blob: f2610a39de5d234aa80ddb9b2fe998076e90e2bd (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
|
#!/bin/bash -eux
# Copyright (c) 2014 The Chromium OS Authors. All rights reserved.
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
me=${0##*/}
TMP="$me.tmp"
# Work in scratch directory
cd "$OUTDIR"
DEVKEYS="${SRCDIR}/tests/devkeys"
TESTKEYS="${SRCDIR}/tests/testkeys"
echo 'Creating test kernel'
# Dummy kernel data
echo "hi there" > "${TMP}.config.txt"
dd if=/dev/urandom bs=16384 count=1 of="${TMP}.bootloader.bin"
dd if=/dev/urandom bs=32768 count=1 of="${TMP}.kernel.bin"
# Pack kernel data key using original vboot utilities.
"${FUTILITY}" vbutil_key --pack "${TMP}.datakey.test" \
--key "${TESTKEYS}/key_rsa2048.keyb" --algorithm 4
# Keyblock with kernel data key is signed by kernel subkey
# Flags=5 means dev=0 rec=0
"${FUTILITY}" vbutil_keyblock --pack "${TMP}.keyblock.test" \
--datapubkey "${TMP}.datakey.test" \
--flags 5 \
--signprivate "${DEVKEYS}/kernel_subkey.vbprivk"
# Kernel preamble is signed with the kernel data key
"${FUTILITY}" vbutil_kernel \
--pack "${TMP}.kernel.test" \
--keyblock "${TMP}.keyblock.test" \
--signprivate "${TESTKEYS}/key_rsa2048.sha256.vbprivk" \
--version 1 \
--arch arm \
--vmlinuz "${TMP}.kernel.bin" \
--bootloader "${TMP}.bootloader.bin" \
--config "${TMP}.config.txt"
echo 'Verifying test kernel'
# Verify the kernel
"${FUTILITY}" show "${TMP}.kernel.test" \
--publickey "${DEVKEYS}/kernel_subkey.vbpubk" \
| grep -E 'Signature.*valid'
echo 'Test kernel blob looks good'
# Mess up the padding, make sure it fails.
rc=0
"${FUTILITY}" show "${TMP}.kernel.test" \
--pad 0x100 \
--publickey "${DEVKEYS}/kernel_subkey.vbpubk" \
|| rc=$?
[ $rc -ne 0 ]
[ $rc -lt 128 ]
echo 'Invalid args are invalid'
# Look waaaaaay off the end of the file, make sure it fails.
rc=0
"${FUTILITY}" show "${TMP}.kernel.test" \
--pad 0x100000 \
--publickey "${DEVKEYS}/kernel_subkey.vbpubk" \
|| rc=$?
[ $rc -ne 0 ]
[ $rc -lt 128 ]
echo 'Really invalid args are still invalid'
# cleanup
rm -rf "${TMP}"*
exit 0
|
