Re: [PATCH 1/2] efi_loader: signature: correct a behavior against multiple signatures

2020-08-14 Thread Heinrich Schuchardt
On 14.08.20 07:39, AKASHI Takahiro wrote: > Under the current implementation, all the signatures, if any, in > a signed image must be verified before loading it. > > Meanwhile, UEFI specification v2.8b section 32.5.3.3 says, > Multiple signatures are allowed to exist in the binary’s certificate

[PATCH 1/2] efi_loader: signature: correct a behavior against multiple signatures

2020-08-13 Thread AKASHI Takahiro
Under the current implementation, all the signatures, if any, in a signed image must be verified before loading it. Meanwhile, UEFI specification v2.8b section 32.5.3.3 says, Multiple signatures are allowed to exist in the binary’s certificate table (as per PE/COFF Section “Attribute Certi