nss-vl.spec 27 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813
  1. %define build_compat32 %{?_with_compat32:1}%{!?_with_compat32:0}
  2. %define nspr_version 4.32
  3. %define pem_version 1.0.8
  4. %define unsupported_tools_directory %{_libdir}/nss/unsupported-tools
  5. %global allTools "certutil cmsutil crlutil derdump modutil pk12util pp signtool signver ssltap vfychain vfyserv"
  6. # Produce .chk files for the final stripped binaries
  7. #
  8. # NOTE: The LD_LIBRARY_PATH line guarantees shlibsign links
  9. # against the freebl that we just built. This is necessary
  10. # because the signing algorithm changed on 3.14 to DSA2 with SHA256
  11. # whereas we previously signed with DSA and SHA1. We must Keep this line
  12. # until all mock platforms have been updated.
  13. # After %%{__os_install_post} we would add
  14. # export LD_LIBRARY_PATH=$RPM_BUILD_ROOT/%%{_libdir}
  15. %define __spec_install_post \
  16. %{?__debug_package:%{__debug_install_post}} \
  17. %{__arch_install_post} \
  18. %{__os_install_post} \
  19. $RPM_BUILD_ROOT/%{unsupported_tools_directory}/shlibsign -i $RPM_BUILD_ROOT/%{_libdir}/libfreebl3.so \
  20. $RPM_BUILD_ROOT/%{unsupported_tools_directory}/shlibsign -i $RPM_BUILD_ROOT/%{_libdir}/libfreeblpriv3.so \
  21. $RPM_BUILD_ROOT/%{unsupported_tools_directory}/shlibsign -i $RPM_BUILD_ROOT/%{_libdir}/libnssdbm3.so \
  22. $RPM_BUILD_ROOT/%{unsupported_tools_directory}/shlibsign -i $RPM_BUILD_ROOT/%{_libdir}/libsoftokn3.so \
  23. %{nil}
  24. Summary: Network Security Services
  25. Name: nss
  26. Version: 3.73
  27. Release: 1%{?_dist_release}
  28. Group: system
  29. Vendor: Project Vine
  30. Distribution: Vine Linux
  31. License: MPLv1.1 or GPLv2+ or LGPLv2+
  32. URL: http://www.mozilla.org/projects/security/pki/nss/
  33. %define altver %(echo %{version} | sed -e 's/\\./_/g')
  34. Source0: https://archive.mozilla.org/pub/security/nss/releases/NSS_%{altver}_RTM/src/%{name}-%{version}.tar.gz
  35. Source1: nss.pc.in
  36. Source2: nss-config.in
  37. Source3: blank-cert8.db
  38. Source4: blank-key3.db
  39. Source5: blank-secmod.db
  40. Source6: blank-cert9.db
  41. Source7: blank-key4.db
  42. Source8: system-pkcs11.txt
  43. Source9: setup-nsssysinit.sh
  44. Source20: nss-config.xml
  45. Source21: setup-nsssysinit.xml
  46. Source22: pkcs11.txt.xml
  47. Source23: cert8.db.xml
  48. Source24: cert9.db.xml
  49. Source25: key3.db.xml
  50. Source26: key4.db.xml
  51. Source27: secmod.db.xml
  52. Source101: nss-util.pc.in
  53. Source102: nss-util-config.in
  54. Source103: nss-softokn.pc.in
  55. Source104: nss-softokn-config.in
  56. Source1000: https://github.com/kdudka/nss-pem/releases/download/nss-pem-%{pem_version}/nss-pem-%{pem_version}.tar.xz
  57. Source1001: pem-makefile.tar.gz
  58. Patch2: add-relro-linker-option.patch
  59. Patch3: renegotiate-transitional.patch
  60. # Upstream: https://bugzilla.mozilla.org/show_bug.cgi?id=617723
  61. Patch16: nss-539183.patch
  62. # Fedora / RHEL-only patch, the templates directory was originally introduced to support mod_revocator
  63. Patch47: utilwrap-include-templates.patch
  64. # TODO remove when we switch to building nss without softoken
  65. Patch49: nss-skip-bltest-and-fipstest.patch
  66. # This patch uses the GCC -iquote option documented at
  67. # http://gcc.gnu.org/onlinedocs/gcc/Directory-Options.html#Directory-Options
  68. # to give the in-tree headers a higher priority over the system headers,
  69. # when they are included through the quote form (#include "file.h").
  70. #
  71. # This ensures a build even when system headers are older. Such is the
  72. # case when starting an update with API changes or even private export
  73. # changes.
  74. #
  75. # Once the buildroot aha been bootstrapped the patch may be removed
  76. # but it doesn't hurt to keep it.
  77. Patch50: iquote.patch
  78. # Local patch for TLS_ECDHE_{ECDSA|RSA}_WITH_3DES_EDE_CBC_SHA ciphers
  79. Patch58: rhbz1185708-enable-ecc-3des-ciphers-by-default.patch
  80. Patch62: nss-skip-util-gtest.patch
  81. # dropped: get same effect by sed
  82. #Patch1000: nss-enable-pem.patch
  83. BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
  84. BuildRequires: nspr-devel >= %{nspr_version}
  85. BuildRequires: sqlite3-devel
  86. BuildRequires: zlib-devel
  87. BuildRequires: pkgconfig
  88. BuildRequires: gawk
  89. BuildRequires: psmisc
  90. BuildRequires: perl
  91. Provides: mozilla-nss
  92. Obsoletes: mozilla-nss
  93. Requires: nspr >= %{nspr_version}
  94. %description
  95. Network Security Services (NSS) is a set of libraries designed to
  96. support cross-platform development of security-enabled client and
  97. server applications. Applications built with NSS can support SSL v2
  98. and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509
  99. v3 certificates, and other security standards.
  100. %package tools
  101. Summary: Tools for the Network Security Services
  102. Group: security
  103. Requires: nss = %{version}-%{release}
  104. %description tools
  105. Network Security Services (NSS) is a set of libraries designed to
  106. support cross-platform development of security-enabled client and
  107. server applications. Applications built with NSS can support SSL v2
  108. and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509
  109. v3 certificates, and other security standards.
  110. Install the nss-tools package if you need command-line tools to
  111. manipulate the NSS certificate and key database.
  112. %package devel
  113. Summary: Development libraries for Network Security Services
  114. Group: programming
  115. Requires: nss = %{version}-%{release}
  116. Requires: nspr-devel >= %{nspr_version}
  117. Provides: mozilla-nss-devel
  118. Obsoletes: mozilla-nss-devel
  119. %description devel
  120. Header and Library files for doing development with Network Security Services.
  121. %package pkcs11-devel
  122. Summary: Development libraries for PKCS #11 (Cryptoki) using NSS
  123. Group: programming
  124. Requires: nss-devel = %{version}-%{release}
  125. %description pkcs11-devel
  126. Library files for developing PKCS #11 modules using basic NSS
  127. low level services.
  128. ## to build compat32 for x86_64 architecture support
  129. %package -n compat32-%{name}
  130. Summary: Network Security Services
  131. Group: system
  132. %description -n compat32-%{name}
  133. Network Security Services (NSS) is a set of libraries designed to
  134. support cross-platform development of security-enabled client and
  135. server applications. Applications built with NSS can support SSL v2
  136. and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509
  137. v3 certificates, and other security standards.
  138. %debug_package
  139. %prep
  140. %setup -q
  141. %setup -q -T -D -n %{name}-%{version} -a 1000
  142. %{__mv} nss-pem-%{pem_version}/src nss/lib/ckfw/pem
  143. pushd nss/lib/ckfw/pem/
  144. tar xvf %{SOURCE1001}
  145. perl -pi -e 's/^#define USE_UTIL_DIRECTLY.*$//' ckpem.h
  146. popd
  147. %patch2 -p0 -b .relro
  148. %patch3 -p0 -b .transitional
  149. %patch16 -p0 -b .539183
  150. %patch50 -p0 -b .iquote
  151. pushd nss
  152. %patch62 -p1 -b .skip_util_gtest
  153. popd
  154. # enable nss-pem
  155. sed -i -e 's/^DIRS = \. builtins/DIRS = . builtins pem/' \
  156. nss/lib/ckfw/manifest.mn
  157. pemNeedsFromSoftoken="lowkeyi lowkeyti softoken softoknt"
  158. for file in ${pemNeedsFromSoftoken}; do
  159. %{__cp} ./nss/lib/softoken/${file}.h ./nss/lib/ckfw/pem/
  160. done
  161. %{__cp} ./nss/lib/softoken/lowkeyi.h ./nss/cmd/rsaperf
  162. %{__cp} ./nss/lib/softoken/lowkeyti.h ./nss/cmd/rsaperf
  163. pushd nss/tests/ssl
  164. # Create versions of sslcov.txt and sslstress.txt that disable tests
  165. # for SSL2 and EXPORT ciphers.
  166. cat sslcov.txt| sed -r "s/^([^#].*EXPORT|^[^#].*SSL2)/#disabled \1/" > sslcov.noSSL2orExport.txt
  167. cat sslstress.txt| sed -r "s/^([^#].*EXPORT|^[^#].*SSL2)/#disabled \1/" > sslstress.noSSL2orExport.txt
  168. popd
  169. %build
  170. export NSS_NO_SSL2=1
  171. export NSS_NO_PKCS11_BYPASS=1
  172. # partial RELRO support as a security enhancement
  173. #LDFLAGS+=-Wl,-z,relro
  174. #export LDFLAGS
  175. export FREEBL_NO_DEPEND=1
  176. # Must export FREEBL_LOWHASH=1 for nsslowhash.h so that it gets
  177. # copied to dist and the rpm install phase can find it
  178. # This due of the upstream changes to fix
  179. # https://bugzilla.mozilla.org/show_bug.cgi?id=717906
  180. export FREEBL_LOWHASH=1
  181. # Enable compiler optimizations and disable debugging code
  182. export BUILD_OPT=1
  183. # Generate symbolic info for debuggers
  184. export XCFLAGS=$RPM_OPT_FLAGS
  185. # for gcc10
  186. export XCFLAGS="$XCFLAGS -Wno-nonnull"
  187. export PKG_CONFIG_ALLOW_SYSTEM_LIBS=1
  188. export PKG_CONFIG_ALLOW_SYSTEM_CFLAGS=1
  189. export NSPR_INCLUDE_DIR=`/usr/bin/pkg-config --cflags-only-I nspr | sed 's/-I//'`
  190. export NSPR_LIB_DIR=`/usr/bin/pkg-config --libs-only-L nspr | sed 's/-L//'`
  191. #export FREEBL_INCLUDE_DIR=`/usr/bin/pkg-config --cflags-only-I nss-softokn | sed 's/-I//'`
  192. #export FREEBL_LIB_DIR=%{_libdir}
  193. export USE_SYSTEM_FREEBL=0
  194. export NSS_USE_SYSTEM_SQLITE=1
  195. export NSS_ALLOW_SSLKEYLOGFILE=1
  196. export USE_SYSTEM_ZLIB=1
  197. export ZLIB_LIBS=%{_libdir}
  198. %ifarch x86_64 ppc64 ia64 s390x
  199. export USE_64=1
  200. %endif
  201. # uncomment if the iquote patch is activated
  202. export IN_TREE_FREEBL_HEADERS_FIRST=1
  203. #export NSS_BLTEST_NOT_AVAILABLE=1
  204. #
  205. #%{__make} -C ./nss/coreconf
  206. #%{__make} -C ./nss/lib/dbm
  207. %{__make} -C ./nss prepare_build
  208. %{__make} -C ./nss/lib/freebl
  209. %{__make} -C ./nss
  210. %install
  211. # There is no make install target so we'll do it ourselves.
  212. %{__mkdir_p} $RPM_BUILD_ROOT/%{_includedir}/nss3
  213. %{__mkdir_p} $RPM_BUILD_ROOT/%{_includedir}/nss3/templates
  214. %{__mkdir_p} $RPM_BUILD_ROOT/%{_bindir}
  215. %{__mkdir_p} $RPM_BUILD_ROOT/%{_libdir}
  216. %{__mkdir_p} $RPM_BUILD_ROOT/%{unsupported_tools_directory}
  217. %{__mkdir_p} $RPM_BUILD_ROOT/%{_libdir}/pkgconfig
  218. # Copy the binary libraries we want
  219. for file in \
  220. libfreebl3.so \
  221. libfreeblpriv3.so \
  222. libnss3.so \
  223. libnssckbi.so \
  224. libnssdbm3.so \
  225. libnsspem.so \
  226. libnsssysinit.so \
  227. libnssutil3.so \
  228. libsmime3.so \
  229. libsoftokn3.so \
  230. libssl3.so
  231. do
  232. %{__install} -m 755 dist/*.OBJ/lib/$file $RPM_BUILD_ROOT/%{_libdir}
  233. done
  234. # Install the empty NSS db files
  235. # Legacy db
  236. %{__mkdir_p} $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb
  237. %{__install} -m 644 %{SOURCE3} $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb/cert8.db
  238. %{__install} -m 644 %{SOURCE4} $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb/key3.db
  239. %{__install} -m 644 %{SOURCE5} $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb/secmod.db
  240. # Shared db
  241. %{__install} -p -m 644 %{SOURCE6} $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb/cert9.db
  242. %{__install} -p -m 644 %{SOURCE7} $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb/key4.db
  243. %{__install} -p -m 644 %{SOURCE8} $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb/pkcs11.txt
  244. # Copy the development libraries we want
  245. for file in libcrmf.a libnssb.a libnssckfw.a
  246. do
  247. %{__install} -m 644 dist/*.OBJ/lib/$file $RPM_BUILD_ROOT/%{_libdir}
  248. done
  249. # Copy the binaries we want
  250. for file in certutil cmsutil crlutil modutil pk12util signtool signver ssltap
  251. do
  252. %{__install} -m 755 dist/*.OBJ/bin/$file $RPM_BUILD_ROOT/%{_bindir}
  253. done
  254. # Copy the binaries we ship as unsupported
  255. for file in atob btoa derdump ocspclnt pp selfserv shlibsign strsclnt symkeyutil tstclnt vfyserv vfychain
  256. do
  257. %{__install} -m 755 dist/*.OBJ/bin/$file $RPM_BUILD_ROOT/%{unsupported_tools_directory}
  258. done
  259. # Copy the include files
  260. for file in dist/public/nss/*.h
  261. do
  262. %{__install} -m 644 $file $RPM_BUILD_ROOT/%{_includedir}/nss3
  263. done
  264. # Copy the template files we want
  265. for file in nss/lib/ckfw/nssck.api
  266. do
  267. %{__install} -p -m 644 $file $RPM_BUILD_ROOT/%{_includedir}/nss3/templates
  268. done
  269. # Copy some freebl include files we also want
  270. for file in blapi.h alghmac.h
  271. do
  272. %{__install} -p -m 644 dist/private/nss/$file $RPM_BUILD_ROOT/%{_includedir}/nss3
  273. done
  274. # Copy the static freebl library
  275. for file in libfreebl.a
  276. do
  277. %{__install} -p -m 644 dist/*.OBJ/lib/$file $RPM_BUILD_ROOT/%{_libdir}
  278. done
  279. # Set up our package file
  280. %{__mkdir_p} $RPM_BUILD_ROOT/%{_libdir}/pkgconfig
  281. %{__cat} %{SOURCE1} | sed -e "s,%%libdir%%,%{_libdir},g" \
  282. -e "s,%%prefix%%,%{_prefix},g" \
  283. -e "s,%%exec_prefix%%,%{_prefix},g" \
  284. -e "s,%%includedir%%,%{_includedir}/nss3,g" \
  285. -e "s,%%NSPR_VERSION%%,%{nspr_version},g" \
  286. -e "s,%%NSS_VERSION%%,%{version},g" \
  287. -e "s,%%NSSUTIL_VERSION%%,%{version},g" > \
  288. $RPM_BUILD_ROOT/%{_libdir}/pkgconfig/nss.pc
  289. NSS_VMAJOR=`cat nss/lib/nss/nss.h | grep "#define.*NSS_VMAJOR" | awk '{print $3}'`
  290. NSS_VMINOR=`cat nss/lib/nss/nss.h | grep "#define.*NSS_VMINOR" | awk '{print $3}'`
  291. NSS_VPATCH=`cat nss/lib/nss/nss.h | grep "#define.*NSS_VPATCH" | awk '{print $3}'`
  292. export NSS_VMAJOR
  293. export NSS_VMINOR
  294. export NSS_VPATCH
  295. %{__mkdir_p} $RPM_BUILD_ROOT/%{_bindir}
  296. %{__cat} %{SOURCE2} | sed -e "s,@libdir@,%{_libdir},g" \
  297. -e "s,@prefix@,%{_prefix},g" \
  298. -e "s,@exec_prefix@,%{_prefix},g" \
  299. -e "s,@includedir@,%{_includedir}/nss3,g" \
  300. -e "s,@MOD_MAJOR_VERSION@,$NSS_VMAJOR,g" \
  301. -e "s,@MOD_MINOR_VERSION@,$NSS_VMINOR,g" \
  302. -e "s,@MOD_PATCH_VERSION@,$NSS_VPATCH,g" \
  303. > $RPM_BUILD_ROOT/%{_bindir}/nss-config
  304. chmod 755 $RPM_BUILD_ROOT/%{_bindir}/nss-config
  305. %{__cat} %{SOURCE101} | sed -e "s,%%libdir%%,%{_libdir},g" \
  306. -e "s,%%prefix%%,%{_prefix},g" \
  307. -e "s,%%exec_prefix%%,%{_prefix},g" \
  308. -e "s,%%includedir%%,%{_includedir}/nss3,g" \
  309. -e "s,%%NSPR_VERSION%%,%{nspr_version},g" \
  310. -e "s,%%NSSUTIL_VERSION%%,%{version},g" > \
  311. $RPM_BUILD_ROOT/%{_libdir}/pkgconfig/nss-util.pc
  312. NSSUTIL_VMAJOR=`cat nss/lib/util/nssutil.h | grep "#define.*NSSUTIL_VMAJOR" | awk '{print $3}'`
  313. NSSUTIL_VMINOR=`cat nss/lib/util/nssutil.h | grep "#define.*NSSUTIL_VMINOR" | awk '{print $3}'`
  314. NSSUTIL_VPATCH=`cat nss/lib/util/nssutil.h | grep "#define.*NSSUTIL_VPATCH" | awk '{print $3}'`
  315. export NSSUTIL_VMAJOR
  316. export NSSUTIL_VMINOR
  317. export NSSUTIL_VPATCH
  318. %{__cat} %{SOURCE102} | sed -e "s,@libdir@,%{_libdir},g" \
  319. -e "s,@prefix@,%{_prefix},g" \
  320. -e "s,@exec_prefix@,%{_prefix},g" \
  321. -e "s,@includedir@,%{_includedir}/nss3,g" \
  322. -e "s,@MOD_MAJOR_VERSION@,$NSSUTIL_VMAJOR,g" \
  323. -e "s,@MOD_MINOR_VERSION@,$NSSUTIL_VMINOR,g" \
  324. -e "s,@MOD_PATCH_VERSION@,$NSSUTIL_VPATCH,g" \
  325. > $RPM_BUILD_ROOT/%{_bindir}/nss-util-config
  326. chmod 755 $RPM_BUILD_ROOT/%{_bindir}/nss-util-config
  327. %{__cat} %{SOURCE103} | sed -e "s,%%libdir%%,%{_libdir},g" \
  328. -e "s,%%prefix%%,%{_prefix},g" \
  329. -e "s,%%exec_prefix%%,%{_prefix},g" \
  330. -e "s,%%includedir%%,%{_includedir}/nss3,g" \
  331. -e "s,%%NSPR_VERSION%%,%{nspr_version},g" \
  332. -e "s,%%NSSUTIL_VERSION%%,%{version},g" \
  333. -e "s,%%SOFTOKEN_VERSION%%,%{version},g" > \
  334. $RPM_BUILD_ROOT/%{_libdir}/pkgconfig/nss-softokn.pc
  335. SOFTOKEN_VMAJOR=`cat nss/lib/softoken/softkver.h | grep "#define.*SOFTOKEN_VMAJOR" | awk '{print $3}'`
  336. SOFTOKEN_VMINOR=`cat nss/lib/softoken/softkver.h | grep "#define.*SOFTOKEN_VMINOR" | awk '{print $3}'`
  337. SOFTOKEN_VPATCH=`cat nss/lib/softoken/softkver.h | grep "#define.*SOFTOKEN_VPATCH" | awk '{print $3}'`
  338. export SOFTOKEN_VMAJOR
  339. export SOFTOKEN_VMINOR
  340. export SOFTOKEN_VPATCH
  341. %{__cat} %{SOURCE104} | sed -e "s,@libdir@,%{_libdir},g" \
  342. -e "s,@prefix@,%{_prefix},g" \
  343. -e "s,@exec_prefix@,%{_prefix},g" \
  344. -e "s,@includedir@,%{_includedir}/nss3,g" \
  345. -e "s,@MOD_MAJOR_VERSION@,$SOFTOKEN_VMAJOR,g" \
  346. -e "s,@MOD_MINOR_VERSION@,$SOFTOKEN_VMINOR,g" \
  347. -e "s,@MOD_PATCH_VERSION@,$SOFTOKEN_VPATCH,g" \
  348. > $RPM_BUILD_ROOT/%{_bindir}/nss-softokn-config
  349. chmod 755 $RPM_BUILD_ROOT/%{_bindir}/nss-softokn-config
  350. %clean
  351. %{__rm} -rf $RPM_BUILD_ROOT
  352. %files
  353. %defattr(-,root,root)
  354. %{_libdir}/libfreebl3.so
  355. %{_libdir}/libfreeblpriv3.so
  356. %{_libdir}/libnss3.so
  357. %{_libdir}/libnssckbi.so
  358. %{_libdir}/libnssdbm3.so
  359. %{_libdir}/libnsspem.so
  360. %{_libdir}/libnsssysinit.so
  361. %{_libdir}/libnssutil3.so
  362. %{_libdir}/libsmime3.so
  363. %{_libdir}/libsoftokn3.so
  364. %{_libdir}/libssl3.so
  365. %{unsupported_tools_directory}/shlibsign
  366. %{_libdir}/libfreebl3.chk
  367. %{_libdir}/libfreeblpriv3.chk
  368. %{_libdir}/libnssdbm3.chk
  369. %{_libdir}/libsoftokn3.chk
  370. %dir %{_sysconfdir}/pki/nssdb
  371. %config(noreplace) %{_sysconfdir}/pki/nssdb/cert8.db
  372. %config(noreplace) %{_sysconfdir}/pki/nssdb/key3.db
  373. %config(noreplace) %{_sysconfdir}/pki/nssdb/secmod.db
  374. %config(noreplace) %verify(not md5 size mtime) %{_sysconfdir}/pki/nssdb/cert9.db
  375. %config(noreplace) %verify(not md5 size mtime) %{_sysconfdir}/pki/nssdb/key4.db
  376. %config(noreplace) %verify(not md5 size mtime) %{_sysconfdir}/pki/nssdb/pkcs11.txt
  377. %files tools
  378. %defattr(-,root,root)
  379. %{_bindir}/certutil
  380. %{_bindir}/cmsutil
  381. %{_bindir}/crlutil
  382. %{_bindir}/modutil
  383. %{_bindir}/pk12util
  384. %{_bindir}/signtool
  385. %{_bindir}/signver
  386. %{_bindir}/ssltap
  387. %{unsupported_tools_directory}/atob
  388. %{unsupported_tools_directory}/btoa
  389. %{unsupported_tools_directory}/derdump
  390. %{unsupported_tools_directory}/ocspclnt
  391. %{unsupported_tools_directory}/pp
  392. %{unsupported_tools_directory}/selfserv
  393. %{unsupported_tools_directory}/strsclnt
  394. %{unsupported_tools_directory}/symkeyutil
  395. %{unsupported_tools_directory}/tstclnt
  396. %{unsupported_tools_directory}/vfyserv
  397. %{unsupported_tools_directory}/vfychain
  398. %files devel
  399. %defattr(-,root,root)
  400. %{_libdir}/libcrmf.a
  401. %{_libdir}/libfreebl.a
  402. %{_libdir}/pkgconfig/nss.pc
  403. %{_libdir}/pkgconfig/nss-softokn.pc
  404. %{_libdir}/pkgconfig/nss-util.pc
  405. %{_bindir}/nss-config
  406. %{_bindir}/nss-softokn-config
  407. %{_bindir}/nss-util-config
  408. %dir %{_includedir}/nss3
  409. %{_includedir}/nss3/alghmac.h
  410. %{_includedir}/nss3/base64.h
  411. %{_includedir}/nss3/blapi.h
  412. %{_includedir}/nss3/blapit.h
  413. %{_includedir}/nss3/cert.h
  414. %{_includedir}/nss3/certdb.h
  415. %{_includedir}/nss3/certt.h
  416. %{_includedir}/nss3/ciferfam.h
  417. %{_includedir}/nss3/cmmf.h
  418. %{_includedir}/nss3/cmmft.h
  419. %{_includedir}/nss3/cms.h
  420. %{_includedir}/nss3/cmsreclist.h
  421. %{_includedir}/nss3/cmst.h
  422. %{_includedir}/nss3/crmf.h
  423. %{_includedir}/nss3/crmft.h
  424. %{_includedir}/nss3/cryptohi.h
  425. %{_includedir}/nss3/cryptoht.h
  426. %{_includedir}/nss3/eccutil.h
  427. %{_includedir}/nss3/ecl-exp.h
  428. %{_includedir}/nss3/hasht.h
  429. %{_includedir}/nss3/jar-ds.h
  430. %{_includedir}/nss3/jar.h
  431. %{_includedir}/nss3/jarfile.h
  432. %{_includedir}/nss3/key.h
  433. %{_includedir}/nss3/keyhi.h
  434. %{_includedir}/nss3/keyt.h
  435. %{_includedir}/nss3/keythi.h
  436. %{_includedir}/nss3/lowkeyi.h
  437. %{_includedir}/nss3/lowkeyti.h
  438. %{_includedir}/nss3/nss.h
  439. %{_includedir}/nss3/nssb64.h
  440. %{_includedir}/nss3/nssb64t.h
  441. %{_includedir}/nss3/nssckbi.h
  442. %{_includedir}/nss3/nssilckt.h
  443. %{_includedir}/nss3/nssilock.h
  444. %{_includedir}/nss3/nsslocks.h
  445. %{_includedir}/nss3/nsslowhash.h
  446. %{_includedir}/nss3/nsspem.h
  447. %{_includedir}/nss3/nssrwlk.h
  448. %{_includedir}/nss3/nssrwlkt.h
  449. %{_includedir}/nss3/nssutil.h
  450. %{_includedir}/nss3/ocsp.h
  451. %{_includedir}/nss3/ocspt.h
  452. %{_includedir}/nss3/p12.h
  453. %{_includedir}/nss3/p12plcy.h
  454. %{_includedir}/nss3/p12t.h
  455. %{_includedir}/nss3/pk11func.h
  456. %{_includedir}/nss3/pk11hpke.h
  457. %{_includedir}/nss3/pk11pqg.h
  458. %{_includedir}/nss3/pk11priv.h
  459. %{_includedir}/nss3/pk11pub.h
  460. %{_includedir}/nss3/pk11sdr.h
  461. %{_includedir}/nss3/pkcs11.h
  462. %{_includedir}/nss3/pkcs11f.h
  463. %{_includedir}/nss3/pkcs11n.h
  464. %{_includedir}/nss3/pkcs11p.h
  465. %{_includedir}/nss3/pkcs11t.h
  466. %{_includedir}/nss3/pkcs11u.h
  467. %{_includedir}/nss3/pkcs11uri.h
  468. %{_includedir}/nss3/pkcs12.h
  469. %{_includedir}/nss3/pkcs12t.h
  470. %{_includedir}/nss3/pkcs7t.h
  471. %{_includedir}/nss3/pkcs1sig.h
  472. %{_includedir}/nss3/portreg.h
  473. %{_includedir}/nss3/preenc.h
  474. %{_includedir}/nss3/secasn1.h
  475. %{_includedir}/nss3/secasn1t.h
  476. %{_includedir}/nss3/seccomon.h
  477. %{_includedir}/nss3/secder.h
  478. %{_includedir}/nss3/secdert.h
  479. %{_includedir}/nss3/secdig.h
  480. %{_includedir}/nss3/secdigt.h
  481. %{_includedir}/nss3/secerr.h
  482. %{_includedir}/nss3/sechash.h
  483. %{_includedir}/nss3/secitem.h
  484. %{_includedir}/nss3/secmime.h
  485. %{_includedir}/nss3/secmod.h
  486. %{_includedir}/nss3/secmodt.h
  487. %{_includedir}/nss3/secoid.h
  488. %{_includedir}/nss3/secoidt.h
  489. %{_includedir}/nss3/secpkcs5.h
  490. %{_includedir}/nss3/secpkcs7.h
  491. %{_includedir}/nss3/secport.h
  492. %{_includedir}/nss3/shsign.h
  493. %{_includedir}/nss3/smime.h
  494. %{_includedir}/nss3/ssl.h
  495. %{_includedir}/nss3/sslerr.h
  496. %{_includedir}/nss3/sslexp.h
  497. %{_includedir}/nss3/sslproto.h
  498. %{_includedir}/nss3/sslt.h
  499. %{_includedir}/nss3/utilrename.h
  500. %{_includedir}/nss3/utilmodt.h
  501. %{_includedir}/nss3/utilpars.h
  502. %{_includedir}/nss3/utilparst.h
  503. %files pkcs11-devel
  504. %defattr(-, root, root)
  505. %{_includedir}/nss3/nssbase.h
  506. %{_includedir}/nss3/nssbaset.h
  507. %{_includedir}/nss3/nssckepv.h
  508. %{_includedir}/nss3/nssckft.h
  509. %{_includedir}/nss3/nssckfw.h
  510. %{_includedir}/nss3/nssckfwc.h
  511. %{_includedir}/nss3/nssckfwt.h
  512. %{_includedir}/nss3/nssckg.h
  513. %{_includedir}/nss3/nssckmdt.h
  514. %{_includedir}/nss3/nssckt.h
  515. %{_includedir}/nss3/templates/nssck.api
  516. %{_libdir}/libnssb.a
  517. %{_libdir}/libnssckfw.a
  518. ## to build compat32 for x86_64 architecture support
  519. %if %{build_compat32}
  520. %files -n compat32-%{name}
  521. %defattr(-,root,root)
  522. %{_libdir}/*.so
  523. %ghost %{_libdir}/libsoftokn3.chk
  524. %ghost %{_libdir}/libfreebl3.chk
  525. %ghost %{_libdir}/libfreeblpriv3.chk
  526. %ghost %{_libdir}/libnssdbm3.chk
  527. %{unsupported_tools_directory}/shlibsign
  528. %endif
  529. %changelog
  530. * Fri Dec 17 2021 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 3.73-1
  531. - update to 3.73.
  532. - updated nss-pem to 1.0.8.
  533. * Wed Aug 11 2021 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 3.69-1
  534. - update to 3.69.
  535. * Fri Jun 25 2021 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 3.67-1
  536. - update to 3.67.
  537. - dropped ldconfig scriptlets.
  538. * Wed Feb 17 2021 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 3.61-1
  539. - update to 3.61.
  540. - dropped Patch1001: fixed in upstream.
  541. * Fri Oct 23 2020 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 3.58-1
  542. - update to 3.58.
  543. - imported Patch1001 from upstream of nss-pem.
  544. * Wed May 06 2020 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 3.51.1-2
  545. - added missing libnsssysinit.so.
  546. * Sun Apr 26 2020 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 3.51.1-1
  547. - update to 3.51.1.
  548. - updated nss-pem to 1.0.6.
  549. - dropped Patch1000: got same effect by sed.
  550. * Fri Sep 27 2019 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 3.46-1
  551. - update to 3.46.
  552. - updated nss-pem to 1.0.5.
  553. - dropped Patch1001: fixed in upstream?
  554. * Thu Nov 08 2018 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 3.40-1
  555. - update to 3.40.
  556. - dropped Patch40,59.
  557. - updated Patch3.
  558. - added Patch1001.
  559. * Mon Oct 09 2017 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 3.33-1
  560. - update to 3.33.
  561. * Mon Jun 20 2016 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 3.21.1-3
  562. - added libfreebl.a.
  563. * Mon Jun 20 2016 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 3.21.1-2
  564. - enabled softokn and freebl.
  565. - dropped Patch47 and Patch49.
  566. * Tue May 10 2016 Yoji TOYODA <bsyamato@sea.plala.or.jp> 3.21.1-1
  567. - update to 3.21.1
  568. - import patches from centos package
  569. * Thu Jun 12 2014 Daisuke SUZUKI <daisuke@vinelinux.org> 3.16.1-1
  570. - update to 3.16.1
  571. * Thu Apr 04 2013 Daisuke SUZUKI <daisuke@linux.or.jp> 3.14.3-1
  572. - update to 3.14.3
  573. - import patches from fedora package
  574. * Wed Jan 09 2013 Daisuke SUZUKI <daisuke@linux.or.jp> 3.14.1-1
  575. - update to 3.14.1
  576. * Sat Sep 15 2012 Yoji TOYODA <bsyamato@sea.plala.or.jp> 3.13.6-2
  577. - add Source101 (nss-util.pc.in)
  578. - add Source102 (nss-util-config.in)
  579. * Mon Sep 03 2012 Daisuke SUZUKI <daisuke@linux.or.jp> 3.13.6-1
  580. - new upstream release
  581. * Sun Mar 18 2012 Yoji TOYODA <bsyamato@sea.plala.or.jp> 3.13.3-1
  582. - new upstream release
  583. * Thu Dec 22 2011 Daisuke SUZUKI <daisuke@linux.or.jp> 3.13.1-2
  584. - fix nss.pc
  585. * Wed Dec 21 2011 Daisuke SUZUKI <daisuke@linux.or.jp> 3.13.1-1
  586. - new upstream release
  587. * Fri Sep 02 2011 Daisuke SUZUKI <daisuke@linux.or.jp> 3.12.11-1
  588. - new upstram release
  589. * Wed Jun 01 2011 Daisuke SUZUKI <daisuke@linux.or.jp> 3.12.10-1
  590. - update to 3.12.10
  591. * Tue Mar 29 2011 Daisuke SUZUKI <daisuke@linux.or.jp> 3.12.9-1
  592. - update to 3.12.9.with.ckbi.1.82
  593. - update nss-pem source
  594. - define NSS_USE_SYSTEM_SQLITE, remove unneeded Patch2
  595. * Thu Sep 23 2010 Yoji TOYODA <bsyamato@sea.plala.or.jp> 3.12.6-2
  596. - rebuild with rpm-4.8.1 for pkg-config file
  597. * Wed Apr 7 2010 MATSUBAYASHI Kohji <shaolin@vinelinux.org> 3.12.6-1
  598. - new upstream release
  599. - update nss-pem Source12 to 20091210 (from 3.12.6-2.fc14)
  600. * Sat Jan 23 2010 NAKAMURA Kenta <kenta@vinelinux.org> 3.12.5-2
  601. - built with FREEBL_NO_DEPEND environmental variable to include nsslowhash.h
  602. * Sat Jan 09 2010 Daisuke SUZUKI <daisuke@linux.or.jp> 3.12.5-1
  603. - new upstream release
  604. * Mon Jul 06 2009 Daisuke SUZUKI <daisuke@linux.or.jp> 3.12.3-4
  605. - rebuild to fix the package built with broken environment.
  606. * Sun Jul 05 2009 Munehiro Yamamoto <munepi@cg8.so-net.ne.jp> 3.12.3-3
  607. - fixed %%files for compat32
  608. * Sat Jul 04 2009 Munehiro Yamamoto <munepi@cg8.so-net.ne.jp> 3.12.3-2
  609. - added compat32 subpackages
  610. * Wed Apr 22 2009 Daisuke SUZUKI <daisuke@linux.or.jp> 3.12.3-1
  611. - new upstream release
  612. * Wed Jul 02 2008 Daisuke SUZUKI <daisuke@linux.or.jp> 3.12-1
  613. - new upstream release
  614. * Fri May 18 2007 Daisuke SUZUKI <daisuke@linux.or.jp> 3.11.4-0vl1
  615. - initial build for Vine Linux
  616. * Fri Mar 02 2007 Kai Engert <kengert@redhat.com> - 3.11.5-2
  617. - Fix rhbz#230545, failure to enable FIPS mode
  618. - Fix rhbz#220542, make NSS more tolerant of resets when in the
  619. middle of prompting for a user password.
  620. * Sat Feb 24 2007 Kai Engert <kengert@redhat.com> - 3.11.5-1
  621. - Update to 3.11.5
  622. - This update fixes two security vulnerabilities with SSL 2
  623. - Do not use -rpath link option
  624. - Added several unsupported tools to tools package
  625. * Tue Jan 9 2007 Bob Relyea <rrelyea@redhat.com> - 3.11.4-4
  626. - disable ECC, cleanout dead code
  627. * Tue Nov 28 2006 Kai Engert <kengert@redhat.com> - 3.11.4-1
  628. - Update to 3.11.4
  629. * Thu Sep 14 2006 Kai Engert <kengert@redhat.com> - 3.11.3-2
  630. - Revert the attempt to require latest NSPR, as it is not yet available
  631. in the build infrastructure.
  632. * Thu Sep 14 2006 Kai Engert <kengert@redhat.com> - 3.11.3-1
  633. - Update to 3.11.3
  634. * Thu Aug 03 2006 Kai Engert <kengert@redhat.com> - 3.11.2-2
  635. - Add /etc/pki/nssdb
  636. * Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 3.11.2-1.1
  637. - rebuild
  638. * Fri Jun 30 2006 Kai Engert <kengert@redhat.com> - 3.11.2-1
  639. - Update to 3.11.2
  640. - Enable executable bit on shared libs, also fixes debug info.
  641. * Wed Jun 14 2006 Kai Engert <kengert@redhat.com> - 3.11.1-2
  642. - Enable Elliptic Curve Cryptography (ECC)
  643. * Fri May 26 2006 Kai Engert <kengert@redhat.com> - 3.11.1-1
  644. - Update to 3.11.1
  645. - Include upstream patch to limit curves
  646. * Wed Feb 15 2006 Kai Engert <kengert@redhat.com> - 3.11-4
  647. - add --noexecstack when compiling assembler on x86_64
  648. * Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 3.11-3.2
  649. - bump again for double-long bug on ppc(64)
  650. * Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 3.11-3.1
  651. - rebuilt for new gcc4.1 snapshot and glibc changes
  652. * Thu Jan 19 2006 Ray Strode <rstrode@redhat.com> 3.11-3
  653. - rebuild
  654. * Fri Dec 16 2005 Christopher Aillon <caillon@redhat.com> 3.11-2
  655. - Update file list for the devel packages
  656. * Thu Dec 15 2005 Christopher Aillon <caillon@redhat.com> 3.11-1
  657. - Update to 3.11
  658. * Thu Dec 15 2005 Christopher Aillon <caillon@redhat.com> 3.11-0.cvs.2
  659. - Add patch to allow building on ppc*
  660. - Update the pkgconfig file to Require nspr
  661. * Thu Dec 15 2005 Christopher Aillon <caillon@redhat.com> 3.11-0.cvs
  662. - Initial import into Fedora Core, based on a CVS snapshot of
  663. the NSS_3_11_RTM tag
  664. - Fix up the pkcs11-devel subpackage to contain the proper headers
  665. - Build with RPM_OPT_FLAGS
  666. - No need to have rpath of /usr/lib in the pc file
  667. * Thu Dec 15 2005 Kai Engert <kengert@redhat.com>
  668. - Adressed review comments by Wan-Teh Chang, Bob Relyea,
  669. Christopher Aillon.
  670. * Sat Jul 9 2005 Rob Crittenden <rcritten@redhat.com> 3.10-1
  671. - Initial build