Remove $FreeBSD$: one-line sh patternRemove /^\s*#[#!]?\s*\$FreeBSD\$.*$\n/
Remove $FreeBSD$: one-line .c patternRemove /^[\s*]*__FBSDID\("\$FreeBSD\$"\);?\s*\n/
Remove $FreeBSD$: one-line .h patternRemove /^\s*\*+\s*\$FreeBSD\$.*$\n/
libsecureboot: avoid set but not used errorsReviewed by: stevek
lib/libsecureboot: Fix some typosSigned-off-by: Elyes HAOUAS <[email protected]>Pull Request: https://github.com/freebsd/freebsd-src/pull/544
Update libsecurebootPreparation for updating bearssl, pull in updates to libsecureboot.o fix handling of some out-of-memory caseso allow more control over reporting of Verified/Unverified files
Update libsecurebootPreparation for updating bearssl, pull in updates to libsecureboot.o fix handling of some out-of-memory caseso allow more control over reporting of Verified/Unverified files. this helps boot time when console output is slow o recheck verbose/debug level after reading any unverified fileo more debug support for vectxo hash_string to support fake stat for tftpo tests/tvo add -v to simply verify signatureso vets.c allow for HAVE_BR_X509_TIME_CHECK which will greatly simplify verification in loadero report date when certificate fails validity period checksReviewed by: stevekSponsored by: Juniper Networks, Inc.
show more ...
libsecureboot: avoid recusion in ve_trust_initset our guard value immediately.also replace call to ve_trust_init in opgp_sig.c:initialize withcall to openpgp_trust_init.Reported by: mindal@semi
libsecureboot: avoid recusion in ve_trust_initset our guard value immediately.also replace call to ve_trust_init in opgp_sig.c:initialize withcall to openpgp_trust_init.Reported by: [email protected]Reviewed by: jhibbits obrienMFC after: 1 week
libsecureboot: allow OpenPGP support to be dormantSince we can now add OpenPGP trust anchors at runtime,ensure the latent support is available.Ensure we do not add duplicate keys to trust store.
libsecureboot: allow OpenPGP support to be dormantSince we can now add OpenPGP trust anchors at runtime,ensure the latent support is available.Ensure we do not add duplicate keys to trust store.Also allow reporting names of trust anchors added/revokedWe only do this for loader and only after initializing trust store.Thus only changes to initial trust store will be logged.Reviewed by: stevekMFC after: 1 weekDifferential Revision: https://reviews.freebsd.org/D20700
load_key_buf do not free data from dearmorThe data returned by dearmor is referenced by the keyleave it alone!Reviewed by: stevekMFC after: 2 days
libsecureboot: make it easier to customize trust anchorsAvoid making hash self-tests depend on X.509 certs.Include OpenPGP keys in trust store count.Reviewed by: stevekMFC after: 1 weekSponsor
libsecureboot: make it easier to customize trust anchorsAvoid making hash self-tests depend on X.509 certs.Include OpenPGP keys in trust store count.Reviewed by: stevekMFC after: 1 weekSponsored by: Juniper NetworksDifferential Revision: https://reviews.freebsd.org/D20208
Add libsecurebootUsed by loader and veriexecDepends on libbearsslReviewed by: emasteSponsored by: Juniper NetworksDifferential Revision: D16335