Update to Go 1.24.3 (fips-1)

Resolves: RHEL-83439
Resolves: RHEL-85268
Resolves: RHEL-87632
Resolves: RHEL-91312
Resolves: RHEL-92023

.gitignore

@@ -86,3 +86,5 @@
 /go1.23.2-2-openssl-fips.tar.gz
 /go1.23.4.tar.gz
 /go1.23.4-1-openssl-fips.tar.gz
+/go1.24.3.tar.gz
+/go1.24.3-1-openssl-fips.tar.gz

fedora.go

@@ -1,5 +1,9 @@
+//go:build rpm_crashtraceback
 // +build rpm_crashtraceback
 
+// Copyright 2017 The Fedora Project Contributors. All rights reserved.
+// Use of this source code is governed by the MIT license.
+
 package runtime
 
 func init() {

golang.spec

@@ -93,7 +93,7 @@
 %endif
 
 %global go_api 1.23
-%global go_version 1.23.4
+%global go_version 1.24.3
 %global version %{go_version}
 %global pkg_release 1
 
@@ -287,7 +287,9 @@ cat /proc/cpuinfo
 cat /proc/meminfo
 
 # Build race detector .syso's from llvm sources
-%global tsan_buildflags %(echo %{build_cflags} | sed 's/-mtls-dialect=gnu2//')
+# The race detector requests a -fno-exceptions build.
+%global tsan_buildflags %(rpm -D 'toolchain clang' -E '%{optflags}' | sed 's/-fexceptions//')
+%global tsan_optflag -O1
 mkdir ../llvm
 
 tar -xf %{SOURCE3} -C ../llvm
@@ -301,18 +303,18 @@ export GOARCH=$(go env GOARCH)
 
 %ifarch x86_64
 pushd "${tsan_go_dir}"
-  CFLAGS="${tsan_buildflags}" CC=clang GOAMD64=v3 ./buildgo.sh
+  CFLAGS="%{tsan_buildflags} %{tsan_optflag}" CC=clang GOAMD64=v3 ./buildgo.sh
 popd
 cp "${tsan_go_dir}"/race_linux_amd64.syso ./src/runtime/race/internal/amd64v3/race_linux.syso
 
 pushd "${tsan_go_dir}"
-  CFLAGS="${tsan_buildflags}" CC=clang GOAMD64=v1 ./buildgo.sh
+  CFLAGS="%{tsan_buildflags} %{tsan_optflag}" CC=clang GOAMD64=v1 ./buildgo.sh
 popd
 cp "${tsan_go_dir}"/race_linux_amd64.syso ./src/runtime/race/internal/amd64v1/race_linux.syso
 
 %else
 pushd "${tsan_go_dir}"
-  CFLAGS="${tsan_buildflags}" CC=clang ./buildgo.sh
+  CFLAGS="%{tsan_buildflags} %{tsan_optflag}" CC=clang ./buildgo.sh
 popd
 cp "${tsan_go_dir}"/race_linux_%{gohostarch}.syso ./src/runtime/race/race_linux_%{gohostarch}.syso
 %endif
@@ -502,9 +504,9 @@ export GOLANG_FIPS=1
 export OPENSSL_FORCE_FIPS_MODE=1
 pushd crypto
   # Run all crypto tests but skip TLS, we will run FIPS specific TLS tests later
-  go test -timeout 50m $(go list ./... | grep -v tls) -v
+  go test -timeout 50m $(go list ./... | grep -v tls) -v -skip="TestEd25519Vectors|TestACVP"
   # Check that signature functions have parity between boring and notboring
-  CGO_ENABLED=0 go test -timeout 50m $(go list ./... | grep -v tls) -v
+  CGO_ENABLED=0 go test -timeout 50m $(go list ./... | grep -v tls) -v -skip="TestEd25519Vectors|TestACVP"
 popd
 # Run all FIPS specific TLS tests
 pushd crypto/tls
@@ -583,6 +585,15 @@ cd ..
 %endif
 
 %changelog
+* Thu May 08 2025 David Benoit <dbenoit@redhat.com> - 1.24.3-1
+- Update to Go 1.24.3 (fips-1)
+- Exclude TestEd25519Vectors, TestACVP which require network
+- Resolves: RHEL-83439
+- Resolves: RHEL-85268
+- Resolves: RHEL-87632
+- Resolves: RHEL-91312
+- Resolves: RHEL-92023
+
 * Thu Jan 09 2025 David Benoit <dbenoit@redhat.com> - 1.23.4-1
 - Update to Go 1.23.4 (fips-1)
 - Resolves: RHEL-61048

sources

@@ -1,3 +1,3 @@
-SHA512 (go1.23.4.tar.gz) = 21d01c30818d3921385a5f155e1ed8155a30149df64f69f199a029d4cfcf1295c9b18ed3aca9a1bfa354758197b9cbdcbd9929fe3988f3cfa26c0623bc25d9a9
-SHA512 (go1.23.4-1-openssl-fips.tar.gz) = a7aa21d56dc55cfd4cf2432d9de8f921a4808c20c813177e4c805a32161ed0e277025f0d7e2b8ece2d4ac1e37d2f10068f1684359ebbaac9dbd881d5b03f738e
+SHA512 (go1.24.3.tar.gz) = 43f67a63c6f9fa21aedc5d69e0f135538cfde756c88df794905c5ae2f1bdc018e67dd78c276effb7b0c5cebb529ba5103daa91d1339a48393ddeda9209bfe4f2
+SHA512 (go1.24.3-1-openssl-fips.tar.gz) = dd4ffe1cb7bf4ab553504ff63af2313d84445a197b259283debe2cc19a0ab205ece6d3ca06ad1c830cb4b3ac1b87fffee28d6030c47bbc383507e3b264cf5281
 SHA512 (compiler-rt-18.1.8.src.tar.xz) = fb8795bd51c9b005c2ad1975591e9e2715740d6407ccad41379f136ef2e8d24ded8b97b01165a3ae4bd377119a6a1049ca05d3220404fc12bee86114ff2bff0d