pesign-obs-integration-10.2+git20210804.ff18da1-150600.10.3.1<>,>؉hʱp9|\' 7Fo=-8d:Ӂwf)7[]~%٬~qc=tnm@\ BЊ,MISLqz ΐ-I&ӗNO HC u 9H6 >>&?&d2 @ u1R_ u , H   T(`  | (8(9P(: (F! G! H!XI!X!Y!\!]"0^#b#c$d% e%%f%(l%*u%<v%tw%x&y&Hz&d&t&x&~&Cpesign-obs-integration10.2+git20210804.ff18da1150600.10.3.1Macros and scripts to sign the kernel and bootloaderThis package provides scripts and rpm macros to automate signing of the boot loader, kernel and kernel modules in the openSUSE Buildservice.hʱh03-ch2bZ+SUSE Linux Enterprise 15SUSE LLC GPL-2.0-onlyhttps://www.suse.com/Development/Tools/Otherhttps://en.opensuse.org/openSUSE:UEFI_Image_File_Sign_Toolslinuxx86_64FMQC :8 8FAA큤A큤A큤hʱa hʱhʱhʱhʱhʱhʱhʱhʱhʱhʱhʱa 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-obs-integration-10.2+git20210804.ff18da1-150600.10.3.1.src.rpmpesign-obs-integrationpesign-obs-integration(x86-64)@@    /bin/bash/usr/bin/perlfipscheckmozilla-nss-toolsopensslpesignrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)suse-module-tools3.0.4-14.6.0-14.0-15.2-115.0.104.14.3h@cױ@c#@a@a @a`@`@``T@_@_"_9_O@_^V]^M#@]µ]µ]o@]B@\t@\ޢ@\\,@\[ٙ@[[d@[o[)ZZY˒YǞ@Y@X=mV'@T@T@jlee@suse.comjlee@suse.comjlee@suse.commsuchanek@suse.comlnussel@suse.delnussel@suse.dedmueller@suse.comglin@suse.comlnussel@suse.deglin@suse.comglin@suse.comdmueller@suse.comdmueller@suse.comglin@suse.comglin@suse.commeissner@suse.commeissner@suse.comjslaby@suse.comglin@suse.commsuchanek@suse.comglin@suse.comglin@suse.comguillaume.gardet@opensuse.orgglin@suse.comglin@suse.comglin@suse.comglin@suse.comglin@suse.comglin@suse.comglin@suse.comglin@suse.comglin@suse.comjlee@suse.comjlee@suse.comcoolo@suse.comjlee@suse.commmarek@suse.czglin@suse.commmarek@suse.czmmarek@suse.cz- Add the following patches for bsc#1248618: - Bug 1248618 - pesign-obs-integration fails build when no signed binary is produced - bsc1248618-Create-archive-first.patch - bsc1248618-Skip-signing-when-there-are-no-files-to-sign-bsc-124.patch - bsc1248618-pesign-repackage.spec.in-Stop-repacking-process-when.patch- Add 0001-Add-support-for-dependency-generators.patch to - Add support for including macros in pesign-repackage.spec by using pesign-spec-macros - Add support for copying sources to the new build directory by using pesign-copy-sources - Update README for dependency generation - Add Dependency Generation section - Convert to Markdown (bsc#1207520)(jsc#PED-2658)- Add 0001-pesign-gen-repackage-spec-fix-the-filename-issue-in-.patch to fix fix the filename issue in the scripts of generated ueficert package. (bsc#1195805)(bsc#1205917)- Support signing grub on powerpc (jsc#SLE-18271 bsc#1192764). + 0001-Support-ppc-grub-signing-jsc-SLE-18271-bsc-1192764.patch + 0002-kernel-sign-file-Move-x509-parsing-into-a-function.patch + 0003-kernel-sign-file-Support-appending-verbatim-PKCS-7-s.patch + 0004-Add-padding-to-grub-signature-correctly-jsc-SLE-1827.patch- Update to version 10.2+git20210804.ff18da1: * brp-99-pesign: fix that the signature of shim be broken- Update to version 10.2+git20210730.0cb100c: * Sign kernel also in module dir (boo#1184804) (replaces pesign-kernel-in-lib.diff) - switch package to obs_scm to avoid recompression- Update to version git master (10.2): * Add support for GZIP and ZSTD module compression (bsc#1188636) * Always pad the EFI image when calculating the hash * Version bump to 10.2 * approach issue#22 false noarch subpackage - drop pesign-obs-integration-bsc1183747-always-pad-efi-images.patch pesign-obs-integration-support-gzip-zstd-compression.patch (merged)- Add pesign-obs-integration-support-gzip-zstd-compression.patch to support gzip and zstd module compression- find kernel also in /lib (boo#1184804, pesign-kernel-in-lib.diff)- Add pesign-obs-integration-bsc1183747-always-pad-efi-images.patch to fix the potential hash mismatching (bsc#1183747)- Update to version 10.2: * Fix the wrongly created noarch subpackages (issue#22, bsc#1180242)- Update to version 10.1+1602850462: * Compress kernel modules in batch and in parallel (bsc#1188636) * Forward _binary_payload to the repackaged rpm (bsc#1175882) - remove 0001-Forward-_binary_payload-to-the-repackaged-rpm.patch, parallel-compression.patch (upstream)- Sync from git master directly - drop 0001-Add-support-for-kernel-module-compression.patch 0001-Enable-find_provides-and-requires.patch 0001-Initialize-compress-variable.patch 0001-Keep-the-files-in-the-OTHER-directory.patch 0001-Passthrough-license-tag.patch 0001-brp-99-compress-vmlinux-support-xz-compressed-vmlinu.patch 0001-sign-stage3.bin-from-s390-tools-with-sign-files-bsc-.patch pesign-sign-s390x-kernel.patch (upstream) - add parallel-compression.patch- Add 0001-Forward-_binary_payload-to-the-repackaged-rpm.patch to forward _binary_payload to the repackaged rpm (bsc#1175882)- Add 0001-Enable-find_provides-and-requires.patch (bsc#1114605, bsc#1180279) + Enable this patch again since virtualbox-kmp is split from the main package so the customized %find_provides for virtualbox-x11-guest won't be affected anymore.- pesign-sign-s390x-kernel.patch: Sign also the non-PE (e.g. s390x) kernels with just kernel-sign-file (bsc#1163524)- 0001-sign-stage3.bin-from-s390-tools-with-sign-files-bsc-.patch Hard code signing of stage3.bin of s390-tools (bsc#1163524)- 0001-brp-99-compress-vmlinux-support-xz-compressed-vmlinu.patch to support xz-compressed vmlinux (bnc#1155921)- 0001-Keep-the-files-in-the-OTHER-directory.patch to keep the files in the OTHER directory (boo#1155474)- Require pesign on arm (boo#1134303).- Add 0001-Initialize-compress-variable.patch to initialize $compress in pesign-gen-repackage-spec to avoid warning- Add 0001-Add-support-for-kernel-module-compression.patch to support kernel module compression (bsc#1135854, jsc#SLE-16661)- pesign is also available on %arm (boo#1134303).- Drop 0002-Enable-find_provides-and-requires.patch due to the build failure of virtualbox-guest-x11- rpm: forward the missing rpm bits (bsc#1114605, bsc#1180279) + 0001-Passthrough-license-tag.patch + 0002-Enable-find_provides-and-requires.patch- Version 10.1 - Add modsign-verify for the signature verification (bsc#1118953)- rpm: properly forward dep flags (bsc#1114605) - Fix new Lintian Error from Debian 10- debhelper: restrict wildcard package unpacking- debhelper: fix conffiles corner case- Remove the unstable source url - Update the debian scripts- Switch to tarball release- Provide password file for 'certutil -A' due to the change in mozilla-nss 3.35 (boo#1082235)- Modified modsign-repackage, using certificate to try to decrypt the signature of kernel module. It can be used to verify the integrity of signature.- Michael Schröder improved the original kernel-sign-file script to support PKCS#7 kernel module signing. Replacing sign-file.c with new kernel-sign-file script. (bsc#1049122)- escape regexp in pesign-gen-repackage-spec for perl 5.26- To support PKCS#7 kernel module signing, copy sign-file.c from SLE-15 v4.12 kernel source to replace the kernel-sign-file script to align upstream. (bsc#1049122)- Copy over any *.log files from the first build (bsc#1012422)- Add aarch64 support since pesign also build on aarch64- Add support for file verify flags (bnc#905420).- Sort the parts of the repackage spec file for easier debugging.h03-ch2b 1757530801 10.2+git20210804.ff18da1-150600.10.3.110.2+git20210804.ff18da1-150600.10.3.1modsign-repackagemodsign-verifybrp-suse.dbrp-99-compress-vmlinuxbrp-99-pesignpesigngen-hmackernel-sign-filepesign-gen-repackage-specpesign-repackage.spec.inpesign-obs-integrationREADME.mdpesign-obs-integrationCOPYING/usr/bin//usr/lib/rpm//usr/lib/rpm/brp-suse.d//usr/lib/rpm/pesign//usr/share/doc/packages//usr/share/doc/packages/pesign-obs-integration//usr/share/licenses//usr/share/licenses/pesign-obs-integration/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:40604/SUSE_SLE-15-SP6_Update/d4f250925aab8fcae1c2120b0b04d680-pesign-obs-integration.SUSE_SLE-15-SP6_Updatedrpmxz5x86_64-suse-linuxBourne-Again shell script, ASCII text executablePerl script text executabledirectoryASCII textRRRRRRRɪ|AH<)Nutf-87e6ccc85d74ba31a4f576d201da26e982ced14cd37bb28e60bb6368fe2d335dc? 7zXZ !t/=]"k%?kD&%md4uSI:p:Osz}YfUޕT@^.ϕC:NR'S^x[e/B5.PrDڲ{q1u GptY`!/)y7Z)`)YR d*͓UȷTl?ߙ+ KG("nH"֎D!\6SkkqWg ɖg" F# !`dr5u] ca&6F  -B^"M"Si쾀Mf=vV"O#:a2{_XC譚?dä-L}u5D=?iֿ"4NJBQ|kQpfNgo9T@=Lj|.Έ#@#p'sFRlД},%x۫hY]Oa_|r#zx("W}M^P_kY$ӑjGcs (~{ %A\cU&[;ea6ElK>-{w[3g8o*nB,Z)9Lτt]_/vœ}n,,apgŹ0@Ƈ`= KS11TlJ#-u͌-Va; &Hƺ|JTijSNz rOVVv.S죣.O߯]+㕟y&BDe bƐϤKI4ОR\UScɂ8>`Ӧ*lXyz+en^'|/f!5y͘.tw89L%ɳ 1lv$ueQdٴE3K;MJse ԛ:wƈ d݁AW&?] 4(1ɘ>ζW WkMf7[~9HK_Fl5p Iʃ&*6{qpmB0G 0oʟ8R) zJka*vU*T:?<nWK>=ū],V $7@\IӅZ¦Fvj}Gw]q79h͵>;n-?avd)"ADH_. >- :{.6!wB{^Q*CYY* Y_?8raZ3[K? %~KvQcKxZC_a};~?@YZS!}A+MB$)S^r@o c2_DuZک^dbDgTlDF5X%EeVh.(K*[ՎȂcl8AsaF njy2"]pIf3Uk nv8%\t02NpIu$L RTpD@~̇IęJ8?/uFp,GxOܬT'F')]D1L4ql4V :J\1L02.1{YE{ sR!z6d^B _VT >YH-"Q:.8q:aMɜ u)em״h_k^G`vh)kQ6S?OR'@šN꧳]25 Rf!_\sC~--?`J46WSm@4$A| R16:Zm d+f* `fɲc)5;̴5 9 L~o.8\_sD21lE&>#R,5t_pS٥ȮuY؜zS3>:Rycp)#?oa U٭$~ߜHp®FpZ<,dKKM ~DA-5,LB8`|My,DK{a5" .: oŃMس Ӿ!t\鰺tP"/-0Hd&:= Sĩ.`ޖ@17~SKAQH_uI)A5 }R2\ߺoM(T;xкuN[2CJHEnolRG!MنK<.ꢁ3Q6흢f&"pC@Q( õ @򞔬.,1*nv!uIrb. qN%wAp|yIDizjFg %1E'I$Bo~Pjb~݈ͣQ#(1Κiov4_ O~OM4Xh圃O`sx/v:s} Czv|_\VN,\ ~\}|?u2_J nbTp\p DK3QGɰζuq%#1>k*"[e͛ZUYd8V/ZDU3Ǧ&Hqjo|! vf5iH!`,*wro]O71@±҇,Ѯ /4VVi/wsNI;E\].9 T b;@ir&>=`7\?WEf{D`x"$vͷu#3iж✖lBw2l"ܳʉ8BqWehAi}t sTv GvO?3xfΫ<:!kk7>[#&풾¥wEQkUgQW~X;xQlLbivSldXD39"v拱 }LTXR[Ev kH(2`\(9gmyuG͗y<2B?|OSCwHh` .jX#i;4H} "0[_Z2|[H,:s-y~Ds+3耟0C"BaI.,<j:'!>L=fOf7VU>yj䝱#t8rZ9ˇ`38fLBpl£%w£}fbg-)eQTܑJ񼼣}" 8 d30 | v.霘)QU,QFL Hj4VF#09,[^(@$t(&)F ƍJLf""j. 1DA`[q[5^mp ~.=>$I(aj==BZq}+de:ZM?怢:4ŻD,*[^a=_b<+30R1+C%Ifg|cTҶFP9D.^wp78f 0A+1eXT)3FD`Ejt,tZv eʆ Vp[I(itN1  }+/> .<*z=%%EfJR ɧA0(oC-HA@ ڇ Av%pW^<7/I>=$ 9-p^4lNxރ24[j/Hlܿ10WxM?q'mnn?OJ;jvC4fJGH{]xJ݊d2Mn㊑b"Fܰ"DggIe֓ up9X.s &eZ*u/dy S*U ǣ<]I&CF;8#U#7 aOfjBIPoo[uW|4hNz0٘Aڨ5`M/~S!%YHI~zwϕQ_z}˫>[J?5n^t%9G<#R?bQ-Bjw/ڟ?9rLݽ~.rG 0"/mx' +)TZeZZ ͍ oyi*zgCH|F;?V10˕51zf S}IKKdtqw/J97 ?$H" v|t]юAYAo [%.#yޢIᜈi EWA/xPLhW-hs?-{j$a&Z# hu ߠ =2CGv4XƓqy`|KT*7,lT*(5S?]3|^8Z;hJtLOd۟`I=$K8Θ{$mE0uOpfzRhVIxVsd*\(|ZU5R[}6ƾt ;[%B_zoPV͒XEEdZͫ'ًG;pϿx7N>%b9O'zĉ YZ