2021-07-15 08:53:54 +02:00
|
|
|
-------------------------------------------------------------------
|
2022-07-28 08:41:46 +02:00
|
|
|
Mon Jun 27 05:00:25 UTC 2022 - Joey Lee <jlee@suse.com>
|
|
|
|
|
|
|
|
|
|
- Update to 0.6.0
|
|
|
|
|
+ 6c98907 SBAT revocation update support
|
|
|
|
|
+ 0276891 mokutil: Add trust_mok_keys and untrust_mok_keys
|
|
|
|
|
+ 57bc385 mokutil: enable setting fallback verbosity and noreboot mode
|
|
|
|
|
+ b15e7c4 util: add the missing stdio.h
|
|
|
|
|
- Drop upstreamed patches:
|
|
|
|
|
+ mokutil-fix-missing-header.patch
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2021-07-15 08:53:54 +02:00
|
|
|
Thu Jul 15 06:39:26 UTC 2021 - Gary Ching-Pang Lin <glin@suse.com>
|
|
|
|
|
|
|
|
|
|
- Update to 0.5.0
|
|
|
|
|
+ mokutil: delete key/hash from the reverse request
|
|
|
|
|
+ efi_x509: fix an error handling in is_immediate_ca()
|
|
|
|
|
+ efi_x509: fix certificates fingerprint calculation
|
|
|
|
|
+ efi_x509: use EVP_Digest()* functions instead of the deprecated
|
|
|
|
|
SHA1_*()
|
|
|
|
|
+ src/util.c: fix NULL pointer dereference in mok_get_variable
|
|
|
|
|
+ mokutil: Read the SbatLevelRT variable to get the SBAT entries
|
|
|
|
|
+ mokutil: add mok-variables parsing support
|
|
|
|
|
+ mokutil: Add option to print the UEFI SBAT variable content
|
|
|
|
|
+ mokutil: only check for Secure Boot support in options that
|
|
|
|
|
need it
|
|
|
|
|
+ efi_x509: add the function to fetch SKID
|
|
|
|
|
+ keyring: add the function to check kernel keyring
|
|
|
|
|
+ mokutil: initialize data for efi_get_variable()
|
|
|
|
|
+ mokutil: correct the data for efi_set_variable() in
|
|
|
|
|
set_password()
|
|
|
|
|
+ mokutil: improve the readability of issue_mok_request()
|
|
|
|
|
+ mokutil: drop the checks for PK and KEK
|
|
|
|
|
+ mokutil: check the blocklists before enrolling a key
|
|
|
|
|
+ mokutil: adjust the command bits
|
|
|
|
|
+ mokutil: remove "--simple-hash"
|
|
|
|
|
+ make CA check non-fatal
|
|
|
|
|
+ mokutil: close file in the error path
|
|
|
|
|
+ mokutil: do the CA check
|
|
|
|
|
+ efi_x509: add the function to check immediate CA
|
|
|
|
|
+ efi_x509: use d2i_X509() to create X509 handling
|
|
|
|
|
+ mokutil: rename hash_file as pw_hash_file
|
|
|
|
|
+ password-crypt: update the function names
|
|
|
|
|
+ password-crypt: fix the types of several functions
|
|
|
|
|
+ mokutil: fix the error message in sb_state()
|
|
|
|
|
+ mokutil: move x509 functions to efi_x509.c
|
|
|
|
|
+ mokutil: move the hash functions to efi_hash.c
|
|
|
|
|
+ util: add functions for db_var_name and db_friendly_name
|
|
|
|
|
+ Remove the SHA1 code from identify_hash_type()
|
|
|
|
|
+ Map the UEFI variable names with a function
|
|
|
|
|
+ Fix -Wcast-align warnings
|
|
|
|
|
+ Fix 32 bit build
|
|
|
|
|
+ Add --timeout to manpage and other corrections.
|
|
|
|
|
+ mokutil.c: fix typo enrollement -> enrollment
|
|
|
|
|
+ Avoid taking pointer to packed struct
|
|
|
|
|
+ Fix name of --enable-validation in the description
|
|
|
|
|
+ Remove shebang from bash-completion/mokutil
|
|
|
|
|
- Add mokutil-fix-missing-header.patch to fix the compilation error
|
|
|
|
|
due to the missing header
|
|
|
|
|
- Refresh mokutil-remove-libkeyutils-check.patch and only apply
|
|
|
|
|
it to openSUSE Leap 15.*
|
|
|
|
|
- Drop upstreamed patches:
|
|
|
|
|
+ mokutil-remove-shebang-from-bash-completion-file.patch
|
|
|
|
|
+ mokutil-bsc1173115-add-ca-and-keyring-checks.patch
|
|
|
|
|
- Drop mokutil-support-revoke-builtin-cert.patch since we don't use
|
|
|
|
|
the builtin cert prompt patch in shim anymore.
|
|
|
|
|
|
2021-05-04 08:52:14 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue May 4 06:52:03 UTC 2021 - Dirk Müller <dmueller@suse.com>
|
|
|
|
|
|
|
|
|
|
- spec file cleanup
|
|
|
|
|
|
2020-09-17 08:11:04 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Sep 16 09:06:02 UTC 2020 - Gary Ching-Pang Lin <glin@suse.com>
|
|
|
|
|
|
|
|
|
|
- Add mokutil-bsc1173115-add-ca-and-keyring-checks.patch to add
|
|
|
|
|
options for CA and kernel keyring checks (bsc#1173115)
|
|
|
|
|
+ Add new BuildRequires: keyutils-devel
|
|
|
|
|
+ Add mokutil-remove-libkeyutils-check.patch to disable the
|
|
|
|
|
version check of libkeyutils
|
|
|
|
|
- Refresh mokutil-support-revoke-builtin-cert.patch
|
|
|
|
|
|
2020-08-14 09:02:47 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Aug 14 06:59:46 UTC 2020 - Gary Ching-Pang Lin <glin@suse.com>
|
|
|
|
|
|
|
|
|
|
- Update mokutil-support-revoke-builtin-cert.patch
|
|
|
|
|
+ Add "--revoke-cert" to the man page
|
|
|
|
|
|
2019-12-23 02:37:10 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Dec 13 10:38:44 UTC 2019 - Michel Normand <normand@linux.vnet.ibm.com>
|
|
|
|
|
|
|
|
|
|
- Add build for ppc64/ppc64le
|
|
|
|
|
|
2019-05-17 11:02:19 +02:00
|
|
|
-------------------------------------------------------------------
|
2019-05-28 08:42:29 +02:00
|
|
|
Tue May 28 04:38:14 UTC 2019 - Gary Ching-Pang Lin <glin@suse.com>
|
|
|
|
|
|
|
|
|
|
- Update to 0.4.0
|
|
|
|
|
+ Rename export_moks as export_db_keys
|
|
|
|
|
+ Add support for exporting other keys
|
|
|
|
|
+ add new --mok argument
|
|
|
|
|
+ set list-enrolled command as default for some arguments
|
|
|
|
|
+ Add more info to --sb-state: show when we're in SetupMode or
|
|
|
|
|
with shim validation disabled
|
|
|
|
|
+ Correct help: --set-timeout is really --timeout
|
|
|
|
|
+ generate_hash() / generate_pw_hash(): don't use strlen() for
|
|
|
|
|
strncpy bounds
|
|
|
|
|
+ Add the type casting to silence the warning
|
|
|
|
|
+ Add a way for mokutil to configure a timeout for MokManager's
|
|
|
|
|
prompt
|
|
|
|
|
+ list_keys_in_var(): check errno correctly, not ret twice
|
|
|
|
|
+ Fix typo in error message when the system lacks Secure Boot
|
|
|
|
|
support
|
|
|
|
|
+ Add bash completion file
|
|
|
|
|
+ mokutil: be explicit about file modes in all cases
|
|
|
|
|
+ Make all efi_guid_t const
|
|
|
|
|
+ Don't allow sha1 on the mokutil command line
|
|
|
|
|
+ Build with -fshort-wchar so toggle passwords work right
|
|
|
|
|
+ Fix the 32bit signedness comparison
|
|
|
|
|
+ Fix the potential buffer overflow
|
|
|
|
|
- Add mokutil-remove-shebang-from-bash-completion-file.patch to
|
|
|
|
|
remove shebang from bash-completion/mokutil
|
|
|
|
|
- Drop upstreamed patches
|
|
|
|
|
+ mokutil-constify-efi-guid.patch
|
|
|
|
|
+ mokutil-fix-overflow.patch
|
|
|
|
|
+ mokutil-fshort-wchar.patch
|
|
|
|
|
+ mokutil-set-efi-variable-file-mode.patch
|
|
|
|
|
- Refresh mokutil-support-revoke-builtin-cert.patch
|
|
|
|
|
- Install bash-completion/mokutil
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2019-05-17 11:02:19 +02:00
|
|
|
Thu Mar 21 02:39:46 UTC 2019 - Gary Ching-Pang Lin <glin@suse.com>
|
|
|
|
|
|
|
|
|
|
- Add modhash to calculate the hash of kernel module (SLE-5661)
|
|
|
|
|
+ Also add openssl to Requires since the script needs it
|
|
|
|
|
|
2018-11-23 10:10:42 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Nov 23 08:58:24 UTC 2018 - glin@suse.com
|
|
|
|
|
|
2019-01-16 04:05:25 +01:00
|
|
|
- Enable AArch64 build (bsc#1119769, fate#326541)
|
2018-11-23 10:10:42 +01:00
|
|
|
|
2018-03-27 10:05:36 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Mar 27 09:54:10 CEST 2018 - kukuk@suse.de
|
|
|
|
|
|
|
|
|
|
- Use %license instead of %doc [bsc#1082318]
|
|
|
|
|
|
2016-07-13 09:59:30 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jul 13 04:52:23 UTC 2016 - glin@suse.com
|
|
|
|
|
|
|
|
|
|
- Patches for efivar 0.24
|
|
|
|
|
+ Add mokutil-set-efi-variable-file-mode.patch to set the file
|
|
|
|
|
mode explicitly.
|
|
|
|
|
+ Add mokutil-constify-efi-guid.patch to make all efi_guild_t
|
|
|
|
|
variables const.
|
|
|
|
|
+ Refresh mokutil-support-revoke-builtin-cert.patch for the
|
|
|
|
|
change of efi_set_variable()
|
|
|
|
|
|
2015-07-02 10:16:12 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jun 30 08:43:45 UTC 2015 - glin@suse.com
|
|
|
|
|
|
|
|
|
|
- Add mokutil-fshort-wchar.patch to make sure the UEFI strings are
|
|
|
|
|
UCS-2 encoding.
|
|
|
|
|
|
2014-11-04 09:19:57 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Nov 4 07:52:54 UTC 2014 - glin@suse.com
|
|
|
|
|
|
|
|
|
|
- Update to 0.3.0
|
|
|
|
|
- Add mokutil-fix-overflow.patch to fix the buffer overflow
|
|
|
|
|
- Drop upstreamed patches
|
|
|
|
|
+ mokutil-upstream-fixes.patch
|
|
|
|
|
+ mokutil-mokx-support.patch
|
|
|
|
|
+ mokutil-check-corrupted-key-list.patch
|
|
|
|
|
+ mokutil-check-secure-boot-support.patch
|
|
|
|
|
+ mokutil-clean-request.patch
|
|
|
|
|
+ mokutil-fix-hash-file-read.patch
|
|
|
|
|
+ mokutil-fix-hash-list-size.patch
|
|
|
|
|
+ mokutil-more-details-for-skipped-keys.patch
|
|
|
|
|
+ mokutil-no-invalid-x509.patch
|
|
|
|
|
- Refresh mokutil-support-revoke-builtin-cert.patch
|
|
|
|
|
|
2014-04-17 05:09:48 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Apr 16 04:11:50 UTC 2014 - glin@suse.com
|
|
|
|
|
|
|
|
|
|
- Add mokutil-fix-hash-file-read.patch to fix the error handling of
|
|
|
|
|
reading a hash file
|
|
|
|
|
|
2014-04-10 10:31:21 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Apr 10 04:44:22 UTC 2014 - glin@suse.com
|
|
|
|
|
|
|
|
|
|
- Add mokutil-check-corrupted-key-list.patch to check whether the
|
|
|
|
|
key list is corrupted or not
|
|
|
|
|
- Add mokutil-no-invalid-x509.patch to avoid importing an invalid
|
|
|
|
|
x509 certificate
|
|
|
|
|
|
2014-03-24 10:36:23 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Mar 24 07:37:39 UTC 2014 - glin@suse.com
|
|
|
|
|
|
|
|
|
|
- Add mokutil-more-details-for-skipped-keys.patch to show the
|
|
|
|
|
reason to skip the key
|
|
|
|
|
- Add mokutil-check-secure-boot-support.patch to check whether the
|
|
|
|
|
system supports Secure Boot or not
|
|
|
|
|
|
2014-02-24 17:32:32 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Feb 21 10:10:15 UTC 2014 - glin@suse.com
|
|
|
|
|
|
|
|
|
|
- Add mokutil-support-revoke-builtin-cert.patch to add an option to
|
|
|
|
|
revoke the built-in certificate in shim
|
|
|
|
|
|
2014-01-22 07:52:14 +01:00
|
|
|
-------------------------------------------------------------------
|
2014-02-13 02:56:54 +01:00
|
|
|
Wed Feb 12 10:06:31 UTC 2014 - glin@suse.com
|
|
|
|
|
|
|
|
|
|
- Add mokutil-fix-hash-list-size.patch to update the list size
|
|
|
|
|
after merging or deleting a hash
|
|
|
|
|
- Add mokutil-clean-request.patch to clean the request if all keys
|
|
|
|
|
are removed
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2014-01-22 07:52:14 +01:00
|
|
|
Wed Jan 22 05:55:45 UTC 2014 - glin@suse.com
|
|
|
|
|
|
|
|
|
|
- Update mokutil-mokx-support.patch to fix the test-key request
|
|
|
|
|
check
|
|
|
|
|
|
2013-12-05 03:46:51 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Dec 5 02:11:40 UTC 2013 - glin@suse.com
|
|
|
|
|
|
|
|
|
|
- Add mokutil-upstream-fixes.patch to include upstream fixes for
|
|
|
|
|
db signature check, gcc warnings, and error handling
|
|
|
|
|
- Add mokutil-mokx-support.patch to support the MOK blacklist
|
|
|
|
|
(FATE#316531)
|
|
|
|
|
|
2013-07-25 12:27:41 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Jul 25 09:13:44 UTC 2013 - glin@suse.com
|
|
|
|
|
|
|
|
|
|
- Update to 0.2.0
|
|
|
|
|
+ Generate the password hash with crypt() by default instead of
|
|
|
|
|
the original sha256 password hash
|
|
|
|
|
+ Add an option to import the root password hash
|
|
|
|
|
+ Amend error messages, help, and man page
|
|
|
|
|
- Drop upstreamed patches
|
|
|
|
|
+ mokutil-lcrypt-ldflag.patch
|
|
|
|
|
+ mokutil-probe-secure-boot-state.patch
|
|
|
|
|
+ mokutil-allow-password-from-pipe.patch
|
|
|
|
|
+ mokutil-bnc809703-check-pending-request.patch
|
|
|
|
|
+ mokutil-support-delete-keys.patch
|
|
|
|
|
+ mokutil-support-crypt-hash-methods.patch
|
|
|
|
|
+ mokutil-update-man-page.patch
|
|
|
|
|
+ mokutil-bnc809215-improve-wording.patch
|
|
|
|
|
+ mokutil-support-new-pw-hash.patch
|
|
|
|
|
+ mokutil-no-duplicate-keys-imported.patch
|
|
|
|
|
|
2013-04-15 06:32:40 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Apr 2 04:43:59 UTC 2013 - glin@suse.com
|
|
|
|
|
|
|
|
|
|
- Add mokutil-bnc809215-improve-wording.patch to make the messages
|
|
|
|
|
understandable (bnc#809215)
|
|
|
|
|
- Add mokutil-bnc809703-check-pending-request.patch to remove the
|
|
|
|
|
key from the pending request if necessary (bnc#809703)
|
|
|
|
|
|
2013-01-18 11:20:49 +01:00
|
|
|
-------------------------------------------------------------------
|
2013-01-30 10:56:06 +01:00
|
|
|
Wed Jan 30 08:00:22 UTC 2013 - glin@suse.com
|
|
|
|
|
|
|
|
|
|
- Merge patches for FATE#314506
|
|
|
|
|
+ Add mokutil-support-crypt-hash-methods.patch to support the
|
|
|
|
|
password hashes from /etc/shadow
|
|
|
|
|
+ Add mokutil-update-man-page.patch to update man page for the
|
|
|
|
|
new added options
|
|
|
|
|
- Add mokutil-lcrypt-ldflag.patch to correct LDFLAGS
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2013-01-18 11:20:49 +01:00
|
|
|
Fri Jan 18 10:05:27 UTC 2013 - glin@suse.com
|
|
|
|
|
|
|
|
|
|
- Update mokutil-support-new-pw-hash.patch to extend the password
|
|
|
|
|
hash format
|
|
|
|
|
|
2013-01-16 10:28:17 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jan 16 08:41:15 UTC 2013 - glin@suse.com
|
|
|
|
|
|
|
|
|
|
- Merge patches for FATE#314506
|
|
|
|
|
+ Add mokutil-support-delete-keys.patch to delete specific keys
|
|
|
|
|
+ Add mokutil-support-new-pw-hash.patch to support the new
|
|
|
|
|
password format
|
|
|
|
|
+ Add mokutil-allow-password-from-pipe.patch to allow the
|
|
|
|
|
password to be generated in a script and be sent through
|
|
|
|
|
pipeline
|
|
|
|
|
- Install COPYING
|
|
|
|
|
|
2013-01-15 09:03:56 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Dec 11 08:07:32 UTC 2012 - glin@suse.com
|
|
|
|
|
|
|
|
|
|
- Add mokutil-probe-secure-boot-state.patch to probe the state of
|
|
|
|
|
secure boot
|
|
|
|
|
- Add mokutil-no-duplicate-keys-imported.patch to avoid importing
|
|
|
|
|
duplicate keys
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Nov 7 08:10:45 UTC 2012 - glin@suse.com
|
|
|
|
|
|
|
|
|
|
- Add new package mokutil-0.1.0 (FATE#314510)
|
|
|
|
|
|
