diff --git a/.gitignore b/.gitignore index 79db7c9..a0df321 100644 --- a/.gitignore +++ b/.gitignore @@ -86,3 +86,5 @@ /go1.23.2-2-openssl-fips.tar.gz /go1.23.4.tar.gz /go1.23.4-1-openssl-fips.tar.gz +/go1.24.3.tar.gz +/go1.24.3-1-openssl-fips.tar.gz diff --git a/fedora.go b/fedora.go index 81b28ba..3ff4d3e 100644 --- a/fedora.go +++ b/fedora.go @@ -1,5 +1,9 @@ +//go:build rpm_crashtraceback // +build rpm_crashtraceback +// Copyright 2017 The Fedora Project Contributors. All rights reserved. +// Use of this source code is governed by the MIT license. + package runtime func init() { diff --git a/golang.spec b/golang.spec index 3efe041..d2ce7cc 100644 --- a/golang.spec +++ b/golang.spec @@ -93,7 +93,7 @@ %endif %global go_api 1.23 -%global go_version 1.23.4 +%global go_version 1.24.3 %global version %{go_version} %global pkg_release 1 @@ -287,7 +287,9 @@ cat /proc/cpuinfo cat /proc/meminfo # Build race detector .syso's from llvm sources -%global tsan_buildflags %(echo %{build_cflags} | sed 's/-mtls-dialect=gnu2//') +# The race detector requests a -fno-exceptions build. +%global tsan_buildflags %(rpm -D 'toolchain clang' -E '%{optflags}' | sed 's/-fexceptions//') +%global tsan_optflag -O1 mkdir ../llvm tar -xf %{SOURCE3} -C ../llvm @@ -301,18 +303,18 @@ export GOARCH=$(go env GOARCH) %ifarch x86_64 pushd "${tsan_go_dir}" - CFLAGS="${tsan_buildflags}" CC=clang GOAMD64=v3 ./buildgo.sh + CFLAGS="%{tsan_buildflags} %{tsan_optflag}" CC=clang GOAMD64=v3 ./buildgo.sh popd cp "${tsan_go_dir}"/race_linux_amd64.syso ./src/runtime/race/internal/amd64v3/race_linux.syso pushd "${tsan_go_dir}" - CFLAGS="${tsan_buildflags}" CC=clang GOAMD64=v1 ./buildgo.sh + CFLAGS="%{tsan_buildflags} %{tsan_optflag}" CC=clang GOAMD64=v1 ./buildgo.sh popd cp "${tsan_go_dir}"/race_linux_amd64.syso ./src/runtime/race/internal/amd64v1/race_linux.syso %else pushd "${tsan_go_dir}" - CFLAGS="${tsan_buildflags}" CC=clang ./buildgo.sh + CFLAGS="%{tsan_buildflags} %{tsan_optflag}" CC=clang ./buildgo.sh popd cp "${tsan_go_dir}"/race_linux_%{gohostarch}.syso ./src/runtime/race/race_linux_%{gohostarch}.syso %endif @@ -502,9 +504,9 @@ export GOLANG_FIPS=1 export OPENSSL_FORCE_FIPS_MODE=1 pushd crypto # Run all crypto tests but skip TLS, we will run FIPS specific TLS tests later - go test -timeout 50m $(go list ./... | grep -v tls) -v + go test -timeout 50m $(go list ./... | grep -v tls) -v -skip="TestEd25519Vectors|TestACVP" # Check that signature functions have parity between boring and notboring - CGO_ENABLED=0 go test -timeout 50m $(go list ./... | grep -v tls) -v + CGO_ENABLED=0 go test -timeout 50m $(go list ./... | grep -v tls) -v -skip="TestEd25519Vectors|TestACVP" popd # Run all FIPS specific TLS tests pushd crypto/tls @@ -583,6 +585,15 @@ cd .. %endif %changelog +* Thu May 08 2025 David Benoit - 1.24.3-1 +- Update to Go 1.24.3 (fips-1) +- Exclude TestEd25519Vectors, TestACVP which require network +- Resolves: RHEL-83439 +- Resolves: RHEL-85268 +- Resolves: RHEL-87632 +- Resolves: RHEL-91312 +- Resolves: RHEL-92023 + * Thu Jan 09 2025 David Benoit - 1.23.4-1 - Update to Go 1.23.4 (fips-1) - Resolves: RHEL-61048 diff --git a/sources b/sources index 1396455..bf48889 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ -SHA512 (go1.23.4.tar.gz) = 21d01c30818d3921385a5f155e1ed8155a30149df64f69f199a029d4cfcf1295c9b18ed3aca9a1bfa354758197b9cbdcbd9929fe3988f3cfa26c0623bc25d9a9 -SHA512 (go1.23.4-1-openssl-fips.tar.gz) = a7aa21d56dc55cfd4cf2432d9de8f921a4808c20c813177e4c805a32161ed0e277025f0d7e2b8ece2d4ac1e37d2f10068f1684359ebbaac9dbd881d5b03f738e +SHA512 (go1.24.3.tar.gz) = 43f67a63c6f9fa21aedc5d69e0f135538cfde756c88df794905c5ae2f1bdc018e67dd78c276effb7b0c5cebb529ba5103daa91d1339a48393ddeda9209bfe4f2 +SHA512 (go1.24.3-1-openssl-fips.tar.gz) = dd4ffe1cb7bf4ab553504ff63af2313d84445a197b259283debe2cc19a0ab205ece6d3ca06ad1c830cb4b3ac1b87fffee28d6030c47bbc383507e3b264cf5281 SHA512 (compiler-rt-18.1.8.src.tar.xz) = fb8795bd51c9b005c2ad1975591e9e2715740d6407ccad41379f136ef2e8d24ded8b97b01165a3ae4bd377119a6a1049ca05d3220404fc12bee86114ff2bff0d