I resend this as the SF mailing list has not returned me a 
copy of this pice yet.  There are some problems in the 
embedded .spec files in both OpenCA, and openca-tools, as at 
the FTP site.

I have completed patches, and a rebuild of openca-tools (it 
has an improper use of some options in 'install' and is 
'finished; OpenCA needs a bit more with in the Makefile.in in 
the 'install' target.

The patches, the ORIG and patched .spec files [which seem to 
be created through some sort of scripted release mechanism] 
and the 'proof' SRPMs after the patches are at:

        ftp://ftp.owlriver.com/pub/local/ORC/openca/

I would suggest editing the specfile.in files to add the 
'CentOS' specific detection code.  There is also a version 
problem in the .spec file in openca-tools-1.0.0.  I will look 
at the specfile generation code in a bit. There are also 
problems in the Makefile.in with the use of the '-o' and '-g' 
options.

Lines like:

/usr/bin/install -c -o root -g nobody

are ** not ** permissible (in specifying -o and -g options). 
Such options cause errors which users find hard to understand 
when (properly) building as non-root, and should be addressed 
in the %files stanza rather than in 'install'

This .spec file construct is where the ownerships are set:

%defattr(-, -, -)

should be something like

%defattr(644,root,root,755)

... or if something like:

/usr/bin/install -c -o root -g nobody -m 755 openssl-setopt 
/var/tmp/openca-base-1.0.1//opt/openca/bin/openssl-setopt

is REALLY needed,

%defattr(644,root,nobody,755)


I really doubt that the 'nobody' group is needed, when the 
perms are 755, but .... perhaps.   Please advise if this is 
really so.


As to the dangers of root building, and how to do better, 
see my piece about building as non-root:
        http://www.owlriver.com/tips/non-root/

Many people do not 'solve' non-root building, but RPM was (and 
is) clearly able to do EVERYTHING that a root build can do, 
but in a fashion to be safe to the surrounding build 
environment.  Getting this working properly is someting which 
a 'proper' project should be doing, and I can of course help.

I was the long time editor of the RPM website, prior to its 
recent return to Red Hat editorship control, and a founder in 
the CentOS project.   I am certainly willing to send along 
patches to help this project.

-- Russ



---------- Forwarded message ----------
Date: Mon, 13 Oct 2008 13:11:13
From: R P Herrold <[EMAIL PROTECTED]>
To: Users' Help and Suggestions <openca-users@lists.sourceforge.net>
Cc: R P Herrold <[EMAIL PROTECTED]>
Subject: Testing OpenCA ten-ten

On Mon, 13 Oct 2008, Massimiliano Pala wrote:

> I think that the error is related to the fact you have no RPM system 
> installed. If you install the rpm software on your system you will not get 
> that error anymore.

no -- CentOS is the community rebuild of RHEL from Red Hat [I speak as one of 
the core team members], and clearly does have the RPM package amnagement system 
at its heart.  Perhaps the 'rpm-build' package (which provides 
/usr/bin/rpmbuild) was not installed on Samuel Rios Carvalho's system.

I will try to replicate the error in a proper CentOS setup

-- Russ herrold
        herrold at centos dot org

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Openca-Users mailing list
Openca-Users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to