URL: https://github.com/freeipa/freeipa/pull/6074 Author: fcami Title: #6074: freeipa.spec: depend on bind-pkcs11-utils Action: opened
PR body: """ The OpenDNSSec integration code requires: /usr/sbin/dnssec-keyfromlabel-pkcs11 which is provided by bind-pkcs11-utils. Currently, bind-pkcs11-utils is only installed for RHEL<9. With this change, FreeIPA depends on bind-pkcs11-utils on all Fedora and RHEL versions. Fixes: https://pagure.io/freeipa/issue/9026 Signed-off-by: François Cami <fc...@redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/6074/head:pr6074 git checkout pr6074
From bdc9746c48addd3126a675e05f0e56b43d5051f3 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fran=C3=A7ois=20Cami?= <fc...@redhat.com> Date: Thu, 4 Nov 2021 12:01:38 +0100 Subject: [PATCH] freeipa.spec: depend on bind-pkcs11-utils MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The OpenDNSSec integration code requires: /usr/sbin/dnssec-keyfromlabel-pkcs11 which is provided by bind-pkcs11-utils. Currently, bind-pkcs11-utils is only installed for RHEL<9. With this change, FreeIPA depends on bind-pkcs11-utils on all Fedora and RHEL versions. Fixes: https://pagure.io/freeipa/issue/9026 Signed-off-by: François Cami <fc...@redhat.com> --- freeipa.spec.in | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/freeipa.spec.in b/freeipa.spec.in index 952c1ad1894..d4d94a4c273 100755 --- a/freeipa.spec.in +++ b/freeipa.spec.in @@ -124,13 +124,14 @@ # Fedora %endif +# Needed for OpenDNSSec integration +%global with_bind_pkcs11 1 + # BIND employs 'pkcs11' OpenSSL engine instead of native PKCS11 # Fedora 31+ uses OpenSSL engine, as well as Fedora ELN (RHEL9) %if 0%{?fedora} || 0%{?rhel} >= 9 %global openssl_pkcs11_version 0.4.10-6 %global softhsm_version 2.5.0-4 -%else - %global with_bind_pkcs11 1 %endif %if 0%{?rhel} == 8
_______________________________________________ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
