summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMathieu Trudel-Lapierre <mathieu.trudel-lapierre@canonical.com>2017-08-29 13:57:47 -0400
committerMathieu Trudel-Lapierre <mathieu.trudel-lapierre@canonical.com>2017-08-29 13:57:47 -0400
commit661d3ea1dc23ebe589593dd9cc772a1d436c417b (patch)
tree9f95d9018ca6ec2a1b3ec35e407ee4cfb9ec7de3
parentcff1facf80f327dbd43654221ea5704e24a0dc1d (diff)
downloadefi-boot-shim-661d3ea1dc23ebe589593dd9cc772a1d436c417b.tar.gz
efi-boot-shim-661d3ea1dc23ebe589593dd9cc772a1d436c417b.zip
Set ENABLE_SHIM_CERT, to keep using ephemeral self-signed certs built at compile-time for MokManager and fallback.
-rw-r--r--debian/changelog2
-rwxr-xr-xdebian/rules1
2 files changed, 3 insertions, 0 deletions
diff --git a/debian/changelog b/debian/changelog
index 56ba2c4d..79d7966e 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -7,6 +7,8 @@ shim (12+1503074702.5202f80-0ubuntu1) UNRELEASED; urgency=medium
MAKELEVEL.
- Define an EFI_ARCH variable, and use that for paths to shim. This
makes it possible to build a shim for other architectures than amd64.
+ - Set ENABLE_SHIM_CERT, to keep using ephemeral self-signed certs built
+ at compile-time for MokManager and fallback.
* debian/patches/second-stage-path: dropped; the default loader path now
includes an arch suffix.
* debian/patches/sbsigntool-no-pesign: refreshed.
diff --git a/debian/rules b/debian/rules
index b03e2ee2..b5f21367 100755
--- a/debian/rules
+++ b/debian/rules
@@ -23,6 +23,7 @@ override_dh_auto_build:
dh_auto_build -- \
MAKELEVEL=0 \
EFI_PATH=/usr/lib \
+ ENABLE_SHIM_CERT=1 \
VENDOR_CERT_FILE=$(cert)
override_dh_fixperms: