From f5197791d92a9b38c6755e75fddaa15b877a0a6b Mon Sep 17 00:00:00 2001 From: Kevin Wright Date: Oct 30 2011 21:26:30 +0000 Subject: 'pki-setup' 'pki-symkey' 'pki-native-tools' 'pki-util' Bugzilla Bug #737122 - DRM: during archiving and recovering, wrapping unwrapping keys should be done in the token (cfu) 'pki-java-tools' 'pki-common' Bugzilla Bug #744797 - KRA key recovery (retrieve pkcs#12) fails after the in-place upgrade( CS 8.0->8.1) (cfu) 'pki-selinux' 'pki-ca' Bugzilla Bug #746367 - Typo in the profile name. (jmagne) Bugzilla Bug #737122 - DRM: during archiving and recovering, wrapping unwrapping keys should be done in the token (cfu) Bugzilla Bug #749927 - Java class conflicts using Java 7 in Fedora 17 (rawhide) . . . (mharmsen) Bugzilla Bug #749945 - Installation error reported during CA, DRM, OCSP, and TKS package installation . . . (mharmsen) 'pki-silent' --- diff --git a/.gitignore b/.gitignore index 49580f8..8d77797 100644 --- a/.gitignore +++ b/.gitignore @@ -8,3 +8,4 @@ /pki-core-9.0.9.tar.gz /pki-core-9.0.14.tar.gz /pki-core-9.0.15.tar.gz +/pki-core-9.0.16.tar.gz diff --git a/clog b/clog index 056b158..1efb181 100644 --- a/clog +++ b/clog @@ -1,34 +1,20 @@ -Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . . (mharmsen) -Bugzilla Bug #699809 - Convert CS to use systemd (alee) 'pki-setup' -Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS -mode (cfu) -Bugzilla Bug #737192 - Need script to upgrade proxy configuration (alee) 'pki-symkey' -Bugzilla Bug #730162 - TPS/TKS token enrollment failure in FIPS mode -(hsm+NSS). (jmagne) 'pki-native-tools' -Bugzilla Bug #730801 - Coverity issues in native-tools area (awnuk) -Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS -mode (cfu) 'pki-util' -Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS -mode (cfu) +Bugzilla Bug #737122 - DRM: during archiving and recovering, +wrapping unwrapping keys should be done in the token (cfu) 'pki-java-tools' 'pki-common' -Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS -mode (cfu) -Bugzilla Bug #737218 - Incorrect request attribute name matching -ignores request attributes during request parsing. (awnuk) -Bugzilla Bug #730162 - TPS/TKS token enrollment failure in FIPS mode -(hsm+NSS). (jmagne) +Bugzilla Bug #744797 - KRA key recovery (retrieve pkcs#12) fails after +the in-place upgrade( CS 8.0->8.1) (cfu) 'pki-selinux' -Bugzilla Bug #739708 - pki-selinux lacks rules in F16 (alee) 'pki-ca' -Bugzilla Bug #712931 - CS requires too many ports -to be open in the FW (alee) -Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS -mode (cfu) +Bugzilla Bug #746367 - Typo in the profile name. (jmagne) +Bugzilla Bug #737122 - DRM: during archiving and recovering, +wrapping unwrapping keys should be done in the token (cfu) +Bugzilla Bug #749927 - Java class conflicts using Java 7 in Fedora 17 +(rawhide) . . . (mharmsen) +Bugzilla Bug #749945 - Installation error reported during CA, DRM, +OCSP, and TKS package installation . . . (mharmsen) 'pki-silent' -Bugzilla Bug #739201 - pkisilent does not take arch into account -as Java packages migrated to arch-dependent directories (mharmsen) diff --git a/pki-core.spec b/pki-core.spec index 37e0f59..020b31a 100644 --- a/pki-core.spec +++ b/pki-core.spec @@ -1,5 +1,5 @@ Name: pki-core -Version: 9.0.15 +Version: 9.0.16 Release: 1%{?dist} Summary: Certificate System - PKI Core Components URL: http://pki.fedoraproject.org/ @@ -535,26 +535,28 @@ fi %else %post -n pki-ca # Attempt to update ALL old "CA" instances to "systemd" -for inst in `ls /etc/sysconfig/pki/ca`; do - if [ ! -e "/etc/systemd/system/pki-cad.target.wants/pki-cad@${inst}.service" ]; then - ln -s "/lib/systemd/system/pki-cad@.service" \ - "/etc/systemd/system/pki-cad.target.wants/pki-cad@${inst}.service" - [ -L /var/lib/${inst}/${inst} ] && unlink /var/lib/${inst}/${inst} - ln -s /usr/sbin/tomcat6-sysd /var/lib/${inst}/${inst} - - if [ -e /var/run/${inst}.pid ]; then - kill -9 `cat /var/run/${inst}.pid` || : - rm -f /var/run/${inst}.pid - echo "pkicreate.systemd.servicename=pki-cad@${inst}.service" >> \ - /var/lib/${inst}/conf/CS.cfg || : - /bin/systemctl daemon-reload >/dev/null 2>&1 || : - /bin/systemctl restart pki-cad@${inst}.service || : - else - echo "pkicreate.systemd.servicename=pki-cad@${inst}.service" >> \ - /var/lib/${inst}/conf/CS.cfg || : +if [ -d /etc/sysconfig/pki/ca ]; then + for inst in `ls /etc/sysconfig/pki/ca`; do + if [ ! -e "/etc/systemd/system/pki-cad.target.wants/pki-cad@${inst}.service" ]; then + ln -s "/lib/systemd/system/pki-cad@.service" \ + "/etc/systemd/system/pki-cad.target.wants/pki-cad@${inst}.service" + [ -L /var/lib/${inst}/${inst} ] && unlink /var/lib/${inst}/${inst} + ln -s /usr/sbin/tomcat6-sysd /var/lib/${inst}/${inst} + + if [ -e /var/run/${inst}.pid ]; then + kill -9 `cat /var/run/${inst}.pid` || : + rm -f /var/run/${inst}.pid + echo "pkicreate.systemd.servicename=pki-cad@${inst}.service" >> \ + /var/lib/${inst}/conf/CS.cfg || : + /bin/systemctl daemon-reload >/dev/null 2>&1 || : + /bin/systemctl restart pki-cad@${inst}.service || : + else + echo "pkicreate.systemd.servicename=pki-cad@${inst}.service" >> \ + /var/lib/${inst}/conf/CS.cfg || : + fi fi - fi -done + done +fi /bin/systemctl daemon-reload >/dev/null 2>&1 || : %preun -n pki-ca @@ -719,6 +721,28 @@ fi %changelog +* Fri Oct 28 2011 Matthew Harmsen 9.0.16-1 +- 'pki-setup' +- 'pki-symkey' +- 'pki-native-tools' +- 'pki-util' +- Bugzilla Bug #737122 - DRM: during archiving and recovering, + wrapping unwrapping keys should be done in the token (cfu) +- 'pki-java-tools' +- 'pki-common' +- Bugzilla Bug #744797 - KRA key recovery (retrieve pkcs#12) fails after + the in-place upgrade( CS 8.0->8.1) (cfu) +- 'pki-selinux' +- 'pki-ca' +- Bugzilla Bug #746367 - Typo in the profile name. (jmagne) +- Bugzilla Bug #737122 - DRM: during archiving and recovering, + wrapping unwrapping keys should be done in the token (cfu) +- Bugzilla Bug #749927 - Java class conflicts using Java 7 in Fedora 17 + (rawhide) . . . (mharmsen) +- Bugzilla Bug #749945 - Installation error reported during CA, DRM, + OCSP, and TKS package installation . . . (mharmsen) +- 'pki-silent' + * Thu Sep 22 2011 Matthew Harmsen 9.0.15-1 - Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . . (mharmsen) - Bugzilla Bug #699809 - Convert CS to use systemd (alee) diff --git a/sources b/sources index 1fce21c..785e20a 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -6da9f68121a45aa40730fc92813d4aa6 pki-core-9.0.15.tar.gz +9cb57680d43e099024ccb001ebb64dc0 pki-core-9.0.16.tar.gz