vbatts/sbsigntools
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
my fork of https://git.kernel.org/pub/scm/linux/kernel/git/jejb/sbsigntools.git
59 commits 2 branches 8 tags 366 KiB
C 91.9%
Shell 4.4%
Makefile 2.2%
M4 1.5%
Find a file
James Bottomley bf7e97bd1c image: fix incorrect assumption about signature header 
The sbsign tools appear to assume that WIN_CERTIFICATE.dwLength is the
length of the signature.  It's not, it's the length of the signature
plus the length of the WIN_CERTIFICATE header.  UEFI Version 2.3.1,
Errata A explicitly states this in section 27.2.5 (Code Definitions).

I found this because I've been playing around with the tianocore secure
boot UEFI images and I couldn't get efi binaries signed with your tools
to verify.  When you apply the fix, I've got the binaries to verify (at
least with X509 KEK signatures).

Signed-off-by: James Bottomley <JBottomley@Parallels.com>
Signed-off-by: Jeremy Kerr <jeremy.kerr@canonical.com>
2012-06-28 10:47:55 +08:00
coff coff: remove unneeded coff includes 2012-04-24 08:38:57 +08:00
docs docs: Add simple manpage for sbattach 2012-06-13 14:28:57 +08:00
lib autoconfiscate 2012-05-28 22:35:48 +08:00
tests tests: Add a test to check invalid PKCS7 signature attaching 2012-06-19 17:11:25 +08:00
.gitmodules Move ccan submodule 2012-05-24 15:17:18 +08:00
autogen.sh Fix warnings from added -W flags 2012-06-11 16:54:42 +08:00
configure.ac configure: Add check for bfh.h 2012-06-20 11:59:32 +08:00
COPYING Add GPLv3 text in COPYING 2012-04-24 09:01:05 +08:00
gen-keyfiles.c Add copyright comments 2012-04-23 18:14:42 +08:00
idc.c Fix warnings from added -W flags 2012-06-11 16:54:42 +08:00
idc.h verify: move idc-related parsing to idc.c 2012-05-12 23:12:18 -07:00
image.c image: fix incorrect assumption about signature header 2012-06-28 10:47:55 +08:00
image.h image: Unconditionally parse PE/COFF data 2012-06-13 17:39:34 +08:00
libcoff.h Initial commit 2012-04-23 17:25:19 +08:00
Makefile.am docs: Add simple manpage for sbattach 2012-06-13 14:28:57 +08:00
NEWS autoconfiscate 2012-05-28 22:35:48 +08:00
README autoconfiscate 2012-05-28 22:35:48 +08:00
sbattach.c sbattach: Check that attached signatures are valid PKCS7 data 2012-06-19 17:09:48 +08:00
sbsign.c sbsign: handle errors from PKCS7_sign_add_signer() 2012-06-28 10:18:08 +08:00
sbverify.c image: fix incorrect assumption about signature header 2012-06-28 10:47:55 +08:00
verify.c Initial commit 2012-04-23 17:25:19 +08:00

README 

sbsigntool - Signing utility for UEFI secure boot

  Copyright (C) 2102 Jeremy Kerr <jeremy.kerr@canonical.com>

  Copying and distribution of this file, with or without modification,
  are permitted in any medium without royalty provided the copyright
  notice and this notice are preserved.

See file ./INSTALL for building and installation instructions.

Main git repository:
  git://kernel.ubuntu.com/jk/sbsigntool.git

sbsigntool is free software.  See the file COPYING for copying conditions.