cubicweb.spec
author Laurent Peuch <cortex@worlddomination.be>
Fri, 12 Apr 2019 12:31:14 +0200
changeset 12584 6eba53763482
parent 12567 26744ad37953
permissions -rw-r--r--
Use secure hash algorithm in WebConfiguration.sign_text Fix: PendingDeprecationWarning: HMAC() without an explicit digestmod argument is deprecated. The default hash algorithm used by hmac.new is md5. As of today, md5 is so weak that it's the equivalent of plaintext and can't be considered to be secured at all. Therefor, we switch to a secure hash algorithm. The rational for choosing sha3_512 is: * the recommended algorithm is at least sha_256 * the stronger, the more secured and sha3_512 is the stronger available * thinking about the future this should keep this part of the code safe long enough before people think about checking it again You can read more about choosing a secure hash algorithm in the NIST recommendations https://csrc.nist.gov/Projects/Hash-Functions/NIST-Policy-on-Hash-Functions This code modification should normally be transparent since check_text_sign is exactly this code 'self.sign_text(text) == signature' and that sign_text is only used in combination with it. The only impact is that the hash is going to move from 32 char to 128 which might make html page a bit bigger and that sha3_512 is slow to compute (which is a good thing for security)
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
8873
280c32415059 [packaging] add spec file to build RPMs (closes #2800850)
Julien Cristau <julien.cristau@logilab.fr>
parents:
diff changeset
     1
%if 0%{?el5}
280c32415059 [packaging] add spec file to build RPMs (closes #2800850)
Julien Cristau <julien.cristau@logilab.fr>
parents:
diff changeset
     2
%define python python26
280c32415059 [packaging] add spec file to build RPMs (closes #2800850)
Julien Cristau <julien.cristau@logilab.fr>
parents:
diff changeset
     3
%define __python /usr/bin/python2.6
280c32415059 [packaging] add spec file to build RPMs (closes #2800850)
Julien Cristau <julien.cristau@logilab.fr>
parents:
diff changeset
     4
%else
280c32415059 [packaging] add spec file to build RPMs (closes #2800850)
Julien Cristau <julien.cristau@logilab.fr>
parents:
diff changeset
     5
%define python python
280c32415059 [packaging] add spec file to build RPMs (closes #2800850)
Julien Cristau <julien.cristau@logilab.fr>
parents:
diff changeset
     6
%define __python /usr/bin/python
280c32415059 [packaging] add spec file to build RPMs (closes #2800850)
Julien Cristau <julien.cristau@logilab.fr>
parents:
diff changeset
     7
%endif
11111
606d4fea99f5 [pkg] Attempt to fix rhel6 build
Julien Cristau <julien.cristau@logilab.fr>
parents: 11105
diff changeset
     8
%{!?python_sitelib: %define python_sitelib %(%{__python} -c "from distutils.sysconfig import get_python_lib; print get_python_lib()")}
8873
280c32415059 [packaging] add spec file to build RPMs (closes #2800850)
Julien Cristau <julien.cristau@logilab.fr>
parents:
diff changeset
     9
280c32415059 [packaging] add spec file to build RPMs (closes #2800850)
Julien Cristau <julien.cristau@logilab.fr>
parents:
diff changeset
    10
Name:           cubicweb
12325
e1c1af68db86 [pkg] Version 3.26.4
Denis Laxalde <denis.laxalde@logilab.fr>
parents: 12292
diff changeset
    11
Version:        3.26.4
8873
280c32415059 [packaging] add spec file to build RPMs (closes #2800850)
Julien Cristau <julien.cristau@logilab.fr>
parents:
diff changeset
    12
Release:        logilab.1%{?dist}
280c32415059 [packaging] add spec file to build RPMs (closes #2800850)
Julien Cristau <julien.cristau@logilab.fr>
parents:
diff changeset
    13
Summary:        CubicWeb is a semantic web application framework
11134
fd905f9aaace [pkg] use https URLs to pypi.{python.org,debian.net}
Julien Cristau <julien.cristau@logilab.fr>
parents: 11133
diff changeset
    14
Source0:        https://pypi.python.org/packages/source/c/cubicweb/cubicweb-%{version}.tar.gz
8873
280c32415059 [packaging] add spec file to build RPMs (closes #2800850)
Julien Cristau <julien.cristau@logilab.fr>
parents:
diff changeset
    15
License:        LGPLv2+
280c32415059 [packaging] add spec file to build RPMs (closes #2800850)
Julien Cristau <julien.cristau@logilab.fr>
parents:
diff changeset
    16
Group:          Development/Languages/Python
280c32415059 [packaging] add spec file to build RPMs (closes #2800850)
Julien Cristau <julien.cristau@logilab.fr>
parents:
diff changeset
    17
Vendor:         Logilab <contact@logilab.fr>
11133
9e955d8be8a9 [pkg] use https URL for www.cubicweb.org
Julien Cristau <julien.cristau@logilab.fr>
parents: 11127
diff changeset
    18
Url:            https://www.cubicweb.org/project/cubicweb
8873
280c32415059 [packaging] add spec file to build RPMs (closes #2800850)
Julien Cristau <julien.cristau@logilab.fr>
parents:
diff changeset
    19
280c32415059 [packaging] add spec file to build RPMs (closes #2800850)
Julien Cristau <julien.cristau@logilab.fr>
parents:
diff changeset
    20
BuildRoot:      %{_tmppath}/%{name}-%{version}-%{release}-buildroot
280c32415059 [packaging] add spec file to build RPMs (closes #2800850)
Julien Cristau <julien.cristau@logilab.fr>
parents:
diff changeset
    21
BuildArch:      noarch
280c32415059 [packaging] add spec file to build RPMs (closes #2800850)
Julien Cristau <julien.cristau@logilab.fr>
parents:
diff changeset
    22
280c32415059 [packaging] add spec file to build RPMs (closes #2800850)
Julien Cristau <julien.cristau@logilab.fr>
parents:
diff changeset
    23
Requires:       %{python}
12069
82f7d583e5a3 [pkg] Depends on logilab-common >= 1.4.0
Denis Laxalde <denis.laxalde@logilab.fr>
parents: 12068
diff changeset
    24
Requires:       %{python}-logilab-common >= 1.4.0
8873
280c32415059 [packaging] add spec file to build RPMs (closes #2800850)
Julien Cristau <julien.cristau@logilab.fr>
parents:
diff changeset
    25
Requires:       %{python}-logilab-mtconverter >= 0.8.0
11051
de472896fc0a [pkg] 3.22.0
Julien Cristau <julien.cristau@logilab.fr>
parents: 11036
diff changeset
    26
Requires:       %{python}-rql >= 0.34.0
12070
a44f67dd0474 [pkg] Depends on yams >= 0.45.0
Denis Laxalde <denis.laxalde@logilab.fr>
parents: 12069
diff changeset
    27
Requires:       %{python}-yams >= 0.45.0
11036
d7294e144cd2 [pkg] use correct lgdb version for tz rework
Rémi Cardona <remi.cardona@logilab.fr>
parents: 11034
diff changeset
    28
Requires:       %{python}-logilab-database >= 1.15.0
12193
e4ee04d442be [server/utils] update passlib API to 1.7 (closes #17054805)
David Douard <david.douard@logilab.fr>
parents: 12190
diff changeset
    29
Requires:       %{python}-passlib
8873
280c32415059 [packaging] add spec file to build RPMs (closes #2800850)
Julien Cristau <julien.cristau@logilab.fr>
parents:
diff changeset
    30
Requires:       %{python}-lxml
10012
8c2c6fdd8d56 [RichString] Add markdown support
Christophe de Vienne <christophe@unlish.com>
parents: 10000
diff changeset
    31
Requires:       %{python}-markdown
11074
76d06973776e [pkg] python-tz does not exist in centos should be pytz (closes #10290056)
Samuel Trégouët <samuel.tregouet@logilab.fr>
parents: 11051
diff changeset
    32
Requires:       pytz
8873
280c32415059 [packaging] add spec file to build RPMs (closes #2800850)
Julien Cristau <julien.cristau@logilab.fr>
parents:
diff changeset
    33
# the schema view uses `dot'; at least on el5, png output requires graphviz-gd
280c32415059 [packaging] add spec file to build RPMs (closes #2800850)
Julien Cristau <julien.cristau@logilab.fr>
parents:
diff changeset
    34
Requires:       graphviz-gd
280c32415059 [packaging] add spec file to build RPMs (closes #2800850)
Julien Cristau <julien.cristau@logilab.fr>
parents:
diff changeset
    35
Requires:       gettext
280c32415059 [packaging] add spec file to build RPMs (closes #2800850)
Julien Cristau <julien.cristau@logilab.fr>
parents:
diff changeset
    36
280c32415059 [packaging] add spec file to build RPMs (closes #2800850)
Julien Cristau <julien.cristau@logilab.fr>
parents:
diff changeset
    37
BuildRequires:  %{python}
11796
254edb0f8b33 [pkg] Add setuptools to RPM build requirements
Denis Laxalde <denis.laxalde@logilab.fr>
parents: 11795
diff changeset
    38
BuildRequires:  %{python}-setuptools
8873
280c32415059 [packaging] add spec file to build RPMs (closes #2800850)
Julien Cristau <julien.cristau@logilab.fr>
parents:
diff changeset
    39
280c32415059 [packaging] add spec file to build RPMs (closes #2800850)
Julien Cristau <julien.cristau@logilab.fr>
parents:
diff changeset
    40
%description
280c32415059 [packaging] add spec file to build RPMs (closes #2800850)
Julien Cristau <julien.cristau@logilab.fr>
parents:
diff changeset
    41
a repository of entities / relations for knowledge management
280c32415059 [packaging] add spec file to build RPMs (closes #2800850)
Julien Cristau <julien.cristau@logilab.fr>
parents:
diff changeset
    42
280c32415059 [packaging] add spec file to build RPMs (closes #2800850)
Julien Cristau <julien.cristau@logilab.fr>
parents:
diff changeset
    43
%prep
280c32415059 [packaging] add spec file to build RPMs (closes #2800850)
Julien Cristau <julien.cristau@logilab.fr>
parents:
diff changeset
    44
%setup -q
280c32415059 [packaging] add spec file to build RPMs (closes #2800850)
Julien Cristau <julien.cristau@logilab.fr>
parents:
diff changeset
    45
%if 0%{?el5}
280c32415059 [packaging] add spec file to build RPMs (closes #2800850)
Julien Cristau <julien.cristau@logilab.fr>
parents:
diff changeset
    46
# change the python version in shebangs
280c32415059 [packaging] add spec file to build RPMs (closes #2800850)
Julien Cristau <julien.cristau@logilab.fr>
parents:
diff changeset
    47
find . -name '*.py' -type f -print0 |  xargs -0 sed -i '1,3s;^#!.*python.*$;#! /usr/bin/python2.6;'
280c32415059 [packaging] add spec file to build RPMs (closes #2800850)
Julien Cristau <julien.cristau@logilab.fr>
parents:
diff changeset
    48
%endif
280c32415059 [packaging] add spec file to build RPMs (closes #2800850)
Julien Cristau <julien.cristau@logilab.fr>
parents:
diff changeset
    49
280c32415059 [packaging] add spec file to build RPMs (closes #2800850)
Julien Cristau <julien.cristau@logilab.fr>
parents:
diff changeset
    50
%install
11424
1451f040555f [pkg] Drop NO_SETUPTOOLS option
Denis Laxalde <denis.laxalde@logilab.fr>
parents: 11395
diff changeset
    51
%{__python} setup.py --quiet install --no-compile --prefix=%{_prefix} --root="$RPM_BUILD_ROOT"
9185
499f9ddc4470 [pkg] Add log directory to rpm
Rémi Cardona <remi.cardona@logilab.fr>
parents: 9000
diff changeset
    52
mkdir -p $RPM_BUILD_ROOT/var/log/cubicweb
8873
280c32415059 [packaging] add spec file to build RPMs (closes #2800850)
Julien Cristau <julien.cristau@logilab.fr>
parents:
diff changeset
    53
280c32415059 [packaging] add spec file to build RPMs (closes #2800850)
Julien Cristau <julien.cristau@logilab.fr>
parents:
diff changeset
    54
%clean
280c32415059 [packaging] add spec file to build RPMs (closes #2800850)
Julien Cristau <julien.cristau@logilab.fr>
parents:
diff changeset
    55
rm -rf $RPM_BUILD_ROOT
280c32415059 [packaging] add spec file to build RPMs (closes #2800850)
Julien Cristau <julien.cristau@logilab.fr>
parents:
diff changeset
    56
280c32415059 [packaging] add spec file to build RPMs (closes #2800850)
Julien Cristau <julien.cristau@logilab.fr>
parents:
diff changeset
    57
%files 
280c32415059 [packaging] add spec file to build RPMs (closes #2800850)
Julien Cristau <julien.cristau@logilab.fr>
parents:
diff changeset
    58
%defattr(-, root, root)
9185
499f9ddc4470 [pkg] Add log directory to rpm
Rémi Cardona <remi.cardona@logilab.fr>
parents: 9000
diff changeset
    59
%dir /var/log/cubicweb
11148
244e30f18720 [pkg] fix centos install
Samuel Trégouët <samuel.tregouet@logilab.fr>
parents: 11134
diff changeset
    60
%{_prefix}/share/cubicweb/*
244e30f18720 [pkg] fix centos install
Samuel Trégouët <samuel.tregouet@logilab.fr>
parents: 11134
diff changeset
    61
%{python_sitelib}/*
244e30f18720 [pkg] fix centos install
Samuel Trégouët <samuel.tregouet@logilab.fr>
parents: 11134
diff changeset
    62
%{_bindir}/*