5 Commits

Author	SHA1	Message	Date
sjg	afd5580ea5	libsecureboot: avoid recusion in ve_trust_init ... set our guard value immediately. also replace call to ve_trust_init in opgp_sig.c:initialize with call to openpgp_trust_init. Reported by: mindal@semihalf.com Reviewed by: jhibbits obrien MFC after: 1 week	2019-07-11 22:06:59 +00:00
sjg	10c90a3b2a	libsecureboot: allow OpenPGP support to be dormant ... Since we can now add OpenPGP trust anchors at runtime, ensure the latent support is available. Ensure we do not add duplicate keys to trust store. Also allow reporting names of trust anchors added/revoked We only do this for loader and only after initializing trust store. Thus only changes to initial trust store will be logged. Reviewed by: stevek MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D20700	2019-06-26 23:33:32 +00:00
sjg	d8da000647	load_key_buf do not free data from dearmor ... The data returned by dearmor is referenced by the key leave it alone! Reviewed by: stevek MFC after: 2 days	2019-05-19 20:24:17 +00:00
sjg	6e6b09f5c1	libsecureboot: make it easier to customize trust anchors ... Avoid making hash self-tests depend on X.509 certs. Include OpenPGP keys in trust store count. Reviewed by: stevek MFC after: 1 week Sponsored by: Juniper Networks Differential Revision: https://reviews.freebsd.org/D20208	2019-05-09 22:25:12 +00:00
sjg	114933b262	Add libsecureboot ... Used by loader and veriexec Depends on libbearssl Reviewed by: emaste Sponsored by: Juniper Networks Differential Revision: D16335	2019-02-26 06:09:10 +00:00