[PATCH v9 03/10] sandbox: capsule: Add keys and certificates needed for capsule update testing

Simon Glass sjg at chromium.org
Sat Aug 12 16:24:53 CEST 2023


On Fri, 11 Aug 2023 at 23:57, Sughosh Ganu <sughosh.ganu at linaro.org> wrote:
>
> Add the private keys and public key certificates which are to be used
> for capsule authentication while testing the EFI capsule update
> functionality. There are two pairs of private and public keys, good
> and bad. The good key pair will be used for signing capsules, whilst
> the bad key pair is to be used as malicious keys for testing
> authentication failure cases. The capsule_pub_key_good.crt is also
> converted to an EFI Signature List(ESL) file,
> capsule_pub_esl_good.esl, which is embedded in the platform's
> device-tree for capsule authentication.
>
> Signed-off-by: Sughosh Ganu <sughosh.ganu at linaro.org>
> ---
> Changes since V8: None
>
>  board/sandbox/capsule_priv_key_bad.key  |  28 ++++++++++++++++++++++++
>  board/sandbox/capsule_priv_key_good.key |  28 ++++++++++++++++++++++++
>  board/sandbox/capsule_pub_esl_good.esl  | Bin 0 -> 831 bytes
>  board/sandbox/capsule_pub_key_bad.crt   |  19 ++++++++++++++++
>  board/sandbox/capsule_pub_key_good.crt  |  19 ++++++++++++++++
>  5 files changed, 94 insertions(+)
>  create mode 100644 board/sandbox/capsule_priv_key_bad.key
>  create mode 100644 board/sandbox/capsule_priv_key_good.key
>  create mode 100644 board/sandbox/capsule_pub_esl_good.esl
>  create mode 100644 board/sandbox/capsule_pub_key_bad.crt
>  create mode 100644 board/sandbox/capsule_pub_key_good.crt

Reviewed-by: Simon Glass <sjg at chromium.org>


More information about the U-Boot mailing list