Re: [PATCH v2 06/17] efi_loader: image_loader: add a check against certificate type of authenticode

2020-07-07 Thread AKASHI Takahiro
Heinrich, On Fri, Jul 03, 2020 at 12:56:55PM +0200, Heinrich Schuchardt wrote: > On 09.06.20 07:09, AKASHI Takahiro wrote: > > UEFI specification requires that we shall support three type of > > certificates of authenticode in PE image: > > WIN_CERT_TYPE_EFI_GUID with the guid, EFI_CERT_TYPE_PCK

Re: [PATCH v2 06/17] efi_loader: image_loader: add a check against certificate type of authenticode

2020-07-03 Thread Heinrich Schuchardt
On 09.06.20 07:09, AKASHI Takahiro wrote: > UEFI specification requires that we shall support three type of > certificates of authenticode in PE image: > WIN_CERT_TYPE_EFI_GUID with the guid, EFI_CERT_TYPE_PCKS7_GUID > WIN_CERT_TYPE_PKCS_SIGNED_DATA > WIN_CERT_TYPE_EFI_PKCS1_15 > > As EDK2 do

[PATCH v2 06/17] efi_loader: image_loader: add a check against certificate type of authenticode

2020-06-08 Thread AKASHI Takahiro
UEFI specification requires that we shall support three type of certificates of authenticode in PE image: WIN_CERT_TYPE_EFI_GUID with the guid, EFI_CERT_TYPE_PCKS7_GUID WIN_CERT_TYPE_PKCS_SIGNED_DATA WIN_CERT_TYPE_EFI_PKCS1_15 As EDK2 does, we will support the first two that are pkcs7 Signed