pesign-obs-integration-10.2+git20210804.ff18da1-150600.10.3.1 < > , @ hʱp9|; Т>}I1[D̽zX<5 X r_)e):4 1!i`fPU]ENM
>S[T6^vtEa $2cf^PG&[rQϗ a"Ī bS"BFiϡ.ALwr櫱,Xa Q }_̢φ}$N5@u'
hsݒ8b;gvrn4n4&aCxNei# > > & ? & d 2 @ u 1 R _ u ,
H
T ( ` | ( 8 ( 9 P ( :
( F ! G ! H !X I ! X ! Y ! \ ! ] "0 ^ # b # c $ d % e %% f %( l %* u %< v %t w % x & y &H z &d &t &x &~ & C pesign-obs-integration 10.2+git20210804.ff18da1 150600.10.3.1 Macros and scripts to sign the kernel and bootloader This package provides scripts and rpm macros to automate signing of the
boot loader, kernel and kernel modules in the openSUSE Buildservice. hʱh03-ch2b Z+SUSE Linux Enterprise 15 SUSE LLC GPL-2.0-only https://www.suse.com/ Development/Tools/Other https://en.opensuse.org/openSUSE:UEFI_Image_File_Sign_Tools linux x86_64 F M Q C : 8 8 FAA큤A큤A큤 hʱa
hʱhʱhʱhʱhʱhʱhʱhʱhʱhʱhʱa
fa0630a3d844492fee082ab6e31f933b1d070253e2c2bcaa8f69bf1416ef189a 486ae4160faa2864919971fd27f7beb2bda3e4fecad439a0019e9e6cf06b4caa 9e1b9bc5487761d9d9ff385643f4b5f1df20c8afe9e2b088b277203569afe020 b68adc34332fe389370bb34a22c328513dd1b9933ca9a4f48426065a705cb9cb ceb03255b13accfe7cfc36caaedb1cbcefc259177c580669a85d0e053fc9ccb3 1b2e994737be90eb0136acfff9c2fd7dbd21a74a616c5a6eeb0255223eca0616 4185c2f8e5dd03f2a60f538f66b1db2fd1818f7bb8b6ed53389288354f549f09 9fe57247ac2554b33cb8b74112f6af0fcd30c2881978b0afe383813b98af6ef0 f16ed80f059b800dab98d1c5afb80f03ca3c4669f4ace2ee172617a6c30cf0fa 8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643 root root root root root root root root root root root root root root root root root root root root root root root root root root root root pesign-obs-integration-10.2+git20210804.ff18da1-150600.10.3.1.src.rpm pesign-obs-integration pesign-obs-integration(x86-64) @ @
/bin/bash /usr/bin/perl fipscheck mozilla-nss-tools openssl pesign rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) suse-module-tools 3.0.4-1 4.6.0-1 4.0-1 5.2-1 15.0.10 4.14.3 h@cױ@c#@a@a
@a`@`@``T@_@_"_9_O@_^V]^M#@]µ]µ]o@]B@\t@\ޢ@\\,@\[ٙ@[ [ d@[o[)ZZY˒YǞ@Y@X=mV'@T@T@jlee@suse.com jlee@suse.com jlee@suse.com msuchanek@suse.com lnussel@suse.de lnussel@suse.de dmueller@suse.com glin@suse.com lnussel@suse.de glin@suse.com glin@suse.com dmueller@suse.com dmueller@suse.com glin@suse.com glin@suse.com meissner@suse.com meissner@suse.com jslaby@suse.com glin@suse.com msuchanek@suse.com glin@suse.com glin@suse.com guillaume.gardet@opensuse.org glin@suse.com glin@suse.com glin@suse.com glin@suse.com glin@suse.com glin@suse.com glin@suse.com glin@suse.com glin@suse.com jlee@suse.com jlee@suse.com coolo@suse.com jlee@suse.com mmarek@suse.cz glin@suse.com mmarek@suse.cz mmarek@suse.cz - Add the following patches for bsc#1248618:
- Bug 1248618 - pesign-obs-integration fails build when no signed binary is produced
- bsc1248618-Create-archive-first.patch
- bsc1248618-Skip-signing-when-there-are-no-files-to-sign-bsc-124.patch
- bsc1248618-pesign-repackage.spec.in-Stop-repacking-process-when.patch - Add 0001-Add-support-for-dependency-generators.patch to
- Add support for including macros in pesign-repackage.spec by
using pesign-spec-macros
- Add support for copying sources to the new build directory by
using pesign-copy-sources
- Update README for dependency generation
- Add Dependency Generation section
- Convert to Markdown
(bsc#1207520)(jsc#PED-2658) - Add 0001-pesign-gen-repackage-spec-fix-the-filename-issue-in-.patch
to fix fix the filename issue in the scripts of generated ueficert
package. (bsc#1195805)(bsc#1205917) - Support signing grub on powerpc (jsc#SLE-18271 bsc#1192764).
+ 0001-Support-ppc-grub-signing-jsc-SLE-18271-bsc-1192764.patch
+ 0002-kernel-sign-file-Move-x509-parsing-into-a-function.patch
+ 0003-kernel-sign-file-Support-appending-verbatim-PKCS-7-s.patch
+ 0004-Add-padding-to-grub-signature-correctly-jsc-SLE-1827.patch - Update to version 10.2+git20210804.ff18da1:
* brp-99-pesign: fix that the signature of shim be broken - Update to version 10.2+git20210730.0cb100c:
* Sign kernel also in module dir (boo#1184804)
(replaces pesign-kernel-in-lib.diff)
- switch package to obs_scm to avoid recompression - Update to version git master (10.2):
* Add support for GZIP and ZSTD module compression (bsc#1188636)
* Always pad the EFI image when calculating the hash
* Version bump to 10.2
* approach issue#22 false noarch subpackage
- drop pesign-obs-integration-bsc1183747-always-pad-efi-images.patch
pesign-obs-integration-support-gzip-zstd-compression.patch (merged) - Add pesign-obs-integration-support-gzip-zstd-compression.patch
to support gzip and zstd module compression - find kernel also in /lib (boo#1184804, pesign-kernel-in-lib.diff) - Add pesign-obs-integration-bsc1183747-always-pad-efi-images.patch
to fix the potential hash mismatching (bsc#1183747) - Update to version 10.2:
* Fix the wrongly created noarch subpackages
(issue#22, bsc#1180242) - Update to version 10.1+1602850462:
* Compress kernel modules in batch and in parallel (bsc#1188636)
* Forward _binary_payload to the repackaged rpm (bsc#1175882)
- remove 0001-Forward-_binary_payload-to-the-repackaged-rpm.patch,
parallel-compression.patch (upstream) - Sync from git master directly
- drop 0001-Add-support-for-kernel-module-compression.patch
0001-Enable-find_provides-and-requires.patch
0001-Initialize-compress-variable.patch
0001-Keep-the-files-in-the-OTHER-directory.patch
0001-Passthrough-license-tag.patch
0001-brp-99-compress-vmlinux-support-xz-compressed-vmlinu.patch
0001-sign-stage3.bin-from-s390-tools-with-sign-files-bsc-.patch
pesign-sign-s390x-kernel.patch (upstream)
- add parallel-compression.patch - Add 0001-Forward-_binary_payload-to-the-repackaged-rpm.patch to
forward _binary_payload to the repackaged rpm (bsc#1175882) - Add 0001-Enable-find_provides-and-requires.patch
(bsc#1114605, bsc#1180279)
+ Enable this patch again since virtualbox-kmp is split from
the main package so the customized %find_provides for
virtualbox-x11-guest won't be affected anymore. - pesign-sign-s390x-kernel.patch: Sign also the non-PE (e.g. s390x)
kernels with just kernel-sign-file (bsc#1163524) - 0001-sign-stage3.bin-from-s390-tools-with-sign-files-bsc-.patch
Hard code signing of stage3.bin of s390-tools (bsc#1163524) - 0001-brp-99-compress-vmlinux-support-xz-compressed-vmlinu.patch
to support xz-compressed vmlinux (bnc#1155921) - 0001-Keep-the-files-in-the-OTHER-directory.patch to keep the
files in the OTHER directory (boo#1155474) - Require pesign on arm (boo#1134303). - Add 0001-Initialize-compress-variable.patch to initialize
$compress in pesign-gen-repackage-spec to avoid warning - Add 0001-Add-support-for-kernel-module-compression.patch to
support kernel module compression (bsc#1135854, jsc#SLE-16661) - pesign is also available on %arm (boo#1134303). - Drop 0002-Enable-find_provides-and-requires.patch due to the
build failure of virtualbox-guest-x11 - rpm: forward the missing rpm bits (bsc#1114605, bsc#1180279)
+ 0001-Passthrough-license-tag.patch
+ 0002-Enable-find_provides-and-requires.patch - Version 10.1
- Add modsign-verify for the signature verification (bsc#1118953) - rpm: properly forward dep flags (bsc#1114605)
- Fix new Lintian Error from Debian 10 - debhelper: restrict wildcard package unpacking - debhelper: fix conffiles corner case - Remove the unstable source url
- Update the debian scripts - Switch to tarball release - Provide password file for 'certutil -A' due to the change in
mozilla-nss 3.35 (boo#1082235) - Modified modsign-repackage, using certificate to try to decrypt
the signature of kernel module. It can be used to verify the
integrity of signature. - Michael Schröder improved the original kernel-sign-file script to
support PKCS#7 kernel module signing. Replacing sign-file.c with
new kernel-sign-file script. (bsc#1049122) - escape regexp in pesign-gen-repackage-spec for perl 5.26 - To support PKCS#7 kernel module signing, copy sign-file.c from
SLE-15 v4.12 kernel source to replace the kernel-sign-file script
to align upstream. (bsc#1049122) - Copy over any *.log files from the first build (bsc#1012422) - Add aarch64 support since pesign also build on aarch64 - Add support for file verify flags (bnc#905420). - Sort the parts of the repackage spec file for easier debugging. h03-ch2b 1757530801
10.2+git20210804.ff18da1-150600.10.3.1 10.2+git20210804.ff18da1-150600.10.3.1 modsign-repackage modsign-verify brp-suse.d brp-99-compress-vmlinux brp-99-pesign pesign gen-hmac kernel-sign-file pesign-gen-repackage-spec pesign-repackage.spec.in pesign-obs-integration README.md pesign-obs-integration COPYING /usr/bin/ /usr/lib/rpm/ /usr/lib/rpm/brp-suse.d/ /usr/lib/rpm/pesign/ /usr/share/doc/packages/ /usr/share/doc/packages/pesign-obs-integration/ /usr/share/licenses/ /usr/share/licenses/pesign-obs-integration/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:40604/SUSE_SLE-15-SP6_Update/d4f250925aab8fcae1c2120b0b04d680-pesign-obs-integration.SUSE_SLE-15-SP6_Update drpm xz 5 x86_64-suse-linux Bourne-Again shell script, ASCII text executable Perl script text executable directory ASCII text R R R R R R R ɪ|AH<)N utf-8 7e6ccc85d74ba31a4f576d201da26e982ced14cd37bb28e60bb6368fe2d335dc ? 7zXZ
! t/A] "k%Z?kD&%md4u @ƫ%M'9eDt=PE4W
vAzwB{BN^mzL]ѓ4`^)*E7xUb& L{ LqKma1m\8vqAt_?BtW:N?gsb<4_㬳ob~V
Aߓ.aޱ87LDY( U@йX MMs P0"lAvHI._a!v$XvU^~%H$휋V?,Qn?*ױƛ/o&-0Z`Z`&@i}l8o!'KcE?Zoغ,U,N*V0 <#D15Y bTp s: IaA'I0{x $ ,o12n/>Q1VtX5ޑ&+)h+o&Ә H B7F+ln֪Vur@'
J{i1*?Hj >+(;Jvm&3rtퟏ}0 k&h)օx@`/4LI
Zۢh7 AՉVx_sLIL#"I1}ߨՓRE mHF"4pI Kkp_q/SrRht%۰;eL.*8m5jh4
Da ^#k
{ Fo 3Z11lrDW
+VxS셤Jv68.a~#LT3B>JvOmiT#K.Z$\tN/·"N6n/4 #F윱jA<׆K"5ʐ`T(@(*QB?%Ly Waٳ$GW$м(j`:])wX Ɉ=-`&S} Ut˟L&QAzS27+a6BGЀBKW|1ͮLuPxq9Jp/{51tDl'c{V S45 _WI
y
gлQ뛥9
g
t#Qx ei- gry ޢ%`_vBIh;,1_hӧ(^rZ鬧gVO3ͳh+n==tWE1rT$}Ezqj (.~\8~DeiXbvM)x\\@M֖Q/D ؇4sZ W/g_9p3ScDUX A~` Fo!,S,ѫRMEwnUub?K=]wW,* be $1cDW!i&K\mEBb7u()Shz]jmi}Wy]WgrT!zX[{~Ql|מ,S ͽA /`#u J0 VS wĻX|I5$ z"yGVUkqʿ9Q1cxVRxI j(;z?*) )ضWG1[_&ΨN:IIha&REfp
Lk/d2w[Y5Y ApQa\vepdHl1<\5Ft lans'M({!SJnz 5W t8E|N<ŚV X/Ewlf?1`Y #NP c-;wdFu :ȺqO{H `"k! $]3]V= 9=i(#B$;oFq0]ZRK`DOF(шzD0z5/*
4EZ`S!@څ L[6<-k"\SYJ)IUJq3uD,C g%0Q:~@;Q
l7DRS D 2*
-Qd؈ ?GY7)f[7G!jvdY̗l CR
wҟm
,qh}&5C:;6֊0Ͳ6Hjbeطw6>Lq!S4 jkp ˈzBSJa8I"wn ;e ݶRN ӕ f7(Sa)0--vЦ!1ș"hfc1p#vzr<6 0):oii _ E67 6.L%@yWΰ ٮ5{V'ͯ2c4Q1+Ʀ%%"p6Y, +k#RNoWC6q\G@(13V #[c8.o§WXܐ\
`*ѤlA 쾯w Fi/ %Ekm's6ɃȈ 7RRޘZ'U1Mi#)x ]/lZ#wu(Q9`}*.ca&^aGJ@OW.@ƋԐ6
v!pArZƨE\j9RB w#~{A*ZF˸ Ҧ
'2zuN7tPŨ,-mFvF e.4tP T4SU#yv@OYf#⒣qb8cќ:m&pP%~`'j hFjyjv-D!CyukfYߘƘ]@L"o-56 Rњ6>MҞbD_̃צAyl C
YzDqH؋GLR}%+&\Kh' J[+%\PCñ S"-̵_Izg(r̷=
wdѱYϪ7 %2&Vi ɣJgeeh>J ȕ}3/cc8>.2Y*(2U
)IXrT!#QG
gpz,u<50&e@Ĉ"# `,^XTjԥF"G]Rl;G%HA[U W[* e"_/L|_"g`TQ|R&3 °IV mՃfo?uQ#ӅM>| ApH F] 9nt22wda"|)!ȩVDNx=0Kh廁)n> Gw-5_þʸS*hB*$b=%oaDZg)1!3l?dX4Q kW[~Uv Of<饻Jyzцv i h5zJb; ?հ.&sq֭W'=>hs[F]ND݀}K$#ұC,3ɠ/`tDU;K]zPV 'BImz3]߀椀@MPrꃈkK (ʾĆ/fY 5M7P(~5ܕ2ퟻ='`:0
7TPe Y6xlxg( \~Y a0NVs/>?-6K)Z+gby&
bGC&qr -}6iC+hQ~DTBhEp_N&GH
_ܕ>-*7C;骺Pu}^l HZ DV?[ 4_A x\8J+0U`
;~? ϕIL*)_&Ntp\PcC 㻂5\t9STSw ;; xW׳>~~!lG+M0W ASҶϾ (5GoXfQv7^ ;fNлV>>o[W+zY}b# ru@#xt}W[fB`#7g0qB(zCC,
4WekuP+6 O2 "=@p-F.; B
AaxOwwTW}I"tbe?{fz]Go艀''! O6k[n<7ÀgJE + J(
YZ