Source: shim-signed Section: utils Priority: optional Maintainer: Debian EFI Team Uploaders: Steve McIntyre <93sam@debian.org>, Steve Langasek Build-Depends: debhelper (>= 13), shim-unsigned (= 15.8-1~deb12u1), shim-helpers-amd64-signed [amd64], shim-helpers-arm64-signed [arm64], shim-helpers-i386-signed [i386], # sbsigntool before 0.9.2-2 had a horrid bug with checksum calculation # which broke our build sbsigntool (>= 0.9.2-2), po-debconf Standards-Version: 4.5.1 Vcs-Browser: https://salsa.debian.org/efi-team/shim-signed Vcs-Git: https://salsa.debian.org/efi-team/shim-signed.git Package: shim-signed Architecture: amd64 i386 arm64 Multi-Arch: same Depends: ${misc:Depends}, shim-signed-common (>= ${source:Version}), grub-efi-amd64-bin [amd64], shim-helpers-amd64-signed (>= ${helpers:Version}) [amd64], grub-efi-ia32-bin [i386], shim-helpers-i386-signed (>= ${helpers:Version}) [i386], grub-efi-arm64-bin [arm64], shim-helpers-arm64-signed (>= ${helpers:Version}) [arm64], grub2-common (>= 2.06-13+deb12u1) Built-Using: shim (= ${shim:Version}) Description: Secure Boot chain-loading bootloader (Microsoft-signed binary) This package provides a minimalist boot loader which allows verifying signatures of other UEFI binaries against either the Secure Boot DB/DBX or against a built-in signature database. Its purpose is to allow a small, infrequently-changing binary to be signed by the UEFI CA, while allowing an OS distributor to revision their main bootloader independently of the CA. . This package contains the version of the bootloader binary signed by the Microsoft UEFI CA. Package: shim-signed-common Multi-Arch: foreign Architecture: all Depends: ${misc:Depends}, mokutil Replaces: shim-signed (<< 1.32+15+1533136590.3beb971-5) Breaks: shim-signed (<< 1.32+15+1533136590.3beb971-5) Description: Secure Boot chain-loading bootloader (common helper scripts) This package provides a minimalist boot loader which allows verifying signatures of other UEFI binaries against either the Secure Boot DB/DBX or against a built-in signature database. Its purpose is to allow a small, infrequently-changing binary to be signed by the UEFI CA, while allowing an OS distributor to revision their main bootloader independently of the CA. . This package contains common helper scripts for all versions of the shim-signed package.