# This is the recipe.sh script. It is executed by BPM in a temporary directory when compiling a source package
# BPM Expects the source code to be extracted into the automatically created 'source' directory which can be accessed using $BPM_SOURCE
# BPM Expects the output files to be present in the automatically created 'output' directory which can be accessed using $BPM_OUTPUT

# The prepare function is executed in the root of the temp directory
# This function is used for putting downloaded files to the correct location or applying patches
prepare() {
  cd "$BPM_SOURCE"
  # Apply patches
  for _patch in "$BPM_WORKDIR"/*.patch; do
    patch -p2 -i "$_patch"
  done
  cp "$BPM_WORKDIR"/certdata2pem.c mozilla/certdata2pem.c
}

# The build function is executed in the source directory
# This function is used to compile the source code
build() {
  make
}

# The package function is executed in the source directory
# This function is used to move the compiled files into the output directory
package() {
  make DESTDIR="$BPM_OUTPUT" install

  # Install man page
  install -Dm644 "$BPM_SOURCE"/sbin/update-ca-certificates.8 "$BPM_OUTPUT"/usr/share/man/man8/update-ca-certificates.8

  # Install update-ca-trust
  install -Dm755 "$BPM_WORKDIR"/update-ca-trust "$BPM_OUTPUT"/usr/sbin/update-ca-trust
  install -Dm644 "$BPM_WORKDIR"/update-ca-trust.8 "$BPM_OUTPUT"/usr/share/man/man8/update-ca-trust.8

  # Generate ca-certificates.conf
  cd "$BPM_OUTPUT"/usr/share/ca-certificates
  find . -name '*.crt' | sort | cut -b3- | install -Dm644 /dev/stdin "$BPM_OUTPUT"/etc/ca-certificates.conf

  # Create certificate symlink
  install -d "$BPM_OUTPUT"/etc/ssl
  ln -s /etc/ssl/certs/ca-certificates.crt "$BPM_OUTPUT"/etc/ssl/certs.pem

  # Create trust-source directories
  install -d "$BPM_OUTPUT"/etc/ca-certificates/trust-source/{anchors,blocklist}
  install -d "$BPM_OUTPUT"/usr/share/ca-certificates/trust-source/{anchors,blocklist}

  # Create directories used by update-ca-trust
  install -d "$BPM_OUTPUT"/etc/ssl/certs/java
  install -d "$BPM_OUTPUT"/etc/ssl/extracted

  # Install bpm hook
  install -Dm644 "$BPM_WORKDIR"/40-update-ca-trust.bpmhook "$BPM_OUTPUT"/var/lib/bpm/hooks/40-update-ca-trust.bpmhook

  # Install package license
  install -Dm644 "$BPM_SOURCE"/debian/copyright "$BPM_OUTPUT"/usr/share/licenses/ca-certificates/copyright
}