summaryrefslogtreecommitdiff
path: root/.azure-pipelines.yml
diff options
context:
space:
mode:
authorAKASHI Takahiro <takahiro.akashi@linaro.org>2022-02-09 19:10:35 +0900
committerHeinrich Schuchardt <heinrich.schuchardt@canonical.com>2022-02-11 20:07:55 +0100
commit16abff246b400bcb6f1ef85e501e5bbbd3c6aa53 (patch)
treee02618bc5297e6f6f86b05222019eedaebecfe22 /.azure-pipelines.yml
parent9af16cc8f1ad8144db6d70ea65a51e4ef1398397 (diff)
downloadu-boot-16abff246b400bcb6f1ef85e501e5bbbd3c6aa53.tar.gz
tools: mkeficapsule: add firmware image signing
With this enhancement, mkeficapsule will be able to sign a capsule file when it is created. A signature added will be used later in the verification at FMP's SetImage() call. To do that, we need specify additional command parameters: -monotonic-cout <count> : monotonic count -private-key <private key file> : private key file -certificate <certificate file> : certificate file Only when all of those parameters are given, a signature will be added to a capsule file. Users are expected to maintain and increment the monotonic count at every time of the update for each firmware image. Signed-off-by: AKASHI Takahiro <takahiro.akashi@linaro.org> Reviewed-by: Simon Glass <sjg@chromium.org> Acked-by: Ilias Apalodimas <ilias.apalodimas@linaro.org>
Diffstat (limited to '.azure-pipelines.yml')
-rw-r--r--.azure-pipelines.yml2
1 files changed, 1 insertions, 1 deletions
diff --git a/.azure-pipelines.yml b/.azure-pipelines.yml
index b532abc2c3..2c421da133 100644
--- a/.azure-pipelines.yml
+++ b/.azure-pipelines.yml
@@ -26,7 +26,7 @@ stages:
%CD:~0,2%\msys64\usr\bin\bash -lc "pacman --noconfirm -Su"
displayName: 'Update MSYS2'
- script: |
- %CD:~0,2%\msys64\usr\bin\bash -lc "pacman --noconfirm --needed -Sy make gcc bison flex diffutils openssl-devel"
+ %CD:~0,2%\msys64\usr\bin\bash -lc "pacman --noconfirm --needed -Sy make gcc bison flex diffutils openssl-devel libgnutls-devel"
displayName: 'Install Toolchain'
- script: |
echo make tools-only_defconfig tools-only NO_SDL=1 > build-tools.sh