baserev update by copy to link target

• Files Changed
• Browse Source

- update to 2.7.0
  * fixed signing CAB files (by Michael Brown)
  * fixed handling of unsupported commands (by Maxim Bagryantsev)
  * fixed writing DIFAT sectors
  * added APPX support (by Maciej Panek and Małgorzata Olszówka)
  * added a built-in TSA response generation (-TSA-certs, -TSA-key
    and -TSA-time options)
  * added verification of CRLs specified in the signing certificate
  * added MSI DIFAT sectors support (by Max Bagryantsev)
  * added the "-h" option to set the cryptographic hash function for the
    "attach -signature" and "add" commands
  * set the default hash function to "sha256"
  * added the "attach-signature" option to compute and compare the leaf
    certificate hash for the "add" command
  * renamed the "-st" option "-time"
  * updated the "-time" option to also set explicit verification time
  * added the "-ignore-timestamp" option
  * removed the "-timestamp-expiration" option
  * numerous bugfixes
  * documentation updates
- build system changed to cmake
- use source code tag instead of release artifact for source
- updated URL
- removed gpg check, signature no longer available from upstream

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- update to 2.3.0:
  * This release fixes several critical memory corruption vulnerabilities.
    A malicious attacker could create a file, which, when processed with
    osslsigncode, triggers arbitrary code execution. Any previous version
    of osslsigncode should be immediately upgraded if the tool is used for
    processing of untrusted files.
  * fixed non-interactive PVK (MSBLOB) key decryption
  * added a bash completion script
  * added CA bundle path auto-detection
  * CAT files support (thanks to James McKenzie)
  * MSI support rewritten without libgsf dependency, which allows
  * for handling of all the needed MSI metadata, such as dates
  * "-untrusted" option renamed to "-TSA-CAfile"
  * "-CRLuntrusted" option renamed to "-TSA-CRLfile"
  * numerous bug fixes and improvements
  * certificate chain verification support
  * timestamp verification support
  * CRL verification support ("-CRLfile" option)
  * improved CAB signature support
  * nested signatures support
  * user-specified signing time ("-st" option) by vszakats
  * added more tests
  * fixed numerous bugs
  * dropped OpenSSL 1.1.0 support 
  * orphaned project adopted by Michał Trojnara
  * ported to OpenSSL 1.1.x
  * ported to SoftHSM2
  * add support for pkcs11-based hardware tokens
  * improved error reporting of timestamping errors
- drop 0001-Make-code-work-with-OpenSSL-1.1.patch (obsolete)

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- license is now GPL 3.0

• Files Changed
• Browse Source

- 0001-Make-code-work-with-OpenSSL-1.1.patch: Build against 
  openssl 1.1.

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Adapt BuildRequires to libopenssl-1_0_0-devel for SLE15 / TW.

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Add libgsf-devel dependency to enable MSI support.

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

Update

• Files Changed
• Browse Source

initialized devel package after accepting 149697

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

use sourceurl

• Files Changed
• Browse Source

new package, needed to sign .cab file (and submit them to UEFI Signing Service)

• Browse Source