u-boot.git/test/py, branch v2022.04-rc2

Merge tag 'efi-2022-04-rc2-4' of https://source.denx.de/u-boot/custodians/u-boot-efi

2022-02-11T20:11:52Z

Pull request for efi-2022-04-rc2-4 Documentation: * mkeficapsule man-page UEFI changes: * add support for signing images to mkeficapsule * add support for user define capsule GUID * adjust unit tests for capsules * fix UEFI image signature validation in case of multiple signatures

test/py: efi_secboot: adjust secure boot tests to code changes

2022-02-11T19:07:55Z

The previous patch is changing U-Boot's behavior wrt certificate based binary authentication. Specifically an image who's digest of a certificate is found in dbx is now rejected. Fix the test accordingly and add another one testing signatures in reverse order Signed-off-by: Ilias Apalodimas

test/py: efi_capsule: check the results in case of CAPSULE_AUTHENTICATE

2022-02-11T19:07:55Z

Before the capsule authentication is supported, this test script works correctly, but with the feature enabled, most tests will fail due to unsigned capsules. So check the results depending on CAPSULE_AUTHENTICATE or not. Signed-off-by: AKASHI Takahiro Reviewed-by: Simon Glass

test/py: efi_capsule: add a test for "--guid" option

2022-02-11T19:07:55Z

This test scenario tests a new feature of mkeficapsule, "--guid" option, which allows us to specify FMP driver's guid explicitly at the command line. Signed-off-by: AKASHI Takahiro

test/py: efi_capsule: align with the syntax change of mkeficapsule

2022-02-11T19:07:55Z

Since the syntax of mkeficapsule was changed in the previous commit, we need to modify command line arguments in a pytest script. Signed-off-by: AKASHI Takahiro Reviewed-by: Simon Glass

test/py: efi_capsule: add image authentication test

2022-02-11T19:07:55Z

Add a couple of test cases against capsule image authentication for capsule-on-disk, where only a signed capsule file with the verified signature will be applied to the system. Due to the difficulty of embedding a public key (esl file) in U-Boot binary during pytest setup time, all the keys/certificates are pre-created. Signed-off-by: AKASHI Takahiro Reviewed-by: Simon Glass Acked-by: Ilias Apalodimas

test/py: Add test case for mkimage -o argument

2022-02-11T15:52:24Z

Stress the '-o algo_name' argument of mkimage by expanding the vboot test. Signed-off-by: Jan Kiszka Reviewed-by: Simon Glass [trini: Update scripts/pylint.base]

rsa: adds rsa3072 algorithm

2022-01-28T22:58:41Z

Add to support rsa 3072 bits algorithm in tools for image sign at host side and adds rsa 3072 bits verification in the image binary. Add test case in vboot for sha384 with rsa3072 algorithm testing. Signed-off-by: Jamin Lin Reviewed-by: Simon Glass

test: fix pylint warnings in test_env.py

2022-01-24T22:36:29Z

* assert does not need parentheses * add module docstring * fix misspelled constant True * limit lines to 100 characters Signed-off-by: Heinrich Schuchardt

test: test_lsblk: Mark as sandbox specific

2022-01-14T17:26:42Z

This test checks for output specific to the sandbox blk device "sandbox_host_blk", mark it as sandbox specific. Signed-off-by: Patrick Delaunay