# Αδειοδοτείται υπό τους όρους της EUPL
import .. / .. / lapis

tessera "p11_kit":
  source: "https://github.com/p11-glue/p11-kit/releases/download/0.25.5/p11-kit-0.25.5.tar.xz"
  patches: @[""]
  dependencies: @[
    "libtasn1",
    "make_ca",
    "libxslt",
    "nss"
  ]
  build: @[
    "sed '20,$ d' -i trust/trust-extract-compat",
    """
    cat >> trust/trust-extract-compat << "EOF"
    # Copy existing anchor modifications to /etc/ssl/local
    /usr/libexec/make-ca/copy-trust-modifications

    # Update trust stores
    /usr/sbin/make-ca -r
    EOF
    """,
    "mkdir p11-build",
    "cd p11-build",
    """
    meson setup ..        \
      --prefix=/usr       \
      --buildtype=release \
      -D trust_paths=/etc/pki/anchors
    """,
    "ninja",
    "ninja install",
    """
    ln -sfv /usr/libexec/p11-kit/trust-extract-compat \
        /usr/bin/update-ca-certificates
    """,
    "ln -sfv ./pkcs11/p11-kit-trust.so /usr/lib/libnssckbi.so"
  ]
  result: "p11-kit"