Pull request for efi-2022-04-rc2-4

[Heinrich Schuchardt]

Dear Tom,

thanks for catching the build warnings with clang.

The changes relative to Pull request for efi-2022-04-rc2-3 are described
in https://lists.denx.de/pipermail/u-boot/2022-February/475051.html

The following changes since commit fe203a05fb663fa9bc42a9ef9ae51a6ed01a4a90:

   Merge branch '2022-02-10-platform-updates' (2022-02-10 17:38:04 -0500)

are available in the Git repository at:

   https://source.denx.de/u-boot/custodians/u-boot-efi.git
tags/efi-2022-04-rc2-4

for you to fetch changes up to 72b509b7019878e2a5f69bcf7198a0927a77ad60:

   test/py: efi_secboot: adjust secure boot tests to code changes
(2022-02-11 20:07:55 +0100)

Gitlab CI shows no problems in:
https://source.denx.de/u-boot/custodians/u-boot-efi/-/pipelines/10974

sandbox with clang shows no compiler warning anymore
https://source.denx.de/u-boot/custodians/u-boot-efi/-/jobs/392164/raw

----------------------------------------------------------------
Pull request for efi-2022-04-rc2-4

Documentation:

* mkeficapsule man-page

UEFI changes:

* add support for signing images to mkeficapsule
* add support for user define capsule GUID
* adjust unit tests for capsules
* fix UEFI image signature validation in case of multiple signatures

----------------------------------------------------------------
AKASHI Takahiro (10):
       CI: enforce packages upgrade for Msys2 on Windows
       tools: build mkeficapsule with tools-only_defconfig
       tools: mkeficapsule: add firmware image signing
       tools: mkeficapsule: add man page
       doc: update UEFI document for usage of mkeficapsule
       test/py: efi_capsule: add image authentication test
       tools: mkeficapsule: allow for specifying GUID explicitly
       test/py: efi_capsule: align with the syntax change of mkeficapsule
       test/py: efi_capsule: add a test for "--guid" option
       test/py: efi_capsule: check the results in case of
CAPSULE_AUTHENTICATE

Ilias Apalodimas (2):
       efi_loader: fix dual signed image certification
       test/py: efi_secboot: adjust secure boot tests to code changes

  .azure-pipelines.yml                               |   5 +-
  MAINTAINERS                                        |   1 +
  configs/tools-only_defconfig                       |   1 +
  doc/develop/uefi/uefi.rst                          | 151 +++----
  doc/mkeficapsule.1                                 | 111 +++++
  lib/efi_loader/efi_image_loader.c                  |  88 +---
  test/py/tests/test_efi_capsule/capsule_defs.py     |   5 +
  test/py/tests/test_efi_capsule/conftest.py         |  59 ++-
  test/py/tests/test_efi_capsule/signature.dts       |  10 +
  .../test_efi_capsule/test_capsule_firmware.py      |  91 +++-
  .../test_capsule_firmware_signed.py                | 254 ++++++++++++
  test/py/tests/test_efi_secboot/test_signed.py      |  30 +-
  tools/Kconfig                                      |   8 +
  tools/Makefile                                     |   4 +-
  tools/eficapsule.h                                 | 116 ++++++
  tools/mkeficapsule.c                               | 460
++++++++++++++++++---
  16 files changed, 1181 insertions(+), 213 deletions(-)
  create mode 100644 doc/mkeficapsule.1
  create mode 100644 test/py/tests/test_efi_capsule/signature.dts
  create mode 100644
test/py/tests/test_efi_capsule/test_capsule_firmware_signed.py
  create mode 100644 tools/eficapsule.h