From mboxrd@z Thu Jan 1 00:00:00 1970 From: Marek Vasut Date: Sat, 5 Jan 2013 09:25:25 +0100 Subject: [U-Boot] [RFC PATCH 37/44] mkimage: Add -K to write public keys to an FDT blob In-Reply-To: <1357350734-13737-38-git-send-email-sjg@chromium.org> References: <1357350734-13737-1-git-send-email-sjg@chromium.org> <1357350734-13737-38-git-send-email-sjg@chromium.org> Message-ID: <201301050925.25341.marex@denx.de> List-Id: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: u-boot@lists.denx.de Dear Simon Glass, > FIT image verification requires public keys. Add a convenient option to > mkimage to write the public keys to an FDT blob when it uses then for > signing an image. This allows us to use: > > mkimage -f test.its -K dest.dtb -k keys test.fit > > and have the signatures written to test.fit and the corresponding public > keys written to dest.dtb. Then dest.dtb can be used as the control FDT > for U-Boot (CONFIG_OF_CONTROL), thus providing U-Boot with access to the > public keys it needs. > > Signed-off-by: Simon Glass Reviewed-by: Marek Vasut Best regards, Marek Vasut