Sign the UKI for Secure Boot (optional) (!73) · Merge requests · system-transparency / core / stmgr · GitLab

Daniel Lublin requested to merge quite/stmgr:secureboot-sign-rebased into main Apr 02, 2024

Signing is attempted if and only if both -signkey and -signcert as passed.

go-uefi has a new API for authenticode signing, but it is not used as it does not seem to be finalized. See: https://github.com/Foxboron/go-uefi/issues/20