#
# Copyright (C) 2010-2013 OpenWrt.org
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
#

include $(TOPDIR)/rules.mk

PKG_NAME:=openvpn

PKG_VERSION:=2.4.3
PKG_RELEASE:=1

# PKG_SOURCE_URL:=http://swupdate.openvpn.net/community/releases
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_MD5SUM:=6ca03fe0fd093e0d01601abee808835c

PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME)-$(BUILD_VARIANT)/$(PKG_NAME)-$(PKG_VERSION)
PKG_SOURCE_DIR:=$(TPLINK_DIR)/opensource/$(PKG_NAME)/src
PKG_FILES_DIR:=$(TPLINK_DIR)/opensource/$(PKG_NAME)/files

PKG_INSTALL:=1
PKG_FIXUP:=autoreconf
PKG_BUILD_PARALLEL:=1
PKG_LICENSE:=GPL-2.0

include $(INCLUDE_DIR)/package.mk

define Package/openvpn/Default
  TITLE:=Open source VPN solution using $(2)
  SECTION:=net
  CATEGORY:=$(TPLINK_CATEGORY)
  URL:=http://openvpn.net
  SUBMENU:=VPN
  MENU:=1
  DEPENDS:=+kmod-tun +OPENVPN_$(1)_ENABLE_LZO:liblzo +OPENVPN_$(1)_ENABLE_IPROUTE2:ip $(3) +liblogger +libzlog
  EXTRA_LDFLAGS := -llogger -lzlog
  VARIANT:=$(1)
  MAINTAINER:=Mirko Vogt <mirko@openwrt.org>
endef

Package/openvpn-openssl=$(call Package/openvpn/Default,openssl,OpenSSL,+libopenssl)
Package/openvpn-polarssl=$(call Package/openvpn/Default,polarssl,PolarSSL,+libpolarssl)
Package/openvpn-nossl=$(call Package/openvpn/Default,nossl,plaintext (no SSL))

define Package/openvpn/config/Default
	source "$(SOURCE)/Config-$(1).in"
endef

Package/openvpn-openssl/config=$(call Package/openvpn/config/Default,openssl)
Package/openvpn-polarssl/config=$(call Package/openvpn/config/Default,polarssl)
Package/openvpn-nossl/config=$(call Package/openvpn/config/Default,nossl)

ifeq ($(BUILD_VARIANT),polarssl)
CONFIG_OPENVPN_POLARSSL:=y
endif
ifeq ($(BUILD_VARIANT),openssl)
CONFIG_OPENVPN_OPENSSL:=y
endif
ifeq ($(BUILD_VARIANT),nossl)
CONFIG_OPENVPN_NOSSL:=y
endif

CONFIGURE_VARS += \
	IFCONFIG=/sbin/ifconfig \
	ROUTE=/sbin/route \
	IPROUTE=/usr/sbin/ip \
	NETSTAT=/sbin/netstat

TARGET_LDFLAGS += -ldl

define Build/Configure
	$(call Build/Configure/Default, \
		$(if $(CONFIG_OPENVPN_$(BUILD_VARIANT)_ENABLE_SMALL),--enable,--disable)-small \
		--disable-selinux \
		--disable-systemd \
		--disable-plugins \
		--disable-eurephia \
		--disable-pkcs11 \
		--enable-password-save \
		--enable-management \
		$(if $(CONFIG_OPENVPN_$(BUILD_VARIANT)_ENABLE_LZO),--enable,--disable)-lzo \
		$(if $(CONFIG_OPENVPN_$(BUILD_VARIANT)_ENABLE_X509_ALT_USERNAME),enable,disable-x509-alt-username)-ssl \
		$(if $(CONFIG_OPENVPN_$(BUILD_VARIANT)_ENABLE_SERVER),--enable,--disable)-server \
		$(if $(CONFIG_OPENVPN_$(BUILD_VARIANT)_ENABLE_SOCKS),--enable,--disable)-socks \
		$(if $(CONFIG_OPENVPN_$(BUILD_VARIANT)_ENABLE_HTTP),--enable,--disable)-http \
		$(if $(CONFIG_OPENVPN_$(BUILD_VARIANT)_ENABLE_FRAGMENT),--enable,--disable)-fragment \
		$(if $(CONFIG_OPENVPN_$(BUILD_VARIANT)_ENABLE_MULTIHOME),--enable,--disable)-multihome \
		$(if $(CONFIG_OPENVPN_$(BUILD_VARIANT)_ENABLE_IPROUTE2),--enable,--disable)-iproute2 \
		$(if $(CONFIG_OPENVPN_$(BUILD_VARIANT)_ENABLE_DEF_AUTH),--enable,--disable)-def-auth \
		$(if $(CONFIG_OPENVPN_$(BUILD_VARIANT)_ENABLE_PF),--enable,--disable)-pf \
		$(if $(CONFIG_OPENVPN_NOSSL),--disable-ssl --disable-crypto,--enable-ssl --enable-crypto) \
		$(if $(CONFIG_OPENVPN_OPENSSL),--with-crypto-library=openssl) \
		$(if $(CONFIG_OPENVPN_POLARSSL),--with-crypto-library=polarssl) \
		$(if $(CONFIG_OPENVPN_$(BUILD_VARIANT)_ENABLE_DPDK),--enable,--disable)-dpdk \
	)
endef

define Package/openvpn-$(BUILD_VARIANT)/conffiles
/etc/config/openvpn
endef

define Build/Prepare
	mkdir -p $(PKG_BUILD_DIR)
	$(CP) $(PKG_SOURCE_DIR)/* $(PKG_BUILD_DIR)
	$(CP) $(PKG_SOURCE_DIR)/.gitignore $(PKG_BUILD_DIR)
	$(CP) $(PKG_SOURCE_DIR)/.gitattributes $(PKG_BUILD_DIR)
endef

define Package/openvpn-$(BUILD_VARIANT)/install
	$(INSTALL_DIR) \
		$(1)/usr/sbin \
		$(1)/etc/init.d \
		$(1)/etc/config \
		$(1)/etc/openvpn \
		$(1)/lib/upgrade/keep.d

	$(INSTALL_BIN) \
		$(PKG_INSTALL_DIR)/usr/sbin/openvpn \
		$(1)/usr/sbin/

	$(INSTALL_BIN) \
		$(PKG_FILES_DIR)/usr/sbin/openvpn_checkpsw.sh \
		$(1)/usr/sbin/openvpn_checkpsw.sh

	$(INSTALL_BIN) \
		$(PKG_FILES_DIR)/etc/init.d/openvpn \
		$(1)/etc/init.d/openvpn

	$(INSTALL_CONF) $(PKG_FILES_DIR)/etc/config/openvpn \
		$(1)/etc/config/openvpn

	$(INSTALL_CONF) $(PKG_FILES_DIR)/etc/config/openvpn_user \
		$(1)/etc/config/openvpn_user

	$(INSTALL_CONF) $(PKG_FILES_DIR)/etc/config/vpnlog \
		$(1)/etc/config/vpnlog
	$(INSTALL_DATA) \
		$(PKG_FILES_DIR)/lib/upgrade/keep.d/openvpn \
		$(1)/lib/upgrade/keep.d/openvpn
		
	$(INSTALL_DIR) $(1)/lib/openvpn $(1)/etc/hotplug.d/wanhook
	$(INSTALL_BIN) $(PKG_FILES_DIR)/lib/openvpn/openvpn-common.sh $(1)/lib/openvpn/
	$(INSTALL_BIN) $(PKG_FILES_DIR)/lib/openvpn/openvpn-instance.sh $(1)/lib/openvpn/
	$(INSTALL_BIN) $(PKG_FILES_DIR)/lib/openvpn/openvpn-client-up.sh $(1)/lib/openvpn/
	$(INSTALL_BIN) $(PKG_FILES_DIR)/lib/openvpn/openvpn-client-down.sh $(1)/lib/openvpn/
	$(INSTALL_BIN) $(PKG_FILES_DIR)/lib/openvpn/openvpn-server-up.sh $(1)/lib/openvpn/
	$(INSTALL_BIN) $(PKG_FILES_DIR)/lib/openvpn/openvpn-server-down.sh $(1)/lib/openvpn/
	$(INSTALL_BIN) $(PKG_FILES_DIR)/lib/openvpn/openvpn-client-connect.sh $(1)/lib/openvpn/
	$(INSTALL_BIN) $(PKG_FILES_DIR)/lib/openvpn/openvpn-client-disconnect.sh $(1)/lib/openvpn/
	$(INSTALL_BIN) $(PKG_FILES_DIR)/lib/openvpn/openvpn-client-routeup.sh $(1)/lib/openvpn/
	$(INSTALL_BIN) $(PKG_FILES_DIR)/lib/openvpn/openvpn-password.lua $(1)/lib/openvpn/
	$(INSTALL_BIN) $(PKG_FILES_DIR)/lib/openvpn/openvpn-remote-management.sh $(1)/lib/openvpn/
	$(INSTALL_BIN) $(PKG_FILES_DIR)/lib/openvpn/openvpn_config.lua $(1)/lib/openvpn/
	$(INSTALL_BIN) $(PKG_FILES_DIR)/etc/hotplug.d/wanhook/* $(1)/etc/hotplug.d/wanhook
	$(INSTALL_BIN) $(PKG_FILES_DIR)/lib/openvpn/openvpn-route-down.sh $(1)/lib/openvpn/

endef

$(eval $(call BuildPackage,openvpn-openssl))
$(eval $(call BuildPackage,openvpn-polarssl))
$(eval $(call BuildPackage,openvpn-nossl))
