%define no-flags-common no-mdc2 no-rc5 no-ec2m no-gost no-srp
%define no-flags %{no-flags-common}

%ifarch aarch64
%define no-flags %{no-flags-common} no-asm
%endif
# ia64, x86_64, ppc, ppc64 are OK by default
# Configure the build tree.  Override OpenSSL defaults with known-good defaults
# usable on all platforms.  The Configure script already knows to use -fPIC and
# RPM_OPT_FLAGS, so we can skip specifiying them here.

./Configure \
    --prefix=/usr --openssldir=%{_sysconfdir}/pki/tls ${sslflags} \
    zlib enable-camellia enable-seed enable-tlsext enable-rfc3779 \
    enable-cms enable-md2 %{no-flags} \
       --enginesdir=%{_libdir}/openssl/engines \
       shared  ${sslarch} %{?!nofips:fips}