diff options
| author | Steve McIntyre <93sam@debian.org> | 2019-05-04 18:52:08 +0100 |
|---|---|---|
| committer | Steve McIntyre <93sam@debian.org> | 2019-05-04 18:56:30 +0100 |
| commit | 6cf246a5c9bb035467fafedfd18408bc4ae78f6c (patch) | |
| tree | 2e26ccc15a35390eeb40a9e40582b92e2faeda2c /Cryptlib/OpenSSL/crypto/comp/comp_lib.c | |
| parent | e17b0af4664eff964d36090143fd6f91e07416c5 (diff) | |
| download | efi-boot-shim-6cf246a5c9bb035467fafedfd18408bc4ae78f6c.tar.gz efi-boot-shim-6cf246a5c9bb035467fafedfd18408bc4ae78f6c.zip | |
Generate a vendor dbx file at build time
This allow us to block executing binaries with specific
checksums. Generate the dbx list at runtime from a simple list of
sha256 hashes, so we can update this easily. If we need to also
blacklist a cert later, we'll need to update this code to add that
option too.
Add a build-dep on pesign to get the needed efisiglist program.
Diffstat (limited to 'Cryptlib/OpenSSL/crypto/comp/comp_lib.c')
0 files changed, 0 insertions, 0 deletions