openssl-ibmca-2.4.0-150500.6.3.1 < > , B@ e3p9| Q~`e rcCQ'! 9./fzZ
U3 8qE[%dw{GcL,"h/2O58ng)XjP<¬АWh-4 (j&qUJ]YG UH4_{&eseU~( .-b?jL+{\UEr͠YTCyfZnt{4x] *z( )$שz]rY1 dY > B 5 ? 5 d # D * 5 K Z D t
, \ 0 X " ( P 8 X 9 : > / @ / F / G / H 0 I 0H X 0T Y 0\ \ 0 ] 0 ^ 1u b 2@ c 2 d 3q e 3v f 3y l 3{ u 3 v 3 w 4 x 5 y 58 z 5\ 5l 5p 5v 5 C openssl-ibmca 2.4.0 150500.6.3.1 The IBMCA OpenSSL dynamic engine This package contains a shared object OpenSSL dynamic engine which interfaces
to libica, a library enabling the IBM s390/x CPACF crypto instructions. e3s390zl33 SUSE Linux Enterprise 15 SUSE LLC Apache-2.0 https://www.suse.com/ Hardware/Other https://github.com/opencryptoki/openssl-ibmca linux s390x #Original fix for bsc#942839 was to update on first install
#For bsc#966139 update if openssl_def not found
cp -p /usr/share/openssl-ibmca/openssl-ibmca.sectiondef.txt /etc/ssl/engines.d/openssl-ibmca.cnf
cp -p /usr/share/openssl-ibmca/openssl-ibmca.enginedef.cnf /etc/ssl/engdef.d/openssl-ibmca.cnf if [ $1 -eq 0 ]; then # last uninstall
rm -f /etc/ssl/engines.d/openssl-ibmca.cnf
rm -f /etc/ssl/engdef.d/openssl-ibmca.cnf
fi \ $ A큤큤A큤A큤 e3e3d%Rd%Re3e3e3d%Re3e3e3b2'gfa80aa75daf7cea9b3f356c70ad70a6ffb8a76ab60807038a0cc9dc8400869e5 a7e6bd9768ef8bd82eeb6e6815489fc7f4a33022057d705345ef7ae28a17e597 b15ca0996b5cce68d6d3623ef6f1afb97d619a8c4d33aae01f6b773c99cef4aa 794b4db510f65e162942d3bf0a6243ee6aba4b14ae06fb1b0496aaf4ba3d7d9b a8669bbb087f7890880dbe25c6c16206c55307a4165de1f0903a9c3066589c98 f943b5c7aee57ec8d33f5baabf638230e0d5c3c4404eb21ecfc2ba93567257a9 985506f2b0ae896e2bd3287acd7be6688baaaed82083162d3f430a9f020b574d f9d333b132fb7a84e4781038e9881e62638dc45b3cc37a3b5af9a6f03846c0c7 dbd9c040f032510a5a2af3f4f0088794f79b19f28be2e0d557d081f763b78512 root root root root root root root root root root root root root root root root root root root root root root root root openssl-ibmca-2.4.0-150500.6.3.1.src.rpm openssl-ibmca openssl-ibmca(s390-64) @ @ @ @ @ @ @ @ @
/bin/sh /bin/sh libc.so.6()(64bit) libc.so.6(GLIBC_2.2)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) libcrypto.so.1.1()(64bit) libcrypto.so.1.1(OPENSSL_1_1_0)(64bit) libcrypto.so.1.1(OPENSSL_1_1_1e)(64bit) libdl.so.2()(64bit) libdl.so.2(GLIBC_2.2)(64bit) libica4 openssl rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 4.0.0 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 d@d7dS@dP@dJcdGdA)@d-bd c< @b0aD@_a@]w@]fl]@[1[_[@[-Y@Y@X@Ww@W@V@V@V/g@V/g@T9T~@otto.hollmann@suse.com pmonreal@suse.com otto.hollmann@suse.com nikolay.gueorguiev@suse.com nikolay.gueorguiev@suse.com nikolay.gueorguiev@suse.com nikolay.gueorguiev@suse.com nikolay.gueorguiev@suse.com nikolay.gueorguiev@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com mpost@suse.com meissner@suse.com mpluskal@suse.com mpost@suse.com jjolly@suse.com jjolly@suse.com jjolly@suse.com p.drouand@gmail.com meissner@suse.com - Adjust configure and Makefile to require libica-openssl3 when
building wiht openssl3 flavor. [bsc#1207472]
* Add openssl3-rename-libica-files.patch - Adjust dlopen() for the new ibmca-openssl3.so for the multibuild
flavor. This allows to install in parallel a version compiled
against openssl 1.1.1 and another with openssl 3.0. [bsc#1207472] - Add multibuild flavor to provide library compiled against openssl-3
[bsc#1207472] - Updated the .spec file
* uses a flag openssl3 (1 or 0) to include or not the openssl3 libraries - Updated the .spec file as follow:
* BuildRequires: libica-devel >= 4.0.0
* BuildRequires: libica-tools >= 4.0.0 - Added dependency on libica4 (bsc#1209038)
* BuildRequires and Requires statements in .spec file for libica4 - Applies a patch (bsc#1210359)
* openssl-ibmca-engine-noregister.patch
- Updated the '#dynamic_path' line, as it was before, with the comment '#'. - Upgraded openssl-ibmca to version 2.4.0 (bsc#1210059)
* openssl-ibmca 2.4.0
- Provider: Adjustments for OpenSSL versions 3.1 and 3.2
- Provider: Support RSA blinding
- Provider: Constant-time fixes for RSA PKCS#1 v1.5 and OAEP padding
- Provider: Support "implicit rejection" option for RSA PKCS#1 v1.5 padding
- Provider: Adjustments in OpenSSL config generator and example configs
- Engine: EC: Cache ICA key in EC_KEY object (performance improvement)
- Engine: Enable RSA blinding - Updated .spec file removed '#' from the line containing
'sed -e 's/^dynamic_path/#dynamic_path/' (bsc#1209038)
- Added in %files
* /usr/lib64/engines-3/ibmca-provider.la
* /usr/lib64/engines-3/ibmca-provider.so - Upgraded to version 2.3.1 (jsc#PED-597)
* openssl-ibmca 2.3.1
- Adjustments for libica 4.1.0
* openssl-ibmca 2.3.0
- First version including the provider
- Fix for engine build without OpenSSL 3.0 sources
* openssl-ibmca 2.2.3
- Fix PKEY segfault with OpenSSL 3.0
* openssl-ibmca 2.2.2
- Fix tests with OpenSSL 3.0
- Build against libica 4.0
- Removed a Requires for libica from the specfile.
- Removed the obsolete baselibs.conf file - Completely revamped the postinstall scriptlet so that it doesn't
need to know or care about how many lines are in either
/etc/ssl/openssl.cnf, or the sample file at
/usr/share/doc/packages/openssl-ibmca/openssl.cnf.sample
We're now using the ".include" directive for the openssl.cnf
file, and only modifying that file the minimum necessary to
implement the change. (bsc#1004463) - Upgraded to version 2.2.1 (jsc#SLE-18333)
* openssl-ibmca 2.2.1
Bug fixes
* openssl-ibmca 2.2.0
Implement fallbacks based on OpenSSL
Disable software fallbacks from libica
Allow to specify default library (libica vs. libica-cex) to use
Provide "libica" engine ctrl to switch library at load time
Update README.md
Remove libica link dependency
Generate sample configuration files from system configuration
Restructure registration global data
* openssl-ibmca 2.1.3
Bug fix
* openssl-ibmca 2.1.2
Bug fixes
- Modified spec file to
* Define a global variable enginesdir the same was as IBM does
instead of _ENGINE_DIR as we had been doing.
* Implemented %make_build macro according to spec-cleaner
* Changed the package description to match IBM's.
* Removed the redundant "autoreconf --force --install" - Upgrade to version 2.1.1 (jsc#SLE-13709)
* Bug fixes - Upgrade to version 2.1.0 (jsc#SLE-7852, jsc#SLE-7882)
Add MSA9 CPACF support for X25519, X448, Ed25519 and Ed448 - Upgraded to version 2.0.3 (jsc#SLE-6123, jsc#SLE-6424)
* openssl-ibmca 2.0.3
Add MSA9 CPACF support for ECDSA sign/verify
- Dropped obsolete openssl-ibmca-sles15sp1-Move-ERR_load-unload-to-bind_helper-resp-destroy-fun.patch
- Changed the ExclusiveArch directive to include s390x only.
- The code in e_ibmca.c does a dlopen for libica.so.3, instead of
linking against the shared library. As a result, if the package
containing libica.so.3 isn't installed, problems occur. Added
a "Requires: libica3" to the spec file to fix this. (bsc#1142286)
- Made a couple of changes to the spec file based on the output
from spec-cleaner. - Added openssl-ibmca-sles15sp1-Move-ERR_load-unload-to-bind_helper-resp-destroy-fun.patch
An Apache HTTP Server was set up with mod_ssl and the openssl
ibmca engine using libica and a CEX6A card. Whenever a worker
process is cleaned up a segmentation fault occurs.
(bsc#1138517) - Upgraded to version 2.0.2 (Fate#325688)
* openssl-ibmca 2.0.2
Fix doing rsa-me, altough rsa-crt would be possible. - Upgraded to version 2.0.1 (Fate#325688)
* openssl-ibmca 2.0.1
Dont fail when a libica symbol cannot be resolved.
- Made multiple changes to the spec file based on spec-cleaner output. - Upgraded to version 2.0.0 (Fate#325688)
* openssl-ibmca 2.0.0
Add ECC support.
Add check and distcheck make-targets.
Project cleanup, code was broken into multiple files and coding style cleanup.
Improvements to compat macros for openssl.
Don't disable libica sw fallbacks.
Fix dlclose logic.
* openssl-ibmca 1.4.1
Fix structure size for aes-256-ecb/cbc/cfb/ofb
Update man page
Switch to ibmca.so filename to allow standalone use
Switch off Libica fallback mode if available
Make sure ibmca_init only runs once
Provide simple macro for DEBUG_PRINTF possibility
Cleanup and slight rework of function set_supported_meths
- Did some cleanup to the spec file, based on spec-cleanup.
- Removed the following obsolete patches:
* openssl-ibmca-sles15-Switch-to-ibmca.so-filename-to-allow-a-standalone-us.patch
* openssl-ibmca-sles15-Fix-lib-name-in-test-code.patch
* openssl-ibmca-sles15-Update-lib-name-in-documentation.patch - Added the following patches for bsc#1097463
* openssl-ibmca-sles15-Switch-to-ibmca.so-filename-to-allow-a-standalone-us.patch
* openssl-ibmca-sles15-Fix-lib-name-in-test-code.patch
* openssl-ibmca-sles15-Update-lib-name-in-documentation.patch - Upgraded to version 1.4.0
* Re-license to Apache License v2.0
* Fix aes_gcm initialization.
* Update man page.
* Add macros for OpenSSL 0.9.8 compat.
* Remove AC_FUNC_MALLOC from configure.ac
* Add compat macro for OpenSSL 1.0.1e-fips.
* Setting 'foreign' strictness for automake.
* Add AES-GCM support.
* Rework EVP_aes macros.
* Remove dependency of old local OpenSSL headers.
* Fix engine initialization to set function pointers only once.
* Remove blank COPYING and NEWS files.
* Remove INSTALL and move its content to README.md
* Update README.md file to make use of markdown.
* Rename README file to README.md to use markdown
* Add CONTRIBUTING guidelines.
* Adding coding style documentation.
* Enable EVP_MD_FLAG_FIPS flag for SHA-*.
* Initialize rsa_keygen in RSA_METHOD for openssl < 1.1.0
* Fix SHA512 EVP digest struct to use
EVP_MD_FLAG_PKEY_METHOD_SIGNATURE when using OpenSSL 1.0
* Fix wrong parenthesis
* convert libica loading to dlopen() and friends
* Add support to DSO on new API of OpenSSL-1.1.0
- Removed obsolete openssl-ibmca-fix-sha512-evp-digest-to-use-evp_md_flag_pkey_method_signature.patch
- Added BuildRequires for autoconf, automake, and libtool.
- Updated BuildRequires for libica-devel to be >= 3.1.1 - Now that the openSSL engines directory is versioned:
* Modified the spec file to query the libcrypto package
for which directory to install the engine into.
* Removed openssl-ibmca-fix-enginepath.patch. Replaced it
with a sed command so that it will provide the correct
versioned engines directory
- Removed openssl-ibmca-configure.patch. It doesn't seem to
be needed any longer. - Added openssl-ibmca-fix-sha512-evp-digest-to-use-evp_md_flag_pkey_method_signature.patch (bsc#1032113)
- Added libica-tools to the BuildRequires due to repackaging of libica.
- Renamed BuildRequires from libica2-devel to libica-devel for the
same reason.
- Tweaked a comment to get rid of an rpmlint warning message. - fixed ssl configuration merging (bsc#1004463)
- openssl-ibmca-fix-enginepath.patch: fix the engine path - Use macro for configure (fate#319941)
- Use url for source
- Enable parallel building
- Cleanup spec file with spec-cleaner - Upgraded to version 1.3.0 (fate#319941)
- Updated openssl-ibmca-configure.patch to apply cleanly
- Removed obsolete patches
- openssl-ibmca-README.patch
- openssl-ibmca-sha256-digest-length.patch
- openssl-pkey.patch
- openssl-des-ede.patch
- Did some spec file cleanup. - Fixed %post script to update library path (the only dynamic part
of the ibmca configuration) every time the package is installed.
(bsc#966139) - Updated AUTHORS, INSTALL, and README (bsc#942839)
- %post and %postun added to properly update openssl.cnf (bsc#942839) - Updated to used libica2 == v2.4.2 for SLE12-SP1 (bsc#951138) - Remove dependency on fillup anf insserv; the package provides
neither sysconfig file nor sysvinit script
- Remove depreciated AUTHORS section
- Use %configure macro
- Add openssl-ibmca-configure.patch - the openssl engines moved to /%_lib/engines bnc#905480 /bin/sh /bin/sh s390zl33 1697902273
2.4.0-150500.6.3.1 2.4.0-150500.6.3.1 ibmca.so openssl-ibmca ChangeLog README.md ibmca-engine-opensslconfig openssl.cnf.sample openssl-ibmca LICENSE ibmca.5.gz openssl-ibmca openssl-ibmca.enginedef.cnf openssl-ibmca.sectiondef.txt /usr/lib64/engines-1.1/ /usr/share/doc/packages/ /usr/share/doc/packages/openssl-ibmca/ /usr/share/licenses/ /usr/share/licenses/openssl-ibmca/ /usr/share/man/man5/ /usr/share/ /usr/share/openssl-ibmca/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:31233/SUSE_SLE-15-SP5_Update/beb46e53caf9e7fad4b3e487a1cfc3f9-openssl-ibmca.SUSE_SLE-15-SP5_Update drpm xz 5 s390x-suse-linux ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=fecb3f1f875a3a4d9d41b35599965ea24b74dd64, stripped directory ASCII text Perl script text executable troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) R
R R R R R R R R m>ޑ & utf-8 7ee86ebd5fc0da7e70bd0af4b51e53cb7efc45a4f18de2cf3c5853c62224e9ec ? 7zXZ
! t/ ] "k% .pBE9K|كe
,<6%M*T_;٨H( \B~c}# t1n1IKl}M:ѻq2l| flhez}XZnlARM:R@x(Da{S8`W$wf6~ ")" \I(jă2<1zϡru#DQL ;Ix~@-uЀO.EҬnTi_u$07I;Pd0(Ҩ@
ǧaPDӉ:M{h
SxS)Gw| ǂ٤e_2R?NH褟Y6_# |rU'W}|g J\'yT?3Rd9`!!c C;YHO nƝ9r*/B̨6?E0"y ^`1I;UixLLt̜ޕagw&f&Z}2aC2~ZVA,>CYRmo@jծA|DeN @A6aX: @˗nG3%hCrC7/OK"Q0;USuaҡ
D b)M5J_kj|Q?/ F{hyUPDJbL5J[nӗ
ox!Y{һ r aJ"Pw=Q$E)_|*QGݥ4z$M7SYҚhYߖKcDwcC/ ֩K|Kڼ@E;:5F뮻O'8SТ=CB ?}g?=EƯ]=*' a>Cө/E|'mXɌAZVv&wD;G7>afӚqj
!)=84`y{<9ɴ! 0ИQ`a:DY9 N271hP% ֝+.(b?F[ InQ1[hԦ-"/?NtIG (4q&SiK-ouy"hLAs1Su+=;~Cr"b>o5=jh`ƂY V?& !*M,
N!_XC
vtAv lM 7$A层r&t酏{f>$Q$ 9 i
YZ