David Abdurachmanov
1ee3891bdc
Merge remote-tracking branch 'up/f29' into f29-riscv64
...
Signed-off-by: David Abdurachmanov <david.abdurachmanov@gmail.com>
2018-10-17 12:09:11 +02:00
33bd389ea8
reinstate accidentally dropped patch for weak ciphersuites
2018-09-17 12:56:19 +02:00
746c76a1d7
Drop RANDFILE from default config file so it is not used by default
2018-09-14 13:10:14 +02:00
143a3dae64
Adjust test_verify for the SHA1 allowement in SECLEVEL 2
2018-09-14 12:38:01 +02:00
60efa7758e
Bump release
2018-09-14 10:57:22 +02:00
1a7b91b472
for consistent support of security policies we build
...
RC4 support in TLS (not default) and allow SHA1 in SECLEVEL 2
2018-09-14 10:56:06 +02:00
d2c08bab45
Upload the 1.1.1 sources
2018-09-13 09:45:00 +02:00
a4bf4e1b65
update to the final 1.1.1 version
2018-09-13 09:43:22 +02:00
90121b0c9d
Multiple fixes
...
do not try to initialize RNG in cleanup if it was not initialized
before (#1624554 )
use only /dev/urandom if getrandom() is not available
disable SM4
2018-09-06 13:48:54 +02:00
cfeae6fcb3
Two minor fixes
...
fix dangling symlinks to manual pages
make SSLv3_method work
2018-08-29 18:25:29 +02:00
David Abdurachmanov
e18afbe0a2
Merge remote-tracking branch 'up/f29' into master-riscv64
...
Signed-off-by: David Abdurachmanov <david.abdurachmanov@gmail.com>
2018-08-26 20:45:52 +03:00
62ec0f1fa9
update to the latest 1.1.1 beta version
2018-08-22 12:41:26 +02:00
1186311ade
bidirectional shutdown fixes from upstream
2018-08-13 16:03:04 +02:00
f7a30f9a15
do not put error on stack when using fixed protocol version
...
(#1615098 )
2018-08-13 11:34:33 +02:00
60357072e0
load crypto policy config file from the default config
2018-07-31 16:24:45 +02:00
David Abdurachmanov
03af38ee90
Fix changelog entry
...
Signed-off-by: David Abdurachmanov <david.abdurachmanov@gmail.com>
2018-07-26 17:18:59 +02:00
David Abdurachmanov
8078616a9d
Merge commit '9189f03055d4d55949fb897a1049b800327a312f' into master-riscv64
...
Signed-off-by: David Abdurachmanov <david.abdurachmanov@gmail.com>
2018-07-26 17:16:44 +02:00
4bff11d832
Drop unused file from git.
2018-07-26 11:04:41 +02:00
9189f03055
update to the latest 1.1.1 beta version
2018-07-25 18:15:19 +02:00
7f74f219f1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
...
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2018-07-13 15:12:04 +00:00
5ec63a5ce1
The hack is needed only on some architectures.
2018-06-19 18:39:17 +02:00
86c97f4f4b
Make the afalg engine build.
...
There is a conflict in some types between glibc and linux headers.
Adding a hack to avoid it.
2018-06-19 16:58:06 +02:00
98bbad839c
fix FIPS RSA key generation failure
2018-06-19 16:05:15 +02:00
357b7a7e37
ppc64le is not multilib arch ( #1584994 )
2018-06-04 12:24:19 +02:00
David Abdurachmanov
2e9a37afa3
Fix typo in %ifarch
...
Signed-off-by: David Abdurachmanov <david.abdurachmanov@gmail.com>
2018-05-09 17:28:10 +02:00
David Abdurachmanov
366634ae28
Add --libdir=%{_lib} for riscv64
...
We need this because there is no riscv64 specific configuration which
would set multilib to 64. It should be easy to write one and send to
the upstream.
Signed-off-by: David Abdurachmanov <david.abdurachmanov@gmail.com>
2018-05-09 12:18:40 +02:00
73ef787803
renew-dummy-cert: Fix long serial number renewal problem.
...
Do not try to increment the serial number, use long random one instead.
2018-05-04 09:17:27 +02:00
5d5075d4c9
Fix mistake in the FIPS RSA keygen causing key generation failures.
2018-04-05 16:46:28 +02:00
08db5cbcb9
fix regression of c_rehash ( #1562953 )
2018-04-03 13:03:32 +02:00
5a93773172
fix FIPS symbol versions
2018-03-29 18:13:54 +02:00
c6d0704d87
Add missing build dependencies.
2018-03-29 16:40:14 +02:00
6eb8f62027
update to upstream version 1.1.0h
...
Add Recommends for openssl-pkcs11
2018-03-29 15:44:09 +02:00
6d92af0099
one more try to apply RPM_LD_FLAGS properly ( #1541033 )
...
dropped unneeded starttls xmpp patch (#1417017 )
2018-02-23 17:01:58 +01:00
e688115b6d
Remove %clean section
...
None of currently supported distributions need that.
Last one was EL5 which is EOL for a while.
Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
2018-02-14 09:56:41 +01:00
3a05f1f46a
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
...
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2018-02-08 17:49:45 +00:00
c11b1341c5
apply RPM_LD_FLAGS properly ( #1541033 )
2018-02-01 18:07:30 +01:00
899f2baacb
silence the .rnd write failure as that is auxiliary functionality ( #1524833 )
2018-01-11 18:08:54 +01:00
f20f5f466f
put the Makefile.certificate in pkgdocdir and drop the requirement on make
2017-12-14 16:26:05 +01:00
0ac4eaaf93
tests: add simple-rsapss-test
...
Signed-off-by: Miroslav Vadkerti <mvadkert@redhat.com>
2017-11-11 22:12:23 -05:00
8e2fdfb52a
Uploaded 1.1.0g sources.
2017-11-03 17:07:20 +01:00
e85d72778f
update to upstream version 1.1.0g
2017-11-03 16:57:03 +01:00
50c1418e79
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
2017-08-03 04:36:41 +00:00
c68da76796
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
2017-07-27 01:53:35 +00:00
790567dc64
make s_client and s_server work with -ssl3 option ( #1471783 )
2017-07-17 15:05:28 +02:00
f852080c72
perl dependency renamed to perl-interpreter < https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules >
2017-07-13 11:16:32 +02:00
7b595774f0
disable verification of all insecure hashes
2017-06-26 16:28:56 +02:00
226b42827c
make DTLS work ( #1462541 )
2017-06-23 17:04:24 +02:00
81258b6d2a
enable 3DES SSL ciphersuites, RC4 is kept disabled ( #1453066 )
2017-06-15 15:17:26 +02:00
6b68d87d06
only release thread-local key if we created it (from upstream) ( #1458775 )
2017-06-05 17:20:12 +02:00
1ff978b22e
update to upstream version 1.1.0f
...
SRP and GOST is now allowed, note that GOST support requires
adding GOST engine which is not part of openssl anymore
2017-06-02 15:32:15 +02:00
David Abdurachmanov
Tomas Mraz
Fedora Release Engineering
Igor Gnatenko
Miroslav Vadkerti
Petr Písař