summaryrefslogtreecommitdiff
path: root/scripts/keygeneration/create_new_keys.sh
diff options
context:
space:
mode:
Diffstat (limited to 'scripts/keygeneration/create_new_keys.sh')
-rwxr-xr-xscripts/keygeneration/create_new_keys.sh19
1 files changed, 19 insertions, 0 deletions
diff --git a/scripts/keygeneration/create_new_keys.sh b/scripts/keygeneration/create_new_keys.sh
index 2d7c8e31..9b2cf880 100755
--- a/scripts/keygeneration/create_new_keys.sh
+++ b/scripts/keygeneration/create_new_keys.sh
@@ -14,8 +14,10 @@ usage() {
Usage: ${PROG} [options]
Options:
+ --board <name> The board name (Optional. Used for UEFI keys)
--devkeyblock Also generate developer firmware keyblock and data key
--android Also generate android keys
+ --uefi Also generate UEFI keys
--4k Use 4k keys instead of 8k (enables options below)
--4k-root Use 4k key size for the root key
--4k-recovery Use 4k key size for the recovery key
@@ -35,9 +37,11 @@ EOF
main() {
set -e
+ local board=""
# Flag to indicate whether we should be generating a developer keyblock flag.
local dev_keyblock="false"
local android_keys="false"
+ local uefi_keys="false"
local root_key_algoid=${ROOT_KEY_ALGOID}
local recovery_key_algoid=${RECOVERY_KEY_ALGOID}
local recovery_kernel_algoid=${RECOVERY_KERNEL_ALGOID}
@@ -47,6 +51,11 @@ main() {
while [[ $# -gt 0 ]]; do
case $1 in
+ --board)
+ board="$2"
+ shift
+ ;;
+
--devkeyblock)
echo "Will also generate developer firmware keyblock and data key."
dev_keyblock="true"
@@ -57,6 +66,11 @@ main() {
android_keys="true"
;;
+ --uefi)
+ echo "Will also generate UEFI keys."
+ uefi_keys="true"
+ ;;
+
--4k)
root_key_algoid=${RSA4096_SHA512_ALGOID}
recovery_key_algoid=${RSA4096_SHA512_ALGOID}
@@ -168,6 +182,11 @@ main() {
"${SCRIPT_DIR}"/create_new_android_keys.sh android
fi
+ if [[ "${uefi_keys}" == "true" ]]; then
+ mkdir -p uefi
+ "${SCRIPT_DIR}"/uefi/create_new_uefi_keys.sh uefi "${board}"
+ fi
+
if [[ "${setperms}" == "true" ]]; then
find -type f -exec chmod 400 {} +
find -type d -exec chmod 500 {} +