Remove check for RSA algorithm, block duplicate check of root signature.
[shibboleth/cpp-sp.git] / shibboleth.spec.in
1 Name:           shibboleth
2 Summary:        Open source system to enable inter-institutional resource sharing
3 Version:        @-VERSION-@
4 Release:        1
5 Group:          System Environment/Libraries
6 Vendor:         Internet2
7 License:        Apache 2.0
8 URL:            http://shibboleth.internet2.edu/
9 Source0:        http://shibboleth.internet2.edu/downloads/%{name}-%{version}.tar.gz
10 BuildRoot:      %{_tmppath}/%{name}-%{version}-root
11
12 BuildRequires:  openssl-devel, curl-devel >= 7.10.6
13 BuildRequires:  xerces%{?xercesver}-c-devel >= 2.8.0, xml-security-c-devel >= 1.3.0
14 BuildRequires:  zlib-devel, opensaml-devel >= 1.1.1, opensaml-devel < 2.0
15 %{?_with_log4cpp:BuildRequires: log4cpp-devel >= 1.0}
16 %{!?_with_log4cpp:BuildRequires: log4shib-devel}
17 %{?_with_fastcgi:BuildRequires: fcgi-devel}
18 %if "%{_vendor}" == "redhat"
19 %{!?_without_builtinapache:BuildRequires: httpd-devel}
20 %endif
21 %if "%{_vendor}" == "suse"
22 %{!?_without_builtinapache:BuildRequires: apache2-devel}
23 %endif
24
25
26 %description
27 Shibboleth, a project of Internet2/MACE, is developing architectures,
28 policy structures, practical technologies, and an open source
29 implementation to support inter-institutional sharing of web resources
30 subject to access controls. In addition, Shibboleth will develop a
31 policy framework that will allow inter-operation within the higher
32 education community.
33
34 This package contains the shibboleth runtime library and apache module.
35
36 %package devel
37 Summary: Shibboleth development Headers
38 Group: Development/Libraries
39 Requires: %{name} = %{version}
40
41 %description devel
42 Shibboleth, a project of Internet2/MACE, is developing architectures,
43 policy structures, practical technologies, and an open source
44 implementation to support inter-institutional sharing of web resources
45 subject to access controls. In addition, Shibboleth will develop a
46 policy framework that will allow inter-operation within the higher
47 education community.
48
49 This package contains the headers and other necessary files to build
50 applications that use the shibboleth library.
51
52 %prep
53 %setup -q
54
55 %build
56 %configure %{?_with_fastcgi} %{?shib_options}
57 %{__make}
58
59 %install
60 [ "$RPM_BUILD_ROOT" != "/" ] && %{__rm} -rf $RPM_BUILD_ROOT
61 %{__make} install DESTDIR=$RPM_BUILD_ROOT
62
63 %if "%{_vendor}" == "suse"
64         %{__sed} -i "s/\/var\/log\/httpd/\/var\/log\/apache2/g" \
65                 $RPM_BUILD_ROOT/%{_sysconfdir}/%{name}/native.logger
66 %endif
67
68 find $RPM_BUILD_ROOT/%{_libexecdir} -type f -or -type l |
69   %{__sed} -e "s|$RPM_BUILD_ROOT||" | sort > rpm.filelist
70
71 %check || :
72 %{__make} check
73
74 %clean
75 [ "$RPM_BUILD_ROOT" != "/" ] && %{__rm} -rf $RPM_BUILD_ROOT
76
77 %post
78 %ifnos solaris2.8 solaris2.9 solaris2.10
79 /sbin/ldconfig
80 %endif
81
82 # Plug the SP into Apache on a recognized system.
83 APACHE_CONFIG="no"
84 if [ -f $RPM_BUILD_ROOT/%{_libexecdir}/mod_shib_13.so ] ; then
85         APACHE_CONFIG="apache.config"
86 fi
87 if [ -f $RPM_BUILD_ROOT/%{_libexecdir}/mod_shib_20.so ] ; then
88         APACHE_CONFIG="apache2.config"
89 fi
90 if [ -f $RPM_BUILD_ROOT/%{_libexecdir}/mod_shib_22.so ] ; then
91         APACHE_CONFIG="apache22.config"
92 fi
93 if [ "$APACHE_CONFIG" != "no" ] ; then
94         APACHE_CONFD="no"
95         if [ -d %{_sysconfdir}/httpd/conf.d ] ; then
96                 APACHE_CONFD="%{_sysconfdir}/httpd/conf.d"
97         fi
98         if [ -d %{_sysconfdir}/apache2/conf.d ] ; then
99                 APACHE_CONFD="%{_sysconfdir}/apache2/conf.d"
100         fi
101         if [ "$APACHE_CONFD" != "no" ] ; then
102                 if [ ! -f $APACHE_CONFD/shib.conf ] ; then
103 %if "%{_vendor}" == "suse"
104                     %{__sed} "s/\/usr\/doc\/%{name}/\/usr\/share\/doc\/packages\/%{name}/g" \
105                                 %{_sysconfdir}/%{name}/$APACHE_CONFIG \
106                                 > $APACHE_CONFD/shib.conf
107 %else
108                         %{__sed} "s/\/usr\/doc\/%{name}/\/usr\/share\/doc\/%{name}-@-VERSION-@/g" \
109                             %{_sysconfdir}/%{name}/$APACHE_CONFIG \
110                             > $APACHE_CONFD/shib.conf
111 %endif
112                 fi
113         fi
114 fi
115
116 # Install the shibd init.d scripts and service
117 %if "%{_vendor}" == "redhat"
118         if [ -d %{_sysconfdir}/init.d ] ; then
119                 if [ ! -f %{_sysconfdir}/init.d/shibd ] ; then
120                         %{__cp} -p %{_sysconfdir}/shibboleth/shibd-%{_vendor} %{_sysconfdir}/init.d/shibd
121                         %{__chmod} 755 %{_sysconfdir}/init.d/shibd
122                         chkconfig --add shibd
123                 fi
124         fi
125 %endif
126
127 %postun
128 %ifnos solaris2.8 solaris2.9 solaris2.10 
129 /sbin/ldconfig
130 %endif
131
132 # delete the Apache configuration if we're being removed
133 [ "$1" = 0 ] || exit 0
134 [ -f %{_sysconfdir}/httpd/conf.d/shib.conf ] && \
135     %{__rm} -f %{_sysconfdir}/httpd/conf.d/shib.conf
136 [ -f %{_sysconfdir}/apache2/conf.d/shib.conf ] && \
137     %{__rm} -f %{_sysconfdir}/apache2/conf.d/shib.conf
138
139 # clear init.d state
140 %if "%{_vendor}" == "redhat"
141         chkconfig --del shibd
142         [ -f %{_sysconfdir}/init.d/shibd ] && \
143             %{__rm} -f %{_sysconfdir}/init.d/shibd
144 %endif
145
146 %files -f rpm.filelist
147 %defattr(-,root,root,-)
148 %{_sbindir}/shibd
149 %{_sbindir}/siterefresh
150 %{_bindir}/shibtest
151 %{_libdir}/libshib.so.*
152 %{_libdir}/libshib-target.so.*
153 %dir %{_localstatedir}/log/shibboleth
154 %dir %{_datadir}/xml/shibboleth
155 %{_datadir}/xml/shibboleth/*.xsd
156 %{_datadir}/xml/shibboleth/*.xsl
157 %dir %{_sysconfdir}/shibboleth
158 %config(noreplace) %{_sysconfdir}/shibboleth/*.xml
159 %config(noreplace) %{_sysconfdir}/shibboleth/*.html
160 %config(noreplace) %{_sysconfdir}/shibboleth/*.logger
161 %config %{_sysconfdir}/shibboleth/sp-example.crt
162 %config %{_sysconfdir}/shibboleth/sp-example.key
163 %{_sysconfdir}/shibboleth/*.dist
164 %{_sysconfdir}/shibboleth/apache*.config
165 %{_sysconfdir}/%{name}/shibd-redhat
166 %{_sysconfdir}/%{name}/shibd-debian
167 %{_sysconfdir}/%{name}/shibd-osx.plist
168 %docdir %{_datadir}/doc/shibboleth
169 %{_datadir}/doc/shibboleth
170
171 %exclude %{_bindir}/posttest
172 %exclude %{_bindir}/test-client
173 %exclude %{_libexecdir}/*.la
174
175 %files devel
176 %defattr(-,root,root,-)
177 %{_includedir}
178 %{_libdir}/libshib.so
179 %{_libdir}/libshib-target.so
180
181 %changelog
182 * Sat Sep 15 2007 Scott Cantor   <cantor.2@osu.edu>  - 1.3.1-1
183 - 1.3.1 release
184
185 * Mon Oct 2 2006 Scott Cantor   <cantor.2@osu.edu>  - 1.3-11
186 - Applied fix for secadv 20061002
187 - Fix for metadata loader loop
188
189 * Wed Jun 15 2006 Scott Cantor  <cantor.2@osu.edu>  - 1.3-10
190 - Applied fix for sec 20060615
191
192 * Fri Apr 15 2006 Scott Cantor  <cantor.2@osu.edu>  - 1.3-9
193 - Misc. patches, SuSE, Apache 2.2, gcc 4.1, and 64-bit support
194
195 * Mon Jan 9 2006 Scott Cantor  <cantor.2@osu.edu>  - 1.3-8
196 - Applied new fix for secadv 20060109
197
198 * Tue Nov 8 2005 Scott Cantor  <cantor.2@osu.edu>  - 1.3-7
199 - Applied new fix for secadv 20050901 plus rollup
200
201 * Fri Sep 23 2005 Scott Cantor  <cantor.2@osu.edu>  - 1.3-6
202 - Minor patches and default config changes
203 - pidfile patch
204 - Fix shib.conf creation
205 - Integrated init.d script
206 - Prevent replacement of config files
207
208 * Thu Sep 1 2005  Scott Cantor  <cantor.2@osu.edu>  - 1.3-5
209 - Applied fix for secadv 20050901 plus rollup of NSAPI fixes
210
211 * Sun Apr 24 2005  Scott Cantor  <cantor.2@osu.edu>  - 1.3-1
212 - Updated test programs and location of schemas.
213 - move siterefresh to to sbindir
214
215 * Fri Apr  1 2005  Derek Atkins  <derek@ihtfp.com>  - 1.3-1
216 - Add selinux-targeted-policy package
217 - move shar to sbindir
218
219 * Tue Oct 19 2004  Derek Atkins  <derek@ihtfp.com>  - 1.2-1
220 - Create SPEC file based on various versions in existence.