# Contributor: Rasmus Thomsen <oss@cogitri.dev>
# Maintainer: Natanael Copa <ncopa@alpinelinux.org>
pkgname=pam-u2f
pkgver=1.4.0
pkgrel=0
pkgdesc="Pluggable Authentication Module (PAM) for U2F"
url="https://developers.yubico.com/pam-u2f/"
arch="all"
license="BSD-2-Clause"
makedepends="linux-pam-dev openssl-dev>3 libfido2-dev"
options="!check" # need yubikey plugged in on live machine
subpackages="$pkgname-doc"
source="https://developers.yubico.com/pam-u2f/Releases/pam_u2f-$pkgver.tar.gz"
builddir="$srcdir/pam_u2f-$pkgver"

# secfixes:
#   1.3.1-r0:
#     - CVE-2025-23013
#   1.1.1-r0:
#     - CVE-2021-31924

build() {
	./configure \
		--build=$CBUILD \
		--host=$CHOST \
		--prefix=/usr \
		--sysconfdir=/etc \
		--mandir=/usr/share/man \
		--localstatedir=/var \
		--with-pam-dir=/usr/lib/security
	make
}

package() {
	make DESTDIR="$pkgdir" install
}

sha512sums="
6ee4c5538a3b290748fae3b8c285b20a784fe2c0fdeff3a0bf250ec9b03659c6ddda4ea2d668c93d606f810e4f68cf3fc4130584a8532db9c9833a684d78f51f  pam_u2f-1.4.0.tar.gz
"
