smeserver-phpki-ng/contribs10/smeserver-phpki-ng.spec

# $Id: smeserver-phpki.spec,v 1.6 2017/05/03 21:08:27 unnilennium Exp $
# Authority: vip-ire
# Name: Daniel Berteaud

Name:           smeserver-phpki-ng
Version:        0.3
Release:        14%{?dist}
Summary:        php integration into SME server

Group:          Applications/System
License:        GPL
URL:            http://phpki.sourceforge.net/
Source:         %{name}-%{version}.tar.xz

#Patch0:        smeserver-phpki-0.2-fix_redirect_with_user-manager_and_sso.patch
#Patch1:        smeserver-phpki-0.2.bz10267.updatetktauth.patch

Patch0:         smeserver-phpki-ng-0.3-Add-extra-Loadmodules-to-httpd-conf.patch
Patch1:         smeserver-phpki-ng-0.3-Add-in-systemd-startup.patch
Patch2:         smeserver-phpki-ng-0.3-php73pool.patch
Patch3:         smeserver-phpki-ng-0.3-bz12021-backup.patch
Patch4:         smeserver-phpki-ng-0.3-bz12054-httpd24.patch
Patch5:         smeserver-phpki-ng-0.3-bz12228-12198-11873-12229.patch
Patch6:         smeserver-phpki-ng-0.3-bz11438-takey.patch
Patch7:         smeserver-phpki-ng-0.3-httpd-typos.patch

BuildRoot:      %{_tmppath}/%{name}-%{version}
BuildArch:      noarch

BuildRequires:  e-smith-devtools

Requires:       mod_auth_tkt
Requires:       openvpn
Requires:       e-smith-base
Requires:       phpki-ng
Requires:       php-process
Requires:       e-smith-manager >= 2.6.0-22
Requires:       e-smith-apache >= 2.6.0-19
Requires:       smeserver-php >= 3.0.0-43
Provides:       smeserver-phpki
#Obsoletes:     smeserver-phpki

%description
PHPki is an Open Source Web application for managing a multi-agency PKI for HIPAA compliance.
With it, you may create and centrally manage X.509 certificates for use with S/MIME enabled
e-mail clients, SSL servers, and VPN applications.
This package contains specific configuration for SME server


%changelog
* Sun Nov 20 2022 Jean-Philippe Pialasse <tests@pialasse.com> 0.3-14.sme
- fix  typo preventing httpd-pki to start 

* Fri Nov 18 2022 Jean-Philippe Pialasse <tests@pialasse.com> 0.3-13.sme
- add some more needed bins which cat and egrep [SME: 11438]

* Fri Nov 18 2022 Jean-Philippe Pialasse <tests@pialasse.com> 0.3-11.sme
- fix missing takey [SME: 11438]

* Fri Nov 18 2022 Jean-Philippe Pialasse <tests@pialasse.com> 0.3-10.sme
- ease migration from smeserver-phpki smeserver-phpki-ng using Provides [SME: 12222]
- fix ownership on migration (backup/restore) [SME: 12228] 
- remove /var/service/httpd-pki [SME: 12229] 
- remove old logrotate [SME: 11873]
- remove /var/log/phpki and /var/log/httpd-pki [SME: 12198]

* Tue Oct 04 2022 John Crisp <jcrisp@safeandsoundit.co.uk> 0.3-9.sme
- Fix spec file versioning

* Sat Jul 30 2022 Brian Read <brianr@bjsystems.co.uk> 0.3-8.sme
- Re-build and link to latest devtools [SME: 11997]

* Thu Jul 21 2022 Jean-Philippe Pialasse <tests@pialasse.com> 0.3-7.sme
- add to core backup [SME: 12021]
- httpd 2.4 access syntax [SME: 12054]

* Thu Aug 05 2021 John Crisp <jcrisp@safeandsoundit.co.uk> 0.3-6.sme
- remove modules from patch file [SME: 11402]

* Sun Mar 07 2021 John Crisp <jcrisp@safeandsoundit.co.uk> 0.3-5.sme
- modify dirs in spec file

* Thu Feb 25 2021 Jean-Philipe Pialasse <tests@pialasse.com> 0.3-4.sme
- configure php73 pool [SME: 11207]
  tidy httpd.conf file
  reuse phpki user and group

* Sat Feb 13 2021 Brian Read <brianr@bjsystems.co.uk> 0.3-3.sme
- Set execution bit on /opt/phpki/html/ca in spec file[SME: 11207]

* Tue Feb 09 2021 Brian Read <brianr@bjsystems.co.uk> 0.3-3.sme
- Add-in-systemd-startup [SME: 11207]

* Thu Nov 26 2020 Brian Read <brianr@bjsystems.co.uk> 0.3-2.sme
- Add in Loadmodules needed to pki-conf/httpd.conf [SME: 11207]

* Fri Apr 03 2020 John Crisp <jcrisp@safeandsoundit.co.uk> 0.3-1.sme
- New release for phpki-ng-0.84 based on phpki-0.83

* Wed May 03 2017 Jean-Philipe Pialasse <tests@pialasse.com> 0.2-3.sme
- update TKT auth parameter for SME 9.2 update [SME: 10267]

* Mon Nov 18 2013 Daniel B. <daniel@firewall-services.com> - 0.2-2.sme
- Fix a redirect issue with user-manager and LemonLDAP::NG as SSO

* Mon Nov 11 2013 Daniel B. <daniel@firewall-services.com> - 0.2-1.sme
- Rebuild for SME9
- Do not disable httpd-pki service on uninstall

* Fri May 24 2013 JP Pialasse <tests@pialasse.com> - 0.1-6.sme
- added php-process as dependency [SME: 7439]

* Thu Oct 13 2011 Daniel B. <daniel@firewall-services.com> - 0.1-5.sme
- Change session path [SME: 6661]

* Wed Jul 20 2011 Daniel B. <daniel@firewall-services.com> - 0.1-5.sme
- Protect by location (so we can set another location protected by LemonLDAP::NG)

* Mon Feb 23 2009 Daniel B. <daniel@firewall-services.com> [0.1-4]
- Fix logrotate issue (send a sigusr1 signal to httpd-pki)

* Mon Dec 15 2008 Daniel B. <daniel@firewall-services.com> [0.1-3]
- Move server-manager panel to "security" section

* Wed Dec 10 2008 Daniel B. <daniel@firewall-services.com> [0.1-2]
- expand-templates in bootstrap-console-save instead of post-upgrade
- Disable authentication for the public part (so CRL can be updated automatically)
- Change the name of the menue in server-manager to certificate Management

* Tue Dec 02 2008 Daniel B. <daniel@firewall-services.com> [0.1-1]
- Restrict access to /phpki/ca for admin, ask for a valid user for /phpki
- expand-templates on signal events conf-userpanels and domain-modify

* Thu Nov 27 2008 Daniel B. <daniel@firewall-services.com> [0.1-0]
- initial release


%prep
%setup -q -n %{name}-%{version}
%patch0 -p1
%patch1 -p1
%patch2 -p1
mkdir -p root/var/lib/php/phpki/{tmp,session,opcache}
rm -rf root/var/lib/php/pki-session
mkdir -p root/var/log/phpki
%patch3 -p1
%patch4 -p1
%patch5 -p1
rm -rf root/var/service/httpd-pki
rm -rf root/var/log/phpki
%patch6 -p1
%patch7 -p1

%build
perl createlinks

%install

%{__mkdir_p} $RPM_BUILD_ROOT/var/lib/php/pki-session


(cd root   ; /usr/bin/find . -depth -print | /bin/cpio -dump $RPM_BUILD_ROOT)

chmod +x $RPM_BUILD_ROOT/usr/sbin/systemd/httpd-pki

/bin/rm -f %{name}-%{version}-filelist
/sbin/e-smith/genfilelist $RPM_BUILD_ROOT \
        --dir /var/lib/php/phpki 'attr(0770,root,phpki)' \
        --dir /var/lib/php/phpki/session 'attr(0770,root,phpki)' \
        --dir /var/lib/php/phpki/opcache 'attr(0770,root,phpki)' \
        --dir /var/lib/php/phpki/tmp 'attr(0770,root,phpki)' \
        > %{name}-%{version}-filelist

%post

%clean
rm -rf $RPM_BUILD_ROOT

%files -f %{name}-%{version}-filelist
%defattr(-,root,root)

%pre
#/sbin/e-smith/create-system-user phpki 455 'Phpki User' /opt/phpki /bin/false >& /dev/null || :

%preun


1	jcrisp	1.1	# $Id: smeserver-phpki.spec,v 1.6 2017/05/03 21:08:27 unnilennium Exp $
2			# Authority: vip-ire
3			# Name: Daniel Berteaud
4
5			Name: smeserver-phpki-ng
6			Version: 0.3
7	jpp	1.18	Release: 14%{?dist}
8	jcrisp	1.1	Summary: php integration into SME server
9
10			Group: Applications/System
11			License: GPL
12			URL: http://phpki.sourceforge.net/
13			Source: %{name}-%{version}.tar.xz
14	brianr	1.2
15	jcrisp	1.1	#Patch0: smeserver-phpki-0.2-fix_redirect_with_user-manager_and_sso.patch
16			#Patch1: smeserver-phpki-0.2.bz10267.updatetktauth.patch
17
18	brianr	1.2	Patch0: smeserver-phpki-ng-0.3-Add-extra-Loadmodules-to-httpd-conf.patch
19	brianr	1.3	Patch1: smeserver-phpki-ng-0.3-Add-in-systemd-startup.patch
20	jpp	1.5	Patch2: smeserver-phpki-ng-0.3-php73pool.patch
21	jpp	1.9	Patch3: smeserver-phpki-ng-0.3-bz12021-backup.patch
22	jpp	1.10	Patch4: smeserver-phpki-ng-0.3-bz12054-httpd24.patch
23	jpp	1.14	Patch5: smeserver-phpki-ng-0.3-bz12228-12198-11873-12229.patch
24	jpp	1.15	Patch6: smeserver-phpki-ng-0.3-bz11438-takey.patch
25	jpp	1.18	Patch7: smeserver-phpki-ng-0.3-httpd-typos.patch
26	brianr	1.2
27	jcrisp	1.1	BuildRoot: %{_tmppath}/%{name}-%{version}
28			BuildArch: noarch
29
30			BuildRequires: e-smith-devtools
31
32			Requires: mod_auth_tkt
33	jpp	1.15	Requires: openvpn
34	jcrisp	1.1	Requires: e-smith-base
35			Requires: phpki-ng
36			Requires: php-process
37			Requires: e-smith-manager >= 2.6.0-22
38	jpp	1.11	Requires: e-smith-apache >= 2.6.0-19
39			Requires: smeserver-php >= 3.0.0-43
40	jpp	1.14	Provides: smeserver-phpki
41			#Obsoletes: smeserver-phpki
42	jcrisp	1.1
43			%description
44			PHPki is an Open Source Web application for managing a multi-agency PKI for HIPAA compliance.
45			With it, you may create and centrally manage X.509 certificates for use with S/MIME enabled
46			e-mail clients, SSL servers, and VPN applications.
47			This package contains specific configuration for SME server
48
49
50			%changelog
51	jpp	1.18	* Sun Nov 20 2022 Jean-Philippe Pialasse <tests@pialasse.com> 0.3-14.sme
52			- fix typo preventing httpd-pki to start
53
54	jpp	1.17	* Fri Nov 18 2022 Jean-Philippe Pialasse <tests@pialasse.com> 0.3-13.sme
55	jpp	1.16	- add some more needed bins which cat and egrep [SME: 11438]
56
57	jpp	1.15	* Fri Nov 18 2022 Jean-Philippe Pialasse <tests@pialasse.com> 0.3-11.sme
58			- fix missing takey [SME: 11438]
59
60	jpp	1.14	* Fri Nov 18 2022 Jean-Philippe Pialasse <tests@pialasse.com> 0.3-10.sme
61			- ease migration from smeserver-phpki smeserver-phpki-ng using Provides [SME: 12222]
62			- fix ownership on migration (backup/restore) [SME: 12228]
63			- remove /var/service/httpd-pki [SME: 12229]
64			- remove old logrotate [SME: 11873]
65			- remove /var/log/phpki and /var/log/httpd-pki [SME: 12198]
66
67	jcrisp	1.13	* Tue Oct 04 2022 John Crisp <jcrisp@safeandsoundit.co.uk> 0.3-9.sme
68			- Fix spec file versioning
69
70			* Sat Jul 30 2022 Brian Read <brianr@bjsystems.co.uk> 0.3-8.sme
71	brianr	1.12	- Re-build and link to latest devtools [SME: 11997]
72
73	jpp	1.9	* Thu Jul 21 2022 Jean-Philippe Pialasse <tests@pialasse.com> 0.3-7.sme
74			- add to core backup [SME: 12021]
75	jpp	1.10	- httpd 2.4 access syntax [SME: 12054]
76	jpp	1.9
77	jcrisp	1.8	* Thu Aug 05 2021 John Crisp <jcrisp@safeandsoundit.co.uk> 0.3-6.sme
78			- remove modules from patch file [SME: 11402]
79
80	jcrisp	1.7	* Sun Mar 07 2021 John Crisp <jcrisp@safeandsoundit.co.uk> 0.3-5.sme
81			- modify dirs in spec file
82
83	jpp	1.5	* Thu Feb 25 2021 Jean-Philipe Pialasse <tests@pialasse.com> 0.3-4.sme
84			- configure php73 pool [SME: 11207]
85			tidy httpd.conf file
86			reuse phpki user and group
87
88	brianr	1.4	* Sat Feb 13 2021 Brian Read <brianr@bjsystems.co.uk> 0.3-3.sme
89			- Set execution bit on /opt/phpki/html/ca in spec file[SME: 11207]
90
91	brianr	1.3	* Tue Feb 09 2021 Brian Read <brianr@bjsystems.co.uk> 0.3-3.sme
92			- Add-in-systemd-startup [SME: 11207]
93
94	brianr	1.2	* Thu Nov 26 2020 Brian Read <brianr@bjsystems.co.uk> 0.3-2.sme
95			- Add in Loadmodules needed to pki-conf/httpd.conf [SME: 11207]
96
97	jcrisp	1.1	* Fri Apr 03 2020 John Crisp <jcrisp@safeandsoundit.co.uk> 0.3-1.sme
98			- New release for phpki-ng-0.84 based on phpki-0.83
99
100			* Wed May 03 2017 Jean-Philipe Pialasse <tests@pialasse.com> 0.2-3.sme
101			- update TKT auth parameter for SME 9.2 update [SME: 10267]
102
103			* Mon Nov 18 2013 Daniel B. <daniel@firewall-services.com> - 0.2-2.sme
104			- Fix a redirect issue with user-manager and LemonLDAP::NG as SSO
105
106			* Mon Nov 11 2013 Daniel B. <daniel@firewall-services.com> - 0.2-1.sme
107			- Rebuild for SME9
108			- Do not disable httpd-pki service on uninstall
109
110			* Fri May 24 2013 JP Pialasse <tests@pialasse.com> - 0.1-6.sme
111			- added php-process as dependency [SME: 7439]
112
113			* Thu Oct 13 2011 Daniel B. <daniel@firewall-services.com> - 0.1-5.sme
114			- Change session path [SME: 6661]
115
116			* Wed Jul 20 2011 Daniel B. <daniel@firewall-services.com> - 0.1-5.sme
117			- Protect by location (so we can set another location protected by LemonLDAP::NG)
118
119			* Mon Feb 23 2009 Daniel B. <daniel@firewall-services.com> [0.1-4]
120			- Fix logrotate issue (send a sigusr1 signal to httpd-pki)
121
122			* Mon Dec 15 2008 Daniel B. <daniel@firewall-services.com> [0.1-3]
123			- Move server-manager panel to "security" section
124
125			* Wed Dec 10 2008 Daniel B. <daniel@firewall-services.com> [0.1-2]
126			- expand-templates in bootstrap-console-save instead of post-upgrade
127			- Disable authentication for the public part (so CRL can be updated automatically)
128			- Change the name of the menue in server-manager to certificate Management
129
130			* Tue Dec 02 2008 Daniel B. <daniel@firewall-services.com> [0.1-1]
131			- Restrict access to /phpki/ca for admin, ask for a valid user for /phpki
132			- expand-templates on signal events conf-userpanels and domain-modify
133
134			* Thu Nov 27 2008 Daniel B. <daniel@firewall-services.com> [0.1-0]
135			- initial release
136
137
138			%prep
139			%setup -q -n %{name}-%{version}
140	brianr	1.2	%patch0 -p1
141	brianr	1.3	%patch1 -p1
142	jcrisp	1.7	%patch2 -p1
143			mkdir -p root/var/lib/php/phpki/{tmp,session,opcache}
144	jpp	1.5	rm -rf root/var/lib/php/pki-session
145			mkdir -p root/var/log/phpki
146	jpp	1.9	%patch3 -p1
147	jpp	1.10	%patch4 -p1
148	jpp	1.14	%patch5 -p1
149			rm -rf root/var/service/httpd-pki
150			rm -rf root/var/log/phpki
151	jpp	1.15	%patch6 -p1
152	jpp	1.18	%patch7 -p1
153	jcrisp	1.1
154			%build
155			perl createlinks
156
157			%install
158
159			%{__mkdir_p} $RPM_BUILD_ROOT/var/lib/php/pki-session
160
161
162			(cd root ; /usr/bin/find . -depth -print \| /bin/cpio -dump $RPM_BUILD_ROOT)
163	brianr	1.3
164			chmod +x $RPM_BUILD_ROOT/usr/sbin/systemd/httpd-pki
165
166	jcrisp	1.1	/bin/rm -f %{name}-%{version}-filelist
167			/sbin/e-smith/genfilelist $RPM_BUILD_ROOT \
168	jpp	1.5	--dir /var/lib/php/phpki 'attr(0770,root,phpki)' \
169			--dir /var/lib/php/phpki/session 'attr(0770,root,phpki)' \
170			--dir /var/lib/php/phpki/opcache 'attr(0770,root,phpki)' \
171			--dir /var/lib/php/phpki/tmp 'attr(0770,root,phpki)' \
172	jcrisp	1.1	> %{name}-%{version}-filelist
173
174	brianr	1.3	%post
175	jcrisp	1.1
176			%clean
177			rm -rf $RPM_BUILD_ROOT
178
179			%files -f %{name}-%{version}-filelist
180			%defattr(-,root,root)
181
182			%pre
183			#/sbin/e-smith/create-system-user phpki 455 'Phpki User' /opt/phpki /bin/false >& /dev/null \|\| :
184
185			%preun
186
187