sbsigntools

vbatts/sbsigntools

Fork 0

Commit graph

9cfca9fe7a Version 0.9.5 master v0.9.5 James Bottomley 2023-03-19 17:07:59 -0400
75d8405eca Fix openssl-3.0 issue involving ASN1 xxx_it Jeremi Piotrowski 2021-09-27 17:27:27 +0200
d6e4bff8f1 Add support for openssl-3 James Bottomley 2022-06-13 16:32:45 -0400
25af2eb5e3 sbsigntool: add support for RISC-V 64-bit PE/COFF images next Andreas Schwab 2021-06-04 14:36:17 +0200
4b8fc11877 sbvarsign: do not include PKCS#7 attributes Daniel Axtens 2022-02-21 11:22:47 +1100
f12484869c sbkeysync: Don't ignore errors from insert_new_keys() dann frazier 2020-08-12 15:27:08 -0600
d52f7bbb73 Version 0.9.4 v0.9.4 James Bottomley 2020-06-11 16:32:13 -0700
e17dc20591 docs: add man page for sbkeysync James Bottomley 2020-06-06 15:21:11 -0700
ff96a59046 Enable -Werror for builds James Bottomley 2020-06-06 15:08:01 -0700
e3f7d27541 Fix errors on 32 bit James Bottomley 2020-06-06 15:34:02 -0700
5aeb513916 sbverify: refer to unused function James Bottomley 2020-06-06 14:50:51 -0700
6b7d5ccb28 sbvarsign: remove unused global variable James Bottomley 2020-06-06 14:50:33 -0700
311d6c2b9c Fix some openssl 1.1.0 deprecated functions James Bottomley 2020-06-06 14:44:54 -0700
6c2b07fa1c Tests: Add intermediate certificate tests to the sign-verify cases James Bottomley 2020-06-05 18:34:55 -0700
df27a417b9 sbverify: fix verification with intermediate certificates James Bottomley 2020-06-05 18:29:07 -0700
7d6210e4b1 sbsign: allow for adding intermediate certificates AKASHI Takahiro 2020-06-04 16:50:22 +0900
fe88da5f66 Version 0.9.3 v0.9.3 James Bottomley 2020-01-09 09:33:38 -0800
ea4e6db5d9 README: update git location and add mailing list information James Bottomley 2020-01-09 09:29:39 -0800
2ed8eebcc5 sbvarsign: fix "EFI_VARIABLE_AUTHENTICATION_2.TimeStamp.Year" assignment Laszlo Ersek 2020-01-09 18:13:02 +0100
0dc3d4b521 Fix PE/COFF checksum calculation Steve McIntyre 2019-04-19 23:14:46 +0100
216dbd3331 Version 0.9.2 v0.9.2 James Bottomley 2019-01-09 16:09:37 -0800
98d3ce77b4 src/image.c: remove alignment of regions James Bottomley 2019-01-09 16:04:01 -0800
73a13fb7e3 sbvarsign: use SignedData instead of PKCS7 for authenticated updates James Bottomley 2019-01-09 15:52:34 -0800
704d2c2506 Fix Fedora Build Guy Lunardi 2018-02-20 14:42:15 -0500
a631793f2d Version 0.9.1 v0.9.1 James Bottomley 2017-10-28 14:23:16 +0100
efc424c8ee sbsign, sbvarsign: support engine based private keys James Bottomley 2017-10-28 14:21:24 +0100
62c9352519 Version 0.9 v0.9 James Bottomley 2017-10-19 11:17:23 -0700
8e184454fd Fix Debian 8 and Leap_42.1 builds James Bottomley 2017-10-19 11:09:41 -0700
f065bb5705 tests: Fix up to work on arbitrary architectures James Bottomley 2017-10-19 09:20:42 -0700
cbbafe244b tests/detach-remove.sh: fix for i386 pecoff size problems James Bottomley 2017-10-18 18:17:29 -0700
bc6ff99d36 tests: fix up the generation of the test pecoff binary for gcc-7.2 James Bottomley 2017-10-18 17:20:56 -0700
5b79ed2179 tests: fix signature resign/reattach test problems James Bottomley 2017-10-18 17:01:21 -0700
79d0c44afb Update OpenSSL API usage to support OpenSSL 1.1 Ben Hutchings 2016-06-26 22:04:29 +0200
73a261f238 make check: fix test environment problem James Bottomley 2017-10-18 16:48:01 -0700
e9626fefa1 Add OPENSSL_config(NULL) to each binary to load openssl.cnf James Bottomley 2016-11-16 10:27:54 -0500
df8303a4e3 Version: 0.8 v0.8 James Bottomley 2016-02-14 12:04:45 -0800
5f7f8f3ded sbkeysync: don't include efi.h James Bottomley 2016-02-12 15:54:31 -0800
3b4e9bb901 configure: build on arm James Bottomley 2016-02-12 15:46:44 -0800
f37c1858fc sbverify: Clear out content for the signature we're building Mathieu Trudel-Lapierre 2016-01-27 12:18:28 -0800
1c9dfe7364 Handle odd buffer lengths in checksum Linn Crosetto 2015-10-27 15:31:12 -0600
2c2f71313e Support openssl 1.0.2b and above Steve Langasek 2015-07-15 08:48:25 -0700
ca6ad33055 sbsigntool: add support for ARM and Aarch64 PE/COFF images Ard Biesheuvel 2016-01-27 13:17:19 +0100
84d8361642 sbsigntool: fix handling of zero sized sections Ard Biesheuvel 2016-01-27 13:17:18 +0100
38ebdc8a66 sbsigntool: remove doubly defined IMAGE_FILE_MACHINE_AMD64 Ard Biesheuvel 2016-01-27 11:47:28 -0800
a03f9d4d7c sbverify: add extra expiry errors to ignore James Bottomley 2016-01-27 11:42:53 -0800
be1f3d8350 Update the PE checksum field using the somewhat-underdocumented algorithm, so that we match the Microsoft implementation in our signature generation. Steve Langasek 2016-01-27 11:06:02 -0800
706bec1a95 OBS add correcting definition of EFI_ARCH James Bottomley 2015-01-06 08:00:28 -0800
ed53774c2f Version 0.7 v0.7 James Bottomley 2014-12-19 16:44:54 -0800
f6115a8045 sbsign, sbattach, sbverify: add multiple signature support James Bottomley 2014-12-19 16:10:34 -0800
6b493361c2 sbverify: fix verification James Bottomley 2014-12-19 11:37:30 -0800
35e2e074e3 Clear ssl errors after loading everyting James Bottomley 2014-12-19 10:59:05 -0800
592ec2188f Fix for multi-sign James Bottomley 2013-09-30 19:25:37 -0700
b963c5cb38 image.c: clear image variable James Bottomley 2013-04-11 21:12:17 -0700
951ee95a30 sbkeysync: add corrected efivars magic Jeremy Kerr 2012-11-13 20:22:57 +0800
a7577f56b3 Version 0.6 Jeremy Kerr 2012-10-11 20:32:32 +0800
050f003ce7 sbverify: explicitly trust all certificates given in --cert arguments Jeremy Kerr 2012-10-10 15:57:35 +0800
c98692a71f sbverify: Add --verbose option Jeremy Kerr 2012-10-10 15:56:58 +0800
cd51a26911 Version 0.5 Jeremy Kerr 2012-10-10 09:00:55 +0800
ab63e31bb8 sbkeysync: change default efivarfs mountpoint to /sys/.../efivars/ Jeremy Kerr 2012-10-08 12:07:43 +0800
6bfa9f3349 Version 0.4 Jeremy Kerr 2012-10-02 17:12:02 +0800
de78e0cde9 image: improve handling of unaligned section tables Jeremy Kerr 2012-10-02 11:44:39 +0800
142ba5c1b3 image: use data_size in cert table header Jeremy Kerr 2012-10-02 11:22:37 +0800
63cfc10ce0 image: improve section table parsing Jeremy Kerr 2012-09-28 15:45:42 +0800
274d4df0ff image: Allow variable sized data directories Jeremy Kerr 2012-09-28 09:56:48 +0800
cf747fcca3 sbvarsign: fix incorrect pointer in add_auth_descriptor Jeremy Kerr 2012-09-05 11:17:08 +0800
c933b5e8fd sbvarsign: auth descriptor hash does not cover the \0 in the varname Jeremy Kerr 2012-09-05 11:16:42 +0800
15354eaa4e sbkeysync: fix siglist iteration Jeremy Kerr 2012-08-24 23:03:49 +0800
41c8bb9ea2 sbvarsign: Improve default GUID choice Jeremy Kerr 2012-08-24 20:57:00 +0800
03e6a4e2b3 skkeysync: Add PK-handing code Jeremy Kerr 2012-08-24 18:01:37 +0800
74153741c4 sbkeysync: Refactor signature database data structures Jeremy Kerr 2012-08-24 13:08:57 +0800
b4773c902a sbkeysync: fix invalid free in keystore_read_entry Jeremy Kerr 2012-08-23 21:33:53 +0800
41c741fe13 sbkeysync: Improve error handling in read_firmware_key_database Jeremy Kerr 2012-08-23 18:52:48 +0800
16c09d22a6 sbkeysync: insert new keys Jeremy Kerr 2012-08-23 17:41:49 +0800
ae1523673e sbkeysync: print keystore before key databases Jeremy Kerr 2012-08-23 14:14:45 +0800
37d838a43d sbkeysync: Find keys missing from firmware key databases Jeremy Kerr 2012-08-23 14:13:38 +0800
60586e122f sbkeysync: Rename struct keystore_entry->list to keystore_list Jeremy Kerr 2012-08-23 11:29:47 +0800
ae3344f5eb sbkeysync: Generate and print key descriptions Jeremy Kerr 2012-08-22 18:15:57 +0800
7dc407e311 sbkeysync: add comment to sigdb_iterate Jeremy Kerr 2012-08-22 17:53:58 +0800
bd9de8eadd sbkeysync: Change key_id to key_parse Jeremy Kerr 2012-08-22 17:51:10 +0800
22450d8c40 sbkeysync: Print filesystem key databases Jeremy Kerr 2012-08-22 17:23:29 +0800
54e1fbed30 sbkeysync: read keystore into kdb->filesystem_keys Jeremy Kerr 2012-08-21 18:26:33 +0800
5527ef2db4 sbkeysync: Unify key_database Jeremy Kerr 2012-08-21 15:39:43 +0800
1bdfb9acb8 sbkeysync: Add key_database->filesystem_keys Jeremy Kerr 2012-08-21 15:15:11 +0800
bdeb14370d sbkeysync: keystore -> fs_keystore Jeremy Kerr 2012-08-21 15:11:38 +0800
98911a7f4c sbkeysync: pass data buffer (instead of EFI_SIGNATURE_DATA) to key_id Jeremy Kerr 2012-08-21 13:56:41 +0800
1a431a5a2d sbkeysync: add keystore_entry->root Jeremy Kerr 2012-08-21 12:10:25 +0800
add8d00f31 sbkeysync: Add --keystore and --no-default-keystores options Jeremy Kerr 2012-08-21 11:59:42 +0800
a151ffdb9d sbkeysync: Add --verbose option and conditionally print debug output Jeremy Kerr 2012-08-21 11:32:29 +0800
d5ce9e3f36 sbkeysync: Add keystore parsing functions Jeremy Kerr 2012-08-20 17:19:33 +0800
2f82c545c2 sbkeysync: Add --efivars-dir option to specific different locations for var files Jeremy Kerr 2012-08-20 16:04:53 +0800
5757f27812 sbkeysync: Add X509 key parsing Jeremy Kerr 2012-08-20 15:51:47 +0800
c03ca4f73f sbkeysync: Add key ID data to print_key_database() Jeremy Kerr 2012-08-20 15:51:04 +0800
72ec025d79 sbkeysync: read & print signature databases Jeremy Kerr 2012-08-20 14:47:50 +0800
f8024a6a3b Move EFI_CERT types to efivars.h Jeremy Kerr 2012-08-20 14:47:02 +0800
f9eed9cc42 fileio: Add fileio_read_file_noerror() Jeremy Kerr 2012-08-24 19:58:21 +0800
07328d85c3 sbvarsign: Start with a default set of variable attributes Jeremy Kerr 2012-08-23 19:35:32 +0800
88625a586c efivars: Move EFI_VARIABLE_* attributes to efivars.h Jeremy Kerr 2012-08-23 19:07:52 +0800
a7228c8307 sbsiglist: fix signature size check Jeremy Kerr 2012-08-22 18:15:00 +0800
fd553e841a sbvarsign: WIN_CERTIFICATE.dwLength should include the header size Jeremy Kerr 2012-08-22 16:50:04 +0800
feddcb4f4f sbvarsign: Fix invalid sizeof() for zeroing timestamp data Jeremy Kerr 2012-08-22 14:57:00 +0800