microsoft/mu_plus

[Feature]: Check the DB for the existence of the new certificate before appending

Flickdm opened this issue · 2 comments

Feature Overview

Secure Boot Recovery Application should check for the existence of the 2023 Production CA and if it's found respect the existing boot order.

This would prevent scenarios where the application appended correctly yet for some reason the device is continuing to loop.

Solution Overview

  1. Loop over each certificate found in the DB
  2. for each certificate, determine if it has enough length to compare against a #define thumbprint and subject name
  3. compare against the #define thumbprint and subject name
  4. if so return EFI_UNSUPPORTED

Alternatives Considered

No response

Urgency

Medium

Are you going to implement the feature request?

I will implement the feature

Do you need maintainer feedback?

No maintainer feedback needed

Anything else?

No response

This issue has been automatically marked as stale because it has not had activity in 45 days. It will be closed if no further activity occurs within 7 days. Thank you for your contributions.

This issue has been automatically been closed because it did not have any activity in 45 days and no follow up within 7 days after being marked stale. Thank you for your contributions.