-
Notifications
You must be signed in to change notification settings - Fork 693
Open
Labels
Description
At the moment UEFITool just prints the Boot Policy Key Signature like this on stdout:
Boot Policy Key Signature:
Version: 10h
KeyId: 0001h
SigScheme: 0016h
Boot Policy Public Key (Exponent: 10001h):
This makes it hard for the LVFS to parse it. Ideally we'd save it in the dump directory as an artefact that we can just load as an asset like we do all the other extracted information. This would let us load the pubkey on the LVFS like we do other assets, like this:
This would then allow us to check that the Boot Policy Key isn't one that's been accidentally leaked.