Hello community, here is the log from the commit of package openssl-ibmca for openSUSE:Factory checked in at 2020-09-22 21:13:28 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/openssl-ibmca (Old) and /work/SRC/openSUSE:Factory/.openssl-ibmca.new.4249 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "openssl-ibmca" Tue Sep 22 21:13:28 2020 rev:35 rq:835922 version:2.1.1 Changes: -------- --- /work/SRC/openSUSE:Factory/openssl-ibmca/openssl-ibmca.changes 2019-10-16 09:18:46.810927138 +0200 +++ /work/SRC/openSUSE:Factory/.openssl-ibmca.new.4249/openssl-ibmca.changes 2020-09-22 21:14:42.792114814 +0200 @@ -1,0 +2,6 @@ +Wed Sep 16 20:06:12 UTC 2020 - Mark Post <mp...@suse.com> + +- Upgrade to version 2.1.1 (jsc#SLE-14468) + * Bug fixes + +------------------------------------------------------------------- Old: ---- openssl-ibmca-2.1.0.tar.gz New: ---- openssl-ibmca-2.1.1.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ openssl-ibmca.spec ++++++ --- /var/tmp/diff_new_pack.U7hOoY/_old 2020-09-22 21:14:43.668115580 +0200 +++ /var/tmp/diff_new_pack.U7hOoY/_new 2020-09-22 21:14:43.672115583 +0200 @@ -1,7 +1,7 @@ # # spec file for package openssl-ibmca # -# Copyright (c) 2018, 2019 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2018-2020 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -17,7 +17,7 @@ Name: openssl-ibmca -Version: 2.1.0 +Version: 2.1.1 Release: 0 Summary: The IBMCA OpenSSL dynamic engine License: Apache-2.0 ++++++ openssl-ibmca-2.1.0.tar.gz -> openssl-ibmca-2.1.1.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/openssl-ibmca-2.1.0/ChangeLog new/openssl-ibmca-2.1.1/ChangeLog --- old/openssl-ibmca-2.1.0/ChangeLog 2019-09-09 02:07:21.000000000 +0200 +++ new/openssl-ibmca-2.1.1/ChangeLog 2020-05-05 15:03:21.000000000 +0200 @@ -1,3 +1,6 @@ +* openssl-ibmca 2.1.1 +- Bug fixes + * openssl-ibmca 2.1.0 - Add MSA9 CPACF support for X25519, X448, Ed25519 and Ed448 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/openssl-ibmca-2.1.0/configure.ac new/openssl-ibmca-2.1.1/configure.ac --- old/openssl-ibmca-2.1.0/configure.ac 2019-09-09 02:07:21.000000000 +0200 +++ new/openssl-ibmca-2.1.1/configure.ac 2020-05-05 15:03:21.000000000 +0200 @@ -2,7 +2,7 @@ # Process this file with autoconf to produce a configure script. # See autoconf and autoscan online documentation for details. -AC_INIT([openssl-ibmca], [2.1.0], [opencryptoki-us...@lists.sf.net]) +AC_INIT([openssl-ibmca], [2.1.1], [opencryptoki-us...@lists.sf.net]) AC_CONFIG_SRCDIR([src/e_ibmca.c]) # sanity check AC_CONFIG_MACRO_DIR([m4]) AC_CONFIG_AUX_DIR([build-aux]) @@ -26,13 +26,13 @@ LT_INIT # Checks for libraries. -AC_CHECK_LIB([crypto], [RAND_add], [], AC_MSG_ERROR([*** openssl >= 0.9.8 is required ***])) -AC_CHECK_LIB([ica], [ica_get_functionlist], [], AC_MSG_ERROR([*** libica >= 3.3.0 is required ***])) +AC_CHECK_LIB([crypto], [RAND_add], [], AC_MSG_ERROR([*** openssl >= 1.1.1 is required ***])) +AC_CHECK_LIB([ica], [ica_get_functionlist], [], AC_MSG_ERROR([*** libica >= 3.6.0 is required ***])) # Checks for header files. AC_CHECK_HEADERS([arpa/inet.h fcntl.h malloc.h netdb.h netinet/in.h stddef.h stdlib.h \ string.h strings.h sys/ioctl.h sys/param.h sys/socket.h sys/time.h unistd.h]) -AC_CHECK_HEADER([ica_api.h], [], AC_MSG_ERROR([*** libica-devel >= 3.3.0 is required ***])) +AC_CHECK_HEADER([ica_api.h], [], AC_MSG_ERROR([*** libica-devel >= 3.6.0 is required ***])) # Checks for typedefs, structures, and compiler characteristics. @@ -44,7 +44,7 @@ # Checks for library functions. AC_CHECK_FUNCS([gethostbyaddr gethostbyname memset strcasecmp strncasecmp strstr malloc]) AC_CHECK_DECLS([ICA_FLAG_DHW,ica_get_functionlist,ica_open_adapter,DES_ECB], [], - AC_MSG_ERROR([*** libica >= 3.3.0 and libica-devel >= 3.3.0 are required ***]), + AC_MSG_ERROR([*** libica >= 3.6.0 and libica-devel >= 3.6.0 are required ***]), [#include <ica_api.h>]) AC_CONFIG_FILES([ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/openssl-ibmca-2.1.0/openssl-ibmca.spec new/openssl-ibmca-2.1.1/openssl-ibmca.spec --- old/openssl-ibmca-2.1.0/openssl-ibmca.spec 2019-09-09 02:07:21.000000000 +0200 +++ new/openssl-ibmca-2.1.1/openssl-ibmca.spec 2020-05-05 15:03:21.000000000 +0200 @@ -1,7 +1,7 @@ %global enginesdir %(pkg-config --variable=enginesdir libcrypto) Name: openssl-ibmca -Version: 2.1.0 +Version: 2.1.1 Release: 1%{?dist} Summary: An IBMCA OpenSSL dynamic engine @@ -9,8 +9,8 @@ URL: https://github.com/opencryptoki/openssl-ibmca Source0: https://github.com/opencryptoki/%{name}/archive/v%{version}/%{name}-%{version}.tar.gz -Requires: openssl >= 0.9.8 libica >= 3.3.0 -BuildRequires: openssl-devel >= 0.9.8 libica-devel >= 3.3.0 +Requires: openssl >= 1.1.1 libica >= 3.6.0 +BuildRequires: openssl-devel >= 1.1.1 libica-devel >= 3.6.0 BuildRequires: autoconf automake libtool ExclusiveArch: s390 s390x @@ -44,6 +44,9 @@ %{_mandir}/man5/ibmca.5* %changelog +* Tue May 05 2020 Patrick Steuer <patrick.ste...@de.ibm.com> 2.1.1 +- Update Version + * Mon Sep 09 2019 Patrick Steuer <patrick.ste...@de.ibm.com> 2.1.0 - Update Version diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/openssl-ibmca-2.1.0/src/Makefile.am new/openssl-ibmca-2.1.1/src/Makefile.am --- old/openssl-ibmca-2.1.0/src/Makefile.am 2019-09-09 02:07:21.000000000 +0200 +++ new/openssl-ibmca-2.1.1/src/Makefile.am 2020-05-05 15:03:21.000000000 +0200 @@ -1,4 +1,4 @@ -VERSION = 2:1:0 +VERSION = 2:1:1 lib_LTLIBRARIES=ibmca.la diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/openssl-ibmca-2.1.0/src/ibmca_cipher.c new/openssl-ibmca-2.1.1/src/ibmca_cipher.c --- old/openssl-ibmca-2.1.0/src/ibmca_cipher.c 2019-09-09 02:07:21.000000000 +0200 +++ new/openssl-ibmca-2.1.1/src/ibmca_cipher.c 2020-05-05 15:03:21.000000000 +0200 @@ -285,7 +285,7 @@ mlen += len; if (mlen > ((1ULL << 36) - 32) || (sizeof(len) == 8 && mlen < len)) - return -1; + return 0; ctx->ptlen = mlen; @@ -300,10 +300,13 @@ /* ctx->taglen is not set at this time... and is not needed. The * function only checks, if it's a valid gcm tag length. So we chose 16. */ - rv = !(p_ica_aes_gcm_intermediate(pt, len, ct, ctx->ucb, NULL, 0, + rv = p_ica_aes_gcm_intermediate(pt, len, ct, ctx->ucb, NULL, 0, ctx->tag, 16, ctx->key, keylen, - ctx->subkey, enc)); - return rv; + ctx->subkey, enc); + if (rv) + return 0; + + return 1; } static int ibmca_aes_gcm_init_key(EVP_CIPHER_CTX *ctx,