Summary: Software version of a PKCS#11 Hardware Security Module Name: softhsm Version: 2.0.0a2 Release: 1%{?dist} License: BSD Url: http://www.opendnssec.org/ Source: http://dist.opendnssec.org/source/testing/%{name}-%{version}.tar.gz Group: Applications/System BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) BuildRequires: openssl-devel, sqlite-devel >= 3.4.2, cppunit-devel Requires(pre): shadow-utils %global softhsm_module "SoftHSM PKCS #11 Module" %global nssdb %{_sysconfdir}/pki/nssdb %description OpenDNSSEC is providing a software implementation of a generic cryptographic device with a PKCS#11 interface, the SoftHSM. SoftHSM is designed to meet the requirements of OpenDNSSEC, but can also work together with other cryptographic products because of the PKCS#11 interface. %package devel Summary: Development package of softhsm that includes the header files Group: Development/Libraries Requires: %{name} = %{version}-%{release}, openssl-devel, sqlite-devel %description devel The devel package contains the libsofthsm include files %prep %setup -q # quick hack for undefined value # see https://www.sqlite.org/c3ref/c_dbconfig_enable_fkey.html sed -i "s/SQLITE_DBCONFIG_ENABLE_FKEY/1002/g" ./src/lib/object_store/DB.cpp %build %configure --libdir=%{_libdir} --with-openssl=%{_prefix} --enable-ecc --disable-gost \ --with-migrate --with-objectstore-backend-db --enable-visibility make %{?_smp_mflags} %check # one test is segfaulting # make check %install rm -rf %{buildroot} make DESTDIR=%{buildroot} install rm %{buildroot}/%{_sysconfdir}/softhsm2.conf.sample rm -f %{buildroot}/%{_libdir}/softhsm/*a mkdir -p %{buildroot}%{_includedir}/softhsm cp src/lib/*.h %{buildroot}%{_includedir}/softhsm mkdir -p %{buildroot}/%{_sharedstatedir}/softhsm/tokens %files %config(noreplace) %{_sysconfdir}/softhsm2.conf %{_bindir}/* %{_libdir}/softhsm/libsofthsm2.so %attr(0770,ods,ods) %dir %{_sharedstatedir}/softhsm %doc LICENSE README.md NEWS %{_mandir}/*/* %files devel %attr(0755,root,root) %dir %{_includedir}/softhsm %{_includedir}/softhsm/*.h %pre getent group ods >/dev/null || groupadd -r ods getent passwd ods >/dev/null || \ useradd -r -g ods -d /%{_sharedstatedir}/softhsm -s /sbin/nologin \ -c "softhsm private keys owner" ods exit 0 %post %changelog * Tue Aug 05 2014 Paul Wouters - 2.0.0a2-1 - Updated to 2.0.0a2 - Build with openssl instead of botan - Enable ECC but disable GOST as it is not available in our openssl * Sun Jun 08 2014 Fedora Release Engineering - 1.3.6-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Fri Apr 18 2014 Paul Wouters - 1.3.6-1 - Updated to 1.3.6 (rhbz#1070196) - Provide a p11-kit module file (rhbz#1085327) * Sun Nov 03 2013 Paul Wouters - 1.3.5-1 - Updated to 1.3.5 (rhbz#987721) * Tue Jul 30 2013 Paul Wouters - 1.3.3-4 - Rebuilt for new botan - requires --with-botan argument * Fri Feb 15 2013 Fedora Release Engineering - 1.3.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild * Sat Jul 21 2012 Fedora Release Engineering - 1.3.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Mon Jun 04 2012 Paul Wouters - 1.3.3-1 - Updated to 1.3.3 * Tue Apr 03 2012 Paul Wouters - 1.3.2-1 - Updated to 1.3.2. - Changed user from opendnssec to ods, as used in the opendnssec package * Sat Jan 14 2012 Fedora Release Engineering - 1.3.0-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild * Thu Oct 27 2011 Paul Wouters - 1.3.0-3 - Initial Fedora package - Do not install the .a file - Use a separate "opendnssec" user to own /var/sofhsm * Tue Oct 25 2011 Paul Wouters - 1.3.0-2 - Fix description texts w.r.t. include files * Wed Oct 05 2011 Paul Wouters - 1.3.0-1 - Upgraded to 1.3.0 * Thu Mar 3 2011 Paul Wouters - 1.2.0-1 - Initial package for Fedora