Commit 3a1cdbfd authored by Steve McIntyre's avatar Steve McIntyre

Use --padding when calling pesign to generate hashes

for the dbx list, as recommended by Peter Jones. No actual changes
needed in our list of hashes at this point - they work out the same
either way.
parent ee2d7bb9
shim (15+1533136590.3beb971-8) UNRELEASED; urgency=medium
[ Steve McIntyre ]
* Use --padding when calling pesign to generate hashes for the dbx
list, as recommended by Peter Jones. No actual changes needed in
our list of hashes at this point - they work out the same either
way.
-- Steve McIntyre <93sam@debian.org> Wed, 08 May 2019 02:05:01 +0100
shim (15+1533136590.3beb971-7) unstable; urgency=medium
[ Ansgar Burchardt ]
......
......@@ -9,7 +9,7 @@
#
# The hashes are generated using:
#
# pesign --hash -in <binary>
# pesign --hash --padding -in <binary>
#
# on *either* the signed or unsigned binary, pesign doesn't care
# which.
......
......@@ -9,7 +9,7 @@
#
# The hashes are generated using:
#
# pesign --hash -in <binary>
# pesign --hash --padding -in <binary>
#
# on *either* the signed or unsigned binary, pesign doesn't care
# which.
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment