# $NetBSD: Makefile,v 1.15 2024/03/22 05:37:43 kim Exp $

PKGNAME=	ca-certificates-20240203
DISTNAME=	${PKGNAME_NOREV:C/-([^-]*)$/_\1/}
CATEGORIES=	security
MASTER_SITES=	http://deb.debian.org/debian/pool/main/c/ca-certificates/
EXTRACT_SUFX=	.tar.xz

MAINTAINER=	pkgsrc-users@NetBSD.org
HOMEPAGE=	https://packages.debian.org/source/sid/ca-certificates
COMMENT=	Root CA certificates from the Mozilla Project
LICENSE=	gnu-gpl-v2 AND mpl-2.0

NO_CONFIGURE=			yes
PYTHON_FOR_BUILD_ONLY=		tool
PYTHON_VERSIONS_INCOMPATIBLE=	27

USE_TOOLS=	echo:run find:run ln:run openssl:run rm:run sed:run sort:run wc:run

WRKSRC=		${WRKDIR}/${PKGBASE}
DATADIR=	${PREFIX}/share/${PKGBASE}
DOCDIR=		${PREFIX}/share/doc/${PKGBASE}
EGDIR=		${PREFIX}/share/examples/${PKGBASE}
MANDIR=		${PREFIX}/${PKGMANDIR}/man8

# Set default certificate store path depending on whether we depend on
# builtin or pkgsrc openssl.

CHECK_BUILTIN.openssl=	yes
.include "../../security/openssl/builtin.mk"
CHECK_BUILTIN.openssl=	no
.if !empty(USE_BUILTIN.openssl:M[yY][eE][sS])
SSLDIR=		/etc/openssl
.else
SSLDIR=		${PKG_SYSCONFDIR}/openssl
.endif

SUBST_CLASSES=		conf paths
SUBST_MESSAGE.conf=	Adjusting configuration file.
SUBST_STAGE.conf=	post-build
SUBST_FILES.conf=	ca-certificates.conf
SUBST_SED.conf=		-e 's,^share/ca-certificates/,,'
SUBST_MESSAGE.paths=	Replacing hard-coded paths.
SUBST_STAGE.paths=	post-build
SUBST_FILES.paths=	Makefile sbin/Makefile
SUBST_FILES.paths+=	ca-certificates.conf
SUBST_FILES.paths+=	ca-certificates-dir.conf
SUBST_FILES.paths+=	sbin/update-ca-certificates sbin/update-ca-certificates.8
SUBST_FILES.paths+=	README.pkgsrc
SUBST_SED.paths=	-e 's,/usr/sbin,${PREFIX}/sbin,g'
SUBST_SED.paths+=	-e 's,/etc/ca-certificates,${PKG_SYSCONFDIR}/ca-certificates,g'
SUBST_SED.paths+=	-e 's,/etc/ssl,${SSLDIR},g'
SUBST_SED.paths+=	-e 's,/usr/share/ca-certificates,${DATADIR},g'

INSTALLATION_DIRS=	sbin ${DATADIR} ${DOCDIR} ${EGDIR} ${MANDIR}

CONF_FILES=		${EGDIR}/ca-certificates.conf \
			${PKG_SYSCONFDIR}/ca-certificates.conf \
			${EGDIR}/ca-certificates-dir.conf \
			${PKG_SYSCONFDIR}/ca-certificates-dir.conf

pre-build:
	${CP} ${FILESDIR}/ca-certificates.conf ${FILESDIR}/ca-certificates-dir.conf \
	    ${FILESDIR}/README.pkgsrc ${WRKSRC}/
	${GREP} '^share/ca-certificates/' ${FILESDIR}/../PLIST \
	    >> ${WRKSRC}/ca-certificates.conf

post-install:
	${INSTALL_MAN} \
	    ${WRKSRC}/sbin/update-ca-certificates.8 \
	    ${DESTDIR}${MANDIR}/
	${INSTALL_DATA} \
	    ${WRKSRC}/README.pkgsrc \
	    ${WRKSRC}/debian/README.source \
	    ${WRKSRC}/debian/changelog \
	    ${DESTDIR}${DOCDIR}/
	${INSTALL_DATA} \
	    ${WRKSRC}/ca-certificates.conf \
	    ${WRKSRC}/ca-certificates-dir.conf \
	    ${DESTDIR}${EGDIR}/

.include "../../lang/python/tool.mk"
PYTHON_VERSIONED_DEPENDENCIES+=	cryptography:tool
.include "../../lang/python/versioned_dependencies.mk"
.include "../../mk/bsd.pkg.mk"