|
 |
0ac9f2 |
%global macrosdir %(d=%{_rpmconfigdir}/macros.d; [ -d $d ] || d=%{_sysconfdir}/rpm; echo $d)
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
Name: pesign
|
|
|
0ac9f2 |
Summary: Signing utility for UEFI binaries
|
|
|
0ac9f2 |
Version: 0.112
|
|
|
34bac8 |
Release: 26%{?dist}
|
|
|
0ac9f2 |
License: GPLv2
|
|
|
0ac9f2 |
URL: https://github.com/vathpela/pesign
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
Obsoletes: pesign-rh-test-certs <= 0.111-7
|
|
|
0ac9f2 |
BuildRequires: git nspr nss nss-util popt-devel
|
|
|
0ac9f2 |
BuildRequires: nss-tools
|
|
|
0ac9f2 |
BuildRequires: nspr-devel >= 4.9.2-1
|
|
|
0ac9f2 |
BuildRequires: nss-devel >= 3.13.6-1
|
|
|
0ac9f2 |
BuildRequires: efivar-devel >= 31-1
|
|
|
0ac9f2 |
BuildRequires: libuuid-devel
|
|
|
0ac9f2 |
BuildRequires: tar xz
|
|
|
0ac9f2 |
BuildRequires: python3-rpm-macros python3
|
|
|
0ac9f2 |
%if 0%{?rhel} >= 7 || 0%{?fedora} >= 17
|
|
|
0ac9f2 |
BuildRequires: systemd
|
|
|
0ac9f2 |
%endif
|
|
|
0ac9f2 |
Requires: nspr nss nss-util nss-tools popt rpm
|
|
|
0ac9f2 |
Requires(pre): shadow-utils
|
|
|
0ac9f2 |
ExclusiveArch: %{ix86} x86_64 ia64 aarch64 %{arm}
|
|
|
0ac9f2 |
%if 0%{?rhel} == 7
|
|
|
0ac9f2 |
BuildRequires: rh-signing-tools >= 1.20-2
|
|
|
0ac9f2 |
%endif
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
Source0: https://github.com/vathpela/pesign/releases/download/%{version}/pesign-%{version}.tar.bz2
|
|
|
0ac9f2 |
Source1: certs.tar.xz
|
|
|
0ac9f2 |
Source2: pesign.py
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
Patch0001: 0001-cms-kill-generate_integer-it-doesn-t-build-on-i686-a.patch
|
|
|
0ac9f2 |
Patch0002: 0002-Fix-command-line-parsing.patch
|
|
|
0ac9f2 |
Patch0003: 0003-gcc-don-t-error-on-stuff-in-includes.patch
|
|
|
0ac9f2 |
Patch0004: 0004-Fix-certficate-argument-name.patch
|
|
|
0ac9f2 |
Patch0005: 0005-Fix-description-of-ascii-armor-option-in-manpage.patch
|
|
|
0ac9f2 |
Patch0006: 0006-Make-ascii-work-since-we-documented-it.patch
|
|
|
0ac9f2 |
Patch0007: 0007-Switch-pesign-client-to-also-accept-token-cert-macro.patch
|
|
|
0ac9f2 |
Patch0008: 0008-pesigcheck-Verify-with-the-cert-as-an-object-signer.patch
|
|
|
0ac9f2 |
Patch0009: 0009-pesigcheck-make-certfile-actually-work.patch
|
|
|
0ac9f2 |
Patch0010: 0010-signerInfos-make-sure-err-is-always-initialized.patch
|
|
|
0ac9f2 |
Patch0011: 0011-pesign-make-pesign-h-tell-you-the-file-name.patch
|
|
|
0ac9f2 |
Patch0012: 0012-Add-coverity-build-scripts.patch
|
|
|
0ac9f2 |
Patch0013: 0013-Document-implicit-fallthrough.patch
|
|
|
0ac9f2 |
Patch0014: 0014-Actually-setfacl-each-directory-of-our-key-storage.patch
|
|
|
0ac9f2 |
Patch0015: 0015-oid-add-SHIM_EKU_MODULE_SIGNING_ONLY-and-fix-our-arr.patch
|
|
|
0ac9f2 |
Patch0016: 0016-efikeygen-add-modsign.patch
|
|
|
0ac9f2 |
Patch0017: 0017-check_cert_db-try-even-harder-to-pick-a-reasonable-v.patch
|
|
|
0ac9f2 |
Patch0018: 0018-show-which-db-we-re-checking.patch
|
|
|
0ac9f2 |
Patch0019: 0019-more-about-the-time.patch
|
|
|
0ac9f2 |
Patch0020: 0020-try-to-say-why-something-fails.patch
|
|
|
0ac9f2 |
Patch0021: 0021-Fix-race-condition-in-SEC_GetPassword.patch
|
|
|
0ac9f2 |
Patch0022: 0022-sysvinit-Create-the-socket-directory-at-runtime.patch
|
|
|
0ac9f2 |
Patch0023: 0023-Better-authorization-scripts.-Again.patch
|
|
|
0ac9f2 |
Patch0024: 0024-Make-the-daemon-also-try-to-give-better-errors-on-EP.patch
|
|
|
0ac9f2 |
Patch0025: 0025-certdb-fix-PRTime-printfs-for-i686.patch
|
|
|
0ac9f2 |
Patch0026: 0026-Clean-up-gcc-command-lines-a-little.patch
|
|
|
0ac9f2 |
Patch0027: 0027-Make-pesign-users-groups-static-in-the-repo.patch
|
|
|
0ac9f2 |
Patch0028: 0028-rpm-Make-the-client-signer-use-the-fedora-values-unl.patch
|
|
|
0ac9f2 |
Patch0029: 0029-Make-macros.pesign-error-in-kojibuilder-if-we-don-t-.patch
|
|
|
34bac8 |
Patch0030: 0030-Replace-var-run-with-run.patch
|
|
|
34bac8 |
Patch0031: 0031-efikeygen-Fix-the-build-with-nss-3.44.patch
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
%description
|
|
|
0ac9f2 |
This package contains the pesign utility for signing UEFI binaries as
|
|
|
0ac9f2 |
well as other associated tools.
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
%prep
|
|
|
0ac9f2 |
%setup -q -T -b 0
|
|
|
0ac9f2 |
%setup -q -T -D -c -n pesign-%{version}/ -a 1
|
|
|
0ac9f2 |
git init
|
|
|
0ac9f2 |
git config user.email "pesign-owner@fedoraproject.org"
|
|
|
0ac9f2 |
git config user.name "Fedora Ninjas"
|
|
|
0ac9f2 |
git add .
|
|
|
0ac9f2 |
git commit -a -q -m "%{version} baseline."
|
|
|
0ac9f2 |
git am %{patches}
|
|
|
0ac9f2 |
git config --unset user.email
|
|
|
0ac9f2 |
git config --unset user.name
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
%build
|
|
|
0ac9f2 |
make PREFIX=%{_prefix} LIBDIR=%{_libdir}
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
%install
|
|
|
0ac9f2 |
mkdir -p %{buildroot}/%{_libdir}
|
|
|
0ac9f2 |
make PREFIX=%{_prefix} LIBDIR=%{_libdir} INSTALLROOT=%{buildroot} \
|
|
|
0ac9f2 |
install
|
|
|
0ac9f2 |
%if 0%{?rhel} >= 7 || 0%{?fedora} >= 17
|
|
|
0ac9f2 |
make PREFIX=%{_prefix} LIBDIR=%{_libdir} INSTALLROOT=%{buildroot} \
|
|
|
0ac9f2 |
install_systemd
|
|
|
0ac9f2 |
%endif
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
# there's some stuff that's not really meant to be shipped yet
|
|
|
0ac9f2 |
rm -rf %{buildroot}/boot %{buildroot}/usr/include
|
|
|
0ac9f2 |
rm -rf %{buildroot}%{_libdir}/libdpe*
|
|
|
0ac9f2 |
mkdir -p %{buildroot}%{_sysconfdir}/pki/pesign/
|
|
|
0ac9f2 |
mkdir -p %{buildroot}%{_sysconfdir}/pki/pesign-rh-test/
|
|
|
0ac9f2 |
cp -a etc/pki/pesign/* %{buildroot}%{_sysconfdir}/pki/pesign/
|
|
|
0ac9f2 |
cp -a etc/pki/pesign-rh-test/* %{buildroot}%{_sysconfdir}/pki/pesign-rh-test/
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
if [ %{macrosdir} != %{_sysconfdir}/rpm ]; then
|
|
|
0ac9f2 |
mkdir -p %{buildroot}%{macrosdir}
|
|
|
0ac9f2 |
mv %{buildroot}%{_sysconfdir}/rpm/macros.pesign \
|
|
|
0ac9f2 |
%{buildroot}%{macrosdir}
|
|
|
0ac9f2 |
rmdir %{buildroot}%{_sysconfdir}/rpm
|
|
|
0ac9f2 |
fi
|
|
|
0ac9f2 |
rm -vf %{buildroot}/usr/share/doc/pesign-%{version}/COPYING
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
# and find-debuginfo.sh has some pretty awful deficencies too...
|
|
|
0ac9f2 |
cp -av libdpe/*.[ch] src/
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
install -d -m 0755 %{buildroot}%{python3_sitelib}/mockbuild/plugins/
|
|
|
0ac9f2 |
install -m 0755 -p %{SOURCE2} %{buildroot}%{python3_sitelib}/mockbuild/plugins/
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
%pre
|
|
|
0ac9f2 |
getent group pesign >/dev/null || groupadd -r pesign
|
|
|
0ac9f2 |
getent passwd pesign >/dev/null || \
|
|
|
34bac8 |
useradd -r -g pesign -d /run/pesign -s /sbin/nologin \
|
|
|
0ac9f2 |
-c "Group for the pesign signing daemon" pesign
|
|
|
0ac9f2 |
exit 0
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
%if 0%{?rhel} >= 7 || 0%{?fedora} >= 17
|
|
|
0ac9f2 |
%post
|
|
|
0ac9f2 |
%systemd_post pesign.service
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
#%%posttrans
|
|
|
0ac9f2 |
#%%{_libexecdir}/pesign/pesign-authorize
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
%preun
|
|
|
0ac9f2 |
%systemd_preun pesign.service
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
%postun
|
|
|
0ac9f2 |
%systemd_postun_with_restart pesign.service
|
|
|
0ac9f2 |
%endif
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
%files
|
|
|
0ac9f2 |
%{!?_licensedir:%global license %%doc}
|
|
|
0ac9f2 |
%license COPYING
|
|
|
0ac9f2 |
%doc README TODO
|
|
|
0ac9f2 |
%{_bindir}/authvar
|
|
|
0ac9f2 |
%{_bindir}/efikeygen
|
|
|
0ac9f2 |
%{_bindir}/efisiglist
|
|
|
0ac9f2 |
%{_bindir}/pesigcheck
|
|
|
0ac9f2 |
%{_bindir}/pesign
|
|
|
0ac9f2 |
%{_bindir}/pesign-client
|
|
|
0ac9f2 |
%dir %{_libexecdir}/pesign/
|
|
|
0ac9f2 |
%dir %attr(0770,pesign,pesign) %{_sysconfdir}/pki/pesign/
|
|
|
0ac9f2 |
%config(noreplace) %attr(0660,pesign,pesign) %{_sysconfdir}/pki/pesign/*
|
|
|
0ac9f2 |
%dir %attr(0775,pesign,pesign) %{_sysconfdir}/pki/pesign-rh-test/
|
|
|
0ac9f2 |
%config(noreplace) %attr(0664,pesign,pesign) %{_sysconfdir}/pki/pesign-rh-test/*
|
|
|
0ac9f2 |
%{_libexecdir}/pesign/pesign-authorize
|
|
|
0ac9f2 |
%config(noreplace)/%{_sysconfdir}/pesign/users
|
|
|
0ac9f2 |
%config(noreplace)/%{_sysconfdir}/pesign/groups
|
|
|
0ac9f2 |
%{_sysconfdir}/popt.d/pesign.popt
|
|
|
0ac9f2 |
%{macrosdir}/macros.pesign
|
|
|
0ac9f2 |
%{_mandir}/man*/*
|
|
|
34bac8 |
%dir %attr(0770, pesign, pesign) /%{_rundir}/%{name}
|
|
|
34bac8 |
%ghost %attr(0660, -, -) %{_rundir}/%{name}/socket
|
|
|
34bac8 |
%ghost %attr(0660, -, -) %{_rundir}/%{name}/pesign.pid
|
|
|
0ac9f2 |
%if 0%{?rhel} >= 7 || 0%{?fedora} >= 17
|
|
|
0ac9f2 |
%{_tmpfilesdir}/pesign.conf
|
|
|
0ac9f2 |
%{_unitdir}/pesign.service
|
|
|
0ac9f2 |
%endif
|
|
|
0ac9f2 |
%{python3_sitelib}/mockbuild/plugins/*/pesign.*
|
|
|
0ac9f2 |
%{python3_sitelib}/mockbuild/plugins/pesign.*
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
%changelog
|
|
|
34bac8 |
* Mon Nov 08 2021 Robbie Harwood <rharwood@redhat.com> - 0.112-26
|
|
|
34bac8 |
- Perform the /var/run to /run "migration" stupidity
|
|
|
34bac8 |
- Resolves: rhbz#1801976
|
|
|
34bac8 |
|
|
|
0ac9f2 |
* Mon Oct 01 2018 Peter Jones <pjones@redhat.com> - 0.112-25
|
|
|
0ac9f2 |
- Preserve .py timestamp during install so .pyc/.pyo files have the same
|
|
|
0ac9f2 |
timestamp on all arches, preventing rpmdiff from complaining.
|
|
|
0ac9f2 |
Related: rhbz#1625388
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Fri Sep 28 2018 Peter Jones <pjones@redhat.com> - 0.112-24
|
|
|
0ac9f2 |
- Require nss-tools at runtime so the rpm signing macros will have it
|
|
|
0ac9f2 |
Resolves: rhbz#1625388
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Wed Aug 01 2018 Charalampos Stratakis <cstratak@redhat.com> - 0.112-23
|
|
|
0ac9f2 |
- Rebuild for platform-python
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Mon Jan 22 2018 Peter Robinson <pbrobinson@fedoraproject.org> 0.112-22
|
|
|
0ac9f2 |
- Minor spec cleanups, fix arm conditional
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Fri Oct 06 2017 Troy Dawson <tdawson@redhat.com> - 0.112-21
|
|
|
0ac9f2 |
- Cleanup spec file conditionals
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Tue Aug 15 2017 Peter Jones <pjones@redhat.com> - 0.112-20
|
|
|
0ac9f2 |
- Maybe fewer typoes would be better.
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Tue Aug 15 2017 Peter Jones <pjones@redhat.com> - 0.112-19
|
|
|
0ac9f2 |
- Update to match f26's build so new kernel builds will work.
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Thu Aug 10 2017 Peter Jones <pjones@redhat.com> - 0.112-10
|
|
|
0ac9f2 |
- Try to fix the db problem nirik is seeing trying to upgrade the builders.
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.112-9
|
|
|
0ac9f2 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Thu Jul 27 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.112-8
|
|
|
0ac9f2 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Sat Jul 08 2017 Peter Jones <pjones@redhat.com> - 0.112-7
|
|
|
0ac9f2 |
- Rebuild for efivar-31-1.fc26
|
|
|
0ac9f2 |
Related: rhbz#1468841
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Sat Feb 11 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.112-6
|
|
|
0ac9f2 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Fri Jan 06 2017 Peter Jones <pjones@redhat.com> - 0.112-5
|
|
|
0ac9f2 |
- Don't Req: or BuildReq: coolkey or opensc; those belong in system deploy
|
|
|
0ac9f2 |
scripts.
|
|
|
0ac9f2 |
Related: rhbz#1349073
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Wed Aug 17 2016 Peter Jones <pjones@redhat.com> - 0.112-4
|
|
|
0ac9f2 |
- Build as -4 to make bodhi happy.
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Fri Aug 12 2016 Adam Williamson <awilliam@redhat.com> - 0.112-3
|
|
|
0ac9f2 |
- backport fix for command line parsing from upstream master
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Wed Aug 10 2016 Peter Jones <pjones@redhat.com> - 0.112-2
|
|
|
0ac9f2 |
- Build with newer efivar.
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Wed Apr 20 2016 Peter Jones <pjones@redhat.com> - 0.112-1
|
|
|
0ac9f2 |
- Update to 0.112
|
|
|
0ac9f2 |
- Also fix up some spec file woes:
|
|
|
0ac9f2 |
- dumb things in %%setup
|
|
|
0ac9f2 |
- find-debuginfo.sh not working right for some source files...
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Thu Feb 04 2016 Fedora Release Engineering <releng@fedoraproject.org> - 0.111-8
|
|
|
0ac9f2 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Thu Dec 10 2015 Peter Jones <pjones@redhat.com> - 0.111-7
|
|
|
0ac9f2 |
- Obsolete pesign-rh-test-certs, it was in -1's update.
|
|
|
0ac9f2 |
Resolves: rhbz#1283475
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Wed Dec 02 2015 Peter Jones <pjones@redhat.com> - 0.111-6
|
|
|
0ac9f2 |
- *Don't* use --certdir if we're using the socket.
|
|
|
0ac9f2 |
Related: rhbz#1283475
|
|
|
0ac9f2 |
Related: rhbz#1284063
|
|
|
0ac9f2 |
Related: rhbz#1284561
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Tue Dec 01 2015 Peter Jones <pjones@redhat.com> - 0.111-5
|
|
|
0ac9f2 |
- Actually do a better job of choosing which cert to use when, so people will
|
|
|
0ac9f2 |
stop seeing any of this problem. (Thanks for the thought, jforbes.)
|
|
|
0ac9f2 |
Resolves: rhbz#1283475
|
|
|
0ac9f2 |
Resolves: rhbz#1284063
|
|
|
0ac9f2 |
Resolves: rhbz#1284561
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Mon Nov 30 2015 Peter Jones <pjones@redhat.com> - 0.111-5
|
|
|
0ac9f2 |
- setfacl even harder.
|
|
|
0ac9f2 |
Related: rhbz#1283475
|
|
|
0ac9f2 |
Related: rhbz#1284063
|
|
|
0ac9f2 |
Related: rhbz#1284561
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Fri Nov 20 2015 Peter Jones <pjones@redhat.com> - 0.111-3
|
|
|
0ac9f2 |
- Better ACL setting code.
|
|
|
0ac9f2 |
Related: rhbz#1283475
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Thu Nov 19 2015 Peter Jones <pjones@redhat.com> - 0.111-2
|
|
|
0ac9f2 |
- Allow the mockbuild user to read the nss database if the account exists.
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Wed Oct 28 2015 Peter Jones <pjones@redhat.com> - 0.111-1
|
|
|
0ac9f2 |
- Rebase to 0.111
|
|
|
0ac9f2 |
- Split test certs out into a "Recommends" subpackage.
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Thu Jun 18 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.110-3
|
|
|
0ac9f2 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Wed Mar 4 2015 Ville Skyttä <ville.skytta@iki.fi> - 0.110-2
|
|
|
0ac9f2 |
- Install macros in %%{_rpmconfigdir}/macros.d where available (#1074281)
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Fri Oct 24 2014 Peter Jones <pjones@redhat.com> - 0.110-1
|
|
|
0ac9f2 |
- Update to pesign-0.110
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Sun Aug 17 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.108-4
|
|
|
0ac9f2 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.108-3
|
|
|
0ac9f2 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Thu May 29 2014 Peter Jones <pjones@redhat.com> - 0.108-2
|
|
|
0ac9f2 |
- Fix a networking problem nirik observed when reinstalling builders.
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Sat Aug 10 2013 Peter Jones <pjones@redhat.com> - 0.108-1
|
|
|
0ac9f2 |
- Remove errant result files and raise an error from %%pesign
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Tue Aug 06 2013 Peter Jones <pjones@redhat.com> - 0.106-3
|
|
|
0ac9f2 |
- Add code for signing in RHEL 7
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Mon Aug 05 2013 Peter Jones <pjones@redhat.com> - 0.106-2
|
|
|
0ac9f2 |
- Fix for new %%doc rules.
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Sun Aug 04 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.106-2
|
|
|
0ac9f2 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Tue May 21 2013 Peter Jones <pjones@redhat.com> - 0.106-1
|
|
|
0ac9f2 |
- Update to 0.106
|
|
|
0ac9f2 |
- Hopefully fix the segfault dgilmore was seeing.
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Mon May 20 2013 Peter Jones <pjones@redhat.com> - 0.105-1
|
|
|
0ac9f2 |
- Various bug fixes.
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Wed May 15 2013 Peter Jones <pjones@redhat.com> - 0.104-1
|
|
|
0ac9f2 |
- Make sure alignment is correct on signature list entries
|
|
|
0ac9f2 |
Resolves: rhbz#963361
|
|
|
0ac9f2 |
- Make sure section alignment is correct if we have to extend the file
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Wed Feb 06 2013 Peter Jones <pjones@redhat.com> - 0.103-2
|
|
|
0ac9f2 |
- Conditionalize systemd bits so they don't show up in RHEL 6 builds
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Tue Feb 05 2013 Peter Jones <pjones@redhat.com> - 0.103-1
|
|
|
0ac9f2 |
- One more compiler problem. Let's expect a few more, shall we?
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Tue Feb 05 2013 Peter Jones <pjones@redhat.com> - 0.102-1
|
|
|
0ac9f2 |
- Don't use --std=gnu11 because we have to work on RHEL 6 builders.
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Mon Feb 04 2013 Peter Jones <pjones@redhat.com> - 0.101-1
|
|
|
0ac9f2 |
- Update to 0.101 to fix more "pesign -E" issues.
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Fri Nov 30 2012 Peter Jones <pjones@redhat.com> - 0.100-1
|
|
|
0ac9f2 |
- Fix insertion of signatures from a file.
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Mon Nov 26 2012 Matthew Garrett <mjg59@srcf.ucam.org> - 0.99-9
|
|
|
0ac9f2 |
- Add a patch needed for new shim builds
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Fri Oct 19 2012 Peter Jones <pjones@redhat.com> - 0.99-8
|
|
|
0ac9f2 |
- Get the Fedora signing token name right.
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Fri Oct 19 2012 Peter Jones <pjones@redhat.com>
|
|
|
0ac9f2 |
- Add coolkey and opensc modules to pki database during %%install.
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Fri Oct 19 2012 Peter Jones <pjones@redhat.com> - 0.99-7
|
|
|
0ac9f2 |
- setfacl u:kojibuilder:rw /var/run/pesign/socket
|
|
|
0ac9f2 |
- Fix command line checking in client
|
|
|
0ac9f2 |
- Add client stdin pin reading.
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Thu Oct 18 2012 Peter Jones <pjones@redhat.com> - 0.99-6
|
|
|
0ac9f2 |
- Automatically select daemon as signer when using rpm macros.
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Thu Oct 18 2012 Peter Jones <pjones@redhat.com> - 0.99-5
|
|
|
0ac9f2 |
- Make it work on the -el6 branch as well.
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Wed Oct 17 2012 Peter Jones <pjones@redhat.com> - 0.99-4
|
|
|
0ac9f2 |
- Fix some more bugs found by valgrind and coverity.
|
|
|
0ac9f2 |
- Don't build utils/ ; we're not using them and they're not ready anyway.
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Wed Oct 17 2012 Peter Jones <pjones@redhat.com> - 0.99-3
|
|
|
0ac9f2 |
- Fix daemon startup bug from 0.99-2
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Wed Oct 17 2012 Peter Jones <pjones@redhat.com> - 0.99-2
|
|
|
0ac9f2 |
- Fix various bugs from 0.99-1
|
|
|
0ac9f2 |
- Don't make the database unreadable just yet.
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Mon Oct 15 2012 Peter Jones <pjones@redhat.com> - 0.99-1
|
|
|
0ac9f2 |
- Update to 0.99
|
|
|
0ac9f2 |
- Add documentation for client/server mode.
|
|
|
0ac9f2 |
- Add --pinfd and --pinfile to server mode.
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Fri Oct 12 2012 Peter Jones <pjones@redhat.com> - 0.98-1
|
|
|
0ac9f2 |
- Update to 0.98
|
|
|
0ac9f2 |
- Add client/server mode.
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Mon Oct 01 2012 Peter Jones <pjones@redhat.com> - 0.10-5
|
|
|
0ac9f2 |
- Fix missing section address fixup.
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Wed Aug 15 2012 Peter Jones <pjones@redhat.com> - 0.10-4
|
|
|
0ac9f2 |
- Make macros.pesign even better (and make it work right for i686 packages)
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Tue Aug 14 2012 Peter Jones <pjones@redhat.com> - 0.10-3
|
|
|
0ac9f2 |
- Only sign things on x86_64; all else ignore gracefully.
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Tue Aug 14 2012 Peter Jones <pjones@redhat.com> - 0.10-2
|
|
|
0ac9f2 |
- Make macros.pesign more reliable
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Mon Aug 13 2012 Peter Jones <pjones@redhat.com> - 0.10-1
|
|
|
0ac9f2 |
- Update to 0.10
|
|
|
0ac9f2 |
- Include rpm macros to support easy custom signing of signed packages.
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Fri Aug 10 2012 Peter Jones <pjones@redhat.com> - 0.9-1
|
|
|
0ac9f2 |
- Update to 0.9
|
|
|
0ac9f2 |
- Bug fix from Gary Ching-Pang Lin
|
|
|
0ac9f2 |
- Support NSS Token selection for use with smart cards.
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Wed Aug 08 2012 Peter Jones <pjones@redhat.com> - 0.8-1
|
|
|
0ac9f2 |
- Update to 0.8
|
|
|
0ac9f2 |
- Don't open the db read-write
|
|
|
0ac9f2 |
- Fix permissions on keystore (everybody can sign with test keys)
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Wed Aug 08 2012 Peter Jones <pjones@redhat.com> - 0.7-2
|
|
|
0ac9f2 |
- Include test keys.
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Mon Jul 30 2012 Peter Jones <pjones@redhat.com> - 0.7-1
|
|
|
0ac9f2 |
- Update to 0.7
|
|
|
0ac9f2 |
- Better fix for MS compatibility.
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Mon Jul 30 2012 Peter Jones <pjones@redhat.com> - 0.6-1
|
|
|
0ac9f2 |
- Update to 0.6
|
|
|
0ac9f2 |
- Bug-for-bug compatibility with signtool.exe .
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Fri Jul 20 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.5-2
|
|
|
0ac9f2 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Wed Jul 11 2012 Peter Jones <pjones@redhat.com> - 0.5-1
|
|
|
0ac9f2 |
- Rebase to 0.5
|
|
|
0ac9f2 |
- Do more rigorous bounds checking when hashing a new binary.
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Tue Jul 10 2012 Peter Jones <pjones@redhat.com> - 0.3-2
|
|
|
0ac9f2 |
- Rebase to 0.4
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Fri Jun 22 2012 Peter Jones <pjones@redhat.com> - 0.3-2
|
|
|
0ac9f2 |
- Move man page to a more reasonable place.
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Fri Jun 22 2012 Peter Jones <pjones@redhat.com> - 0.3-1
|
|
|
0ac9f2 |
- Update to upstream's 0.3 .
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Thu Jun 21 2012 Peter Jones <pjones@redhat.com> - 0.2-4
|
|
|
0ac9f2 |
- Do not build with smp flags.
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Thu Jun 21 2012 Peter Jones <pjones@redhat.com> - 0.2-3
|
|
|
0ac9f2 |
- Make it build on i686, though it's unclear it'll ever be necessary.
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Thu Jun 21 2012 Peter Jones <pjones@redhat.com> - 0.2-2
|
|
|
0ac9f2 |
- Fix compile problem with f18's compiler.
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Thu Jun 21 2012 Peter Jones <pjones@redhat.com> - 0.2-1
|
|
|
0ac9f2 |
- Fix some rpmlint complaints nirik pointed out
|
|
|
0ac9f2 |
- Add popt-devel build dep
|
|
|
0ac9f2 |
|
|
|
0ac9f2 |
* Fri Jun 15 2012 Peter Jones <pjones@redhat.com> - 0.1-1
|
|
|
0ac9f2 |
- First version of SRPM.
|