]>
Commit | Line | Data |
---|---|---|
44d8c69e | 1 | # |
2403ba81 | 2 | # Conditional build: |
d76d59fa | 3 | %bcond_without tests # don't perform "make tests" |
d343076c | 4 | %bcond_without zlib # zlib: note - enables CVE-2012-4929 vulnerability |
c4c6d146 AM |
5 | %bcond_with sslv2 # SSLv2: note - many flaws http://en.wikipedia.org/wiki/Transport_Layer_Security#SSL_2.0 |
6 | %bcond_with sslv3 # SSLv3: note - enables CVE-2014-3566 vulnerability | |
81e27b7e | 7 | %bcond_with snap # use GitHub snapshot to build branch release |
dece7a9c | 8 | |
779bb536 | 9 | %include /usr/lib/rpm/macros.perl |
ce2ff00e | 10 | Summary: OpenSSL Toolkit libraries for the "Secure Sockets Layer" (SSL v2/v3) |
e6bfca5b ER |
11 | Summary(de.UTF-8): Secure Sockets Layer (SSL)-Kommunikationslibrary |
12 | Summary(es.UTF-8): Biblioteca C que suministra algoritmos y protocolos criptográficos | |
13 | Summary(fr.UTF-8): Utilitaires de communication SSL (Secure Sockets Layer) | |
14 | Summary(pl.UTF-8): Biblioteki OpenSSL (SSL v2/v3) | |
15 | Summary(pt_BR.UTF-8): Uma biblioteca C que fornece vários algoritmos e protocolos criptográficos | |
16 | Summary(ru.UTF-8): Библиотеки и утилиты для соединений через Secure Sockets Layer | |
17 | Summary(uk.UTF-8): Бібліотеки та утиліти для з'єднань через Secure Sockets Layer | |
56470945 | 18 | Name: openssl |
5577c65e | 19 | # Version 1.1.0 will be supported until 2019-??-?? (one year after release of 1.1.1). |
55af9845 | 20 | # https://www.openssl.org/about/releasestrat.html |
c4c6d146 | 21 | Version: 1.1.1 |
11de7a96 | 22 | Release: 1 |
d7fc4164 | 23 | License: Apache-like |
56470945 | 24 | Group: Libraries |
81e27b7e | 25 | %if %{without snap} |
56fc3686 | 26 | Source0: https://www.openssl.org/source/%{name}-%{version}.tar.gz |
c4c6d146 | 27 | # Source0-md5: 7079eb017429e0ffb9efb42bf80ccb21 |
81e27b7e | 28 | %else |
b3914c80 | 29 | Source1: https://github.com/openssl/openssl/archive/OpenSSL_1_1_0-stable/%{name}-%{version}-dev.tar.gz |
81e27b7e | 30 | %endif |
62382817 | 31 | Source2: %{name}.1.pl |
ea55f735 | 32 | Source3: %{name}-ssl-certificate.sh |
d231add3 | 33 | Source4: %{name}-c_rehash.sh |
e106ff02 | 34 | Patch1: %{name}-optflags.patch |
c4c6d146 | 35 | |
76855748 | 36 | Patch3: %{name}-man-namespace.patch |
c4c6d146 | 37 | |
76855748 | 38 | Patch5: %{name}-ca-certificates.patch |
c4c6d146 | 39 | |
76855748 AO |
40 | Patch7: %{name}-find.patch |
41 | Patch8: pic.patch | |
c4c6d146 | 42 | |
76855748 | 43 | Patch10: %{name}_fix_for_x32.patch |
2a83d92e | 44 | Patch11: engines-dir.patch |
bd7f0ef1 | 45 | URL: http://www.openssl.org/ |
af59ed59 | 46 | BuildRequires: perl-devel >= 1:5.10.0 |
1543104d | 47 | BuildRequires: pkgconfig |
9edbb66f | 48 | BuildRequires: rpm-perlprov >= 4.1-13 |
20bc1dd7 | 49 | BuildRequires: rpmbuild(macros) >= 1.213 |
31b28434 | 50 | BuildRequires: sed >= 4.0 |
1ecb3a25 | 51 | BuildRequires: zlib-devel |
e9e51fab | 52 | Requires: ca-certificates >= 20120623-1.1 |
dece7a9c | 53 | Requires: rpm-whiteout >= 1.7 |
04a5ad1f AF |
54 | Obsoletes: SSLeay |
55 | Obsoletes: SSLeay-devel | |
56 | Obsoletes: SSLeay-perl | |
a280467c | 57 | Obsoletes: libopenssl0 |
4ec787ae | 58 | %if "%{pld_release}" == "ac" |
7bb98c5d | 59 | Conflicts: neon < 0.26.3-3 |
e21ec158 | 60 | Conflicts: ntpd < 4.2.4p8-10 |
f3136daa | 61 | Conflicts: openssh-clients < 2:5.8p1-9 |
4ec787ae ER |
62 | Conflicts: openssh-server < 2:5.8p1-9 |
63 | %else | |
3a24c9cc ER |
64 | Conflicts: neon < 0.29.6-8 |
65 | Conflicts: openssh-clients < 2:6.2p2-3 | |
66 | Conflicts: openssh-server < 2:6.2p2-3 | |
c04ce0eb | 67 | %endif |
0f86ef4a | 68 | BuildRoot: %{tmpdir}/%{name}-%{version}-root-%(id -u -n) |
21ac4f86 AF |
69 | |
70 | %description | |
71 | The OpenSSL Project is a collaborative effort to develop a robust, | |
b39fed70 | 72 | commercial-grade, full-featured, and Open Source toolkit implementing |
73 | the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS | |
74 | v1) protocols with full-strength cryptography world-wide. The project | |
75 | is managed by a worldwide community of volunteers that use the | |
76 | Internet to communicate, plan, and develop the OpenSSL tookit and its | |
77 | related documentation. | |
56470945 | 78 | |
b39fed70 | 79 | OpenSSL is based on the excellent SSLeay library developed by Eric A. |
80 | Young and Tim J. Hudson. The OpenSSL toolkit is licensed under an | |
81 | Apache-style licence, which basically means that you are free to get | |
82 | and use it for commercial and non-commercial purposes subject to some | |
83 | simple license conditions. | |
21ac4f86 | 84 | |
fc19f542 | 85 | This package contains shared libraries only, install openssl-tools if |
86 | you want to use openssl cmdline tool. | |
ce2ff00e | 87 | |
30e72515 JR |
88 | %description -l de.UTF-8 |
89 | Openssl enthält das OpenSSL Zertifikatsmanagementtool und shared | |
90 | libraries, die verschiedene Verschlüsselungs- und | |
91 | Entschlüsselungsalgorithmen und -protokolle, wie DES, RC4, RSA und SSL | |
92 | zur Verfügung stellen. | |
453a8bf3 | 93 | |
30e72515 JR |
94 | %description -l es.UTF-8 |
95 | Biblioteca C que suministra algoritmos y protocolos criptográficos. | |
2fad19b0 | 96 | |
30e72515 | 97 | %description -l fr.UTF-8 |
56470945 | 98 | OpenSSL est un outiil de gestion des certificats et les librairies |
99 | partagees qui fournit plusieurs protocoles et algorithmes de | |
100 | codage/decodage, incluant DES, RC4, RSA et SSL. | |
2fad19b0 | 101 | |
30e72515 JR |
102 | %description -l pl.UTF-8 |
103 | Implementacja protokołów kryptograficznych Secure Socket Layer (SSL) | |
78b5e413 TP |
104 | v2/v3 oraz Transport Layer Security (TLS v1). |
105 | ||
30e72515 JR |
106 | %description -l pt_BR.UTF-8 |
107 | Uma biblioteca C que fornece vários algoritmos e protocolos | |
108 | criptográficos, incluindo DES, RC4, RSA e SSL. Inclui bibliotecas | |
109 | compartilhadas e utilitários. | |
453a8bf3 | 110 | |
30e72515 JR |
111 | %description -l ru.UTF-8 |
112 | Программа openssl для работы с сертификатами и разделяемые библиотеки, | |
113 | которые реализуют множетсво криптографических алгоритмов, включая DES, | |
114 | RC4, RSA и SSL. | |
453a8bf3 | 115 | |
30e72515 JR |
116 | %description -l uk.UTF-8 |
117 | Програма openssl для роботи з сертифікатами та бібліотеки спільного | |
118 | користування, що реалізують велику кількість криптографічних | |
119 | алгоритмів, включаючи DES, RC4, RSA та SSL. | |
453a8bf3 | 120 | |
182f9d23 TP |
121 | %package engines |
122 | Summary: OpenSSL optional crypto engines | |
545f4646 | 123 | Summary(pl.UTF-8): Opcjonalne silniki kryptograficzne dla OpenSSL-a |
182f9d23 TP |
124 | Group: Libraries |
125 | Requires: %{name} = %{version}-%{release} | |
126 | ||
127 | %description engines | |
128 | With OpenSSL 0.9.6, a new component was added to support alternative | |
545f4646 JB |
129 | cryptography implementations, most commonly for interfacing with |
130 | external crypto devices (eg. accelerator cards). This component is | |
131 | called ENGINE. | |
182f9d23 TP |
132 | |
133 | There are currently built-in ENGINE implementations for the following | |
134 | crypto devices: | |
135 | ||
136 | - CryptoSwift | |
137 | - Compaq Atalla | |
138 | - nCipher CHIL | |
139 | - Nuron | |
140 | - Broadcom uBSec | |
141 | ||
142 | In addition, dynamic binding to external ENGINE implementations is now | |
3a24c9cc | 143 | provided by a special ENGINE called "dynamic". |
182f9d23 | 144 | |
545f4646 JB |
145 | %description engines -l pl.UTF-8 |
146 | Począwszy od OpenSSL-a 0.9.6 został dodany nowy komponent, mający | |
147 | wspierać alternatywne implementacje kryptografii, przeważnie | |
148 | współpracujące z zewnętrznymi urządzeniami kryptograficznymi (np. | |
3a24c9cc ER |
149 | kartami akceleratorów). Komponent ten jest nazywany SILNIKIEM (ang. |
150 | ENGINE). | |
545f4646 JB |
151 | |
152 | Obecnie istnieją wbudowane implementacje silników dla następujących | |
153 | urządzeń kryptograficznych: | |
154 | - CryptoSwift | |
155 | - Compaq Atalla | |
156 | - nCipher CHIL | |
157 | - Nuron | |
158 | - Broadcom uBSec | |
159 | ||
160 | Ponadto zapewnione jest dynamiczne wiązanie dla zewnętrznych | |
161 | implementacji silników poprzez specjalny silnik o nazwie "dynamic". | |
162 | ||
ce2ff00e | 163 | %package tools |
164 | Summary: OpenSSL command line tool and utilities | |
e6bfca5b | 165 | Summary(pl.UTF-8): Zestaw narzędzi i skryptów |
fc19f542 | 166 | Group: Applications/Communications |
82859ae1 | 167 | Requires: %{name} = %{version}-%{release} |
9583cd23 | 168 | Requires: which |
ce2ff00e | 169 | |
170 | %description tools | |
171 | The OpenSSL Toolkit cmdline tool openssl and utility scripts. | |
172 | ||
30e72515 JR |
173 | %description tools -l pl.UTF-8 |
174 | Zestaw narzędzi i skryptów wywoływanych z linii poleceń. | |
78b5e413 | 175 | |
ce2ff00e | 176 | %package tools-perl |
177 | Summary: OpenSSL utilities written in Perl | |
e6bfca5b | 178 | Summary(pl.UTF-8): Narzędzia OpenSSL napisane w perlu |
fc19f542 | 179 | Group: Applications/Communications |
82859ae1 | 180 | Requires: %{name} = %{version}-%{release} |
2b2149ff | 181 | |
ce2ff00e | 182 | %description tools-perl |
d86c2c8b | 183 | OpenSSL Toolkit tools written in Perl. |
2b2149ff | 184 | |
30e72515 JR |
185 | %description tools-perl -l pl.UTF-8 |
186 | Narzędzia OpenSSL napisane w perlu. | |
78b5e413 | 187 | |
faddd309 | 188 | %package devel |
ce2ff00e | 189 | Summary: Development part of OpenSSL Toolkit libraries |
e6bfca5b ER |
190 | Summary(de.UTF-8): Secure Sockets Layer Kommunikationslibrary: statische libraries+header |
191 | Summary(es.UTF-8): Bibliotecas y archivos de inclusión para desarrollo OpenSSL | |
192 | Summary(fr.UTF-8): Librairies statiques, headers et utilitaires pour communication SSL | |
193 | Summary(pl.UTF-8): Część bibiloteki OpenSSL przeznaczona dla programistów | |
194 | Summary(pt_BR.UTF-8): Bibliotecas e arquivos de inclusão para desenvolvimento OpenSSL | |
195 | Summary(ru.UTF-8): Библиотеки, хедеры и утилиты для Secure Sockets Layer | |
196 | Summary(uk.UTF-8): Бібліотеки, хедери та утиліти для Secure Sockets Layer | |
9c05bcac | 197 | Group: Development/Libraries |
82859ae1 | 198 | Requires: %{name} = %{version}-%{release} |
a280467c | 199 | Obsoletes: libopenssl0-devel |
faddd309 AF |
200 | |
201 | %description devel | |
202 | Development part of OpenSSL library. | |
203 | ||
30e72515 JR |
204 | %description devel -l es.UTF-8 |
205 | Bibliotecas y archivos de inclusión para desarrollo OpenSSL | |
453a8bf3 | 206 | |
30e72515 JR |
207 | %description devel -l pl.UTF-8 |
208 | Część biblioteki OpenSSL przeznaczona dla programistów. | |
faddd309 | 209 | |
30e72515 JR |
210 | %description devel -l pt_BR.UTF-8 |
211 | Uma biblioteca C que fornece vários algoritmos e protocolos | |
212 | criptográficos, incluindo DES, RC4, RSA e SSL. Inclui bibliotecas e | |
213 | arquivos de inclusão para desenvolvimento. | |
453a8bf3 | 214 | |
30e72515 JR |
215 | %description devel -l ru.UTF-8 |
216 | Программа openssl для работы с сертификатами и разделяемые библиотеки, | |
217 | которые реализуют множетсво криптографических алгоритмов, включая DES, | |
218 | RC4, RSA и SSL. Включает библиотеки и хедеры для разработки приложений | |
219 | с использованием SSL. | |
453a8bf3 | 220 | |
30e72515 JR |
221 | %description devel -l uk.UTF-8 |
222 | Програма openssl для роботи з сертифікатами та бібліотеки спільного | |
223 | користування, що реалізують велику кількість криптографічних | |
224 | алгоритмів, включаючи DES, RC4, RSA та SSL. Містить бібліотеки та | |
225 | хедери для розробки програм з використанням SSL. | |
453a8bf3 | 226 | |
faddd309 | 227 | %package static |
ce2ff00e | 228 | Summary: Static OpenSSL libraries |
e6bfca5b ER |
229 | Summary(pl.UTF-8): Statyczne wersje bibliotek z OpenSSL |
230 | Summary(pt_BR.UTF-8): Bibliotecas estáticas para desenvolvimento com openssl | |
231 | Summary(ru.UTF-8): Статические библиотеки разработчика для OpenSSL | |
232 | Summary(uk.UTF-8): Статичні бібліотеки програміста для OpenSSL | |
9c05bcac | 233 | Group: Development/Libraries |
82859ae1 | 234 | Requires: %{name}-devel = %{version}-%{release} |
faddd309 AF |
235 | |
236 | %description static | |
ce2ff00e | 237 | Static OpenSSL Toolkit libraries. |
faddd309 | 238 | |
30e72515 | 239 | %description static -l pl.UTF-8 |
ce2ff00e | 240 | Statyczne wersje bibliotek z OpenSSL. |
faddd309 | 241 | |
30e72515 JR |
242 | %description static -l pt_BR.UTF-8 |
243 | Bibliotecas estáticas para desenvolvimento com openssl. | |
453a8bf3 | 244 | |
30e72515 JR |
245 | %description static -l ru.UTF-8 |
246 | Программа openssl для работы с сертификатами и разделяемые библиотеки, | |
247 | которые реализуют множетсво криптографических алгоритмов, включая DES, | |
248 | RC4, RSA и SSL. Включает статические библиотеки для разработки | |
249 | приложений с использованием OpenSSL. | |
453a8bf3 | 250 | |
30e72515 JR |
251 | %description static -l uk.UTF-8 |
252 | Програма openssl для роботи з сертифікатами та бібліотеки спільного | |
253 | користування, що реалізують велику кількість криптографічних | |
254 | алгоритмів, включаючи DES, RC4, RSA та SSL. Містить статичні | |
255 | бібліотеки для розробки програм з використанням SSL. | |
453a8bf3 | 256 | |
21ac4f86 | 257 | %prep |
81e27b7e ER |
258 | %if %{with snap} |
259 | %setup -qcT -a1 | |
1c6e2c73 | 260 | %{__mv} %{name}-OpenSSL_1_1_0-stable/* . |
81e27b7e | 261 | %else |
155b2eda | 262 | %setup -q %{?subver:-n %{name}-%{version}-%{subver}} |
81e27b7e | 263 | %endif |
c4c6d146 | 264 | |
1c6e2c73 | 265 | %patch1 -p1 |
c4c6d146 | 266 | |
1c6e2c73 | 267 | %patch3 -p1 |
c4c6d146 | 268 | |
1c6e2c73 | 269 | %patch5 -p1 |
c4c6d146 | 270 | |
44d8c69e | 271 | %patch7 -p1 |
3b0168a6 | 272 | %patch8 -p1 |
c4c6d146 | 273 | |
f60e47ab | 274 | %ifarch x32 |
84745a0c | 275 | %patch10 -p1 |
42b56af8 | 276 | %endif |
2a83d92e | 277 | %patch11 -p1 |
a9839ec4 | 278 | |
d76d59fa | 279 | %build |
00466ad3 | 280 | touch Makefile.* |
04a5ad1f | 281 | |
7250cee4 JB |
282 | PERL="%{__perl}" \ |
283 | %{__perl} ./Configure \ | |
2a83d92e | 284 | --prefix=%{_prefix} \ |
0fdaa4e3 | 285 | --openssldir=%{_sysconfdir}/%{name} \ |
6e7b8079 | 286 | --libdir=%{_lib} \ |
08291e9a | 287 | -Wa,--noexecstack \ |
e1798b93 AM |
288 | shared \ |
289 | threads \ | |
2a82d451 AO |
290 | %{?with_sslv2:enable-ssl2}%{!?with_sslv2:no-ssl2} \ |
291 | %{?with_sslv3:enable-ssl3}%{!?with_sslv3:no-ssl3} \ | |
93a4f283 | 292 | %{!?with_zlib:no-}zlib \ |
215c1d6f AM |
293 | enable-cms \ |
294 | enable-idea \ | |
05889491 | 295 | enable-md2 \ |
e02b6d37 | 296 | enable-mdc2 \ |
215c1d6f | 297 | enable-rc5 \ |
e02b6d37 AM |
298 | enable-rfc3779 \ |
299 | enable-seed \ | |
e02b6d37 AM |
300 | %ifarch %{x8664} |
301 | enable-ec_nistp_64_gcc_128 \ | |
302 | %endif | |
51e76169 | 303 | %ifarch %{ix86} |
04a32771 | 304 | %ifarch i386 |
9fc51b3c | 305 | 386 linux-elf |
915551a7 | 306 | # ^- allow running on 80386 (default code uses bswapl available on i486+) |
51e76169 | 307 | %else |
9fc51b3c | 308 | linux-elf |
75c27cbe | 309 | %endif |
51e76169 | 310 | %endif |
dfc15f38 | 311 | %ifarch alpha |
1c6e2c73 | 312 | linux-alpha-gcc |
dfc15f38 | 313 | %endif |
20bc1dd7 | 314 | %ifarch %{x8664} |
9fc51b3c | 315 | linux-x86_64 |
e08c1652 | 316 | %endif |
6bd2fbde JR |
317 | %ifarch x32 |
318 | linux-x32 | |
319 | %endif | |
dfc15f38 | 320 | %ifarch ia64 |
9fc51b3c | 321 | linux-ia64 |
dfc15f38 | 322 | %endif |
75c27cbe | 323 | %ifarch ppc |
9fc51b3c JB |
324 | linux-ppc |
325 | %endif | |
326 | %ifarch ppc64 | |
327 | linux-ppc64 | |
75c27cbe | 328 | %endif |
05285465 | 329 | %ifarch sparc |
9fc51b3c | 330 | linux-sparcv8 |
0384baf6 | 331 | %endif |
36db42b5 | 332 | %ifarch sparcv9 |
9fc51b3c | 333 | linux-sparcv9 |
36db42b5 PS |
334 | %endif |
335 | %ifarch sparc64 | |
9fc51b3c | 336 | linux64-sparcv9 |
36db42b5 | 337 | %endif |
1c6e2c73 | 338 | %ifarch %{arm} |
9f6d1eb0 | 339 | linux-armv4 |
340 | %endif | |
1c6e2c73 JB |
341 | %ifarch aarch64 |
342 | linux-aarch64 | |
343 | %endif | |
05285465 | 344 | |
81e27b7e | 345 | v=$(awk -F= '/^VERSION/{print $2}' Makefile) |
6b0a00b5 | 346 | test "$v" = %{version}%{?subver:-%{subver}}%{?with_snap:-dev} |
81e27b7e | 347 | |
4c5d5b48 | 348 | %{__make} -j1 all %{?with_tests:tests} \ |
b84cddc8 | 349 | CC="%{__cc}" \ |
1c6e2c73 | 350 | OPTFLAGS="%{rpmcflags} %{rpmcppflags}" \ |
b84cddc8 | 351 | INSTALLTOP=%{_prefix} |
ce2ff00e | 352 | |
1c6e2c73 | 353 | # Rename POD sources of man pages. "openssl-" prefix is added to each |
c4c6d146 AM |
354 | # manpage to avoid potential conflicts with other packages. |
355 | # openssl-man-namespace.patch mostly marks these pages with "openssl-" prefix. | |
ce2ff00e | 356 | |
c4c6d146 | 357 | for podfile in $(grep -rl '^openssl-' doc/man*); do |
1c6e2c73 JB |
358 | dir=$(dirname "$podfile") |
359 | base=$(basename "$podfile") | |
360 | %{__mv} "$podfile" "$dir/openssl-$base" | |
ce2ff00e | 361 | done |
362 | ||
21ac4f86 | 363 | %install |
04a5ad1f | 364 | rm -rf $RPM_BUILD_ROOT |
ce2ff00e | 365 | install -d $RPM_BUILD_ROOT{%{_sysconfdir}/%{name},%{_libdir}/%{name}} \ |
4b251642 JK |
366 | $RPM_BUILD_ROOT{%{_mandir}/{pl/man1,man{1,3,5,7}},%{_datadir}/ssl} \ |
367 | $RPM_BUILD_ROOT%{_pkgconfigdir} | |
faddd309 | 368 | |
29a78a60 | 369 | %{__make} -j1 install \ |
20c78826 | 370 | CC="%{__cc}" \ |
08291e9a | 371 | DESTDIR=$RPM_BUILD_ROOT |
04a5ad1f | 372 | |
1c6e2c73 | 373 | %{__mv} $RPM_BUILD_ROOT%{_libdir}/lib*.so.*.* $RPM_BUILD_ROOT/%{_lib} |
c2a98469 JR |
374 | ln -sf /%{_lib}/$(basename $RPM_BUILD_ROOT/%{_lib}/libcrypto.*.*) $RPM_BUILD_ROOT%{_libdir}/libcrypto.so |
375 | ln -sf /%{_lib}/$(basename $RPM_BUILD_ROOT/%{_lib}/libssl.*.*) $RPM_BUILD_ROOT%{_libdir}/libssl.so | |
04a5ad1f | 376 | |
1c6e2c73 JB |
377 | %{__mv} $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/misc/* $RPM_BUILD_ROOT%{_libdir}/%{name} |
378 | %{__rm} -r $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/misc | |
20c78826 ER |
379 | |
380 | # html version of man pages - not packaged | |
381 | %{__rm} -r $RPM_BUILD_ROOT%{_docdir}/%{name}/html/man[1357] | |
04a5ad1f | 382 | |
848e9cf2 | 383 | cp -p %{SOURCE2} $RPM_BUILD_ROOT%{_mandir}/pl/man1/openssl.1 |
dece7a9c ER |
384 | install -p %{SOURCE3} $RPM_BUILD_ROOT%{_bindir}/ssl-certificate |
385 | install -p %{SOURCE4} $RPM_BUILD_ROOT%{_bindir}/c_rehash.sh | |
9fc51b3c | 386 | |
57dc6058 JB |
387 | %clean |
388 | rm -rf $RPM_BUILD_ROOT | |
61a04a63 | 389 | |
d86c2c8b | 390 | %post -p /sbin/ldconfig |
ce2ff00e | 391 | %postun -p /sbin/ldconfig |
04a5ad1f | 392 | |
c8f5291b ER |
393 | %triggerpostun -- %{name}-tools < 1.0.0-5 |
394 | # the hashing format has changed in 1.0.0 | |
395 | [ ! -x %{_sbindir}/update-ca-certificates ] || %{_sbindir}/update-ca-certificates --fresh || : | |
396 | ||
0fdaa4e3 | 397 | %triggerpostun -- %{name} < 0.9.8i-2 |
62bcfa4e ER |
398 | # don't do anything on --downgrade |
399 | if [ $1 -le 1 ]; then | |
400 | exit 0 | |
401 | fi | |
0fdaa4e3 JR |
402 | if [ -d /var/lib/openssl/certs ] ; then |
403 | mv /var/lib/openssl/certs/* %{_sysconfdir}/%{name}/certs 2>/dev/null || : | |
404 | fi | |
405 | if [ -d /var/lib/openssl/private ] ; then | |
406 | mv /var/lib/openssl/private/* %{_sysconfdir}/%{name}/private 2>/dev/null || : | |
407 | fi | |
408 | if [ -d /var/lib/openssl ] ; then | |
409 | for f in /var/lib/openssl/* ; do | |
410 | [ -f "$f" ] && mv "$f" %{_sysconfdir}/%{name} 2>/dev/null || : | |
411 | done | |
62bcfa4e ER |
412 | rmdir /var/lib/openssl/* 2>/dev/null || : |
413 | rmdir /var/lib/openssl 2>/dev/null || : | |
0fdaa4e3 JR |
414 | fi |
415 | ||
21ac4f86 | 416 | %files |
04a5ad1f | 417 | %defattr(644,root,root,755) |
20c78826 ER |
418 | %doc CHANGES LICENSE NEWS README doc/*.txt |
419 | %attr(755,root,root) /%{_lib}/libcrypto.so.*.* | |
420 | %attr(755,root,root) /%{_lib}/libssl.so.*.* | |
fa6b6d15 | 421 | %dir %{_sysconfdir}/%{name} |
422 | %dir %{_sysconfdir}/%{name}/certs | |
b38449e1 | 423 | %dir %attr(700,root,root) %{_sysconfdir}/%{name}/private |
b87437db | 424 | %dir %{_datadir}/ssl |
ce2ff00e | 425 | |
182f9d23 | 426 | %files engines |
3a24c9cc | 427 | %defattr(644,root,root,755) |
20c78826 ER |
428 | %dir /%{_lib}/engines-1.1 |
429 | %attr(755,root,root) /%{_lib}/engines-1.1/*.so | |
182f9d23 | 430 | |
ce2ff00e | 431 | %files tools |
432 | %defattr(644,root,root,755) | |
c4c6d146 | 433 | %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/%{name}/ct_log_list.cnf |
623d135e | 434 | %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/%{name}/openssl.cnf |
d231add3 | 435 | %attr(755,root,root) %{_bindir}/c_rehash.sh |
44d8c69e | 436 | %attr(755,root,root) %{_bindir}/openssl |
ea55f735 | 437 | %attr(754,root,root) %{_bindir}/ssl-certificate |
d86c2c8b | 438 | %{_mandir}/man1/openssl.1* |
1c6e2c73 | 439 | %{_mandir}/man1/openssl-asn1parse.1* |
1c6e2c73 JB |
440 | %{_mandir}/man1/openssl-ca.1* |
441 | %{_mandir}/man1/openssl-ciphers.1* | |
442 | %{_mandir}/man1/openssl-cms.1* | |
443 | %{_mandir}/man1/openssl-crl.1* | |
444 | %{_mandir}/man1/openssl-crl2pkcs7.1* | |
445 | %{_mandir}/man1/openssl-dgst.1* | |
446 | %{_mandir}/man1/openssl-dhparam.1* | |
447 | %{_mandir}/man1/openssl-dsa.1* | |
448 | %{_mandir}/man1/openssl-dsaparam.1* | |
449 | %{_mandir}/man1/openssl-ec.1* | |
450 | %{_mandir}/man1/openssl-ecparam.1* | |
451 | %{_mandir}/man1/openssl-enc.1* | |
452 | %{_mandir}/man1/openssl-engine.1* | |
453 | %{_mandir}/man1/openssl-errstr.1* | |
454 | %{_mandir}/man1/openssl-gendsa.1* | |
455 | %{_mandir}/man1/openssl-genpkey.1* | |
456 | %{_mandir}/man1/openssl-genrsa.1* | |
457 | %{_mandir}/man1/openssl-list.1* | |
1c6e2c73 JB |
458 | %{_mandir}/man1/openssl-nseq.1* |
459 | %{_mandir}/man1/openssl-ocsp.1* | |
460 | %{_mandir}/man1/openssl-passwd.1* | |
461 | %{_mandir}/man1/openssl-pkcs12.1* | |
462 | %{_mandir}/man1/openssl-pkcs7.1* | |
463 | %{_mandir}/man1/openssl-pkcs8.1* | |
464 | %{_mandir}/man1/openssl-pkey.1* | |
465 | %{_mandir}/man1/openssl-pkeyparam.1* | |
466 | %{_mandir}/man1/openssl-pkeyutl.1* | |
c4c6d146 | 467 | %{_mandir}/man1/openssl-prime.1* |
1c6e2c73 JB |
468 | %{_mandir}/man1/openssl-rand.1* |
469 | %{_mandir}/man1/openssl-rehash.1* | |
470 | %{_mandir}/man1/openssl-req.1* | |
1c6e2c73 JB |
471 | %{_mandir}/man1/openssl-rsa.1* |
472 | %{_mandir}/man1/openssl-rsautl.1* | |
473 | %{_mandir}/man1/openssl-s_client.1* | |
1c6e2c73 | 474 | %{_mandir}/man1/openssl-sess_id.1* |
1c6e2c73 JB |
475 | %{_mandir}/man1/openssl-smime.1* |
476 | %{_mandir}/man1/openssl-speed.1* | |
477 | %{_mandir}/man1/openssl-spkac.1* | |
c4c6d146 AM |
478 | %{_mandir}/man1/openssl-srp.1* |
479 | %{_mandir}/man1/openssl-s_server.1* | |
480 | %{_mandir}/man1/openssl-s_time.1* | |
481 | %{_mandir}/man1/openssl-storeutl.1* | |
1c6e2c73 JB |
482 | %{_mandir}/man1/openssl-ts.1* |
483 | %{_mandir}/man1/openssl-tsget.1* | |
484 | %{_mandir}/man1/openssl-verify.1* | |
485 | %{_mandir}/man1/openssl-version.1* | |
486 | %{_mandir}/man1/openssl-x509.1* | |
487 | %{_mandir}/man5/openssl-config.5* | |
488 | %{_mandir}/man5/openssl-x509v3_config.5* | |
62382817 | 489 | %lang(pl) %{_mandir}/pl/man1/openssl.1* |
ce2ff00e | 490 | |
491 | %files tools-perl | |
492 | %defattr(644,root,root,755) | |
62313b5e | 493 | %attr(755,root,root) %{_bindir}/c_rehash |
08291e9a | 494 | %dir %{_libdir}/%{name} |
ce2ff00e | 495 | %attr(755,root,root) %{_libdir}/%{name}/CA.pl |
848e9cf2 | 496 | %attr(755,root,root) %{_libdir}/%{name}/tsget |
c4c6d146 | 497 | %attr(755,root,root) %{_libdir}/%{name}/tsget.pl |
1c6e2c73 JB |
498 | %{_mandir}/man1/CA.pl.1* |
499 | %{_mandir}/man1/c_rehash.1* | |
faddd309 AF |
500 | |
501 | %files devel | |
502 | %defattr(644,root,root,755) | |
f4434df9 PS |
503 | %attr(755,root,root) %{_libdir}/libcrypto.so |
504 | %attr(755,root,root) %{_libdir}/libssl.so | |
ce2ff00e | 505 | %{_includedir}/%{name} |
9fc51b3c JB |
506 | %{_pkgconfigdir}/libcrypto.pc |
507 | %{_pkgconfigdir}/libssl.pc | |
8c362d23 | 508 | %{_pkgconfigdir}/openssl.pc |
1c6e2c73 | 509 | %{_mandir}/man3/ACCESS_DESCRIPTION_*.3* |
c4c6d146 | 510 | %{_mandir}/man3/ADMISSION*.3* |
1c6e2c73 JB |
511 | %{_mandir}/man3/ASId*.3* |
512 | %{_mandir}/man3/ASRange_*.3* | |
513 | %{_mandir}/man3/ASN1_*.3* | |
514 | %{_mandir}/man3/ASYNC_*.3* | |
515 | %{_mandir}/man3/AUTHORITY_*.3* | |
516 | %{_mandir}/man3/BASIC_CONSTRAINTS_*.3* | |
517 | %{_mandir}/man3/BF_*.3* | |
518 | %{_mandir}/man3/BIO_*.3* | |
519 | %{_mandir}/man3/BN_*.3* | |
520 | %{_mandir}/man3/BUF_*.3* | |
521 | %{_mandir}/man3/CERTIFICATEPOLICIES_*.3* | |
522 | %{_mandir}/man3/CMS_*.3* | |
523 | %{_mandir}/man3/CONF_*.3* | |
524 | %{_mandir}/man3/CRL_DIST_POINTS_*.3* | |
525 | %{_mandir}/man3/CRYPTO_*.3* | |
526 | %{_mandir}/man3/CTLOG_*.3* | |
527 | %{_mandir}/man3/CT_POLICY_*.3* | |
528 | %{_mandir}/man3/DECLARE_*.3* | |
529 | %{_mandir}/man3/DEFINE_*.3* | |
530 | %{_mandir}/man3/DES_*.3* | |
531 | %{_mandir}/man3/DH_*.3* | |
532 | %{_mandir}/man3/DHparams_*.3* | |
533 | %{_mandir}/man3/DIRECTORYSTRING_*.3* | |
534 | %{_mandir}/man3/DISPLAYTEXT_*.3* | |
535 | %{_mandir}/man3/DIST_POINT_*.3* | |
536 | %{_mandir}/man3/DSA_*.3* | |
537 | %{_mandir}/man3/DSAparams_*.3* | |
538 | %{_mandir}/man3/DTLS_*.3* | |
539 | %{_mandir}/man3/DTLSv1_*.3* | |
540 | %{_mandir}/man3/ECDH_*.3* | |
541 | %{_mandir}/man3/ECDSA_*.3* | |
542 | %{_mandir}/man3/ECPARAMETERS_*.3* | |
543 | %{_mandir}/man3/ECPKPARAMETERS_*.3* | |
544 | %{_mandir}/man3/ECPKParameters_*.3* | |
545 | %{_mandir}/man3/EC_*.3* | |
546 | %{_mandir}/man3/EDIPARTYNAME_*.3* | |
547 | %{_mandir}/man3/ENGINE_*.3* | |
548 | %{_mandir}/man3/ERR_*.3* | |
549 | %{_mandir}/man3/ESS_*.3* | |
550 | %{_mandir}/man3/EVP_*.3* | |
551 | %{_mandir}/man3/EXTENDED_KEY_USAGE_*.3* | |
552 | %{_mandir}/man3/GENERAL_*.3* | |
553 | %{_mandir}/man3/GEN_SESSION_CB.3* | |
554 | %{_mandir}/man3/HMAC*.3* | |
555 | %{_mandir}/man3/IMPLEMENT_*.3* | |
556 | %{_mandir}/man3/IPAddress*.3* | |
557 | %{_mandir}/man3/ISSUING_DIST_POINT_*.3* | |
c4c6d146 | 558 | %{_mandir}/man3/LHASH*.3* |
1c6e2c73 JB |
559 | %{_mandir}/man3/MD2*.3* |
560 | %{_mandir}/man3/MD4*.3* | |
561 | %{_mandir}/man3/MD5*.3* | |
562 | %{_mandir}/man3/MDC2*.3* | |
563 | %{_mandir}/man3/NAME_CONSTRAINTS_*.3* | |
c4c6d146 | 564 | %{_mandir}/man3/NAMING_AUTHORITY*.3* |
1c6e2c73 JB |
565 | %{_mandir}/man3/NETSCAPE_*.3* |
566 | %{_mandir}/man3/NOTICEREF_*.3* | |
567 | %{_mandir}/man3/OBJ_*.3* | |
568 | %{_mandir}/man3/OCSP_*.3* | |
569 | %{_mandir}/man3/OPENSSL_*.3* | |
c4c6d146 | 570 | %{_mandir}/man3/OSSL*.3* |
1c6e2c73 JB |
571 | %{_mandir}/man3/OTHERNAME_*.3* |
572 | %{_mandir}/man3/OpenSSL_*.3* | |
573 | %{_mandir}/man3/PBE2PARAM_*.3* | |
574 | %{_mandir}/man3/PBEPARAM_*.3* | |
575 | %{_mandir}/man3/PBKDF2PARAM_*.3* | |
576 | %{_mandir}/man3/PEM_*.3* | |
577 | %{_mandir}/man3/PKCS12_*.3* | |
578 | %{_mandir}/man3/PKCS5_*.3* | |
579 | %{_mandir}/man3/PKCS7_*.3* | |
580 | %{_mandir}/man3/PKCS8_*.3* | |
581 | %{_mandir}/man3/PKEY_*.3* | |
582 | %{_mandir}/man3/POLICYINFO_*.3* | |
583 | %{_mandir}/man3/POLICYQUALINFO_*.3* | |
584 | %{_mandir}/man3/POLICY_*.3* | |
c4c6d146 | 585 | %{_mandir}/man3/PROFESSION_INFO*.3* |
1c6e2c73 JB |
586 | %{_mandir}/man3/PROXY_*.3* |
587 | %{_mandir}/man3/RAND_*.3* | |
588 | %{_mandir}/man3/RC4*.3* | |
589 | %{_mandir}/man3/RIPEMD160*.3* | |
590 | %{_mandir}/man3/RSAPrivateKey_*.3* | |
591 | %{_mandir}/man3/RSAPublicKey_*.3* | |
592 | %{_mandir}/man3/RSA_*.3* | |
c4c6d146 | 593 | %{_mandir}/man3/SCRYPT_PARAMS*.3* |
1c6e2c73 JB |
594 | %{_mandir}/man3/SCT_*.3* |
595 | %{_mandir}/man3/SHA1*.3* | |
596 | %{_mandir}/man3/SHA224*.3* | |
597 | %{_mandir}/man3/SHA256*.3* | |
598 | %{_mandir}/man3/SHA384*.3* | |
599 | %{_mandir}/man3/SHA512*.3* | |
600 | %{_mandir}/man3/SMIME_*.3* | |
601 | %{_mandir}/man3/SSL_*.3* | |
602 | %{_mandir}/man3/SSLv23_*.3* | |
603 | %{_mandir}/man3/SSLv3_*.3* | |
604 | %{_mandir}/man3/SXNET_*.3* | |
605 | %{_mandir}/man3/SXNETID_*.3* | |
606 | %{_mandir}/man3/TLS_*.3* | |
607 | %{_mandir}/man3/TLSv1_*.3* | |
608 | %{_mandir}/man3/TS_*.3* | |
609 | %{_mandir}/man3/UI*.3* | |
610 | %{_mandir}/man3/USERNOTICE_*.3* | |
611 | %{_mandir}/man3/X509_*.3* | |
612 | %{_mandir}/man3/X509V3_*.3* | |
613 | %{_mandir}/man3/X509v3_*.3* | |
1c6e2c73 JB |
614 | %{_mandir}/man3/custom_ext_*.3* |
615 | %{_mandir}/man3/d2i_*.3* | |
616 | %{_mandir}/man3/i2d_*.3* | |
617 | %{_mandir}/man3/i2o_*.3* | |
618 | %{_mandir}/man3/i2t_*.3* | |
619 | %{_mandir}/man3/lh_TYPE_*.3* | |
620 | %{_mandir}/man3/o2i_*.3* | |
621 | %{_mandir}/man3/pem_password_cb.3* | |
622 | %{_mandir}/man3/sk_TYPE_*.3* | |
623 | %{_mandir}/man3/ssl_ct_validation_cb.3* | |
c4c6d146 | 624 | %{_mandir}/man7/openssl.7* |
1c6e2c73 JB |
625 | %{_mandir}/man7/openssl-bio.7* |
626 | %{_mandir}/man7/openssl-crypto.7* | |
627 | %{_mandir}/man7/openssl-ct.7* | |
628 | %{_mandir}/man7/openssl-des_modes.7* | |
c4c6d146 AM |
629 | %{_mandir}/man7/openssl-Ed25519.7* |
630 | %{_mandir}/man7/openssl-Ed448.7* | |
1c6e2c73 | 631 | %{_mandir}/man7/openssl-evp.7* |
c4c6d146 AM |
632 | %{_mandir}/man7/openssl-passphrase-encoding.7* |
633 | %{_mandir}/man7/openssl-RAND.7* | |
634 | %{_mandir}/man7/openssl-RAND_DRBG.7* | |
635 | %{_mandir}/man7/openssl-scrypt.7* | |
636 | %{_mandir}/man7/openssl-SM2.7* | |
1c6e2c73 | 637 | %{_mandir}/man7/openssl-ssl.7* |
c4c6d146 AM |
638 | %{_mandir}/man7/openssl-X25519.7* |
639 | %{_mandir}/man7/openssl-X448.7* | |
1c6e2c73 | 640 | %{_mandir}/man7/openssl-x509.7* |
c4c6d146 AM |
641 | %{_mandir}/man7/ossl_store.7* |
642 | %{_mandir}/man7/ossl_store-file.7* | |
643 | %{_mandir}/man7/RSA-PSS.7.gz | |
faddd309 AF |
644 | |
645 | %files static | |
646 | %defattr(644,root,root,755) | |
7250cee4 JB |
647 | %{_libdir}/libcrypto.a |
648 | %{_libdir}/libssl.a |