From c7f4d269b1dab2ccdb2d4d9394620818872c7348 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jaroslav=20=C5=A0karvada?= Date: Tue, 3 Aug 2021 00:15:19 +0200 Subject: [PATCH] Fixed scriptlets to work with openssl-3.0 Resolves: rhbz#1985918 --- postfix.spec | 14 ++++++++++---- 1 file changed, 10 insertions(+), 4 deletions(-) diff --git a/postfix.spec b/postfix.spec index d44b49c..1fa55d0 100644 --- a/postfix.spec +++ b/postfix.spec @@ -49,7 +49,7 @@ Name: postfix Summary: Postfix Mail Transport Agent Version: 3.5.9 -Release: 9%{?dist} +Release: 10%{?dist} Epoch: 2 URL: http://www.postfix.org License: (IBM and GPLv2+) or (EPL-2.0 and GPLv2+) @@ -502,7 +502,7 @@ fi # Create self-signed SSL certificate if [ ! -f %{sslkey} ]; then umask 077 - %{_bindir}/openssl genrsa 4096 > %{sslkey} 2> /dev/null + %{_bindir}/openssl genpkey -algorithm RSA -pkeyopt rsa_keygen_bits:4096 -out %{sslkey} fi if [ ! -f %{sslcert} ]; then @@ -511,8 +511,10 @@ if [ ! -f %{sslcert} ]; then FQDN=localhost.localdomain fi - %{_bindir}/openssl req -new -key %{sslkey} -x509 -sha256 -days 365 -set_serial $RANDOM -out %{sslcert} \ - -subj "/C=--/ST=SomeState/L=SomeCity/O=SomeOrganization/OU=SomeOrganizationalUnit/CN=${FQDN}/emailAddress=root@${FQDN}" + req_cmd="%{_bindir}/openssl req -new -key %{sslkey} -x509 -sha256 -days 365 -set_serial $RANDOM -out %{sslcert} \ + -subj /C=--/ST=SomeState/L=SomeCity/O=SomeOrganization/OU=SomeOrganizationalUnit/CN=${FQDN}/emailAddress=root@${FQDN}" +# openssl-3.0 and fallback for backward compatibility with openssl < 3.0 + $req_cmd -noenc -copy_extension none 2>/dev/null || $req_cmd chmod 644 %{sslcert} fi @@ -785,6 +787,10 @@ fi %endif %changelog +* Mon Aug 2 2021 Jaroslav Škarvada - 2:3.5.9-10 +- Fixed scriptlets to work with openssl-3.0 + Resolves: rhbz#1985918 + * Wed Jun 16 2021 Mohan Boddu - 2:3.5.9-9 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065