1
0
pesign-obs-integration/0001-sign-stage3.bin-from-s390-tools-with-sign-files-bsc-.patch
Gary Ching-Pang Lin b14ebb7b0a Accepting request 777389 from home:msmeissn:branches:Base:System
(merged in SLE changes entry)

Also pull request to github repo.

- 0001-sign-stage3.bin-from-s390-tools-with-sign-files-bsc-.patch
  Hard code signing of stage3.bin of s390-tools (bsc#1163524)

- Require pesign on arm (boo#1134303).

OBS-URL: https://build.opensuse.org/request/show/777389
OBS-URL: https://build.opensuse.org/package/show/Base:System/pesign-obs-integration?expand=0&rev=86
2020-02-24 02:13:53 +00:00

27 lines
758 B
Diff

From 2ef935c08c201676665922c913db2fea429e45cc Mon Sep 17 00:00:00 2001
From: Marcus Meissner <meissner@suse.de>
Date: Thu, 13 Feb 2020 16:20:45 +0100
Subject: [PATCH] sign stage3.bin from s390-tools with sign-files (bsc#1163524)
---
pesign-repackage.spec.in | 3 +++
1 file changed, 3 insertions(+)
diff --git a/pesign-repackage.spec.in b/pesign-repackage.spec.in
index 1679878..3d3108b 100644
--- a/pesign-repackage.spec.in
+++ b/pesign-repackage.spec.in
@@ -148,6 +148,9 @@ for sig in "${sigs[@]}"; do
/usr/lib/rpm/pesign/gen-hmac -r %buildroot "/${sig%.sig}"
fi
;;
+ *stage3.bin.sig)
+ /usr/lib/rpm/pesign/kernel-sign-file -i pkcs7 -s "$sig" sha256 "$cert" "$f"
+ ;;
*)
echo "Warning: unhandled signature: $sig" >&2
esac
--
2.16.4