openssl-ibmca-2.4.1-7.2 RPM for s390x

From OpenSuSE Ports Tumbleweed for s390x

This package contains a shared object OpenSSL dynamic engine which interfaces
to libica, a library enabling the IBM s390/x CPACF crypto instructions.

Provides

• openssl-ibmca
• openssl-ibmca(s390-64)

Requires

• /bin/sh
• /bin/sh
• ld64.so.1()(64bit)
• ld64.so.1(GLIBC_2.3)(64bit)
• libc.so.6()(64bit)
• libc.so.6(GLIBC_2.17)(64bit)
• libc.so.6(GLIBC_2.2)(64bit)
• libc.so.6(GLIBC_2.3.4)(64bit)
• libc.so.6(GLIBC_2.30)(64bit)
• libc.so.6(GLIBC_2.34)(64bit)
• libc.so.6(GLIBC_2.4)(64bit)
• libcrypto.so.3()(64bit)
• libcrypto.so.3(OPENSSL_3.0.0)(64bit)
• libica-cex.so.4()(64bit)
• libica-cex.so.4(LIBICA_3.0.0)(64bit)
• libica-cex.so.4(LIBICA_3.0.0_FIPS)(64bit)
• libica-cex.so.4(LIBICA_3.3.0)(64bit)
• libica-cex.so.4(LIBICA_4.0.2)(64bit)
• libica4 >= 4.0.0
• libopenssl3
• rpmlib(CompressedFileNames) <= 3.0.4-1
• rpmlib(FileDigests) <= 4.6.0-1
• rpmlib(PayloadFilesHavePrefix) <= 4.0-1
• rpmlib(PayloadIsZstd) <= 5.4.18-1

License

Apache-2.0

Changelog

* Wed Oct 30 2024 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com>
  - Adapted the openssl-ibmca package for the openssl-1_1 removal(bsc#1232570)
  - Removed obsolete patch
    * openssl1-rename-libica-files.patch
* Tue Oct 29 2024 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com>
  - Applied patches(jsc#PED-10292)
    * openssl-ibmca-01-engine-Enable-external-AES-GCM-IV-when-libica-is-in-FIPS-mode.patch
    * openssl-ibmca-02-test-provider-Do-not-link-against-libica-use-dlopen-instead.patch
    * openssl-ibmca-03-test-provider-Explicitly-initialize-OpenSSL-after-setting-env-vars.patch
    * openssl-ibmca-04-engine-Fix-compile-error.patch
* Tue Jul 16 2024 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com>
  - Amended the .spec file
    * Replaced hard-coded '/usr/share' with %{_datadir}
* Mon Jul 15 2024 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com>
  - Amended the .spec file (bsc#1227537)
    * 'rpm.install.excludedocs = yes' in zypp.conf excludes the /usr/share/doc/..
    * Added a check, if there is is /usr/share/doc file to be editted.
* Wed Apr 17 2024 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com>
  - Amended the .spec file
  - Changed the package names
    +-------------+---------------------------------+--------------------------+
    |  Flavor     | Package name                    | Note                     |
    +-------------+---------------------------------+--------------------------+
    |  ''         | openssl-ibmca                   | Both engine and provider |
    |  openssl1_1 | openssl1_1-ibmca                | openssl1 flavor          |
    |  engine     | openssl-ibmca-engine            | Only engine              |
    |  provider   | openssl-ibmca-provider          | Only provider            |
    +-------------+---------------------------------+--------------------------+
* Wed Apr 17 2024 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com>
  - Applied a patch for openssl1_1 (bsc#1221627)
    * openssl1-rename-libica-files.patch
* Tue Apr 09 2024 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com>
  - Re-implemented flavors (openssl3, engine, provider) (bsc#1221627)
    +------------+---------------------------------+--------------------------+
    |  Flavor    | Package name                    | Note                     |
    +------------+---------------------------------+--------------------------+
    |  ''        | openssl-ibmca                   | openssl1 flavor          |
    |  engine    | openssl3-ibmca-engine           | Only engine              |
    |  provider  | openssl3-ibmca-provider         | Only provider            |
    |  openssl3  | openssl3-ibmca                  | Both engine and provider |
    +------------+---------------------------------+--------------------------+
  - Changing/editing 'dynamic_path' after the installation on the target system
    * From /usr/lib64/ossl-modules to /usr/lib64/engines-3 in
      /usr/share/doc/packages/openssl3-ibmca/ibmca-engine-opensslconfig
      for openssl3 flavor
* Thu Apr 04 2024 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com>
  - Amended the .spec file (bsc#1221627)
    * Removed the flavors
    * Removed 'muiltibuild' environment
    * Removed the 'provider' logic
* Mon Mar 18 2024 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com>
  - Updated the .spec file (bsc#1218933, bsc#1221627)
    * Amended the .spec file to use modulesdir variable
  - Implemented _multibuild environment (openssl1, engine, provider)
  - Added a flag and logic for provider in the .spec file
    * When provider is set to 1, it 'configures' the provider
    * When provider is set to 0, it 'configures' the engine
* Fri Oct 13 2023 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com>
  - Removed an obsolete patch (implemented in the version 2.4.1)
    * openssl-ibmca-engine-noregister.patch
* Fri Oct 06 2023 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com>
  - Upgrade to version 2.4.1 (jsc#PED-5422)
    * Provider: Change the default log directory to /tmp
    * Bug fixes
* Mon May 22 2023 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com>
  - Updated the .spec file, amended to use libica4 instead of libica
    * Requires:  libica4 >= 4
* Tue May 02 2023 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com>
  - Updated the .spec file
    * uses a flag openssl3 (1 or 0) to include or not the openssl3 libraries
* Tue Apr 25 2023 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com>
  - Updated the .spec file as follow:
    * BuildRequires:  libica-devel >= 4.0.0
    * BuildRequires:  libica-tools >= 4.0.0
* Mon Apr 24 2023 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com>
  - Added dependency on libica4 (bsc#1209038)
    * BuildRequires and Requires statements in .spec file for libica4
* Wed Apr 19 2023 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com>
  - Applies a patch (bsc#1210359)
    * openssl-ibmca-engine-noregister.patch
  - Updated the '#dynamic_path' line, as it was before, with the comment '#'.
* Thu Apr 06 2023 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com>
  - Upgraded openssl-ibmca to version 2.4.0 (bsc#1210059)
    * openssl-ibmca 2.4.0
    - Provider: Adjustments for OpenSSL versions 3.1 and 3.2
    - Provider: Support RSA blinding
    - Provider: Constant-time fixes for RSA PKCS#1 v1.5 and OAEP padding
    - Provider: Support "implicit rejection" option for RSA PKCS#1 v1.5 padding
    - Provider: Adjustments in OpenSSL config generator and example configs
    - Engine: EC: Cache ICA key in EC_KEY object (performance improvement)
    - Engine: Enable RSA blinding
* Tue Mar 14 2023 Nikolay Gueorguiev <nikolay.gueorguiev@suse.com>
  - Updated .spec file removed '#' from the line containing
    'sed -e 's/^dynamic_path/#dynamic_path/' (bsc#1209038)
  - Added in %files
    * /usr/lib64/engines-3/ibmca-provider.la
    * /usr/lib64/engines-3/ibmca-provider.so
* Tue Oct 04 2022 Mark Post <mpost@suse.com>
  - Upgraded to version 2.3.1 (jsc#PED-597)
    * openssl-ibmca 2.3.1
    - Adjustments for libica 4.1.0
    * openssl-ibmca 2.3.0
    - First version including the provider
    - Fix for engine build without OpenSSL 3.0 sources
    * openssl-ibmca 2.2.3
    - Fix PKEY segfault with OpenSSL 3.0
    * openssl-ibmca 2.2.2
    - Fix tests with OpenSSL 3.0
    - Build against libica 4.0
  - Removed a Requires for libica from the specfile.
  - Removed the obsolete baselibs.conf file
* Tue Mar 15 2022 Mark Post <mpost@suse.com>
  - Completely revamped the postinstall scriptlet so that it doesn't
    need to know or care about how many lines are in either
    /etc/ssl/openssl.cnf, or the sample file at
    /usr/share/doc/packages/openssl-ibmca/openssl.cnf.sample
    We're now using the ".include" directive for the openssl.cnf
    file, and only modifying that file the minimum necessary to
    implement the change. (bsc#1004463)
* Fri Sep 17 2021 Mark Post <mpost@suse.com>
  - Upgraded to version 2.2.1 (jsc#SLE-18333)
    * openssl-ibmca 2.2.1
      Bug fixes
    * openssl-ibmca 2.2.0
      Implement fallbacks based on OpenSSL
      Disable software fallbacks from libica
      Allow to specify default library (libica vs. libica-cex) to use
      Provide "libica" engine ctrl to switch library at load time
      Update README.md
      Remove libica link dependency
      Generate sample configuration files from system configuration
      Restructure registration global data
    * openssl-ibmca 2.1.3
      Bug fix
    * openssl-ibmca 2.1.2
      Bug fixes
  - Modified spec file to
    * Define a global variable enginesdir the same was as IBM does
      instead of _ENGINE_DIR as we had been doing.
    * Implemented %make_build macro according to spec-cleaner
    * Changed the package description to match IBM's.
    * Removed the redundant "autoreconf --force --install"

Files

/usr/lib64/engines-3/ibmca.so
/usr/lib64/ossl-modules/ibmca-provider.so
/usr/share/doc/packages/openssl-ibmca
/usr/share/doc/packages/openssl-ibmca/ChangeLog
/usr/share/doc/packages/openssl-ibmca/README.md
/usr/share/doc/packages/openssl-ibmca/ibmca-engine-opensslconfig
/usr/share/doc/packages/openssl-ibmca/ibmca-provider-opensslconfig
/usr/share/doc/packages/openssl-ibmca/openssl.cnf.sample
/usr/share/licenses/openssl-ibmca
/usr/share/licenses/openssl-ibmca/LICENSE
/usr/share/man/man5/ibmca-provider.5.gz
/usr/share/man/man5/ibmca.5.gz
/usr/share/openssl-ibmca
/usr/share/openssl-ibmca/openssl-ibmca.enginedef.cnf
/usr/share/openssl-ibmca/openssl-ibmca.sectiondef.txt

Generated by rpm2html 1.8.1

Fabrice Bellet, Sat Jan 4 23:54:17 2025