Age | Commit message (Collapse) | Author | |
---|---|---|---|
2012-09-26 | Filter out newline from the password array | Gary Ching-Pang Lin | |
2012-09-26 | correct wording | Gary Ching-Pang Lin | |
2012-09-26 | Build debug image for all efi files | Gary Ching-Pang Lin | |
2012-09-24 | Define the max length of password | Gary Ching-Pang Lin | |
2012-09-24 | Request a password to verify the key list | Gary Ching-Pang Lin | |
The password must contain 8 characters at least and 16 characters at most and will be hashed with the key list altogether. The keys in MokNew won't be allowed to be enrolled unless the user provides the correct password. | |||
2012-09-21 | Erase stored keys when there is no key in the new key list | Gary Ching-Pang Lin | |
2012-09-21 | Make sure the variables are not broken | Gary Ching-Pang Lin | |
2012-09-21 | Allow the new keys to be listed again | Gary Ching-Pang Lin | |
2012-09-21 | Reject the binary when there is no key in MokList | Gary Ching-Pang Lin | |
2012-09-20 | Make the key list interactive | Gary Ching-Pang Lin | |
2012-09-20 | Make sure the time string is set | Gary Ching-Pang Lin | |
2012-09-20 | Improve the layout of the key info | Gary Ching-Pang Lin | |
2012-09-20 | Remove the unused debug message | Gary Ching-Pang Lin | |
2012-09-20 | Check the MOK list correctly | Gary Ching-Pang Lin | |
2012-09-19 | Simplify the key management | Gary Ching-Pang Lin | |
Move the key list building and management to mokutil to keep MokManager as simple as possible. | |||
2012-09-19 | Abandon the variable, MokMgmt | Gary Ching-Pang Lin | |
2012-09-11 | Copy the MOK list to a RT variable | Gary Ching-Pang Lin | |
The RT variable, MokListRT, is a copy of MokList so that the runtime applications can synchronize the key list without touching the BS variable. | |||
2012-09-11 | Use the machine owner keys to verify images | Gary Ching-Pang Lin | |
2012-09-11 | Add a separate efi application to manage MOKs | Gary Ching-Pang Lin | |
2012-09-11 | Always try StartImage first | Gary Ching-Pang Lin | |
2012-09-11 | Only launch MokManager when necessary | Gary Ching-Pang Lin | |
2012-09-11 | Retrieve attributes of variables | Gary Ching-Pang Lin | |
We have to make sure the machine owner key is stored in a BS variable. | |||
2012-09-07 | Merge branch 'master' into mok-prototype3 | Gary Ching-Pang Lin | |
Conflicts: shim.c | |||
2012-09-07 | Load MokManager for MOK management | Gary Ching-Pang Lin | |
2012-09-07 | Make the image loading process more generic | Gary Ching-Pang Lin | |
2012-09-06 | Fix data alignment on vendor_cert so we don't wind up with padding. | Peter Jones | |
2012-09-06 | Add some convenience make targets. | Peter Jones | |
Adds targets for "test-archive" and "archive" | |||
2012-09-06 | Break out of our db checking loop at the appropriate time. | Peter Jones | |
The break in check_db_cert is at the wrong level due to a typo in indentation, and as a result only the last cert in the list can correctly match. Rectify that. Signed-off-by: Peter Jones <pjones@redhat.com> | |||
2012-09-06 | Use the file size, not the image size field, for verification. | Matthew Garrett | |
2012-09-06 | Allow specification of vendor_cert through a build command line option. | Peter Jones | |
This allows you to specify the vendor_cert as a file on the command line during build. | |||
2012-09-06 | dos2unix PeImage.h | Peter Jones | |
2012-07-28 | Add basic documentation | Matthew Garrett | |
2012-07-13 | Handle slightly stranger device paths | Matthew Garrett | |
2012-07-11 | Make path generation more sensible | Matthew Garrett | |
2012-07-11 | Make sure ImageBase is set appropriately in the loaded_image protocol | Matthew Garrett | |
2012-07-09 | Add copyright file | Matthew Garrett | |
2012-07-09 | Update TODO | Matthew Garrett | |
2012-07-09 | Remove temp file checked in by accident | Matthew Garrett | |
2012-07-09 | Improve makefile | Matthew Garrett | |
2012-07-09 | Make it easier to update Cryptlib | Matthew Garrett | |
2012-07-09 | Cryptlib update | Matthew Garrett | |
2012-07-05 | Re-add whitelisting - needed for protocol validation | Matthew Garrett | |
2012-07-05 | We're not MSABI, so don't advertise this as such | Matthew Garrett | |
2012-07-05 | Check whether secure boot is enabled before performing verify call | Matthew Garrett | |
2012-07-02 | Fix up blacklist checking | Matthew Garrett | |
This was not quite as bugfree as would be hoped for. | |||
2012-07-02 | Remove whitelisting - the firmware will handle it via LoadImage/StartImage | Matthew Garrett | |
2012-07-02 | Update OpenSSL | Matthew Garrett | |
2012-07-02 | Build a debug image | Matthew Garrett | |
2012-07-02 | Fix type of buffersize | Matthew Garrett | |
2012-07-02 | Remove redundant header | Matthew Garrett | |