Name: globus-gssapi-gsi %global _name %(tr - _ <<< %{name}) Version: 14.20 Release: 1%{?dist} Summary: Grid Community Toolkit - GSSAPI library License: ASL 2.0 URL: https://github.com/gridcf/gct/ Source: https://repo.gridcf.org/gct6/sources/%{_name}-%{version}.tar.gz Source8: README BuildRequires: make BuildRequires: gcc BuildRequires: globus-common-devel >= 15 BuildRequires: globus-openssl-module-devel >= 3 BuildRequires: globus-gsi-openssl-error-devel >= 2 BuildRequires: globus-gsi-cert-utils-devel >= 8 BuildRequires: globus-gsi-credential-devel >= 5 BuildRequires: globus-gsi-callback-devel >= 4 BuildRequires: globus-gsi-proxy-core-devel >= 8 BuildRequires: globus-gsi-sysconfig-devel >= 8 BuildRequires: openssl-devel BuildRequires: libtool-ltdl-devel BuildRequires: doxygen # Additional requirements for make check BuildRequires: openssl BuildRequires: perl-interpreter BuildRequires: perl(File::Copy) BuildRequires: perl(File::Temp) BuildRequires: perl(strict) BuildRequires: perl(Test::More) Requires: globus-gsi-sysconfig%{?_isa} >= 8 %if %{?rhel}%{!?rhel:0} == 7 Requires: openssl-libs >= 1.0.2 %endif %package devel Summary: Grid Community Toolkit - GSSAPI library Development Files Requires: %{name}%{?_isa} = %{version}-%{release} %package doc Summary: Grid Community Toolkit - GSSAPI library Documentation Files BuildArch: noarch %description The Grid Community Toolkit (GCT) is an open source software toolkit used for building grid systems and applications. It is a fork of the Globus Toolkit originally created by the Globus Alliance. It is supported by the Grid Community Forum (GridCF) that provides community-based support for core software packages in grid computing. The %{name} package contains: GSSAPI library %description devel The Grid Community Toolkit (GCT) is an open source software toolkit used for building grid systems and applications. It is a fork of the Globus Toolkit originally created by the Globus Alliance. It is supported by the Grid Community Forum (GridCF) that provides community-based support for core software packages in grid computing. The %{name}-devel package contains: GSSAPI library Development Files %description doc The Grid Community Toolkit (GCT) is an open source software toolkit used for building grid systems and applications. It is a fork of the Globus Toolkit originally created by the Globus Alliance. It is supported by the Grid Community Forum (GridCF) that provides community-based support for core software packages in grid computing. The %{name}-doc package contains: GSSAPI library Documentation Files %prep %setup -q -n %{_name}-%{version} %build # Reduce overlinking export LDFLAGS="-Wl,--as-needed -Wl,-z,defs %{?__global_ldflags}" %configure --disable-static \ --includedir=%{_includedir}/globus \ --libexecdir=%{_datadir}/globus \ --docdir=%{_pkgdocdir} # Reduce overlinking sed 's!CC \(.*-shared\) !CC \\\${wl}--as-needed \1 !' -i libtool %make_build %install %make_install # Remove libtool archives (.la files) rm %{buildroot}%{_libdir}/*.la # Install README file install -m 644 -p %{SOURCE8} %{buildroot}%{_pkgdocdir}/README # Remove license file from pkgdocdir rm %{buildroot}%{_pkgdocdir}/GLOBUS_LICENSE %check %make_build check %ldconfig_scriptlets %files %{_libdir}/libglobus_gssapi_gsi.so.* %config(noreplace) %{_sysconfdir}/grid-security/gsi.conf %dir %{_pkgdocdir} %doc %{_pkgdocdir}/README %license GLOBUS_LICENSE %files devel %{_includedir}/globus/* %{_libdir}/libglobus_gssapi_gsi.so %{_libdir}/pkgconfig/%{name}.pc %files doc %doc %{_mandir}/man3/* %dir %{_pkgdocdir} %dir %{_pkgdocdir}/html %doc %{_pkgdocdir}/html/* %license GLOBUS_LICENSE %changelog * Wed May 25 2022 Mattias Ellert - 14.20-1 - New GCT release v6.2.20220524 - Drop patches included in the release - Disable sending session tickets after the TLS 1.3 handshake * Sun Mar 06 2022 Mattias Ellert - 14.17-4 - Better logic for TLS 1.3 special handling - Use sha256 hash when generating test certificates - Don't test TLS 1.0 and 1.1 when using openssl 3.0.1 or later * Thu Jan 20 2022 Fedora Release Engineering - 14.17-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Tue Sep 14 2021 Sahana Prasad - 14.17-2 - Rebuilt with OpenSSL 3.0.0 * Tue Aug 17 2021 Mattias Ellert - 14.17-1 - Compatibility with TLS v1.3 (14.15) - Compatibility with the dcache server implementation (14.16) - Minimize session ticket size since we don't use them (14.16) - OpenSSL 3.0 fixes (14.17) * Thu Jul 22 2021 Fedora Release Engineering - 14.14-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Tue Jan 26 2021 Fedora Release Engineering - 14.14-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Sun Dec 13 2020 Mattias Ellert - 14.14-1 - Disallow TLS 1.0/1.1 by default again (14.12) - Minor fixes to makefiles (14.13) - Fix output payload check in gss_init_sec_context() after SSL handshake (14.14) - Add BuildRequires perl-interpreter - Add additional perl dependencies for tests - Specfile updates * Sat Aug 01 2020 Fedora Release Engineering - 14.11-4 - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Mon Jul 27 2020 Fedora Release Engineering - 14.11-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Tue Jan 28 2020 Fedora Release Engineering - 14.11-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Fri Aug 30 2019 Mattias Ellert - 14.11-1 - Keep peers in sync after SSL handshake failure in gssapi * Thu Jul 25 2019 Fedora Release Engineering - 14.10-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Tue Feb 26 2019 Mattias Ellert - 14.10-1 - Doxygen fixes * Thu Jan 31 2019 Fedora Release Engineering - 14.9-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Fri Nov 16 2018 Mattias Ellert - 14.9-1 - Allow TLS 1.0/1.1 - Fix leaks - Drop patch globus-gssapi-gsi-allow-tls-1.0-1.1.patch accepted upstream * Sat Sep 22 2018 Mattias Ellert - 14.7-2 - Allow TLS 1.0 and 1.1 - Require openssl-libs >= 1.0.2 on EPEL 7 (for SSL_set_alpn_protos) * Thu Sep 13 2018 Mattias Ellert - 14.7-1 - Switch upstream to Grid Community Toolkit - First Grid Community Toolkit release (14.0) - Put back use of SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS - Use 2048 bit RSA key for tests (14.1) - Avoid TLS 1.3 - needs porting (14.2) - Merge GT6 update 13.6 into GCT (14.3) - Merge GT6 update 13.8 into GCT (14.4) - Fix globus-gsi-proxy-core version dependency in configure.ac (14.5) - Merge GT6 update 13.9 into GCT (14.6) - Merge GT6 update 13.10 into GCT (14.7) - Drop patch globus-gssapi-gsi-empty-frag.patch (accepted upstream) * Sat Sep 01 2018 Mattias Ellert - 13.10-1 - GT6 update: - Set the default minimum TLS version to 1.2. 1.0 and 1.1 are deprecated. - Set the maximum TLS version default to 1.2. 1.3 is not yet supported. - Use 2048 bit keys to support openssl 1.1.1 (13.9) - Fix resource leak when loading cert directories (13.10) - Drop patch globus-gssapi-gsi-no-tls13.patch (accepted upstream) * Sun Aug 26 2018 Mattias Ellert - 13.8-3 - Avoid TLS 1.3 - needs porting * Fri Jul 13 2018 Fedora Release Engineering - 13.8-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Sun Jun 17 2018 Mattias Ellert - 13.8-1 - GT6 update: Add context inquire OID support to get TLS version and cipher * Fri Jun 01 2018 Mattias Ellert - 13.6-1 - GT6 update: Enable ECDH ciphers for openssl < 1.1.0 * Sat Apr 07 2018 Mattias Ellert - 13.5-1 - GT6 update: Don't check uid on win * Wed Feb 07 2018 Fedora Release Engineering - 13.4-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild * Thu Nov 02 2017 Mattias Ellert - 13.4-1 - GT6 update: Improve vhost support * Tue Oct 31 2017 Mattias Ellert - 13.3-1 - GT6 update: Allow configuration of non-root user to own credentials for root services * Sun Oct 22 2017 Mattias Ellert - 13.2-1 - GT6 update: fix make clean rule, fix alpn mismatch test * Tue Sep 26 2017 Mattias Ellert - 13.1-1 - GT6 update: - Use X509_VHOST_CRED_DIR if set when accepting - Fix race condition - Drop patch globus-gssapi-gsi-race.patch (accepted upstream) * Sat Sep 09 2017 Mattias Ellert - 13.0-2 - Fix race condition in the Makefile in test directory * Sat Sep 09 2017 Mattias Ellert - 13.0-1 - GT6 update: - Add SNI vhost cred dir support - Add optional ALPN processing * Fri Jul 28 2017 Mattias Ellert - 12.17-3 - Restore usage of SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS option * Wed Jul 26 2017 Fedora Release Engineering - 12.17-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild * Tue Jul 04 2017 Mattias Ellert - 12.17-1 - GT6 update: Fix indicate_mechs_test when using openssl v1.1.0 * Thu Jun 22 2017 Mattias Ellert - 12.16-1 - GT6 update: - Don't unlock unlocked mutex (12.14) - Remove legacy SSLv3 support (12.15) - Test fixes (12.16) - Drop patch globus-gssapi-gsi-mutex-unlock.patch (fixed upstream 12.14) * Mon Mar 27 2017 Mattias Ellert - 12.13-4 - EPEL 5 End-Of-Life specfile clean-up - Remove Group and BuildRoot tags - Remove _pkgdocdir macro definition - Drop redundant Requires corresponding to autogenerated pkgconfig Requires - Don't clear the buildroot in the install section - Remove the clean section - Drop the globus-gssapi-gsi-openssl098.patch * Fri Mar 10 2017 Mattias Ellert - 12.13-3 - Don't unlock unlocked mutex * Fri Feb 10 2017 Fedora Release Engineering - 12.13-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild * Sun Dec 25 2016 Mattias Ellert - 12.13-1 - GT6 update: Skip mech v1 tests for OpenSSL >= 1.1.0 * Wed Nov 09 2016 Mattias Ellert - 12.12-1 - GT6 update: More updates for mech negotiation * Fri Nov 04 2016 Mattias Ellert - 12.11-1 - GT6 update: Add support for new mech oid for different MIC formats * Thu Oct 13 2016 Mattias Ellert - 12.9-2 - Rebuild for openssl 1.1.0 (Fedora 26) * Fri Sep 23 2016 Mattias Ellert - 12.9-1 - GT6 update - Add backward compatibility fallback in verify_mic (12.7) - Fix hash detection (12.8) - Fix bad index references (12.9) - Drop patch globus-gssapi-gsi-compat-mic.patch (fixed upstream 12.7) * Fri Sep 16 2016 Mattias Ellert - 12.5-2 - Use backward compatible mic by default for now * Wed Sep 07 2016 Mattias Ellert - 12.5-1 - GT6 update - Updates for mic handling without using internal openssl structs (12.4) - More tweaks to get_mic/verify_mic for 1.0.1 (12.5) - Drop patch globus-gssapi-gsi-no-mic-test.patch * Thu Sep 01 2016 Mattias Ellert - 12.3-1 - GT6 update: Updates for OpenSSL 1.1.0 * Fri May 06 2016 Mattias Ellert - 12.1-1 - GT6 update: Change default host verification mode to strict * Mon May 02 2016 Mattias Ellert - 11.29-1 - GT6 update: Add support for certificates without a CN * Wed Feb 03 2016 Fedora Release Engineering - 11.26-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild * Wed Jan 27 2016 Mattias Ellert - 11.26-1 - GT6 update - Fix FORCE_TLS setting to allow TLSv1.1 and TLS1.2, not just TLSv1.0 * Wed Jan 13 2016 Mattias Ellert - 11.25-1 - GT6 update: support loading mutiple extra CA certs * Thu Dec 10 2015 Mattias Ellert - 11.24-1 - GT6 update: Don't call SSLv3_method unless it is available * Wed Sep 09 2015 Mattias Ellert - 11.22-1 - GT6 update: GT-627: gss_import_cred crash - Enable checks on EPEL6 ppc64 - no longer fails with above fix * Wed Jul 29 2015 Mattias Ellert - 11.20-1 - GT6 update - GT-614: GLOBUS_GSS_C_NT_HOST_IP doesn't allow host-only imports and comparisons * Sat Jun 20 2015 Mattias Ellert - 11.19-1 - GT6 update (export config file values into environment if not set already) * Wed Jun 17 2015 Fedora Release Engineering - 11.18-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild * Fri Jun 05 2015 Mattias Ellert - 11.18-1 - GT6 update (Change the name compatibility mode in gsi.conf to HYBRID to match the behavior in 11.14 and earlier. Also some test fixes.) * Fri May 29 2015 Mattias Ellert - 11.16-1 - GT6-update (SSL cipher configuration) * Fri Jan 23 2015 Mattias Ellert - 11.14-2 - Implement updated license packaging guidelines * Thu Nov 13 2014 Mattias Ellert - 11.14-1 - GT6 update - Drop patch globus-gssapi-gsi-doxygen.patch (fixed upstream) * Mon Oct 27 2014 Mattias Ellert - 11.13-1 - GT6 update - Update patch globus-gssapi-gsi-doxygen.patch * Fri Sep 12 2014 Mattias Ellert - 11.12-1 - Update to Globus Toolkit 6.0 - Drop GPT build system and GPT packaging metadata - Enable checks - Disable checks on EPEL6 ppc64 * Sat Aug 16 2014 Fedora Release Engineering - 10.10-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Sat Jun 07 2014 Fedora Release Engineering - 10.10-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Tue May 20 2014 Brent Baude - 10.10-3 - Replace arch def of ppc64 with power64 macro for ppc64le enablement * Thu Dec 05 2013 Mattias Ellert - 10.10-2 - Remove directory man page * Thu Nov 07 2013 Mattias Ellert - 10.10-1 - Update to Globus Toolkit 5.2.5 - Drop patch globus-gssapi-gsi-doxygen.patch (fixed upstream) - Remove obsolete workaround for broken RHEL 5 epstopdf * Sat Aug 03 2013 Fedora Release Engineering - 10.7-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Sun Jul 28 2013 Mattias Ellert - 10.7-5 - Implement updated packaging guidelines * Tue May 21 2013 Mattias Ellert - 10.7-4 - Add aarch64 to the list of 64 bit platforms * Wed Feb 13 2013 Fedora Release Engineering - 10.7-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild * Thu Dec 06 2012 Mattias Ellert - 10.7-2 - Add build requires for TexLive 2012 * Sun Jul 22 2012 Mattias Ellert - 10.7-1 - Update to Globus Toolkit 5.2.2 * Thu Jul 19 2012 Fedora Release Engineering - 10.6-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Fri Apr 27 2012 Mattias Ellert - 10.6-1 - Update to Globus Toolkit 5.2.1 - Drop patch globus-gssapi-gsi-deps.patch, globus-gssapi-gsi-format.patch and globus-gssapi-gsi-doxygen.patch (fixed upstream) * Mon Jan 23 2012 Mattias Ellert - 10.2-2 - Fix broken links in README file * Wed Dec 14 2011 Mattias Ellert - 10.2-1 - Update to Globus Toolkit 5.2.0 * Fri Jun 03 2011 Mattias Ellert - 7.8-1 - Update to Globus Toolkit 5.0.4 * Sun Apr 24 2011 Mattias Ellert - 7.6-2 - Add README file * Fri Feb 25 2011 Mattias Ellert - 7.6-1 - Update to Globus Toolkit 5.0.3 * Fri Feb 11 2011 Fedora Release Engineering - 7.5-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild * Wed Apr 14 2010 Mattias Ellert - 7.5-1 - Update to Globus Toolkit 5.0.1 - Drop patch globus-gssapi-gsi-openssl.patch (fixed upstream) * Mon Feb 08 2010 Mattias Ellert - 7.0-2 - Update openssl 1.0.0 patch based on RIC-29 branch in upstream CVS * Fri Jan 22 2010 Mattias Ellert - 7.0-1 - Update to Globus Toolkit 5.0.0 * Fri Aug 21 2009 Tomas Mraz - 5.9-5 - rebuilt with new openssl * Thu Jul 23 2009 Mattias Ellert - 5.9-4 - Add instruction set architecture (isa) tags - Make doc subpackage noarch * Wed Jun 03 2009 Mattias Ellert - 5.9-3 - Update to official Fedora Globus packaging guidelines * Tue May 12 2009 Mattias Ellert - 5.9-2 - Change the License tag to take the library/ssl_locl.h file into account * Thu Apr 16 2009 Mattias Ellert - 5.9-1 - Make comment about source retrieval more explicit - Change defines to globals - Remove explicit requires on library packages - Put GLOBUS_LICENSE file in extracted source tarball * Sun Mar 15 2009 Mattias Ellert - 5.9-0.5 - Adapting to updated globus-core package * Thu Feb 26 2009 Mattias Ellert - 5.9-0.4 - Add s390x to the list of 64 bit platforms * Thu Jan 01 2009 Mattias Ellert - 5.9-0.3 - Adapt to updated GPT package * Wed Oct 15 2008 Mattias Ellert - 5.9-0.2 - Update to Globus Toolkit 4.2.1 * Mon Jul 14 2008 Mattias Ellert - 5.3-0.1 - Autogenerated