shim-signed/Makefile
2023-02-18 00:12:40 +00:00

16 lines
584 B
Makefile

all: verify
verify:
mkdir -p build
# Verifying that the image is signed with the correct key.
sbverify --cert MicCorUEFCA2011_2011-06-27.crt shim$(EFI_ARCH).efi.signed
# Verifying that we have the correct binary.
sbattach --detach build/detached-sig shim$(EFI_ARCH).efi.signed
cp /usr/lib/shim/shim$(EFI_ARCH).efi build/shim$(EFI_ARCH).efi.signed
sbattach --attach build/detached-sig build/shim$(EFI_ARCH).efi.signed
cmp shim$(EFI_ARCH).efi.signed build/shim$(EFI_ARCH).efi.signed
sha256sum shim$(EFI_ARCH).efi.signed build/shim$(EFI_ARCH).efi.signed
clean:
rm -rf build