tree f089492438a2b558f6569baeb2d5404a10566fc3
parent e79d276999bc92409df399c1f3cbb5b3b941ee4d
author Joel Kitching <kitching@google.com> 1619088281 +0800
committer Commit Bot <commit-bot@chromium.org> 1620588510 +0000

vboot/vboot_kernel: update keyblock flag mismatch logic

A keyblock flag mismatch should cause keyblock verification to
fail regardless of whether a valid keyblock is required (i.e.
self-signed keyblock case).

This CL is part of a series to merge vboot1 and vboot2.0
kernel verification code; see b/181739551.

BUG=b:181739551
TEST=make clean && make runtests
BRANCH=none

Signed-off-by: Joel Kitching <kitching@google.com>
Change-Id: I47096ab7fcf0fbd47a46a9a92a5406e9aa9b3596
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/2846251
Reviewed-by: Julius Werner <jwerner@chromium.org>
Tested-by: Joel Kitching <kitching@chromium.org>
Commit-Queue: Joel Kitching <kitching@chromium.org>