Peter Jones
13a68a9959
Fix data alignment on vendor_cert so we don't wind up with padding.
2012-09-06 16:43:30 -04:00
Peter Jones
43eeb538d7
Add some convenience make targets.
...
Adds targets for "test-archive" and "archive"
2012-09-06 12:38:30 -04:00
Peter Jones
7430b90148
Break out of our db checking loop at the appropriate time.
...
The break in check_db_cert is at the wrong level due to a typo in
indentation, and as a result only the last cert in the list can
correctly match. Rectify that.
Signed-off-by: Peter Jones <pjones@redhat.com>
2012-09-06 12:13:44 -04:00
Matthew Garrett
ce78d2d250
Use the file size, not the image size field, for verification.
2012-09-06 12:13:44 -04:00
Peter Jones
8518b8cc1f
Allow specification of vendor_cert through a build command line option.
...
This allows you to specify the vendor_cert as a file on the command line
during build.
2012-09-06 12:13:44 -04:00
Peter Jones
7edb4fedfd
dos2unix PeImage.h
2012-09-06 12:01:43 -04:00
Matthew Garrett
ffc0e2424b
Add basic documentation
2012-07-28 00:42:43 -04:00
Matthew Garrett
00ced0c125
Handle slightly stranger device paths
2012-07-13 00:30:22 -04:00
Matthew Garrett
bc6aaefa2d
Make path generation more sensible
2012-07-11 10:58:15 -04:00
Matthew Garrett
5fe882ba74
Make sure ImageBase is set appropriately in the loaded_image protocol
2012-07-11 10:57:46 -04:00
Matthew Garrett
745b7f93ce
Add copyright file
2012-07-09 11:03:12 -04:00
Matthew Garrett
8c1d71c7f5
Update TODO
2012-07-09 10:39:14 -04:00
Matthew Garrett
4d8092e7b2
Remove temp file checked in by accident
2012-07-09 10:38:30 -04:00
Matthew Garrett
37e456be5c
Improve makefile
2012-07-09 10:38:19 -04:00
Matthew Garrett
a3996218ba
Make it easier to update Cryptlib
2012-07-09 10:17:19 -04:00
Matthew Garrett
5f64876076
Cryptlib update
2012-07-09 10:17:13 -04:00
Matthew Garrett
b2058cf897
Re-add whitelisting - needed for protocol validation
2012-07-05 16:39:25 -04:00
Matthew Garrett
041dd2b42a
We're not MSABI, so don't advertise this as such
2012-07-05 12:52:42 -04:00
Matthew Garrett
6279b58e83
Check whether secure boot is enabled before performing verify call
2012-07-05 12:51:12 -04:00
Matthew Garrett
c13fc2f71f
Fix up blacklist checking
...
This was not quite as bugfree as would be hoped for.
2012-07-02 14:43:18 -04:00
Matthew Garrett
1348448255
Remove whitelisting - the firmware will handle it via LoadImage/StartImage
2012-07-02 13:49:32 -04:00
Matthew Garrett
e21cbf4d9b
Update OpenSSL
2012-07-02 12:33:42 -04:00
Matthew Garrett
5b1bf5583c
Build a debug image
2012-07-02 12:29:03 -04:00
Matthew Garrett
6eb1eca4f3
Fix type of buffersize
2012-07-02 11:54:21 -04:00
Matthew Garrett
45c13d2989
Remove redundant header
2012-07-02 09:40:18 -04:00
Matthew Garrett
f23d769727
Fix get_variable
2012-06-25 17:46:11 -04:00
Matthew Garrett
c16548d08b
Add black/white listing
2012-06-25 10:59:08 -04:00
Matthew Garrett
8877e13127
Fix build somewhat
2012-06-19 15:25:59 -04:00
Matthew Garrett
3e890667fe
Fix cert size
2012-06-19 15:25:02 -04:00
Matthew Garrett
6e1c111bc3
Fix error path
2012-06-19 15:23:31 -04:00
Matthew Garrett
74f948d7ae
Remove old files
2012-06-19 13:01:54 -04:00
Matthew Garrett
b2d0e06f75
Add crypto libraries
2012-06-18 17:49:57 -04:00
Matthew Garrett
71d0b18bd2
Add missing include
2012-06-18 17:48:25 -04:00
Matthew Garrett
0f37a3d245
Merge branch 'master' of github.com:mjg59/shim
2012-06-18 17:33:46 -04:00
mjg59
0359090de7
Merge pull request #1 from vathpela/master
...
Yo dog this ain't right.
2012-06-18 14:32:19 -07:00
Matthew Garrett
0a232ca95c
Uninstall protocol on exit
2012-06-18 17:31:42 -04:00
Matthew Garrett
3df68c187c
Check binary against blacklist
2012-06-18 17:31:42 -04:00
Matthew Garrett
db54b0a4c6
Attempt to start image using LoadImage/StartImage first
2012-06-18 17:31:42 -04:00
Matthew Garrett
5bc80cec92
Check that platform is in user mode before doing any validation
2012-06-18 17:31:42 -04:00
Peter Jones
303724021c
Fix typos.
2012-06-18 11:36:57 -04:00
Matthew Garrett
0db1af8aeb
Minor cleanups
2012-06-07 14:00:48 -04:00
Matthew Garrett
7db60bd8c2
Rename variables
2012-06-05 10:56:45 -04:00
Matthew Garrett
f4b2473401
Install a protocol for sharing code with grub
2012-06-05 10:52:30 -04:00
Matthew Garrett
d0410b583e
Add a brief TODO
2012-05-30 22:09:01 -04:00
Matthew Garrett
f898777d22
Some cleanups
2012-05-30 22:08:09 -04:00
Matthew Garrett
7f0553356c
Add image verification
2012-05-30 18:36:46 -04:00
Matthew Garrett
9d56c38fd1
Fix path generation
2012-05-08 03:00:51 -04:00
Matthew Garrett
0e6b01958a
Some additional paranoia
2012-04-11 17:13:07 -04:00
Matthew Garrett
b2fe178094
Initial commit
2012-04-11 13:59:55 -04:00