blob: d93d1c04e97bfb9d7608bc19353d31065b3d3d4e (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
|
# fsverity-utils release notes
## Version 1.6
* Eliminated the dependency on `pandoc` for installing the manual page.
* Updated the documentation to reflect recent kernel changes, including the
kernel adding support for more Merkle tree block sizes, IMA adding support for
fs-verity, and btrfs adding support for fs-verity.
* Updated the documentation to refer to the new fsverity mailing list.
* Fixed a C++ compatibility issue in `libfsverity.h`.
* `fsverity measure` now follows standard command line syntax for arguments
beginning with hyphens. I.e., `fsverity measure --foo` now treats `--foo` as
an (unsupported) option, not a filename. To operate on a file actually named
`--foo`, use `fsverity measure -- --foo`.
## Version 1.5
* Made the `fsverity sign` command and the `libfsverity_sign_digest()` function
support PKCS#11 tokens.
* Avoided a compiler error when building with musl libc.
* Avoided compiler warnings when building with OpenSSL 3.0.
* Improved documentation and test scripts.
## Version 1.4
* Added a manual page for the `fsverity` utility.
* Added the `fsverity dump_metadata` subcommand.
* Added the `--out-merkle-tree` and `--out-descriptor` options to
`fsverity digest` and `fsverity sign`.
* Added metadata callbacks support to `libfsverity_compute_digest()`.
## Version 1.3
* Added a `fsverity digest` subcommand.
* Added `libfsverity_enable()` and `libfsverity_enable_with_sig()`.
* Added basic support for Windows builds of `fsverity` using MinGW.
* `fsverity` now defaults to 4096-byte blocks on all platforms.
* libfsverity now will use SHA-256 with 4096-byte blocks if the
`hash_algorithm` and `block_size` fields are left 0.
* `make install` now installs a pkg-config file for libfsverity.
* The Makefile now uses pkg-config to get the libcrypto build flags.
* Fixed `make check` with `USE_SHARED_LIB=1`.
## Version 1.2
* Changed license from GPL to MIT.
* Fixed build error when /bin/sh is dash.
## Version 1.1
* Split the file digest computation and signing functionality of the
`fsverity` program into a library `libfsverity`. See `README.md`
and `Makefile` for more details.
* Improved the Makefile.
* Added some tests. They can be run using `make check`. Also added
`scripts/run-tests.sh` which does more extensive prerelease tests.
* Lots of cleanups and other small improvements.
## Version 1.0
* First official release of fsverity-utils.
|
