Makefile

.PHONY: doc certs tag
VERSION = 23.11.0

venv:
	virtualenv --python /opt/python-3.8.1/bin/python3 venv
	./venv/bin/pip install -U pip
	./venv/bin/pip install --editable .


clean:
	rm -rf vers

# call this in a fresh virtualenv to update our frozen requirements.txt!
freeze: clean
	python -m venv vers
	vers/bin/pip install -r requirements-min.txt
	vers/bin/pip freeze --all | grep -v -e "wheel" -e "pip" -e "distribute" > requirements-pinned.txt
	vers/bin/pip install hashin
	-rm requirements.txt
	cat requirements-pinned.txt | xargs vers/bin/hashin > requirements.txt
	git diff

doc:
	cd doc && make html

release: tag dist dist-sigs
release-upload:
	twine upload --username __token__ --password `cat PRIVATE-release-token` -r pypi -c "carml v${VERSION} tarball" dist/carml-${VERSION}.tar.gz dist/carml-${VERSION}.tar.gz.asc
	twine upload --username __token__ --password `cat PRIVATE-release-token` -r pypi -c "carml v${VERSION} wheel" dist/carml-${VERSION}-py3-none-any.whl dist/carml-${VERSION}-py3-none-any.whl.asc

tag:
	git tag | grep v${VERSION} || git tag --sign -u meejah@meejah.ca -m ${VERSION} v${VERSION}

dist: dist/carml-${VERSION}-py3-none-any.whl dist/carml-${VERSION}.tar.gz
dist-sigs: dist/carml-${VERSION}-py3-none-any.whl.asc dist/carml-${VERSION}.tar.gz.asc

dist/carml-${VERSION}-py3-none-any.whl:
	python setup.py bdist_wheel
dist/carml-${VERSION}-py3-none-any.whl.asc: dist/carml-${VERSION}-py3-none-any.whl
	gpg --verify dist/carml-${VERSION}-py3-none-any.whl.asc || gpg --pinentry loopback --no-version --detach-sign --armor --local-user meejah@meejah.ca dist/carml-${VERSION}-py3-none-any.whl

sdist: setup.py
	python setup.py sdist
dist/carml-${VERSION}.tar.gz: sdist
dist/carml-${VERSION}.tar.gz.asc: dist/carml-${VERSION}.tar.gz
	gpg --verify dist/carml-${VERSION}.tar.gz.asc || gpg --pinentry loopback --no-version --detach-sign --armor --local-user meejah@meejah.ca dist/carml-${VERSION}.tar.gz

pep8:
	pep8 --ignore E501 carml/*.py carml/command/*.py

certs:
	@echo 'Acquiring certificates from: https://www.digicert.com/digicert-root-certificates.html'
	@echo 'DigiCert High Assurance EV Root CA'
	curl --silent --ciphers ECDH+AES256 https://www.digicert.com/CACerts/DigiCertHighAssuranceEVRootCA.crt | openssl x509 -inform der -outform pem -out carml/keys/digicert-root-ca.pem

	## NOTE to self, it seems that after (presumably)
	## heartbleed-related changes, the intermediate certificate is
	## different -- this is the pre-April-10th-or-so one
	#@echo 'DigiCert High Assurance CA-3'
	#curl --silent --ciphers ECDH+AES256 https://www.digicert.com/CACerts/DigiCertHighAssuranceCA-3.crt | openssl x509 -inform der -outform pem -out carml/keys/digicert.pem
	@echo 'DigiCert SHA2 High Assurance Server CA'
	curl --silent --ciphers ECDH+AES256 https://www.digicert.com/CACerts/DigiCertSHA2HighAssuranceServerCA.crt | openssl x509 -inform der -outform pem -out carml/keys/digicert-sha2.pem

	@echo 'torproject.org (and was for check.torproject.org too when i looked)'
	echo "" | openssl s_client -showcerts -connect torproject.org:443 | openssl x509 -outform pem -out carml/keys/torproject.pem


fake-tor-certs: create_ca_and_sign_request.py create_key_and_csr.py
	-rm server-privkey.pem
	python create_key_and_csr.py foo.csr
	python create_ca_and_sign_request.py foo.csr
	-rm foo.csr
	mv server-privkey.pem server.bundle containers/web/

test-services: carml-dns carml-web

carml-dns: containers/dns/Dockerfile #dockerbase-wheezy-image
	@echo "Creating a Docker.io container for DNS service"
	docker build -rm -q -t carml-tester-dns ./containers/dns

carml-web: fake-tor-certs containers/web/Dockerfile #dockerbase-wheezy-image
	@echo "Creating a Docker.io container for Web service"
	docker build -rm -q -t carml-tester-web ./containers/web