Hello community, here is the log from the commit of package python3 for openSUSE:Factory checked in at 2015-07-05 17:54:04 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python3 (Old) and /work/SRC/openSUSE:Factory/.python3.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python3" Changes: -------- --- /work/SRC/openSUSE:Factory/python3/python3-base.changes 2015-05-23 13:05:32.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.python3.new/python3-base.changes 2015-07-05 17:54:06.000000000 +0200 @@ -1,0 +2,8 @@ +Wed Jun 24 06:54:30 UTC 2015 - [email protected] + +- dh2048.pem: added generated 2048 dh parameter set to fix + ssl test (bsc#935856) +- python-fix-short-dh.patch: replace the 512 bits dh parameter set + by 2048 bits to fix build with new openssl 1.0.2c (bsc#935856) + +------------------------------------------------------------------- --- /work/SRC/openSUSE:Factory/python3/python3-doc.changes 2015-05-16 07:13:27.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.python3.new/python3-doc.changes 2015-07-05 17:54:06.000000000 +0200 @@ -1,0 +2,13 @@ +Wed Jul 1 07:07:26 UTC 2015 - [email protected] + +- Fix source list for previous change (add dh2048.pem). + +------------------------------------------------------------------- +Wed Jun 24 06:54:30 UTC 2015 - [email protected] + +- dh2048.pem: added generated 2048 dh parameter set to fix + ssl test (bsc#935856) +- python-fix-short-dh.patch: replace the 512 bits dh parameter set + by 2048 bits to fix build with new openssl 1.0.2c (bsc#935856) + +------------------------------------------------------------------- --- /work/SRC/openSUSE:Factory/python3/python3.changes 2015-05-16 07:13:27.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.python3.new/python3.changes 2015-07-05 17:54:06.000000000 +0200 @@ -1,0 +2,8 @@ +Wed Jun 24 06:54:30 UTC 2015 - [email protected] + +- dh2048.pem: added generated 2048 dh parameter set to fix + ssl test (bsc#935856) +- python-fix-short-dh.patch: replace the 512 bits dh parameter set + by 2048 bits to fix build with new openssl 1.0.2c (bsc#935856) + +------------------------------------------------------------------- New: ---- dh2048.pem python-fix-short-dh.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python3-base.spec ++++++ --- /var/tmp/diff_new_pack.yFrCaI/_old 2015-07-05 17:54:08.000000000 +0200 +++ /var/tmp/diff_new_pack.yFrCaI/_new 2015-07-05 17:54:08.000000000 +0200 @@ -60,6 +60,7 @@ Source8: macros.python3.py Source9: import_failed.py Source10: import_failed.map +Source11: dh2048.pem # The following files are not used in the build. # They are listed here to work around missing functionality in rpmbuild, @@ -94,6 +95,8 @@ Patch18: python-3.4.3-test-conditional-ssl.patch # PATCH-FIX-UPSTREAM Fix argument passing in libffi for aarch64 Patch19: python-2.7-libffi-aarch64.patch +# PATCH-FIX-OPENSUSE python-fix-short-dh.patch replace too short dh parameters by 2048bit one +Patch20: python-fix-short-dh.patch ### COMMON-PATCH-END ### BuildRoot: %{_tmppath}/%{name}-%{version}-build @@ -220,6 +223,9 @@ %patch17 -p1 %patch18 -p1 %patch19 -p1 +%patch20 -p1 + +cp %{SOURCE11} Lib/test/ # drop Autoconf version requirement sed -i 's/^AC_PREREQ/dnl AC_PREREQ/' configure.ac ++++++ python3-doc.spec ++++++ --- /var/tmp/diff_new_pack.yFrCaI/_old 2015-07-05 17:54:08.000000000 +0200 +++ /var/tmp/diff_new_pack.yFrCaI/_new 2015-07-05 17:54:08.000000000 +0200 @@ -29,6 +29,7 @@ %define tarversion %{version} %define tarname Python-%{tarversion} Source0: http://www.python.org/ftp/python/%{tarversion}/%{tarname}.tar.xz +Source11: dh2048.pem BuildRequires: python-Sphinx # for consistency: @@ -58,6 +59,8 @@ Patch18: python-3.4.3-test-conditional-ssl.patch # PATCH-FIX-UPSTREAM Fix argument passing in libffi for aarch64 Patch19: python-2.7-libffi-aarch64.patch +# PATCH-FIX-OPENSUSE python-fix-short-dh.patch replace too short dh parameters by 2048bit one +Patch20: python-fix-short-dh.patch ### COMMON-PATCH-END ### ### COMMON-DEF-BEGIN ### @@ -110,6 +113,9 @@ %patch17 -p1 %patch18 -p1 %patch19 -p1 +%patch20 -p1 + +cp %{SOURCE11} Lib/test/ # drop Autoconf version requirement sed -i 's/^AC_PREREQ/dnl AC_PREREQ/' configure.ac ++++++ python3.spec ++++++ --- /var/tmp/diff_new_pack.yFrCaI/_old 2015-07-05 17:54:08.000000000 +0200 +++ /var/tmp/diff_new_pack.yFrCaI/_new 2015-07-05 17:54:08.000000000 +0200 @@ -56,6 +56,7 @@ Source1: baselibs.conf Source2: python3-rpmlintrc #Source11: testfiles.tar.bz2 +Source11: dh2048.pem # issues with copyrighted Unicode testing files # do not add patches here, please edit python3-base.spec instead @@ -89,6 +90,8 @@ Patch18: python-3.4.3-test-conditional-ssl.patch # PATCH-FIX-UPSTREAM Fix argument passing in libffi for aarch64 Patch19: python-2.7-libffi-aarch64.patch +# PATCH-FIX-OPENSUSE python-fix-short-dh.patch replace too short dh parameters by 2048bit one +Patch20: python-fix-short-dh.patch ### COMMON-PATCH-END ### BuildRoot: %{_tmppath}/%{name}-%{version}-build @@ -192,6 +195,9 @@ %patch17 -p1 %patch18 -p1 %patch19 -p1 +%patch20 -p1 + +cp %{SOURCE11} Lib/test/ # drop Autoconf version requirement sed -i 's/^AC_PREREQ/dnl AC_PREREQ/' configure.ac ++++++ dh2048.pem ++++++ -----BEGIN DH PARAMETERS----- MIIBCAKCAQEAvgoporLxS5+nAprLPns6bckLhcuwFx+DE5ZJyYI3rrlGtVTHYv7h WwZxTBZGkLO5dQYncbYt+x8EANtSz4Z7VaCcLJpvGcxhD+sbTfe++Qoe4VZqB6AW LjV7+XbeClITS6xoYXq3lz0gUbbvtMirkf5CcmAXrvR1CnotKiTes27H+v4RQCxF ftTU2rHp8RCHruFFfQhQ0o+URyaKjj/8+UOLfpCl7x8KeJ86a9BnILZIc3OS7Sna rlOWMnLbZzUk2BY1GMzWDXxbzFPeLz2f24cA3g1uOjD+czqrqjWteJZtEA5qHRb1 ZP6K4MKuQTqheSlbB73QnkqfQ+LMizVF0wIBAg== -----END DH PARAMETERS----- ++++++ python-fix-short-dh.patch ++++++ Index: Python-3.4.3/Lib/test/test_ssl.py =================================================================== --- Python-3.4.3.orig/Lib/test/test_ssl.py +++ Python-3.4.3/Lib/test/test_ssl.py @@ -65,7 +65,7 @@ BADKEY = data_file("badkey.pem") NOKIACERT = data_file("nokia.pem") NULLBYTECERT = data_file("nullbytecert.pem") -DHFILE = data_file("dh512.pem") +DHFILE = data_file("dh2048.pem") BYTES_DHFILE = os.fsencode(DHFILE)
