File obs-signd.changes of Package obs-signd
-------------------------------------------------------------------
Fri Jul 7 15:29:31 CEST 2023 - mls@suse.de
- update to version 2.8.3
* support aes128 cipher in decrypt_cipher_with_gcrypt
* add tls support
-------------------------------------------------------------------
Mon Apr 17 12:57:44 UTC 2023 - Marcus Rueckert <mrueckert@suse.de>
- enhance the directory structure with the new paths from mls
document it in the README.runas-user
-------------------------------------------------------------------
Mon Apr 17 11:12:56 UTC 2023 - Marcus Rueckert <mrueckert@suse.de>
- provide a runas-user sub package:
- Add sysuser support for obs-signd user
- Add tmpfiles.d file to create /run/signd
- provide data dirs:
/srv/obs-signd
/srv/obs-signd/gnupg
/srv/obs-signd/gnupg/openpgp-revocs.d
/srv/obs-signd/gnupg/private-keys-v1.d
/srv/obs-signd/phrases
/srv/obs-signd/keycache
-------------------------------------------------------------------
Mon Apr 17 10:57:13 UTC 2023 - Marcus Rueckert <mrueckert@suse.de>
- unit file does not need execute bit
-------------------------------------------------------------------
Fri Apr 14 14:04:29 CEST 2023 - mls@suse.de
- update to version 2.8.1
* add privileged log command
* fix sign -t no longer working when aliases are defined
-------------------------------------------------------------------
Mon Mar 27 14:13:39 CEST 2023 - mls@suse.de
- update to version 2.8.0
* support of symmetric encryption of project keys
* support project key decryption with libgcrypt
* support bulk cpio signing
* support privileged operations
-------------------------------------------------------------------
Fri Feb 10 10:33:32 CET 2023 - mls@suse.de
- update to version 2.7.3
* support ecdsa@nistp256 and ecdsa@nistp384
* drop obsolete certgen server side support
* add use-unprivileged-ports config option
* increase keygen request buffer size
-------------------------------------------------------------------
Mon Jan 9 10:05:15 CET 2023 - mls@suse.de
- update to version 2.7.2
* fix dummydeflate not correctly working with big input
-------------------------------------------------------------------
Thu Nov 17 10:44:50 CET 2022 - mls@suse.de
- update to version 2.7.1
* support kernel module signing
* support PE file signing
* support pkcs7/cms signing
* support sha512 hashes
-------------------------------------------------------------------
Thu Nov 3 13:25:09 CET 2022 - ro@suse.de
- drop the no longer required dependency on gpg2_signd_support
-------------------------------------------------------------------
Fri Jul 29 12:58:47 CEST 2022 - mls@suse.de
- update to version 2.6.1
* support directly talking to the gpg agent
* support ed25519 keygen
-------------------------------------------------------------------
Wed Jul 6 13:34:39 CEST 2022 - mls@suse.de
- update to version 2.6.0
* support signature creation with libgcrypt
* support sha512
-------------------------------------------------------------------
Mon Jul 26 13:17:04 UTC 2021 - Frank Schreiner <frank@fs.samaxi.de>
- update to version 2.5.10
* optional systemd dependency to start after obsapisetup.service
-------------------------------------------------------------------
Mon Jul 26 13:14:37 UTC 2021 - Frank Schreiner <frank@fs.samaxi.de>
- update to version 2.5.9
* Cleanup for tempdirs
* Require user(obsrun) in spec file
* fix references to var/run to silence systemd complaints
-------------------------------------------------------------------
Tue May 4 13:38:16 CEST 2021 - mls@suse.de
- update to version 2.5.8
* fix unsigned char -> signed int promotion
-------------------------------------------------------------------
Mon Apr 19 11:44:05 CEST 2021 - mls@suse.de
- update to version 2.5.7
* fix signing of rpms with a size greater than 4GByte
* keyextend: make sure that the pubkey does not come from the
future
-------------------------------------------------------------------
Wed Mar 11 17:31:56 CET 2020 - ro@suse.de
- update to version 2.5.6
* fix sysconfig file handling
-------------------------------------------------------------------
Mon Mar 9 15:34:30 UTC 2020 - Frank Schreiner <frank@fs.samaxi.de>
- update to version 2.5.5
* final switch to systemd
-------------------------------------------------------------------
Tue Sep 3 06:05:32 UTC 2019 - Adrian Schröter <adrian@suse.de>
- update to version 2.5.4:
* fix handling of secret key when protected by a passphrase
-------------------------------------------------------------------
Tue Jul 2 15:23:31 UTC 2019 - Adrian Schröter <adrian@suse.de>
- update to version 2.5.3
* support containerization
-------------------------------------------------------------------
Fri Nov 9 09:32:53 UTC 2018 - Frank Schreiner <FSchreiner@suse.com>
- update to version 2.5.2
* fix privsign with expired key
-------------------------------------------------------------------
Fri Feb 9 11:48:14 CET 2018 - ro@suse.de
- use fillupdir macro
- use macro for buildroot
-------------------------------------------------------------------
Mon Nov 6 12:55:14 CET 2017 - mls@suse.de
- update to version 2.4.2
* support --pkcs1pss option
-------------------------------------------------------------------
Mon Mar 6 09:52:35 UTC 2017 - fschreiner@suse.com
- update to version 2.4.1
* fix dependency cycle in init script
-------------------------------------------------------------------
Wed Mar 1 13:44:38 UTC 2017 - adrian@suse.de
- update to version 2.4.0
* support signing of AppImage files
-------------------------------------------------------------------
Wed Jul 6 16:01:37 CEST 2016 - mls@suse.de
- update to version 2.3.0
* add cert cn/email truncation
* allow 4096 bits keylength
* improved documentation
-------------------------------------------------------------------
Thu Mar 21 12:00:31 CET 2013 - mls@suse.de
- update to version 2.2.1
* new -S output format
-------------------------------------------------------------------
Wed Mar 20 14:01:47 UTC 2013 - adrian@suse.de
- update to version 2.2.0
* complete support for secure boot signing
-------------------------------------------------------------------
Thu Jan 17 15:49:07 CET 2013 - mls@suse.de
- update to 2.1.5.1 to support -O and rsa keys with -p
-------------------------------------------------------------------
Mon Aug 13 14:28:34 CEST 2012 - mls@suse.de
- update to 2.1.5
implement -D option to create raw detchaed signatures
-------------------------------------------------------------------
Fri Jul 6 12:15:39 UTC 2012 - adrian@suse.de
- fix build for 12.2
-------------------------------------------------------------------
Fri May 11 14:47:14 UTC 2012 - coolo@suse.com
- update to 2.1.4
* frontport -S <chksumfile> option to speed up repository generation
-------------------------------------------------------------------
Mon Sep 19 11:31:34 UTC 2011 - adrian@suse.de
- update to version 2.1.3
* Fix re-signing failure (#713013)
-------------------------------------------------------------------
Tue Jul 27 08:13:18 UTC 2010 - adrian@suse.de
- update to version 2.1.2
* obsrun group is allowed to run sign by default
* support of gpg key expiration date extension call
-------------------------------------------------------------------
Fri Jun 25 13:28:20 UTC 2010 - adrian@suse.de
- update to version 2.0.81
* runlevel script fixes
-------------------------------------------------------------------
Mon Jun 7 09:41:43 UTC 2010 - adrian@suse.de
- ensure to use the correct version of gpg2
-------------------------------------------------------------------
Thu Feb 18 11:43:09 UTC 2010 - adrian@suse.de
- package files with correct default permissions
(/usr/bin/sign is 4750 now => request to security team in #580857)
-------------------------------------------------------------------
Fri Dec 11 07:55:03 UTC 2009 - adrian@suse.de
- initial own package, calling it version 1.7.0
(needed for obs-server 1.7)