Hello community, here is the log from the commit of package libkcapi for openSUSE:Factory checked in at 2017-07-17 09:08:58 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libkcapi (Old) and /work/SRC/openSUSE:Factory/.libkcapi.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libkcapi" Mon Jul 17 09:08:58 2017 rev:3 rq:509804 version:0.13.0 Changes: -------- --- /work/SRC/openSUSE:Factory/libkcapi/libkcapi.changes 2017-07-09 13:04:25.745150748 +0200 +++ /work/SRC/openSUSE:Factory/.libkcapi.new/libkcapi.changes 2017-07-17 09:08:59.178291596 +0200 @@ -1,0 +2,6 @@ +Wed Jul 12 14:51:26 UTC 2017 - [email protected] + +- Change the signing to use openssl sha256/sha512 directly, to + avoid fipscheck / hmaccalc. + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libkcapi.spec ++++++ --- /var/tmp/diff_new_pack.YwXLh5/_old 2017-07-17 09:08:59.882192457 +0200 +++ /var/tmp/diff_new_pack.YwXLh5/_new 2017-07-17 09:08:59.882192457 +0200 @@ -30,8 +30,10 @@ Patch1: reproduciblesort.patch # PATCH-FIX-UPSTREAM https://github.com/smuellerDD/libkcapi/pull/12 Patch2: reproducibledate.patch -BuildRequires: docbook-utils xmlto +BuildRequires: docbook-utils BuildRequires: fipscheck +BuildRequires: openssl +BuildRequires: xmlto BuildRoot: %{_tmppath}/%{name}-%{version}-build %description @@ -98,8 +100,16 @@ %{?__debug_package:%{__debug_install_post}} \ %{__arch_install_post} \ %{__os_install_post} \ - /usr/bin/fipshmac $RPM_BUILD_ROOT/usr/%_lib/libkcapi/fipscheck \ - /usr/bin/fipshmac $RPM_BUILD_ROOT/usr/%_lib/libkcapi/fipshmac \ + openssl sha256 -hmac orboDeJITITejsirpADONivirpUkvarP $RPM_BUILD_ROOT/usr/%_lib/libkcapi/fipscheck |sed -e 's/.* //;' > $RPM_BUILD_ROOT/usr/%_lib/libkcapi/.fipscheck.hmac \ + openssl sha256 -hmac orboDeJITITejsirpADONivirpUkvarP $RPM_BUILD_ROOT/usr/%_lib/libkcapi/fipshmac |sed -e 's/.* //;' > $RPM_BUILD_ROOT/usr/%_lib/libkcapi/.fipshmac.hmac \ + openssl sha256 -hmac orboDeJITITejsirpADONivirpUkvarP $RPM_BUILD_ROOT/usr/%_lib/libkcapi/sha1sum |sed -e 's/.* //;' > $RPM_BUILD_ROOT/usr/%_lib/libkcapi/.sha1sum.hmac \ + openssl sha256 -hmac orboDeJITITejsirpADONivirpUkvarP $RPM_BUILD_ROOT/usr/%_lib/libkcapi/sha256sum |sed -e 's/.* //;' > $RPM_BUILD_ROOT/usr/%_lib/libkcapi/.sha256sum.hmac \ + openssl sha256 -hmac orboDeJITITejsirpADONivirpUkvarP $RPM_BUILD_ROOT/usr/%_lib/libkcapi/sha384sum |sed -e 's/.* //;' > $RPM_BUILD_ROOT/usr/%_lib/libkcapi/.sha384sum.hmac \ + openssl sha256 -hmac orboDeJITITejsirpADONivirpUkvarP $RPM_BUILD_ROOT/usr/%_lib/libkcapi/sha512sum |sed -e 's/.* //;' > $RPM_BUILD_ROOT/usr/%_lib/libkcapi/.sha512sum.hmac \ + openssl sha512 -hmac FIPS-FTW-RHT2009 $RPM_BUILD_ROOT/usr/%_lib/libkcapi/sha1hmac |sed -e 's/.* //;' > $RPM_BUILD_ROOT/usr/%_lib/libkcapi/.sha1hmac.hmac \ + openssl sha512 -hmac FIPS-FTW-RHT2009 $RPM_BUILD_ROOT/usr/%_lib/libkcapi/sha256hmac |sed -e 's/.* //;' > $RPM_BUILD_ROOT/usr/%_lib/libkcapi/.sha256hmac.hmac \ + openssl sha512 -hmac FIPS-FTW-RHT2009 $RPM_BUILD_ROOT/usr/%_lib/libkcapi/sha384hmac |sed -e 's/.* //;' > $RPM_BUILD_ROOT/usr/%_lib/libkcapi/.sha384hmac.hmac \ + openssl sha512 -hmac FIPS-FTW-RHT2009 $RPM_BUILD_ROOT/usr/%_lib/libkcapi/sha512hmac |sed -e 's/.* //;' > $RPM_BUILD_ROOT/usr/%_lib/libkcapi/.sha512hmac.hmac \ %{nil} %post -n libkcapi0 -p /sbin/ldconfig
