rpm/libkcapi
SHA256
1
0
Fork 0
forked from pool/libkcapi
Code Pull Requests Activity

Compare commits

merge into: rpm:factory
Branches Tags
rpm:factory pool:factory pool:devel pool:slfo-1.2 pool:slfo-main
...
pull from: pool:factory
Branches Tags
pool:factory pool:devel pool:slfo-1.2 pool:slfo-main rpm:factory

4 Commits
factory ... factory

Author SHA256 Message Date
Ana Guerrero
3d1d0a345a Accepting request 1267100 from security 
- fixed sumprefix to be "." as before, also stores sums in the binary
  directoris. changed back packaging to be same as before. (forwarded request 1267099 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/1267100
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libkcapi?expand=0&rev=10
 2025-04-07 15:35:05 +00:00
Marcus Meissner
defe59af70 - fixed sumprefix to be "." as before, also stores sums in the binary 
directoris. changed back packaging to be same as before.

OBS-URL: https://build.opensuse.org/package/show/security/libkcapi?expand=0&rev=44
 2025-04-04 09:57:35 +00:00
Marcus Meissner
c0b05f0fdc - fixed sumprefix to be "." as before 
OBS-URL: https://build.opensuse.org/package/show/security/libkcapi?expand=0&rev=43
 2025-04-04 09:42:46 +00:00
Robert Frohl
aac1d4cc5c libkcapi 1.5.0 
Note the new paths for hmac files that align with Fedora and other distros - check if any other tooling depends on this

OBS-URL: https://build.opensuse.org/package/show/security/libkcapi?expand=0&rev=42
 2025-04-04 09:25:39 +00:00
6 changed files with 80 additions and 83 deletions
Expand all files Collapse all files

BIN
libkcapi-1.4.0.tar.xz (Stored with Git LFS)
View File

Binary file not shown.

11
libkcapi-1.4.0.tar.xz.asc
View File

@@ -1,11 +0,0 @@
-----BEGIN PGP SIGNATURE-----
iQEzBAABCAAdFiEEO8xD1NLIfReEtp7kQh7pNjJqwVsFAmISvaAACgkQQh7pNjJq
wVv6jggAh7UpchOXZ1THbDZ0PE+YGWSr3Y3qKHMls9ixNn/RDSYxPvyZqc6pIAKQ
zVA6bGtB9kqcSexmrk2EyiUYgi1lo+5HwsfAfHBQaq7vD1S8Q/FYx/XVRv2GQfkj
/E1ivlcdcInlpn+vu+7Hei+H/IXtETh8QPwGwRI1Je84pIt7K4K4VPwWpur0su6E
oF1AFT6ldlMczsoDTCi3eP3rZWKvMmX5718W9F6eKuTkKoIiipCUxdMBy4f6YpDB
1ZmQPHjSgG4URlclQnFiGXYAbMBRHYfguJRl/HjZWSQMigRzqGSdvJR8wrfMeQzr
Bk0z0nGayzHgcC7gPz8CsAMJj5C9eQ==
=OA3o
-----END PGP SIGNATURE-----

3
libkcapi-1.5.0.tar.xz Normal file
View File

@@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:15b550c14165a266fa233b485d029d54508da593dfa6d1731ec5d5a285c716e9
size 335144

11
libkcapi-1.5.0.tar.xz.asc Normal file
View File

@@ -0,0 +1,11 @@
-----BEGIN PGP SIGNATURE-----
iQEzBAABCAAdFiEEO8xD1NLIfReEtp7kQh7pNjJqwVsFAmWgNy0ACgkQQh7pNjJq
wVvBXAf+Jj6w9sssgWOnDsybgM8YmILFqikWgmHEDpKfsqQmMKLXT/6ovSFeRht5
TI0vPB9p1FDnBbVx7/go1lUwt+I+TZV5lW7Vl/goZh+O/VvWoSBdO1joBYqM3wYU
pqtf63WUBM9HcCj2s2pVjbZnblZloWQvH8Lo0eyuoDEJGMJgkKoTEq8/aEIVqZ3I
MyMdXm2R2JuhYgKJZw1k1c1eDt9xDs4iFCve7H4TnISqj5D0q5FRIKJVLwOFs20L
16S0aZSrR8IGMr2sUi6Qsric91xSlpz1MoIWocUoliWKHut/VuiXt9e4QAoD9d5t
kusdWafJhKkaTSWj1S7JQhtFmJq/Kw==
=xTnZ
-----END PGP SIGNATURE-----

26
libkcapi.changes
View File

@@ -1,3 +1,29 @@
-------------------------------------------------------------------
Fri Apr 4 09:41:07 UTC 2025 - Marcus Meissner <meissner@suse.com>
- fixed sumprefix to be "." as before, also stores sums in the binary
directoris. changed back packaging to be same as before.
-------------------------------------------------------------------
Sun Mar 16 21:59:36 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
- update to 1.5.0:
* kcapi-hasher is a new multi-call binary with a single hmac
* move all sha* applications to the libexec directory to allow
them to coexist with other packages sha* applications - the
caller is expected to make a symlink to them
* add sha3sum
* add kcapi_md_sha3_* wrapper APIs
* kcapi-enc: allow larger keysizes
* kcapi-enc: PBKDF limits key size to 32 bytes
* kcapi-enc: Add option --key-len to kcapi-enc to specify the
length of key
* library: set default log level to NONE
* performance improvements
- HMACs are now all sha512hmac, and in (libdir)/hmaccalc
- code is dual-licended GPL-2.0-only / BSD-3-Clause
- package license texts
------------------------------------------------------------------- -------------------------------------------------------------------
Mon Mar 6 15:17:46 UTC 2023 - Marcus Meissner <meissner@suse.com> Mon Mar 6 15:17:46 UTC 2023 - Marcus Meissner <meissner@suse.com>

107
libkcapi.spec
View File

@@ -1,7 +1,8 @@
# #
# spec file for package libkcapi # spec file for package libkcapi
# #
# Copyright (c) 2023 SUSE LLC # Copyright (c) 2025 SUSE LLC
# Copyright (c) 2025 Andreas Stieger <Andreas.Stieger@gmx.de>
# #
# All modifications and additions to the file contributed by third parties # All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed # remain the property of their copyright owners, unless otherwise agreed
@@ -16,15 +17,16 @@
# #
%define sover 1
Name: libkcapi Name: libkcapi
Version: 1.4.0 Version: 1.5.0
Release: 0 Release: 0
Summary: Linux Kernel Crypto API User Space Interface Library Summary: Linux Kernel Crypto API User Space Interface Library
License: GPL-2.0-only License: BSD-3-Clause OR GPL-2.0-only
Group: Productivity/Security Group: Productivity/Security
URL: https://www.chronox.de/libkcapi.html URL: https://www.chronox.de/libkcapi/
Source: https://www.chronox.de/libkcapi/libkcapi-%{version}.tar.xz Source: https://www.chronox.de/libkcapi/releases/%{version}/%{name}-%{version}.tar.xz
Source1: https://www.chronox.de/libkcapi/libkcapi-%{version}.tar.xz.asc Source1: https://www.chronox.de/libkcapi/releases/%{version}/%{name}-%{version}.tar.xz.asc
Source2: libkcapi.keyring Source2: libkcapi.keyring
BuildRequires: autoconf BuildRequires: autoconf
BuildRequires: automake BuildRequires: automake
@@ -37,17 +39,17 @@ libkcapi exports APIs so that developers need not consider the low-level
Netlink interface handling that is used for accesing the Linux kernel crypto Netlink interface handling that is used for accesing the Linux kernel crypto
API. API.
%package -n libkcapi1 %package -n libkcapi%{sover}
Summary: Linux Kernel Crypto API User Space Interface Library Summary: Linux Kernel Crypto API User Space Interface Library
Group: System/Libraries Group: System/Libraries
%description -n libkcapi1 %description -n libkcapi%{sover}
libkcapi allows user-space to access the Linux kernel crypto API. libkcapi allows user-space to access the Linux kernel crypto API.
%package devel %package devel
Summary: Linux Kernel Crypto API User Space Interface Library Summary: Linux Kernel Crypto API User Space Interface Library
Group: Development/Languages/C and C++ Group: Development/Languages/C and C++
Requires: libkcapi1 = %{version} Requires: libkcapi%{sover} = %{version}
%description devel %description devel
libkcapi exports APIs so that developers need not consider the low-level libkcapi exports APIs so that developers need not consider the low-level
@@ -76,7 +78,7 @@ libkcapi user space tools to access certain hash algorithms.
%autosetup -p1 %autosetup -p1
%build %build
autoreconf -i autoreconf -fiv
%configure \ %configure \
--disable-static \ --disable-static \
--enable-kcapi-test \ --enable-kcapi-test \
@@ -84,80 +86,49 @@ autoreconf -i
--enable-kcapi-hasher \ --enable-kcapi-hasher \
--enable-kcapi-rngapp \ --enable-kcapi-rngapp \
--enable-kcapi-encapp \ --enable-kcapi-encapp \
--enable-kcapi-dgstapp --enable-kcapi-dgstapp \
%{nil}
make %{?_smp_mflags} %make_build
%install %install
make install DESTDIR=%{buildroot} LIBDIR="%{_libdir}" BINDIR=/%{_libexecdir}/libkcapi/ %{?_smp_mflags} %make_install
rm %{buildroot}/%_libdir/libkcapi.la find %{buildroot} -type f -name "*.la" -delete -print
# do not ship hmac files unless we (re)generated them
mkdir -p %{buildroot}/%{_libexecdir}/libkcapi/ find %{buildroot} -type f -name "*.hmac" -delete -print
mv %{buildroot}/usr/bin/* %{buildroot}/%{_libexecdir}/libkcapi/ # Add generation of HMAC checksums of the libary and kcapi-hasher binary
mv %{buildroot}/usr/bin/.??* %{buildroot}/%{_libexecdir}/libkcapi/
# Add generation of HMAC checksums of the final fipshmac fipscheck stripped binaries
%define __spec_install_post \ %define __spec_install_post \
%{?__debug_package:%{__debug_install_post}} \ %{?__debug_package:%{__debug_install_post}} \
%{__arch_install_post} \ %{__arch_install_post} \
%{__os_install_post} \ %__os_install_post \
openssl sha256 -hmac orboDeJITITejsirpADONivirpUkvarP $RPM_BUILD_ROOT/%{_libexecdir}/libkcapi/fipscheck |sed -e 's/.* //;' > $RPM_BUILD_ROOT/%{_libexecdir}/libkcapi/.fipscheck.hmac \ openssl sha512 -hmac FIPS-FTW-RHT2009 %{buildroot}/%{_bindir}/kcapi-hasher |sed -e 's/.* //;' > %{buildroot}/%{_bindir}/.kcapi-hasher.hmac \
openssl sha256 -hmac orboDeJITITejsirpADONivirpUkvarP $RPM_BUILD_ROOT/%{_libexecdir}/libkcapi/fipshmac |sed -e 's/.* //;' > $RPM_BUILD_ROOT/%{_libexecdir}/libkcapi/.fipshmac.hmac \ openssl sha512 -hmac FIPS-FTW-RHT2009 %{buildroot}/%{_libdir}/libkcapi.so.%{version}|sed -e 's/.* //;' > %{buildroot}/%{_libdir}/.libkcapi.so.%{version}.hmac \
openssl sha256 -hmac orboDeJITITejsirpADONivirpUkvarP $RPM_BUILD_ROOT/%{_libexecdir}/libkcapi/sha1sum |sed -e 's/.* //;' > $RPM_BUILD_ROOT/%{_libexecdir}/libkcapi/.sha1sum.hmac \ openssl sha512 -hmac FIPS-FTW-RHT2009 %{buildroot}/%{_libdir}/libkcapi.so.%{sover}|sed -e 's/.* //;' > %{buildroot}/%{_libdir}/.libkcapi.so.%{sover}.hmac \
openssl sha256 -hmac orboDeJITITejsirpADONivirpUkvarP $RPM_BUILD_ROOT/%{_libexecdir}/libkcapi/sha256sum |sed -e 's/.* //;' > $RPM_BUILD_ROOT/%{_libexecdir}/libkcapi/.sha256sum.hmac \ openssl sha512 -hmac FIPS-FTW-RHT2009 %{buildroot}/%{_libdir}/libkcapi.so|sed -e 's/.* //;' > %{buildroot}/%{_libdir}/.libkcapi.so.hmac \
openssl sha256 -hmac orboDeJITITejsirpADONivirpUkvarP $RPM_BUILD_ROOT/%{_libexecdir}/libkcapi/sha384sum |sed -e 's/.* //;' > $RPM_BUILD_ROOT/%{_libexecdir}/libkcapi/.sha384sum.hmac \
openssl sha256 -hmac orboDeJITITejsirpADONivirpUkvarP $RPM_BUILD_ROOT/%{_libexecdir}/libkcapi/sha512sum |sed -e 's/.* //;' > $RPM_BUILD_ROOT/%{_libexecdir}/libkcapi/.sha512sum.hmac \
openssl sha512 -hmac FIPS-FTW-RHT2009 $RPM_BUILD_ROOT/%{_libexecdir}/libkcapi/sha1hmac |sed -e 's/.* //;' > $RPM_BUILD_ROOT/%{_libexecdir}/libkcapi/.sha1hmac.hmac \
openssl sha512 -hmac FIPS-FTW-RHT2009 $RPM_BUILD_ROOT/%{_libexecdir}/libkcapi/sha256hmac |sed -e 's/.* //;' > $RPM_BUILD_ROOT/%{_libexecdir}/libkcapi/.sha256hmac.hmac \
openssl sha512 -hmac FIPS-FTW-RHT2009 $RPM_BUILD_ROOT/%{_libexecdir}/libkcapi/sha384hmac |sed -e 's/.* //;' > $RPM_BUILD_ROOT/%{_libexecdir}/libkcapi/.sha384hmac.hmac \
openssl sha512 -hmac FIPS-FTW-RHT2009 $RPM_BUILD_ROOT/%{_libexecdir}/libkcapi/sha512hmac |sed -e 's/.* //;' > $RPM_BUILD_ROOT/%{_libexecdir}/libkcapi/.sha512hmac.hmac \
openssl sha256 -hmac orboDeJITITejsirpADONivirpUkvarP $RPM_BUILD_ROOT/%_libdir/libkcapi.so|sed -e 's/.* //;' > $RPM_BUILD_ROOT/%_libdir/.libkcapi.so.hmac \
openssl sha256 -hmac orboDeJITITejsirpADONivirpUkvarP $RPM_BUILD_ROOT/%_libdir/libkcapi.so.1|sed -e 's/.* //;' > $RPM_BUILD_ROOT/%_libdir/.libkcapi.so.1.hmac \
openssl sha256 -hmac orboDeJITITejsirpADONivirpUkvarP $RPM_BUILD_ROOT/%_libdir/libkcapi.so.%version|sed -e 's/.* //;' > $RPM_BUILD_ROOT/%_libdir/.libkcapi.so.%version.hmac \
%{nil} %{nil}
%post -n libkcapi1 -p /sbin/ldconfig %ldconfig_scriptlets -n libkcapi%{sover}
%postun -n libkcapi1 -p /sbin/ldconfig %files -n libkcapi%{sover}
%license COPYING COPYING.bsd COPYING.gplv2
%files -n libkcapi1
%license COPYING
%doc CHANGES.md %doc CHANGES.md
%{_libdir}/libkcapi.so.1.* %{_libdir}/libkcapi.so.%{sover}
%{_libdir}/libkcapi.so.1 %{_libdir}/libkcapi.so.%{sover}.*
%{_libdir}/.libkcapi.so.1* %{_libdir}/.libkcapi.so.%{sover}.hmac
%{_libdir}/.libkcapi.so.%{version}.hmac
%files devel %files devel
%license COPYING COPYING.bsd COPYING.gplv2
%{_includedir}/kcapi.h %{_includedir}/kcapi.h
%{_mandir}/man3/* %{_mandir}/man3/*3%{?ext_man}
%{_libdir}/libkcapi.so %{_libdir}/libkcapi.so
%{_libdir}/.libkcapi.so.hmac %{_libdir}/.libkcapi.so.hmac
%{_libdir}/pkgconfig/libkcapi.pc %{_libdir}/pkgconfig/libkcapi.pc
%files tools %files tools
%dir %{_libexecdir}/libkcapi %license COPYING COPYING.bsd COPYING.gplv2
%{_libexecdir}/libkcapi/*sum* %{_bindir}/*
%{_libexecdir}/libkcapi/*hmac* %{_libexecdir}/libkcapi
%{_libexecdir}/libkcapi/.*.hmac %{_bindir}/.kcapi-hasher.hmac
%{_libexecdir}/libkcapi/kcapi %{_mandir}/man1/*1%{?ext_man}
%{_libexecdir}/libkcapi/kcapi-convenience
%{_libexecdir}/libkcapi/compile-test.sh
%{_libexecdir}/libkcapi/hasher-test.sh
%{_libexecdir}/libkcapi/kcapi-convenience.sh
%{_libexecdir}/libkcapi/kcapi-dgst-test.sh
%{_libexecdir}/libkcapi/kcapi-enc-test-large
%{_libexecdir}/libkcapi/kcapi-enc-test-large.sh
%{_libexecdir}/libkcapi/kcapi-enc-test.sh
%{_libexecdir}/libkcapi/kcapi-fuzz-test.sh
%{_libexecdir}/libkcapi/fipscheck
%{_libexecdir}/libkcapi/kcapi-dgst
%{_libexecdir}/libkcapi/kcapi-enc
%{_libexecdir}/libkcapi/kcapi-rng
%{_libexecdir}/libkcapi/kcapi-speed
%{_libexecdir}/libkcapi/libtest.sh
%{_libexecdir}/libkcapi/test-invocation.sh
%{_libexecdir}/libkcapi/test.sh
%{_libexecdir}/libkcapi/virttest.sh
%{_mandir}/man1/kcapi*
%changelog %changelog