# $NetBSD: Makefile,v 1.28 2024/02/20 16:51:44 jperkin Exp $

PKGNAME=	mozilla-rootcerts-openssl-2.14
CATEGORIES=	security
MASTER_SITES=	# empty
DISTFILES=	# empty

MAINTAINER=	dholland@NetBSD.org
#HOMEPAGE=	none
COMMENT=	Wedge for installing and managing mozilla-rootcerts
LICENSE=	modified-bsd

USE_TOOLS+=	openssl
WRKSRC=		${WRKDIR}
BUILD_DIRS=	# empty

TOOL_DEPENDS+=	mozilla-rootcerts-1.0.20240214{,nb[0-9]*}:../../security/mozilla-rootcerts
SCRIPT=		${LOCALBASE}/sbin/mozilla-rootcerts

CHECK_BUILTIN.openssl=	yes
.include "../../security/openssl/builtin.mk"
CHECK_BUILTIN.openssl=	no

#
# This package needs to install directly into openssl's certs directory
# because openssl is dumb and doesn't support multiple cert directories.
# (Otherwise we'd install under ${PREFIX}/share.)
#
# For native openssl this is in /etc outside of ${PREFIX}. Beware.
#
.if ${USE_BUILTIN.openssl:U:tl} == yes
NOT_FOR_UNPRIVILEGED=	yes
PLACE=			/etc
SET_PREFIX=		yes
PLIST_SUBST+=		MYETCDIR=etc
PRINT_PLIST_AWK+=	{ sub("^etc/", "$${MYETCDIR}/"); }
CHECK_FILES_SUPPORTED=	no
.else
PLACE=			${MY_PKG_SYSCONFDIR}
# probably SET_PREFIX should not be set
SET_PREFIX=		yes
PLIST_SUBST+=		MYETCDIR=${MY_PKG_SYSCONFDIR:S/^${PREFIX}//}
PRINT_PLIST_AWK+=	{ sub("^${MY_PKG_SYSCONFDIR:S/^${PREFIX}//}/", "$${MYETCDIR}/"); }
.endif

OPENSSLDIR=		${PLACE}/openssl/certs

do-install:
	${INSTALL_DATA_DIR} ${DESTDIR}${OPENSSLDIR}
	cd ${WRKSRC} && ${SCRIPT} -d ${DESTDIR} install
	${CHMOD} go+r ${DESTDIR}${OPENSSLDIR}/*.pem
	${CHMOD} go+r ${DESTDIR}${OPENSSLDIR}/*.crt

.include "../../mk/bsd.pkg.mk"

# This must be after bsd.pkg.mk is included to work.
MY_PKG_SYSCONFDIR:=	${PKG_SYSCONFDIR}
.if ${SET_PREFIX} == "yes"
PREFIX=			/
.endif