diff options
| author | pai-yi.huang <pai-yi.huang@adlinktech.com> | 2018-12-06 16:42:30 +0800 |
|---|---|---|
| committer | James Bottomley <James.Bottomley@HansenPartnership.com> | 2018-12-18 16:02:14 -0800 |
| commit | ff81e553dc7c59963c81b3ab435ecabcf461d3cd (patch) | |
| tree | bb5b2e9fb83be0d85019c14e1bcb51f64fbb3cc2 | |
| parent | 28687de80b18b3b35271de1d70769eac3c0b1ab4 (diff) | |
| download | efitools-ff81e553dc7c59963c81b3ab435ecabcf461d3cd.tar.gz | |
efi-updatevar: remove all authenticated attributes from signature
follow the Commit: 4727744d42ec594d558e5d6c3fcf4c8d63d83186
for sign-efi-sig-list to fix efi-updatevar failure for AMI BIOS.
Signed-off-by: James Bottomley <James.Bottomley@HansenPartnership.com>
| -rw-r--r-- | efi-updatevar.c | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/efi-updatevar.c b/efi-updatevar.c index bc92cb8..bbea1e2 100644 --- a/efi-updatevar.c +++ b/efi-updatevar.c @@ -356,11 +356,11 @@ main(int argc, char *argv[]) BIO *bio = BIO_new_mem_buf(signbuf, signbuflen); PKCS7 *p7 = PKCS7_sign(NULL, NULL, NULL, bio, PKCS7_BINARY | PKCS7_PARTIAL - | PKCS7_DETACHED); + | PKCS7_DETACHED | PKCS7_NOATTR); const EVP_MD *md = EVP_get_digestbyname("SHA256"); PKCS7_sign_add_signer(p7, X, pkey, md, PKCS7_BINARY - | PKCS7_DETACHED); - PKCS7_final(p7, bio, PKCS7_BINARY | PKCS7_DETACHED); + | PKCS7_DETACHED | PKCS7_NOATTR); + PKCS7_final(p7, bio, PKCS7_BINARY | PKCS7_DETACHED | PKCS7_NOATTR); int sigsize = i2d_PKCS7(p7, NULL); |