package("openssl")

    set_homepage("https://www.openssl.org/")
    set_description("A robust, commercial-grade, and full-featured toolkit for TLS and SSL.")

    add_urls("https://github.com/openssl/openssl/archive/OpenSSL_$(version).zip", {version = function (version)
        return version:gsub("%.", "_")
    end, excludes = "*/fuzz/*"})
    add_versions("1.1.1l", "23d8908e82b63af754018256a4eb02f13965f10067969f6a63f497960c11dbeb")
    add_versions("1.1.1k", "255c038f5861616f67b527434475d226f5fe00522fbd21fafd3df32019edd202")
    add_versions("1.1.1h", "0a976b769bdb26470971a184f5263d0c3256152d5671ed7287cf17acc4698afc")
    add_versions("1.1.0l", "a305d4af4b442ad61ba3d7e82905d09bfbd80424e132e10df4899d064aa47ce2")
    add_versions("1.0.2u", "493f8b34574d0cf8598adbdec33c84b8a06f0617787c3710d20827c01291c09c")
    add_versions("1.0.0",   "9b67e5ad1a4234c1170ada75b66321e914da4f3ebaeaef6b28400173aaa6b378")

    if is_plat("windows") then
        add_links("libssl", "libcrypto")
        add_syslinks("Ws2_32", "User32", "Crypt32", "Advapi32")
    else
        add_links("ssl", "crypto")
    end
    if is_plat("linux", "cross") then
        add_syslinks("dl")
    end

    if is_plat("linux") then
        add_extsources("apt::libssl-dev")
    end

    on_fetch("fetch")

    on_load(function (package)
        if package:is_plat("windows") and (not package.is_built or package:is_built()) then
            package:add("deps", "nasm")
            -- the perl executable found in GitForWindows will fail to build OpenSSL
            -- see https://github.com/openssl/openssl/blob/master/NOTES-PERL.md#perl-on-windows
            package:add("deps", "strawberry-perl", { system = false })
        end
    end)

    on_install("windows", function (package)
        local args = {"Configure"}
        table.insert(args, (package:is_arch("x86") and "VC-WIN32" or "VC-WIN64A"))
        if package:config("shared") then
            table.insert(args, "shared")
        else
            table.insert(args, "no-shared")
        end
        table.insert(args, "--prefix=" .. package:installdir())
        table.insert(args, "--openssldir=" .. package:installdir())
        os.vrunv("perl", args)

        -- temporary workaround, will be removed in future
        if xmake.version():ge("2.5.3") then
            import("package.tools.nmake").install(package)
        else
            local envs = import("core.tool.toolchain").load("msvc"):runenvs()
            envs.PATH = package:dep("nasm"):installdir("bin") .. path.envsep() .. envs.PATH
            import("package.tools.nmake").install(package, {}, {envs = envs})
        end
    end)

    on_install("linux", "macosx", function (package)
        -- https://wiki.openssl.org/index.php/Compilation_and_Installation#PREFIX_and_OPENSSLDIR
        os.vrun("./config %s --openssldir=\"%s\" --prefix=\"%s\"", package:debug() and "--debug" or "", package:installdir(), package:installdir())
        import("package.tools.make").install(package)
    end)

    on_install("cross", "android", function (package)
        local target = "linux-generic32"
        if package:is_targetos("linux") then
            if package:is_arch("arm64") then
                target = "linux-aarch64"
            else
                target = "linux-armv4"
            end
        end
        local configs = {target, "-DOPENSSL_NO_HEARTBEATS", "no-shared", "no-threads", "--prefix=" .. package:installdir()}
        local buildenvs = import("package.tools.autoconf").buildenvs(package)
        os.vrunv("./Configure", configs, {envs = buildenvs})
        local makeconfigs = {CFLAGS = buildenvs.CFLAGS, ASFLAGS = buildenvs.ASFLAGS}
        import("package.tools.make").install(package, makeconfigs)
    end)

    on_test(function (package)
        assert(package:has_cfuncs("SSL_new", {includes = "openssl/ssl.h"}))
    end)