/*
 * openssl — the crypto library + CLI (TLS for everything downstream).
 *
 * Static-only (no-shared): consumers link libssl/libcrypto in, so no
 * runtime lib resolution is needed in the store.  --openssldir=/etc/ssl
 * makes the DEFAULT CA path /etc/ssl/certs/... — matching the
 * ca-certificates package and curl's explicit --with-ca-bundle.
 * --libdir=lib keeps the store uniform (no lib64).
 *
 * Configure is perl-based: the store perl is prepended to PATH.
 */
package "openssl" {
    const version = "3.5.3"
    const source  = "https://www.openssl.org/source/openssl-${version}.tar.gz"
    sha256 = "c9489d2abcf943cdc8329a57092331c598a402938054dc3a22218aea8a8ec3bf"
    license = "Apache-2.0"

    provides = ["libssl.a", "libcrypto.a", "openssl"]

    depends = [
        { name = "perl" },
        { name = "make" },
    ]

    prepare {
        curl -L -o openssl-${version}.tar.gz ${source}
        echo "c9489d2abcf943cdc8329a57092331c598a402938054dc3a22218aea8a8ec3bf  openssl-${version}.tar.gz" | sha256sum -c -
        tar xf openssl-${version}.tar.gz --strip-components=1
        ROOT=$KAPPA_ROOT; [ -z $ROOT ] && ROOT=/usr/local/kappa; if [ -d $ROOT/temp/perl/destdir/usr/bin ]; then echo $ROOT/temp/perl/destdir/usr/bin; else echo $ROOT/bin/$(grep '^perl ' $ROOT/db/installed | tail -1 | cut -d' ' -f3)/usr/bin; fi > perl.path
    }

    build {
        PATH=$(cat perl.path):$PATH ./Configure linux-x86_64 --prefix=${prefix} --libdir=lib --openssldir=/etc/ssl no-shared
        PATH=$(cat perl.path):$PATH make -j${jobs}
    }

    install {
        PATH=$(cat perl.path):$PATH make DESTDIR=${destdir} install
        ln -sf libssl.pc ${destdir}/usr/lib/pkgconfig/openssl.pc
    }
}