fitimage: strip pkcs11: prefix in FITIMAGE_SIGN_KEYDIR example

Following the example in the comment as-is will lead to an error at
do_fitimage time:

  The key ID is not a valid PKCS#11 URI
  The PKCS#11 URI format is defined by RFC7512
  The key ID is not a valid PKCS#11 URI
  The PKCS#11 URI format is defined by RFC7512
  PKCS11_get_private_key returned NULL
  Failure loading private key from engine: error:40000064:pkcs11 engine::invalid id
  uboot-mkimage Can't add hashes to FIT blob: -1

Strip the pkcs11: prefix to resolve this and save future users the
hassle.

Signed-off-by: Ahmad Fatoum <a.fatoum@pengutronix.de>
Signed-off-by: Fabian Pflug <f.pflug@pengutronix.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
This commit is contained in:
Ahmad Fatoum
2026-09-08 08:23:16 -07:00
committed by Khem Raj
parent e1f5f22b30
commit abb086bef6
+1 -1
View File
@@ -62,7 +62,7 @@
#
# FITIMAGE_SIGN = "1"
# FITIMAGE_MKIMAGE_EXTRA_ARGS = "--engine pkcs11"
# FITIMAGE_SIGN_KEYDIR = "${PKCS11_URI}"
# FITIMAGE_SIGN_KEYDIR = "${PKCS11_URI#pkcs11:}"
LICENSE ?= "MIT"