openssl: Update to 1.0.2c

This commit is contained in:
Alexpux
2015-06-16 15:37:08 +03:00
parent c88f323dfb
commit 54e77851ae
2 changed files with 8 additions and 29 deletions

View File

@@ -2,7 +2,7 @@
_realname=openssl
pkgname=("${MINGW_PACKAGE_PREFIX}-${_realname}")
_ver=1.0.2a
_ver=1.0.2c
# use a pacman compatible version scheme
pkgver=${_ver/[a-z]/.${_ver//[0-9.]/}}
pkgrel=1
@@ -20,36 +20,32 @@ source=(http://www.openssl.org/source/${_realname}-${_ver}.tar.gz{,.asc}
'openssl-1.0.2a-parallel-build.patch'
'openssl-1.0.1-x32.patch'
'openssl-0.9.6-x509.patch'
'openssl-1.0.2-s_client-verify.patch'
'openssl-1.0.1i-relocation.patch')
md5sums=('a06c547dac9044161a477211049f60ef'
md5sums=('8c8d81a9ae7005276e486702edbcd4b6'
'SKIP'
'9e0abad8dd17079815d9e92345c5adcb'
'835a78dbe9c8690dbdd9190aaf5432e7'
'1d363d5e19c6eb4144b49f9daadefd5f'
'87610b76871d53d4b6f07374000dae87'
'cae4eea6db48a254653fd1903cfabd15'
'c7856c88da72348a76a666d42cba0f46'
'd8ed0865f35216a5e420e37d7a4e2515')
validpgpkeys=('8657ABB260F056B1E5190839D9C4D26D0E604491')
prepare() {
cd $startdir/
# Clean up old sources so re-patching doesn't fail.
[[ -d $srcdir/${_realname}-${_ver} ]] && rm -rf $srcdir/${_realname}-${_ver}
tar -xzvf ${_realname}-${_ver}.tar.gz -C $srcdir
cd $srcdir/${_realname}-${_ver}
[[ -d $srcdir/${_realname}-${_ver} ]] && rm -rf ${srcdir}/${_realname}-${_ver}
tar -xzvf ${_realname}-${_ver}.tar.gz -C ${srcdir}
cd ${srcdir}/${_realname}-${_ver}
patch -p1 -i ${srcdir}/openssl-1.0.0a-ldflags.patch
patch -p1 -i ${srcdir}/openssl-1.0.0d-windres.patch
patch -p1 -i ${srcdir}/openssl-1.0.2a-parallel-build.patch
patch -p1 -i ${srcdir}/openssl-1.0.2-s_client-verify.patch
patch -p1 -i ${srcdir}/openssl-1.0.1-x32.patch
patch -p1 -i ${srcdir}/openssl-0.9.6-x509.patch
patch -p1 -i ${srcdir}/openssl-1.0.1i-relocation.patch
# No support for out-of-source builds
mkdir -p $srcdir/build-${CARCH}
mkdir -p ${srcdir}/build-${CARCH}
cp -a ${srcdir}/${_realname}-${_ver}/* ${srcdir}/build-${CARCH}
# Use mingw cflags instead of hardcoded ones
@@ -65,7 +61,7 @@ build()
if $(echo ${CARCH} | grep -q x86_64); then
_mingw=mingw64
fi
cd "$srcdir/build-${CARCH}"
cd "${srcdir}/build-${CARCH}"
export MSYS2_ARG_CONV_EXCL="--prefix="
./Configure \
--prefix=${MINGW_PREFIX} \
@@ -82,7 +78,7 @@ build()
}
package() {
cd "$srcdir/build-${CARCH}"
cd "${srcdir}/build-${CARCH}"
make -j1 INSTALL_PREFIX="$pkgdir" MANDIR=${MINGW_PREFIX}/share/man MANSUFFIX=ssl install
install -D -m644 LICENSE ${pkgdir}${MINGW_PREFIX}/share/licenses/${_realname}/LICENSE

View File

@@ -1,17 +0,0 @@
https://bugs.gentoo.org/472584
http://rt.openssl.org/Ticket/Display.html?id=2387&user=guest&pass=guest
fix verification handling in s_client. when loading paths, make sure
we properly fallback to setting the default paths.
--- openssl-1.0.2/apps/s_client.c
+++ openssl-1.0.2/apps/s_client.c
@@ -1337,7 +1337,7 @@
SSL_CTX_set_verify(ctx, verify, verify_callback);
- if ((!SSL_CTX_load_verify_locations(ctx, CAfile, CApath)) ||
+ if ((!SSL_CTX_load_verify_locations(ctx, CAfile, CApath)) &&
(!SSL_CTX_set_default_verify_paths(ctx))) {
/*
* BIO_printf(bio_err,"error setting default verify locations\n");