- Add support for userspace livepatching on ppc64le (jsc#PED-11850).

- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
    - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
    - openssl-TESTS-Disable-default-provider-crypto-policies.patch

OBS-URL: https://build.opensuse.org/package/show/security:tls/openssl-3?expand=0&rev=128
This commit is contained in:
Pedro Monreal Gonzalez 2025-01-02 18:17:13 +00:00 committed by Git OBS Bridge
parent 5afc4138ca
commit b062a1d507
4 changed files with 16 additions and 5 deletions

View File

@ -1,9 +1,17 @@
------------------------------------------------------------------- -------------------------------------------------------------------
Mon Dec 23 20:14:08 UTC 2024 - Giuliano Belinassi <giuliano.belinassi@suse.com> Mon Dec 23 20:14:08 UTC 2024 - Giuliano Belinassi <giuliano.belinassi@suse.com>
- Add support for userspace livepatching on ppc64le (jsc#PED-10952). - Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le. - Use gcc-13 for ppc64le.
-------------------------------------------------------------------
Tue Dec 17 12:42:19 UTC 2024 - Pedro Monreal <pmonreal@suse.com>
- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
* Rebase patches:
- openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
- openssl-TESTS-Disable-default-provider-crypto-policies.patch
------------------------------------------------------------------- -------------------------------------------------------------------
Tue Nov 12 15:46:20 UTC 2024 - Pedro Monreal <pmonreal@suse.com> Tue Nov 12 15:46:20 UTC 2024 - Pedro Monreal <pmonreal@suse.com>

View File

@ -1,7 +1,7 @@
# #
# spec file for package openssl-3 # spec file for package openssl-3
# #
# Copyright (c) 2024 SUSE LLC # Copyright (c) 2025 SUSE LLC
# #
# All modifications and additions to the file contributed by third parties # All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed # remain the property of their copyright owners, unless otherwise agreed

View File

@ -322,12 +322,13 @@ Index: openssl-3.2.3/apps/openssl.cnf
=================================================================== ===================================================================
--- openssl-3.2.3.orig/apps/openssl.cnf --- openssl-3.2.3.orig/apps/openssl.cnf
+++ openssl-3.2.3/apps/openssl.cnf +++ openssl-3.2.3/apps/openssl.cnf
@@ -52,6 +52,11 @@ tsa_policy3 = 1.2.3.4.5.7 @@ -52,6 +52,12 @@ tsa_policy3 = 1.2.3.4.5.7
[openssl_init] [openssl_init]
providers = provider_sect providers = provider_sect
+# Load default TLS policy configuration +# Load default TLS policy configuration
+ssl_conf = ssl_module +ssl_conf = ssl_module
+alg_section = evp_properties
+ +
+[ evp_properties ] +[ evp_properties ]
+# This section is intentionally added empty here to be tuned on particular systems +# This section is intentionally added empty here to be tuned on particular systems

View File

@ -2,16 +2,18 @@ Index: openssl-3.2.3/apps/openssl.cnf
=================================================================== ===================================================================
--- openssl-3.2.3.orig/apps/openssl.cnf --- openssl-3.2.3.orig/apps/openssl.cnf
+++ openssl-3.2.3/apps/openssl.cnf +++ openssl-3.2.3/apps/openssl.cnf
@@ -45,7 +45,7 @@ tsa_policy3 = 1.2.3.4.5.7 @@ -45,8 +45,8 @@ tsa_policy3 = 1.2.3.4.5.7
[openssl_init] [openssl_init]
providers = provider_sect providers = provider_sect
# Load default TLS policy configuration # Load default TLS policy configuration
-ssl_conf = ssl_module -ssl_conf = ssl_module
-alg_section = evp_properties
+##ssl_conf = ssl_module +##ssl_conf = ssl_module
+##alg_section = evp_properties
[ evp_properties ] [ evp_properties ]
# This section is intentionally added empty here to be tuned on particular systems # This section is intentionally added empty here to be tuned on particular systems
@@ -60,20 +60,20 @@ ssl_conf = ssl_module @@ -61,20 +61,20 @@ alg_section = evp_properties
# to side-channel attacks and as such have been deprecated. # to side-channel attacks and as such have been deprecated.
[provider_sect] [provider_sect]