Blame SPECS/libgcrypt.spec

102646
# This is taken from gnutls.spec
102646
%define srpmhash() %{lua:
102646
local files = rpm.expand("%_specdir/libgcrypt.spec")
102646
for i, p in ipairs(patches) do
102646
   files = files.." "..p
102646
end
102646
for i, p in ipairs(sources) do
102646
   files = files.." "..p
102646
end
102646
local sha256sum = assert(io.popen("cat "..files.."| sha256sum"))
102646
local hash = sha256sum:read("*a")
102646
sha256sum:close()
102646
print(string.sub(hash, 0, 16))
102646
}
102646
102646
e09bf5
Name: libgcrypt
102646
Version: 1.10.0
102646
Release: 2%{?dist}
e09bf5
URL: https://www.gnupg.org/
102646
Source0: https://www.gnupg.org/ftp/gcrypt/libgcrypt/libgcrypt-%{version}.tar.bz2
102646
Source1: https://www.gnupg.org/ftp/gcrypt/libgcrypt/libgcrypt-%{version}.tar.bz2.sig
e09bf5
Source2: wk@g10code.com
102646
Patch1: libgcrypt-1.10.0-disable-brainpool.patch
e09bf5
e09bf5
%global gcrylibdir %{_libdir}
e09bf5
%global gcrysoname libgcrypt.so.20
e09bf5
%global hmackey orboDeJITITejsirpADONivirpUkvarP
e09bf5
e09bf5
# Technically LGPLv2.1+, but Fedora's table doesn't draw a distinction.
e09bf5
# Documentation and some utilities are GPLv2+ licensed. These files
e09bf5
# are in the devel subpackage.
e09bf5
License: LGPLv2+
e09bf5
Summary: A general-purpose cryptography library
e09bf5
BuildRequires: gcc
e09bf5
BuildRequires: gawk, libgpg-error-devel >= 1.11, pkgconfig
e09bf5
# This is needed only when patching the .texi doc.
e09bf5
BuildRequires: texinfo
e09bf5
BuildRequires: autoconf, automake, libtool
e09bf5
BuildRequires: make
e09bf5
e09bf5
%package devel
e09bf5
Summary: Development files for the %{name} package
e09bf5
License: LGPLv2+ and GPLv2+
e09bf5
Requires: libgpg-error-devel
e09bf5
Requires: %{name}%{?_isa} = %{version}-%{release}
e09bf5
Requires: pkgconfig
e09bf5
e09bf5
%description
e09bf5
Libgcrypt is a general purpose crypto library based on the code used
e09bf5
in GNU Privacy Guard.  This is a development version.
e09bf5
e09bf5
%description devel
e09bf5
Libgcrypt is a general purpose crypto library based on the code used
e09bf5
in GNU Privacy Guard.  This package contains files needed to develop
e09bf5
applications using libgcrypt.
e09bf5
e09bf5
%prep
e09bf5
%setup -q
102646
%patch1 -p1
e09bf5
e09bf5
%build
e09bf5
# This package has a configure test which uses ASMs, but does not link the
e09bf5
# resultant .o files.  As such the ASM test is always successful, even on
e09bf5
# architectures were the ASM is not valid when compiling with LTO.
e09bf5
#
e09bf5
# -ffat-lto-objects is sufficient to address this issue.  It is the default
e09bf5
# for F33, but is expected to only be enabled for packages that need it in
e09bf5
# F34, so we use it here explicitly
e09bf5
%define _lto_cflags -flto=auto -ffat-lto-objects
e09bf5
102646
# should be all algorithms except SM3 and SM4
102646
export DIGESTS='crc gostr3411-94 md4 md5 rmd160 sha1 sha256 sha512 sha3 tiger whirlpool stribog blake2'
102646
export CIPHERS='arcfour blowfish cast5 des aes twofish serpent rfc2268 seed camellia idea salsa20 gost28147 chacha20'
102646
102646
eval $(sed -n 's/^\(\(NAME\|VERSION_ID\)=.*\)/OS_\1/p' /etc/os-release)
102646
export FIPS_MODULE_NAME="$OS_NAME $OS_VERSION_ID %name"
102646
e09bf5
autoreconf -f
e09bf5
%configure --disable-static \
e09bf5
%ifarch sparc64
e09bf5
     --disable-asm \
e09bf5
%endif
e09bf5
     --enable-noexecstack \
102646
     --enable-hmac-binary-check=%{hmackey} \
102646
     --disable-brainpool \
102646
     --enable-digests="$DIGESTS" \
102646
     --enable-ciphers="$CIPHERS" \
102646
     --with-fips-module-version="$FIPS_MODULE_NAME %{version}-%{srpmhash}"
e09bf5
sed -i -e '/^sys_lib_dlsearch_path_spec/s,/lib /usr/lib,/usr/lib /lib64 /usr/lib64 /lib,g' libtool
e09bf5
%make_build
e09bf5
e09bf5
%check
e09bf5
make check
102646
# try in faked FIPS mode too
102646
LIBGCRYPT_FORCE_FIPS_MODE=1 make check
e09bf5
e09bf5
# Add generation of HMAC checksums of the final stripped binaries 
102646
%define libpath $RPM_BUILD_ROOT%{gcrylibdir}/%{gcrysoname}.?.?
e09bf5
%define __spec_install_post \
e09bf5
    %{?__debug_package:%{__debug_install_post}} \
e09bf5
    %{__arch_install_post} \
e09bf5
    %{__os_install_post} \
102646
    dd if=/dev/zero of=%{libpath}.hmac bs=32 count=1 \
102646
    objcopy --update-section .rodata1=%{libpath}.hmac %{libpath} %{libpath}.empty \
102646
    src/hmac256 --binary %{hmackey} %{libpath}.empty > %{libpath}.hmac \
102646
    objcopy --update-section .rodata1=%{libpath}.hmac %{libpath}.empty %{libpath}.new \
102646
    mv -f %{libpath}.new %{libpath} \
102646
    rm -f %{libpath}.hmac %{libpath}.empty
e09bf5
%{nil}
e09bf5
e09bf5
%install
e09bf5
%make_install
e09bf5
e09bf5
# Change /usr/lib64 back to /usr/lib.  This saves us from having to patch the
e09bf5
# script to "know" that -L/usr/lib64 should be suppressed, and also removes
e09bf5
# a file conflict between 32- and 64-bit versions of this package.
e09bf5
# Also replace my_host with none.
e09bf5
sed -i -e 's,^libdir="/usr/lib.*"$,libdir="/usr/lib",g' $RPM_BUILD_ROOT/%{_bindir}/libgcrypt-config
e09bf5
sed -i -e 's,^my_host=".*"$,my_host="none",g' $RPM_BUILD_ROOT/%{_bindir}/libgcrypt-config
e09bf5
e09bf5
rm -f ${RPM_BUILD_ROOT}/%{_infodir}/dir ${RPM_BUILD_ROOT}/%{_libdir}/*.la
e09bf5
/sbin/ldconfig -n $RPM_BUILD_ROOT/%{_libdir}
e09bf5
e09bf5
%if "%{gcrylibdir}" != "%{_libdir}"
e09bf5
# Relocate the shared libraries to %{gcrylibdir}.
e09bf5
mkdir -p $RPM_BUILD_ROOT%{gcrylibdir}
e09bf5
for shlib in $RPM_BUILD_ROOT%{_libdir}/*.so* ; do
e09bf5
	if test -L "$shlib" ; then
e09bf5
		rm "$shlib"
e09bf5
	else
e09bf5
		mv "$shlib" $RPM_BUILD_ROOT%{gcrylibdir}/
e09bf5
	fi
e09bf5
done
e09bf5
e09bf5
# Add soname symlink.
e09bf5
/sbin/ldconfig -n $RPM_BUILD_ROOT/%{_lib}/
e09bf5
%endif
e09bf5
e09bf5
# Overwrite development symlinks.
e09bf5
pushd $RPM_BUILD_ROOT/%{gcrylibdir}
e09bf5
for shlib in lib*.so.?? ; do
e09bf5
	target=$RPM_BUILD_ROOT/%{_libdir}/`echo "$shlib" | sed -e 's,\.so.*,,g'`.so
e09bf5
%if "%{gcrylibdir}" != "%{_libdir}"
e09bf5
	shlib=%{gcrylibdir}/$shlib
e09bf5
%endif
e09bf5
	ln -sf $shlib $target
e09bf5
done
e09bf5
popd
e09bf5
e09bf5
# Create /etc/gcrypt (hardwired, not dependent on the configure invocation) so
e09bf5
# that _someone_ owns it.
e09bf5
mkdir -p -m 755 $RPM_BUILD_ROOT/etc/gcrypt
e09bf5
e09bf5
%ldconfig_scriptlets
e09bf5
e09bf5
%files
e09bf5
%dir /etc/gcrypt
e09bf5
%{gcrylibdir}/libgcrypt.so.*.*
e09bf5
%{gcrylibdir}/%{gcrysoname}
e09bf5
%license COPYING.LIB
e09bf5
%doc AUTHORS NEWS THANKS
e09bf5
e09bf5
%files devel
e09bf5
%{_bindir}/%{name}-config
e09bf5
%{_bindir}/dumpsexp
e09bf5
%{_bindir}/hmac256
e09bf5
%{_bindir}/mpicalc
e09bf5
%{_includedir}/*
e09bf5
%{_libdir}/*.so
e09bf5
%{_libdir}/pkgconfig/libgcrypt.pc
e09bf5
%{_datadir}/aclocal/*
e09bf5
%{_mandir}/man1/*
e09bf5
e09bf5
%{_infodir}/gcrypt.info*
e09bf5
%license COPYING
e09bf5
e09bf5
%changelog
102646
* Thu Feb 17 2022 Jakub Jelen <jjelen@redhat.com> - 1.10.0-2
102646
- Systematic FIPS module name with other FIPS modules
102646
102646
* Wed Feb 02 2022 Jakub Jelen <jjelen@redhat.com> - 1.10.0-1
102646
- Final release (#2026636)
102646
102646
* Thu Jan 27 2022 Jakub Jelen <jjelen@redhat.com> - 1.10.0-0.3
102646
- Fix broken soname in the previous beta
102646
102646
* Thu Jan 27 2022 Jakub Jelen <jjelen@redhat.com> - 1.10.0-0.2
102646
- Provide compat soname symlink as the new release is backward compatible
102646
102646
* Wed Jan 26 2022 Jakub Jelen <jjelen@redhat.com> - 1.10.0-0.1
102646
- New upstream pre-release (#2026636)
102646
- Upstream all patches
102646
- Implement FIPS 140-3 support
102646
fd3713
* Tue Oct 12 2021 Jakub Jelen <jjelen@redhat.com> - 1.9.3-5
fd3713
- Allow HW optimizations in FIPS mode (#1990059)
fd3713
e09bf5
* Mon Aug 09 2021 Mohan Boddu <mboddu@redhat.com> - 1.9.3-4
e09bf5
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
e09bf5
  Related: rhbz#1991688
e09bf5
e09bf5
* Tue Jun 15 2021 Jakub Jelen <jjelen@redhat.com> - 1.9.3-3
e09bf5
- Fix for CVE-2021-33560 (#1970098)
e09bf5
e09bf5
* Wed Apr 28 2021 Jakub Jelen <jjelen@redhat.com> - 1.9.3-2
e09bf5
- Restore the CET protection (#1954049)
e09bf5
e09bf5
* Tue Apr 20 2021 Jakub Jelen <jjelen@redhat.com> - 1.9.3-1
e09bf5
- New upstream release (#1951325)
e09bf5
e09bf5
* Fri Apr 16 2021 Mohan Boddu <mboddu@redhat.com> - 1.9.2-4
e09bf5
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
e09bf5
e09bf5
* Thu Apr 15 2021 Jakub Jelen <jjelen@redhat.com> - 1.9.2-3
e09bf5
- Fix issues reported by coverity
e09bf5
e09bf5
* Mon Mar 29 2021 Jakub Jelen <jjelen@redhat.com> - 1.9.2-2
e09bf5
- Fix OCB tag creation on s390x (failing gnupg2 tests)
e09bf5
e09bf5
* Wed Feb 17 2021 Jakub Jelen <jjelen@redhat.com> - 1.9.2-1
e09bf5
- New upstream release (#1929630)
e09bf5
e09bf5
* Fri Jan 29 2021 Jakub Jelen <jjelen@redhat.com> - 1.9.1-1
e09bf5
- New upstream release (#1922156, #1922097)
e09bf5
e09bf5
* Wed Jan 20 2021 Jakub Jelen <jjelen@redhat.com> - 1.9.0-1
e09bf5
- New upstream release (#1917878)
e09bf5
e09bf5
* Tue Nov 24 2020 Jakub Jelen <jjelen@redhat.com> - 1.8.7-1
e09bf5
- new upstream release (#1891123)
e09bf5
e09bf5
* Fri Aug 21 2020 Jeff Law <law@redhat.com> - 1.8.6-4
e09bf5
- Re-enable LTO
e09bf5
e09bf5
* Tue Jul 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 1.8.6-3
e09bf5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
e09bf5
e09bf5
* Tue Jul 21 2020 Tom Stellard <tstellar@redhat.com> - 1.8.6-2
e09bf5
- Use make macros
e09bf5
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
e09bf5
e09bf5
* Mon Jul 20 2020 Tomáš Mráz <tmraz@redhat.com> 1.8.6-1
e09bf5
- new upstream version 1.8.6
e09bf5
e09bf5
* Wed Jul  1 2020 Tomáš Mráz <tmraz@redhat.com> 1.8.5-7
e09bf5
- use the hmac256 tool to calculate the library hmac
e09bf5
e09bf5
* Tue Jun 30 2020 Jeff Law <law@redhat.com>
e09bf5
- Disable LTO
e09bf5
e09bf5
* Thu Apr 23 2020 Tomáš Mráz <tmraz@redhat.com> 1.8.5-6
e09bf5
- Fix regression - missing -ldl linkage
e09bf5
e09bf5
* Wed Apr 22 2020 Tomáš Mráz <tmraz@redhat.com> 1.8.5-5
e09bf5
- AES performance improvements backported from master branch
e09bf5
e09bf5
* Mon Apr 20 2020 Tomáš Mráz <tmraz@redhat.com> 1.8.5-4
e09bf5
- FIPS selftest is run directly from the constructor
e09bf5
- FIPS module is implicit with kernel FIPS flag
e09bf5
e09bf5
* Thu Jan 30 2020 Tomáš Mráz <tmraz@redhat.com> 1.8.5-3
e09bf5
- fix the build on ARMv7
e09bf5
e09bf5
* Thu Jan 23 2020 Tomáš Mráz <tmraz@redhat.com> 1.8.5-2
e09bf5
- Intel CET support by H. J. Lu
e09bf5
e09bf5
* Tue Sep  3 2019 Tomáš Mráz <tmraz@redhat.com> 1.8.5-1
e09bf5
- new upstream version 1.8.5
e09bf5
- add CMAC selftest for FIPS POST
e09bf5
- add continuous FIPS entropy test
e09bf5
- disable non-approved FIPS hashes in the enforced FIPS mode
e09bf5
e09bf5
* Thu Jul 25 2019 Fedora Release Engineering <releng@fedoraproject.org> - 1.8.4-4
e09bf5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
e09bf5
e09bf5
* Tue Feb 12 2019 Tomáš Mráz <tmraz@redhat.com> 1.8.4-3
e09bf5
- fix the build tests to pass in the FIPS mode
e09bf5
e09bf5
* Fri Feb 01 2019 Fedora Release Engineering <releng@fedoraproject.org> - 1.8.4-2
e09bf5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
e09bf5
e09bf5
* Tue Nov 20 2018 Tomáš Mráz <tmraz@redhat.com> 1.8.4-1
e09bf5
- new upstream version 1.8.4
e09bf5
e09bf5
* Fri Jul 13 2018 Fedora Release Engineering <releng@fedoraproject.org> - 1.8.3-3
e09bf5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
e09bf5
e09bf5
* Thu Jul 12 2018 Tomáš Mráz <tmraz@redhat.com> 1.8.3-2
e09bf5
- make only_urandom a default in non-presence of configuration file
e09bf5
- run the full FIPS selftests only when the library is called from
e09bf5
  application
e09bf5
e09bf5
* Thu Jun 14 2018 Tomáš Mráz <tmraz@redhat.com> 1.8.3-1
e09bf5
- new upstream version 1.8.3
e09bf5
e09bf5
* Tue Feb  6 2018 Tomáš Mráz <tmraz@redhat.com> 1.8.2-2
e09bf5
- fix behavior when getrandom syscall is not present (#1542453)
e09bf5
e09bf5
* Thu Dec 21 2017 Tomáš Mráz <tmraz@redhat.com> 1.8.2-1
e09bf5
- new upstream version 1.8.2
e09bf5
e09bf5
* Tue Dec  5 2017 Tomáš Mráz <tmraz@redhat.com> 1.8.1-3
e09bf5
- do not try to access() /dev/urandom either if getrandom() works
e09bf5
e09bf5
* Mon Dec  4 2017 Tomáš Mráz <tmraz@redhat.com> 1.8.1-2
e09bf5
- do not try to open /dev/urandom if getrandom() works (#1380866)
e09bf5
e09bf5
* Tue Sep  5 2017 Tomáš Mráz <tmraz@redhat.com> 1.8.1-1
e09bf5
- new upstream version 1.8.1
e09bf5
e09bf5
* Wed Aug 16 2017 Tomáš Mráz <tmraz@redhat.com> 1.8.0-1
e09bf5
- new upstream version 1.8.0
e09bf5
e09bf5
* Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.7.8-3
e09bf5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
e09bf5
e09bf5
* Wed Jul 26 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.7.8-2
e09bf5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
e09bf5
e09bf5
* Thu Jun 29 2017 Tomáš Mráz <tmraz@redhat.com> 1.7.8-1
e09bf5
- new upstream version 1.7.8
e09bf5
e09bf5
* Fri Jun  2 2017 Tomáš Mráz <tmraz@redhat.com> 1.7.7-1
e09bf5
- new upstream version 1.7.7
e09bf5
- GOST is now enabled
e09bf5
e09bf5
* Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.7.6-2
e09bf5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
e09bf5
e09bf5
* Mon Jan 30 2017 Tomáš Mráz <tmraz@redhat.com> 1.7.6-1
e09bf5
- new upstream version 1.7.6
e09bf5
e09bf5
* Fri Dec 16 2016 Tomáš Mráz <tmraz@redhat.com> 1.7.5-1
e09bf5
- new upstream version 1.7.5
e09bf5
e09bf5
* Wed Nov 23 2016 Tomáš Mráz <tmraz@redhat.com> 1.7.3-1
e09bf5
- new upstream version 1.7.3
e09bf5
e09bf5
* Wed Aug 17 2016 Tomáš Mráz <tmraz@redhat.com> 1.6.6-1
e09bf5
- new upstream version with important security fix (CVE-2016-6316)
e09bf5
e09bf5
* Thu Jul 21 2016 Tomáš Mráz <tmraz@redhat.com> 1.6.5-1
e09bf5
- new upstream version fixing low impact issue CVE-2015-7511
e09bf5
e09bf5
* Thu Feb 04 2016 Fedora Release Engineering <releng@fedoraproject.org> - 1.6.4-2
e09bf5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
e09bf5
e09bf5
* Wed Sep  9 2015 Tomáš Mráz <tmraz@redhat.com> 1.6.4-1
e09bf5
- new upstream version
e09bf5
e09bf5
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.6.3-5
e09bf5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
e09bf5
e09bf5
* Fri Apr  3 2015 Tomáš Mráz <tmraz@redhat.com> 1.6.3-4
e09bf5
- deinitialize the RNG after the selftest is run
e09bf5
e09bf5
* Tue Mar 24 2015 Tomáš Mráz <tmraz@redhat.com> 1.6.3-3
e09bf5
- touch only urandom in the selftest and when /dev/random is
e09bf5
  unavailable for example by SELinux confinement
e09bf5
- fix the RSA selftest key (p q swap) (#1204517)
e09bf5
e09bf5
* Fri Mar 13 2015 Tomáš Mráz <tmraz@redhat.com> 1.6.3-2
e09bf5
- do not use strict aliasing for bufhelp functions (#1201219)
e09bf5
e09bf5
* Fri Mar  6 2015 Tomáš Mráz <tmraz@redhat.com> 1.6.3-1
e09bf5
- new upstream version
e09bf5
e09bf5
* Wed Feb 25 2015 Tomáš Mráz <tmraz@redhat.com> 1.6.2-4
e09bf5
- do not initialize secure memory during the selftest (#1195850)
e09bf5
e09bf5
* Sat Feb 21 2015 Till Maas <opensource@till.name> - 1.6.2-3
e09bf5
- Rebuilt for Fedora 23 Change
e09bf5
  https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code
e09bf5
e09bf5
* Wed Jan 14 2015 Tomáš Mráz <tmraz@redhat.com> 1.6.2-2
e09bf5
- fix buildability of programs using gcrypt.h with -ansi (#1182200)
e09bf5
e09bf5
* Mon Dec  8 2014 Tomáš Mráz <tmraz@redhat.com> 1.6.2-1
e09bf5
- new upstream version
e09bf5
e09bf5
* Sun Aug 17 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.6.1-7
e09bf5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
e09bf5
e09bf5
* Thu Jul 17 2014 Tom Callaway <spot@fedoraproject.org> - 1.6.1-6
e09bf5
- fix license handling
e09bf5
e09bf5
* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.6.1-5
e09bf5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
e09bf5
e09bf5
* Tue May 20 2014 Kyle McMartin <kyle@fedoraproject.org> 1.6.1-4
e09bf5
- Re-enable below algos, apply patch from upstream list to make
e09bf5
  that code -fPIC friendly. (rhbz#1069792)
e09bf5
e09bf5
* Mon May 19 2014 Kyle McMartin <kyle@fedoraproject.org> 1.6.1-3
e09bf5
- Disable rijndael, cast5, camellia ARM assembly, as it's non-PIC as
e09bf5
  presently written, which results in .text relocations in the shared
e09bf5
  library. (rhbz#1069792)
e09bf5
e09bf5
* Thu Apr 24 2014 Tomáš Mráz <tmraz@redhat.com> 1.6.1-2
e09bf5
- drop the temporary compat shared library version
e09bf5
- fix the soname version in -use-fipscheck.patch
e09bf5
e09bf5
* Fri Feb 28 2014 Tomáš Mráz <tmraz@redhat.com> 1.6.1-1
e09bf5
- new upstream version breaking ABI compatibility
e09bf5
- this release temporarily includes old compatibility .so
e09bf5
e09bf5
* Tue Jan 21 2014 Tomáš Mráz <tmraz@redhat.com> 1.5.3-3
e09bf5
- add back the nistp521r1 EC curve
e09bf5
- fix a bug in the Whirlpool hash implementation
e09bf5
- speed up the PBKDF2 computation
e09bf5
e09bf5
* Sun Oct 20 2013 Tom Callaway <spot@fedoraproject.org> - 1.5.3-2
e09bf5
- add cleared ECC support
e09bf5
e09bf5
* Fri Jul 26 2013 Tomáš Mráz <tmraz@redhat.com> 1.5.3-1
e09bf5
- new upstream version fixing cache side-channel attack on RSA private keys
e09bf5
e09bf5
* Thu Jun 20 2013 Tomáš Mráz <tmraz@redhat.com> 1.5.2-3
e09bf5
- silence false error detected by valgrind (#968288)
e09bf5
e09bf5
* Thu Apr 25 2013 Tomáš Mráz <tmraz@redhat.com> 1.5.2-2
e09bf5
- silence strict aliasing warning in Rijndael
e09bf5
- apply UsrMove
e09bf5
- spec file cleanups
e09bf5
e09bf5
* Fri Apr 19 2013 Tomáš Mráz <tmraz@redhat.com> 1.5.2-1
e09bf5
- new upstream version
e09bf5
e09bf5
* Wed Mar 20 2013 Tomas Mraz <tmraz@redhat.com> 1.5.1-1
e09bf5
- new upstream version
e09bf5
e09bf5
* Tue Mar  5 2013 Tomas Mraz <tmraz@redhat.com> 1.5.0-11
e09bf5
- use poll() instead of select() when gathering randomness (#913773)
e09bf5
e09bf5
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.5.0-10
e09bf5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
e09bf5
e09bf5
* Thu Jan  3 2013 Tomas Mraz <tmraz@redhat.com> 1.5.0-9
e09bf5
- allow empty passphrase in PBKDF2 needed for cryptsetup (=891266)
e09bf5
e09bf5
* Mon Dec  3 2012 Tomas Mraz <tmraz@redhat.com> 1.5.0-8
e09bf5
- fix multilib conflict in libgcrypt-config
e09bf5
- fix minor memory leaks and other bugs found by Coverity scan
e09bf5
e09bf5
* Thu Jul 19 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.5.0-6
e09bf5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
e09bf5
e09bf5
* Thu Apr  5 2012 Tomas Mraz <tmraz@redhat.com> 1.5.0-5
e09bf5
- Correctly rebuild the info documentation
e09bf5
e09bf5
* Wed Apr  4 2012 Tomas Mraz <tmraz@redhat.com> 1.5.0-4
e09bf5
- Add GCRYCTL_SET_ENFORCED_FIPS_FLAG command
e09bf5
e09bf5
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.5.0-3
e09bf5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
e09bf5
e09bf5
* Mon Aug 15 2011 Kalev Lember <kalevlember@gmail.com> 1.5.0-2
e09bf5
- Rebuilt for rpm bug #728707
e09bf5
e09bf5
* Thu Jul 21 2011 Tomas Mraz <tmraz@redhat.com> 1.5.0-1
e09bf5
- new upstream version
e09bf5
e09bf5
* Mon Jun 20 2011 Tomas Mraz <tmraz@redhat.com> 1.4.6-4
e09bf5
- Always xor seed from /dev/urandom over /etc/gcrypt/rngseed
e09bf5
e09bf5
* Mon May 30 2011 Tomas Mraz <tmraz@redhat.com> 1.4.6-3
e09bf5
- Make the FIPS-186-3 DSA implementation CAVS testable
e09bf5
- add configurable source of RNG seed /etc/gcrypt/rngseed
e09bf5
  in the FIPS mode (#700388)
e09bf5
e09bf5
* Fri Feb 11 2011 Tomas Mraz <tmraz@redhat.com> 1.4.6-1
e09bf5
- new upstream version with minor changes
e09bf5
e09bf5
* Mon Feb 07 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.5-7
e09bf5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
e09bf5
e09bf5
* Fri Feb  4 2011 Tomas Mraz <tmraz@redhat.com> 1.4.5-6
e09bf5
- fix a bug in the fips-186-3 dsa parameter generation code
e09bf5
e09bf5
* Tue Feb  1 2011 Tomas Mraz <tmraz@redhat.com> 1.4.5-5
e09bf5
- use /dev/urandom for seeding in the FIPS mode
e09bf5
- make the tests to pass in the FIPS mode also fixing
e09bf5
  the FIPS-186-3 DSA keygen
e09bf5
e09bf5
* Sun Feb 14 2010 Rex Dieter <rdieter@fedoraproject.org> 1.4.5-4
e09bf5
- FTBFS libgcrypt-1.4.5-3.fc13: ImplicitDSOLinking (#564973)
e09bf5
e09bf5
* Wed Feb  3 2010 Tomas Mraz <tmraz@redhat.com> 1.4.5-3
e09bf5
- drop the S390 build workaround as it is no longer needed
e09bf5
- additional spec file cleanups for merge review (#226008)
e09bf5
e09bf5
* Mon Dec 21 2009 Tomas Mraz <tmraz@redhat.com> 1.4.5-1
e09bf5
- workaround for build on S390 (#548825)
e09bf5
- spec file cleanups
e09bf5
- upgrade to new minor upstream release
e09bf5
e09bf5
* Tue Aug 11 2009 Tomas Mraz <tmraz@redhat.com> 1.4.4-8
e09bf5
- fix warning when installed with --excludedocs (#515961)
e09bf5
e09bf5
* Fri Jul 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.4-7
e09bf5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
e09bf5
e09bf5
* Thu Jun 18 2009 Tomas Mraz <tmraz@redhat.com> 1.4.4-6
e09bf5
- and now really apply the padlock patch
e09bf5
e09bf5
* Wed Jun 17 2009 Tomas Mraz <tmraz@redhat.com> 1.4.4-5
e09bf5
- fix VIA padlock RNG inline assembly call (#505724)
e09bf5
e09bf5
* Thu Mar  5 2009 Tomas Mraz <tmraz@redhat.com> 1.4.4-4
e09bf5
- with the integrity verification check the library needs to link to libdl
e09bf5
  (#488702)
e09bf5
e09bf5
* Tue Mar  3 2009 Tomas Mraz <tmraz@redhat.com> 1.4.4-3
e09bf5
- add hmac FIPS integrity verification check
e09bf5
e09bf5
* Wed Feb 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.4-2
e09bf5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
e09bf5
e09bf5
* Fri Jan 30 2009 Tomas Mraz <tmraz@redhat.com> 1.4.4-1
e09bf5
- update to 1.4.4
e09bf5
- do not abort when the fips mode kernel flag is inaccessible
e09bf5
  due to permissions (#470219)
e09bf5
- hobble the library to drop the ECC support
e09bf5
e09bf5
* Mon Oct 20 2008 Dennis Gilmore <dennis@ausil.us> 1.4.3-2
e09bf5
- disable asm on sparc64
e09bf5
e09bf5
* Thu Sep 18 2008 Nalin Dahyabhai <nalin@redhat.com> 1.4.3-1
e09bf5
- update to 1.4.3
e09bf5
- own /etc/gcrypt
e09bf5
e09bf5
* Mon Sep 15 2008 Nalin Dahyabhai <nalin@redhat.com>
e09bf5
- invoke make with %%{?_smp_mflags} to build faster on multi-processor
e09bf5
  systems (Steve Grubb)
e09bf5
e09bf5
* Mon Sep  8 2008 Nalin Dahyabhai <nalin@redhat.com> 1.4.2-1
e09bf5
- update to 1.4.2
e09bf5
e09bf5
* Tue Apr 29 2008 Nalin Dahyabhai <nalin@redhat.com> 1.4.1-1
e09bf5
- update to 1.4.1
e09bf5
- bump libgpgerror-devel requirement to 1.4, matching the requirement enforced
e09bf5
  by the configure script
e09bf5
e09bf5
* Thu Apr  3 2008 Joe Orton <jorton@redhat.com> 1.4.0-3
e09bf5
- add patch from upstream to fix severe performance regression
e09bf5
  in entropy gathering
e09bf5
e09bf5
* Tue Feb 19 2008 Fedora Release Engineering <rel-eng@fedoraproject.org> - 1.4.0-2
e09bf5
- Autorebuild for GCC 4.3
e09bf5
e09bf5
* Mon Dec 10 2007 Nalin Dahyabhai <nalin@redhat.com> - 1.4.0-1
e09bf5
- update to 1.4.0
e09bf5
e09bf5
* Tue Oct 16 2007 Nalin Dahyabhai <nalin@redhat.com> - 1.2.4-6
e09bf5
- use ldconfig to build the soname symlink for packaging along with the
e09bf5
  shared library (#334731)
e09bf5
e09bf5
* Wed Aug 22 2007 Nalin Dahyabhai <nalin@redhat.com> - 1.2.4-5
e09bf5
- add missing gawk buildrequirement
e09bf5
- switch from explicitly specifying the /dev/random RNG to just verifying
e09bf5
  that the non-LGPL ones were disabled by the configure script
e09bf5
e09bf5
* Thu Aug 16 2007 Nalin Dahyabhai <nalin@redhat.com> - 1.2.4-4
e09bf5
- clarify license
e09bf5
- force use of the linux /dev/random RNG, to avoid accidentally falling back
e09bf5
  to others which would affect the license of the resulting library
e09bf5
e09bf5
* Mon Jul 30 2007 Nalin Dahyabhai <nalin@redhat.com> - 1.2.4-3
e09bf5
- disable static libraries (part of #249815)
e09bf5
e09bf5
* Fri Jul 27 2007 Nalin Dahyabhai <nalin@redhat.com> - 1.2.4-2
e09bf5
- move libgcrypt shared library to /%%{_lib} (#249815)
e09bf5
e09bf5
* Tue Feb  6 2007 Nalin Dahyabhai <nalin@redhat.com> - 1.2.4-1
e09bf5
- update to 1.2.4
e09bf5
e09bf5
* Mon Jan 22 2007 Nalin Dahyabhai <nalin@redhat.com> - 1.2.3-2
e09bf5
- make use of install-info more failsafe (Ville Skyttä, #223705)
e09bf5
e09bf5
* Fri Sep  1 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.2.3-1
e09bf5
- update to 1.2.3
e09bf5
e09bf5
* Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 1.2.2-3.1
e09bf5
- rebuild
e09bf5
e09bf5
* Mon Jun 05 2006 Jesse Keating <jkeating@redhat.com> 1.2.2-3
e09bf5
- Added missing buildreq pkgconfig
e09bf5
e09bf5
* Tue May 16 2006 Nalin Dahyabhai <nalin@redhat.com> 1.2.2-2
e09bf5
- remove file conflicts in libgcrypt-config by making the 64-bit version
e09bf5
  think the libraries are in /usr/lib (which is wrong, but which it also
e09bf5
  prunes from the suggest --libs output, so no harm done, hopefully)
e09bf5
e09bf5
* Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 1.2.2-1.2.1
e09bf5
- bump again for double-long bug on ppc(64)
e09bf5
e09bf5
* Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 1.2.2-1.2
e09bf5
- rebuilt for new gcc4.1 snapshot and glibc changes
e09bf5
e09bf5
* Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com>
e09bf5
- rebuilt
e09bf5
e09bf5
* Wed Oct  5 2005 Nalin Dahyabhai <nalin@redhat.com> 1.2.2-1
e09bf5
- update to 1.2.2
e09bf5
e09bf5
* Wed Mar 16 2005 Nalin Dahyabhai <nalin@redhat.com> 1.2.1-1
e09bf5
- update to 1.2.1
e09bf5
e09bf5
* Fri Jul 30 2004 Florian La Roche <Florian.LaRoche@redhat.de>
e09bf5
- another try to package the symlink
e09bf5
e09bf5
* Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com>
e09bf5
- rebuilt
e09bf5
e09bf5
* Sun May  2 2004 Bill Nottingham <notting@redhat.com> - 1.2.0-1
e09bf5
- update to official 1.2.0
e09bf5
e09bf5
* Fri Apr 16 2004 Bill Nottingham <notting@redhat.com> - 1.1.94-1
e09bf5
- update to 1.1.94
e09bf5
e09bf5
* Tue Mar 02 2004 Elliot Lee <sopwith@redhat.com>
e09bf5
- rebuilt
e09bf5
e09bf5
* Sat Feb 21 2004 Florian La Roche <Florian.LaRoche@redhat.de>
e09bf5
- add symlinks to shared libs at compile time
e09bf5
e09bf5
* Fri Feb 13 2004 Elliot Lee <sopwith@redhat.com>
e09bf5
- rebuilt
e09bf5
e09bf5
* Wed Jun 04 2003 Elliot Lee <sopwith@redhat.com>
e09bf5
- rebuilt
e09bf5
e09bf5
* Thu Mar 20 2003 Jeff Johnson <jbj@redhat.com> 1.1.12-1
e09bf5
- upgrade to 1.1.12 (beta).
e09bf5
e09bf5
* Fri Jun 21 2002 Tim Powers <timp@redhat.com>
e09bf5
- automated rebuild
e09bf5
e09bf5
* Sun May 26 2002 Tim Powers <timp@redhat.com>
e09bf5
- automated rebuild
e09bf5
e09bf5
* Tue May 21 2002 Jeff Johnson <jbj@redhat.com>
e09bf5
- update to 1.1.7
e09bf5
- change license to LGPL.
e09bf5
- include splint annotations patch.
e09bf5
- install info pages.
e09bf5
e09bf5
* Tue Apr  2 2002 Nalin Dahyabhai <nalin@redhat.com> 1.1.6-1
e09bf5
- update to 1.1.6
e09bf5
e09bf5
* Thu Jan 10 2002 Nalin Dahyabhai <nalin@redhat.com> 1.1.5-1
e09bf5
- fix the Source tag so that it's a real URL
e09bf5
e09bf5
* Thu Dec 20 2001 Nalin Dahyabhai <nalin@redhat.com>
e09bf5
- initial package