[PATCH 0/3] Introduce new sign binman's option
Ivan Mikhaylov
fr0st61te at gmail.com
Mon Mar 21 22:43:16 CET 2022
From: Ivan Mikhaylov <ivan.mikhaylov at siemens.com>
This patch introduces prototype of new sign binman's option.
Enhancing the sign procedure, as example:
mkimage -G privateky -r -o sha256,rsa4096 -F fit.fit
binman replace -i flash.bin -f fit.fit fit
into:
binman sign -i flash.bin -k privatekey -a sha256,rsa4096 -f fit.fit fit
It works with extracted FIT container and image, which provides key signing
and replacing FIT container in directed image.
Also, I'll add additional enhancement in future to this procedure with
skipping on FIT container and providing extract->sign->replace in whole
instead of sign->replace with documentation update and test as well.
As example:
binman sign -i flash.bin -k privatekey -a sha256,rsa4096 -f fit
Ivan Mikhaylov (3):
binman: add sign option for binman
binman: add documentation for binman sign option
binman: add test for sign option
tools/binman/binman.rst | 10 +++++
tools/binman/cmdline.py | 13 ++++++
tools/binman/control.py | 26 +++++++++++-
tools/binman/ftest.py | 42 +++++++++++++++++++
tools/binman/test/225_fit_sign.dts | 67 ++++++++++++++++++++++++++++++
5 files changed, 157 insertions(+), 1 deletion(-)
create mode 100644 tools/binman/test/225_fit_sign.dts
--
2.35.1
More information about the U-Boot
mailing list