%global debug_package %{nil}

Name:          step-ca
Version:       0.28.4
Release:       3%{?dist}
Summary:       Smallstep CA
License:       Apache-2.0
URL:           https://github.com/smallstep/certificates
Source0:       certificates-%{version}.tar.gz
Source1:       step-ca.sysusers
Source2:       step-ca-has-provisioner
BuildRequires: golang >= 1.24
BuildRequires: git-core
BuildRequires: make
BuildRequires: pcsc-lite-devel
BuildRequires: pkgconfig
BuildRequires: pkgconfig(libpcsclite)
BuildRequires: systemd-rpm-macros
Requires:      step-cli
%{?systemd_requires}

%description
step-ca is an online certificate authority for secure, automated
certificate management for DevOps.


%prep
%autosetup -p1 -n certificates-%{version}


%build
export BUILD_DATE="$(date --date="@${SOURCE_DATE_EPOCH:-$(date +%s)}" '+%Y-%m-%d %H:%M UTC')"
GO_ENVS="CGO_ENABLED=1" go build \
  -trimpath \
  -buildmode=pie \
  -mod=readonly \
  -modcacherw \
  -ldflags "-linkmode external -extldflags \"${LDFLAGS}\" -X \"main.Version=%{version}\" -X \"main.BuildTime=${BUILD_DATE}\"" \
  -o bin/step-ca ./cmd/...
#


%install
# install the step-ca user/group
install -Dm0644 %{SOURCE1} %{buildroot}%{_sysusersdir}/step-ca.conf

install -m 0755 -d %{buildroot}%{_bindir}
install -m 0750 -d %{buildroot}%{_sysconfdir}/step-ca/config
install -m 0755 -d %{buildroot}%{_unitdir}

install -Dm0755 bin/step-ca %{buildroot}%{_bindir}/step-ca
install -Dm0644 systemd/step-ca.service %{buildroot}%{_unitdir}/step-ca.service
install -m0640 /dev/null %{buildroot}%{_sysconfdir}/step-ca/password.txt
install -m0755 %{SOURCE2} %{buildroot}%{_bindir}/step-ca-has-provisioner


%check
go test -v ./... ||:
./bin/step-ca --version


%post
%systemd_post step-ca.service

%preun
%systemd_preun step-ca.service

%postun
%systemd_postun_with_restart step-ca.service


%files
%license LICENSE
%doc README.md
%attr(0750,root,step-ca) %{_bindir}/step-ca
%attr(0750,root,step-ca) %{_bindir}/step-ca-has-provisioner
%attr(0750,root,step-ca) %dir %{_sysconfdir}/step-ca
%attr(0640,root,step-ca) %config(noreplace) %{_sysconfdir}/step-ca/password.txt
%{_unitdir}/step-ca.service
%{_sysusersdir}/step-ca.conf


%changelog
* Wed Oct 08 2025 PatrickLaimbock <patrick@laimbock.com> - 0.28.4-2
- revert changes in step-ca.services, just use /etc/step-ca/

* Wed Oct 08 2025 PatrickLaimbock <patrick@laimbock.com> - 0.28.4-2
- remove the '.step' part in various directories

* Wed Oct 08 2025 PatrickLaimbock <patrick@laimbock.com> - 0.28.4-1
- initial release for Fedora 42 and 43