/[smeserver]/rpms/dehydrated/sme9/dehydrated.spec
ViewVC logotype

Annotation of /rpms/dehydrated/sme9/dehydrated.spec

Parent Directory Parent Directory | Revision Log Revision Log | View Revision Graph Revision Graph


Revision 1.3 - (hide annotations) (download)
Fri Feb 16 22:53:29 2018 UTC (6 years, 8 months ago) by jpp
Branch: MAIN
Changes since 1.2: +15 -7 lines
* Fri Feb 16 2018 Jean-Philipe Pialasse <tests@pialasse.com> 0.5.0-1.sme
- upgrade to upstream version [SME: 10521]

1 unnilennium 1.1 Name: dehydrated
2 jpp 1.3 %define version 0.5.0
3     %define release 1
4     Version: %{version}
5     Release: %{release}%{?dist}
6 unnilennium 1.1 Summary: ACME client in bash
7    
8     Group: Application/System
9     License: MIT
10     URL: https://github.com/lukas2511/dehydrated
11 jpp 1.3 Source0: dehydrated-v%{version}.tar.gz
12     Source1: integration.tgz
13 unnilennium 1.1
14     BuildArch: noarch
15     BuildRoot: /var/tmp/%{name}-%{version}-%{release}-buildroot
16    
17     BuildRequires: httpd
18     Requires: openssl
19     Requires: sed
20     Requires: /bin/awk
21     Requires: curl
22     Requires: /bin/mktemp
23    
24     Conflicts: letsencrypt.sh
25     Obsoletes: letsencrypt.sh
26    
27     %if 0%{?fedora} >= 11 || 0%{?rhel} >= 5
28     %global useselinux 1
29     %else
30     %global useselinux 0
31     %endif
32    
33     %description
34     This is a client for signing certificates with an ACME server
35     (currently only provided by Let's Encrypt) implemented as a
36     relatively simple bash-script.
37    
38     %prep
39 jpp 1.3 #unpack source 1
40     %setup -n dehydrated-%{version}
41     %patch0 -p1
42     # unpack integration package aka source 1; do not delete previous -D, and disable default unpacking -T
43     # this wil unpack the integration file in the previous unpacked dehydrated folder
44     %setup -T -D -a 1
45 unnilennium 1.1
46     %build
47     sed -i -e "s|#BASEDIR=.*|BASEDIR=%{_localstatedir}/lib/%{name}/certificates|" \
48     -e "s|#WELLKNOWN=.*|WELLKNOWN=%{_localstatedir}/lib/%{name}/challenges|" \
49     -e "s|#HOOK=.*|HOOK=%{_bindir}/le_hooks.sh|" \
50     -e "s|#DOMAINS_TXT=.*|DOMAINS_TXT=%{_sysconfdir}/%{name}/domains.txt|" \
51     docs/examples/config
52    
53     %install
54     install -d $RPM_BUILD_ROOT/%{_localstatedir}/lib/%{name}/challenges
55     install -d $RPM_BUILD_ROOT/%{_localstatedir}/lib/%{name}/certificates
56     install -D dehydrated $RPM_BUILD_ROOT/%{_bindir}/%{name}
57     install %{SOURCE1} $RPM_BUILD_ROOT/%{_bindir}/dehydrated_hooks
58     install %{SOURCE2} $RPM_BUILD_ROOT/%{_bindir}/dehydrated_revoke
59     install -d $RPM_BUILD_ROOT/%{_sysconfdir}/%{name}/hooks_deploy_cert.d
60     install -d $RPM_BUILD_ROOT/%{_sysconfdir}/%{name}/hooks_clean_challenge.d
61     install -D -m 0644 %{SOURCE3} $RPM_BUILD_ROOT/%{_sysconfdir}/%{name}/hooks_deploy_cert.d/10httpd.sh.sample
62     install -D -m 0644 docs/examples/config $RPM_BUILD_ROOT/%{_sysconfdir}/%{name}/config
63     install -D -m 0644 docs/examples/domains.txt $RPM_BUILD_ROOT/%{_sysconfdir}/%{name}/domains.txt
64     install -d $RPM_BUILD_ROOT/%{_sysconfdir}/cron.daily/
65     cat <<"_EOF" > $RPM_BUILD_ROOT/%{_sysconfdir}/cron.daily/%{name}
66     #!/bin/sh
67     # Uncomment to enable auto-renewal
68     # %{_bindir}/%{name} -c 2>&1 | awk '{ print strftime(), $0; fflush(); }' >> %{_localstatedir}/log/%{name}.log
69    
70     # Uncomment this to auto revoke old certs
71     # %{_bindir}/dehydrated_revoke 2>&1 | awk '{ print strftime(), $0; fflush(); }' >> %{_localstatedir}/log/%{name}.log
72    
73     _EOF
74     install -d $RPM_BUILD_ROOT/%{_sysconfdir}/httpd/conf.d
75     cat <<"_EOF" > $RPM_BUILD_ROOT/%{_sysconfdir}/httpd/conf.d/dehydrated.conf
76    
77     Alias /.well-known/acme-challenge/ %{_localstatedir}/lib/%{name}/challenges/
78    
79     <Directory %{_localstatedir}/lib/%{name}/challenges>
80     Options None
81     AllowOverride None
82     Header set Content-Type "application/jose+json"
83     <IfModule mod_authz_core.c>
84     # Apache 2.4
85     Require all granted
86     </IfModule>
87     <IfModule !mod_authz_core.c>
88     # Apache 2.2
89     Order deny,allow
90     Allow from all
91     </IfModule>
92     </Directory>
93     _EOF
94     install -d -m 750 $RPM_BUILD_ROOT/%{_sysconfdir}/logrotate.d
95     cat <<"_EOF" > $RPM_BUILD_ROOT/%{_sysconfdir}/logrotate.d/%{name}
96     /var/log/%{name}.log {
97     missingok
98     copytruncate
99     rotate 12
100     compress
101     weekly
102     create 0660 root root
103     }
104     _EOF
105    
106     %post
107     %if %{useselinux}
108     (
109     # New File context
110     semanage fcontext -a -t var_lib_t "%{_localstatedir}/lib/dehydrated(/.*)?"
111     # files created by app
112     restorecon -R %{_localstatedir}/lib/dehydrated
113     ) &>/dev/null || :
114     %endif
115    
116     # Migrate from letsencrypt.sh
117     if [ -e %{_sysconfdir}/letsencrypt.sh/config ]; then
118     sed -e 's/letsencrypt.sh/dehydrated/g' \
119     -e 's/le_hooks.sh/dehydrated_hooks/g' \
120     %{_sysconfdir}/letsencrypt.sh/config > %{_sysconfdir}/%{name}/config
121     fi
122     if [ -e %{_sysconfdir}/letsencrypt.sh/domains.txt ]; then
123     cat %{_sysconfdir}/letsencrypt.sh/domains.txt > %{_sysconfdir}/%{name}/domains.txt
124     fi
125     if [ -d %{_localstatedir}/lib/letsencrypt.sh/certificates/certs ]; then
126     mv %{_localstatedir}/lib/letsencrypt.sh/certificates/* %{_localstatedir}/lib/%{name}/certificates/
127     fi
128     sed -i -e 's|%{_localstatedir}/lib/letsencrypt.sh|%{_localstatedir}/lib/%{name}|g' %{_sysconfdir}/httpd/conf.d/ssl.conf
129     if [ -d %{_sysconfdir}/letsencrypt.sh/hooks_deploy_cert.d/ ]; then
130     find %{_sysconfdir}/letsencrypt.sh/hooks_deploy_cert.d/ -type f -perm /111 -exec mv "{}" %{_sysconfdir}/%{name}/hooks_deploy_cert.d/ \;
131     fi
132     if [ -d %{_sysconfdir}/letsencrypt.sh/hooks_clean_challenge.d/ ]; then
133     find %{_sysconfdir}/letsencrypt.sh/hooks_clean_challenge.d/ -type f -perm /111 -exec mv "{}" %{_sysconfdir}/%{name}/hooks_clean_challenge.d/ \;
134     fi
135    
136     %postun
137     %if %{useselinux}
138     if [ "$1" -eq "0" ]; then
139     # Remove the File Context
140     (
141     semanage fcontext -d "%{_localstatedir}/lib/dehydrated(/.*)?"
142     ) &>/dev/null || :
143     fi
144     %endif
145    
146     %files
147     %doc LICENSE README.md docs/examples/hook.sh
148 unnilennium 1.2 %dir %attr(0755,root,root) %{_sysconfdir}/%{name}/hooks_clean_challenge.d/
149     %attr(0644, root,root) %{_sysconfdir}/%{name}/hooks_deploy_cert.d/*
150     %config(noreplace) %{_sysconfdir}/%{name}/domains.txt
151     %config(noreplace) %{_sysconfdir}/%{name}/config
152 unnilennium 1.1 %config(noreplace) %attr(0755,root,root) %{_sysconfdir}/cron.daily/%{name}
153     %config(noreplace) %{_sysconfdir}/httpd/conf.d/%{name}.conf
154     %config(noreplace) %{_sysconfdir}/logrotate.d/%{name}
155     %attr(0755,root,root) %{_bindir}/%{name}
156     %attr(0755,root,root) %{_bindir}/dehydrated_hooks
157     %attr(0755,root,root) %{_bindir}/dehydrated_revoke
158     %dir %attr(0750,root,apache) %{_localstatedir}/lib/%{name}/challenges
159     %dir %attr(0750,root,root) %{_localstatedir}/lib/%{name}/certificates
160    
161     %changelog
162 jpp 1.3 * Fri Feb 16 2018 Jean-Philipe Pialasse <tests@pialasse.com> 0.5.0-1.sme
163     - upgrade to upstream version [SME: 10521]
164    
165 unnilennium 1.2 * Mon Feb 06 2017 Jean-Philipe Pialasse <tests@pialasse.com> - 0.4.0.20170205.git1163864.sme
166     - update dehydrated to 0.4 [SME: 10080]
167     - see https://github.com/lukas2511/dehydrated/releases/tag/v0.4.0
168    
169 unnilennium 1.1 * Fri Jan 06 2017 Jean-Philipe Pialasse <tests@pialasse.com> - 0.3.0.20160914.gitcaeed7d-4.sme
170     - Initial import in SME Server Buildsys
171    
172     * Mon Oct 24 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.3.0.20160914.gitcaeed7d-3
173     - Fix warning when installing dehydrated without upgrading from letsencrypt.sh
174    
175     * Mon Sep 19 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.3.0.20160914.gitcaeed7d-2
176     - Fix find command to work with older find versions (on el5), replace -executable with -perm /111
177    
178     * Wed Sep 14 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.3.0.20160914.gitcaeed7d-1
179     - Renamed to dehydrated
180    
181     * Wed Aug 24 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.0.20160803.gitafabfff-2
182     - Set var_lib_t context to files
183    
184     * Wed Aug 3 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.0.20160803.gitafabfff-1
185     - Update to git afabfff
186    
187     * Mon Jun 6 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.0.20160531.gitec48906-4
188     - Default to enable HOOK in config
189    
190     * Fri Jun 3 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.0.20160531.gitec48906-3
191     - Add missing exec permission on daily cronjob script
192    
193     * Wed Jun 1 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.0.20160531.gitec48906-2
194     - Fix le_revoke.sh script to use config instead of config.sh
195    
196     * Tue May 31 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.0.20160531.gitec48906-1
197     - Update to git ec48906
198    
199     * Fri May 13 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.0.20160513.gita286741-1
200     - Update to git a286741
201    
202     * Wed Mar 30 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.0.20160330.gitdca25e8-1
203     - Update to git dca25e8
204     - Fix arg shifting in le_hooks script
205    
206     * Tue Feb 23 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.0.20160223.git2099c77-1
207     - Update to GIT git2099c77
208    
209     * Sat Jan 30 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.0.20160127.git79ff846-2
210     - Rename httpd.sh hook to 10httpd.sh
211     - Provide le_revoke.sh script to revoke old certificates
212     - Add timestamp to logs using awk
213    
214     * Fri Jan 29 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.0.20160127.git79ff846-1
215     - Use date based version number
216    
217     * Wed Jan 27 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.0.3.git79ff846-1
218     - Update to git 79ff846
219    
220     * Mon Jan 25 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.0.2.git3432f60-1
221     - Add hooks directory
222    
223     * Mon Jan 25 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.0.1.git3432f60-1
224     - First package

admin@koozali.org
ViewVC Help
Powered by ViewVC 1.2.1 RSS 2.0 feed