[521] | 1 | %define build_compat32 %{?_with_compat32:1}%{!?_with_compat32:0} |
---|
| 2 | |
---|
[10387] | 3 | %define _unpackaged_files_terminate_build 1 |
---|
| 4 | |
---|
[11204] | 5 | %define nspr_version 4.13.1 |
---|
| 6 | %define pem_version 1.0.3 |
---|
[521] | 7 | %define unsupported_tools_directory %{_libdir}/nss/unsupported-tools |
---|
[11204] | 8 | %global allTools "certutil cmsutil crlutil derdump modutil pk12util pp signtool signver ssltap vfychain vfyserv" |
---|
[521] | 9 | |
---|
[10387] | 10 | # Produce .chk files for the final stripped binaries |
---|
| 11 | # |
---|
| 12 | # NOTE: The LD_LIBRARY_PATH line guarantees shlibsign links |
---|
| 13 | # against the freebl that we just built. This is necessary |
---|
| 14 | # because the signing algorithm changed on 3.14 to DSA2 with SHA256 |
---|
| 15 | # whereas we previously signed with DSA and SHA1. We must Keep this line |
---|
| 16 | # until all mock platforms have been updated. |
---|
| 17 | # After %%{__os_install_post} we would add |
---|
| 18 | # export LD_LIBRARY_PATH=$RPM_BUILD_ROOT/%%{_libdir} |
---|
| 19 | %define __spec_install_post \ |
---|
| 20 | %{?__debug_package:%{__debug_install_post}} \ |
---|
| 21 | %{__arch_install_post} \ |
---|
| 22 | %{__os_install_post} \ |
---|
| 23 | $RPM_BUILD_ROOT/%{unsupported_tools_directory}/shlibsign -i $RPM_BUILD_ROOT/%{_libdir}/libsoftokn3.so \ |
---|
[11204] | 24 | $RPM_BUILD_ROOT/%{unsupported_tools_directory}/shlibsign -i $RPM_BUILD_ROOT/%{_libdir}/libfreeblpriv3.so \ |
---|
[10387] | 25 | $RPM_BUILD_ROOT/%{unsupported_tools_directory}/shlibsign -i $RPM_BUILD_ROOT/%{_libdir}/libfreebl3.so \ |
---|
| 26 | $RPM_BUILD_ROOT/%{unsupported_tools_directory}/shlibsign -i $RPM_BUILD_ROOT/%{_libdir}/libnssdbm3.so \ |
---|
| 27 | %{nil} |
---|
| 28 | |
---|
| 29 | |
---|
[521] | 30 | Summary: Network Security Services |
---|
| 31 | Name: nss |
---|
[11204] | 32 | Version: 3.33 |
---|
| 33 | Release: 1%{?_dist_release} |
---|
[3189] | 34 | License: MPLv1.1 or GPLv2+ or LGPLv2+ |
---|
[521] | 35 | URL: http://www.mozilla.org/projects/security/pki/nss/ |
---|
| 36 | Group: System Environment/Libraries |
---|
[10390] | 37 | Vendor: Project Vine |
---|
| 38 | Distribution: Vine Linux |
---|
[521] | 39 | |
---|
[4016] | 40 | Source0: %{name}-%{version}.tar.gz |
---|
[521] | 41 | Source1: nss.pc.in |
---|
| 42 | Source2: nss-config.in |
---|
| 43 | Source3: blank-cert8.db |
---|
| 44 | Source4: blank-key3.db |
---|
| 45 | Source5: blank-secmod.db |
---|
[10272] | 46 | Source6: blank-cert9.db |
---|
| 47 | Source7: blank-key4.db |
---|
| 48 | Source8: system-pkcs11.txt |
---|
[11204] | 49 | Source9: setup-nsssysinit.sh |
---|
| 50 | Source20: nss-config.xml |
---|
| 51 | Source21: setup-nsssysinit.xml |
---|
| 52 | Source22: pkcs11.txt.xml |
---|
| 53 | Source23: cert8.db.xml |
---|
| 54 | Source24: cert9.db.xml |
---|
| 55 | Source25: key3.db.xml |
---|
| 56 | Source26: key4.db.xml |
---|
| 57 | Source27: secmod.db.xml |
---|
| 58 | Source101: nss-util.pc.in |
---|
| 59 | Source102: nss-util-config.in |
---|
[10387] | 60 | Source103: nss-softokn.pc.in |
---|
| 61 | Source104: nss-softokn-config.in |
---|
[521] | 62 | |
---|
[11204] | 63 | Source1000: https://github.com/kdudka/nss-pem/releases/download/nss-pem-1.0.3/nss-pem-%{pem_version}.tar.xz |
---|
| 64 | Source1001: pem-makefile.tar.gz |
---|
| 65 | |
---|
[7624] | 66 | Patch2: add-relro-linker-option.patch |
---|
| 67 | Patch3: renegotiate-transitional.patch |
---|
[11204] | 68 | # Upstream: https://bugzilla.mozilla.org/show_bug.cgi?id=617723 |
---|
[7624] | 69 | Patch16: nss-539183.patch |
---|
| 70 | # TODO: Remove this patch when the ocsp test are fixed |
---|
| 71 | Patch40: nss-3.14.0.0-disble-ocsp-test.patch |
---|
[11204] | 72 | # Fedora / RHEL-only patch, the templates directory was originally introduced to support mod_revocator |
---|
| 73 | Patch47: utilwrap-include-templates.patch |
---|
| 74 | # TODO remove when we switch to building nss without softoken |
---|
| 75 | Patch49: nss-skip-bltest-and-fipstest.patch |
---|
| 76 | # This patch uses the GCC -iquote option documented at |
---|
| 77 | # http://gcc.gnu.org/onlinedocs/gcc/Directory-Options.html#Directory-Options |
---|
| 78 | # to give the in-tree headers a higher priority over the system headers, |
---|
| 79 | # when they are included through the quote form (#include "file.h"). |
---|
| 80 | # |
---|
| 81 | # This ensures a build even when system headers are older. Such is the |
---|
| 82 | # case when starting an update with API changes or even private export |
---|
| 83 | # changes. |
---|
| 84 | # |
---|
| 85 | # Once the buildroot aha been bootstrapped the patch may be removed |
---|
| 86 | # but it doesn't hurt to keep it. |
---|
[7899] | 87 | Patch50: iquote.patch |
---|
[11204] | 88 | # Local patch for TLS_ECDHE_{ECDSA|RSA}_WITH_3DES_EDE_CBC_SHA ciphers |
---|
| 89 | Patch58: rhbz1185708-enable-ecc-3des-ciphers-by-default.patch |
---|
| 90 | # Upstream: https://bugzilla.mozilla.org/show_bug.cgi?id=1279520 |
---|
| 91 | Patch59: nss-check-policy-file.patch |
---|
| 92 | Patch62: nss-skip-util-gtest.patch |
---|
[521] | 93 | |
---|
[11204] | 94 | Patch1000: nss-enable-pem.patch |
---|
[8552] | 95 | |
---|
[521] | 96 | BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) |
---|
| 97 | BuildRequires: nspr-devel >= %{nspr_version} |
---|
| 98 | BuildRequires: sqlite3-devel |
---|
| 99 | BuildRequires: zlib-devel |
---|
| 100 | BuildRequires: pkgconfig |
---|
| 101 | BuildRequires: gawk |
---|
[10387] | 102 | BuildRequires: psmisc |
---|
| 103 | BuildRequires: perl |
---|
[521] | 104 | Provides: mozilla-nss |
---|
| 105 | Obsoletes: mozilla-nss |
---|
| 106 | Requires: nspr >= %{nspr_version} |
---|
| 107 | |
---|
| 108 | %description |
---|
| 109 | Network Security Services (NSS) is a set of libraries designed to |
---|
| 110 | support cross-platform development of security-enabled client and |
---|
| 111 | server applications. Applications built with NSS can support SSL v2 |
---|
| 112 | and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509 |
---|
| 113 | v3 certificates, and other security standards. |
---|
| 114 | |
---|
| 115 | |
---|
| 116 | %package tools |
---|
| 117 | Summary: Tools for the Network Security Services |
---|
| 118 | Group: System Environment/Base |
---|
| 119 | Requires: nss = %{version}-%{release} |
---|
| 120 | |
---|
| 121 | %description tools |
---|
| 122 | Network Security Services (NSS) is a set of libraries designed to |
---|
| 123 | support cross-platform development of security-enabled client and |
---|
| 124 | server applications. Applications built with NSS can support SSL v2 |
---|
| 125 | and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509 |
---|
| 126 | v3 certificates, and other security standards. |
---|
| 127 | |
---|
| 128 | Install the nss-tools package if you need command-line tools to |
---|
| 129 | manipulate the NSS certificate and key database. |
---|
| 130 | |
---|
| 131 | |
---|
| 132 | %package devel |
---|
| 133 | Summary: Development libraries for Network Security Services |
---|
| 134 | Group: Development/Libraries |
---|
| 135 | Requires: nss = %{version}-%{release} |
---|
| 136 | Requires: nspr-devel >= %{nspr_version} |
---|
| 137 | Provides: mozilla-nss-devel |
---|
| 138 | Obsoletes: mozilla-nss-devel |
---|
| 139 | |
---|
| 140 | %description devel |
---|
| 141 | Header and Library files for doing development with Network Security Services. |
---|
| 142 | |
---|
| 143 | |
---|
| 144 | %package pkcs11-devel |
---|
| 145 | Summary: Development libraries for PKCS #11 (Cryptoki) using NSS |
---|
| 146 | Group: Development/Libraries |
---|
| 147 | Requires: nss-devel = %{version}-%{release} |
---|
| 148 | |
---|
| 149 | %description pkcs11-devel |
---|
| 150 | Library files for developing PKCS #11 modules using basic NSS |
---|
| 151 | low level services. |
---|
| 152 | |
---|
| 153 | |
---|
| 154 | ## to build compat32 for x86_64 architecture support |
---|
| 155 | %package -n compat32-%{name} |
---|
| 156 | Summary: Network Security Services |
---|
| 157 | Group: System Environment/Libraries |
---|
| 158 | |
---|
| 159 | %description -n compat32-%{name} |
---|
| 160 | Network Security Services (NSS) is a set of libraries designed to |
---|
| 161 | support cross-platform development of security-enabled client and |
---|
| 162 | server applications. Applications built with NSS can support SSL v2 |
---|
| 163 | and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509 |
---|
| 164 | v3 certificates, and other security standards. |
---|
| 165 | |
---|
| 166 | |
---|
| 167 | %prep |
---|
| 168 | %setup -q |
---|
[11204] | 169 | %setup -q -T -D -n %{name}-%{version} -a 1000 |
---|
| 170 | %{__mv} nss-pem-%{pem_version}/src nss/lib/ckfw/pem |
---|
| 171 | pushd nss/lib/ckfw/pem/ |
---|
| 172 | tar xvf %{SOURCE1001} |
---|
| 173 | perl -pi -e 's/^#define USE_UTIL_DIRECTLY.*$//' ckpem.h |
---|
| 174 | popd |
---|
[7624] | 175 | |
---|
| 176 | %patch2 -p0 -b .relro |
---|
| 177 | %patch3 -p0 -b .transitional |
---|
| 178 | %patch16 -p0 -b .539183 |
---|
[7899] | 179 | %patch40 -p0 -b .noocsptest |
---|
| 180 | %patch50 -p0 -b .iquote |
---|
[10272] | 181 | pushd nss |
---|
[11204] | 182 | %patch62 -p1 -b .skip_util_gtest |
---|
[10272] | 183 | popd |
---|
[521] | 184 | |
---|
[11204] | 185 | %patch1000 -p0 -b .libpem |
---|
[10272] | 186 | |
---|
| 187 | |
---|
[8552] | 188 | pemNeedsFromSoftoken="lowkeyi lowkeyti softoken softoknt" |
---|
| 189 | for file in ${pemNeedsFromSoftoken}; do |
---|
| 190 | %{__cp} ./nss/lib/softoken/${file}.h ./nss/lib/ckfw/pem/ |
---|
| 191 | done |
---|
| 192 | %{__cp} ./nss/lib/softoken/lowkeyi.h ./nss/cmd/rsaperf |
---|
| 193 | %{__cp} ./nss/lib/softoken/lowkeyti.h ./nss/cmd/rsaperf |
---|
| 194 | |
---|
[10272] | 195 | pushd nss/tests/ssl |
---|
| 196 | # Create versions of sslcov.txt and sslstress.txt that disable tests |
---|
| 197 | # for SSL2 and EXPORT ciphers. |
---|
| 198 | cat sslcov.txt| sed -r "s/^([^#].*EXPORT|^[^#].*SSL2)/#disabled \1/" > sslcov.noSSL2orExport.txt |
---|
| 199 | cat sslstress.txt| sed -r "s/^([^#].*EXPORT|^[^#].*SSL2)/#disabled \1/" > sslstress.noSSL2orExport.txt |
---|
| 200 | popd |
---|
[8552] | 201 | |
---|
[521] | 202 | %build |
---|
| 203 | |
---|
[10272] | 204 | export NSS_NO_SSL2=1 |
---|
| 205 | |
---|
[10387] | 206 | NSS_NO_PKCS11_BYPASS=1 |
---|
| 207 | export NSS_NO_PKCS11_BYPASS |
---|
[521] | 208 | |
---|
[10387] | 209 | # partial RELRO support as a security enhancement |
---|
[10390] | 210 | #LDFLAGS+=-Wl,-z,relro |
---|
| 211 | #export LDFLAGS |
---|
[5920] | 212 | |
---|
[10387] | 213 | FREEBL_NO_DEPEND=1 |
---|
| 214 | export FREEBL_NO_DEPEND |
---|
| 215 | |
---|
| 216 | # Must export FREEBL_LOWHASH=1 for nsslowhash.h so that it gets |
---|
| 217 | # copied to dist and the rpm install phase can find it |
---|
| 218 | # This due of the upstream changes to fix |
---|
| 219 | # https://bugzilla.mozilla.org/show_bug.cgi?id=717906 |
---|
| 220 | FREEBL_LOWHASH=1 |
---|
| 221 | export FREEBL_LOWHASH |
---|
| 222 | |
---|
[521] | 223 | # Enable compiler optimizations and disable debugging code |
---|
| 224 | BUILD_OPT=1 |
---|
| 225 | export BUILD_OPT |
---|
| 226 | |
---|
| 227 | # Generate symbolic info for debuggers |
---|
| 228 | XCFLAGS=$RPM_OPT_FLAGS |
---|
| 229 | export XCFLAGS |
---|
| 230 | |
---|
| 231 | PKG_CONFIG_ALLOW_SYSTEM_LIBS=1 |
---|
| 232 | PKG_CONFIG_ALLOW_SYSTEM_CFLAGS=1 |
---|
| 233 | |
---|
| 234 | export PKG_CONFIG_ALLOW_SYSTEM_LIBS |
---|
| 235 | export PKG_CONFIG_ALLOW_SYSTEM_CFLAGS |
---|
| 236 | |
---|
| 237 | NSPR_INCLUDE_DIR=`/usr/bin/pkg-config --cflags-only-I nspr | sed 's/-I//'` |
---|
| 238 | NSPR_LIB_DIR=`/usr/bin/pkg-config --libs-only-L nspr | sed 's/-L//'` |
---|
| 239 | |
---|
| 240 | export NSPR_INCLUDE_DIR |
---|
| 241 | export NSPR_LIB_DIR |
---|
| 242 | |
---|
[8552] | 243 | #export FREEBL_INCLUDE_DIR=`/usr/bin/pkg-config --cflags-only-I nss-softokn | sed 's/-I//'` |
---|
| 244 | #export FREEBL_LIB_DIR=%{_libdir} |
---|
[10387] | 245 | export USE_SYSTEM_FREEBL=0 |
---|
[7624] | 246 | |
---|
| 247 | NSS_USE_SYSTEM_SQLITE=1 |
---|
| 248 | export NSS_USE_SYSTEM_SQLITE |
---|
| 249 | |
---|
[11204] | 250 | export NSS_ALLOW_SSLKEYLOGFILE=1 |
---|
| 251 | |
---|
[10387] | 252 | export USE_SYSTEM_ZLIB=1 |
---|
| 253 | export ZLIB_LIBS=%{_libdir} |
---|
| 254 | |
---|
[521] | 255 | %ifarch x86_64 ppc64 ia64 s390x |
---|
| 256 | USE_64=1 |
---|
| 257 | export USE_64 |
---|
| 258 | %endif |
---|
| 259 | |
---|
[8552] | 260 | # uncomment if the iquote patch is activated |
---|
| 261 | export IN_TREE_FREEBL_HEADERS_FIRST=1 |
---|
| 262 | |
---|
[10387] | 263 | #export NSS_BLTEST_NOT_AVAILABLE=1 |
---|
[7624] | 264 | # |
---|
[10387] | 265 | #%{__make} -C ./nss/coreconf |
---|
| 266 | #%{__make} -C ./nss/lib/dbm |
---|
[11204] | 267 | |
---|
[7899] | 268 | %{__make} -C ./nss |
---|
[521] | 269 | |
---|
[10387] | 270 | |
---|
| 271 | %install |
---|
| 272 | |
---|
| 273 | # There is no make install target so we'll do it ourselves. |
---|
| 274 | |
---|
| 275 | %{__mkdir_p} $RPM_BUILD_ROOT/%{_includedir}/nss3 |
---|
| 276 | %{__mkdir_p} $RPM_BUILD_ROOT/%{_includedir}/nss3/templates |
---|
| 277 | %{__mkdir_p} $RPM_BUILD_ROOT/%{_bindir} |
---|
| 278 | %{__mkdir_p} $RPM_BUILD_ROOT/%{_libdir} |
---|
| 279 | %{__mkdir_p} $RPM_BUILD_ROOT/%{unsupported_tools_directory} |
---|
| 280 | %{__mkdir_p} $RPM_BUILD_ROOT/%{_libdir}/pkgconfig |
---|
| 281 | |
---|
| 282 | # Copy the binary libraries we want |
---|
[11204] | 283 | for file in libsoftokn3.so libfreebl3.so libfreeblpriv3.so \ |
---|
| 284 | libnss3.so libnssutil3.so \ |
---|
| 285 | libssl3.so libsmime3.so libnssckbi.so \ |
---|
| 286 | libnsspem.so libnssdbm3.so |
---|
[10387] | 287 | do |
---|
| 288 | %{__install} -m 755 dist/*.OBJ/lib/$file $RPM_BUILD_ROOT/%{_libdir} |
---|
| 289 | done |
---|
| 290 | |
---|
| 291 | # Install the empty NSS db files |
---|
| 292 | # Legacy db |
---|
| 293 | %{__mkdir_p} $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb |
---|
| 294 | %{__install} -m 644 %{SOURCE3} $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb/cert8.db |
---|
| 295 | %{__install} -m 644 %{SOURCE4} $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb/key3.db |
---|
| 296 | %{__install} -m 644 %{SOURCE5} $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb/secmod.db |
---|
| 297 | # Shared db |
---|
| 298 | %{__install} -p -m 644 %{SOURCE6} $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb/cert9.db |
---|
| 299 | %{__install} -p -m 644 %{SOURCE7} $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb/key4.db |
---|
| 300 | %{__install} -p -m 644 %{SOURCE8} $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb/pkcs11.txt |
---|
| 301 | |
---|
| 302 | |
---|
| 303 | # Copy the development libraries we want |
---|
| 304 | for file in libcrmf.a libnssb.a libnssckfw.a |
---|
| 305 | do |
---|
| 306 | %{__install} -m 644 dist/*.OBJ/lib/$file $RPM_BUILD_ROOT/%{_libdir} |
---|
| 307 | done |
---|
| 308 | |
---|
| 309 | # Copy the binaries we want |
---|
| 310 | for file in certutil cmsutil crlutil modutil pk12util signtool signver ssltap |
---|
| 311 | do |
---|
| 312 | %{__install} -m 755 dist/*.OBJ/bin/$file $RPM_BUILD_ROOT/%{_bindir} |
---|
| 313 | done |
---|
| 314 | |
---|
| 315 | # Copy the binaries we ship as unsupported |
---|
| 316 | for file in atob btoa derdump ocspclnt pp selfserv shlibsign strsclnt symkeyutil tstclnt vfyserv vfychain |
---|
| 317 | do |
---|
| 318 | %{__install} -m 755 dist/*.OBJ/bin/$file $RPM_BUILD_ROOT/%{unsupported_tools_directory} |
---|
| 319 | done |
---|
| 320 | |
---|
| 321 | # Copy the include files |
---|
| 322 | for file in dist/public/nss/*.h |
---|
| 323 | do |
---|
| 324 | %{__install} -m 644 $file $RPM_BUILD_ROOT/%{_includedir}/nss3 |
---|
| 325 | done |
---|
| 326 | |
---|
[11204] | 327 | # Copy the template files we want |
---|
| 328 | for file in nss/lib/ckfw/nssck.api |
---|
| 329 | do |
---|
| 330 | %{__install} -p -m 644 $file $RPM_BUILD_ROOT/%{_includedir}/nss3/templates |
---|
| 331 | done |
---|
| 332 | |
---|
[10387] | 333 | # Copy some freebl include files we also want |
---|
| 334 | for file in blapi.h alghmac.h |
---|
| 335 | do |
---|
| 336 | %{__install} -p -m 644 dist/private/nss/$file $RPM_BUILD_ROOT/%{_includedir}/nss3 |
---|
| 337 | done |
---|
| 338 | |
---|
[10390] | 339 | # Copy the static freebl library |
---|
| 340 | for file in libfreebl.a |
---|
| 341 | do |
---|
| 342 | %{__install} -p -m 644 dist/*.OBJ/lib/$file $RPM_BUILD_ROOT/%{_libdir} |
---|
| 343 | done |
---|
| 344 | |
---|
[521] | 345 | # Set up our package file |
---|
| 346 | %{__mkdir_p} $RPM_BUILD_ROOT/%{_libdir}/pkgconfig |
---|
| 347 | %{__cat} %{SOURCE1} | sed -e "s,%%libdir%%,%{_libdir},g" \ |
---|
| 348 | -e "s,%%prefix%%,%{_prefix},g" \ |
---|
| 349 | -e "s,%%exec_prefix%%,%{_prefix},g" \ |
---|
| 350 | -e "s,%%includedir%%,%{_includedir}/nss3,g" \ |
---|
| 351 | -e "s,%%NSPR_VERSION%%,%{nspr_version},g" \ |
---|
[6811] | 352 | -e "s,%%NSS_VERSION%%,%{version},g" \ |
---|
| 353 | -e "s,%%NSSUTIL_VERSION%%,%{version},g" > \ |
---|
[521] | 354 | $RPM_BUILD_ROOT/%{_libdir}/pkgconfig/nss.pc |
---|
| 355 | |
---|
[7899] | 356 | NSS_VMAJOR=`cat nss/lib/nss/nss.h | grep "#define.*NSS_VMAJOR" | awk '{print $3}'` |
---|
| 357 | NSS_VMINOR=`cat nss/lib/nss/nss.h | grep "#define.*NSS_VMINOR" | awk '{print $3}'` |
---|
| 358 | NSS_VPATCH=`cat nss/lib/nss/nss.h | grep "#define.*NSS_VPATCH" | awk '{print $3}'` |
---|
[521] | 359 | |
---|
| 360 | export NSS_VMAJOR |
---|
| 361 | export NSS_VMINOR |
---|
| 362 | export NSS_VPATCH |
---|
| 363 | |
---|
| 364 | %{__mkdir_p} $RPM_BUILD_ROOT/%{_bindir} |
---|
| 365 | %{__cat} %{SOURCE2} | sed -e "s,@libdir@,%{_libdir},g" \ |
---|
| 366 | -e "s,@prefix@,%{_prefix},g" \ |
---|
| 367 | -e "s,@exec_prefix@,%{_prefix},g" \ |
---|
| 368 | -e "s,@includedir@,%{_includedir}/nss3,g" \ |
---|
| 369 | -e "s,@MOD_MAJOR_VERSION@,$NSS_VMAJOR,g" \ |
---|
| 370 | -e "s,@MOD_MINOR_VERSION@,$NSS_VMINOR,g" \ |
---|
| 371 | -e "s,@MOD_PATCH_VERSION@,$NSS_VPATCH,g" \ |
---|
| 372 | > $RPM_BUILD_ROOT/%{_bindir}/nss-config |
---|
| 373 | |
---|
| 374 | chmod 755 $RPM_BUILD_ROOT/%{_bindir}/nss-config |
---|
| 375 | |
---|
[6811] | 376 | %{__cat} %{SOURCE101} | sed -e "s,%%libdir%%,%{_libdir},g" \ |
---|
| 377 | -e "s,%%prefix%%,%{_prefix},g" \ |
---|
| 378 | -e "s,%%exec_prefix%%,%{_prefix},g" \ |
---|
| 379 | -e "s,%%includedir%%,%{_includedir}/nss3,g" \ |
---|
| 380 | -e "s,%%NSPR_VERSION%%,%{nspr_version},g" \ |
---|
| 381 | -e "s,%%NSSUTIL_VERSION%%,%{version},g" > \ |
---|
| 382 | $RPM_BUILD_ROOT/%{_libdir}/pkgconfig/nss-util.pc |
---|
[521] | 383 | |
---|
[7899] | 384 | NSSUTIL_VMAJOR=`cat nss/lib/util/nssutil.h | grep "#define.*NSSUTIL_VMAJOR" | awk '{print $3}'` |
---|
| 385 | NSSUTIL_VMINOR=`cat nss/lib/util/nssutil.h | grep "#define.*NSSUTIL_VMINOR" | awk '{print $3}'` |
---|
| 386 | NSSUTIL_VPATCH=`cat nss/lib/util/nssutil.h | grep "#define.*NSSUTIL_VPATCH" | awk '{print $3}'` |
---|
[6811] | 387 | |
---|
| 388 | export NSSUTIL_VMAJOR |
---|
| 389 | export NSSUTIL_VMINOR |
---|
| 390 | export NSSUTIL_VPATCH |
---|
| 391 | |
---|
| 392 | %{__cat} %{SOURCE102} | sed -e "s,@libdir@,%{_libdir},g" \ |
---|
| 393 | -e "s,@prefix@,%{_prefix},g" \ |
---|
| 394 | -e "s,@exec_prefix@,%{_prefix},g" \ |
---|
| 395 | -e "s,@includedir@,%{_includedir}/nss3,g" \ |
---|
| 396 | -e "s,@MOD_MAJOR_VERSION@,$NSSUTIL_VMAJOR,g" \ |
---|
| 397 | -e "s,@MOD_MINOR_VERSION@,$NSSUTIL_VMINOR,g" \ |
---|
| 398 | -e "s,@MOD_PATCH_VERSION@,$NSSUTIL_VPATCH,g" \ |
---|
| 399 | > $RPM_BUILD_ROOT/%{_bindir}/nss-util-config |
---|
| 400 | |
---|
| 401 | chmod 755 $RPM_BUILD_ROOT/%{_bindir}/nss-util-config |
---|
| 402 | |
---|
[10387] | 403 | %{__cat} %{SOURCE103} | sed -e "s,%%libdir%%,%{_libdir},g" \ |
---|
| 404 | -e "s,%%prefix%%,%{_prefix},g" \ |
---|
| 405 | -e "s,%%exec_prefix%%,%{_prefix},g" \ |
---|
| 406 | -e "s,%%includedir%%,%{_includedir}/nss3,g" \ |
---|
| 407 | -e "s,%%NSPR_VERSION%%,%{nspr_version},g" \ |
---|
| 408 | -e "s,%%NSSUTIL_VERSION%%,%{version},g" \ |
---|
| 409 | -e "s,%%SOFTOKEN_VERSION%%,%{version},g" > \ |
---|
| 410 | $RPM_BUILD_ROOT/%{_libdir}/pkgconfig/nss-softokn.pc |
---|
[521] | 411 | |
---|
[10387] | 412 | SOFTOKEN_VMAJOR=`cat nss/lib/softoken/softkver.h | grep "#define.*SOFTOKEN_VMAJOR" | awk '{print $3}'` |
---|
| 413 | SOFTOKEN_VMINOR=`cat nss/lib/softoken/softkver.h | grep "#define.*SOFTOKEN_VMINOR" | awk '{print $3}'` |
---|
| 414 | SOFTOKEN_VPATCH=`cat nss/lib/softoken/softkver.h | grep "#define.*SOFTOKEN_VPATCH" | awk '{print $3}'` |
---|
[521] | 415 | |
---|
[10387] | 416 | export SOFTOKEN_VMAJOR |
---|
| 417 | export SOFTOKEN_VMINOR |
---|
| 418 | export SOFTOKEN_VPATCH |
---|
[521] | 419 | |
---|
[10387] | 420 | %{__cat} %{SOURCE104} | sed -e "s,@libdir@,%{_libdir},g" \ |
---|
| 421 | -e "s,@prefix@,%{_prefix},g" \ |
---|
| 422 | -e "s,@exec_prefix@,%{_prefix},g" \ |
---|
| 423 | -e "s,@includedir@,%{_includedir}/nss3,g" \ |
---|
| 424 | -e "s,@MOD_MAJOR_VERSION@,$SOFTOKEN_VMAJOR,g" \ |
---|
| 425 | -e "s,@MOD_MINOR_VERSION@,$SOFTOKEN_VMINOR,g" \ |
---|
| 426 | -e "s,@MOD_PATCH_VERSION@,$SOFTOKEN_VPATCH,g" \ |
---|
| 427 | > $RPM_BUILD_ROOT/%{_bindir}/nss-softokn-config |
---|
[521] | 428 | |
---|
[10387] | 429 | chmod 755 $RPM_BUILD_ROOT/%{_bindir}/nss-softokn-config |
---|
[521] | 430 | |
---|
| 431 | |
---|
| 432 | %clean |
---|
| 433 | %{__rm} -rf $RPM_BUILD_ROOT |
---|
| 434 | |
---|
| 435 | |
---|
| 436 | %post |
---|
| 437 | /sbin/ldconfig >/dev/null 2>/dev/null |
---|
| 438 | |
---|
| 439 | %postun |
---|
| 440 | /sbin/ldconfig >/dev/null 2>/dev/null |
---|
| 441 | |
---|
| 442 | |
---|
| 443 | %files |
---|
| 444 | %defattr(-,root,root) |
---|
| 445 | %{_libdir}/libnss3.so |
---|
| 446 | %{_libdir}/libnssutil3.so |
---|
| 447 | %{_libdir}/libnssdbm3.so |
---|
| 448 | %{_libdir}/libssl3.so |
---|
| 449 | %{_libdir}/libsmime3.so |
---|
| 450 | %{_libdir}/libsoftokn3.so |
---|
| 451 | %{_libdir}/libnssckbi.so |
---|
| 452 | %{_libdir}/libnsspem.so |
---|
| 453 | %{_libdir}/libfreebl3.so |
---|
[11204] | 454 | %{_libdir}/libfreeblpriv3.so |
---|
[521] | 455 | %{unsupported_tools_directory}/shlibsign |
---|
[10387] | 456 | %{_libdir}/libfreebl3.chk |
---|
[11204] | 457 | %{_libdir}/libfreeblpriv3.chk |
---|
[10387] | 458 | %{_libdir}/libnssdbm3.chk |
---|
| 459 | %{_libdir}/libsoftokn3.chk |
---|
[521] | 460 | %dir %{_sysconfdir}/pki/nssdb |
---|
| 461 | %config(noreplace) %{_sysconfdir}/pki/nssdb/cert8.db |
---|
| 462 | %config(noreplace) %{_sysconfdir}/pki/nssdb/key3.db |
---|
| 463 | %config(noreplace) %{_sysconfdir}/pki/nssdb/secmod.db |
---|
[10272] | 464 | %config(noreplace) %verify(not md5 size mtime) %{_sysconfdir}/pki/nssdb/cert9.db |
---|
| 465 | %config(noreplace) %verify(not md5 size mtime) %{_sysconfdir}/pki/nssdb/key4.db |
---|
| 466 | %config(noreplace) %verify(not md5 size mtime) %{_sysconfdir}/pki/nssdb/pkcs11.txt |
---|
[521] | 467 | |
---|
| 468 | %files tools |
---|
| 469 | %defattr(-,root,root) |
---|
| 470 | %{_bindir}/certutil |
---|
| 471 | %{_bindir}/cmsutil |
---|
| 472 | %{_bindir}/crlutil |
---|
| 473 | %{_bindir}/modutil |
---|
| 474 | %{_bindir}/pk12util |
---|
| 475 | %{_bindir}/signtool |
---|
| 476 | %{_bindir}/signver |
---|
| 477 | %{_bindir}/ssltap |
---|
| 478 | %{unsupported_tools_directory}/atob |
---|
| 479 | %{unsupported_tools_directory}/btoa |
---|
| 480 | %{unsupported_tools_directory}/derdump |
---|
| 481 | %{unsupported_tools_directory}/ocspclnt |
---|
| 482 | %{unsupported_tools_directory}/pp |
---|
| 483 | %{unsupported_tools_directory}/selfserv |
---|
| 484 | %{unsupported_tools_directory}/strsclnt |
---|
| 485 | %{unsupported_tools_directory}/symkeyutil |
---|
| 486 | %{unsupported_tools_directory}/tstclnt |
---|
| 487 | %{unsupported_tools_directory}/vfyserv |
---|
| 488 | %{unsupported_tools_directory}/vfychain |
---|
| 489 | |
---|
| 490 | |
---|
| 491 | %files devel |
---|
| 492 | %defattr(-,root,root) |
---|
| 493 | %{_libdir}/libcrmf.a |
---|
[10390] | 494 | %{_libdir}/libfreebl.a |
---|
[521] | 495 | %{_libdir}/pkgconfig/nss.pc |
---|
[10387] | 496 | %{_libdir}/pkgconfig/nss-softokn.pc |
---|
[6811] | 497 | %{_libdir}/pkgconfig/nss-util.pc |
---|
[521] | 498 | %{_bindir}/nss-config |
---|
[10387] | 499 | %{_bindir}/nss-softokn-config |
---|
[6811] | 500 | %{_bindir}/nss-util-config |
---|
[521] | 501 | |
---|
| 502 | %dir %{_includedir}/nss3 |
---|
[10387] | 503 | %{_includedir}/nss3/alghmac.h |
---|
[521] | 504 | %{_includedir}/nss3/base64.h |
---|
[10387] | 505 | %{_includedir}/nss3/blapi.h |
---|
[521] | 506 | %{_includedir}/nss3/blapit.h |
---|
| 507 | %{_includedir}/nss3/cert.h |
---|
| 508 | %{_includedir}/nss3/certdb.h |
---|
| 509 | %{_includedir}/nss3/certt.h |
---|
| 510 | %{_includedir}/nss3/ciferfam.h |
---|
| 511 | %{_includedir}/nss3/cmmf.h |
---|
| 512 | %{_includedir}/nss3/cmmft.h |
---|
| 513 | %{_includedir}/nss3/cms.h |
---|
| 514 | %{_includedir}/nss3/cmsreclist.h |
---|
| 515 | %{_includedir}/nss3/cmst.h |
---|
| 516 | %{_includedir}/nss3/crmf.h |
---|
| 517 | %{_includedir}/nss3/crmft.h |
---|
| 518 | %{_includedir}/nss3/cryptohi.h |
---|
| 519 | %{_includedir}/nss3/cryptoht.h |
---|
[11204] | 520 | %{_includedir}/nss3/eccutil.h |
---|
[521] | 521 | %{_includedir}/nss3/ecl-exp.h |
---|
| 522 | %{_includedir}/nss3/hasht.h |
---|
| 523 | %{_includedir}/nss3/jar-ds.h |
---|
| 524 | %{_includedir}/nss3/jar.h |
---|
| 525 | %{_includedir}/nss3/jarfile.h |
---|
| 526 | %{_includedir}/nss3/key.h |
---|
| 527 | %{_includedir}/nss3/keyhi.h |
---|
| 528 | %{_includedir}/nss3/keyt.h |
---|
| 529 | %{_includedir}/nss3/keythi.h |
---|
[11204] | 530 | %{_includedir}/nss3/lowkeyi.h |
---|
| 531 | %{_includedir}/nss3/lowkeyti.h |
---|
[521] | 532 | %{_includedir}/nss3/nss.h |
---|
| 533 | %{_includedir}/nss3/nssb64.h |
---|
| 534 | %{_includedir}/nss3/nssb64t.h |
---|
| 535 | %{_includedir}/nss3/nssckbi.h |
---|
| 536 | %{_includedir}/nss3/nssilckt.h |
---|
| 537 | %{_includedir}/nss3/nssilock.h |
---|
| 538 | %{_includedir}/nss3/nsslocks.h |
---|
| 539 | %{_includedir}/nss3/nsslowhash.h |
---|
| 540 | %{_includedir}/nss3/nsspem.h |
---|
| 541 | %{_includedir}/nss3/nssrwlk.h |
---|
| 542 | %{_includedir}/nss3/nssrwlkt.h |
---|
| 543 | %{_includedir}/nss3/nssutil.h |
---|
| 544 | %{_includedir}/nss3/ocsp.h |
---|
| 545 | %{_includedir}/nss3/ocspt.h |
---|
| 546 | %{_includedir}/nss3/p12.h |
---|
| 547 | %{_includedir}/nss3/p12plcy.h |
---|
| 548 | %{_includedir}/nss3/p12t.h |
---|
| 549 | %{_includedir}/nss3/pk11func.h |
---|
| 550 | %{_includedir}/nss3/pk11pqg.h |
---|
| 551 | %{_includedir}/nss3/pk11priv.h |
---|
| 552 | %{_includedir}/nss3/pk11pub.h |
---|
| 553 | %{_includedir}/nss3/pk11sdr.h |
---|
| 554 | %{_includedir}/nss3/pkcs11.h |
---|
| 555 | %{_includedir}/nss3/pkcs11f.h |
---|
| 556 | %{_includedir}/nss3/pkcs11n.h |
---|
| 557 | %{_includedir}/nss3/pkcs11p.h |
---|
| 558 | %{_includedir}/nss3/pkcs11t.h |
---|
| 559 | %{_includedir}/nss3/pkcs11u.h |
---|
[11204] | 560 | %{_includedir}/nss3/pkcs11uri.h |
---|
[521] | 561 | %{_includedir}/nss3/pkcs12.h |
---|
| 562 | %{_includedir}/nss3/pkcs12t.h |
---|
| 563 | %{_includedir}/nss3/pkcs7t.h |
---|
[10272] | 564 | %{_includedir}/nss3/pkcs1sig.h |
---|
[521] | 565 | %{_includedir}/nss3/portreg.h |
---|
| 566 | %{_includedir}/nss3/preenc.h |
---|
| 567 | %{_includedir}/nss3/secasn1.h |
---|
| 568 | %{_includedir}/nss3/secasn1t.h |
---|
| 569 | %{_includedir}/nss3/seccomon.h |
---|
| 570 | %{_includedir}/nss3/secder.h |
---|
| 571 | %{_includedir}/nss3/secdert.h |
---|
| 572 | %{_includedir}/nss3/secdig.h |
---|
| 573 | %{_includedir}/nss3/secdigt.h |
---|
| 574 | %{_includedir}/nss3/secerr.h |
---|
| 575 | %{_includedir}/nss3/sechash.h |
---|
| 576 | %{_includedir}/nss3/secitem.h |
---|
| 577 | %{_includedir}/nss3/secmime.h |
---|
| 578 | %{_includedir}/nss3/secmod.h |
---|
| 579 | %{_includedir}/nss3/secmodt.h |
---|
| 580 | %{_includedir}/nss3/secoid.h |
---|
| 581 | %{_includedir}/nss3/secoidt.h |
---|
| 582 | %{_includedir}/nss3/secpkcs5.h |
---|
| 583 | %{_includedir}/nss3/secpkcs7.h |
---|
| 584 | %{_includedir}/nss3/secport.h |
---|
| 585 | %{_includedir}/nss3/shsign.h |
---|
| 586 | %{_includedir}/nss3/smime.h |
---|
| 587 | %{_includedir}/nss3/ssl.h |
---|
| 588 | %{_includedir}/nss3/sslerr.h |
---|
[11204] | 589 | %{_includedir}/nss3/sslexp.h |
---|
[521] | 590 | %{_includedir}/nss3/sslproto.h |
---|
| 591 | %{_includedir}/nss3/sslt.h |
---|
| 592 | %{_includedir}/nss3/utilrename.h |
---|
[7315] | 593 | %{_includedir}/nss3/utilmodt.h |
---|
| 594 | %{_includedir}/nss3/utilpars.h |
---|
| 595 | %{_includedir}/nss3/utilparst.h |
---|
| 596 | |
---|
[521] | 597 | |
---|
| 598 | %files pkcs11-devel |
---|
| 599 | %defattr(-, root, root) |
---|
| 600 | %{_includedir}/nss3/nssbase.h |
---|
| 601 | %{_includedir}/nss3/nssbaset.h |
---|
| 602 | %{_includedir}/nss3/nssckepv.h |
---|
| 603 | %{_includedir}/nss3/nssckft.h |
---|
| 604 | %{_includedir}/nss3/nssckfw.h |
---|
| 605 | %{_includedir}/nss3/nssckfwc.h |
---|
| 606 | %{_includedir}/nss3/nssckfwt.h |
---|
| 607 | %{_includedir}/nss3/nssckg.h |
---|
| 608 | %{_includedir}/nss3/nssckmdt.h |
---|
| 609 | %{_includedir}/nss3/nssckt.h |
---|
[11204] | 610 | %{_includedir}/nss3/templates/nssck.api |
---|
[521] | 611 | %{_libdir}/libnssb.a |
---|
| 612 | %{_libdir}/libnssckfw.a |
---|
| 613 | |
---|
| 614 | |
---|
| 615 | ## to build compat32 for x86_64 architecture support |
---|
| 616 | %if %{build_compat32} |
---|
| 617 | %files -n compat32-%{name} |
---|
| 618 | %defattr(-,root,root) |
---|
| 619 | %{_libdir}/*.so |
---|
| 620 | %ghost %{_libdir}/libsoftokn3.chk |
---|
| 621 | %ghost %{_libdir}/libfreebl3.chk |
---|
[11204] | 622 | %ghost %{_libdir}/libfreeblpriv3.chk |
---|
| 623 | %ghost %{_libdir}/libnssdbm3.chk |
---|
[521] | 624 | %{unsupported_tools_directory}/shlibsign |
---|
| 625 | %endif |
---|
| 626 | |
---|
| 627 | |
---|
| 628 | %changelog |
---|
[11204] | 629 | * Mon Oct 09 2017 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 3.33-1 |
---|
| 630 | - update to 3.33. |
---|
| 631 | |
---|
[10390] | 632 | * Mon Jun 20 2016 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 3.21.1-3 |
---|
| 633 | - added libfreebl.a. |
---|
| 634 | |
---|
[10387] | 635 | * Mon Jun 20 2016 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 3.21.1-2 |
---|
| 636 | - enabled softokn and freebl. |
---|
| 637 | - dropped Patch47 and Patch49. |
---|
| 638 | |
---|
[10272] | 639 | * Tue May 10 2016 Yoji TOYODA <bsyamato@sea.plala.or.jp> 3.21.1-1 |
---|
| 640 | - update to 3.21.1 |
---|
| 641 | - import patches from centos package |
---|
| 642 | |
---|
[8552] | 643 | * Thu Jun 12 2014 Daisuke SUZUKI <daisuke@vinelinux.org> 3.16.1-1 |
---|
| 644 | - update to 3.16.1 |
---|
| 645 | |
---|
[7624] | 646 | * Thu Apr 04 2013 Daisuke SUZUKI <daisuke@linux.or.jp> 3.14.3-1 |
---|
[8552] | 647 | - update to 3.14.3 |
---|
[7624] | 648 | - import patches from fedora package |
---|
| 649 | |
---|
[7315] | 650 | * Wed Jan 09 2013 Daisuke SUZUKI <daisuke@linux.or.jp> 3.14.1-1 |
---|
| 651 | - update to 3.14.1 |
---|
| 652 | |
---|
[6811] | 653 | * Sat Sep 15 2012 Yoji TOYODA <bsyamato@sea.plala.or.jp> 3.13.6-2 |
---|
| 654 | - add Source101 (nss-util.pc.in) |
---|
| 655 | - add Source102 (nss-util-config.in) |
---|
| 656 | |
---|
[6792] | 657 | * Mon Sep 03 2012 Daisuke SUZUKI <daisuke@linux.or.jp> 3.13.6-1 |
---|
| 658 | - new upstream release |
---|
| 659 | |
---|
[5920] | 660 | * Sun Mar 18 2012 Yoji TOYODA <bsyamato@sea.plala.or.jp> 3.13.3-1 |
---|
| 661 | - new upstream release |
---|
| 662 | |
---|
[5305] | 663 | * Thu Dec 22 2011 Daisuke SUZUKI <daisuke@linux.or.jp> 3.13.1-2 |
---|
| 664 | - fix nss.pc |
---|
| 665 | |
---|
[5303] | 666 | * Wed Dec 21 2011 Daisuke SUZUKI <daisuke@linux.or.jp> 3.13.1-1 |
---|
| 667 | - new upstream release |
---|
| 668 | |
---|
[4846] | 669 | * Fri Sep 02 2011 Daisuke SUZUKI <daisuke@linux.or.jp> 3.12.11-1 |
---|
| 670 | - new upstram release |
---|
| 671 | |
---|
[4016] | 672 | * Wed Jun 01 2011 Daisuke SUZUKI <daisuke@linux.or.jp> 3.12.10-1 |
---|
| 673 | - update to 3.12.10 |
---|
| 674 | |
---|
[3189] | 675 | * Tue Mar 29 2011 Daisuke SUZUKI <daisuke@linux.or.jp> 3.12.9-1 |
---|
| 676 | - update to 3.12.9.with.ckbi.1.82 |
---|
| 677 | - update nss-pem source |
---|
| 678 | - define NSS_USE_SYSTEM_SQLITE, remove unneeded Patch2 |
---|
| 679 | |
---|
[1883] | 680 | * Thu Sep 23 2010 Yoji TOYODA <bsyamato@sea.plala.or.jp> 3.12.6-2 |
---|
| 681 | - rebuild with rpm-4.8.1 for pkg-config file |
---|
| 682 | |
---|
[753] | 683 | * Wed Apr 7 2010 MATSUBAYASHI Kohji <shaolin@vinelinux.org> 3.12.6-1 |
---|
| 684 | - new upstream release |
---|
| 685 | - update nss-pem Source12 to 20091210 (from 3.12.6-2.fc14) |
---|
| 686 | |
---|
[521] | 687 | * Sat Jan 23 2010 NAKAMURA Kenta <kenta@vinelinux.org> 3.12.5-2 |
---|
| 688 | - built with FREEBL_NO_DEPEND environmental variable to include nsslowhash.h |
---|
| 689 | |
---|
| 690 | * Sat Jan 09 2010 Daisuke SUZUKI <daisuke@linux.or.jp> 3.12.5-1 |
---|
| 691 | - new upstream release |
---|
| 692 | |
---|
| 693 | * Mon Jul 06 2009 Daisuke SUZUKI <daisuke@linux.or.jp> 3.12.3-4 |
---|
| 694 | - rebuild to fix the package built with broken environment. |
---|
| 695 | |
---|
| 696 | * Sun Jul 05 2009 Munehiro Yamamoto <munepi@cg8.so-net.ne.jp> 3.12.3-3 |
---|
| 697 | - fixed %%files for compat32 |
---|
| 698 | |
---|
| 699 | * Sat Jul 04 2009 Munehiro Yamamoto <munepi@cg8.so-net.ne.jp> 3.12.3-2 |
---|
| 700 | - added compat32 subpackages |
---|
| 701 | |
---|
| 702 | * Wed Apr 22 2009 Daisuke SUZUKI <daisuke@linux.or.jp> 3.12.3-1 |
---|
| 703 | - new upstream release |
---|
| 704 | |
---|
| 705 | * Wed Jul 02 2008 Daisuke SUZUKI <daisuke@linux.or.jp> 3.12-1 |
---|
| 706 | - new upstream release |
---|
| 707 | |
---|
| 708 | * Fri May 18 2007 Daisuke SUZUKI <daisuke@linux.or.jp> 3.11.4-0vl1 |
---|
| 709 | - initial build for Vine Linux |
---|
| 710 | |
---|
| 711 | * Fri Mar 02 2007 Kai Engert <kengert@redhat.com> - 3.11.5-2 |
---|
| 712 | - Fix rhbz#230545, failure to enable FIPS mode |
---|
| 713 | - Fix rhbz#220542, make NSS more tolerant of resets when in the |
---|
| 714 | middle of prompting for a user password. |
---|
| 715 | |
---|
| 716 | * Sat Feb 24 2007 Kai Engert <kengert@redhat.com> - 3.11.5-1 |
---|
| 717 | - Update to 3.11.5 |
---|
| 718 | - This update fixes two security vulnerabilities with SSL 2 |
---|
| 719 | - Do not use -rpath link option |
---|
| 720 | - Added several unsupported tools to tools package |
---|
| 721 | |
---|
| 722 | * Tue Jan 9 2007 Bob Relyea <rrelyea@redhat.com> - 3.11.4-4 |
---|
| 723 | - disable ECC, cleanout dead code |
---|
| 724 | |
---|
| 725 | * Tue Nov 28 2006 Kai Engert <kengert@redhat.com> - 3.11.4-1 |
---|
| 726 | - Update to 3.11.4 |
---|
| 727 | |
---|
| 728 | * Thu Sep 14 2006 Kai Engert <kengert@redhat.com> - 3.11.3-2 |
---|
| 729 | - Revert the attempt to require latest NSPR, as it is not yet available |
---|
| 730 | in the build infrastructure. |
---|
| 731 | |
---|
| 732 | * Thu Sep 14 2006 Kai Engert <kengert@redhat.com> - 3.11.3-1 |
---|
| 733 | - Update to 3.11.3 |
---|
| 734 | |
---|
| 735 | * Thu Aug 03 2006 Kai Engert <kengert@redhat.com> - 3.11.2-2 |
---|
| 736 | - Add /etc/pki/nssdb |
---|
| 737 | |
---|
| 738 | * Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 3.11.2-1.1 |
---|
| 739 | - rebuild |
---|
| 740 | |
---|
| 741 | * Fri Jun 30 2006 Kai Engert <kengert@redhat.com> - 3.11.2-1 |
---|
| 742 | - Update to 3.11.2 |
---|
| 743 | - Enable executable bit on shared libs, also fixes debug info. |
---|
| 744 | |
---|
| 745 | * Wed Jun 14 2006 Kai Engert <kengert@redhat.com> - 3.11.1-2 |
---|
| 746 | - Enable Elliptic Curve Cryptography (ECC) |
---|
| 747 | |
---|
| 748 | * Fri May 26 2006 Kai Engert <kengert@redhat.com> - 3.11.1-1 |
---|
| 749 | - Update to 3.11.1 |
---|
| 750 | - Include upstream patch to limit curves |
---|
| 751 | |
---|
| 752 | * Wed Feb 15 2006 Kai Engert <kengert@redhat.com> - 3.11-4 |
---|
| 753 | - add --noexecstack when compiling assembler on x86_64 |
---|
| 754 | |
---|
| 755 | * Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 3.11-3.2 |
---|
| 756 | - bump again for double-long bug on ppc(64) |
---|
| 757 | |
---|
| 758 | * Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 3.11-3.1 |
---|
| 759 | - rebuilt for new gcc4.1 snapshot and glibc changes |
---|
| 760 | |
---|
| 761 | * Thu Jan 19 2006 Ray Strode <rstrode@redhat.com> 3.11-3 |
---|
| 762 | - rebuild |
---|
| 763 | |
---|
| 764 | * Fri Dec 16 2005 Christopher Aillon <caillon@redhat.com> 3.11-2 |
---|
| 765 | - Update file list for the devel packages |
---|
| 766 | |
---|
| 767 | * Thu Dec 15 2005 Christopher Aillon <caillon@redhat.com> 3.11-1 |
---|
| 768 | - Update to 3.11 |
---|
| 769 | |
---|
| 770 | * Thu Dec 15 2005 Christopher Aillon <caillon@redhat.com> 3.11-0.cvs.2 |
---|
| 771 | - Add patch to allow building on ppc* |
---|
| 772 | - Update the pkgconfig file to Require nspr |
---|
| 773 | |
---|
| 774 | * Thu Dec 15 2005 Christopher Aillon <caillon@redhat.com> 3.11-0.cvs |
---|
| 775 | - Initial import into Fedora Core, based on a CVS snapshot of |
---|
| 776 | the NSS_3_11_RTM tag |
---|
| 777 | - Fix up the pkcs11-devel subpackage to contain the proper headers |
---|
| 778 | - Build with RPM_OPT_FLAGS |
---|
| 779 | - No need to have rpath of /usr/lib in the pc file |
---|
| 780 | |
---|
| 781 | * Thu Dec 15 2005 Kai Engert <kengert@redhat.com> |
---|
| 782 | - Adressed review comments by Wan-Teh Chang, Bob Relyea, |
---|
| 783 | Christopher Aillon. |
---|
| 784 | |
---|
[7624] | 785 | * Sat Jul 9 2005 Rob Crittenden <rcritten@redhat.com> 3.10-1 |
---|
[521] | 786 | - Initial build |
---|