1b5f35e5b4
Update to pesign-0.110
...
Signed-off-by: Peter Jones <pjones@redhat.com>
2014-10-24 16:32:01 -04:00
0a12908cd3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
2014-08-17 18:14:55 +00:00
d241d61da2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
2014-06-07 08:09:40 -05:00
c88197ace8
Fix a networking problem nirik observed when reinstalling builders.
2014-05-29 16:16:37 -04:00
e83259c5ef
Remove errant result files and raise an error from %pesign
2013-08-10 11:10:52 -04:00
e3986cb40f
Remove errant result files and raise an error from %pesign
...
Signed-off-by: Peter Jones <pjones@redhat.com>
2013-08-10 10:56:34 -04:00
b142cf3763
Remove errant result files and raise an error from %pesign
2013-08-10 10:39:23 -04:00
7d6ce00fe5
Remove errant result files and raise an error from %pesign
2013-08-10 10:30:26 -04:00
2915fd2186
Fix for new %doc rules.
2013-08-05 09:19:38 -04:00
ba809202a6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
2013-08-03 21:23:08 -05:00
a26d3b3975
Update to 0.106
...
- Hopefully fix the segfault dgilmore was seeing.
2013-05-21 13:42:50 -04:00
e937c15fca
Update to 0.105-1
...
Signed-off-by: Peter Jones <pjones@redhat.com>
2013-05-20 16:28:07 -04:00
8d87de3fdd
Add opensc modules to the reference db during package build.
...
Signed-off-by: Peter Jones <pjones@redhat.com>
2013-05-20 16:26:54 -04:00
aae58a2c11
Update to 0.104 ( #963361 )
...
This makes us generate signed images wich multiple signatures aligned on
8-byte boundaries, which is what finally wound up going into the spec.
Signed-off-by: Peter Jones <pjones@redhat.com>
2013-05-16 10:44:04 -04:00
d11dc191fc
Conditionalize systemd bits so they don't show up in RHEL 6 builds
...
Signed-off-by: Peter Jones <pjones@redhat.com>
2013-02-06 09:42:27 -05:00
e7eeaa7094
One more compiler problem. Let's expect a few more, shall we?
2013-02-05 15:26:33 -05:00
3c30b6579a
Don't use --std=gnu11 because we have to work on RHEL 6 builders.
2013-02-05 10:45:23 -05:00
315a5395fd
Add efikeygen to files.
...
Leaving the release at -1 since there are no builds completed.
Signed-off-by: Peter Jones <pjones@redhat.com>
2013-02-04 14:26:55 -05:00
870d99b8c9
Update to 0.101 to fix more "pesign -E" issues.
2013-02-04 14:05:57 -05:00
308dd72e6c
Fix insertion of signatures from a file.
2012-12-03 08:52:17 -05:00
5aca172458
Fix insertion of signatures from a file.
2012-11-30 17:09:41 -05:00
47e695fb59
Add a patch needed for new shim builds
2012-11-26 19:38:34 -05:00
575fc2adda
Require specific nspr and nss packages ( #868581 )
...
Signed-off-by: Peter Jones <pjones@redhat.com>
2012-10-22 10:32:38 -04:00
7f163d7465
Yeah, modutil here didn't work.
...
+ modutil -force -dbdir
/builddir/build/BUILDROOT/pesign-0.99-8.fc18.x86_64/etc/pki/pesign -add
coolkey -libfile /usr/lib64/pkcs11/libcoolkeypk11.so
ERROR: Failed to add module "coolkey". Probable cause : "A PKCS #11
module returned CKR_GENERAL_ERROR, indicating that an unrecoverable
error has occurred.".
So who knows.
Signed-off-by: Peter Jones <pjones@redhat.com>
2012-10-19 19:57:20 -04:00
e8506b8f23
Use -force when adding pkcs11 modules to our nss database.
...
Signed-off-by: Peter Jones <pjones@redhat.com>
2012-10-19 19:43:04 -04:00
11a11c6946
Get the Fedora signing token name right.
2012-10-19 19:19:24 -04:00
b5d702b29d
Add coolkey and opensc modules to pki database during %install.
2012-10-19 11:26:15 -04:00
b58922c480
setfacl u:kojibuilder:rw /var/run/pesign/socket
...
- Fix command line checking in client
- Add client stdin pin reading.
2012-10-19 10:24:10 -04:00
9e2491cafb
Automatically select daemon as signer when using rpm macros.
...
Signed-off-by: Peter Jones <pjones@redhat.com>
2012-10-18 15:20:45 -04:00
c0e5984614
Make it work on the -el6 branch as well.
2012-10-18 13:12:46 -04:00
48279a49da
Explicitly call "make install_systemd"
2012-10-18 12:59:28 -04:00
18bcd8bfc2
Fix some more bugs found by valgrind and coverity.
...
- Don't build utils/ ; we're not using them and they're not ready anyway.
2012-10-18 11:38:53 -04:00
0d40135ec1
Fix daemon startup bug from 0.99-2
2012-10-17 10:37:36 -04:00
70aaeb7aa3
Fix various bugs from 0.99-1
...
- Don't make the database unreadable just yet.
2012-10-17 09:59:14 -04:00
428f873263
Actually check in the sources file this time.
...
Signed-off-by: Peter Jones <pjones@redhat.com>
2012-10-15 21:11:51 -04:00
910a59e99d
Update to 0.99
...
- Add documentation for client/server mode.
- Add --pinfd and --pinfile to server mode.
2012-10-15 18:08:59 -04:00
27eb839fc3
Fix removal of libdpe* to not kill systemd stuff.
2012-10-12 20:24:33 -04:00
e7f0d0243b
Update to 0.98
...
- Add client/server mode.
2012-10-12 20:11:57 -04:00
60f1503bcc
Fix missing section address fixup.
2012-10-01 11:28:56 -04:00
56b5348eee
Make macros.pesign even better (and make it work right for i686 packages)
2012-08-15 11:42:25 -04:00
cc70e8687e
Only sign things on x86_64; all else ignore gracefully.
2012-08-14 15:46:35 -04:00
a28df7d436
Make macros.pesign more reliable
2012-08-14 14:31:05 -04:00
aaf8993881
Update to 0.10
...
- Include rpm macros to support easy custom signing of signed packages.
2012-08-13 15:42:07 -04:00
c813a03c02
Update to 0.9
...
- Bug fix from Gary Ching-Pang Lin
- Support NSS Token selection for use with smart cards.
2012-08-10 16:42:18 -04:00
97454ce035
Update to 0.8
...
- Don't open the db read-write
- Fix permissions on keystore (everybody can sign with test keys)
2012-08-08 11:25:42 -04:00
ca4b435190
Include test keys.
2012-08-08 09:39:35 -04:00
23bf592710
Update to 0.7
...
- Better fix for MS compatibility.
2012-07-30 15:46:23 -04:00
6ee859bcc8
Update to 0.6
...
- Bug-for-bug compatibility with signtool.exe .
2012-07-30 15:05:25 -04:00
636910cd49
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
2012-07-20 18:04:24 -05:00
74121f1774
Rebase to 0.5
...
- Do more rigorous bounds checking when hashing a new binary.
2012-07-11 15:06:04 -04:00
Peter Jones
Peter Robinson
Dennis Gilmore
Matthew Garrett