Skip to content

Adding Microsoft Trusted Root Program CAs#25

Merged
jslobodzian merged 3 commits intomicrosoft:mainfrom
PawelWMS:pawelwi/adding_Microsoft_certs
Sep 3, 2020
Merged

Adding Microsoft Trusted Root Program CAs#25
jslobodzian merged 3 commits intomicrosoft:mainfrom
PawelWMS:pawelwi/adding_Microsoft_certs

Conversation

@PawelWMS
Copy link
Copy Markdown
Contributor

@PawelWMS PawelWMS commented Aug 14, 2020

Summary

Adding a new ca-certificates-microsoft subpackage to enable trusting CAs approved through the Microsoft Trusted Root Program.

Change Log

  • Added a new ca-certificates-microsoft subpackage.
  • Replaced duplicated steps inside ca-certificates.spec with parametrized macros.

Does this affect the toolchain?

No.

Merge Checklist
  • The toolchain has been rebuilt successfully if any changes were made to it
  • The toolchain/worker package manifests have been updated if this is a toolchain package
  • Updated packages have been successfully built
  • New source files have updated hashes in the *.signatures.json files
  • Documentation has been updated to match any changes to the build system
  • Verified that installation of the new package fixes connection issues of Azure's Watson agent.
  • Ready to merge

@PawelWMS PawelWMS requested review from a team and jslobodzian August 14, 2020 13:07
@PawelWMS PawelWMS marked this pull request as draft August 18, 2020 20:43
@PawelWMS
Copy link
Copy Markdown
Contributor Author

Keeping it a draft until we get an updated certdata.txt file from Gordon containing only the server auth certificates.

@PawelWMS PawelWMS marked this pull request as ready for review August 26, 2020 23:51
@jslobodzian jslobodzian merged commit fd84f32 into microsoft:main Sep 3, 2020
@jslobodzian jslobodzian deleted the pawelwi/adding_Microsoft_certs branch September 3, 2020 00:01
henryli001 pushed a commit that referenced this pull request Jun 15, 2021
* Adding a new 'ca-certificates-microsoft' subpackage.

* Updating manifests and related scripts.

* Correcting Microsoft certs.
durgajagadeesh pushed a commit to durgajagadeesh/azurelinux_djpalli that referenced this pull request Apr 8, 2025
christopherco added a commit that referenced this pull request Apr 12, 2026
The forthstrap Forth interpreter segfaults on aarch64 builders due to
pointer truncation in cell2pointer() — mmap returns addresses above
4 GiB that do not fit in a 32-bit cell. This is a known upstream bug
with no fix (openbios/openbios#18, #25).

Add ExclusiveArch: x86_64 so Koji only schedules the build on x86_64
builders where the address space layout avoids the crash. The output
RPMs remain noarch (firmware blobs for ppc/sparc).

Build verified locally; firmware ELFs inspected in mock.
christopherco added a commit that referenced this pull request Apr 12, 2026
The forthstrap Forth interpreter segfaults on aarch64 builders due to
pointer truncation in cell2pointer() — mmap returns addresses above
4 GiB that do not fit in a 32-bit cell. This is a known upstream bug
with no fix (openbios/openbios#18, #25).

Add ExclusiveArch: x86_64 so Koji only schedules the build on x86_64
builders where the address space layout avoids the crash. The output
RPMs remain noarch (firmware blobs for ppc/sparc).

Build verified locally; firmware ELFs inspected in mock.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants