[PATCH] binman: add CST backend selection for i.MX8M signing

[Marek Vasut]

On 2/13/26 6:53 PM, Simon Glass wrote:

Hello Simon,

>> @@ -161,8 +165,14 @@ class Entry_nxp_imx8mcst(Entry_mkimage):
>>           with open(cfg_fname, 'w') as cfgf:
>>               config.write(cfgf)
>>
>> +        # SSL is the default backend, PKCS11 backend is optional
>> +        if self.backend == "pkcs11":
>> +            cst_backend = "pkcs11"
>> +        else:
>> +            cst_backend = "ssl"
>> +
>>           output_fname = tools.get_output_filename(f'nxp.csf-output-blob.{uniq}')
>> -        args = ['-i', cfg_fname, '-o', output_fname]
>> +        args = ['-i', cfg_fname, '-o', output_fname, '-b', cst_backend]
>>           if self.cst.run_cmd(*args) is not None:
>>               outdata = tools.read_file(output_fname)
>>               # fixme: 0x2000 should be CONFIG_CSF_SIZE
>> --
>> 2.51.0
>>
> 
> This should be documented somewhere, likely in the comment for this
> entry type, so it ends up visible in the docs.

I will send a V2 with documentation.

> Also, this code path will need a test, please.
How do you propose to test this ?