#!/bin/sh
#
######################################################
## Build script for Core 9.0                          #
##                                                    #
## See .info for details                              #
######################################################

######################################################
# Configure extension creation parameters            #
######################################################

# Variables
EXTNAM=strongswan
VERSION="5.6.3" 
SRCNAM=$EXTNAM-$VERSION.tar.bz2
WRKDIR=$EXTNAM-$VERSION
BASEDIR=/tmp/$EXTNAM
SRCDIR=/tmp/$EXTNAM/source
TMPDIR=/tmp/$EXTNAM/package
DESTDIR=/tmp/$EXTNAM/build
TODAY=`date +%Y/%m/%d`
DESCRIPTION="strongswan the OpenSource IPsec-based VPN Solution"
DOCDESCRIPTION="Documentation part of strongswan the OpenSource IPsec-based VPN Solution"
DEVDESCRIPTION="Development files part of the strongswan the OpenSource IPsec-based VPN Solution"
AUTHORS="Andreas Steffen"
HOMEPAGE="https://www.strongswan.org/"
LICENSE="GPLv2"
ME="rhermsen"
TAGS="strongswan vpn ipsec"
DOCTAGS="man pages strongswan vpn ipsec"
DEVTAGS="development strongswan vpn ipsec"

######################################################
# Prepare extension creation                         #
######################################################

tce-load -wi ca-certificates.tcz
echo "ca_directory = /usr/local/etc/ssl/certs" > ~/.wgetrc

# Compile tools:
tce-load -wi compiletc.tcz
tce-load -wi squashfs-tools.tcz
#tce-load -wi autoconf.tcz
#tce-load -wi automake.tcz
#tce-load -wi libtool.tcz
#tce-load -wi libltdl.tcz
#tce-load -wi pkg-config.tcz
#tce-load -wi intltool.tcz
#tce-load -wi libtool-dev.tcz

# Configure dependancy
tce-load -wi gmp-dev.tcz

# Other
tce-load -wi ipv6-KERNEL.tcz

# Remove dirs and files left from previous creation
rm -r -f $SRCDIR 2>/dev/null
rm -r -f $WRKDIR 2>/dev/null
rm -r -f $DESTDIR 2>/dev/null

sudo rm -r -f $TMPDIR 2>/dev/null
sudo rm -r -f $TMPDIR-doc 2>/dev/null
sudo rm -r -f $TMPDIR-dev 2>/dev/null


######################################################
# Compile extension                                  #
######################################################

# Export variables needed for compilation

export CFLAGS="-O2 -pipe -march=i486 -mtune=i686"
export CXXFLAGS="-O2 -pipe -fno-exceptions -fno-rtti -march=i486 -mtune=i686"
#export PKG_CONFIG_PATH=/usr/local/lib/pkgconfig:/usr/lib/pkgconfig

# Download source in SRCDIR
mkdir -p $SRCDIR
cd $SRCDIR
wget http://download.strongswan.org/$SRCNAM

# Unpack source in current directory
tar -xjf $SRCNAM
cd $WRKDIR

# Configure it
./configure  --prefix=/usr/local \
--sysconfdir=/usr/local/etc/$EXTNAM \
--localstatedir=/var/$EXTNAM
# --with-user=tc \
# --with-group=staff

# Compile
make
mkdir -p $DESTDIR
make DESTDIR=$DESTDIR install

# Install in base temp dir
mkdir -p $TMPDIR/usr/local/bin
mkdir -p $TMPDIR/usr/local/etc/$EXTNAM/strongswan.d/charon/
mkdir -p $TMPDIR/usr/local/lib/ipsec/plugins/
mkdir -p $TMPDIR/usr/local/libexec/ipsec/
mkdir -p $TMPDIR/usr/local/sbin

mv $DESTDIR/usr/local/bin/* $TMPDIR/usr/local/bin
cd  $DESTDIR/usr/local/etc/$EXTNAM/
for file in *.conf
do
        mv $DESTDIR/usr/local/etc/$EXTNAM/$file $TMPDIR/usr/local/etc/$EXTNAM/$file.sample
done
mv $DESTDIR/usr/local/etc/$EXTNAM/ipsec.secrets $TMPDIR/usr/local/etc/$EXTNAM/ipsec.secrets.sample
mv $DESTDIR/usr/local/etc/$EXTNAM/ipsec.d $TMPDIR/usr/local/etc/$EXTNAM/
cd  $DESTDIR/usr/local/etc/$EXTNAM/strongswan.d/
for file in *.conf
do
        mv $DESTDIR/usr/local/etc/$EXTNAM/strongswan.d/$file $TMPDIR/usr/local/etc/$EXTNAM/strongswan.d/$file.sample
done
cd  $DESTDIR/usr/local/etc/$EXTNAM/strongswan.d/charon/
for file in *.conf
do
        mv $DESTDIR/usr/local/etc/$EXTNAM/strongswan.d/charon/$file $TMPDIR/usr/local/etc/$EXTNAM/strongswan.d/charon/$file.sample
done
mv $DESTDIR/usr/local/etc/$EXTNAM/swanctl/ $TMPDIR/usr/local/etc/$EXTNAM/
mv $TMPDIR/usr/local/etc/$EXTNAM/swanctl/swanctl.conf $TMPDIR/usr/local/etc/$EXTNAM/swanctl/swanctl.conf.sample
mv $DESTDIR/usr/local/lib/ipsec/*.so* $TMPDIR/usr/local/lib/ipsec/
mv $DESTDIR/usr/local/lib/ipsec/plugins/*.so* $TMPDIR/usr/local/lib/ipsec/plugins/
mv $DESTDIR/usr/local/libexec/ipsec/* $TMPDIR/usr/local/libexec/ipsec/
mv $DESTDIR/usr/local/sbin/* $TMPDIR/usr/local/sbin

###################################################
# Create info file                                #
###################################################
cat <<EOF> /tmp/$EXTNAM/${EXTNAM}.tcz.info
Title:          ${EXTNAM}.tcz
Description:    ${DESCRIPTION}
Version:        ${VERSION}
Author:         ${AUTHORS}
Original-site:  ${HOMEPAGE}
Copying-policy: ${LICENSE}
Size:           ${size}
Extension_by:   ${ME}
Tags:           ${TAGS}
Comments:       StrongSwan is an OpenSource IPsec implementation.
                strongSwan originally was designed for Linux, but has since been ported
                to Android, FreeBSD, Mac OS X, Windows and other platforms.
                The focus of strongSwan is on:
                'simplicity of configuration
                strong encryption and authentication methods
                powerful IPsec policies supporting large and complex VPN networks
                modular design with great expandability

                You can ignore the 'modprobe: module <name>  not found in
                modules.dep' messages. TCL hase these options build into the kernel.

                The IPv6 kernel modules are not automatically installed.
                If IPv6 is desired, install ipv6-4.x.x-tinycore.tcz via
                the Apps GUI, or cli (tce-load -wi ipv6-KERNEL).

                Configuration templates are located in ${EXTNAM}-doc.tcz.
                (/usr/local/share/strongswan/templates/config/)
Change-log:     ${TODAY} First Version, $VERSION
Current:        ${TODAY} First Version, $VERSION
EOF

###################################################                            
# Create .dep file                                #
###################################################
cat <<EOF> /tmp/${EXTNAM}/${EXTNAM}.tcz.dep
iptables.tcz
gmp.tcz
EOF

###################################################                                 
# Create install script file                      #                                 
###################################################                                 
mkdir -p $TMPDIR/usr/local/tce.installed
cat <<EOF> $TMPDIR/usr/local/tce.installed/${EXTNAM}                                
for dir in /usr/local/etc/strongswan/ /usr/local/etc/strongswan/strongswan.d/ /usr/local/etc/strongswan/strongswan.d/charon/ /usr/local/etc/strongswan/swanctl/
do
        cd \$dir
        for file in *.sample
        do
                if [ -r \${file%.sample} ]; then
                        echo "Verify if  \$dir/\${file%.sample} requires changes."
                        echo "See \$dir/\$file for the example."
                else
                        sudo -u tc cp \$file \${file%.sample}
                fi
        done
done
EOF


# Delete compilation work directory
cd ..
#rm -r -f $WRKDIR

# Adjust directory access rigths
find $TMPDIR/ -type d | xargs chmod -v 755;

# Strip executables
find $TMPDIR | xargs file | grep ELF | cut -f 1 -d : | xargs strip --strip-unneeded


# Move files to doc extension
mkdir -p $TMPDIR-doc/usr/local/share/man/man1
mkdir -p $TMPDIR-doc/usr/local/share/man/man5
mkdir -p $TMPDIR-doc/usr/local/share/man/man8
mkdir -p $TMPDIR-doc/usr/local/share/strongswan/templates/config/

mv $DESTDIR/usr/local/share/man/man1/* $TMPDIR-doc/usr/local/share/man/man1
mv $DESTDIR/usr/local/share/man/man5/* $TMPDIR-doc/usr/local/share/man/man5
mv $DESTDIR/usr/local/share/man/man8/* $TMPDIR-doc/usr/local/share/man/man8
mv $DESTDIR/usr/local/share/$EXTNAM/templates/config/ $TMPDIR-doc/usr/local/share/$EXTNAM/templates/

###################################################
# Create info file                                #
###################################################
cat <<EOF> /tmp/${EXTNAM}/${EXTNAM}-doc.tcz.info
Title:          ${EXTNAM}-doc.tcz
Description:    ${DOCDESCRIPTION}
Version:        ${VERSION}
Author:         ${AUTHORS}
Original-site:  ${HOMEPAGE}
Copying-policy: ${LICENSE}
Size:           ${size}
Extension_by:   ${ME}
Tags:           ${DOCTAGS}
Comments:       StrongSwan is an OpenSource IPsec implementation.
                strongSwan originally was designed for Linux, but has since been ported
                to Android, FreeBSD, Mac OS X, Windows and other platforms.
                The focus of strongSwan is on:
                'simplicity of configuration
                strong encryption and authentication methods
                powerful IPsec policies supporting large and complex VPN networks
                modular design with great expandability

                Configuration templates are located in ${EXTNAM}-doc.tcz.
                (/usr/local/share/strongswan/templates/config/)
Change-log:     ${TODAY} First Version, $VERSION
Current:        ${TODAY} First Version, $VERSION
EOF

###################################################                                                              
# Create info file                                #                                                              
###################################################                                                              
cat <<EOF> /tmp/$EXTNAM/${EXTNAM}-dev.tcz.info
Title:          ${EXTNAM}-dev.tcz                                                                                
Description:    ${DEVDESCRIPTION}                                                                                
Version:        ${VERSION}                                                                                       
Author:         ${AUTHORS}                                                                                       
Original-site:  ${HOMEPAGE}                                                                                      
Copying-policy: ${LICENSE}                                                                                       
Size:           ${size}                                                                                          
Extension_by:   ${ME}                                                                                            
Tags:           ${DEVTAGS}                                                                                       
Comments:       StrongSwan is an OpenSource IPsec implementation.
                strongSwan originally was designed for Linux, but has since been ported
                to Android, FreeBSD, Mac OS X, Windows and other platforms.
                The focus of strongSwan is on:
                'simplicity of configuration
                strong encryption and authentication methods
                powerful IPsec policies supporting large and complex VPN networks
                modular design with great expandability
                                                                                                                 
Change-log:     ${TODAY} First Version, $VERSION
Current:        ${TODAY} First Version, $VERSION
EOF

mkdir -p $TMPDIR-dev/usr/local/lib/ipsec/plugins

mv $DESTDIR/usr/local/lib/ipsec/*.la $TMPDIR-dev/usr/local/lib/ipsec/
mv $DESTDIR/usr/local/lib/ipsec/plugins/*.la $TMPDIR-dev/usr/local/lib/ipsec/plugins/

###################################################                                                              
# Create .dep file                                #                                                              
###################################################                                                              
cat <<EOF> /tmp/$EXTNAM/${EXTNAM}-dev.tcz.dep                                                                      
ipv6-KERNEL.tcz                                                                                                  
iptables.tcz
${EXTNAM}.tcz                                                                                                       
EOF

###################################################
# Create base extension in temp dir               #
###################################################

cd $TMPDIR
find $TMPDIR -perm 777 -exec chmod 755 {} \;
find $TMPDIR -perm 555 -exec chmod 755 {} \;
find $TMPDIR -perm 444 -exec chmod 644 {} \;
find $TMPDIR -perm 666 -exec chmod 644 {} \;
find $TMPDIR -perm 664 -exec chmod 644 {} \;
sudo chown -R root:root $TMPDIR
sudo chown -R tc:staff $TMPDIR/usr/local/etc/$EXTNAM
sudo chown -R root:staff $TMPDIR/usr/local/tce.installed
sudo chmod -R 775 $TMPDIR/usr/local/tce.installed

cd ..
mksquashfs $TMPDIR $EXTNAM.tcz
cd $TMPDIR
sudo sh -c "find usr -not -type d > $EXTNAM.tcz.list"
sudo mv ../$EXTNAM.tcz* .
sudo mv /tmp/${EXTNAM}/${EXTNAM}.tcz.info .

# Create md5 file
sudo sh -c "md5sum $EXTNAM.tcz > $EXTNAM.tcz.md5.txt"

# Cleanup temp directory
sudo rm -r -f usr


###################################################
# Create doc extension in temp dir                #
###################################################

cd $TMPDIR-doc
find $TMPDIR-doc -perm 777 -exec chmod 755 {} \;
find $TMPDIR-doc -perm 555 -exec chmod 755 {} \;
find $TMPDIR-doc -perm 444 -exec chmod 644 {} \;
find $TMPDIR-doc -perm 666 -exec chmod 644 {} \;
find $TMPDIR-doc -perm 664 -exec chmod 644 {} \;
sudo chown -R root:root $TMPDIR-doc
cd ..
mksquashfs $TMPDIR-doc $EXTNAM-doc.tcz
cd $TMPDIR-doc
sudo sh -c "find usr -not -type d > $EXTNAM-doc.tcz.list"
sudo mv ../$EXTNAM-doc.tcz* .
sudo mv /tmp/${EXTNAM}/${EXTNAM}-doc.tcz.info .

# Create md5 file
sudo sh -c "md5sum $EXTNAM-doc.tcz > $EXTNAM-doc.tcz.md5.txt"

# Cleanup temp directory
sudo rm -r -f usr


###################################################                                                              
# Create dev extension in temp dir                #                                                              
###################################################                                                              
                                                                                                                 
cd $TMPDIR-dev                                                                                                   
find $TMPDIR-dev -perm 777 -exec chmod 755 {} \;                                                                 
find $TMPDIR-dev -perm 555 -exec chmod 755 {} \;                                                                 
find $TMPDIR-dev -perm 444 -exec chmod 644 {} \;                                                                 
find $TMPDIR-dev -perm 666 -exec chmod 644 {} \;                                                                 
find $TMPDIR-dev -perm 664 -exec chmod 644 {} \;                                                                 
sudo chown -R root:root $TMPDIR-dev                                                                              
cd ..                                                                                                            
mksquashfs $TMPDIR-dev $EXTNAM-dev.tcz                                                                           
cd $TMPDIR-dev                                                                                                   
sudo sh -c "find usr -not -type d > $EXTNAM-dev.tcz.list"                                                        
sudo mv ../$EXTNAM-dev.tcz* .                                                                                     
sudo mv /tmp/${EXTNAM}/${EXTNAM}-dev.tcz.info .                                                                  
                                                                                                                 
# Create md5 file                                                                                                
sudo sh -c "md5sum $EXTNAM-dev.tcz > $EXTNAM-dev.tcz.md5.txt"                                                    
                                                                                                                 
# Cleanup temp directory                                                                                         
sudo rm -r -f usr