Summary: A dynamic OpenSSL engine for IBMCA
Name: openssl-ibmca
Version: 2.0.0
Release: 2%{?dist}
License: ASL 2.0
Group: System Environment/Libraries
URL: https://github.com/opencryptoki
Source0: https://github.com/opencryptoki/%{name}/archive/v%{version}.tar.gz#/%{name}-%{version}.tar.gz
# https://bugzilla.redhat.com/show_bug.cgi?id=584765
Patch0: %{name}-2.0.0-libica-soname.patch
# https://github.com/opencryptoki/openssl-ibmca/pull/44
Patch1: %{name}-2.0.0-linking.patch
# https://bugzilla.redhat.com/show_bug.cgi?id=1655620
Patch2: %{name}-2.0.0-rsa.patch
Requires: libica >= 3.3.0
BuildRequires: libica-devel >= 3.3.0
BuildRequires: automake libtool
ExclusiveArch: s390 s390x

%description
A dynamic OpenSSL engine for IBMCA crypto hardware on IBM zSeries machines.


%prep
%setup -q
%patch0 -p1 -b .libica-soname
%patch1 -p1 -b .linking
%patch2 -p1 -b .rsa

sh ./bootstrap.sh


%build
%configure
make %{?_smp_mflags}


%install
make install DESTDIR=$RPM_BUILD_ROOT

rm -f $RPM_BUILD_ROOT%{_libdir}/ibmca.la
mkdir -p $RPM_BUILD_ROOT%{_libdir}/openssl/engines
mv $RPM_BUILD_ROOT%{_libdir}/ibmca.so $RPM_BUILD_ROOT%{_libdir}/openssl/engines

# /etc/pki/tls/openssl.cnf in RHEL <= 7.5 with ibmca enabled refers to libibmca.so
# create symlink for compatibility with openssl-ibmca < 1.4.1
pushd $RPM_BUILD_ROOT%{_libdir}/openssl/engines
ln -sf ibmca.so libibmca.so
popd

pushd src
sed -e 's|/usr/local/lib|%{_libdir}/openssl/engines|' openssl.cnf.sample > openssl.cnf.sample.%{_arch}
popd


%files
%doc ChangeLog README.md src/openssl.cnf.sample.%{_arch}
%{_libdir}/openssl/engines/ibmca.so
%{_libdir}/openssl/engines/libibmca.so
%{_mandir}/man5/ibmca.5*


%changelog
* Tue Mar 05 2019 Dan Horák <dhorak[at]redhat.com> - 2.0.0-2
- Fix doing rsa-me, altough rsa-crt would be possible
- Resolves: #1655620

* Tue Jul 10 2018 Dan Horák <dhorak@redhat.com> - 2.0.0-1
- rebased to 2.0.0
- Resolves: #1519395

* Thu Jun 21 2018 Dan Horák <dhorak@redhat.com> - 1.4.0-2
- fix dlclose logic
- Resolves: #1585235

* Tue Sep 19 2017 Dan Horák <dhorak@redhat.com> - 1.4.0-1
- update to 1.4.0
- Resolves: #1456516

* Fri Mar 31 2017 Dan Horák <dhorak@redhat.com> - 1.3.0-2
- add fix for SHA512 EVP digest struct
- Related: #1274385

* Tue Feb 14 2017 Dan Horák <dhorak@redhat.com> - 1.3.0-1
- rebased to 1.3.0 (#1274385)
- Resolves: #1274385

* Wed Mar 26 2014 Dan Horák <dan[at]danny.cz - 1.2.0-10
- set signature method flag (#1075474)
- Resolves: #1075474

* Fri Mar 14 2014 Dan Horák <dan[at]danny.cz - 1.2.0-9
- fix multilib conflict in sample config file (#1076423)
- Resolves: #1076423

* Wed Mar 12 2014 Karsten Hopp <karsten@redhat.com> 1.2.0-8
- Fixed message digest length definition in sha256 template
- Resolves: #1074976

* Fri Jan 24 2014 Daniel Mach <dmach@redhat.com> - 1.2.0-7
- Mass rebuild 2014-01-24

* Fri Dec 27 2013 Daniel Mach <dmach@redhat.com> - 1.2.0-6
- Mass rebuild 2013-12-27

* Thu Feb 14 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild

* Fri Jul 20 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

* Fri Apr 20 2012 Dan Horák <dan[at]danny.cz - 1.2.0-3
- make the libica dependecies versioned
- fix segfaults in OFB mode (#749638)

* Fri Jan 13 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild

* Thu Jul 07 2011 Dan Horák <dan[at]danny.cz - 1.2.0-1
- update to 1.2.0

* Tue Feb 08 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.1-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild

* Thu Apr 22 2010 Dan Horák <dhorak@redhat.com> - 1.1-2
- fixed opening of the libica library (#584765)
- Resolves: #584765

* Thu Mar  4 2010 Dan Horák <dhorak@redhat.com> - 1.1-1
- rebased to 1.1 instead of patching
- Resolves: #568847

* Thu Feb 18 2010 Dan Horák <dhorak@redhat.com> - 1.0.0-5
- added patch with port to libica 2.x API
- Related: #543948

* Wed Feb 10 2010 Dan Horák <dhorak@redhat.com> - 1.0.0-4
- added explicit dependency on libica, because it's dlopened
- Related: #543948

* Tue Jan 12 2010 Dan Horák <dhorak@redhat.com> - 1.0.0-3
- rebuild
- Related: #543948

* Sat Jul 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild

* Thu Jul  9 2009 Dan Horak <dan[at]danny.cz - 1.0.0-1
- update to final 1.0.0
- spec file cleanup

* Thu Jun 21 2007 Phil Knirsch <pknirsch@redhat.com> - 1.0.0rc2-1.el5.4
- Fixed several issues with failure of using ibmca engine (#227644)

* Tue Dec 12 2006 Phil Knirsch <pknirsch@redhat.com> - 1.0.0rc2-1.el5.3
- Added missing symlinks for libs (#215735)
- Added samle config file (#215735)

* Thu Nov 23 2006 Phil Knirsch <pknirsch@redhat.com> - 1.0.0rc2-1.el5.2
- Necessary fix so openssl finds the module properly (#215735)

* Thu May 11 2006 Phil Knirsch <pknirsch@redhat.com> - 1.0.0rc2
- Initial package.