features

stable/openssl.kap

@@ -0,0 +1,41 @@
+/*
+ * openssl — the crypto library + CLI (TLS for everything downstream).
+ *
+ * Static-only (no-shared): consumers link libssl/libcrypto in, so no
+ * runtime lib resolution is needed in the store.  --openssldir=/etc/ssl
+ * makes the DEFAULT CA path /etc/ssl/certs/... — matching the
+ * ca-certificates package and curl's explicit --with-ca-bundle.
+ * --libdir=lib keeps the store uniform (no lib64).
+ *
+ * Configure is perl-based: the store perl is prepended to PATH.
+ */
+package "openssl" {
+    const version = "3.5.3"
+    const source  = "https://www.openssl.org/source/openssl-${version}.tar.gz"
+    sha256 = "c9489d2abcf943cdc8329a57092331c598a402938054dc3a22218aea8a8ec3bf"
+    license = "Apache-2.0"
+
+    provides = ["libssl.a", "libcrypto.a", "openssl"]
+
+    depends = [
+        { name = "perl" },
+        { name = "make" },
+    ]
+
+    prepare {
+        curl -L -o openssl-${version}.tar.gz ${source}
+        echo "c9489d2abcf943cdc8329a57092331c598a402938054dc3a22218aea8a8ec3bf  openssl-${version}.tar.gz" | sha256sum -c -
+        tar xf openssl-${version}.tar.gz --strip-components=1
+        ROOT=$KAPPA_ROOT; [ -z $ROOT ] && ROOT=/usr/local/kappa; if [ -d $ROOT/temp/perl/destdir/usr/bin ]; then echo $ROOT/temp/perl/destdir/usr/bin; else echo $ROOT/bin/$(grep '^perl ' $ROOT/db/installed | tail -1 | cut -d' ' -f3)/usr/bin; fi > perl.path
+    }
+
+    build {
+        PATH=$(cat perl.path):$PATH ./Configure linux-x86_64 --prefix=${prefix} --libdir=lib --openssldir=/etc/ssl no-shared
+        PATH=$(cat perl.path):$PATH make -j${jobs}
+    }
+
+    install {
+        PATH=$(cat perl.path):$PATH make DESTDIR=${destdir} install
+        ln -sf libssl.pc ${destdir}/usr/lib/pkgconfig/openssl.pc
+    }
+}