blob: 1ad02f5d5b29ead09eb701d10d6a3615137389c1 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
|
all: verify
verify: verify_$(EFI_ARCH)
verify_:
@echo "EFI_ARCH is not set, ABORT"
@false
verify_x64 verify_ia32:
mkdir -p build
# Verifying that the image is signed with the correct key.
sbverify --cert MicCorUEFCA2011_2011-06-27.crt shim$(EFI_ARCH).efi.signed
# Verifying that we have the correct binary.
sbattach --detach build/detached-sig shim$(EFI_ARCH).efi.signed
cp /usr/lib/shim/shim$(EFI_ARCH).efi build/shim$(EFI_ARCH).efi.signed
sbattach --attach build/detached-sig build/shim$(EFI_ARCH).efi.signed
cmp shim$(EFI_ARCH).efi.signed build/shim$(EFI_ARCH).efi.signed
sha256sum shim$(EFI_ARCH).efi.signed build/shim$(EFI_ARCH).efi.signed
verify_aa64:
@echo "Copying unsigned arm64 shim into place, sorry :-("
mkdir -p build
cp /usr/lib/shim/shim$(EFI_ARCH).efi build/shim$(EFI_ARCH).efi.signed
clean:
rm -rf build
|
