On Tue, Jun 04, 2019 at 08:20:50AM -0400, Neal Gompa wrote: > On Tue, Jun 4, 2019 at 8:16 AM Florian Weimer <fweimer@xxxxxxxxxx> wrote: > > > > * Marek Marczykowski-Górecki: > > > > > I'd like to request unretire osslsigncode[1]. Originally it was retired > > > because of being abandoned upstream, but now there is an actively > > > maintained fork[2] with major release half a year ago and last commit > > > less than 2 months ago. As I understand[3], original maintainer of > > > Fedora osslsigncode package is not interested in maintaining it anymore. > > > I can take it from there, but that would be my first package in Fedora > > > (although I do maintain RPM packages elsewhere). I have already created > > > scratch build of it at [4]. > > > > How does it differ from pesign? Is it the Java support? > > > > My understanding is that pesign does not do signatures for arbitrary > containers, only PE binaries. I'm also uncertain if pesign does > Authenticode style signing. I'm not sure if Secure Boot signatures are > the same kind of signatures. > > osslsigncode is a reimplementation of Windows' signtool that can sign > Windows installers, PE binaries, and CAB files for driver packages. > It's required for shipping signed versions of Fedora Media Writer and > the VirtIO drivers for Windows. Yes, exactly. Here drivers are my main concern. To be honest, I'm not sure if pesign wouldn't be enough to sign .sys and .dll files. In theory those should be also timestamped (which is not supported by pesign), but maybe that's only theory? Anyway, as Neal said, there are many more cases not supported by pesign. -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing?
Attachment:
signature.asc
Description: PGP signature
_______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx
