Update to 0.19.1

Resolves: rhbz#2258342 - new version is available

.gitignore

@@ -10,3 +10,7 @@
 /mod_auth_mellon-0.15.0.tar.gz
 /mod_auth_mellon-0.16.0.tar.gz
 /mod_auth_mellon-0.17.0.tar.gz
+/v0.18.0.tar.gz
+/v0.18.1.tar.gz
+/mod_auth_mellon-0.19.0.tar.gz
+/mod_auth_mellon-0.19.1.tar.gz

mellon_create_metadata.sh

@@ -55,9 +55,9 @@ echo
 umask 0077
 
 TEMPLATEFILE="$(mktemp -t mellon_create_sp.XXXXXXXXXX)"
+ERRORFILE="$(mktemp -t mellon_create_err.XXXXXXXXXX)"
 
 cat >"$TEMPLATEFILE" <<EOF
-RANDFILE           = /dev/urandom
 [req]
 default_bits       = 2048
 default_keyfile    = privkey.pem
@@ -68,9 +68,14 @@ policy             = policy_anything
 commonName         = $HOST
 EOF
 
-openssl req -utf8 -batch -config "$TEMPLATEFILE" -new -x509 -days 3652 -nodes -out "$OUTFILE.cert" -keyout "$OUTFILE.key" 2>/dev/null
+openssl req -utf8 -batch -config "$TEMPLATEFILE" -new -x509 -days 3652 -nodes -out "$OUTFILE.cert" -keyout "$OUTFILE.key" 2>"$ERRORFILE" || (
+    echo "Failed to generate certificate!" >&2
+    cat "$ERRORFILE" >&2;
+    rm -f "$TEMPLATEFILE" "$ERRORFILE"
+    exit 1
+)
 
-rm -f "$TEMPLATEFILE"
+rm -f "$TEMPLATEFILE" "$ERRORFILE"
 
 CERT="$(grep -v '^-----' "$OUTFILE.cert")"
 

mod_auth_mellon.spec

@@ -1,23 +1,29 @@
+%{!?_httpd_mmn: %{expand: %%global _httpd_mmn %%(cat %{_includedir}/httpd/.mmn 2>/dev/null || echo 0-0)}}
+
 Summary: A SAML 2.0 authentication module for the Apache Httpd Server
 Name: mod_auth_mellon
-Version: 0.17.0
-Release: 3%{?dist}
-Source0: https://github.com/latchset/mod_auth_mellon/releases/download/v0.17.0/mod_auth_mellon-0.17.0.tar.gz
+Version: 0.19.1
+Release: 1%{?dist}
+Source0: https://github.com/latchset/mod_auth_mellon/archive/v%{version}/%{name}-%{version}.tar.gz
 Source1: auth_mellon.conf
 Source2: 10-auth_mellon.conf
 Source3: mod_auth_mellon.conf
 Source4: mellon_create_metadata.sh
 Source5: README.redhat.rst
-License: GPLv2+
+Patch0: 0000-configure.patch
+License: GPL-2.0-or-later
 BuildRequires: make
-BuildRequires:  gcc
+BuildRequires: gcc
 BuildRequires: curl-devel
 BuildRequires: glib2-devel
 BuildRequires: httpd-devel
 BuildRequires: lasso-devel >= 2.5.1-13
 BuildRequires: openssl-devel
 BuildRequires: xmlsec1-devel
+BuildRequires: xmlsec1-openssl-devel
 BuildRequires: rubygem-asciidoctor
+BuildRequires: libtool-ltdl-devel
+BuildRequires: systemd-rpm-macros
 Requires: httpd-mmn = %{_httpd_mmn}
 Requires: lasso >= 2.5.1-13
 Url: https://github.com/latchset/mod_auth_mellon
@@ -29,7 +35,8 @@ SAML 2.0 federation protocol. It grants access based on the attributes
 received in assertions generated by a IdP server.
 
 %prep
-%setup -q -n %{name}-%{version}
+%autosetup -n %{name}-%{version} -p1
+chmod +x configure
 
 %build
 export APXS=%{_httpd_apxs}
@@ -86,11 +93,7 @@ in the doc directory for instructions on using the diagnostics build.
 %{_httpd_moddir}/%{name}-diagnostics.so
 
 %files
-%if 0%{?rhel} && 0%{?rhel} < 7
-%doc COPYING
-%else
 %license COPYING
-%endif
 %doc README.md NEWS ECP.rst
 %doc %{_pkgdocdir}/README.redhat.rst
 %doc %{_pkgdocdir}/user_guide
@@ -102,6 +105,64 @@ in the doc directory for instructions on using the diagnostics build.
 %dir /run/%{name}/
 
 %changelog
+* Mon Dec 08 2025 Xavier Bachelot <xavier@bachelot.org> - 0.19.1-1
+- Update to 0.19.1
+- Fix bogus date in changelog
+- Drop support for EOL releases
+
+* Thu Jul 24 2025 Fedora Release Engineering <releng@fedoraproject.org> - 0.19.0-4
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
+
+* Fri Jan 17 2025 Fedora Release Engineering <releng@fedoraproject.org> - 0.19.0-3
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
+
+* Thu Jul 18 2024 Fedora Release Engineering <releng@fedoraproject.org> - 0.19.0-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
+
+* Thu Jan 25 2024  Tomas Halman <thalman@redhat.com> - 0.19.0-1
+- Resolves: rhbz#2258342 - new version is available
+
+* Thu Jan 25 2024 Fedora Release Engineering <releng@fedoraproject.org> - 0.18.1-6
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
+
+* Sun Jan 21 2024 Fedora Release Engineering <releng@fedoraproject.org> - 0.18.1-5
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
+
+* Thu Jul 20 2023 Fedora Release Engineering <releng@fedoraproject.org> - 0.18.1-4
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
+
+* Tue Mar 7 2023 Tomas Halman <thalman@redhat.com> - 0.18.1-3
+- migrated to SPDX license
+
+* Thu Jan 19 2023 Fedora Release Engineering <releng@fedoraproject.org> - 0.18.1-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
+
+* Fri Jan 6 2023 Tomas Halman <thalman@redhat.com> - 0.18.1-1
+- Resolves: rhbz#2158456 - new version is available
+
+* Wed Oct 5 2022 Tomas Halman <thalman@redhat.com> - 0.18.0-5
+- Resolves: rhbz#1306445 Support HTTP-POST binding for SingleLogoutService
+
+* Thu Jul 21 2022 Fedora Release Engineering <releng@fedoraproject.org> - 0.18.0-4
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
+
+* Wed Jun 1 2022 Tomas Halman <thalman@redhat.com> - 0.18.0-2
+- Update mellon_create_metadata.sh to work with new openssl
+- Resolves: rhbz#2097703 Use of RANDFILE = /dev/urandom in openssl config
+            break in OpenSSL 3
+
+* Thu Jan 20 2022 Fedora Release Engineering <releng@fedoraproject.org> - 0.18.0-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
+
+* Fri Dec 17 2021 Tomas Halman <thalman@redhat.com> - 0.18.0-1
+- New upstream version 0.18.0
+- Resolves: rhbz#1988235 CVE-2021-3639 mod_auth_mellon: Open Redirect
+            vulnerability in logout URLs
+- Resolves: rhbz#1988664 mod_auth_mellon-0.18.0 is available
+
+* Tue Sep 14 2021 Sahana Prasad <sahana@redhat.com> - 0.17.0-4
+- Rebuilt with OpenSSL 3.0.0
+
 * Thu Jul 22 2021 Fedora Release Engineering <releng@fedoraproject.org> - 0.17.0-3
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
 
@@ -112,7 +173,7 @@ in the doc directory for instructions on using the diagnostics build.
 - New upstream version 0.17.0
 
 * Tue Jul 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 0.16.0-3
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild 
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
 
 * Thu Feb 13 2020 Tom Stellard <tstellar@redhat.com> - 0.16.0-2
 - Use make_build macro instead of just make

sources

@@ -1 +1 @@
-SHA512 (mod_auth_mellon-0.17.0.tar.gz) = 93919b46e5966d16b334f8f633345d8566f6873a68d1e619835a52a12a70fa7068fe036c69a43ca7b46e51b4c49354d51df13ffd64c60b82747eec86fe357d2e
+SHA512 (mod_auth_mellon-0.19.1.tar.gz) = d512cf0eb52b91c7f6671e5e9425eb62263e58e0d3c5daea0fab13315e6310e228fd2f736a1793dc67037dbd717727a61908eb87e7b6654d7da4c62434c9301d