added p11_kit definition

1 files changed, 39 insertions, 0 deletions

diff --git a/src/tesserae/p11_kit.nim b/src/tesserae/p11_kit.nim
new file mode 100644
index 0000000..6f98eac
--- /dev/null
+++ b/src/tesserae/p11_kit.nim
@@ -0,0 +1,39 @@
+import .. / lapis
+
+tessera "p11_kit":
+  source: "https://github.com/p11-glue/p11-kit/releases/download/0.25.5/p11-kit-0.25.5.tar.xz"
+  patches: @[""]
+  dependencies: @[
+    "libtasn1",
+    "make_ca",
+    "libxslt",
+    "nss"
+  ]
+  build: @[
+    "sed '20,$ d' -i trust/trust-extract-compat",
+    """
+    cat >> trust/trust-extract-compat << "EOF"
+    # Copy existing anchor modifications to /etc/ssl/local
+    /usr/libexec/make-ca/copy-trust-modifications
+
+    # Update trust stores
+    /usr/sbin/make-ca -r
+    EOF
+    """,
+    "mkdir p11-build",
+    "cd p11-build",
+    """
+    meson setup ..        \
+      --prefix=/usr       \
+      --buildtype=release \
+      -D trust_paths=/etc/pki/anchors
+    """,
+    "ninja",
+    "ninja install",
+    """
+    ln -sfv /usr/libexec/p11-kit/trust-extract-compat \
+        /usr/bin/update-ca-certificates
+    """,
+    "ln -sfv ./pkcs11/p11-kit-trust.so /usr/lib/libnssckbi.so"
+  ]
+  result: "p11-kit"