diff --git a/krb5-1.13.1.tar.gz b/krb5-1.13.1.tar.gz deleted file mode 100644 index 3b41f12..0000000 --- a/krb5-1.13.1.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:3516e89a884de2a2c7a38374f286c0e7244e4763b18ee04b986d3dbd1638460d -size 12087522 diff --git a/krb5-1.13.2.tar.gz b/krb5-1.13.2.tar.gz new file mode 100644 index 0000000..ceaf953 --- /dev/null +++ b/krb5-1.13.2.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:0221413cd170aaf144668c00805004fc2809823dbdbd1d9f27f95e23b79a259e +size 12104946 diff --git a/krb5-1.13.2.tar.gz.asc b/krb5-1.13.2.tar.gz.asc new file mode 100644 index 0000000..d16e5d8 --- /dev/null +++ b/krb5-1.13.2.tar.gz.asc @@ -0,0 +1,14 @@ +-----BEGIN PGP SIGNATURE----- +Version: GnuPG v1 + +iQGcBAABAgAGBQJVTUldAAoJEKMvF/0AVcMF9IoMAIEawAFZ1pRw91oRN6c3eAxy +RYBuJWsEa73JtqKCRtz7LA3qgacnJ8FGTpXaGHB3zErO55+Bclo1KZsUoNDtT27O +bxjsptPBjp15zTZhavlIpAjANFmo6QpghUHpLNcLxH8pXgmQDztHnPaenStxF8Bv +P2oFKh31uY3gYzOKnYi/r14XKSTNpFiDiGty53KY61efAO4H7xRFMhBgN2Vv1pBm +FvekjCWRypN7ai2z+94cuVNIlu8eipDnU4oBb865fRKlflxCdpBmHLr1K5AgwSEb +OAvDUPAEV9GwBP94M0yAoPwGf5ZHPvdORXbHfX00lzX2SgV+9DH4BqJOnytOeuaT +PA1Z+7izF+Xja4iHMcYlyJ7a/sGWachlZrw2ifELlYUf4vtcPY5e6gH0hSMUoA7t +Ww18ryv5fPHT1l+/o2P03hzZSFllOXjVsComsfw6Ws7qzbFuigpiVYdBg1XKMi9L +kjA7j43FTHvVKjtrEubiW+YHxowQHu5DIeQWVqsBJg== +=KdUH +-----END PGP SIGNATURE----- diff --git a/krb5-mini.changes b/krb5-mini.changes index c7dc0ea..3d1bf3b 100644 --- a/krb5-mini.changes +++ b/krb5-mini.changes @@ -1,3 +1,62 @@ +------------------------------------------------------------------- +Thu May 28 08:01:00 UTC 2015 - dimstar@opensuse.org + +- Drop libverto and libverto-libev Requires from the -server + package: those package names don't exist and the shared libs + are pulled in automatically. + +------------------------------------------------------------------- +Wed May 27 10:59:13 UTC 2015 - dimstar@opensuse.org + +- Unconditionally buildrequire libverto-devel: krb5-mini also + depends on it. + +------------------------------------------------------------------- +Fri May 22 09:27:11 UTC 2015 - meissner@suse.com + +- pre_checkin.sh aligned changes between krb5/krb5-mini +- added krb5.keyring + +------------------------------------------------------------------- +Tue May 12 07:48:18 UTC 2015 - michael@stroeder.com + +- update to krb5 1.13.2 + +- DES transition +============== + +The Data Encryption Standard (DES) is widely recognized as weak. The +krb5-1.7 release contains measures to encourage sites to migrate away +- From using single-DES cryptosystems. Among these is a configuration +variable that enables "weak" enctypes, which defaults to "false" +beginning with krb5-1.8. + + +Major changes in 1.13.2 (2015-05-08) +==================================== + +This is a bug fix release. + +* Fix a minor vulnerability in krb5_read_message, which is primarily + used in the BSD-derived kcmd suite of applications. [CVE-2014-5355] + +* Fix a bypass of requires_preauth in KDCs that have PKINIT enabled. + [CVE-2015-2694] + +* Fix some issues with the LDAP KDC database back end. + +* Fix an iteration-related memory leak in the DB2 KDC database back + end. + +* Fix issues with some less-used kadm5.acl functionality. + +* Improve documentation. + +------------------------------------------------------------------- +Thu Apr 23 14:13:03 UTC 2015 - hguo@suse.com + +- Use externally built libverto + ------------------------------------------------------------------- Wed Feb 18 11:48:46 UTC 2015 - michael@stroeder.com @@ -14,8 +73,9 @@ This is a bug fix release. * Fix multiple kadmind vulnerabilities, some of which are based in the gssrpc library. [CVE-2014-5352 CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423] + ------------------------------------------------------------------- -Tue Jan 6 07:20:54 UTC 2015 - mlin@suse.com +Tue Jan 6 07:12:29 UTC 2015 - mlin@suse.com - Update to krb5 1.13 * Add support for accessing KDCs via an HTTPS proxy server using the @@ -30,12 +90,12 @@ Tue Jan 6 07:20:54 UTC 2015 - mlin@suse.com * The KDC listens for TCP connections by default. * Fix a minor key disclosure vulnerability where using the "keepold" option to the kadmin randkey operation could return the old keys. [CVE-2014-5351] - * Add client support for the Kerberos Cache Manager protocol. If the host + * Add client support for the Kerberos Cache Manager protocol. If the host is running a Heimdal kcm daemon, caches served by the daemon can be accessed with the KCM: cache type. * When built on OS X 10.7 and higher, use "KCM:" as the default cache type, unless overridden by command-line options or krb5-config values. - * Add support for doing unlocked database dumps for the DB2 KDC back end, + * Add support for doing unlocked database dumps for the DB2 KDC back end, which would allow the KDC and kadmind to continue accessing the database during lengthy database dumps. - Removed patches, useless or upstreamed @@ -48,9 +108,21 @@ Tue Jan 6 07:20:54 UTC 2015 - mlin@suse.com - Refreshed patches * krb5-1.12-pam.patch * krb5-1.12-selinux-label.patch - * krb5-1.7-doublelog.patch + * krb5-1.7-doublelog.patch ------------------------------------------------------------------- +Thu Sep 25 12:48:32 UTC 2014 - ddiss@suse.com + +- Work around replay cache creation race; (bnc#898439). + krb5-1.13-work-around-replay-cache-creation-race.patch + +------------------------------------------------------------------- +Tue Sep 23 13:25:33 UTC 2014 - varkoly@suse.com + +- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal +- added patches: + * bnc#897874-CVE-2014-5351.diff +------------------------------------------------------------------- Sat Aug 30 22:29:28 UTC 2014 - andreas.stieger@gmx.de - krb5 5.12.2: diff --git a/krb5-mini.spec b/krb5-mini.spec index a20eff2..17051e2 100644 --- a/krb5-mini.spec +++ b/krb5-mini.spec @@ -1,7 +1,7 @@ # # spec file for package krb5-mini # -# Copyright (c) 2015 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -17,7 +17,7 @@ %define build_mini 1 -%define srcRoot krb5-1.13.1 +%define srcRoot krb5-1.13.2 %define vendorFiles %{_builddir}/%{srcRoot}/vendor-files/ %define krb5docdir %{_defaultdocdir}/krb5 @@ -30,12 +30,13 @@ BuildRequires: keyutils-devel BuildRequires: libcom_err-devel BuildRequires: libselinux-devel BuildRequires: ncurses-devel -Version: 1.13.1 +Version: 1.13.2 Release: 0 Summary: MIT Kerberos5 Implementation--Libraries License: MIT Group: Productivity/Networking/Security Obsoletes: krb5-plugin-preauth-pkinit-nss +BuildRequires: libverto-devel %if ! 0%{?build_mini} BuildRequires: doxygen BuildRequires: libopenssl-devel @@ -64,7 +65,10 @@ Conflicts: krb5-plugin-kdb-ldap Conflicts: krb5-plugin-preauth-pkinit Conflicts: krb5-plugin-preauth-otp %endif +# both tar.gz and .tar.gz.asc extracted from the http://web.mit.edu/kerberos/dist/krb5/1.13/krb5-1.13.2-signed.tar Source: krb5-%{version}.tar.gz +Source42: krb5-%version.tar.gz.asc +Source43: krb5.keyring Source1: vendor-files.tar.bz2 Source2: baselibs.conf Source5: krb5-rpmlintrc @@ -163,6 +167,7 @@ Group: Development/Libraries/C and C++ PreReq: %{name} = %{version} Requires: keyutils-devel Requires: libcom_err-devel +Requires: libverto-devel # bug437293 %ifarch ppc64 Obsoletes: krb5-devel-64bit @@ -231,7 +236,8 @@ DEFCCNAME=DIR:/run/user/%%{uid}/krb5cc; export DEFCCNAME %endif --with-selinux \ --with-system-et \ - --with-system-ss + --with-system-ss \ + --with-system-verto %{__make} %{?_smp_mflags} %if ! 0%{?build_mini} cd doc @@ -451,7 +457,6 @@ rm -f %{buildroot}/%{_libdir}/krb5/plugins/preauth/otp.so %{_libdir}/libkdb5.so %{_libdir}/libkrb5.so %{_libdir}/libkrb5support.so -%{_libdir}/libverto.so %{_libdir}/libkrad.so %{_libdir}/pkgconfig/gssrpc.pc %{_libdir}/pkgconfig/kadm-client.pc @@ -511,7 +516,6 @@ rm -f %{buildroot}/%{_libdir}/krb5/plugins/preauth/otp.so %{_libdir}/libkdb5.so.* %{_libdir}/libkrb5.so.* %{_libdir}/libkrb5support.so.* -%{_libdir}/libverto.so.* %{_libdir}/libkrad.so.* %{_libdir}/krb5/plugins/kdb/* %{_libdir}/krb5/plugins/tls/* @@ -585,7 +589,6 @@ rm -f %{buildroot}/%{_libdir}/krb5/plugins/preauth/otp.so %{_libdir}/libkdb5.so.* %{_libdir}/libkrb5.so.* %{_libdir}/libkrb5support.so.* -%{_libdir}/libverto.so.* %{_libdir}/libkrad.so.* %files server diff --git a/krb5.changes b/krb5.changes index ce99d09..3d1bf3b 100644 --- a/krb5.changes +++ b/krb5.changes @@ -1,3 +1,62 @@ +------------------------------------------------------------------- +Thu May 28 08:01:00 UTC 2015 - dimstar@opensuse.org + +- Drop libverto and libverto-libev Requires from the -server + package: those package names don't exist and the shared libs + are pulled in automatically. + +------------------------------------------------------------------- +Wed May 27 10:59:13 UTC 2015 - dimstar@opensuse.org + +- Unconditionally buildrequire libverto-devel: krb5-mini also + depends on it. + +------------------------------------------------------------------- +Fri May 22 09:27:11 UTC 2015 - meissner@suse.com + +- pre_checkin.sh aligned changes between krb5/krb5-mini +- added krb5.keyring + +------------------------------------------------------------------- +Tue May 12 07:48:18 UTC 2015 - michael@stroeder.com + +- update to krb5 1.13.2 + +- DES transition +============== + +The Data Encryption Standard (DES) is widely recognized as weak. The +krb5-1.7 release contains measures to encourage sites to migrate away +- From using single-DES cryptosystems. Among these is a configuration +variable that enables "weak" enctypes, which defaults to "false" +beginning with krb5-1.8. + + +Major changes in 1.13.2 (2015-05-08) +==================================== + +This is a bug fix release. + +* Fix a minor vulnerability in krb5_read_message, which is primarily + used in the BSD-derived kcmd suite of applications. [CVE-2014-5355] + +* Fix a bypass of requires_preauth in KDCs that have PKINIT enabled. + [CVE-2015-2694] + +* Fix some issues with the LDAP KDC database back end. + +* Fix an iteration-related memory leak in the DB2 KDC database back + end. + +* Fix issues with some less-used kadm5.acl functionality. + +* Improve documentation. + +------------------------------------------------------------------- +Thu Apr 23 14:13:03 UTC 2015 - hguo@suse.com + +- Use externally built libverto + ------------------------------------------------------------------- Wed Feb 18 11:48:46 UTC 2015 - michael@stroeder.com diff --git a/krb5.keyring b/krb5.keyring new file mode 100644 index 0000000..f13592c --- /dev/null +++ b/krb5.keyring @@ -0,0 +1,72 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- + +mQGNBFTrtMYBDADZLb3TIJRUqLakS90xTgFFqQ3FeZ2payy95tMxSqjiDlE9a/ij +AltjEFHpxw6UMIBtl13Vr/d+YzGTloyeOwn+tV0NiVrGwRDv8tqHCuSH5p3vSO+D +Z42VNe3gcLk7gd2Cchsp/5d3vRMBBz3yvv/9qbpQOLXHCmx5o06D9YN6+CefxByl +6u6Nc980LMmexqHoiTr3QxKysSJoKpXjOl0NA8zNI1OcKdLbyl095EWlx0Bwc5g7 +4qPlAPFWxsDOO3Kg+MXDWl4ApWmD0sC+h42JwVTATmZKQ5O7bpdn4F5KHAr/M4rh +usuoDiOunqXns5igFNJdXPbJSWdoSGaNXv0X2unfe8H1tr/yWKkd/lNmTysW3onZ +CpS6igdYm5A3iD/Qd8ypEWrtd+KIoGGjUuNlmbXhYJIsOQMvmkXnTycRugioe/U+ +snTNInPKQ45Jue2Xto+U8FXpaxF4GKHBk9CYwBlp6+oCR9u7Is8+aWMSPFS0cwEr +zjyIriWD53U91jUAEQEAAbQVVG9tIFl1IDx0bHl1QG1pdC5lZHU+iQEcBBABAgAG +BQJU67WcAAoJEBUCTNN0nXiJUpEH+wXTW+X1v7yrTSR+/rYWa6FtXFeqfEB3eDqX +3a8z2lPofH7ou/CpgDwGfqEPveO+JOEDXHVNiUE/w7LeujJzIVTjPqlGd/WioVs+ +9Hj38tGUefssbUKSTkMrQEaMtJUYHaqxa+XrFmPS8HCzOirsxKVeSLiLxzennRLk +pOftGjekzp9tTxKrTjjl7iGVa1621WzzRi8cQOHaiHWYlNGnI9FAOILaTSmZcJNW +eCzQx1jSW8HIO7bofR1e+1fgDxNoq1tSOLzdrbo/Z/abFeJsSCB/1QBb4ZVwY3pX +7YXHmKYjfEfmvSy6YEinXJl7WuNXkMAp055dVUcPW1ytvwGZqCCJARwEEgEKAAYF +AlT1BlEACgkQeAB7mCHpdpLDiwgAyGNuTXX5SaDTP/6/zM5gS28HrmNfQPJbd7mP +e/jRqpfNeBnY/HjAbW/dZ9Todlj9mTrbPn4LVANOIw/yO9ggMxj+vnlRYkP1GcP8 +a+i2Sp6PV3LVkWSPJ1cRqEA9R7YOpPnGIID5tCoGQ9nc72GZPcNrGTZq1LX6qeN/ +AdFUoBg0UaR/OK/2g44m/IenDT4qo+buOt1VBQNqmF2P084hYLIiuGGjsZRqOexY +JVG681ZiNp9ZrJIWxnZSpUZq4xLdrjcgj9tPckVSFMJH3ixAYYro6V4gsyeY3r3x +hVy7i++memCGnqVVfW2nUeXYz46xX3Rl7XSJ1OlbUT2mb22OlokBoAQQAQoABgUC +VO5GDQAKCRAo2abzZOt1EshnDCCMTNlHt9oAXPcRVXk/wXpn7PTZKxLoPlmHs5qv +fYg4th/mtCIx2Z3+QIzsx71qbnYj1GbSErTkzAS5fvxFgQQCZILd9/NGdsca845W +J/9UkFCKaHXYPFuNbkoDKn+hzsroboUBEI+1ikCEjtnyCEAryauSkNj9VkOpH7sG +T1UY8VW2UArVFp8EmCv2a+9A7P3HrfoJ+s1GXmmYUqcMPOb6jBnOGySxQ6vRQs4x +ahBpJrAVoGPYE6xlnOf7VqE3TX7kzmgYjtrGcNlwae1Vg9nKsMK9pTT/64YF/Bf8 +Uer1wgMYAObVNZjazyDxbosidGeHt2WgACpQhijEUxEvICxgyb9AFJGR++CRGF5n +V+Ka5bQq+1YYuzPb6S3zzz2J2wJFCAb+MaXhVE1ldqIrAvUAXk4RsaW/d6wTObRP +vzP9iWrRP3qjOKDu61tvx3Gh08pyFLdGcNIwDgDyW1tuC234QLN+pxHF6trozh0V +G38HZbhKmKO9QJcxgT4GsDoaWaZrlqBmiQG+BBMBAgAoAhsDBgsJCAcDAgYVCAIJ +CgsEFgIDAQIeAQIXgAUCVOvafwUJCW+MigAKCRCjLxf9AFXDBbGQDADOWsh/RYnw +s1LgWe7JA/kN5cAL+AV8BBuyn26g4cjVu3B5KT3GvNfIDynV2RVAFzpnWmIrS/fc +xVkmwU59nHSnYeMFrg+aHrZykjlSKPNUZSjzZhOgdkwZs2AqUqldNRQfVAilf+WO +lHgn52yq6RQhpY3dcdHaqSpeoqUjgW91oweJ1ZzvR1yo/QeJo3TwnnRRioRDj91O +gVzVEGxVB/4OZW74JZph931sLM7Y9m77VT/Cyv8ON3wVOMCMktUozc5n33vhQ/yp +HUe27jZMEfiAH1g2xg153aWF79JfroQEFB0ZOTkrzMfzpx3dpTqhJLXPG8t9jsA2 +sjrQr1tlOiPby33MJpmGTM484rP7lS0/RDprxXnb8XGYlcchooOaVmJRHhFmwdli +tmSXfRpwkx+m5ZqyiIsTRw8nAiCD6N1P9J8ntLBIQlUR2jayPOQMkougFhDl4S9L +5ouJn6TeEmNe1b0gAHoNRMGOGcJ/xeguvtAF80uNXhmvJ4uXz10eA92JAhwEEAEC +AAYFAlT18PsACgkQDLoIV1+Dct+UVg/+L6rjh9mviUmqZ+mEmN7bMnJt9mji3w5B +XNTI6p9+gw8QsYN57qum2jYbaSTtynMopl9t+ksImJw1qyUtmm3M9lITinCas/0P +3cn0nTlS0ZJM6bAPj6CL/3jlQPXJUbt7GgapFNJoTKIeSRmxS0lRrz7olH9v/pW3 +QqaLHq+Ydf1mozBe7g85w3/YEccXTJy9A9JbMH0QdOYt2MU9aOwiDCtpa5x0iL+X +Y0WqNOFvzKuzsCAJmEiNXuYR9SOuiWpJxD0Zj32JSZsweCxKOIwSVPmBjgNybg4W +luoQDOeWIE9mYWsnouVfyvdmxeM8gvGhKwu3hc+XFAPl3w/nTlFypR48AyLevoAb +/1YdIKWVLZsLOjbPb+1EehS0hStsX2F0Q7Ebw2WNFlfBHPOjey9bgkDEW8tB0+qP +ptKUyU63CF2EwFDViTAt5MuCei6tkEdWaf3O6pDmV8xEM5hKM8SIdG/AHmpPuzt2 +mVtBZB2yBiSTfurlnkvOpu+hlc4xs6AzfALexpdQ7jJmzpIududB0IMC41fK3KG0 +Jxck/cRIIpmPVDLbMAeHmWnvmqlXH2lwk5eYbvrWjjB9/9ml3fQ8dyzcWJM3uPe1 +7UNaK7SIL6+JRmNJ0HwoO2H1NaJVXL7pugAX5x8b/6/WhjjLsrL4wYne/pTKhhfB +dSGyvhr3sUG5AY0EVOu0xgEMANP74TtijWGlHaJamxdYTHDWi1SDbsDeAHEnOTR9 +medwNPYoWnnjj+DIHq3uIsFtHFEpwH0mbk7HnAQblazCy0GGjQYFiGooqtnGniFB +duMTidhHntc6hjDEMT9z8u1JL8dXmM2oXNp2pcHEZX+xxI3GPsqhTvAjfgwZ4HA5 +5jA5WyIaSrxA7NEDLM12spsB27PJQp+KjbtEizns0LPCHvEwQrIzM0usGlEcArf2 +W0PMQuxVaLWmATsd+ZUUPdGk1UMPL337rxRPyXnZqp69v4+WBDr82/Jh5TaDtUdd +9jzjkqlAXkspkvuhIq/qj85Pg2vUUAf+XYS/MzhVTpirEd+9ZIzb76e27CNPX9E4 +/HOavFFnGr59xFD3jYz5XPydxp6q5I4TznejKGRUz43e2t4xmy6WgI+tmPKVThOK +ntklmZBhOL3fb6+V8AoXUtws4Ydbkzt6j9CQGvwZxlY9tgPQ8Za47datKlYdOzAt +iE1yFjFNGHlMJPGk2tpgRKclGQARAQABiQGlBBgBAgAPAhsMBQJU69qSBQkJb4yK +AAoJEKMvF/0AVcMFqkYMAIB0k6uOltV+x5BrdwDL4TygHzMjpct0L3FX1EPrwK5s +50eGEslZsYtkvE11jAkaoj9NTRKJKOmDswjoyFE9H3g00XBGKrO1wlKs72m8BWO6 +IwXgIHN7UPNiR8DvQibmD5NjpvJTr2Xu5VKbRKPjfcAfdCZdOtnJPNbFcfGVBtUS +l9NvXDVzdcGmfWx7W1ZfdNe96uiWJoxIBbMnUpvIJc1GuGz9JskkP66y1l91n9fG +96GhY1v5eVp3y+klEhl0VWFaEfn4pPiDiHRDm9BS2aAoKMbSJfaFf2dwA27dTK11 +NeVAKMNz6bvcZYrIzqTUeIJW9VZWAr6RCEKmC9FQ0d24jtMPQX3BymH5zWGqhIdf +oylOs9X+dm8XygzdEfYPbiSIUVCDqtnNHSvYmFOG0Aen6SomkZLaD2B5HctKW/ur +2/rrF6YTei+eN2WddP+mDH7znuTViyADLxcZdfBYLzR66hX4AD8Jp5oOCMQ/j1kP +p3N1KgXx6tnA7P65PC0REQ== +=sIgi +-----END PGP PUBLIC KEY BLOCK----- diff --git a/krb5.spec b/krb5.spec index f7180e0..b221287 100644 --- a/krb5.spec +++ b/krb5.spec @@ -1,7 +1,7 @@ # # spec file for package krb5 # -# Copyright (c) 2015 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -17,7 +17,7 @@ %define build_mini 0 -%define srcRoot krb5-1.13.1 +%define srcRoot krb5-1.13.2 %define vendorFiles %{_builddir}/%{srcRoot}/vendor-files/ %define krb5docdir %{_defaultdocdir}/krb5 @@ -30,12 +30,13 @@ BuildRequires: keyutils-devel BuildRequires: libcom_err-devel BuildRequires: libselinux-devel BuildRequires: ncurses-devel -Version: 1.13.1 +Version: 1.13.2 Release: 0 Summary: MIT Kerberos5 Implementation--Libraries License: MIT Group: Productivity/Networking/Security Obsoletes: krb5-plugin-preauth-pkinit-nss +BuildRequires: libverto-devel %if ! 0%{?build_mini} BuildRequires: doxygen BuildRequires: libopenssl-devel @@ -64,7 +65,10 @@ Conflicts: krb5-plugin-kdb-ldap Conflicts: krb5-plugin-preauth-pkinit Conflicts: krb5-plugin-preauth-otp %endif +# both tar.gz and .tar.gz.asc extracted from the http://web.mit.edu/kerberos/dist/krb5/1.13/krb5-1.13.2-signed.tar Source: krb5-%{version}.tar.gz +Source42: krb5-%version.tar.gz.asc +Source43: krb5.keyring Source1: vendor-files.tar.bz2 Source2: baselibs.conf Source5: krb5-rpmlintrc @@ -163,6 +167,7 @@ Group: Development/Libraries/C and C++ PreReq: %{name} = %{version} Requires: keyutils-devel Requires: libcom_err-devel +Requires: libverto-devel # bug437293 %ifarch ppc64 Obsoletes: krb5-devel-64bit @@ -231,7 +236,8 @@ DEFCCNAME=DIR:/run/user/%%{uid}/krb5cc; export DEFCCNAME %endif --with-selinux \ --with-system-et \ - --with-system-ss + --with-system-ss \ + --with-system-verto %{__make} %{?_smp_mflags} %if ! 0%{?build_mini} cd doc @@ -451,7 +457,6 @@ rm -f %{buildroot}/%{_libdir}/krb5/plugins/preauth/otp.so %{_libdir}/libkdb5.so %{_libdir}/libkrb5.so %{_libdir}/libkrb5support.so -%{_libdir}/libverto.so %{_libdir}/libkrad.so %{_libdir}/pkgconfig/gssrpc.pc %{_libdir}/pkgconfig/kadm-client.pc @@ -511,7 +516,6 @@ rm -f %{buildroot}/%{_libdir}/krb5/plugins/preauth/otp.so %{_libdir}/libkdb5.so.* %{_libdir}/libkrb5.so.* %{_libdir}/libkrb5support.so.* -%{_libdir}/libverto.so.* %{_libdir}/libkrad.so.* %{_libdir}/krb5/plugins/kdb/* %{_libdir}/krb5/plugins/tls/* @@ -585,7 +589,6 @@ rm -f %{buildroot}/%{_libdir}/krb5/plugins/preauth/otp.so %{_libdir}/libkdb5.so.* %{_libdir}/libkrb5.so.* %{_libdir}/libkrb5support.so.* -%{_libdir}/libverto.so.* %{_libdir}/libkrad.so.* %files server