Tianocore/edk2.git/BaseTools/Source/Python/Pkcs7Sign/TestRoot.pub.pem, branch trunkEDK II (mirror)https://git.radix-linux.su/Tianocore/edk2.git/atom?h=trunk2024-06-04T03:43:08+00:00Renormalized end-of-lines from master@27b044605cd5f6b33a3d231576003850b3fe305b2024-06-04T03:43:08+00:00kxkx@radix.pro2024-06-04T03:43:08+00:00urn:sha1:7e2ccccace24636f29ddc210b94606abd4c7e42bBaseTools/Pkcs7Sign: Update the test certificates & Readme.md2017-04-12T05:15:24+00:00Long Qinqin.long@intel.com2017-04-11T07:36:54+00:00urn:sha1:f536d7c3ed3e86f45c6e9568c6c0eda1f9b24dc5
The old TestRoot certificate used for Pkcs7Sign is not compliant to
Root CA certificate requirement with incorrect basic constraints and
key usage setting.
When OpenSSL in CryptoPkg was updated from 1.0.2xx to the latest
1.1.0xx, the CA certificate checking was enforced for more extension
validations, which will raise the verification failure when stilling
using the old sample certificates.
This patch re-generated one set of test certificates used in
Pkcs7Sign demo, and updated the corresponding Readme.md to describe
how to set the options in openssl configuration file.
Cc: Jiewen Yao <jiewen.yao@intel.com>
Cc: Eric Dong <eric.dong@intel.com>
Contributed-under: TianoCore Contribution Agreement 1.0
Signed-off-by: Long Qin <qin.long@intel.com>
Reviewed-by: Jiewen Yao <jiewen.yao@intel.com>
BaseTools: Add the PKCS7 tool2016-08-19T07:33:25+00:00Yonghong Zhuyonghong.zhu@intel.com2016-08-15T09:12:12+00:00urn:sha1:cd1c96046968581cc87d306ca8b06cc97784554b
Provide the PKCS7 Tool to support the CertType - EFI_CERT_TYPE_PKCS7_GUID,
then user can use this tool to add EFI_FIRMWARE_IMAGE_AUTHENTICATION
for a binary.
Cc: Liming Gao <liming.gao@intel.com>
Contributed-under: TianoCore Contribution Agreement 1.0
Signed-off-by: Jiewen Yao <jiewen.yao@intel.com>
Reviewed-by: Liming Gao <liming.gao@intel.com>