|
|
dd7337d |
%global moz_extensions %{_datadir}/mozilla/extensions
|
|
|
dd7337d |
|
|
|
dd7337d |
%global firefox_app_id \{ec8030f7-c20a-464f-9b0e-13a3a9e97384\}
|
|
|
dd7337d |
%global src_ext_id https-everywhere@eff.org
|
|
|
dd7337d |
%global firefox_inst_dir %{moz_extensions}/%{firefox_app_id}/%{src_ext_id}
|
|
|
dd7337d |
|
|
|
dd7337d |
%global seamonkey_app_id \{92650c4d-4b8e-4d2a-b7eb-24ecf4f6b63a}
|
|
|
dd7337d |
%global seamonkey_inst_dir %{moz_extensions}/%{seamonkey_app_id}
|
|
|
dd7337d |
|
|
|
dd7337d |
Name: mozilla-https-everywhere
|
|
|
dd7337d |
Version: 3.0.0
|
|
|
dd7337d |
Release: 1%{?dist}
|
|
|
dd7337d |
Summary: HTTPS/HSTS enforcement extension for Mozilla Firefox and SeaMonkey
|
|
|
dd7337d |
|
|
|
dd7337d |
Group: Applications/Internet
|
|
|
dd7337d |
License: GPLv2+
|
|
|
dd7337d |
URL: https://eff.org/https-everywhere
|
|
|
dd7337d |
# A git repo is available at git://git.torproject.org/https-everywhere.git
|
|
|
dd7337d |
Source0: https://www.eff.org/files/https-everywhere-%{version}.xpi
|
|
|
dd7337d |
Patch0: appManaged.patch
|
|
|
dd7337d |
|
|
|
dd7337d |
|
|
|
dd7337d |
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
|
|
|
dd7337d |
|
|
|
dd7337d |
BuildRequires: dos2unix
|
|
|
dd7337d |
%if 0%{?rhel}
|
|
|
dd7337d |
Requires: firefox
|
|
|
dd7337d |
%else
|
|
|
dd7337d |
Requires: mozilla-filesystem
|
|
|
dd7337d |
%endif
|
|
|
dd7337d |
BuildArch: noarch
|
|
|
dd7337d |
|
|
|
dd7337d |
|
|
|
dd7337d |
%description
|
|
|
dd7337d |
HTTPS Everywhere is a Firefox extension produced as a collaboration between
|
|
|
dd7337d |
The Tor Project and the Electronic Frontier Foundation. It encrypts your
|
|
|
dd7337d |
communications with a number of major websites.
|
|
|
dd7337d |
|
|
|
dd7337d |
Many sites on the web offer some limited support for encryption over HTTPS,
|
|
|
dd7337d |
but make it difficult to use. For instance, they may default to unencrypted
|
|
|
dd7337d |
HTTP, or fill encrypted pages with links that go back to the unencrypted site.
|
|
|
dd7337d |
|
|
|
dd7337d |
The HTTPS Everywhere extension fixes these problems by rewriting all requests
|
|
|
dd7337d |
to these sites to HTTPS.
|
|
|
dd7337d |
|
|
|
dd7337d |
|
|
|
dd7337d |
%prep
|
|
|
dd7337d |
%setup -q -c
|
|
|
dd7337d |
dos2unix -f LICENSE.txt
|
|
|
dd7337d |
%patch0 -p 1
|
|
|
dd7337d |
|
|
|
dd7337d |
%build
|
|
|
dd7337d |
|
|
|
dd7337d |
|
|
|
dd7337d |
%install
|
|
|
dd7337d |
rm -rf %{buildroot}
|
|
|
dd7337d |
|
|
|
dd7337d |
# top level files
|
|
|
dd7337d |
install -Dp -m 644 chrome.manifest %{buildroot}%{firefox_inst_dir}/chrome.manifest
|
|
|
dd7337d |
install -Dp -m 644 install.rdf %{buildroot}%{firefox_inst_dir}/install.rdf
|
|
|
dd7337d |
install -Dp -m 644 Changelog %{buildroot}%{firefox_inst_dir}/Changelog
|
|
|
dd7337d |
install -Dp -m 644 LICENSE.txt %{buildroot}%{firefox_inst_dir}/LICENSE.txt
|
|
|
dd7337d |
|
|
|
672c338 |
# chrome/content
|
|
|
672c338 |
install -dm 755 %{buildroot}%{firefox_inst_dir}/chrome/content
|
|
|
dd7337d |
install -D -m 644 chrome/content/{about.xul,fetch-source.js,fetch-source.xul,meta-preferences.xul,observatory-popup.xul,observatory-preferences.xul,observatory-warning.xul,observatory-xul.js,preferences.css,preferences.js,preferences.xul,toolbar_button.js,toolbar_button.xul} %{buildroot}%{firefox_inst_dir}/chrome/content/
|
|
|
dd7337d |
|
|
|
672c338 |
# chrome/content/code
|
|
|
672c338 |
install -dm 755 %{buildroot}%{firefox_inst_dir}/chrome/content/code
|
|
|
f3608ba |
for f in chrome/content/code; do
|
|
|
672c338 |
install -Dpm 644 ${f} \
|
|
|
7c8eab2 |
%{buildroot}%{firefox_inst_dir}/${f}
|
|
|
672c338 |
done
|
|
|
672c338 |
|
|
|
cd4b87b |
# chrome/content/rules
|
|
|
cd4b87b |
install -dm 755 %{buildroot}%{firefox_inst_dir}/chrome/content/rules
|
|
|
cd4b87b |
for f in chrome/content/rules/*; do
|
|
|
cd4b87b |
install -Dpm 644 ${f} \
|
|
|
7c8eab2 |
%{buildroot}%{firefox_inst_dir}/${f}
|
|
|
cd4b87b |
done
|
|
|
cd4b87b |
|
|
|
cd4b87b |
# chrome/locale and everything in it
|
|
|
7c8eab2 |
install -dm 755 %{buildroot}/%{firefox_inst_dir}/chrome/locale
|
|
|
cd4b87b |
for f in chrome/locale/*; do
|
|
|
cd4b87b |
install -dm 755 ${f} \
|
|
|
7c8eab2 |
%{buildroot}%{firefox_inst_dir}/${f}
|
|
|
cd4b87b |
for g in ${f}/*; do
|
|
|
cd4b87b |
install -Dpm 644 ${g} \
|
|
|
7c8eab2 |
%{buildroot}%{firefox_inst_dir}/${g}
|
|
|
cd4b87b |
done
|
|
|
cd4b87b |
done
|
|
|
cd4b87b |
|
|
|
7c8eab2 |
# chrome/skin
|
|
|
7c8eab2 |
install -dm 755 %{buildroot}/%{firefox_inst_dir}/chrome/skin
|
|
|
7c8eab2 |
for f in chrome/skin/*; do
|
|
|
7c8eab2 |
install -Dpm 644 ${f} \
|
|
|
7c8eab2 |
%{buildroot}%{firefox_inst_dir}/${f}
|
|
|
7c8eab2 |
done
|
|
|
cd4b87b |
|
|
|
7c8eab2 |
# components/
|
|
|
7c8eab2 |
install -dm 755 %{buildroot}/%{firefox_inst_dir}/components
|
|
|
7c8eab2 |
for f in components/*; do
|
|
|
7c8eab2 |
install -Dpm 644 ${f} \
|
|
|
7c8eab2 |
%{buildroot}%{firefox_inst_dir}/${f}
|
|
|
7c8eab2 |
done
|
|
|
dd7337d |
|
|
|
fb44ebc |
# defaults/
|
|
|
fb44ebc |
install -dm 755 %{buildroot}/%{firefox_inst_dir}/defaults
|
|
|
fb44ebc |
install -dm 755 %{buildroot}/%{firefox_inst_dir}/defaults/preferences
|
|
|
fb44ebc |
for f in defaults/preferences/*; do
|
|
|
fb44ebc |
install -Dpm 644 ${f} \
|
|
|
fb44ebc |
%{buildroot}%{firefox_inst_dir}/${f}
|
|
|
fb44ebc |
done
|
|
|
fb44ebc |
|
|
|
fb44ebc |
|
|
|
dd7337d |
# symlink from seamonkey extension to firefox extension
|
|
|
dd7337d |
mkdir -p %{buildroot}%{seamonkey_inst_dir}
|
|
|
dd7337d |
ln -s %{firefox_inst_dir} %{buildroot}%{seamonkey_inst_dir}
|
|
|
dd7337d |
|
|
|
dd7337d |
%clean
|
|
|
dd7337d |
rm -rf %{buildroot}
|
|
|
dd7337d |
|
|
|
dd7337d |
|
|
|
dd7337d |
%files
|
|
|
dd7337d |
%defattr(-,root,root,-)
|
|
|
dd7337d |
%doc LICENSE.txt
|
|
|
dd7337d |
%{firefox_inst_dir}
|
|
|
dd7337d |
%{seamonkey_inst_dir}
|
|
|
dd7337d |
|
|
|
dd7337d |
|
|
|
dd7337d |
%changelog
|
|
|
dd7337d |
* Tue Oct 09 2012 Russell Golden <niveusluna@niveusluna.org> - 3.0.0-1
|
|
|
dd7337d |
- Since version 2.x:
|
|
|
dd7337d |
- 1,455 new active rulesets
|
|
|
dd7337d |
- UI improvements:
|
|
|
dd7337d |
-- right-click to view ruleset source in the config window
|
|
|
dd7337d |
-- translate some untranslated menus
|
|
|
dd7337d |
-- better icons in a few places (breaking/redirecting rules,
|
|
|
dd7337d |
context button)
|
|
|
dd7337d |
- Numerous improvements to the SSL Observatory internals, including cached
|
|
|
dd7337d |
submissions on hostile networks, better Tor and Convergence integration,
|
|
|
dd7337d |
and a new setting to control self-signed cert submission
|
|
|
dd7337d |
- New translations: Basque, Czech, Danish, French, Greek, Hungarian,
|
|
|
dd7337d |
Italian, Korean, Malaysian, Polish, Slovak, Turkish,
|
|
|
dd7337d |
Traditional Chinese
|
|
|
dd7337d |
- Relative to 3.0development.8:
|
|
|
dd7337d |
- Only promote the Decentralized SSL Observatory to 5% of non-Tor users
|
|
|
dd7337d |
- Update the SSL Observatory whitelist of common cert chains
|
|
|
dd7337d |
- Fixes, mostly in the CDN/media playback department:
|
|
|
dd7337d |
Akamai/CNN, GO.com/ABC, AWS/Amazon Zeitgeist MP3 player,
|
|
|
dd7337d |
AWS/Spiegel.tv, Technology Review, Cloudfront/Tunein,
|
|
|
dd7337d |
Akamai/Discovery Channel, Beyond Security, OCaml, Gentoo,
|
|
|
dd7337d |
Nokia, Widgetbox.com, Squarespace
|
|
|
dd7337d |
https://trac.torproject.org/projects/tor/ticket/4199
|
|
|
dd7337d |
https://trac.torproject.org/projects/tor/ticket/6871
|
|
|
dd7337d |
https://trac.torproject.org/projects/tor/ticket/6992
|
|
|
dd7337d |
https://trac.torproject.org/projects/tor/ticket/7000
|
|
|
dd7337d |
https://trac.torproject.org/projects/tor/ticket/7020
|
|
|
dd7337d |
https://mail1.eff.org/pipermail/https-everywhere-rules/2012-October/001324.html
|
|
|
dd7337d |
- Disable buggy: Web.de, AJC.com, Feross, Bestofmedia
|
|
|
dd7337d |
- Remove a lot of off-by-default rulesets from the code, since they have
|
|
|
dd7337d |
some costs in terms of startup speed and RAM usage
|
|
|
dd7337d |
|
|
|
dd7337d |
* Thu Sep 27 2012 Russell Golden <niveusluna@niveusluna.org> - 2.2.3-1
|
|
|
dd7337d |
- Workaround for breakage in Amazon Look Inside the Book (via Cloudfront)
|
|
|
dd7337d |
-- https://trac.torproject.org/projects/tor/ticket/6848
|
|
|
dd7337d |
- Fix logout for AOL users
|
|
|
dd7337d |
- Other fixes: PassThePopcorn, WhatCD, Antispam.de, RFCeditor,
|
|
|
dd7337d |
-- Weatherspark / GoogleMaps
|
|
|
dd7337d |
- Disable broken: SVT.se
|
|
|
dd7337d |
|
|
|
dd7337d |
* Thu Sep 06 2012 Russell Golden <niveusluna@niveusluna.org> - 2.2.2-1
|
|
|
dd7337d |
- Fix a bug that was preventing settings from persisting:
|
|
|
dd7337d |
https://trac.torproject.org/projects/tor/ticket/6653
|
|
|
dd7337d |
- Fixes and improvements: Lenovo, YahooNew, Pirate Party, OpenDNS, Wordpress
|
|
|
dd7337d |
https://trac.torproject.org/projects/tor/ticket/6604
|
|
|
dd7337d |
https://mail1.eff.org/pipermail/https-everywhere-rules/2012-August/001267.html
|
|
|
dd7337d |
- Disable broken rulesets: FAZ, Playboy, Mapquest, Imgur, F-Secure
|
|
|
dd7337d |
|
|
|
dd7337d |
* Fri Aug 17 2012 Russell Golden <niveusluna@niveusluna.org> - 2.2.1-1
|
|
|
dd7337d |
- Update to upstream 2.2.1. Hopefully this one will actually work.
|
|
|
dd7337d |
|
|
|
dd7337d |
* Fri Aug 17 2012 Russell Golden <niveusluna@niveusluna.org> - 2.1-5
|
|
|
dd7337d |
- Add appManaged flag to prevent update in user profile directories
|
|
|
dd7337d |
- prompted by release of badly broken 2.2 upstream
|
|
|
dd7337d |
|
|
|
dd7337d |
* Fri Aug 17 2012 Russell Golden <niveusluna@niveusluna.org> - 2.2-2
|
|
|
dd7337d |
- Prevent ruleset bugs from crashing the UI
|
|
|
dd7337d |
-- https://trac.torproject.org/projects/tor/ticket/6280
|
|
|
dd7337d |
- Fix the enable/disable button in Firefox 14
|
|
|
dd7337d |
-- https://trac.torproject.org/projects/tor/ticket/6212
|
|
|
dd7337d |
- Fix a nasty bug in the optional "Search www.google.com" ruleset:
|
|
|
dd7337d |
-- https://gitweb.torproject.org/https-everywhere.git/commitdiff/50ca41a1e189ef8383781f803e51ec7a06688a3b
|
|
|
dd7337d |
- Disable buggy/broken: ZDNet, Globe and Mail, Blip.tv, Governo Portugês,
|
|
|
dd7337d |
-- Alton Towers, McAfee :( :( :(
|
|
|
dd7337d |
- Fixes: Yandex, Wikipedia, PirateParty, JBoss, Gentoo
|
|
|
dd7337d |
- Hopefully the last 2.x release before 3.0 stable
|
|
|
dd7337d |
|
|
|
dd7337d |
* Fri Jul 20 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1-4
|
|
|
dd7337d |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
|
|
|
dd7337d |
|
|
|
dd7337d |
* Mon Jul 02 2012 Russell Golden <niveusluna@niveusluna.org> - 2.1-3
|
|
|
dd7337d |
- Change Requires to require firefox on all RHEL versions
|
|
|
dd7337d |
|
|
|
dd7337d |
* Sun Jun 24 2012 Russell Golden <niveusluna@niveusluna.org> - 2.1-2
|
|
|
dd7337d |
- Fix context menu breakage when URIs lack a host
|
|
|
dd7337d |
- Fixes: CiteULike, MozillaMessaging, Yandex, Demonoid, Pirate Party,
|
|
|
dd7337d |
-- Gentoo, NYTimes, Microsoft, Wikipedia, Lenovo
|
|
|
dd7337d |
-- https://mail1.eff.org/pipermail/https-everywhere-rules/2012-June/001189.html
|
|
|
dd7337d |
-- https://trac.torproject.org/projects/tor/ticket/6091
|
|
|
dd7337d |
-- https://mail1.eff.org/pipermail/https-everywhere-rules/2012-June/001190.html
|
|
|
dd7337d |
-- https://mail1.eff.org/pipermail/https-everywhere-rules/2012-May/001186.html
|
|
|
dd7337d |
-- https://mail1.eff.org/pipermail/https-everywhere/2012-May/001433.html
|
|
|
dd7337d |
- Disable broken: MarketWatch, Disqus, Magento, Lavasoft, Project Syndicate,
|
|
|
dd7337d |
-- Typepad/Say Media
|
|
|
dd7337d |
-- https://trac.torproject.org/projects/tor/ticket/5899
|
|
|
dd7337d |
-- https://trac.torproject.org/projects/tor/ticket/5496
|
|
|
dd7337d |
|
|
|
dd7337d |
* Tue May 01 2012 Russell Golden <niveusluna@niveusluna.org> - 2.0.3-2
|
|
|
dd7337d |
- Add file that I missed in the last build.
|
|
|
dd7337d |
|
|
|
dd7337d |
* Sat Apr 28 2012 Russell Golden <niveusluna@niveusluna.org> - 2.0.3-1
|
|
|
dd7337d |
- Fix a downgrade attack that might allow attackers to deny HTTPS
|
|
|
dd7337d |
Everywhere protection for cookies on some domains.
|
|
|
dd7337d |
https://trac.torproject.org/projects/tor/ticket/5676
|
|
|
dd7337d |
- Minor redirection mechanism fixes
|
|
|
dd7337d |
- Fixes: WordPress, Yandex, OpenDNS, Via.me/AWS
|
|
|
dd7337d |
- Improvements: Mozilla
|
|
|
dd7337d |
- Disable broken: ReadWriteWeb
|
|
|
dd7337d |
|
|
|
dd7337d |
* Fri Apr 20 2012 Russell Golden <niveusluna@niveusluna.org> - 2.0.2-1
|
|
|
dd7337d |
- Fix a weird wrong DOM-origin bug that occurred while redirects were in
|
|
|
dd7337d |
-- progress (this might have security implications, although we are unsure
|
|
|
dd7337d |
-- if it was exploitable).
|
|
|
dd7337d |
-- https://trac.torproject.org/projects/tor/ticket/5477
|
|
|
dd7337d |
- By default, use https://google.co.cctld instead of
|
|
|
dd7337d |
-- encrypted.google.com
|
|
|
dd7337d |
- Add an optional ruleset to use https://www.google.com
|
|
|
dd7337d |
-- instead of encrypted.google.com, too
|
|
|
dd7337d |
- Ruleset fixes: Debian, Kohls, Malwarebytes, Yandex, Wikipedia, Mises.org,
|
|
|
dd7337d |
-- OpenDNS, Wizards of the Coast, Lenovo, Barnes and Noble
|
|
|
dd7337d |
-- https://trac.torproject.org/projects/tor/ticket/5509
|
|
|
dd7337d |
-- https://trac.torproject.org/projects/tor/ticket/5491
|
|
|
dd7337d |
-- https://trac.torproject.org/projects/tor/ticket/5303
|
|
|
dd7337d |
- Stumble across more horrible security holes in the Verizon website:
|
|
|
dd7337d |
-- https://mail1.eff.org/pipermail/https-everywhere-rules/2012-February/001003.html
|
|
|
dd7337d |
- Disable the Gentoo ruleset on non-CAcert platforms
|
|
|
dd7337d |
- Disable buggy rulesets: IBM, Scribd, Wunderground :( :( :(
|
|
|
dd7337d |
-- https://trac.torproject.org/projects/tor/ticket/5344
|
|
|
dd7337d |
-- https://trac.torproject.org/projects/tor/ticket/5435
|
|
|
dd7337d |
-- https://trac.torproject.org/projects/tor/ticket/5630
|
|
|
dd7337d |
|
|
|
dd7337d |
* Wed Feb 29 2012 Russell Golden <niveusluna@niveusluna.org> - 2.0.1-1
|
|
|
dd7337d |
- Sync to upstream 2.0.x branch
|
|
|
dd7337d |
- Too many changes to all list here. None affect the end user experience.
|
|
|
dd7337d |
Being a Mozilla extension, it'll auto-update anyway.
|
|
|
dd7337d |
|
|
|
dd7337d |
* Wed Jan 11 2012 Russell Golden <niveusluna@niveusluna.org> - 1.2.2-1
|
|
|
dd7337d |
- Google Cache is back!
|
|
|
dd7337d |
- Fixes: Wikipedia, Identi.ca, Verizon, CCC.de, UserScripts, Yandex
|
|
|
dd7337d |
- Improvements: EFF
|
|
|
dd7337d |
- Disable broken: NSF.gov, WHO.int
|
|
|
dd7337d |
|
|
|
dd7337d |
* Wed Nov 16 2011 Russell Golden <niveusluna@niveusluna.org> - 1.2.1-1
|
|
|
dd7337d |
- Google Cache is broken, remove it from GoogleServices :( :( :(
|
|
|
dd7337d |
- Fix for the Google Image Search homepage
|
|
|
dd7337d |
- Exclude help.duckduckgo.com:
|
|
|
dd7337d |
-- https://trac.torproject.org/projects/tor/ticket/4399
|
|
|
dd7337d |
- Disable Yahoo! Mail:
|
|
|
dd7337d |
-- https://trac.torproject.org/projects/tor/ticket/4441
|
|
|
dd7337d |
- Installable on Firefox 10
|
|
|
dd7337d |
|
|
|
dd7337d |
* Tue Nov 15 2011 Russell Golden <niveusluna@niveusluna.org> - 1.2-1
|
|
|
dd7337d |
- Fixes: WordPress, Statcounter, Java, Bahn.de, SICS.se
|
|
|
dd7337d |
- Improvements: use fancy new HTTPS Wikipedia
|
|
|
dd7337d |
- Disable broken: OpenUniversity, TV.com, Random.org, kb.CERT
|
|
|
dd7337d |
|
|
|
dd7337d |
* Thu Oct 20 2011 Russell Golden <niveusluna@niveusluna.org> - 1.1-1
|
|
|
dd7337d |
- Further tweaks to internals, will hopefully fix a number of weird issues:
|
|
|
dd7337d |
-- https://trac.torproject.org/projects/tor/ticket/4194
|
|
|
dd7337d |
-- https://trac.torproject.org/projects/tor/ticket/4149
|
|
|
dd7337d |
-- https://mail1.eff.org/pipermail/https-everywhere/2011-October/001208.html
|
|
|
dd7337d |
- YouTube is enabled by default!
|
|
|
dd7337d |
- Fixes: Yandex, Statcounter, Polldaddy, SBB.ch
|
|
|
dd7337d |
- Improvements: Facebook+
|
|
|
dd7337d |
- Disable broken: Bloglines, EPEAT
|
|
|
dd7337d |
|
|
|
dd7337d |
* Sat Oct 8 2011 Russell Golden <niveusluna@niveusluna.org> - 1.0.3-2
|
|
|
dd7337d |
- Changelog added for current version
|
|
|
dd7337d |
|
|
|
dd7337d |
* Fri Sep 16 2011 Russell Golden <niveusluna@niveusluna.org> - 1.0.1-1
|
|
|
dd7337d |
- Initial packaging for Fedora
|
|
|
dd7337d |
|