Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package java-17-openjdk for openSUSE:Factory
checked in at 2023-05-26 20:14:50
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/java-17-openjdk (Old)
and /work/SRC/openSUSE:Factory/.java-17-openjdk.new.1533 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "java-17-openjdk"
Fri May 26 20:14:50 2023 rev:23 rq:1088910 version:17.0.7.0
Changes:
--------
--- /work/SRC/openSUSE:Factory/java-17-openjdk/java-17-openjdk.changes
2023-05-12 20:32:38.424552788 +0200
+++
/work/SRC/openSUSE:Factory/.java-17-openjdk.new.1533/java-17-openjdk.changes
2023-05-26 20:14:52.820050535 +0200
@@ -1,0 +2,6 @@
+Wed May 24 13:47:09 UTC 2023 - Fridrich Strba <fst...@suse.com>
+
+- Bring back our nss.fips.cfg file, since the variable expansion
+ in the upstream file does not work (fixes: bsc#1211679)
+
+-------------------------------------------------------------------
New:
----
nss.fips.cfg.in
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ java-17-openjdk.spec ++++++
--- /var/tmp/diff_new_pack.YZ6rwV/_old 2023-05-26 20:14:53.760056138 +0200
+++ /var/tmp/diff_new_pack.YZ6rwV/_new 2023-05-26 20:14:53.764056162 +0200
@@ -139,6 +139,8 @@
Source11: jconsole.desktop.in
# nss configuration file
Source12: nss.cfg.in
+# nss fips configuration file
+Source13: nss.fips.cfg.in
# Ensure we aren't using the limited crypto policy
Source14: TestCryptoLevel.java
# Ensure ECDSA is working
@@ -452,6 +454,10 @@
# Setup nss.cfg
sed -e "s:@NSS_LIBDIR@:%{NSS_LIBDIR}:g" %{SOURCE12} > nss.cfg
+# Setup nss.fips.cfg
+sed -e "s:@NSS_LIBDIR@:%{NSS_LIBDIR}:g" %{SOURCE13} > nss.fips.cfg
+sed -i -e "s:@NSS_SECMOD@:sql\:/etc/pki/nssdb:g" nss.fips.cfg
+
%build
%ifarch s390x sparc64 alpha ppc64 ppc64le %{aarch64}
@@ -513,6 +519,9 @@
# Install nss.cfg right away as we will be using the JRE above
install -m 644 nss.cfg $JAVA_HOME/conf/security/
+# Install nss.fips.cfg: NSS configuration for global FIPS mode
(crypto-policies)
+install -m 644 nss.fips.cfg $JAVA_HOME/conf/security/
+
# Copy tz.properties
echo "sun.zoneinfo.dir=%{_datadir}/javazi" >> $JAVA_HOME/conf/tz.properties
++++++ nss.fips.cfg.in ++++++
name = NSS-FIPS
nssLibraryDirectory = @NSS_LIBDIR@
nssSecmodDirectory = sql:/etc/pki/nssdb
nssDbMode = readOnly
nssModule = fips
attributes(*,CKO_SECRET_KEY,CKK_GENERIC_SECRET)={ CKA_SIGN=true }
