| 2013-10-03 10:48:14 |
Para Siva |
bug |
|
|
added bug |
| 2013-10-03 10:52:56 |
Colin Watson |
affects |
linux-signed (Ubuntu) |
shim-signed (Ubuntu) |
|
| 2013-10-03 10:55:58 |
Para Siva |
summary |
UEFI shim verification against microsoft-uefica-public.pem fails with 20131003 images |
UEFI shim verification against microsoft-uefica-public.pem fails with 20131003 saucy images |
|
| 2013-10-03 18:19:00 |
Steve Langasek |
affects |
shim-signed (Ubuntu) |
sbsigntool (Ubuntu) |
|
| 2013-10-03 18:19:00 |
Steve Langasek |
sbsigntool (Ubuntu): assignee |
|
Steve Langasek (vorlon) |
|
| 2013-10-03 18:19:14 |
Steve Langasek |
sbsigntool (Ubuntu): importance |
Undecided |
Medium |
|
| 2013-10-04 01:36:04 |
Steve Langasek |
sbsigntool (Ubuntu): status |
New |
In Progress |
|
| 2013-10-04 08:07:24 |
Launchpad Janitor |
branch linked |
|
lp:ubuntu/saucy-proposed/sbsigntool |
|
| 2013-10-04 08:49:40 |
Launchpad Janitor |
sbsigntool (Ubuntu): status |
In Progress |
Fix Released |
|
| 2013-10-04 14:45:32 |
Dimitri John Ledkov |
nominated for series |
|
Ubuntu Precise |
|
| 2013-10-04 14:45:32 |
Dimitri John Ledkov |
bug task added |
|
sbsigntool (Ubuntu Precise) |
|
| 2013-10-04 14:45:32 |
Dimitri John Ledkov |
nominated for series |
|
Ubuntu Quantal |
|
| 2013-10-04 14:45:32 |
Dimitri John Ledkov |
bug task added |
|
sbsigntool (Ubuntu Quantal) |
|
| 2013-10-04 14:45:32 |
Dimitri John Ledkov |
nominated for series |
|
Ubuntu Raring |
|
| 2013-10-04 14:45:32 |
Dimitri John Ledkov |
bug task added |
|
sbsigntool (Ubuntu Raring) |
|
| 2013-10-04 14:45:40 |
Dimitri John Ledkov |
sbsigntool (Ubuntu Precise): status |
New |
Triaged |
|
| 2013-10-04 14:45:42 |
Dimitri John Ledkov |
sbsigntool (Ubuntu Quantal): status |
New |
Triaged |
|
| 2013-10-04 14:45:44 |
Dimitri John Ledkov |
sbsigntool (Ubuntu Raring): status |
New |
Triaged |
|
| 2013-10-04 15:04:11 |
Dimitri John Ledkov |
sbsigntool (Ubuntu Precise): assignee |
|
Dmitrijs Ledkovs (xnox) |
|
| 2013-10-04 15:04:13 |
Dimitri John Ledkov |
sbsigntool (Ubuntu Quantal): assignee |
|
Dmitrijs Ledkovs (xnox) |
|
| 2013-10-04 15:04:17 |
Dimitri John Ledkov |
sbsigntool (Ubuntu Raring): assignee |
|
Dmitrijs Ledkovs (xnox) |
|
| 2014-01-26 22:31:39 |
Dimitri John Ledkov |
sbsigntool (Ubuntu Precise): status |
Triaged |
Won't Fix |
|
| 2014-01-26 22:31:42 |
Dimitri John Ledkov |
sbsigntool (Ubuntu Quantal): status |
Triaged |
Won't Fix |
|
| 2014-01-26 22:31:48 |
Dimitri John Ledkov |
sbsigntool (Ubuntu Precise): assignee |
Dimitri John Ledkov (xnox) |
|
|
| 2014-01-26 22:31:50 |
Dimitri John Ledkov |
sbsigntool (Ubuntu Quantal): assignee |
Dimitri John Ledkov (xnox) |
|
|
| 2014-01-26 22:31:53 |
Dimitri John Ledkov |
sbsigntool (Ubuntu Raring): assignee |
Dimitri John Ledkov (xnox) |
|
|
| 2014-01-26 22:31:59 |
Dimitri John Ledkov |
sbsigntool (Ubuntu Raring): status |
Triaged |
Won't Fix |
|
| 2016-06-06 19:04:57 |
Mathieu Trudel-Lapierre |
sbsigntool (Ubuntu Precise): status |
Won't Fix |
In Progress |
|
| 2016-06-06 19:04:59 |
Mathieu Trudel-Lapierre |
sbsigntool (Ubuntu Precise): importance |
Undecided |
Medium |
|
| 2016-06-06 19:05:01 |
Mathieu Trudel-Lapierre |
sbsigntool (Ubuntu Precise): assignee |
|
Mathieu Trudel-Lapierre (cyphermox) |
|
| 2016-06-07 15:13:26 |
Mathieu Trudel-Lapierre |
description |
UEFI shim verification fails (PKCS7 verification failed) with the images of 20131003 against the microsoft-uefica-public. keys present in
http://bazaar.launchpad.net/~ubuntu-bugcontrol/qa-regression-testing/master/files/head:/notes_testing/secure-boot/keys/
The following is the failure results (http://bazaar.launchpad.net/~utah/utah/dev/view/head:/utah/isotest/iso_static_validation.py)
DEBUG: Using iso at: /tmp/utah-saucy-server-amd64.iso
INFO: Preparing image: /tmp/utah-saucy-server-amd64.iso
INFO: /tmp/utah-saucy-server-amd64.iso is locally available as /tmp/utah-saucy-server-amd64.iso
INFO: Getting image type of /tmp/utah-saucy-server-amd64.iso
DEBUG: bsdtar list command: bsdtar -t -f /tmp/utah-saucy-server-amd64.iso
INFO: Image type is: server
DEBUG: Using normal image
DEBUG: bsdtar list command: bsdtar -t -v -f /tmp/utah-saucy-server-amd64.iso ./.disk/info
DEBUG: bsdtar extract command: bsdtar -x -f /tmp/utah-saucy-server-amd64.iso -O .disk/info
INFO: Arch is: amd64
INFO: Series is saucy
DEBUG: Standard name for this iso is: saucy-server-amd64.iso
DEBUG: Generating verification certificates
DEBUG: Extracting UEFI boot and kernel images
DEBUG: bsdtar list command: bsdtar -t -v -f /tmp/utah-saucy-server-amd64.iso ./EFI/BOOT/BOOTx64.EFI
DEBUG: bsdtar extract command: bsdtar -x -f /tmp/utah-saucy-server-amd64.iso -O EFI/BOOT/BOOTx64.EFI
DEBUG: bsdtar list command: bsdtar -t -v -f /tmp/utah-saucy-server-amd64.iso ./EFI/BOOT/grubx64.efi
DEBUG: bsdtar extract command: bsdtar -x -f /tmp/utah-saucy-server-amd64.iso -O EFI/BOOT/grubx64.efi
DEBUG: bsdtar list command: bsdtar -t -v -f /tmp/utah-saucy-server-amd64.iso ./install/vmlinuz
DEBUG: bsdtar extract command: bsdtar -x -f /tmp/utah-saucy-server-amd64.iso -O install/vmlinuz
DEBUG: Verifying UEFI shim
ERROR: test_efi_secure_boot_signatures (__main__.TestValidateISO)
ERROR: Traceback (most recent call last):
File "/usr/lib/python2.7/unittest/case.py", line 327, in run
testMethod()
File "/usr/share/utah/isotest/iso_static_validation.py", line 481, in test_efi_secure_boot_signatures
self.assertEqual(stdout, 'Signature verification OK\n')
File "/usr/lib/python2.7/unittest/case.py", line 511, in assertEqual
assertion_func(first, second, msg=msg)
File "/usr/lib/python2.7/unittest/case.py", line 504, in _baseAssertEqual
raise self.failureException(msg)
AssertionError: 'PKCS7 verification failed\nSignature verification failed\n' != 'Signature verification OK\n' |
[Impact]
Validating signature using sbsigntool for EFI binaries on Precise.
[Test case]
1) pull-lp-source shim-signed
2) sbverify --cert MicCorUEFCA2011_2011-06-27.crt shim.efi.signed
[Regression potential]
This is dependent on the date of the system being correct -- wrong date may cause an unexpected success or failure of the test case.
---
UEFI shim verification fails (PKCS7 verification failed) with the images of 20131003 against the microsoft-uefica-public. keys present in
http://bazaar.launchpad.net/~ubuntu-bugcontrol/qa-regression-testing/master/files/head:/notes_testing/secure-boot/keys/
The following is the failure results (http://bazaar.launchpad.net/~utah/utah/dev/view/head:/utah/isotest/iso_static_validation.py)
DEBUG: Using iso at: /tmp/utah-saucy-server-amd64.iso
INFO: Preparing image: /tmp/utah-saucy-server-amd64.iso
INFO: /tmp/utah-saucy-server-amd64.iso is locally available as /tmp/utah-saucy-server-amd64.iso
INFO: Getting image type of /tmp/utah-saucy-server-amd64.iso
DEBUG: bsdtar list command: bsdtar -t -f /tmp/utah-saucy-server-amd64.iso
INFO: Image type is: server
DEBUG: Using normal image
DEBUG: bsdtar list command: bsdtar -t -v -f /tmp/utah-saucy-server-amd64.iso ./.disk/info
DEBUG: bsdtar extract command: bsdtar -x -f /tmp/utah-saucy-server-amd64.iso -O .disk/info
INFO: Arch is: amd64
INFO: Series is saucy
DEBUG: Standard name for this iso is: saucy-server-amd64.iso
DEBUG: Generating verification certificates
DEBUG: Extracting UEFI boot and kernel images
DEBUG: bsdtar list command: bsdtar -t -v -f /tmp/utah-saucy-server-amd64.iso ./EFI/BOOT/BOOTx64.EFI
DEBUG: bsdtar extract command: bsdtar -x -f /tmp/utah-saucy-server-amd64.iso -O EFI/BOOT/BOOTx64.EFI
DEBUG: bsdtar list command: bsdtar -t -v -f /tmp/utah-saucy-server-amd64.iso ./EFI/BOOT/grubx64.efi
DEBUG: bsdtar extract command: bsdtar -x -f /tmp/utah-saucy-server-amd64.iso -O EFI/BOOT/grubx64.efi
DEBUG: bsdtar list command: bsdtar -t -v -f /tmp/utah-saucy-server-amd64.iso ./install/vmlinuz
DEBUG: bsdtar extract command: bsdtar -x -f /tmp/utah-saucy-server-amd64.iso -O install/vmlinuz
DEBUG: Verifying UEFI shim
ERROR: test_efi_secure_boot_signatures (__main__.TestValidateISO)
ERROR: Traceback (most recent call last):
File "/usr/lib/python2.7/unittest/case.py", line 327, in run
testMethod()
File "/usr/share/utah/isotest/iso_static_validation.py", line 481, in test_efi_secure_boot_signatures
self.assertEqual(stdout, 'Signature verification OK\n')
File "/usr/lib/python2.7/unittest/case.py", line 511, in assertEqual
assertion_func(first, second, msg=msg)
File "/usr/lib/python2.7/unittest/case.py", line 504, in _baseAssertEqual
raise self.failureException(msg)
AssertionError: 'PKCS7 verification failed\nSignature verification failed\n' != 'Signature verification OK\n' |
|
| 2016-06-08 05:04:13 |
Steve Langasek |
sbsigntool (Ubuntu Precise): status |
In Progress |
Fix Committed |
|
| 2016-06-08 05:04:16 |
Steve Langasek |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
| 2016-06-08 05:04:21 |
Steve Langasek |
bug |
|
|
added subscriber SRU Verification |
| 2016-06-08 05:04:30 |
Steve Langasek |
tags |
iso-testing qa-daily-testing rls-s-incoming |
iso-testing qa-daily-testing rls-s-incoming verification-needed |
|
| 2016-06-30 21:26:01 |
Mathieu Trudel-Lapierre |
tags |
iso-testing qa-daily-testing rls-s-incoming verification-needed |
iso-testing qa-daily-testing rls-s-incoming verification-done |
|
| 2016-07-12 06:32:09 |
Launchpad Janitor |
sbsigntool (Ubuntu Precise): status |
Fix Committed |
Fix Released |
|
| 2016-07-12 06:32:19 |
Martin Pitt |
removed subscriber Ubuntu Stable Release Updates Team |
|
|
|
