Re: [PATCH 2/2] test_vboot.py: include test of fdt_add_pubkey tool

Hi Roman,

On Mon, 8 Nov 2021 at 08:29, Roman Kopytin Roman.Kopytin@kaspersky.com wrote:

<please add a commit message here>

Signed-off-by: Roman Kopytin Roman.Kopytin@kaspersky.com Cc: Rasmus Villemoes rasmus.villemoes@prevas.dk

---

test/py/tests/test_vboot.py | 8 ++++++++ 1 file changed, 8 insertions(+)

diff --git a/test/py/tests/test_vboot.py b/test/py/tests/test_vboot.py index 6dff6779d1..cf7416b39a 100644 --- a/test/py/tests/test_vboot.py +++ b/test/py/tests/test_vboot.py @@ -230,6 +230,13 @@ def test_vboot(u_boot_console, sha_algo, padding, sign_options, required, cons.log.action('%s: Check signed config on the host' % sha_algo)

     util.run_and_log(cons, [fit_check_sign, '-f', fit, '-k', dtb])

•    # Create a fresh .dtb without the public keys
  

•    dtc('sandbox-u-boot.dts')
  

•    # Then add the dev key via the fdt_add_pubkey tool
  

•    util.run_and_log(cons, [fdt_add_pubkey, '-a', '%s,rsa2048' % sha_algo,
  

•                            '-k', tmpdir, '-n', 'dev', '-r', 'conf', dtb])
  

•    util.run_and_log(cons, [fit_check_sign, '-f', fit, '-k', dtb])
  

Looks good!

     if full_test:
         # Make sure that U-Boot checks that the config is in the list of

@@ -370,6 +377,7 @@ def test_vboot(u_boot_console, sha_algo, padding, sign_options, required, fit = '%stest.fit' % tmpdir mkimage = cons.config.build_dir + '/tools/mkimage' fit_check_sign = cons.config.build_dir + '/tools/fit_check_sign'

• fdt_add_pubkey = cons.config.build_dir + '/tools/fdt_add_pubkey' dtc_args = '-I dts -O dtb -i %s' % tmpdir dtb = '%ssandbox-u-boot.dtb' % tmpdir sig_node = '/configurations/conf-1/signature'

-- 2.25.1

Regards, Simon