30 Commits

Author SHA1 Message Date
Morten Linderud
ff7daddd01 update go-uefi
Signed-off-by: Morten Linderud <morten@linderud.pw>
2024-08-05 14:50:13 +02:00
Morten Linderud
bdf2c637d5 Implement support for TPM key files
Support TPM TSS2 key files for signing secure boot things

Signed-off-by: Morten Linderud <morten@linderud.pw>
2024-07-31 00:14:26 +02:00
Morten Linderud
c9d25391a9 sbctl: implement landlock sandboxing
Signed-off-by: Morten Linderud <morten@linderud.pw>
2024-07-29 21:30:46 +02:00
Morten Linderud
3057717fdd fix dependencies
Signed-off-by: Morten Linderud <morten@linderud.pw>
2024-07-24 21:15:30 +02:00
Morten Linderud
71024417a3 Rework sbctl backend
Signed-off-by: Morten Linderud <morten@linderud.pw>
2024-07-24 21:15:29 +02:00
Morten Linderud
663fe9097c Move to new signing library from go-uefi
Signed-off-by: Morten Linderud <morten@linderud.pw>
2024-05-19 00:11:21 +02:00
Dimitris Karakasilis
a97104c539 Add export-enrolled-keys command
Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>
2024-05-01 18:37:55 +03:00
Dimitris Karakasilis
84cc72897e Migrate tests to u-root based ones
Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>
2024-04-25 11:11:16 +03:00
Fabian Wienand
31c1228c15 feat(dbx): enroll/rotate/reset dbx keys
Signed-off-by: Fabian Wienand <fabian.wienand@9elements.com>
2023-08-09 11:12:21 +02:00
Fabian Wienand
eb4219c0cb feat(reset): enable partial resets of secureboot keys
Signed-off-by: Fabian Wienand <fabian.wienand@9elements.com>
2023-08-03 15:36:14 +02:00
Morten Linderud
4e033e284f enroll-keys: implement --export
Export the keys we intend to enroll as .auth or .esl files

Signed-off-by: Morten Linderud <morten@linderud.pw>
2023-06-18 15:30:29 +02:00
Morten Linderud
518b2eb9b6 Updated dependencies 2023-02-17 17:13:30 +01:00
Morten Linderud
1912863ec2 updated to go 1.20
Signed-off-by: Morten Linderud <morten@linderud.pw>
2023-02-11 19:07:00 +01:00
Morten Linderud
5a0bcb65af go.mod: Properly fetch new library version 2022-12-11 20:26:37 +01:00
Morten Linderud
7adeb60e57 go.mod: update go-uefi and cleanup 2022-12-11 20:06:44 +01:00
Morten Linderud
f7986293b5 go.mod: Revert update so we don't need trousers
Signed-off-by: Morten Linderud <morten@linderud.pw>
2021-12-08 15:55:03 +01:00
Morten Linderud
2ca0ca0e09 go.mod: Added go-attestation + update dependencies
Signed-off-by: Morten Linderud <morten@linderud.pw>
2021-12-07 23:28:58 +01:00
Morten Linderud
d159d6acef Fix go.mod
Signed-off-by: Morten Linderud <morten@linderud.pw>
2021-11-20 20:38:27 +01:00
Morten Linderud
783e943c77 Bump go-uefi dependency
Signed-off-by: Morten Linderud <morten@linderud.pw>
2021-10-23 21:45:28 +02:00
Morten Linderud
05b4f88539 go.mod: Update go-uefi to latest master
Signed-off-by: Morten Linderud <morten@linderud.pw>
2021-07-22 21:11:19 +02:00
Hugo Osvaldo Barrera
95458395f1 Update some references to latest go-uefi
Current `master` of both branches cannot build together otherwise.
2021-06-12 01:45:54 +02:00
Morten Linderud
240786b7d8 Idk go modules
Signed-off-by: Morten Linderud <morten@linderud.pw>
2021-06-02 21:56:03 +02:00
Morten Linderud
7192e52fa1 keys: Move from sbsigntools to go-uefi
Signed-off-by: Morten Linderud <morten@linderud.pw>
2021-06-02 21:56:02 +02:00
Morten Linderud
a738c8c2e3 Fixed gitignore and go modules
Signed-off-by: Morten Linderud <morten@linderud.pw>
2021-06-02 21:55:36 +02:00
Morten Linderud
7a4defc0c1 Added deps
Signed-off-by: Morten Linderud <morten@linderud.pw>
2021-05-30 14:43:03 +02:00