Skip to content

Save Key Manifest Public Key as an artifact #309

@hughsie

Description

@hughsie

At the moment UEFITool just prints the Boot Policy Key Signature like this on stdout:

Boot Policy Key Signature:
Version: 10h
KeyId: 0001h
SigScheme: 0016h
Boot Policy Public Key (Exponent: 10001h): 

This makes it hard for the LVFS to parse it. Ideally we'd save it in the dump directory as an artefact that we can just load as an asset like we do all the other extracted information. This would let us load the pubkey on the LVFS like we do other assets, like this:

Screenshot 2022-10-09 at 08-58-12 LVFS Component Certificates

This would then allow us to check that the Boot Policy Key isn't one that's been accidentally leaked.

Metadata

Metadata

Assignees

No one assigned

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions