summaryrefslogtreecommitdiff
path: root/MokManager.c
diff options
context:
space:
mode:
authorGary Ching-Pang Lin <glin@suse.com>2012-12-21 15:02:09 +0800
committerGary Ching-Pang Lin <glin@suse.com>2012-12-27 11:42:54 +0800
commit0c6a8a7501f2eb4e751c33090c6763044d131b96 (patch)
tree8dff1a5a2e50d53065674cc114a30d6cccfdee43 /MokManager.c
parent5abe73ab8177f0d831ff04ca67a8ed92ef09ca8b (diff)
downloadefi-boot-shim-0c6a8a7501f2eb4e751c33090c6763044d131b96.tar.gz
efi-boot-shim-0c6a8a7501f2eb4e751c33090c6763044d131b96.zip
MOK doesn't include the signature owner
Diffstat (limited to 'MokManager.c')
-rw-r--r--MokManager.c4
1 files changed, 2 insertions, 2 deletions
diff --git a/MokManager.c b/MokManager.c
index ffe37ff7..ddf12deb 100644
--- a/MokManager.c
+++ b/MokManager.c
@@ -124,7 +124,7 @@ static MokListNode *build_mok_list(UINT32 num, void *Data, UINTN DataSize) {
Cert = (EFI_SIGNATURE_DATA *) (((UINT8 *) CertList) +
sizeof (EFI_SIGNATURE_LIST) + CertList->SignatureHeaderSize);
- list[count].MokSize = CertList->SignatureSize;
+ list[count].MokSize = CertList->SignatureSize - sizeof(EFI_GUID);
list[count].Mok = (void *)Cert->SignatureData;
count++;
@@ -317,7 +317,7 @@ static void show_mok_info (void *Mok, UINTN MokSize)
if (!Mok || MokSize == 0)
return;
- if (MokSize != 48) {
+ if (MokSize != SHA256_DIGEST_SIZE) {
if (X509ConstructCertificate(Mok, MokSize,
(UINT8 **) &X509Cert) && X509Cert != NULL) {
show_x509_info(X509Cert);