blob: 840ada1ab0aeebd590b45b2bb00b1cf02fab47c8 [file] [view]
### Certificate expiration date
The `X509_V_FLAG_NO_CHECK_TIME` flag was deliberately added in the
Pkcs7Verify implementation so that UEFI Secure Boot validation is
time-agnostic — firmware doesn't have a reliable wall-clock during
early boot, so certificate expiry is intentionally not enforced here.
The tests will continue to pass indefinitely regardless of the
`TestCert.pem` expiry date.
### How to reproduce the binary file
1. Apply the following patch.
2. Make adjustments if you are using non OvmfPkgIa32X64 file to build binary files.
3. Please use the following [guide](https://github.com/tianocore/tianocore.github.io/wiki/How-to-build-OVMF) for building OVMF.
4. Check the `Build` directory.
```
From c41a1a8c2cab120df9409685877e92f1ce755167 Mon Sep 17 00:00:00 2001
From: Alexander Gryanko <xpahos@gmail.com>
Date: Tue, 23 Sep 2025 01:44:27 +0300
Subject: [PATCH] Empty file example
---
OvmfPkg/Empty/Empty.c | 13 +++++++++++++
OvmfPkg/Empty/Empty.inf | 28 ++++++++++++++++++++++++++++
OvmfPkg/OvmfPkgIa32X64.dsc | 1 +
3 files changed, 42 insertions(+)
create mode 100644 OvmfPkg/Empty/Empty.c
create mode 100644 OvmfPkg/Empty/Empty.inf
diff --git a/OvmfPkg/Empty/Empty.c b/OvmfPkg/Empty/Empty.c
new file mode 100644
index 0000000000..3e448367bc
--- /dev/null
+++ b/OvmfPkg/Empty/Empty.c
@@ -0,0 +1,13 @@
+#include <Uefi.h>
+#include <Library/UefiLib.h>
+#include <Library/UefiBootServicesTableLib.h>
+
+EFI_STATUS
+EFIAPI
+EmptyPoint (
+ IN EFI_HANDLE ImageHandle,
+ IN EFI_SYSTEM_TABLE *SystemTable
+)
+{
+ return EFI_SUCCESS;
+}
diff --git a/OvmfPkg/Empty/Empty.inf b/OvmfPkg/Empty/Empty.inf
new file mode 100644
index 0000000000..e98ab6ff56
--- /dev/null
+++ b/OvmfPkg/Empty/Empty.inf
@@ -0,0 +1,28 @@
+## @file
+# Enroll default PK, KEK, db, dbx.
+#
+# Copyright (C) 2014-2019, Red Hat, Inc.
+#
+# SPDX-License-Identifier: BSD-2-Clause-Patent
+##
+
+[Defines]
+ INF_VERSION = 1.28
+ BASE_NAME = EmptyFile
+ FILE_GUID = FF089297-5305-43B5-8FA8-08A10ACEB552
+ MODULE_TYPE = UEFI_APPLICATION
+ VERSION_STRING = 0.1
+ ENTRY_POINT = EmptyPoint
+
+[Sources]
+ Empty.c
+
+[Packages]
+ OvmfPkg/OvmfPkg.dec
+ MdePkg/MdePkg.dec
+
+[LibraryClasses]
+ UefiApplicationEntryPoint
+ UefiBootServicesTableLib
+ UefiLib
+
diff --git a/OvmfPkg/OvmfPkgIa32X64.dsc b/OvmfPkg/OvmfPkgIa32X64.dsc
index 06fc031ab4..27e1b7f223 100644
--- a/OvmfPkg/OvmfPkgIa32X64.dsc
+++ b/OvmfPkg/OvmfPkgIa32X64.dsc
@@ -969,6 +969,7 @@
}
!endif
+ OvmfPkg/Empty/Empty.inf
#
# TPM support
#
--
2.39.5 (Apple Git-154)
```