mirrors/poky
1
0
Fork 0
mirror of https://git.yoctoproject.org/poky synced 2026-05-08 17:19:20 +00:00
Code Issues Projects Releases Wiki Activity

linux-fitimage: sign setup sections

Browse Source 
If FIT_SIGN_INDIVIDUAL is set to “1”, a signature section is added
to all screen sections, but not to the setup section. To match the setup
section with all other sections, the signature is also added. This also
helps to implement the associated tests generically.

This change is intended to make the code more consistent. However, it is
not intended to make the FIT_SIGN_INDIVIDUAL function more popular.
Technically, it would be better to remove the signature from all other
image sections and discard the FIT_SIGN_INDIVIDUAL function, the use of
which is no longer recommended anyway.

(From OE-Core rev: 8bf6a9c07cdde8fc8bbd4bb61a4886ccc02a570f)

Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
Adrian Freihofer
2025-03-10 10:35:44 +01:00
committed by Richard Purdie
parent 080cd0899c
commit dabd582240
1 changed files with 13 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
meta/classes-recipe/kernel-fitimage.bbclass
+13
View File
@@ -243,6 +243,8 @@ EOF
fitimage_emit_section_setup() {
setup_csum="${FIT_HASH_ALG}"
setup_sign_algo="${FIT_SIGN_ALG}"
setup_sign_keyname="${UBOOT_SIGN_IMG_KEYNAME}"
cat << EOF >> $1
setup-$2 {
@@ -259,6 +261,17 @@ fitimage_emit_section_setup() {
};
};
EOF
if [ "${UBOOT_SIGN_ENABLE}" = "1" -a "${FIT_SIGN_INDIVIDUAL}" = "1" -a -n "$setup_sign_keyname" ] ; then
sed -i '$ d' $1
cat << EOF >> $1
signature-1 {
algo = "$setup_csum,$setup_sign_algo";
key-name-hint = "$setup_sign_keyname";
};
};
EOF
fi
}
#