Re: [PATCH v1 09/21] appended signatures: parse PKCS#7 signedData and X.509 certificates

2025-01-24 Thread Michal Suchánek
Hello, On Wed, Dec 18, 2024 at 08:26:35PM +0530, Sudhakar Kuppusamy wrote: > From: Daniel Axtens > > This code allows us to parse: > > - PKCS#7 signedData messages. Only a single signerInfo is supported, >which is all that the Linux sign-file utility supports creating >out-of-the-box.

Re: [PATCH] Mandatory install device check for PowerPC

2024-11-11 Thread Michal Suchánek
Hello, thanks for the patch! On Sat, Nov 09, 2024 at 11:20:08AM +0530, avnish wrote: > Hi Vladimir, > Thank you so much for your response! > > I have fine tuned the patch as per the last discussion (sorry, I missed the > v2 tag). This latest patch will add install device check only to PowerPC >

Re: [PATCH] Mandatory install device check for PowerPC

2024-05-27 Thread Michal Suchánek
Hello, On Mon, May 27, 2024 at 07:07:19PM +0530, Avnish Chouhan wrote: > This patch adds a check on install_device while installing grub for PowerPC. > If install_device is not mentioned in grub2-install, the error will be thrown. > Running grub2-install on PowerPC without the install_device may

Re: [PATCH] ieee1275 : extended support in options vector5

2023-03-20 Thread Michal Suchánek
Hello, On Fri, Mar 17, 2023 at 03:08:11PM +0530, Avnish Chouhan wrote: > This patch enables the multiple options in Options Vector5. > > Signed-off-by: Avnish Chouhan > Reviewed-by: Brian King > --- > grub-core/kern/ieee1275/init.c | 43 > ++- > 1 file

Re: [PATCH v3 15/19] appended signatures: parse PKCS#7 signedData and X.509 certificates

2022-04-21 Thread Michal Suchánek
Hello, On Thu, Apr 21, 2022 at 05:47:10PM +1000, Daniel Axtens wrote: > This code allows us to parse: > > - PKCS#7 signedData messages. Only a single signerInfo is supported, >which is all that the Linux sign-file utility supports creating >out-of-the-box. Only RSA, SHA-256 and SHA-512 a

Re: [PATCH 0/3] Add support for signing grub with an appended signature

2020-11-04 Thread Michal Suchánek
On Fri, Oct 23, 2020 at 04:33:58PM +1100, Daniel Axtens wrote: > Hi Michal, > > >> So grub is usually loaded from the PReP partition if you are booting > >> from disk. But, if you are booting from a CD/USB/etc, we first parse > >> /ppc/boot-info.txt and then load whatever file it identifies. If yo

Re: [PATCH 0/3] Add support for signing grub with an appended signature

2020-10-22 Thread Michal Suchánek
Hello, thanks for looking into this On Thu, Oct 22, 2020 at 03:25:33PM +1100, Daniel Axtens wrote: > Hi Michal, > > >> A simpler scheme would be for grub-install to parse the signature > >> footer, split-off the signature, write the ELF binary at the start of > >> the PReP partition, and the sig

[PATCH 0/3] Add support for signing grub with an appended signature

2020-10-16 Thread Michal Suchánek
Hello, It has been pointed out in the plumbers session that the ELF note will cause problems when user wants to add additional signature. The normal appended signature has only one size information - in the footer at the end of the binary, and that is not part of the signed data. So if you want t