summaryrefslogtreecommitdiffstats
path: root/man/ukify.xml
diff options
context:
space:
mode:
authorZbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>2023-06-14 12:38:37 +0200
committerZbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>2023-06-14 13:18:00 +0200
commit814e4d7a671f3318485e6e272e5c6b34e71d3d3f (patch)
treee21437f69f3a5e9509ac1df9b299557be0b59e7c /man/ukify.xml
parentman/ukify: add structure to describe verbs, document genkey (diff)
downloadsystemd-814e4d7a671f3318485e6e272e5c6b34e71d3d3f.tar.xz
systemd-814e4d7a671f3318485e6e272e5c6b34e71d3d3f.zip
ukify: make the certficate validity configurable
Requested in https://github.com/systemd/systemd/pull/27946/commits/4cc743319ae378d458050d6e0cfdeaa03addd379#r1228592001
Diffstat (limited to 'man/ukify.xml')
-rw-r--r--man/ukify.xml8
1 files changed, 8 insertions, 0 deletions
diff --git a/man/ukify.xml b/man/ukify.xml
index 33d9d26d2d..06ae550530 100644
--- a/man/ukify.xml
+++ b/man/ukify.xml
@@ -330,6 +330,14 @@
</varlistentry>
<varlistentry>
+ <term><varname>SecureBootCertificateValidity=<replaceable>DAYS</replaceable></varname></term>
+ <term><option>--secureboot-certificate-validity=<replaceable>DAYS</replaceable></option></term>
+
+ <listitem><para>Period of validity (in days) for a certificate created by
+ <command>genkey</command>. Defaults to 3650, i.e. 10 years.</para></listitem>
+ </varlistentry>
+
+ <varlistentry>
<term><varname>SigningEngine=<replaceable>ENGINE</replaceable></varname></term>
<term><option>--signing-engine=<replaceable>ENGINE</replaceable></option></term>