1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
|
# BEGIN COPYRIGHT BLOCK
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; version 2 of the License.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License along
# with this program; if not, write to the Free Software Foundation, Inc.,
# 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
#
# (C) 2007 Red Hat, Inc.
# All rights reserved.
# END COPYRIGHT BLOCK
###############################################################################
### D E F I N I T I O N S ###
###############################################################################
## Entity Definitions
%define base_entity Dogtag
%define base_flavor dogtag
%define base_prefix pki
## Product Definitions
%define base_system Certificate System
%define base_product Registration Authority
%define base_component ra
%define base_pki %{base_entity} %{base_system}
## Package Header Definitions
%define base_name %{base_prefix}-%{base_component}
%define base_version 1.1.0
%define base_release 14
%define base_group System Environment/Daemons
%define base_vendor Red Hat, Inc.
%define base_license GPLv2 with exceptions
%define base_packager %{base_vendor} <http://bugzilla.redhat.com/bugzilla>
%define base_summary %{base_pki} - %{base_product}
%define base_url http://pki.fedoraproject.org/wiki/PKI_Documentation
## Pre & Post Install/Uninstall Scripts Definitions
%define base_user pkiuser
%define base_instance /var/lib/%{base_name}
## Helper Definitions
%define pki_ca %{base_entity} Certificate Authority
%define pki_drm %{base_entity} Data Recovery Manager
%define pki_ds Fedora Directory Server
%define pki_ocsp %{base_entity} Online Certificate Status Protocol Manager
%define pki_ra %{base_entity} Registration Authority
%define pki_tks %{base_entity} Token Key Service
%define pki_tps %{base_entity} Token Processing System
## Don't build the debug packages
%define debug_package %{nil}
##===================##
## Linux Definitions ##
##===================##
%ifos Linux
## Disallow an initial login shell
## NOTE: SELinux policy requires a shell of /sbin/nologin
%define base_login_shell /sbin/nologin
## For PKI version information, ALWAYS refer to the version of the
## Dogtag UI package dependency associated with this Dogtag spec file!
%define pki_version %(echo `rpm -q --queryformat '%{VERSION}' %{base_flavor}-%{base_name}-ui`)
## A distribution model is required on certain Linux operating systems!
##
## check for a pre-defined distribution model
%define undefined_distro %(test "%{dist}" = "" && echo 1 || echo 0)
%if %{undefined_distro}
%define is_fedora %(test -e /etc/fedora-release && echo 1 || echo 0)
%if %{is_fedora}
## define a default distribution model on Fedora Linux
%define dist_prefix .fc
%define dist_version %(echo `rpm -qf --qf='%{VERSION}' /etc/fedora-release` | tr -d [A-Za-z])
%define dist %{dist_prefix}%{dist_version}
%else
%define is_redhat %(test -e /etc/redhat-release && echo 1 || echo 0)
%if %{is_redhat}
## define a default distribution model on Red Hat Linux
%define dist_prefix .el
%define dist_version %(echo `rpm -qf --qf='%{VERSION}' /etc/redhat-release` | tr -d [A-Za-z])
%define dist %{dist_prefix}%{dist_version}
%endif
%endif
%endif
%endif
###############################################################################
### P A C K A G E H E A D E R ###
###############################################################################
Name: %{base_name}
Version: %{base_version}
Release: %{base_release}%{?dist}
Summary: %{base_summary}
Vendor: %{base_vendor}
URL: %{base_url}
License: %{base_license}
Packager: %{base_packager}
Group: %{base_group}
## Without AutoReqProv: no, rpmbuild finds all sorts of crazy
## dependencies that we don't care about, and refuses to install
AutoReqProv: no
BuildArch: noarch
BuildRoot: %{_builddir}/%{base_name}-root
## NOTE: This spec file may require a specific JDK, "gcc", and/or "gcc-c++"
## packages as well as the "rpm" and "rpm-build" packages.
##
## Technically, "ant" should not need to be in "BuildRequires" since
## it is the Java equivalent of "make" (and/or "Autotools").
##
BuildRequires: ant >= 1.6.2, %{base_flavor}-%{base_name}-ui >= 1.0.0
## Without Requires something, rpmbuild will abort!
Requires: %{base_name}-ui, %{base_prefix}-setup >= 1.0.0, mod_nss >= 1.0.7, mod_perl >= 1.99_16, mod_revocator >= 1.0.2, mozldap >= 6.0.2, perl-DBD-SQLite >= 1.11, perl-DBI >= 1.52, perl-HTML-Parser >= 3.35, perl-HTML-Tagset >= 3.03, perl-Parse-RecDescent >= 1.94, perl-URI >= 1.30, perl-XML-NamespaceSupport >= 1.08, perl-XML-Parser >= 2.34, sendmail >= 8.13.1, sqlite >= 3.3.3, %{base_prefix}-selinux >= 1.0.0, perl-XML-Simple
## This package is non-relocatable!
#Prefix:
Source0: %{base_name}-%{base_version}.tar.gz
## This package currently contains no patches!
#Patch0:
%description
%{base_pki} is an enterprise software system designed
to manage enterprise Public Key Infrastructure (PKI) deployments.
The %{pki_ra} is an optional PKI subsystem that
acts as a front-end for authenticating and processing
enrollment requests, PIN reset requests, and formatting requests.
%{pki_ra} communicates over SSL with the
%{pki_ca} to fulfill the user's requests.
###############################################################################
### P R E P A R A T I O N & S E T U P ###
###############################################################################
## On Linux systems, prep and setup expect there to be a Source file
## in the /usr/src/redhat/SOURCES directory - it will be unpacked
## in the _builddir (not BuildRoot)
%prep
%setup -q
## This package currently contains no patches!
#%patch0
# patches
###############################################################################
### B U I L D P R O C E S S ###
###############################################################################
%build
ant -Dspecfile=%{base_name}.spec
###############################################################################
### I N S T A L L A T I O N P R O C E S S ###
###############################################################################
%install
cd dist/binary
unzip %{name}-%{version}.zip -d ${RPM_BUILD_ROOT}
sed -i 's/^preop.product.version=.*$/preop.product.version=%{pki_version}/' ${RPM_BUILD_ROOT}/usr/share/%{base_prefix}/%{base_component}/conf/CS.cfg
###############################################################################
### C L E A N U P P R O C E S S ###
###############################################################################
%clean
rm -rf ${RPM_BUILD_ROOT}
###############################################################################
### P R E & P O S T I N S T A L L / U N I N S T A L L S C R I P T S ###
###############################################################################
%pre
if [ `grep -c %{base_user} /etc/group` -eq 0 ] ; then
echo "Adding default PKI group \"%{base_user}\" to /etc/group."
groupadd %{base_user}
fi
if [ `grep -c %{base_user} /etc/passwd` -eq 0 ] ; then
echo "Adding default PKI user \"%{base_user}\" to /etc/passwd."
useradd -g %{base_user} -d %{_datadir}/%{base_prefix} -s %{base_login_shell} -c "%{base_pki}" -m %{base_user}
fi
%post
chmod 00755 %{_datadir}/%{base_prefix}/%{base_component}/setup/postinstall
%{_datadir}/%{base_prefix}/%{base_component}/setup/postinstall %{base_prefix} %{base_component} %{base_version} %{base_release}
echo ""
echo "Install finished."
%preun
if [ -d %{base_instance} ] ; then
echo "WARNING: The default instance \"%{base_instance}\" was NOT removed!"
echo ""
echo "NOTE: This means that the data in the default instance called"
echo " \"%{base_instance}\" will NOT be overwritten once the"
echo " \"%{name}\" package is re-installed."
echo ""
echo "Shutting down the default instance \"%{base_instance}\""
echo "PRIOR to uninstalling the \"%{name}\" package:"
echo ""
/etc/init.d/%{base_name} stop
fi
## This package currently contains no post-uninstallation process!
#%postun
###############################################################################
### I N V E N T O R Y O F F I L E S A N D D I R E C T O R I E S ###
###############################################################################
%files
%attr(-,root,root) %{_datadir}/doc/%{base_name}-%{base_version}/*
%attr(-,root,root) %{_datadir}/%{base_prefix}/%{base_component}/alias
%attr(00660,root,root) %{_datadir}/%{base_prefix}/%{base_component}/conf/CS.cfg
%attr(-,root,root) %{_datadir}/%{base_prefix}/%{base_component}/conf/[a-z]*
%attr(-,root,root) %{_datadir}/%{base_prefix}/%{base_component}/docroot
%attr(-,root,root) %{_datadir}/%{base_prefix}/%{base_component}/etc
%attr(-,root,root) %{_datadir}/%{base_prefix}/%{base_component}/lib
%attr(-,root,root) %{_datadir}/%{base_prefix}/%{base_component}/logs
%attr(-,root,root) %{_datadir}/%{base_prefix}/%{base_component}/scripts
%attr(-,root,root) %{_datadir}/%{base_prefix}/%{base_component}/setup
###############################################################################
### C H A N G E L O G ###
###############################################################################
%changelog
* Mon Jun 1 2009 Matthew Harmsen <mharmsen@redhat.com> 1.1.0-14
- Bugzilla Bug #503255 - Fix confusing "Security Domain" message when using
"status"
* Tue May 26 2009 Matthew Harmsen <mharmsen@redhat.com> 1.1.0-13
- Bugzilla Bug #502398 - Restore Configuration Logging Capabilities to
RA and TPS
* Mon May 25 2009 Ade Lee <alee@redhat.com> 1.1.0-12
- Bugzilla Bug #495157 - SELinux prevents CA from using nethsm pkcs11 module
* Thu May 14 2009 Matthew Harmsen <mharmsen@redhat.com> 1.1.0-11
- Bugzilla Bug #500498 - CA installation wizard doesn't install
administrator cert into browser on Firefox 3
* Mon May 11 2009 Matthew Harmsen <mharmsen@redhat.com> 1.1.0-10
- Bugzilla Bug #499025 - pki-tps and pki-ra startup script needs to loop
on pid file availability
* Fri May 8 2009 Matthew Harmsen <mharmsen@redhat.com> 1.1.0-9
- Bugzilla Bug #492735 - Configuration wizard stores certain incorrect
port values within TPS "CS.cfg" . . .
* Tue May 5 2009 Matthew Harmsen <mharmsen@redhat.com> 1.1.0-8
- Bugzilla Bug #492735 - Configuration wizard stores certain incorrect
port values within TPS "CS.cfg" . . .
- Bugzilla Bug #495597 - Unable to access Agent page using a configured
CA/KRA containing an HSM
* Thu Apr 30 2009 Matthew Harmsen <mharmsen@redhat.com> 1.1.0-7
- Bugzilla Bug #498528 - Disable mod_revocator on RHEL since it will no
longer work with the updated mod_nss which is required for HSMs
* Mon Apr 27 2009 Matthew Harmsen <mharmsen@redhat.com> 1.1.0-6
- Bugzilla Bug #497585 - rhcs80beta tps init script - restarting
shows incorrect output
* Wed Apr 22 2009 Matthew Harmsen <mharmsen@redhat.com> 1.1.0-5
- Bugzilla Bug #488338 - start/stop scripts should list all the
available port numbers with their functionality
* Mon Apr 20 2009 Matthew Harmsen <mharmsen@redhat.com> 1.1.0-4
- Bugzilla Bug #496679 - Use instance-specific paths rather than
redirected paths in Execution Management Scripts
* Thu Apr 16 2009 Matthew Harmsen <mharmsen@redhat.com> 1.1.0-3
- Bugzilla Bug #493122 - Proper invocation and use of mod_revocator
- Bugzilla Bug #495959 - pkiremove requires "perl-XML-SAX" as a runtime
dependency
* Tue Apr 7 2009 Ade Lee <alee@redhat.com> 1.1.0-2
- Bugzilla Bug #484828 - op.cgi allows RA agents to approve requests not assigned to their agent groups
* Sat Apr 4 2009 Matthew Harmsen <mharmsen@redhat.com> 1.1.0-1
- Version update to Dogtag 1.1.0.
* Sat Mar 28 2009 Matthew Harmsen <mharmsen@redhat.com> 1.0.0-26
- Bugzilla Bug #492180 - Security officer: token recovery for a security
officer throws error 28 'connection to server lost'.
- Bugzilla Bug #492503 - Integrate "mod_revocator" as a runtime dependency
for RA and TPS
* Wed Mar 11 2009 Matthew Harmsen <mharmsen@redhat.com> 1.0.0-25
- Bugzilla Bug #488338 - start/stop scripts should list all the
available port numbers with their functionality
- Bugzilla Bug #440164 - Dogtag subsystems should show up in
Fedora8 administrator Services window
* Wed Mar 11 2009 Ade Lee <alee@redhat.com> 1.0.0-24
Bugzilla Bug #489712 RA and TPS need perl-XML-Simple as prereq
* Tue Mar 10 2009 Matthew Harmsen <mharmsen@redhat.com> 1.0.0-23
- Bugzilla Bug #440350 - Removed use of "rhgb-console" from "httpd"
* Fri Mar 6 2009 Matthew Harmsen <mharmsen@redhat.com> 1.0.0-22
- Bugzilla Bug #440350 - Dogtag stop/start scripts should be chkconfig aware
* Fri Mar 6 2009 Ade Lee <alee@redhat.com> 1.0.0-21
- Bugzilla Bug 472308 - web installer display wrong product version in first Welcome panel
* Wed Mar 4 2009 Ade Lee <alee@redhat.com> 1.0.0-20
- Bugzilla Bug 487871, 488561 - pkiremove cleanup and remove all selinux ports
* Wed Mar 4 2009 Matthew Harmsen <mharmsen@redhat.com> 1.0.0-19
- Bugzilla Bug #440344 - Installation page should tell admins to use
"service", not "/etc/init.d" on Linux
* Fri Feb 27 2009 Ade Lee <alee@redhat.com> 1.0.0-18
- Bugzilla 224835 and 367171: Allow cert nicknames to be edited and sizepanel fixes
* Thu Feb 26 2009 Matthew Harmsen <mharmsen@redhat.com> 1.0.0-17
- Bugzilla Bug #458337 - Provide separate listening ports for CS
* Tue Feb 24 2009 Matthew Harmsen <mharmsen@redhat.com> 1.0.0-16
- Bugzilla Bug #485859 - port separation for RA and TPS
* Mon Feb 23 2009 Matthew Harmsen <mharmsen@redhat.com> 1.0.0-15
- Bugzilla Bug #486435 - clicking on configuration URL results in error
* Sat Feb 14 2009 Matthew Harmsen <mharmsen@redhat.com> 1.0.0-14
- Bugzilla Bug #250874 -Change spec file dependencies to rely on latest
versions of components (NSPR, NSS, JSS, MOD_NSS)
* Wed Feb 11 2009 Matthew Harmsen <mharmsen@redhat.com> 1.0.0-13
- Bugzilla Bug #467155 - Change "renameTo" to "cp -p "
* Wed Feb 11 2009 Ade Lee <alee@redhat.com> 1.0.0-12
- Bugzilla # 484826 -selinux policy required for TPS and RA subsystems
* Tue Jan 27 2009 Ade Lee <alee@redhat.com> 1.0.0-11
- Bugzilla Bug 480679 - Integrate selinux into framework
* Thu Jan 22 2009 Matthew Harmsen <mharmsen@redhat.com> 1.0.0-10
- Bugzilla Bug #480952 - moved "perl-XML-Simple" and "perl-libwww-perl"
runtime dependencies to pki-setup
- Bugzilla Bug #480515 - lowered "perl-DBI" version runtime dependency
* Sat Jan 17 2009 Matthew Harmsen <mharmsen@redhat.com> 1.0.0-9
- Bugzilla Bug #480515 - RA configuraiton wizard url fails to start
* Wed Dec 10 2008 Matthew Harmsen <mharmsen@redhat.com> 1.0.0-8
- Bugzilla Bug #475895 - Parameterize the initial login shell
* Fri Nov 28 2008 Matthew Harmsen <mharmsen@redhat.com> 1.0.0-7
- Bugzilla Bug #445402 - changed "linux"/"fedora" to "dogtag"; changed
"pki-svn.fedora.redhat.com" to "pki.fedoraproject.org"
* Sun Nov 23 2008 Matthew Harmsen <mharmsen@redhat.com> 1.0.0-6
- Bugzilla Bug #446662 - /usr/share/fpki/ra/conf path referred
to in CS.cfg doesn't exist
* Sat Nov 22 2008 Matthew Harmsen <mharmsen@redhat.com> 1.0.0-5
- Bugzilla Bug #450345 - Port Dogtag 1.0.0 to Fedora 9
(32-bit i386 & 64-bit x86_64)
- Bugzilla Bug #453504 - RA perl scripts won't compile on Fedora 9
* Sat Nov 22 2008 Matthew Harmsen <mharmsen@redhat.com> 1.0.0-4
- Bugzilla Bug #472305 - "equality" tests in all spec files need to be fixed
- Bumped "java" and "java-devel" 1.4.2 and 1.5.0 dependencies to 1.6.0
- Changed "java-sdk" to "java-devel" for consistency
* Tue Aug 5 2008 Ade Lee <alee@redhat.com> 1.0.0-3
- Fix for bug#454565 - Broken Installation Wizard for TPS and RA with latest modutil.
* Tue Apr 1 2008 Jack Magne <jmagne@redhat.com> 1.0.0-2
- Fix for bug#440084 - Subsystem Installation Error Message Needs Improvement.
* Tue Feb 19 2008 PKI Team <pki-devel@redhat.com> 1.0.0-1
- Initial open source version based upon proprietary
Red Hat Certificate System (RHCS) 7.3.
|
