Tags: tonper/shim
Tags
Add CryptoPkg/Library/BaseCryptLib/ and CryptoPkg/Library/OpensslLib/
Cryptlib: Fix our update helpers and Configure Signed-off-by: Peter Jones <[email protected]>
shim 15 - better checking for bad linker output - flicker-free console if there's no error output - improved http boot support - better protocol re-installation - dhcp proxy support - tpm measurement even when verification is disabled - REQUIRE_TPM build flag - more reproducable builds - measurement of everything verified through shim_verify() - coverity and scan-build checker make targets - misc cleanups - currently we don't support multiple certificates in our local certificate databases, but pjones was wrong about why, and it's not Michael Brown's fault at all. Please disregard the statement in commit cdbfb5a
shim 15 - better checking for bad linker output - flicker-free console if there's no error output - improved http boot support - better protocol re-installation - dhcp proxy support - tpm measurement even when verification is disabled - REQUIRE_TPM build flag - more reproducable builds - measurement of everything verified through shim_verify() - coverity and scan-build checker make targets - misc cleanups - currently we don't support multiple certificates in our local certificate databases, but pjones was wrong about why, and it's not Michael Brown's fault at all. Please disregard the statement in commit cdbfb5a
shim 14 - Important bug fix release The shim EFI binary cannot have sections whose offset is not a multiple of the file header offset, or else signtool.exe will generate an incorrect signature that cannot be verified. Currently we generate a PLT section that is incorrectly aligned, due to an error in rebasing OpenSSL to fix a different issue. This version rectifies that error, as well as adding --no-undefined to the final link, so that any such missing symbol will cause a build error. This doesn't necessarily solve the file offset problem in all cases, but it does solve it in all the cases we've actually seen so far.
"in_protocol" is used in more than shim.o; make it not static. Signed-off-by: Peter Jones <[email protected]>
shim 13: - OpenSSL reverted to 1.0.2k to make the cert chaining of existing deployments stay working - Better PCR usage for TPM - TPM documentation in README.tpm - More configurable build via make variables: ENABLE_SHIM_CERT ENABLE_SHIM_HASH ENABLE_SBSIGN LIBDIR EFIDIR VENDOR_CERT_FILE VENDOR_DB_FILE - Better MoK documentation in MokVars.txt - Better debuginfo generation - Lots of minor bug fixes.
PreviousNext