Changes in efi_init.c

1d386b48a555f61cb7325543adbbb5c3f3407a66 - Remove $FreeBSD$: one-line .c pattern

Wed, 16 Aug 2023 17:54:42 +0000

Remove $FreeBSD$: one-line .c patternRemove /^[\s*]*__FBSDID$"\$FreeBSD\$"$;?\s*\n/ List of files: /freebsd-src/lib/libsecureboot/efi/efi_init.c

2aaf9152a852aba9eb2036b95f4948ee77988826 - MFHead@r345275

Mon, 18 Mar 2019 19:21:53 +0000

MFHead@r345275 List of files: /freebsd-src/lib/libsecureboot/efi/efi_init.c

ff511f1f398e25b7baca6218e56d15b5ce3ab4a4 - MFhead@r344996

Mon, 11 Mar 2019 03:02:58 +0000

MFhead@r344996 List of files: /freebsd-src/lib/libsecureboot/efi/efi_init.c

13ea0450a9c8742119d36f3bf8f47accdce46e54 - Extend libsecureboot(old libve) to obtain trusted certificates from UEFI and implement revocation

Wed, 06 Mar 2019 06:39:42 +0000

Extend libsecureboot(old libve) to obtain trusted certificates from UEFI and implement revocationUEFI related headers were copied from edk2.A new build option "MK_LOADER_EFI_SECUREBOOT" was added to allowloading of trusted anchors from UEFI.Certificate revocation support is also introduced.The forbidden certificates are loaded from dbx variable.Verification fails in two cases:There is a direct match between cert in dbx and the one in the chain.The CA used to sign the chain is found in dbx.One can also insert a hash of TBS section of a certificate into dbx.In this case verifications fails only if a direct match with acertificate in chain is found.Submitted by: Kornel Duleba Reviewed by: sjgObtained from: SemihalfSponsored by: StormshieldDifferential Revision: https://reviews.freebsd.org/D19093 List of files: /freebsd-src/lib/libsecureboot/efi/efi_init.c