Merge pull request #196 from bcressey/kernel-hmac-take-two

bottlerocket-os · Apr 10, 2024 · 6053627 · 6053627
2 parents add0ebf + 9b6f3d3
commit 6053627
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/twoliter/embedded/rpm2img b/twoliter/embedded/rpm2img
@@ -461,7 +461,9 @@ if [ "${UEFI_SECURE_BOOT}" == "yes" ] ; then
 fi
 
 # Generate an HMAC for the kernel after signing.
-sha512hmac "${vmlinuz}" > ".${vmlinuz}.hmac"
+openssl sha512 -hmac FIPS-FTW-RHT2009 -hex "${vmlinuz}" \
+  | awk -v vmlinuz="${vmlinuz}" '{ print $2 "  " vmlinuz }' \
+  > ".${vmlinuz}.hmac"
 
 popd >/dev/null