[rpms/openssl] rebase_40beta: define OPENSSL_NO_SSL3 so the newly built dependencies do not

[Tomas Mraz <tmraz@fedoraproject.org>]

          A new commit has been pushed.

          Repo   : rpms/openssl
          Branch : rebase_40beta
          Commit : 8574fb5150572c292010a84fa948a074556fa4a2
          Author : Tomas Mraz <tmraz@fedoraproject.org>
          Date   : 2018-09-27T16:53:06+02:00
          Stats  : +12/-1 in 1 file(s)
          URL    : https://src.fedoraproject.org/rpms/openssl/c/8574fb5150572c292010a84fa948a074556fa4a2?branch=rebase_40beta

          Log:
          define OPENSSL_NO_SSL3 so the newly built dependencies do not
have access to SSL3 API calls anymore

---
diff --git a/openssl.spec b/openssl.spec
index 74f0d49..101409e 100644
--- a/openssl.spec
+++ b/openssl.spec
@@ -22,7 +22,7 @@
 Summary: Utilities from the general purpose cryptography library with TLS implementation
 Name: openssl
 Version: 1.1.1
-Release: 3%{?dist}
+Release: 4%{?dist}
 Epoch: 1
 # We have to remove certain patented algorithms from the openssl source
 # tarball with the hobble-openssl script which is included below.
@@ -373,6 +373,13 @@ basearch=sparc
 basearch=sparc64
 %endif
 
+# Next step of gradual disablement of SSL3.
+# Make SSL3 disappear to newly built dependencies.
+sed -i '/^\#ifndef OPENSSL_NO_SSL_TRACE/i\
+\#ifndef OPENSSL_NO_SSL3\
+\# define OPENSSL_NO_SSL3\
+\#endif\' $RPM_BUILD_ROOT/%{_prefix}/include/openssl/opensslconf.h
+
 %ifarch %{multilib_arches}
 # Do an opensslconf.h switcheroo to avoid file conflicts on systems where you
 # can have both a 32- and 64-bit version of the library, and they each need
@@ -449,6 +456,10 @@ export LD_LIBRARY_PATH
 %postun libs -p /sbin/ldconfig
 
 %changelog
+* Thu Sep 27 2018 Tomáš Mráz <tmraz@redhat.com> 1.1.1-4
+- define OPENSSL_NO_SSL3 so the newly built dependencies do not
+  have access to SSL3 API calls anymore
+
 * Mon Sep 17 2018 Tomáš Mráz <tmraz@redhat.com> 1.1.1-3
 - reinstate accidentally dropped patch for weak ciphersuites