efi-boot-shim.git - (mirror of https://github.com/vyos/efi-boot-shim.git)

Age	Commit message (Collapse)	Author
2012-10-11	Split out hashing	Matthew Garrett
	We want to be able to generate hashes, so split out the hash generation function from the verification function
2012-10-11	Add SHA1 support	Matthew Garrett
	In theory vendors could blacklist binaries with SHA1, so make sure we calculate and check that hash as well.
2012-10-06	Fall back to MokManager if grub failed to validate	Matthew Garrett
	If we can't verify grub, fall back to MokManager. This permits shipping a copy of shim and MokManager without distributing a key, letting distributions provide their own for user installation.
2012-10-02	Use LibDeleteVariable in gnu-efi	Gary Ching-Pang Lin

2012-09-21	Make sure the variables are not broken	Gary Ching-Pang Lin

2012-09-21	Reject the binary when there is no key in MokList	Gary Ching-Pang Lin

2012-09-20	Check the MOK list correctly	Gary Ching-Pang Lin

2012-09-19	Abandon the variable, MokMgmt	Gary Ching-Pang Lin

2012-09-11	Copy the MOK list to a RT variable	Gary Ching-Pang Lin
	The RT variable, MokListRT, is a copy of MokList so that the runtime applications can synchronize the key list without touching the BS variable.
2012-09-11	Use the machine owner keys to verify images	Gary Ching-Pang Lin

2012-09-11	Always try StartImage first	Gary Ching-Pang Lin

2012-09-11	Only launch MokManager when necessary	Gary Ching-Pang Lin

2012-09-11	Retrieve attributes of variables	Gary Ching-Pang Lin
	We have to make sure the machine owner key is stored in a BS variable.
2012-09-07	Merge branch 'master' into mok-prototype3	Gary Ching-Pang Lin
	Conflicts: shim.c
2012-09-07	Load MokManager for MOK management	Gary Ching-Pang Lin

2012-09-07	Make the image loading process more generic	Gary Ching-Pang Lin

2012-09-06	Break out of our db checking loop at the appropriate time.	Peter Jones
	The break in check_db_cert is at the wrong level due to a typo in indentation, and as a result only the last cert in the list can correctly match. Rectify that. Signed-off-by: Peter Jones <pjones@redhat.com>
2012-09-06	Use the file size, not the image size field, for verification.	Matthew Garrett

2012-09-06	Allow specification of vendor_cert through a build command line option.	Peter Jones
	This allows you to specify the vendor_cert as a file on the command line during build.
2012-07-13	Handle slightly stranger device paths	Matthew Garrett

2012-07-11	Make path generation more sensible	Matthew Garrett

2012-07-11	Make sure ImageBase is set appropriately in the loaded_image protocol	Matthew Garrett

2012-07-05	Re-add whitelisting - needed for protocol validation	Matthew Garrett

2012-07-05	Check whether secure boot is enabled before performing verify call	Matthew Garrett

2012-07-02	Fix up blacklist checking	Matthew Garrett
	This was not quite as bugfree as would be hoped for.
2012-07-02	Remove whitelisting - the firmware will handle it via LoadImage/StartImage	Matthew Garrett

2012-07-02	Fix type of buffersize	Matthew Garrett

2012-06-25	Fix get_variable	Matthew Garrett

2012-06-25	Add black/white listing	Matthew Garrett

2012-06-19	Fix cert size	Matthew Garrett

2012-06-18	Uninstall protocol on exit	Matthew Garrett

2012-06-18	Check binary against blacklist	Matthew Garrett

2012-06-18	Attempt to start image using LoadImage/StartImage first	Matthew Garrett

2012-06-18	Check that platform is in user mode before doing any validation	Matthew Garrett

2012-06-07	Minor cleanups	Matthew Garrett

2012-06-05	Rename variables	Matthew Garrett

2012-06-05	Install a protocol for sharing code with grub	Matthew Garrett

2012-05-30	Some cleanups	Matthew Garrett

2012-05-30	Add image verification	Matthew Garrett

2012-05-08	Fix path generation	Matthew Garrett

2012-04-11	Some additional paranoia	Matthew Garrett

2012-04-11	Initial commit	Matthew Garrett