diff options
| author | Sughosh Ganu <sughosh.ganu@linaro.org> | 2023-08-22 23:10:05 +0530 |
|---|---|---|
| committer | Tom Rini <trini@konsulko.com> | 2023-08-29 13:38:55 -0400 |
| commit | c7d4dfcd142d624ed43ac590c6ef5eca24233e30 (patch) | |
| tree | 07bd5f7716afbe2082489f369f503cc9043fba2e /scripts | |
| parent | a958988b62eb9ad33c0f41b4482cfbba4aa71564 (diff) | |
| download | u-boot-c7d4dfcd142d624ed43ac590c6ef5eca24233e30.zip u-boot-c7d4dfcd142d624ed43ac590c6ef5eca24233e30.tar.gz u-boot-c7d4dfcd142d624ed43ac590c6ef5eca24233e30.tar.bz2 | |
scripts/Makefile.lib: Embed capsule public key in platform's dtb
The EFI capsule authentication logic in u-boot expects the public key
in the form of an EFI Signature List(ESL) to be provided as part of
the platform's dtb. Currently, the embedding of the ESL file into the
dtb needs to be done manually.
Add a target for generating a dtsi file which contains the signature
node with the ESL file included as a property under the signature
node. Include the dtsi file in the dtb. This brings the embedding of
the ESL in the dtb into the U-Boot build flow.
The path to the ESL file is specified through the
CONFIG_EFI_CAPSULE_ESL_FILE symbol.
Signed-off-by: Sughosh Ganu <sughosh.ganu@linaro.org>
Reviewed-by: Tom Rini <trini@konsulko.com>
Reviewed-by: Ilias Apalodimas <ilias.apalodimas@linaro.org>
Diffstat (limited to 'scripts')
| -rw-r--r-- | scripts/Makefile.lib | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/scripts/Makefile.lib b/scripts/Makefile.lib index 8c5e25c..8dc6ec8 100644 --- a/scripts/Makefile.lib +++ b/scripts/Makefile.lib @@ -334,6 +334,21 @@ cmd_dtc = mkdir -p $(dir ${dtc-tmp}) ; \ ; \ sed "s:$(pre-tmp):$(<):" $(depfile).pre.tmp $(depfile).dtc.tmp > $(depfile) +quiet_cmd_capsule_esl_gen = CAPSULE_ESL_GEN $@ +cmd_capsule_esl_gen = \ + $(shell sed "s:ESL_BIN_FILE:$(capsule_esl_path):" $(capsule_esl_input_file) > $@) + +$(obj)/.capsule_esl.dtsi: FORCE + $(call cmd_capsule_esl_gen) + +capsule_esl_input_file=$(srctree)/lib/efi_loader/capsule_esl.dtsi.in +capsule_esl_dtsi = .capsule_esl.dtsi +capsule_esl_path=$(abspath $(srctree)/$(subst $(quote),,$(CONFIG_EFI_CAPSULE_ESL_FILE))) + +ifdef CONFIG_EFI_CAPSULE_AUTHENTICATE +dtsi_include_list += $(capsule_esl_dtsi) +endif + dtsi_include_list_deps = $(addprefix $(obj)/,$(subst $(quote),,$(dtsi_include_list))) $(obj)/%.dtb: $(src)/%.dts $(DTC) $(dtsi_include_list_deps) FORCE |