commit:     fc41eb3ddc9a0920c23174ef59d9a20cd6415e09
Author:     Mike Pagano <mpagano <AT> gentoo <DOT> org>
AuthorDate: Tue Jun  2 11:36:46 2020 +0000
Commit:     Mike Pagano <mpagano <AT> gentoo <DOT> org>
CommitDate: Tue Jun  2 11:36:46 2020 +0000
URL:        https://gitweb.gentoo.org/proj/linux-patches.git/commit/?id=fc41eb3d

sign-file: full functionality with modern LibreSSL

Bug: https://bugs.gentoo.org/717166

Signed-off-by: Mike Pagano <mpagano <AT> gentoo.org>

 0000_README                             |  4 ++++
 2920_sign-file-patch-for-libressl.patch | 16 ++++++++++++++++
 2 files changed, 20 insertions(+)

diff --git a/0000_README b/0000_README
index e6e9d24..750ca68 100644
--- a/0000_README
+++ b/0000_README
@@ -231,6 +231,10 @@ Patch:  2600_enable-key-swapping-for-apple-mac.patch
 From:   https://github.com/free5lot/hid-apple-patched
 Desc:   This hid-apple patch enables swapping of the FN and left Control keys 
and some additional on some apple keyboards. See bug #622902
 
+Patch:  2920_sign-file-patch-for-libressl.patch
+From:   https://bugs.gentoo.org/717166
+Desc:   sign-file: full functionality with modern LibreSSL
+
 Patch:  4567_distro-Gentoo-Kconfig.patch
 From:   Tom Wijsman <tom...@gentoo.org>
 Desc:   Add Gentoo Linux support config settings and defaults.

diff --git a/2920_sign-file-patch-for-libressl.patch 
b/2920_sign-file-patch-for-libressl.patch
new file mode 100644
index 0000000..e6ec017
--- /dev/null
+++ b/2920_sign-file-patch-for-libressl.patch
@@ -0,0 +1,16 @@
+--- a/scripts/sign-file.c      2020-05-20 18:47:21.282820662 -0400
++++ b/scripts/sign-file.c      2020-05-20 18:48:37.991081899 -0400
+@@ -41,9 +41,10 @@
+  * signing with anything other than SHA1 - so we're stuck with that if such is
+  * the case.
+  */
+-#if defined(LIBRESSL_VERSION_NUMBER) || \
+-      OPENSSL_VERSION_NUMBER < 0x10000000L || \
+-      defined(OPENSSL_NO_CMS)
++#if defined(OPENSSL_NO_CMS) || \
++      ( defined(LIBRESSL_VERSION_NUMBER) \
++      && (LIBRESSL_VERSION_NUMBER < 0x3010000fL) ) || \
++      OPENSSL_VERSION_NUMBER < 0x10000000L
+ #define USE_PKCS7
+ #endif
+ #ifndef USE_PKCS7

Reply via email to