Commit Graph

452 Commits

Author SHA1 Message Date
Fedora Release Engineering
c0e9e1a02c - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-08-01 06:52:04 +00:00
Fedora Release Engineering
a79e9a93cf - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-07-28 12:44:28 +00:00
Jitka Plesnikova
29543a7139 Perl 5.32 rebuild 2020-06-22 17:42:20 +02:00
Matus Honek
9d8fa89777 Rebase to version 2.4.50
Resolves: #1742285
2020-06-17 16:33:10 +02:00
Tom Stellard
54bacfed35 Spec file cleanups
Add BuildRequres: gcc [1]
make_build [2] and make_install [3]

[1] https://docs.fedoraproject.org/en-US/packaging-guidelines/C_and_C++/#_buildrequires_and_requires
[2] https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
[3] https://docs.fedoraproject.org/en-US/packaging-guidelines/#_why_the_makeinstall_macro_should_not_be_used
2020-06-16 03:41:32 +00:00
Fedora Release Engineering
a01eca4e7f - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-01-29 20:19:26 +00:00
Fedora Release Engineering
3eaf4e4abf - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2019-07-25 23:29:39 +00:00
Jitka Plesnikova
1fb1d20a05 Perl 5.30 rebuild 2019-05-30 13:22:08 +02:00
Matúš Honěk
d91e3752b4 Rebase to upstream version 2.4.47 2019-02-13 17:55:21 +01:00
Fedora Release Engineering
f5aae857a3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2019-02-01 17:25:59 +00:00
Björn Esser
f6fb5e8a93
Rebuilt for libcrypt.so.2 (#1666033) 2019-01-14 19:10:54 +01:00
Matúš Honěk
8bd8644add Bump release version (to 2.4.46-11)
Fixes previous commit.
2018-12-17 17:11:26 +01:00
Matúš Honěk
3b59a4668d Reference default system-wide CA certificates in manpages
Resolves: #1611591
2018-12-17 16:56:07 +01:00
Matúš Honěk
939ce64f7f Revert "Fix: Cannot use SSL3 anymore"
This reverts commit 53b870b7db.

Turns out the OpenSSL setting SSL_OP_NO_SSLv3 by default means we really should
not use the SSLv3 anymore, so removing the patch that tried hard.
2018-10-16 11:05:03 +02:00
Matúš Honěk
b325dd4ca4 Backport upstream fixes for ITS 7595 - add OpenSSL EC support
Resolves: #1623495
2018-10-09 17:27:20 +02:00
Matúš Honěk
53b870b7db Fix: Cannot use SSL3 anymore
Resolves: #1592431
2018-08-14 16:11:47 +02:00
Fedora Release Engineering
7b3fb1195a - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2018-07-13 15:07:42 +00:00
Matúš Honěk
db6986970e Build with LDAP_USE_NON_BLOCKING_TLS
The default bahviour should not change as the default timeout is
infinity.

Resolves: #1594928
2018-07-06 19:27:37 +02:00
Matúš Honěk
8b7d2a395d Remove unused leftover MozNSS Compat. Layer references (cont.)
A bit more for the before previous commmit 5411c84.

Related: #1557967
2018-07-06 19:16:02 +02:00
Petr Písař
15e6edc515 Perl 5.28 rebuild 2018-07-06 09:36:41 +02:00
Matúš Honěk
5411c8463a Remove unused leftover MozNSS Compat. Layer references
Related: #1557967
2018-07-04 16:14:00 +02:00
Matúš Honěk
799c2121f4 Merge branch 'f28' into 'master' for linearity 2018-07-04 13:32:13 +02:00
Matúš Honěk
a9731a320b MozNSS Compat. Layer: Make log messages more clear
Resolves: #1598103
2018-07-04 13:07:08 +02:00
Jitka Plesnikova
b7ad18970b Perl 5.28 rebuild 2018-06-27 21:43:08 +02:00
Matúš Honěk
7150aca353 Rebase to version OpenLDAP 2.4.46
Resolves: #1559652
2018-03-27 18:46:56 +02:00
Matúš Honěk
81afb5768a Utilize system-wide crypto-policies
Resolves: #1483979
2018-03-05 09:48:07 +01:00
Matúš Honěk
6f8a4c6436 Drop superfluous back-sql linking patch
This patch is not needed any more as we do not build with back-sql at
all.

Related: #1548676
2018-03-01 10:18:33 +01:00
Matúš Honěk
cd7bdcf821 fix: openldap does not use Fedora build flags
- %configure introduces the correct flags, however we need* to set our
  custom CFLAGS before the actual run of ./configure, thus we request
  the flags explicitly using %set_build_flags
- dropping %{optflags} which is just a legacy version of
  %{build_cflags} which is already included in $set_build_flags set

* ./configure plays with the flags, hence customizing the CFLAGS after
  %configure does not have a desired effect

Resolves: #1548676
2018-03-01 10:13:54 +01:00
Matúš Honěk
54acca337f MozNSS Compat. Layer: CA certs extraction fail should be fatal
Resolves: #1550110
2018-02-28 19:24:21 +01:00
Matúš Honěk
cd6ded4588 Bump release number
Related: #1270678, #1537259
2018-02-21 17:36:13 +01:00
Matúš Honěk
44d9f0fe1b Complete change: Disable TLSMC in F29+
- completes commit 60f1a08
2018-02-14 14:09:27 +01:00
Igor Gnatenko
ed8fb8d19b
systemd-units → systemd
Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
2018-02-10 18:52:08 +01:00
Igor Gnatenko
4d3fac9347
switch to %systemd_requires
Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
2018-02-10 18:51:55 +01:00
Igor Gnatenko
c358051be4
remove unneeded Requires(post)
Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
2018-02-10 18:51:00 +01:00
Igor Gnatenko
96650fcc56
Switch to %ldconfig_scriptlets
Reference: https://fedoraproject.org/wiki/Changes/Removing_ldconfig_scriptlets
Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
2018-02-10 18:45:53 +01:00
Igor Gnatenko
f08cb7ec48
don't call ldconfig in servers subacpakge
servers subpkg installs everything into private libdir, so no need to
call ldconfig (since there is no ld.so.conf for it).

Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
2018-02-10 18:44:53 +01:00
Igor Gnatenko
7472792967
remove obsolete Group tag
Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
2018-02-10 18:42:09 +01:00
Igor Gnatenko
60f1a0883e
disable TLSMC in F29+
It should not affect any active Fedora branches, but will save time in
future.

Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
2018-02-10 11:18:21 +01:00
Igor Gnatenko
e3677af8bb
Escape macros in %changelog
Reference: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/Y2ZUKK2B7T2IKXPMODNF6HB2O5T5TS6H/
Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
2018-02-09 09:05:20 +01:00
Matúš Honěk
eff4749dd8 Drop TCP wrappers support
Resolves: #1531487
2018-02-07 18:24:53 +01:00
Matúš Honěk
7264811847 MozNSS Compat. Layer: fix incorrect parsing of CACertDir
NSS DB type prefix was not taken into account at all. Due to this the
path might not have been stat-ed. Thus, last part of the path would
have been considered an NSS DB name prefix which would be incorrect.

(cherry picked from commit 7f41b4a1ffe61c03d65896d82fc6b72a2710c492)
(originally #1533955)

Related: #1400570
2018-02-07 18:01:42 +01:00
Matúš Honěk
8c29eeec6a MozNSS Compat. Layer: fix PIN disclaimer not always shown
- ad #1516409#c7 case 1

(cherry picked from commit 6e2bfcadc598ed202cc77e34d5bfdea3d6ed8fbe)
(orginally #1516409)

Related: #1400570
2018-02-07 18:01:16 +01:00
Matúš Honěk
e6c4c72153 MozNSS Compat. Layer: fix recursive directory deletion
- ad #1516409#c7 case 2

(cherry picked from commit c66191c12b1bf372204cf3bf0b31759e7b0bd133)
(originally #1516409)

Related: #1400570
2018-02-07 17:53:30 +01:00
Matúš Honěk
716f3439ac MozNSS Compat. Layer: Ensure consistency of a PEM dir before usage
+ Warn just before use of a PIN about key file extraction

(cherry picked from commit 856ec5d38c45ffe71774a4d86a36177d3c4ca372)
(originally #1516409)

Related: #1400570
2018-02-07 17:36:46 +01:00
Matúš Honěk
68ef0e0238 MozNSS Compat. Layer: Enable usage of NSS DB with PEM cert/key
+ Fix a possible invalid dereference (covscan)

(cherry picked from commit 7abf6fbae6df9bc7cfdd9d28cc52f7676a123d9b)
(originally #1525485)

Related: #1400570
2018-02-07 17:28:16 +01:00
Björn Esser
1a23456530
Rebuilt for switch to libxcrypt 2018-01-20 23:07:22 +01:00
Matúš Honěk
d181b0472d Fix various MozNSS compatibility layer issues
+ Force write file with fsync to avoid race conditions
+ Always filestamp both sql and dbm NSS DB variants to not rely on default DB type prefix
+ Allow missing cert and key which is a valid usecase
+ Create extraction folder only in /tmp to simplify selinux rules
+ Fix Covscan issues

Related: #1400570
2017-12-06 15:13:49 +01:00
Matus Honek
d8e109406e Merge #2 Do not call deleted script from %post section 2017-11-14 14:24:32 +00:00
Matúš Honěk
a33df4e168 Build with OpenSSL with MozNSS compatibility layer
Resolves: #1400570
2017-11-03 20:43:25 +01:00
Guido Aulisi
031e2b95cc Do not call deleted script from %post section
Commit b730f13ce0 deleted certificate
generation scripts, but create_certdb.sh was still called from
%post section.
2017-10-31 23:21:05 +01:00