# openssl/cfg - "Build" settings for package

#---------------------------------------------------------------------

[technotes]

#---------------------------------------------------------------------

[buildtimes]

00.06 hours (or 003.43 minutes) - ThinkPad E540 i7 4x2 16GB RAM

#---------------------------------------------------------------------

[settings]
build      = default
dontfind   = libressl
exepack    = yes
license    = See "license*.txt" in installed tree
licfile    = LICENSE
nosyslinks = etc                # Avoid recursive symlink operations
setpaths   = openssl
tmpsize    = 139M

#---------------------------------------------------------------------

[depends]
actools
bc
findutils
gawk
grep
rlwrap
sed

#---------------------------------------------------------------------

[configure]
ENGDIR=$PKGDIR_PROD/lib/engines
MANBASE=$PKGDIR_PROD/man
ETCDIR=$PKGDIR_PROD/etc
ETCSSL=$PKGDIR_PROD/etc/ssl

mkdir -p $ENGDIR $ETCSSL $MANBASE
rm -fr /sbin/openssl /usr/bin/openssl

if [ $LACBITS == 64 ]; then
bash ./config \
    --prefix=$PKGDIR_PROD \
    --libdir=lib          \
    --openssldir=$ETCDIR  \
    zlib-dynamic
else
perl ./Configure \
    --prefix=$PKGDIR_PROD \
    --libdir=lib          \
    --openssldir=$ETCDIR  \
    386                   \
    zlib-dynamic          \
    linux-generic32
fi

#---------------------------------------------------------------------

[postbuild]
BINDIR=$PKGDIR_PROD/bin
ETCDIR=$PKGDIR_PROD/etc
LIBDIR=$PKGDIR_PROD/lib

ETCSSL=$ETCDIR/ssl
CERTSDIR=$ETCSSL/certs
MCDIR=$PKGDIR_PROD/makecerts

mkdir -p $BINDIR $CERTSDIR $LIBDIR $MCDIR
mkdir -p $SYSTREE/sbin
mkdir -p $SYSTREE/usr/bin

ln -nsf $BINDIR/openssl $SYSTREE/sbin/
ln -nsf $BINDIR/openssl $SYSTREE/usr/bin/

cp -p $PKGDIR_SPECIAL/c_rehash    $BINDIR/
chmod 755                         $BINDIR/c_rehash

cp -a $PKGDIR_SPECIAL/makecerts/* $MCDIR/
chmod 755                         $MCDIR/*.sh

cd $MCDIR
rm -f certdata-[12]*.txt
./rebuild-certs.sh

# Python needs this:
cd $ETCDIR
ln -nsf ssl/cert.pem .
head        cert.pem

#---------------------------------------------------------------------

# Original URLs. These URLs were valid at one point, but may have died
# since then. If you download newer versions of tarballs [etc.], don't
# delete  the  original versions,  as you may not  be able  to replace
# them.

[urls]
url_debian  = tbd
url_home    = tbd
url_lfs     = tbd
url_tarball = https://openssl.org/source/openssl-1.1.1t.tar.gz

#---------------------------------------------------------------------

[history]
190529 Updated from 1.1.1a to 1.1.1c
210218 Updated to 1.1.1i
210424 Updated to 1.1.1k
210424 Switched distro core SSL back to "openssl"
210615 Updated cert data
210912 Updated cert data
210912 Fixed breakage of "ca-bundle.crt" build
211017 Updated to 1.1.1l
220503 Updated to 1.1.1o
220630 Updated to 1.1.1p
230210 Updated to 1.1.1t