pool/pesign-obs-integration
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Accepting request 777389 from home:msmeissn:branches:Base:System

Browse Source 
(merged in SLE changes entry)

Also pull request to github repo.

- 0001-sign-stage3.bin-from-s390-tools-with-sign-files-bsc-.patch
  Hard code signing of stage3.bin of s390-tools (bsc#1163524)

- Require pesign on arm (boo#1134303).

OBS-URL: https://build.opensuse.org/request/show/777389
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=86
This commit is contained in:
Gary Ching-Pang Lin 2020-02-24 02:13:53 +00:00 committed by Git OBS Bridge
parent 034791523e
commit b14ebb7b0a
3 changed files with 42 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
0001-sign-stage3.bin-from-s390-tools-with-sign-files-bsc-.patch Normal file
View File

@ -0,0 +1,26 @@
From 2ef935c08c201676665922c913db2fea429e45cc Mon Sep 17 00:00:00 2001
From: Marcus Meissner <meissner@suse.de>
Date: Thu, 13 Feb 2020 16:20:45 +0100
Subject: [PATCH] sign stage3.bin from s390-tools with sign-files (bsc#1163524)
---
pesign-repackage.spec.in | 3 +++
1 file changed, 3 insertions(+)
diff --git a/pesign-repackage.spec.in b/pesign-repackage.spec.in
index 1679878..3d3108b 100644
--- a/pesign-repackage.spec.in
+++ b/pesign-repackage.spec.in
@@ -148,6 +148,9 @@ for sig in "${sigs[@]}"; do
/usr/lib/rpm/pesign/gen-hmac -r %buildroot "/${sig%.sig}"
fi
;;
+ *stage3.bin.sig)
+ /usr/lib/rpm/pesign/kernel-sign-file -i pkcs7 -s "$sig" sha256 "$cert" "$f"
+ ;;
*)
echo "Warning: unhandled signature: $sig" >&2
esac
--
2.16.4

11
pesign-obs-integration.changes
View File

@ -1,3 +1,9 @@
-------------------------------------------------------------------
Wed Feb 19 14:25:32 UTC 2020 - Marcus Meissner <meissner@suse.com>
- 0001-sign-stage3.bin-from-s390-tools-with-sign-files-bsc-.patch
Hard code signing of stage3.bin of s390-tools (bsc#1163524)
-------------------------------------------------------------------
Wed Nov 6 09:58:34 UTC 2019 - Jiri Slaby <jslaby@suse.com>
@ -10,6 +16,11 @@ Wed Nov 6 03:52:16 UTC 2019 - Gary Ching-Pang Lin <glin@suse.com>
- 0001-Keep-the-files-in-the-OTHER-directory.patch to keep the
files in the OTHER directory (boo#1155474)
-------------------------------------------------------------------
Wed Sep 4 12:18:39 UTC 2019 - Michal Suchanek <msuchanek@suse.com>
- Require pesign on arm (boo#1134303).
-------------------------------------------------------------------
Thu Aug 1 02:41:28 UTC 2019 - Gary Ching-Pang Lin <glin@suse.com>

7
pesign-obs-integration.spec
View File

@ -1,7 +1,7 @@
#
# spec file for package pesign-obs-integration
#
# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
# Copyright (c) 2020 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@ -30,13 +30,15 @@ Requires: openssl
Requires: pesign
%endif
BuildRequires: openssl
Url: http://en.opensuse.org/openSUSE:UEFI_Image_File_Sign_Tools
URL: http://en.opensuse.org/openSUSE:UEFI_Image_File_Sign_Tools
Source: %{name}_%{version}.tar.gz
Patch1: 0001-Passthrough-license-tag.patch
Patch2: 0001-Add-support-for-kernel-module-compression.patch
Patch3: 0001-Initialize-compress-variable.patch
Patch4: 0001-Keep-the-files-in-the-OTHER-directory.patch
Patch5: 0001-brp-99-compress-vmlinux-support-xz-compressed-vmlinu.patch
# https://github.com/openSUSE/pesign-obs-integration/pull/17
Patch6: 0001-sign-stage3.bin-from-s390-tools-with-sign-files-bsc-.patch
BuildRoot: %{_tmppath}/%{name}-%{version}-build
# suse-module-tools <= 15.0.10 contains modsign-verify
Requires: suse-module-tools >= 15.0.10
@ -52,6 +54,7 @@ boot loader, kernel and kernel modules in the openSUSE Buildservice.
%patch3 -p1
%patch4 -p1
%patch5 -p1
%patch6 -p1
%build