diff options
| author | Peter Jones <pjones@redhat.com> | 2017-08-02 16:11:52 -0400 |
|---|---|---|
| committer | Peter Jones <pjones@redhat.com> | 2017-08-11 15:18:39 -0400 |
| commit | 1097a8aa9d2331f6eed8ca7ece0fe39e7ae55bbc (patch) | |
| tree | 99a62b76faecebf4becd335d068df96bf284168d | |
| parent | 207dd7dc60df15f4b1d0c794b30c1aedcf8150c4 (diff) | |
| download | efi-boot-shim-1097a8aa9d2331f6eed8ca7ece0fe39e7ae55bbc.tar.gz efi-boot-shim-1097a8aa9d2331f6eed8ca7ece0fe39e7ae55bbc.zip | |
Allow use of sbsign to sign things.
Signed-off-by: Peter Jones <pjones@redhat.com>
| -rw-r--r-- | Makefile | 6 |
1 files changed, 6 insertions, 0 deletions
@@ -20,6 +20,7 @@ INSTALL ?= install PK12UTIL ?= pk12util CERTUTIL ?= certutil PESIGN ?= pesign +SBSIGN ?= sbsign prefix ?= /usr prefix := $(abspath $(prefix)) datadir ?= $(prefix)/share/ @@ -274,8 +275,13 @@ endif -j .note.gnu.build-id \ $(FORMAT) $^ $@.debug +ifneq ($(origin ENABLE_SBSIGN),undefined) +%.efi.signed: %.efi shim.key shim.crt + $(SBSIGN) --key shim.key --cert shim.crt --output $@ $< +else %.efi.signed: %.efi certdb/secmod.db $(PESIGN) -n certdb -i $< -c "shim" -s -o $@ -f +endif clean: $(MAKE) -C Cryptlib -f $(TOPDIR)/Cryptlib/Makefile clean |