From 16abff246b400bcb6f1ef85e501e5bbbd3c6aa53 Mon Sep 17 00:00:00 2001 From: AKASHI Takahiro Date: Wed, 9 Feb 2022 19:10:35 +0900 Subject: tools: mkeficapsule: add firmware image signing With this enhancement, mkeficapsule will be able to sign a capsule file when it is created. A signature added will be used later in the verification at FMP's SetImage() call. To do that, we need specify additional command parameters: -monotonic-cout : monotonic count -private-key : private key file -certificate : certificate file Only when all of those parameters are given, a signature will be added to a capsule file. Users are expected to maintain and increment the monotonic count at every time of the update for each firmware image. Signed-off-by: AKASHI Takahiro Reviewed-by: Simon Glass Acked-by: Ilias Apalodimas --- .azure-pipelines.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to '.azure-pipelines.yml') diff --git a/.azure-pipelines.yml b/.azure-pipelines.yml index b532abc..2c421da 100644 --- a/.azure-pipelines.yml +++ b/.azure-pipelines.yml @@ -26,7 +26,7 @@ stages: %CD:~0,2%\msys64\usr\bin\bash -lc "pacman --noconfirm -Su" displayName: 'Update MSYS2' - script: | - %CD:~0,2%\msys64\usr\bin\bash -lc "pacman --noconfirm --needed -Sy make gcc bison flex diffutils openssl-devel" + %CD:~0,2%\msys64\usr\bin\bash -lc "pacman --noconfirm --needed -Sy make gcc bison flex diffutils openssl-devel libgnutls-devel" displayName: 'Install Toolchain' - script: | echo make tools-only_defconfig tools-only NO_SDL=1 > build-tools.sh -- cgit v1.1