jss/jss.spec

150 lines
4.5 KiB
RPMSpec
Raw Normal View History

Name: jss
Version: 4.4.3
Release: 1%{?dist}
Summary: Java Security Services (JSS)
Group: System Environment/Libraries
2008-08-05 15:11:36 +00:00
License: MPLv1.1 or GPLv2+ or LGPLv2+
URL: http://www.mozilla.org/projects/security/pki/jss/
# The source for this package was pulled from upstream repository.
#
# To generate the tarball with HG:
Resolves: rhbz #1431937 - Bugzilla Bug #1431937 - Rebase jss to 4.4.0 in Fedora 25+ - ## JSS 4.4.0 includes the following patches ported from downstream: - Mozilla Bugzilla #507536 - Add IPv6 functionality to JSS - Mozilla Bugzilla #1307872 - Expose NSS calls for OCSP settings - Mozilla Bugzilla #1307882 - RFE ecc - add ecc curve name support in JSS an CS interface - Mozilla Bugzilla #1307993 - Expose updated certificate verification functi in JSS - Mozilla Bugzilla #1308000 - Incorrect socket accept error message due to b pointer arithmetic - Mozilla Bugzilla #1308001 - Verification should fail when a revoked certificate is added - Mozilla Bugzilla #1308004 - Warnings should be cleaned up in JSS build - Mozilla Bugzilla #1308006 - DRM failed to recovery keys when in FIPS mode (HSM + NSS) - Mozilla Bugzilla #1308008 - Defects revealed by Coverity scan - Mozilla Bugzilla #1308009 - Add support for PKCS5v2; support for secure PK - Mozilla Bugzilla #1308012 - DRM: during archiving and recovering, wrapping unwrapping keys should be done in the token - Mozilla Bugzilla #1308013 - JSS - HSM token name was mistaken for manufacturer identifier - Mozilla Bugzilla #1308017 - Un-deprecate previously deprecated methods in JSS 4.2.6 - Mozilla Bugzilla #1308019 - Provide Tomcat support for TLS v1.1 and TLS v1.2 via NSS through JSS - Mozilla Bugzilla #1308026 - JSS certificate validation does not pass up ex error from NSS - Mozilla Bugzilla #1308027 - Merge pki-symkey into jss - Mozilla Bugzilla #1308029 - Resolve Javadoc build issues - Mozilla Bugzilla #1308047 - support ECC encryption key archival and recove - Mozilla Bugzilla #1313122 - Remove bypass tests as latest NSS has removed PKCS#11 bypass support - Mozilla Bugzilla #1328675 - Simple problem unwrapping AES sym keys on toke - Mozilla Bugzilla #1345174 - Cannot create system certs when using LunaSA H in FIPS Mode and ECC algorithms - Mozilla Bugzilla #1345613 - expose AES KeyWrap and add some useful OID functions - Mozilla Bugzilla #1346410 - Load JSS libraries appropriately - ## JSS 4.4.0 includes the following changes for building and testing: - Mozilla Bugzilla #1331765 - Simplify JSS Makefile build and test - Mozilla Bugzilla #1346420 - Document steps required to use the proper libjss4.so when running certain HMAC Algorithms tests
2017-03-14 06:32:36 +00:00
#
# hg clone https://hg.mozilla.org/projects/jss
# cd jss
# hg archive --prefix jss-4.4.3/jss/ ../jss-4.4.3.tar.gz
#
# To generate the tarball with Git:
#
# git clone hg::https://hg.mozilla.org/projects/jss
# cd jss
# git archive --format=tar.gz --prefix jss-4.4.3/jss/ -o ../jss-4.4.3.tar.gz -v HEAD
#
Source0: http://pki.fedoraproject.org/pki/sources/%{name}/%{version}/%{name}-%{version}.tar.gz
Source1: http://pki.fedoraproject.org/pki/sources/%{name}/%{version}/MPL-1.1.txt
Source2: http://pki.fedoraproject.org/pki/sources/%{name}/%{version}/gpl.txt
Source3: http://pki.fedoraproject.org/pki/sources/%{name}/%{version}/lgpl.txt
Conflicts: idm-console-framework < 1.1.17-4
Conflicts: pki-base < 10.4.0
Conflicts: tomcatjss < 7.2.1
BuildRequires: nss-devel >= 3.28.4-6
BuildRequires: nspr-devel >= 4.13.1
BuildRequires: java-devel
2018-01-08 14:13:53 +00:00
%if 0%{?fedora} >= 25 || 0%{?rhel} > 7
BuildRequires: perl-interpreter
%endif
Requires: java-headless
Requires: nss >= 3.28.4-6
%description
Java Security Services (JSS) is a java native interface which provides a bridge
for java-based applications to use native Network Security Services (NSS).
This only works with gcj. Other JREs require that JCE providers be signed.
%package javadoc
Summary: Java Security Services (JSS) Javadocs
Group: Documentation
Requires: jss = %{version}-%{release}
%description javadoc
This package contains the API documentation for JSS.
%prep
%autosetup -n %{name}-%{version}
%build
%set_build_flags
[ -z "$JAVA_HOME" ] && export JAVA_HOME=%{_jvmdir}/java
[ -z "$USE_INSTALLED_NSPR" ] && export USE_INSTALLED_NSPR=1
[ -z "$USE_INSTALLED_NSS" ] && export USE_INSTALLED_NSS=1
# Enable compiler optimizations and disable debugging code
# NOTE: If you ever need to create a debug build with optimizations disabled
# just comment out this line and change in the %%install section below the
# line that copies jars xpclass.jar to be xpclass_dbg.jar
export BUILD_OPT=1
# Generate symbolic info for debuggers
XCFLAGS="-g $RPM_OPT_FLAGS"
export XCFLAGS
PKG_CONFIG_ALLOW_SYSTEM_LIBS=1
PKG_CONFIG_ALLOW_SYSTEM_CFLAGS=1
export PKG_CONFIG_ALLOW_SYSTEM_LIBS
export PKG_CONFIG_ALLOW_SYSTEM_CFLAGS
NSPR_INCLUDE_DIR=`/usr/bin/pkg-config --cflags-only-I nspr | sed 's/-I//'`
NSPR_LIB_DIR=`/usr/bin/pkg-config --libs-only-L nspr | sed 's/-L//'`
NSS_INCLUDE_DIR=`/usr/bin/pkg-config --cflags-only-I nss | sed 's/-I//'`
NSS_LIB_DIR=`/usr/bin/pkg-config --libs-only-L nss | sed 's/-L//'`
export NSPR_INCLUDE_DIR
export NSPR_LIB_DIR
export NSS_INCLUDE_DIR
export NSS_LIB_DIR
%if 0%{?__isa_bits} == 64
USE_64=1
export USE_64
%endif
# The Makefile is not thread-safe
make -C jss/coreconf
make -C jss
make -C jss javadoc
%check
%install
rm -rf $RPM_BUILD_ROOT docdir
# Copy the license files here so we can include them in %%doc
cp -p %{SOURCE1} .
cp -p %{SOURCE2} .
cp -p %{SOURCE3} .
# There is no install target so we'll do it by hand
# jars
install -d -m 0755 $RPM_BUILD_ROOT%{_jnidir}
Resolves: rhbz #1431937 - Bugzilla Bug #1431937 - Rebase jss to 4.4.0 in Fedora 25+ - ## JSS 4.4.0 includes the following patches ported from downstream: - Mozilla Bugzilla #507536 - Add IPv6 functionality to JSS - Mozilla Bugzilla #1307872 - Expose NSS calls for OCSP settings - Mozilla Bugzilla #1307882 - RFE ecc - add ecc curve name support in JSS an CS interface - Mozilla Bugzilla #1307993 - Expose updated certificate verification functi in JSS - Mozilla Bugzilla #1308000 - Incorrect socket accept error message due to b pointer arithmetic - Mozilla Bugzilla #1308001 - Verification should fail when a revoked certificate is added - Mozilla Bugzilla #1308004 - Warnings should be cleaned up in JSS build - Mozilla Bugzilla #1308006 - DRM failed to recovery keys when in FIPS mode (HSM + NSS) - Mozilla Bugzilla #1308008 - Defects revealed by Coverity scan - Mozilla Bugzilla #1308009 - Add support for PKCS5v2; support for secure PK - Mozilla Bugzilla #1308012 - DRM: during archiving and recovering, wrapping unwrapping keys should be done in the token - Mozilla Bugzilla #1308013 - JSS - HSM token name was mistaken for manufacturer identifier - Mozilla Bugzilla #1308017 - Un-deprecate previously deprecated methods in JSS 4.2.6 - Mozilla Bugzilla #1308019 - Provide Tomcat support for TLS v1.1 and TLS v1.2 via NSS through JSS - Mozilla Bugzilla #1308026 - JSS certificate validation does not pass up ex error from NSS - Mozilla Bugzilla #1308027 - Merge pki-symkey into jss - Mozilla Bugzilla #1308029 - Resolve Javadoc build issues - Mozilla Bugzilla #1308047 - support ECC encryption key archival and recove - Mozilla Bugzilla #1313122 - Remove bypass tests as latest NSS has removed PKCS#11 bypass support - Mozilla Bugzilla #1328675 - Simple problem unwrapping AES sym keys on toke - Mozilla Bugzilla #1345174 - Cannot create system certs when using LunaSA H in FIPS Mode and ECC algorithms - Mozilla Bugzilla #1345613 - expose AES KeyWrap and add some useful OID functions - Mozilla Bugzilla #1346410 - Load JSS libraries appropriately - ## JSS 4.4.0 includes the following changes for building and testing: - Mozilla Bugzilla #1331765 - Simplify JSS Makefile build and test - Mozilla Bugzilla #1346420 - Document steps required to use the proper libjss4.so when running certain HMAC Algorithms tests
2017-03-14 06:32:36 +00:00
# NOTE: if doing a debug no opt build change xpclass.jar to xpclass_dbg.jar
install -m 644 dist/xpclass.jar ${RPM_BUILD_ROOT}%{_jnidir}/jss4.jar
# We have to use the name libjss4.so because this is dynamically
# loaded by the jar file.
install -d -m 0755 $RPM_BUILD_ROOT%{_libdir}/jss
install -m 0755 dist/Linux*.OBJ/lib/libjss4.so ${RPM_BUILD_ROOT}%{_libdir}/jss/
pushd ${RPM_BUILD_ROOT}%{_libdir}/jss
ln -fs %{_jnidir}/jss4.jar jss4.jar
popd
# javadoc
install -d -m 0755 $RPM_BUILD_ROOT%{_javadocdir}/%{name}-%{version}
cp -rp dist/jssdoc/* $RPM_BUILD_ROOT%{_javadocdir}/%{name}-%{version}
cp -p jss/jss.html $RPM_BUILD_ROOT%{_javadocdir}/%{name}-%{version}
cp -p *.txt $RPM_BUILD_ROOT%{_javadocdir}/%{name}-%{version}
# No ldconfig is required since this library is loaded by Java itself.
%files
%defattr(-,root,root,-)
%doc jss/jss.html MPL-1.1.txt gpl.txt lgpl.txt
%{_libdir}/jss/*
%{_jnidir}/*
%{_libdir}/jss/lib*.so
%files javadoc
%defattr(-,root,root,-)
%dir %{_javadocdir}/%{name}-%{version}
%{_javadocdir}/%{name}-%{version}/*
%changelog
* Thu Apr 05 2018 Dogtag PKI Team <pki-devel@redhat.com> 4.4.3-1
- Rebased to JSS 4.4.3
- Red Hat Bugzilla #1548548 - Partial Fedora build flags injection