mirror of
https://git.proxmox.com/git/efi-boot-shim
synced 2025-06-28 19:23:51 +00:00
Allow use of sbsign to sign things.
Signed-off-by: Peter Jones <pjones@redhat.com>
This commit is contained in:
parent
207dd7dc60
commit
1097a8aa9d
6
Makefile
6
Makefile
@ -20,6 +20,7 @@ INSTALL ?= install
|
|||||||
PK12UTIL ?= pk12util
|
PK12UTIL ?= pk12util
|
||||||
CERTUTIL ?= certutil
|
CERTUTIL ?= certutil
|
||||||
PESIGN ?= pesign
|
PESIGN ?= pesign
|
||||||
|
SBSIGN ?= sbsign
|
||||||
prefix ?= /usr
|
prefix ?= /usr
|
||||||
prefix := $(abspath $(prefix))
|
prefix := $(abspath $(prefix))
|
||||||
datadir ?= $(prefix)/share/
|
datadir ?= $(prefix)/share/
|
||||||
@ -274,8 +275,13 @@ endif
|
|||||||
-j .note.gnu.build-id \
|
-j .note.gnu.build-id \
|
||||||
$(FORMAT) $^ $@.debug
|
$(FORMAT) $^ $@.debug
|
||||||
|
|
||||||
|
ifneq ($(origin ENABLE_SBSIGN),undefined)
|
||||||
|
%.efi.signed: %.efi shim.key shim.crt
|
||||||
|
$(SBSIGN) --key shim.key --cert shim.crt --output $@ $<
|
||||||
|
else
|
||||||
%.efi.signed: %.efi certdb/secmod.db
|
%.efi.signed: %.efi certdb/secmod.db
|
||||||
$(PESIGN) -n certdb -i $< -c "shim" -s -o $@ -f
|
$(PESIGN) -n certdb -i $< -c "shim" -s -o $@ -f
|
||||||
|
endif
|
||||||
|
|
||||||
clean:
|
clean:
|
||||||
$(MAKE) -C Cryptlib -f $(TOPDIR)/Cryptlib/Makefile clean
|
$(MAKE) -C Cryptlib -f $(TOPDIR)/Cryptlib/Makefile clean
|
||||||
|
Loading…
Reference in New Issue
Block a user