u-boot.git/test/py/tests/test_efi_secboot/conftest.py, branch v2020.10-rc2

test/py: efi_secboot: fix additional pylint errors

2020-07-22T10:32:42Z

This is a fixup by autopep8 after the commit ("test/py: efi_secboot: apply autopep8"). Signed-off-by: AKASHI Takahiro Signed-off-by: Heinrich Schuchardt

test/py: efi_secboot: remove unused function

2020-07-22T10:32:42Z

'tool_is_in_path' function is no longer used anywhere after Heinrich has removed 'sudo' version of fixture setup. Signed-off-by: AKASHI Takahiro Signed-off-by: Heinrich Schuchardt

test: use virt-make-fs to build image

2020-07-11T21:14:16Z

Avoid sudo for test/py/tests/test_efi_secboot by using virt-make-fs. Signed-off-by: Heinrich Schuchardt

test/py: efi_secboot: add a test for verifying with digest of signed image

2020-07-11T21:14:16Z

Signature database (db or dbx) may have not only certificates that contain a public key for RSA decryption, but also digests of signed images. In this test case, if database has an image's digest (EFI_CERT_SHA256_GUID) and if the value matches to a hash value calculated from image's binary, authentication should pass in case of db, and fail in case of dbx. Signed-off-by: AKASHI Takahiro Use defined time stamps for sign-efi-sig-list. Signed-off-by: Heinrich Schuchardt

test/py: efi_secboot: add a test for multiple signatures

2020-07-11T21:14:16Z

In this test case, an image is signed multiple times with different keys. If any of signatures contained is not verified, the whole authentication check should fail. Signed-off-by: AKASHI Takahiro Provide a defined time stamp for dbx_hash1.auth. Signed-off-by: Heinrich Schuchardt

test/py: efi_secboot: add a test against certificate revocation

2020-07-11T21:14:16Z

Revocation database (dbx) may have not only certificates, but also message digests of certificates with revocation time (EFI_CERT_X509_SHA256_GUILD). In this test case, if the database has such a digest and if the value matches to a certificate that created a given image's signature, authentication should fail. Signed-off-by: AKASHI Takahiro Set defined time stamp for dbx_hash.auth. Signed-off-by: Heinrich Schuchardt

test/py: efi_secboot: more fixes against pylint

2020-07-11T21:14:16Z

More fixes against pylint warnings that autopep8 didn't handle in the previous commit. Signed-off-by: AKASHI Takahiro

test/py: efi_secboot: apply autopep8

2020-07-11T21:14:16Z

Python's autopep8 can automatically correct some of warnings from pylint and rewrite the code in a pretty print format. So just do it. Suggested-by: Heinrich Schuchardt Signed-off-by: AKASHI Takahiro

test: correct time stamps for UEFI authentication

2020-07-03T16:00:27Z

A time authenticated variable cannot be overwritten with another value with the same time stamp. So we must ensure the correct sequence of time stamps when generating out test data. Using parameter -t for sign-efi-sig-list gives reproducible results and avoids sleep statements. Signed-off-by: Heinrich Schuchardt

test/py: fix test_efi_secboot/conftest.py

2020-04-30T08:25:06Z

If udisksctl is present test/py/tests/test_efi_secboot/conftest.py fails because the disk image is never mounted. Normal users can only mount fuse file systems. Unfortunately fusefat is still in an experimental state and seems not to work here correctly. So as we have to be root or use the sudo command anyway delete all coding referring to udisksctl. -- We should not use mount point /mnt as this directory or one of its sub-directories might already be in use as active mount points. Instead create a new directory in the build root as mount point. -- Remove debug print statements that have been commented out. print without parentheses is anyway invalid in Python 3. And pytest anyway filters out the output if there is no exception reported. Signed-off-by: Heinrich Schuchardt