[PATCH 0/3] Introduce new sign binman's option
Simon Glass
sjg at chromium.org
Sat Aug 13 16:59:04 CEST 2022
Hi Ivan,
On Mon, 21 Mar 2022 at 12:43, Ivan Mikhaylov <fr0st61te at gmail.com> wrote:
>
> From: Ivan Mikhaylov <ivan.mikhaylov at siemens.com>
>
> This patch introduces prototype of new sign binman's option.
> Enhancing the sign procedure, as example:
>
> mkimage -G privateky -r -o sha256,rsa4096 -F fit.fit
> binman replace -i flash.bin -f fit.fit fit
>
> into:
> binman sign -i flash.bin -k privatekey -a sha256,rsa4096 -f fit.fit fit
>
> It works with extracted FIT container and image, which provides key signing
> and replacing FIT container in directed image.
>
> Also, I'll add additional enhancement in future to this procedure with
> skipping on FIT container and providing extract->sign->replace in whole
> instead of sign->replace with documentation update and test as well.
>
> As example:
>
> binman sign -i flash.bin -k privatekey -a sha256,rsa4096 -f fit
>
>
> Ivan Mikhaylov (3):
> binman: add sign option for binman
> binman: add documentation for binman sign option
> binman: add test for sign option
>
> tools/binman/binman.rst | 10 +++++
> tools/binman/cmdline.py | 13 ++++++
> tools/binman/control.py | 26 +++++++++++-
> tools/binman/ftest.py | 42 +++++++++++++++++++
> tools/binman/test/225_fit_sign.dts | 67 ++++++++++++++++++++++++++++++
> 5 files changed, 157 insertions(+), 1 deletion(-)
> create mode 100644 tools/binman/test/225_fit_sign.dts
I see Alper's comments. Are you going to send a new version sometime?
Regards,
Simon
More information about the U-Boot
mailing list