[packages/openssl] Up to 4.0.1

arekm arekm at pld-linux.org
Fri Jun 12 19:11:26 CEST 2026 

commit bf6b39db126e3b90e6ada5f991fe027bbc83779e
Author: Arkadiusz Miśkiewicz <arekm at maven.pl>
Date:   Fri Jun 12 19:10:57 2026 +0200

    Up to 4.0.1

 engines-dir.patch  | 13 ------------
 modules-dir.patch  | 11 ++++++++++
 openssl-find.patch | 60 ------------------------------------------------------
 openssl.spec       | 24 +++++++++-------------
 4 files changed, 21 insertions(+), 87 deletions(-)
---
diff --git a/openssl.spec b/openssl.spec
index 9a96440..b579dee 100644
--- a/openssl.spec
+++ b/openssl.spec
@@ -2,7 +2,6 @@
 # Conditional build:
 %bcond_without	tests	# don't perform "make tests"
 %bcond_without	zlib	# zlib: note - enables CVE-2012-4929 vulnerability
-%bcond_with	sslv3	# SSLv3: note - enables CVE-2014-3566 vulnerability
 
 Summary:	OpenSSL Toolkit libraries for the "Secure Sockets Layer" (SSL v2/v3)
 Summary(de.UTF-8):	Secure Sockets Layer (SSL)-Kommunikationslibrary
@@ -13,20 +12,20 @@ Summary(pt_BR.UTF-8):	Uma biblioteca C que fornece vários algoritmos e protocol
 Summary(ru.UTF-8):	Библиотеки и утилиты для соединений через Secure Sockets Layer
 Summary(uk.UTF-8):	Бібліотеки та утиліти для з'єднань через Secure Sockets Layer
 Name:		openssl
-Version:	3.6.3
-Release:	1
+Version:	4.0.1
+# so name change, so 0.1 for now
+Release:	0.1
 License:	Apache v2.0
 Group:		Libraries
 Source0:	https://github.com/openssl/openssl/releases/download/openssl-%{version}/%{name}-%{version}.tar.gz
-# Source0-md5:	f388d6144fe20b9b2c6bf208280d6ec3
+# Source0-md5:	07e316afe26b61e72206b81706b497bb
 Source2:	%{name}.1.pl
 Source3:	%{name}-ssl-certificate.sh
 Source4:	%{name}-c_rehash.sh
 Patch0:		%{name}-optflags.patch
 Patch1:		%{name}-ca-certificates.patch
-Patch2:		%{name}-find.patch
-Patch3:		engines-dir.patch
-Patch4:		x32-sha-avx-ssse3-detect.patch
+Patch2:		modules-dir.patch
+Patch3:		x32-sha-avx-ssse3-detect.patch
 URL:		http://www.openssl.org/
 %ifarch %{arm} ppc mips sparc sparcv9
 BuildRequires:	libatomic-devel
@@ -211,7 +210,6 @@ RC4, RSA и SSL. Включает статические библиотеки д
 %patch -P1 -p1
 %patch -P2 -p1
 %patch -P3 -p1
-%patch -P4 -p1
 
 # fails with enable-sctp as of 1.1.1
 %{__rm} test/recipes/80-test_ssl_new.t
@@ -231,7 +229,6 @@ PERL="%{__perl}" \
 	-Wa,--noexecstack \
 	shared \
 	threads \
-	%{?with_sslv3:enable-ssl3}%{!?with_sslv3:no-ssl3} \
 	%{!?with_zlib:no-}zlib \
 	enable-brotli \
 	enable-cms \
@@ -323,6 +320,9 @@ ln -sf /%{_lib}/$(basename $RPM_BUILD_ROOT/%{_lib}/libssl.*) $RPM_BUILD_ROOT%{_l
 %{__mv} $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/misc/* $RPM_BUILD_ROOT%{_libdir}/%{name}
 %{__rm} -r $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/misc
 
+# pristine .dist copies of the default configs - redundant with %config(noreplace)
+%{__rm} $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/*.cnf.dist
+
 # html version of man pages - not packaged
 %{__rm} -r $RPM_BUILD_ROOT%{_docdir}/%{name}/html/man[1357]
 
@@ -364,8 +364,6 @@ fi
 %doc CHANGES.md NEWS.md README.md doc/*.txt
 %attr(755,root,root) /%{_lib}/libcrypto.so.*
 %attr(755,root,root) /%{_lib}/libssl.so.*
-%dir /%{_lib}/engines-3
-%attr(755,root,root) /%{_lib}/engines-3/*.so
 %dir /%{_lib}/ossl-modules
 %attr(755,root,root) /%{_lib}/ossl-modules/fips.so
 %attr(755,root,root) /%{_lib}/ossl-modules/legacy.so
@@ -397,7 +395,6 @@ fi
 %{_mandir}/man1/ec.1ossl*
 %{_mandir}/man1/ecparam.1ossl*
 %{_mandir}/man1/enc.1ossl*
-%{_mandir}/man1/engine.1ossl*
 %{_mandir}/man1/errstr.1ossl*
 %{_mandir}/man1/gendsa.1ossl*
 %{_mandir}/man1/genpkey.1ossl*
@@ -417,6 +414,7 @@ fi
 %{_mandir}/man1/pkeyparam.1ossl*
 %{_mandir}/man1/pkeyutl.1ossl*
 %{_mandir}/man1/prime.1ossl*
+%{_mandir}/man1/c_rehash.1ossl*
 %{_mandir}/man1/rand.1ossl*
 %{_mandir}/man1/rehash.1ossl*
 %{_mandir}/man1/req.1ossl*
@@ -441,13 +439,11 @@ fi
 
 %files tools-perl
 %defattr(644,root,root,755)
-%attr(755,root,root) %{_bindir}/c_rehash
 %dir %{_libdir}/%{name}
 %attr(755,root,root) %{_libdir}/%{name}/CA.pl
 %attr(755,root,root) %{_libdir}/%{name}/tsget
 %attr(755,root,root) %{_libdir}/%{name}/tsget.pl
 %{_mandir}/man1/CA.pl.1ossl*
-%{_mandir}/man1/c_rehash.1ossl*
 %{_mandir}/man1/tsget.1ossl*
 
 %files devel
diff --git a/engines-dir.patch b/engines-dir.patch
deleted file mode 100644
index 29d83ee..0000000
--- a/engines-dir.patch
+++ /dev/null
@@ -1,13 +0,0 @@
---- openssl-3.0.5/Configurations/unix-Makefile.tmpl.orig	2022-07-10 17:18:36.338376691 +0200
-+++ openssl-3.0.5/Configurations/unix-Makefile.tmpl	2022-07-10 17:29:34.034813643 +0200
-@@ -304,8 +304,8 @@ LIBDIR={- our $libdir = $config{libdir};
- # $(libdir) is chosen to be compatible with the GNU coding standards
- libdir={- file_name_is_absolute($libdir)
-           ? $libdir : '$(INSTALLTOP)/$(LIBDIR)' -}
--ENGINESDIR=$(libdir)/engines-{- $sover_dirname -}
--MODULESDIR=$(libdir)/ossl-modules
-+ENGINESDIR=/$(LIBDIR)/engines-{- $sover_dirname -}
-+MODULESDIR=/$(LIBDIR)/ossl-modules
- 
- # Convenience variable for those who want to set the rpath in shared
- # libraries and applications
diff --git a/modules-dir.patch b/modules-dir.patch
new file mode 100644
index 0000000..529ee6e
--- /dev/null
+++ b/modules-dir.patch
@@ -0,0 +1,11 @@
+--- openssl-4.0.1/Configurations/unix-Makefile.tmpl.orig	2026-06-09 13:36:00.000000000 +0200
++++ openssl-4.0.1/Configurations/unix-Makefile.tmpl	2026-06-12 09:00:00.000000000 +0200
+@@ -325,7 +325,7 @@ LIBDIR={- our $libdir = $config{libdir};
+ # $(libdir) is chosen to be compatible with the GNU coding standards
+ libdir={- file_name_is_absolute($libdir)
+           ? $libdir : '$(INSTALLTOP)/$(LIBDIR)' -}
+-MODULESDIR=$(libdir)/ossl-modules
++MODULESDIR=/$(LIBDIR)/ossl-modules
+
+ # Convenience variable for those who want to set the rpath in shared
+ # libraries and applications
diff --git a/openssl-find.patch b/openssl-find.patch
deleted file mode 100644
index d2e6d09..0000000
--- a/openssl-find.patch
+++ /dev/null
@@ -1,60 +0,0 @@
-diff --git a/meta/recipes-connectivity/openssl/openssl-1.0.0i/find.pl b/meta/recipes-connectivity/openssl/openssl-1.0.0i/find.pl
-new file mode 100644
-index 0000000..8e1b42c
---- /dev/null
-+++ openssl-1.0.0i/find.pl
-@@ -0,0 +1,54 @@
-+warn "Legacy library @{[(caller(0))[6]]} will be removed from the Perl core distribution in the next major release. Please install it from the CPAN distribution Perl4::CoreLibs. It is being used at @{[(caller)[1]]}, line @{[(caller)[2]]}.\n";
-+
-+# This library is deprecated and unmaintained. It is included for
-+# compatibility with Perl 4 scripts which may use it, but it will be
-+# removed in a future version of Perl. Please use the File::Find module
-+# instead.
-+
-+# Usage:
-+#	require "find.pl";
-+#
-+#	&find('/foo','/bar');
-+#
-+#	sub wanted { ... }
-+#		where wanted does whatever you want.  $dir contains the
-+#		current directory name, and $_ the current filename within
-+#		that directory.  $name contains "$dir/$_".  You are cd'ed
-+#		to $dir when the function is called.  The function may
-+#		set $prune to prune the tree.
-+#
-+# For example,
-+#
-+#   find / -name .nfs\* -mtime +7 -exec rm -f {} \; -o -fstype nfs -prune
-+#
-+# corresponds to this
-+#
-+#	sub wanted {
-+#	    /^\.nfs.*$/ &&
-+#	    (($dev,$ino,$mode,$nlink,$uid,$gid) = lstat($_)) &&
-+#	    int(-M _) > 7 &&
-+#	    unlink($_)
-+#	    ||
-+#	    ($nlink || (($dev,$ino,$mode,$nlink,$uid,$gid) = lstat($_))) &&
-+#	    $dev < 0 &&
-+#	    ($prune = 1);
-+#	}
-+#
-+# Set the variable $dont_use_nlink if you're using AFS, since AFS cheats.
-+
-+use File::Find ();
-+
-+*name		= *File::Find::name;
-+*prune		= *File::Find::prune;
-+*dir		= *File::Find::dir;
-+*topdir		= *File::Find::topdir;
-+*topdev		= *File::Find::topdev;
-+*topino		= *File::Find::topino;
-+*topmode	= *File::Find::topmode;
-+*topnlink	= *File::Find::topnlink;
-+
-+sub find {
-+    &File::Find::find(\&wanted, @_);
-+}
-+
-+1;
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/openssl.git/commitdiff/bf6b39db126e3b90e6ada5f991fe027bbc83779e

More information about the pld-cvs-commit mailing list