Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package cepces for openSUSE:Factory checked in at 2024-03-20 21:10:00 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/cepces (Old) and /work/SRC/openSUSE:Factory/.cepces.new.1905 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "cepces" Wed Mar 20 21:10:00 2024 rev:10 rq:1159565 version:0.3.9 Changes: -------- --- /work/SRC/openSUSE:Factory/cepces/cepces.changes 2024-01-24 19:04:12.537061472 +0100 +++ /work/SRC/openSUSE:Factory/.cepces.new.1905/cepces.changes 2024-03-20 21:10:17.913027454 +0100 @@ -1,0 +2,7 @@ +Mon Mar 18 19:06:40 UTC 2024 - [email protected] + +- Update to version 0.3.9: + * Fix failure to parse DER encoded cert; (bsc#1196658). +- Also disable selinux in 15.6, since it is still not supported. + +------------------------------------------------------------------- Old: ---- cepces-0.3.8.tar.bz2 New: ---- cepces-0.3.9.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ cepces.spec ++++++ --- /var/tmp/diff_new_pack.GRulYB/_old 2024-03-20 21:10:18.817060674 +0100 +++ /var/tmp/diff_new_pack.GRulYB/_new 2024-03-20 21:10:18.817060674 +0100 @@ -21,7 +21,7 @@ %global logdir %{_localstatedir}/log/%{app_name} Name: %{app_name} -Version: 0.3.8 +Version: 0.3.9 Release: 0%{?dist} Summary: Certificate Enrollment through CEP/CES @@ -32,7 +32,7 @@ Requires: %{app_name}-certmonger == %{version} Requires: python3-%{app_name} == %{version} -%if 0%{?sle_version} > 150400 || 0%{?suse_version} > 1500 +%if 0%{?sle_version} > 150600 || 0%{?suse_version} > 1500 Requires: (%{app_name}-selinux == %{version} if selinux-policy) %endif BuildRequires: fdupes @@ -68,7 +68,7 @@ %{app_name} is an application for enrolling certificates through CEP and CES. This package provides the certmonger integration. -%if 0%{?sle_version} > 150400 || 0%{?suse_version} > 1500 +%if 0%{?sle_version} > 150600 || 0%{?suse_version} > 1500 %package selinux Summary: SELinux support for %{app_name} @@ -87,7 +87,7 @@ %build %py3_build -%if 0%{?sle_version} > 150400 || 0%{?suse_version} > 1500 +%if 0%{?sle_version} > 150600 || 0%{?suse_version} > 1500 # Build the SELinux module(s). for SELINUXVARIANT in %{selinux_variants}; do make -C selinux clean all @@ -100,7 +100,7 @@ install -d -m 0700 %{buildroot}%{logdir} -%if 0%{?sle_version} > 150400 || 0%{?suse_version} > 1500 +%if 0%{?sle_version} > 150600 || 0%{?suse_version} > 1500 # Install the SELinux module(s). rm -fv selinux-files.txt @@ -133,7 +133,7 @@ %fdupes %{buildroot}/%{python3_sitelib}/%{app_name} -%if 0%{?sle_version} > 150400 || 0%{?suse_version} > 1500 +%if 0%{?sle_version} > 150600 || 0%{?suse_version} > 1500 %post selinux for SELINUXVARIANT in %{selinux_variants}; do %{_sbindir}/semodule -n -s ${SELINUXVARIANT} \ @@ -191,7 +191,7 @@ %dir %{_libexecdir}/certmonger %{_libexecdir}/certmonger/%{app_name}-submit -%if 0%{?sle_version} > 150400 || 0%{?suse_version} > 1500 +%if 0%{?sle_version} > 150600 || 0%{?suse_version} > 1500 %files selinux -f selinux-files.txt %defattr(0644,root,root,0755) %endif ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.GRulYB/_old 2024-03-20 21:10:18.853061997 +0100 +++ /var/tmp/diff_new_pack.GRulYB/_new 2024-03-20 21:10:18.857062144 +0100 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/openSUSE/cepces.git</param> - <param name="changesrevision">91447ecd6116440b606c797db139da55d6c7a3e6</param></service></servicedata> + <param name="changesrevision">6abc53e7edff33cd07204c7cd10ac658c9f4db4c</param></service></servicedata> (No newline at EOF) ++++++ cepces-0.3.8.tar.bz2 -> cepces-0.3.9.tar.bz2 ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/cepces-0.3.8/cepces/__init__.py new/cepces-0.3.9/cepces/__init__.py --- old/cepces-0.3.8/cepces/__init__.py 2024-01-22 16:27:47.000000000 +0100 +++ new/cepces-0.3.9/cepces/__init__.py 2024-03-18 20:03:50.000000000 +0100 @@ -23,7 +23,7 @@ __title__ = 'cepces' __description__ = 'CEP/CES library.' __url__ = 'https://github.com/openSUSE/cepces/' -__version__ = '0.3.8' +__version__ = '0.3.9' __author__ = 'Daniel Uvehag' __author_email__ = '[email protected]' __license__ = 'GPLv3' diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/cepces-0.3.8/cepces/core.py new/cepces-0.3.9/cepces/core.py --- old/cepces-0.3.8/cepces/core.py 2024-01-22 16:27:47.000000000 +0100 +++ new/cepces-0.3.9/cepces/core.py 2024-03-18 20:03:50.000000000 +0100 @@ -282,10 +282,17 @@ oid = x509.oid.AuthorityInformationAccessOID # Load the certificate. - cert = x509.load_pem_x509_certificate( - data.encode(), - default_backend(), - ) + try: + cert = x509.load_pem_x509_certificate( + data.encode(), + default_backend(), + ) + except ValueError: + # The cert may be DER encoded instead + cert = x509.load_der_x509_certificate( + data.encode(), + default_backend(), + ) # If no child is present, this is the first cert and thus cannot be # verified yet. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/cepces-0.3.8/selinux/cepces.te new/cepces-0.3.9/selinux/cepces.te --- old/cepces-0.3.8/selinux/cepces.te 2024-01-22 16:27:47.000000000 +0100 +++ new/cepces-0.3.9/selinux/cepces.te 2024-03-18 20:03:50.000000000 +0100 @@ -1,4 +1,4 @@ -policy_module(cepces, 0.3.8) +policy_module(cepces, 0.3.9) require { type certmonger_t;
