################################################################################

Name:           jss

################################################################################

%global         product_id idm-jss

# Upstream version number:

%global         major_version 5

%global         minor_version 3

%global         update_version 0

# Downstream release number:

# - development/stabilization (unsupported): 0.<n> where n >= 1

# - GA/update (supported): <n> where n >= 1

%global         release_number 1

# Development phase:

# - development (unsupported): alpha<n> where n >= 1

# - stabilization (unsupported): beta<n> where n >= 1

# - GA/update (supported): <none>

#global         phase

%undefine       timestamp

%undefine       commit_id

Summary:        Java Security Services (JSS)

URL:            https://github.com/dogtagpki/jss

License:        MPLv1.1 or GPLv2+ or LGPLv2+

Version:        %{major_version}.%{minor_version}.%{update_version}

Release:        %{release_number}%{?phase:.}%{?phase}%{?timestamp:.}%{?timestamp}%{?commit_id:.}%{?commit_id}%{?dist}

# To generate the source tarball:

# $ git clone https://github.com/dogtagpki/jss.git

# $ cd jss

# $ git tag v4.5.<z>

# $ git push origin v4.5.<z>

# Then go to https://github.com/dogtagpki/jss/releases and download the source

# tarball.

Source:         https://github.com/dogtagpki/jss/archive/v%{version}%{?phase:-}%{?phase}/jss-%{version}%{?phase:-}%{?phase}.tar.gz

# To create a patch for all changes since a version tag:

# $ git format-patch \

#     --stdout \

#     <version tag> \

#     > jss-VERSION-RELEASE.patch

# Patch: jss-VERSION-RELEASE.patch

%if 0%{?fedora} && 0%{?fedora} > 35

ExclusiveArch: %{java_arches}

%else

ExcludeArch: i686

%endif

################################################################################

# Java

################################################################################

%define java_devel java-17-openjdk-devel

%define java_headless java-17-openjdk-headless

%define java_home %{_jvmdir}/jre-17-openjdk

################################################################################

# Build Options

################################################################################

# By default the javadoc package will be built unless --without javadoc

# option is specified.

%bcond_without javadoc

# By default the build will not execute unit tests unless --with tests

# option is specified.

%bcond_with tests

################################################################################

# Build Dependencies

################################################################################

BuildRequires:  make

BuildRequires:  cmake >= 3.14

BuildRequires:  zip

BuildRequires:  unzip

BuildRequires:  gcc-c++

BuildRequires:  nss-devel >= 3.66

BuildRequires:  nss-tools >= 3.66

BuildRequires:  %{java_devel}

BuildRequires:  jpackage-utils

BuildRequires:  slf4j

BuildRequires:  slf4j-jdk14

BuildRequires:  apache-commons-lang3

BuildRequires:  junit

%description

Java Security Services (JSS) is a java native interface which provides a bridge

for java-based applications to use native Network Security Services (NSS).

This only works with gcj. Other JREs require that JCE providers be signed.

################################################################################

%package -n %{product_id}

################################################################################

Summary:        Java Security Services (JSS)

Requires:       nss >= 3.66

Requires:       %{java_headless}

Requires:       jpackage-utils

Requires:       slf4j

Requires:       slf4j-jdk14

Requires:       apache-commons-lang3

Obsoletes:      jss < %{version}-%{release}

Provides:       jss = %{version}-%{release}

Provides:       jss = %{major_version}.%{minor_version}

Provides:       %{product_id} = %{major_version}.%{minor_version}

Conflicts:      ldapjdk < 4.20

Conflicts:      idm-console-framework < 1.2

Conflicts:      tomcatjss < 7.6.0

Conflicts:      pki-base < 10.10.0

%description -n %{product_id}

Java Security Services (JSS) is a java native interface which provides a bridge

for java-based applications to use native Network Security Services (NSS).

This only works with gcj. Other JREs require that JCE providers be signed.

%if %{with javadoc}

################################################################################

%package -n %{product_id}-javadoc

################################################################################

Summary:        Java Security Services (JSS) Javadocs

Obsoletes:      jss-javadoc < %{version}-%{release}

Provides:       jss-javadoc = %{version}-%{release}

Provides:       jss-javadoc = %{major_version}.%{minor_version}

Provides:       %{product_id}-javadoc = %{major_version}.%{minor_version}

%description -n %{product_id}-javadoc

This package contains the API documentation for JSS.

%endif

################################################################################

%prep

################################################################################

%autosetup -n jss-%{version}%{?phase:-}%{?phase} -p 1

################################################################################

%build

################################################################################

# Set build flags for CMake

# (see /usr/lib/rpm/macros.d/macros.cmake)

%set_build_flags

export JAVA_HOME=%{java_home}

# Enable compiler optimizations

export BUILD_OPT=1

# Generate symbolic info for debuggers

CFLAGS="-g $RPM_OPT_FLAGS"

export CFLAGS

# Check if we're in FIPS mode

modutil -dbdir /etc/pki/nssdb -chkfips true | grep -q enabled && export FIPS_ENABLED=1

./build.sh \

    %{?_verbose:-v} \

    --work-dir=%{_vpath_builddir} \

    --prefix-dir=%{_prefix} \

    --include-dir=%{_includedir} \

    --lib-dir=%{_libdir} \

    --sysconf-dir=%{_sysconfdir} \

    --share-dir=%{_datadir} \

    --cmake=%{__cmake} \

    --java-home=%{java_home} \

    --jni-dir=%{_jnidir} \

    --version=%{version} \

    %{!?with_javadoc:--without-javadoc} \

    %{?with_tests:--with-tests} \

    dist

################################################################################

%install

################################################################################

./build.sh \

    %{?_verbose:-v} \

    --work-dir=%{_vpath_builddir} \

    --install-dir=%{buildroot} \

    install

################################################################################

%files -n %{product_id}

################################################################################

%defattr(-,root,root,-)

%doc jss.html

%license MPL-1.1.txt gpl.txt lgpl.txt symkey/LICENSE

%{_libdir}/*

%{_jnidir}/*

%if %{with javadoc}

################################################################################

%files -n %{product_id}-javadoc

################################################################################

%defattr(-,root,root,-)

%{_javadocdir}/jss/

%endif

################################################################################

%changelog

* Thu Feb 09 2023 Red Hat PKI Team <rhcs-maint@redhat.com> - 5.3.0-1

- Rebase to JSS 5.3.0

* Thu Jan 05 2023 Red Hat PKI Team <rhcs-maint@redhat.com> - 5.3.0-0.3.beta2

- Rebase to JSS 5.3.0-beta2

- Bug 2017098 - pki pkcs12-cert-add command failing with 'Unable to validate PKCS #12 file: Digests do not match' exception

* Wed Nov 30 2022 Red Hat PKI Team <rhcs-maint@redhat.com> - 5.3.0-0.2.beta1

- Rebase to JSS 5.3.0-beta1

* Fri Sep 02 2022 Red Hat PKI Team <rhcs-maint@redhat.com> - 5.2.1-1

- Rebase to JSS 5.2.1

- Bug 2100807 - pki-tomcat/kra unable to decrypt when using RSA-OAEP padding in RHEL9 with FIPS enabled

* Wed Jun 29 2022 Red Hat PKI Team <rhcs-maint@redhat.com> - 5.2.0-1

- Rebase to JSS 5.2.0

* Mon May 02 2022 Red Hat PKI Team <rhcs-maint@redhat.com> - 5.2.0-0.3.beta2

- Rebase to JSS 5.2.0-beta2

- Rename packages to idm-jss

* Wed Apr 13 2022 Red Hat PKI Team <rhcs-maint@redhat.com> - 5.2.0-0.2.beta1

- Rebase to JSS 5.2.0-beta1

* Tue Feb 15 2022 Red Hat PKI Team <rhcs-maint@redhat.com> - 5.0.3-1

- Rebase to JSS 5.0.3

- Bug 2046023 - CVE-2021-4213 jss: memory leak in TLS connection leads to OOM [rhel-9.0]

* Wed Feb 02 2022 Red Hat PKI Team <rhcs-maint@redhat.com> - 5.0.2-1

- Rebase to JSS 5.0.2

- Bug 2029838 - SHA1withRSA being listed in signing certificates while approving certificate via Agent page in browser

* Fri Nov 19 2021 Red Hat PKI Team <rhcs-maint@redhat.com> - 5.0.1-1

- Rebase to JSS 5.0.1

* Tue Oct 05 2021 Red Hat PKI Team <rhcs-maint@redhat.com> - 5.0.0-1

- Rebase to JSS 5.0.0

* Thu Sep 16 2021 Red Hat PKI Team <rhcs-maint@redhat.com> - 5.0.0-0.5.beta1

- Rebase to JSS 5.0.0-beta1

* Thu Sep 09 2021 Red Hat PKI Team <rhcs-maint@redhat.com> - 5.0.0-0.4.alpha1

- Drop BuildRequires and Requires on glassfish-jaxb-api

  Resolves #2002576

* Mon Aug 09 2021 Mohan Boddu <mboddu@redhat.com> - 5.0.0-0.3.alpha1

- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags

  Related: rhbz#1991688

* Mon Aug  2 2021 Red Hat PKI Team <rhcs-maint@redhat.com> - 5.0.0-0.2

- Drop javadoc package

* Fri Jun 25 2021 Red Hat PKI Team <rhcs-maint@redhat.com> - 5.0.0-0.1

- Rebase to JSS 5.0.0-alpha1