[packages/dehydrated] Rel 3; fix for newer openssls

arekm arekm at pld-linux.org
Wed Apr 16 11:24:10 CEST 2025


commit 471c230b0bf2b2e9665b3c1e74977b23f22c1985
Author: Arkadiusz Miśkiewicz <arekm at maven.pl>
Date:   Wed Apr 16 10:21:07 2025 +0200

    Rel 3; fix for newer openssls

 dehydrated.spec |  4 +++-
 openssl.patch   | 24 ++++++++++++++++++++++++
 2 files changed, 27 insertions(+), 1 deletion(-)
---
diff --git a/dehydrated.spec b/dehydrated.spec
index 17e712b..16b876e 100644
--- a/dehydrated.spec
+++ b/dehydrated.spec
@@ -1,7 +1,7 @@
 Summary:	letsencrypt/acme client implemented as a shell-script
 Name:		dehydrated
 Version:	0.7.1
-Release:	2
+Release:	3
 License:	MIT
 Group:		Applications/Networking
 Source0:	https://github.com/dehydrated-io/dehydrated/archive/v%{version}/%{name}-%{version}.tar.gz
@@ -16,6 +16,7 @@ Source8:	sudoers
 Source9:	cronjob-%{name}.timer
 Source10:	cronjob-%{name}.service
 Patch0:		pld.patch
+Patch1:		openssl.patch
 URL:		https://dehydrated.io/
 BuildRequires:	rpmbuild(macros) >= 1.713
 Requires:	ca-certificates
@@ -56,6 +57,7 @@ Current features:
 %prep
 %setup -q
 %patch -P 0 -p1
+%patch -P 1 -p1
 
 %install
 rm -rf $RPM_BUILD_ROOT
diff --git a/openssl.patch b/openssl.patch
new file mode 100644
index 0000000..4cec86d
--- /dev/null
+++ b/openssl.patch
@@ -0,0 +1,24 @@
+From 4fd777e87e589652b1127b79ac6688ed7cb151fe Mon Sep 17 00:00:00 2001
+From: Wilfried Teiken <wteiken at teiken.org>
+Date: Sun, 3 Dec 2023 15:07:01 -0500
+Subject: [PATCH] Ignore output of 'openssl req -verify'.
+
+Newer versions of openssl seem to send the verify outout to stdout instead of
+stderr in the past. Ignore that output when retrieving altnames.
+---
+ dehydrated | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/dehydrated b/dehydrated
+index a2bff408..a15fb048 100755
+--- a/dehydrated
++++ b/dehydrated
+@@ -1011,7 +1011,7 @@ signed_request() {
+ extract_altnames() {
+   csr="${1}" # the CSR itself (not a file)
+ 
+-  if ! <<<"${csr}" "${OPENSSL}" req -verify -noout 2>/dev/null; then
++  if ! <<<"${csr}" "${OPENSSL}" req -verify -noout >/dev/null 2>&1; then
+     _exiterr "Certificate signing request isn't valid"
+   fi
+ 
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/dehydrated.git/commitdiff/471c230b0bf2b2e9665b3c1e74977b23f22c1985



More information about the pld-cvs-commit mailing list