Hi Roman,
On Mon, 8 Nov 2021 at 08:29, Roman Kopytin <roman.kopy...@kaspersky.com> wrote:
>
<please add a commit message here>
> Signed-off-by: Roman Kopytin <roman.kopy...@kaspersky.com>
> Cc: Rasmus Villemoes <rasmus.villem...@prevas.dk>
> ---
> test/py/tests/test_vboot.py | 8 ++++++++
> 1 file changed, 8 insertions(+)
>
> diff --git a/test/py/tests/test_vboot.py b/test/py/tests/test_vboot.py
> index 6dff6779d1..cf7416b39a 100644
> --- a/test/py/tests/test_vboot.py
> +++ b/test/py/tests/test_vboot.py
> @@ -230,6 +230,13 @@ def test_vboot(u_boot_console, sha_algo, padding,
> sign_options, required,
> cons.log.action('%s: Check signed config on the host' % sha_algo)
>
> util.run_and_log(cons, [fit_check_sign, '-f', fit, '-k', dtb])
> +
> + # Create a fresh .dtb without the public keys
> + dtc('sandbox-u-boot.dts')
> + # Then add the dev key via the fdt_add_pubkey tool
> + util.run_and_log(cons, [fdt_add_pubkey, '-a', '%s,rsa2048' %
> sha_algo,
> + '-k', tmpdir, '-n', 'dev', '-r', 'conf',
> dtb])
> + util.run_and_log(cons, [fit_check_sign, '-f', fit, '-k', dtb])
Looks good!
>
> if full_test:
> # Make sure that U-Boot checks that the config is in the list of
> @@ -370,6 +377,7 @@ def test_vboot(u_boot_console, sha_algo, padding,
> sign_options, required,
> fit = '%stest.fit' % tmpdir
> mkimage = cons.config.build_dir + '/tools/mkimage'
> fit_check_sign = cons.config.build_dir + '/tools/fit_check_sign'
> + fdt_add_pubkey = cons.config.build_dir + '/tools/fdt_add_pubkey'
> dtc_args = '-I dts -O dtb -i %s' % tmpdir
> dtb = '%ssandbox-u-boot.dtb' % tmpdir
> sig_node = '/configurations/conf-1/signature'
> --
> 2.25.1
>
Regards,
Simon
