search

rhboot / shim

UEFI shim loader
Other
816 stars 284 forks source link

undo change that limits certificate files to a single file #659

Closed jsetje closed 1 month ago

jsetje commented 2 months ago

In the ea0f9df "Allow SbatLevel data from external binary" patch the code that tries to load any certificate file that starts with shim_certificate was changed to only accept shim_certificate.efi which defeats the entire point of reading through the directory. This change reverts that.

jsetje commented 2 months ago

This still needs testing.

jsetje commented 2 months ago

Unsurprisingly testing confirms that this restores the previous behavior and shim will load files named:

shim_certificate_001.efi shim_certificate_002.efi etc.