| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: pcr-oracle | Distribution: SUSE Linux 16 |
| Version: 0.5.7 | Vendor: SUSE LLC <https://www.suse.com/> |
| Release: 160000.2.2 | Build date: Thu May 29 09:31:13 2025 |
| Group: System/Boot | Build host: reproducible |
| Size: 217499 | Source RPM: pcr-oracle-0.5.7-160000.2.2.src.rpm |
| Packager: https://www.suse.com/ | |
| Url: https://github.com/openSUSE/pcr-oracle | |
| Summary: Predict TPM PCR values | |
This utility tries to predict the values of the TPM's Platform Configuration Registers following an update of system components like shim, grub, etc.
GPL-2.0-or-later
* Thu May 29 2025 glin@suse.com
- Update to 0.5.7
+ Support ppc64 events
+ Fix the string comparison for the alternative event
(bsc#1241957)
- Add the new BuildRequires: libelf-devel and libfdisk-devel
* Tue May 13 2025 glin@suse.com
- Update to 0.5.6
+ rsa: adopt OpenSSL 3.0 API to generate RSA key
+ Drop the code for openSSL < 3.0.0
+ Look for signing authority in alternative database
(bsc#1241957)
- Bump the requirement of libopenssl-devel to 3.0.0
* Tue Apr 01 2025 aplanas@suse.com
- Update to 0.5.5
+ Merge of pending patches into the project
+ No new feature since last release
- Change source to the openSUSE project
- Remove patches (merged)
+ fix-bsc1230316-make-pcr4-hard-requirement.patch
+ fix-bsc1230316-predict-sbatlevelrt.patch
+ fix-bsc1230316-predict-sbatlevelrt-sb-off.patch
+ fix_efi_measure_and_shim.patch
+ fix-event-reshash-for-cryptouuid.patch
+ fix_grub_bls_cmdline.patch
+ fix_grub_bls_entry.patch
+ fix_loader_conf.patch
+ fix-testcase-empty-efi-variables.patch
+ support-ecc-srk.patch
* Fri Mar 07 2025 glin@suse.com
- Add fix-bsc1230316-predict-sbatlevelrt-sb-off.patch to fix the
prediction of SbatLevelRT when Secure Boot is disabled
(bsc#1230316)
- Add fix-bsc1230316-make-pcr4-hard-requirement.patch to make PCR4
a hard requirement for SbatLevelRT prediction (bsc#1230316)
* Wed Feb 26 2025 glin@suse.com
- Add fix-bsc1230316-predict-sbatlevelrt.patch to predict
SbatLevelRT for the next boot (bsc#1230316)
* Fri Feb 21 2025 glin@suse.com
- Update the License tag to GPL-2.0-or-later to match the license
declaration in the source files
* Thu Dec 26 2024 glin@suse.com
- Add fix-event-reshash-for-cryptouuid.patch to detect the crypto
device with the 'cryptouuid' prefix
* Mon Aug 05 2024 glin@suse.com
- Add support-ecc-srk.patch to support ECC SRK
- Add fix-testcase-empty-efi-variables.patch to fix the testcase
playback on empty EFI variables
* Mon Mar 25 2024 aplanas@suse.com
- Add fix_grub_bls_cmdline.patch to include the measurements of the
cmdline and the linux and initrd grub commands
* Thu Mar 14 2024 aplanas@suse.com
- Add fix_grub_bls_entry.patch to measure boot entries in GRUB BLS
* Mon Feb 26 2024 aplanas@suse.com
- Remove fix_efi_measure.patch
- Add fix_efi_measure_and_shim.patch (bsc#1219807)
* Tue Feb 20 2024 aplanas@suse.com
- Add fix_loader_conf.patch to measure the systemd-boot loader.conf file
* Fri Jan 12 2024 aplanas@suse.com
- Add fix_efi_measure.patch to fix the measurement of EFI binaries
* Fri Dec 08 2023 glin@suse.com
- Update to 0.5.4
- Improve systemd-boot support
- Add --boot-entry for systemd-boot
- Manpage fixes
- Fix PCR index in JSON file
- Fix GrubPcrSnapshot parsing
- Drop upstreamed patches: boot_entry.patch and fix_pcr_index.patch
* Wed Nov 29 2023 aplanas@suse.com
- Update to 0.5.3
- Improve documentation
- Detect key format store via extension
- Replace --key-format and --policy-format options with a single
- -target-platform option
- The json file can contain multiple predictions
- Remove fix_rsa.patch as is already upstream
- Add boot_entry.patch to add new parameter to point to a new systemd
boot entry
- Add fix_pcr_index.patch to fix the PCR index number in the JSON file
* Mon Nov 20 2023 aplanas@suse.com
- Add fix_rsa.patch to support the export in PEM format of the public
key
* Mon Nov 20 2023 aplanas@suse.com
- FAPI is not present until tpm2-tss >= 2.4.0. Express that in the
BuildRequirement
* Wed Nov 15 2023 aplanas@suse.com
- Update to 0.5.2
- Support EV_EVENT_TAG events from the kernel (PCR9 for the cmdline
and the kernel)
- Fix cmdline measurements
- Update to 0.5.1
- Measure the kernel as an EFI binary (PCR4)
* Mon Nov 13 2023 aplanas@suse.com
- Update to 0.5.0
- Support systemd-cryptenroll JSON files
- Generate RSA keys in more scenarios
- Select RSA key size
- Drop systemd-boot.patch (already present in upstream)
* Thu Oct 19 2023 aplanas@suse.com
- Add systemd-boot.patch to support systemd-cryptenroll JSON files
* Wed Jul 26 2023 glin@suse.com
- Add libtss2-tcti-device0 as the default TCTI interface to avoid
the following error:
Esys_Initialize() Initialize default tcti. ErrorCode (0x000a000a)
* Tue Jul 04 2023 okir@suse.com
- Added a _service file
- BuildRequire libopenssl-devel rather than openssl
- Updated to version 0.4.6:
- recognize SOURCE_DATE_EPOCH for reproducible builds
- Remove authorized policy file from the unseal action
- Unseal the data without calling __pcr_policy_make()
- Skip the variable event with 0 length (#26)
- Add the new parameter: policy-name (#27)
- Skip the leading operators when matching grub2 commands (#28)
- microconf change: force rebuilding the sed script
* Mon Jun 05 2023 glin@suse.com
- Update to version 0.4.5
- update manpage to reflect added support of unseal w/ tpm2.0 key
format
- Implement unseal for TPM 2.0 Key File
- Update manpage to describe the new key-format switch
- Add TPM 2.0 Key File support to 'seal-secret' and 'sign'
- Add comment to SRK template regarding NODA flag.
- pcr-oracle.8: add a section on pcr policy sealing
- Add self-test subcommand to pcr-oracle
- Rename __tss_check_error -> tss_check_error
- Moved two tss related functions to a file of their own
- Add test-pcr.sh script
- Use the same SRK template as the one in grub2
- Implement seal/unseal using a regular PCR policy
- When displaying the DevicePath, print ACPI PNP ids
- Handle failure to read EFI variables more gracefully
- Gracefully handle AUTHORITY events for eg driver BSAs that
reside in ROM
- efi-variable rehash: break out the code to detect how the
firmware hashed the event
* Thu Jun 01 2023 meissner@suse.com
- build with optflags, remove unneeded clean section, macro bindir
* Mon Jan 16 2023 okir@suse.com
- Updated to version 0.4.2
* Thu Jan 05 2023 msuchanek@suse.com
- Fix project URL
* Wed Jan 04 2023 okir@suse.com
- add --rsa-generate-key option
* Tue Jan 03 2023 okir@suse.com
- Updated to version 0.4.1:
- disable debug messages from authenticode PECOFF parser
- add --tpm-eventlog option
- add manpage
* Mon Jan 02 2023 okir@suse.com
- Updated to version 0.4:
- drop the dependency on tss2 fapi
- introduce authorized policies
* Tue Nov 08 2022 okir@suse.com
- Establish pcr-oracle as standalone package, apart from fde-tools
/usr/bin/pcr-oracle /usr/share/doc/packages/pcr-oracle /usr/share/doc/packages/pcr-oracle/README.md /usr/share/doc/packages/pcr-oracle/test-authorized.sh /usr/share/man/man8/pcr-oracle.8.gz
Generated by rpm2html 1.8.1
Fabrice Bellet, Fri Oct 31 22:53:25 2025