Hello community,
here is the log from the commit of package pesign-obs-integration for
openSUSE:Factory checked in at 2020-02-25 16:01:34
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/pesign-obs-integration (Old)
and /work/SRC/openSUSE:Factory/.pesign-obs-integration.new.26092 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "pesign-obs-integration"
Tue Feb 25 16:01:34 2020 rev:37 rq:778639 version:10.1
Changes:
--------
---
/work/SRC/openSUSE:Factory/pesign-obs-integration/pesign-obs-integration.changes
2019-11-11 12:58:50.881592317 +0100
+++
/work/SRC/openSUSE:Factory/.pesign-obs-integration.new.26092/pesign-obs-integration.changes
2020-02-25 16:01:44.132005990 +0100
@@ -1,0 +2,6 @@
+Wed Feb 19 14:25:32 UTC 2020 - Marcus Meissner <[email protected]>
+
+- 0001-sign-stage3.bin-from-s390-tools-with-sign-files-bsc-.patch
+ Hard code signing of stage3.bin of s390-tools (bsc#1163524)
+
+-------------------------------------------------------------------
@@ -11,0 +18,5 @@
+
+-------------------------------------------------------------------
+Wed Sep 4 12:18:39 UTC 2019 - Michal Suchanek <[email protected]>
+
+- Require pesign on arm (boo#1134303).
New:
----
0001-sign-stage3.bin-from-s390-tools-with-sign-files-bsc-.patch
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ pesign-obs-integration.spec ++++++
--- /var/tmp/diff_new_pack.P9aV58/_old 2020-02-25 16:01:45.224009002 +0100
+++ /var/tmp/diff_new_pack.P9aV58/_new 2020-02-25 16:01:45.232009024 +0100
@@ -1,7 +1,7 @@
#
# spec file for package pesign-obs-integration
#
-# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2020 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -30,13 +30,15 @@
Requires: pesign
%endif
BuildRequires: openssl
-Url: http://en.opensuse.org/openSUSE:UEFI_Image_File_Sign_Tools
+URL: http://en.opensuse.org/openSUSE:UEFI_Image_File_Sign_Tools
Source: %{name}_%{version}.tar.gz
Patch1: 0001-Passthrough-license-tag.patch
Patch2: 0001-Add-support-for-kernel-module-compression.patch
Patch3: 0001-Initialize-compress-variable.patch
Patch4: 0001-Keep-the-files-in-the-OTHER-directory.patch
Patch5: 0001-brp-99-compress-vmlinux-support-xz-compressed-vmlinu.patch
+# https://github.com/openSUSE/pesign-obs-integration/pull/17
+Patch6: 0001-sign-stage3.bin-from-s390-tools-with-sign-files-bsc-.patch
BuildRoot: %{_tmppath}/%{name}-%{version}-build
# suse-module-tools <= 15.0.10 contains modsign-verify
Requires: suse-module-tools >= 15.0.10
@@ -52,6 +54,7 @@
%patch3 -p1
%patch4 -p1
%patch5 -p1
+%patch6 -p1
%build
++++++ 0001-sign-stage3.bin-from-s390-tools-with-sign-files-bsc-.patch ++++++
>From 2ef935c08c201676665922c913db2fea429e45cc Mon Sep 17 00:00:00 2001
From: Marcus Meissner <[email protected]>
Date: Thu, 13 Feb 2020 16:20:45 +0100
Subject: [PATCH] sign stage3.bin from s390-tools with sign-files (bsc#1163524)
---
pesign-repackage.spec.in | 3 +++
1 file changed, 3 insertions(+)
diff --git a/pesign-repackage.spec.in b/pesign-repackage.spec.in
index 1679878..3d3108b 100644
--- a/pesign-repackage.spec.in
+++ b/pesign-repackage.spec.in
@@ -148,6 +148,9 @@ for sig in "${sigs[@]}"; do
/usr/lib/rpm/pesign/gen-hmac -r %buildroot
"/${sig%.sig}"
fi
;;
+ *stage3.bin.sig)
+ /usr/lib/rpm/pesign/kernel-sign-file -i pkcs7 -s "$sig" sha256
"$cert" "$f"
+ ;;
*)
echo "Warning: unhandled signature: $sig" >&2
esac
--
2.16.4