# Contributor: Sören Tempel <soeren+alpine@soeren-tempel.net>
# Maintainer: Natanael Copa <ncopa@alpinelinux.org>
pkgname=dnssec-root
pkgver=20250524
pkgrel=0
_commit=179765e80ebde71594b0e14cc6d6a506d911699a
pkgdesc="The DNSSEC root key(s)"
url="https://www.iana.org/dnssec/"
arch="noarch"
license="Public-Domain"
makedepends="python3 openssl"
source="$pkgname-$pkgver.tar.gz::https://github.com/iana-org/get-trust-anchor/archive/$_commit.tar.gz
	trusted-key.key
	"
options="!check" # No tests
builddir="$srcdir/get-trust-anchor-$_commit"

snapshot() {
	unpack
	cd "$builddir"
	python3 "$builddir"/get_trust_anchor.py
	sort -k 6 ksk-as-dnskey.txt* > "$startdir"/trusted-key.key
	abump "$pkgname-$(date "+%Y%m%d")"
}

package() {
	install -Dm644 "$srcdir"/trusted-key.key \
		"$pkgdir"/usr/share/$pkgname/trusted-key.key
}

sha512sums="
cb83a880e215ea5565b123d531360de1783e92f7f6aed893bab360f9376d37fbae046a0c4477f7b2c8d8fbd67ccc35812673e137ab275bbe501f9804942f5f8a  dnssec-root-20250524.tar.gz
af8301d96592b947b27245ce8c8d29f38e8bf27dd88c28023d9539cee2396d97ef94a80295dcee2c3139036672f749af2affbcc59735d841c4b19c852097de94  trusted-key.key
"
