Blame SPECS/libgcrypt.spec

9fde57
Name: libgcrypt
9fde57
Version: 1.8.3
6f4a73
Release: 4%{?dist}
9fde57
URL: http://www.gnupg.org/
9fde57
Source0: libgcrypt-%{version}-hobbled.tar.xz
9fde57
# The original libgcrypt sources now contain potentially patented ECC
9fde57
# cipher support. We have to remove it in the tarball we ship with
9fde57
# the hobble-libgcrypt script. 
9fde57
# (We replace it with RH approved ECC in Source4-5)
9fde57
#Source0: ftp://ftp.gnupg.org/gcrypt/libgcrypt/libgcrypt-{version}.tar.bz2
9fde57
#Source1: ftp://ftp.gnupg.org/gcrypt/libgcrypt/libgcrypt-{version}.tar.bz2.sig
9fde57
Source2: wk@g10code.com
9fde57
Source3: hobble-libgcrypt
9fde57
# Approved ECC support
9fde57
Source4: ecc-curves.c
9fde57
Source5: curves.c
9fde57
Source6: t-mpi-point.c
9fde57
Source7: random.conf
9fde57
# make FIPS hmac compatible with fipscheck - non upstreamable
9fde57
# update on soname bump
9fde57
Patch2: libgcrypt-1.6.2-use-fipscheck.patch
9fde57
# fix tests in the FIPS mode, allow CAVS testing of DSA keygen
9fde57
Patch5: libgcrypt-1.8.0-tests.patch
9fde57
# update the CAVS tests
9fde57
Patch7: libgcrypt-1.7.3-fips-cavs.patch
9fde57
# use poll instead of select when gathering randomness
9fde57
Patch11: libgcrypt-1.8.0-use-poll.patch
9fde57
# slight optimalization of mpicoder.c to silence Valgrind (#968288)
9fde57
Patch13: libgcrypt-1.6.1-mpicoder-gccopt.patch
9fde57
# fix tests to work with approved ECC
9fde57
Patch14: libgcrypt-1.7.3-ecc-test-fix.patch
9fde57
# Run the FIPS mode initialization in the shared library constructor
9fde57
Patch18: libgcrypt-1.8.3-fips-ctor.patch
9fde57
# Block some operations if in FIPS non-operational state
9fde57
Patch22: libgcrypt-1.7.3-fips-reqs.patch
9fde57
# Do not try to open /dev/urandom if getrandom() works
9fde57
Patch24: libgcrypt-1.8.3-getrandom.patch
6f4a73
# CMAC selftest for FIPS POST
6f4a73
Patch25: libgcrypt-1.8.3-cmac-selftest.patch
6f4a73
# Continuous FIPS entropy test
6f4a73
Patch26: libgcrypt-1.8.3-fips-enttest.patch
6f4a73
# Disable non-approved FIPS hashes in the enforced FIPS mode
6f4a73
Patch27: libgcrypt-1.8.3-md-fips-enforce.patch
9fde57
9fde57
%define gcrylibdir %{_libdir}
9fde57
9fde57
# Technically LGPLv2.1+, but Fedora's table doesn't draw a distinction.
9fde57
# Documentation and some utilities are GPLv2+ licensed. These files
9fde57
# are in the devel subpackage.
9fde57
License: LGPLv2+
9fde57
Summary: A general-purpose cryptography library
9fde57
BuildRequires: gcc
9fde57
BuildRequires: gawk, libgpg-error-devel >= 1.11, pkgconfig
9fde57
BuildRequires: fipscheck
9fde57
# This is needed only when patching the .texi doc.
9fde57
BuildRequires: texinfo
9fde57
Group: System Environment/Libraries
9fde57
9fde57
%package devel
9fde57
Summary: Development files for the %{name} package
9fde57
License: LGPLv2+ and GPLv2+
9fde57
Group: Development/Libraries
9fde57
Requires(pre): /sbin/install-info
9fde57
Requires(post): /sbin/install-info
9fde57
Requires: libgpg-error-devel
9fde57
Requires: %{name} = %{version}-%{release}
9fde57
9fde57
%description
9fde57
Libgcrypt is a general purpose crypto library based on the code used
9fde57
in GNU Privacy Guard.  This is a development version.
9fde57
9fde57
%description devel
9fde57
Libgcrypt is a general purpose crypto library based on the code used
9fde57
in GNU Privacy Guard.  This package contains files needed to develop
9fde57
applications using libgcrypt.
9fde57
9fde57
%prep
9fde57
%setup -q
9fde57
%{SOURCE3}
9fde57
%patch2 -p1 -b .use-fipscheck
9fde57
%patch5 -p1 -b .tests
9fde57
%patch7 -p1 -b .cavs
9fde57
%patch11 -p1 -b .use-poll
9fde57
%patch13 -p1 -b .gccopt
9fde57
%patch14 -p1 -b .eccfix
9fde57
%patch18 -p1 -b .fips-ctor
9fde57
%patch22 -p1 -b .fips-reqs
9fde57
%patch24 -p1 -b .getrandom
6f4a73
%patch25 -p1 -b .cmac-selftest
6f4a73
%patch26 -p1 -b .fips-enttest
6f4a73
%patch27 -p1 -b .fips-enforce
9fde57
9fde57
cp %{SOURCE4} cipher/
9fde57
cp %{SOURCE5} %{SOURCE6} tests/
9fde57
9fde57
%build
9fde57
%configure --disable-static \
9fde57
%ifarch sparc64
9fde57
     --disable-asm \
9fde57
%endif
9fde57
     --enable-noexecstack \
9fde57
     --enable-hmac-binary-check \
9fde57
     --enable-pubkey-ciphers='dsa elgamal rsa ecc' \
9fde57
     --disable-O-flag-munging
9fde57
sed -i -e '/^sys_lib_dlsearch_path_spec/s,/lib /usr/lib,/usr/lib /lib64 /usr/lib64 /lib,g' libtool
9fde57
make %{?_smp_mflags}
9fde57
9fde57
%check
9fde57
fipshmac src/.libs/libgcrypt.so.??
9fde57
make check
9fde57
9fde57
# Add generation of HMAC checksums of the final stripped binaries 
9fde57
%define __spec_install_post \
9fde57
    %{?__debug_package:%{__debug_install_post}} \
9fde57
    %{__arch_install_post} \
9fde57
    %{__os_install_post} \
9fde57
    fipshmac $RPM_BUILD_ROOT%{gcrylibdir}/*.so.?? \
9fde57
%{nil}
9fde57
9fde57
%install
9fde57
make install DESTDIR=$RPM_BUILD_ROOT
9fde57
9fde57
# Change /usr/lib64 back to /usr/lib.  This saves us from having to patch the
9fde57
# script to "know" that -L/usr/lib64 should be suppressed, and also removes
9fde57
# a file conflict between 32- and 64-bit versions of this package.
9fde57
# Also replace my_host with none.
9fde57
sed -i -e 's,^libdir="/usr/lib.*"$,libdir="/usr/lib",g' $RPM_BUILD_ROOT/%{_bindir}/libgcrypt-config
9fde57
sed -i -e 's,^my_host=".*"$,my_host="none",g' $RPM_BUILD_ROOT/%{_bindir}/libgcrypt-config
9fde57
9fde57
rm -f ${RPM_BUILD_ROOT}/%{_infodir}/dir ${RPM_BUILD_ROOT}/%{_libdir}/*.la
9fde57
/sbin/ldconfig -n $RPM_BUILD_ROOT/%{_libdir}
9fde57
9fde57
%if "%{gcrylibdir}" != "%{_libdir}"
9fde57
# Relocate the shared libraries to %{gcrylibdir}.
9fde57
mkdir -p $RPM_BUILD_ROOT%{gcrylibdir}
9fde57
for shlib in $RPM_BUILD_ROOT%{_libdir}/*.so* ; do
9fde57
	if test -L "$shlib" ; then
9fde57
		rm "$shlib"
9fde57
	else
9fde57
		mv "$shlib" $RPM_BUILD_ROOT%{gcrylibdir}/
9fde57
	fi
9fde57
done
9fde57
9fde57
# Add soname symlink.
9fde57
/sbin/ldconfig -n $RPM_BUILD_ROOT/%{_lib}/
9fde57
%endif
9fde57
9fde57
# Overwrite development symlinks.
9fde57
pushd $RPM_BUILD_ROOT/%{gcrylibdir}
9fde57
for shlib in lib*.so.?? ; do
9fde57
	target=$RPM_BUILD_ROOT/%{_libdir}/`echo "$shlib" | sed -e 's,\.so.*,,g'`.so
9fde57
%if "%{gcrylibdir}" != "%{_libdir}"
9fde57
	shlib=%{gcrylibdir}/$shlib
9fde57
%endif
9fde57
	ln -sf $shlib $target
9fde57
done
9fde57
popd
9fde57
9fde57
# Create /etc/gcrypt (hardwired, not dependent on the configure invocation) so
9fde57
# that _someone_ owns it.
9fde57
mkdir -p -m 755 $RPM_BUILD_ROOT/etc/gcrypt
9fde57
install -m644 %{SOURCE7} $RPM_BUILD_ROOT/etc/gcrypt/random.conf
9fde57
9fde57
%post -p /sbin/ldconfig
9fde57
9fde57
%postun -p /sbin/ldconfig
9fde57
9fde57
%post devel
9fde57
[ -f %{_infodir}/gcrypt.info.gz ] && \
9fde57
    /sbin/install-info %{_infodir}/gcrypt.info.gz %{_infodir}/dir
9fde57
exit 0
9fde57
9fde57
%preun devel
9fde57
if [ $1 = 0 -a -f %{_infodir}/gcrypt.info.gz ]; then
9fde57
    /sbin/install-info --delete %{_infodir}/gcrypt.info.gz %{_infodir}/dir
9fde57
fi
9fde57
exit 0
9fde57
9fde57
%files
9fde57
%dir /etc/gcrypt
9fde57
%config(noreplace) /etc/gcrypt/random.conf
9fde57
%{gcrylibdir}/libgcrypt.so.*
9fde57
%{gcrylibdir}/.libgcrypt.so.*.hmac
9fde57
%{!?_licensedir:%global license %%doc}
9fde57
%license COPYING.LIB
9fde57
%doc AUTHORS NEWS THANKS
9fde57
9fde57
%files devel
9fde57
%{_bindir}/%{name}-config
9fde57
%{_bindir}/dumpsexp
9fde57
%{_bindir}/hmac256
9fde57
%{_bindir}/mpicalc
9fde57
%{_includedir}/*
9fde57
%{_libdir}/*.so
9fde57
%{_datadir}/aclocal/*
9fde57
%{_mandir}/man1/*
9fde57
9fde57
%{_infodir}/gcrypt.info*
9fde57
%{!?_licensedir:%global license %%doc}
9fde57
%license COPYING
9fde57
9fde57
%changelog
6f4a73
* Mon Jun 24 2019 Tomáš Mráz <tmraz@redhat.com> 1.8.3-4
6f4a73
- improve the continuous FIPS entropy test
6f4a73
6f4a73
* Mon Jun  3 2019 Tomáš Mráz <tmraz@redhat.com> 1.8.3-3
6f4a73
- add CMAC selftest for FIPS POST
6f4a73
- add continuous FIPS entropy test
6f4a73
- disable non-approved FIPS hashes in the enforced FIPS mode
6f4a73
9fde57
* Thu Jul 12 2018 Tomáš Mráz <tmraz@redhat.com> 1.8.3-2
9fde57
- make only_urandom a default in non-presence of configuration file
9fde57
- run the full FIPS selftests only when the library is called from
9fde57
  application
9fde57
9fde57
* Thu Jun 14 2018 Tomáš Mráz <tmraz@redhat.com> 1.8.3-1
9fde57
- new upstream version 1.8.3
9fde57
9fde57
* Tue Feb  6 2018 Tomáš Mráz <tmraz@redhat.com> 1.8.2-2
9fde57
- fix behavior when getrandom syscall is not present (#1542453)
9fde57
9fde57
* Thu Dec 21 2017 Tomáš Mráz <tmraz@redhat.com> 1.8.2-1
9fde57
- new upstream version 1.8.2
9fde57
9fde57
* Tue Dec  5 2017 Tomáš Mráz <tmraz@redhat.com> 1.8.1-3
9fde57
- do not try to access() /dev/urandom either if getrandom() works
9fde57
9fde57
* Mon Dec  4 2017 Tomáš Mráz <tmraz@redhat.com> 1.8.1-2
9fde57
- do not try to open /dev/urandom if getrandom() works (#1380866)
9fde57
9fde57
* Tue Sep  5 2017 Tomáš Mráz <tmraz@redhat.com> 1.8.1-1
9fde57
- new upstream version 1.8.1
9fde57
9fde57
* Wed Aug 16 2017 Tomáš Mráz <tmraz@redhat.com> 1.8.0-1
9fde57
- new upstream version 1.8.0
9fde57
9fde57
* Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.7.8-3
9fde57
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
9fde57
9fde57
* Wed Jul 26 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.7.8-2
9fde57
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
9fde57
9fde57
* Thu Jun 29 2017 Tomáš Mráz <tmraz@redhat.com> 1.7.8-1
9fde57
- new upstream version 1.7.8
9fde57
9fde57
* Fri Jun  2 2017 Tomáš Mráz <tmraz@redhat.com> 1.7.7-1
9fde57
- new upstream version 1.7.7
9fde57
- GOST is now enabled
9fde57
9fde57
* Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.7.6-2
9fde57
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
9fde57
9fde57
* Mon Jan 30 2017 Tomáš Mráz <tmraz@redhat.com> 1.7.6-1
9fde57
- new upstream version 1.7.6
9fde57
9fde57
* Fri Dec 16 2016 Tomáš Mráz <tmraz@redhat.com> 1.7.5-1
9fde57
- new upstream version 1.7.5
9fde57
9fde57
* Wed Nov 23 2016 Tomáš Mráz <tmraz@redhat.com> 1.7.3-1
9fde57
- new upstream version 1.7.3
9fde57
9fde57
* Wed Aug 17 2016 Tomáš Mráz <tmraz@redhat.com> 1.6.6-1
9fde57
- new upstream version with important security fix (CVE-2016-6316)
9fde57
9fde57
* Thu Jul 21 2016 Tomáš Mráz <tmraz@redhat.com> 1.6.5-1
9fde57
- new upstream version fixing low impact issue CVE-2015-7511
9fde57
9fde57
* Thu Feb 04 2016 Fedora Release Engineering <releng@fedoraproject.org> - 1.6.4-2
9fde57
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
9fde57
9fde57
* Wed Sep  9 2015 Tomáš Mráz <tmraz@redhat.com> 1.6.4-1
9fde57
- new upstream version
9fde57
9fde57
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.6.3-5
9fde57
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
9fde57
9fde57
* Fri Apr  3 2015 Tomáš Mráz <tmraz@redhat.com> 1.6.3-4
9fde57
- deinitialize the RNG after the selftest is run
9fde57
9fde57
* Tue Mar 24 2015 Tomáš Mráz <tmraz@redhat.com> 1.6.3-3
9fde57
- touch only urandom in the selftest and when /dev/random is
9fde57
  unavailable for example by SELinux confinement
9fde57
- fix the RSA selftest key (p q swap) (#1204517)
9fde57
9fde57
* Fri Mar 13 2015 Tomáš Mráz <tmraz@redhat.com> 1.6.3-2
9fde57
- do not use strict aliasing for bufhelp functions (#1201219)
9fde57
9fde57
* Fri Mar  6 2015 Tomáš Mráz <tmraz@redhat.com> 1.6.3-1
9fde57
- new upstream version
9fde57
9fde57
* Wed Feb 25 2015 Tomáš Mráz <tmraz@redhat.com> 1.6.2-4
9fde57
- do not initialize secure memory during the selftest (#1195850)
9fde57
9fde57
* Sat Feb 21 2015 Till Maas <opensource@till.name> - 1.6.2-3
9fde57
- Rebuilt for Fedora 23 Change
9fde57
  https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code
9fde57
9fde57
* Wed Jan 14 2015 Tomáš Mráz <tmraz@redhat.com> 1.6.2-2
9fde57
- fix buildability of programs using gcrypt.h with -ansi (#1182200)
9fde57
9fde57
* Mon Dec  8 2014 Tomáš Mráz <tmraz@redhat.com> 1.6.2-1
9fde57
- new upstream version
9fde57
9fde57
* Sun Aug 17 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.6.1-7
9fde57
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
9fde57
9fde57
* Thu Jul 17 2014 Tom Callaway <spot@fedoraproject.org> - 1.6.1-6
9fde57
- fix license handling
9fde57
9fde57
* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.6.1-5
9fde57
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
9fde57
9fde57
* Tue May 20 2014 Kyle McMartin <kyle@fedoraproject.org> 1.6.1-4
9fde57
- Re-enable below algos, apply patch from upstream list to make
9fde57
  that code -fPIC friendly. (rhbz#1069792)
9fde57
9fde57
* Mon May 19 2014 Kyle McMartin <kyle@fedoraproject.org> 1.6.1-3
9fde57
- Disable rijndael, cast5, camellia ARM assembly, as it's non-PIC as
9fde57
  presently written, which results in .text relocations in the shared
9fde57
  library. (rhbz#1069792)
9fde57
9fde57
* Thu Apr 24 2014 Tomáš Mráz <tmraz@redhat.com> 1.6.1-2
9fde57
- drop the temporary compat shared library version
9fde57
- fix the soname version in -use-fipscheck.patch
9fde57
9fde57
* Fri Feb 28 2014 Tomáš Mráz <tmraz@redhat.com> 1.6.1-1
9fde57
- new upstream version breaking ABI compatibility
9fde57
- this release temporarily includes old compatibility .so
9fde57
9fde57
* Tue Jan 21 2014 Tomáš Mráz <tmraz@redhat.com> 1.5.3-3
9fde57
- add back the nistp521r1 EC curve
9fde57
- fix a bug in the Whirlpool hash implementation
9fde57
- speed up the PBKDF2 computation
9fde57
9fde57
* Sun Oct 20 2013 Tom Callaway <spot@fedoraproject.org> - 1.5.3-2
9fde57
- add cleared ECC support
9fde57
9fde57
* Fri Jul 26 2013 Tomáš Mráz <tmraz@redhat.com> 1.5.3-1
9fde57
- new upstream version fixing cache side-channel attack on RSA private keys
9fde57
9fde57
* Thu Jun 20 2013 Tomáš Mráz <tmraz@redhat.com> 1.5.2-3
9fde57
- silence false error detected by valgrind (#968288)
9fde57
9fde57
* Thu Apr 25 2013 Tomáš Mráz <tmraz@redhat.com> 1.5.2-2
9fde57
- silence strict aliasing warning in Rijndael
9fde57
- apply UsrMove
9fde57
- spec file cleanups
9fde57
9fde57
* Fri Apr 19 2013 Tomáš Mráz <tmraz@redhat.com> 1.5.2-1
9fde57
- new upstream version
9fde57
9fde57
* Wed Mar 20 2013 Tomas Mraz <tmraz@redhat.com> 1.5.1-1
9fde57
- new upstream version
9fde57
9fde57
* Tue Mar  5 2013 Tomas Mraz <tmraz@redhat.com> 1.5.0-11
9fde57
- use poll() instead of select() when gathering randomness (#913773)
9fde57
9fde57
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.5.0-10
9fde57
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
9fde57
9fde57
* Thu Jan  3 2013 Tomas Mraz <tmraz@redhat.com> 1.5.0-9
9fde57
- allow empty passphrase in PBKDF2 needed for cryptsetup (=891266)
9fde57
9fde57
* Mon Dec  3 2012 Tomas Mraz <tmraz@redhat.com> 1.5.0-8
9fde57
- fix multilib conflict in libgcrypt-config
9fde57
- fix minor memory leaks and other bugs found by Coverity scan
9fde57
9fde57
* Thu Jul 19 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.5.0-6
9fde57
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
9fde57
9fde57
* Thu Apr  5 2012 Tomas Mraz <tmraz@redhat.com> 1.5.0-5
9fde57
- Correctly rebuild the info documentation
9fde57
9fde57
* Wed Apr  4 2012 Tomas Mraz <tmraz@redhat.com> 1.5.0-4
9fde57
- Add GCRYCTL_SET_ENFORCED_FIPS_FLAG command
9fde57
9fde57
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.5.0-3
9fde57
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
9fde57
9fde57
* Mon Aug 15 2011 Kalev Lember <kalevlember@gmail.com> 1.5.0-2
9fde57
- Rebuilt for rpm bug #728707
9fde57
9fde57
* Thu Jul 21 2011 Tomas Mraz <tmraz@redhat.com> 1.5.0-1
9fde57
- new upstream version
9fde57
9fde57
* Mon Jun 20 2011 Tomas Mraz <tmraz@redhat.com> 1.4.6-4
9fde57
- Always xor seed from /dev/urandom over /etc/gcrypt/rngseed
9fde57
9fde57
* Mon May 30 2011 Tomas Mraz <tmraz@redhat.com> 1.4.6-3
9fde57
- Make the FIPS-186-3 DSA implementation CAVS testable
9fde57
- add configurable source of RNG seed /etc/gcrypt/rngseed
9fde57
  in the FIPS mode (#700388)
9fde57
9fde57
* Fri Feb 11 2011 Tomas Mraz <tmraz@redhat.com> 1.4.6-1
9fde57
- new upstream version with minor changes
9fde57
9fde57
* Mon Feb 07 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.5-7
9fde57
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
9fde57
9fde57
* Fri Feb  4 2011 Tomas Mraz <tmraz@redhat.com> 1.4.5-6
9fde57
- fix a bug in the fips-186-3 dsa parameter generation code
9fde57
9fde57
* Tue Feb  1 2011 Tomas Mraz <tmraz@redhat.com> 1.4.5-5
9fde57
- use /dev/urandom for seeding in the FIPS mode
9fde57
- make the tests to pass in the FIPS mode also fixing
9fde57
  the FIPS-186-3 DSA keygen
9fde57
9fde57
* Sun Feb 14 2010 Rex Dieter <rdieter@fedoraproject.org> 1.4.5-4
9fde57
- FTBFS libgcrypt-1.4.5-3.fc13: ImplicitDSOLinking (#564973)
9fde57
9fde57
* Wed Feb  3 2010 Tomas Mraz <tmraz@redhat.com> 1.4.5-3
9fde57
- drop the S390 build workaround as it is no longer needed
9fde57
- additional spec file cleanups for merge review (#226008)
9fde57
9fde57
* Mon Dec 21 2009 Tomas Mraz <tmraz@redhat.com> 1.4.5-1
9fde57
- workaround for build on S390 (#548825)
9fde57
- spec file cleanups
9fde57
- upgrade to new minor upstream release
9fde57
9fde57
* Tue Aug 11 2009 Tomas Mraz <tmraz@redhat.com> 1.4.4-8
9fde57
- fix warning when installed with --excludedocs (#515961)
9fde57
9fde57
* Fri Jul 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.4-7
9fde57
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
9fde57
9fde57
* Thu Jun 18 2009 Tomas Mraz <tmraz@redhat.com> 1.4.4-6
9fde57
- and now really apply the padlock patch
9fde57
9fde57
* Wed Jun 17 2009 Tomas Mraz <tmraz@redhat.com> 1.4.4-5
9fde57
- fix VIA padlock RNG inline assembly call (#505724)
9fde57
9fde57
* Thu Mar  5 2009 Tomas Mraz <tmraz@redhat.com> 1.4.4-4
9fde57
- with the integrity verification check the library needs to link to libdl
9fde57
  (#488702)
9fde57
9fde57
* Tue Mar  3 2009 Tomas Mraz <tmraz@redhat.com> 1.4.4-3
9fde57
- add hmac FIPS integrity verification check
9fde57
9fde57
* Wed Feb 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.4-2
9fde57
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
9fde57
9fde57
* Fri Jan 30 2009 Tomas Mraz <tmraz@redhat.com> 1.4.4-1
9fde57
- update to 1.4.4
9fde57
- do not abort when the fips mode kernel flag is inaccessible
9fde57
  due to permissions (#470219)
9fde57
- hobble the library to drop the ECC support
9fde57
9fde57
* Mon Oct 20 2008 Dennis Gilmore <dennis@ausil.us> 1.4.3-2
9fde57
- disable asm on sparc64
9fde57
9fde57
* Thu Sep 18 2008 Nalin Dahyabhai <nalin@redhat.com> 1.4.3-1
9fde57
- update to 1.4.3
9fde57
- own /etc/gcrypt
9fde57
9fde57
* Mon Sep 15 2008 Nalin Dahyabhai <nalin@redhat.com>
9fde57
- invoke make with %%{?_smp_mflags} to build faster on multi-processor
9fde57
  systems (Steve Grubb)
9fde57
9fde57
* Mon Sep  8 2008 Nalin Dahyabhai <nalin@redhat.com> 1.4.2-1
9fde57
- update to 1.4.2
9fde57
9fde57
* Tue Apr 29 2008 Nalin Dahyabhai <nalin@redhat.com> 1.4.1-1
9fde57
- update to 1.4.1
9fde57
- bump libgpgerror-devel requirement to 1.4, matching the requirement enforced
9fde57
  by the configure script
9fde57
9fde57
* Thu Apr  3 2008 Joe Orton <jorton@redhat.com> 1.4.0-3
9fde57
- add patch from upstream to fix severe performance regression
9fde57
  in entropy gathering
9fde57
9fde57
* Tue Feb 19 2008 Fedora Release Engineering <rel-eng@fedoraproject.org> - 1.4.0-2
9fde57
- Autorebuild for GCC 4.3
9fde57
9fde57
* Mon Dec 10 2007 Nalin Dahyabhai <nalin@redhat.com> - 1.4.0-1
9fde57
- update to 1.4.0
9fde57
9fde57
* Tue Oct 16 2007 Nalin Dahyabhai <nalin@redhat.com> - 1.2.4-6
9fde57
- use ldconfig to build the soname symlink for packaging along with the
9fde57
  shared library (#334731)
9fde57
9fde57
* Wed Aug 22 2007 Nalin Dahyabhai <nalin@redhat.com> - 1.2.4-5
9fde57
- add missing gawk buildrequirement
9fde57
- switch from explicitly specifying the /dev/random RNG to just verifying
9fde57
  that the non-LGPL ones were disabled by the configure script
9fde57
9fde57
* Thu Aug 16 2007 Nalin Dahyabhai <nalin@redhat.com> - 1.2.4-4
9fde57
- clarify license
9fde57
- force use of the linux /dev/random RNG, to avoid accidentally falling back
9fde57
  to others which would affect the license of the resulting library
9fde57
9fde57
* Mon Jul 30 2007 Nalin Dahyabhai <nalin@redhat.com> - 1.2.4-3
9fde57
- disable static libraries (part of #249815)
9fde57
9fde57
* Fri Jul 27 2007 Nalin Dahyabhai <nalin@redhat.com> - 1.2.4-2
9fde57
- move libgcrypt shared library to /%%{_lib} (#249815)
9fde57
9fde57
* Tue Feb  6 2007 Nalin Dahyabhai <nalin@redhat.com> - 1.2.4-1
9fde57
- update to 1.2.4
9fde57
9fde57
* Mon Jan 22 2007 Nalin Dahyabhai <nalin@redhat.com> - 1.2.3-2
9fde57
- make use of install-info more failsafe (Ville Skyttä, #223705)
9fde57
9fde57
* Fri Sep  1 2006 Nalin Dahyabhai <nalin@redhat.com> - 1.2.3-1
9fde57
- update to 1.2.3
9fde57
9fde57
* Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 1.2.2-3.1
9fde57
- rebuild
9fde57
9fde57
* Mon Jun 05 2006 Jesse Keating <jkeating@redhat.com> 1.2.2-3
9fde57
- Added missing buildreq pkgconfig
9fde57
9fde57
* Tue May 16 2006 Nalin Dahyabhai <nalin@redhat.com> 1.2.2-2
9fde57
- remove file conflicts in libgcrypt-config by making the 64-bit version
9fde57
  think the libraries are in /usr/lib (which is wrong, but which it also
9fde57
  prunes from the suggest --libs output, so no harm done, hopefully)
9fde57
9fde57
* Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 1.2.2-1.2.1
9fde57
- bump again for double-long bug on ppc(64)
9fde57
9fde57
* Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 1.2.2-1.2
9fde57
- rebuilt for new gcc4.1 snapshot and glibc changes
9fde57
9fde57
* Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com>
9fde57
- rebuilt
9fde57
9fde57
* Wed Oct  5 2005 Nalin Dahyabhai <nalin@redhat.com> 1.2.2-1
9fde57
- update to 1.2.2
9fde57
9fde57
* Wed Mar 16 2005 Nalin Dahyabhai <nalin@redhat.com> 1.2.1-1
9fde57
- update to 1.2.1
9fde57
9fde57
* Fri Jul 30 2004 Florian La Roche <Florian.LaRoche@redhat.de>
9fde57
- another try to package the symlink
9fde57
9fde57
* Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com>
9fde57
- rebuilt
9fde57
9fde57
* Sun May  2 2004 Bill Nottingham <notting@redhat.com> - 1.2.0-1
9fde57
- update to official 1.2.0
9fde57
9fde57
* Fri Apr 16 2004 Bill Nottingham <notting@redhat.com> - 1.1.94-1
9fde57
- update to 1.1.94
9fde57
9fde57
* Tue Mar 02 2004 Elliot Lee <sopwith@redhat.com>
9fde57
- rebuilt
9fde57
9fde57
* Sat Feb 21 2004 Florian La Roche <Florian.LaRoche@redhat.de>
9fde57
- add symlinks to shared libs at compile time
9fde57
9fde57
* Fri Feb 13 2004 Elliot Lee <sopwith@redhat.com>
9fde57
- rebuilt
9fde57
9fde57
* Wed Jun 04 2003 Elliot Lee <sopwith@redhat.com>
9fde57
- rebuilt
9fde57
9fde57
* Thu Mar 20 2003 Jeff Johnson <jbj@redhat.com> 1.1.12-1
9fde57
- upgrade to 1.1.12 (beta).
9fde57
9fde57
* Fri Jun 21 2002 Tim Powers <timp@redhat.com>
9fde57
- automated rebuild
9fde57
9fde57
* Sun May 26 2002 Tim Powers <timp@redhat.com>
9fde57
- automated rebuild
9fde57
9fde57
* Tue May 21 2002 Jeff Johnson <jbj@redhat.com>
9fde57
- update to 1.1.7
9fde57
- change license to LGPL.
9fde57
- include splint annotations patch.
9fde57
- install info pages.
9fde57
9fde57
* Tue Apr  2 2002 Nalin Dahyabhai <nalin@redhat.com> 1.1.6-1
9fde57
- update to 1.1.6
9fde57
9fde57
* Thu Jan 10 2002 Nalin Dahyabhai <nalin@redhat.com> 1.1.5-1
9fde57
- fix the Source tag so that it's a real URL
9fde57
9fde57
* Thu Dec 20 2001 Nalin Dahyabhai <nalin@redhat.com>
9fde57
- initial package