Problem Z Kompilacja

@WalDo · Sierpień 24, 2011

https://bugzilla.red...g.cgi?id=319901

Tylko, że ten bug jest z wersji FC7 a mamy już F15 i dotyczy openssl 0.9.8 a mamy już w F15 openssl 1.0.0d :] Chociaż prawdą jest, że - podobno, bo nie mogę znaleźć godnego zaufania źródła - ze względu na "koszerność" systemu (czytaj: amerykańskie prawo patentowe) pakiet openssl Fedory jest nieco okrojony.

Czyli żeby zbudować bitcoin-qt musisz najpierw zbudować sobie pełną wersję OpenSSL wraz z pakietem openssl-devel. A nie wiadomo co Ci jeszcze może pójść tam pod górę.

portals · Sierpień 24, 2011

Próbowalem zrobic jak proponowal Thof ale znowu pod górke i znowu to samo:

p_lib.c:318:42: error: unknown type name 'EC_KEY'
p_lib.c:326:1: error: unknown type name 'EC_KEY'

p_lib.c: In function 'EVP_PKEY_get1_EC_KEY':

p_lib.c:333:2: warning: implicit declaration of function 'EC_KEY_up_ref' [-Wimplicit-function-declaration]

p_lib.c:333:26: error: 'union <anonymous>' has no member named 'ec'

p_lib.c:334:19: error: 'union <anonymous>' has no member named 'ec'

p_lib.c:335:1: warning: control reaches end of non-void function [-Wreturn-type]

make[2]: *** [p_lib.o] Error 1

make[2]: Leaving directory `/home/piotrek/rpmbuild/BUILD/openssl-1.0.0d/crypto/evp'

make[1]: *** [subdirs] Error 1

make[1]: Leaving directory `/home/piotrek/rpmbuild/BUILD/openssl-1.0.0d/crypto'

make: *** [build_crypto] Error 1

blad: Bledny stan wyjscia z /var/tmp/rpm-tmp.3vu3Aw (%build)

Fragment edytowalem na taki:

./Configure \
--prefix=/usr --openssldir=%{_sysconfdir}/pki/tls ${sslflags} \
zlib enable-camellia enable-seed enable-tlsext enable-rfc3779 \
enable-cms enable-md2  \
--with-krb5-flavor=MIT --enginesdir=%{_libdir}/openssl/engines \
--with-krb5-dir=/usr shared  ${sslarch} fips

Moze Fedora walczy ze mna bo mam windows do gier

Czyli zeby zbudowac bitcoin-qt musisz najpierw zbudowac sobie pelna wersje OpenSSL wraz z pakietem openssl-devel. A nie wiadomo co Ci jeszcze moze pójsc tam pod góre.

Próbowalem zrobic z make install na zródlach openssl ale nie dawalo to efektu. A co do reszty to nie wiem nawet jak sie za to zabrac

Tylko, ze ten bug jest z wersji FC7 a mamy juz F15 i dotyczy openssl 0.9.8 a mamy juz w F15 openssl 1.0.0d

W Bugtrapie Fedory 15 tez to widzialem, ale nie moge znalezc teraz.

@WalDo · Sierpień 24, 2011

Próbowałem zrobić z make install na źródłach openssl ale nie dawało to efektu.

Jak chcesz żeby Ci ktoś pomógł, to nie opowiadaj tylko wklej konkretne wyjście błędu.

Zresztą same make install wiadomo że nic nie da, bo najpierw trzeba skompilować - przed kompilacją nie bardzo jest co instalować.

Co do kompilacji, to raczej sugerowałbym:

1. ściągnięcie pełnej paczki ze strony projektu,

2. ściągnięcie pakietu src.rpm,

3. wyciągnięcie z src.rpm pliku *.spec

4. modyfikacja pliku spec (na początek wpisanie odpowiedniej nazwy źródeł z tej pełnej paczki z pkt.1 oraz wpisanie odpowiedniej wersji)

5. przebudowanie paczki (link do artykułu o rpmbuild na naszej wiki podałem powyżej).

portals · Sierpień 24, 2011

Zrobilem tak jak pisales i dalej

p_lib.c:318:42: error: unknown type name 'EC_KEY'
p_lib.c:326:1: error: unknown type name 'EC_KEY'
p_lib.c: In function 'EVP_PKEY_get1_EC_KEY':
p_lib.c:333:2: warning: implicit declaration of function 'EC_KEY_up_ref' [-Wimplicit-function-declaration]
p_lib.c:333:26: error: 'union <anonymous>' has no member named 'ec'
p_lib.c:334:19: error: 'union <anonymous>' has no member named 'ec'
p_lib.c:335:1: warning: control reaches end of non-void function [-Wreturn-type]
make[2]: *** [p_lib.o] Error 1
make[2]: Leaving directory `/home/piotrek/rpmbuild/BUILD/openssl-1.0.0d/crypto/evp'
make[1]: *** [subdirs] Error 1
make[1]: Leaving directory `/home/piotrek/rpmbuild/BUILD/openssl-1.0.0d/crypto'
make: *** [build_crypto] Error 1
blad: Bledny stan wyjscia z /var/tmp/rpm-tmp.VPjgvb (%build)

Moze którys patch dolaczany w spec blokuje to EC? Bez usuwanie NO-EC kompiluje sie ok ale potem i tak qt-bitcoin sie nie kompiluje z powodu braku tego.

[piotrek@Piotrek-PC1 laanwj-bitcoin-qt-872b1f3]$ qmake-qt4 
[piotrek@Piotrek-PC1 laanwj-bitcoin-qt-872b1f3]$ make
/usr/lib64/qt4/bin/uic src/qt/forms/sendcoinsdialog.ui -o ui_sendcoinsdialog.h
/usr/lib64/qt4/bin/uic src/qt/forms/addressbookpage.ui -o ui_addressbookpage.h
/usr/lib64/qt4/bin/uic src/qt/forms/aboutdialog.ui -o ui_aboutdialog.h
/usr/lib64/qt4/bin/uic src/qt/forms/editaddressdialog.ui -o ui_editaddressdialog.h
/usr/lib64/qt4/bin/uic src/qt/forms/transactiondescdialog.ui -o ui_transactiondescdialog.h
/usr/lib64/qt4/bin/uic src/qt/forms/overviewpage.ui -o ui_overviewpage.h
/usr/lib64/qt4/bin/uic src/qt/forms/sendcoinsentry.ui -o ui_sendcoinsentry.h
g++ -c -pipe -fstack-protector -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic -fdiagnostics-show-option -Wall -Wno-invalid-offsetof -Wno-unused-variable -Wno-unused-parameter -Wno-sign-compare -Wno-char-subscripts -Wno-unused-value -Wno-sequence-point -Wno-parentheses -Wno-unknown-pragmas -Wno-switch -D_REENTRANT -DQT_GUI -DQT_NO_DEBUG -DQT_GUI_LIB -DQT_CORE_LIB -DQT_SHARED -I/usr/lib64/qt4/mkspecs/linux-g++ -I/usr/include/QtCore -I/usr/include/QtGui -I/usr/include -Isrc -Isrc/json -Isrc/cryptopp -Isrc/qt -I. -I. -o bitcoin.o src/qt/bitcoin.cpp
In file included from src/headers.h:39:0,
                from src/qt/bitcoin.cpp:10:
/usr/include/openssl/ecdsa.h:65:2: error: #error ECDSA is disabled.
In file included from /usr/include/openssl/ecdsa.h:68:0,
                from src/headers.h:39,
                from src/qt/bitcoin.cpp:10:
/usr/include/openssl/ec.h:82:2: error: #error EC is disabled.
make: *** [bitcoin.o] Blad 1

Jak chcesz zeby Ci ktos pomógl, to nie opowiadaj tylko wklej konkretne wyjscie bledu.

Bawie sie z tym kilka dni i nie pamietam ale chyba nie bylo bledu ale efektu tez nie.

thof · Sierpień 24, 2011

Może któryś patch dołączany w spec blokuję to EC?

Raczej tak, ale chyba nie myślisz, że ktoś będzie sprawdzał za Ciebie te wszystkie patche? Komentuj w .spec i sprawdzaj. Na początku spróbuj skompilować tylko z no-rpath i ca-dir.

Skróć też ./configure do mniej więcej:

./Configure \
--prefix=/usr --openssldir=%{_sysconfdir}/pki/tls ${sslflags} \
zlib enable-md2 \
--enginesdir=%{_libdir}/openssl/engines \
shared  ${sslarch} fips

portals · Sierpień 24, 2011

Raczej tak, ale chyba nie myslisz, ze ktos bedzie sprawdzal za Ciebie te wszystkie patche?

W zadnym wypadku bo nie pisze tu o tym problemie po to aby ktos za mnie go rozwiazal ale zeby ktos mi pomógl a ja przy okazji czegos sie naucze.

Wykonalem greb EC * i wyszlo na to ze usuwa to plik hobble-openssl. Usunalem jego wykonanie w openssl.spec. Potem zrobilem jak polecil WalDo ale uproscilem sobie sprawe i do standardowego archiwum wrzucilem oryginalne pliki.

Kompilacja openssl przeszla bez problemu qt-bitcoin sie kompiluje, edytuje posta jak sie skonczy sukcesem/bledem

UDALO SIE Dzieki wszystkim za pomoc bez której nie dal bym na pewno rady

Podrzuce zmodowe pliki zeby pomóc innym bo wynik raczej bedzie w google

bitcoin-qt.pro

TEMPLATE = app
TARGET =
INCLUDEPATH += src src/json src/cryptopp src/qt
DEFINES += QT_GUI
# DEFINES += SSL
CONFIG += no_include_pwd

# for boost 1.37, add -mt to the boost libraries
LIBS += -lssl -lcrypto -ldb_cxx
unix:!macx:LIBS += -lboost_system -lboost_filesystem -lboost_program_options -lboost_thread-mt -lcrypto
macx:LIBS += -lboost_system-mt -lboost_filesystem-mt -lboost_program_options-mt -lboost_thread-mt
macx:DEFINES += __WXMAC_OSX__ MSG_NOSIGNAL=0 BOOST_FILESYSTEM_VERSION=3
windows:LIBS += -lboost_system-mgw44-mt-1_43 -lboost_filesystem-mgw44-mt-1_43 -lboost_program_options-mgw44-mt-1_43 -lboost_thread-mgw44-mt-1_43 -lws2_32 -lgdi32
windows:DEFINES += __WXMSW__
windows:RC_FILE = src/qt/res/bitcoin-qt.rc

# for extra security against potential buffer overflows
QMAKE_CXXFLAGS += -fstack-protector 
QMAKE_LFLAGS += -fstack-protector

# disable quite some warnings because bitcoin core "sins" a lot
QMAKE_CXXFLAGS_WARN_ON = -fdiagnostics-show-option -Wall -Wno-invalid-offsetof -Wno-unused-variable -Wno-unused-parameter -Wno-sign-compare -Wno-char-subscripts  -Wno-unused-value -Wno-sequence-point -Wno-parentheses -Wno-unknown-pragmas -Wno-switch

# Input
DEPENDPATH += src/qt src src/cryptopp src json/include
HEADERS += src/qt/bitcoingui.h \
   src/qt/transactiontablemodel.h \
   src/qt/addresstablemodel.h \
   src/qt/optionsdialog.h \
   src/qt/sendcoinsdialog.h \
   src/qt/addressbookpage.h \
   src/qt/aboutdialog.h \
   src/qt/editaddressdialog.h \
   src/qt/bitcoinaddressvalidator.h \
   src/base58.h \
   src/bignum.h \
   src/util.h \
   src/uint256.h \
   src/serialize.h \
   src/cryptopp/stdcpp.h \
   src/cryptopp/smartptr.h \
   src/cryptopp/simple.h \
   src/cryptopp/sha.h \
   src/cryptopp/secblock.h \
   src/cryptopp/pch.h \
   src/cryptopp/misc.h \
   src/cryptopp/iterhash.h \
   src/cryptopp/cryptlib.h \
   src/cryptopp/cpu.h \
   src/cryptopp/config.h \
   src/strlcpy.h \
   src/main.h \
   src/net.h \
   src/key.h \
   src/db.h \
   src/script.h \
   src/noui.h \
   src/init.h \
   src/headers.h \
   src/irc.h \
   src/json/json_spirit_writer_template.h \
   src/json/json_spirit_writer.h \
   src/json/json_spirit_value.h \
   src/json/json_spirit_utils.h \
   src/json/json_spirit_stream_reader.h \
   src/json/json_spirit_reader_template.h \
   src/json/json_spirit_reader.h \
   src/json/json_spirit_error_position.h \
   src/json/json_spirit.h \
   src/qt/clientmodel.h \
   src/qt/guiutil.h \
   src/qt/transactionrecord.h \
   src/qt/guiconstants.h \
   src/qt/optionsmodel.h \
   src/qt/monitoreddatamapper.h \
   src/qtui.h \
   src/qt/transactiondesc.h \
   src/qt/transactiondescdialog.h \
   src/qt/bitcoinamountfield.h \
   src/wallet.h \
   src/keystore.h \
   src/qt/transactionfilterproxy.h \
   src/qt/transactionview.h \
   src/qt/walletmodel.h \
   src/bitcoinrpc.h \
   src/qt/overviewpage.h \
   src/qt/csvmodelwriter.h \
   src/qt/qtwin.h \
   src/crypter.h \
   src/qt/sendcoinsentry.h \
   src/qt/qvalidatedlineedit.h \
   src/qt/bitcoinunits.h \
   src/qt/qvaluecombobox.h
SOURCES += src/qt/bitcoin.cpp src/qt/bitcoingui.cpp \
   src/qt/transactiontablemodel.cpp \
   src/qt/addresstablemodel.cpp \
   src/qt/optionsdialog.cpp \
   src/qt/sendcoinsdialog.cpp \
   src/qt/addressbookpage.cpp \
   src/qt/aboutdialog.cpp \
   src/qt/editaddressdialog.cpp \
   src/qt/bitcoinaddressvalidator.cpp \
   src/cryptopp/sha.cpp \
   src/cryptopp/cpu.cpp \
   src/util.cpp \
   src/script.cpp \
   src/main.cpp \
   src/init.cpp \
   src/net.cpp \
   src/irc.cpp \
   src/db.cpp \
   src/json/json_spirit_writer.cpp \
   src/json/json_spirit_value.cpp \
   src/json/json_spirit_reader.cpp \
   src/qt/clientmodel.cpp \
   src/qt/guiutil.cpp \
   src/qt/transactionrecord.cpp \
   src/qt/optionsmodel.cpp \
   src/qt/monitoreddatamapper.cpp \
   src/qt/transactiondesc.cpp \
   src/qt/transactiondescdialog.cpp \
   src/qt/bitcoinstrings.cpp \
   src/qt/bitcoinamountfield.cpp \
   src/wallet.cpp \
   src/keystore.cpp \
   src/qt/transactionfilterproxy.cpp \
   src/qt/transactionview.cpp \
   src/qt/walletmodel.cpp \
   src/bitcoinrpc.cpp \
   src/qt/overviewpage.cpp \
   src/qt/csvmodelwriter.cpp \
   src/qt/qtwin.cpp \
   src/crypter.cpp \
   src/qt/sendcoinsentry.cpp \
   src/qt/qvalidatedlineedit.cpp \
   src/qt/bitcoinunits.cpp \
   src/qt/qvaluecombobox.cpp

RESOURCES += \
   src/qt/bitcoin.qrc

FORMS += \
   src/qt/forms/sendcoinsdialog.ui \
   src/qt/forms/addressbookpage.ui \
   src/qt/forms/aboutdialog.ui \
   src/qt/forms/editaddressdialog.ui \
   src/qt/forms/transactiondescdialog.ui \
   src/qt/forms/overviewpage.ui \
   src/qt/forms/sendcoinsentry.ui

CODECFORTR = UTF-8
# for lrelease/lupdate
TRANSLATIONS = src/qt/locale/bitcoin_nl.ts src/qt/locale/bitcoin_de.ts \
              src/qt/locale/bitcoin_ru.ts

openssl.spec

# For the curious:
# 0.9.5a soversion = 0
# 0.9.6  soversion = 1
# 0.9.6a soversion = 2
# 0.9.6c soversion = 3
# 0.9.7a soversion = 4
# 0.9.7ef soversion = 5
# 0.9.8ab soversion = 6
# 0.9.8g soversion = 7
# 0.9.8jk + EAP-FAST soversion = 8
# 1.0.0 soversion = 10
%define soversion 10

# Number of threads to spawn when testing some threading fixes.
%define thread_test_threads %{?threads:%{threads}}%{!?threads:1}

# Arches on which we need to prevent arch conflicts on opensslconf.h, must
# also be handled in opensslconf-new.h.
%define multilib_arches %{ix86} ia64 ppc ppc64 s390 s390x sparcv9 sparc64 x86_64

Summary: A general purpose cryptography library with TLS implementation
Name: openssl
Version: 1.0.0d
Release: 1%{?dist}
# We remove certain patented algorithms from the openssl source tarball
# with the hobble-openssl script which is included below.
Source: openssl-%{version}-usa.tar.bz2
Source2: Makefile.certificate
Source6: make-dummy-cert
Source8: openssl-thread-test.c
Source9: opensslconf-new.h
Source10: opensslconf-new-warning.h
Source11: README.FIPS
# Build changes
Patch0: openssl-1.0.0-beta4-redhat.patch
Patch1: openssl-1.0.0-beta3-defaults.patch
Patch3: openssl-1.0.0-beta3-soversion.patch
Patch4: openssl-1.0.0-beta5-enginesdir.patch
Patch5: openssl-0.9.8a-no-rpath.patch
Patch6: openssl-0.9.8b-test-use-localhost.patch
Patch7: openssl-1.0.0-timezone.patch
# Bug fixes
Patch23: openssl-1.0.0-beta4-default-paths.patch
Patch24: openssl-0.9.8j-bad-mime.patch
Patch25: openssl-1.0.0a-manfix.patch
# Functionality changes
Patch32: openssl-0.9.8g-ia64.patch
Patch33: openssl-1.0.0-beta4-ca-dir.patch
Patch34: openssl-0.9.6-x509.patch
Patch35: openssl-0.9.8j-version-add-engines.patch
Patch38: openssl-1.0.0-beta5-cipher-change.patch
Patch39: openssl-1.0.0b-ipv6-apps.patch
Patch40: openssl-1.0.0a-fips.patch
Patch41: openssl-1.0.0-beta3-fipscheck.patch
Patch43: openssl-1.0.0a-fipsmode.patch
Patch44: openssl-1.0.0-beta3-fipsrng.patch
Patch45: openssl-0.9.8j-env-nozlib.patch
Patch47: openssl-1.0.0-beta5-readme-warning.patch
Patch49: openssl-1.0.0-beta4-algo-doc.patch
Patch50: openssl-1.0.0-beta4-dtls1-abi.patch
Patch51: openssl-1.0.0d-version.patch
Patch52: openssl-1.0.0b-aesni.patch
Patch53: openssl-1.0.0-name-hash.patch
Patch54: openssl-1.0.0c-speed-fips.patch
Patch55: openssl-1.0.0c-apps-ipv6listen.patch
Patch56: openssl-1.0.0c-rsa-x931.patch
Patch57: openssl-1.0.0c-fips186-3.patch
Patch58: openssl-1.0.0c-fips-md5-allow.patch
Patch59: openssl-1.0.0c-pkcs12-fips-default.patch
# Backported fixes including security fixes

License: OpenSSL
Group: System Environment/Libraries
URL: http://www.openssl.org/
BuildRoot: %{_tmppath}/%{name}-%{version}-root
BuildRequires: mktemp, krb5-devel, perl, sed, zlib-devel, /usr/bin/cmp
BuildRequires: /usr/bin/rename
Requires: mktemp, ca-certificates >= 2008-5

%description
The OpenSSL toolkit provides support for secure communications between
machines. OpenSSL includes a certificate management tool and shared
libraries which provide various cryptographic algorithms and
protocols.

%package devel
Summary: Files for development of applications which will use OpenSSL
Group: Development/Libraries
Requires: %{name} = %{version}-%{release}, krb5-devel, zlib-devel
Requires: pkgconfig

%description devel
OpenSSL is a toolkit for supporting cryptography. The openssl-devel
package contains include files needed to develop applications which
support various cryptographic algorithms and protocols.

%package static
Summary:  Libraries for static linking of applications which will use OpenSSL
Group: Development/Libraries
Requires: %{name}-devel = %{version}-%{release}

%description static
OpenSSL is a toolkit for supporting cryptography. The openssl-static
package contains static libraries needed for static linking of
applications which support various cryptographic algorithms and
protocols.

%package perl
Summary: Perl scripts provided with OpenSSL
Group: Applications/Internet
Requires: perl
Requires: %{name} = %{version}-%{release}

%description perl
OpenSSL is a toolkit for supporting cryptography. The openssl-perl
package provides Perl scripts for converting certificates and keys
from other formats to the formats used by the OpenSSL toolkit.

%prep
%setup -q -n %{name}-%{version}

%patch0 -p1 -b .redhat
%patch1 -p1 -b .defaults
%patch3 -p1 -b .soversion
%patch4 -p1 -b .enginesdir
%patch5 -p1 -b .no-rpath
%patch6 -p1 -b .use-localhost
%patch7 -p1 -b .timezone

%patch23 -p1 -b .default-paths
%patch24 -p1 -b .bad-mime
%patch25 -p1 -b .manfix

%patch32 -p1 -b .ia64
%patch33 -p1 -b .ca-dir
%patch34 -p1 -b .x509
%patch35 -p1 -b .version-add-engines
%patch38 -p1 -b .cipher-change
%patch39 -p1 -b .ipv6-apps
%patch40 -p1 -b .fips
%patch41 -p1 -b .fipscheck
%patch43 -p1 -b .fipsmode
%patch44 -p1 -b .fipsrng
%patch45 -p1 -b .env-nozlib
%patch47 -p1 -b .warning
%patch49 -p1 -b .algo-doc
%patch50 -p1 -b .dtls1-abi
%patch51 -p1 -b .version
%patch52 -p1 -b .aesni
%patch53 -p1 -b .name-hash
%patch54 -p1 -b .spfips
%patch55 -p1 -b .ipv6listen
%patch56 -p1 -b .x931
%patch57 -p1 -b .fips186-3
%patch58 -p1 -b .md5-allow
%patch59 -p1 -b .fips-default

# Modify the various perl scripts to reference perl in the right location.
perl util/perlpath.pl `dirname %{__perl}`

# Generate a table with the compile settings for my perusal.
touch Makefile
make TABLE PERL=%{__perl}

%build
# Figure out which flags we want to use.
# default
sslarch=%{_os}-%{_arch}
%ifarch %ix86
sslarch=linux-elf
if ! echo %{_target} | grep -q i686 ; then
sslflags="no-asm 386"
fi
%endif
%ifarch sparcv9
sslarch=linux-sparcv9
sslflags=no-asm
%endif
%ifarch sparc64
sslarch=linux64-sparcv9
sslflags=no-asm
%endif
%ifarch alpha alphaev56 alphaev6 alphaev67
sslarch=linux-alpha-gcc
%endif
%ifarch s390 sh3eb sh4eb
sslarch="linux-generic32 -DB_ENDIAN"
%endif
%ifarch s390x
sslarch="linux-s390x"
%endif
%ifarch %{arm} sh3 sh4
sslarch=linux-generic32
%endif
# ia64, x86_64, ppc, ppc64 are OK by default
# Configure the build tree.  Override OpenSSL defaults with known-good defaults
# usable on all platforms.  The Configure script already knows to use -fPIC and
# RPM_OPT_FLAGS, so we can skip specifiying them here.
./Configure \
--prefix=/usr --openssldir=%{_sysconfdir}/pki/tls ${sslflags} \
zlib enable-camellia enable-seed enable-tlsext enable-rfc3779 \
enable-cms enable-md2 no-idea no-mdc2 no-rc5 \
--with-krb5-flavor=MIT --enginesdir=%{_libdir}/openssl/engines \
--with-krb5-dir=/usr shared  ${sslarch} fips

# Add -Wa,--noexecstack here so that libcrypto's assembler modules will be
# marked as not requiring an executable stack.
RPM_OPT_FLAGS="$RPM_OPT_FLAGS -Wa,--noexecstack"
make depend
make all

# Generate hashes for the included certs.
make rehash

# Overwrite FIPS README
cp -f %{SOURCE11} .

%check
# Verify that what was compiled actually works.

# We must revert patch33 before tests otherwise they will fail
patch -p1 -R < %{PATCH33}

LD_LIBRARY_PATH=`pwd`${LD_LIBRARY_PATH:+:${LD_LIBRARY_PATH}}
export LD_LIBRARY_PATH
make -C test apps tests
%{__cc} -o openssl-thread-test \
`krb5-config --cflags` \
-I./include \
$RPM_OPT_FLAGS \
%{SOURCE8} \
-L. \
-lssl -lcrypto \
`krb5-config --libs` \
-lpthread -lz -ldl
./openssl-thread-test --threads %{thread_test_threads}

# Add generation of HMAC checksum of the final stripped library
%define __spec_install_post \
   %{?__debug_package:%{__debug_install_post}} \
   %{__arch_install_post} \
   %{__os_install_post} \
   crypto/fips/fips_standalone_sha1 $RPM_BUILD_ROOT/%{_lib}/libcrypto.so.%{version} >$RPM_BUILD_ROOT/%{_lib}/.libcrypto.so.%{version}.hmac \
   ln -sf .libcrypto.so.%{version}.hmac $RPM_BUILD_ROOT/%{_lib}/.libcrypto.so.%{soversion}.hmac \
   crypto/fips/fips_standalone_sha1 $RPM_BUILD_ROOT%{_libdir}/libssl.so.%{version} >$RPM_BUILD_ROOT%{_libdir}/.libssl.so.%{version}.hmac \
   ln -sf .libssl.so.%{version}.hmac $RPM_BUILD_ROOT%{_libdir}/.libssl.so.%{soversion}.hmac \
%{nil}

%install
[ "$RPM_BUILD_ROOT" != "/" ] && rm -rf $RPM_BUILD_ROOT
# Install OpenSSL.
install -d $RPM_BUILD_ROOT{%{_bindir},%{_includedir},%{_libdir},%{_mandir},%{_libdir}/openssl}
make INSTALL_PREFIX=$RPM_BUILD_ROOT install
make INSTALL_PREFIX=$RPM_BUILD_ROOT install_docs
mv $RPM_BUILD_ROOT%{_libdir}/engines $RPM_BUILD_ROOT%{_libdir}/openssl
mv $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/man/* $RPM_BUILD_ROOT%{_mandir}/
rmdir $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/man
rename so.%{soversion} so.%{version} $RPM_BUILD_ROOT%{_libdir}/*.so.%{soversion}
mkdir $RPM_BUILD_ROOT/%{_lib}
mv $RPM_BUILD_ROOT%{_libdir}/libcrypto.so.%{version} $RPM_BUILD_ROOT/%{_lib}
for lib in $RPM_BUILD_ROOT%{_libdir}/*.so.%{version} ; do
chmod 755 ${lib}
ln -s -f `basename ${lib}` $RPM_BUILD_ROOT%{_libdir}/`basename ${lib} .%{version}`
ln -s -f `basename ${lib}` $RPM_BUILD_ROOT%{_libdir}/`basename ${lib} .%{version}`.%{soversion}
done
for lib in $RPM_BUILD_ROOT/%{_lib}/*.so.%{version} ; do
chmod 755 ${lib}
ln -s -f ../../%{_lib}/`basename ${lib}` $RPM_BUILD_ROOT%{_libdir}/`basename ${lib} .%{version}`
ln -s -f `basename ${lib}` $RPM_BUILD_ROOT/%{_lib}/`basename ${lib} .%{version}`.%{soversion}
done

# Install a makefile for generating keys and self-signed certs, and a script
# for generating them on the fly.
mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/certs
install -m644 %{SOURCE2} $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/certs/Makefile
install -m755 %{SOURCE6} $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/certs/make-dummy-cert

# Make sure we actually include the headers we built against.
for header in $RPM_BUILD_ROOT%{_includedir}/openssl/* ; do
if [ -f ${header} -a -f include/openssl/$(basename ${header}) ] ; then
	install -m644 include/openssl/`basename ${header}` ${header}
fi
done

# Rename man pages so that they don't conflict with other system man pages.
pushd $RPM_BUILD_ROOT%{_mandir}
for manpage in man*/* ; do
if [ -L ${manpage} ]; then
	TARGET=`ls -l ${manpage} | awk '{ print $NF }'`
	ln -snf ${TARGET}ssl ${manpage}ssl
	rm -f ${manpage}
else
	mv ${manpage} ${manpage}ssl
fi
done
for conflict in passwd rand ; do
rename ${conflict} ssl${conflict} man*/${conflict}*
done
popd

# Pick a CA script.
pushd  $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/misc
mv CA.sh CA
popd

mkdir -m755 $RPM_BUILD_ROOT%{_sysconfdir}/pki/CA
mkdir -m700 $RPM_BUILD_ROOT%{_sysconfdir}/pki/CA/private
mkdir -m755 $RPM_BUILD_ROOT%{_sysconfdir}/pki/CA/certs
mkdir -m755 $RPM_BUILD_ROOT%{_sysconfdir}/pki/CA/crl
mkdir -m755 $RPM_BUILD_ROOT%{_sysconfdir}/pki/CA/newcerts

# Ensure the openssl.cnf timestamp is identical across builds to avoid
# mulitlib conflicts and unnecessary renames on upgrade
touch -r %{SOURCE2} $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/openssl.cnf

# Determine which arch opensslconf.h is going to try to #include.
basearch=%{_arch}
%ifarch %{ix86}
basearch=i386
%endif
%ifarch sparcv9
basearch=sparc
%endif
%ifarch sparc64
basearch=sparc64
%endif

%ifarch %{multilib_arches}
# Do an opensslconf.h switcheroo to avoid file conflicts on systems where you
# can have both a 32- and 64-bit version of the library, and they each need
# their own correct-but-different versions of opensslconf.h to be usable.
install -m644 %{SOURCE10} \
$RPM_BUILD_ROOT/%{_prefix}/include/openssl/opensslconf-${basearch}.h
cat $RPM_BUILD_ROOT/%{_prefix}/include/openssl/opensslconf.h >> \
$RPM_BUILD_ROOT/%{_prefix}/include/openssl/opensslconf-${basearch}.h
install -m644 %{SOURCE9} \
$RPM_BUILD_ROOT/%{_prefix}/include/openssl/opensslconf.h
%endif

# Remove unused files from upstream fips support
rm -rf $RPM_BUILD_ROOT/%{_bindir}/openssl_fips_fingerprint
rm -rf $RPM_BUILD_ROOT/%{_libdir}/fips_premain.*
rm -rf $RPM_BUILD_ROOT/%{_libdir}/fipscanister.*

%clean
[ "$RPM_BUILD_ROOT" != "/" ] && rm -rf $RPM_BUILD_ROOT

%files
%defattr(-,root,root)
%doc FAQ LICENSE CHANGES NEWS INSTALL README
%doc doc/c-indentation.el doc/openssl.txt
%doc doc/openssl_button.html doc/openssl_button.gif
%doc doc/ssleay.txt
%doc README.FIPS
%dir %{_sysconfdir}/pki/tls
%dir %{_sysconfdir}/pki/tls/certs
%{_sysconfdir}/pki/tls/certs/make-dummy-cert
%{_sysconfdir}/pki/tls/certs/Makefile
%dir %{_sysconfdir}/pki/tls/misc
%{_sysconfdir}/pki/tls/misc/CA
%dir %{_sysconfdir}/pki/CA
%dir %{_sysconfdir}/pki/CA/private
%dir %{_sysconfdir}/pki/CA/certs
%dir %{_sysconfdir}/pki/CA/crl
%dir %{_sysconfdir}/pki/CA/newcerts
%{_sysconfdir}/pki/tls/misc/c_*
%{_sysconfdir}/pki/tls/private

%config(noreplace) %{_sysconfdir}/pki/tls/openssl.cnf

%attr(0755,root,root) %{_bindir}/openssl
%attr(0755,root,root) /%{_lib}/libcrypto.so.%{version}
%attr(0755,root,root) /%{_lib}/libcrypto.so.%{soversion}
%attr(0755,root,root) %{_libdir}/libssl.so.%{version}
%attr(0755,root,root) %{_libdir}/libssl.so.%{soversion}
%attr(0644,root,root) /%{_lib}/.libcrypto.so.*.hmac
%attr(0644,root,root) %{_libdir}/.libssl.so.*.hmac
%attr(0755,root,root) %{_libdir}/openssl
%attr(0644,root,root) %{_mandir}/man1*/[ABD-Zabcd-z]*
%attr(0644,root,root) %{_mandir}/man5*/*
%attr(0644,root,root) %{_mandir}/man7*/*

%files devel
%defattr(-,root,root)
%{_prefix}/include/openssl
%attr(0755,root,root) %{_libdir}/*.so
%attr(0644,root,root) %{_mandir}/man3*/*
%attr(0644,root,root) %{_libdir}/pkgconfig/*.pc

%files static
%defattr(-,root,root)
%attr(0644,root,root) %{_libdir}/*.a

%files perl
%defattr(-,root,root)
%attr(0755,root,root) %{_bindir}/c_rehash
%attr(0644,root,root) %{_mandir}/man1*/*.pl*
%{_sysconfdir}/pki/tls/misc/*.pl
%{_sysconfdir}/pki/tls/misc/tsget

%post -p /sbin/ldconfig

%postun -p /sbin/ldconfig

%changelog
* Thu Feb 10 2011 Tomas Mraz <[email protected]> 1.0.0d-1
- new upstream release fixing CVE-2011-0014 (OCSP stapling vulnerability)

* Tue Feb 08 2011 Fedora Release Engineering <[email protected]> - 1.0.0c-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild

* Fri Feb  4 2011 Tomas Mraz <[email protected]> 1.0.0c-3
- add -x931 parameter to openssl genrsa command to use the ANSI X9.31
 key generation method
- use FIPS-186-3 method for DSA parameter generation
- add OPENSSL_FIPS_NON_APPROVED_MD5_ALLOW environment variable
 to allow using MD5 when the system is in the maintenance state
 even if the /proc fips flag is on
- make openssl pkcs12 command work by default in the FIPS mode

* Mon Jan 24 2011 Tomas Mraz <[email protected]> 1.0.0c-2
- listen on ipv6 wildcard in s_server so we accept connections
 from both ipv4 and ipv6 (#601612)
- fix openssl speed command so it can be used in the FIPS mode
 with FIPS allowed ciphers

* Fri Dec  3 2010 Tomas Mraz <[email protected]> 1.0.0c-1
- new upstream version fixing CVE-2010-4180

* Tue Nov 23 2010 Tomas Mraz <[email protected]> 1.0.0b-3
- replace the revert for the s390x bignum asm routines with
 fix from upstream

* Mon Nov 22 2010 Tomas Mraz <[email protected]> 1.0.0b-2
- revert upstream change in s390x bignum asm routines

* Tue Nov 16 2010 Tomas Mraz <[email protected]> 1.0.0b-1
- new upstream version fixing CVE-2010-3864 (#649304)

* Tue Sep  7 2010 Tomas Mraz <[email protected]> 1.0.0a-3
- make SHLIB_VERSION reflect the library suffix

* Wed Jun 30 2010 Tomas Mraz <[email protected]> 1.0.0a-2
- openssl man page fix (#609484)

* Fri Jun  4 2010 Tomas Mraz <[email protected]> 1.0.0a-1
- new upstream patch release, fixes CVE-2010-0742 (#598738)
 and CVE-2010-1633 (#598732)

* Wed May 19 2010 Tomas Mraz <[email protected]> 1.0.0-5
- pkgconfig files now contain the correct libdir (#593723)

* Tue May 18 2010 Tomas Mraz <[email protected]> 1.0.0-4
- make CA dir readable - the private keys are in private subdir (#584810)

* Fri Apr  9 2010 Tomas Mraz <[email protected]> 1.0.0-3
- a few fixes from upstream CVS
- move libcrypto to /lib (#559953)

* Tue Apr  6 2010 Tomas Mraz <[email protected]> 1.0.0-2
- set UTC timezone on pod2man run (#578842)
- make X509_NAME_hash_old work in FIPS mode

* Tue Mar 30 2010 Tomas Mraz <[email protected]> 1.0.0-1
- update to final 1.0.0 upstream release

* Tue Feb 16 2010 Tomas Mraz <[email protected]> 1.0.0-0.22.beta5
- make TLS work in the FIPS mode

* Fri Feb 12 2010 Tomas Mraz <[email protected]> 1.0.0-0.21.beta5
- gracefully handle zero length in assembler implementations of
 OPENSSL_cleanse (#564029)
- do not fail in s_server if client hostname not resolvable (#561260)

* Wed Jan 20 2010 Tomas Mraz <[email protected]> 1.0.0-0.20.beta5
- new upstream release

* Thu Jan 14 2010 Tomas Mraz <[email protected]> 1.0.0-0.19.beta4
- fix CVE-2009-4355 - leak in applications incorrectly calling
 CRYPTO_free_all_ex_data() before application exit (#546707)
- upstream fix for future TLS protocol version handling

* Wed Jan 13 2010 Tomas Mraz <[email protected]> 1.0.0-0.18.beta4
- add support for Intel AES-NI

* Thu Jan  7 2010 Tomas Mraz <[email protected]> 1.0.0-0.17.beta4
- upstream fix compression handling on session resumption
- various null checks and other small fixes from upstream
- upstream changes for the renegotiation info according to the latest draft

* Mon Nov 23 2009 Tomas Mraz <[email protected]> 1.0.0-0.16.beta4
- fix non-fips mingw build (patch by Kalev Lember)
- add IPV6 fix for DTLS

* Fri Nov 20 2009 Tomas Mraz <[email protected]> 1.0.0-0.15.beta4
- add better error reporting for the unsafe renegotiation

* Fri Nov 20 2009 Tomas Mraz <[email protected]> 1.0.0-0.14.beta4
- fix build on s390x

* Wed Nov 18 2009 Tomas Mraz <[email protected]> 1.0.0-0.13.beta4
- disable enforcement of the renegotiation extension on the client (#537962)
- add fixes from the current upstream snapshot

* Fri Nov 13 2009 Tomas Mraz <[email protected]> 1.0.0-0.12.beta4
- keep the beta status in version number at 3 so we do not have to rebuild
 openssh and possibly other dependencies with too strict version check

* Thu Nov 12 2009 Tomas Mraz <[email protected]> 1.0.0-0.11.beta4
- update to new upstream version, no soname bump needed
- fix CVE-2009-3555 - note that the fix is bypassed if SSL_OP_ALL is used
 so the compatibility with unfixed clients is not broken. The
 protocol extension is also not final.

* Fri Oct 16 2009 Tomas Mraz <[email protected]> 1.0.0-0.10.beta3
- fix use of freed memory if SSL_CTX_free() is called before
 SSL_free() (#521342)

* Thu Oct  8 2009 Tomas Mraz <[email protected]> 1.0.0-0.9.beta3
- fix typo in DTLS1 code (#527015)
- fix leak in error handling of d2i_SSL_SESSION()

* Wed Sep 30 2009 Tomas Mraz <[email protected]> 1.0.0-0.8.beta3
- fix RSA and DSA FIPS selftests
- reenable fixed x86_64 camellia assembler code (#521127)

* Fri Sep  4 2009 Tomas Mraz <[email protected]> 1.0.0-0.7.beta3
- temporarily disable x86_64 camellia assembler code (#521127)

* Mon Aug 31 2009 Tomas Mraz <[email protected]> 1.0.0-0.6.beta3
- fix openssl dgst -dss1 (#520152)

* Wed Aug 26 2009 Tomas Mraz <[email protected]> 1.0.0-0.5.beta3
- drop the compat symlink hacks

* Sat Aug 22 2009 Tomas Mraz <[email protected]> 1.0.0-0.4.beta3
- constify SSL_CIPHER_description()

* Fri Aug 21 2009 Tomas Mraz <[email protected]> 1.0.0-0.3.beta3
- fix WWW:Curl:Easy reference in tsget

* Fri Aug 21 2009 Tomas Mraz <[email protected]> 1.0.0-0.2.beta3
- enable MD-2

* Thu Aug 20 2009 Tomas Mraz <[email protected]> 1.0.0-0.1.beta3
- update to new major upstream release

* Sat Jul 25 2009 Fedora Release Engineering <[email protected]> - 0.9.8k-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild

* Wed Jul 22 2009 Bill Nottingham <[email protected]>
- do not build special 'optimized' versions for i686, as that's the base
 arch in Fedora now

* Tue Jun 30 2009 Tomas Mraz <[email protected]> 0.9.8k-6
- abort if selftests failed and random number generator is polled
- mention EVP_aes and EVP_sha2xx routines in the manpages
- add README.FIPS
- make CA dir absolute path (#445344)
- change default length for RSA key generation to 2048 (#484101)

* Thu May 21 2009 Tomas Mraz <[email protected]> 0.9.8k-5
- fix CVE-2009-1377 CVE-2009-1378 CVE-2009-1379
 (DTLS DoS problems) (#501253, #501254, #501572)

* Tue Apr 21 2009 Tomas Mraz <[email protected]> 0.9.8k-4
- support compatibility DTLS mode for CISCO AnyConnect (#464629)

* Fri Apr 17 2009 Tomas Mraz <[email protected]> 0.9.8k-3
- correct the SHLIB_VERSION define

* Wed Apr 15 2009 Tomas Mraz <[email protected]> 0.9.8k-2
- add support for multiple CRLs with same subject
- load only dynamic engine support in FIPS mode

* Thu Mar 25 2009 Tomas Mraz <[email protected]> 0.9.8k-1
- update to new upstream release (minor bug fixes, security
 fixes and machine code optimizations only)

* Thu Mar 19 2009 Tomas Mraz <[email protected]> 0.9.8j-10
- move libraries to /usr/lib (#239375)

* Fri Mar 13 2009 Tomas Mraz <[email protected]> 0.9.8j-9
- add a static subpackage

* Thu Feb 26 2009 Fedora Release Engineering <[email protected]> - 0.9.8j-8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild

* Mon Feb  2 2009 Tomas Mraz <[email protected]> 0.9.8j-7
- must also verify checksum of libssl.so in the FIPS mode
- obtain the seed for FIPS rng directly from the kernel device
- drop the temporary symlinks

* Mon Jan 26 2009 Tomas Mraz <[email protected]> 0.9.8j-6
- drop the temporary triggerpostun and symlinking in post
- fix the pkgconfig files and drop the unnecessary buildrequires
 on pkgconfig as it is a rpmbuild dependency (#481419)

* Sat Jan 16 2009 Tomas Mraz <[email protected]> 0.9.8j-5
- add temporary triggerpostun to reinstate the symlinks

* Sat Jan 16 2009 Tomas Mraz <[email protected]> 0.9.8j-4
- no pairwise key tests in non-fips mode (#479817)

* Fri Jan 16 2009 Tomas Mraz <[email protected]> 0.9.8j-3
- even more robust test for the temporary symlinks

* Fri Jan 16 2009 Tomas Mraz <[email protected]> 0.9.8j-2
- try to ensure the temporary symlinks exist

* Thu Jan 15 2009 Tomas Mraz <[email protected]> 0.9.8j-1
- new upstream version with necessary soname bump (#455753)
- temporarily provide symlink to old soname to make it possible to rebuild
 the dependent packages in rawhide
- add eap-fast support (#428181)
- add possibility to disable zlib by setting
- add fips mode support for testing purposes
- do not null dereference on some invalid smime files
- add buildrequires pkgconfig (#479493)

* Sun Aug 10 2008 Tomas Mraz <[email protected]> 0.9.8g-11
- do not add tls extensions to server hello for SSLv3 either

* Mon Jun  2 2008 Joe Orton <[email protected]> 0.9.8g-10
- move root CA bundle to ca-certificates package

* Wed May 28 2008 Tomas Mraz <[email protected]> 0.9.8g-9
- fix CVE-2008-0891 - server name extension crash (#448492)
- fix CVE-2008-1672 - server key exchange message omit crash (#448495)

* Tue May 27 2008 Tomas Mraz <[email protected]> 0.9.8g-8
- super-H arch support
- drop workaround for bug 199604 as it should be fixed in gcc-4.3

* Mon May 19 2008 Tom "spot" Callaway <[email protected]> 0.9.8g-7
- sparc handling

* Mon Mar 10 2008 Joe Orton <[email protected]> 0.9.8g-6
- update to new root CA bundle from mozilla.org (r1.45)

* Wed Feb 20 2008 Fedora Release Engineering <[email protected]> - 0.9.8g-5
- Autorebuild for GCC 4.3

* Thu Jan 24 2008 Tomas Mraz <[email protected]> 0.9.8g-4
- merge review fixes (#226220)
- adjust the SHLIB_VERSION_NUMBER to reflect library name (#429846)

* Thu Dec 13 2007 Tomas Mraz <[email protected]> 0.9.8g-3
- set default paths when no explicit paths are set (#418771)
- do not add tls extensions to client hello for SSLv3 (#422081)

* Tue Dec  4 2007 Tomas Mraz <[email protected]> 0.9.8g-2
- enable some new crypto algorithms and features
- add some more important bug fixes from openssl CVS

* Mon Dec  3 2007 Tomas Mraz <[email protected]> 0.9.8g-1
- update to latest upstream release, SONAME bumped to 7

* Mon Oct 15 2007 Joe Orton <[email protected]> 0.9.8b-17
- update to new CA bundle from mozilla.org

* Fri Oct 12 2007 Tomas Mraz <[email protected]> 0.9.8b-16
- fix CVE-2007-5135 - off-by-one in SSL_get_shared_ciphers (#309801)
- fix CVE-2007-4995 - out of order DTLS fragments buffer overflow (#321191)
- add alpha sub-archs (#296031)

* Tue Aug 21 2007 Tomas Mraz <[email protected]> 0.9.8b-15
- rebuild

* Fri Aug  3 2007 Tomas Mraz <[email protected]> 0.9.8b-14
- use localhost in testsuite, hopefully fixes slow build in koji
- CVE-2007-3108 - fix side channel attack on private keys (#250577)
- make ssl session cache id matching strict (#233599)

* Wed Jul 25 2007 Tomas Mraz <[email protected]> 0.9.8b-13
- allow building on ARM architectures (#245417)
- use reference timestamps to prevent multilib conflicts (#218064)
- -devel package must require pkgconfig (#241031)

* Mon Dec 11 2006 Tomas Mraz <[email protected]> 0.9.8b-12
- detect duplicates in add_dir properly (#206346)

* Thu Nov 30 2006 Tomas Mraz <[email protected]> 0.9.8b-11
- the previous change still didn't make X509_NAME_cmp transitive

* Thu Nov 23 2006 Tomas Mraz <[email protected]> 0.9.8b-10
- make X509_NAME_cmp transitive otherwise certificate lookup
 is broken (#216050)

* Thu Nov  2 2006 Tomas Mraz <[email protected]> 0.9.8b-9
- aliasing bug in engine loading, patch by IBM (#213216)

* Mon Oct  2 2006 Tomas Mraz <[email protected]> 0.9.8b-8
- CVE-2006-2940 fix was incorrect (#208744)

* Mon Sep 25 2006 Tomas Mraz <[email protected]> 0.9.8b-7
- fix CVE-2006-2937 - mishandled error on ASN.1 parsing (#207276)
- fix CVE-2006-2940 - parasitic public keys DoS (#207274)
- fix CVE-2006-3738 - buffer overflow in SSL_get_shared_ciphers (#206940)
- fix CVE-2006-4343 - sslv2 client DoS (#206940)

* Tue Sep  5 2006 Tomas Mraz <[email protected]> 0.9.8b-6
- fix CVE-2006-4339 - prevent attack on PKCS#1 v1.5 signatures (#205180)

* Wed Aug  2 2006 Tomas Mraz <[email protected]> - 0.9.8b-5
- set buffering to none on stdio/stdout FILE when bufsize is set (#200580)
 patch by IBM

* Fri Jul 28 2006 Alexandre Oliva <[email protected]> - 0.9.8b-4.1
- rebuild with new binutils (#200330)

* Fri Jul 21 2006 Tomas Mraz <[email protected]> - 0.9.8b-4
- add a temporary workaround for sha512 test failure on s390 (#199604)

* Thu Jul 20 2006 Tomas Mraz <[email protected]>
- add ipv6 support to s_client and s_server (by Jan Pazdziora) (#198737)
- add patches for BN threadsafety, AES cache collision attack hazard fix and
 pkcs7 code memleak fix from upstream CVS

* Wed Jul 12 2006 Jesse Keating <[email protected]> - 0.9.8b-3.1
- rebuild

* Wed Jun 21 2006 Tomas Mraz <[email protected]> - 0.9.8b-3
- dropped libica and ica engine from build

* Wed Jun 21 2006 Joe Orton <[email protected]>
- update to new CA bundle from mozilla.org; adds CA certificates
 from netlock.hu and startcom.org

* Mon Jun  5 2006 Tomas Mraz <[email protected]> - 0.9.8b-2
- fixed a few rpmlint warnings
- better fix for #173399 from upstream
- upstream fix for pkcs12

* Thu May 11 2006 Tomas Mraz <[email protected]> - 0.9.8b-1
- upgrade to new version, stays ABI compatible
- there is no more linux/config.h (it was empty anyway)

* Tue Apr  4 2006 Tomas Mraz <[email protected]> - 0.9.8a-6
- fix stale open handles in libica (#177155)
- fix build if 'rand' or 'passwd' in buildroot path (#178782)
- initialize VIA Padlock engine (#186857)

* Fri Feb 10 2006 Jesse Keating <[email protected]> - 0.9.8a-5.2
- bump again for double-long bug on ppc(64)

* Tue Feb 07 2006 Jesse Keating <[email protected]> - 0.9.8a-5.1
- rebuilt for new gcc4.1 snapshot and glibc changes

* Thu Dec 15 2005 Tomas Mraz <[email protected]> 0.9.8a-5
- don't include SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG
 in SSL_OP_ALL (#175779)

* Fri Dec 09 2005 Jesse Keating <[email protected]>
- rebuilt

* Tue Nov 29 2005 Tomas Mraz <[email protected]> 0.9.8a-4
- fix build (-lcrypto was erroneusly dropped) of the updated libica
- updated ICA engine to 1.3.6-rc3

* Tue Nov 22 2005 Tomas Mraz <[email protected]> 0.9.8a-3
- disable builtin compression methods for now until they work
 properly (#173399)

* Wed Nov 16 2005 Tomas Mraz <[email protected]> 0.9.8a-2
- don't set -rpath for openssl binary

* Tue Nov  8 2005 Tomas Mraz <[email protected]> 0.9.8a-1
- new upstream version
- patches partially renumbered

* Fri Oct 21 2005 Tomas Mraz <[email protected]> 0.9.7f-11
- updated IBM ICA engine library and patch to latest upstream version

* Wed Oct 12 2005 Tomas Mraz <[email protected]> 0.9.7f-10
- fix CAN-2005-2969 - remove SSL_OP_MSIE_SSLV2_RSA_PADDING which
 disables the countermeasure against man in the middle attack in SSLv2
 (#169863)
- use sha1 as default for CA and cert requests - CAN-2005-2946 (#169803)

* Tue Aug 23 2005 Tomas Mraz <[email protected]> 0.9.7f-9
- add *.so.soversion as symlinks in /lib (#165264)
- remove unpackaged symlinks (#159595)
- fixes from upstream (constant time fixes for DSA,
 bn assembler div on ppc arch, initialize memory on realloc)

* Thu Aug 11 2005 Phil Knirsch <[email protected]> 0.9.7f-8
- Updated ICA engine IBM patch to latest upstream version.

* Thu May 19 2005 Tomas Mraz <[email protected]> 0.9.7f-7
- fix CAN-2005-0109 - use constant time/memory access mod_exp
 so bits of private key aren't leaked by cache eviction (#157631)
- a few more fixes from upstream 0.9.7g

* Wed Apr 27 2005 Tomas Mraz <[email protected]> 0.9.7f-6
- use poll instead of select in rand (#128285)
- fix Makefile.certificate to point to /etc/pki/tls
- change the default string mask in ASN1 to PrintableString+UTF8String

* Mon Apr 25 2005 Joe Orton <[email protected]> 0.9.7f-5
- update to revision 1.37 of Mozilla CA bundle

* Thu Apr 21 2005 Tomas Mraz <[email protected]> 0.9.7f-4
- move certificates to _sysconfdir/pki/tls (#143392)
- move CA directories to _sysconfdir/pki/CA
- patch the CA script and the default config so it points to the
 CA directories

* Fri Apr  1 2005 Tomas Mraz <[email protected]> 0.9.7f-3
- uninitialized variable mustn't be used as input in inline
 assembly
- reenable the x86_64 assembly again

* Thu Mar 31 2005 Tomas Mraz <[email protected]> 0.9.7f-2
- add back RC4_CHAR on ia64 and x86_64 so the ABI isn't broken
- disable broken bignum assembly on x86_64

* Wed Mar 30 2005 Tomas Mraz <[email protected]> 0.9.7f-1
- reenable optimizations on ppc64 and assembly code on ia64
- upgrade to new upstream version (no soname bump needed)
- disable thread test - it was testing the backport of the
 RSA blinding - no longer needed
- added support for changing serial number to
 Makefile.certificate (#151188)
- make ca-bundle.crt a config file (#118903)

* Tue Mar  1 2005 Tomas Mraz <[email protected]> 0.9.7e-3
- libcrypto shouldn't depend on libkrb5 (#135961)

* Mon Feb 28 2005 Tomas Mraz <[email protected]> 0.9.7e-2
- rebuild

* Mon Feb 28 2005 Tomas Mraz <[email protected]> 0.9.7e-1
- new upstream source, updated patches
- added patch so we are hopefully ABI compatible with upcoming
 0.9.7f

* Thu Feb 10 2005 Tomas Mraz <[email protected]>
- Support UTF-8 charset in the Makefile.certificate (#134944)
- Added cmp to BuildPrereq

* Thu Jan 27 2005 Joe Orton <[email protected]> 0.9.7a-46
- generate new ca-bundle.crt from Mozilla certdata.txt (revision 1.32)

* Thu Dec 23 2004 Phil Knirsch <[email protected]> 0.9.7a-45
- Fixed and updated libica-1.3.4-urandom.patch patch (#122967)

* Fri Nov 19 2004 Nalin Dahyabhai <[email protected]> 0.9.7a-44
- rebuild

* Fri Nov 19 2004 Nalin Dahyabhai <[email protected]> 0.9.7a-43
- rebuild

* Fri Nov 19 2004 Nalin Dahyabhai <[email protected]> 0.9.7a-42
- rebuild

* Fri Nov 19 2004 Nalin Dahyabhai <[email protected]> 0.9.7a-41
- remove der_chop, as upstream cvs has done (CAN-2004-0975, #140040)

* Tue Oct 05 2004 Phil Knirsch <[email protected]> 0.9.7a-40
- Include latest libica version with important bugfixes

* Tue Jun 15 2004 Elliot Lee <[email protected]>
- rebuilt

* Mon Jun 14 2004 Phil Knirsch <[email protected]> 0.9.7a-38
- Updated ICA engine IBM patch to latest upstream version.

* Mon Jun  7 2004 Nalin Dahyabhai <[email protected]> 0.9.7a-37
- build for linux-alpha-gcc instead of alpha-gcc on alpha (Jeff Garzik)

* Tue May 25 2004 Nalin Dahyabhai <[email protected]> 0.9.7a-36
- handle %%{_arch}=i486/i586/i686/athlon cases in the intermediate
 header (#124303)

* Thu Mar 25 2004 Joe Orton <[email protected]> 0.9.7a-35
- add security fixes for CAN-2004-0079, CAN-2004-0112

* Tue Mar 16 2004 Phil Knirsch <[email protected]>
- Fixed libica filespec.

* Thu Mar 10 2004 Nalin Dahyabhai <[email protected]> 0.9.7a-34
- ppc/ppc64 define __powerpc__/__powerpc64__, not __ppc__/__ppc64__, fix
 the intermediate header

* Wed Mar 10 2004 Nalin Dahyabhai <[email protected]> 0.9.7a-33
- add an intermediate <openssl/opensslconf.h> which points to the right
 arch-specific opensslconf.h on multilib arches

* Tue Mar 02 2004 Elliot Lee <[email protected]>
- rebuilt

* Thu Feb 26 2004 Phil Knirsch <[email protected]> 0.9.7a-32
- Updated libica to latest upstream version 1.3.5.

* Tue Feb 17 2004 Phil Knirsch <[email protected]> 0.9.7a-31
- Update ICA crypto engine patch from IBM to latest version.

* Fri Feb 13 2004 Elliot Lee <[email protected]>
- rebuilt

* Fri Feb 13 2004 Phil Knirsch <[email protected]> 0.9.7a-29
- rebuilt

* Wed Feb 11 2004 Phil Knirsch <[email protected]> 0.9.7a-28
- Fixed libica build.

* Wed Feb  4 2004 Nalin Dahyabhai <[email protected]>
- add "-ldl" to link flags added for Linux-on-ARM (#99313)

* Wed Feb  4 2004 Joe Orton <[email protected]> 0.9.7a-27
- updated ca-bundle.crt: removed expired GeoTrust roots, added
 freessl.com root, removed trustcenter.de Class 0 root

* Sun Nov 30 2003 Tim Waugh <[email protected]> 0.9.7a-26
- Fix link line for libssl (bug #111154).

* Fri Oct 24 2003 Nalin Dahyabhai <[email protected]> 0.9.7a-25
- add dependency on zlib-devel for the -devel package, which depends on zlib
 symbols because we enable zlib for libssl (#102962)

* Fri Oct 24 2003 Phil Knirsch <[email protected]> 0.9.7a-24
- Use /dev/urandom instead of PRNG for libica.
- Apply libica-1.3.5 fix for /dev/urandom in icalinux.c
- Use latest ICA engine patch from IBM.

* Sat Oct  4 2003 Nalin Dahyabhai <[email protected]> 0.9.7a-22.1
- rebuild

* Wed Oct  1 2003 Nalin Dahyabhai <[email protected]> 0.9.7a-22
- rebuild (22 wasn't actually built, fun eh?)

* Tue Sep 30 2003 Nalin Dahyabhai <[email protected]> 0.9.7a-23
- re-disable optimizations on ppc64

* Tue Sep 30 2003 Joe Orton <[email protected]>
- add a_mbstr.c fix for 64-bit platforms from CVS

* Tue Sep 30 2003 Nalin Dahyabhai <[email protected]> 0.9.7a-22
- add -Wa,--noexecstack to RPM_OPT_FLAGS so that assembled modules get tagged
 as not needing executable stacks

* Mon Sep 29 2003 Nalin Dahyabhai <[email protected]> 0.9.7a-21
- rebuild

* Thu Sep 25 2003 Nalin Dahyabhai <[email protected]>
- re-enable optimizations on ppc64

* Thu Sep 25 2003 Nalin Dahyabhai <[email protected]>
- remove exclusivearch

* Wed Sep 24 2003 Nalin Dahyabhai <[email protected]> 0.9.7a-20
- only parse a client cert if one was requested
- temporarily exclusivearch for %%{ix86}

* Tue Sep 23 2003 Nalin Dahyabhai <[email protected]>
- add security fixes for protocol parsing bugs (CAN-2003-0543, CAN-2003-0544)
 and heap corruption (CAN-2003-0545)
- update RHNS-CA-CERT files
- ease back on the number of threads used in the threading test

* Wed Sep 17 2003 Matt Wilson <[email protected]> 0.9.7a-19
- rebuild to fix gzipped file md5sums (#91211)

* Mon Aug 25 2003 Phil Knirsch <[email protected]> 0.9.7a-18
- Updated libica to version 1.3.4.

* Thu Jul 17 2003 Nalin Dahyabhai <[email protected]> 0.9.7a-17
- rebuild

* Tue Jul 15 2003 Nalin Dahyabhai <[email protected]> 0.9.7a-10.9
- free the kssl_ctx structure when we free an SSL structure (#99066)

* Fri Jul 10 2003 Nalin Dahyabhai <[email protected]> 0.9.7a-16
- rebuild

* Thu Jul 10 2003 Nalin Dahyabhai <[email protected]> 0.9.7a-15
- lower thread test count on s390x

* Tue Jul  8 2003 Nalin Dahyabhai <[email protected]> 0.9.7a-14
- rebuild

* Thu Jun 26 2003 Nalin Dahyabhai <[email protected]> 0.9.7a-13
- disable assembly on arches where it seems to conflict with threading

* Thu Jun 26 2003 Phil Knirsch <[email protected]> 0.9.7a-12
- Updated libica to latest upstream version 1.3.0

* Wed Jun 11 2003 Nalin Dahyabhai <[email protected]> 0.9.7a-9.9
- rebuild

* Wed Jun 11 2003 Nalin Dahyabhai <[email protected]> 0.9.7a-11
- rebuild

* Tue Jun 10 2003 Nalin Dahyabhai <[email protected]> 0.9.7a-10
- ubsec: don't stomp on output data which might also be input data

* Tue Jun 10 2003 Nalin Dahyabhai <[email protected]> 0.9.7a-9
- temporarily disable optimizations on ppc64

* Mon Jun  9 2003 Nalin Dahyabhai <[email protected]>
- backport fix for engine-used-for-everything from 0.9.7b
- backport fix for prng not being seeded causing problems, also from 0.9.7b
- add a check at build-time to ensure that RSA is thread-safe
- keep perlpath from stomping on the libica configure scripts

* Fri Jun  6 2003 Nalin Dahyabhai <[email protected]>
- thread-safety fix for RSA blinding

* Wed Jun 04 2003 Elliot Lee <[email protected]> 0.9.7a-8
- rebuilt

* Fri May 30 2003 Phil Knirsch <[email protected]> 0.9.7a-7
- Added libica-1.2 to openssl (featurerequest).

* Wed Apr 16 2003 Nalin Dahyabhai <[email protected]> 0.9.7a-6
- fix building with incorrect flags on ppc64

* Wed Mar 19 2003 Nalin Dahyabhai <[email protected]> 0.9.7a-5
- add patch to harden against Klima-Pokorny-Rosa extension of Bleichenbacher's
 attack (CAN-2003-0131)

* Mon Mar 17 2003 Nalin Dahyabhai <[email protected]>  0.9.7a-4
- add patch to enable RSA blinding by default, closing a timing attack
 (CAN-2003-0147)

* Wed Mar  5 2003 Nalin Dahyabhai <[email protected]> 0.9.7a-3
- disable use of BN assembly module on x86_64, but continue to allow inline
 assembly (#83403)

* Thu Feb 27 2003 Nalin Dahyabhai <[email protected]> 0.9.7a-2
- disable EC algorithms

* Wed Feb 19 2003 Nalin Dahyabhai <[email protected]> 0.9.7a-1
- update to 0.9.7a

* Wed Feb 19 2003 Nalin Dahyabhai <[email protected]> 0.9.7-8
- add fix to guard against attempts to allocate negative amounts of memory
- add patch for CAN-2003-0078, fixing a timing attack

* Thu Feb 13 2003 Elliot Lee <[email protected]> 0.9.7-7
- Add openssl-ppc64.patch

* Mon Feb 10 2003 Nalin Dahyabhai <[email protected]> 0.9.7-6
- EVP_DecryptInit should call EVP_CipherInit() instead of EVP_CipherInit_ex(),
 to get the right behavior when passed uninitialized context structures
 (#83766)
- build with -mcpu=ev5 on alpha family (#83828)

* Wed Jan 22 2003 Tim Powers <[email protected]>
- rebuilt

* Fri Jan 17 2003 Phil Knirsch <[email protected]> 0.9.7-4
- Added IBM hw crypto support patch.

* Wed Jan 15 2003 Nalin Dahyabhai <[email protected]>
- add missing builddep on sed

* Thu Jan  9 2003 Bill Nottingham <[email protected]> 0.9.7-3
- debloat
- fix broken manpage symlinks

* Wed Jan  8 2003 Nalin Dahyabhai <[email protected]> 0.9.7-2
- fix double-free in 'openssl ca'

* Fri Jan  3 2003 Nalin Dahyabhai <[email protected]> 0.9.7-1
- update to 0.9.7 final

* Tue Dec 17 2002 Nalin Dahyabhai <[email protected]> 0.9.7-0
- update to 0.9.7 beta6 (DO NOT USE UNTIL UPDATED TO FINAL 0.9.7)

* Wed Dec 11 2002 Nalin Dahyabhai <[email protected]>
- update to 0.9.7 beta5 (DO NOT USE UNTIL UPDATED TO FINAL 0.9.7)

* Tue Oct 22 2002 Nalin Dahyabhai <[email protected]> 0.9.6b-30
- add configuration stanza for x86_64 and use it on x86_64
- build for linux-ppc on ppc
- start running the self-tests again

* Wed Oct 02 2002 Elliot Lee <[email protected]> 0.9.6b-29hammer.3
- Merge fixes from previous hammer packages, including general x86-64 and
 multilib

* Tue Aug  6 2002 Nalin Dahyabhai <[email protected]> 0.9.6b-29
- rebuild

* Thu Aug  1 2002 Nalin Dahyabhai <[email protected]> 0.9.6b-28
- update asn patch to fix accidental reversal of a logic check

* Wed Jul 31 2002 Nalin Dahyabhai <[email protected]> 0.9.6b-27
- update asn patch to reduce chance that compiler optimization will remove
 one of the added tests

* Wed Jul 31 2002 Nalin Dahyabhai <[email protected]> 0.9.6b-26
- rebuild

* Mon Jul 29 2002 Nalin Dahyabhai <[email protected]> 0.9.6b-25
- add patch to fix ASN.1 vulnerabilities

* Thu Jul 25 2002 Nalin Dahyabhai <[email protected]> 0.9.6b-24
- add backport of Ben Laurie's patches for OpenSSL 0.9.6d

* Wed Jul 17 2002 Nalin Dahyabhai <[email protected]> 0.9.6b-23
- own {_datadir}/ssl/misc

* Fri Jun 21 2002 Tim Powers <[email protected]>
- automated rebuild

* Sun May 26 2002 Tim Powers <[email protected]>
- automated rebuild

* Fri May 17 2002 Nalin Dahyabhai <[email protected]> 0.9.6b-20
- free ride through the build system (whee!)

* Thu May 16 2002 Nalin Dahyabhai <[email protected]> 0.9.6b-19
- rebuild in new environment

* Thu Apr  4 2002 Nalin Dahyabhai <[email protected]> 0.9.6b-17, 0.9.6b-18
- merge RHL-specific bits into stronghold package, rename

* Tue Apr 02 2002 Gary Benson <[email protected]> stronghold-0.9.6c-2
- add support for Chrysalis Luna token

* Tue Mar 26 2002 Gary Benson <[email protected]>
- disable AEP random number generation, other AEP fixes

* Fri Mar 15 2002 Nalin Dahyabhai <[email protected]> 0.9.6b-15
- only build subpackages on primary arches

* Thu Mar 14 2002 Nalin Dahyabhai <[email protected]> 0.9.6b-13
- on ia32, only disable use of assembler on i386
- enable assembly on ia64

* Mon Jan  7 2002 Florian La Roche <[email protected]> 0.9.6b-11
- fix sparcv9 entry

* Mon Jan  7 2002 Gary Benson <[email protected]> stronghold-0.9.6c-1
- upgrade to 0.9.6c
- bump BuildArch to i686 and enable assembler on all platforms
- synchronise with shrimpy and rawhide
- bump soversion to 3

* Wed Oct 10 2001 Florian La Roche <[email protected]>
- delete BN_LLONG for s390x, patch from Oliver Paukstadt

* Mon Sep 17 2001 Nalin Dahyabhai <[email protected]> 0.9.6b-9
- update AEP driver patch

* Mon Sep 10 2001 Nalin Dahyabhai <[email protected]>
- adjust RNG disabling patch to match version of patch from Broadcom

* Fri Sep  7 2001 Nalin Dahyabhai <[email protected]> 0.9.6b-8
- disable the RNG in the ubsec engine driver

* Tue Aug 28 2001 Nalin Dahyabhai <[email protected]> 0.9.6b-7
- tweaks to the ubsec engine driver

* Fri Aug 24 2001 Nalin Dahyabhai <[email protected]> 0.9.6b-6
- tweaks to the ubsec engine driver

* Thu Aug 23 2001 Nalin Dahyabhai <[email protected]> 0.9.6b-5
- update ubsec engine driver from Broadcom

* Fri Aug 10 2001 Nalin Dahyabhai <[email protected]> 0.9.6b-4
- move man pages back to %%{_mandir}/man?/foo.?ssl from
 %%{_mandir}/man?ssl/foo.?
- add an [ engine ] section to the default configuration file

* Thu Aug  9 2001 Nalin Dahyabhai <[email protected]>
- add a patch for selecting a default engine in SSL_library_init()

* Mon Jul 23 2001 Nalin Dahyabhai <[email protected]> 0.9.6b-3
- add patches for AEP hardware support
- add patch to keep trying when we fail to load a cert from a file and
 there are more in the file
- add missing prototype for ENGINE_ubsec() in engine_int.h

* Wed Jul 18 2001 Nalin Dahyabhai <[email protected]> 0.9.6b-2
- actually add hw_ubsec to the engine list

* Tue Jul 17 2001 Nalin Dahyabhai <[email protected]>
- add in the hw_ubsec driver from CVS

* Wed Jul 11 2001 Nalin Dahyabhai <[email protected]> 0.9.6b-1
- update to 0.9.6b

* Thu Jul  5 2001 Nalin Dahyabhai <[email protected]>
- move .so symlinks back to %%{_libdir}

* Tue Jul  3 2001 Nalin Dahyabhai <[email protected]>
- move shared libraries to /lib (#38410)

* Mon Jun 25 2001 Nalin Dahyabhai <[email protected]>
- switch to engine code base

* Mon Jun 18 2001 Nalin Dahyabhai <[email protected]>
- add a script for creating dummy certificates
- move man pages from %%{_mandir}/man?/foo.?ssl to %%{_mandir}/man?ssl/foo.?

* Thu Jun 07 2001 Florian La Roche <[email protected]>
- add s390x support

* Fri Jun  1 2001 Nalin Dahyabhai <[email protected]>
- change two memcpy() calls to memmove()
- don't define L_ENDIAN on alpha

* Wed May 23 2001 Joe Orton <[email protected]> stronghold-0.9.6a-1
- Add 'stronghold-' prefix to package names.
- Obsolete standard openssl packages.

* Wed May 16 2001 Joe Orton <[email protected]>
- Add BuildArch: i586 as per Nalin's advice.

* Tue May 15 2001 Joe Orton <[email protected]>
- Enable assembler on ix86 (using new .tar.bz2 which does
 include the asm directories).

* Tue May 15 2001 Nalin Dahyabhai <[email protected]>
- make subpackages depend on the main package

* Tue May  1 2001 Nalin Dahyabhai <[email protected]>
- adjust the hobble script to not disturb symlinks in include/ (fix from
 Joe Orton)

* Fri Apr 26 2001 Nalin Dahyabhai <[email protected]>
- drop the m2crypo patch we weren't using

* Tue Apr 24 2001 Nalin Dahyabhai <[email protected]>
- configure using "shared" as well

* Sun Apr  8 2001 Nalin Dahyabhai <[email protected]>
- update to 0.9.6a
- use the build-shared target to build shared libraries
- bump the soversion to 2 because we're no longer compatible with
 our 0.9.5a packages or our 0.9.6 packages
- drop the patch for making rsatest a no-op when rsa null support is used
- put all man pages into <section>ssl instead of <section>
- break the m2crypto modules into a separate package

* Tue Mar 13 2001 Nalin Dahyabhai <[email protected]>
- use BN_LLONG on s390

* Mon Mar 12 2001 Nalin Dahyabhai <[email protected]>
- fix the s390 changes for 0.9.6 (isn't supposed to be marked as 64-bit)

* Sat Mar  3 2001 Nalin Dahyabhai <[email protected]>
- move c_rehash to the perl subpackage, because it's a perl script now

* Fri Mar  2 2001 Nalin Dahyabhai <[email protected]>
- update to 0.9.6
- enable MD2
- use the libcrypto.so and libssl.so targets to build shared libs with
- bump the soversion to 1 because we're no longer compatible with any of
 the various 0.9.5a packages circulating around, which provide lib*.so.0

* Wed Feb 28 2001 Florian La Roche <[email protected]>
- change hobble-openssl for disabling MD2 again

* Tue Feb 27 2001 Nalin Dahyabhai <[email protected]>
- re-disable MD2 -- the EVP_MD_CTX structure would grow from 100 to 152
 bytes or so, causing EVP_DigestInit() to zero out stack variables in
 apps built against a version of the library without it

* Mon Feb 26 2001 Nalin Dahyabhai <[email protected]>
- disable some inline assembly, which on x86 is Pentium-specific
- re-enable MD2 (see http://www.ietf.org/ietf/IPR/RSA-MD-all)

* Thu Feb 08 2001 Florian La Roche <[email protected]>
- fix s390 patch

* Fri Dec 8 2000 Than Ngo <[email protected]>
- added support s390

* Mon Nov 20 2000 Nalin Dahyabhai <[email protected]>
- remove -Wa,* and -m* compiler flags from the default Configure file (#20656)
- add the CA.pl man page to the perl subpackage

* Thu Nov  2 2000 Nalin Dahyabhai <[email protected]>
- always build with -mcpu=ev5 on alpha

* Tue Oct 31 2000 Nalin Dahyabhai <[email protected]>
- add a symlink from cert.pem to ca-bundle.crt

* Wed Oct 25 2000 Nalin Dahyabhai <[email protected]>
- add a ca-bundle file for packages like Samba to reference for CA certificates

* Tue Oct 24 2000 Nalin Dahyabhai <[email protected]>
- remove libcrypto's crypt(), which doesn't handle md5crypt (#19295)

* Mon Oct  2 2000 Nalin Dahyabhai <[email protected]>
- add unzip as a buildprereq (#17662)
- update m2crypto to 0.05-snap4

* Tue Sep 26 2000 Bill Nottingham <[email protected]>
- fix some issues in building when it's not installed

* Wed Sep  6 2000 Nalin Dahyabhai <[email protected]>
- make sure the headers we include are the ones we built with (aaaaarrgh!)

* Fri Sep  1 2000 Nalin Dahyabhai <[email protected]>
- add Richard Henderson's patch for BN on ia64
- clean up the changelog

* Tue Aug 29 2000 Nalin Dahyabhai <[email protected]>
- fix the building of python modules without openssl-devel already installed

* Wed Aug 23 2000 Nalin Dahyabhai <[email protected]>
- byte-compile python extensions without the build-root
- adjust the makefile to not remove temporary files (like .key files when
 building .csr files) by marking them as .PRECIOUS

* Sat Aug 19 2000 Nalin Dahyabhai <[email protected]>
- break out python extensions into a subpackage

* Mon Jul 17 2000 Nalin Dahyabhai <[email protected]>
- tweak the makefile some more

* Tue Jul 11 2000 Nalin Dahyabhai <[email protected]>
- disable MD2 support

* Thu Jul  6 2000 Nalin Dahyabhai <[email protected]>
- disable MDC2 support

* Sun Jul  2 2000 Nalin Dahyabhai <[email protected]>
- tweak the disabling of RC5, IDEA support
- tweak the makefile

* Thu Jun 29 2000 Nalin Dahyabhai <[email protected]>
- strip binaries and libraries
- rework certificate makefile to have the right parts for Apache

* Wed Jun 28 2000 Nalin Dahyabhai <[email protected]>
- use %%{_perl} instead of /usr/bin/perl
- disable alpha until it passes its own test suite

* Fri Jun  9 2000 Nalin Dahyabhai <[email protected]>
- move the passwd.1 man page out of the passwd package's way

* Fri Jun  2 2000 Nalin Dahyabhai <[email protected]>
- update to 0.9.5a, modified for U.S.
- add perl as a build-time requirement
- move certificate makefile to another package
- disable RC5, IDEA, RSA support
- remove optimizations for now

* Wed Mar  1 2000 Florian La Roche <[email protected]>
- Bero told me to move the Makefile into this package

* Wed Mar  1 2000 Florian La Roche <[email protected]>
- add lib*.so symlinks to link dynamically against shared libs

* Tue Feb 29 2000 Florian La Roche <[email protected]>
- update to 0.9.5
- run ldconfig directly in post/postun
- add FAQ

* Sat Dec 18 1999 Bernhard Rosenkrdnzer <[email protected]>
- Fix build on non-x86 platforms

* Fri Nov 12 1999 Bernhard Rosenkrdnzer <[email protected]>
- move /usr/share/ssl/* from -devel to main package

* Tue Oct 26 1999 Bernhard Rosenkrdnzer <[email protected]>
- inital packaging
- changes from base:
 - Move /usr/local/ssl to /usr/share/ssl for FHS compliance
 - handle RPM_OPT_FLAGS

thof · Sierpień 24, 2011

Codebox w miejsce code!

Ale poza tym jak widać dobre podejście do problemu bardzo ułatwia jego rozwiązanie.

Zaloguj się

Problem Z Kompilacja

Rekomendowane odpowiedzi

@WalDo

Odnośnik do komentarza

Udostępnij na innych stronach

portals

Odnośnik do komentarza

Udostępnij na innych stronach

@WalDo

Odnośnik do komentarza

Udostępnij na innych stronach

portals

Odnośnik do komentarza

Udostępnij na innych stronach

thof

Odnośnik do komentarza

Udostępnij na innych stronach

portals

Odnośnik do komentarza

Udostępnij na innych stronach

thof

Odnośnik do komentarza

Udostępnij na innych stronach

Jeśli chcesz dodać odpowiedź, zaloguj się lub zarejestruj nowe konto

Zarejestruj nowe konto

Zaloguj się

Przeglądaj

Aktywność

Fedora.pl