-
Notifications
You must be signed in to change notification settings - Fork 3
/
ChangeLog
720 lines (360 loc) · 19.2 KB
/
ChangeLog
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
2020-06-11 caf0a56 James Bottomley <[email protected]>
* Version 0.9.4
2020-06-06 4dbec25 James Bottomley <[email protected]>
* docs: add man page for sbkeysync
2020-06-06 24eca4a James Bottomley <[email protected]>
* Enable -Werror for builds
2020-06-06 f2a778b James Bottomley <[email protected]>
* Fix errors on 32 bit
2020-06-06 6cf70d5 James Bottomley <[email protected]>
* sbverify: refer to unused function
2020-06-06 6ec37a7 James Bottomley <[email protected]>
* sbvarsign: remove unused global variable
2020-06-06 8bc3a42 James Bottomley <[email protected]>
* Fix some openssl 1.1.0 deprecated functions
2020-06-05 65126db James Bottomley <[email protected]>
* Tests: Add intermediate certificate tests to the sign-verify cases
2020-06-05 85790e7 James Bottomley <[email protected]>
* sbverify: fix verification with intermediate certificates
2020-06-04 be0db81 AKASHI Takahiro <[email protected]>
* sbsign: allow for adding intermediate certificates
2020-01-09 713f606 James Bottomley <[email protected]>
* Version 0.9.3
2020-01-09 136dbbb James Bottomley <[email protected]>
* README: update git location and add mailing list information
2020-01-09 a23bab2 Laszlo Ersek <[email protected]>
* sbvarsign: fix "EFI_VARIABLE_AUTHENTICATION_2.TimeStamp.Year" assignment
2019-04-19 5075f0d Steve McIntyre <[email protected]>
* Fix PE/COFF checksum calculation
2019-01-09 6082c13 James Bottomley <[email protected]>
* Version 0.9.2
2019-01-09 f770423 James Bottomley <[email protected]>
* src/image.c: remove alignment of regions
2019-01-09 7d0af72 James Bottomley <[email protected]>
* sbvarsign: use SignedData instead of PKCS7 for authenticated updates
2018-02-20 bfa0e2a Guy Lunardi <[email protected]>
* Fix Fedora Build
2017-10-28 7c5ae40 James Bottomley <[email protected]>
* Version 0.9.1
2017-10-28 dd0cdb0 James Bottomley <[email protected]>
* sbsign, sbvarsign: support engine based private keys
2017-10-19 5dbccc0 James Bottomley <[email protected]>
* Version 0.9
2017-10-19 ecb0bb9 James Bottomley <[email protected]>
* Fix Debian 8 and Leap_42.1 builds
2017-10-19 da9e173 James Bottomley <[email protected]>
* tests: Fix up to work on arbitrary architectures
2017-10-18 e755471 James Bottomley <[email protected]>
* tests/detach-remove.sh: fix for i386 pecoff size problems
2017-10-18 a982caf James Bottomley <[email protected]>
* tests: fix up the generation of the test pecoff binary for gcc-7.2
2017-10-18 9695384 James Bottomley <[email protected]>
* tests: fix signature resign/reattach test problems
2016-06-26 a674a7e Ben Hutchings <[email protected]>
* Update OpenSSL API usage to support OpenSSL 1.1
2017-10-18 be46e95 James Bottomley <[email protected]>
* make check: fix test environment problem
2016-11-16 51cd64b James Bottomley <[email protected]>
* Add OPENSSL_config(NULL) to each binary to load openssl.cnf
2016-02-14 81a96b3 James Bottomley <[email protected]>
* Version: 0.8
2016-02-12 69d05ff James Bottomley <[email protected]>
* sbkeysync: don't include efi.h
2016-02-12 38575ff James Bottomley <[email protected]>
* configure: build on arm
2016-01-27 cf9a310 Mathieu Trudel-Lapierre <[email protected]>
* sbverify: Clear out content for the signature we're building
2015-10-27 b213bf3 Linn Crosetto <[email protected]>
* Handle odd buffer lengths in checksum
2015-07-15 ce3550b Steve Langasek <[email protected]>
* Support openssl 1.0.2b and above
2016-01-27 29639fd Ard Biesheuvel <[email protected]>
* sbsigntool: add support for ARM and Aarch64 PE/COFF images
2016-01-27 59edca1 Ard Biesheuvel <[email protected]>
* sbsigntool: fix handling of zero sized sections
2016-01-27 f5825a2 Ard Biesheuvel <[email protected]>
* sbsigntool: remove doubly defined IMAGE_FILE_MACHINE_AMD64
2016-01-27 0a7024f James Bottomley <[email protected]>
* sbverify: add extra expiry errors to ignore
2016-01-27 2090a6c Steve Langasek <[email protected]>
* Update the PE checksum field using the somewhat-underdocumented algorithm, so that we match the Microsoft implementation in our signature generation.
2015-01-06 67e3771 James Bottomley <[email protected]>
* OBS add correcting definition of EFI_ARCH
2014-12-19 af00687 James Bottomley <[email protected]>
* Version 0.7
2014-12-19 39333a3 James Bottomley <[email protected]>
* sbsign, sbattach, sbverify: add multiple signature support
2014-12-19 a5be9e5 James Bottomley <[email protected]>
* sbverify: fix verification
2014-12-19 c6caf1b James Bottomley <[email protected]>
* Clear ssl errors after loading everyting
2013-09-30 a482ebd James Bottomley <[email protected]>
* Fix for multi-sign
2013-04-11 00271cd James Bottomley <[email protected]>
* image.c: clear image variable
2012-11-13 130b244 Jeremy Kerr <[email protected]>
* sbkeysync: add corrected efivars magic
2012-10-11 ce3498a Jeremy Kerr <[email protected]>
* Version 0.6
2012-10-10 7c4465c Jeremy Kerr <[email protected]>
* sbverify: explicitly trust all certificates given in --cert arguments
2012-10-10 2038c41 Jeremy Kerr <[email protected]>
* sbverify: Add --verbose option
2012-10-10 86219ed Jeremy Kerr <[email protected]>
* Version 0.5
2012-10-08 aa60392 Jeremy Kerr <[email protected]>
* sbkeysync: change default efivarfs mountpoint to /sys/.../efivars/
2012-10-02 53d38e7 Jeremy Kerr <[email protected]>
* Version 0.4
2012-10-02 e8a2989 Jeremy Kerr <[email protected]>
* image: improve handling of unaligned section tables
2012-10-02 c6996fc Jeremy Kerr <[email protected]>
* image: use data_size in cert table header
2012-09-28 01d2aa4 Jeremy Kerr <[email protected]>
* image: improve section table parsing
2012-09-28 22fa5ba Jeremy Kerr <[email protected]>
* image: Allow variable sized data directories
2012-09-05 027bde0 Jeremy Kerr <[email protected]>
* sbvarsign: fix incorrect pointer in add_auth_descriptor
2012-09-05 8a9366d Jeremy Kerr <[email protected]>
* sbvarsign: auth descriptor hash does not cover the \0 in the varname
2012-08-24 6a56400 Jeremy Kerr <[email protected]>
* sbkeysync: fix siglist iteration
2012-08-24 6e4e566 Jeremy Kerr <[email protected]>
* sbvarsign: Improve default GUID choice
2012-08-24 1b6eaee Jeremy Kerr <[email protected]>
* skkeysync: Add PK-handing code
2012-08-24 c80b5a2 Jeremy Kerr <[email protected]>
* sbkeysync: Refactor signature database data structures
2012-08-23 81bb4e3 Jeremy Kerr <[email protected]>
* sbkeysync: fix invalid free in keystore_read_entry
2012-08-23 a870a28 Jeremy Kerr <[email protected]>
* sbkeysync: Improve error handling in read_firmware_key_database
2012-08-23 b53ad57 Jeremy Kerr <[email protected]>
* sbkeysync: insert new keys
2012-08-23 fbedc4b Jeremy Kerr <[email protected]>
* sbkeysync: print keystore before key databases
2012-08-23 603e4f9 Jeremy Kerr <[email protected]>
* sbkeysync: Find keys missing from firmware key databases
2012-08-23 7e7fae0 Jeremy Kerr <[email protected]>
* sbkeysync: Rename struct keystore_entry->list to keystore_list
2012-08-22 2a87e12 Jeremy Kerr <[email protected]>
* sbkeysync: Generate and print key descriptions
2012-08-22 a5f7a63 Jeremy Kerr <[email protected]>
* sbkeysync: add comment to sigdb_iterate
2012-08-22 8c3bd4f Jeremy Kerr <[email protected]>
* sbkeysync: Change key_id to key_parse
2012-08-22 ac5d82d Jeremy Kerr <[email protected]>
* sbkeysync: Print filesystem key databases
2012-08-21 0c6ca3f Jeremy Kerr <[email protected]>
* sbkeysync: read keystore into kdb->filesystem_keys
2012-08-21 6576207 Jeremy Kerr <[email protected]>
* sbkeysync: Unify key_database
2012-08-21 d48d2a5 Jeremy Kerr <[email protected]>
* sbkeysync: Add key_database->filesystem_keys
2012-08-21 4c7eff0 Jeremy Kerr <[email protected]>
* sbkeysync: keystore -> fs_keystore
2012-08-21 ed3059d Jeremy Kerr <[email protected]>
* sbkeysync: pass data buffer (instead of EFI_SIGNATURE_DATA) to key_id
2012-08-21 3f10faa Jeremy Kerr <[email protected]>
* sbkeysync: add keystore_entry->root
2012-08-21 2d58004 Jeremy Kerr <[email protected]>
* sbkeysync: Add --keystore and --no-default-keystores options
2012-08-21 3729176 Jeremy Kerr <[email protected]>
* sbkeysync: Add --verbose option and conditionally print debug output
2012-08-20 651d158 Jeremy Kerr <[email protected]>
* sbkeysync: Add keystore parsing functions
2012-08-20 c0f22ed Jeremy Kerr <[email protected]>
* sbkeysync: Add --efivars-dir option to specific different locations for var files
2012-08-20 2625af1 Jeremy Kerr <[email protected]>
* sbkeysync: Add X509 key parsing
2012-08-20 7c4b36d Jeremy Kerr <[email protected]>
* sbkeysync: Add key ID data to print_key_database()
2012-08-20 d45de48 Jeremy Kerr <[email protected]>
* sbkeysync: read & print signature databases
2012-08-20 63b21b9 Jeremy Kerr <[email protected]>
* Move EFI_CERT types to efivars.h
2012-08-24 7fca8bd Jeremy Kerr <[email protected]>
* fileio: Add fileio_read_file_noerror()
2012-08-23 0ba703a Jeremy Kerr <[email protected]>
* sbvarsign: Start with a default set of variable attributes
2012-08-23 922bcc9 Jeremy Kerr <[email protected]>
* efivars: Move EFI_VARIABLE_* attributes to efivars.h
2012-08-22 fa42e39 Jeremy Kerr <[email protected]>
* sbsiglist: fix signature size check
2012-08-22 ef7f262 Jeremy Kerr <[email protected]>
* sbvarsign: WIN_CERTIFICATE.dwLength should include the header size
2012-08-22 887f5a1 Jeremy Kerr <[email protected]>
* sbvarsign: Fix invalid sizeof() for zeroing timestamp data
2012-08-21 378ecab Jeremy Kerr <[email protected]>
* sbsiglist: check for owner and type arguments
2012-08-14 2e7d96b Jeremy Kerr <[email protected]>
* sbsiglist: Fix SignatureSize
2012-08-13 98dc757 Jeremy Kerr <[email protected]>
* image: use fileio_write_file
2012-08-13 3e2bd9b Jeremy Kerr <[email protected]>
* Remove unused gen-keyfiles source
2012-08-13 ac3f03f Jeremy Kerr <[email protected]>
* docs: Create man pages for sbvarsign & sbsiglist
2012-08-13 101b703 Jeremy Kerr <[email protected]>
* Move sources to src/ subdirectory
2012-08-13 9464dcf Jeremy Kerr <[email protected]>
* image: Use size of image data when writing images
2012-08-13 b164b13 Jeremy Kerr <[email protected]>
* image: always parse image regions
2012-08-13 c9481ba Jeremy Kerr <[email protected]>
* Include efivars.h in automake infrastructure
2012-08-13 2a38dec Jeremy Kerr <[email protected]>
* tests: run tests for each arch
2012-08-10 dfc59be Jeremy Kerr <[email protected]>
* image: Allow manipulation of i386 PE/COFF files
2012-08-10 96d5769 Jeremy Kerr <[email protected]>
* Remove arch-specific coff headers
2012-08-04 58d2ad4 Maxim Kammerer <[email protected]>
* image: Prevent an uninitialized variable warning
2012-08-10 1a6fe60 Jeremy Kerr <[email protected]>
* sbsiglist: Add utility for creating EFI_SIGNATURE_LISTs
2012-08-10 7b95aee Jeremy Kerr <[email protected]>
* fileio: Add fileio_write_file
2012-08-10 5b15c0a Jeremy Kerr <[email protected]>
* efivars: rename efi variable header
2012-08-03 f574194 Jeremy Kerr <[email protected]>
* fileio: Unify whole-file reads
2012-08-03 d05cd38 Jeremy Kerr <[email protected]>
* fileio: Unify key & cert loading
2012-08-03 ab77d55 Jeremy Kerr <[email protected]>
* image: add functions to add and remove signatures
2012-08-02 d73dd55 Jeremy Kerr <[email protected]>
* sbattach: fix --detach
2012-08-02 7aad206 Jeremy Kerr <[email protected]>
* sbattach: fix missing openssl/evp.h header
2012-07-31 bc755fa Jeremy Kerr <[email protected]>
* sbvarsign: First cut of a variable-signing tool
2012-06-28 b537e74 Jeremy Kerr <[email protected]>
* Version 0.3
2012-06-28 34f45aa Jeremy Kerr <[email protected]>
* license: Add OpenSSL exception to GPLv3 terms
2012-06-28 90ac52e Jeremy Kerr <[email protected]>
* COPYING: remove non-license text
2012-06-27 3a17b39 James Bottomley <[email protected]>
* image: fix signature calculation when there's junk at the end of the efi binary
2012-06-28 99f2a9a Jeremy Kerr <[email protected]>
* tests: Add test for PE/COFF cert table header validity
2012-06-25 8d417f2 James Bottomley <[email protected]>
* image: fix incorrect assumption about signature header
2012-06-28 585915b Jeremy Kerr <[email protected]>
* sbsign: handle errors from PKCS7_sign_add_signer()
2012-06-26 183ce60 James Bottomley <[email protected]>
* sbsign: fix failure to sign when key is password protected
2012-06-20 c07dfb9 Ivan Hu <[email protected]>
* configure: Add check for bfh.h
2012-06-19 5e07c4e Ivan Hu <[email protected]>
* tests: Add a test to check invalid PKCS7 signature attaching
2012-06-19 bfb778e Ivan Hu <[email protected]>
* sbattach: Check that attached signatures are valid PKCS7 data
2012-06-14 bf6df84 Jeremy Kerr <[email protected]>
* sbverify: Use a variable for image filename
2012-06-13 9b7f7fb Jeremy Kerr <[email protected]>
* image: Unconditionally parse PE/COFF data
2012-06-13 128f1c1 Jeremy Kerr <[email protected]>
* sbverify: Check for failed image load
2012-06-13 b48e256 Jeremy Kerr <[email protected]>
* tests: Add tests for missing image, cert & key files
2012-06-13 0af5e01 Jeremy Kerr <[email protected]>
* tests: Execute tests in a clean (temporary) directory
2012-06-13 8716e88 Jeremy Kerr <[email protected]>
* tests: Use COMPILE.S for assembing test object
2012-06-13 807f0e6 Jeremy Kerr <[email protected]>
* Version 0.2
2012-06-13 7c2d8bb Jeremy Kerr <[email protected]>
* docs: Add simple manpage for sbattach
2012-06-13 deb9211 Jeremy Kerr <[email protected]>
* automake: Clean generated man files
2012-06-13 3cde1e4 Jeremy Kerr <[email protected]>
* tests: Add a few simple tests
2012-06-13 cc881c2 Jeremy Kerr <[email protected]>
* Remove unused test.c file
2012-06-12 4c79e3a Jeremy Kerr <[email protected]>
* sbattach: Add too to manage detached signatures
2012-06-12 564f5bc Jeremy Kerr <[email protected]>
* image: Add facility to write unsigned images
2012-06-11 a07b8d2 Jeremy Kerr <[email protected]>
* sbsign,sbverify: Update getopt_long optstrings
2012-06-11 5836038 Jeremy Kerr <[email protected]>
* sbverify: Add support for detached signatures
2012-06-11 b8a7d51 Jeremy Kerr <[email protected]>
* sbverify: Split image signature table reading to separate function
2012-06-11 e9f438c Jeremy Kerr <[email protected]>
* Fix warnings from added -W flags
2012-06-11 f19e8bb Jeremy Kerr <[email protected]>
* automake: Add -Wall -Wextra CFLAGS
2012-06-11 af4f088 Jeremy Kerr <[email protected]>
* sbsign: Add --detached option to create detached PKCS7 signatures
2012-06-11 0c9fbd2 Jeremy Kerr <[email protected]>
* sbsign: fix flag for verbose operation
2012-06-11 3673db1 Jeremy Kerr <[email protected]>
* docs: Fix manpage creation
2012-05-29 9b2f3a7 Adam Conrad <[email protected]>
* autogen.sh: Fix ccan_module assignment
2012-05-28 3fb0f00 Jeremy Kerr <[email protected]>
* image: use read_write_all from ccan
2012-05-28 f1112b4 Jeremy Kerr <[email protected]>
* image: Fix format specifier for 32-bit builds
2012-05-24 d5e634c Jeremy Kerr <[email protected]>
* autoconfiscate
2012-05-23 82f8c30 Jeremy Kerr <[email protected]>
* docs: Add initial manpages
2012-05-23 c14efcb Jeremy Kerr <[email protected]>
* sbsign,sbverify: help2man-ize usage output
2012-05-23 98a4f10 Jeremy Kerr <[email protected]>
* Makefile: Add dist targets
2012-05-22 1b2b5c6 Jeremy Kerr <[email protected]>
* ccan: Add ccan import logic
2012-05-15 6ff68e5 Jeremy Kerr <[email protected]>
* Move ccan submodule
2012-05-15 9a08e25 Jeremy Kerr <[email protected]>
* Remove unused header
2012-05-14 bc618c5 Jeremy Kerr <[email protected]>
* Remove pkcs7-simple test file
2012-05-14 9ac930e Jeremy Kerr <[email protected]>
* Makefile: add install target
2012-05-14 a1b270f Jeremy Kerr <[email protected]>
* Makefile: Comment components
2012-05-14 c67b82a Jeremy Kerr <[email protected]>
* sbverify: clean up openssl init
2012-05-14 c499763 Jeremy Kerr <[email protected]>
* sbverify: add check for invalid PKCS7 data
2012-05-14 74eb766 Jeremy Kerr <[email protected]>
* sbverify: Add certificate chain verification
2012-05-12 e111127 Jeremy Kerr <[email protected]>
* verify: move idc-related parsing to idc.c
2012-05-12 46cf6a6 Jeremy Kerr <[email protected]>
* sbsign: fix incorrect check for certificate load
2012-05-12 57d9f0c Jeremy Kerr <[email protected]>
* image: reformat gap warnings
2012-05-12 ab05bec Jeremy Kerr <[email protected]>
* image: add cert table to image size
2012-05-12 e1fec08 Jeremy Kerr <[email protected]>
* sbverify: Add check for image hash
2012-05-12 fefe97c Jeremy Kerr <[email protected]>
* sbverify: check for presence of signature table
2012-05-12 b73f723 Jeremy Kerr <[email protected]>
* Makefile: add $(tools) var
2012-05-12 55b1940 Jeremy Kerr <[email protected]>
* sbsigntool -> sbsign
2012-05-12 a183de9 Jeremy Kerr <[email protected]>
* image: open output file with O_TRUNC
2012-04-24 04b70fc Jeremy Kerr <[email protected]>
* sbsigntooL: expand usage info
2012-04-24 9826a43 Jeremy Kerr <[email protected]>
* Add GPLv3 text in COPYING
2012-04-24 906654e Jeremy Kerr <[email protected]>
* coff: remove unneeded coff includes
2012-04-23 9d3c8b5 Jeremy Kerr <[email protected]>
* Add copyright comments
2012-04-23 e019eec Jeremy Kerr <[email protected]>
* image: warn about potential checksum differences
2012-04-23 01e33cd Jeremy Kerr <[email protected]>
* idc: allocate using the image context
2012-04-23 acd8c0a Jeremy Kerr <[email protected]>
* Initial commit