Blame SPECS/libkcapi.spec

0aea10
# Shared object version of libkcapi.
0aea10
%global vmajor            1
0aea10
%global vminor            3
0aea10
%global vpatch            1
0aea10
0aea10
# Do we build the replacements packages?
0aea10
%bcond_with replace_coreutils
0aea10
# Replace fipscheck by default in Fedora 33+:
0aea10
%if 0%{?fedora} >= 33 || 0%{?rhel} >= 9
0aea10
%bcond_without replace_fipscheck
0aea10
%else
0aea10
%bcond_with replace_fipscheck
0aea10
%endif
0aea10
# Replace hmaccalc by default in Fedora 28+:
0aea10
%if 0%{?fedora} >= 28 || 0%{?rhel} >= 8
0aea10
%bcond_without replace_hmaccalc
0aea10
%else
0aea10
%bcond_with replace_hmaccalc
0aea10
%endif
0aea10
%if 0%{?fedora} >= 29 || 0%{?rhel} >= 8
0aea10
%bcond_without test_package
0aea10
%else
0aea10
%bcond_with test_package
0aea10
%endif
0aea10
# disable cppcheck analysis in ELN/RHEL to avoid the dependency bz#1931518
0aea10
%if 0%{?rhel}
0aea10
%bcond_with cppcheck
0aea10
%else
0aea10
# Temporarily disable cppcheck on Fedora until bz#1923600 is fixed in rawhide
0aea10
%bcond_with cppcheck
0aea10
#bcond_without cppcheck
0aea10
%endif
0aea10
0aea10
# Use `--without test` to build without running the tests
0aea10
%bcond_without test
0aea10
# Use `--without fuzz_test` to skip the fuzz test during build
0aea10
%bcond_without fuzz_test
0aea10
# Use `--without doc` to build without the -doc subpackage
0aea10
%bcond_without doc
0aea10
# Use `--without clang_sa` to skip clang static analysis during build
0aea10
%bcond_without clang_sa
0aea10
0aea10
# This package needs at least Linux Kernel v4.10.0.
0aea10
%global min_kernel_ver    4.10.0
0aea10
0aea10
# Do we need to tweak sysctl.d? In newer versions of the Linux
0aea10
# Kernel the default ancillary buffer size is set high enough.
0aea10
# TODO: Adapt this when the patch for net/core/sock.c is merged.
0aea10
%if %{lua:print(rpm.vercmp('99.0.0', posix.uname('%r')));} >= 0
0aea10
%global with_sysctl_tweak 1
0aea10
%else
0aea10
%global with_sysctl_tweak 0
0aea10
%endif
0aea10
0aea10
%if %{with_sysctl_tweak}
0aea10
# Priority for the sysctl.d preset.
0aea10
%global sysctl_prio       50
0aea10
0aea10
# Value used for the sysctl.d preset.
0aea10
%global sysctl_optmem_max 81920
0aea10
0aea10
# Extension for the README.distro file.
0aea10
%global distroname_ext    %{?fedora:fedora}%{?rhel:redhat}
0aea10
%endif
0aea10
0aea10
# Lowest limit to run the testsuite.  If we cannot obtain this
0aea10
# value, we asume the testsuite cannot be run.
0aea10
%global test_optmem_max   %(%{__cat} /proc/sys/net/core/optmem_max || echo 0)
0aea10
0aea10
# For picking patches from upstream commits or pull requests.
0aea10
%global giturl            https://github.com/smuellerDD/%{name}
0aea10
0aea10
# Do we replace some coreutils?
0aea10
%if %{with replace_coreutils}
0aea10
# TODO: Adapt this when replacing some coreutils initially.
0aea10
%global coreutils_evr     8.29-1%{?dist}
0aea10
%endif
0aea10
0aea10
# Do we replace fipscheck?
0aea10
%if %{with replace_fipscheck}
0aea10
%global fipscheck_evr     1.5.0-9
0aea10
%endif
0aea10
0aea10
# Do we replace hmaccalc?
0aea10
%if %{with replace_hmaccalc}
0aea10
%global hmaccalc_evr      0.9.14-10%{?dist}
0aea10
%endif
0aea10
0aea10
%global apps_hmaccalc sha1hmac sha224hmac sha256hmac sha384hmac sha512hmac
0aea10
%global apps_fipscheck sha1sum sha224sum sha256sum sha384sum sha512sum md5sum fipscheck fipshmac
0aea10
0aea10
# On old kernels use mock hashers implemented via openssl
0aea10
%if %{lua:print(rpm.vercmp(posix.uname('%r'), '3.19'));} >= 0
0aea10
%global sha512hmac bin/kcapi-hasher -n sha512hmac
0aea10
%global fipshmac   bin/kcapi-hasher -n fipshmac
0aea10
%else
0aea10
%global sha512hmac bash %{SOURCE2}
0aea10
%global fipshmac   bash %{SOURCE3}
0aea10
%endif
0aea10
0aea10
# Add generation of HMAC checksums of the final stripped
0aea10
# binaries.  %%define with lazy globbing is used here
0aea10
# intentionally, because using %%global does not work.
0aea10
%define __spec_install_post                                      \
0aea10
%{?__debug_package:%{__debug_install_post}}                      \
0aea10
%{__arch_install_post}                                           \
0aea10
%{__os_install_post}                                             \
0aea10
bin_path=%{buildroot}%{_bindir}                                  \
0aea10
lib_path=%{buildroot}%{_libdir}                                  \
0aea10
for app in %{apps_hmaccalc}; do                                  \
0aea10
  test -e "$bin_path"/$app || continue                           \
0aea10
  { %sha512hmac "$bin_path"/$app || exit 1; }                    \\\
0aea10
    | cut -f 1 -d ' ' >"$lib_path"/hmaccalc/$app.hmac            \
0aea10
done                                                             \
0aea10
for app in %{apps_fipscheck}; do                                 \
0aea10
  test -e "$bin_path"/$app || continue                           \
0aea10
  %fipshmac -d "$lib_path"/fipscheck "$bin_path"/$app || exit 1  \
0aea10
done                                                             \
0aea10
%{_bindir}/hardlink -cfv %{buildroot}%{_bindir}                  \
0aea10
%fipshmac -d "$lib_path"/fipscheck                               \\\
0aea10
  "$lib_path"/libkcapi.so.%{version} || exit 1                   \
0aea10
%{__ln_s} libkcapi.so.%{version}.hmac                            \\\
0aea10
  "$lib_path"/fipscheck/libkcapi.so.%{vmajor}.hmac               \
0aea10
%{nil}
0aea10
0aea10
Name:           libkcapi
0aea10
Version:        %{vmajor}.%{vminor}.%{vpatch}
0aea10
Release:        3%{?dist}
0aea10
Summary:        User space interface to the Linux Kernel Crypto API
0aea10
0aea10
License:        BSD or GPLv2
0aea10
URL:            https://www.chronox.de/%{name}.html
0aea10
Source0:        https://www.chronox.de/%{name}/%{name}-%{version}.tar.xz
0aea10
Source1:        https://www.chronox.de/%{name}/%{name}-%{version}.tar.xz.asc
0aea10
Source2:        sha512hmac-openssl.sh
0aea10
Source3:        fipshmac-openssl.sh
0aea10
0aea10
Patch1:         0001-Use-GCCs-__symver__-attribute.patch
0aea10
0aea10
BuildRequires:  bash
0aea10
BuildRequires:  coreutils
0aea10
BuildRequires:  gcc
0aea10
BuildRequires:  git-core
0aea10
BuildRequires:  hardlink
0aea10
BuildRequires:  kernel-headers >= %{min_kernel_ver}
0aea10
BuildRequires:  libtool
0aea10
BuildRequires:  make
0aea10
BuildRequires:  openssl
0aea10
BuildRequires:  perl-interpreter
0aea10
BuildRequires:  systemd
0aea10
BuildRequires:  xmlto
0aea10
%if %{with doc}
0aea10
BuildRequires:  docbook-utils-pdf
0aea10
%endif
0aea10
%if %{with clang_sa}
0aea10
BuildRequires:  clang
0aea10
%endif
0aea10
%if %{with cppcheck}
0aea10
BuildRequires:  cppcheck
0aea10
%endif
0aea10
0aea10
# For ownership of %%{_sysctldir}.
0aea10
Requires:       systemd
0aea10
0aea10
Obsoletes:      %{name}-replacements <= %{version}-%{release}
0aea10
0aea10
%description
0aea10
libkcapi allows user-space to access the Linux kernel crypto API.
0aea10
0aea10
This library uses the netlink interface and exports easy to use APIs
0aea10
so that a developer does not need to consider the low-level netlink
0aea10
interface handling.
0aea10
0aea10
The library does not implement any cipher algorithms.  All consumer
0aea10
requests are sent to the kernel for processing.  Results from the
0aea10
kernel crypto API are returned to the consumer via the library API.
0aea10
0aea10
The kernel interface and therefore this library can be used by
0aea10
unprivileged processes.
0aea10
0aea10
0aea10
%package        devel
0aea10
Summary:        Development files for the %{name} package
0aea10
Requires:       %{name}%{?_isa} == %{version}-%{release}
0aea10
0aea10
%description    devel
0aea10
Header files for applications that use %{name}.
0aea10
0aea10
0aea10
%if %{with doc}
0aea10
%package        doc
0aea10
Summary:        User documentation for the %{name} package
0aea10
BuildArch:      noarch
0aea10
# Depend on one of the base packages because they have the license files
0aea10
# We cannot just bundle them into doc because they might conflict with an
0aea10
# older or newer version of the base package.
0aea10
Requires:       %{name} == %{version}-%{release}
0aea10
0aea10
%description    doc
0aea10
User documentation for %{name}.
0aea10
%endif
0aea10
0aea10
0aea10
%if %{with replace_coreutils}
0aea10
%package        checksum
0aea10
Summary:        Drop-in replacement for *sum utils provided by the %{name} package
0aea10
Requires:       %{name}%{?_isa}    == %{version}-%{release}
0aea10
0aea10
Requires:       coreutils%{?_isa}  >= %{coreutils_evr}
0aea10
0aea10
Conflicts:      coreutils          < %{coreutils_evr}
0aea10
Conflicts:      coreutils-single
0aea10
0aea10
%description    checksum
0aea10
Provides drop-in replacements for sha*sum tools (from package
0aea10
coreutils) using %{name}.
0aea10
%endif
0aea10
0aea10
0aea10
%if %{with replace_fipscheck}
0aea10
%package        fipscheck
0aea10
Summary:        Drop-in replacements for fipscheck/fipshmac provided by the %{name} package
0aea10
Requires:       %{name}%{?_isa}   == %{version}-%{release}
0aea10
0aea10
Obsoletes:      fipscheck         <= %{fipscheck_evr}
0aea10
0aea10
Provides:       fipscheck         == %{fipscheck_evr}.1
0aea10
Provides:       fipscheck%{?_isa} == %{fipscheck_evr}.1
0aea10
0aea10
%description    fipscheck
0aea10
Provides drop-in replacements for fipscheck and fipshmac tools (from
0aea10
package fipscheck) using %{name}.
0aea10
%endif
0aea10
0aea10
0aea10
%if %{with replace_hmaccalc}
0aea10
%package        hmaccalc
0aea10
Summary:        Drop-in replacements for hmaccalc provided by the %{name} package
0aea10
Requires:       %{name}%{?_isa}   == %{version}-%{release}
0aea10
0aea10
Obsoletes:      hmaccalc          <= %{hmaccalc_evr}
0aea10
0aea10
Provides:       hmaccalc          == %{hmaccalc_evr}.1
0aea10
Provides:       hmaccalc%{?_isa}  == %{hmaccalc_evr}.1
0aea10
0aea10
%description    hmaccalc
0aea10
Provides drop-in replacements for sha*hmac tools (from package
0aea10
hmaccalc) using %{name}.
0aea10
%endif
0aea10
0aea10
0aea10
%package        static
0aea10
Summary:        Static library for -static linking with %{name}
0aea10
Requires:       %{name}-devel%{?_isa} == %{version}-%{release}
0aea10
0aea10
%description    static
0aea10
This package contains the %{name} static libraries for -static
0aea10
linking.  You don't need this, unless you link statically, which
0aea10
is highly discouraged.
0aea10
0aea10
0aea10
%package        tools
0aea10
Summary:        Utility applications for the %{name} package
0aea10
Requires:       %{name}%{?_isa} == %{version}-%{release}
0aea10
0aea10
%description    tools
0aea10
Utility applications that are provided with %{name}.  This includes
0aea10
tools to use message digests, symmetric ciphers and random number
0aea10
generators implemented in the Linux kernel from command line.
0aea10
0aea10
0aea10
%if %{with test_package}
0aea10
%package        tests
0aea10
Summary:        Testing scripts for the %{name} package
0aea10
Requires:       %{name}%{?_isa}       == %{version}-%{release}
0aea10
Requires:       %{name}-tools%{?_isa} == %{version}-%{release}
0aea10
%if %{with replace_hmaccalc}
0aea10
Requires:       %{name}-hmaccalc%{?_isa} == %{version}-%{release}
0aea10
%endif
0aea10
%if %{with replace_coreutils}
0aea10
Requires:       %{name}-checksum%{?_isa} == %{version}-%{release}
0aea10
%endif
0aea10
Requires:       coreutils
0aea10
Requires:       openssl
0aea10
Requires:       perl-interpreter
0aea10
0aea10
%description    tests
0aea10
Auxiliary scripts for testing %{name}.
0aea10
%endif
0aea10
0aea10
0aea10
%prep
0aea10
%autosetup -p 1 -S git
0aea10
0aea10
%if %{with_sysctl_tweak}
0aea10
%{__cat} << EOF > README.%{distroname_ext}
0aea10
This package increases the default limit of the ancillary buffer size
0aea10
per kernel socket defined in \`net.core.optmem_max\` to %{sysctl_optmem_max} bytes.
0aea10
0aea10
For this preset to become active it requires a reboot after the
0aea10
installation of this package.  You can also manually increase this
0aea10
limit by invocing \`sysctl net.core.optmem_max=%{sysctl_optmem_max}\` as the
0aea10
super-user, e.g. using \`su\` or \`sudo\` on the terminal.
0aea10
0aea10
This is done to provide consumers of the new Linux Kernel Crypto API
0aea10
User Space Interface a well sufficient and reasonable maximum limit
0aea10
by default, especially when using AIO with a larger amount of IOVECs.
0aea10
0aea10
For further information about the AF_ALG kernel socket and AIO, see
0aea10
the discussion at the kernel-crypto mailing-list:
0aea10
https://www.mail-archive.com/linux-crypto@vger.kernel.org/msg30417.html
0aea10
0aea10
See the instructions given in '%{_sysctldir}/50-default.conf',
0aea10
if you need or want to override the preset made by this package.
0aea10
EOF
0aea10
0aea10
%{__cat} << EOF > %{sysctl_prio}-%{name}-optmem_max.conf
0aea10
# See the 'README.%{distroname_ext}' file shipped in %%doc
0aea10
# with the %{name} package.
0aea10
#
0aea10
# See '%{_sysctldir}/50-default.conf',
0aea10
# if you need or want to override this preset.
0aea10
0aea10
# Increase the ancillary buffer size per socket.
0aea10
net.core.optmem_max = %{sysctl_optmem_max}
0aea10
EOF
0aea10
%endif
0aea10
0aea10
%{_bindir}/autoreconf -fiv
0aea10
0aea10
0aea10
%build
0aea10
%configure               \
0aea10
  --libdir=%{_libdir}  \
0aea10
  --disable-silent-rules \
0aea10
  --enable-kcapi-encapp  \
0aea10
  --enable-kcapi-dgstapp \
0aea10
  --enable-kcapi-hasher  \
0aea10
  --enable-kcapi-rngapp  \
0aea10
  --enable-kcapi-speed   \
0aea10
  --enable-kcapi-test    \
0aea10
  --enable-shared        \
0aea10
  --enable-static        \
0aea10
  --enable-sum-prefix=   \
0aea10
  --enable-sum-dir=%{_libdir} \
0aea10
  --with-pkgconfigdir=%{_libdir}/pkgconfig
0aea10
%if %{with doc}
0aea10
%make_build all doc
0aea10
%else
0aea10
%make_build all man
0aea10
%endif
0aea10
0aea10
0aea10
%install
0aea10
%make_install
0aea10
0aea10
# Install sysctl.d preset.
0aea10
%{__mkdir_p} %{buildroot}%{_sysctldir}
0aea10
%{__install} -Dpm 0644 -t %{buildroot}%{_sysctldir} \
0aea10
  %{sysctl_prio}-%{name}-optmem_max.conf
0aea10
0aea10
# Install into proper location for inclusion by %%doc.
0aea10
%{__mkdir_p} %{buildroot}%{_pkgdocdir}
0aea10
%{__install} -Dpm 0644 -t %{buildroot}%{_pkgdocdir} \
0aea10
%if %{with_sysctl_tweak}
0aea10
  README.%{distroname_ext}                          \
0aea10
%endif
0aea10
%if %{with doc}
0aea10
  doc/%{name}.p{df,s}                               \
0aea10
%endif
0aea10
  README.md CHANGES.md TODO
0aea10
0aea10
%if %{with doc}
0aea10
%{__cp} -pr lib/doc/html %{buildroot}%{_pkgdocdir}
0aea10
%endif
0aea10
0aea10
# Install replacement tools, if enabled.
0aea10
%if !%{with replace_coreutils}
0aea10
%{__rm} -f                            \
0aea10
  %{buildroot}%{_bindir}/md5sum       \
0aea10
  %{buildroot}%{_bindir}/sha*sum
0aea10
%endif
0aea10
0aea10
%if !%{with replace_fipscheck}
0aea10
%{__rm} -f %{buildroot}%{_bindir}/fips*
0aea10
%endif
0aea10
0aea10
%if !%{with replace_hmaccalc}
0aea10
%{__rm} -f %{buildroot}%{_bindir}/sha*hmac
0aea10
%endif
0aea10
0aea10
# We don't ship autocrap dumplings.
0aea10
%{_bindir}/find %{buildroot} -type f -name '*.la' -print -delete
0aea10
0aea10
# HMAC checksums are generated during __spec_install_post.
0aea10
%{_bindir}/find %{buildroot} -type f -name '*.hmac' -print -delete
0aea10
0aea10
# Remove 0-size files.
0aea10
%{_bindir}/find %{buildroot} -type f -size 0 -print -delete
0aea10
0aea10
%if %{with doc}
0aea10
# Make sure all docs have non-exec permissions, except for the dirs.
0aea10
%{_bindir}/find %{buildroot}%{_pkgdocdir} -type f -print | \
0aea10
  %{_bindir}/xargs %{__chmod} -c 0644
0aea10
%{_bindir}/find %{buildroot}%{_pkgdocdir} -type d -print | \
0aea10
  %{_bindir}/xargs %{__chmod} -c 0755
0aea10
%endif
0aea10
0aea10
# Possibly save some space by hardlinking.
0aea10
for d in %{_mandir} %{_pkgdocdir}; do
0aea10
  %{_bindir}/hardlink -cfv %{buildroot}$d
0aea10
done
0aea10
0aea10
0aea10
%check
0aea10
# Some basic sanity checks.
0aea10
%if %{with clang_sa}
0aea10
%make_build scan
0aea10
%endif
0aea10
%if %{with cppcheck}
0aea10
%make_build cppcheck
0aea10
%endif
0aea10
0aea10
%if %{with test}
0aea10
# On some arches `/proc/sys/net/core/optmem_max` is lower than 20480,
0aea10
# which is the lowest limit needed to run the testsuite.  If that limit
0aea10
# is not met, we do not run it.
0aea10
%if %{test_optmem_max} >= 20480
0aea10
# Skip the testsuite on old kernels.
0aea10
%if %{lua:print(rpm.vercmp(posix.uname('%r'), '5.1'));} >= 0
0aea10
# Real testsuite.
0aea10
pushd test
0aea10
%if %{with fuzz_test}
0aea10
ENABLE_FUZZ_TEST=1 \
0aea10
%endif
0aea10
NO_32BIT_TEST=1    \
0aea10
  ./test-invocation.sh
0aea10
popd
0aea10
%endif
0aea10
%endif
0aea10
%endif
0aea10
0aea10
0aea10
%ldconfig_scriptlets
0aea10
0aea10
0aea10
%files
0aea10
%doc %dir %{_pkgdocdir}
0aea10
%doc %{_pkgdocdir}/README.md
0aea10
%license COPYING*
0aea10
%{_libdir}/%{name}.so.%{vmajor}
0aea10
%{_libdir}/%{name}.so.%{version}
0aea10
%{_libdir}/fipscheck/%{name}.so.%{vmajor}.hmac
0aea10
%{_libdir}/fipscheck/%{name}.so.%{version}.hmac
0aea10
%if %{with_sysctl_tweak}
0aea10
%doc %{_pkgdocdir}/README.%{distroname_ext}
0aea10
%{_sysctldir}/%{sysctl_prio}-%{name}-optmem_max.conf
0aea10
%endif
0aea10
0aea10
0aea10
%files          devel
0aea10
%doc %{_pkgdocdir}/CHANGES.md
0aea10
%doc %{_pkgdocdir}/TODO
0aea10
%{_includedir}/kcapi.h
0aea10
%{_mandir}/man3/kcapi_*.3.*
0aea10
%{_libdir}/%{name}.so
0aea10
%{_libdir}/pkgconfig/%{name}.pc
0aea10
0aea10
0aea10
%if %{with doc}
0aea10
%files          doc
0aea10
%doc %{_pkgdocdir}/html
0aea10
%doc %{_pkgdocdir}/%{name}.pdf
0aea10
%doc %{_pkgdocdir}/%{name}.ps
0aea10
%endif
0aea10
0aea10
0aea10
%if %{with replace_coreutils}
0aea10
%files          checksum
0aea10
%{_bindir}/md5sum
0aea10
%{_bindir}/sha*sum
0aea10
%{_libdir}/fipscheck/md5sum.hmac
0aea10
%{_libdir}/fipscheck/sha*sum.hmac
0aea10
%endif
0aea10
0aea10
%if %{with replace_fipscheck}
0aea10
%files          fipscheck
0aea10
%{_bindir}/fips*
0aea10
%{_libdir}/fipscheck/fips*.hmac
0aea10
%endif
0aea10
0aea10
%if %{with replace_hmaccalc}
0aea10
%files          hmaccalc
0aea10
%{_bindir}/sha*hmac
0aea10
%{_libdir}/hmaccalc/sha*hmac.hmac
0aea10
%endif
0aea10
0aea10
0aea10
%files          static
0aea10
%{_libdir}/%{name}.a
0aea10
0aea10
0aea10
%files          tools
0aea10
%{_bindir}/kcapi*
0aea10
%{_mandir}/man1/kcapi*.1.*
0aea10
0aea10
0aea10
%if %{with test_package}
0aea10
%files          tests
0aea10
%{_libexecdir}/%{name}/*
0aea10
%endif
0aea10
0aea10
0aea10
%changelog
0aea10
* Mon Aug 09 2021 Mohan Boddu <mboddu@redhat.com> - 1.3.1-3
0aea10
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
0aea10
  Related: rhbz#1991688
0aea10
0aea10
* Thu Jul 15 2021 Simo Sorce <simo@redhat.com> - 1.3.1-2
0aea10
- Bring back usage of %{_libdir} instead of /%{_lib}
0aea10
- Resolves: rhbz#1982620
0aea10
0aea10
* Wed Jul 14 2021 Simo Sorce <simo@redhat.com> - 1.3.1-1
0aea10
- Update to new upstream release 1.3.1
0aea10
- This fixes ABI issues and incorporates previous patches
0aea10
0aea10
* Mon Jul 12 2021 Simo Sorce <simo@redhat.com> - 1.3.0-1
0aea10
- Update to new upstream release 1.3.0
0aea10
0aea10
* Tue Jun 22 2021 Mohan Boddu <mboddu@redhat.com> - 1.2.1-3
0aea10
- Rebuilt for RHEL 9 BETA for openssl 3.0
0aea10
  Related: rhbz#1971065
0aea10
0aea10
* Fri Apr 16 2021 Mohan Boddu <mboddu@redhat.com> - 1.2.1-2
0aea10
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
0aea10
0aea10
* Mon Mar 15 2021 Sahana Prasad <sahana@redhat.com> - 1.2.1-1
0aea10
- Update to upstream version 1.2.1
0aea10
- Remove patch fix MSG_MORE uasge as it is added upstream
0aea10
- Remove cppcheck dependency for rhel bz#1931518
0aea10
- Add a patch to fix fuzz tests
0aea10
0aea10
* Tue Jan 26 2021 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.0-4
0aea10
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
0aea10
0aea10
* Fri Aug 14 2020 Ondrej Mosnáček <omosnace@redhat.com> - 1.2.0-3
0aea10
- Require perl-interpreter instead of full perl
0aea10
- Backport fix for 5.9 kernels
0aea10
0aea10
* Tue Jul 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.0-2
0aea10
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
0aea10
0aea10
* Mon May 25 2020 Sahana Prasad <omosnace@redhat.com> - 1.2.0-1
0aea10
- Update to upstream version 1.2.0 tracked by BZ 1839592.
0aea10
- Enable kcapi-enc tests as libkcapi BZ 1826022 is fixed.
0aea10
- Remove 110-fipshmac-compat.patch as the changes are merged upstream.
0aea10
- Remove 100-workaround-cppcheck-bug.patch as the changes are merged upstream.
0aea10
0aea10
* Tue May 05 2020 Ondrej Mosnáček <omosnace@redhat.com> - 1.1.5-5
0aea10
- Fix the CI test failures
0aea10
- Enable building on old kernels
0aea10
- Avoid conflicts between different versions of packages
0aea10
0aea10
* Thu Apr 23 2020 Tomáš Mráz <tmraz@redhat.com> - 1.1.5-4
0aea10
- Add . prefix to files created by fipshmac if -d option is not specified
0aea10
0aea10
* Wed Apr 22 2020 Sahana Prasad <sahana@redhat.com> - 1.1.5-3
0aea10
- Disables kcapi-enc tests until the kernel bug bz 1826022 is fixed.
0aea10
- Produce also the fipscheck replacement package
0aea10
0aea10
* Wed Jan 29 2020 Fedora Release Engineering <releng@fedoraproject.org> - 1.1.5-2
0aea10
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
0aea10
0aea10
* Tue Aug 13 2019 Ondrej Mosnáček <omosnace@redhat.com> - 1.1.5-1
0aea10
- Update to upstream version 1.1.5
0aea10
0aea10
* Sat Jul 27 2019 Ondrej Mosnáček <omosnace@redhat.com> - 1.1.4-6
0aea10
- Backport patch to fix test failure on aarch64
0aea10
- Remove no longer needed ppc64 workaround
0aea10
0aea10
* Sat Jul 27 2019 Ondrej Mosnáček <omosnace@redhat.com> - 1.1.4-5
0aea10
- Backport patch to fix tests
0aea10
0aea10
* Thu Jul 25 2019 Ondrej Mosnáček <omosnace@redhat.com> - 1.1.4-4
0aea10
- Work around cppcheck issue
0aea10
- Enable gating
0aea10
0aea10
* Thu Jul 25 2019 Fedora Release Engineering <releng@fedoraproject.org> - 1.1.4-3
0aea10
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
0aea10
0aea10
* Mon May 27 2019 Ondrej Mosnáček <omosnace@redhat.com> - 1.1.4-2
0aea10
- Fix FTBFS: hardlink is now in bindir
0aea10
0aea10
* Sat Feb 02 2019 Ondrej Mosnáček <omosnace@redhat.com> - 1.1.4-1
0aea10
- Update to upstream version 1.1.4
0aea10
0aea10
* Fri Feb 01 2019 Ondrej Mosnáček <omosnace@redhat.com> - 1.1.3-3
0aea10
- Fix build with new GCC
0aea10
0aea10
* Fri Feb 01 2019 Fedora Release Engineering <releng@fedoraproject.org> - 1.1.3-2
0aea10
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
0aea10
0aea10
* Thu Aug 23 2018 Ondrej Mosnáček <omosnace@redhat.com> - 1.1.3-1
0aea10
- Update to upstream version 1.1.3
0aea10
0aea10
* Thu Aug 09 2018 Ondrej Mosnáček <omosnace@redhat.com> - 1.1.1-16
0aea10
- Add missing dependencies to the tests package
0aea10
- Update patch from upstream
0aea10
0aea10
* Thu Aug 09 2018 Ondrej Mosnáček <omosnace@redhat.com> - 1.1.1-15
0aea10
- Build and tests require perl
0aea10
0aea10
* Thu Aug 09 2018 Ondrej Mosnáček <omosnace@redhat.com> - 1.1.1-14
0aea10
- Add missing script to the 'tests' package
0aea10
0aea10
* Wed Aug 08 2018 Ondrej Mosnáček <omosnace@redhat.com> - 1.1.1-13
0aea10
- Add missing requires to the 'tests' subpackage
0aea10
0aea10
* Tue Aug 07 2018 Ondrej Mosnáček <omosnace@redhat.com> - 1.1.1-12
0aea10
- Produce a subpackage with test scripts
0aea10
- Build the 'tests' subpackage conditionally
0aea10
0aea10
* Wed Aug 01 2018 Ondrej Mosnáček <omosnace@redhat.com> - 1.1.1-11
0aea10
- Add patch to fix unwanted closing of FD 0
0aea10
0aea10
* Tue Jul 31 2018 Ondrej Mosnáček <omosnace@redhat.com> - 1.1.1-10
0aea10
- Remove the kernel headers workaround
0aea10
0aea10
* Fri Jul 27 2018 Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 1.1.1-9
0aea10
- Rebuild for new binutils
0aea10
0aea10
* Fri Jul 27 2018 Ondrej Mosnáček <omosnace@redhat.com> - 1.1.1-8
0aea10
- Add more Coverity fixes from upstream
0aea10
- Add patch to fix AEAD fuzz test for BE arches
0aea10
- Fixup specfile
0aea10
0aea10
* Mon Jul 23 2018 Ondrej Mosnáček <omosnace@redhat.com> - 1.1.1-7
0aea10
- Add various fixes from upstream
0aea10
- Drop the Requires on kernel package
0aea10
0aea10
* Mon Jul 16 2018 Ondrej Mosnáček <omosnace@redhat.com> - 1.1.1-6
0aea10
- Put .hmac files into a separate directory
0aea10
0aea10
* Fri Jul 13 2018 Fedora Release Engineering <releng@fedoraproject.org> - 1.1.1-5
0aea10
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
0aea10
0aea10
* Thu Jul 12 2018 Ondrej Mosnáček <omosnace@redhat.com> - 1.1.1-4
0aea10
- Add patch to work around FTBFS on rawhide
0aea10
0aea10
* Wed Jul 11 2018 Ondrej Mosnáček <omosnace@redhat.com> - 1.1.1-3
0aea10
- Fix off-by-one error in checkfile parsing
0aea10
0aea10
* Wed Jul 11 2018 Ondrej Mosnáček <omosnace@redhat.com> - 1.1.1-2
0aea10
- Fix command-line parsing in libkcapi-hmaccalc
0aea10
0aea10
* Mon Jun 18 2018 Ondrej Mosnáček <omosnace@redhat.com> - 1.1.1-1
0aea10
- Update to upstream version 1.1.1
0aea10
0aea10
* Wed May 09 2018 Ondrej Mosnáček <omosnace@redhat.com> - 1.1.0-5
0aea10
- Skip CLang static analysis in RHEL
0aea10
- Revert "Skip CLang static analysis in RHEL"
0aea10
- Use own sha512hmac and fipscheck
0aea10
0aea10
* Wed May 02 2018 Ondrej Mosnáček <omosnace@redhat.com> - 1.1.0-4
0aea10
- Fix description lines being too long
0aea10
0aea10
* Fri Apr 27 2018 Björn Esser <besser82@fedoraproject.org> - 1.1.0-3
0aea10
- Fix conditional for hmaccalc replacement
0aea10
0aea10
* Mon Apr 16 2018 Ondrej Mosnáček <omosnace@redhat.com> - 1.1.0-2
0aea10
- Enable hmaccalc replacements in Fedora 28+
0aea10
0aea10
* Thu Apr 12 2018 Ondrej Mosnáček <omosnace@redhat.com> - 1.1.0-1
0aea10
- Update to upstream version 1.1.0
0aea10
0aea10
* Sat Mar 31 2018 Björn Esser <besser82@fedoraproject.org> - 1.0.3-10
0aea10
- Replace single patches with a monolitic one from upstream
0aea10
- Obsolete replacements subpackage
0aea10
- Ignore failing tests on %%{power64} temporarily
0aea10
0aea10
* Thu Mar 08 2018 Ondrej Mosnáček <omosnace@redhat.com> - 1.0.3-9
0aea10
- Split up the replacements subpackage
0aea10
0aea10
* Mon Feb 26 2018 Björn Esser <besser82@fedoraproject.org> - 1.0.3-8
0aea10
- Increase optmem_max preset to 81920
0aea10
0aea10
* Mon Feb 26 2018 Björn Esser <besser82@fedoraproject.org> - 1.0.3-7
0aea10
- Obsoletes work by package name, not by provides (rhbz#1537225)
0aea10
0aea10
* Sun Feb 25 2018 Björn Esser <besser82@fedoraproject.org> - 1.0.3-6
0aea10
- Add patch to fix a copy-paste typo
0aea10
0aea10
* Sat Feb 17 2018 Björn Esser <besser82@fedoraproject.org> - 1.0.3-5
0aea10
- Add patch to fix build with -Werror
0aea10
0aea10
* Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org>
0aea10
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
0aea10
0aea10
* Sun Feb 04 2018 Björn Esser <besser82@fedoraproject.org> - 1.0.3-3
0aea10
- Switch to %%ldconfig_scriptlets
0aea10
0aea10
* Wed Jan 17 2018 Björn Esser <besser82@fedoraproject.org> - 1.0.3-2
0aea10
- Decrease optmem_max preset to 40960
0aea10
- Let the build fail, if the minimum kernel version cannot be met
0aea10
- Conditionalize the sysctl.d tweak on version of the kernel
0aea10
- Conditionalize the name of README.distro on the distro
0aea10
0aea10
* Tue Jan 16 2018 Björn Esser <besser82@fedoraproject.org> - 1.0.3-1
0aea10
- Initial import (rhbz#1533929)
0aea10
0aea10
* Tue Jan 16 2018 Björn Esser <besser82@fedoraproject.org> - 1.0.3-0.13
0aea10
- Increase optmem_max preset to 81920
0aea10
0aea10
* Tue Jan 16 2018 Björn Esser <besser82@fedoraproject.org> - 1.0.3-0.12
0aea10
- Add sysctl.d preset and README.fedora
0aea10
0aea10
* Mon Jan 15 2018 Björn Esser <besser82@fedoraproject.org> - 1.0.3-0.11
0aea10
- Make the contents of the -replacements package configurable
0aea10
0aea10
* Mon Jan 15 2018 Björn Esser <besser82@fedoraproject.org> - 1.0.3-0.10
0aea10
- Fix Obsoletes of the -replacements package
0aea10
0aea10
* Sun Jan 14 2018 Björn Esser <besser82@fedoraproject.org> - 1.0.3-0.9
0aea10
- Disable the -replacements package until we have a plan for it
0aea10
0aea10
* Sun Jan 14 2018 Björn Esser <besser82@fedoraproject.org> - 1.0.3-0.8
0aea10
- Move the kcapi-hasher binary to -replacements package, since it is
0aea10
  not of much use without the linked invocation names and saves the
0aea10
  extra Requires on the -tools package
0aea10
0aea10
* Sun Jan 14 2018 Björn Esser <besser82@fedoraproject.org> - 1.0.3-0.7
0aea10
- Fix internal Requires of sub-packages
0aea10
- Hardlink files in %%{_bindir}
0aea10
0aea10
* Sun Jan 14 2018 Björn Esser <besser82@fedoraproject.org> - 1.0.3-0.6
0aea10
- Add patches from upstream
0aea10
0aea10
* Sat Jan 13 2018 Björn Esser <besser82@fedoraproject.org> - 1.0.3-0.5
0aea10
- Add patches from upstream
0aea10
0aea10
* Sat Jan 13 2018 Björn Esser <besser82@fedoraproject.org> - 1.0.3-0.4
0aea10
- Asume the testsuite cannot be run, if the value of optmem_max cannot
0aea10
  be obtained
0aea10
0aea10
* Sat Jan 13 2018 Björn Esser <besser82@fedoraproject.org> - 1.0.3-0.3
0aea10
- Move libraries to /%%{_lib} instead of %%{_libdir}, which is useful
0aea10
  during boot when the library might be needed before a potentially
0aea10
  seperate /usr partition is mounted
0aea10
0aea10
* Sat Jan 13 2018 Björn Esser <besser82@fedoraproject.org> - 1.0.3-0.2
0aea10
- Asume optmem_max is at least 20480, if the real value cannot be obtained
0aea10
0aea10
* Fri Jan 12 2018 Björn Esser <besser82@fedoraproject.org> - 1.0.3-0.1
0aea10
- New upstream release
0aea10
0aea10
* Wed Jan 10 2018 Björn Esser <besser82@fedoraproject.org> - 1.0.2-0.1
0aea10
- Initial rpm release (rhbz#1533929)