Blame SOURCES/0004-Don-t-allow-sha1-on-the-mokutil-command-line.patch

89397c
From ecc8fb0d92f0f453414a98172df22e23fb5893f5 Mon Sep 17 00:00:00 2001
89397c
From: Peter Jones <pjones@redhat.com>
89397c
Date: Tue, 16 Jun 2015 17:06:30 -0400
f928ec
Subject: [PATCH 04/10] Don't allow sha1 on the mokutil command line.
89397c
89397c
Related: rhbz#1115843
89397c
89397c
Signed-off-by: Peter Jones <pjones@redhat.com>
89397c
---
89397c
 src/mokutil.c | 2 ++
89397c
 1 file changed, 2 insertions(+)
89397c
89397c
diff --git a/src/mokutil.c b/src/mokutil.c
f928ec
index a7e83f71f0b..1fb34f9d3aa 100644
89397c
--- a/src/mokutil.c
89397c
+++ b/src/mokutil.c
89397c
@@ -1351,10 +1351,12 @@ identify_hash_type (const char *hash_str, efi_guid_t *type)
89397c
 	}
89397c
 
89397c
 	switch (len) {
89397c
+#if 0
89397c
 	case SHA_DIGEST_LENGTH*2:
89397c
 		*type = efi_guid_sha1;
89397c
 		hash_size = SHA_DIGEST_LENGTH;
89397c
 		break;
89397c
+#endif
89397c
 	case SHA224_DIGEST_LENGTH*2:
89397c
 		*type = efi_guid_sha224;
89397c
 		hash_size = SHA224_DIGEST_LENGTH;
89397c
-- 
f928ec
2.17.1
89397c