# fss-0002

main:
  cp -v ${TC}lib/static/libgmp.a /lib/
  sed -i -e 's|$options -DB_ENDIAN -mschedule=$CPUSCHEDULE -march=$CPUARCH|$options -DB_ENDIAN|' config
  sed -i -e "s|\-O\>|$CFLAGS|g" Configure crypto/bn/Makefile crypto/des/Imakefile
  sed -i -e "s|REPLACE_ME_OPENSSL_MACHINE|$openssl_machine|g" config
  ./config --prefix=/ zlib-dynamic shared threads no-asm --openssldir=/etc/ssl
  sed -i -e 's| no-rfc3779||' Makefile
  sed -i -e 's|-O3||g' Makefile
  sed -i -e 's| -mcpu=pentium||g' Makefile
  sed -i -e 's|INSTALLTOP=|&/|' Makefile
  sed -i -e "s|\-O\>|$CFLAGS|g" Makefile
  find -name Makefile -exec sed -i -e "s|^CFLAG=|&$CFLAGS|g" '{}' ';'
  find -name '*.pl' -type f -exec sed -i -e "s|/usr/bin/perl|$(type -p perl)|g" '{}' ';'
  find -name '*.pl' -type f -exec sed -i -e "s|/usr/local/bin/perl|$(type -p perl)|g" '{}' ';'
  sed -i -e "s|/usr/bin/perl|$(type -p perl)|g" apps/tsget tools/c_rehash openssl.spec Makefile
  sed -i -e "s|/usr/bin/ranlib|$(type -p ranlib)|g" Makefile
  sed -i -e 's|OPENSSLDIR=/usr/local/ssl|OPENSSLDIR=/etc/ssl|g' Makefile
  sed -i -e 's|INSTALLTOP=/usr/local/ssl|INSTALLTOP=|g' Makefile
  sed -i -e 's|OPENSSLDIR="/usr/local/ssl"|OPENSSLDIR="/etc/ssl"|g' util/mk1mf.pl
  sed -i -e 's|INSTALLTOP="/usr/local/ssl"|INSTALLTOP=""|g' util/mk1mf.pl
  sed -i -e "s|'includedir=\$\${prefix}/include';|'includedir=${TC}include';|g" Makefile
  sed -i -e 's|/usr/local/ssl/lib/engines|/lib/ssl/engines|g' include/openssl/opensslconf.h crypto/opensslconf.h crypto/opensslconf.h.in
  sed -i -e 's|/usr/local/ssl|/etc/ssl|g' include/openssl/opensslconf.h  crypto/opensslconf.h crypto/opensslconf.h.in
  make pkgconfigdir=${TC}lib/pkgconfig/
  make pkgconfigdir=${TC}lib/pkgconfig/ install
  rm -vf /lib/libgmp.a
  if [[ -d /lib64 ]] ; then mv -v /lib64/* /lib/ && rm -Rf /lib64 ; fi
  cat ${PR}certificates/* > /etc/ssl/certs/ca-certificates.crt
  #sed -i -e "s|\r$||g" /etc/ssl/certs/ca-certificates.crt
  cp -vR /include/openssl ${TC}include/
  chgrp e_encrypt -R /lib/{libssl,libcrypto}.so* /etc/ssl /lib/engines
  chgrp e_encrypt /bin/{openssl,c_rehash}
  chmod o-rx -R /lib/{libssl,libcrypto}.so* /etc/ssl /lib/engines
  chmod o-rx /bin/{openssl,c_rehash}
  find /lib/engines /etc/ssl -type d -exec chmod g+s '{}' ';'
  chmod u+rwx,g+rx-w,o-rwx -R /bin/{openssl,c_rehash} /lib/{libssl,libcrypto}.so* /etc/ssl /lib/engines
  mv -v /lib/pkgconfig/{libcrypto,libssl,openssl}.pc ${TC}lib/pkgconfig/
  find /etc/ssl/{certs,private} -type f -exec chmod ugo-x '{}' ';'
  chmod ugo-x /etc/ssl/openssl.cnf
  rmdir -v /lib/pkgconfig
  rm -Rf /lib/{libssl,libcrypto}.a /include
  rm -Rf /lib/fips_premain.c*
  rm -Rf /bin/c_rehash
  rm -Rf /etc/ssl/misc/
  tkis_handle_documentation man standard /etc/ssl/man
