#

# CDDL HEADER START

#

# The contents of this file are subject to the terms of the

# Common Development and Distribution License (the "License").

# You may not use this file except in compliance with the License.

#

# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE

# or http://www.opensolaris.org/os/licensing.

# See the License for the specific language governing permissions

# and limitations under the License.

#

# When distributing Covered Code, include this CDDL HEADER in each

# file and include the License file at usr/src/OPENSOLARIS.LICENSE.

# If applicable, add the following below this CDDL HEADER, with the

# fields enclosed by brackets "[]" replaced with your own identifying

# information: Portions Copyright [yyyy] [name of copyright owner]

#

# CDDL HEADER END

#

# Copyright (c) 2011, 2016, Oracle and/or its affiliates. All rights reserved.

#

include ../../make-rules/shared-macros.mk

COMPONENT_NAME=		pam_pkcs11

COMPONENT_VERSION=	0.6.8

COMPONENT_PROJECT_URL=	https://sourceforge.net/projects/opensc/

COMPONENT_SRC=		$(COMPONENT_NAME)-$(COMPONENT_VERSION)

COMPONENT_ARCHIVE=	$(COMPONENT_SRC).tar.gz

COMPONENT_ARCHIVE_HASH=	\

    sha256:9d942e542ef35d0e1f990d9ff5bf9df0af84c828ed081add2eb1b4d84f0efbda

COMPONENT_ARCHIVE_URL=	$(COMPONENT_PROJECT_URL)files/$(COMPONENT_NAME)/$(COMPONENT_ARCHIVE)

COMPONENT_BUGDB=	library/pam-pkcs11

TPNO=			28155

include $(WS_MAKE_RULES)/prep.mk

include $(WS_MAKE_RULES)/configure.mk

include $(WS_MAKE_RULES)/ips.mk

# Force regeneration of ancient autoconf scripts to fix 64-bit build detection

# and due to patches to autoconf and automake files.

COMPONENT_PREP_ACTION += (cd $(@D); autoreconf -fiv)

# Enable ASLR for this component

ASLR_MODE = $(ASLR_ENABLE)

# We build two different variants of pam_pkcs11 for our users. 

VARIANT_OPENLDAP =       $(BUILD_DIR)/openldap

VARIANT_MOZILLALDAP =    $(BUILD_DIR)/mozillaldap

VARIANTS = $(VARIANT_OPENLDAP) $(VARIANT_MOZILLALDAP)

BUILD_32 = $(VARIANTS:%=%/$(MACH32)/.built)

BUILD_64 = $(VARIANTS:%=%/$(MACH64)/.built)

BUILD_32_and_64 = $(BUILD_32) $(BUILD_64)

$(VARIANT_OPENLDAP)/$(MACH64)/.configured: BITS=64

$(VARIANT_MOZILLALDAP)/$(MACH64)/.configured:  BITS=64

# Configure options for mozillaldap variant

$(VARIANT_MOZILLALDAP)/%/.configured: \

    CONFIGURE_OPTIONS += --enable-openldap=no

$(VARIANT_MOZILLALDAP)/%/.configured: \

    CONFIGURE_OPTIONS += CFLAGS="$(CFLAGS) -DMODULE_ISA_FIX"

# Configure options for openldap variant

$(VARIANT_OPENLDAP)/%/.configured: \

    CONFIGURE_OPTIONS += --enable-openldap=yes

$(VARIANT_OPENLDAP)/%/.configured: \

    CONFIGURE_OPTIONS += \

    CFLAGS="$(CFLAGS) -I/usr/include/openldap -DMODULE_ISA_FIX"

# Common configure options

CONFIGURE_BINDIR.32= $(USRLIBDIR)/pam_pkcs11

CONFIGURE_BINDIR.64= $(USRLIBDIR64)/pam_pkcs11

CONFIGURE_OPTIONS += --localstatedir=/var

CONFIGURE_OPTIONS += --with-confdir=/etc/security/pam_pkcs11

CONFIGURE_OPTIONS += --docdir=/etc/security/pam_pkcs11

CONFIGURE_OPTIONS += OPENSSL_LIBS="-lssl -lcrypto -lsocket"

CONFIGURE_OPTIONS += --with-pcsclite=yes

CONFIGURE_OPTIONS += PCSC_CFLAGS="-I/usr/include/PCSC"

CONFIGURE_OPTIONS += PCSC_LIBS="-lpcsclite"

# We install only the MozillaLDAP variant. We will cherry-pick binaries built

# against OpenLDAP out of the build directory to avoid re-installing

# everything.

INSTALL_32 = $(VARIANT_MOZILLALDAP)/$(MACH32)/.installed

INSTALL_64 = $(VARIANT_MOZILLALDAP)/$(MACH64)/.installed

INSTALL_32_and_64 = $(INSTALL_32) $(INSTALL_64)

# common targets

configure:	$(CONFIGURE_32_and_64)

build:		$(BUILD_32_and_64)

install:	$(INSTALL_32_and_64)

test:		$(NO_TESTS)

REQUIRED_PACKAGES += library/openldap

REQUIRED_PACKAGES += library/security/openssl

REQUIRED_PACKAGES += library/security/pcsc/pcsclite

REQUIRED_PACKAGES += shell/bash

REQUIRED_PACKAGES += system/library

REQUIRED_PACKAGES += system/linker