]>
Commit | Line | Data |
---|---|---|
44d8c69e | 1 | # |
2403ba81 | 2 | # Conditional build: |
d76d59fa | 3 | %bcond_without tests # don't perform "make tests" |
d343076c | 4 | %bcond_without zlib # zlib: note - enables CVE-2012-4929 vulnerability |
c4c6d146 | 5 | %bcond_with sslv2 # SSLv2: note - many flaws http://en.wikipedia.org/wiki/Transport_Layer_Security#SSL_2.0 |
7c7b781c | 6 | %bcond_with sslv3 # SSLv3: note - enables CVE-2014-3566 vulnerability |
dece7a9c | 7 | |
779bb536 | 8 | %include /usr/lib/rpm/macros.perl |
ce2ff00e | 9 | Summary: OpenSSL Toolkit libraries for the "Secure Sockets Layer" (SSL v2/v3) |
e6bfca5b ER |
10 | Summary(de.UTF-8): Secure Sockets Layer (SSL)-Kommunikationslibrary |
11 | Summary(es.UTF-8): Biblioteca C que suministra algoritmos y protocolos criptográficos | |
12 | Summary(fr.UTF-8): Utilitaires de communication SSL (Secure Sockets Layer) | |
13 | Summary(pl.UTF-8): Biblioteki OpenSSL (SSL v2/v3) | |
14 | Summary(pt_BR.UTF-8): Uma biblioteca C que fornece vários algoritmos e protocolos criptográficos | |
15 | Summary(ru.UTF-8): Библиотеки и утилиты для соединений через Secure Sockets Layer | |
16 | Summary(uk.UTF-8): Бібліотеки та утиліти для з'єднань через Secure Sockets Layer | |
56470945 | 17 | Name: openssl |
fa69ae9f | 18 | # Version 1.1.1 is LTS, supported until 2023-09-11. |
55af9845 | 19 | # https://www.openssl.org/about/releasestrat.html |
c4c6d146 | 20 | Version: 1.1.1 |
7689477f | 21 | Release: 1 |
d7fc4164 | 22 | License: Apache-like |
56470945 | 23 | Group: Libraries |
f6b630b8 | 24 | Source0: https://www.openssl.org/source/%{name}-%{version}.tar.gz |
c4c6d146 | 25 | # Source0-md5: 7079eb017429e0ffb9efb42bf80ccb21 |
62382817 | 26 | Source2: %{name}.1.pl |
ea55f735 | 27 | Source3: %{name}-ssl-certificate.sh |
d231add3 | 28 | Source4: %{name}-c_rehash.sh |
e106ff02 | 29 | Patch1: %{name}-optflags.patch |
c4c6d146 | 30 | |
76855748 | 31 | Patch3: %{name}-man-namespace.patch |
c4c6d146 | 32 | |
76855748 | 33 | Patch5: %{name}-ca-certificates.patch |
c4c6d146 | 34 | |
76855748 AO |
35 | Patch7: %{name}-find.patch |
36 | Patch8: pic.patch | |
c4c6d146 | 37 | |
2a83d92e | 38 | Patch11: engines-dir.patch |
bd7f0ef1 | 39 | URL: http://www.openssl.org/ |
af59ed59 | 40 | BuildRequires: perl-devel >= 1:5.10.0 |
77211fc0 | 41 | BuildRequires: pkgconfig |
9edbb66f | 42 | BuildRequires: rpm-perlprov >= 4.1-13 |
20bc1dd7 | 43 | BuildRequires: rpmbuild(macros) >= 1.213 |
31b28434 | 44 | BuildRequires: sed >= 4.0 |
77211fc0 | 45 | BuildRequires: zlib-devel |
618e7076 | 46 | Requires: ca-certificates >= 20141019-3 |
dece7a9c | 47 | Requires: rpm-whiteout >= 1.7 |
04a5ad1f AF |
48 | Obsoletes: SSLeay |
49 | Obsoletes: SSLeay-devel | |
50 | Obsoletes: SSLeay-perl | |
a280467c | 51 | Obsoletes: libopenssl0 |
4ec787ae | 52 | %if "%{pld_release}" == "ac" |
7bb98c5d | 53 | Conflicts: neon < 0.26.3-3 |
e21ec158 | 54 | Conflicts: ntpd < 4.2.4p8-10 |
f3136daa | 55 | Conflicts: openssh-clients < 2:5.8p1-9 |
4ec787ae ER |
56 | Conflicts: openssh-server < 2:5.8p1-9 |
57 | %else | |
3a24c9cc ER |
58 | Conflicts: neon < 0.29.6-8 |
59 | Conflicts: openssh-clients < 2:6.2p2-3 | |
60 | Conflicts: openssh-server < 2:6.2p2-3 | |
c04ce0eb | 61 | %endif |
0f86ef4a | 62 | BuildRoot: %{tmpdir}/%{name}-%{version}-root-%(id -u -n) |
21ac4f86 AF |
63 | |
64 | %description | |
65 | The OpenSSL Project is a collaborative effort to develop a robust, | |
b39fed70 | 66 | commercial-grade, full-featured, and Open Source toolkit implementing |
67 | the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS | |
68 | v1) protocols with full-strength cryptography world-wide. The project | |
69 | is managed by a worldwide community of volunteers that use the | |
70 | Internet to communicate, plan, and develop the OpenSSL tookit and its | |
71 | related documentation. | |
56470945 | 72 | |
b39fed70 | 73 | OpenSSL is based on the excellent SSLeay library developed by Eric A. |
74 | Young and Tim J. Hudson. The OpenSSL toolkit is licensed under an | |
75 | Apache-style licence, which basically means that you are free to get | |
76 | and use it for commercial and non-commercial purposes subject to some | |
77 | simple license conditions. | |
21ac4f86 | 78 | |
fc19f542 | 79 | This package contains shared libraries only, install openssl-tools if |
80 | you want to use openssl cmdline tool. | |
ce2ff00e | 81 | |
30e72515 JR |
82 | %description -l de.UTF-8 |
83 | Openssl enthält das OpenSSL Zertifikatsmanagementtool und shared | |
84 | libraries, die verschiedene Verschlüsselungs- und | |
85 | Entschlüsselungsalgorithmen und -protokolle, wie DES, RC4, RSA und SSL | |
86 | zur Verfügung stellen. | |
453a8bf3 | 87 | |
30e72515 JR |
88 | %description -l es.UTF-8 |
89 | Biblioteca C que suministra algoritmos y protocolos criptográficos. | |
2fad19b0 | 90 | |
30e72515 | 91 | %description -l fr.UTF-8 |
56470945 | 92 | OpenSSL est un outiil de gestion des certificats et les librairies |
93 | partagees qui fournit plusieurs protocoles et algorithmes de | |
94 | codage/decodage, incluant DES, RC4, RSA et SSL. | |
2fad19b0 | 95 | |
30e72515 JR |
96 | %description -l pl.UTF-8 |
97 | Implementacja protokołów kryptograficznych Secure Socket Layer (SSL) | |
78b5e413 TP |
98 | v2/v3 oraz Transport Layer Security (TLS v1). |
99 | ||
30e72515 JR |
100 | %description -l pt_BR.UTF-8 |
101 | Uma biblioteca C que fornece vários algoritmos e protocolos | |
102 | criptográficos, incluindo DES, RC4, RSA e SSL. Inclui bibliotecas | |
103 | compartilhadas e utilitários. | |
453a8bf3 | 104 | |
30e72515 JR |
105 | %description -l ru.UTF-8 |
106 | Программа openssl для работы с сертификатами и разделяемые библиотеки, | |
107 | которые реализуют множетсво криптографических алгоритмов, включая DES, | |
108 | RC4, RSA и SSL. | |
453a8bf3 | 109 | |
30e72515 JR |
110 | %description -l uk.UTF-8 |
111 | Програма openssl для роботи з сертифікатами та бібліотеки спільного | |
112 | користування, що реалізують велику кількість криптографічних | |
113 | алгоритмів, включаючи DES, RC4, RSA та SSL. | |
453a8bf3 | 114 | |
182f9d23 TP |
115 | %package engines |
116 | Summary: OpenSSL optional crypto engines | |
545f4646 | 117 | Summary(pl.UTF-8): Opcjonalne silniki kryptograficzne dla OpenSSL-a |
182f9d23 TP |
118 | Group: Libraries |
119 | Requires: %{name} = %{version}-%{release} | |
120 | ||
121 | %description engines | |
122 | With OpenSSL 0.9.6, a new component was added to support alternative | |
545f4646 JB |
123 | cryptography implementations, most commonly for interfacing with |
124 | external crypto devices (eg. accelerator cards). This component is | |
125 | called ENGINE. | |
182f9d23 TP |
126 | |
127 | There are currently built-in ENGINE implementations for the following | |
128 | crypto devices: | |
129 | ||
130 | - CryptoSwift | |
131 | - Compaq Atalla | |
132 | - nCipher CHIL | |
133 | - Nuron | |
134 | - Broadcom uBSec | |
135 | ||
136 | In addition, dynamic binding to external ENGINE implementations is now | |
3a24c9cc | 137 | provided by a special ENGINE called "dynamic". |
182f9d23 | 138 | |
545f4646 JB |
139 | %description engines -l pl.UTF-8 |
140 | Począwszy od OpenSSL-a 0.9.6 został dodany nowy komponent, mający | |
141 | wspierać alternatywne implementacje kryptografii, przeważnie | |
142 | współpracujące z zewnętrznymi urządzeniami kryptograficznymi (np. | |
3a24c9cc ER |
143 | kartami akceleratorów). Komponent ten jest nazywany SILNIKIEM (ang. |
144 | ENGINE). | |
545f4646 JB |
145 | |
146 | Obecnie istnieją wbudowane implementacje silników dla następujących | |
147 | urządzeń kryptograficznych: | |
148 | - CryptoSwift | |
149 | - Compaq Atalla | |
150 | - nCipher CHIL | |
151 | - Nuron | |
152 | - Broadcom uBSec | |
153 | ||
154 | Ponadto zapewnione jest dynamiczne wiązanie dla zewnętrznych | |
155 | implementacji silników poprzez specjalny silnik o nazwie "dynamic". | |
156 | ||
ce2ff00e | 157 | %package tools |
158 | Summary: OpenSSL command line tool and utilities | |
e6bfca5b | 159 | Summary(pl.UTF-8): Zestaw narzędzi i skryptów |
fc19f542 | 160 | Group: Applications/Communications |
82859ae1 | 161 | Requires: %{name} = %{version}-%{release} |
9583cd23 | 162 | Requires: which |
ce2ff00e | 163 | |
164 | %description tools | |
165 | The OpenSSL Toolkit cmdline tool openssl and utility scripts. | |
166 | ||
30e72515 JR |
167 | %description tools -l pl.UTF-8 |
168 | Zestaw narzędzi i skryptów wywoływanych z linii poleceń. | |
78b5e413 | 169 | |
ce2ff00e | 170 | %package tools-perl |
171 | Summary: OpenSSL utilities written in Perl | |
e6bfca5b | 172 | Summary(pl.UTF-8): Narzędzia OpenSSL napisane w perlu |
fc19f542 | 173 | Group: Applications/Communications |
82859ae1 | 174 | Requires: %{name} = %{version}-%{release} |
2b2149ff | 175 | |
ce2ff00e | 176 | %description tools-perl |
d86c2c8b | 177 | OpenSSL Toolkit tools written in Perl. |
2b2149ff | 178 | |
30e72515 JR |
179 | %description tools-perl -l pl.UTF-8 |
180 | Narzędzia OpenSSL napisane w perlu. | |
78b5e413 | 181 | |
faddd309 | 182 | %package devel |
ce2ff00e | 183 | Summary: Development part of OpenSSL Toolkit libraries |
e6bfca5b ER |
184 | Summary(de.UTF-8): Secure Sockets Layer Kommunikationslibrary: statische libraries+header |
185 | Summary(es.UTF-8): Bibliotecas y archivos de inclusión para desarrollo OpenSSL | |
186 | Summary(fr.UTF-8): Librairies statiques, headers et utilitaires pour communication SSL | |
187 | Summary(pl.UTF-8): Część bibiloteki OpenSSL przeznaczona dla programistów | |
188 | Summary(pt_BR.UTF-8): Bibliotecas e arquivos de inclusão para desenvolvimento OpenSSL | |
189 | Summary(ru.UTF-8): Библиотеки, хедеры и утилиты для Secure Sockets Layer | |
190 | Summary(uk.UTF-8): Бібліотеки, хедери та утиліти для Secure Sockets Layer | |
9c05bcac | 191 | Group: Development/Libraries |
82859ae1 | 192 | Requires: %{name} = %{version}-%{release} |
a280467c | 193 | Obsoletes: libopenssl0-devel |
faddd309 AF |
194 | |
195 | %description devel | |
196 | Development part of OpenSSL library. | |
197 | ||
30e72515 JR |
198 | %description devel -l es.UTF-8 |
199 | Bibliotecas y archivos de inclusión para desarrollo OpenSSL | |
453a8bf3 | 200 | |
30e72515 JR |
201 | %description devel -l pl.UTF-8 |
202 | Część biblioteki OpenSSL przeznaczona dla programistów. | |
faddd309 | 203 | |
30e72515 JR |
204 | %description devel -l pt_BR.UTF-8 |
205 | Uma biblioteca C que fornece vários algoritmos e protocolos | |
206 | criptográficos, incluindo DES, RC4, RSA e SSL. Inclui bibliotecas e | |
207 | arquivos de inclusão para desenvolvimento. | |
453a8bf3 | 208 | |
30e72515 JR |
209 | %description devel -l ru.UTF-8 |
210 | Программа openssl для работы с сертификатами и разделяемые библиотеки, | |
211 | которые реализуют множетсво криптографических алгоритмов, включая DES, | |
212 | RC4, RSA и SSL. Включает библиотеки и хедеры для разработки приложений | |
213 | с использованием SSL. | |
453a8bf3 | 214 | |
30e72515 JR |
215 | %description devel -l uk.UTF-8 |
216 | Програма openssl для роботи з сертифікатами та бібліотеки спільного | |
217 | користування, що реалізують велику кількість криптографічних | |
218 | алгоритмів, включаючи DES, RC4, RSA та SSL. Містить бібліотеки та | |
219 | хедери для розробки програм з використанням SSL. | |
453a8bf3 | 220 | |
faddd309 | 221 | %package static |
ce2ff00e | 222 | Summary: Static OpenSSL libraries |
e6bfca5b ER |
223 | Summary(pl.UTF-8): Statyczne wersje bibliotek z OpenSSL |
224 | Summary(pt_BR.UTF-8): Bibliotecas estáticas para desenvolvimento com openssl | |
225 | Summary(ru.UTF-8): Статические библиотеки разработчика для OpenSSL | |
226 | Summary(uk.UTF-8): Статичні бібліотеки програміста для OpenSSL | |
9c05bcac | 227 | Group: Development/Libraries |
82859ae1 | 228 | Requires: %{name}-devel = %{version}-%{release} |
faddd309 AF |
229 | |
230 | %description static | |
ce2ff00e | 231 | Static OpenSSL Toolkit libraries. |
faddd309 | 232 | |
30e72515 | 233 | %description static -l pl.UTF-8 |
ce2ff00e | 234 | Statyczne wersje bibliotek z OpenSSL. |
faddd309 | 235 | |
30e72515 JR |
236 | %description static -l pt_BR.UTF-8 |
237 | Bibliotecas estáticas para desenvolvimento com openssl. | |
453a8bf3 | 238 | |
30e72515 JR |
239 | %description static -l ru.UTF-8 |
240 | Программа openssl для работы с сертификатами и разделяемые библиотеки, | |
241 | которые реализуют множетсво криптографических алгоритмов, включая DES, | |
242 | RC4, RSA и SSL. Включает статические библиотеки для разработки | |
243 | приложений с использованием OpenSSL. | |
453a8bf3 | 244 | |
30e72515 JR |
245 | %description static -l uk.UTF-8 |
246 | Програма openssl для роботи з сертифікатами та бібліотеки спільного | |
247 | користування, що реалізують велику кількість криптографічних | |
248 | алгоритмів, включаючи DES, RC4, RSA та SSL. Містить статичні | |
249 | бібліотеки для розробки програм з використанням SSL. | |
453a8bf3 | 250 | |
21ac4f86 | 251 | %prep |
81e27b7e ER |
252 | %if %{with snap} |
253 | %setup -qcT -a1 | |
1c6e2c73 | 254 | %{__mv} %{name}-OpenSSL_1_1_0-stable/* . |
81e27b7e | 255 | %else |
155b2eda | 256 | %setup -q %{?subver:-n %{name}-%{version}-%{subver}} |
81e27b7e | 257 | %endif |
c4c6d146 | 258 | |
44d8c69e | 259 | %patch1 -p1 |
c4c6d146 | 260 | |
9d16a74d | 261 | %patch3 -p1 |
c4c6d146 | 262 | |
44d8c69e | 263 | %patch5 -p1 |
c4c6d146 | 264 | |
44d8c69e | 265 | %patch7 -p1 |
3b0168a6 | 266 | %patch8 -p1 |
84745a0c | 267 | |
2a83d92e | 268 | %patch11 -p1 |
a9839ec4 | 269 | |
d76d59fa | 270 | %build |
00466ad3 | 271 | touch Makefile.* |
04a5ad1f | 272 | |
7250cee4 JB |
273 | PERL="%{__perl}" \ |
274 | %{__perl} ./Configure \ | |
2a83d92e | 275 | --prefix=%{_prefix} \ |
0fdaa4e3 | 276 | --openssldir=%{_sysconfdir}/%{name} \ |
6e7b8079 | 277 | --libdir=%{_lib} \ |
08291e9a | 278 | -Wa,--noexecstack \ |
e1798b93 AM |
279 | shared \ |
280 | threads \ | |
2a82d451 AO |
281 | %{?with_sslv2:enable-ssl2}%{!?with_sslv2:no-ssl2} \ |
282 | %{?with_sslv3:enable-ssl3}%{!?with_sslv3:no-ssl3} \ | |
93a4f283 | 283 | %{!?with_zlib:no-}zlib \ |
215c1d6f AM |
284 | enable-cms \ |
285 | enable-idea \ | |
05889491 | 286 | enable-md2 \ |
e02b6d37 | 287 | enable-mdc2 \ |
215c1d6f | 288 | enable-rc5 \ |
e02b6d37 | 289 | enable-rfc3779 \ |
715b407d | 290 | enable-sctp \ |
e02b6d37 | 291 | enable-seed \ |
e02b6d37 AM |
292 | %ifarch %{x8664} |
293 | enable-ec_nistp_64_gcc_128 \ | |
294 | %endif | |
51e76169 | 295 | %ifarch %{ix86} |
04a32771 | 296 | %ifarch i386 |
9fc51b3c | 297 | 386 linux-elf |
915551a7 | 298 | # ^- allow running on 80386 (default code uses bswapl available on i486+) |
51e76169 | 299 | %else |
9fc51b3c | 300 | linux-elf |
75c27cbe | 301 | %endif |
51e76169 | 302 | %endif |
dfc15f38 | 303 | %ifarch alpha |
1c6e2c73 | 304 | linux-alpha-gcc |
dfc15f38 | 305 | %endif |
20bc1dd7 | 306 | %ifarch %{x8664} |
9fc51b3c | 307 | linux-x86_64 |
e08c1652 | 308 | %endif |
6bd2fbde JR |
309 | %ifarch x32 |
310 | linux-x32 | |
311 | %endif | |
dfc15f38 | 312 | %ifarch ia64 |
9fc51b3c | 313 | linux-ia64 |
dfc15f38 | 314 | %endif |
75c27cbe | 315 | %ifarch ppc |
9fc51b3c JB |
316 | linux-ppc |
317 | %endif | |
318 | %ifarch ppc64 | |
319 | linux-ppc64 | |
75c27cbe | 320 | %endif |
05285465 | 321 | %ifarch sparc |
9fc51b3c | 322 | linux-sparcv8 |
0384baf6 | 323 | %endif |
36db42b5 | 324 | %ifarch sparcv9 |
9fc51b3c | 325 | linux-sparcv9 |
36db42b5 PS |
326 | %endif |
327 | %ifarch sparc64 | |
9fc51b3c | 328 | linux64-sparcv9 |
36db42b5 | 329 | %endif |
1c6e2c73 | 330 | %ifarch %{arm} |
9f6d1eb0 | 331 | linux-armv4 |
332 | %endif | |
1c6e2c73 JB |
333 | %ifarch aarch64 |
334 | linux-aarch64 | |
335 | %endif | |
05285465 | 336 | |
81e27b7e | 337 | v=$(awk -F= '/^VERSION/{print $2}' Makefile) |
6b0a00b5 | 338 | test "$v" = %{version}%{?subver:-%{subver}}%{?with_snap:-dev} |
81e27b7e | 339 | |
7c7b781c JB |
340 | # fails with enable-sctp as of 1.1.1 |
341 | %{__rm} test/recipes/80-test_ssl_new.t | |
342 | ||
4c5d5b48 | 343 | %{__make} -j1 all %{?with_tests:tests} \ |
b84cddc8 | 344 | CC="%{__cc}" \ |
1c6e2c73 | 345 | OPTFLAGS="%{rpmcflags} %{rpmcppflags}" \ |
b84cddc8 | 346 | INSTALLTOP=%{_prefix} |
ce2ff00e | 347 | |
6a2c91da | 348 | # Rename POD sources of man pages. "openssl-" prefix is added to each |
7c7b781c | 349 | # manpage to avoid potential conflicts with other packages. |
c4c6d146 | 350 | # openssl-man-namespace.patch mostly marks these pages with "openssl-" prefix. |
ce2ff00e | 351 | |
c4c6d146 | 352 | for podfile in $(grep -rl '^openssl-' doc/man*); do |
1c6e2c73 JB |
353 | dir=$(dirname "$podfile") |
354 | base=$(basename "$podfile") | |
355 | %{__mv} "$podfile" "$dir/openssl-$base" | |
ce2ff00e | 356 | done |
357 | ||
21ac4f86 | 358 | %install |
04a5ad1f | 359 | rm -rf $RPM_BUILD_ROOT |
ce2ff00e | 360 | install -d $RPM_BUILD_ROOT{%{_sysconfdir}/%{name},%{_libdir}/%{name}} \ |
4b251642 JK |
361 | $RPM_BUILD_ROOT{%{_mandir}/{pl/man1,man{1,3,5,7}},%{_datadir}/ssl} \ |
362 | $RPM_BUILD_ROOT%{_pkgconfigdir} | |
faddd309 | 363 | |
29a78a60 | 364 | %{__make} -j1 install \ |
20c78826 | 365 | CC="%{__cc}" \ |
08291e9a | 366 | DESTDIR=$RPM_BUILD_ROOT |
04a5ad1f | 367 | |
3819301b | 368 | %{__mv} $RPM_BUILD_ROOT%{_libdir}/lib*.so.*.* $RPM_BUILD_ROOT/%{_lib} |
c2a98469 JR |
369 | ln -sf /%{_lib}/$(basename $RPM_BUILD_ROOT/%{_lib}/libcrypto.*.*) $RPM_BUILD_ROOT%{_libdir}/libcrypto.so |
370 | ln -sf /%{_lib}/$(basename $RPM_BUILD_ROOT/%{_lib}/libssl.*.*) $RPM_BUILD_ROOT%{_libdir}/libssl.so | |
04a5ad1f | 371 | |
3819301b JB |
372 | %{__mv} $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/misc/* $RPM_BUILD_ROOT%{_libdir}/%{name} |
373 | %{__rm} -r $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/misc | |
04a5ad1f | 374 | |
20c78826 ER |
375 | # html version of man pages - not packaged |
376 | %{__rm} -r $RPM_BUILD_ROOT%{_docdir}/%{name}/html/man[1357] | |
1c008d35 | 377 | |
848e9cf2 | 378 | cp -p %{SOURCE2} $RPM_BUILD_ROOT%{_mandir}/pl/man1/openssl.1 |
dece7a9c ER |
379 | install -p %{SOURCE3} $RPM_BUILD_ROOT%{_bindir}/ssl-certificate |
380 | install -p %{SOURCE4} $RPM_BUILD_ROOT%{_bindir}/c_rehash.sh | |
9fc51b3c | 381 | |
57dc6058 JB |
382 | %clean |
383 | rm -rf $RPM_BUILD_ROOT | |
61a04a63 | 384 | |
d86c2c8b | 385 | %post -p /sbin/ldconfig |
ce2ff00e | 386 | %postun -p /sbin/ldconfig |
04a5ad1f | 387 | |
c8f5291b ER |
388 | %triggerpostun -- %{name}-tools < 1.0.0-5 |
389 | # the hashing format has changed in 1.0.0 | |
390 | [ ! -x %{_sbindir}/update-ca-certificates ] || %{_sbindir}/update-ca-certificates --fresh || : | |
391 | ||
0fdaa4e3 | 392 | %triggerpostun -- %{name} < 0.9.8i-2 |
62bcfa4e ER |
393 | # don't do anything on --downgrade |
394 | if [ $1 -le 1 ]; then | |
395 | exit 0 | |
396 | fi | |
0fdaa4e3 JR |
397 | if [ -d /var/lib/openssl/certs ] ; then |
398 | mv /var/lib/openssl/certs/* %{_sysconfdir}/%{name}/certs 2>/dev/null || : | |
399 | fi | |
400 | if [ -d /var/lib/openssl/private ] ; then | |
401 | mv /var/lib/openssl/private/* %{_sysconfdir}/%{name}/private 2>/dev/null || : | |
402 | fi | |
403 | if [ -d /var/lib/openssl ] ; then | |
404 | for f in /var/lib/openssl/* ; do | |
405 | [ -f "$f" ] && mv "$f" %{_sysconfdir}/%{name} 2>/dev/null || : | |
406 | done | |
62bcfa4e ER |
407 | rmdir /var/lib/openssl/* 2>/dev/null || : |
408 | rmdir /var/lib/openssl 2>/dev/null || : | |
0fdaa4e3 JR |
409 | fi |
410 | ||
21ac4f86 | 411 | %files |
04a5ad1f | 412 | %defattr(644,root,root,755) |
20c78826 ER |
413 | %doc CHANGES LICENSE NEWS README doc/*.txt |
414 | %attr(755,root,root) /%{_lib}/libcrypto.so.*.* | |
415 | %attr(755,root,root) /%{_lib}/libssl.so.*.* | |
fa6b6d15 | 416 | %dir %{_sysconfdir}/%{name} |
417 | %dir %{_sysconfdir}/%{name}/certs | |
b38449e1 | 418 | %dir %attr(700,root,root) %{_sysconfdir}/%{name}/private |
b87437db | 419 | %dir %{_datadir}/ssl |
ce2ff00e | 420 | |
182f9d23 | 421 | %files engines |
3a24c9cc | 422 | %defattr(644,root,root,755) |
20c78826 ER |
423 | %dir /%{_lib}/engines-1.1 |
424 | %attr(755,root,root) /%{_lib}/engines-1.1/*.so | |
182f9d23 | 425 | |
ce2ff00e | 426 | %files tools |
427 | %defattr(644,root,root,755) | |
c4c6d146 | 428 | %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/%{name}/ct_log_list.cnf |
623d135e | 429 | %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/%{name}/openssl.cnf |
d231add3 | 430 | %attr(755,root,root) %{_bindir}/c_rehash.sh |
44d8c69e | 431 | %attr(755,root,root) %{_bindir}/openssl |
ea55f735 | 432 | %attr(754,root,root) %{_bindir}/ssl-certificate |
d86c2c8b | 433 | %{_mandir}/man1/openssl.1* |
6a2c91da JB |
434 | %{_mandir}/man1/openssl-asn1parse.1* |
435 | %{_mandir}/man1/openssl-ca.1* | |
436 | %{_mandir}/man1/openssl-ciphers.1* | |
437 | %{_mandir}/man1/openssl-cms.1* | |
438 | %{_mandir}/man1/openssl-crl.1* | |
439 | %{_mandir}/man1/openssl-crl2pkcs7.1* | |
440 | %{_mandir}/man1/openssl-dgst.1* | |
441 | %{_mandir}/man1/openssl-dhparam.1* | |
442 | %{_mandir}/man1/openssl-dsa.1* | |
443 | %{_mandir}/man1/openssl-dsaparam.1* | |
444 | %{_mandir}/man1/openssl-ec.1* | |
445 | %{_mandir}/man1/openssl-ecparam.1* | |
446 | %{_mandir}/man1/openssl-enc.1* | |
1c6e2c73 | 447 | %{_mandir}/man1/openssl-engine.1* |
6a2c91da JB |
448 | %{_mandir}/man1/openssl-errstr.1* |
449 | %{_mandir}/man1/openssl-gendsa.1* | |
450 | %{_mandir}/man1/openssl-genpkey.1* | |
451 | %{_mandir}/man1/openssl-genrsa.1* | |
1c6e2c73 | 452 | %{_mandir}/man1/openssl-list.1* |
6a2c91da JB |
453 | %{_mandir}/man1/openssl-nseq.1* |
454 | %{_mandir}/man1/openssl-ocsp.1* | |
455 | %{_mandir}/man1/openssl-passwd.1* | |
456 | %{_mandir}/man1/openssl-pkcs12.1* | |
457 | %{_mandir}/man1/openssl-pkcs7.1* | |
458 | %{_mandir}/man1/openssl-pkcs8.1* | |
459 | %{_mandir}/man1/openssl-pkey.1* | |
460 | %{_mandir}/man1/openssl-pkeyparam.1* | |
461 | %{_mandir}/man1/openssl-pkeyutl.1* | |
c4c6d146 | 462 | %{_mandir}/man1/openssl-prime.1* |
6a2c91da | 463 | %{_mandir}/man1/openssl-rand.1* |
1c6e2c73 | 464 | %{_mandir}/man1/openssl-rehash.1* |
6a2c91da JB |
465 | %{_mandir}/man1/openssl-req.1* |
466 | %{_mandir}/man1/openssl-rsa.1* | |
467 | %{_mandir}/man1/openssl-rsautl.1* | |
468 | %{_mandir}/man1/openssl-s_client.1* | |
469 | %{_mandir}/man1/openssl-s_server.1* | |
470 | %{_mandir}/man1/openssl-s_time.1* | |
471 | %{_mandir}/man1/openssl-sess_id.1* | |
472 | %{_mandir}/man1/openssl-smime.1* | |
473 | %{_mandir}/man1/openssl-speed.1* | |
474 | %{_mandir}/man1/openssl-spkac.1* | |
c4c6d146 | 475 | %{_mandir}/man1/openssl-srp.1* |
c4c6d146 | 476 | %{_mandir}/man1/openssl-storeutl.1* |
6a2c91da JB |
477 | %{_mandir}/man1/openssl-ts.1* |
478 | %{_mandir}/man1/openssl-tsget.1* | |
479 | %{_mandir}/man1/openssl-verify.1* | |
480 | %{_mandir}/man1/openssl-version.1* | |
481 | %{_mandir}/man1/openssl-x509.1* | |
482 | %{_mandir}/man5/openssl-config.5* | |
483 | %{_mandir}/man5/openssl-x509v3_config.5* | |
62382817 | 484 | %lang(pl) %{_mandir}/pl/man1/openssl.1* |
ce2ff00e | 485 | |
486 | %files tools-perl | |
487 | %defattr(644,root,root,755) | |
62313b5e | 488 | %attr(755,root,root) %{_bindir}/c_rehash |
08291e9a | 489 | %dir %{_libdir}/%{name} |
ce2ff00e | 490 | %attr(755,root,root) %{_libdir}/%{name}/CA.pl |
848e9cf2 | 491 | %attr(755,root,root) %{_libdir}/%{name}/tsget |
c4c6d146 | 492 | %attr(755,root,root) %{_libdir}/%{name}/tsget.pl |
1c6e2c73 JB |
493 | %{_mandir}/man1/CA.pl.1* |
494 | %{_mandir}/man1/c_rehash.1* | |
faddd309 AF |
495 | |
496 | %files devel | |
497 | %defattr(644,root,root,755) | |
f4434df9 PS |
498 | %attr(755,root,root) %{_libdir}/libcrypto.so |
499 | %attr(755,root,root) %{_libdir}/libssl.so | |
ce2ff00e | 500 | %{_includedir}/%{name} |
9fc51b3c JB |
501 | %{_pkgconfigdir}/libcrypto.pc |
502 | %{_pkgconfigdir}/libssl.pc | |
8c362d23 | 503 | %{_pkgconfigdir}/openssl.pc |
1c6e2c73 | 504 | %{_mandir}/man3/ACCESS_DESCRIPTION_*.3* |
c4c6d146 | 505 | %{_mandir}/man3/ADMISSION*.3* |
1c6e2c73 JB |
506 | %{_mandir}/man3/ASId*.3* |
507 | %{_mandir}/man3/ASRange_*.3* | |
508 | %{_mandir}/man3/ASN1_*.3* | |
509 | %{_mandir}/man3/ASYNC_*.3* | |
510 | %{_mandir}/man3/AUTHORITY_*.3* | |
511 | %{_mandir}/man3/BASIC_CONSTRAINTS_*.3* | |
512 | %{_mandir}/man3/BF_*.3* | |
513 | %{_mandir}/man3/BIO_*.3* | |
514 | %{_mandir}/man3/BN_*.3* | |
515 | %{_mandir}/man3/BUF_*.3* | |
516 | %{_mandir}/man3/CERTIFICATEPOLICIES_*.3* | |
517 | %{_mandir}/man3/CMS_*.3* | |
518 | %{_mandir}/man3/CONF_*.3* | |
519 | %{_mandir}/man3/CRL_DIST_POINTS_*.3* | |
520 | %{_mandir}/man3/CRYPTO_*.3* | |
521 | %{_mandir}/man3/CTLOG_*.3* | |
522 | %{_mandir}/man3/CT_POLICY_*.3* | |
523 | %{_mandir}/man3/DECLARE_*.3* | |
524 | %{_mandir}/man3/DEFINE_*.3* | |
525 | %{_mandir}/man3/DES_*.3* | |
526 | %{_mandir}/man3/DH_*.3* | |
527 | %{_mandir}/man3/DHparams_*.3* | |
528 | %{_mandir}/man3/DIRECTORYSTRING_*.3* | |
529 | %{_mandir}/man3/DISPLAYTEXT_*.3* | |
530 | %{_mandir}/man3/DIST_POINT_*.3* | |
531 | %{_mandir}/man3/DSA_*.3* | |
532 | %{_mandir}/man3/DSAparams_*.3* | |
533 | %{_mandir}/man3/DTLS_*.3* | |
534 | %{_mandir}/man3/DTLSv1_*.3* | |
535 | %{_mandir}/man3/ECDH_*.3* | |
536 | %{_mandir}/man3/ECDSA_*.3* | |
537 | %{_mandir}/man3/ECPARAMETERS_*.3* | |
538 | %{_mandir}/man3/ECPKPARAMETERS_*.3* | |
539 | %{_mandir}/man3/ECPKParameters_*.3* | |
540 | %{_mandir}/man3/EC_*.3* | |
541 | %{_mandir}/man3/EDIPARTYNAME_*.3* | |
542 | %{_mandir}/man3/ENGINE_*.3* | |
543 | %{_mandir}/man3/ERR_*.3* | |
544 | %{_mandir}/man3/ESS_*.3* | |
545 | %{_mandir}/man3/EVP_*.3* | |
546 | %{_mandir}/man3/EXTENDED_KEY_USAGE_*.3* | |
547 | %{_mandir}/man3/GENERAL_*.3* | |
548 | %{_mandir}/man3/GEN_SESSION_CB.3* | |
549 | %{_mandir}/man3/HMAC*.3* | |
550 | %{_mandir}/man3/IMPLEMENT_*.3* | |
551 | %{_mandir}/man3/IPAddress*.3* | |
552 | %{_mandir}/man3/ISSUING_DIST_POINT_*.3* | |
c4c6d146 | 553 | %{_mandir}/man3/LHASH*.3* |
1c6e2c73 JB |
554 | %{_mandir}/man3/MD2*.3* |
555 | %{_mandir}/man3/MD4*.3* | |
556 | %{_mandir}/man3/MD5*.3* | |
557 | %{_mandir}/man3/MDC2*.3* | |
558 | %{_mandir}/man3/NAME_CONSTRAINTS_*.3* | |
c4c6d146 | 559 | %{_mandir}/man3/NAMING_AUTHORITY*.3* |
1c6e2c73 JB |
560 | %{_mandir}/man3/NETSCAPE_*.3* |
561 | %{_mandir}/man3/NOTICEREF_*.3* | |
562 | %{_mandir}/man3/OBJ_*.3* | |
563 | %{_mandir}/man3/OCSP_*.3* | |
564 | %{_mandir}/man3/OPENSSL_*.3* | |
c4c6d146 | 565 | %{_mandir}/man3/OSSL*.3* |
1c6e2c73 JB |
566 | %{_mandir}/man3/OTHERNAME_*.3* |
567 | %{_mandir}/man3/OpenSSL_*.3* | |
568 | %{_mandir}/man3/PBE2PARAM_*.3* | |
569 | %{_mandir}/man3/PBEPARAM_*.3* | |
570 | %{_mandir}/man3/PBKDF2PARAM_*.3* | |
571 | %{_mandir}/man3/PEM_*.3* | |
572 | %{_mandir}/man3/PKCS12_*.3* | |
573 | %{_mandir}/man3/PKCS5_*.3* | |
574 | %{_mandir}/man3/PKCS7_*.3* | |
575 | %{_mandir}/man3/PKCS8_*.3* | |
576 | %{_mandir}/man3/PKEY_*.3* | |
577 | %{_mandir}/man3/POLICYINFO_*.3* | |
578 | %{_mandir}/man3/POLICYQUALINFO_*.3* | |
579 | %{_mandir}/man3/POLICY_*.3* | |
c4c6d146 | 580 | %{_mandir}/man3/PROFESSION_INFO*.3* |
1c6e2c73 JB |
581 | %{_mandir}/man3/PROXY_*.3* |
582 | %{_mandir}/man3/RAND_*.3* | |
583 | %{_mandir}/man3/RC4*.3* | |
584 | %{_mandir}/man3/RIPEMD160*.3* | |
585 | %{_mandir}/man3/RSAPrivateKey_*.3* | |
586 | %{_mandir}/man3/RSAPublicKey_*.3* | |
587 | %{_mandir}/man3/RSA_*.3* | |
c4c6d146 | 588 | %{_mandir}/man3/SCRYPT_PARAMS*.3* |
1c6e2c73 JB |
589 | %{_mandir}/man3/SCT_*.3* |
590 | %{_mandir}/man3/SHA1*.3* | |
591 | %{_mandir}/man3/SHA224*.3* | |
592 | %{_mandir}/man3/SHA256*.3* | |
593 | %{_mandir}/man3/SHA384*.3* | |
594 | %{_mandir}/man3/SHA512*.3* | |
595 | %{_mandir}/man3/SMIME_*.3* | |
596 | %{_mandir}/man3/SSL_*.3* | |
597 | %{_mandir}/man3/SSLv23_*.3* | |
598 | %{_mandir}/man3/SSLv3_*.3* | |
599 | %{_mandir}/man3/SXNET_*.3* | |
600 | %{_mandir}/man3/SXNETID_*.3* | |
601 | %{_mandir}/man3/TLS_*.3* | |
602 | %{_mandir}/man3/TLSv1_*.3* | |
603 | %{_mandir}/man3/TS_*.3* | |
604 | %{_mandir}/man3/UI*.3* | |
605 | %{_mandir}/man3/USERNOTICE_*.3* | |
606 | %{_mandir}/man3/X509_*.3* | |
607 | %{_mandir}/man3/X509V3_*.3* | |
608 | %{_mandir}/man3/X509v3_*.3* | |
1c6e2c73 JB |
609 | %{_mandir}/man3/custom_ext_*.3* |
610 | %{_mandir}/man3/d2i_*.3* | |
611 | %{_mandir}/man3/i2d_*.3* | |
612 | %{_mandir}/man3/i2o_*.3* | |
613 | %{_mandir}/man3/i2t_*.3* | |
614 | %{_mandir}/man3/lh_TYPE_*.3* | |
615 | %{_mandir}/man3/o2i_*.3* | |
616 | %{_mandir}/man3/pem_password_cb.3* | |
617 | %{_mandir}/man3/sk_TYPE_*.3* | |
618 | %{_mandir}/man3/ssl_ct_validation_cb.3* | |
c4c6d146 | 619 | %{_mandir}/man7/openssl.7* |
1c6e2c73 JB |
620 | %{_mandir}/man7/openssl-bio.7* |
621 | %{_mandir}/man7/openssl-crypto.7* | |
622 | %{_mandir}/man7/openssl-ct.7* | |
6a2c91da | 623 | %{_mandir}/man7/openssl-des_modes.7* |
c4c6d146 AM |
624 | %{_mandir}/man7/openssl-Ed25519.7* |
625 | %{_mandir}/man7/openssl-Ed448.7* | |
1c6e2c73 | 626 | %{_mandir}/man7/openssl-evp.7* |
c4c6d146 AM |
627 | %{_mandir}/man7/openssl-passphrase-encoding.7* |
628 | %{_mandir}/man7/openssl-RAND.7* | |
629 | %{_mandir}/man7/openssl-RAND_DRBG.7* | |
630 | %{_mandir}/man7/openssl-scrypt.7* | |
631 | %{_mandir}/man7/openssl-SM2.7* | |
1c6e2c73 | 632 | %{_mandir}/man7/openssl-ssl.7* |
c4c6d146 AM |
633 | %{_mandir}/man7/openssl-X25519.7* |
634 | %{_mandir}/man7/openssl-X448.7* | |
1c6e2c73 | 635 | %{_mandir}/man7/openssl-x509.7* |
c4c6d146 AM |
636 | %{_mandir}/man7/ossl_store.7* |
637 | %{_mandir}/man7/ossl_store-file.7* | |
638 | %{_mandir}/man7/RSA-PSS.7.gz | |
faddd309 AF |
639 | |
640 | %files static | |
641 | %defattr(644,root,root,755) | |
7250cee4 JB |
642 | %{_libdir}/libcrypto.a |
643 | %{_libdir}/libssl.a |