Sync from SUSE:SLFO:Main go1.23-openssl revision 82c9c18d62da8bb20ba0aa7b78a30e77

go1.23-openssl.changes

@@ -1,3 +1,24 @@
+-------------------------------------------------------------------
+Tue Dec 10 02:49:26 UTC 2024 - Jeff Kowalczyk <jkowalczyk@suse.com>
+
+- Write three digit version to file VERSION which sets go env
+  GOVERSION. Fixes bsc#1233306.
+  * Go toolchain file VERSION sets the immutable value for
+    go env GOVERSION
+  * go1.x-openssl toolchains have used a bespoke fourth digit to
+    represent the upstream patch set release number,
+    e.g. go1.22.9-1-openssl-fips. This digit has not been needed.
+  * Some Go applications including helm break when this fourth
+    digit is present in VERSION, with error:
+    go.mod requires go >= 1.22.0 (running go 1.22; GOTOOLCHAIN=local)
+  * Keep the fourth digit in the packaging for now, it will be
+    dropped in the next toolchain version update.
+
+-------------------------------------------------------------------
+Thu Dec  5 08:01:10 UTC 2024 - Adrian Schröter <adrian@suse.de>
+
+- Enable loongarch64 builds
+
 -------------------------------------------------------------------
 Wed Oct  2 21:04:36 UTC 2024 - Jeff Kowalczyk <jkowalczyk@suse.com>
 

go1.23-openssl.spec

@@ -126,7 +126,7 @@ Version:        1.23.2.2
 # Drop our added final dot and digit to define upstream version
 %define shortversion 1.23.2
 Release:        0
-Summary:        A compiled, garbage-collected, concurrent programming language
+Summary:        Go compiler with dynamic linkage to OpenSSL libcrypto for use in FIPS mode
 License:        BSD-3-Clause
 Group:          Development/Languages/Go
 URL:            https://go.dev/
@@ -172,7 +172,7 @@ Obsoletes:      go-devel < go%{version}
 # go-vim/emacs were separate projects starting from 1.4
 Obsoletes:      go-emacs <= 1.3.3
 Obsoletes:      go-vim <= 1.3.3
-ExclusiveArch:  %ix86 x86_64 %arm aarch64 ppc64 ppc64le s390x riscv64
+ExclusiveArch:  %ix86 x86_64 %arm aarch64 ppc64 ppc64le s390x riscv64 loongarch64
 
 %description
 Go is an expressive, concurrent, garbage collected systems programming language
@@ -181,6 +181,13 @@ Go has fast builds, clean syntax, garbage collection, methods for any type, and
 run-time reflection. It feels like a dynamic language but has the speed and
 safety of a static language.
 
+This is a modified version of the Go compiler and tools. When the host is in
+FIPS mode, the Go standard library crypto packages use a new openssl backend
+which dynamically links to the OpenSSL libcrypto .so.
+
+The OpenSSL functionality is a modification of the Go upstream experimental
+support for boringcrypto as dynamically linked crypto backend.
+
 %package doc
 Summary:        Go documentation
 Group:          Documentation/Other
@@ -214,7 +221,7 @@ Go runtime race detector libraries. Install this package if you wish to use the
 %setup -q -n go
 # Write go version into VERSION file in go source top level directory.
 # Needed for go build scripts to operate without assuming .git/ present.
-echo -n "go%{version}" > %{_builddir}/go/VERSION
+echo -n "go%{shortversion}" > %{_builddir}/go/VERSION
 %patch -P 7 -p1
 %if %{with gccgo}
 # Currently gcc-go does not manage an update-alternatives entry and will