From 579d523ead5619d287aa1393adb735dad55417194ad65b1e51a153beb44534b6 Mon Sep 17 00:00:00 2001 From: Christian Wittmer Date: Fri, 29 Jan 2016 01:31:13 +0000 Subject: [PATCH] Accepting request 356616 from home:computersalat:devel:security fix deps and missing help files OBS-URL: https://build.opensuse.org/request/show/356616 OBS-URL: https://build.opensuse.org/package/show/security/xca?expand=0&rev=6 --- xca-desktop.patch | 11 +++ xca-doc_Makefile.patch | 13 +++ xca.changes | 185 ++++++++++++++++++++++------------------- xca.spec | 34 ++++---- 4 files changed, 143 insertions(+), 100 deletions(-) create mode 100644 xca-desktop.patch create mode 100644 xca-doc_Makefile.patch diff --git a/xca-desktop.patch b/xca-desktop.patch new file mode 100644 index 0000000..c71ffa8 --- /dev/null +++ b/xca-desktop.patch @@ -0,0 +1,11 @@ +Index: misc/xca.desktop +=================================================================== +--- misc/xca.desktop.orig ++++ misc/xca.desktop +@@ -10,5 +10,5 @@ Comment[hr]=Grafičko korisničko sučel + Exec=xca %F + Icon=xca-32x32 + Terminal=false +-Categories=Application;Utility;Qt; ++Categories=Utility;DesktopUtility; + MimeType=application/x-xca-database;application/x-xca-template;application/x-x509-ca-cert;application/pkcs10;application/x-pkcs7-certificates;application/x-pkcs12; diff --git a/xca-doc_Makefile.patch b/xca-doc_Makefile.patch new file mode 100644 index 0000000..53ff844 --- /dev/null +++ b/xca-doc_Makefile.patch @@ -0,0 +1,13 @@ +Index: doc/Makefile +=================================================================== +--- doc/Makefile.orig ++++ doc/Makefile +@@ -23,7 +23,7 @@ install: $(doc) + install -m 755 -d $(destdir)$(htmldir) \ + $(destdir)$(mandir)/man1 + install -m 644 xca*.html $(destdir)$(htmldir) +- install *.1.gz $(destdir)/$(mandir)/man1 ++ install -m 644 *.1.gz $(destdir)/$(mandir)/man1 + + app: xca.html + mkdir -p $(APPDIR)/Resources diff --git a/xca.changes b/xca.changes index 874a144..a177e49 100644 --- a/xca.changes +++ b/xca.changes @@ -1,102 +1,117 @@ +------------------------------------------------------------------- +Fri Jan 29 01:07:37 UTC 2016 - chris@computersalat.de + +- fix Changelog +- fix deps + * openssl-devel >= 0.9.8 + * openssl >= 0.9.8 +- fix missing help files +- fix rpmlint + * spurious-executable-perm /usr/share/man/man1/xca.1.gz + * spurious-executable-perm /usr/share/man/man1/xca.1.gz +- add xca-doc_Makefile.patch + ------------------------------------------------------------------- Fri Oct 16 07:13:41 UTC 2015 - ecsos@opensuse.org - update to 1.3.2 - * Gentoo Bug #562288 linking fails - * Add OID resolver, move some Menu items to "Extra" - * SF. Bug. #81 Make xca qt5 compatible - * SF. Bug. #107 error:0D0680A8:asn1 encoding - * Don't validate notBefore and notAfter if they are disabled. - -- previous changes from 1.3.1 - * Fix endless loop while searching for a signer of a CRL - -- previous changes from 1.3.0 - * Update to OpenSSL 1.0.2d for Windows and MAC - * SF Bug #105 1.2.0 OS X Retina Display Support - * Digitaly sign Windows and MAC binaries with a valid certificate - * Refactor the context menu. Exporting many selected items - to the clipboard or a PEM file now works. Certificate renewal - and revocation - may now be performed on a batch of certificates. - * Feat. Reg. #83 Option to revoke old certificate when renewing - * Refactor revocation handling. All revocation information is - stored with the CA and may be modified. - Revoked certificates may now be deleted from the database - * Support nameConstraints, policyMappings, InhibitAnyPolicy, - PolicyConstraint and (OSCP)noCheck when transforming - certificates to templates or OpenSSL configs - * Fix SF Bug #104 Export to template introduces spaces - * Add option for disabling legacy Netscape extensions - * Support exporting SSH2 public key to the clipboard - * SF Bug #102 Weak entropy source used for key generation: - Use /dev/random, mouse/kbd entropy, token RNG - * SF Feat. Req. #80 Create new certificate, - based on existing certificate, same for requests - * Add Cert/Req Column for Signature Algorithm - * SF Feat. Req. #81 Show key size in New Certificate dialog - * Distinguish export from transform: - - Export writes to an external file, - - Transform generates another XCA item + * Gentoo Bug #562288 linking fails + * Add OID resolver, move some Menu items to "Extra" + * SF. Bug. #81 Make xca qt5 compatible + * SF. Bug. #107 error:0D0680A8:asn1 encoding + * Don't validate notBefore and notAfter if they are disabled. +- xca 1.3.1 + * Fix endless loop while searching for a signer of a CRL +- xca 1.3.0 + * Update to OpenSSL 1.0.2d for Windows and MAC + * SF Bug #105 1.2.0 OS X Retina Display Support + * Digitaly sign Windows and MAC binaries with a valid certificate + * Refactor the context menu. Exporting many selected items + to the clipboard or a PEM file now works. Certificate renewal + and revocation may now be performed on a batch of certificates. + * Feat. Reg. #83 Option to revoke old certificate when renewing + * Refactor revocation handling. All revocation information is + stored with the CA and may be modified. + Revoked certificates may now be deleted from the database + * Support nameConstraints, policyMappings, InhibitAnyPolicy, + PolicyConstraint and (OSCP)noCheck when transforming + certificates to templates or OpenSSL configs + * Fix SF Bug #104 Export to template introduces spaces + * Add option for disabling legacy Netscape extensions + * Support exporting SSH2 public key to the clipboard + * SF Bug #102 Weak entropy source used for key generation: + Use /dev/random, mouse/kbd entropy, token RNG + * SF Feat. Req. #80 Create new certificate, + based on existing certificate, same for requests + * Add Cert/Req Column for Signature Algorithm + * SF Feat. Req. #81 Show key size in New Certificate dialog + * Distinguish export from transform: + - Export writes to an external file, + - Transform generates another XCA item ------------------------------------------------------------------- Tue Mar 31 09:28:37 UTC 2015 - ecsos@opensuse.org - update to 1.2.0 - - Update to OpenSSL 1.0.2a for Windows and MAC drop brainpool + * Update to OpenSSL 1.0.2a for Windows and MAC drop brainpool extra builds - - Use CTRL +/- to change the font size in the view - - Add Row numbering for easy item counting - - Support SSH2 public key format for import and export - - Add support for SHA-224 - - add "xca extract" to export items from the database on the + * Use CTRL +/- to change the font size in the view + * Add Row numbering for easy item counting + * Support SSH2 public key format for import and export + * Add support for SHA-224 + * add "xca extract" to export items from the database on the commandline -- previous changes from 1.1.0 - - SF Bug #79 Template export from WinXP cannot be imported in - Linux and Mac OS X - - Support for Brainpool windows and MacOSX binaries - - SF Feat. Req. #70 ability to search certificates - - SF Feat. Req. #75 show SHA-256 digest - - RedHat Bug #1164340 - segfault when viewing a RHEL - entitlement certificate - - Database hardening - - Delete invalid items (on demand) - - Be more tolerant against database errors - - Gracefully handle and repair corrupt databases - - Add "xca_db_stat(.exe)" binary to all installations - - Translation updates - - Optionally allow hash algos not supported by the token - - Select whether to translate established x509 terms - - Finish Token EC and DSA support - generate, import, export, - sign - - SF Feat. Req. #57 More options for Distinguished Name - - Switch to autoconf for the configure script - - SF Feature Req. #76 Export private keys to clipboard - - EC Keys: show Curve name in table - - Support EC key generation on PKCS#11 token - - PKCS#11: Make EC and RSA signatures work - - PKCS#11: Fix reading EC keys from card - - SF Bug #82 Certificate Creation out of Spec - - SF Bug #95 XCA 1.0 only runs in French on a UK English Mac +------------------------------------------------------------------- +Thu Nov 27 10:46:50 UTC 2014 - chris@computersalat.de -- previous changes from 1.0.0 - - SF Bug #89 Validating CRL distribution point results in error - - SF Feature Req. #69 Create "Recent databases..." file menu item - - SF Bug #75 authorityInfoAccess set error - - SF Bug #88 Minor spelling error - - SF Bug #87 Unable to set default key length The Key generation +- update to 1.1.0 + * SF#xca#79 Template export from WinXP cannot be imported in Linux + and Mac OS X + * Support for Brainpool windows and MacOSX binaries + * SF Feat. Req. #70 ability to search certificates + * SF Feat. Req. #75 show SHA-256 digest + * RedHat Bug #1164340 - segfault when viewing a RHEL entitlement + certificate + * Database hardening + * Delete invalid items (on demand) + * Be more tolerant against database errors + * Gracefully handle and repair corrupt databases + * Add "xca_db_stat(.exe)" binary to all installations + * Translation updates + * Optionally allow hash algos not supported by the token + * Select whether to translate established x509 terms + * Finish Token EC and DSA support - generate, import, export, sign + * SF Feat. Req. #57 More options for Distinguished Name + * Switch to autoconf for the configure script + * SF Feature Req. #76 Export private keys to clipboard + * EC Keys: show Curve name in table + * Support EC key generation on PKCS#11 token + * PKCS#11: Make EC and RSA signatures work + * PKCS#11: Fix reading EC keys from card + * SF#xca#82 Certificate Creation out of Spec + * SF#xca#95 XCA 1.0 only runs in French on a UK English Mac +- xca 1.0.0 + * SF#xca#89 Validating CRL distribution point results in error + * SF Feature Req. #69 Create "Recent databases..." file menu item + * SF#xca#75 authorityInfoAccess set error + * SF#xca#88 Minor spelling error + * SF#xca#87 Unable to set default key length The Key generation dialog now allows to remember the current settings - - Do not interpret HTML tags in message boxes - - Overwite extensions from the PKCS#10 request by local - extensions. This avoids duplication errors and allows to - overwrite some extensions from the request - - SF Bug #78 replace path separators in export filenames - - SF Feature Req. #71 Add KDC Authentication OIDs to default - files - - SF Bug #82 Certificate Creation out of Spec - - Add Croatian translation - - SF Bug #83 Inappropriate gcc argument order in configure script + * Do not interpret HTML tags in message boxes + * Overwite extensions from the PKCS#10 request by local extensions + This avoids duplication errors and allows to overwrite some + extensions from the request + * SF#xca#78 replace path separators in export filenames + * SF Feature Req. #71 Add KDC Authentication OIDs to default files + * SF#xca#82 Certificate Creation out of Spec + * Add Croatian translation + * SF#xca#83 Inappropriate gcc argument order in configure script +- update dependencies + * qt >= 4.6.0 +- remove obsolete 0001-Fix-for-openssl-1.0.1i.patch +- replace xca-configure.patch with xca-linuxdoc.patch +- rebase xca-desktop.patch ------------------------------------------------------------------- Thu Oct 9 10:29:12 UTC 2014 - mrueckert@suse.de diff --git a/xca.spec b/xca.spec index 34cf4e6..eab0144 100644 --- a/xca.spec +++ b/xca.spec @@ -1,7 +1,7 @@ # # spec file for package xca # -# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2016 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -25,13 +25,15 @@ License: BSD-3-Clause Group: Productivity/Networking/Security Url: http://sourceforge.net/projects/xca/ Autoreqprov: on -Source: http://downloads.sourceforge.net/project/xca/xca/%{version}/%{name}-%{version}.tar.gz +Source: %{name}-%{version}.tar.gz +Patch0: %{name}-doc_Makefile.patch +Patch1: %{name}-desktop.patch BuildRoot: %{_tmppath}/%{name}-%{version}-build BuildRequires: gcc-c++ >= 3.1.0 %if 0%{?sles_version} == 10 -BuildRequires: qt-devel >= 4.3.0 +BuildRequires: qt-devel >= 4.6.0 %else -BuildRequires: libqt4-devel >= 4.3.0 +BuildRequires: libqt4-devel >= 4.6.0 %endif %if 0%{?suse_version} BuildRequires: libtool @@ -39,14 +41,14 @@ BuildRequires: update-desktop-files %else BuildRequires: libtool-ltdl-devel %endif -BuildRequires: openssl-devel >= 1.0.1 +BuildRequires: openssl-devel >= 0.9.8 BuildRequires: sgmltool %if 0%{?sles_version} == 10 -Requires: qt >= 4.3.0 +Requires: qt >= 4.6.0 %else -Requires: libqt4 >= 4.3.0 +Requires: libqt4 >= 4.6.0 %endif -Requires: openssl >= 1.0.1 +Requires: openssl >= 0.9.8 Requires: db %description @@ -57,31 +59,33 @@ Graphical certification authority is an interface for managing RSA keys and cert %prep %setup -n %{name}-%{version} +%patch0 +%patch1 %build -CFLAGS="$RPM_OPT_FLAGS" prefix=%{_prefix} lib=%{_lib} libdir=%{_libdir} mandir=%{_mandir} \ -./configure --docdir=%{_docdir}/%{name} - +#bootstrap +CFLAGS="$RPM_OPT_FLAGS" \ +%configure --docdir=%{_datadir}/%{name} %{__make} destdir=$PRM_BUILD_ROOT prefix=%{_prefix} %{?_smp_mflags} %install %{__make} destdir=$RPM_BUILD_ROOT prefix=/usr install -%suse_update_desktop_file -i -r %{name} Utility DesktopUtility +%suse_update_desktop_file -i %{name} DesktopUtility %clean %{__rm} -rf $RPM_BUILD_ROOT %files %defattr(-,root,root) -%doc AUTHORS changelog COPYRIGHT VERSION +%doc AUTHORS changelog COPYRIGHT VERSION %{_bindir}/%{name} -%{_bindir}/xca_db_stat +%{_bindir}/%{name}_db_stat %{_datadir}/applications/%{name}.desktop %{_datadir}/mime/packages/%{name}.xml %{_datadir}/pixmaps/%{name}* %{_datadir}/%{name} %{_mandir}/man1/%{name}.1.gz -%{_mandir}/man1/xca_db_stat.1.gz +%{_mandir}/man1/%{name}_db_stat.1.gz %changelog