From e23711c393790bfef8b60718efe8921250c02ad6 Mon Sep 17 00:00:00 2001
From: CherryKitten <sammy@cherrykitten.dev>
Date: Mon, 17 Jun 2024 14:05:22 +0200
Subject: [PATCH] openpgp-ca: init at 0.13.1

---
 pkgs/by-name/op/openpgp-ca/package.nix | 58 ++++++++++++++++++++++++++
 1 file changed, 58 insertions(+)
 create mode 100644 pkgs/by-name/op/openpgp-ca/package.nix

diff --git a/pkgs/by-name/op/openpgp-ca/package.nix b/pkgs/by-name/op/openpgp-ca/package.nix
new file mode 100644
index 000000000000..0db67f6a22a2
--- /dev/null
+++ b/pkgs/by-name/op/openpgp-ca/package.nix
@@ -0,0 +1,58 @@
+{ stdenv
+, fetchFromGitLab
+, lib
+, darwin
+, nettle
+, nix-update-script
+, rustPlatform
+, pkg-config
+, pcsclite
+, openssl
+, gnupg
+, sqlite
+}:
+
+rustPlatform.buildRustPackage rec {
+  pname = "openpgp-ca";
+  version = "0.13.1";
+
+  src = fetchFromGitLab {
+    owner = "openpgp-ca";
+    repo = "openpgp-ca";
+    rev = "openpgp-ca/v${version}";
+    hash = "sha256-6K7H/d82Ge+JQykqTXAD43wlGTQl+U9D/vA+CNz4rfM=";
+  };
+
+  cargoHash = "sha256-PrbepiaQbfGEqJRIcOMR6ED3BLopZLhospTzWRUoW0A=";
+
+  nativeBuildInputs = [
+    pkg-config
+    rustPlatform.bindgenHook
+  ];
+
+  nativeCheckInputs = [
+    gnupg
+  ];
+
+  buildInputs = [
+    openssl
+    sqlite
+    pcsclite
+    nettle
+  ] ++ lib.optionals stdenv.isDarwin (with darwin.apple_sdk.frameworks; [ PCSC Security SystemConfiguration ]);
+
+  # Most tests rely on gnupg being able to write to /run/user
+  # gnupg refuses to respect the XDG_RUNTIME_DIR variable, so we skip the tests
+  doCheck = false;
+
+  passthru.updateScript = nix-update-script { };
+
+  meta = with lib; {
+    description = "Tool for managing OpenPGP keys within organizations";
+    homepage = "https://openpgp-ca.org/";
+    changelog = "https://openpgp-ca.org/doc/changelog/";
+    license = licenses.gpl3Plus;
+    maintainers = with maintainers; [ cherrykitten ];
+    mainProgram = "oca";
+  };
+}