Google Git
Sign in
chromium / external / github.com / neverware / shim-build / refs/tags/v8
tag8cc9bdc0b1f8f52ec5ab8006ae5c4bbc7269639b
taggerPaul Nardini <nardini@google.com>Fri Sep 10 21:48:20 2021
objectf34eb7f47ef89c8c565108a53742404cdaee7c8f 
Chrome OS Submission w/5 year cert
commitf34eb7f47ef89c8c565108a53742404cdaee7c8f[log] [tgz]
authorPaul Nardini <nardini@google.com>Fri Sep 10 18:47:26 2021
committerPaul Nardini <nardini@google.com>Fri Sep 10 18:47:26 2021
tree5d9e3f22617f18734b543b85dc955e41fa7d760b
parentdc8f032627b3a3ae8c24a1d66385941f415d2b38 [diff]
Update public certificate with new Google-generated public key

The certificate currently embedded in shim builds doesn't match
what is used for signing grub.  This new cert has a 5 year
validity period; the old one had a 2 year validity period.

BUG=b:195737944
TEST=make build & make cert-info

Change-Id: Icdf6ad422781589defd861f2fb446e3494dca244
1 file changed
tree: 5d9e3f22617f18734b543b85dc955e41fa7d760b
  1. .gitignore
  2. Dockerfile
  3. Makefile
  4. neverware.cer
  5. OWNERS
  6. README.md
  7. sbat.csv
  8. shim_15.4_1bea91b_357.patch
  9. shim_15.4_33ca950_361.patch
  10. shim_15.4_8b59591_364.patch
  11. shim_15.4_975c2fe_362.patch
README.md

shim-build

Build shim in a Docker container.

Makefile targets

Build shim in a Docker container:

make build

Build with the cache turned off to get the full build log:

make build-no-cache

Copy the shim builds from the container to the host:

make copy

View details of the public certificate:

make cert-info

View SBAT section of the shim binaries:

make dump-sbat