From cb528dcb025c58560ad45bde02391a4419e0d4d7 Mon Sep 17 00:00:00 2001 From: CentOS Sources Date: Jan 11 2022 18:32:50 +0000 Subject: import openssl-3.0.0-5.el9 --- diff --git a/SPECS/openssl.spec b/SPECS/openssl.spec index 2e7e317..a3b3246 100644 --- a/SPECS/openssl.spec +++ b/SPECS/openssl.spec @@ -15,7 +15,7 @@ Summary: Utilities from the general purpose cryptography library with TLS implementation Name: openssl Version: 3.0.0 -Release: 4%{?dist} +Release: 5%{?dist} Epoch: 1 # We have to remove certain patented algorithms from the openssl source # tarball with the hobble-openssl script which is included below. @@ -242,7 +242,6 @@ OPENSSL_SYSTEM_CIPHERS_OVERRIDE=xyz_nonexistent_file export OPENSSL_SYSTEM_CIPHERS_OVERRIDE #embed HMAC into fips provider for test run LD_LIBRARY_PATH=. apps/openssl dgst -binary -sha256 -mac HMAC -macopt hexkey:f4556650ac31d35461610bac4ed81b1a181b2d8a43ea2854cbae22ca74560813 < providers/fips.so > providers/fips.so.hmac -cp providers/fips.so providers/fips.so.orig objcopy --update-section .rodata1=providers/fips.so.hmac providers/fips.so providers/fips.so.mac mv providers/fips.so.mac providers/fips.so #run tests itself @@ -256,7 +255,6 @@ make test HARNESS_JOBS=8 %{__arch_install_post} \ %{__os_install_post} \ LD_LIBRARY_PATH=. apps/openssl dgst -binary -sha256 -mac HMAC -macopt hexkey:f4556650ac31d35461610bac4ed81b1a181b2d8a43ea2854cbae22ca74560813 < $RPM_BUILD_ROOT%{_libdir}/ossl-modules/fips.so > $RPM_BUILD_ROOT%{_libdir}/ossl-modules/fips.so.hmac \ - cp $RPM_BUILD_ROOT%{_libdir}/ossl-modules/fips.so $RPM_BUILD_ROOT%{_libdir}/ossl-modules/fips.so.orig \ objcopy --update-section .rodata1=$RPM_BUILD_ROOT%{_libdir}/ossl-modules/fips.so.hmac $RPM_BUILD_ROOT%{_libdir}/ossl-modules/fips.so $RPM_BUILD_ROOT%{_libdir}/ossl-modules/fips.so.mac \ mv $RPM_BUILD_ROOT%{_libdir}/ossl-modules/fips.so.mac $RPM_BUILD_ROOT%{_libdir}/ossl-modules/fips.so \ rm $RPM_BUILD_ROOT%{_libdir}/ossl-modules/fips.so.hmac \ @@ -400,9 +398,14 @@ install -m644 %{SOURCE9} \ %ldconfig_scriptlets libs %changelog +* Wed Nov 24 2021 Dmitry Belyavskiy - 1:3.0.0-5 +- rebuilt for spec cleanup +- Related: rhbz#1985362 + * Thu Nov 18 2021 Dmitry Belyavskiy - 1:3.0.0-4 - Embed FIPS HMAC in fips.so - Enforce loading FIPS provider when FIPS kernel flag is on +- Related: rhbz#1985362 * Thu Oct 07 2021 Dmitry Belyavskiy - 1:3.0.0-3 - Fix memory leak in s_client