Login
[x]
Log in using an account from:
Fedora Account System
Red Hat Associate
Red Hat Customer
Or login using a Red Hat Bugzilla account
Forgot Password
Login:
Hide Forgot
Create an Account
Red Hat Bugzilla – Attachment 157953 Details for
Bug 186469
pkcs11 / smartcard support for openssh
[?]
New
Simple Search
Advanced Search
My Links
Browse
Requests
Reports
Current State
Search
Tabular reports
Graphical reports
Duplicates
Other Reports
User Changes
Plotly Reports
Bug Status
Bug Severity
Non-Defaults
|
Product Dashboard
Help
Page Help!
Bug Writing Guidelines
What's new
Browser Support Policy
5.0.4.rh83 Release notes
FAQ
Guides index
User guide
Web Services
Contact
Legal
This site requires JavaScript to be enabled to function correctly, please enable it.
A script to put the attached patches together with the SRPMs until a Fedora person does it right.
Buildssh.sh (text/plain), 3.99 KB, created by
Todd Denniston
on 2007-06-26 20:30:01 UTC
(
hide
)
Description:
A script to put the attached patches together with the SRPMs until a Fedora person does it right.
Filename:
MIME Type:
Creator:
Todd Denniston
Created:
2007-06-26 20:30:01 UTC
Size:
3.99 KB
patch
obsolete
># -*- ksh -*- #make this script use ksh syntax mode in XEmacs. >#purpose: build up ssh on FC7 system to use with pkcs11 connected smart cards. > > >PATCH_CONTAINER=/$HOME/patches/ > >#if we are building as someone other than root make sure we can do so. >if grep "_topdir" $HOME/.rpmmacros >> /dev/null >then > TOPDIR=`grep "_topdir" $HOME/.rpmmacros|awk '{print $2}'` > #make sure it is minimally populated. > for i in BUILD RPMS SOURCES SPECS SRPMS > do > mkdir -v -p $TOPDIR/$i > done > for i in athlon i386 i586 i686 noarch > do > mkdir -v -p $TOPDIR/RPMS/$i > done >else > TOPDIR=/usr/src/redhat/ >fi > >if ! [ -w $TOPDIR ] >then > echo "for some reason this script does not have access to write to" > echo " $TOPDIR" > echo "you should either remove the check from the script, or " > echo "fix the reson the script can not write there." > exit 1 >fi > >## >##Get the other source files needed. >## >cd $TOPDIR/SOURCES >if ! [ -e pkcs11-helper-1.03.tar.bz2 ] >then > wget --progress=dot \ > http://www.opensc-project.org/files/pkcs11-helper/pkcs11-helper-1.03.tar.bz2 >fi >if ! [ -e openssh-4.5p1pkcs11-0.19.patch.bz2 ] >then > wget --progress=dot \ > http://alon.barlev.googlepages.com/openssh-4.5p1pkcs11-0.19.patch.bz2 >fi > > >cd $TOPDIR/SRPMS >if ! [ -e openssh-4.5p1-6.fc7.src.rpm ] >then > wget --progress=dot http://download.fedora.redhat.com/pub/fedora/linux/releases/7/Fedora/source/SRPMS/openssh-4.5p1-6.fc7.src.rpm >fi > >#prep pkcs11 helper. ># http://www.opensc-project.org/pkcs11-helper/ ># "pkcs11-helper is a library that simplifies the interaction with ># PKCS#11 providers for end-user applications." >cd $TOPDIR/ >tar -xjf $TOPDIR/SOURCES/pkcs11-helper-1.03.tar.bz2 \ > pkcs11-helper-1.03/pkcs11-helper.spec >cd pkcs11-helper-1.03 >#patch is for the pkcs11-helper.spec.in, but it applies cleanly to the spec. >#changes implemented in the patch: ># 1) disable threading (and slotevent because it requires threading) ># because threading breaks in the interaction with CoolKey and the ># DoD CAC. ># 2) there is a COPYING file in the %{_docdir}/%{name} and ># being pedantic, rpm fails because the file exist and is not used. >patch pkcs11-helper.spec < $PATCH_CONTAINER/pkcs11-helper.spec.1.03.patch >cp pkcs11-helper.spec $TOPDIR/SPECS > >#prep openssh >cd $TOPDIR/ >rpm -ivh SRPMS/openssh-4.5p1-6.fc7.src.rpm >cd $TOPDIR/SOURCES ># from http://alon.barlev.googlepages.com/openssh-pkcs11 ># This patch allows openssh to work with smart cards which are connected ># through a pkcs11 library. >bunzip2 -c openssh-4.5p1pkcs11-0.19.patch.bz2 > openssh-4.5p1pkcs11-0.19.patch >#The patch to the patch, is so that it will integrate with the changes >#that Red Hat made to the configure.ac file. >patch openssh-4.5p1pkcs11-0.19.patch < \ > $PATCH_CONTAINER/openssh-4.5p1pkcs11-0.19.patch.FC7.patch > ># patch to Fedora's openssh.spec ># reasons: ># 1) configure to build with --with-pkcs11 . ># 2) apply patch to the source code. ># 3) change the name of the rpm (this portion could/should be dropped, ># it was only to reduce confusion on my system.) ># 4) place info in the clients rpm indicating this version ># was built to work with pkcs11 connected cards. ># (note for some reason it never seemed this info was placed in the RPM.) ># 5) make a notation in the change log of what the patch does. >cd $TOPDIR/SPECS >patch openssh.spec < $PATCH_CONTAINER/openssh.spec.patch > >#build >cd $TOPDIR/ >rpmbuild -bb $TOPDIR/SPECS/pkcs11-helper.spec >#need to install pkcs11-helper before building openssh. >if [ "$UID" == "0" ] >then > rpm -Uvh $TOPDIR/RPMS/i386/pkcs11-helper-* >fi > >if rpm -qa |grep pkcs11-helper >then > rpmbuild -bb $TOPDIR/SPECS/openssh.spec >else > echo "you need to install $TOPDIR/RPMS/i386/pkcs11-helper-* before" > echo "you can get openssh to build, i.e., issue" > echo "rpm -Uvh $TOPDIR/RPMS/i386/pkcs11-helper-* ;" > echo "rpmbuild -bb $TOPDIR/SPECS/openssh.spec" >fi > >rpm -Uvh $TOPDIR/RPMS/i386/openssh* > ># LocalWords: CoolKey ksh pkcs topdir rpmmacros awk RPMS SRPMS mkdir athlon ># LocalWords: noarch cd wget xjf slotevent DoD CAC docdir cp openssh bunzip ># LocalWords: rpmbuild
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Actions:
View
Attachments on
bug 186469
:
157950
|
157951
|
157952
| 157953 |
157954
|
157955