efi-boot-shim.git/debian/debian-dbx.hashes, branch rolling (mirror of https://github.com/vyos/efi-boot-shim.git) https://git.amelek.net/vyos/efi-boot-shim.git/atom?h=rolling 2021-03-23T23:33:04+00:00 Improve how the dbx hashes are handled 2021-03-23T23:33:04+00:00 Steve McIntyre steve@einval.com 2021-03-14T16:04:15+00:00 urn:sha1:de3def7f5365e0b567606c3b7b63df2f0525af35 Only include the hashes for the architecture we're building for - no point in adding bloat and delay here. Add a script "block_signed_deb" to scan a set of .deb files, extract the hashes for .efi binaries and list them in the format wanted for the dbx hashes file. Split out the code to use that file from the rules file into a separate helper. Add dbx entries for all our existing grub binaries 2021-03-23T23:32:38+00:00 Steve McIntyre steve@einval.com 2021-03-13T18:59:25+00:00 urn:sha1:58195ca37eab3e633c7d77c1581ed2d6ff20499c They're insecure, let's break the chainloading hole Typo fix 2020-07-24T00:28:51+00:00 Steve McIntyre 93sam@debian.org 2020-06-09T09:30:53+00:00 urn:sha1:c161c40d1ef319d0d54e6ab19de6fc35c42b9967 Use --padding when calling pesign to generate hashes 2019-05-08T15:49:11+00:00 Steve McIntyre 93sam@debian.org 2019-05-08T15:49:11+00:00 urn:sha1:3a1cdbfd4ca5196367fded2dbbb0101193f6889c for the dbx list, as recommended by Peter Jones. No actual changes needed in our list of hashes at this point - they work out the same either way. Remove the hash for Sledge's test arm64 grub binary 2019-05-08T01:03:37+00:00 Steve McIntyre 93sam@debian.org 2019-05-08T01:03:37+00:00 urn:sha1:ea8f00b9bf6e18767b351a610a1e0e81b9bfee64 Not needed now. Add more hashes that we want to blacklist 2019-05-06T12:07:00+00:00 Steve McIntyre 93sam@debian.org 2019-05-06T12:07:00+00:00 urn:sha1:549f650b3d9e630b185ed7f00b55cef4a55460d3 signed arm64 grub binaries that allow use of the devicetree command, as found in grub-efi-arm64-signed_1+2.02+dfsg1+16_arm64.deb grub-efi-arm64-signed_1+2.02+dfsg1+17_arm64.deb Add initial file with test checksums for the dbx list 2019-05-06T12:00:19+00:00 Steve McIntyre 93sam@debian.org 2019-05-04T17:57:01+00:00 urn:sha1:88a7a6505b6c502c0180c9980081fb97a224b72f