[PATCH v3 07/11] binman: etype: Add u-boot-spl-pubkey-dtb etype

Simon Glass sjg at chromium.org
Mon Jul 24 20:46:29 CEST 2023


From: Lukas Funke <lukas.funke at weidmueller.com>

This adds a new etype 'u-boot-spl-pubkey-dtb'. The etype adds the public
key from a certificate to the dtb. This creates a '/signature' node which
is turn contains the fields which make up the public key. Usually this
is done by 'mkimage -K'. However, 'binman sign' does not add the public
key to the SPL. This is why the pubkey is added using this etype.

The etype calls the underlying 'fdt_add_pubkey' tool.

Signed-off-by: Lukas Funke <lukas.funke at weidmueller.com>
Reviewed-by: Simon Glass <sjg at chromium.org>

---

Changes in v3:
- Fixed minor python doc typo in u-boot-spl-pubkey-dtb etype
- Renamed key property from 'key-name' to 'key-name-hint'

Changes in v2:
- Improved rst/python documentation
- Changed u_boot_spl_pubkey_dtb to u-boot-spl-pubkey-dtb in example

 tools/binman/entries.rst                    |  39 +++++++
 tools/binman/etype/u_boot_spl_pubkey_dtb.py | 109 ++++++++++++++++++++
 2 files changed, 148 insertions(+)
 create mode 100644 tools/binman/etype/u_boot_spl_pubkey_dtb.py

Applied to u-boot-dm, thanks!


More information about the U-Boot mailing list