ea8904665d
- Add SIGNATURE_UPDATE.txt to state the steps to update signature-*.asc - Update the comment of strip_signature.sh OBS-URL: https://build.opensuse.org/request/show/443762 OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory/shim?expand=0&rev=123
26 lines
1.2 KiB
Plaintext
26 lines
1.2 KiB
Plaintext
==== openSUSE ====
|
|
For openSUSE, the devel project of shim is devel:openSUSE:Factory. ALWAYS
|
|
use the latest Leap to build shim-opensuse.efi for UEFI CA. Tumbleweed
|
|
shares the same binary with Leap, so do the older Leap releases.
|
|
|
|
The steps to udpate signature-opensuse.asc:
|
|
1) Branch devel:openSUSE:Factory/shim.
|
|
2) Add the latest Leap, e.g. 42.2, to the build target.
|
|
3) Build shim-opensuse.efi against the latest Leap.
|
|
4) Strip the signature from shim-opensuse.efi with strip_signature.sh.
|
|
5) Send shim-opensuse.efi to UEFI CA to request a new signature.
|
|
6) Extract the signature from the signed shim.efi with extract_signature.sh
|
|
7) Update signature-opensuse.asc.
|
|
|
|
==== SLES ===
|
|
Since there is no devel project for shim in SLES, just build shim-sles.efi with
|
|
the latest SLES and then send it to UEFI CA for a new signature.
|
|
|
|
The steps to update signature-sles.asc:
|
|
1) Branch shim from the latest SLES and apply the update/fix.
|
|
2) Build shim-sles.efi against the latest SLES.
|
|
3) Strip the signature from shim-sles.efi with strip_signature.sh.
|
|
4) Send shim-sles.efi to UEFI CA to request a new signature.
|
|
5) Extract the signature from the signed shim.efi with extract_signature.sh
|
|
6) Update signature-sles.asc.
|