8645aefc8b699f900d97cbadd55b7f492099c61e - github/trini/u-boot

commit	8645aefc8b699f900d97cbadd55b7f492099c61e	[log] [tgz]
author	Vincent Stehlé <vincent.stehle@arm.com>	Tue May 31 09:55:34 2022 +0200
committer	Heinrich Schuchardt <heinrich.schuchardt@canonical.com>	Sat Jun 04 08:43:55 2022 +0200
tree	8b9b58da4604290897131f8cb7fd70ab0ded7b3a
parent	82b3f4cb46ce8ef49b6b887233be0b409056d6c4 [diff]

efi: test/py: authenticate fit capsules

Add support for the authentication of UEFI capsules containing FIT images.

The authentication code is moved out of the function handling raw images
into a new function efi_firmware_capsule_authenticate(). The special case
for the FMP header coming from edk2 tools is preserved. There is no
functional change for capsules containing raw images.

The python test for signed capsules with raw images is renamed with no
functional change and a new test is added for signed capsules containing
FIT images.

This can be tested with sandbox64_defconfig or sandbox_flattree_defconfig,
plus CONFIG_EFI_CAPSULE_AUTHENTICATE=y.

Signed-off-by: Vincent Stehlé <vincent.stehle@arm.com>
Cc: Heinrich Schuchardt <xypron.glpk@gmx.de>

lib/efi_loader/efi_firmware.c[diff]
test/py/tests/test_efi_capsule/conftest.py[diff]
test/py/tests/test_efi_capsule/test_capsule_firmware_signed_fit.py[Copied from test/py/tests/test_efi_capsule/test_capsule_firmware_signed.py - diff]
test/py/tests/test_efi_capsule/test_capsule_firmware_signed_raw.py[Renamed from test/py/tests/test_efi_capsule/test_capsule_firmware_signed.py - diff]

4 files changed

tree: 8b9b58da4604290897131f8cb7fd70ab0ded7b3a