Personal tools
You are here: Home Web Reverse Proxy And Cache images OpenSSL v0.9.8e RPM spec file patch

OpenSSL v0.9.8e RPM spec file patch

A patch to the spec file from openssl-0.9.8e-12.el5_4.6.src.rpm to produce just the binary libraries as a new compatibility package

openssl098e.spec-0.9.8e-12.6-binary.compatibility.patch — differences between files, 5Kb

File contents

--- openssl.spec	2010-04-18 13:24:21.000000000 +1200
+++ openssl098e.spec	2010-04-18 13:12:42.000000000 +1200
@@ -18,8 +18,8 @@
 # Arches for which we don't build subpackages.
 %define optimize_arches i686
 
-Summary: The OpenSSL toolkit
-Name: openssl
+Summary: The OpenSSL toolkit (el5 compatibility)
+Name: openssl098e
 Version: 0.9.8e
 Release: 12%{?dist}.6
 # The tarball is based on the openssl-fips-1.2.0-test.tar.gz tarball
@@ -111,7 +111,7 @@ package provides Perl scripts for conver
 from other formats to the formats used by the OpenSSL toolkit.
 
 %prep
-%setup -q -n %{name}-fips-%{version}
+%setup -q -n openssl-fips-%{version}
 
 %{SOURCE1} > /dev/null
 %patch0 -p1 -b .redhat
@@ -259,52 +259,6 @@ for lib in $RPM_BUILD_ROOT/%{_lib}/*.so.
 	rm -f $RPM_BUILD_ROOT%{_libdir}/`basename ${lib} .%{version}`.%{soversion}
 done
 
-# Install a makefile for generating keys and self-signed certs, and a script
-# for generating them on the fly.
-mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/certs
-install -m644 %{SOURCE2} $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/certs/Makefile
-install -m755 %{SOURCE6} $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/certs/make-dummy-cert
-
-# Make sure we actually include the headers we built against.
-for header in $RPM_BUILD_ROOT%{_includedir}/openssl/* ; do
-	if [ -f ${header} -a -f include/openssl/$(basename ${header}) ] ; then
-		install -m644 include/openssl/`basename ${header}` ${header}
-	fi
-done
-
-# Rename man pages so that they don't conflict with other system man pages.
-pushd $RPM_BUILD_ROOT%{_mandir}
-for manpage in man*/* ; do
-	if [ -L ${manpage} ]; then
-		TARGET=`ls -l ${manpage} | awk '{ print $NF }'`
-		ln -snf ${TARGET}ssl ${manpage}ssl
-		rm -f ${manpage}
-	else
-		mv ${manpage} ${manpage}ssl
-	fi
-done
-for conflict in passwd rand ; do
-	rename ${conflict} ssl${conflict} man*/${conflict}*
-done
-popd
-
-# Pick a CA script.
-pushd  $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/misc
-mv CA.sh CA
-popd
-
-mkdir -m700 $RPM_BUILD_ROOT%{_sysconfdir}/pki/CA
-mkdir -m700 $RPM_BUILD_ROOT%{_sysconfdir}/pki/CA/private
-
-# Install root CA stuffs.
-cat << EOF > RHNS-blurb.txt
-#
-#  RHNS CA certificate.  Appended to the ca-bundle at package build-time.
-#
-EOF
-cat %{SOURCE3} RHNS-blurb.txt %{SOURCE4} > ca-bundle.crt
-install -m644 ca-bundle.crt $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/certs/
-ln -s certs/ca-bundle.crt $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/cert.pem
 
 # Fix libdir.
 pushd $RPM_BUILD_ROOT/%{_libdir}/pkgconfig
@@ -322,30 +276,20 @@ basearch=%{_arch}
 basearch=i386
 %endif
 
-%ifarch %{multilib_arches}
-# Do an opensslconf.h switcheroo to avoid file conflicts on systems where you
-# can have both a 32- and 64-bit version of the library, and they each need
-# their own correct-but-different versions of opensslconf.h to be usable.
-install -m644 %{SOURCE10} \
-   $RPM_BUILD_ROOT/%{_prefix}/include/openssl/opensslconf-${basearch}.h
-cat $RPM_BUILD_ROOT/%{_prefix}/include/openssl/opensslconf.h >> \
-   $RPM_BUILD_ROOT/%{_prefix}/include/openssl/opensslconf-${basearch}.h
-install -m644 %{SOURCE9} \
-   $RPM_BUILD_ROOT/%{_prefix}/include/openssl/opensslconf.h
-%endif
+rm -rf $RPM_BUILD_ROOT/%{_bindir}/openssl
 
-%ifarch %{optimize_arches}
 # Remove bits which belong in subpackages.
 rm -rf $RPM_BUILD_ROOT/%{_prefix}/include/openssl
 rm -rf $RPM_BUILD_ROOT/%{_libdir}/*.a
 rm -rf $RPM_BUILD_ROOT/%{_libdir}/*.so
 rm -rf $RPM_BUILD_ROOT/%{_libdir}/pkgconfig
+rm -rf $RPM_BUILD_ROOT/%{_libdir}/openssl/engines
 rm -rf $RPM_BUILD_ROOT/%{_mandir}/man3/*
 
 rm -rf $RPM_BUILD_ROOT/%{_bindir}/c_rehash
-rm -rf $RPM_BUILD_ROOT/%{_mandir}/man1*/*.pl*
-rm -rf $RPM_BUILD_ROOT/%{_sysconfdir}/pki/tls/misc/*.pl
-%endif
+rm -rf $RPM_BUILD_ROOT/%{_mandir}
+
+rm -rf $RPM_BUILD_ROOT/%{_sysconfdir}/pki
 
 # Remove fips fingerprint script 
 rm -rf $RPM_BUILD_ROOT/%{_bindir}/openssl_fips_fingerprint
@@ -355,59 +299,21 @@ rm -rf $RPM_BUILD_ROOT/%{_bindir}/openss
 
 %files 
 %defattr(-,root,root)
-%doc FAQ LICENSE CHANGES NEWS INSTALL README
-%doc doc/c-indentation.el doc/openssl.txt
-%doc doc/openssl_button.html doc/openssl_button.gif
-%doc doc/ssleay.txt
-%doc README.FIPS
-%dir %{_sysconfdir}/pki/tls
-%dir %{_sysconfdir}/pki/tls/certs
-%{_sysconfdir}/pki/tls/certs/make-dummy-cert
-%{_sysconfdir}/pki/tls/certs/Makefile
-%{_sysconfdir}/pki/tls/cert.pem
-%dir %{_sysconfdir}/pki/tls/misc
-%{_sysconfdir}/pki/tls/misc/CA
-%dir %{_sysconfdir}/pki/CA
-%dir %{_sysconfdir}/pki/CA/private
-%{_sysconfdir}/pki/tls/misc/c_*
-%{_sysconfdir}/pki/tls/private
 
-%config(noreplace) %{_sysconfdir}/pki/tls/openssl.cnf
-%config(noreplace) %{_sysconfdir}/pki/tls/certs/ca-bundle.crt
 
-%attr(0755,root,root) %{_bindir}/openssl
 %attr(0755,root,root) /%{_lib}/*.so.%{version}
 %attr(0755,root,root) /%{_lib}/*.so.%{soversion}
 %attr(0644,root,root) /%{_lib}/.libcrypto.so.*.hmac
 %attr(0644,root,root) /%{_lib}/.libssl.so.*.hmac
-%dir %{_libdir}/openssl
-%attr(0755,root,root) %{_libdir}/openssl/engines
-%attr(0644,root,root) %{_mandir}/man1*/[ABD-Zabcd-z]*
-%attr(0644,root,root) %{_mandir}/man5*/*
-%attr(0644,root,root) %{_mandir}/man7*/*
-
-%ifnarch %{optimize_arches}
-%files devel
-%defattr(-,root,root)
-%{_prefix}/include/openssl
-%attr(0644,root,root) %{_libdir}/*.a
-%attr(0755,root,root) %{_libdir}/*.so
-%attr(0644,root,root) %{_mandir}/man3*/*
-%attr(0644,root,root) %{_libdir}/pkgconfig/*.pc
-
-%files perl
-%defattr(-,root,root)
-%attr(0755,root,root) %{_bindir}/c_rehash
-%attr(0644,root,root) %{_mandir}/man1*/*.pl*
-%dir %{_sysconfdir}/pki/tls/misc
-%{_sysconfdir}/pki/tls/misc/*.pl
-%endif
 
 %post -p /sbin/ldconfig
 
 %postun -p /sbin/ldconfig
 
 %changelog
+* Sun Apr 18 2010 Greg Brackley <greg.brackley-openssl-rpm@lucidsolutions.co.nz> 0.9.8e-12.6
+- Package as a chopped down binary release for compatibility
+
 * Fri Mar 12 2010 Tomas Mraz <tmraz@redhat.com> 0.9.8e-12.6
 - fix CVE-2009-3245 - add missing bn_wexpand return checks (#570924)
 
Document Actions