efi_loader: signature: rework for intermediate certificates support

[platform/kernel/u-boot.git] / lib / efi_loader / Kconfig

diff --git a/lib/efi_loader/Kconfig b/lib/efi_loader/Kconfig
index 6017ffe..bad1a29 100644 (file)
--- a/lib/efi_loader/Kconfig
+++ b/lib/efi_loader/Kconfig
@@ -205,6 +205,7 @@ config EFI_SECURE_BOOT
        select ASYMMETRIC_PUBLIC_KEY_SUBTYPE
        select X509_CERTIFICATE_PARSER
        select PKCS7_MESSAGE_PARSER
+       select PKCS7_VERIFY
        default n
        help
          Select this option to enable EFI secure boot support.