Hello community, here is the log from the commit of package dirmngr.5653 for openSUSE:13.2:Update checked in at 2016-10-04 13:06:53 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:13.2:Update/dirmngr.5653 (Old) and /work/SRC/openSUSE:13.2:Update/.dirmngr.5653.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "dirmngr.5653" Changes: -------- New Changes file: --- /dev/null 2016-09-15 12:42:18.240042505 +0200 +++ /work/SRC/openSUSE:13.2:Update/.dirmngr.5653.new/dirmngr.changes 2016-10-04 13:06:35.000000000 +0200 @@ -0,0 +1,241 @@ +------------------------------------------------------------------- +Tue Sep 13 15:37:37 UTC 2016 - [email protected] + +- add the required files to make daemon mode work (bsc#994794) + * add dirmngr.conf + * add dirmngr.logrotate + * add dirmngr.tmpfiles + * add ldapservers.conf + +------------------------------------------------------------------- +Mon Oct 20 08:28:48 UTC 2014 - [email protected] + +- initialize pth with libgcrypt > 1.6.0 (bnc#901845) + * added dirmngr-initialize_pth.patch + * http://bugs.gnupg.org/gnupg/issue1590 +- spec-cleaned .spec + +------------------------------------------------------------------- +Tue Dec 17 20:35:39 UTC 2013 - [email protected] + +- Update to version 1.1.1 + + Fixes for building with newer mingw32 versions. +- Remove dirmngr-GPLv3.patch and dirmngr-GPLv3.patch; merged and/or + fixed on upstream release +- Subpackage locales + +------------------------------------------------------------------- +Thu Dec 1 16:02:30 UTC 2011 - [email protected] + +- fix license in specfile (bnc#734177) + +------------------------------------------------------------------- +Wed Nov 30 09:48:08 UTC 2011 - [email protected] + +- add automake as buildrequire to avoid implicit dependency + +------------------------------------------------------------------- +Sun Sep 18 17:17:12 UTC 2011 - [email protected] + +- Remove redundant tags/sections from specfile + (cf. packaging guidelines) +- Use %_smp_mflags for parallel build + +------------------------------------------------------------------- +Mon Aug 29 20:09:58 UTC 2011 - [email protected] + +- Add missing -llber where relevant. + +------------------------------------------------------------------- +Thu Nov 18 16:11:04 UTC 2010 - [email protected] + +- upstream relicensed to GPLv3 (bnc#652989) +- add dirmngr-GPLv3.patch +- add LICENSE.README + +------------------------------------------------------------------- +Tue Aug 17 15:05:00 UTC 2010 - [email protected] + +- update to dirmngr-1.1.0 + - only bumps version number + +------------------------------------------------------------------- +Wed Apr 14 20:50:43 UTC 2010 - [email protected] + +- fix deps + * added + o libgpg-error-devel >= 1.4 + * updated + o libassuan-devel >= 2.0.0 + o pth / libpth-devel >= 1.3.7 + +------------------------------------------------------------------- +Tue Apr 6 10:48:09 UTC 2010 - [email protected] + +- update to dirmngr-1.1.0rc1 + * Fixed a resource problem with LDAP CRLs. + * Fixed a bad EOF detection with HTTP CRLs. + * Made "dirmngr-client --url --load-crl URL" work. + * New option --ignore-cert-extension. + +------------------------------------------------------------------- +Fri Dec 25 22:11:03 CET 2009 - [email protected] + +- enable parallel build + +------------------------------------------------------------------- +Wed Jun 17 17:06:13 CEST 2009 - [email protected] + +- update to dirmngr-1.0.3 + * Client based trust anchors are now supported. + * Configured certificates with the suffix ".der" are now also used. + * Libgcrypt 1.4 is now required. +- drop obsoleted db-devel build dependency + +------------------------------------------------------------------- +Thu Jun 11 11:19:13 CEST 2009 - [email protected] + +- change BuildRequires: (pth-devel -> libpth-devel) + +------------------------------------------------------------------- +Mon Jun 1 11:18:43 CEST 2009 - [email protected] + +- BuildRequires: pth-devel + +------------------------------------------------------------------- +Mon Aug 4 14:12:54 CEST 2008 - [email protected] + +- update to 1.0.2 + * new option --url for the LOOKUP command and dirmngr-client + * the LOOKUP command does now also consults the local cache + - new option --cache-only for it and --local for dirmngr-client + * port to Windows completed + * improved certificate chain construction + * support loading of PEM encoded CRLs via HTTP. +- install some certificates to %docdir/dirmngr/examples +- removed unnecessary krb5 dependency +- use %makeinstall macro + + +------------------------------------------------------------------- +Sun Mar 16 05:26:31 CET 2008 - [email protected] + +- fix file-not-in-lang errors +- fix info-files-without-install-info-* errors +- update to version 1.0.1 + * The option --ocsp-signer may now take a filename to allow several + certificates to be valid signers for the default responder. + * New option --ocsp-max-period and improved the OCSP time checks. + * New option --force-default-signer for dirmngr-client. + + +------------------------------------------------------------------- +Mon Jul 30 16:15:27 CEST 2007 - [email protected] + +- updated to 1.0.0 + * Removed included gettext. We now require the system to provide a + suitable installation. + +------------------------------------------------------------------- +Thu Jul 26 13:16:06 CEST 2007 - [email protected] + +- Build with libassuan-devel. + +------------------------------------------------------------------- +Wed Mar 14 14:52:34 CET 2007 - [email protected] + +- update to 0.9.7 +- remove builtin pth copy +- package man pages +- fix build + +------------------------------------------------------------------- +Fri Jun 30 15:33:43 CEST 2006 - [email protected] + +- updated to version 0.9.5 + improved diagnostic + better CRL handling + see NEWS + +------------------------------------------------------------------- +Wed Jan 25 21:35:30 CET 2006 - [email protected] + +- converted neededforbuild to BuildRequires + +------------------------------------------------------------------- +Mon Sep 26 01:31:13 CEST 2005 - [email protected] + +- added LDAP_DEPRECATED to CFLAGS + +------------------------------------------------------------------- +Mon Jul 11 18:22:25 CEST 2005 - [email protected] + +- updated to version 0.9.2 +- removed obsoleted patch 64bit.diff +- link against libpth 2.0.4 staticaly, hopefully we can convert + this to a native thread implementation later. + +------------------------------------------------------------------- +Mon Jan 24 01:55:51 CET 2005 - [email protected] + +- find ldap on lib64 + +------------------------------------------------------------------- +Wed Jan 12 17:25:31 CET 2005 - [email protected] + +- updated to version 0.5.65.65.65.65.6 +- removed obsoleted patch libldap.diff + +------------------------------------------------------------------- +Fri Jul 23 22:16:08 CEST 2004 - [email protected] + +- Fix neededforbuild. +- Fix 64-bit bugs. + +------------------------------------------------------------------- +Tue Jul 13 16:25:38 CEST 2004 - [email protected] + ++++ 44 more lines (skipped) ++++ between /dev/null ++++ and /work/SRC/openSUSE:13.2:Update/.dirmngr.5653.new/dirmngr.changes New: ---- LICENSE.README dirmngr-1.0.2-optflags.patch dirmngr-1.1.1.tar.bz2 dirmngr-initialize_pth.patch dirmngr.changes dirmngr.conf dirmngr.logrotate dirmngr.spec dirmngr.tmpfiles ldapservers.conf ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ dirmngr.spec ++++++ # # spec file for package dirmngr # # Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed # upon. The license for this file, and modifications and additions to the # file, is the same license as for the pristine package itself (unless the # license for the pristine package is not an Open Source License, in which # case the license is the MIT License). An "Open Source License" is a # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. # Please submit bugfixes or comments via http://bugs.opensuse.org/ # Name: dirmngr Version: 1.1.1 Release: 0 Summary: A Client for Managing and Downloading CRLs License: GPL-3.0+ Group: Productivity/Networking/LDAP/Utilities Url: http://www.gnupg.org/aegypten/ Source: ftp://ftp.gnupg.org/gcrypt/dirmngr/%{name}-%{version}.tar.bz2 Source1: LICENSE.README Source2: dirmngr.conf Source3: ldapservers.conf Source4: dirmngr.tmpfiles Source5: dirmngr.logrotate Patch0: dirmngr-1.0.2-optflags.patch Patch1: dirmngr-initialize_pth.patch BuildRequires: automake BuildRequires: libassuan-devel >= 2.0.0 BuildRequires: libgcrypt-devel >= 1.4.0 BuildRequires: libgpg-error-devel >= 1.4 BuildRequires: libksba-devel >= 1.0.2 BuildRequires: libpth-devel >= 1.3.7 BuildRequires: openldap2-devel Recommends: logrotate Requires: openssl Requires(pre): %{install_info_prereq} BuildRequires: systemd-rpm-macros BuildRequires: pkgconfig(systemd) %{?systemd_requires} Recommends: %{name}-lang %description Dirmngr is a client for managing and downloading certificate revocation lists (CRLs) for X509 certificates and for downloading the certificates themselves. %lang_package %prep %setup -q %patch0 %patch1 cp %{SOURCE1} . %build NOCONFIGURE=1 ./autogen.sh #export CFLAGS="$RPM_OPT_FLAGS -DLDAP_DEPRECATED" %configure \ --libexecdir=%{_libexecdir}/dirmngr \ --docdir=%{_defaultdocdir}/%{name} make %{?_smp_mflags} %install make %{?_smp_mflags} DESTDIR=%{buildroot} install %find_lang %{name} # Directories for daemon mode mkdir -p %{buildroot}%{_sysconfdir}/dirmngr/trusted-certs mkdir -p %{buildroot}%{_var}/cache/dirmngr/crls.d mkdir -p %{buildroot}%{_var}/lib/dirmngr/extra-certs mkdir -p %{buildroot}%{_var}/log/dirmngr install -p -m644 %{SOURCE2} %{SOURCE3} %{buildroot}%{_sysconfdir}/dirmngr/ install -p -m644 -D %{SOURCE4} %{buildroot}%{_libexecdir}/tmpfiles.d/dirmngr.conf install -p -m644 -D %{SOURCE5} %{buildroot}%{_sysconfdir}/logrotate.d/dirmngr %post %install_info --info-dir=%{_infodir} %{_infodir}/%{name}.info.gz [ -x /usr/bin/systemd-tmpfiles ] && \ /usr/bin/systemd-tmpfiles --create dirmngr.conf || : %postun %install_info_delete --info-dir=%{_infodir} %{_infodir}/%{name}.info.gz %files %defattr(-,root,root) %doc AUTHORS COPYING ChangeLog NEWS README LICENSE.README %{_defaultdocdir}/%{name} %{_bindir}/* %{_infodir}/dirmngr* %{_mandir}/man1/dirmngr*.1.gz %{_libexecdir}/dirmngr # Daemon mode %dir %{_sysconfdir}/dirmngr %dir %{_sysconfdir}/dirmngr/trusted-certs %config(noreplace) %{_sysconfdir}/dirmngr/*.conf %config(noreplace) %{_sysconfdir}/logrotate.d/* %{_libexecdir}/tmpfiles.d/*.conf %{_var}/cache/dirmngr/ %{_var}/lib/dirmngr/ %{_var}/log/dirmngr/ %files lang -f %{name}.lang %defattr(-,root,root) %changelog ++++++ LICENSE.README ++++++ ----------- EFFECTIVE NOV 2010, LICENSE IS BEING CHANGED TO GPLv3+ (upstream most probably won't release any new tarball since the development of standalone dirmngr has been stopped (integrated into GnuPG)) ----------- Patch dirmngr-GPLv3.patch changes license from GPLv2 to GPLv3 (or later) has been taken from dirmngr SVN, commit #345: $ svn log --limit 1 ------------------------------------------------------------------------ r345 | wk | 2010-11-16 10:24:21 +0100 (Tue, 16 Nov 2010) | 2 lines Switch license to GPLv3+. ------------------------------------------------------------------------ Discussion thread from the gnupg-devel mailing list: ------------------------------------------------------------------------------- Date: Mon, 15 Nov 2010 13:27:43 +0100 From: Petr Uzel <[email protected]> To: [email protected] Cc: Ciaran Farrell <[email protected]> Subject: dirmngr: GPLv2+, some files GPLv3+ Novell legal team found some inconsistencies in dirmngr licensing: https://bugzilla.novell.com/show_bug.cgi?id=652989 Quoting the report: ========================= The license of dirmngr claims to be GPLv2+. In the package the files dirmngr-1.0.2.tar.bz2/dirmngr-1.0.2/doc/yat2m.c dirmngr-1.0.2.tar.bz2/dirmngr-1.0.2/src/b64dec.c were found which are licensed under the GPLv3+. In the case of doc/yat2m.c it looks as though the GPLv3 applies only to a standalone utility for converting text documents from one form into another and so probably don't have an effect on the rest of the package. However, the file src/b64dec.c may cause the entire resulting binary to be licensed under the GPLv3. Could you please comment on whether this is an intentional inclusion of GPLv3 by upstream? If so, we would need to look at the nature of interaction of the GPLv3 file with the rest of the package. In any event, the presence of the GPLv3 file should be clearly noted in the spec file (License: GPLv2+;GPLv3+) and a copy of the GPLv3 should be included with the source (this should be done anyway because of the standalone doc tool). ========================= As far as I understand, the src/b64dec.c was imported from GnuPG, which is GPLv3. Shouldn't dirmngr license be switched to GPLv3 ? ------------------------------------------------------------------------------- Date: Mon, 15 Nov 2010 20:51:48 +0100 From: Werner Koch <[email protected]> To: [email protected] Cc: Ciaran Farrell <[email protected]> Subject: Re: dirmngr: GPLv2+, some files GPLv3+ On Mon, 15 Nov 2010 13:27, [email protected] said: > The license of dirmngr claims to be GPLv2+. In the package the files > dirmngr-1.0.2.tar.bz2/dirmngr-1.0.2/doc/yat2m.c > dirmngr-1.0.2.tar.bz2/dirmngr-1.0.2/src/b64dec.c were found which are licensed > under the GPLv3+. In the case of doc/yat2m.c it looks as though the GPLv3 Well, that is possible. I see what I can do about it. > As far as I understand, the src/b64dec.c was imported from GnuPG, which is > GPLv3. > > Shouldn't dirmngr license be switched to GPLv3 ? Dirmngr development has stopped because dirmngr is now a part of GnuPG proper. ------------------------------------------------------------------------------- Date: Tue, 16 Nov 2010 14:37:30 +0100 From: Werner Koch <[email protected]> To: [email protected] Cc: Ciaran Farrell <[email protected]> Subject: Re: dirmngr: GPLv2+, some files GPLv3+ On Mon, 15 Nov 2010 20:51, [email protected] said: >> under the GPLv3+. In the case of doc/yat2m.c it looks as though the GPLv3 > > Well, that is possible. I see what I can do about it. I changed the doc files and the output of --version to make clear that it is under GPLv3+. Done in the repo only because I don't think that we will do another release. Distributions may pick up these changes ++++++ dirmngr-1.0.2-optflags.patch ++++++ --- ./doc/Makefile.am.fix 2008-07-31 18:33:40.000000000 +0200 +++ ./doc/Makefile.am 2008-07-31 18:34:23.000000000 +0200 @@ -42,7 +42,7 @@ DISTCLEANFILES = dirmngr.ops yat2m-stamp.tmp yat2m-stamp $(myman_pages) yat2m: yat2m.c - $(CC_FOR_BUILD) -o $@ $(srcdir)/yat2m.c + $(CC_FOR_BUILD) $(CFLAGS) -o $@ $(srcdir)/yat2m.c yat2m-stamp: $(myman_sources) ++++++ dirmngr-initialize_pth.patch ++++++ Index: src/dirmngr.c =================================================================== --- src/dirmngr.c (revision 348) +++ src/dirmngr.c (working copy) @@ -665,8 +665,11 @@ the option parsing may need services of the libraries. */ /* Libgcrypt requires us to register the threading model first. - Note that this will also do the pth_init. */ + Note that this will also do the pth_init for libgcrypt < 1.6 */ +#if GCRYPT_VERSION_NUMBER >= 0x010600 + pth_init (); +#endif /* Init Libgcrypt. */ rc = gcry_control (GCRYCTL_SET_THREAD_CBS, &gcry_threads_pth); if (rc) ++++++ dirmngr.conf ++++++ log-file /var/log/dirmngr/dirmngr.log ++++++ dirmngr.logrotate ++++++ /var/log/dirmngr/dirmngr.log { weekly notifempty missingok } ++++++ dirmngr.tmpfiles ++++++ d /var/run/dirmngr 0755 root root -
