nss-vl.spec 26 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786
  1. %define build_compat32 %{?_with_compat32:1}%{!?_with_compat32:0}
  2. %define _unpackaged_files_terminate_build 1
  3. %define nspr_version 4.13.1
  4. %define pem_version 1.0.3
  5. %define unsupported_tools_directory %{_libdir}/nss/unsupported-tools
  6. %global allTools "certutil cmsutil crlutil derdump modutil pk12util pp signtool signver ssltap vfychain vfyserv"
  7. # Produce .chk files for the final stripped binaries
  8. #
  9. # NOTE: The LD_LIBRARY_PATH line guarantees shlibsign links
  10. # against the freebl that we just built. This is necessary
  11. # because the signing algorithm changed on 3.14 to DSA2 with SHA256
  12. # whereas we previously signed with DSA and SHA1. We must Keep this line
  13. # until all mock platforms have been updated.
  14. # After %%{__os_install_post} we would add
  15. # export LD_LIBRARY_PATH=$RPM_BUILD_ROOT/%%{_libdir}
  16. %define __spec_install_post \
  17. %{?__debug_package:%{__debug_install_post}} \
  18. %{__arch_install_post} \
  19. %{__os_install_post} \
  20. $RPM_BUILD_ROOT/%{unsupported_tools_directory}/shlibsign -i $RPM_BUILD_ROOT/%{_libdir}/libsoftokn3.so \
  21. $RPM_BUILD_ROOT/%{unsupported_tools_directory}/shlibsign -i $RPM_BUILD_ROOT/%{_libdir}/libfreeblpriv3.so \
  22. $RPM_BUILD_ROOT/%{unsupported_tools_directory}/shlibsign -i $RPM_BUILD_ROOT/%{_libdir}/libfreebl3.so \
  23. $RPM_BUILD_ROOT/%{unsupported_tools_directory}/shlibsign -i $RPM_BUILD_ROOT/%{_libdir}/libnssdbm3.so \
  24. %{nil}
  25. Summary: Network Security Services
  26. Name: nss
  27. Version: 3.33
  28. Release: 1%{?_dist_release}
  29. License: MPLv1.1 or GPLv2+ or LGPLv2+
  30. URL: http://www.mozilla.org/projects/security/pki/nss/
  31. Group: System Environment/Libraries
  32. Vendor: Project Vine
  33. Distribution: Vine Linux
  34. Source0: %{name}-%{version}.tar.gz
  35. Source1: nss.pc.in
  36. Source2: nss-config.in
  37. Source3: blank-cert8.db
  38. Source4: blank-key3.db
  39. Source5: blank-secmod.db
  40. Source6: blank-cert9.db
  41. Source7: blank-key4.db
  42. Source8: system-pkcs11.txt
  43. Source9: setup-nsssysinit.sh
  44. Source20: nss-config.xml
  45. Source21: setup-nsssysinit.xml
  46. Source22: pkcs11.txt.xml
  47. Source23: cert8.db.xml
  48. Source24: cert9.db.xml
  49. Source25: key3.db.xml
  50. Source26: key4.db.xml
  51. Source27: secmod.db.xml
  52. Source101: nss-util.pc.in
  53. Source102: nss-util-config.in
  54. Source103: nss-softokn.pc.in
  55. Source104: nss-softokn-config.in
  56. Source1000: https://github.com/kdudka/nss-pem/releases/download/nss-pem-1.0.3/nss-pem-%{pem_version}.tar.xz
  57. Source1001: pem-makefile.tar.gz
  58. Patch2: add-relro-linker-option.patch
  59. Patch3: renegotiate-transitional.patch
  60. # Upstream: https://bugzilla.mozilla.org/show_bug.cgi?id=617723
  61. Patch16: nss-539183.patch
  62. # TODO: Remove this patch when the ocsp test are fixed
  63. Patch40: nss-3.14.0.0-disble-ocsp-test.patch
  64. # Fedora / RHEL-only patch, the templates directory was originally introduced to support mod_revocator
  65. Patch47: utilwrap-include-templates.patch
  66. # TODO remove when we switch to building nss without softoken
  67. Patch49: nss-skip-bltest-and-fipstest.patch
  68. # This patch uses the GCC -iquote option documented at
  69. # http://gcc.gnu.org/onlinedocs/gcc/Directory-Options.html#Directory-Options
  70. # to give the in-tree headers a higher priority over the system headers,
  71. # when they are included through the quote form (#include "file.h").
  72. #
  73. # This ensures a build even when system headers are older. Such is the
  74. # case when starting an update with API changes or even private export
  75. # changes.
  76. #
  77. # Once the buildroot aha been bootstrapped the patch may be removed
  78. # but it doesn't hurt to keep it.
  79. Patch50: iquote.patch
  80. # Local patch for TLS_ECDHE_{ECDSA|RSA}_WITH_3DES_EDE_CBC_SHA ciphers
  81. Patch58: rhbz1185708-enable-ecc-3des-ciphers-by-default.patch
  82. # Upstream: https://bugzilla.mozilla.org/show_bug.cgi?id=1279520
  83. Patch59: nss-check-policy-file.patch
  84. Patch62: nss-skip-util-gtest.patch
  85. Patch1000: nss-enable-pem.patch
  86. BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
  87. BuildRequires: nspr-devel >= %{nspr_version}
  88. BuildRequires: sqlite3-devel
  89. BuildRequires: zlib-devel
  90. BuildRequires: pkgconfig
  91. BuildRequires: gawk
  92. BuildRequires: psmisc
  93. BuildRequires: perl
  94. Provides: mozilla-nss
  95. Obsoletes: mozilla-nss
  96. Requires: nspr >= %{nspr_version}
  97. %description
  98. Network Security Services (NSS) is a set of libraries designed to
  99. support cross-platform development of security-enabled client and
  100. server applications. Applications built with NSS can support SSL v2
  101. and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509
  102. v3 certificates, and other security standards.
  103. %package tools
  104. Summary: Tools for the Network Security Services
  105. Group: System Environment/Base
  106. Requires: nss = %{version}-%{release}
  107. %description tools
  108. Network Security Services (NSS) is a set of libraries designed to
  109. support cross-platform development of security-enabled client and
  110. server applications. Applications built with NSS can support SSL v2
  111. and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509
  112. v3 certificates, and other security standards.
  113. Install the nss-tools package if you need command-line tools to
  114. manipulate the NSS certificate and key database.
  115. %package devel
  116. Summary: Development libraries for Network Security Services
  117. Group: Development/Libraries
  118. Requires: nss = %{version}-%{release}
  119. Requires: nspr-devel >= %{nspr_version}
  120. Provides: mozilla-nss-devel
  121. Obsoletes: mozilla-nss-devel
  122. %description devel
  123. Header and Library files for doing development with Network Security Services.
  124. %package pkcs11-devel
  125. Summary: Development libraries for PKCS #11 (Cryptoki) using NSS
  126. Group: Development/Libraries
  127. Requires: nss-devel = %{version}-%{release}
  128. %description pkcs11-devel
  129. Library files for developing PKCS #11 modules using basic NSS
  130. low level services.
  131. ## to build compat32 for x86_64 architecture support
  132. %package -n compat32-%{name}
  133. Summary: Network Security Services
  134. Group: System Environment/Libraries
  135. %description -n compat32-%{name}
  136. Network Security Services (NSS) is a set of libraries designed to
  137. support cross-platform development of security-enabled client and
  138. server applications. Applications built with NSS can support SSL v2
  139. and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509
  140. v3 certificates, and other security standards.
  141. %prep
  142. %setup -q
  143. %setup -q -T -D -n %{name}-%{version} -a 1000
  144. %{__mv} nss-pem-%{pem_version}/src nss/lib/ckfw/pem
  145. pushd nss/lib/ckfw/pem/
  146. tar xvf %{SOURCE1001}
  147. perl -pi -e 's/^#define USE_UTIL_DIRECTLY.*$//' ckpem.h
  148. popd
  149. %patch2 -p0 -b .relro
  150. %patch3 -p0 -b .transitional
  151. %patch16 -p0 -b .539183
  152. %patch40 -p0 -b .noocsptest
  153. %patch50 -p0 -b .iquote
  154. pushd nss
  155. %patch62 -p1 -b .skip_util_gtest
  156. popd
  157. %patch1000 -p0 -b .libpem
  158. pemNeedsFromSoftoken="lowkeyi lowkeyti softoken softoknt"
  159. for file in ${pemNeedsFromSoftoken}; do
  160. %{__cp} ./nss/lib/softoken/${file}.h ./nss/lib/ckfw/pem/
  161. done
  162. %{__cp} ./nss/lib/softoken/lowkeyi.h ./nss/cmd/rsaperf
  163. %{__cp} ./nss/lib/softoken/lowkeyti.h ./nss/cmd/rsaperf
  164. pushd nss/tests/ssl
  165. # Create versions of sslcov.txt and sslstress.txt that disable tests
  166. # for SSL2 and EXPORT ciphers.
  167. cat sslcov.txt| sed -r "s/^([^#].*EXPORT|^[^#].*SSL2)/#disabled \1/" > sslcov.noSSL2orExport.txt
  168. cat sslstress.txt| sed -r "s/^([^#].*EXPORT|^[^#].*SSL2)/#disabled \1/" > sslstress.noSSL2orExport.txt
  169. popd
  170. %build
  171. export NSS_NO_SSL2=1
  172. NSS_NO_PKCS11_BYPASS=1
  173. export NSS_NO_PKCS11_BYPASS
  174. # partial RELRO support as a security enhancement
  175. #LDFLAGS+=-Wl,-z,relro
  176. #export LDFLAGS
  177. FREEBL_NO_DEPEND=1
  178. export FREEBL_NO_DEPEND
  179. # Must export FREEBL_LOWHASH=1 for nsslowhash.h so that it gets
  180. # copied to dist and the rpm install phase can find it
  181. # This due of the upstream changes to fix
  182. # https://bugzilla.mozilla.org/show_bug.cgi?id=717906
  183. FREEBL_LOWHASH=1
  184. export FREEBL_LOWHASH
  185. # Enable compiler optimizations and disable debugging code
  186. BUILD_OPT=1
  187. export BUILD_OPT
  188. # Generate symbolic info for debuggers
  189. XCFLAGS=$RPM_OPT_FLAGS
  190. export XCFLAGS
  191. PKG_CONFIG_ALLOW_SYSTEM_LIBS=1
  192. PKG_CONFIG_ALLOW_SYSTEM_CFLAGS=1
  193. export PKG_CONFIG_ALLOW_SYSTEM_LIBS
  194. export PKG_CONFIG_ALLOW_SYSTEM_CFLAGS
  195. NSPR_INCLUDE_DIR=`/usr/bin/pkg-config --cflags-only-I nspr | sed 's/-I//'`
  196. NSPR_LIB_DIR=`/usr/bin/pkg-config --libs-only-L nspr | sed 's/-L//'`
  197. export NSPR_INCLUDE_DIR
  198. export NSPR_LIB_DIR
  199. #export FREEBL_INCLUDE_DIR=`/usr/bin/pkg-config --cflags-only-I nss-softokn | sed 's/-I//'`
  200. #export FREEBL_LIB_DIR=%{_libdir}
  201. export USE_SYSTEM_FREEBL=0
  202. NSS_USE_SYSTEM_SQLITE=1
  203. export NSS_USE_SYSTEM_SQLITE
  204. export NSS_ALLOW_SSLKEYLOGFILE=1
  205. export USE_SYSTEM_ZLIB=1
  206. export ZLIB_LIBS=%{_libdir}
  207. %ifarch x86_64 ppc64 ia64 s390x
  208. USE_64=1
  209. export USE_64
  210. %endif
  211. # uncomment if the iquote patch is activated
  212. export IN_TREE_FREEBL_HEADERS_FIRST=1
  213. #export NSS_BLTEST_NOT_AVAILABLE=1
  214. #
  215. #%{__make} -C ./nss/coreconf
  216. #%{__make} -C ./nss/lib/dbm
  217. %{__make} -C ./nss
  218. %install
  219. # There is no make install target so we'll do it ourselves.
  220. %{__mkdir_p} $RPM_BUILD_ROOT/%{_includedir}/nss3
  221. %{__mkdir_p} $RPM_BUILD_ROOT/%{_includedir}/nss3/templates
  222. %{__mkdir_p} $RPM_BUILD_ROOT/%{_bindir}
  223. %{__mkdir_p} $RPM_BUILD_ROOT/%{_libdir}
  224. %{__mkdir_p} $RPM_BUILD_ROOT/%{unsupported_tools_directory}
  225. %{__mkdir_p} $RPM_BUILD_ROOT/%{_libdir}/pkgconfig
  226. # Copy the binary libraries we want
  227. for file in libsoftokn3.so libfreebl3.so libfreeblpriv3.so \
  228. libnss3.so libnssutil3.so \
  229. libssl3.so libsmime3.so libnssckbi.so \
  230. libnsspem.so libnssdbm3.so
  231. do
  232. %{__install} -m 755 dist/*.OBJ/lib/$file $RPM_BUILD_ROOT/%{_libdir}
  233. done
  234. # Install the empty NSS db files
  235. # Legacy db
  236. %{__mkdir_p} $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb
  237. %{__install} -m 644 %{SOURCE3} $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb/cert8.db
  238. %{__install} -m 644 %{SOURCE4} $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb/key3.db
  239. %{__install} -m 644 %{SOURCE5} $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb/secmod.db
  240. # Shared db
  241. %{__install} -p -m 644 %{SOURCE6} $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb/cert9.db
  242. %{__install} -p -m 644 %{SOURCE7} $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb/key4.db
  243. %{__install} -p -m 644 %{SOURCE8} $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb/pkcs11.txt
  244. # Copy the development libraries we want
  245. for file in libcrmf.a libnssb.a libnssckfw.a
  246. do
  247. %{__install} -m 644 dist/*.OBJ/lib/$file $RPM_BUILD_ROOT/%{_libdir}
  248. done
  249. # Copy the binaries we want
  250. for file in certutil cmsutil crlutil modutil pk12util signtool signver ssltap
  251. do
  252. %{__install} -m 755 dist/*.OBJ/bin/$file $RPM_BUILD_ROOT/%{_bindir}
  253. done
  254. # Copy the binaries we ship as unsupported
  255. for file in atob btoa derdump ocspclnt pp selfserv shlibsign strsclnt symkeyutil tstclnt vfyserv vfychain
  256. do
  257. %{__install} -m 755 dist/*.OBJ/bin/$file $RPM_BUILD_ROOT/%{unsupported_tools_directory}
  258. done
  259. # Copy the include files
  260. for file in dist/public/nss/*.h
  261. do
  262. %{__install} -m 644 $file $RPM_BUILD_ROOT/%{_includedir}/nss3
  263. done
  264. # Copy the template files we want
  265. for file in nss/lib/ckfw/nssck.api
  266. do
  267. %{__install} -p -m 644 $file $RPM_BUILD_ROOT/%{_includedir}/nss3/templates
  268. done
  269. # Copy some freebl include files we also want
  270. for file in blapi.h alghmac.h
  271. do
  272. %{__install} -p -m 644 dist/private/nss/$file $RPM_BUILD_ROOT/%{_includedir}/nss3
  273. done
  274. # Copy the static freebl library
  275. for file in libfreebl.a
  276. do
  277. %{__install} -p -m 644 dist/*.OBJ/lib/$file $RPM_BUILD_ROOT/%{_libdir}
  278. done
  279. # Set up our package file
  280. %{__mkdir_p} $RPM_BUILD_ROOT/%{_libdir}/pkgconfig
  281. %{__cat} %{SOURCE1} | sed -e "s,%%libdir%%,%{_libdir},g" \
  282. -e "s,%%prefix%%,%{_prefix},g" \
  283. -e "s,%%exec_prefix%%,%{_prefix},g" \
  284. -e "s,%%includedir%%,%{_includedir}/nss3,g" \
  285. -e "s,%%NSPR_VERSION%%,%{nspr_version},g" \
  286. -e "s,%%NSS_VERSION%%,%{version},g" \
  287. -e "s,%%NSSUTIL_VERSION%%,%{version},g" > \
  288. $RPM_BUILD_ROOT/%{_libdir}/pkgconfig/nss.pc
  289. NSS_VMAJOR=`cat nss/lib/nss/nss.h | grep "#define.*NSS_VMAJOR" | awk '{print $3}'`
  290. NSS_VMINOR=`cat nss/lib/nss/nss.h | grep "#define.*NSS_VMINOR" | awk '{print $3}'`
  291. NSS_VPATCH=`cat nss/lib/nss/nss.h | grep "#define.*NSS_VPATCH" | awk '{print $3}'`
  292. export NSS_VMAJOR
  293. export NSS_VMINOR
  294. export NSS_VPATCH
  295. %{__mkdir_p} $RPM_BUILD_ROOT/%{_bindir}
  296. %{__cat} %{SOURCE2} | sed -e "s,@libdir@,%{_libdir},g" \
  297. -e "s,@prefix@,%{_prefix},g" \
  298. -e "s,@exec_prefix@,%{_prefix},g" \
  299. -e "s,@includedir@,%{_includedir}/nss3,g" \
  300. -e "s,@MOD_MAJOR_VERSION@,$NSS_VMAJOR,g" \
  301. -e "s,@MOD_MINOR_VERSION@,$NSS_VMINOR,g" \
  302. -e "s,@MOD_PATCH_VERSION@,$NSS_VPATCH,g" \
  303. > $RPM_BUILD_ROOT/%{_bindir}/nss-config
  304. chmod 755 $RPM_BUILD_ROOT/%{_bindir}/nss-config
  305. %{__cat} %{SOURCE101} | sed -e "s,%%libdir%%,%{_libdir},g" \
  306. -e "s,%%prefix%%,%{_prefix},g" \
  307. -e "s,%%exec_prefix%%,%{_prefix},g" \
  308. -e "s,%%includedir%%,%{_includedir}/nss3,g" \
  309. -e "s,%%NSPR_VERSION%%,%{nspr_version},g" \
  310. -e "s,%%NSSUTIL_VERSION%%,%{version},g" > \
  311. $RPM_BUILD_ROOT/%{_libdir}/pkgconfig/nss-util.pc
  312. NSSUTIL_VMAJOR=`cat nss/lib/util/nssutil.h | grep "#define.*NSSUTIL_VMAJOR" | awk '{print $3}'`
  313. NSSUTIL_VMINOR=`cat nss/lib/util/nssutil.h | grep "#define.*NSSUTIL_VMINOR" | awk '{print $3}'`
  314. NSSUTIL_VPATCH=`cat nss/lib/util/nssutil.h | grep "#define.*NSSUTIL_VPATCH" | awk '{print $3}'`
  315. export NSSUTIL_VMAJOR
  316. export NSSUTIL_VMINOR
  317. export NSSUTIL_VPATCH
  318. %{__cat} %{SOURCE102} | sed -e "s,@libdir@,%{_libdir},g" \
  319. -e "s,@prefix@,%{_prefix},g" \
  320. -e "s,@exec_prefix@,%{_prefix},g" \
  321. -e "s,@includedir@,%{_includedir}/nss3,g" \
  322. -e "s,@MOD_MAJOR_VERSION@,$NSSUTIL_VMAJOR,g" \
  323. -e "s,@MOD_MINOR_VERSION@,$NSSUTIL_VMINOR,g" \
  324. -e "s,@MOD_PATCH_VERSION@,$NSSUTIL_VPATCH,g" \
  325. > $RPM_BUILD_ROOT/%{_bindir}/nss-util-config
  326. chmod 755 $RPM_BUILD_ROOT/%{_bindir}/nss-util-config
  327. %{__cat} %{SOURCE103} | sed -e "s,%%libdir%%,%{_libdir},g" \
  328. -e "s,%%prefix%%,%{_prefix},g" \
  329. -e "s,%%exec_prefix%%,%{_prefix},g" \
  330. -e "s,%%includedir%%,%{_includedir}/nss3,g" \
  331. -e "s,%%NSPR_VERSION%%,%{nspr_version},g" \
  332. -e "s,%%NSSUTIL_VERSION%%,%{version},g" \
  333. -e "s,%%SOFTOKEN_VERSION%%,%{version},g" > \
  334. $RPM_BUILD_ROOT/%{_libdir}/pkgconfig/nss-softokn.pc
  335. SOFTOKEN_VMAJOR=`cat nss/lib/softoken/softkver.h | grep "#define.*SOFTOKEN_VMAJOR" | awk '{print $3}'`
  336. SOFTOKEN_VMINOR=`cat nss/lib/softoken/softkver.h | grep "#define.*SOFTOKEN_VMINOR" | awk '{print $3}'`
  337. SOFTOKEN_VPATCH=`cat nss/lib/softoken/softkver.h | grep "#define.*SOFTOKEN_VPATCH" | awk '{print $3}'`
  338. export SOFTOKEN_VMAJOR
  339. export SOFTOKEN_VMINOR
  340. export SOFTOKEN_VPATCH
  341. %{__cat} %{SOURCE104} | sed -e "s,@libdir@,%{_libdir},g" \
  342. -e "s,@prefix@,%{_prefix},g" \
  343. -e "s,@exec_prefix@,%{_prefix},g" \
  344. -e "s,@includedir@,%{_includedir}/nss3,g" \
  345. -e "s,@MOD_MAJOR_VERSION@,$SOFTOKEN_VMAJOR,g" \
  346. -e "s,@MOD_MINOR_VERSION@,$SOFTOKEN_VMINOR,g" \
  347. -e "s,@MOD_PATCH_VERSION@,$SOFTOKEN_VPATCH,g" \
  348. > $RPM_BUILD_ROOT/%{_bindir}/nss-softokn-config
  349. chmod 755 $RPM_BUILD_ROOT/%{_bindir}/nss-softokn-config
  350. %clean
  351. %{__rm} -rf $RPM_BUILD_ROOT
  352. %post
  353. /sbin/ldconfig >/dev/null 2>/dev/null
  354. %postun
  355. /sbin/ldconfig >/dev/null 2>/dev/null
  356. %files
  357. %defattr(-,root,root)
  358. %{_libdir}/libnss3.so
  359. %{_libdir}/libnssutil3.so
  360. %{_libdir}/libnssdbm3.so
  361. %{_libdir}/libssl3.so
  362. %{_libdir}/libsmime3.so
  363. %{_libdir}/libsoftokn3.so
  364. %{_libdir}/libnssckbi.so
  365. %{_libdir}/libnsspem.so
  366. %{_libdir}/libfreebl3.so
  367. %{_libdir}/libfreeblpriv3.so
  368. %{unsupported_tools_directory}/shlibsign
  369. %{_libdir}/libfreebl3.chk
  370. %{_libdir}/libfreeblpriv3.chk
  371. %{_libdir}/libnssdbm3.chk
  372. %{_libdir}/libsoftokn3.chk
  373. %dir %{_sysconfdir}/pki/nssdb
  374. %config(noreplace) %{_sysconfdir}/pki/nssdb/cert8.db
  375. %config(noreplace) %{_sysconfdir}/pki/nssdb/key3.db
  376. %config(noreplace) %{_sysconfdir}/pki/nssdb/secmod.db
  377. %config(noreplace) %verify(not md5 size mtime) %{_sysconfdir}/pki/nssdb/cert9.db
  378. %config(noreplace) %verify(not md5 size mtime) %{_sysconfdir}/pki/nssdb/key4.db
  379. %config(noreplace) %verify(not md5 size mtime) %{_sysconfdir}/pki/nssdb/pkcs11.txt
  380. %files tools
  381. %defattr(-,root,root)
  382. %{_bindir}/certutil
  383. %{_bindir}/cmsutil
  384. %{_bindir}/crlutil
  385. %{_bindir}/modutil
  386. %{_bindir}/pk12util
  387. %{_bindir}/signtool
  388. %{_bindir}/signver
  389. %{_bindir}/ssltap
  390. %{unsupported_tools_directory}/atob
  391. %{unsupported_tools_directory}/btoa
  392. %{unsupported_tools_directory}/derdump
  393. %{unsupported_tools_directory}/ocspclnt
  394. %{unsupported_tools_directory}/pp
  395. %{unsupported_tools_directory}/selfserv
  396. %{unsupported_tools_directory}/strsclnt
  397. %{unsupported_tools_directory}/symkeyutil
  398. %{unsupported_tools_directory}/tstclnt
  399. %{unsupported_tools_directory}/vfyserv
  400. %{unsupported_tools_directory}/vfychain
  401. %files devel
  402. %defattr(-,root,root)
  403. %{_libdir}/libcrmf.a
  404. %{_libdir}/libfreebl.a
  405. %{_libdir}/pkgconfig/nss.pc
  406. %{_libdir}/pkgconfig/nss-softokn.pc
  407. %{_libdir}/pkgconfig/nss-util.pc
  408. %{_bindir}/nss-config
  409. %{_bindir}/nss-softokn-config
  410. %{_bindir}/nss-util-config
  411. %dir %{_includedir}/nss3
  412. %{_includedir}/nss3/alghmac.h
  413. %{_includedir}/nss3/base64.h
  414. %{_includedir}/nss3/blapi.h
  415. %{_includedir}/nss3/blapit.h
  416. %{_includedir}/nss3/cert.h
  417. %{_includedir}/nss3/certdb.h
  418. %{_includedir}/nss3/certt.h
  419. %{_includedir}/nss3/ciferfam.h
  420. %{_includedir}/nss3/cmmf.h
  421. %{_includedir}/nss3/cmmft.h
  422. %{_includedir}/nss3/cms.h
  423. %{_includedir}/nss3/cmsreclist.h
  424. %{_includedir}/nss3/cmst.h
  425. %{_includedir}/nss3/crmf.h
  426. %{_includedir}/nss3/crmft.h
  427. %{_includedir}/nss3/cryptohi.h
  428. %{_includedir}/nss3/cryptoht.h
  429. %{_includedir}/nss3/eccutil.h
  430. %{_includedir}/nss3/ecl-exp.h
  431. %{_includedir}/nss3/hasht.h
  432. %{_includedir}/nss3/jar-ds.h
  433. %{_includedir}/nss3/jar.h
  434. %{_includedir}/nss3/jarfile.h
  435. %{_includedir}/nss3/key.h
  436. %{_includedir}/nss3/keyhi.h
  437. %{_includedir}/nss3/keyt.h
  438. %{_includedir}/nss3/keythi.h
  439. %{_includedir}/nss3/lowkeyi.h
  440. %{_includedir}/nss3/lowkeyti.h
  441. %{_includedir}/nss3/nss.h
  442. %{_includedir}/nss3/nssb64.h
  443. %{_includedir}/nss3/nssb64t.h
  444. %{_includedir}/nss3/nssckbi.h
  445. %{_includedir}/nss3/nssilckt.h
  446. %{_includedir}/nss3/nssilock.h
  447. %{_includedir}/nss3/nsslocks.h
  448. %{_includedir}/nss3/nsslowhash.h
  449. %{_includedir}/nss3/nsspem.h
  450. %{_includedir}/nss3/nssrwlk.h
  451. %{_includedir}/nss3/nssrwlkt.h
  452. %{_includedir}/nss3/nssutil.h
  453. %{_includedir}/nss3/ocsp.h
  454. %{_includedir}/nss3/ocspt.h
  455. %{_includedir}/nss3/p12.h
  456. %{_includedir}/nss3/p12plcy.h
  457. %{_includedir}/nss3/p12t.h
  458. %{_includedir}/nss3/pk11func.h
  459. %{_includedir}/nss3/pk11pqg.h
  460. %{_includedir}/nss3/pk11priv.h
  461. %{_includedir}/nss3/pk11pub.h
  462. %{_includedir}/nss3/pk11sdr.h
  463. %{_includedir}/nss3/pkcs11.h
  464. %{_includedir}/nss3/pkcs11f.h
  465. %{_includedir}/nss3/pkcs11n.h
  466. %{_includedir}/nss3/pkcs11p.h
  467. %{_includedir}/nss3/pkcs11t.h
  468. %{_includedir}/nss3/pkcs11u.h
  469. %{_includedir}/nss3/pkcs11uri.h
  470. %{_includedir}/nss3/pkcs12.h
  471. %{_includedir}/nss3/pkcs12t.h
  472. %{_includedir}/nss3/pkcs7t.h
  473. %{_includedir}/nss3/pkcs1sig.h
  474. %{_includedir}/nss3/portreg.h
  475. %{_includedir}/nss3/preenc.h
  476. %{_includedir}/nss3/secasn1.h
  477. %{_includedir}/nss3/secasn1t.h
  478. %{_includedir}/nss3/seccomon.h
  479. %{_includedir}/nss3/secder.h
  480. %{_includedir}/nss3/secdert.h
  481. %{_includedir}/nss3/secdig.h
  482. %{_includedir}/nss3/secdigt.h
  483. %{_includedir}/nss3/secerr.h
  484. %{_includedir}/nss3/sechash.h
  485. %{_includedir}/nss3/secitem.h
  486. %{_includedir}/nss3/secmime.h
  487. %{_includedir}/nss3/secmod.h
  488. %{_includedir}/nss3/secmodt.h
  489. %{_includedir}/nss3/secoid.h
  490. %{_includedir}/nss3/secoidt.h
  491. %{_includedir}/nss3/secpkcs5.h
  492. %{_includedir}/nss3/secpkcs7.h
  493. %{_includedir}/nss3/secport.h
  494. %{_includedir}/nss3/shsign.h
  495. %{_includedir}/nss3/smime.h
  496. %{_includedir}/nss3/ssl.h
  497. %{_includedir}/nss3/sslerr.h
  498. %{_includedir}/nss3/sslexp.h
  499. %{_includedir}/nss3/sslproto.h
  500. %{_includedir}/nss3/sslt.h
  501. %{_includedir}/nss3/utilrename.h
  502. %{_includedir}/nss3/utilmodt.h
  503. %{_includedir}/nss3/utilpars.h
  504. %{_includedir}/nss3/utilparst.h
  505. %files pkcs11-devel
  506. %defattr(-, root, root)
  507. %{_includedir}/nss3/nssbase.h
  508. %{_includedir}/nss3/nssbaset.h
  509. %{_includedir}/nss3/nssckepv.h
  510. %{_includedir}/nss3/nssckft.h
  511. %{_includedir}/nss3/nssckfw.h
  512. %{_includedir}/nss3/nssckfwc.h
  513. %{_includedir}/nss3/nssckfwt.h
  514. %{_includedir}/nss3/nssckg.h
  515. %{_includedir}/nss3/nssckmdt.h
  516. %{_includedir}/nss3/nssckt.h
  517. %{_includedir}/nss3/templates/nssck.api
  518. %{_libdir}/libnssb.a
  519. %{_libdir}/libnssckfw.a
  520. ## to build compat32 for x86_64 architecture support
  521. %if %{build_compat32}
  522. %files -n compat32-%{name}
  523. %defattr(-,root,root)
  524. %{_libdir}/*.so
  525. %ghost %{_libdir}/libsoftokn3.chk
  526. %ghost %{_libdir}/libfreebl3.chk
  527. %ghost %{_libdir}/libfreeblpriv3.chk
  528. %ghost %{_libdir}/libnssdbm3.chk
  529. %{unsupported_tools_directory}/shlibsign
  530. %endif
  531. %changelog
  532. * Mon Oct 09 2017 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 3.33-1
  533. - update to 3.33.
  534. * Mon Jun 20 2016 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 3.21.1-3
  535. - added libfreebl.a.
  536. * Mon Jun 20 2016 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 3.21.1-2
  537. - enabled softokn and freebl.
  538. - dropped Patch47 and Patch49.
  539. * Tue May 10 2016 Yoji TOYODA <bsyamato@sea.plala.or.jp> 3.21.1-1
  540. - update to 3.21.1
  541. - import patches from centos package
  542. * Thu Jun 12 2014 Daisuke SUZUKI <daisuke@vinelinux.org> 3.16.1-1
  543. - update to 3.16.1
  544. * Thu Apr 04 2013 Daisuke SUZUKI <daisuke@linux.or.jp> 3.14.3-1
  545. - update to 3.14.3
  546. - import patches from fedora package
  547. * Wed Jan 09 2013 Daisuke SUZUKI <daisuke@linux.or.jp> 3.14.1-1
  548. - update to 3.14.1
  549. * Sat Sep 15 2012 Yoji TOYODA <bsyamato@sea.plala.or.jp> 3.13.6-2
  550. - add Source101 (nss-util.pc.in)
  551. - add Source102 (nss-util-config.in)
  552. * Mon Sep 03 2012 Daisuke SUZUKI <daisuke@linux.or.jp> 3.13.6-1
  553. - new upstream release
  554. * Sun Mar 18 2012 Yoji TOYODA <bsyamato@sea.plala.or.jp> 3.13.3-1
  555. - new upstream release
  556. * Thu Dec 22 2011 Daisuke SUZUKI <daisuke@linux.or.jp> 3.13.1-2
  557. - fix nss.pc
  558. * Wed Dec 21 2011 Daisuke SUZUKI <daisuke@linux.or.jp> 3.13.1-1
  559. - new upstream release
  560. * Fri Sep 02 2011 Daisuke SUZUKI <daisuke@linux.or.jp> 3.12.11-1
  561. - new upstram release
  562. * Wed Jun 01 2011 Daisuke SUZUKI <daisuke@linux.or.jp> 3.12.10-1
  563. - update to 3.12.10
  564. * Tue Mar 29 2011 Daisuke SUZUKI <daisuke@linux.or.jp> 3.12.9-1
  565. - update to 3.12.9.with.ckbi.1.82
  566. - update nss-pem source
  567. - define NSS_USE_SYSTEM_SQLITE, remove unneeded Patch2
  568. * Thu Sep 23 2010 Yoji TOYODA <bsyamato@sea.plala.or.jp> 3.12.6-2
  569. - rebuild with rpm-4.8.1 for pkg-config file
  570. * Wed Apr 7 2010 MATSUBAYASHI Kohji <shaolin@vinelinux.org> 3.12.6-1
  571. - new upstream release
  572. - update nss-pem Source12 to 20091210 (from 3.12.6-2.fc14)
  573. * Sat Jan 23 2010 NAKAMURA Kenta <kenta@vinelinux.org> 3.12.5-2
  574. - built with FREEBL_NO_DEPEND environmental variable to include nsslowhash.h
  575. * Sat Jan 09 2010 Daisuke SUZUKI <daisuke@linux.or.jp> 3.12.5-1
  576. - new upstream release
  577. * Mon Jul 06 2009 Daisuke SUZUKI <daisuke@linux.or.jp> 3.12.3-4
  578. - rebuild to fix the package built with broken environment.
  579. * Sun Jul 05 2009 Munehiro Yamamoto <munepi@cg8.so-net.ne.jp> 3.12.3-3
  580. - fixed %%files for compat32
  581. * Sat Jul 04 2009 Munehiro Yamamoto <munepi@cg8.so-net.ne.jp> 3.12.3-2
  582. - added compat32 subpackages
  583. * Wed Apr 22 2009 Daisuke SUZUKI <daisuke@linux.or.jp> 3.12.3-1
  584. - new upstream release
  585. * Wed Jul 02 2008 Daisuke SUZUKI <daisuke@linux.or.jp> 3.12-1
  586. - new upstream release
  587. * Fri May 18 2007 Daisuke SUZUKI <daisuke@linux.or.jp> 3.11.4-0vl1
  588. - initial build for Vine Linux
  589. * Fri Mar 02 2007 Kai Engert <kengert@redhat.com> - 3.11.5-2
  590. - Fix rhbz#230545, failure to enable FIPS mode
  591. - Fix rhbz#220542, make NSS more tolerant of resets when in the
  592. middle of prompting for a user password.
  593. * Sat Feb 24 2007 Kai Engert <kengert@redhat.com> - 3.11.5-1
  594. - Update to 3.11.5
  595. - This update fixes two security vulnerabilities with SSL 2
  596. - Do not use -rpath link option
  597. - Added several unsupported tools to tools package
  598. * Tue Jan 9 2007 Bob Relyea <rrelyea@redhat.com> - 3.11.4-4
  599. - disable ECC, cleanout dead code
  600. * Tue Nov 28 2006 Kai Engert <kengert@redhat.com> - 3.11.4-1
  601. - Update to 3.11.4
  602. * Thu Sep 14 2006 Kai Engert <kengert@redhat.com> - 3.11.3-2
  603. - Revert the attempt to require latest NSPR, as it is not yet available
  604. in the build infrastructure.
  605. * Thu Sep 14 2006 Kai Engert <kengert@redhat.com> - 3.11.3-1
  606. - Update to 3.11.3
  607. * Thu Aug 03 2006 Kai Engert <kengert@redhat.com> - 3.11.2-2
  608. - Add /etc/pki/nssdb
  609. * Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 3.11.2-1.1
  610. - rebuild
  611. * Fri Jun 30 2006 Kai Engert <kengert@redhat.com> - 3.11.2-1
  612. - Update to 3.11.2
  613. - Enable executable bit on shared libs, also fixes debug info.
  614. * Wed Jun 14 2006 Kai Engert <kengert@redhat.com> - 3.11.1-2
  615. - Enable Elliptic Curve Cryptography (ECC)
  616. * Fri May 26 2006 Kai Engert <kengert@redhat.com> - 3.11.1-1
  617. - Update to 3.11.1
  618. - Include upstream patch to limit curves
  619. * Wed Feb 15 2006 Kai Engert <kengert@redhat.com> - 3.11-4
  620. - add --noexecstack when compiling assembler on x86_64
  621. * Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 3.11-3.2
  622. - bump again for double-long bug on ppc(64)
  623. * Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 3.11-3.1
  624. - rebuilt for new gcc4.1 snapshot and glibc changes
  625. * Thu Jan 19 2006 Ray Strode <rstrode@redhat.com> 3.11-3
  626. - rebuild
  627. * Fri Dec 16 2005 Christopher Aillon <caillon@redhat.com> 3.11-2
  628. - Update file list for the devel packages
  629. * Thu Dec 15 2005 Christopher Aillon <caillon@redhat.com> 3.11-1
  630. - Update to 3.11
  631. * Thu Dec 15 2005 Christopher Aillon <caillon@redhat.com> 3.11-0.cvs.2
  632. - Add patch to allow building on ppc*
  633. - Update the pkgconfig file to Require nspr
  634. * Thu Dec 15 2005 Christopher Aillon <caillon@redhat.com> 3.11-0.cvs
  635. - Initial import into Fedora Core, based on a CVS snapshot of
  636. the NSS_3_11_RTM tag
  637. - Fix up the pkcs11-devel subpackage to contain the proper headers
  638. - Build with RPM_OPT_FLAGS
  639. - No need to have rpath of /usr/lib in the pc file
  640. * Thu Dec 15 2005 Kai Engert <kengert@redhat.com>
  641. - Adressed review comments by Wan-Teh Chang, Bob Relyea,
  642. Christopher Aillon.
  643. * Sat Jul 9 2005 Rob Crittenden <rcritten@redhat.com> 3.10-1
  644. - Initial build