Cc'ing Igor (suggested by Laszlo, for his QOM experience on UserCreatableClass).
On 6/20/19 2:21 PM, Philippe Mathieu-Daudé wrote: > Hi, > > This series add edk2_add_host_crypto_policy() and the Edk2Crypto object. > > The Edk2Crypto object is used to hold configuration values specific > to EDK2. > > So far only the 'https' policy is supported. > > A usercase example is the 'HTTPS Boof' feature of OVMF [*]. > > Usage example: > > $ qemu-system-x86_64 \ > --object edk2_crypto,id=https,\ > ciphers=/etc/crypto-policies/back-ends/openssl.config,\ > cacerts=/etc/pki/ca-trust/extracted/edk2/cacerts.bin > > (On Fedora these files are provided by the ca-certificates and > crypto-policies packages). > > [*]: https://github.com/tianocore/edk2/blob/master/OvmfPkg/README > > Since v4: > - Addressed Laszlo comments (see patch#1 description) > Since v3: > - Addressed Markus' comments (do not care about heap) > Since v2: > - Split of > Since v1: > - Addressed Michael and Laszlo comments. > > Please review, > > Phil. > > $ git backport-diff -u fw_cfg_edk2_crypto_policies-v3 > Key: > [####] : number of functional differences between upstream/downstream patch > The flags [FC] indicate (F)unctional and (C)ontextual differences, > respectively > > 001/3:[0164] [FC] 'hw/firmware: Add Edk2Crypto and > edk2_add_host_crypto_policy()' > 002/3:[----] [--] 'hw/i386: Use edk2_add_host_crypto_policy()' > 003/3:[----] [--] 'hw/arm/virt: Use edk2_add_host_crypto_policy()' > > v4: https://lists.gnu.org/archive/html/qemu-devel/2019-03/msg04300.html > v3: https://lists.gnu.org/archive/html/qemu-devel/2019-03/msg02965.html > v2: https://lists.gnu.org/archive/html/qemu-devel/2019-03/msg02522.html > v1: https://lists.gnu.org/archive/html/qemu-devel/2018-12/msg01598.html > > Philippe Mathieu-Daudé (3): > hw/firmware: Add Edk2Crypto and edk2_add_host_crypto_policy() > hw/i386: Use edk2_add_host_crypto_policy() > hw/arm/virt: Use edk2_add_host_crypto_policy() > > MAINTAINERS | 2 + > hw/Makefile.objs | 1 + > hw/arm/virt.c | 7 + > hw/firmware/Makefile.objs | 1 + > hw/firmware/uefi_edk2_crypto_policies.c | 209 ++++++++++++++++++++++++ > hw/i386/pc.c | 7 + > include/hw/firmware/uefi_edk2.h | 30 ++++ > 7 files changed, 257 insertions(+) > create mode 100644 hw/firmware/Makefile.objs > create mode 100644 hw/firmware/uefi_edk2_crypto_policies.c > create mode 100644 include/hw/firmware/uefi_edk2.h >
