import tog-pegasus-2.14.1-46.el8
This commit is contained in:
parent
919b57c51b
commit
df2fa43eea
24
SOURCES/pegasus-2.14.1-crypto-policy-compliance.patch
Normal file
24
SOURCES/pegasus-2.14.1-crypto-policy-compliance.patch
Normal file
@ -0,0 +1,24 @@
|
||||
diff -up pegasus/rpm/manLinux/man8.Z/cimconfig.8.orig pegasus/rpm/manLinux/man8.Z/cimconfig.8
|
||||
--- pegasus/rpm/manLinux/man8.Z/cimconfig.8.orig 2020-06-25 14:03:32.211892328 +0200
|
||||
+++ pegasus/rpm/manLinux/man8.Z/cimconfig.8 2020-06-25 14:11:31.687821336 +0200
|
||||
@@ -463,7 +463,7 @@ mentioned between single quotes since it
|
||||
like .+, !, -.
|
||||
.PD 0
|
||||
.IP
|
||||
-.BR "Default Value: " DEFAULT\ (The\ default\ cipher\ list\ of\ OpenSSL)
|
||||
+.BR "Default Value: " PROFILE=SYSTEM\ (Protocols\ enforced\ by\ system-wide\ crypto\ policy)
|
||||
.IP
|
||||
.BR Dynamic: \0No
|
||||
.PD
|
||||
diff -up pegasus/src/Pegasus/Config/SecurityPropertyOwner.cpp.orig pegasus/src/Pegasus/Config/SecurityPropertyOwner.cpp
|
||||
--- pegasus/src/Pegasus/Config/SecurityPropertyOwner.cpp.orig 2020-06-25 14:02:19.104445704 +0200
|
||||
+++ pegasus/src/Pegasus/Config/SecurityPropertyOwner.cpp 2020-06-25 14:02:54.695663130 +0200
|
||||
@@ -140,7 +140,7 @@ static struct ConfigPropertyRow properti
|
||||
#ifdef PEGASUS_ENABLE_USERGROUP_AUTHORIZATION
|
||||
{"authorizedUserGroups", "", IS_STATIC, IS_VISIBLE},
|
||||
#endif
|
||||
- {"sslCipherSuite", "DEFAULT", IS_STATIC, IS_VISIBLE}
|
||||
+ {"sslCipherSuite", "PROFILE=SYSTEM", IS_STATIC, IS_VISIBLE}
|
||||
#ifdef PEGASUS_ENABLE_SESSION_COOKIES
|
||||
,{"httpSessionTimeout", "0", IS_DYNAMIC, IS_VISIBLE}
|
||||
#endif
|
@ -1 +1 @@
|
||||
d /var/run/tog-pegasus 1750 root pegasus -
|
||||
d /run/tog-pegasus 1750 root pegasus -
|
||||
|
@ -8,7 +8,7 @@
|
||||
|
||||
Name: tog-pegasus
|
||||
Version: %{major_ver}.1
|
||||
Release: 44%{?dist}
|
||||
Release: 46%{?dist}
|
||||
Epoch: 2
|
||||
Summary: OpenPegasus WBEM Services for Linux
|
||||
|
||||
@ -98,6 +98,9 @@ Patch40: pegasus-2.14.1-tesid.patch
|
||||
Patch41: pegasus-2.14.1-ssl-cert-path.patch
|
||||
# 42: port to openssl-1.1
|
||||
Patch42: pegasus-2.14.1-openssl-1.1-fix.patch
|
||||
# 43: comply with system crypto policy
|
||||
# (use 'PROFILE=SYSTEM' instead of 'DEFAULT' in SSL_CTX_set_cipher_list calls)
|
||||
Patch43: pegasus-2.14.1-crypto-policy-compliance.patch
|
||||
|
||||
BuildRequires: procps, libstdc++, pam-devel
|
||||
BuildRequires: openssl, openssl-devel
|
||||
@ -251,6 +254,7 @@ yes | mak/CreateDmtfSchema 238 %{SOURCE9} cim_schema_2.38.0
|
||||
%patch40 -p1 -b .testid
|
||||
%patch41 -p1 -b .ssl-cert-path
|
||||
%patch42 -p1 -b .openssl-1.1-fix
|
||||
%patch43 -p1 -b .crypto-policy-compliance
|
||||
|
||||
|
||||
%build
|
||||
@ -552,6 +556,14 @@ fi
|
||||
|
||||
|
||||
%changelog
|
||||
* Mon Jun 29 2020 Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-46
|
||||
- Comply with system crypto policy
|
||||
Resolves: #1842838
|
||||
|
||||
* Tue May 05 2020 Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-45
|
||||
- Fix tmpfiles path
|
||||
Resolves: #1805977
|
||||
|
||||
* Wed Aug 01 2018 Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-44
|
||||
- Review and fix %%files section because of failing rpm -V
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user