Do not install ENGINE headers, man pages, and define OPENSSL_NO_ENGINE

Resolves: RHEL-45704
This commit is contained in:
Dmitry Belyavskiy 2024-07-01 16:51:41 +02:00
parent 68e0354892
commit 6084652840

View File

@ -29,7 +29,7 @@ print(string.sub(hash, 0, 16))
Summary: Utilities from the general purpose cryptography library with TLS implementation Summary: Utilities from the general purpose cryptography library with TLS implementation
Name: openssl Name: openssl
Version: 3.2.2 Version: 3.2.2
Release: 5%{?dist} Release: 6%{?dist}
Epoch: 1 Epoch: 1
Source: openssl-%{version}.tar.gz Source: openssl-%{version}.tar.gz
Source2: Makefile.certificate Source2: Makefile.certificate
@ -431,12 +431,10 @@ basearch=sparc
basearch=sparc64 basearch=sparc64
%endif %endif
# Next step of gradual disablement of SSL3. sed -i '/^\# ifndef OPENSSL_NO_STATIC_ENGINE/i\
# Make SSL3 disappear to newly built dependencies. # ifndef OPENSSL_NO_ENGINE\
sed -i '/^\#ifndef OPENSSL_NO_SSL_TRACE/i\ # define OPENSSL_NO_ENGINE\
#ifndef OPENSSL_NO_SSL3\ # endif' $RPM_BUILD_ROOT/%{_prefix}/include/openssl/configuration.h
# define OPENSSL_NO_SSL3\
#endif' $RPM_BUILD_ROOT/%{_prefix}/include/openssl/opensslconf.h
%ifarch %{multilib_arches} %ifarch %{multilib_arches}
# Do an configuration.h switcheroo to avoid file conflicts on systems where you # Do an configuration.h switcheroo to avoid file conflicts on systems where you
@ -486,8 +484,10 @@ ln -s /etc/crypto-policies/back-ends/openssl_fips.config $RPM_BUILD_ROOT%{_sysco
%files devel %files devel
%doc CHANGES.md doc/dir-locals.example.el doc/openssl-c-indent.el %doc CHANGES.md doc/dir-locals.example.el doc/openssl-c-indent.el
%{_prefix}/include/openssl %{_prefix}/include/openssl
%exclude %{_prefix}/include/openssl/engine*.h
%{_libdir}/*.so %{_libdir}/*.so
%{_mandir}/man3/* %{_mandir}/man3/*
%exclude %{_mandir}/man3/ENGINE*
%{_libdir}/pkgconfig/*.pc %{_libdir}/pkgconfig/*.pc
%files perl %files perl
@ -505,6 +505,10 @@ ln -s /etc/crypto-policies/back-ends/openssl_fips.config $RPM_BUILD_ROOT%{_sysco
%ldconfig_scriptlets libs %ldconfig_scriptlets libs
%changelog %changelog
* Mon Jul 01 2024 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-6
- Do not install ENGINE headers, man pages, and define OPENSSL_NO_ENGINE
Resolves: RHEL-45704
* Mon Jul 1 2024 Daiki Ueno <dueno@redhat.com> - 1:3.2.2-5 * Mon Jul 1 2024 Daiki Ueno <dueno@redhat.com> - 1:3.2.2-5
- Replace HKDF backward compatibility patch with the official one - Replace HKDF backward compatibility patch with the official one
Related: RHEL-41261 Related: RHEL-41261