u-boot-brain/test/py/tests/test_efi_secboot/defs.py

# SPDX-License-Identifier:      GPL-2.0+

# Owner guid
GUID = '11111111-2222-3333-4444-123456789abc'

# v1.5.1 or earlier of efitools has a bug in sha256 calculation, and
# you need build a newer version on your own.
# The path must terminate with '/'.
EFITOOLS_PATH = ''

# "--addcert" option of sbsign must be available, otherwise
# you need build a newer version on your own.
# The path must terminate with '/'.
SBSIGN_PATH = ''
efi_loader, pytest: set up secure boot environment A fixture for UEFI secure boot tests (image authentication and variable authentication) is defined. A small file system with test data in a single partition formatted in fat is created. This test requires efitools v1.5.2 or later. If the system's efitools is older, you have to build it on your own and define EFITOOLS_PATH. Signed-off-by: AKASHI Takahiro <takahiro.akashi@linaro.org> 2020-04-14 11:51:49 +09:00			`# SPDX-License-Identifier: GPL-2.0+`

			`# Owner guid`
test/py: efi_secboot: apply autopep8 Python's autopep8 can automatically correct some of warnings from pylint and rewrite the code in a pretty print format. So just do it. Suggested-by: Heinrich Schuchardt <xypron.glpk@gmx.de> Signed-off-by: AKASHI Takahiro <takahiro.akashi@linaro.org> 2020-07-08 14:01:58 +09:00			`GUID = '11111111-2222-3333-4444-123456789abc'`
efi_loader, pytest: set up secure boot environment A fixture for UEFI secure boot tests (image authentication and variable authentication) is defined. A small file system with test data in a single partition formatted in fat is created. This test requires efitools v1.5.2 or later. If the system's efitools is older, you have to build it on your own and define EFITOOLS_PATH. Signed-off-by: AKASHI Takahiro <takahiro.akashi@linaro.org> 2020-04-14 11:51:49 +09:00
			`# v1.5.1 or earlier of efitools has a bug in sha256 calculation, and`
			`# you need build a newer version on your own.`
test/py: efi_secboot: add test for intermediate certificates In this test case, an image may have a signature with additional intermediate certificates. A chain of trust will be followed and all the certificates in the middle of chain must be verified before loading. Signed-off-by: AKASHI Takahiro <takahiro.akashi@linaro.org> 2020-07-21 19:35:24 +09:00			`# The path must terminate with '/'.`
test/py: efi_secboot: apply autopep8 Python's autopep8 can automatically correct some of warnings from pylint and rewrite the code in a pretty print format. So just do it. Suggested-by: Heinrich Schuchardt <xypron.glpk@gmx.de> Signed-off-by: AKASHI Takahiro <takahiro.akashi@linaro.org> 2020-07-08 14:01:58 +09:00			`EFITOOLS_PATH = ''`
test/py: efi_secboot: add test for intermediate certificates In this test case, an image may have a signature with additional intermediate certificates. A chain of trust will be followed and all the certificates in the middle of chain must be verified before loading. Signed-off-by: AKASHI Takahiro <takahiro.akashi@linaro.org> 2020-07-21 19:35:24 +09:00
			`# "--addcert" option of sbsign must be available, otherwise`
			`# you need build a newer version on your own.`
			`# The path must terminate with '/'.`
			`SBSIGN_PATH = ''`