diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..223456a --- /dev/null +++ b/.gitignore @@ -0,0 +1 @@ +/libxcrypt-4.0.0-20171109git15447aa.tar.gz diff --git a/libxcrypt.spec b/libxcrypt.spec new file mode 100644 index 0000000..dcd035d --- /dev/null +++ b/libxcrypt.spec @@ -0,0 +1,183 @@ +# Shared object version of libcrypt. +%global soc 1 +%global sol 1 +%global sof 0 +%global sov %{soc}.%{sol}.%{sof} + +# For building snapshots. +%global commit 15447aa068074303ba6b8262a50f1cfb3d404bfe +%global commit_date 20171109 +%global short_commit %(c=%{commit}; echo ${c:0:7}) +%global gitrel .%{commit_date}git%{short_commit} +%global gitver -%{commit_date}git%{short_commit} + +# Add generation of HMAC checksums of the final stripped +# binaries. %%define with lazy globbing is used here +# intentionally, because using %%global does not work. +%define __spec_install_post \ +%{?__debug_package:%{__debug_install_post}} \ +%{__arch_install_post} \ +%{__os_install_post} \ +%{_bindir}/fipshmac %{buildroot}/%{_lib}/libcrypt.so.%{sov} \ +%{__ln_s} .libcrypt.so.%{sov}.hmac \\\ + %{buildroot}/%{_lib}/.libcrypt.so.%{soc}.hmac \ +%{nil} + + +Name: libxcrypt +Version: 4.0.0 +Release: 0.200%{?gitrel}%{?dist} +Summary: Extended crypt library for DES, MD5, Blowfish and others + +# For explicit license breakdown, see the +# LICENSING file in the source tarball. +License: LGPLv2+ and BSD and CDDL and Public Domain +URL: https://github.com/besser82/%{name} +Source0: %{url}/archive/%{commit}/%{name}-%{version}%{?gitver}.tar.gz + +BuildRequires: fipscheck +BuildRequires: libtool + +%description +libxcrypt is a modern library for one-way hashing of passwords. It +supports DES, MD5, SHA-2-256, SHA-2-512, and bcrypt-based password +hashes, and provides the traditional Unix 'crypt' and 'crypt_r' +interfaces, as well as a set of extended interfaces pioneered by +Openwall Linux, 'crypt_rn', 'crypt_ra', 'crypt_gensalt', +'crypt_gensalt_rn', and 'crypt_gensalt_ra'. + +libxcrypt is intended to be used by login(1), passwd(1), and other +similar programs; that is, to hash a small number of passwords during +an interactive authentication dialogue with a human. It is not +suitable for use in bulk password-cracking applications, or in any +other situation where speed is more important than careful handling of +sensitive data. However, it *is* intended to be fast and lightweight +enough for use in servers that must field thousands of login attempts +per minute. + +On Linux-based systems, by default libxcrypt will be binary backward +compatible with the libcrypt.so.1 shipped as part of the GNU C Library. +This means that all existing binary executables linked against glibc's +libcrypt should work unmodified with this library's libcrypt.so.1. We +have taken pains to provide exactly the same "symbol versions" as were +used by glibc on various CPU architectures, and to account for the +variety of ways in which the Openwall extensions were patched into +glibc's libcrypt by some Linux distributions. (For instance, +compatibility symlinks for SuSE's "libowcrypt" are provided.) + +However, the converse is not true: programs linked against libxcrypt +will not work with glibc's libcrypt. Also, programs that use certain +legacy APIs supplied by glibc's libcrypt ('encrypt', 'encrypt_r', +'setkey', 'setkey_r', and 'fcrypt') cannot be compiled against libxcrypt. + + +%package devel +Summary: Development files for %{name} + +Requires: %{name}%{?_isa} == %{version}-%{release} +Requires: glibc-devel%{?_isa} + +%description devel +The %{name}-devel package contains libraries and header files for +developing applications that use %{name}. + + +%package static +Summary: Static library for -static linking with %{name} + +Requires: %{name}-devel%{?_isa} == %{version}-%{release} +Requires: glibc-static%{?_isa} + +%description static +This package contains the libxcrypt static libraries for -static +linking. You don't need this, unless you link statically, which +is highly discouraged. + + +%prep +%autosetup -n %{name}-%{commit} -p 1 +%{_bindir}/autoreconf -fiv + + +%build +%configure \ + --libdir=/%{_lib} \ + --disable-silent-rules \ + --enable-shared \ + --enable-static \ + --enable-obsolete-api \ + --enable-weak-hashes \ + --with-pkgconfigdir=%{_libdir}/pkgconfig +%make_build + + +%install +%make_install + +# Get rid of libtool crap. +%{_bindir}/find %{buildroot} -name '*.la' -print -delete + +# We do not need libowcrypt.*, since it is a SUSE +# compat thing. Software needing it to be build can +# be patched easily to just link against '-lcrypt'. +%{_bindir}/find %{buildroot} -name 'libow*' -print -delete + +# Install documentation to shared %%_pkgdocdir. +%{__install} -Dpm 0644 -t %{buildroot}%{_pkgdocdir} \ + ChangeLog NEWS README THANKS TODO + + +%check +%make_build check || \ + { + rc=$?; + echo "-----BEGIN TESTLOG-----"; + %{__cat} test-suite.log; + echo "-----END TESTLOG-----"; + exit $rc; + } + + +%post -p /sbin/ldconfig + + +%postun -p /sbin/ldconfig + + +%files +%license AUTHORS COPYING.LIB LICENSING +%doc %dir %{_pkgdocdir} +%doc %{_pkgdocdir}/NEWS +%doc %{_pkgdocdir}/README +%doc %{_pkgdocdir}/THANKS +/%{_lib}/.libcrypt.so.%{soc}.hmac +/%{_lib}/.libcrypt.so.%{sov}.hmac +/%{_lib}/libcrypt.so.%{soc} +/%{_lib}/libcrypt.so.%{sov} +%{_mandir}/man3/crypt_rn.3.* +%{_mandir}/man3/crypt_gensalt.3.* +%{_mandir}/man5/crypt.5.* + + +%files devel +%doc %{_pkgdocdir}/ChangeLog +%doc %{_pkgdocdir}/TODO +/%{_lib}/libcrypt.so +%{_includedir}/crypt.h +%{_libdir}/pkgconfig/%{name}.pc + + +%files static +/%{_lib}/libcrypt.a + + +%changelog +* Fri Jan 12 2018 Björn Esser - 4.0.0-0.200.20171109git15447aa +- Initial import (rhbz#1532794) + +* Wed Jan 10 2018 Björn Esser - 4.0.0-0.101.20171109git15447aa +- Fix style of %%git_{rel,ver} + +* Tue Jan 09 2018 Björn Esser - 4.0.0-0.100.git20171109.15447aa +- Initial rpm release (rhbz#1532794) +- Start revision at 0.100 to superseed builds from COPR diff --git a/sources b/sources new file mode 100644 index 0000000..1a4b7cd --- /dev/null +++ b/sources @@ -0,0 +1 @@ +SHA512 (libxcrypt-4.0.0-20171109git15447aa.tar.gz) = e06400c5099bd8f6fdb0f6d548e49606ab02bbbadf4c759a3868450c17c86d5ed99d487afce71218a3c5c27fa56adf791da0ec36609b86032d0c10ef88909945