build/pkg/openssl/build

VERSION="1.1.1c"
SRCDIR="openssl-${VERSION}"
TARBALL="${SRCDIR}.tar.gz"
URL="https://www.openssl.org/source"
SHA256SUM="f6fb3079ad15076154eda9413fed42877d668e7069d9b87396d0804fdb3f4c90"
DEPENDS="zlib-dev toolchain"
SUBPKG="openssl openssl-dev"

prepare() {
	return
}

build() {
	local OPENSSL_TARGET=""
	local cflags="-O2 -Os"
	local ldflags=""

	if [ "x$TC_HARDENING" = "xyes" ]; then
		cflags="$cflags -fstack-protector-all"
		ldflags="$ldflags -z noexecstack -z relro -z now"
	fi

	case "$TARGET" in
	i*86-*)
		OPENSSL_TARGET="linux-generic32 386"
		;;
	x86_64-*)
		OPENSSL_TARGET="linux-x86_64"
		;;
	arm-*)
		OPENSSL_TARGET="linux-generic32"
		;;
	*)
		echo "don't know how to map $TARGET to OpenSSL arch"
		exit 1
		;;
	esac

	$1/Configure --prefix=/ --cross-compile-prefix="${TARGET}-" \
		     --openssldir=/etc/ssl --libdir=/lib \
		     CFLAGS="-DOPENSSL_NO_HEARTBEATS $cflags" \
		     LDFLAGS="$ldflags" \
		     threads shared zlib-dynamic no-async $OPENSSL_TARGET

	make -j 1
}

deploy() {
	make DESTDIR="$PKGDEPLOYDIR" install
	cp $SCRIPTDIR/pkg/$PKGNAME/*.{files,desc} "$PKGDEPLOYDIR"
}

check_update() {
	local version=$(echo $VERSION | sed 's/\([[:lower:]]\)/.\1/g')

	curl --silent -L "$URL" | grep -o ">openssl-[0-9a-z.]*tar.gz<" | \
	    sed 's/>openssl-//g' | sed 's/.tar.gz<//g' | \
	    sed 's/\([[:lower:]]\)/.\1/g' | \
	    verson_find_greatest "$version"
}