msw/CISS.debian.installer
SHA256
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

V8.00.000.2025.06.17
All checks were successful
🛡️ Shell Script Linting / 🛡️ Shell Script Linting (push) Successful in 1m43s
Details

Browse Source 
Signed-off-by: Marc S. Weidner <msw@coresecret.dev>
This commit is contained in:
Marc S. Weidner
2025-10-13 20:14:15 +01:00
parent fa95de278d
commit e8d69f1fa1
1 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
upgrades/secure-boot/ciss-sb-pki.cnf
View File

@@ -126,6 +126,15 @@ certificatePolicies = @ciss_sb_policy
crlDistributionPoints = @ciss_sb_root_crl
nsComment = "UEFI Key-Exchange Key (KEK), RSA-3072, SHA-384"
[ v3_db_CA ]
basicConstraints = critical, CA:true, pathlen:1
keyUsage = critical, digitalSignature, keyCertSign, cRLSign
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid,issuer
authorityInfoAccess = @ciss_sb_pki
certificatePolicies = @ciss_sb_policy
crlDistributionPoints = @ciss_sb_root_crl
nsComment = "UEFI db Trust Anchor (CA) for Image code-signers"
[ ciss_sb_pki ]
caIssuers;URI.0 = https://ca.quantumsign.eu/