/[smeserver]/rpms/dehydrated/sme10/dehydrated.spec
ViewVC logotype

Contents of /rpms/dehydrated/sme10/dehydrated.spec

Parent Directory Parent Directory | Revision Log Revision Log | View Revision Graph Revision Graph


Revision 1.10 - (show annotations) (download)
Thu May 3 17:49:57 2018 UTC (6 years ago) by jpp
Branch: MAIN
CVS Tags: dehydrated-0_6_2-13_el7_sme, HEAD
Changes since 1.9: +5 -2 lines
* Thu May 03 2018 Jean-Philipe Pialasse <tests@pialasse.com> 0.6.2-13.sme
- upgrade to upstream version [SME: 10577]

1 Name: dehydrated
2 %define version 0.6.2
3 %define release 13
4 Version: %{version}
5 Release: %{release}%{?dist}
6 Summary: ACME client in bash
7
8 Group: Application/System
9 License: MIT
10 URL: https://github.com/lukas2511/dehydrated
11 #download released zip and prepend dehydrated- to name
12 Source0: dehydrated-%{version}.tar.gz
13 Source1: integration.tgz
14
15 BuildArch: noarch
16 BuildRoot: /var/tmp/%{name}-%{version}-%{release}-buildroot
17
18 BuildRequires: httpd
19 Requires: openssl
20 Requires: sed
21 Requires: /bin/awk
22 Requires: curl
23 Requires: /bin/mktemp
24
25 Conflicts: letsencrypt.sh
26 Obsoletes: letsencrypt.sh
27
28 %if 0%{?fedora} >= 11 || 0%{?rhel} >= 5
29 %global useselinux 1
30 %else
31 %global useselinux 0
32 %endif
33
34 %description
35 This is a client for signing certificates with an ACME server
36 (currently only provided by Let's Encrypt) implemented as a
37 relatively simple bash-script.
38
39 %prep
40 #unpack source 1
41 %setup -n dehydrated-%{version}
42 # unpack integration package aka source 1; do not delete previous -D, and disable default unpacking -T
43 # this wil unpack the integration file in the previous unpacked dehydrated folder
44 %setup -T -D -a 1
45
46 %build
47 sed -i -e "s|#BASEDIR=.*|BASEDIR=%{_localstatedir}/lib/%{name}/certificates|" \
48 -e "s|#WELLKNOWN=.*|WELLKNOWN=%{_localstatedir}/lib/%{name}/challenges|" \
49 -e "s|#HOOK=.*|HOOK=%{_bindir}/le_hooks.sh|" \
50 -e "s|#DOMAINS_TXT=.*|DOMAINS_TXT=%{_sysconfdir}/%{name}/domains.txt|" \
51 docs/examples/config
52
53 %install
54 install -d $RPM_BUILD_ROOT/%{_localstatedir}/lib/%{name}/challenges
55 install -d $RPM_BUILD_ROOT/%{_localstatedir}/lib/%{name}/certificates
56 install -D dehydrated $RPM_BUILD_ROOT/%{_bindir}/%{name}
57 install integration/dehydrated_hooks $RPM_BUILD_ROOT/%{_bindir}/dehydrated_hooks
58 install integration/dehydrated_revoke $RPM_BUILD_ROOT/%{_bindir}/dehydrated_revoke
59 install -d $RPM_BUILD_ROOT/%{_sysconfdir}/%{name}/hooks_deploy_cert.d
60 install -d $RPM_BUILD_ROOT/%{_sysconfdir}/%{name}/hooks_clean_challenge.d
61 install -D -m 0644 integration/httpd.sh.sample $RPM_BUILD_ROOT/%{_sysconfdir}/%{name}/hooks_deploy_cert.d/10httpd.sh.sample
62 install -D -m 0644 docs/examples/config $RPM_BUILD_ROOT/%{_sysconfdir}/%{name}/config
63 install -D -m 0644 docs/examples/domains.txt $RPM_BUILD_ROOT/%{_sysconfdir}/%{name}/domains.txt
64 install -d $RPM_BUILD_ROOT/%{_sysconfdir}/cron.daily/
65 cat <<"_EOF" > $RPM_BUILD_ROOT/%{_sysconfdir}/cron.daily/%{name}
66 #!/bin/sh
67 # Uncomment to enable auto-renewal
68 # %{_bindir}/%{name} -c 2>&1 | awk '{ print strftime(), $0; fflush(); }' >> %{_localstatedir}/log/%{name}.log
69
70 # Uncomment this to auto revoke old certs
71 # %{_bindir}/dehydrated_revoke 2>&1 | awk '{ print strftime(), $0; fflush(); }' >> %{_localstatedir}/log/%{name}.log
72
73 _EOF
74 install -d $RPM_BUILD_ROOT/%{_sysconfdir}/httpd/conf.d
75 cat <<"_EOF" > $RPM_BUILD_ROOT/%{_sysconfdir}/httpd/conf.d/dehydrated.conf
76
77 Alias /.well-known/acme-challenge/ %{_localstatedir}/lib/%{name}/challenges/
78
79 <Directory %{_localstatedir}/lib/%{name}/challenges>
80 Options None
81 AllowOverride None
82 Header set Content-Type "application/jose+json"
83 <IfModule mod_authz_core.c>
84 # Apache 2.4
85 Require all granted
86 </IfModule>
87 <IfModule !mod_authz_core.c>
88 # Apache 2.2
89 Order deny,allow
90 Allow from all
91 </IfModule>
92 </Directory>
93 _EOF
94 install -d -m 750 $RPM_BUILD_ROOT/%{_sysconfdir}/logrotate.d
95 cat <<"_EOF" > $RPM_BUILD_ROOT/%{_sysconfdir}/logrotate.d/%{name}
96 /var/log/%{name}.log {
97 missingok
98 copytruncate
99 rotate 12
100 compress
101 weekly
102 create 0660 root root
103 }
104 _EOF
105
106 %post
107 %if %{useselinux}
108 (
109 # New File context
110 semanage fcontext -a -t var_lib_t "%{_localstatedir}/lib/dehydrated(/.*)?"
111 # files created by app
112 restorecon -R %{_localstatedir}/lib/dehydrated
113 ) &>/dev/null || :
114 %endif
115
116 # Migrate from letsencrypt.sh
117 if [ -e %{_sysconfdir}/letsencrypt.sh/config ]; then
118 sed -e 's/letsencrypt.sh/dehydrated/g' \
119 -e 's/le_hooks.sh/dehydrated_hooks/g' \
120 %{_sysconfdir}/letsencrypt.sh/config > %{_sysconfdir}/%{name}/config
121 fi
122 if [ -e %{_sysconfdir}/letsencrypt.sh/domains.txt ]; then
123 cat %{_sysconfdir}/letsencrypt.sh/domains.txt > %{_sysconfdir}/%{name}/domains.txt
124 fi
125 if [ -d %{_localstatedir}/lib/letsencrypt.sh/certificates/certs ]; then
126 mv %{_localstatedir}/lib/letsencrypt.sh/certificates/* %{_localstatedir}/lib/%{name}/certificates/
127 fi
128 sed -i -e 's|%{_localstatedir}/lib/letsencrypt.sh|%{_localstatedir}/lib/%{name}|g' %{_sysconfdir}/httpd/conf.d/ssl.conf
129 if [ -d %{_sysconfdir}/letsencrypt.sh/hooks_deploy_cert.d/ ]; then
130 find %{_sysconfdir}/letsencrypt.sh/hooks_deploy_cert.d/ -type f -perm /111 -exec mv "{}" %{_sysconfdir}/%{name}/hooks_deploy_cert.d/ \;
131 fi
132 if [ -d %{_sysconfdir}/letsencrypt.sh/hooks_clean_challenge.d/ ]; then
133 find %{_sysconfdir}/letsencrypt.sh/hooks_clean_challenge.d/ -type f -perm /111 -exec mv "{}" %{_sysconfdir}/%{name}/hooks_clean_challenge.d/ \;
134 fi
135
136 %postun
137 %if %{useselinux}
138 if [ "$1" -eq "0" ]; then
139 # Remove the File Context
140 (
141 semanage fcontext -d "%{_localstatedir}/lib/dehydrated(/.*)?"
142 ) &>/dev/null || :
143 fi
144 %endif
145
146 %files
147 %doc LICENSE README.md docs/examples/hook.sh
148 %dir %attr(0755,root,root) %{_sysconfdir}/%{name}/hooks_clean_challenge.d/
149 %attr(0644, root,root) %{_sysconfdir}/%{name}/hooks_deploy_cert.d/*
150 %config(noreplace) %{_sysconfdir}/%{name}/domains.txt
151 %config(noreplace) %{_sysconfdir}/%{name}/config
152 %config(noreplace) %attr(0755,root,root) %{_sysconfdir}/cron.daily/%{name}
153 %config(noreplace) %{_sysconfdir}/httpd/conf.d/%{name}.conf
154 %config(noreplace) %{_sysconfdir}/logrotate.d/%{name}
155 %attr(0755,root,root) %{_bindir}/%{name}
156 %attr(0755,root,root) %{_bindir}/dehydrated_hooks
157 %attr(0755,root,root) %{_bindir}/dehydrated_revoke
158 %dir %attr(0750,root,apache) %{_localstatedir}/lib/%{name}/challenges
159 %dir %attr(0750,root,root) %{_localstatedir}/lib/%{name}/certificates
160
161 %changelog
162 * Thu May 03 2018 Jean-Philipe Pialasse <tests@pialasse.com> 0.6.2-13.sme
163 - upgrade to upstream version [SME: 10577]
164
165 * Wed Apr 11 2018 Jean-Philipe Pialasse <tests@pialasse.com> 0.6.1-12.sme
166 - upgrade to upstream version [SME: 10565]
167
168 * Fri Feb 16 2018 Jean-Philipe Pialasse <tests@pialasse.com> Version: 0.5.0-3.sme
169 - fix Dehydrated caused rate limits to be reached [SME: 10521]
170
171 * Fri Feb 16 2018 Jean-Philipe Pialasse <tests@pialasse.com> 0.5.0-1.sme
172 - upgrade to upstream version [SME: 10521]
173
174 * Fri Feb 10 2017 Jean-Philipe Pialasse <tests@pialasse.com> - 0.4.0-1.sme
175 - update architecture of sources and release/version number
176 - according to Charlie Brady recomendations
177 - see [SME 9901]
178 * Mon Feb 06 2017 Jean-Philipe Pialasse <tests@pialasse.com> - 0.4.0.20170205.git1163864.sme
179 - update dehydrated to 0.4 [SME: 10080]
180 - see https://github.com/lukas2511/dehydrated/releases/tag/v0.4.0
181 - upstream release Version 0.4.0 commit 116386486b3749e4c5e1b4da35904f30f8b2749b
182
183 * Fri Jan 06 2017 Jean-Philipe Pialasse <tests@pialasse.com> - 0.3.0.20160914.gitcaeed7d-4.sme
184 - Initial import in SME Server Buildsys [SME: 9901]
185
186 * Mon Oct 24 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.3.0.20160914.gitcaeed7d-3
187 - Fix warning when installing dehydrated without upgrading from letsencrypt.sh
188
189 * Mon Sep 19 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.3.0.20160914.gitcaeed7d-2
190 - Fix find command to work with older find versions (on el5), replace -executable with -perm /111
191
192 * Wed Sep 14 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.3.0.20160914.gitcaeed7d-1
193 - Renamed to dehydrated
194
195 * Wed Aug 24 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.0.20160803.gitafabfff-2
196 - Set var_lib_t context to files
197
198 * Wed Aug 3 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.0.20160803.gitafabfff-1
199 - Update to git afabfff
200
201 * Mon Jun 6 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.0.20160531.gitec48906-4
202 - Default to enable HOOK in config
203
204 * Fri Jun 3 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.0.20160531.gitec48906-3
205 - Add missing exec permission on daily cronjob script
206
207 * Wed Jun 1 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.0.20160531.gitec48906-2
208 - Fix le_revoke.sh script to use config instead of config.sh
209
210 * Tue May 31 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.0.20160531.gitec48906-1
211 - Update to git ec48906
212
213 * Fri May 13 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.0.20160513.gita286741-1
214 - Update to git a286741
215
216 * Wed Mar 30 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.0.20160330.gitdca25e8-1
217 - Update to git dca25e8
218 - Fix arg shifting in le_hooks script
219
220 * Tue Feb 23 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.0.20160223.git2099c77-1
221 - Update to GIT git2099c77
222
223 * Sat Jan 30 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.0.20160127.git79ff846-2
224 - Rename httpd.sh hook to 10httpd.sh
225 - Provide le_revoke.sh script to revoke old certificates
226 - Add timestamp to logs using awk
227
228 * Fri Jan 29 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.0.20160127.git79ff846-1
229 - Use date based version number
230
231 * Wed Jan 27 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.0.3.git79ff846-1
232 - Update to git 79ff846
233
234 * Mon Jan 25 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.0.2.git3432f60-1
235 - Add hooks directory
236
237 * Mon Jan 25 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.0.1.git3432f60-1
238 - First package

admin@koozali.org
ViewVC Help
Powered by ViewVC 1.2.1 RSS 2.0 feed