%global provider github %global provider_tld com %global project sgallagher %global repo sscg # https://github.com/sgallagher/sscg %global provider_prefix %{provider}.%{provider_tld}/%{project}/%{repo} %global import_path %{provider_prefix} Name: sscg Version: 2.6.2 Release: 1%{?dist} Summary: Simple SSL certificate generator License: BSD URL: https://%{provider_prefix} Source0: https://%{provider_prefix}/releases/download/%{repo}-%{version}/%{repo}-%{version}.tar.xz BuildRequires: gcc BuildRequires: libtalloc-devel BuildRequires: openssl-devel BuildRequires: popt-devel BuildRequires: libpath_utils-devel BuildRequires: meson BuildRequires: ninja-build BuildRequires: help2man %description A utility to aid in the creation of more secure "self-signed" certificates. The certificates created by this tool are generated in a way so as to create a CA certificate that can be safely imported into a client machine to trust the service certificate without needing to set up a full PKI environment and without exposing the machine to a risk of false signatures from the service certificate. %prep %autosetup -p1 %build %meson %meson_build %install %meson_install %check %meson_test -t 10 %files %license COPYING %doc README.md %{_bindir}/%{name} %{_mandir}/man8/%{name}.8* %changelog * Tue Jun 23 2020 Stephen Gallagher - 2.6.2-1 - Update to 2.6.2 - Handle very short and very long passphrases properly (fixes rhbz#1850183) * Thu Apr 30 2020 Stephen Gallagher - 2.6.1-4 - Rebuild with corrected ELN macro definitions * Thu Apr 30 2020 Stephen Gallagher - 2.6.1-3 - Don't bother running clang-format in the RPM build - Lengthen the test timeout so ARM tests pass * Fri Jan 31 2020 Fedora Release Engineering - 2.6.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Thu Jan 09 2020 Stephen Gallagher - 2.6.1-1 - Bugfixes from upstream * Fri Dec 13 2019 Stephen Gallagher - 2.6.0-2 - Fix incorrect help description for --client-key-file * Fri Dec 13 2019 Stephen Gallagher - 2.6.0-1 - Update to 2.6.0 - Can now generate an empty CRL file. - Can now create and store a Diffie-Hellman parameters (dhparams) file. - Support for setting a password on private keys. - Support for generating a client authentication certificate and key. - Better support for OpenSSL 1.0 * Sat Jul 27 2019 Fedora Release Engineering - 2.5.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Sun Feb 03 2019 Fedora Release Engineering - 2.5.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Wed Nov 28 2018 Stephen Gallagher - 2.5.1-1 - Update to 2.5.1 - Fixes discovered by automated testing. * Wed Nov 28 2018 Stephen Gallagher - 2.5.0-1 - Update to 2.5.0 - Auto-detect the hash algorithm to use by default. * Tue Nov 27 2018 Stephen Gallagher - 2.4.0-1 - Update to 2.4.0 - Autodetect the minimum key strength from the system security level. - Disallow setting a key strength below the system minimum. - Drop upstreamed patches * Mon Sep 17 2018 Stephen Gallagher - 2.3.3-4 - Add a manpage. * Sat Jul 14 2018 Fedora Release Engineering - 2.3.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Fri Feb 09 2018 Fedora Release Engineering - 2.3.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild * Fri Feb 02 2018 Stephen Gallagher - 2.3.3-1 - Update to 2.3.3 - Do not overwrite destination files without --force * Thu Jan 25 2018 Stephen Gallagher - 2.3.2-1 - Update to 2.3.2 - Properly support hostnames up to 64 characters - Resolves: rhbz#1535537 * Tue Jan 02 2018 Stephen Gallagher - 2.3.1-2 - Skip tests on 32-bit ARM for now * Tue Jan 02 2018 Stephen Gallagher - 2.3.1-1 - Update to 2.3.1 - Bundle popt 1.16 on older releases like EPEL. * Mon Dec 18 2017 Stephen Gallagher - 2.3.0-1 - Update to 2.3.0 - Switch to meson build system - Add support for non-DNS subjectAlternativeName values (issue #4) * Thu Sep 21 2017 Stephen Gallagher - 2.2.0-1 - Reorder combined PEM file - Resolves: RHBZ#1494208 * Wed Sep 20 2017 Stephen Gallagher - 2.1.0-1 - Add --email argument for setting emailAddress in the issuer * Thu Aug 03 2017 Fedora Release Engineering - 2.0.4-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild * Thu Jul 27 2017 Fedora Release Engineering - 2.0.4-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild * Mon Apr 03 2017 Stephen Gallagher - 2.0.4-2 - Bump release to perform taskotron tests * Tue Mar 21 2017 Stephen Gallagher - 2.0.4-1 - Update to 2.0.4 - Addresses a potential race-condition when the key and certificate share the same file. * Wed Mar 08 2017 Stephen Gallagher - 2.0.3-1 - Update to 2.0.3 - Adds support for setting the file mode on the output certificates and keys. * Fri Mar 03 2017 Stephen Gallagher - 2.0.2-1 - Update to 2.0.2 - Always run with umask(077) * Fri Mar 03 2017 Stephen Gallagher - 2.0.1-1 - Update to 2.0.1 - Fix an issue with passing certificate lifetime explicitly * Thu Feb 16 2017 Stephen Gallagher - 2.0.0-1 - Update to 2.0.0 * Thu Feb 16 2017 Stephen Gallagher - 1.1.0-6 - Exclude PPC64 from the build since it doesn't support linking to OpenSSL * Sat Feb 11 2017 Fedora Release Engineering - 1.1.0-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild * Wed Nov 23 2016 Stephen Gallagher - 1.1.0-4 - Use compat-openssl10-devel on F26+ * Thu Jul 21 2016 Fedora Release Engineering - 1.1.0-3 - https://fedoraproject.org/wiki/Changes/golang1.7 * Tue May 31 2016 Stephen Gallagher - 1.1.0-2 - Debundle spacelog * Wed May 25 2016 Stephen Gallagher - 1.1.0-1 - Update to 1.1.0 - Add support for signing service keys with an existing CA * Wed May 25 2016 Stephen Gallagher - 1.0.4-1 - Add support for exporting the CA private key - Fix incorrect output from -version - Add README.md * Tue May 24 2016 Stephen Gallagher - 1.0.3-1 - Only sign certificates after all extensions have been added * Mon May 23 2016 Stephen Gallagher - 1.0.2-1 - Generate x509v3 certificates * Mon May 23 2016 Stephen Gallagher - 1.0.1-1 - Fix issue with temporary file creation * Mon May 23 2016 Stephen Gallagher - 1.0.0-1 - New upstream release 1.0.0 - Rewritten in Go - Runtime depends only on OpenSSL, no more Python - Support for writing certificate and key in a single file * Wed May 18 2016 Stephen Gallagher - 0.4.1-4 - Add requirement on python-setuptools * Fri Feb 05 2016 Fedora Release Engineering - 0.4.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild * Tue Nov 10 2015 Fedora Release Engineering - 0.4.1-2 - Rebuilt for https://fedoraproject.org/wiki/Changes/python3.5 * Fri Jun 19 2015 Fedora Release Engineering - 0.4.1-1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild * Mon Mar 30 2015 Stephen Gallagher 0.4.1-1 - Change default CA location to match service certificate - Improve error handling * Tue Mar 24 2015 Stephen Gallagher 0.4.0-1 - Spec file cleanups - PEP8 Cleanups - Make location arguments optional * Mon Mar 23 2015 Stephen Gallagher 0.3.0-1 - Rename to sscg - Only build with default python interpreter * Tue Mar 17 2015 Stephen Gallagher 0.2.1-1 - Include the LICENSE file in the tarball * Tue Mar 17 2015 Stephen Gallagher 0.2-2 - Include the license in the build RPMs * Tue Mar 17 2015 Stephen Gallagher 0.2-1 - Add support for namedConstraints - Add support for subjectAltNames - Fix packaging issues from Fedora package review * Mon Mar 16 2015 Stephen Gallagher 0.1-2 - Update BuildRequires * Mon Mar 16 2015 Stephen Gallagher 0.1-1 - First packaging