proxmox-mirrors/efi-boot-shim
1
0
Fork 0
mirror of https://git.proxmox.com/git/efi-boot-shim synced 2025-05-16 21:13:32 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

MOK doesn't include the signature owner

Browse Source
This commit is contained in:
Gary Ching-Pang Lin 2012-12-27 11:42:54 +08:00
parent 262d671419
commit a05c7c57d9
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
MokManager.c
View File

@ -124,7 +124,7 @@ static MokListNode *build_mok_list(UINT32 num, void *Data, UINTN DataSize) {
Cert = (EFI_SIGNATURE_DATA *) (((UINT8 *) CertList) + Cert = (EFI_SIGNATURE_DATA *) (((UINT8 *) CertList) +
sizeof (EFI_SIGNATURE_LIST) + CertList->SignatureHeaderSize); sizeof (EFI_SIGNATURE_LIST) + CertList->SignatureHeaderSize);
list[count].MokSize = CertList->SignatureSize; list[count].MokSize = CertList->SignatureSize - sizeof(EFI_GUID);
list[count].Mok = (void *)Cert->SignatureData; list[count].Mok = (void *)Cert->SignatureData;
count++; count++;
@ -317,7 +317,7 @@ static void show_mok_info (void *Mok, UINTN MokSize)
if (!Mok || MokSize == 0) if (!Mok || MokSize == 0)
return; return;
if (MokSize != 48) { if (MokSize != SHA256_DIGEST_SIZE) {
if (X509ConstructCertificate(Mok, MokSize, if (X509ConstructCertificate(Mok, MokSize,
(UINT8 **) &X509Cert) && X509Cert != NULL) { (UINT8 **) &X509Cert) && X509Cert != NULL) {
show_x509_info(X509Cert); show_x509_info(X509Cert);