Ondrej Mosnacek
f5e4195060
Remove no longer needed ppc64 workaround
...
The kernel bug causing failures on ppc64le is now fixed in recent/stable
kernels [1], so we can remove the workaround.
[1] https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=dcf7b48212c0fab7df69e84fab22d6cb7c8c0fb9
Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>
2019-07-27 22:12:12 +02:00
Ondrej Mosnacek
3d486e6132
Backport patch to fix test failure on aarch64
...
Another patch needed to fix failing tests...
Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>
2019-07-27 22:10:09 +02:00
Ondrej Mosnacek
154ab8363d
Backport patch to fix tests
...
This patch fixes detection of kernel version, which should fix the
failing build-time tests on some arches.
Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>
2019-07-27 18:50:26 +02:00
Ondrej Mosnacek
4cdceabb5d
Enable gating
...
Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>
2019-07-25 17:19:25 +02:00
Ondrej Mosnacek
12b9ffe9da
Work around cppcheck issue
...
Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>
2019-07-25 17:19:07 +02:00
Fedora Release Engineering
4a47da3f29
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
...
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2019-07-25 13:35:33 +00:00
Ondrej Mosnacek
782807f493
Fix FTBFS: hardlink is now in bindir
...
Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>
2019-05-27 13:19:29 +02:00
Ondrej Mosnacek
84c3a32d11
Update to upstream version 1.1.4
...
Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>
2019-02-02 12:00:24 +01:00
Ondrej Mosnacek
5d51b5804e
Bump Release field
...
Forgot to add this to the previous commit...
Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>
2019-02-01 22:03:39 +01:00
Ondrej Mosnacek
2a261ac6a0
Fix build with new GCC
...
Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>
2019-02-01 22:02:35 +01:00
Fedora Release Engineering
459efb3df3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
...
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2019-02-01 07:26:40 +00:00
Ondrej Mosnacek
01f1016328
Update to upstream version 1.1.3
2018-08-23 15:38:18 +02:00
Ondrej Mosnacek
82e795531c
Update patch from upstream
2018-08-09 15:35:02 +02:00
Ondrej Mosnacek
47361f07e4
Add missing dependencies to the tests package
2018-08-09 15:34:15 +02:00
Ondrej Mosnacek
3697cbee9f
Build and tests require perl
2018-08-09 12:19:27 +02:00
Ondrej Mosnacek
bb258cf923
Add missing script to the 'tests' package
2018-08-09 10:27:29 +02:00
Ondrej Mosnacek
d40c36fd66
Add missing requires to the 'tests' subpackage
2018-08-08 13:30:33 +02:00
Ondrej Mosnacek
369fb01cd1
Build the 'tests' subpackage conditionally
2018-08-08 10:02:12 +02:00
Ondrej Mosnacek
04ed926005
Produce a subpackage with test scripts
2018-08-08 09:23:30 +02:00
Ondrej Mosnacek
ba8cc20c2b
Add patch to fix unwanted closing of FD 0
2018-08-01 10:21:12 +02:00
Ondrej Mosnacek
5001e659a7
Remove the kernel headers workaround
...
The issue has been resoved upstream [1], so the workaround patch can be
removed,
[1] https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=9ba546c01976a426292af99e682a557075d6c010
2018-07-31 09:57:26 +02:00
Igor Gnatenko
314a35f7a3
Rebuild for new binutils
...
Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
2018-07-27 14:55:18 +02:00
Ondrej Mosnacek
9492899ff0
Fixup specfile
2018-07-27 11:56:51 +02:00
Ondrej Mosnacek
e542872a71
Add patch to fix AEAD fuzz test for BE arches
2018-07-27 11:53:06 +02:00
Ondrej Mosnacek
e55cfcddec
Add more Coverity fixes from upstream
...
This commit updates the last PR patch (one of the commits was not
accepted upstream) and adds new fixes that have been added in the
meantime (including an alternative version of the patch that had been
dropped).
2018-07-27 09:40:09 +02:00
Ondrej Mosnacek
ea59de0d6c
Drop the Requires on kernel package
...
See: https://bugzilla.redhat.com/show_bug.cgi?id=1600622
2018-07-23 14:59:14 +02:00
Ondrej Mosnacek
902fe4bfd1
Add various fixes from upstream
2018-07-23 13:27:48 +02:00
Ondrej Mosnacek
28355f75fe
Put .hmac files into a separate directory
...
Putting the .hmac files into the same directory as the checked binary
causes rpmlint errors and is generaly not a good idea (there could be a
multilib conflict).
Since dracut is already hard-coded to search for them in
/lib(64)?/fipscheck and /lib(64)?/hmaccalc, let's just drop them there.
2018-07-16 15:55:37 +02:00
Fedora Release Engineering
17d760e698
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
...
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2018-07-13 08:18:36 +00:00
Ondrej Mosnacek
2fb9e7a34e
Add patch to work around FTBFS on rawhide
...
This commit adds a temporary workaround for failing builds with the new
4.18-rcX kernel on rawhide. The issue will likely be fixed in the kernel
before the final 4.18 release. The workaround can be removed then.
Upstream issue: https://github.com/smuellerDD/libkcapi/issues/59
2018-07-12 09:17:12 +02:00
Ondrej Mosnacek
8d36778e3a
Fix off-by-one error in checkfile parsing
...
Add patch from upstream that fixes a bug that caused FIPS self-check of
hmaccalc binaries on Fedora.
2018-07-11 14:52:19 +02:00
Ondrej Mosnacek
a8b3dd6715
Fix changelog date
2018-07-11 10:35:30 +02:00
Ondrej Mosnacek
062c9f35ff
Fix command-line parsing in libkcapi-hmaccalc
2018-07-11 10:06:08 +02:00
Ondrej Mosnacek
b5f3088903
Update to upstream version 1.1.1
2018-06-18 11:17:46 +02:00
Ondrej Mosnacek
a96229f2c0
Use own sha512hmac and fipscheck
...
Use the freshly-built binaries to recompute the checksums in the
post-install hook. This allows us to drop the build-time dependencies
on hmaccalc (i.e. itself) and fipscheck.
2018-05-24 09:16:56 +02:00
Ondrej Mosnacek
e25f34d86d
Revert "Skip CLang static analysis in RHEL"
...
This reverts changes from fc568a9a0f
.
(I discovered these were not actually needed.)
2018-05-10 10:48:54 +02:00
Ondrej Mosnacek
fc568a9a0f
Skip CLang static analysis in RHEL
2018-05-09 11:22:20 +02:00
Ondrej Mosnacek
7001cbb697
Fix description lines being too long
2018-05-02 10:41:20 +02:00
Björn Esser
6c61955479
Fix conditional for hmaccalc replacement
2018-04-27 17:35:27 +02:00
Ondrej Mosnacek
2f15384a80
Replace hmaccalc by default in Fedora 28+
...
The aim is to allow HMAC checking the kernel without depending on
userspace crypto implementations.
2018-04-27 13:06:28 +02:00
Ondrej Mosnacek
955e81c3c4
Update to upstream version 1.1.0
...
This patch also fixes the computation of self-check .hmac files.
Before, fipshmac was used for all binaries but since the hmaccalc tools
use different parameters (SHA-512 instead of SHA-256 and a different
key, this would lead to self-check failures for hmaccalc. The new
post-install script calculates the hmaccalc files using sha512hmac and
other .hmac files using fipshmac.
The parameters for the self-check of the library were also consolidated
upstream to use a single parameter set across tools (the fipscheck
parameters) so that the library is checked correctly by all tools.
I also dropped the kcapi-hasher binary and the hasher subpackage as it
is really useless on its own (and the other hasher tools are always
created as hard links). It would also be impossible to add a universally
correct .hmac file since different tools would check against it with
different parameters.
2018-04-19 11:16:55 +02:00
Björn Esser
3440cb3784
Ignore failing tests on %%{power64} temporarily
2018-04-01 14:57:56 +02:00
Björn Esser
250b716f2e
Add patch for proper pkgconfig location
2018-04-01 14:57:56 +02:00
Björn Esser
92ee9f5750
Obsolete replacements subpackage
2018-04-01 14:27:52 +02:00
Björn Esser
5d9e459225
Move pkgconfig-dir to proper location
2018-03-31 12:35:32 +02:00
Björn Esser
6d728f1390
Replace single patches with a monolitic one from upstream
2018-03-31 12:23:19 +02:00
Ondrej Mosnáček
7bd35c594d
Split up the replacements subpackage
...
It is better to have a separate subpackage for each replaced tool.
2018-03-21 13:38:36 +01:00
Björn Esser
a446d71c1f
Increase optmem_max preset to 81920
2018-02-26 10:22:36 +01:00
Björn Esser
308424feba
Obsoletes work by package name, not by provides (rhbz#1537225)
2018-02-26 10:20:48 +01:00
Björn Esser
de7ac2ec88
Add patch to fix a copy-paste typo
2018-02-25 14:12:04 +01:00