diff --git a/cjose-0.6.1.tar.gz b/cjose-0.6.1.tar.gz new file mode 100644 index 0000000000000000000000000000000000000000..bfdc0435b37ee2fa62f3c31d05b1022244bd7381 Binary files /dev/null and b/cjose-0.6.1.tar.gz differ diff --git a/cjose.spec b/cjose.spec new file mode 100644 index 0000000000000000000000000000000000000000..d9e3900388ddad0ba14225e5644832775e93d34f --- /dev/null +++ b/cjose.spec @@ -0,0 +1,52 @@ +Name: cjose +Version: 0.6.1 +Release: 3 +Summary: C library implementing the Javascript Object Signing and Encryption (JOSE) +License: MIT +URL: https://github.com/cisco/cjose +Source0: https://github.com/cisco/%{name}/archive/%{version}/%{name}-%{version}.tar.gz +Patch1: concatkdf.patch +BuildRequires: gcc doxygen libtcnative-1-0 jansson-devel check-devel openssl-devel +%description +Implementation of JOSE for C/C++ + +%package devel +Summary: Development files for %{name} +Requires: %{name}%{?_isa} = %{version}-%{release} +%description devel +The %{name}-devel package contains libraries and header files for +developing applications that use %{name}. + +%prep +%autosetup -n %{name}-%{version} -p1 + +%build +%configure +%make_build + +%install +%make_install +find %{buildroot} -name '*.a' -exec rm -f {} ';' +find %{buildroot} -name '*.la' -exec rm -f {} ';' + +%post -p /sbin/ldconfig + +%postun -p /sbin/ldconfig + +%check +make check || (cat test/test-suite.log; exit 1) + +%files +%license LICENSE +%doc CHANGELOG.md README.md +%doc /usr/share/doc/cjose +%{_libdir}/*.so.* + +%files devel +%{_includedir}/* +%{_libdir}/*.so +%{_libdir}/pkgconfig/cjose.pc + +%changelog +* Sat Jul 18 2020 yanan li - 0.6.1-3 +- Package init diff --git a/cjose.yaml b/cjose.yaml new file mode 100644 index 0000000000000000000000000000000000000000..d1ee6f52783b7b2f755d35247e2c0e1fbbb4b041 --- /dev/null +++ b/cjose.yaml @@ -0,0 +1,5 @@ +git_url: https://github.com/cisco/cjose.git +version_control: github +src_repo: cisco/cjose +tag_prefix: "" +seperator: "." diff --git a/concatkdf.patch b/concatkdf.patch new file mode 100644 index 0000000000000000000000000000000000000000..abeccaf2cfacab1565b5d84cd2e3258555a5b55b --- /dev/null +++ b/concatkdf.patch @@ -0,0 +1,74 @@ +commit 0238eb8f3612515f4374381b593dd79116169330 +Author: John Dennis +Date: Thu Aug 2 16:21:33 2018 -0400 + + fix concatkdf failures on big endian architectures + + Several of the elements used to compute the digest in ECDH-ES key + agreement computation are represented in binary form as a 32-bit + integer length followed by that number of octets. the length + field. The 32-bit length integer is represented in big endian + format (the 8 most significant bits are in the first octet.). + + The conversion to a 4 byte big endian integer was being computed + in a manner that only worked on little endian architectures. The + function htonl() returns a 32-bit integer whose octet sequence given + the address of the integer is big endian. There is no need for any + further manipulation. + + The existing code used bit shifting on a 32-bit value. In C bit + shifting is endian agnostic for multi-octet values, a right shift + moves most significant bits toward least significant bits. The result + of a bit shift of a multi-octet value on either big or little + archictures will always be the same provided you "view" it as the same + data type (e.g. 32-bit integer). But indexing the octets of that + mulit-octet value will be different depending on endianness, hence the + assembled octets differed depending on endianness. + + Issue: #77 + Signed-off-by: John Dennis + +diff --git a/src/concatkdf.c b/src/concatkdf.c +index ec064ab..59b845a 100644 +--- a/src/concatkdf.c ++++ b/src/concatkdf.c +@@ -29,15 +29,9 @@ + //////////////////////////////////////////////////////////////////////////////// + static uint8_t *_apply_uint32(const uint32_t value, uint8_t *buffer) + { +- const uint32_t formatted = htonl(value); +- const uint8_t data[4] = { +- (formatted >> 0) & 0xff, +- (formatted >> 8) & 0xff, +- (formatted >> 16) & 0xff, +- (formatted >> 24) & 0xff +- }; +- memcpy(buffer, data, 4); ++ const uint32_t big_endian_int32 = htonl(value); + ++ memcpy(buffer, &big_endian_int32, 4); + return buffer + 4; + } + +diff --git a/test/check_concatkdf.c b/test/check_concatkdf.c +index e4325fc..41d0f1c 100644 +--- a/test/check_concatkdf.c ++++ b/test/check_concatkdf.c +@@ -60,14 +60,9 @@ _create_otherinfo_header_finish: + + static bool _cmp_uint32(uint8_t **actual, uint32_t expected) + { +- uint32_t value = htonl(expected); +- uint8_t expectedData[] = { +- (value >> 0) & 0xff, +- (value >> 8) & 0xff, +- (value >> 16) & 0xff, +- (value >> 24) & 0xff +- }; +- bool result = (0 == memcmp(*actual, expectedData, 4)); ++ uint32_t big_endian_int32 = htonl(expected); ++ ++ bool result = (0 == memcmp(*actual, &big_endian_int32, 4)); + (*actual) += 4; + return result; + }