PKGBUILDs/core/nss/PKGBUILD

109 lines
3.5 KiB
Bash
Raw Normal View History

2019-09-04 00:29:18 +00:00
# Maintainer: Jan de Groot <jgc@archlinux.org>
# ALARM: Kevin Mihelich <kevin@archlinuxarm.org>
# - remove -march=armv8-a in AArch64 CFLAGS to not conflict with -march=armv8-a+crypto being added
# this is a stupid, dirty hack that shouldn't be necessary
2019-10-21 18:31:20 +00:00
# - patch to remove armv8-specific code in freebl so that other architectures can build
2019-09-04 00:29:18 +00:00
pkgbase=nss
pkgname=(nss ca-certificates-mozilla)
2019-11-21 13:35:34 +00:00
pkgver=3.47.1
2019-12-04 19:22:47 +00:00
pkgrel=5
2019-09-04 00:29:18 +00:00
pkgdesc="Network Security Services"
url="https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS"
arch=(x86_64)
license=(MPL GPL)
_nsprver=4.20
depends=("nspr>=${_nsprver}" sqlite zlib sh p11-kit)
2019-10-03 23:12:29 +00:00
makedepends=(perl python gyp)
2019-09-04 00:29:18 +00:00
source=("https://ftp.mozilla.org/pub/security/nss/releases/NSS_${pkgver//./_}_RTM/src/nss-${pkgver}.tar.gz"
2019-12-04 05:51:02 +00:00
nss-3.47-certdb-temp-cert.patch
2019-10-21 18:31:20 +00:00
certdata2pem.py bundle.sh
0001-Remove-ARM-AES-from-freebl-gyp.patch)
2019-11-21 13:35:34 +00:00
sha256sums=('1ae3d1cb1de345b258788f2ef6b10a460068034c3fd64f42427a183d8342a6fb'
2019-12-04 19:22:47 +00:00
'e4d7c7d6ac8c8cccd5bb23c217402922aafc1c104e46ae17a39f3c13b0e96002'
2019-09-04 00:29:18 +00:00
'0be02cecc27a6e55e1cad1783033b147f502b26f9fb1bb5a53e7a43bbcb68fa0'
2019-10-21 18:31:20 +00:00
'3bfadf722da6773bdabdd25bdf78158648043d1b7e57615574f189a88ca865dd'
'8372d34fdeeebd23e1daa7ee1f67510f050cba30c884f81e067dba46f94d1dcf')
2019-09-04 00:29:18 +00:00
prepare() {
2019-10-03 23:12:29 +00:00
mkdir certs
2019-09-04 00:29:18 +00:00
cd nss-$pkgver
ln -sr nss/lib/ckfw/builtins/certdata.txt ../certs/
ln -sr nss/lib/ckfw/builtins/nssckbi.h ../certs/
2019-10-21 18:31:20 +00:00
2019-12-04 05:51:02 +00:00
# https://bugzilla.mozilla.org/show_bug.cgi?id=1593167
patch -d nss -Np1 < ../nss-3.47-certdb-temp-cert.patch
2019-10-21 18:31:20 +00:00
if [[ $CARCH != "aarch64" ]]; then
patch -p1 -d nss -i $srcdir/0001-Remove-ARM-AES-from-freebl-gyp.patch
fi
2019-09-04 00:29:18 +00:00
}
build() {
[[ $CARCH == "aarch64" ]] && CFLAGS=`echo $CFLAGS | sed -e 's/-march=armv8-a//'` && CXXFLAGS="$CFLAGS"
2019-10-03 23:12:29 +00:00
cd certs
../certdata2pem.py
cd ..
./bundle.sh
2019-09-04 00:29:18 +00:00
cd nss-$pkgver/nss
2019-10-03 23:12:29 +00:00
./build.sh -v --opt --system-sqlite --system-nspr --enable-libpkix --disable-tests
2019-09-04 00:29:18 +00:00
}
package_nss() {
local vmajor vminor vpatch
cd nss-$pkgver
{ read vmajor; read vminor; read vpatch; } \
< <(awk '/#define.*NSS_V(MAJOR|MINOR|PATCH)/ {print $3}' nss/lib/nss/nss.h)
sed nss/pkg/pkg-config/nss.pc.in \
-e "s,%libdir%,/usr/lib,g" \
-e "s,%prefix%,/usr,g" \
-e "s,%exec_prefix%,/usr/bin,g" \
-e "s,%includedir%,/usr/include/nss,g" \
-e "s,%NSPR_VERSION%,$_nsprver,g" \
-e "s,%NSS_VERSION%,$pkgver,g" |
install -Dm644 /dev/stdin "$pkgdir/usr/lib/pkgconfig/nss.pc"
ln -s nss.pc "$pkgdir/usr/lib/pkgconfig/mozilla-nss.pc"
sed nss/pkg/pkg-config/nss-config.in \
-e "s,@libdir@,/usr/lib,g" \
-e "s,@prefix@,/usr/bin,g" \
-e "s,@exec_prefix@,/usr/bin,g" \
-e "s,@includedir@,/usr/include/nss,g" \
-e "s,@MOD_MAJOR_VERSION@,$vmajor,g" \
-e "s,@MOD_MINOR_VERSION@,$vminor,g" \
-e "s,@MOD_PATCH_VERSION@,$vpatch,g" |
install -D /dev/stdin "$pkgdir/usr/bin/nss-config"
cd nss/doc/nroff
install -Dt "$pkgdir/usr/share/man/man1" -m644 *util.1 signtool.1 signver.1 ssltap.1
cd ../../../dist
install -Dt "$pkgdir/usr/include/nss" -m644 public/nss/*.h
cd Release/bin
install -Dt "$pkgdir/usr/bin" *util shlibsign signtool signver ssltap
cd ../lib
install -Dt "$pkgdir/usr/lib" *.so
install -Dt "$pkgdir/usr/lib" -m644 *.chk
# Replace built-in trust with p11-kit connection
ln -sf libnssckbi-p11-kit.so "$pkgdir/usr/lib/libnssckbi.so"
}
package_ca-certificates-mozilla() {
pkgdesc="Mozilla's set of trusted CA certificates"
depends=(ca-certificates-utils)
install -Dm644 ca-bundle.trust.p11-kit \
"$pkgdir/usr/share/ca-certificates/trust-source/mozilla.trust.p11-kit"
}