)]}' { "log": [ { "commit": "b988d20a7f8373cf19c30d5c9c459f3e87f28da2", "tree": "ce2e29bfc1bfae7fd4be7cb13bedeb17383490a8", "parents": [ "449cfc99c9453d6321116c12a19f7ceba0bd7fec" ], "author": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Thu Nov 05 11:46:41 2020 -0800" }, "committer": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Thu Nov 05 17:08:35 2020 -0800" }, "message": "efi-readvar: Use Shadowed Mok Variables\n\nThe Mok variables are shadowed in the runtime as MokListRT and\nMokListXRT, so print out the values of those variables.\n\nSigned-off-by: James Bottomley \u003cJames.Bottomley@HansenPartnership.com\u003e\n" }, { "commit": "449cfc99c9453d6321116c12a19f7ceba0bd7fec", "tree": "fd23e7222f0723c4c58ab55f7e58a952ea6cf500", "parents": [ "236e200ffa29c0416b663936f7164b6bd9a02c8c" ], "author": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Thu Nov 05 11:44:00 2020 -0800" }, "committer": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Thu Nov 05 17:08:34 2020 -0800" }, "message": "KeyTool: Add MokListX key\n\nThis is the exclude list from Mok.\n\nSigned-off-by: James Bottomley \u003cJames.Bottomley@HansenPartnership.com\u003e\n" }, { "commit": "236e200ffa29c0416b663936f7164b6bd9a02c8c", "tree": "2d15331e4e6a985a871ac3185e4b07c767d90612", "parents": [ "54c33a5925bdcb066d7d2d31176c618b4d17cde0" ], "author": { "name": "Gheorghe Almasi", "email": "gheorghe@us.ibm.com", "time": "Thu Nov 05 11:42:06 2020 -0800" }, "committer": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Thu Nov 05 17:08:08 2020 -0800" }, "message": "KeyTool: Fix .auth vs .esl/.cer file confusion\n\nIn user mode, authenticated variables are the ones that require .auth\nfiles. The Mok variables still take any file type.\n\nSigned-off-by: James Bottomley \u003cJames.Bottomley@HansenPartnership.com\u003e\n" }, { "commit": "54c33a5925bdcb066d7d2d31176c618b4d17cde0", "tree": "b88837c352393b427050562786b428648a0c09f2", "parents": [ "392836a46ce3c92b55dc88a1aebbcfdfc5dcddce" ], "author": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Sun May 31 15:42:48 2020 -0700" }, "committer": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Sun May 31 15:42:48 2020 -0700" }, "message": "README: add git repo and mailing list\n\nSigned-off-by: James Bottomley \u003cJames.Bottomley@HansenPartnership.com\u003e\n" }, { "commit": "392836a46ce3c92b55dc88a1aebbcfdfc5dcddce", "tree": "c66e0b02c60ad20d229a30dd6f1a506145edcb2e", "parents": [ "dac1ff8f74e7cf13d0f67e2b2b33ba898a98bf00" ], "author": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Tue Jan 08 14:13:13 2019 -0800" }, "committer": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Tue Jan 08 14:13:13 2019 -0800" }, "message": "Version: 1.9.2\n\n* add engine option documentation for sign-efi-sig-list\n* fix sha256 computation for some efi binaries\n\nSigned-off-by: James Bottomley \u003cJames.Bottomley@HansenPartnership.com\u003e\n" }, { "commit": "dac1ff8f74e7cf13d0f67e2b2b33ba898a98bf00", "tree": "a2e7f650fb37fcc0f334cc85924e36b216549766", "parents": [ "05fa125a0ead264d346bc0dc73971d95342d50da" ], "author": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Tue Jan 08 12:59:37 2019 -0800" }, "committer": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Tue Jan 08 14:11:06 2019 -0800" }, "message": "sha256: do not align raw section sizes\n\nA vmlinuz hash was failing because it was being aligned up to the\ncontext.fileAlignment (which is 32) which adds a spurious 16 bytes to\nthe section size.\n\nAdditionally, only hash additional data if the remaining data is\nlarger than the security directory.\n\nSigned-off-by: James Bottomley \u003cJames.Bottomley@HansenPartnership.com\u003e\n" }, { "commit": "05fa125a0ead264d346bc0dc73971d95342d50da", "tree": "84639d0f8292e6c3a549aee9ea0646547c590519", "parents": [ "141a106b57af820edd8a851296b2c72040b656f3" ], "author": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Mon Jan 07 13:46:34 2019 -0800" }, "committer": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Mon Jan 07 13:46:34 2019 -0800" }, "message": "sign-efi-sig-list: add man page entry for engine option\n\nThis was forgotten when the engine code was added, so include it now.\n\nSigned-off-by: James Bottomley \u003cJames.Bottomley@HansenPartnership.com\u003e\n" }, { "commit": "141a106b57af820edd8a851296b2c72040b656f3", "tree": "5aa8084c0d32f520ccdfe79f97c9625e7e296acc", "parents": [ "8b69565fcc7e54891898e2d6b0c7a8945dcf2cd0" ], "author": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Sun Jan 06 08:38:20 2019 -0800" }, "committer": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Sun Jan 06 08:38:20 2019 -0800" }, "message": "Version: 1.9.1\n\n* fix build on some systems due to library ordering\n\nSigned-off-by: James Bottomley \u003cJames.Bottomley@HansenPartnership.com\u003e\n" }, { "commit": "8b69565fcc7e54891898e2d6b0c7a8945dcf2cd0", "tree": "42d7b33f2bbc21d8a9df98b07c1c0c0bdf3792de", "parents": [ "48a96877372b97c69551a14af91b3e17a06503fe" ], "author": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Sun Jan 06 08:36:27 2019 -0800" }, "committer": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Sun Jan 06 08:36:27 2019 -0800" }, "message": "Makefile: Reverse the order of lib.a and -lcrypto\n\nSigned-off-by: James Bottomley \u003cJames.Bottomley@HansenPartnership.com\u003e\n" }, { "commit": "48a96877372b97c69551a14af91b3e17a06503fe", "tree": "77d84dbc3d93c7c25d83e6385d5df16622df85c7", "parents": [ "e57bafc268511ad54598627b663a7ae86bd856f5" ], "author": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Sun Jan 06 08:27:25 2019 -0800" }, "committer": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Sun Jan 06 08:27:25 2019 -0800" }, "message": "Version: 1.9.0\n\n* engine based keys\n* use SignedData for authenticated variables\n\nSigned-off-by: James Bottomley \u003cJames.Bottomley@HansenPartnership.com\u003e\n" }, { "commit": "e57bafc268511ad54598627b663a7ae86bd856f5", "tree": "395e21c046d37c50dbfdabce4d93224ad10138bd", "parents": [ "7c4991f1b7eea98f2b5137f274a2f23af63ac174" ], "author": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Sat Jan 05 22:46:39 2019 -0800" }, "committer": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Sat Jan 05 22:46:39 2019 -0800" }, "message": "use SignedData instead of PKCS7 for variable updates\n\nThe EFI standard is ambiguous about which one to use for variable\nupdates (it is definite about using PKCS7 for signed binaries). Until\nrecently, the reference platform, tianocore, accepted both. However\nafter patch\n\ncommit c035e37335ae43229d7e68de74a65f2c01ebc0af\nAuthor: Zhang Lubo \u003clubo.zhang@intel.com\u003e\nDate: Thu Jan 5 14:58:05 2017 +0800\n\n SecurityPkg: enhance secure boot Config Dxe \u0026 Time Based AuthVariable.\n\nThe acceptance of PKCS7 got broken. This breakage seems to be\npropagating to the UEFI ecosystem, so update the variable signing\ntools to emit the SignedData type.\n\nSigned-off-by: James Bottomley \u003cJames.Bottomley@HansenPartnership.com\u003e\n" }, { "commit": "7c4991f1b7eea98f2b5137f274a2f23af63ac174", "tree": "bdb33d1aa58e8103f17ca53704bdb8a6eb173ccf", "parents": [ "0844b10e7681a10caa42fb728838974f76bf7c96" ], "author": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Sat Jan 05 13:44:13 2019 -0800" }, "committer": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Sat Jan 05 13:44:13 2019 -0800" }, "message": "support engine based keys\n\nAdd additional arguments to specify an openssl engine (-e for\nsign-efi-sig-list and --engine for efi-update). If an engine is\nspecified, pass the keyfile to the engine load routines.\n\nSigned-off-by: James Bottomley \u003cJames.Bottomley@HansenPartnership.com\u003e\n" }, { "commit": "0844b10e7681a10caa42fb728838974f76bf7c96", "tree": "abbf82ce150215ad25f9f679b11f41279c57d39c", "parents": [ "ff81e553dc7c59963c81b3ab435ecabcf461d3cd" ], "author": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Sat Jan 05 13:16:27 2019 -0800" }, "committer": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Sat Jan 05 13:16:27 2019 -0800" }, "message": "factor out variable signing code\n\nSince we have two uses of the code, consolidate into a library routine\nso the signing can be done in a single place.\n\nSigned-off-by: James Bottomley \u003cJames.Bottomley@HansenPartnership.com\u003e\n" }, { "commit": "ff81e553dc7c59963c81b3ab435ecabcf461d3cd", "tree": "bb5b2e9fb83be0d85019c14e1bcb51f64fbb3cc2", "parents": [ "28687de80b18b3b35271de1d70769eac3c0b1ab4" ], "author": { "name": "pai-yi.huang", "email": "pai-yi.huang@adlinktech.com", "time": "Thu Dec 06 16:42:30 2018 +0800" }, "committer": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Tue Dec 18 16:02:14 2018 -0800" }, "message": "efi-updatevar: remove all authenticated attributes from signature\n\nfollow the Commit: 4727744d42ec594d558e5d6c3fcf4c8d63d83186\nfor sign-efi-sig-list to fix efi-updatevar failure for AMI BIOS.\n\nSigned-off-by: James Bottomley \u003cJames.Bottomley@HansenPartnership.com\u003e\n" }, { "commit": "28687de80b18b3b35271de1d70769eac3c0b1ab4", "tree": "5eaede94aa5d18dfa22efee684c2cac23bcc23a2", "parents": [ "2e0965cb03ec1aa0311e9cebedfd21fa5bbce525" ], "author": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Tue Feb 20 22:53:05 2018 -0500" }, "committer": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Tue Feb 20 22:53:05 2018 -0500" }, "message": "Version: 1.8.1\n\n* Fix fedora build\n\nSigned-off-by: James Bottomley \u003cJames.Bottomley@HansenPartnership.com\u003e\n" }, { "commit": "2e0965cb03ec1aa0311e9cebedfd21fa5bbce525", "tree": "25beca8ccdd9077509277ba59f25ef4251d0234e", "parents": [ "cf61362f95844f2fa607844ad3875ed9081c9216" ], "author": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Tue Feb 20 22:45:27 2018 -0500" }, "committer": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Tue Feb 20 22:51:31 2018 -0500" }, "message": "Fix Fedora build\n\nFedora has a whole load of weird and wonderful ideas beyond both\nDebian and openSUSE about how to install gnu-efi. Fix the build rules\nto accommodate its eccentricities.\n\nSigned-off-by: James Bottomley \u003cJames.Bottomley@HansenPartnership.com\u003e\n" }, { "commit": "cf61362f95844f2fa607844ad3875ed9081c9216", "tree": "c129a2e14bb06f9f5569dd72b482bd46b3a7546f", "parents": [ "748f653fce089c7dc34ed6778de5546fd6da3a71" ], "author": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Thu Oct 19 12:06:16 2017 -0700" }, "committer": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Thu Oct 19 12:06:16 2017 -0700" }, "message": "Version: 1.8.0\n\n* openssl 1.1 support\n* many other updates\n\nSigned-off-by James Bottomley \u003cJames.Bottomley@HansenPartnership.com\u003e\n" }, { "commit": "748f653fce089c7dc34ed6778de5546fd6da3a71", "tree": "f2fc3aaca336188c527712a6c638596df16cad38", "parents": [ "0649468475d20d8ca5634433c4912467cef3ce93" ], "author": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Thu Oct 19 12:04:15 2017 -0700" }, "committer": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Thu Oct 19 12:04:15 2017 -0700" }, "message": "cert-to-efi-hash-list: fix for openssl 1.1\n\nCan\u0027t dereference the cert any more. Unfortunately now there\u0027s no API\nto get the cert-\u003ecert_info any more (thanks openssl!). Fortunately we\ncan fiddle it with i2d_re_X509_tbs.\n\nSigned-off-by: James Bottomley \u003cJames.Bottomley@HansenPartnership.com\u003e\n" }, { "commit": "0649468475d20d8ca5634433c4912467cef3ce93", "tree": "57c6910f56aff436fbc52c5bee4f08f986c08601", "parents": [ "e8af737d60df6580e88f5741ac680847c80638b8" ], "author": { "name": "Nicholas Fish", "email": "github@seaofdirac.net", "time": "Tue Feb 28 22:01:48 2017 +0100" }, "committer": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Wed Mar 01 12:39:51 2017 -0800" }, "message": "efitools: oid.h: Re-run oid.pl to regenerate oid.h include\n\noid.h: Run oid.pl to regenerate oid.h include\nBuilds against musl libc are failing due to unknown types. This is\nbecause lib/asn1/oid.h is stale and needs to be regenerated by running\nlib/asn1/oid.pl to bring in the types.h include.\n\nSigned-off-by: James Bottomley \u003cJames.Bottomley@HansenPartnership.com\u003e\n" }, { "commit": "e8af737d60df6580e88f5741ac680847c80638b8", "tree": "74b089a8523370dc7a02fd416813d59db04221c5", "parents": [ "791e4639ee837f70c8d5e1190e01dc3441d4a401" ], "author": { "name": "Patrick Callaghan", "email": "patrickc@us.ibm.com", "time": "Mon Jan 16 07:10:28 2017 -0800" }, "committer": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Mon Jan 16 07:12:23 2017 -0800" }, "message": "kernel_efivars.c: fix mismatch between UNIX and EFI time\n\nThe EFI variable code is failing in January of every year. This is\nbecause of a mismatch between EFI_TIME and struct tm. The month in\nEFI_TIME is 1-12 and in struct tm it\u0027s 0-11 meaning that January is an\ninvalid month for EFI_TIME.\n\nFix this by adding one\n\nSigned-off-by: James Bottomley \u003cJames.Bottomley@HansenPartnership.com\u003e\n" }, { "commit": "791e4639ee837f70c8d5e1190e01dc3441d4a401", "tree": "d67c018c35079531b1063a3ee0d1232c31f3e816", "parents": [ "25c98b2cd223b4b1bf2f3cab0e1f0e1e7e57a797" ], "author": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Fri May 13 14:54:41 2016 -0700" }, "committer": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Fri May 13 14:54:41 2016 -0700" }, "message": "PreLoader: use updated security policy install function\n\nPreLoader got broken when security_policy_install() was changed to\ntake an override, deny and allow function. Fix it by supplying the\ndefault MoK policy functions.\n\nSigned-off-by: James Bottomley \u003cJames.Bottomley@HansenPartnership.com\u003e\n" }, { "commit": "25c98b2cd223b4b1bf2f3cab0e1f0e1e7e57a797", "tree": "e56183904803e054a4295798e08a252784584d64", "parents": [ "5563561f3eed170550f722e43217350d8d1605f8" ], "author": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Fri May 13 14:51:11 2016 -0700" }, "committer": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Fri May 13 14:51:11 2016 -0700" }, "message": "security_policy: fully convert to override,allow and deny functions\n\nThe EFI_SECURITY2_PROTOCOL override hadn\u0027t been updated, so do that\nnow. Also remove the now unused security_policy_check_mok() function.\n\nSigned-off-by: James Bottomley \u003cJames.Bottomley@HansenPartnership.com\u003e\n" }, { "commit": "5563561f3eed170550f722e43217350d8d1605f8", "tree": "8fbde7f6112a91e5de9d911a7f710c7e6ea9810a", "parents": [ "20a8fdc4ec5a669dec986f61e99b7927c731fd44" ], "author": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Fri May 13 14:40:36 2016 -0700" }, "committer": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Fri May 13 14:40:36 2016 -0700" }, "message": "security_policy: factor out the current MoK hash policies\n\nThis is so we can use them externally as override, allow and deny\nfunctions in PreLoader.\n\nSigned-off-by: James Bottomley \u003cJames.Bottomley@HansenPartnership.com\u003e\n" }, { "commit": "20a8fdc4ec5a669dec986f61e99b7927c731fd44", "tree": "9ae68f1a1afd0eda302c23c682c4ecc4c18ad047", "parents": [ "a27a9f9ae4a509a660b9e26cedfc495bf46e3c99" ], "author": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Fri Mar 25 11:12:07 2016 -0400" }, "committer": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Fri Mar 25 11:12:07 2016 -0400" }, "message": "Version: 1.7.0\n\nNew shim replacement system\nuse of pkcs7verify protocol\n\nSigned-off-by: James Bottomley \u003cJames.Bottomley@HansenPartnership.com\u003e\n" }, { "commit": "a27a9f9ae4a509a660b9e26cedfc495bf46e3c99", "tree": "4bb890a499089cc94cb28b8fb94771c4f90faf34", "parents": [ "0c850b41a3f874ed2b56ae9b41ad106f237faf79" ], "author": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Fri Mar 25 10:38:11 2016 -0400" }, "committer": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Fri Mar 25 11:10:12 2016 -0400" }, "message": "sig-list-to-certs: add -e option to break out all esl payloads\n\nWhen manipulating signatures in user mode, it\u0027s often useful to read\nall the signature lists individually, cat selected ones, authorise the\nbundle and then write it. Adding a -e option to break out all the\nindividual signature lists saves messing about with dd in the global\nesl.\n\nSigned-off-by: James Bottomley \u003cJames.Bottomley@HansenPartnership.com\u003e\n" }, { "commit": "0c850b41a3f874ed2b56ae9b41ad106f237faf79", "tree": "a70a6d4455f49c1696c9e7ee74abbfc36af52a16", "parents": [ "b50b862abd8542d6673b4cb9a8543b5880227ad6" ], "author": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Sun Mar 06 12:15:55 2016 -0500" }, "committer": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Fri Mar 25 11:10:12 2016 -0400" }, "message": "security_policy: convert to using pkcs7verify protocol\n\nSigned-off-by: James Bottomley \u003cJames.Bottomley@HansenPartnership.com\u003e\n" }, { "commit": "b50b862abd8542d6673b4cb9a8543b5880227ad6", "tree": "37b476f91868ccb695022babfd86c8fe301030ac", "parents": [ "0cfe45200c3fc1d014c42c26d5fcfa5a2910a353" ], "author": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Fri Mar 04 17:29:08 2016 -0800" }, "committer": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Fri Mar 25 11:10:12 2016 -0400" }, "message": "shim_protocol: convert to using the pkcs7verify allow and deny function\n\nSigned-off-by: James Bottomley \u003cJames.Bottomley@HansenPartnership.com\u003e\n" }, { "commit": "0cfe45200c3fc1d014c42c26d5fcfa5a2910a353", "tree": "ac549ca7b19a4cce43c4195d6cae3227c0a8ae6a", "parents": [ "40eb1ba73a400a2c42cb460c6afc460c0d26432e" ], "author": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Fri Mar 04 17:02:37 2016 -0800" }, "committer": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Fri Mar 25 11:10:12 2016 -0400" }, "message": "pkcs7verify: add allow and deny checkers\n\nExport useful deny checker which checks explicitly the hashes in\nMokListX and dbx and an allow checker which checks the hashes first\nand then does a VerifySignature to see if the signature is allowed.\n\nSigned-off-by: James Bottomley \u003cJames.Bottomley@HansenPartnership.com\u003e\n" }, { "commit": "40eb1ba73a400a2c42cb460c6afc460c0d26432e", "tree": "eebc7645a487dabd600ba76ad13cd611823ebde0", "parents": [ "a29bad458e8162d515e4433cc6464f473f680501" ], "author": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Fri Mar 04 12:15:58 2016 -0800" }, "committer": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Fri Mar 25 11:10:12 2016 -0400" }, "message": "variables: add routines to get a list of hash algorithms\n\nSince the full list of hash algorithms is finite an known, just dump\nthe list of found hash algorithms to a variable for us to check\nagainst. The default is going to be only a single algorithm: sha256.\n\nSigned-off-by: James Bottomley \u003cJames.Bottomley@HansenPartnership.com\u003e\n" }, { "commit": "a29bad458e8162d515e4433cc6464f473f680501", "tree": "22f9ff2c3cd6843e22aafa1d4860e7dfde4c7bf7", "parents": [ "cf6e37d0690ed36d090bdc915ba090aa3e795145" ], "author": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Fri Mar 04 11:31:27 2016 -0800" }, "committer": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Fri Mar 25 11:10:12 2016 -0400" }, "message": "guid: add all currently defined hashing guids\n\nAlso add a table so we can look for them.\n\nSigned-off-by: James Bottomley \u003cJames.Bottomley@HansenPartnership.com\u003e\n" }, { "commit": "cf6e37d0690ed36d090bdc915ba090aa3e795145", "tree": "8b206ef86dc30f52b1835ad80b51dfd2dbcd57e3", "parents": [ "491059569251cb86c3ea8d62ada0331b8c274725" ], "author": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Fri Feb 26 07:15:10 2016 -0800" }, "committer": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Fri Feb 26 07:15:10 2016 -0800" }, "message": "shim_protocol: add implementation of read_header\n\nApparently the grub chainloader does use this for some reason (in the\nSUSE patched version)\n\nSigned-off-by: James Bottomley \u003cJames.Bottomley@HansenPartnership.com\u003e\n" }, { "commit": "491059569251cb86c3ea8d62ada0331b8c274725", "tree": "de3a36d51641a8c3e423d8e997814a611566f4d1", "parents": [ "58e7a21b04e53faf0499fb826b1f14b22894e722" ], "author": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Tue Feb 23 16:56:07 2016 -0800" }, "committer": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Tue Feb 23 16:56:07 2016 -0800" }, "message": "ShimReplace: add new shim loader simply to install protocol\n\nThe way grub currently works on Linux is that it relies on the shim\nprotocol to verify images. Without this, the secure boot chain is\nbroken. Fix this by adding a shim replacement whose sole job is to\ninstall the protocol and call the boot loader via the normal fashion\n(meaning the bootloader must be signed with a key in the secure boot\ndatabase). The second stage loader can then use the protocol to\nverify any images against the secure boot database as well.\n\nSigned-off-by: James Bottomley \u003cJames.Bottomley@HansenPartnership.com\u003e\n" }, { "commit": "58e7a21b04e53faf0499fb826b1f14b22894e722", "tree": "120ae010fd7795bc6fbc73cd93e8d3efeb7c08ce", "parents": [ "2fa4b3c0efebbb9ed6e8f54087addca91b82cabe" ], "author": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Tue Feb 23 16:49:45 2016 -0800" }, "committer": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Tue Feb 23 16:55:08 2016 -0800" }, "message": "pkcs7verify: add protocol locate function\n\nAdd a function which tries to locate the protocol but then tries to\nload the Pkcs7VerifyDxe.efi file to provide it if it\u0027s not found.\nThis allows us to rely on pkcs7verify always being present in the\nplatform, because we can supply it simply by placing a signed copy\nfrom tianocore in the root directory.\n\nSigned-off-by: James Bottomley \u003cJames.Bottomley@HansenPartnership.com\u003e\n" }, { "commit": "2fa4b3c0efebbb9ed6e8f54087addca91b82cabe", "tree": "d2d86797f87d079c3484812569ec75c7f9a0e9ac", "parents": [ "fdb9eb931f4e2f76cf65b9352caa7517455e4d02" ], "author": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Mon Feb 22 17:41:43 2016 -0800" }, "committer": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Tue Feb 23 16:55:08 2016 -0800" }, "message": "shim_protocol: add protocol installer\n\nThe shim_protocol is necessary because it is used as a callback by\ngrub to verify the signature of linux kernel images. This means that\neven if you\u0027re relying entirely on the secure boot keys, you cannot\nsimply replace shim.efi with grub.efi. Add a shim protocol installer\nin preparation for adding a replacement shim that does nothing other\nthan install the protocols and execute grub.\n\nSigned-off-by: James Bottomley \u003cJames.Bottomley@HansenPartnership.com\u003e\n" }, { "commit": "fdb9eb931f4e2f76cf65b9352caa7517455e4d02", "tree": "c2f744651a6ff979800efb27216435856e1c5ba0", "parents": [ "669d1f100db3fc604fabedb8abc6c994e27ebad6" ], "author": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Mon Feb 22 17:40:51 2016 -0800" }, "committer": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Tue Feb 23 16:55:08 2016 -0800" }, "message": "pkcs7verify: add header and GUID copied from tianocore\n\nSigned-off-by: James Bottomley \u003cJames.Bottomley@HansenPartnership.com\u003e\n" }, { "commit": "669d1f100db3fc604fabedb8abc6c994e27ebad6", "tree": "d4559c77e9c97e757c25694afa97b76e5322b7ad", "parents": [ "8d91078aeb8d54bfd7d960e93d5a2b20143f8ee2" ], "author": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Mon Feb 22 17:39:13 2016 -0800" }, "committer": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Tue Feb 23 16:54:44 2016 -0800" }, "message": "pcoff: add pecoff_get_signature function\n\nThis will be used later in the shim_protocol signature verifier.\n\nSigned-off-by: James Bottomley \u003cJames.Bottomley@HansenPartnership.com\u003e\n" }, { "commit": "8d91078aeb8d54bfd7d960e93d5a2b20143f8ee2", "tree": "66a4fc88670ae5c5047df17aeb6b6f01b6a8095d", "parents": [ "9697101d8bc7c5aff97486f02a748293a946ffb3" ], "author": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Sun Feb 14 11:50:42 2016 -0800" }, "committer": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Sun Feb 14 11:50:42 2016 -0800" }, "message": "Version: 1.6.1\n\nSigned-off-by: James Bottomley \u003cJames.Bottomley@HansenPartnership.com\u003e\n" }, { "commit": "9697101d8bc7c5aff97486f02a748293a946ffb3", "tree": "9b01eb0903e6023d200c8fc95b582b7e3f543b57", "parents": [ "b98d381bf3f8bd7f3f8d677be40aee427ea8e8cc" ], "author": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Fri Feb 12 17:08:54 2016 -0800" }, "committer": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Sun Feb 14 11:46:33 2016 -0800" }, "message": "Fix ARM32 build\n\nThis is a complete hack: the efi.h headers include a\n\nWhich allows arm32 to build efi binaries, but wreaks havoc if you just\nwant to use EFI definitions in normal C code. We hack around this in\nthe libraries by doing an extra\n\nHowever, there should be a better way ...\n\nSigned-off-by: James Bottomley \u003cJames.Bottomley@HansenPartnership.com\u003e\n" }, { "commit": "b98d381bf3f8bd7f3f8d677be40aee427ea8e8cc", "tree": "8dad349eeb65ca7d0bbbefb2fce04512338215f4", "parents": [ "18bbce759ab9b8f64d05cf6b1987539c746d4bc7" ], "author": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Fri Feb 12 16:21:49 2016 -0800" }, "committer": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Fri Feb 12 17:15:22 2016 -0800" }, "message": "arm build fixes\n\nThis is a monster bunch. Firstly, eliminate the efi call wrapper\nthunking. On the security policy override, this was done via an\nx86_64 asm routine which won\u0027t work on non-x86.\n\nThe build arm objects using the -O binary objcopy method and take the\nlinker scripts from gnu-efi rather than hand rolling.\n\nConfine the EFI building machinery to its own include file (not having\nthis correct was causing an OBS build failure on arm)\n\nSigned-off-by: James Bottomley \u003cJames.Bottomley@HansenPartnership.com\u003e\n" }, { "commit": "18bbce759ab9b8f64d05cf6b1987539c746d4bc7", "tree": "aaee41f8768364e4c25925bc1e87b10c05d54e84", "parents": [ "887464850f662b464ca7ddcd65762109ffb3639d" ], "author": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Tue Feb 09 08:51:26 2016 -0800" }, "committer": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Tue Feb 09 08:51:26 2016 -0800" }, "message": "Version: 1.6.0\n\nSigned-off-by: James Bottomley \u003cJames.Bottomley@HansenPartnership.com\u003e\n" }, { "commit": "887464850f662b464ca7ddcd65762109ffb3639d", "tree": "ba9d429a09a2a804a361cb4a8b2333a42d544315", "parents": [ "243b23fbf1f58577a2cfadc64b6f4c0d12f1491e" ], "author": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Tue Feb 09 08:49:54 2016 -0800" }, "committer": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Tue Feb 09 08:49:54 2016 -0800" }, "message": "enable arm builds\n\nNow that the x86 specific thunk is removed, efitools should build for arm\n\nSigned-off-by: James Bottomley \u003cJames.Bottomley@HansenPartnership.com\u003e\n" }, { "commit": "243b23fbf1f58577a2cfadc64b6f4c0d12f1491e", "tree": "917801ba6b6ba2867e660b968765ffd8d66e47a5", "parents": [ "613cf530f09fc1b27701b1be2538730539415db4" ], "author": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Tue Feb 09 08:36:24 2016 -0800" }, "committer": { "name": "James Bottomley", "email": "James.Bottomley@HansenPartnership.com", "time": "Tue Feb 09 08:36:24 2016 -0800" }, "message": "security_policy: switch to EFIAPI calling convention\n\nRemove the assembly thunk that converts between EFI and C calling conventions\non x86_64 and use the EFIAPI tag instead, which informs gcc to use the EFI\ncalling conventions for the function. This means security_policy.o can now be\nbuilt unconditionally for all architectures\n\nSigned-off-by: James Bottomley \u003cJames.Bottomley@HansenPartnership.com\u003e\n" }, { "commit": "613cf530f09fc1b27701b1be2538730539415db4", "tree": "5abb07df657a5a04ed0867f3e9a13c9310fdde7e", "parents": [ "e9456111d508c226aefa00ca3abbf1544a35df52" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Wed Jan 14 22:57:41 2015 -0800" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Tue Mar 17 17:09:26 2015 -0700" }, "message": "flash-var: new routine for manipulating variables in flash images\n\nIt only currently does secure variables and is primarily designed\nfor embedding keys in EFI bios images.\n\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\n" }, { "commit": "e9456111d508c226aefa00ca3abbf1544a35df52", "tree": "1f79ca9905db2d2f3c0beb985bb8359cfc49c46c", "parents": [ "2df44d17b0abf3a406dd00be7a813aaa8d6d7f3b" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Wed Jan 14 22:56:38 2015 -0800" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Tue Mar 17 17:08:19 2015 -0700" }, "message": "guid: add authenticated variable guid\n\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\n" }, { "commit": "2df44d17b0abf3a406dd00be7a813aaa8d6d7f3b", "tree": "20438c4824f734431ab0a16a4890c27014be8f6c", "parents": [ "0ddcd791f319eabf0adf468e8405c8acf73a6aa1" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Wed Jan 14 14:26:17 2015 -0800" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Tue Mar 17 17:07:53 2015 -0700" }, "message": "guid.c: add function to calculate owner GUID for known authenticated variables\n\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\n" }, { "commit": "0ddcd791f319eabf0adf468e8405c8acf73a6aa1", "tree": "3bc627f95370e964b1fb934fe2d9eb7b5440991c", "parents": [ "29af7cf326fbf42080a3b5171e5eb380616b5c1f" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Thu Mar 12 11:48:01 2015 -0400" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Thu Mar 12 11:48:01 2015 -0400" }, "message": "Version: 1.5.3\n\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\n" }, { "commit": "29af7cf326fbf42080a3b5171e5eb380616b5c1f", "tree": "92f46ddcb27a115ea56b35b14274a1f47c84b248", "parents": [ "ed79a20e24014372028136f59958a4478dc5f7e9" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Thu Mar 12 09:47:09 2015 -0400" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Thu Mar 12 09:47:09 2015 -0400" }, "message": "Fix month offset problem\n\nktgsmith reports that we have a cocup constructing the EFI_TIMESTAMP because\nthe unix value tm_mon is 0-11 and the EFI_TIMESTAMP Month field is 1-12. Fix\nthis by adding one everywhere we use tm_mon.\n\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\n" }, { "commit": "ed79a20e24014372028136f59958a4478dc5f7e9", "tree": "82074a676b0293d2a61806106369d57ebc688a6b", "parents": [ "23c32a94d9d8932bb8dbaa5bff190dc3d28b27c8" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Thu Jan 22 20:40:52 2015 -0800" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Thu Jan 22 20:40:52 2015 -0800" }, "message": "Version: 1.5.2\n\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\n" }, { "commit": "23c32a94d9d8932bb8dbaa5bff190dc3d28b27c8", "tree": "ceab5c28cda96a168ead82d6489b2ac9a1b8a301", "parents": [ "c2060c269bb4f9f44feebd84f66de08a0661e67c" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Thu Jan 22 11:08:07 2015 -0800" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Thu Jan 22 16:58:41 2015 -0800" }, "message": "sha256: Calculate hashes correctly for both X64 and IA32\n\nIn fact, the hash calculation was working more by luck than judgement. We\nneed to be very careful dealing with the sections to make sure we use the\ncorrect part of the optional header.\n\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\n" }, { "commit": "c2060c269bb4f9f44feebd84f66de08a0661e67c", "tree": "054b7721fdd48754b6148357f8679d9f02834253", "parents": [ "251af18e14c9ff558a9183ddb0d0b4f729c9474e" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Wed Jan 21 15:48:45 2015 -0800" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Wed Jan 21 15:48:45 2015 -0800" }, "message": "pecoff: handle both IA32 and X64 images\n\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\n" }, { "commit": "251af18e14c9ff558a9183ddb0d0b4f729c9474e", "tree": "af008de02421be99ac4355ec0349b502d6cea91d", "parents": [ "07f0007624e71d9126c21aa8918f88f9557af0ab" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Tue Jan 06 10:39:40 2015 -0800" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Tue Jan 06 13:14:36 2015 -0800" }, "message": "Make alterations for 32 bit cross compile\n\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\n" }, { "commit": "07f0007624e71d9126c21aa8918f88f9557af0ab", "tree": "fd44ee3a7b08ca59ba4c93fde9cdc3a7d344bc32", "parents": [ "6c59b982f985c3b597d4cfe569339bb06f8b06c1" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Mon Dec 22 17:47:58 2014 -0800" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Mon Dec 22 17:47:58 2014 -0800" }, "message": "Version 1.5.1\n\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\n" }, { "commit": "6c59b982f985c3b597d4cfe569339bb06f8b06c1", "tree": "960f79bc230136f9a98ee9305acd2b57626cf609", "parents": [ "1ee052c8db4e63062167fc6bdcc1cbeebc4b07b6" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Mon Dec 22 17:47:15 2014 -0800" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Mon Dec 22 17:47:15 2014 -0800" }, "message": "cert-to-efi-hash-list: only hash over TBSCertificate\n\nThe UEFI spec mandates this, but Tianocore was hashing over the whole\ncertificate. Now that Tianocore is patched, construct the correct hash.\n\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\n" }, { "commit": "1ee052c8db4e63062167fc6bdcc1cbeebc4b07b6", "tree": "d56c585e412669d51d724de2b128e9c4d6761772", "parents": [ "89e9139856284e58cd06e42035747fbf06e84c3e" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Mon Dec 22 11:26:24 2014 -0800" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Mon Dec 22 11:37:32 2014 -0800" }, "message": "Version 1.5.0\n\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\n" }, { "commit": "89e9139856284e58cd06e42035747fbf06e84c3e", "tree": "77eee5766c6c6bab8a771b1e6fd2d704d3a69505", "parents": [ "fc6c71fb7455749257b79a804c079c619c0d5c76" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Mon Dec 22 11:36:18 2014 -0800" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Mon Dec 22 11:37:32 2014 -0800" }, "message": "cert-to-efi-hash-list: add man page\n\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\n" }, { "commit": "fc6c71fb7455749257b79a804c079c619c0d5c76", "tree": "8e3aa67608b4c0f326476902dd20be759be86ca5", "parents": [ "3fbf09011e26fa99c7191d5782052cac430700cf" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Mon Dec 22 10:59:03 2014 -0800" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Mon Dec 22 10:59:03 2014 -0800" }, "message": "Makefile: Consolidate auth file building rules\n\nIt\u0027s getting a bit complex with hashes, blacklists, updates etc, so\nconsolidate\n\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\n" }, { "commit": "3fbf09011e26fa99c7191d5782052cac430700cf", "tree": "b4cc2011adb10d370285b3c04d594fc4a59993c1", "parents": [ "a480e67749db8dfb0628c78b507744de1f85ce27" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Mon Dec 22 10:28:55 2014 -0800" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Mon Dec 22 10:28:55 2014 -0800" }, "message": "KeyTool: Display revocation signature hashes\n\nAdd the correct types for signature revocation hashes\n\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\n" }, { "commit": "a480e67749db8dfb0628c78b507744de1f85ce27", "tree": "2b7f084d4bf385fcff9c5d0482cdd78ef35b7cea", "parents": [ "28055f8ac7e73b649680b3e4b44422c6564afdfb" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Mon Dec 22 07:25:28 2014 -0800" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Mon Dec 22 10:11:27 2014 -0800" }, "message": "cert-to-efi-hash-list: binary for blacklisting by hash\n\nThe UEFI spec includes the ability to blacklist in dbx by key hash rather than\nby key (including a revocation timestamp). Implement this.\n\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\n" }, { "commit": "28055f8ac7e73b649680b3e4b44422c6564afdfb", "tree": "fc6e7a1dd5e7180faa073f00d46aca26ff3e80a9", "parents": [ "7c813413f514a26b1e0ffcd696d39e89e9c04391" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Mon Dec 22 07:23:59 2014 -0800" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Mon Dec 22 07:32:47 2014 -0800" }, "message": "cert-to-efi-sig-list: clear FIPS errors on module load\n\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\n" }, { "commit": "7c813413f514a26b1e0ffcd696d39e89e9c04391", "tree": "fcda07327c69b6538b986098261972fabe10e14d", "parents": [ "a407ea85dc467429935a9cc9ed19a23b1a1faf6c" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Sun Dec 21 08:49:51 2014 -0800" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Mon Dec 22 07:32:47 2014 -0800" }, "message": "ReadVars, UpdateVars: add support for dbt\n\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\n" }, { "commit": "a407ea85dc467429935a9cc9ed19a23b1a1faf6c", "tree": "7da43ed3ca9bd7f9756c7edc1433088c50e42a90", "parents": [ "fac0bce71fb4c5bf22e2e3e65037a477b70289e8" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Sun Dec 21 08:48:39 2014 -0800" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Mon Dec 22 07:32:47 2014 -0800" }, "message": "KeyTool: add support for dbt\n\ndbt is the signature timestamp database supported by UEFI 2.4\n\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\n" }, { "commit": "fac0bce71fb4c5bf22e2e3e65037a477b70289e8", "tree": "e1ab6fe8df95abe4c627f49d9f9c2c14bf24cc6d", "parents": [ "f77fff3d5bc6cbaab625dc11d7bee5967d291583" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Mon Dec 22 07:19:59 2014 -0800" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Mon Dec 22 07:32:47 2014 -0800" }, "message": "variable.h: add dbt detection support\n\nThere\u0027s an OS indication for the timestamp signature database, so\nadd the definition.\n\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\n" }, { "commit": "f77fff3d5bc6cbaab625dc11d7bee5967d291583", "tree": "5fb4b23f74a0ce524102eb841e1b5997a35a448e", "parents": [ "a9faca77042f718c115b85dfecc7aa38ef01544f" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Sat Dec 20 14:17:25 2014 -0800" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Sat Dec 20 14:17:25 2014 -0800" }, "message": "KeyTool: consolidate definitions in keyinfo variable\n\nRemove an internal copy\n\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\n" }, { "commit": "a9faca77042f718c115b85dfecc7aa38ef01544f", "tree": "fb3398b4af27ac76ed70b1051ed096a564efbf6d", "parents": [ "9f78bfab83dffa2654a205f34d5307afe280ce82" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Fri Dec 19 17:16:50 2014 -0800" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Fri Dec 19 17:16:50 2014 -0800" }, "message": "Version 1.4.4\n\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\n" }, { "commit": "9f78bfab83dffa2654a205f34d5307afe280ce82", "tree": "08b5c7b69dc92a2cb3a190cbc714acfab14d8b3b", "parents": [ "5555eebe84ea5a6e1b2c5b8691f649c2a54f62ca" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Fri Dec 19 17:15:52 2014 -0800" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Fri Dec 19 17:15:52 2014 -0800" }, "message": "Make: allow creation of multiple db certificates\n\nThese are rule preparations for multi-sign\n\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\n" }, { "commit": "5555eebe84ea5a6e1b2c5b8691f649c2a54f62ca", "tree": "606300e4078ce0180d18db3226d689f99cbdc5f9", "parents": [ "9f014f9c01b330bd1bb46aeac406530e2f94d5fb" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Thu Dec 18 18:12:16 2014 -0800" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Thu Dec 18 18:12:16 2014 -0800" }, "message": "Add MS KEK update bundle\n\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\n" }, { "commit": "9f014f9c01b330bd1bb46aeac406530e2f94d5fb", "tree": "5fb57ba8cd82504095c4ec6e6bf3eda3687c7b04", "parents": [ "71ccac7d10bcc750d15584e769683859c5606abd" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Wed Dec 17 15:48:05 2014 -0800" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Wed Dec 17 16:46:13 2014 -0800" }, "message": "Add more .auth file generators\n\nGenerate pk signed updates for db and generate blacklists of DB and the\nms-uefi cert for dbx\n\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\n" }, { "commit": "71ccac7d10bcc750d15584e769683859c5606abd", "tree": "45561c427b0d215aa680bb2178f1af31b008937f", "parents": [ "bff37d865e711cf89eee23b3edf25103be82e1b3" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Wed Dec 17 15:34:32 2014 -0800" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Wed Dec 17 16:45:39 2014 -0800" }, "message": "console.c: Fix longstanding bug (causing crashes)\n\nThe switch between a variable length selector and a fixed one is wrong. It\u0027s\nhardcoded to be rows - 10 instead of rows - 6 - title_lines. This means when\nyou have exactly the right number of rows in the selector it switches over to\na variable selector too early and displays non-existent selector lines (which\nmay run off the end of memory and crash).\n\nAlso tidy up the selector to keep a blank line between the title and the\nbeginning of the selector.\n\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\n" }, { "commit": "bff37d865e711cf89eee23b3edf25103be82e1b3", "tree": "90ff6f2369a290c52c657e2bcbeb15b19ba11152", "parents": [ "40b8dbb8ae1ee20954cb12ae2ec5e03fc4cc6188" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Wed Dec 17 11:07:27 2014 -0800" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Wed Dec 17 12:48:37 2014 -0800" }, "message": "sign-efi-sig-list: fix timestamps\n\nThe original bug which required timestamps a year in the future is long gone,\nso kill the hardcoding and use the correct timestamp from the current date.\n\nAlso fix a race condition where noPK.auth could have the same timestamp as\nPK.auth on fast build machines and thus fail to update.\n\nConvert all times to platform local and use ISO date format for the -t option.\n\nFinally zero the timestamp for update requests as required by the spec\n\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\n" }, { "commit": "40b8dbb8ae1ee20954cb12ae2ec5e03fc4cc6188", "tree": "650646392ca3a5e61093917fc84074495ce68959", "parents": [ "32ac25d9a8d45fbe6262a1aa8708084379157d3a" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Wed Dec 17 11:05:25 2014 -0800" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Wed Dec 17 11:05:25 2014 -0800" }, "message": "Build an update bundle for the Microsoft db key\n\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\n" }, { "commit": "32ac25d9a8d45fbe6262a1aa8708084379157d3a", "tree": "28b2f3b59d8f1c96de32d1fbc542a8f8c19b6c50", "parents": [ "9c8a1a679d6343d1c2e0a204e3bc4442f1ebef10" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Tue Dec 16 14:23:09 2014 -0800" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Tue Dec 16 14:23:09 2014 -0800" }, "message": "Makefile: add targets for DB and KEK update as well as replace\n\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\n" }, { "commit": "9c8a1a679d6343d1c2e0a204e3bc4442f1ebef10", "tree": "18b41b548fe0f635dddfbea25eebc1ab0e41b406", "parents": [ "219af8df23fb469b56ad2b0f4bef9a5eae0e4083" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Tue Dec 16 13:18:17 2014 -0800" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Tue Dec 16 13:18:17 2014 -0800" }, "message": "Keytool: Add ability to execute binary (no arguments)\n\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\n" }, { "commit": "219af8df23fb469b56ad2b0f4bef9a5eae0e4083", "tree": "985c84927fc0e202d9905295feb75a146542e250", "parents": [ "4a95b566fdbc60d92cb2cb80dc2b57260bd186bb" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Tue Dec 16 13:17:21 2014 -0800" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Tue Dec 16 13:17:21 2014 -0800" }, "message": "Fix Make clean\n\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\n" }, { "commit": "4a95b566fdbc60d92cb2cb80dc2b57260bd186bb", "tree": "8f066bc8c96e466ea4537e0559daea4e346cbc5c", "parents": [ "4727744d42ec594d558e5d6c3fcf4c8d63d83186" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Sun Dec 07 13:12:44 2014 -0800" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Sun Dec 07 13:14:20 2014 -0800" }, "message": "version 1.4.3\n\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\n" }, { "commit": "4727744d42ec594d558e5d6c3fcf4c8d63d83186", "tree": "6dd67f70864461a81ccacc48a3cdd2d3ffbc788c", "parents": [ "f0db22ca20e29ad7b3079aee5f78816abf2265da" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Sun Dec 07 13:09:37 2014 -0800" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Sun Dec 07 13:11:19 2014 -0800" }, "message": "sign-efi-sig-list: remove all authenticated attributes from signature\n\nUEFI section 7.2.1 requires this and the current PKCS7 routines leave\nattributes like s/mime types and signing time in there. Fix this by using the\nPCKS7_NOATTRS flag.\n\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\n\n# Please enter the commit message for your changes. Lines starting\n# with \u0027#\u0027 will be ignored, and an empty message aborts the commit.\n# Explicit paths specified without -i or -o; assuming --only paths...\n# On branch master\n# Your branch is up-to-date with \u0027origin/master\u0027.\n#\n# Changes to be committed:\n#\tmodified: sign-efi-sig-list.c\n#\n# Untracked files:\n#\tacer/\n#\tlib/kernel_efivars.c.rej\n#\ttmp.sig\n#\n\n# Please enter the commit message for your changes. Lines starting\n# with \u0027#\u0027 will be ignored, and an empty message aborts the commit.\n#\n# Date: Sun Dec 7 13:09:37 2014 -0800\n#\n# On branch master\n# Your branch is ahead of \u0027origin/master\u0027 by 2 commits.\n# (use \"git push\" to publish your local commits)\n#\n# Changes to be committed:\n#\tmodified: sign-efi-sig-list.c\n#\n# Untracked files:\n#\tacer/\n#\tlib/kernel_efivars.c.rej\n#\ttmp.sig\n#\n" }, { "commit": "f0db22ca20e29ad7b3079aee5f78816abf2265da", "tree": "b99b48168541189554eb9ada77bb270dc6db8888", "parents": [ "c33fc28e6be00ac0bfae7fcff48170830a4730d8" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Sun Dec 07 13:09:10 2014 -0800" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Sun Dec 07 13:09:10 2014 -0800" }, "message": "sign-efi-sig-list: fixs FIPS module verification errors\n\nOn openSUSE at least, the FIPS module is loaded separately. Unfortunately\nthis will cause openssl to fail the FIPS verification on loading all ciphers:\n\n139983138506384:error:2D06C06E:FIPS routines:FIPS_module_mode_set:fingerprint does not match:fips.c:429:\n\nThe error is harmless, but annoying, so clear it out of the error buffer after\nloading everything.\n\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\n\n# Please enter the commit message for your changes. Lines starting\n# with \u0027#\u0027 will be ignored, and an empty message aborts the commit.\n# Explicit paths specified without -i or -o; assuming --only paths...\n# On branch master\n# Your branch is up-to-date with \u0027origin/master\u0027.\n#\n# Changes to be committed:\n#\tmodified: sign-efi-sig-list.c\n#\n# Untracked files:\n#\tacer/\n#\tlib/kernel_efivars.c.rej\n#\ttmp.sig\n#\n" }, { "commit": "c33fc28e6be00ac0bfae7fcff48170830a4730d8", "tree": "167d02b39dc33c2d21e1d93fe9639646e0d5c8b1", "parents": [ "9af07a90a3e2246be5a7d01e3a037cfa731eb5dc" ], "author": { "name": "sakaki", "email": "sakaki@deciban.com", "time": "Sun May 18 20:12:46 2014 +0100" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Tue May 27 11:07:50 2014 +0400" }, "message": "safer mount output parsing\n\nWhen trying it recently on a Gentoo box (running LVM), I encountered a problem\n- all the programs would exit with \"No efivarfs filesystem is mounted\"\n\nTracking this down, it turns out that the output of the mount command\ncontains an extra field (in Gentoo anyway) when it is an LVM mount - so\nfor example, I get:\n\n# mount -l\n\n proc on /proc type proc (rw,nosuid,nodev,noexec,relatime)\n none on /run type tmpfs (rw,nosuid,nodev,relatime,mode\u003d755)\n udev on /dev type devtmpfs\n (rw,nosuid,relatime,size\u003d10240k,nr_inodes\u003d995888,mode\u003d755)\n devpts on /dev/pts type devpts (rw,relatime,gid\u003d5,mode\u003d620)\n sysfs on /sys type sysfs (rw,nosuid,nodev,noexec,relatime)\n /dev/mapper/vg1-root on / type ext4\n (rw,noatime,discard,errors\u003dremount-ro,data\u003dordered) *[root]*\n tmpfs on /dev/shm type tmpfs (rw,nosuid,nodev)\n tmpfs on /sys/fs/cgroup type tmpfs (rw,nosuid,nodev,noexec,mode\u003d755)\n cgroup on /sys/fs/cgroup/systemd type cgroup\n (rw,nosuid,nodev,noexec,relatime,release_agent\u003d/usr/lib/systemd/systemd-cgroups-agent,name\u003dsystemd)\n efivarfs on /sys/firmware/efi/efivars type efivarfs\n (rw,nosuid,nodev,noexec,relatime)\n tmpfs on /tmp type tmpfs (rw)\n fusectl on /sys/fs/fuse/connections type fusectl (rw,relatime)\n /dev/mapper/vg1-home on /home type ext4\n (rw,relatime,discard,data\u003dordered) *[home]*\n\nNote the entries in bold (\u0027[root]\u0027 and \u0027[home]\u0027). These mess up the\nsscanf parsing in the kernel_variable_init() function, getting it out of\nstep, and ultimately meaning that it fails to recognize the efivarfs\nentry. Hence the error.\n\nThe enclosed small patch fixes this, by switching the final \"%*s\\n\" in\nthe sscanf to \"%*[^\\n]\\n\", which will consume anything up to the newline.\n\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\n" }, { "commit": "9af07a90a3e2246be5a7d01e3a037cfa731eb5dc", "tree": "aea41f12c25cd1c2d3bfd8af7ce694db034ec53d", "parents": [ "272314ecc87f338fbe48048de4ead22553f53890" ], "author": { "name": "Edwin", "email": "edwindecaluwe@gmail.com", "time": "Wed Jan 15 19:57:54 2014 -0600" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Sat Jan 18 08:31:18 2014 -0800" }, "message": "kernel_efivars: Fix detection of efivarfs filesystem path.\n\nMake init correctly detect the efivarfs filesystem path based on mount\noutput. Before this patch code only works when the efivarfs filesystem is\nthe last entry in the mount output.\n\nSigned-off-by: Edwin de Caluwe \u003cedwindecaluwe@gmail.com\u003e\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\n" }, { "commit": "272314ecc87f338fbe48048de4ead22553f53890", "tree": "28655fb638dd5461f1b0e7b77c9313bb375e34ce", "parents": [ "f5d338c8758df209b32d2ed66bc3228f3c3c5ae4" ], "author": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Sun Sep 01 14:58:15 2013 -0700" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Thu Sep 19 08:14:24 2013 -0500" }, "message": "Makefile/Make.rules: don\u0027t rely on vim-core\n\nThis adds the xxdi.pl script to replace the call to \u0027xxd -i\u0027, removing a\nbuild dependancy on vim-core, which some distros don\u0027t really want to\nhave (i.e. Gentoo and its build derivatives like ChromeOS and CoreOS.)\n\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\n" }, { "commit": "f5d338c8758df209b32d2ed66bc3228f3c3c5ae4", "tree": "096ba8e5805edd2e6f7f4081e72ca126e4a9eca6", "parents": [ "bb287cfce85744e83055811e79c5ccc621ea990c" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Wed Apr 17 07:54:59 2013 -0700" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Wed Apr 17 07:54:59 2013 -0700" }, "message": "COPYING: complete lib/ transition to LGPL\n\nThis just tidies up the transition by actually adding a copy of LGPLv2.1 to\nthe COPYING file and also adding a future permission from contributors for the\ncode to change licence if a move into or out of lib/ is deemed necessary.\n\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\n" }, { "commit": "bb287cfce85744e83055811e79c5ccc621ea990c", "tree": "e102efbfd059f38e846a918e07408f8376783c5e", "parents": [ "be9a805f1c95f0e084680b7062bcdbd3df10e9f2" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Tue Mar 19 23:12:43 2013 +0000" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Tue Mar 19 23:12:43 2013 +0000" }, "message": "efi-readvar: add MokList as possible variable to read from\n" }, { "commit": "be9a805f1c95f0e084680b7062bcdbd3df10e9f2", "tree": "f0306602b6ba4118362908a2bd925782d085dbc2", "parents": [ "743d0a5dd099b6ddaaf79bbe0ebe4ab5bd809fe9" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Mon Mar 11 12:41:13 2013 +0000" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Mon Mar 11 12:41:13 2013 +0000" }, "message": "COPYING: update licence: GPLv2+openSSL and LGPLv2.1\n\nThe licence is changed to make all files in lib/ distributed under LGPL 2.1 to\nmake it easy for the library components to be incorporated into other works\nnot necessarily distributed under GPL. All other programmes are distributed\nunder GPLv2 with an openSSL additional permission so the binaries could be\nlinked with openSSL should someone wish to add cryptographic details.\n\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\n" }, { "commit": "743d0a5dd099b6ddaaf79bbe0ebe4ab5bd809fe9", "tree": "daaf92c8baeda7671858fa932efda59f57ec677c", "parents": [ "0980748056e5af08f551f779e0755a783325953f" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Fri Mar 08 10:50:08 2013 +0000" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Fri Mar 08 10:50:08 2013 +0000" }, "message": "security_policy: check that the override is actually installed\n\nRead back the memory we wrote to for installing it and verify that it was\nchanged.\n\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\n" }, { "commit": "0980748056e5af08f551f779e0755a783325953f", "tree": "97bfd4edc16609b184ce697d9f6a9bef5a8695ca", "parents": [ "b0a05d501c9d56aa2cf0e3d4c96e2d393cf0a63e" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Thu Mar 07 13:01:05 2013 +0000" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Thu Mar 07 13:01:05 2013 +0000" }, "message": "cert-to-efi-sig-list: remove unimplemented RSA2048 certificate support\n" }, { "commit": "b0a05d501c9d56aa2cf0e3d4c96e2d393cf0a63e", "tree": "6d6e4606a235b22d18e42684a88180787e865ca0", "parents": [ "75d8b8a5b90e54b9ab27f3c43b481253ca219452" ], "author": { "name": "Jiri Kosina", "email": "jkosina@suse.cz", "time": "Thu Mar 07 13:57:00 2013 +0100" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Thu Mar 07 12:58:40 2013 +0000" }, "message": "efitools: fix build warnings in cert-to-efi-sig-list.c\n\nFix\n\ncert-to-efi-sig-list.c:60:4: warning: implicit declaration of function ‘str_to_guid’ [-Wimplicit-function-declaration]\n\nby properly including guid.h\n\nSigned-off-by: Jiri Kosina \u003cjkosina@suse.cz\u003e\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\n" }, { "commit": "75d8b8a5b90e54b9ab27f3c43b481253ca219452", "tree": "c97adf52b12c1778e9137e977569f9717881fdb3", "parents": [ "9acbcab86f2f3a802e5eac3f27158ef6521e2c79" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Tue Mar 05 15:51:41 2013 +0000" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Tue Mar 05 15:51:41 2013 +0000" }, "message": "Version: 1.4.1\n" }, { "commit": "9acbcab86f2f3a802e5eac3f27158ef6521e2c79", "tree": "affb83ca2a7331efa196286bca684cf778be3063", "parents": [ "804903d6ed2aa10b900f14f920042f74a1112f8d" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Tue Mar 05 12:05:33 2013 +0000" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Tue Mar 05 12:05:33 2013 +0000" }, "message": "UpdateVars: need %s not %d to print a filename\n" }, { "commit": "804903d6ed2aa10b900f14f920042f74a1112f8d", "tree": "0ef2fb6cc604fa9718aeb117bb57906ae511028d", "parents": [ "02cb121f04aa96f58c166d00537b11899c900334" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Tue Mar 05 10:35:41 2013 +0000" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Tue Mar 05 10:35:41 2013 +0000" }, "message": "PreLoader: add keystroke check to start HashTool\n\nThis adds a no wait keystroke check to PreLoader. If you boot up and hold\ndown the \u0027H\u0027 key, it will automatically start HashTool even if the hash of the\nloader is already enrolled.\n\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\n" }, { "commit": "02cb121f04aa96f58c166d00537b11899c900334", "tree": "18df3b1719ad7c0759128a9857060a8d1ff5b63b", "parents": [ "ba1950e12b4612747f85cb70d3393020122f2ca3" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Tue Mar 05 10:34:08 2013 +0000" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Tue Mar 05 10:34:08 2013 +0000" }, "message": "console: add new console_check_for_keystroke() function\n\nThis new function will check if a key has been pressed without waiting and\nreturn true if it has.\n\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\n" }, { "commit": "ba1950e12b4612747f85cb70d3393020122f2ca3", "tree": "221b675fedc85694ccbd20480e679011614ef41e", "parents": [ "2f9cdf87c577cc6dfa8acc758bd2c39478b7bb69" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Tue Mar 05 10:30:01 2013 +0000" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Tue Mar 05 10:30:01 2013 +0000" }, "message": "variables: Fix SetMem cockup\n\nSetMem takes the arguments dest, size, character, not like the unix memset\nprototype (thanks EFI committe). Fix this in a couple of places where a\nvariable wasn\u0027t getting zeroed.\n\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\n" }, { "commit": "2f9cdf87c577cc6dfa8acc758bd2c39478b7bb69", "tree": "edb5a0d44150af4519b7b72f2970c4e7d51ae962", "parents": [ "c37ca9ed59079dffddf02452b0ad2d9f58165f08" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Fri Mar 01 06:11:16 2013 -0600" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Fri Mar 01 06:11:16 2013 -0600" }, "message": "Fix for Ubuntu Builds\n" }, { "commit": "c37ca9ed59079dffddf02452b0ad2d9f58165f08", "tree": "e94d79ea689b5dc5f8517c3b8dcacafcf866d643", "parents": [ "1b1e9f0bbe276dc5b738519e804d65ccee0751aa" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Fri Mar 01 05:55:42 2013 -0600" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Fri Mar 01 05:55:42 2013 -0600" }, "message": "fix for debian builds (include sys/wait.h for WEXITSTATUS)\n" }, { "commit": "1b1e9f0bbe276dc5b738519e804d65ccee0751aa", "tree": "4044f6e2fb703e4b82ffc16b20bd9dd37d336d95", "parents": [ "76e6251b1f0011b698227ffe17049de39625be0b" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Fri Mar 01 05:41:36 2013 -0600" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Fri Mar 01 05:41:36 2013 -0600" }, "message": "Version 1.4.0\n\nfor in linux key manipulations\n" }, { "commit": "76e6251b1f0011b698227ffe17049de39625be0b", "tree": "0c5a0126fa8f10133046e38abe33f2d4bb62807c", "parents": [ "97687b0f2fb135ecca542ed057c1bf986f79b526" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Fri Mar 01 05:40:19 2013 -0600" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Fri Mar 01 05:40:19 2013 -0600" }, "message": "efi-keytool is vestigial, don\u0027t build it\n" }, { "commit": "97687b0f2fb135ecca542ed057c1bf986f79b526", "tree": "cd26db0ee78c04c0b9a705a7cb7608ec9e40ece1", "parents": [ "b7b12b331664992ab3fdc5c75fe671798a4364fa" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Fri Mar 01 05:32:32 2013 -0600" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Fri Mar 01 05:39:32 2013 -0600" }, "message": "efi-updatevar: Add variable deletion as an option\n\nEnable a -d \u003csig\u003e[-\u003centry\u003e] option to delete signature \u003centry\u003e of\nSignature List \u003csig\u003e or the entire signature list.\n\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\n" }, { "commit": "b7b12b331664992ab3fdc5c75fe671798a4364fa", "tree": "aa94d7a439532f29c53afcb65d5b02908f9075a8", "parents": [ "9c251b8534796f734699d6e61e49fdce747e0b6a" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Fri Mar 01 04:45:16 2013 -0600" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Fri Mar 01 04:54:05 2013 -0600" }, "message": "efi-updatevar: add ability to update in User Mode\n\nFor this to work, you must possess the secret key for the relevant\nsigning variable (PK for PK and KEK or KEK for db and dbx). We\nactually check the private key against all public keys in the variable\nto make sure everything is OK and then do a signed update.\n\nso to add the hash of HelloWorld.efi to db, the command issued would be\n\nefi-updatevar -k KEK.key -b HelloWorld.efi db\n\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\n" }, { "commit": "9c251b8534796f734699d6e61e49fdce747e0b6a", "tree": "339d4b27a0f4a057f528e45245af573c001d0356", "parents": [ "f4c5c76ef75d8e9d5b28a7716e8381ef4e0b18e7" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Thu Feb 28 11:00:58 2013 -0600" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Thu Feb 28 11:00:58 2013 -0600" }, "message": "efi-updatevar: use hash_to_esl() function\n\n-g \u003cguid\u003e for -b now works\n" }, { "commit": "f4c5c76ef75d8e9d5b28a7716e8381ef4e0b18e7", "tree": "8bc1342dd72303e83dc33fe1b9790174b0ce8f32", "parents": [ "1411267144d1c2e874884190d071bd707d2e7524" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Thu Feb 28 10:59:48 2013 -0600" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Thu Feb 28 10:59:48 2013 -0600" }, "message": "kernel_efivars: separate out hash to esl conversion function for later use\n" }, { "commit": "1411267144d1c2e874884190d071bd707d2e7524", "tree": "492b21f3fd0572bd29161c1b32783ec9ef1378ba", "parents": [ "30f2fd6a36d86f823b655561bd465d252caffcf1" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Thu Feb 28 10:13:42 2013 -0600" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Thu Feb 28 10:13:42 2013 -0600" }, "message": "efi-updatevar: add ability to insert X509 key from certificate file\n\nAlso accept certificate file in DER format with .der or .cer extension.\n\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\n" }, { "commit": "30f2fd6a36d86f823b655561bd465d252caffcf1", "tree": "0be7a726f4d12bda4b9c9c4f7cb2d7bb8083c15c", "parents": [ "4c4a5d90605c3cb1417be40965accbc94cf2bd27" ], "author": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Thu Feb 28 10:12:57 2013 -0600" }, "committer": { "name": "James Bottomley", "email": "JBottomley@Parallels.com", "time": "Thu Feb 28 10:12:57 2013 -0600" }, "message": "guid: return error if str_to_guid() fails\n" } ], "next": "4c4a5d90605c3cb1417be40965accbc94cf2bd27" }