openssl111-vl.spec 34 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028
  1. %bcond_with utils
  2. %bcond_with perl
  3. %bcond_with fips
  4. %define build_compat32 %{?_with_compat32:1}%{!?_with_compat32:0}
  5. %{!?_pkgdocdir:%global _pkgdocdir %{_docdir}}
  6. # 1.0.0 soversion = 10
  7. # 1.1.0 soversion = 1.1 (same as upstream although presence of some symbols
  8. # depends on build configuration options)
  9. %define soversion 1.1
  10. Summary: Secure Sockets Layer Toolkit
  11. Name: openssl111
  12. Version: 1.1.1l
  13. Release: 2%{_dist_release}
  14. Group: system,security
  15. Vendor: Project Vine
  16. Distribution: Vine Linux
  17. Packager: daisuke, iwamoto
  18. License: BSDish
  19. URL: https://www.openssl.org/
  20. # We have to remove certain patented algorithms from the openssl source
  21. # tarball with the hobble-openssl script which is included below.
  22. # The original openssl upstream tarball cannot be shipped in the .src.rpm.
  23. Source: openssl-%{version}-hobbled.tar.xz
  24. Source1: hobble-openssl
  25. Source2: Makefile.certificate
  26. Source6: make-dummy-cert
  27. Source7: renew-dummy-cert
  28. Source9: opensslconf-new.h
  29. Source10: opensslconf-new-warning.h
  30. Source11: README.FIPS
  31. Source12: ec_curve.c
  32. Source13: ectest.c
  33. # Build changes
  34. Patch1: openssl-1.1.1f-build.patch
  35. Patch2: openssl-1.1.0-defaults.patch
  36. Patch3: openssl-1.1.0-no-html.patch
  37. Patch4: openssl-1.1.1-man-rename.patch
  38. # Bug fixes
  39. Patch21: openssl-1.1.0-issuer-hash.patch
  40. # Functionality changes
  41. Patch31: openssl-1.1.1-conf-paths.patch
  42. Patch32: openssl-1.1.1-version-add-engines.patch
  43. Patch33: openssl-1.1.1-apps-dgst.patch
  44. Patch36: openssl-1.1.1-no-brainpool.patch
  45. Patch37: openssl-1.1.1-ec-curves.patch
  46. Patch38: openssl-1.1.1-no-weak-verify.patch
  47. Patch40: openssl-1.1.1-disable-ssl3.patch
  48. Patch41: openssl-1.1.1-system-cipherlist.patch
  49. Patch42: openssl-1.1.1-fips.patch
  50. Patch44: openssl-1.1.1-version-override.patch
  51. Patch45: openssl-1.1.1-weak-ciphers.patch
  52. Patch46: openssl-1.1.1-seclevel.patch
  53. Patch48: openssl-1.1.1-fips-post-rand.patch
  54. Patch49: openssl-1.1.1-evp-kdf.patch
  55. Patch50: openssl-1.1.1-ssh-kdf.patch
  56. Patch51: openssl-1.1.1-intel-cet.patch
  57. Patch60: openssl-1.1.1-krb5-kdf.patch
  58. Patch61: openssl-1.1.1-edk2-build.patch
  59. Patch62: openssl-1.1.1-fips-curves.patch
  60. Patch65: openssl-1.1.1-fips-drbg-selftest.patch
  61. Patch66: openssl-1.1.1-fips-dh.patch
  62. Patch67: openssl-1.1.1-kdf-selftest.patch
  63. Patch69: openssl-1.1.1-alpn-cb.patch
  64. Patch70: openssl-1.1.1-rewire-fips-drbg.patch
  65. # Backported fixes including security fixes
  66. Patch52: openssl-1.1.1-s390x-update.patch
  67. Patch53: openssl-1.1.1-fips-crng-test.patch
  68. Patch55: openssl-1.1.1-arm-update.patch
  69. Patch56: openssl-1.1.1-s390x-ecc.patch
  70. # security fix
  71. # none
  72. BuildRoot: %{_tmppath}/%{name}-%{version}-root
  73. BuildRequires: perl, sed
  74. BuildRequires: zlib-devel, krb5-devel
  75. BuildRequires: lksctp-tools-devel
  76. Requires: mktemp
  77. Requires: ca-certificates
  78. Requires: %{name}-libs = %{version}-%{release}
  79. Provides: openssl = %{version}-%{release}
  80. #Obsoletes: openssl < 1.1.1l-2
  81. Conflicts: openssl >= 3.0.0
  82. %define solibbase %(echo %version | sed 's/[[:alpha:]]//g')
  83. %description
  84. The OpenSSL certificate management utilities.
  85. %package libs
  86. Summary: OpenSSL shared libraries.
  87. Group: system,security
  88. Requires: %{name}-libs = %{version}-%{release}
  89. Conflicts: openssl < 1.1.1l-2
  90. %description libs
  91. The OpenSSL shared libraries that provide various cryptographic algorithms
  92. and protocols.
  93. %package devel
  94. Summary: OpenSSL libraries and development headers.
  95. Group: programming
  96. Requires: %{name}-libs = %{version}-%{release}
  97. Requires: krb5-devel
  98. %description devel
  99. The static libraries and include files needed to compile apps
  100. with support for various the cryptographic algorithms and protocols
  101. supported by OpenSSL.
  102. Patches for many networking apps can be found at:
  103. ftp://ftp.psy.uq.oz.au/pub/Crypto/SSLapps/
  104. %package static
  105. Summary: Libraries for static linking of applications which will use OpenSSL
  106. Group: programming
  107. Requires: %{name}-devel = %{version}-%{release}
  108. %description static
  109. OpenSSL is a toolkit for supporting cryptography. The openssl-static
  110. package contains static libraries needed for static linking of
  111. applications which support various cryptographic algorithms and
  112. protocols.
  113. %package perl
  114. Summary: OpenSSL scripts which require Perl.
  115. Group: security
  116. Requires: %{name}-libs = %{version}-%{release}
  117. Requires: perl
  118. %description perl
  119. Perl scripts provided with OpenSSL for converting certificates and keys
  120. from other formats to those used by OpenSSL.
  121. ## to build compat32 for x86_64 architecture support
  122. %package -n compat32-%{name}
  123. Summary: Secure Sockets Layer Toolkit
  124. Group: system
  125. Requires: %{name}-libs = %{version}-%{release}
  126. Provides: compat32-openssl = %{version}-%{release}
  127. Obsoletes: compat32-openssl < 1.1.1l-2
  128. %description -n compat32-%{name}
  129. The OpenSSL shared libraries that provide various cryptographic algorithms and protocols.
  130. %package -n compat32-%{name}-devel
  131. Summary: OpenSSL libraries and development headers.
  132. Group: programming
  133. Requires: compat32-%{name} = %{version}-%{release}
  134. Requires: compat32-krb5-devel
  135. Obsoletes: compat32-openssl-devel < 1.1.1l-2
  136. %description -n compat32-%{name}-devel
  137. The static libraries and include files needed to compile apps
  138. with support for various the cryptographic algorithms and protocols
  139. supported by OpenSSL.
  140. %debug_package
  141. %prep
  142. %setup -q -n openssl-%{version}
  143. # The hobble_openssl is called here redundantly, just to be sure.
  144. # The tarball has already the sources removed.
  145. %{SOURCE1} > /dev/null
  146. cp %{SOURCE12} crypto/ec/
  147. cp %{SOURCE13} test/
  148. %patch1 -p1 -b .build %{?_rawbuild}
  149. %patch2 -p1 -b .defaults
  150. %patch3 -p1 -b .no-html %{?_rawbuild}
  151. %patch4 -p1 -b .man-rename
  152. %patch21 -p1 -b .issuer-hash
  153. %patch31 -p1 -b .conf-paths
  154. %patch32 -p1 -b .version-add-engines
  155. %patch33 -p1 -b .dgst
  156. %patch36 -p1 -b .no-brainpool
  157. %patch37 -p1 -b .curves
  158. %patch38 -p1 -b .no-weak-verify
  159. %patch40 -p1 -b .disable-ssl3
  160. %patch41 -p1 -b .system-cipherlist
  161. %if %{with fips}
  162. %patch42 -p1 -b .fips
  163. %endif
  164. %if %{with fips}
  165. %patch44 -p1 -b .version-override
  166. %endif
  167. %patch45 -p1 -b .weak-ciphers
  168. %if %{with fips}
  169. %patch46 -p1 -b .seclevel
  170. %patch49 -p1 -b .evp-kdf
  171. %patch50 -p1 -b .ssh-kdf
  172. %patch51 -p1 -b .upstream-sync
  173. #patch52 -p1 -b .s390x-update
  174. %endif
  175. %if %{with fips}
  176. %patch53 -p1 -b .crng-test
  177. %endif
  178. #patch55 -p1 -b .arm-update
  179. #patch56 -p1 -b .s390x-ecc
  180. %if %{with fips}
  181. %patch60 -p1 -b .krb5-kdf
  182. %patch61 -p1 -b .edk2-build
  183. %patch62 -p1 -b .fips-curves
  184. %patch65 -p1 -b .drbg-selftest
  185. %patch66 -p1 -b .fips-dh
  186. %patch67 -p1 -b .kdf-selftest
  187. %endif
  188. %patch69 -p1 -b .alpn-cb
  189. %if %{with fips}
  190. %patch70 -p1 -b .rewire-fips-drbg
  191. %endif
  192. # security fix
  193. # none
  194. %build
  195. # Figure out which flags we want to use.
  196. # default
  197. sslarch=%{_os}-%{_target_cpu}
  198. #
  199. %ifarch %ix86
  200. sslarch=linux-elf
  201. if ! echo %{_target} | grep -q i686 ; then
  202. sslflags="no-asm 386"
  203. fi
  204. %endif
  205. %ifarch x86_64
  206. sslflags=enable-ec_nistp_64_gcc_128
  207. %endif
  208. # Add -Wa,--noexecstack here so that libcrypto's assembler modules will be
  209. # marked as not requiring an executable stack.
  210. # Also add -DPURIFY to make using valgrind with openssl easier as we do not
  211. # want to depend on the uninitialized memory as a source of entropy anyway.
  212. RPM_OPT_FLAGS="$RPM_OPT_FLAGS -Wa,--noexecstack -DPURIFY $RPM_LD_FLAGS"
  213. export HASHBANGPERL=/usr/bin/perl
  214. perl -pi -e 's|/engines-|/%{name}/engines-|' ./Configurations/unix-Makefile.tmpl
  215. # ia64, x86_64, ppc are OK by default
  216. # Configure the build tree. Override OpenSSL defaults with known-good defaults
  217. # usable on all platforms. The Configure script already knows to use -fPIC and
  218. # RPM_OPT_FLAGS, so we can skip specifiying them here.
  219. ./Configure \
  220. --prefix=%{_prefix} --openssldir=%{_sysconfdir}/pki/tls ${sslflags} \
  221. --system-ciphers-file=%{_sysconfdir}/crypto-policies/back-ends/openssl.config \
  222. zlib enable-camellia enable-seed enable-rfc3779 enable-sctp \
  223. enable-cms enable-md2 enable-rc5 enable-ssl3 enable-ssl3-method \
  224. enable-weak-ssl-ciphers \
  225. no-mdc2 no-ec2m no-sm2 no-sm4 \
  226. shared ${sslarch} $RPM_OPT_FLAGS '-DDEVRANDOM="\"/dev/urandom\""'
  227. # Do not run this in a production package the FIPS symbols must be patched-in
  228. #util/mkdef.pl crypto update
  229. make all
  230. %if %{with fips}
  231. # Overwrite FIPS README
  232. cp -f %{SOURCE11} .
  233. %endif
  234. # Clean up the .pc files
  235. for i in libcrypto.pc libssl.pc openssl.pc ; do
  236. sed -i '/^Libs.private:/{s/-L[^ ]* //;s/-Wl[^ ]* //}' $i
  237. done
  238. %check
  239. # Verify that what was compiled actually works.
  240. # Hack - either enable SCTP AUTH chunks in kernel or disable sctp for check
  241. (sysctl net.sctp.addip_enable=1 && sysctl net.sctp.auth_enable=1) || \
  242. (echo 'Failed to enable SCTP AUTH chunks, disabling SCTP for tests...' &&
  243. sed '/"zlib-dynamic" => "default",/a\ \ "sctp" => "default",' configdata.pm > configdata.pm.new && \
  244. touch -r configdata.pm configdata.pm.new && \
  245. mv -f configdata.pm.new configdata.pm)
  246. # We must revert patch31 before tests otherwise they will fail
  247. patch -p1 -R < %{PATCH31}
  248. # drop a recipe includes tests for brainpool curves (not supported by openssl-hobbled).
  249. rm -f test/recipes/80-test_ssl_new.t
  250. LD_LIBRARY_PATH=`pwd`${LD_LIBRARY_PATH:+:${LD_LIBRARY_PATH}}
  251. export LD_LIBRARY_PATH
  252. OPENSSL_ENABLE_MD5_VERIFY=
  253. export OPENSSL_ENABLE_MD5_VERIFY
  254. OPENSSL_SYSTEM_CIPHERS_OVERRIDE=xyz_nonexistent_file
  255. export OPENSSL_SYSTEM_CIPHERS_OVERRIDE
  256. make test
  257. # Add generation of HMAC checksum of the final stripped library
  258. %define __spec_install_post \
  259. %{?__debug_package:%{__debug_install_post}} \
  260. %{__arch_install_post} \
  261. %{__os_install_post} \
  262. %{nil}
  263. %define __provides_exclude_from %{_libdir}/openssl
  264. %install
  265. [ "$RPM_BUILD_ROOT" != "/" ] && rm -rf $RPM_BUILD_ROOT
  266. # Install OpenSSL.
  267. install -d $RPM_BUILD_ROOT{/%{_lib},%{_bindir},%{_includedir},%{_libdir},%{_mandir},%{_libdir}/openssl,%{_pkgdocdir}}
  268. make DESTDIR=$RPM_BUILD_ROOT install
  269. mv $RPM_BUILD_ROOT%{_libdir}/lib*.so.%{soversion} $RPM_BUILD_ROOT/%{_lib}/
  270. rename so.%{soversion} so.%{version} $RPM_BUILD_ROOT/%{_lib}/*.so.%{soversion}
  271. for lib in $RPM_BUILD_ROOT/%{_lib}/*.so.%{version} ; do
  272. chmod 755 ${lib}
  273. ln -s -f ../../%{_lib}/`basename ${lib}` $RPM_BUILD_ROOT/%{_libdir}/`basename ${lib} .%{version}`
  274. ln -s -f `basename ${lib}` $RPM_BUILD_ROOT/%{_lib}/`basename ${lib} .%{version}`.%{soversion}
  275. done
  276. # Install a makefile for generating keys and self-signed certs, and a script
  277. # for generating them on the fly.
  278. mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/certs
  279. install -m644 %{SOURCE2} $RPM_BUILD_ROOT%{_pkgdocdir}/Makefile.certificate
  280. install -m755 %{SOURCE6} $RPM_BUILD_ROOT%{_bindir}/make-dummy-cert
  281. install -m755 %{SOURCE7} $RPM_BUILD_ROOT%{_bindir}/renew-dummy-cert
  282. # Move runable perl scripts to bindir
  283. mv $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/misc/*.pl $RPM_BUILD_ROOT%{_bindir}
  284. mv $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/misc/tsget $RPM_BUILD_ROOT%{_bindir}
  285. # Rename man pages so that they don't conflict with other system man pages.
  286. pushd $RPM_BUILD_ROOT%{_mandir}
  287. ln -s -f config.5 man5/openssl.cnf.5
  288. for manpage in man*/* ; do
  289. if [ -L ${manpage} ]; then
  290. TARGET=`ls -l ${manpage} | awk '{ print $NF }'`
  291. ln -snf ${TARGET}ssl ${manpage}ssl
  292. rm -f ${manpage}
  293. else
  294. mv ${manpage} ${manpage}ssl
  295. fi
  296. done
  297. for conflict in passwd rand ; do
  298. rename ${conflict} ssl${conflict} man*/${conflict}*
  299. # Fix dangling symlinks
  300. manpage=man1/openssl-${conflict}.*
  301. if [ -L ${manpage} ] ; then
  302. ln -snf ssl${conflict}.1ssl ${manpage}
  303. fi
  304. done
  305. popd
  306. mkdir -m755 $RPM_BUILD_ROOT%{_sysconfdir}/pki/CA
  307. mkdir -m700 $RPM_BUILD_ROOT%{_sysconfdir}/pki/CA/private
  308. mkdir -m755 $RPM_BUILD_ROOT%{_sysconfdir}/pki/CA/certs
  309. mkdir -m755 $RPM_BUILD_ROOT%{_sysconfdir}/pki/CA/crl
  310. mkdir -m755 $RPM_BUILD_ROOT%{_sysconfdir}/pki/CA/newcerts
  311. # Ensure the config file timestamps are identical across builds to avoid
  312. # mulitlib conflicts and unnecessary renames on upgrade
  313. touch -r %{SOURCE2} $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/openssl.cnf
  314. touch -r %{SOURCE2} $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/ct_log_list.cnf
  315. rm -f $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/openssl.cnf.dist
  316. rm -f $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/ct_log_list.cnf.dist
  317. # Determine which arch opensslconf.h is going to try to #include.
  318. basearch=%{_arch}
  319. %ifarch %{ix86}
  320. basearch=i386
  321. %endif
  322. # Next step of gradual disablement of SSL3.
  323. # Make SSL3 disappear to newly built dependencies.
  324. sed -i '/^\#ifndef OPENSSL_NO_SSL_TRACE/i\
  325. #ifndef OPENSSL_NO_SSL3\
  326. # define OPENSSL_NO_SSL3\
  327. #endif' $RPM_BUILD_ROOT/%{_prefix}/include/openssl/opensslconf.h
  328. %ifarch %{multilib_arches}
  329. # Do an opensslconf.h switcheroo to avoid file conflicts on systems where you
  330. # can have both a 32- and 64-bit version of the library, and they each need
  331. # their own correct-but-different versions of opensslconf.h to be usable.
  332. install -m644 %{SOURCE10} \
  333. $RPM_BUILD_ROOT/%{_prefix}/include/openssl/opensslconf-${basearch}.h
  334. cat $RPM_BUILD_ROOT/%{_prefix}/include/openssl/opensslconf.h >> \
  335. $RPM_BUILD_ROOT/%{_prefix}/include/openssl/opensslconf-${basearch}.h
  336. install -m644 %{SOURCE9} \
  337. $RPM_BUILD_ROOT/%{_prefix}/include/openssl/opensslconf.h
  338. %endif
  339. LD_LIBRARY_PATH=`pwd`${LD_LIBRARY_PATH:+:${LD_LIBRARY_PATH}}
  340. export LD_LIBRARY_PATH
  341. %if ! %{with utils}
  342. rm -f %{buildroot}%{_pkgdocdir}/Makefile.certificate
  343. rm -rf %{buildroot}%{_sysconfdir}/pki/tls
  344. rm -f %{buildroot}%{_bindir}/make-dummy-cert
  345. rm -f %{buildroot}%{_bindir}/renew-dummy-cert
  346. rm -f %{buildroot}%{_bindir}/openssl
  347. rm -f %{buildroot}%{_mandir}/man1*/*
  348. rm -f %{buildroot}%{_mandir}/man5*/*
  349. rm -f %{buildroot}%{_mandir}/man7*/*
  350. %endif
  351. %if ! %{with perl}
  352. rm -f %{buildroot}%{_bindir}/c_rehash
  353. rm -f %{buildroot}%{_bindir}/*.pl
  354. rm -f %{buildroot}%{_bindir}/tsget
  355. rm -rf %{buildroot}%{_sysconfdir}/pki/CA
  356. %endif
  357. %clean
  358. [ "$RPM_BUILD_ROOT" != "/" ] && rm -rf $RPM_BUILD_ROOT
  359. %if %{with utils}
  360. %files
  361. %{!?_licensedir:%global license %%doc}
  362. %license LICENSE
  363. %doc FAQ NEWS README
  364. %if %{with fips}
  365. %doc README.FIPS
  366. %endif
  367. %{_pkgdocdir}/Makefile.certificate
  368. %dir %{_sysconfdir}/pki/tls
  369. %dir %{_sysconfdir}/pki/tls/certs
  370. %dir %{_sysconfdir}/pki/tls/misc
  371. %dir %{_sysconfdir}/pki/tls/private
  372. %config(noreplace) %{_sysconfdir}/pki/tls/openssl.cnf
  373. %config(noreplace) %{_sysconfdir}/pki/tls/ct_log_list.cnf
  374. %{_bindir}/make-dummy-cert
  375. %{_bindir}/renew-dummy-cert
  376. %{_bindir}/openssl
  377. %dir %{_mandir}/man1*
  378. %{_mandir}/man1*/*
  379. %dir %{_mandir}/man5*
  380. %{_mandir}/man5*/*
  381. %dir %{_mandir}/man7*
  382. %{_mandir}/man7*/*
  383. %endif
  384. %files libs
  385. %defattr(-,root,root)
  386. %{!?_licensedir:%global license %%doc}
  387. %license LICENSE
  388. %doc FAQ NEWS README
  389. %if %{with fips}
  390. %doc README.FIPS
  391. %endif
  392. %attr(0755,root,root) /%{_lib}/*.so.*
  393. %attr(0755,root,root) %{_libdir}/%{name}/engines-%{soversion}
  394. %files devel
  395. %defattr(-,root,root)
  396. %{_prefix}/include/openssl
  397. %exclude %{_libdir}/lib*.a
  398. %attr(0755,root,root) %{_libdir}/*.so
  399. %attr(0644,root,root) %{_libdir}/pkgconfig/*.pc
  400. %dir %{_mandir}/man3*
  401. %{_mandir}/man3*/*
  402. %files static
  403. %defattr(-,root,root)
  404. %attr(0644,root,root) %{_libdir}/*.a
  405. %if %{with perl}
  406. %files perl
  407. %defattr(-,root,root)
  408. %{_bindir}/c_rehash
  409. %{_bindir}/*.pl
  410. %{_bindir}/tsget
  411. %{_mandir}/man1*/*.pl*
  412. %{_mandir}/man1*/c_rehash*
  413. %{_mandir}/man1*/tsget*
  414. %{_mandir}/man1*/openssl-tsget*
  415. %dir %{_sysconfdir}/pki/CA
  416. %dir %{_sysconfdir}/pki/CA/private
  417. %dir %{_sysconfdir}/pki/CA/certs
  418. %dir %{_sysconfdir}/pki/CA/crl
  419. %dir %{_sysconfdir}/pki/CA/newcerts
  420. %endif
  421. ## to build compat32 for x86_64 architecture support
  422. %if %{build_compat32}
  423. %files -n compat32-%{name}
  424. %defattr(-,root,root)
  425. %attr(0755,root,root) /%{_lib}/*.so.*
  426. %files -n compat32-%{name}-devel
  427. %defattr(-,root,root)
  428. %exclude %{_libdir}/lib*.a
  429. %attr(0755,root,root) %{_libdir}/*.so
  430. %attr(0644,root,root) %{_libdir}/pkgconfig/*.pc
  431. %endif
  432. %changelog
  433. * Wed Sep 29 2021 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 1.1.1l-2
  434. - changed %%name to "openssl111".
  435. * Wed Aug 25 2021 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 1.1.1l-1
  436. - new upstream release.
  437. * Fri Mar 26 2021 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 1.1.1k-1
  438. - new upstream release.
  439. - dropped ldconfig scriptlets.
  440. * Wed Feb 17 2021 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 1.1.1j-1
  441. - new upstream release.
  442. * Wed Dec 09 2020 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 1.1.1i-1
  443. - new upstream release.
  444. * Sat Nov 21 2020 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 1.1.1h-1
  445. - new upstream release.
  446. - dropped Patch43: fixed in upstream.
  447. - imported Patch55-70 from rawhide.
  448. - updated Source13.
  449. * Sat Apr 25 2020 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 1.1.1g-1
  450. - new upstream release.
  451. * Wed Apr 08 2020 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 1.1.1f-1
  452. - new upstream release.
  453. - updated Patch1.
  454. - dropped Patch54: fixed in upstream.
  455. * Wed Mar 18 2020 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 1.1.1e-1
  456. - new upstream release.
  457. - dropped Patch100 and 1000: fixed in upstream.
  458. * Fri Dec 20 2019 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 1.1.1d-2
  459. - imported Patch1000 from upstream.
  460. * Fri Sep 13 2019 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 1.1.1d-1
  461. - new upstream release.
  462. - updated Source12 and 13.
  463. - updated all patches.
  464. - imported Patch100 from upstream.
  465. * Sat Aug 24 2019 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 1.1.1c-1
  466. - new upstream release.
  467. - updated Patch37 and 41.
  468. - imported Patch52-54 from rawhide.
  469. * Mon May 06 2019 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 1.1.1b-2
  470. - fixed openssl.cnf
  471. * Sun May 05 2019 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 1.1.1b-1
  472. - new upstream release.
  473. - imported Patch36 from rawhide.
  474. - updated Patch32.
  475. * Sat Dec 08 2018 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 1.1.1a-1
  476. - new upstream release.
  477. - updated Patch2.
  478. - dropped Patch36 and 46: fixed in upstream.
  479. * Thu Nov 01 2018 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 1.1.1-2
  480. - fixed symlinks.
  481. * Thu Nov 01 2018 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 1.1.1-1
  482. - new upstream release (newest LTS version).
  483. - imported fedora stuff (except FIPS).
  484. * Sun Apr 1 2018 IWAI, Masaharu <iwaim.sub@gmail.com> 1.0.2o-1
  485. - new upstream release with security fixes
  486. * Sun Jan 21 2018 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 1.0.2n-1
  487. - new upstream release with security fixes
  488. * Wed Nov 15 2017 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 1.0.2m-1
  489. - new upstream release with security fixes
  490. * Sun Jan 29 2017 IWAI, Masaharu <iwaim.sub@gmail.com> 1.0.2k-1
  491. - new upstream release with security fixes
  492. * Thu May 5 2016 IWAI, Masaharu <iwaim.sub@gmail.com> 1.0.2h-1
  493. - new upstream release with security fixes
  494. * Wed Mar 9 2016 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 1.0.2g-1
  495. - new upstream release 1.0.2 with security fixes
  496. - Patch2 is merged into Patch0
  497. * Mon Dec 28 2015 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 1.0.1q-1
  498. - new upstream release with security fixes
  499. * Fri Jul 10 2015 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 1.0.1p-1
  500. - new upstream release with security fixes
  501. * Wed Jul 1 2015 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 1.0.1o-1
  502. - new upstream release
  503. * Sun Apr 12 2015 Yoji TOYODA <bsyamato@sea.plala.or.jp> 1.0.1m-1
  504. - merged into Vine6
  505. * Fri Mar 20 2015 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 1.0.1m-1
  506. - new upstream release with security fixes
  507. - update Patch2,5
  508. * Mon Jan 12 2015 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 1.0.1k-1
  509. - new upstream release with security fixes
  510. * Mon Oct 20 2014 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 1.0.1j-1
  511. - new upstream release with security fixes
  512. - add patch8 from fc21 (fix perl find.pl)
  513. * Fri Jun 6 2014 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 1.0.1h-1
  514. - new upstream release with security fixes.
  515. * Tue Apr 8 2014 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 1.0.1g-1
  516. - new upstream release with security fixes
  517. * Thu Jan 9 2014 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 1.0.1f-1
  518. - new upstream release with security fixes
  519. * Tue Sep 24 2013 Daisuke SUZUKI <daisuke@linux.or.jp> 1.0.1e-2
  520. - move root CA bundle to ca-certificates package
  521. * Tue Feb 12 2013 Daisuke SUZUKI <daisuke@linux.or.jp> 1.0.1e-1
  522. - update to 1.0.1e
  523. - 1.0.1d has major regressions from 1.0.1c
  524. * Sat Feb 9 2013 IWAI, Masaharu <iwai@alib.jp> 1.0.1d-2
  525. - remove tsget script to delete dependency perl(WWW::Curl::Easy)
  526. - openssl-perl package contains it in docdir
  527. * Fri Feb 08 2013 Toshiharu Kudoh <toshi.kd2@gmail.com> 1.0.1d-1
  528. - new upstream release with security fix (CVE-2012-2686, CVE-2013-0166, 0169)
  529. - fixed %%files
  530. * Tue May 29 2012 Daisuke SUZUKI <daisuke@linux.or.jp> 1.0.1c-1
  531. - update to 1.0.1c
  532. - enable configure options:
  533. enable-camellia enable-seed enable-tlsext enable-rfc3779
  534. enable-cms enable-md2
  535. - remove no-asm option from ai64/x86_64/ppc/ppc64/i686
  536. - generate a table with the compile settings before configure
  537. * Fri Jan 20 2012 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 1.0.0g-1
  538. - new upstream release with security fix (CVE-2012-0050)
  539. * Fri Jan 6 2012 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 1.0.0f-1
  540. - new upstream release with security fix
  541. (CVE-2011-4108,09, CVE-2011-4576,77, CVE-2011-4619, CVE-2012-0027)
  542. * Wed Sep 7 2011 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 1.0.0e-1
  543. - new upstream release with security fix (CVE-2011-3207, 3210)
  544. * Sun Mar 20 2011 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 1.0.0d-2
  545. - rebuild with krb5-libs 1.8
  546. * Fri Feb 11 2011 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 1.0.0d-1
  547. - new upstream release with security fix
  548. * Sat Jan 15 2011 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 1.0.0c-4
  549. - use upstream openssl.pc instead of vine original one (SOURCE6)
  550. * Sun Jan 9 2011 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 1.0.0c-3
  551. - move tsget to docs to delete dependency perl(WWW::Curl::Easy)
  552. * Sat Jan 1 2011 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 1.0.0c-2
  553. - add R: krb5-devel into devel pkg
  554. - add R: compat32-krb5-devel into compat32-devel pkg
  555. * Fri Dec 31 2010 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 1.0.0c-1
  556. - new upstream release 1.0.0x
  557. - separate static libs into static package
  558. - change configure options
  559. - change so version 10
  560. - add tsget into perl package
  561. - update all patches
  562. * Thu Dec 30 2010 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 0.9.8q-2
  563. - fix changelog typo...
  564. * Tue Dec 7 2010 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 0.9.8q-1
  565. - new upstream release with security fix (CVE-2010-4180)
  566. * Wed Nov 17 2010 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 0.9.8p-1
  567. - new upstream release with security fix (CVE-2010-3864)
  568. - drop patches included in new release
  569. - update patch4
  570. * Sun Jan 17 2010 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 0.9.8k-5
  571. - add patch12 for fix CVE-2009-3555 (renegotiation)
  572. * Fri Jan 15 2010 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 0.9.8k-4
  573. - add patch11 for fix CVE-2009-4355 (memory leak)
  574. * Tue Jun 23 2009 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 0.9.8k-3
  575. - add patch10 to fix CVE-2009-1377, 78, 79 (from fc11)
  576. * Mon Jun 22 2009 NAKAMURA Kenta <kenta@vinelinux.org> 0.9.8k-2
  577. - removed unnecessary %%if %{build_compat32} statements
  578. - removed lib*.a from devel package
  579. * Mon Mar 30 2009 Satosh IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 0.9.8k-1
  580. - new upstream release with security fix (CVE-2000-0590,0591,0789)
  581. * Sun Jan 11 2009 Satosh IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 0.9.8j-1
  582. - new upstream release with security fix (CVE-2008-5077)
  583. * Sat Sep 20 2008 Daisuke SUZUKI <daisuke@linux.or.jp> 0.9.8i-1
  584. - new upstream release
  585. * Sat Jul 12 2008 Satosh IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 0.9.8h-1
  586. - new upstream release
  587. - new versioning policy
  588. * Sat Oct 27 2007 Daisuke SUZUKI <daisuke@linux.or.jp> 0.9.8g-0vl1
  589. - new upstream release
  590. - drop patch10,20 which is merged in upstream
  591. * Fri Sep 28 2007 MATSUBAYASHI Kohji <shaolin@vinelinux.org> 0.9.8e-0vl3
  592. - add security patch in advance for CVE-2007-5135
  593. http://www.securityfocus.com/archive/1/archive/1/480855/100/0/threaded
  594. http://marc.info/?l=openssl-cvs&m=119020417919619&w=2
  595. * Fri Aug 10 2007 MATSUBAYASHI Kohji <shaolin@vinelinux.org> 0.9.8e-0vl2
  596. - add security patch for CVE-2007-3108
  597. (http://openssl.org/news/patch-CVE-2007-3108.txt)
  598. * Tue May 15 2007 Daisuke SUZUKI <daisuke@linux.or.jp> 0.9.8e-0vl1
  599. - new upstream release
  600. * Sun Dec 24 2006 Satosh IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 0.9.7l-0vl2
  601. - update (fix) openssl.pc <BTS:437>
  602. * Fri Sep 29 2006 Satosh IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 0.9.7l-0vl1
  603. - new upstream release (with security fix)
  604. * Mon Sep 11 2006 Satosh IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 0.9.7k-0vl1
  605. - new upstream release
  606. - add patch2 to use RPM_OPT macro
  607. * Mon Feb 06 2006 Shu KONNO <owa@bg.wakwak.com> 0.9.7i-0vl3
  608. - moved macros _lib to /usr/lib/rpm/rpmrc or macros files
  609. * Fri Feb 03 2006 Shu KONNO <owa@bg.wakwak.com> 0.9.7i-0vl2
  610. - added compat32-* packages for x86_64 architecture support
  611. - added openssl-0.9.7i.Configure-compat32.patch
  612. - changed '/lib' to '/%{_lib}'
  613. * Mon Oct 17 2005 Daisuke SUZUKI <daisuke@linux.or.jp> 0.9.7i-0vl1
  614. - new upstream release
  615. * Mon Jan 31 2005 Daisuke SUZUKI <daisuke@linux.or.jp> 0.9.7d-0vl4
  616. - rebuild on VineSeed
  617. * Sun Jan 09 2005 IKEDA Katsumi <ikeda@webmasters.gr.jp> 0.9.7d-0vl3.1
  618. - added a security patch from Gentoo.
  619. - Patch1: openssl-0.9.7c-tempfile.patch
  620. * Sun Mar 28 2004 MATSUBAYASHI Kohji <shaolin@vinelinux.org> 0.9.7d-0vl3
  621. - sslarch for ppc was missing... added.
  622. * Fri Mar 26 2004 Tomoya TAKA <taka@vinelinux.org> 0.9.7d-0vl2
  623. - use sslarch=linux-alpha-gcc instead of alpha-gcc
  624. * Mon Mar 22 2004 Satoshi MACHINO <machino@vinelinux.org> 0.9.7d-0vl1
  625. - new upstream version
  626. - clean up of spec file
  627. -- removed old patches
  628. * Sat Mar 20 2004 Daisuke SUZUKI <daisuke@linux.or.jp> 0.9.6m-0vl1
  629. - new upstream release
  630. - SECURITY fix.
  631. - http://www.openssl.org/news/secadv_20040317.txt
  632. * Wed Oct 1 2003 Daisuke SUZUKI <daisuke@linux.or.jp> 0.9.6k-0vl1
  633. - new upstream release
  634. - [Security fix]
  635. - Vulnerabilities in ASN.1 parsing
  636. http://www.openssl.org/news/secadv_20030930.txt
  637. - see %{_docdir}/%{name}-%{version}/CHANGES for other changes
  638. * Wed Jun 04 2003 HOTTA Michihide <hotta@net-newbie.com> 0.9.6j-0vl2
  639. - add openssl.pc for pkgconfig
  640. * Tue Mar 11 2003 Satoshi MACHINO <machino@vinelinux.org> 0.9.6j-0vl1
  641. - New upstream version
  642. - dropped patch10, 11
  643. -- merged upstream version
  644. * Sun Feb 23 2003 Daisuke SUZUKI <daisuke@linux.or.jp> 0.9.6i-0vl1
  645. - rebuild for VineSeed
  646. * Sun Feb 23 2003 Daisuke SUZUKI <daisuke@linux.or.jp> 0.9.6i-0vl0.26.1
  647. - [Security Fix]
  648. - Timing-based attacks on RSA keys
  649. http://www.openssl.org/news/secadv_20030317.txt
  650. - Klima-Pokorny0Rosa attack on RSA in SSL/TLS
  651. http://www.openssl.org/news/secadv_20030317.txt
  652. * Sun Feb 23 2003 Daisuke SUZUKI <daisuke@linux.or.jp> 0.9.6i-0vl0.26
  653. - new upstream release 0.9.6i
  654. - [Security Fix]
  655. - build for Vine Linux 2.6 errata
  656. * Mon Nov 18 2002 Daisuke SUZUKI <daisuke@linux.or.jp> 0.9.6h-0vl1
  657. - new upstream release 0.9.6h
  658. * Mon Nov 18 2002 Daisuke SUZUKI <daisuke@linux.or.jp> 0.9.6g-0vl1
  659. - new upstream release 0.9.6g
  660. * Mon Oct 28 2002 IWAI Masaharu <iwai@alib.jp> 0.9.6b-1vl6
  661. - SECURITY: CAN-2002-0659 fixed
  662. - added Patch101 from RedHat 7.2 updates 0.9.6b-28
  663. * Fri Aug 02 2002 Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-28
  664. - update asn patch to fix accidental reversal of a logic check
  665. * Thu Aug 01 2002 Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-27
  666. - update asn patch to reduce chance that compiler optimization will remove
  667. one of the added tests
  668. * Thu Aug 01 2002 Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-26
  669. - rebuild
  670. * Tue Jul 30 2002 Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-25
  671. - add patch to fix ASN.1 vulnerabilities
  672. * Wed Jul 31 2002 IWAI Masaharu <iwai@alib.jp> 0.9.6b-1vl5
  673. - rename spec file name
  674. - SECURITY: CA-2002-23 fixed
  675. - added Patch100 from RedHat 7.2 updates 0.9.6b-24
  676. * Thu Jul 25 2002 Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-24
  677. - add backport of Ben Laurie's patches for OpenSSL 0.9.6d
  678. * Mon Sep 10 2001 Satoshi MACHINO <machino@vinelinux.org> 0.9.6b-1vl4
  679. - added ${PATH} in LD_LIBRARY_PATH
  680. - added install -m 755 *.so.* $RPM_BUILD_ROOT%{_libdir} in %install
  681. * Sun Jul 15 2001 Daisuke SUZUKI <daisuke@linux.or.jp> 0.9.6b-1vl3
  682. - remove --no-<cipher>
  683. * Sun Jul 15 2001 Daisuke SUZUKI <daisuke@linux.or.jp> 0.9.6b-1vl2
  684. - add Patch10 for mipsel shared ( Configure )
  685. * Sat Jul 14 2001 Daisuke SUZUKI <daisuke@linux.or.jp> 0.9.6b-1vl1
  686. - build for Vine Linux
  687. - use openssl-engine-0.9.6b.tar.gz
  688. * Wed Jul 11 2001 Nalin Dahyabhai <nalin@redhat.com>
  689. - update to 0.9.6b
  690. * Thu Jul 5 2001 Nalin Dahyabhai <nalin@redhat.com>
  691. - move .so symlinks back to %%{_libdir}
  692. * Tue Jul 3 2001 Nalin Dahyabhai <nalin@redhat.com>
  693. - move shared libraries to /lib (#38410)
  694. * Mon Jun 25 2001 Nalin Dahyabhai <nalin@redhat.com>
  695. - switch to engine code base
  696. * Mon Jun 18 2001 Nalin Dahyabhai <nalin@redhat.com>
  697. - add a script for creating dummy certificates
  698. - move man pages from %%{_mandir}/man?/foo.?ssl to %%{_mandir}/man?ssl/foo.?
  699. * Thu Jun 07 2001 Florian La Roche <Florian.LaRoche@redhat.de>
  700. - add s390x support
  701. * Fri Jun 1 2001 Nalin Dahyabhai <nalin@redhat.com>
  702. - change two memcpy() calls to memmove()
  703. - don't define L_ENDIAN on alpha
  704. * Tue May 15 2001 Nalin Dahyabhai <nalin@redhat.com>
  705. - make subpackages depend on the main package
  706. * Tue May 1 2001 Nalin Dahyabhai <nalin@redhat.com>
  707. - adjust the hobble script to not disturb symlinks in include/ (fix from
  708. Joe Orton)
  709. * Thu Apr 26 2001 Nalin Dahyabhai <nalin@redhat.com>
  710. - drop the m2crypo patch we weren't using
  711. * Tue Apr 24 2001 Nalin Dahyabhai <nalin@redhat.com>
  712. - configure using "shared" as well
  713. * Sun Apr 8 2001 Nalin Dahyabhai <nalin@redhat.com>
  714. - update to 0.9.6a
  715. - use the build-shared target to build shared libraries
  716. - bump the soversion to 2 because we're no longer compatible with
  717. our 0.9.5a packages or our 0.9.6 packages
  718. - drop the patch for making rsatest a no-op when rsa null support is used
  719. - put all man pages into <section>ssl instead of <section>
  720. - break the m2crypto modules into a separate package
  721. * Tue Mar 13 2001 Nalin Dahyabhai <nalin@redhat.com>
  722. - use BN_LLONG on s390
  723. * Mon Mar 12 2001 Nalin Dahyabhai <nalin@redhat.com>
  724. - fix the s390 changes for 0.9.6 (isn't supposed to be marked as 64-bit)
  725. * Sat Mar 3 2001 Nalin Dahyabhai <nalin@redhat.com>
  726. - move c_rehash to the perl subpackage, because it's a perl script now
  727. * Fri Mar 2 2001 Nalin Dahyabhai <nalin@redhat.com>
  728. - update to 0.9.6
  729. - enable MD2
  730. - use the libcrypto.so and libssl.so targets to build shared libs with
  731. - bump the soversion to 1 because we're no longer compatible with any of
  732. the various 0.9.5a packages circulating around, which provide lib*.so.0
  733. * Wed Feb 28 2001 Florian La Roche <Florian.LaRoche@redhat.de>
  734. - change hobble-openssl for disabling MD2 again
  735. * Tue Feb 27 2001 Nalin Dahyabhai <nalin@redhat.com>
  736. - re-disable MD2 -- the EVP_MD_CTX structure would grow from 100 to 152
  737. bytes or so, causing EVP_DigestInit() to zero out stack variables in
  738. apps built against a version of the library without it
  739. * Mon Feb 26 2001 Nalin Dahyabhai <nalin@redhat.com>
  740. - disable some inline assembly, which on x86 is Pentium-specific
  741. - re-enable MD2 (see http://www.ietf.org/ietf/IPR/RSA-MD-all)
  742. * Thu Feb 08 2001 Florian La Roche <Florian.LaRoche@redhat.de>
  743. - fix s390 patch
  744. * Fri Dec 8 2000 Than Ngo <than@redhat.com>
  745. - added support s390
  746. * Mon Nov 20 2000 Nalin Dahyabhai <nalin@redhat.com>
  747. - remove -Wa,* and -m* compiler flags from the default Configure file (#20656)
  748. - add the CA.pl man page to the perl subpackage
  749. * Thu Nov 2 2000 Nalin Dahyabhai <nalin@redhat.com>
  750. - always build with -mcpu=ev5 on alpha
  751. * Tue Oct 31 2000 Nalin Dahyabhai <nalin@redhat.com>
  752. - add a symlink from cert.pem to ca-bundle.crt
  753. * Wed Oct 25 2000 Nalin Dahyabhai <nalin@redhat.com>
  754. - add a ca-bundle file for packages like Samba to reference for CA certificates
  755. * Tue Oct 24 2000 Nalin Dahyabhai <nalin@redhat.com>
  756. - remove libcrypto's crypt(), which doesn't handle md5crypt (#19295)
  757. * Mon Oct 2 2000 Nalin Dahyabhai <nalin@redhat.com>
  758. - add unzip as a buildprereq (#17662)
  759. - update m2crypto to 0.05-snap4
  760. * Tue Sep 26 2000 Bill Nottingham <notting@redhat.com>
  761. - fix some issues in building when it's not installed
  762. * Wed Sep 6 2000 Nalin Dahyabhai <nalin@redhat.com>
  763. - make sure the headers we include are the ones we built with (aaaaarrgh!)
  764. * Fri Sep 1 2000 Nalin Dahyabhai <nalin@redhat.com>
  765. - add Richard Henderson's patch for BN on ia64
  766. - clean up the changelog
  767. * Tue Aug 29 2000 Nalin Dahyabhai <nalin@redhat.com>
  768. - fix the building of python modules without openssl-devel already installed
  769. * Wed Aug 23 2000 Nalin Dahyabhai <nalin@redhat.com>
  770. - byte-compile python extensions without the build-root
  771. - adjust the makefile to not remove temporary files (like .key files when
  772. building .csr files) by marking them as .PRECIOUS
  773. * Sat Aug 19 2000 Nalin Dahyabhai <nalin@redhat.com>
  774. - break out python extensions into a subpackage
  775. * Mon Jul 17 2000 Nalin Dahyabhai <nalin@redhat.com>
  776. - tweak the makefile some more
  777. * Tue Jul 11 2000 Nalin Dahyabhai <nalin@redhat.com>
  778. - disable MD2 support
  779. * Thu Jul 6 2000 Nalin Dahyabhai <nalin@redhat.com>
  780. - disable MDC2 support
  781. * Sun Jul 2 2000 Nalin Dahyabhai <nalin@redhat.com>
  782. - tweak the disabling of RC5, IDEA support
  783. - tweak the makefile
  784. * Thu Jun 29 2000 Nalin Dahyabhai <nalin@redhat.com>
  785. - strip binaries and libraries
  786. - rework certificate makefile to have the right parts for Apache
  787. * Wed Jun 28 2000 Nalin Dahyabhai <nalin@redhat.com>
  788. - use %%{_perl} instead of /usr/bin/perl
  789. - disable alpha until it passes its own test suite
  790. * Fri Jun 9 2000 Nalin Dahyabhai <nalin@redhat.com>
  791. - move the passwd.1 man page out of the passwd package's way
  792. * Fri Jun 2 2000 Nalin Dahyabhai <nalin@redhat.com>
  793. - update to 0.9.5a, modified for U.S.
  794. - add perl as a build-time requirement
  795. - move certificate makefile to another package
  796. - disable RC5, IDEA, RSA support
  797. - remove optimizations for now
  798. * Wed Mar 1 2000 Florian La Roche <Florian.LaRoche@redhat.de>
  799. - Bero told me to move the Makefile into this package
  800. * Wed Mar 1 2000 Florian La Roche <Florian.LaRoche@redhat.de>
  801. - add lib*.so symlinks to link dynamically against shared libs
  802. * Tue Feb 29 2000 Florian La Roche <Florian.LaRoche@redhat.de>
  803. - update to 0.9.5
  804. - run ldconfig directly in post/postun
  805. - add FAQ
  806. * Sat Dec 18 1999 Bernhard Rosenkrdnzer <bero@redhat.de>
  807. - Fix build on non-x86 platforms
  808. * Fri Nov 12 1999 Bernhard Rosenkrdnzer <bero@redhat.de>
  809. - move /usr/share/ssl/* from -devel to main package
  810. * Tue Oct 26 1999 Bernhard Rosenkrdnzer <bero@redhat.de>
  811. - inital packaging
  812. - changes from base:
  813. - Move /usr/local/ssl to /usr/share/ssl for FHS compliance
  814. - handle RPM_OPT_FLAGS