[PATCH v3 39/43] vpl: Allow signature verification

Simon Glass sjg at chromium.org
Fri Oct 21 02:23:16 CEST 2022


Add the required Kconfig option so that signatures can be verified when
loading a configuration.

Signed-off-by: Simon Glass <sjg at chromium.org>
---

(no changes since v2)

Changes in v2:
- Add new patch to allow signature verification

 boot/Kconfig   | 1 -
 common/Kconfig | 7 +++++++
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/boot/Kconfig b/boot/Kconfig
index 93344975a63..d5c582ebe8c 100644
--- a/boot/Kconfig
+++ b/boot/Kconfig
@@ -320,7 +320,6 @@ config VPL_FIT_FULL_CHECK
 config VPL_FIT_SIGNATURE
 	bool "Enable signature verification of FIT firmware within VPL"
 	depends on VPL_DM
-	depends on VPL_LOAD_FIT || VPL_LOAD_FIT_FULL
 	default y
 	select FIT_SIGNATURE
 	select VPL_FIT
diff --git a/common/Kconfig b/common/Kconfig
index 5926645b3c3..e2c9114f538 100644
--- a/common/Kconfig
+++ b/common/Kconfig
@@ -1065,6 +1065,13 @@ config SPL_IMAGE_SIGN_INFO
 	help
 	  Enable image_sign_info helper functions in SPL.
 
+config VPL_IMAGE_SIGN_INFO
+	bool
+	select SHA1
+	select SHA256
+	help
+	  Enable image_sign_info helper functions in SPL.
+
 endif
 
 config FDT_SIMPLEFB
-- 
2.38.0.135.g90850a2211-goog



More information about the U-Boot mailing list