openpkg-packages/ocspd/ocspd.spec

##
##  ocspd.spec -- OpenPKG RPM Package Specification
##  Copyright (c) 2000-2022 OpenPKG Project <http://openpkg.org/>
##
##  Permission to use, copy, modify, and distribute this software for
##  any purpose with or without fee is hereby granted, provided that
##  the above copyright notice and this permission notice appear in all
##  copies.
##
##  THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESSED OR IMPLIED
##  WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
##  MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
##  IN NO EVENT SHALL THE AUTHORS AND COPYRIGHT HOLDERS AND THEIR
##  CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
##  SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
##  LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF
##  USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
##  ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
##  OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT
##  OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
##  SUCH DAMAGE.
##

#   package information
Name:         ocspd
Summary:      Online Certificate Status Protocol (OCSP) Responder Daemon
URL:          https://www.openca.org/projects/ocspd/
Vendor:       Massimiliano Pala et al.
Packager:     OpenPKG Project
Distribution: OpenPKG Community
Class:        EVAL
Group:        Cryptography
License:      Apache-style
Version:      3.1.1
Release:      20160501

#   list of sources
Source0:      http://downloads.sourceforge.net/openca/openca-ocspd-%{version}.tar.gz
Source1:      ocspd.xml
Source2:      rc.ocspd
Patch0:       ocspd.patch

#   build information
BuildPreReq:  OpenPKG, openpkg >= 20160101
PreReq:       OpenPKG, openpkg >= 20160101
BuildPreReq:  openssl, libpki, zlib, libxml
PreReq:       openssl, libpki, zlib, libxml

%description
    This is OpenCA's RFC2560 compliant Online Certificate Status
    Protocol (OCSP) Responder Daemon. It can be used as a responder for
    multiple CAs. The purpose of such a server is to provide an online
    tool to verify the status of a certificate.

%track
    prog ocspd = {
        version   = %{version}
        url       = https://www.openca.org/projects/ocspd/sources.shtml
        regex     = openca-ocspd-(__VER__)\.tar\.gz
    }

%prep
    %setup -q -n openca-ocspd-%{version}
    %patch -p0

%build
    #   configure program
    CC="%{l_cc}" \
    CFLAGS="%{l_cflags -O}" \
    CPPFLAGS="%{l_cppflags}" \
    LDFLAGS="%{l_ldflags}" \
    ./configure \
        --prefix=%{l_prefix} \
        --mandir=%{l_prefix}/man \
        --with-libpki-prefix=%{l_prefix} \
        --with-ocspd-user=%{l_nusr} \
        --with-ocspd-group=%{l_ngrp} \
        --disable-shared

    #   build program
    %{l_make} %{l_mflags -O}

%install
    #   install program
    %{l_make} %{l_mflags} install AM_MAKEFLAGS="DESTDIR=$RPM_BUILD_ROOT"

    #   adjust and strip down installation
    mv  $RPM_BUILD_ROOT%{l_prefix}/bin/ocspd-genreq.sh \
        $RPM_BUILD_ROOT%{l_prefix}/bin/ocspd-genreq
    mv  $RPM_BUILD_ROOT%{l_prefix}/share/man \
        $RPM_BUILD_ROOT%{l_prefix}/man
    rmdir $RPM_BUILD_ROOT%{l_prefix}/share
    rm -rf $RPM_BUILD_ROOT%{l_prefix}/etc/init.d
    rm -rf $RPM_BUILD_ROOT%{l_prefix}/var/run
    rm -rf $RPM_BUILD_ROOT%{l_prefix}/lib
    rm -f $RPM_BUILD_ROOT%{l_prefix}/bin/test.sh
    strip $RPM_BUILD_ROOT%{l_prefix}/sbin/* >/dev/null 2>&1 || true

    #   install default configuration
    %{l_shtool} install -c -m 644 %{l_value -s -a} \
        %{SOURCE ocspd.xml} $RPM_BUILD_ROOT%{l_prefix}/etc/ocspd/

    #   install run-command script
    %{l_shtool} mkdir -f -p -m 755 \
        $RPM_BUILD_ROOT%{l_prefix}/etc/rc.d
    %{l_shtool} install -c -m 755 %{l_value -s -a} \
        %{SOURCE rc.ocspd} $RPM_BUILD_ROOT%{l_prefix}/etc/rc.d/

    #   create run-time directories
    %{l_shtool} mkdir -f -p -m 755 \
        $RPM_BUILD_ROOT%{l_prefix}/var/ocspd/run \
        $RPM_BUILD_ROOT%{l_prefix}/var/ocspd/log

    #   determine installation files
    %{l_rpmtool} files -v -ofiles -r$RPM_BUILD_ROOT \
        %{l_files_std} \
        '%config %{l_prefix}/etc/ocspd/ocspd.xml' \
        '%attr(-,%{l_rusr},%{l_rgrp}) %{l_prefix}/var/ocspd/*'

%files -f files

%clean

%post
    #   after upgrade, restart service
    [ $1 -eq 2 ] || exit 0
    eval `%{l_rc} ocspd status 2>/dev/null`
    [ ".$ocspd_active" = .yes ] && %{l_rc} ocspd restart
    exit 0

%preun
    #   before erase, stop service and remove log files
    [ $1 -eq 0 ] || exit 0
    %{l_rc} ocspd stop 2>/dev/null
    rm -f $RPM_INSTALL_PREFIX/var/ocspd/*.log* >/dev/null 2>&1 || true
    exit 0