|
 |
b93447 |
Name: jss
|
|
|
aee1ec |
Version: 4.4.0
|
|
|
762105 |
#Release: 8%{?dist}
|
|
|
762105 |
Release: 9.el7_4
|
|
|
b93447 |
Summary: Java Security Services (JSS)
|
|
|
b93447 |
|
|
|
b93447 |
Group: System Environment/Libraries
|
|
|
b93447 |
License: MPLv1.1 or GPLv2+ or LGPLv2+
|
|
|
b93447 |
URL: http://www.mozilla.org/projects/security/pki/jss/
|
|
|
aee1ec |
# The source for this package was pulled from upstream's hg. Use the
|
|
|
b93447 |
# following commands to generate the tarball:
|
|
|
aee1ec |
#
|
|
|
aee1ec |
# hg clone https://hg.mozilla.org/projects/jss
|
|
|
aee1ec |
# cd jss
|
|
|
aee1ec |
# hg archive --prefix jss-4.4.0/jss/ ../jss-4.4.0.tar.gz
|
|
|
aee1ec |
#
|
|
|
aee1ec |
Source0: http://pki.fedoraproject.org/pki/sources/%{name}/%{version}/%{name}-%{version}.tar.gz
|
|
|
aee1ec |
Source1: http://pki.fedoraproject.org/pki/sources/%{name}/%{version}/MPL-1.1.txt
|
|
|
aee1ec |
Source2: http://pki.fedoraproject.org/pki/sources/%{name}/%{version}/gpl.txt
|
|
|
aee1ec |
Source3: http://pki.fedoraproject.org/pki/sources/%{name}/%{version}/lgpl.txt
|
|
|
b93447 |
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
|
|
|
b93447 |
|
|
|
aee1ec |
Conflicts: idm-console-framework < 1.1.17-4
|
|
|
aee1ec |
Conflicts: pki-base < 10.4.0
|
|
|
aee1ec |
Conflicts: tomcatjss < 7.2.1
|
|
|
aee1ec |
|
|
|
aee1ec |
BuildRequires: nss-devel >= 3.28.4-6
|
|
|
aee1ec |
BuildRequires: nspr-devel >= 4.13.1
|
|
|
b93447 |
BuildRequires: java-devel
|
|
|
aee1ec |
%if 0%{?fedora} >= 25
|
|
|
aee1ec |
BuildRequires: perl
|
|
|
aee1ec |
%endif
|
|
|
aee1ec |
Requires: java-headless
|
|
|
aee1ec |
Requires: nss >= 3.28.4-6
|
|
|
aee1ec |
|
|
|
aee1ec |
Patch1: jss-post-rebase.patch
|
|
|
aee1ec |
Patch2: jss-rhel-7-4-beta.patch
|
|
|
762105 |
Patch3: jss-HMAC-test-for-AES-encrypt-unwrap.patch
|
|
|
762105 |
Patch4: jss-PBE-padded-block-cipher-enhancements.patch
|
|
|
762105 |
Patch5: jss-fix-PK11Store-getEncryptedPrivateKeyInfo-segfault.patch
|
|
|
762105 |
Patch6: jss-HMAC-unwrap-keywrap-FIPSMODE.patch
|
|
|
b93447 |
|
|
|
b93447 |
%description
|
|
|
b93447 |
Java Security Services (JSS) is a java native interface which provides a bridge
|
|
|
b93447 |
for java-based applications to use native Network Security Services (NSS).
|
|
|
b93447 |
This only works with gcj. Other JREs require that JCE providers be signed.
|
|
|
b93447 |
|
|
|
b93447 |
%package javadoc
|
|
|
b93447 |
Summary: Java Security Services (JSS) Javadocs
|
|
|
b93447 |
Group: Documentation
|
|
|
b93447 |
Requires: jss = %{version}-%{release}
|
|
|
b93447 |
|
|
|
b93447 |
%description javadoc
|
|
|
b93447 |
This package contains the API documentation for JSS.
|
|
|
b93447 |
|
|
|
b93447 |
%prep
|
|
|
aee1ec |
%setup -q -n %{name}-%{version}
|
|
|
aee1ec |
pushd jss
|
|
|
b93447 |
%patch1 -p1
|
|
|
b93447 |
%patch2 -p1
|
|
|
762105 |
%patch3 -p1
|
|
|
762105 |
%patch4 -p1
|
|
|
762105 |
%patch5 -p1
|
|
|
762105 |
%patch6 -p1
|
|
|
aee1ec |
popd
|
|
|
b93447 |
|
|
|
b93447 |
%build
|
|
|
b93447 |
[ -z "$JAVA_HOME" ] && export JAVA_HOME=%{_jvmdir}/java
|
|
|
aee1ec |
[ -z "$USE_INSTALLED_NSPR" ] && export USE_INSTALLED_NSPR=1
|
|
|
aee1ec |
[ -z "$USE_INSTALLED_NSS" ] && export USE_INSTALLED_NSS=1
|
|
|
b93447 |
|
|
|
b93447 |
# Enable compiler optimizations and disable debugging code
|
|
|
aee1ec |
# NOTE: If you ever need to create a debug build with optimizations disabled
|
|
|
aee1ec |
# just comment out this line and change in the %%install section below the
|
|
|
aee1ec |
# line that copies jars xpclass.jar to be xpclass_dbg.jar
|
|
|
aee1ec |
export BUILD_OPT=1
|
|
|
b93447 |
|
|
|
b93447 |
# Generate symbolic info for debuggers
|
|
|
b93447 |
XCFLAGS="-g $RPM_OPT_FLAGS"
|
|
|
b93447 |
export XCFLAGS
|
|
|
b93447 |
|
|
|
b93447 |
PKG_CONFIG_ALLOW_SYSTEM_LIBS=1
|
|
|
b93447 |
PKG_CONFIG_ALLOW_SYSTEM_CFLAGS=1
|
|
|
b93447 |
|
|
|
b93447 |
export PKG_CONFIG_ALLOW_SYSTEM_LIBS
|
|
|
b93447 |
export PKG_CONFIG_ALLOW_SYSTEM_CFLAGS
|
|
|
b93447 |
|
|
|
b93447 |
NSPR_INCLUDE_DIR=`/usr/bin/pkg-config --cflags-only-I nspr | sed 's/-I//'`
|
|
|
b93447 |
NSPR_LIB_DIR=`/usr/bin/pkg-config --libs-only-L nspr | sed 's/-L//'`
|
|
|
b93447 |
|
|
|
b93447 |
NSS_INCLUDE_DIR=`/usr/bin/pkg-config --cflags-only-I nss | sed 's/-I//'`
|
|
|
b93447 |
NSS_LIB_DIR=`/usr/bin/pkg-config --libs-only-L nss | sed 's/-L//'`
|
|
|
b93447 |
|
|
|
b93447 |
export NSPR_INCLUDE_DIR
|
|
|
b93447 |
export NSPR_LIB_DIR
|
|
|
b93447 |
export NSS_INCLUDE_DIR
|
|
|
b93447 |
export NSS_LIB_DIR
|
|
|
b93447 |
|
|
|
aee1ec |
%if 0%{?__isa_bits} == 64
|
|
|
b93447 |
USE_64=1
|
|
|
b93447 |
export USE_64
|
|
|
b93447 |
%endif
|
|
|
b93447 |
|
|
|
b93447 |
# The Makefile is not thread-safe
|
|
|
aee1ec |
make -C jss/coreconf
|
|
|
aee1ec |
make -C jss
|
|
|
aee1ec |
make -C jss javadoc
|
|
|
aee1ec |
|
|
|
aee1ec |
%check
|
|
|
b93447 |
|
|
|
b93447 |
%install
|
|
|
b93447 |
rm -rf $RPM_BUILD_ROOT docdir
|
|
|
b93447 |
|
|
|
aee1ec |
# Copy the license files here so we can include them in %%doc
|
|
|
b93447 |
cp -p %{SOURCE1} .
|
|
|
b93447 |
cp -p %{SOURCE2} .
|
|
|
b93447 |
cp -p %{SOURCE3} .
|
|
|
b93447 |
|
|
|
b93447 |
# There is no install target so we'll do it by hand
|
|
|
b93447 |
|
|
|
b93447 |
# jars
|
|
|
b93447 |
install -d -m 0755 $RPM_BUILD_ROOT%{_jnidir}
|
|
|
aee1ec |
# NOTE: if doing a debug no opt build change xpclass.jar to xpclass_dbg.jar
|
|
|
aee1ec |
install -m 644 dist/xpclass.jar ${RPM_BUILD_ROOT}%{_jnidir}/jss4.jar
|
|
|
b93447 |
|
|
|
b93447 |
# We have to use the name libjss4.so because this is dynamically
|
|
|
b93447 |
# loaded by the jar file.
|
|
|
b93447 |
install -d -m 0755 $RPM_BUILD_ROOT%{_libdir}/jss
|
|
|
aee1ec |
install -m 0755 dist/Linux*.OBJ/lib/libjss4.so ${RPM_BUILD_ROOT}%{_libdir}/jss/
|
|
|
b93447 |
pushd ${RPM_BUILD_ROOT}%{_libdir}/jss
|
|
|
b93447 |
ln -fs %{_jnidir}/jss4.jar jss4.jar
|
|
|
b93447 |
popd
|
|
|
b93447 |
|
|
|
b93447 |
# javadoc
|
|
|
b93447 |
install -d -m 0755 $RPM_BUILD_ROOT%{_javadocdir}/%{name}-%{version}
|
|
|
aee1ec |
cp -rp dist/jssdoc/* $RPM_BUILD_ROOT%{_javadocdir}/%{name}-%{version}
|
|
|
aee1ec |
cp -p jss/jss.html $RPM_BUILD_ROOT%{_javadocdir}/%{name}-%{version}
|
|
|
aee1ec |
cp -p *.txt $RPM_BUILD_ROOT%{_javadocdir}/%{name}-%{version}
|
|
|
b93447 |
|
|
|
b93447 |
%clean
|
|
|
b93447 |
rm -rf $RPM_BUILD_ROOT
|
|
|
b93447 |
|
|
|
b93447 |
# No ldconfig is required since this library is loaded by Java itself.
|
|
|
b93447 |
%files
|
|
|
b93447 |
%defattr(-,root,root,-)
|
|
|
aee1ec |
%doc jss/jss.html MPL-1.1.txt gpl.txt lgpl.txt
|
|
|
b93447 |
%{_libdir}/jss/*
|
|
|
b93447 |
%{_jnidir}/*
|
|
|
aee1ec |
%{_libdir}/jss/lib*.so
|
|
|
b93447 |
|
|
|
b93447 |
%files javadoc
|
|
|
b93447 |
%defattr(-,root,root,-)
|
|
|
b93447 |
%dir %{_javadocdir}/%{name}-%{version}
|
|
|
b93447 |
%{_javadocdir}/%{name}-%{version}/*
|
|
|
b93447 |
|
|
|
b93447 |
%changelog
|
|
|
762105 |
* Fri Oct 27 2017 Dogtag Team <pki-devel@redhat.com> 4.4.0-9
|
|
|
762105 |
- Bugzilla #1505690 - new JSS failures: HMAC Unwrap and KeyWrapping
|
|
|
762105 |
FIPSMODE [rhel-7.4.z] (jmagne)
|
|
|
762105 |
|
|
|
762105 |
* Mon Sep 11 2017 Dogtag Team <pki-devel@redhat.com> 4.4.0-8
|
|
|
762105 |
- Bugzilla #1488846 - Fix HmacTest code for AES encrypt/unwrap [rhel-7.4.z]
|
|
|
762105 |
(jmagne)
|
|
|
762105 |
- Bugzilla #1490494 - PKCS12: (JSS) upgrade to at least AES and SHA2 (FIPS)
|
|
|
762105 |
[RHEL-7.4.z] (ftweedal)
|
|
|
762105 |
- Bugzilla #1490740 - PK11Store.getEncryptedPrivateKeyInfo() segfault if
|
|
|
762105 |
export fails [rhel-7.4.z] (ftweedal)
|
|
|
762105 |
|
|
|
aee1ec |
* Tue May 9 2017 Matthew Harmsen <mharmsen@redhat.com> - 4.4.0-7
|
|
|
aee1ec |
- Bump NSS dependencies from 4.28.3 to 4.28.4-6 to pick-up fix in
|
|
|
aee1ec |
Mozilla Bugzilla #1360207 - Fix incorrect if (ss->...) in SSL_ReconfigFD
|
|
|
aee1ec |
|
|
|
aee1ec |
* Mon May 1 2017 Matthew Harmsen <mharmsen@redhat.com> - 4.4.0-6
|
|
|
aee1ec |
- Mozilla Bugzilla #1352476 - RFE: Document on the README how to create a
|
|
|
aee1ec |
release tag (mharmsen)
|
|
|
aee1ec |
- Mozilla Bugzilla #1355358 - CryptoStore: add methods for importing and
|
|
|
aee1ec |
exporting EncryptedPrivateKeyInfo (ftweedal)
|
|
|
aee1ec |
- Mozilla Bugzilla #1359731 - CryptoStore.importPrivateKey enhancements
|
|
|
aee1ec |
(ftweedal)
|
|
|
aee1ec |
|
|
|
aee1ec |
* Mon Apr 17 2017 Matthew Harmsen <mharmsen@redhat.com> - 4.4.0-5
|
|
|
aee1ec |
- Mozilla Bugzilla #1355268 - JSS 4.4 is incompatible with versions of
|
|
|
aee1ec |
idm-console-framework < 1.1.17-4
|
|
|
aee1ec |
- Red Hat Bugzilla #1435076 - Remove unused legacy lines from JSS spec files
|
|
|
aee1ec |
|
|
|
aee1ec |
* Mon Mar 27 2017 Matthew Harmsen <mharmsen@redhat.com> - 4.4.0-4
|
|
|
aee1ec |
- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
|
|
|
aee1ec |
- Updated build requirements for NSPR
|
|
|
aee1ec |
- Updated build and runtime requirements for NSS
|
|
|
aee1ec |
- ## 'jss-post-rebase.patch' resolves the following issues ported from
|
|
|
aee1ec |
## upstream:
|
|
|
aee1ec |
- Mozilla Bugzilla #1337092 - CMC conformance update: Implement required ASN.1
|
|
|
aee1ec |
code for RFC5272+ (cfu)
|
|
|
aee1ec |
- Mozilla Bugzilla #1347394 - Eclipse project files for JSS (edewata)
|
|
|
aee1ec |
- Mozilla Bugzilla #1347429 - Deprecated SSL 3.0 cipher names in SSLSocket
|
|
|
aee1ec |
class. (edewata)
|
|
|
aee1ec |
- Mozilla Bugzilla #1348856 - SSL alert callback (edewata)
|
|
|
aee1ec |
- Mozilla Bugzilla #1349278 - SSL cipher enumeration (edewata)
|
|
|
aee1ec |
- Mozilla Bugzilla #1349349 - Problem with Password.readPasswordFromConsole().
|
|
|
aee1ec |
(edewata)
|
|
|
aee1ec |
- Mozilla Bugzilla #1349831 - Revise top-level README file (mharmsen)
|
|
|
aee1ec |
- Mozilla Bugzilla #1349836 - Changes to JSS Version Block (mharmsen)
|
|
|
aee1ec |
- Mozilla Bugzilla #1350130 - Missing
|
|
|
aee1ec |
CryptoManager.verifyCertificateNowCUNative() implementation. (emaldona)
|
|
|
aee1ec |
|
|
|
aee1ec |
* Tue Mar 21 2017 Matthew Harmsen <mharmsen@redhat.com> - 4.4.0-3
|
|
|
aee1ec |
- Added Conflicts statement due to incompatibility with pki-base < 10.4.0
|
|
|
aee1ec |
|
|
|
aee1ec |
* Wed Mar 15 2017 Matthew Harmsen <mharmsen@redhat.com> - 4.4.0-2
|
|
|
aee1ec |
- Added Conflicts statement due to incompatibility with tomcatjss < 7.2.1
|
|
|
aee1ec |
|
|
|
aee1ec |
* Mon Mar 13 2017 Elio Maldonado <emaldona@redhat.com> - 4.4.0-1
|
|
|
aee1ec |
- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
|
|
|
aee1ec |
- ## JSS 4.4.0 includes the following patches ported from downstream:
|
|
|
aee1ec |
- Mozilla Bugzilla #507536 - Add IPv6 functionality to JSS
|
|
|
aee1ec |
- Mozilla Bugzilla #1307872 - Expose NSS calls for OCSP settings
|
|
|
aee1ec |
- Mozilla Bugzilla #1307882 - RFE ecc - add ecc curve name support in JSS and
|
|
|
aee1ec |
CS interface
|
|
|
aee1ec |
- Mozilla Bugzilla #1307993 - Expose updated certificate verification function
|
|
|
aee1ec |
in JSS
|
|
|
aee1ec |
- Mozilla Bugzilla #1308000 - Incorrect socket accept error message due to bad
|
|
|
aee1ec |
pointer arithmetic
|
|
|
aee1ec |
- Mozilla Bugzilla #1308001 - Verification should fail when a revoked
|
|
|
aee1ec |
certificate is added
|
|
|
aee1ec |
- Mozilla Bugzilla #1308004 - Warnings should be cleaned up in JSS build
|
|
|
aee1ec |
- Mozilla Bugzilla #1308006 - DRM failed to recovery keys when in FIPS mode
|
|
|
aee1ec |
(HSM + NSS)
|
|
|
aee1ec |
- Mozilla Bugzilla #1308008 - Defects revealed by Coverity scan
|
|
|
aee1ec |
- Mozilla Bugzilla #1308009 - Add support for PKCS5v2; support for secure PKCS12
|
|
|
aee1ec |
- Mozilla Bugzilla #1308012 - DRM: during archiving and recovering, wrapping
|
|
|
aee1ec |
unwrapping keys should be done in the token
|
|
|
aee1ec |
- Mozilla Bugzilla #1308013 - JSS - HSM token name was mistaken for
|
|
|
aee1ec |
manufacturer identifier
|
|
|
aee1ec |
- Mozilla Bugzilla #1308017 - Un-deprecate previously deprecated methods in
|
|
|
aee1ec |
JSS 4.2.6
|
|
|
aee1ec |
- Mozilla Bugzilla #1308019 - Provide Tomcat support for TLS v1.1 and
|
|
|
aee1ec |
TLS v1.2 via NSS through JSS
|
|
|
aee1ec |
- Mozilla Bugzilla #1308026 - JSS certificate validation does not pass up exact
|
|
|
aee1ec |
error from NSS
|
|
|
aee1ec |
- Mozilla Bugzilla #1308027 - Merge pki-symkey into jss
|
|
|
aee1ec |
- Mozilla Bugzilla #1308029 - Resolve Javadoc build issues
|
|
|
aee1ec |
- Mozilla Bugzilla #1308047 - support ECC encryption key archival and recovery
|
|
|
aee1ec |
- Mozilla Bugzilla #1313122 - Remove bypass tests as latest NSS has removed
|
|
|
aee1ec |
PKCS#11 bypass support
|
|
|
aee1ec |
- Mozilla Bugzilla #1328675 - Simple problem unwrapping AES sym keys on token
|
|
|
aee1ec |
- Mozilla Bugzilla #1345174 - Cannot create system certs when using LunaSA HSM
|
|
|
aee1ec |
in FIPS Mode and ECC algorithms
|
|
|
aee1ec |
- Mozilla Bugzilla #1345613 - expose AES KeyWrap and add some useful OID
|
|
|
aee1ec |
functions
|
|
|
aee1ec |
- Mozilla Bugzilla #1346410 - Load JSS libraries appropriately
|
|
|
aee1ec |
- ## JSS 4.4.0 includes the following changes for building and testing:
|
|
|
aee1ec |
- Mozilla Bugzilla #1331765 - Simplify JSS Makefile build and test
|
|
|
aee1ec |
- Mozilla Bugzilla #1346420 - Document steps required to use the proper
|
|
|
aee1ec |
libjss4.so when running certain HMAC Algorithms tests
|
|
|
aee1ec |
|
|
|
aee1ec |
* Wed Feb 22 2017 Jack Magne <jmagne@redhat.com> - 4.2.6-44
|
|
|
aee1ec |
- Bugzilla Bug #1425971 - Simple problem unwrapping AES sym keys on token
|
|
|
aee1ec |
|
|
|
aee1ec |
* Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 4.2.6-43
|
|
|
aee1ec |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
|
|
|
aee1ec |
|
|
|
f2c538 |
* Tue Aug 9 2016 Christina Fu <cfu@redhat.com> - 4.2.6-42
|
|
|
aee1ec |
- Sync up patches from both Fedora and RHEL; adding two patches
|
|
|
f2c538 |
(cfu, edewata, mharmsen) from RHEL:
|
|
|
aee1ec |
- Bugzilla Bug #1238450 - UnsatisfiedLinkError on Windows (cfu)
|
|
|
aee1ec |
- make it compile on Windows platforms (cfu for nhosoi)
|
|
|
f2c538 |
|
|
|
f2c538 |
* Fri Jun 24 2016 Christina Fu <cfu@redhat.com> - 4.2.6-41
|
|
|
f2c538 |
- Bugzilla 1221295 jss fails to decode EncryptedKey >> EnvelopedData
|
|
|
f2c538 |
(cfu for roysjosh@gmail.com)
|
|
|
f2c538 |
|
|
|
f2c538 |
* Thu May 19 2016 Christina Fu <cfu@redhat.com> - 4.2.6-40
|
|
|
f2c538 |
- Bugzilla 1074208 - pass up exact JSS certificate validation errors from NSS
|
|
|
f2c538 |
(edewata)
|
|
|
f2c538 |
- Bugzilla 1331596 - Key archival fails when KRA is configured with lunasa.
|
|
|
f2c538 |
(cfu)
|
|
|
f2c538 |
- PKI ticket 801 - Merge pki-symkey into jss (phase 1)
|
|
|
f2c538 |
(jmagne)
|
|
|
f2c538 |
|
|
|
aee1ec |
* Wed Dec 09 2015 Endi Dewata <edewata@redhat.com> - 4.2.6-38
|
|
|
aee1ec |
- Bugzilla Bug #1289799 - JSS build failure on F23 and Rawhide (edewata)
|
|
|
3a5923 |
|
|
|
aee1ec |
* Thu Apr 09 2015 Marcin Juszkiewicz <mjuszkiewicz@redhat.com> - 4.2.6-37
|
|
|
aee1ec |
- Fix use of __isa_bits macro so it does not fail during srpm generation on koji
|
|
|
3a5923 |
|
|
|
aee1ec |
* Thu Apr 09 2015 Marcin Juszkiewicz <mjuszkiewicz@redhat.com> - 4.2.6-36
|
|
|
aee1ec |
- Use __isa_bits macro to check for 64-bit arch. Unblocks aarch64 and ppc64le.
|
|
|
aee1ec |
|
|
|
aee1ec |
* Tue Sep 30 2014 Christina Fu <cfu@redhat.com> - 4.2.6-35
|
|
|
907328 |
- Bugzilla Bug #1040640 - Incorrect OIDs for SHA2 algorithms
|
|
|
907328 |
(cfu for jnimeh@gmail.com)
|
|
|
907328 |
- Bugzilla Bug #1133718 - Key strength validation is not performed for RC4
|
|
|
907328 |
algorithm (nkinder)
|
|
|
907328 |
- Bugzilla Bug #816396 - Provide Tomcat support for TLS v1.1 and
|
|
|
907328 |
TLS v1.2 via NSS through JSS (cfu)
|
|
|
907328 |
|
|
|
aee1ec |
* Sat Aug 16 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 4.2.6-34
|
|
|
aee1ec |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
|
|
|
aee1ec |
|
|
|
aee1ec |
* Sun Jun 08 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 4.2.6-33
|
|
|
aee1ec |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
|
|
|
5c8bc9 |
|
|
|
aee1ec |
* Fri Mar 28 2014 Michael Simacek <msimacek@redhat.com> - 4.2.6-32
|
|
|
aee1ec |
- Use Requires: java-headless rebuild (#1067528)
|
|
|
5c8bc9 |
|
|
|
aee1ec |
* Sat Aug 03 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 4.2.6-31
|
|
|
aee1ec |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
|
|
|
5c8bc9 |
|
|
|
b93447 |
* Wed Jul 17 2013 Nathan Kinder <nkinder@redhat.com> - 4.2.6-30
|
|
|
b93447 |
- Bugzilla Bug #847120 - Unable to build JSS on F17 or newer
|
|
|
b93447 |
|
|
|
b93447 |
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 4.2.6-29
|
|
|
b93447 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
|
|
|
b93447 |
|
|
|
b93447 |
* Wed Dec 19 2012 Stanislav Ochotnicky <sochotnicky@redhat.com> - 4.2.6-28
|
|
|
b93447 |
- revbump after jnidir change
|
|
|
b93447 |
|
|
|
b93447 |
* Wed Dec 12 2012 Stanislav Ochotnicky <sochotnicky@redhat.com> - 4.2.6-27
|
|
|
b93447 |
- Simple rebuild
|
|
|
b93447 |
|
|
|
b93447 |
* Mon Nov 19 2012 Christina Fu <cfu@redhat.com> - 4.2.6-26
|
|
|
b93447 |
- added source URLs in spec file to pass Package Wrangler
|
|
|
b93447 |
|
|
|
b93447 |
* Thu Jul 19 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 4.2.6-25
|
|
|
b93447 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
|
|
|
b93447 |
|
|
|
b93447 |
* Fri Mar 30 2012 Matthew Harmsen <mharmsen@redhat.com> - 4.2.6-24
|
|
|
b93447 |
- Bugzilla Bug #783007 - Un-deprecate previously deprecated methods in
|
|
|
b93447 |
JSS 4.2.6 . . . BadPaddingException (mharmsen)
|
|
|
b93447 |
|
|
|
b93447 |
* Tue Mar 20 2012 Christina Fu <cfu@redhat.com> - 4.2.6-23
|
|
|
b93447 |
- Bugzilla Bug #797351 - JSS - HSM token name was mistaken for manufacturer
|
|
|
b93447 |
identifier (cfu)
|
|
|
b93447 |
- Bugzilla Bug #804840 - [RFE] ECC encryption keys cannot be archived
|
|
|
b93447 |
ECC phase2 work - support for ECC encryption key archival and recovery (cfu)
|
|
|
b93447 |
- Bugzilla Bug #783007 - Un-deprecate previously deprecated methods in
|
|
|
b93447 |
JSS 4.2.6 . . . (mharmsen)
|
|
|
b93447 |
- Dogtag TRAC Task #109 (https://fedorahosted.org/pki/ticket/109) - add
|
|
|
b93447 |
benign JNI jar file symbolic link from JNI libdir to JNI jar file (mharmsen)
|
|
|
b93447 |
|
|
|
b93447 |
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 4.2.6-22
|
|
|
b93447 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
|
|
|
b93447 |
|
|
|
b93447 |
* Wed Oct 19 2011 Christina Fu <cfu@redhat.com> - 4.2.6-21
|
|
|
b93447 |
- Bugzilla Bug #737122 - DRM: during archiving and recovering, wrapping
|
|
|
b93447 |
unwrapping keys should be done in the token
|
|
|
b93447 |
- support for PKCS5v2; support for secure PKCS12
|
|
|
b93447 |
- Bugzilla Bug #744797 - KRA key recovery (retrieve pkcs#12) fails after the
|
|
|
b93447 |
in-place upgrade( CS 8.0->8.1)
|
|
|
b93447 |
|
|
|
b93447 |
* Mon Sep 19 2011 Matthew Harmsen <mharmsen@redhat.com> - 4.2.6-20
|
|
|
b93447 |
- Bugzilla Bug #715621 - Defects revealed by Coverity scan
|
|
|
b93447 |
|
|
|
b93447 |
* Wed Aug 31 2011 Matthew Harmsen <mharmsen@redhat.com> - 4.2.6-19.1
|
|
|
b93447 |
- Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
|
|
|
b93447 |
|
|
|
b93447 |
* Mon Aug 15 2011 Christina Fu <cfu@redhat.com> - 4.2.6-19
|
|
|
b93447 |
- Bugzilla Bug 733550 - DRM failed to recovery keys when in FIPS mode
|
|
|
b93447 |
(HSM + NSS)
|
|
|
b93447 |
|
|
|
b93447 |
* Fri Aug 12 2011 Matthew Harmsen <mharmsen@redhat.com> - 4.2.6-18
|
|
|
b93447 |
- Bugzilla Bug #660436 - Warnings should be cleaned up in JSS build
|
|
|
b93447 |
(jdennis, mharmsen)
|
|
|
b93447 |
|
|
|
b93447 |
* Wed May 18 2011 Christina Fu <cfu@redhat.com> - 4.2.6-17
|
|
|
b93447 |
- Bug 670980 - Cannot create system certs when using LunaSA HSM in FIPS Mode
|
|
|
b93447 |
and ECC algorithms (support tokens that don't do ECDH)
|
|
|
b93447 |
|
|
|
b93447 |
* Fri Apr 08 2011 Jack Magne <jmagne@redhat.com> - 4.2.6-15.99
|
|
|
b93447 |
- bug 694661 - TKS instance crash during token enrollment.
|
|
|
b93447 |
Back out of previous patch for #676083.
|
|
|
b93447 |
|
|
|
b93447 |
* Thu Feb 24 2011 Andrew Wnuk <awnuk@redhat.com> - 4.2.6-15
|
|
|
b93447 |
- bug 676083 - JSS: slots not freed
|
|
|
b93447 |
|
|
|
b93447 |
* Wed Feb 09 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 4.2.6-14
|
|
|
b93447 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
|
|
|
b93447 |
|
|
|
b93447 |
* Mon Jan 31 2011 John Dennis <jdennis@redhat.com> - 4.2.6-13
|
|
|
b93447 |
- remove misleading comment in spec file concerning jar signing
|
|
|
b93447 |
|
|
|
b93447 |
* Tue Jan 11 2011 Kevin Wright <kwright@redhat.com> - 4.2.6-12
|
|
|
b93447 |
- added missing patch line
|
|
|
b93447 |
|
|
|
b93447 |
* Tue Dec 21 2010 Christina Fu <cfu@redhat.com> - 4.2.6-11
|
|
|
b93447 |
- bug 654657 - <jdennis@redhat.com>
|
|
|
b93447 |
Incorrect socket accept error message due to bad pointer arithmetic
|
|
|
b93447 |
- bug 661142 - <cfu@redhat.com>
|
|
|
b93447 |
Verification should fail when a revoked certificate is added
|
|
|
b93447 |
|
|
|
b93447 |
* Thu Dec 16 2010 John Dennis <jdennis@redhat.com> - 4.2.6-10
|
|
|
b93447 |
- Resolves: bug 656094 - <jdennis@redhat.com>
|
|
|
b93447 |
Rebase jss to at least jss-4.2.6-9
|
|
|
b93447 |
- <jdennis@redhat.com>
|
|
|
b93447 |
merge in updates from Fedora
|
|
|
b93447 |
move jar location to %%{_libdir}/jss and provide symlinks, on 32bit looks like this:
|
|
|
b93447 |
/usr/lib/java/jss4.jar -> /usr/lib/jss/jss4.jar
|
|
|
b93447 |
/usr/lib/jss/jss4-<version>.jar
|
|
|
b93447 |
/usr/lib/jss/jss4.jar -> jss4-<version>.jar
|
|
|
b93447 |
/usr/lib/jss/libjss4.so
|
|
|
b93447 |
- bug 654657 - <jdennis@redhat.com>
|
|
|
b93447 |
Incorrect socket accept error message due to bad pointer arithmetic
|
|
|
b93447 |
- bug 647364 - <cfu@redhat.com>
|
|
|
b93447 |
Expose updated certificate verification function in JSS
|
|
|
b93447 |
- bug 529945 - <cfu@redhat.com>
|
|
|
b93447 |
expose NSS calls for OCSP settings
|
|
|
b93447 |
- bug 638833 - <cfu@redhat.com>
|
|
|
b93447 |
rfe ecc - add ec curve name support in JSS and CS
|
|
|
b93447 |
- <rcritten@redhat.com>
|
|
|
b93447 |
Need to explicitly catch UnsatisfiedLinkError exception for System.load()
|
|
|
b93447 |
- bug 533304 - <rcritten@redhat.com>
|
|
|
b93447 |
Move location of libjss4.so to subdirectory and use System.load() to
|
|
|
b93447 |
load it instead of System.loadLibrary() for Fedora packaging compliance
|
|
|
b93447 |
|
|
|
b93447 |
* Mon Nov 30 2009 Dennis Gregorovic <dgregor@redhat.com> - 4.2.6-4.1
|
|
|
b93447 |
- Rebuilt for RHEL 6
|
|
|
b93447 |
|
|
|
b93447 |
* Fri Jul 31 2009 Rob Crittenden <rcritten@redhat.com> 4.2.6-4
|
|
|
b93447 |
- Resolves: bug 224688 - <cfu@redhat.com>
|
|
|
b93447 |
Support ECC POP on the server
|
|
|
b93447 |
- Resolves: bug 469456 - <jmagne@redhat.com>
|
|
|
b93447 |
Server Sockets are hard coded to IPV4
|
|
|
b93447 |
- Resolves: bug 509183 - <mharmsen@redhat.com>
|
|
|
b93447 |
Set NSS dependency >= 3.12.3.99
|
|
|
b93447 |
|
|
|
b93447 |
* Fri Jul 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 4.2.6-3
|
|
|
b93447 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
|
|
|
b93447 |
|
|
|
b93447 |
* Fri Jun 5 2009 Rob Crittenden <rcritten@redhat.com> 4.2.6-2
|
|
|
b93447 |
- Include patch to fix missing @param so javadocs will build
|
|
|
b93447 |
|
|
|
b93447 |
* Fri Jun 5 2009 Rob Crittenden <rcritten@redhat.com> 4.2.6-1
|
|
|
b93447 |
- Resolves: bug 455305 - <cfu@redhat.com>
|
|
|
b93447 |
CA ECC Signing Key Failure
|
|
|
b93447 |
- Resolves: bug 502111 - <cfu@redhat.com>
|
|
|
b93447 |
Need JSS interface for NSS's PK11_GenerateKeyPairWithOpFlags() function
|
|
|
b93447 |
- Resolves: bug 503809 - <mharmsen@redhat.com>
|
|
|
b93447 |
Update JSS version to 4.2.6
|
|
|
b93447 |
- Resolves: bug 503817 - <mharmsen@redhat.com>
|
|
|
b93447 |
Create JSS Javadocs as their own RPM
|
|
|
b93447 |
|
|
|
b93447 |
* Wed Feb 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 4.2.5-4
|
|
|
b93447 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
|
|
|
b93447 |
|
|
|
b93447 |
* Tue Aug 5 2008 Tom "spot" Callaway <tcallawa@redhat.com> - 4.2.5-3
|
|
|
b93447 |
- fix license tag
|
|
|
b93447 |
|
|
|
b93447 |
* Tue Feb 19 2008 Fedora Release Engineering <rel-eng@fedoraproject.org> - 4.2.5-2
|
|
|
b93447 |
- Autorebuild for GCC 4.3
|
|
|
b93447 |
|
|
|
b93447 |
* Fri Aug 3 2007 Rob Crittenden <rcritten@redhat.com> 4.2.5-1
|
|
|
b93447 |
- update to 4.2.5
|
|
|
b93447 |
|
|
|
b93447 |
* Thu May 24 2007 Rob Crittenden <rcritten@redhat.com> 4.2.4-6
|
|
|
b93447 |
- Use _jnidir macro instead of _javadir for the jar files. This will break
|
|
|
b93447 |
multilib installs but adheres to the jpackage spec.
|
|
|
b93447 |
|
|
|
b93447 |
* Wed May 16 2007 Rob Crittenden <rcritten@redhat.com> 4.2.4-5
|
|
|
b93447 |
- Include the 3 license files
|
|
|
b93447 |
- Remove Requires for nss and nspr. These libraries have versioned symbols
|
|
|
b93447 |
so BuildRequires is enough to set the minimum.
|
|
|
b93447 |
- Add sparc64 for the 64-bit list
|
|
|
b93447 |
|
|
|
b93447 |
* Mon May 14 2007 Rob Crittenden <rcritten@redhat.com> 4.2.4-4
|
|
|
b93447 |
- Included additional comments on jar signing and why ldconfig is not
|
|
|
b93447 |
required.
|
|
|
b93447 |
|
|
|
b93447 |
* Thu May 10 2007 Rob Crittenden <rcritten@redhat.com> 4.2.4-3
|
|
|
b93447 |
- Added information on how to pull the source into a tar.gz
|
|
|
b93447 |
|
|
|
b93447 |
* Thu Mar 15 2007 Rob Crittenden <rcritten@redhat.com> 4.2.4-2
|
|
|
b93447 |
- Added RPM_OPT_FLAGS to XCFLAGS
|
|
|
b93447 |
- Added link to Sun JCE information
|
|
|
b93447 |
|
|
|
b93447 |
* Tue Feb 27 2007 Rob Crittenden <rcritten@redhat.com> 4.2.4-1
|
|
|
b93447 |
- Initial build
|