Changeset View
Changeset View
Standalone View
Standalone View
contrib/redhat/openssh.spec
%define ver 8.0p1 | %global ver 8.4p1 | ||||
%define rel 1%{?dist} | %global rel 1%{?dist} | ||||
# OpenSSH privilege separation requires a user & group ID | # OpenSSH privilege separation requires a user & group ID | ||||
%define sshd_uid 74 | %global sshd_uid 74 | ||||
%define sshd_gid 74 | %global sshd_gid 74 | ||||
# Version of ssh-askpass | # Version of ssh-askpass | ||||
%define aversion 1.2.4.1 | %global aversion 1.2.4.1 | ||||
# Do we want to disable building of x11-askpass? (1=yes 0=no) | # Do we want to disable building of x11-askpass? (1=yes 0=no) | ||||
%define no_x11_askpass 0 | %global no_x11_askpass 0 | ||||
# Do we want to disable building of gnome-askpass? (1=yes 0=no) | # Do we want to disable building of gnome-askpass? (1=yes 0=no) | ||||
%define no_gnome_askpass 0 | %global no_gnome_askpass 0 | ||||
# Do we want to link against a static libcrypto? (1=yes 0=no) | # Do we want to link against a static libcrypto? (1=yes 0=no) | ||||
%define static_libcrypto 0 | %global static_libcrypto 0 | ||||
# Do we want smartcard support (1=yes 0=no) | # Do we want smartcard support (1=yes 0=no) | ||||
%define scard 0 | %global scard 0 | ||||
# Use GTK2 instead of GNOME in gnome-ssh-askpass | # Use GTK2 instead of GNOME in gnome-ssh-askpass | ||||
%define gtk2 1 | %global gtk2 1 | ||||
# Use build6x options for older RHEL builds | # Use build6x options for older RHEL builds | ||||
# RHEL 7 not yet supported | # RHEL 7 not yet supported | ||||
%if 0%{?rhel} > 6 | %if 0%{?rhel} > 6 | ||||
%define build6x 0 | %global build6x 0 | ||||
%else | %else | ||||
%define build6x 1 | %global build6x 1 | ||||
%endif | %endif | ||||
%if 0%{?fedora} >= 26 | %if 0%{?fedora} >= 26 | ||||
%define compat_openssl 1 | %global compat_openssl 1 | ||||
%else | %else | ||||
%define compat_openssl 0 | %global compat_openssl 0 | ||||
%endif | %endif | ||||
# Do we want kerberos5 support (1=yes 0=no) | # Do we want kerberos5 support (1=yes 0=no) | ||||
%define kerberos5 1 | %global kerberos5 1 | ||||
# Reserve options to override askpass settings with: | # Reserve options to override askpass settings with: | ||||
# rpm -ba|--rebuild --define 'skip_xxx 1' | # rpm -ba|--rebuild --define 'skip_xxx 1' | ||||
%{?skip_x11_askpass:%define no_x11_askpass 1} | %{?skip_x11_askpass:%global no_x11_askpass 1} | ||||
%{?skip_gnome_askpass:%define no_gnome_askpass 1} | %{?skip_gnome_askpass:%global no_gnome_askpass 1} | ||||
# Add option to build without GTK2 for older platforms with only GTK+. | # Add option to build without GTK2 for older platforms with only GTK+. | ||||
# RedHat <= 7.2 and Red Hat Advanced Server 2.1 are examples. | # RedHat <= 7.2 and Red Hat Advanced Server 2.1 are examples. | ||||
# rpm -ba|--rebuild --define 'no_gtk2 1' | # rpm -ba|--rebuild --define 'no_gtk2 1' | ||||
%{?no_gtk2:%define gtk2 0} | %{?no_gtk2:%global gtk2 0} | ||||
# Is this a build for RHL 6.x or earlier? | # Is this a build for RHL 6.x or earlier? | ||||
%{?build_6x:%define build6x 1} | %{?build_6x:%global build6x 1} | ||||
# If this is RHL 6.x, the default configuration has sysconfdir in /usr/etc. | # If this is RHL 6.x, the default configuration has sysconfdir in /usr/etc. | ||||
%if %{build6x} | %if %{build6x} | ||||
%define _sysconfdir /etc | %global _sysconfdir /etc | ||||
%endif | %endif | ||||
# Options for static OpenSSL link: | # Options for static OpenSSL link: | ||||
# rpm -ba|--rebuild --define "static_openssl 1" | # rpm -ba|--rebuild --define "static_openssl 1" | ||||
%{?static_openssl:%define static_libcrypto 1} | %{?static_openssl:%global static_libcrypto 1} | ||||
# Options for Smartcard support: (needs libsectok and openssl-engine) | # Options for Smartcard support: (needs libsectok and openssl-engine) | ||||
# rpm -ba|--rebuild --define "smartcard 1" | # rpm -ba|--rebuild --define "smartcard 1" | ||||
%{?smartcard:%define scard 1} | %{?smartcard:%global scard 1} | ||||
# Is this a build for the rescue CD (without PAM, with MD5)? (1=yes 0=no) | # Is this a build for the rescue CD (without PAM, with MD5)? (1=yes 0=no) | ||||
%define rescue 0 | %global rescue 0 | ||||
%{?build_rescue:%define rescue 1} | %{?build_rescue:%global rescue 1} | ||||
# Turn off some stuff for resuce builds | # Turn off some stuff for resuce builds | ||||
%if %{rescue} | %if %{rescue} | ||||
%define kerberos5 0 | %global kerberos5 0 | ||||
%endif | %endif | ||||
Summary: The OpenSSH implementation of SSH protocol version 2. | Summary: The OpenSSH implementation of SSH protocol version 2. | ||||
Name: openssh | Name: openssh | ||||
Version: %{ver} | Version: %{ver} | ||||
%if %{rescue} | %if %{rescue} | ||||
Release: %{rel}rescue | Release: %{rel}rescue | ||||
%else | %else | ||||
▲ Show 20 Lines • Show All 274 Lines • ▼ Show 20 Lines | |||||
%attr(0755,root,root) %dir %{_sysconfdir}/ssh | %attr(0755,root,root) %dir %{_sysconfdir}/ssh | ||||
%attr(0600,root,root) %config(noreplace) %{_sysconfdir}/ssh/moduli | %attr(0600,root,root) %config(noreplace) %{_sysconfdir}/ssh/moduli | ||||
%if ! %{rescue} | %if ! %{rescue} | ||||
%attr(0755,root,root) %{_bindir}/ssh-keygen | %attr(0755,root,root) %{_bindir}/ssh-keygen | ||||
%attr(0644,root,root) %{_mandir}/man1/ssh-keygen.1* | %attr(0644,root,root) %{_mandir}/man1/ssh-keygen.1* | ||||
%attr(0755,root,root) %dir %{_libexecdir}/openssh | %attr(0755,root,root) %dir %{_libexecdir}/openssh | ||||
%attr(4711,root,root) %{_libexecdir}/openssh/ssh-keysign | %attr(4711,root,root) %{_libexecdir}/openssh/ssh-keysign | ||||
%attr(0755,root,root) %{_libexecdir}/openssh/ssh-pkcs11-helper | %attr(0755,root,root) %{_libexecdir}/openssh/ssh-pkcs11-helper | ||||
%attr(0755,root,root) %{_libexecdir}/openssh/ssh-sk-helper | |||||
%attr(0644,root,root) %{_mandir}/man8/ssh-keysign.8* | %attr(0644,root,root) %{_mandir}/man8/ssh-keysign.8* | ||||
%attr(0644,root,root) %{_mandir}/man8/ssh-pkcs11-helper.8* | %attr(0644,root,root) %{_mandir}/man8/ssh-pkcs11-helper.8* | ||||
%attr(0644,root,root) %{_mandir}/man8/ssh-sk-helper.8* | |||||
%endif | %endif | ||||
%if %{scard} | %if %{scard} | ||||
%attr(0755,root,root) %dir %{_datadir}/openssh | %attr(0755,root,root) %dir %{_datadir}/openssh | ||||
%attr(0644,root,root) %{_datadir}/openssh/Ssh.bin | %attr(0644,root,root) %{_datadir}/openssh/Ssh.bin | ||||
%endif | %endif | ||||
%files clients | %files clients | ||||
%defattr(-,root,root) | %defattr(-,root,root) | ||||
▲ Show 20 Lines • Show All 41 Lines • ▼ Show 20 Lines | |||||
%if ! %{no_gnome_askpass} | %if ! %{no_gnome_askpass} | ||||
%files askpass-gnome | %files askpass-gnome | ||||
%defattr(-,root,root) | %defattr(-,root,root) | ||||
%attr(0755,root,root) %config %{_sysconfdir}/profile.d/gnome-ssh-askpass.* | %attr(0755,root,root) %config %{_sysconfdir}/profile.d/gnome-ssh-askpass.* | ||||
%attr(0755,root,root) %{_libexecdir}/openssh/gnome-ssh-askpass | %attr(0755,root,root) %{_libexecdir}/openssh/gnome-ssh-askpass | ||||
%endif | %endif | ||||
%changelog | %changelog | ||||
* Mon Jul 20 2020 Damien Miller <djm@mindrto.org> | |||||
- Add ssh-sk-helper and corresponding manual page. | |||||
* Sat Feb 10 2018 Darren Tucker <dtucker@dtucker.net> | * Sat Feb 10 2018 Darren Tucker <dtucker@dtucker.net> | ||||
- Update openssl-devel dependency to match current requirements. | - Update openssl-devel dependency to match current requirements. | ||||
- Handle Fedora >=6 openssl 1.0 compat libs. | - Handle Fedora >=6 openssl 1.0 compat libs. | ||||
- Remove SSH1 from description. | - Remove SSH1 from description. | ||||
- Don't strip binaries at build time so that debuginfo package can be | - Don't strip binaries at build time so that debuginfo package can be | ||||
created. | created. | ||||
* Sun Nov 16 2014 Nico Kadel-Garcia <nakdel@gmail.com> | * Sun Nov 16 2014 Nico Kadel-Garcia <nakdel@gmail.com> | ||||
▲ Show 20 Lines • Show All 411 Lines • Show Last 20 Lines |