OpenSSL v0.9.8e RPM spec file patch
A patch to the spec file from openssl-0.9.8e-12.el5_4.6.src.rpm to produce just the binary libraries as a new compatibility package
openssl098e.spec-0.9.8e-12.6-binary.compatibility.patch
—
differences between files,
5Kb
File contents
--- openssl.spec 2010-04-18 13:24:21.000000000 +1200
+++ openssl098e.spec 2010-04-18 13:12:42.000000000 +1200
@@ -18,8 +18,8 @@
# Arches for which we don't build subpackages.
%define optimize_arches i686
-Summary: The OpenSSL toolkit
-Name: openssl
+Summary: The OpenSSL toolkit (el5 compatibility)
+Name: openssl098e
Version: 0.9.8e
Release: 12%{?dist}.6
# The tarball is based on the openssl-fips-1.2.0-test.tar.gz tarball
@@ -111,7 +111,7 @@ package provides Perl scripts for conver
from other formats to the formats used by the OpenSSL toolkit.
%prep
-%setup -q -n %{name}-fips-%{version}
+%setup -q -n openssl-fips-%{version}
%{SOURCE1} > /dev/null
%patch0 -p1 -b .redhat
@@ -259,52 +259,6 @@ for lib in $RPM_BUILD_ROOT/%{_lib}/*.so.
rm -f $RPM_BUILD_ROOT%{_libdir}/`basename ${lib} .%{version}`.%{soversion}
done
-# Install a makefile for generating keys and self-signed certs, and a script
-# for generating them on the fly.
-mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/certs
-install -m644 %{SOURCE2} $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/certs/Makefile
-install -m755 %{SOURCE6} $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/certs/make-dummy-cert
-
-# Make sure we actually include the headers we built against.
-for header in $RPM_BUILD_ROOT%{_includedir}/openssl/* ; do
- if [ -f ${header} -a -f include/openssl/$(basename ${header}) ] ; then
- install -m644 include/openssl/`basename ${header}` ${header}
- fi
-done
-
-# Rename man pages so that they don't conflict with other system man pages.
-pushd $RPM_BUILD_ROOT%{_mandir}
-for manpage in man*/* ; do
- if [ -L ${manpage} ]; then
- TARGET=`ls -l ${manpage} | awk '{ print $NF }'`
- ln -snf ${TARGET}ssl ${manpage}ssl
- rm -f ${manpage}
- else
- mv ${manpage} ${manpage}ssl
- fi
-done
-for conflict in passwd rand ; do
- rename ${conflict} ssl${conflict} man*/${conflict}*
-done
-popd
-
-# Pick a CA script.
-pushd $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/misc
-mv CA.sh CA
-popd
-
-mkdir -m700 $RPM_BUILD_ROOT%{_sysconfdir}/pki/CA
-mkdir -m700 $RPM_BUILD_ROOT%{_sysconfdir}/pki/CA/private
-
-# Install root CA stuffs.
-cat << EOF > RHNS-blurb.txt
-#
-# RHNS CA certificate. Appended to the ca-bundle at package build-time.
-#
-EOF
-cat %{SOURCE3} RHNS-blurb.txt %{SOURCE4} > ca-bundle.crt
-install -m644 ca-bundle.crt $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/certs/
-ln -s certs/ca-bundle.crt $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/cert.pem
# Fix libdir.
pushd $RPM_BUILD_ROOT/%{_libdir}/pkgconfig
@@ -322,30 +276,20 @@ basearch=%{_arch}
basearch=i386
%endif
-%ifarch %{multilib_arches}
-# Do an opensslconf.h switcheroo to avoid file conflicts on systems where you
-# can have both a 32- and 64-bit version of the library, and they each need
-# their own correct-but-different versions of opensslconf.h to be usable.
-install -m644 %{SOURCE10} \
- $RPM_BUILD_ROOT/%{_prefix}/include/openssl/opensslconf-${basearch}.h
-cat $RPM_BUILD_ROOT/%{_prefix}/include/openssl/opensslconf.h >> \
- $RPM_BUILD_ROOT/%{_prefix}/include/openssl/opensslconf-${basearch}.h
-install -m644 %{SOURCE9} \
- $RPM_BUILD_ROOT/%{_prefix}/include/openssl/opensslconf.h
-%endif
+rm -rf $RPM_BUILD_ROOT/%{_bindir}/openssl
-%ifarch %{optimize_arches}
# Remove bits which belong in subpackages.
rm -rf $RPM_BUILD_ROOT/%{_prefix}/include/openssl
rm -rf $RPM_BUILD_ROOT/%{_libdir}/*.a
rm -rf $RPM_BUILD_ROOT/%{_libdir}/*.so
rm -rf $RPM_BUILD_ROOT/%{_libdir}/pkgconfig
+rm -rf $RPM_BUILD_ROOT/%{_libdir}/openssl/engines
rm -rf $RPM_BUILD_ROOT/%{_mandir}/man3/*
rm -rf $RPM_BUILD_ROOT/%{_bindir}/c_rehash
-rm -rf $RPM_BUILD_ROOT/%{_mandir}/man1*/*.pl*
-rm -rf $RPM_BUILD_ROOT/%{_sysconfdir}/pki/tls/misc/*.pl
-%endif
+rm -rf $RPM_BUILD_ROOT/%{_mandir}
+
+rm -rf $RPM_BUILD_ROOT/%{_sysconfdir}/pki
# Remove fips fingerprint script
rm -rf $RPM_BUILD_ROOT/%{_bindir}/openssl_fips_fingerprint
@@ -355,59 +299,21 @@ rm -rf $RPM_BUILD_ROOT/%{_bindir}/openss
%files
%defattr(-,root,root)
-%doc FAQ LICENSE CHANGES NEWS INSTALL README
-%doc doc/c-indentation.el doc/openssl.txt
-%doc doc/openssl_button.html doc/openssl_button.gif
-%doc doc/ssleay.txt
-%doc README.FIPS
-%dir %{_sysconfdir}/pki/tls
-%dir %{_sysconfdir}/pki/tls/certs
-%{_sysconfdir}/pki/tls/certs/make-dummy-cert
-%{_sysconfdir}/pki/tls/certs/Makefile
-%{_sysconfdir}/pki/tls/cert.pem
-%dir %{_sysconfdir}/pki/tls/misc
-%{_sysconfdir}/pki/tls/misc/CA
-%dir %{_sysconfdir}/pki/CA
-%dir %{_sysconfdir}/pki/CA/private
-%{_sysconfdir}/pki/tls/misc/c_*
-%{_sysconfdir}/pki/tls/private
-%config(noreplace) %{_sysconfdir}/pki/tls/openssl.cnf
-%config(noreplace) %{_sysconfdir}/pki/tls/certs/ca-bundle.crt
-%attr(0755,root,root) %{_bindir}/openssl
%attr(0755,root,root) /%{_lib}/*.so.%{version}
%attr(0755,root,root) /%{_lib}/*.so.%{soversion}
%attr(0644,root,root) /%{_lib}/.libcrypto.so.*.hmac
%attr(0644,root,root) /%{_lib}/.libssl.so.*.hmac
-%dir %{_libdir}/openssl
-%attr(0755,root,root) %{_libdir}/openssl/engines
-%attr(0644,root,root) %{_mandir}/man1*/[ABD-Zabcd-z]*
-%attr(0644,root,root) %{_mandir}/man5*/*
-%attr(0644,root,root) %{_mandir}/man7*/*
-
-%ifnarch %{optimize_arches}
-%files devel
-%defattr(-,root,root)
-%{_prefix}/include/openssl
-%attr(0644,root,root) %{_libdir}/*.a
-%attr(0755,root,root) %{_libdir}/*.so
-%attr(0644,root,root) %{_mandir}/man3*/*
-%attr(0644,root,root) %{_libdir}/pkgconfig/*.pc
-
-%files perl
-%defattr(-,root,root)
-%attr(0755,root,root) %{_bindir}/c_rehash
-%attr(0644,root,root) %{_mandir}/man1*/*.pl*
-%dir %{_sysconfdir}/pki/tls/misc
-%{_sysconfdir}/pki/tls/misc/*.pl
-%endif
%post -p /sbin/ldconfig
%postun -p /sbin/ldconfig
%changelog
+* Sun Apr 18 2010 Greg Brackley <greg.brackley-openssl-rpm@lucidsolutions.co.nz> 0.9.8e-12.6
+- Package as a chopped down binary release for compatibility
+
* Fri Mar 12 2010 Tomas Mraz <tmraz@redhat.com> 0.9.8e-12.6
- fix CVE-2009-3245 - add missing bn_wexpand return checks (#570924)

