# Contributor: Sören Tempel <soeren+alpine@soeren-tempel.net>
# Contributor: William Pitcock <nenolod@dereferenced.org>
# Maintainer: Natanael Copa <ncopa@alpinelinux.org>
setvar pkgname = 'ca-certificates'
setvar pkgver = '20170801'
setvar pkgrel = '0'
setvar pkgdesc = ""Common CA certificates PEM files""
setvar url = ""https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/""
setvar arch = ""all""
setvar license = ""MPL 2.0 GPL2+""
setvar depends = """"
setvar makedepends = ""python3 libressl-dev""
setvar subpackages = ""$pkgname-doc""
# c_rehash is either in libcrypto1.0 or openssl depending on package, grr.  replace both of them
setvar replaces = ""libcrypto1.0 openssl""
setvar options = ""!fhs !check""
setvar triggers = ""ca-certificates.trigger=/usr/share/ca-certificates:/usr/local/share/ca-certificates:/etc/ssl/certs:/etc/ca-certificates/update.d""
setvar install = ""$pkgname.post-deinstall""
setvar source = ""https://git.alpinelinux.org/cgit/ca-certificates/snapshot/ca-certificates-$pkgver.tar.bz2""
setvar builddir = ""$srcdir/ca-certificates-$pkgver""

proc build {
	cd $builddir
	make
}

proc package {
	cd $builddir
	make install DESTDIR="$pkgdir"

	shell {
		echo "# Automatically generated by ${pkgname}-${pkgver}-${pkgrel}"
		echo "# $(date -u)"
		echo "# Do not edit."
		cd "$pkgdir"/usr/share/ca-certificates
		find . -name '*.crt' | sort | cut -b3-
	} > "$pkgdir"/etc/ca-certificates.conf

	mkdir -p "$pkgdir"/etc/apk/protected_paths.d
	cat > "$pkgdir"/etc/apk/protected_paths.d/ca-certificates.list <<< """
		-etc/ssl/certs/ca-certificates.crt
		-etc/ssl/certs/ca-cert-*.pem
		-etc/ssl/certs/[0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f].[r0-9]*
"""

	cat > "$pkgdir"/etc/ca-certificates/update.d/certhash <<< """
		#!/bin/sh
		exec /usr/bin/c_rehash /etc/ssl/certs
"""
	chmod +x "$pkgdir"/etc/ca-certificates/update.d/certhash
}

setvar sha512sums = ""2b3de9f4ed1ae2ee66d428598f5878e3c773a7475102a234332c1430e202fa1d23889365a725a1aef3531c8c56718d206f95e02284af994d2330b3fc92f96ea2  ca-certificates-20170801.tar.bz2""