Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package mono-core for openSUSE:Factory
checked in at 2021-10-12 21:48:00
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/mono-core (Old)
and /work/SRC/openSUSE:Factory/.mono-core.new.2443 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "mono-core"
Tue Oct 12 21:48:00 2021 rev:133 rq:923697 version:6.12.0
Changes:
--------
--- /work/SRC/openSUSE:Factory/mono-core/mono-core.changes 2021-10-04
18:40:30.502110486 +0200
+++ /work/SRC/openSUSE:Factory/.mono-core.new.2443/mono-core.changes
2021-10-12 21:48:06.863765303 +0200
@@ -1,0 +2,5 @@
+Fri Oct 1 13:17:13 UTC 2021 - Martin Li??ka <mli...@suse.cz>
+
+- Add enable-X509_V_FLAG_TRUSTED_FIRST-flag.patch in order to fix bsc#1191220.
+
+-------------------------------------------------------------------
New:
----
enable-X509_V_FLAG_TRUSTED_FIRST-flag.patch
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ mono-core.spec ++++++
--- /var/tmp/diff_new_pack.U359sP/_old 2021-10-12 21:48:08.119767101 +0200
+++ /var/tmp/diff_new_pack.U359sP/_new 2021-10-12 21:48:08.123767107 +0200
@@ -62,6 +62,8 @@
Patch20: xbuild-use-roslyn-vbc.patch
# PATCH-FIX-UPSTREAM fix-s390x-ucontext.patch bsc#1171934 mgo...@suse.com --
fix s390x build on glibc 2.26.
Patch22: fix-s390x-ucontext.patch
+# PATCH-FIX-OPENSUSE enable-X509_V_FLAG_TRUSTED_FIRST-flag.patch bsc#1191220
mli...@suse.com -- fix the new Let's encrypt issue
+Patch23: enable-X509_V_FLAG_TRUSTED_FIRST-flag.patch
BuildRequires: autoconf
BuildRequires: automake
BuildRequires: bison
@@ -211,6 +213,7 @@
%patch20 -p1
%endif
%patch22 -p1
+%patch23 -p1
%build
%define _lto_cflags %{nil}
++++++ enable-X509_V_FLAG_TRUSTED_FIRST-flag.patch ++++++
>From 1a739c8dc34ec239ca0ded6a79bb7370f81944da Mon Sep 17 00:00:00 2001
From: Martin Liska <mli...@suse.cz>
Date: Fri, 1 Oct 2021 14:39:37 +0200
Subject: [PATCH] Enable X509_V_FLAG_TRUSTED_FIRST flag.
Fixes: Fix Let's Encrypt DST Root CA X3 certificate expiration.
---
external/boringssl/crypto/x509/x509_vpm.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/external/boringssl/crypto/x509/x509_vpm.c
b/external/boringssl/crypto/x509/x509_vpm.c
index 02a589888..4bbb1ceed 100644
--- a/external/boringssl/crypto/x509/x509_vpm.c
+++ b/external/boringssl/crypto/x509/x509_vpm.c
@@ -515,7 +515,7 @@ static const X509_VERIFY_PARAM default_table[] = {
(char *)"default", /* X509 default parameters */
0, /* Check time */
0, /* internal flags */
- 0, /* flags */
+ X509_V_FLAG_TRUSTED_FIRST, /* flags */
0, /* purpose */
0, /* trust */
100, /* depth */
--
2.33.0
