diff options
| author | Klaus Heinrich Kiwi <klaus@linux.vnet.ibm.com> | 2021-03-10 03:09:40 +0300 |
|---|---|---|
| committer | Joel Stanley <joel@jms.id.au> | 2021-05-19 04:31:20 +0300 |
| commit | f920e74c0c9d9096c87cbc1e610fef83747f4a06 (patch) | |
| tree | 2032ad69f57c1b383709e14ab84b40ddb77faf18 /meta-aspeed/recipes-kernel/linux/linux-aspeed.inc | |
| parent | bc9cc306859ee83a5eb92eb755bef75d8139ed56 (diff) | |
| download | openbmc-f920e74c0c9d9096c87cbc1e610fef83747f4a06.tar.xz | |
meta-aspeed: Add development key for Kernel sign
Add a development (insecure, also known as 'imprint') key to
linux-aspeed that can be used for signing the Kernel fitImage
for U-Boot FIT Signature Verification.
The key was generated according to U-Boot documentation, using:
$ openssl genpkey -algorithm RSA -out rsa_oem_fitimage_key.key \
-pkeyopt rsa_keygen_bits:4096 -pkeyopt rsa_keygen_pubexp:65537
The certificate was created according to U-Boot documentation, using:
$ openssl req -batch -new -x509 -key rsa_oem_fitimage_key.key \
-out rsa_oem_fitimage_key.crt
Signed-off-by: Klaus Heinrich Kiwi <klaus@linux.vnet.ibm.com>
Change-Id: Ic67024ab389c8a4a3fc6709e1d7d92dc72783ca5
Diffstat (limited to 'meta-aspeed/recipes-kernel/linux/linux-aspeed.inc')
| -rw-r--r-- | meta-aspeed/recipes-kernel/linux/linux-aspeed.inc | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/meta-aspeed/recipes-kernel/linux/linux-aspeed.inc b/meta-aspeed/recipes-kernel/linux/linux-aspeed.inc index 6a1471f26..aa060295f 100644 --- a/meta-aspeed/recipes-kernel/linux/linux-aspeed.inc +++ b/meta-aspeed/recipes-kernel/linux/linux-aspeed.inc @@ -8,7 +8,11 @@ KCONFIG_MODE="--alldefconfig" KSRC ?= "git://github.com/openbmc/linux;protocol=git;branch=${KBRANCH}" SRC_URI = "${KSRC}" -SRC_URI += " file://defconfig" +SRC_URI += " \ + file://defconfig \ + file://rsa_oem_fitimage_key.key;sha256sum=eeb4ff2ebbfbd97b6254fe6dbaeea41067e54c65176c233ec7b2ab2decf1ddcd \ + file://rsa_oem_fitimage_key.crt;sha256sum=45f5a55497cce8040999bf9f3214d471ac7b83ab7acef41c4425a34662e8372e \ + " LINUX_VERSION_EXTENSION ?= "-${SRCREV}" |