# Contributor: Rasmus Thomsen <oss@cogitri.dev>
# Maintainer: Natanael Copa <ncopa@alpinelinux.org>
pkgname=pam-u2f
pkgver=1.3.2
pkgrel=0
pkgdesc="Pluggable Authentication Module (PAM) for U2F"
url="https://developers.yubico.com/pam-u2f/"
arch="all"
license="BSD-2-Clause"
makedepends="linux-pam-dev openssl-dev>3 libfido2-dev"
options="!check" # need yubikey plugged in on live machine
subpackages="$pkgname-doc"
source="https://developers.yubico.com/pam-u2f/Releases/pam_u2f-$pkgver.tar.gz"
builddir="$srcdir/pam_u2f-$pkgver"

# secfixes:
#   1.3.2-r0:
#     - CVE-2025-23013
#   1.1.1-r0:
#     - CVE-2021-31924

build() {
	./configure \
		--build=$CBUILD \
		--host=$CHOST \
		--prefix=/usr \
		--sysconfdir=/etc \
		--mandir=/usr/share/man \
		--localstatedir=/var \
		--with-pam-dir=/usr/lib/security
	make
}

package() {
	make DESTDIR="$pkgdir" install
}

sha512sums="
0233740c4712006d24e65a45c0eca59fc642c5c6b65fdaec66a8d898f926dbd1f770792e447da12b91d098bda4114957f7e10dd8cfbdfaf9e4c5524fadceb0e2  pam_u2f-1.3.2.tar.gz
"
