tls_certificate_check

{erl_opts, [
    debug_info,
    warn_export_all,
    warn_export_vars,
    warn_missing_spec,
    warn_obsolete_guards,
    warn_shadow_vars,
    warn_unused_import,
    warnings_as_errors,
    {platform_define, "^23\.[1-3]", 'HARDCODED_AUTHORITIES_UPDATER_SUPPORTED'},
    {platform_define, "^2[4-9]",    'HARDCODED_AUTHORITIES_UPDATER_SUPPORTED'},
    {platform_define, "^[3-9]",     'HARDCODED_AUTHORITIES_UPDATER_SUPPORTED'},
    {platform_define, "^22\.",            'EXPIRED_CAs_ARE_CONSIDERED_VALID'},
    {platform_define, "^23\.[0-2][^0-9]", 'EXPIRED_CAs_ARE_CONSIDERED_VALID'},
    {platform_define, "^22\.",            'FLAKY_CROSS_SIGNING_VALIDATION'},
    {platform_define, "^23\.[0-1][^0-9]", 'FLAKY_CROSS_SIGNING_VALIDATION'},
    {platform_define, "^2[2-4]\.",        'NO_PUBLIC_KEY_CACERTS_GET'},

    {platform_define, "^22\.",        'MISMATCHED_SNI_FAILS_HANDSHAKE'},
    {platform_define, "^2[3-6]\.",    'MISMATCHED_SNI_CLOSES_CONN'},
    {platform_define, "^27\.[0-2]\.", 'MISMATCHED_SNI_CLOSES_CONN'}
]}.

{minimum_otp_vsn, "22.0"}. % but only 24+ is supported

{deps, [
    {ssl_verify_fun, "~> 1.1"}
]}.

{shell, [
    {apps, [tls_certificate_check]},
    {config, "shell.config"}
]}.

{dialyzer, [
    {plt_include_all_deps, true},
    {warnings, [
        unmatched_returns,
        error_handling,
        underspecs,
        unknown
    ]},
    {plt_extra_apps, [changelog_updater]}
]}.

{xref_checks, [
    undefined_function_calls,
    undefined_functions,
    locals_not_used,
    exports_not_used,
    deprecated_function_calls,
    deprecated_functions
]}.

{project_plugins, [
    {rebar3_hex, "~> 7.1"}
]}.

{profiles, [
    {development, [
        {deps, [{recon, "~> 2.5"}]},
        {erl_opts, [
            nowarn_missing_spec,
            nowarnings_as_errors
        ]}
    ]},

    {test, [
        {erl_opts, [
            debug_info,
            nowarn_export_all,
            nowarn_missing_spec,
            nowarnings_as_errors
        ]},
        {deps, [
            {certifi, "~> 2.10"},
            {meck, "~> 1.0"}
        ]},
        {cover_enabled, true},
        {cover_opts, [verbose]},
        {eunit_tests, [
            % Prevent eunit from failing because it detects additional modules
            % under `test/tls_certificate_check_dependent_app_SUITE_data' and
            % tries running tests in them.
            {application, tls_certificate_check}
        ]}
    ]},

    {elixir_test, [
        {deps, [{castore, "0.1.20"}]},
        {plugins, [{rebar_mix, "0.5.1"}]},
        {provider_hooks, [{post, [{compile, {mix, consolidate_protocols}}]}]}
    ]},

    {hardcoded_authorities_update, [
        {erl_opts, [
            {src_dirs, ["src", "util"]}
        ]},
        {deps, [
            {changelog_updater, {git, "https://github.com/g-andrade/changelog_updater.git", {ref, "07b13ce"}}} % FIXME
        ]},
        {escript_incl_apps, [tls_certificate_check, changelog_updater]},
        {escript_name, "tls_certificate_check_hardcoded_authorities_updater"},
        {escript_emu_args, "%%! -noinput\n"}
    ]}
]}.

{hex, [
    {doc, #{
        provider => ex_doc
    }}
]}.

%% == Docs ==

% Necessary for ExDoc.

{edoc_opts, [
  {doclet, edoc_doclet_chunks},
  {layout, edoc_layout_chunks},
  {dir, "_build/docs/lib/tls_certificate_check/doc"}
]}.