163 lines
5.6 KiB
RPMSpec
163 lines
5.6 KiB
RPMSpec
################################################################################
|
|
Name: dogtag-pki
|
|
################################################################################
|
|
|
|
Summary: Dogtag PKI Package
|
|
URL: http://www.dogtagpki.org/
|
|
# The entire source code is GPLv2 except for 'pki-tps' which is LGPLv2
|
|
License: GPLv2 and LGPLv2
|
|
BuildArch: noarch
|
|
|
|
%if 0%{?fedora} >= 27 || 0%{?rhel} > 7
|
|
# Exclude 'aarch64' and 's390x' architectures since
|
|
# 'esc' does not exist on these two platforms
|
|
ExcludeArch: aarch64 s390x
|
|
%endif
|
|
|
|
%if 0%{?rhel}
|
|
Version: 10.6.2
|
|
Release: 1%{?_timestamp}%{?_commit_id}%{?dist}
|
|
%else
|
|
Version: 10.6.2
|
|
Release: 1%{?_timestamp}%{?_commit_id}%{?dist}
|
|
%endif
|
|
|
|
################################################################################
|
|
# Python
|
|
################################################################################
|
|
|
|
%if 0%{?rhel} && 0%{?rhel} <= 7
|
|
%global with_python3 0
|
|
%else
|
|
%global with_python3 1
|
|
%endif
|
|
|
|
# Make certain that this 'meta' package requires the latest version(s)
|
|
# of ALL PKI theme packages
|
|
Requires: dogtag-pki-server-theme >= %{version}
|
|
Requires: dogtag-pki-console-theme >= %{version}
|
|
|
|
# Make certain that this 'meta' package requires the latest version(s)
|
|
# of ALL PKI core packages
|
|
Requires: pki-base >= %{version}
|
|
Requires: pki-base-java >= %{version}
|
|
%if 0%{?with_python3}
|
|
Requires: pki-base-python3 >= %{version}
|
|
%endif
|
|
Requires: pki-tools >= %{version}
|
|
Requires: pki-server >= %{version}
|
|
Requires: pki-ca >= %{version}
|
|
Requires: pki-kra >= %{version}
|
|
Requires: pki-ocsp >= %{version}
|
|
Requires: pki-tks >= %{version}
|
|
Requires: pki-tps >= %{version}
|
|
|
|
# Make certain that this 'meta' package requires the latest version(s)
|
|
# of PKI console
|
|
Requires: pki-console >= %{version}
|
|
|
|
# Make certain that this 'meta' package requires the latest version(s)
|
|
# of ALL PKI clients
|
|
%if 0%{?fedora} >= 27 || 0%{?rhel} > 7
|
|
Requires: esc >= 1.1.1
|
|
%else
|
|
Requires: esc >= 1.1.0
|
|
%endif
|
|
|
|
%description
|
|
The Dogtag Public Key Infrastructure (PKI) Suite is comprised of the following
|
|
five subsystems and a client (for use by a Token Management System):
|
|
|
|
* Certificate Authority (CA)
|
|
* Key Recovery Authority (KRA)
|
|
* Online Certificate Status Protocol (OCSP) Manager
|
|
* Token Key Service (TKS)
|
|
* Token Processing System (TPS)
|
|
* Enterprise Security Client (ESC)
|
|
|
|
Additionally, it provides a console GUI application used for server and
|
|
user/group administration of CA, KRA, OCSP, and TKS, as well as various
|
|
command-line tools used to assist with a PKI deployment.
|
|
|
|
To successfully deploy instances of a CA, KRA, OCSP, TKS, or TPS,
|
|
a Tomcat Web Server must be up and running locally on this machine.
|
|
|
|
To meet the database storage requirements of each CA, KRA, OCSP, TKS, or TPS
|
|
instance, a 389 Directory Server must be up and running either locally on
|
|
this machine, or remotely over the attached network connection.
|
|
|
|
Finally, although they are no longer supplied by this 'meta' package,
|
|
javadocs are available for both JSS (jss-javadoc) and portions of
|
|
the Dogtag PKI API (pki-javadoc).
|
|
|
|
NOTE: As a convenience for standalone deployments, this 'dogtag-pki'
|
|
top-level meta package supplies Dogtag themes for use by the
|
|
certificate server packages:
|
|
|
|
* dogtag-pki-theme (Dogtag Certificate System deployments)
|
|
* dogtag-pki-server-theme
|
|
* dogtag-pki-console-theme
|
|
|
|
################################################################################
|
|
%prep
|
|
################################################################################
|
|
|
|
################################################################################
|
|
%build
|
|
################################################################################
|
|
|
|
################################################################################
|
|
%install
|
|
################################################################################
|
|
|
|
%{__mkdir_p} %{buildroot}%{_datadir}/doc/pki
|
|
|
|
cat > %{buildroot}%{_datadir}/doc/pki/README << EOF
|
|
This package is just a "meta-package" whose dependencies pull in all of the
|
|
packages comprising the Dogtag Public Key Infrastructure (PKI) Suite.
|
|
EOF
|
|
|
|
################################################################################
|
|
%files
|
|
################################################################################
|
|
|
|
%defattr(-,root,root,-)
|
|
%doc %{_datadir}/doc/pki/README
|
|
|
|
################################################################################
|
|
%changelog
|
|
|
|
* Fri Jun 15 2018 Dogtag PKI Team <pki-devel@redhat.com> - 10.6.2-1
|
|
- Rebased to PKI 10.6.2
|
|
|
|
* Wed May 30 2018 Dogtag PKI Team <pki-devel@redhat.com> - 10.6.1-3
|
|
- Updated JSS dependency
|
|
- Updated Tomcat dependency
|
|
- Fixed rpmlint warnings
|
|
|
|
* Fri May 4 2018 Dogtag PKI Team <pki-devel@redhat.com> - 10.6.1-2
|
|
- Bugzilla #1574711: pki-tools cannot be installed on current Rawhide
|
|
- Fixed rpmlint warnings
|
|
|
|
* Thu May 3 2018 Dogtag PKI Team <pki-devel@redhat.com> - 10.6.1-1
|
|
- Rebased to PKI 10.6.1
|
|
- Bugzilla #1559047: pki-core misses a dependency to pki-symkey
|
|
- Bugzilla #1573094: FreeIPA external CA installation fails
|
|
|
|
* Thu May 3 2018 Dogtag PKI Team <pki-devel@redhat.com> - 10.6.1-1
|
|
- Rebased to PKI 10.6.1
|
|
- Bugzilla #1559047: pki-core misses a dependency to pki-symkey
|
|
|
|
* Mon Apr 9 2018 Dogtag PKI Team <pki-devel@redhat.com> - 10.6.0-1
|
|
- Updated project URL
|
|
- Cleaned up spec file
|
|
- Fixed README location
|
|
- Rebased to PKI 10.6.0 final
|
|
|
|
* Thu Mar 29 2018 Dogtag PKI Team <pki-devel@redhat.com> - 10.6.0-0.3
|
|
- Rebased to PKI 10.6.0 beta2
|
|
|
|
* Thu Mar 15 2018 Dogtag PKI Team <pki-devel@redhat.com> - 10.6.0-0.2
|
|
- Rebased to PKI 10.6.0 beta
|
|
|