f83d4083f6
- also include old openSUSE 4096 bit certificate to be able to still boot kernels signed with that key. - add show_signatures script OBS-URL: https://build.opensuse.org/request/show/196609 OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory/shim?expand=0&rev=38
22 lines
315 B
Bash
22 lines
315 B
Bash
#!/bin/bash
|
|
# show signatures on a PE binary
|
|
set -e
|
|
|
|
infile="$1"
|
|
|
|
if [ -z "$infile" -o ! -e "$infile" ]; then
|
|
echo "USAGE: $0 file.efi"
|
|
exit 1
|
|
fi
|
|
|
|
nssdir=`mktemp -d`
|
|
cleanup()
|
|
{
|
|
rm -r "$nssdir"
|
|
}
|
|
trap cleanup EXIT
|
|
echo > "$nssdir/pw"
|
|
certutil -f "$nssdir/pw" -d "$nssdir" -N
|
|
|
|
pesign -n "$nssdir" -S -i "$infile"
|