23 lines
514 B
Bash
23 lines
514 B
Bash
|
#!/bin/sh
|
||
|
|
|
||
|
|
sigfile="/tmp/bmc.sig"
|
||
|
|
imagebmc="/run/initramfs/image-bmc"
|
||
|
|
bmcimage="/run/initramfs/bmc-image"
|
||
|
|
publickey="/etc/activationdata/OpenBMC/publickey"
|
||
|
|
bmclog="/tmp/update-bmc.log"
|
||
|
|
|
||
|
|
if [ -f $publickey ];then
|
||
|
|
r="$(openssl dgst -verify $publickey -sha256 -signature $sigfile $bmcimage)"
|
||
|
|
echo "$r" > $bmclog
|
||
|
|
if [ "Verified OK" = "$r" ]; then
|
||
|
|
mv $bmcimage $imagebmc
|
||
|
|
rm -f $sigfile
|
||
|
|
exit 0
|
||
|
|
else
|
||
|
|
exit 1
|
||
|
|
fi
|
||
|
|
else
|
||
|
|
echo "No $publickey file" > $bmclog
|
||
|
|
exit 1
|
||
|
|
fi
|