#!/usr/bin/env bash
#
# Parameters:
#   CMAKE_TARGET -- use $CMAKE_TARGET.cmake as toolchain file
#   AES_NI=1 -- enable AES_NI processor optimization
#   EXTERNAL_RNG=1 -- disable all internal RNG implementations (caller must provide)
#   ENABLE_TESTING=1 -- run PolarSSL test scripts after build
#   DEBUG_BUILD=1 -- enable minimal testing on target
#   ENABLE_SERVER=1  -- enable SSL/TLS server code
#   ENABLE_FS_IO=1 -- enable PolarSSL file I/O
#   VERBOSE=1 -- see build commands
#   USE_MINICRYPTO=1 -- use minicrypto library
#   NO_WIPE=1 -- don't wipe source tree and reunzip tarball

set -e
if [ -z "$O3" ]; then
    echo O3 var must point to ovpn3 tree
    exit 1
fi
if [ -z "$TARGET" ]; then
    echo TARGET var must be defined
    exit 1
fi

# source vars
. $O3/vars-${TARGET}
. $O3/lib-versions

# extract the PolarSSL source
PD=$O3/polarssl
DIST=polarssl-$PLATFORM

rm -rf $DIST
mkdir $DIST

if [ "$NO_WIPE" = "1" ]; then
    echo RETAIN existing source
    cd $POLARSSL_VERSION
elif [ "$NO_WIPE" = "partial" ]; then
    echo RETAIN existing source but copy config.h and CMakeLists.txt
    cd $POLARSSL_VERSION

    # define configs
    cp $PD/config.h include/polarssl/
    cp $PD/CMakeLists.txt .
else
    echo WIPE and reunzip source
    rm -rf $POLARSSL_VERSION
    [ -z "$DL" ] && DL=~/Downloads
    tar xfz $DL/$POLARSSL_VERSION-gpl.tgz

    cd $POLARSSL_VERSION

    # delete makefiles (apparently not needed)
    rm $(find . -type f | grep Makefile)

    #echo MERGING bignum-arm.patch
    #patch -p1 <$PD/bignum-arm.patch

    # do the big polar-openssl patch
    echo MERGING polarssl-minicrypto.patch
    patch -p1 <$PD/polarssl-minicrypto.patch

    # define configs
    cp include/polarssl/config.h include/polarssl/config.h.orig
    cp CMakeLists.txt CMakeLists.txt.orig
    cp $PD/config.h include/polarssl/
    cp $PD/CMakeLists.txt .
fi

# dynamically generated header file with options,
# included by config.h
OPC=include/polarssl/openvpn-polarssl.h
echo '/* Automatically generated by ovpn3/polarssl/build-polarssl, do not edit */' >$OPC

# set options
OPT=""

# RNG
if [ "$EXTERNAL_RNG" = "1" ]; then
    echo "#define EXTERNAL_RNG" >>$OPC
fi

# enable full testing infrastructure
if [ "$ENABLE_TESTING" = "1" ]; then
    OPT="$OPT -DENABLE_TESTING=1"
    echo "#define ENABLE_TESTING" >>$OPC
fi

# enable minimal testing on target
if [ "$DEBUG_BUILD" = "1" ]; then
    echo "#define POLARSSL_SELF_TEST" >>$OPC
fi

# configure target
if [ "$CMAKE_TARGET" ]; then
    OPT="$OPT -DCMAKE_TOOLCHAIN_FILE=$PD/$CMAKE_TARGET.cmake"
elif [ "$APPLE_FAMILY" = "1" ]; then
    OPT="$OPT -DCMAKE_TOOLCHAIN_FILE=$PD/apple.cmake"
fi

# OpenSSL
if [ "$USE_MINICRYPTO" = "1" ]; then
    OPT="$OPT -DMINICRYPTO=1"
    if [ "$MINICRYPTO_DIR" ]; then
	OPT="$OPT -DMINICRYPTO_DIR=$MINICRYPTO_DIR"
    fi
    if [ "$OSSLCRYPTO_DIR" ]; then
	OPT="$OPT -DOSSLCRYPTO_DIR=$OSSLCRYPTO_DIR"
    fi
    echo "#define POLARSSL_AES_ALT" >>$OPC
    echo "#define POLARSSL_SHA1_ALT" >>$OPC
    echo "#define POLARSSL_SHA2_ALT" >>$OPC
    echo "#define POLARSSL_SHA4_ALT" >>$OPC
    if [ "$AES_NI" = "1" ]; then
	echo "#define POLARSSL_USE_OPENSSL_AES_NI" >>$OPC
    fi
fi

# Enable SSL/TLS server
if [ "$ENABLE_SERVER" = "1" ]; then
    echo "#define POLARSSL_SSL_SRV_C" >>$OPC
fi

# enable PolarSSL file I/O
if [ "$ENABLE_FS_IO" = "1" ]; then
    echo "#define POLARSSL_FS_IO" >>$OPC
fi

# Build shared library
if [ "$SHARED" = "1" ]; then
    OPT="$OPT -DUSE_SHARED_POLARSSL_LIBRARY=1"
fi

# echo options
echo OPTIONS $OPT

# build it
pwd
cd ../$DIST
cmake $OPT ../$POLARSSL_VERSION
if [ "$VERBOSE" = "1" ]; then
    make VERBOSE=1
else
    make
fi

# test it
if [ "$ENABLE_TESTING" = "1" ]; then
    make test
fi

# copy headers
cp -a ../$POLARSSL_VERSION/include/polarssl include/

exit 0