update verification_method if the loaded image is signed by shim/vendor cert

Signed-off-by: Lans Zhang <jia.zhang@windriver.com>

1 files changed, 2 insertions, 0 deletions

diff --git a/shim.c b/shim.c
index 5814bf1d..6e040c4f 100644
--- a/shim.c
+++ b/shim.c
@@ -1025,6 +1025,7 @@ static EFI_STATUS verify_buffer (char *data, int datasize,
 			       cert->Hdr.dwLength - sizeof(cert->Hdr),
 			       shim_cert, sizeof(shim_cert), sha256hash,
 			       SHA256_DIGEST_SIZE)) {
+			update_verification_method(VERIFIED_BY_CERT);
 			status = EFI_SUCCESS;
 			return status;
 		}
@@ -1037,6 +1038,7 @@ static EFI_STATUS verify_buffer (char *data, int datasize,
 				       cert->Hdr.dwLength - sizeof(cert->Hdr),
 				       vendor_cert, vendor_cert_size,
 				       sha256hash, SHA256_DIGEST_SIZE)) {
+			update_verification_method(VERIFIED_BY_CERT);
 			status = EFI_SUCCESS;
 			return status;
 		}