openssl-1_1/openssl-1_1-use-include-directive.patch

--- a/apps/openssl.cnf	2021-08-24 09:38:47.000000000 -0400
+++ b/apps/openssl.cnf	2021-12-06 17:13:34.549291242 -0500
@@ -11,9 +11,23 @@
 # defined.
 HOME			= .
 
+openssl_conf = openssl_init
+
+[openssl_init]
+
 # Extra OBJECT IDENTIFIER info:
 #oid_file		= $ENV::HOME/.oid
 oid_section		= new_oids
+engines			= engine_section
+
+# This include will look through the directory that will contain the
+# engine declarations for any engines provided by other packages.
+[engine_section]
+.include /etc/ssl/engines.d/
+
+# This include will look through the directory that will contain the
+# definitions of the engines declared in the engine section.
+.include /etc/ssl/engdef.d/
 
 # To use this configuration file with the "-extfile" option of the
 # "openssl x509" utility, name here the section containing the
Accepting request 936137 from home:markkp:branches:security:tls - Added openssl-1_1-use-include-directive.patch so that the default /etc/ssl/openssl.cnf file will include any configuration files that other packages might place into /etc/ssl/engines.d/ and /etc/ssl/engdef.d/ This is a fix for bsc#1004463 where scripting was being used to modify the openssl.cnf file. The scripting would fail if either the default openssl.cnf file, or the sample openssl-ibmca configuration file would be changed by upstream. - Updated spec file to create the two new necessary directores for the above patch. OBS-URL: https://build.opensuse.org/request/show/936137 OBS-URL: https://build.opensuse.org/package/show/security:tls/openssl-1_1?expand=0&rev=100 2021-12-14 13:43:58 +01:00			`--- a/apps/openssl.cnf 2021-08-24 09:38:47.000000000 -0400`
			`+++ b/apps/openssl.cnf 2021-12-06 17:13:34.549291242 -0500`
			`@@ -11,9 +11,23 @@`
			`# defined.`
			`HOME = .`

			`+openssl_conf = openssl_init`
			`+`
			`+[openssl_init]`
			`+`
			`# Extra OBJECT IDENTIFIER info:`
			`#oid_file = $ENV::HOME/.oid`
			`oid_section = new_oids`
			`+engines = engine_section`
			`+`
			`+# This include will look through the directory that will contain the`
			`+# engine declarations for any engines provided by other packages.`
			`+[engine_section]`
			`+.include /etc/ssl/engines.d/`
			`+`
			`+# This include will look through the directory that will contain the`
			`+# definitions of the engines declared in the engine section.`
			`+.include /etc/ssl/engdef.d/`

			`# To use this configuration file with the "-extfile" option of the`
			`# "openssl x509" utility, name here the section containing the`