5 Commits

Author	SHA1	Message	Date
Simon J. Gerraty	3ae2a848ae	libsecureboot: avoid recusion in ve_trust_init ... set our guard value immediately. also replace call to ve_trust_init in opgp_sig.c:initialize with call to openpgp_trust_init. Reported by: mindal@semihalf.com Reviewed by: jhibbits obrien MFC after: 1 week	2019-07-11 22:06:59 +00:00
Simon J. Gerraty	f9510887ee	libsecureboot: allow OpenPGP support to be dormant ... Since we can now add OpenPGP trust anchors at runtime, ensure the latent support is available. Ensure we do not add duplicate keys to trust store. Also allow reporting names of trust anchors added/revoked We only do this for loader and only after initializing trust store. Thus only changes to initial trust store will be logged. Reviewed by: stevek MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D20700	2019-06-26 23:33:32 +00:00
Simon J. Gerraty	e5ec655d67	load_key_buf do not free data from dearmor ... The data returned by dearmor is referenced by the key leave it alone! Reviewed by: stevek MFC after: 2 days	2019-05-19 20:24:17 +00:00
Simon J. Gerraty	9bee6a6083	libsecureboot: make it easier to customize trust anchors ... Avoid making hash self-tests depend on X.509 certs. Include OpenPGP keys in trust store count. Reviewed by: stevek MFC after: 1 week Sponsored by: Juniper Networks Differential Revision: https://reviews.freebsd.org/D20208	2019-05-09 22:25:12 +00:00
Simon J. Gerraty	5fff9558a4	Add libsecureboot ... Used by loader and veriexec Depends on libbearssl Reviewed by: emaste Sponsored by: Juniper Networks Differential Revision: D16335	2019-02-26 06:09:10 +00:00