diff --git a/openssl.spec b/openssl.spec index a48984d..35f09d8 100644 --- a/openssl.spec +++ b/openssl.spec @@ -29,7 +29,7 @@ print(string.sub(hash, 0, 16)) Summary: Utilities from the general purpose cryptography library with TLS implementation Name: openssl Version: 3.2.2 -Release: 5%{?dist} +Release: 6%{?dist} Epoch: 1 Source: openssl-%{version}.tar.gz Source2: Makefile.certificate @@ -431,12 +431,10 @@ basearch=sparc basearch=sparc64 %endif -# Next step of gradual disablement of SSL3. -# Make SSL3 disappear to newly built dependencies. -sed -i '/^\#ifndef OPENSSL_NO_SSL_TRACE/i\ -#ifndef OPENSSL_NO_SSL3\ -# define OPENSSL_NO_SSL3\ -#endif' $RPM_BUILD_ROOT/%{_prefix}/include/openssl/opensslconf.h +sed -i '/^\# ifndef OPENSSL_NO_STATIC_ENGINE/i\ +# ifndef OPENSSL_NO_ENGINE\ +# define OPENSSL_NO_ENGINE\ +# endif' $RPM_BUILD_ROOT/%{_prefix}/include/openssl/configuration.h %ifarch %{multilib_arches} # Do an configuration.h switcheroo to avoid file conflicts on systems where you @@ -486,8 +484,10 @@ ln -s /etc/crypto-policies/back-ends/openssl_fips.config $RPM_BUILD_ROOT%{_sysco %files devel %doc CHANGES.md doc/dir-locals.example.el doc/openssl-c-indent.el %{_prefix}/include/openssl +%exclude %{_prefix}/include/openssl/engine*.h %{_libdir}/*.so %{_mandir}/man3/* +%exclude %{_mandir}/man3/ENGINE* %{_libdir}/pkgconfig/*.pc %files perl @@ -505,6 +505,10 @@ ln -s /etc/crypto-policies/back-ends/openssl_fips.config $RPM_BUILD_ROOT%{_sysco %ldconfig_scriptlets libs %changelog +* Mon Jul 01 2024 Dmitry Belyavskiy - 1:3.2.2-6 +- Do not install ENGINE headers, man pages, and define OPENSSL_NO_ENGINE + Resolves: RHEL-45704 + * Mon Jul 1 2024 Daiki Ueno - 1:3.2.2-5 - Replace HKDF backward compatibility patch with the official one Related: RHEL-41261