%global enginesdir %(pkg-config --variable=enginesdir libcrypto) %global modulesdir %(pkg-config --variable=modulesdir libcrypto) %if 0%{?fedora} >= 36 || 0%{?rhel} >= 9 %global with_openssl3 1 %endif Summary: OpenSSL engine and provider for IBMCA Name: openssl-ibmca Version: 2.4.0 Release: 3%{?dist} License: ASL 2.0 URL: https://github.com/opencryptoki Source0: https://github.com/opencryptoki/%{name}/archive/v%{version}/%{name}-%{version}.tar.gz # warn the user about engine being deprecated Patch1: %{name}-2.3.1-engine-warning.patch # https://bugzilla.redhat.com/show_bug.cgi?id=2221894 # https://github.com/opencryptoki/openssl-ibmca/commit/3ea8f4ed58e075e097856437c0732e11771931d0 Patch2: %{name}-2.4.0-engine-defaults.patch # https://bugzilla.redhat.com/show_bug.cgi?id=2222878 # https://github.com/opencryptoki/openssl-ibmca/commit/f8a60b6678b1eb3ccadcb31f36bf7961ed8d5a9a # https://github.com/opencryptoki/openssl-ibmca/commit/acba1d936bd84c7090ed7d3849b0bab3c7f18da0 Patch3: %{name}-2.4.0-rsa-me.patch Requires: libica >= 4.0.0 BuildRequires: make BuildRequires: gcc BuildRequires: libica-devel >= 4.0.0 BuildRequires: automake libtool BuildRequires: openssl >= 3.0.5 BuildRequires: perl(FindBin) ExclusiveArch: s390 s390x %description A dynamic OpenSSL engine and provider for IBMCA crypto hardware on IBM Z machines to accelerate cryptographic operations. %prep %autosetup -p1 ./bootstrap.sh %build %configure --libdir=%{enginesdir} --with-libica-cex --with-libica-version=4 %make_build %install %make_install rm -f %{buildroot}%{enginesdir}/*.la %if 0%{?with_openssl3} # provider is built when openssl3 is available, fix its location mkdir -p %{buildroot}%{modulesdir} mv %{buildroot}%{enginesdir}/ibmca-provider.so %{buildroot}%{modulesdir}/ibmca-provider.so %endif pushd src/engine sed -i -e 's|/usr/local/lib|%{enginesdir}|' openssl.cnf.sample popd # remove generated sample configs rm -rf %{buildroot}%{_datadir}/%{name} %check make check %files %license LICENSE %doc ChangeLog README.md src/engine/openssl.cnf.sample %doc src/engine/ibmca-engine-opensslconfig %doc src/provider/ibmca-provider-opensslconfig %{enginesdir}/ibmca.so %{_mandir}/man5/ibmca.5* %if 0%{?with_openssl3} %{modulesdir}/ibmca-provider.so %{_mandir}/man5/ibmca-provider.5* %endif %changelog * Mon Jul 17 2023 Dan Horák - 2.4.0-3 - provider: Support importing of RSA keys with just ME components (#2222878) - Resolves: #2222878 * Tue Jul 11 2023 Dan Horák - 2.4.0-2 - engine: Only register those algos specified with default_algorithms (#2221894) - Resolves: #2221894 * Thu Apr 06 2023 Dan Horák - 2.4.0-1 - updated to 2.4.0 (#2160084) - Resolves: #2160084 * Fri Jan 13 2023 Dan Horák - 2.3.1-2 - fix provider configuration script (#2140028) - Resolves: #2140028 * Thu Jan 12 2023 Dan Horák - 2.3.1-1 - updated to 2.3.1 (#2110378) - Resolves: #2110378 * Thu May 19 2022 Dan Horák - 2.3.0-1 - updated to 2.3.0 (#2044177) - add provider for openssl 3.x (#2044185) - Resolves: #2044177 #2044185 * Wed Feb 02 2022 Dan Horák - 2.2.2-1 - updated to 2.2.2 (#2016989) - Resolves: #2016989 * Mon Oct 25 2021 Dan Horák - 2.2.1-1 - updated to 2.2.1 (#2016989) * Mon Aug 09 2021 Mohan Boddu - 2.2.0-3 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 * Mon Aug 09 2021 Dan Horák - 2.2.0-2 - fix DSA and DH registration (#1989380) - Resolves: #1989380 * Fri Jun 04 2021 Dan Horák - 2.2.0-1 - updated to 2.2.0 (#1869531) - eliminate SW fallback functions (#1924117) - Resolves: #1869531 #1924117 * Wed May 12 2021 Dan Horák - 2.1.2-1 - updated to 2.1.2 * Fri Apr 16 2021 Mohan Boddu - 2.1.1-4 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 * Tue Jan 26 2021 Fedora Release Engineering - 2.1.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Tue Jul 28 2020 Fedora Release Engineering - 2.1.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Tue May 12 2020 Dan Horák - 2.1.1-1 - updated to 2.1.1 * Wed Jan 29 2020 Fedora Release Engineering - 2.1.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Mon Sep 09 2019 Dan Horák - 2.1.0-1 - updated to 2.1.0 * Thu Jul 25 2019 Fedora Release Engineering - 2.0.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Wed Apr 24 2019 Dan Horák - 2.0.3-1 - updated to 2.0.3 * Fri Feb 01 2019 Fedora Release Engineering - 2.0.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Thu Dec 13 2018 Dan Horák - 2.0.2-1 - updated to 2.0.2 * Thu Aug 23 2018 Dan Horák - 2.0.0-3 - run upstream test-suite during build * Fri Jul 13 2018 Fedora Release Engineering - 2.0.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Mon Jun 18 2018 Dan Horák - 2.0.0-1 - updated to 2.0.0 * Fri Feb 23 2018 Dan Horák - 1.4.1-1 - updated to 1.4.1 * Thu Feb 08 2018 Fedora Release Engineering - 1.4.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild * Wed Jan 24 2018 Dan Horák - 1.4.0-2 - update engine filename - spec cleanup * Mon Sep 11 2017 Dan Horák - 1.4.0-1 - updated to 1.4.0 * Thu Aug 03 2017 Fedora Release Engineering - 1.3.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild * Thu Jul 27 2017 Fedora Release Engineering - 1.3.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild * Wed Mar 08 2017 Dan Horák - 1.3.1-1 - updated to 1.3.1 and OpenSSL 1.1 * Sat Feb 11 2017 Fedora Release Engineering - 1.2.0-13 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild * Thu Feb 04 2016 Fedora Release Engineering - 1.2.0-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild * Thu Jun 18 2015 Fedora Release Engineering - 1.2.0-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild * Wed Nov 05 2014 Dan Horák - 1.2.0-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Sat Jun 07 2014 Fedora Release Engineering - 1.2.0-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Wed Mar 19 2014 Dan Horák - 1.2.0-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Thu Feb 14 2013 Fedora Release Engineering - 1.2.0-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild * Fri Jul 20 2012 Fedora Release Engineering - 1.2.0-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Fri Apr 20 2012 Dan Horák - 1.2.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild * Thu Jul 07 2011 Dan Horák - 1.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild * Thu Apr 22 2010 Dan Horák - 1.1-2 - fixed opening of the libica library (#584765) - Resolves: #584765 * Thu Mar 4 2010 Dan Horák - 1.1-1 - rebased to 1.1 instead of patching - Resolves: #568847 * Thu Feb 18 2010 Dan Horák - 1.0.0-5 - added patch with port to libica 2.x API - Related: #543948 * Wed Feb 10 2010 Dan Horák - 1.0.0-4 - added explicit dependency on libica, because it's dlopened - Related: #543948 * Tue Jan 12 2010 Dan Horák - 1.0.0-3 - rebuild - Related: #543948 * Sat Jul 25 2009 Fedora Release Engineering - 1.0.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild * Thu Jul 9 2009 Dan Horak - 1.0.0rc2-1.el5.4 - Fixed several issues with failure of using ibmca engine (#227644) * Tue Dec 12 2006 Phil Knirsch - 1.0.0rc2-1.el5.3 - Added missing symlinks for libs (#215735) - Added samle config file (#215735) * Thu Nov 23 2006 Phil Knirsch - 1.0.0rc2-1.el5.2 - Necessary fix so openssl finds the module properly (#215735) * Thu May 11 2006 Phil Knirsch - 1.0.0rc2 - Initial package.