[U-Boot] verified boot of beaglebone black

[Srinivasan S]

Hi Simon

________________________________________
From: sjg at google.com <sjg at google.com> on behalf of Simon Glass <sjg at chromium.org>
Sent: Friday, November 7, 2014 10:18 PM
To: Srinivasan S
Cc: Jagan Teki; U-Boot Mailing List
Subject: Re: [U-Boot] verified boot of beaglebone black

Hi,

On 4 November 2014 00:39, Srinivasan S <srinivasan.s at tataelxsi.co.in> wrote:
> Thanks a lot for your replies
> The issue was where at symbol was supposed to be changed to @
>
> +               kernel at 1 {
> +                       data = /incbin/("Image.lzo");
> +                       type = "kernel";
> +                       arch = "arm";
> +                       os = "linux";
> +                       compression = "lzo";
> +                       load = <0x80008000>;
> +                       entry = <0x80008000>;
> +                       hash at 1 {
> +                               algo = "sha1";
> +                       };
>
> When I was generating the keys ie., Step 4: Create a key pair
>
> Am facing one more error while generating private key & certificate containing public key used for verification when I execute the below openssl commands it is saying can't open  config file:
>
> srinivasan at tata-HP-Elite-7100-Microtower-PC:~/TUNSTALL/board-support/linux-3.12.10-ti2013.12.01/work$ openssl genrsa -F4 -out keys/dev.key 2048
> WARNING: can't open config file: /tmp/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/yyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy/sysroots/i686-arago-linux/usr/lib/ssl/openssl.cnf
> Generating RSA private key, 2048 bit long modulus
> ............................+++
> ...............................................+++
> e is 65537 (0x10001)
> srinivasan at tata-HP-Elite-7100-Microtower-PC:~/TUNSTALL/board-support/linux-3.12.10-ti2013.12.01/work$ openssl req -batch -new -x509 -key keys/dev.key -out keys/dev.crt
> WARNING: can't open config file: /tmp/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/yyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy/sysroots/i686-arago-linux/usr/lib/ssl/openssl.cnf
> Unable to load config info from /tmp/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/yyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy/sysroots/i686-arago-linux/usr/lib/ssl/openssl.cnf
>

Did you mkdir keys?

Regards,
Simon

Hi Simon,


As you suggested earlier am using u-boot-2014.07 & Am using ~/ti-sdk-am335x-evm-07.00.00.00/bin/create-sdcard.sh for creating the partitions, 
After creating the partitions I tried implementing step 7. Put U-Boot and the kernel onto the board & step 8. Try it,  by the following steps,
And when I tried to boot I am facing the below error for which am not able to get the uboot prompt

U-Boot SPL 2013.10-g78d8ebd (Mar 30 2014 - 20:46:34)                                       
reading args                                                                               
spl: error reading image args, err - -1                                      
reading u-boot.img                                                           
reading u-boot.img                      
No valid FDT found - please append one to U-Boot binary, use u-boot-dtb.bin or define CONFIG_OF_EMBED. For sandbox, use -d <file.dtb>
initcall sequence 808511ec failed at call 80833f84
### ERROR ### Please RESET the board ###

Steps followed by me
1.
As tmp directory was unavailable while mounting /dev/sdc1, so I created tmp directory while mounting /dev/sdc1 & executed the commands as below
sudo mount /dev/sdc1 /mnt/tmp
sudo cp ~/ti-sdk-am335x-evm-07.00.00.00/board-support/u-boot-2014.07/b/am335x_boneblack_vboot/u-boot.img /mnt/tmp/u-boot.img 
sleep 1
sudo umount /dev/sdc1

sudo mount /dev/sdc2 /mnt/tmp
sudo cp ~/ti-sdk-am335x-evm-07.00.00.00/board-support/linux-3.12.10-ti2013.12.01/work/image.fit /mnt/tmp/boot/image.fit
sleep 1
sudo umount /dev/sdc2

2.

I have even tried copying MLO & u-boot.img of as below

sudo cp ~/ti-sdk-am335x-evm-07.00.00.00/board-support/u-boot-2014.07/b/am335x_boneblack_vboot/MLO /media/boot/
sudo cp ~/ti-sdk-am335x-evm-07.00.00.00/board-support/u-boot-2014.07/b/am335x_boneblack_vboot/u-boot.img /media/boot/

appusony at appusony-laptop:~/ti-sdk-am335x-evm-07.00.00.00/board-support/linux-3.12.10-ti2013.12.01/work$ ls
am335x-boneblack.dtb  am335x-boneblack-pubkey.dtb  Image  image.fit  Image.lzo  keys  sign.its  u-boot-dtb.img
appusony at appusony-laptop:~/ti-sdk-am335x-evm-07.00.00.00/board-support/linux-3.12.10-ti2013.12.01/work$ sudo image.fit /media/rootfs/boot/


Could you please do the needful in resolving the above issue as am stuck with this last steps

Kindly do the needful as early as possible,

Many Thanks in advance