIBOPENSSL_CIPHER_BLOWFISH) += bf
OPENSSL_OPTIONS-$(FWRT_PACKAGE_LIBOPENSSL_CIPHER_CAMELLIA) += camellia
OPENSSL_OPTIONS-$(FWRT_PACKAGE_LIBOPENSSL_CIPHER_CAST) += cast
OPENSSL_OPTIONS-$(FWRT_PACKAGE_LIBOPENSSL_CIPHER_DES) += des
OPENSSL_OPTIONS-$(FWRT_PACKAGE_LIBOPENSSL_CIPHER_IDEA) += idea
OPENSSL_OPTIONS-$(FWRT_PACKAGE_LIBOPENSSL_CIPHER_RC2) += rc2
OPENSSL_OPTIONS-$(FWRT_PACKAGE_LIBOPENSSL_CIPHER_RC4) += rc4
OPENSSL_OPTIONS-$(FWRT_PACKAGE_LIBOPENSSL_CIPHER_RC5) += rc5
endif

ifneq ($(FWRT_PACKAGE_LIBOPENSSL_CUSTOM_HASHES),y)
OPENSSL_OPTIONS += no-md2 no-mdc2
else
OPENSSL_OPTIONS-$(FWRT_PACKAGE_LIBOPENSSL_HASH_MD2) += md2
OPENSSL_OPTIONS-$(FWRT_PACKAGE_LIBOPENSSL_HASH_MD4) += md4
OPENSSL_OPTIONS-$(FWRT_PACKAGE_LIBOPENSSL_HASH_MD5) += md5
OPENSSL_OPTIONS-$(FWRT_PACKAGE_LIBOPENSSL_HASH_MDC2) += mdc2
OPENSSL_OPTIONS-$(FWRT_PACKAGE_LIBOPENSSL_HASH_RIPEMD) += ripemd
OPENSSL_OPTIONS-$(FWRT_PACKAGE_LIBOPENSSL_HASH_SHA) += sha
endif

OPENSSL_OPTIONS += $(addprefix no-,$(OPENSSL_OPTIONS-n) $(OPENSSL_OPTIONS-)) $(addprefix enable-,$(OPENSSL_OPTIONS-y))

include $(TOPDIR)/mk/package.mk

$(eval $(call PKG_template,LIBOPENSSL,libopenssl,$(PKG_VERSION)-$(PKG_RELEASE),$(ARCH)))
$(eval $(call PKG_template,OPENSSL_UTIL,openssl-util,$(PKG_VERSION)-$(PKG_RELEASE),$(ARCH)))

$(WRKBUILD)/.configured:
	$(SED) 's,/CFLAG=,/CFLAG= $(TARGET_SOFT_FLOAT) ,g' $(WRKBUILD)/Configure
	$(SED) 's/FREEWRT_OPTIMIZATION_FLAGS/$(FWRT_TARGET_OPTIMIZATION) $(TARGET_CFLAGS)/g' $(WRKBUILD)/Configure
	(cd $(WRKBUILD); \
		PATH=$(TARGET_PATH) \
		./Configure linux-freewrt \
		  --prefix=/usr \
		  --openssldir=/etc/ssl \
		  -I$(STAGING_DIR)/usr/include \
		  -L$(STAGING_DIR)/usr/lib -ldl \
		  -DOPENSSL_SMALL_FOOTPRINT \
		  $(OPENSSL_OPTIONS) \
	)
	touch $@

$(WRKBUILD)/.built:
	rm -rf $(WRKINST)
	mkdir -p $(WRKINST)
	$(MAKE) -C $(WRKBUILD) -j1 \
		MAKEDEPPROG="$(TARGET_CC)" \
		depend
	$(MAKE) -C $(WRKBUILD) -j1 \
		CC="$(TARGET_CC)" \
		AR="$(TARGET_CROSS)ar r" \
		RANLIB="$(TARGET_CROSS)ranlib" \
		all build-shared
	# Work around openssl build bug to link libssl.so with libcrypto.so.
	-rm $(WRKBUILD)/libssl.so.*.*.*
	$(MAKE) -C $(WRKBUILD) -j1 \
		CC=$(TARGET_CC) \
		do_linux-shared
	$(MAKE) -C $(WRKBUILD) -j1 \
		INSTALL_PREFIX="$(WRKINST)" \
		install
	touch $@

$(IPKG_LIBOPENSSL):
	install -d -m0755 $(IDIR_LIBOPENSSL)/usr/lib
	$(CP) $(WRKINST)/usr/lib/lib{crypto,ssl}.so.* $(IDIR_LIBOPENSSL)/usr/lib/
	chmod 0644 $(IDIR_LIBOPENSSL)/usr/lib/*
	$(RSTRIP) $(IDIR_LIBOPENSSL)
	$(IPKG_BUILD) $(IDIR_LIBOPENSSL) $(PACKAGE_DIR)

$(IPKG_OPENSSL_UTIL):
	install -d -m0755 $(IDIR_OPENSSL_UTIL)/etc/ssl
	$(CP) $(WRKINST)/etc/ssl/openssl.cnf $(IDIR_OPENSSL_UTIL)/etc/ssl/
	install -d -m0755 $(IDIR_OPENSSL_UTIL)/etc/ssl/certs
	install -d -m0755 $(IDIR_OPENSSL_UTIL)/etc/ssl/private
	chmod 0700 $(IDIR_OPENSSL_UTIL)/etc/ssl/private
	install -d -m0755 $(IDIR_OPENSSL_UTIL)/usr/bin
	$(CP) $(WRKINST)/usr/bin/openssl $(IDIR_OPENSSL_UTIL)/usr/bin/
	$(RSTRIP) $(IDIR_OPENSSL_UTIL)
	$(IPKG_BUILD) $(IDIR_OPENSSL_UTIL) $(PACKAGE_DIR)

$(STAGING_DIR)/usr/lib/libssl.so: $(WRKBUILD)/.built
	mkdir -p $(STAGING_DIR)/usr/include
	$(CP) $(WRKINST)/usr/include/openssl $(STAGING_DIR)/usr/include/
	mkdir -p $(STAGING_DIR)/usr/lib/
	$(CP) $(WRKINST)/usr/lib/lib{crypto,ssl}.{a,so*} $(STAGING_DIR)/usr/lib/
	touch $@

install-dev: $(STAGING_DIR)/usr/lib/libssl.so

uninstall-dev:
	rm -rf \
		$(STAGING_DIR)/usr/include/openssl \
		$(STAGING_DIR)/usr/lib/lib{crypto,ssl}.{a,so*} \

compile-targets: install-dev
clean-targets: uninstall-dev
