diff --git a/0002-linux-Remove-the-use-of-OpenSSL-Engine-API.patch b/0002-linux-Remove-the-use-of-OpenSSL-Engine-API.patch new file mode 100644 index 0000000..1062022 --- /dev/null +++ b/0002-linux-Remove-the-use-of-OpenSSL-Engine-API.patch @@ -0,0 +1,39 @@ +From 849cea06f88790eca5b0407aa4bf9ed94ac6403e Mon Sep 17 00:00:00 2001 +From: Tomas Bzatek +Date: Thu, 18 Jul 2024 17:23:50 +0200 +Subject: [PATCH] linux: Remove the use of OpenSSL Engine API + +OpenSSL engines are not FIPS compatible and corresponding API +is deprecated since OpenSSL 3.0. It appears this API is not +actually used in the code, so remove it. + +Signed-off-by: Tomas Bzatek +--- + src/nvme/linux.c | 4 ---- + 1 file changed, 4 deletions(-) + +diff --git a/src/nvme/linux.c b/src/nvme/linux.c +index 9d472e408b5d..7785416727ed 100644 +--- a/src/nvme/linux.c ++++ b/src/nvme/linux.c +@@ -18,7 +18,6 @@ + #include + + #ifdef CONFIG_OPENSSL +-#include + #include + #include + #include +@@ -739,9 +738,6 @@ int nvme_gen_dhchap_key(char *hostnqn, enum nvme_hmac_alg hmac, + _cleanup_hmac_ctx_ HMAC_CTX *hmac_ctx = NULL; + const EVP_MD *md; + +- ENGINE_load_builtin_engines(); +- ENGINE_register_all_complete(); +- + hmac_ctx = HMAC_CTX_new(); + if (!hmac_ctx) { + errno = ENOMEM; +-- +2.43.0 + diff --git a/libnvme.spec b/libnvme.spec index db44e54..1215cc8 100644 --- a/libnvme.spec +++ b/libnvme.spec @@ -4,13 +4,14 @@ Name: libnvme Summary: Linux-native nvme device management library Version: 1.9 -Release: 2%{?dist} +Release: 3%{?dist} License: LGPL-2.1-or-later URL: https://github.com/linux-nvme/libnvme Source0: %{url}/archive/v%{version_no_tilde}/%{name}-%{version_no_tilde}.tar.gz # https://github.com/linux-nvme/libnvme/pull/833 Patch0: libnvme-1.10-linux-Fix-uninitialized-variables.patch +Patch1: 0002-linux-Remove-the-use-of-OpenSSL-Engine-API.patch BuildRequires: gcc gcc-c++ BuildRequires: swig @@ -101,6 +102,9 @@ rm -r %{buildroot}%{_pkgdocdir}/html/{.buildinfo,.doctrees/} %{python3_sitearch}/libnvme/* %changelog +* Thu Jul 25 2024 Maurizio Lombardi - 1.9-3 +- Fix RHEL-46699 + * Mon Jun 24 2024 Troy Dawson - 1.9-2 - Bump release for June 2024 mass rebuild