[U-Boot] mkimage unable to assign sign value to fitimage

[deepak kumar Pradhan]

HI ,

I am using marvell armada 388 clearfog pro device.
I am using fitimage to upgrade my device. To make the device bootup secure
I want to sign the fitimage and verify the same in u-boot.
1. However I am observing that the mkimage is unable to assign sign value
to my fit image.
2. One more issue I am facing that is when I am enabling the CONFIG_FIT and
FIT_SIGNATURE, the mkimage is throughing error like below



*"mkimage -f fitimage-temp.its -k keys
fitimage-kernel-rfs-dtb.itbUnsupported signature algorithm (sha1,rs2048)
for 'signature at 1' signature node in 'kernel at 1' image nodemkimage Can't add
hashes to FIT blob"*

Can someone help me out and uide me what I am doing wrong?

Below are the outputs
*mkimage -F -k keys bkp-fitimage-initramfs-script.bin *
FIT description: U-Boot fitImage for Aprisa
NEXT/4.14.54+gitAUTOINC+7c0df4bf46/clearfog
Created:         Tue Jul 16 12:25:27 2019
 Image 0 (kernel at 1)
  Description:  Linux kernel
  Created:      Tue Jul 16 12:25:27 2019
  Type:         Kernel Image
  Compression:  uncompressed
  Data Size:    4906704 Bytes = 4791.70 KiB = 4.68 MiB
  Architecture: ARM
  OS:           Linux
  Load Address: 0x01314c40
  Entry Point:  0x01314c40
  Hash algo:    crc32
  Hash value:   8aeccf3a
  Hash algo:    sha1
  Hash value:   b8fafa028a78428a90304ab913877d2d0adbfd88

*  Sign algo:    sha1,rs2048:my_key  Sign value:   unavailable*
  Timestamp:    unavailable
 Image 1 (fdt at armada-388-clearfog.dtb)
  Description:  Flattened Device Tree blob
  Created:      Tue Jul 16 12:25:27 2019
  Type:         Flat Device Tree
  Compression:  uncompressed
  Data Size:    18373 Bytes = 17.94 KiB = 0.02 MiB
  Architecture: ARM
  Hash algo:    crc32
  Hash value:   dbe5de9d
  Hash algo:    sha1
  Hash value:   c1b29ef3c908ecf4c9e800f573a7c33184954b4f
*  Sign algo:    sha1,rs2048:my_key*
*  Sign value:   unavailable*
  Timestamp:    unavailable

-- 
Deepak Kumar Pradhan