mirror of https://github.com/acidanthera/audk.git
5396354b86
REF: https://bugzilla.tianocore.org/show_bug.cgi?id=3293 Add constraints on the key strength of enrolled platform key(PK), which must be greater than or equal to 2048 bit. PK key strength is required by Intel SDL and MSFT, etc. This limitation prevents user from using weak keys as PK. The original code to check the certificate file type is placed in a new function CheckX509Certificate(), which checks if the X.509 certificate meets the requirements of encode type, RSA-Key strengh, etc. Cc: Min Xu <min.m.xu@intel.com> Cc: Jiewen Yao <jiewen.yao@intel.com> Signed-off-by: Jiaqi Gao <jiaqi.gao@intel.com> Reviewed-by: Min Xu <min.m.xu@intel.com> Acked-by: Jiewen Yao <jiewen.yao@intel.com> |
||
|---|---|---|
| .. | ||
| SecureBootConfig.vfr | ||
| SecureBootConfigDevicePath.c | ||
| SecureBootConfigDriver.c | ||
| SecureBootConfigDxe.inf | ||
| SecureBootConfigDxe.uni | ||
| SecureBootConfigDxeExtra.uni | ||
| SecureBootConfigFileExplorer.c | ||
| SecureBootConfigImpl.c | ||
| SecureBootConfigImpl.h | ||
| SecureBootConfigMisc.c | ||
| SecureBootConfigNvData.h | ||
| SecureBootConfigStrings.uni | ||