Commit Graph

45 Commits

Author SHA1 Message Date
Peter Jones
eb9b0715fc Fix BOOT*.CSV and update release to -1
Signed-off-by: Peter Jones <pjones@redhat.com>
2018-04-30 11:01:07 -04:00
Peter Jones
d369b28d16 Update to shim 15.
Signed-off-by: Peter Jones <pjones@redhat.com>
2018-04-24 16:51:19 -04:00
Peter Jones
08e4c727b5 Get the shim-unsigned-aarch64 package version right.
Signed-off-by: Peter Jones <pjones@redhat.com>
2018-03-06 14:17:44 -05:00
Peter Jones
25cd900f0e Slightly less nerfing...
Signed-off-by: Peter Jones <pjones@redhat.com>
2018-03-06 14:12:18 -05:00
Peter Jones
fd0314c79d Nerf the hell out of all the checks to make sure I got this process right. sigh.
Signed-off-by: Peter Jones <pjones@redhat.com>
2018-03-06 11:09:53 -05:00
Peter Jones
acc5812c8e Back off to the thing we had in 13-0.8 until I get new signatures.
Signed-off-by: Peter Jones <pjones@redhat.com>
2018-03-06 10:56:38 -05:00
Peter Jones
99b1d687be Fix an inverted test that crept in in the signing macro. (Woops.)
Signed-off-by: Peter Jones <pjones@redhat.com>
2018-02-28 13:23:35 -05:00
Peter Jones
0abd456d3c Rename the .spec file and fix some paths.
Signed-off-by: Peter Jones <pjones@redhat.com>
2018-02-28 12:21:42 -05:00
Peter Jones
60deacd6ea Boil the sea.
Signed-off-by: Peter Jones <pjones@redhat.com>
2018-02-28 11:34:24 -05:00
Petr Šabata
5c4aeae5d0 Updating to 0.9 to enable building with gcc7 2017-05-02 12:36:15 +02:00
Peter Jones
1ecf8fe756 Fix bootloader path and whitelist certificates on ARM Aarch64.
Resolves: rhbz#1170289

Signed-off-by: Peter Jones <pjones@redhat.com>
2014-12-05 09:52:49 -05:00
Peter Jones
b20ba9cc96 Don't use a distro tag here; it just confuses people.
Signed-off-by: Peter Jones <pjones@redhat.com>
2014-10-30 11:05:09 -04:00
Peter Jones
28fad42a38 Update to 0.8
Related: rhbz#1148230
  Related: rhbz#1148231
  Related: rhbz#1148232

Signed-off-by: Peter Jones <pjones@redhat.com>
2014-10-14 10:32:16 -04:00
Peter Jones
f12ea5ef3a Adjust for newer gnu-efi.
Signed-off-by: Peter Jones <pjones@redhat.com>
2014-09-08 16:47:26 -04:00
Peter Jones
70e23bed96 Fix logic to handle SetupMode efi variable. 2013-11-06 14:32:15 -05:00
Peter Jones
7148df39f5 Fix a FreePool(NULL) call on machines too old for SB 2013-10-31 11:34:04 -04:00
Peter Jones
fecdfb1f13 Fix a FreePool(NULL) call on machines too old for SB 2013-10-30 16:45:13 -04:00
Peter Jones
ba65b5563e Update to 0.5
Signed-off-by: Peter Jones <pjones@redhat.com>
2013-10-04 17:20:31 -04:00
Peter Jones
fd458a376b Use a release url github generates automatically.
Signed-off-by: Peter Jones <pjones@redhat.com>
2013-08-07 15:40:25 -04:00
Peter Jones
57f3546846 Update to 0.4 2013-06-11 15:13:49 -04:00
Peter Jones
6abd8c8ccb Fix a variable handling bug in 0.3/0.4
Signed-off-by: Peter Jones <pjones@redhat.com>
2013-06-11 15:02:12 -04:00
Peter Jones
00ae24516c Update to 0.4 2013-06-11 09:08:11 -04:00
Peter Jones
b03890160e Use the right hash command line. 2013-06-07 17:17:26 -04:00
Peter Jones
6e8ffa5826 Require gnu-efi-3.0q for now.
- Don't allow mmx or sse during compilation.
- Re-organize this so all real signing happens in shim-signed instead.
- Split out mokutil
2013-06-07 16:56:37 -04:00
Peter Jones
345b99e1f9 Don't allow mmx or sse during compilation. 2013-06-07 14:27:12 -04:00
Peter Jones
87983bd45d Update for shim-0.3 2013-05-30 08:40:17 -04:00
Peter Jones
b4e78d5f20 Prepare for 0.3
Signed-off-by: Peter Jones <pjones@redhat.com>
2013-05-14 14:48:41 -04:00
Peter Jones
0371db891a Fix mokutil's idea of signature sizes.
Also update the fedora key.
2012-12-12 10:07:34 -05:00
Peter Jones
c7806c9e16 Don't provide /boot/efi/EFI/fedora/shim.efi . shim-signed provides that.
Signed-off-by: Peter Jones <pjones@redhat.com>
2012-12-03 15:35:44 -05:00
Matthew Garrett
fceb7acdba Fix secure_mode() always returning true 2012-11-28 12:18:07 -05:00
Matthew Garrett
ced6e726d1 Fix buildrequires 2012-11-26 21:22:48 -05:00
Matthew Garrett
3f38048252 Update to 0.2 2012-11-26 20:01:27 -05:00
Peter Jones
48a92b9e95 Add a list of dbx hashes here and also list dbx.esl as a source.
Signed-off-by: Peter Jones <pjones@redhat.com>
2012-11-01 15:35:22 -04:00
Peter Jones
dbb3eca67c Produce an unsigned shim 2012-10-22 11:14:19 -04:00
Peter Jones
881a8373b7 Actually still provide the "shim" dep until shim-signed is ready.
Signed-off-by: Peter Jones <pjones@redhat.com>
2012-10-22 11:13:00 -04:00
Peter Jones
aee33f1b0d Continue making /boot/.../shim.efi for now until shim-signed is ready.
Signed-off-by: Peter Jones <pjones@redhat.com>
2012-10-22 11:08:34 -04:00
Peter Jones
75567dae21 Add the Fedora CA public key.
Signed-off-by: Peter Jones <pjones@redhat.com>
2012-10-18 18:32:33 -04:00
Peter Jones
c476086209 Update to produce shim-unsigned.
This makes the package produced be named "shim-unsigned", and moves the
output to be /usr/share/shim/shim.{efi,sig}.

Signed-off-by: Peter Jones <pjones@redhat.com>
2012-10-18 15:42:49 -04:00
Peter Jones
efdbd820ed Update how embedded cert and signing work. 2012-08-14 14:40:17 -04:00
Peter Jones
83155d74d2 Automatically embed the Red Hat Test Certificate and sign with it. 2012-08-14 14:39:12 -04:00
Peter Jones
bf4f4e53a5 Don't manually specify which signing certificate to use. 2012-08-13 15:45:52 -04:00
Josh Boyer
d9982da917 Add patch to fix image size calculation 2012-08-13 12:48:29 -04:00
Peter Jones
f5b1b98434 Sign our shim.efi with the RH test certificate.
For now, just sign with the test cert.
2012-08-13 11:47:45 -04:00
Peter Jones
bc4b8b9c44 Fix file path to match whichever distro it's compiled in.
We use a different directory for RHEL and Fedora.
2012-08-13 11:45:54 -04:00
Matthew Garrett
59b1f511d4 initial release 2012-08-13 11:39:34 -04:00