pool/shim
SHA256
4
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Accepting request 523848 from home:gary_lin:branches:devel:openSUSE:Factory

Browse Source 
- Add shim-back-to-openssl-1.0.2e.patch to avoid rejecting some legit certificates (bsc#1054712)
- Add the stderr mask back while compiling MokManager.efi since the warnings in Cryptlib is back after reverting the openssl commits.

OBS-URL: https://build.opensuse.org/request/show/523848
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory/shim?expand=0&rev=133
This commit is contained in:
Gary Ching-Pang Lin 2017-09-13 04:49:11 +00:00 committed by Git OBS Bridge
parent 6e9b303231
commit d76523f457
3 changed files with 178044 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

178031
shim-back-to-openssl-1.0.2e.patch Normal file
View File

File diff suppressed because it is too large Load Diff

8
shim.changes
View File

@ -1,3 +1,11 @@
-------------------------------------------------------------------
Wed Sep 13 04:13:21 UTC 2017 - glin@suse.com
- Add shim-back-to-openssl-1.0.2e.patch to avoid rejecting some
legit certificates (bsc#1054712)
- Add the stderr mask back while compiling MokManager.efi since the
warnings in Cryptlib is back after reverting the openssl commits.
------------------------------------------------------------------- -------------------------------------------------------------------
Tue Aug 29 08:44:25 UTC 2017 - glin@suse.com Tue Aug 29 08:44:25 UTC 2017 - glin@suse.com

7
shim.spec
View File

@ -45,7 +45,7 @@ Source12: signature-sles.asc
Source99: SIGNATURE_UPDATE.txt Source99: SIGNATURE_UPDATE.txt
# PATCH-FIX-SUSE shim-only-os-name.patch glin@suse.com -- Only include the OS name in version.c # PATCH-FIX-SUSE shim-only-os-name.patch glin@suse.com -- Only include the OS name in version.c
Patch1: shim-only-os-name.patch Patch1: shim-only-os-name.patch
# PATCH-FIX-SUSE shim-only-os-name.patch glin@suse.com -- Use the Arch-independent names # PATCH-FIX-SUSE shim-arch-independent-names.patch glin@suse.com -- Use the Arch-independent names
Patch2: shim-arch-independent-names.patch Patch2: shim-arch-independent-names.patch
# PATCH-FIX-UPSTREAM shim-fix-httpboot-crash.patch glin@suse.com -- Fix HTTPBoot crash # PATCH-FIX-UPSTREAM shim-fix-httpboot-crash.patch glin@suse.com -- Fix HTTPBoot crash
Patch3: shim-fix-httpboot-crash.patch Patch3: shim-fix-httpboot-crash.patch
@ -59,6 +59,8 @@ Patch6: shim-add-fallback-verbose-print.patch
Patch7: shim-fallback-workaround-masked-ami-variables.patch Patch7: shim-fallback-workaround-masked-ami-variables.patch
# PATCH-FIX-UPSTREAM shim-more-tpm-measurement.patch glin@suse.com -- Measure more components for TPM # PATCH-FIX-UPSTREAM shim-more-tpm-measurement.patch glin@suse.com -- Measure more components for TPM
Patch8: shim-more-tpm-measurement.patch Patch8: shim-more-tpm-measurement.patch
# PATCH-FIX-UPSTREAM shim-back-to-openssl-1.0.2e.patch bsc#1054712 glin@suse.com -- Revert openssl back to 1.0.2e due to the rejection of some legit certificates
Patch9: shim-back-to-openssl-1.0.2e.patch
# PATCH-FIX-OPENSUSE shim-change-debug-file-path.patch glin@suse.com -- Change the default debug file path # PATCH-FIX-OPENSUSE shim-change-debug-file-path.patch glin@suse.com -- Change the default debug file path
Patch50: shim-change-debug-file-path.patch Patch50: shim-change-debug-file-path.patch
# PATCH-FIX-OPENSUSE shim-opensuse-cert-prompt.patch glin@suse.com -- Show the prompt to ask whether the user trusts openSUSE certificate or not # PATCH-FIX-OPENSUSE shim-opensuse-cert-prompt.patch glin@suse.com -- Show the prompt to ask whether the user trusts openSUSE certificate or not
@ -114,6 +116,7 @@ Authors:
%patch6 -p1 %patch6 -p1
%patch7 -p1 %patch7 -p1
%patch8 -p1 %patch8 -p1
%patch9 -p1
%patch50 -p1 %patch50 -p1
%if 0%{?is_opensuse} == 1 %if 0%{?is_opensuse} == 1
%patch100 -p1 %patch100 -p1
@ -121,7 +124,7 @@ Authors:
%build %build
# first, build MokManager and fallback as they don't depend on a # first, build MokManager and fallback as they don't depend on a
# specific certificate # specific certificate
make EFI_PATH=/usr/lib64 RELEASE=0 MokManager.efi fallback.efi make EFI_PATH=/usr/lib64 RELEASE=0 MokManager.efi fallback.efi 2> /dev/null
# now build variants of shim that embed different certificates # now build variants of shim that embed different certificates
default='' default=''