1 %{!?build_type:%global build_type RELEASE}
4 Summary: Certification service
7 Group: Security/Certificate Management
9 Source0: %{name}-%{version}.tar.gz
11 BuildRequires: coreutils
12 BuildRequires: findutils
13 BuildRequires: pkgconfig(dlog)
14 BuildRequires: pkgconfig(klay)
15 BuildRequires: openssl3
16 BuildRequires: pkgconfig(openssl3)
17 BuildRequires: pkgconfig(libpcrecpp)
18 BuildRequires: pkgconfig(xmlsec1)
19 BuildRequires: pkgconfig(libxml-2.0)
20 BuildRequires: pkgconfig(libxslt)
21 BuildRequires: pkgconfig(libsystemd)
22 BuildRequires: pkgconfig(key-manager)
23 BuildRequires: pkgconfig(libtzplatform-config)
24 BuildRequires: pkgconfig(sqlite3)
25 BuildRequires: ca-certificates
26 BuildRequires: ca-certificates-devel
27 BuildRequires: ca-certificates-tizen-devel
28 BuildRequires: boost-devel
30 %if "%{build_type}" == "COVERAGE"
34 Requires: ca-certificates
35 Requires: ca-certificates-tizen
36 Requires: security-config
37 # to prevent auto require lower version of libc including examples/resource/player/bin/player
38 # https://fedoraproject.org/wiki/Packaging:AutoProvidesAndRequiresFiltering?rd=PackagingDrafts/AutoProvidesAndRequiresFiltering
39 %global __requires_exclude_from examples/
42 %global user_name security_fw
43 %global group_name security_fw
44 %global server_stream /tmp/.cert-server.socket
45 %global smack_domain_name System
46 %global coverage_dir %{_datadir}/cert-svc-coverage
48 %global bin_dir %{?TZ_SYS_BIN:%TZ_SYS_BIN}%{!?TZ_SYS_BIN:%_bindir}
49 %global lib_dir %{?TZ_SYS_LIB:%TZ_SYS_LIB}%{!?TZ_SYS_LIB:%_libdir}
50 %global etc_dir %{?TZ_SYS_ETC:%TZ_SYS_ETC}%{!?TZ_SYS_ETC:/opt/etc}
51 %global rw_data_dir %{?TZ_SYS_SHARE:%TZ_SYS_SHARE}%{!?TZ_SYS_SHARE:/opt/share}
52 %global ro_data_dir %{?TZ_SYS_RO_SHARE:%TZ_SYS_RO_SHARE}%{!?TZ_SYS_RO_SHARE:%_datadir}
53 %global rw_app_dir %{?TZ_SYS_RW_APP:%TZ_SYS_RW_APP}%{!?TZ_SYS_RW_APP:/opt/usr/apps}
55 %global cert_svc_path %rw_data_dir/cert-svc
56 %global cert_svc_ro_path %ro_data_dir/cert-svc
57 %global cert_svc_db_path %cert_svc_path/dbspace
58 %global cert_svc_pkcs12 %cert_svc_path/pkcs12
59 %global cert_svc_ca_bundle %cert_svc_path/ca-certificate.crt
60 %global cert_svc_examples %cert_svc_ro_path/examples
61 %global cert_svc_tests %rw_app_dir/cert-svc-tests
67 Summary: Certification service (development files)
68 Group: Development/Libraries
69 Requires: %{name} = %{version}-%{release}
72 Certification service (development files)
75 Summary: Certification service (tests)
76 Group: Security/Testing
77 Requires: ca-certificates-tizen
78 Requires: %{name} = %{version}-%{release}
79 Requires: %{name}-test-binaries = %{version}-%{release}
82 Certification service (tests)
84 %package test-binaries
85 Summary: Certification service (test binaries)
86 Group: Security/Testing
88 Requires: %{name}-test = %{version}-%{release}
90 %description test-binaries
91 Certification service (test binaries)
93 %if "%{build_type}" == "COVERAGE"
95 Summary: Certification service code coverage data
96 Group: Security/Testing
97 Requires: cert-svc-test = %{version}-%{release}
98 Requires: cert-svc-debugsource = %{version}-%{release}
102 %description coverage
103 Certification service code coverage data
110 %if 0%{?tizen_build_devel_mode}
111 export CFLAGS="$CFLAGS -DTIZEN_ENGINEER_MODE"
112 export CXXFLAGS="$CXXFLAGS -DTIZEN_ENGINEER_MODE"
113 export FFLAGS="$FFLAGS -DTIZEN_ENGINEER_MODE"
117 export CFLAGS="$CFLAGS -DTIZEN_EMULATOR_MODE"
118 export CXXFLAGS="$CXXFLAGS -DTIZEN_EMULATOR_MODE"
119 export FFLAGS="$FFLAGS -DTIZEN_EMULATOR_MODE"
122 # gcc v9 and new Tizen toolchain adds Wall and this code pretty much always checks string & buffer lenghts
123 export CFLAGS="$CFLAGS -Wno-stringop-truncation -Wno-stringop-overflow"
124 export CXXFLAGS="$CXXFLAGS -Wno-stringop-truncation -Wno-stringop-overflow"
126 %cmake . -DVERSION=%version \
127 -DINCLUDEDIR=%_includedir \
128 -DUSER_NAME=%user_name \
129 -DGROUP_NAME=%group_name \
130 -DSERVER_STREAM=%server_stream \
131 -DSMACK_DOMAIN_NAME=%smack_domain_name \
132 -DRO_DATA_DIR=%ro_data_dir \
135 -DTZ_SYS_CA_CERTS=%TZ_SYS_CA_CERTS \
136 -DTZ_SYS_CA_CERTS_ORIG=%TZ_SYS_CA_CERTS_ORIG \
137 -DTZ_SYS_CA_BUNDLE=%TZ_SYS_CA_BUNDLE \
138 -DTZ_SYS_RO_CA_CERTS=%TZ_SYS_RO_CA_CERTS \
139 -DTZ_SYS_RO_CA_BUNDLE=%TZ_SYS_RO_CA_BUNDLE \
140 -DCERT_SVC_CA_BUNDLE=%cert_svc_ca_bundle \
141 -DCERT_SVC_PATH=%cert_svc_path \
142 -DCERT_SVC_RO_PATH=%cert_svc_ro_path \
143 -DCERT_SVC_PKCS12=%cert_svc_pkcs12 \
144 -DCERT_SVC_DB_PATH=%cert_svc_db_path \
145 -DCERT_SVC_TESTS=%cert_svc_tests \
146 -DCERT_SVC_EXAMPLES=%cert_svc_examples \
147 -DCOVERAGE_DIR=%{coverage_dir} \
148 -DCMAKE_BUILD_TYPE=%build_type \
149 -DSYSTEMD_UNIT_DIR=%_unitdir
155 %install_service sockets.target.wants cert-server.socket
157 mkdir -p %buildroot%cert_svc_pkcs12
159 touch %buildroot%cert_svc_db_path/certs-meta.db-journal
161 ln -sf %TZ_SYS_CA_BUNDLE %buildroot%cert_svc_ca_bundle
166 systemctl stop cert-server.service
171 systemctl daemon-reload
174 systemctl start cert-server.socket
178 systemctl restart cert-server.socket
181 %postun -p /sbin/ldconfig
184 %manifest %name.manifest
186 %_unitdir/cert-server.service
187 %_unitdir/cert-server.socket
188 %_unitdir/sockets.target.wants/cert-server.socket
189 %_libdir/libcert-svc-vcore.so.*
191 %dir %attr(-, %{user_name}, %{group_name}) %cert_svc_path
192 %dir %attr(-, %{user_name}, %{group_name}) %cert_svc_pkcs12
193 %dir %attr(-, %{user_name}, %{group_name}) %cert_svc_db_path
194 %attr(-, %{user_name}, %{group_name}) %cert_svc_ca_bundle
195 %attr(-, %{user_name}, %{group_name}) %cert_svc_db_path/certs-meta.db
196 %attr(-, %{user_name}, %{group_name}) %cert_svc_db_path/certs-meta.db-journal
197 %attr(-, %{user_name}, %{group_name}) %cert_svc_ro_path
200 %manifest %name.manifest
203 %_libdir/libcert-svc-vcore.so
206 %manifest %name.manifest
207 %bin_dir/cert-svc-test*
210 %cert_svc_tests/certs
211 %_libdir/libcert-svc-validator-plugin.so
213 %bin_dir/cert-svc-example*
216 %bin_dir/cert-svc-unit-tests
219 %manifest %name.manifest
222 %if "%{build_type}" == "COVERAGE"
224 %manifest %{name}.manifest
226 %{bin_dir}/cert-svc-coverage.sh