lp://staging/~jibel/ubuntu/trusty/sbsigntool/lp1257305_add_corrected_efivars_magic

Branch merges

Propose for merging

No branches dependent on this one.

Merged into lp://staging/ubuntu/trusty/sbsigntool

Michael Terry: Approve on 2013-12-10

Diff: 1070 lines (+1014/-2)

6 files modified

.pc/add_corrected_efivars_magic.patch/src/sbkeysync.c (+979/-0)
.pc/applied-patches (+1/-0)
debian/changelog (+7/-0)
debian/patches/add_corrected_efivars_magic.patch (+23/-0)
debian/patches/series (+1/-0)
src/sbkeysync.c (+3/-2)

api

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Bug #1257305: Wrong efivars magic in sbkeysync

High

Fix Released

Link a bug report

Related blueprints

17. By Jean-Baptiste Lallement on 2013-12-03

* debian/patches/add_corrected_efivars_magic.patch: Cherry-picked upstream
  fix to add corrected efivars magic (LP: #1257305)

16. By Steve Langasek on 2013-10-04

debian/patches/ignore-certificate-expiries.patch: ignore certificate
expiries when verifying signatures. Closes LP: #1234649.

15. By Steve Langasek on 2013-08-23

* debian/patches/efi_arch_ia32.patch: Use AC_CANONICAL_HOST, not uname -m,
  to determine target. Closes LP: #1066038.
* debian/patches/Align-signature-data-to-8-bytes.patch: Align signature
  data to 8 bytes. This matches the Microsoft signing implementation,
  which enables us to use sbattach to verify the integrity of the binaries
  returned by the SysDev signing service.
* debian/patches/update_checksums.patch: make sure we update the PE checksum
  field as well, also needed for matching the Microsoft signing
  implementation.
* debian/patches/fix-signature-padding.patch: fix calculation of the
  size of our signature data, so that we don't write out extra zeroes
  when we detach a signature.

14. By Colin Watson on 2013-06-17

Build-depend on gcc-multilib to support building the test suite.

13. By Colin Watson on 2013-06-17

releasing version 0.6-0ubuntu3

12. By Colin Watson on 2013-06-17

Build-depend on gcc-multilib to support building the test suite.

11. By Colin Watson on 2013-01-08

Mark sbsigntool Multi-Arch: foreign.

10. By Colin Watson on 2013-01-08

releasing version 0.6-0ubuntu2

9. By Colin Watson on 2013-01-08

Mark sbsigntool Multi-Arch: foreign.

8. By Steve Langasek on 2012-10-11

* New upstream release.
  - Uses the new mount point for the efivars directory, for compatibility
    with the pending upstream kernel patches and compatibility with what
    mountall is doing. LP: #1063061.
  - Fixes sbverify verification of the pkcs7 bundles that Microsoft-signed
    binaries deliver to us, enabling us to do build-time verification of
    shim-signed.