2021-04-30 12:07:57 +00:00
|
|
|
%{!?_httpd_mmn: %{expand: %%global _httpd_mmn %%(cat %{_includedir}/httpd/.mmn 2>/dev/null || echo 0-0)}}
|
2016-03-21 21:28:09 +00:00
|
|
|
%{!?_httpd_moddir: %{expand: %%global _httpd_moddir %%{_libdir}/httpd/modules}}
|
|
|
|
|
%{!?_httpd_confdir: %{expand: %%global _httpd_confdir %{_sysconfdir}/httpd/conf.d}}
|
2016-01-12 10:44:59 +00:00
|
|
|
|
2016-03-23 00:39:34 +00:00
|
|
|
# Optionally build with hiredis if --with hiredis is passed
|
|
|
|
|
%{!?_with_hiredis: %{!?_without_hiredis: %global _without_hiredis --without-hiredis}}
|
|
|
|
|
# It is an error if both or neither required options exist.
|
|
|
|
|
%{?_with_hiredis: %{?_without_hiredis: %{error: both _with_hiredis and _without_hiredis}}}
|
|
|
|
|
%{!?_with_hiredis: %{!?_without_hiredis: %{error: neither _with_hiredis nor _without_hiredis}}}
|
|
|
|
|
|
2016-01-12 10:44:59 +00:00
|
|
|
# /etc/httpd/conf.d with httpd < 2.4 and defined as /etc/httpd/conf.modules.d with httpd >= 2.4
|
|
|
|
|
%{!?_httpd_modconfdir: %{expand: %%global _httpd_modconfdir %%{_sysconfdir}/httpd/conf.d}}
|
|
|
|
|
|
2016-03-21 21:28:09 +00:00
|
|
|
%global httpd_pkg_cache_dir /var/cache/httpd/mod_auth_openidc
|
|
|
|
|
|
2015-11-09 20:50:00 +00:00
|
|
|
Name: mod_auth_openidc
|
2021-08-18 13:45:57 +00:00
|
|
|
Version: 2.4.9.1
|
2021-09-14 17:08:00 +00:00
|
|
|
Release: 2%{?dist}
|
2015-11-09 20:50:00 +00:00
|
|
|
Summary: OpenID Connect auth module for Apache HTTP Server
|
|
|
|
|
|
|
|
|
|
License: ASL 2.0
|
2018-01-26 16:41:35 +00:00
|
|
|
URL: https://github.com/zmartzone/mod_auth_openidc
|
2019-10-04 13:35:43 +00:00
|
|
|
Source0: https://github.com/zmartzone/mod_auth_openidc/archive/v%{version}.tar.gz
|
2017-02-18 00:26:04 +00:00
|
|
|
|
2021-01-07 01:51:09 +00:00
|
|
|
BuildRequires: make
|
2018-07-09 17:06:49 +00:00
|
|
|
BuildRequires: gcc
|
2015-11-09 20:50:00 +00:00
|
|
|
BuildRequires: httpd-devel
|
|
|
|
|
BuildRequires: openssl-devel
|
|
|
|
|
BuildRequires: curl-devel
|
|
|
|
|
BuildRequires: jansson-devel
|
|
|
|
|
BuildRequires: pcre-devel
|
|
|
|
|
BuildRequires: autoconf
|
|
|
|
|
BuildRequires: automake
|
2018-01-26 16:41:35 +00:00
|
|
|
BuildRequires: cjose-devel
|
|
|
|
|
BuildRequires: jq-devel
|
|
|
|
|
%{?_with_hiredis:BuildRequires: hiredis-devel}
|
2015-11-09 20:50:00 +00:00
|
|
|
Requires: httpd-mmn = %{_httpd_mmn}
|
|
|
|
|
|
|
|
|
|
%description
|
|
|
|
|
This module enables an Apache 2.x web server to operate as
|
|
|
|
|
an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server.
|
|
|
|
|
|
|
|
|
|
%prep
|
|
|
|
|
%setup -q
|
|
|
|
|
|
|
|
|
|
%build
|
|
|
|
|
# workaround rpm-buildroot-usage
|
|
|
|
|
export MODULES_DIR=%{_httpd_moddir}
|
2016-03-29 23:05:16 +00:00
|
|
|
export APXS2_OPTS='-S LIBEXECDIR=${MODULES_DIR}'
|
2015-11-09 20:50:00 +00:00
|
|
|
autoreconf
|
2016-03-23 00:39:34 +00:00
|
|
|
%configure \
|
2018-01-26 16:41:35 +00:00
|
|
|
--with-jq=/usr/lib64/ \
|
2016-03-23 00:39:34 +00:00
|
|
|
%{?_with_hiredis} \
|
2020-08-27 15:51:19 +00:00
|
|
|
%{?_without_hiredis} \
|
|
|
|
|
--with-apxs2=%{_httpd_apxs}
|
2016-03-23 00:39:34 +00:00
|
|
|
|
2020-02-13 00:30:50 +00:00
|
|
|
%{make_build}
|
2015-11-09 20:50:00 +00:00
|
|
|
|
2021-02-26 14:58:09 +00:00
|
|
|
# (jhrozek): temporarily disable make check to work around a FTBFS issue
|
|
|
|
|
#%check
|
|
|
|
|
#export MODULES_DIR=%{_httpd_moddir}
|
|
|
|
|
#export APXS2_OPTS='-S LIBEXECDIR=${MODULES_DIR}'
|
|
|
|
|
#%{make_build} test
|
2016-03-29 23:05:16 +00:00
|
|
|
|
2015-11-09 20:50:00 +00:00
|
|
|
%install
|
|
|
|
|
mkdir -p $RPM_BUILD_ROOT%{_httpd_moddir}
|
|
|
|
|
make install MODULES_DIR=$RPM_BUILD_ROOT%{_httpd_moddir}
|
|
|
|
|
|
|
|
|
|
install -m 755 -d $RPM_BUILD_ROOT%{_httpd_modconfdir}
|
|
|
|
|
echo 'LoadModule auth_openidc_module modules/mod_auth_openidc.so' > \
|
|
|
|
|
$RPM_BUILD_ROOT%{_httpd_modconfdir}/10-auth_openidc.conf
|
|
|
|
|
|
2016-03-21 21:28:09 +00:00
|
|
|
install -m 755 -d $RPM_BUILD_ROOT%{_httpd_confdir}
|
|
|
|
|
install -m 644 auth_openidc.conf $RPM_BUILD_ROOT%{_httpd_confdir}
|
|
|
|
|
# Adjust httpd cache location in install config file
|
|
|
|
|
sed -i 's!/var/cache/apache2/!/var/cache/httpd/!' $RPM_BUILD_ROOT%{_httpd_confdir}/auth_openidc.conf
|
|
|
|
|
install -m 700 -d $RPM_BUILD_ROOT%{httpd_pkg_cache_dir}
|
|
|
|
|
install -m 700 -d $RPM_BUILD_ROOT%{httpd_pkg_cache_dir}/metadata
|
|
|
|
|
install -m 700 -d $RPM_BUILD_ROOT%{httpd_pkg_cache_dir}/cache
|
|
|
|
|
|
|
|
|
|
|
2015-11-09 20:50:00 +00:00
|
|
|
%files
|
2016-01-12 10:44:59 +00:00
|
|
|
%if 0%{?rhel} && 0%{?rhel} < 7
|
|
|
|
|
%doc LICENSE.txt
|
|
|
|
|
%else
|
2015-11-09 20:50:00 +00:00
|
|
|
%license LICENSE.txt
|
2016-01-12 10:44:59 +00:00
|
|
|
%endif
|
2015-11-09 20:50:00 +00:00
|
|
|
%doc ChangeLog
|
2016-03-21 21:28:09 +00:00
|
|
|
%doc AUTHORS
|
|
|
|
|
%doc README.md
|
2015-11-09 20:50:00 +00:00
|
|
|
%{_httpd_moddir}/mod_auth_openidc.so
|
|
|
|
|
%config(noreplace) %{_httpd_modconfdir}/10-auth_openidc.conf
|
2016-03-21 21:28:09 +00:00
|
|
|
%config(noreplace) %{_httpd_confdir}/auth_openidc.conf
|
|
|
|
|
%dir %attr(0700, apache, apache) %{httpd_pkg_cache_dir}
|
|
|
|
|
%dir %attr(0700, apache, apache) %{httpd_pkg_cache_dir}/metadata
|
|
|
|
|
%dir %attr(0700, apache, apache) %{httpd_pkg_cache_dir}/cache
|
2015-11-09 20:50:00 +00:00
|
|
|
|
|
|
|
|
%changelog
|
2021-09-14 17:08:00 +00:00
|
|
|
* Tue Sep 14 2021 Sahana Prasad <sahana@redhat.com> - 2.4.9.1-2
|
|
|
|
|
- Rebuilt with OpenSSL 3.0.0
|
|
|
|
|
|
2021-08-18 13:45:57 +00:00
|
|
|
* Wed Aug 18 2021 Jakub Hrozek <jhrozek@redhat.com> - 2.4.9.1-1
|
|
|
|
|
- New upstream release
|
|
|
|
|
- Resolves: rhbz#1993566 - mod_auth_openidc-2.4.9.1 is available
|
|
|
|
|
|
2021-07-30 08:42:07 +00:00
|
|
|
* Fri Jul 30 2021 Jakub Hrozek <jhrozek@redhat.com> - 2.4.9-1
|
|
|
|
|
- Resolves: rhbz#1985153 - mod_auth_openidc-2.4.9 is available
|
|
|
|
|
- Resolves: rhbz#1986103 - CVE-2021-32786 mod_auth_openidc: open redirect
|
|
|
|
|
in oidc_validate_redirect_url()
|
|
|
|
|
- Resolves: rhbz#1986396 - CVE-2021-32791 mod_auth_openidc: hardcoded
|
|
|
|
|
static IV and AAD with a reused key in AES GCM
|
|
|
|
|
encryption
|
|
|
|
|
- Resolves: rhbz#1986398 - CVE-2021-32792 mod_auth_openidc: XSS when using
|
|
|
|
|
OIDCPreservePost On
|
|
|
|
|
|
2021-07-22 15:11:09 +00:00
|
|
|
* Thu Jul 22 2021 Fedora Release Engineering <releng@fedoraproject.org> - 2.4.8.4-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
|
|
|
|
|
|
2021-06-02 09:20:12 +00:00
|
|
|
* Wed Jun 2 2021 Jakub Hrozek <jhrozek@redhat.com> - 2.4.8.3-1
|
|
|
|
|
- New upstream release
|
|
|
|
|
- Resolves: rhbz#1966756 - mod_auth_openidc-2.4.8.3 is available
|
|
|
|
|
|
2021-05-10 12:17:30 +00:00
|
|
|
* Mon May 10 2021 Jakub Hrozek <jhrozek@redhat.com> - 2.4.8.2-1
|
|
|
|
|
- New upstream release
|
|
|
|
|
- Resolves: rhbz#1958466 - mod_auth_openidc-2.4.8.2 is available
|
|
|
|
|
|
|
|
|
|
* Thu May 6 2021 Jakub Hrozek <jhrozek@redhat.com> - 2.4.7.2-1
|
2021-05-06 07:54:22 +00:00
|
|
|
- New upstream release
|
|
|
|
|
- Resolves: rhbz#1900913 - mod_auth_openidc-2.4.7.2 is available
|
|
|
|
|
|
2021-04-30 12:16:13 +00:00
|
|
|
* Fri Apr 30 2021 Tomas Halman <thalman@redhat.com> - 2.4.4.1-3
|
|
|
|
|
- Remove unnecessary LTO patch
|
|
|
|
|
|
2021-02-26 14:58:09 +00:00
|
|
|
* Fri Feb 26 2021 Jakub Hrozek <jhrozek@redhat.com> - 2.4.4.1-1
|
|
|
|
|
- Temporarily disable check to get around a FTBFS issue (#1923374)
|
|
|
|
|
|
2021-01-26 20:38:09 +00:00
|
|
|
* Tue Jan 26 2021 Fedora Release Engineering <releng@fedoraproject.org> - 2.4.4.1-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
|
|
|
|
|
|
2020-09-04 08:50:47 +00:00
|
|
|
* Fri Sep 4 2020 Jakub Hrozek <jhrozek@redhat.com> - 2.4.4.1-1
|
|
|
|
|
- New upstream version 2.4.4.1
|
|
|
|
|
|
2020-09-01 20:52:17 +00:00
|
|
|
* Tue Sep 1 2020 Jakub Hrozek <jhrozek@redhat.com> - 2.4.4-1
|
|
|
|
|
- New upstream version 2.4.4
|
|
|
|
|
|
2020-08-27 15:51:19 +00:00
|
|
|
* Thu Aug 27 2020 Joe Orton <jorton@redhat.com> - 2.4.3-5
|
|
|
|
|
- update to use correct apxs via _httpd_apxs macro
|
|
|
|
|
|
2020-08-27 07:50:25 +00:00
|
|
|
* Thu Aug 27 2020 Joe Orton <jorton@redhat.com> - 2.4.3-4
|
|
|
|
|
- work around LTO build failure
|
|
|
|
|
|
2020-08-01 04:32:36 +00:00
|
|
|
* Sat Aug 01 2020 Fedora Release Engineering <releng@fedoraproject.org> - 2.4.3-3
|
|
|
|
|
- Second attempt - Rebuilt for
|
|
|
|
|
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
|
|
|
|
|
|
2020-07-28 08:14:52 +00:00
|
|
|
* Tue Jul 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 2.4.3-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
|
|
|
|
|
|
2020-07-14 13:12:53 +00:00
|
|
|
* Tue Jul 14 2020 Jakub Hrozek <jhrozek@redhat.com> - 2.4.3
|
|
|
|
|
- New upstream version 2.4.3
|
|
|
|
|
|
2020-05-10 16:47:15 +00:00
|
|
|
* Sun May 10 2020 Jakub Hrozek <jhrozek@redhat.com> - 2.4.2.1-1
|
|
|
|
|
- New upstream version 2.4.2.1
|
|
|
|
|
- Resolves: rhbz#1805104 - CVE-2019-20479 mod_auth_openidc: open redirect
|
|
|
|
|
issue exists in URLs with slash and backslash
|
|
|
|
|
[fedora-all]
|
|
|
|
|
- Resolves: rhbz#1816883 - mod_auth_openidc-2.4.2.1 is available
|
|
|
|
|
|
2020-02-13 00:30:50 +00:00
|
|
|
* Thu Feb 13 2020 Tom Stellard <tstellar@redhat.com> - 2.4.1-2
|
|
|
|
|
- Use make_build macro instead of just make
|
|
|
|
|
- https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
|
|
|
|
|
|
2020-02-04 09:16:55 +00:00
|
|
|
* Mon Feb 3 2020 Jakub Hrozek <jhrozek@redhat.com> - 2.4.1-1
|
|
|
|
|
- New upstream version 2.4.1
|
|
|
|
|
|
2020-01-29 13:47:29 +00:00
|
|
|
* Wed Jan 29 2020 Fedora Release Engineering <releng@fedoraproject.org> - 2.4.0.4-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
|
|
|
|
|
|
2019-11-21 14:36:10 +00:00
|
|
|
* Thu Nov 21 2019 Jakub Hrozek <jhrozek@redhat.com> - 2.4.0.4-1
|
|
|
|
|
- New upstream version 2.4.0.4
|
|
|
|
|
|
2019-10-15 11:26:33 +00:00
|
|
|
* Fri Oct 4 2019 Jakub Hrozek <jhrozek@redhat.com> - 2.4.0.3-1
|
2019-10-04 13:35:43 +00:00
|
|
|
- New upstream version 2.4.0.3
|
|
|
|
|
|
2019-08-23 06:56:58 +00:00
|
|
|
* Fri Aug 23 2019 Jakub Hrozek <jhrozek@redhat.com> - 2.4.0
|
|
|
|
|
- New upstream version 2.4.0
|
|
|
|
|
- Resolves: rhbz#1374884 - mod_auth_openidc-2.4.0 is available
|
|
|
|
|
|
2019-07-25 17:27:51 +00:00
|
|
|
* Thu Jul 25 2019 Fedora Release Engineering <releng@fedoraproject.org> - 2.3.7-5
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
|
|
|
|
|
|
2019-02-01 11:14:05 +00:00
|
|
|
* Fri Feb 01 2019 Fedora Release Engineering <releng@fedoraproject.org> - 2.3.7-4
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
|
|
|
|
|
|
2018-08-16 13:31:00 +00:00
|
|
|
* Thu Aug 16 2018 <jdennis@redhat.com> - 2.3.7-3
|
|
|
|
|
- update test-segfault.patch to match upstream
|
|
|
|
|
|
2018-08-14 20:05:22 +00:00
|
|
|
* Tue Aug 14 2018 <jdennis@redhat.com> - 2.3.7-2
|
|
|
|
|
- Resolves: rhbz# 1614977 - fix unit test segfault,
|
|
|
|
|
the problem was not limited exclusively to s390x, but s390x provoked it.
|
|
|
|
|
|
2018-08-01 21:23:06 +00:00
|
|
|
* Wed Aug 1 2018 <jdennis@redhat.com> - 2.3.7-1
|
|
|
|
|
- upgrade to upstream 2.3.7
|
|
|
|
|
|
2018-07-13 10:51:22 +00:00
|
|
|
* Fri Jul 13 2018 Fedora Release Engineering <releng@fedoraproject.org> - 2.3.5-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
|
|
|
|
|
|
2018-01-26 16:41:35 +00:00
|
|
|
* Wed May 23 2018 Patrick Uiterwijk <patrick@puiterwijk.org> - 2.3.5-1
|
|
|
|
|
- Rebase to 2.3.5
|
|
|
|
|
|
2018-02-09 08:05:11 +00:00
|
|
|
* Fri Feb 09 2018 Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 1.8.10.1-7
|
|
|
|
|
- Escape macros in %%changelog
|
|
|
|
|
|
2018-02-08 02:57:04 +00:00
|
|
|
* Thu Feb 08 2018 Fedora Release Engineering <releng@fedoraproject.org> - 1.8.10.1-6
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
|
|
|
|
|
|
2017-08-03 03:26:26 +00:00
|
|
|
* Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.8.10.1-5
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
|
|
|
|
|
|
2017-07-26 22:03:30 +00:00
|
|
|
* Wed Jul 26 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.8.10.1-4
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
|
|
|
|
|
|
2017-02-18 00:26:04 +00:00
|
|
|
* Sat Feb 18 2017 John Dennis <jdennis@redhat.com> - 1.8.10.1-3
|
|
|
|
|
- Resolves: #1423956 fails to build with openssl 1.1.x
|
|
|
|
|
Also rolls up all fixes to jose library before the change over to cjose
|
|
|
|
|
|
2017-02-10 21:32:23 +00:00
|
|
|
* Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.8.10.1-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
|
|
|
|
|
|
2016-07-12 15:31:07 +00:00
|
|
|
* Tue Jul 12 2016 John Dennis <jdennis@redhat.com> - 1.8.10.1-1
|
|
|
|
|
- Upgrade to new upstream
|
|
|
|
|
See /usr/share/doc/mod_auth_openidc/ChangeLog for details
|
|
|
|
|
|
2016-03-29 23:25:46 +00:00
|
|
|
* Tue Mar 29 2016 John Dennis <jdennis@redhat.com> - 1.8.8-4
|
2018-02-09 08:05:11 +00:00
|
|
|
- Add %%check to run test
|
2016-03-29 23:25:46 +00:00
|
|
|
|
|
|
|
|
* Wed Mar 23 2016 John Dennis <jdennis@redhat.com> - 1.8.8-3
|
|
|
|
|
- Make building with redis support optional (defaults to without)
|
|
|
|
|
|
2016-03-21 21:50:51 +00:00
|
|
|
* Mon Mar 21 2016 John Dennis <jdennis@redhat.com> - 1.8.8-2
|
|
|
|
|
- Add missing unpackaged files/directories
|
|
|
|
|
|
|
|
|
|
Add to doc: README.md, DISCLAIMER, AUTHORS
|
|
|
|
|
Add to httpd/conf.d: auth_openidc.conf
|
|
|
|
|
Add to /var/cache: /var/cache/httpd/mod_auth_openidc/cache
|
|
|
|
|
/var/cache/httpd/mod_auth_openidc/metadata
|
|
|
|
|
|
2016-03-10 12:35:52 +00:00
|
|
|
* Thu Mar 10 2016 Jan Pazdziora <jpazdziora@redhat.com> 1.8.8-1
|
|
|
|
|
- Update to 1.8.8 (#1316528)
|
|
|
|
|
|
2016-02-04 08:33:55 +00:00
|
|
|
* Thu Feb 04 2016 Fedora Release Engineering <releng@fedoraproject.org> - 1.8.7-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
|
|
|
|
|
|
2016-01-11 15:46:12 +00:00
|
|
|
* Sat Jan 09 2016 Fedora Release Monitoring <release-monitoring@fedoraproject.org> - 1.8.7-1
|
|
|
|
|
- Update to 1.8.7 (#1297080)
|
|
|
|
|
|
2015-11-09 20:50:00 +00:00
|
|
|
* Sat Nov 07 2015 Jan Pazdziora <jpazdziora@redhat.com> 1.8.6-1
|
|
|
|
|
- Initial packaging for Fedora 23.
|
