commit 2f149455c6d653d78c31defa39e81134e2ee13a4 Author: James Antill Date: Mon Aug 8 13:57:11 2022 -0400 Import rpm: d3142a2108777fd27e82830610165d7259d0fca9 diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..ee5f0d8 --- /dev/null +++ b/.gitignore @@ -0,0 +1 @@ +SOURCES/jackson-databind-2.10.0.tar.gz diff --git a/gating.yaml b/gating.yaml new file mode 100644 index 0000000..388958f --- /dev/null +++ b/gating.yaml @@ -0,0 +1,7 @@ +# recipients: rhcs-team +--- !Policy +product_versions: + - rhel-9 +decision_context: osci_compose_gate +rules: + - !PassingTestCaseRule {test_case_name: osci.brew-build.tier0.functional} diff --git a/jackson-databind.spec b/jackson-databind.spec new file mode 100644 index 0000000..e751f2d --- /dev/null +++ b/jackson-databind.spec @@ -0,0 +1,176 @@ +Name: jackson-databind +Version: 2.10.0 +Release: 1%{?dist} +Summary: General data-binding package for Jackson (2.x) +License: ASL 2.0 and LGPLv2+ +URL: https://github.com/FasterXML/jackson-databind/ +Source0: https://github.com/FasterXML/jackson-databind/archive/%{name}-%{version}.tar.gz + +BuildRequires: maven-local + +# TODO: Revert back to version macro when versions align again. +BuildRequires: mvn(com.fasterxml.jackson.core:jackson-annotations) >= %{version} +BuildRequires: mvn(com.fasterxml.jackson.core:jackson-core) >= %{version} +BuildRequires: mvn(com.fasterxml.jackson:jackson-base:pom:) >= %{version} +BuildRequires: mvn(com.google.code.maven-replacer-plugin:replacer) +BuildRequires: mvn(org.apache.felix:maven-bundle-plugin) +BuildRequires: mvn(org.powermock:powermock-module-junit4) + +BuildArch: noarch + +%description +The general-purpose data-binding functionality and tree-model for Jackson Data +Processor. It builds on core streaming parser/generator package, and uses +Jackson Annotations for configuration. + +%package javadoc +Summary: Javadoc for %{name} + +%description javadoc +This package contains API documentation for %{name}. + +%prep +%setup -q -n %{name}-%{name}-%{version} + +# Remove plugins unnecessary for RPM builds +%pom_remove_plugin ":maven-enforcer-plugin" +%pom_remove_plugin "org.jacoco:jacoco-maven-plugin" +%pom_remove_plugin "org.moditect:moditect-maven-plugin" + +cp -p src/main/resources/META-INF/NOTICE . +sed -i 's/\r//' LICENSE NOTICE + +# unavailable test deps +%pom_remove_dep javax.measure:jsr-275 +%pom_remove_dep org.powermock:powermock-api-mockito2 +rm src/test/java/com/fasterxml/jackson/databind/introspect/NoClassDefFoundWorkaroundTest.java +%pom_xpath_remove pom:classpathDependencyExcludes + +# org.powermock.reflect.exceptions.FieldNotFoundException: Field 'fTestClass' was not found in class org.junit.internal.runners.MethodValidator. +rm src/test/java/com/fasterxml/jackson/databind/type/TestTypeFactoryWithClassLoader.java + +# Off test that require connection with the web +rm src/test/java/com/fasterxml/jackson/databind/ser/jdk/JDKTypeSerializationTest.java \ + src/test/java/com/fasterxml/jackson/databind/deser/jdk/JDKStringLikeTypesTest.java \ + src/test/java/com/fasterxml/jackson/databind/TestJDKSerialization.java + +%mvn_file : %{name} + +%build +%mvn_build -- -Dmaven.test.failure.ignore=true + +%install +%mvn_install + +%files -f .mfiles +%doc README.md release-notes/* +%license LICENSE NOTICE + +%files javadoc -f .mfiles-javadoc +%license LICENSE NOTICE + +%changelog +* Fri Nov 8 2019 Red Hat PKI Team - 2.10.0-1 +- Update to latest upstream release +- Fixes: CVE-2019-14540 +- Fixes: CVE-2019-16335 +- Resolves: rhbz#1760274 +- Resolves: rhbz#1760278 + +* Wed Jul 31 2019 Red Hat PKI Team - 2.9.9.2-1 +- Update to latest upstream release, fixes CVE-2019-12384 + +* Wed Feb 06 2019 Mat Booth - 2.9.8-1 +- Update to latest upstream release, fixes CVE-2018-14718 CVE-2018-147189 + CVE-2018-19360 CVE-2018-19361 CVE-2018-19362 CVE-2018-12022 CVE-2018-12023 + CVE-2018-14720 CVE-2018-14721 + +* Mon Mar 26 2018 Mat Booth - 2.9.4-3 +- Add patch to fix CVE-2018-7489 + +* Wed Feb 07 2018 Fedora Release Engineering - 2.9.4-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild + +* Wed Jan 24 2018 Mat Booth - 2.9.4-1 +- Update to latest upstream release +- Drop upstreamed CVE patches + +* Mon Jan 22 2018 Mat Booth - 2.9.3-1 +- Update to latest upstream release + +* Mon Jan 15 2018 Mat Booth - 2.7.6-7 +- Better patch for CVE-2017-17485 + +* Thu Jan 11 2018 Mat Booth - 2.7.6-6 +- Backport a patch to fix CVE-2017-17485 + +* Fri Nov 03 2017 Mat Booth - 2.7.6-5 +- Backport a patch to fix CVE-2017-15095 + +* Wed Jul 26 2017 Fedora Release Engineering - 2.7.6-4 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild + +* Thu Jul 20 2017 Mat Booth - 2.7.6-3 +- Backport a patch to fix CVE-2017-7525 + +* Fri Feb 10 2017 Fedora Release Engineering - 2.7.6-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild + +* Mon Aug 22 2016 gil cattaneo 2.7.6-1 +- update to 2.7.6 + +* Fri Jun 24 2016 gil cattaneo 2.6.7-1 +- update to 2.6.7 + +* Thu May 26 2016 gil cattaneo 2.6.6-1 +- update to 2.6.6 + +* Thu Feb 04 2016 Fedora Release Engineering - 2.6.3-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild + +* Sun Oct 25 2015 gil cattaneo 2.6.3-1 +- update to 2.6.3 + +* Mon Sep 28 2015 gil cattaneo 2.6.2-1 +- update to 2.6.2 + +* Wed Jun 17 2015 Fedora Release Engineering - 2.5.0-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild + +* Sat Jan 31 2015 gil cattaneo 2.5.0-1 +- update to 2.5.0 + +* Sat Sep 20 2014 gil cattaneo 2.4.2-1 +- update to 2.4.2 + +* Wed Jul 23 2014 gil cattaneo 2.4.1.3-1 +- update to 2.4.1.3 + +* Thu Jul 03 2014 gil cattaneo 2.4.1.1-1 +- update to 2.4.1.1 + +* Sat Jun 07 2014 Fedora Release Engineering - 2.2.2-5 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild + +* Fri Mar 28 2014 Michael Simacek - 2.2.2-4 +- Use Requires: java-headless rebuild (#1067528) + +* Sat Aug 03 2013 Fedora Release Engineering - 2.2.2-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild + +* Mon Jul 22 2013 gil cattaneo 2.2.2-2 +- review fixes + +* Tue Jul 16 2013 gil cattaneo 2.2.2-1 +- 2.2.2 +- renamed jackson-databind + +* Tue May 07 2013 gil cattaneo 2.2.1-1 +- 2.2.1 + +* Wed Oct 24 2012 gil cattaneo 2.1.0-1 +- update to 2.1.0 +- renamed jackson2-databind + +* Thu Sep 13 2012 gil cattaneo 2.0.6-1 +- initial rpm diff --git a/sources b/sources new file mode 100644 index 0000000..6bf9785 --- /dev/null +++ b/sources @@ -0,0 +1 @@ +SHA1 (jackson-databind-2.10.0.tar.gz) = 0d29a12dd73e668f9b00688a0ddbb932211be705 diff --git a/tests/roles/Test_Setup/files/ca.cfg b/tests/roles/Test_Setup/files/ca.cfg new file mode 100644 index 0000000..158c1d5 --- /dev/null +++ b/tests/roles/Test_Setup/files/ca.cfg @@ -0,0 +1,25 @@ +[DEFAULT] +pki_server_database_password=Secret.123 + +[CA] +pki_admin_email=caadmin@example.com +pki_admin_name=caadmin +pki_admin_nickname=caadmin +pki_admin_password=Secret.123 +pki_admin_uid=caadmin + +pki_client_database_password=Secret.123 +pki_client_database_purge=False +pki_client_pkcs12_password=Secret.123 + +pki_ds_base_dn=dc=ca,dc=pki,dc=example,dc=com +pki_ds_database=ca +pki_ds_password=Secret.123 + +pki_security_domain_name=EXAMPLE + +pki_ca_signing_nickname=ca_signing +pki_ocsp_signing_nickname=ca_ocsp_signing +pki_audit_signing_nickname=ca_audit_signing +pki_sslserver_nickname=sslserver +pki_subsystem_nickname=subsystem diff --git a/tests/roles/Test_Setup/files/ds-create.sh b/tests/roles/Test_Setup/files/ds-create.sh new file mode 100644 index 0000000..825d83f --- /dev/null +++ b/tests/roles/Test_Setup/files/ds-create.sh @@ -0,0 +1,24 @@ +#!/bin/bash -ex + +# This command needs to be executed as it pulls the machine name +# dynamically. +dscreate create-template /tmp/test_dir/ds.inf + +sed -i \ + -e "s/;instance_name = .*/instance_name = localhost/g" \ + -e "s/;root_password = .*/root_password = Secret.123/g" \ + -e "s/;suffix = .*/suffix = dc=example,dc=com/g" \ + -e "s/;self_sign_cert = .*/self_sign_cert = False/g" \ + /tmp/test_dir/ds.inf + +dscreate from-file /tmp/test_dir/ds.inf + +ldapadd -h $HOSTNAME -x -D "cn=Directory Manager" -w Secret.123 << EOF +dn: dc=example,dc=com +objectClass: domain +dc: example + +dn: dc=pki,dc=example,dc=com +objectClass: domain +dc: pki +EOF diff --git a/tests/roles/Test_Setup/files/kra.cfg b/tests/roles/Test_Setup/files/kra.cfg new file mode 100644 index 0000000..d93f4bb --- /dev/null +++ b/tests/roles/Test_Setup/files/kra.cfg @@ -0,0 +1,27 @@ +[DEFAULT] +pki_server_database_password=Secret.123 + +[KRA] +pki_admin_email=kraadmin@example.com +pki_admin_name=kraadmin +pki_admin_nickname=kraadmin +pki_admin_password=Secret.123 +pki_admin_uid=kraadmin + +pki_client_database_password=Secret.123 +pki_client_database_purge=False +pki_client_pkcs12_password=Secret.123 + +pki_ds_base_dn=dc=kra,dc=pki,dc=example,dc=com +pki_ds_database=kra +pki_ds_password=Secret.123 + +pki_security_domain_name=EXAMPLE +pki_security_domain_user=caadmin +pki_security_domain_password=Secret.123 + +pki_storage_nickname=kra_storage +pki_transport_nickname=kra_transport +pki_audit_signing_nickname=kra_audit_signing +pki_sslserver_nickname=sslserver +pki_subsystem_nickname=subsystem diff --git a/tests/roles/Test_Setup/tasks/main.yml b/tests/roles/Test_Setup/tasks/main.yml new file mode 100644 index 0000000..2155cf7 --- /dev/null +++ b/tests/roles/Test_Setup/tasks/main.yml @@ -0,0 +1,26 @@ +--- + +- name: Install jackson-databind + dnf: + name: > + pki-jackson-databind + +- name: Install required packages + dnf: + name: > + 389-ds-base, pki-ca, pki-kra + +- name: Creates directory + file: path=/tmp/test_files state=directory + +- name: Copying templates to /tmp folder + copy : src=. dest=/tmp/test_dir + +- name: Setup DS Service + shell: sh /tmp/test_dir/ds-create.sh + +- name: Install CA subsystem + shell: pkispawn -f /tmp/test_dir/ca.cfg -s CA -v + +- name: Install KRA subsystem + shell: pkispawn -f /tmp/test_dir/kra.cfg -s KRA -v diff --git a/tests/tests.yml b/tests/tests.yml new file mode 100644 index 0000000..b5f216d --- /dev/null +++ b/tests/tests.yml @@ -0,0 +1,29 @@ +- hosts: localhost + remote_user: root + tags: + - classic + roles: + - role: Test_Setup + - role: standard-test-basic + tests: + - verify_spawn_ca: + dir: . + run: "curl http://localhost:8080/ca/admin/ca/getStatus | grep 'running'" + - verify_spawn_kra: + dir: . + run: "curl http://localhost:8080/kra/admin/kra/getStatus | grep 'running'" + - destroy_kra: + dir: . + run: "pkidestroy -i pki-tomcat -s KRA && sleep 5" + - verify_destroy_kra: + dir: . + run: "curl http://localhost:8080/kra/admin/kra/getStatus | grep 'HTTP Status 404'" + - destroy_ca: + dir: . + run: "pkidestroy -i pki-tomcat -s CA" + - verify_destroy_ca: + dir: . + run: "curl http://localhost:8080/ca/admin/ca/getStatus &> testfile.log || true && grep 'Connection refused' testfile.log" + required_packages: + - pki-ca + - pki-kra