mirror of
https://abf.rosa.ru/djam/openssl1.1.git
synced 2025-02-23 16:12:52 +00:00
to openssl1.1
This commit is contained in:
Mikhail Novosyolov
parent
2e9799dcab
commit
9da614efa7
6 changed files with 256 additions and 518 deletions
|
|
@ -1,74 +0,0 @@
|
|||
UTF8 := $(shell locale -c LC_CTYPE -k | grep -q charmap.*UTF-8 && echo -utf8)
|
||||
SERIAL=0
|
||||
|
||||
.PHONY: usage
|
||||
.SUFFIXES: .key .csr .crt .pem
|
||||
.PRECIOUS: %.key %.csr %.crt %.pem
|
||||
|
||||
usage:
|
||||
@echo "This makefile allows you to create:"
|
||||
@echo " o public/private key pairs"
|
||||
@echo " o SSL certificate signing requests (CSRs)"
|
||||
@echo " o self-signed SSL test certificates"
|
||||
@echo
|
||||
@echo "To create a key pair, run \"make SOMETHING.key\"."
|
||||
@echo "To create a CSR, run \"make SOMETHING.csr\"."
|
||||
@echo "To create a test certificate, run \"make SOMETHING.crt\"."
|
||||
@echo "To create a key and a test certificate in one file, run \"make SOMETHING.pem\"."
|
||||
@echo
|
||||
@echo "To create a key for use with Apache, run \"make genkey\"."
|
||||
@echo "To create a CSR for use with Apache, run \"make certreq\"."
|
||||
@echo "To create a test certificate for use with Apache, run \"make testcert\"."
|
||||
@echo
|
||||
@echo "To create a test certificate with serial number other than zero, add SERIAL=num"
|
||||
@echo
|
||||
@echo Examples:
|
||||
@echo " make server.key"
|
||||
@echo " make server.csr"
|
||||
@echo " make server.crt"
|
||||
@echo " make stunnel.pem"
|
||||
@echo " make genkey"
|
||||
@echo " make certreq"
|
||||
@echo " make testcert"
|
||||
@echo " make server.crt SERIAL=1"
|
||||
@echo " make stunnel.pem SERIAL=2"
|
||||
@echo " make testcert SERIAL=3"
|
||||
|
||||
%.pem:
|
||||
umask 77 ; \
|
||||
PEM1=`/bin/mktemp /tmp/openssl.XXXXXX` ; \
|
||||
PEM2=`/bin/mktemp /tmp/openssl.XXXXXX` ; \
|
||||
/usr/bin/openssl req $(UTF8) -newkey rsa:1024 -keyout $$PEM1 -nodes -x509 -days 365 -out $$PEM2 -set_serial $(SERIAL) ; \
|
||||
cat $$PEM1 > $@ ; \
|
||||
echo "" >> $@ ; \
|
||||
cat $$PEM2 >> $@ ; \
|
||||
$(RM) $$PEM1 $$PEM2
|
||||
|
||||
%.key:
|
||||
umask 77 ; \
|
||||
/usr/bin/openssl genrsa -des3 1024 > $@
|
||||
|
||||
%.csr: %.key
|
||||
umask 77 ; \
|
||||
/usr/bin/openssl req $(UTF8) -new -key $^ -out $@
|
||||
|
||||
%.crt: %.key
|
||||
umask 77 ; \
|
||||
/usr/bin/openssl req $(UTF8) -new -key $^ -x509 -days 365 -out $@ -set_serial $(SERIAL)
|
||||
|
||||
TLSROOT=/etc/pki/tls
|
||||
KEY=$(TLSROOT)/private/localhost.key
|
||||
CSR=$(TLSROOT)/certs/localhost.csr
|
||||
CRT=$(TLSROOT)/certs/localhost.crt
|
||||
|
||||
genkey: $(KEY)
|
||||
certreq: $(CSR)
|
||||
testcert: $(CRT)
|
||||
|
||||
$(CSR): $(KEY)
|
||||
umask 77 ; \
|
||||
/usr/bin/openssl req $(UTF8) -new -key $(KEY) -out $(CSR)
|
||||
|
||||
$(CRT): $(KEY)
|
||||
umask 77 ; \
|
||||
/usr/bin/openssl req $(UTF8) -new -key $(KEY) -x509 -days 365 -out $(CRT) -set_serial $(SERIAL)
|
||||
|
|
@ -1,40 +0,0 @@
|
|||
#!/bin/sh
|
||||
umask 077
|
||||
|
||||
answers()
|
||||
{
|
||||
echo --
|
||||
echo SomeState
|
||||
echo SomeCity
|
||||
echo SomeOrganization
|
||||
echo SomeOrganizationalUnit
|
||||
echo localhost.localdomain
|
||||
echo root@localhost.localdomain
|
||||
}
|
||||
|
||||
if [ $# -eq 0 ] ; then
|
||||
echo >&2 "Usage: ${0##*/} filename [...]"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
WORKDIR=
|
||||
exit_handler()
|
||||
{
|
||||
[ -z "$WORKDIR" ] || rm -rf "$WORKDIR"
|
||||
exit "$@"
|
||||
}
|
||||
|
||||
trap 'exit_handler $?' EXIT
|
||||
trap 'exit 143' HUP INT QUIT PIPE TERM
|
||||
WORKDIR="$(mktemp -dt "${0##*/}.XXXXXXXXXX")" || exit
|
||||
PEM1="$WORKDIR/pem1"
|
||||
PEM2="$WORKDIR/pem2"
|
||||
|
||||
for target; do
|
||||
answers |
|
||||
openssl req -newkey rsa:2048 -keyout "$PEM1" -nodes -x509 -days 365 -out "$PEM2" 2>/dev/null
|
||||
cat "$PEM1" > "$target"
|
||||
echo >> "$target"
|
||||
cat "$PEM2" >> "$target"
|
||||
rm -f "$PEM1" "$PEM2"
|
||||
done
|
||||
|
|
@ -1,68 +0,0 @@
|
|||
#!/bin/sh
|
||||
|
||||
# openssl-config
|
||||
# provides configuration info for openssl.
|
||||
|
||||
version="@VERSION@"
|
||||
openssldir="@OPENSSLDIR@"
|
||||
cppflags="@CPPFLAGS@"
|
||||
cflags="@CFLAGS@"
|
||||
ldflags="@LDFLAGS@"
|
||||
libs="-lcrypto -lssl"
|
||||
|
||||
usage()
|
||||
{
|
||||
cat <<EOF
|
||||
Usage: openssl-config [OPTION] ...
|
||||
|
||||
Known values for OPTION are:
|
||||
|
||||
--openssldir print OpenSSL directory
|
||||
--cflags print compiler flags
|
||||
--cppflags print pre-processor flags
|
||||
--ldflags print loader flags
|
||||
--libs print library linking information
|
||||
--help display this help and exit
|
||||
--version output version information
|
||||
EOF
|
||||
|
||||
exit $1
|
||||
}
|
||||
|
||||
if test $# -eq 0; then
|
||||
usage 1
|
||||
fi
|
||||
|
||||
while test $# -gt 0; do
|
||||
case "$1" in
|
||||
--openssldir)
|
||||
echo "${openssldir}"
|
||||
;;
|
||||
--cflags)
|
||||
echo "${cflags}"
|
||||
;;
|
||||
--cppflags)
|
||||
echo "${cppflags}"
|
||||
;;
|
||||
--libs)
|
||||
echo "${libs}"
|
||||
;;
|
||||
--ldflags)
|
||||
echo "${ldflags}"
|
||||
;;
|
||||
--version)
|
||||
echo "${version}"
|
||||
exit 0
|
||||
;;
|
||||
--help)
|
||||
usage 0
|
||||
;;
|
||||
*)
|
||||
usage
|
||||
exit 1
|
||||
;;
|
||||
esac
|
||||
shift
|
||||
done
|
||||
|
||||
exit 0
|
||||
336
openssl.spec
336
openssl.spec
|
|
@ -1,336 +0,0 @@
|
|||
%define major 1.1
|
||||
%define engines_name %mklibname openssl-engines %{major}
|
||||
%define libcrypto %mklibname crypto %{major}
|
||||
%define libssl %mklibname ssl %{major}
|
||||
%define devname %mklibname openssl -d
|
||||
%define staticname %mklibname openssl -s -d
|
||||
|
||||
# This directory is defined in /usr/bin/openssl-config and %%_rpmmacrodir/*openssl*
|
||||
# during the build.
|
||||
# The purpose is a system-wide definition of this directory
|
||||
# to guarantee consistency across the whole repository.
|
||||
%define _openssldir %{_sysconfdir}/pki/tls
|
||||
%define openssl_engines_dir %{_libdir}/engines-%{major}
|
||||
|
||||
%define _docs %{expand:
|
||||
%doc AUTHORS \
|
||||
%doc CHANGES \
|
||||
%doc LICENSE \
|
||||
%doc FAQ \
|
||||
%doc NEWS \
|
||||
%doc README \
|
||||
%doc README.ENGINE
|
||||
}
|
||||
|
||||
Summary: Secure Sockets Layer communications libs & utils
|
||||
Name: openssl
|
||||
Version: 1.1.1g
|
||||
Release: 4
|
||||
License: OpenSSL
|
||||
Group: System/Libraries
|
||||
Url: https://www.openssl.org
|
||||
Source0: ftp://ftp.openssl.org/source/%{name}-%{version}.tar.gz
|
||||
Source1: openssl.rpmlintrc
|
||||
Source2: Makefile.certificate
|
||||
Source3: make-dummy-cert
|
||||
Source4: openssl-thread-test.c
|
||||
Source5: openssl-config
|
||||
Patch1: openssl-alt-e2k-makecontext.patch
|
||||
BuildRequires: bc
|
||||
BuildRequires: sctp-devel
|
||||
BuildRequires: pkgconfig(zlib)
|
||||
# for %%check, ./test/run_tests.pl
|
||||
BuildRequires: perl-devel
|
||||
BuildRequires: perl-Module-Load-Conditional
|
||||
BuildRequires: perl(File::Spec::Functions)
|
||||
BuildRequires: perl(File::Basename)
|
||||
BuildRequires: perl(FindBin)
|
||||
BuildRequires: perl(Test::Harness)
|
||||
BuildRequires: perl(Test::More)
|
||||
BuildRequires: /usr/bin/pod2html
|
||||
BuildRequires: /usr/bin/pod2man
|
||||
Requires: %{engines_name} = %{EVRD}
|
||||
Requires: perl-base
|
||||
Requires: rootcerts
|
||||
Provides: openssl%{major} = %{EVRD}
|
||||
Provides: openssl-config = %{EVRD}
|
||||
|
||||
%description
|
||||
The openssl certificate management tool and the shared libraries that provide
|
||||
various encryption and decription algorithms and protocols, including DES, RC4,
|
||||
RSA and SSL.
|
||||
|
||||
%files
|
||||
%_docs
|
||||
%dir %{_sysconfdir}/pki
|
||||
%dir %{_sysconfdir}/pki/CA
|
||||
%dir %{_sysconfdir}/pki/CA/private
|
||||
%dir %{_openssldir}
|
||||
%dir %{_openssldir}/certs
|
||||
%dir %{_openssldir}/misc
|
||||
%dir %{_openssldir}/private
|
||||
%dir %{_openssldir}/rootcerts
|
||||
%attr(0644,root,root) %config(noreplace) %{_openssldir}/openssl.cnf
|
||||
%attr(0644,root,root) %config(noreplace) %{_openssldir}/ct_log_list.cnf
|
||||
%attr(0755,root,root) %{_openssldir}/certs/make-dummy-cert
|
||||
%attr(0644,root,root) %{_openssldir}/certs/Makefile
|
||||
%attr(0755,root,root) %{_openssldir}/misc/*
|
||||
%attr(0755,root,root) %{_bindir}/*
|
||||
%attr(0644,root,root) %{_mandir}/man[157]/*
|
||||
%{_defaultdocdir}/openssl/html/man[157]
|
||||
|
||||
#----------------------------------------------------------------------------
|
||||
|
||||
%package -n %{engines_name}
|
||||
Summary: Engines for openssl
|
||||
Group: System/Libraries
|
||||
Provides: openssl-engines = %{EVRD}
|
||||
|
||||
%description -n %{engines_name}
|
||||
This package provides engines for openssl.
|
||||
|
||||
%files -n %{engines_name}
|
||||
%_docs
|
||||
%attr(0755,root,root) %dir %{openssl_engines_dir}/
|
||||
%attr(0755,root,root) %{openssl_engines_dir}/*.so
|
||||
|
||||
#----------------------------------------------------------------------------
|
||||
|
||||
%package -n %{libcrypto}
|
||||
Summary: Secure Sockets Layer communications libs
|
||||
Group: System/Libraries
|
||||
Requires: %{libssl} = %{EVRD}
|
||||
|
||||
%description -n %{libcrypto}
|
||||
The libraries files are needed for various cryptographic algorithms
|
||||
and protocols, including DES, RC4, RSA and SSL.
|
||||
|
||||
%files -n %{libcrypto}
|
||||
%_docs
|
||||
%{_libdir}/libcrypto.so.%{major}*
|
||||
|
||||
#----------------------------------------------------------------------------
|
||||
|
||||
%package -n %{libssl}
|
||||
Summary: Secure Sockets Layer communications libs
|
||||
Group: System/Libraries
|
||||
|
||||
%description -n %{libssl}
|
||||
The libraries files are needed for various cryptographic algorithms
|
||||
and protocols, including DES, RC4, RSA and SSL.
|
||||
|
||||
%files -n %{libssl}
|
||||
%_docs
|
||||
%{_libdir}/libssl.so.%{major}*
|
||||
|
||||
#----------------------------------------------------------------------------
|
||||
|
||||
%package -n %{devname}
|
||||
Summary: Secure Sockets Layer communications libs & headers & utils
|
||||
Group: Development/Other
|
||||
Requires: %{libssl} = %{EVRD}
|
||||
Requires: %{libcrypto} = %{EVRD}
|
||||
Provides: libopenssl-devel = %{EVRD}
|
||||
Provides: %{name}-devel = %{EVRD}
|
||||
|
||||
%description -n %{devname}
|
||||
The libraries and include files needed to compile apps with support
|
||||
for various cryptographic algorithms and protocols, including DES, RC4, RSA
|
||||
and SSL.
|
||||
|
||||
%files -n %{devname}
|
||||
%_docs
|
||||
%dir %{_includedir}/openssl
|
||||
%{_includedir}/openssl/*
|
||||
%{_libdir}/libcrypto.so
|
||||
%{_libdir}/libssl.so
|
||||
%{_mandir}/man3/*
|
||||
%{_defaultdocdir}/openssl/html/man3
|
||||
%{_libdir}/pkgconfig/*
|
||||
%{_rpmmacrodir}/*openssl*
|
||||
|
||||
#----------------------------------------------------------------------------
|
||||
|
||||
%package -n %{staticname}
|
||||
Summary: Secure Sockets Layer communications static libs
|
||||
Group: Development/Other
|
||||
Requires: %{devname} = %{EVRD}
|
||||
Provides: libopenssl-static-devel = %{EVRD}
|
||||
Provides: %{name}-static-devel = %{EVRD}
|
||||
|
||||
%description -n %{staticname}
|
||||
The static libraries needed to compile apps with support for various
|
||||
cryptographic algorithms and protocols, including DES, RC4, RSA and SSL.
|
||||
|
||||
%files -n %{staticname}
|
||||
%_docs
|
||||
%attr(0644,root,root) %{_libdir}/lib*.a
|
||||
|
||||
#----------------------------------------------------------------------------
|
||||
|
||||
%prep
|
||||
%autosetup -p1
|
||||
|
||||
cp %{SOURCE2} Makefile.certificate
|
||||
cp %{SOURCE3} make-dummy-cert
|
||||
cp %{SOURCE4} openssl-thread-test.c
|
||||
|
||||
%build
|
||||
%serverbuild
|
||||
|
||||
# Figure out which flags we want to use.
|
||||
# default
|
||||
sslarch=%{_os}-%{_arch}
|
||||
%ifarch %{ix86}
|
||||
sslarch=linux-elf
|
||||
if ! echo %{_target} | grep -q i[56]86 ; then
|
||||
sslflags="no-asm"
|
||||
fi
|
||||
%endif
|
||||
%ifarch %{arm}
|
||||
sslarch=linux-generic32
|
||||
%endif
|
||||
# from ALT
|
||||
%ifarch riscv64 %{e2k}
|
||||
sslarch=linux-generic64
|
||||
%endif
|
||||
|
||||
# ia64, x86_64, ppc, ppc64 are OK by default
|
||||
# Configure the build tree. Override OpenSSL defaults with known-good defaults
|
||||
# usable on all platforms. The Configure script already knows to use -fPIC and
|
||||
# RPM_OPT_FLAGS, so we can skip specifiying them here.
|
||||
./Configure \
|
||||
--prefix=%{_prefix} \
|
||||
--libdir=%{_libdir} \
|
||||
--openssldir=%{_openssldir} \
|
||||
${sslflags} \
|
||||
enable-camellia \
|
||||
enable-cms \
|
||||
enable-md2 \
|
||||
enable-rc5 \
|
||||
enable-rfc3779 \
|
||||
enable-sctp \
|
||||
enable-seed \
|
||||
enable-ssl3 \
|
||||
enable-ssl3-method \
|
||||
no-ec2m \
|
||||
no-mdc2 \
|
||||
no-srp \
|
||||
zlib-dynamic \
|
||||
shared \
|
||||
${sslarch}
|
||||
|
||||
%make all
|
||||
|
||||
%check
|
||||
# Verify that what was compiled actually works.
|
||||
export LD_LIBRARY_PATH=%{buildroot}%{_libdir}
|
||||
# from OMV and ALT
|
||||
OPENSSL_ENABLE_MD5_VERIFY=
|
||||
export OPENSSL_ENABLE_MD5_VERIFY
|
||||
OPENSSL_SYSTEM_CIPHERS_OVERRIDE=xyz_nonexistent_file
|
||||
export OPENSSL_SYSTEM_CIPHERS_OVERRIDE
|
||||
# (mikhailnov) TODO: they fail, fix them?!
|
||||
rm -f test/recipes/10-test_bn.t
|
||||
rm -f test/recipes/80-test_ssl_new.t
|
||||
make test
|
||||
|
||||
%__cc -o openssl-thread-test \
|
||||
-I./include \
|
||||
%{optflags} \
|
||||
openssl-thread-test.c \
|
||||
-L. -lssl -lcrypto \
|
||||
-lpthread -lz -ldl
|
||||
|
||||
./openssl-thread-test --threads 4
|
||||
|
||||
%install
|
||||
|
||||
%makeinstall_std
|
||||
|
||||
# make the rootcerts dir
|
||||
install -d %{buildroot}%{_openssldir}/rootcerts
|
||||
|
||||
# Install a makefile for generating keys and self-signed certs, and a script
|
||||
# for generating them on the fly.
|
||||
install -d %{buildroot}%{_openssldir}/certs
|
||||
install -m0644 Makefile.certificate %{buildroot}%{_openssldir}/certs/Makefile
|
||||
install -m0755 make-dummy-cert %{buildroot}%{_openssldir}/certs/make-dummy-cert
|
||||
|
||||
# Pick a CA script.
|
||||
mv %{buildroot}%{_openssldir}/misc/CA.pl %{buildroot}%{_openssldir}/misc/CA
|
||||
|
||||
install -d %{buildroot}%{_sysconfdir}/pki/CA
|
||||
install -d %{buildroot}%{_sysconfdir}/pki/CA/private
|
||||
|
||||
# openssl was named ssleay in "ancient" times.
|
||||
ln -snf openssl %{buildroot}%{_bindir}/ssleay
|
||||
|
||||
ln -snf openssl %{buildroot}%{_bindir}/openssl%{major}
|
||||
|
||||
# From ALT Linux
|
||||
# Rename some man pages, fix references.
|
||||
for f in passwd.1 config.5; do
|
||||
name="${f%%.*}"
|
||||
sect="${f##*.}"
|
||||
NAME=`printf %%s "$name" |tr '[:lower:]' '[:upper:]'`
|
||||
sed -i "s/\\<$NAME $sect\\>/SSL&/" %{buildroot}%{_mandir}/man"$sect/$f"
|
||||
mv -v %{buildroot}%{_mandir}/man"$sect"/{,ssl}"$f"
|
||||
find %{buildroot}%{_mandir} -type f -print0 |
|
||||
xargs -r0 grep -FZl "\\fI$name\\fR\\|($sect)" -- |
|
||||
xargs -r0 subst -p "s/\\\\fI$name\\\\fR\\\\|($sect)/\\\\fIssl$name\\\\fR\\\\|($sect)/" --
|
||||
find %{buildroot}%{_mandir} -type l |while read link; do
|
||||
[ "$(readlink -n "$link")" = "$f" ] || continue
|
||||
ln -sfv "ssl$f" "$link"
|
||||
done
|
||||
done
|
||||
|
||||
chmod 755 %{buildroot}%{_libdir}/pkgconfig
|
||||
|
||||
# strip cannot touch these unless 755
|
||||
chmod 755 %{buildroot}%{openssl_engines_dir}/*.so*
|
||||
chmod 755 %{buildroot}%{_libdir}/*.so*
|
||||
chmod 755 %{buildroot}%{_bindir}/*
|
||||
|
||||
# Fix libdir.
|
||||
pushd %{buildroot}%{_libdir}/pkgconfig
|
||||
for i in *.pc ; do
|
||||
sed 's,^libdir=${exec_prefix}/lib$,libdir=${exec_prefix}/%{_libdir},g' \
|
||||
$i >$i.tmp && \
|
||||
cat $i.tmp >$i && \
|
||||
rm -f $i.tmp
|
||||
done
|
||||
popd
|
||||
|
||||
# adjust ssldir
|
||||
perl -pi -e "s|^CATOP=.*|CATOP=%{_openssldir}|g" %{buildroot}%{_openssldir}/misc/CA
|
||||
perl -pi -e "s|^\\\$CATOP\=\".*|\\\$CATOP\=\"%{_openssldir}\";|g" %{buildroot}%{_openssldir}/misc/CA.pl
|
||||
perl -pi -e "s|\./demoCA|%{_openssldir}|g" %{buildroot}%{_openssldir}/openssl.cnf
|
||||
|
||||
# remove example configs
|
||||
rm -fv %{buildroot}%{_openssldir}/*.dist
|
||||
|
||||
# install openssl-config
|
||||
install -m0755 %{SOURCE5} %{buildroot}/%{_bindir}/
|
||||
# define values in openssl-config
|
||||
sed -i %{buildroot}/%{_bindir}/openssl-config \
|
||||
-e "s#@VERSION@#%{version}#g" \
|
||||
-e "s#@OPENSSLDIR@#%{_openssldir}#g" \
|
||||
-e "s#@CPPFLAGS@#${CPPFLAGS}#g" \
|
||||
-e "s#@CFLAGS@#${RPM_OPT_FLAGS}#g" \
|
||||
-e "s#@LDFLAGS@#%{ldflags}#g"
|
||||
# test openssl-config
|
||||
[ "$(%{buildroot}/%{_bindir}/openssl-config --openssldir)" = '%{_openssldir}' ]
|
||||
|
||||
# Having sovers as macros may be useful to check that binaries are linked against OpenSSL
|
||||
# Alike LibreSSL package
|
||||
cat << EOF > macros.file
|
||||
%%_openssldir %{_openssldir}
|
||||
%%openssl_version %{version}
|
||||
%%openssl_major %{major}
|
||||
%%openssl_libcrypto_sover %{major}
|
||||
%%openssl_libssl_sover %{major}
|
||||
%%openssl_prefix %{_prefix}
|
||||
%%openssl_engines_dir %{openssl_engines_dir}
|
||||
EOF
|
||||
%install_macro openssl macros.file
|
||||
256
openssl1.1.spec
Normal file
256
openssl1.1.spec
Normal file
|
|
@ -0,0 +1,256 @@
|
|||
%define major 1.1
|
||||
%define engines_name %mklibname openssl-engines %{major}
|
||||
%define libcrypto %mklibname crypto %{major}
|
||||
%define libssl %mklibname ssl %{major}
|
||||
|
||||
%define openssl_engines_dir %{_libdir}/engines-%{major}
|
||||
|
||||
%define _docs %{expand:
|
||||
%doc AUTHORS \
|
||||
%doc CHANGES \
|
||||
%doc LICENSE \
|
||||
%doc FAQ \
|
||||
%doc NEWS \
|
||||
%doc README \
|
||||
%doc README.ENGINE
|
||||
}
|
||||
|
||||
Summary: OpenSSL 1.1 for platforms with OpenSSL 1.0 as the main version of OpenSSL
|
||||
Name: openssl1.1
|
||||
Version: 1.1.1g
|
||||
Release: 1
|
||||
License: OpenSSL
|
||||
Group: System/Libraries
|
||||
Url: https://www.openssl.org
|
||||
Source0: ftp://ftp.openssl.org/source/openssl-%{version}.tar.gz
|
||||
Source1: %{name}.rpmlintrc
|
||||
Source4: openssl-thread-test.c
|
||||
Patch1: openssl-alt-e2k-makecontext.patch
|
||||
BuildRequires: bc
|
||||
BuildRequires: sctp-devel
|
||||
# Take %%_openssldir from here
|
||||
BuildRequires: pkgconfig(openssl)
|
||||
BuildRequires: pkgconfig(zlib)
|
||||
# for %%check, ./test/run_tests.pl
|
||||
BuildRequires: perl-devel
|
||||
BuildRequires: perl-Module-Load-Conditional
|
||||
BuildRequires: perl(File::Spec::Functions)
|
||||
BuildRequires: perl(File::Basename)
|
||||
BuildRequires: perl(FindBin)
|
||||
BuildRequires: perl(Test::Harness)
|
||||
BuildRequires: perl(Test::More)
|
||||
BuildRequires: /usr/bin/pod2html
|
||||
BuildRequires: /usr/bin/pod2man
|
||||
Requires: %{engines_name} = %{EVRD}
|
||||
Requires: perl-base
|
||||
Requires: rootcerts
|
||||
# using /etc/pki/tls from the main openssl package (openssl 1.0)
|
||||
Requires: openssl
|
||||
Provides: openssl%{major} = %{EVRD}
|
||||
|
||||
%description
|
||||
The openssl certificate management tool and the shared libraries that provide
|
||||
various encryption and decription algorithms and protocols, including DES, RC4,
|
||||
RSA and SSL.
|
||||
This is OpenSSL 1.1 for platforms with OpenSSL 1.0 as the main version of OpenSSL.
|
||||
|
||||
%files
|
||||
%_docs
|
||||
%attr(0755,root,root) %{_bindir}/%{name}
|
||||
%{_mandir}/man[157]/%{name}_*
|
||||
%{_mandir}/man1/%{name}.1*
|
||||
%{_defaultdocdir}/openssl/html/man[157]
|
||||
|
||||
#----------------------------------------------------------------------------
|
||||
|
||||
%package -n %{engines_name}
|
||||
Summary: Engines for %{name}
|
||||
Group: System/Libraries
|
||||
Provides: %{name}-engines = %{EVRD}
|
||||
|
||||
%description -n %{engines_name}
|
||||
This package provides engines for openssl.
|
||||
|
||||
%files -n %{engines_name}
|
||||
%_docs
|
||||
%attr(0755,root,root) %dir %{openssl_engines_dir}/
|
||||
%attr(0755,root,root) %{openssl_engines_dir}/*.so
|
||||
|
||||
#----------------------------------------------------------------------------
|
||||
|
||||
%package -n %{libcrypto}
|
||||
Summary: Secure Sockets Layer communications libs
|
||||
Group: System/Libraries
|
||||
Requires: %{libssl} = %{EVRD}
|
||||
|
||||
%description -n %{libcrypto}
|
||||
The libraries files are needed for various cryptographic algorithms
|
||||
and protocols, including DES, RC4, RSA and SSL.
|
||||
|
||||
%files -n %{libcrypto}
|
||||
%_docs
|
||||
%{_libdir}/libcrypto.so.%{major}*
|
||||
|
||||
#----------------------------------------------------------------------------
|
||||
|
||||
%package -n %{libssl}
|
||||
Summary: Secure Sockets Layer communications libs
|
||||
Group: System/Libraries
|
||||
|
||||
%description -n %{libssl}
|
||||
The libraries files are needed for various cryptographic algorithms
|
||||
and protocols, including DES, RC4, RSA and SSL.
|
||||
|
||||
%files -n %{libssl}
|
||||
%_docs
|
||||
%{_libdir}/libssl.so.%{major}*
|
||||
|
||||
#----------------------------------------------------------------------------
|
||||
|
||||
%prep
|
||||
%autosetup -p1 -n openssl-%{version}
|
||||
|
||||
cp %{SOURCE4} openssl-thread-test.c
|
||||
|
||||
%build
|
||||
%serverbuild
|
||||
|
||||
# Figure out which flags we want to use.
|
||||
# default
|
||||
sslarch=%{_os}-%{_arch}
|
||||
%ifarch %{ix86}
|
||||
sslarch=linux-elf
|
||||
if ! echo %{_target} | grep -q i[56]86 ; then
|
||||
sslflags="no-asm"
|
||||
fi
|
||||
%endif
|
||||
%ifarch %{arm}
|
||||
sslarch=linux-generic32
|
||||
%endif
|
||||
# from ALT
|
||||
%ifarch riscv64 %{e2k}
|
||||
sslarch=linux-generic64
|
||||
%endif
|
||||
|
||||
# ia64, x86_64, ppc, ppc64 are OK by default
|
||||
# Configure the build tree. Override OpenSSL defaults with known-good defaults
|
||||
# usable on all platforms. The Configure script already knows to use -fPIC and
|
||||
# RPM_OPT_FLAGS, so we can skip specifiying them here.
|
||||
./Configure \
|
||||
--prefix=%{_prefix} \
|
||||
--libdir=%{_libdir} \
|
||||
--openssldir=%{_openssldir} \
|
||||
${sslflags} \
|
||||
enable-camellia \
|
||||
enable-cms \
|
||||
enable-md2 \
|
||||
enable-rc5 \
|
||||
enable-rfc3779 \
|
||||
enable-sctp \
|
||||
enable-seed \
|
||||
enable-ssl3 \
|
||||
enable-ssl3-method \
|
||||
no-ec2m \
|
||||
no-mdc2 \
|
||||
no-srp \
|
||||
zlib-dynamic \
|
||||
shared \
|
||||
${sslarch}
|
||||
|
||||
%make all
|
||||
|
||||
%check
|
||||
# Verify that what was compiled actually works.
|
||||
export LD_LIBRARY_PATH=%{buildroot}%{_libdir}
|
||||
# from OMV and ALT
|
||||
OPENSSL_ENABLE_MD5_VERIFY=
|
||||
export OPENSSL_ENABLE_MD5_VERIFY
|
||||
OPENSSL_SYSTEM_CIPHERS_OVERRIDE=xyz_nonexistent_file
|
||||
export OPENSSL_SYSTEM_CIPHERS_OVERRIDE
|
||||
# (mikhailnov) TODO: they fail, fix them?!
|
||||
rm -f test/recipes/10-test_bn.t
|
||||
rm -f test/recipes/80-test_ssl_new.t
|
||||
make test
|
||||
|
||||
%__cc -o openssl-thread-test \
|
||||
-I./include \
|
||||
%{optflags} \
|
||||
openssl-thread-test.c \
|
||||
-L. -lssl -lcrypto \
|
||||
-lpthread -lz -ldl
|
||||
|
||||
./openssl-thread-test --threads 4
|
||||
|
||||
%install
|
||||
|
||||
%makeinstall_std
|
||||
( cd %{buildroot}%{_bindir}
|
||||
mv openssl openssl%{major}
|
||||
)
|
||||
|
||||
# Based on libressl, rename mans xxx.N to openssl1.1_xxx.N
|
||||
for i in $(seq 1 8)
|
||||
do
|
||||
man_dir="%{buildroot}%{_mandir}/man${i}"
|
||||
if [ ! -d "$man_dir" ]; then continue; fi
|
||||
( cd "$man_dir"
|
||||
grep -Irl '/etc/ssl' . | xargs sed -i 's,/etc/ssl,%{_openssldir},g' || :
|
||||
if find . -name '%{name}_*' | grep -q '.' ; then
|
||||
echo 'Rewrite spec because upstream %{name}_* manpages appeared!'
|
||||
exit 1
|
||||
fi
|
||||
# Make all man pages with potentially the same names as in OpenSSL
|
||||
# be avaialble in standard man directories, but prevent conflicts with OpenSSL
|
||||
for openssl_manpage in $(ls -1v | grep -vE '^OPENSSL_|^openssl\.') ; do
|
||||
openssl_LibreSSL_manpage="%{name}_${openssl_manpage}"
|
||||
mv -v "$openssl_manpage" "$openssl_LibreSSL_manpage"
|
||||
done
|
||||
for openssl_manpage in $(ls -1v | grep '^openssl\.') ; do
|
||||
openssl_LibreSSL_manpage="$(echo "$openssl_manpage" | sed -e 's,openssl,%{name},g')"
|
||||
mv -v "$openssl_manpage" "$openssl_LibreSSL_manpage"
|
||||
done
|
||||
|
||||
# relink symlinks
|
||||
error=0
|
||||
for i in *
|
||||
do
|
||||
if [ ! -L "$i" ]; then continue; fi
|
||||
realpath="$(realpath "$i")"
|
||||
if [ ! -e "$realpath"; then
|
||||
if echo "$realpath" | grep -q '/openssl_'
|
||||
then new_dest="$(echo "$realpath" | sed -e 's,/openssl_,/%{name}_,g')"
|
||||
else new_dest="%{name}_$(echo "$realpath" | awk -F '/' '{print $NF}')"
|
||||
fi
|
||||
if [ ! -e "$new_dest" ]; then
|
||||
list_not_e="${list_not_e}\n${new_dest}"
|
||||
error=1
|
||||
fi
|
||||
rm -fv "$i"
|
||||
ln -s "$new_dest" "$i"
|
||||
fi
|
||||
done
|
||||
if [ "$error" != 0 ]; then
|
||||
echo "Not existing destinations: ${list_not_e}"
|
||||
exit 1
|
||||
fi
|
||||
)
|
||||
done
|
||||
|
||||
# strip cannot touch these unless 755
|
||||
chmod 755 %{buildroot}%{openssl_engines_dir}/*.so*
|
||||
chmod 755 %{buildroot}%{_libdir}/*.so*
|
||||
chmod 755 %{buildroot}%{_bindir}/*
|
||||
|
||||
# Remove devel parts (openssl 1.0 is devel)
|
||||
( cd %{buildroot}
|
||||
rm -fvr \
|
||||
./%{_bindir}/c_rehash \
|
||||
./%{_libdir}/*.so \
|
||||
./%{_libdir}/*.a \
|
||||
./%{_includedir} \
|
||||
./%{_openssldir} \
|
||||
./%{_libdir}/pkgconfig \
|
||||
./%{_mandir}/man3 \
|
||||
./%{_defaultdocdir}/openssl/html/man3
|
||||
)
|
||||
|
||||
Loading…
Add table
Reference in a new issue