testing/sbsigntool: new aport

Secure Boot signing tools https://git.kernel.org/pub/scm/linux/kernel/git/jejb/sbsigntools.git/
2026-05-04 20:06:43 +02:00 · 2017-10-17 13:54:49 +03:00 · 2017-10-17 13:54:49 +03:00 · baf678f978
commit baf678f978
parent dc44226e42
2 changed files with 337 additions and 0 deletions
--- a/testing/sbsigntool/0001-fix-autogen.patch
+++ b/testing/sbsigntool/0001-fix-autogen.patch
@ -0,0 +1,276 @@
+From c8c7e1ba97d15433247bcf87e88485cf7c6b7cc3 Mon Sep 17 00:00:00 2001
+From: James Bottomley <JBottomley@Parallels.com>
+Date: Tue, 26 Jun 2012 09:49:05 +0100
+Subject: sbsigntools: fix autogen.sh for build service
+
+---
+ AUTHORS    |   4 ++
+ ChangeLog  | 224 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ autogen.sh |  10 ---
+ 3 files changed, 228 insertions(+), 10 deletions(-)
+ create mode 100644 AUTHORS
+ create mode 100644 ChangeLog
+
+diff --git a/AUTHORS b/AUTHORS
+new file mode 100644
+index 0000000..3eaa355
+--- /dev/null
+++ b/AUTHORS
+@@ -0,0 +1,4 @@
+	Adam Conrad
+	Ivan Hu
+	James Bottomley
+	Jeremy Kerr
+diff --git a/ChangeLog b/ChangeLog
+new file mode 100644
+index 0000000..d5d5ea6
+--- /dev/null
+++ b/ChangeLog
+@@ -0,0 +1,224 @@
+2012-06-20 c07dfb9 Ivan Hu <ivan.hu@canonical.com>
+
+  * configure: Add check for bfh.h
+
+2012-06-19 5e07c4e Ivan Hu <ivan.hu@canonical.com>
+
+  * tests: Add a test to check invalid PKCS7 signature attaching
+
+2012-06-19 bfb778e Ivan Hu <ivan.hu@canonical.com>
+
+  * sbattach: Check that attached signatures are valid PKCS7 data
+
+2012-06-14 bf6df84 Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * sbverify: Use a variable for image filename
+
+2012-06-13 9b7f7fb Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * image: Unconditionally parse PE/COFF data
+
+2012-06-13 128f1c1 Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * sbverify: Check for failed image load
+
+2012-06-13 b48e256 Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * tests: Add tests for missing image, cert & key files
+
+2012-06-13 0af5e01 Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * tests: Execute tests in a clean (temporary) directory
+
+2012-06-13 8716e88 Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * tests: Use COMPILE.S for assembing test object
+
+2012-06-13 807f0e6 Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * Version 0.2
+
+2012-06-13 7c2d8bb Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * docs: Add simple manpage for sbattach
+
+2012-06-13 deb9211 Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * automake: Clean generated man files
+
+2012-06-13 3cde1e4 Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * tests: Add a few simple tests
+
+2012-06-13 cc881c2 Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * Remove unused test.c file
+
+2012-06-12 4c79e3a Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * sbattach: Add too to manage detached signatures
+
+2012-06-12 564f5bc Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * image: Add facility to write unsigned images
+
+2012-06-11 a07b8d2 Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * sbsign,sbverify: Update getopt_long optstrings
+
+2012-06-11 5836038 Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * sbverify: Add support for detached signatures
+
+2012-06-11 b8a7d51 Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * sbverify: Split image signature table reading to separate function
+
+2012-06-11 e9f438c Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * Fix warnings from added -W flags
+
+2012-06-11 f19e8bb Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * automake: Add -Wall -Wextra CFLAGS
+
+2012-06-11 af4f088 Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * sbsign: Add --detached option to create detached PKCS7 signatures
+
+2012-06-11 0c9fbd2 Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * sbsign: fix flag for verbose operation
+
+2012-06-11 3673db1 Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * docs: Fix manpage creation
+
+2012-05-29 9b2f3a7 Adam Conrad <adconrad@0c3.net>
+
+  * autogen.sh: Fix ccan_module assignment
+
+2012-05-28 3fb0f00 Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * image: use read_write_all from ccan
+
+2012-05-28 f1112b4 Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * image: Fix format specifier for 32-bit builds
+
+2012-05-24 d5e634c Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * autoconfiscate
+
+2012-05-23 82f8c30 Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * docs: Add initial manpages
+
+2012-05-23 c14efcb Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * sbsign,sbverify: help2man-ize usage output
+
+2012-05-23 98a4f10 Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * Makefile: Add dist targets
+
+2012-05-22 1b2b5c6 Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * ccan: Add ccan import logic
+
+2012-05-15 6ff68e5 Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * Move ccan submodule
+
+2012-05-15 9a08e25 Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * Remove unused header
+
+2012-05-14 bc618c5 Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * Remove pkcs7-simple test file
+
+2012-05-14 9ac930e Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * Makefile: add install target
+
+2012-05-14 a1b270f Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * Makefile: Comment components
+
+2012-05-14 c67b82a Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * sbverify: clean up openssl init
+
+2012-05-14 c499763 Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * sbverify: add check for invalid PKCS7 data
+
+2012-05-14 74eb766 Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * sbverify: Add certificate chain verification
+
+2012-05-12 e111127 Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * verify: move idc-related parsing to idc.c
+
+2012-05-12 46cf6a6 Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * sbsign: fix incorrect check for certificate load
+
+2012-05-12 57d9f0c Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * image: reformat gap warnings
+
+2012-05-12 ab05bec Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * image: add cert table to image size
+
+2012-05-12 e1fec08 Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * sbverify: Add check for image hash
+
+2012-05-12 fefe97c Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * sbverify: check for presence of signature table
+
+2012-05-12 b73f723 Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * Makefile: add $(tools) var
+
+2012-05-12 55b1940 Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * sbsigntool -> sbsign
+
+2012-05-12 a183de9 Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * image: open output file with O_TRUNC
+
+2012-04-24 04b70fc Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * sbsigntooL: expand usage info
+
+2012-04-24 9826a43 Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * Add GPLv3 text in COPYING
+
+2012-04-24 906654e Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * coff: remove unneeded coff includes
+
+2012-04-23 9d3c8b5 Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * Add copyright comments
+
+2012-04-23 e019eec Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * image: warn about potential checksum differences
+
+2012-04-23 01e33cd Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * idc: allocate using the image context
+
+2012-04-23 acd8c0a Jeremy Kerr <jeremy.kerr@canonical.com>
+
+  * Initial commit
+
+diff --git a/autogen.sh b/autogen.sh
+index 32ea6f6..117835b 100755
+--- a/autogen.sh
+++ b/autogen.sh
+@@ -16,16 +16,6 @@ then
+ 		--build-type=automake lib/ccan $ccan_modules
+ fi
+ 
+-# Create generatable docs from git
+-(
+-	echo "Authors of sbsigntool:"
+-	echo
+-	git log --format='%an' | sort -u | sed 's,^,\t,'
+-) > AUTHORS
+-
+-# Generate simple ChangeLog
+-git log --date=short --format='%ad %t %an <%ae>%n%n  * %s%n' > ChangeLog
+-
+ # automagic
+ aclocal
+ autoheader
+-- 
+2.1.2
--- a/testing/sbsigntool/APKBUILD
+++ b/testing/sbsigntool/APKBUILD
@ -0,0 +1,61 @@
+# Contributor: Tero Hilpinen <tero.hilpinen@symbio.com>
+# Contributor: Timo Teräs <timo.teras@iki.fi>
+# Maintainer: Timo Teräs <timo.teras@iki.fi>
+
+pkgname=sbsigntool
+pkgver=0.8
+pkgrel=0
+_ccancommit=261b10869ddbb4ac650ef8886c5052b1a8dbeecd
+pkgdesc="Secure Boot signing tools"
+url="https://git.kernel.org/pub/scm/linux/kernel/git/jejb/sbsigntools.git/"
+arch="x86_64"
+license="GPL"
+depends=""
+makedepends="autoconf automake bash binutils-dev gnu-efi-dev help2man libressl-dev util-linux-dev"
+options="!check"	# testsuite is not functional
+install=""
+subpackages="$pkgname-doc"
+source="https://git.kernel.org/pub/scm/linux/kernel/git/jejb/sbsigntools.git/snapshot/sbsigntools-$pkgver.tar.gz
+	ccan-$_ccancommit.tar.gz::http://git.ozlabs.org/?p=ccan;a=snapshot;h=$_ccancommit;sf=tgz
+	0001-fix-autogen.patch
+	"
+builddir="$srcdir/sbsigntools-$pkgver"
+
+prepare() {
+	default_prepare
+	cd "$builddir"
+	rm -rf "$builddir"/lib/ccan.git "$builddir"/lib/ccan
+	ln -s ../../ccan-$(echo $_ccancommit | cut -b -7) "$builddir"/lib/ccan.git
+
+	# fix ccan for musl and to work outside git checkout
+	sed -i -e 's,sys/unistd.h,unistd.h,g' "$builddir"/lib/ccan.git/ccan/opt/usage.c
+	sed -i -e 's,--git-only "$module_dir","$module_srcdir",g' "$builddir"/lib/ccan.git/tools/create-ccan-tree
+
+	# autogen.sh is missing 'list', instantiate ccan here
+        lib/ccan.git/tools/create-ccan-tree \
+                --build-type=automake lib/ccan \
+		"talloc read_write_all build_assert array_size endian list"
+
+	./autogen.sh
+}
+
+build() {
+	cd "$builddir"
+	./configure \
+		--build=$CBUILD \
+		--host=$CHOST \
+		--prefix=/usr \
+		--sysconfdir=/etc \
+		--mandir=/usr/share/man \
+		--localstatedir=/var
+	make
+}
+
+package() {
+	cd "$builddir"
+	make DESTDIR="$pkgdir" install
+}
+
+sha512sums="b6ab1e1e8aca6be7a560156b80b643e697467f5a45bd29dc30dba12b445755a938bcc803e7199eb9bf0fa033d31d2392360116377f9ac939c1c939e5d95023e4  sbsigntools-0.8.tar.gz
+730c70cf88cfbf23796053aa689e419f433285c7fec7a6f4b5cf13efead12f99752db70790ff321da374180e3178aed105ce5bd3f66daadf545ef9b5bb02f6cd  ccan-261b10869ddbb4ac650ef8886c5052b1a8dbeecd.tar.gz
+9bf0a12c7735d09e1562ad901676a7ca9572265abee88580d4f830723a28423062d5b77fe02f21414884aeb046e84cf09da599754eafaad660c5938469c460a9  0001-fix-autogen.patch"