new package

notary/notary.spec

@@ -0,0 +1,104 @@
+##
+##  notary.spec -- OpenPKG RPM Package Specification
+##  Copyright (c) 2000-2018 OpenPKG Project <http://openpkg.org/>
+##
+##  Permission to use, copy, modify, and distribute this software for
+##  any purpose with or without fee is hereby granted, provided that
+##  the above copyright notice and this permission notice appear in all
+##  copies.
+##
+##  THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESSED OR IMPLIED
+##  WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
+##  MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
+##  IN NO EVENT SHALL THE AUTHORS AND COPYRIGHT HOLDERS AND THEIR
+##  CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+##  SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+##  LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF
+##  USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
+##  ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+##  OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT
+##  OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+##  SUCH DAMAGE.
+##
+
+#   package version
+%define       V_opkg  0.6.1
+%define       V_dist  20181110
+
+#   package information
+Name:         notary
+Summary:      Data Notary Service
+URL:          https://github.com/theupdateframework/notary
+Vendor:       David Williamson et al.
+Packager:     OpenPKG Project
+Distribution: OpenPKG Community
+Class:        EVAL
+Group:        Cryptography
+License:      Apache
+Version:      %{V_opkg}.%{V_dist}
+Release:      20181110
+
+#   list of sources
+Source0:      http://download.openpkg.org/components/versioned/notary/notary-%{V_dist}.tar.xz
+
+#   build information
+BuildPreReq:  OpenPKG, openpkg >= 20160101, go
+PreReq:       OpenPKG, openpkg >= 20160101
+
+%description
+    Notary aims to make the internet more secure by making it easy for
+    people to publish and verify content. We often rely on TLS to secure
+    our communications with a web server, which is inherently flawed,
+    as any compromise of the server enables malicious content to be
+    substituted for the legitimate content. With Notary, publishers can
+    sign their content offline using keys kept highly secure. Once the
+    publisher is ready to make the content available, they can push
+    their signed trusted collection to a Notary Server. Consumers,
+    having acquired the publisher's public key through a secure channel,
+    can then communicate with any Notary server or (insecure) mirror,
+    relying only on the publisher's key to determine the validity and
+    integrity of the received content.
+
+%track
+    prog notary:release = {
+        version   = %{V_opkg}
+        url       = https://github.com/theupdateframework/notary/releases
+        regex     = v(__VER__)\.tar\.gz
+    }
+    prog notary:snapshot = {
+        version   = %{V_dist}
+        url       = http://download.openpkg.org/components/versioned/notary/
+        regex     = notary-(__VER__)\.tar\.xz
+    }
+
+%prep
+    %setup -q -n notary
+
+%build
+    #   build program
+    export GOPATH=`pwd`
+    sed -e 's;pkcs11,linux;pkcs11,freebsd;g' \
+        <src/github.com/theupdateframework/notary/trustmanager/yubikey/pkcs11_linux.go \
+        >src/github.com/theupdateframework/notary/trustmanager/yubikey/pkcs11_freebsd.go
+    rm -f src/github.com/theupdateframework/notary/cmd/notary/keys_nonpkcs11.go
+    rm -f src/github.com/theupdateframework/notary/cmd/notary/util_windows.go
+    go build -x \
+        -ldflags="-X github.com/theupdateframework/notary/version.GitCommit=000000 -X github.com/theupdateframework/notary/version.NotaryVersion=%{V_opkg}" \
+        -tags pkcs11 \
+        -o notary \
+        src/github.com/theupdateframework/notary/cmd/notary/*.go
+
+%install
+    #   install program
+    %{l_shtool} mkdir -f -p -m 755 \
+        $RPM_BUILD_ROOT%{l_prefix}/bin
+    %{l_shtool} install -c -s -m 755 \
+        notary $RPM_BUILD_ROOT%{l_prefix}/bin/
+
+    #   determine installation files
+    %{l_rpmtool} files -v -ofiles -r$RPM_BUILD_ROOT %{l_files_std}
+
+%files -f files
+
+%clean
+