commit shibboleth-sp for openSUSE:Factory
Hello community, here is the log from the commit of package shibboleth-sp for openSUSE:Factory checked in at 2020-08-19 18:59:54 Comparing /work/SRC/openSUSE:Factory/shibboleth-sp (Old) and /work/SRC/openSUSE:Factory/.shibboleth-sp.new.3399 (New) Package is "shibboleth-sp" Wed Aug 19 18:59:54 2020 rev:16 rq:827890 version:3.0.4 Changes: --- /work/SRC/openSUSE:Factory/shibboleth-sp/shibboleth-sp.changes 2020-01-09 22:50:29.994706435 +0100 +++ /work/SRC/openSUSE:Factory/.shibboleth-sp.new.3399/shibboleth-sp.changes 2020-08-19 19:01:05.083979941 +0200 @@ -1,0 +2,6 @@ +Wed Aug 19 11:27:22 UTC 2020 - Dominique Leuenberger + +- Rely on the distro-provided macros for tmpfilesdir. All half-way + current distros define this already. + +--- Other differences: -- ++ shibboleth-sp.spec ++ --- /var/tmp/diff_new_pack.0ybXEM/_old 2020-08-19 19:01:08.091981454 +0200 +++ /var/tmp/diff_new_pack.0ybXEM/_new 2020-08-19 19:01:08.091981454 +0200 @@ -17,13 +17,6 @@ %define libvers 8 -%global _tmpfilesdir %{_libexecdir}/tmpfiles.d -# tmpfiles_create macro doesn't exist for openSUSE:Leap:42.1 -%if %{undefined tmpfiles_create} - %define tmpfiles_create() \ - %{_bindir}/systemd-tmpfiles --create %{?*} || : \ - %{nil} -%endif %define runuser shibd %define realname shibboleth %define pkgdocdir %{_docdir}/%{realname}
commit shibboleth-sp for openSUSE:Factory
Hello community, here is the log from the commit of package shibboleth-sp for openSUSE:Factory checked in at 2020-01-09 22:50:19 Comparing /work/SRC/openSUSE:Factory/shibboleth-sp (Old) and /work/SRC/openSUSE:Factory/.shibboleth-sp.new.6675 (New) Package is "shibboleth-sp" Thu Jan 9 22:50:19 2020 rev:15 rq:761932 version:3.0.4 Changes: --- /work/SRC/openSUSE:Factory/shibboleth-sp/shibboleth-sp.changes 2019-12-03 12:42:18.634133952 +0100 +++ /work/SRC/openSUSE:Factory/.shibboleth-sp.new.6675/shibboleth-sp.changes 2020-01-09 22:50:29.994706435 +0100 @@ -1,0 +2,6 @@ +Wed Jan 8 11:40:04 UTC 2020 - Dominique Leuenberger + +- BuildRequire pkgconfig(libsystemd) instead of systemd-devel: + Allow OBS to shortcut through the -mini flavors. + +--- Other differences: -- ++ shibboleth-sp.spec ++ --- /var/tmp/diff_new_pack.dSrSNY/_old 2020-01-09 22:50:30.670706774 +0100 +++ /var/tmp/diff_new_pack.dSrSNY/_new 2020-01-09 22:50:30.674706776 +0100 @@ -1,7 +1,7 @@ # # spec file for package shibboleth-sp # -# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2020 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -53,10 +53,10 @@ BuildRequires: libxml-security-c-devel >= 2.0.0 BuildRequires: libxmltooling-devel >= 3.0.4 BuildRequires: pkgconfig -BuildRequires: systemd-devel BuildRequires: systemd-rpm-macros BuildRequires: unixODBC-devel BuildRequires: zlib-devel +BuildRequires: pkgconfig(libsystemd) Requires: openssl PreReq: opensaml-schemas >= 3.0.1 PreReq: xmltooling-schemas >= 3.0.4
commit shibboleth-sp for openSUSE:Factory
Hello community, here is the log from the commit of package shibboleth-sp for openSUSE:Factory checked in at 2019-12-03 12:41:57 Comparing /work/SRC/openSUSE:Factory/shibboleth-sp (Old) and /work/SRC/openSUSE:Factory/.shibboleth-sp.new.4691 (New) Package is "shibboleth-sp" Tue Dec 3 12:41:57 2019 rev:14 rq:752898 version:3.0.4 Changes: --- /work/SRC/openSUSE:Factory/shibboleth-sp/shibboleth-sp.changes 2019-04-26 22:55:16.505283240 +0200 +++ /work/SRC/openSUSE:Factory/.shibboleth-sp.new.4691/shibboleth-sp.changes 2019-12-03 12:42:18.634133952 +0100 @@ -1,0 +2,7 @@ +Mon Dec 2 10:36:30 UTC 2019 - Kristyna Streitova + +- remove fixing of the ownership of log files as this allows shibd + to escalate to root [bsc#1157471] [CVE-2019-19191] +- generate two keys on new installs instead of just one + +--- Other differences: -- ++ shibboleth-sp.spec ++ --- /var/tmp/diff_new_pack.Zl0WnX/_old 2019-12-03 12:42:19.098133824 +0100 +++ /var/tmp/diff_new_pack.Zl0WnX/_new 2019-12-03 12:42:19.098133824 +0100 @@ -12,7 +12,7 @@ # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. -# Please submit bugfixes or comments via http://bugs.opensuse.org/ +# Please submit bugfixes or comments via https://bugs.opensuse.org/ # @@ -184,16 +184,13 @@ %post -n libshibsp%{libvers} -p /sbin/ldconfig %post -n libshibsp-lite%{libvers} -p /sbin/ldconfig %post -# Key generation or ownership fix -cd %{_sysconfdir}/%{realname} -if [ -f sp-key.pem ] ; then - chown %{runuser}:%{runuser} sp-key.pem sp-cert.pem 2>/dev/null || : -else - /bin/sh ./keygen.sh -b -u %{runuser} -g %{runuser} -fi -# Fix ownership of log files (even on new installs, if they're left from an older one). -chown %{runuser}:%{runuser} %{_localstatedir}/log/%{realname}/* 2>/dev/null || : +# Generate two keys on new installs. +if [ $1 -eq 1 ] ; then +cd %{_sysconfdir}/shibboleth +/bin/sh ./keygen.sh -b -n sp-signing -u %{runuser} -g %{runuser} +/bin/sh ./keygen.sh -b -n sp-encrypt -u %{runuser} -g %{runuser} +fi %service_add_post shibd.service
commit shibboleth-sp for openSUSE:Factory
Hello community, here is the log from the commit of package shibboleth-sp for openSUSE:Factory checked in at 2019-04-26 22:55:12 Comparing /work/SRC/openSUSE:Factory/shibboleth-sp (Old) and /work/SRC/openSUSE:Factory/.shibboleth-sp.new.5536 (New) Package is "shibboleth-sp" Fri Apr 26 22:55:12 2019 rev:13 rq:698164 version:3.0.4 Changes: --- /work/SRC/openSUSE:Factory/shibboleth-sp/shibboleth-sp.changes 2019-03-26 15:44:37.148135976 +0100 +++ /work/SRC/openSUSE:Factory/.shibboleth-sp.new.5536/shibboleth-sp.changes 2019-04-26 22:55:16.505283240 +0200 @@ -1,0 +2,5 @@ +Fri Apr 26 10:46:00 UTC 2019 - mvet...@suse.com + +- bsc#1130588: Require shadow instead of old pwdutils + +--- Other differences: -- ++ shibboleth-sp.spec ++ --- /var/tmp/diff_new_pack.woLpDl/_old 2019-04-26 22:55:16.973282938 +0200 +++ /var/tmp/diff_new_pack.woLpDl/_new 2019-04-26 22:55:16.977282935 +0200 @@ -60,7 +60,7 @@ Requires: openssl PreReq: opensaml-schemas >= 3.0.1 PreReq: xmltooling-schemas >= 3.0.4 -Requires(pre): pwdutils +Requires(pre): shadow Obsoletes: shibboleth-sp = 2.5.0 %{?systemd_requires} %if 0%{?suse_version} > 1325
commit shibboleth-sp for openSUSE:Factory
Hello community, here is the log from the commit of package shibboleth-sp for openSUSE:Factory checked in at 2019-03-26 15:44:22 Comparing /work/SRC/openSUSE:Factory/shibboleth-sp (Old) and /work/SRC/openSUSE:Factory/.shibboleth-sp.new.25356 (New) Package is "shibboleth-sp" Tue Mar 26 15:44:22 2019 rev:12 rq:688165 version:3.0.4 Changes: --- /work/SRC/openSUSE:Factory/shibboleth-sp/shibboleth-sp.changes 2019-02-24 17:18:30.504417334 +0100 +++ /work/SRC/openSUSE:Factory/.shibboleth-sp.new.25356/shibboleth-sp.changes 2019-03-26 15:44:37.148135976 +0100 @@ -1,0 +2,8 @@ +Wed Mar 20 13:06:50 UTC 2019 - Kristýna Streitová + +- update to 3.0.4 + * list of fixes and enhancements +https://issues.shibboleth.net/jira/browse/SSPCPP-851?filter=12771 +- update xmltooling and opensaml versions in "Requires" + +--- Old: shibboleth-sp-3.0.3.tar.bz2 shibboleth-sp-3.0.3.tar.bz2.asc New: shibboleth-sp-3.0.4.tar.bz2 shibboleth-sp-3.0.4.tar.bz2.asc Other differences: -- ++ shibboleth-sp.spec ++ --- /var/tmp/diff_new_pack.dXUAkp/_old 2019-03-26 15:44:38.044134926 +0100 +++ /var/tmp/diff_new_pack.dXUAkp/_new 2019-03-26 15:44:38.044134926 +0100 @@ -12,7 +12,7 @@ # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. -# Please submit bugfixes or comments via https://bugs.opensuse.org/ +# Please submit bugfixes or comments via http://bugs.opensuse.org/ # @@ -28,7 +28,7 @@ %define realname shibboleth %define pkgdocdir %{_docdir}/%{realname} Name: shibboleth-sp -Version:3.0.3 +Version:3.0.4 Release:0 Summary:System for attribute-based Web Single Sign On License:Apache-2.0 @@ -47,19 +47,19 @@ BuildRequires: krb5-devel BuildRequires: liblog4shib-devel >= 2 BuildRequires: libmemcached-devel -BuildRequires: libsaml-devel >= 3.0.0 +BuildRequires: libsaml-devel >= 3.0.1 BuildRequires: libtool BuildRequires: libxerces-c-devel >= 3.2 BuildRequires: libxml-security-c-devel >= 2.0.0 -BuildRequires: libxmltooling-devel >= 3.0.0 +BuildRequires: libxmltooling-devel >= 3.0.4 BuildRequires: pkgconfig BuildRequires: systemd-devel BuildRequires: systemd-rpm-macros BuildRequires: unixODBC-devel BuildRequires: zlib-devel Requires: openssl -PreReq: opensaml-schemas >= 3.0.0 -PreReq: xmltooling-schemas >= 3.0.0 +PreReq: opensaml-schemas >= 3.0.1 +PreReq: xmltooling-schemas >= 3.0.4 Requires(pre): pwdutils Obsoletes: shibboleth-sp = 2.5.0 %{?systemd_requires} @@ -104,12 +104,12 @@ Group: Development/Libraries/C and C++ Requires: %{name} = %{version}-%{release} Requires: liblog4shib-devel >= 2 -Requires: libsaml-devel >= 3.0.0 +Requires: libsaml-devel >= 3.0.1 Requires: libshibsp%{libvers} = %{version}-%{release} Requires: libshibsp-lite%{libvers} = %{version}-%{release} Requires: libxerces-c-devel >= 3.2 Requires: libxml-security-c-devel >= 2.0.0 -Requires: libxmltooling-devel >= 3.0.0 +Requires: libxmltooling-devel >= 3.0.4 Obsoletes: shibboleth-sp-devel = 2.5.0 %description devel ++ shibboleth-sp-3.0.3.tar.bz2 -> shibboleth-sp-3.0.4.tar.bz2 ++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shibboleth-sp-3.0.3/config_win32.h new/shibboleth-sp-3.0.4/config_win32.h --- old/shibboleth-sp-3.0.3/config_win32.h 2018-10-12 20:06:42.0 +0200 +++ new/shibboleth-sp-3.0.4/config_win32.h 2019-03-08 16:09:43.0 +0100 @@ -121,13 +121,13 @@ #define PACKAGE_NAME "shibboleth" /* Define to the full name and version of this package. */ -#define PACKAGE_STRING "shibboleth 3.0.3" +#define PACKAGE_STRING "shibboleth 3.0.4" /* Define to the one symbol short name of this package. */ #define PACKAGE_TARNAME "shibboleth-sp" /* Define to the version of this package. */ -#define PACKAGE_VERSION "3.0.3" +#define PACKAGE_VERSION "3.0.4" /* Define to the necessary symbol if this constant uses a non-standard name on your system. */ @@ -140,7 +140,7 @@ /* #undef TM_IN_SYS_TIME */ /* Version number of package */ -#define VERSION "3.0.3" +#define VERSION "3.0.4" /* Define to empty if `const' does not conform to ANSI C. */ /* #undef const */ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/shibboleth-sp-3.0.3/configure new/shibboleth-sp-3.0.4/configure --- old/shibboleth-sp-3.0.3/configure 2018-12-12 20:16:00.0 +0100 +++ new/shibboleth-sp-3.0.4/configure 2019-03-08 16:15:39.0 +0100
commit shibboleth-sp for openSUSE:Factory
Hello community, here is the log from the commit of package shibboleth-sp for openSUSE:Factory checked in at 2019-02-24 17:18:26 Comparing /work/SRC/openSUSE:Factory/shibboleth-sp (Old) and /work/SRC/openSUSE:Factory/.shibboleth-sp.new.28833 (New) Package is "shibboleth-sp" Sun Feb 24 17:18:26 2019 rev:11 rq:678015 version:3.0.3 Changes: --- /work/SRC/openSUSE:Factory/shibboleth-sp/shibboleth-sp.changes 2019-02-11 21:29:04.098961248 +0100 +++ /work/SRC/openSUSE:Factory/.shibboleth-sp.new.28833/shibboleth-sp.changes 2019-02-24 17:18:30.504417334 +0100 @@ -1,0 +2,5 @@ +Mon Feb 11 19:02:26 UTC 2019 - Jan Engelhardt + +- Trim redundancies from summary + +--- @@ -118 +122,0 @@ - Other differences: -- ++ shibboleth-sp.spec ++ --- /var/tmp/diff_new_pack.QML3i2/_old 2019-02-24 17:18:30.992417247 +0100 +++ /var/tmp/diff_new_pack.QML3i2/_new 2019-02-24 17:18:31.000417246 +0100 @@ -12,7 +12,7 @@ # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. -# Please submit bugfixes or comments via http://bugs.opensuse.org/ +# Please submit bugfixes or comments via https://bugs.opensuse.org/ # @@ -30,7 +30,7 @@ Name: shibboleth-sp Version:3.0.3 Release:0 -Summary:Open source system for attribute-based Web SSO +Summary:System for attribute-based Web Single Sign On License:Apache-2.0 Group: Productivity/Networking/Security URL:http://shibboleth.net/ @@ -130,7 +130,7 @@ make %{?_smp_mflags} pkgdocdir=%{pkgdocdir} %install -make install NOKEYGEN=1 DESTDIR=%{buildroot} pkgdocdir=%{pkgdocdir} +%make_install NOKEYGEN=1 pkgdocdir=%{pkgdocdir} install -D -m 644 %{SOURCE3} %{buildroot}%{_unitdir}/shibd.service ln -sf %{_sbindir}/service %{buildroot}/%{_sbindir}/rcshibd
commit shibboleth-sp for openSUSE:Factory
Hello community, here is the log from the commit of package shibboleth-sp for openSUSE:Factory checked in at 2019-02-11 21:29:02 Comparing /work/SRC/openSUSE:Factory/shibboleth-sp (Old) and /work/SRC/openSUSE:Factory/.shibboleth-sp.new.28833 (New) Package is "shibboleth-sp" Mon Feb 11 21:29:02 2019 rev:10 rq:673397 version:3.0.3 Changes: --- /work/SRC/openSUSE:Factory/shibboleth-sp/shibboleth-sp.changes 2018-12-04 20:54:18.588854195 +0100 +++ /work/SRC/openSUSE:Factory/.shibboleth-sp.new.28833/shibboleth-sp.changes 2019-02-11 21:29:04.098961248 +0100 @@ -1,0 +2,7 @@ +Mon Feb 11 13:42:19 UTC 2019 - kstreit...@suse.com + +- update to 3.0.3 + * list of fixes and enhancements + https://issues.shibboleth.net/jira/browse/SSPCPP-845?filter=12573 + +--- Old: shibboleth-sp-3.0.2.tar.bz2 shibboleth-sp-3.0.2.tar.bz2.asc New: shibboleth-sp-3.0.3.tar.bz2 shibboleth-sp-3.0.3.tar.bz2.asc Other differences: -- ++ shibboleth-sp.spec ++ --- /var/tmp/diff_new_pack.mH9cil/_old 2019-02-11 21:29:05.414960536 +0100 +++ /var/tmp/diff_new_pack.mH9cil/_new 2019-02-11 21:29:05.418960533 +0100 @@ -1,7 +1,7 @@ # # spec file for package shibboleth-sp # -# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -28,7 +28,7 @@ %define realname shibboleth %define pkgdocdir %{_docdir}/%{realname} Name: shibboleth-sp -Version:3.0.2 +Version:3.0.3 Release:0 Summary:Open source system for attribute-based Web SSO License:Apache-2.0 ++ shibboleth-sp-3.0.2.tar.bz2 -> shibboleth-sp-3.0.3.tar.bz2 ++ 8162 lines of diff (skipped) retrying with extended exclude list diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/shibboleth-sp-3.0.2/adfs/Makefile.am new/shibboleth-sp-3.0.3/adfs/Makefile.am --- old/shibboleth-sp-3.0.2/adfs/Makefile.am2018-07-10 03:17:23.0 +0200 +++ new/shibboleth-sp-3.0.3/adfs/Makefile.am2018-10-12 20:03:02.0 +0200 @@ -4,6 +4,7 @@ plugin_LTLIBRARIES = adfs.la adfs-lite.la adfs_la_CXXFLAGS = \ + $(AM_CXXFLAGS) \ $(BOOST_CPPFLAGS) \ $(PTHREAD_CFLAGS) \ $(opensaml_CFLAGS) \ @@ -24,6 +25,7 @@ adfs.cpp adfs_lite_la_CXXFLAGS = -DSHIBSP_LITE \ + $(AM_CXXFLAGS) \ $(BOOST_CPPFLAGS) \ $(PTHREAD_CFLAGS) \ $(xmltooling_lite_CFLAGS) \ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/shibboleth-sp-3.0.2/apache/Makefile.am new/shibboleth-sp-3.0.3/apache/Makefile.am --- old/shibboleth-sp-3.0.2/apache/Makefile.am 2018-07-10 03:17:23.0 +0200 +++ new/shibboleth-sp-3.0.3/apache/Makefile.am 2018-10-12 20:03:02.0 +0200 @@ -6,6 +6,7 @@ mod_shib_13_la_SOURCES = mod_shib_13.cpp mod_shib_13_la_LDFLAGS = -module -avoid-version mod_shib_13_la_CXXFLAGS = \ + $(AM_CXXFLAGS) \ $(APXS_CFLAGS) -I$(APXS_INCLUDE) \ $(BOOST_CPPFLAGS) \ $(PTHREAD_CFLAGS) \ @@ -24,6 +25,7 @@ mod_shib_20_la_SOURCES = mod_shib_20.cpp mod_shib_20_la_LDFLAGS = -module -avoid-version mod_shib_20_la_CXXFLAGS = \ + $(AM_CXXFLAGS) \ $(APXS2_CFLAGS) -I$(APXS2_INCLUDE) \ $(BOOST_CPPFLAGS) \ $(PTHREAD_CFLAGS) \ @@ -44,6 +46,7 @@ mod_shib_22_la_SOURCES = mod_shib_22.cpp mod_shib_22_la_LDFLAGS = -module -avoid-version mod_shib_22_la_CXXFLAGS = \ + $(AM_CXXFLAGS) \ $(APXS22_CFLAGS) -I$(APXS22_INCLUDE) \ $(BOOST_CPPFLAGS) \ $(PTHREAD_CFLAGS) \ @@ -64,6 +67,7 @@ mod_shib_24_la_SOURCES = mod_shib_24.cpp mod_shib_24_la_LDFLAGS = -module -avoid-version mod_shib_24_la_CXXFLAGS = \ + $(AM_CXXFLAGS) \ $(APXS24_CFLAGS) -I$(APXS24_INCLUDE) \ $(BOOST_CPPFLAGS) \ $(PTHREAD_CFLAGS) \ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 --exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh old/shibboleth-s
commit shibboleth-sp for openSUSE:Factory
Hello community, here is the log from the commit of package shibboleth-sp for openSUSE:Factory checked in at 2018-12-04 20:54:15 Comparing /work/SRC/openSUSE:Factory/shibboleth-sp (Old) and /work/SRC/openSUSE:Factory/.shibboleth-sp.new.19453 (New) Package is "shibboleth-sp" Tue Dec 4 20:54:15 2018 rev:9 rq:652462 version:3.0.2 Changes: --- /work/SRC/openSUSE:Factory/shibboleth-sp/shibboleth-sp.changes 2017-11-27 22:16:13.543394113 +0100 +++ /work/SRC/openSUSE:Factory/.shibboleth-sp.new.19453/shibboleth-sp.changes 2018-12-04 20:54:18.588854195 +0100 @@ -1,0 +2,12 @@ +Wed Nov 28 13:24:28 UTC 2018 - kstreit...@suse.com + +- update to 3.0.2 + * list of fixes and enhancements +https://wiki.shibboleth.net/confluence/display/SP3/ReleaseNotes +- remove shibboleth-sp-2.5.6-libsystemd-daemon.patch that is no + longer needed +- update package filelist +- change library soname from 7 to 8 +- update dependencies versions + +--- Old: shibboleth-sp-2.5.6-libsystemd-daemon.patch shibboleth-sp-2.6.1.tar.bz2 shibboleth-sp-2.6.1.tar.bz2.asc New: shibboleth-sp-3.0.2.tar.bz2 shibboleth-sp-3.0.2.tar.bz2.asc Other differences: -- ++ shibboleth-sp.spec ++ --- /var/tmp/diff_new_pack.iueDah/_old 2018-12-04 20:54:19.160853559 +0100 +++ /var/tmp/diff_new_pack.iueDah/_new 2018-12-04 20:54:19.164853554 +0100 @@ -1,7 +1,7 @@ # # spec file for package shibboleth-sp # -# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -16,6 +16,7 @@ # +%define libvers 8 %global _tmpfilesdir %{_libexecdir}/tmpfiles.d # tmpfiles_create macro doesn't exist for openSUSE:Leap:42.1 %if %{undefined tmpfiles_create} @@ -27,39 +28,38 @@ %define realname shibboleth %define pkgdocdir %{_docdir}/%{realname} Name: shibboleth-sp -Version:2.6.1 +Version:3.0.2 Release:0 Summary:Open source system for attribute-based Web SSO License:Apache-2.0 Group: Productivity/Networking/Security -Url:http://shibboleth.net/ +URL:http://shibboleth.net/ Source0: http://shibboleth.net/downloads/service-provider/%{version}/%{name}-%{version}.tar.bz2 Source1: http://shibboleth.net/downloads/service-provider/%{version}/%{name}-%{version}.tar.bz2.asc Source2:%{name}.keyring Source3:shibd.service Patch0: shibboleth-sp-2.5.5-doxygen_timestamp.patch -Patch1: shibboleth-sp-2.5.6-libsystemd-daemon.patch BuildRequires: apache2-devel BuildRequires: autoconf BuildRequires: automake BuildRequires: doxygen BuildRequires: gcc-c++ BuildRequires: krb5-devel -BuildRequires: liblog4shib-devel >= 1.0.4 +BuildRequires: liblog4shib-devel >= 2 BuildRequires: libmemcached-devel -BuildRequires: libsaml-devel >= 2.6.0 +BuildRequires: libsaml-devel >= 3.0.0 BuildRequires: libtool -BuildRequires: libxerces-c-devel >= 3.1 -BuildRequires: libxml-security-c-devel >= 1.7.3 -BuildRequires: libxmltooling-devel >= 1.6.0 +BuildRequires: libxerces-c-devel >= 3.2 +BuildRequires: libxml-security-c-devel >= 2.0.0 +BuildRequires: libxmltooling-devel >= 3.0.0 BuildRequires: pkgconfig BuildRequires: systemd-devel BuildRequires: systemd-rpm-macros BuildRequires: unixODBC-devel BuildRequires: zlib-devel Requires: openssl -PreReq: opensaml-schemas >= 2.6.0 -PreReq: xmltooling-schemas >= 1.6.0 +PreReq: opensaml-schemas >= 3.0.0 +PreReq: xmltooling-schemas >= 3.0.0 Requires(pre): pwdutils Obsoletes: shibboleth-sp = 2.5.0 %{?systemd_requires} @@ -77,22 +77,22 @@ This package contains the Shibboleth Service Provider runtime libraries, daemon, default plugins, and Apache module. -%package -n libshibsp7 +%package -n libshibsp%{libvers} Summary:Shared Library for Shibboleth Group: Productivity/Networking/Security -%description -n libshibsp7 +%description -n libshibsp%{libvers} Shibboleth is a Web Single Sign-On implementations based on OpenSAML that supports multiple protocols, federated identity, and the extensible exchange of rich attributes subject to privacy controls. This package contains just the shared library. -%package -n libshibsp-lite7 +%package -n libshibsp-lite%{libvers} Summary:Shared Library for Shibboleth Group: Productivity/Networking/Security -%description -n libshibsp-lite7 +%description -n libshibsp-lite%{libvers} Shibboleth is a Web Single Sign-On impl
commit shibboleth-sp for openSUSE:Factory
Hello community, here is the log from the commit of package shibboleth-sp for openSUSE:Factory checked in at 2017-11-27 22:16:12 Comparing /work/SRC/openSUSE:Factory/shibboleth-sp (Old) and /work/SRC/openSUSE:Factory/.shibboleth-sp.new (New) Package is "shibboleth-sp" Mon Nov 27 22:16:12 2017 rev:8 rq:545295 version:2.6.1 Changes: --- /work/SRC/openSUSE:Factory/shibboleth-sp/shibboleth-sp.changes 2017-10-05 11:56:28.420113411 +0200 +++ /work/SRC/openSUSE:Factory/.shibboleth-sp.new/shibboleth-sp.changes 2017-11-27 22:16:13.543394113 +0100 @@ -1,0 +2,8 @@ +Wed Nov 15 12:50:45 UTC 2017 - kstreit...@suse.com + +- update to 2.6.1 + * list of fixes and enhancements +https://issues.shibboleth.net/jira/browse/SSPCPP-760?filter=12270 + * fixes [bsc#1068689] [CVE-2017-16852] + +--- Old: shibboleth-sp-2.6.0.tar.bz2 shibboleth-sp-2.6.0.tar.bz2.asc New: shibboleth-sp-2.6.1.tar.bz2 shibboleth-sp-2.6.1.tar.bz2.asc Other differences: -- ++ shibboleth-sp.spec ++ --- /var/tmp/diff_new_pack.zFm3Om/_old 2017-11-27 22:16:14.415362462 +0100 +++ /var/tmp/diff_new_pack.zFm3Om/_new 2017-11-27 22:16:14.415362462 +0100 @@ -27,7 +27,7 @@ %define realname shibboleth %define pkgdocdir %{_docdir}/%{realname} Name: shibboleth-sp -Version:2.6.0 +Version:2.6.1 Release:0 Summary:Open source system for attribute-based Web SSO License:Apache-2.0 ++ shibboleth-sp-2.6.0.tar.bz2 -> shibboleth-sp-2.6.1.tar.bz2 ++ 27419 lines of diff (skipped)
commit shibboleth-sp for openSUSE:Factory
Hello community, here is the log from the commit of package shibboleth-sp for openSUSE:Factory checked in at 2017-10-05 11:56:26 Comparing /work/SRC/openSUSE:Factory/shibboleth-sp (Old) and /work/SRC/openSUSE:Factory/.shibboleth-sp.new (New) Package is "shibboleth-sp" Thu Oct 5 11:56:26 2017 rev:7 rq:529914 version:2.6.0 Changes: --- /work/SRC/openSUSE:Factory/shibboleth-sp/shibboleth-sp.changes 2017-03-17 15:07:25.262441711 +0100 +++ /work/SRC/openSUSE:Factory/.shibboleth-sp.new/shibboleth-sp.changes 2017-10-05 11:56:28.420113411 +0200 @@ -1,0 +2,17 @@ +Thu Sep 21 16:34:48 UTC 2017 - kstreit...@suse.com + +- update to 2.6.0 + * list of fixes and enhancements +https://issues.shibboleth.net/jira/browse/SSPCPP-716?filter=11475 +- update soname for libshibsp from 6 to 7 +- adjust BuildRequires of boost + * libboost_headers-devel for openSUSE:Factory + * boost-devel for older distros +- update versions of BuildRequires for opensaml (>= 2.6.0) and + libxmltooling (>= 1.6.0) +- shibd.service: increase TimeoutStartSec to 150s (as upstream did) +- remove %{_sysconfdir}/%{realname}/*.xsl from filelist (it is no + longer present) +- run spec-cleaner + +--- Old: shibboleth-sp-2.5.6.tar.bz2 shibboleth-sp-2.5.6.tar.bz2.asc New: shibboleth-sp-2.6.0.tar.bz2 shibboleth-sp-2.6.0.tar.bz2.asc Other differences: -- ++ shibboleth-sp.spec ++ --- /var/tmp/diff_new_pack.vosnG5/_old 2017-10-05 11:56:29.160009308 +0200 +++ /var/tmp/diff_new_pack.vosnG5/_new 2017-10-05 11:56:29.160009308 +0200 @@ -20,14 +20,14 @@ # tmpfiles_create macro doesn't exist for openSUSE:Leap:42.1 %if %{undefined tmpfiles_create} %define tmpfiles_create() \ - /usr/bin/systemd-tmpfiles --create %{?*} || : \ + %{_bindir}/systemd-tmpfiles --create %{?*} || : \ %{nil} %endif %define runuser shibd %define realname shibboleth %define pkgdocdir %{_docdir}/%{realname} Name: shibboleth-sp -Version:2.5.6 +Version:2.6.0 Release:0 Summary:Open source system for attribute-based Web SSO License:Apache-2.0 @@ -42,29 +42,32 @@ BuildRequires: apache2-devel BuildRequires: autoconf BuildRequires: automake -BuildRequires: boost-devel >= 1.32.0 BuildRequires: doxygen BuildRequires: gcc-c++ BuildRequires: krb5-devel BuildRequires: liblog4shib-devel >= 1.0.4 BuildRequires: libmemcached-devel -BuildRequires: libsaml-devel >= 2.5.5 +BuildRequires: libsaml-devel >= 2.6.0 BuildRequires: libtool BuildRequires: libxerces-c-devel >= 3.1 BuildRequires: libxml-security-c-devel >= 1.7.3 -BuildRequires: libxmltooling-devel >= 1.5.5 +BuildRequires: libxmltooling-devel >= 1.6.0 BuildRequires: pkgconfig BuildRequires: systemd-devel BuildRequires: systemd-rpm-macros BuildRequires: unixODBC-devel BuildRequires: zlib-devel Requires: openssl -PreReq: opensaml-schemas >= 2.5.5 -PreReq: xmltooling-schemas >= 1.5.5 +PreReq: opensaml-schemas >= 2.6.0 +PreReq: xmltooling-schemas >= 1.6.0 Requires(pre): pwdutils Obsoletes: shibboleth-sp = 2.5.0 -BuildRoot: %{_tmppath}/%{name}-%{version}-build %{?systemd_requires} +%if 0%{?suse_version} > 1325 +BuildRequires: libboost_headers-devel +%else +BuildRequires: boost-devel >= 1.32.0 +%endif %description Shibboleth is a Web Single Sign-On implementations based on OpenSAML @@ -74,22 +77,22 @@ This package contains the Shibboleth Service Provider runtime libraries, daemon, default plugins, and Apache module. -%package -n libshibsp6 +%package -n libshibsp7 Summary:Shared Library for Shibboleth Group: Productivity/Networking/Security -%description -n libshibsp6 +%description -n libshibsp7 Shibboleth is a Web Single Sign-On implementations based on OpenSAML that supports multiple protocols, federated identity, and the extensible exchange of rich attributes subject to privacy controls. This package contains just the shared library. -%package -n libshibsp-lite6 +%package -n libshibsp-lite7 Summary:Shared Library for Shibboleth Group: Productivity/Networking/Security -%description -n libshibsp-lite6 +%description -n libshibsp-lite7 Shibboleth is a Web Single Sign-On implementations based on OpenSAML that supports multiple protocols, federated identity, and the extensible exchange of rich attributes subject to privacy controls. @@ -101,12 +104,12 @@ Group: Development/Libraries/C and C++ Requires: %{name} = %{version}-%{release} Requires: liblog4shib-devel >= 1.0.4 -Requires: libsaml-devel >= 2.5.5 -Requires: libshibsp-lite6 = %{version}-%{release} -Requires
commit shibboleth-sp for openSUSE:Factory
Hello community, here is the log from the commit of package shibboleth-sp for openSUSE:Factory checked in at 2017-03-17 15:07:24 Comparing /work/SRC/openSUSE:Factory/shibboleth-sp (Old) and /work/SRC/openSUSE:Factory/.shibboleth-sp.new (New) Package is "shibboleth-sp" Fri Mar 17 15:07:24 2017 rev:6 rq:479967 version:2.5.6 Changes: --- /work/SRC/openSUSE:Factory/shibboleth-sp/shibboleth-sp.changes 2016-07-30 00:28:33.0 +0200 +++ /work/SRC/openSUSE:Factory/.shibboleth-sp.new/shibboleth-sp.changes 2017-03-17 15:07:25.262441711 +0100 @@ -1,0 +2,14 @@ +Thu Mar 16 11:12:11 UTC 2017 - kstreit...@suse.com + +- fix build for openSUSE:Leap:42.1 by adding %define for + tmpfiles_create as this macro doesn't exist there + +--- +Tue Feb 14 14:57:07 UTC 2017 - kstreit...@suse.com + +- add shibboleth-sp-2.5.6-libsystemd-daemon.patch to fix configure + to use libsystemd instead of obsolete libsystemd-daemon. + Regenerate configure via autoreconf and add autoconf and automake + BuildRequires. + +--- New: shibboleth-sp-2.5.6-libsystemd-daemon.patch Other differences: -- ++ shibboleth-sp.spec ++ --- /var/tmp/diff_new_pack.CWVdiX/_old 2017-03-17 15:07:25.994338418 +0100 +++ /var/tmp/diff_new_pack.CWVdiX/_new 2017-03-17 15:07:25.998337853 +0100 @@ -1,7 +1,7 @@ # # spec file for package shibboleth-sp # -# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -17,6 +17,12 @@ %global _tmpfilesdir %{_libexecdir}/tmpfiles.d +# tmpfiles_create macro doesn't exist for openSUSE:Leap:42.1 +%if %{undefined tmpfiles_create} + %define tmpfiles_create() \ + /usr/bin/systemd-tmpfiles --create %{?*} || : \ + %{nil} +%endif %define runuser shibd %define realname shibboleth %define pkgdocdir %{_docdir}/%{realname} @@ -32,7 +38,10 @@ Source2:%{name}.keyring Source3:shibd.service Patch0: shibboleth-sp-2.5.5-doxygen_timestamp.patch +Patch1: shibboleth-sp-2.5.6-libsystemd-daemon.patch BuildRequires: apache2-devel +BuildRequires: autoconf +BuildRequires: automake BuildRequires: boost-devel >= 1.32.0 BuildRequires: doxygen BuildRequires: gcc-c++ @@ -110,9 +119,11 @@ %prep %setup -q %patch0 -p1 +%patch1 -p1 %build export CXXFLAGS="%{optflags} --std=c++11" +autoreconf -f -i %configure --with-gssapi --enable-systemd --with-memcached make %{?_smp_mflags} pkgdocdir=%{pkgdocdir} ++ shibboleth-sp-2.5.6-libsystemd-daemon.patch ++ Index: shibboleth-sp-2.5.6/configure.ac === --- shibboleth-sp-2.5.6.orig/configure.ac +++ shibboleth-sp-2.5.6/configure.ac @@ -451,7 +451,7 @@ if test "$WANT_SYSTEMD" = "yes" ; then AC_MSG_ERROR([Unable to find a suitable libsystemd-daemon library]) ]) AC_DEFINE([HAVE_SD_NOTIFY],[1],[Define to 1 if you have the sd_notify function.]) - PKG_CHECK_MODULES([SYSTEMD], [libsystemd-daemon]) + PKG_CHECK_MODULES([SYSTEMD], [libsystemd]) AC_SUBST([SYSTEMD_CFLAGS]) AC_SUBST([SYSTEMD_LIBS]) fi
commit shibboleth-sp for openSUSE:Factory
Hello community, here is the log from the commit of package shibboleth-sp for openSUSE:Factory checked in at 2016-07-30 00:28:28 Comparing /work/SRC/openSUSE:Factory/shibboleth-sp (Old) and /work/SRC/openSUSE:Factory/.shibboleth-sp.new (New) Package is "shibboleth-sp" Changes: --- /work/SRC/openSUSE:Factory/shibboleth-sp/shibboleth-sp.changes 2016-05-19 12:15:56.0 +0200 +++ /work/SRC/openSUSE:Factory/.shibboleth-sp.new/shibboleth-sp.changes 2016-07-30 00:28:33.0 +0200 @@ -1,0 +2,6 @@ +Tue Jul 19 18:11:33 UTC 2016 - dims...@opensuse.org + +- Use %tmpfiles_create macro: gracefully fails in case of missing + binaries (e.g. container setups). + +--- Other differences: -- ++ shibboleth-sp.spec ++ --- /var/tmp/diff_new_pack.wRgJP4/_old 2016-07-30 00:28:34.0 +0200 +++ /var/tmp/diff_new_pack.wRgJP4/_new 2016-07-30 00:28:34.0 +0200 @@ -182,7 +182,8 @@ chown %{runuser}:%{runuser} %{_localstatedir}/log/%{realname}/* 2>/dev/null || : %service_add_post shibd.service -systemd-tmpfiles --create %{_tmpfilesdir}/%{realname}.conf + +%tmpfiles_create %{_tmpfilesdir}/%{realname}.conf %preun # On final removal, stop shibd and remove service, restart Apache if running.
commit shibboleth-sp for openSUSE:Factory
Hello community, here is the log from the commit of package shibboleth-sp for openSUSE:Factory checked in at 2016-05-19 12:15:26 Comparing /work/SRC/openSUSE:Factory/shibboleth-sp (Old) and /work/SRC/openSUSE:Factory/.shibboleth-sp.new (New) Package is "shibboleth-sp" Changes: --- /work/SRC/openSUSE:Factory/shibboleth-sp/shibboleth-sp.changes 2016-04-15 19:12:12.0 +0200 +++ /work/SRC/openSUSE:Factory/.shibboleth-sp.new/shibboleth-sp.changes 2016-05-19 12:15:56.0 +0200 @@ -1,0 +2,5 @@ +Wed May 11 13:34:20 UTC 2016 - kstreit...@suse.com + +- build libmemcached support + +--- Other differences: -- ++ shibboleth-sp.spec ++ --- /var/tmp/diff_new_pack.Q2G6cH/_old 2016-05-19 12:15:57.0 +0200 +++ /var/tmp/diff_new_pack.Q2G6cH/_new 2016-05-19 12:15:57.0 +0200 @@ -38,6 +38,7 @@ BuildRequires: gcc-c++ BuildRequires: krb5-devel BuildRequires: liblog4shib-devel >= 1.0.4 +BuildRequires: libmemcached-devel BuildRequires: libsaml-devel >= 2.5.5 BuildRequires: libtool BuildRequires: libxerces-c-devel >= 3.1 @@ -111,7 +112,8 @@ %patch0 -p1 %build -%configure --with-gssapi --enable-systemd +export CXXFLAGS="%{optflags} --std=c++11" +%configure --with-gssapi --enable-systemd --with-memcached make %{?_smp_mflags} pkgdocdir=%{pkgdocdir} %install @@ -166,9 +168,7 @@ exit 0 %post -n libshibsp6 -p /sbin/ldconfig - %post -n libshibsp-lite6 -p /sbin/ldconfig - %post # Key generation or ownership fix cd %{_sysconfdir}/%{realname} @@ -193,9 +193,7 @@ exit 0 %postun -n libshibsp6 -p /sbin/ldconfig - %postun -n libshibsp-lite6 -p /sbin/ldconfig - %postun %service_del_postun shibd.service %restart_on_update apache2
commit shibboleth-sp for openSUSE:Factory
Hello community, here is the log from the commit of package shibboleth-sp for openSUSE:Factory checked in at 2016-04-15 19:12:10 Comparing /work/SRC/openSUSE:Factory/shibboleth-sp (Old) and /work/SRC/openSUSE:Factory/.shibboleth-sp.new (New) Package is "shibboleth-sp" Changes: --- /work/SRC/openSUSE:Factory/shibboleth-sp/shibboleth-sp.changes 2015-09-08 17:48:55.0 +0200 +++ /work/SRC/openSUSE:Factory/.shibboleth-sp.new/shibboleth-sp.changes 2016-04-15 19:12:12.0 +0200 @@ -1,0 +2,18 @@ +Fri Apr 8 12:08:41 UTC 2016 - kstreit...@suse.com + +- update to shibboleth-sp 2.5.6 + * Update solution file after loading into VS2015 + * SSPCPP-669 - cached samlds.json files prematurely removed w/ multiple + * applicationIds + * SSPCPP-671 - Handling of partial success in LogoutResponse needs work + * Fix line feeds again, VS is also broken + * SSPCPP-670 - Session Cleanup for Database Session Storage can cause performance issues + * Re-convert linefeeds to undo Eclipse's handiwork + * SSPCPP-675 - configuration sample cites "federation.org" + * Clean up ignores + * Apply typo fixes provided by Debian packagers + * Update library/software version + * Update MSI names to carry patch version + * SSPCPP-665 - Use of systemd breaks on reboot + +--- Old: shibboleth-sp-2.5.5.tar.bz2 shibboleth-sp-2.5.5.tar.bz2.asc New: shibboleth-sp-2.5.6.tar.bz2 shibboleth-sp-2.5.6.tar.bz2.asc Other differences: -- ++ shibboleth-sp.spec ++ --- /var/tmp/diff_new_pack.MGXfbd/_old 2016-04-15 19:12:13.0 +0200 +++ /var/tmp/diff_new_pack.MGXfbd/_new 2016-04-15 19:12:13.0 +0200 @@ -1,7 +1,7 @@ # # spec file for package shibboleth-sp # -# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -21,7 +21,7 @@ %define realname shibboleth %define pkgdocdir %{_docdir}/%{realname} Name: shibboleth-sp -Version:2.5.5 +Version:2.5.6 Release:0 Summary:Open source system for attribute-based Web SSO License:Apache-2.0 @@ -92,11 +92,11 @@ Requires: %{name} = %{version}-%{release} Requires: liblog4shib-devel >= 1.0.4 Requires: libsaml-devel >= 2.5.5 +Requires: libshibsp-lite6 = %{version}-%{release} +Requires: libshibsp6 = %{version}-%{release} Requires: libxerces-c-devel >= 3.1 Requires: libxml-security-c-devel >= 1.7.3 Requires: libxmltooling-devel >= 1.5.5 -Requires: libshibsp6 = %{version}-%{release} -Requires: libshibsp-lite6 = %{version}-%{release} Obsoletes: shibboleth-sp-devel = 2.5.0 %description devel ++ shibboleth-sp-2.5.5.tar.bz2 -> shibboleth-sp-2.5.6.tar.bz2 ++ 36022 lines of diff (skipped)
commit shibboleth-sp for openSUSE:Factory
Hello community, here is the log from the commit of package shibboleth-sp for openSUSE:Factory checked in at 2015-09-08 17:43:21 Comparing /work/SRC/openSUSE:Factory/shibboleth-sp (Old) and /work/SRC/openSUSE:Factory/.shibboleth-sp.new (New) Package is "shibboleth-sp" Changes: --- /work/SRC/openSUSE:Factory/shibboleth-sp/shibboleth-sp.changes 2015-08-29 20:04:19.0 +0200 +++ /work/SRC/openSUSE:Factory/.shibboleth-sp.new/shibboleth-sp.changes 2015-09-08 17:48:55.0 +0200 @@ -1,0 +2,5 @@ +Wed Aug 5 18:09:37 UTC 2015 - mplus...@suse.com + +- Add gpg signature + +--- New: shibboleth-sp-2.5.5.tar.bz2.asc shibboleth-sp.keyring Other differences: -- ++ shibboleth-sp.spec ++ --- /var/tmp/diff_new_pack.4e0DsX/_old 2015-09-08 17:48:57.0 +0200 +++ /var/tmp/diff_new_pack.4e0DsX/_new 2015-09-08 17:48:57.0 +0200 @@ -27,8 +27,10 @@ License:Apache-2.0 Group: Productivity/Networking/Security Url:http://shibboleth.net/ -Source: http://shibboleth.net/downloads/service-provider/%{version}/%{name}-%{version}.tar.bz2 -Source1:shibd.service +Source0: http://shibboleth.net/downloads/service-provider/%{version}/%{name}-%{version}.tar.bz2 +Source1: http://shibboleth.net/downloads/service-provider/%{version}/%{name}-%{version}.tar.bz2.asc +Source2:%{name}.keyring +Source3:shibd.service Patch0: shibboleth-sp-2.5.5-doxygen_timestamp.patch BuildRequires: apache2-devel BuildRequires: boost-devel >= 1.32.0 @@ -115,7 +117,7 @@ %install make install NOKEYGEN=1 DESTDIR=%{buildroot} pkgdocdir=%{pkgdocdir} -install -D -m 644 %{_sourcedir}/shibd.service %{buildroot}%{_unitdir}/shibd.service +install -D -m 644 %{SOURCE3} %{buildroot}%{_unitdir}/shibd.service ln -sf %{_sbindir}/service %{buildroot}/%{_sbindir}/rcshibd sed -i "s/\/var\/log\/httpd/\/var\/log\/apache2/g" \