From 3a1cdbfd4ca5196367fded2dbbb0101193f6889c Mon Sep 17 00:00:00 2001 From: Steve McIntyre <93sam@debian.org> Date: Wed, 8 May 2019 16:49:11 +0100 Subject: Use --padding when calling pesign to generate hashes for the dbx list, as recommended by Peter Jones. No actual changes needed in our list of hashes at this point - they work out the same either way. --- debian/changelog | 10 ++++++++++ debian/debian-dbx.hashes | 2 +- debian/ubuntu-dbx.hashes | 2 +- 3 files changed, 12 insertions(+), 2 deletions(-) (limited to 'debian') diff --git a/debian/changelog b/debian/changelog index 1db14b94..93512b93 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,13 @@ +shim (15+1533136590.3beb971-8) UNRELEASED; urgency=medium + + [ Steve McIntyre ] + * Use --padding when calling pesign to generate hashes for the dbx + list, as recommended by Peter Jones. No actual changes needed in + our list of hashes at this point - they work out the same either + way. + + -- Steve McIntyre <93sam@debian.org> Wed, 08 May 2019 02:05:01 +0100 + shim (15+1533136590.3beb971-7) unstable; urgency=medium [ Ansgar Burchardt ] diff --git a/debian/debian-dbx.hashes b/debian/debian-dbx.hashes index e6e13c38..1e9d07d4 100644 --- a/debian/debian-dbx.hashes +++ b/debian/debian-dbx.hashes @@ -9,7 +9,7 @@ # # The hashes are generated using: # -# pesign --hash -in +# pesign --hash --padding -in # # on *either* the signed or unsigned binary, pesign doesn't care # which. diff --git a/debian/ubuntu-dbx.hashes b/debian/ubuntu-dbx.hashes index b33fc101..0f773df8 100644 --- a/debian/ubuntu-dbx.hashes +++ b/debian/ubuntu-dbx.hashes @@ -9,7 +9,7 @@ # # The hashes are generated using: # -# pesign --hash -in +# pesign --hash --padding -in # # on *either* the signed or unsigned binary, pesign doesn't care # which. -- cgit v1.2.3