## START: Set by rpmautospec ## (rpmautospec version 0.3.0) %define autorelease(e:s:pb:n) %{?-p:0.}%{lua: release_number = 5; base_release_number = tonumber(rpm.expand("%{?-b*}%{!?-b:1}")); print(release_number + base_release_number - 1); }%{?-e:.%{-e*}}%{?-s:.%{-s*}}%{!?-n:%{?dist}} ## END: Set by rpmautospec # This spec file has been automatically updated Version: 0.24.1 Release: %{?autorelease}%{!?autorelease:1%{?dist}} Name: p11-kit Summary: Library for loading and sharing PKCS#11 modules License: BSD URL: http://p11-glue.freedesktop.org/p11-kit.html Source0: https://github.com/p11-glue/p11-kit/releases/download/%{version}/p11-kit-%{version}.tar.xz Source1: https://github.com/p11-glue/p11-kit/releases/download/%{version}/p11-kit-%{version}.tar.xz.sig Source2: gpgkey-462225C3B46F34879FC8496CD605848ED7E69871.gpg Source3: trust-extract-compat Source4: p11-kit-client.service Patch0: p11-kit-meson-c99.patch BuildRequires: gcc BuildRequires: libtasn1-devel >= 2.3 BuildRequires: libffi-devel BuildRequires: gettext BuildRequires: gtk-doc BuildRequires: meson BuildRequires: systemd-devel BuildRequires: bash-completion # Work around for https://bugzilla.redhat.com/show_bug.cgi?id=1497147 # Remove this once it is fixed BuildRequires: pkgconfig(glib-2.0) BuildRequires: pkgconfig(systemd) BuildRequires: gnupg2 BuildRequires: /usr/bin/xsltproc %description p11-kit provides a way to load and enumerate PKCS#11 modules, as well as a standard configuration setup for installing PKCS#11 modules in such a way that they're discoverable. %package devel Summary: Development files for %{name} Requires: %{name}%{?_isa} = %{version}-%{release} %description devel The %{name}-devel package contains libraries and header files for developing applications that use %{name}. %package trust Summary: System trust module from %{name} Requires: %{name}%{?_isa} = %{version}-%{release} Requires(post): %{_sbindir}/update-alternatives Requires(postun): %{_sbindir}/update-alternatives Conflicts: nss < 3.14.3-9 %description trust The %{name}-trust package contains a system trust PKCS#11 module which contains certificate anchors and black lists. %package server Summary: Server and client commands for %{name} Requires: %{name}%{?_isa} = %{version}-%{release} %description server The %{name}-server package contains command line tools that enable to export PKCS#11 modules through a Unix domain socket. Note that this feature is still experimental. # solution taken from icedtea-web.spec %define multilib_arches ppc64 sparc64 x86_64 ppc64le %ifarch %{multilib_arches} %define alt_ckbi libnssckbi.so.%{_arch} %else %define alt_ckbi libnssckbi.so %endif %prep gpgv2 --keyring %{SOURCE2} %{SOURCE1} %{SOURCE0} %autosetup -p1 %build # These paths are the source paths that come from the plan here: # https://fedoraproject.org/wiki/Features/SharedSystemCertificates:SubTasks %meson -Dgtk_doc=true -Dman=true -Dtrust_paths=%{_sysconfdir}/pki/ca-trust/source:%{_datadir}/pki/ca-trust-source %meson_build %install %meson_install mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/pkcs11/modules install -p -m 755 %{SOURCE3} $RPM_BUILD_ROOT%{_libexecdir}/p11-kit/ # Install the example conf with %%doc instead mkdir -p $RPM_BUILD_ROOT%{_docdir}/%{name} mv $RPM_BUILD_ROOT%{_sysconfdir}/pkcs11/pkcs11.conf.example $RPM_BUILD_ROOT%{_docdir}/%{name}/pkcs11.conf.example mkdir -p $RPM_BUILD_ROOT%{_userunitdir} install -p -m 644 %{SOURCE4} $RPM_BUILD_ROOT%{_userunitdir} %find_lang %{name} %check %meson_test %post trust %{_sbindir}/update-alternatives --install %{_libdir}/libnssckbi.so \ %{alt_ckbi} %{_libdir}/pkcs11/p11-kit-trust.so 30 %postun trust if [ $1 -eq 0 ] ; then # package removal %{_sbindir}/update-alternatives --remove %{alt_ckbi} %{_libdir}/pkcs11/p11-kit-trust.so fi %files -f %{name}.lang %{!?_licensedir:%global license %%doc} %license COPYING %doc AUTHORS NEWS README %{_docdir}/%{name}/pkcs11.conf.example %dir %{_sysconfdir}/pkcs11 %dir %{_sysconfdir}/pkcs11/modules %dir %{_datadir}/p11-kit %dir %{_datadir}/p11-kit/modules %dir %{_libexecdir}/p11-kit %{_bindir}/p11-kit %{_libdir}/libp11-kit.so.* %{_libdir}/p11-kit-proxy.so %{_libexecdir}/p11-kit/p11-kit-remote %{_mandir}/man1/trust.1.gz %{_mandir}/man8/p11-kit.8.gz %{_mandir}/man5/pkcs11.conf.5.gz %{_datadir}/bash-completion/completions/p11-kit %files devel %{_includedir}/p11-kit-1/ %{_libdir}/libp11-kit.so %{_libdir}/pkgconfig/p11-kit-1.pc %doc %{_datadir}/gtk-doc/ %files trust %{_bindir}/trust %dir %{_libdir}/pkcs11 %ghost %{_libdir}/libnssckbi.so %{_libdir}/pkcs11/p11-kit-trust.so %{_datadir}/p11-kit/modules/p11-kit-trust.module %{_libexecdir}/p11-kit/trust-extract-compat %{_datadir}/bash-completion/completions/trust %files server %{_libdir}/pkcs11/p11-kit-client.so %{_userunitdir}/p11-kit-client.service %{_libexecdir}/p11-kit/p11-kit-server %{_userunitdir}/p11-kit-server.service %{_userunitdir}/p11-kit-server.socket %changelog * Mon Dec 12 2022 Florian Weimer 0.24.1-5 - Port meson build script to C99 * Fri Jul 22 2022 Fedora Release Engineering - 0.24.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Thu Jan 20 2022 Fedora Release Engineering - 0.24.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Mon Jan 17 2022 Packit Service - 0.24.1-1 - Release 0.24.1 (Daiki Ueno) - common: Support copying attribute array recursively (Daiki Ueno) - common: Add assert_ptr_cmp (Daiki Ueno) - gtkdoc: remove dependencies on custom target files (Eli Schwartz) - doc: Replace occurrence of black list with blocklist (Daiki Ueno) - build: Suppress cppcheck false-positive on array bounds (Daiki Ueno) - ci: Use Docker image from the same repository (Daiki Ueno) - ci: Integrate Docker image building to GitHub workflow (Daiki Ueno) - rpc: Fallback to version 0 if server does not support negotiation (Daiki Ueno) - build: Port e850e03be65ed573d0b69ee0408e776c08fad8a3 to meson (Daiki Ueno) - Link libp11-kit so that it cannot unload (Emmanuel Dreyfus) - trust: Use dngettext for plurals (Daiki Ueno) - rpc: Support protocol version negotiation (Daiki Ueno) - rpc: Separate authentication step from transaction (Daiki Ueno) - Meson: p11_system_config_modules instead of p11_package_config_modules (Issam E. Maghni) - shell: test -a|o is not POSIX (Issam E. Maghni) - Meson: Add libtasn1 to trust programs (Issam E. Maghni) - meson: optionalise glib's development files for gtk_doc (Đoàn Trần Công Danh) * Sat Jan 08 2022 Miro Hrončok - 0.23.22-5 - Rebuilt for https://fedoraproject.org/wiki/Changes/LIBFFI34 * Thu Jul 22 2021 Fedora Release Engineering - 0.23.22-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Tue Jan 26 2021 Daiki Ueno - 0.23.22-3 - Suppress intentional memleak in getprogname emulation (#1905581) * Tue Jan 26 2021 Fedora Release Engineering - 0.23.22-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Fri Dec 11 2020 Packit Service - 0.23.22-1 - Release 0.23.22 (Daiki Ueno) - Follow-up to arithmetic overflow fix (David Cook) - Check for arithmetic overflows before allocating (David Cook) - Check attribute length against buffer size (David Cook) - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook) - Fix buffer overflow in log_token_info (David Cook) - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno) - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno) - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno) - meson: Add missing libtasn1 dependency (Daiki Ueno) - travis: Add freebsd build (Daiki Ueno) - anchor: Prefer persistent format when storing anchor (Daiki Ueno) - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno) - travis: Use python3 as the default Python interpreter (Daiki Ueno) - travis: Route to Ubuntu 20.04 base image (Daiki Ueno) - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno) - meson: expand ternary operator in function call for compatibility (Daiki Ueno) - meson: Use custom_target for generating external XML entities (Daiki Ueno) - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig)) - Rename is_path_component to is_path_separator (Alexander Sosedkin) - Use is_path_component in one more place (Alexander Sosedkin) - Remove more duplicate separators in p11_path_build (Alexander Sosedkin) - common: Fix infloop in p11_path_build (Daiki Ueno) - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno) - build: Use calloc in a consistent manner (Daiki Ueno) - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322). Pass -Dbashcompdir=/xxx to meson. (John Hein) - common: Check for a NULL locale before freeing it (Tavian Barnes) - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg) - unix-peer: replace incorrect include1 (Rosen Penev) - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno) - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao) - meson: install trust-extract-compat (Xℹ Ruoyao) - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao) * Thu Nov 12 2020 Alexander Sosedkin - 0.23.21-3 - Add an explicit build dependency on xsltproc * Tue Aug 18 2020 Packit Service - 0.23.21-2 - new upstream release: 0.23.21 * Tue Jul 28 2020 Fedora Release Engineering - 0.23.20-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Wed Jan 29 2020 Daiki Ueno - 0.23.20-1 - Update to upstream 0.23.20 release * Wed Jan 22 2020 Daiki Ueno - 0.23.19-1 - Update to upstream 0.23.19 release - Check archive signature in %%prep - Switch to using Meson as the build system * Mon Sep 30 2019 Daiki Ueno - 0.23.18.1-1 - Update to upstream 0.23.18.1 release * Thu Jul 25 2019 Fedora Release Engineering - 0.23.16.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Thu May 23 2019 Daiki Ueno - 0.23.16.1-1 - Update to upstream 0.23.16.1 release * Thu May 23 2019 Daiki Ueno - 0.23.16-1 - Update to upstream 0.23.16 release * Mon Feb 18 2019 Daiki Ueno - 0.23.15-3 - trust: Ignore unreadable content in anchors * Fri Feb 01 2019 Fedora Release Engineering - 0.23.15-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Mon Jan 21 2019 Daiki Ueno - 0.23.15-1 - Update to upstream 0.23.15 release * Fri Jan 11 2019 Nils Philippsen - 0.23.14-3 - use spaces instead of tabs consistently - prefer fixed closures to libffi closures (#1656245, patch by Daiki Ueno) * Mon Oct 29 2018 James Antill - 0.23.14-2 - Remove ldconfig scriptlet, now done via. transfiletrigger in glibc. * Fri Sep 07 2018 Daiki Ueno - 0.23.14-1 - Update to upstream 0.23.14 release * Wed Aug 15 2018 Daiki Ueno - 0.23.13-3 - Forcibly link with libpthread to avoid regressions (rhbz#1615038) * Wed Aug 15 2018 Daiki Ueno - 0.23.13-2 - Fix invalid memory access on proxy cleanup * Fri Aug 10 2018 Daiki Ueno - 0.23.13-1 - Update to upstream 0.23.13 release * Fri Jul 13 2018 Fedora Release Engineering - 0.23.12-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Wed May 30 2018 Daiki Ueno - 0.23.12-1 - Update to upstream 0.23.11 release * Wed Feb 28 2018 Daiki Ueno - 0.23.10-1 - Update to upstream 0.23.10 release * Thu Feb 08 2018 Fedora Release Engineering - 0.23.9-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild * Thu Oct 05 2017 Daiki Ueno - 0.23.9-2 - server: Make it possible to eval envvar settings * Wed Oct 04 2017 Daiki Ueno - 0.23.9-1 - Update to upstream 0.23.9 * Fri Aug 25 2017 Kai Engert - 0.23.8-2 - Fix a regression caused by a recent nss.rpm change, add a %%ghost file for %%{_libdir}/libnssckbi.so that p11-kit-trust scripts install. * Tue Aug 15 2017 Daiki Ueno - 0.23.8-1 - Update to 0.23.8 release * Thu Aug 03 2017 Fedora Release Engineering - 0.23.7-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild * Thu Jul 27 2017 Fedora Release Engineering - 0.23.7-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild * Fri Jun 2 2017 Daiki Ueno - 0.23.7-1 - Update to 0.23.7 release * Thu May 18 2017 Daiki Ueno - 0.23.5-3 - Update p11-kit-modifiable.patch to simplify the logic * Thu May 18 2017 Daiki Ueno - 0.23.5-2 - Make "trust anchor --remove" work again * Thu Mar 2 2017 Daiki Ueno - 0.23.5-1 - Update to 0.23.5 release - Rename -tools subpackage to -server and remove systemd unit files * Fri Feb 24 2017 Daiki Ueno - 0.23.4-3 - Move p11-kit command back to main package * Fri Feb 24 2017 Daiki Ueno - 0.23.4-2 - Split out command line tools to -tools subpackage, to avoid a multilib issue with the main package. Suggested by Yanko Kaneti. * Wed Feb 22 2017 Daiki Ueno - 0.23.4-1 - Update to 0.23.4 release * Sat Feb 11 2017 Fedora Release Engineering - 0.23.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild * Fri Jan 6 2017 Daiki Ueno - 0.23.3-2 - Use internal hash implementation instead of NSS (#1390598) * Tue Dec 20 2016 Daiki Ueno - 0.23.3-1 - Update to 0.23.3 release - Adjust executables location from %%libdir to %%libexecdir * Thu Feb 04 2016 Fedora Release Engineering - 0.23.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild * Tue Jan 12 2016 Martin Preisler - 0.23.2-1 - Update to stable 0.23.2 release * Tue Jun 30 2015 Martin Preisler - 0.23.1-4 - In proxy module don't call C_Finalize on a forked process [#1217915] - Do not deinitialize libffi's wrapper functions [#1217915] * Thu Jun 18 2015 Fedora Release Engineering - 0.23.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild * Sat Feb 21 2015 Till Maas - 0.23.1-2 - Rebuilt for Fedora 23 Change https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code * Fri Feb 20 2015 Stef Walter - 0.23.1-1 - Update to 0.23.1 release * Thu Oct 09 2014 Stef Walter - 0.22.1-1 - Update to 0.22.1 release - Use SubjectKeyIdentifier as a CKA_ID if possible rhbz#1148895 * Sat Oct 04 2014 Stef Walter 0.22.0-1 - Update to 0.22.0 release * Wed Sep 17 2014 Stef Walter 0.21.3-1 - Update to 0.21.3 release - Includes definitions for trust extensions rhbz#1136817 * Fri Sep 05 2014 Stef Walter 0.21.2-1 - Update to 0.21.2 release - Fix problems with erroneous messages printed rhbz#1133857 * Sun Aug 17 2014 Fedora Release Engineering - 0.21.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Thu Aug 07 2014 Stef Walter - 0.21.1-1 - Update to 0.21.1 release * Wed Jul 30 2014 Tom Callaway - 0.20.3-3 - fix license handling * Fri Jul 04 2014 Stef Walter - 0.20.3-2 - Update to stable 0.20.3 release * Fri Jun 06 2014 Fedora Release Engineering - 0.20.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Sat Jan 25 2014 Ville Skyttä - 0.20.2-2 - Own the %%{_libdir}/pkcs11 dir in -trust. * Tue Jan 14 2014 Stef Walter - 0.20.2-1 - Update to upstream stable 0.20.2 release - Fix regression involving blacklisted anchors [#1041328] - Support ppc64le in build [#1052707] * Mon Sep 09 2013 Stef Walter - 0.20.1-1 - Update to upstream stable 0.20.1 release - Extract compat trust data after we've changes - Skip compat extraction if running as non-root - Better failure messages when removing anchors * Thu Aug 29 2013 Stef Walter - 0.19.4-1 - Update to new upstream 0.19.4 release * Sat Aug 03 2013 Fedora Release Engineering - 0.19.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Wed Jul 24 2013 Stef Walter - 0.19.3-1 - Update to new upstream 0.19.3 release (#967822) * Wed Jun 05 2013 Stef Walter - 0.18.3-1 - Update to new upstream stable release - Fix intermittent firefox cert validation issues (#960230) - Include the manual pages in the package * Tue May 14 2013 Stef Walter - 0.18.2-1 - Update to new upstream stable release - Reduce the libtasn1 dependency minimum version * Thu May 02 2013 Stef Walter - 0.18.1-1 - Update to new upstream stable release - 'p11-kit extract-trust' lives in libdir * Thu Apr 04 2013 Stef Walter - 0.18.0-1 - Update to new upstream stable release - Various logging tweaks (#928914, #928750) - Make the 'p11-kit extract-trust' explicitly reject additional arguments * Thu Mar 28 2013 Stef Walter - 0.17.5-1 - Make 'p11-kit extract-trust' call update-ca-trust - Work around 32-bit oveflow of certificate dates - Build fixes * Tue Mar 26 2013 Stef Walter - 0.17.4-2 - Pull in patch from upstream to fix build on ppc (#927394) * Wed Mar 20 2013 Stef Walter - 0.17.4-1 - Update to upstream version 0.17.4 * Mon Mar 18 2013 Stef Walter - 0.17.3-1 - Update to upstream version 0.17.3 - Put the trust input paths in the right order * Tue Mar 12 2013 Stef Walter - 0.16.4-1 - Update to upstream version 0.16.4 * Fri Mar 08 2013 Stef Walter - 0.16.3-1 - Update to upstream version 0.16.3 - Split out system trust module into its own package. - p11-kit-trust provides an alternative to an nss module * Tue Mar 05 2013 Stef Walter - 0.16.1-1 - Update to upstream version 0.16.1 - Setup source directories as appropriate for Shared System Certificates feature * Tue Mar 05 2013 Stef Walter - 0.16.0-1 - Update to upstream version 0.16.0 * Thu Feb 14 2013 Fedora Release Engineering - 0.14-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild * Mon Sep 17 2012 Kalev Lember - 0.14-1 - Update to 0.14 * Fri Jul 20 2012 Fedora Release Engineering - 0.13-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Mon Jul 16 2012 Kalev Lember - 0.13-1 - Update to 0.13 * Tue Mar 27 2012 Kalev Lember - 0.12-1 - Update to 0.12 - Run self tests in %%check * Sat Feb 11 2012 Kalev Lember - 0.11-1 - Update to 0.11 * Fri Jan 13 2012 Fedora Release Engineering - 0.9-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild * Tue Dec 20 2011 Matthias Clasen - 0.9-1 - Update to 0.9 * Wed Oct 26 2011 Kalev Lember - 0.8-1 - Update to 0.8 * Mon Sep 19 2011 Matthias Clasen - 0.6-1 - Update to 0.6 * Sun Sep 04 2011 Kalev Lember - 0.5-1 - Update to 0.5 * Sun Aug 21 2011 Kalev Lember - 0.4-1 - Update to 0.4 - Install the example config file to documentation directory * Wed Aug 17 2011 Kalev Lember - 0.3-2 - Tighten -devel subpackage deps (#725905) * Fri Jul 29 2011 Kalev Lember - 0.3-1 - Update to 0.3 - Upstream rewrote the ASL 2.0 bits, which makes the whole package BSD-licensed * Tue Jul 12 2011 Kalev Lember - 0.2-1 - Initial RPM release