Главная   Изменения   Спек   Патчи   Sources   Загрузить   Gear   Bugs and FR  Repocop 

# handle Sisyphus/ALM2.2 differences
%define dist_tag %nil

%if_with Master
%define dist_tag Master
%endif

%if_with Sisyphus
%define dist_tag Sisyphus
%endif

%if "%dist_tag" == ""
%define dist_tag %(cut -d" " -f3 < /etc/altlinux-release)
%endif

%if "%dist_tag" == "Master"
%define release_tag .M22
%else
%define release_tag %nil
%endif

Name: mod_ssl
Version: 2.8.24
Release: alt1%release_tag

Summary: An SSL module for the Apache Web server
License: BSD
Group: System/Servers

%define mod_ssl_apache_version 1.3.33
Url: http://www.modssl.org
Source0: %url/source/mod_ssl-%version-%mod_ssl_apache_version.tar.gz
Source1: mod_ssl.conf

Source2: server.crt
Source3: server.key

Source4: sxnet.html
Source5: ssl.default-vhost.conf
Source6: stamp.gif

Patch0: ssl.patch

# http://marc.theaimsgroup.com/?l=apache-modssl&m=109724918128044&q=raw
Patch1: mod_ssl-2.8.12-SSLCipherSuite.patch

Requires: apache >= %apache_version-%apache_release, libssl >= 0.9.6i
Requires: mm >= 1.1.0, perl >= 1:5.6.0

# Automatically added by buildreq on Mon Nov 03 2003
BuildRequires: libdb1-devel libgdbm libssl-devel openssl

BuildRequires: libmm-devel >= 1.1.0
BuildRequires: apache-devel >= %mod_ssl_apache_version

%define oldapacheroot /home/httpd
%define re_start_flag %apache_addonconfdir/mod_ssl-upgrade-re-start.flag

Summary(de): SSL-Modul fuer den Apache-Webserver
Summary(fr): Un module SSL pour le serveur Web Apache
Summary(ru_RU.KOI8-R): Модуль поддержки SSL для веб-сервера Apache.
Summary(uk_UA.KOI8-U): Модуль п╕дтримки SSL для веб-серверу Apache.

%description
The mod_ssl project provides strong cryptography for the Apache 1.3 webserver
via the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1)
protocols by the help of the Open Source SSL/TLS toolkit OpenSSL, which is
based on SSLeay from Eric A. Young and Tim J. Hudson.

The mod_ssl package was created in April 1998 by Ralf S. Engelschall and was
originally derived from software developed by Ben Laurie for use in the
Apache-SSL HTTP server project. The mod_ssl package is licensed under a
BSD-style licence, which basically means that you are free to get and use it
for commercial and non-commercial purposes.

%description -l de
Das mod_ssl-Projekt stellt kryptographie fЭr den Apache 1.3-Webserver Эber
Secure Sockets Layer (SSL v2/v3) und Transport Layer Security (TLS
v1)-Protokolle zur VerfЭgung. Dazu wird das Open Source SSL/TLS-Toolkit
OpenSSL, das auf SSLeay basiert, verwendet.

%description -l fr
Le projet mod_ssl fournit de la forte cryptographie pour le serveur web
Apache 1.3 via les protocoles Secure Sockets Layer (SSL v2/v3) et Transport Layer
Security (TLS v1) avec l'aide du kit d'outils Open Source SSL/TLS, OpenSSL,
base sur SSLeay d'Eric A. Young et Tim J. Hudson.

%description -l ru_RU.KOI8-R
Проект mod_ssl предоставляет средства сильной криптографической защиты для
веб-сервера Apache по протоколам Secure Sockets Layer (SSL v2/v3) и Transport
Layer Security (TLS v1), используя OpenSSL - open-source библиотеку SSL/TLS.

%description -l uk_UA.KOI8-U
Проект mod_ssl нада╓ засоби сильного криптограф╕чного захисту для веб-серверу
Apache за протоколами Secure Sockets Layer (SSL v2/v3) та Transport Layer
Security (TLS v1), використовуючи OpenSSL - open-source б╕бл╕отеку SSL/TLS.

%package sxnet
Summary: Strong Extranet module for mod_ssl and apache
Summary(fr): Module d'Extranet Fort pour Apache et mod_ssl
Summary(ru_RU.KOI8-R): Модуль Strong Extranet для mod_ssl и Apache
Group: System/Servers
Requires: mod_ssl, openssl, apache

%description sxnet
The Strong Extranet allows you to use digital certificates to authenticate
users on your web server. Typically, your users enroll in your Strong
Extranet, under your control, through the Thawte Personal Cert System.

%description -l fr sxnet
L'Extranet Fort vous permet d'utiliser des certificats numeriques pour
authentifier les usagers sur votre serveur web. Typiquement, vos usagers
s'enrolent dans votre Extranet Fort, sous votre controle, a travers le
Thawte Personal Cert System.

%description -l ru_RU.KOI8-R sxnet
Strong Extranet позволяет использовать цифровые сертификаты для идентификации
пользователей веб-сервера. Пользователи обычно регистрируются в вашей системе
Strong Extranet под вашим контролем, через Thawte Personal Cert System.

%description -l uk_UA.KOI8-U sxnet
Strong Extranet дозволя╓ використовувати цифров╕ сертиф╕кати для ╕дентиф╕кац╕╖
користувач╕в веб-серверу. Користувач╕ звичайно ре╓струються у ваш╕й систем╕
Strong Extranet п╕д вашим контролем, через Thawte Personal Cert System.

%if "%dist_tag" == "Sisyphus"
%package doc
Summary: Documentation for mod_ssl
Group: System/Servers

%description doc
System administrator's manual for mod_ssl package
%endif

%prep
%setup -q -n mod_ssl-%version-%mod_ssl_apache_version

cd pkg.sslmod
%patch0 -p1
cd ../..
pwd
cd mod_ssl-%version-%mod_ssl_apache_version

%build
PATH="$PATH:`pwd`:%_sbindir"  \
SSL_BASE=SYSTEM CFLAGS="%optflags" \
./configure \
--with-apxs=%apache_apxs \
--force

CFLAGS_SHLIB="-fPIC -DSHARED_MODULE -DSSL_USE_SDBM" make -e
cd pkg.contrib
%__tar xvf sxnet.tar
cd sxnet

%apache_apxs \
-I%_includedir/openssl/ -L%_libdir \
-lssl -lcrypto -c mod_sxnet.c

%install
%__mkdir_p %buildroot%_libdir/apache
%__install -m755 pkg.sslmod/libssl.so %buildroot%_libdir/apache/
%__install -m755 pkg.contrib/sxnet/mod_sxnet.so %buildroot%_libdir/apache/
%__mkdir_p %buildroot%_libdir/ssl/mod_ssl
%__install -m755 pkg.contrib/*.sh %buildroot%_libdir/ssl/mod_ssl/
%__mkdir_p %buildroot{%apache_confdir/ssl,%apache_addonconfdir}
%__install -m644 %SOURCE2 %SOURCE3 \
%buildroot%apache_confdir/ssl/
%__install -m644 %SOURCE1 %SOURCE5 \
%buildroot%apache_addonconfdir/
%__install -m644 %SOURCE4 \
$RPM_BUILD_DIR/mod_ssl-%version-%mod_ssl_apache_version/index.html
%__install -m644 %SOURCE6 \
$RPM_BUILD_DIR/mod_ssl-%version-%mod_ssl_apache_version/

%pre
%__rm -f %re_start_flag
# handle migration from pre-2.8.16-alt1
if grep -qs "^Include conf/ssl/" \
%apache_confdir/httpd.conf; then
echo "Warning: configuration files moved"
echo "    from %apache_confdir/ssl/"
echo "      to %apache_addonconfdir/"
echo "you may want to check the transition"
for conf in mod_ssl.conf ssl.default-vhost.conf; do
for suffix in "" .rpmsave; do
if [ -f %apache_confdir/ssl/$conf$suffix ]; then
%__mv -v %apache_confdir/ssl/$conf$suffix \
%apache_addonconfdir/$conf
continue
fi
done
done
%__perl -pi -e "s|^Include conf/ssl/mod_ssl.conf\n||" \
%apache_confdir/httpd.conf
%__perl -pi -e "s|^Include conf/ssl/ssl.default-vhost.conf\n||" \
%apache_confdir/httpd.conf
# ...and specifically thinko in %%postun of older mod_ssl:
# there should be _not_ inverted condition on $1, since as it is
# mod_ssl gets disabled, httpd restarted (what it then fails to do)
if [ -e %_var/run/httpd.pid ]; then
# httpd was running, must restart in trigger
touch %re_start_flag
echo "Warning: apache was running before erroneous %%postun"
echo "         in previous mod_ssl version installed will"
echo "         bring it down a few lines later; will try to fix."
fi
fi

%post
if ! grep -qs "^Include conf/addon-modules/mod_ssl.conf" \
%apache_confdir/httpd.conf; then
%apache_apxs -e -a -n ssl libssl.so
echo "Include conf/addon-modules/ssl.default-vhost.conf" \
>> %apache_confdir/httpd.conf
fi
%__subst "s,%oldapacheroot,%apache_datadir,g" \
%apache_addonconfdir/ssl.default-vhost.conf
%_sbindir/apachectl update

%if "%dist_tag" == "Sisyphus"
%post doc
%endif
%__ln_s -f %_docdir/mod_ssl-%version \
%apache_datadir/html/addon-modules/mod_ssl ||:

%post sxnet
%__ln_s -f %_docdir/mod_ssl-sxnet-%version \
%apache_datadir/html/addon-modules/mod_ssl-sxnet ||:

%preun
if [ $1 = 0 ]; then
   %apache_apxs -e -A -n ssl libssl.so
   %__perl -pi -e "s|^Include conf/addon-modules/mod_ssl.conf\n||" \
   %apache_confdir/httpd.conf
   %__perl -pi -e "s|^Include conf/addon-modules/ssl.default-vhost.conf\n||" \
   %apache_confdir/httpd.conf
   %_sbindir/apachectl update
fi

# WARNING: a hack to coalesce doc subpackage for ALM2.2 build
# not to change packaging

%if "%dist_tag" == "Sisyphus"
%postun doc
%endif
if [ $1 = 0 ]; then
   %__rm -f %apache_datadir/html/addon-modules/mod_ssl
fi

%postun sxnet
if [ $1 = 0 ]; then
   %__rm -f %apache_datadir/html/addon-modules/mod_ssl-sxnet
fi

%triggerpostun -- mod_ssl < 2.8.16-alt1
# ...which would erroneously disable mod_ssl after upgrade
echo "Warning, reenabling mod_ssl which was disabled by"
echo "previous version uninstallation process."
echo "If it was disabled intentionally, please recheck."
%_sbindir/apxs -e -a -n ssl libssl.so

if [ -e "%re_start_flag" ]; then
echo "...additionally trying to re-start apache:"
%_sbindir/apachectl restart && %__rm -f %re_start_flag
fi

%files
%dir %apache_confdir/ssl
%attr(0600,root,root) %config(noreplace) %apache_confdir/ssl/server.crt
%attr(0600,root,root) %config(noreplace) %apache_confdir/ssl/server.key
%config(noreplace) %apache_addonconfdir/mod_ssl.conf
%config(noreplace) %apache_addonconfdir/ssl.default-vhost.conf
%doc ANNOUNCE CHANGES CREDITS LICENSE NEWS README*
%_libdir/apache/libssl.so
%dir %_libdir/ssl
%dir %_libdir/ssl/mod_ssl
%_libdir/ssl/mod_ssl/*.sh

%if "%dist_tag" == "Sisyphus"
%files doc
%endif
%doc pkg.ssldoc/*

%files sxnet
%_libdir/apache/mod_sxnet.so
%doc index.html stamp.gif

%changelog
…
Полный changelog можно просмотреть здесь