Re: [PATCH v2 2/4] efi_loader: Kconfig: Add symbols for embedding the public key into the platform's dtb

On Mon, Apr 12, 2021 at 08:35:24PM +0530, Sughosh Ganu wrote:

Add config options EFI_PKEY_DTB_EMBED and EFI_PKEY_FILE which are to be used for embedding the public key to be used for capsule authentication into the platform's device tree.

The embedding of the public key would take place during the platform build process.

Signed-off-by: Sughosh Ganu sughosh.ganu@linaro.org

Changes since V1:

• Provide a default name for public key file, eficapsule.esl as suggested by Heinrich.
• Remove the superfluous default n statement for EFI_PKEY_DTB_EMBED

lib/efi_loader/Kconfig | 15 +++++++++++++++ 1 file changed, 15 insertions(+)

diff --git a/lib/efi_loader/Kconfig b/lib/efi_loader/Kconfig index 79b488823a..089accaaaa 100644 --- a/lib/efi_loader/Kconfig +++ b/lib/efi_loader/Kconfig @@ -179,6 +179,21 @@ config EFI_CAPSULE_AUTHENTICATE Select this option if you want to enable capsule authentication

+config EFI_PKEY_DTB_EMBED

• bool "Embed the public key in the Device Tree"
• depends on EFI_CAPSULE_AUTHENTICATE
• help

•  Select this option if the public key used for capsule
  

•  authentication is to be embedded into the platform's
  

•  device tree.
  

+config EFI_PKEY_FILE

• string "Public Key esl file to be embedded into the Device Tree"
• default "eficapsule.esl"
• help

•  Specify the absolute path of the public key esl file that is
  

While requiring the *absolute* path, the *default* value is not.

-Takahiro Akashi

•  to be embedded in the platform's device tree.
  

config EFI_CAPSULE_FIRMWARE_FIT bool "FMP driver for FIT image" depends on EFI_CAPSULE_FIRMWARE_MANAGEMENT -- 2.17.1