Add a utility to choose between Secure Boot loaders.#294

Merged

vathpela merged 29 commits into

rhboot:mainfrom

vathpela:sbchooser

Mar 17, 2026

Commits on Mar 17, 2026

compiler.h: add some checked arithmetic primitives
vathpela
committed
sbchooser: add a man page
vathpela
committed
sbchooser: add header definitions for PE files.
vathpela
committed
sbchooser: add some empty files and Make stuff.
vathpela
committed
sbchooser: load security databases
vathpela
committed
sbchooser: parse secdb entries
vathpela
committed
sbchooser: Add basic PE parsing.
vathpela
committed
sbchooser: load PE files specified on the command line.
vathpela
committed
sbchooser: read the list of input PEs from stdin
vathpela
committed
sbchooser: generate authenticode hashes for input PE files
vathpela
committed
sbchooser: check for hashes in db and dbx
vathpela
committed
sbchooser: sort our output list.
vathpela
committed
sbchooser: Add some test data
vathpela
committed
sbchooser: test sha512 db vs sha256 db
vathpela
committed
sbchooser: parse PE signatures
vathpela
committed
sbchooser: Evaluate certificate trust based on db and dbx.
vathpela
committed
sbchooser: evaluate the trust of each signature.
vathpela
committed
sbchooser: evaluate security strength of our PE signatures.
vathpela
committed
sbchooser: compare validity of two PE files.
vathpela
committed
sbchooser: test sha512 db vs untrusted
vathpela
committed
sbchooser: test sha512 db vs sha256 db vs dbx
vathpela
committed
sbchooser: test sha512 db vs RSA 2K db
vathpela
committed
sbchooser: test cert in db and dbx
vathpela
committed
sbchooser: test two certs in db with same security
vathpela
committed
sbchooser: add support for only using one signature
vathpela
committed
sbchooser: test --first-sig-only
vathpela
committed
sbchooser: add --explain
vathpela
committed
sbchooser: handle a malformed security directory better.
vathpela
committed
sbchooser: test with a padded security directory
vathpela
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Add a utility to choose between Secure Boot loaders.#294

Add a utility to choose between Secure Boot loaders.#294
vathpela merged 29 commits into
rhboot:mainfrom
vathpela:sbchooser

Commits on Mar 17, 2026

compiler.h: add some checked arithmetic primitives

sbchooser: add a man page

sbchooser: add header definitions for PE files.

sbchooser: add some empty files and Make stuff.

sbchooser: load security databases

sbchooser: parse secdb entries

sbchooser: Add basic PE parsing.

sbchooser: load PE files specified on the command line.

sbchooser: read the list of input PEs from stdin

sbchooser: generate authenticode hashes for input PE files

sbchooser: check for hashes in db and dbx

sbchooser: sort our output list.

sbchooser: Add some test data

sbchooser: test sha512 db vs sha256 db

sbchooser: parse PE signatures

sbchooser: Evaluate certificate trust based on db and dbx.

sbchooser: evaluate the trust of each signature.

sbchooser: evaluate security strength of our PE signatures.

sbchooser: compare validity of two PE files.

sbchooser: test sha512 db vs untrusted

sbchooser: test sha512 db vs sha256 db vs dbx

sbchooser: test sha512 db vs RSA 2K db

sbchooser: test cert in db and dbx

sbchooser: test two certs in db with same security

sbchooser: add support for only using one signature

sbchooser: test --first-sig-only

sbchooser: add --explain

sbchooser: handle a malformed security directory better.

sbchooser: test with a padded security directory