|
@@ -1,11 +1,11 @@
|
|
|
%define build_compat32 %{?_with_compat32:1}%{!?_with_compat32:0}
|
|
|
|
|
|
-%define nspr_version 4.9.6
|
|
|
+%define nspr_version 4.10.1
|
|
|
%define unsupported_tools_directory %{_libdir}/nss/unsupported-tools
|
|
|
|
|
|
Summary: Network Security Services
|
|
|
Name: nss
|
|
|
-Version: 3.14.3
|
|
|
+Version: 3.15.2
|
|
|
Release: 1%{?_dist_release}
|
|
|
License: MPLv1.1 or GPLv2+ or LGPLv2+
|
|
|
URL: http://www.mozilla.org/projects/security/pki/nss/
|
|
@@ -17,7 +17,7 @@ Source2: nss-config.in
|
|
|
Source3: blank-cert8.db
|
|
|
Source4: blank-key3.db
|
|
|
Source5: blank-secmod.db
|
|
|
-Source12: %{name}-pem-20120811.tar.bz2
|
|
|
+Source12: %{name}-pem-20130828.tar.bz2
|
|
|
Source101: nss-util.pc.in
|
|
|
Source102: nss-util-config.in
|
|
|
|
|
@@ -26,19 +26,21 @@ Patch3: renegotiate-transitional.patch
|
|
|
Patch6: nss-enable-pem.patch
|
|
|
Patch16: nss-539183.patch
|
|
|
Patch18: nss-646045.patch
|
|
|
-# must statically link pem against the freebl in the buildroot
|
|
|
-# Needed only when freebl on tree has new APIS
|
|
|
-#Patch25: nsspem-use-system-freebl.patch
|
|
|
-# This patch is currently meant for stable branches
|
|
|
-Patch29: nss-ssl-cbc-random-iv-off-by-default.patch
|
|
|
-# Prevent users from trying to enable ssl pkcs11 bypass
|
|
|
-Patch39: nss-ssl-enforce-no-pkcs11-bypass.path
|
|
|
# TODO: Remove this patch when the ocsp test are fixed
|
|
|
Patch40: nss-3.14.0.0-disble-ocsp-test.patch
|
|
|
-# Upstream: https://bugzilla.mozilla.org/show_bug.cgi?id=835919
|
|
|
-Patch43: no-softoken-freebl-tests.patch
|
|
|
Patch44: 0001-sync-up-with-upstream-softokn-changes.patch
|
|
|
Patch45: Bug-896651-pem-dont-trash-keys-on-failed-login.patch
|
|
|
+# The ocsp stapling tests currently require access to the
|
|
|
+# kuix.de test server but koji forbids outbount connections
|
|
|
+Patch46: disable-ocsp-stapling-tests.patch
|
|
|
+# Fedora / RHEL-only patch, the templates directory was originally
|
|
|
+# introduced to support mod _revocator
|
|
|
+Patch47: utilwrap-include-templates.patch
|
|
|
+# TODO submit this patch upstream
|
|
|
+Patch48: nss-versus-softoken-tests.patch
|
|
|
+# TODO remove when we switch to building nss without softoken
|
|
|
+Patch49: nss-skip-bltest-and-fipstest.patch
|
|
|
+Patch50: iquote.patch
|
|
|
|
|
|
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
|
|
|
BuildRequires: nspr-devel >= %{nspr_version}
|
|
@@ -118,15 +120,14 @@ v3 certificates, and other security standards.
|
|
|
%patch6 -p0 -b .libpem
|
|
|
%patch16 -p0 -b .539183
|
|
|
%patch18 -p0 -b .646045
|
|
|
-# link pem against buildroot's freebl, essential when mixing and matching
|
|
|
-#%patch25 -p0 -b .systemfreebl
|
|
|
-# activate for stable and beta branches
|
|
|
-#%patch29 -p0 -b .cbcrandomivoff
|
|
|
-%patch39 -p1 -b .nobypass
|
|
|
-%patch40 -p1 -b .noocsptest
|
|
|
-%patch43 -p0 -b .nosoftokentests
|
|
|
+%patch40 -p0 -b .noocsptest
|
|
|
%patch44 -p1 -b .syncupwithupstream
|
|
|
%patch45 -p0 -b .notrash
|
|
|
+%patch46 -p0 -b .skipoutbound
|
|
|
+%patch47 -p0 -b .templates
|
|
|
+%patch48 -p0 -b .crypto
|
|
|
+%patch49 -p0 -b .skipthem
|
|
|
+%patch50 -p0 -b .iquote
|
|
|
|
|
|
%build
|
|
|
|
|
@@ -169,9 +170,9 @@ export USE_64
|
|
|
%endif
|
|
|
|
|
|
#
|
|
|
-%{__make} -C ./mozilla/security/coreconf
|
|
|
-%{__make} -C ./mozilla/security/dbm
|
|
|
-%{__make} -C ./mozilla/security/nss
|
|
|
+%{__make} -C ./nss/coreconf
|
|
|
+%{__make} -C ./nss/lib/dbm
|
|
|
+%{__make} -C ./nss
|
|
|
|
|
|
# Set up our package file
|
|
|
%{__mkdir_p} $RPM_BUILD_ROOT/%{_libdir}/pkgconfig
|
|
@@ -184,9 +185,9 @@ export USE_64
|
|
|
-e "s,%%NSSUTIL_VERSION%%,%{version},g" > \
|
|
|
$RPM_BUILD_ROOT/%{_libdir}/pkgconfig/nss.pc
|
|
|
|
|
|
-NSS_VMAJOR=`cat mozilla/security/nss/lib/nss/nss.h | grep "#define.*NSS_VMAJOR" | awk '{print $3}'`
|
|
|
-NSS_VMINOR=`cat mozilla/security/nss/lib/nss/nss.h | grep "#define.*NSS_VMINOR" | awk '{print $3}'`
|
|
|
-NSS_VPATCH=`cat mozilla/security/nss/lib/nss/nss.h | grep "#define.*NSS_VPATCH" | awk '{print $3}'`
|
|
|
+NSS_VMAJOR=`cat nss/lib/nss/nss.h | grep "#define.*NSS_VMAJOR" | awk '{print $3}'`
|
|
|
+NSS_VMINOR=`cat nss/lib/nss/nss.h | grep "#define.*NSS_VMINOR" | awk '{print $3}'`
|
|
|
+NSS_VPATCH=`cat nss/lib/nss/nss.h | grep "#define.*NSS_VPATCH" | awk '{print $3}'`
|
|
|
|
|
|
export NSS_VMAJOR
|
|
|
export NSS_VMINOR
|
|
@@ -212,9 +213,9 @@ chmod 755 $RPM_BUILD_ROOT/%{_bindir}/nss-config
|
|
|
-e "s,%%NSSUTIL_VERSION%%,%{version},g" > \
|
|
|
$RPM_BUILD_ROOT/%{_libdir}/pkgconfig/nss-util.pc
|
|
|
|
|
|
-NSSUTIL_VMAJOR=`cat mozilla/security/nss/lib/util/nssutil.h | grep "#define.*NSSUTIL_VMAJOR" | awk '{print $3}'`
|
|
|
-NSSUTIL_VMINOR=`cat mozilla/security/nss/lib/util/nssutil.h | grep "#define.*NSSUTIL_VMINOR" | awk '{print $3}'`
|
|
|
-NSSUTIL_VPATCH=`cat mozilla/security/nss/lib/util/nssutil.h | grep "#define.*NSSUTIL_VPATCH" | awk '{print $3}'`
|
|
|
+NSSUTIL_VMAJOR=`cat nss/lib/util/nssutil.h | grep "#define.*NSSUTIL_VMAJOR" | awk '{print $3}'`
|
|
|
+NSSUTIL_VMINOR=`cat nss/lib/util/nssutil.h | grep "#define.*NSSUTIL_VMINOR" | awk '{print $3}'`
|
|
|
+NSSUTIL_VPATCH=`cat nss/lib/util/nssutil.h | grep "#define.*NSSUTIL_VPATCH" | awk '{print $3}'`
|
|
|
|
|
|
export NSSUTIL_VMAJOR
|
|
|
export NSSUTIL_VMINOR
|
|
@@ -246,7 +247,7 @@ chmod 755 $RPM_BUILD_ROOT/%{_bindir}/nss-util-config
|
|
|
for file in libsoftokn3.so libfreebl3.so libnss3.so libnssutil3.so \
|
|
|
libssl3.so libsmime3.so libnssckbi.so libnsspem.so libnssdbm3.so
|
|
|
do
|
|
|
- %{__install} -m 755 mozilla/dist/*.OBJ/lib/$file $RPM_BUILD_ROOT/%{_libdir}
|
|
|
+ %{__install} -m 755 dist/*.OBJ/lib/$file $RPM_BUILD_ROOT/%{_libdir}
|
|
|
done
|
|
|
|
|
|
# These ghost files will be generated in the post step
|
|
@@ -262,23 +263,23 @@ touch $RPM_BUILD_ROOT/%{_libdir}/libfreebl3.chk
|
|
|
# Copy the development libraries we want
|
|
|
for file in libcrmf.a libnssb.a libnssckfw.a
|
|
|
do
|
|
|
- %{__install} -m 644 mozilla/dist/*.OBJ/lib/$file $RPM_BUILD_ROOT/%{_libdir}
|
|
|
+ %{__install} -m 644 dist/*.OBJ/lib/$file $RPM_BUILD_ROOT/%{_libdir}
|
|
|
done
|
|
|
|
|
|
# Copy the binaries we want
|
|
|
for file in certutil cmsutil crlutil modutil pk12util signtool signver ssltap
|
|
|
do
|
|
|
- %{__install} -m 755 mozilla/dist/*.OBJ/bin/$file $RPM_BUILD_ROOT/%{_bindir}
|
|
|
+ %{__install} -m 755 dist/*.OBJ/bin/$file $RPM_BUILD_ROOT/%{_bindir}
|
|
|
done
|
|
|
|
|
|
# Copy the binaries we ship as unsupported
|
|
|
for file in atob btoa derdump ocspclnt pp selfserv shlibsign strsclnt symkeyutil tstclnt vfyserv vfychain
|
|
|
do
|
|
|
- %{__install} -m 755 mozilla/dist/*.OBJ/bin/$file $RPM_BUILD_ROOT/%{unsupported_tools_directory}
|
|
|
+ %{__install} -m 755 dist/*.OBJ/bin/$file $RPM_BUILD_ROOT/%{unsupported_tools_directory}
|
|
|
done
|
|
|
|
|
|
# Copy the include files
|
|
|
-for file in mozilla/dist/public/nss/*.h
|
|
|
+for file in dist/public/nss/*.h
|
|
|
do
|
|
|
%{__install} -m 644 $file $RPM_BUILD_ROOT/%{_includedir}/nss3
|
|
|
done
|