PORTNAME=	softhsm
PORTVERSION=	2.6.1
PORTREVISION=	2
CATEGORIES=	security
MASTER_SITES=	http://dist.opendnssec.org/source/ \
		http://dist.opendnssec.org/source/testing/
PKGNAMESUFFIX=	2

MAINTAINER=	jaap@NLnetLabs.nl
COMMENT=	Software implementation of a Hardware Security Module (HSM)
WWW=		https://www.opendnssec.org/

LICENSE=	BSD2CLAUSE
LICENSE_FILE=	${WRKSRC}/LICENSE

GNU_CONFIGURE=	yes
INSTALL_TARGET=	install-strip
USES=		compiler:c++11-lang libtool ssl pkgconfig

SUB_FILES=	pkg-message

CONFLICTS=	softhsm-1.*

USE_LDCONFIG=	yes

LIB_DEPENDS+=		libcppunit.so:devel/cppunit
MY_DEPENDS+=		p11-kit:security/p11-kit
BUILD_DEPENDS+=		${MY_DEPENDS}
RUN_DEPENDS+=		${MY_DEPENDS}

OPTIONS_DEFINE=		SQLITE MIGRATE
MIGRATE_IMPLIES=	SQLITE
OPTIONS_SUB=		yes
SQLITE_DESC=		Build with object store backend DB support (SQLITE3)
MIGRATE_DESC=		Build the migration tool

OPTIONS_SINGLE=		CRYP
OPTIONS_SINGLE_CRYP=	CRYP_OPEN CRYP_BOTAN

CRYP_OPEN_DESC=		Build with OpenSSL crypto library
CRYP_BOTAN_DESC=	Build with Botan crypto library

OPTIONS_DEFAULT=	CRYP_OPEN SQLITE MIGRATE

SQLITE_CONFIGURE_WITH=	sqlite3=${LOCALBASE} objectstore-backend-db
SQLITE_USES=		sqlite
MIGRATE_CONFIGURE_WITH=	migrate

CRYP_BOTAN_CONFIGURE_ON=	--with-crypto-backend=botan
CRYP_BOTAN_LIB_DEPENDS=	libbotan-2.so:security/botan2

CRYP_OPEN_CONFIGURE_ON=	--with-crypto-backend=openssl --with-openssl=${OPENSSLBASE}

.include <bsd.port.options.mk>

.if ${SSL_DEFAULT:Mlibressl*} || ${SSL_DEFAULT:Mopenssl}
CONFIGURE_ARGS+=	--disable-gost
.endif

# openssl-1.1.1 (default after 1200080) doesn't  support GHOST (yet), punt for now.
CONFIGURE_ARGS+=	--disable-gost

post-install:
	${MKDIR} ${STAGEDIR}${PREFIX}/share/p11-kit/modules
	${INSTALL_DATA} ${WRKSRC}/softhsm2.module \
		${STAGEDIR}${PREFIX}/share/p11-kit/modules

.include <bsd.port.mk>