From 85ea5a67c6eb9ab4297d943dd02b375662f3d9be Mon Sep 17 00:00:00 2001 From: Samuel Tyler Date: Thu, 1 Jan 2026 17:20:43 +1100 Subject: [PATCH] Reproducible openssl in new year --- .../patches/copyright-year-reproducible.patch | 20 +++++++++++++++++++ .../openssl-3.6.0/patches/missing-files.patch | 2 ++ 2 files changed, 22 insertions(+) create mode 100644 steps/openssl-3.6.0/patches/copyright-year-reproducible.patch diff --git a/steps/openssl-3.6.0/patches/copyright-year-reproducible.patch b/steps/openssl-3.6.0/patches/copyright-year-reproducible.patch new file mode 100644 index 00000000..3c770c41 --- /dev/null +++ b/steps/openssl-3.6.0/patches/copyright-year-reproducible.patch @@ -0,0 +1,20 @@ +SPDX-FileCopyrightText: 2026 Samuel Tyler + +SPDX-License-Identifier: Apache-2.0 + +Make the output of mkerr.pl reproducible. + +Now the year in the copyright header depends firstly on SOURCE_DATE_EPOCH, +or if that is not set, the mtime of the config file. + +--- openssl-3.6.0/util/mkerr.pl 2025-10-01 22:11:48.000000000 +1000 ++++ openssl-3.6.0/util/mkerr.pl 2026-01-01 17:18:06.853472915 +1100 +@@ -26,7 +26,7 @@ + my %modules = (); + + my $errors = 0; +-my @t = localtime(); ++my @t = gmtime($ENV{SOURCE_DATE_EPOCH} || (stat($config))[9]); + my $YEAR = $t[5] + 1900; + + sub phase diff --git a/steps/openssl-3.6.0/patches/missing-files.patch b/steps/openssl-3.6.0/patches/missing-files.patch index 7d9493ad..e76ac22b 100644 --- a/steps/openssl-3.6.0/patches/missing-files.patch +++ b/steps/openssl-3.6.0/patches/missing-files.patch @@ -2,6 +2,8 @@ SPDX-FileCopyrightText: 2025 Samuel Tyler SPDX-License-Identifier: Apache-2.0 +We intentionally have files missing. + --- openssl-3.6.0/Configure 2025-10-01 22:11:48.000000000 +1000 +++ openssl-3.6.0/Configure 2025-12-26 12:04:24.790872245 +1100 @@ -2729,7 +2729,6 @@