• Bug#1108958: unblock: openssl (1/16)

    From Sebastian Andrzej Siewior@21:1/5 to Paul Gevers on Sat Jul 12 19:20:02 2025
    XPost: linux.debian.devel.release

    Control: tags -1 -moreinfo

    On 2025-07-10 16:57:26 [+0200], Paul Gevers wrote:

    Hi,

    Hi,

    Could we have a debdiff of your proposed 3.5.1-1 version? Looking at the debdiff between experimental and testing is hard because the new upstream version is encapsulated in a big patch, which also overlaps with dropped patches. I assume you want to upload 3.5.1-1 and not 3.5.0-4 (or similar).

    Correct. Please find attached debdiff -w

    Paul

    Sebastian

    diff -Nru -w openssl-3.5.0/apps/CA.pl.in openssl-3.5.1/apps/CA.pl.in
    --- openssl-3.5.0/apps/CA.pl.in 2025-04-08 15:09:06.000000000 +0200
    +++ openssl-3.5.1/apps/CA.pl.in 2025-07-01 13:52:08.000000000 +0200
    @@ -1,5 +1,5 @@
    #!{- $config{HASHBANGPERL} -}
    -# Copyright 2000-2021 The OpenSSL Project Authors. All Rights Reserved.
    +# Copyright 2000-2025 The OpenSSL Project Authors. All Rights Reserved.
    #
    # Licensed under the Apache License 2.0 (the "License"). You may not use
    # this file except in compliance with the License. You can obtain a copy
    @@ -19,14 +19,17 @@

    my $openssl = $ENV{'OPENSSL'} // "openssl";
    $ENV{'OPENSSL'} = $openssl;
    +my @openssl = split_val($openssl);
    +
    my $OPENSSL_CONFIG = $ENV{"OPENSSL_CONFIG"} // "";
    +my @OPENSSL_CONFIG = split_val($OPENSSL_CONFIG);

    # Command invocations.
    -my $REQ = "$openssl req $OPENSSL_CONFIG";
    -my $CA = "$openssl ca $OPENSSL_CONFIG";
    -my $VERIFY = "$openssl verify";
    -my $X509 = "$openssl x509";
    -my $PKCS12 = "$openssl pkcs12";
    +my @REQ = (@openssl, "req", @OPENSSL_CONFIG);
    +my @CA = (@openssl, "ca", @OPE