diff options
| author | Christian Breunig <christian@breunig.cc> | 2026-10-17 15:12:37 +0200 |
|---|---|---|
| committer | Christian Breunig <christian@breunig.cc> | 2026-10-17 15:12:37 +0200 |
| commit | e55dff911c837796ef9d0161ecd3c96dcd85333a (patch) | |
| tree | 48b7e808fe001ee691af49e94b5e16ff15965da9 /scripts | |
| parent | 53b4043e96469fdf2ea02e8ddb06fe9083e5ab40 (diff) | |
| download | vyos-build-e55dff911c837796ef9d0161ecd3c96dcd85333a.tar.gz vyos-build-e55dff911c837796ef9d0161ecd3c96dcd85333a.zip | |
secure-boot: T861: verify dev Kernel signature before replacing the image
The development signing path signed the Kernel in place and never checked
the result, so a failed sbsign could leave a broken Kernel behind and a bad
signature went unnoticed (sbverify --list only prints signatures).
The Kernel is now signed to a temporary file and verified against the dev
certificate before it replaces the original. On failure the temporary file
and the private key are removed and the build aborts, matching the HSM path.
Diffstat (limited to 'scripts')
0 files changed, 0 insertions, 0 deletions