Blame SOURCES/0015-oid-add-SHIM_EKU_MODULE_SIGNING_ONLY-and-fix-our-arr.patch

793dd5
From a3cc2ad5d49ed61187527281da351e80d8f76a89 Mon Sep 17 00:00:00 2001
793dd5
From: Peter Jones <pjones@redhat.com>
793dd5
Date: Mon, 22 Aug 2016 13:31:38 -0400
793dd5
Subject: [PATCH 15/29] oid: add SHIM_EKU_MODULE_SIGNING_ONLY and fix our array
793dd5
 indices.
793dd5
793dd5
That was all kinds of wrong.
793dd5
793dd5
Signed-off-by: Peter Jones <pjones@redhat.com>
793dd5
---
793dd5
 src/oid.c | 10 +++++++---
793dd5
 src/oid.h |  1 +
793dd5
 2 files changed, 8 insertions(+), 3 deletions(-)
793dd5
793dd5
diff --git a/src/oid.c b/src/oid.c
793dd5
index 9d8154f..7037e1e 100644
793dd5
--- a/src/oid.c
793dd5
+++ b/src/oid.c
793dd5
@@ -33,6 +33,7 @@ static uint8_t oiddata[] = {
793dd5
 	0x2b, 0x06, 0x01, 0x04, 0x01, 0x82, 0x37, 0x02, 0x01, 0x0f,
793dd5
 	0x2b, 0x06, 0x01, 0x04, 0x01, 0x82, 0x37, 0x02, 0x01, 0x15,
793dd5
 	0x2b, 0x06, 0x01, 0x04, 0x01, 0x82, 0x37, 0x15, 0x01,
793dd5
+	0x2b, 0x06, 0x01, 0x04, 0x01, 0x92, 0x08, 0x10, 0x01, 0x02,
793dd5
 };
793dd5
 
793dd5
 #define OID(num, desc_s, oidtype, length, value)		\
793dd5
@@ -53,11 +54,14 @@ static struct {
793dd5
 	OID(SPC_STATEMENT_TYPE_OBJID, "Statement Type", siDEROID, 10,
793dd5
 		&oiddata[10]),
793dd5
 	OID(SPC_PE_IMAGE_DATA_OBJID, "PE Image Data", siDEROID, 10,
793dd5
-		&oiddata[30]),
793dd5
+		&oiddata[20]),
793dd5
 	OID(SPC_INDIVIDUAL_SP_KEY_PURPOSE_OBJID, "Individual Key", siDEROID,
793dd5
-		10, &oiddata[40]),
793dd5
+		10, &oiddata[30]),
793dd5
 	OID(szOID_CERTSRV_CA_VERSION, "Certification server CA version",
793dd5
-		siAsciiString, 9, &oiddata[50]),
793dd5
+		siAsciiString, 9, &oiddata[40]),
793dd5
+	OID(SHIM_EKU_MODULE_SIGNING_ONLY,
793dd5
+		"Certificate is used for kernel modules only", siDEROID, 10,
793dd5
+		&oiddata[49]),
793dd5
 	{ .oid = END_OID_LIST }
793dd5
 };
793dd5
 
793dd5
diff --git a/src/oid.h b/src/oid.h
793dd5
index 599f49d..0e00781 100644
793dd5
--- a/src/oid.h
793dd5
+++ b/src/oid.h
793dd5
@@ -25,6 +25,7 @@ typedef enum {
793dd5
 	SPC_PE_IMAGE_DATA_OBJID,		/* 1.3.6.1.4.1.311.2.1.15 */
793dd5
 	SPC_INDIVIDUAL_SP_KEY_PURPOSE_OBJID,	/* 1.3.6.1.4.1.311.2.1.21 */
793dd5
 	szOID_CERTSRV_CA_VERSION,		/* 1.3.6.1.4.1.311.21.1 */
793dd5
+	SHIM_EKU_MODULE_SIGNING_ONLY,		/* 1.3.6.1.4.1.2312.16.1.2 */
793dd5
 	END_OID_LIST
793dd5
 } ms_oid_t;
793dd5
 
793dd5
-- 
793dd5
2.13.4
793dd5