[PATCH v2 0/2] scripts/Makefile.lib: EFI: Use capsule CRT instead of ESL
Ilias Apalodimas
ilias.apalodimas at linaro.org
Fri Jun 14 08:12:09 CEST 2024
Hi Jonathan
On Thu, 13 Jun 2024 at 23:28, Jonathan Humphreys <j-humphreys at ti.com> wrote:
>
> Use the capsule's public key certificate rather than a prebuilt ESL
> generated from the certificate. The ESL is now generated as part of the
> build.
Is there a reason to do this? I understand that the .crt extension
might be well known while the .esl is not, but OTOH the system you
build on after this change *needs* to have cert-to-efi-sig-list
installed
Thanks
/Ilias
>
> Changes from v1:
> - Converted the single patch to a series to include a bug fix found during
> development.
> - Created an explicit rule for creating the ESL file for proper makefile
> dependency tracking. v1 had combined creating the ESL file and
> generating the .dtsi include in a single command.
>
> Jonathan Humphreys (2):
> scripts/Makefile.lib: fixes: Embed capsule public key in platform's
> dtb
> scripts/Makefile.lib: EFI: Use capsule CRT instead of ESL file
>
> board/sandbox/capsule_pub_esl_good.esl | Bin 831 -> 0 bytes
> configs/sandbox_defconfig | 2 +-
> configs/sandbox_flattree_defconfig | 2 +-
> doc/develop/uefi/uefi.rst | 8 ++++----
> lib/efi_loader/Kconfig | 12 +++++++-----
> scripts/Makefile.lib | 24 +++++++++++++++---------
> 6 files changed, 28 insertions(+), 20 deletions(-)
> delete mode 100644 board/sandbox/capsule_pub_esl_good.esl
>
> --
> 2.34.1
>
More information about the U-Boot
mailing list