SHA256
1
0
forked from pool/stunnel

Accepting request 250045 from home:asvetter:branches:security:Stunnel

Add following to changes
Cleanup of spec file.
Build for SLE11-SP3 with --disable-fips
Build for SLE11-Security-Module (with enabled fips)

OBS-URL: https://build.opensuse.org/request/show/250045
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=67
This commit is contained in:
2014-09-18 09:28:24 +00:00
committed by Git OBS Bridge
parent 63e520cd75
commit d6b64f849d
8 changed files with 469 additions and 65 deletions

View File

@@ -1,32 +1,28 @@
#
# spec file for package stunnel (Version 4.40)
# spec file for package stunnel
#
# Copyright (c) 2007 SUSE LINUX Products GmbH, Nuernberg, Germany.
# This file and all modifications and additions to the pristine
# package are under the same license as the package itself.
# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
# Please submit bugfixes or comments via http://bugs.opensuse.org/
#
# norootforbuild
Name: stunnel
BuildRequires: openssl openssl-devel zlib-devel
%if 0%{?suse_version:1}
BuildRequires: tcpd-devel
%else
BuildRequires: gcc-c++ tcp_wrappers
%endif
Summary: Universal SSL Tunnel
License: GNU Library General Public License v. 2.0 and 2.1 (LGPL)
Version: 5.01
Version: 5.03
Release: 0
Summary: Universal SSL Tunnel
License: GPL-2.0+
Group: Productivity/Networking/Security
URL: http://www.stunnel.org/
Autoreqprov: on
%if %{?suse_version:%suse_version}%{?!suse_version:0} > 800
Url: http://www.stunnel.org/
PreReq: /usr/sbin/useradd fileutils textutils %insserv_prereq %fillup_prereq
%endif
Source: ftp://ftp.stunnel.org/stunnel/%{name}-%{version}.tar.gz
Source1: stunnel.conf
Source2: stunnel.README
@@ -36,9 +32,10 @@ Source5: stunnel.service
Patch0: stunnel-listenqueue-option.patch
Patch1: stunnel3-binpath.patch
BuildRoot: %{_tmppath}/%{name}-%{version}-build
BuildRequires: openssl openssl-devel zlib-devel
BuildRequires: tcpd-devel
%define VENDOR openSUSE
BuildRequires: tcpd-devel zlib-devel
BuildRequires: libopenssl-devel
%if 0%{?suse_version} >= 1210
BuildRequires: systemd
%{?systemd_requires}
@@ -47,17 +44,16 @@ BuildRequires: systemd
%description
The stunnel program is designed to work as an SSL encryption wrapper
between a remote client and the local (inetd-startable) or remote
server. The concept is that by having non-SSL aware daemons running on
your system, you can easily set them to communicate with clients over a
secure SSL channel. Stunnel can be used to add SSL functionality to
between remote clients and local (inetd-startable) or remote
servers. The concept is that having non-SSL aware daemons running on
your system you can easily set them to communicate with clients over a
secure SSL channels. Stunnel can be used to add SSL functionality to
commonly used inetd daemons, such as POP-2, POP-3, and IMAP servers,
without any changes to the program code.
%package doc
License: GNU Library General Public License v. 2.0 and 2.1 (LGPL)
Group: Productivity/Networking/Security
Summary: Documentation for the universal SSL Tunnel
Group: Productivity/Networking/Security
Requires: stunnel = %{version}
%description doc
@@ -70,49 +66,36 @@ stunnel.
%patch1 -p0
%build
#autoreconf -fi
sed -i 's/-m 1770 -g nogroup//g' tools/Makefile.in
%if %{?suse_version:%suse_version}%{?!suse_version:99999} > 930
fPIE="-fPIC"
pie="-pie"
%if 0%{?suse_version} == 1110
%configure --disable-static --disable-fips --bindir=%{_sbindir}
%else
%configure --disable-static --bindir=%{_sbindir}
%endif
export CFLAGS="$RPM_OPT_FLAGS $fPIE"
%configure \
--enable-libwrap \
--localstatedir=/var
echo -e ".\n.\n.\n.\n.\n" | make LDADD="$pie -Wl,-z,defs,-z,relro"
make %{?_smp_mflags} LDADD="-pie -Wl,-z,defs,-z,relro"
%install
rm -rf $RPM_BUILD_ROOT
mkdir -p $RPM_BUILD_ROOT/%{_sbindir}
mkdir -p $RPM_BUILD_ROOT/var/lib/stunnel/{etc,dev,bin,sbin,%_lib,var/run}
mkdir -p $RPM_BUILD_ROOT/var/lib/stunnel
mkdir -p $RPM_BUILD_ROOT/etc/init.d/
mkdir -p $RPM_BUILD_ROOT/var/adm/fillup-templates
make \
confdir=%{_sysconfdir}/stunnel \
sbindir=%{_sbindir} \
libdir=%{_libdir} \
mandir=%{_mandir} \
docdir=%{_docdir}/%{name} \
DESTDIR=$RPM_BUILD_ROOT \
install
cp -p %{S:1} tools/stunnel.conf-sample
make install DESTDIR=$RPM_BUILD_ROOT
cp -p %{S:1} tools/stunnel.conf-sample.%VENDOR
cp -p %{S:2} README.%VENDOR
mkdir -p $RPM_BUILD_ROOT/var/adm/fillup-templates
cp -p %{S:3} $RPM_BUILD_ROOT/var/adm/fillup-templates/
%if 0%{?has_systemd}
install -D -m 0644 $RPM_SOURCE_DIR/stunnel.service $RPM_BUILD_ROOT/%_unitdir/stunnel.service
%else
mkdir -p $RPM_BUILD_ROOT/etc/init.d/
install -m 744 $RPM_SOURCE_DIR/stunnel.rc $RPM_BUILD_ROOT/etc/init.d/stunnel
ln -s ../../etc/init.d/stunnel $RPM_BUILD_ROOT/usr/sbin/rcstunnel
%endif
mv $RPM_BUILD_ROOT/%{_bindir}/* $RPM_BUILD_ROOT/%{_sbindir}
rm $RPM_BUILD_ROOT/%{_sysconfdir}/stunnel/stunnel.conf-sample
mv $RPM_BUILD_ROOT/%{_sysconfdir}/stunnel/stunnel.conf-sample tools/stunnel.conf-sample
rm $RPM_BUILD_ROOT/%{_libdir}/stunnel/*.la
rm -rf $RPM_BUILD_ROOT/usr/share/doc/packages/stunnel/INSTALL
rm -rf $RPM_BUILD_ROOT/usr/share/doc/packages/stunnel/INSTALL.WCE
rm -rf $RPM_BUILD_ROOT/usr/share/doc/packages/stunnel/INSTALL.W32
rm -rf $RPM_BUILD_ROOT/usr/share/doc/packages/stunnel/tools/stunnel.cnf
rm -rf $RPM_BUILD_ROOT/usr/share/doc/stunnel
mkdir -p $RPM_BUILD_ROOT/var/lib/stunnel/{bin,etc,dev,%_lib,sbin,var/run}
%clean
rm -rf $RPM_BUILD_ROOT
@@ -168,7 +151,6 @@ fi
%doc README.%VENDOR
%doc tools/ca.*
%doc tools/importCA.*
%doc tools/stunnel.cnf
%doc tools/stunnel.conf-sample
%{_sbindir}/*
%{_libdir}/stunnel