6ef5e2d
%global macrosdir %(d=%{_rpmconfigdir}/macros.d; [ -d $d ] || d=%{_sysconfdir}/rpm; echo $d)
6ef5e2d
6ef5e2d
Name:    pesign
6ef5e2d
Summary: Signing utility for UEFI binaries
8f36a78
Version: 113
6816587
Release: 17%{?dist}
6ef5e2d
License: GPLv2
6ef5e2d
URL:     https://github.com/vathpela/pesign
6ef5e2d
6ef5e2d
Obsoletes: pesign-rh-test-certs <= 0.111-7
6f2919a
BuildRequires: make
6ef5e2d
BuildRequires: gcc
6ef5e2d
BuildRequires: git
6ef5e2d
BuildRequires: nspr
6ef5e2d
BuildRequires: nss
6ef5e2d
BuildRequires: nss-util
6ef5e2d
BuildRequires: popt-devel
6ef5e2d
BuildRequires: nss-tools
6ef5e2d
BuildRequires: nspr-devel >= 4.9.2-1
6ef5e2d
BuildRequires: nss-devel >= 3.13.6-1
6ef5e2d
BuildRequires: efivar-devel >= 31-1
6ef5e2d
BuildRequires: libuuid-devel
6ef5e2d
BuildRequires: tar
6ef5e2d
BuildRequires: xz
6ef5e2d
BuildRequires: python3-rpm-macros
6ef5e2d
BuildRequires: python3
6ef5e2d
%if 0%{?rhel} >= 7 || 0%{?fedora} >= 17
6ef5e2d
BuildRequires: systemd-rpm-macros
6ef5e2d
%endif
6ef5e2d
Requires:      nspr
6ef5e2d
Requires:      nss
6a57677
Requires:      nss-tools >= 3.53
6ef5e2d
Requires:      nss-util
6ef5e2d
Requires:      popt
6ef5e2d
Requires:      rpm
6ef5e2d
Requires(pre): shadow-utils
6ef5e2d
ExclusiveArch: %{ix86} x86_64 ia64 aarch64 %{arm}
6ef5e2d
%if 0%{?rhel} == 7
6ef5e2d
BuildRequires: rh-signing-tools >= 1.20-2
6ef5e2d
%endif
6ef5e2d
8f36a78
Source0: https://github.com/rhboot/pesign/releases/download/%{version}/pesign-%{version}.tar.bz2
6ef5e2d
Source1: certs.tar.xz
6ef5e2d
Source2: pesign.py
6ef5e2d
8f36a78
Patch0001: 0001-efikeygen-Fix-the-build-with-nss-3.44.patch
8f36a78
Patch0002: 0002-pesigcheck-Fix-a-wrong-assignment.patch
edca44f
Patch0003: 0003-Make-0.112-client-and-server-work-with-the-113-proto.patch
9b526cf
Patch0004: 0004-Rename-var-run-to-run.patch
9b526cf
Patch0005: 0005-Apparently-opensc-got-updated-and-the-token-name-cha.patch
38e8425
Patch0006: 0006-client-try-run-and-var-run-for-the-socket-path.patch
2335e63
Patch0007: 0007-client-remove-an-extra-debug-print.patch
2335e63
Patch0008: 0008-Move-most-of-macros.pesign-to-pesign-rpmbuild-helper.patch
2335e63
Patch0009: 0009-pesign-authorize-shellcheck.patch
2335e63
Patch0010: 0010-pesign-authorize-don-t-setfacl-etc-pki-pesign-foo.patch
2335e63
Patch0011: 0011-kernel-building-hack.patch
2ee3400
Patch0012: 0012-Use-run-not-var-run.patch
f7bf001
Patch0013: 0013-Turn-off-free-nonheap-object.patch
6ef5e2d
6ef5e2d
%description
6ef5e2d
This package contains the pesign utility for signing UEFI binaries as
6ef5e2d
well as other associated tools.
6ef5e2d
6ef5e2d
%prep
6ef5e2d
%setup -q -T -b 0
6ef5e2d
%setup -q -T -D -c -n pesign-%{version}/ -a 1
6ef5e2d
git init
6ef5e2d
git config user.email "pesign-owner@fedoraproject.org"
6ef5e2d
git config user.name "Fedora Ninjas"
6ef5e2d
git add .
6ef5e2d
git commit -a -q -m "%{version} baseline."
6ef5e2d
git am %{patches} 
6ef5e2d
git config --unset user.email
6ef5e2d
git config --unset user.name
6ef5e2d
6ef5e2d
%build
6ef5e2d
make PREFIX=%{_prefix} LIBDIR=%{_libdir}
6ef5e2d
6ef5e2d
%install
6ef5e2d
mkdir -p %{buildroot}/%{_libdir}
6ef5e2d
make PREFIX=%{_prefix} LIBDIR=%{_libdir} INSTALLROOT=%{buildroot} \
6ef5e2d
	install
6ef5e2d
%if 0%{?rhel} >= 7 || 0%{?fedora} >= 17
6ef5e2d
make PREFIX=%{_prefix} LIBDIR=%{_libdir} INSTALLROOT=%{buildroot} \
6ef5e2d
	install_systemd
6ef5e2d
%endif
6ef5e2d
6ef5e2d
# there's some stuff that's not really meant to be shipped yet
6ef5e2d
rm -rf %{buildroot}/boot %{buildroot}/usr/include
6ef5e2d
rm -rf %{buildroot}%{_libdir}/libdpe*
6ef5e2d
mkdir -p %{buildroot}%{_sysconfdir}/pki/pesign/
6ef5e2d
mkdir -p %{buildroot}%{_sysconfdir}/pki/pesign-rh-test/
6ef5e2d
cp -a etc/pki/pesign/* %{buildroot}%{_sysconfdir}/pki/pesign/
6ef5e2d
cp -a etc/pki/pesign-rh-test/* %{buildroot}%{_sysconfdir}/pki/pesign-rh-test/
6ef5e2d
6ef5e2d
if [ %{macrosdir} != %{_sysconfdir}/rpm ]; then
6ef5e2d
	mkdir -p %{buildroot}%{macrosdir}
6ef5e2d
	mv %{buildroot}%{_sysconfdir}/rpm/macros.pesign \
6ef5e2d
		%{buildroot}%{macrosdir}
6ef5e2d
	rmdir %{buildroot}%{_sysconfdir}/rpm
6ef5e2d
fi
6ef5e2d
rm -vf %{buildroot}/usr/share/doc/pesign-%{version}/COPYING
6ef5e2d
6ef5e2d
# and find-debuginfo.sh has some pretty awful deficencies too...
6ef5e2d
cp -av libdpe/*.[ch] src/
6ef5e2d
6ef5e2d
install -d -m 0755 %{buildroot}%{python3_sitelib}/mockbuild/plugins/
6ef5e2d
install -m 0755 %{SOURCE2} %{buildroot}%{python3_sitelib}/mockbuild/plugins/
6ef5e2d
6ef5e2d
%pre
6ef5e2d
getent group pesign >/dev/null || groupadd -r pesign
6ef5e2d
getent passwd pesign >/dev/null || \
9b526cf
	useradd -r -g pesign -d /run/pesign -s /sbin/nologin \
6ef5e2d
		-c "Group for the pesign signing daemon" pesign
6ef5e2d
exit 0
6ef5e2d
6ef5e2d
%if 0%{?rhel} >= 7 || 0%{?fedora} >= 17
6ef5e2d
%post
6ef5e2d
%systemd_post pesign.service
6ef5e2d
6ef5e2d
%preun
6ef5e2d
%systemd_preun pesign.service
6ef5e2d
6ef5e2d
%postun
6ef5e2d
%systemd_postun_with_restart pesign.service
6076214
6076214
%posttrans
8f36a78
certutil -d %{_sysconfdir}/pki/pesign/ -X -L > /dev/null
9dfdddd
9dfdddd
# this is disabled currently because it breaks the fedora kernel build root
9dfdddd
# generation - because we don't currently have a good way of populating
9dfdddd
# /etc/pesign/{users,groups} before the buildroot is installed, or
9dfdddd
# populating them and re-running pesign-authorize afterwards but before the
9dfdddd
# package build of e.g. kernel
9dfdddd
#%%{_libexecdir}/pesign/pesign-authorize
6ef5e2d
%endif
6ef5e2d
6ef5e2d
%files
6ef5e2d
%{!?_licensedir:%global license %%doc}
6ef5e2d
%license COPYING
6ef5e2d
%doc README TODO
6ef5e2d
%{_bindir}/authvar
6ef5e2d
%{_bindir}/efikeygen
6ef5e2d
%{_bindir}/efisiglist
6ef5e2d
%{_bindir}/pesigcheck
6ef5e2d
%{_bindir}/pesign
6ef5e2d
%{_bindir}/pesign-client
6ef5e2d
%dir %{_libexecdir}/pesign/
6ef5e2d
%dir %attr(0770,pesign,pesign) %{_sysconfdir}/pki/pesign/
6ef5e2d
%config(noreplace) %attr(0660,pesign,pesign) %{_sysconfdir}/pki/pesign/*
6ef5e2d
%dir %attr(0775,pesign,pesign) %{_sysconfdir}/pki/pesign-rh-test/
6ef5e2d
%config(noreplace) %attr(0664,pesign,pesign) %{_sysconfdir}/pki/pesign-rh-test/*
6ef5e2d
%{_libexecdir}/pesign/pesign-authorize
35ff4c5
%{_libexecdir}/pesign/pesign-rpmbuild-helper
6ef5e2d
%config(noreplace)/%{_sysconfdir}/pesign/users
6ef5e2d
%config(noreplace)/%{_sysconfdir}/pesign/groups
6ef5e2d
%{_sysconfdir}/popt.d/pesign.popt
6ef5e2d
%{macrosdir}/macros.pesign
6ef5e2d
%{_mandir}/man*/*
2ee3400
%dir %attr(0770, pesign, pesign) %{_rundir}/%{name}
2ee3400
%ghost %attr(0660, -, -) %{_rundir}/%{name}/socket
2ee3400
%ghost %attr(0660, -, -) %{_rundir}/%{name}/pesign.pid
6ef5e2d
%if 0%{?rhel} >= 7 || 0%{?fedora} >= 17
6ef5e2d
%{_tmpfilesdir}/pesign.conf
6ef5e2d
%{_unitdir}/pesign.service
6ef5e2d
%endif
6ef5e2d
%{python3_sitelib}/mockbuild/plugins/*/pesign.*
6ef5e2d
%{python3_sitelib}/mockbuild/plugins/pesign.*
6ef5e2d
6ef5e2d
%changelog
6816587
* Fri Jul 23 2021 Fedora Release Engineering <releng@fedoraproject.org> - 113-17
6816587
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
6816587
28f91e7
* Tue Mar 02 2021 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 113-16
28f91e7
- Rebuilt for updated systemd-rpm-macros
28f91e7
  See https://pagure.io/fesco/issue/2583.
28f91e7
53bd735
* Wed Jan 27 2021 Fedora Release Engineering <releng@fedoraproject.org> - 113-15
53bd735
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
53bd735
f7bf001
* Mon Nov 16 2020 Jeff Law <law@redhat.com> - 113-14
f7bf001
- Turn off -Wfree-nonheap-object
f7bf001
2ee3400
* Mon Aug 03 2020 Peter Jones <pjones@redhat.com> - 113-13
2ee3400
- Add the rundir related stuff that was staged on my f32 checkout.
2ee3400
e69b8ee
* Mon Aug 03 2020 Peter Jones <pjones@redhat.com> - 113-12
9dddf18
- Try to make kernel and fwupd both work at the same time.
9dddf18
92fa0a3
* Tue Jul 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 113-11
92fa0a3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
92fa0a3
885ef5e
* Thu Jul 16 2020 Peter Jones <pjones@redhat.com> - 113-10
885ef5e
- I really cannot figure out why bkernel01 thinks the certificate nickname
885ef5e
  starts with /CN=, but it does, so I'm gonna stop fighting with the sand.
885ef5e
2335e63
* Thu Jul 16 2020 Peter Jones <pjones@redhat.com> - 113-9
2335e63
- Even more kernel build debugging...
2335e63
1702b23
* Tue Jul 07 2020 Peter Jones <pjones@redhat.com> - 113-8
1702b23
- More kernel build debugging...
1702b23
9dfdddd
* Tue Jul 07 2020 Peter Jones <pjones@redhat.com> - 113-6
9dfdddd
- Disable the pesign-authorize call in posttrans, until we can figure out a
9dfdddd
  better way to deal with that in the fedora kernel builder chroot setup
9dfdddd
6a57677
* Tue Jul 07 2020 Peter Jones <pjones@redhat.com> - 113-5
bad9f46
- Make pesign require nss-tools for the posttrans scriptlet
6a57677
- Move most of macros.pesign to /usr/libexec/pesign/pesign-rpmbuild-helper
bad9f46
4f2a0b0
* Mon Jul 06 2020 Peter Jones <pjones@redhat.com> - 113-4
4f2a0b0
- Attempt to fix kernel signing failures caused by -3...
4f2a0b0
9b526cf
* Fri Jun 12 2020 Peter Jones <pjones@redhat.com> - 113-3
9b526cf
- Fix the signer name for fedora and some other minor nits
9b526cf
  Related: rhbz#1708773
9b526cf
  Related: rhbz#1678146
9b526cf
edca44f
* Thu Jun 11 2020 Peter Jones <pjones@redhat.com> - 113-2
edca44f
- Fix a signing protocol bug we introduced in 113 that makes the fedora
edca44f
  kernel builders fail.
edca44f
  Related: rhbz#1708773
edca44f
8f36a78
* Thu Jun 11 2020 Javier Martinez Canillas <javierm@redhat.com> - 113-1
8f36a78
- Update to 113 release
8f36a78
  Resolves: rhbz#1708773
8f36a78
6076214
* Mon Jun 08 2020 Javier Martinez Canillas <javierm@redhat.com> - 0.112-31
6076214
- Switch default NSS database to SQLite format (pjones)
6076214
  Resolves: rhbz#1827902
6076214
9664ede
* Mon Feb 24 2020 Peter Jones <pjones@redhat.com> - 0.112-30
9664ede
- Make sure the patch for -29 is actually in the build in f32, and
9664ede
  synchronize with master.
9664ede
f4cb5bf
* Tue Feb 18 2020 Peter Jones <pjones@redhat.com> - 0.112-29
f4cb5bf
- Rebuild to match OpenSC's token name mangling change.
f4cb5bf
6666916
* Thu Jan 30 2020 Fedora Release Engineering <releng@fedoraproject.org> - 0.112-28
6666916
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
6666916
e8c65c7
* Tue Nov 12 2019 Peter Jones <pjones@redhat.com> - 0.112-27
e8c65c7
- Rebuild to fix an NSS API issue.	
e8c65c7
6ef5e2d
* Fri Jul 26 2019 Fedora Release Engineering <releng@fedoraproject.org> - 0.112-26
6ef5e2d
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
6ef5e2d
6ef5e2d
* Wed Mar  6 2019 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.112-25
6ef5e2d
- Fix build (#1675653)
6ef5e2d
- Add missing closing quote in macro (#1651020)
6ef5e2d
- Update obsolete /var/run/ path (#1678146)
6ef5e2d
6ef5e2d
* Sat Feb 02 2019 Fedora Release Engineering <releng@fedoraproject.org> - 0.112-25
6ef5e2d
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
6ef5e2d
6ef5e2d
* Fri Jul 13 2018 Fedora Release Engineering <releng@fedoraproject.org> - 0.112-24
6ef5e2d
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
6ef5e2d
6ef5e2d
* Fri Feb 09 2018 Fedora Release Engineering <releng@fedoraproject.org> - 0.112-23
6ef5e2d
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
6ef5e2d
6ef5e2d
* Mon Jan 22 2018 Peter Robinson <pbrobinson@fedoraproject.org> 0.112-22
6ef5e2d
- Minor spec cleanups, fix arm conditional
6ef5e2d
6ef5e2d
* Fri Oct 06 2017 Troy Dawson <tdawson@redhat.com> - 0.112-21
6ef5e2d
- Cleanup spec file conditionals
6ef5e2d
6ef5e2d
* Tue Aug 15 2017 Peter Jones <pjones@redhat.com> - 0.112-20
6ef5e2d
- Maybe fewer typoes would be better.
6ef5e2d
6ef5e2d
* Tue Aug 15 2017 Peter Jones <pjones@redhat.com> - 0.112-19
6ef5e2d
- Update to match f26's build so new kernel builds will work.
6ef5e2d
6ef5e2d
* Thu Aug 10 2017 Peter Jones <pjones@redhat.com> - 0.112-10
6ef5e2d
- Try to fix the db problem nirik is seeing trying to upgrade the builders.
6ef5e2d
6ef5e2d
* Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.112-9
6ef5e2d
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
6ef5e2d
6ef5e2d
* Thu Jul 27 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.112-8
6ef5e2d
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
6ef5e2d
6ef5e2d
* Sat Jul 08 2017 Peter Jones <pjones@redhat.com> - 0.112-7
6ef5e2d
- Rebuild for efivar-31-1.fc26
6ef5e2d
  Related: rhbz#1468841
6ef5e2d
6ef5e2d
* Sat Feb 11 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.112-6
6ef5e2d
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
6ef5e2d
6ef5e2d
* Fri Jan 06 2017 Peter Jones <pjones@redhat.com> - 0.112-5
6ef5e2d
- Don't Req: or BuildReq: coolkey or opensc; those belong in system deploy
6ef5e2d
  scripts.
6ef5e2d
  Related: rhbz#1349073
6ef5e2d
6ef5e2d
* Wed Aug 17 2016 Peter Jones <pjones@redhat.com> - 0.112-4
6ef5e2d
- Build as -4 to make bodhi happy.
6ef5e2d
6ef5e2d
* Fri Aug 12 2016 Adam Williamson <awilliam@redhat.com> - 0.112-3
6ef5e2d
- backport fix for command line parsing from upstream master
6ef5e2d
6ef5e2d
* Wed Aug 10 2016 Peter Jones <pjones@redhat.com> - 0.112-2
6ef5e2d
- Build with newer efivar.
6ef5e2d
6ef5e2d
* Wed Apr 20 2016 Peter Jones <pjones@redhat.com> - 0.112-1
6ef5e2d
- Update to 0.112
6ef5e2d
- Also fix up some spec file woes:
6ef5e2d
  - dumb things in %%setup
6ef5e2d
  - find-debuginfo.sh not working right for some source files...
6ef5e2d
6ef5e2d
* Thu Feb 04 2016 Fedora Release Engineering <releng@fedoraproject.org> - 0.111-8
6ef5e2d
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
6ef5e2d
6ef5e2d
* Thu Dec 10 2015 Peter Jones <pjones@redhat.com> - 0.111-7
6ef5e2d
- Obsolete pesign-rh-test-certs, it was in -1's update.
6ef5e2d
  Resolves: rhbz#1283475
6ef5e2d
6ef5e2d
* Wed Dec 02 2015 Peter Jones <pjones@redhat.com> - 0.111-6
6ef5e2d
- *Don't* use --certdir if we're using the socket.
6ef5e2d
  Related: rhbz#1283475
6ef5e2d
  Related: rhbz#1284063
6ef5e2d
  Related: rhbz#1284561
6ef5e2d
6ef5e2d
* Tue Dec 01 2015 Peter Jones <pjones@redhat.com> - 0.111-5
6ef5e2d
- Actually do a better job of choosing which cert to use when, so people will
6ef5e2d
  stop seeing any of this problem.  (Thanks for the thought, jforbes.)
6ef5e2d
  Resolves: rhbz#1283475
6ef5e2d
  Resolves: rhbz#1284063
6ef5e2d
  Resolves: rhbz#1284561
6ef5e2d
6ef5e2d
* Mon Nov 30 2015 Peter Jones <pjones@redhat.com> - 0.111-5
6ef5e2d
- setfacl even harder.
6ef5e2d
  Related: rhbz#1283475
6ef5e2d
  Related: rhbz#1284063
6ef5e2d
  Related: rhbz#1284561
6ef5e2d
6ef5e2d
* Fri Nov 20 2015 Peter Jones <pjones@redhat.com> - 0.111-3
6ef5e2d
- Better ACL setting code.
6ef5e2d
  Related: rhbz#1283475
6ef5e2d
6ef5e2d
* Thu Nov 19 2015 Peter Jones <pjones@redhat.com> - 0.111-2
6ef5e2d
- Allow the mockbuild user to read the nss database if the account exists.
6ef5e2d
6ef5e2d
* Wed Oct 28 2015 Peter Jones <pjones@redhat.com> - 0.111-1
6ef5e2d
- Rebase to 0.111
6ef5e2d
- Split test certs out into a "Recommends" subpackage.
6ef5e2d
6ef5e2d
* Thu Jun 18 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.110-3
6ef5e2d
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
6ef5e2d
6ef5e2d
* Wed Mar  4 2015 Ville Skyttä <ville.skytta@iki.fi> - 0.110-2
6ef5e2d
- Install macros in %%{_rpmconfigdir}/macros.d where available (#1074281)
6ef5e2d
6ef5e2d
* Fri Oct 24 2014 Peter Jones <pjones@redhat.com> - 0.110-1
6ef5e2d
- Update to pesign-0.110
6ef5e2d
6ef5e2d
* Sun Aug 17 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.108-4
6ef5e2d
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
6ef5e2d
6ef5e2d
* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.108-3
6ef5e2d
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
6ef5e2d
6ef5e2d
* Thu May 29 2014 Peter Jones <pjones@redhat.com> - 0.108-2
6ef5e2d
- Fix a networking problem nirik observed when reinstalling builders.
6ef5e2d
6ef5e2d
* Sat Aug 10 2013 Peter Jones <pjones@redhat.com> - 0.108-1
6ef5e2d
- Remove errant result files and raise an error from %%pesign 
6ef5e2d
6ef5e2d
* Tue Aug 06 2013 Peter Jones <pjones@redhat.com> - 0.106-3
6ef5e2d
- Add code for signing in RHEL 7
6ef5e2d
6ef5e2d
* Mon Aug 05 2013 Peter Jones <pjones@redhat.com> - 0.106-2
6ef5e2d
- Fix for new %%doc rules.
6ef5e2d
6ef5e2d
* Sun Aug 04 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.106-2
6ef5e2d
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
6ef5e2d
6ef5e2d
* Tue May 21 2013 Peter Jones <pjones@redhat.com> - 0.106-1
6ef5e2d
- Update to 0.106
6ef5e2d
- Hopefully fix the segfault dgilmore was seeing.
6ef5e2d
6ef5e2d
* Mon May 20 2013 Peter Jones <pjones@redhat.com> - 0.105-1
6ef5e2d
- Various bug fixes.
6ef5e2d
6ef5e2d
* Wed May 15 2013 Peter Jones <pjones@redhat.com> - 0.104-1
6ef5e2d
- Make sure alignment is correct on signature list entries
6ef5e2d
  Resolves: rhbz#963361
6ef5e2d
- Make sure section alignment is correct if we have to extend the file
6ef5e2d
6ef5e2d
* Wed Feb 06 2013 Peter Jones <pjones@redhat.com> - 0.103-2
6ef5e2d
- Conditionalize systemd bits so they don't show up in RHEL 6 builds
6ef5e2d
6ef5e2d
* Tue Feb 05 2013 Peter Jones <pjones@redhat.com> - 0.103-1
6ef5e2d
- One more compiler problem.  Let's expect a few more, shall we?
6ef5e2d
6ef5e2d
* Tue Feb 05 2013 Peter Jones <pjones@redhat.com> - 0.102-1
6ef5e2d
- Don't use --std=gnu11 because we have to work on RHEL 6 builders.
6ef5e2d
6ef5e2d
* Mon Feb 04 2013 Peter Jones <pjones@redhat.com> - 0.101-1
6ef5e2d
- Update to 0.101 to fix more "pesign -E" issues.
6ef5e2d
6ef5e2d
* Fri Nov 30 2012 Peter Jones <pjones@redhat.com> - 0.100-1
6ef5e2d
- Fix insertion of signatures from a file.
6ef5e2d
6ef5e2d
* Mon Nov 26 2012 Matthew Garrett <mjg59@srcf.ucam.org> - 0.99-9
6ef5e2d
- Add a patch needed for new shim builds
6ef5e2d
6ef5e2d
* Fri Oct 19 2012 Peter Jones <pjones@redhat.com> - 0.99-8
6ef5e2d
- Get the Fedora signing token name right.
6ef5e2d
6ef5e2d
* Fri Oct 19 2012 Peter Jones <pjones@redhat.com>
6ef5e2d
- Add coolkey and opensc modules to pki database during %%install.
6ef5e2d
6ef5e2d
* Fri Oct 19 2012 Peter Jones <pjones@redhat.com> - 0.99-7
6ef5e2d
- setfacl u:kojibuilder:rw /var/run/pesign/socket
6ef5e2d
- Fix command line checking in client
6ef5e2d
- Add client stdin pin reading.
6ef5e2d
6ef5e2d
* Thu Oct 18 2012 Peter Jones <pjones@redhat.com> - 0.99-6
6ef5e2d
- Automatically select daemon as signer when using rpm macros.
6ef5e2d
6ef5e2d
* Thu Oct 18 2012 Peter Jones <pjones@redhat.com> - 0.99-5
6ef5e2d
- Make it work on the -el6 branch as well.
6ef5e2d
6ef5e2d
* Wed Oct 17 2012 Peter Jones <pjones@redhat.com> - 0.99-4
6ef5e2d
- Fix some more bugs found by valgrind and coverity.
6ef5e2d
- Don't build utils/ ; we're not using them and they're not ready anyway. 
6ef5e2d
6ef5e2d
* Wed Oct 17 2012 Peter Jones <pjones@redhat.com> - 0.99-3
6ef5e2d
- Fix daemon startup bug from 0.99-2
6ef5e2d
6ef5e2d
* Wed Oct 17 2012 Peter Jones <pjones@redhat.com> - 0.99-2
6ef5e2d
- Fix various bugs from 0.99-1
6ef5e2d
- Don't make the database unreadable just yet.
6ef5e2d
6ef5e2d
* Mon Oct 15 2012 Peter Jones <pjones@redhat.com> - 0.99-1
6ef5e2d
- Update to 0.99
6ef5e2d
- Add documentation for client/server mode.
6ef5e2d
- Add --pinfd and --pinfile to server mode.
6ef5e2d
6ef5e2d
* Fri Oct 12 2012 Peter Jones <pjones@redhat.com> - 0.98-1
6ef5e2d
- Update to 0.98
6ef5e2d
- Add client/server mode.
6ef5e2d
6ef5e2d
* Mon Oct 01 2012 Peter Jones <pjones@redhat.com> - 0.10-5
6ef5e2d
- Fix missing section address fixup.
6ef5e2d
6ef5e2d
* Wed Aug 15 2012 Peter Jones <pjones@redhat.com> - 0.10-4
6ef5e2d
- Make macros.pesign even better (and make it work right for i686 packages)
6ef5e2d
6ef5e2d
* Tue Aug 14 2012 Peter Jones <pjones@redhat.com> - 0.10-3
6ef5e2d
- Only sign things on x86_64; all else ignore gracefully.
6ef5e2d
6ef5e2d
* Tue Aug 14 2012 Peter Jones <pjones@redhat.com> - 0.10-2
6ef5e2d
- Make macros.pesign more reliable
6ef5e2d
6ef5e2d
* Mon Aug 13 2012 Peter Jones <pjones@redhat.com> - 0.10-1
6ef5e2d
- Update to 0.10
6ef5e2d
- Include rpm macros to support easy custom signing of signed packages.
6ef5e2d
6ef5e2d
* Fri Aug 10 2012 Peter Jones <pjones@redhat.com> - 0.9-1
6ef5e2d
- Update to 0.9
6ef5e2d
- Bug fix from Gary Ching-Pang Lin
6ef5e2d
- Support NSS Token selection for use with smart cards.
6ef5e2d
6ef5e2d
* Wed Aug 08 2012 Peter Jones <pjones@redhat.com> - 0.8-1
6ef5e2d
- Update to 0.8
6ef5e2d
- Don't open the db read-write
6ef5e2d
- Fix permissions on keystore (everybody can sign with test keys)
6ef5e2d
6ef5e2d
* Wed Aug 08 2012 Peter Jones <pjones@redhat.com> - 0.7-2
6ef5e2d
- Include test keys.
6ef5e2d
6ef5e2d
* Mon Jul 30 2012 Peter Jones <pjones@redhat.com> - 0.7-1
6ef5e2d
- Update to 0.7
6ef5e2d
- Better fix for MS compatibility.
6ef5e2d
6ef5e2d
* Mon Jul 30 2012 Peter Jones <pjones@redhat.com> - 0.6-1
6ef5e2d
- Update to 0.6
6ef5e2d
- Bug-for-bug compatibility with signtool.exe .
6ef5e2d
6ef5e2d
* Fri Jul 20 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.5-2
6ef5e2d
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
6ef5e2d
6ef5e2d
* Wed Jul 11 2012 Peter Jones <pjones@redhat.com> - 0.5-1
6ef5e2d
- Rebase to 0.5
6ef5e2d
- Do more rigorous bounds checking when hashing a new binary.
6ef5e2d
6ef5e2d
* Tue Jul 10 2012 Peter Jones <pjones@redhat.com> - 0.3-2
6ef5e2d
- Rebase to 0.4
6ef5e2d
6ef5e2d
* Fri Jun 22 2012 Peter Jones <pjones@redhat.com> - 0.3-2
6ef5e2d
- Move man page to a more reasonable place.
6ef5e2d
6ef5e2d
* Fri Jun 22 2012 Peter Jones <pjones@redhat.com> - 0.3-1
6ef5e2d
- Update to upstream's 0.3 .
6ef5e2d
6ef5e2d
* Thu Jun 21 2012 Peter Jones <pjones@redhat.com> - 0.2-4
6ef5e2d
- Do not build with smp flags.
6ef5e2d
6ef5e2d
* Thu Jun 21 2012 Peter Jones <pjones@redhat.com> - 0.2-3
6ef5e2d
- Make it build on i686, though it's unclear it'll ever be necessary.
6ef5e2d
6ef5e2d
* Thu Jun 21 2012 Peter Jones <pjones@redhat.com> - 0.2-2
6ef5e2d
- Fix compile problem with f18's compiler.
6ef5e2d
6ef5e2d
* Thu Jun 21 2012 Peter Jones <pjones@redhat.com> - 0.2-1
6ef5e2d
- Fix some rpmlint complaints nirik pointed out
6ef5e2d
- Add popt-devel build dep
6ef5e2d
6ef5e2d
* Fri Jun 15 2012 Peter Jones <pjones@redhat.com> - 0.1-1
6ef5e2d
- First version of SRPM.