News item for Genode 13.05
GPG signature verification tool

The signature verification tool uses gpg to verify the detached
signature of the given file.

It also tries to obtain the signing key if it is not part of the local
key ring.

Signature verification implies the verification of the integrity and
authenticity of a given file.

Issue #748
Hash verification tool

This tool verifies the integrity of a given file with a hash. It uses
md5sum, sha1sum and sha256sum as needed.

Issue #748
GPG signature verification of tool chain

The downloaded archives for building the tool chain are checked for its
signature before using them. In case of a signature failure, the build
is interrupted.

Issue #748
libports: Global variables for integrity check

Add global variables to the signature and hash verification tool for use
in the individual make templates.

Issue #748
libports: Verify signatures of 3rd-party code

This patch adds integrity checks for the packages of the libports
repository.

Issue #748
ports: Global variables for integrity check

Add global variables to the signature and hash verification tool to
ports/Makefile for use in the individual make templates.

Issue #748
ports: Verify signatures of 3rd-party code

This patch adds integrity checks for the packages of the ports
repository.

Issue #748
ports/libports: Handle failed integrity checks

This patch makes the handling of failed integrity checks of 3rd-party
packages more robust. Previously, a once failed 'make prepare PKG=curl'
would not leave any trace of the verification state. Hence, a successive
attempt to perform the 'make prepare' step again succeeded even if the
signature check failed.

To solve this problem, the outcome of a successful signature check is
represented by a tag file called 'download/<archive-name>.verified'.
Because the rule for extracting the archive depends on the .verify tag
file, the extraction step is not performed until the signature check
succeeds.

Issue #748
liquid_framebuffer: fix initial window size

Fixes #764.
update x86emu to 1.20

+ document x86emu move from os -> libports

Fixes #456
Fix usb driver configuartion in l4linux run script

Don't use the xhci USB host controller for HID and NIC in the l4linux
run script. It doesn't work on the Pandaboard, and isn't needed for the
Arndale board. Moreover, provide a MAC address, and add a providing
rule in the KDB UART driver to supress ugly warnings. Fix #763
Add print-only dummy UART driver for Exynos5 SoC

Fix #759
Don't abort when reading config in OMAP4 fb driver

Just use configuration values when existent, otherwise when no configuration
is given use the default values. When an incomplete configuration is given,
take the supplied ones, and for the rest the default ones. Fix #762
Add sd_card drivers to some run scripts (fix #757)

Moreover, extend l4android script to run on OMAP4 and Exynos5.
Unify buffer sizes of RX and TX in nic_session

In fact, the sizes were the same the whole time, but by using
the same enum in both cases to instantiate the Packet_stream_tx
and Packet_stream_rx members of the e.g. RPC object, it allows
for more flexible generalization between e.g. source or, sink
objects, when programming event-driven, and implementing generic
handlers for their signals.
Simplify use of custom data-flow signal handlers

This is analogue to the changes done in packet_stream_tx in commit:
cb9b2724de3b9ecba67d0403ff61bd8ba6a3313d
Let the nic_bridge work event driven (fix #749)
ports/libports: Avoid multi-target rules

This patch splits the download of signatures from the download of the
archive to improve robustness. This way, signature files will be
downloaded even if the corresponding archive is already in place.

Issue #748
libports: Fix qoost download