[p11-kit] Split out the trust module into its own package
Stef Walter
stefw at fedoraproject.org
Fri Mar 8 22:46:34 UTC 2013
commit 9f246bb23932f3e6e8ec1d4f05434601c3049161
Author: Stef Walter <stefw at gnome.org>
Date: Fri Mar 8 13:01:51 2013 +0100
Split out the trust module into its own package
* Update to upstream 0.16.3
* Provide a replacement for libnssckbi.so
p11-kit.spec | 46 ++++++++++++++++++++++++++++++++++++++++++----
sources | 2 +-
2 files changed, 43 insertions(+), 5 deletions(-)
---
diff --git a/p11-kit.spec b/p11-kit.spec
index bffdfc9..2b5cf23 100644
--- a/p11-kit.spec
+++ b/p11-kit.spec
@@ -1,5 +1,5 @@
Name: p11-kit
-Version: 0.16.1
+Version: 0.16.3
Release: 1%{?dist}
Summary: Library for loading and sharing PKCS#11 modules
@@ -23,6 +23,27 @@ The %{name}-devel package contains libraries and header files for
developing applications that use %{name}.
+%package trust
+Summary: System trust module from %{name}
+Requires: %{name}%{?_isa} = %{version}-%{release}
+Requires(post): %{_sbindir}/update-alternatives
+Requires(postun): %{_sbindir}/update-alternatives
+Conflicts: nss < 3.14.3-9
+
+%description trust
+The %{name}-trust package contains a system trust PKCS#11 module which
+contains certificate anchors and black lists.
+
+
+# solution taken from icedtea-web.spec
+%define multilib_arches ppc64 sparc64 x86_64
+%ifarch %{multilib_arches}
+%define alt_ckbi libnssckbi.so.%{_arch}
+%else
+%define alt_ckbi libnssckbi.so
+%endif
+
+
%prep
%setup -q
@@ -49,8 +70,18 @@ make check
%post -p /sbin/ldconfig
+%post trust
+%{_sbindir}/update-alternatives --install %{_libdir}/libnssckbi.so \
+ %{alt_ckbi} %{_libdir}/pkcs11/p11-kit-trust.so 30
+
%postun -p /sbin/ldconfig
+%postun trust
+if [ $1 -eq 0 ] ; then
+ # package removal
+ %{_sbindir}/update-alternatives --remove %{alt_ckbi} %{_libdir}/pkcs11/p11-kit-trust.so
+fi
+
%files
%doc AUTHORS COPYING NEWS README
@@ -62,9 +93,6 @@ make check
%{_bindir}/p11-kit
%{_libdir}/libp11-kit.so.*
%{_libdir}/p11-kit-proxy.so
-%{_libdir}/pkcs11/p11-kit-trust.so
-%{_datadir}/p11-kit/modules/p11-kit-trust.module
-%{_datadir}/p11-kit/p11-kit-extract-trust
%files devel
%{_includedir}/p11-kit-1/
@@ -72,8 +100,18 @@ make check
%{_libdir}/pkgconfig/p11-kit-1.pc
%doc %{_datadir}/gtk-doc/
+%files trust
+%{_libdir}/pkcs11/p11-kit-trust.so
+%{_datadir}/p11-kit/modules/p11-kit-trust.module
+%{_datadir}/p11-kit/p11-kit-extract-trust
+
%changelog
+* Fri Mar 08 2013 Stef Walter <stefw at redhat.com> - 0.16.3-1
+- Update to upstream version 0.16.3
+- Split out system trust module into its own package.
+- p11-kit-trust provides an alternative to an nss module
+
* Tue Mar 05 2013 Stef Walter <stefw at redhat.com> - 0.16.1-1
- Update to upstream version 0.16.1
- Setup source directories as appropriate for Shared System Certificates feature
diff --git a/sources b/sources
index 94eb89b..e46fb05 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-689f23b57e26f941cdc9fd13733fc1d2 p11-kit-0.16.1.tar.gz
+b1604f04c3fcf00b1726804744db2161 p11-kit-0.16.3.tar.gz
More information about the scm-commits
mailing list