# Contributor: Fabian Affolter <fabian@affolter-engineering.ch>
# Maintainer: Fabian Affolter <fabian@affolter-engineering.ch>
pkgname=p11-kit
pkgver=0.24.1
pkgrel=1
pkgdesc="Library for loading and sharing PKCS#11 modules"
url="https://p11-glue.freedesktop.org/"
arch="all"
license="BSD-3-Clause"
makedepends="meson libtasn1-dev libffi-dev"
subpackages="$pkgname-dev $pkgname-doc $pkgname-trust $pkgname-server"
source="https://github.com/p11-glue/p11-kit/releases/download/$pkgver/p11-kit-$pkgver.tar.xz"

# secfixes:
#   0.23.22-r0:
#     - CVE-2020-29361
#     - CVE-2020-29362
#     - CVE-2020-29363

build() {
	abuild-meson \
		-Db_lto=true \
		-Dtrust_paths=/etc/ssl/certs/ca-certificates.crt \
		. output
	meson compile ${JOBS:+-j ${JOBS}} -C output
}

check() {
	meson test --no-rebuild --print-errorlogs -C output
}

package() {
	DESTDIR="$pkgdir" meson install --no-rebuild -C output
	install -Dm644 "$pkgdir"/etc/pkcs11/pkcs11.conf.example -t "$pkgdir"/usr/share/doc/$pkgname
}

trust() {
	pkgdesc="System trust module from $pkgname"
	mkdir -p "$subpkgdir"/usr/share/p11-kit/modules \
		"$subpkgdir"/usr/lib/pkcs11 \
		"$subpkgdir"/usr/bin

	mv "$pkgdir"/usr/share/p11-kit/modules/p11-kit-trust.module \
		"$subpkgdir"/usr/share/p11-kit/modules/
	mv "$pkgdir"/usr/lib/pkcs11/p11-kit-trust.so \
		"$subpkgdir"/usr/lib/pkcs11/
	mv "$pkgdir"/usr/bin/trust "$subpkgdir"/usr/bin/
}

server() {
	pkgdesc="Server and client commands for $pkgname"
	mkdir -p "$subpkgdir"/usr/lib/pkcs11 \
		"$subpkgdir"/usr/libexec/p11-kit \
		"$subpkgdir"/etc/init.d
	mv "$pkgdir"/usr/lib/pkcs11/p11-kit-client.so \
		"$subpkgdir"/usr/lib/pkcs11
	mv "$pkgdir"/usr/libexec/p11-kit/p11-kit-server \
		"$subpkgdir"/usr/libexec/p11-kit
}

sha512sums="
8cf170c714bb9e0cf3df93e8ec55b8e3c55cabf2c6a27f177ac6de8b8028985df2ca0216d3215d6828dc2ae3095c4e1a4febe8cb26b88ec321defc66bb011e81  p11-kit-0.24.1.tar.xz
"