pesign-obs-integration (10.0danos1) unstable; urgency=medium

  * dh_signobs: compare only the hash field when verifying that attaching the
    signature did not change the EFI hash. `pesign -h -i FILE` prints
    "<hash> <filename>", and the two invocations necessarily look at different
    paths (the unsigned file under the binary package dir, the signed one under
    debian/tmp), so the plain string comparison always failed:

      Pesign hash mismatch error:
        8750a92c... linux-image-6.12.0-trunk-vyatta-amd64/boot/vmlinuz-...
        8750a92c... ../tmp/boot/vmlinuz-...

    Both hashes are identical there. This broke the signed builds of linux and
    grub2-signed. Older pesign printed the hash alone, which is why the check
    worked when this was written.

 -- i-danos dev <dev@i-danos.dev>  Fri, 21 Aug 2026 22:00:00 +0000

pesign-obs-integration (10.0) unstable; urgency=medium

  * Initial Debian packaging.

 -- Michal Marek <mmarek@suse.cz>  Tue, 31 Oct 2017 17:44:08 +0000
