[rpms/openssl] rebase_40beta: reenable SSL2 in the build to avoid ABI break

[rpms/openssl] rebase_40beta: reenable SSL2 in the build to avoid ABI break

[Tomas Mraz]

           A new commit has been pushed.

           Repo   : rpms/openssl
           Branch : rebase_40beta
           Commit : 8f6be98bf7b9e9015ad035f34b8414e82c7b68ca
           Author : Tomas Mraz <tmraz@fedoraproject.org>
           Date   : 2016-03-02T09:33:35+01:00
           Stats  : +6/-2 in 1 file(s)
           URL    : https://src.fedoraproject.org/rpms/openssl/c/8f6be98bf7b9e9015ad035f34b8414e82c7b68ca?branch=rebase_40beta

           Log:
           reenable SSL2 in the build to avoid ABI break

(it does not make the openssl vulnerable to DROWN attack)

---
diff --git a/openssl.spec b/openssl.spec
index 4f1a194..537c698 100644
--- a/openssl.spec
+++ b/openssl.spec
@@ -23,7 +23,7 @@
 Summary: Utilities from the general purpose cryptography library with TLS implementation
 Name: openssl
 Version: 1.0.2g
-Release: 1%{?dist}
+Release: 2%{?dist}
 Epoch: 1
 # We have to remove certain patented algorithms from the openssl source
 # tarball with the hobble-openssl script which is included below.
@@ -287,7 +287,7 @@ sslflags=enable-ec_nistp_64_gcc_128
 	--prefix=%{_prefix} --openssldir=%{_sysconfdir}/pki/tls ${sslflags} \
 	--system-ciphers-file=%{_sysconfdir}/crypto-policies/back-ends/openssl.config \
 	zlib sctp enable-camellia enable-seed enable-tlsext enable-rfc3779 \
-	enable-cms enable-md2 \
+	enable-cms enable-md2 enable-ssl2 \
 	no-mdc2 no-rc5 no-ec2m no-gost no-srp \
 	--with-krb5-flavor=MIT --enginesdir=%{_libdir}/openssl/engines \
 	--with-krb5-dir=/usr shared  ${sslarch} %{?!nofips:fips}
@@ -502,6 +502,10 @@ rm -rf $RPM_BUILD_ROOT/%{_libdir}/fipscanister.*
 %postun libs -p /sbin/ldconfig
 
 %changelog
+* Wed Mar  2 2016 Tomáš Mráz <tmraz@redhat.com> 1.0.2g-2
+- reenable SSL2 in the build to avoid ABI break (it does not
+  make the openssl vulnerable to DROWN attack)
+
 * Tue Mar  1 2016 Tomáš Mráz <tmraz@redhat.com> 1.0.2g-1
 - minor upstream release 1.0.2g fixing security issues