From 488c4c8708d6f6bef4c92f853dd846acf2ac721a Mon Sep 17 00:00:00 2001 From: CentOS Sources Date: Tue, 28 Mar 2023 10:42:44 +0000 Subject: [PATCH] import jss-5.3.0-1.el9 --- .gitignore | 1 + .jss.metadata | 1 + SPECS/jss.spec | 271 +++++++++++++++++++++++++++++++++++++++++++++++++ 3 files changed, 273 insertions(+) create mode 100644 .gitignore create mode 100644 .jss.metadata create mode 100644 SPECS/jss.spec diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..baa51f6 --- /dev/null +++ b/.gitignore @@ -0,0 +1 @@ +SOURCES/jss-5.3.0.tar.gz diff --git a/.jss.metadata b/.jss.metadata new file mode 100644 index 0000000..69fb7de --- /dev/null +++ b/.jss.metadata @@ -0,0 +1 @@ +fa14d86c52d3d8d443be5ca451e758addedd5e58 SOURCES/jss-5.3.0.tar.gz diff --git a/SPECS/jss.spec b/SPECS/jss.spec new file mode 100644 index 0000000..7470a60 --- /dev/null +++ b/SPECS/jss.spec @@ -0,0 +1,271 @@ +################################################################################ +Name: jss +################################################################################ + +%global product_id idm-jss + +# Upstream version number: +%global major_version 5 +%global minor_version 3 +%global update_version 0 + +# Downstream release number: +# - development/stabilization (unsupported): 0. where n >= 1 +# - GA/update (supported): where n >= 1 +%global release_number 1 + +# Development phase: +# - development (unsupported): alpha where n >= 1 +# - stabilization (unsupported): beta where n >= 1 +# - GA/update (supported): +#global phase + +%undefine timestamp +%undefine commit_id + +Summary: Java Security Services (JSS) +URL: https://github.com/dogtagpki/jss +License: MPLv1.1 or GPLv2+ or LGPLv2+ +Version: %{major_version}.%{minor_version}.%{update_version} +Release: %{release_number}%{?phase:.}%{?phase}%{?timestamp:.}%{?timestamp}%{?commit_id:.}%{?commit_id}%{?dist} + +# To generate the source tarball: +# $ git clone https://github.com/dogtagpki/jss.git +# $ cd jss +# $ git tag v4.5. +# $ git push origin v4.5. +# Then go to https://github.com/dogtagpki/jss/releases and download the source +# tarball. +Source: https://github.com/dogtagpki/jss/archive/v%{version}%{?phase:-}%{?phase}/jss-%{version}%{?phase:-}%{?phase}.tar.gz + +# To create a patch for all changes since a version tag: +# $ git format-patch \ +# --stdout \ +# \ +# > jss-VERSION-RELEASE.patch +# Patch: jss-VERSION-RELEASE.patch + +%if 0%{?fedora} && 0%{?fedora} > 35 +ExclusiveArch: %{java_arches} +%else +ExcludeArch: i686 +%endif + +################################################################################ +# Java +################################################################################ + +%define java_devel java-17-openjdk-devel +%define java_headless java-17-openjdk-headless +%define java_home %{_jvmdir}/jre-17-openjdk + +################################################################################ +# Build Options +################################################################################ + +# By default the javadoc package will be built unless --without javadoc +# option is specified. + +%bcond_without javadoc + +# By default the build will not execute unit tests unless --with tests +# option is specified. + +%bcond_with tests + +################################################################################ +# Build Dependencies +################################################################################ + +BuildRequires: make +BuildRequires: cmake >= 3.14 +BuildRequires: zip +BuildRequires: unzip + +BuildRequires: gcc-c++ +BuildRequires: nss-devel >= 3.66 +BuildRequires: nss-tools >= 3.66 +BuildRequires: %{java_devel} +BuildRequires: jpackage-utils +BuildRequires: slf4j +BuildRequires: slf4j-jdk14 +BuildRequires: apache-commons-lang3 + +BuildRequires: junit + +%description +Java Security Services (JSS) is a java native interface which provides a bridge +for java-based applications to use native Network Security Services (NSS). +This only works with gcj. Other JREs require that JCE providers be signed. + +################################################################################ +%package -n %{product_id} +################################################################################ + +Summary: Java Security Services (JSS) + +Requires: nss >= 3.66 +Requires: %{java_headless} +Requires: jpackage-utils +Requires: slf4j +Requires: slf4j-jdk14 +Requires: apache-commons-lang3 + +Obsoletes: jss < %{version}-%{release} +Provides: jss = %{version}-%{release} +Provides: jss = %{major_version}.%{minor_version} +Provides: %{product_id} = %{major_version}.%{minor_version} + +Conflicts: ldapjdk < 4.20 +Conflicts: idm-console-framework < 1.2 +Conflicts: tomcatjss < 7.6.0 +Conflicts: pki-base < 10.10.0 + +%description -n %{product_id} +Java Security Services (JSS) is a java native interface which provides a bridge +for java-based applications to use native Network Security Services (NSS). +This only works with gcj. Other JREs require that JCE providers be signed. + +%if %{with javadoc} +################################################################################ +%package -n %{product_id}-javadoc +################################################################################ + +Summary: Java Security Services (JSS) Javadocs + +Obsoletes: jss-javadoc < %{version}-%{release} +Provides: jss-javadoc = %{version}-%{release} +Provides: jss-javadoc = %{major_version}.%{minor_version} +Provides: %{product_id}-javadoc = %{major_version}.%{minor_version} + +%description -n %{product_id}-javadoc +This package contains the API documentation for JSS. +%endif + +################################################################################ +%prep +################################################################################ + +%autosetup -n jss-%{version}%{?phase:-}%{?phase} -p 1 + +################################################################################ +%build +################################################################################ + +# Set build flags for CMake +# (see /usr/lib/rpm/macros.d/macros.cmake) +%set_build_flags + +export JAVA_HOME=%{java_home} + +# Enable compiler optimizations +export BUILD_OPT=1 + +# Generate symbolic info for debuggers +CFLAGS="-g $RPM_OPT_FLAGS" +export CFLAGS + +# Check if we're in FIPS mode +modutil -dbdir /etc/pki/nssdb -chkfips true | grep -q enabled && export FIPS_ENABLED=1 + +./build.sh \ + %{?_verbose:-v} \ + --work-dir=%{_vpath_builddir} \ + --prefix-dir=%{_prefix} \ + --include-dir=%{_includedir} \ + --lib-dir=%{_libdir} \ + --sysconf-dir=%{_sysconfdir} \ + --share-dir=%{_datadir} \ + --cmake=%{__cmake} \ + --java-home=%{java_home} \ + --jni-dir=%{_jnidir} \ + --version=%{version} \ + %{!?with_javadoc:--without-javadoc} \ + %{?with_tests:--with-tests} \ + dist + +################################################################################ +%install +################################################################################ + +./build.sh \ + %{?_verbose:-v} \ + --work-dir=%{_vpath_builddir} \ + --install-dir=%{buildroot} \ + install + +################################################################################ +%files -n %{product_id} +################################################################################ + +%defattr(-,root,root,-) +%doc jss.html +%license MPL-1.1.txt gpl.txt lgpl.txt symkey/LICENSE +%{_libdir}/* +%{_jnidir}/* + +%if %{with javadoc} +################################################################################ +%files -n %{product_id}-javadoc +################################################################################ + +%defattr(-,root,root,-) +%{_javadocdir}/jss/ +%endif + +################################################################################ +%changelog +* Thu Feb 09 2023 Red Hat PKI Team - 5.3.0-1 +- Rebase to JSS 5.3.0 + +* Thu Jan 05 2023 Red Hat PKI Team - 5.3.0-0.3.beta2 +- Rebase to JSS 5.3.0-beta2 +- Bug 2017098 - pki pkcs12-cert-add command failing with 'Unable to validate PKCS #12 file: Digests do not match' exception + +* Wed Nov 30 2022 Red Hat PKI Team - 5.3.0-0.2.beta1 +- Rebase to JSS 5.3.0-beta1 + +* Fri Sep 02 2022 Red Hat PKI Team - 5.2.1-1 +- Rebase to JSS 5.2.1 +- Bug 2100807 - pki-tomcat/kra unable to decrypt when using RSA-OAEP padding in RHEL9 with FIPS enabled + +* Wed Jun 29 2022 Red Hat PKI Team - 5.2.0-1 +- Rebase to JSS 5.2.0 + +* Mon May 02 2022 Red Hat PKI Team - 5.2.0-0.3.beta2 +- Rebase to JSS 5.2.0-beta2 +- Rename packages to idm-jss + +* Wed Apr 13 2022 Red Hat PKI Team - 5.2.0-0.2.beta1 +- Rebase to JSS 5.2.0-beta1 + +* Tue Feb 15 2022 Red Hat PKI Team - 5.0.3-1 +- Rebase to JSS 5.0.3 +- Bug 2046023 - CVE-2021-4213 jss: memory leak in TLS connection leads to OOM [rhel-9.0] + +* Wed Feb 02 2022 Red Hat PKI Team - 5.0.2-1 +- Rebase to JSS 5.0.2 +- Bug 2029838 - SHA1withRSA being listed in signing certificates while approving certificate via Agent page in browser + +* Fri Nov 19 2021 Red Hat PKI Team - 5.0.1-1 +- Rebase to JSS 5.0.1 + +* Tue Oct 05 2021 Red Hat PKI Team - 5.0.0-1 +- Rebase to JSS 5.0.0 + +* Thu Sep 16 2021 Red Hat PKI Team - 5.0.0-0.5.beta1 +- Rebase to JSS 5.0.0-beta1 + +* Thu Sep 09 2021 Red Hat PKI Team - 5.0.0-0.4.alpha1 +- Drop BuildRequires and Requires on glassfish-jaxb-api + Resolves #2002576 + +* Mon Aug 09 2021 Mohan Boddu - 5.0.0-0.3.alpha1 +- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags + Related: rhbz#1991688 + +* Mon Aug 2 2021 Red Hat PKI Team - 5.0.0-0.2 +- Drop javadoc package + +* Fri Jun 25 2021 Red Hat PKI Team - 5.0.0-0.1 +- Rebase to JSS 5.0.0-alpha1