openSUSE Build Service

Overview Repositories Revisions Requests Users Attributes Meta

File certbot.spec of Package certbot (Revision ae747a08f7169877b7fe7839f11930dd)

Currently displaying revision ae747a08f7169877b7fe7839f11930dd , Show latest

#
# spec file for package certbot
#
# Copyright (c) 2021 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.

# Please submit bugfixes or comments via https://bugs.opensuse.org/
#

%{?!python_module:%define python_module() python-%{**} python3-%{**}}
%define skip_python2 1
Name:           certbot
Version:        1.23.0
Release:        0
Summary:        Let's Encrypt client
License:        Apache-2.0
Group:          Productivity/Security
URL:            https://certbot.eff.org/
Source0:        https://github.com/certbot/certbot/archive/v%{version}/%{name}-%{version}.tar.gz
Source1:        %{name}.cron
Source90:       README.SUSE
Source99:       %{name}.rpmlintrc
Patch0:         %{name}-cli.ini.patch
Patch1:         %{name}-fix_constants.patch
# OPENSUSE: Fix error for docu and man build. Think error in repoze.sphinx.autointerface package.
Patch2:         %{name}-repoze.sphinx.autointerface.patch

BuildRequires:  pkgconfig(python3) >= 3.6
BuildRequires:  %{python_module setuptools >= 39.0.1}

# SECTION install_requires
BuildRequires:  %{python_module acme >= %{version}}
BuildRequires:  %{python_module configargparse >= 0.9.3}
BuildRequires:  %{python_module cryptography >= 2.1.4}
BuildRequires:  %{python_module distro >= 1.0.1}
BuildRequires:  %{python_module josepy >= 1.9.0}
BuildRequires:  %{python_module parsedatetime >= 2.4}
BuildRequires:  %{python_module pyRFC3339}
BuildRequires:  %{python_module pytz >= 2021.1}
BuildRequires:  %{python_module zope.component}
BuildRequires:  %{python_module zope.interface}
# certbot-apache
BuildRequires:  %{python_module augeas}
# certbot-nginx
BuildRequires:  %{python_module pyOpenSSL >= 17.3.0}
BuildRequires:  %{python_module pyparsing >= 2.2.0}
# certbot-ci
BuildRequires:  %{python_module coverage}
#BuildRequires:  %%{python_module docker-compose}   - really needed?
BuildRequires:  %{python_module dateutil}
#BuildRequires:  %%{python_module pyyaml}
BuildRequires:  %{python_module requests >= 2.23.0}
# certbot-dns-cloudflare
#BuildRequires:  %%{python_module cloudflare}
BuildRequires:  %{python_module packaging}
# certbot-dns-lexicon
#BuildRequires:  %%{python_module dns-lexicon >= 3.1.0}
# certbot-dns-lexicon
#BuildRequires:  %%{python_module python-digitalocean >= 1.15}
# certbot-dns-google
#BuildRequires:  %%{python_module google-api-python-client >= 1.5.5}
#BuildRequires:  %%{python_module oauth2client >= 4.0}
#BuildRequires:  %%{python_module httplib2}
# certbot-dns-rfc2136
BuildRequires:  %{python_module dnspython >= 1.15.0}
# certbot-dns-route53
#BuildRequires:  %%{python_module boto3}
# /SECTION

# SECTION certbot dev_extras
#BuildRequires:  %%{python_module azure-devops}
#BuildRequires:  %%{python_module ipdb}
#BuildRequires:  %%{python_module PyGithub}
#BuildRequires:  %%{python_module pip}
#BuildRequires:  %%{python_module poetry >= 1.2.0a1}
BuildRequires:  %{python_module tox}
BuildRequires:  %{python_module twine}
BuildRequires:  %{python_module wheel}
# certbot-apache
#BuildRequires:  %%{python_module apacheconfig >= 0.3.2}   - not in suse repo
# /SECTION

# SECTION certbot docs_extras
BuildRequires:  %{python_module repoze.sphinx.autointerface >= 0.8}
BuildRequires:  %{python_module Sphinx >= 1.2}
BuildRequires:  %{python_module sphinx_rtd_theme >= 0.5.2}
#BuildRequires:  %%{python_module sphinxcontrib}
BuildRequires:  %{python_module sphinxcontrib-applehelp}
BuildRequires:  %{python_module sphinxcontrib-devhelp}
BuildRequires:  %{python_module sphinxcontrib-htmlhelp}
BuildRequires:  %{python_module sphinxcontrib-qthelp}
BuildRequires:  %{python_module sphinxcontrib-jsmath}
BuildRequires:  %{python_module sphinxcontrib-serializinghtml}
# /SECTION

# SECTION certbot test_extras
#BuildRequires:  %%{python_module mypy}
BuildRequires:  %{python_module pylint}
BuildRequires:  %{python_module pytest}
#BuildRequires:  %%{python_module pytest-cov}
#BuildRequires:  %%{python_module pytest-xdist}
#BuildRequires:  %%{python_module typing-extension}
# /SECTION

BuildRequires:  %{python_module Werkzeug}
BuildRequires:  %{python_module astroid >= 1.3.5}
BuildRequires:  %{python_module attrs}
BuildRequires:  %{python_module autodoc}
BuildRequires:  %{python_module certifi >= 2020.4.5.1}
#Upstrem use: BuildRequires:  %%{python_module cffi >= 1.14.5}
BuildRequires:  %{python_module cffi}
BuildRequires:  %{python_module configobj >= 5.0.6}
BuildRequires:  %{python_module future}
# upstream use idna >= 2.10
BuildRequires:  %{python_module idna >= 2.6}
BuildRequires:  %{python_module jsonschema}
BuildRequires:  %{python_module nosexcover}
BuildRequires:  %{python_module nose}
BuildRequires:  %{python_module requests-toolbelt >= 0.9.1}
BuildRequires:  %{python_module six >= 1.16.0}
# upstream use urllib3 >= 1.26.6
BuildRequires:  %{python_module urllib3}
# upstream use >= 4.5
BuildRequires:  %{python_module zope.event >= 4.4}
BuildRequires:  %{python_module zope.hookable >= 5.0.1}

# install_requires apache
BuildRequires:  augeas-lenses
BuildRequires:  cron
###BuildRequires:  dialog
BuildRequires:  dos2unix
BuildRequires:  fdupes
BuildRequires:  pkgconfig
BuildRequires:  python-rpm-macros
BuildRequires:  swig
BuildRequires:  unzip
BuildRequires:  pkgconfig(libffi)
BuildRequires:  pkgconfig(openssl)

# requires
Requires:       ca-certificates
Requires:       certbot-common = %{version}
Requires:       cron
Requires:       python-acme = %{version}
Requires:       python-certifi >= 2020.4.5.1
Requires:       python-cffi >= 1.13.2
Requires:       python-configargparse >= 1.0
Requires:       python-configobj >= 5.0.6
Requires:       python-cryptography >= 2.8
Requires:       python-distro >= 1.5.0
###Requires:       python-dialog >= 3.2.2rc1
Requires:       python-josepy >= 1.9.0
# no more need since 1.13.0: Requires:       python-mock >= 1.3.0
Requires:       python-parsedatetime >= 2.5
Requires:       python-psutil >= 2.2.1
Requires:       python-pyOpenSSL >= 17.5.0
Requires:       python-pyRFC3339 >= 1.1
Requires:       python-pytz >= 2021.1
Requires:       python-requests >= 2.23.0
Requires:       python-requests-toolbelt >= 0.9.1
Requires:       python-setuptools >= 1.0
# no more need since 1.13.0: Requires:       python-six >= 1.15.0
# Upstream use urllib3 >= 1.26.6
Requires:       python-urllib3
Requires:       python-zope.component >= 4.6.1
Requires:       python-zope.deferredimport >= 4.3.1
Requires:       python-zope.deprecation >= 4.4.0
Requires:       python-zope.event >= 4.4
Requires:       python-zope.hookable >= 5.0.1
Requires:       python-zope.interface >= 5.1.0
Requires:       python-zope.proxy >= 4.3.5
#Requires:  python-pyparser >= 2.20
Requires(post): update-alternatives
Requires(postun): update-alternatives
Obsoletes:      letsencrypt < %{version}
Provides:       letsencrypt = %{version}
Provides:       certbot = %{version}
Obsoletes:      certbot < %{version}
Provides:       python-certbot = %{version}
Obsoletes:      python-certbot < %{version}
BuildArch:      noarch
%python_subpackages

%description
Certbot (previously, the Let's Encrypt client) is a client that
fetches and deploys SSL/TLS certificates for webservers.
Certbot was developed by EFF and others as a client for Let's Encrypt
and was previously known as “the official Let's Encrypt client” or
“the Let's Encrypt Python client”. Certbot will also work with any
other CAs that support the ACME protocol.

Certbot can automatically configure a webserver to start serving
over HTTPS immediately. For Apache, it can also optionally automate
security tasks such as tuning ciphersuites and enabling important
security features such as HTTP-to-HTTPS redirects, OCSP stapling,
HSTS, and upgrade-insecure-requests.

%package -n %{name}-doc
Summary:        Documentation for Certbot
Group:          Documentation/Other

%description -n %{name}-doc
EPUB and HTML documentation for Certbot.

%package -n %{name}-common
Summary:        Common for Certbot
Group:          Productivity/Security

%description -n %{name}-common
Common files for Certbot.

%package apache
Summary:        Apache plugin for Certbot
Group:          Development/Libraries/Python
Requires:       %{name} = %{version}
Requires:       apache2 >= 2.4
Requires:       augeas-lenses
Requires:       python-augeas >= 0.5.0
Obsoletes:      python-letsencrypt-apache < %{version}
Provides:       python-letsencrypt-apache = %{version}

%description apache
The Apache plugin for Certbot.

%package nginx
Summary:        Nginx plugin for Certbot
Group:          Development/Libraries/Python
Requires:       %{name} = %{version}
Requires:       nginx
Requires:       python-pyparsing >= 2.4.7
Obsoletes:      python-letsencrypt-nginx < %{version}
Provides:       python-letsencrypt-nginx = %{version}

%description nginx
The Nginx plugin for Certbot.

%package dns-cloudflare
Summary:        Cloudflare Authenticator plugin for Certbot
Group:          Development/Libraries/Python
Requires:       %{name} = %{version}

%description dns-cloudflare
Cloudflare DNS Authenticator plugin for Certbot.

%package dns-cloudxns
Summary:        Cloudxns Authenticator plugin for Certbot
Group:          Development/Libraries/Python
Requires:       %{name} = %{version}
Requires:       python-dns-lexicon >= 2.2.1

%description dns-cloudxns
Cloudxns DNS Authenticator plugin for Certbot.

%package dns-digitalocean
Summary:        Digitalocean Authenticator plugin for Certbot
Group:          Development/Libraries/Python
Requires:       %{name} = %{version}

%description dns-digitalocean
Digitalocean DNS Authenticator plugin for Certbot.

%package dns-dnsimple
Summary:        Dnsimple Authenticator plugin for Certbot
Group:          Development/Libraries/Python
Requires:       %{name} = %{version}
Requires:       python-dns-lexicon >= 2.2.1

%description dns-dnsimple
Dnsimple DNS Authenticator plugin for Certbot.

%package dns-dnsmadeeasy
Summary:        Dnsmadeeasy Authenticator plugin for Certbot
Group:          Development/Libraries/Python
Requires:       %{name} = %{version}
Requires:       python-dns-lexicon >= 2.2.1

%description dns-dnsmadeeasy
Dnsmadeeasy DNS Authenticator plugin for Certbot.

%package dns-gehirn
Summary:        Gehirn Authenticator plugin for Certbot
Group:          Development/Libraries/Python
Requires:       %{name} = %{version}
Requires:       python-dns-lexicon >= 2.1.22

%description dns-gehirn
Gehirn DNS Authenticator plugin for Certbot.

%package dns-google
Summary:        Google Authenticator plugin for Certbot
Group:          Development/Libraries/Python
Requires:       %{name} = %{version}

%description dns-google
Google DNS Authenticator plugin for Certbot.

%package dns-linode
Summary:        Linode Authenticator plugin for Certbot
Group:          Development/Libraries/Python
Requires:       %{name} = %{version}
Requires:       python-dns-lexicon >= 2.2.1

%description dns-linode
linode DNS Authenticator plugin for Certbot.

%package dns-luadns
Summary:        Luadns Authenticator plugin for Certbot
Group:          Development/Libraries/Python
Requires:       %{name} = %{version}
Requires:       python-dns-lexicon >= 2.2.1

%description dns-luadns
Luadns DNS Authenticator plugin for Certbot.

%package dns-nsone
Summary:        Nsone Authenticator plugin for Certbot
Group:          Development/Libraries/Python
Requires:       %{name} = %{version}
Requires:       python-dns-lexicon >= 2.2.1

%description dns-nsone
Nsone DNS Authenticator plugin for Certbot.

%package dns-ovh
Summary:        Ovh Authenticator plugin for Certbot
Group:          Development/Libraries/Python
Requires:       %{name} = %{version}
Requires:       python-dns-lexicon >= 2.7.14

%description dns-ovh
Ovh DNS Authenticator plugin for Certbot.

%package dns-rfc2136
Summary:        RFC 2136 Authenticator plugin for Certbot
Group:          Development/Libraries/Python
Requires:       %{name} = %{version}

%description dns-rfc2136
RFC 2136 DNS Authenticator plugin for Certbot.

%package dns-route53
Summary:        Route53 Authenticator plugin for Certbot
Group:          Development/Libraries/Python
Requires:       %{name} = %{version}

%description dns-route53
Route53 DNS Authenticator plugin for Certbot.

%package dns-sakuracloud
Summary:        Sakuracloud Authenticator plugin for Certbot
Group:          Development/Libraries/Python
Requires:       %{name} = %{version}

%description dns-sakuracloud
Sakuracloud DNS Authenticator plugin for Certbot.

%prep
%setup -q
%patch0 -p1
#%%patch1 -p1
#%%patch2 -p1
install -m644 %{SOURCE90} .
#sed -i 's|PyOpenSSL>=0.15|pyOpenSSL>=0.15|g' setup.py
find -type f -name "setup.py" -exec sed -i 's|PyOpenSSL|pyOpenSSL|g' {} +

#Is this still needed?
# certbot-auto not for packages
#sed -i 's/letsencrypt-auto/letsencrypt/g' letsencrypt/cli.py

# rpmlint
find -type f -name ".gitignore" -delete

%build
echo "Build packages..."
# build packages certbot, certbot-apache, certbot-nginx
for PACKAGE in certbot certbot-apache certbot-nginx certbot-dns-cloudflare certbot-dns-cloudxns certbot-dns-digitalocean certbot-dns-dnsimple certbot-dns-dnsmadeeasy certbot-dns-gehirn certbot-dns-google certbot-dns-linode certbot-dns-luadns certbot-dns-nsone certbot-dns-ovh certbot-dns-rfc2136 certbot-dns-route53 certbot-dns-sakuracloud ; do
pushd $PACKAGE > /dev/null
###old#python setup.py build
%python_build
popd > /dev/null
done
echo "Build docs an man..."
# docs certbot
for PACKAGE in certbot certbot-dns-cloudflare certbot-dns-cloudxns certbot-dns-digitalocean certbot-dns-dnsimple certbot-dns-dnsmadeeasy certbot-dns-gehirn certbot-dns-google certbot-dns-linode certbot-dns-luadns certbot-dns-nsone certbot-dns-ovh certbot-dns-rfc2136 certbot-dns-route53 certbot-dns-sakuracloud ; do
pushd $PACKAGE > /dev/null
%make_build -C docs html PATH=${HOME}/.local/bin:$PATH || true
%make_build -C docs epub PATH=${HOME}/.local/bin:$PATH || true
%make_build -C docs text PATH=${HOME}/.local/bin:$PATH || true
%make_build -C docs man PATH=${HOME}/.local/bin:$PATH || true
rm -rf docs/_build/html/{.buildinfo,_sources}
popd > /dev/null
done

###python setup.py install --user
###make %%{?_smp_mflags} -C docs html PATH=${HOME}/.local/bin:$PATH || true
###make %%{?_smp_mflags} -C docs epub PATH=${HOME}/.local/bin:$PATH || true
###make %%{?_smp_mflags} -C docs text PATH=${HOME}/.local/bin:$PATH || true
###make %%{?_smp_mflags} -C docs man PATH=${HOME}/.local/bin:$PATH || true
###rm -rf docs/_build/html/{.buildinfo,_sources}
# move docs so i can use one doc-package
##mkdir docs/html
##mkdir docs/text
##mv docs/_build/html docs/html/certbot
##mv docs/_build/text docs/text/certbot

# rpmlint
find -type f -name ".buildinfo" -delete
find -type f -name "jquery.js" -exec dos2unix {} +

%install
# install packages certbot, certbot-apache, certbot-nginx
for PACKAGE in certbot certbot-apache certbot-nginx certbot-dns-cloudflare certbot-dns-cloudxns certbot-dns-digitalocean certbot-dns-dnsimple certbot-dns-dnsmadeeasy certbot-dns-gehirn certbot-dns-google certbot-dns-linode certbot-dns-luadns certbot-dns-nsone certbot-dns-ovh certbot-dns-rfc2136 certbot-dns-route53 certbot-dns-sakuracloud ; do
pushd $PACKAGE > /dev/null
###old#python setup.py install -O1 --skip-build --prefix=%%{_prefix} --root=%%{buildroot}
%python_install
popd > /dev/null
done
%python_clone -a %{buildroot}%{_bindir}/certbot
%python_expand %fdupes %{buildroot}%{$python_sitelib}
# config
install -d -m 0755 %{buildroot}%{_sysconfdir}
install -d -m 0755 %{buildroot}%{_sysconfdir}/certbot
install -d -m 0755 %{buildroot}%{_sysconfdir}/letsencrypt
install -d -m 0755 %{buildroot}%{_sysconfdir}/letsencrypt/archive
install -d -m 0755 %{buildroot}%{_sysconfdir}/letsencrypt/keys
install -d -m 0755 %{buildroot}%{_sysconfdir}/letsencrypt/live
# man
install -d -m 0775 %{buildroot}%{_mandir}
install -d -m 0775 %{buildroot}%{_mandir}/man1
install -d -m 0775 %{buildroot}%{_mandir}/man7
###cp -a docs/_build/man/*.1 %%{buildroot}%%{_mandir}/man1/
###cp -a docs/_build/man/*.7 %%{buildroot}%%{_mandir}/man7/
for PACKAGE in certbot certbot-dns-cloudflare certbot-dns-cloudxns certbot-dns-digitalocean certbot-dns-dnsimple certbot-dns-dnsmadeeasy certbot-dns-gehirn certbot-dns-google certbot-dns-linode certbot-dns-luadns certbot-dns-nsone certbot-dns-ovh certbot-dns-rfc2136 certbot-dns-route53 certbot-dns-sakuracloud ; do
pushd $PACKAGE > /dev/null
cp -a docs/_build/man/*.1 %{buildroot}%{_mandir}/man1/ || :
cp -a docs/_build/man/*.7 %{buildroot}%{_mandir}/man7/ || :
popd > /dev/null
done
# log
install -d -m 0775 %{buildroot}%{_localstatedir}/log/%{name}
# cli.ini
install -m 0644 certbot/examples/cli.ini %{buildroot}%{_sysconfdir}/%{name}/cli.ini
install -m 0644 certbot/examples/dev-cli.ini %{buildroot}%{_sysconfdir}/%{name}/dev-cli.ini
# cron
install -d -m 0755 %{buildroot}%{_sysconfdir}/cron.d
install -m 0644 %{SOURCE1} %{buildroot}%{_sysconfdir}/cron.d/%{name}

%pre
# create daemon group, if not existing
if
    getent group letsencrypt >/dev/null
then
    : OK group letsencrypt already present
else
    groupadd -r letsencrypt  2>/dev/null || :
fi

%post
%python_install_alternative certbot

%postun
%python_uninstall_alternative certbot

%check
###python setup.py test
###%%pytest
##%%python3_exec setup.py test
#python -m pytest

%files -n %{name}-common
%license LICENSE.txt
%doc CHANGELOG.md README.rst README.SUSE
%dir %{_sysconfdir}/%{name}
%dir %{_sysconfdir}/letsencrypt
%dir %attr(0700,root,root) %{_sysconfdir}/letsencrypt/keys
# Group letsencrypt is needed to allow access from other programs like apache or matrix-synapse.
# TODO: patch certbot to fix rights also for generated domains
%dir %attr(0750,root,letsencrypt) %{_sysconfdir}/letsencrypt/archive
%dir %attr(0750,root,letsencrypt) %{_sysconfdir}/letsencrypt/live
%config(noreplace) %{_sysconfdir}/%{name}/*cli.ini
%config(noreplace) %{_sysconfdir}/cron.d/%{name}
%{_mandir}/*/certbot*
%dir %{_localstatedir}/log/%{name}

%files -n %{name}-doc
###%%doc docs/_build/epub/Certbot.epub
###%%doc docs/html
###%%doc docs/text
#%%doc certbot/docs/_build/epub/Certbot.epub
%doc certbot-dns-*/docs/_build/epub/*.epub

%files %{python_files}
%{python_sitelib}/certbot
%{python_sitelib}/certbot-*
%python_alternative %{_bindir}/certbot
###%%exclude %%{python_sitelib}/certbot/tests

%files %{python_files apache}
%{python_sitelib}/certbot_apache*
###%%exclude %%{python_sitelib}/certbot_apache/tests

%files %{python_files nginx}
%{python_sitelib}/certbot_nginx*
###%%exclude %%{python_sitelib}/certbot_nginx/tests

%files %{python_files dns-cloudflare}
%{python_sitelib}/certbot_dns_cloudflare*

%files %{python_files dns-cloudxns}
%{python_sitelib}/certbot_dns_cloudxns*

%files %{python_files dns-digitalocean}
%{python_sitelib}/certbot_dns_digitalocean*

%files %{python_files dns-dnsimple}
%{python_sitelib}/certbot_dns_dnsimple*

%files %{python_files dns-dnsmadeeasy}
%{python_sitelib}/certbot_dns_dnsmadeeasy*

%files %{python_files dns-gehirn}
%{python_sitelib}/certbot_dns_gehirn*

%files %{python_files dns-google}
%{python_sitelib}/certbot_dns_google*

%files %{python_files dns-linode}
%{python_sitelib}/certbot_dns_linode*

%files %{python_files dns-luadns}
%{python_sitelib}/certbot_dns_luadns*

%files %{python_files dns-nsone}
%{python_sitelib}/certbot_dns_nsone*

%files %{python_files dns-ovh}
%{python_sitelib}/certbot_dns_ovh*

%files %{python_files dns-rfc2136}
%{python_sitelib}/certbot_dns_rfc2136*

%files %{python_files dns-route53}
%{python_sitelib}/certbot_dns_route53*

%files %{python_files dns-sakuracloud}
%{python_sitelib}/certbot_dns_sakuracloud*

%changelog

Places

File certbot.spec of Package certbot (Revision ae747a08f7169877b7fe7839f11930dd)

Places