{"id":2197212,"url":"http://patchwork.ozlabs.org/api/1.0/patches/2197212/?format=json","project":{"id":18,"url":"http://patchwork.ozlabs.org/api/1.0/projects/18/?format=json","name":"U-Boot","link_name":"uboot","list_id":"u-boot.lists.denx.de","list_email":"u-boot@lists.denx.de","web_url":null,"scm_url":null,"webscm_url":null},"msgid":"<20260217115333.503359-6-Wojciech.Dubowik@mt.com>","date":"2026-02-17T11:53:31","name":"[v6,5/6] binman: DTS: Add dump-signature option for capsules","commit_ref":null,"pull_url":null,"state":"superseded","archived":false,"hash":"a376eac7ca5dd255382b512d0de94bf211d1270c","submitter":{"id":90988,"url":"http://patchwork.ozlabs.org/api/1.0/people/90988/?format=json","name":"Wojciech Dubowik","email":"Wojciech.Dubowik@mt.com"},"delegate":{"id":3184,"url":"http://patchwork.ozlabs.org/api/1.0/users/3184/?format=json","username":"sjg","first_name":"Simon","last_name":"Glass","email":"sjg@chromium.org"},"mbox":"http://patchwork.ozlabs.org/project/uboot/patch/20260217115333.503359-6-Wojciech.Dubowik@mt.com/mbox/","series":[{"id":492416,"url":"http://patchwork.ozlabs.org/api/1.0/series/492416/?format=json","date":"2026-02-17T11:53:26","name":"UEFI Capsule - PKCS11 Support","version":6,"mbox":"http://patchwork.ozlabs.org/series/492416/mbox/"}],"check":"pending","checks":"http://patchwork.ozlabs.org/api/patches/2197212/checks/","tags":{},"headers":{"Return-Path":"","X-Original-To":"incoming@patchwork.ozlabs.org","Delivered-To":"patchwork-incoming@legolas.ozlabs.org","Authentication-Results":["legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=mt.com header.i=@mt.com header.a=rsa-sha256\n header.s=selector2 header.b=JSolXJS3;\n\tdkim-atps=neutral","legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=lists.denx.de\n (client-ip=85.214.62.61; helo=phobos.denx.de;\n envelope-from=u-boot-bounces@lists.denx.de; receiver=patchwork.ozlabs.org)","phobos.denx.de;\n dmarc=pass (p=reject dis=none) header.from=mt.com","phobos.denx.de;\n spf=pass smtp.mailfrom=u-boot-bounces@lists.denx.de","phobos.denx.de;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=mt.com header.i=@mt.com header.b=\"JSolXJS3\";\n\tdkim-atps=neutral","phobos.denx.de;\n dmarc=pass (p=reject dis=none) header.from=mt.com","phobos.denx.de;\n spf=fail smtp.mailfrom=Wojciech.Dubowik@mt.com","dkim=none (message not signed)\n header.d=none;dmarc=none action=none header.from=mt.com;"],"Received":["from phobos.denx.de (phobos.denx.de [85.214.62.61])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4fFdNT3fzFz1xpl\n\tfor ; Tue, 17 Feb 2026 22:54:33 +1100 (AEDT)","from h2850616.stratoserver.net (localhost [IPv6:::1])\n\tby phobos.denx.de (Postfix) with ESMTP id 76D3583E36;\n\tTue, 17 Feb 2026 12:53:48 +0100 (CET)","by phobos.denx.de (Postfix, from userid 109)\n id A9F0283CD3; Tue, 17 Feb 2026 12:53:45 +0100 (CET)","from GVXPR05CU001.outbound.protection.outlook.com\n (mail-swedencentralazlp170130007.outbound.protection.outlook.com\n [IPv6:2a01:111:f403:c202::7])\n (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits))\n (No client certificate requested)\n by phobos.denx.de (Postfix) with ESMTPS id 90C9183AA9\n for ; Tue, 17 Feb 2026 12:53:43 +0100 (CET)","from DB9PR03MB7180.eurprd03.prod.outlook.com (2603:10a6:10:22d::13)\n by DBBPR03MB6761.eurprd03.prod.outlook.com (2603:10a6:10:1f4::8) with\n Microsoft SMTP Server (version=TLS1_2,\n cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9611.16; Tue, 17 Feb\n 2026 11:53:42 +0000","from DB9PR03MB7180.eurprd03.prod.outlook.com\n ([fe80::6fd2:12a9:4423:8ddc]) by DB9PR03MB7180.eurprd03.prod.outlook.com\n ([fe80::6fd2:12a9:4423:8ddc%6]) with mapi id 15.20.9611.012; Tue, 17 Feb 2026\n 11:53:42 +0000"],"X-Spam-Checker-Version":"SpamAssassin 3.4.2 (2018-09-13) on phobos.denx.de","X-Spam-Level":"","X-Spam-Status":"No, score=-2.1 required=5.0 tests=BAYES_00,DKIM_SIGNED,\n DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_BLOCKED,\n SPF_HELO_NONE,SPF_PASS autolearn=ham autolearn_force=no version=3.4.2","ARC-Seal":"i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;\n b=YRU3mKBWObYt65eUpGSmCEK+eTQ6/HxVftSuz7IGt7paAJbbCBJQYZt5Y+CICAswr5wpIV0F19P6ANMoeDL/OeRPhOvMy33Mu0ZvDFwgi2p4db1n7yy055yXN0bueJA+UCa+6RoNyKlo275fQGn6eRqqPcXfVaUqAzYwhb8Nj6cQgVk3lMF9rRElEbLxcHX7eeha7CpPJKIje5OIBWRhDQQqMTH5QW8BNsy0CByh4nzBMqSYK8S3Sj41DCe0DrEqfmaLbM+EjJhMGNuXCFHNagjfHKxMKGeyLgypmQ4rzjX3B1jTBxwlM5Bze/Alqd3urp0Ek0pUU9ZtANra2M5aZQ==","ARC-Message-Signature":"i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;\n s=arcselector10001;\n h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;\n bh=KvcDsHHKQBvGPhdBF15520xnz8aqRi4H5vfU0eJx9XE=;\n b=apmUaNpZ6vWHu19thDJlgojb0dkaI718wg4jztlgeIjejKag6UsBUQbCiYxqh5RS7AypxFmi+usksBVcU8fUIvKMdfrZYiI8vc57cIpBXuEtc20uG6ZfUQJX7g3qGmrKy3u7FPg9Et+cb4DcvqxXfoRjvCtL775m5IgDatCk2qeYB8qphPJRRJ+BpvyHHHFZBBer89islJ9SSFipLWyWX8Vtcp037C7O5cJ06Ow2FOyeEibsofNoo+2FM94WDX7vfrg9DnTM4m8GzEOQz1/bEzzmx3Ko4+wVcnqs/b4NlBeQqduuhVq5CbbQ6cCoBl3IdDS8EUy6Q/0c/uNHCohqOg==","ARC-Authentication-Results":"i=1; mx.microsoft.com 1; spf=pass\n smtp.mailfrom=mt.com; dmarc=pass action=none header.from=mt.com; dkim=pass\n header.d=mt.com; arc=none","DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed; d=mt.com; s=selector2;\n h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;\n bh=KvcDsHHKQBvGPhdBF15520xnz8aqRi4H5vfU0eJx9XE=;\n b=JSolXJS3NnGaLxmy527VVN/08kuu8f7yJKRXs5bg8PdLaagzdj9N6FD9aLmz7GUXI5wOenscV+6njxpwL1QdBt3BpYR5sYZoPCvI1s+KxKXzVHy7kCkH4gTNdlS2HrQomR5isQI/UTJYAmdxglTc3fEsYC542wILHTkbr2aFVOnsQViSSMv9lsPAXz6uPcjOJybuycobCuNBpG6hCw+TTVwCp9z8HNQxHHu8STr0xNOKnFbiMvobY27xUS5UcnzI1UGoCLxQO/Jk7Wb8uxUvAeEq3Fb1HqRhDwPmLE9cozCnPNzNOe+EsPH9mlJH9Aud1JFpAzFJ6OJYghgC8AYk8w==","From":"Wojciech Dubowik ","To":"u-boot@lists.denx.de","Cc":"Wojciech Dubowik , ilias.apalodimas@linaro.org,\n trini@konsulko.com, simon.glass@canonical.com, quentin.schulz@cherry.de","Subject":"[PATCH v6 5/6] binman: DTS: Add dump-signature option for capsules","Date":"Tue, 17 Feb 2026 12:53:31 +0100","Message-ID":"<20260217115333.503359-6-Wojciech.Dubowik@mt.com>","X-Mailer":"git-send-email 2.47.3","In-Reply-To":"<20260217115333.503359-1-Wojciech.Dubowik@mt.com>","References":"<20260217115333.503359-1-Wojciech.Dubowik@mt.com>","Content-Transfer-Encoding":"8bit","Content-Type":"text/plain","X-ClientProxiedBy":"ZR0P278CA0157.CHEP278.PROD.OUTLOOK.COM\n (2603:10a6:910:41::22) To DB9PR03MB7180.eurprd03.prod.outlook.com\n (2603:10a6:10:22d::13)","MIME-Version":"1.0","X-MS-PublicTrafficType":"Email","X-MS-TrafficTypeDiagnostic":"DB9PR03MB7180:EE_|DBBPR03MB6761:EE_","X-MS-Office365-Filtering-Correlation-Id":"5801d787-f18b-49e9-cf11-08de6e1b3250","X-MS-Exchange-SenderADCheck":"1","X-MS-Exchange-AntiSpam-Relay":"0","X-Microsoft-Antispam":"BCL:0;\n ARA:13230040|366016|376014|52116014|1800799024|19092799006|38350700014;","X-Microsoft-Antispam-Message-Info":"\n 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","X-Forefront-Antispam-Report":"CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:;\n IPV:NLI; SFV:NSPM; H:DB9PR03MB7180.eurprd03.prod.outlook.com; PTR:; CAT:NONE;\n SFS:(13230040)(366016)(376014)(52116014)(1800799024)(19092799006)(38350700014);\n DIR:OUT; SFP:1101;","X-MS-Exchange-AntiSpam-MessageData-ChunkCount":"1","X-MS-Exchange-AntiSpam-MessageData-0":"\n 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","X-OriginatorOrg":"mt.com","X-MS-Exchange-CrossTenant-Network-Message-Id":"\n 5801d787-f18b-49e9-cf11-08de6e1b3250","X-MS-Exchange-CrossTenant-AuthSource":"DB9PR03MB7180.eurprd03.prod.outlook.com","X-MS-Exchange-CrossTenant-AuthAs":"Internal","X-MS-Exchange-CrossTenant-OriginalArrivalTime":"17 Feb 2026 11:53:42.1291 (UTC)","X-MS-Exchange-CrossTenant-FromEntityHeader":"Hosted","X-MS-Exchange-CrossTenant-Id":"fb4c0aee-6cd2-482f-a1a5-717e7c02496b","X-MS-Exchange-CrossTenant-MailboxType":"HOSTED","X-MS-Exchange-CrossTenant-UserPrincipalName":"\n J4g/0hJmL34UsrSGgOurSZavMiVgkK8kpGm8Bu/ayGl/taHRAM21QSd2GA3hC4kEmOUJgjxkMQNAzZSNW+LNBQ==","X-MS-Exchange-Transport-CrossTenantHeadersStamped":"DBBPR03MB6761","X-BeenThere":"u-boot@lists.denx.de","X-Mailman-Version":"2.1.39","Precedence":"list","List-Id":"U-Boot discussion ","List-Unsubscribe":",\n ","List-Archive":"","List-Post":"","List-Help":"","List-Subscribe":",\n ","Errors-To":"u-boot-bounces@lists.denx.de","Sender":"\"U-Boot\" ","X-Virus-Scanned":"clamav-milter 0.103.8 at phobos.denx.de","X-Virus-Status":"Clean"},"content":"Mkeficapsule can dump signature for signed capsules. It can\nbe used in test to validate signature i.e. with openssl.\nAdd an entry for device tree node.\n\nSigned-off-by: Wojciech Dubowik \n---\n tools/binman/entries.rst | 4 ++++\n tools/binman/etype/efi_capsule.py | 9 ++++++++-\n 2 files changed, 12 insertions(+), 1 deletion(-)","diff":"diff --git a/tools/binman/entries.rst b/tools/binman/entries.rst\nindex a81fcbd3891f..91f855f6d7a3 100644\n--- a/tools/binman/entries.rst\n+++ b/tools/binman/entries.rst\n@@ -552,6 +552,10 @@ Properties / Entry arguments:\n - public-key-cert: Path to PEM formatted .crt public key certificate\n file. Mandatory property for generating signed capsules.\n - oem-flags - OEM flags to be passed through capsule header.\n+ - dump-signature: Optional boolean (default: false). Instruct\n+ mkeficapsule to write signature data to a separate file. The\n+ filename will be .p7. It might be used to verify\n+ capsule authentication with external tools.\n \n Since this is a subclass of Entry_section, all properties of the parent\n class also apply here. Except for the properties stated as mandatory, the\ndiff --git a/tools/binman/etype/efi_capsule.py b/tools/binman/etype/efi_capsule.py\nindex 3b30c12ea514..022d57ee5519 100644\n--- a/tools/binman/etype/efi_capsule.py\n+++ b/tools/binman/etype/efi_capsule.py\n@@ -53,6 +53,10 @@ class Entry_efi_capsule(Entry_section):\n - public-key-cert: Path to PEM formatted .crt public key certificate\n file. Mandatory property for generating signed capsules.\n - oem-flags - OEM flags to be passed through capsule header.\n+ - dump-signature: Optional boolean (default: false). Instruct\n+ mkeficapsule to write signature data to a separate file. The\n+ filename will be .p7. It might be used to verify\n+ capsule authentication with external tools.\n \n Since this is a subclass of Entry_section, all properties of the parent\n class also apply here. Except for the properties stated as mandatory, the\n@@ -101,6 +105,7 @@ class Entry_efi_capsule(Entry_section):\n self.private_key = ''\n self.public_key_cert = ''\n self.auth = 0\n+ self.dump_signature = False\n \n def ReadNode(self):\n super().ReadNode()\n@@ -111,6 +116,7 @@ class Entry_efi_capsule(Entry_section):\n self.hardware_instance = fdt_util.GetInt(self._node, 'hardware-instance')\n self.monotonic_count = fdt_util.GetInt(self._node, 'monotonic-count')\n self.oem_flags = fdt_util.GetInt(self._node, 'oem-flags')\n+ self.dump_signature = fdt_util.GetBool(self._node, 'dump-signature')\n \n self.private_key = fdt_util.GetString(self._node, 'private-key')\n self.public_key_cert = fdt_util.GetString(self._node, 'public-key-cert')\n@@ -150,7 +156,8 @@ class Entry_efi_capsule(Entry_section):\n public_key_cert,\n self.monotonic_count,\n self.fw_version,\n- self.oem_flags)\n+ self.oem_flags,\n+ self.dump_signature)\n if ret is not None:\n return tools.read_file(capsule_fname)\n else:\n","prefixes":["v6","5/6"]}