src/lib/libsecureboot/readfile.c, branch release/14.4.0FreeBSD source treehttps://cgit-dev.freebsd.org/src/atom?h=release%2F14.4.02023-08-16T17:54:42ZRemove $FreeBSD$: one-line .c pattern2023-08-16T17:54:42ZWarner Loshimp@FreeBSD.org2023-08-16T17:54:42Zurn:sha1:1d386b48a555f61cb7325543adbbb5c3f3407a66
Remove /^[\s*]*__FBSDID\("\$FreeBSD\$"\);?\s*\n/
Update libsecureboot2022-04-18T19:54:15ZSimon J. Gerratysjg@FreeBSD.org2022-04-18T19:53:53Zurn:sha1:666554111a7e6b4c1a9a6ff2e73f12cd582573bb
Preparation for updating bearssl, pull in updates to libsecureboot.
o fix handling of some out-of-memory cases
o allow more control over reporting of Verified/Unverified files.
this helps boot time when console output is slow
o recheck verbose/debug level after reading any unverified file
o more debug support for vectx
o hash_string to support fake stat for tftp
o tests/tvo add -v to simply verify signatures
o vets.c allow for HAVE_BR_X509_TIME_CHECK which will greatly simplify
verification in loader
o report date when certificate fails validity period checks
Reviewed by: stevek
Sponsored by: Juniper Networks, Inc.
libsecureboot: allow OpenPGP support to be dormant2019-06-26T23:33:32ZSimon J. Gerratysjg@FreeBSD.org2019-06-26T23:33:32Zurn:sha1:f9510887eeb5ad2eab96b48c41631886f8f33ad6
Since we can now add OpenPGP trust anchors at runtime,
ensure the latent support is available.
Ensure we do not add duplicate keys to trust store.
Also allow reporting names of trust anchors added/revoked
We only do this for loader and only after initializing trust store.
Thus only changes to initial trust store will be logged.
Reviewed by: stevek
MFC after: 1 week
Differential Revision: https://reviews.freebsd.org/D20700
Add libsecureboot2019-02-26T06:09:10ZSimon J. Gerratysjg@FreeBSD.org2019-02-26T06:09:10Zurn:sha1:5fff9558a43aaac53da41dc23c250c4e84f6fb02
Used by loader and veriexec
Depends on libbearssl
Reviewed by: emaste
Sponsored by: Juniper Networks
Differential Revision: D16335