You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
104 lines
4.0 KiB
104 lines
4.0 KiB
## |
|
## notary.spec -- OpenPKG RPM Package Specification |
|
## Copyright (c) 2000-2022 OpenPKG Project <http://openpkg.org/> |
|
## |
|
## Permission to use, copy, modify, and distribute this software for |
|
## any purpose with or without fee is hereby granted, provided that |
|
## the above copyright notice and this permission notice appear in all |
|
## copies. |
|
## |
|
## THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESSED OR IMPLIED |
|
## WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF |
|
## MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. |
|
## IN NO EVENT SHALL THE AUTHORS AND COPYRIGHT HOLDERS AND THEIR |
|
## CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, |
|
## SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT |
|
## LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF |
|
## USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND |
|
## ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, |
|
## OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT |
|
## OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF |
|
## SUCH DAMAGE. |
|
## |
|
|
|
# package version |
|
%define V_opkg 0.7.0 |
|
%define V_dist 20210114 |
|
|
|
# package information |
|
Name: notary |
|
Summary: Data Notary Service |
|
URL: https://github.com/theupdateframework/notary |
|
Vendor: David Williamson et al. |
|
Packager: OpenPKG Project |
|
Distribution: OpenPKG Community |
|
Class: EVAL |
|
Group: Cryptography |
|
License: Apache |
|
Version: %{V_opkg}.%{V_dist} |
|
Release: 20210114 |
|
|
|
# list of sources |
|
Source0: http://download.openpkg.org/components/versioned/notary/notary-%{V_dist}.tar.xz |
|
|
|
# build information |
|
BuildPreReq: OpenPKG, openpkg >= 20160101, go |
|
PreReq: OpenPKG, openpkg >= 20160101 |
|
|
|
%description |
|
Notary aims to make the internet more secure by making it easy for |
|
people to publish and verify content. We often rely on TLS to secure |
|
our communications with a web server, which is inherently flawed, |
|
as any compromise of the server enables malicious content to be |
|
substituted for the legitimate content. With Notary, publishers can |
|
sign their content offline using keys kept highly secure. Once the |
|
publisher is ready to make the content available, they can push |
|
their signed trusted collection to a Notary Server. Consumers, |
|
having acquired the publisher's public key through a secure channel, |
|
can then communicate with any Notary server or (insecure) mirror, |
|
relying only on the publisher's key to determine the validity and |
|
integrity of the received content. |
|
|
|
%track |
|
prog notary:release = { |
|
version = %{V_opkg} |
|
url = https://github.com/theupdateframework/notary/releases |
|
regex = v(__VER__)\.tar\.gz |
|
} |
|
prog notary:snapshot = { |
|
version = %{V_dist} |
|
url = http://download.openpkg.org/components/versioned/notary/ |
|
regex = notary-(__VER__)\.tar\.xz |
|
} |
|
|
|
%prep |
|
%setup -q -n notary |
|
|
|
%build |
|
# build program |
|
export GOPATH=`pwd` |
|
sed -e 's;pkcs11,linux;pkcs11,freebsd;g' \ |
|
<src/github.com/theupdateframework/notary/trustmanager/yubikey/pkcs11_linux.go \ |
|
>src/github.com/theupdateframework/notary/trustmanager/yubikey/pkcs11_freebsd.go |
|
rm -f src/github.com/theupdateframework/notary/cmd/notary/keys_nonpkcs11.go |
|
rm -f src/github.com/theupdateframework/notary/cmd/notary/util_windows.go |
|
go build -v \ |
|
-ldflags="-X github.com/theupdateframework/notary/version.GitCommit=000000 -X github.com/theupdateframework/notary/version.NotaryVersion=%{V_opkg}" \ |
|
-tags pkcs11 \ |
|
-o notary \ |
|
src/github.com/theupdateframework/notary/cmd/notary/*.go |
|
|
|
%install |
|
# install program |
|
%{l_shtool} mkdir -f -p -m 755 \ |
|
$RPM_BUILD_ROOT%{l_prefix}/bin |
|
%{l_shtool} install -c -s -m 755 \ |
|
notary $RPM_BUILD_ROOT%{l_prefix}/bin/ |
|
|
|
# determine installation files |
|
%{l_rpmtool} files -v -ofiles -r$RPM_BUILD_ROOT %{l_files_std} |
|
|
|
%files -f files |
|
|
|
%clean |
|
|
|
|