1 |
# $Id: smeserver-phpki.spec,v 1.6 2017/05/03 21:08:27 unnilennium Exp $ |
2 |
# Authority: vip-ire |
3 |
# Name: Daniel Berteaud |
4 |
|
5 |
Name: smeserver-phpki-ng |
6 |
Version: 0.3 |
7 |
Release: 18%{?dist} |
8 |
Summary: php integration into SME server |
9 |
|
10 |
Group: Applications/System |
11 |
License: GPL |
12 |
URL: http://phpki.sourceforge.net/ |
13 |
Source: %{name}-%{version}.tar.xz |
14 |
|
15 |
#Patch0: smeserver-phpki-0.2-fix_redirect_with_user-manager_and_sso.patch |
16 |
#Patch1: smeserver-phpki-0.2.bz10267.updatetktauth.patch |
17 |
|
18 |
Patch0: smeserver-phpki-ng-0.3-Add-extra-Loadmodules-to-httpd-conf.patch |
19 |
Patch1: smeserver-phpki-ng-0.3-Add-in-systemd-startup.patch |
20 |
Patch2: smeserver-phpki-ng-0.3-php73pool.patch |
21 |
Patch3: smeserver-phpki-ng-0.3-bz12021-backup.patch |
22 |
Patch4: smeserver-phpki-ng-0.3-bz12054-httpd24.patch |
23 |
Patch5: smeserver-phpki-ng-0.3-bz12228-12198-11873-12229.patch |
24 |
Patch6: smeserver-phpki-ng-0.3-bz11438-takey.patch |
25 |
Patch7: smeserver-phpki-ng-0.3-httpd-typos.patch |
26 |
Patch8: smeserver-phpki-ng-0.3-bz12268-bz12266-bz11440-bz11439.patch |
27 |
|
28 |
BuildRoot: %{_tmppath}/%{name}-%{version} |
29 |
BuildArch: noarch |
30 |
|
31 |
BuildRequires: e-smith-devtools |
32 |
|
33 |
Requires: mod_auth_tkt |
34 |
Requires: openvpn |
35 |
Requires: e-smith-base |
36 |
Requires: phpki-ng >= 0.84-14 |
37 |
Requires: php-process |
38 |
Requires: e-smith-manager >= 2.6.0-22 |
39 |
Requires: e-smith-apache >= 2.6.0-19 |
40 |
Requires: smeserver-php >= 3.0.0-44 |
41 |
Provides: smeserver-phpki |
42 |
#Obsoletes: smeserver-phpki |
43 |
|
44 |
%description |
45 |
PHPki is an Open Source Web application for managing a multi-agency PKI for HIPAA compliance. |
46 |
With it, you may create and centrally manage X.509 certificates for use with S/MIME enabled |
47 |
e-mail clients, SSL servers, and VPN applications. |
48 |
This package contains specific configuration for SME server |
49 |
|
50 |
|
51 |
%changelog |
52 |
* Wed Dec 14 2022 Jean-Philippe Pialasse <tests@pialasse.com> 0.3-18.sme |
53 |
- revert log/phpki [SME: 12266] |
54 |
- phpki-ng autopopulate base info from ldap [SME: 11440] |
55 |
- ensure user are seen by php-pool [SME: 12268] |
56 |
- safe remote access for crl [SME: 11439] |
57 |
- 17-18: applying patches |
58 |
|
59 |
* Tue Dec 13 2022 Jean-Philippe Pialasse <tests@pialasse.com> 0.3-15.sme |
60 |
- fix typo preventing httpd-pki to start 2 |
61 |
|
62 |
* Sun Nov 20 2022 Jean-Philippe Pialasse <tests@pialasse.com> 0.3-14.sme |
63 |
- fix typo preventing httpd-pki to start |
64 |
|
65 |
* Fri Nov 18 2022 Jean-Philippe Pialasse <tests@pialasse.com> 0.3-13.sme |
66 |
- add some more needed bins which cat and egrep [SME: 11438] |
67 |
|
68 |
* Fri Nov 18 2022 Jean-Philippe Pialasse <tests@pialasse.com> 0.3-11.sme |
69 |
- fix missing takey [SME: 11438] |
70 |
|
71 |
* Fri Nov 18 2022 Jean-Philippe Pialasse <tests@pialasse.com> 0.3-10.sme |
72 |
- ease migration from smeserver-phpki smeserver-phpki-ng using Provides [SME: 12222] |
73 |
- fix ownership on migration (backup/restore) [SME: 12228] |
74 |
- remove /var/service/httpd-pki [SME: 12229] |
75 |
- remove old logrotate [SME: 11873] |
76 |
- remove /var/log/phpki and /var/log/httpd-pki [SME: 12198] |
77 |
|
78 |
* Tue Oct 04 2022 John Crisp <jcrisp@safeandsoundit.co.uk> 0.3-9.sme |
79 |
- Fix spec file versioning |
80 |
|
81 |
* Sat Jul 30 2022 Brian Read <brianr@bjsystems.co.uk> 0.3-8.sme |
82 |
- Re-build and link to latest devtools [SME: 11997] |
83 |
|
84 |
* Thu Jul 21 2022 Jean-Philippe Pialasse <tests@pialasse.com> 0.3-7.sme |
85 |
- add to core backup [SME: 12021] |
86 |
- httpd 2.4 access syntax [SME: 12054] |
87 |
|
88 |
* Thu Aug 05 2021 John Crisp <jcrisp@safeandsoundit.co.uk> 0.3-6.sme |
89 |
- remove modules from patch file [SME: 11402] |
90 |
|
91 |
* Sun Mar 07 2021 John Crisp <jcrisp@safeandsoundit.co.uk> 0.3-5.sme |
92 |
- modify dirs in spec file |
93 |
|
94 |
* Thu Feb 25 2021 Jean-Philipe Pialasse <tests@pialasse.com> 0.3-4.sme |
95 |
- configure php73 pool [SME: 11207] |
96 |
tidy httpd.conf file |
97 |
reuse phpki user and group |
98 |
|
99 |
* Sat Feb 13 2021 Brian Read <brianr@bjsystems.co.uk> 0.3-3.sme |
100 |
- Set execution bit on /opt/phpki/html/ca in spec file[SME: 11207] |
101 |
|
102 |
* Tue Feb 09 2021 Brian Read <brianr@bjsystems.co.uk> 0.3-3.sme |
103 |
- Add-in-systemd-startup [SME: 11207] |
104 |
|
105 |
* Thu Nov 26 2020 Brian Read <brianr@bjsystems.co.uk> 0.3-2.sme |
106 |
- Add in Loadmodules needed to pki-conf/httpd.conf [SME: 11207] |
107 |
|
108 |
* Fri Apr 03 2020 John Crisp <jcrisp@safeandsoundit.co.uk> 0.3-1.sme |
109 |
- New release for phpki-ng-0.84 based on phpki-0.83 |
110 |
|
111 |
* Wed May 03 2017 Jean-Philipe Pialasse <tests@pialasse.com> 0.2-3.sme |
112 |
- update TKT auth parameter for SME 9.2 update [SME: 10267] |
113 |
|
114 |
* Mon Nov 18 2013 Daniel B. <daniel@firewall-services.com> - 0.2-2.sme |
115 |
- Fix a redirect issue with user-manager and LemonLDAP::NG as SSO |
116 |
|
117 |
* Mon Nov 11 2013 Daniel B. <daniel@firewall-services.com> - 0.2-1.sme |
118 |
- Rebuild for SME9 |
119 |
- Do not disable httpd-pki service on uninstall |
120 |
|
121 |
* Fri May 24 2013 JP Pialasse <tests@pialasse.com> - 0.1-6.sme |
122 |
- added php-process as dependency [SME: 7439] |
123 |
|
124 |
* Thu Oct 13 2011 Daniel B. <daniel@firewall-services.com> - 0.1-5.sme |
125 |
- Change session path [SME: 6661] |
126 |
|
127 |
* Wed Jul 20 2011 Daniel B. <daniel@firewall-services.com> - 0.1-5.sme |
128 |
- Protect by location (so we can set another location protected by LemonLDAP::NG) |
129 |
|
130 |
* Mon Feb 23 2009 Daniel B. <daniel@firewall-services.com> [0.1-4] |
131 |
- Fix logrotate issue (send a sigusr1 signal to httpd-pki) |
132 |
|
133 |
* Mon Dec 15 2008 Daniel B. <daniel@firewall-services.com> [0.1-3] |
134 |
- Move server-manager panel to "security" section |
135 |
|
136 |
* Wed Dec 10 2008 Daniel B. <daniel@firewall-services.com> [0.1-2] |
137 |
- expand-templates in bootstrap-console-save instead of post-upgrade |
138 |
- Disable authentication for the public part (so CRL can be updated automatically) |
139 |
- Change the name of the menue in server-manager to certificate Management |
140 |
|
141 |
* Tue Dec 02 2008 Daniel B. <daniel@firewall-services.com> [0.1-1] |
142 |
- Restrict access to /phpki/ca for admin, ask for a valid user for /phpki |
143 |
- expand-templates on signal events conf-userpanels and domain-modify |
144 |
|
145 |
* Thu Nov 27 2008 Daniel B. <daniel@firewall-services.com> [0.1-0] |
146 |
- initial release |
147 |
|
148 |
|
149 |
%prep |
150 |
%setup -q -n %{name}-%{version} |
151 |
%patch0 -p1 |
152 |
%patch1 -p1 |
153 |
%patch2 -p1 |
154 |
mkdir -p root/var/lib/php/phpki/{tmp,session,opcache} |
155 |
rm -rf root/var/lib/php/pki-session |
156 |
mkdir -p root/var/log/phpki |
157 |
%patch3 -p1 |
158 |
%patch4 -p1 |
159 |
%patch5 -p1 |
160 |
rm -rf root/var/service/httpd-pki |
161 |
%patch6 -p1 |
162 |
%patch7 -p1 |
163 |
%patch8 -p1 |
164 |
|
165 |
%build |
166 |
perl createlinks |
167 |
|
168 |
%install |
169 |
|
170 |
%{__mkdir_p} $RPM_BUILD_ROOT/var/lib/php/pki-session |
171 |
|
172 |
|
173 |
(cd root ; /usr/bin/find . -depth -print | /bin/cpio -dump $RPM_BUILD_ROOT) |
174 |
|
175 |
chmod +x $RPM_BUILD_ROOT/usr/sbin/systemd/httpd-pki |
176 |
|
177 |
/bin/rm -f %{name}-%{version}-filelist |
178 |
/sbin/e-smith/genfilelist $RPM_BUILD_ROOT \ |
179 |
--dir /var/lib/php/phpki 'attr(0770,root,phpki)' \ |
180 |
--dir /var/lib/php/phpki/session 'attr(0770,root,phpki)' \ |
181 |
--dir /var/lib/php/phpki/opcache 'attr(0770,root,phpki)' \ |
182 |
--dir /var/lib/php/phpki/tmp 'attr(0770,root,phpki)' \ |
183 |
--dir /var/log/phpki 'attr(0770,phpki,phpki)' \ |
184 |
> %{name}-%{version}-filelist |
185 |
|
186 |
%post |
187 |
|
188 |
%clean |
189 |
rm -rf $RPM_BUILD_ROOT |
190 |
|
191 |
%files -f %{name}-%{version}-filelist |
192 |
%defattr(-,root,root) |
193 |
|
194 |
%pre |
195 |
#/sbin/e-smith/create-system-user phpki 455 'Phpki User' /opt/phpki /bin/false >& /dev/null || : |
196 |
|
197 |
%preun |
198 |
|
199 |
|