]>
Commit | Line | Data |
---|---|---|
44d8c69e | 1 | # |
2403ba81 | 2 | # Conditional build: |
d76d59fa | 3 | %bcond_without tests # don't perform "make tests" |
d343076c | 4 | %bcond_without zlib # zlib: note - enables CVE-2012-4929 vulnerability |
c4c6d146 AM |
5 | %bcond_with sslv2 # SSLv2: note - many flaws http://en.wikipedia.org/wiki/Transport_Layer_Security#SSL_2.0 |
6 | %bcond_with sslv3 # SSLv3: note - enables CVE-2014-3566 vulnerability | |
81e27b7e | 7 | %bcond_with snap # use GitHub snapshot to build branch release |
dece7a9c | 8 | |
779bb536 | 9 | %include /usr/lib/rpm/macros.perl |
ce2ff00e | 10 | Summary: OpenSSL Toolkit libraries for the "Secure Sockets Layer" (SSL v2/v3) |
e6bfca5b ER |
11 | Summary(de.UTF-8): Secure Sockets Layer (SSL)-Kommunikationslibrary |
12 | Summary(es.UTF-8): Biblioteca C que suministra algoritmos y protocolos criptográficos | |
13 | Summary(fr.UTF-8): Utilitaires de communication SSL (Secure Sockets Layer) | |
14 | Summary(pl.UTF-8): Biblioteki OpenSSL (SSL v2/v3) | |
15 | Summary(pt_BR.UTF-8): Uma biblioteca C que fornece vários algoritmos e protocolos criptográficos | |
16 | Summary(ru.UTF-8): Библиотеки и утилиты для соединений через Secure Sockets Layer | |
17 | Summary(uk.UTF-8): Бібліотеки та утиліти для з'єднань через Secure Sockets Layer | |
56470945 | 18 | Name: openssl |
5577c65e | 19 | # Version 1.1.0 will be supported until 2019-??-?? (one year after release of 1.1.1). |
55af9845 | 20 | # https://www.openssl.org/about/releasestrat.html |
c4c6d146 | 21 | Version: 1.1.1 |
11de7a96 | 22 | Release: 1 |
d7fc4164 | 23 | License: Apache-like |
56470945 | 24 | Group: Libraries |
81e27b7e | 25 | %if %{without snap} |
56fc3686 | 26 | Source0: https://www.openssl.org/source/%{name}-%{version}.tar.gz |
c4c6d146 | 27 | # Source0-md5: 7079eb017429e0ffb9efb42bf80ccb21 |
81e27b7e | 28 | %else |
b3914c80 | 29 | Source1: https://github.com/openssl/openssl/archive/OpenSSL_1_1_0-stable/%{name}-%{version}-dev.tar.gz |
81e27b7e | 30 | %endif |
62382817 | 31 | Source2: %{name}.1.pl |
ea55f735 | 32 | Source3: %{name}-ssl-certificate.sh |
d231add3 | 33 | Source4: %{name}-c_rehash.sh |
e106ff02 | 34 | Patch1: %{name}-optflags.patch |
c4c6d146 | 35 | |
76855748 | 36 | Patch3: %{name}-man-namespace.patch |
c4c6d146 | 37 | |
76855748 | 38 | Patch5: %{name}-ca-certificates.patch |
c4c6d146 | 39 | |
76855748 AO |
40 | Patch7: %{name}-find.patch |
41 | Patch8: pic.patch | |
c4c6d146 | 42 | |
2a83d92e | 43 | Patch11: engines-dir.patch |
bd7f0ef1 | 44 | URL: http://www.openssl.org/ |
af59ed59 | 45 | BuildRequires: perl-devel >= 1:5.10.0 |
1543104d | 46 | BuildRequires: pkgconfig |
9edbb66f | 47 | BuildRequires: rpm-perlprov >= 4.1-13 |
20bc1dd7 | 48 | BuildRequires: rpmbuild(macros) >= 1.213 |
31b28434 | 49 | BuildRequires: sed >= 4.0 |
1ecb3a25 | 50 | BuildRequires: zlib-devel |
e9e51fab | 51 | Requires: ca-certificates >= 20120623-1.1 |
dece7a9c | 52 | Requires: rpm-whiteout >= 1.7 |
04a5ad1f AF |
53 | Obsoletes: SSLeay |
54 | Obsoletes: SSLeay-devel | |
55 | Obsoletes: SSLeay-perl | |
a280467c | 56 | Obsoletes: libopenssl0 |
4ec787ae | 57 | %if "%{pld_release}" == "ac" |
7bb98c5d | 58 | Conflicts: neon < 0.26.3-3 |
e21ec158 | 59 | Conflicts: ntpd < 4.2.4p8-10 |
f3136daa | 60 | Conflicts: openssh-clients < 2:5.8p1-9 |
4ec787ae ER |
61 | Conflicts: openssh-server < 2:5.8p1-9 |
62 | %else | |
3a24c9cc ER |
63 | Conflicts: neon < 0.29.6-8 |
64 | Conflicts: openssh-clients < 2:6.2p2-3 | |
65 | Conflicts: openssh-server < 2:6.2p2-3 | |
c04ce0eb | 66 | %endif |
0f86ef4a | 67 | BuildRoot: %{tmpdir}/%{name}-%{version}-root-%(id -u -n) |
21ac4f86 AF |
68 | |
69 | %description | |
70 | The OpenSSL Project is a collaborative effort to develop a robust, | |
b39fed70 | 71 | commercial-grade, full-featured, and Open Source toolkit implementing |
72 | the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS | |
73 | v1) protocols with full-strength cryptography world-wide. The project | |
74 | is managed by a worldwide community of volunteers that use the | |
75 | Internet to communicate, plan, and develop the OpenSSL tookit and its | |
76 | related documentation. | |
56470945 | 77 | |
b39fed70 | 78 | OpenSSL is based on the excellent SSLeay library developed by Eric A. |
79 | Young and Tim J. Hudson. The OpenSSL toolkit is licensed under an | |
80 | Apache-style licence, which basically means that you are free to get | |
81 | and use it for commercial and non-commercial purposes subject to some | |
82 | simple license conditions. | |
21ac4f86 | 83 | |
fc19f542 | 84 | This package contains shared libraries only, install openssl-tools if |
85 | you want to use openssl cmdline tool. | |
ce2ff00e | 86 | |
30e72515 JR |
87 | %description -l de.UTF-8 |
88 | Openssl enthält das OpenSSL Zertifikatsmanagementtool und shared | |
89 | libraries, die verschiedene Verschlüsselungs- und | |
90 | Entschlüsselungsalgorithmen und -protokolle, wie DES, RC4, RSA und SSL | |
91 | zur Verfügung stellen. | |
453a8bf3 | 92 | |
30e72515 JR |
93 | %description -l es.UTF-8 |
94 | Biblioteca C que suministra algoritmos y protocolos criptográficos. | |
2fad19b0 | 95 | |
30e72515 | 96 | %description -l fr.UTF-8 |
56470945 | 97 | OpenSSL est un outiil de gestion des certificats et les librairies |
98 | partagees qui fournit plusieurs protocoles et algorithmes de | |
99 | codage/decodage, incluant DES, RC4, RSA et SSL. | |
2fad19b0 | 100 | |
30e72515 JR |
101 | %description -l pl.UTF-8 |
102 | Implementacja protokołów kryptograficznych Secure Socket Layer (SSL) | |
78b5e413 TP |
103 | v2/v3 oraz Transport Layer Security (TLS v1). |
104 | ||
30e72515 JR |
105 | %description -l pt_BR.UTF-8 |
106 | Uma biblioteca C que fornece vários algoritmos e protocolos | |
107 | criptográficos, incluindo DES, RC4, RSA e SSL. Inclui bibliotecas | |
108 | compartilhadas e utilitários. | |
453a8bf3 | 109 | |
30e72515 JR |
110 | %description -l ru.UTF-8 |
111 | Программа openssl для работы с сертификатами и разделяемые библиотеки, | |
112 | которые реализуют множетсво криптографических алгоритмов, включая DES, | |
113 | RC4, RSA и SSL. | |
453a8bf3 | 114 | |
30e72515 JR |
115 | %description -l uk.UTF-8 |
116 | Програма openssl для роботи з сертифікатами та бібліотеки спільного | |
117 | користування, що реалізують велику кількість криптографічних | |
118 | алгоритмів, включаючи DES, RC4, RSA та SSL. | |
453a8bf3 | 119 | |
182f9d23 TP |
120 | %package engines |
121 | Summary: OpenSSL optional crypto engines | |
545f4646 | 122 | Summary(pl.UTF-8): Opcjonalne silniki kryptograficzne dla OpenSSL-a |
182f9d23 TP |
123 | Group: Libraries |
124 | Requires: %{name} = %{version}-%{release} | |
125 | ||
126 | %description engines | |
127 | With OpenSSL 0.9.6, a new component was added to support alternative | |
545f4646 JB |
128 | cryptography implementations, most commonly for interfacing with |
129 | external crypto devices (eg. accelerator cards). This component is | |
130 | called ENGINE. | |
182f9d23 TP |
131 | |
132 | There are currently built-in ENGINE implementations for the following | |
133 | crypto devices: | |
134 | ||
135 | - CryptoSwift | |
136 | - Compaq Atalla | |
137 | - nCipher CHIL | |
138 | - Nuron | |
139 | - Broadcom uBSec | |
140 | ||
141 | In addition, dynamic binding to external ENGINE implementations is now | |
3a24c9cc | 142 | provided by a special ENGINE called "dynamic". |
182f9d23 | 143 | |
545f4646 JB |
144 | %description engines -l pl.UTF-8 |
145 | Począwszy od OpenSSL-a 0.9.6 został dodany nowy komponent, mający | |
146 | wspierać alternatywne implementacje kryptografii, przeważnie | |
147 | współpracujące z zewnętrznymi urządzeniami kryptograficznymi (np. | |
3a24c9cc ER |
148 | kartami akceleratorów). Komponent ten jest nazywany SILNIKIEM (ang. |
149 | ENGINE). | |
545f4646 JB |
150 | |
151 | Obecnie istnieją wbudowane implementacje silników dla następujących | |
152 | urządzeń kryptograficznych: | |
153 | - CryptoSwift | |
154 | - Compaq Atalla | |
155 | - nCipher CHIL | |
156 | - Nuron | |
157 | - Broadcom uBSec | |
158 | ||
159 | Ponadto zapewnione jest dynamiczne wiązanie dla zewnętrznych | |
160 | implementacji silników poprzez specjalny silnik o nazwie "dynamic". | |
161 | ||
ce2ff00e | 162 | %package tools |
163 | Summary: OpenSSL command line tool and utilities | |
e6bfca5b | 164 | Summary(pl.UTF-8): Zestaw narzędzi i skryptów |
fc19f542 | 165 | Group: Applications/Communications |
82859ae1 | 166 | Requires: %{name} = %{version}-%{release} |
9583cd23 | 167 | Requires: which |
ce2ff00e | 168 | |
169 | %description tools | |
170 | The OpenSSL Toolkit cmdline tool openssl and utility scripts. | |
171 | ||
30e72515 JR |
172 | %description tools -l pl.UTF-8 |
173 | Zestaw narzędzi i skryptów wywoływanych z linii poleceń. | |
78b5e413 | 174 | |
ce2ff00e | 175 | %package tools-perl |
176 | Summary: OpenSSL utilities written in Perl | |
e6bfca5b | 177 | Summary(pl.UTF-8): Narzędzia OpenSSL napisane w perlu |
fc19f542 | 178 | Group: Applications/Communications |
82859ae1 | 179 | Requires: %{name} = %{version}-%{release} |
2b2149ff | 180 | |
ce2ff00e | 181 | %description tools-perl |
d86c2c8b | 182 | OpenSSL Toolkit tools written in Perl. |
2b2149ff | 183 | |
30e72515 JR |
184 | %description tools-perl -l pl.UTF-8 |
185 | Narzędzia OpenSSL napisane w perlu. | |
78b5e413 | 186 | |
faddd309 | 187 | %package devel |
ce2ff00e | 188 | Summary: Development part of OpenSSL Toolkit libraries |
e6bfca5b ER |
189 | Summary(de.UTF-8): Secure Sockets Layer Kommunikationslibrary: statische libraries+header |
190 | Summary(es.UTF-8): Bibliotecas y archivos de inclusión para desarrollo OpenSSL | |
191 | Summary(fr.UTF-8): Librairies statiques, headers et utilitaires pour communication SSL | |
192 | Summary(pl.UTF-8): Część bibiloteki OpenSSL przeznaczona dla programistów | |
193 | Summary(pt_BR.UTF-8): Bibliotecas e arquivos de inclusão para desenvolvimento OpenSSL | |
194 | Summary(ru.UTF-8): Библиотеки, хедеры и утилиты для Secure Sockets Layer | |
195 | Summary(uk.UTF-8): Бібліотеки, хедери та утиліти для Secure Sockets Layer | |
9c05bcac | 196 | Group: Development/Libraries |
82859ae1 | 197 | Requires: %{name} = %{version}-%{release} |
a280467c | 198 | Obsoletes: libopenssl0-devel |
faddd309 AF |
199 | |
200 | %description devel | |
201 | Development part of OpenSSL library. | |
202 | ||
30e72515 JR |
203 | %description devel -l es.UTF-8 |
204 | Bibliotecas y archivos de inclusión para desarrollo OpenSSL | |
453a8bf3 | 205 | |
30e72515 JR |
206 | %description devel -l pl.UTF-8 |
207 | Część biblioteki OpenSSL przeznaczona dla programistów. | |
faddd309 | 208 | |
30e72515 JR |
209 | %description devel -l pt_BR.UTF-8 |
210 | Uma biblioteca C que fornece vários algoritmos e protocolos | |
211 | criptográficos, incluindo DES, RC4, RSA e SSL. Inclui bibliotecas e | |
212 | arquivos de inclusão para desenvolvimento. | |
453a8bf3 | 213 | |
30e72515 JR |
214 | %description devel -l ru.UTF-8 |
215 | Программа openssl для работы с сертификатами и разделяемые библиотеки, | |
216 | которые реализуют множетсво криптографических алгоритмов, включая DES, | |
217 | RC4, RSA и SSL. Включает библиотеки и хедеры для разработки приложений | |
218 | с использованием SSL. | |
453a8bf3 | 219 | |
30e72515 JR |
220 | %description devel -l uk.UTF-8 |
221 | Програма openssl для роботи з сертифікатами та бібліотеки спільного | |
222 | користування, що реалізують велику кількість криптографічних | |
223 | алгоритмів, включаючи DES, RC4, RSA та SSL. Містить бібліотеки та | |
224 | хедери для розробки програм з використанням SSL. | |
453a8bf3 | 225 | |
faddd309 | 226 | %package static |
ce2ff00e | 227 | Summary: Static OpenSSL libraries |
e6bfca5b ER |
228 | Summary(pl.UTF-8): Statyczne wersje bibliotek z OpenSSL |
229 | Summary(pt_BR.UTF-8): Bibliotecas estáticas para desenvolvimento com openssl | |
230 | Summary(ru.UTF-8): Статические библиотеки разработчика для OpenSSL | |
231 | Summary(uk.UTF-8): Статичні бібліотеки програміста для OpenSSL | |
9c05bcac | 232 | Group: Development/Libraries |
82859ae1 | 233 | Requires: %{name}-devel = %{version}-%{release} |
faddd309 AF |
234 | |
235 | %description static | |
ce2ff00e | 236 | Static OpenSSL Toolkit libraries. |
faddd309 | 237 | |
30e72515 | 238 | %description static -l pl.UTF-8 |
ce2ff00e | 239 | Statyczne wersje bibliotek z OpenSSL. |
faddd309 | 240 | |
30e72515 JR |
241 | %description static -l pt_BR.UTF-8 |
242 | Bibliotecas estáticas para desenvolvimento com openssl. | |
453a8bf3 | 243 | |
30e72515 JR |
244 | %description static -l ru.UTF-8 |
245 | Программа openssl для работы с сертификатами и разделяемые библиотеки, | |
246 | которые реализуют множетсво криптографических алгоритмов, включая DES, | |
247 | RC4, RSA и SSL. Включает статические библиотеки для разработки | |
248 | приложений с использованием OpenSSL. | |
453a8bf3 | 249 | |
30e72515 JR |
250 | %description static -l uk.UTF-8 |
251 | Програма openssl для роботи з сертифікатами та бібліотеки спільного | |
252 | користування, що реалізують велику кількість криптографічних | |
253 | алгоритмів, включаючи DES, RC4, RSA та SSL. Містить статичні | |
254 | бібліотеки для розробки програм з використанням SSL. | |
453a8bf3 | 255 | |
21ac4f86 | 256 | %prep |
81e27b7e ER |
257 | %if %{with snap} |
258 | %setup -qcT -a1 | |
1c6e2c73 | 259 | %{__mv} %{name}-OpenSSL_1_1_0-stable/* . |
81e27b7e | 260 | %else |
155b2eda | 261 | %setup -q %{?subver:-n %{name}-%{version}-%{subver}} |
81e27b7e | 262 | %endif |
c4c6d146 | 263 | |
1c6e2c73 | 264 | %patch1 -p1 |
c4c6d146 | 265 | |
1c6e2c73 | 266 | %patch3 -p1 |
c4c6d146 | 267 | |
1c6e2c73 | 268 | %patch5 -p1 |
c4c6d146 | 269 | |
44d8c69e | 270 | %patch7 -p1 |
3b0168a6 | 271 | %patch8 -p1 |
c4c6d146 | 272 | |
2a83d92e | 273 | %patch11 -p1 |
a9839ec4 | 274 | |
d76d59fa | 275 | %build |
00466ad3 | 276 | touch Makefile.* |
04a5ad1f | 277 | |
7250cee4 JB |
278 | PERL="%{__perl}" \ |
279 | %{__perl} ./Configure \ | |
2a83d92e | 280 | --prefix=%{_prefix} \ |
0fdaa4e3 | 281 | --openssldir=%{_sysconfdir}/%{name} \ |
6e7b8079 | 282 | --libdir=%{_lib} \ |
08291e9a | 283 | -Wa,--noexecstack \ |
e1798b93 AM |
284 | shared \ |
285 | threads \ | |
2a82d451 AO |
286 | %{?with_sslv2:enable-ssl2}%{!?with_sslv2:no-ssl2} \ |
287 | %{?with_sslv3:enable-ssl3}%{!?with_sslv3:no-ssl3} \ | |
93a4f283 | 288 | %{!?with_zlib:no-}zlib \ |
215c1d6f AM |
289 | enable-cms \ |
290 | enable-idea \ | |
05889491 | 291 | enable-md2 \ |
e02b6d37 | 292 | enable-mdc2 \ |
215c1d6f | 293 | enable-rc5 \ |
e02b6d37 | 294 | enable-rfc3779 \ |
715b407d | 295 | enable-sctp \ |
e02b6d37 | 296 | enable-seed \ |
e02b6d37 AM |
297 | %ifarch %{x8664} |
298 | enable-ec_nistp_64_gcc_128 \ | |
299 | %endif | |
51e76169 | 300 | %ifarch %{ix86} |
04a32771 | 301 | %ifarch i386 |
9fc51b3c | 302 | 386 linux-elf |
915551a7 | 303 | # ^- allow running on 80386 (default code uses bswapl available on i486+) |
51e76169 | 304 | %else |
9fc51b3c | 305 | linux-elf |
75c27cbe | 306 | %endif |
51e76169 | 307 | %endif |
dfc15f38 | 308 | %ifarch alpha |
1c6e2c73 | 309 | linux-alpha-gcc |
dfc15f38 | 310 | %endif |
20bc1dd7 | 311 | %ifarch %{x8664} |
9fc51b3c | 312 | linux-x86_64 |
e08c1652 | 313 | %endif |
6bd2fbde JR |
314 | %ifarch x32 |
315 | linux-x32 | |
316 | %endif | |
dfc15f38 | 317 | %ifarch ia64 |
9fc51b3c | 318 | linux-ia64 |
dfc15f38 | 319 | %endif |
75c27cbe | 320 | %ifarch ppc |
9fc51b3c JB |
321 | linux-ppc |
322 | %endif | |
323 | %ifarch ppc64 | |
324 | linux-ppc64 | |
75c27cbe | 325 | %endif |
05285465 | 326 | %ifarch sparc |
9fc51b3c | 327 | linux-sparcv8 |
0384baf6 | 328 | %endif |
36db42b5 | 329 | %ifarch sparcv9 |
9fc51b3c | 330 | linux-sparcv9 |
36db42b5 PS |
331 | %endif |
332 | %ifarch sparc64 | |
9fc51b3c | 333 | linux64-sparcv9 |
36db42b5 | 334 | %endif |
1c6e2c73 | 335 | %ifarch %{arm} |
9f6d1eb0 | 336 | linux-armv4 |
337 | %endif | |
1c6e2c73 JB |
338 | %ifarch aarch64 |
339 | linux-aarch64 | |
340 | %endif | |
05285465 | 341 | |
81e27b7e | 342 | v=$(awk -F= '/^VERSION/{print $2}' Makefile) |
6b0a00b5 | 343 | test "$v" = %{version}%{?subver:-%{subver}}%{?with_snap:-dev} |
81e27b7e | 344 | |
4c5d5b48 | 345 | %{__make} -j1 all %{?with_tests:tests} \ |
b84cddc8 | 346 | CC="%{__cc}" \ |
1c6e2c73 | 347 | OPTFLAGS="%{rpmcflags} %{rpmcppflags}" \ |
b84cddc8 | 348 | INSTALLTOP=%{_prefix} |
ce2ff00e | 349 | |
1c6e2c73 | 350 | # Rename POD sources of man pages. "openssl-" prefix is added to each |
c4c6d146 AM |
351 | # manpage to avoid potential conflicts with other packages. |
352 | # openssl-man-namespace.patch mostly marks these pages with "openssl-" prefix. | |
ce2ff00e | 353 | |
c4c6d146 | 354 | for podfile in $(grep -rl '^openssl-' doc/man*); do |
1c6e2c73 JB |
355 | dir=$(dirname "$podfile") |
356 | base=$(basename "$podfile") | |
357 | %{__mv} "$podfile" "$dir/openssl-$base" | |
ce2ff00e | 358 | done |
359 | ||
21ac4f86 | 360 | %install |
04a5ad1f | 361 | rm -rf $RPM_BUILD_ROOT |
ce2ff00e | 362 | install -d $RPM_BUILD_ROOT{%{_sysconfdir}/%{name},%{_libdir}/%{name}} \ |
4b251642 JK |
363 | $RPM_BUILD_ROOT{%{_mandir}/{pl/man1,man{1,3,5,7}},%{_datadir}/ssl} \ |
364 | $RPM_BUILD_ROOT%{_pkgconfigdir} | |
faddd309 | 365 | |
29a78a60 | 366 | %{__make} -j1 install \ |
20c78826 | 367 | CC="%{__cc}" \ |
08291e9a | 368 | DESTDIR=$RPM_BUILD_ROOT |
04a5ad1f | 369 | |
1c6e2c73 | 370 | %{__mv} $RPM_BUILD_ROOT%{_libdir}/lib*.so.*.* $RPM_BUILD_ROOT/%{_lib} |
c2a98469 JR |
371 | ln -sf /%{_lib}/$(basename $RPM_BUILD_ROOT/%{_lib}/libcrypto.*.*) $RPM_BUILD_ROOT%{_libdir}/libcrypto.so |
372 | ln -sf /%{_lib}/$(basename $RPM_BUILD_ROOT/%{_lib}/libssl.*.*) $RPM_BUILD_ROOT%{_libdir}/libssl.so | |
04a5ad1f | 373 | |
1c6e2c73 JB |
374 | %{__mv} $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/misc/* $RPM_BUILD_ROOT%{_libdir}/%{name} |
375 | %{__rm} -r $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/misc | |
20c78826 ER |
376 | |
377 | # html version of man pages - not packaged | |
378 | %{__rm} -r $RPM_BUILD_ROOT%{_docdir}/%{name}/html/man[1357] | |
04a5ad1f | 379 | |
848e9cf2 | 380 | cp -p %{SOURCE2} $RPM_BUILD_ROOT%{_mandir}/pl/man1/openssl.1 |
dece7a9c ER |
381 | install -p %{SOURCE3} $RPM_BUILD_ROOT%{_bindir}/ssl-certificate |
382 | install -p %{SOURCE4} $RPM_BUILD_ROOT%{_bindir}/c_rehash.sh | |
9fc51b3c | 383 | |
57dc6058 JB |
384 | %clean |
385 | rm -rf $RPM_BUILD_ROOT | |
61a04a63 | 386 | |
d86c2c8b | 387 | %post -p /sbin/ldconfig |
ce2ff00e | 388 | %postun -p /sbin/ldconfig |
04a5ad1f | 389 | |
c8f5291b ER |
390 | %triggerpostun -- %{name}-tools < 1.0.0-5 |
391 | # the hashing format has changed in 1.0.0 | |
392 | [ ! -x %{_sbindir}/update-ca-certificates ] || %{_sbindir}/update-ca-certificates --fresh || : | |
393 | ||
0fdaa4e3 | 394 | %triggerpostun -- %{name} < 0.9.8i-2 |
62bcfa4e ER |
395 | # don't do anything on --downgrade |
396 | if [ $1 -le 1 ]; then | |
397 | exit 0 | |
398 | fi | |
0fdaa4e3 JR |
399 | if [ -d /var/lib/openssl/certs ] ; then |
400 | mv /var/lib/openssl/certs/* %{_sysconfdir}/%{name}/certs 2>/dev/null || : | |
401 | fi | |
402 | if [ -d /var/lib/openssl/private ] ; then | |
403 | mv /var/lib/openssl/private/* %{_sysconfdir}/%{name}/private 2>/dev/null || : | |
404 | fi | |
405 | if [ -d /var/lib/openssl ] ; then | |
406 | for f in /var/lib/openssl/* ; do | |
407 | [ -f "$f" ] && mv "$f" %{_sysconfdir}/%{name} 2>/dev/null || : | |
408 | done | |
62bcfa4e ER |
409 | rmdir /var/lib/openssl/* 2>/dev/null || : |
410 | rmdir /var/lib/openssl 2>/dev/null || : | |
0fdaa4e3 JR |
411 | fi |
412 | ||
21ac4f86 | 413 | %files |
04a5ad1f | 414 | %defattr(644,root,root,755) |
20c78826 ER |
415 | %doc CHANGES LICENSE NEWS README doc/*.txt |
416 | %attr(755,root,root) /%{_lib}/libcrypto.so.*.* | |
417 | %attr(755,root,root) /%{_lib}/libssl.so.*.* | |
fa6b6d15 | 418 | %dir %{_sysconfdir}/%{name} |
419 | %dir %{_sysconfdir}/%{name}/certs | |
b38449e1 | 420 | %dir %attr(700,root,root) %{_sysconfdir}/%{name}/private |
b87437db | 421 | %dir %{_datadir}/ssl |
ce2ff00e | 422 | |
182f9d23 | 423 | %files engines |
3a24c9cc | 424 | %defattr(644,root,root,755) |
20c78826 ER |
425 | %dir /%{_lib}/engines-1.1 |
426 | %attr(755,root,root) /%{_lib}/engines-1.1/*.so | |
182f9d23 | 427 | |
ce2ff00e | 428 | %files tools |
429 | %defattr(644,root,root,755) | |
c4c6d146 | 430 | %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/%{name}/ct_log_list.cnf |
623d135e | 431 | %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/%{name}/openssl.cnf |
d231add3 | 432 | %attr(755,root,root) %{_bindir}/c_rehash.sh |
44d8c69e | 433 | %attr(755,root,root) %{_bindir}/openssl |
ea55f735 | 434 | %attr(754,root,root) %{_bindir}/ssl-certificate |
d86c2c8b | 435 | %{_mandir}/man1/openssl.1* |
1c6e2c73 | 436 | %{_mandir}/man1/openssl-asn1parse.1* |
1c6e2c73 JB |
437 | %{_mandir}/man1/openssl-ca.1* |
438 | %{_mandir}/man1/openssl-ciphers.1* | |
439 | %{_mandir}/man1/openssl-cms.1* | |
440 | %{_mandir}/man1/openssl-crl.1* | |
441 | %{_mandir}/man1/openssl-crl2pkcs7.1* | |
442 | %{_mandir}/man1/openssl-dgst.1* | |
443 | %{_mandir}/man1/openssl-dhparam.1* | |
444 | %{_mandir}/man1/openssl-dsa.1* | |
445 | %{_mandir}/man1/openssl-dsaparam.1* | |
446 | %{_mandir}/man1/openssl-ec.1* | |
447 | %{_mandir}/man1/openssl-ecparam.1* | |
448 | %{_mandir}/man1/openssl-enc.1* | |
449 | %{_mandir}/man1/openssl-engine.1* | |
450 | %{_mandir}/man1/openssl-errstr.1* | |
451 | %{_mandir}/man1/openssl-gendsa.1* | |
452 | %{_mandir}/man1/openssl-genpkey.1* | |
453 | %{_mandir}/man1/openssl-genrsa.1* | |
454 | %{_mandir}/man1/openssl-list.1* | |
1c6e2c73 JB |
455 | %{_mandir}/man1/openssl-nseq.1* |
456 | %{_mandir}/man1/openssl-ocsp.1* | |
457 | %{_mandir}/man1/openssl-passwd.1* | |
458 | %{_mandir}/man1/openssl-pkcs12.1* | |
459 | %{_mandir}/man1/openssl-pkcs7.1* | |
460 | %{_mandir}/man1/openssl-pkcs8.1* | |
461 | %{_mandir}/man1/openssl-pkey.1* | |
462 | %{_mandir}/man1/openssl-pkeyparam.1* | |
463 | %{_mandir}/man1/openssl-pkeyutl.1* | |
c4c6d146 | 464 | %{_mandir}/man1/openssl-prime.1* |
1c6e2c73 JB |
465 | %{_mandir}/man1/openssl-rand.1* |
466 | %{_mandir}/man1/openssl-rehash.1* | |
467 | %{_mandir}/man1/openssl-req.1* | |
1c6e2c73 JB |
468 | %{_mandir}/man1/openssl-rsa.1* |
469 | %{_mandir}/man1/openssl-rsautl.1* | |
470 | %{_mandir}/man1/openssl-s_client.1* | |
1c6e2c73 | 471 | %{_mandir}/man1/openssl-sess_id.1* |
1c6e2c73 JB |
472 | %{_mandir}/man1/openssl-smime.1* |
473 | %{_mandir}/man1/openssl-speed.1* | |
474 | %{_mandir}/man1/openssl-spkac.1* | |
c4c6d146 AM |
475 | %{_mandir}/man1/openssl-srp.1* |
476 | %{_mandir}/man1/openssl-s_server.1* | |
477 | %{_mandir}/man1/openssl-s_time.1* | |
478 | %{_mandir}/man1/openssl-storeutl.1* | |
1c6e2c73 JB |
479 | %{_mandir}/man1/openssl-ts.1* |
480 | %{_mandir}/man1/openssl-tsget.1* | |
481 | %{_mandir}/man1/openssl-verify.1* | |
482 | %{_mandir}/man1/openssl-version.1* | |
483 | %{_mandir}/man1/openssl-x509.1* | |
484 | %{_mandir}/man5/openssl-config.5* | |
485 | %{_mandir}/man5/openssl-x509v3_config.5* | |
62382817 | 486 | %lang(pl) %{_mandir}/pl/man1/openssl.1* |
ce2ff00e | 487 | |
488 | %files tools-perl | |
489 | %defattr(644,root,root,755) | |
62313b5e | 490 | %attr(755,root,root) %{_bindir}/c_rehash |
08291e9a | 491 | %dir %{_libdir}/%{name} |
ce2ff00e | 492 | %attr(755,root,root) %{_libdir}/%{name}/CA.pl |
848e9cf2 | 493 | %attr(755,root,root) %{_libdir}/%{name}/tsget |
c4c6d146 | 494 | %attr(755,root,root) %{_libdir}/%{name}/tsget.pl |
1c6e2c73 JB |
495 | %{_mandir}/man1/CA.pl.1* |
496 | %{_mandir}/man1/c_rehash.1* | |
faddd309 AF |
497 | |
498 | %files devel | |
499 | %defattr(644,root,root,755) | |
f4434df9 PS |
500 | %attr(755,root,root) %{_libdir}/libcrypto.so |
501 | %attr(755,root,root) %{_libdir}/libssl.so | |
ce2ff00e | 502 | %{_includedir}/%{name} |
9fc51b3c JB |
503 | %{_pkgconfigdir}/libcrypto.pc |
504 | %{_pkgconfigdir}/libssl.pc | |
8c362d23 | 505 | %{_pkgconfigdir}/openssl.pc |
1c6e2c73 | 506 | %{_mandir}/man3/ACCESS_DESCRIPTION_*.3* |
c4c6d146 | 507 | %{_mandir}/man3/ADMISSION*.3* |
1c6e2c73 JB |
508 | %{_mandir}/man3/ASId*.3* |
509 | %{_mandir}/man3/ASRange_*.3* | |
510 | %{_mandir}/man3/ASN1_*.3* | |
511 | %{_mandir}/man3/ASYNC_*.3* | |
512 | %{_mandir}/man3/AUTHORITY_*.3* | |
513 | %{_mandir}/man3/BASIC_CONSTRAINTS_*.3* | |
514 | %{_mandir}/man3/BF_*.3* | |
515 | %{_mandir}/man3/BIO_*.3* | |
516 | %{_mandir}/man3/BN_*.3* | |
517 | %{_mandir}/man3/BUF_*.3* | |
518 | %{_mandir}/man3/CERTIFICATEPOLICIES_*.3* | |
519 | %{_mandir}/man3/CMS_*.3* | |
520 | %{_mandir}/man3/CONF_*.3* | |
521 | %{_mandir}/man3/CRL_DIST_POINTS_*.3* | |
522 | %{_mandir}/man3/CRYPTO_*.3* | |
523 | %{_mandir}/man3/CTLOG_*.3* | |
524 | %{_mandir}/man3/CT_POLICY_*.3* | |
525 | %{_mandir}/man3/DECLARE_*.3* | |
526 | %{_mandir}/man3/DEFINE_*.3* | |
527 | %{_mandir}/man3/DES_*.3* | |
528 | %{_mandir}/man3/DH_*.3* | |
529 | %{_mandir}/man3/DHparams_*.3* | |
530 | %{_mandir}/man3/DIRECTORYSTRING_*.3* | |
531 | %{_mandir}/man3/DISPLAYTEXT_*.3* | |
532 | %{_mandir}/man3/DIST_POINT_*.3* | |
533 | %{_mandir}/man3/DSA_*.3* | |
534 | %{_mandir}/man3/DSAparams_*.3* | |
535 | %{_mandir}/man3/DTLS_*.3* | |
536 | %{_mandir}/man3/DTLSv1_*.3* | |
537 | %{_mandir}/man3/ECDH_*.3* | |
538 | %{_mandir}/man3/ECDSA_*.3* | |
539 | %{_mandir}/man3/ECPARAMETERS_*.3* | |
540 | %{_mandir}/man3/ECPKPARAMETERS_*.3* | |
541 | %{_mandir}/man3/ECPKParameters_*.3* | |
542 | %{_mandir}/man3/EC_*.3* | |
543 | %{_mandir}/man3/EDIPARTYNAME_*.3* | |
544 | %{_mandir}/man3/ENGINE_*.3* | |
545 | %{_mandir}/man3/ERR_*.3* | |
546 | %{_mandir}/man3/ESS_*.3* | |
547 | %{_mandir}/man3/EVP_*.3* | |
548 | %{_mandir}/man3/EXTENDED_KEY_USAGE_*.3* | |
549 | %{_mandir}/man3/GENERAL_*.3* | |
550 | %{_mandir}/man3/GEN_SESSION_CB.3* | |
551 | %{_mandir}/man3/HMAC*.3* | |
552 | %{_mandir}/man3/IMPLEMENT_*.3* | |
553 | %{_mandir}/man3/IPAddress*.3* | |
554 | %{_mandir}/man3/ISSUING_DIST_POINT_*.3* | |
c4c6d146 | 555 | %{_mandir}/man3/LHASH*.3* |
1c6e2c73 JB |
556 | %{_mandir}/man3/MD2*.3* |
557 | %{_mandir}/man3/MD4*.3* | |
558 | %{_mandir}/man3/MD5*.3* | |
559 | %{_mandir}/man3/MDC2*.3* | |
560 | %{_mandir}/man3/NAME_CONSTRAINTS_*.3* | |
c4c6d146 | 561 | %{_mandir}/man3/NAMING_AUTHORITY*.3* |
1c6e2c73 JB |
562 | %{_mandir}/man3/NETSCAPE_*.3* |
563 | %{_mandir}/man3/NOTICEREF_*.3* | |
564 | %{_mandir}/man3/OBJ_*.3* | |
565 | %{_mandir}/man3/OCSP_*.3* | |
566 | %{_mandir}/man3/OPENSSL_*.3* | |
c4c6d146 | 567 | %{_mandir}/man3/OSSL*.3* |
1c6e2c73 JB |
568 | %{_mandir}/man3/OTHERNAME_*.3* |
569 | %{_mandir}/man3/OpenSSL_*.3* | |
570 | %{_mandir}/man3/PBE2PARAM_*.3* | |
571 | %{_mandir}/man3/PBEPARAM_*.3* | |
572 | %{_mandir}/man3/PBKDF2PARAM_*.3* | |
573 | %{_mandir}/man3/PEM_*.3* | |
574 | %{_mandir}/man3/PKCS12_*.3* | |
575 | %{_mandir}/man3/PKCS5_*.3* | |
576 | %{_mandir}/man3/PKCS7_*.3* | |
577 | %{_mandir}/man3/PKCS8_*.3* | |
578 | %{_mandir}/man3/PKEY_*.3* | |
579 | %{_mandir}/man3/POLICYINFO_*.3* | |
580 | %{_mandir}/man3/POLICYQUALINFO_*.3* | |
581 | %{_mandir}/man3/POLICY_*.3* | |
c4c6d146 | 582 | %{_mandir}/man3/PROFESSION_INFO*.3* |
1c6e2c73 JB |
583 | %{_mandir}/man3/PROXY_*.3* |
584 | %{_mandir}/man3/RAND_*.3* | |
585 | %{_mandir}/man3/RC4*.3* | |
586 | %{_mandir}/man3/RIPEMD160*.3* | |
587 | %{_mandir}/man3/RSAPrivateKey_*.3* | |
588 | %{_mandir}/man3/RSAPublicKey_*.3* | |
589 | %{_mandir}/man3/RSA_*.3* | |
c4c6d146 | 590 | %{_mandir}/man3/SCRYPT_PARAMS*.3* |
1c6e2c73 JB |
591 | %{_mandir}/man3/SCT_*.3* |
592 | %{_mandir}/man3/SHA1*.3* | |
593 | %{_mandir}/man3/SHA224*.3* | |
594 | %{_mandir}/man3/SHA256*.3* | |
595 | %{_mandir}/man3/SHA384*.3* | |
596 | %{_mandir}/man3/SHA512*.3* | |
597 | %{_mandir}/man3/SMIME_*.3* | |
598 | %{_mandir}/man3/SSL_*.3* | |
599 | %{_mandir}/man3/SSLv23_*.3* | |
600 | %{_mandir}/man3/SSLv3_*.3* | |
601 | %{_mandir}/man3/SXNET_*.3* | |
602 | %{_mandir}/man3/SXNETID_*.3* | |
603 | %{_mandir}/man3/TLS_*.3* | |
604 | %{_mandir}/man3/TLSv1_*.3* | |
605 | %{_mandir}/man3/TS_*.3* | |
606 | %{_mandir}/man3/UI*.3* | |
607 | %{_mandir}/man3/USERNOTICE_*.3* | |
608 | %{_mandir}/man3/X509_*.3* | |
609 | %{_mandir}/man3/X509V3_*.3* | |
610 | %{_mandir}/man3/X509v3_*.3* | |
1c6e2c73 JB |
611 | %{_mandir}/man3/custom_ext_*.3* |
612 | %{_mandir}/man3/d2i_*.3* | |
613 | %{_mandir}/man3/i2d_*.3* | |
614 | %{_mandir}/man3/i2o_*.3* | |
615 | %{_mandir}/man3/i2t_*.3* | |
616 | %{_mandir}/man3/lh_TYPE_*.3* | |
617 | %{_mandir}/man3/o2i_*.3* | |
618 | %{_mandir}/man3/pem_password_cb.3* | |
619 | %{_mandir}/man3/sk_TYPE_*.3* | |
620 | %{_mandir}/man3/ssl_ct_validation_cb.3* | |
c4c6d146 | 621 | %{_mandir}/man7/openssl.7* |
1c6e2c73 JB |
622 | %{_mandir}/man7/openssl-bio.7* |
623 | %{_mandir}/man7/openssl-crypto.7* | |
624 | %{_mandir}/man7/openssl-ct.7* | |
625 | %{_mandir}/man7/openssl-des_modes.7* | |
c4c6d146 AM |
626 | %{_mandir}/man7/openssl-Ed25519.7* |
627 | %{_mandir}/man7/openssl-Ed448.7* | |
1c6e2c73 | 628 | %{_mandir}/man7/openssl-evp.7* |
c4c6d146 AM |
629 | %{_mandir}/man7/openssl-passphrase-encoding.7* |
630 | %{_mandir}/man7/openssl-RAND.7* | |
631 | %{_mandir}/man7/openssl-RAND_DRBG.7* | |
632 | %{_mandir}/man7/openssl-scrypt.7* | |
633 | %{_mandir}/man7/openssl-SM2.7* | |
1c6e2c73 | 634 | %{_mandir}/man7/openssl-ssl.7* |
c4c6d146 AM |
635 | %{_mandir}/man7/openssl-X25519.7* |
636 | %{_mandir}/man7/openssl-X448.7* | |
1c6e2c73 | 637 | %{_mandir}/man7/openssl-x509.7* |
c4c6d146 AM |
638 | %{_mandir}/man7/ossl_store.7* |
639 | %{_mandir}/man7/ossl_store-file.7* | |
640 | %{_mandir}/man7/RSA-PSS.7.gz | |
faddd309 AF |
641 | |
642 | %files static | |
643 | %defattr(644,root,root,755) | |
7250cee4 JB |
644 | %{_libdir}/libcrypto.a |
645 | %{_libdir}/libssl.a |