[OE-core] [RFC, v2, 4/4] kernel: fitimage: basic support for fitimage signature

Andreas Dannenberg dannenberg at ti.com
Wed Apr 20 19:35:25 UTC 2016


On Wed, Apr 20, 2016 at 03:50:39PM +0200, Yannick Gicquel wrote:
> This is an initial support of fitImage signature to enable U-Boot verified
> boot. This feature is implemented by adding a signature tag to the
> configuration section of the generated fit-image.its file.
> 
> When a UBOOT_SIGN_ENABLE variable is set to "1", the signature procedure is
> activated and performs a second call to mkimage to sign the fitImage file and
> to include the public key in the deployed U-Boot device tree blob. (This
> implementation depends on the use of CONFIG_OF_SEPARATE in U-Boot.)
> 
> As the U-Boot device tree blob is appended in the deploy dir, a dependency
> on 'u-boot:do_deploy' is added when the feature is activated.
> 
> Signed-off-by: Yannick Gicquel <yannick.gicquel at iot.bzh>
> Reviewed-by: Tom Rini <trini at konsulko.com>


Acked-by: Andreas Dannenberg <dannenberg at ti.com>

--
Andreas Dannenberg
Texas Instruments Inc



More information about the Openembedded-core mailing list