| #!/bin/sh | |
| sigfile="/tmp/bmc.sig" | |
| imagebmc="/run/initramfs/image-bmc" | |
| bmcimage="/run/initramfs/bmc-image" | |
| publickey="/etc/activationdata/OpenBMC/publickey" | |
| bmclog="/tmp/update-bmc.log" | |
| if [ -f $publickey ];then | |
| r="$(openssl dgst -verify $publickey -sha256 -signature $sigfile $bmcimage)" | |
| echo "$r" > $bmclog | |
| if [ "Verified OK" = "$r" ]; then | |
| mv $bmcimage $imagebmc | |
| rm -f $sigfile | |
| exit 0 | |
| else | |
| exit 1 | |
| fi | |
| else | |
| echo "No $publickey file" > $bmclog | |
| exit 1 | |
| fi |