diff options
| author | Jan Kiszka <jan.kiszka@siemens.com> | 2023-07-27 07:34:53 +0300 |
|---|---|---|
| committer | Tom Rini <trini@konsulko.com> | 2023-07-28 17:11:01 +0300 |
| commit | 35ae06fb866831e6323db43dbee6572664ecdc18 (patch) | |
| tree | dd73285512eded3178e60ec7504cb5e935912ebe /tools | |
| parent | 00e1c4549d50be685be9bf6ea9ce5e5d9de38447 (diff) | |
| download | u-boot-35ae06fb866831e6323db43dbee6572664ecdc18.tar.xz | |
iot2050: Use binman in signing script
The underlying issue was fixed in the meantime. Also signing the U-Boot
proper fit image now works. Just supporting custom cert templates
remains a todo.
Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>
Diffstat (limited to 'tools')
| -rwxr-xr-x | tools/iot2050-sign-fw.sh | 9 |
1 files changed, 2 insertions, 7 deletions
diff --git a/tools/iot2050-sign-fw.sh b/tools/iot2050-sign-fw.sh index 4d1d79498c..3f953c09ed 100755 --- a/tools/iot2050-sign-fw.sh +++ b/tools/iot2050-sign-fw.sh @@ -39,13 +39,8 @@ CERT_X509=$(mktemp XXXXXXXX.crt) openssl req -new -x509 -key $1 -nodes -outform DER -out $CERT_X509 -config $TEMP_X509 -sha512 cat $CERT_X509 tispl.bin > tispl.bin_signed -# currently broken in upstream -#source/tools/binman/binman replace -i flash.bin -f tispl.bin_signed blob@0x180000 -dd if=tispl.bin_signed of=flash.bin bs=$((0x1000)) seek=$((0x180000/0x1000)) conv=notrunc +source/tools/binman/binman replace -i flash.bin -f tispl.bin_signed fit@0x180000 rm $TEMP_X509 $CERT_X509 -tools/mkimage -G $1 -r -o sha256,rsa4096 -F fit@0x380000.fit -# currently broken in upstream -#source/tools/binman/binman replace -i flash.bin -f fit@0x380000.fit fit@0x380000 -dd if=fit@0x380000.fit of=flash.bin bs=$((0x1000)) seek=$((0x380000/0x1000)) conv=notrunc +source/tools/binman/binman sign -i flash.bin -k $1 -a sha256,rsa4096 fit@0x380000 |