Summary:	A library for integrity verification of FIPS validated modules

Name:		fipscheck

Version:	1.4.1

Release:	11%{?dist}

License:	BSD

Group:		System Environment/Libraries

# This is a Red Hat maintained package which is specific to

# our distribution.

URL:		http://fedorahosted.org/fipscheck/

Source0:	http://fedorahosted.org/releases/f/i/%{name}/%{name}-%{version}.tar.bz2

# Prelink blacklist

Source1:	fipscheck.conf

BuildRoot:	%(mktemp -ud %{_tmppath}/%{name}-%{version}-%{release}-XXXXXX)

BuildRequires: 	openssl-devel >= 0.9.8j

Requires:      %{name}-lib%{?_isa} = %{version}-%{release}

%description

FIPSCheck is a library for integrity verification of FIPS validated

modules. The package also provides helper binaries for creation and

verification of the HMAC-SHA256 checksum files.

%package lib

Summary:	Library files for %{name}

Group:		System Environment/Libraries

Requires:	%{_bindir}/fipscheck

%description lib

This package contains the FIPSCheck library.

%package devel

Summary:	Development files for %{name}

Group:		System Environment/Libraries

Requires:	%{name}-lib%{?_isa} = %{version}-%{release}

%description devel

This package contains development files for %{name}.

%prep

%setup -q

%build

%configure --disable-static

make %{?_smp_mflags}

# Add generation of HMAC checksums of the final stripped binaries

%define __spec_install_post \

    %{?__debug_package:%{__debug_install_post}} \

    %{__arch_install_post} \

    %{__os_install_post} \

    $RPM_BUILD_ROOT%{_bindir}/fipshmac -d $RPM_BUILD_ROOT%{_libdir}/fipscheck $RPM_BUILD_ROOT%{_bindir}/fipscheck $RPM_BUILD_ROOT%{_libdir}/libfipscheck.so.1.2.1 \

    ln -s libfipscheck.so.1.2.1.hmac $RPM_BUILD_ROOT%{_libdir}/fipscheck/libfipscheck.so.1.hmac \

%{nil}

%install

rm -rf $RPM_BUILD_ROOT

make install DESTDIR=$RPM_BUILD_ROOT

find $RPM_BUILD_ROOT -type f -name "*.la" -delete

mkdir -p $RPM_BUILD_ROOT%{_libdir}/fipscheck

%clean

rm -rf $RPM_BUILD_ROOT

%post lib -p /sbin/ldconfig

%postun lib -p /sbin/ldconfig

%files

%defattr(-,root,root,-)

%{!?_licensedir:%global license %%doc}

%license COPYING

%doc ChangeLog README AUTHORS

%{_bindir}/fipscheck

%{_bindir}/fipshmac

%{_libdir}/fipscheck/fipscheck.hmac

%{_mandir}/man8/*

%files lib

%defattr(-,root,root,-)

%{_libdir}/libfipscheck.so.*

%dir %{_libdir}/fipscheck

%{_libdir}/fipscheck/libfipscheck.so.*.hmac

%files devel

%defattr(-,root,root,-)

%{_includedir}/fipscheck.h

%{_libdir}/libfipscheck.so

%{_mandir}/man3/*

%changelog

* Tue Apr 12 2016 Tomáš Mráz <tmraz@redhat.com> - 1.4.1-11

- remove the prelink blacklist as prelink is gone (#1324950)

* Wed Feb 03 2016 Fedora Release Engineering <releng@fedoraproject.org> - 1.4.1-10

- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

* Wed Jun 17 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.1-9

- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

* Sat Feb 21 2015 Till Maas <opensource@till.name> - 1.4.1-8

- Rebuilt for Fedora 23 Change

  https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code

* Sat Aug 16 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.1-7

- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

* Sat Jul 12 2014 Tom Callaway <spot@fedoraproject.org> - 1.4.1-6

- fix license handling

* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.1-5

- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

* Mon Feb 10 2014 Tomáš Mráz <tmraz@redhat.com> - 1.4.1-4

- fix the library path in prelink blacklist

* Tue Sep 24 2013 Tomáš Mráz <tmraz@redhat.com> - 1.4.1-3

- add versioned dependency to -lib on base package (#1010349)

* Fri Sep 20 2013 Tomáš Mráz <tmraz@redhat.com> - 1.4.1-2

- add prelink blacklist

* Tue Sep 10 2013 Tomáš Mráz <tmraz@redhat.com> - 1.4.1-1

- fix inverted condition in FIPSCHECK_verify_ex()

* Fri Sep  6 2013 Tomáš Mráz <tmraz@redhat.com> - 1.4.0-1

- added new API calls to support setting hmac suffix

* Mon Apr 16 2012 Tomas Mraz <tmraz@redhat.com> - 1.3.1-1

- manual pages added by Paul Wouters

* Tue Sep  7 2010 Tomas Mraz <tmraz@redhat.com> - 1.3.0-1

- look up the hmac files in the _libdir/fipscheck first

* Tue May 26 2009 Tomas Mraz <tmraz@redhat.com> - 1.2.0-1

- add lib subpackage to avoid multilib on the base package

- add ability to compute hmacs on multiple files at once

- improved debugging with FIPSCHECK_DEBUG

* Thu Mar 19 2009 Tomas Mraz <tmraz@redhat.com> - 1.1.1-1

- move binaries and libraries to /usr

* Wed Mar 18 2009 Tomas Mraz <tmraz@redhat.com> - 1.1.0-1

- hmac check itself as required by FIPS

* Mon Feb  9 2009 Tomas Mraz <tmraz@redhat.com> - 1.0.4-1

- add some docs to the README, require current openssl in Fedora

* Fri Oct 24 2008 Tomas Mraz <tmraz@redhat.com> - 1.0.3-1

- use OpenSSL in FIPS mode to do the HMAC checksum instead of NSS

* Tue Sep  9 2008 Tomas Mraz <tmraz@redhat.com> - 1.0.2-1

- fix test for prelink

* Mon Sep  8 2008 Tomas Mraz <tmraz@redhat.com> - 1.0.1-1

- put binaries in /bin and libraries in /lib as fipscheck

  will be used by modules in /lib

* Mon Sep  8 2008 Tomas Mraz <tmraz@redhat.com> - 1.0.0-2

- minor fixes for package review

* Wed Sep  3 2008 Tomas Mraz <tmraz@redhat.com> - 1.0.0-1

- Initial spec file