Commit Graph

42 Commits

Author SHA1 Message Date
Peter Jones
1ecf8fe756 Fix bootloader path and whitelist certificates on ARM Aarch64.
Resolves: rhbz#1170289

Signed-off-by: Peter Jones <pjones@redhat.com>
2014-12-05 09:52:49 -05:00
Peter Jones
2d3b876a4b Get rid of unused patches.
Signed-off-by: Peter Jones <pjones@redhat.com>
2014-12-05 09:51:13 -05:00
Peter Jones
b20ba9cc96 Don't use a distro tag here; it just confuses people.
Signed-off-by: Peter Jones <pjones@redhat.com>
2014-10-30 11:05:09 -04:00
Peter Jones
28fad42a38 Update to 0.8
Related: rhbz#1148230
  Related: rhbz#1148231
  Related: rhbz#1148232

Signed-off-by: Peter Jones <pjones@redhat.com>
2014-10-14 10:32:16 -04:00
Peter Jones
f12ea5ef3a Adjust for newer gnu-efi.
Signed-off-by: Peter Jones <pjones@redhat.com>
2014-09-08 16:47:26 -04:00
Peter Jones
70e23bed96 Fix logic to handle SetupMode efi variable. 2013-11-06 14:32:15 -05:00
Peter Jones
7148df39f5 Fix a FreePool(NULL) call on machines too old for SB 2013-10-31 11:34:04 -04:00
Peter Jones
fecdfb1f13 Fix a FreePool(NULL) call on machines too old for SB 2013-10-30 16:45:13 -04:00
Peter Jones
ba65b5563e Update to 0.5
Signed-off-by: Peter Jones <pjones@redhat.com>
2013-10-04 17:20:31 -04:00
Peter Jones
fd458a376b Use a release url github generates automatically.
Signed-off-by: Peter Jones <pjones@redhat.com>
2013-08-07 15:40:25 -04:00
Peter Jones
732f24bf7f Update to 0.4
Signed-off-by: Peter Jones <pjones@redhat.com>
2013-06-11 15:25:33 -04:00
Peter Jones
57f3546846 Update to 0.4 2013-06-11 15:13:49 -04:00
Peter Jones
6abd8c8ccb Fix a variable handling bug in 0.3/0.4
Signed-off-by: Peter Jones <pjones@redhat.com>
2013-06-11 15:02:12 -04:00
Peter Jones
00ae24516c Update to 0.4 2013-06-11 09:08:11 -04:00
Peter Jones
b03890160e Use the right hash command line. 2013-06-07 17:17:26 -04:00
Peter Jones
6e8ffa5826 Require gnu-efi-3.0q for now.
- Don't allow mmx or sse during compilation.
- Re-organize this so all real signing happens in shim-signed instead.
- Split out mokutil
2013-06-07 16:56:37 -04:00
Peter Jones
fca313b4db Don't allow mmx or sse during compilation. 2013-06-07 14:41:33 -04:00
Peter Jones
345b99e1f9 Don't allow mmx or sse during compilation. 2013-06-07 14:27:12 -04:00
Peter Jones
87983bd45d Update for shim-0.3 2013-05-30 08:40:17 -04:00
Peter Jones
b4e78d5f20 Prepare for 0.3
Signed-off-by: Peter Jones <pjones@redhat.com>
2013-05-14 14:48:41 -04:00
Peter Jones
0371db891a Fix mokutil's idea of signature sizes.
Also update the fedora key.
2012-12-12 10:07:34 -05:00
Peter Jones
c7806c9e16 Don't provide /boot/efi/EFI/fedora/shim.efi . shim-signed provides that.
Signed-off-by: Peter Jones <pjones@redhat.com>
2012-12-03 15:35:44 -05:00
Matthew Garrett
fceb7acdba Fix secure_mode() always returning true 2012-11-28 12:18:07 -05:00
Matthew Garrett
ced6e726d1 Fix buildrequires 2012-11-26 21:22:48 -05:00
Matthew Garrett
3f38048252 Update to 0.2 2012-11-26 20:01:27 -05:00
Peter Jones
48a92b9e95 Add a list of dbx hashes here and also list dbx.esl as a source.
Signed-off-by: Peter Jones <pjones@redhat.com>
2012-11-01 15:35:22 -04:00
Peter Jones
4415ae3c3c We've produced some grub builds that weren't great.
So here's the dbx to ban them.
2012-11-01 15:32:38 -04:00
Peter Jones
dbb3eca67c Produce an unsigned shim 2012-10-22 11:14:19 -04:00
Peter Jones
881a8373b7 Actually still provide the "shim" dep until shim-signed is ready.
Signed-off-by: Peter Jones <pjones@redhat.com>
2012-10-22 11:13:00 -04:00
Peter Jones
aee33f1b0d Continue making /boot/.../shim.efi for now until shim-signed is ready.
Signed-off-by: Peter Jones <pjones@redhat.com>
2012-10-22 11:08:34 -04:00
Peter Jones
75567dae21 Add the Fedora CA public key.
Signed-off-by: Peter Jones <pjones@redhat.com>
2012-10-18 18:32:33 -04:00
Peter Jones
c476086209 Update to produce shim-unsigned.
This makes the package produced be named "shim-unsigned", and moves the
output to be /usr/share/shim/shim.{efi,sig}.

Signed-off-by: Peter Jones <pjones@redhat.com>
2012-10-18 15:42:49 -04:00
Peter Jones
efdbd820ed Update how embedded cert and signing work. 2012-08-14 14:40:17 -04:00
Peter Jones
83155d74d2 Automatically embed the Red Hat Test Certificate and sign with it. 2012-08-14 14:39:12 -04:00
Peter Jones
2e3808918a Add vendor cert-from-file magic 2012-08-14 14:39:12 -04:00
Peter Jones
189790d285 Give this patch some git header magic. 2012-08-14 14:39:12 -04:00
Peter Jones
bf4f4e53a5 Don't manually specify which signing certificate to use. 2012-08-13 15:45:52 -04:00
Josh Boyer
d9982da917 Add patch to fix image size calculation 2012-08-13 12:48:29 -04:00
Peter Jones
f5b1b98434 Sign our shim.efi with the RH test certificate.
For now, just sign with the test cert.
2012-08-13 11:47:45 -04:00
Peter Jones
bc4b8b9c44 Fix file path to match whichever distro it's compiled in.
We use a different directory for RHEL and Fedora.
2012-08-13 11:45:54 -04:00
Matthew Garrett
59b1f511d4 initial release 2012-08-13 11:39:34 -04:00
Fedora Release Engineering
76c2626a16 Initial setup of the repo 2012-08-13 14:57:44 +00:00