2 Summary: Central Key Manager and utilities
7 Source0: %{name}-%{version}.tar.gz
8 Source1001: key-manager.manifest
9 Source1002: key-manager-listener.manifest
10 Source1003: libkey-manager-client.manifest
11 Source1004: libkey-manager-common.manifest
14 BuildRequires: pkgconfig(dlog)
15 BuildRequires: pkgconfig(openssl)
16 BuildRequires: libattr-devel
17 BuildRequires: pkgconfig(libsmack)
18 BuildRequires: pkgconfig(libsystemd-daemon)
19 BuildRequires: pkgconfig(vconf)
20 BuildRequires: pkgconfig(libsystemd-journal)
21 BuildRequires: boost-devel
22 Requires: libkey-manager-common = %{version}-%{release}
26 Central Key Manager daemon could be used as secure storage
27 for certificate and private/public keys. It gives API for
28 application to sign and verify (DSA/RSA/ECDSA) signatures.
30 %package -n key-manager-listener
31 Summary: Package with listener daemon
32 Group: System/Security
33 BuildRequires: pkgconfig(vconf)
34 BuildRequires: pkgconfig(glib-2.0)
35 BuildRequires: pkgconfig(capi-appfw-package-manager)
36 Requires: libkey-manager-client = %{version}-%{release}
38 %description -n key-manager-listener
39 Listener for central key manager. This daemon is responsible for
40 receive notification from dbus about uninstall application
41 and pass them to key-manager daemon.
43 %package -n libkey-manager-common
44 Summary: Central Key Manager (common libraries)
45 Group: Development/Libraries
46 Requires(post): /sbin/ldconfig
47 Requires(postun): /sbin/ldconfig
49 %description -n libkey-manager-common
50 Central Key Manager package (common library)
52 %package -n libkey-manager-client
53 Summary: Central Key Manager (client)
54 Group: Development/Libraries
55 Requires: key-manager = %{version}-%{release}
56 Requires: libkey-manager-common = %{version}-%{release}
57 Requires(post): /sbin/ldconfig
58 Requires(postun): /sbin/ldconfig
60 %description -n libkey-manager-client
61 Central Key Manager package (client)
63 %package -n libkey-manager-client-devel
64 Summary: Central Key Manager (client-devel)
65 Group: Development/Libraries
66 BuildRequires: pkgconfig(capi-base-common)
67 Requires: pkgconfig(capi-base-common)
68 Requires: libkey-manager-client = %{version}-%{release}
70 %description -n libkey-manager-client-devel
71 Central Key Manager package (client-devel)
73 %package -n key-manager-tests
74 Summary: Internal test for key-manager
77 Requires: key-manager = %{version}-%{release}
79 %description -n key-manager-tests
80 Internal test for key-manager implementation.
82 %package -n key-manager-pam-plugin
83 Summary: CKM login/password module to PAM.
84 Group: Development/Libraries
85 BuildRequires: pam-devel
86 Requires: key-manager = %{version}-%{release}
87 Requires(post): /sbin/ldconfig
88 Requires(postun): /sbin/ldconfig
90 %description -n key-manager-pam-plugin
91 CKM login/password module to PAM.
92 It's used to monitor user login/logout and password change events from PAM.
100 cp -a %{SOURCE1004} .
103 %if 0%{?sec_build_binary_debug_enable}
104 export CFLAGS="$CFLAGS -DTIZEN_DEBUG_ENABLE"
105 export CXXFLAGS="$CXXFLAGS -DTIZEN_DEBUG_ENABLE"
106 export FFLAGS="$FFLAGS -DTIZEN_DEBUG_ENABLE"
110 export LDFLAGS+="-Wl,--rpath=%{_libdir},-Bsymbolic-functions "
112 %cmake . -DVERSION=%{version} \
113 -DCMAKE_BUILD_TYPE=%{?build_type:%build_type}%{!?build_type:RELEASE} \
114 -DCMAKE_VERBOSE_MAKEFILE=ON \
115 %if "%{sec_product_feature_security_mdfpp_enable}" == "1"
116 -DSECURITY_MDFPP_STATE_ENABLE=1 \
118 -DSYSTEMD_UNIT_DIR=%{_unitdir} \
119 -DSYSTEMD_ENV_FILE="/etc/sysconfig/central-key-manager"
121 make %{?jobs:-j%jobs}
125 mkdir -p %{buildroot}/usr/share/license
126 cp LICENSE %{buildroot}/usr/share/license/%{name}
127 cp LICENSE %{buildroot}/usr/share/license/libkey-manager-client
128 cp LICENSE %{buildroot}/usr/share/license/libkey-manager-control-client
129 mkdir -p %{buildroot}/etc/security/
130 mkdir -p %{buildroot}/usr/share/ckm/scripts
131 cp data/scripts/*.sql %{buildroot}/usr/share/ckm/scripts
132 mkdir -p %{buildroot}/usr/share/ckm-db-test
133 cp tests/testme_ver1.db %{buildroot}/usr/share/ckm-db-test/
134 cp tests/testme_ver2.db %{buildroot}/usr/share/ckm-db-test/
135 cp tests/testme_ver3.db %{buildroot}/usr/share/ckm-db-test/
136 mkdir -p %{buildroot}/etc/gumd/userdel.d/
137 cp data/gumd/10_key-manager.post %{buildroot}/etc/gumd/userdel.d/
140 mkdir -p %{buildroot}%{_unitdir}/multi-user.target.wants
141 mkdir -p %{buildroot}%{_unitdir}/sockets.target.wants
142 ln -s ../central-key-manager.service %{buildroot}%{_unitdir}/multi-user.target.wants/central-key-manager.service
143 ln -s ../central-key-manager-listener.service %{buildroot}%{_unitdir}/multi-user.target.wants/central-key-manager-listener.service
144 ln -s ../central-key-manager-api-control.socket %{buildroot}%{_unitdir}/sockets.target.wants/central-key-manager-api-control.socket
145 ln -s ../central-key-manager-api-storage.socket %{buildroot}%{_unitdir}/sockets.target.wants/central-key-manager-api-storage.socket
146 ln -s ../central-key-manager-api-ocsp.socket %{buildroot}%{_unitdir}/sockets.target.wants/central-key-manager-api-ocsp.socket
152 systemctl daemon-reload
155 systemctl start central-key-manager.service
160 systemctl restart central-key-manager.service
167 systemctl stop central-key-manager.service
173 systemctl daemon-reload
176 %post -n libkey-manager-client -p /sbin/ldconfig
178 %postun -n libkey-manager-client -p /sbin/ldconfig
180 %post -n key-manager-listener
181 systemctl daemon-reload
184 systemctl start central-key-manager-listener.service
188 systemctl restart central-key-manager-listener.service
191 %preun -n key-manager-listener
194 systemctl stop central-key-manager-listener.service
197 %postun -n key-manager-listener
200 systemctl daemon-reload
204 %files -n key-manager
205 %manifest key-manager.manifest
206 %{_bindir}/key-manager
207 %{_unitdir}/multi-user.target.wants/central-key-manager.service
208 %{_unitdir}/central-key-manager.service
209 %{_unitdir}/central-key-manager.target
210 %{_unitdir}/sockets.target.wants/central-key-manager-api-control.socket
211 %{_unitdir}/central-key-manager-api-control.socket
212 %{_unitdir}/sockets.target.wants/central-key-manager-api-storage.socket
213 %{_unitdir}/central-key-manager-api-storage.socket
214 %{_unitdir}/sockets.target.wants/central-key-manager-api-ocsp.socket
215 %{_unitdir}/central-key-manager-api-ocsp.socket
216 %{_datadir}/license/%{name}
217 %{_datadir}/ckm/scripts/*.sql
218 %attr(444, root, root) %{_datadir}/ckm/scripts/*.sql
219 /etc/opt/upgrade/230.key-manager-migrate-dkek.patch.sh
220 /etc/gumd/userdel.d/10_key-manager.post
221 %attr(550, root, root) /etc/gumd/userdel.d/10_key-manager.post
224 %files -n key-manager-listener
225 %manifest key-manager-listener.manifest
226 %{_bindir}/key-manager-listener
227 %{_unitdir}/multi-user.target.wants/central-key-manager-listener.service
228 %{_unitdir}/central-key-manager-listener.service
230 %files -n libkey-manager-common
231 %manifest libkey-manager-common.manifest
232 %{_libdir}/libkey-manager-common.so.*
234 %files -n libkey-manager-client
235 %manifest libkey-manager-client.manifest
236 %{_libdir}/libkey-manager-client.so.*
237 %{_libdir}/libkey-manager-control-client.so.*
238 %{_datadir}/license/libkey-manager-client
239 %{_datadir}/license/libkey-manager-control-client
241 %files -n libkey-manager-client-devel
242 %defattr(-,root,root,-)
243 %{_libdir}/libkey-manager-client.so
244 %{_libdir}/libkey-manager-control-client.so
245 %{_libdir}/libkey-manager-common.so
246 %{_includedir}/ckm/ckm/ckm-manager.h
247 %{_includedir}/ckm/ckm/ckm-manager-async.h
248 %{_includedir}/ckm/ckm/ckm-certificate.h
249 %{_includedir}/ckm/ckm/ckm-control.h
250 %{_includedir}/ckm/ckm/ckm-error.h
251 %{_includedir}/ckm/ckm/ckm-key.h
252 %{_includedir}/ckm/ckm/ckm-password.h
253 %{_includedir}/ckm/ckm/ckm-pkcs12.h
254 %{_includedir}/ckm/ckm/ckm-raw-buffer.h
255 %{_includedir}/ckm/ckm/ckm-type.h
256 %{_includedir}/ckm/ckmc/ckmc-manager.h
257 %{_includedir}/ckm/ckmc/ckmc-control.h
258 %{_includedir}/ckm/ckmc/ckmc-error.h
259 %{_includedir}/ckm/ckmc/ckmc-type.h
260 %{_libdir}/pkgconfig/*.pc
262 %files -n key-manager-tests
263 %defattr(-,root,root,-)
264 %{_bindir}/ckm-tests-internal
265 %{_datadir}/ckm-db-test/testme_ver1.db
266 %{_datadir}/ckm-db-test/testme_ver2.db
267 %{_datadir}/ckm-db-test/testme_ver3.db
268 %{_bindir}/ckm_so_loader
270 %files -n key-manager-pam-plugin
271 %defattr(-,root,root,-)
272 %{_libdir}/security/pam_key_manager_plugin.so*