# # spec file for package neon (Version 0.28.3) # # Copyright (c) 2008 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed # upon. The license for this file, and modifications and additions to the # file, is the same license as for the pristine package itself (unless the # license for the pristine package is not an Open Source License, in which # case the license is the MIT License). An "Open Source License" is a # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. # Please submit bugfixes or comments via http://bugs.opensuse.org/ # # norootforbuild Name: neon BuildRequires: libexpat-devel libopenssl-devel openssl zlib-devel Summary: An HTTP and WebDAV Client Library Version: 0.28.3 Release: 1 License: LGPL v2.1 or later Group: Development/Libraries/Other Url: http://www.webdav.org/neon BuildRoot: %{_tmppath}/%{name}-%{version}-build Source: http://www.webdav.org/neon/neon-%{version}.tar.bz2 Patch0: neon-%{version}-bloat.patch %description neon is an HTTP and WebDAV client library with a C interface. Featuring: * High-level interface to HTTP and WebDAV methods (PUT, GET, HEAD, etc.) * Low-level interface to HTTP request handling to allow implementing new methods easily * HTTP/1.1 and HTTP/1.0 persistent connections * RFC2617 basic and digest authentication (including auth-int, md5-sess) * Proxy support (including basic/digest authentication) * Generic WebDAV 207 XML response handling mechanism * XML parsing using the expat or libxml parsers * Easy generation of error messages from 207 error responses * WebDAV resource manipulation: MOVE, COPY, DELETE, MKCOL * WebDAV metadata support: set and remove properties, query any set of properties (PROPPATCH/PROPFIND) Authors: -------- Joe Orton %package -n libneon27 License: GPL v2 or later Summary: An HTTP and WebDAV Client Library Group: Development/Libraries/Other Requires: %{name} = %{version} %description -n libneon27 neon is an HTTP and WebDAV client library with a C interface. Featuring: * High-level interface to HTTP and WebDAV methods (PUT, GET, HEAD, etc.) * Low-level interface to HTTP request handling to allow implementing new methods easily * HTTP/1.1 and HTTP/1.0 persistent connections * RFC2617 basic and digest authentication (including auth-int, md5-sess) * Proxy support (including basic/digest authentication) * Generic WebDAV 207 XML response handling mechanism * XML parsing using the expat or libxml parsers * Easy generation of error messages from 207 error responses * WebDAV resource manipulation: MOVE, COPY, DELETE, MKCOL * WebDAV metadata support: set and remove properties, query any set of properties (PROPPATCH/PROPFIND) Authors: -------- Joe Orton %package -n libneon-devel License: GPL v2 or later Summary: An HTTP and WebDAV Client Library Group: Development/Libraries/Other Requires: libneon27 = %{version} glibc-devel # renamed after openSUSE 10.3 Provides: neon-devel = 0.27 Obsoletes: neon-devel < 0.27 %description -n libneon-devel neon is an HTTP and WebDAV client library with a C interface. Featuring: * High-level interface to HTTP and WebDAV methods (PUT, GET, HEAD, etc.) * Low-level interface to HTTP request handling to allow implementing new methods easily * HTTP/1.1 and HTTP/1.0 persistent connections * RFC2617 basic and digest authentication (including auth-int, md5-sess) * Proxy support (including basic/digest authentication) * Generic WebDAV 207 XML response handling mechanism * XML parsing using the expat or libxml parsers * Easy generation of error messages from 207 error responses * WebDAV resource manipulation: MOVE, COPY, DELETE, MKCOL * WebDAV metadata support: set and remove properties, query any set of properties (PROPPATCH/PROPFIND) Authors: -------- Joe Orton %prep %setup -q %patch0 %build rm -f aclocal.m4 ltmain.sh sh autogen.sh %configure \ --with-ssl \ --disable-nls \ --enable-shared \ --disable-static \ --enable-warnings \ --with-pic %{__make} %{?jobs:-j%jobs} %install make DESTDIR=$RPM_BUILD_ROOT docdir=%{_defaultdocdir}/%{name} install install-man install-html rm -f $RPM_BUILD_ROOT%{_libdir}/*.la %check # make check %clean rm -rf $RPM_BUILD_ROOT %post -n libneon27 -p /sbin/ldconfig %postun -n libneon27 -p /sbin/ldconfig %files %defattr(-,root,root) %doc doc/*.txt doc/html %doc AUTHORS BUGS ChangeLog NEWS README THANKS TODO %files -n libneon27 %defattr(-,root,root) %{_libdir}/*.so.27* %files -n libneon-devel %defattr(-,root,root) %{_bindir}/neon-config %dir %{_includedir}/neon %{_includedir}/neon/*.h %{_mandir}/*/* %{_libdir}/*.so %{_libdir}/pkgconfig/neon.pc %changelog * Thu Aug 21 2008 prusnak@suse.cz - updated to 0.28.3 * SECURITY (CVE-2008-3746): Fix potential NULL pointer dereference in Digest domain parameter support; could allow a DoS by a malicious server * Fix parsing of *-Authenticate response header with LWS after quoted value * Fix ne_set_progress(, NULL, ) to match pre-0.27 behaviour (and not crash) * Fix to disable Nagle on Win32 with newer toolchain (thanks to Stefan Küng) * Fix build on Netware (Guenter Knauf) * Document existing ne_uri_parse() API postcondition and ne_uri_resolve() pre/postconditions regarding the ->path field in ne_uri structures * Mark ne_{,buffer_}concat with sentinel attribute for GCC >= 4. * Distinguish the error message for an SSL handshake which fails after a client cert was requested. * Compile with PIC flags by default even for static library builds * Tue Jun 03 2008 coolo@suse.de - require COPYING package * Sun May 18 2008 coolo@suse.de - fix rename of xxbit packages * Thu Apr 10 2008 ro@suse.de - added baselibs.conf file to build xxbit packages for multilib support * Thu Apr 03 2008 prusnak@suse.cz - updated to 0.28.2 * Support "Proxy-Connection: Keep-Alive" for compatibility with HTTP/1.0 proxies which require persistent connections for NTLM authentication * Fix an fd leak in ne_ssl_{,cli}cert_read (GnuTLS only) * Enable fast initialization in GnuTLS. (changes from 0.28.1) * Fix build on SCO OpenServer 5.0.x (thanks to Nico Kadel-Garcia) * Fix handling of Digest domain parameter values without a trailing slash * Fix build against apr-util's bundled libexpat.la in Subversion * Add --without-pakchois to configure (Arfrever Frehtes Taifersar Arahesis) * zh message catalog renamed to zh_CN, translation updated (Dongsheng Song) - disable make check, does not build on all archs - dropped patch: * digest.patch (included in update) * Mon Mar 03 2008 olh@suse.de - fix bug in digest domain parameter handling to fix svn commit * Fri Feb 29 2008 crrodriguez@suse.de - run the test suite to detect any possible regression * Fri Feb 15 2008 crrodriguez@suse.de - version 0.28.0 - Interface changes: * none, API and ABI backwards-compatible with 0.27.x - New interfaces: * ne_pkcs11.h: added basic PKCS#11 support (requires GnuTLS and pakchois) * ne_auth.h: added NE_AUTH_ALL and NE_AUTH_DEFAULT constants * ne_socket.h: added ne_sock_peer(), ne_sock_prebind(), ne_sock_cipher() * ne_session.h: NE_SESSFLAG_TLSSNI flag added; TLS SNI support is enabled by default, where supported; ne_set_localaddr() added * ne_request.h: added close_conn hooks (Robert J. van der Boon) * ne_basic.h: added ne_options2() - Other changes: * add Polish (pl) translation (Arfrever Frehtes Taifersar Arahesis) * add support for the 'domain' parameter in Digest authentication * fix fd leak in ne_sock_connect() error path (Andrew Teirney) * the FD_CLOEXEC flag is set on socket fds * fix timezone handling in ne_dates for more platforms (Alessandro Vesely) * fix ne_simple_propfind() to print XML namespaces in flat property values * fix ne_get_range() for unspecified end-range case (Henrik Holst) * fix ne_strclean() to be locale-independent and avoid possible Win32 crash * fix ne_get_error() to not "clean" localized error strings * fix ne_ssl_clicert_read() to fail for client certs missing cert or key * Mon Nov 26 2007 crrodriguez@suse.de - version 0.27.2 * Fix crash in GSSAPI Negotiate response header verification. - Cleanup excessive dependencies on -devel package. * Fri Oct 12 2007 ro@suse.de - add provides/obsoletes for neon-devel in libneon-devel after package rename * Tue Sep 25 2007 prusnak@suse.cz - update do 0.27.1 * New interfaces: - ne_session.h: ne_fill_proxy_uri() retrieves configured proxy, ne_hook_post_headers() adds a hook after response headers are read, ne_set_connect_timeout() sets session connection timeout, NE_SESSFLAG_RFC4918, NE_SESSFLAG_CONNAUTH flags added - ne_socket.h: ne_sock_connect_timeout() sets connection timeout, ne_iaddr_reverse() performs reverse DNS lookup - ne_string.h: ne_buffer_snprintf() prints to a buffer object - ne_xml.h: ne_xml_resolve_nspace() resolves namespace prefixes * Interface changes: - ne_set_notifier() replaces ne_set_status(); finer-grained and type-safe connection status information now provided; obsoletes ne_set_progress() - ne_xml_dispatch_request() now only invokes the XML parser for response entities with an XML content-type, following RFC 3023 rules - ne_acl_set() now takes a "const" entries array - LFS compatibility functions *64 removed: all functions taking an off_t now take an ne_off_t which is off64_t for LFS builds * GnuTLS support now mostly feature-complete with OpenSSL support: - greatly improved SSL distinguished name handling with GnuTLS >= 1.7.8 * Other changes: - descriptive error messages for authentication failures - SSPI support uses canonical DNS server name (Yves Martin) - fixes for handling of "stale" parameter in Digest authentication - added support for URIs in SSL server certificate subjectAltName field - fix compiler warnings with expat 2.x - fix handling of "Transfer-Encoding: identity" responses from privoxy * Fix regression in response progress counter for notifier/progress callbacks * Fix interface description for ne_set_notifier() callback; sr.total is set to -1 not 0 for an indeterminate response length * Tue Jul 17 2007 prusnak@suse.cz - update to 0.26.4 * Fix Negotiate Authentication-Info response header verification with GSSAPI * Fix multiple handlers with ne_add_{server,proxy}_auth (Werner Baumann) * Fix SSPI build with some versions of MinGW (Gisle Vanem) * Fix for SSPI segfault in response header verification (Mike DiCuccio) * Fix error strings for CONNECT SSL proxy tunnel request failure * Fix install-nls for VPATH builds (Hans Meine) * Fix use of unencrypted client certs with GnuTLS * Fix ne_lock* If: header insertion to use CRLF-terminated headers * Fix test suite failures on QNX by working around send() length limit * Fix handling of POSIX strerror_r failure case in ne_strerror * Fix alignment issues in test suite MD5 code * Sat Apr 28 2007 dmueller@suse.de - fix buildrequires * Tue Apr 17 2007 prusnak@suse.cz - updated spec file to reflect expat package split * Sat Mar 31 2007 rguenther@suse.de - add zlib-devel BuildRequires * Wed Jan 24 2007 prusnak@suse.cz - update to 0.26.3 * build fix for platforms without libintl.h * use Libs.private in neon.pc for newer versions of pkg-config * fix error reported for LOCK responses lacking a Lock-Token header * security fix CVE-2007-0157: fix buffer under-read in URI parser * fix handling of "nextnonce" parameter in Digest authentication - drop obsoleted patch from Jan 15 (included in update) * Mon Jan 15 2007 olh@suse.de - do not cast char pointers into int pointers (CVE-2007-0157 / #235083) * Thu Jul 20 2006 olh@suse.de - update to 0.26.1 new API - neon-devel requires openssl-devel zlib-devel expat * Wed Jan 25 2006 mls@suse.de - converted neededforbuild to BuildRequires * Wed Jun 29 2005 olh@suse.de - build with expat instead of libxml2, should speed up svn checkout of large files (#94606) * Wed Feb 02 2005 meissner@suse.de - fix build with gcc4, added 2 sentinel mark ups. * Sun Oct 17 2004 olh@suse.de - remove .so link from main package, its already in -devel * Sat Sep 25 2004 olh@suse.de - update for gcc4, -Wimplicit-prototypes and inline * Tue Jul 06 2004 olh@suse.de - update to 0.24.7 * Sun May 09 2004 olh@suse.de - add neon-CAN-2004-0398.patch (#39774) * Thu Apr 01 2004 olh@suse.de - add CAN-2004-0179.diff (#37716) * Thu Jan 22 2004 olh@suse.de - update for gcc3.4, -Wimplicit-prototypes and inline * Sat Jan 10 2004 adrian@suse.de - add %%defattr and %%run_ldconfig * Fri Nov 28 2003 mcihar@suse.cz - updated to 0.24.4, some highlights: * Major changes to XML interface * Major changes to SSL interface * Add a pkg-config file * Tons of fixes * Thu Apr 24 2003 olh@suse.de - update to 0.23.9 Changes in release 0.23.9: * neon-config exports includes needed for OpenSSL given by pkg-config. * ne_redirect_location will return NULL if redirect hooks have not been registered for the session (Ralf Mattes ). Changes in release 0.23.8: * On Linux, skip slow lookup for IPv6 addresses when IPv6 support is not loaded in kernel (thanks to Daniel Stenberg for this technique). * Update to autoconf 2.57 and libtool 1.4.3. * Sat Mar 01 2003 olh@suse.de - apply security fix from 0.23.8 * SECURITY: Prevent control characters from being included in the reason_phrase field filled in by ne_parse_statusline(), and in the session error string. * Fix digest auth response verification for >9 responses in session (bug manifests as "Server was not authenticated correctly" error). * Tue Jan 28 2003 olh@suse.de - update to 0.23.7 Changes in release 0.23.7: * Fix for handling EINTR during write() call (Sergey N Ushakov). * When available, use pkg-config to determine compiler flags needed to use OpenSSL headers and libraries. * Tue Jan 21 2003 olh@suse.de - update to 0.23.6 * Sat Oct 12 2002 olh@suse.de - update to 0.23.5 move interface documentation to -devel * Thu Sep 19 2002 olh@suse.de - update to 0.23.4, enable build with -g * Sat Aug 31 2002 poeml@suse.de - update to 0.22.0, needed by subversion * Fri Aug 09 2002 olh@suse.de - devel requires base package * Sat Jul 27 2002 adrian@suse.de - fix neededforbuild * Sun Jun 23 2002 olh@suse.de - update to 0.21.3 * Sat May 04 2002 olh@suse.de - initial SuSE package, version 0.20.0