Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

libsecureboot: be more verbose about validation failures #916

Conversation

stephane-rochoy-stormshield
Copy link
Contributor

Use find_error_name to be more explicit about the reason of validation failures. E.g.,

cannot verify: /boot/pass_manifest.rcerts: Validation failed, Chain could not be linked to a trust anchor. (BR_ERR_X509_NOT_TRUSTED)

@bsdimp
Copy link
Member

bsdimp commented Dec 8, 2023

I think these changes are good.

@stephane-rochoy-stormshield
Copy link
Contributor Author

Great! I guess we just need @sgerraty to glance quickly at the patch now :)

@sgerraty
Copy link
Contributor

sgerraty commented Dec 8, 2023

Looks ok to me

lib/libsecureboot/vets.c Show resolved Hide resolved
@emaste
Copy link
Member

emaste commented Dec 10, 2023

4b9d605

@emaste emaste closed this Dec 10, 2023
freebsd-git pushed a commit that referenced this pull request Dec 10, 2023
freebsd-git pushed a commit that referenced this pull request Jan 8, 2024
Reviewed by:	imp, sjg
Pull Request:	#916

(cherry picked from commit 4b9d605)
bsdjhb pushed a commit to bsdjhb/cheribsd that referenced this pull request Mar 12, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
5 participants