SP SRPM's

Takeshi NISHIMURA takeshi at nii.ac.jp
Fri Nov 18 04:28:04 EST 2016


Hi Nate,

My findings are attached. Most contents are same. Build dates and hosts, signing dates, and dependencies are different.

Sincerely,
Takeshi

On 2016/11/17 10:13, Klingenstein, Nate wrote:
>> As a source package it really shouldn't matter, any differences should be cosmetic.
>
> Cosmetic is as far as I got.  The hashes were different, so I stopped.  I don't even know if the URL is built into that, but I don't think it is.
>
> http://download.opensuse.org/repositories/security://shibboleth/CentOS_7/src/shibboleth-2.6.0-2.1.src.rpm.mirrorlist
> --> 73d8ca7d77ec413e804f35797836c394047127bad449a848527af44ca7a5e8c7
>
> http://download.opensuse.org/repositories/security://shibboleth/CentOS_CentOS-6/src/shibboleth-2.6.0-2.1.src.rpm.mirrorlist
> --> 3cb36ccdfe2c9002683313320f030819c4b3e54d10179d2e2aa1676f396a5ea8
>
>> problem isn't the packaging, it's reliably managing dozens of builds
>
> All I know is the big P Packaging, not the little p packaging.
>
> RPM is available from third parties on the distribution I'm interested in for this project(Ubuntu 16.04) and so are old .deb packages(2.5.3 and apparently builds).
-------------- next part --------------
$ openssl dgst -sha256 < shibboleth-2.6.0-2.1.src.rpm.CentOS6
3cb36ccdfe2c9002683313320f030819c4b3e54d10179d2e2aa1676f396a5ea8
$ openssl dgst -sha256 < shibboleth-2.6.0-2.1.src.rpm.CentOS7 
73d8ca7d77ec413e804f35797836c394047127bad449a848527af44ca7a5e8c7
$ ls -l shibboleth-2.6.0-2.1.src.rpm.CentOS*
-rw-r--r-- 1 takeshi takeshi 734488 Nov 17 11:46 shibboleth-2.6.0-2.1.src.rpm.CentOS5
-rw-r--r-- 1 takeshi takeshi 734667 Nov 17 11:45 shibboleth-2.6.0-2.1.src.rpm.CentOS6
-rw-r--r-- 1 takeshi takeshi 734687 Nov 17 11:37 shibboleth-2.6.0-2.1.src.rpm.CentOS7
$ rpm -q -i --requires --dump -p shibboleth-2.6.0-2.1.src.rpm.CentOS5
Name        : shibboleth                   Relocations: (not relocatable)
Version     : 2.6.0                             Vendor: Shibboleth Consortium
Release     : 2.1                           Build Date: Wed Jul 13 03:54:12 2016
Install Date: (not installed)               Build Host: lamb12
Group       : Productivity/Networking/Security   Source RPM: (none)
Size        : 742572                           License: Apache-2.0
Signature   : DSA/SHA1, Wed Jul 13 03:54:30 2016, Key ID 73c937457d0a1b3d
URL         : http://shibboleth.net/
Summary     : Open source system for attribute-based Web SSO
Description :
Shibboleth is a Web Single Sign-On implementations based on OpenSAML
that supports multiple protocols, federated identity, and the extensible
exchange of rich attributes subject to privacy controls.

This package contains the Shibboleth Service Provider runtime libraries,
daemon, default plugins, and Apache module(s).
libxerces-c-devel >= 3.1
libxml-security-c-devel >= 1.7.3
libxmltooling-devel >= 1.6.0
libsaml-devel >= 2.6.0
liblog4shib-devel >= 1.0.4
gcc-c++  
zlib-devel  
boost-devel >= 1.32.0
krb5-devel  
doxygen  
unixODBC-devel  
httpd-devel  
redhat-rpm-config  
rpmlib(CompressedFileNames) <= 3.0.4-1
shibboleth-sp-2.6.0.tar.bz2 721245 1467049369 302f23a5d9cb390fef83aad517a25390 0100644 root root 0 0 0 X
shibboleth.spec 20623 1468349322 155eff4a5d9145b5306c59edf24ba084 0100644 root root 0 0 0 X
shibboleth2.xml.patch 704 1468341086 ca9df9739697ed9b58cdf01272a3c6f5 0100644 root root 0 0 0 X
$ rpm -q -i --requires --dump -p shibboleth-2.6.0-2.1.src.rpm.CentOS6
Name        : shibboleth                   Relocations: (not relocatable)
Version     : 2.6.0                             Vendor: Shibboleth Consortium
Release     : 2.1                           Build Date: Wed Jul 13 03:54:05 2016
Install Date: (not installed)               Build Host: lamb14
Group       : Productivity/Networking/Security   Source RPM: (none)
Size        : 742572                           License: Apache-2.0
Signature   : DSA/SHA1, Wed Jul 13 03:54:15 2016, Key ID 73c937457d0a1b3d
URL         : http://shibboleth.net/
Summary     : Open source system for attribute-based Web SSO
Description :
Shibboleth is a Web Single Sign-On implementations based on OpenSAML
that supports multiple protocols, federated identity, and the extensible
exchange of rich attributes subject to privacy controls.

This package contains the Shibboleth Service Provider runtime libraries,
daemon, default plugins, and Apache module(s).
libxerces-c-devel >= 3.1
libxml-security-c-devel >= 1.7.3
libxmltooling-devel >= 1.6.0
libsaml-devel >= 2.6.0
liblog4shib-devel >= 1.0.4
chrpath  
gcc-c++  
zlib-devel  
boost-devel >= 1.32.0
krb5-devel  
doxygen  
unixODBC-devel  
libmemcached-devel  
httpd-devel(x86-32)  
redhat-rpm-config  
rpmlib(FileDigests) <= 4.6.0-1
rpmlib(CompressedFileNames) <= 3.0.4-1
shibboleth-sp-2.6.0.tar.bz2 721245 1467049369 cb084f09c406257c7a8cb41464dc5d3e 0100644 root root 0 0 0 X
shibboleth.spec 20623 1468349281 0a49553770195e4de48d3adfcc90033d 0100644 root root 0 0 0 X
shibboleth2.xml.patch 704 1468341086 7ca95bc8a5616f512ba69343886643e7 0100644 root root 0 0 0 X
$ rpm -q -i --requires --dump -p shibboleth-2.6.0-2.1.src.rpm.CentOS7
Name        : shibboleth                   Relocations: (not relocatable)
Version     : 2.6.0                             Vendor: Shibboleth Consortium
Release     : 2.1                           Build Date: Wed Jul 13 03:55:16 2016
Install Date: (not installed)               Build Host: lamb04
Group       : Productivity/Networking/Security   Source RPM: (none)
Size        : 742572                           License: Apache-2.0
Signature   : DSA/SHA1, Wed Jul 13 03:55:25 2016, Key ID 73c937457d0a1b3d
URL         : http://shibboleth.net/
Summary     : Open source system for attribute-based Web SSO
Description :
Shibboleth is a Web Single Sign-On implementations based on OpenSAML
that supports multiple protocols, federated identity, and the extensible
exchange of rich attributes subject to privacy controls.

This package contains the Shibboleth Service Provider runtime libraries,
daemon, default plugins, and Apache module(s).
systemd-devel  
pkgconfig  
xerces-c-devel >= 3.1
libxml-security-c-devel >= 1.7.3
libxmltooling-devel >= 1.6.0
libsaml-devel >= 2.6.0
liblog4shib-devel >= 1.0.4
chrpath  
gcc-c++  
zlib-devel  
boost-devel >= 1.32.0
krb5-devel  
doxygen  
unixODBC-devel  
libmemcached-devel  
httpd-devel(x86-64)  
redhat-rpm-config  
rpmlib(FileDigests) <= 4.6.0-1
rpmlib(CompressedFileNames) <= 3.0.4-1
shibboleth-sp-2.6.0.tar.bz2 721245 1467049369 cb084f09c406257c7a8cb41464dc5d3e 0100644 root root 0 0 0 X
shibboleth.spec 20623 1468349284 0a49553770195e4de48d3adfcc90033d 0100644 root root 0 0 0 X
shibboleth2.xml.patch 704 1468341086 7ca95bc8a5616f512ba69343886643e7 0100644 root root 0 0 0 X
$ md5sum rpmbuild-CentOS*/SOURCES/shibboleth-sp-2.6.0.tar.bz2
302f23a5d9cb390fef83aad517a25390  rpmbuild-CentOS5/SOURCES/shibboleth-sp-2.6.0.tar.bz2
302f23a5d9cb390fef83aad517a25390  rpmbuild-CentOS6/SOURCES/shibboleth-sp-2.6.0.tar.bz2
302f23a5d9cb390fef83aad517a25390  rpmbuild-CentOS7/SOURCES/shibboleth-sp-2.6.0.tar.bz2
$ md5sum rpmbuild-CentOS*/SPECS/shibboleth.spec
155eff4a5d9145b5306c59edf24ba084  rpmbuild-CentOS5/SPECS/shibboleth.spec
155eff4a5d9145b5306c59edf24ba084  rpmbuild-CentOS6/SPECS/shibboleth.spec
155eff4a5d9145b5306c59edf24ba084  rpmbuild-CentOS7/SPECS/shibboleth.spec


More information about the users mailing list