Files
osslsigncode/osslsigncode.spec

52 lines
1.5 KiB
RPMSpec
Raw Permalink Normal View History

#
# spec file for package osslsigncode
#
# Copyright (c) 2023 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
Accepting request 968270 from home:dirkmueller:Factory - update to 2.3.0: * This release fixes several critical memory corruption vulnerabilities. A malicious attacker could create a file, which, when processed with osslsigncode, triggers arbitrary code execution. Any previous version of osslsigncode should be immediately upgraded if the tool is used for processing of untrusted files. * fixed non-interactive PVK (MSBLOB) key decryption * added a bash completion script * added CA bundle path auto-detection * CAT files support (thanks to James McKenzie) * MSI support rewritten without libgsf dependency, which allows * for handling of all the needed MSI metadata, such as dates * "-untrusted" option renamed to "-TSA-CAfile" * "-CRLuntrusted" option renamed to "-TSA-CRLfile" * numerous bug fixes and improvements * certificate chain verification support * timestamp verification support * CRL verification support ("-CRLfile" option) * improved CAB signature support * nested signatures support * user-specified signing time ("-st" option) by vszakats * added more tests * fixed numerous bugs * dropped OpenSSL 1.1.0 support * orphaned project adopted by Michał Trojnara * ported to OpenSSL 1.1.x * ported to SoftHSM2 * add support for pkcs11-based hardware tokens * improved error reporting of timestamping errors - drop 0001-Make-code-work-with-OpenSSL-1.1.patch (obsolete) OBS-URL: https://build.opensuse.org/request/show/968270 OBS-URL: https://build.opensuse.org/package/show/Base:System/osslsigncode?expand=0&rev=15
2022-04-14 09:43:12 +00:00
# Please submit bugfixes or comments via https://bugs.opensuse.org/
#
Name: osslsigncode
Version: 2.7
Release: 0
Accepting request 968270 from home:dirkmueller:Factory - update to 2.3.0: * This release fixes several critical memory corruption vulnerabilities. A malicious attacker could create a file, which, when processed with osslsigncode, triggers arbitrary code execution. Any previous version of osslsigncode should be immediately upgraded if the tool is used for processing of untrusted files. * fixed non-interactive PVK (MSBLOB) key decryption * added a bash completion script * added CA bundle path auto-detection * CAT files support (thanks to James McKenzie) * MSI support rewritten without libgsf dependency, which allows * for handling of all the needed MSI metadata, such as dates * "-untrusted" option renamed to "-TSA-CAfile" * "-CRLuntrusted" option renamed to "-TSA-CRLfile" * numerous bug fixes and improvements * certificate chain verification support * timestamp verification support * CRL verification support ("-CRLfile" option) * improved CAB signature support * nested signatures support * user-specified signing time ("-st" option) by vszakats * added more tests * fixed numerous bugs * dropped OpenSSL 1.1.0 support * orphaned project adopted by Michał Trojnara * ported to OpenSSL 1.1.x * ported to SoftHSM2 * add support for pkcs11-based hardware tokens * improved error reporting of timestamping errors - drop 0001-Make-code-work-with-OpenSSL-1.1.patch (obsolete) OBS-URL: https://build.opensuse.org/request/show/968270 OBS-URL: https://build.opensuse.org/package/show/Base:System/osslsigncode?expand=0&rev=15
2022-04-14 09:43:12 +00:00
Summary: Platform-independent tool for Authenticode signing of EXE/CAB files
License: GPL-3.0-only
Group: Productivity/Security
URL: https://github.com/mtrojnar/osslsigncode
Source0: https://github.com/mtrojnar/osslsigncode/archive/%{version}/osslsigncode-%{version}.tar.gz
BuildRequires: cmake
Accepting request 968270 from home:dirkmueller:Factory - update to 2.3.0: * This release fixes several critical memory corruption vulnerabilities. A malicious attacker could create a file, which, when processed with osslsigncode, triggers arbitrary code execution. Any previous version of osslsigncode should be immediately upgraded if the tool is used for processing of untrusted files. * fixed non-interactive PVK (MSBLOB) key decryption * added a bash completion script * added CA bundle path auto-detection * CAT files support (thanks to James McKenzie) * MSI support rewritten without libgsf dependency, which allows * for handling of all the needed MSI metadata, such as dates * "-untrusted" option renamed to "-TSA-CAfile" * "-CRLuntrusted" option renamed to "-TSA-CRLfile" * numerous bug fixes and improvements * certificate chain verification support * timestamp verification support * CRL verification support ("-CRLfile" option) * improved CAB signature support * nested signatures support * user-specified signing time ("-st" option) by vszakats * added more tests * fixed numerous bugs * dropped OpenSSL 1.1.0 support * orphaned project adopted by Michał Trojnara * ported to OpenSSL 1.1.x * ported to SoftHSM2 * add support for pkcs11-based hardware tokens * improved error reporting of timestamping errors - drop 0001-Make-code-work-with-OpenSSL-1.1.patch (obsolete) OBS-URL: https://build.opensuse.org/request/show/968270 OBS-URL: https://build.opensuse.org/package/show/Base:System/osslsigncode?expand=0&rev=15
2022-04-14 09:43:12 +00:00
BuildRequires: pkgconfig
BuildRequires: pkgconfig(libcrypto) >= 1.1
BuildRequires: pkgconfig(libcurl)
%description
osslsigncode is a small utility for placing signatures on Microsoft cabinate
files and executables.
%prep
%setup -q
Accepting request 968270 from home:dirkmueller:Factory - update to 2.3.0: * This release fixes several critical memory corruption vulnerabilities. A malicious attacker could create a file, which, when processed with osslsigncode, triggers arbitrary code execution. Any previous version of osslsigncode should be immediately upgraded if the tool is used for processing of untrusted files. * fixed non-interactive PVK (MSBLOB) key decryption * added a bash completion script * added CA bundle path auto-detection * CAT files support (thanks to James McKenzie) * MSI support rewritten without libgsf dependency, which allows * for handling of all the needed MSI metadata, such as dates * "-untrusted" option renamed to "-TSA-CAfile" * "-CRLuntrusted" option renamed to "-TSA-CRLfile" * numerous bug fixes and improvements * certificate chain verification support * timestamp verification support * CRL verification support ("-CRLfile" option) * improved CAB signature support * nested signatures support * user-specified signing time ("-st" option) by vszakats * added more tests * fixed numerous bugs * dropped OpenSSL 1.1.0 support * orphaned project adopted by Michał Trojnara * ported to OpenSSL 1.1.x * ported to SoftHSM2 * add support for pkcs11-based hardware tokens * improved error reporting of timestamping errors - drop 0001-Make-code-work-with-OpenSSL-1.1.patch (obsolete) OBS-URL: https://build.opensuse.org/request/show/968270 OBS-URL: https://build.opensuse.org/package/show/Base:System/osslsigncode?expand=0&rev=15
2022-04-14 09:43:12 +00:00
%build
%cmake
%cmake_build
%install
%cmake_install
%files
Accepting request 968270 from home:dirkmueller:Factory - update to 2.3.0: * This release fixes several critical memory corruption vulnerabilities. A malicious attacker could create a file, which, when processed with osslsigncode, triggers arbitrary code execution. Any previous version of osslsigncode should be immediately upgraded if the tool is used for processing of untrusted files. * fixed non-interactive PVK (MSBLOB) key decryption * added a bash completion script * added CA bundle path auto-detection * CAT files support (thanks to James McKenzie) * MSI support rewritten without libgsf dependency, which allows * for handling of all the needed MSI metadata, such as dates * "-untrusted" option renamed to "-TSA-CAfile" * "-CRLuntrusted" option renamed to "-TSA-CRLfile" * numerous bug fixes and improvements * certificate chain verification support * timestamp verification support * CRL verification support ("-CRLfile" option) * improved CAB signature support * nested signatures support * user-specified signing time ("-st" option) by vszakats * added more tests * fixed numerous bugs * dropped OpenSSL 1.1.0 support * orphaned project adopted by Michał Trojnara * ported to OpenSSL 1.1.x * ported to SoftHSM2 * add support for pkcs11-based hardware tokens * improved error reporting of timestamping errors - drop 0001-Make-code-work-with-OpenSSL-1.1.patch (obsolete) OBS-URL: https://build.opensuse.org/request/show/968270 OBS-URL: https://build.opensuse.org/package/show/Base:System/osslsigncode?expand=0&rev=15
2022-04-14 09:43:12 +00:00
%license COPYING.txt LICENSE.txt
%{_bindir}/%{name}
%{_datadir}/bash-completion/completions/%{name}.bash
%changelog