rpm/mono-core
SHA256
1
0
Fork 0
forked from pool/mono-core
Code Pull Requests Activity

Accepting request 923646 from home:marxin:branches:Mono:Factory

Browse Source 
- Add enable-X509_V_FLAG_TRUSTED_FIRST-flag.patch in order to fix bsc#1191220.

OBS-URL: https://build.opensuse.org/request/show/923646
OBS-URL: https://build.opensuse.org/package/show/Mono:Factory/mono-core?expand=0&rev=221
This commit is contained in:
Matthias Mailänder 2021-10-07 11:30:29 +00:00 committed by Git OBS Bridge
parent 36b4cf99cd
commit 937d4b3d62
3 changed files with 34 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
enable-X509_V_FLAG_TRUSTED_FIRST-flag.patch Normal file
View File

@ -0,0 +1,26 @@
From 1a739c8dc34ec239ca0ded6a79bb7370f81944da Mon Sep 17 00:00:00 2001
From: Martin Liska <mliska@suse.cz>
Date: Fri, 1 Oct 2021 14:39:37 +0200
Subject: [PATCH] Enable X509_V_FLAG_TRUSTED_FIRST flag.
Fixes: Fix Let's Encrypt DST Root CA X3 certificate expiration.
---
external/boringssl/crypto/x509/x509_vpm.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/external/boringssl/crypto/x509/x509_vpm.c b/external/boringssl/crypto/x509/x509_vpm.c
index 02a589888..4bbb1ceed 100644
--- a/external/boringssl/crypto/x509/x509_vpm.c
+++ b/external/boringssl/crypto/x509/x509_vpm.c
@@ -515,7 +515,7 @@ static const X509_VERIFY_PARAM default_table[] = {
(char *)"default", /* X509 default parameters */
0, /* Check time */
0, /* internal flags */
- 0, /* flags */
+ X509_V_FLAG_TRUSTED_FIRST, /* flags */
0, /* purpose */
0, /* trust */
100, /* depth */
--
2.33.0

5
mono-core.changes
View File

@ -1,3 +1,8 @@
-------------------------------------------------------------------
Fri Oct 1 13:17:13 UTC 2021 - Martin Liška <mliska@suse.cz>
- Add enable-X509_V_FLAG_TRUSTED_FIRST-flag.patch in order to fix bsc#1191220.
-------------------------------------------------------------------
Thu Sep 30 18:05:19 UTC 2021 - Matthias Mailänder <mailaender@opensuse.org>

3
mono-core.spec
View File

@ -62,6 +62,8 @@ Patch15: xbuild-revert-to-mcs.patch
Patch20: xbuild-use-roslyn-vbc.patch
# PATCH-FIX-UPSTREAM fix-s390x-ucontext.patch bsc#1171934 mgorse@suse.com -- fix s390x build on glibc 2.26.
Patch22: fix-s390x-ucontext.patch
# PATCH-FIX-OPENSUSE enable-X509_V_FLAG_TRUSTED_FIRST-flag.patch bsc#1191220 mliska@suse.com -- fix the new Let's encrypt issue
Patch23: enable-X509_V_FLAG_TRUSTED_FIRST-flag.patch
BuildRequires: autoconf
BuildRequires: automake
BuildRequires: bison
@ -211,6 +213,7 @@ technologies that have been submitted to the ECMA for standardization.
%patch20 -p1
%endif
%patch22 -p1
%patch23 -p1
%build
%define _lto_cflags %{nil}