#endif
static int install_secure_boot_auto_enroll(const char *esp, X509 *certificate, EVP_PKEY *private_key) {
+ if (!arg_secure_boot_auto_enroll)
+ return 0;
+
#if HAVE_OPENSSL
int r;
if (r < 0)
return r;
- if (arg_install_random_seed) {
- r = install_random_seed(arg_esp_path);
- if (r < 0)
- return r;
- }
+ r = install_random_seed(arg_esp_path);
+ if (r < 0)
+ return r;
- if (arg_secure_boot_auto_enroll) {
- r = install_secure_boot_auto_enroll(arg_esp_path, certificate, private_key);
- if (r < 0)
- return r;
- }
+ r = install_secure_boot_auto_enroll(arg_esp_path, certificate, private_key);
+ if (r < 0)
+ return r;
}
r = install_loader_specification(arg_dollar_boot_path());
assert_cc(RANDOM_EFI_SEED_SIZE == SHA256_DIGEST_SIZE);
+ if (!arg_install_random_seed)
+ return 0;
+
esp_fd = open(esp, O_DIRECTORY|O_RDONLY|O_CLOEXEC);
if (esp_fd < 0)
return log_error_errno(errno, "Failed to open ESP directory '%s': %m", esp);