Name: esc Version: 1.1.0 Release: 44%{?dist} Summary: Enterprise Security Client Smart Card Client License: GPL+ URL: http://directory.fedoraproject.org/wiki/CoolKey Group: Applications/Internet BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) #Fix to build against XUlrunner SDK. Patch1: esc-1.1.0-fix1.patch #Fix to the smart card handling thread Patch2: esc-1.1.0-fix2.patch #Simple fix to some smart card error messages. Patch3: esc-1.1.0-fix3.patch #Add -fno-strict-aliasing compile flag. Patch4: esc-1.1.0-fix4.patch #Fix error with reporting a certain smart card error message. Patch5: esc-1.1.0-fix5.patch #Allow the http library the ability to observe security exceptions for incoming server certs. Patch6: esc-1.1.0-fix6.patch #Ipv6 support for the http library. Patch7: esc-1.1.0-fix7.patch Patch8: esc-1.1.0-fix8.patch Patch9: esc-1.1.0-fix9.patch Patch10: esc-1.1.0-fix10.patch Patch11: esc-1.1.0-fix11.patch Patch12: esc-1.1.0-fix12.patch Patch13: esc-1.1.0-fix13.patch Patch14: esc-1.1.0-fix14.patch Patch15: esc-1.1.0-fix15.patch Patch16: esc-1.1.0-fix16.patch Patch17: esc-1.1.0-fix17.patch Patch18: esc-1.1.0-fix18.patch Patch19: esc-1.1.0-fix19.patch Patch20: esc-1.1.0-fix20.patch Patch21: esc-1.1.0-fix21.patch Patch22: esc-1.1.0-fix22.patch Patch23: esc-1.1.0-fix23.patch Patch24: esc-1.1.0-fix24.patch Patch25: esc-1.1.0-fix25.patch Patch26: esc-1.1.0-fix26.patch Patch27: esc-1.1.0-fix27.patch Patch28: esc-1.1.0-fix28.patch Patch29: esc-1.1.0-fix29.patch Patch30: esc-1.1.0-fix30.patch Patch31: esc-1.1.0-fix31.patch Patch32: esc-1.1.0-fix32.patch BuildRequires: doxygen fontconfig-devel freetype-devel >= 2.1 BuildRequires: glib2-devel libIDL-devel atk-devel gtk2-devel libjpeg-devel BuildRequires: pango-devel libpng-devel pkgconfig zlib-devel BuildRequires: nspr-devel nss-devel BuildRequires: autoconf libX11-devel libXt-devel BuildRequires: xulrunner xulrunner-devel BuildRequires: pcsc-lite-devel coolkey-devel BuildRequires: desktop-file-utils zip binutils libnotify-devel BuildRequires: dbus-devel Requires: pcsc-lite coolkey nss nspr Requires: zip dbus >= 0.90 libnotify >= 0.4.2 Requires: xulrunner # 390 does not have coolkey or smartCards ExcludeArch: s390 s390x # We can't allow the internal xulrunner to leak out AutoReqProv: 0 #%define __prelink_undo_cmd %{nil} %define escname %{name}-%{version} %define escdir %{_libdir}/%{escname} %define escbindir %{_bindir} %define esc_chromepath chrome/content/esc %define appdir applications %define icondir %{_datadir}/icons/hicolor/48x48/apps %define esc_vendor esc %define autostartdir %{_sysconfdir}/xdg/autostart %define pixmapdir %{_datadir}/pixmaps %define docdir %{_defaultdocdir}/%{escname} %define escappdir src/app/xpcom %define escxuldir src/app/xul/esc %define escrpmdir rpm %define escxulchromeicons %{escxuldir}/chrome/icons/default %define escdaemon escd Source0: http://pki.fedoraproject.org/pki/sources/%name/%{escname}.tar.bz2 Source1: http://pki.fedoraproject.org/pki/sources/%name/esc Source2: http://pki.fedoraproject.org/pki/sources/%name/esc.desktop Source3: http://pki.fedoraproject.org/pki/sources/%name/esc.png %description Enterprise Security Client allows the user to enroll and manage their cryptographic smartcards. %prep %setup -q -c -n %{escname} #patch esc %patch1 -p1 -b .fix1 %patch2 -p1 -b .fix2 %patch3 -p1 -b .fix3 %patch4 -p1 -b .fix4 %patch5 -p1 -b .fix5 %patch6 -p1 -b .fix6 %patch7 -p1 -b .fix7 %patch8 -p1 -b .fix8 %patch9 -p1 -b .fix9 %patch10 -p1 -b .fix10 %patch11 -p1 -b .fix11 %patch12 -p1 -b .fix12 %patch13 -p1 -b .fix13 %patch14 -p1 -b .fix14 %patch15 -p1 -b .fix15 %patch16 -p1 -b .fix16 %patch17 -p1 -b .fix17 %patch18 -p1 -b .fix18 %patch19 -p1 -b .fix19 %patch20 -p1 -b .fix20 %patch21 -p1 -b .fix21 %patch22 -p1 -b .fix22 %patch23 -p1 -b .fix23 %patch24 -p1 -b .fix24 %patch25 -p1 -b .fix25 %patch26 -p1 -b .fix26 %patch27 -p1 -b .fix37 %patch28 -p1 -b .fix28 %patch29 -p1 -b .fix29 %patch30 -p1 -b .fix30 %patch31 -p1 -b .fix31 %patch32 -p1 -b .fix32 r=$(uname -r | sed -e 's/\(^[^.]*\.[^.]*\).*/\1/') [ -f esc/coreconf/Linux$r.mk ] || ln -s Linux3.5.mk esc/coreconf/Linux$r.mk %build export geckoversion=`rpm -qi xulrunner | grep Version | sed 's/[\t ]//g;/^$/d' | sed 's/Version://'` GECKO_SDK_PATH=%{_libdir}/xulrunner-devel-$geckoversion/sdk echo $GECKO_SDK_PATH GECKO_BIN_PATH=%{_libdir}/xulrunner GECKO_INCLUDE_PATH=%{_includedir}/xulrunner-$geckoversion GECKO_IDL_PATH=/usr/share/idl/xulrunner-$geckoversion %if 0%{?__isa_bits} %if %{__isa_bits} == 64 USE_64=1 export USE_64 %endif %endif export GECKO_SDK_PATH export GECKO_BIN_PATH export GECKO_INCLUDE_PATH export GECKO_IDL_PATH # last setup call moved the current directory cd esc #cd ../.. cp %{SOURCE3} %{escxuldir}/%{esc_chromepath} rm -f %{escxulchromeicons}/*.ico cp %{escxulchromeicons}/esc-window.xpm %{escxulchromeicons}/default.xpm make HAVE_LIB_NOTIFY=1 ESC_VERSION=%{version}-%{release} USE_XUL_SDK=1 %install cd esc mkdir -p $RPM_BUILD_ROOT/%{_mandir}/man1 install -m 644 %{escrpmdir}/esc.1 $RPM_BUILD_ROOT%{_mandir}/man1/ mkdir -p $RPM_BUILD_ROOT/%{_datadir}/%{appdir} mkdir -p $RPM_BUILD_ROOT/%{autostartdir} cp %{escrpmdir}/esc.desktop $RPM_BUILD_ROOT/%{_datadir}/%{appdir} cp %{escrpmdir}/esc.desktop $RPM_BUILD_ROOT/%{autostartdir} cd .. cd esc/src/app/xpcom mkdir -p $RPM_BUILD_ROOT/%{escbindir} mkdir -p $RPM_BUILD_ROOT/%{icondir} #mkdir -p $RPM_BUILD_ROOT/%{_datadir}/%{appdir} #mkdir -p $RPM_BUILD_ROOT/%{autostartdir} mkdir -p $RPM_BUILD_ROOT/%{pixmapdir} mkdir -p $RPM_BUILD_ROOT/%{docdir} sed -e 's;\$LIBDIR;'%{_libdir}';g' ../../../rpm/esc > $RPM_BUILD_ROOT/%{escbindir}/%{name} chmod 755 $RPM_BUILD_ROOT/%{escbindir}/esc mkdir -p $RPM_BUILD_ROOT/%{escdir} %if 0%{?__isa_bits} %if %{__isa_bits} == 64 USE_64=1 export USE_64 %endif %endif make USE_XUL_SDK=1 install DESTDIR=$RPM_BUILD_ROOT/%{escdir} rm -rf $RPM_BUILD_ROOT/%{escdir}/usr cd ../../../dist/*DBG*/esc_build/esc cp %{esc_chromepath}/esc.png $RPM_BUILD_ROOT/%{icondir}/esc-png.png ln -s $RPMBUILD_ROOT%{icondir}/esc-png.png $RPM_BUILD_ROOT/%{pixmapdir}/esc-png.png #cp %{escrpmdir}/esc.desktop $RPM_BUILD_ROOT/%{_datadir}/%{appdir} #cp %{escrpmdir}/esc.desktop $RPM_BUILD_ROOT/%{autostartdir} cd %{_builddir} cp %{escname}/esc/LICENSE $RPM_BUILD_ROOT/%{docdir} rm -f $RPM_BUILD_ROOT/%{escdir}/esc rm -r $RPM_BUILD_ROOT/%{escdir}/xulrunner echo "xulrunner ./application.ini \$* &" > $RPM_BUILD_ROOT/%{escdir}/esc chmod 755 $RPM_BUILD_ROOT/%{escdir}/esc chmod 755 -R $RPM_BUILD_ROOT/%{escdir}/chrome chmod 755 -R $RPM_BUILD_ROOT/%{escdir}/defaults chmod 755 $RPM_BUILD_ROOT/%{escdir}/application.ini %clean rm -rf $RPM_BUILD_ROOT %files %defattr(-,root,root,-) %{escdir}/esc %{escdir}/escd %{escbindir}/esc %{escdir}/application.ini %{escdir}/chrome.manifest %{escdir}/chrome/chrome.manifest %{escdir}/chrome/content %{escdir}/chrome/locale %{escdir}/chrome/icons/default %{escdir}/components %{escdir}/defaults/preferences/esc-prefs.js %{icondir}/esc-png.png %{pixmapdir}/esc-png.png %{autostartdir}/esc.desktop %{_datadir}/%{appdir}/esc.desktop %{_mandir}/man1/* %doc %{docdir}/LICENSE %post touch --no-create %{_datadir}/icons/hicolor || : if [ -x %{_bindir}/gtk-update-icon-cache ]; then %{_bindir}/gtk-update-icon-cache --quiet %{_datadir}/icons/hicolor || : fi %preun killall --exact -q escd exit 0 %postun touch --no-create %{_datadir}/icons/hicolor || : if [ -x %{_bindir}/gtk-update-icon-cache ]; then %{_bindir}/gtk-update-icon-cache --quiet %{_datadir}/icons/hicolor || : fi %changelog * Mon Mar 23 2020 Jack Magne - 1.1.0-44 - Resolves: Bug# 1787362 - 'esc' creates world-writable directories . * Mon Jul 05 2019 Jack Magne - 1.1.0-43 - Resolves: Bug# 1688904 - ESC - HTTP GET Requests incorrectly Being Sent To TPS for Token Operations. * Tue Mar 26 2019 Jack Magne - 1.1.0-42 - Related: Bug# 1358500 - Segmentation fault happens when escd runs with a NULL display. - Resolve changelog entry error. * Thu Mar 21 2019 Jack Magne - 1.1.0-41 - Resolves: Bug# 1358500 - Segmentation fault happens when escd runs with a NULL display. * Fri Jan 19 2018 Jack Magne - 1.1.0-40 - Resolves: Bug #1466949, Relate: Bug #1523946 - [ppc64] ld switch to relro breaks GDB. This caused an rpmdiff failure. * Mon Jan 08 2018 Jack Magne - 1.1.0-39 - Resolves: Bug #1466949 - esc created .redhat directory fails STIG umask check, fixed corner case. * Thu Nov 02 2017 Jack Magne - 1.1.0-38 - Resolves: Bug #1466949 - esc created .redhat directory fails STIG umask check * Tue Jun 28 2016 Jack Magne - 1.1.0-37 - Resolves: Bug #885898 - ESC incorrectly display Issuer information for a CAC smart card - Resolves: Bug 1070802 - missing -fstack-protector-strong * Tue Jan 06 2015 Jack Magne - 1.1.0-36 - Resolves: Bug #1176241 - .redhat dir does not have the same permissions during manual and auto launch of ESC Client - Minor additional fix. * Mon Jan 05 2015 Jack Magne - 1.1.0-35 - Resolves: Bug #1176241 - .redhat dir does not have the same permissions during manual and auto launch of ESC Client * Tue Dec 16 2014 Jack Magne - 1.1.0-34 - Resolves: Bug #1173774 - ESC Client does list - the encryption and signing certs under the "Your Certificates" tab when an enrolled card is inserted. * Mon Nov 17 2014 Jack Magne - 1.1.0-33 - Resolves: Bug #1163479 Errata 18562 TPS tests fails - esc rebuild failure because of xulrunner updates. * Thu Sep 11 2014 Jack Magne - 1.1.0-30 - Resolves: Bug #1125496 - Minor spec and makefile and tweaks to build under xulrunner sdk 31.1.0. * Wed Sep 10 2014 Jack Magne - 1.1.0-30 - Resolves: Bug #1125496 - FTBFS - Thanks to: perobins@redhat.com * Mon Sep 08 2014 Jack Magne - 1.1.0-30 - Resolves: Bug #1125496 - FTBFS * Fri Aug 15 2014 Jack Magne - 1.1.0-29 - Resolves: Bug #1053711 - FTBFS * Fri Jul 11 2014 Jack Magne - 1.1.0-28 - Thanks to: Marcin Juszkiewicz - Handle all kernel versions - Fix gecko version * Mon Jan 06 2014 Jack Magne - 1.1.0-27 - Resolves: Bug 1048856 - esc does not build on RHEL 7 * Fri Dec 27 2013 Daniel Mach - 1.1.0-27 - Mass rebuild 2013-12-27 * Wed Nov 27 2013 Jack Magne =1.1.0-26 - Resolves: #1033779 - Mouse move on a locked screen display Smart Card Manager smart card insert/removal event notifications. - Resolves: #1033220 - ESC phone home/authentication dialog should pop it to top of window stack to get focus * Thu Nov 7 2013 Jack Magne =1.1.0-25 - Resolves: #1027777 - rebuild esc against new xulrunner (ESR24). * Mon Nov 4 2013 Jack Magne =1.1.0-24 - Related: #1018670, fix rpmdiff issue with icon related symbolic link. * Fri Nov 1 2013 Jack Magne =1.1.0-23 - Respin, which Resolves: #1018670 - missing icon in gnome notification settings * Tue Jul 30 2013 Jack Magne = 1.1.0-22 - Continuing rpmdiff appeasement. * Mon Jul 29 2013 Jack Magne = 1.1.0-21 - Resolves #865721 - Switch BuildRequires from autoconf213 ~~> autoconf - Resolves #963606 - esc ceased working after Firefox/xulrunner update to 17 and above series * Mon Jun 17 2013 Jack Magne = 1.1.0-21 - Appease latest compiler errors and build to xulrunner 21.0. * Wed Nov 28 2012 Jack Magne = 1.1.0-20 - Gecko no longer supports UniversalXPConnect, remove it. * Wed Nov 21 2012 Jack Magne = 1.1.0-19 - Pick up latest fixes. * Thu Jul 19 2012 Fedora Release Engineering - 1.1.0-18 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Fri Jun 22 2012 Jack Magne = 1.1.0-17 - Related #688361 - Get ESC to run on Gecko 2.0, again. * Thu May 10 2012 Jack Magne = 1.1.0-16 - Related #688361 - Get ESC to run on Gecko 2.0. * Mon Feb 20 2012 Jack Magne = 1.1.0-15 - Related #688361 - Get ESC to run on Gecko 2.0. * Tue Nov 22 2011 Jack Magne = 1.1.0-14 - Related #688361 - Get ESC to run on Gecko 2.0. * Thu Apr 15 2010 Jack Magne = 1.1.0-11 - Adjust for new linking rules. * Tue Sep 15 2009 Jack Magne = 1.1.0-10 - Pick up latest improvements. * Mon Jun 22 2009 Jack Magne = 1.1.0-9 - Related: #496410, also IPV6 support. * Fri Jun 19 2009 Jack Magne = 1.1.0-8 - Related: #496410, SSL Conn fix. * Mon Jun 8 2009 Jack Magne - 1.1.0-7 - Releated: #496410. * Thu Apr 23 2009 Jack Magne - 1.1.0-6 - Related: #496410. Appease rpmdiff. * Wed Apr 22 2009 Jack Magne - 1.1.0-5 - Related: #496410, addresses 494981, better error message. * Wed Apr 22 2009 Jack Magne - 1.1.0-4 - Move to latest rebased code. Related #496410. * Thu Dec 04 2008 Jack Magne - 1.0.0-39 - Resolves #469202 - Cert Viewer issue * Tue Nov 11 2008 Jack Magne - 1.0.0-38 - Resolves #471923 - ESC Connection issue. * Thu Oct 16 2008 Jack Magne - 1.0.0-37 - Resolves #467126 - Blank authentication dialog problem. * Fri Sep 26 2008 Jack Magne - 1.0.0-36 - Related #200475 - Require the xulrunner package, Resolves #248493 * Thu Sep 18 2008 Jack Magne - 1.0.0-35 - Related 200475, make rpmdiff tests happy. * Tue Sep 16 2008 Jack Magne - 1.0.0-34 - Resolves #200475 #253081 #437238 * Thu Jan 10 2008 Jack Magne - 1.0.0-33 - Resolves #25324a8 #253268 * Thu Jul 12 2007 Jack Magne - 1.0.0-32 - Resolves #248071 - ESC RPM unistall failure if daemon not running. * Fri Jun 22 2007 Jack Magne - 1.0.0-31 - Related #208038 - Top things to put in diagnostics log * Wed Jun 20 2007 Jack Magne - 1.0.0-30 - Related #204021 * Fri Jun 8 2007 Jack Magne - 1.0-0-29 - Related #212010 * Fri Jun 8 2007 Jack Magne - 1.0.0-28 - Resolves #212010 * Tue Jun 5 2007 Jack Magne - 1.0.0-27 - Resolves #203466 Better error message strings. * Mon May 21 2007 Jack Magne - 1.0.0-26 - Related: #206783 Fix the launcher script to work with new logging. * Fri May 11 2007 Jack Magne - 1.0.0-25 - Resolves: #206783. * Mon Apr 23 2007 Jack Magne - 1.0.0-24 - More Desktop appearance fixes. - Related: #208749 * Mon Apr 23 2007 Jack Magne - 1.0.0-23 - Desktop appearance fixes. - Related: #208749 * Thu Apr 19 2007 Jack Magne - 1.0.0-22 - Second drop of 5.1 fixes. - Resolves: #203934, #203935, #204959, #206780, #206792, #207721 - Resolves: #207816, #206791 - Related: #208749 * Wed Apr 18 2007 Jack Magne - 1.0.0-21 - First 5.1 fixes. - Resolves: #203757, #203806, #204661, #205856, #206788, #206791 - Resolves: #208037, #208333, #210589, #210590, #213912, #226913 - Resolves: #204021, #205498, #224436 * Tue Nov 28 2006 Jack Magne - 1.0.0-20 - fix for bug to commit config changes immediately. Bug #210988 * Wed Nov 15 2006 Jack Magne - 1.0.0-19 -fix for escd double free problem. Bug #209882 * Tue Oct 24 2006 Jack Magne - 1.0.0-18 -rebuilt on RHEL-5 branch * Wed Oct 4 2006 Jack Magne - 1.0.0-17 - Diagnostics display fixes, Mac and Window fixes. * Sun Oct 01 2006 Jesse Keating - 1.0.0-16 - rebuilt for unwind info generation, broken in gcc-4.1.1-21 * Fri Sep 22 2006 Jack Magne - 1.0.0-15 - Fix to the build version * Fri Sep 22 2006 Jack Magne = 1.0.0-14 - Fix to compile error in daemon * Fri Sep 22 2006 Jack Magne - 1.0.0-13 - Fix to include the new esc daemon. * Sat Sep 16 2006 Jack Magne - 1.0.0-12 - Fix for Password Reset and minor UI revision. * Fri Sep 15 2006 Jack Magne - 1.0.0-11 - Further UI enhancement bug fixes * Thu Sep 7 2006 Jack Magne - 1.0.0-10 - Further strings revisions. * Wed Aug 30 2006 Jack Magne - 1.0.0-9 - Revision of the strings used in ESC. * Sun Aug 27 2006 Jack Magne - 1.0.0-8 - Fixes to get libnotify working properly on FC6 systems. * Tue Aug 22 2006 Jack Magne - 1.0.0-7 - Fix for bug #203211, use of system NSS and NSPR for - Xulrunner ,addressing the problem running on 64 bit. - Overwriting 5 and 6 due to important bug #203211. * Fri Aug 18 2006 Jack Magne - 1.0.0-6 - Correct problem with Patch #6 * Thu Aug 17 2006 Jack Magne - 1.0.0-5 - Build ESC's xulrunner component using system nss and nspr - Build process creates run script based on {_libdir} variable, accounting for differences on 64 bit machines. - UI enhancements * Tue Aug 1 2006 Matthias Clasen - 1.0.0-4 - Don't auto-generate requires either * Mon Jul 31 2006 Matthias Clasen - 1.0.0-3 - Don't provide mozilla libraries * Fri Jul 28 2006 Ray Strode - 1.0.0-2 - remove bogus gtk+ requires (and some others that will be automatic) * Tue Jun 13 2006 Jack Magne - 1.0.0-1 - Initial revision for fedora