[Pkg-freeipa-devel] [Git][freeipa-team/jss][upstream] 112 commits: Fixed path to jss.spec in .travis.yml

Timo Aaltonen gitlab at salsa.debian.org
Mon Dec 3 16:16:12 GMT 2018


Timo Aaltonen pushed to branch upstream at FreeIPA packaging / jss


Commits:
b3d3e555 by Endi S. Dewata at 2018-08-15T14:33:43Z
Fixed path to jss.spec in .travis.yml

- - - - -
62c5f202 by Endi S. Dewata at 2018-09-18T18:49:45Z
Fixed exceptions in CryptoToken.getTokenByName()

To help troubleshooting, the CryptoToken.getTokenByName() has
been modified to rethrow TokenException as a RuntimeException
and to provide the token name in NoSuchTokenException.

- - - - -
afecca60 by Elio Maldonado at 2018-09-20T16:52:02Z
Address "_BSD_SOURCE and _SVID_SOURCE are deprecated, use _DEFAULT_SOURCE" warnings

- - - - -
e68ba5d8 by Elio Maldonado at 2018-09-20T18:50:51Z
Fix duplicates in manifest file

- https://pagure.io/jss/issue/18

- - - - -
18cc0026 by Elio Maldonado at 2018-09-20T19:18:15Z
Fix truncation warning

https://pagure.io/jss/issue/21
‘strncpy’ output truncated before terminating nul copying 3 bytes from a string of the same length
Using memcpy gets rid of the warning, same way NSS folks dealt with it.

- - - - -
a5663878 by Alexander Scheel at 2018-09-20T19:32:53Z
Add *.OBJ/ folders to .gitignore

These are artifacts from the build process and should be ignored by the
source control system.

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
2e092e48 by Alexander Scheel at 2018-09-20T19:34:20Z
Reflect dependencies in README

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
093848ee by Alexander Scheel at 2018-09-21T11:47:08Z
Align jss with make standard targets

A common pattern across projects is to use `make check` to execute
tests, `make dist` to build a release, and `make distclean` to
clean the tree after a release. This adds targets to rules.mk
which support these targets and moves a target from the Makefile
to rules.mk.

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
cf19fe79 by Elio Maldonado at 2018-09-21T12:07:54Z
Fix warning: assignment discards ‘const’ qualifier from pointer target type

- - - - -
cc3a0288 by Alexander Scheel at 2018-09-26T19:05:49Z
Fix linting errors in build_java.pl

Fix all linting errors reported by:

    perl -Mstrict -Mdiagnostics -cw build_java.pl

which enforces strict mode. This mostly includes scoping variables
correctly and simplifying a few conditionals.

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
095a54cd by Alexander Scheel at 2018-09-26T19:05:49Z
Simplify build command calling

Removes excessive eval call from top of the build script. Also uses cwd
from Cwd module instead of `pwd` + chomp.

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
71eb9af3 by Alexander Scheel at 2018-09-26T19:05:49Z
Add code style checking script for Perl code

This introduces a new directory into the repository, tools/ which will
contain utilities not critical to the functioning of JSS but which are
helpful to the development of JSS.

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
13f08f9b by Alexander Scheel at 2018-09-26T19:05:49Z
Simplify logic in test running from build_java.pl

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
ecfc736c by Alexander Scheel at 2018-09-26T19:05:49Z
Always overwrite manifest file

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
3104a075 by Endi S. Dewata at 2018-09-28T12:32:35Z
Removed references to JSS 3

- - - - -
f38f62af by Elio Maldonado at 2018-09-28T12:32:55Z
Complete first phase of deprecation warnings annotation already started

- Addresses https://pagure.io/jss/issue/19
- Modified in response to review requests
- Alex Scheel: Updated to fix remaining review comments

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
e29dd75e by Elio Maldonado at 2018-10-02T12:34:20Z
Cleanup all.pl to address test_perl_style.sh tool messages

- Address https://pagure.io/jss/issue/23

- perl -Mstrict -Mdiagnostics -cw org/mozilla/jss/tests/all.pl
- outputs org/mozilla/jss/tests/all.pl syntax OK

- - - - -
7cd4b410 by Alexander Scheel at 2018-10-02T12:34:20Z
Add org/mozilla/jss/tests/all.pl to tools/test_perl_style.sh

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
23b12a67 by Alexander Scheel at 2018-10-03T20:25:37Z
Remove dependency on javax.xml.bind.DatatypeConverter

This is no longer present in JDK 9 and greater; it has been moved
to Java EE instead. Remove this dependency and add a HexEncode()
method to org.mozilla.jss.netscape.security.util.Utils.

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
a93aeb25 by Alexander Scheel at 2018-10-04T17:29:49Z
Fix shellcheck warnings in build.sh

By running:

    shellcheck build.sh

Numerous warnings were reported; this commit fixes those warnings,
making build.sh more portable and better written.

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
45121e47 by Alexander Scheel at 2018-10-04T17:29:49Z
Add shell style checker script

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
135a0de9 by Alexander Scheel at 2018-10-10T15:33:02Z
Update travis.yml to check style and use stages

 - Adds style check / validator stage to check perl and
     script styles
 - Uses Dockerfiles to perform all tests
 - Adds check to ensure Ubuntu build is successful

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
1acc7ecb by Alexander Scheel at 2018-10-10T18:36:34Z
Reflect Debian dependencies in the README

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
9e73583c by Alexander Scheel at 2018-10-10T21:19:53Z
Add initial documentation on the build system [skip ci]

 - Different interfaces with the build system
 - Environment variables recognized by the build system

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
00b3c9f9 by Alexander Scheel at 2018-10-10T21:19:53Z
Document how to use JSS and its runtime dependencies [skip ci]

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
73f4a88e by Alexander Scheel at 2018-10-10T21:19:53Z
Add documentation on CI and Containers [skip ci]

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
5b381b81 by Alexander Scheel at 2018-10-10T21:19:53Z
Document how to update gh_pages branch [skip ci]

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
bc1425c2 by Alexander Scheel at 2018-10-11T19:34:41Z
Make test scripts exit on first error

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
52f813c0 by Alexander Scheel at 2018-10-12T15:44:45Z
Document branches and archive in upstream [skip ci]

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
715b4024 by Alexander Scheel at 2018-10-15T15:59:21Z
Add -notimestamp option to javadoc creation

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
ff28a6cf by Alexander Scheel at 2018-10-15T16:00:52Z
Fix docstring for org.mozilla.jss.pkix.cms.SignedData

Note that the patch in mbz#384470 is incorrect as the type is:
	org.mozilla.jss.pkix.cms.SignerInfo
and not:
	org.mozilla.jss.cms.SignerInfo

rhbz: 1534765
url: https://bugzilla.redhat.com/show_bug.cgi?id=1534765
mbz: 384470
url: https://bugzilla.mozilla.org/show_bug.cgi?id=384470

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
ffd82f1a by Alexander Scheel at 2018-10-16T13:56:28Z
Create script to automatically detect exports for build

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
0184f05b by Alexander Scheel at 2018-10-16T15:04:14Z
Add tool to run container images

Makes our infrastructure agnostic of choice of container
provider and simplifies our Travis scripts.

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
fd80cdc8 by Elio Maldonado at 2018-10-16T15:12:08Z
JNI header fixes: remove unnecessary #includes

When compiling with javac instead of javah, these #includes
are in error as they have not been generated. Further, there
is no need for these #includes, so remove them.

- - - - -
bf1cf1fa by Alexander Scheel at 2018-10-16T15:12:08Z
Take the opportunity to remove whitespace from Perl scripts

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
800d5229 by Elio Maldonado at 2018-10-16T15:12:08Z
Refactor build_java.pl and tests/all.pl

This introduces a new library, lib/Common.pm that build_java.pl
and tests/all.pl can use for common functions. This currently
contains common functionality for getting the Jar files which
JSS depends on.

Also includes various simplifications and improvements to both
build_java.pl and tests/all.pl.

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
fd7c8883 by Alexander Scheel at 2018-10-17T16:35:47Z
Updates to lib/Common.pm to do jar detection

Replaces the distro-specific build flags with a single build flag,
JDK9_BUILD, to build JSS for JDK9+ support; requires an additional
dependency in that case.

Also updates tools/autoenv.sh to handle new variables.

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
c59c269e by Alexander Scheel at 2018-10-17T16:35:47Z
Add fatal warnings to build_java.pl

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
89e4715d by Alexander Scheel at 2018-10-17T16:35:47Z
Use new autoenv.sh in Ubuntu image

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
5a764fd0 by Alexander Scheel at 2018-10-17T16:35:47Z
Add fatal warnings to tests/all.pl

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
1cf67755 by Alexander Scheel at 2018-10-19T18:49:57Z
Add tools/build_pkcs11_constants.py

Adds tools/build_pkcs11_constants.py to generate
PKCS11Constants from the NSS distribution; this
utility converts NSS's pkcs11t.h to Java, allowing
us to use it to call back into NSS without having
to manually maintain a version which tracks NSS.

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
6e538894 by Alexander Scheel at 2018-10-19T18:49:57Z
Add script to validate python style

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
1ff8d645 by Alexander Scheel at 2018-10-19T18:49:57Z
Add org.mozilla.jss.pkcs11.PKCS11Constants

This includes the generated PKCS11Constants created by
the newly added tools/build_pkcs11_constants.py utility.
This interface is necessary because JDK9+ drops support
for the deprecated sun.* packages and all modules which
included their functionality are now removed. In particular,
we rely on sun.security.pkcs11.wrapper.PKCS11Constants;
the newly added interface has largely compatible symbols
and replaces its functionality.

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
081ef52f by Alexander Scheel at 2018-10-19T18:49:57Z
Add optional pkcs11check to Travis

This allows us to periodically check on the status of
PKCS11Constants.java against the latest release of
Fedora to see if anything has changed.

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
f37b275b by Alexander Scheel at 2018-10-19T18:49:57Z
Add testcase comparing PKCS11Constants to JSS

This test is limited to JDK 8. Uses reflection to list all fields
and compare their values against Sun's (deprecated) equivalent
class. Also introduces the $java_version variable to check the
version of the java program used to limit which test cases are run.

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
9555b455 by Alexander Scheel at 2018-10-19T18:59:04Z
Add dependency on JAXB for JDK9+

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
234ed478 by Alexander Scheel at 2018-10-19T19:20:15Z
Switch to new PKCS11 Interface

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
3c788a49 by Alexander Scheel at 2018-10-19T19:20:15Z
Add Debian/JDK11 test VM to Travis build matrix

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
8c91328a by Alexander Scheel at 2018-10-23T00:30:43Z
Fix Copyright symbol "(C)" in PKCS11Constants.java

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
5530825e by Alexander Scheel at 2018-10-23T00:31:25Z
Add html build target

html is another standard build target that I missed earlier and is
documented here:

https://www.gnu.org/prep/standards/html_node/Standard-Targets.html

This makes the html target build the javadocs, as they are generated in
HTML format.

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
2e3162ed by Alexander Scheel at 2018-10-23T16:03:16Z
Add additional Fedora testing images

These images help ensure support for later Fedora releases and ensure
that we maintain JDK8+ support across various Fedora releases. They've
been added to the Extras section such that they don't fail the build and
aren't required to pass for the build to succeed, but so that we can
keep an eye on their status.

The fedora_29 image can be moved to the main section when 29 ships and
27 can then be removed.

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
a384ef2a by Elio Maldonado at 2018-10-23T20:14:48Z
Fix problem where firefox could not display the INDEX tab as of jdk 11

- Addresses: https://pagure.io/jss/issue/28
- add "-overview ./overview.html" to the javadoc command invocation
- add overview.html file at the top of the source tree
- it provides a title and a brief description of jss
- no longer need to replace index.html with overview-summary.html

- - - - -
7bda7df4 by Alexander Scheel at 2018-10-24T11:42:39Z
Add title to javadocs

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
86a4a5d3 by Alexander Scheel at 2018-10-24T11:42:39Z
Move overview.html out of project root and update contents

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
ce7ee895 by Alexander Scheel at 2018-10-24T21:34:10Z
Update build system documentation [skip ci]

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
538308b0 by Alexander Scheel at 2018-10-24T21:34:10Z
Update documentation on using JSS [skip ci]

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
3dc01fd4 by Alexander Scheel at 2018-10-24T21:34:10Z
Add documentation on dependencies [skip ci]

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
67ed425a by Alexander Scheel at 2018-10-24T21:34:10Z
Add documentation on building JSS [skip ci]

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
6e80e641 by Alexander Scheel at 2018-10-24T21:34:10Z
Save legacy build instructions [skip ci]

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
0262b6e7 by Alexander Scheel at 2018-10-24T21:34:10Z
Add documentation on pkcs11 constants [skip ci]

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
69c3a8d0 by Alexander Scheel at 2018-10-24T21:34:10Z
Update CI Documentation [skip ci]

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
091a9451 by Alexander Scheel at 2018-10-24T21:34:10Z
Add contributing guide [skip ci]

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
c7be4a18 by Alexander Scheel at 2018-10-24T21:34:10Z
Update README to reflect newer build instructions [skip ci]

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
5a6a02dc by Alexander Scheel at 2018-10-25T12:30:16Z
Choose JAR name for build_java.pl, tests/all.pl

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
b8d29655 by Alexander Scheel at 2018-10-25T12:30:16Z
Implement reproducible JAR builds

Because the JAR format is a zip archive, we can implement reproducible
JAR builds by extracting the zip, resetting all timestamps, and ensuring
that we add contents in sorted order. This allows us to compare built
JARs by their contents on disk versus having to extract the JAR and
compare the extracted JAR.

This adds a new make target, `reproducible` that creates a reproducible
build from a finished build, and `reproducibleCheck` that runs the test
suite against the reproducible JAR. Additionally, the spec file has been
updated to ship the reproducible JAR as well.

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
e92e2ba8 by Alexander Scheel at 2018-10-30T18:50:21Z
Fedora 29 was released!

https://fedoramagazine.org/announcing-fedora-29

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
09ae615e by Elio Maldonado at 2018-11-01T12:05:33Z
Fix for 'make javadoc' reported errors for when we switch to jdk11

- Address: https://github.com/dogtagpki/jss/issues/66
- use of <tt>/</tt> tags causes failures with jdk11 tools
- see https://developer.mozilla.org/en-US/docs/Web/HTML/Element/tt
- not a problem with either jdk8 or jdk10
- use the <code>/</code> tags as replacement

Signed-off-by: Alexander Scheel <alexander.m.scheel at gmail.com>

- - - - -
3c5c6541 by Alexander Scheel at 2018-11-01T13:19:55Z
DER encode error for zero-valued enumerated types

When an enumerated type has value zero, it is incorrectly given a length
of zero. Per X609, Section 8.4:

    The encoding of an enumerated value shall be that of the integer value
    with which it is associated. NOTE - It is primitive.

An integer is always encoded as a pair <length>+<value>, with value
always being specified, and thus <length> is always at least 1. However,
we were encoding enumerated as:

    0A 00

instead of the correct value:

    0A 01 00

This fixes the above error.

RH BZ: 1582323
RH BZ URL: https://bugzilla.redhat.com/show_bug.cgi?id=1582323

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
9da354a1 by Alexander Scheel at 2018-11-01T13:19:55Z
Add regression test for Enumeration encoding

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
548548e8 by Alexander Scheel at 2018-11-01T13:19:55Z
add additional tests for DER encoding

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
d17f24fd by Alexander Scheel at 2018-11-01T19:02:41Z
Sync JSS with NSS's cipher suite lists

This includes a few new TLS 1.3 ciphers, TLS names for old SSL ciphers,
and RFC5487 support.

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
e7eb4187 by Alexander Scheel at 2018-11-07T15:06:02Z
Small script fixes

tools/autoenv.sh now returns rather than exiting; when sourced and
JAVA_HOME could not be determined, the entire shell exited.

tools/build_pkcs11_constants.py has been updated to conform to F29
pylint standards; this limits the number of branches in a function.

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
fe4a3cba by Alexander Scheel at 2018-11-09T18:27:17Z
Update run_container.sh to use command -v

According to ShellCheck, `which` is non-standard, so replace it with
`command -v` instead.

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
7f966534 by Alexander Scheel at 2018-11-09T20:35:51Z
Replace instances of loser label with finish

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
b9aac1b4 by Alexander Scheel at 2018-11-14T16:35:16Z
Remove unused JNI for NativeProxy

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
237acae3 by Alexander Scheel at 2018-11-15T12:46:28Z
Remove unused class KeyFactorySpi1_4

Note that this file has been relatively untouched since the
reorganization and is excluded from the build.

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
9e3b7014 by Alexander Scheel at 2018-11-15T18:55:53Z
Add FindNSS and FindNSPR from PKI

These are imported from dogtagpki/pki, with minor improvements to make
them work on Debian and Ubuntu.

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
91017288 by Alexander Scheel at 2018-11-15T20:13:32Z
Simplify version handling

We define the JSS version in three places:

    lib/manifest.mn
    manifest.mn
    org/mozilla/jss/util/jssver.h

By using JNI, we can extract the JSS version from jssver.h, reducing the
number of places we have to define it manually.

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
b0627a93 by Alexander Scheel at 2018-11-15T21:00:31Z
Add lib/MANIFEST.MF.in and lib/jss.map

In preparation for the new CMake build system, introduce two new files
to the lib/ directory. The MANIFEST.MF.in is used to generate the
META-INF/MANIFEST.MF file in the JSS JAR, and jss.map is used as the
linker version script when building the JSS library.

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
dd0fac8e by Alexander Scheel at 2018-11-19T20:29:13Z
Add CMake to .gitignore

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
544dcded by Alexander Scheel at 2018-11-19T20:29:13Z
Add new CMake build system

This replaces the old build system with a simpler CMake-based build
system. The cmake/Find{NSS,NSPR}.cmake files have been imported from
dogtagpki/pki and extended to support Debian installation locations.
cmake/JSSConfig.cmake sets useful environment variables and defines the
current JSS version, cmake/JSSCommon.cmake is the core build
instructions, while cmake/JSSTests.cmake is the test suite.

Note that we now auto generate org/mozilla/jss/util/jssver.h based
on the JSS version set in CMake.

This commit does not remove the old build system.

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
fdc026d1 by Alexander Scheel at 2018-11-19T20:29:13Z
Update jss.spec to use new CMake Build System

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
56cf8f68 by Alexander Scheel at 2018-11-19T20:31:11Z
Remove test_perl_style.sh due to CMake

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
35cf5a55 by Alexander Scheel at 2018-11-19T20:31:11Z
Update CI to use CMake build system

This commit allows all containers previously using the old build system
to use the new CMake build system. Additionally, debian_jdk11 and
ubuntu_jdk8 images were better aligned in their apt-get installs.

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
39c9f0de by Alexander Scheel at 2018-11-19T20:31:32Z
Remove old build system

This finishes replacing the old build system with CMake by removing the
old build system. Note that org/mozilla/jss/tests is left unmodified for
now until all of the old tests have been ported to the new CTest system.

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
7fcf0e40 by Alexander Scheel at 2018-11-20T15:18:18Z
Add in-source documentation to JSSCommon.cmake

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
f6c30563 by Alexander Scheel at 2018-11-20T15:18:18Z
Add in-source documentation to JSSTests.cmake

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
94232d04 by Alexander Scheel at 2018-11-20T15:18:18Z
Add in-source documentation to JSSConfig.cmake

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
0eded212 by Alexander Scheel at 2018-11-20T15:18:38Z
Add DER Encoding test to ctest

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
38294633 by Alexander Scheel at 2018-11-20T15:42:31Z
Add SSLClientAuth tests to ctest

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
c2d8dc06 by Alexander Scheel at 2018-11-20T15:44:56Z
Update README with new build instructions [skip ci]

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
8636487e by Alexander Scheel at 2018-11-20T15:44:56Z
Add library information to docs/using_jss.md [skip ci]

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
f3cc9162 by Alexander Scheel at 2018-11-20T15:44:56Z
Update build instructions for building with CMake [skip ci]

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
ee1d067c by Alexander Scheel at 2018-11-20T15:44:56Z
Update build system documentation for CMake [skip ci]

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
ad6f1cc5 by Alexander Scheel at 2018-11-20T15:44:56Z
Update documentation on dependencies [skip ci]

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
cd60a571 by Fraser Tweedale at 2018-11-22T04:21:23Z
Fix DerValue.getOctetString for empty octet strings

When reading a DerValue as an OCTET STRING via getOctetString(),
if the length of the OCTET STRING is zero an exception is thrown:

    java.io.IOException: short read on DerValue buffer

The following program reproduces the issue:

    import java.io.IOException;
    import netscape.security.util.DerValue;

    class DerTest {
        public static void main(String[] args) {
            byte[] bytes = { 0x04, 0x00 };
            try {
                DerValue derVal = new DerValue(bytes);
                System.out.println(derVal.getOctetString());
            } catch (IOException e) {
                e.printStackTrace();
            }
        }
    }

The issue arises because ByteArrayInputStream.read() returns -1 when
the stream has no more data, even if we are asking to read 0 bytes.
This seems to violate the contract of InputStream.read() which says
that if the requested read length is 0, the return value is 0.
Avoid throwing the exception when this condition occurs.

Fixes: https://pagure.io/dogtagpki/issue/3079

- - - - -
a5d369ae by Alexander Scheel at 2018-11-22T04:21:23Z
Regression test for zero-length DER value

Signed-off-by: Alexander Scheel <alexander.m.scheel at gmail.com>

- - - - -
87fe8199 by Alexander Scheel at 2018-11-26T18:12:31Z
Refactor CMake to support building other C targets

In preparation for a C language test, this refactors CMake so that it
can support building other C targets besides the libjss4.so library.
This will allow us to build stand-alone executables which don't depend
on libjss4.so but could depend on the NSS/NSPR libraries.

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
fbb99ef5 by Alexander Scheel at 2018-11-27T19:12:10Z
Add build directory

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
fd928acb by Elio Maldonado at 2018-11-27T19:13:22Z
Update docs/pkcs11contants.md according to new build system

Address: https://pagure.io/jss/issue/31

- - - - -
88365c06 by Alexander Scheel at 2018-11-27T19:42:15Z
Bump keysizes to 4096

This is required if we wish to run the JSS test suite on a system
with the FUTURE cryptopolicy currently enforcing. In particular, key
sizes of 1024 and 2048 are too small for later use by NSS, causing test
failures. Note that FUTURE currently sets a minimum key length for RSA
of 3072 bits.

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
96b11619 by Alexander Scheel at 2018-11-27T19:46:48Z
Reintroduce PKCS11 Constants test

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
ce86a29f by Alexander Scheel at 2018-11-28T14:31:42Z
Allow tests to be run repeatedly

Remove and recreate the NSS DB folders as part of the test suite to
enable CTests to be executed multiple times without the user having to
manually remove and recreate them.

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
ceb021ff by Alexander Scheel at 2018-11-28T14:42:52Z
Add TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 to tests

This was omitted from the earlier TLS sync; add it back in.

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
c6201bc0 by Alexander Scheel at 2018-11-28T18:12:05Z
Document usage of reproducible_jar.sh

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
264d3e86 by Alexander Scheel at 2018-11-28T18:12:05Z
Build reproducible JAR by default in CMake

uilding reproducible JARs was not added when CMake was introduced. This
builds the reproducible JAR by default in the default JAR location, so
that anyone packaging will ship the reproducible JAR by default.

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
58b53e8c by Alexander Scheel at 2018-11-28T18:12:05Z
Reduce noise in reproducible_jar.sh

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
7978ba12 by Alexander Scheel at 2018-11-28T18:12:05Z
Fix reproducible builds on Debian-like systems

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
46dc6102 by Alexander Scheel at 2018-11-29T19:22:05Z
Split test artifacts into separate build locations

Under the previous build system, JSS was built as a single JAR, causing
us to ship our test cases. There should be no need to do so
however, so splitting our output into two separate JARs (one containing
our test classes) results in cleaner output artifacts.

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
0b81ed42 by Alexander Scheel at 2018-11-29T19:34:14Z
Separate libjss.so into versioned/unversioned libs

A libjss built without a version script allows us to test internal,
non-JNI methods from the JSS test suite by linking against libjss
instead of the dependent objects directly.

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
6913227d by Alexander Scheel at 2018-11-29T19:50:50Z
Respect CMAKE_BUILD_TYPE for Release vs Debug

This is the final step in enabling CMake builds to replace the old
functionality: specifying -DCMAKE_BUILD_TYPE=Release on the CMake
command line is equivalent to setting BUILD_OPT=1 in the old build
system.

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
0ee188a9 by Alexander Scheel at 2018-11-29T19:52:06Z
Release JSS version 4.5.1

A several notable changes have been made since 4.5.0:

 - A new CMake build system has been introduced to replace coreconf,
 - Support for OpenJDK versions 8 through 11 has been added,
 - Reproducible JAR builds,
 - Minor DER encoding issues have been fixed,
 - Synced supported TLS ciphersuites with NSS,
 - Introduced PKCS11 Constants in JSS to replace Sun constants,
 - And various other minor changes.

Thanks to everyone who has contributed since 4.5.0!

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -


30 changed files:

- .gitignore
- .travis.yml
- + CMakeLists.txt
- − Makefile
- README.md
- build.sh
- + build/.gitkeep
- − build_java.pl
- + cmake/FindNSPR.cmake
- + cmake/FindNSS.cmake
- + cmake/JSSCommon.cmake
- + cmake/JSSConfig.cmake
- + cmake/JSSTests.cmake
- − config/config.mk
- − config/dynamic.mk
- − config/linkage.mk
- − config/rules.mk
- − config/static.mk
- − coreconf/AIX.mk
- − coreconf/Android.mk
- − coreconf/BSD_OS.mk
- − coreconf/BeOS.mk
- − coreconf/Darwin.mk
- − coreconf/FreeBSD.mk
- − coreconf/HP-UX.mk
- − coreconf/HP-UXA.09.03.mk
- − coreconf/HP-UXA.09.07.mk
- − coreconf/HP-UXA.09.mk
- − coreconf/HP-UXB.10.01.mk
- − coreconf/HP-UXB.10.10.mk


The diff was not included because it is too large.


View it on GitLab: https://salsa.debian.org/freeipa-team/jss/compare/c89f9a99178f2a1d5cc3e0b972700ee65f11d93d...0ee188a93f6efdee60a75284cbceb4a8fefcc4eb

-- 
View it on GitLab: https://salsa.debian.org/freeipa-team/jss/compare/c89f9a99178f2a1d5cc3e0b972700ee65f11d93d...0ee188a93f6efdee60a75284cbceb4a8fefcc4eb
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-freeipa-devel/attachments/20181203/7fb65601/attachment-0001.html>


More information about the Pkg-freeipa-devel mailing list