- fix CAN-2005-2969 - remove SSL_OP_MSIE_SSLV2_RSA_PADDING which disables
the countermeasure against man in the middle attack in SSLv2 (#169863) - use sha1 as default for CA and cert requests - CAN-2005-2946 (#169803)
This commit is contained in:
parent
86877cdfc8
commit
b073820eb5
13
openssl.spec
13
openssl.spec
@ -8,7 +8,7 @@
|
|||||||
%define soversion 5
|
%define soversion 5
|
||||||
|
|
||||||
# Number of threads to spawn when testing some threading fixes.
|
# Number of threads to spawn when testing some threading fixes.
|
||||||
#%define thread_test_threads %{?threads:%{threads}}%{!?threads:100}
|
#%define thread_test_threads %{?threads:%{threads}}%{!?threads:1}
|
||||||
|
|
||||||
# Arches on which we need to prevent arch conflicts on opensslconf.h, must
|
# Arches on which we need to prevent arch conflicts on opensslconf.h, must
|
||||||
# also be handled in opensslconf-new.h.
|
# also be handled in opensslconf-new.h.
|
||||||
@ -22,7 +22,7 @@
|
|||||||
Summary: The OpenSSL toolkit.
|
Summary: The OpenSSL toolkit.
|
||||||
Name: openssl
|
Name: openssl
|
||||||
Version: 0.9.7f
|
Version: 0.9.7f
|
||||||
Release: 9
|
Release: 10
|
||||||
Source: openssl-%{version}-usa.tar.bz2
|
Source: openssl-%{version}-usa.tar.bz2
|
||||||
Source1: hobble-openssl
|
Source1: hobble-openssl
|
||||||
Source2: Makefile.certificate
|
Source2: Makefile.certificate
|
||||||
@ -55,6 +55,7 @@ Patch47: openssl-0.9.7f-can-2005-0109.patch
|
|||||||
Patch48: openssl-0.9.7f-dsa-consttime.patch
|
Patch48: openssl-0.9.7f-dsa-consttime.patch
|
||||||
Patch49: openssl-0.9.7f-bn-ppc-div.patch
|
Patch49: openssl-0.9.7f-bn-ppc-div.patch
|
||||||
Patch50: openssl-0.9.7f-apps-initialize.patch
|
Patch50: openssl-0.9.7f-apps-initialize.patch
|
||||||
|
Patch51: openssl-0.9.7a-can-2005-2969.patch
|
||||||
|
|
||||||
License: BSDish
|
License: BSDish
|
||||||
Group: System Environment/Libraries
|
Group: System Environment/Libraries
|
||||||
@ -140,6 +141,8 @@ popd
|
|||||||
%patch48 -p1 -b .dsa-consttime
|
%patch48 -p1 -b .dsa-consttime
|
||||||
%patch49 -p1 -b .ppc-div
|
%patch49 -p1 -b .ppc-div
|
||||||
%patch50 -p1 -b .apps-initialize
|
%patch50 -p1 -b .apps-initialize
|
||||||
|
# CAN-2005-2969
|
||||||
|
%patch51 -p0 -b .ssl2-rollback
|
||||||
|
|
||||||
# Modify the various perl scripts to reference perl in the right location.
|
# Modify the various perl scripts to reference perl in the right location.
|
||||||
perl util/perlpath.pl `dirname %{__perl}`
|
perl util/perlpath.pl `dirname %{__perl}`
|
||||||
@ -407,6 +410,12 @@ rm -f $RPM_BUILD_ROOT/%{_libdir}/libssl.so.%{soversion}
|
|||||||
%postun -p /sbin/ldconfig
|
%postun -p /sbin/ldconfig
|
||||||
|
|
||||||
%changelog
|
%changelog
|
||||||
|
* Wed Oct 12 2005 Tomas Mraz <tmraz@redhat.com> 0.9.7f-10
|
||||||
|
- fix CAN-2005-2969 - remove SSL_OP_MSIE_SSLV2_RSA_PADDING which
|
||||||
|
disables the countermeasure against man in the middle attack in SSLv2
|
||||||
|
(#169863)
|
||||||
|
- use sha1 as default for CA and cert requests - CAN-2005-2946 (#169803)
|
||||||
|
|
||||||
* Tue Aug 23 2005 Tomas Mraz <tmraz@redhat.com> 0.9.7f-9
|
* Tue Aug 23 2005 Tomas Mraz <tmraz@redhat.com> 0.9.7f-9
|
||||||
- add *.so.soversion as symlinks in /lib (#165264)
|
- add *.so.soversion as symlinks in /lib (#165264)
|
||||||
- remove unpackaged symlinks (#159595)
|
- remove unpackaged symlinks (#159595)
|
||||||
|
Loading…
Reference in New Issue
Block a user