#
# Copyright (C) 2006-2016 OpenWrt.org
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
#

#include $(TOPDIR)/rules.mk

#PKG_NAME:=openssl
#PKG_BASE:=1.0.2
#PKG_BUGFIX:=n
#PKG_VERSION:=$(PKG_BASE)$(PKG_BUGFIX)
#PKG_RELEASE:=1
#PKG_USE_MIPS16:=0

#PKG_BUILD_PARALLEL:=0


#PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
#PKG_SOURCE_URL:=@ZyXEL_SITE/opensource/libs
#PKG_SOURCE_URL:= \
#	http://ftp.fi.muni.cz/pub/openssl/source/ \
#	http://ftp.linux.hr/pub/openssl/source/ \
#	http://gd.tuwien.ac.at/infosys/security/openssl/source/ \
#	http://www.openssl.org/source/ \
#	http://www.openssl.org/source/old/$(PKG_BASE)/
#PKG_MD5SUM:=13bdc1b1d1ff39b6fd42a255e74676a4

#PKG_LICENSE:=OpenSSL
#PKG_LICENSE_FILES:=LICENSE
#ifeq ("$(strip ${ZCFG_PLATFORM})","QUALCOMM")
#PKG_BUILD_DEPENDS:=ocf-crypto-headers
#PKG_CONFIG_DEPENDS:= \
#	CONFIG_OPENSSL_ENGINE_CRYPTO \
#	CONFIG_OPENSSL_ENGINE_DIGEST \
#	CONFIG_OPENSSL_WITH_EC \
#	CONFIG_OPENSSL_WITH_EC2M \
#	CONFIG_OPENSSL_WITH_SSL3
#else
#PKG_CPE_ID:=cpe:/a:openssl:openssl
#PKG_CONFIG_DEPENDS:= \
#	CONFIG_OPENSSL_ENGINE_CRYPTO \
#	CONFIG_OPENSSL_ENGINE_DIGEST \
#	CONFIG_OPENSSL_WITH_EC \
#	CONFIG_OPENSSL_WITH_EC2M \
#	CONFIG_OPENSSL_WITH_SSL3 \
#	CONFIG_OPENSSL_HARDWARE_SUPPORT \
#	CONFIG_OPENSSL_WITH_DEPRECATED \
#	CONFIG_OPENSSL_WITH_DTLS \
#	CONFIG_OPENSSL_WITH_COMPRESSION \
#	CONFIG_OPENSSL_WITH_NPN \
#	CONFIG_OPENSSL_WITH_PSK \
#	CONFIG_OPENSSL_WITH_SRP \
#	CONFIG_OPENSSL_OPTIMIZE_SPEED
#endif
#include $(INCLUDE_DIR)/package.mk

#ifneq ($(CONFIG_CCACHE),)
#HOSTCC=$(HOSTCC_NOCACHE)
#HOSTCXX=$(HOSTCXX_NOCACHE)
#endif

#define Package/openssl/Default
#  TITLE:=Open source SSL toolkit
#  URL:=http://www.openssl.org/
#endef

#define Package/libopenssl/config
#source "$(SOURCE)/Config.in"
#endef

#define Package/openssl/Default/description
#The OpenSSL Project is a collaborative effort to develop a robust,
#commercial-grade, full-featured, and Open Source toolkit implementing the Secure
#Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols as well
#as a full-strength general purpose cryptography library.
#endef

define Package/libopenssl
$(call Package/openssl/Default)
  SECTION:=libs
  SUBMENU:=SSL
  CATEGORY:=Libraries
ifeq ("$(strip ${ZCFG_PLATFORM})","QUALCOMM")
  DEPENDS:=+zlib
else
  DEPENDS:=+OPENSSL_WITH_COMPRESSION:zlib
endif
  TITLE+= (libraries)
  ABI_VERSION:=$(PKG_VERSION)
  MENU:=1
endef

define Package/libopenssl/description
$(call Package/openssl/Default/description)
This package contains the OpenSSL shared libraries, needed by other programs.
endef

define Package/openssl-util
  $(call Package/openssl/Default)
  SECTION:=utils
  CATEGORY:=Utilities
  DEPENDS:=+libopenssl
  TITLE+= (utility)
endef

define Package/openssl-util/conffiles
/etc/ssl/openssl.cnf
endef

define Package/openssl-util/description
$(call Package/openssl/Default/description)
This package contains the OpenSSL command-line utility.
endef

ifeq ("$(strip ${ZCFG_PLATFORM})","QUALCOMM")
OPENSSL_NO_CIPHERS:= no-idea no-md2 no-mdc2 no-rc5 no-sha0 no-camellia no-krb5
OPENSSL_OPTIONS:= shared no-err no-hw zlib-dynamic no-sse2 no-ssl2

else
OPENSSL_NO_CIPHERS:= no-idea no-md2 no-mdc2 no-rc5 no-sha0 no-camellia no-krb5 \
 no-whrlpool no-whirlpool no-seed no-jpake
OPENSSL_OPTIONS:= shared no-err no-sse2 no-ssl2 no-ssl2-method no-heartbeats
endif

ifdef CONFIG_OPENSSL_ENGINE_CRYPTO
  OPENSSL_OPTIONS += -DHAVE_CRYPTODEV
  ifdef CONFIG_OPENSSL_ENGINE_DIGEST
    OPENSSL_OPTIONS += -DUSE_CRYPTODEV_DIGESTS
  endif
else
  OPENSSL_OPTIONS += no-engines
endif

ifndef CONFIG_OPENSSL_WITH_EC
  OPENSSL_OPTIONS += no-ec
endif

ifndef CONFIG_OPENSSL_WITH_EC2M
  OPENSSL_OPTIONS += no-ec2m
endif
ifeq ("$(strip ${ZCFG_PLATFORM})","QUALCOMM")
ifndef CONFIG_OPENSSL_WITH_SSL3
  OPENSSL_OPTIONS += no-ssl3
endif
else
ifndef CONFIG_OPENSSL_WITH_SSL3
  OPENSSL_OPTIONS += no-ssl3 no-ssl3-method
endif

ifndef CONFIG_OPENSSL_HARDWARE_SUPPORT
  OPENSSL_OPTIONS += no-hw
endif

ifndef CONFIG_OPENSSL_WITH_DEPRECATED
  OPENSSL_OPTIONS += no-deprecated
endif

ifndef CONFIG_OPENSSL_WITH_DTLS
  OPENSSL_OPTIONS += no-dtls
endif

ifdef CONFIG_OPENSSL_WITH_COMPRESSION
  OPENSSL_OPTIONS += zlib-dynamic
else
  OPENSSL_OPTIONS += no-comp
endif

ifndef CONFIG_OPENSSL_WITH_NPN
  OPENSSL_OPTIONS += no-nextprotoneg
endif

ifndef CONFIG_OPENSSL_WITH_PSK
  OPENSSL_OPTIONS += no-psk
endif

ifndef CONFIG_OPENSSL_WITH_SRP
  OPENSSL_OPTIONS += no-srp
endif

ifeq ($(CONFIG_OPENSSL_OPTIMIZE_SPEED),y)
  TARGET_CFLAGS := $(filter-out -Os,$(TARGET_CFLAGS)) -O3
endif
endif

ifeq ($(CONFIG_x86_64),y)
  OPENSSL_TARGET:=linux-x86_64-openwrt
  OPENSSL_MAKEFLAGS += LIBDIR=lib
else
  OPENSSL_OPTIONS+=no-sse2
  ifeq ($(CONFIG_mips)$(CONFIG_mipsel),y)
    OPENSSL_TARGET:=linux-mips-openwrt
  else ifeq ($(CONFIG_aarch64),y)
    OPENSSL_TARGET:=linux-aarch64-openwrt
ifneq ("$(strip ${ZCFG_PLATFORM})","QUALCOMM")
  else ifeq ($(CONFIG_arm)$(CONFIG_armeb),y)
    OPENSSL_TARGET:=linux-armv4-openwrt
endif
  else
    OPENSSL_TARGET:=linux-generic-openwrt
    OPENSSL_OPTIONS+=no-perlasm
  endif
endif

ifeq ("$(strip ${ZCFG_PLATFORM})","QUALCOMM")
STAMP_CONFIGURED := $(STAMP_CONFIGURED)_$(subst $(space),_,$(OPENSSL_OPTIONS))

define Build/Configure
	[ -f $(STAMP_CONFIGURED) ] || { \
		rm -f $(PKG_BUILD_DIR)/*.so.* $(PKG_BUILD_DIR)/*.a; \
		find $(PKG_BUILD_DIR) -name \*.o | xargs rm -f; \
	}
	(cd $(PKG_BUILD_DIR); \
		./Configure $(OPENSSL_TARGET) \
			--prefix=/usr \
			--openssldir=/etc/ssl \
			$(TARGET_CPPFLAGS) \
			$(TARGET_LDFLAGS) -ldl \
			-DOPENSSL_SMALL_FOOTPRINT \
			$(OPENSSL_NO_CIPHERS) \
			$(OPENSSL_OPTIONS) \
	)
	# XXX: OpenSSL "make depend" will look for installed headers before its own,
	# so remove installed stuff first
	-$(SUBMAKE) -j1 clean-staging
	+$(MAKE) $(PKG_JOBS) -C $(PKG_BUILD_DIR) \
		MAKEDEPPROG="$(TARGET_CROSS)gcc" \
		OPENWRT_OPTIMIZATION_FLAGS="$(TARGET_CFLAGS)" \
		$(OPENSSL_MAKEFLAGS) \
		depend
endef

TARGET_CFLAGS += $(FPIC)

else

# Not to enable this check mechanism, because previous project didn`t change it.
# For example BCM63138 should use little endain, but it didn`t assign it!
#ifeq ($(CONFIG_BIG_ENDIAN),y)
#OPENSSL_TARGET += -DB_ENDIAN
#else
#OPENSSL_TARGET += -DL_ENDIAN
#endif
# We only enable it for new SoC to prevent impact current project.
BRCM_CHIP=$(call qstrip,$($(shell echo CONFIG_BRCMSDK$(CONFIG_BRCM_SDK_VERSION)_BRCM_CHIP)))
ifneq ($(findstring $(BRCM_CHIP),6858 6856 63158 63178 4908),)
#DX3100-B0 with BCM63178 is a special case, it already release firmware with BIG endian
ifneq ("$(CONFIG_TARGET_brcm963xx_dx3100_b0)","y")
OPENSSL_TARGET += -DL_ENDIAN
endif
endif

ifneq ($($(shell echo CONFIG_$(CONFIG_CUSTOM_SDK_PREFIX)_TCSUPPORT_LITTLE_ENDIAN)),)
OPENSSL_TARGET += -DL_ENDIAN
endif

STAMP_CONFIGURED := $(STAMP_CONFIGURED)_$(shell echo $(OPENSSL_OPTIONS) | mkhash md5)

define Build/Configure
	[ -f $(STAMP_CONFIGURED) ] || { \
		rm -f $(PKG_BUILD_DIR)/*.so.* $(PKG_BUILD_DIR)/*.a; \
		find $(PKG_BUILD_DIR) -name \*.o | xargs rm -f; \
	}
	(cd $(PKG_BUILD_DIR); \
		./Configure $(OPENSSL_TARGET) \
			--prefix=/usr \
			--openssldir=/etc/ssl \
			$(TARGET_CPPFLAGS) \
			$(TARGET_LDFLAGS) -ldl \
			$(if $(CONFIG_OPENSSL_OPTIMIZE_SPEED),,-DOPENSSL_SMALL_FOOTPRINT) \
			$(OPENSSL_NO_CIPHERS) \
			$(OPENSSL_OPTIONS) \
	)
	# XXX: OpenSSL "make depend" will look for installed headers before its own,
	# so remove installed stuff first
	-$(SUBMAKE) -j1 clean-staging
	+$(MAKE) $(PKG_JOBS) -C $(PKG_BUILD_DIR) \
		MAKEDEPPROG="$(TARGET_CROSS)gcc" \
		OPENWRT_OPTIMIZATION_FLAGS="$(TARGET_CFLAGS)" \
		$(OPENSSL_MAKEFLAGS) \
		depend
endef

TARGET_CFLAGS += $(FPIC) -I$(CURDIR)/include -ffunction-sections -fdata-sections
TARGET_LDFLAGS += -Wl,--gc-sections

#fix New OpenSSL vulnerabilities issue
TARGET_CFLAGS += -DOPENSSL_NO_HEARTBEATS

#no diffie hell man key length check, for older openssl peer  support
ifeq ($(CONFIG_ZYXEL_NO_DH_ALGO_CHECK),y)
	TARGET_CFLAGS += -DNO_DH_ALGO_CHECK
endif

ifeq ("_$(CONFIG_arm)_$(CONFIG_TARGET_brcm963xx)_","_y_y_")
	TARGET_CFLAGS += -DBRCM_ARM_SPECIFIC
endif
endif



define Build/Compile
	+$(MAKE) $(PKG_JOBS) -C $(PKG_BUILD_DIR) \
		CC="$(TARGET_CC)" \
		ASFLAGS="$(TARGET_ASFLAGS) -I$(PKG_BUILD_DIR)/crypto -c" \
		AR="$(TARGET_CROSS)ar r" \
		RANLIB="$(TARGET_CROSS)ranlib" \
		OPENWRT_OPTIMIZATION_FLAGS="$(TARGET_CFLAGS)" \
		$(OPENSSL_MAKEFLAGS) \
		all
	+$(MAKE) $(PKG_JOBS) -C $(PKG_BUILD_DIR) \
		CC="$(TARGET_CC)" \
		ASFLAGS="$(TARGET_ASFLAGS) -I$(PKG_BUILD_DIR)/crypto -c" \
		AR="$(TARGET_CROSS)ar r" \
		RANLIB="$(TARGET_CROSS)ranlib" \
		OPENWRT_OPTIMIZATION_FLAGS="$(TARGET_CFLAGS)" \
		$(OPENSSL_MAKEFLAGS) \
		build-shared
	# Work around openssl build bug to link libssl.so with libcrypto.so.
	-rm $(PKG_BUILD_DIR)/libssl.so.*.*.*
	+$(MAKE) $(PKG_JOBS) -C $(PKG_BUILD_DIR) \
		CC="$(TARGET_CC)" \
		OPENWRT_OPTIMIZATION_FLAGS="$(TARGET_CFLAGS)" \
		$(OPENSSL_MAKEFLAGS) \
		do_linux-shared
	$(MAKE) -C $(PKG_BUILD_DIR) \
		CC="$(TARGET_CC)" \
		INSTALL_PREFIX="$(PKG_INSTALL_DIR)" \
		$(OPENSSL_MAKEFLAGS) \
		install
endef

define Build/InstallDev
	$(INSTALL_DIR) $(1)/usr/include
	$(CP) $(PKG_INSTALL_DIR)/usr/include/openssl $(1)/usr/include/
	$(INSTALL_DIR) $(1)/usr/lib/
	$(CP) $(PKG_INSTALL_DIR)/usr/lib/lib{crypto,ssl}.{a,so*} $(1)/usr/lib/
	$(INSTALL_DIR) $(1)/usr/lib/pkgconfig
	$(CP) $(PKG_INSTALL_DIR)/usr/lib/pkgconfig/{openssl,libcrypto,libssl}.pc $(1)/usr/lib/pkgconfig/
	[ -n "$(TARGET_LDFLAGS)" ] && $(SED) 's#$(TARGET_LDFLAGS)##g' $(1)/usr/lib/pkgconfig/{openssl,libcrypto,libssl}.pc || true
endef
ifeq ("$(strip ${ZCFG_PLATFORM})","QUALCOMM")
define Package/libopenssl/install
	$(INSTALL_DIR) $(1)/usr/lib
	$(INSTALL_DATA) $(PKG_INSTALL_DIR)/usr/lib/libcrypto.so.* $(1)/usr/lib/
	$(INSTALL_DATA) $(PKG_INSTALL_DIR)/usr/lib/libssl.so.* $(1)/usr/lib/
endef
else
define Package/libopenssl/install
	$(INSTALL_DIR) $(1)/lib
	chmod 755 $(PKG_INSTALL_DIR)/usr/lib/libssl.so*
	$(CP) $(PKG_INSTALL_DIR)/usr/lib/libcrypto.so* $(1)/lib/
	$(CP) $(PKG_INSTALL_DIR)/usr/lib/libssl.so* $(1)/lib/
	chmod +w $(1)/lib/libcrypto.so.*
	$(RSTRIP) $(1)/lib/libcrypto.so.*
	#$(INSTALL_DIR) $(1)/usr/lib
	#$(INSTALL_DATA) $(PKG_INSTALL_DIR)/usr/lib/libcrypto.so* $(1)/usr/lib/
	#$(INSTALL_DATA) $(PKG_INSTALL_DIR)/usr/lib/libssl.so* $(1)/usr/lib/
	#chmod +w $(1)/usr/lib/libcrypto.so.*
	#$(RSTRIP) $(1)/usr/lib/libcrypto.so.*
endef
endif

define Package/openssl-util/install
	$(INSTALL_DIR) $(1)/etc/ssl
	$(CP) $(PKG_INSTALL_DIR)/etc/ssl/openssl.cnf $(1)/etc/ssl/
	$(INSTALL_DIR) $(1)/etc/ssl/certs
	$(INSTALL_DIR) $(1)/etc/ssl/private
	chmod 0700 $(1)/etc/ssl/private
	$(INSTALL_DIR) $(1)/usr/bin
	$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/openssl $(1)/usr/bin/
endef

#$(eval $(call BuildPackage,libopenssl))
#$(eval $(call BuildPackage,openssl-util))