efi-boot-shim.git/Makefile, branch 0.3

Bump version to 0.3

2013-05-16T15:03:32+00:00

Signed-off-by: Peter Jones

Use MS ABI instead of terrible wrappers.

2013-05-16T14:21:15+00:00

This means that we now require gnu-efi 3.0s Signed-off-by: Peter Jones

Add a fallback loader for when shim is invoked as BOOTX64.EFI

2013-04-30T13:46:22+00:00

If shim is invoked as \EFI\BOOT\BOOT*.EFI and a file exists named \EFI\BOOT\FALLBACK.EFI, try it instead of our second stage. So don't put fallback.efi on your install media in \EFI\BOOT, because that won't do whatever it is you're hoping for, unless you're hoping not to start the installer. So here's the process for using this: in /EFI/fedora/ (or whichever directory you happen to own), you put: shim.efi grub.efi boot.csv - format is: shim.efi,Nice Label,cmdline arguments,comments - filenames refer only to files in this directory, with no leading characters such as L"./" or L"/EFI/fedora/" - note that while this is CSV, the character encoding is UCS-2 and if /EFI/BOOT/BOOTX64.EFI doesn't already exist, then in /EFI/BOOT: shim.efi as BOOTX64.EFI fallback.efi Signed-off-by: Peter Jones

Sign MokManager with a locally-generated key

2012-11-26T18:43:50+00:00

shim needs to verify that MokManager hasn't been modified, but we want to be able to support configurations where shim is shipped without a vendor certificate. This patch adds support for generating a certificate at build time, incorporating the public half into shim and signing MokManager with the private half. It uses pesign and nss, but still requires openssl for key generation. Anyone using sbsign will need to figure this out for themselves.

Bump version

2012-11-01T19:32:12+00:00

This seems pretty much functionally complete, so let's call it 0.2.

Merge branch 'mok' into netboot

2012-11-01T14:45:22+00:00

Conflicts: Makefile shim.c

Support a vendor-specific DBX list.

2012-10-23T15:47:41+00:00

In some rare corner cases, it's useful to add a blacklist of things that were allowed by a copy of shim that was never signed by the UEFI signing service. In these cases it's okay for them to go into a local dbx, rather than taking up precious flash. Signed-off-by: Peter Jones

Add draft version of Neil's netboot code

2012-10-13T00:14:14+00:00

Build debug image for all efi files

2012-09-26T07:46:42+00:00

Add a separate efi application to manage MOKs

2012-09-11T08:38:29+00:00