Hello community, here is the log from the commit of package pam_pkcs11 for openSUSE:Factory checked in at 2017-09-11 16:17:35 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/pam_pkcs11 (Old) and /work/SRC/openSUSE:Factory/.pam_pkcs11.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "pam_pkcs11" Mon Sep 11 16:17:35 2017 rev:28 rq:520503 version:0.6.9 Changes: -------- --- /work/SRC/openSUSE:Factory/pam_pkcs11/pam_pkcs11.changes 2016-04-07 13:32:18.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.pam_pkcs11.new/pam_pkcs11.changes 2017-09-11 16:17:37.804189189 +0200 @@ -1,0 +2,21 @@ +Wed Aug 9 15:08:07 UTC 2017 - astie...@suse.com + +- add service file bsc#1049219 + +------------------------------------------------------------------- +Thu Jul 20 18:02:57 CEST 2017 - sbra...@suse.com + +- Updated to version 0.6.9: + * Upstream web moved. + * pkcs11_listcerts: Do not fail on certificate error. + * Do not fail if card was already unlocked. + * Other bug fixes. + * Translation updates. +- Drop upstreamed pam_pkcs11-0.6.8-fix-crypto-cflags.patch. +- Work around incorrect upstream release process not calling + "make dist". +- Split API documentation into a separate package + pam_pkcs11-devel-doc. +- Add pam_pkcs11-fsf-address.patch. + +------------------------------------------------------------------- Old: ---- pam_pkcs11-0.6.8-fix-crypto-cflags.patch pam_pkcs11-0.6.8.tar.gz New: ---- pam_pkcs11-0.6.9-ChangeLog.git pam_pkcs11-fsf-address.patch pam_pkcs11-pam_pkcs11-0.6.9.tar.gz pkcs11_eventmgr.service ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ pam_pkcs11.spec ++++++ --- /var/tmp/diff_new_pack.u2RbFO/_old 2017-09-11 16:17:39.279981936 +0200 +++ /var/tmp/diff_new_pack.u2RbFO/_new 2017-09-11 16:17:39.283981375 +0200 @@ -1,7 +1,7 @@ # # spec file for package pam_pkcs11 # -# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -16,21 +16,28 @@ # +# It seems to be an upstream naming bug: +%define _name pam_pkcs11-pam_pkcs11 Name: pam_pkcs11 -Version: 0.6.8 +Version: 0.6.9 Release: 0 -Url: http://www.opensc-project.org/pam_pkcs11/ Summary: PKCS #11 PAM Module License: LGPL-2.1+ Group: Productivity/Security -Source: %{name}-%{version}.tar.gz +Url: https://github.com/OpenSC/pam_pkcs11 +Source: %{_name}-%{version}.tar.gz Source1: pam_pkcs11-common-auth-smartcard.pam Source2: baselibs.conf +# make dist was not called. +Source3: pam_pkcs11-0.6.9-ChangeLog.git +Source4: pkcs11_eventmgr.service +Patch0: %{name}-fsf-address.patch Patch1: %{name}-0.5.3-nss-conf.patch -# PATCH-FIX-UPSTREAM pam_pkcs11-0.6.8-fix-crypto-cflags.patch -- Fix CFLAGS and build for Tumbleweed -Patch2: %{name}-0.6.8-fix-crypto-cflags.patch Patch3: %{name}-0.6.0-nss-autoconf.patch BuildRequires: curl-devel +BuildRequires: docbook-xsl-stylesheets +BuildRequires: doxygen +BuildRequires: fdupes BuildRequires: flex BuildRequires: libtool BuildRequires: libxslt @@ -39,8 +46,11 @@ BuildRequires: openssl-devel BuildRequires: pam-devel BuildRequires: pcsc-lite-devel -BuildRequires: pkg-config -BuildRoot: %{_tmppath}/%{name}-%{version}-build +BuildRequires: pkgconfig +%{?systemd_requires} +%if 0%{?suse_version} >= 1210 +BuildRequires: systemd-rpm-macros +%endif %description This Linux PAM module allows X.509 a certificate-based user @@ -60,26 +70,43 @@ * make_hash_links: Creates hash link directories for storing CAs and CRLs -Authors: --------- - Mario Strasser <m...@gmx.net> - Juan Antonio Martinez <jons...@teleline.es> - Antti Tapaninen <a...@cc.hut.fi> - Timo Sirainen <t...@iki.fi> - Ludovic Rousseau <ludovic.rouss...@free.fr> - Andreas Jellinghaus <a...@dungeon.inka.de> - Dominik Fischer <dom_fisc...@web.de> - Ville Skyttä <vsky...@gmail.com> +%package devel-doc +Summary: PKCS #11 API PAM Documentation +# File conflict. devel-doc split was done with 0.6.9 upgrade, after SLE 12 SP3, Leap 42.3. +Group: Documentation/HTML +Conflicts: pam_pkcs11 < 0.6.9 + +%description devel-doc +API documentation for pam_pkcs11 + +This Linux PAM module allows X.509 a certificate-based user +authentication. The certificate and its dedicated private key are +thereby accessed by means of an appropriate PKCS #11 module. For the +verification of the users' certificates, locally stored CA certificates +as well as online or locally accessible CRLs are used. + +Additionally, the package includes pam_pkcs11-related tools: * + pkcs11_eventmgr: Generates actions on card insert, removal, or + time-out events + +* pklogin_finder: Gets the login name that maps to a certificate + +* pkcs11_inspect: Inspects the contents of a certificate + +* make_hash_links: Creates hash link directories for storing CAs and +CRLs %prep -%setup -q +%setup -q -n %{_name}-%{version} +%patch0 -p1 %patch1 -p1 -%patch2 %patch3 -p1 -cp -a %{S:1} common-auth-smartcard -mv po/pt_br.po po/pt_BR.po -sed -i s/pt_br/pt_BR/ configure.in configure +cp -a %{SOURCE1} common-auth-smartcard sed -i s:/lib/:/%{_lib}/:g etc/pam_pkcs11.conf.example.in etc/pkcs11_eventmgr.conf.example +# make dist was not called and cannot be called on a non git snapshot. +cp -a %{SOURCE3} ChangeLog.git +sed -i "/git log/d" Makefile.am +sed -i '/^HTML_TIMESTAMP/s/YES/NO/' doc/doxygen.conf.in %build ./bootstrap @@ -87,41 +114,58 @@ --docdir=%{_docdir}/%{name}\ --with-nss\ --with-curl -make %{?jobs:-j%jobs} +make %{?_smp_mflags} +# Generate documentation: This sounds like an upstream bug while making an upstream source tarball. +make %{?_smp_mflags} dist %install -%makeinstall -mkdir -p $RPM_BUILD_ROOT/%{_lib} -mv $RPM_BUILD_ROOT%{_libdir}/security $RPM_BUILD_ROOT/%{_lib} -rm $RPM_BUILD_ROOT%{_libdir}/pam_pkcs11/*.*a $RPM_BUILD_ROOT/%{_lib}/security/*.*a +%make_install +mkdir -p %{buildroot}/%{_lib} +mv %{buildroot}%{_libdir}/security %{buildroot}/%{_lib} +rm %{buildroot}%{_libdir}/pam_pkcs11/*.*a %{buildroot}/%{_lib}/security/*.*a # Hardcoded defaults... no sysconfdir -install -dm 755 $RPM_BUILD_ROOT%{_sysconfdir}/pam_pkcs11/cacerts -install -dm 755 $RPM_BUILD_ROOT%{_sysconfdir}/pam_pkcs11/crls +install -dm 755 %{buildroot}%{_sysconfdir}/pam_pkcs11/cacerts +install -dm 755 %{buildroot}%{_sysconfdir}/pam_pkcs11/crls cd etc for conf in *.conf.example ; do - install -m 644 ${conf} $RPM_BUILD_ROOT%{_sysconfdir}/pam_pkcs11/${conf%.example} + install -m 644 ${conf} %{buildroot}%{_sysconfdir}/pam_pkcs11/${conf%.example} done cd .. -mkdir -p $RPM_BUILD_ROOT%{_docdir}/%{name} -cp -a AUTHORS COPYING ChangeLog ChangeLog.svn NEWS README TODO doc/pam_pkcs11.html doc/mappers_api.html doc/api doc/README.autologin doc/README.mappers $RPM_BUILD_ROOT%{_docdir}/%{name} -mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/pam.d -cp common-auth-smartcard $RPM_BUILD_ROOT%{_sysconfdir}/pam.d/ +mkdir -p %{buildroot}%{_docdir}/%{name} +cp -a AUTHORS COPYING ChangeLog ChangeLog.git NEWS README README.md TODO doc/pam_pkcs11.html doc/mappers_api.html doc/api doc/README.autologin doc/README.mappers %{buildroot}%{_docdir}/%{name} +mkdir -p %{buildroot}%{_sysconfdir}/pam.d +cp common-auth-smartcard %{buildroot}%{_sysconfdir}/pam.d/ +install -D -m 644 %{SOURCE4} %{buildroot}%{_unitdir}/pkcs11_eventmgr.service %find_lang %{name} +%fdupes -s %{buildroot}%{_docdir}/%{name} + +%pre +%service_add_pre pkcs11_eventmgr.service + +%post +%service_add_post pkcs11_eventmgr.service -%clean -rm -rf $RPM_BUILD_ROOT +%preun +%service_del_preun pkcs11_eventmgr.service + +%postun +%service_del_postun pkcs11_eventmgr.service %files -f %{name}.lang -%defattr (-, root, root) %doc %{_docdir}/%{name} +%exclude %{_docdir}/%{name}/api %{_bindir}/* %{_libdir}/pam_pkcs11 /%{_lib}/security/*.so -%doc %{_mandir}/man?/*.* +%{_mandir}/man?/*%{ext_man} %dir %{_sysconfdir}/pam_pkcs11 %dir %{_sysconfdir}/pam_pkcs11/cacerts %dir %{_sysconfdir}/pam_pkcs11/crls %config(noreplace) %{_sysconfdir}/pam_pkcs11/*.conf %config(noreplace) %{_sysconfdir}/pam.d/common-auth-smartcard +%{_prefix}/lib/systemd/system/pkcs11_eventmgr.service + +%files devel-doc +%doc %{_docdir}/%{name}/api %changelog ++++++ pam_pkcs11-0.6.9-ChangeLog.git ++++++ ++++ 7351 lines (skipped) ++++++ pam_pkcs11-fsf-address.patch ++++++ Index: pam_pkcs11-pam_pkcs11-0.6.9/COPYING =================================================================== --- pam_pkcs11-pam_pkcs11-0.6.9.orig/COPYING +++ pam_pkcs11-pam_pkcs11-0.6.9/COPYING @@ -2,7 +2,7 @@ Version 2.1, February 1999 Copyright (C) 1991, 1999 Free Software Foundation, Inc. - 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA + 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed. ++++++ pkcs11_eventmgr.service ++++++ [Unit] Description=pkcs11 event manager [Service] Type=forking ExecStart=/usr/bin/pkcs11_eventmgr StandardOutput=journal StandardError=journal [Install] WantedBy=multi-user.target
