%define mod_name mod_auth_openidc
%define mod_conf auth_openidc.conf
%define mod_so %{mod_name}.so

Name:             apache-%{mod_name}
Version:          2.3.2
%define subrel 2
Release:          %mkrel 2
Summary:          OpenID Connect Relying Party and OAuth 2.0 Resource Server for Apache HTTP Server 2.x
Group:            System/Servers
License:          Apache License
URL:              https://github.com/pingidentity/mod_auth_openidc
Source:           https://github.com/pingidentity/mod_auth_openidc/archive/v%{version}/%{mod_name}-%{version}.tar.gz
Patch0:           apache2-mod_auth_openidc-2.3.2-CVE-2019-14857.patch
Patch1:           apache2-mod_auth_openidc-2.3.2-CVE-2019-20479.patch
BuildRequires:    apache-devel
BuildRequires:    pkgconfig(libcurl)
BuildRequires:    pkgconfig(jansson) >= 2.0
BuildRequires:    pkgconfig(libpcre) >= 2.0
BuildRequires:    pkgconfig(cjose) >= 0.5.1

Requires:         apache

%description
mod_auth_openidc is an authentication/authorization module for the
Apache 2.x HTTP server that authenticates users against an
OpenID Connect Provider. It can also function as an OAuth 2.0 Resource Server,
validating access tokens presented by OAuth 2.0 clients against an OAuth 2.0
Authorization Server.

%prep
%setup -q -n %{mod_name}-%{version}
%autopatch -p1

%build
NOCONFIGURE=1 ./autogen.sh
%configure2_5x
%make_build

%install
install -d %{buildroot}%{_httpd_moddir}
install -d %{buildroot}%{_sysconfdir}/httpd/conf/conf.d
install -d %{buildroot}%{_sysconfdir}/httpd/conf/modules.d

install -m0755 src/.libs/*.so %{buildroot}%{_httpd_moddir}

cat << EOF > 10_%{mod_conf}
LoadModule auth_openidc_module modules/mod_auth_openidc.so
EOF

install -m0644 %{mod_conf} %{buildroot}%{_sysconfdir}/httpd/conf/conf.d/
install -m0644 10_%{mod_conf} %{buildroot}%{_sysconfdir}/httpd/conf/modules.d/

%files
%doc AUTHORS ChangeLog DISCLAIMER INSTALL LICENSE.txt README.md
%attr(0644,root,root) %config(noreplace) %{_sysconfdir}/httpd/conf/conf.d/%{mod_conf}
%attr(0644,root,root) %config(noreplace) %{_sysconfdir}/httpd/conf/modules.d/10_%{mod_conf}
%attr(0755,root,root) %{_httpd_moddir}/%{mod_name}.so


%changelog
* Tue Mar 03 2020 ns80 <ns80> 2.3.2-2.2.mga7
+ Revision: 1553397
- add upstream patch for CVE-2019-20479 (mga#26289)
- add patch for CVE-2019-14857 (mga#25810)

* Fri Sep 21 2018 umeabot <umeabot> 2.3.2-2.mga7
+ Revision: 1294384
- Mageia 7 Mass Rebuild

* Sun Nov 05 2017 mitya <mitya> 2.3.2-1.mga7
+ Revision: 1176000
- New version 2.3.2

* Sat Sep 09 2017 cjw <cjw> 2.2.0-2.mga7
+ Revision: 1152185
- rebuild for openssl 1.1

* Sat May 20 2017 mitya <mitya> 2.2.0-1.mga6
+ Revision: 1103480
- New version 2.2.0

* Sun Mar 12 2017 mitya <mitya> 2.1.6-1.mga6
+ Revision: 1092232
- New version 2.1.6

* Wed Feb 15 2017 mitya <mitya> 2.1.5-1.mga6
+ Revision: 1086337
- New version 2.1.5

* Thu Jan 12 2017 mitya <mitya> 2.1.3-1.mga6
+ Revision: 1081213
- New version 2.1.3

* Wed Dec 07 2016 mitya <mitya> 2.1.2-1.mga6
+ Revision: 1072944
- New release 2.1.2

* Sat Nov 12 2016 mitya <mitya> 2.1.1-1.mga6
+ Revision: 1066631
- New version 2.1.1

* Fri Sep 23 2016 daviddavid <daviddavid> 2.0.0-3.mga6
+ Revision: 1055545
- rebuild again for ARM as cjose is now available
- use a named-versioned tarball from github
- pass NOCONFIGURE=1 to autogen
+ neoclust <neoclust>
- Rebuild for arm

* Wed Sep 14 2016 mitya <mitya> 2.0.0-1.mga6
+ Revision: 1052582
- mod_auth_openidc 2.0.0
- Created package structure for apache-mod_auth_openidc.