[PATCH v8 12/12] (RFC) efi_loader, dts: add public keys for capsules to device tree

[AKASHI Takahiro]

On Wed, Jan 12, 2022 at 01:03:54PM -0700, Simon Glass wrote:
> Hi Heinrich,
> 
> On Sat, 1 Jan 2022 at 15:53, Heinrich Schuchardt <xypron.glpk at gmx.de> wrote:
> >
> > On 12/20/21 06:02, AKASHI Takahiro wrote:
> > > By specifying CONFIG_EFI_CAPSULE_KEY_PATH, the build process will
> > > automatically insert the given key into the device tree.
> > > Otherwise, users are required to do so manually, possibly, with
> > > the utility script, fdtsig.sh.
> >
> > Why do we need a script fdtsig.sh? Can't you integrate this into the
> > Makefile?

Because signing phase of capsules would be different from compiling phase
of U-Boot. So,

> It should be handled by binman, IMO.

Yes, either way, we should have a separate script/command.

-Takahiro Akashi

> Regards,
> Simon