-
Notifications
You must be signed in to change notification settings - Fork 692
/
openssl.spec
281 lines (254 loc) · 9.31 KB
/
openssl.spec
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
Summary: Management tools and libraries relating to cryptography
Name: openssl
Version: 1.0.2zk
Release: 1%{?dist}
License: OpenSSL
URL: http://www.openssl.org
Group: System Environment/Security
Vendor: VMware, Inc.
Distribution: Photon
Source0: http://www.openssl.org/source/vmware-OpenSSL_1_0_2zk.tar.gz
%define sha512 vmware-OpenSSL_1_0_2zk=486e3adbbef1a7b77c8ae360c5ec1ccaa2cd030628c07738a1a6c1d16c0ded3177569633c8b32c4ff5c6b4e19f0ef9185575341ee101c86c7350c4eb40c7a7fd
Source1: rehash_ca_certificates.sh
%if 0%{?with_fips}
%define openssl_fips_version 2.0.20
Source100: %{name}-fips-%{openssl_fips_version}-vmw.tar.gz
%define sha512 %{name}-fips=6cce1845183d6f208c5e6bdd7f36376ee80fbe1fb722f16b4f67a076c6ce7efd9b5f31a8dd756be258bc0de2ff1a91fc9db824131beb1f5f31e35e7386c11b95
%endif
Patch1: openssl-ipv6apps.patch
Patch2: openssl-init-conslidate.patch
Patch3: openssl-drbg-default-read-system-fips.patch
%if 0%{?with_fips}
Patch4: fips-2.20-vmw.patch
%endif
Patch5: openssl-optimized-curves.patch
Patch6: c_rehash.patch
%if 0%{?with_check}
BuildRequires: zlib-devel
%endif
Requires: bash
Requires: glibc
Requires: libgcc
Provides: libcrypto.so.1.0.2()(64bit)
Provides: libssl.so.1.0.2()(64bit)
%description
The OpenSSL package contains management tools and libraries relating
to cryptography. These are useful for providing cryptography
functions to other packages, such as OpenSSH, email applications and
web browsers (for accessing HTTPS sites).
%package devel
Summary: Development Libraries for %{name}
Group: Development/Libraries
Requires: %{name} = %{version}-%{release}
Obsoletes: nxtgn-%{name}-devel
%description devel
Header files for doing development with %{name}.
%package perl
Summary: %{name} perl scripts
Group: Applications/Internet
Requires: perl
Requires: %{name} = %{version}-%{release}
%description perl
Perl scripts that convert certificates and keys to various formats.
%package c_rehash
Summary: %{name} perl scripts
Group: Applications/Internet
Requires: perl
Requires: perl-DBI
Requires: perl-DBIx-Simple
Requires: perl-DBD-SQLite
Requires: %{name} = %{version}-%{release}
%description c_rehash
Perl scripts that convert certificates and keys to various formats.
%prep
# Using autosetup is not feasible
%setup -q -n vmware-OpenSSL_1_0_2zk
%patch1 -p1
%patch2 -p1
%patch3 -p1
%if 0%{?with_fips}
%patch4 -p1
%endif
%patch5 -p1
%patch6 -p1
%build
%if 0%{?with_fips}
tar xf %{SOURCE100} --no-same-owner -C ..
# Do not package it to src.rpm
:> %{SOURCE100}
%endif
export CFLAGS="%{optflags}"
./config \
--prefix=%{_prefix} \
--libdir=lib \
--openssldir=%{_sysconfdir}/ssl \
shared \
zlib-dynamic \
%if 0%{?with_fips}
fips --with-fipsdir=%{_builddir}/%{name}-%{openssl_fips_version} \
%endif
-Wl,-z,noexecstack \
-Wa,--noexecstack "${CFLAGS}" "${LDFLAGS}"
# make doesn't support _smp_mflags
make
%install
# make doesn't support _smp_mflags
make INSTALL_PREFIX=%{buildroot} MANDIR=%{_mandir} MANSUFFIX=ssl install
install -p -m 755 -D %{SOURCE1} %{buildroot}%{_bindir}
ln -sf libssl.so.1.0.0 %{buildroot}%{_libdir}/libssl.so.1.0.2
ln -sf libcrypto.so.1.0.0 %{buildroot}%{_libdir}/libcrypto.so.1.0.2
%if 0%{?with_check}
%check
# make doesn't support _smp_mflags
make tests
%endif
%post -p /sbin/ldconfig
%postun -p /sbin/ldconfig
%clean
rm -rf %{buildroot}/*
%files
%defattr(-,root,root)
%{_sysconfdir}/ssl/certs
%{_sysconfdir}/ssl/misc/CA.sh
%{_sysconfdir}/ssl/misc/c_hash
%{_sysconfdir}/ssl/misc/c_info
%{_sysconfdir}/ssl/misc/c_issuer
%{_sysconfdir}/ssl/misc/c_name
%{_sysconfdir}/ssl/%{name}.cnf
%{_sysconfdir}/ssl/private
%{_bindir}/%{name}
%{_libdir}/*.so.*
%{_libdir}/engines/*
%{_mandir}/man1/*
%{_mandir}/man5/*
%{_mandir}/man7/*
%files devel
%defattr(-,root,root)
%{_includedir}/*
%{_mandir}/man3/*
%{_libdir}/pkgconfig/*.pc
%{_libdir}/*.a
%{_libdir}/*.so
%files perl
%defattr(-,root,root)
%{_sysconfdir}/ssl/misc/tsget
%{_sysconfdir}/ssl/misc/CA.pl
%files c_rehash
%defattr(-,root,root)
%{_bindir}/c_rehash
%{_bindir}/rehash_ca_certificates.sh
%changelog
* Wed Sep 04 2024 Tapas Kundu <[email protected]> 1.0.2zk-1
- Update to openssl-1.0.2zk
* Thu Feb 01 2024 Mukul Sikka <[email protected]> 1.0.2zj-1
- Update to openssl-1.0.2zj
* Wed Aug 23 2023 Mukul Sikka <[email protected]> 1.0.2zi-1
- Update to openssl-1.0.2zi
* Wed Feb 08 2023 Srinidhi Rao <[email protected]> 1.0.2zh-1
- Update to openssl-1.0.2zh
* Wed Feb 08 2023 Srinidhi Rao <[email protected]> 1.0.2zg-1
- Update to openssl-1.0.2zg
* Thu Sep 01 2022 Tapas Kundu <[email protected]> 1.0.2ze-3
- Provides libssl.so.1.0.2 and libcrypto.so.1.0.2
* Thu Jun 16 2022 Satya Naga Vasamsetty <[email protected]> 1.0.2ze-2
- Fix CVE-2022-2068
- Format c_rehash.patch to resolve merge conflicts
* Wed May 04 2022 Satya Naga Vasamsetty <[email protected]> 1.0.2ze-1
- Update to openssl 1.0.2ze
* Thu Mar 10 2022 Satya Naga Vasamsetty <[email protected]> 1.0.2zc-2
- Fix CVE-2022-0778
* Sat Mar 05 2022 Satya Naga Vasamsetty <[email protected]> 1.0.2zc-1
- Update to openssl 1.0.2zc
* Tue Aug 24 2021 Srinidhi Rao <[email protected]> 1.0.2za-1
- Update to openssl 1.0.2za
* Thu Feb 25 2021 Satya Naga Vasamsetty <[email protected]> 1.0.2y-1
- Update to openssl 1.0.2y
* Fri Dec 18 2020 Satya Naga Vasamsetty <[email protected]> 1.0.2x-2
- modify FIPS EC list to only use optimized curves
* Thu Dec 10 2020 Satya Naga Vasamsetty <[email protected]> 1.0.2x-1
- Update to openssl 1.0.2x
* Fri Dec 04 2020 Satya Naga Vasamsetty <[email protected]> 1.0.2w-2
- Fix CVE-2020-1971
* Sat Sep 12 2020 Tapas Kundu <[email protected]> 1.0.2w-1
- Update to 1.0.2w
- Fix CVE-2020-1968
* Wed Jul 29 2020 Srinidhi Rao <[email protected]> 1.0.2v-2
- Improve the patch openssl-drbg-default-read-system-fips
- Modifies RAND_get_rand_method() to supply default FIPS RNG.
* Tue May 26 2020 Tapas Kundu <[email protected]> 1.0.2v-1
- Update to 1.0.2v.
- Included fix for Implement blinding for scalar multiplication.
* Mon Jan 20 2020 Tapas Kundu <[email protected]> 1.0.2u-2
- Configure with Wl flag.
* Thu Jan 09 2020 Tapas Kundu <[email protected]> 1.0.2u-1
- Updated to 1.0.2u
- Fix CVE-2019-1551
* Wed Oct 30 2019 Tapas Kundu <[email protected]> 1.0.2t-2
- Use 2.0.20 fips
* Thu Sep 19 2019 Tapas Kundu <[email protected]> 1.0.2t-1
- Updated to 1.0.2t
- Fix multiple CVEs
* Fri Jul 26 2019 Srinidhi Rao <[email protected]> 1.0.2s-2
- Increment the release version for nxtgn-openssl-1.1.1b compatibility
* Fri Jun 07 2019 Tapas Kundu <[email protected]> 1.0.2s-1
- Updated to 1.0.2s
* Mon Mar 25 2019 Tapas Kundu <[email protected]> 1.0.2r-1
- Updated to 1.0.2r for CVE-2019-1559
* Fri Dec 07 2018 Sujay G <[email protected]> 1.0.2q-1
- Bump version to 1.0.2q
* Wed Oct 17 2018 Alexey Makhalov <[email protected]> 1.0.2p-2
- Move fips logic to spec file
* Fri Aug 17 2018 Him Kalyan Bordoloi <[email protected]> 1.0.2p-1
- Upgrade to 1.0.2p
* Wed Mar 21 2018 Dheeraj Shetty <[email protected]> 1.0.2n-2
- Add script which rehashes the certificates
* Tue Jan 02 2018 Xiaolin Li <[email protected]> 1.0.2n-1
- Upgrade to 1.0.2n
* Tue Nov 07 2017 Anish Swaminathan <[email protected]> 1.0.2m-1
- Upgrade to 1.0.2m
* Tue Oct 10 2017 Vinay Kulkarni <[email protected]> 1.0.2l-2
- Fix CVE-2017-3735 OOB read.
* Fri Aug 11 2017 Anish Swaminathan <[email protected]> 1.0.2l-1
- Upgrade to 1.0.2l
* Thu Aug 10 2017 Chang Lee <[email protected]> 1.0.2k-4
- Add zlib-devel for %check
* Fri Jul 28 2017 Anish Swaminathan <[email protected]> 1.0.2k-3
- Patch to support enabling FIPS_mode through kernel parameter
* Sun Jun 04 2017 Bo Gan <[email protected]> 1.0.2k-2
- Fix symlink
* Fri Apr 07 2017 Anish Swaminathan <[email protected]> 1.0.2k-1
- Upgrade to 1.0.2k
* Wed Dec 07 2016 Xiaolin Li <[email protected]> 1.0.2j-3
- Moved man3 to devel subpackage.
* Wed Oct 05 2016 ChangLee <[email protected]> 1.0.2j-2
- Modified %check
* Mon Sep 26 2016 Priyesh Padmavilasom <[email protected]> 1.0.2j-1
- Update to 1.0.2.j
* Wed Sep 21 2016 Kumar Kaushik <[email protected]> 1.0.2h-5
- Security bug fix, CVE-2016-2182.
* Tue Sep 20 2016 Kumar Kaushik <[email protected]> 1.0.2h-4
- Security bug fix, CVE-2016-6303.
* Wed Jun 22 2016 Anish Swaminathan <[email protected]> 1.0.2h-3
- Add patches for using openssl_init under all initialization and changing default RAND
* Tue May 24 2016 Priyesh Padmavilasom <[email protected]> 1.0.2h-2
- GA - Bump release of all rpms
* Fri May 20 2016 Divya Thaluru <[email protected]> 1.0.2h-1
- Upgrade to 1.0.2h
* Mon Mar 07 2016 Anish Swaminathan <[email protected]> 1.0.2g-1
- Upgrade to 1.0.2g
* Wed Feb 03 2016 Xiaolin Li <[email protected]> 1.0.2f-1
- Update to version 1.0.2f
* Mon Feb 01 2016 Anish Swaminathan <[email protected]> 1.0.2e-3
- Add symlink for libcrypto
* Fri Jan 15 2016 Xiaolin Li <[email protected]> 1.0.2e-2
- Move c_rehash to a seperate subpackage.
* Fri Dec 04 2015 Xiaolin Li <[email protected]> 1.0.2e-1
- Update to 1.0.2e.
* Wed Dec 02 2015 Anish Swaminathan <[email protected]> 1.0.2d-3
- Follow similar logging to previous openssl versions for c_rehash.
* Fri Aug 07 2015 Sharath George <[email protected]> 1.0.2d-2
- Split perl scripts to a different package.
* Fri Jul 24 2015 Chang Lee <[email protected]> 1.0.2d-1
- Update new version.
* Wed Mar 25 2015 Divya Thaluru <[email protected]> 1.0.2a-1
- Initial build. First version