summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2012-11-01Merge branch 'mok' into netbootMatthew Garrett
Conflicts: Makefile shim.c
2012-11-01Fix AuthenticodeVerify loopMatthew Garrett
Cert needs to be modified inside the Index loop, not outside it. This is unlikely to ever trigger since there will typically only be one X509 certificate per EFI_SIGNATURE_LIST, but fix it anyway.
2012-11-01Fix AuthenticodeVerify loopMatthew Garrett
Cert needs to be modified inside the Index loop, not outside it. This is unlikely to ever trigger since there will typically only be one X509 certificate per EFI_SIGNATURE_LIST, but fix it anyway.
2012-11-01Fix signature checkingMatthew Garrett
We could potentially find a valid signature and then fail to validate it due to not breaking out of the outer while loop.
2012-11-01Fix signature checkingMatthew Garrett
We could potentially find a valid signature and then fail to validate it due to not breaking out of the outer while loop.
2012-11-01Fix double freeMatthew Garrett
load_image() didn't allocate PathName, don't have it free it.
2012-11-01Fix double freeMatthew Garrett
load_image() didn't allocate PathName, don't have it free it.
2012-11-01Fix up some typesMatthew Garrett
Type-checking the UEFI calls picked up a couple of problems. Fix them up.
2012-11-01Fix up some typesMatthew Garrett
Type-checking the UEFI calls picked up a couple of problems. Fix them up.
2012-10-30Add documentation of the Mok variablesMatthew Garrett
Brief overview of the function and format of the various variables used by Shim and MokManager.
2012-10-30Add documentation of the Mok variablesMatthew Garrett
Brief overview of the function and format of the various variables used by Shim and MokManager.
2012-10-30Merge branch 'mok' of github.com:mjg59/shim into mokMatthew Garrett
2012-10-30Merge branch 'mok' of github.com:mjg59/shim into mokMatthew Garrett
2012-10-30Check the vendor blacklist correctlyGary Ching-Pang Lin
2012-10-30Check the vendor blacklist correctlyGary Ching-Pang Lin
2012-10-30Initialize the size of vendor dbx as 0Gary Ching-Pang Lin
The size of vendor dbx must be 0 if there is no vendor dbx provided or the functions of db check will crash.
2012-10-30Initialize the size of vendor dbx as 0Gary Ching-Pang Lin
The size of vendor dbx must be 0 if there is no vendor dbx provided or the functions of db check will crash.
2012-10-24Clean up password settingMatthew Garrett
Permit clearing of the password, and avoid a case where choosing not to set a password would result in an error message on exit. Fix the same problem with MokSB.
2012-10-24Clean up password settingMatthew Garrett
Permit clearing of the password, and avoid a case where choosing not to set a password would result in an error message on exit. Fix the same problem with MokSB.
2012-10-24Improve signature validation enable/disableMatthew Garrett
The logic used in checking the signature validation password was a bit ugly. Improve that so it behaves rather more as expected.
2012-10-24Improve signature validation enable/disableMatthew Garrett
The logic used in checking the signature validation password was a bit ugly. Improve that so it behaves rather more as expected.
2012-10-24Boot unsigned binaries if we're not in secure modeMatthew Garrett
read_header would fail if the binary was unsigned, even if we weren't then going to verify the signature. Move that check to the verify function instead.
2012-10-24Boot unsigned binaries if we're not in secure modeMatthew Garrett
read_header would fail if the binary was unsigned, even if we weren't then going to verify the signature. Move that check to the verify function instead.
2012-10-24Miscellaneous small fixupsMatthew Garrett
Fixes for some small bugs noticed during review
2012-10-24Miscellaneous small fixupsMatthew Garrett
Fixes for some small bugs noticed during review
2012-10-23Add another missing screen clearingMatthew Garrett
Another case where we were drawing text over existing text.
2012-10-23Add another missing screen clearingMatthew Garrett
Another case where we were drawing text over existing text.
2012-10-23Merge branch 'mok' of github.com:mjg59/shim into mokMatthew Garrett
2012-10-23Merge branch 'mok' of github.com:mjg59/shim into mokMatthew Garrett
2012-10-23Fix password hash calculationMatthew Garrett
This was hardcoded, rather than being based on the actual password length, resulting in incorrect hashes being generated.
2012-10-23Fix password hash calculationMatthew Garrett
This was hardcoded, rather than being based on the actual password length, resulting in incorrect hashes being generated.
2012-10-23Update image validation enable/disableMatthew Garrett
Update this to match the new mokutil behaviour
2012-10-23Update image validation enable/disableMatthew Garrett
Update this to match the new mokutil behaviour
2012-10-23Delete MokList properlyMatthew Garrett
A cut and paste error meant that attempts to delete MokList were instead appending a zero-length addition.
2012-10-23Delete MokList properlyMatthew Garrett
A cut and paste error meant that attempts to delete MokList were instead appending a zero-length addition.
2012-10-23Clean up checks for MokManager entryMatthew Garrett
Add a helper function and tidy up the calls for getting into MokManager
2012-10-23Clean up checks for MokManager entryMatthew Garrett
Add a helper function and tidy up the calls for getting into MokManager
2012-10-23Fix key database parsingMatthew Garrett
The pointer to the certificate needs to be incremented by the size of the entire certificate, not just the certificate data.
2012-10-23Fix key database parsingMatthew Garrett
The pointer to the certificate needs to be incremented by the size of the entire certificate, not just the certificate data.
2012-10-23Support a vendor-specific DBX list.Peter Jones
In some rare corner cases, it's useful to add a blacklist of things that were allowed by a copy of shim that was never signed by the UEFI signing service. In these cases it's okay for them to go into a local dbx, rather than taking up precious flash. Signed-off-by: Peter Jones <pjones@redhat.com>
2012-10-23Support a vendor-specific DBX list.Peter Jones
In some rare corner cases, it's useful to add a blacklist of things that were allowed by a copy of shim that was never signed by the UEFI signing service. In these cases it's okay for them to go into a local dbx, rather than taking up precious flash. Signed-off-by: Peter Jones <pjones@redhat.com>
2012-10-18Clear screen before promptingMatthew Garrett
We were drawing prompts on top of existing text, which was less than ideal.
2012-10-18Clear screen before promptingMatthew Garrett
We were drawing prompts on top of existing text, which was less than ideal.
2012-10-18Don't print SHA1 sum when calculating file fingerprintsMatthew Garrett
There's no point in printing the SHA1 of a SHA256...
2012-10-18Don't print SHA1 sum when calculating file fingerprintsMatthew Garrett
There's no point in printing the SHA1 of a SHA256...
2012-10-18Clean up timeout counter handlingMatthew Garrett
Reduce menu redrawing by only redrawing the invalidated section of the menu during the timeout countdown.
2012-10-18Clean up timeout counter handlingMatthew Garrett
Reduce menu redrawing by only redrawing the invalidated section of the menu during the timeout countdown.
2012-10-18Add MOK password authMatthew Garrett
Add support for setting an MOK password. The OS passes down a password hash. MokManager then presents an option for setting a password. Selecting it prompts the user for the same password again. If they match, the hash is enrolled into a boot services variable and MokManager will prompt for the password whenever it's started.
2012-10-18Add MOK password authMatthew Garrett
Add support for setting an MOK password. The OS passes down a password hash. MokManager then presents an option for setting a password. Selecting it prompts the user for the same password again. If they match, the hash is enrolled into a boot services variable and MokManager will prompt for the password whenever it's started.
2012-10-18Pause on callback failuresMatthew Garrett
If a callback returns any kind of failure, wait for a keypress in order to give the user an opportunity to read any failure messages.
generated by cgit v1.2.3 (git 2.39.1) at 2025-08-26 09:27:55 +0000