Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package coturn for openSUSE:Factory checked
in at 2023-03-07 16:50:31
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/coturn (Old)
and /work/SRC/openSUSE:Factory/.coturn.new.31432 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "coturn"
Tue Mar 7 16:50:31 2023 rev:13 rq:1069852 version:4.6.1
Changes:
--------
--- /work/SRC/openSUSE:Factory/coturn/coturn.changes 2022-12-05
18:02:28.288996639 +0100
+++ /work/SRC/openSUSE:Factory/.coturn.new.31432/coturn.changes 2023-03-07
16:50:59.817793871 +0100
@@ -1,0 +2,5 @@
+Mon Mar 6 17:09:44 UTC 2023 - Carsten Ziepke <kiel...@gmail.com>
+
+- Add coturn-no-FIPS-140-mode.patch, fixes build against OpenSSL 3.0
+
+-------------------------------------------------------------------
New:
----
coturn-no-FIPS-140-mode.patch
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ coturn.spec ++++++
--- /var/tmp/diff_new_pack.aZueZM/_old 2023-03-07 16:51:00.673798384 +0100
+++ /var/tmp/diff_new_pack.aZueZM/_new 2023-03-07 16:51:00.677798405 +0100
@@ -1,7 +1,7 @@
#
# spec file for package coturn
#
-# Copyright (c) 2022 SUSE LLC
+# Copyright (c) 2023 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -40,6 +40,8 @@
Source7: README.SUSE
Source8: %{name}-apparmor-usr.bin.turnserver
Source9: %{name}@.service
+# PATCH-FIX-UPSTREAM - coturn-no-FIPS-140-mode.patch - see
https://github.com/coturn/coturn/pull/916/commits/518094e0d30bb04364b6751841cd55172a33b539
+Patch0: coturn-no-FIPS-140-mode.patch
BuildRequires: fdupes
BuildRequires: firewall-macros
BuildRequires: libevent-devel >= 2.0.0
++++++ coturn-no-FIPS-140-mode.patch ++++++
From: Nicholas Guriev <guriev...@ya.ru>
Date: Thu, 02 Jun 2022 12:34:17 +0300
Subject: Do not check FIPS 140 mode
It is not available in OpenSSL as packaged in Debian. The OPENSSL_FIPS macro
appeared in ancient OpenSSL sources but was never defined.
https://sources.debian.org/src/openssl/1.1.1n-0%2Bdeb11u2/crypto/o_fips.c/
---
src/client/ns_turn_msg.c | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
--- a/src/client/ns_turn_msg.c
+++ b/src/client/ns_turn_msg.c
@@ -244,7 +244,7 @@ int stun_produce_integrity_key_str(const
unsigned int keylen = 0;
EVP_MD_CTX ctx;
EVP_MD_CTX_init(&ctx);
-#if defined EVP_MD_CTX_FLAG_NON_FIPS_ALLOW && !defined(LIBRESSL_VERSION_NUMBER)
+#ifdef OPENSSL_FIPS
if (FIPS_mode()) {
EVP_MD_CTX_set_flags(&ctx,EVP_MD_CTX_FLAG_NON_FIPS_ALLOW);
}
@@ -256,7 +256,7 @@ int stun_produce_integrity_key_str(const
#else
unsigned int keylen = 0;
EVP_MD_CTX *ctx = EVP_MD_CTX_new();
-#if defined EVP_MD_CTX_FLAG_NON_FIPS_ALLOW && !
defined(LIBRESSL_VERSION_NUMBER)
+#ifdef OPENSSL_FIPS
if (FIPS_mode()) {
EVP_MD_CTX_set_flags(ctx,
EVP_MD_CTX_FLAG_NON_FIPS_ALLOW);
}
