4 commits

Author	SHA1	Message	Date
Simon J. Gerraty	980bde5834	libsecureboot: allow control of when pseudo pcr is updated ... During boot we only want to measure things which *must* be verified - this should provide more deterministic ordering. Reviewed by: stevek MFC after: 1 week Sponsored by: Juniper Networks Differential Revision: https://reviews.freebsd.org/D20297	2019-05-19 20:28:49 +00:00
Simon J. Gerraty	9bee6a6083	libsecureboot: make it easier to customize trust anchors ... Avoid making hash self-tests depend on X.509 certs. Include OpenPGP keys in trust store count. Reviewed by: stevek MFC after: 1 week Sponsored by: Juniper Networks Differential Revision: https://reviews.freebsd.org/D20208	2019-05-09 22:25:12 +00:00
Simon J. Gerraty	02a4bc589c	Allow for reproducible build ... Use SOURCE_DATE_EPOCH for BUILD_UTC if MK_REPRODUCIBLE_BUILD is yes. Default SOURCE_DATE_EPOCH to 2019-01-01 Reviewed by: emaste Sponsored by: Juniper Networks Differential Revision: https://reviews.freebsd.org/D19464	2019-03-04 22:04:21 +00:00
Simon J. Gerraty	5fff9558a4	Add libsecureboot ... Used by loader and veriexec Depends on libbearssl Reviewed by: emaste Sponsored by: Juniper Networks Differential Revision: D16335	2019-02-26 06:09:10 +00:00