#!/bin/sh

sigfile="/tmp/bmc.sig"
imagebmc="/run/initramfs/image-bmc"
bmcimage="/run/initramfs/bmc-image"
publickey="/etc/activationdata/OpenBMC/publickey"
bmclog="/tmp/update-bmc.log"

if [ -f $publickey ];then
    r="$(openssl dgst -verify $publickey -sha256 -signature $sigfile $bmcimage)"
    echo "$r" > $bmclog
    if [[ "Verified OK" == "$r" ]]; then
        mv $bmcimage $imagebmc
        rm -f $sigfile
        exit 0
    else
        exit 1
    fi
else
    echo "No $publickey file" > $bmclog
    exit 1
fi