132 lines
4.1 KiB
RPMSpec
132 lines
4.1 KiB
RPMSpec
Summary: Software version of a PKCS#11 Hardware Security Module
|
|
Name: softhsm
|
|
Version: 1.3.6
|
|
Release: 1%{?dist}
|
|
License: BSD
|
|
Url: http://www.opendnssec.org/
|
|
Source: http://www.opendnssec.org/files/source/%{name}-%{version}.tar.gz
|
|
Source1: softhsm.module
|
|
Group: Applications/System
|
|
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
|
|
BuildRequires: botan-devel >= 1.8.5 sqlite-devel >= 3.4.2
|
|
Requires(pre): shadow-utils
|
|
Requires: p11-kit
|
|
# temp. for p11install
|
|
Requires: coolkey
|
|
|
|
%global softhsm_module "SoftHSM PKCS #11 Module"
|
|
%global nssdb %{_sysconfdir}/pki/nssdb
|
|
|
|
%description
|
|
OpenDNSSEC is providing a software implementation of a generic
|
|
cryptographic device with a PKCS#11 interface, the SoftHSM. SoftHSM is
|
|
designed to meet the requirements of OpenDNSSEC, but can also work together
|
|
with other cryptographic products because of the PKCS#11 interface.
|
|
|
|
%package devel
|
|
Summary: Development package of softhsm that includes the header files
|
|
Group: Development/Libraries
|
|
Requires: %{name} = %{version}-%{release}, botan-devel, sqlite-devel
|
|
|
|
%description devel
|
|
The devel package contains the libsofthsm include files
|
|
|
|
%prep
|
|
%setup -q
|
|
|
|
%build
|
|
%configure --libdir=%{_libdir}/ --with-botan=%{_prefix}
|
|
make %{?_smp_mflags}
|
|
|
|
%check
|
|
make check
|
|
|
|
%install
|
|
rm -rf %{buildroot}
|
|
make DESTDIR=%{buildroot} install
|
|
mkdir -p %{buildroot}/%{_libdir}/pkcs11
|
|
#p11-kit install
|
|
ln -s ../softhsm/libsofthsm.so %{buildroot}/%{_libdir}/pkcs11/
|
|
install -D %{SOURCE1} %{buildroot}/%{_datadir}/p11-kit/modules/softhsm.module
|
|
|
|
rm %{buildroot}/etc/softhsm.conf.sample
|
|
rm -f %{buildroot}/%{_libdir}/softhsm/*a
|
|
mkdir -p %{buildroot}%{_includedir}/softhsm
|
|
cp src/lib/*.h %{buildroot}%{_includedir}/softhsm
|
|
mkdir -p %{buildroot}/var/softhsm
|
|
|
|
%files
|
|
%config(noreplace) %{_sysconfdir}/softhsm.conf
|
|
%{_bindir}/*
|
|
%dir %{_libdir}/softhsm/
|
|
%{_libdir}/softhsm/libsofthsm.so
|
|
%{_libdir}/pkcs11/libsofthsm.so
|
|
%{_datadir}/p11-kit/modules/softhsm.module
|
|
%attr(0770,ods,ods) %dir /var/softhsm
|
|
%doc AUTHORS NEWS LICENSE
|
|
%{_mandir}/*/*
|
|
|
|
%files devel
|
|
%attr(0755,root,root) %dir %{_includedir}/softhsm
|
|
%{_includedir}/softhsm/*.h
|
|
|
|
%pre
|
|
getent group ods >/dev/null || groupadd -r ods
|
|
getent passwd ods >/dev/null || \
|
|
useradd -r -g ods -d /var/softhsm -s /sbin/nologin \
|
|
-c "softhsm private keys owner" ods
|
|
exit 0
|
|
|
|
%post
|
|
isThere=`modutil -rawlist -dbdir %{nssdb} | grep %{softhsm_module} || echo NO`
|
|
if [ "$isThere" == "NO" ]; then
|
|
if [ -x %{_bindir}/pk11install ]; then
|
|
pk11install -p %{nssdb} 'name=%{softhsm_module} library=libsofthsm.so' ||:
|
|
fi
|
|
fi
|
|
|
|
if [ $1 -eq 0 ]; then
|
|
modutil -delete %{softhsm_module} -dbdir %{nssdb} -force || :
|
|
fi
|
|
|
|
%changelog
|
|
* Fri Apr 18 2014 Paul Wouters <pwouters@redhat.com> - 1.3.6-1
|
|
- Updated to 1.3.6 (rhbz#1070196)
|
|
- Provide a p11-kit module file (rhbz#1085327)
|
|
|
|
* Sun Nov 03 2013 Paul Wouters <pwouters@redhat.com> - 1.3.5-1
|
|
- Updated to 1.3.5 (rhbz#987721)
|
|
|
|
* Tue Jul 30 2013 Paul Wouters <pwouters@redhat.com> - 1.3.3-4
|
|
- Rebuilt for new botan - requires --with-botan argument
|
|
|
|
* Fri Feb 15 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.3-3
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
|
|
|
|
* Sat Jul 21 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.3-2
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
|
|
|
|
* Mon Jun 04 2012 Paul Wouters <pwouters@redhat.com> - 1.3.3-1
|
|
- Updated to 1.3.3
|
|
|
|
* Tue Apr 03 2012 Paul Wouters <pwouters@redhat.com> - 1.3.2-1
|
|
- Updated to 1.3.2.
|
|
- Changed user from opendnssec to ods, as used in the opendnssec package
|
|
|
|
* Sat Jan 14 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-4
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
|
|
|
|
* Thu Oct 27 2011 Paul Wouters <paul@xelerance.com> - 1.3.0-3
|
|
- Initial Fedora package
|
|
- Do not install the .a file
|
|
- Use a separate "opendnssec" user to own /var/sofhsm
|
|
|
|
* Tue Oct 25 2011 Paul Wouters <paul@xelerance.com> - 1.3.0-2
|
|
- Fix description texts w.r.t. include files
|
|
|
|
* Wed Oct 05 2011 Paul Wouters <paul@xelerance.com> - 1.3.0-1
|
|
- Upgraded to 1.3.0
|
|
|
|
* Thu Mar 3 2011 Paul Wouters <paul@xelerance.com> - 1.2.0-1
|
|
- Initial package for Fedora
|