# Contriburo: Łukasz Jendrysik <scadu@yandex.com>
# Contributor: Michael Mason <ms13sp@gmail.com>
# Maintainer: Natanael Copa <ncopa@alpinelinux.org>
pkgname=gnutls
pkgver=3.4.17
pkgrel=0
pkgdesc="A TLS protocol implementation"
url="http://www.gnutls.org/"
arch="all"
license="GPL"
depends=
depends_dev="nettle-dev zlib-dev libtasn1-dev p11-kit-dev"
makedepends="$depends_dev texinfo"
install=
subpackages="$pkgname-dbg $pkgname-doc $pkgname-dev $pkgname-utils $pkgname-c++:xx"
_v=${pkgver%.*}
case $pkgver in
*.*.*.*) _v=${_v%.*};;
esac
source="ftp://ftp.gnutls.org/gcrypt/gnutls/v${_v}/$pkgname-$pkgver.tar.xz
	CVE-2017-7507-1.patch
	CVE-2017-7507-2.patch
	CVE-2017-7507-3.patch
	"

_builddir="$srcdir/$pkgname-$pkgver"

# secfixes:
#   3.14.17-r1:
#     - CVE-2017-7507

prepare() {
	cd "$_builddir"
	for i in $source; do
		case $i in
		*.patch) msg $i; patch -p1 -i "$srcdir"/$i || return 1;;
		esac
	done
}

build() {
	cd "$_builddir"
	LIBS="-lgmp" ./configure \
		--build=$CBUILD \
		--host=$CHOST \
		--prefix=/usr \
		--sysconfdir=/etc \
		--mandir=/usr/share/man \
		--infodir=/usr/share/info \
		--disable-openssl-compatibility \
		--disable-rpath \
		--disable-static \
		--disable-guile \
		--disable-valgrind-tests \
		|| return 1
	make
}

package() {
	cd "$_builddir"
	make -j1 DESTDIR="$pkgdir" install
}

utils() {
	pkgdesc="Command line tools for TLS protocol"
	mkdir -p "$subpkgdir"/usr/
	mv "$pkgdir"/usr/bin "$subpkgdir"/usr/
}

xx() {
	pkgdesc="The C++ interface to GnuTLS"
	mkdir -p "$subpkgdir"/usr/lib
	mv "$pkgdir"/usr/lib/lib*xx.so.* "$subpkgdir"/usr/lib/
}

md5sums="4ea5b239bd8bf1b734dda02997b36459  gnutls-3.4.15.tar.xz"
sha256sums="eb2a013905f5f2a0cbf7bcc1d20c85a50065063ee87bd33b496c4e19815e3498  gnutls-3.4.15.tar.xz"
sha512sums="03157f2da22890ecd080ad58144a9aabe933382c0b7e969b7b194a0248bb5e6e25207078c0a92755650d0004970eb1c0cf0140dbdbf2e615808f9978e965a5e5  gnutls-3.4.15.tar.xz"
md5sums="03ea7575a43f58964635a5064cce4dc0  gnutls-3.4.17.tar.xz
28aefc8e42aab54e74a822ff0c853cd3  CVE-2017-7507-1.patch
8a1c1a0973acd3e9a1dfe47570e10a24  CVE-2017-7507-2.patch
c1d5e149d8ea74256dc07b9c3e125a90  CVE-2017-7507-3.patch"
sha256sums="9b50e8a670d5e950425d96935c7ddd415eb6f8079615a36df425f09a3143172e  gnutls-3.4.17.tar.xz
0832efdec6e96f71100ed9061a07650ad957d35ebd75915427f4f9c8410bb6e6  CVE-2017-7507-1.patch
82be76e052c1b923dec9b1fc0c5976985d7333d22da5bf14ba5ad6c04c600354  CVE-2017-7507-2.patch
17a1e102b1dec536384922ac68ee68017a46c3251b34c1d45d122b815ac2c308  CVE-2017-7507-3.patch"
sha512sums="a0a578034e8092dd422dc310a655fda3c4a2de5cb06745d9b47bb39734cb983902553b56dfbbabc618b3824defc62489b1b3c8de3b824b97b28273ddedd06ea7  gnutls-3.4.17.tar.xz
7eb981825ea242eda606e0d679aa3a6f6be91835d8828a4ff86e750db71e639869dfc6106be98af92c3963ab5b16ead0d3f135aac186ad4280c2f8f4ca7dec7e  CVE-2017-7507-1.patch
d7b14a6da31bb07358850e6e78e9de8db6ae08c85b60dc25c784457a09557044a0a5bb5b5304399ce994447a4cd0b92efe8c01892652aae799ec68f5792f52e5  CVE-2017-7507-2.patch
b67445ede75441e7cee35435292f5345636d90c8ebdb72e03c2658836605b56c3fc85304f650a5bd1984d937bba747839d44c1ae39ddb3ef7f7c39181443be8f  CVE-2017-7507-3.patch"