pesign-obs-integration-10.2+git20210804.ff18da1-150400.3.5.1<>,>%x?%hd2 ? t-N[ q  ( D |   P$\  x (8'9H': 'FGH I 8X HY P\ ] ^!b"c#3d#e#f#l#u#v$w$|x$y$z%%%%"%dCpesign-obs-integration10.2+git20210804.ff18da1150400.3.5.1Macros and scripts to sign the kernel and bootloaderThis package provides scripts and rpm macros to automate signing of the boot loader, kernel and kernel modules in the openSUSE Buildservice.c4sheep06X"SUSE Linux Enterprise 15SUSE LLC GPL-2.0-onlyhttps://www.suse.com/Development/Tools/Otherhttps://en.opensuse.org/openSUSE:UEFI_Image_File_Sign_Toolslinuxx86_64FmQC : 8FAA큤A큤A큤c3a c3c3c3c3c3c3c3c3c4c3c4a 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-obs-integration-10.2+git20210804.ff18da1-150400.3.5.1.src.rpmpesign-obs-integrationpesign-obs-integration(x86-64)@@    /bin/bash/usr/bin/perlfipscheckmozilla-nss-toolsopensslpesignrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)suse-module-tools3.0.4-14.6.0-14.0-15.2-115.0.104.14.3cױ@c#@a@a @a`@`@``T@_@_"_9_O@_^V]^M#@]µ]µ]o@]B@\t@\ޢ@\\,@\[ٙ@[[d@[o[)ZZY˒YǞ@Y@X=mV'@T@T@jlee@suse.comjlee@suse.commsuchanek@suse.comlnussel@suse.delnussel@suse.dedmueller@suse.comglin@suse.comlnussel@suse.deglin@suse.comglin@suse.comdmueller@suse.comdmueller@suse.comglin@suse.comglin@suse.commeissner@suse.commeissner@suse.comjslaby@suse.comglin@suse.commsuchanek@suse.comglin@suse.comglin@suse.comguillaume.gardet@opensuse.orgglin@suse.comglin@suse.comglin@suse.comglin@suse.comglin@suse.comglin@suse.comglin@suse.comglin@suse.comglin@suse.comjlee@suse.comjlee@suse.comcoolo@suse.comjlee@suse.commmarek@suse.czglin@suse.commmarek@suse.czmmarek@suse.cz- Add 0001-Add-support-for-dependency-generators.patch to - Add support for including macros in pesign-repackage.spec by using pesign-spec-macros - Add support for copying sources to the new build directory by using pesign-copy-sources - Update README for dependency generation - Add Dependency Generation section - Convert to Markdown (bsc#1207520)(jsc#PED-2658)- Add 0001-pesign-gen-repackage-spec-fix-the-filename-issue-in-.patch to fix fix the filename issue in the scripts of generated ueficert package. (bsc#1195805)(bsc#1205917)- Support signing grub on powerpc (jsc#SLE-18271 bsc#1192764). + 0001-Support-ppc-grub-signing-jsc-SLE-18271-bsc-1192764.patch + 0002-kernel-sign-file-Move-x509-parsing-into-a-function.patch + 0003-kernel-sign-file-Support-appending-verbatim-PKCS-7-s.patch + 0004-Add-padding-to-grub-signature-correctly-jsc-SLE-1827.patch- Update to version 10.2+git20210804.ff18da1: * brp-99-pesign: fix that the signature of shim be broken- Update to version 10.2+git20210730.0cb100c: * Sign kernel also in module dir (boo#1184804) (replaces pesign-kernel-in-lib.diff) - switch package to obs_scm to avoid recompression- Update to version git master (10.2): * Add support for GZIP and ZSTD module compression (bsc#1188636) * Always pad the EFI image when calculating the hash * Version bump to 10.2 * approach issue#22 false noarch subpackage - drop pesign-obs-integration-bsc1183747-always-pad-efi-images.patch pesign-obs-integration-support-gzip-zstd-compression.patch (merged)- Add pesign-obs-integration-support-gzip-zstd-compression.patch to support gzip and zstd module compression- find kernel also in /lib (boo#1184804, pesign-kernel-in-lib.diff)- Add pesign-obs-integration-bsc1183747-always-pad-efi-images.patch to fix the potential hash mismatching (bsc#1183747)- Update to version 10.2: * Fix the wrongly created noarch subpackages (issue#22, bsc#1180242)- Update to version 10.1+1602850462: * Compress kernel modules in batch and in parallel (bsc#1188636) * Forward _binary_payload to the repackaged rpm (bsc#1175882) - remove 0001-Forward-_binary_payload-to-the-repackaged-rpm.patch, parallel-compression.patch (upstream)- Sync from git master directly - drop 0001-Add-support-for-kernel-module-compression.patch 0001-Enable-find_provides-and-requires.patch 0001-Initialize-compress-variable.patch 0001-Keep-the-files-in-the-OTHER-directory.patch 0001-Passthrough-license-tag.patch 0001-brp-99-compress-vmlinux-support-xz-compressed-vmlinu.patch 0001-sign-stage3.bin-from-s390-tools-with-sign-files-bsc-.patch pesign-sign-s390x-kernel.patch (upstream) - add parallel-compression.patch- Add 0001-Forward-_binary_payload-to-the-repackaged-rpm.patch to forward _binary_payload to the repackaged rpm (bsc#1175882)- Add 0001-Enable-find_provides-and-requires.patch (bsc#1114605, bsc#1180279) + Enable this patch again since virtualbox-kmp is split from the main package so the customized %find_provides for virtualbox-x11-guest won't be affected anymore.- pesign-sign-s390x-kernel.patch: Sign also the non-PE (e.g. s390x) kernels with just kernel-sign-file (bsc#1163524)- 0001-sign-stage3.bin-from-s390-tools-with-sign-files-bsc-.patch Hard code signing of stage3.bin of s390-tools (bsc#1163524)- 0001-brp-99-compress-vmlinux-support-xz-compressed-vmlinu.patch to support xz-compressed vmlinux (bnc#1155921)- 0001-Keep-the-files-in-the-OTHER-directory.patch to keep the files in the OTHER directory (boo#1155474)- Require pesign on arm (boo#1134303).- Add 0001-Initialize-compress-variable.patch to initialize $compress in pesign-gen-repackage-spec to avoid warning- Add 0001-Add-support-for-kernel-module-compression.patch to support kernel module compression (bsc#1135854, jsc#SLE-16661)- pesign is also available on %arm (boo#1134303).- Drop 0002-Enable-find_provides-and-requires.patch due to the build failure of virtualbox-guest-x11- rpm: forward the missing rpm bits (bsc#1114605, bsc#1180279) + 0001-Passthrough-license-tag.patch + 0002-Enable-find_provides-and-requires.patch- Version 10.1 - Add modsign-verify for the signature verification (bsc#1118953)- rpm: properly forward dep flags (bsc#1114605) - Fix new Lintian Error from Debian 10- debhelper: restrict wildcard package unpacking- debhelper: fix conffiles corner case- Remove the unstable source url - Update the debian scripts- Switch to tarball release- Provide password file for 'certutil -A' due to the change in mozilla-nss 3.35 (boo#1082235)- Modified modsign-repackage, using certificate to try to decrypt the signature of kernel module. It can be used to verify the integrity of signature.- Michael Schröder improved the original kernel-sign-file script to support PKCS#7 kernel module signing. Replacing sign-file.c with new kernel-sign-file script. (bsc#1049122)- escape regexp in pesign-gen-repackage-spec for perl 5.26- To support PKCS#7 kernel module signing, copy sign-file.c from SLE-15 v4.12 kernel source to replace the kernel-sign-file script to align upstream. (bsc#1049122)- Copy over any *.log files from the first build (bsc#1012422)- Add aarch64 support since pesign also build on aarch64- Add support for file verify flags (bnc#905420).- Sort the parts of the repackage spec file for easier debugging.sheep06 1675432756 10.2+git20210804.ff18da1-150400.3.5.110.2+git20210804.ff18da1-150400.3.5.1modsign-repackagemodsign-verifybrp-suse.dbrp-99-compress-vmlinuxbrp-99-pesignpesigngen-hmackernel-sign-filepesign-gen-repackage-specpesign-repackage.spec.inpesign-obs-integrationREADME.mdpesign-obs-integrationCOPYING/usr/bin//usr/lib/rpm//usr/lib/rpm/brp-suse.d//usr/lib/rpm/pesign//usr/share/doc/packages//usr/share/doc/packages/pesign-obs-integration//usr/share/licenses//usr/share/licenses/pesign-obs-integration/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:27465/SUSE_SLE-15-SP4_Update/c534a86e1f7bebd2705ded8bc3fe35dc-pesign-obs-integration.SUSE_SLE-15-SP4_Updatedrpmxz5x86_64-suse-linuxBourne-Again shell script, ASCII text executablePerl script text executabledirectoryASCII textRRRRRRRau=n2،oPutf-891ca144124223516a8753619a49494f5ef2f96b0a7019a366c9c4a25a596dffd? 7zXZ !t/=]"k%?kD&%md4uSI:p:Osz}YfUN^7!A\)Vj U 39l%!ZzMʘRa By&"Ow9}4~K^E$-Mr:2ь5% JM)VwW~ Z<8ɚGahi$x\nzEڈ)@2&p}:Q@#ҺTΝVI*2&5ڜ5X1kC9tm(m|j~һ}ʞ诛N@@tr+"!-FĄ@ zK1c(10fR:D.E.le'vE\"V_M;CySd#JϚ dL5z! +  ӽ̡|hD0:%%KT-cܣbC:D'bpW/HtĹ/iUF)>3BhzA-fږthrkq0~ n„}W CYwKQÇ6Yji=u|^JpM;Q^,q^:&܄D+&wgtE'58}{yF$M8D:o2O 5R'vWNA]y2場#TGٖ(n8C)Qt GXY<4/#$)(.5eS.5E-=ej1tjl**@,{zoϻrt5H 6P?"Z>Op/̦o-.ZFYi @Hj<{[>HjG~SsmFY8:8CV" ~eJlyߵ\6B19\su[֠!#7IE F&If I}.=u_o  e] 4đyAVn@FoN,#m:BZUe"dr*lzUq_u@8+䮜ޯC;3yOrO%Ŗdd,К\Fu$x5UCkrrlvQlb!PyPZjZPSֳۙ\{rJ%qv*c q&,,۞~B'f#OO8ܵxad^5ixnX*m[ ^<#^X&a!"`sK =Nn 9 +߬0&l_%96ۢ~?gj6YtZ7Q,>.ZaGa*|ڌ-o |0 !ϐ|r-(-bU+zChn!j!wSI؅7\ keJ8<hq/UxXp$!˅.Vm-BfngToQ6W?xy"<8s3T+|\˨?aoZZ1OZ^T͂Pn b!^ac#"91`[BX2`sA%::uр9b{dDGO"w7VJZоkL:"x&`dp+ .,O<"iV;{cō 2k]qYYt!9Kb@]_Gw9!<*zJK)l3ek@6$.EdUanUy?\ībQ{#]ɧuyV'X܅ 5@'l@ 1vRsƠĔH,}32e`j uePtxּ_;+$Z#K]Cd@r?+z B6/|rx?ej)e=IKO-XѲ=tSl_rt2f|Gux>κ=UɽM9&i~Xg{$.(J ~74Ax ? h+a,ʂe4ݪN&ّa"-X4hC\⒍鉕ա?(bmaH#\D fM/I>g$71륂g4sEVJ8/ qc#eyD3{#xz4܍#􋮋q4>m,x0oީPi\$4FY5_:GqN֍'5c FT$ _IIʪop1$xCӝ0蚢~w5|ajPu$"hFN]~Dsr@ IA?%Om1Z"4vk@ʓ઒?v' *PSsHFYdGa<!+f Fu1 Abde>W8tjۺO7 8bUNeCB:FI5!I3+DTo,?-y׸N&οbИX7(5 Pb=LB `'OZQ_ '>ӤSvDV"8cSDCfu$G&"QҎJ 5G) dV lϚ;We`<;Dr}يdUA^H<.# *WH뻯 c0p Ot:r3$)5!eOL$ey=ҽ.V`-Ą@ڂWKٕf$%͆7ύf;.;u87*I t V [ꨙ %Z{MhC:*i#/<]W3{dOcݱlK%6bEG bB?P.3d#2;&4$x!B6?bN͌) NET`/޶9ҵXMqq' RE![IgكqőMwEf~x 2 'En[[XVɌ"__ A^\3WNsq$MZ Կ#楾5Kh ˲n# [$!S_war^%zhѼ YZ