diff options
| author | Christian Breunig <christian@breunig.cc> | 2026-10-05 22:41:37 +0200 |
|---|---|---|
| committer | Christian Breunig <christian@breunig.cc> | 2026-10-05 22:41:37 +0200 |
| commit | da6941e2a80697e31c0f62c0f62c52f570ebb7e9 (patch) | |
| tree | 57ce7fd772092619ed58c5d6fe7483e06e5a31cf /interface-definitions/include | |
| parent | 87e0a46281746f92a0dde4c7d71c86aa00ec90ea (diff) | |
| download | vyos-1x-da6941e2a80697e31c0f62c0f62c52f570ebb7e9.tar.gz vyos-1x-da6941e2a80697e31c0f62c0f62c52f570ebb7e9.zip | |
op-mode: T861: add "show secure-boot detail" command
"show secure-boot" only reported whether Secure Boot is enabled, not who
signed the running Linux Kernel. An image signed by the VyOS CA could not be
told apart from one signed with a custom Machine Owner Key.
"show secure-boot detail" now lists issuer and subject of the Kernel image
signature certificates. The same information is added to the raw
"show version" data as "secure_boot_detail", issuer and subject delimited by
",". The key is only present when Secure Boot is enabled and a signature
could be read.
Diffstat (limited to 'interface-definitions/include')
0 files changed, 0 insertions, 0 deletions