0.7.2

What's Changed

• mokutil: revert the default listing to the verbose form by @lcp in #82

Full Changelog: 0.7.1...0.7.2

0.7.1

What's Changed

• Fix an off-by-one reading passwords from a file. by @vathpela in #79
• Short certificate listing by default by @lnussel in #78

New Contributors

• @lnussel made their first contribution in #78

Full Changelog: 0.7.0...0.7.1

0.7.0

What's Changed

• Show usage instead of aborting on bad flags by @frozencemetery in #53
• mokutil bugfix: del unused opt "-s" by @GYShit in #54
• Fix two leaks by @frozencemetery in #55
• Use PKG_PROG_PKG_CONFIG macro from pkg.m4 to detect pkg-config by @tgurr in #56
• mokutil: Fix memory leak in export_db_keys by @GYShit in #58
• mokutil:check the result of malloc() is necessary by @GYShit in #60
• Fix inconsistency in skip messages by @slowpeek in #63
• man: add "--trust-mok" and "--untrust-mok" by @slowpeek in #64
• Avoid conflicting efi_char16_t type definitions by @lcp in #67
• fix: typo "accesss" -> "access" by @qoijjj in #74
• Misc fixes by @sshedi in #73
• Add support for SSPPolicy, depricate --set-sbat-policy delete @jsetje #65

New Contributors

• @frozencemetery made their first contribution in #53
• @GYShit made their first contribution in #54
• @tgurr made their first contribution in #56
• @slowpeek made their first contribution in #63
• @qoijjj made their first contribution in #74
• @sshedi made their first contribution in #73

Full Changelog: 0.6.0...0.7.0

0.6.0

What's Changed

• mokutil: enable setting fallback verbosity and noreboot mode by @rmetrich in #46
• mokutil: Add trust_mok_keys and untrust_mok_keys by @esnowberg in #49
• SBAT revocation update support by @jsetje in #52

New Contributors

• @rmetrich made their first contribution in #46
• @esnowberg made their first contribution in #49
• @jsetje made their first contribution in #52

Full Changelog: 0.5.0...0.6.0

Version bump to 0.5.0

Andy Postnikov (1):
Fix 32 bit build

Anthony Wong (1):
Add --timeout to manpage and other corrections.

Dimitri John Ledkov (1):
src/util.c: fix NULL pointer dereference in mok_get_variable

Domenico Andreoli (1):
Fix name of --enable-validation in the description

Gary Lin (47):
Remove shebang from bash-completion/mokutil
Remove in_pending_request()
Map the UEFI variable names with a function
Remove the SHA1 code from identify_hash_type()
Update the Copyright year
Split utility functions to util.c
util: add functions for db_var_name and db_friendly_name
util: constify the parameters of get_req_var_name() and get_req_auth_var_name()
mokutil: move the hash functions to efi_hash.c
mokutil: move x509 functions to efi_x509.c
mokutil: fix the error message in sb_state()
password-crypt: fix the types of several functions
password-crypt: update the function names
mokutil: rename hash_file as pw_hash_file
efi_x509: use d2i_X509() to create X509 handling
efi_x509: add the function to check immediate CA
mokutil: do the CA check
mokutil: close file in the error path
make CA check non-fatal
mokutil: minor fix for coding style
mokutil: remove "--simple-hash"
man: remove "--simple-hash"
mokutil: adjust the command bits
mokutil: check the blocklists before enrolling a key
mokutil: improve the message from "--test-key"
mokutil: drop the checks for PK and KEK
mokutil: remove the redundant variable
mokutil: constify arguments of functions
mokutil: improve the readability of issue_mok_request()
mokutil: move build_mok_list() to util.c
mokutil: make the toggle functions inline
mokutil: rename the password related functions
mokutil: correct the data for efi_set_variable() in set_password()
mokutil: clean up some functions
mokutil: initialize data for efi_get_variable()
mokutil: disable CA check by default
man: add "--ca-check" to the man page
mokutil: add "--version" to show the current version
efi_x509: convert the cert to X509 directly
efi_x509: typo fix in the header
keyring: add the function to check kernel keyring
efi_x509: add the function to fetch SKID
mokutil: check the kernel trusted keyring by default
man: add "--ignore-keyring"
efi_x509: fix an error handling in is_immediate_ca()
mokutil: delete key/hash from the reverse request
Version bump to 0.5.0

Harry Youd (1):
Avoid taking pointer to packed struct

Javier Martinez Canillas (5):
mokutil: only check for Secure Boot support in options that need it
mokutil: Add option to print the UEFI SBAT variable content
mokutil: Read the SbatLevelRT variable to get the SBAT entries
efi_x509: use EVP_Digest()* functions instead of the deprecated SHA1_*()
efi_x509: fix certificates fingerprint calculation

Peter Jones (1):
mokutil: add mok-variables parsing support

Sandy (1):
mokutil.c: fix typo enrollement -> enrollment

Tom Stellard (1):
Fix -Wcast-align warnings