openSUSE Build Service

Overview Repositories Revisions Requests Users Attributes Meta

File sbctl.changes of Package sbctl (Revision 308dd1e0a3e57908ba68486a8548da71)

Currently displaying revision 308dd1e0a3e57908ba68486a8548da71 , Show latest

-------------------------------------------------------------------
Wed Dec 27 08:21:25 UTC 2023 - Joshua Smith <jsmithfpv@gmail.com>

- Update to version 0.13:
  * --export,-e and --database-path,-d now work properly and don't
    overwrite the create-keys variables internally
  * remove erronous dbx enrollment. Previous release implemented
    support for dbx that doesn't really work as expected. It
    would also fail to enroll keys for previously setup clients.
    Implementation has been removed and will be iterated upon at a
    later date.
  * make: fix github artifact upload
  * Change shebang
  * Ensure file signing hook is run when initrd is rebuilt
  * Fixed typo, removed mention enroll-keys enables Secure Boot
    automatically
  * Ignore Setup mode and immutable variables for export
  * Specify file origin + always print signing message
  * tests/utils/certs.go: drop keyUsage bitfield
  * update manpage docs
  * allow specifying keys and GUID paths
  * Update README.md
  * keys.go: drop the keyUsage bitfield
  * Check and return Open errs
  * Update documentation for custom dbx

-------------------------------------------------------------------
Fri Oct 20 23:32:22 UTC 2023 - Joshua Smith <jsmithfpv@gmail.com>

- Update to version 0.12:
  * sbctl bundle might be depreciated in the future.
  * sbctl now allows you to enroll custom certificates into KEK
    and db. 
  * sbctl now allows keys to be exported as EFI Signature Lists
    (esl) or EFI Authenticated Variables (auth), which are pre-signed.
  * sbctl can now enroll certificates found in dbxDefault,
    dbDefault, KEKDefault and PKDefault.
  * Before this release sbctl would enroll, reset and rotate the
    entire key hierarchy when requested. With this release several
    improvements have been made to have the ability to support
    partial key hierarchies. This can be used through the --partial
    flag in their respective commands.
  * add documentation for the extra flags of enroll/rotate/reset
  * feat: add option to remove specific certs from db instead of an entire reset
  * feat: add append option to enroll-keys
  * feat: force key flag
  * Add support for OEM dbx enrollment
  * feat(dbx): enroll/rotate/reset dbx keys
  * feat(rotate): enable partial rotation and providing different sources
  * feat(reset): enable partial resets of secureboot keys
  * feat(enroll-keys): add partial enrollment of keys
  * Implement full support for loading builtin firmware certificates
  * Add support for loading certificates from dbDefault

-------------------------------------------------------------------
Mon Mar 27 07:36:22 UTC 2023 - jan.loeser@posteo.de

- Update to version 0.11:
  * status: Warn about firmware quirks
  * Add trailing newline to JSON output
  * Improve wording
  * Always include vendor keys in status output
  * Move a few more functions to afero and fs.Fs
  * Remove unused code
  * Include fs module
  * Implement fs package and remove all direct filesystem calls
  * Updated dependencies
  * status: Added e2e test
  * enroll-keys: remove variable overriding for OEM key enrollment
  * updated to go 1.20
  * Fix arbitrary sizes in UKI generation
  * Update README.md
  * enroll-keys: Enroll Microsoft KEK along with their other keys
  * pacman: Add extramodules target to hook
  * Fix POSIX sh comparison
  * verify: Implement file verification

-------------------------------------------------------------------
Thu Jan 19 12:29:01 UTC 2023 - Joshua Smith <jsmithfpv@gmail.com>

- Update to version 0.10:
  * go.mod: Properly fetch new library version
  * go.mod: update go-uefi and cleanup
  * rotate-keys: Implement rotate-keys
  * Add support for the uki layout
  * Fix typos and some improve grammar a bit
  * sbctl.8: Provide more precise setup mode instructions
  * enroll-keys: Error if user has Setup Mode disabled
  * update manpage to reflect defaults in bundle.go
  * Fix crash when ESP is not mounted
  * main: Always ensure we allow printing before json prints

-------------------------------------------------------------------
Mon Nov 28 04:07:35 UTC 2022 - Joshua Smith <jsmithfpv@gmail.com>

- Initial package of sbctl 0.9.0 for openSUSE

Places

File sbctl.changes of Package sbctl (Revision 308dd1e0a3e57908ba68486a8548da71)

Places