Li Zhou d5754cbe76 secure boot: move pub keys to this git repo ...

New git repo cgcs-root/public-keys is available now for public
keys used in secure boot process.
This commit moves below keys to this git repo:
  boot_pub_key
  tis-boot.crt
  tis-shim.der
  TiBoot.crt

Please pay attention to that tis-boot.crt(pem) and TiBoot.crt(der)
are the same pub key with different formats in fact, which are used
in different user cases.

Test plan:
 The tests are done with all the changes which involve
 public-keys/integ/root repos for this enhancement about pub keys.
 - PASS: rebuild gurb-efi/efitools/shim packages;
 - PASS: follow the process to build iso image for secure boot;
 - PASS: installation test on AIO-DX lab with secure boot enabled;
 - PASS: check that the CERTS/TiBoot.crt in the disk mounted from
         the efi.img in the iso image is same with the one in
         this git repo.


Story: 2009221
Task: 47358

Signed-off-by: Li Zhou <li.zhou@windriver.com>
Change-Id: I540875293548d4b3e191ea50445ad4dfc5d53a51

2023-02-15 20:59:23 +00:00

1.1 KiB

Raw Permalink History

View Raw