1
0
mirror of https://git.yoctoproject.org/meta-ti synced 2026-01-12 01:20:20 +00:00

k3: Move from UBOOT_SIGN_ENABLE to KERNEL_FITIMAGE_SIGN_ENABLE

A recent change in oe-core [1] allowed for signing the fitImage without
signing the uboot files.  Since we use binman to sign all of the uboot
files, we do not want oe-core to re-sign themm, but we do want the
fitImage signed.

[1] https://git.openembedded.org/openembedded-core/commit/?id=313ff06fdfec36a09328dbd60471bd53127fabe3

Signed-off-by: Ryan Eatmon <reatmon@ti.com>
This commit is contained in:
Ryan Eatmon
2025-10-15 16:09:48 -05:00
parent 69aaf68a25
commit 8f01b68d92

View File

@@ -20,10 +20,10 @@ SPL_BINARY = "tispl.bin"
SPL_BINARYNAME = "tispl.bin" SPL_BINARYNAME = "tispl.bin"
UBOOT_SUFFIX = "img" UBOOT_SUFFIX = "img"
UBOOT_SIGN_ENABLE = "1" FIT_KERNEL_SIGN_ENABLE = "1"
FIT_KERNEL_SIGN_KEYNAME ?= "custMpk"
FIT_KERNEL_SIGN_KEYDIR ?= "${TI_SECURE_DEV_PKG}/keys"
UBOOT_MKIMAGE_DTCOPTS = "-I dts -O dtb" UBOOT_MKIMAGE_DTCOPTS = "-I dts -O dtb"
UBOOT_SIGN_KEYNAME ?= "custMpk"
UBOOT_SIGN_KEYDIR ?= "${TI_SECURE_DEV_PKG}/keys"
FIT_HASH_ALG ?= "sha512" FIT_HASH_ALG ?= "sha512"
FIT_SIGN_ALG ?= "rsa4096" FIT_SIGN_ALG ?= "rsa4096"