COMP/CMSDIST/openssl.spec

### RPM external openssl 0.9.8e
Source: http://cmsrep.cern.ch/cmssw/openssl-sources/%n-fips-%realversion-usa.tar.bz2
Patch0: openssl-0.9.8e-rh-0.9.8e-12.el5_4.6
Patch1: openssl-x86-64-gcc420

%prep
%setup -n %n-fips-%{realversion}
%patch0 -p1
%patch1 -p1

%build
# Looks like rpmbuild passes its own sets of flags via the
# RPM_OPT_FLAGS environment variable and those flags include
# -m64 (probably since rpmbuild processor detection is not
# fooled by linux32). A quick fix is to just set the variable
# to "" but we should probably understand how rpm determines
# those flags and use them for our own good.
export RPM_OPT_FLAGS="-O2 -fPIC -g -pipe -Wall -Wa,--noexecstack -fno-strict-aliasing -Wp,-DOPENSSL_USE_NEW_FUNCTIONS -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -mtune=generic"

cfg_opts="no-idea no-mdc2 no-rc5 no-ec no-ecdh no-ecdsa shared fipscanisterbuild"

case %cmsplatf in
  osx*)
    perl -p -i -e 's|-compatibility_version.*|-compatibility_version \${SHLIB_MAJOR}.\${SHLIB_MINOR} \\|' Makefile.ssl 
    cfg_args="-DOPENSSL_USE_NEW_FUNCTIONS"
   ;;
  *)
    cfg_args="--with-krb5-flavor=MIT enable-krb5 fipscanisterbuild"
   ;;
esac

./config --prefix=%i $cfg_args enable-seed enable-tlsext enable-rfc3779 no-asm \
                     no-idea no-mdc2 no-rc5 no-ec no-ecdh no-ecdsa shared

make
%install
export RPM_OPT_FLAGS="-O2 -fPIC -g -pipe -Wall -Wa,--noexecstack -fno-strict-aliasing -Wp,-DOPENSSL_USE_NEW_FUNCTIONS -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -mtune=generic"
make install
rm -rf %{i}/lib/pkgconfig
# We remove archive libraries because otherwise we need to propagate everywhere
# their dependency on kerberos.
rm -rf %{i}/lib/*.a

# MacOSX is case insensitive and the man page structure has case sensitive logic
case %cmsplatf in
    osx* ) 
        rm -rf %{i}/ssl/man
    ;;
esac
perl -p -i -e "s|^#!.*perl|#!/usr/bin/env perl|" %{i}/ssl/misc/CA.pl %{i}/ssl/misc/der_chop %{i}/bin/c_rehash

#	User	Rev	Content
1	elmer	1.21	### RPM external openssl 0.9.8e
2			Source: http://cmsrep.cern.ch/cmssw/openssl-sources/%n-fips-%realversion-usa.tar.bz2
3			Patch0: openssl-0.9.8e-rh-0.9.8e-12.el5_4.6
4	lat	1.25	Patch1: openssl-x86-64-gcc420
5	elmer	1.9
6			%prep
7	elmer	1.21	%setup -n %n-fips-%{realversion}
8	elmer	1.16	%patch0 -p1
9	eulisse	1.26	%patch1 -p1
10	argiro	1.1
11			%build
12	eulisse	1.22	# Looks like rpmbuild passes its own sets of flags via the
13			# RPM_OPT_FLAGS environment variable and those flags include
14			# -m64 (probably since rpmbuild processor detection is not
15			# fooled by linux32). A quick fix is to just set the variable
16			# to "" but we should probably understand how rpm determines
17			# those flags and use them for our own good.
18	eulisse	1.23	export RPM_OPT_FLAGS="-O2 -fPIC -g -pipe -Wall -Wa,--noexecstack -fno-strict-aliasing -Wp,-DOPENSSL_USE_NEW_FUNCTIONS -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -mtune=generic"
19	eulisse	1.22
20	eulisse	1.30	cfg_opts="no-idea no-mdc2 no-rc5 no-ec no-ecdh no-ecdsa shared fipscanisterbuild"
21
22	eulisse	1.22	case %cmsplatf in
23			osx*)
24	eulisse	1.24	perl -p -i -e 's\|-compatibility_version.*\|-compatibility_version \${SHLIB_MAJOR}.\${SHLIB_MINOR} \\\|' Makefile.ssl
25			cfg_args="-DOPENSSL_USE_NEW_FUNCTIONS"
26			;;
27	eulisse	1.30	*)
28	eulisse	1.32	cfg_args="--with-krb5-flavor=MIT enable-krb5 fipscanisterbuild"
29	eulisse	1.30	;;
30	elmer	1.5	esac
31
32	eulisse	1.32	./config --prefix=%i $cfg_args enable-seed enable-tlsext enable-rfc3779 no-asm \
33	eulisse	1.30	no-idea no-mdc2 no-rc5 no-ec no-ecdh no-ecdsa shared
34	eulisse	1.22
35	argiro	1.1	make
36	eulisse	1.3	%install
37	eulisse	1.23	export RPM_OPT_FLAGS="-O2 -fPIC -g -pipe -Wall -Wa,--noexecstack -fno-strict-aliasing -Wp,-DOPENSSL_USE_NEW_FUNCTIONS -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -mtune=generic"
38	eulisse	1.3	make install
39	eulisse	1.20	rm -rf %{i}/lib/pkgconfig
40	eulisse	1.33	# We remove archive libraries because otherwise we need to propagate everywhere
41			# their dependency on kerberos.
42			rm -rf %{i}/lib/*.a
43	eulisse	1.20
44	eulisse	1.14	# MacOSX is case insensitive and the man page structure has case sensitive logic
45			case %cmsplatf in
46			osx* )
47			rm -rf %{i}/ssl/man
48			;;
49			esac
50	eulisse	1.3	perl -p -i -e "s\|^#!.*perl\|#!/usr/bin/env perl\|" %{i}/ssl/misc/CA.pl %{i}/ssl/misc/der_chop %{i}/bin/c_rehash
51	elmer	1.28