openSUSE Build Service

Overview Repositories Revisions Requests Users Attributes Meta

File gpg2.spec of Package gpg2.30813

#
# spec file for package gpg2
#
# Copyright (c) 2023 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.

# Please submit bugfixes or comments via https://bugs.opensuse.org/
#

Name:           gpg2
Version:        2.0.24
Release:        0
BuildRequires:  automake >= 1.10
BuildRequires:  expect
BuildRequires:  fdupes
BuildRequires:  libadns-devel
BuildRequires:  libassuan-devel >= 2.0.0
BuildRequires:  libbz2-devel
BuildRequires:  libcurl-devel >= 7.10
BuildRequires:  libgcrypt-devel >= 1.4.0
BuildRequires:  libgpg-error-devel >= 1.11
BuildRequires:  libksba-devel >= 1.0.7
BuildRequires:  libusb-devel
BuildRequires:  makeinfo
BuildRequires:  openldap2-devel
BuildRequires:  readline-devel
BuildRequires:  zlib-devel
%if 0%{?suse_version} >= 1120
BuildRequires:  libpth-devel >= 1.3.7
%else
BuildRequires:  pth >= 1.3.7
%endif
URL:            http://www.gnupg.org/aegypten2/
PreReq:         %install_info_prereq
Requires:       dirmngr
Requires:       pinentry
Recommends:     %name-lang = %{version}
Provides:       gnupg = %{version}
Provides:       gpg = 1.4.9
Provides:       newpg
# special feature needed for OBS signd
Provides:       gpg2_signd_support
Obsoletes:      gpg < 1.4.9
Summary:        GnuPG 2
License:        GPL-3.0-or-later
Group:          Productivity/Networking/Security
Source:         ftp://ftp.gnupg.org/gcrypt/gnupg/gnupg-%{version}.tar.bz2
Source2:        ftp://ftp.gnupg.org/gcrypt/gnupg/gnupg-%{version}.tar.bz2.sig
Source3:        https://www.gnupg.org/signature_key.html#/%{name}.keyring
Patch1:         gnupg-2.0.18-tmpdir.diff
Patch2:         gnupg-2.0.4-install_tools.diff
Patch4:         gnupg-2.0.9-langinfo.patch
Patch5:         gnupg-2.0.18-files-are-digests.patch
Patch6:         gnupg-dont-fail-with-seahorse-agent.patch
Patch8:         gnupg-set_umask_before_open_outfile.patch
Patch9:         gnupg-detect_FIPS_mode.patch
# PATCH-FIX-OPENSUSE coolo@suse.de -- automake 1.13 already includes $SHELL
Patch10:        gnupg-2.0.20-automake113.diff
Patch11:        gnupg-add_legacy_FIPS_mode_option.patch
# PATCH-FIX-UPSTREAM bsc#955753,boo#952347 -- fix gpg --recv regression
Patch12:        0001-gpg-Make-screening-of-keyserver-result-work-with-mul.patch
Patch13:        0002-gpg-Add-kbnode_t-for-easier-backporting.patch
Patch14:        0003-gpg-Fix-regression-due-to-the-keyserver-import-filte.patch
Patch15:        0001-Use-inline-functions-to-convert-buffer-data-to-scala.patch
Patch16:        0001-gpg-Prevent-an-invalid-memory-read-using-a-garbled-k.patch
Patch17:        gnupg-init-trustdb.patch
# PATCH-FIX-UPSTREAM boo#1036736 -- Do not install cacert and other root certificates
Patch18:        0001-Do-not-install-cacert-and-other-root-certificates.patch
Patch19:        gnupg-CVE-2018-12020.patch
# PATCH-FIX-OPENSUSE bsc#1124847
Patch20:        gnupg-gpg-agent-ulimit.patch
# FATCH-FIX-UPSTREAM bsc#1141093 CVE-2019-13050 denial of service attacks via big keys
Patch21:        gnupg-CVE-2019-13050_0_of_5.patch
Patch22:        gnupg-CVE-2019-13050_1_of_5.patch
Patch23:        gnupg-CVE-2019-13050_2_of_5.patch
Patch24:        gnupg-CVE-2019-13050_3_of_5.patch
Patch25:        gnupg-CVE-2019-13050_4_of_5.patch
# PATCH-FIX-UPSTREAM boo#1201225, CVE-2022-34903 vulnerable to status injection
Patch26:        gnupg-CVE-2022-34903.patch
# PATCH-FIX-UPSTREAM bsc#1088255 CVE-2018-9234 Unenforced configuration allows for apparently valid certifications actually signed by signing subkeys
Patch27:        gnupg-CVE-2018-9234.patch
BuildRoot:      %{_tmppath}/%{name}-%{version}-build

%description
GnuPG 2 is the successor of "GnuPG" or GPG. It provides: GPGSM,
gpg-agent, and a keybox library.

%lang_package

%prep
%setup  -q -n gnupg-%version
%patch1 -p1
%patch2
%patch4 -p1
%patch5 -p1
%patch6 -p1
%patch8 -p1
%patch9 -p1
%patch10 -p1
%patch11 -p1
%patch12 -p1
%patch13 -p1
%patch14 -p1
%patch15 -p1
%patch16 -p1
%patch17 -p1
%patch18 -p1
%patch19 -p1
%patch20 -p1
%patch21 -p1
%patch22 -p1
%patch23 -p1
%patch24 -p1
%patch25 -p1
%patch26 -p1
%patch27 -p1

%build
autoreconf -fi
# build PIEs (position independent executables) for address space randomisation:
%ifarch s390x %sparc
# s390x needs to use the large PIE model (at least for gpg.c):
PIE="-fPIE"
%else
PIE="-fpie"
%endif
export CFLAGS="%{optflags} ${PIE}"
export LDFLAGS=-pie
%configure \
    --libexecdir=%{_libdir} \
    --docdir=%{_docdir}/%{name} \
    --with-agent-pgm=%{_prefix}/bin/gpg-agent \
    --with-pinentry-pgm=%{_prefix}/bin/pinentry \
    --with-dirmngr-pgm=%{_prefix}/bin/dirmngr \
    --with-scdaemon-pgm=%{_prefix}/bin/scdaemon \
    --enable-ldap \
    --enable-gpgsm=yes \
    --enable-gpg \
    --enable-gpgtar \
    --with-gnu-ld

make %{?_smp_mflags}

%install
%makeinstall
mkdir -p $RPM_BUILD_ROOT/etc/gnupg/
# bnc#391347
install -m 644 doc/examples/gpgconf.conf $RPM_BUILD_ROOT/etc/gnupg
# delete to prevent fdupes from creating cross-partition hardlink
rm -rf $RPM_BUILD_ROOT/usr/share/doc/packages/gpg2/examples/gpgconf.conf
rm $RPM_BUILD_ROOT/usr/share/info/dir
# compat symlinks
ln -sf gpg2 $RPM_BUILD_ROOT/usr/bin/gpg
ln -sf gpgv2 $RPM_BUILD_ROOT/usr/bin/gpgv
ln -sf gpg2.1 $RPM_BUILD_ROOT/usr/share/man/man1/gpg.1
ln -sf gpgv2.1 $RPM_BUILD_ROOT/usr/share/man/man1/gpgv.1
# fix rpmlint invalid-lc-messages-dir:
rm -rf $RPM_BUILD_ROOT/%_datadir/locale/en@{bold,}quot
# additional files to documentation directory
install -m 644 AUTHORS COPYING ChangeLog NEWS THANKS TODO doc/FAQ $RPM_BUILD_ROOT/%{_docdir}/%{name}
# install scdaemon to %%{_bindir} (bnc#863645)
mv %{buildroot}%{_libdir}/scdaemon %{buildroot}%{_bindir}
%find_lang gnupg2
%if 0%{?suse_version} > 1020
%fdupes %buildroot
%endif

%check
%if ! 0%{?qemu_user_space_build}
make check
$RPM_BUILD_ROOT/usr/bin/gpgsplit -v -p pubsplit-                    --uncompress <tests/openpgp/pubring.gpg
$RPM_BUILD_ROOT/usr/bin/gpgsplit -v -p secsplit- --secret-to-public --uncompress <tests/openpgp/secring.gpg
%endif

%post
%install_info --info-dir=%{_infodir} %{_infodir}/gnupg.info.gz

%postun
%install_info_delete --info-dir=%{_infodir} %{_infodir}/gnupg.info.gz

%files lang -f gnupg2.lang

%files
%defattr(-,root,root)
%doc %{_infodir}/gnupg*
%doc %{_mandir}/*/*.gz
%doc %{_docdir}/%{name}
%{_bindir}/*
%{_libdir}/[^d]*
%{_sbindir}/addgnupghome
%{_sbindir}/applygnupgdefaults
%{_datadir}/gnupg
%dir %{_sysconfdir}/gnupg
%config(noreplace) %{_sysconfdir}/gnupg/gpgconf.conf

%changelog

Places

File gpg2.spec of Package gpg2.30813

Places