mirror of
https://github.com/archlinuxarm/PKGBUILDs.git
synced 2024-11-18 22:54:00 +00:00
104 lines
3.4 KiB
Bash
104 lines
3.4 KiB
Bash
# Maintainer: Jan de Groot <jgc@archlinux.org>
|
|
|
|
# ALARM: Kevin Mihelich <kevin@archlinuxarm.org>
|
|
# - remove -march=armv8-a in AArch64 CFLAGS to not conflict with -march=armv8-a+crypto being added
|
|
# this is a stupid, dirty hack that shouldn't be necessary
|
|
|
|
pkgbase=nss
|
|
pkgname=(nss ca-certificates-mozilla)
|
|
pkgver=3.51
|
|
pkgrel=1
|
|
pkgdesc="Network Security Services"
|
|
url="https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS"
|
|
arch=(x86_64)
|
|
license=(MPL GPL)
|
|
_nsprver=4.25
|
|
depends=("nspr>=${_nsprver}" sqlite zlib sh 'p11-kit>=0.23.19')
|
|
makedepends=(perl python gyp)
|
|
source=("https://ftp.mozilla.org/pub/security/nss/releases/NSS_${pkgver//./_}_RTM/src/nss-${pkgver}.tar.gz"
|
|
certdata2pem.py bundle.sh
|
|
0001-Don-t-USE_ARM_GCM.patch
|
|
0002-disable-arm-neon.patch)
|
|
sha256sums=('75348b3b3229362486c57a880db917da1f96ef4eb639dc9cc2ff17d72268459c'
|
|
'd2a1579dae05fd16175fac27ef08b54731ecefdf414085c610179afcf62b096c'
|
|
'3bfadf722da6773bdabdd25bdf78158648043d1b7e57615574f189a88ca865dd'
|
|
'a25f7dc6c9233d729e3d8f2c30e839371feec63dcd2f805d138fe51ca54637a4'
|
|
'cb34218332a4a4a84436f3a805caec92fc6ece6ae33759a82117b3cd30719408')
|
|
|
|
prepare() {
|
|
mkdir certs
|
|
|
|
cd nss-$pkgver
|
|
ln -sr nss/lib/ckfw/builtins/certdata.txt ../certs/
|
|
ln -sr nss/lib/ckfw/builtins/nssckbi.h ../certs/
|
|
|
|
cd nss
|
|
patch -p1 -i "${srcdir}"/0001-Don-t-USE_ARM_GCM.patch
|
|
patch -p1 -i "${srcdir}"/0002-disable-arm-neon.patch
|
|
}
|
|
|
|
build() {
|
|
[[ $CARCH == "aarch64" ]] && CFLAGS=`echo $CFLAGS | sed -e 's/-march=armv8-a//'` && CXXFLAGS="$CFLAGS"
|
|
|
|
cd certs
|
|
../certdata2pem.py
|
|
|
|
cd ..
|
|
./bundle.sh
|
|
|
|
cd nss-$pkgver/nss
|
|
./build.sh -v --opt --system-sqlite --system-nspr --enable-libpkix --disable-tests -Ddisable_arm_neon=1 -Ddisable_arm_hw_aes=1
|
|
}
|
|
|
|
package_nss() {
|
|
local vmajor vminor vpatch
|
|
cd nss-$pkgver
|
|
|
|
{ read vmajor; read vminor; read vpatch; } \
|
|
< <(awk '/#define.*NSS_V(MAJOR|MINOR|PATCH)/ {print $3}' nss/lib/nss/nss.h)
|
|
|
|
sed nss/pkg/pkg-config/nss.pc.in \
|
|
-e "s,%libdir%,/usr/lib,g" \
|
|
-e "s,%prefix%,/usr,g" \
|
|
-e "s,%exec_prefix%,/usr/bin,g" \
|
|
-e "s,%includedir%,/usr/include/nss,g" \
|
|
-e "s,%NSPR_VERSION%,$_nsprver,g" \
|
|
-e "s,%NSS_VERSION%,$pkgver,g" |
|
|
install -Dm644 /dev/stdin "$pkgdir/usr/lib/pkgconfig/nss.pc"
|
|
|
|
ln -s nss.pc "$pkgdir/usr/lib/pkgconfig/mozilla-nss.pc"
|
|
|
|
sed nss/pkg/pkg-config/nss-config.in \
|
|
-e "s,@libdir@,/usr/lib,g" \
|
|
-e "s,@prefix@,/usr/bin,g" \
|
|
-e "s,@exec_prefix@,/usr/bin,g" \
|
|
-e "s,@includedir@,/usr/include/nss,g" \
|
|
-e "s,@MOD_MAJOR_VERSION@,$vmajor,g" \
|
|
-e "s,@MOD_MINOR_VERSION@,$vminor,g" \
|
|
-e "s,@MOD_PATCH_VERSION@,$vpatch,g" |
|
|
install -D /dev/stdin "$pkgdir/usr/bin/nss-config"
|
|
|
|
cd nss/doc/nroff
|
|
install -Dt "$pkgdir/usr/share/man/man1" -m644 *util.1 signtool.1 signver.1 ssltap.1
|
|
|
|
cd ../../../dist
|
|
install -Dt "$pkgdir/usr/include/nss" -m644 public/nss/*.h
|
|
|
|
cd Release/bin
|
|
install -Dt "$pkgdir/usr/bin" *util shlibsign signtool signver ssltap
|
|
|
|
cd ../lib
|
|
install -Dt "$pkgdir/usr/lib" *.so
|
|
install -Dt "$pkgdir/usr/lib" -m644 *.chk
|
|
|
|
# Replace built-in trust with p11-kit connection
|
|
ln -sf pkcs11/p11-kit-trust.so "$pkgdir/usr/lib/libnssckbi.so"
|
|
}
|
|
|
|
package_ca-certificates-mozilla() {
|
|
pkgdesc="Mozilla's set of trusted CA certificates"
|
|
depends=('ca-certificates-utils>=20181109-3')
|
|
|
|
install -Dm644 ca-bundle.trust.p11-kit \
|
|
"$pkgdir/usr/share/ca-certificates/trust-source/mozilla.trust.p11-kit"
|
|
}
|