nss-vl.spec 26 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791
  1. %define build_compat32 %{?_with_compat32:1}%{!?_with_compat32:0}
  2. %define nspr_version 4.22
  3. %define pem_version 1.0.5
  4. %define unsupported_tools_directory %{_libdir}/nss/unsupported-tools
  5. %global allTools "certutil cmsutil crlutil derdump modutil pk12util pp signtool signver ssltap vfychain vfyserv"
  6. # Produce .chk files for the final stripped binaries
  7. #
  8. # NOTE: The LD_LIBRARY_PATH line guarantees shlibsign links
  9. # against the freebl that we just built. This is necessary
  10. # because the signing algorithm changed on 3.14 to DSA2 with SHA256
  11. # whereas we previously signed with DSA and SHA1. We must Keep this line
  12. # until all mock platforms have been updated.
  13. # After %%{__os_install_post} we would add
  14. # export LD_LIBRARY_PATH=$RPM_BUILD_ROOT/%%{_libdir}
  15. %define __spec_install_post \
  16. %{?__debug_package:%{__debug_install_post}} \
  17. %{__arch_install_post} \
  18. %{__os_install_post} \
  19. $RPM_BUILD_ROOT/%{unsupported_tools_directory}/shlibsign -i $RPM_BUILD_ROOT/%{_libdir}/libsoftokn3.so \
  20. $RPM_BUILD_ROOT/%{unsupported_tools_directory}/shlibsign -i $RPM_BUILD_ROOT/%{_libdir}/libfreeblpriv3.so \
  21. $RPM_BUILD_ROOT/%{unsupported_tools_directory}/shlibsign -i $RPM_BUILD_ROOT/%{_libdir}/libfreebl3.so \
  22. $RPM_BUILD_ROOT/%{unsupported_tools_directory}/shlibsign -i $RPM_BUILD_ROOT/%{_libdir}/libnssdbm3.so \
  23. %{nil}
  24. Summary: Network Security Services
  25. Name: nss
  26. Version: 3.46
  27. Release: 1%{?_dist_release}
  28. License: MPLv1.1 or GPLv2+ or LGPLv2+
  29. URL: http://www.mozilla.org/projects/security/pki/nss/
  30. Group: System Environment/Libraries
  31. Vendor: Project Vine
  32. Distribution: Vine Linux
  33. %define altver %(echo %{version} | sed -e 's/\\./_/')
  34. Source0: https://archive.mozilla.org/pub/security/nss/releases/NSS_%{altver}_RTM/src/%{name}-%{version}.tar.gz
  35. Source1: nss.pc.in
  36. Source2: nss-config.in
  37. Source3: blank-cert8.db
  38. Source4: blank-key3.db
  39. Source5: blank-secmod.db
  40. Source6: blank-cert9.db
  41. Source7: blank-key4.db
  42. Source8: system-pkcs11.txt
  43. Source9: setup-nsssysinit.sh
  44. Source20: nss-config.xml
  45. Source21: setup-nsssysinit.xml
  46. Source22: pkcs11.txt.xml
  47. Source23: cert8.db.xml
  48. Source24: cert9.db.xml
  49. Source25: key3.db.xml
  50. Source26: key4.db.xml
  51. Source27: secmod.db.xml
  52. Source101: nss-util.pc.in
  53. Source102: nss-util-config.in
  54. Source103: nss-softokn.pc.in
  55. Source104: nss-softokn-config.in
  56. Source1000: https://github.com/kdudka/nss-pem/releases/download/nss-pem-%{pem_version}/nss-pem-%{pem_version}.tar.xz
  57. Source1001: pem-makefile.tar.gz
  58. Patch2: add-relro-linker-option.patch
  59. Patch3: renegotiate-transitional.patch
  60. # Upstream: https://bugzilla.mozilla.org/show_bug.cgi?id=617723
  61. Patch16: nss-539183.patch
  62. # Fedora / RHEL-only patch, the templates directory was originally introduced to support mod_revocator
  63. Patch47: utilwrap-include-templates.patch
  64. # TODO remove when we switch to building nss without softoken
  65. Patch49: nss-skip-bltest-and-fipstest.patch
  66. # This patch uses the GCC -iquote option documented at
  67. # http://gcc.gnu.org/onlinedocs/gcc/Directory-Options.html#Directory-Options
  68. # to give the in-tree headers a higher priority over the system headers,
  69. # when they are included through the quote form (#include "file.h").
  70. #
  71. # This ensures a build even when system headers are older. Such is the
  72. # case when starting an update with API changes or even private export
  73. # changes.
  74. #
  75. # Once the buildroot aha been bootstrapped the patch may be removed
  76. # but it doesn't hurt to keep it.
  77. Patch50: iquote.patch
  78. # Local patch for TLS_ECDHE_{ECDSA|RSA}_WITH_3DES_EDE_CBC_SHA ciphers
  79. Patch58: rhbz1185708-enable-ecc-3des-ciphers-by-default.patch
  80. Patch62: nss-skip-util-gtest.patch
  81. Patch1000: nss-enable-pem.patch
  82. BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
  83. BuildRequires: nspr-devel >= %{nspr_version}
  84. BuildRequires: sqlite3-devel
  85. BuildRequires: zlib-devel
  86. BuildRequires: pkgconfig
  87. BuildRequires: gawk
  88. BuildRequires: psmisc
  89. BuildRequires: perl
  90. Provides: mozilla-nss
  91. Obsoletes: mozilla-nss
  92. Requires: nspr >= %{nspr_version}
  93. %description
  94. Network Security Services (NSS) is a set of libraries designed to
  95. support cross-platform development of security-enabled client and
  96. server applications. Applications built with NSS can support SSL v2
  97. and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509
  98. v3 certificates, and other security standards.
  99. %package tools
  100. Summary: Tools for the Network Security Services
  101. Group: System Environment/Base
  102. Requires: nss = %{version}-%{release}
  103. %description tools
  104. Network Security Services (NSS) is a set of libraries designed to
  105. support cross-platform development of security-enabled client and
  106. server applications. Applications built with NSS can support SSL v2
  107. and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509
  108. v3 certificates, and other security standards.
  109. Install the nss-tools package if you need command-line tools to
  110. manipulate the NSS certificate and key database.
  111. %package devel
  112. Summary: Development libraries for Network Security Services
  113. Group: Development/Libraries
  114. Requires: nss = %{version}-%{release}
  115. Requires: nspr-devel >= %{nspr_version}
  116. Provides: mozilla-nss-devel
  117. Obsoletes: mozilla-nss-devel
  118. %description devel
  119. Header and Library files for doing development with Network Security Services.
  120. %package pkcs11-devel
  121. Summary: Development libraries for PKCS #11 (Cryptoki) using NSS
  122. Group: Development/Libraries
  123. Requires: nss-devel = %{version}-%{release}
  124. %description pkcs11-devel
  125. Library files for developing PKCS #11 modules using basic NSS
  126. low level services.
  127. ## to build compat32 for x86_64 architecture support
  128. %package -n compat32-%{name}
  129. Summary: Network Security Services
  130. Group: System Environment/Libraries
  131. %description -n compat32-%{name}
  132. Network Security Services (NSS) is a set of libraries designed to
  133. support cross-platform development of security-enabled client and
  134. server applications. Applications built with NSS can support SSL v2
  135. and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509
  136. v3 certificates, and other security standards.
  137. %prep
  138. %setup -q
  139. %setup -q -T -D -n %{name}-%{version} -a 1000
  140. %{__mv} nss-pem-%{pem_version}/src nss/lib/ckfw/pem
  141. pushd nss/lib/ckfw/pem/
  142. tar xvf %{SOURCE1001}
  143. perl -pi -e 's/^#define USE_UTIL_DIRECTLY.*$//' ckpem.h
  144. popd
  145. %patch2 -p0 -b .relro
  146. %patch3 -p0 -b .transitional
  147. %patch16 -p0 -b .539183
  148. %patch50 -p0 -b .iquote
  149. pushd nss
  150. %patch62 -p1 -b .skip_util_gtest
  151. popd
  152. %patch1000 -p0 -b .libpem
  153. pemNeedsFromSoftoken="lowkeyi lowkeyti softoken softoknt"
  154. for file in ${pemNeedsFromSoftoken}; do
  155. %{__cp} ./nss/lib/softoken/${file}.h ./nss/lib/ckfw/pem/
  156. done
  157. %{__cp} ./nss/lib/softoken/lowkeyi.h ./nss/cmd/rsaperf
  158. %{__cp} ./nss/lib/softoken/lowkeyti.h ./nss/cmd/rsaperf
  159. pushd nss/tests/ssl
  160. # Create versions of sslcov.txt and sslstress.txt that disable tests
  161. # for SSL2 and EXPORT ciphers.
  162. cat sslcov.txt| sed -r "s/^([^#].*EXPORT|^[^#].*SSL2)/#disabled \1/" > sslcov.noSSL2orExport.txt
  163. cat sslstress.txt| sed -r "s/^([^#].*EXPORT|^[^#].*SSL2)/#disabled \1/" > sslstress.noSSL2orExport.txt
  164. popd
  165. %build
  166. export NSS_NO_SSL2=1
  167. NSS_NO_PKCS11_BYPASS=1
  168. export NSS_NO_PKCS11_BYPASS
  169. # partial RELRO support as a security enhancement
  170. #LDFLAGS+=-Wl,-z,relro
  171. #export LDFLAGS
  172. FREEBL_NO_DEPEND=1
  173. export FREEBL_NO_DEPEND
  174. # Must export FREEBL_LOWHASH=1 for nsslowhash.h so that it gets
  175. # copied to dist and the rpm install phase can find it
  176. # This due of the upstream changes to fix
  177. # https://bugzilla.mozilla.org/show_bug.cgi?id=717906
  178. FREEBL_LOWHASH=1
  179. export FREEBL_LOWHASH
  180. # Enable compiler optimizations and disable debugging code
  181. BUILD_OPT=1
  182. export BUILD_OPT
  183. # Generate symbolic info for debuggers
  184. XCFLAGS=$RPM_OPT_FLAGS
  185. export XCFLAGS
  186. PKG_CONFIG_ALLOW_SYSTEM_LIBS=1
  187. PKG_CONFIG_ALLOW_SYSTEM_CFLAGS=1
  188. export PKG_CONFIG_ALLOW_SYSTEM_LIBS
  189. export PKG_CONFIG_ALLOW_SYSTEM_CFLAGS
  190. NSPR_INCLUDE_DIR=`/usr/bin/pkg-config --cflags-only-I nspr | sed 's/-I//'`
  191. NSPR_LIB_DIR=`/usr/bin/pkg-config --libs-only-L nspr | sed 's/-L//'`
  192. export NSPR_INCLUDE_DIR
  193. export NSPR_LIB_DIR
  194. #export FREEBL_INCLUDE_DIR=`/usr/bin/pkg-config --cflags-only-I nss-softokn | sed 's/-I//'`
  195. #export FREEBL_LIB_DIR=%{_libdir}
  196. export USE_SYSTEM_FREEBL=0
  197. NSS_USE_SYSTEM_SQLITE=1
  198. export NSS_USE_SYSTEM_SQLITE
  199. export NSS_ALLOW_SSLKEYLOGFILE=1
  200. export USE_SYSTEM_ZLIB=1
  201. export ZLIB_LIBS=%{_libdir}
  202. %ifarch x86_64 ppc64 ia64 s390x
  203. USE_64=1
  204. export USE_64
  205. %endif
  206. # uncomment if the iquote patch is activated
  207. export IN_TREE_FREEBL_HEADERS_FIRST=1
  208. #export NSS_BLTEST_NOT_AVAILABLE=1
  209. #
  210. #%{__make} -C ./nss/coreconf
  211. #%{__make} -C ./nss/lib/dbm
  212. %{__make} -C ./nss
  213. %install
  214. # There is no make install target so we'll do it ourselves.
  215. %{__mkdir_p} $RPM_BUILD_ROOT/%{_includedir}/nss3
  216. %{__mkdir_p} $RPM_BUILD_ROOT/%{_includedir}/nss3/templates
  217. %{__mkdir_p} $RPM_BUILD_ROOT/%{_bindir}
  218. %{__mkdir_p} $RPM_BUILD_ROOT/%{_libdir}
  219. %{__mkdir_p} $RPM_BUILD_ROOT/%{unsupported_tools_directory}
  220. %{__mkdir_p} $RPM_BUILD_ROOT/%{_libdir}/pkgconfig
  221. # Copy the binary libraries we want
  222. for file in libsoftokn3.so libfreebl3.so libfreeblpriv3.so \
  223. libnss3.so libnssutil3.so \
  224. libssl3.so libsmime3.so libnssckbi.so \
  225. libnsspem.so libnssdbm3.so
  226. do
  227. %{__install} -m 755 dist/*.OBJ/lib/$file $RPM_BUILD_ROOT/%{_libdir}
  228. done
  229. # Install the empty NSS db files
  230. # Legacy db
  231. %{__mkdir_p} $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb
  232. %{__install} -m 644 %{SOURCE3} $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb/cert8.db
  233. %{__install} -m 644 %{SOURCE4} $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb/key3.db
  234. %{__install} -m 644 %{SOURCE5} $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb/secmod.db
  235. # Shared db
  236. %{__install} -p -m 644 %{SOURCE6} $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb/cert9.db
  237. %{__install} -p -m 644 %{SOURCE7} $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb/key4.db
  238. %{__install} -p -m 644 %{SOURCE8} $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb/pkcs11.txt
  239. # Copy the development libraries we want
  240. for file in libcrmf.a libnssb.a libnssckfw.a
  241. do
  242. %{__install} -m 644 dist/*.OBJ/lib/$file $RPM_BUILD_ROOT/%{_libdir}
  243. done
  244. # Copy the binaries we want
  245. for file in certutil cmsutil crlutil modutil pk12util signtool signver ssltap
  246. do
  247. %{__install} -m 755 dist/*.OBJ/bin/$file $RPM_BUILD_ROOT/%{_bindir}
  248. done
  249. # Copy the binaries we ship as unsupported
  250. for file in atob btoa derdump ocspclnt pp selfserv shlibsign strsclnt symkeyutil tstclnt vfyserv vfychain
  251. do
  252. %{__install} -m 755 dist/*.OBJ/bin/$file $RPM_BUILD_ROOT/%{unsupported_tools_directory}
  253. done
  254. # Copy the include files
  255. for file in dist/public/nss/*.h
  256. do
  257. %{__install} -m 644 $file $RPM_BUILD_ROOT/%{_includedir}/nss3
  258. done
  259. # Copy the template files we want
  260. for file in nss/lib/ckfw/nssck.api
  261. do
  262. %{__install} -p -m 644 $file $RPM_BUILD_ROOT/%{_includedir}/nss3/templates
  263. done
  264. # Copy some freebl include files we also want
  265. for file in blapi.h alghmac.h
  266. do
  267. %{__install} -p -m 644 dist/private/nss/$file $RPM_BUILD_ROOT/%{_includedir}/nss3
  268. done
  269. # Copy the static freebl library
  270. for file in libfreebl.a
  271. do
  272. %{__install} -p -m 644 dist/*.OBJ/lib/$file $RPM_BUILD_ROOT/%{_libdir}
  273. done
  274. # Set up our package file
  275. %{__mkdir_p} $RPM_BUILD_ROOT/%{_libdir}/pkgconfig
  276. %{__cat} %{SOURCE1} | sed -e "s,%%libdir%%,%{_libdir},g" \
  277. -e "s,%%prefix%%,%{_prefix},g" \
  278. -e "s,%%exec_prefix%%,%{_prefix},g" \
  279. -e "s,%%includedir%%,%{_includedir}/nss3,g" \
  280. -e "s,%%NSPR_VERSION%%,%{nspr_version},g" \
  281. -e "s,%%NSS_VERSION%%,%{version},g" \
  282. -e "s,%%NSSUTIL_VERSION%%,%{version},g" > \
  283. $RPM_BUILD_ROOT/%{_libdir}/pkgconfig/nss.pc
  284. NSS_VMAJOR=`cat nss/lib/nss/nss.h | grep "#define.*NSS_VMAJOR" | awk '{print $3}'`
  285. NSS_VMINOR=`cat nss/lib/nss/nss.h | grep "#define.*NSS_VMINOR" | awk '{print $3}'`
  286. NSS_VPATCH=`cat nss/lib/nss/nss.h | grep "#define.*NSS_VPATCH" | awk '{print $3}'`
  287. export NSS_VMAJOR
  288. export NSS_VMINOR
  289. export NSS_VPATCH
  290. %{__mkdir_p} $RPM_BUILD_ROOT/%{_bindir}
  291. %{__cat} %{SOURCE2} | sed -e "s,@libdir@,%{_libdir},g" \
  292. -e "s,@prefix@,%{_prefix},g" \
  293. -e "s,@exec_prefix@,%{_prefix},g" \
  294. -e "s,@includedir@,%{_includedir}/nss3,g" \
  295. -e "s,@MOD_MAJOR_VERSION@,$NSS_VMAJOR,g" \
  296. -e "s,@MOD_MINOR_VERSION@,$NSS_VMINOR,g" \
  297. -e "s,@MOD_PATCH_VERSION@,$NSS_VPATCH,g" \
  298. > $RPM_BUILD_ROOT/%{_bindir}/nss-config
  299. chmod 755 $RPM_BUILD_ROOT/%{_bindir}/nss-config
  300. %{__cat} %{SOURCE101} | sed -e "s,%%libdir%%,%{_libdir},g" \
  301. -e "s,%%prefix%%,%{_prefix},g" \
  302. -e "s,%%exec_prefix%%,%{_prefix},g" \
  303. -e "s,%%includedir%%,%{_includedir}/nss3,g" \
  304. -e "s,%%NSPR_VERSION%%,%{nspr_version},g" \
  305. -e "s,%%NSSUTIL_VERSION%%,%{version},g" > \
  306. $RPM_BUILD_ROOT/%{_libdir}/pkgconfig/nss-util.pc
  307. NSSUTIL_VMAJOR=`cat nss/lib/util/nssutil.h | grep "#define.*NSSUTIL_VMAJOR" | awk '{print $3}'`
  308. NSSUTIL_VMINOR=`cat nss/lib/util/nssutil.h | grep "#define.*NSSUTIL_VMINOR" | awk '{print $3}'`
  309. NSSUTIL_VPATCH=`cat nss/lib/util/nssutil.h | grep "#define.*NSSUTIL_VPATCH" | awk '{print $3}'`
  310. export NSSUTIL_VMAJOR
  311. export NSSUTIL_VMINOR
  312. export NSSUTIL_VPATCH
  313. %{__cat} %{SOURCE102} | sed -e "s,@libdir@,%{_libdir},g" \
  314. -e "s,@prefix@,%{_prefix},g" \
  315. -e "s,@exec_prefix@,%{_prefix},g" \
  316. -e "s,@includedir@,%{_includedir}/nss3,g" \
  317. -e "s,@MOD_MAJOR_VERSION@,$NSSUTIL_VMAJOR,g" \
  318. -e "s,@MOD_MINOR_VERSION@,$NSSUTIL_VMINOR,g" \
  319. -e "s,@MOD_PATCH_VERSION@,$NSSUTIL_VPATCH,g" \
  320. > $RPM_BUILD_ROOT/%{_bindir}/nss-util-config
  321. chmod 755 $RPM_BUILD_ROOT/%{_bindir}/nss-util-config
  322. %{__cat} %{SOURCE103} | sed -e "s,%%libdir%%,%{_libdir},g" \
  323. -e "s,%%prefix%%,%{_prefix},g" \
  324. -e "s,%%exec_prefix%%,%{_prefix},g" \
  325. -e "s,%%includedir%%,%{_includedir}/nss3,g" \
  326. -e "s,%%NSPR_VERSION%%,%{nspr_version},g" \
  327. -e "s,%%NSSUTIL_VERSION%%,%{version},g" \
  328. -e "s,%%SOFTOKEN_VERSION%%,%{version},g" > \
  329. $RPM_BUILD_ROOT/%{_libdir}/pkgconfig/nss-softokn.pc
  330. SOFTOKEN_VMAJOR=`cat nss/lib/softoken/softkver.h | grep "#define.*SOFTOKEN_VMAJOR" | awk '{print $3}'`
  331. SOFTOKEN_VMINOR=`cat nss/lib/softoken/softkver.h | grep "#define.*SOFTOKEN_VMINOR" | awk '{print $3}'`
  332. SOFTOKEN_VPATCH=`cat nss/lib/softoken/softkver.h | grep "#define.*SOFTOKEN_VPATCH" | awk '{print $3}'`
  333. export SOFTOKEN_VMAJOR
  334. export SOFTOKEN_VMINOR
  335. export SOFTOKEN_VPATCH
  336. %{__cat} %{SOURCE104} | sed -e "s,@libdir@,%{_libdir},g" \
  337. -e "s,@prefix@,%{_prefix},g" \
  338. -e "s,@exec_prefix@,%{_prefix},g" \
  339. -e "s,@includedir@,%{_includedir}/nss3,g" \
  340. -e "s,@MOD_MAJOR_VERSION@,$SOFTOKEN_VMAJOR,g" \
  341. -e "s,@MOD_MINOR_VERSION@,$SOFTOKEN_VMINOR,g" \
  342. -e "s,@MOD_PATCH_VERSION@,$SOFTOKEN_VPATCH,g" \
  343. > $RPM_BUILD_ROOT/%{_bindir}/nss-softokn-config
  344. chmod 755 $RPM_BUILD_ROOT/%{_bindir}/nss-softokn-config
  345. %clean
  346. %{__rm} -rf $RPM_BUILD_ROOT
  347. %post
  348. /sbin/ldconfig >/dev/null 2>/dev/null
  349. %postun
  350. /sbin/ldconfig >/dev/null 2>/dev/null
  351. %files
  352. %defattr(-,root,root)
  353. %{_libdir}/libnss3.so
  354. %{_libdir}/libnssutil3.so
  355. %{_libdir}/libnssdbm3.so
  356. %{_libdir}/libssl3.so
  357. %{_libdir}/libsmime3.so
  358. %{_libdir}/libsoftokn3.so
  359. %{_libdir}/libnssckbi.so
  360. %{_libdir}/libnsspem.so
  361. %{_libdir}/libfreebl3.so
  362. %{_libdir}/libfreeblpriv3.so
  363. %{unsupported_tools_directory}/shlibsign
  364. %{_libdir}/libfreebl3.chk
  365. %{_libdir}/libfreeblpriv3.chk
  366. %{_libdir}/libnssdbm3.chk
  367. %{_libdir}/libsoftokn3.chk
  368. %dir %{_sysconfdir}/pki/nssdb
  369. %config(noreplace) %{_sysconfdir}/pki/nssdb/cert8.db
  370. %config(noreplace) %{_sysconfdir}/pki/nssdb/key3.db
  371. %config(noreplace) %{_sysconfdir}/pki/nssdb/secmod.db
  372. %config(noreplace) %verify(not md5 size mtime) %{_sysconfdir}/pki/nssdb/cert9.db
  373. %config(noreplace) %verify(not md5 size mtime) %{_sysconfdir}/pki/nssdb/key4.db
  374. %config(noreplace) %verify(not md5 size mtime) %{_sysconfdir}/pki/nssdb/pkcs11.txt
  375. %files tools
  376. %defattr(-,root,root)
  377. %{_bindir}/certutil
  378. %{_bindir}/cmsutil
  379. %{_bindir}/crlutil
  380. %{_bindir}/modutil
  381. %{_bindir}/pk12util
  382. %{_bindir}/signtool
  383. %{_bindir}/signver
  384. %{_bindir}/ssltap
  385. %{unsupported_tools_directory}/atob
  386. %{unsupported_tools_directory}/btoa
  387. %{unsupported_tools_directory}/derdump
  388. %{unsupported_tools_directory}/ocspclnt
  389. %{unsupported_tools_directory}/pp
  390. %{unsupported_tools_directory}/selfserv
  391. %{unsupported_tools_directory}/strsclnt
  392. %{unsupported_tools_directory}/symkeyutil
  393. %{unsupported_tools_directory}/tstclnt
  394. %{unsupported_tools_directory}/vfyserv
  395. %{unsupported_tools_directory}/vfychain
  396. %files devel
  397. %defattr(-,root,root)
  398. %{_libdir}/libcrmf.a
  399. %{_libdir}/libfreebl.a
  400. %{_libdir}/pkgconfig/nss.pc
  401. %{_libdir}/pkgconfig/nss-softokn.pc
  402. %{_libdir}/pkgconfig/nss-util.pc
  403. %{_bindir}/nss-config
  404. %{_bindir}/nss-softokn-config
  405. %{_bindir}/nss-util-config
  406. %dir %{_includedir}/nss3
  407. %{_includedir}/nss3/alghmac.h
  408. %{_includedir}/nss3/base64.h
  409. %{_includedir}/nss3/blapi.h
  410. %{_includedir}/nss3/blapit.h
  411. %{_includedir}/nss3/cert.h
  412. %{_includedir}/nss3/certdb.h
  413. %{_includedir}/nss3/certt.h
  414. %{_includedir}/nss3/ciferfam.h
  415. %{_includedir}/nss3/cmmf.h
  416. %{_includedir}/nss3/cmmft.h
  417. %{_includedir}/nss3/cms.h
  418. %{_includedir}/nss3/cmsreclist.h
  419. %{_includedir}/nss3/cmst.h
  420. %{_includedir}/nss3/crmf.h
  421. %{_includedir}/nss3/crmft.h
  422. %{_includedir}/nss3/cryptohi.h
  423. %{_includedir}/nss3/cryptoht.h
  424. %{_includedir}/nss3/eccutil.h
  425. %{_includedir}/nss3/ecl-exp.h
  426. %{_includedir}/nss3/hasht.h
  427. %{_includedir}/nss3/jar-ds.h
  428. %{_includedir}/nss3/jar.h
  429. %{_includedir}/nss3/jarfile.h
  430. %{_includedir}/nss3/key.h
  431. %{_includedir}/nss3/keyhi.h
  432. %{_includedir}/nss3/keyt.h
  433. %{_includedir}/nss3/keythi.h
  434. %{_includedir}/nss3/lowkeyi.h
  435. %{_includedir}/nss3/lowkeyti.h
  436. %{_includedir}/nss3/nss.h
  437. %{_includedir}/nss3/nssb64.h
  438. %{_includedir}/nss3/nssb64t.h
  439. %{_includedir}/nss3/nssckbi.h
  440. %{_includedir}/nss3/nssilckt.h
  441. %{_includedir}/nss3/nssilock.h
  442. %{_includedir}/nss3/nsslocks.h
  443. %{_includedir}/nss3/nsslowhash.h
  444. %{_includedir}/nss3/nsspem.h
  445. %{_includedir}/nss3/nssrwlk.h
  446. %{_includedir}/nss3/nssrwlkt.h
  447. %{_includedir}/nss3/nssutil.h
  448. %{_includedir}/nss3/ocsp.h
  449. %{_includedir}/nss3/ocspt.h
  450. %{_includedir}/nss3/p12.h
  451. %{_includedir}/nss3/p12plcy.h
  452. %{_includedir}/nss3/p12t.h
  453. %{_includedir}/nss3/pk11func.h
  454. %{_includedir}/nss3/pk11pqg.h
  455. %{_includedir}/nss3/pk11priv.h
  456. %{_includedir}/nss3/pk11pub.h
  457. %{_includedir}/nss3/pk11sdr.h
  458. %{_includedir}/nss3/pkcs11.h
  459. %{_includedir}/nss3/pkcs11f.h
  460. %{_includedir}/nss3/pkcs11n.h
  461. %{_includedir}/nss3/pkcs11p.h
  462. %{_includedir}/nss3/pkcs11t.h
  463. %{_includedir}/nss3/pkcs11u.h
  464. %{_includedir}/nss3/pkcs11uri.h
  465. %{_includedir}/nss3/pkcs12.h
  466. %{_includedir}/nss3/pkcs12t.h
  467. %{_includedir}/nss3/pkcs7t.h
  468. %{_includedir}/nss3/pkcs1sig.h
  469. %{_includedir}/nss3/portreg.h
  470. %{_includedir}/nss3/preenc.h
  471. %{_includedir}/nss3/secasn1.h
  472. %{_includedir}/nss3/secasn1t.h
  473. %{_includedir}/nss3/seccomon.h
  474. %{_includedir}/nss3/secder.h
  475. %{_includedir}/nss3/secdert.h
  476. %{_includedir}/nss3/secdig.h
  477. %{_includedir}/nss3/secdigt.h
  478. %{_includedir}/nss3/secerr.h
  479. %{_includedir}/nss3/sechash.h
  480. %{_includedir}/nss3/secitem.h
  481. %{_includedir}/nss3/secmime.h
  482. %{_includedir}/nss3/secmod.h
  483. %{_includedir}/nss3/secmodt.h
  484. %{_includedir}/nss3/secoid.h
  485. %{_includedir}/nss3/secoidt.h
  486. %{_includedir}/nss3/secpkcs5.h
  487. %{_includedir}/nss3/secpkcs7.h
  488. %{_includedir}/nss3/secport.h
  489. %{_includedir}/nss3/shsign.h
  490. %{_includedir}/nss3/smime.h
  491. %{_includedir}/nss3/ssl.h
  492. %{_includedir}/nss3/sslerr.h
  493. %{_includedir}/nss3/sslexp.h
  494. %{_includedir}/nss3/sslproto.h
  495. %{_includedir}/nss3/sslt.h
  496. %{_includedir}/nss3/utilrename.h
  497. %{_includedir}/nss3/utilmodt.h
  498. %{_includedir}/nss3/utilpars.h
  499. %{_includedir}/nss3/utilparst.h
  500. %files pkcs11-devel
  501. %defattr(-, root, root)
  502. %{_includedir}/nss3/nssbase.h
  503. %{_includedir}/nss3/nssbaset.h
  504. %{_includedir}/nss3/nssckepv.h
  505. %{_includedir}/nss3/nssckft.h
  506. %{_includedir}/nss3/nssckfw.h
  507. %{_includedir}/nss3/nssckfwc.h
  508. %{_includedir}/nss3/nssckfwt.h
  509. %{_includedir}/nss3/nssckg.h
  510. %{_includedir}/nss3/nssckmdt.h
  511. %{_includedir}/nss3/nssckt.h
  512. %{_includedir}/nss3/templates/nssck.api
  513. %{_libdir}/libnssb.a
  514. %{_libdir}/libnssckfw.a
  515. ## to build compat32 for x86_64 architecture support
  516. %if %{build_compat32}
  517. %files -n compat32-%{name}
  518. %defattr(-,root,root)
  519. %{_libdir}/*.so
  520. %ghost %{_libdir}/libsoftokn3.chk
  521. %ghost %{_libdir}/libfreebl3.chk
  522. %ghost %{_libdir}/libfreeblpriv3.chk
  523. %ghost %{_libdir}/libnssdbm3.chk
  524. %{unsupported_tools_directory}/shlibsign
  525. %endif
  526. %changelog
  527. * Fri Sep 27 2019 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 3.46-1
  528. - update to 3.46.
  529. - updated nss-pem to 1.0.5.
  530. - dropped Patch1001: fixed in upstream?
  531. * Thu Nov 08 2018 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 3.40-1
  532. - update to 3.40.
  533. - dropped Patch40,59.
  534. - updated Patch3.
  535. - added Patch1001.
  536. * Mon Oct 09 2017 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 3.33-1
  537. - update to 3.33.
  538. * Mon Jun 20 2016 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 3.21.1-3
  539. - added libfreebl.a.
  540. * Mon Jun 20 2016 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 3.21.1-2
  541. - enabled softokn and freebl.
  542. - dropped Patch47 and Patch49.
  543. * Tue May 10 2016 Yoji TOYODA <bsyamato@sea.plala.or.jp> 3.21.1-1
  544. - update to 3.21.1
  545. - import patches from centos package
  546. * Thu Jun 12 2014 Daisuke SUZUKI <daisuke@vinelinux.org> 3.16.1-1
  547. - update to 3.16.1
  548. * Thu Apr 04 2013 Daisuke SUZUKI <daisuke@linux.or.jp> 3.14.3-1
  549. - update to 3.14.3
  550. - import patches from fedora package
  551. * Wed Jan 09 2013 Daisuke SUZUKI <daisuke@linux.or.jp> 3.14.1-1
  552. - update to 3.14.1
  553. * Sat Sep 15 2012 Yoji TOYODA <bsyamato@sea.plala.or.jp> 3.13.6-2
  554. - add Source101 (nss-util.pc.in)
  555. - add Source102 (nss-util-config.in)
  556. * Mon Sep 03 2012 Daisuke SUZUKI <daisuke@linux.or.jp> 3.13.6-1
  557. - new upstream release
  558. * Sun Mar 18 2012 Yoji TOYODA <bsyamato@sea.plala.or.jp> 3.13.3-1
  559. - new upstream release
  560. * Thu Dec 22 2011 Daisuke SUZUKI <daisuke@linux.or.jp> 3.13.1-2
  561. - fix nss.pc
  562. * Wed Dec 21 2011 Daisuke SUZUKI <daisuke@linux.or.jp> 3.13.1-1
  563. - new upstream release
  564. * Fri Sep 02 2011 Daisuke SUZUKI <daisuke@linux.or.jp> 3.12.11-1
  565. - new upstram release
  566. * Wed Jun 01 2011 Daisuke SUZUKI <daisuke@linux.or.jp> 3.12.10-1
  567. - update to 3.12.10
  568. * Tue Mar 29 2011 Daisuke SUZUKI <daisuke@linux.or.jp> 3.12.9-1
  569. - update to 3.12.9.with.ckbi.1.82
  570. - update nss-pem source
  571. - define NSS_USE_SYSTEM_SQLITE, remove unneeded Patch2
  572. * Thu Sep 23 2010 Yoji TOYODA <bsyamato@sea.plala.or.jp> 3.12.6-2
  573. - rebuild with rpm-4.8.1 for pkg-config file
  574. * Wed Apr 7 2010 MATSUBAYASHI Kohji <shaolin@vinelinux.org> 3.12.6-1
  575. - new upstream release
  576. - update nss-pem Source12 to 20091210 (from 3.12.6-2.fc14)
  577. * Sat Jan 23 2010 NAKAMURA Kenta <kenta@vinelinux.org> 3.12.5-2
  578. - built with FREEBL_NO_DEPEND environmental variable to include nsslowhash.h
  579. * Sat Jan 09 2010 Daisuke SUZUKI <daisuke@linux.or.jp> 3.12.5-1
  580. - new upstream release
  581. * Mon Jul 06 2009 Daisuke SUZUKI <daisuke@linux.or.jp> 3.12.3-4
  582. - rebuild to fix the package built with broken environment.
  583. * Sun Jul 05 2009 Munehiro Yamamoto <munepi@cg8.so-net.ne.jp> 3.12.3-3
  584. - fixed %%files for compat32
  585. * Sat Jul 04 2009 Munehiro Yamamoto <munepi@cg8.so-net.ne.jp> 3.12.3-2
  586. - added compat32 subpackages
  587. * Wed Apr 22 2009 Daisuke SUZUKI <daisuke@linux.or.jp> 3.12.3-1
  588. - new upstream release
  589. * Wed Jul 02 2008 Daisuke SUZUKI <daisuke@linux.or.jp> 3.12-1
  590. - new upstream release
  591. * Fri May 18 2007 Daisuke SUZUKI <daisuke@linux.or.jp> 3.11.4-0vl1
  592. - initial build for Vine Linux
  593. * Fri Mar 02 2007 Kai Engert <kengert@redhat.com> - 3.11.5-2
  594. - Fix rhbz#230545, failure to enable FIPS mode
  595. - Fix rhbz#220542, make NSS more tolerant of resets when in the
  596. middle of prompting for a user password.
  597. * Sat Feb 24 2007 Kai Engert <kengert@redhat.com> - 3.11.5-1
  598. - Update to 3.11.5
  599. - This update fixes two security vulnerabilities with SSL 2
  600. - Do not use -rpath link option
  601. - Added several unsupported tools to tools package
  602. * Tue Jan 9 2007 Bob Relyea <rrelyea@redhat.com> - 3.11.4-4
  603. - disable ECC, cleanout dead code
  604. * Tue Nov 28 2006 Kai Engert <kengert@redhat.com> - 3.11.4-1
  605. - Update to 3.11.4
  606. * Thu Sep 14 2006 Kai Engert <kengert@redhat.com> - 3.11.3-2
  607. - Revert the attempt to require latest NSPR, as it is not yet available
  608. in the build infrastructure.
  609. * Thu Sep 14 2006 Kai Engert <kengert@redhat.com> - 3.11.3-1
  610. - Update to 3.11.3
  611. * Thu Aug 03 2006 Kai Engert <kengert@redhat.com> - 3.11.2-2
  612. - Add /etc/pki/nssdb
  613. * Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 3.11.2-1.1
  614. - rebuild
  615. * Fri Jun 30 2006 Kai Engert <kengert@redhat.com> - 3.11.2-1
  616. - Update to 3.11.2
  617. - Enable executable bit on shared libs, also fixes debug info.
  618. * Wed Jun 14 2006 Kai Engert <kengert@redhat.com> - 3.11.1-2
  619. - Enable Elliptic Curve Cryptography (ECC)
  620. * Fri May 26 2006 Kai Engert <kengert@redhat.com> - 3.11.1-1
  621. - Update to 3.11.1
  622. - Include upstream patch to limit curves
  623. * Wed Feb 15 2006 Kai Engert <kengert@redhat.com> - 3.11-4
  624. - add --noexecstack when compiling assembler on x86_64
  625. * Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 3.11-3.2
  626. - bump again for double-long bug on ppc(64)
  627. * Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 3.11-3.1
  628. - rebuilt for new gcc4.1 snapshot and glibc changes
  629. * Thu Jan 19 2006 Ray Strode <rstrode@redhat.com> 3.11-3
  630. - rebuild
  631. * Fri Dec 16 2005 Christopher Aillon <caillon@redhat.com> 3.11-2
  632. - Update file list for the devel packages
  633. * Thu Dec 15 2005 Christopher Aillon <caillon@redhat.com> 3.11-1
  634. - Update to 3.11
  635. * Thu Dec 15 2005 Christopher Aillon <caillon@redhat.com> 3.11-0.cvs.2
  636. - Add patch to allow building on ppc*
  637. - Update the pkgconfig file to Require nspr
  638. * Thu Dec 15 2005 Christopher Aillon <caillon@redhat.com> 3.11-0.cvs
  639. - Initial import into Fedora Core, based on a CVS snapshot of
  640. the NSS_3_11_RTM tag
  641. - Fix up the pkcs11-devel subpackage to contain the proper headers
  642. - Build with RPM_OPT_FLAGS
  643. - No need to have rpath of /usr/lib in the pc file
  644. * Thu Dec 15 2005 Kai Engert <kengert@redhat.com>
  645. - Adressed review comments by Wan-Teh Chang, Bob Relyea,
  646. Christopher Aillon.
  647. * Sat Jul 9 2005 Rob Crittenden <rcritten@redhat.com> 3.10-1
  648. - Initial build