[PATCH 0/3] Introduce new sign binman's option

Simon Glass sjg at chromium.org
Sat Aug 13 16:59:04 CEST 2022


Hi Ivan,

On Mon, 21 Mar 2022 at 12:43, Ivan Mikhaylov <fr0st61te at gmail.com> wrote:
>
> From: Ivan Mikhaylov <ivan.mikhaylov at siemens.com>
>
> This patch introduces prototype of new sign binman's option.
> Enhancing the sign procedure, as example:
>
> mkimage -G privateky -r -o sha256,rsa4096 -F fit.fit
> binman replace -i flash.bin -f fit.fit fit
>
> into:
> binman sign -i flash.bin -k privatekey -a sha256,rsa4096 -f fit.fit fit
>
> It works with extracted FIT container and image, which provides key signing
> and replacing FIT container in directed image.
>
> Also, I'll add additional enhancement in future to this procedure with
> skipping on FIT container and providing extract->sign->replace in whole
> instead of sign->replace with documentation update and test as well.
>
> As example:
>
> binman sign -i flash.bin -k privatekey -a sha256,rsa4096 -f fit
>
>
> Ivan Mikhaylov (3):
>   binman: add sign option for binman
>   binman: add documentation for binman sign option
>   binman: add test for sign option
>
>  tools/binman/binman.rst            | 10 +++++
>  tools/binman/cmdline.py            | 13 ++++++
>  tools/binman/control.py            | 26 +++++++++++-
>  tools/binman/ftest.py              | 42 +++++++++++++++++++
>  tools/binman/test/225_fit_sign.dts | 67 ++++++++++++++++++++++++++++++
>  5 files changed, 157 insertions(+), 1 deletion(-)
>  create mode 100644 tools/binman/test/225_fit_sign.dts

I see Alper's comments. Are you going to send a new version sometime?

Regards,
Simon


More information about the U-Boot mailing list