pesign-obs-integration-10.2+git20210804.ff18da1-150400.3.5.1<>,;Pcp9|W:!dDxa9[a??Y\z G5!%J"ʅKo$f\ױJY&(>kuSckMwM<*0d95]3=4 jGʳ~-$>xs>>%p?%`d2 ? t1R_ u , H   T(`  q (8'9@': 'FGHI 0X @Y H\ ] ^!b"c#+d#e#f#l#u#v$w$tx$y$z%%%%%\Cpesign-obs-integration10.2+git20210804.ff18da1150400.3.5.1Macros and scripts to sign the kernel and bootloaderThis package provides scripts and rpm macros to automate signing of the boot loader, kernel and kernel modules in the openSUSE Buildservice.cs390zp3aX"SUSE Linux Enterprise 15SUSE LLC GPL-2.0-onlyhttps://www.suse.com/Development/Tools/Otherhttps://en.opensuse.org/openSUSE:UEFI_Image_File_Sign_Toolslinuxs390xFmQC : 8FAA큤A큤A큤ca ccccccccccca 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-obs-integration-10.2+git20210804.ff18da1-150400.3.5.1.src.rpmpesign-obs-integrationpesign-obs-integration(s390-64)@@    /bin/bash/usr/bin/perlfipscheckmozilla-nss-toolsopensslrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)suse-module-tools3.0.4-14.6.0-14.0-15.2-115.0.104.14.3cױ@c#@a@a @a`@`@``T@_@_"_9_O@_^V]^M#@]µ]µ]o@]B@\t@\ޢ@\\,@\[ٙ@[[d@[o[)ZZY˒YǞ@Y@X=mV'@T@T@jlee@suse.comjlee@suse.commsuchanek@suse.comlnussel@suse.delnussel@suse.dedmueller@suse.comglin@suse.comlnussel@suse.deglin@suse.comglin@suse.comdmueller@suse.comdmueller@suse.comglin@suse.comglin@suse.commeissner@suse.commeissner@suse.comjslaby@suse.comglin@suse.commsuchanek@suse.comglin@suse.comglin@suse.comguillaume.gardet@opensuse.orgglin@suse.comglin@suse.comglin@suse.comglin@suse.comglin@suse.comglin@suse.comglin@suse.comglin@suse.comglin@suse.comjlee@suse.comjlee@suse.comcoolo@suse.comjlee@suse.commmarek@suse.czglin@suse.commmarek@suse.czmmarek@suse.cz- Add 0001-Add-support-for-dependency-generators.patch to - Add support for including macros in pesign-repackage.spec by using pesign-spec-macros - Add support for copying sources to the new build directory by using pesign-copy-sources - Update README for dependency generation - Add Dependency Generation section - Convert to Markdown (bsc#1207520)(jsc#PED-2658)- Add 0001-pesign-gen-repackage-spec-fix-the-filename-issue-in-.patch to fix fix the filename issue in the scripts of generated ueficert package. (bsc#1195805)(bsc#1205917)- Support signing grub on powerpc (jsc#SLE-18271 bsc#1192764). + 0001-Support-ppc-grub-signing-jsc-SLE-18271-bsc-1192764.patch + 0002-kernel-sign-file-Move-x509-parsing-into-a-function.patch + 0003-kernel-sign-file-Support-appending-verbatim-PKCS-7-s.patch + 0004-Add-padding-to-grub-signature-correctly-jsc-SLE-1827.patch- Update to version 10.2+git20210804.ff18da1: * brp-99-pesign: fix that the signature of shim be broken- Update to version 10.2+git20210730.0cb100c: * Sign kernel also in module dir (boo#1184804) (replaces pesign-kernel-in-lib.diff) - switch package to obs_scm to avoid recompression- Update to version git master (10.2): * Add support for GZIP and ZSTD module compression (bsc#1188636) * Always pad the EFI image when calculating the hash * Version bump to 10.2 * approach issue#22 false noarch subpackage - drop pesign-obs-integration-bsc1183747-always-pad-efi-images.patch pesign-obs-integration-support-gzip-zstd-compression.patch (merged)- Add pesign-obs-integration-support-gzip-zstd-compression.patch to support gzip and zstd module compression- find kernel also in /lib (boo#1184804, pesign-kernel-in-lib.diff)- Add pesign-obs-integration-bsc1183747-always-pad-efi-images.patch to fix the potential hash mismatching (bsc#1183747)- Update to version 10.2: * Fix the wrongly created noarch subpackages (issue#22, bsc#1180242)- Update to version 10.1+1602850462: * Compress kernel modules in batch and in parallel (bsc#1188636) * Forward _binary_payload to the repackaged rpm (bsc#1175882) - remove 0001-Forward-_binary_payload-to-the-repackaged-rpm.patch, parallel-compression.patch (upstream)- Sync from git master directly - drop 0001-Add-support-for-kernel-module-compression.patch 0001-Enable-find_provides-and-requires.patch 0001-Initialize-compress-variable.patch 0001-Keep-the-files-in-the-OTHER-directory.patch 0001-Passthrough-license-tag.patch 0001-brp-99-compress-vmlinux-support-xz-compressed-vmlinu.patch 0001-sign-stage3.bin-from-s390-tools-with-sign-files-bsc-.patch pesign-sign-s390x-kernel.patch (upstream) - add parallel-compression.patch- Add 0001-Forward-_binary_payload-to-the-repackaged-rpm.patch to forward _binary_payload to the repackaged rpm (bsc#1175882)- Add 0001-Enable-find_provides-and-requires.patch (bsc#1114605, bsc#1180279) + Enable this patch again since virtualbox-kmp is split from the main package so the customized %find_provides for virtualbox-x11-guest won't be affected anymore.- pesign-sign-s390x-kernel.patch: Sign also the non-PE (e.g. s390x) kernels with just kernel-sign-file (bsc#1163524)- 0001-sign-stage3.bin-from-s390-tools-with-sign-files-bsc-.patch Hard code signing of stage3.bin of s390-tools (bsc#1163524)- 0001-brp-99-compress-vmlinux-support-xz-compressed-vmlinu.patch to support xz-compressed vmlinux (bnc#1155921)- 0001-Keep-the-files-in-the-OTHER-directory.patch to keep the files in the OTHER directory (boo#1155474)- Require pesign on arm (boo#1134303).- Add 0001-Initialize-compress-variable.patch to initialize $compress in pesign-gen-repackage-spec to avoid warning- Add 0001-Add-support-for-kernel-module-compression.patch to support kernel module compression (bsc#1135854, jsc#SLE-16661)- pesign is also available on %arm (boo#1134303).- Drop 0002-Enable-find_provides-and-requires.patch due to the build failure of virtualbox-guest-x11- rpm: forward the missing rpm bits (bsc#1114605, bsc#1180279) + 0001-Passthrough-license-tag.patch + 0002-Enable-find_provides-and-requires.patch- Version 10.1 - Add modsign-verify for the signature verification (bsc#1118953)- rpm: properly forward dep flags (bsc#1114605) - Fix new Lintian Error from Debian 10- debhelper: restrict wildcard package unpacking- debhelper: fix conffiles corner case- Remove the unstable source url - Update the debian scripts- Switch to tarball release- Provide password file for 'certutil -A' due to the change in mozilla-nss 3.35 (boo#1082235)- Modified modsign-repackage, using certificate to try to decrypt the signature of kernel module. It can be used to verify the integrity of signature.- Michael Schröder improved the original kernel-sign-file script to support PKCS#7 kernel module signing. Replacing sign-file.c with new kernel-sign-file script. (bsc#1049122)- escape regexp in pesign-gen-repackage-spec for perl 5.26- To support PKCS#7 kernel module signing, copy sign-file.c from SLE-15 v4.12 kernel source to replace the kernel-sign-file script to align upstream. (bsc#1049122)- Copy over any *.log files from the first build (bsc#1012422)- Add aarch64 support since pesign also build on aarch64- Add support for file verify flags (bnc#905420).- Sort the parts of the repackage spec file for easier debugging.s390zp3a 1675432943 10.2+git20210804.ff18da1-150400.3.5.110.2+git20210804.ff18da1-150400.3.5.1modsign-repackagemodsign-verifybrp-suse.dbrp-99-compress-vmlinuxbrp-99-pesignpesigngen-hmackernel-sign-filepesign-gen-repackage-specpesign-repackage.spec.inpesign-obs-integrationREADME.mdpesign-obs-integrationCOPYING/usr/bin//usr/lib/rpm//usr/lib/rpm/brp-suse.d//usr/lib/rpm/pesign//usr/share/doc/packages//usr/share/doc/packages/pesign-obs-integration//usr/share/licenses//usr/share/licenses/pesign-obs-integration/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:27465/SUSE_SLE-15-SP4_Update/c534a86e1f7bebd2705ded8bc3fe35dc-pesign-obs-integration.SUSE_SLE-15-SP4_Updatedrpmxz5s390x-suse-linuxBourne-Again shell script, ASCII text executablePerl script text executabledirectoryASCII textRRRRRRRDshylmHTputf-8db0247bc3158d403a55d39ce6d7718c3281610516afdee89e4b080e397611971? 7zXZ !t/9]"k%Z?kD&%md4uf_Y}Y^.x0ee^̟w鎫:3l &WrLޮTݔȏ MN"7u(+p8~S^r:J $ qQIH*@`r8 l=Ƕ&5kݠ=ِkuo;{#t4QVˬ[0\<2=B;`=$Հү5r*Ԃڼ/Dm\T@"}w_g4 eV7޹73 d$auvǠ4 dCue.ԓNjk2Qw_s:ߟIu蠓*[^>_tr^O,Sd2p%@Wk 9RR؃BnmG}4l(Ўt`R)62WL fw"]ZJH:fr.'_/%)۩7t'4ʹw Qza+/\w2@D[`M71P\][WA0cu4[o)Jjy,*V!d;h^Rmr۽9`{~P h*).>.1+Q[-yP =V_s||= ZBHFC{dFCŒ$#{>X\d?vay@)`y\), +)<9_^7x0R>]+H OwO{rI#"._ovfޠ$i?_o71;- e 5(ЙC:^ʾ+UT9ѕB@Jxeqخ$R\zەe9ʍ)}$hR ^QTD3q kaMvن9l f4N\aSvQ&FF:%Xz9AX2R3|cԀ@JPC]f]®^ַݳڿ L` fo:WT;,`m(5 ä=h(ƒdA0vH/V>U nԂ!O0Fq7Y f樂I 50!9ԭZR?/:NmsҜi~AШ1xID:m3 P-GZgƝ2؞\B aSo4V۟>vZ@:H"I䑔|Xe8ݜ˦skm֎{WуǦ}tc,t~sc0WE&Nlf-;a\2€eLn ?ɷpT5{kSa7Y}V?=F"-LGvd]";G=!8 _w4R0Mő?)wDLR(pQ[`JY[2Ě$232,¥.C#D)iқ!'jC'㢭RCp2v3"'^9 d?6zlvm*uo).dz nfD kh!˗,c?@ |җ߬Y&u{y7)\2@NJ?5Ԅ5N![siZ+AEQì]TkZ,QĹ~qM%xˋ4ZK:a#v/H+s-qfgƬv5*#*:%Y4ob } (-hĐ"b qRj?tbw'eZ)c_./=83\QI#{X9=u6<0 qsK իXg;9wgbxhL& 8ÃRRM[37̆8qQzƀI7Z`b +(m(YjǿLW2 e,b!qDȁ\Ҟ9U9E%G"ylw~򫖝aq7m*UzD;kOCr!q'{˿Heg􎹘t1U:VǐZG)3EMm@BE5i@Jf!dG:fTW qS&e26ґ5BMö nQɜ**ztraE$}DZuSgO|mY&5Bj uDIJΚJKub jyO:MxճE%wM~.i0)9w7VSrᡫ+>:}S9"KW v>r:"$DB 7ᑜot6@j57--K\^䖓h2 9i 0[fR\ W(F4"ԐrOo,I7ߞ[hjpy\P>LܾE6c9"F[@, x`ME.7jB!h՟$ܗ3@C.(c/) ԟQ'f>@o!+g $%nKR" #@D#KB dQ11G)5}Gv'UY?70N ry)qm(n{*Gܜ#uTh՜YMr"d׳()g/i'4n3}DFb~IYfyrPexmˀxg[vKRŕ~5zĝy? O01g\:T2n-fJ}1ݏSЃh]xծų!f֊u}]Qhc{a)ϱu G=:h='l]o{r[XC1gZpmmVwP \B ׉tWݍ&χA.蟌e{خHxZc] `zӨ\#i AqŶթ'|93&b?_IPh)kq.Z;y!hl4 xnU4_0;U[}zs $2!I$hKB,9&52rP0KT,$:-Ze*t']ď {]) Vc[{.1S  o: 5,Fxf0m*ݭ<˃C'JO]KVZ 2|OQ U=V>y\ ؝id3#.Xsc'Y`ɄCOn TZYlm̹:`Mm!*tvv)?qm8DQBS'SHu<`8U5smNLpT ega"j6JvqY|&@"z0"Fd+G! ڦF7/$g$ ~ЏA .w:hNI1'H*Nc?[; +~,V:YZ VlTpr; YӕQ~ue ?x-gaUB↓{)2[jea9ẏcZoDFĈ`Dc 5(F|n%8 / 'S1AͨF?ùvW5Xm+Fz3'ꞶƦ} cLxzVMNbH++XdQ pl9E۲RB%q ّ3:s>Hf J3~ ϕ/L,a3 6QP"c<#vc v ^g 8wt~` .ZC2C8k7Q؁IsBMoym4cD QEkm޸t\I'9g+͕# ];zC,ief7e`*Ёo~8 |#Ho#s?~+ YZ