1 |
commit: b6658cc2e0116335729d6a1753cd97fd3b097518 |
2 |
Author: Thomas Deutschmann <whissi <AT> gentoo <DOT> org> |
3 |
AuthorDate: Sun Nov 18 23:18:46 2018 +0000 |
4 |
Commit: Thomas Deutschmann <whissi <AT> gentoo <DOT> org> |
5 |
CommitDate: Sun Nov 18 23:19:05 2018 +0000 |
6 |
URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=b6658cc2 |
7 |
|
8 |
dev-libs/openssl: fix USE=bindist |
9 |
|
10 |
Package-Manager: Portage-2.3.51, Repoman-2.3.12 |
11 |
Signed-off-by: Thomas Deutschmann <whissi <AT> gentoo.org> |
12 |
|
13 |
dev-libs/openssl/Manifest | 12 ++++-- |
14 |
...l-1.1.0i-r2.ebuild => openssl-1.1.0i-r3.ebuild} | 2 +- |
15 |
...ssl-1.1.1-r2.ebuild => openssl-1.1.1-r3.ebuild} | 44 +++++++++++++++++++++- |
16 |
3 files changed, 51 insertions(+), 7 deletions(-) |
17 |
|
18 |
diff --git a/dev-libs/openssl/Manifest b/dev-libs/openssl/Manifest |
19 |
index 2ecc6370eb7..6586b888cd9 100644 |
20 |
--- a/dev-libs/openssl/Manifest |
21 |
+++ b/dev-libs/openssl/Manifest |
22 |
@@ -4,10 +4,14 @@ DIST openssl-1.0.2p.tar.gz 5338192 BLAKE2B fe4c0e2bf75d47a76e7377c7977be7bcaaa53 |
23 |
DIST openssl-1.0.2p_ec_curve.c 17254 BLAKE2B d40d8d6e770443f07abe70e2c4ddda6aec1cc8e37dc1f226a3fdd9ed5d228f09c6d372e8956b1948b55ee1d57d1429493e7288d0f54d9466a37fec805c85aacb SHA512 8e92fb100bcf4bd918c82b9a6cbd75a55abe1a2c08230a007e441c51577f974f8cc336e9ac8a672b32641480428ca8cead5380da1fe81bacb088145a1b754a15 |
24 |
DIST openssl-1.0.2p_ectest.c 30735 BLAKE2B 95333a27f1cf0a4305a3cee7f6d46b9d4673582ca9acfcf5ba2a0d9d317ab6219cd0d2ff0ba3a55a317c8f5819342f05cc17ba80ec2c92b2b4cab9a3552382e1 SHA512 f2e4d34327b490bc8371f0845c69df3f9fc51ea16f0ea0de0411a0c1fa9d49bb2b6fafc363eb3b3cd919dc7c24e4a0d075c6ff878c01d70dae918f2540874c19 |
25 |
DIST openssl-1.0.2p_hobble-openssl 1302 BLAKE2B 647caa6a0f4c53a2e77baa3b8e5961eaef3bb0ff38e7d5475eab8deef3439f7fe49028ec9ed0406f3453870b62cac67c496b3a048ee4c9ff4c6866d520235960 SHA512 3d757a4708e74a03dd5cb9b8114dfe442ed9520739a6eca693be4c4265771696f1449ea06d1c9bcfc6e94fc9b0dd0c10e153f1c3b0334831c0550b36cd63326e |
26 |
-DIST openssl-1.1.0-build.patch 3028 BLAKE2B f8cf981ed3717af234ce02fa50f27cdbcbf2b766968a5957fc6f0a4ea997549505fa77398444d7f3b9a75f66048447fe62542b9cb1d5f0268add87c44915a6fd SHA512 b19a912900970052f80c67f28975e793ae9e70ebfc62efae0544e09931079e98c4cd29ce1cc8d937ceca97aff9a12fdc1ff9ce6c2b47fea68c79e7065464a0f0 |
27 |
-DIST openssl-1.1.0-ec-curves.patch 2967 BLAKE2B 1c639514445ea85cf731732aa7901b5a03ddb5f637b0483ab2ec6825433ad978723c5a07316db684bdaca4a12fc673b4e049a49c0cd4dbe5f25a5e2bd3b75cf5 SHA512 8fb9c6759ae2077ad3697ba77e85ab3970fd8b3f64b21eb260b4f6333b7ebf2f5a53c7eee311229edfbd96a2b904ec5e5e00dfa5b62cf1105fece13069077bd2 |
28 |
+DIST openssl-1.1.0-build.patch 3001 BLAKE2B 8f0ac4be6409b4ec50bec171697da2aebe2688e8ae06bd0dfac8b0c74661d38ebeb0a12bde0ef941b213eee9b85965262213b140636060285dcfb02a3bd14961 SHA512 ec6710e9669ac19e4c6f1286c89a383e7d276a773a2740037f98a8f2dbf18305614e7d30d9ed530923a0e7d10a3776fea2ca77229adc25df13ecad55589a3673 |
29 |
+DIST openssl-1.1.0-ec-curves.patch 5311 BLAKE2B e9ec985adf6f13eb04412158a05da7cbe10be7d64bce73b899152ea379336ece7b7069089ef46993ac301ef850fd46fd0352898e249b2ea9fff5baf20896e5b5 SHA512 c38c4b05195f2b323a07efd8d17335ba2a168a16a59d7941da36568081f1c043da8d2216b7084b0617963635ded9bafeee736ecddbfa251cf0a02e4cba64cdc8 |
30 |
DIST openssl-1.1.0i.tar.gz 5453234 BLAKE2B ae6bec9c116769d98a77165b96fb7d201fe2ede8ee98e3cb68eba496cc90a5fae38dbcbb68b824c9eeacb25605aa80c3ccca9b4f00725658da3ad646834b0f9d SHA512 4a9d454031f644a3072a980f4ea20df976f6c5c58178549dfa62fd4dcf1417509e3be517d2ccb265c87688836f2993531b142fc5971bac5c41d33060057627df |
31 |
-DIST openssl-1.1.0i_ec_curve.c 18393 BLAKE2B 49dca7ddbc23270e5927454925df7bb18c8d9eb58f79e3a4fbcd8b7fc22fad36e2cb54ff9b63c2beeeea15c0c075a96e4ce8d03991355419af41fa9dc2aed3ad SHA512 ee3e576825bccdf02cede4205ab92c42ae9dd3a8e75ce58617a3a5980a61d144eb3c5197d9dcd378a5d49bf34c4b2f591aa6a619fee92b7a22825d72681ab879 |
32 |
-DIST openssl-1.1.0i_ectest.c 29908 BLAKE2B b398bafd5d5aea71daa9c3e2749dece9e515950e35547a6191d83987907aae73e090a4b552636af4d1ab2b39f7e3b1ea3fde2012c99f068f9c99d247996c1212 SHA512 e4445f8959b040caca6a7494da2026b840f84348df5d4eab47a68570d274333f62fa0c381955093edd86c857dad98595ffa2980c54afdcf2a8d32f32d0c70450 |
33 |
+DIST openssl-1.1.0i_ec_curve.c 18401 BLAKE2B f969071ac1b5d0e43b50d54e50b5c4d9201fc8b94458902e9849f14841b5505a2e43ed57a8c13255f042a211af9ee904776c155c36da838a8ad22e1052b02bc1 SHA512 a1c2bb3c3e3d342bddc8c952985e87fc4bad2e8142d5d760b18f346c44c20f00db61c4856f3dcf879b2098e0c036330762915f65d80a1a2cba717d2caeb95457 |
34 |
+DIST openssl-1.1.0i_ectest.c 30688 BLAKE2B 6673ef0fd139af82d830794179b19b9e06be25fac4a13b8bdfa5fd5dad25f594ce8eab118aab9ec2aab25001e1de127c03f8e1a04f4f3ef4c464b7fb1811ed4a SHA512 240fc72916caf4a8b0af774ce307abfe9a93a762eba6fae760cec79d619fe3db0d6919fc92a8951cb031f73958237700b45f590aa7f9f2890762cccda1f1e74b |
35 |
DIST openssl-1.1.0i_hobble-openssl 1117 BLAKE2B c3a1477e63331e83cf1cbe58e9ef131ec500a311e22d3da55034800ca353c387b2e202575acf3badb00b236ff91d4bac1bb131a33930939646d26bec27be6e04 SHA512 fa9cc70afa11a7a292548b4bddbba8159824a364ce5c279b483768e6ae2aa4b5491d9bf2cc734819f30a11c8ee0d91bcb991c4a7ab357296aeb4c04feac74826 |
36 |
+DIST openssl-1.1.1-ec-curves.patch 7265 BLAKE2B 04725d226c430132cf54afbfaa30a82f8f8bbfd3608823d1d0cd42c3c13f417e90762759da3134d7b0c4373e531925db337b681340f2f284cb2f16a4caef22e3 SHA512 de4d0f1635740c57217836a476c420141c0d34a5f90cbf7957aed7a80e7ac9ca036de2d8448e6bf4c122999e308730575899f61cea6e51ab6825dd04890d75a1 |
37 |
DIST openssl-1.1.1.tar.gz 8337920 BLAKE2B 266fb97bad4e1e7c0694c67a065d6669560695c92ad8fa10824169288a3fdfb9798faf408274a1e0c4e10a83a12b57367611bf4037dd2ab7ee74d7edab580a7b SHA512 c0284a4fe84bdf765ca5bc5148da4441ffc36392cfecaf9d372af00cf93b6de5681cab1248b6f8246474532155dc205da5ad49549ad7c61c07c917145e7c9c71 |
38 |
+DIST openssl-1.1.1_ec_curve.c 17938 BLAKE2B d5cbde40dcd8608087aed6ffa9feb040ffadecf0c46b7f3978cc468a9503f0a5ad0a426ea6f8db56f49a64474a508bebdf946e01ebf09adc727675f3b180bcdc SHA512 ec470f6514cb9a4f680b8cbbe02e2bbe71639b288f3429d976726047901d9c50377dfb2737f32429da2fb0e52fd67878a86debb54520e307ee196d97b5c66415 |
39 |
+DIST openssl-1.1.1_ectest.c 35091 BLAKE2B a9602255ab529751c2af2419206ce113f03f93b7b776691ea2ec550f26ddbecd241844bb81dc86988fdbb1c0a587318f82ce4faecba1a6142a19cf08d40fb2c5 SHA512 7813d9b6b7ab62119a7f2dd5431c17c5839f4c320ac7071b0714c9b8528bda5fda779dbb263328dca6ee8446e9fa09c663da659c9a82832a65cf53d1cd8a4cef |
40 |
+DIST openssl-1.1.1_hobble-openssl 1117 BLAKE2B c3a1477e63331e83cf1cbe58e9ef131ec500a311e22d3da55034800ca353c387b2e202575acf3badb00b236ff91d4bac1bb131a33930939646d26bec27be6e04 SHA512 fa9cc70afa11a7a292548b4bddbba8159824a364ce5c279b483768e6ae2aa4b5491d9bf2cc734819f30a11c8ee0d91bcb991c4a7ab357296aeb4c04feac74826 |
41 |
|
42 |
diff --git a/dev-libs/openssl/openssl-1.1.0i-r2.ebuild b/dev-libs/openssl/openssl-1.1.0i-r3.ebuild |
43 |
similarity index 99% |
44 |
rename from dev-libs/openssl/openssl-1.1.0i-r2.ebuild |
45 |
rename to dev-libs/openssl/openssl-1.1.0i-r3.ebuild |
46 |
index f3862111729..7837bf78175 100644 |
47 |
--- a/dev-libs/openssl/openssl-1.1.0i-r2.ebuild |
48 |
+++ b/dev-libs/openssl/openssl-1.1.0i-r3.ebuild |
49 |
@@ -36,7 +36,7 @@ SOURCE13=ectest.c |
50 |
PATCH1=openssl-1.1.0-build.patch # Fixes EVP testcase for EC |
51 |
PATCH37=openssl-1.1.0-ec-curves.patch |
52 |
FEDORA_GIT_BASE='https://src.fedoraproject.org/cgit/rpms/openssl.git/plain/' |
53 |
-FEDORA_GIT_BRANCH='f27' |
54 |
+FEDORA_GIT_BRANCH='f28' |
55 |
FEDORA_SRC_URI=() |
56 |
FEDORA_SOURCE=( $SOURCE1 $SOURCE12 $SOURCE13 ) |
57 |
FEDORA_PATCH=( $PATCH1 $PATCH37 ) |
58 |
|
59 |
diff --git a/dev-libs/openssl/openssl-1.1.1-r2.ebuild b/dev-libs/openssl/openssl-1.1.1-r3.ebuild |
60 |
similarity index 84% |
61 |
rename from dev-libs/openssl/openssl-1.1.1-r2.ebuild |
62 |
rename to dev-libs/openssl/openssl-1.1.1-r3.ebuild |
63 |
index 87d4a44d49a..391d0bc059c 100644 |
64 |
--- a/dev-libs/openssl/openssl-1.1.1-r2.ebuild |
65 |
+++ b/dev-libs/openssl/openssl-1.1.1-r3.ebuild |
66 |
@@ -28,6 +28,26 @@ DEPEND="${RDEPEND} |
67 |
)" |
68 |
PDEPEND="app-misc/ca-certificates" |
69 |
|
70 |
+# This does not copy the entire Fedora patchset, but JUST the parts that |
71 |
+# are needed to make it safe to use EC with RESTRICT=bindist. |
72 |
+# See openssl.spec for the matching numbering of SourceNNN, PatchNNN |
73 |
+SOURCE1=hobble-openssl |
74 |
+SOURCE12=ec_curve.c |
75 |
+SOURCE13=ectest.c |
76 |
+PATCH37=openssl-1.1.1-ec-curves.patch |
77 |
+FEDORA_GIT_BASE='https://src.fedoraproject.org/cgit/rpms/openssl.git/plain/' |
78 |
+FEDORA_GIT_BRANCH='f29' |
79 |
+FEDORA_SRC_URI=() |
80 |
+FEDORA_SOURCE=( ${SOURCE1} ${SOURCE12} ${SOURCE13} ) |
81 |
+FEDORA_PATCH=( ${PATCH37} ) |
82 |
+for i in "${FEDORA_SOURCE[@]}" ; do |
83 |
+ FEDORA_SRC_URI+=( "${FEDORA_GIT_BASE}/${i}?h=${FEDORA_GIT_BRANCH} -> ${P}_${i}" ) |
84 |
+done |
85 |
+for i in "${FEDORA_PATCH[@]}" ; do # Already have a version prefix |
86 |
+ FEDORA_SRC_URI+=( "${FEDORA_GIT_BASE}/${i}?h=${FEDORA_GIT_BRANCH} -> ${i}" ) |
87 |
+done |
88 |
+SRC_URI+=" bindist? ( ${FEDORA_SRC_URI[@]} )" |
89 |
+ |
90 |
S="${WORKDIR}/${MY_P}" |
91 |
|
92 |
MULTILIB_WRAPPED_HEADERS=( |
93 |
@@ -40,6 +60,24 @@ PATCHES=( |
94 |
) |
95 |
|
96 |
src_prepare() { |
97 |
+ if use bindist; then |
98 |
+ # This just removes the prefix, and puts it into WORKDIR like the RPM. |
99 |
+ for i in "${FEDORA_SOURCE[@]}" ; do |
100 |
+ cp -f "${DISTDIR}"/"${P}_${i}" "${WORKDIR}"/"${i}" || die |
101 |
+ done |
102 |
+ # .spec %prep |
103 |
+ bash "${WORKDIR}"/"${SOURCE1}" || die |
104 |
+ cp -f "${WORKDIR}"/"${SOURCE12}" "${S}"/crypto/ec/ || die |
105 |
+ cp -f "${WORKDIR}"/"${SOURCE13}" "${S}"/test/ || die |
106 |
+ for i in "${FEDORA_PATCH[@]}" ; do |
107 |
+ eapply "${DISTDIR}"/"${i}" |
108 |
+ done |
109 |
+ # Also see the configure parts below: |
110 |
+ # enable-ec \ |
111 |
+ # $(use_ssl !bindist ec2m) \ |
112 |
+ |
113 |
+ fi |
114 |
+ |
115 |
# keep this in sync with app-misc/c_rehash |
116 |
SSL_CNF_DIR="/etc/ssl" |
117 |
|
118 |
@@ -133,6 +171,7 @@ multilib_src_configure() { |
119 |
local config="Configure" |
120 |
[[ -z ${sslout} ]] && config="config" |
121 |
|
122 |
+ # Fedora hobbled-EC needs 'no-ec2m' |
123 |
# 'srp' was restricted until early 2017 as well. |
124 |
# "disable-deprecated" option breaks too many consumers. |
125 |
# Don't set it without thorough revdeps testing. |
126 |
@@ -141,8 +180,9 @@ multilib_src_configure() { |
127 |
${sslout} \ |
128 |
$(use cpu_flags_x86_sse2 || echo "no-sse2") \ |
129 |
enable-camellia \ |
130 |
- $(use_ssl !bindist ec) \ |
131 |
- $(use_ssl !bindist srp) \ |
132 |
+ enable-ec \ |
133 |
+ $(use_ssl !bindist ec2m) \ |
134 |
+ enable-srp \ |
135 |
$(use elibc_musl && echo "no-async") \ |
136 |
${ec_nistp_64_gcc_128} \ |
137 |
enable-idea \ |