rpms/mingw-openssl
7
0
Fork 0
Code Issues Pull Requests Releases Activity
6c46ec231b
mingw-openssl/openssl-1.1.1-defaults.patch

52 lines
1.9 KiB
Diff
Raw Normal View History

Update the sources accordingly to its native counter part (1.1.1c) Four patches are not being applied due to failures in the build and/or applying them: - openssl-1.1.1-fips.patch - openssl-1.1.1-fips-post-rand.patch - openssl-1.1.1-evp-kdf.patch - openssl-1.1.1-ssh-kdf.patch Mind that fips related patches were not applied in the previously version either. Resolves: rhbz#1740772 Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2019-08-14 15:47:20 +00:00
diff -up openssl-1.1.1a/apps/openssl.cnf.defaults openssl-1.1.1a/apps/openssl.cnf
--- openssl-1.1.1a/apps/openssl.cnf.defaults 2018-11-20 14:35:37.000000000 +0100
+++ openssl-1.1.1a/apps/openssl.cnf 2019-01-15 13:56:50.841719776 +0100
@@ -74,7 +74,7 @@ cert_opt = ca_default # Certificate fi
Synced patches with native openssl-1.0.1e-44.fc21 Fixes CVE-2014-0160 (RHBZ #1085066)
2014-04-09 06:25:44 +00:00
default_days = 365 # how long to certify for
default_crl_days= 30 # how long before next CRL
-default_md = default # use public key default MD
+default_md = sha256 # use SHA-256 by default
preserve = no # keep passed DN ordering
# A few difference way of specifying how similar the request should look
Update the sources accordingly to its native counter part (1.1.1c) Four patches are not being applied due to failures in the build and/or applying them: - openssl-1.1.1-fips.patch - openssl-1.1.1-fips-post-rand.patch - openssl-1.1.1-evp-kdf.patch - openssl-1.1.1-ssh-kdf.patch Mind that fips related patches were not applied in the previously version either. Resolves: rhbz#1740772 Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2019-08-14 15:47:20 +00:00
@@ -106,6 +106,7 @@ emailAddress = optional
- Update to version 1.0.0 beta 3 - Use %global instead of %define - Automatically generate debuginfo subpackage - Merged various changes from the native Fedora package (up to 1.0.0-0.5.beta3) - Don't use the %{_mingw32_make} macro anymore as it's ugly and causes side-effects NOTE: Right now, this package doesn't provide versioned DLL's as the upstream defaults are used and I couldn't find the right spot in the build scripts to realize this (openssl's build system is really messy..).
2009-08-29 16:13:45 +00:00
####################################################################
[ req ]
Synced with native openssl-1.0.2a-1.fc23
2015-04-24 17:12:13 +00:00
default_bits = 2048
Synced patches with native openssl-1.0.1e-44.fc21 Fixes CVE-2014-0160 (RHBZ #1085066)
2014-04-09 06:25:44 +00:00
+default_md = sha256
- Update to version 1.0.0 beta 3 - Use %global instead of %define - Automatically generate debuginfo subpackage - Merged various changes from the native Fedora package (up to 1.0.0-0.5.beta3) - Don't use the %{_mingw32_make} macro anymore as it's ugly and causes side-effects NOTE: Right now, this package doesn't provide versioned DLL's as the upstream defaults are used and I couldn't find the right spot in the build scripts to realize this (openssl's build system is really messy..).
2009-08-29 16:13:45 +00:00
default_keyfile = privkey.pem
distinguished_name = req_distinguished_name
attributes = req_attributes
Update the sources accordingly to its native counter part (1.1.1c) Four patches are not being applied due to failures in the build and/or applying them: - openssl-1.1.1-fips.patch - openssl-1.1.1-fips-post-rand.patch - openssl-1.1.1-evp-kdf.patch - openssl-1.1.1-ssh-kdf.patch Mind that fips related patches were not applied in the previously version either. Resolves: rhbz#1740772 Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2019-08-14 15:47:20 +00:00
@@ -128,17 +129,18 @@ string_mask = utf8only
- Update to version 1.0.0 beta 3 - Use %global instead of %define - Automatically generate debuginfo subpackage - Merged various changes from the native Fedora package (up to 1.0.0-0.5.beta3) - Don't use the %{_mingw32_make} macro anymore as it's ugly and causes side-effects NOTE: Right now, this package doesn't provide versioned DLL's as the upstream defaults are used and I couldn't find the right spot in the build scripts to realize this (openssl's build system is really messy..).
2009-08-29 16:13:45 +00:00
[ req_distinguished_name ]
countryName = Country Name (2 letter code)
-countryName_default = AU
+countryName_default = XX
countryName_min = 2
countryName_max = 2
stateOrProvinceName = State or Province Name (full name)
-stateOrProvinceName_default = Some-State
+#stateOrProvinceName_default = Default Province
localityName = Locality Name (eg, city)
Synced patches with native openssl-1.0.1e-44.fc21 Fixes CVE-2014-0160 (RHBZ #1085066)
2014-04-09 06:25:44 +00:00
+localityName_default = Default City
- Update to version 1.0.0 beta 3 - Use %global instead of %define - Automatically generate debuginfo subpackage - Merged various changes from the native Fedora package (up to 1.0.0-0.5.beta3) - Don't use the %{_mingw32_make} macro anymore as it's ugly and causes side-effects NOTE: Right now, this package doesn't provide versioned DLL's as the upstream defaults are used and I couldn't find the right spot in the build scripts to realize this (openssl's build system is really messy..).
2009-08-29 16:13:45 +00:00
0.organizationName = Organization Name (eg, company)
-0.organizationName_default = Internet Widgits Pty Ltd
+0.organizationName_default = Default Company Ltd
# we can do this but it is not needed normally :-)
#1.organizationName = Second Organization Name (eg, company)
Update the sources accordingly to its native counter part (1.1.1c) Four patches are not being applied due to failures in the build and/or applying them: - openssl-1.1.1-fips.patch - openssl-1.1.1-fips-post-rand.patch - openssl-1.1.1-evp-kdf.patch - openssl-1.1.1-ssh-kdf.patch Mind that fips related patches were not applied in the previously version either. Resolves: rhbz#1740772 Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2019-08-14 15:47:20 +00:00
@@ -147,7 +149,7 @@ localityName = Locality Name (eg, city
- Update to version 1.0.0 beta 3 - Use %global instead of %define - Automatically generate debuginfo subpackage - Merged various changes from the native Fedora package (up to 1.0.0-0.5.beta3) - Don't use the %{_mingw32_make} macro anymore as it's ugly and causes side-effects NOTE: Right now, this package doesn't provide versioned DLL's as the upstream defaults are used and I couldn't find the right spot in the build scripts to realize this (openssl's build system is really messy..).
2009-08-29 16:13:45 +00:00
organizationalUnitName = Organizational Unit Name (eg, section)
#organizationalUnitName_default =
Added missing patches and removed unused ones
2012-11-09 15:29:44 +00:00
-commonName = Common Name (e.g. server FQDN or YOUR name)
- Update to version 1.0.0 beta 3 - Use %global instead of %define - Automatically generate debuginfo subpackage - Merged various changes from the native Fedora package (up to 1.0.0-0.5.beta3) - Don't use the %{_mingw32_make} macro anymore as it's ugly and causes side-effects NOTE: Right now, this package doesn't provide versioned DLL's as the upstream defaults are used and I couldn't find the right spot in the build scripts to realize this (openssl's build system is really messy..).
2009-08-29 16:13:45 +00:00
+commonName = Common Name (eg, your name or your server\'s hostname)
commonName_max = 64
emailAddress = Email Address
Reference in New Issue Copy Permalink