[PATCH v5 3/3] efi_loader: add FIT_SIGNATURE option to use hash_calculate()

Masahisa Kojima masahisa.kojima at linaro.org
Wed May 12 13:32:28 CEST 2021


Build error occurs when CONFIG_EFI_SECURE_BOOT/
CONFIG_EFI_CAPSULE_AUTHENTICATE/CONFIG_EFI_TCG2_PROTOCOL
is enabled, because hash-checksum.c is not compiled.

With the following commit,
commit 0bcb28dfb946 ("lib: Rename rsa-checksum.c to hash-checksum.c")
CONFIG_FIT_SIGNATURE option is required to use hash_calculate() function.

This commit selects FIT_SIGNATURE option in Kconfig.

Signed-off-by: Masahisa Kojima <masahisa.kojima at linaro.org>
---

Changes in v5:
- Missing option for EFI_TCG2_PROTOROL already added in different commit.
  This commit adds FIT_SIGNATRE only.

Changes in v4:
- newly added in this patch series, due to rebasing
  the base code.

 lib/efi_loader/Kconfig | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/lib/efi_loader/Kconfig b/lib/efi_loader/Kconfig
index 385a81d7d9..0ffced25b1 100644
--- a/lib/efi_loader/Kconfig
+++ b/lib/efi_loader/Kconfig
@@ -175,6 +175,7 @@ config EFI_CAPSULE_AUTHENTICATE
 	select PKCS7_VERIFY
 	select IMAGE_SIGN_INFO
 	select EFI_SIGNATURE_SUPPORT
+	select FIT_SIGNATURE
 	default n
 	help
 	  Select this option if you want to enable capsule
@@ -308,6 +309,7 @@ config EFI_TCG2_PROTOCOL
 	select SHA512_ALGO
 	select SHA384
 	select SHA512
+	select FIT_SIGNATURE
 	help
 	  Provide a EFI_TCG2_PROTOCOL implementation using the TPM hardware
 	  of the platform.
@@ -344,6 +346,7 @@ config EFI_SECURE_BOOT
 	select PKCS7_MESSAGE_PARSER
 	select PKCS7_VERIFY
 	select EFI_SIGNATURE_SUPPORT
+	select FIT_SIGNATURE
 	default n
 	help
 	  Select this option to enable EFI secure boot support.
-- 
2.17.1



More information about the U-Boot mailing list