Sync from SUSE:SLFO:Main cepces revision b8c0dce7e8f074bca3083121d6cc2caf
This commit is contained in:
commit
fb4ce885ef
23
.gitattributes
vendored
Normal file
23
.gitattributes
vendored
Normal file
@ -0,0 +1,23 @@
|
||||
## Default LFS
|
||||
*.7z filter=lfs diff=lfs merge=lfs -text
|
||||
*.bsp filter=lfs diff=lfs merge=lfs -text
|
||||
*.bz2 filter=lfs diff=lfs merge=lfs -text
|
||||
*.gem filter=lfs diff=lfs merge=lfs -text
|
||||
*.gz filter=lfs diff=lfs merge=lfs -text
|
||||
*.jar filter=lfs diff=lfs merge=lfs -text
|
||||
*.lz filter=lfs diff=lfs merge=lfs -text
|
||||
*.lzma filter=lfs diff=lfs merge=lfs -text
|
||||
*.obscpio filter=lfs diff=lfs merge=lfs -text
|
||||
*.oxt filter=lfs diff=lfs merge=lfs -text
|
||||
*.pdf filter=lfs diff=lfs merge=lfs -text
|
||||
*.png filter=lfs diff=lfs merge=lfs -text
|
||||
*.rpm filter=lfs diff=lfs merge=lfs -text
|
||||
*.tbz filter=lfs diff=lfs merge=lfs -text
|
||||
*.tbz2 filter=lfs diff=lfs merge=lfs -text
|
||||
*.tgz filter=lfs diff=lfs merge=lfs -text
|
||||
*.ttf filter=lfs diff=lfs merge=lfs -text
|
||||
*.txz filter=lfs diff=lfs merge=lfs -text
|
||||
*.whl filter=lfs diff=lfs merge=lfs -text
|
||||
*.xz filter=lfs diff=lfs merge=lfs -text
|
||||
*.zip filter=lfs diff=lfs merge=lfs -text
|
||||
*.zst filter=lfs diff=lfs merge=lfs -text
|
29
_service
Normal file
29
_service
Normal file
@ -0,0 +1,29 @@
|
||||
<services>
|
||||
<service name="tar_scm" mode="disabled">
|
||||
<param name="url">https://github.com/openSUSE/cepces.git</param>
|
||||
<param name="scm">git</param>
|
||||
<param name="revision">master</param>
|
||||
<param name="versionformat">@PARENT_TAG@</param>
|
||||
<param name="versionrewrite-pattern">v(.*)</param>
|
||||
<param name="versionrewrite-replacement">\1</param>
|
||||
<param name="filename">cepces</param>
|
||||
<param name="exclude">.git</param>
|
||||
</service>
|
||||
|
||||
<service name="set_version" mode="disabled">
|
||||
<param name="basename">cepces</param>
|
||||
<param name="regex">^cepces-([^/]+)</param>
|
||||
<param name="file">cepces.spec</param>
|
||||
</service>
|
||||
|
||||
<service name="set_version" mode="disabled">
|
||||
<param name="basename">cepces</param>
|
||||
<param name="regex">^cepces-([^/]+)</param>
|
||||
<param name="file">cepces.changes</param>
|
||||
</service>
|
||||
|
||||
<service name="recompress" mode="disabled">
|
||||
<param name="file">*.tar</param>
|
||||
<param name="compression">bz2</param>
|
||||
</service>
|
||||
</services>
|
BIN
cepces-0.3.7.tar.bz2
(Stored with Git LFS)
Normal file
BIN
cepces-0.3.7.tar.bz2
(Stored with Git LFS)
Normal file
Binary file not shown.
97
cepces.changes
Normal file
97
cepces.changes
Normal file
@ -0,0 +1,97 @@
|
||||
-------------------------------------------------------------------
|
||||
Thu Dec 1 14:44:33 UTC 2022 - David Mulder <dmulder@suse.com>
|
||||
|
||||
Release v0.3.7:
|
||||
- Make the openssl security level configurable
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Oct 20 12:15:15 UTC 2022 - David Mulder <dmulder@suse.com>
|
||||
|
||||
Release v0.3.6:
|
||||
- Fix Bug #15 cepces.conf.dist: server should be pointed to actual CEP host
|
||||
- Replace old requests_kerberos with requests_gssapi
|
||||
- setup: Do not install example configs
|
||||
- setup: Respect the prefix the user specifies
|
||||
- Delete the spec file
|
||||
- Make Kerberos delegation configurable
|
||||
- Fix Bug #24 cepces-submit 'TypeError: option values must be strings'
|
||||
- Removed b755b56d25f3e54f8f15d9985fd0597b21c1051d.patch because
|
||||
it is now upstream.
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Wed Jun 01 18:58:29 UTC 2022 - David Mulder <dmulder@suse.com>
|
||||
|
||||
Release v0.3.5:
|
||||
- Added polling_interval which tells certmonger how long to wait in seconds before retrying.
|
||||
- Implemented Certificate authentication method.
|
||||
- Python 3.10 compatible.
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue May 10 19:19:56 UTC 2022 - Dirk Müller <dmueller@suse.com>
|
||||
|
||||
- add b755b56d25f3e54f8f15d9985fd0597b21c1051d.patch
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Wed Oct 6 09:03:40 UTC 2021 - Fabian Vogt <fvogt@suse.com>
|
||||
|
||||
- Only install the selinux policy if necessary
|
||||
- Add missing dependency on the main package to the certmonger
|
||||
subpackage
|
||||
- Use %license and move it to the common subpackage
|
||||
- Avoid bashisms
|
||||
- Fix file list for the python subpackage for 3.10+
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Oct 5 14:28:05 UTC 2021 - David Mulder <david.mulder@suse.com>
|
||||
|
||||
- Also disable selinux in 15.4, since it is still not supported.
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Aug 19 14:39:17 UTC 2021 - David Mulder <dmulder@suse.com>
|
||||
|
||||
- Disable selinux where not supported; (jsc#SLE-18456).
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Jul 19 14:32:34 UTC 2021 - David Mulder <dmulder@suse.com>
|
||||
|
||||
- Fix configuration missing global section.
|
||||
- Add a test runner for executing unittests, and github CI.
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Jul 12 16:24:51 UTC 2021 - David Mulder <dmulder@suse.com>
|
||||
|
||||
- v0.3.4: Allow overriding of parameters from the command line
|
||||
- Removed upstreamed patch 0001-Added-Kerberos-delegation.patch
|
||||
- Removed upstreamed patch 0001-Allow-overriding-of-server-auth-from-the-command-lin.patch
|
||||
- Removed upstreamed patch 0001-add-SELinux-permissions-for-RHEL-6.patch
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Jun 29 16:31:16 UTC 2021 - David Mulder <dmulder@suse.com>
|
||||
|
||||
- v0.3.3: Initial submission of sources; (jsc#SLE-18457).
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Jul 29 2019 - Daniel Uvehag <daniel.uvehag@gmail.com> - 0.3.3-2
|
||||
|
||||
- Add missing log directory
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Jul 29 2019 - Daniel Uvehag <daniel.uvehag@gmail.com> - 0.3.3-1
|
||||
|
||||
- Update to version 0.3.3-1
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Feb 05 2018 - Daniel Uvehag <daniel.uvehag@gmail.com> - 0.3.0-1
|
||||
|
||||
- Update to version 0.3.0-1
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Feb 01 2018 - Daniel Uvehag <daniel.uvehag@gmail.com> - 0.2.1-1
|
||||
|
||||
- Update to version 0.2.1-1
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Jun 27 2016 - Daniel Uvehag <daniel.uvehag@gmail.com> - 0.1.0-1
|
||||
|
||||
- Initial package.
|
||||
|
196
cepces.spec
Normal file
196
cepces.spec
Normal file
@ -0,0 +1,196 @@
|
||||
#
|
||||
# spec file
|
||||
#
|
||||
# Copyright (c) 2022 SUSE LLC
|
||||
#
|
||||
# All modifications and additions to the file contributed by third parties
|
||||
# remain the property of their copyright owners, unless otherwise agreed
|
||||
# upon. The license for this file, and modifications and additions to the
|
||||
# file, is the same license as for the pristine package itself (unless the
|
||||
# license for the pristine package is not an Open Source License, in which
|
||||
# case the license is the MIT License). An "Open Source License" is a
|
||||
# license that conforms to the Open Source Definition (Version 1.9)
|
||||
# published by the Open Source Initiative.
|
||||
|
||||
# Please submit bugfixes or comments via https://bugs.opensuse.org/
|
||||
#
|
||||
|
||||
|
||||
%global app_name cepces
|
||||
%global selinux_variants targeted
|
||||
%global logdir %{_localstatedir}/log/%{app_name}
|
||||
|
||||
Name: %{app_name}
|
||||
Version: 0.3.7
|
||||
Release: 0%{?dist}
|
||||
Summary: Certificate Enrollment through CEP/CES
|
||||
|
||||
License: GPL-3.0-or-later
|
||||
URL: https://github.com/ufven/%{app_name}
|
||||
Source0: %{name}-%{version}.tar.bz2
|
||||
BuildArch: noarch
|
||||
|
||||
Requires: %{app_name}-certmonger == %{version}
|
||||
Requires: python3-%{app_name} == %{version}
|
||||
%if 0%{?sle_version} > 150400 || 0%{?suse_version} > 1500
|
||||
Requires: (%{app_name}-selinux == %{version} if selinux-policy)
|
||||
%endif
|
||||
|
||||
%description
|
||||
%{app_name} is an application for enrolling certificates through CEP and CES.
|
||||
It currently only operates through certmonger.
|
||||
|
||||
%package -n python3-%{app_name}
|
||||
Summary: Python part of %{app_name}
|
||||
|
||||
BuildRequires: python3-cryptography >= 1.2
|
||||
BuildRequires: python3-devel
|
||||
BuildRequires: python3-requests
|
||||
BuildRequires: python3-requests-gssapi
|
||||
BuildRequires: python3-setuptools
|
||||
|
||||
Requires: python3-cryptography >= 1.2
|
||||
Requires: python3-requests
|
||||
Requires: python3-requests-gssapi
|
||||
|
||||
%description -n python3-%{app_name}
|
||||
%{app_name} is an application for enrolling certificates through CEP and CES.
|
||||
This package provides the Python part for CEP and CES interaction.
|
||||
|
||||
%package certmonger
|
||||
Summary: certmonger integration for %{app_name}
|
||||
|
||||
Requires: %{name} == %{version}
|
||||
Requires: certmonger
|
||||
|
||||
%description certmonger
|
||||
%{app_name} is an application for enrolling certificates through CEP and CES.
|
||||
This package provides the certmonger integration.
|
||||
|
||||
%if 0%{?sle_version} > 150400 || 0%{?suse_version} > 1500
|
||||
%package selinux
|
||||
Summary: SELinux support for %{app_name}
|
||||
|
||||
BuildRequires: selinux-policy-devel
|
||||
|
||||
Requires: selinux-policy
|
||||
Requires(post): selinux-policy-targeted
|
||||
|
||||
%description selinux
|
||||
SELinux support for %{app_name}
|
||||
%endif
|
||||
|
||||
%prep
|
||||
%setup -q -n %{app_name}-%{version}
|
||||
|
||||
%build
|
||||
%py3_build
|
||||
|
||||
%if 0%{?sle_version} > 150400 || 0%{?suse_version} > 1500
|
||||
# Build the SELinux module(s).
|
||||
for SELINUXVARIANT in %{selinux_variants}; do
|
||||
make -C selinux clean all
|
||||
mv -v selinux/%{app_name}.pp selinux/%{app_name}-${SELINUXVARIANT}.pp
|
||||
done
|
||||
%endif
|
||||
|
||||
%install
|
||||
%py3_install
|
||||
|
||||
install -d -m 0700 %{buildroot}%{logdir}
|
||||
|
||||
%if 0%{?sle_version} > 150400 || 0%{?suse_version} > 1500
|
||||
# Install the SELinux module(s).
|
||||
rm -fv selinux-files.txt
|
||||
|
||||
for SELINUXVARIANT in %{selinux_variants}; do
|
||||
install -d %{buildroot}%{_datadir}/selinux/${SELINUXVARIANT}
|
||||
install -p -m 644 selinux/%{app_name}-${SELINUXVARIANT}.pp \
|
||||
%{buildroot}%{_datadir}/selinux/${SELINUXVARIANT}/%{app_name}.pp
|
||||
|
||||
echo %{_datadir}/selinux/${SELINUXVARIANT}/%{app_name}.pp >> \
|
||||
selinux-files.txt
|
||||
done
|
||||
%endif
|
||||
|
||||
# Install configuration files.
|
||||
install -d %{buildroot}%{_sysconfdir}/%{app_name}
|
||||
install -p -m 644 conf/cepces.conf.dist \
|
||||
%{buildroot}%{_sysconfdir}/%{app_name}/cepces.conf
|
||||
install -p -m 644 conf/logging.conf.dist \
|
||||
%{buildroot}%{_sysconfdir}/%{app_name}/logging.conf
|
||||
|
||||
install -d %{buildroot}%{_libexecdir}/certmonger
|
||||
install -p -m 755 bin/%{app_name}-submit \
|
||||
%{buildroot}%{_libexecdir}/certmonger/%{app_name}-submit
|
||||
|
||||
# Remove unused executables and configuration files.
|
||||
%{__rm} -rfv %{buildroot}/usr/local/etc
|
||||
%{__rm} -rfv %{buildroot}/usr/local/libexec/certmonger
|
||||
|
||||
sed -i 's/\/usr\/bin\/env python3/\/usr\/bin\/python3/g' %{buildroot}%{_libexecdir}/certmonger/%{app_name}-submit
|
||||
|
||||
%if 0%{?sle_version} > 150400 || 0%{?suse_version} > 1500
|
||||
%post selinux
|
||||
for SELINUXVARIANT in %{selinux_variants}; do
|
||||
%{_sbindir}/semodule -n -s ${SELINUXVARIANT} \
|
||||
-i %{_datadir}/selinux/${SELINUXVARIANT}/%{app_name}.pp
|
||||
|
||||
if %{_sbindir}/selinuxenabled; then
|
||||
%{_sbindir}/load_policy
|
||||
fi
|
||||
done
|
||||
|
||||
%postun selinux
|
||||
if [ $1 -eq 0 ]
|
||||
then
|
||||
for SELINUXVARIANT in %{selinux_variants}; do
|
||||
%{_sbindir}/semodule -n -s ${SELINUXVARIANT} -r %{app_name} > /dev/null || :
|
||||
|
||||
if %{_sbindir}/selinuxenabled; then
|
||||
%{_sbindir}/load_policy
|
||||
fi
|
||||
done
|
||||
fi
|
||||
%endif
|
||||
|
||||
%post certmonger
|
||||
# Install the CA into certmonger.
|
||||
if [ $1 -eq 1 ]; then
|
||||
getcert add-ca -c %{app_name} \
|
||||
-e %{_libexecdir}/certmonger/%{app_name}-submit >/dev/null || :
|
||||
fi
|
||||
|
||||
%preun certmonger
|
||||
# Remove the CA from certmonger, unless it's an upgrade.
|
||||
if [ $1 -eq 0 ]; then
|
||||
getcert remove-ca -c %{app_name} >/dev/null || :
|
||||
fi
|
||||
|
||||
%check
|
||||
pushd tests
|
||||
%{__python3} ./runner.py
|
||||
popd
|
||||
|
||||
%files
|
||||
%doc README.rst
|
||||
%dir %{_sysconfdir}/%{app_name}/
|
||||
%config(noreplace) %{_sysconfdir}/%{app_name}/%{app_name}.conf
|
||||
%config(noreplace) %{_sysconfdir}/%{app_name}/logging.conf
|
||||
%dir %{logdir}
|
||||
|
||||
%files -n python3-%{app_name}
|
||||
%license LICENSE
|
||||
%{python3_sitelib}/%{app_name}
|
||||
%{python3_sitelib}/%{app_name}-%{version}-py*.egg-info
|
||||
|
||||
%files certmonger
|
||||
%dir %{_libexecdir}/certmonger
|
||||
%{_libexecdir}/certmonger/%{app_name}-submit
|
||||
|
||||
%if 0%{?sle_version} > 150400 || 0%{?suse_version} > 1500
|
||||
%files selinux -f selinux-files.txt
|
||||
%defattr(0644,root,root,0755)
|
||||
%endif
|
||||
|
||||
%changelog
|
Loading…
Reference in New Issue
Block a user