# bump security/sslscan if updating (static linked)

.if ${MACHINE_ARCH} != aarch64 && ${MACHINE_ARCH} != amd64 && ${MACHINE_ARCH} != riscv64
USE_NOEXECONLY=		Yes
.endif

PORTROACH=	limit:^1\.1\.[0-9][a-z] skipb:0 skipv:1.1.1
V=		1.1.1w
PKGSPEC=	openssl->=1.1.0v0,<1.2v0
EPOCH=		0
REVISION=	1

SHLIBVER=	11.6
SHARED_LIBS=	crypto ${SHLIBVER} \
		ssl ${SHLIBVER}

WANTLIB=	c

DEBUG_PACKAGES = ${BUILD_PACKAGES}

CONFIGURE_STYLE=	simple
CONFIGURE_SCRIPT=	config
CONFIGURE_ARGS+=	--prefix=${PREFIX} \
			--openssldir=/etc/ssl \
			enable-ssl-trace \
			no-threads no-rc5 no-ssl3 \
			no-devcryptoeng \
			shared

# Avoid T4 assembly issues https://github.com/openssl/openssl/issues/20523
.if ${MACHINE_ARCH} == sparc64
CONFIGURE_ARGS+=	no-asm
.endif

INSTALL_TARGET=		install_sw install_ssldirs install_man_docs

# install to unusual directory name - this port is *not* intended to be
# picked up by configure scripts without explicitly CPPFLAGS/LDFLAGS.
# common names like lib/openssl, openssl/lib, etc, *do* get picked up.
MAKE_FLAGS+=	CC="${CC}" \
		LDFLAGS="${LDFLAGS}" \
		LIBDIR="lib/eopenssl11" \
		MANDIR=${PREFIX}/lib/eopenssl11/man \
		SHLIB_VERSION_NUMBER=${SHLIBVER} \
		SHLIB_MAJOR=${SHLIBVER:R} \
		SHLIB_MINOR=${SHLIBVER:E}
LDFLAGS+=	-Wl,-rpath,${TRUEPREFIX}/lib/eopenssl11

post-configure:
	cd ${WRKSRC}; ${SETENV} ${MAKE_ENV} ${MAKE_PROGRAM} \
	    ${MAKE_FLAGS} -f ${MAKE_FILE} depend

# include/openssl and pkgconfig files are moved here, doing that in
# OpenSSL's build infrastructure needs a bunch more patching.
post-install:
	${INSTALL_DATA_DIR} ${PREFIX}/include/eopenssl11
	mv ${WRKINST}/etc/ssl ${PREFIX}/share/eopenssl11
.for i j in openssl eopenssl11 libssl libessl11 libcrypto libecrypto11
	mv ${PREFIX}/lib/eopenssl11/pkgconfig/$i.pc ${PREFIX}/lib/pkgconfig/$j.pc
.endfor
	mv ${PREFIX}/include/openssl ${PREFIX}/include/eopenssl11/
	mv ${PREFIX}/bin/openssl ${PREFIX}/bin/eopenssl11
	mv ${PREFIX}/bin/c_rehash ${PREFIX}/bin/c_rehash11
	rm -f ${PREFIX}/lib/eopenssl11/lib{crypto,ssl}.so
	rmdir ${PREFIX}/lib/eopenssl11/pkgconfig

# Work around 90-test_shlibload.t trying to use incorrect shared libraries.
pre-test:
	cd ${WRKSRC} && \
		${_PBUILD} ln -sf libcrypto.so.${SHLIBVER} libcrypto.so.1.1 && \
		${_PBUILD} ln -sf libssl.so.${SHLIBVER} libssl.so.1.1

.include <bsd.port.mk>