Add signing to EFI

This commit is contained in:
Peter Šurda 2021-12-01 22:14:29 +08:00
parent 255a95b0cd
commit 93998bd7a7
Signed by: PeterSurda
GPG Key ID: 0C5F50C0B5F37D87

View File

@ -200,6 +200,8 @@ function make_ipxe_efi() {
local embed_file="$2" local embed_file="$2"
local signing_cert="$3" local signing_cert="$3"
local ca_cert="$4" local ca_cert="$4"
local efi_key"$5"
local efi_cert="$6"
embed_file="$(realpath "${embed_file}")" embed_file="$(realpath "${embed_file}")"
signing_cert="$(realpath "${signing_cert}")" signing_cert="$(realpath "${signing_cert}")"
@ -227,6 +229,7 @@ function make_ipxe_efi() {
make bin-x86_64-efi/ipxe.efi EMBED="${embed_file}" CERT="${signing_cert},${ca_cert}" TRUST="${ca_cert}" || return 2 make bin-x86_64-efi/ipxe.efi EMBED="${embed_file}" CERT="${signing_cert},${ca_cert}" TRUST="${ca_cert}" || return 2
mv bin-x86_64-efi/ipxe.efi bin/ mv bin-x86_64-efi/ipxe.efi bin/
sbsign --key ${efi_key} --cert ${efi_cert} --output bin/ipxe.efi bin/ipxe.efi
cd "$curr" cd "$curr"
return 0 return 0