[PATCH v7 0/8] Improve FIT signature handling

[Tom Rini]

On Thu, 18 Jun 2026 14:47:35 +0200, Ludwig Nussel wrote:

> This patch series tries to improve dealing with FIT
> (configuration-)signatures a bit:
>   - make signatures work with QEMU. QEMU brings it's own device tree at
>     a memory address. U-Boot expects public keys in it's own DT though.
>     So merge both.
>   - (optionally) enforce signatures so we can't accidentally boot
>     unsigned fit images. Quite an easy oversight, esp when qemu
>     previously didn't even use the built in DT.
>   - make iminfo verify configuration signatures, not just image hashes
> 
> [...]

Applied to u-boot/next, thanks!

[1/8] test: include mapmem.h explicitly
      commit: e203526fb56e4db67679d23e92cdf1e00d7c92b5
[2/8] qemu-arm64: merge built-in DT
      commit: 9f6a014b9df8bc946ebed753b8e727c95d79a475
[3/8] mkimage: define log_err and log_info
      commit: 65e46af5c9c990bcc96fb39bd0bfe1b375771fcb
[4/8] image-fit-sig: Optionally require signatures
      commit: 38dc777ba6577f124605b3cc32fcb9af48e29512
[5/8] test: vboot: handle CONFIG_FIT_REQUIRE_CONFIG_SIGS in test_vboot
      commit: 947399c837bb0480b65fca2fbd5b806349849a48
[6/8] iminfo: also verify signatures
      commit: 7946505bdaf92831b3b7a889aaabcf13ae12c174
[7/8] test: vboot: refactor run_bootm
      commit: e4292038944c6251670d2aeca271cbba0e0d0894
[8/8] test: vboot: add iminfo checks
      commit: fb9670e004b5f32fc18301514884f0bde5a0084b
-- 
Tom