|
|
@ -1,7 +1,7 @@
|
|
|
|
Summary: Simple pesign test target
|
|
|
|
Summary: Simple pesign test target
|
|
|
|
Name: pesign-test-app
|
|
|
|
Name: pesign-test-app
|
|
|
|
Version: 5
|
|
|
|
Version: 5
|
|
|
|
Release: 23%{?dist}
|
|
|
|
Release: 24%{?dist}
|
|
|
|
License: GPLv2
|
|
|
|
License: GPLv2
|
|
|
|
URL: https://github.com/vathpela/pesign-test-app
|
|
|
|
URL: https://github.com/vathpela/pesign-test-app
|
|
|
|
BuildRequires: gcc
|
|
|
|
BuildRequires: gcc
|
|
|
@ -49,10 +49,19 @@ getfacl /run/pesign || :
|
|
|
|
ls -l /run/pesign/socket || :
|
|
|
|
ls -l /run/pesign/socket || :
|
|
|
|
getfacl /run/pesign/socket || :
|
|
|
|
getfacl /run/pesign/socket || :
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
#%%define pe_signing_cert Fedora Secure Boot Signer
|
|
|
|
|
|
|
|
if true ; then
|
|
|
|
|
|
|
|
cp %{name}-unsigned.efi bzImage.signed
|
|
|
|
|
|
|
|
%pesign -s -i bzImage.signed -o bzImage.signed -a redhatsecurebootca1.cer -c redhatsecureboot301.cer -n redhatsecureboot301
|
|
|
|
|
|
|
|
%define pe_signing_cert /CN=Fedora Secure Boot Signer
|
|
|
|
|
|
|
|
%pesign -s -i bzImage.signed -o bzImage.signed -a redhatsecurebootca5.cer -c redhatsecureboot501.cer -n redhatsecureboot501
|
|
|
|
|
|
|
|
mv bzImage.signed %{name}-signed.efi
|
|
|
|
|
|
|
|
else
|
|
|
|
cp %{name}-unsigned.efi %{name}-unsigned.0.efi
|
|
|
|
cp %{name}-unsigned.efi %{name}-unsigned.0.efi
|
|
|
|
%pesign -s -i %{name}-unsigned.0.efi -o %{name}-signed.0.efi
|
|
|
|
%pesign -s -i %{name}-unsigned.0.efi -o %{name}.tmp.efi -a redhatsecurebootca5.cer -c redhatsecureboot501.cer -n redhatsecureboot501
|
|
|
|
%define pe_signing_cert fwupd-signer
|
|
|
|
%define pe_signing_cert fwupd-signer
|
|
|
|
%pesign -s -i %{name}-signed.0.efi -o %{name}-signed.efi -n "fwupd-signer"
|
|
|
|
%pesign -s -i %{name}.tmp.efi -o %{name}-signed.efi -a redhatsecurebootca1.cer -c redhatsecureboot301.cer -n redhatsecureboot301
|
|
|
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
|
|
|
|
%install
|
|
|
|
%install
|
|
|
|
rm -rf %{buildroot}
|
|
|
|
rm -rf %{buildroot}
|
|
|
@ -81,6 +90,9 @@ done
|
|
|
|
%{_datadir}/%{name}-%{version}/%{name}-signed*.efi
|
|
|
|
%{_datadir}/%{name}-%{version}/%{name}-signed*.efi
|
|
|
|
|
|
|
|
|
|
|
|
%changelog
|
|
|
|
%changelog
|
|
|
|
|
|
|
|
* Thu Jul 16 2020 Peter Jones <pjones@redhat.com> - 5-24
|
|
|
|
|
|
|
|
- Try naming the cert differently
|
|
|
|
|
|
|
|
|
|
|
|
* Mon Jul 13 2020 Peter Jones <pjones@redhat.com> - 5-23
|
|
|
|
* Mon Jul 13 2020 Peter Jones <pjones@redhat.com> - 5-23
|
|
|
|
- Test builders again again
|
|
|
|
- Test builders again again
|
|
|
|
|
|
|
|
|
|
|
|