Sync from SUSE:SLFO:Main cjose revision bd0630b57f1121eb3a8707c194b2b8b6
This commit is contained in:
commit
62c7d0aa42
23
.gitattributes
vendored
Normal file
23
.gitattributes
vendored
Normal file
@ -0,0 +1,23 @@
|
||||
## Default LFS
|
||||
*.7z filter=lfs diff=lfs merge=lfs -text
|
||||
*.bsp filter=lfs diff=lfs merge=lfs -text
|
||||
*.bz2 filter=lfs diff=lfs merge=lfs -text
|
||||
*.gem filter=lfs diff=lfs merge=lfs -text
|
||||
*.gz filter=lfs diff=lfs merge=lfs -text
|
||||
*.jar filter=lfs diff=lfs merge=lfs -text
|
||||
*.lz filter=lfs diff=lfs merge=lfs -text
|
||||
*.lzma filter=lfs diff=lfs merge=lfs -text
|
||||
*.obscpio filter=lfs diff=lfs merge=lfs -text
|
||||
*.oxt filter=lfs diff=lfs merge=lfs -text
|
||||
*.pdf filter=lfs diff=lfs merge=lfs -text
|
||||
*.png filter=lfs diff=lfs merge=lfs -text
|
||||
*.rpm filter=lfs diff=lfs merge=lfs -text
|
||||
*.tbz filter=lfs diff=lfs merge=lfs -text
|
||||
*.tbz2 filter=lfs diff=lfs merge=lfs -text
|
||||
*.tgz filter=lfs diff=lfs merge=lfs -text
|
||||
*.ttf filter=lfs diff=lfs merge=lfs -text
|
||||
*.txz filter=lfs diff=lfs merge=lfs -text
|
||||
*.whl filter=lfs diff=lfs merge=lfs -text
|
||||
*.xz filter=lfs diff=lfs merge=lfs -text
|
||||
*.zip filter=lfs diff=lfs merge=lfs -text
|
||||
*.zst filter=lfs diff=lfs merge=lfs -text
|
BIN
cjose-0.6.2.3.tar.gz
(Stored with Git LFS)
Normal file
BIN
cjose-0.6.2.3.tar.gz
(Stored with Git LFS)
Normal file
Binary file not shown.
86
cjose.changes
Normal file
86
cjose.changes
Normal file
@ -0,0 +1,86 @@
|
||||
-------------------------------------------------------------------
|
||||
Fri Jul 26 15:38:40 UTC 2024 - Antonio Teixeira <antonio.teixeira@suse.com>
|
||||
|
||||
- Update to 0.6.2.3:
|
||||
* disable RSA PKCS 1.5 by default
|
||||
* avoid using empty prototypes; support Clang 15 and XCode 14.3
|
||||
* build shared library on Cygwin by adding -no-undefined to LDFLAGS
|
||||
* reformat using clang-format-18.1.3
|
||||
* regenerate autoconf files using autoconf 2.72
|
||||
* update github actions to avoid warnings
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Jul 18 08:40:48 UTC 2023 - Danilo Spinella <danilo.spinella@suse.com>
|
||||
|
||||
- Switch to OpenIDC fork of cjose
|
||||
- Update to 0.6.2.2:
|
||||
* use fixed authentication tag length of 16 octets in AES GCM decryption
|
||||
* avoid use of assert
|
||||
* fix make on srcdir != builddir
|
||||
- Update to 0.6.2.1:
|
||||
* preserve key order in cjose_header_get_raw as well
|
||||
* fix a memory leak in cjose_jws_import() for invalid JWS
|
||||
* don't use STACK_ALLOC in cjose_concatkdf_derive
|
||||
- Update to 0.6.2.0:
|
||||
* add support for A128GCM and A192GCM encryption
|
||||
* extract cjose_jwe_encrypt_iv to allow explicit IV
|
||||
* allow compilation against OpenSSL 3 with #define OPENSSL_API_COMPAT 0x10000000L
|
||||
* cleanup some warnings about \param lines in header files
|
||||
* preserve key order in order to be able to compare serialized JWTs
|
||||
* minor updates for conformance
|
||||
* check that JWE object has any CEK at all, return error if it doesn't
|
||||
* fix double free on decrypt ek rsa padding failure
|
||||
* replace calls to free() with cjose_get_dealloc() in _cjose_jws_build_hdr
|
||||
* fix buffer overflow in test_cjose_jwe_multiple_recipients
|
||||
* use fixed size of IV size of 16 bytes for AES-CBC
|
||||
* fix memory leak already addressed in cjose_jws_build_dig_sha when a JWS is reused for validation
|
||||
* compile against older versions of check
|
||||
* rename free() to free_func() in struct key_fntable for memory leak detectors
|
||||
* check result of cek = cjose_get_alloc()(cek_len) in jwe.c
|
||||
- Fix CVE-2023-37464, AES GCM decryption routine incorrectly uses the Tag
|
||||
length from the actual Authentication Tag, bsc#1213385
|
||||
- Remove unneeded patches:
|
||||
* cjose-0.6.1-concatkdf.patch
|
||||
* cjose-ck_assert_bin_eq.patch
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Feb 6 11:26:40 UTC 2023 - Marcus Meissner <meissner@suse.com>
|
||||
|
||||
- disable depreacted declarations warnings for openssl 3 for now.
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Wed Oct 30 13:57:50 UTC 2019 - Kristyna Streitova <kstreitova@suse.com>
|
||||
|
||||
- add cjose-0.6.1-concatkdf.patch to fix concatkdf failures on big
|
||||
endian architectures [bsc#1149887]
|
||||
- re-enable tests on s390
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 9 14:41:41 UTC 2019 - Vítězslav Čížek <vcizek@suse.com>
|
||||
|
||||
- Fix a bug in an assert message macro
|
||||
* add cjose-ck_assert_bin_eq.patch
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Sun Sep 8 19:01:22 UTC 2019 - Vítězslav Čížek <vcizek@suse.com>
|
||||
|
||||
- Temporarily disable tests on s390 as they are broken there
|
||||
(bsc#1149887)
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Apr 27 13:54:00 UTC 2018 - vcizek@suse.com
|
||||
|
||||
- update to 0.6.1
|
||||
- packaged as a dependency for apache2-mod_auth_openidc which was
|
||||
requested in fate#323817
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Wed Dec 13 10:25:46 UTC 2017 - christof.hanke@mpcdf.mpg.de
|
||||
|
||||
- update to version 0.5.1
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Wed Nov 2 01:08:42 UTC 2016 - crrodriguez@opensuse.org
|
||||
|
||||
- Initial version
|
||||
|
80
cjose.spec
Normal file
80
cjose.spec
Normal file
@ -0,0 +1,80 @@
|
||||
#
|
||||
# spec file for package cjose
|
||||
#
|
||||
# Copyright (c) 2024 SUSE LLC
|
||||
#
|
||||
# All modifications and additions to the file contributed by third parties
|
||||
# remain the property of their copyright owners, unless otherwise agreed
|
||||
# upon. The license for this file, and modifications and additions to the
|
||||
# file, is the same license as for the pristine package itself (unless the
|
||||
# license for the pristine package is not an Open Source License, in which
|
||||
# case the license is the MIT License). An "Open Source License" is a
|
||||
# license that conforms to the Open Source Definition (Version 1.9)
|
||||
# published by the Open Source Initiative.
|
||||
|
||||
# Please submit bugfixes or comments via https://bugs.opensuse.org/
|
||||
#
|
||||
|
||||
|
||||
Name: cjose
|
||||
Version: 0.6.2.3
|
||||
Release: 0
|
||||
Summary: C library implementing the Javascript Object Signing and Encryption (JOSE)
|
||||
License: MIT
|
||||
Group: Development/Libraries/C and C++
|
||||
URL: https://github.com/OpenIDC/cjose
|
||||
Source: https://github.com/OpenIDC/cjose/archive/refs/tags/v%{version}.tar.gz#/%{name}-%{version}.tar.gz
|
||||
BuildRequires: libtool
|
||||
BuildRequires: pkgconfig
|
||||
BuildRequires: pkgconfig(check) >= 0.9.4
|
||||
BuildRequires: pkgconfig(jansson) >= 2.3
|
||||
BuildRequires: pkgconfig(openssl) >= 1.0.1h
|
||||
|
||||
%description
|
||||
|
||||
C library implementing the Javascript Object Signing and Encryption (JOSE)
|
||||
|
||||
%package -n libcjose0
|
||||
Summary: C library implementing the Javascript Object Signing and Encryption (JOSE)
|
||||
Group: System/Libraries
|
||||
|
||||
%description -n libcjose0
|
||||
C library implementing the Javascript Object Signing and Encryption (JOSE)
|
||||
|
||||
%package -n libcjose-devel
|
||||
Summary: C library implementing the Javascript Object Signing and Encryption (JOSE)
|
||||
Group: Development/Libraries/C and C++
|
||||
Requires: libcjose0 = %{version}
|
||||
|
||||
%description -n libcjose-devel
|
||||
C library implementing the Javascript Object Signing and Encryption (JOSE)
|
||||
|
||||
%prep
|
||||
%setup -q
|
||||
%autopatch -p1
|
||||
|
||||
%build
|
||||
CFLAGS="%optflags -Wno-deprecated-declarations"
|
||||
%configure --disable-static
|
||||
make %{?_smp_mflags}
|
||||
|
||||
%install
|
||||
%make_install
|
||||
find %{buildroot} -type f -name "*.la" -delete -print
|
||||
|
||||
%check
|
||||
make %{?_smp_mflags} check
|
||||
|
||||
%post -n libcjose0 -p /sbin/ldconfig
|
||||
%postun -n libcjose0 -p /sbin/ldconfig
|
||||
|
||||
%files -n libcjose0
|
||||
%{_libdir}/libcjose.so.*
|
||||
|
||||
%files -n libcjose-devel
|
||||
%dir %{_includedir}/%{name}
|
||||
%{_includedir}/%{name}/*.h
|
||||
%{_libdir}/libcjose.so
|
||||
%{_libdir}/pkgconfig/cjose.pc
|
||||
|
||||
%changelog
|
Loading…
Reference in New Issue
Block a user