smeserver-phpki-ng/contribs10/smeserver-phpki-ng.spec

# $Id: smeserver-phpki.spec,v 1.6 2017/05/03 21:08:27 unnilennium Exp $
# Authority: vip-ire
# Name: Daniel Berteaud

Name:           smeserver-phpki-ng
Version:        0.3
Release:        12%{?dist}
Summary:        php integration into SME server

Group:          Applications/System
License:        GPL
URL:            http://phpki.sourceforge.net/
Source:         %{name}-%{version}.tar.xz

#Patch0:        smeserver-phpki-0.2-fix_redirect_with_user-manager_and_sso.patch
#Patch1:        smeserver-phpki-0.2.bz10267.updatetktauth.patch

Patch0:         smeserver-phpki-ng-0.3-Add-extra-Loadmodules-to-httpd-conf.patch
Patch1:         smeserver-phpki-ng-0.3-Add-in-systemd-startup.patch
Patch2:         smeserver-phpki-ng-0.3-php73pool.patch
Patch3:         smeserver-phpki-ng-0.3-bz12021-backup.patch
Patch4:         smeserver-phpki-ng-0.3-bz12054-httpd24.patch
Patch5:         smeserver-phpki-ng-0.3-bz12228-12198-11873-12229.patch
Patch6:         smeserver-phpki-ng-0.3-bz11438-takey.patch

BuildRoot:      %{_tmppath}/%{name}-%{version}
BuildArch:      noarch

BuildRequires:  e-smith-devtools

Requires:       mod_auth_tkt
Requires:       openvpn
Requires:       e-smith-base
Requires:       phpki-ng
Requires:       php-process
Requires:       e-smith-manager >= 2.6.0-22
Requires:       e-smith-apache >= 2.6.0-19
Requires:       smeserver-php >= 3.0.0-43
Provides:       smeserver-phpki
#Obsoletes:     smeserver-phpki

%description
PHPki is an Open Source Web application for managing a multi-agency PKI for HIPAA compliance.
With it, you may create and centrally manage X.509 certificates for use with S/MIME enabled
e-mail clients, SSL servers, and VPN applications.
This package contains specific configuration for SME server


%changelog
* Fri Nov 18 2022 Jean-Philippe Pialasse <tests@pialasse.com> 0.3-12.sme
- add some more needed bins which cat and egrep [SME: 11438]

* Fri Nov 18 2022 Jean-Philippe Pialasse <tests@pialasse.com> 0.3-11.sme
- fix missing takey [SME: 11438]

* Fri Nov 18 2022 Jean-Philippe Pialasse <tests@pialasse.com> 0.3-10.sme
- ease migration from smeserver-phpki smeserver-phpki-ng using Provides [SME: 12222]
- fix ownership on migration (backup/restore) [SME: 12228] 
- remove /var/service/httpd-pki [SME: 12229] 
- remove old logrotate [SME: 11873]
- remove /var/log/phpki and /var/log/httpd-pki [SME: 12198]

* Tue Oct 04 2022 John Crisp <jcrisp@safeandsoundit.co.uk> 0.3-9.sme
- Fix spec file versioning

* Sat Jul 30 2022 Brian Read <brianr@bjsystems.co.uk> 0.3-8.sme
- Re-build and link to latest devtools [SME: 11997]

* Thu Jul 21 2022 Jean-Philippe Pialasse <tests@pialasse.com> 0.3-7.sme
- add to core backup [SME: 12021]
- httpd 2.4 access syntax [SME: 12054]

* Thu Aug 05 2021 John Crisp <jcrisp@safeandsoundit.co.uk> 0.3-6.sme
- remove modules from patch file [SME: 11402]

* Sun Mar 07 2021 John Crisp <jcrisp@safeandsoundit.co.uk> 0.3-5.sme
- modify dirs in spec file

* Thu Feb 25 2021 Jean-Philipe Pialasse <tests@pialasse.com> 0.3-4.sme
- configure php73 pool [SME: 11207]
  tidy httpd.conf file
  reuse phpki user and group

* Sat Feb 13 2021 Brian Read <brianr@bjsystems.co.uk> 0.3-3.sme
- Set execution bit on /opt/phpki/html/ca in spec file[SME: 11207]

* Tue Feb 09 2021 Brian Read <brianr@bjsystems.co.uk> 0.3-3.sme
- Add-in-systemd-startup [SME: 11207]

* Thu Nov 26 2020 Brian Read <brianr@bjsystems.co.uk> 0.3-2.sme
- Add in Loadmodules needed to pki-conf/httpd.conf [SME: 11207]

* Fri Apr 03 2020 John Crisp <jcrisp@safeandsoundit.co.uk> 0.3-1.sme
- New release for phpki-ng-0.84 based on phpki-0.83

* Wed May 03 2017 Jean-Philipe Pialasse <tests@pialasse.com> 0.2-3.sme
- update TKT auth parameter for SME 9.2 update [SME: 10267]

* Mon Nov 18 2013 Daniel B. <daniel@firewall-services.com> - 0.2-2.sme
- Fix a redirect issue with user-manager and LemonLDAP::NG as SSO

* Mon Nov 11 2013 Daniel B. <daniel@firewall-services.com> - 0.2-1.sme
- Rebuild for SME9
- Do not disable httpd-pki service on uninstall

* Fri May 24 2013 JP Pialasse <tests@pialasse.com> - 0.1-6.sme
- added php-process as dependency [SME: 7439]

* Thu Oct 13 2011 Daniel B. <daniel@firewall-services.com> - 0.1-5.sme
- Change session path [SME: 6661]

* Wed Jul 20 2011 Daniel B. <daniel@firewall-services.com> - 0.1-5.sme
- Protect by location (so we can set another location protected by LemonLDAP::NG)

* Mon Feb 23 2009 Daniel B. <daniel@firewall-services.com> [0.1-4]
- Fix logrotate issue (send a sigusr1 signal to httpd-pki)

* Mon Dec 15 2008 Daniel B. <daniel@firewall-services.com> [0.1-3]
- Move server-manager panel to "security" section

* Wed Dec 10 2008 Daniel B. <daniel@firewall-services.com> [0.1-2]
- expand-templates in bootstrap-console-save instead of post-upgrade
- Disable authentication for the public part (so CRL can be updated automatically)
- Change the name of the menue in server-manager to certificate Management

* Tue Dec 02 2008 Daniel B. <daniel@firewall-services.com> [0.1-1]
- Restrict access to /phpki/ca for admin, ask for a valid user for /phpki
- expand-templates on signal events conf-userpanels and domain-modify

* Thu Nov 27 2008 Daniel B. <daniel@firewall-services.com> [0.1-0]
- initial release


%prep
%setup -q -n %{name}-%{version}
%patch0 -p1
%patch1 -p1
%patch2 -p1
mkdir -p root/var/lib/php/phpki/{tmp,session,opcache}
rm -rf root/var/lib/php/pki-session
mkdir -p root/var/log/phpki
%patch3 -p1
%patch4 -p1
%patch5 -p1
rm -rf root/var/service/httpd-pki
rm -rf root/var/log/phpki
%patch6 -p1

%build
perl createlinks

%install

%{__mkdir_p} $RPM_BUILD_ROOT/var/lib/php/pki-session


(cd root   ; /usr/bin/find . -depth -print | /bin/cpio -dump $RPM_BUILD_ROOT)

chmod +x $RPM_BUILD_ROOT/usr/sbin/systemd/httpd-pki

/bin/rm -f %{name}-%{version}-filelist
/sbin/e-smith/genfilelist $RPM_BUILD_ROOT \
        --dir /var/lib/php/phpki 'attr(0770,root,phpki)' \
        --dir /var/lib/php/phpki/session 'attr(0770,root,phpki)' \
        --dir /var/lib/php/phpki/opcache 'attr(0770,root,phpki)' \
        --dir /var/lib/php/phpki/tmp 'attr(0770,root,phpki)' \
        > %{name}-%{version}-filelist

%post

%clean
rm -rf $RPM_BUILD_ROOT

%files -f %{name}-%{version}-filelist
%defattr(-,root,root)

%pre
#/sbin/e-smith/create-system-user phpki 455 'Phpki User' /opt/phpki /bin/false >& /dev/null || :

%preun


1	jcrisp	1.1	# $Id: smeserver-phpki.spec,v 1.6 2017/05/03 21:08:27 unnilennium Exp $
2			# Authority: vip-ire
3			# Name: Daniel Berteaud
4
5			Name: smeserver-phpki-ng
6			Version: 0.3
7	jpp	1.16	Release: 12%{?dist}
8	jcrisp	1.1	Summary: php integration into SME server
9
10			Group: Applications/System
11			License: GPL
12			URL: http://phpki.sourceforge.net/
13			Source: %{name}-%{version}.tar.xz
14	brianr	1.2
15	jcrisp	1.1	#Patch0: smeserver-phpki-0.2-fix_redirect_with_user-manager_and_sso.patch
16			#Patch1: smeserver-phpki-0.2.bz10267.updatetktauth.patch
17
18	brianr	1.2	Patch0: smeserver-phpki-ng-0.3-Add-extra-Loadmodules-to-httpd-conf.patch
19	brianr	1.3	Patch1: smeserver-phpki-ng-0.3-Add-in-systemd-startup.patch
20	jpp	1.5	Patch2: smeserver-phpki-ng-0.3-php73pool.patch
21	jpp	1.9	Patch3: smeserver-phpki-ng-0.3-bz12021-backup.patch
22	jpp	1.10	Patch4: smeserver-phpki-ng-0.3-bz12054-httpd24.patch
23	jpp	1.14	Patch5: smeserver-phpki-ng-0.3-bz12228-12198-11873-12229.patch
24	jpp	1.15	Patch6: smeserver-phpki-ng-0.3-bz11438-takey.patch
25	brianr	1.2
26	jcrisp	1.1	BuildRoot: %{_tmppath}/%{name}-%{version}
27			BuildArch: noarch
28
29			BuildRequires: e-smith-devtools
30
31			Requires: mod_auth_tkt
32	jpp	1.15	Requires: openvpn
33	jcrisp	1.1	Requires: e-smith-base
34			Requires: phpki-ng
35			Requires: php-process
36			Requires: e-smith-manager >= 2.6.0-22
37	jpp	1.11	Requires: e-smith-apache >= 2.6.0-19
38			Requires: smeserver-php >= 3.0.0-43
39	jpp	1.14	Provides: smeserver-phpki
40			#Obsoletes: smeserver-phpki
41	jcrisp	1.1
42			%description
43			PHPki is an Open Source Web application for managing a multi-agency PKI for HIPAA compliance.
44			With it, you may create and centrally manage X.509 certificates for use with S/MIME enabled
45			e-mail clients, SSL servers, and VPN applications.
46			This package contains specific configuration for SME server
47
48
49			%changelog
50	jpp	1.16	* Fri Nov 18 2022 Jean-Philippe Pialasse <tests@pialasse.com> 0.3-12.sme
51			- add some more needed bins which cat and egrep [SME: 11438]
52
53	jpp	1.15	* Fri Nov 18 2022 Jean-Philippe Pialasse <tests@pialasse.com> 0.3-11.sme
54			- fix missing takey [SME: 11438]
55
56	jpp	1.14	* Fri Nov 18 2022 Jean-Philippe Pialasse <tests@pialasse.com> 0.3-10.sme
57			- ease migration from smeserver-phpki smeserver-phpki-ng using Provides [SME: 12222]
58			- fix ownership on migration (backup/restore) [SME: 12228]
59			- remove /var/service/httpd-pki [SME: 12229]
60			- remove old logrotate [SME: 11873]
61			- remove /var/log/phpki and /var/log/httpd-pki [SME: 12198]
62
63	jcrisp	1.13	* Tue Oct 04 2022 John Crisp <jcrisp@safeandsoundit.co.uk> 0.3-9.sme
64			- Fix spec file versioning
65
66			* Sat Jul 30 2022 Brian Read <brianr@bjsystems.co.uk> 0.3-8.sme
67	brianr	1.12	- Re-build and link to latest devtools [SME: 11997]
68
69	jpp	1.9	* Thu Jul 21 2022 Jean-Philippe Pialasse <tests@pialasse.com> 0.3-7.sme
70			- add to core backup [SME: 12021]
71	jpp	1.10	- httpd 2.4 access syntax [SME: 12054]
72	jpp	1.9
73	jcrisp	1.8	* Thu Aug 05 2021 John Crisp <jcrisp@safeandsoundit.co.uk> 0.3-6.sme
74			- remove modules from patch file [SME: 11402]
75
76	jcrisp	1.7	* Sun Mar 07 2021 John Crisp <jcrisp@safeandsoundit.co.uk> 0.3-5.sme
77			- modify dirs in spec file
78
79	jpp	1.5	* Thu Feb 25 2021 Jean-Philipe Pialasse <tests@pialasse.com> 0.3-4.sme
80			- configure php73 pool [SME: 11207]
81			tidy httpd.conf file
82			reuse phpki user and group
83
84	brianr	1.4	* Sat Feb 13 2021 Brian Read <brianr@bjsystems.co.uk> 0.3-3.sme
85			- Set execution bit on /opt/phpki/html/ca in spec file[SME: 11207]
86
87	brianr	1.3	* Tue Feb 09 2021 Brian Read <brianr@bjsystems.co.uk> 0.3-3.sme
88			- Add-in-systemd-startup [SME: 11207]
89
90	brianr	1.2	* Thu Nov 26 2020 Brian Read <brianr@bjsystems.co.uk> 0.3-2.sme
91			- Add in Loadmodules needed to pki-conf/httpd.conf [SME: 11207]
92
93	jcrisp	1.1	* Fri Apr 03 2020 John Crisp <jcrisp@safeandsoundit.co.uk> 0.3-1.sme
94			- New release for phpki-ng-0.84 based on phpki-0.83
95
96			* Wed May 03 2017 Jean-Philipe Pialasse <tests@pialasse.com> 0.2-3.sme
97			- update TKT auth parameter for SME 9.2 update [SME: 10267]
98
99			* Mon Nov 18 2013 Daniel B. <daniel@firewall-services.com> - 0.2-2.sme
100			- Fix a redirect issue with user-manager and LemonLDAP::NG as SSO
101
102			* Mon Nov 11 2013 Daniel B. <daniel@firewall-services.com> - 0.2-1.sme
103			- Rebuild for SME9
104			- Do not disable httpd-pki service on uninstall
105
106			* Fri May 24 2013 JP Pialasse <tests@pialasse.com> - 0.1-6.sme
107			- added php-process as dependency [SME: 7439]
108
109			* Thu Oct 13 2011 Daniel B. <daniel@firewall-services.com> - 0.1-5.sme
110			- Change session path [SME: 6661]
111
112			* Wed Jul 20 2011 Daniel B. <daniel@firewall-services.com> - 0.1-5.sme
113			- Protect by location (so we can set another location protected by LemonLDAP::NG)
114
115			* Mon Feb 23 2009 Daniel B. <daniel@firewall-services.com> [0.1-4]
116			- Fix logrotate issue (send a sigusr1 signal to httpd-pki)
117
118			* Mon Dec 15 2008 Daniel B. <daniel@firewall-services.com> [0.1-3]
119			- Move server-manager panel to "security" section
120
121			* Wed Dec 10 2008 Daniel B. <daniel@firewall-services.com> [0.1-2]
122			- expand-templates in bootstrap-console-save instead of post-upgrade
123			- Disable authentication for the public part (so CRL can be updated automatically)
124			- Change the name of the menue in server-manager to certificate Management
125
126			* Tue Dec 02 2008 Daniel B. <daniel@firewall-services.com> [0.1-1]
127			- Restrict access to /phpki/ca for admin, ask for a valid user for /phpki
128			- expand-templates on signal events conf-userpanels and domain-modify
129
130			* Thu Nov 27 2008 Daniel B. <daniel@firewall-services.com> [0.1-0]
131			- initial release
132
133
134			%prep
135			%setup -q -n %{name}-%{version}
136	brianr	1.2	%patch0 -p1
137	brianr	1.3	%patch1 -p1
138	jcrisp	1.7	%patch2 -p1
139			mkdir -p root/var/lib/php/phpki/{tmp,session,opcache}
140	jpp	1.5	rm -rf root/var/lib/php/pki-session
141			mkdir -p root/var/log/phpki
142	jpp	1.9	%patch3 -p1
143	jpp	1.10	%patch4 -p1
144	jpp	1.14	%patch5 -p1
145			rm -rf root/var/service/httpd-pki
146			rm -rf root/var/log/phpki
147	jpp	1.15	%patch6 -p1
148	jcrisp	1.1
149			%build
150			perl createlinks
151
152			%install
153
154			%{__mkdir_p} $RPM_BUILD_ROOT/var/lib/php/pki-session
155
156
157			(cd root ; /usr/bin/find . -depth -print \| /bin/cpio -dump $RPM_BUILD_ROOT)
158	brianr	1.3
159			chmod +x $RPM_BUILD_ROOT/usr/sbin/systemd/httpd-pki
160
161	jcrisp	1.1	/bin/rm -f %{name}-%{version}-filelist
162			/sbin/e-smith/genfilelist $RPM_BUILD_ROOT \
163	jpp	1.5	--dir /var/lib/php/phpki 'attr(0770,root,phpki)' \
164			--dir /var/lib/php/phpki/session 'attr(0770,root,phpki)' \
165			--dir /var/lib/php/phpki/opcache 'attr(0770,root,phpki)' \
166			--dir /var/lib/php/phpki/tmp 'attr(0770,root,phpki)' \
167	jcrisp	1.1	> %{name}-%{version}-filelist
168
169	brianr	1.3	%post
170	jcrisp	1.1
171			%clean
172			rm -rf $RPM_BUILD_ROOT
173
174			%files -f %{name}-%{version}-filelist
175			%defattr(-,root,root)
176
177			%pre
178			#/sbin/e-smith/create-system-user phpki 455 'Phpki User' /opt/phpki /bin/false >& /dev/null \|\| :
179
180			%preun
181
182