diff options
| author | Jan Janssen <medhefgo@web.de> | 2022-08-03 11:05:12 +0200 |
|---|---|---|
| committer | Jan Janssen <medhefgo@web.de> | 2022-08-03 11:05:12 +0200 |
| commit | f234a56db597c04b7c923469962a54637c381bb9 (patch) | |
| tree | 86aee1e0a7ee375a5cd297e77052111dbd85c3e8 /man/loader.conf.xml | |
| parent | This patch adds support for enrolling secure boot boot keys from sd-boot. (diff) | |
| download | systemd-f234a56db597c04b7c923469962a54637c381bb9.tar.xz systemd-f234a56db597c04b7c923469962a54637c381bb9.zip | |
boot: Follow-up fixes for #20255
Diffstat (limited to 'man/loader.conf.xml')
| -rw-r--r-- | man/loader.conf.xml | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/man/loader.conf.xml b/man/loader.conf.xml index acddb193d1..7aa1ed7254 100644 --- a/man/loader.conf.xml +++ b/man/loader.conf.xml @@ -248,9 +248,9 @@ and <filename>PK.esl</filename>. Note that these files need to be authenticated UEFI variables. See below for an example of how to generate them from regular X.509 keys.</para> - <programlisting>uuid=$(systemd-id128 new --) + <programlisting>uuid=$(systemd-id128 new --uuid) for key in PK KEK db; do - openssl req -new -x509 -subj "/CN=${key}/ -keyout "${key}.key" -out "${key}.crt" + openssl req -new -x509 -subj "/CN=${key}/" -keyout "${key}.key" -out "${key}.crt" openssl x509 -outform DER -in "${key}.crt" -out "${key}.cer" cert-to-efi-sig-list -g "${uuid}" "${key}.crt" "${key}.tmp" done |