u-boot.git/cmd/eficonfig_sbkey.c, branch master

Restore patch series "arm: dts: am62-beagleplay: Fix Beagleplay Ethernet"

2024-05-20T19:35:03+00:00

As part of bringing the master branch back in to next, we need to allow
for all of these changes to exist here.

Reported-by: Jonas Karlman 
Signed-off-by: Tom Rini

Revert "Merge patch series "arm: dts: am62-beagleplay: Fix Beagleplay Ethernet""

2024-05-19T14:16:36+00:00

When bringing in the series 'arm: dts: am62-beagleplay: Fix Beagleplay
Ethernet"' I failed to notice that b4 noticed it was based on next and
so took that as the base commit and merged that part of next to master.

This reverts commit c8ffd1356d42223cbb8c86280a083cc3c93e6426, reversing
changes made to 2ee6f3a5f7550de3599faef9704e166e5dcace35.

Reported-by: Jonas Karlman 
Signed-off-by: Tom Rini

cmd: Remove and add needed includes

2024-05-06T21:05:04+00:00

Remove  from all "cmd/" files and when needed add
missing include files directly.

Signed-off-by: Tom Rini

eficonfig: refactor eficonfig_process_common function

2023-01-27T17:32:00+00:00

Current change boot order implementation does not call
eficonfig_process_common() and call own menu functions
for display_statusline, item_data_print and item_choice.
Change boot order functionality should call
eficonfig_process_common() to improve maintenanceability.

This commit is a preparation to remove the change boot
order specific implementation. The menu functions
(display_statusline, item_data_print and item_choice) are
added as argument of eficonfig_process_common().
The menu description string displayed at the bottom of
the menu is also added as argument.

Signed-off-by: Masahisa Kojima 
Reviewed-by: Ilias Apalodimas

eficonfig: EFI_VARIABLE_APPEND_WRITE is not set for null key

2022-12-20T15:06:48+00:00

The signed null key with authenticated header is used to clear
the PK, KEK, db and dbx. When CONFIG_EFI_MM_COMM_TEE is enabled
(StMM and OP-TEE based RPMB storage is used as the EFI variable
storage), clearing KEK, db and dbx by enrolling a signed null
key does not work as expected if EFI_VARIABLE_APPEND_WRITE
attritube is set.

This commit checks the selected file is null key, then
EFI_VARIABLE_APPEND_WRITE attibute will not be used for the null key.

Signed-off-by: Masahisa Kojima 
Reviewed-by: Ilias Apalodimas 
Reviewed-by: Heinrich Schuchardt

eficonfig: add "Show Signature Database" menu entry

2022-11-22T11:00:45+00:00

This commit adds the menu-driven interface to show the
signature list content.

Signed-off-by: Masahisa Kojima 
Acked-by: Ilias Apalodimas

eficonfig: add UEFI Secure Boot Key enrollment interface

2022-11-22T11:00:45+00:00

This commit adds the menu-driven UEFI Secure Boot Key
enrollment interface. User can enroll PK, KEK, db
and dbx by selecting file.
Only the signed EFI Signature List(s) with an authenticated
header, typically '.auth' file, is accepted.

To clear the PK, KEK, db and dbx, user needs to enroll the null key
signed by PK or KEK.

Signed-off-by: Masahisa Kojima 
Reviewed-by: Ilias Apalodimas