]> git.baikalelectronics.ru Git - uboot.git/commit
efi: capsule: Add support for uefi capsule authentication
authorSughosh Ganu <sughosh.ganu@linaro.org>
Wed, 30 Dec 2020 13:57:09 +0000 (19:27 +0530)
committerHeinrich Schuchardt <xypron.glpk@gmx.de>
Thu, 31 Dec 2020 13:41:31 +0000 (14:41 +0100)
commit08ff52cbbd6f873da02a0045e14ef698bf6d3114
tree3c5364e835613770b47a069ca9dd398ac0ac4ceb
parent37f7b97e93d28d6e7cf650224e1f0bb744546646
efi: capsule: Add support for uefi capsule authentication

Add support for authenticating uefi capsules. Most of the signature
verification functionality is shared with the uefi secure boot
feature.

The root certificate containing the public key used for the signature
verification is stored as part of the device tree blob. The root
certificate is stored as an efi signature list(esl) file -- this file
contains the x509 certificate which is the root certificate.

Signed-off-by: Sughosh Ganu <sughosh.ganu@linaro.org>
board/emulation/common/Makefile
board/emulation/common/qemu_capsule.c [new file with mode: 0644]
include/efi_api.h
include/efi_loader.h
lib/efi_loader/Kconfig
lib/efi_loader/efi_capsule.c
lib/efi_loader/efi_signature.c