Luca Boccassi 2ac8fcf656 ukify: add --pcr-certificate= parameter ...

Public keys and certificates are not the same, as the latter embeds more
information that the former, and other tools like sd-measure have distinct
parameters for each of them.
Add a new --pcr-certificate= parameter to ukify, and use it to pass certs
down to sd-measure, as an alternative to --pcr-public-key=. Do not allow
specifying both.

2025-02-09 22:24:00 +00:00

46 KiB

Raw Blame History

View Raw