summaryrefslogtreecommitdiff
path: root/debian
diff options
context:
space:
mode:
Diffstat (limited to 'debian')
-rw-r--r--debian/changelog6
-rw-r--r--debian/signing-template.json.in17
2 files changed, 16 insertions, 7 deletions
diff --git a/debian/changelog b/debian/changelog
index c0d0ab1f..863d8f03 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -16,8 +16,12 @@ shim (15+1533136590.3beb971-3) UNRELEASED; urgency=medium
* Change maintenance address to be the EFI team
* Add me and vorlon to the Uploaders list
* Rename the helper binary packages to shim-helpers-$arch.
+ * Update the signing-template JSON metadata to match new practice:
+ + Move all the data under a new top-level "packages" key
+ + Add an empty "trusted_certs" key - the helper binaries do not do any
+ further verification with an embedded key.
- -- Steve McIntyre <93sam@debian.org> Wed, 06 Mar 2019 22:35:52 +0000
+ -- Steve McIntyre <93sam@debian.org> Fri, 08 Mar 2019 21:59:43 +0000
shim (15+1533136590.3beb971-2) unstable; urgency=medium
diff --git a/debian/signing-template.json.in b/debian/signing-template.json.in
index cd4f1a92..09f4f36b 100644
--- a/debian/signing-template.json.in
+++ b/debian/signing-template.json.in
@@ -1,6 +1,11 @@
-{"shim-unsigned": {
- "files": [
- {"sig_type": "efi", "file": "usr/lib/shim/fb@efi@.efi"},
- {"sig_type": "efi", "file": "usr/lib/shim/mm@efi@.efi"}
- ]
-}}
+{
+ "packages": {
+ "shim-unsigned": {
+ "trusted_certs": [],
+ "files": [
+ {"sig_type": "efi", "file": "usr/lib/shim/fb@efi@.efi"},
+ {"sig_type": "efi", "file": "usr/lib/shim/mm@efi@.efi"}
+ ]
+ }
+ }
+}