Skip to content

Commit

Permalink
Load shim_certificates.efi during netboot
Browse files Browse the repository at this point in the history
Network boot cases do not support reading through a directory but it can still
be useful to load unbundled certificates. Try to load them directly.

Signed-off-by: Ross Lagerwall <ross.lagerwall@citrix.com>
  • Loading branch information
rosslagerwall authored and vathpela committed Jan 21, 2025
1 parent 3caa75e commit b8f0495
Showing 1 changed file with 5 additions and 2 deletions.
7 changes: 5 additions & 2 deletions shim.c
Original file line number Diff line number Diff line change
Expand Up @@ -1558,10 +1558,13 @@ load_unbundled_trust(EFI_HANDLE image_handle)
/*
* Network boot cases do not support reading a directory. Try
* to read revocations.efi to pull in any unbundled SBATLevel
* updates unconditionally in those cases. This may produce
* console noise when the file is not present.
* updates unconditionally in those cases. Also try to read
* shim_certificate.efi to load additional certificates.
* This may produce console noise when the files are not
* present.
*/
load_cert_file(image_handle, REVOCATIONFILE, PathName);
load_cert_file(image_handle, L"shim_certificate.efi", PathName);
goto done;
}

Expand Down

0 comments on commit b8f0495

Please sign in to comment.