.gitignore

@@ -1 +1,3 @@
-SOURCES/jackson-databind-2.10.0.tar.gz
+jackson-databind-jackson-databind-*/
+/jackson-databind-*.tar.gz
+/*.src.rpm

.jackson-databind.metadata

@@ -1 +1 @@
-0d29a12dd73e668f9b00688a0ddbb932211be705 SOURCES/jackson-databind-2.10.0.tar.gz
+76890a3d1df2adb6c53afe7bcdeaa0956f8d0eea jackson-databind-2.14.1.tar.gz

gating.yaml

@@ -0,0 +1,7 @@
+# recipients: rhcs-team
+--- !Policy
+product_versions:
+  - rhel-9
+decision_context: osci_compose_gate
+rules:
+  - !PassingTestCaseRule {test_case_name: osci.brew-build.tier0.functional}

jackson-databind.spec

@@ -1,20 +1,19 @@
-Name:          jackson-databind
-Version:       2.10.0
-Release:       1%{?dist}
-Summary:       General data-binding package for Jackson (2.x)
-License:       ASL 2.0 and LGPLv2+
-URL:           https://github.com/FasterXML/jackson-databind/
-Source0:       https://github.com/FasterXML/jackson-databind/archive/%{name}-%{version}.tar.gz
+Name:           jackson-databind
+Version:        2.14.1
+Release:        2%{?dist}
+Summary:        General data-binding package for Jackson (2.x)
+License:        Apache-2.0 and LGPL-2.0-or-later
+
+URL:            https://github.com/FasterXML/jackson-databind
+Source0:        %{url}/archive/%{name}-%{version}.tar.gz
 
 BuildRequires:  maven-local
-
-# TODO: Revert back to version macro when versions align again.
 BuildRequires:  mvn(com.fasterxml.jackson.core:jackson-annotations) >= %{version}
 BuildRequires:  mvn(com.fasterxml.jackson.core:jackson-core) >= %{version}
 BuildRequires:  mvn(com.fasterxml.jackson:jackson-base:pom:) >= %{version}
 BuildRequires:  mvn(com.google.code.maven-replacer-plugin:replacer)
 BuildRequires:  mvn(org.apache.felix:maven-bundle-plugin)
-BuildRequires:  mvn(org.powermock:powermock-module-junit4)
+BuildRequires:  mvn(org.mockito:mockito-core)
 
 BuildArch:      noarch
 
@@ -23,11 +22,16 @@ The general-purpose data-binding functionality and tree-model for Jackson Data
 Processor. It builds on core streaming parser/generator package, and uses
 Jackson Annotations for configuration.
 
-%package javadoc
-Summary: Javadoc for %{name}
+%package -n pki-%{name}
+Summary: General data-binding package for Jackson (2.x)
+Obsoletes: %{name} < %{version}-%{release}
+Conflicts: %{name} < %{version}-%{release}
+Provides: %{name} = %{version}-%{release}
 
-%description javadoc
-This package contains API documentation for %{name}.
+%description -n pki-%{name}
+The general-purpose data-binding functionality and tree-model for Jackson Data
+Processor. It builds on core streaming parser/generator package, and uses
+Jackson Annotations for configuration.
 
 %prep
 %setup -q -n %{name}-%{name}-%{version}
@@ -36,55 +40,126 @@ This package contains API documentation for %{name}.
 %pom_remove_plugin ":maven-enforcer-plugin"
 %pom_remove_plugin "org.jacoco:jacoco-maven-plugin"
 %pom_remove_plugin "org.moditect:moditect-maven-plugin"
+%pom_remove_plugin "de.jjohannes:gradle-module-metadata-maven-plugin"
 
 cp -p src/main/resources/META-INF/NOTICE .
 sed -i 's/\r//' LICENSE NOTICE
 
 # unavailable test deps
 %pom_remove_dep javax.measure:jsr-275
-%pom_remove_dep org.powermock:powermock-api-mockito2
 rm src/test/java/com/fasterxml/jackson/databind/introspect/NoClassDefFoundWorkaroundTest.java
 %pom_xpath_remove pom:classpathDependencyExcludes
 
-# org.powermock.reflect.exceptions.FieldNotFoundException: Field 'fTestClass' was not found in class org.junit.internal.runners.MethodValidator.
+# TestTypeFactoryWithClassLoader fails to compile
+# - it's the only test that uses powermock, so drop the powermock dependencies
+# - mockito is only transitively pulled in by powermock, so add it back
+%pom_remove_dep org.powermock:
+%pom_add_dep org.mockito:mockito-core::test
 rm src/test/java/com/fasterxml/jackson/databind/type/TestTypeFactoryWithClassLoader.java
 
 # Off test that require connection with the web
-rm src/test/java/com/fasterxml/jackson/databind/ser/jdk/JDKTypeSerializationTest.java \
- src/test/java/com/fasterxml/jackson/databind/deser/jdk/JDKStringLikeTypesTest.java \
- src/test/java/com/fasterxml/jackson/databind/TestJDKSerialization.java
+rm src/test/java/com/fasterxml/jackson/databind/TestJDKSerialization.java
 
 %mvn_file : %{name}
 
 %build
-%mvn_build -- -Dmaven.test.failure.ignore=true
+%mvn_build -f -j -- -Dmaven.test.failure.ignore=true
 
 %install
 %mvn_install
 
-%files -f .mfiles
+%files -n pki-%{name} -f .mfiles
 %doc README.md release-notes/*
 %license LICENSE NOTICE
 
-%files javadoc -f .mfiles-javadoc
-%license LICENSE NOTICE
-
 %changelog
-* Fri Nov 8 2019 Red Hat PKI Team <rhcs-maint@redhat.com> - 2.10.0-1
+* Wed Nov 23 2022 Chris Kelley <ckelley@redhat.com> - 2.14.1-1
+- Update to version 2.14.1
+- Resolves: #2070122
+
+* Mon Aug 16 2021 Red Hat PKI Team <rhcs-maint@redhat.com> - 2.11.4-6
+- Disable tests
+- Drop javadoc subpackage
+
+* Mon Aug 09 2021 Mohan Boddu <mboddu@redhat.com> - 2.11.4-5
+- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
+  Related: rhbz#1991688
+
+* Wed Apr 28 2021 Red Hat PKI Team <rhcs-maint@redhat.com> - 2.11.4-4
+- Rename subpackages to pki-jackson
+
+* Fri Apr 16 2021 Mohan Boddu <mboddu@redhat.com> - 2.11.4-3
+- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
+
+* Tue Jan 26 2021 Fedora Release Engineering <releng@fedoraproject.org> - 2.11.4-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
+
+* Mon Jan 18 2021 Fabio Valentini <decathorpe@gmail.com> - 2.11.4-1
+- Update to version 2.11.4.
+
+* Wed Oct 14 2020 Fabio Valentini <decathorpe@gmail.com> - 2.11.3-1
+- Update to version 2.11.3.
+
+* Sun Aug 09 2020 Fabio Valentini <decathorpe@gmail.com> - 2.11.2-2
+- Drop useless powermock build dependency.
+
+* Sat Aug 08 2020 Fabio Valentini <decathorpe@gmail.com> - 2.11.2-1
+- Update to version 2.11.2.
+
+* Tue Jul 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 2.11.1-3
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
+
+* Fri Jul 10 2020 Jiri Vanek <jvanek@redhat.com> - 2.11.1-2
+- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11
+
+* Mon Jul 06 2020 Fabio Valentini <decathorpe@gmail.com> - 2.11.1-1
+- Update to version 2.11.1.
+
+* Mon May 25 2020 Fabio Valentini <decathorpe@gmail.com> - 2.11.0-1
+- Update to version 2.11.0.
+
+* Fri May 08 2020 Fabio Valentini <decathorpe@gmail.com> - 2.10.4-1
+- Update to version 2.10.4.
+
+* Tue Mar 03 2020 Fabio Valentini <decathorpe@gmail.com> - 2.10.3-1
+- Update to version 2.10.3.
+
+* Wed Jan 29 2020 Fedora Release Engineering <releng@fedoraproject.org> - 2.10.2-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
+
+* Fri Jan 17 2020 Fabio Valentini <decathorpe@gmail.com> - 2.10.2-1
+- Update to version 2.10.2.
+
+* Wed Nov 13 2019 Fabio Valentini <decathorpe@gmail.com> - 2.10.1-1
+- Update to version 2.10.1.
+
+* Thu Oct 3 2019 Alexander Scheel <ascheel@redhat.com> - 2.10.0-1
 - Update to latest upstream release
 - Fixes: CVE-2019-14540
 - Fixes: CVE-2019-16335
-- Resolves: rhbz#1760274
-- Resolves: rhbz#1760278
+- Fixes: CVE-2019-16942
+- Fixes: CVE-2019-16943
+- Resolves: rhbz#1758168
+- Resolves: rhbz#1758172
+- Resolves: rhbz#1758183
 
-* Wed Jul 31 2019 Red Hat PKI Team <rhcs-maint@redhat.com> - 2.9.9.2-1
-- Update to latest upstream release, fixes CVE-2019-12384
+* Thu Sep 12 2019 Alexander Scheel <ascheel@redhat.com> - 2.9.9.3-1
+- Update to latest upstream release; fixes CVE-2019-12384
+
+* Thu Jul 25 2019 Fedora Release Engineering <releng@fedoraproject.org> - 2.9.8-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
 
 * Wed Feb 06 2019 Mat Booth <mat.booth@redhat.com> - 2.9.8-1
 - Update to latest upstream release, fixes CVE-2018-14718 CVE-2018-147189
   CVE-2018-19360 CVE-2018-19361 CVE-2018-19362 CVE-2018-12022 CVE-2018-12023
   CVE-2018-14720 CVE-2018-14721
 
+* Fri Feb 01 2019 Fedora Release Engineering <releng@fedoraproject.org> - 2.9.4-5
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
+
+* Fri Jul 13 2018 Fedora Release Engineering <releng@fedoraproject.org> - 2.9.4-4
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
+
 * Mon Mar 26 2018 Mat Booth <mat.booth@redhat.com> - 2.9.4-3
 - Add patch to fix CVE-2018-7489
 

sources

@@ -0,0 +1 @@
+SHA512 (jackson-databind-2.14.1.tar.gz) = 723f66681a77cbb290189d27b3afffe188e16514610b304efc64fb824b32eb48eda98e3ed25d53a427a0c2d762d95488ce569088211809a08638a7c25cdd5179

tests/roles/Test_Setup/files/ca.cfg

@@ -0,0 +1,25 @@
+[DEFAULT]
+pki_server_database_password=Secret.123
+
+[CA]
+pki_admin_email=caadmin@example.com
+pki_admin_name=caadmin
+pki_admin_nickname=caadmin
+pki_admin_password=Secret.123
+pki_admin_uid=caadmin
+
+pki_client_database_password=Secret.123
+pki_client_database_purge=False
+pki_client_pkcs12_password=Secret.123
+
+pki_ds_base_dn=dc=ca,dc=pki,dc=example,dc=com
+pki_ds_database=ca
+pki_ds_password=Secret.123
+
+pki_security_domain_name=EXAMPLE
+
+pki_ca_signing_nickname=ca_signing
+pki_ocsp_signing_nickname=ca_ocsp_signing
+pki_audit_signing_nickname=ca_audit_signing
+pki_sslserver_nickname=sslserver
+pki_subsystem_nickname=subsystem

tests/roles/Test_Setup/files/ds-create.sh

@@ -0,0 +1,24 @@
+#!/bin/bash -ex
+
+# This command needs to be executed as it pulls the machine name
+# dynamically.
+dscreate create-template /tmp/test_dir/ds.inf
+
+sed -i \
+    -e "s/;instance_name = .*/instance_name = localhost/g" \
+    -e "s/;root_password = .*/root_password = Secret.123/g" \
+    -e "s/;suffix = .*/suffix = dc=example,dc=com/g" \
+    -e "s/;self_sign_cert = .*/self_sign_cert = False/g" \
+    /tmp/test_dir/ds.inf
+
+dscreate from-file /tmp/test_dir/ds.inf
+
+ldapadd -h $HOSTNAME -x -D "cn=Directory Manager" -w Secret.123 << EOF
+dn: dc=example,dc=com
+objectClass: domain
+dc: example
+
+dn: dc=pki,dc=example,dc=com
+objectClass: domain
+dc: pki
+EOF

tests/roles/Test_Setup/files/kra.cfg

@@ -0,0 +1,27 @@
+[DEFAULT]
+pki_server_database_password=Secret.123
+
+[KRA]
+pki_admin_email=kraadmin@example.com
+pki_admin_name=kraadmin
+pki_admin_nickname=kraadmin
+pki_admin_password=Secret.123
+pki_admin_uid=kraadmin
+
+pki_client_database_password=Secret.123
+pki_client_database_purge=False
+pki_client_pkcs12_password=Secret.123
+
+pki_ds_base_dn=dc=kra,dc=pki,dc=example,dc=com
+pki_ds_database=kra
+pki_ds_password=Secret.123
+
+pki_security_domain_name=EXAMPLE
+pki_security_domain_user=caadmin
+pki_security_domain_password=Secret.123
+
+pki_storage_nickname=kra_storage
+pki_transport_nickname=kra_transport
+pki_audit_signing_nickname=kra_audit_signing
+pki_sslserver_nickname=sslserver
+pki_subsystem_nickname=subsystem

tests/roles/Test_Setup/tasks/main.yml

@@ -0,0 +1,26 @@
+---
+
+- name: Install jackson-databind
+  dnf:
+    name: >
+      pki-jackson-databind
+
+- name: Install required packages
+  dnf:
+    name: >
+      389-ds-base, pki-ca, pki-kra
+
+- name: Creates directory
+  file: path=/tmp/test_files state=directory
+
+- name: Copying templates to /tmp folder
+  copy : src=.  dest=/tmp/test_dir
+
+- name: Setup DS Service
+  shell: sh /tmp/test_dir/ds-create.sh
+
+- name: Install CA subsystem
+  shell: pkispawn -f /tmp/test_dir/ca.cfg -s CA -v
+
+- name: Install KRA subsystem
+  shell: pkispawn -f /tmp/test_dir/kra.cfg -s KRA -v

tests/tests.yml

@@ -0,0 +1,29 @@
+- hosts: localhost
+  remote_user: root
+  tags:
+    - classic
+  roles:
+  - role: Test_Setup
+  - role: standard-test-basic
+    tests:
+    - verify_spawn_ca:
+        dir: .
+        run: "curl http://localhost:8080/ca/admin/ca/getStatus | grep '<Status>running</Status>'"
+    - verify_spawn_kra:
+        dir: .
+        run: "curl http://localhost:8080/kra/admin/kra/getStatus | grep '<Status>running</Status>'"
+    - destroy_kra:
+        dir: .
+        run: "pkidestroy -i pki-tomcat -s KRA && sleep 5"
+    - verify_destroy_kra:
+        dir: .
+        run: "curl http://localhost:8080/kra/admin/kra/getStatus | grep 'HTTP Status 404'"
+    - destroy_ca:
+        dir: .
+        run: "pkidestroy -i pki-tomcat -s CA"
+    - verify_destroy_ca:
+        dir: .
+        run: "curl http://localhost:8080/ca/admin/ca/getStatus  &> testfile.log || true && grep 'Connection refused' testfile.log"
+    required_packages:
+    - pki-ca
+    - pki-kra