Add package in slfo-main

- Update to 1.19.0:
  * ngtcp2_log: Add missing error codes
  * ngtcp2_str: Remove redundant assignment
  * Update RTT when the largest packet number is acked
  * ngtcp2_qlog: Add const qualifier to vec_pkt_type*
  * bbr: Remove CWND reduction on congestion event
  * bbr: More backups for spurious losses
  * Add ngtcp2_vec_drop
  * Rewrite get_uvarint
  * Rework ngtcp2_frame union to avoid potential UB
  * ksl: Rework key storage to avoid struct hack
  * acktr: Refactor ACK creation function
  * ngtcp2_ksl: Remove alignment enforcement for keys
  * Bump urlparse
  * Refactor with compound literals
  * Add libngtcp2 to pkg-config Requires.private
  * Revise libngtcp2 include dir setup
  * Export CMake target for ngtcp2_crypto_ossl(_static) (forwarded request 1326938 from pmonrealgonzalez)

OBS-URL: https://build.opensuse.org/request/show/1326961
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ngtcp2?expand=0&rev=13

baselibs.conf

@@ -1,2 +1,3 @@
 libngtcp2-16
 libngtcp2_crypto_gnutls8
+libngtcp2_crypto_ossl0

ngtcp2-1.19.0.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:f11f7da5065f2298f8b5f079a11f1a6f72389271b8dedd893c8eb26aba94bce9
+size 686448

ngtcp2-1.19.0.tar.xz.asc

@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+
+iQIzBAABCgAdFiEEUWtiKRjRXEeKseo6UzmivoLgfewFAmlKbS4ACgkQUzmivoLg
+fezLAxAAv8SL5W5B74891GPK1M0ykGhshucboIE9ZiekxHjAIgHR+UBjr6eMWnrq
+7vmrevqFBIkcqcBt8hPBwRBTCb7Ip/oLFlhPtDPbO/J/AFBy3WsIoaQB/LF6cDeD
+2c2KHhCYljW9Z6VP6qZZB6jwe87GHR4LAGS0p2SfdL3vk9pUo0H3Tgr7cNRosPRh
+pk4xELRK2RCzE+L7mfnq9xYDW2NNOkt2iIIxfxBcAx79cSwv7sx8oaoP7967BFXK
+QyJBhB4Ib/CUr2yqpDMoJENkqMAv9kRa1EuC1O7Klbdlc2dAoZB+7qmRBNCHzZAa
+pZymFTtsUP7Q+ELypYGzNbAngj1bZ6PwMuGK1BcYYugbiabhfP2qDvYU3dSbMIYz
+XCEYdqUaAzHKI8mJtioIe6N/Mjl3N5nN9E3Nm8iMyoI3wJqn6p3LTczewo0y/rCz
+ImuYzq773XXF6nzbnC+zu7vyrDqiVE/YwlAcWjXp4aD+6auxSj4Cdka82m7G45zi
+CYp6GbTMhRdJVgePAqGlQ2EwzWyVPst5SYi26Trw1bgoXbWVrnzrrz3RCrjB5cMc
+h3c5bpllIJy8IxIUG923EIhJhjzxR0N7U4f9T+cIjJheLLydv0Cx8iWcbB8IuPlJ
+2R+r03GQoaRjYwgPM4PG3VxG8oHcWngB6f53leZUl9843AwIkjM=
+=6D3w
+-----END PGP SIGNATURE-----

ngtcp2-1.6.0.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:2e575a42d369c2c982a1117f062ff9743fa07f87738ac5cedb304aa72260023a
-size 623300

ngtcp2-1.6.0.tar.xz.asc

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEEUWtiKRjRXEeKseo6UzmivoLgfewFAmZqwekACgkQUzmivoLg
-fewteg/+MY7gflwoK6KnVMoZ8MkrZHVpkk2YLjC7+Oqo8bihtp11ZubOX1zYYP3o
-0fSnDlTy8h0k29Sf7/uGRP4aCDl7HT8t2usQnc4kkGgU1l2dr9WPEa7XFnDgqZOD
-4yd7qReH7ekg/xYKbUyS3NPwpueBRDlvEtG+0fKEY7YNlE6Yl9DAMGMP+MKvJOwb
-vk3cedIa5b69+tImQpZRE++NadQumCLa3CSupK0c8rhp41IMgHJePQc9VdCnHf2U
-f576IGe1NnUHdIuzUSb5lFmsWXrfvl4BmINX/VhMD6yWzHFymQqBXkSMbanmswBY
-wTGtPypBKdG4IZwLrHZk9Llib95W+HU7LMgcqgsExZyZ/aCD8q060i6J3ukSIj7r
-/MlRffy0Ps1RLWr3c3bHLymOZ6eTMvSUnbPExAC6if49I0dTiJY4NRrVl/35zlEP
-9w9PF3bTUizcNpKCExon7mV0BTgLQpCzGq45Wg8GyPkt8lrS2X/cLZHMX2VGgS3U
-2Ebo6U6VLFRqSSJftmDQWBqenZcGD8V+/oUXyIn/YCR6Rmy3DHv7L/dehflVFc15
-pxul8qQPfO3NxNpWSfmHPjdf+bjOmUXao6TPJKkWaH5v1BM9RLel3A7w1fPs5Dco
-UAFtkIsJLZZGi2EexjN2GHB73DxI/TwejVwhKSQriG4hg6XtT/c=
-=9qDA
------END PGP SIGNATURE-----

ngtcp2.changes

@@ -1,3 +1,333 @@
+-------------------------------------------------------------------
+Tue Jan 13 10:19:26 UTC 2026 - Pedro Monreal <pmonreal@suse.com>
+
+- Update to 1.19.0:
+  * ngtcp2_log: Add missing error codes
+  * ngtcp2_str: Remove redundant assignment
+  * Update RTT when the largest packet number is acked
+  * ngtcp2_qlog: Add const qualifier to vec_pkt_type*
+  * bbr: Remove CWND reduction on congestion event
+  * bbr: More backups for spurious losses
+  * Add ngtcp2_vec_drop
+  * Rewrite get_uvarint
+  * Rework ngtcp2_frame union to avoid potential UB
+  * ksl: Rework key storage to avoid struct hack
+  * acktr: Refactor ACK creation function
+  * ngtcp2_ksl: Remove alignment enforcement for keys
+  * Bump urlparse
+  * Refactor with compound literals
+  * Add libngtcp2 to pkg-config Requires.private
+  * Revise libngtcp2 include dir setup
+  * Export CMake target for ngtcp2_crypto_ossl(_static)
+
+-------------------------------------------------------------------
+Tue Dec 16 10:33:33 UTC 2025 - Pedro Monreal <pmonreal@suse.com>
+
+- Update to 1.18.0:
+  * Assume payload is not empty when decoding a QUIC frame
+  * Fix a memory leak on Retry
+  * Rename ngtcp2_encode_hex to ngtcp2_encode_hex_cstr
+  * Fix a potential double free
+  * Delete unusable initial rx key on if tx key installation fails
+  * crypto: Allow an application to store opaque data for a regular
+    token
+  * crypto: Fix memcpy runtime error: null pointer passed as
+    argument 1
+  * Raise glitch counter initial limits
+  * Set ngtcp2_conn to NULL if its initialization fails
+  * Fix the bug that Initial packet is not padded
+  * Try padding even if the current packet size >= 1200
+  * Increase stream data fragmentation limit
+
+-------------------------------------------------------------------
+Thu Oct 23 09:39:52 UTC 2025 - Pedro Monreal <pmonreal@suse.com>
+
+- Update to 1.17.0:
+  * Remove redundant casts by @tatsuhiro-t in #1798
+  * Revert #1798 partially by @tatsuhiro-t in #1799
+  * examples: Use std::ranges::begin and std::ranges::end
+    consistently by @tatsuhiro-t in #1800
+  * Initial packets padding with no_tx_udp_payload_size_shaping by
+    @tatsuhiro-t in #1801
+  * Remove redundant semicolon by @tatsuhiro-t in #1802
+  * Make ngtcp2_stream.fin of type int by @tatsuhiro-t in #1803
+  * Fix typos in documentation and comments by @Copilot in #1804
+  * Update bbr by @tatsuhiro-t in #1807
+  * examples: Limit tx buffer for non-GSO case by @tatsuhiro-t in #1812
+  * cubic: Compute remainder of "acked_bytes" without modulo by
+    @tatsuhiro-t in #1813
+  * Replace POPCNT-based ispow2 with portable bitwise implementation to
+    prevent illegal instruction crashes by @mk185147 in #1811
+  * Reduce NGTCP2_HARD_MAX_UDP_PAYLOAD_SIZE to 64k by @tatsuhiro-t in #1814
+  * Bump openssl to v3.6.0 by @tatsuhiro-t in #1815
+  * bbr: Avoid modifying ngtcp2_rs on packet loss by @tatsuhiro-t in #1816
+  * Always call CC on_ack_recv by @tatsuhiro-t in #1817
+  * Revert "examples: Limit tx buffer for non-GSO case" by @tatsuhiro-t in #1818
+  * Make sure that CC on_ack_recv when ACK is received by @tatsuhiro-t in #1820
+  * Use solely cc_ack.largest_pkt_sent_ts and remove largest_pkt_sent_ts by
+    @tatsuhiro-t in #1821
+  * Pass ngtcp2_cc_ack to CC on_congestion_event by @tatsuhiro-t in #1822
+  * Remove unused ngtcp2_cc_ack.prior_bytes_in_flight by @tatsuhiro-t in #1823
+  * Add ngtcp2_conn_write_aggregate_pkt2 by @tatsuhiro-t in #1824
+  * examples: Add gso-burst option by @tatsuhiro-t in #1825
+  * Add ngtcp2_conn_get_stream_user_data by @tatsuhiro-t in #1828
+  * cc: Compute pacing interval and send_quantum by @tatsuhiro-t in #1829
+  * bbr: Clamp initial pacing interval by @tatsuhiro-t in #1830
+  * More app controllable ngtcp2_conn_write_aggregate_pkt2 by @tatsuhiro-t in #1831
+  * Deprecate NGTCP2_MAX_PMTUD_UDP_PAYLOAD_SIZE by @tatsuhiro-t in #1832
+  * Add NGTCP2_MAX_TX_UDP_PAYLOAD_SIZE macro by @tatsuhiro-t in #1833
+  * Clarify NGTCP2_MAX_UDP_PAYLOAD_SIZE by @tatsuhiro-t in #1834
+  * cc: Increase minimum send_quantum to 10 by @tatsuhiro-t in #1835
+  * examples: Increase number of packets to read by @tatsuhiro-t in #1836
+  * build(deps): bump github/codeql-action from 3 to 4 by @dependabot[bot] in #1837
+  * Server optimize write by @tatsuhiro-t in #1838
+  * Relax the timer handling by @tatsuhiro-t in #1840
+  * Bump LibreSSL to 4.2.0 by @nak3 in #1839
+  * Bump boringssl by @tatsuhiro-t in #1841
+  * Bump aws-lc to v1.62.0 by @tatsuhiro-t in #1842
+  * Relax the timer handling further by @tatsuhiro-t in #1843
+
+-------------------------------------------------------------------
+Sat Oct 11 00:48:35 UTC 2025 - Marcus Rueckert <mrueckert@suse.de>
+
+- configure looks for a std=20 compiler on 15.6. Force a newer GCC
+  to satisfy that requirement.
+
+-------------------------------------------------------------------
+Fri Oct 10 23:49:35 UTC 2025 - Marcus Rueckert <mrueckert@suse.de>
+
+- Update to 1.16.0:
+  - build: install crypto header for libressl by @vszakats in #1752
+  - doc: Add "Aggregate packets for GSO" section by @tatsuhiro-t in
+    #1753
+  - examples: Adopt std::make_unique_for_overwrite by @tatsuhiro-t
+    in #1754
+  - GHA: Reduce distcheck tests to 1 by @tatsuhiro-t in #1755
+  - build(deps): bump actions/checkout from 4 to 5 by
+    @dependabot[bot] in #1756
+  - GHA: Set permissions for quic-interop-runner by @tatsuhiro-t in
+    #1757
+  - Add stats for sent, received, and lost QUIC packets and bytes
+    by @tatsuhiro-t in #1758
+  - Export packet stats to ngtcp2_conn_info by @tatsuhiro-t in
+    #1759
+  - ngtcp2_log: Do not format string by @tatsuhiro-t in #1760
+  - Fix format specifier by @tatsuhiro-t in #1761
+  - ngtcp2_log: Remove stray spaces by @tatsuhiro-t in #1762
+  - Remove unused NGTCP2_MAX_RETRIES macro by @tatsuhiro-t in #1764
+  - More use of designated initializers and compound literals by
+    @tatsuhiro-t in #1765
+  - ngtcp2_qlog: Pass an empty string by @tatsuhiro-t in #1766
+  - examples: constexpr fixup by @tatsuhiro-t in #1767
+  - ngtcp2_ratelim: Deal with overflow by @tatsuhiro-t in #1770
+  - build(deps): bump actions/setup-python from 5 to 6 by
+    @dependabot[bot] in #1771
+  - build(deps): bump actions/stale from 9 to 10 by
+    @dependabot[bot] in #1772
+  - build(deps): bump actions/github-script from 7 to 8 by
+    @dependabot[bot] in #1773
+  - examples: Simplify close callbacks by @tatsuhiro-t in #1776
+  - examples: Adopt std::unordered_map::contains by @tatsuhiro-t in
+    #1777
+  - Add ngtcp2_conn_get_timestamp by @tatsuhiro-t in #1778
+  - cmake: do not require C++ for lib-only builds by @vszakats in
+    #1779
+  - Add ngtcp2_conn_info.ping_recv by @tatsuhiro-t in #1781
+  - Add ngtcp2_conn_info.pkt_discarded by @tatsuhiro-t in #1782
+  - examples: Adopt nghttp3_conn_read_stream2 by @tatsuhiro-t in
+    #1783
+  - examples: Add --no-gso option by @tatsuhiro-t in #1784
+  - ngtcp2_conn_get_timestamp: Add const qualifier to conn by
+    @tatsuhiro-t in #1785
+  - Examples add show stat by @tatsuhiro-t in #1786
+  - examples: Fix help doc by @tatsuhiro-t in #1787
+  - configure.ac: allow picotls without ossl by @CL-Jeremy in #1789
+  - Bump OpenSSL to v3.5.3 by @tatsuhiro-t in #1790
+  - Bump boringssl by @tatsuhiro-t in #1791
+  - Bump aws-lc to v1.61.2 by @tatsuhiro-t in #1792
+  - Bump picotls by @tatsuhiro-t in #1793
+  - examples: Use nullptr in C++ code by @tatsuhiro-t in #1794
+  - Fix macro comment by @tatsuhiro-t in #1795
+- changes from 1.15.1
+  - build: install crypto header for libressl by @vszakats in #1752
+- changes from 1.15.0
+  - Use Requires.private because it is needed for static linking by
+    @tatsuhiro-t in #1721
+  - Use fallback_path consistently by @tatsuhiro-t in #1722
+  - examples: Share get_string for urlparse_url.field_data by
+    @tatsuhiro-t in #1723
+  - examples: Fix Connection ID validation by @tatsuhiro-t in #1724
+  - build: use distinct crypto library name for LibreSSL by
+    @vszakats in #1716
+  - Fix libressl doc and clarify its include file by @tatsuhiro-t
+    in #1726
+  - Aggregate pkts for gso by @tatsuhiro-t in #1727
+  - GHA: Exclude macos-15 cmake due to the include path issue by
+    @tatsuhiro-t in #1729
+  - Pcg by @tatsuhiro-t in #1730
+  - Chaos protection by @tatsuhiro-t in #1728
+  - Rename ngtcp2_conn_aggregate_pkts to
+    ngtcp2_conn_write_aggregate_pkt by @tatsuhiro-t in #1732
+  - ngtcp2_conn_write_aggregate_pkt: Remove max_num_pkts parameter
+    by @tatsuhiro-t in #1733
+  - build(deps): bump actions/download-artifact from 4 to 5 by
+    @dependabot[bot] in #1734
+  - Glitch by @tatsuhiro-t in #1735
+  - Apply glitch limits to RESET_STREAM, STOP_SENDING,
+    MAX_STREAM_DATA by @tatsuhiro-t in #1736
+  - Make glitch rate limiter configurable by @tatsuhiro-t in #1737
+  - doc: Fix field markup by @tatsuhiro-t in #1738
+  - Bump OpenSSL to v3.5.2 by @tatsuhiro-t in #1739
+  - Bump aws-lc to v1.58.1 by @tatsuhiro-t in #1740
+  - Bump boringssl by @tatsuhiro-t in #1741
+  - Bump clang to 19 by @tatsuhiro-t in #1742
+  - Fix skipping packet number by @tatsuhiro-t in #1743
+  - Fix libngtcp2_crypto_ossl.so versioning on CMake by @krant in
+    #1744
+  - doc: Clarify that dest, destlen, and ts should be passed too by
+    @tatsuhiro-t in #1745
+  - Fix initial CRYPTO crumbling by @tatsuhiro-t in #1746
+  - Break when buffer size is smaller than path max MTU by
+    @tatsuhiro-t in #1747
+  - tests: Add min buf test for ngtcp2_conn_write_aggregate_pkt by
+    @tatsuhiro-t in #1748
+  - Bump clang-format to 19 by @tatsuhiro-t
+
+-------------------------------------------------------------------
+Wed Jul 30 06:48:20 UTC 2025 - Pedro Monreal <pmonreal@suse.com>
+
+- Split the devel package into the gnutls and openssl parts.
+  These packages are now called libngtcp2_crypto_gnutls-devel
+  and libngtcp2_crypto_ossl-devel.
+
+-------------------------------------------------------------------
+Tue Jul 29 11:40:05 UTC 2025 - Pedro Monreal <pmonreal@suse.com>
+
+- Update to 1.14.0:
+  * Add util::system_clock_now
+  * Make read_pem return std::vector<uint8_t>
+  * Refactor cubic
+  * Add ngtcp2_begin_path_validation callback
+  * ngtcp2_map: Hash key
+  * Update BBR to the current draft and simplify code
+  * Map seed
+  * ngtcp2_map: Change load factor to 7/8
+  * Fix pc files for static linkage
+  * Build with the latest nghttp3
+  * Assert that fin is set or datalen > 0
+  * Return error if too many STREAM frames are accumulated for resend
+  * Set minimum STREAM data size when serializing into a packet
+  * Avoid memset for 1-RTT ngtcp2_pktns
+  * lib: Compound Literals
+  * Bump OpenSSL to v3.5.1
+  * Run quic-interop-runner
+  * quic-interop-runner: Enhance log reduction
+  * quic-interop-runner: Add workflow_dispatch inputs
+  * Require nghttp3 >= v1.11.0
+
+-------------------------------------------------------------------
+Mon Jun 23 05:53:05 UTC 2025 - Dirk Müller <dmueller@suse.com>
+
+- update to 1.13.0:
+  * Update CMakeLists.txt to fix the error of
+    check_symbol_exists() when static-link openssl.
+  * Fix path response padding
+  * Make a packet containing PATH_RESPONSE to active path non-
+    probing
+  * Make pacing less bursty
+  * Add extra precision to pacing_interval
+  * Refactor cubic
+  * cubic: Bound time_delta
+  * Make as_uint8_span consteval
+  * Avoid slower std::ranges::mismatch
+  * putting important libdir and incdir first
+
+-------------------------------------------------------------------
+Sun Jun 22 19:29:00 UTC 2025 - Jan Engelhardt <jengelh@inai.de>
+
+- Trim idempotent if..endif guards
+- Delete metadata for unproduced ngtcp2-doc subpackage
+
+-------------------------------------------------------------------
+Sun Jun 22 14:09:39 UTC 2025 - Georg Pfuetzenreuter <mail+rpm@georg-pfuetzenreuter.net>
+
+- Additionally build OpenSSL backend and ship it in optional subpackage
+
+-------------------------------------------------------------------
+Thu Apr 17 20:23:14 UTC 2025 - Jan Engelhardt <jengelh@inai.de>
+
+- Update to release 1.12.0
+  * Avoid limiting CWND during path validation.
+  * Avoid PMTUD if it is disabled by configuration.
+- Use SRPM name as a base for -devel subpackage.
+
+-------------------------------------------------------------------
+Sat Feb  8 21:23:45 UTC 2025 - Dirk Müller <dmueller@suse.com>
+
+- update to 1.10.0:
+  * Rename NGTCP2_INITIAL_TABLE_LENBITS to
+    NGTCP2_INITIAL_HASHBITS
+  * Do not extend app-limited period
+  * Fuzz sequences of different received packets
+  * Fuzz timestamp in read_write_pkt fuzzer
+  * Exercise all CC algorithms in read_write_pkt fuzzer
+  * Exercise client in read_write_pkt fuzzer
+  * Fix assertion error when retransmitting 0 length STREAM
+  * Fuzz remote transport params in read_write_pkt fuzzer
+  * Update ksl fuzzer with FuzzedDataProvider
+  * Remove outdated PMTUD probe packet handling when it is lost
+  * Add ngtcp2_rob fuzzer
+- update to 1.9.1:
+  * Fixes CVE-2024-52811
+- update to 1.9.0:
+  * ringbuf: silence superfluous unused function warning on
+    NDEBUG builds
+  * Use REQUIRED when finding a package
+  * Remove extra semicolons
+  * examples: GRO buffer size should be 64KiB
+  * Limit the number of ACK frames per packet
+  * Nothing to acknowledge in a 0RTT packet
+  * Introduce ngtcp2_ksl_search
+  * Update doc
+  * Loosen app-limited condition
+  * Tweak threshold for max_stream_data and max_data transmission
+  * Add note for window auto-tuning
+  * examples/client: Disable window auto-tuning by default
+  * ngtcp2_ksl: Use proper type
+  * Retry token validation with more detailed error reporting
+  * examples: Call getnameinfo only when logging is required
+  * Replace http_parser_parse_url with urlparse
+- update to 1.8.1:
+  * Fix connection stall due to cwnd limited
+- update to 1.8.0:
+  * ngtcp2_cid: Update doc and style
+  * Add const qualifier
+  * ngtcp2_pkt_decode_hd_long: Do not touch dest on error
+  * ngtcp2_pkt_decode_ack_frame: Remove useless initialization
+  * Change clang-format options
+  * Fixing cmake export
+  * Rtb on pkt lost
+  * Rtb refactor
+  * Crypto refactor
+  * ngtcp2_pkt_encode_ack_frame: Make fr const and fix doc
+  * ngtcp2_ppe: Update style
+  * Remove unused NGTCP2_MAX_RX_(INITIAL|HANDSHAKE)_CRYPTO_DATA
+  * ngtcp2_map: Fix hash computation
+  * ngtcp2_map: Rename tablelenbits to hashbits
+  * Map refactor
+  * CUBIC RFC 9438
+  * Amend CUBIC
+  * Hystart++ RFC 9406
+- update to 1.7.0:
+  * Cleanup end of macro comments and clang-format
+  * GHA: Remove EXTRA_LDFLAGS
+  * Bump docker/build-push-action from 5 to 6
+  * Add ngtcp2_tpe, testing packet encoder
+  * Refactor packet writer functions for testing
+  * ngtcp2_gaptr: Cleanup doc and style
+  * ngtcp2_idtr: Clean doc and fix wrong assertions
+  * Added options to command find_package
+
 -------------------------------------------------------------------
 Mon Jul  1 22:03:43 UTC 2024 - Michal Hrusecky <michal.hrusecky@opensuse.org>
 

ngtcp2.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package ngtcp2
 #
-# Copyright (c) 2024 SUSE LLC
+# Copyright (c) 2026 SUSE LLC and contributors
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -16,12 +16,25 @@
 #
 
 
+%if 0%{?suse_version} && 0%{?suse_version} < 1600
+%global force_gcc_version 14
+%endif
+
 %global soname  libngtcp2
 %global sover   16
-%global gnutls_soname libngtcp2_crypto_gnutls
+%global gnutls_soname %{soname}_crypto_gnutls
 %global gnutls_sover 8
+%global openssl_soname %{soname}_crypto_ossl
+%global openssl_sover 0
+%if 0%{?suse_version} > 1600
+%bcond_without openssl
+%else
+# requires OpenSSL 3.x with QUIC support
+%bcond_with openssl
+%endif
+
 Name:           ngtcp2
-Version:        1.6.0
+Version:        1.19.0
 Release:        0
 Summary:        Implementation of the IETF QUIC protocol
 License:        MIT
@@ -31,65 +44,101 @@ Source0:        https://github.com/ngtcp2/ngtcp2/releases/download/v%{version}/n
 Source1:        https://github.com/ngtcp2/ngtcp2/releases/download/v%{version}/ngtcp2-%{version}.tar.xz.asc
 Source2:        ngtcp2.keyring
 Source3:        baselibs.conf
-BuildRequires:  gcc-c++
+BuildRequires:  gcc%{?force_gcc_version}-c++
 BuildRequires:  pkgconfig
 BuildRequires:  python-rpm-macros
 BuildRequires:  pkgconfig(gnutls) >= 3
-BuildRequires:  pkgconfig(libnghttp3) >= 1.0.0
+BuildRequires:  pkgconfig(libnghttp3) >= 1.12.0
+%if %{with openssl}
+BuildRequires:  pkgconfig(openssl)
+%endif
 
 %description
-ngtcp2 is an effort to implement RFC9000 QUIC protocol.
+ngtcp2 is an implementation of the QUIC protocol (RFC 9000)
+with a C library API.
 
 %package -n %{soname}-%{sover}
-Summary:        Shared library for ngtcp2
+Summary:        Implementation of the IETF QUIC protocol
 Group:          System/Libraries
 
 %description -n %{soname}-%{sover}
-Shared C libraries for implementation of QUIC Protocol
+ngtcp2 is an implementation of the QUIC protocol (RFC 9000)
+with a C library API.
 
 %package -n %{gnutls_soname}%{gnutls_sover}
-Summary:        Shared library for ngtcp2 - GNUTLS backend
+Summary:        The ngtcp2 crypto API with GNUTLS as a backend
 Group:          System/Libraries
 
 %description -n %{gnutls_soname}%{gnutls_sover}
-Shared C libraries for implementation of QUIC Protocol - GNUTLS backend
+ngtcp2 is an implementation of the QUIC protocol (RFC 9000).
+This package contains the crypto API of ngtcp2, which was built using
+GNUTLS as the cryptographic provider.
+
+%package -n %{openssl_soname}%{openssl_sover}
+Summary:        The ngtcp2 crypto API with OpenSSL as a backend
+Group:          System/Libraries
+
+%description -n %{openssl_soname}%{openssl_sover}
+ngtcp2 is an implementation of the QUIC protocol (RFC 9000).
+This package contains the crypto API of ngtcp2, which was built using
+OpenSSL as the cryptographic provider.
 
 %package -n python3-ngtcp2
 Summary:        Python3 bindings for ngtcp2
 Group:          Development/Libraries/Python
 
 %description -n python3-ngtcp2
-Python bindings for implementation of QUIC Protocol
+Python bindings for the ngtcp2 implementation of the QUIC protocol.
 
-%package -n %{soname}-devel
+%package devel
 Summary:        Development files for ngtcp2
 Group:          Development/Languages/C and C++
-Requires:       %{gnutls_soname}%{gnutls_sover} = %{version}
 Requires:       %{soname}-%{sover} = %{version}
-Provides:       %{name}-devel
+Provides:       libngtcp2-devel = %{version}-%{release}
+Obsoletes:      libngtcp2-devel < %{version}-%{release}
 
-%description -n %{soname}-devel
-Development files for usage with libngtcp2, which implements
-QUIC Protocol.
+%description devel
+Development files for use with libngtcp2, which implements the
+QUIC protocol.
 
-%package doc
-Summary:        Documentation for ngtcp2
-Group:          Documentation/HTML
+%package -n libngtcp2_crypto_gnutls-devel
+Summary:        GnuTLS Development files for ngtcp2
+Group:          Development/Languages/C and C++
+Requires:       %{gnutls_soname}%{gnutls_sover} = %{version}
+Requires:       libngtcp2-devel = %{version}-%{release}
 
-%description doc
-Documentation for ngtcp2, which includes a shared C library
+%description -n libngtcp2_crypto_gnutls-devel
+GnuTLS as TLS backend development files for use with libngtcp2.
+
+%package -n libngtcp2_crypto_ossl-devel
+Summary:        OpenSSL Development files for ngtcp2
+Group:          Development/Languages/C and C++
+Requires:       %{openssl_soname}%{openssl_sover} = %{version}
+Requires:       libngtcp2-devel = %{version}-%{release}
+
+%description -n libngtcp2_crypto_ossl-devel
+OpenSSL as TLS backend development files for use with libngtcp2.
+QUIC protocol.
 
 %prep
-%setup -q -n ngtcp2-%{version}
+%autosetup -n ngtcp2-%{version} -p1
 
 %build
+%if 0%{?force_gcc_version}
+export CC="gcc-%{?force_gcc_version}"
+export CXX="g++-%{?force_gcc_version}"
+%endif
 %configure \
   --disable-static        \
   --disable-silent-rules  \
   --enable-lib-only       \
   --with-libnghttp3       \
   --with-gnutls           \
+%if %{with openssl}
+  --with-openssl          \
+%else
   --without-openssl       \
+%endif
   --without-libev         \
   %{nil}
 %make_build all
@@ -110,6 +159,7 @@ rm -rf %{buildroot}%{_mandir}/man1/* \
 
 %ldconfig_scriptlets -n %{soname}-%{sover}
 %ldconfig_scriptlets -n %{gnutls_soname}%{gnutls_sover}
+%ldconfig_scriptlets -n %{openssl_soname}%{openssl_sover}
 
 %files -n %{soname}-%{sover}
 %license COPYING
@@ -119,12 +169,30 @@ rm -rf %{buildroot}%{_mandir}/man1/* \
 %license COPYING
 %{_libdir}/%{gnutls_soname}.so.%{gnutls_sover}*
 
-%files -n %{soname}-devel
+%if %{with openssl}
+%files -n %{openssl_soname}%{openssl_sover}
+%license COPYING
+%{_libdir}/%{openssl_soname}.so.%{openssl_sover}*
+%endif
+
+%files devel
 %dir %{_includedir}/%{name}/
-%{_includedir}/%{name}/*.h
+%{_includedir}/%{name}/ngtcp2.h
+%{_includedir}/%{name}/ngtcp2_crypto.h
+%{_includedir}/%{name}/version.h
 %{_libdir}/%{soname}.so
-%{_libdir}/%{gnutls_soname}.so
 %{_libdir}/pkgconfig/%{soname}.pc
+
+%files -n libngtcp2_crypto_gnutls-devel
+%{_includedir}/%{name}/ngtcp2_crypto_gnutls.h
+%{_libdir}/%{gnutls_soname}.so
 %{_libdir}/pkgconfig/libngtcp2_crypto_gnutls.pc
 
+%if %{with openssl}
+%files -n libngtcp2_crypto_ossl-devel
+%{_includedir}/%{name}/ngtcp2_crypto_ossl.h
+%{_libdir}/%{openssl_soname}.so
+%{_libdir}/pkgconfig/libngtcp2_crypto_ossl.pc
+%endif
+
 %changelog