File pkinit-nss.spec of Package pkinit-nss

Overview Repositories Revisions Requests Users Attributes Meta

File pkinit-nss.spec of Package pkinit-nss

%define source_version 0.6.1-1
%define cvs_version 200705021211

Name: pkinit-nss
Version: 0.6.1
Release: 1%{?dist}
Source: %{name}-%{source_version}.tar.gz
# Patch0: %{name}-%{source_version}-cvs%{cvs_version}.patch
Patch1: %{name}-0.6.1-match-default-realms.patch
License: BSD
Group: System Environment/Libraries
Summary: PKINIT for MIT Kerberos
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
BuildRequires: krb5-devel >= 1.5, pkgconfig, glib2-devel

%if 0%{?suse_version} >= 1010
BuildRequires: mozilla-nss-devel >= 3.11 libcom_err
%endif

%if 0%{?fedora_version} == 6
BuildRequires: nss-devel >= 3.11.2
%endif

%description
The pkinit-nss package implements the PKINIT standard for MIT Kerberos.  It
does so using the Mozilla NSS library.

%debug_package

%prep
%setup -q -n %{name}-%{source_version}
# %patch0
%patch1 -p0

%build
autoreconf -I `pkg-config --variable prefix glib-2.0`/share/aclocal
%configure --disable-static --enable-gcc-warnings
make

%install
rm -fr $RPM_BUILD_ROOT
make install DESTDIR=$RPM_BUILD_ROOT
rm -f $RPM_BUILD_ROOT/%{_libdir}/krb5/plugins/preauth/*.{a,la}

%clean
rm -fr $RPM_BUILD_ROOT

%files
%defattr(-,root,root)
%doc ChangeLog doc/README doc/STANDARDS doc/TODO backport/*.patch
%doc doc/CONFIGURATION
%doc doc/openssl/*.sh
%{_bindir}/pkinit-show-cert-guid
%{_libdir}/krb5

%changelog
* Mon Feb  5 2007 Nalin Dahyabhai <nalin@redhat.com> 0.6.0-1
- fix encoding/interpreting of e_data, encoding of DH parameters, error
  reporting for revoked certificates

* Mon Feb  5 2007 Nalin Dahyabhai <nalin@redhat.com> 0.5.0-1
- add protocol-level error reporting and handling

* Thu Jan 25 2007 Nalin Dahyabhai <nalin@redhat.com> 0.4.0-1
- make debug logging a run-time, not compile-time option

* Mon Jan 22 2007 Nalin Dahyabhai <nalin@redhat.com> 0.3.5-1
- fix inclusion of the signer certifying chain now that we're careful to
  destroy certificates when we're finished with them (#223552)

* Fri Jan 19 2007 Nalin Dahyabhai <nalin@redhat.com> 0.3.4-1
- fix validation of signer certificates when the entire certifying chain isn't
  already known to us, but intermediate links are provided in signed-data
  (#223552)

* Fri Jan 12 2007 Nalin Dahyabhai <nalin@redhat.com> 0.3.3-1
- update preauth plugin support patch to base off of 1.5.1-1.6 diff
- unref/free certificates, keys, contexts, and slots once we're finished
  using them (#221936)

* Wed Jan 10 2007 Nalin Dahyabhai <nalin@redhat.com> 0.3.2-3_pal18998
- temporarily disable shutdowns of NSS while a proper fix for #221936 gets
  written

* Mon Jan  8 2007 Nalin Dahyabhai <nalin@redhat.com> 0.3.2-2_pal18998
- add the configuration text file

* Mon Jan  8 2007 Nalin Dahyabhai <nalin@redhat.com> 0.3.2-1_pal18998
- fix iteration over the certificate chain when we're creating signed data
  messages (#221917)

* Thu Dec 21 2006 Nalin Dahyabhai <nalin@redhat.com> 0.3.1-1_pal18998
- implement a "mappings_file" option a la Heimdal's, so that we don't have
  to have the principal name encoded in the certificate's subjectAltName
  extension in order to accept it for a particular Kerberos identity (#212867)

* Tue Dec 19 2006 Nalin Dahyabhai <nalin@redhat.com> 0.3.0-1_pal18998
- fix protocol implementation errors which caused interop problems with Heimdal
- update preauth plugin support backport to 1.6 branch, revision 18998

* Wed Oct 18 2006 Nalin Dahyabhai <nalin@redhat.com> 0.2.1-1_pal18750
- fix a double-free

* Wed Oct 18 2006 Nalin Dahyabhai <nalin@redhat.com> 0.2.0-1_pal18750
- implement DH-based key agreement
- disable OCSP by default on the client-side (#209244)
- update to changes for newer support backport

* Wed Oct 18 2006 Nalin Dahyabhai <nalin@redhat.com> 0.1.0-3_pal18695
- turn on more warnings by default

* Wed Oct 18 2006 Nalin Dahyabhai <nalin@redhat.com> 0.1.0-2_pal18695
- add PAL version to release field (informative, #211399)

* Wed Oct 18 2006 Nalin Dahyabhai <nalin@redhat.com> 0.1.0-2
- add missing %%clean section (#211399)

* Wed Oct 18 2006 Nalin Dahyabhai <nalin@redhat.com>
- initial build

Places

File pkinit-nss.spec of Package pkinit-nss

Places