|
 |
9b88be |
diff -up openssl-1.1.1k/include/internal/cryptlib.h.conf-new openssl-1.1.1k/include/internal/cryptlib.h
|
|
|
9b88be |
--- openssl-1.1.1k/include/internal/cryptlib.h.conf-new 2021-08-30 14:19:25.209494828 +0200
|
|
|
9b88be |
+++ openssl-1.1.1k/include/internal/cryptlib.h 2021-08-30 14:19:34.047615270 +0200
|
|
|
9b88be |
@@ -51,7 +51,7 @@ typedef struct app_mem_info_st APP_INFO;
|
|
|
9b88be |
typedef struct mem_st MEM;
|
|
|
9b88be |
DEFINE_LHASH_OF(MEM);
|
|
|
9b88be |
|
|
|
9b88be |
-# define OPENSSL_CONF "openssl.cnf"
|
|
|
9b88be |
+# define OPENSSL_CONF "openssl11.cnf"
|
|
|
9b88be |
|
|
|
9b88be |
# ifndef OPENSSL_SYS_VMS
|
|
|
9b88be |
# define X509_CERT_AREA OPENSSLDIR
|
|
|
9b88be |
diff -up openssl-1.1.1k/Configurations/unix-Makefile.tmpl.new-conf openssl-1.1.1k/Configurations/unix-Makefile.tmpl
|
|
|
9b88be |
--- openssl-1.1.1k/Configurations/unix-Makefile.tmpl.new-conf 2021-10-05 11:33:47.651773153 +0200
|
|
|
9b88be |
+++ openssl-1.1.1k/Configurations/unix-Makefile.tmpl 2021-10-05 11:34:08.273946559 +0200
|
|
|
9b88be |
@@ -580,14 +580,14 @@ install_ssldirs:
|
|
|
9b88be |
: {- output_on() if windowsdll(); "" -}; \
|
|
|
9b88be |
fi; \
|
|
|
9b88be |
done
|
|
|
9b88be |
- @$(ECHO) "install $(SRCDIR)/apps/openssl.cnf -> $(DESTDIR)$(OPENSSLDIR)/openssl.cnf.dist"
|
|
|
9b88be |
- @cp $(SRCDIR)/apps/openssl.cnf "$(DESTDIR)$(OPENSSLDIR)/openssl.cnf.new"
|
|
|
9b88be |
- @chmod 644 "$(DESTDIR)$(OPENSSLDIR)/openssl.cnf.new"
|
|
|
9b88be |
- @mv -f "$(DESTDIR)$(OPENSSLDIR)/openssl.cnf.new" "$(DESTDIR)$(OPENSSLDIR)/openssl.cnf.dist"
|
|
|
9b88be |
- @if [ ! -f "$(DESTDIR)$(OPENSSLDIR)/openssl.cnf" ]; then \
|
|
|
9b88be |
- $(ECHO) "install $(SRCDIR)/apps/openssl.cnf -> $(DESTDIR)$(OPENSSLDIR)/openssl.cnf"; \
|
|
|
9b88be |
- cp $(SRCDIR)/apps/openssl.cnf "$(DESTDIR)$(OPENSSLDIR)/openssl.cnf"; \
|
|
|
9b88be |
- chmod 644 "$(DESTDIR)$(OPENSSLDIR)/openssl.cnf"; \
|
|
|
9b88be |
+ @$(ECHO) "install $(SRCDIR)/apps/openssl11.cnf -> $(DESTDIR)$(OPENSSLDIR)/openssl11.cnf.dist"
|
|
|
9b88be |
+ @cp $(SRCDIR)/apps/openssl11.cnf "$(DESTDIR)$(OPENSSLDIR)/openssl11.cnf.new"
|
|
|
9b88be |
+ @chmod 644 "$(DESTDIR)$(OPENSSLDIR)/openssl11.cnf.new"
|
|
|
9b88be |
+ @mv -f "$(DESTDIR)$(OPENSSLDIR)/openssl11.cnf.new" "$(DESTDIR)$(OPENSSLDIR)/openssl11.cnf.dist"
|
|
|
9b88be |
+ @if [ ! -f "$(DESTDIR)$(OPENSSLDIR)/openssl11.cnf" ]; then \
|
|
|
9b88be |
+ $(ECHO) "install $(SRCDIR)/apps/openssl11.cnf -> $(DESTDIR)$(OPENSSLDIR)/openssl11.cnf"; \
|
|
|
9b88be |
+ cp $(SRCDIR)/apps/openssl11.cnf "$(DESTDIR)$(OPENSSLDIR)/openssl11.cnf"; \
|
|
|
9b88be |
+ chmod 644 "$(DESTDIR)$(OPENSSLDIR)/openssl11.cnf"; \
|
|
|
9b88be |
fi
|
|
|
9b88be |
@$(ECHO) "install $(SRCDIR)/apps/ct_log_list.cnf -> $(DESTDIR)$(OPENSSLDIR)/ct_log_list.cnf.dist"
|
|
|
9b88be |
@cp $(SRCDIR)/apps/ct_log_list.cnf "$(DESTDIR)$(OPENSSLDIR)/ct_log_list.cnf.new"
|
|
|
9b88be |
@@ -871,7 +871,7 @@ lint:
|
|
|
9b88be |
|
|
|
9b88be |
generate_apps:
|
|
|
9b88be |
( cd $(SRCDIR); $(PERL) VMS/VMSify-conf.pl \
|
|
|
9b88be |
- < apps/openssl.cnf > apps/openssl-vms.cnf )
|
|
|
9b88be |
+ < apps/openssl11.cnf > apps/openssl-vms.cnf )
|
|
|
9b88be |
|
|
|
9b88be |
generate_crypto_bn:
|
|
|
9b88be |
( cd $(SRCDIR); $(PERL) crypto/bn/bn_prime.pl > crypto/bn/bn_prime.h )
|
|
|
9b88be |
diff -up openssl-1.1.1k/Configure.new-conf openssl-1.1.1k/Configure
|
|
|
9b88be |
--- openssl-1.1.1k/Configure.new-conf 2021-10-05 13:07:38.128588902 +0200
|
|
|
9b88be |
+++ openssl-1.1.1k/Configure 2021-10-05 13:08:00.190795712 +0200
|
|
|
9b88be |
@@ -35,7 +35,7 @@ my $usage="Usage: Configure [no-<cipher>
|
|
|
9b88be |
# directories bin, lib, include, share/man, share/doc/openssl
|
|
|
9b88be |
# This becomes the value of INSTALLTOP in Makefile
|
|
|
9b88be |
# (Default: /usr/local)
|
|
|
9b88be |
-# --openssldir OpenSSL data area, such as openssl.cnf, certificates and keys.
|
|
|
9b88be |
+# --openssldir OpenSSL data area, such as openssl11.cnf, certificates and keys.
|
|
|
9b88be |
# If it's a relative directory, it will be added on the directory
|
|
|
9b88be |
# given with --prefix.
|
|
|
9b88be |
# This becomes the value of OPENSSLDIR in Makefile and in C.
|
|
|
9b88be |
diff -up openssl-1.1.1k/doc/HOWTO/certificates.txt.new-conf openssl-1.1.1k/doc/HOWTO/certificates.txt
|
|
|
9b88be |
--- openssl-1.1.1k/doc/HOWTO/certificates.txt.new-conf 2021-10-05 13:09:44.705775386 +0200
|
|
|
9b88be |
+++ openssl-1.1.1k/doc/HOWTO/certificates.txt 2021-10-05 13:09:58.621905835 +0200
|
|
|
9b88be |
@@ -16,7 +16,7 @@ Certificate authorities should read http
|
|
|
9b88be |
In all the cases shown below, the standard configuration file, as
|
|
|
9b88be |
compiled into openssl, will be used. You may find it in /etc/,
|
|
|
9b88be |
/usr/local/ssl/ or somewhere else. By default the file is named
|
|
|
9b88be |
-openssl.cnf and is described at https://www.openssl.org/docs/apps/config.html.
|
|
|
9b88be |
+openssl11.cnf and is described at https://www.openssl.org/docs/apps/config.html.
|
|
|
9b88be |
You can specify a different configuration file using the
|
|
|
9b88be |
'-config {file}' argument with the commands shown below.
|
|
|
9b88be |
|
|
|
9b88be |
diff -up openssl-1.1.1k/doc/man3/OPENSSL_config.pod.new-conf openssl-1.1.1k/doc/man3/OPENSSL_config.pod
|
|
|
9b88be |
--- openssl-1.1.1k/doc/man3/OPENSSL_config.pod.new-conf 2021-10-05 13:08:51.108273006 +0200
|
|
|
9b88be |
+++ openssl-1.1.1k/doc/man3/OPENSSL_config.pod 2021-10-05 13:09:07.614427700 +0200
|
|
|
9b88be |
@@ -15,7 +15,7 @@ OPENSSL_config, OPENSSL_no_config - simp
|
|
|
9b88be |
|
|
|
9b88be |
=head1 DESCRIPTION
|
|
|
9b88be |
|
|
|
9b88be |
-OPENSSL_config() configures OpenSSL using the standard B<openssl.cnf> and
|
|
|
9b88be |
+OPENSSL_config() configures OpenSSL using the standard B<openssl11.cnf> and
|
|
|
9b88be |
reads from the application section B<appname>. If B<appname> is NULL then
|
|
|
9b88be |
the default section, B<openssl_conf>, will be used.
|
|
|
9b88be |
Errors are silently ignored.
|
|
|
9b88be |
diff -up openssl-1.1.1k/doc/man5/config.pod.new-conf openssl-1.1.1k/doc/man5/config.pod
|
|
|
9b88be |
--- openssl-1.1.1k/doc/man5/config.pod.new-conf 2021-10-05 13:10:21.497120265 +0200
|
|
|
9b88be |
+++ openssl-1.1.1k/doc/man5/config.pod 2021-10-05 13:10:35.727253658 +0200
|
|
|
9b88be |
@@ -7,7 +7,7 @@ config - OpenSSL CONF library configurat
|
|
|
9b88be |
=head1 DESCRIPTION
|
|
|
9b88be |
|
|
|
9b88be |
The OpenSSL CONF library can be used to read configuration files.
|
|
|
9b88be |
-It is used for the OpenSSL master configuration file B<openssl.cnf>
|
|
|
9b88be |
+It is used for the OpenSSL master configuration file B<openssl11.cnf>
|
|
|
9b88be |
and in a few other places like B<SPKAC> files and certificate extension
|
|
|
9b88be |
files for the B<x509> utility. OpenSSL applications can also use the
|
|
|
9b88be |
CONF library for their own purposes.
|
|
|
9b88be |
diff -up openssl-1.1.1k/INSTALL.new-conf openssl-1.1.1k/INSTALL
|
|
|
9b88be |
--- openssl-1.1.1k/INSTALL.new-conf 2021-10-05 13:10:56.473448084 +0200
|
|
|
9b88be |
+++ openssl-1.1.1k/INSTALL 2021-10-05 13:11:11.388587895 +0200
|
|
|
9b88be |
@@ -296,7 +296,7 @@
|
|
|
9b88be |
be undesirable if small executable size is an objective.
|
|
|
9b88be |
|
|
|
9b88be |
no-autoload-config
|
|
|
9b88be |
- Don't automatically load the default openssl.cnf file.
|
|
|
9b88be |
+ Don't automatically load the default openssl11.cnf file.
|
|
|
9b88be |
Typically OpenSSL will automatically load a system config
|
|
|
9b88be |
file which configures default ssl options.
|
|
|
9b88be |
|
|
|
9b88be |
diff -up openssl-1.1.1k/NEWS.new-conf openssl-1.1.1k/NEWS
|
|
|
9b88be |
--- openssl-1.1.1k/NEWS.new-conf 2021-10-05 13:11:31.092772601 +0200
|
|
|
9b88be |
+++ openssl-1.1.1k/NEWS 2021-10-05 13:12:48.923502139 +0200
|
|
|
9b88be |
@@ -12,6 +12,8 @@
|
|
|
9b88be |
o Fixed an issue where an OpenSSL TLS server may crash if sent a
|
|
|
9b88be |
maliciously crafted renegotiation ClientHello message from a client
|
|
|
9b88be |
(CVE-2021-3449)
|
|
|
9b88be |
+ o This compat package provides a config file with the name openssl11.cnf
|
|
|
9b88be |
+ instead of openssl.cnf.
|
|
|
9b88be |
|
|
|
9b88be |
Major changes between OpenSSL 1.1.1i and OpenSSL 1.1.1j [16 Feb 2021]
|
|
|
9b88be |
|