Accepting request 198188 from home:lnussel:branches:Base:System

- upgrade to 0.20.1 which is 0.19 declared stable
 * Extract compat trust data after we've changes
 * Skip compat extraction if running as non-root
 * Better failure messages when removing anchors

- new version 0.19.4
 * 'trust anchor' now adds/removes certificate anchors
 * 'trust list' lists trust policy stuff
 * 'p11-kit extract' is now 'trust extract'
 * 'p11-kit extract-trust' is now 'trust extract-compat'
 * Workarounds for working on broken zfsonlinux.org [#68525]
 * Add --with-module-config parameter to the configure script [#68122]
 * Add support for removing stored PKCS#11 objects in trust module

OBS-URL: https://build.opensuse.org/request/show/198188
OBS-URL: https://build.opensuse.org/package/show/Base:System/p11-kit?expand=0&rev=7

p11-kit.spec

@@ -22,7 +22,7 @@
 %define trustdir_static  %{pkidir_static}/trust
 
 Name:           p11-kit
-Version:        0.19.3
+Version:        0.20.1
 Release:        0
 Summary:        Library to work with PKCS#11 modules
 License:        BSD-3-Clause
@@ -88,6 +88,7 @@ to be installed intead of mozilla-nss-certs.
 
 %build
 %configure %--with-trust-paths=%{trustdir_cfg}:%{trustdir_static}
+make %{?_smp_mflags} -C trust asn
 make %{?_smp_mflags}
 
 %install
@@ -117,7 +118,7 @@ FIN
 ln -s %{_libdir}/pkcs11/p11-kit-trust.so %{buildroot}%{_libdir}/libnssckbi.so
 #
 # call update-ca-certificates when trust changes
-rm %{buildroot}%{_libdir}/%{name}/p11-kit-extract-trust
+rm %{buildroot}%{_libdir}/%{name}/trust-extract-compat
 ln -s ../../sbin/update-ca-certificates %{buildroot}%{_libdir}/%{name}/p11-kit-extract-trust
 export NO_BRP_STALE_LINK_ERROR=yes # *grr*
 
@@ -173,6 +174,7 @@ rm -rf %{buildroot}
 %doc %{_datadir}/gtk-doc/html/p11-kit/
 
 %files nss-trust
+%defattr(-,root,root)
 %{_libdir}/libnssckbi.so
 
 %changelog