Skip to content

Tags: tonper/shim

Tags

openssl-rebase-helper-start

Toggle openssl-rebase-helper-start's commit message
Add CryptoPkg/Library/BaseCryptLib/ and CryptoPkg/Library/OpensslLib/

openssl-rebase-helper-end

Toggle openssl-rebase-helper-end's commit message
Cryptlib: Fix our update helpers and Configure

Signed-off-by: Peter Jones <[email protected]>

15

Toggle 15's commit message

Verified

This tag was signed with the committer’s verified signature. The key has expired.
vathpela Peter Jones
shim 15

- better checking for bad linker output
- flicker-free console if there's no error output
- improved http boot support
- better protocol re-installation
- dhcp proxy support
- tpm measurement even when verification is disabled
- REQUIRE_TPM build flag
- more reproducable builds
- measurement of everything verified through shim_verify()
- coverity and scan-build checker make targets
- misc cleanups
- currently we don't support multiple certificates in our local
  certificate databases, but pjones was wrong about why, and it's not
  Michael Brown's fault at all.  Please disregard the statement in
  commit cdbfb5a

latest-release

Toggle latest-release's commit message

Verified

This tag was signed with the committer’s verified signature. The key has expired.
vathpela Peter Jones
shim 15

- better checking for bad linker output
- flicker-free console if there's no error output
- improved http boot support
- better protocol re-installation
- dhcp proxy support
- tpm measurement even when verification is disabled
- REQUIRE_TPM build flag
- more reproducable builds
- measurement of everything verified through shim_verify()
- coverity and scan-build checker make targets
- misc cleanups
- currently we don't support multiple certificates in our local
  certificate databases, but pjones was wrong about why, and it's not
  Michael Brown's fault at all.  Please disregard the statement in
  commit cdbfb5a

14

Toggle 14's commit message

Verified

This tag was signed with the committer’s verified signature. The key has expired.
vathpela Peter Jones
shim 14 - Important bug fix release

The shim EFI binary cannot have sections whose offset is not a multiple of the
file header offset, or else signtool.exe will generate an incorrect signature
that cannot be verified.  Currently we generate a PLT section that is
incorrectly aligned, due to an error in rebasing OpenSSL to fix a different
issue.  This version rectifies that error, as well as adding --no-undefined to
the final link, so that any such missing symbol will cause a build error.  This
doesn't necessarily solve the file offset problem in all cases, but it does
solve it in all the cases we've actually seen so far.

new-stuff-after-14

Toggle new-stuff-after-14's commit message
"in_protocol" is used in more than shim.o; make it not static.

Signed-off-by: Peter Jones <[email protected]>

13

Toggle 13's commit message

Verified

This tag was signed with the committer’s verified signature. The key has expired.
vathpela Peter Jones
shim 13:

- OpenSSL reverted to 1.0.2k to make the cert chaining of existing
  deployments stay working
- Better PCR usage for TPM
- TPM documentation in README.tpm
- More configurable build via make variables:
  ENABLE_SHIM_CERT
  ENABLE_SHIM_HASH
  ENABLE_SBSIGN
  LIBDIR
  EFIDIR
  VENDOR_CERT_FILE
  VENDOR_DB_FILE
- Better MoK documentation in MokVars.txt
- Better debuginfo generation
- Lots of minor bug fixes.

12

Toggle 12's commit message

Verified

This tag was signed with the committer’s verified signature. The key has expired.
vathpela Peter Jones
Update to version 12

    - OpenSSL 1.1.0e (glin)
    - Workaround for signtool.exe bugs (pjones)
    - Bug fix for wrong options passed to second stage (jsgruber)

11

Toggle 11's commit message

Verified

This tag was signed with the committer’s verified signature. The key has expired.
vathpela Peter Jones
Update to 11

- generate_hash(): fix the regression (Lans Zhang)
- Ignore BDS when it tells us we got our own path on the command line.

10

Toggle 10's commit message

Verified

This tag was signed with the committer’s verified signature. The key has expired.
vathpela Peter Jones
Update to 10-1

- Support ia32
- Handle various different load option implementation differences
- TPM 1 and TPM 2 support.
- Update to OpenSSL 1.0.2k
- GCC 7 support