-
Notifications
You must be signed in to change notification settings - Fork 23
/
apel-ssm.spec
211 lines (165 loc) · 7.97 KB
/
apel-ssm.spec
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
# Conditionally define python_sitelib
%if ! (0%{?fedora} > 12 || 0%{?rhel} > 5)
%{!?python_sitelib: %global python_sitelib %(%{__python} -c "from distutils.sysconfig import get_python_lib; print(get_python_lib())")}
%endif
Name: apel-ssm
Version: 2.4.0
%define releasenumber 1
Release: %{releasenumber}%{?dist}
Summary: Secure stomp messenger
Group: Development/Languages
License: ASL 2.0
URL: https://wiki.egi.eu/wiki/APEL/SSM
Source: %{name}-%{version}-%{releasenumber}.tar.gz
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
BuildArch: noarch
# Build requirement for non fedora-packager systems (CentOS).
%if ! (0%{?fedora} > 12 || 0%{?rhel} > 5)
BuildRequires: python-devel
%endif
Requires: stomppy >= 3.1.1, python-daemon < 2.2.0, python-ldap, argo-ams-library
Requires(pre): shadow-utils
%define ssmconf %_sysconfdir/apel
%description
The SSM is designed to give a reliable message transfer mechanism
using the STOMP protocol. Messages are signed using the sender's
host certificate, and can optionally be encrypted. This package
can act as either a sender or receiver.
The SSM is written in python.
%prep
%setup -q -n %{name}-%{version}-%{releasenumber}
%build
%install
rm -rf $RPM_BUILD_ROOT
# Create directories
mkdir -p %{buildroot}%{ssmconf}
mkdir -p %{buildroot}%{python_sitelib}
mkdir -p %{buildroot}%_bindir
mkdir -p %{buildroot}%{_sysconfdir}/logrotate.d
mkdir -p %{buildroot}%{_initrddir}
mkdir -p %{buildroot}%_defaultdocdir
# Directories for messages, logs, PID files
mkdir -p %{buildroot}%{_localstatedir}/spool/apel
mkdir -p %{buildroot}%{_localstatedir}/log/apel
mkdir -p %{buildroot}%{_localstatedir}/run/apel
# Scripts
cp -rp bin/sender.py %{buildroot}%_bindir/ssmsend
cp -rp bin/receiver.py %{buildroot}%_bindir/ssmreceive
cp -rp bin/apel-ssm %{buildroot}%{_initrddir}
# Copy SSM files
cp -rp conf/sender.cfg %{buildroot}%{ssmconf}
cp -rp conf/receiver.cfg %{buildroot}%{ssmconf}
cp -rp conf/dns %{buildroot}%{ssmconf}
cp -rp ssm %{buildroot}%{python_sitelib}
cp -rp scripts/apel-ssm.logrotate %{buildroot}%{_sysconfdir}/logrotate.d/apel-ssm
# Readme
cp -rp README.md %{buildroot}%_defaultdocdir/%{name}
%clean
rm -rf $RPM_BUILD_ROOT
%post
/sbin/chkconfig apel-ssm on
%preun
/sbin/service apel-ssm stop
/sbin/chkconfig apel-ssm off
%files
%defattr(-,root,root,-)
# SSM software itself
%attr(755,root,root) %_bindir/ssmsend
%attr(755,root,root) %_bindir/ssmreceive
%attr(755,root,root) %{_initrddir}/apel-ssm
%{python_sitelib}/ssm
# Directories for messages, logs, PID files
%dir %{_localstatedir}/spool/apel
%dir %{_localstatedir}/log/apel
%dir %{_localstatedir}/run/apel
%config(noreplace) %{ssmconf}/sender.cfg
%config(noreplace) %{ssmconf}/receiver.cfg
%config(noreplace) %{ssmconf}/dns
# logrotate
%config(noreplace) %{_sysconfdir}/logrotate.d/%{name}
%doc %_defaultdocdir/%{name}
%changelog
* Thu Aug 01 2019 Adrian Coveney <adrian.coveney@stfc.ac.uk> - 2.4.0-1
- Added support for sending and receiving messages using the ARGO Messaging
Service (AMS).
- Added option to send messages from a directory without needing to conform to
the file naming convention that the dirq module requires.
- Fixed SSM hanging if certificate is not authorised with the broker. Now it
will try other brokers if available and then correctly shut down.
- Fixed an OpenSSL 1.1 syntax error by including missing argument to checkend.
* Wed Nov 28 2018 Adrian Coveney <adrian.coveney@stfc.ac.uk> - 2.3.0-2
- Updated build and test files only.
* Wed Aug 16 2018 Adrian Coveney <adrian.coveney@stfc.ac.uk> - 2.3.0-1
- Added support for stomp.py versions from 3.1.6 onwards which allows for
builds on Ubuntu Trusty and should enable IPv6 support.
- Added script for creating Ubuntu (.deb) builds.
- Added script for creating Docker container builds.
* Mon May 14 2018 Adrian Coveney <adrian.coveney@stfc.ac.uk> - 2.2.1-1
- Added a check that the server certificate used for encryption hasn't expired
so that a sending SSM won't start with an out of date server certificate.
- Improved error handling for received messages so that more useful debugging
information in obtained.
* Thu Nov 16 2017 Adrian Coveney <adrian.coveney@stfc.ac.uk> - 2.2.0-1
- Added a check that certificates have not expired before starting SSM.
- SSL errors now propagated out properly and saved for received messages.
- Trimmed down the number of log messages generated for receivers.
- Added python-devel build requirement for non fedora-packager OSs (CentOS).
* Tue Jan 12 2016 Adrian Coveney <adrian.coveney@stfc.ac.uk> - 2.1.7-1
- Added a delay when receiver is reconnecting to improve reliability.
* Mon Mar 02 2014 Adrian Coveney <adrian.coveney@stfc.ac.uk> - 2.1.6-1
- Improved the log output for SSM receivers so that there are fewer trivial
entries and so it's more useful in tracking messages on the filesystem.
* Fri Nov 28 2014 Adrian Coveney <adrian.coveney@stfc.ac.uk> - 2.1.5-1
- (No changes from pre-release version.)
* Fri Nov 28 2014 Adrian Coveney <adrian.coveney@stfc.ac.uk> - 2.1.5-0.4.rc4
- Corrected namespace of overridden variable (to enable SSL/TLS changes).
* Fri Nov 28 2014 Adrian Coveney <adrian.coveney@stfc.ac.uk> - 2.1.5-0.3.rc3
- Removed python-ssl as a dependency as it can be option in some contexts.
- Made it possible for old versions of stomp.py (3.0.3 and lower) to use
SSL/TLS versions that aren't SSL 3.0.
* Thu Nov 27 2014 Adrian Coveney <adrian.coveney@stfc.ac.uk> - 2.1.5-0.2.rc2
- Added a warning for old versions of stomp.py (3.0.3 and lower) that are
limited to using SSL 3.0 for secure connections.
* Tue Nov 25 2014 Adrian Coveney <adrian.coveney@stfc.ac.uk> - 2.1.5-0.1.rc1
- The highest version of SSL/TLS available is now used (previously only SSLv3).
- Added python-ssl as a dependency (SL5/EL5 only).
- Minor tweaks made to logging calls and the logging level of certain messages.
* Fri Aug 08 2014 Adrian Coveney <adrian.coveney@stfc.ac.uk> - 2.1.4-1
- Corrected version number used in Python code.
* Mon Jul 21 2014 Adrian Coveney <adrian.coveney@stfc.ac.uk> - 2.1.3-1
- (No changes from pre-release version.)
* Thu Jul 17 2014 Adrian Coveney <adrian.coveney@stfc.ac.uk> - 2.1.3-0.2.alpha1
- RPM now enforces the use of stomppy < 4.0.0 as versions greater than this are
currently incompatible with SSM.
- Changes made to disconnection method which should prevent threading
exceptions (mostly during shutdown).
* Mon Jun 02 2014 Adrian Coveney <adrian.coveney@stfc.ac.uk> - 2.1.2-0
- The output of brokers.py has been improved so that it can be used to query
the BDII for valid brokers.
- The outgoing message directory will now be regularly cleared of empty
directories and locked messages will be unlocked after five minutes.
* Wed Oct 30 2013 Adrian Coveney <adrian.coveney@stfc.ac.uk> - 2.1.1-0
- Reduced impact on message brokers of sending pings to refresh the connection.
- Improved lost connection behaviour.
* Tue Apr 16 2013 Will Rogers <will.rogers@stfc.ac.uk> - 2.1.0-0
- Verify any certificate supplied for encrypting messages
against the CA path
- Receiver can check CRLs on certificates
* Wed Feb 27 2013 Will Rogers <will.rogers@stfc.ac.uk> - 2.0.3-0
- Add support for messages signed with quopri or base64
content-transfer-encoding (for UNICORE).
* Tue Feb 26 2013 Will Rogers <will.rogers@stfc.ac.uk> - 2.0.2-0
- Fix SSL connection for receiver
* Fri Feb 8 2013 Will Rogers <will.rogers@stfc.ac.uk> - 2.0.1-0
- Fix crash when receiver sends ping message
* Sat Jan 26 2013 Will Rogers <will.rogers@stfc.ac.uk> - 2.0.0-0
- Fix SSL connection option
- First release of SSM2
* Fri Jan 25 2013 Will Rogers <will.rogers@stfc.ac.uk> - 0.0.4-0
- Sensible defaults for release
* Fri Jan 11 2013 Will Rogers <will.rogers@stfc.ac.uk> - 0.0.3-0
- Changed rpm name to apel-ssm
* Thu Jan 03 2013 Will Rogers <will.rogers@stfc.ac.uk> - 0.0.2-0
- Fixed connection freeze
* Fri Oct 02 2012 Will Rogers <will.rogers@stfc.ac.uk> - 0.0.1-0
- First tag