Gary Ching-Pang Lin
dd00d3c666
- don't include binary in the sources. Instead package the raw signature and attach it during build (bnc#813448). OBS-URL: https://build.opensuse.org/request/show/186534 OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory/shim?expand=0&rev=32
22 lines
310 B
Bash
22 lines
310 B
Bash
#!/bin/bash
|
|
# show hash of PE binary
|
|
set -e
|
|
|
|
infile="$1"
|
|
|
|
if [ -z "$infile" -o ! -e "$infile" ]; then
|
|
echo "USAGE: $0 file.efi"
|
|
exit 1
|
|
fi
|
|
|
|
nssdir=`mktemp -d`
|
|
cleanup()
|
|
{
|
|
rm -r "$nssdir"
|
|
}
|
|
trap cleanup EXIT
|
|
echo > "$nssdir/pw"
|
|
certutil -f "$nssdir/pw" -d "$nssdir" -N
|
|
|
|
pesign -n "$nssdir" -h -P -i "$infile"
|