shaba/systemd
1
0
Fork 0
mirror of https://github.com/systemd/systemd.git synced 2025-01-10 05:18:17 +03:00
Code

ukify: Require both key and cert be set in generate_keys

Browse Source 
If either is None the write in this branch of the code will fail.
This commit is contained in:
Jörg Behrmann 2024-10-11 14:34:15 +02:00
parent f5698a3f41
commit 9ba53499b9
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/ukify/ukify.py
View File

@ -1176,7 +1176,7 @@ def generate_keys(opts: argparse.Namespace) -> None:
# This will generate keys and certificates and write them to the paths that # This will generate keys and certificates and write them to the paths that
# are specified as input paths. # are specified as input paths.
if opts.sb_key or opts.sb_cert: if opts.sb_key and opts.sb_cert:
fqdn = socket.getfqdn() fqdn = socket.getfqdn()
cn = f'SecureBoot signing key on host {fqdn}' cn = f'SecureBoot signing key on host {fqdn}'
key_pem, cert_pem = generate_key_cert_pair( key_pem, cert_pem = generate_key_cert_pair(