summaryrefslogtreecommitdiffstats
path: root/freeipa.spec.in
diff options
context:
space:
mode:
authorRob Crittenden <rcritten@redhat.com>2013-04-26 12:36:05 -0400
committerRob Crittenden <rcritten@redhat.com>2013-04-29 09:49:37 -0400
commit732d1042a35c7db64c4ce1980e938666c65671ea (patch)
treeb7907ba833e07050fd0234b819e200449ea87415 /freeipa.spec.in
parentdfcdd9c403be81e81c88e7f6644394ee1bef14f3 (diff)
downloadfreeipa-732d1042a35c7db64c4ce1980e938666c65671ea.tar.gz
freeipa-732d1042a35c7db64c4ce1980e938666c65671ea.tar.xz
freeipa-732d1042a35c7db64c4ce1980e938666c65671ea.zip
Require version of NSS that properly parses base64-encoded certs
There were cases where a base64-encoded cert with no header/footer would not be handled properly and rejected. This was causing the CA install to fail. https://fedorahosted.org/freeipa/ticket/3586
Diffstat (limited to 'freeipa.spec.in')
-rw-r--r--freeipa.spec.in12
1 files changed, 10 insertions, 2 deletions
diff --git a/freeipa.spec.in b/freeipa.spec.in
index af3fb3743..fc1c6abd6 100644
--- a/freeipa.spec.in
+++ b/freeipa.spec.in
@@ -95,8 +95,13 @@ Requires: %{name}-admintools = %{version}-%{release}
Requires: %{name}-server-selinux = %{version}-%{release}
Requires: 389-ds-base >= 1.3.0.5
Requires: openldap-clients
-Requires: nss
-Requires: nss-tools
+%if 0%{?fedora} == 18
+Requires: nss >= 3.14.3-2
+Requires: nss-tools >= 3.14.3-2
+%else
+Requires: nss >= 3.14.3-12.0
+Requires: nss-tools >= 3.14.3-12.0
+%endif
%if 0%{?krb5_dal_version} >= 4
Requires: krb5-server >= 1.11.2-1
%else
@@ -794,6 +799,9 @@ fi
%ghost %attr(0644,root,apache) %config(noreplace) %{_sysconfdir}/ipa/ca.crt
%changelog
+* Thu Apr 25 2013 Rob Crittenden <rcritten@redhat.com> - 3.1.99-7
+- Update nss and nss-tools dependency to fix certutil problem (#872761)
+
* Mon Apr 15 2013 Martin Kosek <mkosek@redhat.com> - 3.1.99-6
- Require samba 4.0.5, includes new passdb API
- Require krb5 1.11.2-1, fixes missing PAC issue