7b9d03
Name:     tomcatjss
1e3803
Version:  7.2.1
356aa5
#Release:  8%{?dist}
356aa5
Release:  8.el7_6
1e3803
Summary:  JSS Connector for Apache Tomcat, a JSSE module for Apache Tomcat that uses JSS
7b9d03
URL:      http://pki.fedoraproject.org/
7b9d03
License:  LGPLv2+
7b9d03
Group:    System Environment/Libraries
7b9d03
7b9d03
BuildArch:      noarch
7b9d03
BuildRoot:      %{_tmppath}/%{name}-%{version}-%{release}-buildroot
7b9d03
7b9d03
Source0:  http://pki.fedoraproject.org/pki/sources/%{name}/%{name}-%{version}.tar.gz
7b9d03
7b9d03
# jpackage-utils requires versioning to meet both build and runtime requirements
7b9d03
# jss requires versioning to meet both build and runtime requirements
7b9d03
# tomcat requires versioning to meet both build and runtime requirements
1e3803
Conflicts:        pki-base < 10.4.0
7b9d03
BuildRequires:    ant
4cd948
BuildRequires:    apache-commons-lang
7b9d03
BuildRequires:    java-devel
7b9d03
BuildRequires:    jpackage-utils >= 0:1.7.5-15
452a21
BuildRequires:    jss >= 4.4.4-3
cb89c4
%if 0%{?fedora} >= 23
cb89c4
BuildRequires:    tomcat >= 8.0.18
cb89c4
%else
6655a9
BuildRequires:    tomcat >= 7.0.68
cb89c4
%endif
7b9d03
4cd948
Requires:         apache-commons-lang
cb89c4
%if 0%{?fedora} >= 21
cb89c4
Requires:         java-headless
cb89c4
%else
7b9d03
Requires:         java
cb89c4
%endif
7b9d03
Requires:         jpackage-utils >= 0:1.7.5-15
452a21
Requires:         jss >= 4.4.4-3
cb89c4
%if 0%{?fedora} >= 23
cb89c4
Requires:         tomcat >= 8.0.18
cb89c4
%else
6655a9
Requires:         tomcat >= 7.0.68
cb89c4
%endif
93a344
1e3803
#######################
1e3803
## tomcatjss-7.2.1-3
1e3803
#######################
1e3803
Patch1:           tomcatjss-support-for-event-API.patch
1e3803
#######################
1e3803
## tomcatjss-7.2.1-4
1e3803
#######################
1e3803
Patch2:           tomcatjss-Fixed-SSL-cipher-list-parser.patch
1e3803
#######################
1e3803
## tomcatjss-7.2.1-5
1e3803
#######################
1e3803
Patch3:           tomcatjss-Comply-with-ASF-trademark-rules.patch
452a21
#######################
452a21
## tomcatjss-7.2.1-7
452a21
#######################
452a21
Patch4:           tomcatjss-add-TLS-SHA384-ciphers.patch
356aa5
#######################
356aa5
## tomcatjss-7.2.1-8
356aa5
#######################
356aa5
Patch5:           tomcatjss-enable-OCSP-from-peer-AIA-extension.patch
6655a9
7b9d03
# The 'tomcatjss' package conflicts with the 'tomcat-native' package
7b9d03
# because it uses an underlying NSS security model rather than the
7b9d03
# OpenSSL security model, so these two packages may not co-exist.
7b9d03
# (see Bugzilla Bug #441974 for details)
7b9d03
Conflicts:        tomcat-native
7b9d03
7b9d03
%if 0%{?rhel}
7b9d03
# For EPEL, override the '_sharedstatedir' macro on RHEL
7b9d03
%define           _sharedstatedir    /var/lib
7b9d03
%endif
7b9d03
7b9d03
%description
1e3803
JSS Connector for Apache Tomcat, installed via the tomcatjss package,
1e3803
is a Java Secure Socket Extension (JSSE) module for Apache Tomcat that
1e3803
uses Java Security Services (JSS), a Java interface to Network Security
1e3803
Services (NSS).
7b9d03
7b9d03
NOTE:  The 'tomcatjss' package conflicts with the 'tomcat-native' package
7b9d03
       because it uses an underlying NSS security model rather than the
7b9d03
       OpenSSL security model, so these two packages may not co-exist.
7b9d03
7b9d03
%prep
cb89c4
7b9d03
%setup -q
1e3803
%patch1 -p1
1e3803
%patch2 -p1
1e3803
%patch3 -p1
452a21
%patch4 -p1
356aa5
%patch5 -p1
cb89c4
chmod -c -x LICENSE README
7b9d03
7b9d03
%build
7b9d03
7b9d03
ant -f build.xml -Djnidir=%{_jnidir}
7b9d03
ant -f build.xml -Djnidir=%{_jnidir} dist
7b9d03
7b9d03
%install
7b9d03
rm -rf %{buildroot}
7b9d03
7b9d03
# Unpack the files we just built
7b9d03
cd dist/binary
7b9d03
unzip %{name}-%{version}.zip -d %{buildroot}
7b9d03
7b9d03
# Install our files
7b9d03
cd %{buildroot}%{_javadir}
cb89c4
%if 0%{?rhel} || 0%{?fedora} < 21
7b9d03
mv %{name}.jar %{name}-%{version}.jar
7b9d03
ln -s %{name}-%{version}.jar %{name}.jar
cb89c4
%endif
7b9d03
7b9d03
%clean
7b9d03
rm -rf %{buildroot}
7b9d03
7b9d03
%files
7b9d03
%defattr(-,root,root)
cb89c4
%doc README LICENSE
7b9d03
%{_javadir}/*
7b9d03
7b9d03
%changelog
356aa5
* Mon Oct 29 2018 Jack Magne <jmagne@redhat.com> 7.2.1-8
356aa5
- Bugzilla Bug #1632618 - CC: tomcatjss: unable to enable OCSP checking
356aa5
  from peer AIA extension [rhel-7.6.z] (jmagne)
356aa5
7c5f81
* Tue Sep 18 2018 Matthew Harmsen <mharmsen@redhat.com> 7.2.1-7.1
7c5f81
- Bumped Release number to support upgrades.
7c5f81
452a21
* Mon Jul  2 2018 Matthew Harmsen <mharmsen@redhat.com> 7.2.1-7
452a21
- Updated jss build and runtime dependencies
7c5f81
- Bugzilla Bug #1596769 - Tomcatjss: Add support for TLS_*_SHA384
7c5f81
  ciphers (cfu)
452a21
1e3803
* Mon Jun 12 2017 Matthew Harmsen <mharmsen@redhat.com> 7.2.1-6
1e3803
- Bugzilla Bug #1460040 - Comply with ASF trademark rules (mharmsen)
1e3803
1e3803
* Mon Jun 12 2017 Matthew Harmsen <mharmsen@redhat.com> 7.2.1-5
1e3803
- Bugzilla Bug #1460037 - Comply with ASF trademark rules (mharmsen)
1e3803
1e3803
* Mon Jun  5 2017 Endi Sukma Dewata <edewata@redhat.com> 7.2.1-4
1e3803
- Bugzilla Bug #1457524 - Problem parsing formatted cipher list (edewata)
1e3803
1e3803
* Mon Mar 27 2017 Matthew Harmsen <mharmsen@redhat.com> - 7.2.1-3
1e3803
- Bugzilla Bug #1394416 - Rebase tomcatjss to 7.2.x in RHEL 7.4 (mharmsen)
1e3803
- ## 'tomcatjss-support-for-event-API.patch' resolves the following issues
1e3803
  ## ported from upstream:
1e3803
- tomcatjss Pagure Issue #4 - Support for Event API (edewata)
1e3803
1e3803
* Tue Mar 21 2017 Matthew Harmsen <mharmsen@redhat.com> - 7.2.1-2
1e3803
- Added Conflicts statement due to incompatibility with pki-base < 10.4.0
1e3803
1e3803
* Tue Mar 14 2017 Matthew Harmsen <mharmsen@redhat.com> 7.2.1-1
1e3803
- Updated jss build and runtime dependencies
1e3803
- Bumped version due to corrupted tarball
1e3803
1e3803
* Mon Mar 13 2017 Matthew Harmsen <mharmsen@redhat.com> 7.2.0-2
1e3803
- Changed build so that it did not package and depend upon the specfile being
1e3803
  included inside the tarball
1e3803
1e3803
* Sun Mar 12 2017 Matthew Harmsen <mharmsen@redhat.com> 7.2.0-1
1e3803
- tomcatjss Pagure Issue #6 - Rebase tomcatjss to 7.2.0 in Fedora 25+ (mharmsen)
1e3803
- Bugzilla Bug #1394416 - Rebase tomcatjss to 7.2.0 in RHEL 7.4 (mharmsen)
1e3803
6655a9
* Wed Jun 29 2016 Christina Fu <cfu@redhat.com> 7.1.2-3
6655a9
- Bugzilla Bug #1203407 - missing ciphers (cfu)
6655a9
6655a9
* Wed Mar 16 2016 Endi Sukma Dewata <edewata@redhat.com> 7.1.2-2
6655a9
- Bugzilla Bug #1344804 - Build failure on RHEL 7.3
6655a9
  (patch for Bugzilla Bug #1245786 - Build failure on F23 was backported to
1e3803
   RHEL 7 to coincide with Apache Tomcat version change to 7.0.68+)
6655a9
cb89c4
* Wed Mar  4 2015 Endi Sukma Dewata <edewata@redhat.com> 7.1.2-1
1e3803
- Bugzilla Bug #1198450 - Support for Apache Tomcat 8
cb89c4
- Bugzilla Bug #1214858 - Add nuxwdog support (alee)
4cd948
cb89c4
* Tue Sep 30 2014 Christina Fu <cfu@redhat.com> 7.1.1-1
93a344
- Bugzilla Bug #1058366 NullPointerException in tomcatjss searching
93a344
  for attribute "clientauth" (cfu)
1e3803
- Bugzilla Bug #871171 - Provide Apache Tomcat support for TLS v1.1 and
93a344
  TLS v1.2 (cfu)
cb89c4
- Bumped revision to 7.1.1
cb89c4
cb89c4
* Sun Jun 08 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 7.1.0-6
cb89c4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
cb89c4
cb89c4
* Tue Mar 25 2014 Mikolaj Izdebski <mizdebsk@redhat.com> - 7.1.0-5
cb89c4
- Move to java-headless
cb89c4
- Resolves: rhbz#1068567
cb89c4
cb89c4
* Tue Jan 07 2014 Michael Simacek <msimacek@redhat.com> - 7.1.0-5
cb89c4
- Remove versioned symlink (rhbz#1022167)
93a344
cb89c4
* Fri Aug  2 2013 Ville Skyttä <ville.skytta@iki.fi> - 7.1.0-4
cb89c4
- Simplify installation of docs.
f445fa
7b9d03
* Thu Jun 13 2013 Matthew Harmsen <mharmsen@redhat.com> 7.1.0-3
7b9d03
- Updated tomcatjss to utilize tomcat-7.0.40.
7b9d03
- Updated JNIDIR to /usr/lib/java.
7b9d03
7b9d03
* Fri Feb 15 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 7.1.0-2
7b9d03
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
7b9d03
7b9d03
* Wed Dec 19 2012 Christina Fu <cfu@redhat.com> 7.1.0-1
7b9d03
- Bugzila Bug #819554 tomcatjss: Please migrate from tomcat6 to tomcat7
7b9d03
7b9d03
* Thu Aug  2 2012 Matthew Harmsen <mharmsen@redhat.com> 7.0.0-3
1e3803
- PKI TRAC Ticket #283 - Dogtag 10: Integrate Apache Tomcat 6 'tomcatjss.jar'
1e3803
  and Apache Tomcat 7 'tomcat7jss.jar' in Fedora 18 tomcatjss package
7b9d03
cb89c4
* Thu Jul 26 2012 Matthew Harmsen <mharmsen@redhat.com> 7.0.0-2
7b9d03
- Fixed runtime 'Requires' cut/paste typos
7b9d03
7b9d03
* Wed Jun 06 2012 Matthew Harmsen <mharmsen@redhat.com> 7.0.0-1
7b9d03
- Bugzilla Bug #819554 - tomcatjss: Please migrate from tomcat6 to tomcat7
7b9d03
7b9d03
* Thu Sep 22 2011 Matthew Harmsen <mharmsen@redhat.com> 6.0.2-1
7b9d03
- Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . . (mharmsen)
7b9d03
- Bugzilla Bug #699809 - Convert CS to use systemd (alee)
7b9d03
7b9d03
* Mon Sep 12 2011 Matthew Harmsen <mharmsen@redhat.com> 6.0.1-1
7b9d03
- Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
7b9d03
7b9d03
* Thu Jul 14 2011 Matthew Harmsen <mharmsen@redhat.com> - 6.0.0-1
7b9d03
- Bugzilla Bug #702716 - rhcs80 cannot do client auth with pkiconsole
7b9d03
  (ok with 7.3) (jmagne)
7b9d03
- Require "jss >= 4.2.6-17" as a build and runtime requirement
7b9d03
- Bump version 2.1.1 --> 6.0.0 (to better coincide with tomcat6)
7b9d03
7b9d03
* Fri Mar 25 2011 Matthew Harmsen <mharmsen@redhat.com> - 2.1.1-1
7b9d03
- Require "jss >= 4.2.6-15" as a build and runtime requirement
7b9d03
- Require "tomcat6 >= 6.0.30-6" as a build and runtime requirement
7b9d03
  for Fedora 15 and later platforms
7b9d03
7b9d03
* Wed Jan 12 2011 John Dennis <jdennis@redhat.com> - 2.1.0-1
7b9d03
- bump version to 2.1.0
7b9d03
  Bug #588323 - Failed to enable cipher 0xc001 (svn rev 105)
7b9d03
  Bug #634375 - Build tomcatjss against tomcat6 (svn rev 106)
7b9d03
  Bug #655915 - Disable socket timeouts when socket is first created. (svn rev 107)
7b9d03
7b9d03
* Tue Dec 14 2010 John Dennis <jdennis@redhat.com> 
7b9d03
- Updated 'tomcatjss' to utilize 'tomcat6'.