forked from pool/Botan
Dirk Mueller
5960f3cfdc
Fix a bug where the name constraint extension did not constrain the alternative DN field which can be included in a subject alternative name. This would allow a corrupted sub-CA which was otherwise constrained by a name constraint to issue a certificate with a prohibited DN. Fix a bug in the TLS server during client authentication where where if a (disabled by default) static RSA ciphersuite was selected, then no certificate request would be sent. This would have an equivalent effect to a client which simply replied with an empty Certificate message. (GH #2367) Replace the T-Tables implementation of AES with a 32-bit bitsliced version. As a result AES is now constant time on all processors. (GH #2346 #2348 #2353 #2329 #2355) In TLS, enforce that the key usage given in the server certificate allows the operation being performed in the ciphersuite. (GH #2367) In X.509 certificates, verify that the algorithm parameters are the expected NULL or empty. (GH #2367) Change the HMAC key schedule to attempt to reduce the information leaked from the key schedule with regards to the length of the key, as this is at times (as for example in PBKDF2) sensitive information. (GH #2362) Add Processor_RNG which wraps RDRAND or the POWER DARN RNG instructions. The previous RDRAND_RNG interface is deprecated. (GH #2352) The documentation claimed that mlocked pages were created with a guard page both before and after. However only a trailing guard page was used. Add a leading guard page. (GH #2334) Add support for generating and verifying DER-encoded ECDSA signatures in the C and Python interfaces. (GH #2357 #2356) Workaround a bug in GCC’s UbSan which triggered on a code sequence in XMSS (GH #2322) When building documentation using Sphinx avoid parallel builds with version 3.0 due to a bug in that version (GH #2326 #2324) OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/Botan?expand=0&rev=94
144 lines
4.1 KiB
RPMSpec
144 lines
4.1 KiB
RPMSpec
#
|
|
# spec file for package Botan
|
|
#
|
|
# Copyright (c) 2020 SUSE LLC
|
|
#
|
|
# All modifications and additions to the file contributed by third parties
|
|
# remain the property of their copyright owners, unless otherwise agreed
|
|
# upon. The license for this file, and modifications and additions to the
|
|
# file, is the same license as for the pristine package itself (unless the
|
|
# license for the pristine package is not an Open Source License, in which
|
|
# case the license is the MIT License). An "Open Source License" is a
|
|
# license that conforms to the Open Source Definition (Version 1.9)
|
|
# published by the Open Source Initiative.
|
|
|
|
# Please submit bugfixes or comments via https://bugs.opensuse.org/
|
|
#
|
|
|
|
|
|
%define version_suffix 2-15
|
|
%define short_version 2
|
|
Name: Botan
|
|
Version: 2.15.0
|
|
Release: 0
|
|
Summary: A C++ Crypto Library
|
|
License: BSD-2-Clause
|
|
Group: Development/Libraries/C and C++
|
|
URL: http://botan.randombit.net
|
|
Source0: http://botan.randombit.net/releases/Botan-%{version}.tar.xz
|
|
Source1: http://botan.randombit.net/releases/Botan-%{version}.tar.xz.asc
|
|
Source2: %{name}.keyring
|
|
Source3: baselibs.conf
|
|
BuildRequires: bzip2 >= 1.0.2
|
|
BuildRequires: gcc-c++
|
|
# FIXME: is this dependency correct?
|
|
BuildRequires: gmp-devel >= 4.1
|
|
#Requires: gmp >= 4.1
|
|
BuildRequires: libbz2-devel
|
|
BuildRequires: openssl-devel
|
|
BuildRequires: pkgconfig
|
|
BuildRequires: python3
|
|
BuildRequires: zlib-devel
|
|
|
|
%description
|
|
Botan is a C++ library that provides support for many common
|
|
cryptographic operations, including encryption, authentication, and
|
|
X.509v3 certificates and CRLs. A wide variety of algorithms is
|
|
supported, including RSA, DSA, DES, AES, MD5, and SHA-1.
|
|
|
|
%package -n libbotan-%{version_suffix}
|
|
Summary: A C++ Crypto Library
|
|
Group: System/Libraries
|
|
|
|
%description -n libbotan-%{version_suffix}
|
|
Botan is a C++ library that provides support for many common
|
|
cryptographic operations, including encryption, authentication, and
|
|
X.509v3 certificates and CRLs. A wide variety of algorithms is
|
|
supported, including RSA, DSA, DES, AES, MD5, and SHA-1.
|
|
|
|
%package -n libbotan-devel
|
|
Summary: Development files for Botan
|
|
Group: Development/Libraries/C and C++
|
|
Requires: libbotan-%{version_suffix} = %{version}
|
|
Requires: libbz2-devel
|
|
Provides: Botan-devel = %{version}
|
|
Obsoletes: Botan-devel < %{version}
|
|
|
|
%description -n libbotan-devel
|
|
This package contains the header files and libraries needed to develop
|
|
programs that use the Botan library.
|
|
|
|
%package -n python3-botan
|
|
Summary: Botan python bindings
|
|
Group: Development/Languages/Python
|
|
Requires: python3
|
|
|
|
%description -n python3-botan
|
|
This package contains the python bindings to libbotan's C98 interface.
|
|
|
|
%package doc
|
|
%define botan_docdir %{_docdir}/botan-%{version}
|
|
Summary: Documentation of Botan
|
|
Group: Development/Libraries/C and C++
|
|
BuildArch: noarch
|
|
|
|
%description doc
|
|
Documentation of Botan package.
|
|
|
|
%prep
|
|
%setup -q -n Botan-%{version}
|
|
|
|
%build
|
|
%define _lto_cflags %{nil}
|
|
export RPM_OPT_FLAGS
|
|
python3 ./configure.py \
|
|
--prefix=%{_prefix} \
|
|
--bindir=%{_bindir} \
|
|
--libdir=%{_libdir} \
|
|
--docdir=%{_defaultdocdir} \
|
|
--includedir=%{_includedir} \
|
|
--with-bzip2 \
|
|
--with-zlib \
|
|
--with-openssl \
|
|
%ifarch %ix86
|
|
--cpu=x86_32
|
|
%else
|
|
%ifarch %{arm}
|
|
--cpu=arm
|
|
%else
|
|
--cpu=%{_target_cpu}
|
|
%endif
|
|
%endif
|
|
|
|
make %{?_smp_mflags} WARN_FLAGS="%{optflags}"
|
|
|
|
%install
|
|
sed -i 's/env python/env python3/' src/scripts/install.py
|
|
%make_install
|
|
rm -f %{buildroot}/%{_libdir}/libbotan*.a
|
|
chmod +x %{buildroot}%{python3_sitearch}/botan2.py
|
|
sed -i '1s@^#!/.*@#!%{_bindir}/python3@' %{buildroot}%{python3_sitearch}/botan2.py
|
|
|
|
%post -n libbotan-%{version_suffix} -p /sbin/ldconfig
|
|
%postun -n libbotan-%{version_suffix} -p /sbin/ldconfig
|
|
|
|
%files
|
|
%{_bindir}/botan
|
|
|
|
%files doc
|
|
%docdir %{botan_docdir}
|
|
%{botan_docdir}
|
|
|
|
%files -n libbotan-%{version_suffix}
|
|
%{_libdir}/libbotan-%{short_version}.so.*
|
|
|
|
%files -n libbotan-devel
|
|
%{_libdir}/libbotan-%{short_version}.so
|
|
%{_libdir}/pkgconfig/botan-%{short_version}.pc
|
|
%{_includedir}/botan-%{short_version}
|
|
|
|
%files -n python3-botan
|
|
%{python3_sitearch}/botan2.py
|
|
|
|
%changelog
|