dd8e7b
Summary: Library providing support for "XML Signature" and "XML Encryption" standards
dd8e7b
Name: xmlsec1
dd8e7b
Version: 1.2.20
dd8e7b
Release: 7%{?dist}%{?extra_release}
dd8e7b
License: MIT
dd8e7b
Group: System Environment/Libraries
dd8e7b
Source0: http://www.aleksey.com/xmlsec/download/xmlsec1-%{version}.tar.gz
dd8e7b
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root
dd8e7b
URL: http://www.aleksey.com/xmlsec/
dd8e7b
BuildRequires: libxml2-devel >= 2.6.0
dd8e7b
BuildRequires: libxslt-devel >= 1.1.0
dd8e7b
BuildRequires: openssl-devel >= 0.9.6
dd8e7b
BuildRequires: libgcrypt-devel >= 1.2.0
dd8e7b
BuildRequires: gnutls-devel >= 1.0.20
dd8e7b
BuildRequires: nss-devel >= 3.2
dd8e7b
BuildRequires: nspr-devel
dd8e7b
BuildRequires: libtool-ltdl-devel
dd8e7b
dd8e7b
# extra build deps needed for autoreconf after Patch1
dd8e7b
BuildRequires: autoconf
dd8e7b
BuildRequires: automake
dd8e7b
BuildRequires: gettext-devel
dd8e7b
BuildRequires: libtool
dd8e7b
dd8e7b
Patch3: xmlsec1-1.2.20-covscan-fixes.patch
dd8e7b
Patch10: CVE-2017-1000061.patch
dd8e7b
dd8e7b
%description
dd8e7b
XML Security Library is a C library based on LibXML2  and OpenSSL.
dd8e7b
The library was created with a goal to support major XML security
dd8e7b
standards "XML Digital Signature" and "XML Encryption".
dd8e7b
dd8e7b
%package devel
dd8e7b
Summary: Libraries, includes, etc. to develop applications with XML Digital Signatures and XML Encryption support.
dd8e7b
Group: Development/Libraries
dd8e7b
Requires: xmlsec1%{?_isa} = %{version}-%{release}
dd8e7b
Requires: libxml2-devel%{?_isa} >= 2.6.0
dd8e7b
Requires: libxslt-devel%{?_isa} >= 1.1.0
dd8e7b
Requires: openssl-devel%{?_isa} >= 0.9.6
dd8e7b
Requires: zlib-devel%{?_isa}
dd8e7b
# pkgconfig deps are automatic in Fedora and EL>=6
dd8e7b
%if 0%{?rhel} == 5
dd8e7b
Requires: pkgconfig
dd8e7b
%endif
dd8e7b
dd8e7b
%description devel
dd8e7b
Libraries, includes, etc. you can use to develop applications with XML Digital
dd8e7b
Signatures and XML Encryption support.
dd8e7b
dd8e7b
%package openssl
dd8e7b
Summary: OpenSSL crypto plugin for XML Security Library
dd8e7b
Group: Development/Libraries
dd8e7b
Requires: xmlsec1%{?_isa} = %{version}-%{release}
dd8e7b
dd8e7b
%description openssl
dd8e7b
OpenSSL plugin for XML Security Library provides OpenSSL based crypto services
dd8e7b
for the xmlsec library.
dd8e7b
dd8e7b
%package openssl-devel
dd8e7b
Summary: OpenSSL crypto plugin for XML Security Library
dd8e7b
Group: Development/Libraries
dd8e7b
Requires: xmlsec1-devel%{?_isa} = %{version}-%{release}
dd8e7b
Requires: xmlsec1-openssl%{?_isa} = %{version}-%{release}
dd8e7b
dd8e7b
%description openssl-devel
dd8e7b
Libraries, includes, etc. for developing XML Security applications with OpenSSL
dd8e7b
dd8e7b
%package gcrypt
dd8e7b
Summary: GCrypt crypto plugin for XML Security Library
dd8e7b
Group: Development/Libraries
dd8e7b
Requires: xmlsec1%{?_isa} = %{version}-%{release}
dd8e7b
dd8e7b
%description gcrypt
dd8e7b
GCrypt plugin for XML Security Library provides GCrypt based crypto services
dd8e7b
for the xmlsec library.
dd8e7b
dd8e7b
%package gcrypt-devel
dd8e7b
Summary: GCrypt crypto plugin for XML Security Library
dd8e7b
Group: Development/Libraries
dd8e7b
Requires: xmlsec1-devel%{?_isa} = %{version}-%{release}
dd8e7b
Requires: xmlsec1-gnutls-devel%{?_isa} = %{version}-%{release}
dd8e7b
dd8e7b
%description gcrypt-devel
dd8e7b
Libraries, includes, etc. for developing XML Security applications with GCrypt.
dd8e7b
dd8e7b
%package gnutls
dd8e7b
Summary: GNUTls crypto plugin for XML Security Library
dd8e7b
Group: Development/Libraries
dd8e7b
Requires: xmlsec1%{?_isa} = %{version}-%{release}
dd8e7b
Requires: xmlsec1-gcrypt%{?_isa} = %{version}-%{release}
dd8e7b
dd8e7b
%description gnutls
dd8e7b
GNUTls plugin for XML Security Library provides GNUTls based crypto services
dd8e7b
for the xmlsec library.
dd8e7b
dd8e7b
%package gnutls-devel
dd8e7b
Summary: GNUTls crypto plugin for XML Security Library
dd8e7b
Group: Development/Libraries
dd8e7b
Requires: xmlsec1-devel%{?_isa} = %{version}-%{release}
dd8e7b
Requires: xmlsec1-openssl-devel%{?_isa} = %{version}-%{release}
dd8e7b
Requires: libgcrypt-devel%{?_isa} >= 1.2.0
dd8e7b
Requires: gnutls-devel%{?_isa} >= 1.0.20
dd8e7b
dd8e7b
%description gnutls-devel
dd8e7b
Libraries, includes, etc. for developing XML Security applications with GNUTls.
dd8e7b
dd8e7b
%package nss
dd8e7b
Summary: NSS crypto plugin for XML Security Library
dd8e7b
Group: Development/Libraries
dd8e7b
Requires: xmlsec1%{?_isa} = %{version}-%{release}
dd8e7b
dd8e7b
%description nss
dd8e7b
NSS plugin for XML Security Library provides NSS based crypto services
dd8e7b
for the xmlsec library
dd8e7b
dd8e7b
%package nss-devel
dd8e7b
Summary: NSS crypto plugin for XML Security Library
dd8e7b
Group: Development/Libraries
dd8e7b
Requires: xmlsec1-devel%{?_isa} = %{version}-%{release}
dd8e7b
Requires: xmlsec1-nss%{?_isa} = %{version}-%{release}
dd8e7b
Requires: nss-devel%{?_isa} >= 3.2
dd8e7b
Requires: nspr-devel%{?_isa}
dd8e7b
dd8e7b
%description nss-devel
dd8e7b
Libraries, includes, etc. for developing XML Security applications with NSS.
dd8e7b
dd8e7b
%prep
dd8e7b
%setup -q
dd8e7b
%patch3 -p1 -b .covscan
dd8e7b
%patch10 -p1 -b .CVE-2017-1000061
dd8e7b
dd8e7b
%build
dd8e7b
autoreconf -if
dd8e7b
%configure --disable-static
dd8e7b
sed -i 's|^hardcode_libdir_flag_spec=.*|hardcode_libdir_flag_spec=""|g' libtool
dd8e7b
sed -i 's|^runpath_var=LD_RUN_PATH|runpath_var=DIE_RPATH_DIE|g' libtool
dd8e7b
V=1 make
dd8e7b
dd8e7b
# positively ugly but only sane way to get around #192756
dd8e7b
sed 's+/lib64+/$archlib+g' < xmlsec1-config | sed 's+/lib+/$archlib+g' | sed 's+ -DXMLSEC_NO_SIZE_T++' > xmlsec1-config.$$ && mv xmlsec1-config.$$ xmlsec1-config
dd8e7b
dd8e7b
%check
dd8e7b
make check
dd8e7b
dd8e7b
%install
dd8e7b
rm -rf $RPM_BUILD_ROOT
dd8e7b
mkdir -p $RPM_BUILD_ROOT/usr/bin
dd8e7b
mkdir -p $RPM_BUILD_ROOT/usr/include/xmlsec1
dd8e7b
mkdir -p $RPM_BUILD_ROOT%{_libdir}
dd8e7b
mkdir -p $RPM_BUILD_ROOT/usr/man/man1
dd8e7b
dd8e7b
make DESTDIR=$RPM_BUILD_ROOT install
dd8e7b
rm -f $RPM_BUILD_ROOT%{_libdir}/*.la
dd8e7b
dd8e7b
# move installed docs to include them in -devel package via %%doc magic
dd8e7b
rm -rf __tmp_doc ; mkdir __tmp_doc
dd8e7b
mv ${RPM_BUILD_ROOT}%{_docdir}/xmlsec1/* __tmp_doc
dd8e7b
dd8e7b
%clean
dd8e7b
rm -fr ${RPM_BUILD_ROOT}
dd8e7b
dd8e7b
%post -p /sbin/ldconfig
dd8e7b
%postun -p /sbin/ldconfig
dd8e7b
dd8e7b
%post gnutls -p /sbin/ldconfig
dd8e7b
%postun gnutls -p /sbin/ldconfig
dd8e7b
dd8e7b
%post openssl -p /sbin/ldconfig
dd8e7b
%postun openssl -p /sbin/ldconfig
dd8e7b
dd8e7b
%files
dd8e7b
%doc AUTHORS ChangeLog NEWS README Copyright
dd8e7b
%{_mandir}/man1/xmlsec1.1*
dd8e7b
%{_libdir}/libxmlsec1.so.*
dd8e7b
%{_bindir}/xmlsec1
dd8e7b
dd8e7b
%files devel
dd8e7b
%{_bindir}/xmlsec1-config
dd8e7b
%dir %{_includedir}/xmlsec1
dd8e7b
%dir %{_includedir}/xmlsec1/xmlsec
dd8e7b
%dir %{_includedir}/xmlsec1/xmlsec/private
dd8e7b
%{_includedir}/xmlsec1/xmlsec/*.h
dd8e7b
%{_includedir}/xmlsec1/xmlsec/private/*.h
dd8e7b
%{_libdir}/libxmlsec1.so
dd8e7b
%{_libdir}/pkgconfig/xmlsec1.pc
dd8e7b
%{_libdir}/xmlsec1Conf.sh
dd8e7b
%{_datadir}/aclocal/xmlsec1.m4
dd8e7b
%{_mandir}/man1/xmlsec1-config.1*
dd8e7b
%doc HACKING __tmp_doc/*
dd8e7b
dd8e7b
%files openssl
dd8e7b
%{_libdir}/libxmlsec1-openssl.so.*
dd8e7b
%{_libdir}/libxmlsec1-openssl.so
dd8e7b
dd8e7b
%files openssl-devel
dd8e7b
%{_includedir}/xmlsec1/xmlsec/openssl/
dd8e7b
%{_libdir}/pkgconfig/xmlsec1-openssl.pc
dd8e7b
dd8e7b
%files gcrypt
dd8e7b
%{_libdir}/libxmlsec1-gcrypt.so.*
dd8e7b
%{_libdir}/libxmlsec1-gcrypt.so
dd8e7b
dd8e7b
%files gcrypt-devel
dd8e7b
%{_includedir}/xmlsec1/xmlsec/gcrypt/
dd8e7b
%{_libdir}/pkgconfig/xmlsec1-gcrypt.pc
dd8e7b
dd8e7b
%files gnutls
dd8e7b
%{_libdir}/libxmlsec1-gnutls.so.*
dd8e7b
%{_libdir}/libxmlsec1-gnutls.so
dd8e7b
dd8e7b
%files gnutls-devel
dd8e7b
%{_includedir}/xmlsec1/xmlsec/gnutls/
dd8e7b
%{_libdir}/pkgconfig/xmlsec1-gnutls.pc
dd8e7b
dd8e7b
%files nss
dd8e7b
%{_libdir}/libxmlsec1-nss.so.*
dd8e7b
%{_libdir}/libxmlsec1-nss.so
dd8e7b
dd8e7b
%files nss-devel
dd8e7b
%{_includedir}/xmlsec1/xmlsec/nss/
dd8e7b
%{_libdir}/pkgconfig/xmlsec1-nss.pc
dd8e7b
dd8e7b
%changelog
dd8e7b
* Wed Aug  9 2017 Simo Sorce <simo@redhat.com> - 1.2.20-7
dd8e7b
- CVE-2017-1000061
dd8e7b
- Related: #1472092
dd8e7b
- Fix mis-applied patch hunk
dd8e7b
dd8e7b
* Tue Jul 18 2017 Simo Sorce <simo@redhat.com> - 1.2.20-6
dd8e7b
- CVE-2017-1000061
dd8e7b
- Resolves: #1472092
dd8e7b
dd8e7b
* Fri Sep  5 2014 Simo Sorce <simo@redhat.com> - 1.2.20-5
dd8e7b
- Add package to RHEL7
dd8e7b
- Resolves: #1118038
dd8e7b
dd8e7b
* Thu Jun  5 2014 Simo Sorce <simo@redhat.com> - 1.2.20-4
dd8e7b
- Add fixes from upstream
dd8e7b
- These were sent by us after covscan checks revelead errors
dd8e7b
dd8e7b
* Tue Jun  3 2014 Simo Sorce <simo@redhat.com> - 1.2.20-3
dd8e7b
- Make RPMDiff happy by adding a strict require on subpackage
dd8e7b
dd8e7b
* Wed May 28 2014 Simo Sorce <simo@redhat.com> - 1.2.20-2
dd8e7b
- Update pkg-config fix patch to apply w/o fuzz
dd8e7b
dd8e7b
* Wed May 28 2014 Simo Sorce <simo@redhat.com> - 1.2.20-1
dd8e7b
- New upstrema version with memleaks, crl checks and other fixes
dd8e7b
- enable make check during build
dd8e7b
- drop ecdsa patch as it has been included upstream
dd8e7b
dd8e7b
* Fri May 23 2014 Simo Sorce <simo@redhat.com> - 1.2.19-6
dd8e7b
- Fix incomplete patch
dd8e7b
dd8e7b
* Fri May 23 2014 Simo Sorce <simo@redhat.com> - 1.2.19-5
dd8e7b
- Add patch to deal with different behavior of pkg-config in RHEL6
dd8e7b
dd8e7b
* Thu Apr 24 2014 Tomáš Mráz <tmraz@redhat.com> - 1.2.19-4
dd8e7b
- Rebuild for new libgcrypt
dd8e7b
dd8e7b
* Fri Dec 13 2013 Michael Schwendt <mschwendt@fedoraproject.org> - 1.2.19-3
dd8e7b
- Fix duplicate documentation (#1001250)
dd8e7b
- Turn on verbose build output via V=1 make
dd8e7b
- Use %%?_isa in explicit package deps
dd8e7b
- Fix base package Group tag to "System Environment/Libraries"
dd8e7b
- Remove %%defattr
dd8e7b
dd8e7b
* Sun Aug 04 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.19-2
dd8e7b
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
dd8e7b
dd8e7b
* Mon Mar 25 2013 Daniel Veillard <veillard@redhat.com> - 1.2.19-1
dd8e7b
- Update to upstream release 1.2.19
dd8e7b
dd8e7b
* Fri Feb 15 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.18-4
dd8e7b
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
dd8e7b
dd8e7b
* Sun Jul 22 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.18-3
dd8e7b
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
dd8e7b
dd8e7b
* Sat Jan 14 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.18-2
dd8e7b
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
dd8e7b
dd8e7b
* Thu May 12 2011 Daniel Veillard <veillard@redhat.com> - 1.2.18-1
dd8e7b
- Update to upstream release 1.2.18
dd8e7b
dd8e7b
* Mon Apr 11 2011 Daniel Veillard <veillard@redhat.com> - 1.2.17-1
dd8e7b
- Update to upstream release 1.2.17
dd8e7b
- fixes CVE-2011-1425 on xslt file creation
dd8e7b
dd8e7b
* Tue Mar 22 2011 Daniel Veillard <veillard@redhat.com> - 1.2.16-4
dd8e7b
- Fix missing links to unversioned shared library files 541599
dd8e7b
dd8e7b
* Mon Feb 07 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.16-3
dd8e7b
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
dd8e7b
dd8e7b
* Wed Jun  2 2010 Tom "spot" Callaway <tcallawa@redhat.com> - 1.2.16-2
dd8e7b
- add missing BuildRequires: libtool-ltdl-devel
dd8e7b
dd8e7b
* Wed Jun  2 2010 Tom "spot" Callaway <tcallawa@redhat.com> - 1.2.16-1
dd8e7b
- update to 1.2.16
dd8e7b
- cleanup spec file
dd8e7b
- disable static libs
dd8e7b
- disable rpath
dd8e7b
- enable gcrypt subpackage
dd8e7b
dd8e7b
* Wed Aug 26 2009 Tomas Mraz <tmraz@redhat.com> - 1.2.12-2
dd8e7b
- rebuilt with new openssl
dd8e7b
dd8e7b
* Tue Aug 11 2009 Daniel Veillard <veillard@redhat.com> - 1.2.12-1
dd8e7b
- update to new upstream release 1.2.12
dd8e7b
- includes fix for CVE-2009-0217
dd8e7b
- cleanup spec file
dd8e7b
dd8e7b
* Mon Jul 27 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.11-4
dd8e7b
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
dd8e7b
dd8e7b
* Thu Feb 26 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.11-3
dd8e7b
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
dd8e7b
dd8e7b
* Sun Jan 18 2009 Tomas Mraz <tmraz@redhat.com> - 1.2.11-2
dd8e7b
- rebuild with new openssl
dd8e7b
dd8e7b
* Fri Jul 11 2008 Daniel Veillard <veillard@redhat.com> - 1.2.11-1
dd8e7b
- update to new upstream release 1.2.11
dd8e7b
- rebuild for gnutls update
dd8e7b
dd8e7b
* Wed Feb 20 2008 Fedora Release Engineering <rel-eng@fedoraproject.org> - 1.2.9-10.1
dd8e7b
- Autorebuild for GCC 4.3
dd8e7b
dd8e7b
* Wed Dec 05 2007 Release Engineering <rel-eng at fedoraproject dot org> - 1.2.9-9
dd8e7b
 - Rebuild for deps
dd8e7b
dd8e7b
* Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 1.2.9-8.1
dd8e7b
- rebuild
dd8e7b
dd8e7b
* Wed Jun 14 2006 Tomas Mraz <tmraz@redhat.com> - 1.2.9-8
dd8e7b
- rebuilt with new gnutls
dd8e7b
dd8e7b
* Thu Jun  8 2006 Daniel Veillard <veillard@redhat.com> - 1.2.9-7
dd8e7b
- oops libxmlsec1.la was still there, should fix #171410 and #154142
dd8e7b
dd8e7b
* Thu Jun  8 2006 Daniel Veillard <veillard@redhat.com> - 1.2.9-6
dd8e7b
- Ugly patch and sed based changes to work around #192756 xmlsec1-config
dd8e7b
  multilib problem
dd8e7b
dd8e7b
* Wed Jun  7 2006 Jeremy Katz <katzj@redhat.com> - 1.2.9-5
dd8e7b
- move .so symlinks to -devel subpackage
dd8e7b
dd8e7b
* Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 1.2.9-4.2
dd8e7b
- bump again for double-long bug on ppc(64)
dd8e7b
dd8e7b
* Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 1.2.9-4.1
dd8e7b
- rebuilt for new gcc4.1 snapshot and glibc changes
dd8e7b
dd8e7b
* Thu Dec 15 2005 Christopher Aillon <caillon@redhat.com> 1.2.9-4
dd8e7b
- NSS has been split out of the mozilla package, so require that now
dd8e7b
  and update separate_nspr.patch to account for the new NSS as well
dd8e7b
dd8e7b
* Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com>
dd8e7b
- rebuilt
dd8e7b
dd8e7b
* Wed Nov 23 2005 Tomas Mraz <tmraz@redhat.com> 1.2.9-3
dd8e7b
- rebuilt due to gnutls library revision
dd8e7b
* Wed Nov  9 2005 <veillard@redhat.com> 1.2.9-2
dd8e7b
- rebuilt due to openssl library revision
dd8e7b
* Tue Sep 20 2005 <veillard@redhat.com> 1.2.9-1
dd8e7b
- update from upstream, release done in July
dd8e7b
- apparently nss is now available on ppc64
dd8e7b
* Mon Aug  8 2005 <veillard@redhat.com> 1.2.8-3
dd8e7b
- rebuilt with new gnutls
dd8e7b
- nspr has been split to a separate package
dd8e7b
* Fri Jul  8 2005 Daniel Veillard <veillard@redhat.com> 1.2.8-2
dd8e7b
- Enabling the mozilla-nss crypto backend
dd8e7b
* Fri Jul  8 2005 Daniel Veillard <veillard@redhat.com> 1.2.8-1
dd8e7b
- update from upstream, needed for openoffice
dd8e7b
* Tue Mar  8 2005 Daniel Veillard <veillard@redhat.com> 1.2.7-4
dd8e7b
- rebuilt with gcc4
dd8e7b
* Wed Feb 23 2005 Daniel Veillard <veillard@redhat.com> 1.2.7-1
dd8e7b
- Upstream release of 1.2.7, mostly bug fixes plus new functions
dd8e7b
  to GetKeys from simple store and X509 handling.
dd8e7b
* Wed Feb  9 2005 Daniel Veillard <veillard@redhat.com> 1.2.6-4
dd8e7b
- Adding support for GNUTls crypto backend
dd8e7b
* Wed Sep  1 2004 Daniel Veillard <veillard@redhat.com> 1.2.6-3
dd8e7b
- adding missing ldconfig calls
dd8e7b
* Thu Aug 26 2004 Daniel Veillard <veillard@redhat.com> 1.2.6-2
dd8e7b
- updated with upstream release from Aleksey
dd8e7b
* Mon Jun 21 2004 Daniel Veillard <veillard@redhat.com> 1.2.5-2
dd8e7b
- rebuilt
dd8e7b
* Mon Apr 19 2004 Daniel Veillard <veillard@redhat.com> 1.2.5-1
dd8e7b
- updated with upstream release from Aleksey
dd8e7b
* Wed Feb 11 2004 Daniel Veillard <veillard@redhat.com> 1.2.4-1
dd8e7b
- updated with upstream release from Aleksey
dd8e7b
* Tue Jan  6 2004 Daniel Veillard <veillard@redhat.com> 1.2.3-1
dd8e7b
- updated with upstream release from Aleksey
dd8e7b
* Wed Nov 12 2003 Daniel Veillard <veillard@redhat.com> 1.2.2-1
dd8e7b
- updated with upstream release from Aleksey, specific patches should
dd8e7b
  have been integrated now.
dd8e7b
* Thu Nov  6 2003 Daniel Veillard <veillard@redhat.com> 1.2.1-1
dd8e7b
- initial packaging based on the upstream one and libxml2 one.
dd8e7b
- desactivated mozilla-nss due to detection/architecture problems