# Copyright 2025 Collabora Ltd.
# SPDX-License-Identifier: MIT

ALL = \
	steamrt-archive-keyring.gpg \
	$(NULL)

GPG = gpg --batch
export GNUPGHOME = $(CURDIR)/tmp/gpghome
export XDG_RUNTIME_DIR = $(CURDIR)/tmp/xrd

all: $(ALL)

CERTIFICATES =
TRUSTED_FINGERPRINTS =

# 2013 rsa2048 Valve SteamOS Release Key
CERTIFICATES += 8abddd96-steamos-release-key.gpg
TRUSTED_FINGERPRINTS += 48FD43308E37C3A418B92A157DEEB7438ABDDD96

# 2013 rsa2048 Valve builder achive signing key [sic]
CERTIFICATES += d0bbf5ae-builder.gpg
TRUSTED_FINGERPRINTS += 694F2C330F0351C334594A099E46D8DCD0BBF5AE

# 2025 rsa4096 Valve Steam Runtime repository signing key (2025)
CERTIFICATES += c948c57e-steam-runtime-2025.gpg
TRUSTED_FINGERPRINTS += 93CF361A9F43CAF9823C72CB25A6D1CCC948C57E

steamrt-archive-keyring.gpg:
	rm -f $@
	rm -fr tmp
	install -d -m700 tmp tmp/gpghome tmp/xrd
	$(GPG) --import $(CERTIFICATES)
	$(GPG) --export --export-options export-minimal $(TRUSTED_FINGERPRINTS) > $@.tmp
	mv $@.tmp $@

install: all
	install -d -m755 $(DESTDIR)/usr/share/keyrings
	install -m644 -t $(DESTDIR)/usr/share/keyrings $(ALL)

clean:
	rm -fr tmp

maintainer-clean: clean
	rm -f $(ALL)

.NOTPARALLEL:
.PHONY: all
.PHONY: clean
.PHONY: install
.PHONY: maintainer-clean
