Index index by Group index by Distribution index by Vendor index by creation date index by Name Mirrors Help Search

pesign-obs-integration-10.2+git20210804.ff18da1-150400.1.14 RPM for x86_64

From OpenSuSE Leap 15.4 for x86_64

Name: pesign-obs-integration Distribution: SUSE Linux Enterprise 15
Version: 10.2+git20210804.ff18da1 Vendor: SUSE LLC <https://www.suse.com/>
Release: 150400.1.14 Build date: Sat May 7 23:24:01 2022
Group: Development/Tools/Other Build host: sheep53
Size: 86206 Source RPM: pesign-obs-integration-10.2+git20210804.ff18da1-150400.1.14.src.rpm
Packager: https://www.suse.com/
Url: https://en.opensuse.org/openSUSE:UEFI_Image_File_Sign_Tools
Summary: Macros and scripts to sign the kernel and bootloader
This package provides scripts and rpm macros to automate signing of the
boot loader, kernel and kernel modules in the openSUSE Buildservice.

Provides

Requires

License

GPL-2.0-only

Changelog

* Fri Jan 21 2022 msuchanek@suse.com
  - Support signing grub on powerpc (jsc#SLE-18271 bsc#1192764).
    + 0001-Support-ppc-grub-signing-jsc-SLE-18271-bsc-1192764.patch
    + 0002-kernel-sign-file-Move-x509-parsing-into-a-function.patch
    + 0003-kernel-sign-file-Support-appending-verbatim-PKCS-7-s.patch
    + 0004-Add-padding-to-grub-signature-correctly-jsc-SLE-1827.patch
* Wed Aug 04 2021 lnussel@suse.de
  - Update to version 10.2+git20210804.ff18da1:
    * brp-99-pesign: fix that the signature of shim be broken
* Fri Jul 30 2021 lnussel@suse.de
  - Update to version 10.2+git20210730.0cb100c:
    * Sign kernel also in module dir (boo#1184804)
      (replaces pesign-kernel-in-lib.diff)
  - switch package to obs_scm to avoid recompression
* Fri Jul 23 2021 dmueller@suse.com
  - Update to version git master (10.2):
    * Add support for GZIP and ZSTD module compression (bsc#1188636)
    * Always pad the EFI image when calculating the hash
    * Version bump to 10.2
    * approach issue#22 false noarch subpackage
  - drop pesign-obs-integration-bsc1183747-always-pad-efi-images.patch
    pesign-obs-integration-support-gzip-zstd-compression.patch (merged)
* Mon Jun 21 2021 glin@suse.com
  - Add pesign-obs-integration-support-gzip-zstd-compression.patch
    to support gzip and zstd module compression
* Fri Apr 23 2021 lnussel@suse.de
  - find kernel also in /lib (boo#1184804, pesign-kernel-in-lib.diff)
* Fri Mar 19 2021 glin@suse.com
  - Add pesign-obs-integration-bsc1183747-always-pad-efi-images.patch
    to fix the potential hash mismatching (bsc#1183747)
* Mon Dec 21 2020 glin@suse.com
  - Update to version 10.2:
    * Fix the wrongly created noarch subpackages
      (issue#22, bsc#1180242)
* Wed Oct 21 2020 dmueller@suse.com
  - Update to version 10.1+1602850462:
    * Compress kernel modules in batch and in parallel (bsc#1188636)
    * Forward _binary_payload to the repackaged rpm (bsc#1175882)
  - remove 0001-Forward-_binary_payload-to-the-repackaged-rpm.patch,
    parallel-compression.patch (upstream)
* Thu Oct 15 2020 dmueller@suse.com
  - Sync from git master directly
  - drop 0001-Add-support-for-kernel-module-compression.patch
    0001-Enable-find_provides-and-requires.patch
    0001-Initialize-compress-variable.patch
    0001-Keep-the-files-in-the-OTHER-directory.patch
    0001-Passthrough-license-tag.patch
    0001-brp-99-compress-vmlinux-support-xz-compressed-vmlinu.patch
    0001-sign-stage3.bin-from-s390-tools-with-sign-files-bsc-.patch
    pesign-sign-s390x-kernel.patch (upstream)
  - add parallel-compression.patch
* Wed Sep 02 2020 glin@suse.com
  - Add 0001-Forward-_binary_payload-to-the-repackaged-rpm.patch to
    forward _binary_payload to the repackaged rpm (bsc#1175882)
* Fri Jul 17 2020 glin@suse.com
  - Add 0001-Enable-find_provides-and-requires.patch
    (bsc#1114605, bsc#1180279)
    + Enable this patch again since virtualbox-kmp is split from
      the main package so the customized %find_provides for
      virtualbox-x11-guest won't be affected anymore.
* Wed Feb 26 2020 meissner@suse.com
  - pesign-sign-s390x-kernel.patch: Sign also the non-PE (e.g. s390x)
    kernels with just kernel-sign-file (bsc#1163524)
* Wed Feb 19 2020 meissner@suse.com
  - 0001-sign-stage3.bin-from-s390-tools-with-sign-files-bsc-.patch
    Hard code signing of stage3.bin of s390-tools (bsc#1163524)
* Wed Nov 06 2019 jslaby@suse.com
  - 0001-brp-99-compress-vmlinux-support-xz-compressed-vmlinu.patch
    to support xz-compressed vmlinux (bnc#1155921)
* Wed Nov 06 2019 glin@suse.com
  - 0001-Keep-the-files-in-the-OTHER-directory.patch to keep the
    files in the OTHER directory (boo#1155474)
* Wed Sep 04 2019 msuchanek@suse.com
  - Require pesign on arm (boo#1134303).
* Thu Aug 01 2019 glin@suse.com
  - Add 0001-Initialize-compress-variable.patch to initialize
    $compress in pesign-gen-repackage-spec to avoid warning
* Wed May 29 2019 glin@suse.com
  - Add 0001-Add-support-for-kernel-module-compression.patch to
    support kernel module compression (bsc#1135854, jsc#SLE-16661)
* Fri May 17 2019 guillaume.gardet@opensuse.org
  - pesign is also available on %arm (boo#1134303).
* Tue Apr 16 2019 glin@suse.com
  - Drop 0002-Enable-find_provides-and-requires.patch due to the
    build failure of virtualbox-guest-x11
* Thu Apr 11 2019 glin@suse.com
  - rpm: forward the missing rpm bits (bsc#1114605, bsc#1180279)
    + 0001-Passthrough-license-tag.patch
    + 0002-Enable-find_provides-and-requires.patch
* Tue Dec 11 2018 glin@suse.com
  - Version 10.1
  - Add modsign-verify for the signature verification (bsc#1118953)
* Wed Oct 31 2018 glin@suse.com
  - rpm: properly forward dep flags (bsc#1114605)
  - Fix new Lintian Error from Debian 10
* Tue Jun 12 2018 glin@suse.com
  - debhelper: restrict wildcard package unpacking
* Mon Jun 11 2018 glin@suse.com
  - debhelper: fix conffiles corner case
* Fri Jun 08 2018 glin@suse.com
  - Remove the unstable source url
  - Update the debian scripts
* Mon Jun 04 2018 glin@suse.com
  - Switch to tarball release
* Thu Feb 22 2018 glin@suse.com
  - Provide password file for 'certutil -A' due to the change in
    mozilla-nss 3.35 (boo#1082235)
* Wed Nov 08 2017 jlee@suse.com
  - Modified modsign-repackage, using certificate to try to decrypt
    the signature of kernel module. It can be used to verify the
    integrity of signature.
* Wed Sep 27 2017 jlee@suse.com
  - Michael Schröder improved the original kernel-sign-file script to
    support PKCS#7 kernel module signing. Replacing sign-file.c with
    new kernel-sign-file script. (bsc#1049122)
* Sun Sep 24 2017 coolo@suse.com
  - escape regexp in pesign-gen-repackage-spec for perl 5.26
* Wed Sep 06 2017 jlee@suse.com
  - To support PKCS#7 kernel module signing, copy sign-file.c from
    SLE-15 v4.12 kernel source to replace the kernel-sign-file script
    to align upstream. (bsc#1049122)
* Tue Nov 29 2016 mmarek@suse.cz
  - Copy over any *.log files from the first build (bsc#1012422)
* Thu Mar 03 2016 glin@suse.com
  - Add aarch64 support since pesign also build on aarch64
* Thu Jan 22 2015 mmarek@suse.cz
  - Add support for file verify flags (bnc#905420).
* Thu Jan 22 2015 mmarek@suse.cz
  - Sort the parts of the repackage spec file for easier debugging.

Files

/usr/bin/modsign-repackage
/usr/bin/modsign-verify
/usr/lib/rpm/brp-suse.d
/usr/lib/rpm/brp-suse.d/brp-99-compress-vmlinux
/usr/lib/rpm/brp-suse.d/brp-99-pesign
/usr/lib/rpm/pesign
/usr/lib/rpm/pesign/gen-hmac
/usr/lib/rpm/pesign/kernel-sign-file
/usr/lib/rpm/pesign/pesign-gen-repackage-spec
/usr/lib/rpm/pesign/pesign-repackage.spec.in
/usr/share/doc/packages/pesign-obs-integration
/usr/share/doc/packages/pesign-obs-integration/README
/usr/share/licenses/pesign-obs-integration
/usr/share/licenses/pesign-obs-integration/COPYING


Generated by rpm2html 1.8.1

Fabrice Bellet, Sat Mar 9 17:02:19 2024