rebuilt with enable-ssl2 [release 1.0.1s-2mamba;Sat Apr 30 2016]
This commit is contained in:
parent
98e4308ca8
commit
9011d6d298
@ -1,2 +1,7 @@
|
||||
# openssl101
|
||||
|
||||
The openssl certificate management tool and the shared libraries that provide various encryption and decription algorithms and protocols, including DES, RC4, RSA and SSL.
|
||||
This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/).
|
||||
This product includes cryptographic software written by Eric Young (eay@cryptsoft.com).
|
||||
This product includes software written by Tim Hudson (tjh@cryptsoft.com).
|
||||
|
||||
|
||||
16
openssl-1.0.1a-fix_non_ia32.patch
Normal file
16
openssl-1.0.1a-fix_non_ia32.patch
Normal file
@ -0,0 +1,16 @@
|
||||
diff -Nru openssl-1.0.1a.orig/crypto/evp/e_rc4_hmac_md5.c openssl-1.0.1a/crypto/evp/e_rc4_hmac_md5.c
|
||||
--- openssl-1.0.1a.orig/crypto/evp/e_rc4_hmac_md5.c 2012-04-18 19:51:33.000000000 +0200
|
||||
+++ openssl-1.0.1a/crypto/evp/e_rc4_hmac_md5.c 2012-04-24 12:34:58.532532269 +0200
|
||||
@@ -289,8 +289,12 @@
|
||||
|
||||
const EVP_CIPHER *EVP_rc4_hmac_md5(void)
|
||||
{
|
||||
+ #if defined(STITCHED_CALL)
|
||||
extern unsigned int OPENSSL_ia32cap_P[];
|
||||
/* RC4_CHAR flag ------------vvvvv */
|
||||
return(OPENSSL_ia32cap_P[0]&(1<<20) ? NULL : &r4_hmac_md5_cipher);
|
||||
+ #else
|
||||
+ return(&r4_hmac_md5_cipher);
|
||||
+ #endif
|
||||
}
|
||||
#endif
|
||||
53
openssl-1.0.1p-symbol_versioning.patch
Normal file
53
openssl-1.0.1p-symbol_versioning.patch
Normal file
@ -0,0 +1,53 @@
|
||||
diff -up openssl-1.0.1/Makefile.shared.version openssl-1.0.1/Makefile.shared
|
||||
--- openssl-1.0.1/Makefile.shared.version 2012-03-14 20:58:20.553350959 +0100
|
||||
+++ openssl-1.0.1/Makefile.shared 2012-03-14 20:58:20.631352556 +0100
|
||||
@@ -151,7 +151,7 @@ DO_GNU_SO=$(CALC_VERSIONS); \
|
||||
SHLIB_SUFFIX=; \
|
||||
ALLSYMSFLAGS='-Wl,--whole-archive'; \
|
||||
NOALLSYMSFLAGS='-Wl,--no-whole-archive'; \
|
||||
- SHAREDFLAGS="$(CFLAGS) $(SHARED_LDFLAGS) -shared -Wl,-Bsymbolic -Wl,-soname=$$SHLIB$$SHLIB_SOVER$$SHLIB_SUFFIX"
|
||||
+ SHAREDFLAGS="$(CFLAGS) $(SHARED_LDFLAGS) -shared -Wl,-Bsymbolic -Wl,--default-symver,--version-script=version.map -Wl,-soname=$$SHLIB$$SHLIB_SOVER$$SHLIB_SUFFIX"
|
||||
|
||||
DO_GNU_APP=LDFLAGS="$(CFLAGS)"
|
||||
|
||||
diff -up openssl-1.0.1/version.map.version openssl-1.0.1/version.map
|
||||
--- openssl-1.0.1/version.map.version 2012-03-14 20:58:20.631352556 +0100
|
||||
+++ openssl-1.0.1/version.map 2012-03-14 20:58:20.631352556 +0100
|
||||
@@ -0,0 +1,7 @@
|
||||
+OPENSSL_1.0.1 {
|
||||
+ global:
|
||||
+ SSLeay;
|
||||
+ local:
|
||||
+ _original*;
|
||||
+ _current*;
|
||||
+};
|
||||
--- openssl-1.0.1p/crypto/cversion.c.orig 2015-08-16 15:44:39.732602452 +0200
|
||||
+++ openssl-1.0.1p/crypto/cversion.c 2015-08-16 15:45:16.262509801 +0200
|
||||
@@ -97,7 +97,14 @@
|
||||
return ("not available");
|
||||
}
|
||||
|
||||
-unsigned long SSLeay(void)
|
||||
+unsigned long _original_SSLeay(void)
|
||||
{
|
||||
- return (SSLEAY_VERSION_NUMBER);
|
||||
+ return(0x10000003);
|
||||
}
|
||||
+
|
||||
+unsigned long _current_SSLeay(void)
|
||||
+{
|
||||
+ return(SSLEAY_VERSION_NUMBER);
|
||||
+}
|
||||
+__asm__(".symver _original_SSLeay,SSLeay@");
|
||||
+__asm__(".symver _current_SSLeay,SSLeay@@OPENSSL_1.0.1");
|
||||
--- openssl-1.0.1p/crypto/opensslv.h.orig 2015-08-16 15:44:39.733602449 +0200
|
||||
+++ openssl-1.0.1p/crypto/opensslv.h 2015-08-16 15:47:04.895305120 +0200
|
||||
@@ -88,7 +88,7 @@
|
||||
* should only keep the versions that are binary compatible with the current.
|
||||
*/
|
||||
# define SHLIB_VERSION_HISTORY ""
|
||||
-# define SHLIB_VERSION_NUMBER "1.0.0"
|
||||
+# define SHLIB_VERSION_NUMBER "1.0.1"
|
||||
|
||||
|
||||
#ifdef __cplusplus
|
||||
78
openssl-1.0.1s-legacy-engines-dir.patch
Normal file
78
openssl-1.0.1s-legacy-engines-dir.patch
Normal file
@ -0,0 +1,78 @@
|
||||
Index: openssl-1.0.0c/Makefile.org
|
||||
===================================================================
|
||||
--- openssl-1.0.0c.orig/Makefile.org 2010-01-27 17:06:58.000000000 +0100
|
||||
+++ openssl-1.0.0c/Makefile.org 2010-12-13 19:41:03.000000000 +0100
|
||||
@@ -497,7 +497,7 @@
|
||||
install_sw:
|
||||
@$(PERL) $(TOP)/util/mkdir-p.pl $(INSTALL_PREFIX)$(INSTALLTOP)/bin \
|
||||
$(INSTALL_PREFIX)$(INSTALLTOP)/$(LIBDIR) \
|
||||
- $(INSTALL_PREFIX)$(INSTALLTOP)/$(LIBDIR)/engines \
|
||||
+ $(INSTALL_PREFIX)$(INSTALLTOP)/$(LIBDIR)/openssl-1.0.1/engines \
|
||||
$(INSTALL_PREFIX)$(INSTALLTOP)/$(LIBDIR)/pkgconfig \
|
||||
$(INSTALL_PREFIX)$(INSTALLTOP)/include/openssl \
|
||||
$(INSTALL_PREFIX)$(OPENSSLDIR)/misc \
|
||||
Index: openssl-1.0.0c/engines/Makefile
|
||||
===================================================================
|
||||
--- openssl-1.0.0c.orig/engines/Makefile 2010-08-24 23:46:34.000000000 +0200
|
||||
+++ openssl-1.0.0c/engines/Makefile 2010-12-12 19:16:22.000000000 +0100
|
||||
@@ -107,7 +107,7 @@
|
||||
@[ -n "$(INSTALLTOP)" ] # should be set by top Makefile...
|
||||
@if [ -n "$(SHARED_LIBS)" ]; then \
|
||||
set -e; \
|
||||
- $(PERL) $(TOP)/util/mkdir-p.pl $(INSTALL_PREFIX)$(INSTALLTOP)/$(LIBDIR)/engines; \
|
||||
+ $(PERL) $(TOP)/util/mkdir-p.pl $(INSTALL_PREFIX)$(INSTALLTOP)/$(LIBDIR)/openssl-1.0.1/engines; \
|
||||
for l in $(LIBNAMES); do \
|
||||
( echo installing $$l; \
|
||||
pfx=lib; \
|
||||
@@ -119,13 +119,13 @@
|
||||
*DSO_WIN32*) sfx="eay32.dll"; pfx=;; \
|
||||
*) sfx=".bad";; \
|
||||
esac; \
|
||||
- cp $$pfx$$l$$sfx $(INSTALL_PREFIX)$(INSTALLTOP)/$(LIBDIR)/engines/$$pfx$$l$$sfx.new; \
|
||||
+ cp $$pfx$$l$$sfx $(INSTALL_PREFIX)$(INSTALLTOP)/$(LIBDIR)/openssl-1.0.1/engines/$$pfx$$l$$sfx.new; \
|
||||
else \
|
||||
sfx=".so"; \
|
||||
- cp cyg$$l.dll $(INSTALL_PREFIX)$(INSTALLTOP)/$(LIBDIR)/engines/$$pfx$$l$$sfx.new; \
|
||||
+ cp cyg$$l.dll $(INSTALL_PREFIX)$(INSTALLTOP)/$(LIBDIR)/openssl-1.0.1/engines/$$pfx$$l$$sfx.new; \
|
||||
fi; \
|
||||
- chmod 555 $(INSTALL_PREFIX)$(INSTALLTOP)/$(LIBDIR)/engines/$$pfx$$l$$sfx.new; \
|
||||
- mv -f $(INSTALL_PREFIX)$(INSTALLTOP)/$(LIBDIR)/engines/$$pfx$$l$$sfx.new $(INSTALL_PREFIX)$(INSTALLTOP)/$(LIBDIR)/engines/$$pfx$$l$$sfx ); \
|
||||
+ chmod 555 $(INSTALL_PREFIX)$(INSTALLTOP)/$(LIBDIR)/openssl-1.0.1/engines/$$pfx$$l$$sfx.new; \
|
||||
+ mv -f $(INSTALL_PREFIX)$(INSTALLTOP)/$(LIBDIR)/openssl-1.0.1/engines/$$pfx$$l$$sfx.new $(INSTALL_PREFIX)$(INSTALLTOP)/$(LIBDIR)/openssl-1.0.1/engines/$$pfx$$l$$sfx ); \
|
||||
done; \
|
||||
fi
|
||||
@target=install; $(RECURSIVE_MAKE)
|
||||
Index: openssl-1.0.0c/Configure
|
||||
===================================================================
|
||||
--- openssl-1.0.0c.orig/Configure 2010-12-12 19:16:22.000000000 +0100
|
||||
+++ openssl-1.0.0c/Configure 2010-12-13 19:40:53.000000000 +0100
|
||||
@@ -1732,7 +1732,7 @@
|
||||
}
|
||||
elsif (/^#define\s+ENGINESDIR/)
|
||||
{
|
||||
- my $foo = "$prefix/$libdir/engines";
|
||||
+ my $foo = "$prefix/$libdir/openssl-1.0.1/engines";
|
||||
$foo =~ s/\\/\\\\/g;
|
||||
print OUT "#define ENGINESDIR \"$foo\"\n";
|
||||
}
|
||||
Index: openssl-1.0.0c/engines/ccgost/Makefile
|
||||
===================================================================
|
||||
--- openssl-1.0.0c.orig/engines/ccgost/Makefile 2010-12-13 19:41:14.000000000 +0100
|
||||
+++ openssl-1.0.0c/engines/ccgost/Makefile 2010-12-13 19:42:21.000000000 +0100
|
||||
@@ -53,13 +53,13 @@
|
||||
*DSO_WIN32*) sfx="eay32.dll"; pfx=;; \
|
||||
*) sfx=".bad";; \
|
||||
esac; \
|
||||
- cp $${pfx}$(LIBNAME)$$sfx $(INSTALL_PREFIX)$(INSTALLTOP)/$(LIBDIR)/engines/$${pfx}$(LIBNAME)$$sfx.new; \
|
||||
+ cp $${pfx}$(LIBNAME)$$sfx $(INSTALL_PREFIX)$(INSTALLTOP)/$(LIBDIR)/openssl-1.0.1/engines/$${pfx}$(LIBNAME)$$sfx.new; \
|
||||
else \
|
||||
sfx=".so"; \
|
||||
cp cyg$(LIBNAME).dll $(INSTALL_PREFIX)$(INSTALLTOP)/$(LIBDIR)/engines/$${pfx}$(LIBNAME)$$sfx.new; \
|
||||
fi; \
|
||||
- chmod 555 $(INSTALL_PREFIX)$(INSTALLTOP)/$(LIBDIR)/engines/$${pfx}$(LIBNAME)$$sfx.new; \
|
||||
- mv -f $(INSTALL_PREFIX)$(INSTALLTOP)/$(LIBDIR)/engines/$${pfx}$(LIBNAME)$$sfx.new $(INSTALL_PREFIX)$(INSTALLTOP)/$(LIBDIR)/engines/$${pfx}$(LIBNAME)$$sfx; \
|
||||
+ chmod 555 $(INSTALL_PREFIX)$(INSTALLTOP)/$(LIBDIR)/openssl-1.0.1/engines/$${pfx}$(LIBNAME)$$sfx.new; \
|
||||
+ mv -f $(INSTALL_PREFIX)$(INSTALLTOP)/$(LIBDIR)/openssl-1.0.1/engines/$${pfx}$(LIBNAME)$$sfx.new $(INSTALL_PREFIX)$(INSTALLTOP)/$(LIBDIR)/openssl-1.0.1/engines/$${pfx}$(LIBNAME)$$sfx; \
|
||||
fi
|
||||
|
||||
links:
|
||||
160
openssl-makecerts
Normal file
160
openssl-makecerts
Normal file
@ -0,0 +1,160 @@
|
||||
#!/bin/bash
|
||||
#
|
||||
# Creates self-signed ssl certificates
|
||||
# Copyright (c) 2003-2008 by Silvan Calarco <silvan.calarco@mambasoft.it>
|
||||
# Copyright (c) 2003-2005 by Davide Madrisan <davide.madrisan@qilinux.it>
|
||||
#
|
||||
# Create server side certificates
|
||||
# documentation taken from openssl howtos http://www.openssl.org/docs/HOWTO/
|
||||
|
||||
SSLDIR=/var/ssl
|
||||
[ "$CADAYS" ] || CADAYS=3650
|
||||
[ "$CERTDAYS" ] || CERTDAYS=1825
|
||||
mksslc_tempfile=`tempfile 2>/dev/null`
|
||||
# 1. Creating a certificate request (optional)
|
||||
# To create a certificate, you need to start with a certificate request
|
||||
# or, as some certificate authorities like to put it,
|
||||
# "certificate signing request", since that's exactly what they do,
|
||||
# they sign it and give you the result back, thus making it authentic
|
||||
# according to their policies. A certificate request can then be sent
|
||||
# to a certificate authority to get it signed into a certificate, or if
|
||||
# you have your own certificate authority, you may sign it yourself, or
|
||||
# if you need a self-signed certificate. Because you just want a test
|
||||
# certificate or because you are setting up your own CA.
|
||||
|
||||
#openssl req -new -key privkey.perm -out cert.csr
|
||||
|
||||
# 2. Creating a self-signed root Certification Authority certificate
|
||||
# If you don't want to deal with another certificate authority, or just
|
||||
# want to create a test certificate for yourself. This is similar to
|
||||
# creating a certificate request, but creates a certificate instead of
|
||||
# a certificate request. This is NOT the recommended way to create a
|
||||
# CA certificate, see ca.txt.
|
||||
|
||||
if [ ! -e $SSLDIR/cacert.pem ]; then
|
||||
echo
|
||||
echo "Creating a new Certification Authority"
|
||||
[ "$CAPASS" -a "$CACOUNTRY" -a "$CASTATE" -a "$CACITY" -a \
|
||||
"$CAORGANIZATION" -a "$CAOU" -a "$CACOMMONNAME" -a "$CAEMAIL" ] ||
|
||||
echo "Please enter information about the Certification Authority"
|
||||
while [ ! "$CACOUNTRY" -o ${#CACOUNTRY} -ne 2 ]; do
|
||||
read -p "Two-letters country code (e.g. IT): " CACOUNTRY;
|
||||
done
|
||||
while [ ! "$CASTATE" ]; do read -p "State: " CASTATE; done
|
||||
while [ ! "$CACITY" ]; do read -p "City: " CACITY; done
|
||||
while [ ! "$CAORGANIZATION" ]; do read -p "Organization: " CAORGANIZATION; done
|
||||
while [ ! "$CAOU" ]; do read -p "Operational unit: " CAOU; done
|
||||
while [ ! "$CACOMMONNAME" ]; do read -p "Common name: " CACOMMONNAME; done
|
||||
while [ ! "$CAEMAIL" ]; do read -p "Email: " CAEMAIL; done
|
||||
while [ ! "$CAPASS" -o "$CAPASS" != "$CONFIRMPASS" ]; do
|
||||
unset CAPASS
|
||||
while [ ! "$CAPASS" ]; do read -s -p "Please enter a passphrase: " CAPASS; echo; done
|
||||
read -s -p "Please confirm the passphrase: " CONFIRMPASS
|
||||
echo
|
||||
done
|
||||
|
||||
echo "Generating a self-signed root Certification Authority certificate"
|
||||
cat << _EOF > $mksslc_tempfile
|
||||
$CAPASS
|
||||
$CACOUNTRY
|
||||
$CASTATE
|
||||
$CACITY
|
||||
$CAORGANIZATION
|
||||
$CAOU
|
||||
$CACOMMONNAME
|
||||
$CAEMAIL
|
||||
_EOF
|
||||
|
||||
openssl req -passout stdin -new -x509 -keyout $SSLDIR/private/cakey.pem \
|
||||
-out $SSLDIR/cacert.pem -days 3650 < $mksslc_tempfile 2>&1 || exit 1
|
||||
|
||||
fi
|
||||
|
||||
rm -f $mksslc_tempfile # remove sensible data
|
||||
|
||||
[ "$CERTPASS" -a "$CERTCOUNTRY" -a "$CERTSTATE" -a "$CERTCITY" -a \
|
||||
"$CERTORGANIZATION" -a "$CERTOU" -a "$CERTCOMMONNAME" -a "$CERTEMAIL" ] || {
|
||||
echo
|
||||
echo "Please enter information about the self-signed server certificate"
|
||||
}
|
||||
|
||||
while [ ! "$CERTCOUNTRY" -o ${#CERTCOUNTRY} -ne 2 ]; do
|
||||
read -p "Two-letters country code (e.g. IT) [$CACOUNTRY]: " CERTCOUNTRY
|
||||
[ "$CERTCOUNTRY" ] || CERTCOUNTRY=$CACOUNTRY
|
||||
done
|
||||
while [ ! "$CERTSTATE" ]; do
|
||||
read -p "State [$CASTATE]: " CERTSTATE
|
||||
[ "$CERTSTATE" ] || CERTSTATE=$CASTATE
|
||||
done
|
||||
while [ ! "$CERTCITY" ]; do
|
||||
read -p "City [$CACITY]: " CERTCITY
|
||||
[ "$CERTCITY" ] || CERTCITY=$CACITY
|
||||
done
|
||||
while [ ! "$CERTORGANIZATION" ]; do
|
||||
read -p "Organization [$CAORGANIZATION]: " CERTORGANIZATION
|
||||
[ "$CERTORGANIZATION" ] || CERTORGANIZATION="$CAORGANIZATION"
|
||||
done
|
||||
while [ ! "$CERTOU" ]; do
|
||||
read -p "Operational unit [$CAOU]: " CERTOU
|
||||
[ "$CERTOU" ] || CERTOU=$CAOU
|
||||
done
|
||||
while [ ! "$CERTCOMMONNAME" ]; do
|
||||
read -p "Common name [$CACOMMONNAME]: " CERTCOMMONNAME
|
||||
[ "$CERTCOMMONNAME" ] || CERTCOMMONNAME=$CACOMMONNAME
|
||||
done
|
||||
while [ ! "$CERTEMAIL" ]; do
|
||||
read -p "Email [$CAEMAIL]: " CERTEMAIL
|
||||
[ "$CERTEMAIL" ] || CERTEMAIL=$CAEMAIL
|
||||
done
|
||||
while [ ! "$CERTPASS" -o "$CERTPASS" != "$CONFIRMPASS" ]; do
|
||||
unset CERTPASS
|
||||
while [ ! "$CERTPASS" ]; do read -s -p "Please enter a passphrase: " CERTPASS; echo; done
|
||||
read -s -p "Please confirm the passphrase: " CONFIRMPASS
|
||||
echo
|
||||
done
|
||||
while [ ! "$CAPASS" ]; do
|
||||
read -s -p "Please, enter the CA passphrase for signing the certificate: " CAPASS
|
||||
done
|
||||
|
||||
[ -e $SSLDIR/certs/localhost.crt ] && {
|
||||
read -p "A certificate called $SSLDIR/certs/localhost.crt already exists; overwrite [y/N]?" OVERWRITE
|
||||
echo
|
||||
[ "$OVERWRITE" != "y" -a "$OVERWRITE" != "Y" ] && exit 0
|
||||
}
|
||||
|
||||
# 3. Generate a key without password
|
||||
openssl genrsa -out $SSLDIR/private/localhost.key >/dev/null || exit 1
|
||||
|
||||
# 4. Create a server certificate signing request (CSR)
|
||||
echo "Creating a server certificate request (CSR)"
|
||||
cat << _EOF > $mksslc_tempfile
|
||||
$CERTPASS
|
||||
$CERTCOUNTRY
|
||||
$CERTSTATE
|
||||
$CERTCITY
|
||||
$CERTORGANIZATION
|
||||
$CERTOU
|
||||
$CERTCOMMONNAME
|
||||
$CERTEMAIL
|
||||
_EOF
|
||||
echo "" >> $mksslc_tempfile # A challenge password
|
||||
echo "" >> $mksslc_tempfile # An optional company name
|
||||
|
||||
openssl req -passout stdin -new -key $SSLDIR/private/localhost.key \
|
||||
-out $SSLDIR/localhost.csr -days $CERTDAYS < $mksslc_tempfile >/dev/null || exit 1
|
||||
|
||||
rm -f $mksslc_tempfile
|
||||
|
||||
# 4. Sign a server certificate request
|
||||
echo "Signing the certificate request"
|
||||
|
||||
echo "$CAPASS" > $mksslc_tempfile
|
||||
echo "y" >> $mksslc_tempfile # Sign the certificate? [y/n]
|
||||
echo "y" >> $mksslc_tempfile # 1 out of 1 certificate requests certified, commit?
|
||||
|
||||
openssl ca -days $CERTDAYS -passin stdin -policy policy_anything -out $SSLDIR/certs/localhost.crt \
|
||||
-infiles $SSLDIR/localhost.csr < $mksslc_tempfile >/dev/null || exit 1
|
||||
|
||||
rm -f $mksslc_tempfile
|
||||
|
||||
exit 0
|
||||
347
openssl101.spec
Normal file
347
openssl101.spec
Normal file
@ -0,0 +1,347 @@
|
||||
Name: openssl101
|
||||
Version: 1.0.1s
|
||||
Release: 2mamba
|
||||
Summary: Secure Sockets Layer communications libs and utils
|
||||
Group: Network/Security
|
||||
Vendor: openmamba
|
||||
Distribution: openmamba
|
||||
Packager: Silvan Calarco <silvan.calarco@mambasoft.it>
|
||||
URL: http://www.openssl.org
|
||||
Source: http://www.openssl.org/source/openssl-%{version}.tar.gz
|
||||
Source1: openssl-makecerts
|
||||
Patch0: openssl-1.0.1a-fix_non_ia32.patch
|
||||
Patch1: openssl-1.0.1p-symbol_versioning.patch
|
||||
Patch2: openssl-1.0.1s-legacy-engines-dir.patch
|
||||
License: BSD
|
||||
## AUTOBUILDREQ-BEGIN
|
||||
BuildRequires: glibc-devel
|
||||
## AUTOBUILDREQ-END
|
||||
Requires: lib%{name} = %{?epoch:%epoch:}%{version}-%{release}
|
||||
BuildRoot: %{_tmppath}/%{name}-%{version}-root
|
||||
|
||||
%description
|
||||
The openssl certificate management tool and the shared libraries that provide various encryption and decription algorithms and protocols, including DES, RC4, RSA and SSL.
|
||||
This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/).
|
||||
This product includes cryptographic software written by Eric Young (eay@cryptsoft.com).
|
||||
This product includes software written by Tim Hudson (tjh@cryptsoft.com).
|
||||
|
||||
%package -n lib%{name}
|
||||
Summary: Library for OpenSSL
|
||||
Group: System/Libraries
|
||||
|
||||
%description -n lib%{name}
|
||||
The libraries files are needed for various cryptographic algorithms and protocols, including DES, RC4, RSA and SSL.
|
||||
This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/).
|
||||
This product includes cryptographic software written by Eric Young (eay@cryptsoft.com).
|
||||
This product includes software written by Tim Hudson (tjh@cryptsoft.com).
|
||||
|
||||
%package -n lib%{name}-devel
|
||||
Summary: Library Devel for OpenSSL
|
||||
Group: Development/Libraries
|
||||
Requires: lib%{name} = %{version}-%{release}
|
||||
|
||||
%description -n lib%{name}-devel
|
||||
Library symlinks and include files needed to compile apps with support for various cryptographic algorithms and protocols, including DES, RC4, RSA and SSL.
|
||||
This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/).
|
||||
This product includes cryptographic software written by Eric Young (eay@cryptsoft.com).
|
||||
This product includes software written by Tim Hudson (tjh@cryptsoft.com).
|
||||
|
||||
%package -n lib%{name}-static
|
||||
Summary: OpenSSL static libraries
|
||||
Group: Development/Libraries
|
||||
Requires: lib%{name} = %{version}-%{release}
|
||||
Requires: lib%{name}-devel = %{version}-%{release}
|
||||
|
||||
%description -n lib%{name}-static
|
||||
Static libraries needed to compile apps with support for various cryptographic algorithms and protocols, including DES, RC4, RSA and SSL.
|
||||
|
||||
%debug_package
|
||||
|
||||
%prep
|
||||
%setup -q -n openssl-%{version}
|
||||
#%patch0 -p1
|
||||
%patch1 -p1
|
||||
%patch2 -p1
|
||||
|
||||
%build
|
||||
# FIXME: --openssldir=%{_libdir}/ssl
|
||||
# (FHS: no executable files should be installed in /etc)
|
||||
./Configure \
|
||||
%ifarch ppc
|
||||
linux-ppc \
|
||||
%endif
|
||||
%ifarch i586
|
||||
linux-elf \
|
||||
%endif
|
||||
%ifarch x86_64
|
||||
linux-x86_64 \
|
||||
enable-ec_nistp_64_gcc_128 \
|
||||
%endif
|
||||
%ifarch arm
|
||||
linux-generic32 \
|
||||
%endif
|
||||
shared \
|
||||
enable-md2 \
|
||||
enable-ssl2 \
|
||||
--prefix=%{_prefix} \
|
||||
--openssldir=/etc/ssl
|
||||
|
||||
%ifarch ppc
|
||||
sed -i "s/-m486/-march=%{_target_cpu}/g" Makefile
|
||||
%endif
|
||||
|
||||
sed -i 's|\(.*\)chmod 644\(.*/lib/pkgconfig\)|\1chmod 755\2|' Makefile
|
||||
|
||||
%make -j1 CC=%{_host}-gcc MANDIR=%{_mandir}
|
||||
%make -j1 CC=%{_host}-gcc rehash
|
||||
|
||||
#export LD_LIBRARY_PATH=`pwd`${LD_LIBRARY_PATH:+:${LD_LIBRARY_PATH}}
|
||||
%if "%{_host}" == "%{_build}"
|
||||
make test
|
||||
%endif
|
||||
|
||||
%install
|
||||
[ "%{buildroot}" != / ] && rm -rf "%{buildroot}"
|
||||
make install CC=%{_host}-gcc INSTALL_PREFIX=%{buildroot} MANDIR=%{_mandir}
|
||||
|
||||
chmod 755 %{buildroot}%{_libdir}/pkgconfig
|
||||
chmod 644 %{buildroot}%{_libdir}/pkgconfig/*.pc
|
||||
|
||||
mv %{buildroot}%{_mandir}/man1/passwd.* \
|
||||
%{buildroot}%{_mandir}/man1/openssl-passwd.*
|
||||
mv %{buildroot}%{_mandir}/man3/err.* \
|
||||
%{buildroot}%{_mandir}/man3/openssl-err.*
|
||||
mv %{buildroot}%{_mandir}/man3/rand.* \
|
||||
%{buildroot}%{_mandir}/man3/openssl-rand.*
|
||||
# rpmbuild can't correctly handle spaces in symlink names
|
||||
rm -f %{buildroot}%{_mandir}/man7/Modes\ of\ DES.7
|
||||
|
||||
mkdir -p %{buildroot}/var/ssl/{certs,newcerts,private,crl}
|
||||
touch %{buildroot}/var/ssl/index.txt
|
||||
echo "01" > %{buildroot}/var/ssl/serial
|
||||
|
||||
sed -i "s|./demoCA|/var/ssl|" %{buildroot}/etc/ssl/openssl.cnf
|
||||
|
||||
rm -f %{buildroot}%{_libdir}/fips_premain.c
|
||||
rm -f %{buildroot}%{_libdir}/fips_premain.c.sha1
|
||||
|
||||
install -m 0755 -D %{SOURCE1} %{buildroot}%{_sbindir}/openssl-makecerts
|
||||
|
||||
%clean
|
||||
[ "%{buildroot}" != / ] && rm -rf "%{buildroot}"
|
||||
|
||||
%post -p /sbin/ldconfig
|
||||
%postun -p /sbin/ldconfig
|
||||
|
||||
%files
|
||||
%defattr(-,root,root)
|
||||
%config(noreplace) %{_sysconfdir}/ssl/openssl.cnf
|
||||
%dir %{_sysconfdir}/ssl/private
|
||||
%{_sysconfdir}/ssl/misc
|
||||
%{_bindir}/c_rehash
|
||||
#%{_bindir}/fipsld
|
||||
%{_bindir}/openssl
|
||||
%{_sbindir}/openssl-makecerts
|
||||
#%{_bindir}/openssl_fips_fingerprint
|
||||
%{_mandir}/man1/*
|
||||
%{_mandir}/man5/*
|
||||
%{_mandir}/man7/*
|
||||
%dir /var/ssl
|
||||
%dir /var/ssl/certs
|
||||
%dir /var/ssl/crl
|
||||
%dir /var/ssl/newcerts
|
||||
%dir %attr(0700,root,root) /var/ssl/private
|
||||
%config(noreplace) /var/ssl/index.txt
|
||||
%config(noreplace) /var/ssl/serial
|
||||
|
||||
%files -n lib%{name}
|
||||
%defattr(-,root,root)
|
||||
%{_libdir}/libcrypto.so.*
|
||||
%{_libdir}/libssl.so.*
|
||||
%{_libdir}/openssl-1.0.1/engines/lib*.so
|
||||
%doc LICENSE
|
||||
|
||||
%files -n lib%{name}-devel
|
||||
%defattr(-,root,root)
|
||||
%dir %{_includedir}/openssl
|
||||
%{_includedir}/openssl/*
|
||||
%{_libdir}/*.so
|
||||
%{_libdir}/pkgconfig/libcrypto.pc
|
||||
%{_libdir}/pkgconfig/libssl.pc
|
||||
%{_libdir}/pkgconfig/openssl.pc
|
||||
%{_mandir}/man3/*
|
||||
#%doc CHANGES* FAQ NEWS PROBLEMS README*
|
||||
|
||||
%files -n lib%{name}-static
|
||||
%defattr(-,root,root)
|
||||
%{_libdir}/*.a
|
||||
|
||||
%changelog
|
||||
* Sat Apr 30 2016 Silvan Calarco <silvan.calarco@mambasoft.it> 1.0.1s-2mamba
|
||||
- rebuilt with enable-ssl2
|
||||
|
||||
* Sat Apr 30 2016 Silvan Calarco <silvan.calarco@mambasoft.it> 1.0.1s-1mamba
|
||||
- update to 1.0.1s
|
||||
- legacy package
|
||||
|
||||
* Sun Aug 16 2015 Silvan Calarco <silvan.calarco@mambasoft.it> 1.0.1p-1mamba
|
||||
- update to 1.0.1p
|
||||
|
||||
* Fri Jan 16 2015 Automatic Build System <autodist@mambasoft.it> 1.0.1l-1mamba
|
||||
- automatic version update by autodist
|
||||
|
||||
* Fri Jan 09 2015 Automatic Build System <autodist@mambasoft.it> 1.0.1k-1mamba
|
||||
- automatic version update by autodist
|
||||
|
||||
* Thu Oct 16 2014 Automatic Build System <autodist@mambasoft.it> 1.0.1j-1mamba
|
||||
- automatic version update by autodist
|
||||
|
||||
* Thu Aug 07 2014 Automatic Build System <autodist@mambasoft.it> 1.0.1i-1mamba
|
||||
- automatic version update by autodist
|
||||
|
||||
* Sat Jul 26 2014 Silvan Calarco <silvan.calarco@mambasoft.it> 1.0.1h-2mamba
|
||||
- x86_64: rebuild with enable-ec_nistp_64_gcc_128 as suggested by tor
|
||||
|
||||
* Fri Jun 06 2014 Automatic Build System <autodist@mambasoft.it> 1.0.1h-1mamba
|
||||
- automatic version update by autodist
|
||||
|
||||
* Tue Apr 08 2014 Automatic Build System <autodist@mambasoft.it> 1.0.1g-1mamba
|
||||
- automatic version update by autodist
|
||||
|
||||
* Sun Feb 09 2014 Automatic Build System <autodist@mambasoft.it> 1.0.1f-1mamba
|
||||
- automatic version update by autodist
|
||||
|
||||
* Fri Nov 15 2013 Silvan Calarco <silvan.calarco@mambasoft.it> 1.0.1e-3mamba
|
||||
- added openssl-static subpackage
|
||||
|
||||
* Thu Jun 27 2013 Silvan Calarco <silvan.calarco@mambasoft.it> 1.0.1e-2mamba
|
||||
- man and doc pages moved to appropriate subpackage
|
||||
- don't provide 1.0.0 lib compatibility links (use now openssl100 legacy package)
|
||||
|
||||
* Tue Feb 12 2013 Automatic Build System <autodist@mambasoft.it> 1.0.1e-1mamba
|
||||
- automatic version update by autodist
|
||||
|
||||
* Fri Feb 08 2013 Automatic Build System <autodist@mambasoft.it> 1.0.1d-1mamba
|
||||
- automatic version update by autodist
|
||||
|
||||
* Mon Jul 02 2012 Silvan Calarco <silvan.calarco@mambasoft.it> 1.0.1c-2mamba
|
||||
- addded patch to enable symbol versioning
|
||||
|
||||
* Sat May 12 2012 Automatic Build System <autodist@mambasoft.it> 1.0.1c-1mamba
|
||||
- automatic version update by autodist
|
||||
|
||||
* Fri Apr 20 2012 Automatic Build System <autodist@mambasoft.it> 1.0.1a-1mamba
|
||||
- automatic version update by autodist
|
||||
|
||||
* Thu Mar 15 2012 Automatic Build System <autodist@mambasoft.it> 1.0.1-1mamba
|
||||
- automatic version update by autodist
|
||||
|
||||
* Tue Mar 13 2012 Automatic Build System <autodist@mambasoft.it> 1.0.0h-1mamba
|
||||
- automatic version update by autodist
|
||||
|
||||
* Thu Jan 19 2012 Automatic Build System <autodist@mambasoft.it> 1.0.0g-1mamba
|
||||
- automatic version update by autodist
|
||||
|
||||
* Thu Jan 05 2012 Automatic Build System <autodist@mambasoft.it> 1.0.0f-1mamba
|
||||
- automatic version update by autodist
|
||||
|
||||
* Tue Sep 06 2011 Automatic Build System <autodist@mambasoft.it> 1.0.0e-1mamba
|
||||
- automatic version update by autodist
|
||||
|
||||
* Mon Mar 14 2011 Silvan Calarco <silvan.calarco@mambasoft.it> 1.0.0d-2mamba
|
||||
- rebuilt with debug package
|
||||
|
||||
* Wed Feb 09 2011 Automatic Build System <autodist@mambasoft.it> 1.0.0d-1mamba
|
||||
- automatic update by autodist
|
||||
|
||||
* Mon Dec 06 2010 Automatic Build System <autodist@mambasoft.it> 1.0.0c-1mamba
|
||||
- automatic update to 1.0.0c by autodist
|
||||
|
||||
* Fri Jul 02 2010 Davide Madrisan <davide.madrisan@gmail.com> 1.0.0a-2mamba
|
||||
- enable md2 support
|
||||
|
||||
* Wed Jun 02 2010 Automatic Build System <autodist@mambasoft.it> 1.0.0a-1mamba
|
||||
- automatic update to 1.0.0a by autodist
|
||||
|
||||
* Tue Mar 30 2010 Automatic Build System <autodist@mambasoft.it> 1.0.0-1mamba
|
||||
- automatic update to 1.0.0 by autodist
|
||||
|
||||
* Mon Mar 29 2010 Automatic Build System <autodist@mambasoft.it> 0.9.8n-1mamba
|
||||
- automatic update to 0.9.8n by autodist
|
||||
|
||||
* Tue Mar 23 2010 Silvan Calarco <silvan.calarco@mambasoft.it> 0.9.8m-2mamba
|
||||
- move /etc/ssl/misc to openssl package
|
||||
- removed build requirement for perl
|
||||
- add support for arm target
|
||||
|
||||
* Fri Feb 26 2010 Automatic Build System <autodist@mambasoft.it> 0.9.8m-1mamba
|
||||
- automatic update to 0.9.8m by autodist
|
||||
|
||||
* Wed Nov 18 2009 Automatic Build System <autodist@mambasoft.it> 0.9.8l-1mamba
|
||||
- automatic update to 0.9.8l by autodist
|
||||
|
||||
* Fri Mar 27 2009 Silvan Calarco <silvan.calarco@mambasoft.it> 0.9.8k-1mamba
|
||||
- automatic update to 0.9.8k by autodist
|
||||
|
||||
* Wed Jan 07 2009 Silvan Calarco <silvan.calarco@mambasoft.it> 0.9.8j-1mamba
|
||||
- automatic update to 0.9.8j by autodist
|
||||
|
||||
* Sat Oct 04 2008 Silvan Calarco <silvan.calarco@mambasoft.it> 0.9.8i-2mamba
|
||||
- libopenssl-devel: obsolete libopenssl097-devel
|
||||
- set 700 permission to /var/ssl/private directory
|
||||
|
||||
* Tue Sep 16 2008 Silvan Calarco <silvan.calarco@mambasoft.it> 0.9.8i-1mamba
|
||||
- automatic update to 0.9.8i by autodist
|
||||
|
||||
* Tue Jun 17 2008 Silvan Calarco <silvan.calarco@mambasoft.it> 0.9.8h-1mamba
|
||||
- update to 0.9.8h
|
||||
|
||||
* Fri Mar 14 2008 Silvan Calarco <silvan.calarco@mambasoft.it> 0.9.8g-3mamba
|
||||
- added openssl-makecerts script for creating a CA and a self-signed certificate
|
||||
|
||||
* Mon Dec 31 2007 Aleph0 <aleph0@openmamba.org> 0.9.8g-2mamba
|
||||
- fix permissions of .pc files
|
||||
|
||||
* Sun Nov 18 2007 Silvan Calarco <silvan.calarco@mambasoft.it> 0.9.8g-1mamba
|
||||
- update to 0.9.8g
|
||||
|
||||
* Wed Sep 06 2006 Davide Madrisan <davide.madrisan@qilinux.it> 0.9.7k-1qilnx
|
||||
- update to version 0.9.7k by autospec
|
||||
- also fixes CAN-2006-4339 (bugzilla#230)
|
||||
|
||||
* Fri Oct 14 2005 Davide Madrisan <davide.madrisan@qilinux.it> 0.9.7h-1qilnx
|
||||
- update to version 0.9.7h by autospec
|
||||
- also fixes the security issue QSA-2005-119 (CAN-2005-2969)
|
||||
- patches removed (merget upstream)
|
||||
|
||||
* Wed Jul 27 2005 Davide Madrisan <davide.madrisan@qilinux.it> 0.9.7e-2qilnx
|
||||
- fix security issue QSA-2005-083 (CAN-2005-0109)
|
||||
- do not create a broken link to the libfips library (p0)
|
||||
see http://www.mail-archive.com/openssl-dev%40openssl.org/msg18268.html
|
||||
|
||||
* Tue Dec 14 2004 Davide Madrisan <davide.madrisan@qilinux.it> 0.9.7e-1qilnx
|
||||
- update to version 0.9.7e by autospec
|
||||
- fix security issue QSA-2004-062 (CAN-2004-0975)
|
||||
- added documentation
|
||||
|
||||
* Thu Mar 18 2004 Davide Madrisan <davide.madrisan@qilinux.it> 0.9.7d-1qilnx
|
||||
- security fix release (CAN-2004-0079, CAN-2004-0112)
|
||||
|
||||
* Mon Jan 19 2004 Davide Madrisan <davide.madrisan@qilinux.it> 0.9.7c-2qilnx
|
||||
- specfile fixes
|
||||
|
||||
* Wed Oct 01 2003 Davide Madrisan <davide.madrisan@qilinux.it> 0.9.7c-1qilnx
|
||||
- rebuilt with new version (important security bugfixes)
|
||||
|
||||
* Fri Jul 25 2003 Silvan Calarco <silvan.calarco@qinet.it> 0.9.7b-4qilnx
|
||||
- configured so that certificates are by default under /var/ssl
|
||||
|
||||
* Wed Jun 18 2003 Silvan Calarco <silvan.calarco@qinet.it> 0.9.7b-3qilnx
|
||||
- rebuilt against gcc 3.2.3
|
||||
- files correctly redistributed beetwen main and devel package
|
||||
|
||||
* Wed Apr 30 2003 Silvan Calarco <silvan.calarco@qinet.it>
|
||||
- err, rand and passwd manpages renamed to openssl-* to avoid conflicts with other versions
|
||||
|
||||
* Tue Apr 16 2003 Luca Tinelli <luca.tinelli@qinet.it>
|
||||
- first build
|
||||
Loading…
Reference in New Issue
Block a user