vbatts/sbsigntools
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
my fork of https://git.kernel.org/pub/scm/linux/kernel/git/jejb/sbsigntools.git
61 commits 2 branches 8 tags 366 KiB
C 91.9%
Shell 4.4%
Makefile 2.2%
M4 1.5%
Find a file
James Bottomley d7cfae59da image: fix signature calculation when there's junk at the end of the efi binary 
The current gnu efi generation tools insist on leaving junk at the end
of the binary.  According to the authenticode spec, we have to include
this in the hash otherwise signature verification fails, so add the end
junk to the calculation of the hash.

I've verified that with this fix (and another one to get objcopy to
align the sections correctly) we can now sign gnu tools generated efi
code with tianocore r13466

Signed-off-by: James Bottomley <JBottomley@Parallels.com>
Signed-off-by: Jeremy Kerr <jeremy.kerr@canonical.com>
2012-06-28 14:23:49 +08:00
coff coff: remove unneeded coff includes 2012-04-24 08:38:57 +08:00
docs docs: Add simple manpage for sbattach 2012-06-13 14:28:57 +08:00
lib autoconfiscate 2012-05-28 22:35:48 +08:00
tests tests: Add test for PE/COFF cert table header validity 2012-06-28 14:23:45 +08:00
.gitmodules Move ccan submodule 2012-05-24 15:17:18 +08:00
autogen.sh Fix warnings from added -W flags 2012-06-11 16:54:42 +08:00
configure.ac configure: Add check for bfh.h 2012-06-20 11:59:32 +08:00
COPYING Add GPLv3 text in COPYING 2012-04-24 09:01:05 +08:00
gen-keyfiles.c Add copyright comments 2012-04-23 18:14:42 +08:00
idc.c Fix warnings from added -W flags 2012-06-11 16:54:42 +08:00
idc.h verify: move idc-related parsing to idc.c 2012-05-12 23:12:18 -07:00
image.c image: fix signature calculation when there's junk at the end of the efi binary 2012-06-28 14:23:49 +08:00
image.h image: Unconditionally parse PE/COFF data 2012-06-13 17:39:34 +08:00
libcoff.h Initial commit 2012-04-23 17:25:19 +08:00
Makefile.am docs: Add simple manpage for sbattach 2012-06-13 14:28:57 +08:00
NEWS autoconfiscate 2012-05-28 22:35:48 +08:00
README autoconfiscate 2012-05-28 22:35:48 +08:00
sbattach.c sbattach: Check that attached signatures are valid PKCS7 data 2012-06-19 17:09:48 +08:00
sbsign.c sbsign: handle errors from PKCS7_sign_add_signer() 2012-06-28 10:18:08 +08:00
sbverify.c image: fix incorrect assumption about signature header 2012-06-28 10:47:55 +08:00
verify.c Initial commit 2012-04-23 17:25:19 +08:00

README 

sbsigntool - Signing utility for UEFI secure boot

  Copyright (C) 2102 Jeremy Kerr <jeremy.kerr@canonical.com>

  Copying and distribution of this file, with or without modification,
  are permitted in any medium without royalty provided the copyright
  notice and this notice are preserved.

See file ./INSTALL for building and installation instructions.

Main git repository:
  git://kernel.ubuntu.com/jk/sbsigntool.git

sbsigntool is free software.  See the file COPYING for copying conditions.