mokutil/SOURCES/0004-Don-t-allow-sha1-on-th...

30 lines
770 B
Diff
Raw Normal View History

2022-06-16 13:11:34 +00:00
From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
2019-05-07 10:17:12 +00:00
From: Peter Jones <pjones@redhat.com>
Date: Tue, 16 Jun 2015 17:06:30 -0400
2022-06-16 13:11:34 +00:00
Subject: [PATCH] Don't allow sha1 on the mokutil command line.
2019-05-07 10:17:12 +00:00
Related: rhbz#1115843
Signed-off-by: Peter Jones <pjones@redhat.com>
---
src/mokutil.c | 2 ++
1 file changed, 2 insertions(+)
diff --git a/src/mokutil.c b/src/mokutil.c
2022-06-16 13:11:34 +00:00
index a7e83f7..1fb34f9 100644
2019-05-07 10:17:12 +00:00
--- a/src/mokutil.c
+++ b/src/mokutil.c
@@ -1351,10 +1351,12 @@ identify_hash_type (const char *hash_str, efi_guid_t *type)
}
switch (len) {
+#if 0
case SHA_DIGEST_LENGTH*2:
*type = efi_guid_sha1;
hash_size = SHA_DIGEST_LENGTH;
break;
+#endif
case SHA224_DIGEST_LENGTH*2:
*type = efi_guid_sha224;
hash_size = SHA224_DIGEST_LENGTH;