debian/0000775000000000000000000000000012267121524007172 5ustar debian/libxmlsec1-gcrypt.install0000664000000000000000000000003711745020126014127 0ustar usr/lib/libxmlsec1-gcrypt.so.* debian/copyright0000664000000000000000000000276011744773140011140 0ustar This package was debianized by John V. Belmonte on Tue, 11 Feb 2003 14:58:00 -0500. It was downloaded from ftp://ftp.aleksey.com/pub/xmlsec/releases/ Upstream Author: Aleksey Sanin Copyright (C) 2002 Aleksey Sanin. All Rights Reserved. Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is fur- nished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FIT- NESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE DANIEL VEILLARD BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CON- NECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. Except as contained in this notice, the name of Aleksey Sanin shall not be used in advertising or otherwise to promote the sale, use or other deal- ings in this Software without prior written authorization from him. debian/libxmlsec1-openssl.install0000664000000000000000000000004011744773140014306 0ustar usr/lib/libxmlsec1-openssl.so.* debian/README.Debian0000664000000000000000000000352511744773140011246 0ustar xmlsec and libxmlsec for Debian ------------------------------- The upstream documentation is included with the libxmlsec1-dev package and located at /usr/share/doc/libxmlsec1-dev. When developing with the xmlsec library, you have a choice of openssl, gnutls, or nss crypto engines. By using "pkg-config xmlsec1-" or "xmlsec1-config --crypto=", you can get the necessary compiler command-line switches for enabling a certain engine. If you want to license your application that uses the xmlsec library under the GNU GPL, or want your library that uses the xmlsec library to be GPL- compatible, I suggest using the gnutls engine. Use of the nss crypto engine may also be compatible with the GPL, but see bugs #207024 and #207026. Regarding openssl, there is a bit of controversy about whether it can be considered part of the OS and therefore make use of a loophole in the GPL. (See the xmlsec FAQ in the documentation.) More specifically, debian-legal takes a hard line and does not allow GPL'd packages that link to openssl to exist in main. In the future, support for PGP key types may be added, which would become another reason to go with the gnutls engine. Note that the library has a dynamic crypto engine loading feature, but I have not yet enabled it. Note that a number of the examples included with the -dev package will not compile successfuly under the gnutls engine (due to lack of features compared to openssl), and will fail under both the gnutls and nss engines (due to lack of pem file support, etc.). Upstream has promised that they will increment the number in the library name name (for example, xmlsec1 -> xmlsec2) whenever a binary incompatibility is introduced, and that it will always match the soname number. For this reason I chose to omit the soname number from package names. -- John V. Belmonte debian/libxmlsec1-dev.install0000664000000000000000000000015011744773140013403 0ustar usr/include/* usr/lib/lib*.a usr/lib/lib*.so usr/lib/lib*.la usr/lib/pkgconfig/* usr/bin/xmlsec1-config debian/libxmlsec1-dev.manpages0000664000000000000000000000002511744773140013531 0ustar man/xmlsec1-config.1 debian/libxmlsec1-dev.docs0000664000000000000000000000004711744773140012672 0ustar debian/tmp/usr/share/doc/xmlsec1/html/ debian/libxmlsec1-nss.install0000664000000000000000000000003411744773140013431 0ustar usr/lib/libxmlsec1-nss.so.* debian/libxmlsec1-gnutls.install0000664000000000000000000000003711744773140014145 0ustar usr/lib/libxmlsec1-gnutls.so.* debian/changelog0000664000000000000000000001465012267121515011052 0ustar xmlsec1 (1.2.18-2ubuntu1) trusty; urgency=low * Use dh-autoreconf for newer arches. - Remove obsolete automake directive that caused FTBFS. -- Daniel T Chen Sun, 19 Jan 2014 23:00:02 -0500 xmlsec1 (1.2.18-2) unstable; urgency=low * Add upstream patch which fixes version check utility function (Bug #675513) -- John V. Belmonte Thu, 26 Jul 2012 21:15:41 -0400 xmlsec1 (1.2.18-1) unstable; urgency=low * New upstream release (including CVE-2011-1425, Closes: #604828) * Incorporate NMU for la file removal and hardened build flags * Fix example linker flags (Closes: #647453) * Add build-arch and build-indep targets to rules * Add misc-depends entry to binaries * Confirm Debian standards 3.9.3 * Switch to dpkg-source 3.0 (quilt) format -- John V. Belmonte Sun, 22 Apr 2012 10:32:43 -0400 xmlsec1 (1.2.14-1.3) unstable; urgency=low * Non-maintainer upload. * Enable hardened build flags (Bug #656655) -- Moritz Muehlenhoff Fri, 06 Apr 2012 21:31:59 +0200 xmlsec1 (1.2.14-1.2) unstable; urgency=low * Non-maintainer upload. * Empty dependency_libs in libtool la file. Closes: #610239 http://wiki.debian.org/ReleaseGoals/LAFileRemoval -- Andreas Metzler Sat, 23 Apr 2011 08:53:37 +0200 xmlsec1 (1.2.14-1.1) unstable; urgency=high * Non-maintainer upload by the Security Team. * Apply patch from upstream addressing arbitrary file overwrite (CVE-2011-1425, closes: #620560). -- Thijs Kinkhorst Sat, 09 Apr 2011 17:40:24 +0200 xmlsec1 (1.2.14-1) unstable; urgency=low * New upstream release, fixes CVE-2009-3736 (Closes: #559831) * debian/rules: dh_prep instead of dh_clean -- John V. Belmonte Tue, 08 Dec 2009 21:47:36 -0500 xmlsec1 (1.2.12-1) unstable; urgency=low * New upstream release, fixes CVE-2009-0217 (Closes: #532751, #529918) * Update debian/watch * Upgrade to latest debhelper version * In debian/control: * add Homepage * remove use of ${Source-Version} * In debian/rules: * fix distclean call * $(CURDIR) instead of $(PWD) * remove xulrunner hack since upstream now supports it in configure * strip RPATH's caused by bug in upstream's libtool version * Confirm Debian standards 3.8.3 -- John V. Belmonte Sat, 05 Sep 2009 18:21:58 -0400 xmlsec1 (1.2.9-5) unstable; urgency=low * Remove shlibs.local (Closes: #379445) * Add minimum versions to Build-Depends and -dev Depends -- John V. Belmonte Sun, 30 Jul 2006 22:27:01 -0400 xmlsec1 (1.2.9-4) unstable; urgency=low * Fix gnutls dependency in shlibs.local (Closes: #379390) -- John V. Belmonte Sun, 23 Jul 2006 10:46:53 -0400 xmlsec1 (1.2.9-3) unstable; urgency=low * Adjust gnutls dependency (Closes: #335771) * Adjust libxml2 min version -- John V. Belmonte Mon, 26 Jun 2006 20:48:41 -0400 xmlsec1 (1.2.9-2) unstable; urgency=low * Add engine libraries to depends of dev package * Switch to mozilla libs provided by xulrunner package (Closes: #364382) * Confirm Debian standards 3.7.2 -- John V. Belmonte Thu, 08 Jun 2006 21:52:55 -0400 xmlsec1 (1.2.9-1) unstable; urgency=low * New upstream release (Closes: #319807) * Upgrade to Debian standards 3.6.2 -- John V. Belmonte Sat, 17 Sep 2005 09:36:11 -0400 xmlsec1 (1.2.6-1) unstable; urgency=low * New upstream release -- John V. Belmonte Thu, 26 Aug 2004 15:07:52 -0400 xmlsec1 (1.2.4-3) unstable; urgency=low * Adjust gnutls dependency (Closes: #263626) * Add debian/watch -- John V. Belmonte Thu, 5 Aug 2004 12:09:42 -0400 xmlsec1 (1.2.4-2) unstable; urgency=low * Change maintainer address * Adjust libxslt dependency (Closes: #261831) -- John V. Belmonte Mon, 2 Aug 2004 10:05:04 -0400 xmlsec1 (1.2.4-1) unstable; urgency=low * New upstream release (Closes: #228531) * Add binary for nss crypto engine * Upgrade gnutls dependency to gnutls10 -- John V. Belmonte Tue, 27 Jan 2004 12:49:49 -0500 xmlsec1 (1.1.1-2) unstable; urgency=low * Upgrade to Debian standards 3.6.1 * In debian/rules: * remove unused "nostrip" logic * replace use of $CURDIR with `pwd` * remove unused debhelper calls * convert from dh_movefiles to dh_install * omit makefiles and SGML files from HTML docs -- John V. Belmonte Mon, 13 Oct 2003 15:43:41 -0400 xmlsec1 (1.1.1-1) unstable; urgency=low * New upstream release * Add soname number to build/-dev depends for libgnutls * Add version to build/-dev depends for libssl since no libssl-dev is available * In README.Debian, clarify restriction on use of openssl crypto engine by GPL'd official Debian packages * In README.Debian, more about the yet unpackaged nss crypto engine -- John V. Belmonte Sun, 24 Aug 2003 06:39:56 -0400 xmlsec1 (1.1.0-1) unstable; urgency=low * New upstream release * Add pkg-config files (Closes: #203376) * Downplay xmlsec1-config in README.Debian, package descriptions * Remove some upstream workarounds from debian/rules -- John V. Belmonte Mon, 11 Aug 2003 10:05:06 -0400 xmlsec1 (1.0.4-2) unstable; urgency=low * No change, except this time my sponsor won't accidentally mutilate the package before uploading :-) -- John V. Belmonte Fri, 18 Jul 2003 01:11:45 -0400 xmlsec1 (1.0.4-1) unstable; urgency=low * New upstream release * Update README.Debian regarding nss engine support * Fix typo in libxmlsec1 description * Remove some upstream workarounds from debian/rules -- John V. Belmonte Tue, 15 Jul 2003 21:23:11 -0400 xmlsec1 (1.0.3-1) unstable; urgency=low * New upstream release (Closes: #194270) * change source name for xmlsec1 series * change dev package section to libdevel -- John V. Belmonte Tue, 17 Jun 2003 23:19:17 -0400 xmlsec (0.0.14-1) unstable; urgency=low * New upstream release * upgrade to Debian standards 3.5.9 -- John V. Belmonte Fri, 28 Mar 2003 14:21:10 -0500 xmlsec (0.0.12-1) unstable; urgency=low * Initial Release (Closes: #152605) -- John V. Belmonte Tue, 11 Feb 2003 14:58:00 -0500 debian/xmlsec1.manpages0000664000000000000000000000001611744773140012266 0ustar man/xmlsec1.1 debian/xmlsec1.install0000664000000000000000000000002011744773140012134 0ustar usr/bin/xmlsec1 debian/patches/0000775000000000000000000000000012267121462010622 5ustar debian/patches/examples_ldlibs.patch0000664000000000000000000000063111745025727015021 0ustar # Description: Fix incorrect use of LDFLAGS in examples makefile # Forwarded: http://bugzilla.gnome.org/674561 # Bug-Debian: http://bugs.debian.org/647453 --- a/examples/Makefile +++ b/examples/Makefile @@ -11,7 +11,7 @@ CC = gcc CFLAGS += -g $(shell xmlsec1-config --cflags) -DUNIX_SOCKETS -LDFLAGS += -g $(shell xmlsec1-config --libs) +LDLIBS += -g $(shell xmlsec1-config --libs) all: $(PROGRAMS) debian/patches/de-ansi-fication-ftbfs.patch0000664000000000000000000000101012267121462016047 0ustar Index: xmlsec1-1.2.18/configure.in =================================================================== --- xmlsec1-1.2.18.orig/configure.in 2011-05-11 19:02:01.000000000 -0400 +++ xmlsec1-1.2.18/configure.in 2014-01-19 23:16:45.724551851 -0500 @@ -47,10 +47,6 @@ AC_PATH_PROG(HELP2MAN, help2man) AC_PATH_PROG(MAN2HTML, man2html) -dnl Make sure we have an ANSI compiler -AM_C_PROTOTYPES -test "z$U" != "z" && AC_MSG_ERROR(Compiler not ANSI compliant) - dnl Checks for header files. AC_HEADER_DIRENT AC_HEADER_STDC debian/patches/series0000664000000000000000000000010712267121377012042 0ustar examples_ldlibs.patch check_version.patch de-ansi-fication-ftbfs.patch debian/patches/check_version.patch0000664000000000000000000000113712004363244014462 0ustar # Description: fix version check function --- a/src/xmlsec.c +++ b/src/xmlsec.c @@ -164,9 +164,9 @@ xmlSecCheckVersionExt(int major, int minor, int subminor, xmlSecCheckVersionMode } break; case xmlSecCheckVersionABICompatible: - if((minor < XMLSEC_VERSION_MINOR) || + if((minor > XMLSEC_VERSION_MINOR) || ((minor == XMLSEC_VERSION_MINOR) && - (subminor < XMLSEC_VERSION_SUBMINOR))) { + (subminor > XMLSEC_VERSION_SUBMINOR))) { xmlSecError(XMLSEC_ERRORS_HERE, NULL, NULL, debian/watch0000664000000000000000000000014111744773140010225 0ustar version=2 http://www.aleksey.com/xmlsec/download/xmlsec1-([\d\.]+)\.tar\.gz \ debian uupdate debian/control0000664000000000000000000000672712267117413010613 0ustar Source: xmlsec1 Section: text Priority: optional Maintainer: Ubuntu Developers XSBC-Original-Maintainer: John V. Belmonte Build-Depends: debhelper (>> 7.0.0), dh-autoreconf, chrpath, pkg-config, libxml2-dev (>= 2.6.12), libxslt1-dev (>= 1.0.20), libssl-dev (>= 0.9.8), libgnutls-dev (>= 1.0.0), libnss3-dev, libgcrypt11-dev Standards-Version: 3.9.3 Homepage: http://www.aleksey.com/xmlsec/ Package: libxmlsec1-dev Section: libdevel Architecture: any Depends: ${misc:Depends}, libxmlsec1 (= ${binary:Version}), libxmlsec1-openssl (= ${binary:Version}), libxmlsec1-gnutls (= ${binary:Version}), libxmlsec1-nss (= ${binary:Version}), libxmlsec1-gcrypt (= ${binary:Version}), libc6-dev, libxml2-dev (>= 2.6.12), libxslt1-dev (>= 1.0.20), libssl-dev (>= 0.9.8), libgnutls-dev (>= 1.0.0), libnss3-dev, libgcrypt11-dev Description: Development files for the XML security library The XML Security Library is a C library that implements these XML standards: . * XML Signature * XML Encryption . This package provides development files including documentation, examples, headers, static libraries, and configuration support. Package: libxmlsec1 Section: libs Architecture: any Depends: ${misc:Depends}, ${shlibs:Depends} Description: XML security library The XML Security Library implements standards related to secure handling of XML data. . This package provides dynamic libraries for use by applications. Specifically, it provides all XML security library functionality except for the cryptography engine. Package: libxmlsec1-openssl Section: libs Architecture: any Depends: ${misc:Depends}, ${shlibs:Depends} Description: Openssl engine for the XML security library The XML Security Library implements standards related to secure handling of XML data. . This package provides dynamic libraries for use by applications. Specifically, it provides the openssl implementation of the XML security library cryptography functions. Package: libxmlsec1-gnutls Section: libs Architecture: any Depends: ${misc:Depends}, ${shlibs:Depends} Description: Gnutls engine for the XML security library The XML Security Library implements standards related to secure handling of XML data. . This package provides dynamic libraries for use by applications. Specifically, it provides the gnutls implementation of the XML security library cryptography functions. Package: libxmlsec1-nss Section: libs Architecture: any Depends: ${misc:Depends}, ${shlibs:Depends} Description: Nss engine for the XML security library The XML Security Library implements standards related to secure handling of XML data. . This package provides dynamic libraries for use by applications. Specifically, it provides the nss implementation of the XML security library cryptography functions. Package: libxmlsec1-gcrypt Section: libs Architecture: any Depends: ${misc:Depends}, ${shlibs:Depends} Description: Gcrypt engine for the XML security library The XML Security Library implements standards related to secure handling of XML data. . This package provides dynamic libraries for use by applications. Specifically, it provides the gcrypt implementation of the XML security library cryptography functions. Package: xmlsec1 Section: text Architecture: any Depends: ${misc:Depends}, ${shlibs:Depends} Description: XML security command line processor Xmlsec is a command line tool for signature and encryption transformations of XML data. It is part of the XML Security Library. debian/source/0000775000000000000000000000000011745013211010463 5ustar debian/source/format0000664000000000000000000000001411745013211011671 0ustar 3.0 (quilt) debian/compat0000664000000000000000000000000211744773140010376 0ustar 7 debian/rules0000775000000000000000000000534712267117500010262 0ustar #!/usr/bin/make -f # Sample debian/rules that uses debhelper. # GNU copyright 1997 to 1999 by Joey Hess. # Uncomment this to turn on verbose mode. #export DH_VERBOSE=1 # These are used for cross-compiling and for saving the configure script # from having to guess our platform (since we know it already) DEB_HOST_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_HOST_GNU_TYPE) DEB_BUILD_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_BUILD_GNU_TYPE) # shared library versions, option 1 #version=2.0.5 #major=2 # option 2, assuming the library is created as src/.libs/libfoo.so.2.0.5 or so version=`ls src/.libs/lib*.so.* | \ awk '{if (match($$0,/[0-9]+\.[0-9]+\.[0-9]+$$/)) print substr($$0,RSTART)}'` major=`ls src/.libs/lib*.so.* | \ awk '{if (match($$0,/\.so\.[0-9]+$$/)) print substr($$0,RSTART+4)}'` config.status: configure dh_testdir dh_autoreconf # Add here commands to configure the package. ./configure \ --host=$(DEB_HOST_GNU_TYPE) \ --build=$(DEB_BUILD_GNU_TYPE) \ $(shell dpkg-buildflags --export=configure) \ --prefix=/usr \ --mandir=\$${prefix}/share/man \ --infodir=\$${prefix}/share/info \ --with-html-dir=\$${prefix}/share/doc/xmlsec1/html \ --disable-crypto-dl \ --disable-apps-crypto-dl build: build-arch build-indep build-arch: build-stamp build-indep: build-stamp build-stamp: config.status dh_testdir # Add here commands to compile the package. $(MAKE) touch build-stamp clean: dh_testdir dh_testroot rm -f build-stamp # Add here commands to clean up after the build process. [ ! -f Makefile ] || $(MAKE) distclean dh_autoreconf_clean dh_clean COPYING config.log config.cache config.status install: build dh_testdir dh_testroot dh_prep dh_installdirs # Add here commands to install the package into debian/tmp $(MAKE) install prefix=$(CURDIR)/debian/tmp/usr # strip unwanted RPATH caused by bug in old libtool chrpath -d $(CURDIR)/debian/tmp/usr/lib/*.so \ $(CURDIR)/debian/tmp/usr/bin/xmlsec1 find debian/tmp/usr/lib -name "*.la" -exec \ sed -i -e "s,^dependency_libs=.*,dependency_libs=''," {} + # Build architecture-independent files here. binary-indep: build install # We have nothing to do by default. # Build architecture-dependent files here. binary-arch: build install dh_testdir dh_testroot dh_install -X.cvsignore --sourcedir=debian/tmp dh_installexamples -X.cvsignore examples/* dh_installdocs -X.sgml --all README debian/README.Debian debian/TODO.Debian dh_installman dh_installchangelogs ChangeLog dh_strip dh_compress -Xexamples/ dh_fixperms dh_makeshlibs -V dh_installdeb dh_shlibdeps -l $(CURDIR)/debian/libxmlsec1/usr/lib dh_gencontrol dh_md5sums dh_builddeb binary: binary-indep binary-arch .PHONY: build build-arch build-indep clean binary-indep binary-arch binary install debian/TODO.Debian0000664000000000000000000000020511745021044011034 0ustar xmlsec and libxmlsec for Debian ------------------------------- * set up doc-base -- John V. Belmonte debian/libxmlsec1.install0000664000000000000000000000003011744773140012624 0ustar usr/lib/libxmlsec1.so.*