2012-06-21 13:33:06 +00:00
|
|
|
Summary: Signing utility for UEFI binaries
|
|
|
|
|
Name: pesign
|
2012-08-13 19:42:07 +00:00
|
|
|
Version: 0.10
|
2012-08-14 18:31:05 +00:00
|
|
|
Release: 2%{?dist}
|
2012-06-21 13:33:06 +00:00
|
|
|
Group: Development/System
|
|
|
|
|
License: GPLv2
|
|
|
|
|
URL: https://github.com/vathpela/pesign
|
2012-06-22 20:18:39 +00:00
|
|
|
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
|
|
|
|
|
BuildRequires: git gnu-efi nspr nspr-devel nss nss-devel nss-util popt-devel
|
2012-08-13 19:42:07 +00:00
|
|
|
Requires: nspr nss nss-util popt rpm
|
2012-06-27 13:12:37 +00:00
|
|
|
ExclusiveArch: i686 x86_64 ia64
|
2012-06-22 20:18:39 +00:00
|
|
|
|
2012-06-21 13:33:06 +00:00
|
|
|
# there is no tarball at github, of course. To get this version do:
|
|
|
|
|
# git clone https://github.com/vathpela/pesign.git
|
|
|
|
|
# git checkout %%{version}
|
2012-08-08 13:39:35 +00:00
|
|
|
Source0: pesign-%{version}.tar.bz2
|
|
|
|
|
Source1: rh-test-certs.tar.bz2
|
2012-06-21 13:33:06 +00:00
|
|
|
|
2012-08-14 18:31:05 +00:00
|
|
|
Patch0: pesign-0.10-better-macros.patch
|
|
|
|
|
|
2012-06-21 13:33:06 +00:00
|
|
|
%description
|
|
|
|
|
This package contains the pesign utility for signing UEFI binaries as
|
|
|
|
|
well as other associated tools.
|
|
|
|
|
|
|
|
|
|
%prep
|
2012-08-08 13:39:35 +00:00
|
|
|
%setup -q -a 1
|
2012-06-21 13:33:06 +00:00
|
|
|
git init
|
|
|
|
|
git config user.email "pesign-owner@fedoraproject.org"
|
|
|
|
|
git config user.name "Fedora Ninjas"
|
|
|
|
|
git add .
|
|
|
|
|
git commit -a -q -m "%{version} baseline."
|
|
|
|
|
git am %{patches} </dev/null
|
|
|
|
|
|
|
|
|
|
%build
|
2012-06-22 15:39:18 +00:00
|
|
|
make PREFIX=%{_prefix} LIBDIR=%{_libdir}
|
2012-06-21 13:33:06 +00:00
|
|
|
|
|
|
|
|
%install
|
|
|
|
|
rm -rf %{buildroot}
|
|
|
|
|
mkdir -p %{buildroot}/%{_libdir}
|
|
|
|
|
make PREFIX=%{_prefix} LIBDIR=%{_libdir} INSTALLROOT=%{buildroot} install
|
|
|
|
|
|
|
|
|
|
# there's some stuff that's not really meant to be shipped yet
|
2012-06-21 14:55:08 +00:00
|
|
|
rm -rf %{buildroot}/boot %{buildroot}/usr/include %{buildroot}%{_libdir}
|
2012-08-08 13:39:35 +00:00
|
|
|
mv rh-test-certs/etc/pki/pesign/* %{buildroot}/etc/pki/pesign/
|
2012-06-21 13:33:06 +00:00
|
|
|
|
|
|
|
|
%clean
|
|
|
|
|
rm -rf %{buildroot}
|
|
|
|
|
|
|
|
|
|
%files
|
|
|
|
|
%defattr(-,root,root,-)
|
|
|
|
|
%doc README TODO COPYING
|
|
|
|
|
%{_bindir}/pesign
|
|
|
|
|
%{_sysconfdir}/popt.d/pesign.popt
|
2012-08-13 19:42:07 +00:00
|
|
|
%{_sysconfdir}/rpm/macros.pesign
|
2012-06-22 20:18:39 +00:00
|
|
|
%{_mandir}/man*/*
|
2012-08-13 19:42:07 +00:00
|
|
|
%attr(0755,root,root) /etc/pki/pesign
|
2012-08-08 15:25:42 +00:00
|
|
|
%attr(0644,root,root) /etc/pki/pesign/*
|
2012-06-21 13:33:06 +00:00
|
|
|
|
|
|
|
|
%changelog
|
2012-08-14 18:31:05 +00:00
|
|
|
* Tue Aug 14 2012 Peter Jones <pjones@redhat.com> - 0.10-2
|
|
|
|
|
- Make macros.pesign more reliable
|
|
|
|
|
|
2012-08-13 19:42:07 +00:00
|
|
|
* Mon Aug 13 2012 Peter Jones <pjones@redhat.com> - 0.10-1
|
|
|
|
|
- Update to 0.10
|
|
|
|
|
- Include rpm macros to support easy custom signing of signed packages.
|
|
|
|
|
|
2012-08-10 20:42:18 +00:00
|
|
|
* Fri Aug 10 2012 Peter Jones <pjones@redhat.com> - 0.9-1
|
|
|
|
|
- Update to 0.9
|
|
|
|
|
- Bug fix from Gary Ching-Pang Lin
|
|
|
|
|
- Support NSS Token selection for use with smart cards.
|
|
|
|
|
|
2012-08-08 15:25:42 +00:00
|
|
|
* Wed Aug 08 2012 Peter Jones <pjones@redhat.com> - 0.8-1
|
|
|
|
|
- Update to 0.8
|
|
|
|
|
- Don't open the db read-write
|
|
|
|
|
- Fix permissions on keystore (everybody can sign with test keys)
|
|
|
|
|
|
2012-08-08 13:39:35 +00:00
|
|
|
* Wed Aug 08 2012 Peter Jones <pjones@redhat.com> - 0.7-2
|
|
|
|
|
- Include test keys.
|
|
|
|
|
|
2012-07-30 19:45:20 +00:00
|
|
|
* Mon Jul 30 2012 Peter Jones <pjones@redhat.com> - 0.7-1
|
|
|
|
|
- Update to 0.7
|
|
|
|
|
- Better fix for MS compatibility.
|
|
|
|
|
|
2012-07-30 19:04:01 +00:00
|
|
|
* Mon Jul 30 2012 Peter Jones <pjones@redhat.com> - 0.6-1
|
|
|
|
|
- Update to 0.6
|
|
|
|
|
- Bug-for-bug compatibility with signtool.exe .
|
|
|
|
|
|
2012-07-20 23:04:24 +00:00
|
|
|
* Fri Jul 20 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.5-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
|
|
|
|
|
|
2012-07-11 19:06:04 +00:00
|
|
|
* Wed Jul 11 2012 Peter Jones <pjones@redhat.com> - 0.5-1
|
|
|
|
|
- Rebase to 0.5
|
|
|
|
|
- Do more rigorous bounds checking when hashing a new binary.
|
|
|
|
|
|
2012-07-10 20:04:33 +00:00
|
|
|
* Tue Jul 10 2012 Peter Jones <pjones@redhat.com> - 0.3-2
|
|
|
|
|
- Rebase to 0.4
|
|
|
|
|
|
2012-06-22 20:18:39 +00:00
|
|
|
* Fri Jun 22 2012 Peter Jones <pjones@redhat.com> - 0.3-2
|
|
|
|
|
- Move man page to a more reasonable place.
|
|
|
|
|
|
2012-06-22 15:39:18 +00:00
|
|
|
* Fri Jun 22 2012 Peter Jones <pjones@redhat.com> - 0.3-1
|
|
|
|
|
- Update to upstream's 0.3 .
|
|
|
|
|
|
2012-06-21 15:04:53 +00:00
|
|
|
* Thu Jun 21 2012 Peter Jones <pjones@redhat.com> - 0.2-4
|
|
|
|
|
- Do not build with smp flags.
|
|
|
|
|
|
2012-06-21 14:55:08 +00:00
|
|
|
* Thu Jun 21 2012 Peter Jones <pjones@redhat.com> - 0.2-3
|
|
|
|
|
- Make it build on i686, though it's unclear it'll ever be necessary.
|
|
|
|
|
|
2012-06-21 13:46:54 +00:00
|
|
|
* Thu Jun 21 2012 Peter Jones <pjones@redhat.com> - 0.2-2
|
|
|
|
|
- Fix compile problem with f18's compiler.
|
|
|
|
|
|
2012-06-21 13:33:06 +00:00
|
|
|
* Thu Jun 21 2012 Peter Jones <pjones@redhat.com> - 0.2-1
|
|
|
|
|
- Fix some rpmlint complaints nirik pointed out
|
|
|
|
|
- Add popt-devel build dep
|
|
|
|
|
|
|
|
|
|
* Fri Jun 15 2012 Peter Jones <pjones@redhat.com> - 0.1-1
|
|
|
|
|
- First version of SRPM.
|
