[PATCH v2 41/45] vpl: Allow signature verification

Simon Glass sjg at chromium.org
Thu Oct 13 14:29:23 CEST 2022


Add the required Kconfig option so that signatures can be verified when
loading a configuration.

Signed-off-by: Simon Glass <sjg at chromium.org>
---

Changes in v2:
- Add new patch to allow signature verification

 boot/Kconfig   | 1 -
 common/Kconfig | 7 +++++++
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/boot/Kconfig b/boot/Kconfig
index 86e3105946e..e07362ceea3 100644
--- a/boot/Kconfig
+++ b/boot/Kconfig
@@ -320,7 +320,6 @@ config VPL_FIT_FULL_CHECK
 config VPL_FIT_SIGNATURE
 	bool "Enable signature verification of FIT firmware within VPL"
 	depends on VPL_DM
-	depends on VPL_LOAD_FIT || VPL_LOAD_FIT_FULL
 	default y
 	select FIT_SIGNATURE
 	select VPL_FIT
diff --git a/common/Kconfig b/common/Kconfig
index 5926645b3c3..e2c9114f538 100644
--- a/common/Kconfig
+++ b/common/Kconfig
@@ -1065,6 +1065,13 @@ config SPL_IMAGE_SIGN_INFO
 	help
 	  Enable image_sign_info helper functions in SPL.
 
+config VPL_IMAGE_SIGN_INFO
+	bool
+	select SHA1
+	select SHA256
+	help
+	  Enable image_sign_info helper functions in SPL.
+
 endif
 
 config FDT_SIMPLEFB
-- 
2.38.0.rc1.362.ged0d419d3c-goog



More information about the U-Boot mailing list