rpm/pesign-obs-integration
SHA256
1
0
Fork 0
forked from pool/pesign-obs-integration
Code Pull Requests Activity
pesign-obs-integration/pesign-obs-integration.changes
Stephan Kulow 4ee730db27 Accepting request 231426 from home:michal-m:branches:Base:System 
- Fix matching /boot and /lib/firmware in pesign-repackage.spec

- Do not store the buildroot in the .*.hmac file.

- Regenerate the HMAC checksum when signing and EFI binary with
  a checksum (fate#316930, bnc#856310).

- Update README.

- Add /usr/lib/rpm/pesign/gen-hmac tool to generate a hmac checksum
  for a given file (fate#316930, bnc#856310).

OBS-URL: https://build.opensuse.org/request/show/231426
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=23
2014-04-27 07:52:13 +00:00

184 lines
5.9 KiB
Plaintext
Raw Blame History

-------------------------------------------------------------------
Thu Apr 24 09:25:18 UTC 2014 - mmarek@suse.cz
- Fix matching /boot and /lib/firmware in pesign-repackage.spec
-------------------------------------------------------------------
Wed Apr 23 22:28:05 UTC 2014 - mmarek@suse.com
- Do not store the buildroot in the .*.hmac file.
-------------------------------------------------------------------
Wed Apr 23 21:48:04 UTC 2014 - mmarek@suse.com
- Regenerate the HMAC checksum when signing and EFI binary with
a checksum (fate#316930, bnc#856310).
-------------------------------------------------------------------
Wed Apr 23 21:38:42 UTC 2014 - mmarek@suse.com
- Update README.
-------------------------------------------------------------------
Wed Apr 23 19:49:09 UTC 2014 - mmarek@suse.cz
- Add /usr/lib/rpm/pesign/gen-hmac tool to generate a hmac checksum
for a given file (fate#316930, bnc#856310).
-------------------------------------------------------------------
Thu Apr 3 12:01:54 CEST 2014 - ro@suse.de
- pesign-gen-repackage-spec: switch to new rpm style handling
of weak dependencies
-------------------------------------------------------------------
Thu Jan 16 15:12:22 UTC 2014 - mmarek@suse.cz
- Do not sign any files if BRP_PESIGN_FILES is set not an empty
string (bnc#857599).
-------------------------------------------------------------------
Tue Jan 7 09:50:58 UTC 2014 - mmarek@suse.cz
- Fix a typo in the last change.
-------------------------------------------------------------------
Mon Jan 6 22:08:41 UTC 2014 - mmarek@suse.cz
- Default to BRP_PESIGN_FILES="*.ko /lib/firmware" (bnc#857599).
-------------------------------------------------------------------
Mon Jan 6 16:35:30 UTC 2014 - mmarek@suse.cz
- Add --signatures=<directory> option to modsign-repackage
(bnc#841627).
-------------------------------------------------------------------
Fri Jun 14 12:19:47 UTC 2013 - mmarek@suse.cz
- Put debuginfo packages to %_topdir/OTHER (bnc#824971).
-------------------------------------------------------------------
Thu Mar 28 15:55:10 UTC 2013 - mmarek@suse.cz
- Version 10
- Add modsign-repackage tool to repackage RPMs outside the buildservice
-------------------------------------------------------------------
Tue Mar 26 06:19:45 UTC 2013 - glin@suse.com
- Calculate the digest of the padded data section to be consistent
with the output file (bnc#808594, bnc#811325)
-------------------------------------------------------------------
Fri Mar 15 06:19:39 UTC 2013 - coolo@suse.com
- correct the license of the generated package to fix build
-------------------------------------------------------------------
Tue Mar 5 08:23:48 UTC 2013 - mmarek@suse.cz
- Do not repackage debuginfo package (bnc#806637)
-------------------------------------------------------------------
Mon Mar 4 16:08:34 UTC 2013 - mmarek@suse.cz
- Version 9
- Add support for triggers (bnc#806737)
-------------------------------------------------------------------
Wed Feb 20 09:16:24 UTC 2013 - mmarek@suse.cz
- Do not fail the build if %_topdir/OTHER cannot be created
-------------------------------------------------------------------
Wed Feb 13 14:51:47 UTC 2013 - mmarek@suse.cz
- Version 8
- Hide baselibs from post-build-checks
-------------------------------------------------------------------
Wed Feb 13 09:34:27 UTC 2013 - mmarek@suse.cz
- Do not repackage baselibs
-------------------------------------------------------------------
Wed Feb 13 08:28:31 UTC 2013 - mmarek@suse.cz
- Version 7
- Fix for scriptlets with empty body
-------------------------------------------------------------------
Tue Feb 12 15:42:22 CET 2013 - mls@suse.de
- reduce debugging as pesign is now fixed
-------------------------------------------------------------------
Tue Feb 12 12:33:41 CET 2013 - mls@suse.de
- add a bit of debug output to find out why the kernel signatures
are bad
-------------------------------------------------------------------
Wed Feb 6 13:24:14 CET 2013 - mls@suse.de
- switch to normal brp hook
- mv stuff in pesign directory instead of cluttering /usr/lib/rpm
-------------------------------------------------------------------
Fri Feb 1 17:18:32 CET 2013 - mls@suse.de
- fix pesign calls
-------------------------------------------------------------------
Fri Feb 1 10:19:52 UTC 2013 - mmarek@suse.cz
- Add some preliminary code to sign EFI binaries, marked with
FIXMEs.
-------------------------------------------------------------------
Wed Jan 30 09:47:25 UTC 2013 - mmarek@suse.cz
- Version 6
- Fix handling packages with NoSource
- Fix for multiple patterns in %sign_files
-------------------------------------------------------------------
Tue Jan 29 13:44:43 UTC 2013 - mmarek@suse.cz
- Version 5
- Use newc-style cpio archives, as required by the buildservice.
- Use signing certificates provided by the buildservice.
- Minor fixes.
-------------------------------------------------------------------
Mon Jan 28 15:01:17 UTC 2013 - mmarek@suse.cz
- Version 4
- Support for firmware signatures.
- Expect the correct archive with signatures (<name>.cpio.rsasign.sig).
- Minor fixes.
-------------------------------------------------------------------
Wed Jan 23 22:01:40 UTC 2013 - mmarek@suse.cz
- Version 3
- Switch to storing whole files in the *.cpio.rsasign archive.
- Append the signatures to kernel modules.
-------------------------------------------------------------------
Fri Jan 18 12:51:17 UTC 2013 - mmarek@suse.cz
- Version 2
- Generates another specfile in pesign-repackage.spec to
be able to copy nearly all RPM tags from the original packages.
- Changed to only store sha256 hashes in the *.cpio.rsasign file,
instead of whole files.
-------------------------------------------------------------------
Thu Dec 13 12:06:00 UTC 2012 - mmarek@suse.com
- Created package with macros and scripts to integrate kernel and
bootloader signing into OBS (fate#314552).
View Git Blame Copy Permalink