diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..ef835ca --- /dev/null +++ b/.gitignore @@ -0,0 +1 @@ +SOURCES/Mozilla-CA-20200520.tar.gz diff --git a/.perl-Mozilla-CA.metadata b/.perl-Mozilla-CA.metadata new file mode 100644 index 0000000..224f0c1 --- /dev/null +++ b/.perl-Mozilla-CA.metadata @@ -0,0 +1 @@ +74f34d452b328338d0b28256a960ea22e1bad774 SOURCES/Mozilla-CA-20200520.tar.gz diff --git a/SOURCES/Mozilla-CA-20200520-Redirect-to-ca-certificates-bundle.patch b/SOURCES/Mozilla-CA-20200520-Redirect-to-ca-certificates-bundle.patch new file mode 100644 index 0000000..acddc04 --- /dev/null +++ b/SOURCES/Mozilla-CA-20200520-Redirect-to-ca-certificates-bundle.patch @@ -0,0 +1,73 @@ +From ab01996d4d539cada0013b837b782f27db6b96ff Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Petr=20P=C3=ADsa=C5=99?= +Date: Fri, 16 Sep 2011 10:33:54 +0200 +Subject: [PATCH] Redirect to ca-certificates bundle +MIME-Version: 1.0 +Content-Type: text/plain; charset=UTF-8 +Content-Transfer-Encoding: 8bit + +This patch replaces Mozilla-CA certificate bundle with a bundle +delivered by ca-certificates RPM package used as a single source of +the Mozilla certificate bundle. + +See for more +details. + +Signed-off-by: Petr Písař +--- + MANIFEST | 1 - + Makefile.PL | 8 ++++++++ + lib/Mozilla/CA.pm | 8 +------- + 3 files changed, 9 insertions(+), 8 deletions(-) + +diff --git a/MANIFEST b/MANIFEST +index a88847b..6577ede 100644 +--- a/MANIFEST ++++ b/MANIFEST +@@ -1,5 +1,4 @@ + lib/Mozilla/CA.pm +-lib/Mozilla/CA/cacert.pem + Makefile.PL + MANIFEST This list of files + README +diff --git a/Makefile.PL b/Makefile.PL +index 9faf720..a491813 100644 +--- a/Makefile.PL ++++ b/Makefile.PL +@@ -40,3 +40,11 @@ BEGIN { + ExtUtils::MakeMaker::WriteMakefile(%arg); + }; + } ++ ++package MY; ++sub MY::libscan { ++ my $name = shift->SUPER::libscan(@_); ++ # Remove private certificate bundle ++ if ($name =~ /cacert.pem\z/) { $name = '' }; ++ return $name; ++} +diff --git a/lib/Mozilla/CA.pm b/lib/Mozilla/CA.pm +index e4a6c56..fdb3c75 100644 +--- a/lib/Mozilla/CA.pm ++++ b/lib/Mozilla/CA.pm +@@ -3,16 +3,10 @@ package Mozilla::CA; + use strict; + our $VERSION = '20200520'; + +-use Cwd (); + use File::Spec (); +-use File::Basename qw(dirname); + + sub SSL_ca_file { +- my $file = File::Spec->catfile(dirname(__FILE__), "CA", "cacert.pem"); +- if (!File::Spec->file_name_is_absolute($file)) { +- $file = File::Spec->catfile(Cwd::cwd(), $file); +- } +- return $file; ++ return File::Spec->catfile('/etc/pki/tls/certs/ca-bundle.crt'); + } + + 1; +-- +2.25.4 + diff --git a/SPECS/perl-Mozilla-CA.spec b/SPECS/perl-Mozilla-CA.spec new file mode 100644 index 0000000..dec88fc --- /dev/null +++ b/SPECS/perl-Mozilla-CA.spec @@ -0,0 +1,202 @@ +Name: perl-Mozilla-CA +# You do not need to back-port a new version for updating a list of the +# certificates. They are taken from ca-certificates package instead +# per bug #738383. +Version: 20200520 +Release: 6%{?dist} +Summary: Mozilla's CA certificate bundle in PEM format +# README: MPLv2.0 +## Unbundled +# mk-ca-bundle.pl: MIT +# lib/Mozilla/CA/cacert.pem: MPLv2.0 +License: MPLv2.0 +URL: https://metacpan.org/release/Mozilla-CA +Source0: https://cpan.metacpan.org/authors/id/A/AB/ABH/Mozilla-CA-%{version}.tar.gz +# Use a CA bundle from ca-certificates package, bug #738383 +Patch0: Mozilla-CA-20200520-Redirect-to-ca-certificates-bundle.patch +BuildArch: noarch +BuildRequires: coreutils +BuildRequires: make +BuildRequires: perl-interpreter +BuildRequires: perl-generators +BuildRequires: perl(ExtUtils::MakeMaker) >= 6.76 +# Run-time: +BuildRequires: ca-certificates +BuildRequires: perl(strict) +BuildRequires: perl(File::Spec) +# Tests: +BuildRequires: perl(Test) +Requires: perl(:MODULE_COMPAT_%(eval "`perl -V:version`"; echo $version)) +Requires: ca-certificates + +%description +Mozilla::CA provides a path to ca-certificates copy of Mozilla's bundle of +certificate authority certificates in a form that can be consumed by modules +and libraries based on OpenSSL. + +%prep +%setup -q -n Mozilla-CA-%{version} +%patch0 -p1 +# Remove a bundled CA bundle for sure +rm lib/Mozilla/CA/cacert.pem +# Do not distribute Mozilla downloader, we take certificates from +# ca-certificates package +rm mk-ca-bundle.pl +perl -i -ne 'print $_ unless m{^mk-ca-bundle\.pl$}' MANIFEST + +%build +perl Makefile.PL INSTALLDIRS=vendor NO_PACKLIST=1 NO_PERLLOCAL=1 +%{make_build} + +%install +%{make_install} +%{_fixperms} $RPM_BUILD_ROOT/* + +%check +make test + +%files +%doc Changes README +%{perl_vendorlib}/* +%{_mandir}/man3/* + +%changelog +* Mon Aug 09 2021 Mohan Boddu - 20200520-6 +- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags + Related: rhbz#1991688 + +* Fri Apr 16 2021 Mohan Boddu - 20200520-5 +- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 + +* Wed Jan 27 2021 Fedora Release Engineering - 20200520-4 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild + +* Tue Jul 28 2020 Fedora Release Engineering - 20200520-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild + +* Mon Jun 22 2020 Jitka Plesnikova - 20200520-2 +- Perl 5.32 rebuild + +* Wed May 20 2020 Petr Pisar - 20200520-1 +- 20200520 bump + +* Thu Jan 30 2020 Fedora Release Engineering - 20180117-7 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild + +* Fri Jul 26 2019 Fedora Release Engineering - 20180117-6 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild + +* Thu May 30 2019 Jitka Plesnikova - 20180117-5 +- Perl 5.30 rebuild + +* Fri Feb 01 2019 Fedora Release Engineering - 20180117-4 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild + +* Fri Jul 13 2018 Fedora Release Engineering - 20180117-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild + +* Wed Jun 27 2018 Jitka Plesnikova - 20180117-2 +- Perl 5.28 rebuild + +* Fri Mar 02 2018 Petr Pisar - 20180117-1 +- 20180117 bump + +* Thu Feb 08 2018 Fedora Release Engineering - 20160104-7 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild + +* Thu Jul 27 2017 Fedora Release Engineering - 20160104-6 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild + +* Sun Jun 04 2017 Jitka Plesnikova - 20160104-5 +- Perl 5.26 rebuild + +* Sat Feb 11 2017 Fedora Release Engineering - 20160104-4 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild + +* Sun May 15 2016 Jitka Plesnikova - 20160104-3 +- Perl 5.24 rebuild + +* Thu Feb 04 2016 Fedora Release Engineering - 20160104-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild + +* Tue Jan 05 2016 Petr Pisar - 20160104-1 +- 20160104 bump + +* Wed Aug 26 2015 Petr Pisar - 20150826-1 +- 20150826 bump +- License changed from (MPLv1.1 or LGPLv2+ or GPLv2+) to (MPLv2.0) + +* Thu Jun 18 2015 Fedora Release Engineering - 20141217-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild + +* Wed Jun 03 2015 Jitka Plesnikova - 20141217-2 +- Perl 5.22 rebuild + +* Fri Jan 02 2015 Petr Pisar - 20141217-1 +- 20141217 bump + +* Wed Aug 27 2014 Jitka Plesnikova - 20130114-7 +- Perl 5.20 rebuild + +* Sat Jun 07 2014 Fedora Release Engineering - 20130114-6 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild + +* Thu Jan 16 2014 Petr Pisar - 20130114-5 +- Specify all dependencies + +* Sat Aug 03 2013 Fedora Release Engineering - 20130114-4 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild + +* Wed Jul 17 2013 Petr Pisar - 20130114-3 +- Perl 5.18 rebuild + +* Thu Feb 14 2013 Fedora Release Engineering - 20130114-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild + +* Tue Jan 15 2013 Petr Pisar - 20130114-1 +- 20130114 bump + +* Thu Aug 23 2012 Petr Pisar - 20120823-1 +- 20120823 bump + +* Wed Aug 22 2012 Petr Pisar - 20120822-1 +- 20120822 bump + +* Fri Jul 20 2012 Fedora Release Engineering - 20120309-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild + +* Fri Jun 08 2012 Petr Pisar - 20120309-2 +- Perl 5.16 rebuild + +* Wed Mar 14 2012 Petr Pisar - 20120309-1 +- 20120309 bump + +* Wed Jan 18 2012 Petr Pisar - 20120118-1 +- 20120118 bump + +* Fri Jan 13 2012 Fedora Release Engineering - 20111025-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild + +* Tue Oct 25 2011 Petr Pisar - 20111025-1 +- 20111025 bump +- Remove defattr from spec code + +* Fri Sep 16 2011 Petr Pisar - 20110914-2 +- Redirect to ca-certificates bundle (bug #738383) + +* Thu Sep 15 2011 Petr Pisar - 20110914-1 +- 20110914 bump + +* Mon Sep 05 2011 Petr Pisar - 20110904-1 +- 20110904 bump + +* Fri Jun 17 2011 Marcela Mašláňová - 20110409-2 +- Perl mass rebuild + +* Mon Apr 11 2011 Petr Pisar - 20110409-1 +- 20110409 bump + +* Mon Mar 28 2011 Petr Pisar 20110301-1 +- Specfile autogenerated by cpanspec 1.78. +- Correct License tag +- Remove BuildRoot stuff