forked from pool/pesign-obs-integration
(merged in SLE changes entry) Also pull request to github repo. - 0001-sign-stage3.bin-from-s390-tools-with-sign-files-bsc-.patch Hard code signing of stage3.bin of s390-tools (bsc#1163524) - Require pesign on arm (boo#1134303). OBS-URL: https://build.opensuse.org/request/show/777389 OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=86
27 lines
758 B
Diff
27 lines
758 B
Diff
From 2ef935c08c201676665922c913db2fea429e45cc Mon Sep 17 00:00:00 2001
|
|
From: Marcus Meissner <meissner@suse.de>
|
|
Date: Thu, 13 Feb 2020 16:20:45 +0100
|
|
Subject: [PATCH] sign stage3.bin from s390-tools with sign-files (bsc#1163524)
|
|
|
|
---
|
|
pesign-repackage.spec.in | 3 +++
|
|
1 file changed, 3 insertions(+)
|
|
|
|
diff --git a/pesign-repackage.spec.in b/pesign-repackage.spec.in
|
|
index 1679878..3d3108b 100644
|
|
--- a/pesign-repackage.spec.in
|
|
+++ b/pesign-repackage.spec.in
|
|
@@ -148,6 +148,9 @@ for sig in "${sigs[@]}"; do
|
|
/usr/lib/rpm/pesign/gen-hmac -r %buildroot "/${sig%.sig}"
|
|
fi
|
|
;;
|
|
+ *stage3.bin.sig)
|
|
+ /usr/lib/rpm/pesign/kernel-sign-file -i pkcs7 -s "$sig" sha256 "$cert" "$f"
|
|
+ ;;
|
|
*)
|
|
echo "Warning: unhandled signature: $sig" >&2
|
|
esac
|
|
--
|
|
2.16.4
|
|
|