1 |
%define maj 1.0.0 |
%define maj 1.0.1 |
2 |
%define engines_name %mklibname openssl-engines %{maj} |
%define engines_name %mklibname openssl-engines %{maj} |
3 |
%define libname %mklibname openssl %{maj} |
%define libname %mklibname openssl %{maj} |
4 |
%define develname %mklibname openssl -d |
%define develname %mklibname openssl -d |
14 |
|
|
15 |
Summary: Secure Sockets Layer communications libs & utils |
Summary: Secure Sockets Layer communications libs & utils |
16 |
Name: openssl |
Name: openssl |
17 |
Version: %{maj}j |
Version: %{maj}c |
18 |
Release: %mkrel 1 |
Release: %mkrel 1 |
19 |
License: BSD-like |
License: BSD-like |
20 |
Group: System/Libraries |
Group: System/Libraries |
24 |
Source2: Makefile.certificate |
Source2: Makefile.certificate |
25 |
Source3: make-dummy-cert |
Source3: make-dummy-cert |
26 |
Source4: openssl-thread-test.c |
Source4: openssl-thread-test.c |
|
Source5: README.pkcs11 |
|
27 |
# (gb) 0.9.7b-4mdk: Handle RPM_OPT_FLAGS in Configure |
# (gb) 0.9.7b-4mdk: Handle RPM_OPT_FLAGS in Configure |
28 |
Patch2: openssl-optflags.diff |
Patch2: openssl-1.0.1c-optflags.patch |
29 |
# (oe) support Brazilian Government OTHERNAME X509v3 field (#14158) |
# (oe) support Brazilian Government OTHERNAME X509v3 field (#14158) |
30 |
# http://www.iti.gov.br/resolucoes/RESOLU__O_13_DE_26_04_2002.PDF |
# http://www.iti.gov.br/resolucoes/RESOLU__O_13_DE_26_04_2002.PDF |
31 |
Patch6: openssl-0.9.8-beta6-icpbrasil.diff |
Patch6: openssl-0.9.8-beta6-icpbrasil.diff |
|
Patch7: openssl-1.0.0f-defaults.patch |
|
|
Patch8: openssl-0.9.8a-link-krb5.patch |
|
|
Patch10: openssl-0.9.7-beta6-ia64.patch |
|
|
Patch12: openssl-0.9.6-x509.patch |
|
|
Patch13: openssl-0.9.7-beta5-version-add-engines.patch |
|
32 |
# http://qa.mandriva.com/show_bug.cgi?id=32621 |
# http://qa.mandriva.com/show_bug.cgi?id=32621 |
33 |
Patch15: openssl-0.9.8e-crt.patch |
Patch15: openssl-0.9.8e-crt.patch |
34 |
# http://blogs.sun.com/janp/ |
|
35 |
Patch16: pkcs11_engine-1.0.0.diff |
# fedora patches |
36 |
|
Patch7: openssl-1.0.0f-defaults.patch |
37 |
|
Patch12: openssl-0.9.6-x509.patch |
38 |
|
Patch13: openssl-0.9.8j-version-add-engines.patch |
39 |
|
Patch16: openssl-1.0.0-beta5-enginesdir.patch |
40 |
|
|
41 |
# MIPS and ARM support |
# MIPS and ARM support |
42 |
Patch300: openssl-1.0.0-mips.patch |
Patch300: openssl-1.0.1c-mips.patch |
43 |
Patch301: openssl-1.0.0-arm.patch |
Patch301: openssl-1.0.1c-arm.patch |
|
Patch302: openssl-1.0.0-enginesdir.patch |
|
44 |
Requires: %{libname} = %{version}-%{release} |
Requires: %{libname} = %{version}-%{release} |
45 |
Requires: perl-base |
Requires: perl-base |
46 |
Requires: rootcerts |
Requires: rootcerts |
118 |
%patch6 -p0 -b .icpbrasil |
%patch6 -p0 -b .icpbrasil |
119 |
%patch7 -p1 -b .defaults |
%patch7 -p1 -b .defaults |
120 |
%{?_with_krb5:%patch8 -p1 -b .krb5} |
%{?_with_krb5:%patch8 -p1 -b .krb5} |
|
%patch10 -p0 -b .ia64 |
|
121 |
%patch12 -p1 -b .x509 |
%patch12 -p1 -b .x509 |
122 |
%patch13 -p1 -b .version-add-engines |
%patch13 -p1 -b .version-add-engines |
123 |
%patch15 -p1 -b .crt |
%patch15 -p1 -b .crt |
124 |
%patch16 -p1 -b .pkcs11_engine |
%patch16 -p1 -b .engines |
125 |
|
|
126 |
%patch300 -p1 -b .mips |
%patch300 -p1 -b .mips |
127 |
%patch301 -p1 -b .arm |
%patch301 -p1 -b .arm |
|
%patch302 -p1 -b .engines |
|
128 |
|
|
129 |
perl -pi -e "s,^(OPENSSL_LIBNAME=).+$,\1%{_lib}," Makefile.org engines/Makefile |
perl -pi -e "s,^(OPENSSL_LIBNAME=).+$,\1%{_lib}," Makefile.org engines/Makefile |
130 |
|
|
|
# fix perl path |
|
|
perl util/perlpath.pl %{_bindir}/perl |
|
|
|
|
131 |
cp %{SOURCE2} Makefile.certificate |
cp %{SOURCE2} Makefile.certificate |
132 |
cp %{SOURCE3} make-dummy-cert |
cp %{SOURCE3} make-dummy-cert |
133 |
cp %{SOURCE4} openssl-thread-test.c |
cp %{SOURCE4} openssl-thread-test.c |
|
cp %{SOURCE5} README.pkcs11 |
|
134 |
|
|
135 |
%build |
%build |
136 |
%serverbuild |
%serverbuild |
162 |
# usable on all platforms. The Configure script already knows to use -fPIC and |
# usable on all platforms. The Configure script already knows to use -fPIC and |
163 |
# RPM_OPT_FLAGS, so we can skip specifiying them here. |
# RPM_OPT_FLAGS, so we can skip specifiying them here. |
164 |
./Configure \ |
./Configure \ |
165 |
|
--prefix=%{_prefix} \ |
166 |
--openssldir=%{_sysconfdir}/pki/tls ${sslflags} \ |
--openssldir=%{_sysconfdir}/pki/tls ${sslflags} \ |
167 |
--enginesdir=%{_libdir}/openssl-%{version}/engines \ |
--enginesdir=%{_libdir}/openssl-%{version}/engines \ |
168 |
--prefix=%{_prefix} --libdir=%{_lib}/ %{?_with_krb5:--with-krb5-flavor=MIT -I%{_prefix}/kerberos/include -L%{_prefix}/kerberos/%{_lib}} \ |
--libdir=%{_lib}/ \ |
169 |
zlib no-idea no-rc5 enable-camellia shared enable-tlsext ${sslarch} --pk11-libname=%{_libdir}/pkcs11/PKCS11_API.so |
%{?_with_krb5:--with-krb5-flavor=MIT -I%{_prefix}/kerberos/include -L%{_prefix}/kerberos/%{_lib}} \ |
170 |
|
zlib no-idea no-rc5 enable-camellia shared enable-tlsext ${sslarch} |
|
# zlib no-idea no-mdc2 no-rc5 no-ec no-ecdh no-ecdsa shared ${sslarch} |
|
171 |
|
|
172 |
# Add -Wa,--noexecstack here so that libcrypto's assembler modules will be |
# Add -Wa,--noexecstack here so that libcrypto's assembler modules will be |
173 |
# marked as not requiring an executable stack. |
# marked as not requiring an executable stack. |
283 |
|
|
284 |
%files |
%files |
285 |
%doc FAQ INSTALL LICENSE NEWS PROBLEMS main-doc-info/README* |
%doc FAQ INSTALL LICENSE NEWS PROBLEMS main-doc-info/README* |
286 |
%doc README README.ASN1 README.ENGINE README.pkcs11 |
%doc README README.ASN1 README.ENGINE |
287 |
%dir %{_sysconfdir}/pki |
%dir %{_sysconfdir}/pki |
288 |
%dir %{_sysconfdir}/pki/CA |
%dir %{_sysconfdir}/pki/CA |
289 |
%dir %{_sysconfdir}/pki/CA/private |
%dir %{_sysconfdir}/pki/CA/private |