From 0fc0bd06ce5d1c8c4da87b6c3e13ef3da9c838b3 Mon Sep 17 00:00:00 2001
From: David Schlenk <dschlenk@convergeone.com>
Date: Fri, 20 Sep 2024 15:05:21 -0500
Subject: [PATCH] Disable MD2 hash algorithm

Resolves: RHEL-59715
---
 openldap.spec | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/openldap.spec b/openldap.spec
index 8ccecb9..24588a0 100644
--- a/openldap.spec
+++ b/openldap.spec
@@ -16,7 +16,7 @@
 
 Name: openldap
 Version: 2.6.6
-Release: 3%{?dist}
+Release: 4%{?dist}
 Summary: LDAP support libraries
 License: OLDAP-2.8
 URL: http://www.openldap.org/
@@ -196,6 +196,8 @@ popd
 %set_build_flags
 # enable experimental support for LDAP over UDP (LDAP_CONNECTIONLESS)
 export CFLAGS="${CFLAGS} ${LDFLAGS} -Wl,--as-needed -Wl,-z,now -DLDAP_CONNECTIONLESS"
+# disable legacy hash algorithm
+export CFLAGS="${CFLAGS} -DOPENSSL_NO_MD2"
 
 pushd openldap-%{version}
 %configure \
@@ -548,6 +550,10 @@ exit 0
 %{_libdir}/libslapi-2.4*.so.*
 
 %changelog
+* Fri Oct 11 2024 Simon Pichugin <spichugi@redhat.com> - 2.6.6-4
+- Disable MD2 hash algorithm
+  Resolves: RHEL-59715
+
 * Fri Feb 9 2024 Simon Pichugin <spichugi@redhat.com> - 2.6.6-3
 - Use systemd-sysusers for ldap user and group
   Replace License with SPDX identifier