diff options
| author | AKASHI Takahiro <[email protected]> | 2022-02-09 19:10:35 +0900 |
|---|---|---|
| committer | Heinrich Schuchardt <[email protected]> | 2022-02-11 20:07:55 +0100 |
| commit | 16abff246b400bcb6f1ef85e501e5bbbd3c6aa53 (patch) | |
| tree | e02618bc5297e6f6f86b05222019eedaebecfe22 /tools/Makefile | |
| parent | 9af16cc8f1ad8144db6d70ea65a51e4ef1398397 (diff) | |
tools: mkeficapsule: add firmware image signing
With this enhancement, mkeficapsule will be able to sign a capsule
file when it is created. A signature added will be used later
in the verification at FMP's SetImage() call.
To do that, we need specify additional command parameters:
-monotonic-cout <count> : monotonic count
-private-key <private key file> : private key file
-certificate <certificate file> : certificate file
Only when all of those parameters are given, a signature will be added
to a capsule file.
Users are expected to maintain and increment the monotonic count at
every time of the update for each firmware image.
Signed-off-by: AKASHI Takahiro <[email protected]>
Reviewed-by: Simon Glass <[email protected]>
Acked-by: Ilias Apalodimas <[email protected]>
Diffstat (limited to 'tools/Makefile')
| -rw-r--r-- | tools/Makefile | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/tools/Makefile b/tools/Makefile index 766c0674f4a..8da07d60a75 100644 --- a/tools/Makefile +++ b/tools/Makefile @@ -238,6 +238,7 @@ hostprogs-$(CONFIG_MIPS) += mips-relocs hostprogs-$(CONFIG_ASN1_COMPILER) += asn1_compiler HOSTCFLAGS_asn1_compiler.o = -idirafter $(srctree)/include +HOSTLDLIBS_mkeficapsule += -lgnutls hostprogs-$(CONFIG_TOOLS_MKEFICAPSULE) += mkeficapsule # We build some files with extra pedantic flags to try to minimize things |