| Age | Commit message (Collapse) | Author |
|---|
|
shim needs to verify that MokManager hasn't been modified, but we want to
be able to support configurations where shim is shipped without a vendor
certificate. This patch adds support for generating a certificate at build
time, incorporating the public half into shim and signing MokManager with
the private half. It uses pesign and nss, but still requires openssl for
key generation. Anyone using sbsign will need to figure this out for
themselves.
|
|
This seems pretty much functionally complete, so let's call it 0.2.
|
|
Conflicts:
Makefile
shim.c
|
|
In some rare corner cases, it's useful to add a blacklist of things that
were allowed by a copy of shim that was never signed by the UEFI signing
service. In these cases it's okay for them to go into a local dbx,
rather than taking up precious flash.
Signed-off-by: Peter Jones <pjones@redhat.com>
|
|
|
|
|
|
|
|
Adds targets for "test-archive" and "archive"
|
|
This allows you to specify the vendor_cert as a file on the command line
during build.
|
|
|
|
|
|
|
|
|
|
|
|
|
