[PATCH v3 0/6] eficonfig: add UEFI Secure Boot key maintenance interface

Masahisa Kojima masahisa.kojima at linaro.org
Fri Oct 14 08:56:54 CEST 2022


This series adds the UEFI Secure Boot key maintenance interface
to the eficonfig command.
User can enroll and delete the PK, KEK, db and dbx.

Source code can be cloned with:
$ git clone https://git.linaro.org/people/masahisa.kojima/u-boot.git -b kojima/eficonfig_sbkey_v3

[Major Changes]
- rebased on top of u-boot/master

Masahisa Kojima (6):
  eficonfig: refactor eficonfig_select_file_handler()
  eficonfig: expose append entry function
  eficonfig: add UEFI Secure Boot Key enrollment interface
  eficonfig: add "Show/Delete Signature Database" menu entry
  test/eficonfig: support secure boot key maintenance menu
  test: add test for eficonfig secure boot key management

 cmd/Makefile                                  |   3 +
 cmd/eficonfig.c                               |  48 +-
 cmd/eficonfig_sbkey.c                         | 751 ++++++++++++++++++
 include/efi_config.h                          |  10 +
 test/py/tests/test_eficonfig/conftest.py      |  84 +-
 test/py/tests/test_eficonfig/defs.py          |  14 +
 .../py/tests/test_eficonfig/test_eficonfig.py |   4 +-
 .../test_eficonfig/test_eficonfig_sbkey.py    | 472 +++++++++++
 8 files changed, 1360 insertions(+), 26 deletions(-)
 create mode 100644 cmd/eficonfig_sbkey.c
 create mode 100644 test/py/tests/test_eficonfig/defs.py
 create mode 100644 test/py/tests/test_eficonfig/test_eficonfig_sbkey.py

-- 
2.17.1



More information about the U-Boot mailing list