diff --git a/AusweisApp2.spec b/AusweisApp2.spec index ed8d7ef..4c3a87c 100644 --- a/AusweisApp2.spec +++ b/AusweisApp2.spec @@ -187,15 +187,20 @@ help2man \ # this configuration before application startup and only for this specific # application. cat << EOF >> %{buildroot}%{_datadir}/%{name}/openssl.cnf -openssl_conf = default_conf +# This application specific OpenSSL configuration file basically +# modifies the system's default configuration to enable all +# RSA-PSK algorithms and the ciphers using SHA384, which are +# needed for AusweisApp2 to have full functionality. -[default_conf] -ssl_conf = ssl_sect +openssl_conf = AusweisApp2_conf -[ssl_sect] -system_default = system_default_sect +[AusweisApp2_conf] +ssl_conf = AusweisApp2_OpenSSL -[system_default_sect] +[AusweisApp2_OpenSSL] +system_default = AusweisApp2_ciphers + +[AusweisApp2_ciphers] EOF cat %{_datadir}/crypto-policies/DEFAULT/opensslcnf.txt | \ grep 'CipherString' | \