From 90609be3eb71f2afa69c52ee7d0e1ec76678d257 Mon Sep 17 00:00:00 2001 From: Steve McIntyre Date: Fri, 8 Mar 2019 22:04:53 +0000 Subject: [PATCH] Update the signing-template JSON metadata Move all the data under a new top-level "packages" key Add an empty "trusted_certs" key - the helper binaries do not do any further verification with an embedded key. --- debian/changelog | 6 +++++- debian/signing-template.json.in | 17 +++++++++++------ 2 files changed, 16 insertions(+), 7 deletions(-) diff --git a/debian/changelog b/debian/changelog index c0d0ab1..863d8f0 100644 --- a/debian/changelog +++ b/debian/changelog @@ -16,8 +16,12 @@ shim (15+1533136590.3beb971-3) UNRELEASED; urgency=medium * Change maintenance address to be the EFI team * Add me and vorlon to the Uploaders list * Rename the helper binary packages to shim-helpers-$arch. + * Update the signing-template JSON metadata to match new practice: + + Move all the data under a new top-level "packages" key + + Add an empty "trusted_certs" key - the helper binaries do not do any + further verification with an embedded key. - -- Steve McIntyre <93sam@debian.org> Wed, 06 Mar 2019 22:35:52 +0000 + -- Steve McIntyre <93sam@debian.org> Fri, 08 Mar 2019 21:59:43 +0000 shim (15+1533136590.3beb971-2) unstable; urgency=medium diff --git a/debian/signing-template.json.in b/debian/signing-template.json.in index cd4f1a9..09f4f36 100644 --- a/debian/signing-template.json.in +++ b/debian/signing-template.json.in @@ -1,6 +1,11 @@ -{"shim-unsigned": { - "files": [ - {"sig_type": "efi", "file": "usr/lib/shim/fb@efi@.efi"}, - {"sig_type": "efi", "file": "usr/lib/shim/mm@efi@.efi"} - ] -}} +{ + "packages": { + "shim-unsigned": { + "trusted_certs": [], + "files": [ + {"sig_type": "efi", "file": "usr/lib/shim/fb@efi@.efi"}, + {"sig_type": "efi", "file": "usr/lib/shim/mm@efi@.efi"} + ] + } + } +}