[PATCH v3 0/5] rockchip: make it possible to sign the u-boot.itb

Simon Glass sjg at chromium.org
Fri Jun 26 03:12:07 CEST 2020


Hi,

On Fri, 19 Jun 2020 at 04:47, Heiko Stuebner <heiko at sntech.de> wrote:
>
> Hi Kever,
>
> Am Sonntag, 31. Mai 2020, 10:28:45 CEST schrieb Kever Yang:
> >      This patch set make rk3288 series board build fail. Could you help
> > to check again?
>
> the additional patch in v4 adding the ifdef CONFIG_SPL_FIT clamp,
> should hopefully fix this
>
> Heiko
>
> > On 2020/5/26 下午6:44, Heiko Stuebner wrote:
> > > From: Heiko Stuebner <heiko.stuebner at theobroma-systems.com>
> > >
> > > This series makes it possible to sign a generated u-boot.itb automatically
> > > even if the its-source got created by a generator script.
> > >
> > > To let the SPL know about the key, the -K option for mkimage points
> > > to the dts/dt-spl.dtb which can then get included into the spl binary.
> > >
> > > Tested on Rockchip PX30 with a TPL -> SPL -> U-Boot.itb bootchain.
> > >
> > > I've split out the the rsa/crypto fixes into a separate series
> > > starting at [0].
> > >
> > > [0] https://patchwork.ozlabs.org/project/uboot/patch/20200522141937.3523692-1-heiko@sntech.de/
> > >
> > >
> > > changes in v3:
> > > - add patch to fix imx make_fit_atf.sh error handling
> > > - split out rsa fixes into separate series
> > > changes in v2.1:
> > > - depend on $(CONFIG_SPL_FIT_SIGNATURE)$(U_BOOT_ITS)
> > >    instead of only $(CONFIG_SPL_FIT_GENERATOR)
> > > changes in v2:
> > > - add received reviews
> > > - fix commit message typo
> > > - add doc snippet explaining CONFIG_SPL_FIT_GENERATOR_KEY_HINT
> > >
> > > Heiko Stuebner (5):
> > >    imx: mkimage_fit_atf: Fix FIT image if BL31.bin missing
> > >    mkimage: fit_image: handle multiple errors when writing signatures
> > >    spl: fit: enable signing a generated u-boot.itb
> > >    spl: fit: add Kconfig option to specify key-hint for fit_generator
> > >    rockchip: make_fit_atf: add signature handling
> > >
> > >   Kconfig                                | 16 ++++++++
> > >   Makefile                               | 11 +++++-
> > >   arch/arm/mach-imx/mkimage_fit_atf.sh   |  4 +-
> > >   arch/arm/mach-rockchip/make_fit_atf.py | 51 +++++++++++++++++++++++++-
> > >   doc/uImage.FIT/howto.txt               | 13 +++++++
> > >   tools/image-host.c                     |  2 +-
> > >   6 files changed, 92 insertions(+), 5 deletions(-)

Please no more adding to this script. It should be removed and use
binman to make images.

Regards,
Simon


More information about the U-Boot mailing list