Google Git
Sign in
chromium/external/github.com/neverware/shim-build/f34eb7f47ef89c8c565108a53742404cdaee7c8f
commit
f34eb7f47ef89c8c565108a53742404cdaee7c8f
[log]
author
Paul Nardini <nardini@google.com>
Fri Sep 10 18:47:26 2021
committer
Paul Nardini <nardini@google.com>
Fri Sep 10 18:47:26 2021
tree
5d9e3f22617f18734b543b85dc955e41fa7d760b
parent
dc8f032627b3a3ae8c24a1d66385941f415d2b38 [diff]
Update public certificate with new Google-generated public key

The certificate currently embedded in shim builds doesn't match
what is used for signing grub.  This new cert has a 5 year
validity period; the old one had a 2 year validity period.

BUG=b:195737944
TEST=make build & make cert-info

Change-Id: Icdf6ad422781589defd861f2fb446e3494dca244
1 file changed
tree: 5d9e3f22617f18734b543b85dc955e41fa7d760b
  1. .gitignore
  2. Dockerfile
  3. Makefile
  4. neverware.cer
  5. OWNERS
  6. README.md
  7. sbat.csv
  8. shim_15.4_1bea91b_357.patch
  9. shim_15.4_33ca950_361.patch
  10. shim_15.4_8b59591_364.patch
  11. shim_15.4_975c2fe_362.patch
README.md

shim-build

Build shim in a Docker container.

Makefile targets

Build shim in a Docker container:

make build

Build with the cache turned off to get the full build log:

make build-no-cache

Copy the shim builds from the container to the host:

make copy

View details of the public certificate:

make cert-info

View SBAT section of the shim binaries:

make dump-sbat