diff --git a/openssl-pkcs11.spec b/openssl-pkcs11.spec index aa0977a7b97161811b6e05afc4c484c285bdddb8..2ce6ba55e4ccc0e3a1b04d69a13d3d90ff85d287 100644 --- a/openssl-pkcs11.spec +++ b/openssl-pkcs11.spec @@ -1,48 +1,46 @@ -%define anolis_release 1 +%define anolis_release 2 Name: openssl-pkcs11 Version: 0.4.12 Release: %{anolis_release}%{?dist} Summary: A PKCS#11 engine for use with OpenSSL -# The source code is LGPLv2+ except eng_back.c and eng_parse.c which are BSD License: LGPLv2+ and BSD URL: https://github.com/OpenSC/libp11 Source0: https://github.com/OpenSC/libp11/releases/download/libp11-%{version}/libp11-%{version}.tar.gz -# Downstream only for now to make RSA operations working in FIPS mode Patch4: openssl-pkcs11-0.4.10-set-rsa-fips-method-flag.patch -# unbreak operation when some other engine is present in openssl.cnf -# https://github.com/OpenSC/libp11/pull/460 -# https://github.com/OpenSC/libp11/commit/feb22a66 Patch5: openssl-pkcs11-ossl3.patch -BuildRequires: make -BuildRequires: autoconf automake libtool -BuildRequires: pkgconfig(libcrypto) >= 0.9.8 -BuildRequires: pkgconfig(openssl) -BuildRequires: pkgconfig(p11-kit-1) -# Needed for testsuite -BuildRequires: softhsm opensc procps-ng -BuildRequires: openssl - - +BuildRequires: make autoconf automake libtool +BuildRequires: softhsm opensc procps-ng openssl +BuildRequires: pkgconfig(libcrypto) >= 0.9.8 pkgconfig(openssl) pkgconfig(p11-kit-1) Requires: p11-kit-trust -# Package renamed from libp11 to openssl-pkcs11 in release 0.4.7-4 -Provides: libp11 = %{version}-%{release} -Obsoletes: libp11 < 0.4.7-4 -# The engine_pkcs11 subpackage is also provided -Provides: engine_pkcs11 = %{version}-%{release} -Obsoletes: engine_pkcs11 < 0.4.7-4 +Provides: libp11 = %{version}-%{release} engine_pkcs11 = %{version}-%{release} +Obsoletes: libp11 < 0.4.7-4 engine_pkcs11 < 0.4.7-4 +%description +The PKCS#11 API is an abstract API to perform operations on cryptographic +objects such as private keys, without requiring access to the objects +themselves. That is, it provides a logical separation of the keys from the +operations. The PKCS #11 API is mainly used to access objects in smart cards +and Hardware or Software Security Modules (HSMs). That is because in these +modules the cryptographic keys are isolated in hardware or software and are not +made available to the applications using them. -%description -n openssl-pkcs11 -openssl-pkcs11 enables hardware security module (HSM), and smart card support in -OpenSSL applications. More precisely, it is an OpenSSL engine which makes -registered PKCS#11 modules available for OpenSSL applications. The engine is -optional and can be loaded by configuration file, command line or through the -OpenSSL ENGINE API. +PKCS#11 API is an OASIS standard and it is supported by various hardware and +software vendors. Usually, hardware vendors provide a PKCS#11 module to access +their devices. A prominent example is the OpenSC PKCS #11 module which provides +access to a variety of smart cards. Other libraries like NSS or GnuTLS already +take advantage of PKCS #11 to access cryptographic objects. +%package doc +Summary: Documentation files for %{name} +Requires: %{name} = %{version}-%{release} +BuildArch: noarch + +%description doc +The %{name}-doc package contains documentation files for %{name}. %prep %autosetup -p1 -n libp11-%{version} @@ -54,24 +52,31 @@ OpenSSL ENGINE API. %install %make_install -## Remove development files rm -f %{buildroot}%{_libdir}/libp11.so rm -f %{buildroot}%{_libdir}/pkgconfig/libp11.pc rm -f %{buildroot}%{_includedir}/*.h - -# Remove documentation automatically installed by make install rm -rf %{buildroot}%{_docdir} +%generate_compatibility_deps + %check -%make_build check || if [ $? -ne 0 ]; then cat tests/*.log; exit 1; fi; +%make_build check %files +%dir %{abidir} %license COPYING -%doc NEWS %{_libdir}/libp11.so.* %{_libdir}/engines-*/*.so +%{abidir}/*.dump + +%files doc +%doc README.md NEWS %changelog +* Sat Apr 15 2023 Shawn Wang - 0.4.12-2 +- Add doc package +- Add abi info + * Mon Jan 30 2023 Funda Wang - 0.4.12-1 - New version 0.4.12