]>
Commit | Line | Data |
---|---|---|
93c1e71e | 1 | ############################################################################### |
802ea3af MT |
2 | # IPFire.org - An Open Source Firewall Solution # |
3 | # Copyright (C) - IPFire Development Team <info@ipfire.org> # | |
93c1e71e MT |
4 | ############################################################################### |
5 | ||
802ea3af | 6 | name = openssl |
a7ff9508 MT |
7 | version = 1.0.1b |
8 | release = 1 | |
93c1e71e | 9 | |
802ea3af MT |
10 | maintainer = Michael Tremer <michael.tremer@ipfire.org> |
11 | groups = System/Libraries | |
12 | url = http://www.openssl.org/ | |
13 | license = OpenSSL | |
14 | summary = A general purpose cryptography library with TLS implementation. | |
93c1e71e | 15 | |
802ea3af MT |
16 | description |
17 | The OpenSSL toolkit provides support for secure communications between | |
18 | machines. OpenSSL includes a certificate management tool and shared | |
93c1e71e | 19 | libraries which provide various cryptographic algorithms and protocols. |
802ea3af | 20 | end |
93c1e71e | 21 | |
5416a00f | 22 | source_dl = http://openssl.org/source/ |
93c1e71e | 23 | |
802ea3af MT |
24 | build |
25 | requires | |
26 | bc | |
27 | gnutls-devel | |
28 | perl | |
76e1849a | 29 | util-linux |
802ea3af MT |
30 | zlib-devel |
31 | end | |
036fcb12 | 32 | |
0595faf5 | 33 | CFLAGS += -DPURIFY |
85ff1622 | 34 | export RPM_OPT_FLAGS = %{CFLAGS} |
0595faf5 | 35 | |
802ea3af MT |
36 | prepare_cmds |
37 | find crypto/ -name Makefile -exec \ | |
38 | sed 's/^ASFLAGS=/&-Wa,--noexecstack /' -i {} \; | |
93c1e71e | 39 | |
ed1f6221 | 40 | # Modify the various perl scripts to reference perl in the right location. |
802ea3af | 41 | perl util/perlpath.pl /usr/bin |
68d15d21 | 42 | |
802ea3af MT |
43 | # Generate a table with the compile settings for my perusal. |
44 | touch Makefile | |
45 | make TABLE PERL=/usr/bin/perl | |
46 | end | |
68d15d21 | 47 | |
64787ed5 MT |
48 | # Set default ssl_arch. |
49 | ssl_arch = linux-%{DISTRO_ARCH} | |
50 | ||
802ea3af | 51 | if "%{DISTRO_ARCH}" == "i686" |
2fe46911 MT |
52 | # 386 implies no-sse2 |
53 | ssl_arch = linux-elf no-asm 386 | |
54 | end | |
55 | ||
56 | if "%{DISTRO_ARCH}" == "armv5tel" | |
57 | ssl_arch = linux-generic32 | |
802ea3af | 58 | end |
93c1e71e | 59 | |
89fb3b0e MT |
60 | if "%{DISTRO_ARCH}" == "armv7hl" |
61 | ssl_arch = linux-generic32 | |
62 | end | |
63 | ||
802ea3af | 64 | build |
93c1e71e MT |
65 | ./Configure \ |
66 | --prefix=/usr \ | |
67 | --openssldir=/etc/pki/tls \ | |
64787ed5 | 68 | --enginesdir=%{libdir}/openssl/engines \ |
93c1e71e MT |
69 | shared \ |
70 | zlib-dynamic \ | |
71 | enable-camellia \ | |
9ceab1e7 | 72 | enable-md2 \ |
93c1e71e MT |
73 | enable-seed \ |
74 | enable-tlsext \ | |
75 | enable-rfc3779 \ | |
76 | no-idea \ | |
77 | no-mdc2 \ | |
78 | no-rc5 \ | |
2fe46911 | 79 | no-ec no-ecdh no-ecdsa \ |
0595faf5 | 80 | no-srp \ |
802ea3af | 81 | -DSSL_FORBID_ENULL \ |
0595faf5 MT |
82 | %{ssl_arch} \ |
83 | fips | |
802ea3af MT |
84 | |
85 | # Build. | |
86 | make depend all build-shared RPM_OPT_FLAGS="%{CFLAGS}" #%{PARALLELISMFLAGS} | |
93c1e71e | 87 | |
802ea3af MT |
88 | # Generate hashes for the included certs. |
89 | make rehash build-shared | |
90 | end | |
93c1e71e | 91 | |
802ea3af | 92 | test |
0595faf5 MT |
93 | # Revert ca-dir patch. Otherwise the tests will fail. |
94 | patch -Np1 -R < %{DIR_PATCHES}/openssl-1.0.0-beta4-ca-dir.patch | |
95 | ||
802ea3af MT |
96 | make test |
97 | end | |
93c1e71e | 98 | |
802ea3af MT |
99 | install |
100 | make install build-shared INSTALL_PREFIX=%{BUILDROOT} | |
80032003 | 101 | |
802ea3af MT |
102 | # Install manpages do right place |
103 | mkdir -pv %{BUILDROOT}/usr/share | |
104 | mv -v %{BUILDROOT}/etc/pki/tls/man %{BUILDROOT}/usr/share/ | |
55495f4d | 105 | |
64787ed5 MT |
106 | mkdir -pv %{BUILDROOT}%{libdir}/openssl |
107 | mv -v %{BUILDROOT}%{libdir}/engines %{BUILDROOT}%{libdir}/openssl | |
68d15d21 | 108 | |
802ea3af MT |
109 | mkdir -pv %{BUILDROOT}/etc/pki/CA/private |
110 | chmod -v 700 -R %{BUILDROOT}/etc/pki/CA | |
93c1e71e | 111 | |
802ea3af MT |
112 | mkdir -pv %{BUILDROOT}/etc/pki/tls |
113 | install -m 0644 %{DIR_SOURCE}/openssl.cnf %{BUILDROOT}/etc/pki/tls | |
114 | cp -v -r certs %{BUILDROOT}/etc/pki/tls | |
76e1849a MT |
115 | |
116 | # Rename man pages so that they don't conflict with other system man pages. | |
85ff1622 | 117 | pushd %{BUILDROOT}%{mandir} |
76e1849a MT |
118 | for manpage in man*/*; do |
119 | if [ -L ${manpage} ]; then | |
120 | TARGET=`ls -l ${manpage} | awk '{ print $NF }'` | |
121 | ln -snf ${TARGET}ssl ${manpage}ssl | |
122 | rm -f ${manpage} | |
123 | else | |
124 | mv ${manpage} ${manpage}ssl | |
125 | fi | |
126 | done | |
76e1849a | 127 | popd |
802ea3af MT |
128 | end |
129 | end | |
93c1e71e | 130 | |
802ea3af MT |
131 | packages |
132 | package %{name} | |
93c1e71e | 133 | |
ed1f6221 SS |
134 | package %{name}-libs |
135 | template LIBS | |
136 | ||
137 | requires += ca-certificates | |
0595faf5 | 138 | |
85ff1622 | 139 | files += %{libdir}/openssl |
ed1f6221 SS |
140 | end |
141 | ||
802ea3af MT |
142 | package %{name}-devel |
143 | template DEVEL | |
144 | end | |
1f9bc2f0 MT |
145 | |
146 | package %{name}-debuginfo | |
147 | template DEBUGINFO | |
148 | end | |
802ea3af | 149 | end |