#!/usr/bin/bash
# JOBoRun		: Jwm OpenBox Obarun RUNit
# Maintainer	: Joe Bo Run <joborun@disroot.org>
# PkgSource		: url="https://gittea.disroot.org/joborun-pkg/jobextra/$pkgname"
# Website		: https://pozol.eu
#-----------------------------------------| DESCRIPTION |---------------------------------------

pkgname=signify
pkgver=32
pkgrel=02
pkgdesc='OpenBSD tool to cryptographically sign and verify files'
url='https://github.com/aperezdc/signify'
depends=('glibc' 'libbsd>=0.8')
#source=(${url}/releases/download/v${pkgver}/${pkgname}-${pkgver}.tar.xz{,.asc}
makedepends=('git')
source=(git+https://github.com/aperezdc/signify.git?signed#tag=v${pkgver}
         ${pkgname}-LICENSE-${pkgver}::https://raw.githubusercontent.com/aperezdc/signify/v${pkgver}/COPYING)

prepare() {
  cd ${pkgname}
  # using O_NOFOLLOW doesn't lock anything down here, swapping files
  # without symlinks is still equally open to TOCTOU and it doesn't even
  # matter here. let's prefer supporting symlinked target files.
  sed -E 's/\| ?O_NOFOLLOW//g' -i ./*.c
}

build () {
  cd ${pkgname}
  make PREFIX=/usr \
    LTO=1 \
    EXTRA_CFLAGS="${CFLAGS} ${CPPFLAGS}" \
    EXTRA_LDFLAGS="${LDFLAGS}" \
    GIT_TAG=''
}

package () {
  cd ${pkgname}
  make PREFIX=/usr \
    DESTDIR="${pkgdir}" \
    GIT_TAG='' install
  install -Dm644 README.md CHANGELOG.md -t "${pkgdir}/usr/share/doc/${pkgname}"
  install -Dm644 ../${pkgname}-LICENSE-${pkgver} "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
}


#---- arch license gpg-key & sha256sums ----

arch=(x86_64)

license=('BSD')

validpgpkeys=(5AA3BC334FD7E3369E7C77B291C559DBE4C9123B) # Adrián Pérez de Castro <aperez@igalia.com>

sha512sums=('d179fe2b7deb6f579782959e365e65dcfa5b66bf44515ffe27af3ddc58111d554c39b50c86308bbcf4cf2f9b3f9343dee6f294d0f8916179e618d3fb0277afce'
             '5de1345ef929058040975f1106318ac9443fc107d19a12bfbc919a152ddd4dde11c76201722bc5847bad579e5dc4ba467f0947b6f0fce5cc3eccc68d5f4e9dfe')

sha256sums=(SKIP
#sha256sums=(6dd1b97fd9273d268b70c1be3c2592cbbe1488bca5e45c12c58f8c74362758d5  # signify-32.tar.xz
#	71bd99ae27c356de6e70fbd8678f01fc780da6e1add88fca1fb9164739ae6afc  # signify-32.tar.xz.asc
	39a0576350c89b404a0c152e626a3925d40aba505dc376d59d6eed12b2f48110) # signify-LICENSE-31

##  be51129b06bc4a706350c4c72deb9707d3ae6c77f1dc9633f7e5ce5490df7337  signify-32-02-x86_64.pkg.tar.lz