[Pkg-openssl-changes] r576 - in openssl/trunk/debian: . patches

[Kurt Roeckx]

Author: kroeckx
Date: 2012-06-05 22:52:43 +0000 (Tue, 05 Jun 2012)
New Revision: 576

Added:
   openssl/trunk/debian/patches/padlock_conf.patch
Modified:
   openssl/trunk/debian/changelog
   openssl/trunk/debian/patches/series
Log:
Enable the padlock engine by default.


Modified: openssl/trunk/debian/changelog
===================================================================
--- openssl/trunk/debian/changelog	2012-06-05 22:52:28 UTC (rev 575)
+++ openssl/trunk/debian/changelog	2012-06-05 22:52:43 UTC (rev 576)
@@ -2,8 +2,9 @@
 
   * Fix renegiotation when using TLS > 1.0.  This breaks tor.  Patch from
     upstream.  (Closes: #675990)
+  * Enable the padlock engine by default.
 
- -- Kurt Roeckx <kurt at roeckx.be>  Wed, 06 Jun 2012 00:37:39 +0200
+ -- Kurt Roeckx <kurt at roeckx.be>  Wed, 06 Jun 2012 00:47:56 +0200
 
 openssl (1.0.1c-1) unstable; urgency=high
 

Added: openssl/trunk/debian/patches/padlock_conf.patch
===================================================================
--- openssl/trunk/debian/patches/padlock_conf.patch	                        (rev 0)
+++ openssl/trunk/debian/patches/padlock_conf.patch	2012-06-05 22:52:43 UTC (rev 576)
@@ -0,0 +1,28 @@
+--- openssl/apps/openssl.cnf.orig	2012-06-06 00:45:56.000000000 +0200
++++ openssl/apps/openssl.cnf	2012-06-06 00:46:46.000000000 +0200
+@@ -19,6 +19,8 @@
+ # (Alternatively, use a configuration file that has only
+ # X.509v3 extensions in its main [= default] section.)
+ 
++openssl_conf = openssl_def
++
+ [ new_oids ]
+ 
+ # We can add new OIDs in here for use by 'ca', 'req' and 'ts'.
+@@ -348,3 +350,16 @@
+ 				# (optional, default: no)
+ ess_cert_id_chain	= no	# Must the ESS cert id chain be included?
+ 				# (optional, default: no)
++
++[openssl_def]
++engines = engine_section
++
++[engine_section]
++padlock = padlock_section
++
++[padlock_section]
++soft_load=1
++init=1
++default_algorithms = ALL
++dynamic_path=padlock
++

Modified: openssl/trunk/debian/patches/series
===================================================================
--- openssl/trunk/debian/patches/series	2012-06-05 22:52:28 UTC (rev 575)
+++ openssl/trunk/debian/patches/series	2012-06-05 22:52:43 UTC (rev 576)
@@ -30,3 +30,4 @@
 block_digicert_malaysia.patch
 c_rehash-multi.patch
 renegiotate_tls.patch
+padlock_conf.patch