import CS jss-5.9.0-3.el10

.gitignore

@@ -1 +1 @@
-SOURCES/jss-4.11.0.tar.gz
+jss-5.9.0.tar.gz

.jss.metadata

@@ -1 +0,0 @@
-a068537cd958000dcd3b34847533101f95fc792b SOURCES/jss-4.11.0.tar.gz

SPECS/jss.spec

@@ -1,335 +0,0 @@
-################################################################################
-Name:           jss
-################################################################################
-
-%global         product_id idm-jss
-
-# Upstream version number:
-%global         major_version 4
-%global         minor_version 11
-%global         update_version 0
-
-Summary:        Java Security Services (JSS)
-URL:            https://github.com/dogtagpki/jss
-License:        MPLv1.1 or GPLv2+ or LGPLv2+
-
-# For development (i.e. unsupported) releases, use x.y.z-0.n.<phase>.
-# For official (i.e. supported) releases, use x.y.z-r where r >=1.
-%global         release_number 1
-Version:        %{major_version}.%{minor_version}.%{update_version}
-Release:        %{release_number}%{?_timestamp}%{?_commit_id}%{?dist}
-#global         _phase -alpha1
-
-# To generate the source tarball:
-# $ git clone https://github.com/dogtagpki/jss.git
-# $ cd jss
-# $ git tag v4.5.<z>
-# $ git push origin v4.5.<z>
-# Then go to https://github.com/dogtagpki/jss/releases and download the source
-# tarball.
-Source:         https://github.com/dogtagpki/jss/archive/v%{version}%{?_phase}/jss-%{version}%{?_phase}.tar.gz
-
-# md2man not available on i686
-ExcludeArch: i686
-
-
-# To create a patch for all changes since a version tag:
-# $ git format-patch \
-#     --stdout \
-#     <version tag> \
-#     > jss-VERSION-RELEASE.patch
-# Patch: jss-VERSION-RELEASE.patch
-
-################################################################################
-# Java
-################################################################################
-
-%if 0%{?fedora} && 0%{?fedora} <= 32 || 0%{?rhel} && 0%{?rhel} <= 8
-%define java_devel java-1.8.0-openjdk-devel
-%define java_headless java-1.8.0-openjdk-headless
-%define java_home /usr/lib/jvm/jre-1.8.0-openjdk
-%else
-%define java_devel java-11-openjdk-devel
-%define java_headless java-11-openjdk-headless
-%define java_home /usr/lib/jvm/jre-11-openjdk
-%endif
-
-################################################################################
-# Build Options
-################################################################################
-
-# By default the build will execute unit tests unless --without tests
-# option is specified.
-
-%bcond_without tests
-
-################################################################################
-# Build Dependencies
-################################################################################
-
-BuildRequires:  make
-BuildRequires:  cmake >= 3.14
-BuildRequires:  zip
-BuildRequires:  unzip
-
-BuildRequires:  gcc-c++
-BuildRequires:  nss-devel >= 3.44
-BuildRequires:  nss-tools >= 3.44
-BuildRequires:  %{java_devel}
-BuildRequires:  jpackage-utils
-BuildRequires:  slf4j
-BuildRequires:  glassfish-jaxb-api
-BuildRequires:  slf4j-jdk14
-BuildRequires:  apache-commons-lang3
-
-BuildRequires:  junit
-
-%description
-Java Security Services (JSS) is a java native interface which provides a bridge
-for java-based applications to use native Network Security Services (NSS).
-This only works with gcj. Other JREs require that JCE providers be signed.
-
-################################################################################
-%package -n %{product_id}
-################################################################################
-
-Summary:        Java Security Services (JSS)
-
-Requires:       nss >= 3.44
-Requires:       %{java_headless}
-Requires:       jpackage-utils
-Requires:       slf4j
-Requires:       glassfish-jaxb-api
-Requires:       slf4j-jdk14
-Requires:       apache-commons-lang3
-
-Obsoletes:      jss < %{version}-%{release}
-Provides:       jss = %{version}-%{release}
-Provides:       jss = %{major_version}.%{minor_version}
-Provides:       %{product_id} = %{major_version}.%{minor_version}
-
-Conflicts:      ldapjdk < 4.20
-Conflicts:      idm-console-framework < 1.2
-Conflicts:      tomcatjss < 7.6.0
-Conflicts:      pki-base < 10.10.0
-
-%description -n %{product_id}
-Java Security Services (JSS) is a java native interface which provides a bridge
-for java-based applications to use native Network Security Services (NSS).
-This only works with gcj. Other JREs require that JCE providers be signed.
-
-################################################################################
-%package -n %{product_id}-javadoc
-################################################################################
-
-Summary:        Java Security Services (JSS) Javadocs
-
-Obsoletes:      jss-javadoc < %{version}-%{release}
-Provides:       jss-javadoc = %{version}-%{release}
-Provides:       jss-javadoc = %{major_version}.%{minor_version}
-Provides:       %{product_id}-javadoc = %{major_version}.%{minor_version}
-
-%description -n %{product_id}-javadoc
-This package contains the API documentation for JSS.
-
-################################################################################
-%prep
-################################################################################
-
-%autosetup -n jss-%{version}%{?_phase} -p 1
-
-################################################################################
-%build
-################################################################################
-
-%set_build_flags
-
-# Enable compiler optimizations
-export BUILD_OPT=1
-
-# Generate symbolic info for debuggers
-CFLAGS="-g $RPM_OPT_FLAGS"
-export CFLAGS
-
-# Check if we're in FIPS mode
-modutil -dbdir /etc/pki/nssdb -chkfips true | grep -q enabled && export FIPS_ENABLED=1
-
-# The Makefile is not thread-safe
-%cmake \
-    -DVERSION=%{version} \
-    -DJAVA_HOME=%{java_home} \
-    -DJAVA_LIB_INSTALL_DIR=%{_jnidir} \
-    -DJSS_LIB_INSTALL_DIR=%{_libdir}/jss \
-    -B %{_vpath_builddir}
-
-cd %{_vpath_builddir}
-
-%{__make} \
-    VERBOSE=%{?_verbose} \
-    CMAKE_NO_VERBOSE=1 \
-    --no-print-directory \
-    all
-
-%{__make} \
-    VERBOSE=%{?_verbose} \
-    CMAKE_NO_VERBOSE=1 \
-    --no-print-directory \
-    javadoc
-
-%if %{with tests}
-ctest --output-on-failure
-%endif
-
-################################################################################
-%install
-################################################################################
-
-cd %{_vpath_builddir}
-
-%{__make} \
-    VERBOSE=%{?_verbose} \
-    CMAKE_NO_VERBOSE=1 \
-    DESTDIR=%{buildroot} \
-    INSTALL="install -p" \
-    --no-print-directory \
-    install
-
-################################################################################
-%files -n %{product_id}
-################################################################################
-
-%defattr(-,root,root,-)
-%doc jss.html
-%license MPL-1.1.txt gpl.txt lgpl.txt
-%{_libdir}/*
-%{_jnidir}/*
-
-################################################################################
-%files -n %{product_id}-javadoc
-################################################################################
-
-%defattr(-,root,root,-)
-%{_javadocdir}/jss-%{version}/
-
-################################################################################
-%changelog
-* Thu Feb 08 2024 Red Hat PKI Team <rhcs-maint@redhat.com> 4.11.0-1
-- Rebase to JSS 4.11.0
-
-* Tue Jan 16 2024 Red Hat PKI Team <rhcs-maint@redhat.com> 4.10.0-0.1
-- Rebase to JSS 4.10.0-alpha1
-
-* Fri Jan 12 2024 Red Hat PKI Team <rhcs-maint@redhat.com> 4.9.8-1
-- Rebase to JSS 4.9.8
-
-* Wed Jun 01 2022 Red Hat PKI Team <rhcs-maint@redhat.com> 4.9.4-1
-- Rebase to JSS 4.9.4
-- Bug 2013674 - JSS cannot be properly initialized after using another NSS-backed security provider
-
-* Tue Feb 15 2022 Red Hat PKI Team <rhcs-maint@redhat.com> 4.9.3-1
-- Rebase to JSS 4.9.3
-- Bug 2046022 - CVE-2021-4213 pki-core:10.6/jss: memory leak in TLS connection leads to OOM [rhel-8]
-
-* Mon Nov 15 2021 Red Hat PKI Team <rhcs-maint@redhat.com> 4.9.2-1
-- Rebase to JSS 4.9.2
-
-* Tue Sep 21 2021 Red Hat PKI Team <rhcs-maint@redhat.com> 4.9.1-1
-- Rebase to JSS 4.9.1
-
-* Mon Jul 26 2021 Red Hat PKI Team <rhcs-maint@redhat.com> 4.9.0-1
-- Rebase to JSS 4.9.0
-
-* Fri Jun 11 2021 Red Hat PKI Team <rhcs-maint@redhat.com> 4.9.0-0.2
-- Rebase to JSS 4.9.0-alpha2
-
-* Wed Jun 02 2021 Red Hat PKI Team <rhcs-maint@redhat.com> 4.9.0-0.1
-- Rebase to JSS 4.9.0-alpha1
-
-* Thu Jan 14 2021 Red Hat PKI Team <rhcs-maint@redhat.com> 4.8.1-1
-- Rebase to upstream JSS v4.8.1
-- Red Hat Bugilla #1908541 - jss broke SCEP - missing PasswordChallenge class
-- Red Hat Bugilla #1489256 - [RFE] jss should support RSA with OAEP padding
-
-* Wed Nov 18 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 4.8.0-2
-- Only check PKCS11Constants on beta builds
-- Bump tomcatjss, pki-core conflicts due to lang3
-
-* Wed Oct 28 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 4.8.0-1
-- Rebase to upstream JSS v4.8.0
-
-* Tue Oct 20 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 4.8.0-0.1
-- Rebase to upstream JSS v4.8.0-b1
-
-* Fri Sep 11 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 4.7.3-1
-- Rebase to upstream stable release JSS v4.7.3
-- Red Hat Bugzilla #1873235 - Fix SSL_ERROR_INAPPROPRIATE_FALLBACK_ALERT in pki ca-user-cert-add
-
-* Thu Aug 06 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 4.7.2-1
-- Rebase to upstream stable release JSS v4.7.2
-- Red Hat Bugzilla #1822246 - Fix SSLSocket NULL pointer deference after close
-
-* Fri Jul 31 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 4.7.1-1
-- Rebase to upstream stable release JSS v4.7.1
-
-* Thu Jul 09 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 4.7.0-1
-- Rebase to upstream stable release JSS v4.7.0
-- Fixed TestSSLEngine
-
-* Thu Jun 25 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 4.7.0-0.4
-- Rebased to JSS 4.7.0-b4
-
-* Mon Jun 22 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 4.7.0-0.3
-- Rebased to JSS 4.7.0-b3
-
-* Tue May 26 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 4.7.0-0.1
-- Rebased to JSS 4.7.0-b1
-
-* Mon Mar 23 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 4.6.2-4
-- Red Hat Bugzilla #1807371 - KRA-HSM: Async and sync key recovery using kra agent web is failing
-
-* Mon Mar 02 2020 Red Hat PKI Team <rhcs-maint@redhat.com> 4.6.2-3
-- Red Hat Bugzilla #1807371 - KRA-HSM: Async and sync key recovery using kra agent web is failing
-
-* Tue Oct 29 2019 Red Hat PKI Team <rhcs-maint@redhat.com> 4.6.2-2
-- Red Hat Bugzilla #1730767 - JSS: Wrap NSS CMAC + KDF implementations
-- Rebased to JSS 4.6.2
-
-* Wed Sep 11 2019 Red Hat PKI Team <rhcs-maint@redhat.com> 4.6.0-5
-- Red Hat Bugzilla #1747987 - CVE 2019-14823 jss: OCSP policy "Leaf and Chain" implicitly trusts the root certificate
-
-* Wed Aug 14 2019 Red Hat PKI Team <rhcs-maint@redhat.com> 4.6.0-4
-- Red Hat Bugzilla #1698059 - pki-core implements crypto
-
-* Tue Jul 16 2019 Red Hat PKI Team <rhcs-maint@redhat.com> 4.6.0-3
-- Red Hat Bugzilla #1721135 - JSS - LD_FLAGS support
-
-* Wed Jun 12 2019 Red Hat PKI Team <rhcs-maint@redhat.com> 4.6.0-2
-- Minor updates to release
-
-* Wed Jun 12 2019 Red Hat PKI Team <rhcs-maint@redhat.com> 4.6.0-1
-- Rebased to JSS 4.6.0
-
-* Thu Apr 25 2019 Red Hat PKI Team <rhcs-maint@redhat.com> 4.5.3-1
-- Rebased to JSS 4.5.3
-
-* Fri Aug 10 2018 Red Hat PKI Team <rhcs-maint@redhat.com> 4.5.0-1
-- Rebased to JSS 4.5.0
-
-* Tue Aug 07 2018 Red Hat PKI Team <rhcs-maint@redhat.com> 4.5.0-0.6
-- Rebased to JSS 4.5.0-b1
-
-* Tue Aug 07 2018 Red Hat PKI Team <rhcs-maint@redhat.com> 4.5.0-0.5
-- Red Hat Bugzilla #1612063 - Do not override system crypto policy (support TLS 1.3)
-
-* Fri Jul 20 2018 Red Hat PKI Team <rhcs-maint@redhat.com> 4.5.0-0.4
-- Rebased to JSS 4.5.0-a4
-- Red Hat Bugzilla #1604462 - jss: FTBFS in Fedora rawhide
-
-* Thu Jul 05 2018 Red Hat PKI Team <rhcs-maint@redhat.com> 4.5.0-0.3
-- Rebased to JSS 4.5.0-a3
-
-* Fri Jun 22 2018 Red Hat PKI Team <rhcs-maint@redhat.com> 4.5.0-0.2
-- Rebased to JSS 4.5.0-a2
-
-* Fri Jun 15 2018 Red Hat PKI Team <rhcs-maint@redhat.com> 4.5.0-0.1
-- Rebased to JSS 4.5.0-a1

jss.spec

@@ -0,0 +1,483 @@
+################################################################################
+Name:           jss
+################################################################################
+
+%global         vendor_id idm 
+%global         product_id %{vendor_id}-jss
+
+# Upstream version number:
+%global         major_version 5
+%global         minor_version 9
+%global         update_version 0
+
+# Downstream release number:
+# - development/stabilization (unsupported): 0.<n> where n >= 1
+# - GA/update (supported): <n> where n >= 1
+%global         release_number 3
+
+# Development phase:
+# - development (unsupported): alpha<n> where n >= 1
+# - stabilization (unsupported): beta<n> where n >= 1
+# - GA/update (supported): <none>
+#global         phase beta2
+
+%if 0%{?rhel} && 0%{?rhel} >= 9
+%global enable_nss_version_pqc_def_flag -DENABLE_NSS_VERSION_PQC_DEF=ON
+%endif
+
+%undefine       timestamp
+%undefine       commit_id
+
+Summary:        Java Security Services (JSS)
+URL:            https://github.com/dogtagpki/jss
+License:        (MPL-1.1 OR GPL-2.0-or-later OR LGPL-2.1-or-later) AND Apache-2.0
+Version:        %{major_version}.%{minor_version}.%{update_version}
+Release:        %{release_number}%{?phase:.}%{?phase}%{?timestamp:.}%{?timestamp}%{?commit_id:.}%{?commit_id}%{?dist}
+
+# To generate the source tarball:
+# $ git clone https://github.com/dogtagpki/jss.git
+# $ cd jss
+# $ git tag v4.5.<z>
+# $ git push origin v4.5.<z>
+# Then go to https://github.com/dogtagpki/jss/releases and download the source
+# tarball.
+Source:         https://github.com/dogtagpki/jss/archive/v%{version}%{?phase:-}%{?phase}/jss-%{version}%{?phase:-}%{?phase}.tar.gz
+
+# To create a patch for all changes since a version tag:
+# $ git format-patch \
+#     --stdout \
+#     <version tag> \
+#     > jss-VERSION-RELEASE.patch
+# Patch: jss-VERSION-RELEASE.patch
+
+%if 0%{?java_arches:1}
+ExclusiveArch: %{java_arches}
+%else
+ExcludeArch: i686
+%endif
+
+################################################################################
+# Java
+################################################################################
+
+# use Java 17 on Fedora 39 or older and RHEL 9 or older
+# otherwise, use Java 21
+
+# maven-local is a subpackage of javapackages-tools
+
+%if 0%{?fedora} && 0%{?fedora} <= 39 || 0%{?rhel} && 0%{?rhel} <= 9
+
+%define java_devel java-17-openjdk-devel
+%define java_headless java-17-openjdk-headless
+%define java_home %{_jvmdir}/jre-17-openjdk
+%define maven_local maven-local-openjdk17
+
+%else
+
+%define java_devel java-21-openjdk-devel
+%define java_headless java-21-openjdk-headless
+%define java_home %{_jvmdir}/jre-21-openjdk
+%define maven_local maven-local
+
+%endif
+
+################################################################################
+# Build Options
+################################################################################
+
+# By default the javadoc package will be built unless --without javadoc
+# option is specified.
+
+%bcond_without javadoc
+
+# By default the tests package will be built and the tests will executed
+# unless --without tests option is specified.
+
+%bcond_with tests
+
+################################################################################
+# Build Dependencies
+################################################################################
+
+BuildRequires:  make
+BuildRequires:  cmake >= 3.14
+BuildRequires:  zip
+BuildRequires:  unzip
+
+BuildRequires:  gcc-c++
+BuildRequires:  nss-devel >= 3.112
+BuildRequires:  nss-tools >= 3.112
+
+BuildRequires:  %{java_devel}
+BuildRequires:  %{maven_local}
+BuildRequires:  mvn(org.apache.commons:commons-lang3)
+BuildRequires:  mvn(org.slf4j:slf4j-api)
+BuildRequires:  mvn(org.slf4j:slf4j-jdk14)
+
+%description
+Java Security Services (JSS) is a java native interface which provides a bridge
+for java-based applications to use native Network Security Services (NSS).
+This only works with gcj. Other JREs require that JCE providers be signed.
+
+################################################################################
+%package -n %{product_id}
+################################################################################
+
+Summary:        Java Security Services (JSS)
+
+Requires:       nss >= 3.112
+
+Requires:       %{java_headless}
+Requires:       mvn(org.apache.commons:commons-lang3)
+Requires:       mvn(org.slf4j:slf4j-api)
+Requires:       mvn(org.slf4j:slf4j-jdk14)
+
+Obsoletes:      jss < %{version}-%{release}
+Provides:       jss = %{version}-%{release}
+Provides:       jss = %{major_version}.%{minor_version}
+Provides:       %{product_id} = %{major_version}.%{minor_version}
+
+Conflicts:      ldapjdk < 4.20
+Conflicts:      idm-console-framework < 1.2
+Conflicts:      pki-base < 10.10.0
+
+%description -n %{product_id}
+Java Security Services (JSS) is a java native interface which provides a bridge
+for java-based applications to use native Network Security Services (NSS).
+This only works with gcj. Other JREs require that JCE providers be signed.
+
+################################################################################
+%package -n %{product_id}-tomcat
+################################################################################
+
+Summary:        Java Security Services (JSS) Connector for Tomcat
+
+# Tomcat
+%if 0%{?rhel} && 0%{?rhel} >= 11
+BuildRequires:  mvn(org.apache.tomcat:tomcat-catalina) >= 10.1.36
+BuildRequires:  mvn(org.apache.tomcat:tomcat-coyote) >= 10.1.36
+BuildRequires:  mvn(org.apache.tomcat:tomcat-juli) >= 10.1.36
+
+Requires:       %{product_id} = %{version}-%{release}
+Requires:       mvn(org.apache.tomcat:tomcat-catalina) >= 10.1.36
+Requires:       mvn(org.apache.tomcat:tomcat-coyote) >= 10.1.36
+Requires:       mvn(org.apache.tomcat:tomcat-juli) >= 10.1.36
+
+%else
+
+BuildRequires:  mvn(org.apache.tomcat:tomcat-catalina) >= 9.0.62
+BuildRequires:  mvn(org.apache.tomcat:tomcat-coyote) >= 9.0.62
+BuildRequires:  mvn(org.apache.tomcat:tomcat-juli) >= 9.0.62
+
+BuildRequires:  mvn(org.apache.tomcat:tomcat-catalina) < 10
+BuildRequires:  mvn(org.apache.tomcat:tomcat-coyote) < 10
+BuildRequires:  mvn(org.apache.tomcat:tomcat-juli) < 10
+
+Requires:       %{product_id} = %{version}-%{release}
+Requires:       mvn(org.apache.tomcat:tomcat-catalina) >= 9.0.62
+Requires:       mvn(org.apache.tomcat:tomcat-coyote) >= 9.0.62
+Requires:       mvn(org.apache.tomcat:tomcat-juli) >= 9.0.62
+
+Requires:       mvn(org.apache.tomcat:tomcat-catalina) < 10
+Requires:       mvn(org.apache.tomcat:tomcat-coyote) < 10
+Requires:       mvn(org.apache.tomcat:tomcat-juli) < 10
+
+%endif
+
+# Tomcat JSS has been replaced with JSS Connector for Tomcat.
+# This will remove installed Tomcat JSS packages.
+Obsoletes:      tomcatjss <= 8.5
+Conflicts:      tomcatjss <= 8.5
+Obsoletes:      %{vendor_id}-tomcatjss <= 8.5
+Conflicts:      %{vendor_id}-tomcatjss <= 8.5
+
+%if 0%{?rhel} <= 8
+# PKI Servlet Engine has been replaced with Tomcat.
+# This will remove installed PKI Servlet Engine packages.
+Obsoletes:      pki-servlet-engine <= 9.0
+Conflicts:      pki-servlet-engine <= 9.0
+%endif
+
+%description -n %{product_id}-tomcat
+JSS Connector for Tomcat is a Java Secure Socket Extension (JSSE)
+module for Apache Tomcat that uses Java Security Services (JSS),
+a Java interface to Network Security Services (NSS).
+
+################################################################################
+%package -n %{product_id}-tools
+################################################################################
+
+Summary:        Java Security Services (JSS) Tools
+
+Provides:       jss-tools = %{version}-%{release}
+Provides:       jss-tools = %{major_version}.%{minor_version}
+Provides:       %{product_id}-tools = %{major_version}.%{minor_version}
+
+# Some PKI tools have been moved into jss-tools.
+Conflicts:      pki-tools < 11.6
+Conflicts:      %{vendor_id}-pki-tools < 11.6
+
+%description -n %{product_id}-tools
+This package contains JSS tools.
+
+%if %{with javadoc}
+################################################################################
+%package -n %{product_id}-javadoc
+################################################################################
+
+Summary:        Java Security Services (JSS) Javadocs
+
+Obsoletes:      jss-javadoc < %{version}-%{release}
+Provides:       jss-javadoc = %{version}-%{release}
+Provides:       jss-javadoc = %{major_version}.%{minor_version}
+Provides:       %{product_id}-javadoc = %{major_version}.%{minor_version}
+
+%description -n %{product_id}-javadoc
+This package contains the API documentation for JSS.
+%endif
+
+%if %{with tests}
+################################################################################
+%package -n %{product_id}-tests
+################################################################################
+
+Summary:        Java Security Services (JSS) Tests
+
+BuildRequires:  mvn(org.junit.jupiter:junit-jupiter)
+BuildRequires:  mvn(org.opentest4j:opentest4j)
+
+%description -n %{product_id}-tests
+This package provides test suite for JSS.
+
+# with tests
+%endif
+
+################################################################################
+%prep
+################################################################################
+
+%autosetup -n jss-%{version}%{?phase:-}%{?phase} -p 1
+
+# disable native modules since they will be built by CMake
+%pom_disable_module native
+%pom_disable_module symkey
+
+# do not ship examples
+%pom_disable_module examples
+
+# flatten-maven-plugin is not available in RPM
+%pom_remove_plugin org.codehaus.mojo:flatten-maven-plugin
+
+
+%if 0%{?rhel} >= 11
+#
+# specify Maven artifact locations
+%mvn_file org.dogtagpki.jss:jss-tomcat         jss/jss-tomcat
+%mvn_file org.dogtagpki.jss:jss-tomcat-10.1     jss/jss-tomcat-10.1
+
+# specify Maven artifact packages
+%mvn_package org.dogtagpki.jss:jss-tomcat      jss-tomcat
+%mvn_package org.dogtagpki.jss:jss-tomcat-10.1  jss-tomcat
+
+%pom_disable_module tomcat-9.0
+
+%else
+
+# specify Maven artifact locations
+%mvn_file org.dogtagpki.jss:jss-tomcat         jss/jss-tomcat
+%mvn_file org.dogtagpki.jss:jss-tomcat-9.0     jss/jss-tomcat-9.0
+
+# specify Maven artifact packages
+%mvn_package org.dogtagpki.jss:jss-tomcat      jss-tomcat
+%mvn_package org.dogtagpki.jss:jss-tomcat-9.0  jss-tomcat
+
+%pom_disable_module tomcat-10.1
+
+%endif
+
+################################################################################
+%build
+################################################################################
+
+# Set build flags for CMake
+# (see /usr/lib/rpm/macros.d/macros.cmake)
+%set_build_flags
+
+export JAVA_HOME=%{java_home}
+
+# Enable compiler optimizations
+export BUILD_OPT=1
+
+# Generate symbolic info for debuggers
+CFLAGS="-g $RPM_OPT_FLAGS"
+export CFLAGS
+
+# Check if we're in FIPS mode
+modutil -dbdir /etc/pki/nssdb -chkfips true | grep -q enabled && export FIPS_ENABLED=1
+
+# build Java code, run Java tests, and build Javadoc with Maven
+%mvn_build %{!?with_tests:-f} %{!?with_javadoc:-j}
+
+# create links to Maven-built classes for CMake
+mkdir -p %{_vpath_builddir}/classes/jss
+ln -sf ../../../base/target/classes/org %{_vpath_builddir}/classes/jss
+%if %{with tests}
+mkdir -p %{_vpath_builddir}/classes/tests
+ln -sf ../../../base/target/test-classes/org %{_vpath_builddir}/classes/tests
+%endif
+
+# create links to Maven-built JAR files for CMake
+ln -sf ../base/target/jss.jar %{_vpath_builddir}
+%if %{with tests}
+ln -sf ../base/target/jss-tests.jar %{_vpath_builddir}
+%endif
+
+# create links to Maven-built headers for CMake
+mkdir -p %{_vpath_builddir}/include/jss
+ln -sf ../../../base/target/include/_jni %{_vpath_builddir}/include/jss/_jni
+
+# mark Maven-built targets so that CMake will not rebuild them
+mkdir -p %{_vpath_builddir}/.targets
+touch %{_vpath_builddir}/.targets/finished_generate_java
+%if %{with tests}
+touch %{_vpath_builddir}/.targets/finished_tests_generate_java
+%endif
+%if %{with javadoc}
+touch %{_vpath_builddir}/.targets/finished_generate_javadocs
+%endif
+
+# build native code and run native tests with CMake
+./build.sh \
+    %{?_verbose:-v} \
+    --work-dir=%{_vpath_builddir} \
+    --prefix-dir=%{_prefix} \
+    --include-dir=%{_includedir} \
+    --lib-dir=%{_libdir} \
+    --sysconf-dir=%{_sysconfdir} \
+    --share-dir=%{_datadir} \
+    --cmake="%{__cmake} %{?enable_nss_version_pqc_def_flag}" \
+    --java-home=%{java_home} \
+    --jni-dir=%{_jnidir} \
+    --without-java \
+    --without-javadoc \
+    %{!?with_tests:--without-tests} \
+    dist
+
+################################################################################
+%install
+################################################################################
+
+# install Java binaries and Javadoc
+%mvn_install
+
+# install jss.jar
+mkdir -p %{buildroot}%{_javadir}/jss
+cp base/target/jss.jar %{buildroot}%{_javadir}/jss/jss.jar
+
+# create links for backward compatibility
+mkdir -p %{buildroot}%{_jnidir}
+ln -sf ../../..%{_javadir}/jss/jss.jar %{buildroot}%{_jnidir}/jss.jar
+
+mkdir -p %{buildroot}%{_libdir}/jss
+ln -sf ../../..%{_javadir}/jss/jss.jar %{buildroot}%{_libdir}/jss/jss.jar
+
+# install native binaries
+./build.sh \
+    %{?_verbose:-v} \
+    --work-dir=%{_vpath_builddir} \
+    --install-dir=%{buildroot} \
+    --without-java \
+    install
+
+# install tests binaries
+%if %{with tests}
+mkdir -p %{buildroot}%{_datadir}/jss/tests/lib
+cp base/target/jss-tests.jar %{buildroot}%{_datadir}/jss/tests/lib
+%endif
+
+################################################################################
+%files -n %{product_id} -f .mfiles
+################################################################################
+
+%doc jss.html
+%license MPL-1.1.txt gpl.txt lgpl.txt symkey/LICENSE
+%{_javadir}/jss/jss.jar
+%{_jnidir}/jss.jar
+%{_libdir}/jss/jss.jar
+%{_libdir}/jss/libjss.so
+%{_libdir}/jss/libjss-symkey.so
+
+################################################################################
+%files -n %{product_id}-tomcat -f .mfiles-jss-tomcat
+################################################################################
+
+################################################################################
+%files -n %{product_id}-tools
+################################################################################
+
+%{_bindir}/p12tool
+%{_bindir}/p7tool
+%{_bindir}/sslget
+
+%if %{with javadoc}
+################################################################################
+%files -n %{product_id}-javadoc -f .mfiles-javadoc
+################################################################################
+%endif
+
+%if %{with tests}
+################################################################################
+%files -n %{product_id}-tests
+################################################################################
+
+%{_datadir}/jss/tests/
+
+# with tests
+%endif
+
+################################################################################
+%changelog
+* Fri Mar 13 2026 Red Hat PKI Team <rhcs-maint@redhat.com> - 5.9.0-3
+- Revert to tomcat 9
+- Resolves: RHEL-155406
+
+* Tue Mar 10 2026 Red Hat PKI Team <rhcs-maint@redhat.com> - 5.9.0-2
+- Rebuilt for exception target
+
+* Fri Mar 06 2026 Red Hat PKI Team <rhcs-maint@redhat.com> - 5.9.0-1
+- Rebase to JSS 5.9.0
+- Resolves: RHEL-150666
+
+* Fri Feb 06 2026 Red Hat PKI Team <rhcs-maint@redhat.com> - 5.9.0-1-beta2
+- Rebase to JSS 5.9.0-beta2
+- Resolves RHEL-143049: Add support to ML-DSA
+
+* Wed Jan 21 2026 Red Hat PKI Team <rhcs-maint@redhat.com> - 5.9.0-1-beta1
+- Rebase to JSS 5.9.0-beta1
+- Resolves RHEL-143049: Add support to ML-DSA
+
+* Wed Aug 6 2025 Red Hat PKI Team <rhcs-maint@redhat.com> - 5.7.0-2
+- Rebase to JSS 5.7.0
+- Jira Ticket RHCS-98721 ACME server: RFC 8555 violation: Support ES256 #4638 [rhel-10]
+- Jira Ticket IDM-2428 build encountered: PQC alg defs to match with NSS V3.112
+
+* Sat Feb 15 2025 Red Hat PKI Team <rhcs-maint@redhat.com>- 5.6.0-1
+- Rebase to JSS 5.6.0
+
+* Thu Dec 05 2024 Troy Dawson <tdawson@redhat.com> - 5.6.0-alpha1
+- Rebase to JSS 5.6.0-alpha1
+
+* Tue Oct 29 2024 Troy Dawson <tdawson@redhat.com> - 5.5.0-3.1
+- Bump release for October 2024 mass rebuild:
+  Resolves: RHEL-64018
+
+* Wed Aug 14 2024 Andrew Hughes <gnu.andrew@redhat.com> - 5.5.0-3
+- Rebuilt with java-21-openjdk as default JDK:
+  https://issues.redhat.com/browse/RHEL-34597
+- Resolves: RHEL-54331
+
+* Mon Jun 24 2024 Troy Dawson <tdawson@redhat.com> - 5.5.0-2.1
+- Bump release for June 2024 mass rebuild
+
+* Fri May 10 2024 Red Hat PKI Team <rhcs-maint@redhat.com> 5.5.0-2
+- Rebase to JSS 5.5.0

sources

@@ -0,0 +1 @@
+SHA512 (jss-5.9.0.tar.gz) = 8d302b2056527f0eb01d3971e00c9bee3716d6f63fc1ca622e1b88799dbbbd557d53a2ca93e1cbebf7ca00045e6f4f15dcf61d66e958584f9492286724e65343