efi-boot-shim.git - (mirror of https://github.com/vyos/efi-boot-shim.git)

Age	Commit message (Collapse)	Author
2012-09-21	Allow the new keys to be listed again	Gary Ching-Pang Lin

2012-09-21	Reject the binary when there is no key in MokList	Gary Ching-Pang Lin

2012-09-20	Make the key list interactive	Gary Ching-Pang Lin

2012-09-20	Make sure the time string is set	Gary Ching-Pang Lin

2012-09-20	Improve the layout of the key info	Gary Ching-Pang Lin

2012-09-20	Remove the unused debug message	Gary Ching-Pang Lin

2012-09-20	Check the MOK list correctly	Gary Ching-Pang Lin

2012-09-19	Simplify the key management	Gary Ching-Pang Lin
	Move the key list building and management to mokutil to keep MokManager as simple as possible.
2012-09-19	Abandon the variable, MokMgmt	Gary Ching-Pang Lin

2012-09-11	Copy the MOK list to a RT variable	Gary Ching-Pang Lin
	The RT variable, MokListRT, is a copy of MokList so that the runtime applications can synchronize the key list without touching the BS variable.
2012-09-11	Use the machine owner keys to verify images	Gary Ching-Pang Lin

2012-09-11	Add a separate efi application to manage MOKs	Gary Ching-Pang Lin

2012-09-11	Always try StartImage first	Gary Ching-Pang Lin

2012-09-11	Only launch MokManager when necessary	Gary Ching-Pang Lin

2012-09-11	Retrieve attributes of variables	Gary Ching-Pang Lin
	We have to make sure the machine owner key is stored in a BS variable.
2012-09-07	Merge branch 'master' into mok-prototype3	Gary Ching-Pang Lin
	Conflicts: shim.c
2012-09-07	Load MokManager for MOK management	Gary Ching-Pang Lin

2012-09-07	Make the image loading process more generic	Gary Ching-Pang Lin

2012-09-06	Fix data alignment on vendor_cert so we don't wind up with padding.	Peter Jones

2012-09-06	Add some convenience make targets.	Peter Jones
	Adds targets for "test-archive" and "archive"
2012-09-06	Break out of our db checking loop at the appropriate time.	Peter Jones
	The break in check_db_cert is at the wrong level due to a typo in indentation, and as a result only the last cert in the list can correctly match. Rectify that. Signed-off-by: Peter Jones <pjones@redhat.com>
2012-09-06	Use the file size, not the image size field, for verification.	Matthew Garrett

2012-09-06	Allow specification of vendor_cert through a build command line option.	Peter Jones
	This allows you to specify the vendor_cert as a file on the command line during build.
2012-09-06	dos2unix PeImage.h	Peter Jones

2012-07-28	Add basic documentation	Matthew Garrett

2012-07-13	Handle slightly stranger device paths	Matthew Garrett

2012-07-11	Make path generation more sensible	Matthew Garrett

2012-07-11	Make sure ImageBase is set appropriately in the loaded_image protocol	Matthew Garrett

2012-07-09	Add copyright file	Matthew Garrett

2012-07-09	Update TODO	Matthew Garrett

2012-07-09	Remove temp file checked in by accident	Matthew Garrett

2012-07-09	Improve makefile	Matthew Garrett

2012-07-09	Make it easier to update Cryptlib	Matthew Garrett

2012-07-09	Cryptlib update	Matthew Garrett

2012-07-05	Re-add whitelisting - needed for protocol validation	Matthew Garrett

2012-07-05	We're not MSABI, so don't advertise this as such	Matthew Garrett

2012-07-05	Check whether secure boot is enabled before performing verify call	Matthew Garrett

2012-07-02	Fix up blacklist checking	Matthew Garrett
	This was not quite as bugfree as would be hoped for.
2012-07-02	Remove whitelisting - the firmware will handle it via LoadImage/StartImage	Matthew Garrett

2012-07-02	Update OpenSSL	Matthew Garrett

2012-07-02	Build a debug image	Matthew Garrett

2012-07-02	Fix type of buffersize	Matthew Garrett

2012-07-02	Remove redundant header	Matthew Garrett

2012-06-25	Fix get_variable	Matthew Garrett

2012-06-25	Add black/white listing	Matthew Garrett

2012-06-19	Fix build somewhat	Matthew Garrett

2012-06-19	Fix cert size	Matthew Garrett

2012-06-19	Fix error path	Matthew Garrett

2012-06-19	Remove old files	Matthew Garrett

2012-06-18	Add crypto libraries	Matthew Garrett