OpenSSL v0.9.8e RPM spec file patch
A patch to the spec file from openssl-0.9.8e-12.el5_4.6.src.rpm to produce just the binary libraries as a new compatibility package
openssl098e.spec-0.9.8e-12.6-binary.compatibility.patch — differences between files, 5Kb
File contents
--- openssl.spec 2010-04-18 13:24:21.000000000 +1200 +++ openssl098e.spec 2010-04-18 13:12:42.000000000 +1200 @@ -18,8 +18,8 @@ # Arches for which we don't build subpackages. %define optimize_arches i686 -Summary: The OpenSSL toolkit -Name: openssl +Summary: The OpenSSL toolkit (el5 compatibility) +Name: openssl098e Version: 0.9.8e Release: 12%{?dist}.6 # The tarball is based on the openssl-fips-1.2.0-test.tar.gz tarball @@ -111,7 +111,7 @@ package provides Perl scripts for conver from other formats to the formats used by the OpenSSL toolkit. %prep -%setup -q -n %{name}-fips-%{version} +%setup -q -n openssl-fips-%{version} %{SOURCE1} > /dev/null %patch0 -p1 -b .redhat @@ -259,52 +259,6 @@ for lib in $RPM_BUILD_ROOT/%{_lib}/*.so. rm -f $RPM_BUILD_ROOT%{_libdir}/`basename ${lib} .%{version}`.%{soversion} done -# Install a makefile for generating keys and self-signed certs, and a script -# for generating them on the fly. -mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/certs -install -m644 %{SOURCE2} $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/certs/Makefile -install -m755 %{SOURCE6} $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/certs/make-dummy-cert - -# Make sure we actually include the headers we built against. -for header in $RPM_BUILD_ROOT%{_includedir}/openssl/* ; do - if [ -f ${header} -a -f include/openssl/$(basename ${header}) ] ; then - install -m644 include/openssl/`basename ${header}` ${header} - fi -done - -# Rename man pages so that they don't conflict with other system man pages. -pushd $RPM_BUILD_ROOT%{_mandir} -for manpage in man*/* ; do - if [ -L ${manpage} ]; then - TARGET=`ls -l ${manpage} | awk '{ print $NF }'` - ln -snf ${TARGET}ssl ${manpage}ssl - rm -f ${manpage} - else - mv ${manpage} ${manpage}ssl - fi -done -for conflict in passwd rand ; do - rename ${conflict} ssl${conflict} man*/${conflict}* -done -popd - -# Pick a CA script. -pushd $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/misc -mv CA.sh CA -popd - -mkdir -m700 $RPM_BUILD_ROOT%{_sysconfdir}/pki/CA -mkdir -m700 $RPM_BUILD_ROOT%{_sysconfdir}/pki/CA/private - -# Install root CA stuffs. -cat << EOF > RHNS-blurb.txt -# -# RHNS CA certificate. Appended to the ca-bundle at package build-time. -# -EOF -cat %{SOURCE3} RHNS-blurb.txt %{SOURCE4} > ca-bundle.crt -install -m644 ca-bundle.crt $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/certs/ -ln -s certs/ca-bundle.crt $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/cert.pem # Fix libdir. pushd $RPM_BUILD_ROOT/%{_libdir}/pkgconfig @@ -322,30 +276,20 @@ basearch=%{_arch} basearch=i386 %endif -%ifarch %{multilib_arches} -# Do an opensslconf.h switcheroo to avoid file conflicts on systems where you -# can have both a 32- and 64-bit version of the library, and they each need -# their own correct-but-different versions of opensslconf.h to be usable. -install -m644 %{SOURCE10} \ - $RPM_BUILD_ROOT/%{_prefix}/include/openssl/opensslconf-${basearch}.h -cat $RPM_BUILD_ROOT/%{_prefix}/include/openssl/opensslconf.h >> \ - $RPM_BUILD_ROOT/%{_prefix}/include/openssl/opensslconf-${basearch}.h -install -m644 %{SOURCE9} \ - $RPM_BUILD_ROOT/%{_prefix}/include/openssl/opensslconf.h -%endif +rm -rf $RPM_BUILD_ROOT/%{_bindir}/openssl -%ifarch %{optimize_arches} # Remove bits which belong in subpackages. rm -rf $RPM_BUILD_ROOT/%{_prefix}/include/openssl rm -rf $RPM_BUILD_ROOT/%{_libdir}/*.a rm -rf $RPM_BUILD_ROOT/%{_libdir}/*.so rm -rf $RPM_BUILD_ROOT/%{_libdir}/pkgconfig +rm -rf $RPM_BUILD_ROOT/%{_libdir}/openssl/engines rm -rf $RPM_BUILD_ROOT/%{_mandir}/man3/* rm -rf $RPM_BUILD_ROOT/%{_bindir}/c_rehash -rm -rf $RPM_BUILD_ROOT/%{_mandir}/man1*/*.pl* -rm -rf $RPM_BUILD_ROOT/%{_sysconfdir}/pki/tls/misc/*.pl -%endif +rm -rf $RPM_BUILD_ROOT/%{_mandir} + +rm -rf $RPM_BUILD_ROOT/%{_sysconfdir}/pki # Remove fips fingerprint script rm -rf $RPM_BUILD_ROOT/%{_bindir}/openssl_fips_fingerprint @@ -355,59 +299,21 @@ rm -rf $RPM_BUILD_ROOT/%{_bindir}/openss %files %defattr(-,root,root) -%doc FAQ LICENSE CHANGES NEWS INSTALL README -%doc doc/c-indentation.el doc/openssl.txt -%doc doc/openssl_button.html doc/openssl_button.gif -%doc doc/ssleay.txt -%doc README.FIPS -%dir %{_sysconfdir}/pki/tls -%dir %{_sysconfdir}/pki/tls/certs -%{_sysconfdir}/pki/tls/certs/make-dummy-cert -%{_sysconfdir}/pki/tls/certs/Makefile -%{_sysconfdir}/pki/tls/cert.pem -%dir %{_sysconfdir}/pki/tls/misc -%{_sysconfdir}/pki/tls/misc/CA -%dir %{_sysconfdir}/pki/CA -%dir %{_sysconfdir}/pki/CA/private -%{_sysconfdir}/pki/tls/misc/c_* -%{_sysconfdir}/pki/tls/private -%config(noreplace) %{_sysconfdir}/pki/tls/openssl.cnf -%config(noreplace) %{_sysconfdir}/pki/tls/certs/ca-bundle.crt -%attr(0755,root,root) %{_bindir}/openssl %attr(0755,root,root) /%{_lib}/*.so.%{version} %attr(0755,root,root) /%{_lib}/*.so.%{soversion} %attr(0644,root,root) /%{_lib}/.libcrypto.so.*.hmac %attr(0644,root,root) /%{_lib}/.libssl.so.*.hmac -%dir %{_libdir}/openssl -%attr(0755,root,root) %{_libdir}/openssl/engines -%attr(0644,root,root) %{_mandir}/man1*/[ABD-Zabcd-z]* -%attr(0644,root,root) %{_mandir}/man5*/* -%attr(0644,root,root) %{_mandir}/man7*/* - -%ifnarch %{optimize_arches} -%files devel -%defattr(-,root,root) -%{_prefix}/include/openssl -%attr(0644,root,root) %{_libdir}/*.a -%attr(0755,root,root) %{_libdir}/*.so -%attr(0644,root,root) %{_mandir}/man3*/* -%attr(0644,root,root) %{_libdir}/pkgconfig/*.pc - -%files perl -%defattr(-,root,root) -%attr(0755,root,root) %{_bindir}/c_rehash -%attr(0644,root,root) %{_mandir}/man1*/*.pl* -%dir %{_sysconfdir}/pki/tls/misc -%{_sysconfdir}/pki/tls/misc/*.pl -%endif %post -p /sbin/ldconfig %postun -p /sbin/ldconfig %changelog +* Sun Apr 18 2010 Greg Brackley <greg.brackley-openssl-rpm@lucidsolutions.co.nz> 0.9.8e-12.6 +- Package as a chopped down binary release for compatibility + * Fri Mar 12 2010 Tomas Mraz <tmraz@redhat.com> 0.9.8e-12.6 - fix CVE-2009-3245 - add missing bn_wexpand return checks (#570924)