Commit Graph

442 Commits

Author SHA1 Message Date
David Abdurachmanov 8078616a9d
Merge commit '9189f03055d4d55949fb897a1049b800327a312f' into master-riscv64
Signed-off-by: David Abdurachmanov <david.abdurachmanov@gmail.com>
2018-07-26 17:16:44 +02:00
Tomas Mraz 9189f03055 update to the latest 1.1.1 beta version 2018-07-25 18:15:19 +02:00
Fedora Release Engineering 7f74f219f1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2018-07-13 15:12:04 +00:00
Tomas Mraz 5ec63a5ce1 The hack is needed only on some architectures. 2018-06-19 18:39:17 +02:00
Tomas Mraz 86c97f4f4b Make the afalg engine build.
There is a conflict in some types between glibc and linux headers.
Adding a hack to avoid it.
2018-06-19 16:58:06 +02:00
Tomas Mraz 98bbad839c fix FIPS RSA key generation failure 2018-06-19 16:05:15 +02:00
Tomas Mraz 357b7a7e37 ppc64le is not multilib arch (#1584994) 2018-06-04 12:24:19 +02:00
David Abdurachmanov 2e9a37afa3 Fix typo in %ifarch
Signed-off-by: David Abdurachmanov <david.abdurachmanov@gmail.com>
2018-05-09 17:28:10 +02:00
David Abdurachmanov 366634ae28 Add --libdir=%{_lib} for riscv64
We need this because there is no riscv64 specific configuration which
would set multilib to 64. It should be easy to write one and send to
the upstream.

Signed-off-by: David Abdurachmanov <david.abdurachmanov@gmail.com>
2018-05-09 12:18:40 +02:00
Tomas Mraz 73ef787803 renew-dummy-cert: Fix long serial number renewal problem.
Do not try to increment the serial number, use long random one instead.
2018-05-04 09:17:27 +02:00
Tomas Mraz 5d5075d4c9 Fix mistake in the FIPS RSA keygen causing key generation failures. 2018-04-05 16:46:28 +02:00
Tomas Mraz 08db5cbcb9 fix regression of c_rehash (#1562953) 2018-04-03 13:03:32 +02:00
Tomas Mraz 5a93773172 fix FIPS symbol versions 2018-03-29 18:13:54 +02:00
Tomas Mraz c6d0704d87 Add missing build dependencies. 2018-03-29 16:40:14 +02:00
Tomas Mraz 6eb8f62027 update to upstream version 1.1.0h
Add Recommends for openssl-pkcs11
2018-03-29 15:44:09 +02:00
Tomas Mraz 6d92af0099 one more try to apply RPM_LD_FLAGS properly (#1541033)
dropped unneeded starttls xmpp patch (#1417017)
2018-02-23 17:01:58 +01:00
Igor Gnatenko e688115b6d
Remove %clean section
None of currently supported distributions need that.
Last one was EL5 which is EOL for a while.

Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
2018-02-14 09:56:41 +01:00
Fedora Release Engineering 3a05f1f46a - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2018-02-08 17:49:45 +00:00
Tomas Mraz c11b1341c5 apply RPM_LD_FLAGS properly (#1541033) 2018-02-01 18:07:30 +01:00
Tomas Mraz 899f2baacb silence the .rnd write failure as that is auxiliary functionality (#1524833) 2018-01-11 18:08:54 +01:00
Tomas Mraz f20f5f466f put the Makefile.certificate in pkgdocdir and drop the requirement on make 2017-12-14 16:26:05 +01:00
Miroslav Vadkerti 0ac4eaaf93 tests: add simple-rsapss-test
Signed-off-by: Miroslav Vadkerti <mvadkert@redhat.com>
2017-11-11 22:12:23 -05:00
Tomas Mraz 8e2fdfb52a Uploaded 1.1.0g sources. 2017-11-03 17:07:20 +01:00
Tomas Mraz e85d72778f update to upstream version 1.1.0g 2017-11-03 16:57:03 +01:00
Fedora Release Engineering 50c1418e79 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild 2017-08-03 04:36:41 +00:00
Fedora Release Engineering c68da76796 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild 2017-07-27 01:53:35 +00:00
Tomas Mraz 790567dc64 make s_client and s_server work with -ssl3 option (#1471783) 2017-07-17 15:05:28 +02:00
Petr Písař f852080c72 perl dependency renamed to perl-interpreter <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules> 2017-07-13 11:16:32 +02:00
Tomas Mraz 7b595774f0 disable verification of all insecure hashes 2017-06-26 16:28:56 +02:00
Tomas Mraz 226b42827c make DTLS work (#1462541) 2017-06-23 17:04:24 +02:00
Tomas Mraz 81258b6d2a enable 3DES SSL ciphersuites, RC4 is kept disabled (#1453066) 2017-06-15 15:17:26 +02:00
Tomas Mraz 6b68d87d06 only release thread-local key if we created it (from upstream) (#1458775) 2017-06-05 17:20:12 +02:00
Tomas Mraz 1ff978b22e update to upstream version 1.1.0f
SRP and GOST is now allowed, note that GOST support requires
  adding GOST engine which is not part of openssl anymore
2017-06-02 15:32:15 +02:00
Tomas Mraz c676ac32d5 update to upstream version 1.1.0e
add documentation of the PROFILE=SYSTEM special cipher string (#1420232)
2017-02-16 16:59:27 +01:00
Fedora Release Engineering f6b0040c3e - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild 2017-02-11 00:58:36 +00:00
Tomas Mraz d00e0a5904 applied upstream fixes (fix regression in X509_CRL_digest) 2017-02-01 15:56:59 +01:00
Tomas Mraz c144665042 update to upstream version 1.1.0d 2017-01-26 16:24:24 +01:00
Tomas Mraz fe449cd23c preserve new line in fd BIO BIO_gets() as other BIOs do 2016-12-22 14:40:28 +01:00
Tomas Mraz 836560b322 FIPS mode fixes for TLS 2016-12-02 17:32:17 +01:00
Tomas Mraz 21909a4d4c Add missing part of the asynciotest patch. 2016-11-30 15:54:12 +01:00
Tomas Mraz 3a8593870a apply properly revert SSL_read() behavior change - patch from upstream (#1394677)
- fix behavior on client certificate request in renegotiation (#1393579)
2016-11-30 14:29:59 +01:00
Tomas Mraz e443a79334 Add back EC NIST P-224 and revert SSL_read() change
- revert SSL_read() behavior change - patch from upstream (#1394677)
- EC curve NIST P-224 is now allowed, still kept disabled in TLS due
  to less than optimal security
2016-11-22 10:39:55 +01:00
Tomas Mraz be56ae067b update to upstream version 1.1.0c 2016-11-11 14:47:36 +01:00
Peter Lemenkov a416cba2f4 Remove duplicated strings from hobble-openssl
Signed-off-by: Peter Lemenkov <lemenkov@gmail.com>
2016-11-07 17:46:23 +01:00
Tomas Mraz 648a4e2db0 Remove unused prototype. 2016-11-04 15:36:21 +01:00
Tomas Mraz f655917cf7 use a random seed if the supplied one did not generate valid
parameters in dsa_builtin_paramgen2()
2016-11-04 12:10:01 +01:00
Tomas Mraz c7fc8d6daa do not break contract on return value when using dsa_builtin_paramgen2() 2016-10-17 13:06:36 +02:00
Tomas Mraz d2220322f3 fix afalg failure on big endian 2016-10-12 14:47:08 +02:00
Tomas Mraz 0e04498302 One more attempt at fixing the aarch64 build. 2016-10-11 11:25:21 +02:00
Tomas Mraz 635f6a80a8 Fix build flags for aarch64. 2016-10-11 11:17:20 +02:00