# $Id: Portfile 88593 2012-01-05 14:26:10Z mww@macports.org $

PortSystem 1.0
PortGroup  muniversal 1.0

name                openssl
version             1.0.0f
epoch               1
platforms           darwin
categories          devel security
maintainers         mww
homepage            http://www.openssl.org/
license             OpenSSL SSLeay
description         OpenSSL SSL/TLS cryptography library

long_description \
    The OpenSSL Project is a collaborative effort to develop a robust, \
    commercial-grade, full-featured, and Open Source toolkit implementing \
    the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security \
    (TLS v1) protocols as well as a full-strength general purpose \
    cryptography library.

master_sites        http://www.openssl.org/source/
checksums           md5     e358705fb4a8827b5e9224a73f442025 \
                    sha1    f087190fc7702f328324aaa89c297cab6e236564 \
                    rmd160  4eb32bc51a86b28f6c0c159e421786d51bf441bd \
                    sha256  faf1eab0ef85fd6c3beca271c356b31b5cc831e2c6b7f23cf672e7ab4680fde1

depends_lib         port:zlib

patchfiles          patch-Makefile.org.diff patch-crypto-Makefile.diff patch-bn_internal.pod.diff
post-patch {
    # Ensure that the correct compiler is used
    reinplace "s|cc:|${configure.cc}:|" ${worksrcpath}/Configure
    # use SDK if necessary
    if {${configure.sdkroot} != ""} {
        reinplace "s|\\(-arch \[_a-zA-Z0-9\]*\\)|\\1 -isysroot ${configure.sdkroot}|" ${worksrcpath}/Configure
    }
}

configure.cmd       ./config
configure.args      -L${prefix}/lib --openssldir=${prefix}/etc/openssl zlib no-asm no-krb5 shared
configure.ccache    no

use_parallel_build  no

destroot.destdir    INSTALL_PREFIX=${destroot}
destroot.args       MANDIR=${prefix}/share/man MANSUFFIX=ssl

test.run            yes
test.dir            ${worksrcpath}/test
test.target         alltests

livecheck.type      regex
livecheck.url       ${master_sites}
livecheck.regex     ${name}-(\[0-9.\]+\[a-z\]?)\\.tar\\.gz

variant rfc3779 description {enable RFC 3779: X.509 Extensions for IP Addresses and AS Identifiers} {
    configure.args-append    enable-rfc3779
}

# code for universal build
array set merger_configure_args {
    ppc    darwin-ppc-cc
    i386   darwin-i386-cc
    ppc64  darwin64-ppc-cc
    x86_64 darwin64-x86_64-cc
}

if { [variant_isset universal] } {
    configure.cmd    ./Configure

    set merger_arch_compiler "no"

    configure.universal_args-delete --disable-dependency-tracking
    configure.args-delete  --disable-dependency-tracking

    pre-destroot {
        global merger_dont_diff
        if { [llength ${universal_archs_to_use}] > 2 } {
            lappend merger_dont_diff ${prefix}/include/openssl/opensslconf.h
        }
    }

    # Do not set --host.
    array set merger_host {
        ppc    ""
        i386   ""
        ppc64  ""
        x86_64 ""
    }
} elseif {[info exists merger_configure_args($build_arch)]} {
    configure.cmd           ./Configure
    configure.args-append   $merger_configure_args($build_arch)
}