460 lines
18 KiB
RPMSpec
460 lines
18 KiB
RPMSpec
%define soversion 1.1
|
|
Name: openssl
|
|
Epoch: 1
|
|
Version: 1.1.1m
|
|
Release: 35
|
|
Summary: Cryptography and SSL/TLS Toolkit
|
|
License: OpenSSL and SSLeay
|
|
URL: https://www.openssl.org/
|
|
Source0: https://www.openssl.org/source/%{name}-%{version}.tar.gz
|
|
Source1: Makefile.certificate
|
|
Patch1: openssl-1.1.1-build.patch
|
|
Patch2: openssl-1.1.1-fips.patch
|
|
Patch3: CVE-2022-0778-Add-a-negative-testcase-for-BN_mod_sqrt.patch
|
|
Patch4: CVE-2022-0778-Fix-possible-infinite-loop-in-BN_mod_sqrt.patch
|
|
Patch5: CVE-2022-1292.patch
|
|
Patch6: CVE-2022-2068-Fix-file-operations-in-c_rehash.patch
|
|
Patch7: CVE-2022-2097-Fix-AES-OCB-encrypt-decrypt-for-x86-AES-NI.patch
|
|
Patch8: Update-expired-SCT-certificates.patch
|
|
Patch9: ct_test.c-Update-the-epoch-time.patch
|
|
Patch10: Fix-reported-performance-degradation-on-aarch64.patch
|
|
|
|
# SM and TLCP feature
|
|
Patch11: Backport-Support-raw-input-data-in-apps-pkeyutl.patch
|
|
Patch12: Backport-Fix-no-ec-no-sm2-and-no-sm3.patch
|
|
Patch13: Backport-Support-SM2-certificate-verification.patch
|
|
Patch14: Backport-Guard-some-SM2-functions-with-OPENSSL_NO_SM2.patch
|
|
Patch15: Backport-Add-test-cases-for-SM2-cert-verification.patch
|
|
Patch16: Backport-Add-documents-for-SM2-cert-verification.patch
|
|
Patch17: Backport-Fix-a-memleak-in-apps-verify.patch
|
|
Patch18: Backport-Skip-the-correct-number-of-tests-if-SM2-is-disabled.patch
|
|
Patch19: Backport-Make-X509_set_sm2_id-consistent-with-other-setters.patch
|
|
Patch20: Backport-Support-SM2-certificate-signing.patch
|
|
Patch21: Backport-Support-parsing-of-SM2-ID-in-hexdecimal.patch
|
|
Patch22: Backport-Fix-a-double-free-issue-when-signing-SM2-cert.patch
|
|
Patch23: Backport-Fix-a-document-description-in-apps-req.patch
|
|
Patch26: Feature-Support-TLCP-protocol.patch
|
|
Patch27: Feature-X509-command-supports-SM2-certificate-signing-with-default-sm2id.patch
|
|
Patch28: Feature-PKCS7-sign-and-verify-support-SM2-algorithm.patch
|
|
Patch29: backport-Update-further-expiring-certificates-that-affect-tes.patch
|
|
Patch30: backport-Backport-a-missing-bug-fix-from-master.patch
|
|
Patch31: backport-Prevent-crash-with-engine-using-different-openssl-ru.patch
|
|
Patch32: Feature-add-ARMv8-implementations-of-SM4-in-ECB-and-XTS.patch
|
|
Patch33: Backport-SM3-acceleration-with-SM3-hardware-instruction-on-aa.patch
|
|
Patch34: Backport-SM4-optimization-for-ARM-by-HW-instruction.patch
|
|
Patch35: Feature-SM4-XTS-optimization-for-ARM-by-HW-instruction.patch
|
|
Patch36: backport-Fix-a-DTLS-server-hangup-due-to-TLS13_AD_MISSING_EXT.patch
|
|
Patch37: backport-Fix-an-assertion-in-the-DTLS-server-code.patch
|
|
Patch38: backport-Fix-a-memory-leak-in-X509_issuer_and_serial_hash.patch
|
|
Patch39: backport-Fix-strict-client-chain-check-with-TLS-1.3.patch
|
|
Patch40: backport-CVE-2022-4304-Fix-Timing-Oracle-in-RSA-decryption.patch
|
|
Patch41: backport-CVE-2022-4450-Avoid-dangling-ptrs-in-header-and-data-params-for-PE.patch
|
|
Patch42: backport-CVE-2023-0215-Check-CMS-failure-during-BIO-setup-with-stream-is-ha.patch
|
|
Patch43: backport-CVE-2023-0215-Fix-a-UAF-resulting-from-a-bug-in-BIO_new_NDEF.patch
|
|
Patch44: backport-CVE-2023-0286-Fix-GENERAL_NAME_cmp-for-x400Address-1.patch
|
|
Patch45: backport-test-add-test-cases-for-the-policy-resource-overuse.patch
|
|
Patch46: backport-x509-excessive-resource-use-verifying-policy-constra.patch
|
|
Patch47: backport-Ensure-that-EXFLAG_INVALID_POLICY-is-checked-even-in.patch
|
|
Patch48: backport-Fix-documentation-of-X509_VERIFY_PARAM_add0_policy.patch
|
|
Patch49: backport-Add-a-Certificate-Policies-Test.patch
|
|
Patch50: backport-Generate-some-certificates-with-the-certificatePolic.patch
|
|
Patch51: Fix-SM4-XTS-build-failure-using-clang.patch
|
|
Patch52: backport-CVE-2023-2650-Restrict-the-size-of-OBJECT-IDENTIFIERs-that-OBJ_obj.patch
|
|
Patch53: backport-Add-a-test-for-CVE-2023-3446.patch
|
|
Patch54: backport-CVE-2023-3446-Fix-DH_check-excessive-time-with-over-sized-modulus.patch
|
|
Patch55: backport-update-expired-certificates-for-sm2.patch
|
|
Patch56: backport-CVE-2023-3817.patch
|
|
Patch57: backport-CVE-2023-3817-testcase.patch
|
|
Patch58: Fix-FIPS-getenv-build-failure.patch
|
|
Patch59: backport-A-null-pointer-dereference-occurs-when-memory-alloca.patch
|
|
Patch60: backport-Make-DH_check-set-some-error-bits-in-recently-added-.patch
|
|
Patch61: backport-CVE-2023-5678-Make-DH_check_pub_key-and-DH_generate_key-safer-yet.patch
|
|
Patch62: backport-Add-negative-integer-check-when-using-ASN1_BIT_STRIN.patch
|
|
Patch63: backport-Fix-stack-corruption-in-ui_read.patch
|
|
Patch64: backport-Re-add-BN_F_OSSL_BN_RSA_DO_UNBLIND-which-was-incorre.patch
|
|
Patch65: backport-x509-Fix-possible-use-after-free-when-OOM.patch
|
|
Patch66: backport-x509-Handle-ossl_policy_level_add_node-errors.patch
|
|
Patch67: backport-Fix-a-possbile-memleak-in-rsa_pub_encode.patch
|
|
Patch68: backport-Fix-a-possible-memleak-in-eckey_priv_encode.patch
|
|
Patch69: backport-Fix-error-handling-in-CMS_EncryptedData_encrypt.patch
|
|
Patch70: backport-Fix-EVP_PKEY_asn1_copy.patch
|
|
Patch71: backport-CVE-2024-0727-fix-pkcs12-decoding-crashes.patch
|
|
Patch72: backport-apps-passwd.c-free-before-error-exiting.patch
|
|
Patch73: backport-Fix-mem-leaks-on-PKCS-12-read-error-in-PKCS12_key_ge.patch
|
|
Patch74: backport-CVE-2024-2511-Fix-unconstrained-session-cache-growth-in-TLSv1.3.patch
|
|
Patch75: backport-Add-a-test-for-session-cache-handling.patch
|
|
Patch76: backport-Extend-the-multi_resume-test-for-simultaneous-resump.patch
|
|
Patch77: backport-Hardening-around-not_resumable-sessions.patch
|
|
Patch78: backport-Add-a-test-for-session-cache-overflow.patch
|
|
|
|
BuildRequires: gcc perl make lksctp-tools-devel coreutils util-linux zlib-devel
|
|
Requires: coreutils %{name}-libs%{?_isa} = %{epoch}:%{version}-%{release}
|
|
Obsoletes: openssl-SMx < %{epoch}:%{version}-%{release}
|
|
Provides: openssl-SMx = %{epoch}:%{version}-%{release}
|
|
|
|
%description
|
|
OpenSSL is a robust, commercial-grade, and full-featured toolkit for the
|
|
Transport Layer Security (TLS) and Secure Sockets Layer (SSL) protocols.
|
|
|
|
%package libs
|
|
Summary: A general purpose cryptography library with TLS implementation
|
|
Group: System Environment/Libraries
|
|
Requires: ca-certificates >= 2008-5
|
|
Requires: crypto-policies >= 20180730
|
|
Recommends: openssl-pkcs11%{?_isa}
|
|
Obsoletes: openssl < 1:1.0.1-0.3.beta3
|
|
Obsoletes: openssl-fips < 1:1.0.1e-28
|
|
Provides: openssl-fips = %{epoch}:%{version}-%{release}
|
|
Obsoletes: openssl-SMx-libs < %{epoch}:%{version}-%{release}
|
|
Provides: openssl-SMx-libs = %{epoch}:%{version}-%{release}
|
|
|
|
%description libs
|
|
The openssl-libs package contains the libraries that are used
|
|
by various applications which support cryptographic algorithms
|
|
and protocols.
|
|
|
|
%package perl
|
|
Summary: Perl scripts provided with OpenSSL
|
|
Requires: perl-interpreter
|
|
Requires: %{name}%{?_isa} = %{epoch}:%{version}-%{release}
|
|
Obsoletes: openssl-SMx-perl < %{epoch}:%{version}-%{release}
|
|
Provides: openssl-SMx-perl = %{epoch}:%{version}-%{release}
|
|
|
|
%description perl
|
|
OpenSSL is a toolkit for supporting cryptography. The openssl-perl
|
|
package provides Perl scripts for converting certificates and keys
|
|
from other formats to the formats used by the OpenSSL toolkit.
|
|
|
|
%package devel
|
|
Summary: Development files for openssl
|
|
Requires: %{name}-libs%{?_isa} = %{epoch}:%{version}-%{release}
|
|
Requires: krb5-devel zlib-devel pkgconfig
|
|
Obsoletes: openssl-static < %{epoch}:%{version}-%{release}
|
|
Provides: openssl-static = %{epoch}:%{version}-%{release} openssl-static%{?_isa} = %{epoch}:%{version}-%{release}
|
|
Obsoletes: openssl-SMx-devel < %{epoch}:%{version}-%{release}
|
|
Provides: openssl-SMx-devel = %{epoch}:%{version}-%{release}
|
|
|
|
%description devel
|
|
%{summary}.
|
|
|
|
%package_help
|
|
|
|
%prep
|
|
%autosetup -n %{name}-%{version} -p1
|
|
|
|
%build
|
|
|
|
sslarch=%{_os}-%{_target_cpu}
|
|
%ifarch x86_64 aarch64
|
|
sslflags=enable-ec_nistp_64_gcc_128
|
|
%endif
|
|
|
|
RPM_OPT_FLAGS="$RPM_OPT_FLAGS -Wa,--noexecstack -DPURIFY $RPM_LD_FLAGS"
|
|
./Configure \
|
|
--prefix=%{_prefix} \
|
|
--openssldir=%{_sysconfdir}/pki/tls ${sslflags} \
|
|
zlib enable-camellia enable-seed enable-rfc3779 enable-sctp \
|
|
enable-cms enable-md2 enable-rc5 enable-ssl3 enable-ssl3-method \
|
|
enable-weak-ssl-ciphers \
|
|
no-mdc2 no-ec2m enable-sm2 enable-sm3 enable-sm4 enable-tlcp \
|
|
shared ${sslarch} $RPM_OPT_FLAGS '-DDEVRANDOM="\"/dev/urandom\""'
|
|
|
|
%make_build all
|
|
|
|
%define __spec_install_post \
|
|
%{?__debug_package:%{__debug_install_post}} \
|
|
%{__arch_install_post} \
|
|
%{__os_install_post} \
|
|
crypto/fips/fips_standalone_hmac $RPM_BUILD_ROOT%{_libdir}/libcrypto.so.%{version} >$RPM_BUILD_ROOT%{_libdir}/.libcrypto.so.%{version}.hmac \
|
|
ln -sf .libcrypto.so.%{version}.hmac $RPM_BUILD_ROOT%{_libdir}/.libcrypto.so.%{soversion}.hmac \
|
|
crypto/fips/fips_standalone_hmac $RPM_BUILD_ROOT%{_libdir}/libssl.so.%{version} >$RPM_BUILD_ROOT%{_libdir}/.libssl.so.%{version}.hmac \
|
|
ln -sf .libssl.so.%{version}.hmac $RPM_BUILD_ROOT%{_libdir}/.libssl.so.%{soversion}.hmac \
|
|
%{nil}
|
|
|
|
%install
|
|
|
|
%make_install
|
|
|
|
# rename so name with actual version
|
|
rename so.%{soversion} so.%{version} $RPM_BUILD_ROOT%{_libdir}/*.so.%{soversion}
|
|
# create symbolic link
|
|
for lib in $RPM_BUILD_ROOT%{_libdir}/*.so.%{version} ; do
|
|
ln -s -f `basename ${lib}` $RPM_BUILD_ROOT%{_libdir}/`basename ${lib} .%{version}`
|
|
ln -s -f `basename ${lib}` $RPM_BUILD_ROOT%{_libdir}/`basename ${lib} .%{version}`.%{soversion}
|
|
done
|
|
|
|
mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/certs
|
|
install -m644 %{SOURCE1} $RPM_BUILD_ROOT%{_pkgdocdir}/Makefile.certificate
|
|
|
|
mv $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/misc/*.pl $RPM_BUILD_ROOT%{_bindir}
|
|
mv $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/misc/tsget $RPM_BUILD_ROOT%{_bindir}
|
|
|
|
|
|
mkdir -p -m755 $RPM_BUILD_ROOT%{_sysconfdir}/pki/CA/{certs,crl,newcerts,private}
|
|
chmod 700 $RPM_BUILD_ROOT%{_sysconfdir}/pki/CA/private
|
|
|
|
touch -r %{SOURCE1} $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/{openssl.cnf,ct_log_list.cnf}
|
|
|
|
|
|
# rename man pages avoid conflicting with other man pages in system
|
|
%define manpostfix _openssl
|
|
pushd $RPM_BUILD_ROOT%{_mandir}
|
|
ln -s -f config.5 man5/openssl.cnf.5
|
|
for manpage in man*/* ; do
|
|
if [ -L ${manpage} ]; then
|
|
targetfile=`ls -l ${manpage} | awk '{print $NF}'`
|
|
ln -sf ${targetfile}%{manpostfix} ${manpage}%{manpostfix}
|
|
rm -f ${manpage}
|
|
else
|
|
mv ${manpage} ${manpage}%{manpostfix}
|
|
fi
|
|
done
|
|
popd
|
|
|
|
# Next step of gradual disablement of ssl3.
|
|
# Make SSL3 disappear to newly built dependencies.
|
|
sed -i '/^\#ifndef OPENSSL_NO_SSL_TRACE/i\
|
|
#ifndef OPENSSL_NO_SSL3\
|
|
# define OPENSSL_NO_SSL3\
|
|
#endif' $RPM_BUILD_ROOT/%{_prefix}/include/openssl/opensslconf.h
|
|
|
|
rm -f $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/*.dist
|
|
|
|
%check
|
|
LD_LIBRARY_PATH=`pwd`${LD_LIBRARY_PATH:+:${LD_LIBRARY_PATH}}
|
|
export LD_LIBRARY_PATH
|
|
crypto/fips/fips_standalone_hmac libcrypto.so.%{soversion} >.libcrypto.so.%{soversion}.hmac
|
|
ln -s .libcrypto.so.%{soversion}.hmac .libcrypto.so.hmac
|
|
crypto/fips/fips_standalone_hmac libssl.so.%{soversion} >.libssl.so.%{soversion}.hmac
|
|
ln -s .libssl.so.%{soversion}.hmac .libssl.so.hmac
|
|
OPENSSL_ENABLE_MD5_VERIFY=
|
|
export OPENSSL_ENABLE_MD5_VERIFY
|
|
OPENSSL_SYSTEM_CIPHERS_OVERRIDE=xyz_nonexistent_file
|
|
export OPENSSL_SYSTEM_CIPHERS_OVERRIDE
|
|
make test || :
|
|
|
|
%post libs -p /sbin/ldconfig
|
|
|
|
%postun libs -p /sbin/ldconfig
|
|
|
|
%files
|
|
%defattr(-,root,root)
|
|
%license LICENSE
|
|
%doc AUTHORS CHANGES FAQ NEWS README
|
|
%{_pkgdocdir}/Makefile.certificate
|
|
%{_bindir}/openssl
|
|
|
|
%files libs
|
|
%defattr(-,root,root)
|
|
%license LICENSE
|
|
%dir %{_sysconfdir}/pki/tls
|
|
%dir %{_sysconfdir}/pki/tls/certs
|
|
%dir %{_sysconfdir}/pki/tls/misc
|
|
%dir %{_sysconfdir}/pki/tls/private
|
|
%config(noreplace) %{_sysconfdir}/pki/tls/openssl.cnf
|
|
%config(noreplace) %{_sysconfdir}/pki/tls/ct_log_list.cnf
|
|
%{_libdir}/libcrypto.so.%{version}
|
|
%{_libdir}/libcrypto.so.%{soversion}
|
|
%{_libdir}/libssl.so.%{version}
|
|
%{_libdir}/libssl.so.%{soversion}
|
|
%{_libdir}/engines-%{soversion}
|
|
%attr(0644,root,root) %{_libdir}/.libcrypto.so.*.hmac
|
|
%attr(0644,root,root) %{_libdir}/.libssl.so.*.hmac
|
|
|
|
%files devel
|
|
%defattr(-,root,root)
|
|
%doc doc/dir-locals.example.el doc/openssl-c-indent.el
|
|
%{_prefix}/include/openssl
|
|
%{_libdir}/pkgconfig/*.pc
|
|
%{_libdir}/*.so
|
|
%{_libdir}/*.a
|
|
|
|
%files help
|
|
%defattr(-,root,root)
|
|
%{_mandir}/man1/*
|
|
%{_mandir}/man3/*
|
|
%{_mandir}/man5/*
|
|
%{_mandir}/man7/*
|
|
%{_pkgdocdir}/html/
|
|
|
|
%files perl
|
|
%{_bindir}/c_rehash
|
|
%{_bindir}/*.pl
|
|
%{_bindir}/tsget
|
|
%dir %{_sysconfdir}/pki/CA
|
|
%dir %{_sysconfdir}/pki/CA/private
|
|
%dir %{_sysconfdir}/pki/CA/certs
|
|
%dir %{_sysconfdir}/pki/CA/crl
|
|
%dir %{_sysconfdir}/pki/CA/newcerts
|
|
|
|
%ldconfig_scriptlets libs
|
|
|
|
%changelog
|
|
* Wed Apr 17 2024 fuanan <fuanan3@h-partners.com> - 1:1.1.1m-35
|
|
- fix CVE-2024-2511
|
|
|
|
* Tue Mar 26 2024 wangjiang <wangjiang37@h-partners.com> - 1:1.1.1m-34
|
|
- fix some bugs
|
|
|
|
* Mon Feb 5 2024 lixiao <lixiao57@huawei.com> - 1:1.1.1m-33
|
|
- add openssl-SMx-perl rpm provides
|
|
|
|
* Tue Jan 30 2024 lixiao<lixiao57@huawei.com> - 1:1.1.1m-32
|
|
- Fix CVE-2024-0727 PKCS12 Decoding crashes
|
|
|
|
* Mon Dec 18 2023 wangcheng <wangcheng156@huawei.com> - 1:1.1.1m-31
|
|
- backport some patches
|
|
|
|
* Tue Nov 28 2023 wangcheng <wangcheng156@huawei.com> - 1:1.1.1m-30
|
|
- backport some patches
|
|
|
|
* Mon Nov 20 2023 wangcheng <wangcheng156@huawei.com> - 1:1.1.1m-29
|
|
- backport some patches
|
|
|
|
* Tue Nov 14 2023 zhujianwei <zhujianwei7@huawei.com> - 1:1.1.1m-25
|
|
- fix CVE-2023-5678
|
|
|
|
* Fri Sep 22 2023 dongyuzhen <dongyuzhen@h-partners.com> - 1:1.1.1m-24
|
|
- Backport some upstream patches
|
|
|
|
* Fri Sep 8 2023 reverse-world <ykx1990123@163.com> - 1:1.1.1m-23
|
|
- fix FIPS getenv compatibility problem
|
|
|
|
* Wed Aug 2 2023 liningjie <liningjie@xfusion.com> - 1:1.1.1m-22
|
|
- fix CVE-2023-3817
|
|
|
|
* Jul Sat 22 2023 fangxiuning <fangxiuning@huawei.com> - 1:1.1.1m-21
|
|
- fix CVE-2023-3446
|
|
|
|
* Mon Jun 12 2023 zhujianwei <zhujianwei7@huawei.com> - 1:1.1.1m-20
|
|
- fix CVE-2023-2650
|
|
|
|
* Mon May 15 2023 Xu Yizhou <xuyizhou1@huawei.com> - 1:1.1.1m-19
|
|
- Fix SM4-XTS build failure using calling
|
|
|
|
* Tue Apr 4 2023 wangcheng <wangcheng156@huawei.com> - 1:1.1.1m-18
|
|
- fix some CVEs
|
|
|
|
* Thu Feb 9 2023 wangcheng<wangcheng156@huawei.com> - 1:1.1.1m-17
|
|
- fix some CVE
|
|
|
|
* Mon Feb 6 2023 fangxiuning <fangxiuning@huawei.com> - 1:1.1.1m-16
|
|
- backport some upstream pathcesl
|
|
|
|
* Wed Nov 2 2022 Xu Yizhou <xuyizhou1@huawei.com> - 1:1.1.1m-15
|
|
- add SM3/SM4 optimization
|
|
|
|
* Fri Oct 28 2022 ExtinctFire <shenyining_00@126.com> - 1:1.1.1m-14
|
|
- backport upstream patches
|
|
|
|
* Fri Oct 28 2022 zhujianwei <zhujianwei7@huawei.com> - 1:1.1.1m-13
|
|
- update further expiring certificates
|
|
|
|
* Wed Oct 26 2022 luhuaxin <luhuaxin1@huawei.com> - 1:1.1.1m-12
|
|
- fix cms testcase
|
|
|
|
* Fri Oct 21 2022 luhuaxin <luhuaxin1@huawei.com> - 1:1.1.1m-11
|
|
- add support for SM2 PKCS7
|
|
|
|
* Mon Oct 17 2022 luhuaxin <luhuaxin1@huawei.com> - 1:1.1.1m-10
|
|
- add sm2 cert and TLCP feature from master
|
|
|
|
* Tue Sep 13 2022 wangcheng <wangcheng156@huawei.com> - 1:1.1.1m-9
|
|
- add provides for openssl-SMx
|
|
|
|
* Mon Aug 22 2022 fangxiuning <fangxiuning@huawei.com> - 1:1.1.1m-8
|
|
- fix proformance degradation on aarch64
|
|
|
|
* Tue Jul 26 2022 ExtinctFire <shenyining_00@126.com> - 1:1.1.1m-7
|
|
- fix expiring-certificates test case
|
|
|
|
* Tue Jul 12 2022 wangcheng <wangcheng156@huawei.com> - 1:1.1.1m-6
|
|
- fix the cve-2022-2097
|
|
|
|
* Thu Jun 30 2022 zhouchenchen <zhouchenchen@huawei.com> - 1:1.1.1m-5
|
|
- fix the cve-2022-0778
|
|
|
|
* Thu May 12 2022 zhouchenchen <zhouchenchen@huawei.com> - 1:1.1.1m-4
|
|
- fix the cve-2022-1292
|
|
|
|
* Mon Mar 21 2022 wangcheng <wangcheng156@huawei.com> - 1:1.1.1m-3
|
|
- fix the cve-2022-0778
|
|
|
|
* Thu Feb 17 2022 fushanqing <fushanqing@kylinos.cn> - 1:1.1.1m-2
|
|
- add subpackage openssl-perl
|
|
|
|
* Tue Dec 28 2021 Buildteam <buildteam@openeuler.org> - 1:1.1.1m-1
|
|
- update openssl-1.1.1l to openssl-1.1.1m
|
|
|
|
* Wed Dec 8 2021 lujie42 <lujie42@huawei.com> - 1:1.1.1l-1
|
|
- update openssl-1.1.1f to openssl-1.1.1l
|
|
|
|
* Fri Sep 24 2021 openEuler Buildteam <buildteam@openeuler.org> - 1:1.1.1f-9
|
|
- bugfix Overflow when printing Thawte Strong Extranet
|
|
|
|
* Sat Sep 18 2021 zhuyan <zhuyan34@huawei.com> - 1:1.1.1f-8
|
|
- fix software package format problem
|
|
|
|
* Mon Aug 30 2021 openEuler Buildteam <buildteam@openeuler.org> - 1:1.1.1f-7
|
|
- fix the CVE-2021-3711 and CVE-2021-3712
|
|
|
|
* Tue Jun 29 2021 openEuler Buildteam <buildteam@openeuler.org> - 1:1.1.1f-6
|
|
- add perl BuildRequires
|
|
|
|
* Wed Apr 7 2021 openEuler Buildteam <buildteam@openeuler.org> - 1:1.1.1f-5
|
|
- fix CVE-2021-3449
|
|
|
|
* Wed Mar 10 2021 openEuler Buildteam <buildteam@openeuler.org> - 1:1.1.1f-4
|
|
- fix CVE-2021-23840 and CVE-2021-23841
|
|
|
|
* Tue Jan 19 2021 openEuler Buildteam <buildteam@openeuler.org> - 1:1.1.1f-3
|
|
- fix CVE-2020-1971
|
|
|
|
* Fri Sep 11 2020 Liquor <lirui130@huawei.com> - 1:1.1.1f-2
|
|
- provides openssl-perl
|
|
|
|
* Tue May 12 2020 openEuler Buildteam <buildteam@openeuler.org> - 1:1.1.1f-1
|
|
- update openssl-1.1.1d to openssl-1.1.1f and fix CVE-2020-1967
|
|
|
|
* Wed Mar 18 2020 steven <steven_ygui@163.com> - 1:1.1.1d-9
|
|
- fix division zero issue which found by oss-fuzz
|
|
|
|
* Tue Mar 3 2020 openEuler Buildteam <buildteam@openeuler.org> - 1:1.1.1d-8
|
|
- add missiong /sbin/ldconfig
|
|
|
|
* Tue Mar 3 2020 openEuler Buildteam <buildteam@openeuler.org> - 1:1.1.1d-7
|
|
- Fix problem caused by missing hmac files
|
|
|
|
* Mon Feb 17 2020 openEuler Buildteam <buildteam@openeuler.org> - 1:1.1.1d-6
|
|
- add openssl-libs containing dynamic library for openssl
|
|
|
|
* Sun Jan 19 2020 openEuler Buildteam <buildteam@openeuler.org> - 1:1.1.1d-5
|
|
- add obsoletes
|
|
|
|
* Tue Jan 14 2020 openEuler Buildteam <buildteam@openeuler.org> - 1:1.1.1d-4
|
|
- clean code
|
|
|
|
* Fri Jan 10 2020 openEuler Buildteam <buildteam@openeuler.org> - 1:1.1.1d-3
|
|
- delete unused files
|
|
|
|
* Fri Dec 27 2019 openEuler Buildteam <buildteam@openeuler.org> - 1:1.1.1d-2
|
|
- modify obsoletes
|
|
|
|
* Mon Dec 16 2019 openEuler Buildteam <buildteam@openeuler.org> - 1:1.1.1d-1
|
|
- update to 1:1.1.1d
|
|
|
|
* Thu Nov 21 2019 openEuler Buildteam <buildteam@openeuler.org> - 1:1.1.1c-5
|
|
- enable sm2 and sm4
|
|
|
|
* Fri Oct 25 2019 openEuler Buildteam <buildteam@openeuler.org> - 1:1.1.1c-4
|
|
- Add missing openssl/fips.h
|
|
|
|
* Thu Oct 24 2019 openEuler Buildteam <buildteam@openeuler.org> - 1:1.1.1c-3
|
|
- Add buildrequires zlib-devel
|
|
|
|
* Tue Sep 24 2019 openEuler Buildteam <buildteam@openeuler.org> - 1:1.1.1c-2
|
|
- Adjust requires
|
|
|
|
* Mon Sep 16 2019 openEuler Buildteam <buildteam@openeuler.org> - 1:1.1.1c-1
|
|
- Package init
|