From 5f5160d3b283d622b4c772560a2e8872d73a17e6 Mon Sep 17 00:00:00 2001 From: Jan Janssen Date: Sat, 30 Sep 2023 09:19:57 +0200 Subject: [PATCH 1/2] man: Adjust Microsoft UEFI certificate links The files were fixed to all be properly der encoded. --- man/loader.conf.xml | 9 +++------ 1 file changed, 3 insertions(+), 6 deletions(-) diff --git a/man/loader.conf.xml b/man/loader.conf.xml index 0e9f6e6924b..bc809684852 100644 --- a/man/loader.conf.xml +++ b/man/loader.conf.xml @@ -318,12 +318,9 @@ curl --location \ "https://go.microsoft.com/fwlink/p/?linkid=321192" -o ms-db-2011.der \ "https://go.microsoft.com/fwlink/p/?linkid=321185" -o ms-kek-2011.der \ "https://go.microsoft.com/fwlink/p/?linkid=321194" -o ms-uefi-db-2011.der \ - "https://go.microsoft.com/fwlink/p/?linkid=2239775" -o ms-kek-2023.base64 \ - "https://go.microsoft.com/fwlink/p/?linkid=2239776" -o ms-db-2023.base64 \ - "https://go.microsoft.com/fwlink/p/?linkid=2239872" -o ms-uefi-db-2023.base64 -for key in ms-*.base64; do - base64 -d "${key}" >"${key%base64}der" -done + "https://go.microsoft.com/fwlink/p/?linkid=2239776" -o ms-db-2023.der \ + "https://go.microsoft.com/fwlink/p/?linkid=2239775" -o ms-kek-2023.der \ + "https://go.microsoft.com/fwlink/p/?linkid=2239872" -o ms-uefi-db-2023.der for key in ms-*.der; do sbsiglist --owner 77fa9abd-0359-4d32-bd60-28f4e78f784b --type x509 --output "${key%der}esl" "${key}" done From 658394e826c5b753e1c563ef5ae2fc71ba1c8a5c Mon Sep 17 00:00:00 2001 From: Jan Janssen Date: Sat, 30 Sep 2023 09:30:24 +0200 Subject: [PATCH 2/2] man: Verify Microsoft keys --- man/loader.conf.xml | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/man/loader.conf.xml b/man/loader.conf.xml index bc809684852..9592f482474 100644 --- a/man/loader.conf.xml +++ b/man/loader.conf.xml @@ -321,6 +321,14 @@ curl --location \ "https://go.microsoft.com/fwlink/p/?linkid=2239776" -o ms-db-2023.der \ "https://go.microsoft.com/fwlink/p/?linkid=2239775" -o ms-kek-2023.der \ "https://go.microsoft.com/fwlink/p/?linkid=2239872" -o ms-uefi-db-2023.der +sha1sum -c <<END +580a6f4cc4e4b669b9ebdc1b2b3e087b80d0678d ms-db-2011.der +31590bfd89c9d74ed087dfac66334b3931254b30 ms-kek-2011.der +46def63b5ce61cf8ba0de2e6639c1019d0ed14f3 ms-uefi-db-2011.der +45a0fa32604773c82433c3b7d59e7466b3ac0c67 ms-db-2023.der +459ab6fb5e284d272d5e3e6abc8ed663829d632b ms-kek-2023.der +b5eeb4a6706048073f0ed296e7f580a790b59eaa ms-uefi-db-2023.der +END for key in ms-*.der; do sbsiglist --owner 77fa9abd-0359-4d32-bd60-28f4e78f784b --type x509 --output "${key%der}esl" "${key}" done