pesign-116-8.1 RPM for i586

From OpenSuSE Ports Tumbleweed for i586

Signing tool for PE-COFF binaries. It is vaguely compliant
with the PE and Authenticode specifications.

Provides

• pesign
• config(pesign)
• group(pesign)
• pesign(x86-32)
• rpm_macro(_pesign)
• rpm_macro(_pesign_client)
• rpm_macro(pesign)
• user(pesign)

Requires

• /bin/bash
• /bin/sh
• config(pesign) = 116-8.1
• group(pesign)
• libc.so.6
• libc.so.6(GLIBC_2.0)
• libc.so.6(GLIBC_2.1)
• libc.so.6(GLIBC_2.1.1)
• libc.so.6(GLIBC_2.1.3)
• libc.so.6(GLIBC_2.16)
• libc.so.6(GLIBC_2.17)
• libc.so.6(GLIBC_2.26)
• libc.so.6(GLIBC_2.27)
• libc.so.6(GLIBC_2.28)
• libc.so.6(GLIBC_2.3.4)
• libc.so.6(GLIBC_2.33)
• libc.so.6(GLIBC_2.34)
• libc.so.6(GLIBC_2.38)
• libc.so.6(GLIBC_2.4)
• libc.so.6(GLIBC_2.8)
• libefivar.so.1
• libefivar.so.1(libefivar.so.0)
• libnspr4.so
• libnss3.so
• libnss3.so(NSS_3.10)
• libnss3.so(NSS_3.11.7)
• libnss3.so(NSS_3.12)
• libnss3.so(NSS_3.2)
• libnss3.so(NSS_3.3)
• libnss3.so(NSS_3.4)
• libnss3.so(NSS_3.5)
• libnss3.so(NSS_3.6)
• libnss3.so(NSS_3.9)
• libpopt.so.0
• libpopt.so.0(LIBPOPT_0)
• libsmime3.so
• libsmime3.so(NSS_3.15)
• libsmime3.so(NSS_3.2)
• libsmime3.so(NSS_3.3)
• libsmime3.so(NSS_3.4)
• libuuid.so.1
• libuuid.so.1(UUID_1.0)
• mozilla-nss-tools
• rpmlib(CompressedFileNames) <= 3.0.4-1
• rpmlib(FileDigests) <= 4.6.0-1
• rpmlib(PayloadFilesHavePrefix) <= 4.0-1
• rpmlib(PayloadIsZstd) <= 5.4.18-1
• sysuser-shadow >= 3.2
• user(pesign)

License

GPL-3.0-or-later

Changelog

* Mon Mar 03 2025 Gary Ching-Pang Lin <glin@suse.com>
  - Add pesign-bsc1238023-initialize-pwdata.patch to fall back to
    password prompt correctly (bsc#1238023)
* Tue Feb 25 2025 JS <obs.coke518@passinbox.com>
  - Enable build on loongarch64
* Tue Feb 18 2025 Luca Boccassi <bluca@debian.org>
  - Add Requires: mozilla-nss-tools, pesign needs it at runtime to
    sign/attach signatures
* Wed Mar 20 2024 Gary Ching-Pang Lin <glin@suse.com>
  - Add pesign-bsc1221694-fix-reversed-calloc-arguments.patch to
    fix the parameters for calloc() (bsc#1221694)
* Thu Nov 02 2023 Gary Ching-Pang Lin <glin@suse.com>
  - Add the Provides tag for the files moved to pesign-systemd
* Wed Nov 01 2023 Gary Ching-Pang Lin <glin@suse.com>
  - Move rcpesign and %{_tmpfilesdir}/pesign.conf to pesign-systemd
* Fri Oct 06 2023 Dan Čermák <dcermak@suse.com>
  - Create pesign-systemd subpackage to remove systemd dependency
    (jsc#PED-7256)
* Wed Feb 22 2023 Gary Ching-Pang Lin <glin@suse.com>
  - Update to 116
    + daemon: remove always-true comparison
    + pesum - add a new tool to the shed
    + Fix building signed kernels on setups other than koji
    + Add -D_GLIBCXX_ASSERTIONS to CPPFLAGS
    + macros.pesign: handle centos like rhel with --rhelver
    + Detect the presence of rpm-sign when checking for "rhel"-ness
    + Fix typo in efikeygen command
    + pesigcheck: Fix crash on digest match
    + cms: store digest as pointer instead of index
    + Fix mandoc invocation to not produce garbage
    + Password fixes
    + Re-work CMS's selected_digest again...
    + src/certs/make-certs: delete the duplicate codes
    + Free resources if certification cannot be found
    + macros: drop %{_pesign_args}
    + Fix two bugs from package building
    + Fix bad free of cms data (DoS only)
    + Send pesign stdout/err to systemd journal
    + Add missing Install section
    + Add default packages for pkg-config
    + Short delay to ensure /run/pesign/socket exists
    + Resolve crash when signature that is removed is not the end of
      the list
    + Enhance error diagnostics about version mismatch
    + Upstream all Fedora changes
    + Add some hardening options to build
    + Add code of conduct
    + Fix build on gcc 12 and non-Fedora
  - Add BuildRequires efivar-devel >= 38 for efisec.h
    + efisiglist is replaced by efisecdb in efivar 38
  - Add BuildRequires mandoc to generate the manpages
  - Replace pesign-privkey_unneeded.diff with
    pesign-skip-auth-on-friendly-slot.patch to avoid the unnecessary
    authentication
  - Add pesign-fix-cert-match-check.patch to fix the subject name
    matching
  - Add pesign-fix-efikeygen-segfault.patch to fix the potential
    crash when executing efikeygen
  - Add pesign-bsc1202933-Remove-pesign-authorize.patch to remove
    pesign-authorize completely (bsc#1202933)
  - Refresh patches
    + harden_pesign.service.patch
    + pesign-boo1143063-remove-var-tracking.patch
    + pesign-boo1185663-set-rpmmacrodir.patch
    + pesign-fix-authvar-write-loop.patch
    + pesign-suse-build.patch
    + pesign-bsc1202933-Make-etc-pki-pesign-writeable.patch
  - Remove upstreamed/unnecessary patches
    + pesign-boo1158197-fix-pesigncheck-gcc10.patch
    + pesign-efikeygen-Fix-the-build-with-nss-3.44.patch
    + pesign-run.patch
    + pesign-bsc1202933-Use-normal-file-permissions-instead-of-ACLs.patch
* Tue Feb 07 2023 Gary Ching-Pang Lin <glin@suse.com>
  - Add pesign-bsc1202933-Use-normal-file-permissions-instead-of-ACLs.patch
    to use the normal file permissions in pesign-authorize to avoid
    the potential security issue (bsc#1202933, CVE-2022-3560)
  - Set the libexecdir path for "make" to fix the path to
    pesign-authorize in pesign.service (bsc#1202933)
  - Add pesign-bsc1202933-Make-etc-pki-pesign-writeable.patch to make
    the default NSS datebase writeable (bsc#1202933)
* Thu Nov 11 2021 Andreas Schwab <schwab@suse.de>
  - Enable build on riscv64

Files

/etc/pesign
/etc/pesign/groups
/etc/pesign/users
/etc/pki
/etc/pki/pesign
/etc/popt.d
/etc/popt.d/pesign.popt
/run/pesign
/usr/bin/authvar
/usr/bin/efikeygen
/usr/bin/pesigcheck
/usr/bin/pesign
/usr/bin/pesign-client
/usr/bin/pesum
/usr/lib/rpm/macros.d/macros.pesign
/usr/lib/sysusers.d/pesign.conf
/usr/libexec/pesign
/usr/libexec/pesign/pesign-rpmbuild-helper
/usr/share/licenses/pesign
/usr/share/licenses/pesign/COPYING
/usr/share/man/man1/authvar.1.gz
/usr/share/man/man1/efikeygen.1.gz
/usr/share/man/man1/pesigcheck.1.gz
/usr/share/man/man1/pesign-client.1.gz
/usr/share/man/man1/pesign.1.gz
/var/lib/pesign

Generated by rpm2html 1.8.1

Fabrice Bellet, Thu Oct 23 22:29:00 2025