[Pkg-freeipa-devel] certmonger: Changes to 'master'
Timo Aaltonen
tjaalton at moszumanska.debian.org
Mon Aug 7 14:58:43 UTC 2017
Makefile.am | 7
README | 39
README.md | 46
STATUS | 11
certmonger.spec | 70
configure.ac | 105 +
dbus/Makefile.am | 4
debian/changelog | 12
debian/control | 6
debian/copyright | 2
debian/patches/fix-keythi-h-path.diff | 4
debian/patches/nspr4_path | 17
debian/patches/series | 2
debian/patches/use-dbus-run-session.diff | 31
debian/rules | 2
debian/watch | 4
doc/api.txt | 2
doc/helpers.txt | 18
doc/helpers/anchor-submit.py | 117 +
doc/helpers/local-cryptography.py | 337 ++++
doc/helpers/proxy-submit.py | 124 +
doc/scep.odp |binary
doc/submit.txt | 5
po/POTFILES.in | 4
po/ach.po | 1072 +++++++++-----
po/af.po | 1072 +++++++++-----
po/af_ZA.po | 1072 +++++++++-----
po/aln.po | 1072 +++++++++-----
po/am.po | 1072 +++++++++-----
po/ar.po | 1072 +++++++++-----
po/as.po | 1072 +++++++++-----
po/ast.po | 1072 +++++++++-----
po/az.po | 1072 +++++++++-----
po/bal.po | 1072 +++++++++-----
po/be.po | 1072 +++++++++-----
po/bg.po | 1109 +++++++++-----
po/bn.po | 1072 +++++++++-----
po/bn_IN.po | 1072 +++++++++-----
po/bo.po | 1072 +++++++++-----
po/br.po | 1072 +++++++++-----
po/brx.po | 1072 +++++++++-----
po/bs.po | 1072 +++++++++-----
po/ca.po | 1189 +++++++++------
po/certmonger.pot | 1076 +++++++++-----
po/cs.po | 1072 +++++++++-----
po/cs_CZ.po | 1074 +++++++++-----
po/cy.po | 1072 +++++++++-----
po/da.po | 1111 +++++++++-----
po/de.po | 1119 +++++++++-----
po/de_CH.po | 1072 +++++++++-----
po/dz.po | 1072 +++++++++-----
po/el.po | 1072 +++++++++-----
po/en_GB.po | 1072 +++++++++-----
po/eo.po | 1072 +++++++++-----
po/es.po | 1502 ++++++++++++--------
po/es_ES.po | 1072 +++++++++-----
po/et.po | 1072 +++++++++-----
po/eu.po | 1097 +++++++++-----
po/eu_ES.po | 1072 +++++++++-----
po/fa.po | 1072 +++++++++-----
po/fa_IR.po | 1072 +++++++++-----
po/fi.po | 1072 +++++++++-----
po/fr.po | 1116 +++++++++-----
po/ga.po | 1072 +++++++++-----
po/gl.po | 1072 +++++++++-----
po/gu.po | 1098 +++++++++-----
po/he.po | 1072 +++++++++-----
po/hi.po | 1072 +++++++++-----
po/hr.po | 1072 +++++++++-----
po/hr_HR.po | 1072 +++++++++-----
po/hu.po | 1177 +++++++++------
po/hy.po | 1072 +++++++++-----
po/ia.po | 1072 +++++++++-----
po/id.po | 1109 +++++++++-----
po/ilo.po | 1072 +++++++++-----
po/is.po | 1072 +++++++++-----
po/it.po | 1111 +++++++++-----
po/it_IT.po | 1072 +++++++++-----
po/ja.po | 1218 ++++++++++------
po/ja_JP.po | 1072 +++++++++-----
po/ka.po | 1072 +++++++++-----
po/kk.po | 1072 +++++++++-----
po/km.po | 1072 +++++++++-----
po/kn.po | 1072 +++++++++-----
po/ko.po | 1072 +++++++++-----
po/ks.po | 1072 +++++++++-----
po/ku.po | 1072 +++++++++-----
po/ky.po | 1072 +++++++++-----
po/la.po | 1072 +++++++++-----
po/lo.po | 1072 +++++++++-----
po/lt.po | 1120 +++++++++-----
po/lv.po | 1072 +++++++++-----
po/mai.po | 1072 +++++++++-----
po/mg.po | 1072 +++++++++-----
po/mk.po | 1072 +++++++++-----
po/ml.po | 1072 +++++++++-----
po/mn.po | 1072 +++++++++-----
po/mr.po | 1072 +++++++++-----
po/ms.po | 1072 +++++++++-----
po/ms_MY.po | 1072 +++++++++-----
po/my.po | 1072 +++++++++-----
po/nb.po | 1098 +++++++++-----
po/nds.po | 1072 +++++++++-----
po/ne.po | 1072 +++++++++-----
po/nl.po | 1128 +++++++++------
po/nn.po | 1072 +++++++++-----
po/no.po | 1072 +++++++++-----
po/nso.po | 1072 +++++++++-----
po/or.po | 1072 +++++++++-----
po/pa.po | 1072 +++++++++-----
po/pl.po | 1644 +++++++++++++---------
po/pt.po | 1118 +++++++++-----
po/pt_BR.po | 1223 ++++++++++------
po/ro.po | 1072 +++++++++-----
po/ru.po | 1105 +++++++++-----
po/ru_RU.po | 1072 +++++++++-----
po/si.po | 1072 +++++++++-----
po/sk.po | 1072 +++++++++-----
po/sl.po | 1072 +++++++++-----
po/sq.po | 1072 +++++++++-----
po/sr.po | 1072 +++++++++-----
po/sr at latin.po | 1072 +++++++++-----
po/sv.po | 1480 +++++++++++--------
po/ta.po | 1096 +++++++++-----
po/ta_IN.po | 1072 +++++++++-----
po/te.po | 1072 +++++++++-----
po/tg.po | 1072 +++++++++-----
po/th.po | 1072 +++++++++-----
po/tl.po | 1072 +++++++++-----
po/tr.po | 1096 +++++++++-----
po/uk.po | 1467 +++++++++++--------
po/uk_UA.po | 1072 +++++++++-----
po/ur.po | 1072 +++++++++-----
po/uz.po | 1072 +++++++++-----
po/vi.po | 1072 +++++++++-----
po/wo.po | 1072 +++++++++-----
po/xh.po | 1072 +++++++++-----
po/zh_CN.GB2312.po | 1072 +++++++++-----
po/zh_CN.po | 1127 +++++++++------
po/zh_HK.po | 1072 +++++++++-----
po/zh_TW.Big5.po | 1072 +++++++++-----
po/zh_TW.po | 1111 +++++++++-----
po/zu.po | 1072 +++++++++-----
src/Makefile.am | 12
src/cadata.c | 2
src/certext.c | 6
src/certmaster-getcert.1.in | 1
src/certmaster.c | 9
src/certmonger-certmaster-submit.8.in | 2
src/certmonger-dogtag-ipa-renew-agent-submit.8.in | 2
src/certmonger-dogtag-submit.8.in | 2
src/certmonger-ipa-submit.8.in | 58
src/certmonger-local-submit.8.in | 2
src/certmonger-scep-submit.8.in | 2
src/certmonger.8.in | 2
src/certsave-n.c | 2
src/certsave-o.c | 5
src/cm.c | 2
src/csrgen-n.c | 5
src/csrgen-o.c | 39
src/csrgen.c | 4
src/csrgen.h | 4
src/dogtag.c | 8
src/getcert-add-ca.1.in | 1
src/getcert-add-scep-ca.1.in | 1
src/getcert-list-cas.1.in | 1
src/getcert-list.1.in | 6
src/getcert-modify-ca.1.in | 1
src/getcert-refresh-ca.1.in | 2
src/getcert-refresh.1.in | 1
src/getcert-rekey.1.in | 180 ++
src/getcert-remove-ca.1.in | 1
src/getcert-request.1.in | 4
src/getcert-resubmit.1.in | 4
src/getcert-start-tracking.1.in | 4
src/getcert-status.1.in | 1
src/getcert-stop-tracking.1.in | 1
src/getcert.1.in | 1
src/getcert.c | 217 ++
src/ipa-getcert.1.in | 1
src/ipa.c | 100 +
src/iterate.c | 58
src/json.c | 14
src/keygen-n.c | 40
src/keygen-o.c | 2
src/keyiread-n.c | 7
src/keyiread-o.c | 6
src/local-getcert.1.in | 1
src/local.c | 20
src/main.c | 2
src/notify.c | 162 --
src/oiddict.c | 2
src/pkcs7.c | 115 -
src/prefs-o.c | 9
src/scep.c | 52
src/scepgen-n.c | 35
src/scepgen-o.c | 70
src/selfsign-getcert.1.in | 1
src/srvloc.c | 11
src/srvloc.h | 2
src/store-files.c | 90 +
src/store-gen.c | 24
src/store-int.h | 1
src/store.h | 5
src/submit-d.c | 20
src/submit-e.c | 22
src/submit-e.h | 1
src/submit-n.c | 43
src/submit-o.c | 204 ++
src/submit-o.h | 3
src/submit-x.c | 35
src/submit-x.h | 1
src/subproc.c | 67
src/tdbus.c | 2
src/tdbus.h | 1
src/tdbush.c | 63
src/tdbusm.c | 5
src/tlslayer-int.h | 44
src/tlslayer-n.c | 209 --
src/tlslayer-o.c | 100 -
src/tlslayer.c | 247 ---
src/tlslayer.h | 37
src/util-o.c | 449 +++++-
src/util-o.h | 42
tests/001-keyiread-dsa/expected.out | 21
tests/001-keyiread-dsa/expected.out.2048 | 4
tests/001-keyiread-dsa/run.sh | 12
tests/002-keygen-dsa/expected.out | 3
tests/002-keygen-dsa/expected.out.2 | 3
tests/002-keygen-dsa/expected.out.3 | 3
tests/002-keygen-dsa/run.sh | 2
tests/003-csrgen-dsa/run.sh | 2
tests/003-csrgen-ec/run.sh | 2
tests/003-csrgen-rsa/expected.out | 5
tests/003-csrgen-rsa/run.sh | 2
tests/003-csrgen/expected.out | 5
tests/003-csrgen/run.sh | 2
tests/010-iterate/expected.out | 42
tests/010-iterate/run.sh | 2
tests/014-prefs/expected.out | 8
tests/026-local/expected.out | 2
tests/026-local/run.sh | 2
tests/028-dbus/expected.out | 2
tests/028-dbus/expected.out.nodsa | 1038 +++++++++++++
tests/028-dbus/run.sh | 4
tests/028-dbus/walk.py | 8
tests/032-chain/run.sh | 2
tests/033-scep/run.sh | 2
tests/Makefile.am | 205 ++
tests/docker/build-and-test.sh | 22
tests/docker/generate.sh | 83 +
tests/run-tests.sh | 1
tests/tools/Makefile.am | 17
tests/tools/checksig.c | 4
tests/tools/csrgen.c | 5
tests/tools/dates.c | 1
tests/tools/json-utf8.c | 5
tests/tools/json.c | 5
tests/tools/keyiread.c | 24
tests/tools/pk7decrypt.c | 8
tests/tools/pk7verify.c | 8
tests/tools/srv.c | 5
262 files changed, 86371 insertions(+), 49732 deletions(-)
New commits:
commit 45f69dd5c348ab086650a4fb40596e1394154237
Author: Timo Aaltonen <tjaalton at debian.org>
Date: Mon Aug 7 17:58:25 2017 +0300
releasing package certmonger version 0.79.3-1
diff --git a/debian/changelog b/debian/changelog
index 7eded98..34ca4c4 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,4 +1,4 @@
-certmonger (0.79.3-1) UNRELEASED; urgency=medium
+certmonger (0.79.3-1) unstable; urgency=medium
* New upstream release.
* control, copyright, watch: Update urls.
@@ -8,7 +8,7 @@ certmonger (0.79.3-1) UNRELEASED; urgency=medium
launch in tests. (Closes: #836084)
* rules: Enable parallel build.
- -- Timo Aaltonen <tjaalton at debian.org> Mon, 07 Aug 2017 12:40:09 +0300
+ -- Timo Aaltonen <tjaalton at debian.org> Mon, 07 Aug 2017 17:58:14 +0300
certmonger (0.78.6-4) unstable; urgency=medium
commit 59a57e02f5df7ad5df7854d31d750f38a0407970
Author: Timo Aaltonen <tjaalton at debian.org>
Date: Mon Aug 7 15:04:03 2017 +0300
rules: Enable parallel build.
diff --git a/debian/changelog b/debian/changelog
index 6e55775..7eded98 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -6,6 +6,7 @@ certmonger (0.79.3-1) UNRELEASED; urgency=medium
* control: Migrate to OpenSSL 1.1. (Closes: #851088)
* control, use-dbus-run-session.diff: Use dbus-run-session instead of dbus-
launch in tests. (Closes: #836084)
+ * rules: Enable parallel build.
-- Timo Aaltonen <tjaalton at debian.org> Mon, 07 Aug 2017 12:40:09 +0300
diff --git a/debian/rules b/debian/rules
index 423733b..7174b85 100755
--- a/debian/rules
+++ b/debian/rules
@@ -37,4 +37,4 @@ override_dh_clean:
# rm -f po/*.gmo
%:
- dh $@ --with quilt,autoreconf,systemd --builddirectory=build/
+ dh $@ --parallel --with quilt,autoreconf,systemd --builddirectory=build/
commit dcbd6c5970ea5663e9023098c119ffc416464231
Author: Timo Aaltonen <tjaalton at debian.org>
Date: Mon Aug 7 13:51:14 2017 +0300
control, use-dbus-run-session.diff: Use dbus-run-session instead of dbus- launch in tests. (Closes: #836084)
diff --git a/debian/changelog b/debian/changelog
index 4f5405c..6e55775 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -4,6 +4,8 @@ certmonger (0.79.3-1) UNRELEASED; urgency=medium
* control, copyright, watch: Update urls.
* patches: Drop nspr4_path, refresh others.
* control: Migrate to OpenSSL 1.1. (Closes: #851088)
+ * control, use-dbus-run-session.diff: Use dbus-run-session instead of dbus-
+ launch in tests. (Closes: #836084)
-- Timo Aaltonen <tjaalton at debian.org> Mon, 07 Aug 2017 12:40:09 +0300
diff --git a/debian/control b/debian/control
index 53a5f9b..a1f0a4e 100644
--- a/debian/control
+++ b/debian/control
@@ -5,7 +5,7 @@ Maintainer: Debian FreeIPA Team <pkg-freeipa-devel at lists.alioth.debian.org>
Uploaders: Timo Aaltonen <tjaalton at debian.org>
Build-Depends: debhelper (>= 9), dh-autoreconf, quilt,
autopoint,
- dbus-x11,
+ dbus (>= 1.8),
dh-systemd,
dos2unix,
expect,
diff --git a/debian/patches/series b/debian/patches/series
index 7812f3d..fdaca8f 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -1,2 +1,3 @@
fix-keythi-h-path.diff
fix-service-environment.diff
+use-dbus-run-session.diff
diff --git a/debian/patches/use-dbus-run-session.diff b/debian/patches/use-dbus-run-session.diff
new file mode 100644
index 0000000..4dfebee
--- /dev/null
+++ b/debian/patches/use-dbus-run-session.diff
@@ -0,0 +1,31 @@
+--- a/tests/Makefile.am
++++ b/tests/Makefile.am
+@@ -427,9 +427,9 @@ endif
+
+ check: all
+ for required in certutil cmsutil pk12util openssl diff cmp mktemp \
+- dos2unix unix2dos dbus-launch ; do \
++ dos2unix unix2dos dbus-run-session ; do \
+ which $$required || exit 1; \
+ done
+ env srcdir=$(srcdir) \
+ builddir=$(top_builddir)/tests \
+- $(srcdir)/run-tests.sh $(subdirs)
++ dbus-run-session -- $(srcdir)/run-tests.sh $(subdirs)
+--- a/tests/run-tests.sh
++++ b/tests/run-tests.sh
+@@ -17,13 +17,11 @@ fi
+ mkdir -m 500 "$tmpdir"/rosubdir
+ mkdir -m 700 "$tmpdir"/rwsubdir
+ trap 'rm -f "$tmpfile"; chmod u+w "$tmpdir"/* ; rm -fr "$tmpdir"' EXIT
+-unset DBUS_SESSION_BUS_ADDRESS
+-eval `dbus-launch --sh-syntax`
+ if test -z "$DBUS_SESSION_BUS_ADDRESS" ; then
+ echo Error launching session bus.
+ exit 1
+ else
+- trap 'rm -f "$tmpfile"; chmod u+w "$tmpdir"/* ; rm -fr "$tmpdir"; kill "$DBUS_SESSION_BUS_PID"' EXIT
++ trap 'rm -f "$tmpfile"; chmod u+w "$tmpdir"/* ; rm -fr "$tmpdir"' EXIT
+ fi
+
+ srcdir=${srcdir:-`pwd`}
commit aaa0c70ee585d7ae4bc2acd520da4f8f21077660
Author: Timo Aaltonen <tjaalton at debian.org>
Date: Mon Aug 7 13:01:50 2017 +0300
control: Migrate to OpenSSL 1.1. (Closes: #851088)
diff --git a/debian/changelog b/debian/changelog
index 86ab553..4f5405c 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -3,6 +3,7 @@ certmonger (0.79.3-1) UNRELEASED; urgency=medium
* New upstream release.
* control, copyright, watch: Update urls.
* patches: Drop nspr4_path, refresh others.
+ * control: Migrate to OpenSSL 1.1. (Closes: #851088)
-- Timo Aaltonen <tjaalton at debian.org> Mon, 07 Aug 2017 12:40:09 +0300
diff --git a/debian/control b/debian/control
index e011cd7..53a5f9b 100644
--- a/debian/control
+++ b/debian/control
@@ -18,7 +18,7 @@ Build-Depends: debhelper (>= 9), dh-autoreconf, quilt,
libnss3-tools,
libnss3-dev,
libpopt-dev,
- libssl1.0-dev,
+ libssl-dev,
libsystemd-dev [linux-any],
libtevent-dev,
libxml2-dev,
commit 340a302f30b2f113451e346ce8f394cec55d9c09
Author: Timo Aaltonen <tjaalton at debian.org>
Date: Mon Aug 7 13:00:31 2017 +0300
patches: Drop nspr4_path, refresh others.
diff --git a/debian/changelog b/debian/changelog
index 9a16c38..86ab553 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -2,6 +2,7 @@ certmonger (0.79.3-1) UNRELEASED; urgency=medium
* New upstream release.
* control, copyright, watch: Update urls.
+ * patches: Drop nspr4_path, refresh others.
-- Timo Aaltonen <tjaalton at debian.org> Mon, 07 Aug 2017 12:40:09 +0300
diff --git a/debian/patches/fix-keythi-h-path.diff b/debian/patches/fix-keythi-h-path.diff
index f820c9e..2505211 100644
--- a/debian/patches/fix-keythi-h-path.diff
+++ b/debian/patches/fix-keythi-h-path.diff
@@ -1,9 +1,7 @@
Description: Fix configure test to find keythi.h
-diff --git a/configure.ac b/configure.ac
-index 556ee60..d78a72b 100644
--- a/configure.ac
+++ b/configure.ac
-@@ -447,7 +447,7 @@ if ! ${configure_dist_target_only:-false} ; then
+@@ -594,7 +594,7 @@ if ! ${configure_dist_target_only:-false
AC_CHECK_TYPE(SECKEYDSAPublicKey,,,
[
AC_INCLUDES_DEFAULT
diff --git a/debian/patches/nspr4_path b/debian/patches/nspr4_path
deleted file mode 100644
index e6ad14a..0000000
--- a/debian/patches/nspr4_path
+++ /dev/null
@@ -1,17 +0,0 @@
---- a/src/tlslayer-n.c
-+++ b/src/tlslayer-n.c
-@@ -23,10 +23,10 @@
- #include <stdlib.h>
- #include <talloc.h>
-
--#include <nspr.h>
--#include <prnetdb.h>
--#include <nss.h>
--#include <ssl.h>
-+#include <nspr/nspr.h>
-+#include <nspr/prnetdb.h>
-+#include <nss/nss.h>
-+#include <nss/ssl.h>
-
- #include "tlslayer.h"
- #include "tlslayer-int.h"
diff --git a/debian/patches/series b/debian/patches/series
index c6c99ca..7812f3d 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -1,3 +1,2 @@
-nspr4_path
fix-keythi-h-path.diff
fix-service-environment.diff
commit 60c8494a1714fdf18043f21507f77e2c7a66bafb
Author: Timo Aaltonen <tjaalton at debian.org>
Date: Mon Aug 7 12:52:00 2017 +0300
control, copyright, watch: Update urls.
diff --git a/debian/changelog b/debian/changelog
index 91e3545..9a16c38 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,6 +1,7 @@
certmonger (0.79.3-1) UNRELEASED; urgency=medium
* New upstream release.
+ * control, copyright, watch: Update urls.
-- Timo Aaltonen <tjaalton at debian.org> Mon, 07 Aug 2017 12:40:09 +0300
diff --git a/debian/control b/debian/control
index abd0bb1..e011cd7 100644
--- a/debian/control
+++ b/debian/control
@@ -28,7 +28,7 @@ Build-Depends: debhelper (>= 9), dh-autoreconf, quilt,
pkg-config,
uuid-dev,
Standards-Version: 3.9.6
-Homepage: https://fedorahosted.org/certmonger/
+Homepage: https://pagure.io/certmonger/
Vcs-Git: git://anonscm.debian.org/pkg-freeipa/certmonger.git
Vcs-Browser: http://anonscm.debian.org/cgit/pkg-freeipa/certmonger.git
diff --git a/debian/copyright b/debian/copyright
index a88df1c..21970ab 100644
--- a/debian/copyright
+++ b/debian/copyright
@@ -1,6 +1,6 @@
Format: http://dep.debian.net/deps/dep5
Upstream-Name: certmonger
-Source: https://fedorahosted.org/certmonger
+Source: https://pagure.io/certmonger
Files: *
Copyright: 2009-2011 Red Hat, Inc.
diff --git a/debian/watch b/debian/watch
index 4a4fb06..4153704 100644
--- a/debian/watch
+++ b/debian/watch
@@ -1,3 +1,3 @@
-#git=git://git.fedorahosted.org/certmonger.git
+#git=https://pagure.io/certmonger.git
version=3
-https://fedorahosted.org/released/certmonger/certmonger-(.*)\.tar\.gz
+https://releases.pagure.org/certmonger/certmonger-(.*)\.tar\.gz
commit 351f10d2758d627d08f21833a79840fd45cfdfe8
Author: Timo Aaltonen <tjaalton at debian.org>
Date: Mon Aug 7 12:51:41 2017 +0300
New upstream release.
diff --git a/debian/changelog b/debian/changelog
index 5c15b2e..91e3545 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,9 @@
+certmonger (0.79.3-1) UNRELEASED; urgency=medium
+
+ * New upstream release.
+
+ -- Timo Aaltonen <tjaalton at debian.org> Mon, 07 Aug 2017 12:40:09 +0300
+
certmonger (0.78.6-4) unstable; urgency=medium
* control: Build with libssl1.0-dev. (Closes: #828261)
commit 6a8d4299d97ad907696791b176636156ddb7ffac
Author: Nalin Dahyabhai <nalin at redhat.com>
Date: Tue Feb 28 00:56:00 2017 -0500
Tag 0.79.3
Signed-off-by: Nalin Dahyabhai <nalin at redhat.com>
diff --git a/certmonger.spec b/certmonger.spec
index 343d9d4..7c81d94 100644
--- a/certmonger.spec
+++ b/certmonger.spec
@@ -25,7 +25,7 @@
%endif
Name: certmonger
-Version: 0.79.2
+Version: 0.79.3
Release: 1%{?dist}
Summary: Certificate status monitor and PKI enrollment client
@@ -33,7 +33,7 @@ Group: System Environment/Daemons
License: GPLv3+
URL: http://pagure.io/certmonger/
Source0: http://releases.pagure.org/certmonger/certmonger-%{version}.tar.gz
-Source1: http://releases.pagure.org/certmonger/certmonger-%{version}.tar.gz.sig
+#Source1: http://releases.pagure.org/certmonger/certmonger-%{version}.tar.gz.sig
BuildRoot: %(mktemp -ud %{_tmppath}/%{name}-%{version}-%{release}-XXXXXX)
BuildRequires: openldap-devel
@@ -220,7 +220,7 @@ exit 0
%files -f %{name}.lang
%defattr(-,root,root,-)
-%doc README LICENSE STATUS doc/*.txt
+%doc README.md LICENSE STATUS doc/*.txt
%config(noreplace) %{_sysconfdir}/dbus-1/system.d/*
%{_datadir}/dbus-1/services/*
%dir %{_sysconfdir}/certmonger
@@ -243,6 +243,13 @@ exit 0
%endif
%changelog
+* Tue Feb 27 2017 Nalin Dahyabhai <nalin at redhat.com> 0.79.3-1
+- update to 0.79.3:
+ - fix self-signing self-test cases that used DSA or EC keys
+
+* Mon Feb 27 2017 Nalin Dahyabhai <nalin at redhat.com> 0.79.2-2
+- update %%docs list because README is now README.md
+
* Mon Feb 27 2017 Nalin Dahyabhai <nalin at redhat.com> 0.79.2-1
- update to 0.79.2:
- fix 'make distcheck' target
@@ -274,6 +281,12 @@ exit 0
- resync .spec file with Fedora
- upstream project migrated from fedorahosted.org to pagure.io
+* Fri Feb 10 2017 Fedora Release Engineering <releng at fedoraproject.org> - 0.78.6-6
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
+
+* Sat Jan 21 2017 Igor Gnatenko <ignatenko at redhat.com> - 0.78.6-5
+- Rebuild for xmlrpc-c
+
* Wed Jul 6 2016 Nalin Dahyabhai <nalin at redhat.com> 0.78.6-4
- add backported fix to wait a reasonable amount of time after calling the
'resubmit' method for a new certificate to be issued when we're exercising
diff --git a/configure.ac b/configure.ac
index 5e4dfb2..1be5eda 100644
--- a/configure.ac
+++ b/configure.ac
@@ -1,4 +1,4 @@
-AC_INIT(certmonger,0.79.2)
+AC_INIT(certmonger,0.79.3)
AM_INIT_AUTOMAKE([foreign subdir-objects])
AC_CONFIG_MACRO_DIR(m4)
AM_MAINTAINER_MODE([disable])
commit dd537bcc644dea163b4c8f3de08d73a60876449d
Author: Nalin Dahyabhai <nalin at redhat.com>
Date: Tue Feb 28 00:53:42 2017 -0500
Fix conversions of bit lengths to byte lengths
Fix a number of places where we weren't correctly converting from length
in bits to length in bytes, and one in the self-tests where the newest
version of NSS complains if the size of a signature was too large
because it was not converted at all.
Signed-off-by: Nalin Dahyabhai <nalin at redhat.com>
diff --git a/src/certext.c b/src/certext.c
index be610da..a872443 100644
--- a/src/certext.c
+++ b/src/certext.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2009,2011,2012,2013,2014,2015 Red Hat, Inc.
+ * Copyright (C) 2009,2011,2012,2013,2014,2015,2017 Red Hat, Inc.
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
@@ -1311,7 +1311,7 @@ cm_certext_build_self_akid(struct cm_store_entry *entry, PLArenaPool *arena)
spki = SECKEY_DecodeDERSubjectPublicKeyInfo(&pubkeyinfo);
}
if (spki != NULL) {
- pubkey.len = spki->subjectPublicKey.len / 8;
+ pubkey.len = howmany(spki->subjectPublicKey.len, 8);
pubkey.data = PORT_ArenaZAlloc(arena,
pubkey.len);
if (pubkey.data != NULL) {
@@ -1384,7 +1384,7 @@ cm_certext_build_skid(struct cm_store_entry *entry, PLArenaPool *arena)
spki = SECKEY_DecodeDERSubjectPublicKeyInfo(&pubkeyinfo);
}
if (spki != NULL) {
- pubkey.len = spki->subjectPublicKey.len / 8;
+ pubkey.len = howmany(spki->subjectPublicKey.len, 8);
pubkey.data = PORT_ArenaZAlloc(arena,
pubkey.len);
if (pubkey.data != NULL) {
diff --git a/src/keygen-n.c b/src/keygen-n.c
index 0733968..08f0049 100644
--- a/src/keygen-n.c
+++ b/src/keygen-n.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2009,2010,2011,2012,2013,2014,2015 Red Hat, Inc.
+ * Copyright (C) 2009,2010,2011,2012,2013,2014,2015,2017 Red Hat, Inc.
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
@@ -707,7 +707,7 @@ retry_gen:
if (pubkeyinfo != NULL) {
pubhex = cm_store_hex_from_bin(NULL,
pubkeyinfo->subjectPublicKey.data,
- pubkeyinfo->subjectPublicKey.len / 8);
+ howmany(pubkeyinfo->subjectPublicKey.len, 8));
SECKEY_DestroySubjectPublicKeyInfo(pubkeyinfo);
} else {
pubhex = "";
diff --git a/src/keyiread-n.c b/src/keyiread-n.c
index eec4cdf..89913aa 100644
--- a/src/keyiread-n.c
+++ b/src/keyiread-n.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2009,2010,2011,2012,2013,2014,2015 Red Hat, Inc.
+ * Copyright (C) 2009,2010,2011,2012,2013,2014,2015,2017 Red Hat, Inc.
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
@@ -18,6 +18,7 @@
#include "config.h"
#include <sys/types.h>
+#include <sys/param.h>
#include <sys/wait.h>
#include <errno.h>
#include <fcntl.h>
@@ -531,7 +532,7 @@ cm_keyiread_n_main(int fd, struct cm_store_ca *ca, struct cm_store_entry *entry,
spki = SECKEY_DecodeDERSubjectPublicKeyInfo(info);
pubhex = cm_store_hex_from_bin(NULL,
spki->subjectPublicKey.data,
- spki->subjectPublicKey.len / 8);
+ howmany(spki->subjectPublicKey.len, 8));
fprintf(fp, "%s/%d/%s/%s%s%s\n", alg, size,
pubihex,
pubhex,
@@ -575,7 +576,7 @@ cm_keyiread_n_main(int fd, struct cm_store_ca *ca, struct cm_store_entry *entry,
spki = SECKEY_DecodeDERSubjectPublicKeyInfo(info);
pubhex = cm_store_hex_from_bin(NULL,
spki->subjectPublicKey.data,
- spki->subjectPublicKey.len / 8);
+ howmany(spki->subjectPublicKey.len, 8));
fprintf(fp, "%s/%d/%s/%s\n", alg, size,
pubihex,
pubhex);
diff --git a/tests/tools/checksig.c b/tests/tools/checksig.c
index e690911..810174d 100644
--- a/tests/tools/checksig.c
+++ b/tests/tools/checksig.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2014 Red Hat, Inc.
+ * Copyright (C) 2014,2017 Red Hat, Inc.
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
@@ -18,6 +18,7 @@
#include "../../src/config.h"
#include <sys/types.h>
+#include <sys/param.h>
#include <sys/select.h>
#include <errno.h>
#include <limits.h>
@@ -101,6 +102,7 @@ main(int argc, char **argv)
printf("error finding public key\n");
return 1;
}
+ signed_data.signature.len = howmany(signed_data.signature.len, 8);
if (VFY_VerifyDataWithAlgorithmID(signed_data.data.data,
signed_data.data.len,
pubkey,
commit ea5183fa5a308fbf4a76368e33f157e741ae546b
Author: Nalin Dahyabhai <nalin at redhat.com>
Date: Sun Feb 26 15:08:56 2017 -0500
Tag 0.79.2
Signed-off-by: Nalin Dahyabhai <nalin at redhat.com>
diff --git a/certmonger.spec b/certmonger.spec
index 733945d..343d9d4 100644
--- a/certmonger.spec
+++ b/certmonger.spec
@@ -25,7 +25,7 @@
%endif
Name: certmonger
-Version: 0.79.1
+Version: 0.79.2
Release: 1%{?dist}
Summary: Certificate status monitor and PKI enrollment client
@@ -243,8 +243,12 @@ exit 0
%endif
%changelog
+* Mon Feb 27 2017 Nalin Dahyabhai <nalin at redhat.com> 0.79.2-1
+- update to 0.79.2:
+ - fix 'make distcheck' target
+
* Sun Feb 19 2017 Nalin Dahyabhai <nalin at redhat.com> 0.79.1-1
-- update to 0.79:
+- update to 0.79.1:
- update translations
- fix 'make archive' target
diff --git a/configure.ac b/configure.ac
index c6b68fd..5e4dfb2 100644
--- a/configure.ac
+++ b/configure.ac
@@ -1,4 +1,4 @@
-AC_INIT(certmonger,0.79.1)
+AC_INIT(certmonger,0.79.2)
AM_INIT_AUTOMAKE([foreign subdir-objects])
AC_CONFIG_MACRO_DIR(m4)
AM_MAINTAINER_MODE([disable])
commit d06a47310e69de30a4af78027953222fb507698e
Author: Nalin Dahyabhai <nalin at redhat.com>
Date: Mon Feb 27 18:03:23 2017 -0500
Make 'make archive' default to cloning 'origin'
Make 'make archive' default to cloning from the remote repo named
'origin', instead of hard-coding the main repository.
Signed-off-by: Nalin Dahyabhai <nalin at redhat.com>
diff --git a/Makefile.am b/Makefile.am
index 2a7c0f3..16d103e 100644
--- a/Makefile.am
+++ b/Makefile.am
@@ -22,7 +22,8 @@ tag: all-gmo
force-tag: all-gmo
git tag -f $(GITTAG)
-ORIGIN=ssh://git@pagure.io/certmonger.git
+GITREMOTE=origin
+ORIGIN=$(shell git config remote.$(GITREMOTE).url 2> /dev/null || /bin/pwd)
ARCHIVEOUTDIR=$(shell cd $(top_srcdir) && pwd)
local-archive:
commit f44d0ec4bd67c63662185a43a969e59892c5b495
Author: Nalin Dahyabhai <nalin at redhat.com>
Date: Mon Feb 27 19:09:54 2017 -0500
Make 'distcheck' in containers, not just 'check'
The 'distcheck' target catches things that need to be included in
tarballs that we might otherwise forget, so prefer it.
Signed-off-by: Nalin Dahyabhai <nalin at redhat.com>
diff --git a/tests/docker/build-and-test.sh b/tests/docker/build-and-test.sh
index 8f02a77..d298789 100755
--- a/tests/docker/build-and-test.sh
+++ b/tests/docker/build-and-test.sh
@@ -19,6 +19,4 @@ echo '['"${PRETTY_NAME}"']'
export CFLAGS="-Wall -Wextra -Wno-unused-parameter"
./configure --prefix=/usr --sysconfdir=/etc --with-tmpdir=/var/run/certmonger --localstatedir=/var --disable-maintainer-mode --enable-srv-location --disable-systemd --disable-sysvinit
echo '['"${PRETTY_NAME}"']'
-make all
-echo '['"${PRETTY_NAME}"']'
-make check
+make distcheck
commit 758ba898a2464760fe8a1cf01fb17c17c5324899
Author: Nalin Dahyabhai <nalin at redhat.com>
Date: Mon Feb 27 19:00:12 2017 -0500
Package alternate correct 028 output for non-DSA
Forgot to add the alternate output to the list of files picked up by
'make dist'.
Signed-off-by: Nalin Dahyabhai <nalin at redhat.com>
diff --git a/tests/Makefile.am b/tests/Makefile.am
index 963a7a5..5888dc0 100644
--- a/tests/Makefile.am
+++ b/tests/Makefile.am
@@ -275,7 +275,7 @@ EXTRA_DIST = \
026-local/run.sh \
027-hooks/expected.out \
027-hooks/run.sh \
- 028-dbus/expected.out \
+ 028-dbus/expected.out 028-dbus/expected.out.nodsa \
028-dbus/entry 028-dbus/bogus-entry \
028-dbus/prequal.sh \
028-dbus/run.sh \
commit 60a6662622042056fef77fa43df08dff1483e8fb
Author: Nalin Dahyabhai <nalin at redhat.com>
Date: Mon Feb 27 18:04:06 2017 -0500
Have 'make clean' remove tests results
The 'distcheck' target complains if 'distclean' leaves things behind, so
we clean test results on 'clean'.
Signed-off-by: Nalin Dahyabhai <nalin at redhat.com>
diff --git a/tests/Makefile.am b/tests/Makefile.am
index 46de8cd..963a7a5 100644
--- a/tests/Makefile.am
+++ b/tests/Makefile.am
@@ -1,4 +1,131 @@
SUBDIRS = tools
+CLEANFILES = \
+ 001-keyiread/actual.out \
+ 001-keyiread/actual.err \
+ 001-keyiread-dsa/actual.out \
+ 001-keyiread-dsa/actual.err \
+ 001-keyiread-ec/actual.out \
+ 001-keyiread-ec/actual.err \
+ 001-keyiread-rsa/actual.out \
+ 001-keyiread-rsa/actual.err \
+ 002-keygen/actual.out \
+ 002-keygen/actual.err \
+ 002-keygen-dsa/actual.out \
+ 002-keygen-dsa/actual.err \
+ 002-keygen-ec/actual.out \
+ 002-keygen-ec/actual.err \
+ 002-keygen-rsa/actual.out \
+ 002-keygen-rsa/actual.err \
+ 003-csrgen/actual.out \
+ 003-csrgen/actual.err \
+ 003-csrgen-dsa/actual.out \
+ 003-csrgen-dsa/actual.err \
+ 003-csrgen-ec/actual.out \
+ 003-csrgen-ec/actual.err \
+ 003-csrgen-rsa/actual.out \
+ 003-csrgen-rsa/actual.err \
+ 004-selfsign/actual.out \
+ 004-selfsign/actual.err \
+ 004-selfsign-dsa/actual.out \
+ 004-selfsign-dsa/actual.err \
+ 004-selfsign-ec/actual.out \
+ 004-selfsign-ec/actual.err \
+ 004-selfsign-rsa/actual.out \
+ 004-selfsign-rsa/actual.err \
+ 005-dbusm/actual.out \
+ 005-dbusm/actual.err \
+ 006-serial/actual.out \
+ 006-serial/actual.err \
+ 007-certsave/actual.out \
+ 007-certsave/actual.err \
+ 007-certsave-dbm/actual.out \
+ 007-certsave-dbm/actual.err \
+ 007-certsave-sql/actual.out \
+ 007-certsave-sql/actual.err \
+ 008-certread/actual.out \
+ 008-certread/actual.err \
+ 009-oiddict/actual.out \
+ 009-oiddict/actual.err \
+ 010-iterate/actual.out \
+ 010-iterate/actual.err \
+ 011-dbinit/actual.out \
+ 011-dbinit/actual.err \
+ 011-dbinit-dbm/actual.out \
+ 011-dbinit-dbm/actual.err \
+ 011-dbinit-sql/actual.out \
+ 011-dbinit-sql/actual.err \
+ 012-dbadd/actual.out \
+ 012-dbadd/actual.err \
+ 012-dbadd-dbm/actual.out \
+ 012-dbadd-dbm/actual.err \
+ 012-dbadd-sql/actual.out \
+ 012-dbadd-sql/actual.err \
+ 013-enckey/actual.out \
+ 013-enckey/actual.err \
+ 013-enckey-dbm/actual.out \
+ 013-enckey-dbm/actual.err \
+ 013-enckey-sql/actual.out \
+ 013-enckey-sql/actual.err \
+ 014-prefs/actual.out \
+ 014-prefs/actual.err \
+ 015-lockedkey/actual.out \
+ 015-lockedkey/actual.err \
+ 015-lockedkey-dbm/actual.out \
+ 015-lockedkey-dbm/actual.err \
+ 015-lockedkey-sql/actual.out \
+ 015-lockedkey-sql/actual.err \
+ 016-dates/actual.out \
+ 016-dates/actual.err \
+ 017-notoken/actual.out \
+ 017-notoken/actual.err \
+ 017-notoken-dbm/actual.out \
+ 017-notoken-dbm/actual.err \
+ 017-notoken-sql/actual.out \
+ 017-notoken-sql/actual.err \
+ 018-pembase/actual.out \
+ 018-pembase/actual.err \
+ 019-dparse/actual.out \
+ 019-dparse/actual.err \
+ 020-xparse/actual.out \
More information about the Pkg-freeipa-devel
mailing list