[PATCH 00/16] OvmfPkg, ArmVirtPkg: upstream the EnrollDefaultKeys app

["Laszlo Ersek" <lersek@redhat.com>]

Bugzilla: https://bugzilla.tianocore.org/show_bug.cgi?id=1747
Repo:     https://github.com/lersek/edk2.git
Branch:   enroll_bz_1747

Please see the goal / use case in the BZ.

Anatomy of the series:

- Patch 01 adds the application as-is from RHEL, as the starting point
  for upstreaming (preserves continuity).

- Patches 02 through 13 clean up various coding style warts, and add
  documentation, without functional changes.

- Patches 14 through 16 replace the hard-coded Red Hat certificate
  (enrolled as PK and 1st KEK) with a certificate read dynamically from
  SMBIOS (enrolled the same way), originating from the VMM.

I've successfully re-run the Secure Boot Logo Test in Windows HCK, after
enabling SB in the VM-under-test with this application. I'll attach the
test log in a separate email (sent in response to this one).

Cc: Anthony Perard <anthony.perard@citrix.com>
Cc: Ard Biesheuvel <ard.biesheuvel@linaro.org>
Cc: Jordan Justen <jordan.l.justen@intel.com>
Cc: Julien Grall <julien.grall@arm.com>

Thanks,
Laszlo

Laszlo Ersek (16):
  OvmfPkg: introduce EnrollDefaultKeys application
  OvmfPkg/EnrollDefaultKeys: update @file comment blocks
  OvmfPkg/EnrollDefaultKeys: refresh INF file
  ArmVirtPkg: build EnrollDefaultKeys.efi
  OvmfPkg/EnrollDefaultKeys: clean up minor whitespace wart
  OvmfPkg/EnrollDefaultKeys: clean up global variable name prefixes
  OvmfPkg/EnrollDefaultKeys: clean up acronym capitalization in
    identifiers
  OvmfPkg/EnrollDefaultKeys: remove unneeded EFIAPI call. conv.
    specifiers
  OvmfPkg/EnrollDefaultKeys: extract typedefs to a header file
  OvmfPkg/EnrollDefaultKeys: split out certificate and signature
    constants
  OvmfPkg/EnrollDefaultKeys: extract MICROSOFT_VENDOR_GUID
  OvmfPkg/EnrollDefaultKeys: describe functions with leading comment
    blocks
  OvmfPkg/EnrollDefaultKeys: document the steps of the entry point
    function
  OvmfPkg: introduce OVMF_PK_KEK1_APP_PREFIX_GUID
  OvmfPkg/EnrollDefaultKeys: enroll PK/KEK1 from the Type 11 SMBIOS
    table
  OvmfPkg/EnrollDefaultKeys: remove Red Hat's hard-coded PK/KEK1

 ArmVirtPkg/ArmVirt.dsc.inc                      |   1 +
 ArmVirtPkg/ArmVirtQemu.dsc                      |   1 +
 ArmVirtPkg/ArmVirtQemuKernel.dsc                |   1 +
 OvmfPkg/EnrollDefaultKeys/AuthData.c            | 440 ++++++++++++
 OvmfPkg/EnrollDefaultKeys/EnrollDefaultKeys.c   | 706 ++++++++++++++++++++
 OvmfPkg/EnrollDefaultKeys/EnrollDefaultKeys.h   | 138 ++++
 OvmfPkg/EnrollDefaultKeys/EnrollDefaultKeys.inf |  52 ++
 OvmfPkg/Include/Guid/MicrosoftVendor.h          |  55 ++
 OvmfPkg/Include/Guid/OvmfPkKek1AppPrefix.h      |  45 ++
 OvmfPkg/OvmfPkg.dec                             |   2 +
 OvmfPkg/OvmfPkgIa32.dsc                         |   2 +
 OvmfPkg/OvmfPkgIa32X64.dsc                      |   2 +
 OvmfPkg/OvmfPkgX64.dsc                          |   2 +
 13 files changed, 1447 insertions(+)
 create mode 100644 OvmfPkg/EnrollDefaultKeys/AuthData.c
 create mode 100644 OvmfPkg/EnrollDefaultKeys/EnrollDefaultKeys.c
 create mode 100644 OvmfPkg/EnrollDefaultKeys/EnrollDefaultKeys.h
 create mode 100644 OvmfPkg/EnrollDefaultKeys/EnrollDefaultKeys.inf
 create mode 100644 OvmfPkg/Include/Guid/MicrosoftVendor.h
 create mode 100644 OvmfPkg/Include/Guid/OvmfPkKek1AppPrefix.h

-- 
2.19.1.3.g30247aa5d201