Attachment 691638 Details for Bug 906849 – Patch for mokutil

[patch] Patch for mokutil

0001-mokutil-Omit-16-byte-padding-when-computing-fingerpr.patch (text/plain), 1.16 KB, created by Daniel Dadap on 2013-02-01 17:06:57 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Daniel Dadap

Created: 2013-02-01 17:06:57 UTC

Size: 1.16 KB

patch

obsolete

>From 025063d58f703982536e14b4b2f486b38773d0ac Mon Sep 17 00:00:00 2001
>From: Daniel Dadap <ddadap@nvidia.com>
>Date: Thu, 31 Jan 2013 08:17:27 -0600
>Subject: [PATCH 1/2] mokutil: Omit 16 byte padding when computing fingerprint
>
>SignatureSize is 16 bytes larger than the actual certificate size,
>per the UEFI spec, but this larger size shouldn't be used to compute
>the SHA1 fingerprint of an X.509 certificate, since it causes extra
>data, besides the certificate, to be hashed.
>
>In mokutil, subtract 16 from mok_size when passing the size to
>print_x509(), to avoid hashing the extra data.
>
>Signed-off-by: Daniel Dadap <ddadap@nvidia.com>
>---
> mokutil-0.1.0/src/mokutil.c |    2 +-
> 1 file changed, 1 insertion(+), 1 deletion(-)
>
>diff --git a/mokutil-0.1.0/src/mokutil.c b/mokutil-0.1.0/src/mokutil.c
>index 5894eb4..f88aad8 100644
>--- a/mokutil-0.1.0/src/mokutil.c
>+++ b/mokutil-0.1.0/src/mokutil.c
>@@ -199,7 +199,7 @@ list_keys (efi_variable_t *var)
> 
> 	for (i = 0; i < mok_num; i++) {
> 		printf ("[key %d]\n", i+1);
>-		print_x509 ((char *)list[i].mok, list[i].mok_size);
>+		print_x509 ((char *)list[i].mok, list[i].mok_size - 16);
> 		if (i < mok_num - 1)
> 			printf ("\n");
> 	}
>-- 
>1.7.10.4
>

Actions: View | Diff

Attachments on bug 906849: 691638 | 691639