From 332d0e46ebab2e3aecb53ef3e09ab1af09b67db0a875299786276deed409e395 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?V=C3=ADt=C4=9Bzslav=20=C4=8C=C3=AD=C5=BEek?=
 <vcizek@suse.com>
Date: Thu, 25 Oct 2018 13:55:29 +0000
Subject: [PATCH] Accepting request 644654 from
 home:elvigia:branches:security:tls

- Explictly select "getrandom" system call as the seed source,
  it is the safer/best performing choice on linux.
- do not force -std=gnu99, pick the compiler default.

OBS-URL: https://build.opensuse.org/request/show/644654
OBS-URL: https://build.opensuse.org/package/show/security:tls/openssl-1_1?expand=0&rev=23
---
 openssl-1_1.changes | 7 +++++++
 openssl-1_1.spec    | 7 ++++---
 2 files changed, 11 insertions(+), 3 deletions(-)

diff --git a/openssl-1_1.changes b/openssl-1_1.changes
index 6f3852e..e62e5ff 100644
--- a/openssl-1_1.changes
+++ b/openssl-1_1.changes
@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Thu Oct 25 13:32:33 UTC 2018 - Cristian Rodríguez <crrodriguez@opensuse.org>
+
+- Explictly select "getrandom" system call as the seed source,
+  it is the safer/best performing choice on linux.
+- do not force -std=gnu99, pick the compiler default.
+
 -------------------------------------------------------------------
 Tue Sep 11 13:49:06 UTC 2018 - Vítězslav Čížek <vcizek@suse.com>
 
diff --git a/openssl-1_1.spec b/openssl-1_1.spec
index 46267c4..aa0b47f 100644
--- a/openssl-1_1.spec
+++ b/openssl-1_1.spec
@@ -12,7 +12,7 @@
 # license that conforms to the Open Source Definition (Version 1.9)
 # published by the Open Source Initiative.
 
-# Please submit bugfixes or comments via http://bugs.opensuse.org/
+# Please submit bugfixes or comments via https://bugs.opensuse.org/
 #
 
 
@@ -127,7 +127,7 @@ export MACHINE=armv6l
     --prefix=%{_prefix} \
     --libdir=%{_lib} \
     --openssldir=%{ssletcdir} \
-    %{optflags} -std=gnu99 \
+    %{optflags} \
     -Wa,--noexecstack \
     -Wl,-z,relro,-z,now \
     -fno-common \
@@ -136,7 +136,8 @@ export MACHINE=armv6l
     -D_GNU_SOURCE \
     -DOPENSSL_NO_BUF_FREELISTS \
     $(getconf LFS_CFLAGS) \
-    -Wall
+    -Wall \
+    --with-rand-seed=getrandom
 
 # Show build configuration
 perl configdata.pm --dump