test/py: efi_secboot: add a test against certificate revocation
authorAKASHI Takahiro <takahiro.akashi@linaro.org>
Wed, 8 Jul 2020 05:02:01 +0000 (14:02 +0900)
committerHeinrich Schuchardt <xypron.glpk@gmx.de>
Sat, 11 Jul 2020 21:14:16 +0000 (23:14 +0200)
commitc6361e73b5c21216fc49ed46721015283414d77e
tree442e2674fde16235fb15ec20c1d7234d788e36f4
parent48ead6097bb614698a53c898243c456e8d6737a3
test/py: efi_secboot: add a test against certificate revocation

Revocation database (dbx) may have not only certificates, but also
message digests of certificates with revocation time
(EFI_CERT_X509_SHA256_GUILD).

In this test case, if the database has such a digest and if the value
matches to a certificate that created a given image's signature,
authentication should fail.

Signed-off-by: AKASHI Takahiro <takahiro.akashi@linaro.org>
Set defined time stamp for dbx_hash.auth.
Signed-off-by: Heinrich Schuchardt <xypron.glpk@gmx.de>
test/py/tests/test_efi_secboot/conftest.py
test/py/tests/test_efi_secboot/test_signed.py