commit ef3f722b4fb8d3dff685a388fcacb82360978586 Author: Adrian Schröter Date: Mon Oct 14 14:14:42 2024 +0200 Sync from SUSE:ALP:Source:Standard:1.0 fipscheck revision 358742b7a6c315156e54872d4f01031d diff --git a/.gitattributes b/.gitattributes new file mode 100644 index 0000000..fecc750 --- /dev/null +++ b/.gitattributes @@ -0,0 +1,23 @@ +## Default LFS +*.7z filter=lfs diff=lfs merge=lfs -text +*.bsp filter=lfs diff=lfs merge=lfs -text +*.bz2 filter=lfs diff=lfs merge=lfs -text +*.gem filter=lfs diff=lfs merge=lfs -text +*.gz filter=lfs diff=lfs merge=lfs -text +*.jar filter=lfs diff=lfs merge=lfs -text +*.lz filter=lfs diff=lfs merge=lfs -text +*.lzma filter=lfs diff=lfs merge=lfs -text +*.obscpio filter=lfs diff=lfs merge=lfs -text +*.oxt filter=lfs diff=lfs merge=lfs -text +*.pdf filter=lfs diff=lfs merge=lfs -text +*.png filter=lfs diff=lfs merge=lfs -text +*.rpm filter=lfs diff=lfs merge=lfs -text +*.tbz filter=lfs diff=lfs merge=lfs -text +*.tbz2 filter=lfs diff=lfs merge=lfs -text +*.tgz filter=lfs diff=lfs merge=lfs -text +*.ttf filter=lfs diff=lfs merge=lfs -text +*.txz filter=lfs diff=lfs merge=lfs -text +*.whl filter=lfs diff=lfs merge=lfs -text +*.xz filter=lfs diff=lfs merge=lfs -text +*.zip filter=lfs diff=lfs merge=lfs -text +*.zst filter=lfs diff=lfs merge=lfs -text diff --git a/baselibs.conf b/baselibs.conf new file mode 100644 index 0000000..9203596 --- /dev/null +++ b/baselibs.conf @@ -0,0 +1 @@ +libfipscheck1 diff --git a/fipscheck-1.7.0.tar.bz2 b/fipscheck-1.7.0.tar.bz2 new file mode 100644 index 0000000..d5ec602 --- /dev/null +++ b/fipscheck-1.7.0.tar.bz2 @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:024953c8bee1458aa9c48dc0648420c503ed71c37ce6b366ce296fad2f217889 +size 299256 diff --git a/fipscheck.changes b/fipscheck.changes new file mode 100644 index 0000000..d291a64 --- /dev/null +++ b/fipscheck.changes @@ -0,0 +1,81 @@ +------------------------------------------------------------------- +Wed Nov 2 14:30:29 UTC 2022 - Marcus Meissner + +- updated to 1.7.0 (from a different supplier) + - openssl 3 support +- dropped fipscheck-dont_generate_manpages.patch (not needed) +- dropped fipscheck-fips.h_not_needed.patch (not needed) + +------------------------------------------------------------------- +Fri Nov 20 09:50:32 UTC 2020 - Ludwig Nussel + +- move libs to %_libdir (boo#1029961) + +------------------------------------------------------------------- +Mon Sep 16 10:48:51 UTC 2019 - Vítězslav Čížek + +- Remove #include of unused fips.h to fix build with OpenSSL 1.1.1 + (bsc#1149792) + * add fipscheck-fips.h_not_needed.patch +- Drop obsolete openssl-1_1-port.patch (upstream) + +------------------------------------------------------------------- +Thu Jan 3 11:08:27 UTC 2019 - Vítězslav Čížek + +- Use the shipped manpages instead of building them with xmlto + in order to avoid a build cycle (fipscheck, xmlto, libxslt, libgcrypt) + * add fipscheck-dont_generate_manpages.patch +- fix build on older distributions + +------------------------------------------------------------------- +Thu Sep 20 17:16:11 UTC 2018 - Jason Sikes + +- Changed source back to http now that current release folder + has current tarball. + +------------------------------------------------------------------- +Tue Sep 11 23:51:42 UTC 2018 - Jason Sikes + +- Updated fipscheck to 1.5.0 + * Changed source to local file since latest official release + is not in the official releases directory. + * Downgraded libopenssl-devel to libopenssl-1_0_0-devel because + 1.0.2 supports FIPS. + +------------------------------------------------------------------- +Mon Jun 12 14:21:41 UTC 2017 - daniel.molkentin@suse.com + +- Port to OpenSSL 1.1 (bsc#1042649) + Adds openssl-1_1-port.patch + +------------------------------------------------------------------- +Mon Apr 13 08:50:02 UTC 2015 - jengelh@inai.de + +- Set RPM groups anew. Drop implicit cleaning parts. + +------------------------------------------------------------------- +Mon Jun 2 10:01:01 UTC 2014 - meissner@suse.com + +- add baselibs.conf + +------------------------------------------------------------------- +Tue May 27 14:13:38 UTC 2014 - meissner@suse.com + +- updated to 1.4.1 + - added manpages + - fipscheck/fipshmac: Add -s option to specify the hmac suffix + - fipshmac: Add '-d' option to specify where to put the .hmac files + - various bugfixes + +------------------------------------------------------------------- +Tue Jan 21 14:21:27 UTC 2014 - cfarrell@suse.com + +- license update: BSD-2-Clause + See LICENSE + +------------------------------------------------------------------- +Mon Jan 20 09:37:18 UTC 2014 - meissner@suse.com + +- imported a generic fips helper to verify fips modules, linked + to openssl. + diff --git a/fipscheck.spec b/fipscheck.spec new file mode 100644 index 0000000..2827b51 --- /dev/null +++ b/fipscheck.spec @@ -0,0 +1,100 @@ +# +# spec file for package fipscheck +# +# Copyright (c) 2022 SUSE LLC +# +# All modifications and additions to the file contributed by third parties +# remain the property of their copyright owners, unless otherwise agreed +# upon. The license for this file, and modifications and additions to the +# file, is the same license as for the pristine package itself (unless the +# license for the pristine package is not an Open Source License, in which +# case the license is the MIT License). An "Open Source License" is a +# license that conforms to the Open Source Definition (Version 1.9) +# published by the Open Source Initiative. + +# Please submit bugfixes or comments via https://bugs.opensuse.org/ +# + + +%define lname libfipscheck1 +%global soversion 1.2.1 +%global somajor 1 +Name: fipscheck +Version: 1.7.0 +Release: 0 +Summary: A library for integrity verification of FIPS validated modules +License: BSD-2-Clause +Group: Development/Libraries/C and C++ +URL: https://github.com/LairdCP/fipscheck +Source0: fipscheck-%version.tar.bz2 +Source1: baselibs.conf +BuildRequires: autoconf +BuildRequires: automake +BuildRequires: libtool +BuildRequires: pkgconfig(openssl) +Requires: %{lname} = %{version} + +%description +FIPSCheck is a library for integrity verification of FIPS validated +modules. The package also provides helper binaries for creation and +verification of the HMAC-SHA256 checksum files. + +%package -n %{lname} +Summary: Library files for %{name} +Group: System/Libraries +Requires: %{_bindir}/fipscheck + +%description -n %{lname} +This package contains the FIPSCheck library. + +%package devel +Summary: Development files for %{name} +Group: Development/Libraries/C and C++ +Requires: %{lname} = %{version} + +%description devel +This package contains development files for %{name}. + +%prep +%setup -q + +%build +%configure --disable-static + +make %{?_smp_mflags} LDFLAGS="-Wl,-z,relro" + +# Add generation of HMAC checksums of the final stripped binaries +%define __spec_install_post \ + %{?__debug_package:%{__debug_install_post}} \ + %{__arch_install_post} \ + %__os_install_post \ + %{buildroot}%{_bindir}/fipshmac %{buildroot}%{_bindir}/fipscheck \ + %{buildroot}%{_bindir}/fipshmac %{buildroot}/%{_libdir}/libfipscheck.so.%{soversion} \ + ln -s .libfipscheck.so.%{soversion}.hmac %{buildroot}/%{_libdir}/.libfipscheck.so.%{somajor}.hmac \ +%{nil} + +%install +%make_install +find %{buildroot} -type f -name "*.la" -delete -print + +%post -n %{lname} -p /sbin/ldconfig +%postun -n %{lname} -p /sbin/ldconfig + +%files +%license COPYING +%doc ChangeLog README AUTHORS +%{_bindir}/fipscheck +%{_bindir}/.fipscheck.hmac +%{_bindir}/fipshmac + +%files -n %{lname} +%{_libdir}/libfipscheck.so.* +%{_libdir}/.libfipscheck.so.* +%{_mandir}/man8/*.8%{?ext_man} + +%files devel +%{_includedir}/fipscheck.h +%{_libdir}/libfipscheck.so +%{_mandir}/man3/*.3%{?ext_man} + +%changelog