signtool: Add gbl sign and verify commands

Bug: 387241522
Test: openssl genrsa 4096 > rsa.key
Test: openssl rsa -in rsa.key -pubout > rsa.pub.key
Test: m gblsigntool
Test: gblsigntool sign gbl.efi -o gbl.efi.signed --avbtool_args '--key rsa.key --algorithm SHA512_RSA4096'
Test: gblsigntool verify gbl.efi.signed --key rsa.pub.key
Test: SecureBoot signature must not invalidate GBL certificate
Test: sbsign gbl.efi.signed && gblsigntool verify gbl.efi.signed.signed
(cherry picked from https://android-review.googlesource.com/q/commit:e89e511ee54ededb047169ee4a5ff333594fc07d)
Merged-In: I358ba861420d75dc6de336a28570a6b2bd1e2c97
Change-Id: I358ba861420d75dc6de336a28570a6b2bd1e2c97
2 files changed
tree: d1d3aabf89b48670d18689aae318a184af52f448
  1. gbl/
  2. libxbc/
  3. vts/
  4. .clang-format
  5. .gitignore
  6. BUILD
  7. LICENSE
  8. OWNERS