X-Git-Url: https://pwan.org/git/?p=certmaster.git;a=blobdiff_plain;f=certmaster.spec;h=1b51c5b7f2591afe446f6f2e093768430baf3b2c;hp=3a04a72dfda0f18b7cf65e241848acf0418c581b;hb=5cfab995e99a58c2fcb2369eeda0635dfb59b24e;hpb=af4f09f155f4a4f1c5a9e3e29b4c8736f892dce4 diff --git a/certmaster.spec b/certmaster.spec index 3a04a72..1b51c5b 100644 --- a/certmaster.spec +++ b/certmaster.spec @@ -1,31 +1,53 @@ + +# We can run on Rhel 3'ish systems, but only if python2.3 is installed +%if 0%{?rhel} == 3 +%define __python_ver 2.3 +%endif +%define python python%{?__python_ver} +%define __python /usr/bin/%{python} + + +%{!?python_version: %define python_version %(%{__python} -c "from distutils.sysconfig import get_python_version; print get_python_version()")} %{!?python_sitelib: %define python_sitelib %(%{__python} -c "from distutils.sysconfig import get_python_lib; print get_python_lib()")} %define is_suse %(test -e /etc/SuSE-release && echo 1 || echo 0) + Summary: Remote certificate distribution framework Name: certmaster -Source1: version -Version: %(echo `awk '{ print $1 }' %{SOURCE1}`) -Release: %(echo `awk '{ print $2 }' %{SOURCE1}`)%{?dist} +Version: 0.28 +Release: 1%{?dist} Source0: %{name}-%{version}.tar.gz License: GPLv2+ Group: Applications/System +BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-buildroot +BuildArch: noarch +Url: https://fedorahosted.org/certmaster + +%if 0%{?rhel} == 3 +Requires: %{python} +Requires: pyOpenSSL-py23 +%else Requires: python >= 2.3 Requires: pyOpenSSL -BuildRequires: python-devel +%endif + +# NOTE: if you +BuildRequires: %{python}-devel %if %is_suse BuildRequires: gettext-devel %else %if 0%{?fedora} >= 8 BuildRequires: python-setuptools-devel %else +%if 0%{?rhel} >= 5 BuildRequires: python-setuptools %endif %endif -BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-buildroot -BuildArch: noarch -Url: https://fedorahosted.org/certmaster +%endif + + %description @@ -40,18 +62,24 @@ certmaster is a easy mechanism for distributing SSL certificates %install test "x$RPM_BUILD_ROOT" != "x" && rm -rf $RPM_BUILD_ROOT %{__python} setup.py install --prefix=/usr --root=$RPM_BUILD_ROOT +ln -s %{_bindir}/certmaster-sync $RPM_BUILD_ROOT/var/lib/certmaster/triggers/sign/post/certmaster-sync +ln -s %{_bindir}/certmaster-sync $RPM_BUILD_ROOT/var/lib/certmaster/triggers/remove/post/certmaster-sync +touch $RPM_BUILD_ROOT/var/log/certmaster/certmaster.log +touch $RPM_BUILD_ROOT/var/log/certmaster/audit.log + %clean rm -fr $RPM_BUILD_ROOT %files %defattr(-, root, root, -) -%if 0%{?fedora} > 8 +%if "%{python_version}" >= "2.5" %{python_sitelib}/certmaster*.egg-info %endif %{_bindir}/certmaster %{_bindir}/certmaster-request %{_bindir}/certmaster-ca +%{_bindir}/certmaster-sync /etc/init.d/certmaster %dir %{_sysconfdir}/%{name} %dir %{_sysconfdir}/%{name}/minion-acl.d/ @@ -59,10 +87,30 @@ rm -fr $RPM_BUILD_ROOT %config(noreplace) /etc/certmaster/minion.conf %config(noreplace) /etc/certmaster/certmaster.conf %config(noreplace) /etc/logrotate.d/certmaster_rotate +%config /etc/certmaster/version %dir %{python_sitelib}/certmaster %{python_sitelib}/certmaster/*.py* + %dir /var/log/certmaster -%dir /var/lib/certmaster +%attr(0600,root,root) %config(noreplace) %verify(not md5 size mtime) /var/log/certmaster/certmaster.log +%attr(0600,root,root) %config(noreplace) %verify(not md5 size mtime) /var/log/certmaster/audit.log + +%attr(600,root,root) %dir /var/lib/certmaster +%attr(600,root,root) %dir /var/lib/certmaster/certmaster +%attr(600,root,root) %dir /var/lib/certmaster/certmaster/certs +%attr(600,root,root) %dir /var/lib/certmaster/certmaster/csrs +%dir /var/lib/certmaster/peers +%dir /var/lib/certmaster/triggers/sign/ +%dir /var/lib/certmaster/triggers/sign/pre +%dir /var/lib/certmaster/triggers/sign/post +%dir /var/lib/certmaster/triggers/request/ +%dir /var/lib/certmaster/triggers/request/pre +%dir /var/lib/certmaster/triggers/request/post +%dir /var/lib/certmaster/triggers/remove/ +%dir /var/lib/certmaster/triggers/remove/pre +%dir /var/lib/certmaster/triggers/remove/post +/var/lib/certmaster/triggers/sign/post/certmaster-sync +/var/lib/certmaster/triggers/remove/post/certmaster-sync %doc AUTHORS README LICENSE %{_mandir}/man1/*.1.gz @@ -80,10 +128,13 @@ else ln -sf /etc/init.d/certmaster /etc/rc.d/rc${i}.d/S99certmaster done for i in 1 6; do - ln -sf /etc/init.d/certmaster /etc/rc.d/rc${i}.d/S99certmaster + ln -sf /etc/init.d/certmaster /etc/rc.d/rc${i}.d/k01certmaster done fi exit 0 +# fix perms on log files +chmod 600 /var/log/certmaster/certmaster.log +chmod 600 /var/log/certmaster/audit.log %preun if [ "$1" = 0 ] ; then @@ -99,12 +150,53 @@ fi %changelog -* Mon March 17 2008 Adrian Likins - 0.1-2 +* Wed Aug 25 2010 Seth Vidal - 0.27-1 +- 0.27 + +* Thu Jun 11 2009 Adrian Likins - 0.25-1 +- add /etc/certmaster/func + +* Tue May 26 2009 Adrian Likins - 0.25-1 +- add /var/lib/certmaster/certmaster* to spec and set perms +- add /var/log/certmaster/certmaster.log,audit.log to spec + and set perms + +* Wed Feb 18 2009 Adrian Likins - 0.24.5 +- remove version file + +* Mon Jan 19 2009 Adrian Likins - 0.24.4 +- make inclusion of egginfo dependant on having python >= 2.5 +- remove need for patch on rhel3+python2.4 cases (distutils should + do all the /usr/bin/python renaming now) +- minor reformatting changes + +* Tue Jan 06 2009 Greg Swift - 0.24-3x1 +- Fixed spec because it was only building in rhel3 + +* Wed Dec 31 2008 Greg Swift - 0.24-2 +- Patched SPEC to build on rhel3 with python2.3 +- Added Patch0 to handle python2.3 if on rhel3 + +* Mon Dec 12 2008 Adrian Likins - 0.24-1 +- add missing dirs as per bz#473633 + +* Mon Jun 6 2008 Adrian Likins - 0.20-2 +- fix fedora bug #441283 - typo in postinstall scriptlet + (the init.d symlinks for runlevels 1 and 6 were created wrong) + +* Tue Apr 15 2008 Michael DeHaan - 0.20-1 +- new release +- fix changelog versions + +* Tue Apr 15 2008 Steve Salevan - 0.19-3 +- added in trigger directories + +* Mon Mar 17 2008 Adrian Likins - 0.19-2 - removed unused minion/ and overlord/ dirs -* Mon Feb 25 2008 Adrian Likins - 0.1-1 +* Mon Feb 25 2008 Adrian Likins - 0.19-1 - remove certmasterd references -* Thu Feb 7 2008 Michael DeHaan - 0.1-1 +* Thu Feb 7 2008 Michael DeHaan - 0.18-1 - initial version, split off from func project, WIP