mirror of https://github.com/acidanthera/audk.git
BaseTools/Pkcs7Sign: Add PKCS7 test key include files
https://bugzilla.tianocore.org/show_bug.cgi?id=1073 Add PCD statement include files for the PKCS7 test key. * gEfiSecurityPkgTokenSpaceGuid.PcdPkcs7CertBuffer * gFmpDevicePkgTokenSpaceGuid.PcdFmpDevicePkcs7CertBufferXdr These include files can be used in !include statements in PCD sections of a platform DSC file to assign these PCDs to the test key certificate values. Cc: Yonghong Zhu <yonghong.zhu@intel.com> Cc: Liming Gao <liming.gao@intel.com> Contributed-under: TianoCore Contribution Agreement 1.1 Signed-off-by: Michael D Kinney <michael.d.kinney@intel.com> Reviewed-by: Yonghong Zhu <yonghong.zhu@intel.com>
This commit is contained in:
parent
dd4cae4d82
commit
526dd0245b
|
@ -116,3 +116,43 @@ Convert Key and Certificate for signing. Password is removed with -nodes flag fo
|
||||||
|
|
||||||
openssl smime -verify -inform DER -in test.bin.p7 -content test.bin -CAfile TestRoot.pub.pem -out test.org.bin
|
openssl smime -verify -inform DER -in test.bin.p7 -content test.bin -CAfile TestRoot.pub.pem -out test.org.bin
|
||||||
|
|
||||||
|
## Generate DSC PCD include files for Certificate
|
||||||
|
|
||||||
|
The `BinToPcd` utility can be used to convert the binary Certificate file to a
|
||||||
|
text file can be included from a DSC file to set a PCD to the contents of the
|
||||||
|
Certificate file.
|
||||||
|
|
||||||
|
The following 2 PCDs can be set to the PKCS7 Certificate value. The first one
|
||||||
|
supports a single certificate. The second one supports multiple certificate
|
||||||
|
values using the XDR format.
|
||||||
|
* `gEfiSecurityPkgTokenSpaceGuid.PcdPkcs7CertBuffer`
|
||||||
|
* `gFmpDevicePkgTokenSpaceGuid.PcdFmpDevicePkcs7CertBufferXdr`
|
||||||
|
|
||||||
|
Generate DSC PCD include files:
|
||||||
|
```
|
||||||
|
BinToPcd.py -i TestRoot.cer -p gEfiSecurityPkgTokenSpaceGuid.PcdPkcs7CertBuffer -o TestRoot.cer.gEfiSecurityPkgTokenSpaceGuid.PcdPkcs7CertBuffer.inc
|
||||||
|
BinToPcd.py -i TestRoot.cer -p gFmpDevicePkgTokenSpaceGuid.PcdFmpDevicePkcs7CertBufferXdr -x -o TestRoot.cer.gFmpDevicePkgTokenSpaceGuid.PcdFmpDevicePkcs7CertBufferXdr.inc
|
||||||
|
```
|
||||||
|
|
||||||
|
These files can be used in `!include` statements in DSC file PCD sections. For example:
|
||||||
|
|
||||||
|
* Platform scoped fixed at build PCD section
|
||||||
|
```
|
||||||
|
[PcdsFixedAtBuild]
|
||||||
|
!include BaseTools/Source/Python/Pkcs7Sign/TestRoot.cer.gEfiSecurityPkgTokenSpaceGuid.PcdPkcs7CertBuffer.inc
|
||||||
|
```
|
||||||
|
|
||||||
|
* Platform scoped patchable in module PCD section
|
||||||
|
```
|
||||||
|
[PcdsPatchableInModule]
|
||||||
|
!include BaseTools/Source/Python/Pkcs7Sign/TestRoot.cer.gFmpDevicePkgTokenSpaceGuid.PcdFmpDevicePkcs7CertBufferXdr.inc
|
||||||
|
```
|
||||||
|
|
||||||
|
* Module scoped fixed at build PCD section
|
||||||
|
```
|
||||||
|
[Components]
|
||||||
|
FmpDevicePkg/FmpDxe/FmpDxe.inf {
|
||||||
|
<PcdsFixedAtBuild>
|
||||||
|
!include BaseTools/Source/Python/Pkcs7Sign/TestRoot.cer.gFmpDevicePkgTokenSpaceGuid.PcdFmpDevicePkcs7CertBufferXdr.inc
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
Loading…
Reference in New Issue