Commit Graph

54 Commits

Author SHA1 Message Date
Ondrej Mosnacek
5d51b5804e Bump Release field
Forgot to add this to the previous commit...

Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>
2019-02-01 22:03:39 +01:00
Ondrej Mosnacek
2a261ac6a0 Fix build with new GCC
Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>
2019-02-01 22:02:35 +01:00
Fedora Release Engineering
459efb3df3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2019-02-01 07:26:40 +00:00
Ondrej Mosnacek
01f1016328 Update to upstream version 1.1.3 2018-08-23 15:38:18 +02:00
Ondrej Mosnacek
82e795531c Update patch from upstream 2018-08-09 15:35:02 +02:00
Ondrej Mosnacek
47361f07e4 Add missing dependencies to the tests package 2018-08-09 15:34:15 +02:00
Ondrej Mosnacek
fc32ffda86 tests: Run each subtest separately 2018-08-09 12:20:38 +02:00
Ondrej Mosnacek
3697cbee9f Build and tests require perl 2018-08-09 12:19:27 +02:00
Ondrej Mosnacek
bb258cf923 Add missing script to the 'tests' package 2018-08-09 10:27:29 +02:00
Ondrej Mosnacek
29c28aa0c9 Add CI tests 2018-08-08 16:17:43 +02:00
Ondrej Mosnacek
d40c36fd66 Add missing requires to the 'tests' subpackage 2018-08-08 13:30:33 +02:00
Ondrej Mosnacek
369fb01cd1 Build the 'tests' subpackage conditionally 2018-08-08 10:02:12 +02:00
Ondrej Mosnacek
04ed926005 Produce a subpackage with test scripts 2018-08-08 09:23:30 +02:00
Ondrej Mosnacek
ba8cc20c2b Add patch to fix unwanted closing of FD 0 2018-08-01 10:21:12 +02:00
Ondrej Mosnacek
5001e659a7 Remove the kernel headers workaround
The issue has been resoved upstream [1], so the workaround patch can be
removed,

[1] https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=9ba546c01976a426292af99e682a557075d6c010
2018-07-31 09:57:26 +02:00
Igor Gnatenko
314a35f7a3
Rebuild for new binutils
Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
2018-07-27 14:55:18 +02:00
Ondrej Mosnacek
9492899ff0 Fixup specfile 2018-07-27 11:56:51 +02:00
Ondrej Mosnacek
e542872a71 Add patch to fix AEAD fuzz test for BE arches 2018-07-27 11:53:06 +02:00
Ondrej Mosnacek
e55cfcddec Add more Coverity fixes from upstream
This commit updates the last PR patch (one of the commits was not
accepted upstream) and adds new fixes that have been added in the
meantime (including an alternative version of the patch that had been
dropped).
2018-07-27 09:40:09 +02:00
Ondrej Mosnacek
ea59de0d6c Drop the Requires on kernel package
See: https://bugzilla.redhat.com/show_bug.cgi?id=1600622
2018-07-23 14:59:14 +02:00
Ondrej Mosnacek
902fe4bfd1 Add various fixes from upstream 2018-07-23 13:27:48 +02:00
Ondrej Mosnacek
28355f75fe Put .hmac files into a separate directory
Putting the .hmac files into the same directory as the checked binary
causes rpmlint errors and is generaly not a good idea (there could be a
multilib conflict).

Since dracut is already hard-coded to search for them in
/lib(64)?/fipscheck and /lib(64)?/hmaccalc, let's just drop them there.
2018-07-16 15:55:37 +02:00
Fedora Release Engineering
17d760e698 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2018-07-13 08:18:36 +00:00
Ondrej Mosnacek
2fb9e7a34e Add patch to work around FTBFS on rawhide
This commit adds a temporary workaround for failing builds with the new
4.18-rcX kernel on rawhide. The issue will likely be fixed in the kernel
before the final 4.18 release. The workaround can be removed then.

Upstream issue: https://github.com/smuellerDD/libkcapi/issues/59
2018-07-12 09:17:12 +02:00
Ondrej Mosnacek
8d36778e3a Fix off-by-one error in checkfile parsing
Add patch from upstream that fixes a bug that caused FIPS self-check of
hmaccalc binaries on Fedora.
2018-07-11 14:52:19 +02:00
Ondrej Mosnacek
a8b3dd6715 Fix changelog date 2018-07-11 10:35:30 +02:00
Ondrej Mosnacek
062c9f35ff Fix command-line parsing in libkcapi-hmaccalc 2018-07-11 10:06:08 +02:00
Ondrej Mosnacek
b5f3088903 Update to upstream version 1.1.1 2018-06-18 11:17:46 +02:00
Ondrej Mosnacek
a96229f2c0 Use own sha512hmac and fipscheck
Use the freshly-built binaries to recompute the checksums in the
post-install hook. This allows us to drop the build-time dependencies
on hmaccalc (i.e. itself) and fipscheck.
2018-05-24 09:16:56 +02:00
Ondrej Mosnacek
e25f34d86d Revert "Skip CLang static analysis in RHEL"
This reverts changes from fc568a9a0f.
(I discovered these were not actually needed.)
2018-05-10 10:48:54 +02:00
Ondrej Mosnacek
fc568a9a0f Skip CLang static analysis in RHEL 2018-05-09 11:22:20 +02:00
Ondrej Mosnacek
fa7ff40298 Merge remote-tracking branch 'origin/f28'
Fix accidental divergence of f* branches.
2018-05-02 11:16:46 +02:00
Ondrej Mosnacek
7001cbb697 Fix description lines being too long 2018-05-02 10:41:20 +02:00
Ondrej Mosnacek
4cc38f8111 Fix description lines too long 2018-05-02 09:38:51 +02:00
Björn Esser
6c61955479
Fix conditional for hmaccalc replacement 2018-04-27 17:35:27 +02:00
Ondrej Mosnacek
2f15384a80 Replace hmaccalc by default in Fedora 28+
The aim is to allow HMAC checking the kernel without depending on
userspace crypto implementations.
2018-04-27 13:06:28 +02:00
Björn Esser
c667bd0117
Remove old file from repo 2018-04-21 12:16:57 +02:00
Ondrej Mosnacek
955e81c3c4 Update to upstream version 1.1.0
This patch also fixes the computation of self-check .hmac files.
Before, fipshmac was used for all binaries but since the hmaccalc tools
use different parameters (SHA-512 instead of SHA-256 and a different
key, this would lead to self-check failures for hmaccalc. The new
post-install script calculates the hmaccalc files using sha512hmac and
other .hmac files using fipshmac.

The parameters for the self-check of the library were also consolidated
upstream to use a single parameter set across tools (the fipscheck
parameters) so that the library is checked correctly by all tools.

I also dropped the kcapi-hasher binary and the hasher subpackage as it
is really useless on its own (and the other hasher tools are always
created as hard links). It would also be impossible to add a universally
correct .hmac file since different tools would check against it with
different parameters.
2018-04-19 11:16:55 +02:00
Björn Esser
3440cb3784
Ignore failing tests on %%{power64} temporarily 2018-04-01 14:57:56 +02:00
Björn Esser
250b716f2e
Add patch for proper pkgconfig location 2018-04-01 14:57:56 +02:00
Björn Esser
92ee9f5750
Obsolete replacements subpackage 2018-04-01 14:27:52 +02:00
Björn Esser
5d9e459225 Move pkgconfig-dir to proper location 2018-03-31 12:35:32 +02:00
Björn Esser
6d728f1390 Replace single patches with a monolitic one from upstream 2018-03-31 12:23:19 +02:00
Ondrej Mosnáček
7bd35c594d Split up the replacements subpackage
It is better to have a separate subpackage for each replaced tool.
2018-03-21 13:38:36 +01:00
Björn Esser
a446d71c1f
Increase optmem_max preset to 81920 2018-02-26 10:22:36 +01:00
Björn Esser
308424feba
Obsoletes work by package name, not by provides (rhbz#1537225) 2018-02-26 10:20:48 +01:00
Björn Esser
de7ac2ec88
Add patch to fix a copy-paste typo 2018-02-25 14:12:04 +01:00
Björn Esser
090bf239dd
Add patch to fix build with -Werror 2018-02-17 11:01:56 +01:00
Björn Esser
fe5c308575
Fix %%changelog 2018-02-17 09:48:03 +01:00
Fedora Release Engineering
0dd8f39383 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2018-02-07 22:01:48 +00:00