test/py: efi_secboot: add a test for verifying with digest of signed image
authorAKASHI Takahiro <takahiro.akashi@linaro.org>
Wed, 8 Jul 2020 05:02:03 +0000 (14:02 +0900)
committerHeinrich Schuchardt <xypron.glpk@gmx.de>
Sat, 11 Jul 2020 21:14:16 +0000 (23:14 +0200)
commit7fdc02b3d7d2085231f44d44c0556f4a592c8daf
tree25dab007a44c0c0b361ba9e6f731facb850d031f
parent0c7772d40f7994b1ff75ad9acd220101241c1feb
test/py: efi_secboot: add a test for verifying with digest of signed image

Signature database (db or dbx) may have not only certificates that contain
a public key for RSA decryption, but also digests of signed images.

In this test case, if database has an image's digest (EFI_CERT_SHA256_GUID)
and if the value matches to a hash value calculated from image's binary,
authentication should pass in case of db, and fail in case of dbx.

Signed-off-by: AKASHI Takahiro <takahiro.akashi@linaro.org>
Use defined time stamps for sign-efi-sig-list.
Signed-off-by: Heinrich Schuchardt <xypron.glpk@gmx.de>
test/py/tests/test_efi_secboot/conftest.py
test/py/tests/test_efi_secboot/test_signed.py