/[smecontribs]/rpms/phpki-ng/contribs10/phpki-ng.spec

Diff of /rpms/phpki-ng/contribs10/phpki-ng.spec

Parent Directory | Revision Log | View Revision Graph Revision Graph | View Patch Patch

-Revision 1.14 by jpp,
Mon Nov 21 02:09:06 2022 UTC
+Revision 1.18 by jpp,
Wed Dec 28 20:13:45 2022 UTC
 Line 4
  %define         name phpki-ng
  %define         version 0.84
- %define         release 13
+ %define         release 16
  Summary:        Phpki is a simple certificate management suite
  Name:           %{name}
  Version:        %{version}
 Line 22 
 Patch5:         phpki-ng-0.84-fix-html-d
  Patch6:         phpki-ng-0.84-fix-download-cert.patch
  Patch7:         phpki-ng-0.84-fix-html-syntax-in-help.patch
  Patch8:         phpki-ng-0.84-fix-final-redirect.patch
+ Patch9:         phpki-ng-bz12272-bz12273-crl-whitespacepass.patch
+ Patch10:        phpki-ng-bz12274-regex-secu.patch
  BuildArch:      noarch
  BuildRoot:      /var/tmp/%{name}-%{version}
-Line 45 
 With it, you may create and centrally ma
+Line 46 
 With it, you may create and centrally ma
  e-mail clients, SSL servers, and VPN applications.
  %changelog
- * Fri Nov 18 2022 Jean-Philippe Pialasse <tests@pialasse.com> %{version}-13.sme
+ * Sat Dec 17 2022 Jean-Philippe Pialasse <tests@pialasse.com> 0.84-16.sme
+ - add dl_crl_pem.php [SME: 12272]
+ * Wed Dec 14 2022 Jean-Philippe Pialasse <tests@pialasse.com> 0.84-15.sme
+ - fix regex and potential code injection [SME: 12274]
+ * Wed Dec 14 2022 Jean-Philippe Pialasse <tests@pialasse.com> 0.84-14.sme
+ - add easy and safe access to crl download [SME: 12272]
+ - fix revoke certificate failing on whitespace pass [SME: 12273]
+ - fix missing default_md in config.php from previous versions [SME: 12267]
+ - updated scriptlet to ease backup and restore
+ * Fri Nov 18 2022 Jean-Philippe Pialasse <tests@pialasse.com> 0.84-13.sme
  - remove extra space in URL in search.php [SME: 12232]
  * Thu Sep 30 2021 John Crisp <jcrisp@safeandsoundit.co.uk> 0.84-12.sme
-Line 210 
 e-mail clients, SSL servers, and VPN app
+Line 223 
 e-mail clients, SSL servers, and VPN app
  %patch6 -p1
  %patch7 -p1
  %patch8 -p1
+ %patch9 -p1
+ %patch10 -p1
  %build
  %{__mkdir_p} root/opt/phpki/html
-Line 259 
 cd ..
+Line 274 
 cd ..
  rm -rf $RPM_BUILD_ROOT
  %pre
+ if ! /usr/bin/id phpki &>/dev/null; then
+   echo "Creating phpki user"
+   /usr/sbin/useradd -c 'Phpki User' -s /sbin/nologin -r -d /opt/phpki/phpki-store phpki &>/dev/null || \
+                 %logmsg "Unexpected error adding user \"phpki\". Abort installation."
+ fi
  echo "******************************************************"
  echo "* "
  echo "*       !!! IMPORTANT - READ THIS NOW !!! "
-Line 267 
 echo "**********************************
+Line 288 
 echo "**********************************
  echo "*  This contrib now has higher levels of encryption"
  echo "* "
  echo "*  We cannot upgrade your existing certificates"
+ echo "* existing certificates from SME9 or below have either "
+ echo "* md5WithRSAEncryption sha1WithRSAEncryption"
+ echo "* as Signature Algorithm (weak)."
+ echo "* only way to update to sha256 or sha512 is to "
+ echo "* start from scratch."
  echo "* "
  echo "*  If you have existing certificates you want to use"
  echo "*  then start with a new CA, backup up, and then restore"
-Line 277 
 echo ""
+Line 303 
 echo ""
  if [ -d /opt/phpki/phpki-store ] ; then
      echo "Backing up your /opt/phpki/phpki-store"
-     RANDOM=$$
+     today=$(date "+%Y%m%d%H%M")
-     PHPKIDIR=$(( 1 + $RANDOM%99999 ))
+     echo "Copying from /opt/phpki/phpki-store to /opt/phpki/phpki-store.$today"
-     echo "Number is $PHPKIDIR"
+     /bin/cp -pr /opt/phpki/phpki-store "/opt/phpki/phpki-store.$today"
-     echo "Copying from /opt/phpki/phpki-store to /opt/phpki/phpki-store.$PHPKIDIR"
+     echo "Directory copied... continuing to install"
-     /bin/cp -pr /opt/phpki/phpki-store "/opt/phpki/phpki-store.$PHPKIDIR"
+     # fix missing md_default
-     echo "Directory copied...continuing installaton"
+     if ( grep default_md /opt/phpki/phpki-store/config/config.php -q ); then
+       echo "md_default OK"
+     else
+       echo "default_md missing in /opt/phpki/phpki-store/config/config.php"
+       echo "getting  value from /opt/phpki/phpki-store/config/openssl.cnf"
+       # it could ba acceptable to hash sha256 a certificate from a root with sha1.
+       defaultmd=$(awk '/^default_md/{print $NF}' /opt/phpki/phpki-store/config/openssl.cnf || echo "sha512")
+       echo "inserting $defaultmd default_md at end of /opt/phpki/phpki-store/config/config.php"
+       sed -i '/\?>/i \
+       # Define default md \
+       \$config['default_md']    = "'$defaultmd'";' /opt/phpki/phpki-store/config/config.php
+       echo "Done... continuing to install"
+     fi
  else
-     echo "No directory detected...continuing installaton"
+     echo "No directory detected... continuing to install"
  fi
- if ! /usr/bin/id phpki &>/dev/null; then
- echo "Creating phpki user"
-         /usr/sbin/useradd -c 'Phpki User' -s /sbin/nologin -r -d /opt/phpki/phpki-store phpki &>/dev/null || \
-                 %logmsg "Unexpected error adding user \"phpki\". Abort installation."
- fi
  %preun
  %post
  # First install, point index.php to setup.php
  if [ $1 == 1 ]; then
+   #do not do if there is already a CA (restore from backup))
+   if [ ! -f /opt/phpki/phpki-store/config/config.php ] ; then
          %{__ln_s} /opt/phpki/html/setup.php-presetup /opt/phpki/html/index.php
          %{__ln_s} /opt/phpki/html/setup.php-presetup /opt/phpki/html/setup.php
-         echo "<?php
+   fi
+   echo "<?php
  header(\"Location: ./../index.php\");
  ?>
  " > /opt/phpki/html/ca/index.php

 Legend:



Removed lines/characters
 


Changed lines/characters


 
Added lines/characters
 Legend:



Removed lines/characters
 


Changed lines/characters


 
Added lines/characters
-Removed lines/characters
+Added lines/characters

admin@koozali.org	ViewVC Help
Powered by ViewVC 1.2.1