|
Nikos Mavrogiannopoulos |
c8c36e3 |
%global git_date 20151104
|
|
Nikos Mavrogiannopoulos |
c8c36e3 |
%global git_commit_hash f1cba5f
|
|
Nikos Mavrogiannopoulos |
92d1b17 |
%global aname crypto-policies
|
|
Nikos Mavrogiannopoulos |
41e4948 |
|
|
Nikos Mavrogiannopoulos |
41e4948 |
Name: crypto-policies
|
|
Nikos Mavrogiannopoulos |
92d1b17 |
Version: %{git_date}
|
|
|
09c0d78 |
Release: 2.git%{git_commit_hash}%{?dist}
|
|
Nikos Mavrogiannopoulos |
41e4948 |
Summary: Crypto policies package for Fedora
|
|
Nikos Mavrogiannopoulos |
41e4948 |
|
|
Nikos Mavrogiannopoulos |
41e4948 |
License: LGPLv2+
|
|
Nikos Mavrogiannopoulos |
4650e56 |
URL: https://github.com/nmav/fedora-crypto-policies
|
|
Nikos Mavrogiannopoulos |
41e4948 |
|
|
Nikos Mavrogiannopoulos |
41e4948 |
# This is a tarball of the git repository without the .git/
|
|
Nikos Mavrogiannopoulos |
41e4948 |
# directory.
|
|
Nikos Mavrogiannopoulos |
92d1b17 |
Source0: crypto-policies-git%{git_commit_hash}.tar.gz
|
|
Nikos Mavrogiannopoulos |
c34e5a8 |
Source1: config
|
|
Nikos Mavrogiannopoulos |
41e4948 |
|
|
Nikos Mavrogiannopoulos |
41e4948 |
BuildArch: noarch
|
|
Nikos Mavrogiannopoulos |
41e4948 |
BuildRequires: asciidoc
|
|
Nikos Mavrogiannopoulos |
41e4948 |
BuildRequires: libxslt
|
|
Nikos Mavrogiannopoulos |
560b11c |
BuildRequires: openssl
|
|
Nikos Mavrogiannopoulos |
560b11c |
BuildRequires: gnutls-utils
|
|
Nikos Mavrogiannopoulos |
41e4948 |
|
|
Nikos Mavrogiannopoulos |
fce6488 |
# for shell script
|
|
Nikos Mavrogiannopoulos |
11bdf21 |
Requires(post): coreutils
|
|
Nikos Mavrogiannopoulos |
fce6488 |
|
|
Nikos Mavrogiannopoulos |
41e4948 |
%description
|
|
Nikos Mavrogiannopoulos |
41e4948 |
This package provides update-crypto-policies, which is a tool that sets
|
|
Nikos Mavrogiannopoulos |
41e4948 |
the policy applicable for the various cryptographic back-ends, such as
|
|
Nikos Mavrogiannopoulos |
41e4948 |
SSL/TLS libraries. The policy set by the tool will be the default policy
|
|
Nikos Mavrogiannopoulos |
41e4948 |
used by these back-ends unless the application user configures them otherwise.
|
|
Nikos Mavrogiannopoulos |
41e4948 |
https://fedoraproject.org/wiki/Changes/CryptoPolicy
|
|
Nikos Mavrogiannopoulos |
41e4948 |
|
|
Nikos Mavrogiannopoulos |
41e4948 |
|
|
Nikos Mavrogiannopoulos |
41e4948 |
%prep
|
|
Nikos Mavrogiannopoulos |
41e4948 |
%setup -q -n %{aname}
|
|
Nikos Mavrogiannopoulos |
1437438 |
|
|
Nikos Mavrogiannopoulos |
41e4948 |
|
|
Nikos Mavrogiannopoulos |
41e4948 |
%build
|
|
Nikos Mavrogiannopoulos |
41e4948 |
make %{?_smp_mflags} update-crypto-policies.8
|
|
Nikos Mavrogiannopoulos |
41e4948 |
|
|
Nikos Mavrogiannopoulos |
41e4948 |
%install
|
|
Nikos Mavrogiannopoulos |
41e4948 |
mkdir -p -m 755 %{buildroot}%{_datadir}/crypto-policies/profiles
|
|
Nikos Mavrogiannopoulos |
1437438 |
mkdir -p -m 755 %{buildroot}%{_sysconfdir}/crypto-policies/back-ends/
|
|
Nikos Mavrogiannopoulos |
41e4948 |
mkdir -p -m 755 %{buildroot}%{_mandir}/man8
|
|
Nikos Mavrogiannopoulos |
41e4948 |
mkdir -p -m 755 %{buildroot}%{_bindir}
|
|
Nikos Mavrogiannopoulos |
41e4948 |
install -p -m 644 update-crypto-policies.8 %{buildroot}%{_mandir}/man8
|
|
Nikos Mavrogiannopoulos |
41e4948 |
install -p -m 755 update-crypto-policies %{buildroot}%{_bindir}/update-crypto-policies
|
|
Nikos Mavrogiannopoulos |
41e4948 |
install -p -m 644 profiles/* %{buildroot}%{_datadir}/crypto-policies/profiles
|
|
Nikos Mavrogiannopoulos |
c34e5a8 |
install -p -m 644 %{SOURCE1} %{buildroot}%{_sysconfdir}/crypto-policies/config
|
|
Nikos Mavrogiannopoulos |
41e4948 |
|
|
Nikos Mavrogiannopoulos |
560b11c |
%check
|
|
Nikos Mavrogiannopoulos |
560b11c |
make check %{?_smp_mflags}
|
|
Nikos Mavrogiannopoulos |
560b11c |
|
|
Nikos Mavrogiannopoulos |
de1cba2 |
%post
|
|
Nikos Mavrogiannopoulos |
6377baf |
%{_bindir}/update-crypto-policies --no-check >/dev/null
|
|
Nikos Mavrogiannopoulos |
de1cba2 |
|
|
Nikos Mavrogiannopoulos |
de1cba2 |
|
|
Nikos Mavrogiannopoulos |
41e4948 |
%files
|
|
Nikos Mavrogiannopoulos |
41e4948 |
%defattr(-,root,root,-)
|
|
Nikos Mavrogiannopoulos |
c34e5a8 |
|
|
Nikos Mavrogiannopoulos |
41e4948 |
%dir %{_sysconfdir}/crypto-policies/
|
|
Nikos Mavrogiannopoulos |
c34e5a8 |
|
|
Nikos Mavrogiannopoulos |
c34e5a8 |
%config(noreplace) %{_sysconfdir}/crypto-policies/config
|
|
Nikos Mavrogiannopoulos |
c34e5a8 |
|
|
Nikos Mavrogiannopoulos |
1437438 |
%dir %{_sysconfdir}/crypto-policies/back-ends/
|
|
Nikos Mavrogiannopoulos |
1437438 |
%ghost %{_sysconfdir}/crypto-policies/back-ends/gnutls.config
|
|
Nikos Mavrogiannopoulos |
c8c36e3 |
%ghost %{_sysconfdir}/crypto-policies/back-ends/gnutls28.config
|
|
Nikos Mavrogiannopoulos |
1437438 |
%ghost %{_sysconfdir}/crypto-policies/back-ends/openssl.config
|
|
Nikos Mavrogiannopoulos |
1437438 |
%ghost %{_sysconfdir}/crypto-policies/back-ends/nss.config
|
|
Nikos Mavrogiannopoulos |
1437438 |
%ghost %{_sysconfdir}/crypto-policies/back-ends/bind.config
|
|
Nikos Mavrogiannopoulos |
1437438 |
%ghost %{_sysconfdir}/crypto-policies/back-ends/java.config
|
|
Nikos Mavrogiannopoulos |
1437438 |
%ghost %{_sysconfdir}/crypto-policies/back-ends/krb5.config
|
|
Nikos Mavrogiannopoulos |
1437438 |
|
|
Nikos Mavrogiannopoulos |
41e4948 |
%dir %{_datadir}/crypto-policies/
|
|
Nikos Mavrogiannopoulos |
41e4948 |
%{_bindir}/update-crypto-policies
|
|
Nikos Mavrogiannopoulos |
41e4948 |
%{_mandir}/man8/update-crypto-policies.8.gz
|
|
Nikos Mavrogiannopoulos |
41e4948 |
%{_datadir}/crypto-policies/profiles/
|
|
Nikos Mavrogiannopoulos |
41e4948 |
|
|
|
06e9116 |
%{!?_licensedir:%global license %%doc}
|
|
|
06e9116 |
%license COPYING.LESSER
|
|
Nikos Mavrogiannopoulos |
41e4948 |
|
|
Nikos Mavrogiannopoulos |
41e4948 |
%changelog
|
|
|
09c0d78 |
* Wed Feb 03 2016 Fedora Release Engineering <releng@fedoraproject.org> - 20151104-2.gitf1cba5f
|
|
|
09c0d78 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
|
|
|
09c0d78 |
|
|
Nikos Mavrogiannopoulos |
c8c36e3 |
* Wed Nov 4 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> - 20151104-1-gitcf1cba5f
|
|
Nikos Mavrogiannopoulos |
c8c36e3 |
- Generate policies for compat-gnutls28 (#1277790)
|
|
Nikos Mavrogiannopoulos |
c8c36e3 |
|
|
Nikos Mavrogiannopoulos |
1437438 |
* Fri Oct 23 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> - 20151005-2-gitc8452f8
|
|
Nikos Mavrogiannopoulos |
1437438 |
- Generated files are put in a %ghost directive
|
|
Nikos Mavrogiannopoulos |
1437438 |
|
|
Nikos Mavrogiannopoulos |
3e19a4c |
* Mon Oct 5 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> - 20151005-1-gitc8452f8
|
|
Nikos Mavrogiannopoulos |
3e19a4c |
- Updated policies from upstream
|
|
Nikos Mavrogiannopoulos |
3e19a4c |
- Added support for the generation of libkrb5 policy
|
|
Nikos Mavrogiannopoulos |
3e19a4c |
- Added support for the generation of openjdk policy
|
|
Nikos Mavrogiannopoulos |
3e19a4c |
|
|
|
820f1ef |
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 20150518-2.gitffe885e
|
|
|
820f1ef |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
|
|
|
820f1ef |
|
|
Nikos Mavrogiannopoulos |
bd40653 |
* Mon May 18 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> - 20150518-1-gitffe885e
|
|
Nikos Mavrogiannopoulos |
bd40653 |
- Updated policies to remove SSL 3.0 and RC4 (#1220679)
|
|
Nikos Mavrogiannopoulos |
bd40653 |
|
|
Nikos Mavrogiannopoulos |
560b11c |
* Fri Mar 6 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> - 20150305-3-git2eeb03b
|
|
Nikos Mavrogiannopoulos |
560b11c |
- Added make check
|
|
Nikos Mavrogiannopoulos |
560b11c |
|
|
Nikos Mavrogiannopoulos |
5782175 |
* Fri Mar 6 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> - 20150305-2-git44afaa1
|
|
Nikos Mavrogiannopoulos |
5782175 |
- Removed support for SECLEVEL (#1199274)
|
|
Nikos Mavrogiannopoulos |
5782175 |
|
|
Nikos Mavrogiannopoulos |
2ab32a4 |
* Thu Mar 5 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> - 20150305-1-git098a8a6
|
|
Nikos Mavrogiannopoulos |
2ab32a4 |
- Include AEAD ciphersuites in gnutls (#1198979)
|
|
Nikos Mavrogiannopoulos |
2ab32a4 |
|
|
|
135b396 |
* Sun Jan 25 2015 Peter Robinson <pbrobinson@fedoraproject.org> 20150115-3-git9ef7493
|
|
|
135b396 |
- Bump release so lastest git snapshot is newer NVR
|
|
|
135b396 |
|
|
Nikos Mavrogiannopoulos |
3504751 |
* Thu Jan 15 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> - 20150115-2-git9ef7493
|
|
Nikos Mavrogiannopoulos |
c04d98f |
- Updated to newest upstream version.
|
|
Nikos Mavrogiannopoulos |
c04d98f |
- Includes bind policies (#1179925)
|
|
Nikos Mavrogiannopoulos |
c04d98f |
|
|
Nikos Mavrogiannopoulos |
d1ef6b1 |
* Tue Dec 16 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> - 20141124-2-gitd4aa178
|
|
Nikos Mavrogiannopoulos |
d1ef6b1 |
- Corrected typo in gnutls' future policy (#1173886)
|
|
Nikos Mavrogiannopoulos |
d1ef6b1 |
|
|
Nikos Mavrogiannopoulos |
57d5532 |
* Mon Nov 24 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> - 20141124-1-gitd4aa178
|
|
Nikos Mavrogiannopoulos |
57d5532 |
- re-enable SSL 3.0 (until its removal is coordinated with a Fedora change request)
|
|
Nikos Mavrogiannopoulos |
57d5532 |
|
|
Nikos Mavrogiannopoulos |
9e4e7dd |
* Thu Nov 20 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> - 20141120-1-git9a26a5b
|
|
Nikos Mavrogiannopoulos |
9e4e7dd |
- disable SSL 3.0 (doesn't work in openssl)
|
|
Nikos Mavrogiannopoulos |
9e4e7dd |
|
|
Nikos Mavrogiannopoulos |
b117fee |
* Fri Sep 05 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> - 20140905-1-git4649b7d
|
|
Nikos Mavrogiannopoulos |
b117fee |
- enforce the acceptable TLS versions in openssl
|
|
Nikos Mavrogiannopoulos |
b117fee |
|
|
Nikos Mavrogiannopoulos |
be8bda6 |
* Wed Aug 27 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> - 20140827-1-git4e06f1d
|
|
Nikos Mavrogiannopoulos |
be8bda6 |
- fix issue with RC4 being disabled in DEFAULT settings for openssl
|
|
Nikos Mavrogiannopoulos |
be8bda6 |
|
|
Nikos Mavrogiannopoulos |
217f002 |
* Thu Aug 14 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> - 20140814-1-git80e1e98
|
|
Nikos Mavrogiannopoulos |
217f002 |
- fix issue in post script run on upgrade (#1130074)
|
|
Nikos Mavrogiannopoulos |
217f002 |
|
|
Nikos Mavrogiannopoulos |
f089cd3 |
* Tue Aug 12 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> - 20140812-1-gitb914bfd
|
|
Nikos Mavrogiannopoulos |
f089cd3 |
- updated crypto-policies from repository
|
|
Nikos Mavrogiannopoulos |
f089cd3 |
|
|
|
06e9116 |
* Fri Jul 11 2014 Tom Callaway <spot@fedoraproject.org> - 20140708-2-git3a7ae3f
|
|
|
06e9116 |
- fix license handling
|
|
|
06e9116 |
|
|
Nikos Mavrogiannopoulos |
d801ba0 |
* Tue Jul 08 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> - 20140708-1-git3a7ae3f
|
|
Nikos Mavrogiannopoulos |
d801ba0 |
- updated crypto-policies from repository
|
|
Nikos Mavrogiannopoulos |
d801ba0 |
|
|
Nikos Mavrogiannopoulos |
3b7744b |
* Fri Jun 20 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> - 20140620-1-gitdac1524
|
|
Nikos Mavrogiannopoulos |
92d1b17 |
- updated crypto-policies from repository
|
|
Nikos Mavrogiannopoulos |
92d1b17 |
- changed versioning
|
|
Nikos Mavrogiannopoulos |
92d1b17 |
|
|
Nikos Mavrogiannopoulos |
2be2d3b |
* Thu Jun 12 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.9-7-20140612gita2fa0c6
|
|
Nikos Mavrogiannopoulos |
2be2d3b |
- updated crypto-policies from repository
|
|
Nikos Mavrogiannopoulos |
2be2d3b |
|
|
|
663b6b8 |
* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.9-7.20140522gita50bad2
|
|
|
663b6b8 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
|
|
|
663b6b8 |
|
|
Nikos Mavrogiannopoulos |
11bdf21 |
* Thu May 29 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.9-6-20140522gita50bad2
|
|
Nikos Mavrogiannopoulos |
11bdf21 |
- Require(post) coreutils (#1100335).
|
|
Nikos Mavrogiannopoulos |
11bdf21 |
|
|
Nikos Mavrogiannopoulos |
fce6488 |
* Tue May 27 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.9-5-20140522gita50bad2
|
|
Nikos Mavrogiannopoulos |
fce6488 |
- Require coreutils.
|
|
Nikos Mavrogiannopoulos |
fce6488 |
|
|
Nikos Mavrogiannopoulos |
c34e5a8 |
* Thu May 22 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.9-4-20140522gita50bad2
|
|
Nikos Mavrogiannopoulos |
c34e5a8 |
- Install the default configuration file.
|
|
Nikos Mavrogiannopoulos |
c34e5a8 |
|
|
Nikos Mavrogiannopoulos |
de1cba2 |
* Wed May 21 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.9-3-20140520git81364e4
|
|
Nikos Mavrogiannopoulos |
de1cba2 |
- Run update-crypto-policies after installation.
|
|
Nikos Mavrogiannopoulos |
de1cba2 |
|
|
Nikos Mavrogiannopoulos |
41e4948 |
* Tue May 20 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.9-2-20140520git81364e4
|
|
Nikos Mavrogiannopoulos |
41e4948 |
- Updated spec based on comments by Petr Lautrbach.
|
|
Nikos Mavrogiannopoulos |
41e4948 |
|
|
Nikos Mavrogiannopoulos |
41e4948 |
* Mon May 19 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.9-1-20140519gitf15621a
|
|
Nikos Mavrogiannopoulos |
41e4948 |
- Initial package build
|
|
Nikos Mavrogiannopoulos |
41e4948 |
|