From a1e4279363b84c4ef144b08d9c9c4b961fb80c91 Mon Sep 17 00:00:00 2001
From: lyn1001 <thistleslyn@163.com>
Date: Thu, 2 Feb 2023 18:10:28 +0800
Subject: [PATCH] Use the legacy OpenSSL provider in %check to support md4

---
 python-ntlm-auth.spec | 32 +++++++++++++++++++++++++++++---
 1 file changed, 29 insertions(+), 3 deletions(-)

diff --git a/python-ntlm-auth.spec b/python-ntlm-auth.spec
index bfd8c44..c662ee3 100644
--- a/python-ntlm-auth.spec
+++ b/python-ntlm-auth.spec
@@ -4,8 +4,8 @@
 %global library_name ntlm_auth
 Name:                python-%{srcname}
 Version:             1.5.0
-Release:             1
-Summary:             Python 3 compatible NTLM library
+Release:             2
+Summary:             Python 3 compatible NTLM library (requires md4, thus legacy OpenSSL settings)
 License:             MIT
 URL:                 https://pypi.python.org/pypi/%{pypi_name}
 Source0:             https://github.com/%{gh_owner}/%{pypi_name}/archive/v%{version}.tar.gz#/%{srcname}-%{version}.tar.gz
@@ -13,9 +13,12 @@ BuildArch:           noarch
 BuildRequires:       python3-setuptools python3-devel python3-pytest python3-requests
 BuildRequires:       python3dist(cryptography)
 %description
- This package allows Python clients running on any operating system to provide
+This package allows Python clients running on any operating system to provide
 NTLM authentication to a supporting server.
 
+With OpenSSL 3 or above, the legacy OpenSSL provider needs to be set in order
+to support md4 in Python.
+
 %package -n     python3-%{srcname}
 Obsoletes:           python3-ntlm3 < 1.0.3-1
 Provides:            python3-ntlm3 = %{version}-%{release}
@@ -36,6 +39,26 @@ rm -rf %{pypi_name}.egg-info
 %py3_install
 
 %check
+# see https://github.com/jborean93/ntlm-auth/issues/22
+cat > openssl.cnf << EOF
+openssl_conf = openssl_init
+
+[openssl_init]
+providers = provider_sect
+
+[provider_sect]
+default = default_sect
+legacy = legacy_sect
+
+[default_sect]
+activate = 1
+
+[legacy_sect]
+activate = 1
+EOF
+
+export OPENSSL_CONF=${PWD}/openssl.cnf
+
 %{__python3} -m pytest --ignore=tests/functional/test_iis.py tests
 
 %files -n python3-%{srcname}
@@ -45,6 +68,9 @@ rm -rf %{pypi_name}.egg-info
 %{python3_sitelib}/%{library_name}-%{version}-py%{python3_version}.egg-info
 
 %changelog
+* Thu Feb 2 2023 liyanan <liyanan32@h-partners.com> - 1.5.0-2
+- Use the legacy OpenSSL provider in %check to support md4
+
 * Thu Jun 23 2022 SimpleUpdate Robot <tc@openeuler.org> - 1.5.0-1
 - Upgrade to version 1.5.0
 
-- 
Gitee