April 2020 - openSUSE Commits - openSUSE Mailing Lists

commit 000product for openSUSE:Leap:15.2:PowerPC
by root 30 Apr '20

30 Apr '20

Hello community, here is the log from the commit of package 000product for openSUSE:Leap:15.2:PowerPC checked in at 2020-04-30 21:26:38 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Leap:15.2:PowerPC/000product (Old) and /work/SRC/openSUSE:Leap:15.2:PowerPC/.000product.new.2738 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "000product" Thu Apr 30 21:26:38 2020 rev:224 rq: version:unknown Changes: -------- New Changes file: NO CHANGES FILE!!! ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ openSUSE-dvd5-dvd-ppc64le.kiwi: same change openSUSE-ftp-ftp-ppc64le.kiwi: same change stub.kiwi: same change ++++++ unsorted.yml ++++++ --- /var/tmp/diff_new_pack.0G03F7/_old 2020-04-30 21:26:39.767566444 +0200 +++ /var/tmp/diff_new_pack.0G03F7/_new 2020-04-30 21:26:39.767566444 +0200 @@ -5718,6 +5718,8 @@ - iodine - ioping - iops + - ioquake3 + - ioquake3-devel - ior - iotop - iouyap @@ -9733,7 +9735,7 @@ - liborigin-tools - liborigin2 - libortp13 - - libosdCPU3_4_0 + - libosdCPU3_4_3 - libosinfo-devel - libosip2 - libosip2-devel

1 0

commit 000update-repos for openSUSE:Factory
by root 30 Apr '20

30 Apr '20

Hello community, here is the log from the commit of package 000update-repos for openSUSE:Factory checked in at 2020-04-30 21:08:41 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/000update-repos (Old) and /work/SRC/openSUSE:Factory/.000update-repos.new.2738 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "000update-repos" Thu Apr 30 21:08:41 2020 rev:1038 rq: version:unknown Thu Apr 30 21:08:28 2020 rev:1037 rq: version:unknown Changes: -------- New Changes file: NO CHANGES FILE!!! New: ---- 15.1:update_1588258375.packages.xz factory:non-oss_2221.3.packages.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------

1 0

commit 000update-repos for openSUSE:Factory
by root 30 Apr '20

30 Apr '20

Hello community, here is the log from the commit of package 000update-repos for openSUSE:Factory checked in at 2020-04-30 21:08:21 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/000update-repos (Old) and /work/SRC/openSUSE:Factory/.000update-repos.new.2738 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "000update-repos" Thu Apr 30 21:08:21 2020 rev:1036 rq: version:unknown Changes: -------- New Changes file: NO CHANGES FILE!!! New: ---- factory_20200428.packages.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------

1 0

commit 000update-repos for openSUSE:Leap:15.2:PowerPC
by root 30 Apr '20

30 Apr '20

Hello community, here is the log from the commit of package 000update-repos for openSUSE:Leap:15.2:PowerPC checked in at 2020-04-30 21:03:09 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Leap:15.2:PowerPC/000update-repos (Old) and /work/SRC/openSUSE:Leap:15.2:PowerPC/.000update-repos.new.2738 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "000update-repos" Thu Apr 30 21:03:09 2020 rev:181 rq: version:unknown Changes: -------- New Changes file: NO CHANGES FILE!!! New: ---- 15.1:ppc:update_1588259728.packages.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------

1 0

commit 000update-repos for openSUSE:Leap:15.2
by root 30 Apr '20

30 Apr '20

Hello community, here is the log from the commit of package 000update-repos for openSUSE:Leap:15.2 checked in at 2020-04-30 21:02:44 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Leap:15.2/000update-repos (Old) and /work/SRC/openSUSE:Leap:15.2/.000update-repos.new.2738 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "000update-repos" Thu Apr 30 21:02:44 2020 rev:622 rq: version:unknown Thu Apr 30 21:02:33 2020 rev:621 rq: version:unknown Changes: -------- New Changes file: NO CHANGES FILE!!! New: ---- 15.1:update_1588258375.packages.xz 15.2:non-oss_639.2.packages.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------

1 0

commit 000update-repos for openSUSE:Leap:15.2
by root 30 Apr '20

30 Apr '20

Hello community, here is the log from the commit of package 000update-repos for openSUSE:Leap:15.2 checked in at 2020-04-30 21:02:31 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Leap:15.2/000update-repos (Old) and /work/SRC/openSUSE:Leap:15.2/.000update-repos.new.2738 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "000update-repos" Thu Apr 30 21:02:31 2020 rev:620 rq: version:unknown Changes: -------- New Changes file: NO CHANGES FILE!!! New: ---- 15.2_639.2.packages.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------

1 0

commit 000product for openSUSE:Leap:15.2:PowerPC
by root 30 Apr '20

30 Apr '20

Hello community, here is the log from the commit of package 000product for openSUSE:Leap:15.2:PowerPC checked in at 2020-04-30 20:26:10 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Leap:15.2:PowerPC/000product (Old) and /work/SRC/openSUSE:Leap:15.2:PowerPC/.000product.new.2738 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "000product" Thu Apr 30 20:26:10 2020 rev:223 rq: version:unknown Changes: -------- New Changes file: NO CHANGES FILE!!! ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ openSUSE-dvd5-dvd-ppc64le.kiwi: same change openSUSE-ftp-ftp-ppc64le.kiwi: same change stub.kiwi: same change ++++++ unsorted.yml ++++++ --- /var/tmp/diff_new_pack.hwY6EY/_old 2020-04-30 20:26:12.084222459 +0200 +++ /var/tmp/diff_new_pack.hwY6EY/_new 2020-04-30 20:26:12.088222468 +0200 @@ -11862,6 +11862,7 @@ - makewhat - man-pages-fr-extra - manchu-fonts + - mandoc - mangler - manpageeditor - marble-devel @@ -17961,6 +17962,8 @@ - python2-maxminddb - python2-mccabe - python2-md2workflow + - python2-md2workflow-plugins-jira + - python2-md2workflow-plugins-redmine - python2-mechanize - python2-meld3 - python2-memory_profiler @@ -18230,7 +18233,6 @@ - python2-py-radix - python2-py-ubjson - python2-py2pack - - python2-py3status - python2-pyBarcode - python2-pyDOE2 - python2-pyFFTW @@ -18305,6 +18307,7 @@ - python2-pygit2 - python2-pyglet - python2-pygments-ansi-color + - python2-pygments-pytest - python2-pygments-style-railscasts - python2-pygraphviz - python2-pyinotify @@ -18437,6 +18440,7 @@ - python2-pytest-virtualenv - python2-pytest-xdist - python2-pytest-xvfb + - python2-pytest4 - python2-python-aiml - python2-python-bidi - python2-python-cjson @@ -18636,7 +18640,6 @@ - python2-semanage - python2-semantic_version - python2-semver - - python2-serpent - python2-serpy - python2-serverfiles - python2-service_identity @@ -20326,6 +20329,8 @@ - python3-mbstrdecoder - python3-mccabe - python3-md2workflow + - python3-md2workflow-plugins-jira + - python3-md2workflow-plugins-redmine - python3-mechanize - python3-meld3 - python3-memory_profiler @@ -20708,6 +20713,7 @@ - python3-pygit2 - python3-pyglet - python3-pygments-ansi-color + - python3-pygments-pytest - python3-pygments-style-railscasts - python3-pygraphviz - python3-pyhibp @@ -20870,6 +20876,7 @@ - python3-pytest-virtualenv - python3-pytest-xdist - python3-pytest-xvfb + - python3-pytest4 - python3-python-aiml - python3-python-bidi - python3-python-box @@ -31002,6 +31009,7 @@ - update-test-broken - update-test-feature - update-test-relogin-suggested + - update-test-retracted - update-test-trivial - uperf - upsm

1 0

commit 000release-packages for openSUSE:Leap:15.2:PowerPC
by root 30 Apr '20

30 Apr '20

Hello community, here is the log from the commit of package 000release-packages for openSUSE:Leap:15.2:PowerPC checked in at 2020-04-30 20:26:08 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Leap:15.2:PowerPC/000release-packages (Old) and /work/SRC/openSUSE:Leap:15.2:PowerPC/.000release-packages.new.2738 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "000release-packages" Thu Apr 30 20:26:08 2020 rev:202 rq: version:unknown Changes: -------- New Changes file: NO CHANGES FILE!!! ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ openSUSE-release.spec: same change stub.spec: same change ++++++ weakremovers.inc ++++++ --- /var/tmp/diff_new_pack.ClWwZs/_old 2020-04-30 20:26:09.832217812 +0200 +++ /var/tmp/diff_new_pack.ClWwZs/_new 2020-04-30 20:26:09.836217820 +0200 @@ -16213,6 +16213,7 @@ Provides: weakremover(python2-pwquality) Provides: weakremover(python2-py-radix) Provides: weakremover(python2-py-ubjson) +Provides: weakremover(python2-py3status) Provides: weakremover(python2-pyFFTW) Provides: weakremover(python2-pyScss) Provides: weakremover(python2-pyalsaaudio) @@ -16304,6 +16305,7 @@ Provides: weakremover(python2-scrypt) Provides: weakremover(python2-semanage) Provides: weakremover(python2-seqdiag) +Provides: weakremover(python2-serpent) Provides: weakremover(python2-setproctitle) Provides: weakremover(python2-shijian) Provides: weakremover(python2-sigal)

1 0

commit dehydrated for openSUSE:Leap:15.2
by root 30 Apr '20

30 Apr '20

Hello community, here is the log from the commit of package dehydrated for openSUSE:Leap:15.2 checked in at 2020-04-30 18:53:09 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Leap:15.2/dehydrated (Old) and /work/SRC/openSUSE:Leap:15.2/.dehydrated.new.2738 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "dehydrated" Thu Apr 30 18:53:09 2020 rev:31 rq:799246 version:0.6.5 Changes: -------- --- /work/SRC/openSUSE:Leap:15.2/dehydrated/dehydrated.changes 2020-01-15 14:52:05.609476605 +0100 +++ /work/SRC/openSUSE:Leap:15.2/.dehydrated.new.2738/dehydrated.changes 2020-04-30 18:53:59.252921285 +0200 @@ -1,0 +2,24 @@ +Mon Apr 20 00:37:26 UTC 2020 - Daniel Molkentin <daniel.molkentin(a)suse.com> + +- Fix lighttpd config file (boo#1169834) +- Provide nginx subpackage for SLE 15+ (jsc#SLE-11727) + +------------------------------------------------------------------- +Mon Feb 3 12:25:00 UTC 2020 - Dominique Leuenberger <dimstar(a)opensuse.org> + +- Drop systemd BuildRequires: pkgconfig(systemd) is already in + place and is synonymous. + +------------------------------------------------------------------- +Thu Oct 17 17:23:53 UTC 2019 - Richard Brown <rbrown(a)suse.com> + +- Remove obsolete Groups tag (fate#326485) + +------------------------------------------------------------------- +Sat Aug 10 17:18:25 UTC 2019 - Daniel Molkentin <daniel.molkentin(a)suse.com> + +- Behavioral change: Use cron only for older RHEL/CentOS versions + (along with SLE < 12.0). Everything else now uses systemd. + Please adopt accordingly! Refer to README.md for + +------------------------------------------------------------------- Old: ---- README.SUSE New: ---- README.maintainer ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ dehydrated.spec ++++++ --- /var/tmp/diff_new_pack.iZ0qtx/_old 2020-04-30 18:53:59.776922392 +0200 +++ /var/tmp/diff_new_pack.iZ0qtx/_new 2020-04-30 18:53:59.780922400 +0200 @@ -1,7 +1,7 @@ # # spec file for package dehydrated # -# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2020 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -21,7 +21,7 @@ %define _home %{_sysconfdir}/dehydrated %define _postrunhooks %{_home}/postrun-hooks.d -%if 0%{?suse_version} > 1230 +%if 0%{?sle_version} >= 120100 || 0%{?suse_version} >= 1210 || 0%{?rhel_version} >= 700 || 0%{?centos_version} >= 700 %define _lock_dir /run/dehydrated %bcond_without systemd %else @@ -29,13 +29,18 @@ %bcond_with systemd %endif -%if 0%{?is_opensuse} || %{defined fedora} +%if 0%{?sle_version} >= 150000 || 0%{?is_opensuse} || %{defined fedora} %bcond_without nginx -%bcond_without lighttpd %else %bcond_with nginx +%endif + +%if 0%{?is_opensuse} || %{defined fedora} +%bcond_without lighttpd +%else %bcond_with lighttpd %endif + %{!?_tmpfilesdir: %global _tmpfilesdir %{_prefix}/lib/tmpfiles.d } # See also http://en.opensuse.org/openSUSE:Specfile_guidelines @@ -50,8 +55,7 @@ Release: 0 Summary: A client for signing certificates with an ACME server License: MIT -Group: Productivity/Networking/Security -Url: https://github.com/lukas2511/dehydrated +URL: https://github.com/lukas2511/dehydrated Source0: %{name}-%{version}.tar.gz Source1: acme-challenge.conf.apache.in Source2: acme-challenge.conf.nginx.in @@ -60,7 +64,7 @@ Source5: dehydrated.tmpfiles.d Source6: dehydrated.service.in Source7: dehydrated.timer -Source9: README.SUSE +Source9: README.maintainer Source10: README.Fedora Source11: README.hooks Source12: %{name}-%{version}.tar.gz.asc @@ -90,7 +94,6 @@ BuildRequires: shadow %endif %if %{with systemd} -BuildRequires: systemd BuildRequires: pkgconfig(systemd) %{?systemd_requires} %else #with_systemd @@ -124,7 +127,6 @@ %package %{_apache} Summary: Apache Integration for dehydrated -Group: Productivity/Networking/Security Requires: %{_apache} Requires: %{name} Obsoletes: letsencrypt.sh-%{_apache} < %{version} @@ -139,7 +141,6 @@ %if %{with nginx} %package nginx Summary: Nginx Integration for dehydrated -Group: Productivity/Networking/Security Requires: %{name} Requires: nginx Obsoletes: letsencrypt.sh-nginx < %{version} @@ -152,7 +153,6 @@ %if %{with lighttpd} %package lighttpd Summary: Lighttpd Integration for dehydrated -Group: Productivity/Networking/Security Requires: %{name} Requires: lighttpd @@ -220,8 +220,8 @@ %if %{with lighttpd} install -m 0755 -d %{buildroot}%{_sysconfdir}/lighttpd/conf.d -sed "s,@CHALLENGEDIR@,%{_challengedir},g" %{SOURCE3} > acme-challenge -install -m 0644 acme-challenge %{buildroot}%{_sysconfdir}/lighttpd/conf.d +sed "s,@CHALLENGEDIR@,%{_challengedir},g" %{SOURCE3} > acme-challenge.conf +install -m 0644 acme-challenge.conf %{buildroot}%{_sysconfdir}/lighttpd/conf.d %endif #with lighttpd %if %{with systemd} @@ -253,6 +253,13 @@ diff -urN docs/examples/config %{buildroot}%{_home}/config ||: +# Rename existing config file config files fror nginx and lighttpd +%if %{with nginx} +%pre nginx +[ -f %{_sysconfdir}/nginx/conf.d/acme-challenge ] && \ + mv %{_sysconfdir}/nginx/conf.d/acme-challenge %{_sysconfdir}/nginx/conf.d/acme-challenge.conf || : +%endif + %files %defattr(-,root,root) %attr(750,root,%{_user}) %dir %{_sysconfdir}/dehydrated @@ -269,7 +276,7 @@ %attr(-,%{_user},root) %dir %{_localstatedir}/lib/acme-challenge %{_mandir}/man1/* %doc LICENSE README.md docs/*.md docs/*.jpg -%doc README.SUSE +%doc README.maintainer %if %{defined redhat} %doc README.Fedora %endif @@ -277,9 +284,11 @@ %{_tmpfilesdir}/%{name}.conf %{_unitdir}/dehydrated.service %{_unitdir}/dehydrated.timer +%if 0%{?suse_version} %{_sbindir}/rcdehydrated +%endif %ghost %attr(700,%{_user},%{_user}) %dir %{_lock_dir} -%else +%else #with systemd %config %{_sysconfdir}/cron.d/dehydrated %attr(700,%{_user},%{_user}) %dir %{_lock_dir} %endif @@ -297,7 +306,7 @@ %if %{with lighttpd} %files lighttpd %defattr(-,root,root) -%config %attr(640,root,lighttpd) %{_sysconfdir}/lighttpd/conf.d/acme-challenge +%config %attr(640,root,lighttpd) %{_sysconfdir}/lighttpd/conf.d/acme-challenge.conf %endif #with lighttpd %changelog ++++++ README.maintainer ++++++ ========================================== Acquiring TLS Certificates with Dehydrated ========================================== The dehydrated package has been designed to make acquiring TLS certificates (aka SSL Certificates) as simple as possible, while still being useful in a broad amount of use cases. Please consult the dehydrated man page, then continue reading here. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! IMPORTANT: On systemd-based systems, you need to enable the update timer, which has obsoleted the cron job. This is independent on which method you chose from below! # systemctl enable dehydrated.timer Also note that with the systemd timer, failures will not be mailed to the system administrator, but are being logged to the systemd journal, as per systemd's design philosophy. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! Acquisition through HTTP (http-01) =================================== This is the primary method of acquiring certifictes. The Certificate Authority will provide a challenge that the requestor needs to provide via HTTP on port 80/TCP, in /.well-known/acme-challenge/. Setting up the acme-challenge auto-responder -------------------------------------------- Apache (easiest) ~~~~~~~~~~~~~~~~ If you are using Apache, just install dehydrated-apache2 and reload Apache. This will take care of setting up the acme-challenge auto-responder. nginx ~~~~~ (not part of SLE, use openSUSE backports) For nginx, you will need to install dehydrated-nginx. Unfortunately, nginx does not support directory mappings across vhosts, so in addition you will need to include "/etc/nginx/acmechallenge" in all vhost configurations like this: server { listen 80; listen [::]:80; server_name <hostname>; include "acmechallenge"; location / { return 301 https://$host$request_uri; } } lighttpd ~~~~~~~~ (not part of SLE, use openSUSE backports) Lighttpd users can simply install dehydrated-lighttpd and reload lighttpd to set up the acme-challenge auto-responder NOTE: Never set up the SSL vhosts until you have initially acquired the first host. Specifying an SSL vhost without certificates constitutes an error for web servers. Machines without a webserver ~~~~~~~~~~~~~~~~~~~~~~~~~~~~ On machines that are not running any web server, e.g. mail relays, you can run apache2 with dehydrated-apache2. If you do not want to run any web server on a system with systemd permnently, you can use dehydrated-acmeresponder. This is a small socket activated server. Once installed, it will automatically listen on port 80 whenever the dehydrated cron job seeks renewal, assuming no other server is currently occupying the port. It will also shut down once the timer has finished execution. Acquisition of initial certificate ---------------------------------- How set up an account as described in the man page (as root): # dehydrated --register --accept-terms (the current version of the LetsEncrypt Terms & Conditions are referenced in /etc/dehydrated/config) Next, fill in domains.txt and acquire the initial certificates (again, as root): # echo "myhost.example.com myalias.example.com" >> domains.txt # dehydrated --cron adds myhost.example.com to the list of host names we want to request a certificate for. The certificate will hold a Subject Alternative Name of "myalias.example.com". LetsEncrypt will check both host names. NOTE: As of 2017, LetsEncrypt certificates are only valid for three months, and the validity period may be further reduced in the future. It is therefore vital to ensure that the certificates are being automatically renewed. On systems without systemd, a cron job is automatically set up to take care of this. On systemd-enabled systems, a timer is provided which needs to be activated manually: # systemctl enable dehydrated.timer Aqcuisition through DNS (dns-01) ================================ This is mostly useful under these conditions 1. Your hosts are not directly exposed to the internet 2. Your host names are part of a public DNS zone visible on the internet. 3. You are comfortable with the service adding and removing records in your domain. Usually, the scenario you want this is a central host which picks up certificates for all other hosts on a network, and then deploys them to the actual target host, using plain scp or configuration management tools like Ansible or Salt. For details, please refer to dns-verification.md. For openSUSE, the python-dns-lexicon package provides hooks into many DNS providers and DNS servers. Proceeding after initial certificate aquisition =============================================== Setting up the SSL host ----------------------- As recommended parameters shift, please refer to Mozillas excellent SSL Configuration Generator [1] for details on how to configure your web server. Replace the example paths with the following: Key: /etc/dehydrated/certs/<domainname>/privkey.pem Certificate: /etc/dehydrated/certs/<domainname>/cert.pem Intermediate Chain: /etc/dehydrated/certs/<domainname>/chain.pem Certificate + Intermediate: /etc/dehydrated/certs/<domainname>/fullchain.pem where <domainname> should be the name of the first column in domains.txt Limitations & Ceveats ===================== * It is currently not possible to aqcuire Wildcard certificates * No EV- or OV-validated certificates * Certificates expire within weeks, not years. This is by design. Ensure that certificate renewal works and that daemons get reloaded frequently to pick up certificate updates. Apache will work due to log rotation SIGHUP'ing the process frequently. However, any other actions, such as service reloads need to be provided as a script in /etc/dehydrated/postrun-hooks.d, which will be executed by the cron script / systemd timer *after* an update run has been performed. Links ===== [1] https://mozilla.github.io/server-side-tls/ssl-config-generator/ ++++++ acme-challenge.conf.lighttpd.in ++++++ --- /var/tmp/diff_new_pack.iZ0qtx/_old 2020-04-30 18:53:59.860922569 +0200 +++ /var/tmp/diff_new_pack.iZ0qtx/_new 2020-04-30 18:53:59.860922569 +0200 @@ -1,4 +1,4 @@ -server.modules += ("alias") +server.modules += ("mod_alias") alias.url += ( - "/.well-known/acme-challenge/" => "@CHALLENGEDIR@", + "/.well-known/acme-challenge/" => "@CHALLENGEDIR@/", )

1 0

commit openscap for openSUSE:Leap:15.2
by root 30 Apr '20

30 Apr '20

Hello community, here is the log from the commit of package openscap for openSUSE:Leap:15.2 checked in at 2020-04-30 18:53:07 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Leap:15.2/openscap (Old) and /work/SRC/openSUSE:Leap:15.2/.openscap.new.2738 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "openscap" Thu Apr 30 18:53:07 2020 rev:33 rq:799261 version:1.3.2 Changes: -------- --- /work/SRC/openSUSE:Leap:15.2/openscap/openscap.changes 2020-01-15 15:37:04.731013117 +0100 +++ /work/SRC/openSUSE:Leap:15.2/.openscap.new.2738/openscap.changes 2020-04-30 18:53:57.956918547 +0200 @@ -1,0 +2,83 @@ +Wed Mar 25 13:53:51 UTC 2020 - Christophe Giboudeaux <christophe(a)krop.fr> + +- Add upstream patch to fix the scap-workbench build: + * 0001-Do-not-use-C-keyword-operator-as-a-function-paramete.patch + +------------------------------------------------------------------- +Tue Jan 14 13:43:11 UTC 2020 - Marcus Meissner <meissner(a)suse.com> + +- switch back to official release +- openscap 1.3.2 + - the test suite and build scripts were improved to support Debian 10 + - offline mode has received some love with a set of dedicated tests and various fixes in OVAL probes; + - the oscap-docker wrapper is no longer dependent on Atomic + - Python binding are now more robust + - HTML reports and guides, generated by the scanner, are now more accessible for non-visual rendering agents + - Support of multi-check rules has been improved across the whole workflow + + There are other changes as well, here is the list: + * New features + - Offline mode support for environmentvariable58 probe + - The oscap-docker wrapper is available without Atomic + + + Maintenance, bug fixes + - Improved support of multi-check rules (report, remediations, console output) + - Improved HTML report look and feel, including printed version + - Less clutter in verbose mode output; some warnings and errors demoted to verbose mode levels + - Probe rpmverifyfile uses and returns canonical paths + - Improved a11y of HTML reports and guides + - Fixes and improvements for SWIG Python bindings + - #1403 fixed: Scanner would not apply remediation for multicheck rules (verbosity) + - Fixed URL link mechanism for Red Hat Errata + - New STIG Viewer URI: public.cyber.mil + - Probe selinuxsecuritycontext would not check if SELinux is enabled + - Scanner would provide information about unsupported OVAL objects + - Added more tests for offline mode (probes, remediation) + - #528 fixed: Eval SCE script when /tmp is in mode noexec + - #1173, RHBZ#1603347 fixed: Double chdir/chroot in probe rpmverifypackage + +------------------------------------------------------------------- +Sat Jan 11 17:24:21 UTC 2020 - Marcus Meissner <meissner(a)suse.com> + +- temporary openscap 1.3.1 git snapshot + - make it build with new RPM (bsc#1160720) + +------------------------------------------------------------------- +Sat Jan 11 09:01:49 UTC 2020 - Marcus Meissner <meissner(a)suse.com> + +- use distribution-release instead of dummy-release + +------------------------------------------------------------------- +Thu Jun 13 14:22:06 UTC 2019 - Robert Frohl <rfrohl(a)suse.com> + +- openscap 1.3.1 + - New features + - Support for SCAP 1.3 Source Datastreams (evaluating, XML schemas, validation) + - Introduced `oscap-podman` -- a tool for SCAP evaluation of Podman images and containers + - Tailoring files are included in ARF result files + - OVAL details are always shown in HTML report, users do not have to provide `--oval-results` on command line + - HTML report displays OVAL test details also for OVAL tests included from other OVAL definitions using `extend_definition` + - OVAL test IDs are shown in HTML report - Rule IDs are shown in HTML guide + - Added `block_size` in Linux `partition_state` defined in OVAL 5.11.2 + - Added `oscap_wrapper` that can be used to comfortably execute custom compiled oscap tool + - Maintenance and bug fixes + for a complete list please see https://github.com/OpenSCAP/openscap/releases/tag/1.3.1 +- removed patches accepted upstream: + rpmverifyfile_unittest.patch rpmverify_unittest.patch sysctl_unittest.patch + test_probes_rpmverifypackage-disable-epoch-test.patch xinetd_probe.patch + +------------------------------------------------------------------- +Tue Mar 26 13:55:18 UTC 2019 - Robert Frohl <rfrohl(a)suse.com> + +- obsolete removed packages: openscap-engine-sce and openscap-extra-probes + +------------------------------------------------------------------- +Mon Mar 25 18:54:37 UTC 2019 - Bjørn Lie <bjorn.lie(a)gmail.com> + +- Drop gconf2-devel BuildRequires: It is not mandatory, so lets + build without this obsolete package. +- Add pkgconfig(glib-2.0) and pkgconfig(gobject-2.0) BuildRequires: + They are also optional, but not obsolete, and previously pulled + in via gconf2-devel dependency, so lets build support for them. + +------------------------------------------------------------------- Old: ---- 1.3.0.tar.gz rpmverify_unittest.patch rpmverifyfile_unittest.patch sysctl_unittest.patch test_probes_rpmverifypackage-disable-epoch-test.patch xinetd_probe.patch New: ---- 0001-Do-not-use-C-keyword-operator-as-a-function-paramete.patch 1.3.2.tar.gz _service ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ openscap.spec ++++++ --- /var/tmp/diff_new_pack.DEtgvZ/_old 2020-04-30 18:53:58.760920246 +0200 +++ /var/tmp/diff_new_pack.DEtgvZ/_new 2020-04-30 18:53:58.764920254 +0200 @@ -1,7 +1,7 @@ # # spec file for package openscap # -# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2020 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -12,7 +12,7 @@ # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. -# Please submit bugfixes or comments via http://bugs.opensuse.org/ +# Please submit bugfixes or comments via https://bugs.opensuse.org/ # @@ -25,25 +25,23 @@ %define with_bindings 0 Name: openscap -Version: 1.3.0 -Release: 1.0 +Version: 1.3.2 +Release: 0 Source: https://github.com/OpenSCAP/openscap/archive/%{version}.tar.gz +# temp snapshot to make it build with new RPM before 1.3.2 +#Source: openscap-%version.tar.bz2 Source1: openscap-rpmlintrc Source2: sysconfig.oscap-scan -# SUSE specific profile, based on yast2-security -# checks. +# SUSE specific profile, based on yast2-security checks. # Generated from http://gitorious.org/test-suite/scap Source3: scap-yast2sec-xccdf.xml Source4: scap-yast2sec-oval.xml Source5: oscap-scan.service Source6: oscap-scan.sh Patch0: openscap-new-suse.patch -Patch1: xinetd_probe.patch -Patch2: test_probes_rpmverifypackage-disable-epoch-test.patch -Patch3: sysctl_unittest.patch -Patch4: rpmverifyfile_unittest.patch -Patch5: rpmverify_unittest.patch -Url: http://www.open-scap.org/ +# PATCH-FIX-UPSTREAM +Patch1: 0001-Do-not-use-C-keyword-operator-as-a-function-paramete.patch +Url: https://www.open-scap.org/ BuildRoot: %{_tmppath}/%{name}-%{version}-build BuildRequires: asciidoc BuildRequires: doxygen @@ -51,7 +49,7 @@ %if !0%{?is_opensuse} && 0%{?sle_version} < 130000 BuildRequires: sles-release %else -BuildRequires: dummy-release +BuildRequires: distribution-release %endif BuildRequires: libacl-devel BuildRequires: libattr-devel @@ -62,7 +60,6 @@ # Use package name cause of "have choice for perl(XML::Parser): brp-check-suse perl-XML-Parser" BuildRequires: cmake BuildRequires: gcc-c++ -BuildRequires: gconf2-devel BuildRequires: libblkid-devel BuildRequires: libcap-devel BuildRequires: libselinux-devel @@ -81,10 +78,15 @@ BuildRequires: sendmail BuildRequires: swig BuildRequires: unixODBC-devel +BuildRequires: pkgconfig(glib-2.0) +BuildRequires: pkgconfig(gobject-2.0) Summary: A Set of Libraries for Integration with SCAP License: LGPL-2.1-or-later Group: Development/Tools/Other BuildRequires: systemd-rpm-macros +# remove extra packages from version 1.2.9 and older +Obsoletes: openscap-engine-sce < %{version} +Obsoletes: openscap-extra-probes < %{version} %description OpenSCAP is a set of open source libraries providing an easier path for @@ -173,10 +175,6 @@ %setup -q %patch0 -p1 %patch1 -p1 -%patch2 -p1 -%patch3 -p1 -%patch4 -p1 -%patch5 -p1 %build %if 0%{?with_bindings} @@ -296,6 +294,8 @@ %{_bindir}/oscap-ssh %{_bindir}/oscap-chroot %{_bindir}/scap-as-rpm +%{_bindir}/oscap-podman +%{_bindir}/oscap-run-sce-script %{_sbindir}/rcoscap-scan %{_datadir}/bash-completion/completions/* ++++++ 0001-Do-not-use-C-keyword-operator-as-a-function-paramete.patch ++++++ >From 0ba7c9423f64a88ceef50318f1a382059484f737 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jan=20=C4=8Cern=C3=BD?= <jcerny(a)redhat.com> Date: Wed, 15 Jan 2020 13:54:45 +0100 Subject: [PATCH] Do not use C++ keyword operator as a function parameter name MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This fixes SCAP Workbench build. Addressing: [ 37%] Building CXX object CMakeFiles/scap-workbench.dir/scap-workbench_autogen/mocs_compilation.cpp.o In file included from /usr/local/include/openscap/xccdf_policy.h:39, from /home/jcerny/work/git/scap-workbench/include/TailoringDockWidgets.h:31, from /home/jcerny/work/git/scap-workbench/build/scap-workbench_autogen/6YEA5652QU/moc_TailoringDockWidgets.cpp:10, from /home/jcerny/work/git/scap-workbench/build/scap-workbench_autogen/mocs_compilation.cpp:18: /usr/local/include/openscap/oval_definitions.h:1676:117: error: declaration of ‘operator,’ as parameter 1676 | restriction *oval_variable_possible_restriction_new(oval_operator_t operator, const char *hint); | ^ Fixes: #1462 --- src/OVAL/public/oval_definitions.h | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/OVAL/public/oval_definitions.h b/src/OVAL/public/oval_definitions.h index ea9d3aaf8..b5fe77154 100644 --- a/src/OVAL/public/oval_definitions.h +++ b/src/OVAL/public/oval_definitions.h @@ -1669,7 +1669,7 @@ OSCAP_API void oval_variable_possible_value_iterator_free(struct oval_variable_p * @param hint A short description of what the value means or represents. * @memberof oval_variable_possible_restriction */ -OSCAP_API struct oval_variable_possible_restriction *oval_variable_possible_restriction_new(oval_operator_t operator, const char *hint); +OSCAP_API struct oval_variable_possible_restriction *oval_variable_possible_restriction_new(oval_operator_t, const char *); /** -- 2.25.1 ++++++ 1.3.0.tar.gz -> 1.3.2.tar.gz ++++++ /work/SRC/openSUSE:Leap:15.2/openscap/1.3.0.tar.gz /work/SRC/openSUSE:Leap:15.2/.openscap.new.2738/1.3.2.tar.gz differ: char 12, line 1 ++++++ _service ++++++ <services> <service name="tar_scm" mode="disabled"> <param name="url">https://github.com/openscap/openscap.git</param> <param name="scm">git</param> <param name="revision">maint-1.3</param> <param name="versionformat">@PARENT_TAG@+git.%cd</param> </service> <service name="recompress" mode="disabled"> <param name="file">*.tar</param> <param name="compression">bz2</param> </service> <service mode="disabled" name="set_version"/> </services>

1 0