u-boot.git/test/py/tests/test_efi_secboot, branch v2022.01

test/py: Fix efidebug related tests

2021-04-24T04:53:40+00:00

commit cbea241e935e("efidebug: add multiple device path instances on Boot####")
slightly tweaked the efidebug syntax adding -b, -i and -s for the boot
image, initrd and optional data.
The pytests using this command were adapted as well. However I completely
missed the last "" argument, which at the time indicated the optional data
and needed conversion as well.  This patch is adding the missing -s flag
and the tests are back to normal.

Fixes: cbea241e935e("efidebug: add multiple device path instances on Boot####")
Signed-off-by: Ilias Apalodimas 
Reviwed-by: Heinrich Schuchardt

efidebug: add multiple device path instances on Boot####

2021-03-25T19:14:26+00:00

The UEFI spec allows a packed array of UEFI device paths in the
FilePathList[] of an EFI_LOAD_OPTION. The first file path must
describe the loaded image but the rest are OS specific.

Previous patches parse the device path and try to use the second
member of the array as an initrd. So let's modify efidebug slightly
and install the second file described in the command line as the
initrd device path.

Signed-off-by: Ilias Apalodimas

efi_loader: use ':' as separator for setenv -i

2020-08-24T14:37:53+00:00

setenv -e -i , can be used to set a UEFI variable
from memory.

For separating an address and a size we use ':' in most commands.
Let's do the same for setenv -e -i.

Signed-off-by: Heinrich Schuchardt

test/py: efi_secboot: modify 'multiple signatures' test case

2020-08-14T10:34:33+00:00

The test case 5 in test_signed (multiple signatures) must be modified
and aligned with the change introduced in the previous commit
("efi_loader: signature: correct a behavior against multiple signatures").

Signed-off-by: AKASHI Takahiro

test/py: efi_secboot: add test for intermediate certificates

2020-08-13T20:37:36+00:00

In this test case, an image may have a signature with additional
intermediate certificates. A chain of trust will be followed and all
the certificates in the middle of chain must be verified before loading.

Signed-off-by: AKASHI Takahiro

test/py: efi_secboot: small rework for adding a new test

2020-08-13T20:37:36+00:00

It won't be very useful to customize HELLO_PATH and EFI_SECBOOT_IMAGE_NAME
under the current code base. So just remove them.

Signed-off-by: AKASHI Takahiro

test/py: efi_secboot: fix additional pylint errors

2020-07-22T10:32:42+00:00

This is a fixup by autopep8 after the commit ("test/py: efi_secboot:
apply autopep8").

Signed-off-by: AKASHI Takahiro 
Signed-off-by: Heinrich Schuchardt

test/py: efi_secboot: remove unused function

2020-07-22T10:32:42+00:00

'tool_is_in_path' function is no longer used anywhere after Heinrich
has removed 'sudo' version of fixture setup.

Signed-off-by: AKASHI Takahiro 
Signed-off-by: Heinrich Schuchardt

test: use virt-make-fs to build image

2020-07-11T21:14:16+00:00

Avoid sudo for test/py/tests/test_efi_secboot by using virt-make-fs.

Signed-off-by: Heinrich Schuchardt

test/py: efi_secboot: add a test for verifying with digest of signed image

2020-07-11T21:14:16+00:00

Signature database (db or dbx) may have not only certificates that contain
a public key for RSA decryption, but also digests of signed images.

In this test case, if database has an image's digest (EFI_CERT_SHA256_GUID)
and if the value matches to a hash value calculated from image's binary,
authentication should pass in case of db, and fail in case of dbx.

Signed-off-by: AKASHI Takahiro 

Use defined time stamps for sign-efi-sig-list.
Signed-off-by: Heinrich Schuchardt