Files
OpenCellular/scripts/keygeneration/uefi
Edward Hyunkoo Jee 112571461c keygeneration: clean up for UEFI key generation code
Follow up the code review comments on CL:995174, which was merged as
7dff0105d6
("keygeneration: add support for UEFI key generation")

BUG=b:62189155
TEST=With CL:*613656, set up a local signer and tested key generation
     and signing.
     Also, manually ran the scripts like the following.

     $ export PATH=$(readlink -f ../../../cros-signing/signer/signingtools-bin):$PATH
     $ cd scripts/keygeneration && ./create_new_keys.sh --uefi --output ./key
     $ chmod -R u+w key/uefi
     $ ./uefi/increment_kek_key.sh key/uefi
     $ ./uefi/increment_kek_key.sh key/uefi
     $ ./uefi/increment_db_child_key.sh key/uefi
     $ ./uefi/increment_db_child_key.sh key/uefi
     $ ./uefi/increment_db_child_key.sh key/uefi
     $ ./uefi/increment_db_key.sh key/uefi
     $ ./uefi/increment_db_child_key.sh key/uefi
     $ ./uefi/increment_db_key.sh key/uefi
     $ ./uefi/increment_db_child_key.sh key/uefi
     $ ./uefi/increment_db_child_key.sh key/uefi
     $ openssl x509 -noout -subject -in key/uefi/db/db.children/db_child.pem

BRANCH=none

Change-Id: I6c0cd47914a0a77970cd074fe087bba33c16cffc
Reviewed-on: https://chromium-review.googlesource.com/1024918
Commit-Ready: Edward Jee <edjee@google.com>
Tested-by: Edward Jee <edjee@google.com>
Reviewed-by: Mike Frysinger <vapier@chromium.org>
2018-04-25 23:00:07 -07:00
..