source: spec/trunk/SPECS/nss.spec@ 1010

Last change on this file since 1010 was 747, checked in by dmik, 9 years ago

spec: nss: Release version 3.23.0-3.

File size: 40.0 KB
Line 
1# Note: this .spec is borrowed from:
2# nss-3.23.0-1.0.fc24.src.rpm
3# nss-util-3.23.0-1.0.fc24.src.rpm
4# nss-softokn-3.23.0-0.1.fc24.src.rpm
5
6%global nspr_version 4.12.0
7%global unsupported_tools_directory %{_libdir}/nss/unsupported-tools
8%global allTools "certutil cmsutil crlutil derdump modutil pk12util signtool signver ssltap vfychain vfyserv"
9
10# Produce .chk files for the final stripped binaries
11%define __spec_install_post \
12 %{?__debug_package:%{__debug_install_post}} \
13 %{__arch_install_post} \
14 %{__os_install_post} \
15 export BEGINLIBPATH=$RPM_BUILD_ROOT/%{_libdir} \
16 $RPM_BUILD_ROOT/%{unsupported_tools_directory}/shlibsign.exe -i $RPM_BUILD_ROOT/%{_libdir}/softokn3.dll \
17 $RPM_BUILD_ROOT/%{unsupported_tools_directory}/shlibsign.exe -i $RPM_BUILD_ROOT/%{_libdir}/freebl3.dll \
18 $RPM_BUILD_ROOT/%{unsupported_tools_directory}/shlibsign.exe -i $RPM_BUILD_ROOT/%{_libdir}/nssdbm3.dll \
19 $RPM_BUILD_ROOT/%{unsupported_tools_directory}/shlibsign.exe -i $RPM_BUILD_ROOT/%{_libdir}/softok3k.dll \
20 $RPM_BUILD_ROOT/%{unsupported_tools_directory}/shlibsign.exe -i $RPM_BUILD_ROOT/%{_libdir}/freebl3k.dll \
21 $RPM_BUILD_ROOT/%{unsupported_tools_directory}/shlibsign.exe -i $RPM_BUILD_ROOT/%{_libdir}/nssdbm3k.dll \
22%{nil}
23
24Summary: Network Security Services
25Name: nss
26Version: 3.23.0
27Release: 3%{?dist}
28License: MPLv2.0
29URL: http://www.mozilla.org/projects/security/pki/nss/
30Group: System Environment/Libraries
31Vendor: bww bitwise works GmbH
32
33Requires: nspr >= %{nspr_version}
34Requires: nss-util = %{version}-%{release}
35Requires: nss-softokn = %{version}-%{release}
36# @todo remove?
37#Requires: nss-system-init
38BuildRequires: nspr-devel >= %{nspr_version}
39BuildRequires: sqlite-devel
40BuildRequires: zlib-devel
41BuildRequires: pkgconfig
42BuildRequires: gawk
43#BuildRequires: psmisc
44BuildRequires: perl
45
46%define svn_url http://svn.netlabs.org/repos/ports/nss/trunk
47%define svn_rev 1529
48
49Source: %{name}-%{version}%{?svn_rev:-r%{svn_rev}}.zip
50
51BuildRequires: gcc make subversion zip
52
53#Source0: %{name}-%{version}.tar.gz
54Source1: nss.pc.in
55Source2: nss-config.in
56#Source3: blank-cert8.db
57#Source4: blank-key3.db
58#Source5: blank-secmod.db
59#Source6: blank-cert9.db
60#Source7: blank-key4.db
61#Source8: system-pkcs11.txt
62#Source9: setup-nsssysinit.sh
63#Source12: %{name}-pem-20160308.tar.bz2
64# @todo We don't have xmlto yet.
65#Source20: nss-config.xml
66#Source21: setup-nsssysinit.xml
67#Source22: pkcs11.txt.xml
68#Source23: cert8.db.xml
69#Source24: cert9.db.xml
70#Source25: key3.db.xml
71#Source26: key4.db.xml
72#Source27: secmod.db.xml
73
74# From nss-util.spec:
75Source202: nss-util.pc.in
76Source203: nss-util-config.in
77
78# From nss-softokn.spec:
79Source302: nss-softokn.pc.in
80Source303: nss-softokn-config.in
81
82# DEF files to create forwarders for legacy DLLs (nss-legacy)
83Source401: nss3k.def
84Source402: nssckbik.def
85Source403: smime3k.def
86Source404: ssl3k.def
87# DEF files to create forwarders for legacy DLLs (nss-util-legacy)
88Source411: nssuti3k.def
89# DEF files to create forwarders for legacy DLLs (nss-softokn-legacy)
90Source421: nssdbm3k.def
91Source422: softok3k.def
92# DEF files to create forwarders for legacy DLLs (nss-softokn-freebl-legacy)
93Source431: freebl3k.def
94
95#Patch3: renegotiate-transitional.patch
96# Upstream: https://bugzilla.mozilla.org/show_bug.cgi?id=402712
97#Patch6: nss-enable-pem.patch
98# Below reference applies to most pem module related patches
99# Upstream: https://bugzilla.mozilla.org/show_bug.cgi?id=617723
100#Patch16: nss-539183.patch
101# must statically link pem against the freebl in the buildroot
102# Needed only when freebl on tree has new APIS
103#Patch25: nsspem-use-system-freebl.patch
104# TODO: Remove this patch when the ocsp test are fixed
105#Patch40: nss-3.14.0.0-disble-ocsp-test.patch
106# TODO remove when we switch to building nss without softoken
107#Patch49: nss-skip-bltest-and-fipstest.patch
108# This patch uses the gcc-iquote dir option documented at
109# http://gcc.gnu.org/onlinedocs/gcc/Directory-Options.html#Directory-Options
110# to place the in-tree directories at the head of the list of list of directories
111# to be searched for for header files. This ensures a build even when system
112# headers are older. Such is the case when starting an update with API changes or even private export changes.
113# Once the buildroot aha been bootstrapped the patch may be removed but it doesn't hurt to keep it.
114#Patch50: iquote.patch
115#Patch52: disableSSL2libssl.patch
116#Patch53: disableSSL2tests.patch
117#Patch54: tstclnt-ssl2-off-by-default.patch
118#Patch55: skip_stress_TLS_RC4_128_with_MD5.patch
119# Local patch for TLS_ECDHE_{ECDSA|RSA}_WITH_3DES_EDE_CBC_SHA ciphers
120#Patch58: rhbz1185708-enable-ecc-3des-ciphers-by-default.patch
121
122# From nss-util.spec:
123#Patch202: hasht-dont-include-prtypes.patch
124#Patch203: pkcs1sig-include-prtypes.patch
125# TODO: investigate whether this patch should also be applied to
126# nss-softokn and nss and whether it should be submitted upstream.
127# First ensure that it won't cause any FIPS tests breakage.
128#Patch204: nss-util-3.19.3-ldflags.patch
129
130# From nss-softokn.spec:
131# Patch adapted from rhel-7
132# Upstream: https://bugzilla.mozilla.org/show_bug.cgi?id=1236720
133#Patch311: nss-softokn-add_encrypt_derive.patch
134
135%description
136Network Security Services (NSS) is a set of libraries designed to
137support cross-platform development of security-enabled client and
138server applications. Applications built with NSS can support SSL v2
139and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509
140v3 certificates, and other security standards.
141
142%package tools
143Summary: Tools for the Network Security Services
144Group: System Environment/Base
145Requires: %{name} = %{version}-%{release}
146
147%description tools
148Network Security Services (NSS) is a set of libraries designed to
149support cross-platform development of security-enabled client and
150server applications. Applications built with NSS can support SSL v2
151and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509
152v3 certificates, and other security standards.
153
154Install the nss-tools package if you need command-line tools to
155manipulate the NSS certificate and key database.
156
157#%package sysinit
158#Summary: System NSS Initialization
159#Group: System Environment/Base
160## providing nss-system-init without version so that it can
161## be replaced by a better one, e.g. supplied by the os vendor
162#Provides: nss-system-init
163#Requires: %{name} = %{version}-%{release}
164#Requires(post): coreutils, sed
165
166#%description sysinit
167#Default Operating System module that manages applications loading
168#NSS globally on the system. This module loads the system defined
169#PKCS #11 modules for NSS and chains with other NSS modules to load
170#any system or user configured modules.
171
172%package devel
173Summary: Development libraries for Network Security Services
174Group: Development/Libraries
175Provides: %{name}-static = %{version}-%{release}
176Requires: %{name} = %{version}-%{release}
177Requires: %{name}-util-devel = %{version}-%{release}
178Requires: %{name}-softokn-devel = %{version}-%{release}
179Requires: nspr-devel >= %{nspr_version}
180Requires: pkgconfig
181# @todo We don't have xmlto yet.
182#BuildRequires: xmlto
183
184%description devel
185Header and Library files for doing development with Network Security Services.
186
187%package pkcs11-devel
188Summary: Development libraries for PKCS #11 (Cryptoki) using NSS
189Group: Development/Libraries
190Provides: nss-pkcs11-devel-static = %{version}-%{release}
191Requires: %{name}-devel = %{version}-%{release}
192Requires: %{name}-softokn-freebl-devel = %{version}-%{release}
193
194%description pkcs11-devel
195Library files for developing PKCS #11 modules using basic NSS
196low level services.
197
198%package legacy
199Summary: Legacy libraries for Netscape Security Services
200Group: System Environment/Libraries
201Requires: %{name} = %{version}-%{release}
202
203%description legacy
204NSS forwarder libraries with old DLL names ending with 'k'.
205
206# From nss-util.spec:
207
208%package util
209Summary: Network Security Services Utilities Library
210Group: System Environment/Libraries
211Requires: nspr >= %{nspr_version}
212
213%description util
214Utilities for Network Security Services and the Softoken module
215
216# We shouln't need to have a devel subpackage as util will be used in the
217# context of nss or nss-softoken. keeping to please rpmlint.
218#
219%package util-devel
220Summary: Development libraries for Network Security Services Utilities
221Group: Development/Libraries
222Requires: %{name}-util = %{version}-%{release}
223Requires: nspr-devel >= %{nspr_version}
224Requires: pkgconfig
225
226%description util-devel
227Header and library files for doing development with Network Security Services.
228
229%package util-legacy
230Summary: Legacy libraries for Netscape Security Services Utilities.
231Group: System Environment/Libraries
232Requires: %{name}-util = %{version}-%{release}
233
234%description util-legacy
235NSS Utilities forwarder libraries with old DLL names ending with 'k'.
236
237# From nss-softokn.spec:
238
239%package softokn
240Summary: Network Security Services Softoken Module
241Group: System Environment/Libraries
242Requires: nspr >= %{nspr_version}
243Requires: %{name}-util = %{version}-%{release}
244Requires: %{name}-softokn-freebl = %{version}-%{release}
245
246%description softokn
247Network Security Services Softoken Cryptographic Module
248
249%package softokn-freebl
250Summary: Freebl library for the Network Security Services
251Group: System Environment/Base
252Conflicts: nss < 3.12.2.99.3-5
253Conflicts: prelink < 0.4.3
254Conflicts: filesystem < 3
255
256%description softokn-freebl
257NSS Softoken Cryptographic Module Freebl Library
258
259Install the nss-softokn-freebl package if you need the freebl
260library.
261
262%package softokn-freebl-devel
263Summary: Header and Library files for doing development with the Freebl library for NSS
264Group: System Environment/Base
265Provides: %{name}-softokn-freebl-static = %{version}-%{release}
266Requires: %{name}-softokn-freebl = %{version}-%{release}
267
268%description softokn-freebl-devel
269NSS Softoken Cryptographic Module Freebl Library Development Tools
270This package supports special needs of some PKCS #11 module developers and
271is otherwise considered private to NSS. As such, the programming interfaces
272may change and the usual NSS binary compatibility commitments do not apply.
273Developers should rely only on the officially supported NSS public API.
274
275%package softokn-devel
276Summary: Development libraries for Network Security Services
277Group: Development/Libraries
278Requires: %{name}-softokn = %{version}-%{release}
279Requires: %{name}-softokn-freebl-devel = %{version}-%{release}
280Requires: nspr-devel >= %{nspr_version}
281Requires: %{name}-util-devel = %{version}-%{release}
282Requires: pkgconfig
283
284%description softokn-devel
285Header and library files for doing development with Network Security Services.
286
287%package softokn-legacy
288Summary: Legacy libraries for Netscape Security Services Softoken Cryptographic Modile.
289Group: System Environment/Libraries
290Requires: %{name}-softoken = %{version}-%{release}
291
292%description softokn-legacy
293NSS Softoken Cryptographic Modile forwarder libraries with old DLL names ending with 'k'.
294
295%package softokn-freebl-legacy
296Summary: Legacy libraries for Netscape Security Services Freebl.
297Group: System Environment/Libraries
298Requires: %{name}-softoken-freebl = %{version}-%{release}
299
300%description softokn-freebl-legacy
301NSS Freebl forwarder libraries with old DLL names ending with 'k'.
302
303%debug_package
304
305# Makes no sense to provide .dbg files for forwarder DLLs
306%define _strip_opts --debuginfo -x "*k.dll"
307
308%prep
309%if %{?svn_rev:%(sh -c 'if test -f "%{_sourcedir}/%{name}-%{version}-r%{svn_rev}.zip" ; then echo 1 ; else echo 0 ; fi')}%{!?svn_rev):0}
310%setup -q
311%else
312%setup -n "%{name}-%{version}" -Tc
313svn export %{?svn_rev:-r %{svn_rev}} %{svn_url} . --force
314rm -f "%{_sourcedir}/%{name}-%{version}%{?svn_rev:-r%{svn_rev}}.zip"
315(cd .. && zip -SrX9 "%{_sourcedir}/%{name}-%{version}%{?svn_rev:-r%{svn_rev}}.zip" "%{name}-%{version}")
316%endif
317
318#%patch2 -p0 -b .relro
319#%patch3 -p0 -b .transitional
320#%patch6 -p0 -b .libpem
321#%patch16 -p0 -b .539183
322# link pem against buildroot's freebl, essential when mixing and matching
323#%patch25 -p0 -b .systemfreebl
324#%patch40 -p0 -b .noocsptest
325#%patch47 -p0 -b .templates
326#%patch49 -p0 -b .skipthem
327#%patch50 -p0 -b .iquote
328#pushd nss
329#%patch52 -p1 -b .disableSSL2libssl
330#%patch53 -p1 -b .disableSSL2tests
331#popd
332#%patch54 -p0 -b .ssl2_off
333#%patch55 -p1 -b .skip_stress_tls_rc4_128_with_md5
334#%patch58 -p0 -b .1185708_3des
335
336# @#todo remove?
337#pushd nss/tests/ssl
338## Create versions of sslcov.txt and sslstress.txt that disable tests
339## for SSL2 and EXPORT ciphers.
340#cat sslcov.txt| sed -r "s/^([^#].*EXPORT|^[^#].*SSL2)/#disabled \1/" > sslcov.noSSL2orExport.txt
341#cat sslstress.txt| sed -r "s/^([^#].*EXPORT|^[^#].*SSL2)/#disabled \1/" > sslstress.noSSL2orExport.txt
342#popd
343
344# From nss-util.spec:
345#%patch202 -p0 -b .prtypes
346#%patch203 -p0 -b .include_prtypes
347#%patch204 -p1 -b .ldflags
348
349# From nss-softokn.spec:
350# activate if needed when doing a major update with new apis
351#pushd nss
352#%patch311 -p1 -b .add_encrypt_derive
353#popd
354
355# Prepare forwarder DLLs.
356for m in %{SOURCE401} %{SOURCE402} %{SOURCE403} %{SOURCE404} %{SOURCE411} %{SOURCE421} %{SOURCE422} %{SOURCE431}; do
357 cp ${m} .
358done
359
360%build
361
362# OS/2 compatiblity
363unset PROGRAMS
364
365# Enable high memory support
366MOZ_OS2_HIGH_MEMORY=1
367export MOZ_OS2_HIGH_MEMORY
368
369# Force debug symbols to make debug_package happy
370MOZ_DEBUG_SYMBOLS=1
371export MOZ_DEBUG_SYMBOLS
372# MOZ_DEBUG is necessary to shut up premature debug symbol extraction
373MOZ_DEBUG=1
374export MOZ_DEBUG
375
376# Make sure build output lands in ./dist
377export BUILD_TREE=`echo "%{_builddir}/%{?buildsubdir}" | tr '\\\' /`
378
379export NSS_NO_SSL2_NO_EXPORT=1
380
381NSS_NO_PKCS11_BYPASS=1
382export NSS_NO_PKCS11_BYPASS
383
384# We don't need a freebl/softoken build w/o NSPR
385#FREEBL_NO_DEPEND=1
386#export FREEBL_NO_DEPEND
387
388# Must export FREEBL_LOWHASH=1 for nsslowhash.h so that it gets
389# copied to dist and the rpm install phase can find it
390# This due of the upstream changes to fix
391# https://bugzilla.mozilla.org/show_bug.cgi?id=717906
392# @todo this fails (missing -lfreebl3, needs investigation)
393#FREEBL_LOWHASH=1
394#export FREEBL_LOWHASH
395
396# Enable compiler optimizations and disable debugging code
397BUILD_OPT=1
398export BUILD_OPT
399
400# Uncomment to disable optimizations
401#RPM_OPT_FLAGS=`echo $RPM_OPT_FLAGS | sed -e 's/-O2/-O0/g'`
402#export RPM_OPT_FLAGS
403
404# Generate symbolic info for debuggers
405XCFLAGS=$RPM_OPT_FLAGS
406export XCFLAGS
407
408PKG_CONFIG_ALLOW_SYSTEM_LIBS=1
409PKG_CONFIG_ALLOW_SYSTEM_CFLAGS=1
410
411export PKG_CONFIG_ALLOW_SYSTEM_LIBS
412export PKG_CONFIG_ALLOW_SYSTEM_CFLAGS
413
414NSPR_INCLUDE_DIR=`/@unixroot/usr/bin/pkg-config --cflags-only-I nspr | sed 's/-I//'`
415NSPR_LIB_DIR=%{_libdir}
416
417export NSPR_INCLUDE_DIR
418export NSPR_LIB_DIR
419
420NSS_USE_SYSTEM_SQLITE=1
421export NSS_USE_SYSTEM_SQLITE
422
423USE_SYSTEM_ZLIB=1
424export USE_SYSTEM_ZLIB
425
426ZLIB_LIBS=-lz
427export ZLIB_LIBS
428
429# Disable external google tests as we lack std::wcslen in the gcc RPM
430NSS_DISABLE_GTESTS=1
431export NSS_DISABLE_GTESTS
432
433# uncomment if the iquote patch is activated
434#export IN_TREE_FREEBL_HEADERS_FIRST=1
435
436##### phase 2: build the rest of nss
437# nss supports pluggable ecc with more than suite-b
438#export NSS_ECC_MORE_THAN_SUITE_B=1
439
440export NSS_BLTEST_NOT_AVAILABLE=1
441%{__make} -C ./coreconf
442%{__make} -C ./lib/dbm
443%{__make} -C .
444unset NSS_BLTEST_NOT_AVAILABLE
445
446# build the man pages clean
447%{__make} clean_docs build_docs
448
449# and copy them to the dist directory for %%install to find them
450%{__mkdir_p} ./dist/docs/nroff
451%{__cp} ./doc/nroff/* ./dist/docs/nroff
452
453# Set up our package file
454# The nspr_version and nss_{util|softokn}_version globals used
455# here match the ones nss has for its Requires.
456%{__mkdir_p} ./dist/pkgconfig
457%{__cat} %{SOURCE1} | sed -e "s,%%libdir%%,%{_libdir},g" \
458 -e "s,%%prefix%%,%{_prefix},g" \
459 -e "s,%%exec_prefix%%,%{_prefix},g" \
460 -e "s,%%includedir%%,%{_includedir}/nss3,g" \
461 -e "s,%%NSS_VERSION%%,%{version},g" \
462 -e "s,%%NSPR_VERSION%%,%{nspr_version},g" \
463 -e "s,%%NSSUTIL_VERSION%%,%{version},g" \
464 -e "s,%%SOFTOKEN_VERSION%%,%{version},g" > \
465 ./dist/pkgconfig/nss.pc
466
467NSS_VMAJOR=`cat lib/nss/nss.h | grep "#define.*NSS_VMAJOR" | awk '{print $3}'`
468NSS_VMINOR=`cat lib/nss/nss.h | grep "#define.*NSS_VMINOR" | awk '{print $3}'`
469NSS_VPATCH=`cat lib/nss/nss.h | grep "#define.*NSS_VPATCH" | awk '{print $3}'`
470
471export NSS_VMAJOR
472export NSS_VMINOR
473export NSS_VPATCH
474
475%{__cat} %{SOURCE2} | sed -e "s,@libdir@,%{_libdir},g" \
476 -e "s,@prefix@,%{_prefix},g" \
477 -e "s,@exec_prefix@,%{_prefix},g" \
478 -e "s,@includedir@,%{_includedir}/nss3,g" \
479 -e "s,@MOD_MAJOR_VERSION@,$NSS_VMAJOR,g" \
480 -e "s,@MOD_MINOR_VERSION@,$NSS_VMINOR,g" \
481 -e "s,@MOD_PATCH_VERSION@,$NSS_VPATCH,g" \
482 > ./dist/pkgconfig/nss-config
483
484chmod 755 ./dist/pkgconfig/nss-config
485
486# From nss-util.spec:
487# Set up our package file
488%{__mkdir_p} ./dist/pkgconfig
489%{__cat} %{SOURCE202} | sed -e "s,%%libdir%%,%{_libdir},g" \
490 -e "s,%%prefix%%,%{_prefix},g" \
491 -e "s,%%exec_prefix%%,%{_prefix},g" \
492 -e "s,%%includedir%%,%{_includedir}/nss3,g" \
493 -e "s,%%NSPR_VERSION%%,%{nspr_version},g" \
494 -e "s,%%NSSUTIL_VERSION%%,%{version},g" > \
495 ./dist/pkgconfig/nss-util.pc
496
497NSSUTIL_VMAJOR=`cat lib/util/nssutil.h | grep "#define.*NSSUTIL_VMAJOR" | awk '{print $3}'`
498NSSUTIL_VMINOR=`cat lib/util/nssutil.h | grep "#define.*NSSUTIL_VMINOR" | awk '{print $3}'`
499NSSUTIL_VPATCH=`cat lib/util/nssutil.h | grep "#define.*NSSUTIL_VPATCH" | awk '{print $3}'`
500
501export NSSUTIL_VMAJOR
502export NSSUTIL_VMINOR
503export NSSUTIL_VPATCH
504
505%{__cat} %{SOURCE203} | sed -e "s,@libdir@,%{_libdir},g" \
506 -e "s,@prefix@,%{_prefix},g" \
507 -e "s,@exec_prefix@,%{_prefix},g" \
508 -e "s,@includedir@,%{_includedir}/nss3,g" \
509 -e "s,@MOD_MAJOR_VERSION@,$NSSUTIL_VMAJOR,g" \
510 -e "s,@MOD_MINOR_VERSION@,$NSSUTIL_VMINOR,g" \
511 -e "s,@MOD_PATCH_VERSION@,$NSSUTIL_VPATCH,g" \
512 > ./dist/pkgconfig/nss-util-config
513
514chmod 755 ./dist/pkgconfig/nss-util-config
515
516# From nss-softokn.spec:
517# Set up our package file
518# The nspr_version and nss_util_version globals used here
519# must match the ones nss-softokn has for its Requires.
520%{__mkdir_p} ./dist/pkgconfig
521%{__cat} %{SOURCE302} | sed -e "s,%%libdir%%,%{_libdir},g" \
522 -e "s,%%prefix%%,%{_prefix},g" \
523 -e "s,%%exec_prefix%%,%{_prefix},g" \
524 -e "s,%%includedir%%,%{_includedir}/nss3,g" \
525 -e "s,%%NSPR_VERSION%%,%{nspr_version},g" \
526 -e "s,%%NSSUTIL_VERSION%%,%{version},g" \
527 -e "s,%%SOFTOKEN_VERSION%%,%{version},g" > \
528 ./dist/pkgconfig/nss-softokn.pc
529
530SOFTOKEN_VMAJOR=`cat lib/softoken/softkver.h | grep "#define.*SOFTOKEN_VMAJOR" | awk '{print $3}'`
531SOFTOKEN_VMINOR=`cat lib/softoken/softkver.h | grep "#define.*SOFTOKEN_VMINOR" | awk '{print $3}'`
532SOFTOKEN_VPATCH=`cat lib/softoken/softkver.h | grep "#define.*SOFTOKEN_VPATCH" | awk '{print $3}'`
533
534export SOFTOKEN_VMAJOR
535export SOFTOKEN_VMINOR
536export SOFTOKEN_VPATCH
537
538%{__cat} %{SOURCE303} | sed -e "s,@libdir@,%{_libdir},g" \
539 -e "s,@prefix@,%{_prefix},g" \
540 -e "s,@exec_prefix@,%{_prefix},g" \
541 -e "s,@includedir@,%{_includedir}/nss3,g" \
542 -e "s,@MOD_MAJOR_VERSION@,$SOFTOKEN_VMAJOR,g" \
543 -e "s,@MOD_MINOR_VERSION@,$SOFTOKEN_VMINOR,g" \
544 -e "s,@MOD_PATCH_VERSION@,$SOFTOKEN_VPATCH,g" \
545 > ./dist/pkgconfig/nss-softokn-config
546
547chmod 755 ./dist/pkgconfig/nss-softokn-config
548
549# @todo remove?
550#%{__cat} %{SOURCE9} > ./dist/pkgconfig/setup-nsssysinit.sh
551#chmod 755 ./dist/pkgconfig/setup-nsssysinit.sh
552
553%{__cp} ./lib/ckfw/nssck.api ./dist/private/nss/
554
555date +"%e %B %Y" | tr -d '\n' > date.xml
556echo -n %{version} > version.xml
557
558# @todo We don't have xmlto yet.
559## configuration files and setup script
560#for m in %{SOURCE20} %{SOURCE21} %{SOURCE22}; do
561# cp ${m} .
562#done
563#for m in nss-config.xml setup-nsssysinit.xml pkcs11.txt.xml; do
564# xmlto man ${m}
565#done
566#
567## nss databases considered to be configuration files
568#for m in %{SOURCE23} %{SOURCE24} %{SOURCE25} %{SOURCE26} %{SOURCE27}; do
569# cp ${m} .
570#done
571#for m in cert8.db.xml cert9.db.xml key3.db.xml key4.db.xml secmod.db.xml; do
572# xmlto man ${m}
573#done
574
575%check
576# @todo Disable check since it fails so far.
577exit 0
578
579if [ ${DISABLETEST:-0} -eq 1 ]; then
580 echo "testing disabled"
581 exit 0
582fi
583
584# Begin -- copied from the build section
585
586# inform the ssl test scripts that SSL2 is disabled
587export NSS_NO_SSL2_NO_EXPORT=1
588
589# We don't need a freebl/softoken build w/o NSPR
590#FREEBL_NO_DEPEND=1
591#export FREEBL_NO_DEPEND
592
593BUILD_OPT=1
594export BUILD_OPT
595
596export NSS_BLTEST_NOT_AVAILABLE=1
597
598# End -- copied from the build section
599
600# enable the following line to force a test failure
601# find ./nss -name \*.chk | xargs rm -f
602
603# Run test suite.
604# In order to support multiple concurrent executions of the test suite
605# (caused by concurrent RPM builds) on a single host,
606# we'll use a random port. Also, we want to clean up any stuck
607# selfserv processes. If process name "selfserv" is used everywhere,
608# we can't simply do a "killall selfserv", because it could disturb
609# concurrent builds. Therefore we'll do a search and replace and use
610# a different process name.
611# Using xargs doesn't mix well with spaces in filenames, in order to
612# avoid weird quoting we'll require that no spaces are being used.
613
614SPACEISBAD=`find ./tests | grep -c ' '` ||:
615if [ $SPACEISBAD -ne 0 ]; then
616 echo "error: filenames containing space are not supported (xargs)"
617 exit 1
618fi
619MYRAND=`perl -e 'print 9000 + int rand 1000'`; echo $MYRAND ||:
620RANDSERV=selfserv_${MYRAND}; echo $RANDSERV ||:
621DISTBINDIR=`ls -d ./dist/*.OBJ/bin`; echo $DISTBINDIR ||:
622pushd `pwd`
623cd $DISTBINDIR
624ln -s selfserv $RANDSERV
625popd
626# man perlrun, man perlrequick
627# replace word-occurrences of selfserv with selfserv_$MYRAND
628find ./tests -type f |\
629 grep -v "\.db$" |grep -v "\.crl$" | grep -v "\.crt$" |\
630 grep -vw CVS |xargs grep -lw selfserv |\
631 xargs -l perl -pi -e "s/\bselfserv\b/$RANDSERV/g" ||:
632
633killall $RANDSERV || :
634
635rm -rf ./tests_results
636pushd ./tests/
637# all.sh is the test suite script
638
639# don't need to run all the tests when testing packaging
640# nss_cycles: standard pkix upgradedb sharedb
641%define nss_tests "libpkix cert dbtests tools fips sdr crmf smime ssl ocsp merge pkits chains"
642# nss_ssl_tests: crl bypass_normal normal_bypass normal_fips fips_normal iopr
643# nss_ssl_run: cov auth stress
644#
645# Uncomment these lines if you need to temporarily
646# disable some test suites for faster test builds
647# global nss_ssl_tests "normal_fips"
648# global nss_ssl_run "cov auth"
649
650SKIP_NSS_TEST_SUITE=`echo $SKIP_NSS_TEST_SUITE`
651
652if [ "x$SKIP_NSS_TEST_SUITE" == "x" ]; then
653 HOST=localhost DOMSUF=localdomain PORT=$MYRAND NSS_CYCLES=%{?nss_cycles} NSS_TESTS=%{?nss_tests} NSS_SSL_TESTS=%{?nss_ssl_tests} NSS_SSL_RUN=%{?nss_ssl_run} ./all.sh
654else
655 echo "skipped test suite"
656fi
657
658popd
659
660# Normally, the grep exit status is 0 if selected lines are found and 1 otherwise,
661# Grep exits with status greater than 1 if an error ocurred.
662# If there are test failures we expect TEST_FAILURES > 0 and GREP_EXIT_STATUS = 0,
663# With no test failures we expect TEST_FAILURES = 0 and GREP_EXIT_STATUS = 1, whereas
664# GREP_EXIT_STATUS > 1 would indicate an error in grep such as failure to find the log file.
665killall $RANDSERV || :
666
667if [ "x$SKIP_NSS_TEST_SUITE" == "x" ]; then
668 TEST_FAILURES=$(grep -c FAILED ./tests_results/security/localhost.1/output.log) || GREP_EXIT_STATUS=$?
669else
670 TEST_FAILURES=0
671 GREP_EXIT_STATUS=1
672fi
673
674if [ ${GREP_EXIT_STATUS:-0} -eq 1 ]; then
675 echo "okay: test suite detected no failures"
676else
677 if [ ${GREP_EXIT_STATUS:-0} -eq 0 ]; then
678 # while a situation in which grep return status is 0 and it doesn't output
679 # anything shouldn't happen, set the default to something that is
680 # obviously wrong (-1)
681 echo "error: test suite had ${TEST_FAILURES:--1} test failure(s)"
682 exit 1
683 else
684 if [ ${GREP_EXIT_STATUS:-0} -eq 2 ]; then
685 echo "error: grep has not found log file"
686 exit 1
687 else
688 echo "error: grep failed with exit code: ${GREP_EXIT_STATUS}"
689 exit 1
690 fi
691 fi
692fi
693echo "test suite completed"
694
695%install
696
697%{__rm} -rf $RPM_BUILD_ROOT
698
699# There is no make install target so we'll do it ourselves.
700
701%{__mkdir_p} $RPM_BUILD_ROOT/%{_includedir}/nss3
702%{__mkdir_p} $RPM_BUILD_ROOT/%{_includedir}/nss3/templates
703%{__mkdir_p} $RPM_BUILD_ROOT/%{_bindir}
704%{__mkdir_p} $RPM_BUILD_ROOT/%{_libdir}
705%{__mkdir_p} $RPM_BUILD_ROOT/%{unsupported_tools_directory}
706%{__mkdir_p} $RPM_BUILD_ROOT/%{_libdir}/pkgconfig
707%if %{defined rhel}
708# not needed for rhel and its derivatives only fedora
709%else
710# because of the pp.1 conflict with perl-PAR-Packer
711%{__mkdir_p} $RPM_BUILD_ROOT%{_datadir}/doc/nss-tools
712%endif
713
714mkdir -p $RPM_BUILD_ROOT%{_mandir}/man1
715mkdir -p $RPM_BUILD_ROOT%{_mandir}/man5
716
717# Copy the binary libraries we want
718for file in nssckbi nss3 smime3 ssl3 # nsspem
719do
720 %{__install} -p -m 755 dist/*.OBJ/lib/$file.dll $RPM_BUILD_ROOT/%{_libdir}
721 test -f dist/*.OBJ/lib/$file.a && \
722 %{__install} -p -m 644 dist/*.OBJ/lib/$file.a $RPM_BUILD_ROOT/%{_libdir}
723done
724
725# From nss-util.spec:
726for file in nssutil3
727do
728 %{__install} -p -m 755 dist/*.OBJ/lib/$file.dll $RPM_BUILD_ROOT/%{_libdir}
729 test -f dist/*.OBJ/lib/$file.a && \
730 %{__install} -p -m 644 dist/*.OBJ/lib/$file.a $RPM_BUILD_ROOT/%{_libdir}
731done
732
733# From nss-softokn.spec:
734# Copy the binary libraries we want
735for file in softokn3 nssdbm3 freebl3
736do
737 %{__install} -p -m 755 dist/*.OBJ/lib/$file.dll $RPM_BUILD_ROOT/%{_libdir}
738 test -f dist/*.OBJ/lib/$file.a && \
739 %{__install} -p -m 644 dist/*.OBJ/lib/$file.a $RPM_BUILD_ROOT/%{_libdir}
740done
741
742# @todo remove?
743## Install the empty NSS db files
744## Legacy db
745#%{__mkdir_p} $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb
746#%{__install} -p -m 644 %{SOURCE3} $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb/cert8.db
747#%{__install} -p -m 644 %{SOURCE4} $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb/key3.db
748#%{__install} -p -m 644 %{SOURCE5} $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb/secmod.db
749## Shared db
750#%{__install} -p -m 644 %{SOURCE6} $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb/cert9.db
751#%{__install} -p -m 644 %{SOURCE7} $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb/key4.db
752#%{__install} -p -m 644 %{SOURCE8} $RPM_BUILD_ROOT/%{_sysconfdir}/pki/nssdb/pkcs11.txt
753
754# Copy the development libraries we want
755for file in crmf.a nssb.a nssckfw.a
756do
757 %{__install} -p -m 644 dist/*.OBJ/lib/$file $RPM_BUILD_ROOT/%{_libdir}
758done
759
760# Copy the binaries we want
761for file in certutil cmsutil crlutil modutil pk12util signtool signver ssltap
762do
763 %{__install} -p -m 755 dist/*.OBJ/bin/$file.exe $RPM_BUILD_ROOT/%{_bindir}
764done
765
766# Copy the binaries we ship as unsupported
767for file in atob btoa derdump listsuites ocspclnt pp selfserv strsclnt symkeyutil tstclnt vfyserv vfychain
768do
769 %{__install} -p -m 755 dist/*.OBJ/bin/$file.exe $RPM_BUILD_ROOT/%{unsupported_tools_directory}
770done
771
772# From nss-softokn.spec:
773# Copy the binaries we ship as unsupported
774for file in bltest fipstest shlibsign
775do
776 %{__install} -p -m 755 dist/*.OBJ/bin/$file.exe $RPM_BUILD_ROOT/%{unsupported_tools_directory}
777done
778
779# Copy the include files we want
780for file in dist/public/nss/*.h
781do
782 %{__install} -p -m 644 $file $RPM_BUILD_ROOT/%{_includedir}/nss3
783done
784
785# From nss-softokn.spec:
786# Copy some freebl include files we also want
787for file in blapi.h alghmac.h
788do
789 %{__install} -p -m 644 dist/private/nss/$file $RPM_BUILD_ROOT/%{_includedir}/nss3
790done
791
792# Copy the template files we want
793for file in dist/private/nss/nssck.api
794do
795 %{__install} -p -m 644 $file $RPM_BUILD_ROOT/%{_includedir}/nss3/templates
796done
797
798# From nss-util.spec:
799# Copy the template files we want
800for file in dist/private/nss/templates.c
801do
802 %{__install} -p -m 644 $file $RPM_BUILD_ROOT/%{_includedir}/nss3/templates
803done
804
805# From nss-softokn.spec:
806# Copy the static freebl library
807for file in freebl.a
808do
809%{__install} -p -m 644 dist/*.OBJ/lib/$file $RPM_BUILD_ROOT/%{_libdir}
810done
811
812# Copy the package configuration files
813%{__install} -p -m 644 ./dist/pkgconfig/nss.pc $RPM_BUILD_ROOT/%{_libdir}/pkgconfig/nss.pc
814%{__install} -p -m 755 ./dist/pkgconfig/nss-config $RPM_BUILD_ROOT/%{_bindir}/nss-config
815
816# From nss-util.spec:
817# Copy the package configuration files
818%{__install} -p -m 644 ./dist/pkgconfig/nss-util.pc $RPM_BUILD_ROOT/%{_libdir}/pkgconfig/nss-util.pc
819%{__install} -p -m 755 ./dist/pkgconfig/nss-util-config $RPM_BUILD_ROOT/%{_bindir}/nss-util-config
820
821# From nss-softokn.spec:
822# Copy the package configuration files
823%{__install} -p -m 644 ./dist/pkgconfig/nss-softokn.pc $RPM_BUILD_ROOT/%{_libdir}/pkgconfig/nss-softokn.pc
824%{__install} -p -m 755 ./dist/pkgconfig/nss-softokn-config $RPM_BUILD_ROOT/%{_bindir}/nss-softokn-config
825
826# @tod remove?
827## Copy the pkcs #11 configuration script
828#%{__install} -p -m 755 ./dist/pkgconfig/setup-nsssysinit.sh $RPM_BUILD_ROOT/%{_bindir}/setup-nsssysinit.sh
829## install a symbolic link to it, without the ".sh" suffix,
830## that matches the man page documentation
831#ln -r -s -f $RPM_BUILD_ROOT/%{_bindir}/setup-nsssysinit.sh $RPM_BUILD_ROOT/%{_bindir}/setup-nsssysinit
832
833# Copy the man pages for scripts
834# @todo We don't have xmlto yet.
835#for f in nss-config setup-nsssysinit; do
836# install -c -m 644 ${f}.1 $RPM_BUILD_ROOT%{_mandir}/man1/${f}.1
837#done
838# Copy the man pages for the nss tools
839for f in "%{allTools}"; do
840 install -c -m 644 ./dist/docs/nroff/${f}.1 $RPM_BUILD_ROOT%{_mandir}/man1/${f}.1
841done
842%if %{defined rhel}
843install -c -m 644 ./dist/docs/nroff/pp.1 $RPM_BUILD_ROOT%{_mandir}/man1/pp.1
844%else
845install -c -m 644 ./dist/docs/nroff/pp.1 $RPM_BUILD_ROOT%{_datadir}/doc/nss-tools/pp.1
846%endif
847
848# Copy the man pages for the configuration files
849# @todo We don't have xmlto yet.
850#for f in pkcs11.txt; do
851# install -c -m 644 ${f}.5 $RPM_BUILD_ROOT%{_mandir}/man5/${f}.5
852#done
853# Copy the man pages for the nss databases
854#for f in cert8.db cert9.db key3.db key4.db secmod.db; do
855# install -c -m 644 ${f}.5 $RPM_BUILD_ROOT%{_mandir}/man5/${f}.5
856#done
857
858# Generate & install forwarder DLLs.
859gcc -Zomf -Zdll nss3k.def -l$RPM_BUILD_ROOT/%{_libdir}/nss3.dll -o $RPM_BUILD_ROOT/%{_libdir}/nss3k.dll
860gcc -Zomf -Zdll nssckbik.def -l$RPM_BUILD_ROOT/%{_libdir}/nssckbi.dll -o $RPM_BUILD_ROOT/%{_libdir}/nssckbik.dll
861gcc -Zomf -Zdll smime3k.def -l$RPM_BUILD_ROOT/%{_libdir}/smime3.dll -o $RPM_BUILD_ROOT/%{_libdir}/smime3k.dll
862gcc -Zomf -Zdll ssl3k.def -l$RPM_BUILD_ROOT/%{_libdir}/ssl3.dll -o $RPM_BUILD_ROOT/%{_libdir}/ssl3k.dll
863gcc -Zomf -Zdll nssuti3k.def -l$RPM_BUILD_ROOT/%{_libdir}/nssutil3.dll -o $RPM_BUILD_ROOT/%{_libdir}/nssuti3k.dll
864gcc -Zomf -Zdll nssdbm3k.def -l$RPM_BUILD_ROOT/%{_libdir}/nssdbm3.dll -o $RPM_BUILD_ROOT/%{_libdir}/nssdbm3k.dll
865gcc -Zomf -Zdll softok3k.def -l$RPM_BUILD_ROOT/%{_libdir}/softokn3.dll -o $RPM_BUILD_ROOT/%{_libdir}/softok3k.dll
866gcc -Zomf -Zdll freebl3k.def -l$RPM_BUILD_ROOT/%{_libdir}/freebl3.dll -o $RPM_BUILD_ROOT/%{_libdir}/freebl3k.dll
867
868%clean
869%{__rm} -rf $RPM_BUILD_ROOT
870
871
872%files
873%defattr(-,root,root)
874%{!?_licensedir:%global license %%doc}
875%license COPYING
876%{_libdir}/nss3.dll
877%{_libdir}/ssl3.dll
878%{_libdir}/smime3.dll
879%{_libdir}/nssckbi.dll
880# @todo need?
881#%{_libdir}/nsspem.dll
882# @todo need?
883#%dir %{_sysconfdir}/pki/nssdb
884#%config(noreplace) %verify(not md5 size mtime) %{_sysconfdir}/pki/nssdb/cert8.db
885#%config(noreplace) %verify(not md5 size mtime) %{_sysconfdir}/pki/nssdb/key3.db
886#%config(noreplace) %verify(not md5 size mtime) %{_sysconfdir}/pki/nssdb/secmod.db
887##%config(noreplace) %verify(not md5 size mtime) %{_sysconfdir}/pki/nssdb/cert9.db
888##%config(noreplace) %verify(not md5 size mtime) %{_sysconfdir}/pki/nssdb/key4.db
889#%config(noreplace) %verify(not md5 size mtime) %{_sysconfdir}/pki/nssdb/pkcs11.txt
890# @todo We don't have xmlto yet.
891#%attr(0644,root,root) %doc %{_mandir}/man5/cert8.db.5.gz
892#%attr(0644,root,root) %doc %{_mandir}/man5/key3.db.5.gz
893#%attr(0644,root,root) %doc %{_mandir}/man5/secmod.db.5.gz
894#%attr(0644,root,root) %doc %{_mandir}/man5/cert9.db.5.gz
895#%attr(0644,root,root) %doc %{_mandir}/man5/key4.db.5.gz
896#%attr(0644,root,root) %doc %{_mandir}/man5/pkcs11.txt.5.gz
897
898# @todo need?
899#%files sysinit
900#%defattr(-,root,root)
901#%{_libdir}/libnsssysinit.so
902#%{_bindir}/setup-nsssysinit.sh
903## symbolic link to setup-nsssysinit.sh
904#%{_bindir}/setup-nsssysinit
905#%attr(0644,root,root) %doc %{_mandir}/man1/setup-nsssysinit.1.gz
906
907%files tools
908%defattr(-,root,root)
909%{_bindir}/certutil.exe
910%{_bindir}/cmsutil.exe
911%{_bindir}/crlutil.exe
912%{_bindir}/modutil.exe
913%{_bindir}/pk12util.exe
914%{_bindir}/signtool.exe
915%{_bindir}/signver.exe
916%{_bindir}/ssltap.exe
917%{unsupported_tools_directory}/atob.exe
918%{unsupported_tools_directory}/btoa.exe
919%{unsupported_tools_directory}/derdump.exe
920%{unsupported_tools_directory}/listsuites.exe
921%{unsupported_tools_directory}/ocspclnt.exe
922%{unsupported_tools_directory}/pp.exe
923%{unsupported_tools_directory}/selfserv.exe
924%{unsupported_tools_directory}/strsclnt.exe
925%{unsupported_tools_directory}/symkeyutil.exe
926%{unsupported_tools_directory}/tstclnt.exe
927%{unsupported_tools_directory}/vfyserv.exe
928%{unsupported_tools_directory}/vfychain.exe
929# instead of %%{_mandir}/man*/* let's list them explicitely
930# supported tools
931%attr(0644,root,root) %doc %{_mandir}/man1/certutil.1.gz
932%attr(0644,root,root) %doc %{_mandir}/man1/cmsutil.1.gz
933%attr(0644,root,root) %doc %{_mandir}/man1/crlutil.1.gz
934%attr(0644,root,root) %doc %{_mandir}/man1/modutil.1.gz
935%attr(0644,root,root) %doc %{_mandir}/man1/pk12util.1.gz
936%attr(0644,root,root) %doc %{_mandir}/man1/signtool.1.gz
937%attr(0644,root,root) %doc %{_mandir}/man1/signver.1.gz
938# unsupported tools
939%attr(0644,root,root) %doc %{_mandir}/man1/derdump.1.gz
940%if %{defined rhel}
941%attr(0644,root,root) %doc %{_mandir}/man1/pp.1.gz
942%else
943%dir %{_datadir}/doc/nss-tools
944%attr(0644,root,root) %doc %{_datadir}/doc/nss-tools/pp.1
945%endif
946%attr(0644,root,root) %doc %{_mandir}/man1/ssltap.1.gz
947%attr(0644,root,root) %doc %{_mandir}/man1/vfychain.1.gz
948%attr(0644,root,root) %doc %{_mandir}/man1/vfyserv.1.gz
949
950%files devel
951%defattr(-,root,root)
952%{_libdir}/nss3.a
953%{_libdir}/smime3.a
954%{_libdir}/ssl3.a
955%{_libdir}/crmf.a
956# @todo need?
957#%{_libdir}/nsspem.a
958%{_libdir}/pkgconfig/nss.pc
959%{_bindir}/nss-config
960# @todo We don't have xmlto yet.
961#%attr(0644,root,root) %doc %{_mandir}/man1/nss-config.1.gz
962%dir %{_includedir}/nss3
963%{_includedir}/nss3/cert.h
964%{_includedir}/nss3/certdb.h
965%{_includedir}/nss3/certt.h
966%{_includedir}/nss3/cmmf.h
967%{_includedir}/nss3/cmmft.h
968%{_includedir}/nss3/cms.h
969%{_includedir}/nss3/cmsreclist.h
970%{_includedir}/nss3/cmst.h
971%{_includedir}/nss3/crmf.h
972%{_includedir}/nss3/crmft.h
973%{_includedir}/nss3/cryptohi.h
974%{_includedir}/nss3/cryptoht.h
975%{_includedir}/nss3/sechash.h
976%{_includedir}/nss3/jar-ds.h
977%{_includedir}/nss3/jar.h
978%{_includedir}/nss3/jarfile.h
979%{_includedir}/nss3/key.h
980%{_includedir}/nss3/keyhi.h
981%{_includedir}/nss3/keyt.h
982%{_includedir}/nss3/keythi.h
983%{_includedir}/nss3/nss.h
984%{_includedir}/nss3/nssckbi.h
985#%{_includedir}/nss3/nsspem.h
986%{_includedir}/nss3/ocsp.h
987%{_includedir}/nss3/ocspt.h
988%{_includedir}/nss3/p12.h
989%{_includedir}/nss3/p12plcy.h
990%{_includedir}/nss3/p12t.h
991%{_includedir}/nss3/pk11func.h
992%{_includedir}/nss3/pk11pqg.h
993%{_includedir}/nss3/pk11priv.h
994%{_includedir}/nss3/pk11pub.h
995%{_includedir}/nss3/pk11sdr.h
996%{_includedir}/nss3/pkcs12.h
997%{_includedir}/nss3/pkcs12t.h
998%{_includedir}/nss3/pkcs7t.h
999%{_includedir}/nss3/preenc.h
1000%{_includedir}/nss3/secmime.h
1001%{_includedir}/nss3/secmod.h
1002%{_includedir}/nss3/secmodt.h
1003%{_includedir}/nss3/secpkcs5.h
1004%{_includedir}/nss3/secpkcs7.h
1005%{_includedir}/nss3/smime.h
1006%{_includedir}/nss3/ssl.h
1007%{_includedir}/nss3/sslerr.h
1008%{_includedir}/nss3/sslproto.h
1009%{_includedir}/nss3/sslt.h
1010
1011%files pkcs11-devel
1012%defattr(-, root, root)
1013%{_includedir}/nss3/nssbase.h
1014%{_includedir}/nss3/nssbaset.h
1015%{_includedir}/nss3/nssckepv.h
1016%{_includedir}/nss3/nssckft.h
1017%{_includedir}/nss3/nssckfw.h
1018%{_includedir}/nss3/nssckfwc.h
1019%{_includedir}/nss3/nssckfwt.h
1020%{_includedir}/nss3/nssckg.h
1021%{_includedir}/nss3/nssckmdt.h
1022%{_includedir}/nss3/nssckt.h
1023%{_includedir}/nss3/templates/nssck.api
1024%{_libdir}/nssb.a
1025%{_libdir}/nssckfw.a
1026
1027%files legacy
1028%defattr(-,root,root)
1029%{_libdir}/nss3k.dll
1030%{_libdir}/ssl3k.dll
1031%{_libdir}/smime3k.dll
1032%{_libdir}/nssckbik.dll
1033
1034# From nss-util.spec:
1035
1036%files util
1037%defattr(-,root,root)
1038%{_libdir}/nssutil3.dll
1039
1040%files util-devel
1041%defattr(-,root,root)
1042%{_libdir}/nssutil3.a
1043# package configuration files
1044%{_libdir}/pkgconfig/nss-util.pc
1045%{_bindir}/nss-util-config
1046# these are marked as public export in nss/lib/util/manifest.mk
1047# co-owned with nss
1048%dir %{_includedir}/nss3
1049%{_includedir}/nss3/base64.h
1050%{_includedir}/nss3/ciferfam.h
1051%{_includedir}/nss3/hasht.h
1052%{_includedir}/nss3/nssb64.h
1053%{_includedir}/nss3/nssb64t.h
1054%{_includedir}/nss3/nsslocks.h
1055%{_includedir}/nss3/nssilock.h
1056%{_includedir}/nss3/nssilckt.h
1057%{_includedir}/nss3/nssrwlk.h
1058%{_includedir}/nss3/nssrwlkt.h
1059%{_includedir}/nss3/nssutil.h
1060%{_includedir}/nss3/pkcs1sig.h
1061%{_includedir}/nss3/pkcs11.h
1062%{_includedir}/nss3/pkcs11f.h
1063%{_includedir}/nss3/pkcs11n.h
1064%{_includedir}/nss3/pkcs11p.h
1065%{_includedir}/nss3/pkcs11t.h
1066%{_includedir}/nss3/pkcs11u.h
1067%{_includedir}/nss3/portreg.h
1068%{_includedir}/nss3/secasn1.h
1069%{_includedir}/nss3/secasn1t.h
1070%{_includedir}/nss3/seccomon.h
1071%{_includedir}/nss3/secder.h
1072%{_includedir}/nss3/secdert.h
1073%{_includedir}/nss3/secdig.h
1074%{_includedir}/nss3/secdigt.h
1075%{_includedir}/nss3/secerr.h
1076%{_includedir}/nss3/secitem.h
1077%{_includedir}/nss3/secoid.h
1078%{_includedir}/nss3/secoidt.h
1079%{_includedir}/nss3/secport.h
1080%{_includedir}/nss3/utilmodt.h
1081%{_includedir}/nss3/utilpars.h
1082%{_includedir}/nss3/utilparst.h
1083%{_includedir}/nss3/utilrename.h
1084%{_includedir}/nss3/templates/templates.c
1085
1086%files util-legacy
1087%defattr(-,root,root)
1088%{_libdir}/nssuti3k.dll
1089
1090# From nss-softokn.spec:
1091
1092%files softokn
1093%defattr(-,root,root)
1094%{_libdir}/nssdbm3.dll
1095%{_libdir}/nssdbm3.chk
1096%{_libdir}/softokn3.dll
1097%{_libdir}/softokn3.chk
1098# shared with nss-tools
1099%dir %{_libdir}/nss
1100%dir %{unsupported_tools_directory}
1101%{unsupported_tools_directory}/bltest.exe
1102%{unsupported_tools_directory}/fipstest.exe
1103%{unsupported_tools_directory}/shlibsign.exe
1104
1105%files softokn-freebl
1106%defattr(-,root,root)
1107%{_libdir}/freebl3.dll
1108%{_libdir}/freebl3.chk
1109
1110%files softokn-freebl-devel
1111%defattr(-,root,root)
1112%{_libdir}/freebl.a
1113%{_includedir}/nss3/blapi.h
1114%{_includedir}/nss3/blapit.h
1115%{_includedir}/nss3/alghmac.h
1116
1117%files softokn-devel
1118%defattr(-,root,root)
1119%{_libdir}/nssdbm3.a
1120%{_libdir}/softokn3.a
1121%{_libdir}/pkgconfig/nss-softokn.pc
1122%{_bindir}/nss-softokn-config
1123# co-owned with nss
1124%dir %{_includedir}/nss3
1125%{_includedir}/nss3/ecl-exp.h
1126# @todo this fails (missing -lfreebl3, needs investigation)
1127#%{_includedir}/nss3/nsslowhash.h
1128%{_includedir}/nss3/shsign.h
1129
1130%files softokn-legacy
1131%defattr(-,root,root)
1132%{_libdir}/nssdbm3k.dll
1133%{_libdir}/nssdbm3k.chk
1134%{_libdir}/softok3k.dll
1135%{_libdir}/softok3k.chk
1136
1137%files softokn-freebl
1138%defattr(-,root,root)
1139%{_libdir}/freebl3.dll
1140%{_libdir}/freebl3.chk
1141
1142%files softokn-freebl-legacy
1143%defattr(-,root,root)
1144%{_libdir}/freebl3k.dll
1145%{_libdir}/freebl3k.chk
1146
1147
1148%changelog
1149* Fri Apr 15 2016 Dmitriy Kuminov <coding@dmik.org> 3.23.0-3
1150- Remove erroneous -Wl,-rpath-link from nss-config and others.
1151
1152* Wed Apr 1 2016 Dmitriy Kuminov <coding@dmik.org> 3.23.0-2
1153- Enable high memory support.
1154
1155* Wed Mar 30 2016 Dmitriy Kuminov <coding@dmik.org> 3.23.0-1
1156- Update to version 3.23.
1157- Import OS/2-specific NSS fixes from Mozilla for OS/2 sources.
1158- Rebuild with GCC 4.9.2 and LIBC 0.6.6.
1159
1160* Mon Jan 16 2012 yd
1161- rebuild with libc 0.6.4 runtime.
Note: See TracBrowser for help on using the repository browser.