mirror of
https://github.com/openharmony/third_party_fsverity-utils.git
synced 2026-07-01 10:05:35 -04:00
zfeixiang
88 lines
2.5 KiB
Markdown
88 lines
2.5 KiB
Markdown
# fsverity-utils release notes
|
|
|
|
## Version 1.7
|
|
|
|
* Allowed fsverity-utils to build when PKCS#11 support is not available in
|
|
OpenSSL. In that case, `fsverity sign` just won't support that feature.
|
|
|
|
## Version 1.6
|
|
|
|
* Eliminated the dependency on `pandoc` for installing the manual page.
|
|
|
|
* Updated the documentation to reflect recent kernel changes, including the
|
|
kernel adding support for more Merkle tree block sizes, IMA adding support for
|
|
fs-verity, and btrfs adding support for fs-verity.
|
|
|
|
* Updated the documentation to refer to the new fsverity mailing list.
|
|
|
|
* Fixed a C++ compatibility issue in `libfsverity.h`.
|
|
|
|
* `fsverity measure` now follows standard command line syntax for arguments
|
|
beginning with hyphens. I.e., `fsverity measure --foo` now treats `--foo` as
|
|
an (unsupported) option, not a filename. To operate on a file actually named
|
|
`--foo`, use `fsverity measure -- --foo`.
|
|
|
|
## Version 1.5
|
|
|
|
* Made the `fsverity sign` command and the `libfsverity_sign_digest()` function
|
|
support PKCS#11 tokens.
|
|
|
|
* Avoided a compiler error when building with musl libc.
|
|
|
|
* Avoided compiler warnings when building with OpenSSL 3.0.
|
|
|
|
* Improved documentation and test scripts.
|
|
|
|
## Version 1.4
|
|
|
|
* Added a manual page for the `fsverity` utility.
|
|
|
|
* Added the `fsverity dump_metadata` subcommand.
|
|
|
|
* Added the `--out-merkle-tree` and `--out-descriptor` options to
|
|
`fsverity digest` and `fsverity sign`.
|
|
|
|
* Added metadata callbacks support to `libfsverity_compute_digest()`.
|
|
|
|
## Version 1.3
|
|
|
|
* Added a `fsverity digest` subcommand.
|
|
|
|
* Added `libfsverity_enable()` and `libfsverity_enable_with_sig()`.
|
|
|
|
* Added basic support for Windows builds of `fsverity` using MinGW.
|
|
|
|
* `fsverity` now defaults to 4096-byte blocks on all platforms.
|
|
|
|
* libfsverity now will use SHA-256 with 4096-byte blocks if the
|
|
`hash_algorithm` and `block_size` fields are left 0.
|
|
|
|
* `make install` now installs a pkg-config file for libfsverity.
|
|
|
|
* The Makefile now uses pkg-config to get the libcrypto build flags.
|
|
|
|
* Fixed `make check` with `USE_SHARED_LIB=1`.
|
|
|
|
## Version 1.2
|
|
|
|
* Changed license from GPL to MIT.
|
|
|
|
* Fixed build error when /bin/sh is dash.
|
|
|
|
## Version 1.1
|
|
|
|
* Split the file digest computation and signing functionality of the
|
|
`fsverity` program into a library `libfsverity`. See `README.md`
|
|
and `Makefile` for more details.
|
|
|
|
* Improved the Makefile.
|
|
|
|
* Added some tests. They can be run using `make check`. Also added
|
|
`scripts/run-tests.sh` which does more extensive prerelease tests.
|
|
|
|
* Lots of cleanups and other small improvements.
|
|
|
|
## Version 1.0
|
|
|
|
* First official release of fsverity-utils.
|