Sync from SUSE:SLFO:Main fipscheck revision 358742b7a6c315156e54872d4f01031d

This commit is contained in:
Adrian Schröter 2024-05-03 12:31:24 +02:00
commit abc3c50373
5 changed files with 208 additions and 0 deletions

23
.gitattributes vendored Normal file
View File

@ -0,0 +1,23 @@
## Default LFS
*.7z filter=lfs diff=lfs merge=lfs -text
*.bsp filter=lfs diff=lfs merge=lfs -text
*.bz2 filter=lfs diff=lfs merge=lfs -text
*.gem filter=lfs diff=lfs merge=lfs -text
*.gz filter=lfs diff=lfs merge=lfs -text
*.jar filter=lfs diff=lfs merge=lfs -text
*.lz filter=lfs diff=lfs merge=lfs -text
*.lzma filter=lfs diff=lfs merge=lfs -text
*.obscpio filter=lfs diff=lfs merge=lfs -text
*.oxt filter=lfs diff=lfs merge=lfs -text
*.pdf filter=lfs diff=lfs merge=lfs -text
*.png filter=lfs diff=lfs merge=lfs -text
*.rpm filter=lfs diff=lfs merge=lfs -text
*.tbz filter=lfs diff=lfs merge=lfs -text
*.tbz2 filter=lfs diff=lfs merge=lfs -text
*.tgz filter=lfs diff=lfs merge=lfs -text
*.ttf filter=lfs diff=lfs merge=lfs -text
*.txz filter=lfs diff=lfs merge=lfs -text
*.whl filter=lfs diff=lfs merge=lfs -text
*.xz filter=lfs diff=lfs merge=lfs -text
*.zip filter=lfs diff=lfs merge=lfs -text
*.zst filter=lfs diff=lfs merge=lfs -text

1
baselibs.conf Normal file
View File

@ -0,0 +1 @@
libfipscheck1

BIN
fipscheck-1.7.0.tar.bz2 (Stored with Git LFS) Normal file

Binary file not shown.

81
fipscheck.changes Normal file
View File

@ -0,0 +1,81 @@
-------------------------------------------------------------------
Wed Nov 2 14:30:29 UTC 2022 - Marcus Meissner <meissner@suse.com>
- updated to 1.7.0 (from a different supplier)
- openssl 3 support
- dropped fipscheck-dont_generate_manpages.patch (not needed)
- dropped fipscheck-fips.h_not_needed.patch (not needed)
-------------------------------------------------------------------
Fri Nov 20 09:50:32 UTC 2020 - Ludwig Nussel <lnussel@suse.de>
- move libs to %_libdir (boo#1029961)
-------------------------------------------------------------------
Mon Sep 16 10:48:51 UTC 2019 - Vítězslav Čížek <vcizek@suse.com>
- Remove #include of unused fips.h to fix build with OpenSSL 1.1.1
(bsc#1149792)
* add fipscheck-fips.h_not_needed.patch
- Drop obsolete openssl-1_1-port.patch (upstream)
-------------------------------------------------------------------
Thu Jan 3 11:08:27 UTC 2019 - Vítězslav Čížek <vcizek@suse.com>
- Use the shipped manpages instead of building them with xmlto
in order to avoid a build cycle (fipscheck, xmlto, libxslt, libgcrypt)
* add fipscheck-dont_generate_manpages.patch
- fix build on older distributions
-------------------------------------------------------------------
Thu Sep 20 17:16:11 UTC 2018 - Jason Sikes <jsikes@suse.de>
- Changed source back to http now that current release folder
has current tarball.
-------------------------------------------------------------------
Tue Sep 11 23:51:42 UTC 2018 - Jason Sikes <jsikes@suse.de>
- Updated fipscheck to 1.5.0
* Changed source to local file since latest official release
is not in the official releases directory.
* Downgraded libopenssl-devel to libopenssl-1_0_0-devel because
1.0.2 supports FIPS.
-------------------------------------------------------------------
Mon Jun 12 14:21:41 UTC 2017 - daniel.molkentin@suse.com
- Port to OpenSSL 1.1 (bsc#1042649)
Adds openssl-1_1-port.patch
-------------------------------------------------------------------
Mon Apr 13 08:50:02 UTC 2015 - jengelh@inai.de
- Set RPM groups anew. Drop implicit cleaning parts.
-------------------------------------------------------------------
Mon Jun 2 10:01:01 UTC 2014 - meissner@suse.com
- add baselibs.conf
-------------------------------------------------------------------
Tue May 27 14:13:38 UTC 2014 - meissner@suse.com
- updated to 1.4.1
- added manpages
- fipscheck/fipshmac: Add -s option to specify the hmac suffix
- fipshmac: Add '-d' option to specify where to put the .hmac files
- various bugfixes
-------------------------------------------------------------------
Tue Jan 21 14:21:27 UTC 2014 - cfarrell@suse.com
- license update: BSD-2-Clause
See LICENSE
-------------------------------------------------------------------
Mon Jan 20 09:37:18 UTC 2014 - meissner@suse.com
- imported a generic fips helper to verify fips modules, linked
to openssl.

100
fipscheck.spec Normal file
View File

@ -0,0 +1,100 @@
#
# spec file for package fipscheck
#
# Copyright (c) 2022 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
# Please submit bugfixes or comments via https://bugs.opensuse.org/
#
%define lname libfipscheck1
%global soversion 1.2.1
%global somajor 1
Name: fipscheck
Version: 1.7.0
Release: 0
Summary: A library for integrity verification of FIPS validated modules
License: BSD-2-Clause
Group: Development/Libraries/C and C++
URL: https://github.com/LairdCP/fipscheck
Source0: fipscheck-%version.tar.bz2
Source1: baselibs.conf
BuildRequires: autoconf
BuildRequires: automake
BuildRequires: libtool
BuildRequires: pkgconfig(openssl)
Requires: %{lname} = %{version}
%description
FIPSCheck is a library for integrity verification of FIPS validated
modules. The package also provides helper binaries for creation and
verification of the HMAC-SHA256 checksum files.
%package -n %{lname}
Summary: Library files for %{name}
Group: System/Libraries
Requires: %{_bindir}/fipscheck
%description -n %{lname}
This package contains the FIPSCheck library.
%package devel
Summary: Development files for %{name}
Group: Development/Libraries/C and C++
Requires: %{lname} = %{version}
%description devel
This package contains development files for %{name}.
%prep
%setup -q
%build
%configure --disable-static
make %{?_smp_mflags} LDFLAGS="-Wl,-z,relro"
# Add generation of HMAC checksums of the final stripped binaries
%define __spec_install_post \
%{?__debug_package:%{__debug_install_post}} \
%{__arch_install_post} \
%__os_install_post \
%{buildroot}%{_bindir}/fipshmac %{buildroot}%{_bindir}/fipscheck \
%{buildroot}%{_bindir}/fipshmac %{buildroot}/%{_libdir}/libfipscheck.so.%{soversion} \
ln -s .libfipscheck.so.%{soversion}.hmac %{buildroot}/%{_libdir}/.libfipscheck.so.%{somajor}.hmac \
%{nil}
%install
%make_install
find %{buildroot} -type f -name "*.la" -delete -print
%post -n %{lname} -p /sbin/ldconfig
%postun -n %{lname} -p /sbin/ldconfig
%files
%license COPYING
%doc ChangeLog README AUTHORS
%{_bindir}/fipscheck
%{_bindir}/.fipscheck.hmac
%{_bindir}/fipshmac
%files -n %{lname}
%{_libdir}/libfipscheck.so.*
%{_libdir}/.libfipscheck.so.*
%{_mandir}/man8/*.8%{?ext_man}
%files devel
%{_includedir}/fipscheck.h
%{_libdir}/libfipscheck.so
%{_mandir}/man3/*.3%{?ext_man}
%changelog