pesign-obs-integration-10.2+git20210804.ff18da1-150600.10.3.1 < > , = hʱp9|7,wkSى+@79 6 t&]%.b*;ܐ $&(p~]%05J|XuPՑ$51 yl KЖ Hw]@2gdˬ7r9` ,LWWK *ݲ1\ ӋpS 5s%yAz#%Ȭ
"#<Z N@!}^},&wQwZ =7(# > > & ? & d 2 @ u 1 R _ u ,
H
T ( ` | ( 8 ( 9 P ( :
( F ! G ! H !X I ! X ! Y ! \ ! ] "0 ^ # b # c $ d % e %% f %( l %* u %< v %t w % x & y &H z &d &t &x &~ & C pesign-obs-integration 10.2+git20210804.ff18da1 150600.10.3.1 Macros and scripts to sign the kernel and bootloader This package provides scripts and rpm macros to automate signing of the
boot loader, kernel and kernel modules in the openSUSE Buildservice. hʱh03-ch2b Z+SUSE Linux Enterprise 15 SUSE LLC GPL-2.0-only https://www.suse.com/ Development/Tools/Other https://en.opensuse.org/openSUSE:UEFI_Image_File_Sign_Tools linux x86_64 F M Q C : 8 8 FAA큤A큤A큤 hʱa
hʱhʱhʱhʱhʱhʱhʱhʱhʱhʱhʱa
fa0630a3d844492fee082ab6e31f933b1d070253e2c2bcaa8f69bf1416ef189a 486ae4160faa2864919971fd27f7beb2bda3e4fecad439a0019e9e6cf06b4caa 9e1b9bc5487761d9d9ff385643f4b5f1df20c8afe9e2b088b277203569afe020 b68adc34332fe389370bb34a22c328513dd1b9933ca9a4f48426065a705cb9cb ceb03255b13accfe7cfc36caaedb1cbcefc259177c580669a85d0e053fc9ccb3 1b2e994737be90eb0136acfff9c2fd7dbd21a74a616c5a6eeb0255223eca0616 4185c2f8e5dd03f2a60f538f66b1db2fd1818f7bb8b6ed53389288354f549f09 9fe57247ac2554b33cb8b74112f6af0fcd30c2881978b0afe383813b98af6ef0 f16ed80f059b800dab98d1c5afb80f03ca3c4669f4ace2ee172617a6c30cf0fa 8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643 root root root root root root root root root root root root root root root root root root root root root root root root root root root root pesign-obs-integration-10.2+git20210804.ff18da1-150600.10.3.1.src.rpm pesign-obs-integration pesign-obs-integration(x86-64) @ @
/bin/bash /usr/bin/perl fipscheck mozilla-nss-tools openssl pesign rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) suse-module-tools 3.0.4-1 4.6.0-1 4.0-1 5.2-1 15.0.10 4.14.3 h@cױ@c#@a@a
@a`@`@``T@_@_"_9_O@_^V]^M#@]µ]µ]o@]B@\t@\ޢ@\\,@\[ٙ@[ [ d@[o[)ZZY˒YǞ@Y@X=mV'@T@T@jlee@suse.com jlee@suse.com jlee@suse.com msuchanek@suse.com lnussel@suse.de lnussel@suse.de dmueller@suse.com glin@suse.com lnussel@suse.de glin@suse.com glin@suse.com dmueller@suse.com dmueller@suse.com glin@suse.com glin@suse.com meissner@suse.com meissner@suse.com jslaby@suse.com glin@suse.com msuchanek@suse.com glin@suse.com glin@suse.com guillaume.gardet@opensuse.org glin@suse.com glin@suse.com glin@suse.com glin@suse.com glin@suse.com glin@suse.com glin@suse.com glin@suse.com glin@suse.com jlee@suse.com jlee@suse.com coolo@suse.com jlee@suse.com mmarek@suse.cz glin@suse.com mmarek@suse.cz mmarek@suse.cz - Add the following patches for bsc#1248618:
- Bug 1248618 - pesign-obs-integration fails build when no signed binary is produced
- bsc1248618-Create-archive-first.patch
- bsc1248618-Skip-signing-when-there-are-no-files-to-sign-bsc-124.patch
- bsc1248618-pesign-repackage.spec.in-Stop-repacking-process-when.patch - Add 0001-Add-support-for-dependency-generators.patch to
- Add support for including macros in pesign-repackage.spec by
using pesign-spec-macros
- Add support for copying sources to the new build directory by
using pesign-copy-sources
- Update README for dependency generation
- Add Dependency Generation section
- Convert to Markdown
(bsc#1207520)(jsc#PED-2658) - Add 0001-pesign-gen-repackage-spec-fix-the-filename-issue-in-.patch
to fix fix the filename issue in the scripts of generated ueficert
package. (bsc#1195805)(bsc#1205917) - Support signing grub on powerpc (jsc#SLE-18271 bsc#1192764).
+ 0001-Support-ppc-grub-signing-jsc-SLE-18271-bsc-1192764.patch
+ 0002-kernel-sign-file-Move-x509-parsing-into-a-function.patch
+ 0003-kernel-sign-file-Support-appending-verbatim-PKCS-7-s.patch
+ 0004-Add-padding-to-grub-signature-correctly-jsc-SLE-1827.patch - Update to version 10.2+git20210804.ff18da1:
* brp-99-pesign: fix that the signature of shim be broken - Update to version 10.2+git20210730.0cb100c:
* Sign kernel also in module dir (boo#1184804)
(replaces pesign-kernel-in-lib.diff)
- switch package to obs_scm to avoid recompression - Update to version git master (10.2):
* Add support for GZIP and ZSTD module compression (bsc#1188636)
* Always pad the EFI image when calculating the hash
* Version bump to 10.2
* approach issue#22 false noarch subpackage
- drop pesign-obs-integration-bsc1183747-always-pad-efi-images.patch
pesign-obs-integration-support-gzip-zstd-compression.patch (merged) - Add pesign-obs-integration-support-gzip-zstd-compression.patch
to support gzip and zstd module compression - find kernel also in /lib (boo#1184804, pesign-kernel-in-lib.diff) - Add pesign-obs-integration-bsc1183747-always-pad-efi-images.patch
to fix the potential hash mismatching (bsc#1183747) - Update to version 10.2:
* Fix the wrongly created noarch subpackages
(issue#22, bsc#1180242) - Update to version 10.1+1602850462:
* Compress kernel modules in batch and in parallel (bsc#1188636)
* Forward _binary_payload to the repackaged rpm (bsc#1175882)
- remove 0001-Forward-_binary_payload-to-the-repackaged-rpm.patch,
parallel-compression.patch (upstream) - Sync from git master directly
- drop 0001-Add-support-for-kernel-module-compression.patch
0001-Enable-find_provides-and-requires.patch
0001-Initialize-compress-variable.patch
0001-Keep-the-files-in-the-OTHER-directory.patch
0001-Passthrough-license-tag.patch
0001-brp-99-compress-vmlinux-support-xz-compressed-vmlinu.patch
0001-sign-stage3.bin-from-s390-tools-with-sign-files-bsc-.patch
pesign-sign-s390x-kernel.patch (upstream)
- add parallel-compression.patch - Add 0001-Forward-_binary_payload-to-the-repackaged-rpm.patch to
forward _binary_payload to the repackaged rpm (bsc#1175882) - Add 0001-Enable-find_provides-and-requires.patch
(bsc#1114605, bsc#1180279)
+ Enable this patch again since virtualbox-kmp is split from
the main package so the customized %find_provides for
virtualbox-x11-guest won't be affected anymore. - pesign-sign-s390x-kernel.patch: Sign also the non-PE (e.g. s390x)
kernels with just kernel-sign-file (bsc#1163524) - 0001-sign-stage3.bin-from-s390-tools-with-sign-files-bsc-.patch
Hard code signing of stage3.bin of s390-tools (bsc#1163524) - 0001-brp-99-compress-vmlinux-support-xz-compressed-vmlinu.patch
to support xz-compressed vmlinux (bnc#1155921) - 0001-Keep-the-files-in-the-OTHER-directory.patch to keep the
files in the OTHER directory (boo#1155474) - Require pesign on arm (boo#1134303). - Add 0001-Initialize-compress-variable.patch to initialize
$compress in pesign-gen-repackage-spec to avoid warning - Add 0001-Add-support-for-kernel-module-compression.patch to
support kernel module compression (bsc#1135854, jsc#SLE-16661) - pesign is also available on %arm (boo#1134303). - Drop 0002-Enable-find_provides-and-requires.patch due to the
build failure of virtualbox-guest-x11 - rpm: forward the missing rpm bits (bsc#1114605, bsc#1180279)
+ 0001-Passthrough-license-tag.patch
+ 0002-Enable-find_provides-and-requires.patch - Version 10.1
- Add modsign-verify for the signature verification (bsc#1118953) - rpm: properly forward dep flags (bsc#1114605)
- Fix new Lintian Error from Debian 10 - debhelper: restrict wildcard package unpacking - debhelper: fix conffiles corner case - Remove the unstable source url
- Update the debian scripts - Switch to tarball release - Provide password file for 'certutil -A' due to the change in
mozilla-nss 3.35 (boo#1082235) - Modified modsign-repackage, using certificate to try to decrypt
the signature of kernel module. It can be used to verify the
integrity of signature. - Michael Schröder improved the original kernel-sign-file script to
support PKCS#7 kernel module signing. Replacing sign-file.c with
new kernel-sign-file script. (bsc#1049122) - escape regexp in pesign-gen-repackage-spec for perl 5.26 - To support PKCS#7 kernel module signing, copy sign-file.c from
SLE-15 v4.12 kernel source to replace the kernel-sign-file script
to align upstream. (bsc#1049122) - Copy over any *.log files from the first build (bsc#1012422) - Add aarch64 support since pesign also build on aarch64 - Add support for file verify flags (bnc#905420). - Sort the parts of the repackage spec file for easier debugging. h03-ch2b 1757530801
10.2+git20210804.ff18da1-150600.10.3.1 10.2+git20210804.ff18da1-150600.10.3.1 modsign-repackage modsign-verify brp-suse.d brp-99-compress-vmlinux brp-99-pesign pesign gen-hmac kernel-sign-file pesign-gen-repackage-spec pesign-repackage.spec.in pesign-obs-integration README.md pesign-obs-integration COPYING /usr/bin/ /usr/lib/rpm/ /usr/lib/rpm/brp-suse.d/ /usr/lib/rpm/pesign/ /usr/share/doc/packages/ /usr/share/doc/packages/pesign-obs-integration/ /usr/share/licenses/ /usr/share/licenses/pesign-obs-integration/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:40604/SUSE_SLE-15-SP6_Update/d4f250925aab8fcae1c2120b0b04d680-pesign-obs-integration.SUSE_SLE-15-SP6_Update drpm xz 5 x86_64-suse-linux Bourne-Again shell script, ASCII text executable Perl script text executable directory ASCII text R R R R R R R ɪ|AH<)N utf-8 7e6ccc85d74ba31a4f576d201da26e982ced14cd37bb28e60bb6368fe2d335dc ? 7zXZ
! t/: ] "k%Z?kD&%md4uf_Y}Y^.x0ee^̟w鑒A_Ke. NF٪kL
>yČwyG鰕fPF#j*)\ؔ'
F+#PA.?Y&hCgvqFn_]wK)%f}RM7m H҈zl,&.fms ᴧZ]5+w+J,#ҋ}esl){YF c[_]!orK_8X w%M6\ך+(`! xs4 q/Ooi N(J\PޓzJ#^:ٵXI-kNH>rǕv'\2rI
Y>3fNSN=+Qlz, w[
lx_ܱk6[uPxl&:O0@6dE<(N ~Ql_3`(5cKRh rkc~ϣFJkJ]/p
D8⧘,X :*:!0/_zrAyLN x |J`WDk
9huXs9"du;
I( RHiumpP{
E#[9~ iw{* -&ުCPm VXT&{rz Qv{U( ܰZtk0(a3xb0uxhVC9&q Ć[w'?GmR*FS|n\x/:o} +-fTA%*dUžLhɆ
Y=[Cw-# 辈Lj1/6;5Dx *s0Y #'S|:Vt/i 3~bOcb } ]^l呫 #7 ) [$hQ)!6yŪ^6_#mڶw|Kn-r%}HRf -wEq NNr(!1=F)ŌaـW(d@b>۽?Q-r@y;1~Xy\b(yeֆWn~@/hq?Aϧ#V Ѯn vb ^GJs'24][deeWK_a *8O+d L M
*ȱF9 yHJL|KbC BkR 5W3~j3G9]Ц9s,A:$Gf˧RQ}oŁ?8Y.=N]%&ތ3OUL/o 3# PWQ0샩$YYt!, b6 e8:҄aҷL9XRVcP." :{T!lM;3 \1ଣ'k=x#:ߕƦ1-㸽cK df}>dԓHiQLX[ưin-0!o+W6YXCri
SkȨp,Xڀo٩Sc riӝu]ĞޓszuW bXrF:(+ t"J
`K w6ыtiƥH5d:1c7[p%2M$8=Un Tᰣ8"NŞEY-% )) R$LLk2xHZ`vv#F6^x-Nzes GYmPSPF 6&C0TʞLԿ 8rkmRx >\+IT\ ѻޝNp/!5yP3
Év#? ,.v}jYq(M^ә¼v *B/c1
c1!T:?Kv\<
h] ?G rʹ#Ԅ& mg;ȑRk] BJ/PחN3kI B/-#AV)4XÉZPR!Pc==18rX:*)XK
(чHm( rԳ]Az+ 9CzgqUc?퍀}>-j`i|I,pHYFmQ 1ZX-_Btɞ;? owx)Vr/=8\(!ϕJ,Rꨖ0j 5aV]Hj$״% ԙ8$IAM/o#ֈʲ_3@}"Gc5Z%ⵔ`4]um>%|k . B m ܖ TtM_ ctIa 9d3qwtȦ¨,؞5!Tgw,FO@3UV=]щ"
A0kC e6α d{!_UyO@'k'l Sc:2ח\ 5YQ 4d[![Xj 9fr4JV%&):qUI Q$Ȑꇩ7~?(q!.
CXJ8YL7&3Y`h)ŀk:^T
\!dPJe:/K~ YA)ўk$N!%>rR'ʜ 7ağZޝ[ ] ^!$:愥H\?&
/إ[ &vD/FFk %z)vTJ 4# &)r/E6guN|)?dđ~<#ANzEK|)su7QHW.ca-+MvVO%HvΥ,C)˃(/ ֙||e$DP/&nw E X>rAl O?ؚV|7e7 +z7{z$UuO{,@-Gc(d9 У&6GR1g8hΘvmͿ7)p/R5IWdWNYÈyaUgs#.ņuXp-5N!yRqŎ:G39<[]X`}
2|V ;HyqܣK\]Fv]mYUuyLʣ;Y䚬#i8@K\F;'7Hr/,ﰋL6L߯+Ju&ДH=s vy d7"V `ٲAS<:bhғS[G|lnJ %t w
YZ