Repository navigation
keys
Directory actions
More options
Directory actions
More options
keys
Folders and files
| Name | Name | Last commit date | ||
|---|---|---|---|---|
parent directory.. | ||||
This directory contains known public keys for Linux distributions and other parties that sign boot loaders and kernels that should be verifiable by shim. I'm providing these keys as a convenience to enable easy installation of keys should you replace your distribution's version of shim with another one and therefore require adding its public key as a machine owner key (MOK). Files come with three extensions. A filename ending in .crt is a certificate file that can be used by sbverify to verify the authenticity of a key, as in: $ sbverify --cert keys/refind.crt refind/refind_x64.efi The .cer and .der filename extensions are equivalent, and are public key files similar to .crt files, but in a different form. The MokManager utility expects its input public keys in this form, so these are the files you would use to add a key to the MOK list maintained by MokManager and used by shim. The files in this directory are, in alphabetical order: - altlinux.cer -- The public key for ALT Linux (http://www.altlinux.com). - canonical-uefi-ca.der -- Canonical's public key, used to sign Ubuntu boot loaders and kernels. - fedora-ca.cer -- Fedora's public key, used to sign Fedora 18's version of shim and Fedora 18's kernels. - refind.cer & refind.crt -- My own (Roderick W. Smith's) public key, used to sign refind_x64.efi and the 64-bit rEFInd drivers.