pesign-obs-integration-10.0-31.6.1<>,$cZH/=„wBVJ*_r ?K崠i־}UC b]z}BN@ }ВS~1{L >lVnB};1UQ{4d0tE G;A-qqhL[!7#.@_5%YSҏlkSAqw\G 2YݾCT NR/,AùZB o QQ$8/ U 3pC`1m9pr|;!=c%rCC@jO0f>:l?\d % Z% >V       <       N|    (8-9x-: -F_Gt H I XY\ ]@ ^bc?deflu v0w x y4zLCpesign-obs-integration10.031.6.1Macros and scripts to sign the kernel and bootloaderThis package provides scripts and rpm macros to automate signing of the boot loader, kernel and kernel modules in the openSUSE Buildservice.ZHcloud109 openSUSE Leap 42.3openSUSEGPL-2.0-onlyhttp://bugs.opensuse.orgDevelopment/Tools/Otherhttp://en.opensuse.org/openSUSE:UEFI_Image_File_Sign_Toolslinuxx86_64 Q32F0AA큤큤A큤ZGZGZGZGZGZGZGZGZGZGZGZGZGa94c290004cba8b70f63887b41a7f73e070c6f1f9f7597bd07ca598860d47b4d72723157d3de752bd2620dc8eebdde713eb5db04f84a611c64498c21e3d8de878e42f606e04e2a1dd51615d630c1c38af67bb328bcb78b255a3c08148315c750bcb39a08f70cc65af3f9ca04c2968261a58f8a61a24ffec104ad398694b18916b234ee4d69f5fce4486a80fdaf4a4263d3ea91edddd80d640b581a640bc0a95brootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootpesign-obs-integration-10.0-31.6.1.src.rpmpesign-obs-integrationpesign-obs-integration(x86-64)@@   /bin/bash/usr/bin/perlfipscheckmozilla-nss-toolsopensslpesignrpmlib(CompressedFileNames)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsLzma)3.0.4-14.0-14.4.6-14.11.2Z4@ZX=mV'@T@T@T&@T@SSSuS@S;@SESXSW@SW@SW@SW@S=M@RR@RʚRʚQQT0QQQC @Q5@Q4Q$Q@Q@Q@Q.Q.QEQ @Q @Q @QQh@PP9@P@glin@suse.comjlee@suse.commmarek@suse.czglin@suse.commmarek@suse.czmmarek@suse.czmls@suse.dero@suse.demmarek@suse.czmeissner@suse.commmarek@suse.czmmarek@suse.czmmarek@suse.czmmarek@suse.czmmarek@suse.czmmarek@suse.commmarek@suse.commmarek@suse.commmarek@suse.czro@suse.demmarek@suse.czmmarek@suse.czmmarek@suse.czmmarek@suse.czmmarek@suse.czmmarek@suse.czglin@suse.comcoolo@suse.commmarek@suse.czmmarek@suse.czmmarek@suse.czmmarek@suse.czmmarek@suse.czmmarek@suse.czmls@suse.demls@suse.demls@suse.demls@suse.demmarek@suse.czmmarek@suse.czmmarek@suse.czmmarek@suse.czmmarek@suse.czmmarek@suse.czmmarek@suse.com- Provide password file for 'certutil -A' due to the change in mozilla-nss 3.35 (boo#1082235)- Modified modsign-repackage, using certificate to try to decrypt the signature of kernel module. It can be used to verify the integrity of signature.- Copy over any *.log files from the first build (bsc#1012422)- Add aarch64 support since pesign also build on aarch64- Add support for file verify flags (bnc#905420).- Sort the parts of the repackage spec file for easier debugging.- fall back to project cert in the followup spec if it exists- sanitize release line in specfile- brp-99-compress-vmlinux: Compress the vmlinux image after find-debuginfo (bnc#880848, bnc#884459)- switch gen-hmac to use fipscheck instead of sha256hmac- Set BRP_PESIGN_FILES="" in the repackage build to avoid loops.- Accept also rpmlintrc files without any - prefix.- Use package's rpmlintrc files in the second build.- Drop support for signing firmware files (bnc#867199)- Fix matching /boot and /lib/firmware in pesign-repackage.spec- Do not store the buildroot in the .*.hmac file.- Regenerate the HMAC checksum when signing and EFI binary with a checksum (fate#316930, bnc#856310).- Update README.- Add /usr/lib/rpm/pesign/gen-hmac tool to generate a hmac checksum for a given file (fate#316930, bnc#856310).- pesign-gen-repackage-spec: switch to new rpm style handling of weak dependencies- Do not sign any files if BRP_PESIGN_FILES is set not an empty string (bnc#857599).- Fix a typo in the last change.- Default to BRP_PESIGN_FILES="*.ko /lib/firmware" (bnc#857599).- Add --signatures= option to modsign-repackage (bnc#841627).- Put debuginfo packages to %_topdir/OTHER (bnc#824971).- Version 10 - Add modsign-repackage tool to repackage RPMs outside the buildservice- Calculate the digest of the padded data section to be consistent with the output file (bnc#808594, bnc#811325)- correct the license of the generated package to fix build- Do not repackage debuginfo package (bnc#806637)- Version 9 - Add support for triggers (bnc#806737)- Do not fail the build if %_topdir/OTHER cannot be created- Version 8 - Hide baselibs from post-build-checks- Do not repackage baselibs- Version 7 - Fix for scriptlets with empty body- reduce debugging as pesign is now fixed- add a bit of debug output to find out why the kernel signatures are bad- switch to normal brp hook - mv stuff in pesign directory instead of cluttering /usr/lib/rpm- fix pesign calls- Add some preliminary code to sign EFI binaries, marked with FIXMEs.- Version 6 - Fix handling packages with NoSource - Fix for multiple patterns in %sign_files- Version 5 - Use newc-style cpio archives, as required by the buildservice. - Use signing certificates provided by the buildservice. - Minor fixes.- Version 4 - Support for firmware signatures. - Expect the correct archive with signatures (.cpio.rsasign.sig). - Minor fixes.- Version 3 - Switch to storing whole files in the *.cpio.rsasign archive. - Append the signatures to kernel modules.- Version 2 - Generates another specfile in pesign-repackage.spec to be able to copy nearly all RPM tags from the original packages. - Changed to only store sha256 hashes in the *.cpio.rsasign file, instead of whole files.- Created package with macros and scripts to integrate kernel and bootloader signing into OBS (fate#314552).cloud109 1525936712 10.0-31.6.110.0-31.6.1modsign-repackagebrp-suse.dbrp-99-compress-vmlinuxbrp-99-pesignpesigngen-hmackernel-sign-filepesign-cert.x509pesign-gen-repackage-specpesign-repackage.spec.inpesign-obs-integrationCOPYINGREADME/usr/bin//usr/lib/rpm//usr/lib/rpm/brp-suse.d//usr/lib/rpm/pesign//usr/share/doc/packages//usr/share/doc/packages/pesign-obs-integration/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:8071/openSUSE_Leap_42.3_Update/cde668e0a6e9d9887250e2e0cb4c2f09-pesign-obs-integration.openSUSE_Leap_42.3_Updatedrpmlzma5x86_64-suse-linuxBourne-Again shell script, ASCII text executabledirectoryPerl script, ASCII text executablea /usr/bin/perl -w script, ASCII text executableASCII textRRRRRRoF#joe|?`]"k%Z?kD&%md4uNbR!|k 4V~EmÔkhv6I# ar2k@S첄깕_8[GQK 'q"o'և#`ǓŰ}F?3$č|W+q]ۗ>AuZNcG%M"b6' DMj_6꺅`%o+!-(b{H7pq;R^&]KmZ!#|)f9/{=(U]Nv$ZUJ'(rc3`د1gUZfزɥG&W!I: h,A%.#k&yE(k٧yIhBgwoa@j@/%eldO4 ;bgzB5FKfJ2:aJiњ.CZ]L@AK& |s:!.5'd!nq}KĈ<0FR F(S{rqI^#qxgiE#+ L,9*+~a0('uAf`8PpDÍ!ZÄ0L^}c2&GO1|s/+7˔߿aк|l<`!*Vb_-f&uz$9q ґK!C~9_1%r/.]3ү`})Hҵg_fNJoٶT)ٙˀ[od,>ݒLFVaOF(y5 ;Ĭ?JZm;@}55HB侩1/j,*xa#c1 8/2N(˻`/]@ܫFTjxJ K5@(ρ4z윥AQ