1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
|
Name: rpki
Version: 0.5158
Release: 1%{?dist}
Summary: rpki.net tool suite
License: BSD
URL: http://trac.rpki.net/
Source0: rpki-0.5158.tar.gz
BuildRoot: %(mktemp -ud %{_tmppath}/%{name}-%{version}-%{release}-XXXXXX)
BuildRequires: python-devel, openssl-devel, PyYAML, rrdtool, autoconf
%description
%prep
%setup -q -n rpki
%build
%configure --disable-target-installation
make %{?_smp_mflags}
%install
rm -rf $RPM_BUILD_ROOT
make install DESTDIR=$RPM_BUILD_ROOT
%clean
rm -rf $RPM_BUILD_ROOT
%package rp
Requires: rsync, rrdtool, httpd, xinetd
Summary: rpki.net relying party tools
%description rp
"Relying party" validation tools from the rpki.net toolkit. See the online
documentation at http://rpki.net/.
%pre rp
# create user/group for rcynic if not already present
getent group rcynic >/dev/null || groupadd -r rcynic
getent passwd rcynic >/dev/null || useradd -r -M -N -g rcynic -d /var/rcynic -s /sbin/nologin -c "RPKI validation system" rcynic
# create directories with proper permissions
install -o rcynic -g rcynic -d /var/rcynic/data /var/rcynic/rpki-rtr
install -o rcynic -g rcynic -d /var/www/html/rcynic
exit 0
%post rp
crontab -l -u rcynic 2>/dev/null |
awk -v t=`hexdump -n 2 -e '"%u\n"' /dev/urandom` '
BEGIN { cmd = "exec /usr/bin/rcynic-cron" }
$0 !~ cmd { print }
END { printf "%u * * * *\t%s\n", t % 60, cmd }
' |
crontab -u rcynic -
service xinetd reload
exit 0
%postun rp
crontab -u rcynic -r
userdel rcynic
groupdel rcynic
exit 0
%files rp
%{_bindir}/find_roa
%{_bindir}/hashdir
%{_bindir}/print_roa
%{_bindir}/print_rpki_manifest
%{_bindir}/rcynic
%{_bindir}/rcynic-cron
%{_bindir}/rcynic-html
%{_bindir}/rcynic-svn
%{_bindir}/rcynic-text
%{_bindir}/rpki-rtr
%{_bindir}/scan_roas
%{_bindir}/validation_status
%config %{_sysconfdir}/rcynic.conf
%{_sysconfdir}/xinetd.d/rpki-rtr
%{_sysconfdir}/rpki/trust-anchors
%package ca
Requires: mysql-server, MySQL-python, python, httpd, python-lxml, libxslt, mod_wsgi, mod_ssl, PyYAML, libxml2, python-pip
Summary: rpki.net certification authority tools
%description ca
"Certification authority" tools for issuing RPKI certificates and related
objects using the rpki.net toolkit. See the online documentation at
http://rpki.net/.
%pre ca
getent group rpkid 2>/dev/null || groupadd rpkid
getent passwd rpkid 2>/dev/null || useradd -g rpkid -M -N -d /nonexistent -s /sbin/nologin -c "RPKI certification authority engine(s)" rpkid
# extra python modules not available in RHEL6
pip-python install -q django==1.4.5
pip-python install -q south
pip-python install -q vobject
# setup web portal on default ssl vhost
if test "$(grep Include /etc/httpd/conf.d/ssl.conf)" = ""
then
conf=/etc/httpd/conf.d/ssl.conf
awk < ${conf} > ${conf}.tmp$$ '
$0 ~ /^<\/VirtualHost>/ { print "Include /etc/rpki/apache.conf" }
{ print }
'
cp $conf ${conf}.orig
mv ${conf}.tmp$$ ${conf}
fi
# set up cron job for fetching/importing routeviews.org data
t=$(hexdump -n 1 -e '"%u"' /dev/urandom) && echo "$(($t % 60)) */2 * * * nobody /usr/share/rpki/routeviews.sh" > /etc/cron.d/rpkigui-routeviews
chmod 644 /etc/cron.d/rpkigui-routeviews
ln -sf /usr/sbin/rpkigui-check-expired /etc/cron.daily/rpkigui-check-expired
exit 0
%post ca
# perform automatic upgrade when we are already configured
if test -f /etc/rpki.conf
then
rpki-manage syncdb
rpki-manage migrate
fi
service httpd restart
exit 0
%postun ca
userdel rpkid
groupdel rpkid
exit 0
%files ca
%{_datadir}/rpki
%{_libdir}/python2.6/site-packages/rpki
%{_libdir}/python2.6/site-packages/rpkitoolkit-1.0-py2.6.egg-info
%{_sbindir}/irbe_cli
%{_sbindir}/irdbd
%{_sbindir}/pubd
%{_sbindir}/rootd
%{_sbindir}/rpkic
%{_sbindir}/rpkid
%{_sbindir}/rpkigui-check-expired
%{_sbindir}/rpkigui-import-routes
%{_sbindir}/rpkigui-rcynic
%{_sbindir}/rpki-manage
%{_sbindir}/rpki-sql-backup
%{_sbindir}/rpki-sql-setup
%{_sbindir}/rpki-start-servers
%{_sysconfdir}/rpki.conf.sample
%config %{_sysconfdir}/rpki/settings.py
%{_sysconfdir}/rpki/settings.pyc
%{_sysconfdir}/rpki/settings.pyo
%config %{_sysconfdir}/rpki/apache.conf
%changelog
|
