Gary Ching-Pang Lin
822d089e3d
Make the image loading process more generic
2012-09-07 17:43:21 +08:00
Peter Jones
7430b90148
Break out of our db checking loop at the appropriate time.
...
The break in check_db_cert is at the wrong level due to a typo in
indentation, and as a result only the last cert in the list can
correctly match. Rectify that.
Signed-off-by: Peter Jones <pjones@redhat.com>
2012-09-06 12:13:44 -04:00
Matthew Garrett
ce78d2d250
Use the file size, not the image size field, for verification.
2012-09-06 12:13:44 -04:00
Peter Jones
8518b8cc1f
Allow specification of vendor_cert through a build command line option.
...
This allows you to specify the vendor_cert as a file on the command line
during build.
2012-09-06 12:13:44 -04:00
Matthew Garrett
00ced0c125
Handle slightly stranger device paths
2012-07-13 00:30:22 -04:00
Matthew Garrett
bc6aaefa2d
Make path generation more sensible
2012-07-11 10:58:15 -04:00
Matthew Garrett
5fe882ba74
Make sure ImageBase is set appropriately in the loaded_image protocol
2012-07-11 10:57:46 -04:00
Matthew Garrett
b2058cf897
Re-add whitelisting - needed for protocol validation
2012-07-05 16:39:25 -04:00
Matthew Garrett
6279b58e83
Check whether secure boot is enabled before performing verify call
2012-07-05 12:51:12 -04:00
Matthew Garrett
c13fc2f71f
Fix up blacklist checking
...
This was not quite as bugfree as would be hoped for.
2012-07-02 14:43:18 -04:00
Matthew Garrett
1348448255
Remove whitelisting - the firmware will handle it via LoadImage/StartImage
2012-07-02 13:49:32 -04:00
Matthew Garrett
6eb1eca4f3
Fix type of buffersize
2012-07-02 11:54:21 -04:00
Matthew Garrett
f23d769727
Fix get_variable
2012-06-25 17:46:11 -04:00
Matthew Garrett
c16548d08b
Add black/white listing
2012-06-25 10:59:08 -04:00
Matthew Garrett
3e890667fe
Fix cert size
2012-06-19 15:25:02 -04:00
Matthew Garrett
0a232ca95c
Uninstall protocol on exit
2012-06-18 17:31:42 -04:00
Matthew Garrett
3df68c187c
Check binary against blacklist
2012-06-18 17:31:42 -04:00
Matthew Garrett
db54b0a4c6
Attempt to start image using LoadImage/StartImage first
2012-06-18 17:31:42 -04:00
Matthew Garrett
5bc80cec92
Check that platform is in user mode before doing any validation
2012-06-18 17:31:42 -04:00
Matthew Garrett
0db1af8aeb
Minor cleanups
2012-06-07 14:00:48 -04:00
Matthew Garrett
7db60bd8c2
Rename variables
2012-06-05 10:56:45 -04:00
Matthew Garrett
f4b2473401
Install a protocol for sharing code with grub
2012-06-05 10:52:30 -04:00
Matthew Garrett
f898777d22
Some cleanups
2012-05-30 22:08:09 -04:00
Matthew Garrett
7f0553356c
Add image verification
2012-05-30 18:36:46 -04:00
Matthew Garrett
9d56c38fd1
Fix path generation
2012-05-08 03:00:51 -04:00
Matthew Garrett
0e6b01958a
Some additional paranoia
2012-04-11 17:13:07 -04:00
Matthew Garrett
b2fe178094
Initial commit
2012-04-11 13:59:55 -04:00