%global with_fips 1 Summary: Library for accessing ICA hardware crypto on IBM z Systems Name: libica Version: 4.3.0 Release: 3%{?dist} License: CPL-1.0 URL: https://github.com/opencryptoki/ Source0: https://github.com/opencryptoki/%{name}/archive/v%{version}/%{name}-%{version}.tar.gz # annotate assembler source # https://bugzilla.redhat.com/show_bug.cgi?id=1630582 # https://github.com/opencryptoki/libica/pull/24 Patch0: %{name}-4.0.0-annotate.patch # post GA fixes Patch1: %{name}-%{version}-fixes.patch BuildRequires: gcc BuildRequires: openssl-devel BuildRequires: openssl BuildRequires: autoconf BuildRequires: automake BuildRequires: libtool BuildRequires: autoconf-archive BuildRequires: perl(FindBin) BuildRequires: perl(lib) BuildRequires: make ExclusiveArch: s390 s390x %description A library of functions and utilities for accessing ICA hardware crypto on IBM z Systems. %package devel Summary: Development tools for programs to access ICA hardware crypto on IBM z Systems Requires: %{name} = %{version}-%{release} Requires: openssl-devel %description devel The libica-devel package contains the header files and static libraries necessary for developing programs accessing ICA hardware crypto on IBM z Systems. %prep %autosetup -p1 sh ./bootstrap.sh %build # FIPS openssl config is not needed on RHEL/Fedora # https://bugzilla.redhat.com/show_bug.cgi?id=2084097 CPPFLAGS=-DNO_FIPS_CONFIG_LOAD export CPPFLAGS %configure --disable-static \ %if %{with_fips} --enable-fips %else --disable-fips %endif %make_build %install %make_install rm %{buildroot}%{_libdir}/libica*.la rm %{buildroot}%{_pkgdocdir}/{INSTALL,README.md} %check # mock doesn't provide the device, so check here # https://github.com/rpm-software-management/mock/issues/33 if [ -c /dev/hwrng -o -c /dev/prandom ]; then make check fi %if %{with_fips} %define __spec_install_post \ %{?__debug_package:%{__debug_install_post}} \ %{__arch_install_post} \ %{__os_install_post} \ make fipsinstall DESTDIR=%{buildroot} %{nil} %endif %files %doc AUTHORS LICENSE ChangeLog %{_bindir}/icainfo %{_bindir}/icainfo-cex %{_bindir}/icastats %if %{with_fips} %if 0%{?fedora} >= 36 || 0%{?rhel} >= 9 # openssl 3.0 is available since Fedora 36 and RHEL 9 %exclude %{_sysconfdir}/libica/openssl3-fips.cnf %endif %{_libdir}/.libica.*.hmac %{_libdir}/.libica-cex.*.hmac %endif %{_libdir}/libica.so.* %{_libdir}/libica-cex.so.* %{_mandir}/man1/icainfo.1* %{_mandir}/man1/icainfo-cex.1* %{_mandir}/man1/icastats.1* %files devel %{_includedir}/* %{_libdir}/libica.so %{_libdir}/libica-cex.so %changelog * Thu Jul 18 2024 Fedora Release Engineering - 4.3.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild * Mon May 27 2024 Dan Horák - 4.3.0-2 - add post GA fixes * Wed Jan 31 2024 Dan Horák - 4.3.0-1 - updated to 4.3.0 * Thu Jan 25 2024 Fedora Release Engineering - 4.2.3-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Sun Jan 21 2024 Fedora Release Engineering - 4.2.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Fri Oct 27 2023 Dan Horák - 4.2.3-2 - fix selfcheck in FIPS mode (RHEL-9918) * Thu Sep 21 2023 Dan Horák - 4.2.3-1 - updated to 4.2.3 * Thu Jul 20 2023 Fedora Release Engineering - 4.2.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Fri May 19 2023 Dan Horák - 4.2.2-1 - updated to 4.2.2 * Mon Feb 06 2023 Dan Horák - 4.2.1-1 - updated to 4.2.1 * Thu Jan 19 2023 Fedora Release Engineering - 4.2.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Thu Dec 15 2022 Dan Horák - 4.2.0-1 - updated to 4.2.0 * Tue Oct 11 2022 Dan Horák - 4.1.1-1 - updated to 4.1.1 * Fri Sep 30 2022 Dan Horák - 4.1.0-1 - updated to 4.1.0 * Tue Aug 16 2022 Dan Horák - 4.0.3-1 - updated to 4.0.3 * Thu Jul 21 2022 Fedora Release Engineering - 4.0.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Fri Jun 24 2022 Dan Horák - 4.0.2-1 - updated to 4.0.2 * Mon May 16 2022 Dan Horák - 4.0.1-2 - FIPS specific openssl config is not required in RHEL/Fedora * Tue Feb 08 2022 Dan Horák - 4.0.1-1 - updated to 4.0.1 * Tue Feb 01 2022 Dan Horák - 4.0.0-3 - post GA fixes * Thu Jan 20 2022 Fedora Release Engineering - 4.0.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Thu Jan 13 2022 Dan Horák - 4.0.0-1 - updated to 4.0.0 * Thu Jul 22 2021 Fedora Release Engineering - 3.8.0-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Wed Jun 02 2021 Dan Horák - 3.8.0-4 - re-enable FIPS support * Mon May 31 2021 Dan Horák - 3.8.0-3 - disable FIPS support (broken) * Mon May 24 2021 Dan Horák - 3.8.0-2 - conditionalize FIPS support * Fri May 21 2021 Dan Horák - 3.8.0-1 - updated to 3.8.0 * Tue Jan 26 2021 Fedora Release Engineering - 3.7.0-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Tue Jul 28 2020 Fedora Release Engineering - 3.7.0-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Wed Jul 22 2020 Dan Horák - 3.7.0-3 - Use make macros (taken from PR#1 by ) - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro * Wed Jul 15 2020 Dan Horák - 3.7.0-2 - fix FIPS integrity validation (#1857130) * Fri May 15 2020 Dan Horák - 3.7.0-1 - updated to 3.7.0 * Wed Jan 29 2020 Fedora Release Engineering - 3.6.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Tue Nov 26 2019 Dan Horák - 3.6.1-1 - updated to 3.6.1 * Mon Sep 02 2019 Dan Horák - 3.6.0-1 - updated to 3.6.0 * Thu Jul 25 2019 Fedora Release Engineering - 3.5.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Wed Apr 24 2019 Dan Horák - 3.5.0-1 - updated to 3.5.0 * Fri Feb 01 2019 Fedora Release Engineering - 3.4.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Fri Nov 16 2018 Dan Horák - 3.4.0-1 - updated to 3.4.0 * Fri Sep 21 2018 Dan Horák - 3.3.3-4 - annotate assembler file (#1630582) * Fri Jul 13 2018 Fedora Release Engineering - 3.3.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Wed Jun 13 2018 Dan Horák - 3.3.3-2 - fix executable stack in assembler code * Tue Jun 12 2018 Dan Horák - 3.3.3-1 - updated to 3.3.3 * Tue Apr 17 2018 Dan Horák - 3.3.2-1 - updated to 3.3.2 * Wed Feb 07 2018 Fedora Release Engineering - 3.2.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild * Mon Sep 25 2017 Dan Horák - 3.2.0-1 - updated to 3.2.0 * Mon Sep 11 2017 Dan Horák - 3.1.1-1 - updated to 3.1.1 * Thu Aug 03 2017 Fedora Release Engineering - 3.0.2-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild * Wed Jul 26 2017 Fedora Release Engineering - 3.0.2-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild * Tue Apr 18 2017 Dan Horák - 3.0.2-3 - update BR * Fri Feb 10 2017 Fedora Release Engineering - 3.0.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild * Wed Jan 18 2017 Dan Horák - 3.0.2-1 - updated to 3.0.2 * Fri Jan 13 2017 Dan Horák - 3.0.1-2 - check for /dev/prandom before running the test-suite * Fri Jan 13 2017 Dan Horák - 3.0.1-1 - updated to 3.0.1 * Tue Apr 12 2016 Dan Horák - 2.6.2-1 - updated to 2.6.2 * Thu Mar 17 2016 Dan Horák - 2.6.1-1 - updated to 2.6.1 * Thu Feb 04 2016 Fedora Release Engineering - 2.4.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild * Wed Jun 17 2015 Fedora Release Engineering - 2.4.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild * Mon Sep 01 2014 Dan Horák - 2.4.2-1 - updated to 2.4.2 * Wed Jun 11 2014 Dan Horák - 2.3.0-5 - fix build with recent kernels * Sat Jun 07 2014 Fedora Release Engineering - 2.3.0-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Fri Mar 14 2014 Dan Horák - 2.3.0-3 - add post release fix (#1066014) * Sat Aug 03 2013 Fedora Release Engineering - 2.3.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Fri May 03 2013 Dan Horák - 2.3.0-1 - updated to 2.3.0 * Thu Feb 14 2013 Fedora Release Engineering - 2.2.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild * Fri Aug 17 2012 Dan Horák - 2.2.0-1 - updated to 2.2.0 * Thu Jul 19 2012 Fedora Release Engineering - 2.1.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Mon Jan 16 2012 Dan Horák - 2.1.1-1 - updated to 2.1.1 * Fri Jan 13 2012 Fedora Release Engineering - 2.1.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild * Thu Jul 07 2011 Dan Horák - 2.1.0-1 - updated to 2.1.0 with soname set back to 2.0 * Mon Apr 11 2011 Dan Horák - 2.0.6-1 - updated to 2.0.6 * Tue Feb 08 2011 Fedora Release Engineering - 2.0.4-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild * Wed Jan 12 2011 Dan Horák - 2.0.4-1 - Do not use sigill to wrap all HW instructions (#665401) - updated to 2.0.4 * Tue Nov 9 2010 Dan Horák - 2.0.3-3 - Fix the return value of old_api_sha_test() in libica_sha1_test (#624005) - Use the right buffer length when operating in 32-bit mode (#640035) - Resolves: #624005, #640035 * Fri May 21 2010 Dan Horák - 2.0.3-2 - rebuilt with -fno-strict-aliasing (#593779) - Resolves: #593779 * Thu Apr 22 2010 Dan Horák - 2.0.3-1 - updated to 2.0.3 (#582607) - Resolves: #582607 * Mon Apr 12 2010 Dan Horák - 2.0.2-3 - add SIGILL handler for add_entropy (#581520) - Resolves: #581520 * Tue Feb 16 2010 Dan Horák - 2.0.2-2 - dropped the utils sub-package - Related: #543948 * Tue Dec 08 2009 Dennis Gregorovic - 2.0.2-1.1 - Rebuilt for RHEL 6 * Mon Aug 17 2009 Dan Horák - 2.0.2-1 - update to 2.0.2 * Fri Jul 24 2009 Fedora Release Engineering - 2.0.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild * Wed Apr 1 2009 Dan Horák - 2.0.1-1 - update to 2.0.1 * Mon Mar 23 2009 Dan Horák - 2.0-1 - update to 2.0 - spec file cleanup before submitting to Fedora * Sun Sep 14 2008 Phil Knirsch - 1.3.7-8.el5 - Added the icainfo tool to libica (#439484) * Tue Apr 01 2008 Phil Knirsch - 1.3.7-7.el5 - Fixed build of libica with latest AES & SHA feature (#439390) * Tue Jan 15 2008 Phil Knirsch - 1.3.7-6.el5 - Added Software Support for CP Assist Instructions AES & SHA (#318971) * Thu Nov 23 2006 Phil Knirsch - 1.3.7-5.el5 - Fixed requires bug where devel packages would get wrong arch lib (#215908) * Fri Oct 13 2006 Phil Knirsch - 1.3.7-4 - Fixed bug where libica fails to initialize when no crypto hardware is available (#210504) - Only build libica for s390(x), really only needed there. * Fri Sep 08 2006 Phil Knirsch - 1.3.7-3 - Build for other archs as well due to openCryptoki requirement (#184631) * Fri Jul 14 2006 Tim Powers - 1.3.7-2 - rebuild * Tue Jun 13 2006 Phil Knirsch - 1.3.7-1 - Update to libica-1.3.7 final - Fixed build on latest devel tree * Tue Apr 04 2006 Phil Knirsch - 1.3.6-rc3-1 - Initial package.