[PATCH v3 0/6] eficonfig: add UEFI Secure Boot key maintenance interface

Heinrich Schuchardt xypron.glpk at gmx.de
Sat Oct 22 10:31:27 CEST 2022


On 10/14/22 08:56, Masahisa Kojima wrote:
> This series adds the UEFI Secure Boot key maintenance interface
> to the eficonfig command.
> User can enroll and delete the PK, KEK, db and dbx.
>
> Source code can be cloned with:
> $ git clone https://git.linaro.org/people/masahisa.kojima/u-boot.git -b kojima/eficonfig_sbkey_v3
>
> [Major Changes]
> - rebased on top of u-boot/master
>
> Masahisa Kojima (6):
>    eficonfig: refactor eficonfig_select_file_handler()
>    eficonfig: expose append entry function
>    eficonfig: add UEFI Secure Boot Key enrollment interface
>    eficonfig: add "Show/Delete Signature Database" menu entry
>    test/eficonfig: support secure boot key maintenance menu
>    test: add test for eficonfig secure boot key management
>
>   cmd/Makefile                                  |   3 +
>   cmd/eficonfig.c                               |  48 +-
>   cmd/eficonfig_sbkey.c                         | 751 ++++++++++++++++++
>   include/efi_config.h                          |  10 +
>   test/py/tests/test_eficonfig/conftest.py      |  84 +-
>   test/py/tests/test_eficonfig/defs.py          |  14 +
>   .../py/tests/test_eficonfig/test_eficonfig.py |   4 +-
>   .../test_eficonfig/test_eficonfig_sbkey.py    | 472 +++++++++++
>   8 files changed, 1360 insertions(+), 26 deletions(-)
>   create mode 100644 cmd/eficonfig_sbkey.c
>   create mode 100644 test/py/tests/test_eficonfig/defs.py
>   create mode 100644 test/py/tests/test_eficonfig/test_eficonfig_sbkey.py
>

Python tests with this series fail. See

https://source.denx.de/u-boot/custodians/u-boot-efi/-/jobs/518130

Please, run 'make tests' before resubmitting.

Best regards

Heinrich


More information about the U-Boot mailing list