%if 0%{?with_snapshot} %global gitdate 20220207 %global portable_commit 20d0b2306452fedf56b8487e517a59848d246eea %global portable_shortcommit %(c=%{portable_commit}; echo ${c:0:7}) %global openbsd_commit 0c3ff93cf8e4880e3099a7bbee8956929fd6ceb2 %global openbsd_shortcommit %(c=%{openbsd_commit}; echo ${c:0:7}) %endif Summary: OpenBSD RPKI validator to support BGP Origin Validation Name: rpki-client Version: 8.2 Release: 3%{?with_snapshot:.git%{gitdate}}%{?dist} # rpki-client itself is ISC but uses other source codes, breakdown: # BSD-2-Clause: include/sys/tree.h and src/{http,output}.c # BSD-3-Clause: compat/{setproctitle,vis}.c and include/{sha2_openbsd,vis,sys/queue}.h and src/mkdir.c # OpenSSL: compat/x509_purp.c # LicenseRef-Fedora-Public-Domain: include/{{poll,sha2,stdlib,string,unistd},openssl/{asn1,safestack,x509v3}}.h # and include/sys/{_null,socket,types,wait}.h and compat/explicit_bzero.c License: ISC AND BSD-2-Clause AND BSD-3-Clause AND OpenSSL AND LicenseRef-Fedora-Public-Domain URL: https://www.rpki-client.org/ %if !0%{?with_snapshot} Source0: https://ftp.openbsd.org/pub/OpenBSD/rpki-client/%{name}-%{version}.tar.gz Source1: https://ftp.openbsd.org/pub/OpenBSD/rpki-client/%{name}-%{version}.tar.gz.asc Source2: gpgkey-B5B6416FEA6DDA05EA562A9FCB987F2783972FF9.gpg Patch0: rpki-client-8.2-inet_net_pton.patch %else Source0: https://github.com/rpki-client/rpki-client-portable/archive/%{portable_commit}/%{name}-portable-%{version}-%{portable_shortcommit}.tar.gz Source1: https://github.com/rpki-client/rpki-client-openbsd/archive/%{openbsd_commit}/%{name}-openbsd-%{version}-%{openbsd_shortcommit}.tar.gz %endif Source3: TALs.md Source4: %{name}.sysusersd %if !0%{?with_snapshot} BuildRequires: gnupg2 %else BuildRequires: autoconf BuildRequires: automake BuildRequires: libtool %endif BuildRequires: gcc BuildRequires: make %if 0%{?fedora} || 0%{?rhel} >= 8 BuildRequires: openssl-devel >= 1.1.0 %else BuildRequires: openssl11-devel %endif BuildRequires: libretls-devel BuildRequires: expat-devel BuildRequires: rsync BuildRequires: systemd-rpm-macros Requires: rsync %{?sysusers_requires_compat} %description The OpenBSD rpki-client is a free, easy-to-use implementation of the Resource Public Key Infrastructure (RPKI) for Relying Parties (RP) to facilitate validation of the Route Origin of a BGP announcement. The program queries the RPKI repository system, downloads and validates Route Origin Authorisations (ROAs) and finally outputs Validated ROA Payloads (VRPs) in the configuration format of OpenBGPD, BIRD, and also as CSV or JSON objects for consumption by other routing stacks. %prep %if !0%{?with_snapshot} %{gpgverify} --keyring='%{SOURCE2}' --signature='%{SOURCE1}' --data='%{SOURCE0}' %setup -q %patch0 -p1 -b .inet_net_pton %else %setup -q -n %{name}-portable-%{portable_commit} tar xfz %{SOURCE1} mv -f %{name}-openbsd-%{openbsd_commit} openbsd ./autogen.sh %endif cp -pf %{SOURCE3} . %build %configure \ %if 0%{?rhel} && 0%{?rhel} < 8 --with-openssl=openssl11 \ %endif --with-user=%{name} \ --with-tal-dir=%{_sysconfdir}/pki/tals \ --with-base-dir=%{_localstatedir}/cache/%{name} \ --with-output-dir=%{_localstatedir}/lib/%{name} %make_build ACLOCAL=true AUTOMAKE=true %install %make_install ACLOCAL=true AUTOMAKE=true install -D -p -m 0644 %{SOURCE4} $RPM_BUILD_ROOT%{_sysusersdir}/%{name}.conf %pre %sysusers_create_compat %{SOURCE4} %files %license LICENSE %doc AUTHORS README.md TALs.md %{_sbindir}/%{name} %{_sysconfdir}/pki/tals/ %{_sysusersdir}/%{name}.conf %{_mandir}/man8/%{name}.8* %dir %attr(0750,%{name},%{name}) %{_localstatedir}/cache/%{name}/ %dir %attr(0755,%{name},%{name}) %{_localstatedir}/lib/%{name}/ %changelog * Sat Dec 24 2022 Robert Scheck 8.2-3 - Rebuilt for libretls 3.7.0 * Thu Dec 22 2022 Robert Scheck 8.2-2 - Added upstream patch for AF_INET6 support in inet_net_pton() * Wed Dec 14 2022 Robert Scheck 8.2-1 - Upgrade to 8.2 (#2153077) * Sun Sep 11 2022 Robert Scheck 8.0-1 - Upgrade to 8.0 (#2125925) * Thu Jul 28 2022 Robert Scheck 7.9-3 - Added sysusers.d file to achieve user() and group() provides * Sat Jul 23 2022 Fedora Release Engineering - 7.9-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Fri Jul 15 2022 Robert Scheck 7.9-1 - Upgrade to 7.9 (#2106947) * Sat May 14 2022 Robert Scheck 7.8-2 - Rebuilt for libretls 3.5.2 * Sat Apr 09 2022 Robert Scheck 7.8-1 - Upgrade to 7.8 (#2073705) * Fri Apr 08 2022 Robert Scheck 7.7-1 - Upgrade to 7.7 (#2073214) * Sun Feb 27 2022 Robert Scheck 7.6-2 - Rebuilt for libretls 3.5.0 * Mon Feb 07 2022 Robert Scheck 7.6-1 - Upgrade to 7.6 (#2051736) * Fri Jan 21 2022 Fedora Release Engineering - 7.5-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Tue Nov 09 2021 Robert Scheck 7.5-1 - Upgrade to 7.5 (#2021523) * Sat Oct 30 2021 Robert Scheck 7.4-1 - Upgrade to 7.4 (#2018729) * Sat Oct 16 2021 Robert Scheck 7.3-2 - Rebuilt for libretls 3.4.1 * Thu Sep 23 2021 Robert Scheck 7.3-1 - Upgrade to 7.3 (#2007447) * Tue Sep 14 2021 Sahana Prasad - 7.2-2 - Rebuilt with OpenSSL 3.0.0 * Wed Jul 28 2021 Robert Scheck 7.2-1 - Upgrade to 7.2 (#1987093) * Fri Jul 23 2021 Fedora Release Engineering - 7.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Tue May 18 2021 Robert Scheck 7.1-1 - Upgrade to 7.1 (#1961870) * Fri Apr 16 2021 Robert Scheck 7.0-1 - Upgrade to 7.0 (#1950163) * Wed Jan 27 2021 Fedora Release Engineering - 6.8p1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Wed Nov 25 2020 Robert Scheck 6.8p1-2 - Added upstream hotfix for stalled rsync servers in the wild * Thu Nov 12 2020 Robert Scheck 6.8p1-1 - Upgrade to 6.8p1 (#1897161) * Tue Oct 20 2020 Robert Scheck 6.8p0-1 - Upgrade to 6.8p0 (#1889618) * Wed Jul 29 2020 Robert Scheck 6.7p1-1 - Upgrade to 6.7p1 (#1861137) * Wed Jul 29 2020 Fedora Release Engineering - 6.7p0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Mon May 18 2020 Robert Scheck 6.7p0-1 - Upgrade to 6.7p0 (#1837150) * Sun Apr 19 2020 Robert Scheck 6.6p2-1 - Upgrade to 6.6p2 * Tue Apr 14 2020 Robert Scheck 6.6p1-1 - Upgrade to 6.6p1 * Sun Apr 05 2020 Robert Scheck 0.3.0-2 - Apply fixes from upstream (rebase to commit 87683e9) * Mon Feb 24 2020 Robert Scheck 0.3.0-1 - Upgrade to 0.3.0 (#1806049) - Install bundled Trust Anchor Locators (TALs) * Thu Jan 30 2020 Fedora Release Engineering - 0.2.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Wed Jun 19 2019 Robert Scheck 0.2.0-1 - Upgrade to 0.2.0 (#1745770) - Initial spec file for Fedora and Red Hat Enterprise Linux