# For the curious:

# 0.9.5a soversion = 0

# 0.9.6  soversion = 1

# 0.9.6a soversion = 2

# 0.9.6c soversion = 3

# 0.9.7a soversion = 4

# 0.9.7ef soversion = 5

# 0.9.8ab soversion = 6

# 0.9.8g soversion = 7

# 0.9.8jk + EAP-FAST soversion = 8

# 1.0.0 soversion = 10

%define soversion 10

# Number of threads to spawn when testing some threading fixes.

%define thread_test_threads %{?threads:%{threads}}%{!?threads:1}

# Arches on which we need to prevent arch conflicts on opensslconf.h, must

# also be handled in opensslconf-new.h.

%define multilib_arches %{ix86} ia64 %{mips} ppc ppc64 s390 s390x sparcv9 sparc64 x86_64

%global _performance_build 1

Summary: Utilities from the general purpose cryptography library with TLS implementation

Name: openssl

Version: 1.0.2k

Release: 16%{?dist}

Epoch: 1

# We have to remove certain patented algorithms from the openssl source

# tarball with the hobble-openssl script which is included below.

# The original openssl upstream tarball cannot be shipped in the .src.rpm.

Source: openssl-%{version}-hobbled.tar.xz

Source1: hobble-openssl

Source2: Makefile.certificate

Source5: README.legacy-settings

Source6: make-dummy-cert

Source7: renew-dummy-cert

Source8: openssl-thread-test.c

Source9: opensslconf-new.h

Source10: opensslconf-new-warning.h

Source11: README.FIPS

Source12: ec_curve.c

Source13: ectest.c

# Build changes

Patch1: openssl-1.0.2e-rpmbuild.patch

Patch2: openssl-1.0.2a-defaults.patch

Patch4: openssl-1.0.2i-enginesdir.patch

Patch5: openssl-1.0.2a-no-rpath.patch

Patch6: openssl-1.0.2a-test-use-localhost.patch

Patch7: openssl-1.0.0-timezone.patch

Patch8: openssl-1.0.1c-perlfind.patch

Patch9: openssl-1.0.1c-aliasing.patch

# Bug fixes

Patch23: openssl-1.0.2c-default-paths.patch

Patch24: openssl-1.0.2a-issuer-hash.patch

# Functionality changes

Patch33: openssl-1.0.0-beta4-ca-dir.patch

Patch34: openssl-1.0.2a-x509.patch

Patch35: openssl-1.0.2a-version-add-engines.patch

Patch39: openssl-1.0.2a-ipv6-apps.patch

Patch40: openssl-1.0.2i-fips.patch

Patch43: openssl-1.0.2j-krb5keytab.patch

Patch45: openssl-1.0.2a-env-zlib.patch

Patch47: openssl-1.0.2a-readme-warning.patch

Patch49: openssl-1.0.1i-algo-doc.patch

Patch50: openssl-1.0.2a-dtls1-abi.patch

Patch51: openssl-1.0.2a-version.patch

Patch56: openssl-1.0.2a-rsa-x931.patch

Patch58: openssl-1.0.2a-fips-md5-allow.patch

Patch60: openssl-1.0.2a-apps-dgst.patch

Patch63: openssl-1.0.2k-starttls.patch

Patch65: openssl-1.0.2i-chil-fixes.patch

Patch66: openssl-1.0.2h-pkgconfig.patch

Patch68: openssl-1.0.2i-secure-getenv.patch

Patch70: openssl-1.0.2a-fips-ec.patch

Patch71: openssl-1.0.2g-manfix.patch

Patch72: openssl-1.0.2a-fips-ctor.patch

Patch73: openssl-1.0.2c-ecc-suiteb.patch

Patch74: openssl-1.0.2j-deprecate-algos.patch

Patch75: openssl-1.0.2a-compat-symbols.patch

Patch76: openssl-1.0.2j-new-fips-reqs.patch

Patch77: openssl-1.0.2j-downgrade-strength.patch

Patch78: openssl-1.0.2k-cc-reqs.patch

Patch90: openssl-1.0.2i-enc-fail.patch

Patch94: openssl-1.0.2d-secp256k1.patch

Patch95: openssl-1.0.2e-remove-nistp224.patch

Patch96: openssl-1.0.2e-speed-doc.patch

Patch97: openssl-1.0.2k-no-ssl2.patch

Patch98: openssl-1.0.2k-long-hello.patch

Patch99: openssl-1.0.2k-fips-randlock.patch

# Backported fixes including security fixes

Patch80: openssl-1.0.2e-wrap-pad.patch

Patch81: openssl-1.0.2a-padlock64.patch

Patch82: openssl-1.0.2i-trusted-first-doc.patch

Patch83: openssl-1.0.2k-backports.patch

Patch84: openssl-1.0.2k-ppc-update.patch

Patch85: openssl-1.0.2k-req-x509.patch

Patch86: openssl-1.0.2k-cve-2017-3736.patch

Patch87: openssl-1.0.2k-cve-2017-3737.patch

Patch88: openssl-1.0.2k-cve-2017-3738.patch

Patch89: openssl-1.0.2k-s390x-update.patch

Patch100: openssl-1.0.2k-name-sensitive.patch

Patch101: openssl-1.0.2k-cve-2017-3735.patch

Patch102: openssl-1.0.2k-cve-2018-0732.patch

Patch103: openssl-1.0.2k-cve-2018-0737.patch

Patch104: openssl-1.0.2k-cve-2018-0739.patch

Patch105: openssl-1.0.2k-cve-2018-0495.patch

License: OpenSSL

Group: System Environment/Libraries

URL: http://www.openssl.org/

BuildRoot: %{_tmppath}/%{name}-%{version}-root

BuildRequires: coreutils, krb5-devel, perl, sed, zlib-devel, /usr/bin/cmp

BuildRequires: lksctp-tools-devel

BuildRequires: /usr/bin/rename

BuildRequires: /usr/bin/pod2man

Requires: coreutils, make

Requires: %{name}-libs%{?_isa} = %{epoch}:%{version}-%{release}

%description

The OpenSSL toolkit provides support for secure communications between

machines. OpenSSL includes a certificate management tool and shared

libraries which provide various cryptographic algorithms and

protocols.

%package libs

Summary: A general purpose cryptography library with TLS implementation

Group: System Environment/Libraries

Requires: ca-certificates >= 2008-5

# Needed obsoletes due to the base/lib subpackage split

Obsoletes: openssl < 1:1.0.1-0.3.beta3

%description libs

OpenSSL is a toolkit for supporting cryptography. The openssl-libs

package contains the libraries that are used by various applications which

support cryptographic algorithms and protocols.

%package devel

Summary: Files for development of applications which will use OpenSSL

Group: Development/Libraries

Requires: %{name}-libs%{?_isa} = %{epoch}:%{version}-%{release}

Requires: krb5-devel%{?_isa}, zlib-devel%{?_isa}

Requires: pkgconfig

%description devel

OpenSSL is a toolkit for supporting cryptography. The openssl-devel

package contains include files needed to develop applications which

support various cryptographic algorithms and protocols.

%package static

Summary:  Libraries for static linking of applications which will use OpenSSL

Group: Development/Libraries

Requires: %{name}-devel%{?_isa} = %{epoch}:%{version}-%{release}

%description static

OpenSSL is a toolkit for supporting cryptography. The openssl-static

package contains static libraries needed for static linking of

applications which support various cryptographic algorithms and

protocols.

%package perl

Summary: Perl scripts provided with OpenSSL

Group: Applications/Internet

Requires: perl

Requires: %{name}%{?_isa} = %{epoch}:%{version}-%{release}

%description perl

OpenSSL is a toolkit for supporting cryptography. The openssl-perl

package provides Perl scripts for converting certificates and keys

from other formats to the formats used by the OpenSSL toolkit.

%prep

%setup -q -n %{name}-%{version}

# The hobble_openssl is called here redundantly, just to be sure.

# The tarball has already the sources removed.

%{SOURCE1} > /dev/null

cp %{SOURCE12} %{SOURCE13} crypto/ec/

%patch1 -p1 -b .rpmbuild

%patch2 -p1 -b .defaults

%patch4 -p1 -b .enginesdir %{?_rawbuild}

%patch5 -p1 -b .no-rpath

%patch6 -p1 -b .use-localhost

%patch7 -p1 -b .timezone

%patch8 -p1 -b .perlfind %{?_rawbuild}

%patch9 -p1 -b .aliasing

%patch23 -p1 -b .default-paths

%patch24 -p1 -b .issuer-hash

%patch33 -p1 -b .ca-dir

%patch34 -p1 -b .x509

%patch35 -p1 -b .version-add-engines

%patch39 -p1 -b .ipv6-apps

%patch40 -p1 -b .fips

%patch43 -p1 -b .krb5keytab 

%patch45 -p1 -b .env-zlib

%patch47 -p1 -b .warning

%patch49 -p1 -b .algo-doc

%patch50 -p1 -b .dtls1-abi

%patch51 -p1 -b .version

%patch56 -p1 -b .x931

%patch58 -p1 -b .md5-allow

%patch60 -p1 -b .dgst

%patch63 -p1 -b .starttls

%patch65 -p1 -b .chil

%patch66 -p1 -b .pkgconfig

%patch68 -p1 -b .secure-getenv

%patch70 -p1 -b .fips-ec

%patch71 -p1 -b .manfix

%patch72 -p1 -b .fips-ctor

%patch73 -p1 -b .suiteb

%patch74 -p1 -b .deprecate-algos

%patch75 -p1 -b .compat

%patch76 -p1 -b .fips-reqs

%patch77 -p1 -b .strength

%patch78 -p1 -b .cc-reqs

%patch90 -p1 -b .enc-fail

%patch94 -p1 -b .secp256k1

%patch95 -p1 -b .nistp224

%patch96 -p1 -b .speed-doc

%patch97 -p1 -b .no-ssl2

%patch98 -p1 -b .long-hello

%patch99 -p1 -b .randlock

%patch80 -p1 -b .wrap

%patch81 -p1 -b .padlock64

%patch82 -p1 -b .trusted-first

%patch83 -p1 -b .backports

%patch84 -p1 -b .ppc-update

%patch85 -p1 -b .req-x509

%patch86 -p1 -b .mont5-carry

%patch87 -p1 -b .ssl-err

%patch88 -p1 -b .rsaz-overflow

%patch89 -p1 -b .s390x-update

%patch100 -p1 -b .name-sensitive

%patch101 -p1 -b .overread

%patch102 -p1 -b .large-dh

%patch103 -p1 -b .gen-timing

%patch104 -p1 -b .asn1-recursive

%patch105 -p1 -b .rohnp-fix

sed -i 's/SHLIB_VERSION_NUMBER "1.0.0"/SHLIB_VERSION_NUMBER "%{version}"/' crypto/opensslv.h

# Modify the various perl scripts to reference perl in the right location.

perl util/perlpath.pl `dirname %{__perl}`

# Generate a table with the compile settings for my perusal.

touch Makefile

make TABLE PERL=%{__perl}

%build

# Figure out which flags we want to use.

# default

sslarch=%{_os}-%{_target_cpu}

%ifarch %ix86

sslarch=linux-elf

if ! echo %{_target} | grep -q i686 ; then

	sslflags="no-asm 386"

fi

%endif

%ifarch x86_64

sslflags=enable-ec_nistp_64_gcc_128

%endif

%ifarch sparcv9

sslarch=linux-sparcv9

sslflags=no-asm

%endif

%ifarch sparc64

sslarch=linux64-sparcv9

sslflags=no-asm

%endif

%ifarch alpha alphaev56 alphaev6 alphaev67

sslarch=linux-alpha-gcc

%endif

%ifarch s390 sh3eb sh4eb

sslarch="linux-generic32 -DB_ENDIAN"

%endif

%ifarch s390x

sslarch="linux64-s390x"

%endif

%ifarch %{arm}

sslarch=linux-armv4

%endif

%ifarch aarch64

sslarch=linux-aarch64

sslflags=enable-ec_nistp_64_gcc_128

%endif

%ifarch sh3 sh4

sslarch=linux-generic32

%endif

%ifarch ppc64 ppc64p7

sslarch=linux-ppc64

%endif

%ifarch ppc64le

sslarch="linux-ppc64le"

sslflags=enable-ec_nistp_64_gcc_128

%endif

%ifarch mips mipsel

sslarch="linux-mips32 -mips32r2"

%endif

%ifarch mips64 mips64el

sslarch="linux64-mips64 -mips64r2"

%endif

%ifarch mips64el

sslflags=enable-ec_nistp_64_gcc_128

%endif

%ifarch riscv64

sslarch=linux-generic64

%endif

# ia64, x86_64, ppc are OK by default

# Configure the build tree.  Override OpenSSL defaults with known-good defaults

# usable on all platforms.  The Configure script already knows to use -fPIC and

# RPM_OPT_FLAGS, so we can skip specifiying them here.

./Configure \

	--prefix=%{_prefix} --openssldir=%{_sysconfdir}/pki/tls ${sslflags} \

	zlib sctp enable-camellia enable-seed enable-tlsext enable-rfc3779 \

	enable-cms enable-md2 enable-rc5 \

	no-mdc2 no-ec2m no-gost no-srp \

	--with-krb5-flavor=MIT --enginesdir=%{_libdir}/openssl/engines \

	--with-krb5-dir=/usr shared  ${sslarch} %{?!nofips:fips}

# Add -Wa,--noexecstack here so that libcrypto's assembler modules will be

# marked as not requiring an executable stack.

# Also add -DPURIFY to make using valgrind with openssl easier as we do not

# want to depend on the uninitialized memory as a source of entropy anyway.

RPM_OPT_FLAGS="$RPM_OPT_FLAGS -Wa,--noexecstack -DPURIFY"

make depend

make all

# Generate hashes for the included certs.

make rehash

# Overwrite FIPS README and copy README.legacy-settings

cp -f %{SOURCE5} %{SOURCE11} .

# Clean up the .pc files

for i in libcrypto.pc libssl.pc openssl.pc ; do

  sed -i '/^Libs.private:/{s/-L[^ ]* //;s/-Wl[^ ]* //}' $i

done

%check

# Verify that what was compiled actually works.

# We must revert patch33 before tests otherwise they will fail

patch -p1 -R < %{PATCH33}

LD_LIBRARY_PATH=`pwd`${LD_LIBRARY_PATH:+:${LD_LIBRARY_PATH}}

export LD_LIBRARY_PATH

OPENSSL_ENABLE_MD5_VERIFY=

export OPENSSL_ENABLE_MD5_VERIFY

make -C test apps tests

%{__cc} -o openssl-thread-test \

	`krb5-config --cflags` \

	-I./include \

	$RPM_OPT_FLAGS \

	%{SOURCE8} \

	-L. \

	-lssl -lcrypto \

	`krb5-config --libs` \

	-lpthread -lz -ldl

./openssl-thread-test --threads %{thread_test_threads}

# Add generation of HMAC checksum of the final stripped library

%define __spec_install_post \

    %{?__debug_package:%{__debug_install_post}} \

    %{__arch_install_post} \

    %{__os_install_post} \

    crypto/fips/fips_standalone_hmac $RPM_BUILD_ROOT%{_libdir}/libcrypto.so.%{version} >$RPM_BUILD_ROOT%{_libdir}/.libcrypto.so.%{version}.hmac \

    ln -sf .libcrypto.so.%{version}.hmac $RPM_BUILD_ROOT%{_libdir}/.libcrypto.so.%{soversion}.hmac \

    crypto/fips/fips_standalone_hmac $RPM_BUILD_ROOT%{_libdir}/libssl.so.%{version} >$RPM_BUILD_ROOT%{_libdir}/.libssl.so.%{version}.hmac \

    ln -sf .libssl.so.%{version}.hmac $RPM_BUILD_ROOT%{_libdir}/.libssl.so.%{soversion}.hmac \

%{nil}

%define __provides_exclude_from %{_libdir}/openssl

%install

[ "$RPM_BUILD_ROOT" != "/" ] && rm -rf $RPM_BUILD_ROOT

# Install OpenSSL.

install -d $RPM_BUILD_ROOT{%{_bindir},%{_includedir},%{_libdir},%{_mandir},%{_libdir}/openssl}

make INSTALL_PREFIX=$RPM_BUILD_ROOT install

make INSTALL_PREFIX=$RPM_BUILD_ROOT install_docs

mv $RPM_BUILD_ROOT%{_libdir}/engines $RPM_BUILD_ROOT%{_libdir}/openssl

mv $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/man/* $RPM_BUILD_ROOT%{_mandir}/

rmdir $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/man

rename so.%{soversion} so.%{version} $RPM_BUILD_ROOT%{_libdir}/*.so.%{soversion}

mkdir $RPM_BUILD_ROOT/%{_lib}

for lib in $RPM_BUILD_ROOT%{_libdir}/*.so.%{version} ; do

	chmod 755 ${lib}

	ln -s -f `basename ${lib}` $RPM_BUILD_ROOT%{_libdir}/`basename ${lib} .%{version}`

	ln -s -f `basename ${lib}` $RPM_BUILD_ROOT%{_libdir}/`basename ${lib} .%{version}`.%{soversion}

done

# Install a makefile for generating keys and self-signed certs, and a script

# for generating them on the fly.

mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/certs

install -m644 %{SOURCE2} $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/certs/Makefile

install -m755 %{SOURCE6} $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/certs/make-dummy-cert

install -m755 %{SOURCE7} $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/certs/renew-dummy-cert

# Make sure we actually include the headers we built against.

for header in $RPM_BUILD_ROOT%{_includedir}/openssl/* ; do

	if [ -f ${header} -a -f include/openssl/$(basename ${header}) ] ; then

		install -m644 include/openssl/`basename ${header}` ${header}

	fi

done

# Rename man pages so that they don't conflict with other system man pages.

pushd $RPM_BUILD_ROOT%{_mandir}

ln -s -f config.5 man5/openssl.cnf.5

for manpage in man*/* ; do

	if [ -L ${manpage} ]; then

		TARGET=`ls -l ${manpage} | awk '{ print $NF }'`

		ln -snf ${TARGET}ssl ${manpage}ssl

		rm -f ${manpage}

	else

		mv ${manpage} ${manpage}ssl

	fi

done

for conflict in passwd rand ; do

	rename ${conflict} ssl${conflict} man*/${conflict}*

done

popd

# Pick a CA script.

pushd  $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/misc

mv CA.sh CA

popd

mkdir -m755 $RPM_BUILD_ROOT%{_sysconfdir}/pki/CA

mkdir -m700 $RPM_BUILD_ROOT%{_sysconfdir}/pki/CA/private

mkdir -m755 $RPM_BUILD_ROOT%{_sysconfdir}/pki/CA/certs

mkdir -m755 $RPM_BUILD_ROOT%{_sysconfdir}/pki/CA/crl

mkdir -m755 $RPM_BUILD_ROOT%{_sysconfdir}/pki/CA/newcerts

# Ensure the openssl.cnf timestamp is identical across builds to avoid

# mulitlib conflicts and unnecessary renames on upgrade

touch -r %{SOURCE2} $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/openssl.cnf

# Determine which arch opensslconf.h is going to try to #include.

basearch=%{_arch}

%ifarch %{ix86}

basearch=i386

%endif

%ifarch sparcv9

basearch=sparc

%endif

%ifarch sparc64

basearch=sparc64

%endif

%ifarch %{multilib_arches}

# Do an opensslconf.h switcheroo to avoid file conflicts on systems where you

# can have both a 32- and 64-bit version of the library, and they each need

# their own correct-but-different versions of opensslconf.h to be usable.

install -m644 %{SOURCE10} \

	$RPM_BUILD_ROOT/%{_prefix}/include/openssl/opensslconf-${basearch}.h

cat $RPM_BUILD_ROOT/%{_prefix}/include/openssl/opensslconf.h >> \

	$RPM_BUILD_ROOT/%{_prefix}/include/openssl/opensslconf-${basearch}.h

install -m644 %{SOURCE9} \

	$RPM_BUILD_ROOT/%{_prefix}/include/openssl/opensslconf.h

%endif

# Remove unused files from upstream fips support

rm -rf $RPM_BUILD_ROOT/%{_bindir}/openssl_fips_fingerprint

rm -rf $RPM_BUILD_ROOT/%{_libdir}/fips_premain.*

rm -rf $RPM_BUILD_ROOT/%{_libdir}/fipscanister.*

%clean

[ "$RPM_BUILD_ROOT" != "/" ] && rm -rf $RPM_BUILD_ROOT

%files

%defattr(-,root,root)

%{!?_licensedir:%global license %%doc}

%license LICENSE

%doc FAQ NEWS README

%doc README.FIPS

%doc README.legacy-settings

%{_sysconfdir}/pki/tls/certs/make-dummy-cert

%{_sysconfdir}/pki/tls/certs/renew-dummy-cert

%{_sysconfdir}/pki/tls/certs/Makefile

%{_sysconfdir}/pki/tls/misc/CA

%dir %{_sysconfdir}/pki/CA

%dir %{_sysconfdir}/pki/CA/private

%dir %{_sysconfdir}/pki/CA/certs

%dir %{_sysconfdir}/pki/CA/crl

%dir %{_sysconfdir}/pki/CA/newcerts

%{_sysconfdir}/pki/tls/misc/c_*

%attr(0755,root,root) %{_bindir}/openssl

%attr(0644,root,root) %{_mandir}/man1*/*

%exclude %{_mandir}/man1*/*.pl*

%exclude %{_mandir}/man1*/c_rehash*

%exclude %{_mandir}/man1*/tsget*

%attr(0644,root,root) %{_mandir}/man5*/*

%attr(0644,root,root) %{_mandir}/man7*/*

%files libs

%defattr(-,root,root)

%{!?_licensedir:%global license %%doc}

%license LICENSE

%dir %{_sysconfdir}/pki/tls

%dir %{_sysconfdir}/pki/tls/certs

%dir %{_sysconfdir}/pki/tls/misc

%dir %{_sysconfdir}/pki/tls/private

%config(noreplace) %{_sysconfdir}/pki/tls/openssl.cnf

%attr(0755,root,root) %{_libdir}/libcrypto.so.%{version}

%attr(0755,root,root) %{_libdir}/libcrypto.so.%{soversion}

%attr(0755,root,root) %{_libdir}/libssl.so.%{version}

%attr(0755,root,root) %{_libdir}/libssl.so.%{soversion}

%attr(0644,root,root) %{_libdir}/.libcrypto.so.*.hmac

%attr(0644,root,root) %{_libdir}/.libssl.so.*.hmac

%attr(0755,root,root) %{_libdir}/openssl

%files devel

%defattr(-,root,root)

%doc doc/c-indentation.el doc/openssl.txt CHANGES

%{_prefix}/include/openssl

%attr(0755,root,root) %{_libdir}/*.so

%attr(0644,root,root) %{_mandir}/man3*/*

%attr(0644,root,root) %{_libdir}/pkgconfig/*.pc

%files static

%defattr(-,root,root)

%attr(0644,root,root) %{_libdir}/*.a

%files perl

%defattr(-,root,root)

%attr(0755,root,root) %{_bindir}/c_rehash

%attr(0644,root,root) %{_mandir}/man1*/*.pl*

%attr(0644,root,root) %{_mandir}/man1*/c_rehash*

%attr(0644,root,root) %{_mandir}/man1*/tsget*

%{_sysconfdir}/pki/tls/misc/*.pl

%{_sysconfdir}/pki/tls/misc/tsget

%post libs -p /sbin/ldconfig

%postun libs -p /sbin/ldconfig

%changelog

* Tue Aug 14 2018 Tomáš Mráz <tmraz@redhat.com> 1.0.2k-16

- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA

- fix incorrect error message on FIPS DSA parameter generation (#1603597)

* Tue Jun 19 2018 Tomáš Mráz <tmraz@redhat.com> 1.0.2k-14

- ppc64le is not multilib architecture (#1585004)

* Mon Jun 18 2018 Tomáš Mráz <tmraz@redhat.com> 1.0.2k-13

- add S390x assembler updates

- make CA name list comparison function case sensitive (#1548401)

- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily

- fix CVE-2018-0732 - large prime DH DoS of TLS client

- fix CVE-2018-0737 - RSA key generation cache timing vulnerability

- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure

* Wed Dec 13 2017 Tomáš Mráz <tmraz@redhat.com> 1.0.2k-12

- fix CVE-2017-3737 - incorrect handling of fatal error state

- fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus

* Wed Dec  6 2017 Tomáš Mráz <tmraz@redhat.com> 1.0.2k-11

- fix deadlock in RNG in the FIPS mode in mariadb

* Tue Nov  7 2017 Tomáš Mráz <tmraz@redhat.com> 1.0.2k-9

- fix CVE-2017-3736 - carry propagation bug in Montgomery multiplication

* Wed May 17 2017 Tomáš Mráz <tmraz@redhat.com> 1.0.2k-8

- fix regression in openssl req -x509 command (#1450015)

* Thu Apr 13 2017 Tomáš Mráz <tmraz@redhat.com> 1.0.2k-7

- handle incorrect size gracefully in aes_p8_cbc_encrypt()

* Mon Mar 27 2017 Tomáš Mráz <tmraz@redhat.com> 1.0.2k-6

- allow long client hellos to be received by server

* Mon Mar 27 2017 Tomáš Mráz <tmraz@redhat.com> 1.0.2k-5

- fix CPU features detection on new AMD processors

* Thu Mar  9 2017 Tomáš Mráz <tmraz@redhat.com> 1.0.2k-4

- add support for additional STARTTLS protocols to s_client

  original backported patch by Robert Scheck (#1396209)

* Wed Mar  1 2017 Tomáš Mráz <tmraz@redhat.com> 1.0.2k-3

- properly document the SSLv2 support removal

* Mon Feb 20 2017 Tomáš Mráz <tmraz@redhat.com> 1.0.2k-2

- add PPC assembler updates

* Tue Feb  7 2017 Tomáš Mráz <tmraz@redhat.com> 1.0.2k-1

- minor upstream release 1.0.2k fixing security issues

* Tue Jan 10 2017 Tomáš Mráz <tmraz@redhat.com> 1.0.2j-2

- deprecate and disable verification of insecure hash algorithms

- add support for /etc/pki/tls/legacy-settings also for minimum DH length

  accepted by SSL client

- compare the encrypt and tweak key in XTS as required by FIPS

* Thu Jan  5 2017 Tomáš Mráz <tmraz@redhat.com> 1.0.2j-1

- rebase to latest upstream release from the 1.0.2 branch, ABI compatible

* Thu Sep 22 2016 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-60

- fix CVE-2016-2177 - possible integer overflow

- fix CVE-2016-2178 - non-constant time DSA operations

- fix CVE-2016-2179 - further DoS issues in DTLS

- fix CVE-2016-2180 - OOB read in TS_OBJ_print_bio()

- fix CVE-2016-2181 - DTLS1 replay protection and unprocessed records issue

- fix CVE-2016-2182 - possible buffer overflow in BN_bn2dec()

- fix CVE-2016-6302 - insufficient TLS session ticket HMAC length check

- fix CVE-2016-6304 - unbound memory growth with OCSP status request

- fix CVE-2016-6306 - certificate message OOB reads

- mitigate CVE-2016-2183 - degrade all 64bit block ciphers and RC4 to

  112 bit effective strength

* Tue Jun 21 2016 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-58

- replace expired testing certificates

* Fri Apr 29 2016 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-57

- fix CVE-2016-2105 - possible overflow in base64 encoding

- fix CVE-2016-2106 - possible overflow in EVP_EncryptUpdate()

- fix CVE-2016-2107 - padding oracle in stitched AES-NI CBC-MAC

- fix CVE-2016-2108 - memory corruption in ASN.1 encoder

- fix CVE-2016-2109 - possible DoS when reading ASN.1 data from BIO

* Thu Apr  7 2016 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-56

- fix 1-byte memory leak in pkcs12 parse (#1312112)

- document some options of the speed command (#1312110)

- fix high-precision timestamps in timestamping authority

- enable SCTP support in DTLS 

- use correct digest when exporting keying material in TLS1.2 (#1289620)

- fix CVE-2016-0799 - memory issues in BIO_printf

- add support for setting Kerberos service and keytab in

  s_server and s_client

* Wed Feb 24 2016 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-55

- fix CVE-2016-0702 - side channel attack on modular exponentiation

- fix CVE-2016-0705 - double-free in DSA private key parsing

- fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn

* Tue Feb 16 2016 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-54

- fix CVE-2015-3197 - SSLv2 ciphersuite enforcement

- disable SSLv2 in the generic TLS method

* Mon Dec 21 2015 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-53

- fix CVE-2015-7575 - disallow use of MD5 in TLS1.2

* Fri Dec  4 2015 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-52

- fix CVE-2015-3194 - certificate verify crash with missing PSS parameter

- fix CVE-2015-3195 - X509_ATTRIBUTE memory leak

- fix CVE-2015-3196 - race condition when handling PSK identity hint

* Tue Jun 23 2015 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-51

- fix the CVE-2015-1791 fix (broken server side renegotiation)

* Thu Jun 11 2015 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-50

- improved fix for CVE-2015-1791

- add missing parts of CVE-2015-0209 fix for corectness although unexploitable

* Tue Jun  9 2015 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-49

- fix CVE-2014-8176 - invalid free in DTLS buffering code

- fix CVE-2015-1789 - out-of-bounds read in X509_cmp_time

- fix CVE-2015-1790 - PKCS7 crash with missing EncryptedContent

- fix CVE-2015-1791 - race condition handling NewSessionTicket

- fix CVE-2015-1792 - CMS verify infinite loop with unknown hash function

* Wed Jun  3 2015 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-48

- fix CVE-2015-3216 - regression in RAND locking that can cause segfaults on

  read in multithreaded applications

* Mon May 25 2015 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-47

- fix CVE-2015-4000 - prevent the logjam attack on client - restrict

  the DH key size to at least 768 bits (limit will be increased in future)

* Wed Mar 25 2015 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-46

- drop the AES-GCM restriction of 2^32 operations because the IV is

  always 96 bits (32 bit fixed field + 64 bit invocation field)

* Thu Mar 19 2015 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-45

- update fix for CVE-2015-0287 to what was released upstream

* Wed Mar 18 2015 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-44

- fix CVE-2015-0209 - potential use after free in d2i_ECPrivateKey()

- fix CVE-2015-0286 - improper handling of ASN.1 boolean comparison

- fix CVE-2015-0287 - ASN.1 structure reuse decoding memory corruption

- fix CVE-2015-0288 - X509_to_X509_REQ NULL pointer dereference

- fix CVE-2015-0289 - NULL dereference decoding invalid PKCS#7 data

- fix CVE-2015-0292 - integer underflow in base64 decoder

- fix CVE-2015-0293 - triggerable assert in SSLv2 server

* Mon Mar 16 2015 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-43

- fix broken error detection when unwrapping unpadded key

* Mon Mar  2 2015 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-42.1

- fix the RFC 5649 for key material that does not need padding

* Thu Jan 15 2015 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-42

- test in the non-FIPS RSA keygen for minimal distance of p and q

  similarly to the FIPS RSA keygen

* Tue Jan 13 2015 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-41

- fix CVE-2014-3570 - incorrect computation in BN_sqr()

- fix CVE-2014-3571 - possible crash in dtls1_get_record()

- fix CVE-2014-3572 - possible downgrade of ECDH ciphersuite to non-PFS state

- fix CVE-2014-8275 - various certificate fingerprint issues

- fix CVE-2015-0204 - remove support for RSA ephemeral keys for non-export

  ciphersuites and on server

- fix CVE-2015-0205 - do not allow unauthenticated client DH certificate

- fix CVE-2015-0206 - possible memory leak when buffering DTLS records

* Tue Oct 21 2014 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-40

- use FIPS approved method for computation of d in RSA

- copy digest algorithm when handling SNI context switch

* Wed Oct 15 2014 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-39

- fix CVE-2014-3567 - memory leak when handling session tickets

- fix CVE-2014-3513 - memory leak in srtp support

- add support for fallback SCSV to partially mitigate CVE-2014-3566

  (padding attack on SSL3)

* Wed Sep 24 2014 Tomáš Mráz <tmraz@redhat.com> 1.0.1e-38