u-boot.git/test/py/tests/test_efi_secboot/conftest.py, branch v2023.01

test/py: efi_secboot: Remove unnecessary cert-to-efi-hash-list option

2022-11-06T09:50:04Z

'cert-to-efi-hash-list -t 0' does not work as expected, it produces indeterminate timestamp. $ cert-to-efi-hash-list -t 0 -s 256 db.crt dbx_hash.crl TimeOfRevocation is 0-113-0 00:00:255 If we need the CRL revoked for all the time, just don't specify '-t' option. $ cert-to-efi-hash-list -s 256 db.crt dbx_hash.crl TimeOfRevocation is 0-0-0 00:00:00 Signed-off-by: Masahisa Kojima Acked-by: Ilias Apalodimas

test: fix some pylint errors in test_efi_secboot

2022-10-06T20:54:57Z

* Remove unused import * Provide module docstring Signed-off-by: Heinrich Schuchardt Acked-by: Ilias Apalodimas

test/py: efi_secboot: add a test for a forged signed image

2022-07-05T12:37:16Z

In this test case, a image binary, helloworld.efi.signed, is willfully modified to print a corrupted message while the signature itself is unchanged. This binary must be rejected under secure boot mode. Signed-off-by: AKASHI Takahiro

test/py: Add more test cases for rejecting an EFI image

2022-05-07T21:17:26Z

The previous patch adds support for rejecting images when the sha384/512 of an x.509 certificate is present in dbx. Update the sandbox selftests Signed-off-by: Ilias Apalodimas

test/py: efi_secboot: modify 'multiple signatures' test case

2020-08-14T10:34:33Z

The test case 5 in test_signed (multiple signatures) must be modified and aligned with the change introduced in the previous commit ("efi_loader: signature: correct a behavior against multiple signatures"). Signed-off-by: AKASHI Takahiro

test/py: efi_secboot: add test for intermediate certificates

2020-08-13T20:37:36Z

In this test case, an image may have a signature with additional intermediate certificates. A chain of trust will be followed and all the certificates in the middle of chain must be verified before loading. Signed-off-by: AKASHI Takahiro

test/py: efi_secboot: small rework for adding a new test

2020-08-13T20:37:36Z

It won't be very useful to customize HELLO_PATH and EFI_SECBOOT_IMAGE_NAME under the current code base. So just remove them. Signed-off-by: AKASHI Takahiro

test/py: efi_secboot: fix additional pylint errors

2020-07-22T10:32:42Z

This is a fixup by autopep8 after the commit ("test/py: efi_secboot: apply autopep8"). Signed-off-by: AKASHI Takahiro Signed-off-by: Heinrich Schuchardt

test/py: efi_secboot: remove unused function

2020-07-22T10:32:42Z

'tool_is_in_path' function is no longer used anywhere after Heinrich has removed 'sudo' version of fixture setup. Signed-off-by: AKASHI Takahiro Signed-off-by: Heinrich Schuchardt

test: use virt-make-fs to build image

2020-07-11T21:14:16Z

Avoid sudo for test/py/tests/test_efi_secboot by using virt-make-fs. Signed-off-by: Heinrich Schuchardt