rpms
/
openssl
2
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
521 Commits 35 Branches 198 Tags 8.3 MiB
Commit Graph

429 Commits

Author SHA1 Message Date
Tomas Mraz dad6e3ee78 fix build of manual pages with current pod2man (#959439) 2013-05-03 18:38:28 +02:00
Peter Robinson 6705192b85 Enable ARM optimised build 2013-04-21 14:33:34 +01:00
Tomas Mraz 64e30c5369 fix random bad record mac errors (#918981) 2013-03-18 21:34:18 +01:00
Tomas Mraz 9cf55df55b fix up the SHLIB_VERSION_NUMBER 2013-02-19 20:35:16 +01:00
Tomas Mraz 169c3a0ddb disable ZLIB loading by default (due to CRIME attack) 2013-02-19 16:41:14 +01:00
Tomas Mraz dc696fdac4 new upstream version 2013-02-19 13:57:39 +01:00
Tomas Mraz 0fd0958b75 more fixes from upstream 
- fix errors in manual causing build failure (#904777)
 2013-01-30 18:32:56 +01:00
Tomas Mraz 2ca16b9a24 Add the renew-dummy-cert script to file list 2012-12-21 17:38:32 +01:00
Tomas Mraz c67ea975b9 add script for renewal of a self-signed cert by Philip Prindeville (#871566) 
- allow X509_issuer_and_serial_hash() produce correct result in
  the FIPS mode (#881336)
 2012-12-21 17:21:50 +01:00
Tomas Mraz 07ac3d216e Fix bogus dates in changelog. 2012-12-07 12:37:49 +01:00
Tomas Mraz 650873ff0e do not load default verify paths if CApath or CAfile specified (#884305) 2012-12-06 18:30:15 +01:00
Tomas Mraz 12aab15a03 more fixes from upstream CVS 
- fix DSA key pairwise check (#878597)
 2012-11-20 22:33:42 +01:00
Tomas Mraz d8e7bfc73b Add the marker for required patch. 2012-11-19 17:43:07 +01:00
Tomas Mraz b7eb6f4a5f use 1024 bit DH parameters in s_server as 512 bit is not allowed 
in FIPS mode and it is quite weak anyway
 2012-11-15 21:11:36 +01:00
Tomas Mraz 79971bf194 Use secure_getenv() with new glibc. 2012-09-10 20:25:19 +02:00
Tomas Mraz c015bd1b1e add missing initialization of str in aes_ccm_init_key (#853963) 
- add important patches from upstream CVS
 2012-09-07 10:48:56 +02:00
Dennis Gilmore eaa5561c35 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild 2012-07-20 02:06:56 -05:00
Tomas Mraz af044b4037 use __getenv_secure() instead of __libc_enable_secure 2012-07-13 22:21:05 +02:00
Tomas Mraz 72a1bddddc do not move libcrypto to /lib 
- do not use environment variables if __libc_enable_secure is on
- fix strict aliasing problems in modes
 2012-07-13 14:30:31 +02:00
Tomas Mraz c2e3151786 do not move libcrypto to /lib 
- do not use environment variables if __libc_enable_secure is on
- fix strict aliasing problems in modes
 2012-07-13 14:23:34 +02:00
Tomas Mraz 55a3598cc7 fix DSA key generation in FIPS mode (#833866) 
- allow duplicate FIPS_mode_set(1)
- enable build on ppc64 subarch (#834652)
 2012-07-12 21:59:56 +02:00
Tomas Mraz 5183d32904 Make it build with new Perl 2012-07-12 00:35:57 +02:00
Tomas Mraz 18ccae20f6 fix s_server with new glibc when no global IPv6 address (#839031) 2012-07-12 00:04:06 +02:00
Tomas Mraz 5e74bace82 new upstream version 2012-05-15 19:40:22 +02:00
Tomas Mraz 651215c12b new upstream version 2012-05-15 19:37:55 +02:00
Tomas Mraz 5eb4589d83 new upstream version 2012-04-26 18:10:52 +02:00
Tomas Mraz 6a4bd67710 new upstream version fixing CVE-2012-2110 2012-04-20 12:30:37 +02:00
Tomas Mraz e8c18345a4 new upstream version fixing CVE-2012-2110 2012-04-20 12:24:39 +02:00
Tomas Mraz d46b44c249 add Kerberos 5 libraries to pkgconfig for static linking (#807050) 2012-04-11 16:33:03 +02:00
Tomas Mraz d7587a26b6 backports from upstream CVS 
fix segfault when /dev/urandom is not available (#809586)
 2012-04-05 19:56:49 +02:00
Tomas Mraz 0f0ab24176 new upstream release 2012-03-14 21:38:58 +01:00
Tomas Mraz 0aa7d61151 add obsoletes to assist multilib updates (#799636) 2012-03-05 10:51:13 +01:00
Tomas Mraz 00c4986d53 new upstream release from the 1.0.1 branch 
- epoch bumped to 1 due to revert to 1.0.0g on Fedora 17
- fix s390x build (#798411)
- versioning for the SSLeay symbol (#794950)
- add -DPURIFY to build flags (#797323)
- filter engine provides
- split the libraries to a separate -libs package
- add make to requires on the base package (#783446)
 2012-02-29 21:54:08 +01:00
Tomas Mraz ad05b50537 New upstream release from the 1.0.1 branch, ABI compatible 
- also add documentation for the -no_ign_eof option
 2012-02-07 13:46:42 +01:00
Tomas Mraz d91aea8890 new upstream release fixing CVE-2012-0050 - DoS regression in 
DTLS support introduced by the previous release (#782795)
 2012-01-19 16:48:48 +01:00
Peter Robinson 48bba71e16 mktemp was long obsoleted by coreutils 2012-01-11 10:41:37 +00:00
Tomas Mraz 628d7e4989 new upstream release fixing multiple CVEs 2012-01-05 15:14:10 +01:00
Tomas Mraz c28bd1cc5f Make the non-upstream tarball comment more clear. 2011-11-25 16:32:43 +01:00
Tomas Mraz 497f2d674c move the libraries needed for static linking to Libs.private 2011-11-22 11:53:40 +01:00
Tomas Mraz 6f65ffce68 do not use AVX instructions when osxsave bit not set 
add direct known answer tests for SHA2 algorithms
 2011-11-03 10:18:52 +01:00
Tomas Mraz e4008f0b0e fix missing initialization of variable in CHIL engine 2011-09-21 17:34:13 +02:00
Tomas Mraz 3447c41c99 new upstream release fixing CVE-2011-3207 (#736088) 2011-09-07 18:27:06 +02:00
Tomas Mraz 4c970c62c5 drop the separate engine for Intel acceleration improvements 
and merge in the AES-NI, SHA1, and RC4 optimizations
add support for OPENSSL_DISABLE_AES_NI environment variable
that disables the AES-NI support
 2011-08-24 13:12:33 +02:00
Tomas Mraz 0ed17c0652 correct openssl cms help output (#636266) 
more tolerant starttls detection in XMPP protocol (#608239)
 2011-07-26 13:02:17 +02:00
Tomas Mraz 5c4fc08e4d add support for newest Intel acceleration improvements backported 
from upstream by Intel in form of a separate engine
 2011-07-20 14:56:21 +02:00
Tomas Mraz f4fb8490a9 allow the AES-NI engine in the FIPS mode 2011-06-09 16:22:08 +02:00
Tomas Mraz 19062db533 add API necessary for CAVS testing of the new DSA parameter generation 2011-05-24 14:57:29 +02:00
Tomas Mraz 0b4cee3bc2 Allow easier rebuilds on some multilib arches. 2011-05-19 10:34:38 +02:00
Tomas Mraz 138493a921 add support for VIA Padlock on 64bit arch from upstream (#617539) 
do not return bogus values from load_certs (#652286)
 2011-04-28 21:58:56 +02:00
Tomas Mraz 8d20fec281 clarify apps help texts for available digest algorithms (#693858) 2011-04-05 21:24:01 +02:00
Tomas Mraz 1caf3ae072 - new upstream release fixing CVE-2011-0014 (OCSP stapling vulnerability) 2011-02-10 15:41:44 +01:00
Dennis Gilmore ccc6e6f1c6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild 2011-02-08 21:34:08 -06:00
Tomas Mraz 65ebbaecc7 - add -x931 parameter to openssl genrsa command to use the ANSI X9.31 
key generation method
- use FIPS-186-3 method for DSA parameter generation
- add OPENSSL_FIPS_NON_APPROVED_MD5_ALLOW environment variable
  to allow using MD5 when the system is in the maintenance state
  even if the /proc fips flag is on
- make openssl pkcs12 command work by default in the FIPS mode
 2011-02-04 15:27:28 +01:00
Tomas Mraz 15fad7109b - add -x931 parameter to openssl genrsa command to use the ANSI X9.31 
key generation method
- use FIPS-186-3 method for DSA parameter generation
- add OPENSSL_FIPS_NON_APPROVED_MD5_ALLOW environment variable
  to allow using MD5 when the system is in the maintenance state
  even if the /proc fips flag is on
 2011-02-04 15:14:18 +01:00
Tomas Mraz 09127ac54a - listen on ipv6 wildcard in s_server so we accept connections 
from both ipv4 and ipv6 (#601612)
- fix openssl speed command so it can be used in the FIPS mode
  with FIPS allowed ciphers
 2011-01-24 17:41:43 +01:00
Tomas Mraz 154f82b97d - new upstream version fixing CVE-2010-4180 2010-12-03 14:23:13 +01:00
Tomas Mraz 0a5657ab94 - replace the revert for the s390x bignum asm routines with 
fix from upstream
 2010-12-03 14:19:39 +01:00
Tomas Mraz 143a23a635 - bump release 2010-11-23 10:07:16 +01:00
Tomas Mraz 6e7d6d4dfd - replace the revert for the s390x bignum asm routines with 
fix from upstream
 2010-11-23 09:51:17 +01:00
Tomas Mraz 23675ff78b - revert upstream change in s390x bignum asm routines 2010-11-22 15:15:11 +01:00
Tomas Mraz 3ff2d49a83 - new upstream version fixing CVE-2010-3864 (#649304) 2010-11-16 18:21:39 +01:00
Tomas Mraz 17a6aec60b - make SHLIB_VERSION reflect the library suffix 2010-09-07 21:41:52 +02:00
Tomáš Mráz 56642f75b1 - openssl man page fix (#609484) 2010-06-30 12:36:47 +00:00
Tomáš Mráz 1b4b1eaf63 - new upstream patch release, fixes CVE-2010-0742 (#598738) and 
CVE-2010-1633 (#598732)
 2010-06-04 12:23:14 +00:00
Tomáš Mráz 6adf85458c - pkgconfig files now contain the correct libdir (#593723) 2010-05-19 15:39:13 +00:00
Tomáš Mráz ae0beee7db - make CA dir readable - the private keys are in private subdir (#584810) 2010-05-18 15:40:32 +00:00
Tomáš Mráz 290d51ec7f - make CA dir readable - the private keys are in private subdir (#584810) 2010-05-18 15:34:17 +00:00
Tomáš Mráz 3bdf494b4f - a few fixes from upstream CVS 
- move libcrypto to /lib (#559953)
 2010-04-09 15:25:39 +00:00
Tomáš Mráz 7325c65a3e - set UTC timezone on pod2man run (#578842) 
- make X509_NAME_hash_old work in FIPS mode
 2010-04-06 14:49:34 +00:00
Tomáš Mráz c2fc1058b4 - set UTC timezone on pod2man run (#578842) 2010-04-06 14:35:57 +00:00
Tomáš Mráz fa66cf4b52 - update to final 1.0.0 upstream release 2010-03-30 09:37:41 +00:00
Tomáš Mráz 7c4ab8ff8e - make TLS work in the FIPS mode 2010-02-16 23:21:07 +00:00
Tomáš Mráz bffe20438c - gracefully handle zero length in assembler implementations of 
OPENSSL_cleanse (#564029)
- do not fail in s_server if client hostname not resolvable (#561260)
 2010-02-12 17:20:50 +00:00
Tomáš Mráz ae5568515b - new upstream release 2010-01-21 08:12:12 +00:00
Tomáš Mráz 79249339a7 - fix CVE-2009-4355 - leak in applications incorrectly calling 
CRYPTO_free_all_ex_data() before application exit (#546707)
- upstream fix for future TLS protocol version handling
 2010-01-14 08:57:34 +00:00
Tomáš Mráz 7f0747ce73 - add support for Intel AES-NI 2010-01-13 09:21:02 +00:00
Tomáš Mráz 2d6ef07fa3 - upstream fix compression handling on session resumption 
- various null checks and other small fixes from upstream
- upstream changes for the renegotiation info according to the latest draft
 2010-01-07 22:43:57 +00:00
Tomáš Mráz 5845987ab4 - fix non-fips mingw build (patch by Kalev Lember) 
- add IPV6 fix for DTLS
 2009-11-23 07:54:08 +00:00
Tomáš Mráz c9026def03 - add better error reporting for the unsafe renegotiation 2009-11-20 17:30:27 +00:00
Tomáš Mráz 359f84cd81 - fix build on s390x 2009-11-20 09:27:16 +00:00
Tomáš Mráz 5b761f5986 - disable enforcement of the renegotiation extension on the client 
(#537962)
- add fixes from the current upstream snapshot
 2009-11-18 13:14:13 +00:00
Tomáš Mráz 982ac6e5f9 - keep the beta status in version number at 3 so we do not have to rebuild 
openssh and possibly other dependencies with too strict version check
 2009-11-13 12:11:41 +00:00
Tomáš Mráz a9fcedd3fb - keep the beta status in version number at 3 so we do not have to rebuild 
openssh and possibly other dependencies with too strict version check
 2009-11-13 11:45:07 +00:00
Tomáš Mráz 654ccf4a2f - add fix to compile on new binutils 2009-11-12 16:27:52 +00:00
Tomáš Mráz aabbc9ad89 - update to new upstream version, no soname bump needed 
- fix CVE-2009-3555 - note that the fix is bypassed if SSL_OP_ALL is used
    so the compatibility with unfixed clients is not broken. The protocol
    extension is also not final.
 2009-11-12 15:51:40 +00:00
Tomáš Mráz e0fe963bd1 - fix use of freed memory if SSL_CTX_free() is called before SSL_free() 
(#521342)
 2009-10-16 11:28:02 +00:00
Tomáš Mráz 1a303f4853 - fix typo in DTLS1 code (#527015) 
- fix leak in error handling of d2i_SSL_SESSION()
 2009-10-08 18:45:10 +00:00
Tomáš Mráz 75f7276f8b - fix RSA and DSA FIPS selftests 
- reenable fixed x86_64 camellia assembler code (#521127)
 2009-09-30 18:18:48 +00:00
Tomáš Mráz 2d8446ff1a - temporarily disable x86_64 camellia assembler code (#521127) 2009-09-04 12:08:42 +00:00
Tomáš Mráz c99976de43 - fix openssl dgst -dss1 (#520152) 2009-08-31 11:07:49 +00:00
Tomáš Mráz 9583cca278 - drop the compat symlink hacks 2009-08-26 15:50:36 +00:00
Tomáš Mráz e1c2b406a8 - constify SSL_CIPHER_description() 2009-08-22 14:38:34 +00:00
Tomáš Mráz 4d132a5c14 - fix WWW:Curl:Easy reference in tsget 2009-08-21 13:42:11 +00:00
Tomáš Mráz 5ff2efa4d0 - enable MD-2 2009-08-21 13:08:15 +00:00
Tomáš Mráz 2ccfa6b48f - update to new major upstream release 2009-08-20 14:20:57 +00:00
Tomáš Mráz 58b40a384a - update to new major upstream release 2009-08-20 14:18:42 +00:00
Jesse Keating 72586e9d99 - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild 2009-07-25 20:54:16 +00:00
Bill Nottingham d01d89f81d - do not build special 'optimized' versions for i686, as that's the base 
arch in Fedora now
 2009-07-22 15:57:43 +00:00
Tomáš Mráz 44abf9d002 - abort if selftests failed and random number generator is polled 
- mention EVP_aes and EVP_sha2xx routines in the manpages
- add README.FIPS
- make CA dir absolute path (#445344)
- change default length for RSA key generation to 2048 (#484101)
 2009-06-30 11:17:45 +00:00
Tomáš Mráz 387d98c6e7 - fix CVE-2009-1377 CVE-2009-1378 CVE-2009-1379 (DTLS DoS problems) 
(#501253, #501254, #501572)
 2009-05-21 16:30:42 +00:00
Tomáš Mráz 7723dd9040 - support compatibility DTLS mode for CISCO AnyConnect (#464629) 2009-04-21 10:05:11 +00:00
Tomáš Mráz e1c42b9abd - correct the SHLIB_VERSION define 2009-04-17 16:13:51 +00:00
Tomáš Mráz bb917d493c - add support for multiple CRLs with same subject 
- load only dynamic engine support in FIPS mode
 2009-04-15 14:36:54 +00:00
Tomáš Mráz a9e5f01ef5 - update to new upstream release (minor bug fixes, security fixes and 
machine code optimizations only)
 2009-03-25 21:12:41 +00:00
Tomáš Mráz a9567a4b21 - move only on 64bits 2009-03-19 11:03:16 +00:00
Tomáš Mráz 58f96a71e5 - move libraries to /usr/lib (#239375) 2009-03-19 10:31:41 +00:00
Tomáš Mráz 15d9ef2c72 - add a static subpackage 2009-03-13 13:10:33 +00:00
Jesse Keating 527ed75e65 - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild 2009-02-26 08:50:21 +00:00
Tomáš Mráz 07bd81ddaf - must also verify checksum of libssl.so in the FIPS mode 
- obtain the seed for FIPS rng directly from the kernel device
- drop the temporary symlinks
 2009-02-02 16:46:33 +00:00
Tomáš Mráz c7641abc30 - drop the temporary triggerpostun and symlinking in post 
- fix the pkgconfig files and drop the unnecessary buildrequires on
    pkgconfig as it is a rpmbuild dependency (#481419)
 2009-01-26 21:07:21 +00:00
Tomáš Mráz 919b2c6500 - add temporary triggerpostun to reinstate the symlinks 2009-01-17 20:49:48 +00:00
Tomáš Mráz 7e0fce6fea - add temporary triggerpostun to reinstate the symlinks 2009-01-17 20:48:44 +00:00
Tomáš Mráz 105eb2ce8f - no pairwise key tests in non-fips mode (#479817) 2009-01-17 19:31:29 +00:00
Tomáš Mráz ebd2901e1d - even more robust test for the temporary symlinks 2009-01-16 16:11:07 +00:00
Tomáš Mráz b33a50c5b2 - try to ensure the temporary symlinks exist 2009-01-16 13:02:42 +00:00
Tomáš Mráz 1d20b5f238 - new upstream version with necessary soname bump (#455753) 
- temporarily provide symlink to old soname to make it possible to rebuild
    the dependent packages in rawhide
- add eap-fast support (#428181)
- add possibility to disable zlib by setting
- add fips mode support for testing purposes
- do not null dereference on some invalid smime files
- add buildrequires pkgconfig (#479493)
 2009-01-15 09:10:25 +00:00
Tomáš Mráz f1fb664cb6 - rediff for no fuzz 2008-08-10 20:36:12 +00:00
Tomáš Mráz c59bdb11a0 - do not add tls extensions to server hello for SSLv3 either 2008-08-10 19:45:27 +00:00
jorton acba378bc3 - restore the touch -r for openssl.cnf 2008-06-02 11:31:55 +00:00
jorton 50e76b460a - remove reference to deleted source 2008-06-02 11:28:03 +00:00
jorton bb2baacca9 - move root CA bundle to ca-certificates package 2008-06-02 11:06:57 +00:00
Tomáš Mráz 2c01b19843 - fix CVE-2008-0891 - server name extension crash (#448492) 
- fix CVE-2008-1672 - server key exchange message omit crash (#448495)
 2008-05-28 15:52:21 +00:00
Tomáš Mráz 6e489d9c90 - release bump 2008-05-27 08:39:57 +00:00
Tomáš Mráz cc7d549a79 - super-H arch support 
- drop workaround for bug 199604 as it should be fixed in gcc-4.3
 2008-05-27 08:38:06 +00:00
Tom Callaway 3bbf540789 sparc handling 2008-05-20 15:16:15 +00:00
jorton dfabafc476 - update to new root CA bundle from mozilla.org (r1.45) 2008-03-10 10:45:36 +00:00
Jesse Keating d08968bcfa - Autorebuild for GCC 4.3 2008-02-20 05:36:13 +00:00
Tomáš Mráz 1181966c58 - rename required for build 2008-01-25 17:04:12 +00:00
Tomáš Mráz 5980c2800d - merge review fixes (#226220) 
- adjust the SHLIB_VERSION_NUMBER to reflect library name (#429846)
 2008-01-25 16:44:05 +00:00
Tomáš Mráz d8cd5c45d8 - set default paths when no explicit paths are set (#418771) 
- do not add tls extensions to client hello for SSLv3 (#422081)
 2007-12-13 17:16:43 +00:00
Tomáš Mráz 2a80bfda1d - enable some new crypto algorithms and features 
- add some more important bug fixes from openssl CVS
 2007-12-03 19:57:11 +00:00
Tomáš Mráz 139aecb45e - we have Dec now and not Nov 2007-12-03 15:26:28 +00:00
Tomáš Mráz 3849a1678a - update to latest upstream release, SONAME bumped to 7 2007-12-03 14:24:08 +00:00
jorton 6427162702 - update to new CA bundle from mozilla.org 2007-10-15 15:20:47 +00:00
Tomáš Mráz 873b8d554b - fix CVE-2007-5135 - off-by-one in SSL_get_shared_ciphers (#309801) 
- fix CVE-2007-4995 - out of order DTLS fragments buffer overflow (#321191)
- add alpha sub-archs (#296031)
 2007-10-12 12:17:08 +00:00
Tomáš Mráz 65e6d90529 - fix CVE-2007-5135 - off-by-one in SSL_get_shared_ciphers (#309801) 
- fix CVE-2007-4995 - out of order DTLS fragments buffer overflow (#321191)
- add alpha sub-archs (#296031)
 2007-10-12 12:16:00 +00:00
Tomáš Mráz 568fd16a03 - rebuild 2007-08-21 19:42:52 +00:00
Tomáš Mráz aa64c417f5 - use localhost in testsuite, hopefully fixes slow build in koji 
- CVE-2007-3108 - fix side channel attack on private keys (#250577)
- make ssl session cache id matching strict (#233599)
 2007-08-03 12:16:54 +00:00
Tomáš Mráz b191bc7a11 - allow building on ARM architectures (#245417) 
- use reference timestamps to prevent multilib conflicts (#218064)
- -devel package must require pkgconfig (#241031)
 2007-07-25 13:37:15 +00:00
Tomáš Mráz fba756feb1 - detect duplicates in add_dir properly (#206346) 2006-12-11 19:46:13 +00:00
Tomáš Mráz 4ca06fa547 - the previous change still didn't make X509_NAME_cmp transitive 2006-11-30 23:10:43 +00:00
Tomáš Mráz f0fb64db28 - make X509_NAME_cmp transitive otherwise certificate lookup is broken 
(#216050)
- Resolves: rhbz#216050
 2006-11-23 20:38:24 +00:00
Tomáš Mráz a99897e811 - aliasing bug in engine loading, patch by IBM (#213216) 2006-11-02 21:16:00 +00:00
Tomáš Mráz 98d8457650 - CVE-2006-2940 fix was incorrect (#208744) 2006-10-02 08:37:59 +00:00
Tomáš Mráz 6dc7017559 - fix CVE-2006-2937 - mishandled error on ASN.1 parsing (#207276) 
- fix CVE-2006-2940 - parasitic public keys DoS (#207274)
- fix CVE-2006-3738 - buffer overflow in SSL_get_shared_ciphers (#206940)
- fix CVE-2006-4343 - sslv2 client DoS (#206940)
 2006-09-28 19:59:16 +00:00
Tomáš Mráz cd294fcd2a - fix CVE-2006-2937 - mishandled error on ASN.1 parsing (#207276) 
- fix CVE-2006-2940 - parasitic public keys DoS (#207274)
- fix CVE-2006-3738 - buffer overflow in SSL_get_shared_ciphers (#206940)
- fix CVE-2006-4343 - sslv2 client DoS (#206940)
 2006-09-28 19:58:49 +00:00
Tomáš Mráz ba40f6bb66 - fix CVE-2006-4339 - prevent attack on PKCS#1 v1.5 signatures (#205180) 2006-09-05 13:44:39 +00:00
Tomáš Mráz 2020821670 - set buffering to none on stdio/stdout FILE when bufsize is set (#200580) 
patch by IBM
 2006-08-02 18:18:43 +00:00
aoliva c1d3bf9a12 - rebuild with new binutils (#200330) 2006-07-29 02:54:33 +00:00
Tomáš Mráz e9887c37ef - add a temporary workaround for sha512 test failure on s390 (#199604) 2006-07-21 08:28:43 +00:00
Tomáš Mráz 4d4d77e68c - add ipv6 support to s_client and s_server (by Jan Pazdziora) (#198737) 
- add patches for BN threadsafety, AES cache collision attack hazard fix
    and pkcs7 code memleak fix from upstream CVS
 2006-07-20 12:58:48 +00:00
Jesse Keating a362beea0e bumped for rebuild 2006-07-12 07:35:49 +00:00
Tomáš Mráz 6b8c7ea159 - dropped libica and ica engine from build 2006-06-21 21:14:05 +00:00
jorton 24c8087012 - update to new CA bundle from mozilla.org; adds CA certificates from 
netlock.hu and startcom.org
 2006-06-21 12:49:44 +00:00
Tomáš Mráz 810d3c4e49 - add export 2006-06-06 12:03:44 +00:00
Tomáš Mráz 50ec471f0f - libica: add path to openssl headers for compilation in mock 2006-06-06 10:51:31 +00:00
Tomáš Mráz 499412dfe4 - fixed a few rpmlint warnings 
- better fix for #173399 from upstream
- upstream fix for pkcs12
 2006-06-05 13:55:51 +00:00
Tomáš Mráz 340dc6a41e - there is no more linux/config.h (it was empty anyway) 2006-05-11 12:21:42 +00:00
Tomáš Mráz bf80fa7d8e - upgrade to new version, stays ABI compatible 2006-05-11 11:52:19 +00:00
Tomáš Mráz 6f11ea3f44 - fix stale open handles in libica (#177155) 
- fix build if 'rand' or 'passwd' in buildroot path (#178782)
- initialize VIA Padlock engine (#186857)
 2006-04-04 17:45:56 +00:00
Jesse Keating 8c34b0921c bump for bug in double-long on ppc(64) 2006-02-11 04:53:59 +00:00
Jesse Keating 95579342d3 bump for new gcc/glibc 2006-02-07 13:22:17 +00:00
Tomáš Mráz f1d9cb4f96 - don't include SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG in SSL_OP_ALL 
(#175779)
 2005-12-15 10:45:33 +00:00
Jesse Keating 6a4a9c2005 gcc update bump 2005-12-09 22:42:35 +00:00
Tomáš Mráz feb192463e - fix build (-lcrypto was erroneusly dropped) of the updated libica 
- updated ICA engine to 1.3.6-rc3
 2005-11-29 11:52:11 +00:00
Tomáš Mráz eba5bcbbc4 - disable builtin compression methods for now until they work properly 
(#173399)
 2005-11-22 15:36:57 +00:00
Tomáš Mráz 20e19070fe - don't set -rpath for openssl binary 2005-11-16 21:45:59 +00:00
Tomáš Mráz e96bebc853 - new upstream version 
- patches partially renumbered
 2005-11-08 13:52:29 +00:00
Tomáš Mráz 2099136c66 - updated IBM ICA engine library and patch to latest upstream version 2005-10-21 13:48:38 +00:00
Tomáš Mráz b073820eb5 - fix CAN-2005-2969 - remove SSL_OP_MSIE_SSLV2_RSA_PADDING which disables 
the countermeasure against man in the middle attack in SSLv2 (#169863)
- use sha1 as default for CA and cert requests - CAN-2005-2946 (#169803)
 2005-10-12 12:01:16 +00:00
Tomáš Mráz 86877cdfc8 - add *.so.soversion as symlinks in /lib (#165264) 
- remove unpackaged symlinks (#159595)
- fixes from upstream (constant time fixes for DSA, bn assembler div on ppc
    arch, initialize memory on realloc)
 2005-08-23 15:28:52 +00:00
Phil Knirsch 95f9154b19 - Updated ICA engine IBM patch to latest upstream version. 2005-08-11 10:16:19 +00:00
Karsten Hopp 655f2e498a make it build with current rpm - remove symlinks 2005-08-03 13:30:46 +00:00
Tomáš Mráz 784dc22c4c - fix CAN-2005-0109 - use constant time/memory access mod_exp so bits of 
private key aren't leaked by cache eviction (#157631)
- a few more fixes from upstream 0.9.7g
 2005-05-19 09:17:54 +00:00
Tomáš Mráz 4e6a921995 - use poll instead of select in rand (#128285) 
- fix Makefile.certificate to point to /etc/pki/tls
- change the default string mask in ASN1 to PrintableString+UTF8String
 2005-04-27 10:48:43 +00:00
jorton 9c01f4a254 - update to revision 1.37 of Mozilla CA bundle 2005-04-25 09:06:16 +00:00
Tomáš Mráz 79f559a35a - move certificates to _sysconfdir/pki/tls (#143392) 
- move CA directories to _sysconfdir/pki/CA
- patch the CA script and the default config so it points to the CA
    directories
 2005-04-21 20:22:55 +00:00
Tomáš Mráz 1d982a09cd - uninitialized variable mustn't be used as input in inline assembly 
- reenable the x86_64 assembly again
 2005-04-01 16:19:34 +00:00
Tomáš Mráz d9b56b6f14 - add back RC4_CHAR on ia64 and x86_64 so the ABI isn't broken 
- disable broken bignum assembly on x86_64
 2005-03-31 19:41:28 +00:00
Tomáš Mráz c9c6ff6b15 - added support for changing serial number to Makefile.certificate 
(#151188)
- make ca-bundle.crt a config file (#118903)
 2005-03-30 10:52:21 +00:00
Tomáš Mráz 632ff532b1 - reenable optimizations on ppc64 
- enable assembly code on ia64
- upgrade to new upstream version (no soname bump needed)
- disable thread test - it was testing the backport of the RSA blinding -
    no longer needed
 2005-03-30 09:14:37 +00:00
Tomáš Mráz d551f917f3 - libcrypto shouldn't depend on libkrb5 (#135961) 2005-03-02 00:41:20 +00:00
Tomáš Mráz 0448422a83 - rebuild 
Mon Feb 28 2005 Tomas Mraz <tmraz@redhat.com> 0.9.7e-1
- new upstream source, updated patches
- added patch so we are hopefully ABI compatible with upcoming
0.9.7f
 2005-02-28 21:50:14 +00:00
Tomáš Mráz 50c4819563 - pkconfig file doesn't need to be executable 2005-02-10 10:03:14 +00:00
Tomáš Mráz e809e73a39 - Support UTF-8 charset in the Makefile.certificate (#134944) 
- Added cmp to BuildPrereq
 2005-02-10 09:26:39 +00:00
jorton 125b1331bf - generate new ca-bundle.crt from Mozilla certdata.txt (revision 1.32) 2005-01-27 09:35:36 +00:00
Phil Knirsch 7c24d1778f - Fixed and updated libica-1.3.4-urandom.patch patch (#122967) 2004-12-23 14:30:10 +00:00
Nalin Dahyabhai c07f22f83d fix CAN-2004-0975 by removing der_chop 2004-11-19 20:14:52 +00:00
Phil Knirsch 33c00b2e3d - Had to add a libtoolize --copy --force for libica... 2004-10-05 12:52:50 +00:00
Phil Knirsch f577c55009 - Include latest libica version with important bugfixes. 2004-10-05 12:41:13 +00:00
cvsdist acf96bd04c auto-import changelog data from openssl-0.9.7a-39.src.rpm 
Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com>
- rebuilt
 2004-09-09 09:51:03 +00:00
cvsdist 3db75bb9db auto-import changelog data from openssl-0.9.7a-38.src.rpm 
Mon Jun 14 2004 Phil Knirsch <pknirsch@redhat.com> 0.9.7a-38
- Updated ICA engine IBM patch to latest upstream version.
 2004-09-09 09:50:54 +00:00
cvsdist 566a67e439 auto-import changelog data from openssl-0.9.7a-37.src.rpm 
Mon Jun 07 2004 Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-37
- build for linux-alpha-gcc instead of alpha-gcc on alpha (Jeff Garzik)
 2004-09-09 09:50:33 +00:00
cvsdist c7b9ffb47e auto-import changelog data from openssl-0.9.7a-36.src.rpm 
Tue May 25 2004 Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-36
- handle %{_arch}=i486/i586/i686/athlon cases in the intermediate header
    (#124303)
 2004-09-09 09:50:13 +00:00
cvsdist 80904fbc6f auto-import changelog data from openssl-0.9.7a-35.src.rpm 
Thu Mar 25 2004 Joe Orton <jorton@redhat.com> 0.9.7a-35
- add security fixes for CAN-2004-0079, CAN-2004-0112
 2004-09-09 09:49:42 +00:00
cvsdist b966cc9f0d auto-import openssl-0.9.7a-34 from openssl-0.9.7a-34.src.rpm 2004-09-09 09:49:16 +00:00
cvsdist c79d114687 auto-import openssl-0.9.7a-26 from openssl-0.9.7a-26.src.rpm 2004-09-09 09:47:19 +00:00
cvsdist ee71aae33b auto-import openssl-0.9.7a-23 from openssl-0.9.7a-23.src.rpm 2004-09-09 09:46:50 +00:00
cvsdist 7eff254795 auto-import changelog data from openssl-0.9.7a-20.2.src.rpm 
Wed Mar 17 2004 Joe Orton <jorton@redhat.com> 0.9.7a-20.2
- pull in fix for libssl link line (Tim Waugh, #111154)
 2004-09-09 09:46:10 +00:00
cvsdist b1b6b03b8a auto-import changelog data from openssl-0.9.7a-20.1.src.rpm 
Mon Mar 08 2004 Joe Orton <jorton@redhat.com> 0.9.7a-20.1
- add security fixes for CAN-2004-0079, CAN-2004-0112
- updated ca-bundle.crt: removed expired GeoTrust roots, added freessl.com
    root, removed trustcenter.de Class 0 root
 2004-09-09 09:46:04 +00:00
cvsdist 321fa67e1c auto-import changelog data from openssl-0.9.7a-20.src.rpm 
Wed Sep 24 2003 Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-20
- only parse a client cert if one was requested
- temporarily exclusivearch for %{ix86}
Tue Sep 23 2003 Nalin Dahyabhai <nalin@redhat.com>
- add security fixes for protocol parsing bugs (CAN-2003-0543,
    CAN-2003-0544) and heap corruption (CAN-2003-0545)
- update RHNS-CA-CERT files
- ease back on the number of threads used in the threading test
Wed Sep 17 2003 Matt Wilson <msw@redhat.com> 0.9.7a-19
- rebuild to fix gzipped file md5sums (#91211)
Mon Aug 25 2003 Phil Knirsch <pknirsch@redhat.com> 0.9.7a-18
- Updated libica to version 1.3.4.
Thu Jul 17 2003 Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-17
- rebuild
Tue Jul 15 2003 Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-10.9
- free the kssl_ctx structure when we free an SSL structure (#99066)
Thu Jul 10 2003 Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-16
- rebuild
Thu Jul 10 2003 Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-15
- lower thread test count on s390x
Tue Jul 08 2003 Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-14
- rebuild
Thu Jun 26 2003 Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-13
- disable assembly on arches where it seems to conflict with threading
Thu Jun 26 2003 Phil Knirsch <pknirsch@redhat.com> 0.9.7a-12
- Updated libica to latest upstream version 1.3.0
 2004-09-09 09:45:46 +00:00
cvsdist 5b50ae8c7b auto-import openssl-0.9.7a-5 from openssl-0.9.7a-5.src.rpm 2004-09-09 09:45:40 +00:00
cvsdist e32c11245f auto-import openssl-0.9.7a-2 from openssl-0.9.7a-2.src.rpm 2004-09-09 09:45:17 +00:00
cvsdist 37242e4c03 auto-import openssl-0.9.6b-33 from openssl-0.9.6b-33.src.rpm 2004-09-09 09:44:16 +00:00
cvsdist 752071189c auto-import openssl-0.9.6b-31 from openssl-0.9.6b-31.src.rpm 2004-09-09 09:43:14 +00:00
cvsdist f61874de47 auto-import openssl-0.9.6b-29 from openssl-0.9.6b-29.src.rpm 2004-09-09 09:43:05 +00:00
cvsdist ceaa16a863 auto-import openssl-0.9.6b-26 from openssl-0.9.6b-26.src.rpm 2004-09-09 09:42:18 +00:00
cvsdist cc6067e931 auto-import openssl-0.9.6b-24 from openssl-0.9.6b-24.src.rpm 2004-09-09 09:42:01 +00:00
cvsdist 0cfdac5c04 auto-import openssl-0.9.6b-18 from openssl-0.9.6b-18.src.rpm 2004-09-09 09:41:24 +00:00
cvsdist c7ee7e96b0 auto-import openssl-0.9.6b-16 from openssl-0.9.6b-16.src.rpm 2004-09-09 09:40:48 +00:00
cvsdist 4f250d3986 auto-import openssl-0.9.6b-15 from openssl-0.9.6b-15.src.rpm 2004-09-09 09:40:40 +00:00
cvsdist 90f01cc0d2 auto-import openssl-0.9.6b-8 from openssl-0.9.6b-8.src.rpm 2004-09-09 09:39:52 +00:00
cvsdist 90fa5b2444 auto-import openssl-0.9.6b-7 from openssl-0.9.6b-7.src.rpm 2004-09-09 09:39:48 +00:00
cvsdist 125a5b2f29 auto-import openssl-0.9.6b-6 from openssl-0.9.6b-6.src.rpm 2004-09-09 09:39:30 +00:00
cvsdist 8c3ec75004 auto-import openssl-0.9.6b-5 from openssl-0.9.6b-5.src.rpm 2004-09-09 09:39:26 +00:00
cvsdist 0d16b0bd39 auto-import openssl-0.9.6b-4 from openssl-0.9.6b-4.src.rpm 2004-09-09 09:39:14 +00:00
cvsdist 107c5de8ec auto-import openssl-0.9.6b-3 from openssl-0.9.6b-3.src.rpm 2004-09-09 09:39:08 +00:00
cvsdist c150e6469f auto-import changelog data from openssl-0.9.6-16.0p.src.rpm 
Thu Jun 19 2003 Guy Streeter <streeter@redhat.com> 0.9.6-16.0p
- build at -O1 for broken 7.1 ppc compiler
 2004-09-09 09:38:46 +00:00
cvsdist 840a8b5bb7 auto-import changelog data from openssl-0.9.6-16.src.rpm 
Wed Mar 19 2003 Nalin Dahyabhai <nalin@redhat.com> 0.9.6-16
- add backported patch to harden against Klima-Pokorny-Rosa extension of
    Bleichenbacher's attack (CAN-2003-0131)
Mon Mar 17 2003 Nalin Dahyabhai <nalin@redhat.com> 0.9.6-15
- add patch to enable RSA blinding by default, closing a timing attack
    (CAN-2003-0147)
Wed Feb 19 2003 Nalin Dahyabhai <nalin@redhat.com> 0.9.6-14
- add fix to guard against attempts to allocate negative amounts of memory
- add patch for CAN-2003-0078, fixing a timing attack
 2004-09-09 09:38:38 +00:00
cvsdist 4d0009045f auto-import changelog data from openssl-0.9.6-13.0p.src.rpm 
Fri Aug 02 2002 Nalin Dahyabhai <nalin@redhat.com> 0.9.6-13
- update asn patch to fix accidental reversal of a logic check
 2004-09-09 09:37:51 +00:00
cvsdist aa4a1b3eb5 auto-import changelog data from openssl-0.9.6-13.src.rpm 
Thu Aug 01 2002 Nalin Dahyabhai <nalin@redhat.com> 0.9.6-13
- update asn patch to fix accidental reversal of a logic check
Wed Jul 31 2002 Nalin Dahyabhai <nalin@redhat.com> 0.9.6-12
- update asn patch to reduce chance that compiler optimization will remove
    one of the added tests
Mon Jul 29 2002 Nalin Dahyabhai <nalin@redhat.com> 0.9.6-11
- add patch to fix ASN.1 vulnerabilities
 2004-09-09 09:37:25 +00:00
cvsdist a3b5b01481 auto-import changelog data from openssl-0.9.6-10.src.rpm 
Thu Jul 25 2002 Nalin Dahyabhai <nalin@redhat.com> 0.9.6-10
- add backport of Ben Laurie's patches for OpenSSL 0.9.6d
 2004-09-09 09:37:11 +00:00
cvsdist 4a904e2846 auto-import changelog data from openssl-0.9.6-9.71.0sx.src.rpm 
Fri Jan 25 2002 David Sainty <dsainty@redhat.com>
- s390x support added in redhatx patch (renamed redhat patch) and spec.
 2004-09-09 09:36:41 +00:00
cvsdist 9673719c43 auto-import changelog data from openssl-0.9.6-9.1ppc.src.rpm 
Thu Jul 12 2001 Nalin Dahyabhai <nalin@redhat.com>
- add patches to fix PRNG flaws, supplied by Bodo Moeller and the OpenSSL
    Group
 2004-09-09 09:36:25 +00:00
cvsdist 00ff72af4a auto-import changelog data from openssl-0.9.6-9.src.rpm 
Wed Jul 11 2001 Nalin Dahyabhai <nalin@redhat.com>
- add patches to fix PRNG flaws, supplied by Bodo Moeller and the OpenSSL
    Group
 2004-09-09 09:36:18 +00:00
cvsdist b1963909d4 auto-import changelog data from openssl-0.9.6-8.src.rpm 
Fri Jun 01 2001 Nalin Dahyabhai <nalin@redhat.com>
- change two memcpy() calls to memmove()
Sun May 27 2001 Philip Copeland <bryce@redhat.com>
- Removed -DL_ENDIAN for the alpha builds as unsigned long = 8 not 4 which
    both L_ENDIAN / B_ENDIAN require to work correctly
Tue May 15 2001 Nalin Dahyabhai <nalin@redhat.com>
- make subpackages depend on the main package
Thu Apr 26 2001 Nalin Dahyabhai <nalin@redhat.com>
- rebuild
Fri Apr 20 2001 Nalin Dahyabhai <nalin@redhat.com>
- use __libc_enable_secure in OPENSSL_setugid (suggested by
    solar@openwall.com)
- make backported OPENSSL_setugid, BN_bntest_rand, and BN_rand_range static
    functions, which keeps them away from client applications more cleanly
Tue Apr 17 2001 Nalin Dahyabhai <nalin@redhat.com>
- backport security fixes from 0.9.6a
 2004-09-09 09:35:56 +00:00
cvsdist 821b825f3f auto-import changelog data from openssl-0.9.6-3.src.rpm 
Tue Mar 13 2001 Nalin Dahyabhai <nalin@redhat.com>
- use BN_LLONG on s390
Mon Mar 12 2001 Nalin Dahyabhai <nalin@redhat.com>
- fix the s390 changes for 0.9.6 (isn't supposed to be marked as 64-bit)
Sat Mar 03 2001 Nalin Dahyabhai <nalin@redhat.com>
- move c_rehash to the perl subpackage, because it's a perl script now
Fri Mar 02 2001 Nalin Dahyabhai <nalin@redhat.com>
- update to 0.9.6
- enable MD2
- use the libcrypto.so and libssl.so targets to build shared libs with
- bump the soversion to 1 because we're no longer compatible with any of
    the various 0.9.5a packages circulating around, which provide lib*.so.0
Wed Feb 28 2001 Florian La Roche <Florian.LaRoche@redhat.de>
- change hobble-openssl for disabling MD2 again
Tue Feb 27 2001 Nalin Dahyabhai <nalin@redhat.com>
- re-disable MD2 -- the EVP_MD_CTX structure would grow from 100 to 152
    bytes or so, causing EVP_DigestInit() to zero out stack variables in
    apps built against a version of the library without it
Mon Feb 26 2001 Nalin Dahyabhai <nalin@redhat.com>
- disable some inline assembly, which on x86 is Pentium-specific
- re-enable MD2 (see http://www.ietf.org/ietf/IPR/RSA-MD-all)
Thu Feb 08 2001 Florian La Roche <Florian.LaRoche@redhat.de>
- fix s390 patch
Fri Dec 08 2000 Than Ngo <than@redhat.com>
- added support s390
Mon Nov 20 2000 Nalin Dahyabhai <nalin@redhat.com>
- remove -Wa,* and -m* compiler flags from the default Configure file
    (#20656)
- add the CA.pl man page to the perl subpackage
Thu Nov 02 2000 Nalin Dahyabhai <nalin@redhat.com>
- always build with -mcpu=ev5 on alpha
Tue Oct 31 2000 Nalin Dahyabhai <nalin@redhat.com>
- add a symlink from cert.pem to ca-bundle.crt
Wed Oct 25 2000 Nalin Dahyabhai <nalin@redhat.com>
- add a ca-bundle file for packages like Samba to reference for CA
    certificates
Tue Oct 24 2000 Nalin Dahyabhai <nalin@redhat.com>
- remove libcrypto's crypt(), which doesn't handle md5crypt (#19295)
Mon Oct 02 2000 Nalin Dahyabhai <nalin@redhat.com>
- add unzip as a buildprereq (#17662)
- update m2crypto to 0.05-snap4
 2004-09-09 09:35:41 +00:00
cvsdist def39f16e5 auto-import changelog data from openssl-0.9.5a-17.src.rpm 
Tue Sep 26 2000 Bill Nottingham <notting@redhat.com>
- fix some issues in building when it's not installed
 2004-09-09 09:35:12 +00:00
cvsdist e21e1846a7 auto-import changelog data from openssl-0.9.5a-14.src.rpm 
Thu Sep 21 2000 Nalin Dahyabhai <nalin@redhat.com>
- tweak the makefile some more
- disable MD2 support
- disable MDC2 support
- tweak the makefile
- rework certificate makefile to have the right parts for Apache
- strip binaries and libraries
- enable actual RSA support
- use /usr/bin/perl instead of /usr/bin/perl
- move the passwd.1 man page out of the passwd package's way
- update to 0.9.5a, modified for U.S.
- add perl as a build-time requirement
- disable RC5, IDEA support
- break out python extensions
- byte-compile python extensions without the build-root
- adjust the makefile to not remove temporary files (like .key files when
    building .csr files)
- fix the building of python modules without openssl-devel already
    installed
Wed Mar 01 2000 Florian La Roche <Florian.LaRoche@redhat.de>
- Bero told me to move the Makefile into this package
Wed Mar 01 2000 Florian La Roche <Florian.LaRoche@redhat.de>
- add lib*.so symlinks to link dynamically against shared libs
Tue Feb 29 2000 Florian La Roche <Florian.LaRoche@redhat.de>
- update to 0.9.5
- run ldconfig directly in post/postun
- add FAQ
Sat Dec 18 1999 Bernhard Rosenkränzer <bero@redhat.de>
- Fix build on non-x86 platforms
Fri Nov 12 1999 Bernhard Rosenkränzer <bero@redhat.de>
- move /usr/share/ssl/* from -devel to main package
Tue Oct 26 1999 Bernhard Rosenkränzer <bero@redhat.de>
- inital packaging
- changes from base:
- Move /usr/local/ssl to /usr/share/ssl for FHS compliance
- handle RPM_OPT_FLAGS
 2004-09-09 09:35:06 +00:00