]>
git.pld-linux.org Git - packages/openssl.git/log
Elan Ruusamäe [Sun, 2 Sep 2012 10:02:02 +0000 (13:02 +0300)]
trigger improvements
- require ca-certificates with updated paths
- do nothing on downgrade
- try harder to remove outdated empty dirs
Elan Ruusamäe [Sun, 2 Sep 2012 09:46:08 +0000 (12:46 +0300)]
migrate to new structure used on HEAD: /var/lib/openssl -> /etc/openssl
Elan Ruusamäe [Sat, 5 Nov 2011 23:19:52 +0000 (23:19 +0000)]
- files fix
Changed files:
openssl.spec -> 1.146.2.3.2.15
Elan Ruusamäe [Sat, 5 Nov 2011 23:11:40 +0000 (23:11 +0000)]
- switch ca-bundle to ca-certificates one; rel 5
Changed files:
openssl-globalCA.diff -> 1.1.4.1
openssl.spec -> 1.146.2.3.2.14
Elan Ruusamäe [Tue, 14 Sep 2010 12:24:28 +0000 (12:24 +0000)]
- disable unfinishde pathc
Changed files:
openssl.spec -> 1.146.2.3.2.13
Elan Ruusamäe [Tue, 14 Sep 2010 12:03:18 +0000 (12:03 +0000)]
- rel 3: c_rehash.sh not to depend on which
Changed files:
openssl.spec -> 1.146.2.3.2.12
cvs2git [Thu, 8 Jul 2010 14:06:42 +0000 (14:06 +0000)]
This commit was manufactured by cvs2git to create branch 'AC-branch'.
Cherrypick from master 2010-07-08 14:06:42 UTC Elan Ruusamäe <glen@pld-linux.org> '- hardcode openssl path (make which dependency optional)':
openssl-c_rehash.sh -> 1.7
openssl-ca-certificates.patch -> 1.1
Cherrypick from master 2007-08-24 20:14:13 UTC Adam Gołębiowski <adamg@pld-linux.org> '- new':
openssl-CVE-2007-3108.patch -> 1.1
Elan Ruusamäe [Tue, 25 May 2010 15:03:56 +0000 (15:03 +0000)]
- add cve-2007-5135, cve-2008-5077, cve-2009-2409, cve-2009-3555 fixes from rhel
- cve-2009-3555 needs more work
Changed files:
openssl-0.9.7a-cve-2008-5077.patch -> 1.1.2.1
openssl-0.9.7a-cve-2009-2409.patch -> 1.1.2.1
openssl-0.9.7a-cve-2009-3555.patch -> 1.1.2.1
openssl-0.9.8b-cve-2007-5135.patch -> 1.1.2.1
openssl.spec -> 1.146.2.3.2.11
Elan Ruusamäe [Tue, 25 May 2010 14:31:04 +0000 (14:31 +0000)]
- utf8
Changed files:
openssl.spec -> 1.146.2.3.2.10
Elan Ruusamäe [Tue, 18 May 2010 10:19:19 +0000 (10:19 +0000)]
- for ac
Changed files:
openssl-c_rehash.patch -> 1.1.2.1
Elan Ruusamäe [Sat, 8 May 2010 22:58:13 +0000 (22:58 +0000)]
- add shell version of c_rehash; rel 2
Changed files:
openssl.spec -> 1.146.2.3.2.9
Arkadiusz Miśkiewicz [Tue, 16 Oct 2007 08:17:07 +0000 (08:17 +0000)]
- up to 0.9.7m
Changed files:
openssl.spec -> 1.146.2.3.2.8
Arkadiusz Miśkiewicz [Tue, 16 Oct 2007 08:16:58 +0000 (08:16 +0000)]
- updated
Changed files:
openssl-optflags.patch -> 1.14.2.1
Adam Gołębiowski [Fri, 24 Aug 2007 20:27:02 +0000 (20:27 +0000)]
- fix for CVE-2007-3108
- release 3
Changed files:
openssl.spec -> 1.146.2.3.2.7
Elan Ruusamäe [Mon, 23 Apr 2007 23:28:10 +0000 (23:28 +0000)]
- put c_rehash to bindir (for ca-certificates); rel 2
Changed files:
openssl.spec -> 1.146.2.3.2.6
Jakub Bogusz [Tue, 3 Oct 2006 09:17:54 +0000 (09:17 +0000)]
- merged too much, fixed
Changed files:
openssl.spec -> 1.146.2.3.2.5
Jakub Bogusz [Tue, 3 Oct 2006 09:16:01 +0000 (09:16 +0000)]
- unified, typo in changelog
Changed files:
openssl.spec -> 1.146.2.3.2.4
Sławomir Paszkiewicz [Sun, 1 Oct 2006 09:38:53 +0000 (09:38 +0000)]
- updated to 0.9.7l (fixes CVS-2006-{2940,2937,3738,4343})
- STBR
Changed files:
openssl.spec -> 1.146.2.3.2.3
hawk [Fri, 8 Sep 2006 07:59:32 +0000 (07:59 +0000)]
- add CVE note to changelog
Changed files:
openssl.spec -> 1.146.2.3.2.2
hawk [Fri, 8 Sep 2006 07:57:46 +0000 (07:57 +0000)]
- can't wait any longer... AC-branch restored to proper place, updated
to 0.9.7k
Changed files:
openssl.spec -> 1.146.2.3.2.1
cvs2git [Fri, 14 Jul 2006 20:02:17 +0000 (20:02 +0000)]
This commit was manufactured by cvs2git to create branch 'AC-branch'.
Sprout from master 2005-10-12 11:17:29 UTC havner <havner@pld-linux.org> '- updated for openssl 0.9.7h'
Cherrypick from master 2006-07-14 20:02:17 UTC sparky <sparky@pld-linux.org> '-- fix lib vs lib64, can be chosen in ./configure':
openssl-ca-bundle.crt -> 1.2
openssl-libvar.patch -> 1.1
Cherrypick from unlabeled-1.146.2 2006-06-13 10:23:22 UTC Jacek Konieczny <jajcus@pld-linux.org> '- 'purify' bcond added':
openssl.spec -> 1.146.2.3
Delete:
openssl-0.9.6c-security.patch
openssl-docs-update.patch
openssl-sec3.patch
openssl-security2.patch
havner [Wed, 12 Oct 2005 11:17:29 +0000 (11:17 +0000)]
- updated for openssl 0.9.7h
Changed files:
openssl-optflags.patch -> 1.14
havner [Wed, 12 Oct 2005 11:15:42 +0000 (11:15 +0000)]
- 0.9.7h
Changed files:
openssl.spec -> 1.142
Arkadiusz Miśkiewicz [Sat, 27 Aug 2005 14:37:04 +0000 (14:37 +0000)]
- rel 3
Changed files:
openssl.spec -> 1.141
Jakub Bogusz [Sun, 24 Jul 2005 16:36:14 +0000 (16:36 +0000)]
- fix libdir in *.pc, release 2
Changed files:
openssl.spec -> 1.140
Jakub Bogusz [Wed, 11 May 2005 15:27:01 +0000 (15:27 +0000)]
- use x8664 macro
Changed files:
openssl.spec -> 1.139
Paweł Sikora [Wed, 11 May 2005 02:48:14 +0000 (02:48 +0000)]
- exclude invalid libfips.so symlink from %%files.
Changed files:
openssl.spec -> 1.138
Jakub Bogusz [Fri, 15 Apr 2005 22:08:33 +0000 (22:08 +0000)]
- updated to 0.9.7g
Changed files:
openssl.spec -> 1.137
Jakub Bogusz [Thu, 24 Mar 2005 19:53:04 +0000 (19:53 +0000)]
- updated to 0.9.7f, updated optflags patch
Changed files:
openssl.spec -> 1.136
Jakub Bogusz [Thu, 24 Mar 2005 19:52:23 +0000 (19:52 +0000)]
- updated for 0.9.7f
Changed files:
openssl-optflags.patch -> 1.13
Mariusz Mazur [Mon, 21 Mar 2005 18:28:44 +0000 (18:28 +0000)]
- rel 3 for th
Changed files:
openssl.spec -> 1.135
speedy [Wed, 2 Feb 2005 09:22:51 +0000 (09:22 +0000)]
- redefine SSLeay_add_ssl_algorithms
- fix sparc64-linux optflags
- fix sparc64 md5
- release 2
Changed files:
openssl.spec -> 1.134
speedy [Wed, 2 Feb 2005 09:21:09 +0000 (09:21 +0000)]
- SSLeay_add_ssl_algorithms
Changed files:
openssl-ssl-algs.patch -> 1.1
speedy [Wed, 2 Feb 2005 09:19:38 +0000 (09:19 +0000)]
- sparc64 fix
Changed files:
openssl-md5-sparcv9.patch -> 1.1
speedy [Wed, 2 Feb 2005 09:18:54 +0000 (09:18 +0000)]
- sparc64-linux fix
Changed files:
openssl-optflags.patch -> 1.12
Jakub Bogusz [Sat, 20 Nov 2004 21:16:02 +0000 (21:16 +0000)]
- hack to fix build on i386
- use default x86 code on i486 (only i386 is exceptional)
Changed files:
openssl.spec -> 1.133
darekr [Wed, 27 Oct 2004 17:45:41 +0000 (17:45 +0000)]
- added missing file openssl_fips_fingerprint
Changed files:
openssl.spec -> 1.132
Jakub Bogusz [Tue, 26 Oct 2004 18:32:48 +0000 (18:32 +0000)]
- updated to 0.9.7e, updated optflags,include patches, removed obsolete smime patch
Changed files:
openssl.spec -> 1.131
Jakub Bogusz [Tue, 26 Oct 2004 17:21:28 +0000 (17:21 +0000)]
- obsolete (already in sources)
Changed files:
openssl-smime.patch -> 1.2
Jakub Bogusz [Tue, 26 Oct 2004 17:19:32 +0000 (17:19 +0000)]
- updated for 0.9.7e
Changed files:
openssl-include.patch -> 1.2
openssl-optflags.patch -> 1.11
Mariusz Mazur [Wed, 13 Oct 2004 10:51:16 +0000 (10:51 +0000)]
- rel 6 for th
Changed files:
openssl.spec -> 1.130
snurf [Thu, 2 Sep 2004 14:36:07 +0000 (14:36 +0000)]
- typos / formatting / etc.
Changed files:
openssl.spec -> 1.129
Jakub Bogusz [Tue, 13 Jul 2004 19:41:35 +0000 (19:41 +0000)]
- added ia64, sorted archs
Changed files:
openssl.spec -> 1.128
Paweł Sikora [Thu, 24 Jun 2004 00:17:27 +0000 (00:17 +0000)]
- %%install: %%{__cc} added.
Changed files:
openssl.spec -> 1.127
Paweł Sikora [Wed, 23 Jun 2004 23:51:49 +0000 (23:51 +0000)]
- more sparc targets.
Changed files:
openssl.spec -> 1.126
ankry [Fri, 4 Jun 2004 14:04:14 +0000 (14:04 +0000)]
- rebuild, rel. 5
Changed files:
openssl.spec -> 1.125
aflinta [Fri, 4 Jun 2004 10:45:34 +0000 (10:45 +0000)]
- release 4 - sparc edition upgrade ;)
Changed files:
openssl.spec -> 1.124
Jakub Bogusz [Tue, 1 Jun 2004 20:03:39 +0000 (20:03 +0000)]
- added smime patch ("make S/MIME encrypt work again"); release 3
Changed files:
openssl.spec -> 1.123
Jakub Bogusz [Tue, 1 Jun 2004 20:00:26 +0000 (20:00 +0000)]
- bugfix from openssl CVS
Changed files:
openssl-smime.patch -> 1.1
ankry [Sun, 9 May 2004 05:22:00 +0000 (05:22 +0000)]
- BR fixes, rel. 2
Changed files:
openssl.spec -> 1.122
Jakub Bogusz [Wed, 17 Mar 2004 17:35:27 +0000 (17:35 +0000)]
- security update to 0.9.7d (fixes CAN-2004-0079, CAN-2004-0112)
- removed obsolete makefile,parallel_make patches
Changed files:
openssl.spec -> 1.121
Jakub Bogusz [Wed, 17 Mar 2004 17:22:13 +0000 (17:22 +0000)]
- obsolete (fixed in 0.9.7d)
Changed files:
openssl-makefile.patch -> 1.2
openssl-parallel_make.patch -> 1.2
adgor [Sun, 14 Mar 2004 15:27:48 +0000 (15:27 +0000)]
- Typo
Changed files:
openssl.spec -> 1.120
Tomasz Pala [Sun, 14 Mar 2004 13:23:53 +0000 (13:23 +0000)]
- moved %dir %{_var}/lib/%{name}/{,certs,private} to the main package;
there are programs (like proftpd) which take certificates from that
directory, but they don't require openssl-tools,
- release 4.
Changed files:
openssl.spec -> 1.119
Jakub Bogusz [Sat, 28 Feb 2004 21:41:12 +0000 (21:41 +0000)]
- strict internal deps, removed redundant BR textutils
- simplified grep -r | cut -> grep -l -r
Changed files:
openssl.spec -> 1.118
saq [Sat, 28 Feb 2004 17:20:27 +0000 (17:20 +0000)]
- a minor speed-up (invoke perl -pi -e once for many files)
- generalized the ix86 architecture condition
Changed files:
openssl.spec -> 1.117
Andrzej Augustynowicz [Sat, 28 Feb 2004 16:55:17 +0000 (16:55 +0000)]
- allow build on pentium3 (ifarch)
Changed files:
openssl.spec -> 1.116
Paweł Gołaszewski [Thu, 8 Jan 2004 10:35:32 +0000 (10:35 +0000)]
- fixed comment
Changed files:
openssl-ssl-certificate.sh -> 1.2
Jakub Bogusz [Thu, 8 Jan 2004 10:05:45 +0000 (10:05 +0000)]
- well, one ifarch for one arch is enough...
Changed files:
openssl.spec -> 1.115
Paweł Gołaszewski [Thu, 8 Jan 2004 09:54:41 +0000 (09:54 +0000)]
- release 3 - added script for creating selfsigned certs, taken from debian
Changed files:
openssl.spec -> 1.114
Paweł Gołaszewski [Thu, 8 Jan 2004 09:50:49 +0000 (09:50 +0000)]
- script for creating selfsigned certs. Taken from debian (rewritten)
Changed files:
openssl-ssl-certificate.sh -> 1.1
Jacek Konieczny [Fri, 2 Jan 2004 17:49:49 +0000 (17:49 +0000)]
- Release: 2 (STBR after AMD64 fixes)
Changed files:
openssl.spec -> 1.113
Jacek Konieczny [Thu, 18 Dec 2003 22:46:47 +0000 (22:46 +0000)]
- put pkgconfig file in the right directory on amd64
Changed files:
openssl.spec -> 1.112
adasi [Tue, 18 Nov 2003 16:59:03 +0000 (16:59 +0000)]
- x86_64 arch support
Changed files:
openssl.spec -> 1.111
Jakub Bogusz [Thu, 6 Nov 2003 12:42:16 +0000 (12:42 +0000)]
- document the silent change in 0.9.6k (and probably 0.9.7d)
Changed files:
openssl-docs-update.patch -> 1.1
Jakub Bogusz [Mon, 20 Oct 2003 19:00:28 +0000 (19:00 +0000)]
- use _pkgconfigdir macro
Changed files:
openssl.spec -> 1.110
Jakub Bogusz [Wed, 1 Oct 2003 08:41:23 +0000 (08:41 +0000)]
- cosmetics
Changed files:
openssl.spec -> 1.109
pius [Tue, 30 Sep 2003 21:27:58 +0000 (21:27 +0000)]
- added openssl-makefile.patch
Changed files:
openssl.spec -> 1.108
pius [Tue, 30 Sep 2003 21:25:09 +0000 (21:25 +0000)]
- fixed setting wrong permissions
Changed files:
openssl-makefile.patch -> 1.1
Paweł Gołaszewski [Tue, 30 Sep 2003 19:38:10 +0000 (19:38 +0000)]
- md5 fix & cosmetics
Changed files:
openssl.spec -> 1.107
eothane [Tue, 30 Sep 2003 19:32:17 +0000 (19:32 +0000)]
- openssl 0.9.7c
- next release
Changed files:
openssl.spec -> 1.106
Mariusz Mazur [Sun, 24 Aug 2003 23:51:24 +0000 (23:51 +0000)]
- rel 1 for ac
Changed files:
openssl.spec -> 1.105
Marcin Krzyżanowski [Wed, 20 Aug 2003 19:20:22 +0000 (19:20 +0000)]
- make with set INSTALLTOP
- include.patch
- rel 0.3
Changed files:
openssl.spec -> 1.104
Marcin Krzyżanowski [Wed, 20 Aug 2003 19:19:09 +0000 (19:19 +0000)]
- fix include path to /usr/include/openssl
Changed files:
openssl-include.patch -> 1.1
ankry [Tue, 12 Aug 2003 22:32:51 +0000 (22:32 +0000)]
- cosmetics
Changed files:
openssl.spec -> 1.103
Michal Moskal [Sun, 25 May 2003 11:00:56 +0000 (11:00 +0000)]
- massive attack, adding Source-md5
Changed files:
openssl.spec -> 1.102
misi3k [Sun, 25 May 2003 06:24:32 +0000 (06:24 +0000)]
- massive attack s/pld.org.pl/pld-linux.org/
Changed files:
openssl.spec -> 1.101
radek [Thu, 24 Apr 2003 13:50:19 +0000 (13:50 +0000)]
- removed BR:perl-tools-pod, it's implied by perl-devel
Changed files:
openssl.spec -> 1.100
Jakub Bogusz [Tue, 15 Apr 2003 21:44:01 +0000 (21:44 +0000)]
- fixed broken entries in optflags patch, release 0.2
Changed files:
openssl-optflags.patch -> 1.10
openssl.spec -> 1.99
misi3k [Sat, 12 Apr 2003 10:23:19 +0000 (10:23 +0000)]
- updated to 0.9.7b
- removed patch 4 & 5 (not needed)
- rel 0.1
Note: Test me
Changed files:
openssl.spec -> 1.98
misi3k [Sat, 12 Apr 2003 10:04:31 +0000 (10:04 +0000)]
- updated to work with 0.9.7b, fix
Changed files:
openssl-optflags.patch -> 1.9
misi3k [Sat, 12 Apr 2003 10:00:52 +0000 (10:00 +0000)]
- updated to work with 0.9.7b
Changed files:
openssl-optflags.patch -> 1.8
djrzulf [Thu, 20 Mar 2003 09:59:34 +0000 (09:59 +0000)]
- added BR: perl-tools-pod
Changed files:
openssl.spec -> 1.97
misi3k [Thu, 20 Mar 2003 09:09:52 +0000 (09:09 +0000)]
- security patch (no 5) - CAN-2003-0131 (Klima-Pokorny-Rosa attack on RSA in SSL/TLS)
Changed files:
openssl.spec -> 1.96
misi3k [Thu, 20 Mar 2003 09:07:39 +0000 (09:07 +0000)]
- Attacking RSA-based Sessions in SSL/TLS (CAN-2003-0131)
Changed files:
openssl-security2.patch -> 1.1
misi3k [Mon, 17 Mar 2003 19:01:36 +0000 (19:01 +0000)]
- rel 1
Changed files:
openssl.spec -> 1.95
misi3k [Mon, 17 Mar 2003 18:44:20 +0000 (18:44 +0000)]
- secuirty patch
Bug (bugtraq):
Researchers have discovered a timing attack on RSA keys, to which
OpenSSL is generally vulnerable, unless RSA blinding has been turned
on.
Typically, it will not have been, because it is not easily possible to
do so when using OpenSSL to provide SSL or TLS.
The enclosed patch switches blinding on by default. Applications that
wish to can remove the blinding with RSA_blinding_off(), but this is
not generally advised. It is also possible to disable it completely by
defining OPENSSL_NO_FORCE_RSA_BLINDING at compile-time.
The performance impact of blinding appears to be small (a few
percent).
This problem affects many applications using OpenSSL, in particular,
almost all SSL-enabled Apaches. You should rebuild and reinstall
OpenSSL, and all affected applications.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has
assigned the name CAN-2003-0147 to this issue.
We strongly advise upgrading OpenSSL in all cases, as a precaution.
Changed files:
openssl-sec3.patch -> 1.1
misi3k [Mon, 17 Mar 2003 18:43:02 +0000 (18:43 +0000)]
- secuirty patch (patch4)
Bug (bugtraq):
Researchers have discovered a timing attack on RSA keys, to which
OpenSSL is generally vulnerable, unless RSA blinding has been turned
on.
Typically, it will not have been, because it is not easily possible to
do so when using OpenSSL to provide SSL or TLS.
The enclosed patch switches blinding on by default. Applications that
wish to can remove the blinding with RSA_blinding_off(), but this is
not generally advised. It is also possible to disable it completely by
defining OPENSSL_NO_FORCE_RSA_BLINDING at compile-time.
The performance impact of blinding appears to be small (a few
percent).
This problem affects many applications using OpenSSL, in particular,
almost all SSL-enabled Apaches. You should rebuild and reinstall
OpenSSL, and all affected applications.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has
assigned the name CAN-2003-0147 to this issue.
We strongly advise upgrading OpenSSL in all cases, as a precaution.
Changed files:
openssl.spec -> 1.94
trojan [Mon, 3 Mar 2003 08:52:07 +0000 (08:52 +0000)]
- s/#%{/#%%{/
Changed files:
openssl.spec -> 1.93
radek [Sun, 2 Mar 2003 21:36:53 +0000 (21:36 +0000)]
- use the __perl macro
Changed files:
openssl.spec -> 1.92
Jakub Bogusz [Thu, 20 Feb 2003 09:39:47 +0000 (09:39 +0000)]
- one more update - don't disable shared library on mips/mipsel
Changed files:
openssl-optflags.patch -> 1.7
misi3k [Wed, 19 Feb 2003 20:53:56 +0000 (20:53 +0000)]
- updated to work with 0.9.7a
Changed files:
openssl-optflags.patch -> 1.6
misi3k [Wed, 19 Feb 2003 20:51:11 +0000 (20:51 +0000)]
- updated to 0.9.7a
Changed files:
openssl.spec -> 1.91
juandon [Sun, 16 Feb 2003 20:14:57 +0000 (20:14 +0000)]
- added parallel_make patch
Changed files:
openssl.spec -> 1.90
juandon [Sun, 16 Feb 2003 20:14:08 +0000 (20:14 +0000)]
- parallel build is now possible
Changed files:
openssl-parallel_make.patch -> 1.1
Mariusz Mazur [Thu, 30 Jan 2003 23:30:24 +0000 (23:30 +0000)]
- added URL
Changed files:
openssl.spec -> 1.89
Tomek Orzechowski [Sun, 5 Jan 2003 23:49:49 +0000 (23:49 +0000)]
- upgrade seems finished
- release 0.9 - testing needed
Changed files:
openssl.spec -> 1.88
Tomek Orzechowski [Sun, 5 Jan 2003 21:30:14 +0000 (21:30 +0000)]
- up to 0.9.7
Changed files:
openssl.spec -> 1.87
Tomek Orzechowski [Sun, 5 Jan 2003 21:28:47 +0000 (21:28 +0000)]
- fixes for 0.9.7
Changed files:
openssl-alpha-ccc.patch -> 1.4
openssl-optflags.patch -> 1.5
Tomasz Pala [Tue, 31 Dec 2002 11:16:21 +0000 (11:16 +0000)]
- cut off Vendor, cosmetics
Changed files:
openssl.spec -> 1.86
This page took 0.073595 seconds and 4 git commands to generate.