summaryrefslogtreecommitdiff
path: root/scripts/image_signing/install_gsetup_certs.sh
diff options
context:
space:
mode:
Diffstat (limited to 'scripts/image_signing/install_gsetup_certs.sh')
-rwxr-xr-xscripts/image_signing/install_gsetup_certs.sh10
1 files changed, 6 insertions, 4 deletions
diff --git a/scripts/image_signing/install_gsetup_certs.sh b/scripts/image_signing/install_gsetup_certs.sh
index d515b790..e51843d8 100755
--- a/scripts/image_signing/install_gsetup_certs.sh
+++ b/scripts/image_signing/install_gsetup_certs.sh
@@ -1,5 +1,4 @@
#!/bin/bash
-
# Copyright 2018 The Chromium OS Authors. All rights reserved.
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
@@ -12,7 +11,7 @@ usage() {
cat <<EOF
Usage: $PROG /path/to/esp/dir /path/to/keys/dir
-Sign UEFI binaries in ESP.
+Install UEFI certs in GSetup directory in ESP.
EOF
if [[ $# -gt 0 ]]; then
error "$*"
@@ -21,11 +20,13 @@ EOF
exit 0
}
+# Installs the specified UEFI cert in GSetup directory, if the cert exists.
+# Args: KEY_TYPE CERT GSETUP_DIR
install_gsetup_cert() {
local key_type="$1"
local cert="$2"
local gsetup_dir="$3"
- if [[ -f "$cert" ]]; then
+ if [[ -f "${cert}" ]]; then
info "Putting ${key_type} cert: ${cert}"
local cert_basename="$(basename "${cert}")"
local der_filename="${cert_basename%.*}.der"
@@ -62,7 +63,8 @@ main() {
local kek_cert="${key_dir}/kek/kek.pem"
install_gsetup_cert kek "${kek_cert}" "${gsetup_dir}"
- for dbx_cert in "${key_dir}/dbx/"*".pem"; do
+ local dbx_cert
+ for dbx_cert in "${key_dir}"/dbx/*.pem; do
install_gsetup_cert dbx "${dbx_cert}" "${gsetup_dir}"
done
}