Update the signing-template JSON metadata

Move all the data under a new top-level "packages" key
Add an empty "trusted_certs" key - the helper binaries do not do any
further verification with an embedded key.

diff --git a/debian/changelog b/debian/changelog
index c0d0ab1f030c170f9858960dbe3256cdd2ed436f..863d8f033998b19cbf60fb212a5642ba91062a8c 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -16,8 +16,12 @@ shim (15+1533136590.3beb971-3) UNRELEASED; urgency=medium
   * Change maintenance address to be the EFI team
   * Add me and vorlon to the Uploaders list
   * Rename the helper binary packages to shim-helpers-$arch.
+  * Update the signing-template JSON metadata to match new practice:
+    + Move all the data under a new top-level "packages" key
+    + Add an empty "trusted_certs" key - the helper binaries do not do any
+      further verification with an embedded key.
 
- -- Steve McIntyre <93sam@debian.org>  Wed, 06 Mar 2019 22:35:52 +0000
+ -- Steve McIntyre <93sam@debian.org>  Fri, 08 Mar 2019 21:59:43 +0000
 
 shim (15+1533136590.3beb971-2) unstable; urgency=medium
 

diff --git a/debian/signing-template.json.in b/debian/signing-template.json.in
index cd4f1a925c2a23e4597695b4c70b744b7fc2545a..09f4f36b831f6b1f08914a5e594a819dd22228ca 100644 (file)
--- a/debian/signing-template.json.in
+++ b/debian/signing-template.json.in
@@ -1,6 +1,11 @@
-{"shim-unsigned": {
-       "files": [
-               {"sig_type": "efi", "file": "usr/lib/shim/fb@efi@.efi"},
-               {"sig_type": "efi", "file": "usr/lib/shim/mm@efi@.efi"}
-       ]
-}}
+{
+  "packages": {
+    "shim-unsigned": {
+      "trusted_certs": [],
+      "files": [
+        {"sig_type": "efi", "file": "usr/lib/shim/fb@efi@.efi"},
+        {"sig_type": "efi", "file": "usr/lib/shim/mm@efi@.efi"}
+      ]
+    }
+  }
+}