.compat-openssl11.metadata

@@ -1 +0,0 @@
-7d1836f812e22f8e488430cfc30e2bac5e8a7b3d SOURCES/openssl-1.1.1k-hobbled.tar.xz

.gitignore

@@ -1 +1 @@
-SOURCES/openssl-1.1.1k-hobbled.tar.xz
+/openssl-1.1.1k-hobbled.tar.xz

compat-openssl11.spec

@@ -22,7 +22,7 @@
 Summary: Utilities from the general purpose cryptography library with TLS implementation
 Name: compat-openssl11
 Version: 1.1.1k
-Release: 4%{?dist}
+Release: 5%{?dist}
 Epoch: 1
 # We have to remove certain patented algorithms from the openssl source
 # tarball with the hobble-openssl script which is included below.
@@ -76,6 +76,7 @@ Patch53: openssl-1.1.1-fips-crng-test.patch
 Patch55: openssl-1.1.1-arm-update.patch
 Patch56: openssl-1.1.1-s390x-ecc.patch
 Patch73: openssl-1.1.1-cve-2022-0778.patch
+Patch83: openssl-1.1.1-replace-expired-certs.patch
 
 License: OpenSSL and ASL 2.0
 URL: http://www.openssl.org/
@@ -145,6 +146,7 @@ cp %{SOURCE13} test/
 %patch71 -p1 -b .conf-new
 %patch72 -p1 -b .disable-fips
 %patch73 -p1 -b .cve-2022-0778
+%patch -P 83 -p1 -b .replace-expired-certs
 
 cp apps/openssl.cnf apps/openssl11.cnf
 
@@ -313,11 +315,15 @@ install -m 644 apps/openssl11.cnf $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/openssl1
 %ldconfig_scriptlets
 
 %changelog
+* Thu Sep 21 2023 Clemens Lang <cllang@redhat.com> - 1:1.1.1k-5
+- Update expired certificates used in the testsuite
+  Resolves: RHEL-5297
+
 * Mon May 30 2022 Clemens Lang <cllang@redhat.com> - 1:1.1.1k-4
 - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
-  Resolves: rhbz#2063147
+  Resolves: rhbz#2063148
 - Disable FIPS mode; it does not work and will not be certified
-  Resolves: rhbz#2091968
+  Resolves: rhbz#2013669
 
 * Tue Oct 05 2021 Sahana Prasad <sahana@redhat.com> - 1:1.1.1k-3
 - updates OPENSSL_CONF to openssl11.cnf.

fixpatch

@@ -0,0 +1,15 @@
+#!/bin/sh
+# Fixes patch from upstream tracker view
+gawk '
+BEGIN {
+   dir=""
+}
+/^Index: openssl\// {
+   dir = $2
+}
+/^(---|\+\+\+)/ {
+   $2 = dir
+}
+{
+   print
+}'

gating.yaml

@@ -0,0 +1,7 @@
+--- !Policy
+product_versions:
+  - rhel-9
+decision_context: osci_compose_gate
+rules:
+  - !PassingTestCaseRule {test_case_name: baseos-ci.brew-build.tier1.functional}
+  - !PassingTestCaseRule {test_case_name: baseos-ci.brew-build.tedude.validation}

sources

@@ -0,0 +1 @@
+SHA512 (openssl-1.1.1k-hobbled.tar.xz) = b5282e40af8f28f7a859dfddeb269f3a4b0f4fb535de330dfd3ad14a123b57fe66e3880c6c9aacf49865175b1f7f6c88cae31451a99d4ac2b2cb1c5135d4ada9