Hello community,
here is the log from the commit of package openCryptoki for openSUSE:Factory
checked in at 2018-11-20 22:42:30
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/openCryptoki (Old)
and /work/SRC/openSUSE:Factory/.openCryptoki.new.19453 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "openCryptoki"
Tue Nov 20 22:42:30 2018 rev:48 rq:649627 version:3.11.0
Changes:
--------
--- /work/SRC/openSUSE:Factory/openCryptoki/openCryptoki.changes
2018-04-19 15:31:21.626448043 +0200
+++ /work/SRC/openSUSE:Factory/.openCryptoki.new.19453/openCryptoki.changes
2018-11-20 22:42:36.910279040 +0100
@@ -1,0 +2,39 @@
+Fri Nov 16 15:00:52 UTC 2018 - mp...@suse.com
+
+- Upgraded to version 3.11.0 (Fate#325685)
+ * opencryptoki 3.11.0
+ EP11 enhancements
+ A lot of bug fixes
+- Reworked the ocki-3.1-remove-make-install-chgrp.patch to apply
+ properly to 3.11, and renamed it to
+ ocki-3.11-remove-make-install-chgrp.patch
+- Removed obsolete patch ocki-3.5-icsf-coverity-memoryleakfix.patch
+
+-------------------------------------------------------------------
+Thu Nov 15 22:01:51 UTC 2018 - mp...@suse.com
+
+- Upgraded to version 3.10.0 (Fate#325685)
+ * opencryptoki 3.10.0
+ Add support to ECC on ICA token and to common code.
+ Add SHA224 support to SOFT token.
+ Improve pkcsslotd logging.
+ Fix sha512_hmac_sign and rsa_x509_verify for ICA token.
+ Fix tracing of session id.
+ Fix and improve testcases.
+ Fix spec file permission for log directory.
+ Fix build warnings.
+* opencryptoki 3.9.0
+ Fix token reinitialization
+ Fix conditional man pages
+ EP11 enhancements
+ EP11 EC Key import
+ Increase RSA max key length
+ Fix broken links on documentation
+ Define CK_FALSE and CK_TRUE macros
+ Improve build flags
+- Dropped obsolete patch
ocki-3.8.2-Fix-Hardware-Feature-Object-validation-and-tests.patch
+- Made multiple changes to the spec file based on spec-cleaner output.
+- Added an rpmlintrc file to squelch warnings about adding ghost
+ entries for files under /var/log/opencryptoki/
+
+-------------------------------------------------------------------
Old:
----
ocki-3.1-remove-make-install-chgrp.patch
ocki-3.5-icsf-coverity-memoryleakfix.patch
ocki-3.8.2-Fix-Hardware-Feature-Object-validation-and-tests.patch
opencryptoki-3.8.2.tar.gz
New:
----
ocki-3.11-remove-make-install-chgrp.patch
openCryptoki-rpmlintrc
opencryptoki-3.11.0.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ openCryptoki.spec ++++++
--- /var/tmp/diff_new_pack.SkXhr7/_old 2018-11-20 22:42:42.794276851 +0100
+++ /var/tmp/diff_new_pack.SkXhr7/_new 2018-11-20 22:42:42.798276849 +0100
@@ -16,7 +16,7 @@
#
-%define openCryptoki_32bit_arch %arm %ix86 s390 ppc
+%define openCryptoki_32bit_arch %{arm} %{ix86} s390 ppc
# support in the workings for: ppc64
# no support in sight for: ia64
%define openCryptoki_64bit_arch aarch64 s390x ppc64 ppc64le x86_64
@@ -32,47 +32,42 @@
%endif
Name: openCryptoki
+Version: 3.11.0
+Release: 0
+Summary: An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM
Cryptographic Hardware
+License: CPL-1.0
+Group: Productivity/Security
+Url: https://sourceforge.net/projects/opencryptoki/
+Source: %{oc_cvs_tag}-%{version}.tar.gz
+Source1: openCryptoki.pkcsslotd
+Source2: openCryptoki-TFAQ.html
+Source3: openCryptoki-tmp.conf
+Source4: openCryptoki-rpmlintrc
+# Patch 1 is needed because group pkcs11 doesn't exist in the build environment
+# and because we don't want(?) various file and directory permissions to be
0700.
+Patch1: ocki-3.11-remove-make-install-chgrp.patch
BuildRequires: bison
+BuildRequires: dos2unix
BuildRequires: flex
BuildRequires: gcc-c++
-%ifarch s390 s390x
-BuildRequires: libica-devel
-BuildRequires: libica-tools
-%endif
BuildRequires: libtool
BuildRequires: openldap2-devel
BuildRequires: openssl-devel >= 1.0
+BuildRequires: pkgconfig
BuildRequires: pwdutils
BuildRequires: trousers-devel
-%if %{uses_systemd}
BuildRequires: pkgconfig(systemd)
+PreReq: %{_bindir}/id
+PreReq: %{_sbindir}/groupadd
+PreReq: %{_sbindir}/usermod
+PreReq: /bin/sed
+# IBM maintains openCryptoki on these architectures:
+ExclusiveArch: %{openCryptoki_32bit_arch} %{openCryptoki_64bit_arch}
%{?systemd_requires}
-%else
-BuildRequires: %insserv_prereq
+%ifarch s390 s390x
+BuildRequires: libica-devel
+BuildRequires: libica-tools
%endif
-BuildRequires: dos2unix
-
-Summary: An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM
Cryptographic Hardware
-License: CPL-1.0
-Group: Productivity/Security
-Version: 3.8.2
-Release: 0
-Source: %{oc_cvs_tag}-%{version}.tar.gz
-Source1: openCryptoki.pkcsslotd
-Source2: openCryptoki-TFAQ.html
-Source3: openCryptoki-tmp.conf
-# Patch 1 is needed because group pkcs11 doesn't exist in the build environment
-# and because we don't want(?) various file and directory permissions to be
0700.
-Patch1: ocki-3.1-remove-make-install-chgrp.patch
-Patch2: ocki-3.5-icsf-coverity-memoryleakfix.patch
-Patch3:
ocki-3.8.2-Fix-Hardware-Feature-Object-validation-and-tests.patch
-
-Url: https://sourceforge.net/projects/opencryptoki/
-BuildRoot: %{_tmppath}/%{name}-%{version}-build
-PreReq: /usr/sbin/groupadd /usr/bin/id /usr/sbin/usermod /bin/sed
-# IBM maintains openCryptoki on these architectures:
-ExclusiveArch: %openCryptoki_32bit_arch %openCryptoki_64bit_arch
-#
%description
The PKCS#11 version 2.11 API implemented for the IBM cryptographic
@@ -80,17 +75,16 @@
coprocessor (with the PKCS#11 firmware loaded) and the IBM eServer
Cryptographic Accelerator (FC 4960 on pSeries).
-
%package devel
Summary: An Implementation of PKCS#11 (Cryptoki) v2.01 for IBM
Cryptographic Hardware
Group: Development/Languages/C and C++
Requires: glibc-devel
-%ifarch s390 s390x
-Requires: libica-devel
-%endif
Requires: libopenssl-devel
Requires: openldap2-devel
Requires: trousers-devel
+%ifarch s390 s390x
+Requires: libica-devel
+%endif
%description devel
The PKCS#11 version 2.01 API implemented for the IBM cryptographic
@@ -98,8 +92,7 @@
co-processor (with the PKCS#11 firmware loaded) and the IBM eServer
Cryptographic Accelerator (FC 4960 on pSeries).
-
-%ifarch %openCryptoki_32bit_arch
+%ifarch %{openCryptoki_32bit_arch}
%package 32bit
Summary: An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM
Cryptographic Hardware
@@ -107,7 +100,7 @@
# installation:
Group: Productivity/Security
PreReq: openCryptoki
-ExclusiveArch: %openCryptoki_32bit_arch
+ExclusiveArch: %{openCryptoki_32bit_arch}
%description 32bit
This is a re-packaged binary rpm. For the package source, please look
@@ -118,9 +111,9 @@
coprocessor (with the PKCS#11 firmware loaded) and the IBM eServer
Cryptographic Accelerator (FC 4960 on pSeries).
-
%endif
-%ifarch %openCryptoki_64bit_arch
+
+%ifarch %{openCryptoki_64bit_arch}
%package 64bit
Summary: An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM
Cryptographic Hardware
@@ -128,7 +121,7 @@
# installation:
Group: Productivity/Security
PreReq: openCryptoki
-ExclusiveArch: %openCryptoki_64bit_arch
+ExclusiveArch: %{openCryptoki_64bit_arch}
%description 64bit
This is a re-packaged binary rpm. For the package source, please look
@@ -139,14 +132,11 @@
coprocessor (with the PKCS#11 firmware loaded) and the IBM eServer
Cryptographic Accelerator (FC 4960 on pSeries).
-
%endif
%prep
%setup -q -n %{oc_cvs_tag}-%{version}
%patch1 -p1
-%patch2 -p1
-%patch3 -p1
cp %{SOURCE2} .
@@ -154,46 +144,33 @@
autoreconf --force --install
%configure \
--enable-tpmtok \
-%if %{uses_systemd}
--with-systemd=%{_unitdir}
-%endif
make %{?_smp_mflags}
dos2unix doc/README.ep11_stdll
%install
%make_install
-install -d $RPM_BUILD_ROOT/usr/include
-install -d $RPM_BUILD_ROOT/var/lib/opencryptoki
-install -d $RPM_BUILD_ROOT/etc/init.d
-install -d $RPM_BUILD_ROOT/usr/sbin
-%if %{uses_systemd}
-install -d $RPM_BUILD_ROOT/usr/lib/tmpfiles.d
-install -m 644 %{S:3} $RPM_BUILD_ROOT/usr/lib/tmpfiles.d/opencryptoki.conf
-ln -s /usr/sbin/service $RPM_BUILD_ROOT/usr/sbin/rcpkcsslotd
-%else
-install -m 544 %{S:1} $RPM_BUILD_ROOT/etc/init.d/pkcsslotd
-ln -sfv ../../etc/init.d/pkcsslotd $RPM_BUILD_ROOT/usr/sbin/rcpkcsslotd
-%endif
-rm -rf $RPM_BUILD_ROOT/tmp
+install -d %{buildroot}%{_includedir}
+install -d %{buildroot}%{_localstatedir}/lib/opencryptoki
+install -d %{buildroot}%{_initddir}
+install -d %{buildroot}%{_sbindir}
+install -d %{buildroot}%{_prefix}/lib/tmpfiles.d
+install -m 644 %{SOURCE3}
%{buildroot}%{_prefix}/lib/tmpfiles.d/opencryptoki.conf
+ln -s %{_sbindir}/service %{buildroot}%{_sbindir}/rcpkcsslotd
+rm -rf %{buildroot}/tmp
# Remove all development files
-find $RPM_BUILD_ROOT%{_libdir} -type f -name "*.la" -delete
-rm -f $RPM_BUILD_ROOT%{_libdir}/opencryptoki/methods
+find %{buildroot} -type f -name "*.la" -delete -print
+rm -f %{buildroot}%{_libdir}/opencryptoki/methods
%pre
-%if %{uses_systemd}
%{service_add_pre pkcsslotd.service}
-%endif
# autobuild:/work/cd/lib/misc/group
# openCryptoki pkcs11:x:64:
-/usr/sbin/groupadd -g %pkcs11_group_id -r pkcs11 2>/dev/null || true
-/usr/sbin/usermod -a -G pkcs11 root
+%{_sbindir}/groupadd -g %{pkcs11_group_id} -r pkcs11 2>/dev/null || true
+%{_sbindir}/usermod -a -G pkcs11 root
%preun
-%if %{uses_systemd}
%{service_del_preun pkcsslotd.service}
-%else
-%{stop_on_removal pkcsslotd}
-%endif
%post
# Symlink from /var/lib/opencryptoki to /etc/pkcs11
@@ -205,44 +182,30 @@
fi
fi
/sbin/ldconfig
-%if %{uses_systemd}
%{?tmpfiles_create:%tmpfiles_create %{_tmpfilesdir}/opencryptoki.conf}
%{service_add_post pkcsslotd.service}
-%else
-%{fillup_and_insserv -f pkcsslotd}
-%endif
%postun
if [ -L %{_sysconfdir}/pkcs11 ] ; then
rm %{_sysconfdir}/pkcs11
fi
-%if %{uses_systemd}
%{service_del_postun pkcsslotd.service}
-%else
-%{restart_on_update pkcsslotd}
-%{insserv_cleanup}
-%endif
-%ifarch %openCryptoki_32bit_arch
+%ifarch %{openCryptoki_32bit_arch}
%postun 32bit
if [ -L %{_sysconfdir}/pkcs11 ] ; then
rm %{_sysconfdir}/pkcs11
fi
-%if %{uses_systemd}
%{service_del_postun pkcsslotd.service}
-%else
-%{restart_on_update pkcsslotd}
-%{insserv_cleanup}
-%endif
%post 32bit
# Old library name links
cd %{_libdir}/opencryptoki && ln -sf ./libopencryptoki.so PKCS11_API.so
ln -sf %{_sbindir} %{_libdir}/opencryptoki/methods
rm -rf %{_libdir}/pkcs11/stdll
-test -d /usr/lib/pkcs11 || mkdir -p /usr/lib/pkcs11
-cd /usr/lib/pkcs11
+test -d %{_prefix}/lib/pkcs11 || mkdir -p %{_prefix}/lib/pkcs11
+cd %{_prefix}/lib/pkcs11
ln -sf ../opencryptoki/stdll stdll
cd stdll
[ -f libpkcs11_cca.so ] && ln -sf ./libpkcs11_cca.so PKCS11_CCA.so || true
@@ -251,12 +214,13 @@
[ -f libpkcs11_sw.so ] && ln -sf ./libpkcs11_sw.so PKCS11_SW.so || true
/sbin/ldconfig
%endif
-%ifarch %openCryptoki_64bit_arch
+
+%ifarch %{openCryptoki_64bit_arch}
%post 64bit
# Old library name for 64bit libs were under /usr/lib/pkcs11. For migration
purposes only.
-test -d /usr/lib/pkcs11 || mkdir -p /usr/lib/pkcs11
-ln -sf %{_libdir}/opencryptoki/libopencryptoki.so
/usr/lib/pkcs11/PKCS11_API.so64
+test -d %{_prefix}/lib/pkcs11 || mkdir -p %{_prefix}/lib/pkcs11
+ln -sf %{_libdir}/opencryptoki/libopencryptoki.so
%{_prefix}/lib/pkcs11/PKCS11_API.so64
/sbin/ldconfig
%endif
@@ -268,19 +232,13 @@
%dir %{_sysconfdir}/opencryptoki
%config %{_sysconfdir}/opencryptoki/opencryptoki.conf
%ifarch s390 s390x
+%{_sbindir}/pkcsep11_session
%config %{_sysconfdir}/opencryptoki/ep11tok.conf
+%config %{_sysconfdir}/opencryptoki/ep11cpfilter.conf
%{_sbindir}/pkcsep11_migrate
%endif
-%if %{uses_systemd}
%{_unitdir}/pkcsslotd.service
%{_tmpfilesdir}/opencryptoki.conf
-%else
-%{_sysconfdir}/init.d/pkcsslotd
-%ghost %dir %attr(770,root,pkcs11) %{_localstatedir}/lock/opencryptoki
-%ghost %dir %attr(770,root,pkcs11) %{_localstatedir}/lock/opencryptoki/ccatok
-%ghost %dir %attr(770,root,pkcs11) %{_localstatedir}/lock/opencryptoki/swtok
-%ghost %dir %attr(770,root,pkcs11) %{_localstatedir}/lock/opencryptoki/tpm
-%endif
%{_sbindir}/rcpkcsslotd
# utilities
%{_sbindir}/pkcsslotd
@@ -312,7 +270,7 @@
%dir %{_libdir}/opencryptoki/stdll
%{_includedir}/opencryptoki
-%ifarch %openCryptoki_32bit_arch
+%ifarch %{openCryptoki_32bit_arch}
%files 32bit
%defattr(-,root,root)
# these don't conflict because they only exist as 64bit binaries if
@@ -342,7 +300,7 @@
%{_sysconfdir}/ld.so.conf.d/*
%endif
-%ifarch %openCryptoki_64bit_arch
+%ifarch %{openCryptoki_64bit_arch}
%files 64bit
%defattr(-,root,root)
%dir %{_libdir}/opencryptoki
++++++ ocki-3.1-remove-make-install-chgrp.patch ->
ocki-3.11-remove-make-install-chgrp.patch ++++++
---
/work/SRC/openSUSE:Factory/openCryptoki/ocki-3.1-remove-make-install-chgrp.patch
2016-04-28 16:57:22.000000000 +0200
+++
/work/SRC/openSUSE:Factory/.openCryptoki.new.19453/ocki-3.11-remove-make-install-chgrp.patch
2018-11-20 22:42:35.658279506 +0100
@@ -1,16 +1,8 @@
---- opencryptoki/usr/Makefile.am
-+++ opencryptoki/usr/Makefile.am
-@@ -6,5 +6,4 @@
-
- install-data-hook:
- $(MKDIR_P) $(DESTDIR)$(lockdir) $(DESTDIR)$(logdir)
-- $(CHGRP) pkcs11 $(DESTDIR)$(lockdir) $(DESTDIR)$(logdir)
- $(CHMOD) 0770 $(DESTDIR)$(lockdir) $(DESTDIR)$(logdir)
---- opencryptoki/usr/lib/pkcs11/cca_stdll/Makefile.am
-+++ opencryptoki/usr/lib/pkcs11/cca_stdll/Makefile.am
-@@ -66,12 +66,9 @@
- cd $(DESTDIR)/$(libdir)/opencryptoki/stdll && \
- ln -sf libpkcs11_cca.so PKCS11_CCA.so
+--- opencryptoki-3.11.0/Makefile.am 2018-11-16 09:53:03.000000000 -0500
++++ opencryptoki-3.11.0/Makefile.am 2018-11-16 10:28:35.114837306 -0500
+@@ -51,24 +51,18 @@
+ cd $(DESTDIR)$(libdir)/opencryptoki/stdll && \
+ ln -fs libpkcs11_cca.so PKCS11_CCA.so
$(MKDIR_P) $(DESTDIR)$(localstatedir)/lib/opencryptoki/ccatok/TOK_OBJ
- $(CHGRP) pkcs11
$(DESTDIR)$(localstatedir)/lib/opencryptoki/ccatok/TOK_OBJ
- $(CHGRP) pkcs11 $(DESTDIR)$(localstatedir)/lib/opencryptoki/ccatok
@@ -19,13 +11,10 @@
$(MKDIR_P) $(DESTDIR)$(lockdir)/ccatok
- $(CHGRP) pkcs11 $(DESTDIR)$(lockdir)/ccatok
$(CHMOD) 0770 $(DESTDIR)$(lockdir)/ccatok
-
- uninstall-hook:
---- opencryptoki/usr/lib/pkcs11/ep11_stdll/Makefile.am
-+++ opencryptoki/usr/lib/pkcs11/ep11_stdll/Makefile.am
-@@ -49,12 +49,9 @@
+ endif
+ if ENABLE_EP11TOK
cd $(DESTDIR)$(libdir)/opencryptoki/stdll && \
- ln -sf libpkcs11_ep11.so PKCS11_EP11.so
+ ln -fs libpkcs11_ep11.so PKCS11_EP11.so
$(MKDIR_P) $(DESTDIR)$(localstatedir)/lib/opencryptoki/ep11tok/TOK_OBJ
- $(CHGRP) pkcs11
$(DESTDIR)$(localstatedir)/lib/opencryptoki/ep11tok/TOK_OBJ
- $(CHGRP) pkcs11 $(DESTDIR)$(localstatedir)/lib/opencryptoki/ep11tok
@@ -34,13 +23,11 @@
$(MKDIR_P) $(DESTDIR)$(lockdir)/ep11tok
- $(CHGRP) pkcs11 $(DESTDIR)$(lockdir)/ep11tok
$(CHMOD) 0770 $(DESTDIR)$(lockdir)/ep11tok
-
- uninstall-hook:
---- opencryptoki/usr/lib/pkcs11/ica_s390_stdll/Makefile.am
-+++ opencryptoki/usr/lib/pkcs11/ica_s390_stdll/Makefile.am
-@@ -64,12 +64,9 @@
+ test -f $(DESTDIR)$(sysconfdir)/opencryptoki || $(MKDIR_P)
$(DESTDIR)$(sysconfdir)/opencryptoki || true
+ test -f $(DESTDIR)$(sysconfdir)/opencryptoki/ep11tok.conf || $(INSTALL)
-m 644 $(srcdir)/usr/lib/ep11_stdll/ep11tok.conf
$(DESTDIR)$(sysconfdir)/opencryptoki/ep11tok.conf || true
+@@ -78,24 +72,18 @@
cd $(DESTDIR)$(libdir)/opencryptoki/stdll && \
- ln -sf libpkcs11_ica.so PKCS11_ICA.so
+ ln -fs libpkcs11_ica.so PKCS11_ICA.so
$(MKDIR_P) $(DESTDIR)$(localstatedir)/lib/opencryptoki/lite/TOK_OBJ
- $(CHGRP) pkcs11 $(DESTDIR)$(localstatedir)/lib/opencryptoki/lite/TOK_OBJ
- $(CHGRP) pkcs11 $(DESTDIR)$(localstatedir)/lib/opencryptoki/lite
@@ -49,26 +36,10 @@
$(MKDIR_P) $(DESTDIR)$(lockdir)/lite
- $(CHGRP) pkcs11 $(DESTDIR)$(lockdir)/lite
$(CHMOD) 0770 $(DESTDIR)$(lockdir)/lite
-
- uninstall-hook:
---- opencryptoki/usr/lib/pkcs11/icsf_stdll/Makefile.am
-+++ opencryptoki/usr/lib/pkcs11/icsf_stdll/Makefile.am
-@@ -79,10 +79,8 @@
- cd $(DESTDIR)$(libdir)/opencryptoki/stdll && \
- ln -sf libpkcs11_icsf.so PKCS11_ICSF.so
- $(MKDIR_P) $(DESTDIR)$(localstatedir)/lib/opencryptoki/icsf
-- $(CHGRP) pkcs11 $(DESTDIR)$(localstatedir)/lib/opencryptoki/icsf
- $(CHMOD) 0770 $(DESTDIR)$(localstatedir)/lib/opencryptoki/icsf
- $(MKDIR_P) $(DESTDIR)$(lockdir)/icsf
-- $(CHGRP) pkcs11 $(DESTDIR)$(lockdir)/icsf
- $(CHMOD) 0770 $(DESTDIR)$(lockdir)/icsf
-
- uninstall-hook:
---- opencryptoki/usr/lib/pkcs11/soft_stdll/Makefile.am
-+++ opencryptoki/usr/lib/pkcs11/soft_stdll/Makefile.am
-@@ -56,12 +56,9 @@
+ endif
+ if ENABLE_SWTOK
cd $(DESTDIR)$(libdir)/opencryptoki/stdll && \
- ln -sf libpkcs11_sw.so PKCS11_SW.so
+ ln -fs libpkcs11_sw.so PKCS11_SW.so
$(MKDIR_P) $(DESTDIR)$(localstatedir)/lib/opencryptoki/swtok/TOK_OBJ
- $(CHGRP) pkcs11
$(DESTDIR)$(localstatedir)/lib/opencryptoki/swtok/TOK_OBJ
- $(CHGRP) pkcs11 $(DESTDIR)$(localstatedir)/lib/opencryptoki/swtok
@@ -77,18 +48,35 @@
$(MKDIR_P) $(DESTDIR)$(lockdir)/swtok
- $(CHGRP) pkcs11 $(DESTDIR)$(lockdir)/swtok
$(CHMOD) 0770 $(DESTDIR)$(lockdir)/swtok
-
- uninstall-hook:
---- opencryptoki/usr/lib/pkcs11/tpm_stdll/Makefile.am
-+++ opencryptoki/usr/lib/pkcs11/tpm_stdll/Makefile.am
-@@ -71,10 +71,8 @@
+ endif
+ if ENABLE_TPMTOK
+@@ -103,10 +91,8 @@
cd $(DESTDIR)$(libdir)/opencryptoki/stdll && \
- ln -sf libpkcs11_tpm.so PKCS11_TPM.so
+ ln -fs libpkcs11_tpm.so PKCS11_TPM.so
$(MKDIR_P) $(DESTDIR)$(localstatedir)/lib/opencryptoki/tpm
- $(CHGRP) pkcs11 $(DESTDIR)$(localstatedir)/lib/opencryptoki/tpm
$(CHMOD) 0770 $(DESTDIR)$(localstatedir)/lib/opencryptoki/tpm
$(MKDIR_P) $(DESTDIR)$(lockdir)/tpm
-- $(CHGRP) pkcs11 $(DESTDIR)$(lockdir)/tpm
+- $(CHGRP) pkcs11 $(DESTDIR)$(lockdir)/tpm
$(CHMOD) 0770 $(DESTDIR)$(lockdir)/tpm
+ endif
+ if ENABLE_ICSFTOK
+@@ -114,10 +100,8 @@
+ cd $(DESTDIR)$(libdir)/opencryptoki/stdll && \
+ ln -fs libpkcs11_icsf.so PKCS11_ICSF.so
+ $(MKDIR_P) $(DESTDIR)$(localstatedir)/lib/opencryptoki/icsf
+- $(CHGRP) pkcs11 $(DESTDIR)$(localstatedir)/lib/opencryptoki/icsf
+ $(CHMOD) 0770 $(DESTDIR)$(localstatedir)/lib/opencryptoki/icsf
+ $(MKDIR_P) $(DESTDIR)$(lockdir)/icsf
+- $(CHGRP) pkcs11 $(DESTDIR)$(lockdir)/icsf
+ $(CHMOD) 0770 $(DESTDIR)$(lockdir)/icsf
+ endif
+ if ENABLE_DAEMON
+@@ -139,7 +123,6 @@
+ @echo "Remember you must run ldconfig before using the above settings"
+ @echo "--------------------------------------------------------------"
+ $(MKDIR_P) $(DESTDIR)$(lockdir) $(DESTDIR)$(logdir)
+- $(CHGRP) pkcs11 $(DESTDIR)$(lockdir) $(DESTDIR)$(logdir)
+ $(CHMOD) 0770 $(DESTDIR)$(lockdir) $(DESTDIR)$(logdir)
+
- uninstall-hook:
++++++ openCryptoki-rpmlintrc ++++++
addFilter("openCryptoki.* tmpfile-not-in-filelist /var/lock/opencryptoki/")
++++++ opencryptoki-3.8.2.tar.gz -> opencryptoki-3.11.0.tar.gz ++++++
++++ 308483 lines of diff (skipped)
