Accepting request 1172786 from home:gbelinassi:branches:security:tls
- Enable livepatching support (bsc#1223428) OBS-URL: https://build.opensuse.org/request/show/1172786 OBS-URL: https://build.opensuse.org/package/show/security:tls/openssl-3?expand=0&rev=98
This commit is contained in:
parent
b5e1eac45b
commit
6ed66302c1
@ -1,3 +1,8 @@
|
||||
-------------------------------------------------------------------
|
||||
Tue May 7 13:35:31 UTC 2024 - Giuliano Belinassi <giuliano.belinassi@suse.com>
|
||||
|
||||
- Enable livepatching support (bsc#1223428)
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue May 7 11:51:38 UTC 2024 - Otto Hollmann <otto.hollmann@suse.com>
|
||||
|
||||
|
@ -22,6 +22,10 @@
|
||||
%define man_suffix 3ssl
|
||||
%global sslengcnf %{ssletcdir}/engines%{sover}.d
|
||||
%global sslengdef %{ssletcdir}/engdef%{sover}.d
|
||||
|
||||
# Enable userspace livepatching.
|
||||
%define livepatchable 1
|
||||
|
||||
Name: openssl-3
|
||||
# Don't forget to update the version in the "openssl" meta-package!
|
||||
Version: 3.1.4
|
||||
@ -86,6 +90,13 @@ Patch27: openssl-CVE-2024-0727.patch
|
||||
# PATCH-FIX-UPSTREAM: bsc#1222548 CVE-2024-2511: Unbounded memory growth with session handling in TLSv1.3
|
||||
Patch28: openssl-CVE-2024-2511.patch
|
||||
BuildRequires: pkgconfig
|
||||
%if 0%{?sle_version} >= 150400 || 0%{?suse_version} >= 1550
|
||||
BuildRequires: ulp-macros
|
||||
%else
|
||||
# Define ulp-macros macros as empty
|
||||
%define cflags_livepatching ""
|
||||
%define pack_ipa_dumps echo "Livepatching is disabled in this build"
|
||||
%endif
|
||||
BuildRequires: pkgconfig(zlib)
|
||||
Requires: libopenssl3 = %{version}-%{release}
|
||||
Requires: openssl
|
||||
@ -188,6 +199,7 @@ export MACHINE=armv6l
|
||||
--libdir=%{_lib} \
|
||||
--openssldir=%{ssletcdir} \
|
||||
%{optflags} \
|
||||
%{cflags_livepatching} \
|
||||
-Wa,--noexecstack \
|
||||
-Wl,-z,relro,-z,now \
|
||||
-fno-common \
|
||||
@ -252,6 +264,7 @@ gcc -o showciphers %{optflags} -I%{buildroot}%{_includedir} %{SOURCE5} -L%{build
|
||||
LD_LIBRARY_PATH=%{buildroot}%{_libdir} ./showciphers
|
||||
|
||||
%install
|
||||
%{pack_ipa_dumps}
|
||||
%make_install %{?_smp_mflags} MANSUFFIX=%{man_suffix}
|
||||
|
||||
rename so.%{sover} so.%{version} %{buildroot}%{_libdir}/*.so.%{sover}
|
||||
|
Loading…
Reference in New Issue
Block a user