Re: Bad shim signature on kernel loading with patchset from 25.05.2023 and up

[Daniel Kiper]

Hey,

Thomas, good point. I completely missed that.

Tobias, please try Ard patch with the change suggested by Thomas. If you
have not done that yet...

Daniel

On Mon, Jun 26, 2023 at 09:49:19AM +0200, Tobias Powalowski via Grub-devel 
wrote:
> Hi,
> removing it removes the error, but boot does not happen then. It errors now
> with: cannot load image.
> greetings
> tpowa
>
> Am Mo., 26. Juni 2023 um 09:06 Uhr schrieb Thomas Frauendorfer
> <thomas.frauendorfer@gmail.com>:
>      On Thu, Jun 22, 2023 at 3:00 PM Tobias Powalowski via Grub-devel
>      <grub-devel@gnu.org> wrote:
>      >
>      > Hi,
>      > just curious since the patchset from 25.05.2023, I cannot use
>      Secure Boot on my project anymore. The kernel hash cannot be
>      validated anymore and shim bails out with bad shim signature.
>      > Any help would be appreciated.
>      > greetings
>      > tpowa
>
>      According to shim documentation the shim lock protocol should use
>      SysV
>      abi instead of MS abi.
>      So could you try if it solves your issue if you remove
>      "__grub_efi_api" from the verify function of
>      grub_efi_shim_lock_protocol in include/grub/efi/api.h in around line
>      1780