0bb9b0ad33
- Build everything with full RELRO (-Wl,-z,relro,-z,now) - Remove -fstack-protector from the hardcoded build options it is already in RPM_OPT_FLAGS and is replaced by -fstack-protector-strong with gcc 4.9 - Remove the "gmp" and "capi" shared engines, nobody noticed but they are just dummies that do nothing. - Use enable-rfc3779 to allow projects such as rpki.net to work in openSUSE and match the functionality available in Debian/Fedora/etc - openssl-buffreelistbug-aka-CVE-2010-5298.patch fix CVE-2010-5298 and disable the internal BUF_FREELISTS functionality. it hides bugs like heartbleed and is there only for systems on which malloc() free() are slow. - ensure we export MALLOC_CHECK and PERTURB during the test suite, now that the freelist functionality is disabled it will help to catch bugs before they hit users. - openssl-libssl-noweakciphers.patch do not offer "export" or "low" quality ciphers by default. using such ciphers is not forbidden but requires an explicit request - openssl-gcc-attributes.patch: fix thinko, CRYPTO_realloc_clean does not return memory of "num * old_num" but only "num" size fortunately this function is currently unused. (forwarded request 230868 from elvigia) OBS-URL: https://build.opensuse.org/request/show/231108 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/openssl?expand=0&rev=114 |
||
|---|---|---|
| .gitattributes | ||
| .gitignore | ||
| 0001-libcrypto-Hide-library-private-symbols.patch | ||
| 0005-libssl-Hide-library-private-symbols.patch | ||
| baselibs.conf | ||
| bug610223.patch | ||
| compression_methods_switch.patch | ||
| merge_from_0.9.8k.patch | ||
| openssl-1.0.0-c_rehash-compat.diff | ||
| openssl-1.0.1c-default-paths.patch | ||
| openssl-1.0.1c-ipv6-apps.patch | ||
| openssl-1.0.1e-fips-ctor.patch | ||
| openssl-1.0.1e-fips-ec.patch | ||
| openssl-1.0.1e-fips.patch | ||
| openssl-1.0.1e-new-fips-reqs.patch | ||
| openssl-1.0.1e-truststore.diff | ||
| openssl-1.0.1g.tar.gz | ||
| openssl-1.0.1g.tar.gz.asc | ||
| openssl-buffreelistbug-aka-CVE-2010-5298.patch | ||
| openssl-fix-pod-syntax.diff | ||
| openssl-gcc-attributes.patch | ||
| openssl-libssl-noweakciphers.patch | ||
| openssl-ocloexec.patch | ||
| openssl-pkgconfig.patch | ||
| openssl.changes | ||
| openssl.keyring | ||
| openssl.spec | ||
| openssl.test | ||
| README-FIPS.txt | ||
| README.SuSE | ||
| VIA_padlock_support_on_64systems.patch | ||
Please note that the man pages for the openssl libraries and tools have been placed in a package on its own right: openssl-doc Please install the openssl-doc package if you need the man pages, HTML documentation or sample C programs. The C header files and static libraries have also been extracted, they can now be found in the openssl-devel package. Your SuSE Team.