%undefine _missing_build_ids_terminate_build

%global bcond_with strict_fips

# build ids are not currently generated:

# https://code.google.com/p/go/issues/detail?id=5238

#

# also, debuginfo extraction currently fails with

# "Failed to write file: invalid section alignment"

%global debug_package %{nil}

# we are shipping the full contents of src in the data subpackage, which

# contains binary-like things (ELF data for tests, etc)

%global _binaries_in_noarch_packages_terminate_build 0

# Do not check any files in doc or src for requires

%global __requires_exclude_from ^(%{_datadir}|/usr/lib)/%{name}/(doc|src)/.*$

# Don't alter timestamps of especially the .a files (or else go will rebuild later)

# Actually, don't strip at all since we are not even building debug packages and this corrupts the dwarf testdata

%global __strip /bin/true

# rpmbuild magic to keep from having meta dependency on libc.so.6

%define _use_internal_dependency_generator 0

%define __find_requires %{nil}

%global __spec_install_post /usr/lib/rpm/check-rpaths   /usr/lib/rpm/check-buildroot  \

  /usr/lib/rpm/brp-compress

# Define GOROOT macros

%global goroot          %{_prefix}/lib/%{name}

%global gopath          %{_datadir}/gocode

%global golang_arches   x86_64 aarch64 ppc64le s390x

%global golibdir        %{_libdir}/%{name}

# Golang build options.

# Build golang using external/internal(close to cgo disabled) linking.

%ifarch x86_64 ppc64le %{arm} aarch64 s390x

%global external_linker 1

%else

%global external_linker 0

%endif

# Build golang with cgo enabled/disabled(later equals more or less to internal linking).

%ifarch x86_64 ppc64le %{arm} aarch64 s390x

%global cgo_enabled 1

%else

%global cgo_enabled 0

%endif

# Use golang/gcc-go as bootstrap compiler

%ifarch %{golang_arches}

%global golang_bootstrap 1

%else

%global golang_bootstrap 0

%endif

# Controls what ever we fail on failed tests

%ifarch x86_64 %{arm} aarch64 ppc64le

%global fail_on_tests 1

%else

%global fail_on_tests 0

%endif

# Build golang shared objects for stdlib

%ifarch 0

%global shared 1

%else

%global shared 0

%endif

# Pre build std lib with -race enabled

%ifarch x86_64

%global race 1

%else

%global race 0

%endif

%ifarch x86_64

%global gohostarch  amd64

%endif

%ifarch %{arm}

%global gohostarch  arm

%endif

%ifarch aarch64

%global gohostarch  arm64

%endif

%ifarch ppc64

%global gohostarch  ppc64

%endif

%ifarch ppc64le

%global gohostarch  ppc64le

%endif

%ifarch s390x

%global gohostarch  s390x

%endif

%global go_api 1.17

%global go_version 1.17.12

%global pkg_release 1

Name:           golang

Version:        %{go_version}

Release:        1%{?dist}

Summary:        The Go Programming Language

# source tree includes several copies of Mark.Twain-Tom.Sawyer.txt under Public Domain

License:        BSD and Public Domain

URL:            http://golang.org/

Source0:        https://github.com/golang-fips/go/archive/refs/tags/go%{go_version}-%{pkg_release}-openssl-fips.tar.gz

# make possible to override default traceback level at build time by setting build tag rpm_crashtraceback

Source1:        fedora.go

# The compiler is written in Go. Needs go(1.4+) compiler for build.

# Actual Go based bootstrap compiler provided by above source.

%if !%{golang_bootstrap}

BuildRequires:  gcc-go >= 5

%else

BuildRequires:  golang

%endif

%if 0%{?rhel} > 6 || 0%{?fedora} > 0

BuildRequires:  hostname

%else

BuildRequires:  net-tools

%endif

# For OpenSSL FIPS

BuildRequires:  openssl-devel

# For openssl-fipsinstall

BuildRequires:  openssl

# for tests

BuildRequires:  pcre-devel, glibc-static, perl

Provides:       go = %{version}-%{release}

Requires:       %{name}-bin = %{version}-%{release}

Requires:       %{name}-src = %{version}-%{release}

Requires:       openssl-devel

Requires:       diffutils

# we had been just removing the zoneinfo.zip, but that caused tests to fail for users that

# later run `go test -a std`. This makes it only use the zoneinfo.zip where needed in tests.

Patch215:       go1.5-zoneinfo_testing_only.patch

# Proposed patch by jcajka https://golang.org/cl/86541

Patch221:       fix_TestScript_list_std.patch

# Port to openssl 3.0

Patch1952381:   rhbz1952381.patch

Patch223: remove_ed25519vectors_test.patch

Patch224: openssl_deprecated_algorithm_tests.patch

# Having documentation separate was broken

Obsoletes:      %{name}-docs < 1.1-4

# RPM can't handle symlink -> dir with subpackages, so merge back

Obsoletes:      %{name}-data < 1.1.1-4

# These are the only RHEL/Fedora architectures that we compile this package for

ExclusiveArch:  %{golang_arches}

Source100:      golang-gdbinit

Source101:      golang-prelink.conf

%description

%{summary}.

%package       docs

Summary:       Golang compiler docs

Requires:      %{name} = %{version}-%{release}

BuildArch:     noarch

Obsoletes:     %{name}-docs < 1.1-4

%description   docs

%{summary}.

%package       misc

Summary:       Golang compiler miscellaneous sources

Requires:      %{name} = %{version}-%{release}

BuildArch:     noarch

%description   misc

%{summary}.

%package       tests

Summary:       Golang compiler tests for stdlib

Requires:      %{name} = %{version}-%{release}

BuildArch:     noarch

%description   tests

%{summary}.

%package        src

Summary:        Golang compiler source tree

BuildArch:      noarch

%description    src

%{summary}

%package        bin

Summary:        Golang core compiler tools

Requires:       %{name} = %{version}-%{release}

# We strip the meta dependency, but go does require glibc.

# This is an odd issue, still looking for a better fix.

Requires:       glibc

Requires:       /usr/bin/gcc

%description    bin

%{summary}

# Workaround old RPM bug of symlink-replaced-with-dir failure

%pretrans -p <lua>

for _,d in pairs({"api", "doc", "include", "lib", "src"}) do

  path = "%{goroot}/" .. d

  if posix.stat(path, "type") == "link" then

    os.remove(path)

    posix.mkdir(path)

  end

end

%if %{shared}

%package        shared

Summary:        Golang shared object libraries

%description    shared

%{summary}.

%endif

%if %{race}

%package        race

Summary:        Golang std library with -race enabled

Requires:       %{name} = %{version}-%{release}

%description    race

%{summary}

%endif

%prep

%setup -q -n go-go%{go_version}-%{pkg_release}-openssl-fips

%patch215 -p1

%patch221 -p1

%patch1952381 -p1

%patch223 -p1

%patch224 -p1

cp %{SOURCE1} ./src/runtime/

%build

set -xe

# print out system information

uname -a

cat /proc/cpuinfo

cat /proc/meminfo

# bootstrap compiler GOROOT

%if !%{golang_bootstrap}

export GOROOT_BOOTSTRAP=/

%else

export GOROOT_BOOTSTRAP=/opt/rh/go-toolset-1.10/root/usr/lib/go-toolset-1.10-golang

%endif

# set up final install location

export GOROOT_FINAL=%{goroot}

export GOHOSTOS=linux

export GOHOSTARCH=%{gohostarch}

pushd src

# use our gcc options for this build, but store gcc as default for compiler

export CFLAGS="$RPM_OPT_FLAGS"

export LDFLAGS="$RPM_LD_FLAGS"

export CC="gcc"

export CC_FOR_TARGET="gcc"

export GOOS=linux

export GOARCH=%{gohostarch}

DEFAULT_GO_LD_FLAGS=""

%if !%{external_linker}

export GO_LDFLAGS="-linkmode internal $DEFAULT_GO_LD_FLAGS"

%else

# Only pass a select subset of the external hardening flags. We do not pass along

# the default $RPM_LD_FLAGS as on certain arches Go does not fully, correctly support

# building in PIE mode.

export GO_LDFLAGS="\"-extldflags=-Wl,-z,now,-z,relro\" $DEFAULT_GO_LD_FLAGS"

%endif

%if !%{cgo_enabled}

export CGO_ENABLED=0

%endif

./make.bash --no-clean

popd

# build shared std lib

%if %{shared}

GOROOT=$(pwd) PATH=$(pwd)/bin:$PATH go install -buildmode=shared std

%endif

%if %{race}

GOROOT=$(pwd) PATH=$(pwd)/bin:$PATH go install -race std

%endif

%install

rm -rf $RPM_BUILD_ROOT

# create the top level directories

mkdir -p $RPM_BUILD_ROOT%{_bindir}

mkdir -p $RPM_BUILD_ROOT%{goroot}

# remove bootstrap binaries

rm -rf pkg/bootstrap/bin

# install everything into libdir (until symlink problems are fixed)

# https://code.google.com/p/go/issues/detail?id=5830

cp -apv api bin doc lib pkg src misc test VERSION \

   $RPM_BUILD_ROOT%{goroot}

# bz1099206

find $RPM_BUILD_ROOT%{goroot}/src -exec touch -r $RPM_BUILD_ROOT%{goroot}/VERSION "{}" \;

# and level out all the built archives

touch $RPM_BUILD_ROOT%{goroot}/pkg

find $RPM_BUILD_ROOT%{goroot}/pkg -exec touch -r $RPM_BUILD_ROOT%{goroot}/pkg "{}" \;

# generate the spec file ownership of this source tree and packages

cwd=$(pwd)

src_list=$cwd/go-src.list

pkg_list=$cwd/go-pkg.list

shared_list=$cwd/go-shared.list

race_list=$cwd/go-race.list

misc_list=$cwd/go-misc.list

docs_list=$cwd/go-docs.list

tests_list=$cwd/go-tests.list

rm -f $src_list $pkg_list $docs_list $misc_list $tests_list $shared_list $race_list

touch $src_list $pkg_list $docs_list $misc_list $tests_list $shared_list $race_list

pushd $RPM_BUILD_ROOT%{goroot}

    find src/ -type d -a \( ! -name testdata -a ! -ipath '*/testdata/*' \) -printf '%%%dir %{goroot}/%p\n' >> $src_list

    find src/ ! -type d -a \( ! -ipath '*/testdata/*' -a ! -name '*_test*.go' \) -printf '%{goroot}/%p\n' >> $src_list

    find bin/ pkg/ -type d -a ! -path '*_dynlink/*' -a ! -path '*_race/*' -printf '%%%dir %{goroot}/%p\n' >> $pkg_list

    find bin/ pkg/ ! -type d -a ! -path '*_dynlink/*' -a ! -path '*_race/*' -printf '%{goroot}/%p\n' >> $pkg_list

    find doc/ -type d -printf '%%%dir %{goroot}/%p\n' >> $docs_list

    find doc/ ! -type d -printf '%{goroot}/%p\n' >> $docs_list

    find misc/ -type d -printf '%%%dir %{goroot}/%p\n' >> $misc_list

    find misc/ ! -type d -printf '%{goroot}/%p\n' >> $misc_list

%if %{shared}

    mkdir -p %{buildroot}/%{_libdir}/

    mkdir -p %{buildroot}/%{golibdir}/

    for file in $(find .  -iname "*.so" ); do

        chmod 755 $file

        mv  $file %{buildroot}/%{golibdir}

        pushd $(dirname $file)

        ln -fs %{golibdir}/$(basename $file) $(basename $file)

        popd

        echo "%%{goroot}/$file" >> $shared_list

        echo "%%{golibdir}/$(basename $file)" >> $shared_list

    done

    find pkg/*_dynlink/ -type d -printf '%%%dir %{goroot}/%p\n' >> $shared_list

    find pkg/*_dynlink/ ! -type d -printf '%{goroot}/%p\n' >> $shared_list

%endif

%if %{race}

    find pkg/*_race/ -type d -printf '%%%dir %{goroot}/%p\n' >> $race_list

    find pkg/*_race/ ! -type d -printf '%{goroot}/%p\n' >> $race_list

%endif

    find test/ -type d -printf '%%%dir %{goroot}/%p\n' >> $tests_list

    find test/ ! -type d -printf '%{goroot}/%p\n' >> $tests_list

    find src/ -type d -a \( -name testdata -o -ipath '*/testdata/*' \) -printf '%%%dir %{goroot}/%p\n' >> $tests_list

    find src/ ! -type d -a \( -ipath '*/testdata/*' -o -name '*_test*.go' \) -printf '%{goroot}/%p\n' >> $tests_list

    # this is only the zoneinfo.zip

    find lib/ -type d -printf '%%%dir %{goroot}/%p\n' >> $tests_list

    find lib/ ! -type d -printf '%{goroot}/%p\n' >> $tests_list

popd

# remove the doc Makefile

rm -rfv $RPM_BUILD_ROOT%{goroot}/doc/Makefile

# put binaries to bindir, linked to the arch we're building,

# leave the arch independent pieces in {goroot}

mkdir -p $RPM_BUILD_ROOT%{goroot}/bin/linux_%{gohostarch}

ln -sf %{goroot}/bin/go $RPM_BUILD_ROOT%{_bindir}/go

ln -sf %{goroot}/bin/gofmt $RPM_BUILD_ROOT%{_bindir}/gofmt

# ensure these exist and are owned

mkdir -p $RPM_BUILD_ROOT%{gopath}/src/github.com

mkdir -p $RPM_BUILD_ROOT%{gopath}/src/bitbucket.org

mkdir -p $RPM_BUILD_ROOT%{gopath}/src/code.google.com/p

mkdir -p $RPM_BUILD_ROOT%{gopath}/src/golang.org/x

# gdbinit

mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/gdbinit.d

cp -av %{SOURCE100} $RPM_BUILD_ROOT%{_sysconfdir}/gdbinit.d/golang.gdb

# prelink blacklist

mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/prelink.conf.d

cp -av %{SOURCE101} $RPM_BUILD_ROOT%{_sysconfdir}/prelink.conf.d/golang.conf

sed -i 's/const defaultGO_LDSO = `.*`/const defaultGO_LDSO = ``/' $RPM_BUILD_ROOT%{goroot}/src/internal/buildcfg/zbootstrap.go

%check

export GOROOT=$(pwd -P)

export PATH="$GOROOT"/bin:"$PATH"

cd src

# Add some sanity checks.

echo "GO VERSION:"

go version

echo "GO ENVIRONMENT:"

go env

export CC="gcc"

export CFLAGS="$RPM_OPT_FLAGS"

export LDFLAGS="$RPM_LD_FLAGS"

%if !%{external_linker}

export GO_LDFLAGS="-linkmode internal"

%else

export GO_LDFLAGS="-extldflags '$RPM_LD_FLAGS'"

%endif

%if !%{cgo_enabled} || !%{external_linker}

export CGO_ENABLED=0

%endif

# work around aarch64 issue

# https://src.fedoraproject.org/rpms/golang/c/ea99ebaff6b9561243bb43039458771edb691eaf?branch=f32

%ifarch aarch64

export CGO_CFLAGS="-mno-outline-atomics"

%endif

# make sure to not timeout

export GO_TEST_TIMEOUT_SCALE=2

export GO_TEST_RUN=""

%ifarch aarch64

  export GO_TEST_RUN="-run=!testshared"

%endif

%if %{fail_on_tests}

./run.bash --no-rebuild -v -v -v -k $GO_TEST_RUN

export OPENSSL_FORCE_FIPS_MODE=1

# Run tests with FIPS enabled.

pushd crypto

  # Run all crypto tests but skip TLS, we will run FIPS specific TLS tests later

  GOLANG_FIPS=1 go test $(go list ./... | grep -v tls) -v

  # Check that signature functions have parity between boring and notboring

  CGO_ENABLED=0 go test $(go list ./... | grep -v tls) -v

popd

# Run all FIPS specific TLS tests

pushd crypto/tls

  GOLANG_FIPS=1 go test -v -run "Boring"

popd

%else

./run.bash --no-rebuild -v -v -v -k || :

%endif

cd ..

%files

%doc AUTHORS CONTRIBUTORS LICENSE PATENTS

# VERSION has to be present in the GOROOT, for `go install std` to work

%doc %{goroot}/VERSION

%dir %{goroot}/doc

%doc %{goroot}/doc/*

# go files

%dir %{goroot}

%exclude %{goroot}/bin/

%exclude %{goroot}/pkg/

%exclude %{goroot}/src/

%exclude %{goroot}/doc/

%exclude %{goroot}/misc/

%exclude %{goroot}/test/

%{goroot}/*

# ensure directory ownership, so they are cleaned up if empty

%dir %{gopath}

%dir %{gopath}/src

%dir %{gopath}/src/github.com/

%dir %{gopath}/src/bitbucket.org/

%dir %{gopath}/src/code.google.com/

%dir %{gopath}/src/code.google.com/p/

%dir %{gopath}/src/golang.org

%dir %{gopath}/src/golang.org/x

# gdbinit (for gdb debugging)

%{_sysconfdir}/gdbinit.d

# prelink blacklist

%{_sysconfdir}/prelink.conf.d

%files -f go-src.list src

%files -f go-docs.list docs

%files -f go-misc.list misc

%files -f go-tests.list tests

%files -f go-pkg.list bin

%{_bindir}/go

%{_bindir}/gofmt

%if %{shared}

%files -f go-shared.list shared

%endif

%if %{race}

%files -f go-race.list race

%endif

%changelog

* Wed Jul 20 2022 David Benoit <dbenoit@redhat.com> - 1.17.12-1

- Update Go to version 1.17.12

- Resolves: rhbz#2109183

* Wed Jul 20 2022 David Benoit <dbenoit@redhat.com> - 1.17.7-2

- Clean up dist-git patches

- Resolves: rhbz#2109174

* Thu Feb 17 2022 David Benoit <dbenoit@redhat.com> - 1.17.7-1

- Rebase to Go 1.17.7

- Update ecdsa tests to reject SHA1 signatures in boring mode

- Resolves: rhbz#2025637

- Resolves: rhbz#1975396

* Mon Dec 13 2021 Alejandro Sáez <asm@redhat.com> - 1.17.5-1

- Rebase to Go 1.17.5

- Add remove_waitgroup_misuse_tests patch

- Add remove_ed25519vectors_test.patch

- Remove FIPS checks to avoid issues in the CI

- Related: rhbz#2031116

- Resolves: rhbz#2022829

- Resolves: rhbz#2024687

- Resolves: rhbz#2030851

- Resolves: rhbz#2031253

* Wed Nov 03 2021 Alejandro Sáez <asm@redhat.com> - 1.17.2-1

- Rebase to Go 1.17.2

- Related: rhbz#2014087

- Remove favicon.ico and robots.txt references

- Exclude TestEd25519Vectors test

- Update patch rhbz1952381

- Remove rhbz1904567 patch

- Remove rhbz1939923 patch

* Mon Aug 09 2021 Mohan Boddu <mboddu@redhat.com> - 1.16.6-4

- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags

  Related: rhbz#1991688

* Wed Aug 4 2021 Derek Parker <deparker@redhat.com> - 1.16.6-3

- Include ppc64le VDSO segfault backport fix

- Resolves: rhbz#1966622

* Mon Aug 2 2021 Derek Parker <deparker@redhat.com> - 1.16.6-2

- Bump release

- Resolves: rhbz#1904567

* Mon Aug 2 2021 Derek Parker <deparker@redhat.com> - 1.16.6-2

- Backport fix allowing LTO to be enabled on cgo sources

- Resolves: rhbz#1904567

* Tue Jul 20 2021 Derek Parker <deparker@redhat.com> - 1.16.6-1

- Rebase to 1.16.6

- Resolves: rhbz#1984124

- Replace symbols no longer present in OpenSSL 3.0 ABI

- Resolves: rhbz#1984110

- Fix TestBoringServerCurves failing when ran by itself

- Resolves: rhbz#1977914

* Tue Jun 22 2021 Mohan Boddu <mboddu@redhat.com> - 1.16.4-3

- Rebuilt for RHEL 9 BETA for openssl 3.0

  Related: rhbz#1971065

* Fri May 28 2021 David Benoit <dbenoit@redhat.com> - 1.16.4-2

- Port to OpenSSL 3.0

- Resolves: rhbz#1952381

* Fri May 14 2021 Alejandro Sáez <asm@redhat.com> - 1.16.4-1

- Rebase to 1.16.4

- Resolves: rhbz#1955035

- Resolves: rhbz#1957961

* Thu Apr 15 2021 Mohan Boddu <mboddu@redhat.com> - 1.16.1-3

- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937

* Tue Mar 30 2021 Alejandro Sáez <asm@redhat.com> - 1.16.1-2

- Rebase to go-1.16.1-2-openssl-fips

- Resolves: rhbz#1922455

* Tue Mar 30 2021 Alejandro Sáez <asm@redhat.com> - 1.16.1-1

- Rebase to go-1.16.1-2-openssl-fips

- Adds a workaround for rhbz#1939923

- Removes Patch224, it's on upstream -> rhbz#1888673

- Removes Patch225, it's on upstream -> https://go-review.googlesource.com/c/text/+/238238

- Removes old patches for cleaning purposes

- Related: rhbz#1942898

* Fri Jan 22 2021 David Benoit <dbenoit@redhat.com> - 1.15.7-1

- Rebase to 1.15.7

- Resolves: rhbz#1892207

- Resolves: rhbz#1918755

* Tue Nov 24 2020 David Benoit <dbenoit@redhat.com> - 1.15.5-1

- Rebase to 1.15.5

- Resolves: rhbz#1899184

- Resolves: rhbz#1899185

- Resolves: rhbz#1899186

* Thu Nov 12 2020 David Benoit <dbenoit@redhat.com> - 1.15.3-2

- Rebase to 1.15.3

- fix x/text infinite loop

- Resolves: rhbz#1881539

* Tue Nov 03 2020 Alejandro Sáez <asm@redhat.com> - 1.15.2-2

- Resolves: rhbz#1850045

* Mon Oct 19 2020 David Benoit <dbenoit@redhat.com> - 1.15.2-1

- Rebase to 1.15.2

- fix rhbz#1872622 in commit af9a1b1f6567a1c5273a134d395bfe7bb840b7f8

- Resolves: rhbz#1872622

- add net/http graceful shutdown patch

- Resolves: rhbz#1888673

- add x509warnCN patch

- Resolves: rhbz#1889437

* Wed Sep 09 2020 Alejandro Sáez <asm@redhat.com> - 1.15.0-1

- Rebase to 1.15.0

- Related: rhbz#1870531

* Thu Aug 27 2020 Alejandro Sáez <asm@redhat.com> - 1.14.7-2

- Improve test suite

- Resolves: rhbz#1854693

* Tue Aug 18 2020 Alejandro Sáez <asm@redhat.com> - 1.14.7-1

- Rebase to 1.14.7

* Mon Aug 03 2020 Alejandro Sáez <asm@redhat.com> - 1.14.6-1

- Rebase to 1.14.6

- Resolves: rhbz#1820596

* Wed Jul 08 2020 Alejandro Sáez <asm@redhat.com> - 1.14.4-2

- Include patch to fix missing deferreturn on linux/ppc64le

- Resolves: rhbz#1854836

* Thu Jun 25 2020 Alejandro Sáez <asm@redhat.com> - 1.14.4-1

- Rebase to 1.14.4

* Thu May 21 2020 Alejandro Sáez <asm@redhat.com> - 1.14.2-2

- Remove i686 references

- Related: rhbz#1752991

* Wed May 06 2020 Alejandro Sáez <asm@redhat.com> - 1.14.2-1

- Rebase to 1.14.2

- Related: rhbz#1820596

* Wed Nov 27 2019 Alejandro Sáez <asm@redhat.com> - 1.13.4-2

- Remove patches

- Related: rhbz#1747150

* Mon Nov 25 2019 Alejandro Sáez <asm@redhat.com> - 1.13.4-1

- Rebase to 1.13.4

- Related: rhbz#1747150

* Tue Sep 17 2019 Tom Stellard <tstellar@redhat.com> - 1.12.8-4

- Reduce number of threads when testing on i686

* Wed Sep 11 2019 Tom Stellard <tstellar@redhat.com> - 1.12.8-3

- Relax FIPS requirements to unblock OpenShift testing

* Wed Aug 28 2019 Tom Stellard <tstellar@redhat.com> - 1.12.8-2

- Rebase to 1.12.8

- Resolves: rhbz#1745706

- Resolves: rhbz#1745712

* Mon Aug 5 2019 Derek Parker <deparker@redhat.com> - 1.12.6-3

- Add README for more documentation

- Resolves: rhbz#1734788

* Fri Aug 2 2019 Derek Parker <deparker@redhat.com> - 1.12.6-3

- Revert some TLS FIPS changes for now

- Resolves: rhbz#1734788

* Thu Aug 1 2019 Derek Parker <deparker@redhat.com> - 1.12.6-2

- Updates to be less strict on key size in FIPS mode

- Resolves: rhbz#1734788

* Thu Jun 13 2019 Derek Parker <deparker@redhat.com> - 1.12.6-1

- Rebase to 1.12.6

- Resolves: rhbz#1677819

* Thu Jun 13 2019 Derek Parker <deparker@redhat.com> - 1.12.5-2

- Remove macros present in go-compiler

- Resolves: rhbz#1700109

* Wed Jun 12 2019 Derek Parker <deparker@redhat.com> - 1.12.5-1

- Rebase to 1.12.5

- Resolves: rhbz#1677819

* Wed May 29 2019 Derek Parker <deparker@redhat.com> - 1.12.1-2

- Lock OpenSSL to specific built version and include more initialization.

- Resolves: rhbz#1709603

* Fri May 10 2019 Derek Parker <deparker@redhat.com> - 1.12.1-1