From 05ae7fe0d87e6efe085f436666b34b531ca35110aa5a4f8383722090085cdcf2 Mon Sep 17 00:00:00 2001
From: Joey Lee <jlee@suse.com>
Date: Thu, 15 Feb 2024 08:29:23 +0000
Subject: [PATCH] Accepting request 1144843 from
 home:gary_lin:branches:devel:openSUSE:Factory

- Update shim-install to set the TPM2 SRK algorithm (bsc#1213945)
  92d0f4305df73 Set the SRK algorithm for the TPM2 protector

OBS-URL: https://build.opensuse.org/request/show/1144843
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory/shim?expand=0&rev=208
---
 shim-install | 8 +++++++-
 shim.changes | 6 ++++++
 2 files changed, 13 insertions(+), 1 deletion(-)

diff --git a/shim-install b/shim-install
index fb56bf2..708d026 100644
--- a/shim-install
+++ b/shim-install
@@ -384,8 +384,14 @@ prepare_cryptodisk () {
     fi
   fi
 
+  tpm_srk_alg="${GRUB_TPM2_SRK_ALG}"
+
+  if [ -z "$tpm_srk_alg" ]; then
+    tpm_srk_alg="RSA"
+  fi
+
   cat <<EOF
-tpm2_key_protector_init -T \$prefix/$tpm_sealed_key
+tpm2_key_protector_init -a $tpm_srk_alg -T \$prefix/$tpm_sealed_key
 if ! cryptomount -u $uuid --protector tpm2; then
     cryptomount -u $uuid
 fi
diff --git a/shim.changes b/shim.changes
index 5686eaa..3de059e 100644
--- a/shim.changes
+++ b/shim.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Wed Feb  7 08:54:52 UTC 2024 - Gary Ching-Pang Lin <glin@suse.com>
+
+- Update shim-install to set the TPM2 SRK algorithm (bsc#1213945)
+  92d0f4305df73 Set the SRK algorithm for the TPM2 protector
+
 -------------------------------------------------------------------
 Fri Feb  2 05:57:07 UTC 2024 - Gary Ching-Pang Lin <glin@suse.com>