]> git.ipfire.org Git - thirdparty/ipxe.git/commit
[efi] Support extracting certificates from EFI signature list images siglist
authorMichael Brown <mcb30@ipxe.org>
Tue, 11 Mar 2025 11:58:28 +0000 (11:58 +0000)
committerMichael Brown <mcb30@ipxe.org>
Tue, 11 Mar 2025 12:54:05 +0000 (12:54 +0000)
commit3e903d79861748485073dcec71eb641c38d15730
tree1dd16c4220845edc689f6cff30d279ec6fbf8827
parent26a8fed710900be439e7548308ecca910a9b683c
[efi] Support extracting certificates from EFI signature list images

Add support for the EFI signature list image format (as produced by
tools such as efisecdb).

The parsing code does not require any EFI boot services functions and
so may be enabled even in non-EFI builds.  We default to enabling it
only for EFI builds.

Signed-off-by: Michael Brown <mcb30@ipxe.org>
src/config/config_asn1.c
src/config/defaults/efi.h
src/config/general.h
src/image/efi_siglist.c [new file with mode: 0644]
src/include/ipxe/efi/efi_siglist.h [new file with mode: 0644]
src/include/ipxe/errfile.h
src/tests/efi_siglist_test.c [new file with mode: 0644]
src/tests/tests.c