Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package openssl-ibmca for openSUSE:Factory checked in at 2025-04-23 15:19:05 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/openssl-ibmca (Old) and /work/SRC/openSUSE:Factory/.openssl-ibmca.new.30101 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "openssl-ibmca" Wed Apr 23 15:19:05 2025 rev:58 rq:1272097 version:2.5.0 Changes: -------- --- /work/SRC/openSUSE:Factory/openssl-ibmca/openssl-ibmca.changes 2025-02-20 16:38:06.664349678 +0100 +++ /work/SRC/openSUSE:Factory/.openssl-ibmca.new.30101/openssl-ibmca.changes 2025-04-23 15:19:32.346611503 +0200 @@ -1,0 +2,20 @@ +Wed Apr 23 08:33:06 UTC 2025 - Nikolay Gueorguiev <nikolay.gueorgu...@suse.com> + +- Upgrade openssl-ibmca to version 2.5.0 + * Provider: Add support for OSSL_PKEY_PARAM_RSA_DERIVE_FROM_PQ on import + * Provider: Add support for SignMessage and VerifyMessage API for ECDSA and RSA + * Provider: Allow the DHKEM-IKM option for EC keygen, but use fallback provider + * Provider: Allow ECDSA deterministic signatures, but use fallback + * Engine: Enable external AES-GCM IV when libica is in FIPS mode + * Bug fixes +- Removed obsolete patches + * openssl-ibmca-01-engine-Enable-external-AES-GCM-IV-when-libica-is-in-FIPS-mode.patch + * openssl-ibmca-02-test-provider-Do-not-link-against-libica-use-dlopen-instead.patch + * openssl-ibmca-03-test-provider-Explicitly-initialize-OpenSSL-after-setting-env-vars.patch + * openssl-ibmca-04-engine-Fix-compile-error.patch + * openssl-ibmca-05-provider-Fix-segfault-with-openssl-list-key-managers.patch + * openssl-ibmca-06-Provider-Fix-segfault-with-openssl-list-signature-algorithms-verbose.patch + * openssl-ibmca-07-engine-Fix-Do-not-report-errors-if-libica-does-not-support-EC.patch + * openssl-ibmca-08-Fix-compiler-error-for-undefined-ERR_pop_to_mark.patch + +------------------------------------------------------------------- Old: ---- openssl-ibmca-01-engine-Enable-external-AES-GCM-IV-when-libica-is-in-FIPS-mode.patch openssl-ibmca-02-test-provider-Do-not-link-against-libica-use-dlopen-instead.patch openssl-ibmca-03-test-provider-Explicitly-initialize-OpenSSL-after-setting-env-vars.patch openssl-ibmca-04-engine-Fix-compile-error.patch openssl-ibmca-05-provider-Fix-segfault-with-openssl-list-key-managers.patch openssl-ibmca-06-Provider-Fix-segfault-with-openssl-list-signature-algorithms-verbose.patch openssl-ibmca-07-engine-Fix-Do-not-report-errors-if-libica-does-not-support-EC.patch openssl-ibmca-08-Fix-compiler-error-for-undefined-ERR_pop_to_mark.patch openssl-ibmca-2.4.1.tar.gz New: ---- openssl-ibmca-2.5.0.tar.gz BETA DEBUG BEGIN: Old:- Removed obsolete patches * openssl-ibmca-01-engine-Enable-external-AES-GCM-IV-when-libica-is-in-FIPS-mode.patch * openssl-ibmca-02-test-provider-Do-not-link-against-libica-use-dlopen-instead.patch Old: * openssl-ibmca-01-engine-Enable-external-AES-GCM-IV-when-libica-is-in-FIPS-mode.patch * openssl-ibmca-02-test-provider-Do-not-link-against-libica-use-dlopen-instead.patch * openssl-ibmca-03-test-provider-Explicitly-initialize-OpenSSL-after-setting-env-vars.patch Old: * openssl-ibmca-02-test-provider-Do-not-link-against-libica-use-dlopen-instead.patch * openssl-ibmca-03-test-provider-Explicitly-initialize-OpenSSL-after-setting-env-vars.patch * openssl-ibmca-04-engine-Fix-compile-error.patch Old: * openssl-ibmca-03-test-provider-Explicitly-initialize-OpenSSL-after-setting-env-vars.patch * openssl-ibmca-04-engine-Fix-compile-error.patch * openssl-ibmca-05-provider-Fix-segfault-with-openssl-list-key-managers.patch Old: * openssl-ibmca-04-engine-Fix-compile-error.patch * openssl-ibmca-05-provider-Fix-segfault-with-openssl-list-key-managers.patch * openssl-ibmca-06-Provider-Fix-segfault-with-openssl-list-signature-algorithms-verbose.patch Old: * openssl-ibmca-05-provider-Fix-segfault-with-openssl-list-key-managers.patch * openssl-ibmca-06-Provider-Fix-segfault-with-openssl-list-signature-algorithms-verbose.patch * openssl-ibmca-07-engine-Fix-Do-not-report-errors-if-libica-does-not-support-EC.patch Old: * openssl-ibmca-06-Provider-Fix-segfault-with-openssl-list-signature-algorithms-verbose.patch * openssl-ibmca-07-engine-Fix-Do-not-report-errors-if-libica-does-not-support-EC.patch * openssl-ibmca-08-Fix-compiler-error-for-undefined-ERR_pop_to_mark.patch Old: * openssl-ibmca-07-engine-Fix-Do-not-report-errors-if-libica-does-not-support-EC.patch * openssl-ibmca-08-Fix-compiler-error-for-undefined-ERR_pop_to_mark.patch BETA DEBUG END: ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ openssl-ibmca.spec ++++++ --- /var/tmp/diff_new_pack.Hp3zCy/_old 2025-04-23 15:19:32.918635126 +0200 +++ /var/tmp/diff_new_pack.Hp3zCy/_new 2025-04-23 15:19:32.918635126 +0200 @@ -36,7 +36,7 @@ Name: openssl-ibmca-provider %endif -Version: 2.4.1 +Version: 2.5.0 Release: 0 Summary: The IBMCA OpenSSL dynamic engine License: Apache-2.0 @@ -60,14 +60,6 @@ ExclusiveArch: s390x ### -Patch10: openssl-ibmca-01-engine-Enable-external-AES-GCM-IV-when-libica-is-in-FIPS-mode.patch -Patch11: openssl-ibmca-02-test-provider-Do-not-link-against-libica-use-dlopen-instead.patch -Patch12: openssl-ibmca-03-test-provider-Explicitly-initialize-OpenSSL-after-setting-env-vars.patch -Patch13: openssl-ibmca-04-engine-Fix-compile-error.patch -Patch14: openssl-ibmca-05-provider-Fix-segfault-with-openssl-list-key-managers.patch -Patch15: openssl-ibmca-06-Provider-Fix-segfault-with-openssl-list-signature-algorithms-verbose.patch -Patch16: openssl-ibmca-07-engine-Fix-Do-not-report-errors-if-libica-does-not-support-EC.patch -Patch17: openssl-ibmca-08-Fix-compiler-error-for-undefined-ERR_pop_to_mark.patch ### %description ++++++ openssl-ibmca-2.4.1.tar.gz -> openssl-ibmca-2.5.0.tar.gz ++++++ ++++ 5573 lines of diff (skipped)