The package rpms/nss-util.git has added or updated architecture specific content in its spec file (ExclusiveArch/ExcludeArch or %ifarch/%ifnarch) in commit(s): https://src.fedoraproject.org/cgit/rpms/nss-util.git/commit/?id=34a0a636fe10....
Change: -%ifnarch noarch
Thanks.
Full change: ============
commit 34a0a636fe1065928bd52ec1bc6f4fc6e83a44a7 Author: Daiki Ueno dueno@redhat.com Date: Wed Dec 19 14:12:50 2018 +0100
merged into nss package
diff --git a/.gitignore b/.gitignore deleted file mode 100644 index 90f63b6..0000000 --- a/.gitignore +++ /dev/null @@ -1,21 +0,0 @@ -/nss-util-3.25.0.tar.gz -/nss-util-3.26.0.tar.gz -/nss-util-3.27.0.tar.gz -/nss-util-3.28.0.tar.gz -/nss-util-3.28.1.tar.gz -/nss-util-3.29.0.tar.gz -/nss-util-3.29.1.tar.gz -/nss-util-3.30.0.tar.gz -/nss-util-3.30.1.tar.gz -/nss-util-3.30.2.tar.gz -/nss-util-3.31.0.tar.gz -/nss-util-3.32.0.tar.gz -/nss-util-3.33.0.tar.gz -/nss-util-3.34.0.tar.gz -/nss-util-3.35.0.tar.gz -/nss-util-3.36.0.tar.gz -/nss-util-3.36.1.tar.gz -/nss-util-3.37.1.tar.gz -/nss-util-3.37.3.tar.gz -/nss-util-3.38.0.tar.gz -/nss-util-3.39.tar.gz diff --git a/STAGE2-nss-util b/STAGE2-nss-util deleted file mode 100644 index 95f1b5c..0000000 --- a/STAGE2-nss-util +++ /dev/null @@ -1,48 +0,0 @@ -#requires nspr -#requires perl - -mcd $BUILDDIR/nss - -export BUILD_OPT=1 -export PKG_CONFIG_ALLOW_SYSTEM_LIBS=1 -export PKG_CONFIG_ALLOW_SYSTEM_CFLAGS=1 -export NSPR_INCLUDE_DIR=/usr/include/nspr -export NSPR_LIB_DIR=/usr/lib${SUFFIX} -export FREEBL_NO_DEPEND=1 -export NSS_USE_SYSTEM_SQLITE=1 -export NSS_DISABLE_GTESTS=1 - -if [ "$SUFFIX" = "64" ]; then - USE_64=1 - export USE_64 -fi - -make -C $SRC/nss-util-3.*/nss/coreconf -make -C $SRC/nss-util-3.*/nss - -cd $SRC/nss-util-3.*/nss/coreconf -make install -make install -cd $SRC/nss-util-3.*/nss -make install -# Copy the binary libraries we want -cd $SRC/nss-util-3.* - -for file in `cd dist/*.OBJ/lib; echo *` -do - install -p -m 755 dist/*.OBJ/lib/$file /usr/lib${SUFFIX}/ -done - -test -d /usr/include/nss3/templates || mkdir -p /usr/include/nss3/templates - -# Copy the include files we want -for file in $SRC/nss-*/dist/public/nss/*.h -do - install -p -m 644 $file /usr/include/nss3/ -done - -# Copy the template files we want -for file in $SRC/nss-util-*/dist/private/nss/templates.c -do - install -p -m 644 $file /usr/include/nss3/templates/ -done diff --git a/dead.package b/dead.package new file mode 100644 index 0000000..d47c880 --- /dev/null +++ b/dead.package @@ -0,0 +1 @@ +merged into nss package diff --git a/nss-split-util.sh b/nss-split-util.sh deleted file mode 100644 index 4377658..0000000 --- a/nss-split-util.sh +++ /dev/null @@ -1,88 +0,0 @@ -#!/bin/sh -# -# Splits NSS into nss-util -# Takes as command line input the version of nss -# and assumes that a file nss-${nss_version}-stripped.tar.bz2 -# exits in the current directory - -set -e - -if test -z $1 -then - echo "usage: $0 nss-version" - exit -fi - -export name=nss -export version=$1 - -echo "Extracting ${name}-${version}.tar.gz" - -tar -xzf ${name}-${version}.tar.gz - -# the directory will be named ${name}-${version} - -nss_source_dir=${name}-${version} -util_dir=${name}-util-${version} -softokn_dir=${name}-softokn-${version} - -# make_nss_util -#------------------------------------------------- -# create the nss-util subset consisting of -# nss/dbm --- full directory -# nss/coreconf --- full directory -# nss --- top files only -# nss/lib --- top files only -# nss/lib/util --- full directory -#-------------------------------------------------- - -UTIL_WORK=${util_dir}-work -rm -rf ${UTIL_WORK} -mkdir ${UTIL_WORK} - -# copy everything -cp -a ${nss_source_dir} ${UTIL_WORK}/${util_dir} - -# remove subdirectories that we don't want -rm -rf ${UTIL_WORK}/${util_dir}/nss/cmd -rm -rf ${UTIL_WORK}/${util_dir}/nss/tests -rm -rf ${UTIL_WORK}/${util_dir}/nss/lib -rm -rf ${UTIL_WORK}/${util_dir}/nss/automation -rm -rf ${UTIL_WORK}/${util_dir}/nss/external_tests -rm -rf ${UTIL_WORK}/${util_dir}/nss/doc - -# start with an empty cmd lib directories to be filled selectively -mkdir ${UTIL_WORK}/${util_dir}/nss/cmd -cp ${nss_source_dir}/nss/cmd/Makefile ${UTIL_WORK}/${util_dir}/nss/cmd -cp ${nss_source_dir}/nss/cmd/manifest.mn ${UTIL_WORK}/${util_dir}/nss/cmd -cp ${nss_source_dir}/nss/cmd/platlibs.mk ${UTIL_WORK}/${util_dir}/nss/cmd -cp ${nss_source_dir}/nss/cmd/platrules.mk ${UTIL_WORK}/${util_dir}/nss/cmd - -mkdir ${UTIL_WORK}/${util_dir}/nss/lib -# copy some files at the top and the util subdirectory recursively -cp ${nss_source_dir}/nss/lib/Makefile ${UTIL_WORK}/${util_dir}/nss/lib -cp ${nss_source_dir}/nss/lib/manifest.mn ${UTIL_WORK}/${util_dir}/nss/lib -cp -a ${nss_source_dir}/nss/lib/util ${UTIL_WORK}/${util_dir}/nss/lib/util - -# plus common and gtests from nss/tests -mkdir ${UTIL_WORK}/${util_dir}/nss/tests -topFilesT=`find ${nss_source_dir}/nss/tests/ -maxdepth 1 -mindepth 1 -type f` -for f in $topFilesT; do - cp -p $f ${UTIL_WORK}/${util_dir}/nss/tests/ -done -keepers="common gtests" -for t in $keepers; do - cp -a ${nss_source_dir}/nss/tests/$t ${UTIL_WORK}/${util_dir}/nss/tests/$t -done - -pushd ${UTIL_WORK} -# the compressed tar ball for nss-util -tar -czf ../${name}-util-${version}.tar.gz ${util_dir} -popd - -# cleanup after ourselves -rm -fr ${nss_source_dir} -rm -fr ${UTIL_WORK} - - - diff --git a/nss-util-3.19.3-ldflags.patch b/nss-util-3.19.3-ldflags.patch deleted file mode 100644 index d7bd36b..0000000 --- a/nss-util-3.19.3-ldflags.patch +++ /dev/null @@ -1,12 +0,0 @@ -diff -up nss-util-3.29.0/nss/coreconf/Linux.mk.ldflags nss-util-3.29.0/nss/coreconf/Linux.mk ---- nss-util-3.29.0/nss/coreconf/Linux.mk.ldflags 2017-02-08 10:31:28.022181981 +0100 -+++ nss-util-3.29.0/nss/coreconf/Linux.mk 2017-02-08 10:32:49.128058048 +0100 -@@ -140,7 +140,7 @@ ifdef USE_PTHREADS - endif - - DSO_CFLAGS = -fPIC --DSO_LDOPTS = -shared $(ARCHFLAG) -Wl,--gc-sections -+DSO_LDOPTS = -shared $(ARCHFLAG) -Wl,--gc-sections -Wl,-z,now - # The linker on Red Hat Linux 7.2 and RHEL 2.1 (GNU ld version 2.11.90.0.8) - # incorrectly reports undefined references in the libraries we link with, so - # we don't use -z defs there. diff --git a/nss-util-config.in b/nss-util-config.in deleted file mode 100644 index ef8751d..0000000 --- a/nss-util-config.in +++ /dev/null @@ -1,118 +0,0 @@ -#!/bin/sh - -prefix=@prefix@ - -major_version=@MOD_MAJOR_VERSION@ -minor_version=@MOD_MINOR_VERSION@ -patch_version=@MOD_PATCH_VERSION@ - -usage() -{ - cat <<EOF -Usage: nss-util-config [OPTIONS] [LIBRARIES] -Options: - [--prefix[=DIR]] - [--exec-prefix[=DIR]] - [--includedir[=DIR]] - [--libdir[=DIR]] - [--version] - [--libs] - [--cflags] -Dynamic Libraries: - nssutil -EOF - exit $1 -} - -if test $# -eq 0; then - usage 1 1>&2 -fi - -lib_nssutil=yes - -while test $# -gt 0; do - case "$1" in - -*=*) optarg=`echo "$1" | sed 's/[-_a-zA-Z0-9]*=//'` ;; - *) optarg= ;; - esac - - case $1 in - --prefix=*) - prefix=$optarg - ;; - --prefix) - echo_prefix=yes - ;; - --exec-prefix=*) - exec_prefix=$optarg - ;; - --exec-prefix) - echo_exec_prefix=yes - ;; - --includedir=*) - includedir=$optarg - ;; - --includedir) - echo_includedir=yes - ;; - --libdir=*) - libdir=$optarg - ;; - --libdir) - echo_libdir=yes - ;; - --version) - echo ${major_version}.${minor_version}.${patch_version} - ;; - --cflags) - echo_cflags=yes - ;; - --libs) - echo_libs=yes - ;; - *) - usage 1 1>&2 - ;; - esac - shift -done - -# Set variables that may be dependent upon other variables -if test -z "$exec_prefix"; then - exec_prefix=`pkg-config --variable=exec_prefix nss-util` -fi -if test -z "$includedir"; then - includedir=`pkg-config --variable=includedir nss-util` -fi -if test -z "$libdir"; then - libdir=`pkg-config --variable=libdir nss-util` -fi - -if test "$echo_prefix" = "yes"; then - echo $prefix -fi - -if test "$echo_exec_prefix" = "yes"; then - echo $exec_prefix -fi - -if test "$echo_includedir" = "yes"; then - echo $includedir -fi - -if test "$echo_libdir" = "yes"; then - echo $libdir -fi - -if test "$echo_cflags" = "yes"; then - echo -I$includedir -fi - -if test "$echo_libs" = "yes"; then - libdirs="-Wl,-rpath-link,$libdir -L$libdir" - if test -n "$lib_nssutil"; then - libdirs="$libdirs -lnssutil${major_version}" - fi - echo $libdirs -fi - diff --git a/nss-util.pc.in b/nss-util.pc.in deleted file mode 100644 index 1310248..0000000 --- a/nss-util.pc.in +++ /dev/null @@ -1,11 +0,0 @@ -prefix=%prefix% -exec_prefix=%exec_prefix% -libdir=%libdir% -includedir=%includedir% - -Name: NSS-UTIL -Description: Network Security Services Utility Library -Version: %NSSUTIL_VERSION% -Requires: nspr >= %NSPR_VERSION% -Libs: -L${libdir} -lnssutil3 -Cflags: -I${includedir} diff --git a/nss-util.spec b/nss-util.spec deleted file mode 100644 index 5d77d34..0000000 --- a/nss-util.spec +++ /dev/null @@ -1,692 +0,0 @@ -%global nspr_version 4.20.0 -%global nss_util_version 3.39.0 - -# The upstream omits the trailing ".0", while we need it for -# consistency with the pkg-config version: -# https://bugzilla.redhat.com/show_bug.cgi?id=1578106 -%{lua: -rpm.define(string.format("nss_util_archive_version %s", - string.gsub(rpm.expand("%nss_util_version"), "(.*)%.0$", "%1"))) -} - -Summary: Network Security Services Utilities Library -Name: nss-util -Version: %{nss_util_version} -# for Rawhide, please always use release >= 2 -# for Fedora release branches, please use release < 2 (1.0, 1.1, ...) -Release: 2%{?dist} -License: MPLv2.0 -URL: http://www.mozilla.org/projects/security/pki/nss/ -Group: System Environment/Libraries -Requires: nspr >= %{nspr_version} -BuildRequires: nspr-devel >= %{nspr_version} -BuildRequires: zlib-devel -BuildRequires: pkgconfig -BuildRequires: gawk -BuildRequires: psmisc -BuildRequires: perl-interpreter -BuildRequires: gcc-c++ - -Source0: %{name}-%{nss_util_archive_version}.tar.gz -# The nss-util tar ball is a subset of nss-{version}.tar.gz. -# We use the nss-split-util.sh script for keeping only what we need -# nss-util is produced via via nss-split-util.sh {version} -# Detailed Steps: -# fedpkg clone nss-util -# cd nss-util -# Make the source tarball for nss-util out of the nss one: -# sh ./nss-split-util.sh ${version} -# A file named ${name}-${version}.tar.gz should appear -# ready to upload to the lookaside cache. -Source1: nss-split-util.sh -Source2: nss-util.pc.in -Source3: nss-util-config.in - -# Local patches -# TODO: investigate whether this patch should also be applied to -# nss-softokn and nss and whether it should be submitted upstream. -# First ensure that it won't cause any FIPS tests breakage. -Patch4: nss-util-3.19.3-ldflags.patch - -%description -Utilities for Network Security Services and the Softoken module - -# We shouln't need to have a devel subpackage as util will be used in the -# context of nss or nss-softoken. keeping to please rpmlint. -# -%package devel -Summary: Development libraries for Network Security Services Utilities -Group: Development/Libraries -Requires: nss-util = %{version}-%{release} -Requires: nspr-devel >= %{nspr_version} -Requires: pkgconfig - -%description devel -Header and library files for doing development with Network Security Services. - - -%prep -%setup -q -n %{name}-%{nss_util_archive_version} -%patch4 -p1 -b .ldflags - - -%build - -# Enable compiler optimizations and disable debugging code -export BUILD_OPT=1 - -# Uncomment to disable optimizations -#RPM_OPT_FLAGS=`echo $RPM_OPT_FLAGS | sed -e 's/-O2/-O0/g'` -#export RPM_OPT_FLAGS - -# Generate symbolic info for debuggers -XCFLAGS=$RPM_OPT_FLAGS -export XCFLAGS - -PKG_CONFIG_ALLOW_SYSTEM_LIBS=1 -PKG_CONFIG_ALLOW_SYSTEM_CFLAGS=1 - -export PKG_CONFIG_ALLOW_SYSTEM_LIBS -export PKG_CONFIG_ALLOW_SYSTEM_CFLAGS - -NSPR_INCLUDE_DIR=`/usr/bin/pkg-config --cflags-only-I nspr | sed 's/-I//'` -NSPR_LIB_DIR=`/usr/bin/pkg-config --libs-only-L nspr | sed 's/-L//'` - -export NSPR_INCLUDE_DIR -export NSPR_LIB_DIR - -export NSS_USE_SYSTEM_SQLITE=1 - -export NSS_BUILD_UTIL_ONLY=1 - -%ifnarch noarch -%if 0%{__isa_bits} == 64 -USE_64=1 -export USE_64 -%endif -%endif - -# make util -%{__make} -C ./nss/coreconf -%{__make} -C ./nss - -# Set up our package file -%{__mkdir_p} ./dist/pkgconfig -%{__cat} %{SOURCE2} | sed -e "s,%%libdir%%,%{_libdir},g" \ - -e "s,%%prefix%%,%{_prefix},g" \ - -e "s,%%exec_prefix%%,%{_prefix},g" \ - -e "s,%%includedir%%,%{_includedir}/nss3,g" \ - -e "s,%%NSPR_VERSION%%,%{nspr_version},g" \ - -e "s,%%NSSUTIL_VERSION%%,%{version},g" > \ - ./dist/pkgconfig/nss-util.pc - -NSSUTIL_VMAJOR=`cat nss/lib/util/nssutil.h | grep "#define.*NSSUTIL_VMAJOR" | awk '{print $3}'` -NSSUTIL_VMINOR=`cat nss/lib/util/nssutil.h | grep "#define.*NSSUTIL_VMINOR" | awk '{print $3}'` -NSSUTIL_VPATCH=`cat nss/lib/util/nssutil.h | grep "#define.*NSSUTIL_VPATCH" | awk '{print $3}'` - -export NSSUTIL_VMAJOR -export NSSUTIL_VMINOR -export NSSUTIL_VPATCH - -%{__cat} %{SOURCE3} | sed -e "s,@libdir@,%{_libdir},g" \ - -e "s,@prefix@,%{_prefix},g" \ - -e "s,@exec_prefix@,%{_prefix},g" \ - -e "s,@includedir@,%{_includedir}/nss3,g" \ - -e "s,@MOD_MAJOR_VERSION@,$NSSUTIL_VMAJOR,g" \ - -e "s,@MOD_MINOR_VERSION@,$NSSUTIL_VMINOR,g" \ - -e "s,@MOD_PATCH_VERSION@,$NSSUTIL_VPATCH,g" \ - > ./dist/pkgconfig/nss-util-config - -chmod 755 ./dist/pkgconfig/nss-util-config - - -%check - -# Enable compiler optimizations and disable debugging code -export BUILD_OPT=1 - -# Uncomment to disable optimizations -#RPM_OPT_FLAGS=`echo $RPM_OPT_FLAGS | sed -e 's/-O2/-O0/g'` -#export RPM_OPT_FLAGS - -# Generate symbolic info for debuggers -XCFLAGS=$RPM_OPT_FLAGS -export XCFLAGS - -export NSS_BUILD_UTIL_ONLY=1 - -%ifnarch noarch -%if 0%{__isa_bits} == 64 -USE_64=1 -export USE_64 -%endif -%endif - -rm -rf ./tests_results -pushd ./nss/tests/ -# all.sh is the test suite script - -# only run gtests for nss-util -%global nss_cycles "standard" -%global nss_tests "gtests" -%global nss_ssl_tests " " -%global nss_ssl_run " " - -SKIP_NSS_TEST_SUITE=`echo $SKIP_NSS_TEST_SUITE` - -if [ "x$SKIP_NSS_TEST_SUITE" == "x" ]; then - HOST=localhost DOMSUF=localdomain PORT=$MYRAND NSS_CYCLES=%{?nss_cycles} NSS_TESTS=%{?nss_tests} NSS_SSL_TESTS=%{?nss_ssl_tests} NSS_SSL_RUN=%{?nss_ssl_run} ./all.sh -fi - -popd - -if [ "x$SKIP_NSS_TEST_SUITE" == "x" ]; then - TEST_FAILURES=`grep -c FAILED ./tests_results/security/localhost.1/output.log` || : -else - TEST_FAILURES=0 -fi - -if [ $TEST_FAILURES -ne 0 ]; then - echo "error: test suite returned failure(s)" - exit 1 -fi -echo "test suite completed" - -%install - -%{__rm} -rf $RPM_BUILD_ROOT - -# There is no make install target so we'll do it ourselves. - -%{__mkdir_p} $RPM_BUILD_ROOT/%{_includedir}/nss3 -%{__mkdir_p} $RPM_BUILD_ROOT/%{_includedir}/nss3/templates -%{__mkdir_p} $RPM_BUILD_ROOT/%{_libdir} -%{__mkdir_p} $RPM_BUILD_ROOT/%{_libdir}/nss3 -%{__mkdir_p} $RPM_BUILD_ROOT/%{_libdir}/pkgconfig -%{__mkdir_p} $RPM_BUILD_ROOT/%{_bindir} - -for file in libnssutil3.so -do - %{__install} -p -m 755 dist/*.OBJ/lib/$file $RPM_BUILD_ROOT/%{_libdir} -done - -# Copy the include files we want -# The util headers, the rest come from softokn and nss -for file in dist/public/nss/*.h -do - %{__install} -p -m 644 $file $RPM_BUILD_ROOT/%{_includedir}/nss3 -done - -# Copy the template files we want -for file in dist/private/nss/templates.c -do - %{__install} -p -m 644 $file $RPM_BUILD_ROOT/%{_includedir}/nss3/templates -done - -# Copy the package configuration files -%{__install} -p -m 644 ./dist/pkgconfig/nss-util.pc $RPM_BUILD_ROOT/%{_libdir}/pkgconfig/nss-util.pc -%{__install} -p -m 755 ./dist/pkgconfig/nss-util-config $RPM_BUILD_ROOT/%{_bindir}/nss-util-config - -%post -p /sbin/ldconfig - -%postun -p /sbin/ldconfig - -%files -%{!?_licensedir:%global license %%doc} -%license nss/COPYING -%{_libdir}/libnssutil3.so - -%files devel -# package configuration files -%{_libdir}/pkgconfig/nss-util.pc -%{_bindir}/nss-util-config - -# co-owned with nss -%dir %{_includedir}/nss3 -# these are marked as public export in nss/lib/util/manifest.mk -%{_includedir}/nss3/base64.h -%{_includedir}/nss3/ciferfam.h -%{_includedir}/nss3/eccutil.h -%{_includedir}/nss3/hasht.h -%{_includedir}/nss3/nssb64.h -%{_includedir}/nss3/nssb64t.h -%{_includedir}/nss3/nsslocks.h -%{_includedir}/nss3/nssilock.h -%{_includedir}/nss3/nssilckt.h -%{_includedir}/nss3/nssrwlk.h -%{_includedir}/nss3/nssrwlkt.h -%{_includedir}/nss3/nssutil.h -%{_includedir}/nss3/pkcs1sig.h -%{_includedir}/nss3/pkcs11.h -%{_includedir}/nss3/pkcs11f.h -%{_includedir}/nss3/pkcs11n.h -%{_includedir}/nss3/pkcs11p.h -%{_includedir}/nss3/pkcs11t.h -%{_includedir}/nss3/pkcs11u.h -%{_includedir}/nss3/pkcs11uri.h -%{_includedir}/nss3/portreg.h -%{_includedir}/nss3/secasn1.h -%{_includedir}/nss3/secasn1t.h -%{_includedir}/nss3/seccomon.h -%{_includedir}/nss3/secder.h -%{_includedir}/nss3/secdert.h -%{_includedir}/nss3/secdig.h -%{_includedir}/nss3/secdigt.h -%{_includedir}/nss3/secerr.h -%{_includedir}/nss3/secitem.h -%{_includedir}/nss3/secoid.h -%{_includedir}/nss3/secoidt.h -%{_includedir}/nss3/secport.h -%{_includedir}/nss3/utilmodt.h -%{_includedir}/nss3/utilpars.h -%{_includedir}/nss3/utilparst.h -%{_includedir}/nss3/utilrename.h -%{_includedir}/nss3/templates/templates.c - -%changelog -* Mon Sep 3 2018 Daiki Ueno dueno@redhat.com - 3.39.0-2 -- Update to NSS 3.39 -- Use the upstream tarball versioning as it is (rhbz#1578106) - -* Fri Jul 20 2018 Kai Engert kaie@redhat.com - 3.38.0-4 -- Backport upstream addition of nss-policy-check utility, rhbz#1428746 - -* Fri Jul 13 2018 Fedora Release Engineering releng@fedoraproject.org - 3.38.0-3 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - -* Mon Jul 2 2018 Daiki Ueno dueno@redhat.com - 3.38.0-2 -- Update to NSS 3.38 - -* Tue Jun 5 2018 Daiki Ueno dueno@redhat.com - 3.37.3-2 -- Update to NSS 3.37.3 - -* Mon May 28 2018 Daiki Ueno dueno@redhat.com - 3.37.1-2 -- Update to NSS 3.37.1 - -* Wed Apr 11 2018 Daiki Ueno dueno@redhat.com - 3.36.1-2 -- Update to NSS 3.36.1 - -* Fri Mar 9 2018 Daiki Ueno dueno@redhat.com - 3.36.0-2 -- Update to NSS 3.36.0 -- Add gcc-c++ to BuildRequires (C++ is needed for gtests) - -* Thu Feb 08 2018 Fedora Release Engineering releng@fedoraproject.org - 3.35.0-5 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - -* Tue Jan 30 2018 Kai Engert kaie@redhat.com - 3.35.0-4 -- Rebuild - -* Tue Jan 23 2018 Daiki Ueno dueno@redhat.com - 3.35.0-3 -- Bump nspr version requirement - -* Tue Jan 23 2018 Daiki Ueno dueno@redhat.com - 3.35.0-2 -- Update to NSS 3.35.0 - -* Tue Nov 14 2017 Daiki Ueno dueno@redhat.com - 3.34.0-2 -- Update to NSS 3.34.0 - -* Tue Nov 7 2017 Kai Engert kaie@redhat.com - 3.33.0-3 -- Change default database file format to "sql", rhbz#1496560 - -* Tue Oct 3 2017 Daiki Ueno dueno@redhat.com - 3.33.0-2 -- Update to NSS 3.33.0 - -* Wed Sep 6 2017 Daiki Ueno dueno@redhat.com - 3.32.0-3 -- Drop the patches which removed #include <prtypes.h> in hasht.h - -* Mon Aug 7 2017 Daiki Ueno dueno@redhat.com - 3.32.0-2 -- Update to NSS 3.32.0 - -* Thu Aug 03 2017 Fedora Release Engineering releng@fedoraproject.org - 3.31.0-4 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - -* Thu Jul 27 2017 Fedora Release Engineering releng@fedoraproject.org - 3.31.0-3 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - -* Wed Jun 21 2017 Daiki Ueno dueno@redhat.com - 3.31.0-2 -- Update to NSS 3.31.0 - -* Fri Jun 2 2017 Daiki Ueno dueno@redhat.com - 3.30.2-3 -- Enable gtests - -* Fri Apr 21 2017 Daiki Ueno dueno@redhat.com - 3.30.2-2 -- Update to NSS 3.30.2 - -* Fri Apr 7 2017 Daiki Ueno dueno@redhat.com - 3.30.1-2 -- Update to NSS 3.30.1 - -* Tue Mar 21 2017 Daiki Ueno dueno@redhat.com - 3.30.0-2 -- Update to NSS 3.30.0 - -* Thu Mar 02 2017 Kai Engert kaie@redhat.com - 3.29.1-3 -- Backport mozbz#1334976 and mozbz#1336487. - -* Fri Feb 17 2017 Daiki Ueno dueno@redhat.com - 3.29.1-2 -- Update to NSS 3.29.1 - -* Wed Feb 8 2017 Daiki Ueno dueno@redhat.com - 3.29.0-2 -- Update to NSS 3.29.0 - -* Fri Jan 6 2017 Daiki Ueno dueno@redhat.com - 3.28.1-2 -- Update to NSS 3.28.1 - -* Thu Dec 22 2016 Kai Engert kaie@redhat.com - 3.28.0-2 -- Update to NSS 3.28.0 - -* Thu Sep 29 2016 Daiki Ueno dueno@redhat.com - 3.27.0-2 -- Update to NSS 3.27.0 - -* Mon Aug 8 2016 Daiki Ueno dueno@redhat.com - 3.26.0-2 -- Update to NSS 3.26.0 -- Remove check policy file patch as it has been upstreamed -- Remove unused directories from split tarball - -* Fri Jun 24 2016 Elio Maldonado emaldona@redhat.com - 3.25.0-2 -- Update to NSS 3.25.0 - -* Tue May 24 2016 Elio Maldonado emaldona@redhat.com - 3.24.0-1.0 -- Update to NSS 3.24.0 - -* Wed Apr 20 2016 Elio Maldonado emaldona@redhat.com - 3.23.0-4 -- Update check policy file patch to better match what will be submitted upstream - -* Thu Mar 24 2016 Elio Maldonado emaldona@redhat.com - 3.23.0-3 -- Enable checking the crypto policy file -- Related: Bug 1157720 - NSS should enforce the system-wide crypto policy - -* Sat Mar 05 2016 Elio Maldonado emaldona@redhat.com - 3.22.3-2 -- Update to NSS 3.23.0 - -* Sun Feb 28 2016 Elio Maldonado emaldona@redhat.com - 3.22.2-2.1 -- Fix version number for update to NSS 3.22.2 - -* Sun Feb 21 2016 Elio Maldonado emaldona@redhat.com - 3.22.1-2 -- Update to NSS 3.22.1 - -* Sat Feb 06 2016 Elio Maldonado emaldona@redhat.com - 3.22.0-2 -- Update to NSS 3.22 - -* Thu Feb 04 2016 Fedora Release Engineering releng@fedoraproject.org - 3.21.0-3 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - -* Thu Nov 12 2015 Elio Maldonado Batiz emaldona@redhat.com - 3.21.1-2 -- Update to NSS 3.21 -- Resolves: Bug 1279912 - nss-3.21 is available -- Resolves: Bug 1258425 - Use __isa_bits macro instead of list of 64-bit architectures - -* Fri Oct 30 2015 Elio Maldonado emaldona@redhat.com - 3.20.1-1 -- Update to NSS 3.20.1 - -* Thu Aug 20 2015 Elio Maldonado emaldona@redhat.com - 3.20.0-2 -- Update to NSS 3.20 - -* Mon Aug 17 2015 Adam Jackson ajax@redhat.com 3.19.3-3 -- Link with -z now - -* Sat Aug 08 2015 Elio Maldonado emaldona@redhat.com - 3.19.3-2 -- Update to NSS 3.19.3 - -* Wed Jun 17 2015 Kai Engert kaie@redhat.com - 3.19.2-2 -- Update to NSS 3.19.2 - -* Thu May 28 2015 Kai Engert kaie@redhat.com - 3.19.1-2 -- Update to NSS 3.19.1 - -* Tue May 19 2015 Kai Engert kaie@redhat.com - 3.19.0-2 -- Update to NSS 3.19 - -* Thu Mar 19 2015 Elio Maldonado emaldona@redhat.com - 3.18.0-1 -- Update to nss-3.18.0 - -* Wed Jan 28 2015 Elio Maldonado emaldona@redhat.com - 3.17.4-1 -- Update to nss-3.17.4 - -* Fri Dec 05 2014 Elio Maldonado emaldona@redhat.com - 3.17.3-1 -- Update to nss-3.17.3 - -* Sun Oct 12 2014 Elio Maldonado emaldona@redhat.com - 3.17.2-1 -- Update to nss-3.17.2 - -* Wed Sep 24 2014 Kai Engert kaie@redhat.com - 3.17.1-1 -- Update to nss-3.17.1 - -* Tue Aug 19 2014 Elio Maldonado emaldona@redhat.com - 3.17.0-1 -- Update to nss-3.17.0 - -* Sun Aug 17 2014 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 3.16.2-3 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - -* Fri Jul 18 2014 Tom Callaway spot@fedoraproject.org - 3.16.2-2 -- fix license handling - -* Sun Jun 29 2014 Elio Maldonado emaldona@redhat.com - 3.16.2-1 -- Update to nss-3.16.2 - -* Sat Jun 07 2014 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 3.16.1-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - -* Tue May 06 2014 Elio Maldonado emaldona@redhat.com - 3.16.1-1 -- Update to nss-3.16.1 -- Resolves: Bug 1094702 - nss-3.16.1 is available - -* Tue Mar 18 2014 Elio Maldonado emaldona@redhat.com - 3.16.0-0 -- Update to nss-3.16.0 - -* Wed Feb 19 2014 Elio Maldonado emaldona@redhat.com - 3.15.5-1 -- Update to nss-3.15.5 - Resolves: Bug 1066877 - -* Sat Jan 25 2014 Elio Maldonado emaldona@redhat.com - 3.15.4-2 -- Add support for ppc64le, Resolves: Bug 1052552 - -* Tue Jan 07 2014 Elio Maldonado emaldona@redhat.com - 3.15.4-1 -- Update to NSS_3_15_4_RTM -- Resolves: Bug 1049229 - nss-3.15.4 is available - -* Sun Nov 24 2013 Elio Maldonado emaldona@redhat.com - 3.15.3-1 -- Update to NSS_3_15_3_RTM -- Related: Bug 1031897 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 - -* Wed Oct 23 2013 Elio Maldonado emaldona@redhat.com - 3.15.2-2 -- Split off nss-util from full nss sources as released upstream - -* Thu Sep 26 2013 Elio Maldonado emaldona@redhat.com - 3.15.2-1 -- Update to NSS_3_15_2_RTM - -* Sat Aug 03 2013 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 3.15.1-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild - -* Tue Jul 02 2013 Elio Maldonado emaldona@redhat.com - 3.15.1-1 -- Update to NSS_3_15_1_RTM - -* Wed May 29 2013 Elio Maldonado emaldona@redhat.com - 3.15-1 -- Update to NSS_3_15_RTM - -* Fri Apr 19 2013 Elio Maldonado emaldona@redhat.com - 3.15-0.1.beta1.2 -- Don't include prtypes.h from hasht.t -- Resolves: rhbz#953277 - rawhide build of glibc fails due to fatal error from nss3/hasht.h - -* Fri Apr 05 2013 Elio Maldonado emaldona@redhat.com - 3.15.beta1-0.1.beta.1 -- Update to NSS_3_15_BETA1 -- Update spec file, patches, and helper scripts on account of a shallower source tree - -* Fri Feb 15 2013 Elio Maldonado emaldona@redhat.com - 3.14.3-1 -- Update to NSS_3_14_3_RTM -- Resolves: rhbz#909782 - specfile support for AArch64 - -* Sat Feb 02 2013 Elio Maldonado emaldona@redhat.com - 3.14.2-2 -- Retagging to prevent nvr update problems with f18 - -* Fri Feb 01 2013 Elio Maldonado emaldona@redhat.com - 3.14.2-1 -- Update to NSS_3_14_2_RTM - -* Thu Dec 27 2012 Elio Maldonado emaldona@redhat.com - 3.14.1-2 -- Install templates.c in /usr/includes/nss3/templates -- Fix bogus date warnings - -* Mon Dec 17 2012 Elio Maldonado emaldona@redhat.com - 3.14.1-1 -- Update to NSS_3_14_1_RTM - -* Sat Oct 27 2012 Elio Maldonado emaldona@redhat.com - 3.14-2 -- Update the license to MPLv2.0 - -* Mon Oct 22 2012 Elio Maldonado emaldona@redhat.com - 3.14-1 -- Update to NSS_3_14_RTM - -* Fri Oct 19 2012 Elio Maldonado emaldona@redhat.com - 3.14-0.1.rc1.1 -- Update to NSS_3_14_RC1 -- The hasht.h from now on is provided by nss-util-devel - -* Fri Jul 20 2012 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 3.13.5-4 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild - -* Wed Jun 20 2012 Elio Maldonado emaldona@redhat.com - 3.13.5-3 -- Resolves: rhbz#833529 - revert unwanted change to nss-util.pc.in - -* Tue Jun 19 2012 Elio Maldonado emaldona@redhat.com - 3.13.5-2 -- Resolves: rhbz#833529 - Remove space from Libs: line in nss-util.pc.in - -* Sat Jun 16 2012 Elio Maldonado emaldona@redhat.com - 3.13.5-1 -- Update to NSS_3_13_5_RTM - -* Sun Apr 08 2012 Elio Maldonado emaldona@redhat.com - 3.13.4-2 -- Resolves: Bug 805716 - Library needs partial RELRO support added -- Patch coreconf/Linux.mk as done on RHEL 6.2 - -* Fri Apr 06 2012 Elio Maldonado emaldona@redhat.com - 3.13.4-1 -- Update to NSS_3_13_4 - -* Sun Apr 01 2012 Elio Maldonado emaldona@redhat.com - 3.13.4-0.1.beta.1 -- Update to NSS_3_13_4_BETA1 -- Improve steps to splitting off util from the nss -- Add executable attribute to the splitting script - -* Tue Mar 27 2012 Elio Maldonado emaldona@redhat.com - 3.13.3-4 -- Resolves: Bug 805716 - Library needs partial RELRO support added - -* Fri Mar 16 2012 Elio Maldonado Batiz emaldona@redhat.com - 3.13.3-3 -- Update the release tag to be higher than in f16 - -* Fri Mar 09 2012 Elio Maldonado Batiz emaldona@redhat.com - 3.13.3-2 -- Require nspr 4.9 - -* Thu Mar 01 2012 Elio Maldonado Batiz emaldona@redhat.com - 3.13.1-4 -- Update to NSS_3_13_3_RTM - -* Fri Jan 13 2012 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 3.13.1-3 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild - -* Mon Nov 28 2011 Elio Maldonado emaldona@redhat.com - 3.13.1-2 -- Fix a gnuc def typo - -* Thu Nov 03 2011 Elio Maldonado emaldona@redhat.com - 3.13.1-1 -- Update to NSS_3_13_1_RTM - -* Sat Oct 15 2011 Elio Maldonado emaldona@redhat.com - 3.13-1 -- Update to NSS_3_13_RTM - -* Fri Oct 07 2011 Elio Maldonado emaldona@redhat.com - 3.13-0.1.rc0.1 -- Update to NSS_3_13_RC0 - -* Thu Sep 8 2011 Ville Skytt ville.skytta@iki.fi - 3.12.11-2 -- Avoid %%post/un shell invocations and dependencies. - -* Tue Aug 09 2011 Elio Maldonado emaldona@redhat.com - 3.12.11-1 -- Update to NSS_3_12_11_RTM - -* Fri May 06 2011 Elio Maldonado emaldona@redhat.com - 3.12.10-1 -- Update to NSS_3_12_10_RTM - -* Mon Apr 25 2011 Elio Maldonado Batiz emaldona@redhat.com - 3.12.10-0.1.beta1 -- Update to NSS_3_12_10_BETA1 - -* Tue Feb 08 2011 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 3.12.9-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild - -* Wed Jan 12 2011 Elio Maldonado emaldona@redhat.com - 3.12.9-1 -- Update to 3.12.9 - -* Mon Dec 27 2010 Elio Maldonado emaldona@redhat.com - 3.12.9-0.1beta2 -- Rebuilt according to fedora pre-release package naming guidelines - -* Fri Dec 10 2010 Elio Maldonado emaldona@redhat.com - 3.12.8.99.2-1 -- Update to NSS_3_12_9_BETA2 - -* Wed Dec 08 2010 Elio Maldonado emaldona@redhat.com - 3.12.8.99.1-1 -- Update to NSS_3_12_9_BETA1 - -* Wed Sep 29 2010 jkeating - 3.12.8-2 -- Rebuilt for gcc bug 634757 - -* Thu Sep 23 2010 Elio Maldonado emaldona@redhat.com - 3.12.8-1 -- Update to 3.12.8 - -* Sat Sep 18 2010 Elio Maldonado emaldona@redhat.com - 3.12.7.99.4-1 -- NSS 3.12.8 RC0 - -* Sat Sep 04 2010 Elio Maldonado emaldona@redhat.com - 3.12.7.99.3-1 -- NSS 3.12.8 Beta 3 - -* Sun Aug 29 2010 Elio Maldonado emaldona@redhat.com - 3.12.7-2 -- Define NSS_USE_SYSTEM_SQLITE and remove nolocalsql patch - -* Mon Aug 16 2010 Elio Maldonado emaldona@redhat.com - 3.12.7-1 -- Update to 3.12.7 - -* Fri Mar 05 2010 Elio Maldonado emaldona@redhat.com - 3.12.6-1 -- Update to 3.12.6 - -* Mon Jan 18 2010 Elio Maldonado emaldona@redhat.com - 3.12.5-2 -- Fix in nss-util-config.in - -* Thu Dec 03 2009 Elio Maldonadoemaldona@redhat.com - 3.12.5-1 -- Update to 3.12.5 - -* Thu Sep 10 2009 Elio Maldonadoemaldona@redhat.com - 3.12.4-8 -- Retagging for a chained build with nss-softokn and nss - -* Thu Sep 10 2009 Elio Maldonadoemaldona@redhat.com - 3.12.4-5 -- Restoring -rpath-link to nss-util-config - -* Tue Sep 08 2009 Elio Maldonadoemaldona@redhat.com - 3.12.4-4 -- Installing shared libraries to %%{_libdir} - -* Sat Sep 05 2009 Elio Maldonadoemaldona@redhat.com - 3.12.4-3 -- Remove symbolic links to shared libraries from devel - 521155 -- Apply nss-nolocalsql patch subset for nss-util -- No rpath-link in nss-util-config - -* Fri Sep 04 2009 Elio Maldonadoemaldona@redhat.com - 3.12.4-2 -- Retagging for a chained build - -* Thu Sep 03 2009 Elio Maldonadoemaldona@redhat.com - 3.12.4-1 -- Update to 3.12.4 -- Don't require sqlite - -* Thu Aug 27 2009 Elio Maldonadoemaldona@redhat.com - 3.12.3.99.3-15 -- Bump the release number for a chained build of nss-util, nss-softokn and nss - -* Thu Aug 27 2009 Elio Maldonadoemaldona@redhat.com - 3.12.3.99.3-14 -- Cleanup nss-util-config.in - -* Thu Aug 27 2009 Elio Maldonadoemaldona@redhat.com - 3.12.3.99.3-13 -- nss-util-devel doesn't require nss-devel - -* Wed Aug 26 2009 Elio Maldonadoemaldona@redhat.com - 3.12.3.99.3-12 -- bump to unique nvr - -* Wed Aug 26 2009 Elio Maldonadoemaldona@redhat.com - 3.12.3.99.3-11 -- Remove spurious executable permissions from nss-util-config -- Shorten some descriptions to keep rpmlint happy - -* Mon Aug 24 2009 Dennis Gilmore dennis@ausil.us 3.12.3.99.3-10 -- dont include the headers in nss-util only in the -devel package -- nss-util-devel Requires nss-devel since its only providing a subset of the headers. - -* Thu Aug 20 2009 Dennis Gilmore dennis@ausil.us 3.12.3.99.3-9 -- Provide nss-devel since we obsolete it - -* Wed Aug 19 2009 Elio Maldonado emaldona@redhat.com 3.12.3.99.3-8.1 -- nss-util-devel obsoletes nss-devel < 3.12.3.99.3-8 - -* Wed Aug 19 2009 Elio Maldonado emaldona@redhat.com 3.12.3.99.3-8 -- Initial build diff --git a/sources b/sources deleted file mode 100644 index cb175de..0000000 --- a/sources +++ /dev/null @@ -1 +0,0 @@ -SHA512 (nss-util-3.39.tar.gz) = ab40cc806c8b17f25d6a1df32659aff730ca92ad8fb16bedfec8ac29660da1b7a2213d3edad1f1a9a5676ad966b46e4bd9cd3353c5ac7a14fcbf41630b82afe8 diff --git a/tests/NSS-tools-should-not-use-SHA1-by-default-when/Makefile b/tests/NSS-tools-should-not-use-SHA1-by-default-when/Makefile deleted file mode 100644 index ea65d87..0000000 --- a/tests/NSS-tools-should-not-use-SHA1-by-default-when/Makefile +++ /dev/null @@ -1,64 +0,0 @@ -# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -# -# Makefile of /CoreOS/nss/Regression/NSS-tools-should-not-use-SHA1-by-default-when -# Description: NSS tools should not use SHA1 by default when -# Author: Hubert Kario hkario@redhat.com -# -# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -# -# Copyright (c) 2016 Red Hat, Inc. -# -# This copyrighted material is made available to anyone wishing -# to use, modify, copy, or redistribute it subject to the terms -# and conditions of the GNU General Public License version 2. -# -# This program is distributed in the hope that it will be -# useful, but WITHOUT ANY WARRANTY; without even the implied -# warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR -# PURPOSE. See the GNU General Public License for more details. -# -# You should have received a copy of the GNU General Public -# License along with this program; if not, write to the Free -# Software Foundation, Inc., 51 Franklin Street, Fifth Floor, -# Boston, MA 02110-1301, USA. -# -# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ - -export TEST=/CoreOS/nss/Regression/NSS-tools-should-not-use-SHA1-by-default-when -export TESTVERSION=1.0 - -BUILT_FILES= - -FILES=$(METADATA) runtest.sh Makefile PURPOSE - -.PHONY: all install download clean - -run: $(FILES) build - ./runtest.sh - -build: $(BUILT_FILES) - test -x runtest.sh || chmod a+x runtest.sh - -clean: - rm -f *~ $(BUILT_FILES) - - -include /usr/share/rhts/lib/rhts-make.include - -$(METADATA): Makefile - @echo "Owner: Hubert Kario hkario@redhat.com" > $(METADATA) - @echo "Name: $(TEST)" >> $(METADATA) - @echo "TestVersion: $(TESTVERSION)" >> $(METADATA) - @echo "Path: $(TEST_DIR)" >> $(METADATA) - @echo "Description: NSS tools should not use SHA1 by default when" >> $(METADATA) - @echo "Type: Regression" >> $(METADATA) - @echo "TestTime: 10m" >> $(METADATA) - @echo "RunFor: nss openssl" >> $(METADATA) - @echo "Requires: nss nss-tools openssl" >> $(METADATA) - @echo "Priority: Normal" >> $(METADATA) - @echo "License: GPLv2" >> $(METADATA) - @echo "Confidential: no" >> $(METADATA) - @echo "Destructive: no" >> $(METADATA) - @echo "Releases: -RHEL4 -RHELClient5 -RHELServer5" >> $(METADATA) - - rhts-lint $(METADATA) diff --git a/tests/NSS-tools-should-not-use-SHA1-by-default-when/PURPOSE b/tests/NSS-tools-should-not-use-SHA1-by-default-when/PURPOSE deleted file mode 100644 index 7caf493..0000000 --- a/tests/NSS-tools-should-not-use-SHA1-by-default-when/PURPOSE +++ /dev/null @@ -1,4 +0,0 @@ -PURPOSE of NSS-tools-should-not-use-SHA1-by-default-when -Description: NSS tools should not use SHA1 by default when -Author: Hubert Kario hkario@redhat.com -Summary: NSS tools should not use SHA1 by default when generating digital signatures/certificates diff --git a/tests/NSS-tools-should-not-use-SHA1-by-default-when/runtest.sh b/tests/NSS-tools-should-not-use-SHA1-by-default-when/runtest.sh deleted file mode 100755 index 8290d92..0000000 --- a/tests/NSS-tools-should-not-use-SHA1-by-default-when/runtest.sh +++ /dev/null @@ -1,125 +0,0 @@ -#!/bin/bash -# vim: dict+=/usr/share/beakerlib/dictionary.vim cpt=.,w,b,u,t,i,k -# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -# -# runtest.sh of NSS-tools-should-not-use-SHA1-by-default-when -# Description: NSS tools should not use SHA1 by default when -# Author: Hubert Kario hkario@redhat.com -# -# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -# -# Copyright (c) 2016 Red Hat, Inc. -# -# This copyrighted material is made available to anyone wishing -# to use, modify, copy, or redistribute it subject to the terms -# and conditions of the GNU General Public License version 2. -# -# This program is distributed in the hope that it will be -# useful, but WITHOUT ANY WARRANTY; without even the implied -# warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR -# PURPOSE. See the GNU General Public License for more details. -# -# You should have received a copy of the GNU General Public -# License along with this program; if not, write to the Free -# Software Foundation, Inc., 51 Franklin Street, Fifth Floor, -# Boston, MA 02110-1301, USA. -# -# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ - -# Include Beaker environment -. /usr/share/beakerlib/beakerlib.sh || exit 1 - -PACKAGE="nss" -PACKAGES="nss openssl" -DBDIR="nssdb" - -rlJournalStart - rlPhaseStartSetup - rlAssertRpm --all - rlRun "TmpDir=$(mktemp -d)" 0 "Creating tmp directory" - rlRun "pushd $TmpDir" - rlRun "mkdir nssdb" - rlRun "certutil -N -d $DBDIR --empty-password" - rlLogInfo "Create a JAR file" - rlRun "mkdir java-dir" - rlRun "pushd java-dir" - rlRun "mkdir META-INF mypackage" - rlRun "echo 'Main-Class: mypackage/MyMainFile' > META-INF/MANIFEST.MF" - rlRun "echo 'Those are not the droids you are looking for' > mypackage/MyMainFile.class" - #rlRun "jar -cfe package.jar mypackage/MyMainFile mypackage/MyMainFile.class" - rlRun "popd" - #rlRun "mv java-dir/package.jar ." - rlPhaseEnd - - rlPhaseStartTest "Self signing certificates" - rlRun "dd if=/dev/urandom of=noise bs=1 count=32 >/dev/null" - rlRun "certutil -d $DBDIR -S -n 'CA' -t 'cTC,cTC,cTC' -s 'CN=CA' -x -z noise" - rlRun -s "certutil -d $DBDIR -L -n 'CA' -a | openssl x509 -noout -text" - rlAssertGrep "Signature Algorithm: sha256WithRSAEncryption" "$rlRun_LOG" - rlAssertNotGrep "Signature Algorithm: sha1WithRSAEncryption" $rlRun_LOG - rlPhaseEnd - - rlPhaseStartTest "Signing certificates" - rlRun "dd if=/dev/urandom of=noise bs=1 count=32 >/dev/null" - rlRun "certutil -d $DBDIR -S -n 'server' -t 'u,u,u' -s 'CN=server.example.com' -c 'CA' -z noise --nsCertType sslClient,sslServer,objectSigning,smime" - rlRun -s "certutil -d $DBDIR -L -n 'server' -a | openssl x509 -noout -text" - rlAssertGrep "Signature Algorithm: sha256WithRSAEncryption" "$rlRun_LOG" - rlAssertNotGrep "Signature Algorithm: sha1WithRSAEncryption" $rlRun_LOG - rlPhaseEnd - - rlPhaseStartTest "Certificate request" - rlRun "dd if=/dev/urandom of=noise bs=1 count=32 >/dev/null" - rlRun "mkdir srv2db" - rlRun "certutil -d srv2db -N --empty-password" - rlRun "certutil -d srv2db -R -s CN=www.example.com -o srv2.req -a -z noise" - rlRun -s "openssl req -noout -text -in srv2.req" - rlAssertGrep "Signature Algorithm: sha256WithRSAEncryption" "$rlRun_LOG" - rlAssertNotGrep "Signature Algorithm: sha1WithRSAEncryption" $rlRun_LOG - rlRun "certutil -d $DBDIR -C -c 'CA' -i srv2.req -a -o srv2.crt" - rlRun -s "openssl x509 -in srv2.crt -noout -text" - rlAssertGrep "Signature Algorithm: sha256WithRSAEncryption" "$rlRun_LOG" - rlAssertNotGrep "Signature Algorithm: sha1WithRSAEncryption" $rlRun_LOG - rlRun "rm -rf srv2db" - rlPhaseEnd - - rlPhaseStartTest "Certificate request with SHA1" - rlRun "dd if=/dev/urandom of=noise bs=1 count=32 >/dev/null" - rlRun "mkdir srv2db" - rlRun "certutil -d srv2db -N --empty-password" - rlRun "certutil -d srv2db -R -s CN=www.example.com -o srv2.req -a -z noise -Z SHA1" - rlRun -s "openssl req -noout -text -in srv2.req" - rlAssertGrep "Signature Algorithm: sha1WithRSAEncryption" "$rlRun_LOG" - rlRun "certutil -d $DBDIR -C -c 'CA' -i srv2.req -a -o srv2.crt" - rlRun -s "openssl x509 -in srv2.crt -noout -text" - rlAssertGrep "Signature Algorithm: sha256WithRSAEncryption" "$rlRun_LOG" - rlAssertNotGrep "Signature Algorithm: sha1WithRSAEncryption" $rlRun_LOG - rlRun "rm -rf srv2db" - rlPhaseEnd - - rlPhaseStartTest "Signing CMS messages" - rlRun "echo 'This is a document' > document.txt" - rlRun "cmsutil -S -d $DBDIR -N 'server' -i document.txt -o document.cms" - rlRun -s "openssl cms -in document.cms -inform der -noout -cmsout -print" - rlAssertGrep "algorithm: sha256" $rlRun_LOG - rlAssertNotGrep "algorithm: sha1" $rlRun_LOG - rlPhaseEnd - - rlPhaseStartTest "CRL signing" - rlRun "echo $(date --utc +update=%Y%m%d%H%M%SZ) > script" - rlRun "echo $(date -d 'next week' --utc +nextupdate=%Y%m%d%H%M%SZ) >> script" - rlRun "echo addext crlNumber 0 1245 >>script" - rlRun "echo addcert 12 $(date -d 'yesterday' --utc +%Y%m%d%H%M%SZ) >>script" - rlRun "echo addext reasonCode 0 0 >>script" - rlRun "cat script" - rlRun "crlutil -G -c script -d $DBDIR -n CA -o ca.crl" - rlRun -s "openssl crl -in ca.crl -inform der -noout -text" - rlAssertGrep "Signature Algorithm: sha256WithRSAEncryption" $rlRun_LOG - rlAssertNotGrep "Signature Algorithm: sha1WithRSAEncryption" $rlRun_LOG - rlPhaseEnd - - rlPhaseStartCleanup - rlRun "popd" - rlRun "rm -r $TmpDir" 0 "Removing tmp directory" - rlPhaseEnd -rlJournalPrintText -rlJournalEnd diff --git a/tests/tests.yml b/tests/tests.yml deleted file mode 100644 index df64aa2..0000000 --- a/tests/tests.yml +++ /dev/null @@ -1,12 +0,0 @@ ---- -# This first play always runs on the local staging system -- hosts: localhost - roles: - - role: standard-test-beakerlib - tags: - - classic - tests: - - NSS-tools-should-not-use-SHA1-by-default-when - required_packages: - - nss-tools - - nss