pool/pesign
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
785a24a77a
pesign/pesign.changes

436 lines
16 KiB
Plaintext
Raw Normal View History

Accepting request 753850 from home:gary_lin:branches:Base:System remove the superfluous type settings in pesigcheck to fix the gcc10 errors (boo#1158197) OBS-URL: https://build.opensuse.org/request/show/753850 OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign?expand=0&rev=54
2019-12-04 03:51:34 +01:00
-------------------------------------------------------------------
Wed Dec 4 02:38:05 UTC 2019 - Gary Ching-Pang Lin <glin@suse.com>
- Add pesign-boo1158197-fix-pesigncheck-gcc10.patch to remove the
superfluous type settings in pesigcheck to fix the gcc10 errors
(boo#1158197)
Accepting request 719976 from home:gary_lin:branches:Base:System - Add pesign-boo1143063-remove-var-tracking.patch to remove var-tracking from the default CFLAGS (boo#1143063) OBS-URL: https://build.opensuse.org/request/show/719976 OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign?expand=0&rev=52
2019-07-31 05:41:57 +02:00
-------------------------------------------------------------------
Wed Jul 31 03:26:37 UTC 2019 - Gary Ching-Pang Lin <glin@suse.com>
- Add pesign-boo1143063-remove-var-tracking.patch to remove
var-tracking from the default CFLAGS (boo#1143063)
Accepting request 714599 from home:gary_lin:branches:Base:System - Add pesign-efikeygen-Fix-the-build-with-nss-3.44.patch to fix the compilation error when building with NSS 3.44 OBS-URL: https://build.opensuse.org/request/show/714599 OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign?expand=0&rev=50
2019-07-11 11:05:00 +02:00
-------------------------------------------------------------------
Thu Jul 11 09:00:21 UTC 2019 - Gary Ching-Pang Lin <glin@suse.com>
- Add pesign-efikeygen-Fix-the-build-with-nss-3.44.patch to fix
the compilation error when building with NSS 3.44
Accepting request 706870 from home:jengelh:branches:Base:System - Trim conjecture from description. OBS-URL: https://build.opensuse.org/request/show/706870 OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign?expand=0&rev=48
2019-06-03 09:10:55 +02:00
-------------------------------------------------------------------
Sun Jun 2 07:01:51 UTC 2019 - Jan Engelhardt <jengelh@inai.de>
- Trim conjecture from description.
Accepting request 702580 from home:gary_lin:branches:Base:System Update to 113 OBS-URL: https://build.opensuse.org/request/show/702580 OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign?expand=0&rev=46
2019-05-13 09:18:23 +02:00
-------------------------------------------------------------------
Mon May 13 03:57:30 UTC 2019 - Gary Ching-Pang Lin <glin@suse.com>
- Update to 113
+ Get rid of the 0.Y versioning
+ Make --padding the default
+ Add kmod signing (drake)
+ efisiglist format fixes
+ enforce the use of --kernel or --module in efikeygen
+ RPM macro updates
+ Move the license to GPLv3+
+ Use sql-type NSS database by default
+ Various documentation improvements.
+ Improve /etc/pki/pesign authorization scripts
+ Various pesigcheck improvements
- Refresh patches
+ pesign-suse-build.patch
+ pesign-privkey_unneeded.diff
+ pesign-fix-authvar-write-loop.patch
- Drop upstreamed patches
+ pesign-fix-argument-list.patch
+ pesign-bsc1087742-fix-efisiglist.patch
- Drop pesign-fix-build-errors.patch since those warnings are gone
Accepting request 701792 from home:Guillaume_G:branches:Base:System - Enable build on %arm as we can sign kernel on %arm OBS-URL: https://build.opensuse.org/request/show/701792 OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign?expand=0&rev=42
2019-05-10 08:29:21 +02:00
-------------------------------------------------------------------
Thu May 9 12:25:31 UTC 2019 - Guillaume GARDET <guillaume.gardet@opensuse.org>
add bug number OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign?expand=0&rev=43
2019-05-10 10:43:50 +02:00
- Enable build on %arm as we can sign kernel on %arm (boo#1134670)
Accepting request 701792 from home:Guillaume_G:branches:Base:System - Enable build on %arm as we can sign kernel on %arm OBS-URL: https://build.opensuse.org/request/show/701792 OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign?expand=0&rev=42
2019-05-10 08:29:21 +02:00
Accepting request 698178 from home:jubalh:branches:Base:System - bsc#1130588: Require shadow instead of old pwdutils OBS-URL: https://build.opensuse.org/request/show/698178 OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign?expand=0&rev=41
2019-04-29 05:44:06 +02:00
-------------------------------------------------------------------
Fri Apr 26 11:12:46 UTC 2019 - mvetter@suse.com
- bsc#1130588: Require shadow instead of old pwdutils
Accepting request 592975 from home:gary_lin:branches:Base:System fix the generation of efi signature list. (bsc#1087742) OBS-URL: https://build.opensuse.org/request/show/592975 OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign?expand=0&rev=40
2018-04-02 11:54:53 +02:00
-------------------------------------------------------------------
Mon Apr 2 09:37:36 UTC 2018 - glin@suse.com
- Add pesign-bsc1087742-fix-efisiglist.patch to fix the generation
of efi signature list. (bsc#1087742)
Accepting request 418378 from home:gary_lin:branches:Base:System fix the argument list parsing OBS-URL: https://build.opensuse.org/request/show/418378 OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign?expand=0&rev=39
2016-08-11 06:10:05 +02:00
-------------------------------------------------------------------
Thu Aug 11 03:22:18 UTC 2016 - glin@suse.com
- Add pesign-fix-argument-list.patch to fix the argument list
parsing
Accepting request 391261 from home:gary_lin:branches:Base:System - Update to 0.112 - Refresh patches: pesign-suse-build.patch and pesign-run.patch - Drop upstreamed pesign-fix-signness.patch This fixes also gcc6 build failure. It blocks gcc6. So do you think is it OK to push it now? OBS-URL: https://build.opensuse.org/request/show/391261 OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign?expand=0&rev=38
2016-04-26 16:58:40 +02:00
-------------------------------------------------------------------
Thu Apr 21 09:36:23 UTC 2016 - glin@suse.com
- Update to 0.112
- Refresh patches: pesign-suse-build.patch and pesign-run.patch
- Drop upstreamed pesign-fix-signness.patch
Accepting request 346961 from home:gary_lin:branches:Base:System - Update to 0.111 - Add pesign-fix-signness.patch to fix the signness comparison - Drop upstreamed patches + pesign-efivar-pkgconfig.patch + pesign-make-efi_guid_t-const.patch + pesign-fix-import-sig-check.patch + pesign-install-supplementary-programs.patch - Refresh pesign-suse-build.patch, pesign-privkey_unneeded.diff, and pesign-run.patch - Update pesign-fix-build-errors.patch - Merge use-standard-pid-location.patch into pesign-run.patch OBS-URL: https://build.opensuse.org/request/show/346961 OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign?expand=0&rev=36
2015-12-01 10:03:35 +01:00
-------------------------------------------------------------------
Tue Nov 10 07:59:48 UTC 2015 - glin@suse.com
- Update to 0.111
- Add pesign-fix-signness.patch to fix the signness comparison
- Drop upstreamed patches
+ pesign-efivar-pkgconfig.patch
+ pesign-make-efi_guid_t-const.patch
+ pesign-fix-import-sig-check.patch
+ pesign-install-supplementary-programs.patch
- Refresh pesign-suse-build.patch, pesign-privkey_unneeded.diff,
and pesign-run.patch
- Update pesign-fix-build-errors.patch
- Merge use-standard-pid-location.patch into pesign-run.patch
Accepting request 328241 from home:dimstar:Factory This fixes the "unresolvable" currently seen in openSUSE:Factory; the || : is used in many other places (most often introdcued by jengelh) OBS-URL: https://build.opensuse.org/request/show/328241 OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign?expand=0&rev=35
2015-09-01 09:29:06 +02:00
-------------------------------------------------------------------
Tue Sep 1 06:11:06 UTC 2015 - dimstar@opensuse.org
- Do not buildrequire systemd: it conflicts with systemd-mini,
which is pulled in by systemd-mini-devel (due to BuildRequires:
pkgconfig(systemd).
- As we lack systemd-tmpfiles in the build env, we ignore the
errors cast in the %post scriptlet.
Accepting request 322868 from home:pluskalm:branches:Base:System - Update project url - Use url for download - Add rcpesign symlink - Tiny spec file cleanup with spec-cleaner OBS-URL: https://build.opensuse.org/request/show/322868 OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign?expand=0&rev=34
2015-08-17 04:24:40 +02:00
-------------------------------------------------------------------
Fri Aug 14 07:45:31 UTC 2015 - mpluskal@suse.com
- Update project url
- Use url for download
- Add rcpesign symlink
- Tiny spec file cleanup with spec-cleaner
. OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign?expand=0&rev=33
2015-07-13 13:07:47 +02:00
-------------------------------------------------------------------
Mon Jul 13 11:07:10 UTC 2015 - werner@suse.de
- Make it build, tool systemd-tmpfiles is part of systemd
Accepting request 312219 from home:gary_lin:branches:Base:System Add patches to adopt the latest efivar OBS-URL: https://build.opensuse.org/request/show/312219 OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign?expand=0&rev=32
2015-06-16 09:46:08 +02:00
-------------------------------------------------------------------
Tue Jun 16 06:52:21 UTC 2015 - glin@suse.com
- Add pesign-efivar-pkgconfig.patch to get the efivar compiler
parameters from pkg-confg
- Add pesign-make-efi_guid_t-const.patch to avoid the error from
gcc
Accepting request 263190 from home:gary_lin:branches:Base:System - fix the signature size check while importing a signature - Amend the spec file with spec-cleaner OBS-URL: https://build.opensuse.org/request/show/263190 OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign?expand=0&rev=31
2014-11-27 03:23:44 +01:00
-------------------------------------------------------------------
Wed Nov 26 09:46:50 UTC 2014 - glin@suse.com
- Add pesign-fix-import-sig-check.patch to fix the signature size
check while importing a signature
- Amend the spec file with spec-cleaner
Accepting request 259127 from home:gary_lin:branches:Base:System - Update pesign-suse-build.patch to set LIBDIR for AArch64 OBS-URL: https://build.opensuse.org/request/show/259127 OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign?expand=0&rev=30
2014-10-31 11:20:50 +01:00
-------------------------------------------------------------------
Fri Oct 31 07:16:40 UTC 2014 - glin@suse.com
- Update pesign-suse-build.patch to set LIBDIR for AArch64
Accepting request 258749 from home:gary_lin:branches:Base:System - Update to version 0.110 - Enable aarch64 OBS-URL: https://build.opensuse.org/request/show/258749 OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign?expand=0&rev=29
2014-10-29 09:11:07 +01:00
-------------------------------------------------------------------
Tue Oct 28 08:47:34 UTC 2014 - glin@suse.com
- Update to version 0.110
- Add pesign-fix-authvar-write-loop.patch to fix the write loop in
authvar
- Add pesign-install-supplementary-programs.patch to install the
supplementary programs
- Refresh patches
+ pesign-fix-build-errors.patch
+ pesign-run.patch
+ pesign-suse-build.patch
- Drop upstreamed patches
+ pesign-clear-padding-bits.patch
+ pesign-enable-supplementary-programs.patch
+ pesign-no-db.patch
- Enable aarch64
Accepting request 239077 from home:gary_lin:branches:Base:System Update pesign-enable-supplementary-programs.patch to fix write loop OBS-URL: https://build.opensuse.org/request/show/239077 OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign?expand=0&rev=28
2014-07-01 10:00:22 +02:00
-------------------------------------------------------------------
Tue Jul 1 06:46:13 UTC 2014 - glin@suse.com
- Update pesign-enable-supplementary-programs.patch to fix write
loop
Accepting request 236930 from home:gary_lin:branches:Base:System fix and enable the supplementary programs: pesigcheck, authvar, efisiglist OBS-URL: https://build.opensuse.org/request/show/236930 OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign?expand=0&rev=27
2014-06-12 05:26:16 +02:00
-------------------------------------------------------------------
Thu Jun 12 02:47:55 UTC 2014 - glin@suse.com
- Add pesign-enable-supplementary-programs.patch to fix and enable
the supplementary programs: pesigcheck, authvar, efisiglist
Accepting request 230287 from home:a_jaeger:FactoryFix Use /run OBS-URL: https://build.opensuse.org/request/show/230287 OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign?expand=0&rev=26
2014-04-16 09:27:13 +02:00
-------------------------------------------------------------------
Wed Apr 16 07:12:05 UTC 2014 - aj@suse.com
- Add pesign-run.patch: Use /run instead of /var/run (bnc#873857).
- mark dir in /var/run as %ghost OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign?expand=0&rev=25
2014-01-31 09:52:14 +01:00
-------------------------------------------------------------------
Fri Jan 31 08:49:12 UTC 2014 - lnussel@suse.de
- mark dir in /var/run as %ghost
Accepting request 209210 from home:gary_lin:branches:Base:System Add pesign-no-db.patch to allow some commands to proceed without a NSS database. OBS-URL: https://build.opensuse.org/request/show/209210 OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign?expand=0&rev=24
2013-12-03 03:58:26 +01:00
-------------------------------------------------------------------
Thu Nov 7 09:17:04 UTC 2013 - glin@suse.com
- Add pesign-no-db.patch to allow some commands to proceed without
a NSS database.
Accepting request 204436 from home:posophe:branches:Base:System Update and some improvements OBS-URL: https://build.opensuse.org/request/show/204436 OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign?expand=0&rev=22
2013-10-24 04:13:34 +02:00
-------------------------------------------------------------------
Accepting request 204477 from home:gary_lin:branches:Base:System Revert the dowload Url since it's not valid OBS-URL: https://build.opensuse.org/request/show/204477 OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign?expand=0&rev=23
2013-10-24 05:21:43 +02:00
Thu Oct 24 03:14:05 UTC 2013 - glin@suse.com
- Revert the dowload Url since it's not valid
-------------------------------------------------------------------
Accepting request 204436 from home:posophe:branches:Base:System Update and some improvements OBS-URL: https://build.opensuse.org/request/show/204436 OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign?expand=0&rev=22
2013-10-24 04:13:34 +02:00
Tue Oct 22 11:18:39 UTC 2013 - p.drouand@gmail.com
- Update to version 0.109
- Remove sysvinit related old stuff
- Remove redundant %clean section
- Add use-standard-pid-location.patch
Use the good location to stock pidfile
- Use download Url as source
- Rebase pesign-suse-build.patch to upstream changes as it has been
partially merged on upstream
- Remove pesign-allow-no-issuer-cert.patch; fixed on upstream
Accepting request 183593 from home:gary_lin:branches:Base:System Add pesign-allow-no-issuer-cert.patch to avoid crash when the issuer's certificate is not available OBS-URL: https://build.opensuse.org/request/show/183593 OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign?expand=0&rev=21
2013-07-18 09:25:53 +02:00
-------------------------------------------------------------------
Thu Jul 18 06:54:19 UTC 2013 - glin@suse.com
- Add pesign-allow-no-issuer-cert.patch to avoid crash when the
issuer's certificate is not available
Accepting request 183190 from home:gary_lin:branches:Base:System Update to 0.106 OBS-URL: https://build.opensuse.org/request/show/183190 OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign?expand=0&rev=18
2013-07-16 08:43:52 +02:00
-------------------------------------------------------------------
Tue Jul 9 04:44:44 UTC 2013 - glin@suse.com
- Update to 0.106
- Add pesign-clear-padding-bits.patch to clear the padding bits
- Rebase patches:
+ pesign-suse-build.patch
+ pesign-fix-build-errors.patch
+ pesign-privkey_unneeded.diff
- Drop upstreamed patches
+ pesign-client-initialize-action.patch
+ pesign-bnc808594-align-signatures.patch
+ pesign-upstream-fixes.patch
+ pesign-fix-export-attributes.patch
+ pesign-no-set-image-size.patch
+ pesign-client-read-pin-file.patch
+ pesign-local-database.patch
+ pesign-bnc801653-teardown-segfault.patch
+ pesign-bnc805166-fix-signature-list.patch
Accepting request 161509 from home:gary_lin:branches:Base:System bnc#808594: fix the alignment of the signature list OBS-URL: https://build.opensuse.org/request/show/161509 OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign?expand=0&rev=16
2013-03-28 04:56:52 +01:00
-------------------------------------------------------------------
Tue Mar 26 06:21:15 UTC 2013 - glin@suse.com
- Add pesign-bnc808594-align-signatures.patch to align signatures
(bnc#808594, bnc#811325)
Accepting request 156902 from home:gary_lin:branches:Base:System - Update pesign-bnc805166-fix-signature-list.patch to avoid the potential crash when inserting a signature (bnc#805166) - Add pwdutils to PreReq OBS-URL: https://build.opensuse.org/request/show/156902 OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign?expand=0&rev=14
2013-03-01 04:31:27 +01:00
-------------------------------------------------------------------
Fri Mar 1 03:04:35 UTC 2013 - glin@suse.com
- Update pesign-bnc805166-fix-signature-list.patch to avoid the
potential crash when inserting a signature (bnc#805166)
- Add pwdutils to PreReq
Accepting request 156163 from home:joeyli:branches:openSUSE:Factory:bnc805166 Modified pesign-bnc805166-fix-signature-list.patch, block out the source code for find/attach Issuer certificate (bnc#805166 comment#13) OBS-URL: https://build.opensuse.org/request/show/156163 OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign?expand=0&rev=11
2013-02-24 12:07:40 +01:00
-------------------------------------------------------------------
Accepting request 156290 from home:gary_lin:branches:Base:System Update pesign-bnc805166-fix-signature-list.patch to skip the unneeded private key request. (bnc#805166c#17) OBS-URL: https://build.opensuse.org/request/show/156290 OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign?expand=0&rev=12
2013-02-25 11:09:38 +01:00
Mon Feb 25 07:35:59 UTC 2013 - glin@suse.com
- Update pesign-bnc805166-fix-signature-list.patch to skip the
unneeded private key request. (bnc#805166c#17)
-------------------------------------------------------------------
Accepting request 156163 from home:joeyli:branches:openSUSE:Factory:bnc805166 Modified pesign-bnc805166-fix-signature-list.patch, block out the source code for find/attach Issuer certificate (bnc#805166 comment#13) OBS-URL: https://build.opensuse.org/request/show/156163 OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign?expand=0&rev=11
2013-02-24 12:07:40 +01:00
Sat Feb 23 04:47:48 UTC 2013 - jlee@suse.com
- Modified pesign-bnc805166-fix-signature-list.patch, block out the
source code for find/attach Issuer certificate
(bnc#805166 comment#13)
- Add pesign-bnc805166-fix-signature-list.patch to fix the broken signature list when inserting signature into a signed EFI binary (bnc#805166) OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign?expand=0&rev=9
2013-02-22 11:15:20 +01:00
-------------------------------------------------------------------
Fri Feb 22 08:44:43 UTC 2013 - glin@suse.com
- Add pesign-bnc805166-fix-signature-list.patch to fix the broken
signature list when inserting signature into a signed EFI binary
(bnc#805166)
fix signing OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign?expand=0&rev=7
2013-02-12 17:03:26 +01:00
-------------------------------------------------------------------
Tue Feb 12 15:32:11 CET 2013 - mls@suse.de
- do not try to recalculate the image size, it is included in the
hash and therefore must not change.
Accepting request 151539 from home:gary_lin:branches:Base:System - Merge patches for FATE#314552 + pesign-fix-export-attributes.patch: fix crash when exporting the signed attributes + pesign-privkey_unneeded.diff: Don't check the private key when importing the raw signature - Add pesign-bnc801653-teardown-segfault.patch to fix crash when freeing digests (bnc801653) - Drop pesign-digestdata.diff which is no longer needed. OBS-URL: https://build.opensuse.org/request/show/151539 OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign?expand=0&rev=5
2013-02-07 03:04:33 +01:00
-------------------------------------------------------------------
Wed Feb 6 10:44:48 UTC 2013 - glin@suse.com
- Merge patches for FATE#314552
+ pesign-fix-export-attributes.patch: fix crash when exporting
the signed attributes
+ pesign-privkey_unneeded.diff: Don't check the private key when
importing the raw signature
- Add pesign-bnc801653-teardown-segfault.patch to fix crash when
freeing digests (bnc801653)
- Drop pesign-digestdata.diff which is no longer needed.
Accepting request 149385 from home:gary_lin:branches:Base:System Add pesign-digestdata.diff to generate digestdata (FATE#314552) OBS-URL: https://build.opensuse.org/request/show/149385 OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign?expand=0&rev=3
2013-01-21 11:35:31 +01:00
-------------------------------------------------------------------
Mon Jan 21 10:17:28 UTC 2013 - glin@suse.com
- Add pesign-digestdata.diff to generate digestdata (FATE#314552)
Accepting request 148393 from home:gary_lin:UEFI Pesign is a tool to sign PE-COFF binaries which is the format used in UEFI. The UEFI loader, shim, needs pesign for package building. OBS-URL: https://build.opensuse.org/request/show/148393 OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign?expand=0&rev=1
2013-01-14 11:49:40 +01:00
-------------------------------------------------------------------
Wed Dec 12 13:18:40 UTC 2012 - fcrozat@suse.com
- Don't call sysv RPM post/pre macros when building for systemd
- Ship rcpesign for systemd, link to /sbin/service
- Update pesign-suse-build.patch to allow change systemd unit
install directory.
- Don't hardcode systemd unit directory, since it changed in
Factory.
-------------------------------------------------------------------
Tue Dec 11 07:10:04 UTC 2012 - glin@suse.com
- Add Requires: pwdutils
-------------------------------------------------------------------
Wed Nov 28 07:42:09 UTC 2012 - glin@suse.com
- Add pesign-local-database.patch to support the local certificate
database
- Amend the spec file to build on openSUSE:Factory
-------------------------------------------------------------------
Thu Nov 8 06:32:32 UTC 2012 - glin@suse.com
- Version bump to 0.99 (FATE#314484)
+ Add documentation for --daemonize and --nofork
+ Make popt aliases work
+ Add documentation for pesign-client
+ Add --pinfd and --pinfile to the client
- Update pesign-suse-build.patch and pesign-fix-build-errors.patch
- Add pesign-upstream-fixes.patch to backport fixes from git head
and add sysvinit script
- Add pesign-client-initialize-action.patch to initialize client
action to avoid undetermined flags.
- Add pesign-client-read-pin-file.patch to fix pin file reading
-------------------------------------------------------------------
Mon Oct 15 09:33:19 UTC 2012 - glin@suse.com
- Version bump to 0.98
+ close the socket immediately on invalid input
+ Slightly better error messages
+ Log an error if digest initialization fails
+ Add systemd bits for pesignd
+ Add actual signing code to the daemon
+ Add input and output setup for sign functionality in the daemon
+ Audit allocation of CERTCertificateList/PK11SlotList and
friends
+ Fix memory leaks
- Refresh pesign-suse-build.patch and pesign-fix-build-errors.patch
-------------------------------------------------------------------
Mon Aug 13 06:50:35 UTC 2012 - glin@suse.com
- Version bump to 0.9
+ Add NSS "token" support for smartcards.
+ Allocate space for the section header variable
- Refresh pesign-fix-build-errors.patch to fix the warning
- Drop upstreamed pesign-allocate-shdr.patch
-------------------------------------------------------------------
Fri Aug 10 10:12:53 UTC 2012 - glin@suse.com
- Add pesign-allocate-shdr.patch to allocate space for the section
header variable
-------------------------------------------------------------------
Thu Aug 9 03:53:45 UTC 2012 - glin@suse.com
- Version bump to 0.8
+ Don't open the DB r/w, read-only is fine.
+ Attempt to do a better job setting the image size.
+ Emit correct OID for encryption type.
- Drop pesign-fix-image-size.patch which is already in 0.8
-------------------------------------------------------------------
Tue Aug 7 03:03:17 UTC 2012 - glin@suse.com
- Add upstream patch pesign-fix-image-size.patch to set the image
size correctly.
- Drop pesign-elilo-workaround.patch
-------------------------------------------------------------------
Mon Aug 6 08:03:05 UTC 2012 - glin@suse.com
- Version bump to 0.7
+ Fix incorrect initialization error in (undocumented) -e option.
+ Use SEC_OID_PKCS1_RSA_ENCRYPTION like MS
+ Initialize the index variable of loop
+ Adjust the buffer size to avoid overflow
+ Make sure pe_populatecert() always returns a value
-------------------------------------------------------------------
Mon Jul 23 08:49:13 UTC 2012 - glin@suse.com
- Add pesign-elilo-workaround.patch to workaround the section
header corruption in some EFI image (elilo for example)
-------------------------------------------------------------------
Mon Jul 23 03:32:18 UTC 2012 - glin@suse.com
- Add pesign-fix-build-errors.patch to fix build error/warning
- Don't install the util efi images
- Fix the RPM_OPT_FLAGS warning
-------------------------------------------------------------------
Thu Jul 12 09:37:55 UTC 2012 - glin@suse.com
- Version bump to 0.5
+ Handle and report mremap() failure
+ Man page should be in section 1.
+ Add some basic signature list management.
+ Add some more efi-defined constants, flesh out efi_guid_t.
+ authver: Find a guid for 'namespace'.
+ Add some basic ucs2 functions :(
+ Support multiple signatures correctly.
+ Add ascii_to_ucs2()
+ Add file formats and some code for variables-on-disk.
+ Allow the memory map to move when we're allocating space in the
binary.
+ Remove extra call to ftruncate()
+ Adjust section addresses when we remap the pecoff binary.
+ Correctly set win_certificate.length to /include/
win_certificate.
+ Move certificate space iterator to wincert.c so other stuff can
get it.
+ Split allocating space for certs and filling it in.
+ Put the new signature into the cms ctx instead of keeping it
locally.
+ Actually calculate space and extend the file before hashing the
binary.
+ Bounds-check everything we're hashing so we don't segfault on a
bad bin.
- Add pesign-always-return-value.patch to fix
no-return-in-nonvoid-function
- Drop upsreamed patch pesign-mem-reallocation.patch
-------------------------------------------------------------------
Fri Jun 29 07:08:11 UTC 2012 - glin@suse.com
- Add pesign-mem-reallocation.patch to fix crash when writing
signature
-------------------------------------------------------------------
Tue Jun 26 07:02:49 UTC 2012 - glin@suse.com
- Version bump to 0.3
+ it seems to generate working signatures
-------------------------------------------------------------------
Thu Jun 21 08:31:42 UTC 2012 - glin@suse.com
- New package pesign 0.2
Reference in New Issue Copy Permalink