fix: xmlsec static-linking (#4)

Author: kingluo

.github/workflows/test.yml

@@ -18,7 +18,7 @@ jobs:
 
       - name: get dependencies
         run: |
-          sudo apt install -y cpanminus build-essential libncurses5-dev libreadline-dev libssl-dev perl lua5.1 liblua5.1-0-dev libxmlsec1-dev
+          sudo apt install -y cpanminus build-essential libncurses5-dev libreadline-dev libssl-dev libxml2-dev libxslt-dev perl
 
           # openresty
           wget -O - https://openresty.org/package/pubkey.gpg | sudo apt-key add -
@@ -30,7 +30,7 @@ jobs:
           sudo cpanm --notest Test::Nginx > build.log 2>&1 || (cat build.log && exit 1)
 
           # luarocks
-          curl -fsSL https://raw.githubusercontent.com/apache/apisix/master/utils/linux-install-luarocks.sh | sudo sh
+          curl -fsSL https://raw.githubusercontent.com/apache/apisix/master/utils/linux-install-luarocks.sh | bash
 
       - name: script
         run: |

.gitignore

@@ -2,3 +2,4 @@
 *.so
 t/servroot
 deps
+xmlsec1-1.2.28*

Makefile

@@ -6,25 +6,33 @@ INSTALL ?= install
 LUA_INCDIR=/usr/local/openresty/luajit/include/luajit-2.1/
 LUAJIT_DIR=/usr/local/openresty/luajit
 
+XMLSEC_VER=1.2.28
+
 CC=gcc
 CFLAGS=-g -fPIC -O2
-XMLSEC1_CFLAGS=$(shell xmlsec1-config --cflags --crypto=openssl)
+XMLSEC1_CFLAGS=-D__XMLSEC_FUNCTION__=__func__ -DXMLSEC_NO_SIZE_T -DXMLSEC_NO_GOST=1 -DXMLSEC_NO_GOST2012=1 -DXMLSEC_NO_CRYPTO_DYNAMIC_LOADING=1 -Ixmlsec1-$(XMLSEC_VER)/include/ -I/usr/include/libxml2 -DXMLSEC_CRYPTO_OPENSSL=1
 CFLAGS_ALL=$(CFLAGS) -Wall -Werror -std=c99 $(XMLSEC1_CFLAGS)
 LIBFLAG=-shared
 LDFLAGS=-g -O2
-XMLSEC1_LDFLAGS=$(shell xmlsec1-config --libs --crypto=openssl)
+XMLSEC1_STATIC_LIBS=xmlsec1-$(XMLSEC_VER)/./src/openssl/.libs/libxmlsec1-openssl.a xmlsec1-$(XMLSEC_VER)/./src/.libs/libxmlsec1.a
+XMLSEC1_LDFLAGS=-lxml2 -lssl -lcrypto -ldl -Wl,--whole-archive $(XMLSEC1_STATIC_LIBS) -Wl,--no-whole-archive -lxslt
 LDFLAGS_ALL=$(LIBFLAG) $(LDFLAGS) $(XMLSEC1_LDFLAGS)
 
 .PHONY: build
-build: saml.so
+build: $(XMLSEC1_STATIC_LIBS) saml.so
+
+$(XMLSEC1_STATIC_LIBS):
+	wget --no-check-certificate https://www.aleksey.com/xmlsec/download/older-releases/xmlsec1-$(XMLSEC_VER).tar.gz
+	tar zxf xmlsec1-$(XMLSEC_VER).tar.gz
+	cd xmlsec1-$(XMLSEC_VER); CFLAGS="-std=c99" ./configure --with-openssl --with-pic --disable-crypto-dl --disable-apps-crypto-dl; make
 
 .PHONY: test
-test: build deps
+test: build deps/
 	prove -r t/
 
 .PHONY: clean
 clean:
-	rm -f *.so *.o
+	rm -rf *.so *.o xmlsec1-$(XMLSEC_VER)*
 
 saml.o: src/*.c
 	$(CC) -c $(CFLAGS_ALL) -o saml.o src/saml.c
@@ -45,6 +53,5 @@ install:
 	$(INSTALL) xsd/* $(INST_LUADIR)/resty/saml/xsd/
 	$(INSTALL) t/lib/keycloak.lua $(INST_LUADIR)/resty/saml/
 
-.PHONY: deps
-deps:
+deps/:
 	luarocks install --lua-dir=$(LUAJIT_DIR) rockspec/lua-resty-saml-main-0-0.rockspec --tree=deps --only-deps --local