binman: Accept pkcs11 URI tokens for capsule updates

With pkcs11 support in mkeficapsule we can now accept URI
tokens and not only files.

Signed-off-by: Wojciech Dubowik <Wojciech.Dubowik@mt.com>
Reviewed-by: Simon Glass <simon.glass@canonical.com>
This commit is contained in:
Wojciech Dubowik
2026-02-20 10:15:12 +01:00
committed by Simon Glass
parent 0c716a157b
commit a8c8ebc806

View File

@@ -125,10 +125,14 @@ class Entry_efi_capsule(Entry_section):
private_key = ''
public_key_cert = ''
if self.auth:
if not os.path.isabs(self.private_key):
if not os.path.isabs(self.private_key) and not 'pkcs11:' in self.private_key:
private_key = tools.get_input_filename(self.private_key)
if not os.path.isabs(self.public_key_cert):
if not os.path.isabs(self.public_key_cert) and not 'pkcs11:' in self.public_key_cert:
public_key_cert = tools.get_input_filename(self.public_key_cert)
if 'pkcs11:' in self.private_key:
private_key = self.private_key
if 'pkcs11:' in self.public_key_cert:
public_key_cert = self.public_key_cert
data, payload, uniq = self.collect_contents_to_file(
self._entries.values(), 'capsule_in')
outfile = self._filename if self._filename else 'capsule.%s' % uniq