From 3ad348f09ab9b3d8c6ff8e5880cdb76277d829570c9b4ceca003c4f23a97f693 Mon Sep 17 00:00:00 2001 From: Dominique Leuenberger Date: Mon, 2 Oct 2017 14:53:42 +0000 Subject: [PATCH] Accepting request 530008 from security 1 OBS-URL: https://build.opensuse.org/request/show/530008 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/openssl-ibmca?expand=0&rev=28 --- openssl-ibmca-1.3.0.tar.bz2 | 3 -- openssl-ibmca-1.4.0.tar.gz | 3 ++ ...se-evp_md_flag_pkey_method_signature.patch | 27 ---------------- openssl-ibmca.changes | 32 +++++++++++++++++++ openssl-ibmca.spec | 18 ++++++----- 5 files changed, 45 insertions(+), 38 deletions(-) delete mode 100644 openssl-ibmca-1.3.0.tar.bz2 create mode 100644 openssl-ibmca-1.4.0.tar.gz delete mode 100644 openssl-ibmca-fix-sha512-evp-digest-to-use-evp_md_flag_pkey_method_signature.patch diff --git a/openssl-ibmca-1.3.0.tar.bz2 b/openssl-ibmca-1.3.0.tar.bz2 deleted file mode 100644 index a2e0eb4..0000000 --- a/openssl-ibmca-1.3.0.tar.bz2 +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:cdc5387ab229cf3d74b88fd17b60562c8f76f57dfe70514a35ef243791bcdfb0 -size 274900 diff --git a/openssl-ibmca-1.4.0.tar.gz b/openssl-ibmca-1.4.0.tar.gz new file mode 100644 index 0000000..e26a544 --- /dev/null +++ b/openssl-ibmca-1.4.0.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:ed410b45eacf92b395b89cad147177eb40c5a77971b91e08f4470cc0ee48ac76 +size 34103 diff --git a/openssl-ibmca-fix-sha512-evp-digest-to-use-evp_md_flag_pkey_method_signature.patch b/openssl-ibmca-fix-sha512-evp-digest-to-use-evp_md_flag_pkey_method_signature.patch deleted file mode 100644 index b1304c4..0000000 --- a/openssl-ibmca-fix-sha512-evp-digest-to-use-evp_md_flag_pkey_method_signature.patch +++ /dev/null @@ -1,27 +0,0 @@ -From e11b35d9039291253d408ceb09b47a94e79d766f Mon Sep 17 00:00:00 2001 -From: Paulo Vital -Date: Thu, 30 Mar 2017 11:48:53 -0300 -Subject: [ibmca PATCH] Fix SHA512 EVP digest struct to use - EVP_MD_FLAG_PKEY_METHOD_SIGNATURE - -Signed-off-by: Paulo Vital ---- - src/e_ibmca.c | 2 +- - 1 file changed, 1 insertion(+), 1 deletion(-) - -diff --git a/src/e_ibmca.c b/src/e_ibmca.c -index 6220be8..35fa66c 100644 ---- a/src/e_ibmca.c -+++ b/src/e_ibmca.c -@@ -792,7 +792,7 @@ static const EVP_MD ibmca_sha512 = { - NID_sha512, - NID_sha512WithRSAEncryption, - SHA512_HASH_LENGTH, -- 0, -+ EVP_MD_FLAG_PKEY_METHOD_SIGNATURE, - ibmca_sha512_init, - ibmca_sha512_update, - ibmca_sha512_final, --- -2.9.3 - diff --git a/openssl-ibmca.changes b/openssl-ibmca.changes index 246fadb..bc4a7ef 100644 --- a/openssl-ibmca.changes +++ b/openssl-ibmca.changes @@ -1,3 +1,35 @@ +------------------------------------------------------------------- +Fri Sep 22 18:07:10 UTC 2017 - mpost@suse.com + +- Upgraded to version 1.4.0 + * Re-license to Apache License v2.0 + * Fix aes_gcm initialization. + * Update man page. + * Add macros for OpenSSL 0.9.8 compat. + * Remove AC_FUNC_MALLOC from configure.ac + * Add compat macro for OpenSSL 1.0.1e-fips. + * Setting 'foreign' strictness for automake. + * Add AES-GCM support. + * Rework EVP_aes macros. + * Remove dependency of old local OpenSSL headers. + * Fix engine initialization to set function pointers only once. + * Remove blank COPYING and NEWS files. + * Remove INSTALL and move its content to README.md + * Update README.md file to make use of markdown. + * Rename README file to README.md to use markdown + * Add CONTRIBUTING guidelines. + * Adding coding style documentation. + * Enable EVP_MD_FLAG_FIPS flag for SHA-*. + * Initialize rsa_keygen in RSA_METHOD for openssl < 1.1.0 + * Fix SHA512 EVP digest struct to use + EVP_MD_FLAG_PKEY_METHOD_SIGNATURE when using OpenSSL 1.0 + * Fix wrong parenthesis + * convert libica loading to dlopen() and friends + * Add support to DSO on new API of OpenSSL-1.1.0 +- Removed obsolete openssl-ibmca-fix-sha512-evp-digest-to-use-evp_md_flag_pkey_method_signature.patch +- Added BuildRequires for autoconf, automake, and libtool. +- Updated BuildRequires for libica-devel to be >= 3.1.1 + ------------------------------------------------------------------- Fri Sep 22 07:50:52 UTC 2017 - mpost@suse.com diff --git a/openssl-ibmca.spec b/openssl-ibmca.spec index 49c73ba..3ea5adb 100644 --- a/openssl-ibmca.spec +++ b/openssl-ibmca.spec @@ -17,17 +17,19 @@ Name: openssl-ibmca -Version: 1.3.0 +Version: 1.4.0 Release: 0 Summary: The IBMCA OpenSSL dynamic engine -License: IPL-1.0 +License: Apache-2.0 Group: Hardware/Other -Url: http://sourceforge.net/projects/opencryptoki -Source: http://sourceforge.net/projects/opencryptoki/files/libica%%20OpenSSL%%20Engine/ibmca-%{version}/openssl-ibmca-%{version}.tar.bz2 +Url: https://github.com/opencryptoki/openssl-ibmca/ +Source: openssl-ibmca-%{version}.tar.gz Source1: baselibs.conf -Patch1: openssl-ibmca-fix-sha512-evp-digest-to-use-evp_md_flag_pkey_method_signature.patch -BuildRequires: libica-devel >= 2.4.0 +BuildRequires: autoconf +BuildRequires: automake +BuildRequires: libica-devel >= 3.1.1 BuildRequires: libica-tools >= 2.4.0 +BuildRequires: libtool BuildRequires: openssl-devel Requires: openssl BuildRoot: %{_tmppath}/%{name}-%{version}-build @@ -39,13 +41,13 @@ IBM eServer Cryptographic Accelerator (ICA). %prep %setup -q -%patch1 -p1 %build # The directory where crypto engines are located is owned by the libcrypto package. # Find out where that is for this version of the distribution. %define _ENGINE_DIR %(pkg-config --variable=enginesdir libcrypto) +autoreconf --force --install export CFLAGS="%{optflags}" export CPPFLAGS="%{optflags}" %configure \ @@ -110,7 +112,7 @@ fi %files %defattr(-, root, root) -%doc README COPYING +%doc README.md LICENSE %doc src/openssl.cnf.sample %{_ENGINE_DIR}/libibmca.* %{_mandir}/man5/ibmca.5%{ext_man}