projects / platform / core / security / cert-svc.git / blobdiff
? search:
summary | shortlog | log | commit | commitdiff | tree
raw | inline | side by side
Add number and cleanup upgrade scripts
[platform/core/security/cert-svc.git] / packaging / cert-svc.spec
diff --git a/packaging/cert-svc.spec b/packaging/cert-svc.spec
index 6b03281..d35f2a3 100644 (file)
--- a/packaging/cert-svc.spec
+++ b/packaging/cert-svc.spec
@@ -2,13 +2,13 @@
 
 Name:    cert-svc
 Summary: Certification service
-Version: 2.0.2
+Version: 2.1.6
 Release: 0
-Group:   Security/Libraries
-License: Apache-2.0
+Group:   Security/Certificate Management
+License: Apache-2.0 and OpenSSL
 Source0: %{name}-%{version}.tar.gz
-Source1001: %{name}.manifest
 BuildRequires: cmake
+BuildRequires: coreutils
 BuildRequires: findutils
 BuildRequires: openssl
 BuildRequires: pkgconfig(dlog)
@@ -23,8 +23,38 @@ BuildRequires: pkgconfig(key-manager)
 BuildRequires: pkgconfig(libtzplatform-config)
 BuildRequires: pkgconfig(libsystemd-journal)
 BuildRequires: pkgconfig(sqlite3)
-BuildRequires: ca-certificates-tizen
-BuildRequires: ca-certificates-mozilla
+BuildRequires: ca-certificates
+BuildRequires: ca-certificates-devel
+BuildRequires: ca-certificates-tizen-devel
+Requires: ca-certificates
+Requires: ca-certificates-tizen
+Requires: security-config
+Requires: openssl
+%if "%{?profile}" == "mobile"
+BuildRequires: pkgconfig(cert-checker)
+%endif
+
+%global user_name security_fw
+%global group_name security_fw
+%global server_stream /tmp/.cert-server.socket
+%global smack_domain_name System
+
+%global bin_dir                 %{?TZ_SYS_BIN:%TZ_SYS_BIN}%{!?TZ_SYS_BIN:%_bindir}
+%global etc_dir                 %{?TZ_SYS_ETC:%TZ_SYS_ETC}%{!?TZ_SYS_ETC:/opt/etc}
+%global rw_data_dir             %{?TZ_SYS_SHARE:%TZ_SYS_SHARE}%{!?TZ_SYS_SHARE:/opt/share}
+%global ro_data_dir             %{?TZ_SYS_RO_SHARE:%TZ_SYS_RO_SHARE}%{!?TZ_SYS_RO_SHARE:%_datadir}
+%global rw_app_dir              %{?TZ_SYS_RW_APP:%TZ_SYS_RW_APP}%{!?TZ_SYS_RW_APP:/opt/usr/apps}
+
+%global cert_svc_path           %rw_data_dir/cert-svc
+%global cert_svc_ro_path        %ro_data_dir/cert-svc
+%global cert_svc_db_path        %cert_svc_path/dbspace
+%global cert_svc_pkcs12         %cert_svc_path/pkcs12
+%global cert_svc_ca_bundle      %cert_svc_path/ca-certificate.crt
+%global cert_svc_tests          %rw_app_dir/cert-svc-tests
+
+%global cert_svc_old_db_path    /opt/share/cert-svc/dbspace
+%global upgrade_script_path     %ro_data_dir/upgrade/scripts
+%global upgrade_data_path       %ro_data_dir/upgrade/data
 
 %description
 Certification service
@@ -43,7 +73,6 @@ Summary:  Certification service (tests)
 Group:    Security/Testing
 Requires: ca-certificates-tizen
 Requires: %{name} = %{version}-%{release}
-Conflicts: %name
 
 %description test
 Certification service (tests)
@@ -51,7 +80,6 @@ Certification service (tests)
 
 %prep
 %setup -q
-cp -a %SOURCE1001 .
 
 %build
 export CFLAGS="$CFLAGS -DTIZEN_DEBUG_ENABLE"
@@ -68,34 +96,50 @@ export CXXFLAGS="$CXXFLAGS -DTIZEN_EMULATOR_MODE"
 export FFLAGS="$FFLAGS -DTIZEN_EMULATOR_MODE"
 %endif
 
-# concatenated cert path defined in ca-certificates package
-%define SYS_CONCATENATED_CERT /var/lib/ca-certificates/ca-bundle.pem
-%define SYS_CERTS %TZ_SYS_ETC/ssl/certs
-
 %{!?build_type:%define build_type "Release"}
 %cmake . -DVERSION=%version \
-        -DINCLUDEDIR=%_includedir \
-        -DTZ_SYS_SHARE=%TZ_SYS_SHARE \
-        -DTZ_SYS_BIN=%TZ_SYS_BIN \
-        -DTZ_SYS_CERTS=%SYS_CERTS \
-        -DTZ_SYS_CONCATENATED_CERT=%SYS_CONCATENATED_CERT \
+         -DINCLUDEDIR=%_includedir \
+         -DUSER_NAME=%user_name \
+         -DGROUP_NAME=%group_name \
+         -DSERVER_STREAM=%server_stream \
+         -DSMACK_DOMAIN_NAME=%smack_domain_name \
+         -DRO_DATA_DIR=%ro_data_dir \
+         -DBIN_DIR=%bin_dir \
+         -DTZ_SYS_CA_CERTS=%TZ_SYS_CA_CERTS \
+         -DTZ_SYS_CA_CERTS_ORIG=%TZ_SYS_CA_CERTS_ORIG \
+         -DTZ_SYS_CA_BUNDLE=%TZ_SYS_CA_BUNDLE \
+         -DCERT_SVC_CA_BUNDLE=%cert_svc_ca_bundle \
+         -DFINGERPRINT_LIST_RW_PATH=%TZ_SYS_REVOKED_CERTS_FINGERPRINTS_RUNTIME \
+         -DCERT_SVC_PATH=%cert_svc_path \
+         -DCERT_SVC_RO_PATH=%cert_svc_ro_path \
+         -DCERT_SVC_PKCS12=%cert_svc_pkcs12 \
+         -DCERT_SVC_DB_PATH=%cert_svc_db_path \
+         -DCERT_SVC_OLD_DB_PATH=%cert_svc_old_db_path \
+         -DUPGRADE_SCRIPT_PATH=%upgrade_script_path \
+         -DUPGRADE_DATA_PATH=%upgrade_data_path \
+%if "%{?profile}" == "mobile"
+         -DTIZEN_PROFILE_MOBILE:BOOL=ON \
+%else
+         -DTIZEN_PROFILE_MOBILE:BOOL=OFF \
+%endif
 %if 0%{?certsvc_test_build}
-        -DCERTSVC_TEST_BUILD=1 \
-        -DTZ_SYS_RO_APP=%TZ_SYS_RO_APP \
+         -DCERTSVC_TEST_BUILD=1 \
+         -DCERT_SVC_TESTS=%cert_svc_tests \
 %endif
-        -DCMAKE_BUILD_TYPE=%build_type \
-        -DSYSTEMD_UNIT_DIR=%_unitdir
+         -DCMAKE_BUILD_TYPE=%build_type \
+         -DSYSTEMD_UNIT_DIR=%_unitdir
 
 make %{?_smp_mflags}
 
 %install
 %make_install
-%install_service multi-user.target.wants cert-server.service
 %install_service sockets.target.wants cert-server.socket
 
-mkdir -p %buildroot%TZ_SYS_SHARE/cert-svc/pkcs12
-mkdir -p %buildroot%TZ_SYS_SHARE/cert-svc/dbspace
-ln -s %SYS_CONCATENATED_CERT %buildroot%TZ_SYS_SHARE/cert-svc/ca-certificate.crt
+mkdir -p %buildroot%cert_svc_pkcs12
+
+touch %buildroot%cert_svc_db_path/certs-meta.db-journal
+
+ln -sf %TZ_SYS_CA_BUNDLE %buildroot%cert_svc_ca_bundle
 
 %preun
 # erase
@@ -108,11 +152,11 @@ fi
 systemctl daemon-reload
 # install
 if [ $1 = 1 ]; then
-    systemctl start cert-server.service
+    systemctl start cert-server.socket
 fi
 # upgrade / reinstall
 if [ $1 = 2 ]; then
-    systemctl restart cert-server.service
+    systemctl restart cert-server.socket
 fi
 
 %postun -p /sbin/ldconfig
@@ -120,13 +164,23 @@ fi
 %files
 %manifest %name.manifest
 %license LICENSE
+%license LICENSE.OpenSSL
 %_unitdir/cert-server.service
 %_unitdir/cert-server.socket
-%_unitdir/multi-user.target.wants/cert-server.service
 %_unitdir/sockets.target.wants/cert-server.socket
 %_libdir/libcert-svc-vcore.so.*
-%TZ_SYS_BIN/cert-server
-%attr(-, system, system) %TZ_SYS_SHARE/cert-svc
+%bin_dir/cert-server
+%dir %attr(-, %{user_name}, %{group_name}) %cert_svc_path
+%dir %attr(-, %{user_name}, %{group_name}) %cert_svc_pkcs12
+%dir %attr(-, %{user_name}, %{group_name}) %cert_svc_db_path
+%attr(-, %{user_name}, %{group_name}) %cert_svc_ca_bundle
+%attr(-, %{user_name}, %{group_name}) %cert_svc_db_path/certs-meta.db
+%attr(-, %{user_name}, %{group_name}) %cert_svc_db_path/certs-meta.db-journal
+%attr(-, %{user_name}, %{group_name}) %cert_svc_ro_path
+
+%attr(755, root, root) %upgrade_script_path/202.cert-svc-db-upgrade.sh
+%attr(755, root, root) %upgrade_script_path/203.cert-svc-disabled-certs-upgrade.sh
+%upgrade_data_path/certs-meta.db
 
 %files devel
 %_includedir/*
@@ -135,10 +189,9 @@ fi
 
 %if 0%{?certsvc_test_build}
 %files test
-%TZ_SYS_BIN/cert-svc-test*
-%TZ_SYS_RO_APP/widget/tests
-%TZ_SYS_SHARE/cert-svc/cert-type
-%TZ_SYS_SHARE/cert-svc/tests
-%TZ_SYS_SHARE/ca-certificates/tizen/root_cacert0.pem
+%bin_dir/cert-svc-test*
+%cert_svc_tests
 %_libdir/libcert-svc-validator-plugin.so
+%attr(755, root, root) %upgrade_script_path/cert-svc-test-upgrade.sh
+%upgrade_data_path/certs-meta-old.db
 %endif
Domain: Security / Authentication;