diff --git a/README.md b/README.md index dff27ef..84aed77 100644 --- a/README.md +++ b/README.md @@ -1,2 +1,7 @@ # openssl102 +The openssl certificate management tool and the shared libraries that provide various encryption and decription algorithms and protocols, including DES, RC4, RSA and SSL. +This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/). +This product includes cryptographic software written by Eric Young (eay@cryptsoft.com). +This product includes software written by Tim Hudson (tjh@cryptsoft.com). + diff --git a/openssl-1.0.2a-version.patch b/openssl-1.0.2a-version.patch new file mode 100644 index 0000000..c93ffe8 --- /dev/null +++ b/openssl-1.0.2a-version.patch @@ -0,0 +1,245 @@ + + + +rpms/openssl.git - openssl + + + + + + + + + + + + + + +
+ + + + +
+summaryrefslogtreecommitdiffstats
+ + + +
+
+
path: root/openssl-1.0.2a-version.patch
blob: 25dfff51b067efd41d92d3b67c9c8fad820efff5 (plain) + + +
1
+2
+3
+4
+5
+6
+7
+8
+9
+10
+11
+12
+13
+14
+15
+16
+17
+18
+19
+20
+21
+22
+23
+24
+25
+26
+27
+28
+29
+30
+31
+32
+33
+34
+35
+36
+37
+38
+39
+40
+41
+42
+43
+44
+45
+46
+47
+48
+49
+50
+51
+52
+53
+54
+55
+56
+57
+58
+59
+60
+61
+62
+63
+64
+65
+66
+67
+68
+69
+70
+71
+72
+73
+74
+75
+76
+77
+78
+79
+80
+81
+82
+83
+
diff -up openssl-1.0.2a/crypto/cversion.c.version openssl-1.0.2a/crypto/cversion.c
+--- openssl-1.0.2a/crypto/cversion.c.version	2015-03-19 14:30:36.000000000 +0100
++++ openssl-1.0.2a/crypto/cversion.c	2015-04-21 16:48:56.285535316 +0200
+@@ -62,7 +62,7 @@
+ # include "buildinf.h"
+ #endif
+ 
+-const char *SSLeay_version(int t)
++const char *_current_SSLeay_version(int t)
+ {
+     if (t == SSLEAY_VERSION)
+         return OPENSSL_VERSION_TEXT;
+@@ -101,7 +101,40 @@ const char *SSLeay_version(int t)
+     return ("not available");
+ }
+ 
+-unsigned long SSLeay(void)
++const char *_original_SSLeay_version(int t)
++{
++    if (t == SSLEAY_VERSION)
++        return "OpenSSL 1.0.0-fips 29 Mar 2010";
++    else
++        return _current_SSLeay_version(t);
++}
++
++const char *_original101_SSLeay_version(int t)
++{
++    if (t == SSLEAY_VERSION)
++        return "OpenSSL 1.0.1e-fips 11 Feb 2013";
++    else
++        return _current_SSLeay_version(t);
++}
++
++unsigned long _original_SSLeay(void)
++{
++    return (0x10000003L);
++}
++
++unsigned long _original101_SSLeay(void)
++{
++    return (0x1000105fL);
++}
++
++unsigned long _current_SSLeay(void)
+ {
+     return (SSLEAY_VERSION_NUMBER);
+ }
++
++__asm__(".symver _original_SSLeay,SSLeay@");
++__asm__(".symver _original_SSLeay_version,SSLeay_version@");
++__asm__(".symver _original101_SSLeay,SSLeay@OPENSSL_1.0.1");
++__asm__(".symver _original101_SSLeay_version,SSLeay_version@OPENSSL_1.0.1");
++__asm__(".symver _current_SSLeay,SSLeay@@OPENSSL_1.0.2");
++__asm__(".symver _current_SSLeay_version,SSLeay_version@@OPENSSL_1.0.2");
+diff -up openssl-1.0.2a/Makefile.shared.version openssl-1.0.2a/Makefile.shared
+--- openssl-1.0.2a/Makefile.shared.version	2015-04-21 16:43:02.624170648 +0200
++++ openssl-1.0.2a/Makefile.shared	2015-04-21 16:43:02.676171879 +0200
+@@ -151,7 +151,7 @@ DO_GNU_SO=$(CALC_VERSIONS); \
+ 	SHLIB_SUFFIX=; \
+ 	ALLSYMSFLAGS='-Wl,--whole-archive'; \
+ 	NOALLSYMSFLAGS='-Wl,--no-whole-archive'; \
+-	SHAREDFLAGS="$(CFLAGS) $(SHARED_LDFLAGS) -shared -Wl,-Bsymbolic -Wl,-soname=$$SHLIB$$SHLIB_SOVER$$SHLIB_SUFFIX"
++	SHAREDFLAGS="$(CFLAGS) $(SHARED_LDFLAGS) -shared -Wl,-Bsymbolic -Wl,--default-symver,--version-script=version.map -Wl,-soname=$$SHLIB$$SHLIB_SOVER$$SHLIB_SUFFIX"
+ 
+ DO_GNU_APP=LDFLAGS="$(CFLAGS)"
+ 
+diff -up openssl-1.0.2a/version.map.version openssl-1.0.2a/version.map
+--- openssl-1.0.2a/version.map.version	2015-04-21 16:43:02.676171879 +0200
++++ openssl-1.0.2a/version.map	2015-04-21 16:51:49.621630589 +0200
+@@ -0,0 +1,13 @@
++OPENSSL_1.0.1 {
++    global:
++	    SSLeay;
++	    SSLeay_version;
++    local:
++	    _original*;
++	    _current*;
++};
++OPENSSL_1.0.2 {
++    global:
++	    SSLeay;
++	    SSLeay_version;
++} OPENSSL_1.0.1;
+
+
+
generated by cgit v0.12 at 2016-04-30 09:59:51 (GMT)
+
+ + diff --git a/openssl-makecerts b/openssl-makecerts new file mode 100644 index 0000000..40dc64e --- /dev/null +++ b/openssl-makecerts @@ -0,0 +1,160 @@ +#!/bin/bash +# +# Creates self-signed ssl certificates +# Copyright (c) 2003-2008 by Silvan Calarco +# Copyright (c) 2003-2005 by Davide Madrisan +# +# Create server side certificates +# documentation taken from openssl howtos http://www.openssl.org/docs/HOWTO/ + +SSLDIR=/var/ssl +[ "$CADAYS" ] || CADAYS=3650 +[ "$CERTDAYS" ] || CERTDAYS=1825 +mksslc_tempfile=`tempfile 2>/dev/null` +# 1. Creating a certificate request (optional) +# To create a certificate, you need to start with a certificate request +# or, as some certificate authorities like to put it, +# "certificate signing request", since that's exactly what they do, +# they sign it and give you the result back, thus making it authentic +# according to their policies. A certificate request can then be sent +# to a certificate authority to get it signed into a certificate, or if +# you have your own certificate authority, you may sign it yourself, or +# if you need a self-signed certificate. Because you just want a test +# certificate or because you are setting up your own CA. + +#openssl req -new -key privkey.perm -out cert.csr + +# 2. Creating a self-signed root Certification Authority certificate +# If you don't want to deal with another certificate authority, or just +# want to create a test certificate for yourself. This is similar to +# creating a certificate request, but creates a certificate instead of +# a certificate request. This is NOT the recommended way to create a +# CA certificate, see ca.txt. + +if [ ! -e $SSLDIR/cacert.pem ]; then + echo + echo "Creating a new Certification Authority" + [ "$CAPASS" -a "$CACOUNTRY" -a "$CASTATE" -a "$CACITY" -a \ + "$CAORGANIZATION" -a "$CAOU" -a "$CACOMMONNAME" -a "$CAEMAIL" ] || + echo "Please enter information about the Certification Authority" + while [ ! "$CACOUNTRY" -o ${#CACOUNTRY} -ne 2 ]; do + read -p "Two-letters country code (e.g. IT): " CACOUNTRY; + done + while [ ! "$CASTATE" ]; do read -p "State: " CASTATE; done + while [ ! "$CACITY" ]; do read -p "City: " CACITY; done + while [ ! "$CAORGANIZATION" ]; do read -p "Organization: " CAORGANIZATION; done + while [ ! "$CAOU" ]; do read -p "Operational unit: " CAOU; done + while [ ! "$CACOMMONNAME" ]; do read -p "Common name: " CACOMMONNAME; done + while [ ! "$CAEMAIL" ]; do read -p "Email: " CAEMAIL; done + while [ ! "$CAPASS" -o "$CAPASS" != "$CONFIRMPASS" ]; do + unset CAPASS + while [ ! "$CAPASS" ]; do read -s -p "Please enter a passphrase: " CAPASS; echo; done + read -s -p "Please confirm the passphrase: " CONFIRMPASS + echo + done + + echo "Generating a self-signed root Certification Authority certificate" + cat << _EOF > $mksslc_tempfile +$CAPASS +$CACOUNTRY +$CASTATE +$CACITY +$CAORGANIZATION +$CAOU +$CACOMMONNAME +$CAEMAIL +_EOF + + openssl req -passout stdin -new -x509 -keyout $SSLDIR/private/cakey.pem \ + -out $SSLDIR/cacert.pem -days 3650 < $mksslc_tempfile 2>&1 || exit 1 + +fi + +rm -f $mksslc_tempfile # remove sensible data + +[ "$CERTPASS" -a "$CERTCOUNTRY" -a "$CERTSTATE" -a "$CERTCITY" -a \ + "$CERTORGANIZATION" -a "$CERTOU" -a "$CERTCOMMONNAME" -a "$CERTEMAIL" ] || { + echo + echo "Please enter information about the self-signed server certificate" +} + +while [ ! "$CERTCOUNTRY" -o ${#CERTCOUNTRY} -ne 2 ]; do + read -p "Two-letters country code (e.g. IT) [$CACOUNTRY]: " CERTCOUNTRY + [ "$CERTCOUNTRY" ] || CERTCOUNTRY=$CACOUNTRY +done +while [ ! "$CERTSTATE" ]; do + read -p "State [$CASTATE]: " CERTSTATE + [ "$CERTSTATE" ] || CERTSTATE=$CASTATE +done +while [ ! "$CERTCITY" ]; do + read -p "City [$CACITY]: " CERTCITY + [ "$CERTCITY" ] || CERTCITY=$CACITY +done +while [ ! "$CERTORGANIZATION" ]; do + read -p "Organization [$CAORGANIZATION]: " CERTORGANIZATION + [ "$CERTORGANIZATION" ] || CERTORGANIZATION="$CAORGANIZATION" +done +while [ ! "$CERTOU" ]; do + read -p "Operational unit [$CAOU]: " CERTOU + [ "$CERTOU" ] || CERTOU=$CAOU +done +while [ ! "$CERTCOMMONNAME" ]; do + read -p "Common name [$CACOMMONNAME]: " CERTCOMMONNAME + [ "$CERTCOMMONNAME" ] || CERTCOMMONNAME=$CACOMMONNAME +done +while [ ! "$CERTEMAIL" ]; do + read -p "Email [$CAEMAIL]: " CERTEMAIL + [ "$CERTEMAIL" ] || CERTEMAIL=$CAEMAIL +done +while [ ! "$CERTPASS" -o "$CERTPASS" != "$CONFIRMPASS" ]; do + unset CERTPASS + while [ ! "$CERTPASS" ]; do read -s -p "Please enter a passphrase: " CERTPASS; echo; done + read -s -p "Please confirm the passphrase: " CONFIRMPASS + echo +done +while [ ! "$CAPASS" ]; do + read -s -p "Please, enter the CA passphrase for signing the certificate: " CAPASS +done + +[ -e $SSLDIR/certs/localhost.crt ] && { + read -p "A certificate called $SSLDIR/certs/localhost.crt already exists; overwrite [y/N]?" OVERWRITE + echo + [ "$OVERWRITE" != "y" -a "$OVERWRITE" != "Y" ] && exit 0 +} + +# 3. Generate a key without password +openssl genrsa -out $SSLDIR/private/localhost.key >/dev/null || exit 1 + +# 4. Create a server certificate signing request (CSR) +echo "Creating a server certificate request (CSR)" +cat << _EOF > $mksslc_tempfile +$CERTPASS +$CERTCOUNTRY +$CERTSTATE +$CERTCITY +$CERTORGANIZATION +$CERTOU +$CERTCOMMONNAME +$CERTEMAIL +_EOF +echo "" >> $mksslc_tempfile # A challenge password +echo "" >> $mksslc_tempfile # An optional company name + +openssl req -passout stdin -new -key $SSLDIR/private/localhost.key \ + -out $SSLDIR/localhost.csr -days $CERTDAYS < $mksslc_tempfile >/dev/null || exit 1 + +rm -f $mksslc_tempfile + +# 4. Sign a server certificate request +echo "Signing the certificate request" + +echo "$CAPASS" > $mksslc_tempfile +echo "y" >> $mksslc_tempfile # Sign the certificate? [y/n] +echo "y" >> $mksslc_tempfile # 1 out of 1 certificate requests certified, commit? + +openssl ca -days $CERTDAYS -passin stdin -policy policy_anything -out $SSLDIR/certs/localhost.crt \ + -infiles $SSLDIR/localhost.csr < $mksslc_tempfile >/dev/null || exit 1 + +rm -f $mksslc_tempfile + +exit 0 diff --git a/openssl102.spec b/openssl102.spec new file mode 100644 index 0000000..c86d67d --- /dev/null +++ b/openssl102.spec @@ -0,0 +1,393 @@ +Name: openssl102 +Version: 1.0.2q +Release: 2mamba +Summary: Secure Sockets Layer communications libs and utils +Group: Network/Security +Vendor: openmamba +Distribution: openmamba +Packager: Silvan Calarco +URL: http://www.openssl.org +Source: http://www.openssl.org/source/openssl-%{version}.tar.gz +Source1: openssl-makecerts +Patch1: openssl-1.0.2a-version.patch +License: BSD +## AUTOBUILDREQ-BEGIN +BuildRequires: glibc-devel +BuildRequires: libperl +BuildRequires: perl-WWW-Curl +BuildRequires: perl-devel +## AUTOBUILDREQ-END +Requires: lib%{name} = %{?epoch:%epoch:}%{version}-%{release} +BuildRoot: %{_tmppath}/%{name}-%{version}-root + +%description +The openssl certificate management tool and the shared libraries that provide various encryption and decription algorithms and protocols, including DES, RC4, RSA and SSL. +This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/). +This product includes cryptographic software written by Eric Young (eay@cryptsoft.com). +This product includes software written by Tim Hudson (tjh@cryptsoft.com). + +%package -n lib%{name} +Summary: Library for OpenSSL +Group: System/Libraries + +%description -n lib%{name} +The libraries files are needed for various cryptographic algorithms and protocols, including DES, RC4, RSA and SSL. +This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/). +This product includes cryptographic software written by Eric Young (eay@cryptsoft.com). +This product includes software written by Tim Hudson (tjh@cryptsoft.com). + +%package -n lib%{name}-devel +Summary: Library Devel for OpenSSL +Group: Development/Libraries +Requires: lib%{name} = %{version}-%{release} + +%description -n lib%{name}-devel +Library symlinks and include files needed to compile apps with support for various cryptographic algorithms and protocols, including DES, RC4, RSA and SSL. +This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/). +This product includes cryptographic software written by Eric Young (eay@cryptsoft.com). +This product includes software written by Tim Hudson (tjh@cryptsoft.com). + +%package -n lib%{name}-static +Summary: OpenSSL static libraries +Group: Development/Libraries +Requires: lib%{name} = %{version}-%{release} +Requires: lib%{name}-devel = %{version}-%{release} + +%description -n lib%{name}-static +Static libraries needed to compile apps with support for various cryptographic algorithms and protocols, including DES, RC4, RSA and SSL. + +%debug_package + +%prep +%setup -q -n openssl-%{version} + +# Using Fedora versioning patch +%patch1 -p1 +sed -i 's/SHLIB_VERSION_NUMBER "1.0.0"/SHLIB_VERSION_NUMBER "%{version}"/' crypto/opensslv.h + +%build +# FIXME: --openssldir=%{_libdir}/ssl +# (FHS: no executable files should be installed in /etc) +./Configure \ +%ifarch ppc + linux-ppc \ +%endif +%ifarch i586 + linux-elf \ +%endif +%ifarch x86_64 + linux-x86_64 \ + enable-ec_nistp_64_gcc_128 \ +%endif +%ifarch arm + linux-generic32 \ +%endif + shared \ + enable-md2 \ + --prefix=%{_prefix} \ + --openssldir=/etc/ssl + +%ifarch ppc +sed -i "s/-m486/-march=%{_target_cpu}/g" Makefile +%endif + +sed -i 's|\(.*\)chmod 644\(.*/lib/pkgconfig\)|\1chmod 755\2|' Makefile + +%make -j1 CC=%{_host}-gcc MANDIR=%{_mandir} +%make -j1 CC=%{_host}-gcc rehash + +#export LD_LIBRARY_PATH=`pwd`${LD_LIBRARY_PATH:+:${LD_LIBRARY_PATH}} +%if "%{_host}" == "%{_build}" +make test +%endif + +%install +[ "%{buildroot}" != / ] && rm -rf "%{buildroot}" +make install CC=%{_host}-gcc INSTALL_PREFIX=%{buildroot} MANDIR=%{_mandir} + +chmod 755 %{buildroot}%{_libdir}/pkgconfig +chmod 644 %{buildroot}%{_libdir}/pkgconfig/*.pc + +mv %{buildroot}%{_mandir}/man1/passwd.* \ + %{buildroot}%{_mandir}/man1/openssl-passwd.* +mv %{buildroot}%{_mandir}/man3/err.* \ + %{buildroot}%{_mandir}/man3/openssl-err.* +mv %{buildroot}%{_mandir}/man3/rand.* \ + %{buildroot}%{_mandir}/man3/openssl-rand.* +# rpmbuild can't correctly handle spaces in symlink names +rm -f %{buildroot}%{_mandir}/man7/Modes\ of\ DES.7 + +mkdir -p %{buildroot}/var/ssl/{certs,newcerts,private,crl} +touch %{buildroot}/var/ssl/index.txt +echo "01" > %{buildroot}/var/ssl/serial + +sed -i "s|./demoCA|/var/ssl|" %{buildroot}/etc/ssl/openssl.cnf + +rm -f %{buildroot}%{_libdir}/fips_premain.c +rm -f %{buildroot}%{_libdir}/fips_premain.c.sha1 +rm -f %{buildroot}%{_mandir}/man3/.3* + +install -m 0755 -D %{SOURCE1} %{buildroot}%{_sbindir}/openssl-makecerts + +%clean +[ "%{buildroot}" != / ] && rm -rf "%{buildroot}" + +%post -p /sbin/ldconfig +%postun -p /sbin/ldconfig + +%files +%defattr(-,root,root) +%config(noreplace) %{_sysconfdir}/ssl/openssl.cnf +%dir %{_sysconfdir}/ssl/private +%{_sysconfdir}/ssl/misc +%{_bindir}/c_rehash +#%{_bindir}/fipsld +%{_bindir}/openssl +%{_sbindir}/openssl-makecerts +#%{_bindir}/openssl_fips_fingerprint +%{_mandir}/man1/* +%{_mandir}/man5/* +%{_mandir}/man7/* +%dir /var/ssl +%dir /var/ssl/certs +%dir /var/ssl/crl +%dir /var/ssl/newcerts +%dir %attr(0700,root,root) /var/ssl/private +%config(noreplace) /var/ssl/index.txt +%config(noreplace) /var/ssl/serial + +%files -n lib%{name} +%defattr(-,root,root) +%{_libdir}/libcrypto.so.* +%{_libdir}/libssl.so.* +%{_libdir}/engines/lib*.so +%doc LICENSE + +%files -n lib%{name}-devel +%defattr(-,root,root) +%dir %{_includedir}/openssl +%{_includedir}/openssl/* +%{_libdir}/*.so +%{_libdir}/pkgconfig/libcrypto.pc +%{_libdir}/pkgconfig/libssl.pc +%{_libdir}/pkgconfig/openssl.pc +%{_mandir}/man3/* +%doc CHANGES* FAQ NEWS PROBLEMS README* + +%files -n lib%{name}-static +%defattr(-,root,root) +%{_libdir}/*.a + +%changelog +* Sat Dec 08 2018 Silvan Calarco 1.0.2q-2mamba +- legacy package + +* Sat Dec 08 2018 Silvan Calarco 1.0.2q-1mamba +- update to 1.0.2q + +* Sun Sep 09 2018 Silvan Calarco 1.0.2p-1mamba +- update to 1.0.2p + +* Thu Dec 07 2017 Silvan Calarco 1.0.2m-1mamba +- update to 1.0.2m + +* Wed May 04 2016 Automatic Build System 1.0.2h-1mamba +- automatic version update by autodist + +* Sat Apr 30 2016 Silvan Calarco 1.0.2g-3mamba +- /etc and /var files moved from libopenssl to openssl + +* Sat Apr 30 2016 Silvan Calarco 1.0.2g-2mamba +- rebuilt after updating versioning patch (from Fedora) + +* Tue Mar 01 2016 Automatic Build System 1.0.2g-1mamba +- automatic version update by autodist + +* Thu Jan 28 2016 Automatic Build System 1.0.2f-1mamba +- automatic version update by autodist + +* Fri Dec 04 2015 Automatic Build System 1.0.2e-2mamba +- automatic version update by autodist + +* Fri Dec 04 2015 Automatic Build System 1.0.2e-1mamba +- automatic version update by autodist + +* Thu Jul 09 2015 Automatic Build System 1.0.2d-1mamba +- automatic version update by autodist + +* Sat Jun 13 2015 Automatic Build System 1.0.2c-1mamba +- automatic version update by autodist + +* Fri Jun 12 2015 Automatic Build System 1.0.2b-2mamba +- automatic version update by autodist + +* Fri Jun 12 2015 Automatic Build System 1.0.2b-1mamba +- automatic version update by autodist + +* Mon Apr 27 2015 Automatic Build System 1.0.2a-2mamba +- automatic version update by autodist + +* Mon Apr 27 2015 Automatic Build System 1.0.2a-1mamba +- automatic version update by autodist + +* Tue Mar 10 2015 Automatic Build System 1.0.2-1mamba +- automatic version update by autodist + +* Fri Jan 16 2015 Automatic Build System 1.0.1l-1mamba +- automatic version update by autodist + +* Fri Jan 09 2015 Automatic Build System 1.0.1k-1mamba +- automatic version update by autodist + +* Thu Oct 16 2014 Automatic Build System 1.0.1j-1mamba +- automatic version update by autodist + +* Thu Aug 07 2014 Automatic Build System 1.0.1i-1mamba +- automatic version update by autodist + +* Sat Jul 26 2014 Silvan Calarco 1.0.1h-2mamba +- x86_64: rebuild with enable-ec_nistp_64_gcc_128 as suggested by tor + +* Fri Jun 06 2014 Automatic Build System 1.0.1h-1mamba +- automatic version update by autodist + +* Tue Apr 08 2014 Automatic Build System 1.0.1g-1mamba +- automatic version update by autodist + +* Sun Feb 09 2014 Automatic Build System 1.0.1f-1mamba +- automatic version update by autodist + +* Fri Nov 15 2013 Silvan Calarco 1.0.1e-3mamba +- added openssl-static subpackage + +* Thu Jun 27 2013 Silvan Calarco 1.0.1e-2mamba +- man and doc pages moved to appropriate subpackage +- don't provide 1.0.0 lib compatibility links (use now openssl100 legacy package) + +* Tue Feb 12 2013 Automatic Build System 1.0.1e-1mamba +- automatic version update by autodist + +* Fri Feb 08 2013 Automatic Build System 1.0.1d-1mamba +- automatic version update by autodist + +* Mon Jul 02 2012 Silvan Calarco 1.0.1c-2mamba +- addded patch to enable symbol versioning + +* Sat May 12 2012 Automatic Build System 1.0.1c-1mamba +- automatic version update by autodist + +* Fri Apr 20 2012 Automatic Build System 1.0.1a-1mamba +- automatic version update by autodist + +* Thu Mar 15 2012 Automatic Build System 1.0.1-1mamba +- automatic version update by autodist + +* Tue Mar 13 2012 Automatic Build System 1.0.0h-1mamba +- automatic version update by autodist + +* Thu Jan 19 2012 Automatic Build System 1.0.0g-1mamba +- automatic version update by autodist + +* Thu Jan 05 2012 Automatic Build System 1.0.0f-1mamba +- automatic version update by autodist + +* Tue Sep 06 2011 Automatic Build System 1.0.0e-1mamba +- automatic version update by autodist + +* Mon Mar 14 2011 Silvan Calarco 1.0.0d-2mamba +- rebuilt with debug package + +* Wed Feb 09 2011 Automatic Build System 1.0.0d-1mamba +- automatic update by autodist + +* Mon Dec 06 2010 Automatic Build System 1.0.0c-1mamba +- automatic update to 1.0.0c by autodist + +* Fri Jul 02 2010 Davide Madrisan 1.0.0a-2mamba +- enable md2 support + +* Wed Jun 02 2010 Automatic Build System 1.0.0a-1mamba +- automatic update to 1.0.0a by autodist + +* Tue Mar 30 2010 Automatic Build System 1.0.0-1mamba +- automatic update to 1.0.0 by autodist + +* Mon Mar 29 2010 Automatic Build System 0.9.8n-1mamba +- automatic update to 0.9.8n by autodist + +* Tue Mar 23 2010 Silvan Calarco 0.9.8m-2mamba +- move /etc/ssl/misc to openssl package +- removed build requirement for perl +- add support for arm target + +* Fri Feb 26 2010 Automatic Build System 0.9.8m-1mamba +- automatic update to 0.9.8m by autodist + +* Wed Nov 18 2009 Automatic Build System 0.9.8l-1mamba +- automatic update to 0.9.8l by autodist + +* Fri Mar 27 2009 Silvan Calarco 0.9.8k-1mamba +- automatic update to 0.9.8k by autodist + +* Wed Jan 07 2009 Silvan Calarco 0.9.8j-1mamba +- automatic update to 0.9.8j by autodist + +* Sat Oct 04 2008 Silvan Calarco 0.9.8i-2mamba +- libopenssl-devel: obsolete libopenssl097-devel +- set 700 permission to /var/ssl/private directory + +* Tue Sep 16 2008 Silvan Calarco 0.9.8i-1mamba +- automatic update to 0.9.8i by autodist + +* Tue Jun 17 2008 Silvan Calarco 0.9.8h-1mamba +- update to 0.9.8h + +* Fri Mar 14 2008 Silvan Calarco 0.9.8g-3mamba +- added openssl-makecerts script for creating a CA and a self-signed certificate + +* Mon Dec 31 2007 Aleph0 0.9.8g-2mamba +- fix permissions of .pc files + +* Sun Nov 18 2007 Silvan Calarco 0.9.8g-1mamba +- update to 0.9.8g + +* Wed Sep 06 2006 Davide Madrisan 0.9.7k-1qilnx +- update to version 0.9.7k by autospec +- also fixes CAN-2006-4339 (bugzilla#230) + +* Fri Oct 14 2005 Davide Madrisan 0.9.7h-1qilnx +- update to version 0.9.7h by autospec +- also fixes the security issue QSA-2005-119 (CAN-2005-2969) +- patches removed (merget upstream) + +* Wed Jul 27 2005 Davide Madrisan 0.9.7e-2qilnx +- fix security issue QSA-2005-083 (CAN-2005-0109) +- do not create a broken link to the libfips library (p0) + see http://www.mail-archive.com/openssl-dev%40openssl.org/msg18268.html + +* Tue Dec 14 2004 Davide Madrisan 0.9.7e-1qilnx +- update to version 0.9.7e by autospec +- fix security issue QSA-2004-062 (CAN-2004-0975) +- added documentation + +* Thu Mar 18 2004 Davide Madrisan 0.9.7d-1qilnx +- security fix release (CAN-2004-0079, CAN-2004-0112) + +* Mon Jan 19 2004 Davide Madrisan 0.9.7c-2qilnx +- specfile fixes + +* Wed Oct 01 2003 Davide Madrisan 0.9.7c-1qilnx +- rebuilt with new version (important security bugfixes) + +* Fri Jul 25 2003 Silvan Calarco 0.9.7b-4qilnx +- configured so that certificates are by default under /var/ssl + +* Wed Jun 18 2003 Silvan Calarco 0.9.7b-3qilnx +- rebuilt against gcc 3.2.3 +- files correctly redistributed beetwen main and devel package + +* Wed Apr 30 2003 Silvan Calarco +- err, rand and passwd manpages renamed to openssl-* to avoid conflicts with other versions + +* Tue Apr 16 2003 Luca Tinelli +- first build