COMP/CMSDIST/openssl.spec

### RPM external openssl 0.9.8e__1.0.1
%define linver 0.9.8e
%define osxver 1.0.1
Source0: http://www.openssl.org/source/openssl-%osxver.tar.gz
Source1: http://cmsrep.cern.ch/cmssw/openssl-sources/%n-fips-%linver-usa.tar.bz2
Patch0: openssl-0.9.8e-rh-0.9.8e-12.el5_4.6
Patch1: openssl-x86-64-gcc420

%prep
%ifos darwin
%setup -b 0 -n %n-%osxver
%else
%setup -b 1 -n %n-fips-%linver
%patch0 -p1
%patch1 -p1
%endif

%build
# Looks like rpmbuild passes its own sets of flags via the
# RPM_OPT_FLAGS environment variable and those flags include
# -m64 (probably since rpmbuild processor detection is not
# fooled by linux32). A quick fix is to just set the variable
# to "" but we should probably understand how rpm determines
# those flags and use them for our own good.
export RPM_OPT_FLAGS="-O2 -fPIC -g -pipe -Wall -Wa,--noexecstack -fno-strict-aliasing -Wp,-DOPENSSL_USE_NEW_FUNCTIONS -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -mtune=generic"

cfg_opts="no-idea no-mdc2 no-rc5 no-ec no-ecdh no-ecdsa shared fipscanisterbuild"

case %cmsplatf in
  osx*)
    export KERNEL_BITS=64 # used by config to decide 64-bit build
    cfg_args="-DOPENSSL_USE_NEW_FUNCTIONS"
   ;;
  *)
    cfg_args="--with-krb5-flavor=MIT enable-krb5 fipscanisterbuild"
   ;;
esac

./config --prefix=%i $cfg_args enable-seed enable-tlsext enable-rfc3779 no-asm \
                     no-idea no-mdc2 no-rc5 no-ec no-ecdh no-ecdsa shared

make
%install
export RPM_OPT_FLAGS="-O2 -fPIC -g -pipe -Wall -Wa,--noexecstack -fno-strict-aliasing -Wp,-DOPENSSL_USE_NEW_FUNCTIONS -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -mtune=generic"

make install

rm -rf %{i}/lib/pkgconfig
# We remove archive libraries because otherwise we need to propagate everywhere
# their dependency on kerberos.
rm -rf %{i}/lib/*.a

# MacOSX is case insensitive and the man page structure has case sensitive logic
case %cmsplatf in
  osx* ) 
    rm -rf %{i}/ssl/man
    ;;
esac
perl -p -i -e "s|^#!.*perl|#!/usr/bin/env perl|" %{i}/ssl/misc/CA.pl %{i}/ssl/misc/der_chop %{i}/bin/c_rehash
#	User	Rev	Content
1	lat	1.36	### RPM external openssl 0.9.8e__1.0.1
2			%define linver 0.9.8e
3			%define osxver 1.0.1
4			Source0: http://www.openssl.org/source/openssl-%osxver.tar.gz
5			Source1: http://cmsrep.cern.ch/cmssw/openssl-sources/%n-fips-%linver-usa.tar.bz2
6	elmer	1.21	Patch0: openssl-0.9.8e-rh-0.9.8e-12.el5_4.6
7	lat	1.25	Patch1: openssl-x86-64-gcc420
8	elmer	1.9
9			%prep
10	lat	1.36	%ifos darwin
11			%setup -b 0 -n %n-%osxver
12			%else
13			%setup -b 1 -n %n-fips-%linver
14	elmer	1.16	%patch0 -p1
15	eulisse	1.26	%patch1 -p1
16	lat	1.36	%endif
17	argiro	1.1
18			%build
19	eulisse	1.22	# Looks like rpmbuild passes its own sets of flags via the
20			# RPM_OPT_FLAGS environment variable and those flags include
21			# -m64 (probably since rpmbuild processor detection is not
22			# fooled by linux32). A quick fix is to just set the variable
23			# to "" but we should probably understand how rpm determines
24			# those flags and use them for our own good.
25	eulisse	1.23	export RPM_OPT_FLAGS="-O2 -fPIC -g -pipe -Wall -Wa,--noexecstack -fno-strict-aliasing -Wp,-DOPENSSL_USE_NEW_FUNCTIONS -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -mtune=generic"
26	eulisse	1.22
27	eulisse	1.30	cfg_opts="no-idea no-mdc2 no-rc5 no-ec no-ecdh no-ecdsa shared fipscanisterbuild"
28
29	eulisse	1.22	case %cmsplatf in
30			osx*)
31	lat	1.36	export KERNEL_BITS=64 # used by config to decide 64-bit build
32	eulisse	1.24	cfg_args="-DOPENSSL_USE_NEW_FUNCTIONS"
33			;;
34	eulisse	1.30	*)
35	eulisse	1.32	cfg_args="--with-krb5-flavor=MIT enable-krb5 fipscanisterbuild"
36	eulisse	1.30	;;
37	elmer	1.5	esac
38
39	eulisse	1.32	./config --prefix=%i $cfg_args enable-seed enable-tlsext enable-rfc3779 no-asm \
40	eulisse	1.30	no-idea no-mdc2 no-rc5 no-ec no-ecdh no-ecdsa shared
41	eulisse	1.22
42	argiro	1.1	make
43	eulisse	1.3	%install
44	eulisse	1.23	export RPM_OPT_FLAGS="-O2 -fPIC -g -pipe -Wall -Wa,--noexecstack -fno-strict-aliasing -Wp,-DOPENSSL_USE_NEW_FUNCTIONS -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -mtune=generic"
45	davidlt	1.34
46	davidlt	1.35	make install
47	davidlt	1.34
48	eulisse	1.20	rm -rf %{i}/lib/pkgconfig
49	eulisse	1.33	# We remove archive libraries because otherwise we need to propagate everywhere
50			# their dependency on kerberos.
51			rm -rf %{i}/lib/*.a
52	eulisse	1.20
53	eulisse	1.14	# MacOSX is case insensitive and the man page structure has case sensitive logic
54			case %cmsplatf in
55	lat	1.36	osx* )
56			rm -rf %{i}/ssl/man
57	eulisse	1.14	;;
58			esac
59	eulisse	1.3	perl -p -i -e "s\|^#!.*perl\|#!/usr/bin/env perl\|" %{i}/ssl/misc/CA.pl %{i}/ssl/misc/der_chop %{i}/bin/c_rehash