blob: 151cf4633c127d69e883f430cacbdc786d1a4b17 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
|
#!/bin/bash -eux
# Copyright (c) 2014 The Chromium OS Authors. All rights reserved.
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
me=${0##*/}
TMP="$me.tmp"
# Work in scratch directory
cd "$OUTDIR"
DEVKEYS=${SRCDIR}/tests/devkeys
TESTKEYS=${SRCDIR}/tests/testkeys
echo 'Creating test kernel'
# Dummy kernel data
echo "hi there" > ${TMP}.config.txt
dd if=/dev/urandom bs=16384 count=1 of=${TMP}.bootloader.bin
dd if=/dev/urandom bs=32768 count=1 of=${TMP}.kernel.bin
# Pack kernel data key using original vboot utilities.
${FUTILITY} vbutil_key --pack ${TMP}.datakey.test \
--key ${TESTKEYS}/key_rsa2048.keyb --algorithm 4
# Keyblock with kernel data key is signed by kernel subkey
# Flags=5 means dev=0 rec=0
${FUTILITY} vbutil_keyblock --pack ${TMP}.keyblock.test \
--datapubkey ${TMP}.datakey.test \
--flags 5 \
--signprivate ${DEVKEYS}/kernel_subkey.vbprivk
# Kernel preamble is signed with the kernel data key
${FUTILITY} vbutil_kernel \
--pack ${TMP}.kernel.test \
--keyblock ${TMP}.keyblock.test \
--signprivate ${TESTKEYS}/key_rsa2048.sha256.vbprivk \
--version 1 \
--arch arm \
--vmlinuz ${TMP}.kernel.bin \
--bootloader ${TMP}.bootloader.bin \
--config ${TMP}.config.txt
echo 'Verifying test kernel'
# Verify the kernel
${FUTILITY} show ${TMP}.kernel.test \
--publickey ${DEVKEYS}/kernel_subkey.vbpubk \
| egrep 'Signature.*valid'
echo 'Test kernel blob looks good'
# Mess up the padding, make sure it fails.
rc=0
${FUTILITY} show ${TMP}.kernel.test \
--pad 0x100 \
--publickey ${DEVKEYS}/kernel_subkey.vbpubk \
|| rc=$?
[ $rc -ne 0 ]
[ $rc -lt 128 ]
echo 'Invalid args are invalid'
# Look waaaaaay off the end of the file, make sure it fails.
rc=0
${FUTILITY} show ${TMP}.kernel.test \
--pad 0x100000 \
--publickey ${DEVKEYS}/kernel_subkey.vbpubk \
|| rc=$?
[ $rc -ne 0 ]
[ $rc -lt 128 ]
echo 'Really invalid args are still invalid'
# cleanup
rm -rf ${TMP}*
exit 0
|
