osc copypac from project:openSUSE:Factory package:shim revision:36

OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/shim?expand=0&rev=38

shim.changes

@@ -1,3 +1,16 @@
+-------------------------------------------------------------------
+Wed Sep  3 12:32:25 UTC 2014 - lnussel@suse.de
+
+- re-introduce build failure if shim_enforce_ms_signature is defined. That way
+  a project like openSUSE:Factory can decide whether or not shim needs a valid
+  MS signature.
+
+-------------------------------------------------------------------
+Tue Aug 19 04:38:36 UTC 2014 - glin@suse.com
+
+- Add shim-update-openssl-0.9.8zb.patch to update openssl to
+  0.9.8zb
+
 -------------------------------------------------------------------
 Tue Aug 12 14:19:36 UTC 2014 - jsegitz@suse.com
 

shim.spec

@@ -54,6 +54,8 @@ Patch3:         shim-bnc863205-mokmanager-fix-hash-delete.patch
 Patch4:         shim-mokmanager-support-sha-family.patch
 # PATCH-FIX-OPENSUSE shim-signed-unsigned-compares.patch jsegitz@suse.com -- Fixed some signed - unsigned comparisons
 Patch5:         shim-signed-unsigned-compares.patch
+# PATCH-FIX-UPSTREAM shim-update-openssl-0.9.8zb.patch glin@suse.com -- Update openssl to 0.9.8zb
+Patch6:         shim-update-openssl-0.9.8zb.patch
 # PATCH-FIX-OPENSUSE shim-opensuse-cert-prompt.patch glin@suse.com -- Show the prompt to ask whether the user trusts openSUSE certificate or not
 Patch100:       shim-opensuse-cert-prompt.patch
 BuildRequires:  gnu-efi >= 3.0t
@@ -84,6 +86,7 @@ Authors:
 %patch3 -p1
 %patch4 -p1
 %patch5 -p1
+%patch6 -p1
 %patch100 -p1
 
 %build
@@ -162,6 +165,9 @@ for suffix in "${suffixes[@]}"; do
 	cat hash1 hash2
 	if ! cmp -s hash1 hash2; then
 		echo "ERROR: $suffix binary changed, need to request new signature!"
+%if %{defined shim_enforce_ms_signature}
+		false
+%endif
 		mv shim.efi.bak shim-$suffix.efi
 		rm shim.efi
 	else