[packages/nss.git] / nss.spec

%define	nspr_ver	1:4.10.8
%define	foover	%(echo %{version} | tr . _)
Summary:	NSS - Network Security Services
Summary(pl.UTF-8):	NSS - Network Security Services
Name:		nss
Version:	3.19.2
Release:	1
Epoch:		1
License:	MPL v2.0
Group:		Libraries
Source0:	http://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_%{foover}_RTM/src/%{name}-%{version}.tar.gz
# Source0-md5:	b02ffd1e8e8ef5f8512fa02d8ca9db3d
Source1:	%{name}-mozilla-nss.pc
Source2:	%{name}-config.in
Source3:	http://www.cacert.org/certs/root.der
# Source3-md5:	a61b375e390d9c3654eebd2031461f6b
Source4:	nss-softokn.pc.in
# Upstream: https://bugzilla.mozilla.org/show_bug.cgi?id=1083900
Patch0:		x32.patch
URL:		http://www.mozilla.org/projects/security/pki/nss/
BuildRequires:	nspr-devel >= %{nspr_ver}
BuildRequires:	nss-tools
BuildRequires:	perl-base
BuildRequires:	sqlite3-devel
BuildRequires:	zlib-devel
BuildConflicts:	mozilla < 0.9.6-3
Requires:	%{name}-softokn-freebl = %{epoch}:%{version}-%{release}
Requires:	nspr >= %{nspr_ver}
Obsoletes:	libnss3
BuildRoot:	%{tmpdir}/%{name}-%{version}-root-%(id -u -n)

%define		specflags	-fno-strict-aliasing
# signed -  stripped before signing
%define		_noautostrip	.*%{_libdir}/libfreebl3.so\\|.*%{_libdir}/libsoftokn3.so
%define		_noautochrpath	.*%{_libdir}/libfreebl3.so\\|.*%{_libdir}/libsoftokn3.so

%description
NSS supports cross-platform development of security-enabled server
applications. Applications built with NSS can support PKCS #5,
PKCS #7, PKCS #11, PKCS #12, S/MIME, TLS, SSL v2 and v3, X.509 v3
certificates, and other security standards.

%description -l pl.UTF-8
NSS wspomaga pisanie wieloplatformowych bezpiecznych serwerów.
Aplikacja używająca NSS jest w stanie obsłużyć PKCS #5, PKCS #7,
PKCS #11, PKCS #12, S/MIME, TLS, SSL v2 oraz v3, certyfikaty X.509 v3,
i wiele innych bezpiecznych standardów.

%package tools
Summary:	NSS command line tools and utilities
Summary(pl.UTF-8):	Narzędzia NSS obsługiwane z linii poleceń
Group:		Applications
Requires:	%{name} = %{epoch}:%{version}-%{release}

%description tools
The NSS Toolkit command line tool.

%description tools -l pl.UTF-8
Narzędzia NSS obsługiwane z linii poleceń.

%package devel
Summary:	NSS - header files
Summary(pl.UTF-8):	NSS - pliki nagłówkowe
Group:		Development/Libraries
Requires:	%{name} = %{epoch}:%{version}-%{release}
Requires:	nspr-devel >= %{nspr_ver}
Obsoletes:	libnss3-devel

%description devel
Development part of NSS library.

%description devel -l pl.UTF-8
Część biblioteki NSS przeznaczona dla programistów.

%package static
Summary:	NSS - static library
Summary(pl.UTF-8):	NSS - biblioteka statyczna
Group:		Development/Libraries
Requires:	%{name}-devel = %{epoch}:%{version}-%{release}

%description static
Static NSS Toolkit libraries.

%description static -l pl.UTF-8
Statyczne wersje bibliotek z NSS.

%package softokn-freebl
Summary:	Freebl library for the Network Security Services
Summary(pl.UTF-8):	Biblioteka freebl dla bibliotek NSS
Group:		Libraries

%description softokn-freebl
Freebl cryptographic library for the Network Security Services.

%description softokn-freebl -l pl.UTF-8
Biblioteka kryptograficzna freebl dla bibliotek NSS.

%prep
%setup -q
%patch0 -p1

%if 0%{!?debug:1}
# strip before signing
%{__sed} -i -e '/export ADDON_PATH$/a\    echo STRIP \; %{__strip} --strip-unneeded -R.comment -R.note ${5}' nss/cmd/shlibsign/sign.sh
%endif

%build
# http://wiki.cacert.org/wiki/NSSLib
addbuiltin -n "CAcert Inc." -t "CT,C,C" < %{SOURCE3} >> nss/lib/ckfw/builtins/certdata.txt

%ifarch %{x8664} ppc64 sparc64
export USE_64=1
%endif

# http://pki.fedoraproject.org/wiki/ECC_Capable_NSS
for dir in ecc noecc; do
	install -d $dir
	cp -a nss $dir/nss
done

export BUILD_OPT=1
export MOZILLA_CLIENT=1
export NSDISTMODE=copy
export NSPR_INCLUDE_DIR=/usr/include/nspr
export NSS_USE_SYSTEM_SQLITE=1
export USE_PTHREADS=1
export USE_SYSTEM_ZLIB=1
export ZLIB_LIBS="-lz"
%ifarch x32
export USE_X32=1
%endif

# https://bugzilla.mozilla.org/show_bug.cgi?id=1084623

# Forcing ecc with this hack would produce broken librares (softoken, freebl etc).
# Thus we also build noecc version (which doesn't require hack) and use these
# libs from there.
sed -i -e 's|#error|#warning|g' ecc/nss/lib/freebl/ecl/ecl-curve.h
%{__make} -j1 -C ecc/nss \
	NSS_ECC_MORE_THAN_SUITE_B=1 \
	CC="%{__cc}" \
	OPTIMIZER="%{rpmcflags} %{rpmcppflags}" \

%{__make} -j1 -C noecc/nss \
	CC="%{__cc}" \
	OPTIMIZER="%{rpmcflags} %{rpmcppflags}"

%install
rm -rf $RPM_BUILD_ROOT
install -d $RPM_BUILD_ROOT{%{_bindir},%{_mandir}/man1,%{_includedir}/nss,/%{_lib},%{_libdir},%{_pkgconfigdir}}

cp -p ecc/dist/private/nss/*	$RPM_BUILD_ROOT%{_includedir}/nss
cp -p ecc/dist/public/dbm/*	$RPM_BUILD_ROOT%{_includedir}/nss
cp -p ecc/dist/public/nss/*	$RPM_BUILD_ROOT%{_includedir}/nss
install -p ecc/dist/*/bin/*		$RPM_BUILD_ROOT%{_bindir}
install -p ecc/dist/*/lib/*		$RPM_BUILD_ROOT%{_libdir}

# non-ECC version, we need only libnssdbm3, libsoftokn3, libfreebl3
install -p noecc/dist/*/lib/libnssdbm3.*	$RPM_BUILD_ROOT%{_libdir}
install -p noecc/dist/*/lib/libsoftokn3.*	$RPM_BUILD_ROOT%{_libdir}
install -p noecc/dist/*/lib/libfreebl3.*	$RPM_BUILD_ROOT%{_libdir}

cp -p nss/doc/nroff/*.1		$RPM_BUILD_ROOT%{_mandir}/man1

%{__sed} -e '
	s#libdir=.*#libdir=%{_libdir}#g
	s#includedir=.*#includedir=%{_includedir}#g
	s#VERSION#%{version}#g
' %{SOURCE1} > $RPM_BUILD_ROOT%{_pkgconfigdir}/nss.pc
# compatibility symlink
ln -s nss.pc $RPM_BUILD_ROOT%{_pkgconfigdir}/mozilla-nss.pc

cat %{SOURCE4} | \
sed -e "s,%%libdir%%,%{_libdir},g" \
	-e "s,%%prefix%%,%{_prefix},g" \
	-e "s,%%exec_prefix%%,%{_prefix},g" \
	-e "s,%%includedir%%,%{_includedir}/nss,g" \
	-e "s,%%NSPR_VERSION%%,$(echo %{nspr_ver} | sed -e 's#.*:##g'),g" \
	-e "s,%%NSS_VERSION%%,%{version},g" \
	-e "s,%%SOFTOKEN_VERSION%%,%{version},g" > \
	$RPM_BUILD_ROOT%{_pkgconfigdir}/nss-softokn.pc


NSS_VMAJOR=$(awk '/#define.*NSS_VMAJOR/ {print $3}' nss/lib/nss/nss.h)
NSS_VMINOR=$(awk '/#define.*NSS_VMINOR/ {print $3}' nss/lib/nss/nss.h)
NSS_VPATCH=$(awk '/#define.*NSS_VPATCH/ {print $3}' nss/lib/nss/nss.h)
%{__sed} -e "
	s,@libdir@,%{_libdir},g
	s,@prefix@,%{_prefix},g
	s,@exec_prefix@,%{_prefix},g
	s,@includedir@,%{_includedir}/nss,g
	s,@MOD_MAJOR_VERSION@,$NSS_VMAJOR,g
	s,@MOD_MINOR_VERSION@,$NSS_VMINOR,g
	s,@MOD_PATCH_VERSION@,$NSS_VPATCH,g
" %{SOURCE2} > $RPM_BUILD_ROOT%{_bindir}/nss-config
chmod +x $RPM_BUILD_ROOT%{_bindir}/nss-config

mv $RPM_BUILD_ROOT%{_libdir}/libfreebl3.so $RPM_BUILD_ROOT/%{_lib}
ln -s /%{_lib}/libfreebl3.so $RPM_BUILD_ROOT%{_libdir}/libfreebl3.so
mv $RPM_BUILD_ROOT%{_libdir}/libfreebl3.chk $RPM_BUILD_ROOT/%{_lib}
ln -s /%{_lib}/libfreebl3.chk $RPM_BUILD_ROOT%{_libdir}/libfreebl3.chk

# conflict with openssl-static
mv $RPM_BUILD_ROOT%{_libdir}/libssl{,3}.a

if [ ! -f "$RPM_BUILD_ROOT%{_includedir}/nss/nsslowhash.h" ]; then
	echo >&2 "ERROR: %{_includedir}/nss/nsslowhash.h not installed. Needed by glibc"
	exit 1
fi

%clean
rm -rf $RPM_BUILD_ROOT

%post	-p /sbin/ldconfig
%postun	-p /sbin/ldconfig

%files
%defattr(644,root,root,755)
# COPYING beside MPL v2.0 text contains GPL/LGPL compatibility notes
%doc nss/{COPYING,trademarks.txt}
%attr(755,root,root) %{_libdir}/libfreebl3.so
%attr(755,root,root) %{_libdir}/libnss3.so
%attr(755,root,root) %{_libdir}/libnssckbi.so
%attr(755,root,root) %{_libdir}/libnssdbm3.so
%attr(755,root,root) %{_libdir}/libnssutil3.so
%attr(755,root,root) %{_libdir}/libsmime3.so
%attr(755,root,root) %{_libdir}/libsoftokn3.so
%attr(755,root,root) %{_libdir}/libssl3.so
%{_libdir}/libfreebl3.chk
%{_libdir}/libnssdbm3.chk
%{_libdir}/libsoftokn3.chk

%files devel
%defattr(644,root,root,755)
%attr(755,root,root) %{_bindir}/nss-config
%{_libdir}/libcrmf.a
%{_libdir}/libfreebl.a
%{_includedir}/nss
%{_pkgconfigdir}/mozilla-nss.pc
%{_pkgconfigdir}/nss.pc
%{_pkgconfigdir}/nss-softokn.pc

%files tools
%defattr(644,root,root,755)
%attr(755,root,root) %{_bindir}/addbuiltin
%attr(755,root,root) %{_bindir}/atob
%attr(755,root,root) %{_bindir}/baddbdir
%attr(755,root,root) %{_bindir}/bltest
%attr(755,root,root) %{_bindir}/btoa
%attr(755,root,root) %{_bindir}/certcgi
%attr(755,root,root) %{_bindir}/certutil
%attr(755,root,root) %{_bindir}/checkcert
%attr(755,root,root) %{_bindir}/chktest
%attr(755,root,root) %{_bindir}/cmsutil
%attr(755,root,root) %{_bindir}/conflict
%attr(755,root,root) %{_bindir}/crlutil
%attr(755,root,root) %{_bindir}/crmftest
%attr(755,root,root) %{_bindir}/dbtest
%attr(755,root,root) %{_bindir}/derdump
%attr(755,root,root) %{_bindir}/dertimetest
%attr(755,root,root) %{_bindir}/digest
%attr(755,root,root) %{_bindir}/encodeinttest
%attr(755,root,root) %{_bindir}/fipstest
%attr(755,root,root) %{_bindir}/httpserv
%attr(755,root,root) %{_bindir}/listsuites
%attr(755,root,root) %{_bindir}/lowhashtest
%attr(755,root,root) %{_bindir}/makepqg
%attr(755,root,root) %{_bindir}/mangle
%attr(755,root,root) %{_bindir}/modutil
%attr(755,root,root) %{_bindir}/multinit
%attr(755,root,root) %{_bindir}/nonspr10
%attr(755,root,root) %{_bindir}/ocspclnt
%attr(755,root,root) %{_bindir}/ocspresp
%attr(755,root,root) %{_bindir}/oidcalc
%attr(755,root,root) %{_bindir}/p7content
%attr(755,root,root) %{_bindir}/p7env
%attr(755,root,root) %{_bindir}/p7sign
%attr(755,root,root) %{_bindir}/p7verify
%attr(755,root,root) %{_bindir}/pk11gcmtest
%attr(755,root,root) %{_bindir}/pk11mode
%attr(755,root,root) %{_bindir}/pk12util
%attr(755,root,root) %{_bindir}/pk1sign
%attr(755,root,root) %{_bindir}/pkix-errcodes
%attr(755,root,root) %{_bindir}/pp
%attr(755,root,root) %{_bindir}/pwdecrypt
%attr(755,root,root) %{_bindir}/remtest
%attr(755,root,root) %{_bindir}/rsaperf
%attr(755,root,root) %{_bindir}/sdrtest
%attr(755,root,root) %{_bindir}/secmodtest
%attr(755,root,root) %{_bindir}/selfserv
%attr(755,root,root) %{_bindir}/shlibsign
%attr(755,root,root) %{_bindir}/signtool
%attr(755,root,root) %{_bindir}/signver
%attr(755,root,root) %{_bindir}/ssltap
%attr(755,root,root) %{_bindir}/strsclnt
%attr(755,root,root) %{_bindir}/symkeyutil
%attr(755,root,root) %{_bindir}/tstclnt
%attr(755,root,root) %{_bindir}/vfychain
%attr(755,root,root) %{_bindir}/vfyserv
%{_mandir}/man1/certutil.1*
%{_mandir}/man1/cmsutil.1*
%{_mandir}/man1/crlutil.1*
%{_mandir}/man1/derdump.1*
%{_mandir}/man1/modutil.1*
%{_mandir}/man1/pk12util.1*
%{_mandir}/man1/pp.1*
%{_mandir}/man1/signtool.1*
%{_mandir}/man1/signver.1*
%{_mandir}/man1/ssltap.1*
%{_mandir}/man1/vfychain.1*
%{_mandir}/man1/vfyserv.1*

%files static
%defattr(644,root,root,755)
%{_libdir}/libcertdb.a
%{_libdir}/libcerthi.a
%{_libdir}/libcryptohi.a
%{_libdir}/libdbm.a
%{_libdir}/libjar.a
%{_libdir}/libnss.a
%{_libdir}/libnssb.a
%{_libdir}/libnssckfw.a
%{_libdir}/libnssdbm.a
%{_libdir}/libnssdev.a
%{_libdir}/libnsspki.a
%{_libdir}/libnssutil.a
%{_libdir}/libpk11wrap.a
%{_libdir}/libpkcs12.a
%{_libdir}/libpkcs7.a
%{_libdir}/libpkixcertsel.a
%{_libdir}/libpkixchecker.a
%{_libdir}/libpkixcrlsel.a
%{_libdir}/libpkixmodule.a
%{_libdir}/libpkixparams.a
%{_libdir}/libpkixpki.a
%{_libdir}/libpkixresults.a
%{_libdir}/libpkixstore.a
%{_libdir}/libpkixsystem.a
%{_libdir}/libpkixtop.a
%{_libdir}/libpkixutil.a
%{_libdir}/libsectool.a
%{_libdir}/libsmime.a
%{_libdir}/libsoftokn.a
%{_libdir}/libssl3.a

%files softokn-freebl
%defattr(644,root,root,755)
%attr(755,root,root) /%{_lib}/libfreebl3.so
/%{_lib}/libfreebl3.chk
Commit	Line	Data
	1	%define nspr_ver 1:4.10.8
	2	%define foover %(echo %{version} \| tr . _)
	3	Summary: NSS - Network Security Services
	4	Summary(pl.UTF-8): NSS - Network Security Services
	5	Name: nss
	6	Version: 3.19.2
	7	Release: 1
	8	Epoch: 1
	9	License: MPL v2.0
	10	Group: Libraries
	11	Source0: http://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_%{foover}_RTM/src/%{name}-%{version}.tar.gz
	12	# Source0-md5: b02ffd1e8e8ef5f8512fa02d8ca9db3d
	13	Source1: %{name}-mozilla-nss.pc
	14	Source2: %{name}-config.in
	15	Source3: http://www.cacert.org/certs/root.der
	16	# Source3-md5: a61b375e390d9c3654eebd2031461f6b
	17	Source4: nss-softokn.pc.in
	18	# Upstream: https://bugzilla.mozilla.org/show_bug.cgi?id=1083900
	19	Patch0: x32.patch
	20	URL: http://www.mozilla.org/projects/security/pki/nss/
	21	BuildRequires: nspr-devel >= %{nspr_ver}
	22	BuildRequires: nss-tools
	23	BuildRequires: perl-base
	24	BuildRequires: sqlite3-devel
	25	BuildRequires: zlib-devel
	26	BuildConflicts: mozilla < 0.9.6-3
	27	Requires: %{name}-softokn-freebl = %{epoch}:%{version}-%{release}
	28	Requires: nspr >= %{nspr_ver}
	29	Obsoletes: libnss3
	30	BuildRoot: %{tmpdir}/%{name}-%{version}-root-%(id -u -n)
	31
	32	%define specflags -fno-strict-aliasing
	33	# signed - stripped before signing
	34	%define _noautostrip .%{_libdir}/libfreebl3.so\\\|.%{_libdir}/libsoftokn3.so
	35	%define _noautochrpath .%{_libdir}/libfreebl3.so\\\|.%{_libdir}/libsoftokn3.so
	36
	37	%description
	38	NSS supports cross-platform development of security-enabled server
	39	applications. Applications built with NSS can support PKCS #5,
	40	PKCS #7, PKCS #11, PKCS #12, S/MIME, TLS, SSL v2 and v3, X.509 v3
	41	certificates, and other security standards.
	42
	43	%description -l pl.UTF-8
	44	NSS wspomaga pisanie wieloplatformowych bezpiecznych serwerów.
	45	Aplikacja używająca NSS jest w stanie obsłużyć PKCS #5, PKCS #7,
	46	PKCS #11, PKCS #12, S/MIME, TLS, SSL v2 oraz v3, certyfikaty X.509 v3,
	47	i wiele innych bezpiecznych standardów.
	48
	49	%package tools
	50	Summary: NSS command line tools and utilities
	51	Summary(pl.UTF-8): Narzędzia NSS obsługiwane z linii poleceń
	52	Group: Applications
	53	Requires: %{name} = %{epoch}:%{version}-%{release}
	54
	55	%description tools
	56	The NSS Toolkit command line tool.
	57
	58	%description tools -l pl.UTF-8
	59	Narzędzia NSS obsługiwane z linii poleceń.
	60
	61	%package devel
	62	Summary: NSS - header files
	63	Summary(pl.UTF-8): NSS - pliki nagłówkowe
	64	Group: Development/Libraries
	65	Requires: %{name} = %{epoch}:%{version}-%{release}
	66	Requires: nspr-devel >= %{nspr_ver}
	67	Obsoletes: libnss3-devel
	68
	69	%description devel
	70	Development part of NSS library.
	71
	72	%description devel -l pl.UTF-8
	73	Część biblioteki NSS przeznaczona dla programistów.
	74
	75	%package static
	76	Summary: NSS - static library
	77	Summary(pl.UTF-8): NSS - biblioteka statyczna
	78	Group: Development/Libraries
	79	Requires: %{name}-devel = %{epoch}:%{version}-%{release}
	80
	81	%description static
	82	Static NSS Toolkit libraries.
	83
	84	%description static -l pl.UTF-8
	85	Statyczne wersje bibliotek z NSS.
	86
	87	%package softokn-freebl
	88	Summary: Freebl library for the Network Security Services
	89	Summary(pl.UTF-8): Biblioteka freebl dla bibliotek NSS
	90	Group: Libraries
	91
	92	%description softokn-freebl
	93	Freebl cryptographic library for the Network Security Services.
	94
	95	%description softokn-freebl -l pl.UTF-8
	96	Biblioteka kryptograficzna freebl dla bibliotek NSS.
	97
	98	%prep
	99	%setup -q
	100	%patch0 -p1
	101
	102	%if 0%{!?debug:1}
	103	# strip before signing
	104	%{__sed} -i -e '/export ADDON_PATH$/a\ echo STRIP \; %{__strip} --strip-unneeded -R.comment -R.note ${5}' nss/cmd/shlibsign/sign.sh
	105	%endif
	106
	107	%build
	108	# http://wiki.cacert.org/wiki/NSSLib
	109	addbuiltin -n "CAcert Inc." -t "CT,C,C" < %{SOURCE3} >> nss/lib/ckfw/builtins/certdata.txt
	110
	111	%ifarch %{x8664} ppc64 sparc64
	112	export USE_64=1
	113	%endif
	114
	115	# http://pki.fedoraproject.org/wiki/ECC_Capable_NSS
	116	for dir in ecc noecc; do
	117	install -d $dir
	118	cp -a nss $dir/nss
	119	done
	120
	121	export BUILD_OPT=1
	122	export MOZILLA_CLIENT=1
	123	export NSDISTMODE=copy
	124	export NSPR_INCLUDE_DIR=/usr/include/nspr
	125	export NSS_USE_SYSTEM_SQLITE=1
	126	export USE_PTHREADS=1
	127	export USE_SYSTEM_ZLIB=1
	128	export ZLIB_LIBS="-lz"
	129	%ifarch x32
	130	export USE_X32=1
	131	%endif
	132
	133	# https://bugzilla.mozilla.org/show_bug.cgi?id=1084623
	134
	135	# Forcing ecc with this hack would produce broken librares (softoken, freebl etc).
	136	# Thus we also build noecc version (which doesn't require hack) and use these
	137	# libs from there.
	138	sed -i -e 's\|#error\|#warning\|g' ecc/nss/lib/freebl/ecl/ecl-curve.h
	139	%{__make} -j1 -C ecc/nss \
	140	NSS_ECC_MORE_THAN_SUITE_B=1 \
	141	CC="%{__cc}" \
	142	OPTIMIZER="%{rpmcflags} %{rpmcppflags}" \
	143
	144	%{__make} -j1 -C noecc/nss \
	145	CC="%{__cc}" \
	146	OPTIMIZER="%{rpmcflags} %{rpmcppflags}"
	147
	148	%install
	149	rm -rf $RPM_BUILD_ROOT
	150	install -d $RPM_BUILD_ROOT{%{_bindir},%{_mandir}/man1,%{_includedir}/nss,/%{_lib},%{_libdir},%{_pkgconfigdir}}
	151
	152	cp -p ecc/dist/private/nss/* $RPM_BUILD_ROOT%{_includedir}/nss
	153	cp -p ecc/dist/public/dbm/* $RPM_BUILD_ROOT%{_includedir}/nss
	154	cp -p ecc/dist/public/nss/* $RPM_BUILD_ROOT%{_includedir}/nss
	155	install -p ecc/dist//bin/ $RPM_BUILD_ROOT%{_bindir}
	156	install -p ecc/dist//lib/ $RPM_BUILD_ROOT%{_libdir}
	157
	158	# non-ECC version, we need only libnssdbm3, libsoftokn3, libfreebl3
	159	install -p noecc/dist//lib/libnssdbm3. $RPM_BUILD_ROOT%{_libdir}
	160	install -p noecc/dist//lib/libsoftokn3. $RPM_BUILD_ROOT%{_libdir}
	161	install -p noecc/dist//lib/libfreebl3. $RPM_BUILD_ROOT%{_libdir}
	162
	163	cp -p nss/doc/nroff/*.1 $RPM_BUILD_ROOT%{_mandir}/man1
	164
	165	%{__sed} -e '
	166	s#libdir=.*#libdir=%{_libdir}#g
	167	s#includedir=.*#includedir=%{_includedir}#g
	168	s#VERSION#%{version}#g
	169	' %{SOURCE1} > $RPM_BUILD_ROOT%{_pkgconfigdir}/nss.pc
	170	# compatibility symlink
	171	ln -s nss.pc $RPM_BUILD_ROOT%{_pkgconfigdir}/mozilla-nss.pc
	172
	173	cat %{SOURCE4} \| \
	174	sed -e "s,%%libdir%%,%{_libdir},g" \
	175	-e "s,%%prefix%%,%{_prefix},g" \
	176	-e "s,%%exec_prefix%%,%{_prefix},g" \
	177	-e "s,%%includedir%%,%{_includedir}/nss,g" \
	178	-e "s,%%NSPR_VERSION%%,$(echo %{nspr_ver} \| sed -e 's#.*:##g'),g" \
	179	-e "s,%%NSS_VERSION%%,%{version},g" \
	180	-e "s,%%SOFTOKEN_VERSION%%,%{version},g" > \
	181	$RPM_BUILD_ROOT%{_pkgconfigdir}/nss-softokn.pc
	182
	183
	184	NSS_VMAJOR=$(awk '/#define.*NSS_VMAJOR/ {print $3}' nss/lib/nss/nss.h)
	185	NSS_VMINOR=$(awk '/#define.*NSS_VMINOR/ {print $3}' nss/lib/nss/nss.h)
	186	NSS_VPATCH=$(awk '/#define.*NSS_VPATCH/ {print $3}' nss/lib/nss/nss.h)
	187	%{__sed} -e "
	188	s,@libdir@,%{_libdir},g
	189	s,@prefix@,%{_prefix},g
	190	s,@exec_prefix@,%{_prefix},g
	191	s,@includedir@,%{_includedir}/nss,g
	192	s,@MOD_MAJOR_VERSION@,$NSS_VMAJOR,g
	193	s,@MOD_MINOR_VERSION@,$NSS_VMINOR,g
	194	s,@MOD_PATCH_VERSION@,$NSS_VPATCH,g
	195	" %{SOURCE2} > $RPM_BUILD_ROOT%{_bindir}/nss-config
	196	chmod +x $RPM_BUILD_ROOT%{_bindir}/nss-config
	197
	198	mv $RPM_BUILD_ROOT%{_libdir}/libfreebl3.so $RPM_BUILD_ROOT/%{_lib}
	199	ln -s /%{_lib}/libfreebl3.so $RPM_BUILD_ROOT%{_libdir}/libfreebl3.so
	200	mv $RPM_BUILD_ROOT%{_libdir}/libfreebl3.chk $RPM_BUILD_ROOT/%{_lib}
	201	ln -s /%{_lib}/libfreebl3.chk $RPM_BUILD_ROOT%{_libdir}/libfreebl3.chk
	202
	203	# conflict with openssl-static
	204	mv $RPM_BUILD_ROOT%{_libdir}/libssl{,3}.a
	205
	206	if [ ! -f "$RPM_BUILD_ROOT%{_includedir}/nss/nsslowhash.h" ]; then
	207	echo >&2 "ERROR: %{_includedir}/nss/nsslowhash.h not installed. Needed by glibc"
	208	exit 1
	209	fi
	210
	211	%clean
	212	rm -rf $RPM_BUILD_ROOT
	213
	214	%post -p /sbin/ldconfig
	215	%postun -p /sbin/ldconfig
	216
	217	%files
	218	%defattr(644,root,root,755)
	219	# COPYING beside MPL v2.0 text contains GPL/LGPL compatibility notes
	220	%doc nss/{COPYING,trademarks.txt}
	221	%attr(755,root,root) %{_libdir}/libfreebl3.so
	222	%attr(755,root,root) %{_libdir}/libnss3.so
	223	%attr(755,root,root) %{_libdir}/libnssckbi.so
	224	%attr(755,root,root) %{_libdir}/libnssdbm3.so
	225	%attr(755,root,root) %{_libdir}/libnssutil3.so
	226	%attr(755,root,root) %{_libdir}/libsmime3.so
	227	%attr(755,root,root) %{_libdir}/libsoftokn3.so
	228	%attr(755,root,root) %{_libdir}/libssl3.so
	229	%{_libdir}/libfreebl3.chk
	230	%{_libdir}/libnssdbm3.chk
	231	%{_libdir}/libsoftokn3.chk
	232
	233	%files devel
	234	%defattr(644,root,root,755)
	235	%attr(755,root,root) %{_bindir}/nss-config
	236	%{_libdir}/libcrmf.a
	237	%{_libdir}/libfreebl.a
	238	%{_includedir}/nss
	239	%{_pkgconfigdir}/mozilla-nss.pc
	240	%{_pkgconfigdir}/nss.pc
	241	%{_pkgconfigdir}/nss-softokn.pc
	242
	243	%files tools
	244	%defattr(644,root,root,755)
	245	%attr(755,root,root) %{_bindir}/addbuiltin
	246	%attr(755,root,root) %{_bindir}/atob
	247	%attr(755,root,root) %{_bindir}/baddbdir
	248	%attr(755,root,root) %{_bindir}/bltest
	249	%attr(755,root,root) %{_bindir}/btoa
	250	%attr(755,root,root) %{_bindir}/certcgi
	251	%attr(755,root,root) %{_bindir}/certutil
	252	%attr(755,root,root) %{_bindir}/checkcert
	253	%attr(755,root,root) %{_bindir}/chktest
	254	%attr(755,root,root) %{_bindir}/cmsutil
	255	%attr(755,root,root) %{_bindir}/conflict
	256	%attr(755,root,root) %{_bindir}/crlutil
	257	%attr(755,root,root) %{_bindir}/crmftest
	258	%attr(755,root,root) %{_bindir}/dbtest
	259	%attr(755,root,root) %{_bindir}/derdump
	260	%attr(755,root,root) %{_bindir}/dertimetest
	261	%attr(755,root,root) %{_bindir}/digest
	262	%attr(755,root,root) %{_bindir}/encodeinttest
	263	%attr(755,root,root) %{_bindir}/fipstest
	264	%attr(755,root,root) %{_bindir}/httpserv
	265	%attr(755,root,root) %{_bindir}/listsuites
	266	%attr(755,root,root) %{_bindir}/lowhashtest
	267	%attr(755,root,root) %{_bindir}/makepqg
	268	%attr(755,root,root) %{_bindir}/mangle
	269	%attr(755,root,root) %{_bindir}/modutil
	270	%attr(755,root,root) %{_bindir}/multinit
	271	%attr(755,root,root) %{_bindir}/nonspr10
	272	%attr(755,root,root) %{_bindir}/ocspclnt
	273	%attr(755,root,root) %{_bindir}/ocspresp
	274	%attr(755,root,root) %{_bindir}/oidcalc
	275	%attr(755,root,root) %{_bindir}/p7content
	276	%attr(755,root,root) %{_bindir}/p7env
	277	%attr(755,root,root) %{_bindir}/p7sign
	278	%attr(755,root,root) %{_bindir}/p7verify
	279	%attr(755,root,root) %{_bindir}/pk11gcmtest
	280	%attr(755,root,root) %{_bindir}/pk11mode
	281	%attr(755,root,root) %{_bindir}/pk12util
	282	%attr(755,root,root) %{_bindir}/pk1sign
	283	%attr(755,root,root) %{_bindir}/pkix-errcodes
	284	%attr(755,root,root) %{_bindir}/pp
	285	%attr(755,root,root) %{_bindir}/pwdecrypt
	286	%attr(755,root,root) %{_bindir}/remtest
	287	%attr(755,root,root) %{_bindir}/rsaperf
	288	%attr(755,root,root) %{_bindir}/sdrtest
	289	%attr(755,root,root) %{_bindir}/secmodtest
	290	%attr(755,root,root) %{_bindir}/selfserv
	291	%attr(755,root,root) %{_bindir}/shlibsign
	292	%attr(755,root,root) %{_bindir}/signtool
	293	%attr(755,root,root) %{_bindir}/signver
	294	%attr(755,root,root) %{_bindir}/ssltap
	295	%attr(755,root,root) %{_bindir}/strsclnt
	296	%attr(755,root,root) %{_bindir}/symkeyutil
	297	%attr(755,root,root) %{_bindir}/tstclnt
	298	%attr(755,root,root) %{_bindir}/vfychain
	299	%attr(755,root,root) %{_bindir}/vfyserv
	300	%{_mandir}/man1/certutil.1*
	301	%{_mandir}/man1/cmsutil.1*
	302	%{_mandir}/man1/crlutil.1*
	303	%{_mandir}/man1/derdump.1*
	304	%{_mandir}/man1/modutil.1*
	305	%{_mandir}/man1/pk12util.1*
	306	%{_mandir}/man1/pp.1*
	307	%{_mandir}/man1/signtool.1*
	308	%{_mandir}/man1/signver.1*
	309	%{_mandir}/man1/ssltap.1*
	310	%{_mandir}/man1/vfychain.1*
	311	%{_mandir}/man1/vfyserv.1*
	312
	313	%files static
	314	%defattr(644,root,root,755)
	315	%{_libdir}/libcertdb.a
	316	%{_libdir}/libcerthi.a
	317	%{_libdir}/libcryptohi.a
	318	%{_libdir}/libdbm.a
	319	%{_libdir}/libjar.a
	320	%{_libdir}/libnss.a
	321	%{_libdir}/libnssb.a
	322	%{_libdir}/libnssckfw.a
	323	%{_libdir}/libnssdbm.a
	324	%{_libdir}/libnssdev.a
	325	%{_libdir}/libnsspki.a
	326	%{_libdir}/libnssutil.a
	327	%{_libdir}/libpk11wrap.a
	328	%{_libdir}/libpkcs12.a
	329	%{_libdir}/libpkcs7.a
	330	%{_libdir}/libpkixcertsel.a
	331	%{_libdir}/libpkixchecker.a
	332	%{_libdir}/libpkixcrlsel.a
	333	%{_libdir}/libpkixmodule.a
	334	%{_libdir}/libpkixparams.a
	335	%{_libdir}/libpkixpki.a
	336	%{_libdir}/libpkixresults.a
	337	%{_libdir}/libpkixstore.a
	338	%{_libdir}/libpkixsystem.a
	339	%{_libdir}/libpkixtop.a
	340	%{_libdir}/libpkixutil.a
	341	%{_libdir}/libsectool.a
	342	%{_libdir}/libsmime.a
	343	%{_libdir}/libsoftokn.a
	344	%{_libdir}/libssl3.a
	345
	346	%files softokn-freebl
	347	%defattr(644,root,root,755)
	348	%attr(755,root,root) /%{_lib}/libfreebl3.so
	349	/%{_lib}/libfreebl3.chk