+#
+# Conditional build:
+%bcond_with purify # Compile openssl with \-DPURIFY, usefull when one wants to
+ # use valgrind debugger against openssl-linked programs
+#
%include /usr/lib/rpm/macros.perl
Summary: OpenSSL Toolkit libraries for the "Secure Sockets Layer" (SSL v2/v3)
Summary(de): Secure Sockets Layer (SSL)-Kommunikationslibrary
Summary(ru): âÉÂÌÉÏÔÅËÉ É ÕÔÉÌÉÔÙ ÄÌÑ ÓÏÅÄÉÎÅÎÉÊ ÞÅÒÅÚ Secure Sockets Layer
Summary(uk): â¦Â̦ÏÔÅËÉ ÔÁ ÕÔÉ̦ÔÉ ÄÌÑ Ú'¤ÄÎÁÎØ ÞÅÒÅÚ Secure Sockets Layer
Name: openssl
-Version: 0.9.7h
-Release: 1
+Version: 0.9.7l
+Release: 3
License: Apache-style License
Group: Libraries
Source0: ftp://ftp.openssl.org/source/%{name}-%{version}.tar.gz
-# Source0-md5: 8dc90a113eb8925795071fbe52b2932c
+# Source0-md5: b21d6e10817ddeccf5fbe1379987333e
Source1: %{name}-ca-bundle.crt
Source2: %{name}.1.pl
Source3: %{name}-ssl-certificate.sh
Patch3: %{name}-include.patch
Patch4: %{name}-md5-sparcv9.patch
Patch5: %{name}-ssl-algs.patch
+Patch6: %{name}-CVE-2007-3108.patch
URL: http://www.openssl.org/
BuildRequires: perl-devel >= 1:5.6.1
BuildRequires: rpm-perlprov >= 4.1-13
%patch3 -p1
%patch4 -p1
%patch5 -p1
+%patch6 -p1
# conflicts with i386-only DES implementation
# (missing #ifdef OPENSSL_FIPS ... #endif)
-:> fips/des/asm/fips-dx86-elf.s
+:> fips-1.0/des/asm/fips-dx86-elf.s
%build
%{__perl} -pi -e 's#%{_prefix}/local/bin/perl#%{__perl}#g' \
%{__perl} util/perlpath.pl %{__perl}
-OPTFLAGS="%{rpmcflags}"
+OPTFLAGS="%{rpmcflags} %{?with_purify:-DPURIFY}"
export OPTFLAGS
%ifarch %{ix86}
%ifarch i386
mv -f $RPM_BUILD_ROOT%{_var}/lib/%{name}/misc/* $RPM_BUILD_ROOT%{_libdir}/%{name}
rm -rf $RPM_BUILD_ROOT%{_var}/lib/%{name}/misc
-mv -f $RPM_BUILD_ROOT%{_bindir}/c_rehash $RPM_BUILD_ROOT%{_libdir}/%{name}
-
find $RPM_BUILD_ROOT%{_mandir} -type f | xargs rm -f
install doc/apps/*.1 $RPM_BUILD_ROOT%{_mandir}/man1
install doc/apps/*.5 $RPM_BUILD_ROOT%{_mandir}/man5
install doc/crypto/*.7 $RPM_BUILD_ROOT%{_mandir}/man7
install %{SOURCE2} $RPM_BUILD_ROOT%{_mandir}/pl/man1/openssl.1
install %{SOURCE3} $RPM_BUILD_ROOT%{_bindir}/ssl-certificate
-install fips/openssl_fips_fingerprint $RPM_BUILD_ROOT%{_bindir}
+install fips-1.0/openssl_fips_fingerprint $RPM_BUILD_ROOT%{_bindir}
+
%clean
rm -rf $RPM_BUILD_ROOT
%files
%defattr(644,root,root,755)
-%attr(755,root,root) %{_libdir}/libcrypto.so.*.*.*
-%attr(755,root,root) %{_libdir}/libssl.so.*.*.*
%doc CHANGES CHANGES.SSLeay LICENSE NEWS README doc/*.txt
%doc doc/openssl_button.gif doc/openssl_button.html
+%attr(755,root,root) %{_libdir}/libcrypto.so.*.*.*
+%attr(755,root,root) %{_libdir}/libssl.so.*.*.*
%dir %{_var}/lib/%{name}
%dir %{_var}/lib/%{name}/certs
%dir %{_var}/lib/%{name}/private
+%dir %{_datadir}/ssl
+%config(noreplace) %verify(not md5 mtime size) %{_datadir}/ssl/ca-bundle.crt
%files tools
%defattr(644,root,root,755)
%dir %{_sysconfdir}/%{name}
-%verify(not md5 size mtime) %config(noreplace) %{_sysconfdir}/%{name}/openssl.cnf
-%verify(not md5 size mtime) %config(noreplace) %{_var}/lib/%{name}/openssl.cnf
-%dir %{_datadir}/ssl
-%verify(not md5 size mtime) %config(noreplace) %{_datadir}/ssl/ca-bundle.crt
+%config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/%{name}/openssl.cnf
+%config(noreplace) %verify(not md5 mtime size) %{_var}/lib/%{name}/openssl.cnf
%attr(755,root,root) %{_bindir}/%{name}
%attr(755,root,root) %{_bindir}/openssl_fips_fingerprint
%files tools-perl
%defattr(644,root,root,755)
%attr(755,root,root) %{_libdir}/%{name}/CA.pl
-%attr(755,root,root) %{_libdir}/%{name}/c_rehash
+%attr(755,root,root) %{_bindir}/c_rehash
%{_mandir}/man1/openssl_CA.pl.1*
%files devel