These patches add support for building RPM against OpenSSL 1.1.0 to provide 
hashing and signature functionality. It is enabled by passing `--with-openssl` 
to `configure`. (For backwards compatibility, it retains the use of 
`--with[out]-nss` as a toggle between beecrypt and nss).

I have tested these patches with the following scenarios:
* Sign a package using a 2048-bit RSA key with RPM compiled against OpenSSL and 
verify it with RPM compiled against OpenSSL.
* Sign a package using a 2048-bit RSA key with RPM compiled against OpenSSL and 
verify it with RPM compiled against NSS.
* Sign a package using a 1024-bit DSA key with RPM compiled against OpenSSL and 
verify it with RPM compiled against OpenSSL.
* Sign a package using a 1024-bit DSA key with RPM compiled against OpenSSL and 
verify it with RPM compiled against NSS.
* Sign a package using a 2048-bit RSA key with RPM compiled against NSS and 
verify it with RPM compiled against OpenSSL.
* Sign a package using a 1024-bit DSA key with RPM compiled against NSS and 
verify it with RPM compiled against OpenSSL.
You can view, comment on, or merge this pull request online at:

  https://github.com/rpm-software-management/rpm/pull/129

-- Commit Summary --

  * Add initial OpenSSL support
  * OpenSSL: Add support for RSA signatures
  * OpenSSL: Add support for DSA signatures

-- File Changes --

    M Makefile.am (17)
    M configure.ac (45)
    M rpmio/Makefile.am (6)
    A rpmio/digest_openssl.c (707)

-- Patch Links --

https://github.com/rpm-software-management/rpm/pull/129.patch
https://github.com/rpm-software-management/rpm/pull/129.diff

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/pull/129
_______________________________________________
Rpm-maint mailing list
Rpm-maint@lists.rpm.org
http://lists.rpm.org/mailman/listinfo/rpm-maint

Reply via email to