packaging/cert-svc.spec

   1 %define certsvc_test_build 0
   2
   3 Name:    cert-svc
   4 Summary: Certification service
   5 Version: 2.1.6
   6 Release: 0
   7 Group:   Security/Certificate Management
   8 License: Apache-2.0 and OpenSSL
   9 Source0: %{name}-%{version}.tar.gz
  10 BuildRequires: cmake
  11 BuildRequires: coreutils
  12 BuildRequires: findutils
  13 BuildRequires: openssl
  14 BuildRequires: pkgconfig(dlog)
  15 BuildRequires: pkgconfig(klay)
  16 BuildRequires: pkgconfig(openssl)
  17 BuildRequires: pkgconfig(libpcrecpp)
  18 BuildRequires: pkgconfig(xmlsec1)
  19 BuildRequires: pkgconfig(libxml-2.0)
  20 BuildRequires: pkgconfig(libxslt)
  21 BuildRequires: pkgconfig(db-util)
  22 BuildRequires: pkgconfig(libsystemd-daemon)
  23 BuildRequires: pkgconfig(key-manager)
  24 BuildRequires: pkgconfig(libtzplatform-config)
  25 BuildRequires: pkgconfig(libsystemd-journal)
  26 BuildRequires: pkgconfig(sqlite3)
  27 BuildRequires: ca-certificates
  28 BuildRequires: ca-certificates-devel
  29 BuildRequires: ca-certificates-tizen-devel
  30 Requires: ca-certificates
  31 Requires: ca-certificates-tizen
  32 Requires: security-config
  33 Requires: openssl
  34
  35 %global user_name security_fw
  36 %global group_name security_fw
  37 %global server_stream /tmp/.cert-server.socket
  38 %global smack_domain_name System
  39
  40 %global bin_dir                 %{?TZ_SYS_BIN:%TZ_SYS_BIN}%{!?TZ_SYS_BIN:%_bindir}
  41 %global etc_dir                 %{?TZ_SYS_ETC:%TZ_SYS_ETC}%{!?TZ_SYS_ETC:/opt/etc}
  42 %global rw_data_dir             %{?TZ_SYS_SHARE:%TZ_SYS_SHARE}%{!?TZ_SYS_SHARE:/opt/share}
  43 %global ro_data_dir             %{?TZ_SYS_RO_SHARE:%TZ_SYS_RO_SHARE}%{!?TZ_SYS_RO_SHARE:%_datadir}
  44 %global rw_app_dir              %{?TZ_SYS_RW_APP:%TZ_SYS_RW_APP}%{!?TZ_SYS_RW_APP:/opt/usr/apps}
  45
  46 %global cert_svc_path           %rw_data_dir/cert-svc
  47 %global cert_svc_ro_path        %ro_data_dir/cert-svc
  48 %global cert_svc_db_path        %cert_svc_path/dbspace
  49 %global cert_svc_pkcs12         %cert_svc_path/pkcs12
  50 %global cert_svc_transec        %cert_svc_path/transec
  51 %global cert_svc_ca_bundle      %cert_svc_path/ca-certificate.crt
  52 %global cert_svc_examples       %cert_svc_ro_path/examples
  53 %global cert_svc_tests          %rw_app_dir/cert-svc-tests
  54
  55 %global cert_svc_old_db_path    /opt/share/cert-svc/dbspace
  56 %global upgrade_script_path     %ro_data_dir/upgrade/scripts
  57 %global upgrade_data_path       %ro_data_dir/upgrade/data
  58
  59 %description
  60 Certification service
  61
  62 %package devel
  63 Summary:    Certification service (development files)
  64 Group:      Development/Libraries
  65 Requires:   %{name} = %{version}-%{release}
  66
  67 %description devel
  68 Certification service (development files)
  69
  70 %if 0%{?certsvc_test_build}
  71 %package test
  72 Summary:  Certification service (tests)
  73 Group:    Security/Testing
  74 Requires: ca-certificates-tizen
  75 Requires: %{name} = %{version}-%{release}
  76
  77 %description test
  78 Certification service (tests)
  79 %endif
  80
  81 %prep
  82 %setup -q
  83
  84 %build
  85 export CFLAGS="$CFLAGS -DTIZEN_DEBUG_ENABLE"
  86 export CXXFLAGS="$CXXFLAGS -DTIZEN_DEBUG_ENABLE"
  87 export FFLAGS="$FFLAGS -DTIZEN_DEBUG_ENABLE"
  88
  89 export CFLAGS="$CFLAGS -DTIZEN_ENGINEER_MODE"
  90 export CXXFLAGS="$CXXFLAGS -DTIZEN_ENGINEER_MODE"
  91 export FFLAGS="$FFLAGS -DTIZEN_ENGINEER_MODE"
  92
  93 %ifarch %{ix86}
  94 export CFLAGS="$CFLAGS -DTIZEN_EMULATOR_MODE"
  95 export CXXFLAGS="$CXXFLAGS -DTIZEN_EMULATOR_MODE"
  96 export FFLAGS="$FFLAGS -DTIZEN_EMULATOR_MODE"
  97 %endif
  98
  99 %{!?build_type:%define build_type "Release"}
 100 %cmake . -DVERSION=%version \
 101          -DINCLUDEDIR=%_includedir \
 102          -DUSER_NAME=%user_name \
 103          -DGROUP_NAME=%group_name \
 104          -DSERVER_STREAM=%server_stream \
 105          -DSMACK_DOMAIN_NAME=%smack_domain_name \
 106          -DRO_DATA_DIR=%ro_data_dir \
 107          -DBIN_DIR=%bin_dir \
 108          -DTZ_SYS_CA_CERTS=%TZ_SYS_CA_CERTS \
 109          -DTZ_SYS_CA_CERTS_ORIG=%TZ_SYS_CA_CERTS_ORIG \
 110          -DTZ_SYS_CA_BUNDLE=%TZ_SYS_CA_BUNDLE \
 111          -DTZ_SYS_RO_CA_CERTS=%TZ_SYS_RO_CA_CERTS \
 112          -DTZ_SYS_RO_CA_BUNDLE=%TZ_SYS_RO_CA_BUNDLE \
 113          -DCERT_SVC_CA_BUNDLE=%cert_svc_ca_bundle \
 114          -DFINGERPRINT_LIST_RW_PATH=%TZ_SYS_REVOKED_CERTS_FINGERPRINTS_RUNTIME \
 115          -DCERT_SVC_PATH=%cert_svc_path \
 116          -DCERT_SVC_RO_PATH=%cert_svc_ro_path \
 117          -DCERT_SVC_PKCS12=%cert_svc_pkcs12 \
 118          -DCERT_SVC_TRANSEC=%cert_svc_transec \
 119          -DCERT_SVC_DB_PATH=%cert_svc_db_path \
 120          -DCERT_SVC_OLD_DB_PATH=%cert_svc_old_db_path \
 121          -DUPGRADE_SCRIPT_PATH=%upgrade_script_path \
 122          -DUPGRADE_DATA_PATH=%upgrade_data_path \
 123 %if 0%{?certsvc_test_build}
 124          -DCERTSVC_TEST_BUILD=1 \
 125          -DCERT_SVC_TESTS=%cert_svc_tests \
 126          -DCERT_SVC_EXAMPLES=%cert_svc_examples \
 127 %endif
 128          -DCMAKE_BUILD_TYPE=%build_type \
 129          -DSYSTEMD_UNIT_DIR=%_unitdir
 130
 131 make %{?_smp_mflags}
 132
 133 %install
 134 %make_install
 135 %install_service sockets.target.wants cert-server.socket
 136
 137 mkdir -p %buildroot%cert_svc_pkcs12
 138 mkdir -p %buildroot%cert_svc_transec
 139
 140 touch %buildroot%cert_svc_db_path/certs-meta.db-journal
 141
 142 ln -sf %TZ_SYS_CA_BUNDLE %buildroot%cert_svc_ca_bundle
 143
 144 %preun
 145 # erase
 146 if [ $1 = 0 ]; then
 147     systemctl stop cert-server.service
 148 fi
 149
 150 %post
 151 /sbin/ldconfig
 152 systemctl daemon-reload
 153 # install
 154 if [ $1 = 1 ]; then
 155     systemctl start cert-server.socket
 156 fi
 157 # upgrade / reinstall
 158 if [ $1 = 2 ]; then
 159     systemctl restart cert-server.socket
 160 fi
 161
 162 %postun -p /sbin/ldconfig
 163
 164 %files
 165 %manifest %name.manifest
 166 %license LICENSE
 167 %license LICENSE.OpenSSL
 168 %_unitdir/cert-server.service
 169 %_unitdir/cert-server.socket
 170 %_unitdir/sockets.target.wants/cert-server.socket
 171 %_libdir/libcert-svc-vcore.so.*
 172 %_libdir/libcert-svc-transec.so.*
 173 %bin_dir/cert-server
 174 %dir %attr(-, %{user_name}, %{group_name}) %cert_svc_path
 175 %dir %attr(-, %{user_name}, %{group_name}) %cert_svc_pkcs12
 176 %dir %attr(-, %{user_name}, %{group_name}) %cert_svc_db_path
 177 %attr(-, %{user_name}, %{group_name}) %cert_svc_ca_bundle
 178 %attr(-, %{user_name}, %{group_name}) %cert_svc_db_path/certs-meta.db
 179 %attr(-, %{user_name}, %{group_name}) %cert_svc_db_path/certs-meta.db-journal
 180 %attr(-, %{user_name}, %{group_name}) %cert_svc_ro_path
 181
 182 %attr(755, root, root) %upgrade_script_path/202.cert-svc-db-upgrade.sh
 183 %attr(755, root, root) %upgrade_script_path/203.cert-svc-disabled-certs-upgrade.sh
 184 %upgrade_data_path/certs-meta.db
 185
 186 %files devel
 187 %_includedir/*
 188 %_libdir/pkgconfig/*
 189 %_libdir/libcert-svc-vcore.so
 190 %_libdir/libcert-svc-transec.so
 191
 192 %if 0%{?certsvc_test_build}
 193 %files test
 194 %bin_dir/cert-svc-test*
 195 %cert_svc_tests
 196 %_libdir/libcert-svc-validator-plugin.so
 197
 198 %attr(755, root, root) %upgrade_script_path/cert-svc-test-upgrade.sh
 199 %upgrade_data_path/certs-meta-old.db
 200
 201 %bin_dir/cert-svc-example*
 202 %cert_svc_examples
 203
 204 %endif