From mboxrd@z Thu Jan 1 00:00:00 1970 From: AKASHI Takahiro Date: Mon, 10 May 2021 15:45:41 +0900 Subject: [PATCH v2 2/4] efi_loader: Kconfig: Add symbols for embedding the public key into the platform's dtb In-Reply-To: <20210412150526.29822-3-sughosh.ganu@linaro.org> References: <20210412150526.29822-1-sughosh.ganu@linaro.org> <20210412150526.29822-3-sughosh.ganu@linaro.org> Message-ID: <20210510064541.GA36677@laputa> List-Id: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: u-boot@lists.denx.de On Mon, Apr 12, 2021 at 08:35:24PM +0530, Sughosh Ganu wrote: > Add config options EFI_PKEY_DTB_EMBED and EFI_PKEY_FILE which are to > be used for embedding the public key to be used for capsule > authentication into the platform's device tree. > > The embedding of the public key would take place during the platform > build process. > > Signed-off-by: Sughosh Ganu > --- > > Changes since V1: > * Provide a default name for public key file, eficapsule.esl as > suggested by Heinrich. > * Remove the superfluous default n statement for EFI_PKEY_DTB_EMBED > > lib/efi_loader/Kconfig | 15 +++++++++++++++ > 1 file changed, 15 insertions(+) > > diff --git a/lib/efi_loader/Kconfig b/lib/efi_loader/Kconfig > index 79b488823a..089accaaaa 100644 > --- a/lib/efi_loader/Kconfig > +++ b/lib/efi_loader/Kconfig > @@ -179,6 +179,21 @@ config EFI_CAPSULE_AUTHENTICATE > Select this option if you want to enable capsule > authentication > > +config EFI_PKEY_DTB_EMBED > + bool "Embed the public key in the Device Tree" > + depends on EFI_CAPSULE_AUTHENTICATE > + help > + Select this option if the public key used for capsule > + authentication is to be embedded into the platform's > + device tree. > + > +config EFI_PKEY_FILE > + string "Public Key esl file to be embedded into the Device Tree" > + default "eficapsule.esl" > + help > + Specify the absolute path of the public key esl file that is While requiring the *absolute* path, the *default* value is not. -Takahiro Akashi > + to be embedded in the platform's device tree. > + > config EFI_CAPSULE_FIRMWARE_FIT > bool "FMP driver for FIT image" > depends on EFI_CAPSULE_FIRMWARE_MANAGEMENT > -- > 2.17.1 >