• Files Changed
• Browse Source

- set timestamp of PE file to time of the binary the signature was
  made for.
- make sure cert.o get's rebuilt for each target

- Update microsoft.asc: shim signed by UEFI signing service, based
  on code from "Wed Aug 28 15:54:38 UTC 2013" (forwarded request 197604 from lnussel)

• Files Changed
• Browse Source

- always build a shim that embeds the distro's certificate (e.g.
  shim-opensuse.efi). If the package is built in the devel project
  additionally shim-devel.efi is created. That allows us to either
  load grub2/kernel signed by the distro or signed by the devel
  project, depending on use case. Also shim-$distro.efi from the
  devel project can be used to request additional signatures. (forwarded request 196735 from lnussel)

• Files Changed
• Browse Source

- also include old openSUSE 4096 bit certificate to be able to still
  boot kernels signed with that key.
- add show_signatures script (forwarded request 196609 from lnussel)

• Files Changed
• Browse Source

- replace the 4096 bit openSUSE UEFI CA certificate with new a
  standard compliant 2048 bit one. (forwarded request 196493 from lnussel)

• Files Changed
• Browse Source

- fix shell syntax error (forwarded request 195685 from lnussel)

• Files Changed
• Browse Source

- don't include binary in the sources. Instead package the raw
  signature and attach it during build (bnc#813448). (forwarded request 186534 from lnussel)

• Files Changed
• Browse Source

- Update shim-mokmanager-ui-revamp.patch to include fixes for
  MokManager
  + reboot the system after clearing MOK password
  + fetch more info from X509 name
  + check the suffix of the key file (forwarded request 185349 from gary_lin)

• Files Changed
• Browse Source

- Update to 0.4
- Rebase patches
  + shim-suse-build.patch
  + shim-mokmanager-support-crypt-hash-method.patch
  + shim-bnc804631-fix-broken-bootpath.patch
  + shim-bnc798043-no-doulbe-separators.patch
  + shim-bnc807760-change-pxe-2nd-loader-name.patch
  + shim-bnc808106-correct-certcount.patch 
  + shim-mokmanager-ui-revamp.patch
- Add patches
  + shim-merge-lf-loader-code.patch: merge the Linux Foundation
    loader UI code
  + shim-fix-pointer-casting.patch: fix a casting issue and the
    size of an empty vendor cert
  + shim-fix-simple-file-selector.patch: fix the buffer allocation
    in the simple file selector
- Remove upstreamed patches
  + shim-support-mok-delete.patch
  + shim-reboot-after-changes.patch
  + shim-clear-queued-key.patch
  + shim-local-key-sign-mokmanager.patch
  + shim-get-2nd-stage-loader.patch
  + shim-fix-loadoptions.patch
- Remove unused patch: shim-mokmanager-new-pw-hash.patch and
  shim-keep-unsigned-mokmanager.patch
- Install the vendor certificate to /etc/uefi/certs (forwarded request 184039 from gary_lin)

• Files Changed
• Browse Source

Revamp the MokManager UI (forwarded request 174778 from gary_lin)

• Files Changed
• Browse Source

bnc#813079: Call update-bootloader in %post to update *.efi in \efi\opensuse (forwarded request 162327 from gary_lin)

• Files Changed
• Browse Source

bnc#807760: change the PXE 2nd stage loader name
bnc#808106: certificate count of the signature list (forwarded request 157970 from gary_lin)

• Files Changed
• Browse Source

(bnc#798043#c4) remove double seperators from the bootpath (forwarded request 157208 from gary_lin)

• Files Changed
• Browse Source

- sign shim also with openSUSE certificate (forwarded request 156849 from lnussel)

• Files Changed
• Browse Source

bnc#804631: fix the broken bootpath generated in generate_path() (forwarded request 156025 from gary_lin)

• Files Changed
• Browse Source

- Update with shim signed by UEFI signing service, based on code
  from "Thu Feb  7 06:56:19 UTC 2013". (forwarded request 155105 from fcrozat)

• Files Changed
• Browse Source

- prepare for having a signed shim from the UEFI signing service (forwarded request 151605 from lnussel)

• Files Changed
• Browse Source

- Sign shim-opensuse.efi and MokManager.efi with the openSUSE cert
- Add shim-keep-unsigned-mokmanager.patch to keep the unsigned
  MokManager and sign it later. (forwarded request 151555 from gary_lin)

• Files Changed
• Browse Source

Add shim-mokmanager-support-crypt-hash-method.patch to support password hash from /etc/shadow (FATE#314506) (forwarded request 150394 from gary_lin)

• Files Changed
• Browse Source

- Embed openSUSE-UEFI-CA-Certificate.crt in shim
- Rename shim-unsigned.efi to shim-opensuse.efi. (forwarded request 150243 from gary_lin)

• Files Changed
• Browse Source