2020-10-20 14:28:49 +00:00
|
|
|
%global enginesdir %(pkg-config --variable=enginesdir libcrypto)
|
2023-01-12 16:32:15 +00:00
|
|
|
%global modulesdir %(pkg-config --variable=modulesdir libcrypto)
|
2022-05-23 14:48:10 +00:00
|
|
|
|
|
|
|
|
%if 0%{?fedora} >= 36 || 0%{?rhel} >= 9
|
|
|
|
|
%global with_openssl3 1
|
|
|
|
|
%endif
|
|
|
|
|
|
2020-10-20 14:28:49 +00:00
|
|
|
|
2023-04-21 08:07:01 +00:00
|
|
|
Summary: OpenSSL engine and provider for IBMCA
|
2020-10-20 14:28:49 +00:00
|
|
|
Name: openssl-ibmca
|
2023-04-06 12:03:46 +00:00
|
|
|
Version: 2.4.0
|
2023-07-17 14:01:21 +00:00
|
|
|
Release: 3%{?dist}
|
2020-10-20 14:28:49 +00:00
|
|
|
License: ASL 2.0
|
|
|
|
|
URL: https://github.com/opencryptoki
|
|
|
|
|
Source0: https://github.com/opencryptoki/%{name}/archive/v%{version}/%{name}-%{version}.tar.gz
|
2023-01-13 17:15:05 +00:00
|
|
|
# warn the user about engine being deprecated
|
|
|
|
|
Patch1: %{name}-2.3.1-engine-warning.patch
|
2023-07-12 07:32:59 +00:00
|
|
|
# https://bugzilla.redhat.com/show_bug.cgi?id=2221894
|
|
|
|
|
# https://github.com/opencryptoki/openssl-ibmca/commit/3ea8f4ed58e075e097856437c0732e11771931d0
|
|
|
|
|
Patch2: %{name}-2.4.0-engine-defaults.patch
|
2023-07-17 14:01:21 +00:00
|
|
|
# https://bugzilla.redhat.com/show_bug.cgi?id=2222878
|
|
|
|
|
# https://github.com/opencryptoki/openssl-ibmca/commit/f8a60b6678b1eb3ccadcb31f36bf7961ed8d5a9a
|
|
|
|
|
# https://github.com/opencryptoki/openssl-ibmca/commit/acba1d936bd84c7090ed7d3849b0bab3c7f18da0
|
|
|
|
|
Patch3: %{name}-2.4.0-rsa-me.patch
|
2022-02-02 10:45:43 +00:00
|
|
|
Requires: libica >= 4.0.0
|
2021-02-03 19:44:46 +00:00
|
|
|
BuildRequires: make
|
2020-10-20 14:28:49 +00:00
|
|
|
BuildRequires: gcc
|
2022-02-02 10:45:43 +00:00
|
|
|
BuildRequires: libica-devel >= 4.0.0
|
2020-10-20 14:28:49 +00:00
|
|
|
BuildRequires: automake libtool
|
2023-01-12 16:32:15 +00:00
|
|
|
BuildRequires: openssl >= 3.0.5
|
2022-05-23 14:48:10 +00:00
|
|
|
BuildRequires: perl(FindBin)
|
2020-10-20 14:28:49 +00:00
|
|
|
ExclusiveArch: s390 s390x
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
%description
|
2023-04-21 08:07:01 +00:00
|
|
|
A dynamic OpenSSL engine and provider for IBMCA crypto hardware on IBM Z
|
|
|
|
|
machines to accelerate cryptographic operations.
|
2020-10-20 14:28:49 +00:00
|
|
|
|
|
|
|
|
|
|
|
|
|
%prep
|
|
|
|
|
%autosetup -p1
|
|
|
|
|
|
|
|
|
|
./bootstrap.sh
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
%build
|
2022-02-02 10:45:43 +00:00
|
|
|
%configure --libdir=%{enginesdir} --with-libica-cex --with-libica-version=4
|
2021-06-09 10:25:07 +00:00
|
|
|
%make_build
|
2020-10-20 14:28:49 +00:00
|
|
|
|
|
|
|
|
|
|
|
|
|
%install
|
|
|
|
|
%make_install
|
2021-06-09 10:25:07 +00:00
|
|
|
rm -f %{buildroot}%{enginesdir}/*.la
|
2020-10-20 14:28:49 +00:00
|
|
|
|
2022-05-23 14:48:10 +00:00
|
|
|
%if 0%{?with_openssl3}
|
|
|
|
|
# provider is built when openssl3 is available, fix its location
|
|
|
|
|
mkdir -p %{buildroot}%{modulesdir}
|
|
|
|
|
mv %{buildroot}%{enginesdir}/ibmca-provider.so %{buildroot}%{modulesdir}/ibmca-provider.so
|
|
|
|
|
%endif
|
|
|
|
|
|
|
|
|
|
pushd src/engine
|
|
|
|
|
sed -i -e 's|/usr/local/lib|%{enginesdir}|' openssl.cnf.sample
|
2020-10-20 14:28:49 +00:00
|
|
|
popd
|
|
|
|
|
|
2021-06-09 10:25:07 +00:00
|
|
|
# remove generated sample configs
|
|
|
|
|
rm -rf %{buildroot}%{_datadir}/%{name}
|
|
|
|
|
|
2020-10-20 14:28:49 +00:00
|
|
|
|
|
|
|
|
%check
|
|
|
|
|
make check
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
%files
|
|
|
|
|
%license LICENSE
|
2022-05-23 14:48:10 +00:00
|
|
|
%doc ChangeLog README.md src/engine/openssl.cnf.sample
|
|
|
|
|
%doc src/engine/ibmca-engine-opensslconfig
|
|
|
|
|
%doc src/provider/ibmca-provider-opensslconfig
|
2020-10-20 14:28:49 +00:00
|
|
|
%{enginesdir}/ibmca.so
|
|
|
|
|
%{_mandir}/man5/ibmca.5*
|
2022-05-23 14:48:10 +00:00
|
|
|
%if 0%{?with_openssl3}
|
|
|
|
|
%{modulesdir}/ibmca-provider.so
|
|
|
|
|
%{_mandir}/man5/ibmca-provider.5*
|
|
|
|
|
%endif
|
2020-10-20 14:28:49 +00:00
|
|
|
|
|
|
|
|
|
|
|
|
|
%changelog
|
2023-07-17 14:01:21 +00:00
|
|
|
* Mon Jul 17 2023 Dan Horák <dhorak@redhat.com> - 2.4.0-3
|
|
|
|
|
- provider: Support importing of RSA keys with just ME components (#2222878)
|
|
|
|
|
- Resolves: #2222878
|
|
|
|
|
|
2023-07-12 07:32:59 +00:00
|
|
|
* Tue Jul 11 2023 Dan Horák <dhorak@redhat.com> - 2.4.0-2
|
|
|
|
|
- engine: Only register those algos specified with default_algorithms (#2221894)
|
|
|
|
|
- Resolves: #2221894
|
|
|
|
|
|
2023-04-06 12:03:46 +00:00
|
|
|
* Thu Apr 06 2023 Dan Horák <dhorak@redhat.com> - 2.4.0-1
|
|
|
|
|
- updated to 2.4.0 (#2160084)
|
|
|
|
|
- Resolves: #2160084
|
|
|
|
|
|
2023-01-13 17:15:05 +00:00
|
|
|
* Fri Jan 13 2023 Dan Horák <dhorak@redhat.com> - 2.3.1-2
|
|
|
|
|
- fix provider configuration script (#2140028)
|
|
|
|
|
- Resolves: #2140028
|
|
|
|
|
|
2023-01-12 16:32:15 +00:00
|
|
|
* Thu Jan 12 2023 Dan Horák <dhorak@redhat.com> - 2.3.1-1
|
|
|
|
|
- updated to 2.3.1 (#2110378)
|
2023-01-13 17:15:05 +00:00
|
|
|
- Resolves: #2110378
|
2023-01-12 16:32:15 +00:00
|
|
|
|
2022-05-23 14:48:10 +00:00
|
|
|
* Thu May 19 2022 Dan Horák <dhorak@redhat.com> - 2.3.0-1
|
|
|
|
|
- updated to 2.3.0 (#2044177)
|
|
|
|
|
- add provider for openssl 3.x (#2044185)
|
|
|
|
|
- Resolves: #2044177 #2044185
|
|
|
|
|
|
2022-02-02 10:45:43 +00:00
|
|
|
* Wed Feb 02 2022 Dan Horák <dan@danny.cz> - 2.2.2-1
|
|
|
|
|
- updated to 2.2.2 (#2016989)
|
|
|
|
|
- Resolves: #2016989
|
|
|
|
|
|
|
|
|
|
* Mon Oct 25 2021 Dan Horák <dan@danny.cz> - 2.2.1-1
|
|
|
|
|
- updated to 2.2.1 (#2016989)
|
|
|
|
|
|
2021-08-09 22:44:28 +00:00
|
|
|
* Mon Aug 09 2021 Mohan Boddu <mboddu@redhat.com> - 2.2.0-3
|
|
|
|
|
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
|
|
|
|
|
Related: rhbz#1991688
|
|
|
|
|
|
2021-08-09 11:50:43 +00:00
|
|
|
* Mon Aug 09 2021 Dan Horák <dhorak[at]redhat.com> - 2.2.0-2
|
|
|
|
|
- fix DSA and DH registration (#1989380)
|
|
|
|
|
- Resolves: #1989380
|
|
|
|
|
|
2021-06-09 10:25:07 +00:00
|
|
|
* Fri Jun 04 2021 Dan Horák <dan@danny.cz> - 2.2.0-1
|
|
|
|
|
- updated to 2.2.0 (#1869531)
|
|
|
|
|
- eliminate SW fallback functions (#1924117)
|
|
|
|
|
- Resolves: #1869531 #1924117
|
|
|
|
|
|
|
|
|
|
* Wed May 12 2021 Dan Horák <dan@danny.cz> - 2.1.2-1
|
|
|
|
|
- updated to 2.1.2
|
|
|
|
|
|
2021-04-16 02:42:52 +00:00
|
|
|
* Fri Apr 16 2021 Mohan Boddu <mboddu@redhat.com> - 2.1.1-4
|
|
|
|
|
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
|
|
|
|
|
|
2021-02-03 19:44:46 +00:00
|
|
|
* Tue Jan 26 2021 Fedora Release Engineering <releng@fedoraproject.org> - 2.1.1-3
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
|
|
|
|
|
|
2020-10-20 14:28:49 +00:00
|
|
|
* Tue Jul 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 2.1.1-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Tue May 12 2020 Dan Horák <dan@danny.cz> - 2.1.1-1
|
|
|
|
|
- updated to 2.1.1
|
|
|
|
|
|
|
|
|
|
* Wed Jan 29 2020 Fedora Release Engineering <releng@fedoraproject.org> - 2.1.0-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Mon Sep 09 2019 Dan Horák <dan@danny.cz> - 2.1.0-1
|
|
|
|
|
- updated to 2.1.0
|
|
|
|
|
|
|
|
|
|
* Thu Jul 25 2019 Fedora Release Engineering <releng@fedoraproject.org> - 2.0.3-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Wed Apr 24 2019 Dan Horák <dan@danny.cz> - 2.0.3-1
|
|
|
|
|
- updated to 2.0.3
|
|
|
|
|
|
|
|
|
|
* Fri Feb 01 2019 Fedora Release Engineering <releng@fedoraproject.org> - 2.0.2-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Thu Dec 13 2018 Dan Horák <dan@danny.cz> - 2.0.2-1
|
|
|
|
|
- updated to 2.0.2
|
|
|
|
|
|
|
|
|
|
* Thu Aug 23 2018 Dan Horák <dan@danny.cz> - 2.0.0-3
|
|
|
|
|
- run upstream test-suite during build
|
|
|
|
|
|
|
|
|
|
* Fri Jul 13 2018 Fedora Release Engineering <releng@fedoraproject.org> - 2.0.0-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Mon Jun 18 2018 Dan Horák <dan@danny.cz> - 2.0.0-1
|
|
|
|
|
- updated to 2.0.0
|
|
|
|
|
|
|
|
|
|
* Fri Feb 23 2018 Dan Horák <dan@danny.cz> - 1.4.1-1
|
|
|
|
|
- updated to 1.4.1
|
|
|
|
|
|
|
|
|
|
* Thu Feb 08 2018 Fedora Release Engineering <releng@fedoraproject.org> - 1.4.0-3
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Wed Jan 24 2018 Dan Horák <dan@danny.cz> - 1.4.0-2
|
|
|
|
|
- update engine filename
|
|
|
|
|
- spec cleanup
|
|
|
|
|
|
|
|
|
|
* Mon Sep 11 2017 Dan Horák <dan@danny.cz> - 1.4.0-1
|
|
|
|
|
- updated to 1.4.0
|
|
|
|
|
|
|
|
|
|
* Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.3.1-3
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Thu Jul 27 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.3.1-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Wed Mar 08 2017 Dan Horák <dan@danny.cz> - 1.3.1-1
|
|
|
|
|
- updated to 1.3.1 and OpenSSL 1.1
|
|
|
|
|
|
|
|
|
|
* Sat Feb 11 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.0-13
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Thu Feb 04 2016 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.0-12
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Thu Jun 18 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-11
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Wed Nov 05 2014 Dan Horák <dan@danny.cz> - 1.2.0-10
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-9
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Wed Mar 19 2014 Dan Horák <dan[at]danny.cz - 1.2.0-8
|
|
|
|
|
- Set proper key signature flag (#1075474)
|
|
|
|
|
|
|
|
|
|
* Fri Mar 14 2014 Dan Horák <dan[at]danny.cz - 1.2.0-7
|
|
|
|
|
- Fix multilib conflict in sample config file (#1076423)
|
|
|
|
|
- Fixed message digest length definition in sha256 template (#1074976)
|
|
|
|
|
|
|
|
|
|
* Sat Aug 03 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-6
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-5
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Fri Jul 20 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-4
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Fri Apr 20 2012 Dan Horák <dan[at]danny.cz - 1.2.0-3
|
|
|
|
|
- make the libica dependecies versioned
|
|
|
|
|
- fix segfaults in OFB mode (#749638)
|
|
|
|
|
|
|
|
|
|
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Thu Jul 07 2011 Dan Horák <dan[at]danny.cz - 1.2.0-1
|
|
|
|
|
- update to 1.2.0
|
|
|
|
|
|
|
|
|
|
* Tue Feb 08 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.1-3
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Thu Apr 22 2010 Dan Horák <dhorak@redhat.com> - 1.1-2
|
|
|
|
|
- fixed opening of the libica library (#584765)
|
|
|
|
|
- Resolves: #584765
|
|
|
|
|
|
|
|
|
|
* Thu Mar 4 2010 Dan Horák <dhorak@redhat.com> - 1.1-1
|
|
|
|
|
- rebased to 1.1 instead of patching
|
|
|
|
|
- Resolves: #568847
|
|
|
|
|
|
|
|
|
|
* Thu Feb 18 2010 Dan Horák <dhorak@redhat.com> - 1.0.0-5
|
|
|
|
|
- added patch with port to libica 2.x API
|
|
|
|
|
- Related: #543948
|
|
|
|
|
|
|
|
|
|
* Wed Feb 10 2010 Dan Horák <dhorak@redhat.com> - 1.0.0-4
|
|
|
|
|
- added explicit dependency on libica, because it's dlopened
|
|
|
|
|
- Related: #543948
|
|
|
|
|
|
|
|
|
|
* Tue Jan 12 2010 Dan Horák <dhorak@redhat.com> - 1.0.0-3
|
|
|
|
|
- rebuild
|
|
|
|
|
- Related: #543948
|
|
|
|
|
|
|
|
|
|
* Sat Jul 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0.0-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Thu Jul 9 2009 Dan Horak <dan[at]danny.cz - 1.0.0-1
|
|
|
|
|
- update to final 1.0.0
|
|
|
|
|
- spec file cleanup
|
|
|
|
|
|
|
|
|
|
* Thu Jun 21 2007 Phil Knirsch <pknirsch@redhat.com> - 1.0.0rc2-1.el5.4
|
|
|
|
|
- Fixed several issues with failure of using ibmca engine (#227644)
|
|
|
|
|
|
|
|
|
|
* Tue Dec 12 2006 Phil Knirsch <pknirsch@redhat.com> - 1.0.0rc2-1.el5.3
|
|
|
|
|
- Added missing symlinks for libs (#215735)
|
|
|
|
|
- Added samle config file (#215735)
|
|
|
|
|
|
|
|
|
|
* Thu Nov 23 2006 Phil Knirsch <pknirsch@redhat.com> - 1.0.0rc2-1.el5.2
|
|
|
|
|
- Necessary fix so openssl finds the module properly (#215735)
|
|
|
|
|
|
|
|
|
|
* Thu May 11 2006 Phil Knirsch <pknirsch@redhat.com> - 1.0.0rc2
|
|
|
|
|
- Initial package.
|
