From f920e74c0c9d9096c87cbc1e610fef83747f4a06 Mon Sep 17 00:00:00 2001 From: Klaus Heinrich Kiwi Date: Tue, 9 Mar 2021 21:09:40 -0300 Subject: meta-aspeed: Add development key for Kernel sign Add a development (insecure, also known as 'imprint') key to linux-aspeed that can be used for signing the Kernel fitImage for U-Boot FIT Signature Verification. The key was generated according to U-Boot documentation, using: $ openssl genpkey -algorithm RSA -out rsa_oem_fitimage_key.key \ -pkeyopt rsa_keygen_bits:4096 -pkeyopt rsa_keygen_pubexp:65537 The certificate was created according to U-Boot documentation, using: $ openssl req -batch -new -x509 -key rsa_oem_fitimage_key.key \ -out rsa_oem_fitimage_key.crt Signed-off-by: Klaus Heinrich Kiwi Change-Id: Ic67024ab389c8a4a3fc6709e1d7d92dc72783ca5 --- meta-aspeed/recipes-kernel/linux/linux-aspeed.inc | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) (limited to 'meta-aspeed/recipes-kernel/linux/linux-aspeed.inc') diff --git a/meta-aspeed/recipes-kernel/linux/linux-aspeed.inc b/meta-aspeed/recipes-kernel/linux/linux-aspeed.inc index 6a1471f26..aa060295f 100644 --- a/meta-aspeed/recipes-kernel/linux/linux-aspeed.inc +++ b/meta-aspeed/recipes-kernel/linux/linux-aspeed.inc @@ -8,7 +8,11 @@ KCONFIG_MODE="--alldefconfig" KSRC ?= "git://github.com/openbmc/linux;protocol=git;branch=${KBRANCH}" SRC_URI = "${KSRC}" -SRC_URI += " file://defconfig" +SRC_URI += " \ + file://defconfig \ + file://rsa_oem_fitimage_key.key;sha256sum=eeb4ff2ebbfbd97b6254fe6dbaeea41067e54c65176c233ec7b2ab2decf1ddcd \ + file://rsa_oem_fitimage_key.crt;sha256sum=45f5a55497cce8040999bf9f3214d471ac7b83ab7acef41c4425a34662e8372e \ + " LINUX_VERSION_EXTENSION ?= "-${SRCREV}" -- cgit v1.2.3