]>
Commit | Line | Data |
---|---|---|
a81c34a3 ER |
1 | # TODO |
2 | # - consider dropping last optflags.patch hunk and return to SOMAJOR (.so.1) sonames | |
0419ee51 | 3 | # - find a way to simplify (drop) openssl-optflags.patch, it's pain to update here in pld |
44d8c69e | 4 | # |
2403ba81 | 5 | # Conditional build: |
d76d59fa | 6 | %bcond_without tests # don't perform "make tests" |
d343076c AO |
7 | %bcond_without zlib # zlib: note - enables CVE-2012-4929 vulnerability |
8 | %bcond_without sslv2 # SSLv2: note - many flaws http://en.wikipedia.org/wiki/Transport_Layer_Security#SSL_2.0 | |
9 | %bcond_without sslv3 # SSLv3: note - enables CVE-2014-3566 vulnerability | |
55af9845 | 10 | %bcond_with purify # Compile openssl with "-DPURIFY", useful when one wants to |
2403ba81 | 11 | # use valgrind debugger against openssl-linked programs |
81e27b7e | 12 | %bcond_with snap # use GitHub snapshot to build branch release |
dece7a9c | 13 | |
155b2eda ER |
14 | %define subver pre6 |
15 | %define rel 0.1 | |
779bb536 | 16 | %include /usr/lib/rpm/macros.perl |
ce2ff00e | 17 | Summary: OpenSSL Toolkit libraries for the "Secure Sockets Layer" (SSL v2/v3) |
e6bfca5b ER |
18 | Summary(de.UTF-8): Secure Sockets Layer (SSL)-Kommunikationslibrary |
19 | Summary(es.UTF-8): Biblioteca C que suministra algoritmos y protocolos criptográficos | |
20 | Summary(fr.UTF-8): Utilitaires de communication SSL (Secure Sockets Layer) | |
21 | Summary(pl.UTF-8): Biblioteki OpenSSL (SSL v2/v3) | |
22 | Summary(pt_BR.UTF-8): Uma biblioteca C que fornece vários algoritmos e protocolos criptográficos | |
23 | Summary(ru.UTF-8): Библиотеки и утилиты для соединений через Secure Sockets Layer | |
24 | Summary(uk.UTF-8): Бібліотеки та утиліти для з'єднань через Secure Sockets Layer | |
56470945 | 25 | Name: openssl |
55af9845 ER |
26 | # 1.0.2 will be LTS release |
27 | # Version 1.0.2 will be supported until 2019-12-31. | |
28 | # https://www.openssl.org/about/releasestrat.html | |
155b2eda ER |
29 | Version: 1.1.0 |
30 | Release: 0.1 | |
d7fc4164 | 31 | License: Apache-like |
56470945 | 32 | Group: Libraries |
81e27b7e | 33 | %if %{without snap} |
155b2eda ER |
34 | #Source0: ftp://ftp.openssl.org/source/%{name}-%{version}.tar.gz |
35 | Source0: https://www.openssl.org/source/%{name}-%{version}-%{subver}.tar.gz | |
36 | # Source0-md5: 5073f45b5922992234396c7d8247196f | |
81e27b7e | 37 | %else |
f60e47ab | 38 | Source1: https://github.com/openssl/openssl/archive/OpenSSL_1_0_2-stable/%{name}-%{version}-dev.tar.gz |
81e27b7e | 39 | %endif |
62382817 | 40 | Source2: %{name}.1.pl |
ea55f735 | 41 | Source3: %{name}-ssl-certificate.sh |
d231add3 | 42 | Source4: %{name}-c_rehash.sh |
0d1c50df | 43 | Patch0: %{name}-alpha-ccc.patch |
e106ff02 | 44 | Patch1: %{name}-optflags.patch |
76855748 AO |
45 | Patch2: %{name}-include.patch |
46 | Patch3: %{name}-man-namespace.patch | |
47 | Patch4: %{name}-asflag.patch | |
48 | Patch5: %{name}-ca-certificates.patch | |
49 | Patch6: %{name}-ldflags.patch | |
50 | Patch7: %{name}-find.patch | |
51 | Patch8: pic.patch | |
76855748 | 52 | Patch10: %{name}_fix_for_x32.patch |
2a83d92e | 53 | Patch11: engines-dir.patch |
bd7f0ef1 | 54 | URL: http://www.openssl.org/ |
741aa025 | 55 | BuildRequires: bc |
af59ed59 | 56 | BuildRequires: perl-devel >= 1:5.10.0 |
9edbb66f | 57 | BuildRequires: rpm-perlprov >= 4.1-13 |
20bc1dd7 | 58 | BuildRequires: rpmbuild(macros) >= 1.213 |
31b28434 | 59 | BuildRequires: sed >= 4.0 |
1ecb3a25 | 60 | BuildRequires: zlib-devel |
e9e51fab | 61 | Requires: ca-certificates >= 20120623-1.1 |
dece7a9c | 62 | Requires: rpm-whiteout >= 1.7 |
04a5ad1f AF |
63 | Obsoletes: SSLeay |
64 | Obsoletes: SSLeay-devel | |
65 | Obsoletes: SSLeay-perl | |
a280467c | 66 | Obsoletes: libopenssl0 |
4ec787ae | 67 | %if "%{pld_release}" == "ac" |
7bb98c5d | 68 | Conflicts: neon < 0.26.3-3 |
e21ec158 | 69 | Conflicts: ntpd < 4.2.4p8-10 |
f3136daa | 70 | Conflicts: openssh-clients < 2:5.8p1-9 |
4ec787ae ER |
71 | Conflicts: openssh-server < 2:5.8p1-9 |
72 | %else | |
3a24c9cc ER |
73 | Conflicts: neon < 0.29.6-8 |
74 | Conflicts: openssh-clients < 2:6.2p2-3 | |
75 | Conflicts: openssh-server < 2:6.2p2-3 | |
c04ce0eb | 76 | %endif |
0f86ef4a | 77 | BuildRoot: %{tmpdir}/%{name}-%{version}-root-%(id -u -n) |
21ac4f86 AF |
78 | |
79 | %description | |
80 | The OpenSSL Project is a collaborative effort to develop a robust, | |
b39fed70 | 81 | commercial-grade, full-featured, and Open Source toolkit implementing |
82 | the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS | |
83 | v1) protocols with full-strength cryptography world-wide. The project | |
84 | is managed by a worldwide community of volunteers that use the | |
85 | Internet to communicate, plan, and develop the OpenSSL tookit and its | |
86 | related documentation. | |
56470945 | 87 | |
b39fed70 | 88 | OpenSSL is based on the excellent SSLeay library developed by Eric A. |
89 | Young and Tim J. Hudson. The OpenSSL toolkit is licensed under an | |
90 | Apache-style licence, which basically means that you are free to get | |
91 | and use it for commercial and non-commercial purposes subject to some | |
92 | simple license conditions. | |
21ac4f86 | 93 | |
fc19f542 | 94 | This package contains shared libraries only, install openssl-tools if |
95 | you want to use openssl cmdline tool. | |
ce2ff00e | 96 | |
30e72515 JR |
97 | %description -l de.UTF-8 |
98 | Openssl enthält das OpenSSL Zertifikatsmanagementtool und shared | |
99 | libraries, die verschiedene Verschlüsselungs- und | |
100 | Entschlüsselungsalgorithmen und -protokolle, wie DES, RC4, RSA und SSL | |
101 | zur Verfügung stellen. | |
453a8bf3 | 102 | |
30e72515 JR |
103 | %description -l es.UTF-8 |
104 | Biblioteca C que suministra algoritmos y protocolos criptográficos. | |
2fad19b0 | 105 | |
30e72515 | 106 | %description -l fr.UTF-8 |
56470945 | 107 | OpenSSL est un outiil de gestion des certificats et les librairies |
108 | partagees qui fournit plusieurs protocoles et algorithmes de | |
109 | codage/decodage, incluant DES, RC4, RSA et SSL. | |
2fad19b0 | 110 | |
30e72515 JR |
111 | %description -l pl.UTF-8 |
112 | Implementacja protokołów kryptograficznych Secure Socket Layer (SSL) | |
78b5e413 TP |
113 | v2/v3 oraz Transport Layer Security (TLS v1). |
114 | ||
30e72515 JR |
115 | %description -l pt_BR.UTF-8 |
116 | Uma biblioteca C que fornece vários algoritmos e protocolos | |
117 | criptográficos, incluindo DES, RC4, RSA e SSL. Inclui bibliotecas | |
118 | compartilhadas e utilitários. | |
453a8bf3 | 119 | |
30e72515 JR |
120 | %description -l ru.UTF-8 |
121 | Программа openssl для работы с сертификатами и разделяемые библиотеки, | |
122 | которые реализуют множетсво криптографических алгоритмов, включая DES, | |
123 | RC4, RSA и SSL. | |
453a8bf3 | 124 | |
30e72515 JR |
125 | %description -l uk.UTF-8 |
126 | Програма openssl для роботи з сертифікатами та бібліотеки спільного | |
127 | користування, що реалізують велику кількість криптографічних | |
128 | алгоритмів, включаючи DES, RC4, RSA та SSL. | |
453a8bf3 | 129 | |
182f9d23 TP |
130 | %package engines |
131 | Summary: OpenSSL optional crypto engines | |
545f4646 | 132 | Summary(pl.UTF-8): Opcjonalne silniki kryptograficzne dla OpenSSL-a |
182f9d23 TP |
133 | Group: Libraries |
134 | Requires: %{name} = %{version}-%{release} | |
135 | ||
136 | %description engines | |
137 | With OpenSSL 0.9.6, a new component was added to support alternative | |
545f4646 JB |
138 | cryptography implementations, most commonly for interfacing with |
139 | external crypto devices (eg. accelerator cards). This component is | |
140 | called ENGINE. | |
182f9d23 TP |
141 | |
142 | There are currently built-in ENGINE implementations for the following | |
143 | crypto devices: | |
144 | ||
145 | - CryptoSwift | |
146 | - Compaq Atalla | |
147 | - nCipher CHIL | |
148 | - Nuron | |
149 | - Broadcom uBSec | |
150 | ||
151 | In addition, dynamic binding to external ENGINE implementations is now | |
3a24c9cc | 152 | provided by a special ENGINE called "dynamic". |
182f9d23 | 153 | |
545f4646 JB |
154 | %description engines -l pl.UTF-8 |
155 | Począwszy od OpenSSL-a 0.9.6 został dodany nowy komponent, mający | |
156 | wspierać alternatywne implementacje kryptografii, przeważnie | |
157 | współpracujące z zewnętrznymi urządzeniami kryptograficznymi (np. | |
3a24c9cc ER |
158 | kartami akceleratorów). Komponent ten jest nazywany SILNIKIEM (ang. |
159 | ENGINE). | |
545f4646 JB |
160 | |
161 | Obecnie istnieją wbudowane implementacje silników dla następujących | |
162 | urządzeń kryptograficznych: | |
163 | - CryptoSwift | |
164 | - Compaq Atalla | |
165 | - nCipher CHIL | |
166 | - Nuron | |
167 | - Broadcom uBSec | |
168 | ||
169 | Ponadto zapewnione jest dynamiczne wiązanie dla zewnętrznych | |
170 | implementacji silników poprzez specjalny silnik o nazwie "dynamic". | |
171 | ||
ce2ff00e | 172 | %package tools |
173 | Summary: OpenSSL command line tool and utilities | |
e6bfca5b | 174 | Summary(pl.UTF-8): Zestaw narzędzi i skryptów |
fc19f542 | 175 | Group: Applications/Communications |
82859ae1 | 176 | Requires: %{name} = %{version}-%{release} |
9583cd23 | 177 | Requires: which |
ce2ff00e | 178 | |
179 | %description tools | |
180 | The OpenSSL Toolkit cmdline tool openssl and utility scripts. | |
181 | ||
30e72515 JR |
182 | %description tools -l pl.UTF-8 |
183 | Zestaw narzędzi i skryptów wywoływanych z linii poleceń. | |
78b5e413 | 184 | |
ce2ff00e | 185 | %package tools-perl |
186 | Summary: OpenSSL utilities written in Perl | |
e6bfca5b | 187 | Summary(pl.UTF-8): Narzędzia OpenSSL napisane w perlu |
fc19f542 | 188 | Group: Applications/Communications |
82859ae1 | 189 | Requires: %{name} = %{version}-%{release} |
2b2149ff | 190 | |
ce2ff00e | 191 | %description tools-perl |
d86c2c8b | 192 | OpenSSL Toolkit tools written in Perl. |
2b2149ff | 193 | |
30e72515 JR |
194 | %description tools-perl -l pl.UTF-8 |
195 | Narzędzia OpenSSL napisane w perlu. | |
78b5e413 | 196 | |
faddd309 | 197 | %package devel |
ce2ff00e | 198 | Summary: Development part of OpenSSL Toolkit libraries |
e6bfca5b ER |
199 | Summary(de.UTF-8): Secure Sockets Layer Kommunikationslibrary: statische libraries+header |
200 | Summary(es.UTF-8): Bibliotecas y archivos de inclusión para desarrollo OpenSSL | |
201 | Summary(fr.UTF-8): Librairies statiques, headers et utilitaires pour communication SSL | |
202 | Summary(pl.UTF-8): Część bibiloteki OpenSSL przeznaczona dla programistów | |
203 | Summary(pt_BR.UTF-8): Bibliotecas e arquivos de inclusão para desenvolvimento OpenSSL | |
204 | Summary(ru.UTF-8): Библиотеки, хедеры и утилиты для Secure Sockets Layer | |
205 | Summary(uk.UTF-8): Бібліотеки, хедери та утиліти для Secure Sockets Layer | |
9c05bcac | 206 | Group: Development/Libraries |
82859ae1 | 207 | Requires: %{name} = %{version}-%{release} |
a280467c | 208 | Obsoletes: libopenssl0-devel |
faddd309 AF |
209 | |
210 | %description devel | |
211 | Development part of OpenSSL library. | |
212 | ||
30e72515 JR |
213 | %description devel -l es.UTF-8 |
214 | Bibliotecas y archivos de inclusión para desarrollo OpenSSL | |
453a8bf3 | 215 | |
30e72515 JR |
216 | %description devel -l pl.UTF-8 |
217 | Część biblioteki OpenSSL przeznaczona dla programistów. | |
faddd309 | 218 | |
30e72515 JR |
219 | %description devel -l pt_BR.UTF-8 |
220 | Uma biblioteca C que fornece vários algoritmos e protocolos | |
221 | criptográficos, incluindo DES, RC4, RSA e SSL. Inclui bibliotecas e | |
222 | arquivos de inclusão para desenvolvimento. | |
453a8bf3 | 223 | |
30e72515 JR |
224 | %description devel -l ru.UTF-8 |
225 | Программа openssl для работы с сертификатами и разделяемые библиотеки, | |
226 | которые реализуют множетсво криптографических алгоритмов, включая DES, | |
227 | RC4, RSA и SSL. Включает библиотеки и хедеры для разработки приложений | |
228 | с использованием SSL. | |
453a8bf3 | 229 | |
30e72515 JR |
230 | %description devel -l uk.UTF-8 |
231 | Програма openssl для роботи з сертифікатами та бібліотеки спільного | |
232 | користування, що реалізують велику кількість криптографічних | |
233 | алгоритмів, включаючи DES, RC4, RSA та SSL. Містить бібліотеки та | |
234 | хедери для розробки програм з використанням SSL. | |
453a8bf3 | 235 | |
faddd309 | 236 | %package static |
ce2ff00e | 237 | Summary: Static OpenSSL libraries |
e6bfca5b ER |
238 | Summary(pl.UTF-8): Statyczne wersje bibliotek z OpenSSL |
239 | Summary(pt_BR.UTF-8): Bibliotecas estáticas para desenvolvimento com openssl | |
240 | Summary(ru.UTF-8): Статические библиотеки разработчика для OpenSSL | |
241 | Summary(uk.UTF-8): Статичні бібліотеки програміста для OpenSSL | |
9c05bcac | 242 | Group: Development/Libraries |
82859ae1 | 243 | Requires: %{name}-devel = %{version}-%{release} |
faddd309 AF |
244 | |
245 | %description static | |
ce2ff00e | 246 | Static OpenSSL Toolkit libraries. |
faddd309 | 247 | |
30e72515 | 248 | %description static -l pl.UTF-8 |
ce2ff00e | 249 | Statyczne wersje bibliotek z OpenSSL. |
faddd309 | 250 | |
30e72515 JR |
251 | %description static -l pt_BR.UTF-8 |
252 | Bibliotecas estáticas para desenvolvimento com openssl. | |
453a8bf3 | 253 | |
30e72515 JR |
254 | %description static -l ru.UTF-8 |
255 | Программа openssl для работы с сертификатами и разделяемые библиотеки, | |
256 | которые реализуют множетсво криптографических алгоритмов, включая DES, | |
257 | RC4, RSA и SSL. Включает статические библиотеки для разработки | |
258 | приложений с использованием OpenSSL. | |
453a8bf3 | 259 | |
30e72515 JR |
260 | %description static -l uk.UTF-8 |
261 | Програма openssl для роботи з сертифікатами та бібліотеки спільного | |
262 | користування, що реалізують велику кількість криптографічних | |
263 | алгоритмів, включаючи DES, RC4, RSA та SSL. Містить статичні | |
264 | бібліотеки для розробки програм з використанням SSL. | |
453a8bf3 | 265 | |
21ac4f86 | 266 | %prep |
81e27b7e ER |
267 | %if %{with snap} |
268 | %setup -qcT -a1 | |
269 | mv %{name}-OpenSSL_1_0_2-stable/* . | |
270 | %else | |
155b2eda | 271 | %setup -q %{?subver:-n %{name}-%{version}-%{subver}} |
81e27b7e | 272 | %endif |
155b2eda ER |
273 | #%patch0 -p1 # alpha patch from year 2000 - drop it |
274 | #%patch1 -p1 # flags list has been nuked (thank god!) | |
275 | #%patch2 -p1 # openssl include subdir. check this | |
276 | #%patch3 -p1 # patched Makefile.org no longer exists | |
277 | #%patch4 -p1 # patched Makefile.org no longer exists | |
278 | #%patch5 -p1 # check | |
279 | #%patch6 -p1 # patched Makefile.org no longer exists | |
44d8c69e | 280 | %patch7 -p1 |
3b0168a6 | 281 | %patch8 -p1 |
f60e47ab | 282 | %ifarch x32 |
84745a0c | 283 | %patch10 -p1 |
42b56af8 | 284 | %endif |
2a83d92e | 285 | %patch11 -p1 |
a9839ec4 | 286 | |
d76d59fa | 287 | %build |
00466ad3 | 288 | touch Makefile.* |
04a5ad1f | 289 | |
155b2eda ER |
290 | # util/perlpath.pl no longer exists |
291 | #%{__perl} util/perlpath.pl %{__perl} | |
04a5ad1f | 292 | |
bf66f1a5 | 293 | OPTFLAGS="%{rpmcflags} %{rpmcppflags} %{?with_purify:-DPURIFY}" \ |
7250cee4 JB |
294 | PERL="%{__perl}" \ |
295 | %{__perl} ./Configure \ | |
2a83d92e | 296 | --prefix=%{_prefix} \ |
0fdaa4e3 | 297 | --openssldir=%{_sysconfdir}/%{name} \ |
6e7b8079 | 298 | --libdir=%{_lib} \ |
e1798b93 AM |
299 | shared \ |
300 | threads \ | |
2a82d451 AO |
301 | %{?with_sslv2:enable-ssl2}%{!?with_sslv2:no-ssl2} \ |
302 | %{?with_sslv3:enable-ssl3}%{!?with_sslv3:no-ssl3} \ | |
93a4f283 | 303 | %{!?with_zlib:no-}zlib \ |
215c1d6f AM |
304 | enable-cms \ |
305 | enable-idea \ | |
05889491 | 306 | enable-md2 \ |
e02b6d37 | 307 | enable-mdc2 \ |
215c1d6f | 308 | enable-rc5 \ |
e02b6d37 AM |
309 | enable-rfc3779 \ |
310 | enable-seed \ | |
e02b6d37 AM |
311 | %ifarch %{x8664} |
312 | enable-ec_nistp_64_gcc_128 \ | |
313 | %endif | |
51e76169 | 314 | %ifarch %{ix86} |
04a32771 | 315 | %ifarch i386 |
9fc51b3c | 316 | 386 linux-elf |
915551a7 | 317 | # ^- allow running on 80386 (default code uses bswapl available on i486+) |
51e76169 | 318 | %else |
9fc51b3c | 319 | linux-elf |
75c27cbe | 320 | %endif |
51e76169 | 321 | %endif |
dfc15f38 | 322 | %ifarch alpha |
9fc51b3c | 323 | linux-alpha+bwx-gcc |
dfc15f38 | 324 | %endif |
20bc1dd7 | 325 | %ifarch %{x8664} |
9fc51b3c | 326 | linux-x86_64 |
e08c1652 | 327 | %endif |
6bd2fbde JR |
328 | %ifarch x32 |
329 | linux-x32 | |
330 | %endif | |
dfc15f38 | 331 | %ifarch ia64 |
9fc51b3c | 332 | linux-ia64 |
dfc15f38 | 333 | %endif |
75c27cbe | 334 | %ifarch ppc |
9fc51b3c JB |
335 | linux-ppc |
336 | %endif | |
337 | %ifarch ppc64 | |
338 | linux-ppc64 | |
75c27cbe | 339 | %endif |
05285465 | 340 | %ifarch sparc |
9fc51b3c | 341 | linux-sparcv8 |
0384baf6 | 342 | %endif |
36db42b5 | 343 | %ifarch sparcv9 |
9fc51b3c | 344 | linux-sparcv9 |
36db42b5 PS |
345 | %endif |
346 | %ifarch sparc64 | |
9fc51b3c | 347 | linux64-sparcv9 |
36db42b5 | 348 | %endif |
9f6d1eb0 | 349 | %ifarch armv4 armv5 armv5t armv5te armv5tel |
350 | linux-armv4 | |
351 | %endif | |
05285465 | 352 | |
81e27b7e | 353 | v=$(awk -F= '/^VERSION/{print $2}' Makefile) |
6b0a00b5 | 354 | test "$v" = %{version}%{?subver:-%{subver}}%{?with_snap:-dev} |
81e27b7e | 355 | |
4c5d5b48 | 356 | %{__make} -j1 all %{?with_tests:tests} \ |
b84cddc8 | 357 | CC="%{__cc}" \ |
c75cb5a1 | 358 | ASFLAG='$(CFLAG) -Wa,--noexecstack' \ |
b84cddc8 | 359 | INSTALLTOP=%{_prefix} |
ce2ff00e | 360 | |
1c008d35 JB |
361 | # Rename POD sources of man pages. "openssl_" prefix is added to each |
362 | # manpage to avoid potential conflicts with other packages. | |
ce2ff00e | 363 | |
7f10be72 | 364 | for dir in doc/{apps,ssl,crypto}; do |
ce2ff00e | 365 | cd $dir || exit 1; |
db17f76a | 366 | %{__perl} -pi -e 's/(\W)((?<!openssl_)\w+)(\(\d\))/$1openssl_$2$3/g; s/openssl_openssl/openssl/g;' *.pod; |
78b5e413 | 367 | |
7f10be72 | 368 | for pod in !(openssl*).pod; do |
78b5e413 | 369 | mv -f $pod openssl_$pod; |
ce2ff00e | 370 | done |
7f10be72 | 371 | cd ../.. |
ce2ff00e | 372 | done |
373 | ||
21ac4f86 | 374 | %install |
04a5ad1f | 375 | rm -rf $RPM_BUILD_ROOT |
ce2ff00e | 376 | install -d $RPM_BUILD_ROOT{%{_sysconfdir}/%{name},%{_libdir}/%{name}} \ |
4b251642 JK |
377 | $RPM_BUILD_ROOT{%{_mandir}/{pl/man1,man{1,3,5,7}},%{_datadir}/ssl} \ |
378 | $RPM_BUILD_ROOT%{_pkgconfigdir} | |
faddd309 | 379 | |
29a78a60 | 380 | %{__make} -j1 install \ |
20c78826 ER |
381 | CC="%{__cc}" \ |
382 | ASFLAG='$(CFLAG) -Wa,--noexecstack' \ | |
383 | DESTDIR=$RPM_BUILD_ROOT \ | |
04a5ad1f | 384 | |
44d8c69e | 385 | mv -f $RPM_BUILD_ROOT%{_libdir}/lib*.so.*.* $RPM_BUILD_ROOT/%{_lib} |
c2a98469 JR |
386 | ln -sf /%{_lib}/$(basename $RPM_BUILD_ROOT/%{_lib}/libcrypto.*.*) $RPM_BUILD_ROOT%{_libdir}/libcrypto.so |
387 | ln -sf /%{_lib}/$(basename $RPM_BUILD_ROOT/%{_lib}/libssl.*.*) $RPM_BUILD_ROOT%{_libdir}/libssl.so | |
04a5ad1f | 388 | |
0fdaa4e3 | 389 | mv -f $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/misc/* $RPM_BUILD_ROOT%{_libdir}/%{name} |
20c78826 ER |
390 | rm -r $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/misc |
391 | ||
392 | # html version of man pages - not packaged | |
393 | %{__rm} -r $RPM_BUILD_ROOT%{_docdir}/%{name}/html/man[1357] | |
04a5ad1f | 394 | |
1c008d35 | 395 | # not installed as individual utilities (see openssl dgst instead) |
20c78826 | 396 | %{__rm} $RPM_BUILD_ROOT%{_mandir}/man1/{md4,md5,mdc2,ripemd160,sha,sha1,sha224,sha256,sha384,sha512}.1 |
1c008d35 | 397 | |
848e9cf2 | 398 | cp -p %{SOURCE2} $RPM_BUILD_ROOT%{_mandir}/pl/man1/openssl.1 |
dece7a9c ER |
399 | install -p %{SOURCE3} $RPM_BUILD_ROOT%{_bindir}/ssl-certificate |
400 | install -p %{SOURCE4} $RPM_BUILD_ROOT%{_bindir}/c_rehash.sh | |
9fc51b3c | 401 | |
57dc6058 JB |
402 | %clean |
403 | rm -rf $RPM_BUILD_ROOT | |
61a04a63 | 404 | |
d86c2c8b | 405 | %post -p /sbin/ldconfig |
ce2ff00e | 406 | %postun -p /sbin/ldconfig |
04a5ad1f | 407 | |
c8f5291b ER |
408 | %triggerpostun -- %{name}-tools < 1.0.0-5 |
409 | # the hashing format has changed in 1.0.0 | |
410 | [ ! -x %{_sbindir}/update-ca-certificates ] || %{_sbindir}/update-ca-certificates --fresh || : | |
411 | ||
0fdaa4e3 | 412 | %triggerpostun -- %{name} < 0.9.8i-2 |
62bcfa4e ER |
413 | # don't do anything on --downgrade |
414 | if [ $1 -le 1 ]; then | |
415 | exit 0 | |
416 | fi | |
0fdaa4e3 JR |
417 | if [ -d /var/lib/openssl/certs ] ; then |
418 | mv /var/lib/openssl/certs/* %{_sysconfdir}/%{name}/certs 2>/dev/null || : | |
419 | fi | |
420 | if [ -d /var/lib/openssl/private ] ; then | |
421 | mv /var/lib/openssl/private/* %{_sysconfdir}/%{name}/private 2>/dev/null || : | |
422 | fi | |
423 | if [ -d /var/lib/openssl ] ; then | |
424 | for f in /var/lib/openssl/* ; do | |
425 | [ -f "$f" ] && mv "$f" %{_sysconfdir}/%{name} 2>/dev/null || : | |
426 | done | |
62bcfa4e ER |
427 | rmdir /var/lib/openssl/* 2>/dev/null || : |
428 | rmdir /var/lib/openssl 2>/dev/null || : | |
0fdaa4e3 JR |
429 | fi |
430 | ||
21ac4f86 | 431 | %files |
04a5ad1f | 432 | %defattr(644,root,root,755) |
20c78826 ER |
433 | %doc CHANGES LICENSE NEWS README doc/*.txt |
434 | %attr(755,root,root) /%{_lib}/libcrypto.so.*.* | |
435 | %attr(755,root,root) /%{_lib}/libssl.so.*.* | |
fa6b6d15 | 436 | %dir %{_sysconfdir}/%{name} |
437 | %dir %{_sysconfdir}/%{name}/certs | |
b38449e1 | 438 | %dir %attr(700,root,root) %{_sysconfdir}/%{name}/private |
b87437db | 439 | %dir %{_datadir}/ssl |
ce2ff00e | 440 | |
182f9d23 | 441 | %files engines |
3a24c9cc | 442 | %defattr(644,root,root,755) |
20c78826 ER |
443 | %dir /%{_lib}/engines-1.1 |
444 | %attr(755,root,root) /%{_lib}/engines-1.1/*.so | |
182f9d23 | 445 | |
ce2ff00e | 446 | %files tools |
447 | %defattr(644,root,root,755) | |
623d135e | 448 | %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/%{name}/openssl.cnf |
d231add3 | 449 | %attr(755,root,root) %{_bindir}/c_rehash.sh |
44d8c69e | 450 | %attr(755,root,root) %{_bindir}/openssl |
ea55f735 | 451 | %attr(754,root,root) %{_bindir}/ssl-certificate |
17a30265 | 452 | |
ce2ff00e | 453 | %dir %{_libdir}/%{name} |
20c78826 ER |
454 | #%attr(755,root,root) %{_libdir}/%{name}/CA.sh |
455 | #%attr(755,root,root) %{_libdir}/%{name}/c_hash | |
456 | #%attr(755,root,root) %{_libdir}/%{name}/c_info | |
457 | #%attr(755,root,root) %{_libdir}/%{name}/c_issuer | |
458 | #%attr(755,root,root) %{_libdir}/%{name}/c_name | |
ce2ff00e | 459 | |
d86c2c8b | 460 | %{_mandir}/man1/openssl.1* |
461 | %{_mandir}/man1/openssl_asn1parse.1* | |
462 | %{_mandir}/man1/openssl_ca.1* | |
463 | %{_mandir}/man1/openssl_ciphers.1* | |
91881b49 | 464 | %{_mandir}/man1/openssl_cms.1* |
d86c2c8b | 465 | %{_mandir}/man1/openssl_crl.1* |
466 | %{_mandir}/man1/openssl_crl2pkcs7.1* | |
467 | %{_mandir}/man1/openssl_dgst.1* | |
468 | %{_mandir}/man1/openssl_dhparam.1* | |
469 | %{_mandir}/man1/openssl_dsa.1* | |
470 | %{_mandir}/man1/openssl_dsaparam.1* | |
9fc51b3c JB |
471 | %{_mandir}/man1/openssl_ec.1* |
472 | %{_mandir}/man1/openssl_ecparam.1* | |
d86c2c8b | 473 | %{_mandir}/man1/openssl_enc.1* |
5d088344 | 474 | %{_mandir}/man1/openssl_errstr.1* |
d86c2c8b | 475 | %{_mandir}/man1/openssl_gendsa.1* |
44d8c69e | 476 | %{_mandir}/man1/openssl_genpkey.1* |
d86c2c8b | 477 | %{_mandir}/man1/openssl_genrsa.1* |
478 | %{_mandir}/man1/openssl_nseq.1* | |
027a4889 | 479 | %{_mandir}/man1/openssl_ocsp.1* |
d86c2c8b | 480 | %{_mandir}/man1/openssl_passwd.1* |
481 | %{_mandir}/man1/openssl_pkcs12.1* | |
482 | %{_mandir}/man1/openssl_pkcs7.1* | |
483 | %{_mandir}/man1/openssl_pkcs8.1* | |
44d8c69e JB |
484 | %{_mandir}/man1/openssl_pkey.1* |
485 | %{_mandir}/man1/openssl_pkeyparam.1* | |
486 | %{_mandir}/man1/openssl_pkeyutl.1* | |
d86c2c8b | 487 | %{_mandir}/man1/openssl_rand.1* |
488 | %{_mandir}/man1/openssl_req.1* | |
489 | %{_mandir}/man1/openssl_rsa.1* | |
57dc6058 | 490 | %{_mandir}/man1/openssl_rsautl.1* |
d86c2c8b | 491 | %{_mandir}/man1/openssl_s_client.1* |
492 | %{_mandir}/man1/openssl_s_server.1* | |
c0cc4a35 | 493 | %{_mandir}/man1/openssl_s_time.1* |
d86c2c8b | 494 | %{_mandir}/man1/openssl_sess_id.1* |
495 | %{_mandir}/man1/openssl_smime.1* | |
496 | %{_mandir}/man1/openssl_speed.1* | |
497 | %{_mandir}/man1/openssl_spkac.1* | |
91881b49 AM |
498 | %{_mandir}/man1/openssl_ts.1* |
499 | %{_mandir}/man1/openssl_tsget.1* | |
d86c2c8b | 500 | %{_mandir}/man1/openssl_verify.1* |
501 | %{_mandir}/man1/openssl_version.1* | |
502 | %{_mandir}/man1/openssl_x509.1* | |
1c008d35 JB |
503 | %{_mandir}/man5/openssl_config.5* |
504 | %{_mandir}/man5/openssl_x509v3_config.5* | |
62382817 | 505 | %lang(pl) %{_mandir}/pl/man1/openssl.1* |
ce2ff00e | 506 | |
507 | %files tools-perl | |
508 | %defattr(644,root,root,755) | |
62313b5e | 509 | %attr(755,root,root) %{_bindir}/c_rehash |
ce2ff00e | 510 | %attr(755,root,root) %{_libdir}/%{name}/CA.pl |
848e9cf2 | 511 | %attr(755,root,root) %{_libdir}/%{name}/tsget |
d86c2c8b | 512 | %{_mandir}/man1/openssl_CA.pl.1* |
20c78826 | 513 | #%{_mandir}/man1/openssl_c_rehash.1* |
faddd309 AF |
514 | |
515 | %files devel | |
516 | %defattr(644,root,root,755) | |
f4434df9 PS |
517 | %attr(755,root,root) %{_libdir}/libcrypto.so |
518 | %attr(755,root,root) %{_libdir}/libssl.so | |
ce2ff00e | 519 | %{_includedir}/%{name} |
9fc51b3c JB |
520 | %{_pkgconfigdir}/libcrypto.pc |
521 | %{_pkgconfigdir}/libssl.pc | |
8c362d23 | 522 | %{_pkgconfigdir}/openssl.pc |
20c78826 ER |
523 | %if 1 |
524 | %{_mandir}/man3/*.3* | |
525 | %{_mandir}/man7/*.7* | |
526 | %else | |
027a4889 | 527 | %{_mandir}/man3/openssl*.3* |
1c008d35 | 528 | %{_mandir}/man7/openssl_des_modes.7* |
20c78826 | 529 | %endif |
faddd309 AF |
530 | |
531 | %files static | |
532 | %defattr(644,root,root,755) | |
7250cee4 JB |
533 | %{_libdir}/libcrypto.a |
534 | %{_libdir}/libssl.a |