## START: Set by rpmautospec
## (rpmautospec version 0.8.1)
## RPMAUTOSPEC: autorelease, autochangelog
%define autorelease(e:s:pb:n) %{?-p:0.}%{lua:
    release_number = 3;
    base_release_number = tonumber(rpm.expand("%{?-b*}%{!?-b:1}"));
    print(release_number + base_release_number - 1);
}%{?-e:.%{-e*}}%{?-s:.%{-s*}}%{!?-n:%{?dist}}
## END: Set by rpmautospec

# Generated by go2rpm 1.18.0
%bcond check 1

# https://github.com/smallstep/certificates
%global goipath         github.com/smallstep/certificates
Version:                0.29.0

%gometa -L -f

Name:           smallstep
Release:        %autorelease
Summary:        🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH

# Generated by go-vendor-tools
#License:        Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND LicenseRef-scancode-proprietary-license AND MIT AND MPL-2.0
# The vendored module LICENSE vendor/github.com/google/go-tpm-tools/LICENSE
# includes the TCG LICENSE for the simulator/ms-tpm-20-ref submodule - which
# is NOT included in the vendored code.
License:        Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0
URL:            %{gourl}
Source0:        %{gosource}
# Generated by go-vendor-tools
Source1:        %{archivename}-vendor.tar.bz2
#Source1:        #{archivename}-vendored.tar.gz
Source2:        go-vendor-tools.toml
Source3:        step-ca.service
Source4:        ca.json
Source5:        smallstep.conf

BuildRequires:  go-vendor-tools pcsc-lite-devel
# systemd macros are not defined unless systemd is present
BuildRequires: systemd
Requires: systemd
Requires(pre): shadow-utils
Requires(post): systemd
Requires(preun): systemd
Requires(postun): systemd

%description
🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure
automated certificate management, so you can use TLS everywhere & SSO for SSH.

%prep
%goprep -A
%setup -q -T -D -a1 %{forgesetupargs}
#autopatch -p1

%generate_buildrequires
%go_vendor_license_buildrequires -c %{S:2}

%build
%global gomodulesmode GO111MODULE=on
for cmd in cmd/* ; do
  %gobuild -o %{gobuilddir}/bin/$(basename $cmd) %{goipath}/$cmd
done

%install
%go_vendor_license_install -c %{S:2}
install -m 0755 -vd                     %{buildroot}%{_bindir}
install -m 0755 -vp %{gobuilddir}/bin/* %{buildroot}%{_bindir}/
mkdir -p %{buildroot}%{_unitdir}
mkdir -p %{buildroot}%{_localstatedir}/lib/step-ca
mkdir -p %{buildroot}%{_localstatedir}/lib/step-ca/certs
mkdir -p %{buildroot}%{_localstatedir}/lib/step-ca/config
mkdir -p %{buildroot}%{_localstatedir}/lib/step-ca/db
mkdir -p %{buildroot}%{_localstatedir}/lib/step-ca/secrets
mkdir -p %{buildroot}%{_localstatedir}/lib/step-ca/templates
install -pm 644 %{SOURCE3} %{buildroot}%{_unitdir}
install -pm 644 %{SOURCE4} %{buildroot}%{_localstatedir}/lib/step-ca/config
mkdir -p %{buildroot}%{_sysusersdir}
install -pm 644 %{SOURCE5} %{buildroot}%{_sysusersdir}/%{name}.conf

%check
%go_vendor_license_check -c %{S:2}
%if %{with check}
#gotest ./...
#gocheck2 -s Test_newHTTPClient/SystemCertPool -s TestDB_CreateDpopToken -s TestDB_CreateOidcToken -s TestDB_GetDpopToken -s TestDB_GetOidcToken -s TestPKI_GenerateConfig -s TestPKI_GenerateConfig/ok/with-admin -s TestHandler_RevokeCert/ok/using-certificate-key -s TestHandler_RevokeCert/ok/using-account-key

# Until Nov 25, this was only failing test (expected because of network use)
%gocheck2 -s Test_newHTTPClient/SystemCertPool 
%endif

%post
%systemd_post step-ca.service

%postun
%systemd_postun_with_restart step-ca.service

%preun
%systemd_preun step-ca.service

%files -f %{go_vendor_license_filelist}
%license vendor/modules.txt
%doc examples CHANGELOG.md CONTRIBUTING.md README.md SECURITY.md
%doc autocert/README.md scripts/README.md systemd/README.md
%{_bindir}/step-ca
%{_unitdir}/*
%{_sysusersdir}/%{name}.conf
%dir %attr(-,step-ca,step-ca) %{_localstatedir}/lib/step-ca
%dir %attr(-,step-ca,step-ca) %{_localstatedir}/lib/step-ca/certs
%dir %attr(-,step-ca,step-ca) %{_localstatedir}/lib/step-ca/config
%dir %attr(-,step-ca,step-ca) %{_localstatedir}/lib/step-ca/db
%dir %attr(0700,step-ca,step-ca) %{_localstatedir}/lib/step-ca/secrets
%dir %attr(-,step-ca,step-ca) %{_localstatedir}/lib/step-ca/templates
%attr(0600,step-ca,step-ca) %config(missingok,noreplace) %{_localstatedir}/lib/step-ca/config/ca.json

%changelog
## START: Generated by rpmautospec
* Fri Mar 06 2026 Stuart D. Gathman <stuart@gathman.org> - 0.29.0-3
- Uncommitted changes

* Sat Feb 28 2026 Stuart D. Gathman <stuart@gathman.org> - 0.29.0-2
- Switch to systemd-sysusers for step-ca uid

* Sat Feb 28 2026 Stuart D. Gathman <stuart@gathman.org> - 0.29.0-1
- New upstream release

* Fri Nov 21 2025 Stuart D. Gathman <stuart@gathman.org> - 0.28.4-8
- Explicity list items in %%files

* Thu Nov 20 2025 Stuart D. Gathman <stuart@gathman.org> - 0.28.4-7
- Fix sandboxing

* Thu Nov 20 2025 Stuart D. Gathman <stuart@gathman.org> - 0.28.4-6
- Add "comments" to ca.json

* Thu Nov 20 2025 Stuart D. Gathman <stuart@gathman.org> - 0.28.4-5
- Build server home directory with starter config

* Thu Nov 20 2025 Stuart D. Gathman <stuart@gathman.org> - 0.28.4-4
- Clean install

* Wed Nov 19 2025 Stuart D. Gathman <stuart@gathman.org> - 0.28.4-3
- Add systemd service

* Mon Oct 27 2025 Stuart D. Gathman <stuart@gathman.org> - 0.28.4-2
- First successful build

* Tue Oct 21 2025 Stuart D. Gathman <stuart@gathman.org> - 0.28.4-1
- Second try: can't find libpcsclite
## END: Generated by rpmautospec