- workaround for build on S390 (#548825)
- spec file cleanups - upgrade to new minor upstream release
This commit is contained in:
parent
e56dfebe1c
commit
9b6823253d
@ -1 +1 @@
|
|||||||
libgcrypt-1.4.4-hobbled.tar.bz2
|
libgcrypt-1.4.5-hobbled.tar.bz2
|
||||||
|
@ -1,13 +0,0 @@
|
|||||||
Do not abort when the fips mode flag is simply inaccessible because of
|
|
||||||
insufficient permissions.
|
|
||||||
diff -up libgcrypt-1.4.4/src/fips.c.no-access libgcrypt-1.4.4/src/fips.c
|
|
||||||
--- libgcrypt-1.4.4/src/fips.c.no-access 2009-01-29 17:37:12.000000000 +0100
|
|
||||||
+++ libgcrypt-1.4.4/src/fips.c 2009-01-29 17:37:15.000000000 +0100
|
|
||||||
@@ -155,6 +155,7 @@ _gcry_initialize_fips_mode (int force)
|
|
||||||
fclose (fp);
|
|
||||||
}
|
|
||||||
else if ((saved_errno = errno) != ENOENT
|
|
||||||
+ && saved_errno != EACCES
|
|
||||||
&& !access ("/proc/version", F_OK) )
|
|
||||||
{
|
|
||||||
/* Problem reading the fips file despite that we have the proc
|
|
@ -1,28 +0,0 @@
|
|||||||
diff -up libgcrypt-1.4.4/random/rndhw.c.padlock libgcrypt-1.4.4/random/rndhw.c
|
|
||||||
--- libgcrypt-1.4.4/random/rndhw.c.padlock 2008-09-03 12:04:43.000000000 +0200
|
|
||||||
+++ libgcrypt-1.4.4/random/rndhw.c 2009-06-17 20:11:42.000000000 +0200
|
|
||||||
@@ -41,7 +41,7 @@ static size_t
|
|
||||||
poll_padlock (void (*add)(const void*, size_t, enum random_origins),
|
|
||||||
enum random_origins origin, int fast)
|
|
||||||
{
|
|
||||||
- char buffer[64+8] __attribute__ ((aligned (8)));
|
|
||||||
+ volatile char buffer[64+8] __attribute__ ((aligned (8)));
|
|
||||||
char *p;
|
|
||||||
unsigned int nbytes, status;
|
|
||||||
|
|
||||||
@@ -55,12 +55,11 @@ poll_padlock (void (*add)(const void*, s
|
|
||||||
nbytes = 0;
|
|
||||||
while (nbytes < 64)
|
|
||||||
{
|
|
||||||
- asm volatile
|
|
||||||
+ asm volatile
|
|
||||||
("movl %1, %%edi\n\t" /* Set buffer. */
|
|
||||||
"xorl %%edx, %%edx\n\t" /* Request up to 8 bytes. */
|
|
||||||
- ".byte 0x0f, 0xa7, 0xc0\n\t" /* XSTORE RNG. */
|
|
||||||
- "movl %%eax, %0\n" /* Return the status. */
|
|
||||||
- : "=g" (status)
|
|
||||||
+ ".byte 0x0f, 0xa7, 0xc0\n" /* XSTORE RNG. */
|
|
||||||
+ : "=a" (status)
|
|
||||||
: "g" (p)
|
|
||||||
: "%edx", "%edi", "cc"
|
|
||||||
);
|
|
@ -1,6 +1,6 @@
|
|||||||
Name: libgcrypt
|
Name: libgcrypt
|
||||||
Version: 1.4.4
|
Version: 1.4.5
|
||||||
Release: 9%{?dist}
|
Release: 1%{?dist}
|
||||||
URL: http://www.gnupg.org/
|
URL: http://www.gnupg.org/
|
||||||
Source0: libgcrypt-%{version}-hobbled.tar.bz2
|
Source0: libgcrypt-%{version}-hobbled.tar.bz2
|
||||||
# The original libgcrypt sources now contain potentially patented ECC
|
# The original libgcrypt sources now contain potentially patented ECC
|
||||||
@ -10,9 +10,7 @@ Source0: libgcrypt-%{version}-hobbled.tar.bz2
|
|||||||
#Source1: ftp://ftp.gnupg.org/gcrypt/libgcrypt/libgcrypt-%{version}.tar.bz2.sig
|
#Source1: ftp://ftp.gnupg.org/gcrypt/libgcrypt/libgcrypt-%{version}.tar.bz2.sig
|
||||||
Source2: wk@g10code.com
|
Source2: wk@g10code.com
|
||||||
Source3: hobble-libgcrypt
|
Source3: hobble-libgcrypt
|
||||||
Patch1: libgcrypt-1.4.4-fips-no-access.patch
|
|
||||||
Patch2: libgcrypt-1.4.4-use-fipscheck.patch
|
Patch2: libgcrypt-1.4.4-use-fipscheck.patch
|
||||||
Patch3: libgcrypt-1.4.4-padlock.patch
|
|
||||||
|
|
||||||
# Technically LGPLv2.1+, but Fedora's table doesn't draw a distinction.
|
# Technically LGPLv2.1+, but Fedora's table doesn't draw a distinction.
|
||||||
License: LGPLv2+
|
License: LGPLv2+
|
||||||
@ -42,9 +40,7 @@ applications using libgcrypt.
|
|||||||
%prep
|
%prep
|
||||||
%setup -q
|
%setup -q
|
||||||
%{SOURCE3}
|
%{SOURCE3}
|
||||||
%patch1 -p1 -b .no-access
|
|
||||||
%patch2 -p1 -b .use-fipscheck
|
%patch2 -p1 -b .use-fipscheck
|
||||||
%patch3 -p1 -b .padlock
|
|
||||||
|
|
||||||
%build
|
%build
|
||||||
%ifarch s390
|
%ifarch s390
|
||||||
@ -56,7 +52,8 @@ applications using libgcrypt.
|
|||||||
%endif
|
%endif
|
||||||
--enable-noexecstack \
|
--enable-noexecstack \
|
||||||
--enable-hmac-binary-check \
|
--enable-hmac-binary-check \
|
||||||
--enable-pubkey-ciphers='dsa elgamal rsa'
|
--enable-pubkey-ciphers='dsa elgamal rsa' \
|
||||||
|
--disable-O-flag-munging
|
||||||
make %{?_smp_mflags}
|
make %{?_smp_mflags}
|
||||||
|
|
||||||
%check
|
%check
|
||||||
@ -153,10 +150,10 @@ exit 0
|
|||||||
%{_infodir}/gcrypt.info*
|
%{_infodir}/gcrypt.info*
|
||||||
|
|
||||||
%changelog
|
%changelog
|
||||||
|
* Mon Dec 21 2009 Tomas Mraz <tmraz@redhat.com> 1.4.5-1
|
||||||
* Mon Dec 21 2009 Tomas Mraz <tmraz@redhat.com> 1.4.4-9
|
- workaround for build on S390 (#548825)
|
||||||
- Workaround for build on S390 (#548825)
|
- spec file cleanups
|
||||||
- Spec file cleanups
|
- upgrade to new minor upstream release
|
||||||
|
|
||||||
* Tue Aug 11 2009 Tomas Mraz <tmraz@redhat.com> 1.4.4-8
|
* Tue Aug 11 2009 Tomas Mraz <tmraz@redhat.com> 1.4.4-8
|
||||||
- fix warning when installed with --excludedocs (#515961)
|
- fix warning when installed with --excludedocs (#515961)
|
||||||
|
Loading…
Reference in New Issue
Block a user