Accepting request 530008 from security

1

OBS-URL: https://build.opensuse.org/request/show/530008
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/openssl-ibmca?expand=0&rev=28

openssl-ibmca-1.3.0.tar.bz2

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:cdc5387ab229cf3d74b88fd17b60562c8f76f57dfe70514a35ef243791bcdfb0
-size 274900

openssl-ibmca-1.4.0.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:ed410b45eacf92b395b89cad147177eb40c5a77971b91e08f4470cc0ee48ac76
+size 34103

openssl-ibmca-fix-sha512-evp-digest-to-use-evp_md_flag_pkey_method_signature.patch

@@ -1,27 +0,0 @@
-From e11b35d9039291253d408ceb09b47a94e79d766f Mon Sep 17 00:00:00 2001
-From: Paulo Vital <pvital@linux.vnet.ibm.com>
-Date: Thu, 30 Mar 2017 11:48:53 -0300
-Subject: [ibmca PATCH] Fix SHA512 EVP digest struct to use
- EVP_MD_FLAG_PKEY_METHOD_SIGNATURE
-
-Signed-off-by: Paulo Vital <pvital@linux.vnet.ibm.com>
----
- src/e_ibmca.c | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/src/e_ibmca.c b/src/e_ibmca.c
-index 6220be8..35fa66c 100644
---- a/src/e_ibmca.c
-+++ b/src/e_ibmca.c
-@@ -792,7 +792,7 @@ static const EVP_MD ibmca_sha512 = {
- 	NID_sha512,
- 	NID_sha512WithRSAEncryption,
- 	SHA512_HASH_LENGTH,
--	0,
-+	EVP_MD_FLAG_PKEY_METHOD_SIGNATURE,
- 	ibmca_sha512_init,
- 	ibmca_sha512_update,
- 	ibmca_sha512_final,
--- 
-2.9.3
-

openssl-ibmca.changes

@@ -1,3 +1,35 @@
+-------------------------------------------------------------------
+Fri Sep 22 18:07:10 UTC 2017 - mpost@suse.com
+
+- Upgraded to version 1.4.0
+  * Re-license to Apache License v2.0
+  * Fix aes_gcm initialization.
+  * Update man page.
+  * Add macros for OpenSSL 0.9.8 compat.
+  * Remove AC_FUNC_MALLOC from configure.ac
+  * Add compat macro for OpenSSL 1.0.1e-fips.
+  * Setting 'foreign' strictness for automake.
+  * Add AES-GCM support.
+  * Rework EVP_aes macros.
+  * Remove dependency of old local OpenSSL headers.
+  * Fix engine initialization to set function pointers only once.
+  * Remove blank COPYING and NEWS files.
+  * Remove INSTALL and move its content to README.md
+  * Update README.md file to make use of markdown.
+  * Rename README file to README.md to use markdown
+  * Add CONTRIBUTING guidelines.
+  * Adding coding style documentation.
+  * Enable EVP_MD_FLAG_FIPS flag for SHA-*.
+  * Initialize rsa_keygen in RSA_METHOD for openssl < 1.1.0
+  * Fix SHA512 EVP digest struct to use 
+    EVP_MD_FLAG_PKEY_METHOD_SIGNATURE when using OpenSSL 1.0
+  * Fix wrong parenthesis
+  * convert libica loading to dlopen() and friends
+  * Add support to DSO on new API of OpenSSL-1.1.0
+- Removed obsolete openssl-ibmca-fix-sha512-evp-digest-to-use-evp_md_flag_pkey_method_signature.patch
+- Added BuildRequires for autoconf, automake, and libtool.
+- Updated BuildRequires for libica-devel to be >= 3.1.1
+
 -------------------------------------------------------------------
 Fri Sep 22 07:50:52 UTC 2017 - mpost@suse.com
 

openssl-ibmca.spec

@@ -17,17 +17,19 @@
 
 
 Name:           openssl-ibmca
-Version:        1.3.0
+Version:        1.4.0
 Release:        0
 Summary:        The IBMCA OpenSSL dynamic engine
-License:        IPL-1.0
+License:        Apache-2.0
 Group:          Hardware/Other
-Url:            http://sourceforge.net/projects/opencryptoki
-Source:         http://sourceforge.net/projects/opencryptoki/files/libica%%20OpenSSL%%20Engine/ibmca-%{version}/openssl-ibmca-%{version}.tar.bz2
+Url:            https://github.com/opencryptoki/openssl-ibmca/
+Source:         openssl-ibmca-%{version}.tar.gz
 Source1:        baselibs.conf
-Patch1:         openssl-ibmca-fix-sha512-evp-digest-to-use-evp_md_flag_pkey_method_signature.patch
-BuildRequires:  libica-devel >= 2.4.0
+BuildRequires:  autoconf
+BuildRequires:  automake
+BuildRequires:  libica-devel >= 3.1.1
 BuildRequires:  libica-tools >= 2.4.0
+BuildRequires:  libtool
 BuildRequires:  openssl-devel
 Requires:       openssl
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
@@ -39,13 +41,13 @@ IBM eServer Cryptographic Accelerator (ICA).
 
 %prep
 %setup -q
-%patch1 -p1
 
 %build
 # The directory where crypto engines are located is owned by the libcrypto package.
 # Find out where that is for this version of the distribution.
 %define _ENGINE_DIR %(pkg-config --variable=enginesdir libcrypto)
 
+autoreconf --force --install
 export CFLAGS="%{optflags}"
 export CPPFLAGS="%{optflags}"
 %configure \
@@ -110,7 +112,7 @@ fi
 
 %files
 %defattr(-, root, root)
-%doc README COPYING
+%doc README.md LICENSE
 %doc src/openssl.cnf.sample
 %{_ENGINE_DIR}/libibmca.*
 %{_mandir}/man5/ibmca.5%{ext_man}