File neon.spec of Package neon
#
# spec file for package neon (Version 0.28.3)
#
# Copyright (c) 2008 SUSE LINUX Products GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
# Please submit bugfixes or comments via http://bugs.opensuse.org/
#
# norootforbuild
Name: neon
BuildRequires: libexpat-devel libopenssl-devel openssl zlib-devel
Summary: An HTTP and WebDAV Client Library
Version: 0.28.3
Release: 1
License: LGPL v2.1 or later
Group: Development/Libraries/Other
Url: http://www.webdav.org/neon
BuildRoot: %{_tmppath}/%{name}-%{version}-build
Source: http://www.webdav.org/neon/neon-%{version}.tar.bz2
Patch0: neon-%{version}-bloat.patch
%description
neon is an HTTP and WebDAV client library with a C interface.
Featuring: * High-level interface to HTTP and WebDAV methods
(PUT, GET, HEAD, etc.)
* Low-level interface to HTTP request handling to allow implementing
new methods easily
* HTTP/1.1 and HTTP/1.0 persistent connections
* RFC2617 basic and digest authentication (including auth-int,
md5-sess)
* Proxy support (including basic/digest authentication)
* Generic WebDAV 207 XML response handling mechanism
* XML parsing using the expat or libxml parsers
* Easy generation of error messages from 207 error responses
* WebDAV resource manipulation: MOVE, COPY, DELETE, MKCOL
* WebDAV metadata support: set and remove properties, query any set of
properties (PROPPATCH/PROPFIND)
Authors:
--------
Joe Orton <joe@manyfish.co.uk>
%package -n libneon27
License: GPL v2 or later
Summary: An HTTP and WebDAV Client Library
Group: Development/Libraries/Other
Requires: %{name} = %{version}
%description -n libneon27
neon is an HTTP and WebDAV client library with a C interface.
Featuring: * High-level interface to HTTP and WebDAV methods
(PUT, GET, HEAD, etc.)
* Low-level interface to HTTP request handling to allow implementing
new methods easily
* HTTP/1.1 and HTTP/1.0 persistent connections
* RFC2617 basic and digest authentication (including auth-int,
md5-sess)
* Proxy support (including basic/digest authentication)
* Generic WebDAV 207 XML response handling mechanism
* XML parsing using the expat or libxml parsers
* Easy generation of error messages from 207 error responses
* WebDAV resource manipulation: MOVE, COPY, DELETE, MKCOL
* WebDAV metadata support: set and remove properties, query any set of
properties (PROPPATCH/PROPFIND)
Authors:
--------
Joe Orton <joe@manyfish.co.uk>
%package -n libneon-devel
License: GPL v2 or later
Summary: An HTTP and WebDAV Client Library
Group: Development/Libraries/Other
Requires: libneon27 = %{version} glibc-devel
# renamed after openSUSE 10.3
Provides: neon-devel = 0.27
Obsoletes: neon-devel < 0.27
%description -n libneon-devel
neon is an HTTP and WebDAV client library with a C interface.
Featuring: * High-level interface to HTTP and WebDAV methods
(PUT, GET, HEAD, etc.)
* Low-level interface to HTTP request handling to allow implementing
new methods easily
* HTTP/1.1 and HTTP/1.0 persistent connections
* RFC2617 basic and digest authentication (including auth-int,
md5-sess)
* Proxy support (including basic/digest authentication)
* Generic WebDAV 207 XML response handling mechanism
* XML parsing using the expat or libxml parsers
* Easy generation of error messages from 207 error responses
* WebDAV resource manipulation: MOVE, COPY, DELETE, MKCOL
* WebDAV metadata support: set and remove properties, query any set of
properties (PROPPATCH/PROPFIND)
Authors:
--------
Joe Orton <joe@manyfish.co.uk>
%prep
%setup -q
%patch0
%build
rm -f aclocal.m4 ltmain.sh
sh autogen.sh
%configure \
--with-ssl \
--disable-nls \
--enable-shared \
--disable-static \
--enable-warnings \
--with-pic
%{__make} %{?jobs:-j%jobs}
%install
make DESTDIR=$RPM_BUILD_ROOT docdir=%{_defaultdocdir}/%{name} install install-man install-html
rm -f $RPM_BUILD_ROOT%{_libdir}/*.la
%check
# make check
%clean
rm -rf $RPM_BUILD_ROOT
%post -n libneon27 -p /sbin/ldconfig
%postun -n libneon27 -p /sbin/ldconfig
%files
%defattr(-,root,root)
%doc doc/*.txt doc/html
%doc AUTHORS BUGS ChangeLog NEWS README THANKS TODO
%files -n libneon27
%defattr(-,root,root)
%{_libdir}/*.so.27*
%files -n libneon-devel
%defattr(-,root,root)
%{_bindir}/neon-config
%dir %{_includedir}/neon
%{_includedir}/neon/*.h
%{_mandir}/*/*
%{_libdir}/*.so
%{_libdir}/pkgconfig/neon.pc
%changelog
* Thu Aug 21 2008 prusnak@suse.cz
- updated to 0.28.3
* SECURITY (CVE-2008-3746): Fix potential NULL pointer dereference in
Digest domain parameter support; could allow a DoS by a malicious server
* Fix parsing of *-Authenticate response header with LWS after quoted value
* Fix ne_set_progress(, NULL, ) to match pre-0.27 behaviour (and not crash)
* Fix to disable Nagle on Win32 with newer toolchain (thanks to Stefan Küng)
* Fix build on Netware (Guenter Knauf)
* Document existing ne_uri_parse() API postcondition and ne_uri_resolve()
pre/postconditions regarding the ->path field in ne_uri structures
* Mark ne_{,buffer_}concat with sentinel attribute for GCC >= 4.
* Distinguish the error message for an SSL handshake which fails after a
client cert was requested.
* Compile with PIC flags by default even for static library builds
* Tue Jun 03 2008 coolo@suse.de
- require COPYING package
* Sun May 18 2008 coolo@suse.de
- fix rename of xxbit packages
* Thu Apr 10 2008 ro@suse.de
- added baselibs.conf file to build xxbit packages
for multilib support
* Thu Apr 03 2008 prusnak@suse.cz
- updated to 0.28.2
* Support "Proxy-Connection: Keep-Alive" for compatibility with HTTP/1.0
proxies which require persistent connections for NTLM authentication
* Fix an fd leak in ne_ssl_{,cli}cert_read (GnuTLS only)
* Enable fast initialization in GnuTLS.
(changes from 0.28.1)
* Fix build on SCO OpenServer 5.0.x (thanks to Nico Kadel-Garcia)
* Fix handling of Digest domain parameter values without a trailing slash
* Fix build against apr-util's bundled libexpat.la in Subversion
* Add --without-pakchois to configure (Arfrever Frehtes Taifersar Arahesis)
* zh message catalog renamed to zh_CN, translation updated (Dongsheng Song)
- disable make check, does not build on all archs
- dropped patch:
* digest.patch (included in update)
* Mon Mar 03 2008 olh@suse.de
- fix bug in digest domain parameter handling to fix svn commit
* Fri Feb 29 2008 crrodriguez@suse.de
- run the test suite to detect any possible regression
* Fri Feb 15 2008 crrodriguez@suse.de
- version 0.28.0
- Interface changes:
* none, API and ABI backwards-compatible with 0.27.x
- New interfaces:
* ne_pkcs11.h: added basic PKCS#11 support (requires GnuTLS and pakchois)
* ne_auth.h: added NE_AUTH_ALL and NE_AUTH_DEFAULT constants
* ne_socket.h: added ne_sock_peer(), ne_sock_prebind(), ne_sock_cipher()
* ne_session.h: NE_SESSFLAG_TLSSNI flag added; TLS SNI support is enabled by default, where supported; ne_set_localaddr() added
* ne_request.h: added close_conn hooks (Robert J. van der Boon)
* ne_basic.h: added ne_options2()
- Other changes:
* add Polish (pl) translation (Arfrever Frehtes Taifersar Arahesis)
* add support for the 'domain' parameter in Digest authentication
* fix fd leak in ne_sock_connect() error path (Andrew Teirney)
* the FD_CLOEXEC flag is set on socket fds
* fix timezone handling in ne_dates for more platforms (Alessandro Vesely)
* fix ne_simple_propfind() to print XML namespaces in flat property values
* fix ne_get_range() for unspecified end-range case (Henrik Holst)
* fix ne_strclean() to be locale-independent and avoid possible Win32 crash
* fix ne_get_error() to not "clean" localized error strings
* fix ne_ssl_clicert_read() to fail for client certs missing cert or key
* Mon Nov 26 2007 crrodriguez@suse.de
- version 0.27.2
* Fix crash in GSSAPI Negotiate response header verification.
- Cleanup excessive dependencies on -devel package.
* Fri Oct 12 2007 ro@suse.de
- add provides/obsoletes for neon-devel in libneon-devel
after package rename
* Tue Sep 25 2007 prusnak@suse.cz
- update do 0.27.1
* New interfaces:
- ne_session.h: ne_fill_proxy_uri() retrieves configured proxy,
ne_hook_post_headers() adds a hook after response headers are read,
ne_set_connect_timeout() sets session connection timeout,
NE_SESSFLAG_RFC4918, NE_SESSFLAG_CONNAUTH flags added
- ne_socket.h: ne_sock_connect_timeout() sets connection timeout,
ne_iaddr_reverse() performs reverse DNS lookup
- ne_string.h: ne_buffer_snprintf() prints to a buffer object
- ne_xml.h: ne_xml_resolve_nspace() resolves namespace prefixes
* Interface changes:
- ne_set_notifier() replaces ne_set_status(); finer-grained and type-safe
connection status information now provided; obsoletes ne_set_progress()
- ne_xml_dispatch_request() now only invokes the XML parser for
response entities with an XML content-type, following RFC 3023 rules
- ne_acl_set() now takes a "const" entries array
- LFS compatibility functions *64 removed: all functions taking an
off_t now take an ne_off_t which is off64_t for LFS builds
* GnuTLS support now mostly feature-complete with OpenSSL support:
- greatly improved SSL distinguished name handling with GnuTLS >= 1.7.8
* Other changes:
- descriptive error messages for authentication failures
- SSPI support uses canonical DNS server name (Yves Martin)
- fixes for handling of "stale" parameter in Digest authentication
- added support for URIs in SSL server certificate subjectAltName field
- fix compiler warnings with expat 2.x
- fix handling of "Transfer-Encoding: identity" responses from privoxy
* Fix regression in response progress counter for notifier/progress callbacks
* Fix interface description for ne_set_notifier() callback; sr.total
is set to -1 not 0 for an indeterminate response length
* Tue Jul 17 2007 prusnak@suse.cz
- update to 0.26.4
* Fix Negotiate Authentication-Info response header verification with GSSAPI
* Fix multiple handlers with ne_add_{server,proxy}_auth (Werner Baumann)
* Fix SSPI build with some versions of MinGW (Gisle Vanem)
* Fix for SSPI segfault in response header verification (Mike DiCuccio)
* Fix error strings for CONNECT SSL proxy tunnel request failure
* Fix install-nls for VPATH builds (Hans Meine)
* Fix use of unencrypted client certs with GnuTLS
* Fix ne_lock* If: header insertion to use CRLF-terminated headers
* Fix test suite failures on QNX by working around send() length limit
* Fix handling of POSIX strerror_r failure case in ne_strerror
* Fix alignment issues in test suite MD5 code
* Sat Apr 28 2007 dmueller@suse.de
- fix buildrequires
* Tue Apr 17 2007 prusnak@suse.cz
- updated spec file to reflect expat package split
* Sat Mar 31 2007 rguenther@suse.de
- add zlib-devel BuildRequires
* Wed Jan 24 2007 prusnak@suse.cz
- update to 0.26.3
* build fix for platforms without libintl.h
* use Libs.private in neon.pc for newer versions of pkg-config
* fix error reported for LOCK responses lacking a Lock-Token header
* security fix CVE-2007-0157: fix buffer under-read in URI parser
* fix handling of "nextnonce" parameter in Digest authentication
- drop obsoleted patch from Jan 15 (included in update)
* Mon Jan 15 2007 olh@suse.de
- do not cast char pointers into int pointers (CVE-2007-0157 / #235083)
* Thu Jul 20 2006 olh@suse.de
- update to 0.26.1
new API
- neon-devel requires openssl-devel zlib-devel expat
* Wed Jan 25 2006 mls@suse.de
- converted neededforbuild to BuildRequires
* Wed Jun 29 2005 olh@suse.de
- build with expat instead of libxml2, should speed up svn checkout
of large files (#94606)
* Wed Feb 02 2005 meissner@suse.de
- fix build with gcc4, added 2 sentinel mark ups.
* Sun Oct 17 2004 olh@suse.de
- remove .so link from main package, its already in -devel
* Sat Sep 25 2004 olh@suse.de
- update for gcc4, -Wimplicit-prototypes and inline
* Tue Jul 06 2004 olh@suse.de
- update to 0.24.7
* Sun May 09 2004 olh@suse.de
- add neon-CAN-2004-0398.patch (#39774)
* Thu Apr 01 2004 olh@suse.de
- add CAN-2004-0179.diff (#37716)
* Thu Jan 22 2004 olh@suse.de
- update for gcc3.4, -Wimplicit-prototypes and inline
* Sat Jan 10 2004 adrian@suse.de
- add %%defattr and %%run_ldconfig
* Fri Nov 28 2003 mcihar@suse.cz
- updated to 0.24.4, some highlights:
* Major changes to XML interface
* Major changes to SSL interface
* Add a pkg-config file
* Tons of fixes
* Thu Apr 24 2003 olh@suse.de
- update to 0.23.9
Changes in release 0.23.9:
* neon-config exports includes needed for OpenSSL given by
pkg-config.
* ne_redirect_location will return NULL if redirect hooks have
not been registered for the session (Ralf Mattes <rm@fabula.de>).
Changes in release 0.23.8:
* On Linux, skip slow lookup for IPv6 addresses when IPv6 support
is not loaded in kernel (thanks to Daniel Stenberg for this
technique).
* Update to autoconf 2.57 and libtool 1.4.3.
* Sat Mar 01 2003 olh@suse.de
- apply security fix from 0.23.8
* SECURITY: Prevent control characters from being included in the
reason_phrase field filled in by ne_parse_statusline(), and in
the session error string.
* Fix digest auth response verification for >9 responses in session
(bug manifests as "Server was not authenticated correctly" error).
* Tue Jan 28 2003 olh@suse.de
- update to 0.23.7
Changes in release 0.23.7:
* Fix for handling EINTR during write() call (Sergey N Ushakov).
* When available, use pkg-config to determine compiler flags
needed to use OpenSSL headers and libraries.
* Tue Jan 21 2003 olh@suse.de
- update to 0.23.6
* Sat Oct 12 2002 olh@suse.de
- update to 0.23.5
move interface documentation to -devel
* Thu Sep 19 2002 olh@suse.de
- update to 0.23.4, enable build with -g
* Sat Aug 31 2002 poeml@suse.de
- update to 0.22.0, needed by subversion
* Fri Aug 09 2002 olh@suse.de
- devel requires base package
* Sat Jul 27 2002 adrian@suse.de
- fix neededforbuild
* Sun Jun 23 2002 olh@suse.de
- update to 0.21.3
* Sat May 04 2002 olh@suse.de
- initial SuSE package, version 0.20.0
