<feed xmlns='http://www.w3.org/2005/Atom'>
<title>delta/coreboot/vboot.git/utility/dev_make_keypair, branch main</title>
<subtitle>review.coreboot.org: vboot.git
</subtitle>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/coreboot/vboot.git/'/>
<entry>
<title>treewide: Fix copyrights and extra new lines at end of file</title>
<updated>2022-10-21T16:17:47+00:00</updated>
<author>
<name>Jakub Czapiga</name>
<email>jacz@semihalf.com</email>
</author>
<published>2022-10-18T14:35:03+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/coreboot/vboot.git/commit/?id=d0f7fdf670407af5ef6e08ee28019d44244af13a'/>
<id>d0f7fdf670407af5ef6e08ee28019d44244af13a</id>
<content type='text'>
BUG=none
BRANCH=none
TEST=make runtests

Signed-off-by: Jakub Czapiga &lt;jacz@semihalf.com&gt;
Change-Id: If93a65ba58c4973d4b344229c7ee26685395bbbf
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/3964274
Reviewed-by: Yu-Ping Wu &lt;yupingso@chromium.org&gt;
Commit-Queue: Jakub Czapiga &lt;czapiga@google.com&gt;
Tested-by: Jakub Czapiga &lt;czapiga@google.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
BUG=none
BRANCH=none
TEST=make runtests

Signed-off-by: Jakub Czapiga &lt;jacz@semihalf.com&gt;
Change-Id: If93a65ba58c4973d4b344229c7ee26685395bbbf
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/3964274
Reviewed-by: Yu-Ping Wu &lt;yupingso@chromium.org&gt;
Commit-Queue: Jakub Czapiga &lt;czapiga@google.com&gt;
Tested-by: Jakub Czapiga &lt;czapiga@google.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>futility: stop using the symlink names in utility scripts</title>
<updated>2014-09-12T03:39:40+00:00</updated>
<author>
<name>Bill Richardson</name>
<email>wfrichar@chromium.org</email>
</author>
<published>2014-09-05T19:52:27+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/coreboot/vboot.git/commit/?id=a1d9fe6eecf82540d31d34bba988e4838d295302'/>
<id>a1d9fe6eecf82540d31d34bba988e4838d295302</id>
<content type='text'>
We still create the symlinks (FOO -&gt; futility), but this
change invokes those built-in functions with "futility FOO ..."
instead of using the FOO symlink.

Note that the scripts/ directory is unchanged. That's a
separate CL, since we don't have tests for that.

BUG=chromium:231547
BRANCH=ToT
TEST=make runtests

In addition to running "make runtests", I temporarily
modified the Makefile to avoid creating the symlinks at all.
The tests still passed.

Change-Id: I96863259b9df02a3611f759a7509bf4090ae03e8
Signed-off-by: Bill Richardson &lt;wfrichar@chromium.org&gt;
Reviewed-on: https://chromium-review.googlesource.com/216717
Reviewed-by: Randall Spangler &lt;rspangler@chromium.org&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
We still create the symlinks (FOO -&gt; futility), but this
change invokes those built-in functions with "futility FOO ..."
instead of using the FOO symlink.

Note that the scripts/ directory is unchanged. That's a
separate CL, since we don't have tests for that.

BUG=chromium:231547
BRANCH=ToT
TEST=make runtests

In addition to running "make runtests", I temporarily
modified the Makefile to avoid creating the symlinks at all.
The tests still passed.

Change-Id: I96863259b9df02a3611f759a7509bf4090ae03e8
Signed-off-by: Bill Richardson &lt;wfrichar@chromium.org&gt;
Reviewed-on: https://chromium-review.googlesource.com/216717
Reviewed-by: Randall Spangler &lt;rspangler@chromium.org&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>Make dumpRSAPublicKey also accept a public key in PEM format</title>
<updated>2010-11-01T20:33:32+00:00</updated>
<author>
<name>Gaurav Shah</name>
<email>gauravsh@chromium.org</email>
</author>
<published>2010-11-01T20:33:32+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/coreboot/vboot.git/commit/?id=551037b10e427687b7115751c7d613d66459c427'/>
<id>551037b10e427687b7115751c7d613d66459c427</id>
<content type='text'>
This change makes dumpRSAPublicKey directly accept a public key in PEM format. This makes it possible to avoid the unnecessary step of generating a self-signed certificate to dump the public key in .keyb format.

The old style certificate input is still accepted.

Using certs (as done previously):
dumpRSAPublicKey -cert &lt;certfile&gt;

Directly using public keys:
dumpRSAPublicKey -pub &lt;pubfile&gt;

Change-Id: Ic35b59aff6613d145d7947212650da281f734b74

BUG=7576
TEST=manual

$ openssl genrsa -F4 -out test.pem 4096
$ openssl rsa -in test.pem -out test.pub
$ dumpRSAPublicKey -pub test.pub &gt;test.pub.keyb

Verify that this matches the output we get using the old style &lt;cert&gt; input.

$ openssl req -batch -new -x509 -key test.pem -out test.cert
$ dumpRSAPublicKey -cert test.cert &gt;test.cert.keyb
$ diff test.pub.keyb test.cert.keyb
$

Review URL: http://codereview.chromium.org/4215006
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This change makes dumpRSAPublicKey directly accept a public key in PEM format. This makes it possible to avoid the unnecessary step of generating a self-signed certificate to dump the public key in .keyb format.

The old style certificate input is still accepted.

Using certs (as done previously):
dumpRSAPublicKey -cert &lt;certfile&gt;

Directly using public keys:
dumpRSAPublicKey -pub &lt;pubfile&gt;

Change-Id: Ic35b59aff6613d145d7947212650da281f734b74

BUG=7576
TEST=manual

$ openssl genrsa -F4 -out test.pem 4096
$ openssl rsa -in test.pem -out test.pub
$ dumpRSAPublicKey -pub test.pub &gt;test.pub.keyb

Verify that this matches the output we get using the old style &lt;cert&gt; input.

$ openssl req -batch -new -x509 -key test.pem -out test.cert
$ dumpRSAPublicKey -cert test.cert &gt;test.cert.keyb
$ diff test.pub.keyb test.cert.keyb
$

Review URL: http://codereview.chromium.org/4215006
</pre>
</div>
</content>
</entry>
<entry>
<title>Enhance 'cgpt find' command to match keyblocks if desired.</title>
<updated>2010-08-17T23:58:46+00:00</updated>
<author>
<name>Bill Richardson</name>
<email>wfrichar@chromium.org</email>
</author>
<published>2010-08-17T23:58:46+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/coreboot/vboot.git/commit/?id=0697e3f0cfbcd5e68bd62e3390779dc6c34d4fa1'/>
<id>0697e3f0cfbcd5e68bd62e3390779dc6c34d4fa1</id>
<content type='text'>
This is part of the proposed developer-mode installation process, where we
want to detect that whoever is fiddling with the hard drive has already
fiddled with it before. Otherwise, we'll make them wait a bit to prevent
drive-by updates.

BUG=chromium-os:5306

Change-Id: Ifd6dce69180fa818fe14dbc3b1ac3485fb15d1c9

Review URL: http://codereview.chromium.org/3122023
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This is part of the proposed developer-mode installation process, where we
want to detect that whoever is fiddling with the hard drive has already
fiddled with it before. Otherwise, we'll make them wait a bit to prevent
drive-by updates.

BUG=chromium-os:5306

Change-Id: Ifd6dce69180fa818fe14dbc3b1ac3485fb15d1c9

Review URL: http://codereview.chromium.org/3122023
</pre>
</div>
</content>
</entry>
<entry>
<title>Changes to allow user-signed kernels to be generated.</title>
<updated>2010-08-10T00:50:14+00:00</updated>
<author>
<name>Bill Richardson</name>
<email>wfrichar@chromium.org</email>
</author>
<published>2010-08-10T00:50:14+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/coreboot/vboot.git/commit/?id=4f36ef336036e01b0bd2b395dd55e15db0267266'/>
<id>4f36ef336036e01b0bd2b395dd55e15db0267266</id>
<content type='text'>
Make vbutil_keyblock handle unsigned blocks. Also enable --unpack option and
add tests for it.

Modify vbutil_kernel to allow unsigned keyblocks, correct usage message,
and fix the --debug option which was somehow disabled.

Update load_kernel_test to accept /dev/null for the public key, to test
non-signed kernel keyblocks.

Review URL: http://codereview.chromium.org/3124004
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Make vbutil_keyblock handle unsigned blocks. Also enable --unpack option and
add tests for it.

Modify vbutil_kernel to allow unsigned keyblocks, correct usage message,
and fix the --debug option which was somehow disabled.

Update load_kernel_test to accept /dev/null for the public key, to test
non-signed kernel keyblocks.

Review URL: http://codereview.chromium.org/3124004
</pre>
</div>
</content>
</entry>
</feed>
