From e25b7e90fb9b99f1db74ac040b2866d8b4c1c142 Mon Sep 17 00:00:00 2001 From: Mikhail Novosyolov Date: Wed, 5 Aug 2020 13:14:26 +0300 Subject: [PATCH] Adapt %%check for renamed curves 0009-Add-support-for-additional-GOST-curves.patch intentionally renamed curves to follow TK26's list of OIDs https://tc26.ru/about/protsedury-i-reglamenty/identifikatory-obektov-oid-tekhnicheskogo-komiteta-po-standartizatsii-kriptograficheskaya-zashchita-1.html --- libressl.spec | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/libressl.spec b/libressl.spec index eacd55c..0a381a9 100644 --- a/libressl.spec +++ b/libressl.spec @@ -641,11 +641,11 @@ unset _gs_beg _gs_end _ls_beg _ls_end _gs_length _ls_length _pcf pkg-config --libs --cflags libressl-libcrypto %__cc -o test9 %{SOURCE29} $nflags export OPENSSL_CONF=%{buildroot}%{_openssldir}/libressl.cnf -$libressl ecparam -genkey -name id-tc26-gost-3410-2012-512-paramSetA -out priv.key -outform PEM +$libressl ecparam -genkey -name id-tc26-gost-3410-12-512-paramSetA -out priv.key -outform PEM $libressl req -batch -new -x509 -nodes -key priv.key -out pem1.pem \ -subj "/C=RU/ST=Russia/L=Oryol/O=Test/OU=Test CA/CN=Test CA Root" # Also possible to gen a new key and a certificate in one command: -# libressl req <...> -newkey ec -pkeyopt ec_paramgen_curve:id-tc26-gost-3410-2012-512-paramSetA +# libressl req <...> -newkey ec -pkeyopt ec_paramgen_curve:id-tc26-gost-3410-12-512-paramSetA # Signature Algorithm: ecdsa-with-SHA256 $libressl x509 -in pem1.pem -text -noout | grep -E 'Signature Algorithm:.*ecdsa-with-SHA256' $libressl req -new -nodes -utf8 -batch -x509 -newkey gost2001 \