Mirrors/u-boot
2
0
Fork 0
mirror of https://github.com/AsahiLinux/u-boot synced 2024-09-24 08:22:14 +00:00
Code Issues Projects Releases Packages Wiki Activity
u-boot/lib/efi_loader
History
AKASHI Takahiro 1115edd846 efi_loader: signature: rework for intermediate certificates support 
In this commit, efi_signature_verify(with_sigdb) will be re-implemented
using pcks7_verify_one() in order to support certificates chain, where
the signer's certificate will be signed by an intermediate CA (certificate
authority) and the latter's certificate will also be signed by another CA
and so on.

What we need to do here is to search for certificates in a signature,
build up a chain of certificates and verify one by one. pkcs7_verify_one()
handles most of these steps except the last one.

pkcs7_verify_one() returns, if succeeded, the last certificate to verify,
which can be either a self-signed one or one that should be signed by one
of certificates in "db". Re-worked efi_signature_verify() will take care
of this step.

Signed-off-by: AKASHI Takahiro <takahiro.akashi@linaro.org>
2020-08-13 22:37:36 +02:00
..
.gitignore efi_loader: git ignore helloworld_efi.S 2020-01-07 18:08:20 +01:00
efi_acpi.c common: Drop log.h from common header 2020-05-18 21:19:18 -04:00
efi_bootmgr.c efi_loader: set load options in boot manager 2020-08-08 19:03:24 +02:00
efi_boottime.c efi_loader: document efi_save_gd(), efi_restore_gd() 2020-07-22 12:32:42 +02:00
efi_console.c efi_loader: comments EFI_SIMPLE_TEXT_OUTPUT_PROTOCOL 2020-06-05 04:04:41 +02:00
efi_device_path.c efi_loader: device path for SATA devices 2020-05-21 10:00:17 +02:00
efi_device_path_to_text.c efi_loader: device path for SATA devices 2020-05-21 10:00:17 +02:00
efi_device_path_utilities.c SPDX: Convert a few files that were missed before 2018-05-10 20:38:35 -04:00
efi_disk.c efi_loader: use logging for block device messages 2020-07-22 12:32:42 +02:00
efi_file.c efi_loader: loosen buffer parameter check in efi_file_read 2020-07-22 12:32:41 +02:00
efi_freestanding.c efi_loader: fix freestanding memmove() 2020-03-22 11:06:23 +01:00
efi_gop.c common: Drop log.h from common header 2020-05-18 21:19:18 -04:00
efi_hii.c efi_loader: ListPackageLists() return EFI_NOT_FOUND 2019-06-20 22:26:19 +00:00
efi_hii_config.c efi_loader: debug output for HII protocols 2019-02-13 09:40:06 +01:00
efi_image_loader.c efi_loader: signature: rework for intermediate certificates support 2020-08-13 22:37:36 +02:00
efi_load_initrd.c efi_loader: Implement FileLoad2 for initramfs loading 2020-02-28 19:37:14 +01:00
efi_memory.c efi_loader: use CONFIG_STACK_SIZE in the UEFI sub-system 2020-08-01 11:58:23 +02:00
efi_net.c common: Drop net.h from common header 2020-05-18 17:33:31 -04:00
efi_rng.c common: Drop log.h from common header 2020-05-18 21:19:18 -04:00
efi_root_node.c efi_rng_protocol: Install the efi_rng_protocol on the root node 2020-01-07 18:08:22 +01:00
efi_runtime.c efi_loader: don't use memmove() in efi_var_mem_del() 2020-07-22 12:32:41 +02:00
efi_setup.c efi_loader: OsIndicationsSupported, PlatformLangCodes 2020-07-11 23:14:16 +02:00
efi_signature.c efi_loader: signature: rework for intermediate certificates support 2020-08-13 22:37:36 +02:00
efi_smbios.c common: Drop log.h from common header 2020-05-18 21:19:18 -04:00
efi_unicode_collation.c efi_loader: function descriptions efi_unicode_collation.c 2020-04-16 08:10:01 +02:00
efi_var_common.c efi_loader: add copyright notice 2020-08-08 19:03:24 +02:00
efi_var_file.c efi_loader: Enable run-time variable support for tee based variables 2020-08-01 11:57:41 +02:00
efi_var_mem.c efi_loader: Enable run-time variable support for tee based variables 2020-08-01 11:57:41 +02:00
efi_var_seed.S efi_loader: pre-seed UEFI variables 2020-07-16 12:37:02 +02:00
efi_variable.c efi_loader: signature: rework for intermediate certificates support 2020-08-13 22:37:36 +02:00
efi_variable_tee.c efi_loader: Enable run-time variable support for tee based variables 2020-08-01 11:57:41 +02:00
efi_watchdog.c efi_loader: function descriptions efi_watchdog.c 2020-04-16 08:10:02 +02:00
helloworld.c efi_loader: consistent naming of protocol GUIDs 2019-04-23 00:37:27 +02:00
Kconfig efi_loader: signature: rework for intermediate certificates support 2020-08-13 22:37:36 +02:00
Makefile efi_loader: Enable run-time variable support for tee based variables 2020-08-01 11:57:41 +02:00