diff options
| author | Dave Heller <hellerda@linux.vnet.ibm.com> | 2018-03-31 22:47:22 -0400 |
|---|---|---|
| committer | Dave Heller <hellerda@linux.vnet.ibm.com> | 2018-03-31 22:47:22 -0400 |
| commit | 61a4f1bd4be7503d18aa1a73be091ff42f730e0a (patch) | |
| tree | b4adc46e0fdc815f2f85ae349269bfb90376c1c8 | |
| parent | bafadcdfd40fa24285008af60852365cb46bd021 (diff) | |
| download | sb-signing-utils-61a4f1bd4be7503d18aa1a73be091ff42f730e0a.tar.gz sb-signing-utils-61a4f1bd4be7503d18aa1a73be091ff42f730e0a.zip | |
Support config properties specific to key transition
This adds config properties SB_VERIFY_TRANS and SB_PROJECT_INI_TRANS.
If set, these take precedence over their non-_TRANS counterparts for
the transistion 'to' container only (SBKTRAND).
Signed-off-by: Dave Heller <hellerda@linux.vnet.ibm.com>
| -rwxr-xr-x | crtSignedContainer.sh | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/crtSignedContainer.sh b/crtSignedContainer.sh index d877234..4614000 100755 --- a/crtSignedContainer.sh +++ b/crtSignedContainer.sh @@ -304,6 +304,12 @@ echo "--> $P: Signing mode: $SIGN_MODE" # # Parse INI file # +if [ "$(to_upper "$LABEL")" == SBKTRAND ] +then + # Key transistion container may have its own ini file + test "$SB_PROJECT_INI_TRANS" && PROJECT_INI=$SB_PROJECT_INI_TRANS +fi + if [ "$PROJECT_INI" ] then test ! -f "$PROJECT_INI" && die "Can't open INI file: $PROJECT_INI" @@ -314,6 +320,7 @@ then server_hostname="" signtool_validate="" signtool_verify="" + signtool_verify_trans="" signtool_pass_on_validation_error="" signproject_hw_signing_project_basename="" signproject_fw_signing_project_basename="" @@ -329,6 +336,7 @@ then test "$signtool_validate" && SB_VALIDATE="$signtool_validate" test "$signtool_verify" && SB_VERIFY="$signtool_verify" + test "$signtool_verify_trans" && SB_VERIFY_TRANS="$signtool_verify_trans" test "$signtool_pass_on_validation_error" && \ SB_PASS_ON_ERROR="$signtool_pass_on_validation_error" @@ -812,6 +820,12 @@ then SB_PASS_ON_ERROR="" fi +if [ "$(to_upper "$LABEL")" == SBKTRAND ] +then + # Key transistion container may have its own verify value + test "$SB_VERIFY_TRANS" && SB_VERIFY=$SB_VERIFY_TRANS +fi + test "$SB_VALIDATE" && VALIDATE_OPT="--validate" test "$SB_VERIFY" && VERIFY_OPT="--verify" && VERIFY_ARGS="$SB_VERIFY" |
