summaryrefslogtreecommitdiff
path: root/MokManager.c
diff options
context:
space:
mode:
authorGary Ching-Pang Lin <glin@suse.com>2012-12-27 11:42:54 +0800
committerGary Ching-Pang Lin <glin@suse.com>2012-12-27 11:42:54 +0800
commita05c7c57d9a81d0989e478419a54ab9c88f1fb9a (patch)
tree8dff1a5a2e50d53065674cc114a30d6cccfdee43 /MokManager.c
parent262d671419f1266cbe0e83b7fa3aa85e3b91ddfe (diff)
downloadefi-boot-shim-a05c7c57d9a81d0989e478419a54ab9c88f1fb9a.tar.gz
efi-boot-shim-a05c7c57d9a81d0989e478419a54ab9c88f1fb9a.zip
MOK doesn't include the signature owner
Diffstat (limited to 'MokManager.c')
-rw-r--r--MokManager.c4
1 files changed, 2 insertions, 2 deletions
diff --git a/MokManager.c b/MokManager.c
index ffe37ff7..ddf12deb 100644
--- a/MokManager.c
+++ b/MokManager.c
@@ -124,7 +124,7 @@ static MokListNode *build_mok_list(UINT32 num, void *Data, UINTN DataSize) {
Cert = (EFI_SIGNATURE_DATA *) (((UINT8 *) CertList) +
sizeof (EFI_SIGNATURE_LIST) + CertList->SignatureHeaderSize);
- list[count].MokSize = CertList->SignatureSize;
+ list[count].MokSize = CertList->SignatureSize - sizeof(EFI_GUID);
list[count].Mok = (void *)Cert->SignatureData;
count++;
@@ -317,7 +317,7 @@ static void show_mok_info (void *Mok, UINTN MokSize)
if (!Mok || MokSize == 0)
return;
- if (MokSize != 48) {
+ if (MokSize != SHA256_DIGEST_SIZE) {
if (X509ConstructCertificate(Mok, MokSize,
(UINT8 **) &X509Cert) && X509Cert != NULL) {
show_x509_info(X509Cert);