RHEL 9.0.0 Alpha bootstrap
The content of this branch was automatically imported from Fedora ELN with the following as its source: https://src.fedoraproject.org/rpms/p11-kit#3be0aa7251dff57dc264a6895f915c2eaf36ed2e
This commit is contained in:
Petr Šabata
parent
edbd9db70b
commit
0bc757a755
35
.gitignore
vendored
35
.gitignore
vendored
@ -0,0 +1,35 @@
|
|||||||
|
/p11-kit-*.tar.gz
|
||||||
|
/.*.log
|
||||||
|
/*.src.rpm
|
||||||
|
/p11-kit-0.*/
|
||||||
|
/x86_64/
|
||||||
|
/trust-extract-compat
|
||||||
|
/p11-kit-0.23.9.tar.gz
|
||||||
|
/p11-kit-client.service
|
||||||
|
/trust-extract-compat
|
||||||
|
/p11-kit-0.23.9.tar.gz
|
||||||
|
/p11-kit-client.service
|
||||||
|
/trust-extract-compat
|
||||||
|
/p11-kit-0.23.10.tar.gz
|
||||||
|
/p11-kit-client.service
|
||||||
|
/trust-extract-compat
|
||||||
|
/p11-kit-0.23.12.tar.gz
|
||||||
|
/p11-kit-client.service
|
||||||
|
/trust-extract-compat
|
||||||
|
/p11-kit-0.23.14.tar.gz
|
||||||
|
/p11-kit-client.service
|
||||||
|
/trust-extract-compat
|
||||||
|
/p11-kit-0.23.15.tar.gz
|
||||||
|
/p11-kit-client.service
|
||||||
|
/trust-extract-compat
|
||||||
|
/p11-kit-0.23.16.tar.gz
|
||||||
|
/p11-kit-client.service
|
||||||
|
/trust-extract-compat
|
||||||
|
/p11-kit-0.23.16.1.tar.gz
|
||||||
|
/p11-kit-client.service
|
||||||
|
/trust-extract-compat
|
||||||
|
/p11-kit-0.23.18.1.tar.gz
|
||||||
|
/p11-kit-0.23.19.tar.xz
|
||||||
|
/p11-kit-0.23.19.tar.xz.sig
|
||||||
|
/p11-kit-0.23.20.tar.xz
|
||||||
|
/p11-kit-0.23.21.tar.xz
|
||||||
24
.packit.yaml
Normal file
24
.packit.yaml
Normal file
@ -0,0 +1,24 @@
|
|||||||
|
specfile_path: p11-kit.spec
|
||||||
|
synced_files:
|
||||||
|
- p11-kit.spec
|
||||||
|
- .packit.yaml
|
||||||
|
upstream_package_name: p11-kit
|
||||||
|
downstream_package_name: p11-kit
|
||||||
|
|
||||||
|
# Use only populated spec files and upstream sources.
|
||||||
|
actions:
|
||||||
|
post-upstream-clone:
|
||||||
|
- wget https://src.fedoraproject.org/rpms/p11-kit/raw/master/f/p11-kit.spec
|
||||||
|
- wget https://src.fedoraproject.org/rpms/p11-kit/raw/master/f/p11-kit-client.service
|
||||||
|
- wget https://src.fedoraproject.org/rpms/p11-kit/raw/master/f/trust-extract-compat
|
||||||
|
get-current-version:
|
||||||
|
- "git describe --abbrev=0"
|
||||||
|
create-archive:
|
||||||
|
- "wget https://github.com/p11-glue/p11-kit/releases/download/$PACKIT_PROJECT_VERSION/p11-kit-$PACKIT_PROJECT_VERSION.tar.xz"
|
||||||
|
- "wget https://github.com/p11-glue/p11-kit/releases/download/$PACKIT_PROJECT_VERSION/p11-kit-$PACKIT_PROJECT_VERSION.tar.xz.sig"
|
||||||
|
|
||||||
|
jobs:
|
||||||
|
- job: propose_downstream
|
||||||
|
trigger: release
|
||||||
|
metadata:
|
||||||
|
dist_git_branches: fedora-all
|
||||||
3
README.packit
Normal file
3
README.packit
Normal file
@ -0,0 +1,3 @@
|
|||||||
|
This repository is maintained by packit.
|
||||||
|
https://packit.dev/
|
||||||
|
The file was generated using packit 0.14.1.dev26+gb5da23c.
|
||||||
BIN
gpgkey-462225C3B46F34879FC8496CD605848ED7E69871.gpg
Normal file
BIN
gpgkey-462225C3B46F34879FC8496CD605848ED7E69871.gpg
Normal file
Binary file not shown.
BIN
p11-kit-0.23.20.tar.xz.sig
Normal file
BIN
p11-kit-0.23.20.tar.xz.sig
Normal file
Binary file not shown.
BIN
p11-kit-0.23.21.tar.xz.sig
Normal file
BIN
p11-kit-0.23.21.tar.xz.sig
Normal file
Binary file not shown.
11
p11-kit-client.service
Normal file
11
p11-kit-client.service
Normal file
@ -0,0 +1,11 @@
|
|||||||
|
[Unit]
|
||||||
|
Description=p11-kit client
|
||||||
|
|
||||||
|
[Service]
|
||||||
|
Type=oneshot
|
||||||
|
RemainAfterExit=true
|
||||||
|
RuntimeDirectory=p11-kit
|
||||||
|
ExecStart=/usr/bin/true
|
||||||
|
|
||||||
|
[Install]
|
||||||
|
WantedBy=default.target
|
||||||
441
p11-kit.spec
Normal file
441
p11-kit.spec
Normal file
@ -0,0 +1,441 @@
|
|||||||
|
# This spec file has been automatically updated
|
||||||
|
Version: 0.23.21
|
||||||
|
Release: 2%{?dist}
|
||||||
|
Name: p11-kit
|
||||||
|
Summary: Library for loading and sharing PKCS#11 modules
|
||||||
|
|
||||||
|
License: BSD
|
||||||
|
URL: http://p11-glue.freedesktop.org/p11-kit.html
|
||||||
|
Source0: https://github.com/p11-glue/p11-kit/releases/download/%{version}/p11-kit-%{version}.tar.xz
|
||||||
|
Source1: https://github.com/p11-glue/p11-kit/releases/download/%{version}/p11-kit-%{version}.tar.xz.sig
|
||||||
|
Source2: gpgkey-462225C3B46F34879FC8496CD605848ED7E69871.gpg
|
||||||
|
Source3: trust-extract-compat
|
||||||
|
Source4: p11-kit-client.service
|
||||||
|
|
||||||
|
BuildRequires: gcc
|
||||||
|
BuildRequires: libtasn1-devel >= 2.3
|
||||||
|
BuildRequires: libffi-devel
|
||||||
|
BuildRequires: gettext
|
||||||
|
BuildRequires: gtk-doc
|
||||||
|
BuildRequires: meson
|
||||||
|
BuildRequires: systemd-devel
|
||||||
|
BuildRequires: bash-completion
|
||||||
|
# Work around for https://bugzilla.redhat.com/show_bug.cgi?id=1497147
|
||||||
|
# Remove this once it is fixed
|
||||||
|
BuildRequires: pkgconfig(glib-2.0)
|
||||||
|
BuildRequires: gnupg2
|
||||||
|
|
||||||
|
%description
|
||||||
|
p11-kit provides a way to load and enumerate PKCS#11 modules, as well
|
||||||
|
as a standard configuration setup for installing PKCS#11 modules in
|
||||||
|
such a way that they're discoverable.
|
||||||
|
|
||||||
|
|
||||||
|
%package devel
|
||||||
|
Summary: Development files for %{name}
|
||||||
|
Requires: %{name}%{?_isa} = %{version}-%{release}
|
||||||
|
|
||||||
|
%description devel
|
||||||
|
The %{name}-devel package contains libraries and header files for
|
||||||
|
developing applications that use %{name}.
|
||||||
|
|
||||||
|
|
||||||
|
%package trust
|
||||||
|
Summary: System trust module from %{name}
|
||||||
|
Requires: %{name}%{?_isa} = %{version}-%{release}
|
||||||
|
Requires(post): %{_sbindir}/update-alternatives
|
||||||
|
Requires(postun): %{_sbindir}/update-alternatives
|
||||||
|
Conflicts: nss < 3.14.3-9
|
||||||
|
|
||||||
|
%description trust
|
||||||
|
The %{name}-trust package contains a system trust PKCS#11 module which
|
||||||
|
contains certificate anchors and black lists.
|
||||||
|
|
||||||
|
|
||||||
|
%package server
|
||||||
|
Summary: Server and client commands for %{name}
|
||||||
|
Requires: %{name}%{?_isa} = %{version}-%{release}
|
||||||
|
|
||||||
|
%description server
|
||||||
|
The %{name}-server package contains command line tools that enable to
|
||||||
|
export PKCS#11 modules through a Unix domain socket. Note that this
|
||||||
|
feature is still experimental.
|
||||||
|
|
||||||
|
|
||||||
|
# solution taken from icedtea-web.spec
|
||||||
|
%define multilib_arches ppc64 sparc64 x86_64 ppc64le
|
||||||
|
%ifarch %{multilib_arches}
|
||||||
|
%define alt_ckbi libnssckbi.so.%{_arch}
|
||||||
|
%else
|
||||||
|
%define alt_ckbi libnssckbi.so
|
||||||
|
%endif
|
||||||
|
|
||||||
|
|
||||||
|
%prep
|
||||||
|
gpgv2 --keyring %{SOURCE2} %{SOURCE1} %{SOURCE0}
|
||||||
|
|
||||||
|
%autosetup -p1
|
||||||
|
|
||||||
|
%build
|
||||||
|
# These paths are the source paths that come from the plan here:
|
||||||
|
# https://fedoraproject.org/wiki/Features/SharedSystemCertificates:SubTasks
|
||||||
|
%meson -Dgtk_doc=true -Dman=true -Dtrust_paths=%{_sysconfdir}/pki/ca-trust/source:%{_datadir}/pki/ca-trust-source
|
||||||
|
%meson_build
|
||||||
|
|
||||||
|
%install
|
||||||
|
%meson_install
|
||||||
|
mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/pkcs11/modules
|
||||||
|
install -p -m 755 %{SOURCE3} $RPM_BUILD_ROOT%{_libexecdir}/p11-kit/
|
||||||
|
# Install the example conf with %%doc instead
|
||||||
|
mkdir -p $RPM_BUILD_ROOT%{_docdir}/%{name}
|
||||||
|
mv $RPM_BUILD_ROOT%{_sysconfdir}/pkcs11/pkcs11.conf.example $RPM_BUILD_ROOT%{_docdir}/%{name}/pkcs11.conf.example
|
||||||
|
mkdir -p $RPM_BUILD_ROOT%{_userunitdir}
|
||||||
|
install -p -m 644 %{SOURCE4} $RPM_BUILD_ROOT%{_userunitdir}
|
||||||
|
%find_lang %{name}
|
||||||
|
|
||||||
|
%check
|
||||||
|
%meson_test
|
||||||
|
|
||||||
|
|
||||||
|
%post trust
|
||||||
|
%{_sbindir}/update-alternatives --install %{_libdir}/libnssckbi.so \
|
||||||
|
%{alt_ckbi} %{_libdir}/pkcs11/p11-kit-trust.so 30
|
||||||
|
|
||||||
|
%postun trust
|
||||||
|
if [ $1 -eq 0 ] ; then
|
||||||
|
# package removal
|
||||||
|
%{_sbindir}/update-alternatives --remove %{alt_ckbi} %{_libdir}/pkcs11/p11-kit-trust.so
|
||||||
|
fi
|
||||||
|
|
||||||
|
|
||||||
|
%files -f %{name}.lang
|
||||||
|
%{!?_licensedir:%global license %%doc}
|
||||||
|
%license COPYING
|
||||||
|
%doc AUTHORS NEWS README
|
||||||
|
%{_docdir}/%{name}/pkcs11.conf.example
|
||||||
|
%dir %{_sysconfdir}/pkcs11
|
||||||
|
%dir %{_sysconfdir}/pkcs11/modules
|
||||||
|
%dir %{_datadir}/p11-kit
|
||||||
|
%dir %{_datadir}/p11-kit/modules
|
||||||
|
%dir %{_libexecdir}/p11-kit
|
||||||
|
%{_bindir}/p11-kit
|
||||||
|
%{_libdir}/libp11-kit.so.*
|
||||||
|
%{_libdir}/p11-kit-proxy.so
|
||||||
|
%{_libexecdir}/p11-kit/p11-kit-remote
|
||||||
|
%{_mandir}/man1/trust.1.gz
|
||||||
|
%{_mandir}/man8/p11-kit.8.gz
|
||||||
|
%{_mandir}/man5/pkcs11.conf.5.gz
|
||||||
|
%{_datadir}/bash-completion/completions/p11-kit
|
||||||
|
|
||||||
|
%files devel
|
||||||
|
%{_includedir}/p11-kit-1/
|
||||||
|
%{_libdir}/libp11-kit.so
|
||||||
|
%{_libdir}/pkgconfig/p11-kit-1.pc
|
||||||
|
%doc %{_datadir}/gtk-doc/
|
||||||
|
|
||||||
|
%files trust
|
||||||
|
%{_bindir}/trust
|
||||||
|
%dir %{_libdir}/pkcs11
|
||||||
|
%ghost %{_libdir}/libnssckbi.so
|
||||||
|
%{_libdir}/pkcs11/p11-kit-trust.so
|
||||||
|
%{_datadir}/p11-kit/modules/p11-kit-trust.module
|
||||||
|
%{_libexecdir}/p11-kit/trust-extract-compat
|
||||||
|
%{_datadir}/bash-completion/completions/trust
|
||||||
|
|
||||||
|
%files server
|
||||||
|
%{_libdir}/pkcs11/p11-kit-client.so
|
||||||
|
%{_userunitdir}/p11-kit-client.service
|
||||||
|
%{_libexecdir}/p11-kit/p11-kit-server
|
||||||
|
%{_userunitdir}/p11-kit-server.service
|
||||||
|
%{_userunitdir}/p11-kit-server.socket
|
||||||
|
|
||||||
|
|
||||||
|
%changelog
|
||||||
|
* Tue Aug 18 2020 Packit Service <user-cont-team+packit-service@redhat.com> - 0.23.21-2
|
||||||
|
- new upstream release: 0.23.21
|
||||||
|
|
||||||
|
* Tue Jul 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 0.23.20-2
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
|
||||||
|
|
||||||
|
* Wed Jan 29 2020 Daiki Ueno <dueno@redhat.com> - 0.23.20-1
|
||||||
|
- Update to upstream 0.23.20 release
|
||||||
|
|
||||||
|
* Wed Jan 22 2020 Daiki Ueno <dueno@redhat.com> - 0.23.19-1
|
||||||
|
- Update to upstream 0.23.19 release
|
||||||
|
- Check archive signature in %%prep
|
||||||
|
- Switch to using Meson as the build system
|
||||||
|
|
||||||
|
* Mon Sep 30 2019 Daiki Ueno <dueno@redhat.com> - 0.23.18.1-1
|
||||||
|
- Update to upstream 0.23.18.1 release
|
||||||
|
|
||||||
|
* Thu Jul 25 2019 Fedora Release Engineering <releng@fedoraproject.org> - 0.23.16.1-2
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
|
||||||
|
|
||||||
|
* Thu May 23 2019 Daiki Ueno <dueno@redhat.com> - 0.23.16.1-1
|
||||||
|
- Update to upstream 0.23.16.1 release
|
||||||
|
|
||||||
|
* Thu May 23 2019 Daiki Ueno <dueno@redhat.com> - 0.23.16-1
|
||||||
|
- Update to upstream 0.23.16 release
|
||||||
|
|
||||||
|
* Mon Feb 18 2019 Daiki Ueno <dueno@redhat.com> - 0.23.15-3
|
||||||
|
- trust: Ignore unreadable content in anchors
|
||||||
|
|
||||||
|
* Fri Feb 01 2019 Fedora Release Engineering <releng@fedoraproject.org> - 0.23.15-2
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
|
||||||
|
|
||||||
|
* Mon Jan 21 2019 Daiki Ueno <dueno@redhat.com> - 0.23.15-1
|
||||||
|
- Update to upstream 0.23.15 release
|
||||||
|
|
||||||
|
* Fri Jan 11 2019 Nils Philippsen <nils@tiptoe.de> - 0.23.14-3
|
||||||
|
- use spaces instead of tabs consistently
|
||||||
|
- prefer fixed closures to libffi closures (#1656245, patch by Daiki Ueno)
|
||||||
|
|
||||||
|
* Mon Oct 29 2018 James Antill <james.antill@redhat.com> - 0.23.14-2
|
||||||
|
- Remove ldconfig scriptlet, now done via. transfiletrigger in glibc.
|
||||||
|
|
||||||
|
* Fri Sep 07 2018 Daiki Ueno <dueno@redhat.com> - 0.23.14-1
|
||||||
|
- Update to upstream 0.23.14 release
|
||||||
|
|
||||||
|
* Wed Aug 15 2018 Daiki Ueno <dueno@redhat.com> - 0.23.13-3
|
||||||
|
- Forcibly link with libpthread to avoid regressions (rhbz#1615038)
|
||||||
|
|
||||||
|
* Wed Aug 15 2018 Daiki Ueno <dueno@redhat.com> - 0.23.13-2
|
||||||
|
- Fix invalid memory access on proxy cleanup
|
||||||
|
|
||||||
|
* Fri Aug 10 2018 Daiki Ueno <dueno@redhat.com> - 0.23.13-1
|
||||||
|
- Update to upstream 0.23.13 release
|
||||||
|
|
||||||
|
* Fri Jul 13 2018 Fedora Release Engineering <releng@fedoraproject.org> - 0.23.12-2
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
|
||||||
|
|
||||||
|
* Wed May 30 2018 Daiki Ueno <dueno@redhat.com> - 0.23.12-1
|
||||||
|
- Update to upstream 0.23.11 release
|
||||||
|
|
||||||
|
* Wed Feb 28 2018 Daiki Ueno <dueno@redhat.com> - 0.23.10-1
|
||||||
|
- Update to upstream 0.23.10 release
|
||||||
|
|
||||||
|
* Thu Feb 08 2018 Fedora Release Engineering <releng@fedoraproject.org> - 0.23.9-3
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
|
||||||
|
|
||||||
|
* Thu Oct 05 2017 Daiki Ueno <dueno@redhat.com> - 0.23.9-2
|
||||||
|
- server: Make it possible to eval envvar settings
|
||||||
|
|
||||||
|
* Wed Oct 04 2017 Daiki Ueno <dueno@redhat.com> - 0.23.9-1
|
||||||
|
- Update to upstream 0.23.9
|
||||||
|
|
||||||
|
* Fri Aug 25 2017 Kai Engert <kaie@redhat.com> - 0.23.8-2
|
||||||
|
- Fix a regression caused by a recent nss.rpm change, add a %%ghost file
|
||||||
|
for %%{_libdir}/libnssckbi.so that p11-kit-trust scripts install.
|
||||||
|
|
||||||
|
* Tue Aug 15 2017 Daiki Ueno <dueno@redhat.com> - 0.23.8-1
|
||||||
|
- Update to 0.23.8 release
|
||||||
|
|
||||||
|
* Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.23.7-3
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
|
||||||
|
|
||||||
|
* Thu Jul 27 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.23.7-2
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
|
||||||
|
|
||||||
|
* Fri Jun 2 2017 Daiki Ueno <dueno@redhat.com> - 0.23.7-1
|
||||||
|
- Update to 0.23.7 release
|
||||||
|
|
||||||
|
* Thu May 18 2017 Daiki Ueno <dueno@redhat.com> - 0.23.5-3
|
||||||
|
- Update p11-kit-modifiable.patch to simplify the logic
|
||||||
|
|
||||||
|
* Thu May 18 2017 Daiki Ueno <dueno@redhat.com> - 0.23.5-2
|
||||||
|
- Make "trust anchor --remove" work again
|
||||||
|
|
||||||
|
* Thu Mar 2 2017 Daiki Ueno <dueno@redhat.com> - 0.23.5-1
|
||||||
|
- Update to 0.23.5 release
|
||||||
|
- Rename -tools subpackage to -server and remove systemd unit files
|
||||||
|
|
||||||
|
* Fri Feb 24 2017 Daiki Ueno <dueno@redhat.com> - 0.23.4-3
|
||||||
|
- Move p11-kit command back to main package
|
||||||
|
|
||||||
|
* Fri Feb 24 2017 Daiki Ueno <dueno@redhat.com> - 0.23.4-2
|
||||||
|
- Split out command line tools to -tools subpackage, to avoid a
|
||||||
|
multilib issue with the main package. Suggested by Yanko Kaneti.
|
||||||
|
|
||||||
|
* Wed Feb 22 2017 Daiki Ueno <dueno@redhat.com> - 0.23.4-1
|
||||||
|
- Update to 0.23.4 release
|
||||||
|
|
||||||
|
* Sat Feb 11 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.23.3-3
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
|
||||||
|
|
||||||
|
* Fri Jan 6 2017 Daiki Ueno <dueno@redhat.com> - 0.23.3-2
|
||||||
|
- Use internal hash implementation instead of NSS (#1390598)
|
||||||
|
|
||||||
|
* Tue Dec 20 2016 Daiki Ueno <dueno@redhat.com> - 0.23.3-1
|
||||||
|
- Update to 0.23.3 release
|
||||||
|
- Adjust executables location from %%libdir to %%libexecdir
|
||||||
|
|
||||||
|
* Thu Feb 04 2016 Fedora Release Engineering <releng@fedoraproject.org> - 0.23.2-2
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
|
||||||
|
|
||||||
|
* Tue Jan 12 2016 Martin Preisler <mpreisle@redhat.com> - 0.23.2-1
|
||||||
|
- Update to stable 0.23.2 release
|
||||||
|
|
||||||
|
* Tue Jun 30 2015 Martin Preisler <mpreisle@redhat.com> - 0.23.1-4
|
||||||
|
- In proxy module don't call C_Finalize on a forked process [#1217915]
|
||||||
|
- Do not deinitialize libffi's wrapper functions [#1217915]
|
||||||
|
|
||||||
|
* Thu Jun 18 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.23.1-3
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
|
||||||
|
|
||||||
|
* Sat Feb 21 2015 Till Maas <opensource@till.name> - 0.23.1-2
|
||||||
|
- Rebuilt for Fedora 23 Change
|
||||||
|
https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code
|
||||||
|
|
||||||
|
* Fri Feb 20 2015 Stef Walter <stefw@redhat.com> - 0.23.1-1
|
||||||
|
- Update to 0.23.1 release
|
||||||
|
|
||||||
|
* Thu Oct 09 2014 Stef Walter <stefw@redhat.com> - 0.22.1-1
|
||||||
|
- Update to 0.22.1 release
|
||||||
|
- Use SubjectKeyIdentifier as a CKA_ID if possible rhbz#1148895
|
||||||
|
|
||||||
|
* Sat Oct 04 2014 Stef Walter <stefw@redhat.com> 0.22.0-1
|
||||||
|
- Update to 0.22.0 release
|
||||||
|
|
||||||
|
* Wed Sep 17 2014 Stef Walter <stefw@redhat.com> 0.21.3-1
|
||||||
|
- Update to 0.21.3 release
|
||||||
|
- Includes definitions for trust extensions rhbz#1136817
|
||||||
|
|
||||||
|
* Fri Sep 05 2014 Stef Walter <stefw@redhat.com> 0.21.2-1
|
||||||
|
- Update to 0.21.2 release
|
||||||
|
- Fix problems with erroneous messages printed rhbz#1133857
|
||||||
|
|
||||||
|
* Sun Aug 17 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.21.1-2
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
|
||||||
|
|
||||||
|
* Thu Aug 07 2014 Stef Walter <stefw@redhat.com> - 0.21.1-1
|
||||||
|
- Update to 0.21.1 release
|
||||||
|
|
||||||
|
* Wed Jul 30 2014 Tom Callaway <spot@fedoraproject.org> - 0.20.3-3
|
||||||
|
- fix license handling
|
||||||
|
|
||||||
|
* Fri Jul 04 2014 Stef Walter <stefw@redhat.com> - 0.20.3-2
|
||||||
|
- Update to stable 0.20.3 release
|
||||||
|
|
||||||
|
* Fri Jun 06 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.20.2-3
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
|
||||||
|
|
||||||
|
* Sat Jan 25 2014 Ville Skyttä <ville.skytta@iki.fi> - 0.20.2-2
|
||||||
|
- Own the %%{_libdir}/pkcs11 dir in -trust.
|
||||||
|
|
||||||
|
* Tue Jan 14 2014 Stef Walter <stefw@redhat.com> - 0.20.2-1
|
||||||
|
- Update to upstream stable 0.20.2 release
|
||||||
|
- Fix regression involving blacklisted anchors [#1041328]
|
||||||
|
- Support ppc64le in build [#1052707]
|
||||||
|
|
||||||
|
* Mon Sep 09 2013 Stef Walter <stefw@redhat.com> - 0.20.1-1
|
||||||
|
- Update to upstream stable 0.20.1 release
|
||||||
|
- Extract compat trust data after we've changes
|
||||||
|
- Skip compat extraction if running as non-root
|
||||||
|
- Better failure messages when removing anchors
|
||||||
|
|
||||||
|
* Thu Aug 29 2013 Stef Walter <stefw@redhat.com> - 0.19.4-1
|
||||||
|
- Update to new upstream 0.19.4 release
|
||||||
|
|
||||||
|
* Sat Aug 03 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.19.3-2
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
|
||||||
|
|
||||||
|
* Wed Jul 24 2013 Stef Walter <stefw@redhat.com> - 0.19.3-1
|
||||||
|
- Update to new upstream 0.19.3 release (#967822)
|
||||||
|
|
||||||
|
* Wed Jun 05 2013 Stef Walter <stefw@redhat.com> - 0.18.3-1
|
||||||
|
- Update to new upstream stable release
|
||||||
|
- Fix intermittent firefox cert validation issues (#960230)
|
||||||
|
- Include the manual pages in the package
|
||||||
|
|
||||||
|
* Tue May 14 2013 Stef Walter <stefw@redhat.com> - 0.18.2-1
|
||||||
|
- Update to new upstream stable release
|
||||||
|
- Reduce the libtasn1 dependency minimum version
|
||||||
|
|
||||||
|
* Thu May 02 2013 Stef Walter <stefw@redhat.com> - 0.18.1-1
|
||||||
|
- Update to new upstream stable release
|
||||||
|
- 'p11-kit extract-trust' lives in libdir
|
||||||
|
|
||||||
|
* Thu Apr 04 2013 Stef Walter <stefw@redhat.com> - 0.18.0-1
|
||||||
|
- Update to new upstream stable release
|
||||||
|
- Various logging tweaks (#928914, #928750)
|
||||||
|
- Make the 'p11-kit extract-trust' explicitly reject
|
||||||
|
additional arguments
|
||||||
|
|
||||||
|
* Thu Mar 28 2013 Stef Walter <stefw@redhat.com> - 0.17.5-1
|
||||||
|
- Make 'p11-kit extract-trust' call update-ca-trust
|
||||||
|
- Work around 32-bit oveflow of certificate dates
|
||||||
|
- Build fixes
|
||||||
|
|
||||||
|
* Tue Mar 26 2013 Stef Walter <stefw@redhat.com> - 0.17.4-2
|
||||||
|
- Pull in patch from upstream to fix build on ppc (#927394)
|
||||||
|
|
||||||
|
* Wed Mar 20 2013 Stef Walter <stefw@redhat.com> - 0.17.4-1
|
||||||
|
- Update to upstream version 0.17.4
|
||||||
|
|
||||||
|
* Mon Mar 18 2013 Stef Walter <stefw@redhat.com> - 0.17.3-1
|
||||||
|
- Update to upstream version 0.17.3
|
||||||
|
- Put the trust input paths in the right order
|
||||||
|
|
||||||
|
* Tue Mar 12 2013 Stef Walter <stefw@redhat.com> - 0.16.4-1
|
||||||
|
- Update to upstream version 0.16.4
|
||||||
|
|
||||||
|
* Fri Mar 08 2013 Stef Walter <stefw@redhat.com> - 0.16.3-1
|
||||||
|
- Update to upstream version 0.16.3
|
||||||
|
- Split out system trust module into its own package.
|
||||||
|
- p11-kit-trust provides an alternative to an nss module
|
||||||
|
|
||||||
|
* Tue Mar 05 2013 Stef Walter <stefw@redhat.com> - 0.16.1-1
|
||||||
|
- Update to upstream version 0.16.1
|
||||||
|
- Setup source directories as appropriate for Shared System Certificates feature
|
||||||
|
|
||||||
|
* Tue Mar 05 2013 Stef Walter <stefw@redhat.com> - 0.16.0-1
|
||||||
|
- Update to upstream version 0.16.0
|
||||||
|
|
||||||
|
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.14-2
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
|
||||||
|
|
||||||
|
* Mon Sep 17 2012 Kalev Lember <kalevlember@gmail.com> - 0.14-1
|
||||||
|
- Update to 0.14
|
||||||
|
|
||||||
|
* Fri Jul 20 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.13-2
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
|
||||||
|
|
||||||
|
* Mon Jul 16 2012 Kalev Lember <kalevlember@gmail.com> - 0.13-1
|
||||||
|
- Update to 0.13
|
||||||
|
|
||||||
|
* Tue Mar 27 2012 Kalev Lember <kalevlember@gmail.com> - 0.12-1
|
||||||
|
- Update to 0.12
|
||||||
|
- Run self tests in %%check
|
||||||
|
|
||||||
|
* Sat Feb 11 2012 Kalev Lember <kalevlember@gmail.com> - 0.11-1
|
||||||
|
- Update to 0.11
|
||||||
|
|
||||||
|
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.9-2
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
|
||||||
|
|
||||||
|
* Tue Dec 20 2011 Matthias Clasen <mclasen@redhat.com> - 0.9-1
|
||||||
|
- Update to 0.9
|
||||||
|
|
||||||
|
* Wed Oct 26 2011 Kalev Lember <kalevlember@gmail.com> - 0.8-1
|
||||||
|
- Update to 0.8
|
||||||
|
|
||||||
|
* Mon Sep 19 2011 Matthias Clasen <mclasen@redhat.com> - 0.6-1
|
||||||
|
- Update to 0.6
|
||||||
|
|
||||||
|
* Sun Sep 04 2011 Kalev Lember <kalevlember@gmail.com> - 0.5-1
|
||||||
|
- Update to 0.5
|
||||||
|
|
||||||
|
* Sun Aug 21 2011 Kalev Lember <kalevlember@gmail.com> - 0.4-1
|
||||||
|
- Update to 0.4
|
||||||
|
- Install the example config file to documentation directory
|
||||||
|
|
||||||
|
* Wed Aug 17 2011 Kalev Lember <kalevlember@gmail.com> - 0.3-2
|
||||||
|
- Tighten -devel subpackage deps (#725905)
|
||||||
|
|
||||||
|
* Fri Jul 29 2011 Kalev Lember <kalevlember@gmail.com> - 0.3-1
|
||||||
|
- Update to 0.3
|
||||||
|
- Upstream rewrote the ASL 2.0 bits, which makes the whole package
|
||||||
|
BSD-licensed
|
||||||
|
|
||||||
|
* Tue Jul 12 2011 Kalev Lember <kalevlember@gmail.com> - 0.2-1
|
||||||
|
- Initial RPM release
|
||||||
1
sources
Normal file
1
sources
Normal file
@ -0,0 +1 @@
|
|||||||
|
SHA512 (p11-kit-0.23.21.tar.xz) = 4c796ca2c72a650f105a7a70aa62e55edb12e1c151e91ef92bfeee6c5c68982b36023400b42c4efcb1d351b7848e8618c26607cdb0f77b48ae40e2ecfd713e3e
|
||||||
2
tests/.gitignore
vendored
Normal file
2
tests/.gitignore
vendored
Normal file
@ -0,0 +1,2 @@
|
|||||||
|
*.retry
|
||||||
|
artifacts/
|
||||||
14
tests/tests.yml
Normal file
14
tests/tests.yml
Normal file
@ -0,0 +1,14 @@
|
|||||||
|
---
|
||||||
|
# This first play always runs on the local staging system
|
||||||
|
- hosts: localhost
|
||||||
|
roles:
|
||||||
|
- role: standard-test-beakerlib
|
||||||
|
tags:
|
||||||
|
- classic
|
||||||
|
- atomic
|
||||||
|
- container
|
||||||
|
tests:
|
||||||
|
- trust-anchor-complains-about-invalid-attribute-and
|
||||||
|
required_packages:
|
||||||
|
- openssl
|
||||||
|
- p11-kit
|
||||||
@ -0,0 +1,64 @@
|
|||||||
|
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
||||||
|
#
|
||||||
|
# Makefile of /CoreOS/p11-kit/trust-anchor-complains-about-invalid-attribute-and
|
||||||
|
# Description: Test for trust anchor complains about invalid attribute and
|
||||||
|
# Author: Hubert Kario <hkario@redhat.com>
|
||||||
|
#
|
||||||
|
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
||||||
|
#
|
||||||
|
# Copyright (c) 2017 Red Hat, Inc.
|
||||||
|
#
|
||||||
|
# This copyrighted material is made available to anyone wishing
|
||||||
|
# to use, modify, copy, or redistribute it subject to the terms
|
||||||
|
# and conditions of the GNU General Public License version 2.
|
||||||
|
#
|
||||||
|
# This program is distributed in the hope that it will be
|
||||||
|
# useful, but WITHOUT ANY WARRANTY; without even the implied
|
||||||
|
# warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR
|
||||||
|
# PURPOSE. See the GNU General Public License for more details.
|
||||||
|
#
|
||||||
|
# You should have received a copy of the GNU General Public
|
||||||
|
# License along with this program; if not, write to the Free
|
||||||
|
# Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
|
||||||
|
# Boston, MA 02110-1301, USA.
|
||||||
|
#
|
||||||
|
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
||||||
|
|
||||||
|
export TEST=/CoreOS/p11-kit/trust-anchor-complains-about-invalid-attribute-and
|
||||||
|
export TESTVERSION=1.0
|
||||||
|
|
||||||
|
BUILT_FILES=
|
||||||
|
|
||||||
|
FILES=$(METADATA) runtest.sh Makefile PURPOSE
|
||||||
|
|
||||||
|
.PHONY: all install download clean
|
||||||
|
|
||||||
|
run: $(FILES) build
|
||||||
|
./runtest.sh
|
||||||
|
|
||||||
|
build: $(BUILT_FILES)
|
||||||
|
test -x runtest.sh || chmod a+x runtest.sh
|
||||||
|
|
||||||
|
clean:
|
||||||
|
rm -f *~ $(BUILT_FILES)
|
||||||
|
|
||||||
|
|
||||||
|
include /usr/share/rhts/lib/rhts-make.include
|
||||||
|
|
||||||
|
$(METADATA): Makefile
|
||||||
|
@echo "Owner: Hubert Kario <hkario@redhat.com>" > $(METADATA)
|
||||||
|
@echo "Name: $(TEST)" >> $(METADATA)
|
||||||
|
@echo "TestVersion: $(TESTVERSION)" >> $(METADATA)
|
||||||
|
@echo "Path: $(TEST_DIR)" >> $(METADATA)
|
||||||
|
@echo "Description: Test for trust anchor complains about invalid attribute and" >> $(METADATA)
|
||||||
|
@echo "Type: Regression" >> $(METADATA)
|
||||||
|
@echo "TestTime: 2m" >> $(METADATA)
|
||||||
|
@echo "RunFor: p11-kit" >> $(METADATA)
|
||||||
|
@echo "Requires: openssl p11-kit" >> $(METADATA)
|
||||||
|
@echo "Priority: Normal" >> $(METADATA)
|
||||||
|
@echo "License: GPLv2" >> $(METADATA)
|
||||||
|
@echo "Confidential: no" >> $(METADATA)
|
||||||
|
@echo "Destructive: no" >> $(METADATA)
|
||||||
|
@echo "Releases: -RHEL4 -RHEL6 -RHELClient5 -RHELServer5" >> $(METADATA)
|
||||||
|
|
||||||
|
rhts-lint $(METADATA)
|
||||||
@ -0,0 +1,17 @@
|
|||||||
|
PURPOSE of /CoreOS/p11-kit/trust-anchor-complains-about-invalid-attribute-and
|
||||||
|
Description: Test for trust anchor complains about invalid attribute and
|
||||||
|
Author: Hubert Kario <hkario@redhat.com>
|
||||||
|
Bug summary: trust anchor complains about invalid attribute and fails when a new certificate tries to store into trust place
|
||||||
|
|
||||||
|
Steps to Reproduce:
|
||||||
|
1. /etc/pki/tls/certs/make-dummy-cert mycert-tmp.pem
|
||||||
|
2. openssl x509 -in mycert-tmp.pem -addtrust clientAuth -addtrust serverAuth -addtrust emailProtection -out mycert.pem
|
||||||
|
3. trust anchor --store mycert.pem
|
||||||
|
|
||||||
|
Actual results:
|
||||||
|
p11-kit: the CKA_TRUSTED attribute is not valid for the object
|
||||||
|
p11-kit: couldn't create object: Certain fields have invalid values
|
||||||
|
|
||||||
|
|
||||||
|
Expected results:
|
||||||
|
Certificate is stored in trust place.
|
||||||
59
tests/trust-anchor-complains-about-invalid-attribute-and/runtest.sh
Executable file
59
tests/trust-anchor-complains-about-invalid-attribute-and/runtest.sh
Executable file
@ -0,0 +1,59 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
# vim: dict+=/usr/share/beakerlib/dictionary.vim cpt=.,w,b,u,t,i,k
|
||||||
|
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
||||||
|
#
|
||||||
|
# runtest.sh of /CoreOS/p11-kit/trust-anchor-complains-about-invalid-attribute-and
|
||||||
|
# Description: Test for trust anchor complains about invalid attribute and
|
||||||
|
# Author: Hubert Kario <hkario@redhat.com>
|
||||||
|
#
|
||||||
|
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
||||||
|
#
|
||||||
|
# Copyright (c) 2017 Red Hat, Inc.
|
||||||
|
#
|
||||||
|
# This copyrighted material is made available to anyone wishing
|
||||||
|
# to use, modify, copy, or redistribute it subject to the terms
|
||||||
|
# and conditions of the GNU General Public License version 2.
|
||||||
|
#
|
||||||
|
# This program is distributed in the hope that it will be
|
||||||
|
# useful, but WITHOUT ANY WARRANTY; without even the implied
|
||||||
|
# warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR
|
||||||
|
# PURPOSE. See the GNU General Public License for more details.
|
||||||
|
#
|
||||||
|
# You should have received a copy of the GNU General Public
|
||||||
|
# License along with this program; if not, write to the Free
|
||||||
|
# Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
|
||||||
|
# Boston, MA 02110-1301, USA.
|
||||||
|
#
|
||||||
|
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
||||||
|
|
||||||
|
# Include Beaker environment
|
||||||
|
. /usr/share/beakerlib/beakerlib.sh || exit 1
|
||||||
|
|
||||||
|
PACKAGE="p11-kit"
|
||||||
|
|
||||||
|
rlJournalStart
|
||||||
|
rlPhaseStartSetup
|
||||||
|
rlAssertRpm $PACKAGE
|
||||||
|
rlRun "TmpDir=\$(mktemp -d)" 0 "Creating tmp directory"
|
||||||
|
rlRun "pushd $TmpDir"
|
||||||
|
rlRun "rlFileBackup --clean /etc/pki"
|
||||||
|
rlPhaseEnd
|
||||||
|
|
||||||
|
rlPhaseStartTest
|
||||||
|
DUMMY_MAKER_BIN="/etc/pki/tls/certs/make-dummy-cert"
|
||||||
|
[ -x /usr/bin/make-dummy-cert ] && DUMMY_MAKER_BIN="/usr/bin/make-dummy-cert"
|
||||||
|
rlRun "$DUMMY_MAKER_BIN mycert-tmp.pem"
|
||||||
|
rlRun "openssl x509 -in mycert-tmp.pem -addtrust clientAuth -addtrust serverAuth -addtrust emailProtection -out mycert.pem"
|
||||||
|
rlAssertNotExists "/etc/pki/ca-trust/source/localhost.localdomain.p11-kit"
|
||||||
|
rlRun -s "trust anchor --store mycert.pem"
|
||||||
|
rlAssertNotGrep "p11-kit:" $rlRun_LOG
|
||||||
|
rlAssertExists "/etc/pki/ca-trust/source/localhost.localdomain.p11-kit"
|
||||||
|
rlPhaseEnd
|
||||||
|
|
||||||
|
rlPhaseStartCleanup
|
||||||
|
rlRun "popd"
|
||||||
|
rlRun "rlFileRestore"
|
||||||
|
rlRun "rm -r $TmpDir" 0 "Removing tmp directory"
|
||||||
|
rlPhaseEnd
|
||||||
|
rlJournalPrintText
|
||||||
|
rlJournalEnd
|
||||||
15
trust-extract-compat
Executable file
15
trust-extract-compat
Executable file
@ -0,0 +1,15 @@
|
|||||||
|
#!/usr/bin/bash
|
||||||
|
|
||||||
|
set -e
|
||||||
|
|
||||||
|
if test "$UID" != "0"; then
|
||||||
|
echo "p11-kit: the 'extract-trust' command must be run as root" >&2
|
||||||
|
exit 2
|
||||||
|
fi
|
||||||
|
|
||||||
|
if test $# -gt 1; then
|
||||||
|
echo "p11-kit: no additional arguments are supported for this command" >&2
|
||||||
|
exit 2
|
||||||
|
fi
|
||||||
|
|
||||||
|
exec /usr/bin/update-ca-trust
|
||||||
Loading…
Reference in New Issue
Block a user