1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
|
# BEGIN COPYRIGHT BLOCK
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; version 2 of the License.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License along
# with this program; if not, write to the Free Software Foundation, Inc.,
# 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
#
# (C) 2007 Red Hat, Inc.
# All rights reserved.
# END COPYRIGHT BLOCK
###############################################################################
### D E F I N I T I O N S ###
###############################################################################
## Entity Definitions
%define base_entity Dogtag
%define base_flavor fedora
%define base_prefix pki
## Product Definitions
%define base_system Certificate System
%define base_product Online Certificate Status Protocol Manager
%define base_component ocsp
%define base_pki %{base_entity} %{base_system}
## Package Header Definitions
%define base_name %{base_prefix}-%{base_component}
%define base_version 1.0.0
%define base_release 1
%define base_group System Environment/Daemons
%define base_vendor Red Hat, Inc.
%define base_license GPLv2 with exceptions
%define base_packager %{base_vendor} <http://bugzilla.redhat.com/bugzilla>
%define base_summary %{base_pki} - %{base_product}
%define base_url http://pki-svn.fedora.redhat.com/wiki/PKI_Documentation
## Pre & Post Install/Uninstall Scripts Definitions
%define base_user pkiuser
## Helper Definitions
%define pki_ca %{base_entity} Certificate Authority
%define pki_drm %{base_entity} Data Recovery Manager
%define pki_ds Fedora Directory Server
%define pki_ocsp %{base_entity} Online Certificate Status Protocol Manager
%define pki_ra %{base_entity} Registration Authority
%define pki_tks %{base_entity} Token Key Service
%define pki_tps %{base_entity} Token Processing System
## Don't build the debug packages
%define debug_package %{nil}
##===================##
## Linux Definitions ##
##===================##
%ifos Linux
## check for presence of UI packages
%define linux_ui %(echo `rpm -q --quiet %{base_name}-ui; echo $?`)
%define fedora_ui %(echo `rpm -q --quiet %{base_flavor}-%{base_name}-ui; echo $?`)
%if !%{linux_ui}
## if the Linux UI package is present, default to using it first
%define base_ui %{base_name}-ui
%else
%if !%{fedora_ui}
## otherwise, if the Fedora UI package is present, use it instead
%define base_ui %{base_flavor}-%{base_name}-ui
%else
## finally, if neither the Linux nor the Fedora UI packages are present,
## set base_ui to be equal to the Linux UI package to ALWAYS produce a
## "BuildRequires" dependency failure of "%{base_name}-ui"
%define base_ui %{base_name}-ui
%endif
%endif
## For PKI version information, ALWAYS refer to the version of
## the UI package dependency associated with this spec file!
%define pki_version %(echo `rpm -q --queryformat '%{VERSION}' %{base_ui}`)
%define pki_major_version %(echo `echo %{pki_version} | awk -F. '{ print $1 }'`)
%define pki_minor_version %(echo `echo %{pki_version} | awk -F. '{ print $2 }'`)
%define pki_patch_version %(echo `echo %{pki_version} | awk -F. '{ print $3 }'`)
## A distribution model is required on certain Linux operating systems!
##
## check for a pre-defined distribution model
%define undefined_distro %(test "%{dist}"="" && echo 1 || echo 0)
%if %{undefined_distro}
%define is_fedora %(test -e /etc/fedora-release && echo 1 || echo 0)
%if %{is_fedora}
## define a default distribution model on Fedora Linux
%define dist_prefix .fc
%define dist_version %(echo `rpm -qf --qf='%{VERSION}' /etc/fedora-release` | tr -d [A-Za-z])
%define dist %{dist_prefix}%{dist_version}
%else
%define is_redhat %(test -e /etc/redhat-release && echo 1 || echo 0)
%if %{is_redhat}
## define a default distribution model on Red Hat Linux
%define dist_prefix .el
%define dist_version %(echo `rpm -qf --qf='%{VERSION}' /etc/redhat-release` | tr -d [A-Za-z])
%define dist %{dist_prefix}%{dist_version}
%endif
%endif
%endif
%endif
###############################################################################
### P A C K A G E H E A D E R ###
###############################################################################
Name: %{base_name}
Version: %{base_version}
Release: %{base_release}%{?dist}
Summary: %{base_summary}
Vendor: %{base_vendor}
URL: %{base_url}
License: %{base_license}
Packager: %{base_packager}
Group: %{base_group}
## Without AutoReqProv: no, rpmbuild finds all sorts of crazy
## dependencies that we don't care about, and refuses to install
AutoReqProv: no
BuildArch: noarch
BuildRoot: %{_builddir}/%{base_name}-root
## NOTE: This spec file may require a specific JDK, "gcc", and/or "gcc-c++"
## packages as well as the "rpm" and "rpm-build" packages.
##
## Technically, "ant" should not need to be in "BuildRequires" since
## it is the Java equivalent of "make" (and/or "Autotools").
##
BuildRequires: ant >= 1.6.2, %{base_ui} >= 1.0.0, %{base_prefix}-common >= 1.0.0, %{base_prefix}-util >= 1.0.0, java-devel >= 1.4.2, jpackage-utils >= 1.6.0, jss >= 4.2.4
## Without Requires something, rpmbuild will abort!
Requires: %{base_name}-ui, %{base_prefix}-common >= 1.0.0
## This package is non-relocatable!
#Prefix:
Source0: %{base_name}-%{base_version}.tar.gz
## This package currently contains no patches!
#Patch0:
%description
%{base_pki} is an enterprise software system designed
to manage enterprise Public Key Infrastructure (PKI) deployments.
The %{pki_ocsp} is an optional
PKI subsystem that can act as a stand-alone Online Certificate
Status Protocol (OCSP) service.
The %{pki_ocsp} performs the task of an
online certificate validation authority by enabling OCSP-compliant clients to
do real-time verification of certificates. Note that an online
certificate-validation authority is often referred to as an OCSP Responder.
Although the %{pki_ca} is already configured with an
internal OCSP service. An external OCSP Responder is offered as a separate
subsystem in case the user wants the OCSP service provided outside of a
firewall while the %{pki_ca} resides inside of a firewall,
or to take the load of requests off of the %{pki_ca}.
The %{pki_ocsp} can receive Certificate
Revocation Lists (CRLs) from multiple %{pki_ca} servers,
and clients can query the %{pki_ocsp}
for the revocation status of certificates issued by all of these
%{pki_ca} servers.
When an instance of %{pki_ocsp} is
set up with an instance of %{pki_ca}, and publishing
is set up to this %{pki_ocsp},
CRLs are published to it whenever they are issued or updated.
###############################################################################
### P R E P A R A T I O N & S E T U P ###
###############################################################################
## On Linux systems, prep and setup expect there to be a Source file
## in the /usr/src/redhat/SOURCES directory - it will be unpacked
## in the _builddir (not BuildRoot)
%prep
%setup -q
## This package currently contains no patches!
#%patch0
# patches
###############################################################################
### B U I L D P R O C E S S ###
###############################################################################
%build
ant -Dspecfile=%{base_name}.spec
###############################################################################
### I N S T A L L A T I O N P R O C E S S ###
###############################################################################
%install
cd dist/binary
unzip %{name}-%{version}.zip -d ${RPM_BUILD_ROOT}
sed -i 's/^preop.product.version=.*$/preop.product.version=%{pki_version}/' ${RPM_BUILD_ROOT}/usr/share/%{base_prefix}/%{base_component}/conf/CS.cfg
sed -i 's/^cms.version=.*$/cms.version=%{pki_major_version}.%{pki_minor_version}/' ${RPM_BUILD_ROOT}/usr/share/%{base_prefix}/%{base_component}/conf/CS.cfg
cd ${RPM_BUILD_ROOT}/usr/share/java/%{base_prefix}/%{base_component}
mv %{base_component}.jar %{base_component}-%{version}.jar
ln -s %{base_component}-%{version}.jar %{base_component}.jar
###############################################################################
### C L E A N U P P R O C E S S ###
###############################################################################
%clean
rm -rf ${RPM_BUILD_ROOT}
###############################################################################
### P R E & P O S T I N S T A L L / U N I N S T A L L S C R I P T S ###
###############################################################################
%pre
if [ `grep -c %{base_user} /etc/group` -eq 0 ] ; then
groupadd %{base_user}
fi
if [ `grep -c %{base_user} /etc/passwd` -eq 0 ] ; then
# SELinux policy requires a shell of /sbin/nologin
useradd -g %{base_user} -d %{_datadir}/%{base_prefix} -s /sbin/nologin -c "%{base_pki}" -m %{base_user}
fi
%post
chmod 00755 %{_datadir}/%{base_prefix}/%{base_component}/setup/postinstall
%{_datadir}/%{base_prefix}/%{base_component}/setup/postinstall %{base_prefix} %{base_component} %{base_version} %{base_release}
echo ""
echo "Install finished."
%preun
if [ -x /etc/init.d/%{base_name} ] ; then
/etc/init.d/%{base_name} stop
fi
## This package currently contains no post-uninstallation process!
#%postun
###############################################################################
### I N V E N T O R Y O F F I L E S A N D D I R E C T O R I E S ###
###############################################################################
%files
%attr(-,root,root) %{_datadir}/doc/%{base_name}-%{base_version}/*
%attr(-,root,root) %{_datadir}/java/%{base_prefix}/%{base_component}
%attr(-,root,root) %{_datadir}/%{base_prefix}/%{base_component}/acl
%attr(-,root,root) %{_datadir}/%{base_prefix}/%{base_component}/alias
%attr(00660,root,root) %{_datadir}/%{base_prefix}/%{base_component}/conf/CS.cfg
%attr(-,root,root) %{_datadir}/%{base_prefix}/%{base_component}/conf/[a-z]*
%attr(-,root,root) %{_datadir}/%{base_prefix}/%{base_component}/etc
%attr(00770,root,root) %{_datadir}/%{base_prefix}/%{base_component}/logs/signedAudit
%attr(-,root,root) %{_datadir}/%{base_prefix}/%{base_component}/setup
%attr(-,root,root) %{_datadir}/%{base_prefix}/%{base_component}/shared
%attr(-,root,root) %{_datadir}/%{base_prefix}/%{base_component}/temp
%attr(-,root,root) %{_datadir}/%{base_prefix}/%{base_component}/webapps
%attr(-,root,root) %{_datadir}/%{base_prefix}/%{base_component}/work
###############################################################################
### C H A N G E L O G ###
###############################################################################
%changelog
* Tue Feb 19 2008 PKI Team <pki-devel@redhat.com> 1.0.0-1
- Initial open source version based upon proprietary
Red Hat Certificate System (RHCS) 7.3.
|
