]>
Commit | Line | Data |
---|---|---|
44d8c69e | 1 | # |
2403ba81 | 2 | # Conditional build: |
d76d59fa | 3 | %bcond_without tests # don't perform "make tests" |
d343076c | 4 | %bcond_without zlib # zlib: note - enables CVE-2012-4929 vulnerability |
c4c6d146 | 5 | %bcond_with sslv2 # SSLv2: note - many flaws http://en.wikipedia.org/wiki/Transport_Layer_Security#SSL_2.0 |
7c7b781c | 6 | %bcond_with sslv3 # SSLv3: note - enables CVE-2014-3566 vulnerability |
dece7a9c | 7 | |
779bb536 | 8 | %include /usr/lib/rpm/macros.perl |
ce2ff00e | 9 | Summary: OpenSSL Toolkit libraries for the "Secure Sockets Layer" (SSL v2/v3) |
e6bfca5b ER |
10 | Summary(de.UTF-8): Secure Sockets Layer (SSL)-Kommunikationslibrary |
11 | Summary(es.UTF-8): Biblioteca C que suministra algoritmos y protocolos criptográficos | |
12 | Summary(fr.UTF-8): Utilitaires de communication SSL (Secure Sockets Layer) | |
13 | Summary(pl.UTF-8): Biblioteki OpenSSL (SSL v2/v3) | |
14 | Summary(pt_BR.UTF-8): Uma biblioteca C que fornece vários algoritmos e protocolos criptográficos | |
15 | Summary(ru.UTF-8): Библиотеки и утилиты для соединений через Secure Sockets Layer | |
16 | Summary(uk.UTF-8): Бібліотеки та утиліти для з'єднань через Secure Sockets Layer | |
56470945 | 17 | Name: openssl |
fa69ae9f | 18 | # Version 1.1.1 is LTS, supported until 2023-09-11. |
55af9845 | 19 | # https://www.openssl.org/about/releasestrat.html |
7b2191a0 | 20 | Version: 1.1.1b |
7689477f | 21 | Release: 1 |
d7fc4164 | 22 | License: Apache-like |
56470945 | 23 | Group: Libraries |
f6b630b8 | 24 | Source0: https://www.openssl.org/source/%{name}-%{version}.tar.gz |
7b2191a0 | 25 | # Source0-md5: 4532712e7bcc9414f5bce995e4e13930 |
62382817 | 26 | Source2: %{name}.1.pl |
ea55f735 | 27 | Source3: %{name}-ssl-certificate.sh |
d231add3 | 28 | Source4: %{name}-c_rehash.sh |
e106ff02 | 29 | Patch1: %{name}-optflags.patch |
c4c6d146 | 30 | |
76855748 | 31 | Patch3: %{name}-man-namespace.patch |
c4c6d146 | 32 | |
76855748 | 33 | Patch5: %{name}-ca-certificates.patch |
c4c6d146 | 34 | |
76855748 AO |
35 | Patch7: %{name}-find.patch |
36 | Patch8: pic.patch | |
c4c6d146 | 37 | |
2a83d92e | 38 | Patch11: engines-dir.patch |
bd7f0ef1 | 39 | URL: http://www.openssl.org/ |
0283944f | 40 | BuildRequires: libsctp-devel |
af59ed59 | 41 | BuildRequires: perl-devel >= 1:5.10.0 |
77211fc0 | 42 | BuildRequires: pkgconfig |
9edbb66f | 43 | BuildRequires: rpm-perlprov >= 4.1-13 |
20bc1dd7 | 44 | BuildRequires: rpmbuild(macros) >= 1.213 |
31b28434 | 45 | BuildRequires: sed >= 4.0 |
77211fc0 | 46 | BuildRequires: zlib-devel |
618e7076 | 47 | Requires: ca-certificates >= 20141019-3 |
dece7a9c | 48 | Requires: rpm-whiteout >= 1.7 |
04a5ad1f AF |
49 | Obsoletes: SSLeay |
50 | Obsoletes: SSLeay-devel | |
51 | Obsoletes: SSLeay-perl | |
a280467c | 52 | Obsoletes: libopenssl0 |
4ec787ae | 53 | %if "%{pld_release}" == "ac" |
7bb98c5d | 54 | Conflicts: neon < 0.26.3-3 |
e21ec158 | 55 | Conflicts: ntpd < 4.2.4p8-10 |
f3136daa | 56 | Conflicts: openssh-clients < 2:5.8p1-9 |
4ec787ae ER |
57 | Conflicts: openssh-server < 2:5.8p1-9 |
58 | %else | |
3a24c9cc ER |
59 | Conflicts: neon < 0.29.6-8 |
60 | Conflicts: openssh-clients < 2:6.2p2-3 | |
61 | Conflicts: openssh-server < 2:6.2p2-3 | |
c04ce0eb | 62 | %endif |
0f86ef4a | 63 | BuildRoot: %{tmpdir}/%{name}-%{version}-root-%(id -u -n) |
21ac4f86 AF |
64 | |
65 | %description | |
66 | The OpenSSL Project is a collaborative effort to develop a robust, | |
b39fed70 | 67 | commercial-grade, full-featured, and Open Source toolkit implementing |
68 | the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS | |
69 | v1) protocols with full-strength cryptography world-wide. The project | |
70 | is managed by a worldwide community of volunteers that use the | |
71 | Internet to communicate, plan, and develop the OpenSSL tookit and its | |
72 | related documentation. | |
56470945 | 73 | |
b39fed70 | 74 | OpenSSL is based on the excellent SSLeay library developed by Eric A. |
75 | Young and Tim J. Hudson. The OpenSSL toolkit is licensed under an | |
76 | Apache-style licence, which basically means that you are free to get | |
77 | and use it for commercial and non-commercial purposes subject to some | |
78 | simple license conditions. | |
21ac4f86 | 79 | |
fc19f542 | 80 | This package contains shared libraries only, install openssl-tools if |
81 | you want to use openssl cmdline tool. | |
ce2ff00e | 82 | |
30e72515 JR |
83 | %description -l de.UTF-8 |
84 | Openssl enthält das OpenSSL Zertifikatsmanagementtool und shared | |
85 | libraries, die verschiedene Verschlüsselungs- und | |
86 | Entschlüsselungsalgorithmen und -protokolle, wie DES, RC4, RSA und SSL | |
87 | zur Verfügung stellen. | |
453a8bf3 | 88 | |
30e72515 JR |
89 | %description -l es.UTF-8 |
90 | Biblioteca C que suministra algoritmos y protocolos criptográficos. | |
2fad19b0 | 91 | |
30e72515 | 92 | %description -l fr.UTF-8 |
56470945 | 93 | OpenSSL est un outiil de gestion des certificats et les librairies |
94 | partagees qui fournit plusieurs protocoles et algorithmes de | |
95 | codage/decodage, incluant DES, RC4, RSA et SSL. | |
2fad19b0 | 96 | |
30e72515 JR |
97 | %description -l pl.UTF-8 |
98 | Implementacja protokołów kryptograficznych Secure Socket Layer (SSL) | |
78b5e413 TP |
99 | v2/v3 oraz Transport Layer Security (TLS v1). |
100 | ||
30e72515 JR |
101 | %description -l pt_BR.UTF-8 |
102 | Uma biblioteca C que fornece vários algoritmos e protocolos | |
103 | criptográficos, incluindo DES, RC4, RSA e SSL. Inclui bibliotecas | |
104 | compartilhadas e utilitários. | |
453a8bf3 | 105 | |
30e72515 JR |
106 | %description -l ru.UTF-8 |
107 | Программа openssl для работы с сертификатами и разделяемые библиотеки, | |
108 | которые реализуют множетсво криптографических алгоритмов, включая DES, | |
109 | RC4, RSA и SSL. | |
453a8bf3 | 110 | |
30e72515 JR |
111 | %description -l uk.UTF-8 |
112 | Програма openssl для роботи з сертифікатами та бібліотеки спільного | |
113 | користування, що реалізують велику кількість криптографічних | |
114 | алгоритмів, включаючи DES, RC4, RSA та SSL. | |
453a8bf3 | 115 | |
182f9d23 TP |
116 | %package engines |
117 | Summary: OpenSSL optional crypto engines | |
545f4646 | 118 | Summary(pl.UTF-8): Opcjonalne silniki kryptograficzne dla OpenSSL-a |
182f9d23 TP |
119 | Group: Libraries |
120 | Requires: %{name} = %{version}-%{release} | |
121 | ||
122 | %description engines | |
123 | With OpenSSL 0.9.6, a new component was added to support alternative | |
545f4646 JB |
124 | cryptography implementations, most commonly for interfacing with |
125 | external crypto devices (eg. accelerator cards). This component is | |
126 | called ENGINE. | |
182f9d23 TP |
127 | |
128 | There are currently built-in ENGINE implementations for the following | |
129 | crypto devices: | |
130 | ||
131 | - CryptoSwift | |
132 | - Compaq Atalla | |
133 | - nCipher CHIL | |
134 | - Nuron | |
135 | - Broadcom uBSec | |
136 | ||
137 | In addition, dynamic binding to external ENGINE implementations is now | |
3a24c9cc | 138 | provided by a special ENGINE called "dynamic". |
182f9d23 | 139 | |
545f4646 JB |
140 | %description engines -l pl.UTF-8 |
141 | Począwszy od OpenSSL-a 0.9.6 został dodany nowy komponent, mający | |
142 | wspierać alternatywne implementacje kryptografii, przeważnie | |
143 | współpracujące z zewnętrznymi urządzeniami kryptograficznymi (np. | |
3a24c9cc ER |
144 | kartami akceleratorów). Komponent ten jest nazywany SILNIKIEM (ang. |
145 | ENGINE). | |
545f4646 JB |
146 | |
147 | Obecnie istnieją wbudowane implementacje silników dla następujących | |
148 | urządzeń kryptograficznych: | |
149 | - CryptoSwift | |
150 | - Compaq Atalla | |
151 | - nCipher CHIL | |
152 | - Nuron | |
153 | - Broadcom uBSec | |
154 | ||
155 | Ponadto zapewnione jest dynamiczne wiązanie dla zewnętrznych | |
156 | implementacji silników poprzez specjalny silnik o nazwie "dynamic". | |
157 | ||
ce2ff00e | 158 | %package tools |
159 | Summary: OpenSSL command line tool and utilities | |
e6bfca5b | 160 | Summary(pl.UTF-8): Zestaw narzędzi i skryptów |
fc19f542 | 161 | Group: Applications/Communications |
82859ae1 | 162 | Requires: %{name} = %{version}-%{release} |
9583cd23 | 163 | Requires: which |
ce2ff00e | 164 | |
165 | %description tools | |
166 | The OpenSSL Toolkit cmdline tool openssl and utility scripts. | |
167 | ||
30e72515 JR |
168 | %description tools -l pl.UTF-8 |
169 | Zestaw narzędzi i skryptów wywoływanych z linii poleceń. | |
78b5e413 | 170 | |
ce2ff00e | 171 | %package tools-perl |
172 | Summary: OpenSSL utilities written in Perl | |
e6bfca5b | 173 | Summary(pl.UTF-8): Narzędzia OpenSSL napisane w perlu |
fc19f542 | 174 | Group: Applications/Communications |
82859ae1 | 175 | Requires: %{name} = %{version}-%{release} |
2b2149ff | 176 | |
ce2ff00e | 177 | %description tools-perl |
d86c2c8b | 178 | OpenSSL Toolkit tools written in Perl. |
2b2149ff | 179 | |
30e72515 JR |
180 | %description tools-perl -l pl.UTF-8 |
181 | Narzędzia OpenSSL napisane w perlu. | |
78b5e413 | 182 | |
faddd309 | 183 | %package devel |
ce2ff00e | 184 | Summary: Development part of OpenSSL Toolkit libraries |
e6bfca5b ER |
185 | Summary(de.UTF-8): Secure Sockets Layer Kommunikationslibrary: statische libraries+header |
186 | Summary(es.UTF-8): Bibliotecas y archivos de inclusión para desarrollo OpenSSL | |
187 | Summary(fr.UTF-8): Librairies statiques, headers et utilitaires pour communication SSL | |
188 | Summary(pl.UTF-8): Część bibiloteki OpenSSL przeznaczona dla programistów | |
189 | Summary(pt_BR.UTF-8): Bibliotecas e arquivos de inclusão para desenvolvimento OpenSSL | |
190 | Summary(ru.UTF-8): Библиотеки, хедеры и утилиты для Secure Sockets Layer | |
191 | Summary(uk.UTF-8): Бібліотеки, хедери та утиліти для Secure Sockets Layer | |
9c05bcac | 192 | Group: Development/Libraries |
82859ae1 | 193 | Requires: %{name} = %{version}-%{release} |
a280467c | 194 | Obsoletes: libopenssl0-devel |
faddd309 AF |
195 | |
196 | %description devel | |
197 | Development part of OpenSSL library. | |
198 | ||
30e72515 JR |
199 | %description devel -l es.UTF-8 |
200 | Bibliotecas y archivos de inclusión para desarrollo OpenSSL | |
453a8bf3 | 201 | |
30e72515 JR |
202 | %description devel -l pl.UTF-8 |
203 | Część biblioteki OpenSSL przeznaczona dla programistów. | |
faddd309 | 204 | |
30e72515 JR |
205 | %description devel -l pt_BR.UTF-8 |
206 | Uma biblioteca C que fornece vários algoritmos e protocolos | |
207 | criptográficos, incluindo DES, RC4, RSA e SSL. Inclui bibliotecas e | |
208 | arquivos de inclusão para desenvolvimento. | |
453a8bf3 | 209 | |
30e72515 JR |
210 | %description devel -l ru.UTF-8 |
211 | Программа openssl для работы с сертификатами и разделяемые библиотеки, | |
212 | которые реализуют множетсво криптографических алгоритмов, включая DES, | |
213 | RC4, RSA и SSL. Включает библиотеки и хедеры для разработки приложений | |
214 | с использованием SSL. | |
453a8bf3 | 215 | |
30e72515 JR |
216 | %description devel -l uk.UTF-8 |
217 | Програма openssl для роботи з сертифікатами та бібліотеки спільного | |
218 | користування, що реалізують велику кількість криптографічних | |
219 | алгоритмів, включаючи DES, RC4, RSA та SSL. Містить бібліотеки та | |
220 | хедери для розробки програм з використанням SSL. | |
453a8bf3 | 221 | |
faddd309 | 222 | %package static |
ce2ff00e | 223 | Summary: Static OpenSSL libraries |
e6bfca5b ER |
224 | Summary(pl.UTF-8): Statyczne wersje bibliotek z OpenSSL |
225 | Summary(pt_BR.UTF-8): Bibliotecas estáticas para desenvolvimento com openssl | |
226 | Summary(ru.UTF-8): Статические библиотеки разработчика для OpenSSL | |
227 | Summary(uk.UTF-8): Статичні бібліотеки програміста для OpenSSL | |
9c05bcac | 228 | Group: Development/Libraries |
82859ae1 | 229 | Requires: %{name}-devel = %{version}-%{release} |
faddd309 AF |
230 | |
231 | %description static | |
ce2ff00e | 232 | Static OpenSSL Toolkit libraries. |
faddd309 | 233 | |
30e72515 | 234 | %description static -l pl.UTF-8 |
ce2ff00e | 235 | Statyczne wersje bibliotek z OpenSSL. |
faddd309 | 236 | |
30e72515 JR |
237 | %description static -l pt_BR.UTF-8 |
238 | Bibliotecas estáticas para desenvolvimento com openssl. | |
453a8bf3 | 239 | |
30e72515 JR |
240 | %description static -l ru.UTF-8 |
241 | Программа openssl для работы с сертификатами и разделяемые библиотеки, | |
242 | которые реализуют множетсво криптографических алгоритмов, включая DES, | |
243 | RC4, RSA и SSL. Включает статические библиотеки для разработки | |
244 | приложений с использованием OpenSSL. | |
453a8bf3 | 245 | |
30e72515 JR |
246 | %description static -l uk.UTF-8 |
247 | Програма openssl для роботи з сертифікатами та бібліотеки спільного | |
248 | користування, що реалізують велику кількість криптографічних | |
249 | алгоритмів, включаючи DES, RC4, RSA та SSL. Містить статичні | |
250 | бібліотеки для розробки програм з використанням SSL. | |
453a8bf3 | 251 | |
21ac4f86 | 252 | %prep |
81e27b7e ER |
253 | %if %{with snap} |
254 | %setup -qcT -a1 | |
1c6e2c73 | 255 | %{__mv} %{name}-OpenSSL_1_1_0-stable/* . |
81e27b7e | 256 | %else |
155b2eda | 257 | %setup -q %{?subver:-n %{name}-%{version}-%{subver}} |
81e27b7e | 258 | %endif |
c4c6d146 | 259 | |
44d8c69e | 260 | %patch1 -p1 |
c4c6d146 | 261 | |
9d16a74d | 262 | %patch3 -p1 |
c4c6d146 | 263 | |
44d8c69e | 264 | %patch5 -p1 |
c4c6d146 | 265 | |
44d8c69e | 266 | %patch7 -p1 |
3b0168a6 | 267 | %patch8 -p1 |
84745a0c | 268 | |
2a83d92e | 269 | %patch11 -p1 |
a9839ec4 | 270 | |
d76d59fa | 271 | %build |
00466ad3 | 272 | touch Makefile.* |
04a5ad1f | 273 | |
7250cee4 JB |
274 | PERL="%{__perl}" \ |
275 | %{__perl} ./Configure \ | |
2a83d92e | 276 | --prefix=%{_prefix} \ |
0fdaa4e3 | 277 | --openssldir=%{_sysconfdir}/%{name} \ |
6e7b8079 | 278 | --libdir=%{_lib} \ |
08291e9a | 279 | -Wa,--noexecstack \ |
e1798b93 AM |
280 | shared \ |
281 | threads \ | |
2a82d451 AO |
282 | %{?with_sslv2:enable-ssl2}%{!?with_sslv2:no-ssl2} \ |
283 | %{?with_sslv3:enable-ssl3}%{!?with_sslv3:no-ssl3} \ | |
93a4f283 | 284 | %{!?with_zlib:no-}zlib \ |
215c1d6f AM |
285 | enable-cms \ |
286 | enable-idea \ | |
05889491 | 287 | enable-md2 \ |
e02b6d37 | 288 | enable-mdc2 \ |
215c1d6f | 289 | enable-rc5 \ |
e02b6d37 | 290 | enable-rfc3779 \ |
715b407d | 291 | enable-sctp \ |
e02b6d37 | 292 | enable-seed \ |
e02b6d37 AM |
293 | %ifarch %{x8664} |
294 | enable-ec_nistp_64_gcc_128 \ | |
295 | %endif | |
51e76169 | 296 | %ifarch %{ix86} |
04a32771 | 297 | %ifarch i386 |
9fc51b3c | 298 | 386 linux-elf |
915551a7 | 299 | # ^- allow running on 80386 (default code uses bswapl available on i486+) |
51e76169 | 300 | %else |
9fc51b3c | 301 | linux-elf |
75c27cbe | 302 | %endif |
51e76169 | 303 | %endif |
dfc15f38 | 304 | %ifarch alpha |
1c6e2c73 | 305 | linux-alpha-gcc |
dfc15f38 | 306 | %endif |
20bc1dd7 | 307 | %ifarch %{x8664} |
9fc51b3c | 308 | linux-x86_64 |
e08c1652 | 309 | %endif |
6bd2fbde JR |
310 | %ifarch x32 |
311 | linux-x32 | |
312 | %endif | |
dfc15f38 | 313 | %ifarch ia64 |
9fc51b3c | 314 | linux-ia64 |
dfc15f38 | 315 | %endif |
75c27cbe | 316 | %ifarch ppc |
9fc51b3c JB |
317 | linux-ppc |
318 | %endif | |
319 | %ifarch ppc64 | |
320 | linux-ppc64 | |
75c27cbe | 321 | %endif |
05285465 | 322 | %ifarch sparc |
9fc51b3c | 323 | linux-sparcv8 |
0384baf6 | 324 | %endif |
36db42b5 | 325 | %ifarch sparcv9 |
9fc51b3c | 326 | linux-sparcv9 |
36db42b5 PS |
327 | %endif |
328 | %ifarch sparc64 | |
9fc51b3c | 329 | linux64-sparcv9 |
36db42b5 | 330 | %endif |
1c6e2c73 | 331 | %ifarch %{arm} |
9f6d1eb0 | 332 | linux-armv4 |
333 | %endif | |
1c6e2c73 JB |
334 | %ifarch aarch64 |
335 | linux-aarch64 | |
336 | %endif | |
05285465 | 337 | |
81e27b7e | 338 | v=$(awk -F= '/^VERSION/{print $2}' Makefile) |
6b0a00b5 | 339 | test "$v" = %{version}%{?subver:-%{subver}}%{?with_snap:-dev} |
81e27b7e | 340 | |
7c7b781c JB |
341 | # fails with enable-sctp as of 1.1.1 |
342 | %{__rm} test/recipes/80-test_ssl_new.t | |
343 | ||
4c5d5b48 | 344 | %{__make} -j1 all %{?with_tests:tests} \ |
b84cddc8 | 345 | CC="%{__cc}" \ |
1c6e2c73 | 346 | OPTFLAGS="%{rpmcflags} %{rpmcppflags}" \ |
b84cddc8 | 347 | INSTALLTOP=%{_prefix} |
ce2ff00e | 348 | |
6a2c91da | 349 | # Rename POD sources of man pages. "openssl-" prefix is added to each |
7c7b781c | 350 | # manpage to avoid potential conflicts with other packages. |
c4c6d146 | 351 | # openssl-man-namespace.patch mostly marks these pages with "openssl-" prefix. |
ce2ff00e | 352 | |
c4c6d146 | 353 | for podfile in $(grep -rl '^openssl-' doc/man*); do |
1c6e2c73 JB |
354 | dir=$(dirname "$podfile") |
355 | base=$(basename "$podfile") | |
356 | %{__mv} "$podfile" "$dir/openssl-$base" | |
ce2ff00e | 357 | done |
358 | ||
21ac4f86 | 359 | %install |
04a5ad1f | 360 | rm -rf $RPM_BUILD_ROOT |
ce2ff00e | 361 | install -d $RPM_BUILD_ROOT{%{_sysconfdir}/%{name},%{_libdir}/%{name}} \ |
4b251642 JK |
362 | $RPM_BUILD_ROOT{%{_mandir}/{pl/man1,man{1,3,5,7}},%{_datadir}/ssl} \ |
363 | $RPM_BUILD_ROOT%{_pkgconfigdir} | |
faddd309 | 364 | |
29a78a60 | 365 | %{__make} -j1 install \ |
20c78826 | 366 | CC="%{__cc}" \ |
08291e9a | 367 | DESTDIR=$RPM_BUILD_ROOT |
04a5ad1f | 368 | |
3819301b | 369 | %{__mv} $RPM_BUILD_ROOT%{_libdir}/lib*.so.*.* $RPM_BUILD_ROOT/%{_lib} |
c2a98469 JR |
370 | ln -sf /%{_lib}/$(basename $RPM_BUILD_ROOT/%{_lib}/libcrypto.*.*) $RPM_BUILD_ROOT%{_libdir}/libcrypto.so |
371 | ln -sf /%{_lib}/$(basename $RPM_BUILD_ROOT/%{_lib}/libssl.*.*) $RPM_BUILD_ROOT%{_libdir}/libssl.so | |
04a5ad1f | 372 | |
3819301b JB |
373 | %{__mv} $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/misc/* $RPM_BUILD_ROOT%{_libdir}/%{name} |
374 | %{__rm} -r $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/misc | |
04a5ad1f | 375 | |
20c78826 ER |
376 | # html version of man pages - not packaged |
377 | %{__rm} -r $RPM_BUILD_ROOT%{_docdir}/%{name}/html/man[1357] | |
1c008d35 | 378 | |
848e9cf2 | 379 | cp -p %{SOURCE2} $RPM_BUILD_ROOT%{_mandir}/pl/man1/openssl.1 |
dece7a9c ER |
380 | install -p %{SOURCE3} $RPM_BUILD_ROOT%{_bindir}/ssl-certificate |
381 | install -p %{SOURCE4} $RPM_BUILD_ROOT%{_bindir}/c_rehash.sh | |
9fc51b3c | 382 | |
57dc6058 JB |
383 | %clean |
384 | rm -rf $RPM_BUILD_ROOT | |
61a04a63 | 385 | |
d86c2c8b | 386 | %post -p /sbin/ldconfig |
ce2ff00e | 387 | %postun -p /sbin/ldconfig |
04a5ad1f | 388 | |
c8f5291b ER |
389 | %triggerpostun -- %{name}-tools < 1.0.0-5 |
390 | # the hashing format has changed in 1.0.0 | |
391 | [ ! -x %{_sbindir}/update-ca-certificates ] || %{_sbindir}/update-ca-certificates --fresh || : | |
392 | ||
0fdaa4e3 | 393 | %triggerpostun -- %{name} < 0.9.8i-2 |
62bcfa4e ER |
394 | # don't do anything on --downgrade |
395 | if [ $1 -le 1 ]; then | |
396 | exit 0 | |
397 | fi | |
0fdaa4e3 JR |
398 | if [ -d /var/lib/openssl/certs ] ; then |
399 | mv /var/lib/openssl/certs/* %{_sysconfdir}/%{name}/certs 2>/dev/null || : | |
400 | fi | |
401 | if [ -d /var/lib/openssl/private ] ; then | |
402 | mv /var/lib/openssl/private/* %{_sysconfdir}/%{name}/private 2>/dev/null || : | |
403 | fi | |
404 | if [ -d /var/lib/openssl ] ; then | |
405 | for f in /var/lib/openssl/* ; do | |
406 | [ -f "$f" ] && mv "$f" %{_sysconfdir}/%{name} 2>/dev/null || : | |
407 | done | |
62bcfa4e ER |
408 | rmdir /var/lib/openssl/* 2>/dev/null || : |
409 | rmdir /var/lib/openssl 2>/dev/null || : | |
0fdaa4e3 JR |
410 | fi |
411 | ||
21ac4f86 | 412 | %files |
04a5ad1f | 413 | %defattr(644,root,root,755) |
20c78826 ER |
414 | %doc CHANGES LICENSE NEWS README doc/*.txt |
415 | %attr(755,root,root) /%{_lib}/libcrypto.so.*.* | |
416 | %attr(755,root,root) /%{_lib}/libssl.so.*.* | |
fa6b6d15 | 417 | %dir %{_sysconfdir}/%{name} |
418 | %dir %{_sysconfdir}/%{name}/certs | |
b38449e1 | 419 | %dir %attr(700,root,root) %{_sysconfdir}/%{name}/private |
b87437db | 420 | %dir %{_datadir}/ssl |
ce2ff00e | 421 | |
182f9d23 | 422 | %files engines |
3a24c9cc | 423 | %defattr(644,root,root,755) |
20c78826 ER |
424 | %dir /%{_lib}/engines-1.1 |
425 | %attr(755,root,root) /%{_lib}/engines-1.1/*.so | |
182f9d23 | 426 | |
ce2ff00e | 427 | %files tools |
428 | %defattr(644,root,root,755) | |
c4c6d146 | 429 | %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/%{name}/ct_log_list.cnf |
623d135e | 430 | %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/%{name}/openssl.cnf |
d231add3 | 431 | %attr(755,root,root) %{_bindir}/c_rehash.sh |
44d8c69e | 432 | %attr(755,root,root) %{_bindir}/openssl |
ea55f735 | 433 | %attr(754,root,root) %{_bindir}/ssl-certificate |
d86c2c8b | 434 | %{_mandir}/man1/openssl.1* |
6a2c91da JB |
435 | %{_mandir}/man1/openssl-asn1parse.1* |
436 | %{_mandir}/man1/openssl-ca.1* | |
437 | %{_mandir}/man1/openssl-ciphers.1* | |
438 | %{_mandir}/man1/openssl-cms.1* | |
439 | %{_mandir}/man1/openssl-crl.1* | |
440 | %{_mandir}/man1/openssl-crl2pkcs7.1* | |
441 | %{_mandir}/man1/openssl-dgst.1* | |
442 | %{_mandir}/man1/openssl-dhparam.1* | |
443 | %{_mandir}/man1/openssl-dsa.1* | |
444 | %{_mandir}/man1/openssl-dsaparam.1* | |
445 | %{_mandir}/man1/openssl-ec.1* | |
446 | %{_mandir}/man1/openssl-ecparam.1* | |
447 | %{_mandir}/man1/openssl-enc.1* | |
1c6e2c73 | 448 | %{_mandir}/man1/openssl-engine.1* |
6a2c91da JB |
449 | %{_mandir}/man1/openssl-errstr.1* |
450 | %{_mandir}/man1/openssl-gendsa.1* | |
451 | %{_mandir}/man1/openssl-genpkey.1* | |
452 | %{_mandir}/man1/openssl-genrsa.1* | |
1c6e2c73 | 453 | %{_mandir}/man1/openssl-list.1* |
6a2c91da JB |
454 | %{_mandir}/man1/openssl-nseq.1* |
455 | %{_mandir}/man1/openssl-ocsp.1* | |
456 | %{_mandir}/man1/openssl-passwd.1* | |
457 | %{_mandir}/man1/openssl-pkcs12.1* | |
458 | %{_mandir}/man1/openssl-pkcs7.1* | |
459 | %{_mandir}/man1/openssl-pkcs8.1* | |
460 | %{_mandir}/man1/openssl-pkey.1* | |
461 | %{_mandir}/man1/openssl-pkeyparam.1* | |
462 | %{_mandir}/man1/openssl-pkeyutl.1* | |
c4c6d146 | 463 | %{_mandir}/man1/openssl-prime.1* |
6a2c91da | 464 | %{_mandir}/man1/openssl-rand.1* |
1c6e2c73 | 465 | %{_mandir}/man1/openssl-rehash.1* |
6a2c91da JB |
466 | %{_mandir}/man1/openssl-req.1* |
467 | %{_mandir}/man1/openssl-rsa.1* | |
468 | %{_mandir}/man1/openssl-rsautl.1* | |
469 | %{_mandir}/man1/openssl-s_client.1* | |
470 | %{_mandir}/man1/openssl-s_server.1* | |
471 | %{_mandir}/man1/openssl-s_time.1* | |
472 | %{_mandir}/man1/openssl-sess_id.1* | |
473 | %{_mandir}/man1/openssl-smime.1* | |
474 | %{_mandir}/man1/openssl-speed.1* | |
475 | %{_mandir}/man1/openssl-spkac.1* | |
c4c6d146 | 476 | %{_mandir}/man1/openssl-srp.1* |
c4c6d146 | 477 | %{_mandir}/man1/openssl-storeutl.1* |
6a2c91da JB |
478 | %{_mandir}/man1/openssl-ts.1* |
479 | %{_mandir}/man1/openssl-tsget.1* | |
480 | %{_mandir}/man1/openssl-verify.1* | |
481 | %{_mandir}/man1/openssl-version.1* | |
482 | %{_mandir}/man1/openssl-x509.1* | |
483 | %{_mandir}/man5/openssl-config.5* | |
484 | %{_mandir}/man5/openssl-x509v3_config.5* | |
62382817 | 485 | %lang(pl) %{_mandir}/pl/man1/openssl.1* |
ce2ff00e | 486 | |
487 | %files tools-perl | |
488 | %defattr(644,root,root,755) | |
62313b5e | 489 | %attr(755,root,root) %{_bindir}/c_rehash |
08291e9a | 490 | %dir %{_libdir}/%{name} |
ce2ff00e | 491 | %attr(755,root,root) %{_libdir}/%{name}/CA.pl |
848e9cf2 | 492 | %attr(755,root,root) %{_libdir}/%{name}/tsget |
c4c6d146 | 493 | %attr(755,root,root) %{_libdir}/%{name}/tsget.pl |
1c6e2c73 JB |
494 | %{_mandir}/man1/CA.pl.1* |
495 | %{_mandir}/man1/c_rehash.1* | |
faddd309 AF |
496 | |
497 | %files devel | |
498 | %defattr(644,root,root,755) | |
f4434df9 PS |
499 | %attr(755,root,root) %{_libdir}/libcrypto.so |
500 | %attr(755,root,root) %{_libdir}/libssl.so | |
ce2ff00e | 501 | %{_includedir}/%{name} |
9fc51b3c JB |
502 | %{_pkgconfigdir}/libcrypto.pc |
503 | %{_pkgconfigdir}/libssl.pc | |
8c362d23 | 504 | %{_pkgconfigdir}/openssl.pc |
1c6e2c73 | 505 | %{_mandir}/man3/ACCESS_DESCRIPTION_*.3* |
c4c6d146 | 506 | %{_mandir}/man3/ADMISSION*.3* |
1c6e2c73 JB |
507 | %{_mandir}/man3/ASId*.3* |
508 | %{_mandir}/man3/ASRange_*.3* | |
509 | %{_mandir}/man3/ASN1_*.3* | |
510 | %{_mandir}/man3/ASYNC_*.3* | |
511 | %{_mandir}/man3/AUTHORITY_*.3* | |
512 | %{_mandir}/man3/BASIC_CONSTRAINTS_*.3* | |
513 | %{_mandir}/man3/BF_*.3* | |
514 | %{_mandir}/man3/BIO_*.3* | |
515 | %{_mandir}/man3/BN_*.3* | |
516 | %{_mandir}/man3/BUF_*.3* | |
517 | %{_mandir}/man3/CERTIFICATEPOLICIES_*.3* | |
518 | %{_mandir}/man3/CMS_*.3* | |
519 | %{_mandir}/man3/CONF_*.3* | |
520 | %{_mandir}/man3/CRL_DIST_POINTS_*.3* | |
521 | %{_mandir}/man3/CRYPTO_*.3* | |
522 | %{_mandir}/man3/CTLOG_*.3* | |
523 | %{_mandir}/man3/CT_POLICY_*.3* | |
524 | %{_mandir}/man3/DECLARE_*.3* | |
525 | %{_mandir}/man3/DEFINE_*.3* | |
526 | %{_mandir}/man3/DES_*.3* | |
527 | %{_mandir}/man3/DH_*.3* | |
528 | %{_mandir}/man3/DHparams_*.3* | |
529 | %{_mandir}/man3/DIRECTORYSTRING_*.3* | |
530 | %{_mandir}/man3/DISPLAYTEXT_*.3* | |
531 | %{_mandir}/man3/DIST_POINT_*.3* | |
532 | %{_mandir}/man3/DSA_*.3* | |
533 | %{_mandir}/man3/DSAparams_*.3* | |
534 | %{_mandir}/man3/DTLS_*.3* | |
535 | %{_mandir}/man3/DTLSv1_*.3* | |
536 | %{_mandir}/man3/ECDH_*.3* | |
537 | %{_mandir}/man3/ECDSA_*.3* | |
538 | %{_mandir}/man3/ECPARAMETERS_*.3* | |
539 | %{_mandir}/man3/ECPKPARAMETERS_*.3* | |
540 | %{_mandir}/man3/ECPKParameters_*.3* | |
541 | %{_mandir}/man3/EC_*.3* | |
542 | %{_mandir}/man3/EDIPARTYNAME_*.3* | |
543 | %{_mandir}/man3/ENGINE_*.3* | |
544 | %{_mandir}/man3/ERR_*.3* | |
545 | %{_mandir}/man3/ESS_*.3* | |
546 | %{_mandir}/man3/EVP_*.3* | |
547 | %{_mandir}/man3/EXTENDED_KEY_USAGE_*.3* | |
548 | %{_mandir}/man3/GENERAL_*.3* | |
549 | %{_mandir}/man3/GEN_SESSION_CB.3* | |
550 | %{_mandir}/man3/HMAC*.3* | |
551 | %{_mandir}/man3/IMPLEMENT_*.3* | |
552 | %{_mandir}/man3/IPAddress*.3* | |
553 | %{_mandir}/man3/ISSUING_DIST_POINT_*.3* | |
c4c6d146 | 554 | %{_mandir}/man3/LHASH*.3* |
1c6e2c73 JB |
555 | %{_mandir}/man3/MD2*.3* |
556 | %{_mandir}/man3/MD4*.3* | |
557 | %{_mandir}/man3/MD5*.3* | |
558 | %{_mandir}/man3/MDC2*.3* | |
559 | %{_mandir}/man3/NAME_CONSTRAINTS_*.3* | |
c4c6d146 | 560 | %{_mandir}/man3/NAMING_AUTHORITY*.3* |
1c6e2c73 JB |
561 | %{_mandir}/man3/NETSCAPE_*.3* |
562 | %{_mandir}/man3/NOTICEREF_*.3* | |
563 | %{_mandir}/man3/OBJ_*.3* | |
564 | %{_mandir}/man3/OCSP_*.3* | |
565 | %{_mandir}/man3/OPENSSL_*.3* | |
c4c6d146 | 566 | %{_mandir}/man3/OSSL*.3* |
1c6e2c73 JB |
567 | %{_mandir}/man3/OTHERNAME_*.3* |
568 | %{_mandir}/man3/OpenSSL_*.3* | |
569 | %{_mandir}/man3/PBE2PARAM_*.3* | |
570 | %{_mandir}/man3/PBEPARAM_*.3* | |
571 | %{_mandir}/man3/PBKDF2PARAM_*.3* | |
572 | %{_mandir}/man3/PEM_*.3* | |
573 | %{_mandir}/man3/PKCS12_*.3* | |
574 | %{_mandir}/man3/PKCS5_*.3* | |
575 | %{_mandir}/man3/PKCS7_*.3* | |
576 | %{_mandir}/man3/PKCS8_*.3* | |
577 | %{_mandir}/man3/PKEY_*.3* | |
578 | %{_mandir}/man3/POLICYINFO_*.3* | |
579 | %{_mandir}/man3/POLICYQUALINFO_*.3* | |
580 | %{_mandir}/man3/POLICY_*.3* | |
c4c6d146 | 581 | %{_mandir}/man3/PROFESSION_INFO*.3* |
1c6e2c73 JB |
582 | %{_mandir}/man3/PROXY_*.3* |
583 | %{_mandir}/man3/RAND_*.3* | |
584 | %{_mandir}/man3/RC4*.3* | |
585 | %{_mandir}/man3/RIPEMD160*.3* | |
586 | %{_mandir}/man3/RSAPrivateKey_*.3* | |
587 | %{_mandir}/man3/RSAPublicKey_*.3* | |
588 | %{_mandir}/man3/RSA_*.3* | |
c4c6d146 | 589 | %{_mandir}/man3/SCRYPT_PARAMS*.3* |
1c6e2c73 JB |
590 | %{_mandir}/man3/SCT_*.3* |
591 | %{_mandir}/man3/SHA1*.3* | |
592 | %{_mandir}/man3/SHA224*.3* | |
593 | %{_mandir}/man3/SHA256*.3* | |
594 | %{_mandir}/man3/SHA384*.3* | |
595 | %{_mandir}/man3/SHA512*.3* | |
596 | %{_mandir}/man3/SMIME_*.3* | |
597 | %{_mandir}/man3/SSL_*.3* | |
598 | %{_mandir}/man3/SSLv23_*.3* | |
599 | %{_mandir}/man3/SSLv3_*.3* | |
600 | %{_mandir}/man3/SXNET_*.3* | |
601 | %{_mandir}/man3/SXNETID_*.3* | |
602 | %{_mandir}/man3/TLS_*.3* | |
603 | %{_mandir}/man3/TLSv1_*.3* | |
604 | %{_mandir}/man3/TS_*.3* | |
605 | %{_mandir}/man3/UI*.3* | |
606 | %{_mandir}/man3/USERNOTICE_*.3* | |
607 | %{_mandir}/man3/X509_*.3* | |
608 | %{_mandir}/man3/X509V3_*.3* | |
609 | %{_mandir}/man3/X509v3_*.3* | |
1c6e2c73 JB |
610 | %{_mandir}/man3/custom_ext_*.3* |
611 | %{_mandir}/man3/d2i_*.3* | |
612 | %{_mandir}/man3/i2d_*.3* | |
613 | %{_mandir}/man3/i2o_*.3* | |
614 | %{_mandir}/man3/i2t_*.3* | |
615 | %{_mandir}/man3/lh_TYPE_*.3* | |
616 | %{_mandir}/man3/o2i_*.3* | |
617 | %{_mandir}/man3/pem_password_cb.3* | |
618 | %{_mandir}/man3/sk_TYPE_*.3* | |
619 | %{_mandir}/man3/ssl_ct_validation_cb.3* | |
c4c6d146 | 620 | %{_mandir}/man7/openssl.7* |
1c6e2c73 JB |
621 | %{_mandir}/man7/openssl-bio.7* |
622 | %{_mandir}/man7/openssl-crypto.7* | |
623 | %{_mandir}/man7/openssl-ct.7* | |
6a2c91da | 624 | %{_mandir}/man7/openssl-des_modes.7* |
c4c6d146 AM |
625 | %{_mandir}/man7/openssl-Ed25519.7* |
626 | %{_mandir}/man7/openssl-Ed448.7* | |
1c6e2c73 | 627 | %{_mandir}/man7/openssl-evp.7* |
c4c6d146 AM |
628 | %{_mandir}/man7/openssl-passphrase-encoding.7* |
629 | %{_mandir}/man7/openssl-RAND.7* | |
630 | %{_mandir}/man7/openssl-RAND_DRBG.7* | |
631 | %{_mandir}/man7/openssl-scrypt.7* | |
632 | %{_mandir}/man7/openssl-SM2.7* | |
1c6e2c73 | 633 | %{_mandir}/man7/openssl-ssl.7* |
c4c6d146 AM |
634 | %{_mandir}/man7/openssl-X25519.7* |
635 | %{_mandir}/man7/openssl-X448.7* | |
1c6e2c73 | 636 | %{_mandir}/man7/openssl-x509.7* |
c4c6d146 AM |
637 | %{_mandir}/man7/ossl_store.7* |
638 | %{_mandir}/man7/ossl_store-file.7* | |
639 | %{_mandir}/man7/RSA-PSS.7.gz | |
faddd309 AF |
640 | |
641 | %files static | |
642 | %defattr(644,root,root,755) | |
7250cee4 JB |
643 | %{_libdir}/libcrypto.a |
644 | %{_libdir}/libssl.a |