Import getssl, a bash Let's Encrypt ACME client.

[Amitai Schleier <schmonz-web-git%schmonz.com@localhost>]

Module Name:	pkgsrc-wip
Committed By:	Amitai Schleier <schmonz-web-git%schmonz.com@localhost>
Pushed By:	schmonz
Date:		Tue Feb 13 17:55:36 2024 -0500
Changeset:	17096490a4318ceb8143bdb58375118e02f90f6c

Added Files:
	getssl/DESCR
	getssl/Makefile
	getssl/PLIST
	getssl/TODO.md
	getssl/distinfo
	getssl/patches/patch-getssl

Log Message:
Import getssl, a bash Let's Encrypt ACME client.

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=17096490a4318ceb8143bdb58375118e02f90f6c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 getssl/DESCR                | 14 ++++++++++++++
 getssl/Makefile             | 28 ++++++++++++++++++++++++++++
 getssl/PLIST                |  2 ++
 getssl/TODO.md              |  4 ++++
 getssl/distinfo             |  6 ++++++
 getssl/patches/patch-getssl | 15 +++++++++++++++
 6 files changed, 69 insertions(+)

diffs:
diff --git a/getssl/DESCR b/getssl/DESCR
new file mode 100644
index 0000000000..85f82887fe
--- /dev/null
+++ b/getssl/DESCR
@@ -0,0 +1,14 @@
+Obtain SSL certificates from the letsencrypt.org ACME server. Suitable
+for automating the process on remote servers. Features:
+
+- Bash - It runs on virtually all unix machines
+- Get certificates for remote servers (script doesn't need to run on the
+  server itself)
+- Runs as a daily cron - so certificates will be automatically renewed
+- Checks certificates are correctly loaded
+- Extensively configurable
+- Supports http and dns challenges
+- Simple and easy to use
+- Detailed debug info
+- Reload services
+- ACME v1 and V2
diff --git a/getssl/Makefile b/getssl/Makefile
new file mode 100644
index 0000000000..f26a5b3e08
--- /dev/null
+++ b/getssl/Makefile
@@ -0,0 +1,28 @@
+# $NetBSD$
+
+DISTNAME=		getssl-2.48
+CATEGORIES=		security
+MASTER_SITES=		${MASTER_SITE_GITHUB:=srvrco/}
+GITHUB_TAG=		v${PKGVERSION_NOREV}
+
+MAINTAINER=		pkgsrc-users%NetBSD.org@localhost
+HOMEPAGE=		https://github.com/srvrco/getssl/
+COMMENT=		Obtain free SSL certificates from letsencrypt ACME server
+LICENSE=		gnu-gpl-v3
+
+USE_LANGUAGES=		# none
+USE_TOOLS+=		bash:run
+REPLACE_BASH+=		getssl
+NO_BUILD=		yes
+
+SUBST_CLASSES+=		paths
+SUBST_STAGE.paths=	pre-configure
+SUBST_FILES.paths=	getssl
+SUBST_VARS.paths=	PKG_SYSCONFDIR
+
+INSTALLATION_DIRS=	bin
+
+do-install:
+	${INSTALL_SCRIPT} ${WRKSRC}/getssl ${DESTDIR}${PREFIX}/bin/
+
+.include "../../mk/bsd.pkg.mk"
diff --git a/getssl/PLIST b/getssl/PLIST
new file mode 100644
index 0000000000..915360f87f
--- /dev/null
+++ b/getssl/PLIST
@@ -0,0 +1,2 @@
+@comment $NetBSD$
+bin/getssl
diff --git a/getssl/TODO.md b/getssl/TODO.md
new file mode 100644
index 0000000000..f0520c6555
--- /dev/null
+++ b/getssl/TODO.md
@@ -0,0 +1,4 @@
+- Add `USE_TOOLS+=openssl:run` and probably other commands also relied on
+- Change installation to `USE_TOOLS+=gmake` to get the helper scripts too?
+- Turn off the auto-update feature
+- Anything else someone who actually uses this would notice
diff --git a/getssl/distinfo b/getssl/distinfo
new file mode 100644
index 0000000000..264c14641c
--- /dev/null
+++ b/getssl/distinfo
@@ -0,0 +1,6 @@
+$NetBSD$
+
+BLAKE2s (getssl-2.48.tar.gz) = ac2800d61378f785127d43fdc054ad31d3c7b50456de5a001e965e7e1d0c16c3
+SHA512 (getssl-2.48.tar.gz) = c1b3e8556a0df3c0a23b12dde2add335aece5ddfdb8678bb87ce0ebae8acdb909b337770c3a01d5439b61887e3ce30f5e3d90cdaa9355e22ba4c96fe1066cfcd
+Size (getssl-2.48.tar.gz) = 146649 bytes
+SHA1 (patch-getssl) = d1a8005dddd8ce4ced577c27e45782d7079086f0
diff --git a/getssl/patches/patch-getssl b/getssl/patches/patch-getssl
new file mode 100644
index 0000000000..57852c2227
--- /dev/null
+++ b/getssl/patches/patch-getssl
@@ -0,0 +1,15 @@
+$NetBSD$
+
+Use pkgsrc paths.
+
+--- getssl.orig	2024-02-13 22:44:17.358381116 +0000
++++ getssl
+@@ -341,7 +341,7 @@ SKIP_HTTP_TOKEN_CHECK="false"
+ SSLCONF="$(openssl version -d 2>/dev/null| cut -d\" -f2)/openssl.cnf"
+ TOKEN_USER_ID=""
+ USE_SINGLE_ACL="false"
+-WORKING_DIR_CANDIDATES=("/etc/getssl" "${PROGDIR}/conf" "${PROGDIR}/.getssl" "${HOME}/.getssl")
++WORKING_DIR_CANDIDATES=("@PKG_SYSCONFDIR@/getssl" "${PROGDIR}/conf" "${PROGDIR}/.getssl" "${HOME}/.getssl")
+ 
+ # Variables used when validating using a DNS entry
+ VALIDATE_VIA_DNS=""             # Set this to "true" to enable DNS validation