Our main web site now supports https, so update all references.

NASM 2.01 can be rebuilt from el6 spec file

Additional change need for dynamic build of libX11

Building libX11 statically causes problems with libpthread, however
the version of libX11 that ships with el5 is too old to build libXext.
So we have to build a dynamic version of libX11 and link against that
while building.  The resulting binary will actually be linked against
the system libX11, which should be ABI compatible as far as Xvnc is
concerned.

These files are not Red Hat or Ubuntu specific, so install them
on all Unix systems where the viewer is installed.

Obsoleted by 7461517

Obsoleted by 7461517

Split the static library pre-reqs into a static-devel package
so that they don't need to be rebuilt everytime tigervnc's
sources change.

Several of the pre-requisites have outstanding CVEs.

Build with rpath link so that Xvnc finds our libGL even if
it's not installed in "/".  Also applied dridir and xkbcompdir
patches so that the correct DRI driver gets loaded.

Added patches for the following upstream CVEs: 2013-7439,
2015-0255, 2015-1802, 2015-1803, 2015-1804.  Also updated the
versions of gnutls, libtasn1, and libjpeg-turbo used to build
static libraries to their latest respective upstream versions.

Bump spec version to match changelog.

Added patches for the following upstream CVEs: 2013-7439,
2015-0255, 2015-1802, 2015-1803, 2015-1804.  Also updated the
versions of gnutls, libtasn1, and libjpeg-turbo used to build
static libraries to their latest respective upstream versions.

The patch sources were removed but the %patch commands were
left in the spec files.

The patch sources were removed but the %patch commands were
left in the spec files.

This workaround is no longer needed as we've fixed the bad interaction
with libtool.

Requirement was an artifact of older version of mesa, and is no longer necessary.

Requirement was an artifact of older version of mesa, and is no longer necessary.

el5 and el6 need newer versions of gnutls (and it's prereqs) than are available natively.

el5 and el6 need newer versions of gnutls (and it's prereqs) than are available natively.

Xinerama was disabled in the redhat spec file that ours was adapted from.  Unsure why it was disabled in the first place.

The system libpng is too old for fltk 1.3.3, resulting in undefined reference errors when trying to link vncviewer.

Commit f0fffd4d7f makes ldnow patch unnecessary.
Commit 0dc36a501e makes format-security patch unnecessary.

Static libraries are too hard to get linked correctly with cmake.

We're not doing a sufficient job of keeping this updated so list
it as an external requirement instead.

Font paths were incompletely specified, resulting in font issues with some applications (nedit, for instance).  Also, added support for font catalogues back in, even though el5 doesn't supoort it, this should make font handling more robust for the genric binaries.

(cherry picked from commit 233eea2d45)

Fixed various static linking problems with latest el5 spec.
Some definitions were being overridden in StaticBuild.cmake,
causing checks for various fltk capabilities to fail.  Also,
fontconfig was not being configured properly for default font
locations, causing the vncviewer to fail to locate fonts when
used as a generic binary.

(cherry picked from commit 81e4483169)

This is a regression, swrast_dri.so depends on libexpat.so unless we
explicitly link against libexpat.a

(cherry picked from commit 47e3765f2c)

The patches required for the 2014-12-09 Xorg CVE advisory would not
have been feasible to back-port to the 1.7 version of Xorg that we
were previously using to built against for EL5 and the generic
binaries.  However, building the newer version of Xorg required
some fairly extensive re-tooling.  In a nutshell, here's what was
done:

 * The build is now done against Xorg X117R7, with all CVE patches
   (taken from debian sources) applied.  Note that this requires
   updating various packages beyond the versions readily available
   for EL5.  This included things like automake, autoconf, libtool,
   m4, and flex.  Wherever possible, the EL6 rpm was used unaltered.
   The most chalenging package to upgrade was libxml2, which was
   necessary to supply the python26-libxml2 requirement from mesa.

 * Mesa libGL is now supplied with the package, installed in the
   %{_libdir}/tigervnc directory.  The Xvnc binary is linked using
   an rpath so that we always link against our version of libGL.
   This was done to prevent linker errors with the generic binaries
   in the case where the distro supplied libGL is built with
   different options (in particular, kernel versions < 2.4.20 do
   not support glx-tls, so the generic binaries would likely break
   whenever used on newer distros that build libGL with glx-tls
   turned on by default).  Additionally, this allows swrast_dri.so
   to be bundled without worrying about overwriting the distro
   supplied library.

 * A static libsha1 is built for Xorg to link against.  The EL5
   version of libgcrypt does not satisfy Xorg's requirements,
   and linking against OpenSSL creates nearly a dozen runtime
   dependencies.

RPM build failed when the self-signed cert was used because the macro did not
expand correctly.

* Removed the hard coded snap tag, if needed it should be passed in
  via "rpmbuild --define 'snap ...'".
* Changed the hard coded version to "@VERSION@" to make it clear
  that the copy of the spec file in the repository needs to be
  updated manually.

* The static libvnc server module can't be loaded anyway so just
  remove it from the el5 and portable binaries.

* Allow build time selection of self-signed or keystore signing

* The keymap files have UTF-8 characters embedded in comments.
  javac complains about this unless the default encoding is set.

* Link dynamically against libm to avoid relocation errors
  when building mesa on x86_64.

* Need to pass the path to the static X11 libraries to cmake

* Fixes for unresolved dependency issues when linking against static fltk
* Major overhaul of static build.  Previously, fltk & tigervnc were built
  against the dynamic system libraries (and thus not entirely portable).
  All of the X11 libraries required for Xvnc are now built first and
  everything is linked against them.

git-svn-id: svn://svn.code.sf.net/p/tigervnc/code/trunk@5139 3789f03b-4d11-0410-bbf8-ca57d06f2519