summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorSteve McIntyre <steve@einval.com>2019-03-08 22:04:53 +0000
committerSteve McIntyre <steve@einval.com>2019-03-08 22:04:53 +0000
commit90609be3eb71f2afa69c52ee7d0e1ec76678d257 (patch)
treed77e05d468081000f754cd039849c3f486154487
parent226ac98674de19e46bd18e710bfebdf1d57cf74a (diff)
downloadefi-boot-shim-90609be3eb71f2afa69c52ee7d0e1ec76678d257.tar.gz
efi-boot-shim-90609be3eb71f2afa69c52ee7d0e1ec76678d257.zip
Update the signing-template JSON metadata
Move all the data under a new top-level "packages" key Add an empty "trusted_certs" key - the helper binaries do not do any further verification with an embedded key.
-rw-r--r--debian/changelog6
-rw-r--r--debian/signing-template.json.in17
2 files changed, 16 insertions, 7 deletions
diff --git a/debian/changelog b/debian/changelog
index c0d0ab1f..863d8f03 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -16,8 +16,12 @@ shim (15+1533136590.3beb971-3) UNRELEASED; urgency=medium
* Change maintenance address to be the EFI team
* Add me and vorlon to the Uploaders list
* Rename the helper binary packages to shim-helpers-$arch.
+ * Update the signing-template JSON metadata to match new practice:
+ + Move all the data under a new top-level "packages" key
+ + Add an empty "trusted_certs" key - the helper binaries do not do any
+ further verification with an embedded key.
- -- Steve McIntyre <93sam@debian.org> Wed, 06 Mar 2019 22:35:52 +0000
+ -- Steve McIntyre <93sam@debian.org> Fri, 08 Mar 2019 21:59:43 +0000
shim (15+1533136590.3beb971-2) unstable; urgency=medium
diff --git a/debian/signing-template.json.in b/debian/signing-template.json.in
index cd4f1a92..09f4f36b 100644
--- a/debian/signing-template.json.in
+++ b/debian/signing-template.json.in
@@ -1,6 +1,11 @@
-{"shim-unsigned": {
- "files": [
- {"sig_type": "efi", "file": "usr/lib/shim/fb@efi@.efi"},
- {"sig_type": "efi", "file": "usr/lib/shim/mm@efi@.efi"}
- ]
-}}
+{
+ "packages": {
+ "shim-unsigned": {
+ "trusted_certs": [],
+ "files": [
+ {"sig_type": "efi", "file": "usr/lib/shim/fb@efi@.efi"},
+ {"sig_type": "efi", "file": "usr/lib/shim/mm@efi@.efi"}
+ ]
+ }
+ }
+}