aboutsummaryrefslogtreecommitdiff
path: root/lib
diff options
context:
space:
mode:
authorSimon J. Gerraty <sjg@FreeBSD.org>2023-04-15 00:28:10 +0000
committerSimon J. Gerraty <sjg@FreeBSD.org>2023-04-15 00:28:10 +0000
commitd1dfe419acc06d9239f324a219ee9df36dbed817 (patch)
tree6eae596e6aee4d2db87c472531a80e2afc764f15 /lib
parent2b8331622f0b212cf3bb4fc4914a501e5321d506 (diff)
downloadsrc-d1dfe419acc06d9239f324a219ee9df36dbed817.tar.gz
src-d1dfe419acc06d9239f324a219ee9df36dbed817.zip
libsecureboot allow site.trust.mk to override settings
The current content of local.trust.mk is mostly for example purposes.
Diffstat (limited to 'lib')
-rw-r--r--lib/libsecureboot/local.trust.mk5
1 files changed, 4 insertions, 1 deletions
diff --git a/lib/libsecureboot/local.trust.mk b/lib/libsecureboot/local.trust.mk
index b28e5ee2d1ef..cc88528ba707 100644
--- a/lib/libsecureboot/local.trust.mk
+++ b/lib/libsecureboot/local.trust.mk
@@ -37,6 +37,9 @@ VE_SIGNATURE_EXT_LIST+= \
VE_SIGNATURE_LIST+= OPENPGP
VE_SIGNATURE_EXT_LIST+= asc
+# allow site override of all the above
+.-include "site.trust.mk"
+
SIGNER ?= ${SB_TOOLS_PATH:U/volume/buildtools/bin}/sign.py
.if exists(${SIGNER})
@@ -109,7 +112,7 @@ ta.h: vc_rsa.pem
TRUST_ANCHORS!= cd ${.CURDIR} && 'ls' -1 *.pem t*.asc 2> /dev/null
.endif
.if empty(TRUST_ANCHORS) && ${MK_LOADER_EFI_SECUREBOOT} != "yes"
-.error Need TRUST_ANCHORS see ${.CURDIR}/README.rst
+.error Need TRUST_ANCHORS see ${.PARSEDIR}/README.rst
.endif
.if ${TRUST_ANCHORS:T:Mt*.pem} != ""
ta.h: ${TRUST_ANCHORS:M*.pem}