aboutsummaryrefslogtreecommitdiff
path: root/core
diff options
context:
space:
mode:
authorStewart Smith <stewart@linux.ibm.com>2018-09-13 19:10:01 +1000
committerStewart Smith <stewart@linux.ibm.com>2018-09-13 19:10:19 +1000
commitf835684365273c5ff1b7c700ddc0f9c1a859363f (patch)
treebe6a9d7f21ba6137bbe7605fcf0903187406dbd3 /core
parent74116e3e37cfadd24197cc32b216978c9eb58814 (diff)
downloadskiboot-f835684365273c5ff1b7c700ddc0f9c1a859363f.zip
skiboot-f835684365273c5ff1b7c700ddc0f9c1a859363f.tar.gz
skiboot-f835684365273c5ff1b7c700ddc0f9c1a859363f.tar.bz2
TEMPORARY HACK: Disable verifying VERSION
Seeing as all the VERSION signing code is taking way too long to get upstream, let's temporarily skip verifying VERSION for now. Signed-off-by: Stewart Smith <stewart@linux.ibm.com>
Diffstat (limited to 'core')
-rw-r--r--core/flash.c7
1 files changed, 6 insertions, 1 deletions
diff --git a/core/flash.c b/core/flash.c
index 8f00d85..8e7b90e 100644
--- a/core/flash.c
+++ b/core/flash.c
@@ -823,7 +823,12 @@ done_reading:
* Verify and measure the retrieved PNOR partition as part of the
* secure boot and trusted boot requirements
*/
- secureboot_verify(id, buf, *len);
+ /*
+ * FIXME: TEMPORARY HACK: Don't verify VERSION until all bits of code
+ * to produce a signed VERSION partition are upstream for a while.
+ */
+ if (id != RESOURCE_ID_VERSION)
+ secureboot_verify(id, buf, *len);
trustedboot_measure(id, buf, *len);
/* Find subpartition */