2019-09-30 11:10:05 -04:00
|
|
|
%global nspr_version 4.20.0
|
|
|
|
|
%global nss_version 3.40.1
|
|
|
|
|
%global unsupported_tools_directory %{_libdir}/nss/unsupported-tools
|
|
|
|
|
%global allTools "certutil cmsutil crlutil derdump modutil pk12util signtool signver ssltap vfychain vfyserv"
|
|
|
|
|
|
|
|
|
|
%global dracutlibdir %{_prefix}/lib/dracut
|
|
|
|
|
%global dracut_modules_dir %{dracutlibdir}/modules.d/05nss-softokn/
|
|
|
|
|
%global dracut_conf_dir %{dracutlibdir}/dracut.conf.d
|
|
|
|
|
|
|
|
|
|
Summary: Network Security Services
|
|
|
|
|
Name: nss
|
|
|
|
|
Version: %{nss_version}
|
2019-12-31 22:44:09 +08:00
|
|
|
Release: 6
|
2019-09-30 11:10:05 -04:00
|
|
|
License: MPLv2.0
|
|
|
|
|
URL: http://www.mozilla.org/projects/security/pki/nss/
|
|
|
|
|
Provides: nss-system-init
|
|
|
|
|
Requires: nspr >= %{nspr_version} nss-util >= %{nss_version} nss-softokn%{_isa} >= %{nss_version}
|
|
|
|
|
Requires: p11-kit-trust crypto-policies nss-help
|
|
|
|
|
Requires(post): coreutils, sed
|
|
|
|
|
BuildRequires: nspr-devel >= %{nspr_version} nss-softokn sqlite-devel zlib-devel
|
|
|
|
|
BuildRequires: pkgconf gawk psmisc perl-interpreter gcc-c++
|
|
|
|
|
obsoletes: nss-sysinit
|
|
|
|
|
|
|
|
|
|
Source0: https://ftp.mozilla.org/pub/security/nss/releases/NSS_3_40_1_RTM/src/%{name}-%{nss_version}.tar.gz
|
|
|
|
|
Source1: nss-util.pc
|
|
|
|
|
Source2: nss-util-config
|
|
|
|
|
Source3: nss-softokn.pc
|
|
|
|
|
Source4: nss-softokn-config
|
|
|
|
|
Source5: nss-softokn-prelink.conf
|
|
|
|
|
Source6: nss-softokn-dracut-module-setup.sh
|
|
|
|
|
Source7: nss-softokn-dracut.conf
|
|
|
|
|
Source8: nss.pc
|
|
|
|
|
Source9: nss-config
|
|
|
|
|
Source10: blank-cert8.db
|
|
|
|
|
Source11: blank-key3.db
|
|
|
|
|
Source12: blank-secmod.db
|
|
|
|
|
Source13: blank-cert9.db
|
|
|
|
|
Source14: blank-key4.db
|
|
|
|
|
Source15: system-pkcs11.txt
|
|
|
|
|
Source16: setup-nsssysinit.sh
|
|
|
|
|
Source28: nss-p11-kit.config
|
|
|
|
|
Source29: PayPalICA.cert
|
|
|
|
|
Source30: PayPalEE.cert
|
|
|
|
|
|
|
|
|
|
Patch1: renegotiate-transitional.patch
|
|
|
|
|
# Upstream: https://bugzilla.mozilla.org/show_bug.cgi?id=617723
|
|
|
|
|
Patch2: nss-539183.patch
|
|
|
|
|
# This patch uses the GCC -iquote option documented at
|
|
|
|
|
# http://gcc.gnu.org/onlinedocs/gcc/Directory-Options.html#Directory-Options
|
|
|
|
|
# to give the in-tree headers a higher priority over the system headers,
|
|
|
|
|
# when they are included through the quote form (#include "file.h").
|
|
|
|
|
Patch3: iquote.patch
|
|
|
|
|
# rhbz: https://bugzilla.redhat.com/show_bug.cgi?id=1185708
|
|
|
|
|
Patch4: rhbz1185708-enable-ecc-3des-ciphers-by-default.patch
|
|
|
|
|
# Upstream: https://bugzilla.mozilla.org/show_bug.cgi?id=1505317
|
|
|
|
|
Patch5: nss-tests-paypal-certs-v2.patch
|
|
|
|
|
|
|
|
|
|
Patch9000: Bug-1412829-reject-empty-supported_signature_algorit.patch
|
|
|
|
|
Patch9001: Bug-1507135-Add-additional-null-checks-to-CMS-messag.patch
|
|
|
|
|
Patch9002: Bug-1507174-Add-additional-null-checks-to-other-CMS-.patch
|
|
|
|
|
|
|
|
|
|
%description
|
|
|
|
|
Network Security Services (NSS) is a set of libraries designed to
|
|
|
|
|
support cross-platform development of security-enabled client and
|
|
|
|
|
server applications. Applications built with NSS can support SSL v2
|
|
|
|
|
and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509
|
|
|
|
|
v3 certificates, and other security standards.
|
|
|
|
|
|
|
|
|
|
%package devel
|
|
|
|
|
Summary: Network Security Services development files
|
|
|
|
|
Provides: nss-static = %{version}-%{release}
|
|
|
|
|
Provides: nss-pkcs11-devel-static = %{version}-%{release}
|
2019-11-06 19:44:19 +08:00
|
|
|
Provides: nss-pkcs11-devel
|
2019-09-30 11:10:05 -04:00
|
|
|
Requires: nss%{?_isa} = %{version}-%{release}
|
|
|
|
|
Requires: nss-util-devel nss-softokn-devel nspr-devel >= %{nspr_version} pkgconf
|
|
|
|
|
Requires: nss-softokn-devel = %{version}-%{release}
|
|
|
|
|
BuildRequires: xmlto
|
|
|
|
|
obsoletes: nss-pkcs11-devel
|
|
|
|
|
|
|
|
|
|
%description devel
|
|
|
|
|
Header and Library files for doing development with Network Security Services.
|
|
|
|
|
|
|
|
|
|
%package util
|
|
|
|
|
Summary: Network Security Services Utilities Library
|
|
|
|
|
Requires: nspr >= %{nspr_version} nss-help
|
|
|
|
|
Requires: %{name}%{?_isa} = %{version}-%{release}
|
|
|
|
|
Provides: nss-tools = %{version}-%{release}
|
|
|
|
|
obsoletes: nss-tools
|
|
|
|
|
|
|
|
|
|
%description util
|
|
|
|
|
Utilities for Network Security Services and the Softoken module
|
|
|
|
|
manipulate the NSS certificate and key database.
|
|
|
|
|
|
|
|
|
|
%package util-devel
|
|
|
|
|
Summary: Development libraries for Network Security Services Utilities
|
|
|
|
|
Requires: nss-util%{?_isa} = %{version}-%{release}
|
|
|
|
|
Requires: nspr-devel >= %{nspr_version}
|
|
|
|
|
Requires: pkgconf
|
|
|
|
|
|
|
|
|
|
%description util-devel
|
|
|
|
|
Header and library files for doing development with Network Security Services.
|
|
|
|
|
|
|
|
|
|
%package softokn
|
|
|
|
|
Summary: Network Security Services Softoken and Freebl library Module
|
|
|
|
|
Requires: nspr >= %{nspr_version}
|
|
|
|
|
Requires: nss-util >= %{version}-%{release}
|
|
|
|
|
Provides: nss-softokn-freebl
|
|
|
|
|
Conflicts: prelink < 0.4.3
|
|
|
|
|
Conflicts: filesystem < 3
|
|
|
|
|
obsoletes: nss-softokn-freebl
|
|
|
|
|
|
|
|
|
|
%description softokn
|
|
|
|
|
Network Security Services Softoken and Freebl Cryptographic Module
|
|
|
|
|
|
|
|
|
|
%package softokn-devel
|
|
|
|
|
Summary: Header and Library files for doing development with the Freebl library for NSS
|
|
|
|
|
Provides: nss-softokn-freebl-static = %{version}-%{release}
|
|
|
|
|
Provides: nss-softokn-freebl-devel
|
|
|
|
|
Requires: nss-softokn%{?_isa} = %{version}-%{release}
|
|
|
|
|
Requires: nspr-devel >= %{nspr_version}
|
|
|
|
|
Requires: nss-util-devel >= %{version}-%{release}
|
|
|
|
|
Requires: pkgconf
|
|
|
|
|
BuildRequires: nspr-devel >= %{nspr_version}
|
|
|
|
|
obsoletes: nss-softokn-freebl-devel
|
|
|
|
|
|
|
|
|
|
%description softokn-devel
|
|
|
|
|
NSS Softoken Cryptographic Module and Freebl Library Development Tools
|
|
|
|
|
This package supports special needs of some PKCS #11 module developers and
|
|
|
|
|
is otherwise considered private to NSS. As such, the programming interfaces
|
|
|
|
|
may change and the usual NSS binary compatibility commitments do not apply.
|
|
|
|
|
Developers should rely only on the officially supported NSS public API.
|
|
|
|
|
|
|
|
|
|
%package help
|
|
|
|
|
Summary: help document for NSS
|
|
|
|
|
Requires: man-db
|
|
|
|
|
|
|
|
|
|
%description help
|
|
|
|
|
Help document for NSS
|
|
|
|
|
|
|
|
|
|
%prep
|
|
|
|
|
%setup -q -n %{name}-%{nss_version}
|
|
|
|
|
|
|
|
|
|
%patch1 -p0 -b .transitional
|
|
|
|
|
%patch2 -p0 -b .539183
|
|
|
|
|
%patch3 -p0 -b .iquote
|
|
|
|
|
%patch4 -p0 -b .1185708_3des
|
|
|
|
|
pushd nss
|
|
|
|
|
%patch5 -p1 -b .paypal-certs
|
|
|
|
|
%patch9000 -p1
|
|
|
|
|
%patch9001 -p1
|
|
|
|
|
%patch9002 -p1
|
|
|
|
|
cp %{SOURCE29} %{SOURCE30} tests/libpkix/certs
|
|
|
|
|
popd
|
|
|
|
|
|
|
|
|
|
%build
|
|
|
|
|
|
|
|
|
|
export NSS_FORCE_FIPS=1
|
|
|
|
|
# Enable compiler optimizations and disable debugging code
|
|
|
|
|
|
|
|
|
|
export BUILD_OPT=1
|
|
|
|
|
# Uncomment to disable optimizations
|
|
|
|
|
#RPM_OPT_FLAGS=`echo $RPM_OPT_FLAGS | sed -e 's/-O2/-O0/g'`
|
|
|
|
|
#export RPM_OPT_FLAGS
|
|
|
|
|
|
|
|
|
|
# Generate symbolic info for debuggers
|
|
|
|
|
export XCFLAGS=$RPM_OPT_FLAGS
|
|
|
|
|
export LDFLAGS=$RPM_LD_FLAGS
|
|
|
|
|
export DSO_LDOPTS=$RPM_LD_FLAGS
|
|
|
|
|
|
|
|
|
|
# Must export FREEBL_LOWHASH=1 for nsslowhash.h so that it gets
|
|
|
|
|
# copied to dist and the rpm install phase can find it
|
|
|
|
|
# This due of the upstream changes to fix
|
|
|
|
|
# https://bugzilla.mozilla.org/show_bug.cgi?id=717906
|
|
|
|
|
export FREEBL_LOWHASH=1
|
|
|
|
|
# uncomment if the iquote patch is activated
|
|
|
|
|
export IN_TREE_FREEBL_HEADERS_FIRST=1
|
|
|
|
|
|
|
|
|
|
export FREEBL_NO_DEPEND=1
|
|
|
|
|
|
|
|
|
|
export PKG_CONFIG_ALLOW_SYSTEM_LIBS=1
|
|
|
|
|
export PKG_CONFIG_ALLOW_SYSTEM_CFLAGS=1
|
|
|
|
|
|
|
|
|
|
export NSPR_INCLUDE_DIR=`/usr/bin/pkg-config --cflags-only-I nspr | sed 's/-I//'`
|
|
|
|
|
export NSPR_LIB_DIR=%{_libdir}
|
|
|
|
|
|
|
|
|
|
export NSS_USE_SYSTEM_SQLITE=1
|
|
|
|
|
export NSS_ALLOW_SSLKEYLOGFILE=1
|
|
|
|
|
|
|
|
|
|
%ifnarch noarch
|
|
|
|
|
%if 0%{__isa_bits} == 64
|
|
|
|
|
export USE_64=1
|
|
|
|
|
%endif
|
|
|
|
|
%endif
|
|
|
|
|
|
|
|
|
|
##### phase 2: build the rest of nss
|
|
|
|
|
make -C ./nss/coreconf
|
|
|
|
|
make -C ./nss/lib/dbm
|
|
|
|
|
|
|
|
|
|
# Set the policy file location
|
|
|
|
|
# if set NSS will always check for the policy file and load if it exists
|
|
|
|
|
export POLICY_FILE="nss.config"
|
|
|
|
|
# location of the policy file
|
|
|
|
|
export POLICY_PATH="/etc/crypto-policies/back-ends"
|
|
|
|
|
|
|
|
|
|
make -C ./nss
|
|
|
|
|
|
|
|
|
|
# build the man pages clean
|
|
|
|
|
pushd ./nss
|
|
|
|
|
make clean_docs build_docs
|
|
|
|
|
popd
|
|
|
|
|
|
|
|
|
|
# and copy them to the dist directory for %%install to find them
|
|
|
|
|
mkdir -p ./dist/docs/nroff
|
|
|
|
|
cp ./nss/doc/nroff/* ./dist/docs/nroff
|
|
|
|
|
|
|
|
|
|
# Set up our package files
|
|
|
|
|
mkdir -p ./dist/pkgconfig
|
|
|
|
|
for m in %{SOURCE1} %{SOURCE2} %{SOURCE3} %{SOURCE4} %{SOURCE8} %{SOURCE9} %{SOURCE16}; do
|
|
|
|
|
cp ${m} ./dist/pkgconfig
|
|
|
|
|
chmod 755 ./dist/pkgconfig/*
|
|
|
|
|
done
|
|
|
|
|
|
|
|
|
|
NSSUTIL_VMAJOR=`cat nss/lib/util/nssutil.h | grep "#define.*NSSUTIL_VMAJOR" | awk '{print $3}'`
|
|
|
|
|
NSSUTIL_VMINOR=`cat nss/lib/util/nssutil.h | grep "#define.*NSSUTIL_VMINOR" | awk '{print $3}'`
|
|
|
|
|
NSSUTIL_VPATCH=`cat nss/lib/util/nssutil.h | grep "#define.*NSSUTIL_VPATCH" | awk '{print $3}'`
|
|
|
|
|
|
|
|
|
|
SOFTOKEN_VMAJOR=`cat nss/lib/softoken/softkver.h | grep "#define.*SOFTOKEN_VMAJOR" | awk '{print $3}'`
|
|
|
|
|
SOFTOKEN_VMINOR=`cat nss/lib/softoken/softkver.h | grep "#define.*SOFTOKEN_VMINOR" | awk '{print $3}'`
|
|
|
|
|
SOFTOKEN_VPATCH=`cat nss/lib/softoken/softkver.h | grep "#define.*SOFTOKEN_VPATCH" | awk '{print $3}'`
|
|
|
|
|
|
|
|
|
|
NSS_VMAJOR=`cat nss/lib/nss/nss.h | grep "#define.*NSS_VMAJOR" | awk '{print $3}'`
|
|
|
|
|
NSS_VMINOR=`cat nss/lib/nss/nss.h | grep "#define.*NSS_VMINOR" | awk '{print $3}'`
|
|
|
|
|
NSS_VPATCH=`cat nss/lib/nss/nss.h | grep "#define.*NSS_VPATCH" | awk '{print $3}'`
|
|
|
|
|
|
|
|
|
|
cp ./nss/lib/ckfw/nssck.api ./dist/private/nss/
|
|
|
|
|
|
|
|
|
|
date +"%e %B %Y" | tr -d '\n' > date.xml
|
|
|
|
|
echo -n %{version} > version.xml
|
|
|
|
|
|
|
|
|
|
%check
|
|
|
|
|
export FREEBL_NO_DEPEND=1
|
|
|
|
|
|
|
|
|
|
export BUILD_OPT=1
|
|
|
|
|
|
|
|
|
|
%ifnarch noarch
|
|
|
|
|
%if 0%{__isa_bits} == 64
|
|
|
|
|
export USE_64=1
|
|
|
|
|
%endif
|
|
|
|
|
%endif
|
|
|
|
|
|
|
|
|
|
export NSS_IGNORE_SYSTEM_POLICY=1
|
|
|
|
|
|
|
|
|
|
# Run test suite.
|
|
|
|
|
SPACEISBAD=`find ./nss/tests | grep -c ' '` ||:
|
|
|
|
|
if [ $SPACEISBAD -ne 0 ]; then
|
|
|
|
|
echo "error: filenames containing space are not supported (xargs)"
|
|
|
|
|
exit 1
|
|
|
|
|
fi
|
|
|
|
|
MYRAND=`perl -e 'print 9000 + int rand 1000'`; echo $MYRAND ||:
|
|
|
|
|
RANDSERV=selfserv_${MYRAND}; echo $RANDSERV ||:
|
|
|
|
|
DISTBINDIR=`ls -d ./dist/*.OBJ/bin`; echo $DISTBINDIR ||:
|
|
|
|
|
pushd `pwd`
|
|
|
|
|
cd $DISTBINDIR
|
|
|
|
|
ln -s selfserv $RANDSERV
|
|
|
|
|
popd
|
|
|
|
|
# man perlrun, man perlrequick
|
|
|
|
|
# replace word-occurrences of selfserv with selfserv_$MYRAND
|
|
|
|
|
find ./nss/tests -type f |\
|
|
|
|
|
grep -v "\.db$" |grep -v "\.crl$" | grep -v "\.crt$" |\
|
|
|
|
|
grep -vw CVS |xargs grep -lw selfserv |\
|
|
|
|
|
xargs -l perl -pi -e "s/\bselfserv\b/$RANDSERV/g" ||:
|
|
|
|
|
|
|
|
|
|
killall $RANDSERV || :
|
|
|
|
|
|
|
|
|
|
rm -rf ./tests_results
|
|
|
|
|
pushd ./nss/tests/
|
|
|
|
|
|
|
|
|
|
# the full list from all.sh is:
|
|
|
|
|
%define nss_tests "libpkix cert dbtests tools fips sdr crmf smime ssl ocsp merge pkits chains ec gtests ssl_gtests"
|
|
|
|
|
# nss_ssl_tests: crl bypass_normal normal_bypass normal_fips fips_normal iopr policy
|
|
|
|
|
# nss_ssl_run: cov auth stapling stress
|
|
|
|
|
#
|
|
|
|
|
# disable some test suites for faster test builds
|
|
|
|
|
# % define nss_ssl_tests "normal_fips"
|
|
|
|
|
# % define nss_ssl_run "cov"
|
|
|
|
|
|
|
|
|
|
HOST=localhost DOMSUF=localdomain PORT=$MYRAND NSS_CYCLES=%{?nss_cycles} NSS_TESTS=%{?nss_tests} NSS_SSL_TESTS=%{?nss_ssl_tests} NSS_SSL_RUN=%{?nss_ssl_run} ./all.sh
|
|
|
|
|
|
|
|
|
|
popd
|
|
|
|
|
|
|
|
|
|
killall $RANDSERV || :
|
|
|
|
|
|
|
|
|
|
TEST_FAILURES=$(grep -c -- '- FAILED$' ./tests_results/security/localhost.1/output.log) || GREP_EXIT_STATUS=$?
|
|
|
|
|
|
|
|
|
|
if [ ${GREP_EXIT_STATUS:-0} -eq 1 ]; then
|
|
|
|
|
echo "okay: test suite detected no failures"
|
|
|
|
|
else
|
|
|
|
|
if [ ${GREP_EXIT_STATUS:-0} -eq 0 ]; then
|
|
|
|
|
# while a situation in which grep return status is 0 and it doesn't output
|
|
|
|
|
# anything shouldn't happen, set the default to something that is
|
|
|
|
|
# obviously wrong (-1)
|
|
|
|
|
echo "error: test suite had ${TEST_FAILURES:--1} test failure(s)"
|
|
|
|
|
exit 1
|
|
|
|
|
else
|
|
|
|
|
if [ ${GREP_EXIT_STATUS:-0} -eq 2 ]; then
|
|
|
|
|
echo "error: grep has not found log file"
|
|
|
|
|
exit 1
|
|
|
|
|
else
|
|
|
|
|
echo "error: grep failed with exit code: ${GREP_EXIT_STATUS}"
|
|
|
|
|
exit 1
|
|
|
|
|
fi
|
|
|
|
|
fi
|
|
|
|
|
fi
|
|
|
|
|
echo "test suite completed"
|
|
|
|
|
|
|
|
|
|
%install
|
|
|
|
|
|
|
|
|
|
mkdir -p $RPM_BUILD_ROOT/%{_includedir}/nss3/templates
|
|
|
|
|
mkdir -p $RPM_BUILD_ROOT/%{_bindir}
|
|
|
|
|
mkdir -p $RPM_BUILD_ROOT/%{unsupported_tools_directory}
|
|
|
|
|
mkdir -p $RPM_BUILD_ROOT/%{_libdir}/pkgconfig
|
|
|
|
|
mkdir -p $RPM_BUILD_ROOT/%{_libdir}/nss/saved
|
|
|
|
|
mkdir -p $RPM_BUILD_ROOT/%{_sysconfdir}/prelink.conf.d/
|
|
|
|
|
mkdir -p $RPM_BUILD_ROOT/%{dracut_modules_dir}
|
|
|
|
|
mkdir -p $RPM_BUILD_ROOT/%{dracut_conf_dir}
|
|
|
|
|
mkdir -p $RPM_BUILD_ROOT/%{_sysconfdir}/crypto-policies/local.d
|
|
|
|
|
mkdir -p $RPM_BUILD_ROOT%{_mandir}/man1
|
|
|
|
|
mkdir -p $RPM_BUILD_ROOT%{_mandir}/man5
|
|
|
|
|
mkdir -p $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb
|
|
|
|
|
|
|
|
|
|
install -m 644 %{SOURCE5} $RPM_BUILD_ROOT/%{_sysconfdir}/prelink.conf.d/
|
|
|
|
|
install -m 755 %{SOURCE6} $RPM_BUILD_ROOT/%{dracut_modules_dir}/module-setup.sh
|
|
|
|
|
install -m 644 %{SOURCE7} $RPM_BUILD_ROOT/%{dracut_conf_dir}/50-nss-softokn.conf
|
|
|
|
|
# Install the empty NSS db files
|
|
|
|
|
# Legacy db
|
|
|
|
|
install -p -m 644 %{SOURCE10} $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb/cert8.db
|
|
|
|
|
install -p -m 644 %{SOURCE11} $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb/key3.db
|
|
|
|
|
install -p -m 644 %{SOURCE12} $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb/secmod.db
|
|
|
|
|
# Shared db
|
|
|
|
|
install -p -m 644 %{SOURCE13} $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb/cert9.db
|
|
|
|
|
install -p -m 644 %{SOURCE14} $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb/key4.db
|
|
|
|
|
install -p -m 644 %{SOURCE15} $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb/pkcs11.txt
|
|
|
|
|
|
|
|
|
|
# Copy the binary libraries we want
|
|
|
|
|
for file in libnssutil3.so libsoftokn3.so libnssdbm3.so libfreebl3.so libfreeblpriv3.so libnss3.so libnsssysinit.so libsmime3.so libssl3.so
|
|
|
|
|
do
|
|
|
|
|
install -p -m 755 dist/*.OBJ/lib/$file $RPM_BUILD_ROOT/%{_libdir}
|
|
|
|
|
done
|
|
|
|
|
|
|
|
|
|
# Copy the development libraries we want
|
|
|
|
|
for file in libcrmf.a libnssb.a libnssckfw.a libfreebl.a
|
|
|
|
|
do
|
|
|
|
|
install -p -m 644 dist/*.OBJ/lib/$file $RPM_BUILD_ROOT/%{_libdir}
|
|
|
|
|
done
|
|
|
|
|
|
|
|
|
|
# Copy the binaries we want
|
|
|
|
|
for file in certutil cmsutil crlutil modutil nss-policy-check pk12util signver ssltap
|
|
|
|
|
do
|
|
|
|
|
install -p -m 755 dist/*.OBJ/bin/$file $RPM_BUILD_ROOT/%{_bindir}
|
|
|
|
|
done
|
|
|
|
|
|
|
|
|
|
# Copy the binaries we ship as unsupported
|
|
|
|
|
for file in bltest ecperf fbectest fipstest shlibsign atob btoa derdump listsuites ocspclnt pp selfserv signtool strsclnt symkeyutil tstclnt vfyserv vfychain
|
|
|
|
|
do
|
|
|
|
|
install -p -m 755 dist/*.OBJ/bin/$file $RPM_BUILD_ROOT/%{unsupported_tools_directory}
|
|
|
|
|
done
|
|
|
|
|
|
|
|
|
|
# Copy the include files we want
|
|
|
|
|
for file in dist/public/nss/*.h
|
|
|
|
|
do
|
|
|
|
|
install -p -m 644 $file $RPM_BUILD_ROOT/%{_includedir}/nss3
|
|
|
|
|
done
|
|
|
|
|
|
|
|
|
|
# Copy some freebl include files we also want
|
|
|
|
|
for file in blapi.h alghmac.h
|
|
|
|
|
do
|
|
|
|
|
install -p -m 644 dist/private/nss/$file $RPM_BUILD_ROOT/%{_includedir}/nss3
|
|
|
|
|
done
|
|
|
|
|
|
|
|
|
|
# Copy the template files we want
|
|
|
|
|
for file in dist/private/nss/templates.c dist/private/nss/nssck.api
|
|
|
|
|
do
|
|
|
|
|
install -p -m 644 $file $RPM_BUILD_ROOT/%{_includedir}/nss3/templates
|
|
|
|
|
done
|
|
|
|
|
|
|
|
|
|
# Copy the package configuration files
|
|
|
|
|
install -p -m 644 ./dist/pkgconfig/nss-util.pc $RPM_BUILD_ROOT/%{_libdir}/pkgconfig/nss-util.pc
|
|
|
|
|
install -p -m 755 ./dist/pkgconfig/nss-util-config $RPM_BUILD_ROOT/%{_bindir}/nss-util-config
|
|
|
|
|
install -p -m 644 ./dist/pkgconfig/nss-softokn.pc $RPM_BUILD_ROOT/%{_libdir}/pkgconfig/nss-softokn.pc
|
|
|
|
|
install -p -m 755 ./dist/pkgconfig/nss-softokn-config $RPM_BUILD_ROOT/%{_bindir}/nss-softokn-config
|
|
|
|
|
install -p -m 644 ./dist/pkgconfig/nss.pc $RPM_BUILD_ROOT/%{_libdir}/pkgconfig/nss.pc
|
|
|
|
|
install -p -m 755 ./dist/pkgconfig/nss-config $RPM_BUILD_ROOT/%{_bindir}/nss-config
|
|
|
|
|
# Copy the pkcs #11 configuration script
|
|
|
|
|
install -p -m 755 ./dist/pkgconfig/setup-nsssysinit.sh $RPM_BUILD_ROOT/%{_bindir}/setup-nsssysinit.sh
|
|
|
|
|
# install a symbolic link to it, without the ".sh" suffix,
|
|
|
|
|
ln -r -s -f $RPM_BUILD_ROOT/%{_bindir}/setup-nsssysinit.sh $RPM_BUILD_ROOT/%{_bindir}/setup-nsssysinit
|
|
|
|
|
|
|
|
|
|
# Copy the man pages for scripts
|
|
|
|
|
for f in nss-config setup-nsssysinit; do
|
|
|
|
|
install -c -m 644 ${f}.1 $RPM_BUILD_ROOT%{_mandir}/man1/${f}.1
|
|
|
|
|
done
|
|
|
|
|
# Copy the man pages for the nss tools
|
|
|
|
|
for f in "%{allTools}"; do
|
|
|
|
|
install -c -m 644 ./dist/docs/nroff/${f}.1 $RPM_BUILD_ROOT%{_mandir}/man1/${f}.1
|
|
|
|
|
done
|
|
|
|
|
install -c -m 644 ./dist/docs/nroff/pp.1 $RPM_BUILD_ROOT%{_mandir}/man1/pp.1
|
|
|
|
|
|
|
|
|
|
# Copy the man pages for the configuration files
|
|
|
|
|
for f in pkcs11.txt; do
|
|
|
|
|
install -c -m 644 ${f}.5 $RPM_BUILD_ROOT%{_mandir}/man5/${f}.5
|
|
|
|
|
done
|
|
|
|
|
# Copy the man pages for the nss databases
|
|
|
|
|
for f in cert8.db cert9.db key3.db key4.db secmod.db; do
|
|
|
|
|
install -c -m 644 ${f}.5 $RPM_BUILD_ROOT%{_mandir}/man5/${f}.5
|
|
|
|
|
done
|
|
|
|
|
|
|
|
|
|
# Copy the crypto-policies configuration file
|
|
|
|
|
install -p -m 644 %{SOURCE28} $RPM_BUILD_ROOT/%{_sysconfdir}/crypto-policies/local.d
|
|
|
|
|
|
|
|
|
|
/usr/bin/setup-nsssysinit.sh on
|
|
|
|
|
$RPM_BUILD_ROOT/%{unsupported_tools_directory}/shlibsign -i $RPM_BUILD_ROOT/%{_libdir}/libsoftokn3.so
|
|
|
|
|
$RPM_BUILD_ROOT/%{unsupported_tools_directory}/shlibsign -i $RPM_BUILD_ROOT/%{_libdir}/libfreeblpriv3.so
|
|
|
|
|
$RPM_BUILD_ROOT/%{unsupported_tools_directory}/shlibsign -i $RPM_BUILD_ROOT/%{_libdir}/libfreebl3.so
|
|
|
|
|
$RPM_BUILD_ROOT/%{unsupported_tools_directory}/shlibsign -i $RPM_BUILD_ROOT/%{_libdir}/libnssdbm3.so
|
|
|
|
|
|
|
|
|
|
%post
|
|
|
|
|
update-crypto-policies
|
|
|
|
|
|
|
|
|
|
%postun
|
|
|
|
|
update-crypto-policies
|
|
|
|
|
|
|
|
|
|
%files
|
|
|
|
|
%{!?_licensedir:%global license %%doc}
|
|
|
|
|
%license nss/COPYING
|
|
|
|
|
%{_libdir}/libnss3.so
|
|
|
|
|
%{_libdir}/libssl3.so
|
|
|
|
|
%{_libdir}/libsmime3.so
|
|
|
|
|
%dir %{_sysconfdir}/pki/nssdb
|
|
|
|
|
%config(noreplace) %verify(not md5 size mtime) %{_sysconfdir}/pki/nssdb/*
|
|
|
|
|
%config(noreplace) %verify(not md5 size mtime) %{_sysconfdir}/crypto-policies/local.d/nss-p11-kit.config
|
|
|
|
|
%{_libdir}/libnsssysinit.so
|
|
|
|
|
%{_bindir}/setup-nsssysinit.sh
|
|
|
|
|
# symbolic link to setup-nsssysinit.sh
|
|
|
|
|
%{_bindir}/setup-nsssysinit
|
|
|
|
|
|
|
|
|
|
%files devel
|
|
|
|
|
%{_libdir}/libcrmf.a
|
|
|
|
|
%{_libdir}/pkgconfig/nss.pc
|
|
|
|
|
%{_bindir}/nss-config
|
|
|
|
|
%{_libdir}/libnssb.a
|
|
|
|
|
%{_libdir}/libnssckfw.a
|
|
|
|
|
|
|
|
|
|
%dir %{_includedir}/nss3
|
|
|
|
|
%{_includedir}/nss3/cert*.h
|
|
|
|
|
%{_includedir}/nss3/cm*.h
|
|
|
|
|
%{_includedir}/nss3/cr*.h
|
|
|
|
|
%{_includedir}/nss3/sechash.h
|
|
|
|
|
%{_includedir}/nss3/jar-ds.h
|
|
|
|
|
%{_includedir}/nss3/jar.h
|
|
|
|
|
%{_includedir}/nss3/jarfile.h
|
|
|
|
|
%{_includedir}/nss3/key*.h
|
|
|
|
|
%{_includedir}/nss3/nss.h
|
|
|
|
|
%{_includedir}/nss3/ocsp.h
|
|
|
|
|
%{_includedir}/nss3/ocspt.h
|
|
|
|
|
%{_includedir}/nss3/p12.h
|
|
|
|
|
%{_includedir}/nss3/p12plcy.h
|
|
|
|
|
%{_includedir}/nss3/p12t.h
|
|
|
|
|
%{_includedir}/nss3/pk11*.h
|
|
|
|
|
%{_includedir}/nss3/pkcs12.h
|
|
|
|
|
%{_includedir}/nss3/pkcs12t.h
|
|
|
|
|
%{_includedir}/nss3/pkcs7t.h
|
|
|
|
|
%{_includedir}/nss3/preenc.h
|
|
|
|
|
%{_includedir}/nss3/secmime.h
|
|
|
|
|
%{_includedir}/nss3/secmod.h
|
|
|
|
|
%{_includedir}/nss3/secmodt.h
|
|
|
|
|
%{_includedir}/nss3/secpkcs5.h
|
|
|
|
|
%{_includedir}/nss3/secpkcs7.h
|
|
|
|
|
%{_includedir}/nss3/smime.h
|
|
|
|
|
%{_includedir}/nss3/ssl*.h
|
|
|
|
|
%{_includedir}/nss3/nssbase.h
|
|
|
|
|
%{_includedir}/nss3/nssbaset.h
|
|
|
|
|
%{_includedir}/nss3/nssck*.h
|
|
|
|
|
%{_includedir}/nss3/templates/nssck.api
|
|
|
|
|
|
|
|
|
|
%files util
|
|
|
|
|
%{!?_licensedir:%global license %%doc}
|
|
|
|
|
%license nss/COPYING
|
|
|
|
|
%{_libdir}/libnssutil3.so
|
|
|
|
|
%{_bindir}/certutil
|
|
|
|
|
%{_bindir}/cmsutil
|
|
|
|
|
%{_bindir}/crlutil
|
|
|
|
|
%{_bindir}/modutil
|
|
|
|
|
%{_bindir}/nss-policy-check
|
|
|
|
|
%{_bindir}/pk12util
|
|
|
|
|
%{_bindir}/signver
|
|
|
|
|
%{_bindir}/ssltap
|
|
|
|
|
%{unsupported_tools_directory}/atob
|
|
|
|
|
%{unsupported_tools_directory}/btoa
|
|
|
|
|
%{unsupported_tools_directory}/derdump
|
|
|
|
|
%{unsupported_tools_directory}/listsuites
|
|
|
|
|
%{unsupported_tools_directory}/ocspclnt
|
|
|
|
|
%{unsupported_tools_directory}/pp
|
|
|
|
|
%{unsupported_tools_directory}/selfserv
|
|
|
|
|
%{unsupported_tools_directory}/signtool
|
|
|
|
|
%{unsupported_tools_directory}/strsclnt
|
|
|
|
|
%{unsupported_tools_directory}/symkeyutil
|
|
|
|
|
%{unsupported_tools_directory}/tstclnt
|
|
|
|
|
%{unsupported_tools_directory}/vfyserv
|
|
|
|
|
%{unsupported_tools_directory}/vfychain
|
|
|
|
|
|
|
|
|
|
%files util-devel
|
|
|
|
|
%{_libdir}/pkgconfig/nss-util.pc
|
|
|
|
|
%{_bindir}/nss-util-config
|
|
|
|
|
|
|
|
|
|
# co-owned with nss
|
|
|
|
|
%dir %{_includedir}/nss3
|
|
|
|
|
# these are marked as public export in nss/lib/util/manifest.mk
|
|
|
|
|
%{_includedir}/nss3/base64.h
|
|
|
|
|
%{_includedir}/nss3/ciferfam.h
|
|
|
|
|
%{_includedir}/nss3/eccutil.h
|
|
|
|
|
%{_includedir}/nss3/hasht.h
|
|
|
|
|
%{_includedir}/nss3/nssb64.h
|
|
|
|
|
%{_includedir}/nss3/nssb64t.h
|
|
|
|
|
%{_includedir}/nss3/nsslocks.h
|
|
|
|
|
%{_includedir}/nss3/nssilock.h
|
|
|
|
|
%{_includedir}/nss3/nssilckt.h
|
|
|
|
|
%{_includedir}/nss3/nssrwlk.h
|
|
|
|
|
%{_includedir}/nss3/nssrwlkt.h
|
|
|
|
|
%{_includedir}/nss3/nssutil.h
|
|
|
|
|
%{_includedir}/nss3/pkcs1sig.h
|
|
|
|
|
%{_includedir}/nss3/pkcs11*.h
|
|
|
|
|
%{_includedir}/nss3/portreg.h
|
|
|
|
|
%{_includedir}/nss3/secasn1.h
|
|
|
|
|
%{_includedir}/nss3/secasn1t.h
|
|
|
|
|
%{_includedir}/nss3/seccomon.h
|
|
|
|
|
%{_includedir}/nss3/secder.h
|
|
|
|
|
%{_includedir}/nss3/secdert.h
|
|
|
|
|
%{_includedir}/nss3/secdig.h
|
|
|
|
|
%{_includedir}/nss3/secdigt.h
|
|
|
|
|
%{_includedir}/nss3/secerr.h
|
|
|
|
|
%{_includedir}/nss3/secitem.h
|
|
|
|
|
%{_includedir}/nss3/secoid.h
|
|
|
|
|
%{_includedir}/nss3/secoidt.h
|
|
|
|
|
%{_includedir}/nss3/secport.h
|
|
|
|
|
%{_includedir}/nss3/util*.h
|
|
|
|
|
%{_includedir}/nss3/templates/templates.c
|
|
|
|
|
|
|
|
|
|
%files softokn
|
|
|
|
|
%{!?_licensedir:%global license %%doc}
|
|
|
|
|
%license nss/COPYING
|
|
|
|
|
%{_libdir}/libfreebl3.so
|
|
|
|
|
%{_libdir}/libfreebl3.chk
|
|
|
|
|
%{_libdir}/libfreeblpriv3.so
|
|
|
|
|
%{_libdir}/libfreeblpriv3.chk
|
|
|
|
|
%dir %{_sysconfdir}/prelink.conf.d/
|
|
|
|
|
%{_sysconfdir}/prelink.conf.d/nss-softokn-prelink.conf
|
|
|
|
|
%dir %{dracut_modules_dir}
|
|
|
|
|
%{dracut_modules_dir}/module-setup.sh
|
|
|
|
|
%{dracut_conf_dir}/50-nss-softokn.conf
|
|
|
|
|
%{_libdir}/libnssdbm3.so
|
|
|
|
|
%{_libdir}/libnssdbm3.chk
|
|
|
|
|
%{_libdir}/libsoftokn3.so
|
|
|
|
|
%{_libdir}/libsoftokn3.chk
|
|
|
|
|
%dir %{_libdir}/nss
|
|
|
|
|
%dir %{_libdir}/nss/saved
|
|
|
|
|
%dir %{unsupported_tools_directory}
|
|
|
|
|
%{unsupported_tools_directory}/bltest
|
|
|
|
|
%{unsupported_tools_directory}/ecperf
|
|
|
|
|
%{unsupported_tools_directory}/fbectest
|
|
|
|
|
%{unsupported_tools_directory}/fipstest
|
|
|
|
|
%{unsupported_tools_directory}/shlibsign
|
|
|
|
|
|
|
|
|
|
%files softokn-devel
|
|
|
|
|
%{_libdir}/libfreebl.a
|
|
|
|
|
%{_includedir}/nss3/blapi.h
|
|
|
|
|
%{_includedir}/nss3/blapit.h
|
|
|
|
|
%{_includedir}/nss3/alghmac.h
|
|
|
|
|
%{_includedir}/nss3/lowkeyi.h
|
|
|
|
|
%{_includedir}/nss3/lowkeyti.h
|
|
|
|
|
%{_libdir}/pkgconfig/nss-softokn.pc
|
|
|
|
|
%{_bindir}/nss-softokn-config
|
|
|
|
|
# co-owned with nss
|
|
|
|
|
%dir %{_includedir}/nss3
|
|
|
|
|
%{_includedir}/nss3/ecl-exp.h
|
|
|
|
|
%{_includedir}/nss3/nsslowhash.h
|
|
|
|
|
%{_includedir}/nss3/shsign.h
|
|
|
|
|
|
|
|
|
|
%files help
|
2019-12-31 22:44:09 +08:00
|
|
|
%doc %{_mandir}/man*
|
2019-09-30 11:10:05 -04:00
|
|
|
|
|
|
|
|
%changelog
|
2019-12-31 22:44:09 +08:00
|
|
|
* Tue Dec 31 2019 openEuler Buildteam <buildteam@openeuler.org> - 3.40.1-6
|
|
|
|
|
- delete unused man
|
|
|
|
|
|
2019-11-06 19:44:19 +08:00
|
|
|
* Mon Oct 14 2019 openEuler Buildteam <buildteam@openeuler.org> - 3.40.1-5
|
|
|
|
|
- add provide nss-pkcs11-devel
|
|
|
|
|
|
2019-09-30 11:10:05 -04:00
|
|
|
* Tue Sep 24 2019 openEuler Buildteam <buildteam@openeuler.org> - 3.40.1-4
|
|
|
|
|
- update requires for help
|
|
|
|
|
|
|
|
|
|
* Mon Sep 23 2019 openEuler Buildteam <buildteam@openeuler.org> - 3.40.1-3
|
|
|
|
|
- Rebuild
|
|
|
|
|
|
|
|
|
|
* Wed Sep 20 2019 openEuler Buildteam <buildteam@openeuler.org> - 3.40.1-2
|
|
|
|
|
- Package init
|